#!/bin/sh
# Smoke test for the custom scripts milestone (f7836bef). Not production.
# Proves: the platform fetched THIS script at a pinned sha, verified its
# bundle digest, installed it read-only and executed it. Prints no secrets.
set -eu
echo "csw-smoke: custom script executed"
echo "csw-smoke: cwd=$(pwd) uid=$(id -u)"
echo "csw-smoke: script=$0"
# count (never print) credential-looking environment variable NAMES
n=$(env | cut -d= -f1 | grep -ciE 'token|secret|password|api_key' || true)
echo "csw-smoke: credential-looking env var names visible to the script: ${n}"
echo "csw-smoke: OK"