#!/bin/bash
# Google Cloud Connector deployment and invocation

set -euo pipefail

export TS_API_KEY_ID="${TS_API_KEY_ID:-your_api_key_id}"
export TS_API_KEY="${TS_API_KEY:-your_api_key}"

gcloud functions deploy pdf-sealer-gateway \
  --gen2 \
  --runtime=nodejs22 \
  --region=us-central1 \
  --source=. \
  --entry-point=seal \
  --trigger-http

TOKEN=$(gcloud auth print-identity-token)

curl -X POST https://REGION-PROJECT_ID.cloudfunctions.net/pdf-sealer-gateway/seal \
  -H "Authorization: Bearer ${TOKEN}" \
  -F "pdf=@document.pdf" \
  -F "apiKey=${TS_API_KEY}" \
  -F "apiKeyId=${TS_API_KEY_ID}" \
  --output sealed-document.pdf