tests.yml

name: Dataset lifecycle tests
on:
  push:
    branches: [main, develop/dataset-workflows, feature/grounded-text-candidates, feature/image-caption-exports, feature/selected-release-preview-20261006, feature/saved-dataset-selections-20261006, fix/saved-selection-intent-20261006, feature/explicit-metadata-filters-20261006, feature/bulk-real-import-20261006, integration/dataset-candidate-20261006, feature/annotated-caption-import-20261006, integration/dataset-caption-stage-20261006, feature/curation-diagnostics-20261006, feature/rights-note-correction-20261006, feature/instruction-responses-20261007, feature/labeled-text-import-20261007, feature/text-classification-proposals, feature/local-postgres-metadata-20261011, integration/workspaces-postgres-20261011, feature/workspace-image-runs-20261011]
  pull_request:
permissions:
  contents: read
jobs:
  lifecycle:
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:17
        env:
          POSTGRES_USER: tuldok_test
          POSTGRES_PASSWORD: isolated-ci-fixture
          POSTGRES_DB: tuldok_test
        ports:
          - 127.0.0.1:5432:5432
        options: >-
          --health-cmd "pg_isready -U tuldok_test -d tuldok_test"
          --health-interval 5s
          --health-timeout 5s
          --health-retries 12
    env:
      TULDOK_TRAINING_PYTHON: ${{ github.workspace }}/build/workspace-training/bin/python
      TULDOK_NATIVE_READER_PYTHON: ${{ github.workspace }}/build/workspace-training/bin/python
      TULDOK_DATABASE_URL: postgresql://tuldok_test:isolated-ci-fixture@127.0.0.1:5432/tuldok_test
      TULDOK_PROJECT_FILES_COLD_DATABASE_URL: postgresql://tuldok_project_cold:isolated-cold-fixture@127.0.0.1:5432/tuldok_project_cold
      TULDOK_QA_OUTPUT_ROOT: build/qa/external-project
      TULDOK_M2_FREEZE_MANIFEST: build/qa/external-project/product-manifest.json
      TULDOK_M3_FREEZE_MANIFEST: build/qa/external-project/product-manifest.json
      TULDOK_M4_FREEZE_MANIFEST: build/qa/external-project/product-manifest.json
      TULDOK_OWNER_MCP_MANIFEST: build/qa/external-project/product-manifest.json
      TULDOK_M5_CLIENTS_MANIFEST: build/qa/external-project/product-manifest.json
      TULDOK_M5_UI_FREEZE_MANIFEST: build/qa/external-project/product-manifest.json
      TULDOK_NATIVE_PUBLIC_FREEZE_MANIFEST: build/qa/external-project/product-manifest.json
    steps:
      - uses: actions/checkout@v4
      - name: Fetch the exact authored fixture used by canonical Release qualification
        run: |
          git fetch --no-tags --depth=1 origin 057c8abf571d62331486dc56ef43064e72f9d03a
          git cat-file -e 057c8abf571d62331486dc56ef43064e72f9d03a:examples/extensions/field-surrogate/v2/fixture.json
      - name: Check out pinned schema3 source for retained-run qualification
        uses: actions/checkout@v4
        with:
          ref: f1ecf7888a8dfa5b67ac8b087034226d533c682e
          path: build/legacy-schema3
          persist-credentials: false
      - uses: actions/setup-python@v5
        with:
          python-version: '3.12'
      - uses: actions/setup-node@v4
        with:
          node-version: '24'
      - name: Install independent WAV consumer
        run: sudo apt-get update && sudo apt-get install -y ffmpeg
      - run: python -m pip install -r requirements.txt -r requirements-spatial-qualification.txt
      - name: Prepare isolated external-project cold reconstruction and exact source subject
        run: |
          python - <<'PY'
          import hashlib, json, os, pathlib, subprocess
          import psycopg
          from psycopg import sql
          source = os.environ['TULDOK_DATABASE_URL']
          database = psycopg.conninfo.conninfo_to_dict(source)['dbname']
