NoCodeML V3: guest-first temporary AutoML workspace

.github/workflows/ci.yml

@@ -0,0 +1,153 @@
+name: NoCodeML CI
+
+on:
+  push:
+    branches:
+      - main
+      - release/v3-revival
+  pull_request:
+    branches:
+      - main
+
+concurrency:
+  group: nocodeml-ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  frontend:
+    name: Frontend build and lint
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: Frontend
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+      - name: Setup Node
+        uses: actions/setup-node@v7
+        with:
+          node-version: '24'
+          cache: npm
+          cache-dependency-path: Frontend/package-lock.json
+      - name: Install dependencies
+        run: npm ci
+      - name: Typecheck
+        run: npx tsc -p tsconfig.app.json --noEmit
+      - name: Build
+        run: npm run build
+        env:
+          VITE_API_URL: http://localhost:8000
+      - name: Lint
+        run: npm run lint
+      - name: Audit critical dependency vulnerabilities
+        run: npm audit --audit-level=critical
+
+  backend:
+    name: Guest backend tests
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: Backend
+    env:
+      PYTHONPATH: .
+      SESSION_ROOT_DIR: /tmp/nocodeml-ci-sessions
+      CELERY_BROKER_URL: memory://
+      CELERY_RESULT_BACKEND: cache+memory://
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+      - name: Setup Python
+        uses: actions/setup-python@v7
+        with:
+          python-version: '3.11'
+          cache: pip
+          cache-dependency-path: Backend/requirements.txt
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+          python -m pip install pytest
+      - name: Compile backend
+        run: python -m compileall -q app
+      - name: Run guest, ML and isolation tests
+        run: python -m pytest -q
+
+  backend-container:
+    name: Production guest container
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+      - name: Validate deployment files
+        run: |
+          python -m json.tool vercel.json >/dev/null
+          docker compose --env-file deploy/oci/.env.example -f deploy/oci/docker-compose.yml config >/dev/null
+      - name: Build backend image
+        run: docker build --pull -t nocodeml-backend:ci Backend
+      - name: Verify non-root runtime user
+        run: test "$(docker image inspect nocodeml-backend:ci --format '{{.Config.User}}')" = "nocodeml"
+      - name: Smoke-test database-free container
+        run: |
+          docker run -d --rm --name nocodeml-ci -p 8000:8000 \
+            -e SESSION_ROOT_DIR=/tmp/nocodeml-sessions \
+            nocodeml-backend:ci
+          for attempt in $(seq 1 30); do
+            if curl --fail --silent http://127.0.0.1:8000/health >/dev/null; then
+              break
+            fi
+            sleep 2
+          done
+          curl --fail http://127.0.0.1:8000/health
+          curl --fail http://127.0.0.1:8000/ready
+          curl --fail -X POST http://127.0.0.1:8000/api/v1/session
+          docker stop nocodeml-ci
+
+  backend-arm64:
+    name: ARM64 ML compatibility
+    runs-on: ubuntu-24.04-arm
+    defaults:
+      run:
+        working-directory: Backend
+    env:
+      PYTHONPATH: .
+      SESSION_ROOT_DIR: /tmp/nocodeml-arm64-sessions
+      CELERY_BROKER_URL: memory://
+      CELERY_RESULT_BACKEND: cache+memory://
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+      - name: Setup Python
+        uses: actions/setup-python@v7
+        with:
+          python-version: '3.11'
+          cache: pip
+          cache-dependency-path: Backend/requirements.txt
+      - name: Install ML stack
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+          python -m pip install pytest
+      - name: Verify native ARM64 libraries
+        run: |
+          python - <<'PY'
+          import platform
+          import lightgbm
+          import numpy
+          import pandas
+          import sklearn
+          import xgboost
+
+          machine = platform.machine().lower()
+          assert machine in {'aarch64', 'arm64'}, f'Expected ARM64 runner, got {machine}'
+          print('architecture:', machine)
+          print('numpy:', numpy.__version__)
+          print('pandas:', pandas.__version__)
+          print('scikit-learn:', sklearn.__version__)
+          print('xgboost:', xgboost.__version__)
+          print('lightgbm:', lightgbm.__version__)
+          PY
+      - name: Run real ML compatibility tests
+        run: python -m pytest -q tests/test_ml_pipeline.py tests/test_workspace_training.py tests/test_eda_identity_detection.py