build-samples.yml

name: Build tutorial samples

on:
  push:
    branches: [main]
    paths:
      - "dotnet-ai/provider-agnostic-chat-gateway/**"
      - "dotnet-ai/hybrid-search-ef-core-pgvector/**"
      - "dotnet-ai/agent-framework-incident-triage/**"
      - "dotnet-ai/mcp-server-csharp-dotnet/**"
      - "dotnet-aspire/orchestrate-distributed-system/**"
      - "software-architecture/architecture-testing-dotnet/**"
      - "distributed-systems/transactional-outbox-ef-core/**"
      - "aspnet-core/api-security-in-practice/**"
      - "aspnet-core/passkey-first-identity/**"
      - "aspnet-core/build-web-api-dotnet-8/**"
      - "aspnet-core/caching-outputcache-redis-invalidation/**"
      - "aspnet-core/minimal-apis-real-world/**"
      - "blazor/create-interactive-ui-csharp-12/**"
      - "blazor/forms-validation-masterclass/**"
      - "blazor/ssr-interactive-islands/**"
      - "cloud-native/dockerize-aspnet-core-clean-images/**"
      - "cloud-native/health-resilience-zero-downtime/**"
      - "cloud-native/polly-resilience/**"
      - "csharp-language/csharp-12-features/**"
      - "csharp-language/high-performance-memory-management/**"
      - "csharp-language/modern-patterns-result-pipeline/**"
      - "dotnet-8-essentials/background-jobs-hostedservice-queues/**"
      - "dotnet-8-essentials/configuration-secrets-environments/**"
      - "dotnet-8-essentials/core-features-get-started/**"
      - "dotnet-8-essentials/observability-opentelemetry/**"
      - "ef-core/advanced-modeling-performance/**"
      - "ef-core/modern-data-access-dotnet/**"
      - "ef-core/multitenancy-softdelete-auditing/**"
      - "ef-core/testing-sqlite-inmemory-vs-inmemory/**"
      - ".github/workflows/build-samples.yml"

  pull_request:
    paths:
      - "dotnet-ai/provider-agnostic-chat-gateway/**"
      - "dotnet-ai/hybrid-search-ef-core-pgvector/**"
      - "dotnet-ai/agent-framework-incident-triage/**"
      - "dotnet-ai/mcp-server-csharp-dotnet/**"
      - "dotnet-aspire/orchestrate-distributed-system/**"
      - "software-architecture/architecture-testing-dotnet/**"
      - "distributed-systems/transactional-outbox-ef-core/**"
      - "aspnet-core/api-security-in-practice/**"
      - "aspnet-core/passkey-first-identity/**"
      - "aspnet-core/build-web-api-dotnet-8/**"
      - "aspnet-core/caching-outputcache-redis-invalidation/**"
      - "aspnet-core/minimal-apis-real-world/**"
      - "blazor/create-interactive-ui-csharp-12/**"
      - "blazor/forms-validation-masterclass/**"
      - "blazor/ssr-interactive-islands/**"
      - "cloud-native/dockerize-aspnet-core-clean-images/**"
      - "cloud-native/health-resilience-zero-downtime/**"
      - "cloud-native/polly-resilience/**"
      - "csharp-language/csharp-12-features/**"
      - "csharp-language/high-performance-memory-management/**"
      - "csharp-language/modern-patterns-result-pipeline/**"
      - "dotnet-8-essentials/background-jobs-hostedservice-queues/**"
      - "dotnet-8-essentials/configuration-secrets-environments/**"
      - "dotnet-8-essentials/core-features-get-started/**"
      - "dotnet-8-essentials/observability-opentelemetry/**"
      - "ef-core/advanced-modeling-performance/**"
      - "ef-core/modern-data-access-dotnet/**"
      - "ef-core/multitenancy-softdelete-auditing/**"
      - "ef-core/testing-sqlite-inmemory-vs-inmemory/**"
      - ".github/workflows/build-samples.yml"

  workflow_dispatch:

permissions:
  contents: read

jobs:
  build-chat-gateway:
    name: Test provider-agnostic chat gateway
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          dotnet-ai/provider-agnostic-chat-gateway/ProviderAgnosticChatGateway.slnx

      - name: Build
        run: >
          dotnet build
          dotnet-ai/provider-agnostic-chat-gateway/ProviderAgnosticChatGateway.slnx
          --configuration Release
          --no-restore

      - name: Test deterministic layers
        run: >
          dotnet test
          dotnet-ai/provider-agnostic-chat-gateway/ProviderAgnosticChatGateway.slnx
          --configuration Release
          --no-build

  build-hybrid-search:
    name: Build and test hybrid search sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: |
          dotnet restore \
            dotnet-ai/hybrid-search-ef-core-pgvector/HybridSearch.slnx

      - name: Build
        run: |
          dotnet build \
            dotnet-ai/hybrid-search-ef-core-pgvector/HybridSearch.slnx \
            --configuration Release \
            --no-restore

      - name: Test
        run: |
          dotnet test \
            dotnet-ai/hybrid-search-ef-core-pgvector/HybridSearch.slnx \
            --configuration Release \
            --no-build
  build-aspire-orchestration:
    name: Build Aspire orchestration sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: |
          dotnet restore \
            dotnet-aspire/orchestrate-distributed-system/AspireOrchestrationMinimal.slnx

      - name: Build
        run: |
          dotnet build \
            dotnet-aspire/orchestrate-distributed-system/AspireOrchestrationMinimal.slnx \
            --configuration Release \
            --no-restore

  test-architecture-rules:
    name: Test architecture rules
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: |
          dotnet restore \
            software-architecture/architecture-testing-dotnet/ArchitectureGuardMinimal.slnx