          # This job owns the disposable service and these fixed fixture names.
          with psycopg.connect(source, autocommit=True) as connection:
              connection.execute("CREATE ROLE tuldok_project_cold LOGIN PASSWORD 'isolated-cold-fixture' NOSUPERUSER NOCREATEDB NOCREATEROLE")
              connection.execute('CREATE DATABASE tuldok_project_cold OWNER tuldok_project_cold')
              connection.execute(sql.SQL('REVOKE CONNECT ON DATABASE {} FROM PUBLIC').format(sql.Identifier(database)))
          with psycopg.connect(os.environ['TULDOK_PROJECT_FILES_COLD_DATABASE_URL']) as connection:
              current, allowed = connection.execute('SELECT current_database(),has_database_privilege(current_user,%s,\'CONNECT\')', (database,)).fetchone()
              assert current != database and allowed is False
          paths = subprocess.check_output(['git', 'ls-files', '-z']).decode().split('\0')
          paths = sorted(p for p in paths if p and ((p.endswith('.py') and '/' not in p) or p.startswith(('static/', 'tests/', 'extension_schemas/', 'tuldok_extension_sdk/'))))
          subject = {'baseline': subprocess.check_output(['git', 'rev-parse', 'HEAD']).decode().strip(),
                     'qualification_copy': str(pathlib.Path.cwd()), 'parent_manifest_sha256': None,
                     'files': {p: hashlib.sha256(pathlib.Path(p).read_bytes()).hexdigest() for p in paths}}
          target = pathlib.Path(os.environ['TULDOK_M2_FREEZE_MANIFEST'])
          target.parent.mkdir(parents=True, exist_ok=True)
          target.write_text(json.dumps(subject, sort_keys=True, separators=(',', ':')) + '\n')
          print('External-project product files:', len(subject['files']))
          assert subject['files']
          PY
      - name: Verify field output preflight and unchanged admission state
        run: python -m unittest discover -s tests -p 'test_run_preflight*.py' -v
      - name: Verify same-attempt publication retention and recovery boundaries
        run: python -m unittest discover -s tests -p 'test_run_publication*.py' -v
      - name: Verify coordinator fault fences and explicit recovery with PostgreSQL
        run: python -m unittest discover -s tests -p 'test_run_coordinator_recovery.py' -v
      - name: Verify bounded owner phase timings with PostgreSQL
        run: python -m unittest discover -s tests -p 'test_run_phase_timings.py' -v
      - name: Verify exact phase UI contracts and bounded delivery
        run: |
          python -m unittest discover -s tests -p 'test_workspace_phase_timings.py' -v
          node tests/test_run_phase_controller.cjs
      - name: Verify exact scientific comparison transport and stale delivery
        run: |
          python -m unittest discover -s tests -p 'test_scientific_comparison_client.py' -v
          node tests/test_scientific_comparison_controller.cjs
      - run: python tests/qualify_spatial_retained_runs.py --legacy-root build/legacy-schema3 --report build/qa/spatial-retained-runs.json
      - run: python -m venv build/workspace-training
      - run: build/workspace-training/bin/python -m pip install -r requirements.txt -r requirements-training.txt
      - run: build/workspace-training/bin/python -m pip install -r requirements-spatial-qualification.txt
      - name: Verify one-fit evidence in the provisioned CPU training interpreter
        run: |
          build/workspace-training/bin/python -c "import numpy, sklearn, psycopg"
          build/workspace-training/bin/python -m unittest discover -s tests -p test_one_fit_evidence.py -v
      - run: build/workspace-training/bin/python -m unittest discover -s tests -p test_pointclouds.py
      - run: build/workspace-training/bin/python -m unittest discover -s tests -p test_volume_assets.py
      - run: build/workspace-training/bin/python -m unittest discover -s tests -p test_rheon_cpu_training.py
      - run: build/workspace-training/bin/python -m unittest discover -s tests -p test_rheon_evaluation.py
      - name: Verify actual native project Run fork Study custody and cold accounting
        env:
          PYTHONPATH: tests
          TULDOK_NATIVE_PROJECT_GO: '1'
          TULDOK_NATIVE_RETENTION_DIR: ${{ github.workspace }}/build/qa/external-project/native-retained
        run: |
          build/workspace-training/bin/python - <<'PY'
          import os, sys, unittest
          import numpy, sklearn, psycopg, torch
          assert os.environ['TULDOK_TRAINING_PYTHON'] == sys.executable
          names = [
              'test_project_native_run.NativeRunSaveAsTests.test_one_actual_native_run_save_as_cold_role_and_metadata_only_git_clone',
