test.yml

name: CI

permissions: {}

on:
  push:
  pull_request:
  workflow_dispatch:

env:
  FOUNDRY_PROFILE: ci

jobs:
  check:
    name: Foundry project
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v5
        with:
          persist-credentials: false
          submodules: recursive

      - name: Install Foundry
        uses: foundry-rs/foundry-toolchain@v1

      - name: Show Forge version
        run: forge --version

      - name: Run Forge fmt
        run: forge fmt --check

      - name: Run Forge build
        run: forge build --sizes

      # Deterministic, RPC-free layers: unit, adversarial, fuzz, invariant, and
      # the non-fork integration lifecycle. These must always pass.
      - name: Run Forge tests (local)
        run: forge test -vvv --no-match-path 'test/integration/*.fork.t.sol'

      # Fork layer (Aave / Morpho / Compound / Pendle on Arbitrum). Each test
      # self-skips when ARBITRUM_RPC_URL is unset, so this step stays green on
      # forks/PRs without the secret and exercises the real protocols when it is
      # provided. Set the ARBITRUM_RPC_URL repository secret to enable.
      - name: Run Forge fork tests
        env:
          ARBITRUM_RPC_URL: ${{ secrets.ARBITRUM_RPC_URL }}
          ARBITRUM_FORK_BLOCK: ${{ vars.ARBITRUM_FORK_BLOCK }}
        run: forge test -vvv --match-path 'test/integration/*.fork.t.sol'