#!/usr/bin/env bash
set -euo pipefail

: "${GH_TOKEN:?GitHub workflow token is required}"
: "${GH_REPO:?GitHub repository is required}"
: "${ACTIONS_ID_TOKEN_REQUEST_URL:?Workflow needs id-token: write}"
: "${ACTIONS_ID_TOKEN_REQUEST_TOKEN:?Workflow needs id-token: write}"
gh api "repos/$GH_REPO" --silent
curl --fail --silent --show-error https://pypi.org/pypi/langsmith/json >/dev/null
echo "GitHub authentication, OIDC availability and registry reachability checked."
echo "Trusted-publisher registration and registry write permission still require separate verification."