              'test_project_native_study.NativeStudyCustodyTests.test_actual_native_study_spent_budget_and_cold_history_require_fresh_admission',
              'test_project_native_study.NativeStudyCustodyTests.test_native_study_admission_canonical_ack_then_sql_failure_never_starts_training',
          ]
          loader = unittest.TestLoader()
          suite = loader.loadTestsFromNames(names)
          assert not loader.errors and suite.countTestCases() == len(names)
          result = unittest.TextTestRunner(verbosity=2).run(suite)
          sys.exit(0 if result.wasSuccessful() and result.testsRun == len(names) and not result.skipped else 1)
          PY
      - name: Create isolated optional agent verification environment
        run: python -m venv build/workspace-agent
      - run: build/workspace-agent/bin/python -m pip install -r requirements.txt
      - run: build/workspace-agent/bin/python -m pip install --require-hashes -r requirements-agent.lock
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p 'test_agent_*.py'
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p test_mcp_stdio.py
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p test_mcp_observer.py
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p test_interface_observation.py
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p test_experiments.py
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p test_experiment_lineage.py
      - run: node --check static/experiment-lineage.js
      - run: node tests/test_experiment_lineage_controller.cjs
      - run: build/workspace-agent/bin/python -m unittest discover -s tests -p test_artifact_segments.py
      - name: Verify real external-project SDK CLI MCP and current authority
        env:
          PYTHONPATH: tests
        run: |
          build/workspace-agent/bin/python - <<'PY'
          import mcp, sys, unittest
          loader = unittest.TestLoader()
          suite = loader.loadTestsFromName('test_project_files_m2_http.ProjectFilesM2HTTP.test_real_sdk_cli_mcp_roles_lost_reply_and_stale_binding')
          assert not loader.errors and suite.countTestCases() == 1
          result = unittest.TextTestRunner(verbosity=2).run(suite)
          sys.exit(0 if result.wasSuccessful() and result.testsRun == 1 and not result.skipped else 1)
          PY
      - name: Verify independent fork and extraction across actual owner transports
        env:
          PYTHONPATH: tests
        run: |
          build/workspace-agent/bin/python - <<'PY'
          import mcp, sys, unittest
          names = [
              'test_project_files_m4_clients_http.ProjectFilesM4ClientsHTTP.test_exact_file_revisions_save_as_and_current_role_through_sdk_cli_mcp',
              'test_project_transfer_clients_http.ProjectTransferClientsHTTP.test_owner_handoff_and_single_extraction_through_sdk_cli_and_real_mcp',
          ]
          loader = unittest.TestLoader()
          suite = loader.loadTestsFromNames(names)
          assert not loader.errors and suite.countTestCases() == len(names)
          result = unittest.TextTestRunner(verbosity=2).run(suite)
          sys.exit(0 if result.wasSuccessful() and result.testsRun == len(names) and not result.skipped else 1)
          PY
      - name: Verify finite owner MCP modes and denial boundaries
        env:
          PYTHONPATH: tests
        run: |
          build/workspace-agent/bin/python - <<'PY'
          import mcp, sys, unittest
          loader = unittest.TestLoader()
          suite = loader.loadTestsFromName('test_project_files_owner_mcp')
          selected = suite.countTestCases()
          assert not loader.errors and selected > 0
          result = unittest.TextTestRunner(verbosity=2).run(suite)
          sys.exit(0 if result.wasSuccessful() and result.testsRun == selected and not result.skipped else 1)
          PY
      - name: Verify real native project SDK CLI MCP and zero-GO recovery
        env:
          PYTHONPATH: tests
          TULDOK_NATIVE_PROJECT_GO: '1'
        run: |
          build/workspace-agent/bin/python - <<'PY'
          import mcp, sys, unittest
          loader = unittest.TestLoader()
          suite = loader.loadTestsFromName('test_project_native_clients_http.NativePublicClientsHTTP.test_real_native_preflight_replay_zero_go_failure_and_original_phase_recovery')
          assert not loader.errors and suite.countTestCases() == 1
          result = unittest.TextTestRunner(verbosity=2).run(suite)
          sys.exit(0 if result.wasSuccessful() and result.testsRun == 1 and not result.skipped else 1)
          PY
