1 files changed, 33 insertions, 0 deletions
diff --git a/bin/prod_secrets b/bin/prod_secrets
new file mode 100755
index 0000000..68cc6d9
--- /dev/null
+++ b/bin/prod_secrets
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Force GPG to use terminal-based pinentry (required for SSH sessions)
+export GPG_TTY=$(tty)
+
+echo "Checking production secrets for Dispatch..." >&2
+echo "" >&2
+
+# --- OpenCode Go API Key (shared across environments) ---
+
+if gopass show -o projects/ai-api/opencode_go_key &>/dev/null; then
+  echo "[ok] OpenCode Go API key exists" >&2
+else
+  echo "OpenCode Go API key not found in gopass." >&2
+  echo "" >&2
+  echo "  1. Go to https://opencode.ai/auth" >&2
+  echo "  2. Sign in and copy your API key" >&2
+  echo "  3. Paste it below" >&2
+  echo "" >&2
+  read -rp "Enter your OpenCode Go API key: " OPENCODE_KEY
+  echo "$OPENCODE_KEY" | gopass insert -f projects/ai-api/opencode_go_key
+  echo "[ok] OpenCode Go API key stored" >&2
+fi
+
+echo "" >&2
+echo "All production secrets are configured. Outputting .env:" >&2
+echo "" >&2
+
+# --- Output .env format to stdout ---
+
+echo "OPENCODE_API_KEY=$(gopass show -o projects/ai-api/opencode_go_key)"
+echo "DISPATCH_MODEL=deepseek-v4-flash-free"