• Google Workspace for Education with Gemini turned on for the student organizational units you want to watch.
• Vault licenses for those students. Vault is where Gemini activity is retained; without it, every export comes back empty.
• A super-admin account with Vault privileges (manage matters, manage exports) and Admin SDK read. Everything runs as this account.
• Optional: a Gemini API key from Google AI Studio for the triage step. Without it, matches are still flagged, just without an AI verdict.

I want to set up Vaulter in my Google Workspace for Education district.
Repo: https://github.com/Orono-Public-Schools/Vaulter
Guide: https://orono-public-schools.github.io/Vaulter/setup.html

Work through the guide with me, in order:

1. Clone the repo. Read README.md and docs/setup.html before doing anything else.
2. Install clasp (npm install -g @google/clasp) and run `clasp login`. I will
   finish the browser sign-in as our super-admin and tell you when it is done.
3. In apps-script/, run `clasp create --type sheets --title "Vaulter" --rootDir src`
   to make a new Google Sheet with a bound Apps Script project, then `clasp push`
   to load the code. Give me the Sheet URL and the script URL (`clasp open`).
4. From here, tell me exactly what to do for each step only I can do, one step at
   a time, and wait for me to confirm before moving on:
   - run setupSheets in the editor and approve the permissions prompt
   - fill the Setup, App_Config, Alerts_Config and Access_List tabs
   - add GEMINI_API_KEY and later DASHBOARD_URL as script properties
   - deploy as a web app: execute as Me, access anyone within my domain
   - run installTrigger, then press Run import now in the dashboard
5. Do not edit anything under apps-script/src for my district. Configuration
   lives in the Sheet and in script properties. Never put keys or IDs in files.
6. When the first run finishes, help me read Run_Log and the dashboard, and use
   the troubleshooting table at the end of the guide if something is off.

Checklist

Do this

1. 1Create a new Google Sheet and name it Vaulter.
2. 2Open the script editor: Extensions›Apps Script. A new tab opens with an empty project.
3. 3Turn on the manifest: click the gear (Project Settings) and tick Show "appsscript.json" manifest file in editor.
4. 4Back in the Editor, use the + beside Files to add each file from the repo's apps-script/src folder with the same name. Script for .js, HTML for .html. Paste each file's contents. Replace the manifest's contents too; it carries the OAuth scopes. Delete the default Code.gs.

Where to click

You should see

Checklist

Do this

1. 1In the editor toolbar, open the function dropdown and pick setupSheets.
2. 2Press Run.
3. 3A permissions prompt appears the first time. Choose your admin account, review the scopes and press Allow. It asks for Vault, Admin SDK read, Sheets, Gmail send and triggers, all on your own account.
4. 4Switch back to the Sheet tab in your browser.

Where to click

You should see

Checklist

Do this

1. 1On the Setup tab, fill column B: which OUs to import, the date range and the schedule.
2. 2On the App_Config tab, set who gets the alert email and how it appears.
3. 3On the Access_List tab, add yourself with role Admin, then each reviewer.
4. 4Back in the script editor, Project Settings›Script properties›Add script property and add the Gemini key.

Where to click

Checklist

Do this

1. 1In the editor, top right: Deploy›New deployment.
2. 2Click the gear beside Select type and choose Web app.
3. 3Fill the dialog: Description Vaulter dashboard, Execute as Me, Who has access Anyone within your domain. Press Deploy and copy the Web app URL.
4. 4Add a script property DASHBOARD_URL with that URL, so the Sheet's Vaulter menu opens it.
5. 5Open the URL. Your account is on Access_List, so it loads. Add other reviewers on the Access page. The Demo switch in the header shows fictional sample data for walkthroughs.

Where to click

You should see

Checklist

Do this

1. 1In the editor, pick installTrigger in the function dropdown and press Run. It creates the scheduled runPipeline trigger at the configured time. Saving settings in the dashboard reinstalls it too.
2. 2In the dashboard, press Run import now. The first run creates a Vault matter named "Vaulter — Gemini Activity Imports", queues one export per OU, and installs a five-minute checker trigger that collects each export when Vault finishes it, usually within the hour.
3. 3Watch the readout strip, then the Run_Log table on the Settings page.

You should see

Checklist