      - name: Verify explicit note deletion history and cold fork across owner transports
        env:
          PYTHONPATH: tests
          TULDOK_NOTE_DELETION_GO: '1'
        run: |
          build/workspace-agent/bin/python - <<'PY'
          import mcp, sys, unittest
          loader = unittest.TestLoader()
          suite = loader.loadTestsFromName('test_project_file_deletion_clients_http.NoteDeletionClientsHTTP.test_real_note_deletion_restore_history_and_cold_independent_fork')
          assert not loader.errors and suite.countTestCases() == 1
          result = unittest.TextTestRunner(verbosity=2).run(suite)
          sys.exit(0 if result.wasSuccessful() and result.testsRun == 1 and not result.skipped else 1)
          PY
      - run: python -m unittest discover -s tests
      - name: Verify external-project authoring and cold reconstruction in Chromium
        run: node tests/browser_project_files_m2.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Verify named independent fork and inert cold clone in Chromium
        run: node tests/browser_project_files_m4.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Verify explicit runtime failure recovery and inert cold Open in Chromium
        run: node tests/browser_project_files_m3.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Verify source stop and independent extraction handoff in Chromium
        run: node tests/test_workspace_project_transfer.cjs --browser
        env:
          BROWSER: /usr/bin/google-chrome
          TULDOK_M5_UI_BROWSER_GO: '1'
      - name: Verify named native preflight and original-phase recovery in Chromium
        run: node tests/browser_project_files_native.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          TULDOK_NATIVE_PROJECT_GO: '1'
      - name: Verify explicit note deletion restore and inert cold fork in Chromium
        run: node tests/browser_project_file_deletion.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          TULDOK_NOTE_DELETION_GO: '1'
      - name: Verify external-project working file and recovery controls
        run: |
          node tests/test_workspace_project_files_m4.cjs
          node tests/test_workspace_project_fork_text.cjs
          node tests/test_workspace_project_runtime.cjs
          node tests/test_workspace_project_candidate.cjs
          node tests/test_workspace_project_transfer.cjs
          node tests/test_workspace_project_native.cjs
          node tests/test_workspace_project_native_validation.cjs
          node tests/test_workspace_project_file_deletion.cjs
      - run: node --check static/auth.js
      - run: node tests/test_auth_helpers.cjs
      - run: node tests/test_auth_controller.cjs
      - run: node tests/browser_access.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node --check static/scientific-fields.js
      - run: build/workspace-training/bin/python tests/qualify_scientific_fields.py --output build/qa/scientific-neutral.zip --report build/qa/scientific-neutral.json
      - run: node tests/browser_scientific_fields.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node --check static/workspace-external.js
      - run: node tests/test_workspace_external_controller.cjs
      - run: node tests/test_workspace_external_package_controller.cjs
      - run: node tests/test_workspace_extension_author.cjs
      - run: node tests/test_workspace_typed_parameters.cjs
      - run: node tests/browser_workspace_external.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/test_workspace_publication_controller.cjs
      - run: node tests/browser_workspace_publication.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/test_workspace_publication_lineage.cjs
      - run: node tests/browser_workspace_publication_lineage.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Verify continuous saved-graph keyboard focus and navigation isolation
        run: node tests/browser_workspace_graph_focus.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node --check static/workspace-projects.js
      - run: node tests/browser_workspace_project.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_workspace_project_observation.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node --check static/workbench.js
      - run: node --check static/audio-editor.js
      - run: node --check static/saved-selections.js
      - run: node --check static/saved-searches.js
      - run: node tests/test_saved_searches_controller.cjs
      - run: node --check static/curation.js
      - run: node --check static/bulk_import.js
      - run: node --check static/caption_import.js
      - run: node --check static/rights-note.js
