{ pkgs }:
[
  (pkgs.writeScriptBin "update-deps" "nix flake update --commit-lock-file")

  (pkgs.writeShellScriptBin "gcloud-auth" ''
    set -xeuo pipefail
    ${pkgs.google-cloud-sdk}/bin/gcloud auth print-identity-token > /dev/null 2>&1 || \
    ${pkgs.google-cloud-sdk}/bin/gcloud auth login --quiet
    ${pkgs.google-cloud-sdk}/bin/gcloud auth application-default print-access-token > /dev/null 2>&1 || \
    ${pkgs.google-cloud-sdk}/bin/gcloud auth application-default login --quiet
  '')

  (pkgs.writeShellScriptBin "tf-state-setup" ''
    set -xeuo pipefail
    ${pkgs.google-cloud-sdk}/bin/gcloud storage buckets describe \
      gs://fcuny-infra-tofu-state \
      --project=fcuny-infra \
      --quiet || \

    ${pkgs.google-cloud-sdk}/bin/gcloud storage buckets create \
      gs://fcuny-infra-tofu-state \
      --project=fcuny-infra \
      --uniform-bucket-level-access \
      --public-access-prevention \
      --location=us-west1 \
      --default-storage-class=STANDARD \
      --quiet
  '')
]