      - name: Build
        run: |
          dotnet build \
            software-architecture/architecture-testing-dotnet/ArchitectureGuardMinimal.slnx \
            --configuration Release \
            --no-restore

      - name: Test architecture rules
        run: |
          dotnet test \
            software-architecture/architecture-testing-dotnet/tests/ArchitectureGuard.ArchitectureTests/ArchitectureGuard.ArchitectureTests.csproj \
            --configuration Release \
            --no-build

  test-transactional-outbox:
    name: Test transactional outbox sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          distributed-systems/transactional-outbox-ef-core/TransactionalOutboxMinimal.slnx

      - name: Build
        run: >
          dotnet build
          distributed-systems/transactional-outbox-ef-core/TransactionalOutboxMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          distributed-systems/transactional-outbox-ef-core/tests/TransactionalOutboxMinimal.Tests/TransactionalOutboxMinimal.Tests.csproj
          --configuration Release
          --no-build

      - name: Run demonstration
        run: >
          dotnet run
          --project distributed-systems/transactional-outbox-ef-core/src/TransactionalOutboxMinimal/TransactionalOutboxMinimal.csproj
          --configuration Release
          --no-build

  test-api-security:
    name: Test API security sample
    runs-on: ubuntu-latest
    env:
      Jwt__Key: "CI-only-test-key-at-least-32-bytes-long"

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          aspnet-core/api-security-in-practice/ApiSecurityMinimal.slnx

      - name: Build
        run: >
          dotnet build
          aspnet-core/api-security-in-practice/ApiSecurityMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test API security
        run: >
          dotnet test
          aspnet-core/api-security-in-practice/tests/ApiSecurityMinimal.Tests/ApiSecurityMinimal.Tests.csproj
          --configuration Release
          --no-build

  test-passkey-identity:
    name: Test passkey identity sample
    runs-on: ubuntu-latest
    env:
      ASPNETCORE_ENVIRONMENT: Testing
      Passkeys__ServerDomain: localhost

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          aspnet-core/passkey-first-identity/PasskeyIdentityMinimal.slnx

      - name: Build
        run: >
          dotnet build
          aspnet-core/passkey-first-identity/PasskeyIdentityMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test server-side passkey boundaries
        run: >
          dotnet test
          aspnet-core/passkey-first-identity/tests/PasskeyIdentityMinimal.Tests/PasskeyIdentityMinimal.Tests.csproj
          --configuration Release
          --no-build

  test-web-api-fundamentals:
    name: Test ASP.NET Core Todo API sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          aspnet-core/build-web-api-dotnet-8/TodoApiMinimal.slnx

      - name: Build
        run: >
          dotnet build
          aspnet-core/build-web-api-dotnet-8/TodoApiMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          aspnet-core/build-web-api-dotnet-8/TodoApiMinimal.slnx
          --configuration Release
          --no-build

  test-output-cache-invalidation:
    name: Test ASP.NET Core output cache sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          aspnet-core/caching-outputcache-redis-invalidation/OutputCacheCatalogMinimal.slnx

      - name: Build
        run: >
          dotnet build
          aspnet-core/caching-outputcache-redis-invalidation/OutputCacheCatalogMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          aspnet-core/caching-outputcache-redis-invalidation/OutputCacheCatalogMinimal.slnx
          --configuration Release
          --no-build

  test-minimal-api-pipeline:
    name: Test real-world Minimal API pipeline sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          aspnet-core/minimal-apis-real-world/MinimalApiPipeline.slnx

      - name: Build
        run: >
          dotnet build
          aspnet-core/minimal-apis-real-world/MinimalApiPipeline.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          aspnet-core/minimal-apis-real-world/MinimalApiPipeline.slnx
          --configuration Release
          --no-build

  test-blazor-todo-dashboard:
    name: Test Blazor Todo Dashboard sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          blazor/create-interactive-ui-csharp-12/BlazorTodoMinimal.slnx

      - name: Build
        run: >
          dotnet build
          blazor/create-interactive-ui-csharp-12/BlazorTodoMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          blazor/create-interactive-ui-csharp-12/BlazorTodoMinimal.slnx
          --configuration Release
          --no-build

  test-blazor-profile-validation:
    name: Test Blazor profile validation sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          blazor/forms-validation-masterclass/BlazorProfileValidation.slnx

      - name: Build
        run: >
          dotnet build
          blazor/forms-validation-masterclass/BlazorProfileValidation.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          blazor/forms-validation-masterclass/BlazorProfileValidation.slnx
          --configuration Release
          --no-build

  test-blazor-ssr-islands:
    name: Test Blazor SSR and interactive island sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          blazor/ssr-interactive-islands/BlazorCatalogIslands.slnx

      - name: Build
        run: >
          dotnet build
          blazor/ssr-interactive-islands/BlazorCatalogIslands.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          blazor/ssr-interactive-islands/BlazorCatalogIslands.slnx
          --configuration Release
          --no-build

  test-dockerized-aspnet-core:
    name: Test Dockerized ASP.NET Core sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          cloud-native/dockerize-aspnet-core-clean-images/ContainerizedApiMinimal.slnx

      - name: Build
        run: >
          dotnet build
          cloud-native/dockerize-aspnet-core-clean-images/ContainerizedApiMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          cloud-native/dockerize-aspnet-core-clean-images/ContainerizedApiMinimal.slnx
          --configuration Release
          --no-build

      - name: Validate Compose configuration
        run: >
          docker compose
          --file cloud-native/dockerize-aspnet-core-clean-images/compose.yaml
          config
          --quiet

      - name: Build container image
        run: >
          docker build
          --pull
          --tag dotnet-guide/containerized-api-minimal:ci
          cloud-native/dockerize-aspnet-core-clean-images

