validate.yml

name: Validate Setup Script

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main, develop]

jobs:
  validate-linux:
    name: Validate Linux Setup
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Make scripts executable
        run: chmod +x setup.sh scripts/linux/setup.sh scripts/linux/tools/*.sh

      - name: Run setup script
        run: bash setup.sh
        env:
          DEBIAN_FRONTEND: noninteractive

      - name: Validate zsh installed
        run: |
          if ! command -v zsh &>/dev/null; then
            echo "❌ FAIL: zsh not found on PATH"
            exit 1
          fi
          echo "✅ zsh: $(zsh --version)"

      - name: Validate uv installed
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          if ! command -v uv &>/dev/null; then
            echo "❌ FAIL: uv not found on PATH"
            exit 1
          fi
          echo "✅ uv: $(uv --version)"

      - name: Validate nvm and Node.js installed
        run: |
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
          if ! command -v nvm &>/dev/null; then
            echo "❌ FAIL: nvm not available"
            exit 1
          fi
          if ! command -v node &>/dev/null; then
            echo "❌ FAIL: node not found on PATH"
            exit 1
          fi
          echo "✅ nvm: $(nvm --version)"
          echo "✅ node: $(node --version)"
          echo "✅ npm: $(npm --version)"

      - name: Validate gh CLI installed
        run: |
          if ! command -v gh &>/dev/null; then
            echo "❌ FAIL: gh not found on PATH"
            exit 1
          fi
          echo "✅ gh: $(gh --version | head -1)"

      - name: Test idempotency (run setup a second time)
        run: |
          echo "--- Running setup script a second time to test idempotency ---"
          bash setup.sh
          echo "✅ Second run completed without errors"

      - name: Run alias unit tests
        run: |
          chmod +x tests/test_aliases.sh
          bash tests/test_aliases.sh

      - name: Run alias parity test
        run: |
          chmod +x tests/test_alias_parity.sh
          bash tests/test_alias_parity.sh

      - name: Run idempotency test suite
        run: bash tests/test_idempotency.sh

      - name: Run nvm bootstrap tests
        run: bash tests/test_nvm_bootstrap.sh

      - name: Run shared logging tests
        run: bash tests/test_shared_logging.sh

      - name: Configure git for pre-commit hygiene test
        run: |
          git config --global init.defaultBranch master
          git config core.hooksPath hooks

      - name: Run pre-commit hygiene tests
        run: bash tests/test_precommit_hygiene.sh

      - name: Run tool version tests
        run: bash tests/test_tool_versions.sh

  validate-macos:
    name: Validate macOS Setup
    runs-on: macos-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Make scripts executable
        run: chmod +x setup.sh scripts/linux/setup.sh scripts/linux/tools/*.sh

      - name: Verify Homebrew available
        run: |
          if ! command -v brew &>/dev/null; then
            echo "FAIL: Homebrew not found on macOS runner"
            exit 1
          fi
          echo "brew: $(brew --version | head -1)"

      - name: Verify shell tools
        run: |
          echo "bash: $(bash --version | head -1)"
          echo "zsh: $(zsh --version)"

      - name: Run setup script
        run: bash setup.sh

      - name: Validate zsh installed
        run: |
          if ! command -v zsh &>/dev/null; then
            echo "FAIL: zsh not found on PATH"
            exit 1
          fi
          echo "zsh: $(zsh --version)"

      - name: Validate uv installed
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          if ! command -v uv &>/dev/null; then
            echo "FAIL: uv not found on PATH"
            exit 1
          fi
          echo "uv: $(uv --version)"

      - name: Validate nvm and Node.js installed
        run: |
          export NVM_DIR="$HOME/.nvm"
          [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
          if ! command -v nvm &>/dev/null; then
            echo "FAIL: nvm not available"
            exit 1
          fi
          if ! command -v node &>/dev/null; then
            echo "FAIL: node not found on PATH"
            exit 1
          fi
          echo "nvm: $(nvm --version)"
          echo "node: $(node --version)"
          echo "npm: $(npm --version)"

      - name: Validate gh CLI installed
        run: |
          if ! command -v gh &>/dev/null; then
            echo "FAIL: gh not found on PATH"
            exit 1
          fi
          echo "gh: $(gh --version | head -1)"

      - name: Test idempotency (run setup a second time)
        run: |
          echo "--- Running setup script a second time to test idempotency ---"
          bash setup.sh
          echo "Second run completed without errors"

      - name: Run tool version tests
        run: bash tests/test_tool_versions.sh

      - name: Run idempotency test suite
        run: bash tests/test_idempotency.sh

      - name: Run nvm bootstrap tests
        run: bash tests/test_nvm_bootstrap.sh

      - name: Run shared logging tests
        run: bash tests/test_shared_logging.sh

      - name: Configure git for pre-commit hygiene test
        run: |
          git config --global init.defaultBranch master
          git config core.hooksPath hooks

