{ pkgs, ... }:

{
  scripts.cachix-push.exec = ''
    set -eu

    if [ -z "''${CACHIX_AUTH_TOKEN:-}" ] && [ -z "''${CACHIX_SIGNING_KEY:-}" ]; then
      echo "error: set CACHIX_AUTH_TOKEN=... or CACHIX_SIGNING_KEY before running devenv-cachix-push" >&2
      exit 1
    fi

    set --
    for path in \
      .devenv/gc/shell \
      .devenv/profile \
      .devenv/gc/task-config-devenv-config-task-config \
      .devenv/gc/test-devenv-config-test \
      .devenv/gc/changelog-json-devenv-config-changelog-json
    do
      if [ -e "$path" ]; then
        set -- "$@" "$(readlink -f "$path")"
      fi
    done

    if [ "$#" -eq 0 ]; then
      echo "error: no devenv store paths found; run this through 'devenv shell devenv-cachix-push'" >&2
      exit 1
    fi

    ${pkgs.cachix}/bin/cachix push rssbase "$@"
  '';
}