      - name: Run hardened container
        run: |
          docker run \
            --detach \
            --name containerized-api-ci \
            --publish 127.0.0.1:5152:8080 \
            --env ASPNETCORE_ENVIRONMENT=Production \
            --env Sample__Message="Configured by GitHub Actions" \
            --read-only \
            --tmpfs /tmp \
            --cap-drop ALL \
            --security-opt no-new-privileges:true \
            dotnet-guide/containerized-api-minimal:ci

      - name: Wait for Docker health
        run: |
          status=""

          for attempt in $(seq 1 30); do
            status="$(
              docker inspect \
                --format='{{.State.Health.Status}}' \
                containerized-api-ci
            )"

            echo "Attempt ${attempt}: ${status}"

            if [ "$status" = "healthy" ]; then
              break
            fi

            if [ "$status" = "unhealthy" ]; then
              docker logs containerized-api-ci
              exit 1
            fi

            sleep 2
          done

          test "$status" = "healthy"

      - name: Verify container HTTP and runtime properties
        run: |
          python3 - <<'PY'
          import json
          import urllib.request

          base = "http://127.0.0.1:5152"

          for path in (
              "/health/live",
              "/health/ready",
              "/health",
          ):
              with urllib.request.urlopen(base + path) as response:
                  assert response.status == 200, (path, response.status)

          with urllib.request.urlopen(base + "/api/todos") as response:
              todos = json.load(response)

          assert len(todos) == 3
          assert any(
              item["title"] == "Run the container as non-root"
              for item in todos
          )

          with urllib.request.urlopen(base + "/info") as response:
              info = json.load(response)

          assert info["environment"] == "Production"
          assert info["message"] == "Configured by GitHub Actions"
          assert info["runningInContainer"] is True
          assert info["user"].lower() != "root"
          PY

      - name: Verify non-root image and runtime-only contents
        run: |
          image_user="$(
            docker image inspect \
              dotnet-guide/containerized-api-minimal:ci \
              --format='{{.Config.User}}'
          )"

          echo "Image user: ${image_user}"

          test -n "$image_user"
          test "$image_user" != "0"
          test "$image_user" != "root"

          sdk_output="$(
            docker exec \
              containerized-api-ci \
              dotnet --list-sdks
          )"

          test -z "$sdk_output"

      - name: Show container diagnostics
        if: always()
        run: |
          docker ps --all
          docker inspect containerized-api-ci || true
          docker logs containerized-api-ci || true

      - name: Remove test container
        if: always()
        run: |
          docker rm \
            --force \
            containerized-api-ci \
            2>/dev/null \
            || true

  test-health-resilience-shutdown:
    name: Test health, resilience, and shutdown sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          cloud-native/health-resilience-zero-downtime/ResilientOrdersMinimal.slnx

      - name: Build
        run: >
          dotnet build
          cloud-native/health-resilience-zero-downtime/ResilientOrdersMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          cloud-native/health-resilience-zero-downtime/ResilientOrdersMinimal.slnx
          --configuration Release
          --no-build

  test-polly-fallback-bulkhead:
    name: Test Polly fallback and concurrency sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          cloud-native/polly-resilience/PollyCatalogResilience.slnx

      - name: Build
        run: >
          dotnet build
          cloud-native/polly-resilience/PollyCatalogResilience.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          cloud-native/polly-resilience/PollyCatalogResilience.slnx
          --configuration Release
          --no-build

  test-csharp-12-features:
    name: Test C# 12 refactoring sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          csharp-language/csharp-12-features/CSharp12RefactoringLab.slnx

      - name: Build
        run: >
          dotnet build
          csharp-language/csharp-12-features/CSharp12RefactoringLab.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          csharp-language/csharp-12-features/CSharp12RefactoringLab.slnx
          --configuration Release
          --no-build

      - name: Verify explicit C# language version
        shell: bash
        run: |
          app_version="$(
            dotnet msbuild \
              csharp-language/csharp-12-features/src/CSharp12RefactoringLab/CSharp12RefactoringLab.csproj \
              -getProperty:LangVersion
          )"

          test_version="$(
            dotnet msbuild \
              csharp-language/csharp-12-features/tests/CSharp12RefactoringLab.Tests/CSharp12RefactoringLab.Tests.csproj \
              -getProperty:LangVersion
          )"

          echo "Application LangVersion: ${app_version}"
          echo "Test LangVersion: ${test_version}"

          test "${app_version}" = "12.0"
          test "${test_version}" = "12.0"

      - name: Run deterministic console sample
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project csharp-language/csharp-12-features/src/CSharp12RefactoringLab/CSharp12RefactoringLab.csproj \
              --configuration Release \
              --no-build
          )"

          printf '%s\n' "${output}"

          expected="$(
            printf '%s\n' \
              "C# 12 Todo Refactoring Lab" \
              "Counts: total=4, active=2, completed=2" \
              "TODO: Welcome to the C# 12 lab [done]" \
              "TODO: Adopt primary constructors [active]" \
              "TODO: Use collection expressions [done]" \
              "TODO: Try default lambda parameters [active]" \
              "TODO: Review explicit properties [done]"
          )"

          if [[ "${output}" != "${expected}" ]]; then
            echo "Console output did not match the expected output."

            diff \
              --unified \
              <(printf '%s\n' "${expected}") \
              <(printf '%s\n' "${output}") \
              || true

            exit 1
          fi

          line_count="$(
            printf '%s\n' "${output}" |
              wc --lines |
              tr --delete ' '
          )"

          test "${line_count}" = "7"

  test-high-performance-pipelines:
    name: Test UTF-8 pipelines log ingestor
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          csharp-language/high-performance-memory-management/HighPerformanceLogIngestor.slnx

