Function push

tools/credential-tools.mjs:129–173

()

}

function push() {
  if (!existsSync(ENCRYPTED_PATH)) {
    console.error(`Missing ${ENCRYPTED_PATH}. Run: npm run credentials:encrypt`);
    process.exit(1);
  }

  const bucket = process.env.R2_BUCKET_NAME;
  if (!bucket) {
    console.error(
      'Set R2_BUCKET_NAME in .env (optional R2_OBJECT_KEY). Authenticate with wrangler (e.g. wrangler login or CLOUDFLARE_API_TOKEN with R2 write).'
    );
    process.exit(1);
  }

  const wranglerBin = join(repoRoot, 'node_modules', 'wrangler', 'bin', 'wrangler.js');
  if (!existsSync(wranglerBin)) {
    console.error('Missing wrangler. Run npm install.');
    process.exit(1);
  }

  const objectPath = `${bucket}/${R2_OBJECT_KEY}`;
  try {
    execFileSync(
      process.execPath,
      [
        wranglerBin,
        'r2',
        'object',
        'put',
        objectPath,
        '--file',
        ENCRYPTED_PATH,
        '--content-type',
        'application/json',
        '--remote',
        '-y'
      ],
      { stdio: 'inherit', cwd: repoRoot, env: process.env }
    );
  } catch {
    process.exit(1);
  }

  console.log(`Uploaded r2://${objectPath}`);
}

async function presign() {
  const env = requireR2S3Credentials('presign');