      - run: node --check static/preferences.js
      - run: node --check static/instruction-responses.js
      - run: node --check static/native_detection_import.js
      - run: node tests/test_native_detection_import_controller.cjs
      - run: node --check static/native_text_import.js
      - run: node --check static/caption-proposals.js
      - run: node --check static/text-classification-proposals.js
      - run: node --check static/pumas-typed.js
      - run: node tests/test_pumas_typed_controller.cjs
      - run: PUMAS_TYPED_PREFIX=caption-proposal node tests/test_pumas_typed_controller.cjs
      - run: node --check static/pumas-gateways.js
      - run: node tests/test_pumas_gateways_controller.cjs
      - run: node --check static/pointclouds.js
      - run: node --check static/volume-editor.js
      - run: node tests/test_spatial_controllers.cjs
      - run: node --check static/meshes.js
      - run: node tests/test_meshes_controller.cjs
      - run: node --check static/sequences.js
      - run: node --check static/sequence-batch.js
      - run: node tests/test_sequence_batch_controller.cjs
      - run: node tests/test_curation_controller.cjs
      - run: node tests/test_browser_page_load.cjs
      - run: node tests/test_qa_artifacts.cjs
      - run: node tests/test_workbench_controller.cjs
      - run: node tests/test_image_classification_export_controller.cjs
      - run: node tests/test_text_corpus_export_controller.cjs
      - run: node tests/test_saved_selections_controller.cjs
      - run: node tests/test_saved_selection_intent.cjs
      - run: node tests/test_bulk_import_controller.cjs
      - run: node tests/test_caption_import_controller.cjs
      - run: node tests/test_rights_note_controller.cjs
      - run: node tests/test_preferences_controller.cjs
      - run: node tests/test_instruction_responses_controller.cjs
      - run: node tests/test_browser_startup.cjs
      - run: node tests/test_native_text_import_controller.cjs
      - run: node tests/test_combined_workbench_controller.cjs
      - run: node tests/test_caption_proposals_controller.cjs
      - run: node tests/test_text_classification_proposals_controller.cjs
      - run: node --check static/workbench-layout.js
      - run: node tests/browser_workbench_layout.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_workbench.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_grounded.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_captions.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_text_corpus_export.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_image_classification_export.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_release_preview.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_saved_selections.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_saved_searches.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_saved_selection_intent.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_metadata_filters.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_bulk_import.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_dataset_integration.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_curation.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_caption_import.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_caption_dataset_integration.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_images.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_rights_note.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/test_rights_note_artifacts.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: python -m pip install torch==2.8.0 torchvision==0.23.0 --index-url https://download.pytorch.org/whl/cpu
      - run: python -m pip install -r tests/instruction-consumer-requirements.txt scikit-learn==1.7.2
      - run: node tests/check_text_corpus_consumer.cjs
        env:
          TEXT_CORPUS_CONSUMER_PYTHON: python
      - run: node tests/check_image_classification_consumer.cjs
        env:
          INSTRUCTION_CONSUMER_PYTHON: python
      - run: node tests/browser_preferences.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          INSTRUCTION_CONSUMER_PYTHON: python
      - run: node tests/browser_instruction_responses.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          INSTRUCTION_CONSUMER_PYTHON: python
      - run: node tests/browser_native_detection_import.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/test_browser_owned_cleanup.cjs
      - run: node tests/browser_native_text_import.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_combined_workbench.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          INSTRUCTION_CONSUMER_PYTHON: python