      - name: Build
        run: >
          dotnet build
          csharp-language/high-performance-memory-management/HighPerformanceLogIngestor.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          csharp-language/high-performance-memory-management/HighPerformanceLogIngestor.slnx
          --configuration Release
          --no-build

      - name: Verify explicit C# language version
        shell: bash
        run: |
          app_version="$(
            dotnet msbuild \
              csharp-language/high-performance-memory-management/src/HighPerformanceLogIngestor/HighPerformanceLogIngestor.csproj \
              -getProperty:LangVersion
          )"

          test_version="$(
            dotnet msbuild \
              csharp-language/high-performance-memory-management/tests/HighPerformanceLogIngestor.Tests/HighPerformanceLogIngestor.Tests.csproj \
              -getProperty:LangVersion
          )"

          echo "Application LangVersion: ${app_version}"
          echo "Test LangVersion: ${test_version}"

          test "${app_version}" = "12.0"
          test "${test_version}" = "12.0"

      - name: Run deterministic ingestion sample
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project csharp-language/high-performance-memory-management/src/HighPerformanceLogIngestor/HighPerformanceLogIngestor.csproj \
              --configuration Release \
              --no-build
          )"

          printf '%s\n' "${output}"

          printf -v expected '%s\n' \
            'High-Performance UTF-8 Log Ingestor' \
            'Lines: total=4, valid=3, invalid=1' \
            'Accepted event IDs: 1001, 1002, 1004' \
            'Levels: 1=1, 2=1, 4=1' \
            'First message: Cache warmed' \
            'Last message: Worker started'

          expected="${expected%$'\n'}"

          if [[ "${output}" != "${expected}" ]]; then
            echo "Console output did not match the expected output."

            diff \
              --unified \
              <(printf '%s\n' "${expected}") \
              <(printf '%s\n' "${output}") \
              || true

            exit 1
          fi

          line_count="$(
            printf '%s\n' "${output}" |
              wc --lines |
              tr --delete ' '
          )"

          test "${line_count}" = "6"

  test-result-pipeline:
    name: Test C# Result pipeline sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          csharp-language/modern-patterns-result-pipeline/ResultPipelineLab.slnx

      - name: Build
        run: >
          dotnet build
          csharp-language/modern-patterns-result-pipeline/ResultPipelineLab.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          csharp-language/modern-patterns-result-pipeline/ResultPipelineLab.slnx
          --configuration Release
          --no-build

      - name: Verify explicit C# language version
        shell: bash
        run: |
          app_version="$(
            dotnet msbuild \
              csharp-language/modern-patterns-result-pipeline/src/ResultPipelineLab/ResultPipelineLab.csproj \
              -getProperty:LangVersion
          )"

          test_version="$(
            dotnet msbuild \
              csharp-language/modern-patterns-result-pipeline/tests/ResultPipelineLab.Tests/ResultPipelineLab.Tests.csproj \
              -getProperty:LangVersion
          )"

          echo "Application LangVersion: ${app_version}"
          echo "Test LangVersion: ${test_version}"

          test "${app_version}" = "12.0"
          test "${test_version}" = "12.0"

      - name: Run deterministic Result pipeline sample
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project csharp-language/modern-patterns-result-pipeline/src/ResultPipelineLab/ResultPipelineLab.csproj \
              --configuration Release \
              --no-build
          )"

          printf '%s\n' "${output}"

          printf -v expected '%s\n' \
            'C# 12 Result Pipeline Lab' \
            'Success: imported=2, writes=1' \
            'Products: Widget Pro | Travel Mug' \
            'Failure: code=VALIDATE_BATCH_FAILED, writes=0' \
            'Public message: 1 record(s) failed validation.'

          expected="${expected%$'\n'}"

          if [[ "${output}" != "${expected}" ]]; then
            echo "Console output did not match the expected output."

            diff \
              --unified \
              <(printf '%s\n' "${expected}") \
              <(printf '%s\n' "${output}") \
              || true

            exit 1
          fi

          line_count="$(
            printf '%s\n' "${output}" |
              wc --lines |
              tr --delete ' '
          )"

          test "${line_count}" = "5"

  test-background-job-queue:
    name: Test bounded background job queue
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          dotnet-8-essentials/background-jobs-hostedservice-queues/BackgroundJobQueueMinimal.slnx

      - name: Build
        run: >
          dotnet build
          dotnet-8-essentials/background-jobs-hostedservice-queues/BackgroundJobQueueMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          dotnet-8-essentials/background-jobs-hostedservice-queues/BackgroundJobQueueMinimal.slnx
          --configuration Release
          --no-build

      - name: Smoke-test API
        shell: bash
        run: |
          app_log="${RUNNER_TEMP}/background-job-queue.log"

          ASPNETCORE_URLS="http://127.0.0.1:5096" \
            dotnet run \
              --project dotnet-8-essentials/background-jobs-hostedservice-queues/src/BackgroundJobQueueMinimal/BackgroundJobQueueMinimal.csproj \
              --configuration Release \
              --no-build \
              >"${app_log}" 2>&1 &

          app_pid="$!"

