Setup

One calendar, two lives.

Sign in with the Google account that owns the children's calendars. Bakaláři credentials are deliberately not requested here.

Google sign-in is not configured yet.
Set GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, and AUTH_SECRET in the deployment environment.

Requested permission: read-only access to calendars you choose. No calendar event is modified.