#!/usr/bin/env bash
# Shell helper to export secrets from a single dotenv file.
# Usage: source scripts/load-secrets.sh

set -euo pipefail

ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
SECRETS_FILE="${SECRETS_FILE:-$ROOT_DIR/creds/secrets.env}"

if [[ ! -f "$SECRETS_FILE" ]]; then
  echo "secrets file not found: $SECRETS_FILE (skipping)" >&2
  return 0 2>/dev/null || exit 0
fi

echo "Loading secrets from $SECRETS_FILE"
set -a
source "$SECRETS_FILE"
set +a