          cleanup() {
            kill "${app_pid}" 2>/dev/null || true
            wait "${app_pid}" 2>/dev/null || true
          }

          trap cleanup EXIT

          for attempt in $(seq 1 40); do
            if curl \
              --fail \
              --silent \
              http://127.0.0.1:5096/ \
              >"${RUNNER_TEMP}/background-job-root.json"; then
              break
            fi

            if ! kill -0 "${app_pid}" 2>/dev/null; then
              cat "${app_log}"
              exit 1
            fi

            sleep 0.25
          done

          root="$(
            cat "${RUNNER_TEMP}/background-job-root.json"
          )"

          expected_root='{"sample":"bounded-background-job-queue","durability":"in-memory","capacity":4}'

          test "${root}" = "${expected_root}"

          queue="$(
            curl \
              --fail \
              --silent \
              http://127.0.0.1:5096/jobs/queue
          )"

          expected_queue='{"capacity":4,"depth":0,"accepting":true}'

          test "${queue}" = "${expected_queue}"

          status="$(
            curl \
              --silent \
              --output "${RUNNER_TEMP}/invalid-job.json" \
              --write-out '%{http_code}' \
              --request POST \
              --header 'Content-Type: application/json' \
              --data '{"to":"","subject":""}' \
              http://127.0.0.1:5096/jobs/email
          )"

          test "${status}" = "400"

  test-config-precedence:
    name: Test typed configuration precedence sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          dotnet-8-essentials/configuration-secrets-environments/ConfigPrecedenceMinimal.slnx

      - name: Build
        run: >
          dotnet build
          dotnet-8-essentials/configuration-secrets-environments/ConfigPrecedenceMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          dotnet-8-essentials/configuration-secrets-environments/ConfigPrecedenceMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify application has no direct packages
        shell: bash
        run: |
          output="$(
            dotnet list \
              dotnet-8-essentials/configuration-secrets-environments/src/ConfigPrecedenceMinimal/ConfigPrecedenceMinimal.csproj \
              package
          )"

          printf '%s\n' "${output}"

          printf '%s\n' "${output}" |
            grep --fixed-strings \
              "No packages were found"

      - name: Verify configuration precedence and redaction
        shell: bash
        env:
          DOTNET_ENVIRONMENT: Development
          ASPNETCORE_URLS: http://127.0.0.1:5097
          CFGPLAY_App__ApiKey: ci-demo-key-1234
          CFGPLAY_App__TimeoutSeconds: "30"
        run: |
          app_log="${RUNNER_TEMP}/config-precedence.log"

          dotnet run \
            --project dotnet-8-essentials/configuration-secrets-environments/src/ConfigPrecedenceMinimal/ConfigPrecedenceMinimal.csproj \
            --configuration Release \
            --no-build \
            -- \
            --App:TimeoutSeconds=40 \
            --Features:AdvancedSearch=false \
            >"${app_log}" 2>&1 &

          app_pid="$!"

          cleanup() {
            kill "${app_pid}" 2>/dev/null || true
            wait "${app_pid}" 2>/dev/null || true
          }

          trap cleanup EXIT

          for attempt in $(seq 1 40); do
            if curl \
              --fail \
              --silent \
              http://127.0.0.1:5097/ \
              >"${RUNNER_TEMP}/config-root.json"; then
              break
            fi

            if ! kill -0 "${app_pid}" 2>/dev/null; then
              cat "${app_log}"
              exit 1
            fi

            sleep 0.25
          done

          root="$(
            cat "${RUNNER_TEMP}/config-root.json"
          )"

          expected_root='{"sample":"typed-config-precedence","environment":"Development","serviceBaseUrl":"https://api.example.test","timeoutSeconds":40,"advancedSearch":false,"apiKeyConfigured":true}'

          if [[ "${root}" != "${expected_root}" ]]; then
            printf 'Unexpected root response:\n%s\n' "${root}"
            exit 1
          fi

          diagnostics="$(
            curl \
              --fail \
              --silent \
              http://127.0.0.1:5097/dev/config
          )"

          expected_diagnostics='{"environment":"Development","serviceBaseUrl":"https://api.example.test","timeoutSeconds":40,"advancedSearch":false,"apiKey":"[REDACTED]","apiKeyConfigured":true}'

          if [[ "${diagnostics}" != "${expected_diagnostics}" ]]; then
            printf 'Unexpected diagnostics response:\n%s\n' "${diagnostics}"
            exit 1
          fi

          if printf '%s\n%s\n' \
              "${root}" \
              "${diagnostics}" |
              grep --quiet \
                --fixed-strings \
                "ci-demo-key-1234"; then
            echo "Secret-like CI value leaked into an HTTP response."
            exit 1
          fi

  test-native-aot-essentials:
    name: Test Native AOT essentials sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Install Native AOT prerequisites
        shell: bash
        run: |
          sudo apt-get update

          sudo apt-get install \
            --yes \
            clang \
            zlib1g-dev

      - name: Restore
        run: >
          dotnet restore
          dotnet-8-essentials/core-features-get-started/NativeAotEssentialsMinimal.slnx

      - name: Build
        run: >
          dotnet build
          dotnet-8-essentials/core-features-get-started/NativeAotEssentialsMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          dotnet-8-essentials/core-features-get-started/NativeAotEssentialsMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify application has no direct packages
        shell: bash
        run: |
          output="$(
            dotnet list \
              dotnet-8-essentials/core-features-get-started/src/NativeAotEssentialsMinimal/NativeAotEssentialsMinimal.csproj \
              package
          )"

          printf '%s\n' "${output}"

          if grep \
              --extended-regexp \
              --quiet \
              '<PackageReference\s' \
              dotnet-8-essentials/core-features-get-started/src/NativeAotEssentialsMinimal/NativeAotEssentialsMinimal.csproj; then
            echo "Application project declares a direct package reference."
            exit 1
          fi