      - name: Run pre-commit hygiene tests
        run: bash tests/test_precommit_hygiene.sh

  lint-shell-scripts:
    name: Lint Shell Scripts
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install shellcheck
        run: sudo apt-get install -y shellcheck

      - name: Lint setup.sh
        run: shellcheck setup.sh

      - name: Lint scripts/linux/setup.sh
        run: shellcheck scripts/linux/setup.sh

      - name: Lint tool scripts
        run: |
          for script in scripts/linux/tools/*.sh; do
            echo "Checking: $script"
            shellcheck "$script"
          done

      - name: Lint config/dotfiles/.aliases
        run: shellcheck -s bash config/dotfiles/.aliases

  lint-powershell:
    name: Lint PowerShell Scripts
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install PowerShell
        run: sudo apt-get install -y powershell

      - name: Install PSScriptAnalyzer
        run: pwsh -Command "Install-Module -Name PSScriptAnalyzer -Force -Scope CurrentUser"

      - name: Analyze setup.ps1
        run: pwsh -Command "Invoke-ScriptAnalyzer -Path setup.ps1 -Recurse -EnableExit"

      - name: Analyze scripts/windows/setup.ps1
        run: pwsh -Command "Invoke-ScriptAnalyzer -Path scripts/windows/setup.ps1 -EnableExit"

  validate-powershell:
    name: Validate PowerShell Functions
    runs-on: windows-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run Remove-CustomItem regression test
        run: pwsh tests/test_remove_custom_item.ps1

      - name: Configure git hooks path
        run: git config core.hooksPath hooks

      - name: Run git hooks tests
        run: pwsh tests/test_git_hooks.ps1

      - name: Run changelog fold tests
        run: pwsh tests/test_changelog_fold.ps1

      - name: Run sprint-end labels tests
        run: pwsh tests/test_sprint_end_labels.ps1

  validate-ps51:
    name: Validate PowerShell 5.1 Compatibility
    runs-on: windows-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Check PowerShell version
        shell: powershell
        run: |
          Write-Host "PowerShell version: $($PSVersionTable.PSVersion)"

      - name: Syntax check setup.ps1 (PS 5.1)
        shell: powershell
        run: |
          $errors = $null
          $null = [System.Management.Automation.Language.Parser]::ParseFile(
            "$env:GITHUB_WORKSPACE\scripts\windows\setup.ps1",
            [ref]$null,
            [ref]$errors
          )
          if ($errors.Count -gt 0) {
            $errors | ForEach-Object { Write-Error $_.Message }
            exit 1
          }
          Write-Host "Syntax check passed"

      - name: Syntax check setup.ps1 (root)
        shell: powershell
        run: |
          $errors = $null
          $null = [System.Management.Automation.Language.Parser]::ParseFile(
            "$env:GITHUB_WORKSPACE\setup.ps1",
            [ref]$null,
            [ref]$errors
          )
          if ($errors.Count -gt 0) {
            $errors | ForEach-Object { Write-Error $_.Message }
            exit 1
          }
          Write-Host "Syntax check passed"

      - name: Run PSScriptAnalyzer under PS 5.1
        shell: powershell
        run: |
          Install-Module -Name PSScriptAnalyzer -Force -Scope CurrentUser
          $results = @()
          $results += Invoke-ScriptAnalyzer -Path "$env:GITHUB_WORKSPACE\scripts\windows\setup.ps1"
          $results += Invoke-ScriptAnalyzer -Path "$env:GITHUB_WORKSPACE\setup.ps1"
          if ($results.Count -gt 0) {
            $results | Format-Table -AutoSize
            Write-Error "PSScriptAnalyzer found $($results.Count) issue(s)"
            exit 1
          }
          Write-Host "PSScriptAnalyzer passed (PS 5.1)"

      - name: Test PS 5.1 profile write
        shell: powershell
        run: |
          . "$env:GITHUB_WORKSPACE\scripts\windows\tools\profile.ps1"
          Write-PowerShellProfile
          $ps51Profile = Join-Path $HOME "Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1"
          if (-not (Test-Path $ps51Profile)) {
            Write-Error "PS 5.1 profile not written: $ps51Profile"
            exit 1
          }
          Write-Host "PS 5.1 profile exists: $ps51Profile"

      - name: Run PS 5.1 compatibility tests
        shell: powershell
        run: |
          powershell -ExecutionPolicy Bypass -File tests\test_windows_setup.ps1

      - name: Configure git hooks path
        shell: powershell
        run: |
          git config core.hooksPath hooks

      - name: Run git hooks tests (PS 5.1)
        shell: powershell
        run: |
          powershell -ExecutionPolicy Bypass -File tests\test_git_hooks.ps1

      - name: Run sprint-end labels tests (PS 5.1)
        shell: powershell
        run: |
          powershell -ExecutionPolicy Bypass -File tests\test_sprint_end_labels_pwsh.ps1