      - run: node tests/browser_caption_proposals.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_text_classification_proposals.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_classification_preferences_integration.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_pumas_gateways.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_meshes.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_workspace_mesh.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_sequences.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_sequence_batch.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_sequences_actual.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_pumas_typed.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - run: cc -shared -fPIC -O2 -Wall -Wextra -Werror -o build/qa/workspace-offline.so tests/fixtures/workspaces/offline_loopback.c -ldl
      - run: node tests/browser_workspace_recovery.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Verify coordinator request identity and stale delivery fences
        run: node tests/test_workspace_coordinator_controller.cjs
      - name: Verify real coordinator fault recovery and lost reply in Runs
        run: node tests/browser_workspace_coordinator.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Verify real live owner phase timing workflow
        run: node tests/browser_run_phase_timings.cjs
        env:
          PYTHON: python
          BROWSER: /usr/bin/google-chrome
      - name: Qualify retained query and authenticated Runs over one actual checkpoint fixture
        run: |
          mkdir -p build/qa/retained-analysis
          python tests/retained_analysis_actual_fixture.py --directory build/retained-analysis-fixture > build/qa/retained-analysis/fixture.json
          python -m unittest discover -s tests -p 'test_retained_analysis*.py' -v > build/qa/retained-analysis/query-http-tests.log 2>&1
          node tests/test_workspace_model_controller.cjs
          node tests/browser_retained_analysis.cjs > build/qa/retained-analysis/renderer.json
          node tests/browser_retained_analysis_actual.cjs > build/qa/retained-analysis/runs-browser.json
        env:
          PYTHON: python
          BROWSER: /usr/bin/google-chrome
          TULDOK_ANALYSIS_ACTUAL: '1'
          TULDOK_ANALYSIS_HTTP: '1'
          TULDOK_ANALYSIS_FIXTURE: ${{ github.workspace }}/build/retained-analysis-fixture
      - name: Verify exact retained scientific comparison in the existing workspace
        run: node tests/browser_scientific_comparison.cjs
        env:
          PYTHON: python
          BROWSER: /usr/bin/google-chrome
      - run: node tests/browser_workspace_image_run.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_text.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_audio.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_audio_run.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_mesh_run.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_sequence_run.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_spatial.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          TULDOK_NATIVE_READER_PYTHON: ${{ github.workspace }}/build/workspace-training/bin/python
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_export_run.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - run: node tests/browser_workspace_breadth.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          LD_PRELOAD: ${{ github.workspace }}/build/qa/workspace-offline.so
      - name: Qualify automatic classifier evidence and independent CPU reconstruction
        run: python tests/qualify_model_development.py --task image --fixture tests/fixtures/model_development --output build/qa/model-development-cpu
      - name: Exercise finite model development through the real browser
        run: node tests/browser_model_development.cjs
        env:
          BROWSER: /usr/bin/google-chrome
      - name: Exercise actual one-fit text model evidence in the browser
        run: node tests/browser_one_fit_model_evidence.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          TULDOK_ONE_FIT_TASK: text
      - name: Exercise actual one-fit audio model evidence in the browser
        run: node tests/browser_one_fit_model_evidence.cjs
        env:
          BROWSER: /usr/bin/google-chrome
          TULDOK_ONE_FIT_TASK: audio
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: workbench-qa-artifacts
          path: build/qa/**
          if-no-files-found: ignore