      - name: Publish Native AOT
        shell: bash
        run: |
          publish_dir="${RUNNER_TEMP}/native-aot-essentials"
          publish_log="${RUNNER_TEMP}/native-aot-publish.log"

          rm -rf "${publish_dir}"

          set -o pipefail

          dotnet publish \
            dotnet-8-essentials/core-features-get-started/src/NativeAotEssentialsMinimal/NativeAotEssentialsMinimal.csproj \
            --configuration Release \
            --runtime linux-x64 \
            --output "${publish_dir}" \
            2>&1 |
            tee "${publish_log}"

          test -x \
            "${publish_dir}/NativeAotEssentialsMinimal"

          if grep \
              --extended-regexp \
              --ignore-case \
              'warning (IL[0-9]+|CS[0-9]+|NETSDK[0-9]+)' \
              "${publish_log}"; then
            echo "Native AOT publish produced a compiler, SDK, trim, or AOT warning."
            exit 1
          fi

      - name: Smoke-test native executable
        shell: bash
        run: |
          publish_dir="${RUNNER_TEMP}/native-aot-essentials"
          app_log="${RUNNER_TEMP}/native-aot-essentials.log"

          ASPNETCORE_URLS="http://127.0.0.1:5098" \
          DOTNET_ENVIRONMENT="Production" \
            "${publish_dir}/NativeAotEssentialsMinimal" \
            >"${app_log}" 2>&1 &

          app_pid="$!"

          cleanup() {
            kill "${app_pid}" 2>/dev/null || true
            wait "${app_pid}" 2>/dev/null || true
          }

          trap cleanup EXIT

          for attempt in $(seq 1 60); do
            if curl \
                --fail \
                --silent \
                http://127.0.0.1:5098/ \
                >"${RUNNER_TEMP}/native-aot-root.json"; then
              break
            fi

            if ! kill -0 "${app_pid}" 2>/dev/null; then
              cat "${app_log}"
              exit 1
            fi

            sleep 0.25
          done

          root="$(
            cat "${RUNNER_TEMP}/native-aot-root.json"
          )"

          expected_root='{"sample":"native-aot-essentials","builder":"CreateSlimBuilder","json":"source-generated"}'

          if [[ "${root}" != "${expected_root}" ]]; then
            printf 'Unexpected root response:\n%s\n' "${root}"
            exit 1
          fi

          runtime="$(
            curl \
              --fail \
              --silent \
              http://127.0.0.1:5098/runtime
          )"

          printf '%s\n' "${runtime}"

          printf '%s\n' "${runtime}" |
            grep \
              --fixed-strings \
              --quiet \
              '"dynamicCodeSupported":false'

          printf '%s\n' "${runtime}" |
            grep \
              --fixed-strings \
              --quiet \
              '"dynamicCodeCompiled":false'

          echo_response="$(
            curl \
              --fail \
              --silent \
              --request POST \
              --header 'Content-Type: application/json' \
              --data '{"message":"  hello   native aot  "}' \
              http://127.0.0.1:5098/echo
          )"

          expected_echo='{"message":"HELLO NATIVE AOT","length":16}'

          if [[ "${echo_response}" != "${expected_echo}" ]]; then
            printf 'Unexpected echo response:\n%s\n' "${echo_response}"
            exit 1
          fi

          invalid_status="$(
            curl \
              --silent \
              --output "${RUNNER_TEMP}/native-aot-invalid.json" \
              --write-out '%{http_code}' \
              --request POST \
              --header 'Content-Type: application/json' \
              --data '{"message":"   "}' \
              http://127.0.0.1:5098/echo
          )"

          test "${invalid_status}" = "400"
  test-opentelemetry-signals:
    name: Test correlated OpenTelemetry signals sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          dotnet-8-essentials/observability-opentelemetry/OpenTelemetrySignalsMinimal.slnx

      - name: Build
        run: >
          dotnet build
          dotnet-8-essentials/observability-opentelemetry/OpenTelemetrySignalsMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          dotnet-8-essentials/observability-opentelemetry/OpenTelemetrySignalsMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify OpenTelemetry package baseline
        shell: bash
        run: |
          project="dotnet-8-essentials/observability-opentelemetry/src/OpenTelemetrySignalsMinimal/OpenTelemetrySignalsMinimal.csproj"

          test "$(grep --count '<PackageReference' "${project}")" = "3"

          grep --fixed-strings 'Include="OpenTelemetry.Extensions.Hosting"' "${project}"
          grep --fixed-strings 'Include="OpenTelemetry.Exporter.Console"' "${project}"
          grep --fixed-strings 'Include="OpenTelemetry.Instrumentation.AspNetCore"' "${project}"

          test "$(grep --count 'Version="1.17.0"' "${project}")" = "3"

      - name: Smoke-test correlated signals API
        shell: bash
        run: |
          app_log="${RUNNER_TEMP}/otel-signals.log"

          dotnet run \
            --project dotnet-8-essentials/observability-opentelemetry/src/OpenTelemetrySignalsMinimal/OpenTelemetrySignalsMinimal.csproj \
            --configuration Release \
            --no-build \
            --urls http://127.0.0.1:5099 \
            >"${app_log}" 2>&1 &

          app_pid="$!"

          cleanup() {
            kill "${app_pid}" 2>/dev/null || true
            wait "${app_pid}" 2>/dev/null || true
          }

          trap cleanup EXIT

          for attempt in $(seq 1 40); do
            if curl --fail --silent \
              http://127.0.0.1:5099/ \
              >"${RUNNER_TEMP}/otel-root.json"; then
              break
            fi

            if ! kill -0 "${app_pid}" 2>/dev/null; then
              cat "${app_log}"
              exit 1
            fi

            sleep 0.25
          done

          root="$(cat "${RUNNER_TEMP}/otel-root.json")"

          expected_root='{"sample":"correlated-opentelemetry-signals","exporter":"console","activitySource":"DotNetGuide.Observability.Checkout","meter":"DotNetGuide.Observability.Checkout"}'

          test "${root}" = "${expected_root}"

