feat: expand Windows smoke test with init, test, build, and docker run

Add end-to-end verification steps to the Windows CI job: initialize the
generated project, run tests, build the Docker image, verify the image
runs, and confirm the zenable CLI is functional. Also add diagnostic
logging to the post-gen hook when the zenable binary cannot be found
after installation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: JonZeolla

.github/workflows/ci.yml

@@ -208,6 +208,31 @@ jobs:
           }
 
           Write-Host "Windows smoke test passed: project generated and verified successfully"
+      - name: Initialize generated project
+        shell: bash
+        run: |
+          cd "$RUNNER_TEMP/replace-me"
+          task -v init
+      - name: Run tests
+        shell: bash
+        run: |
+          cd "$RUNNER_TEMP/replace-me"
+          task -v test
+      - name: Build Docker image
+        shell: bash
+        run: |
+          cd "$RUNNER_TEMP/replace-me"
+          task -v build
+      - name: Verify Docker image
+        shell: bash
+        run: |
+          docker run --rm --entrypoint python3 zenable-io/replace-me:latest \
+            -c "from replace_me import __version__; print(__version__)"
+      - name: Verify zenable CLI
+        shell: bash
+        run: |
+          export PATH="$HOME/.zenable/bin:$PATH"
+          zenable version
   finalizer:
     # This gives us something to set as required in the repo settings. Some projects use dynamic fan-outs using matrix strategies and the fromJSON function, so
     # you can't hard-code what _should_ run vs not. Having a finalizer simplifies that so you can just check that the finalizer succeeded, and if so, your

hooks/post_gen_project.py

@@ -216,14 +216,18 @@ def _install_zenable_binary() -> bool:
         install_script = _download_url(install_url)
         _verify_checksum(install_script, expected_checksum)
 
-        subprocess.run(
+        result = subprocess.run(
             cmd,
             input=install_script,
             check=True,
             capture_output=True,
             timeout=120,
             env=env,
         )
+        if result.stdout:
+            LOG.info("Zenable installer stdout: %s", result.stdout.decode("utf-8", errors="replace").strip())
+        if result.stderr:
+            LOG.info("Zenable installer stderr: %s", result.stderr.decode("utf-8", errors="replace").strip())
         return True
     except ValueError:
         LOG.warning("Zenable install script checksum verification failed")
@@ -260,6 +264,14 @@ def opportunistically_install_zenable_tools() -> None:
 
         zenable_bin = _find_zenable_binary()
         if not zenable_bin:
+            # Diagnostic: log what the installer actually created
+            zenable_dir = Path.home() / ".zenable"
+            if zenable_dir.exists():
+                contents = [str(p.relative_to(zenable_dir)) for p in zenable_dir.rglob("*")]
+                LOG.warning("Install dir %s contents: %s", zenable_dir, contents)
+            else:
+                LOG.warning("Install directory does not exist: %s", zenable_dir)
+            LOG.warning("Current PATH: %s", os.environ.get("PATH", ""))
             LOG.warning("Zenable CLI was installed but could not be found in PATH or default location.")
             return