namespace :rs do
  desc "Backfill remoteStorage token digests and re-key Redis authorization keys (idempotent)"
  task rekey_tokens: :environment do
    result = RemoteStorageManager::RekeyTokens.call

    if result.skipped
      puts "remote_storage_authorizations.token column is gone; nothing to re-key."
    else
      puts "Re-keyed #{result.rekeyed} authorization(s); removed #{result.legacy_removed} legacy Redis key(s)."
    end
  end
end