          checkout="$(
            curl --fail --silent \
              --request POST \
              --header 'Content-Type: application/json' \
              --data '{"channel":"WEB","itemCount":2}' \
              http://127.0.0.1:5099/checkout
          )"

          printf '%s\n' "${checkout}" |
            grep --extended-regexp --quiet \
            '^\{"status":"accepted","channel":"web","itemCount":2,"traceId":"[0-9a-fA-F]{32}"\}$'

          invalid_channel="$(
            curl --silent \
              --output "${RUNNER_TEMP}/invalid-channel.json" \
              --write-out '%{http_code}' \
              --request POST \
              --header 'Content-Type: application/json' \
              --data '{"channel":"customer-92823","itemCount":2}' \
              http://127.0.0.1:5099/checkout
          )"

          test "${invalid_channel}" = "400"

          invalid_count="$(
            curl --silent \
              --output "${RUNNER_TEMP}/invalid-count.json" \
              --write-out '%{http_code}' \
              --request POST \
              --header 'Content-Type: application/json' \
              --data '{"channel":"mobile","itemCount":11}' \
              http://127.0.0.1:5099/checkout
          )"

          test "${invalid_count}" = "400"

          sleep 1.5

          grep --fixed-strings --quiet 'Checkout.Process' "${app_log}"
          grep --fixed-strings --quiet 'checkout.requests' "${app_log}"
          grep --fixed-strings --quiet 'Checkout accepted' "${app_log}"

  test-ef-core-hot-path:
    name: Test EF Core hot-path sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          ef-core/advanced-modeling-performance/EfCoreHotPathMinimal.slnx

      - name: Build
        run: >
          dotnet build
          ef-core/advanced-modeling-performance/EfCoreHotPathMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          ef-core/advanced-modeling-performance/EfCoreHotPathMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify EF Core package baseline
        shell: bash
        run: |
          project="ef-core/advanced-modeling-performance/src/EfCoreHotPathMinimal/EfCoreHotPathMinimal.csproj"

          test "$(
            grep \
              --count \
              '<PackageReference' \
              "${project}"
          )" = "1"

          grep \
            --fixed-strings \
            'Include="Microsoft.EntityFrameworkCore.Sqlite"' \
            "${project}"

          grep \
            --fixed-strings \
            'Version="10.0.11"' \
            "${project}"

      - name: Verify exact sample output
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project ef-core/advanced-modeling-performance/src/EfCoreHotPathMinimal/EfCoreHotPathMinimal.csproj \
              --configuration Release \
              --no-build
          )"

          expected="$(
            printf '%s\n' \
              'EF Core Hot-Path Query Lab' \
              'Visible products: 4' \
              'Compiled lookup: SKU-003 | Dock | 12900 cents' \
              'Restocked products: 3' \
              'Purged soft-deleted products: 1' \
              'Final rows: 4'
          )"

          printf '%s\n' "${output}"

          if [[ "${output}" != "${expected}" ]]; then
            echo "Unexpected deterministic sample output."
            exit 1
          fi

      - name: Verify no generated database artifacts
        shell: bash
        run: |
          if find \
              ef-core/advanced-modeling-performance \
              -type f \
              \( \
                -name '*.db' \
                -o -name '*.sqlite' \
                -o -name '*.sqlite3' \
              \) \
              -print \
              -quit |
              grep \
                --quiet \
                .; then
            echo "Generated SQLite database file found in sample tree."
            exit 1
          fi

  test-ef-core-relationships:
    name: Test EF Core relationship loading sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          ef-core/modern-data-access-dotnet/EfCoreRelationshipsMinimal.slnx

      - name: Build
        run: >
          dotnet build
          ef-core/modern-data-access-dotnet/EfCoreRelationshipsMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          ef-core/modern-data-access-dotnet/EfCoreRelationshipsMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify EF Core package baseline
        shell: bash
        run: |
          project="ef-core/modern-data-access-dotnet/src/EfCoreRelationshipsMinimal/EfCoreRelationshipsMinimal.csproj"

          test "$(
            grep \
              --count \
              '<PackageReference' \
              "${project}"
          )" = "1"

          grep \
            --fixed-strings \
            'Include="Microsoft.EntityFrameworkCore.Sqlite"' \
            "${project}"

          grep \
            --fixed-strings \
            'Version="10.0.11"' \
            "${project}"

      - name: Verify exact relationship-loading output
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project ef-core/modern-data-access-dotnet/src/EfCoreRelationshipsMinimal/EfCoreRelationshipsMinimal.csproj \
              --configuration Release \
              --no-build
          )"

          expected="$(
            printf '%s\n' \
              'EF Core Relationship Loading Lab' \
              'Seeded graph: categories=2, todos=3, tags=3' \
              'N+1 baseline: todos=3, SELECTs=4' \
              'Eager Include: todos=3, SELECTs=1' \
              'Split graph: categories=2, todos=3, tags=3, SELECTs=3' \
              'Explicit reference load: todo=Prepare release, category=Work, SELECTs=2'
          )"

          printf '%s\n' "${output}"

          if [[ "${output}" != "${expected}" ]]; then
            echo "Unexpected deterministic relationship-loading output."
            exit 1
          fi

      - name: Verify no generated database artifacts
        shell: bash
        run: |
          if find \
              ef-core/modern-data-access-dotnet \
              -type f \
              \( \
                -name '*.db' \
                -o -name '*.sqlite' \
                -o -name '*.sqlite3' \
              \) \
              -print \
              -quit |
              grep \
                --quiet \
                .; then
            echo "Generated SQLite database file found in sample tree."
            exit 1
          fi

  test-ef-core-tenant-guardrails:
    name: Test EF Core tenant guardrails sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          ef-core/multitenancy-softdelete-auditing/EfCoreTenantGuardrailsMinimal.slnx

