test.yml

name: Fable source CI

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]

permissions:
  contents: read

jobs:
  lint-and-syntax:
    name: "Code Quality & Security Probes"
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
        with:
          python-version: '3.12'
          cache: 'pip'
      - name: Install build tooling & static security tools
        run: |
          python -m pip install --upgrade pip
          python -m pip install setuptools==75.8.0 wheel==0.45.1
          python -m pip install -e .
      - name: Run Static AST & Bytecode Policy Checks
        run: |
          python run_tests.py --policy-only
      - name: Shell script validation
        shell: bash
        run: |
          sh -n install.sh

  test-matrix:
    name: "test-${{ matrix.os }}-py${{ matrix.python }}"
    needs: [lint-and-syntax]
    runs-on: "${{ matrix.os }}"
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        python: ['3.10', '3.11', '3.12']
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
        with:
          python-version: '${{ matrix.python }}'
          cache: 'pip'
      - name: Install dependencies and editable package
        run: |
          python -m pip install --upgrade pip
          python -m pip install setuptools==75.8.0 wheel==0.45.1
          python -m pip install -e .
      - name: Run Test Suites
        run: |
          python run_tests.py --suite-only
      - name: Validate shell wrapper and dry-run
        if: "${{ runner.os != 'Windows' }}"
        shell: bash
        run: |
          ./install.sh --dry-run --yes
      - name: Validate PowerShell syntax & dry-run
        if: "${{ runner.os == 'Windows' }}"
        shell: pwsh
        run: |
          $errors = @(); foreach ($path in @('install.ps1', 'install-antigravity.ps1')) {
            $tokens = $null; $parse = $null
            [System.Management.Automation.Language.Parser]::ParseFile((Join-Path $PWD $path), [ref]$tokens, [ref]$parse) | Out-Null
            $errors += $parse
          }
          if ($errors.Count -gt 0) { $errors | Format-List *; exit 1 }
          & ./install.ps1 -DryRun -Yes
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }