#!/usr/bin/env bash

errors=()

# Publishing uses PyPI trusted publishing (GitHub OIDC). No PYPI_TOKEN is required.
if ! grep -q 'id-token: write' .github/workflows/publish-pypi.yml; then
  errors+=("publish-pypi.yml is missing id-token: write, required for PyPI trusted publishing.")
fi

lenErrors=${#errors[@]}

if [[ lenErrors -gt 0 ]]; then
  echo -e "Found the following errors in the release environment:\n"

  for error in "${errors[@]}"; do
    echo -e "- $error\n"
  done

  exit 1
fi

echo "The environment is ready to push releases!"
