# Cloud Function Tools

This directory contains various tools that are deployed as Google Cloud Functions.

## Tools Overview

### Weather Tools
- **get-weather-tool**: Retrieves current weather data for a specified location

## Prerequisites

1. **Google Cloud Project Setup**:
   ```bash
   # Set your project ID
   export GOOGLE_CLOUD_PROJECT=your-project-id
   gcloud config set project $GOOGLE_CLOUD_PROJECT
   ```

2. **Enable Required APIs**:
   ```bash
   gcloud services enable \
     cloudfunctions.googleapis.com \
     secretmanager.googleapis.com \
     calendar-json.googleapis.com
   ```

## Secret Management Setup

1. **Create Service Account for Functions**:
   ```bash
   # Create service account for weather functions
   gcloud iam service-accounts create weather-function-sa \
       --description="Service account for Weather Cloud Functions" \
       --display-name="Weather Function SA"
   ```

2. **Grant Secret Manager Access**:
   ```bash
   # Grant access to weather function service account
   gcloud projects add-iam-policy-binding $GOOGLE_CLOUD_PROJECT \
       --member="serviceAccount:weather-function-sa@$GOOGLE_CLOUD_PROJECT.iam.gserviceaccount.com" \
       --role="roles/secretmanager.secretAccessor"
   ```

3. **Store API Keys in Secret Manager**:
   ```bash
   # Store OpenWeather API key
   echo -n "your-openweather-api-key" | \
     gcloud secrets create OPENWEATHER_API_KEY \
     --data-file=- \
     --replication-policy="automatic"

   # Store Calendar service account key (after downloading from Google Cloud Console)
   gcloud secrets create CALENDAR_SERVICE_ACCOUNT \
     --data-file=path/to/service-account-key.json \
     --replication-policy="automatic"
   ```

## Weather Tools Setup

1. **Get OpenWeather API Key**:
   - Sign up at [OpenWeatherMap](https://openweathermap.org/api)
   - Get your API key
   - Store it in Secret Manager (see above)

2. **Deploy Weather Functions**:
   ```bash
   # Deploy get-weather function
   gcloud functions deploy get-weather-tool \
       --runtime python310 \
       --trigger-http \
       --entry-point=get_weather \
       --service-account="weather-function-sa@$GOOGLE_CLOUD_PROJECT.iam.gserviceaccount.com" \
       --source=cloud-functions/weather-tools/get-weather-tool \
       --region=us-central1
   ```

## Testing the Functions

### Weather Functions
```bash
# Test get-weather with city
curl "https://YOUR_FUNCTION_URL/get-weather-tool?city=London"

# Test get-weather with coordinates
curl "https://YOUR_FUNCTION_URL/get-weather-tool?lat=51.5074&lon=-0.1278"
```

## Project Structure
```
cloud-functions/
├── weather-tools/
│   ├── get-weather-tool/
│   │   ├── main.py
│   │   └── requirements.txt
```

## Security Notes
- Never commit API keys or service account credentials to version control
- Use Secret Manager for all sensitive credentials
- Consider adding authentication to your Cloud Functions if needed
- Regularly rotate API keys and service account credentials
- Monitor function access logs for any suspicious activity