Map Leads v2

#!/usr/bin/env bash # scripts/setup-gws.sh — run once to provision all GCP resources set -euo pipefail PROJECT_ID="${GCP_PROJECT_ID:?Set GCP_PROJECT_ID}" SA_NAME="map-leads-sa" SA_EMAIL="${SA_NAME}@${PROJECT_ID}.iam.gserviceaccount.com" KEY_FILE="credentials/map-leads-sa.json" echo "==> Authenticating..." gcloud auth login --quiet gcloud config set project "$PROJECT_ID" echo "==> Enabling APIs..." gcloud services enable \ places.googleapis.com \ mybusinessbusinessinformation.googleapis.com \ mybusinessaccountmanagement.googleapis.com \ businessprofileperformance.googleapis.com echo "==> Creating service account..." gcloud iam service-accounts create "$SA_NAME" \ --display-name="Map Leads SA" --quiet 2>/dev/null || echo "SA exists" echo "==> Granting roles..." for ROLE in \ "roles/businessprofileperformance.viewer" \ "roles/iam.serviceAccountTokenCreator"; do gcloud projects add-iam-policy-binding "$PROJECT_ID" \ --member="serviceAccount:${SA_EMAIL}" --role="$ROLE" --quiet done echo "==> Generating SA key..." mkdir -p credentials gcloud iam service-accounts keys create "$KEY_FILE" \ --iam-account="$SA_EMAIL" --quiet echo "Key written → $KEY_FILE" echo "==> Setting ADC..." export GOOGLE_APPLICATION_CREDENTIALS="$(pwd)/$KEY_FILE" echo "GOOGLE_APPLICATION_CREDENTIALS=$(pwd)/$KEY_FILE" >> .env echo "==> Creating Places API key..." gcloud services api-keys create \ --api-target=service=places.googleapis.com \ --display-name="map-leads-places" 2>/dev/null || true echo "Done. Add $KEY_FILE to .gitignore and CF Workers secrets."

cat credentials/map-leads-sa.json | \ wrangler secret put GOOGLE_SA_JSON --name map-leads-analyzer # (repeat for each worker that calls GBP API)