      - name: Build
        run: >
          dotnet build
          ef-core/multitenancy-softdelete-auditing/EfCoreTenantGuardrailsMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          ef-core/multitenancy-softdelete-auditing/EfCoreTenantGuardrailsMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify EF Core package baseline
        shell: bash
        run: |
          project="ef-core/multitenancy-softdelete-auditing/src/EfCoreTenantGuardrailsMinimal/EfCoreTenantGuardrailsMinimal.csproj"

          test "$(grep --count '<PackageReference' "${project}")" = "1"
          grep --fixed-strings 'Include="Microsoft.EntityFrameworkCore.Sqlite"' "${project}"
          grep --fixed-strings 'Version="10.0.11"' "${project}"

      - name: Verify named filter guardrails
        shell: bash
        run: |
          context="ef-core/multitenancy-softdelete-auditing/src/EfCoreTenantGuardrailsMinimal/Data/TenantDbContext.cs"
          queries="ef-core/multitenancy-softdelete-auditing/src/EfCoreTenantGuardrailsMinimal/Queries/TenantQueries.cs"

          grep --fixed-strings 'TenantFilterName' "${context}"
          grep --fixed-strings 'SoftDeleteFilterName' "${context}"
          grep --fixed-strings 'IgnoreQueryFilters' "${queries}"

          if grep --fixed-strings 'IgnoreQueryFilters()' "${queries}"; then
            echo "Blanket query-filter bypass found in production helper."
            exit 1
          fi

      - name: Verify exact tenant-isolation output
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project ef-core/multitenancy-softdelete-auditing/src/EfCoreTenantGuardrailsMinimal/EfCoreTenantGuardrailsMinimal.csproj \
              --configuration Release \
              --no-build
          )"

          expected="$(
            printf '%s\n' \
              'EF Core Tenant Isolation Lab' \
              'Visible tasks: alpha=1, beta=1' \
              'Same local ID: alpha=Alpha plan | beta=Beta plan' \
              'Alpha including deleted: 2, foreign tenants=0' \
              'Spoofed insert stamped tenant: alpha' \
              'Soft delete: visible alpha=1, physical alpha=3, deletedBy=alpha-admin'
          )"

          printf '%s\n' "${output}"
          test "${output}" = "${expected}"

      - name: Verify no generated database artifacts
        shell: bash
        run: |
          if find \
              ef-core/multitenancy-softdelete-auditing \
              -type f \
              \( -name '*.db' -o -name '*.sqlite' -o -name '*.sqlite3' \) \
              -print -quit | grep --quiet .; then
            echo "Generated SQLite database file found."
            exit 1
          fi

  test-ef-core-provider-contrast:
    name: Test EF Core provider contrast sample
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          ef-core/testing-sqlite-inmemory-vs-inmemory/EfCoreProviderContrastMinimal.slnx

      - name: Build
        run: >
          dotnet build
          ef-core/testing-sqlite-inmemory-vs-inmemory/EfCoreProviderContrastMinimal.slnx
          --configuration Release
          --no-restore

      - name: Test
        run: >
          dotnet test
          ef-core/testing-sqlite-inmemory-vs-inmemory/EfCoreProviderContrastMinimal.slnx
          --configuration Release
          --no-build

      - name: Verify EF Core provider baseline
        shell: bash
        run: |
          project="ef-core/testing-sqlite-inmemory-vs-inmemory/src/EfCoreProviderContrastMinimal/EfCoreProviderContrastMinimal.csproj"

          test "$(
            grep \
              --count \
              '<PackageReference' \
              "${project}"
          )" = "2"

          grep \
            --fixed-strings \
            'Include="Microsoft.EntityFrameworkCore.InMemory"' \
            "${project}"

          grep \
            --fixed-strings \
            'Include="Microsoft.EntityFrameworkCore.Sqlite"' \
            "${project}"

          test "$(
            grep \
              --count \
              'Version="10.0.11"' \
              "${project}"
          )" = "2"

      - name: Verify exact provider-contrast output
        shell: bash
        run: |
          output="$(
            dotnet run \
              --project ef-core/testing-sqlite-inmemory-vs-inmemory/src/EfCoreProviderContrastMinimal/EfCoreProviderContrastMinimal.csproj \
              --configuration Release \
              --no-build
          )"

          expected="$(
            printf '%s\n' \
              'EF Core Test Provider Contrast Lab' \
              'Unique index: InMemory=accepted | SQLite=rejected' \
              'Foreign key: InMemory=accepted | SQLite=rejected' \
              'Transaction: InMemory=unsupported | SQLite=rollback-ok' \
              'Database cascade: InMemory=orphan-remains | SQLite=child-removed' \
              'Guidance: relational behavior -> production provider when practical; SQLite remains a test double.'
          )"

          printf '%s\n' "${output}"

          if [[ "${output}" != "${expected}" ]]; then
            echo "Unexpected provider-contrast output."
            exit 1
          fi

      - name: Verify provider-contrast boundaries
        shell: bash
        run: |
          sample="ef-core/testing-sqlite-inmemory-vs-inmemory"

          grep -R \
            --include='*.cs' \
            --include='*.csproj' \
            --fixed-strings \
            'Foreign Keys=True' \
            "${sample}/src"

          grep -R \
            --include='*.cs' \
            --include='*.csproj' \
            --fixed-strings \
            'InMemoryDatabaseRoot' \
            "${sample}/src"

          if grep -R \
              --include='*.cs' \
              --include='*.csproj' \
              -E \
              'TransactionIgnoredWarning|BenchmarkDotNet|Stopwatch' \
              "${sample}/src"; then
            echo "Unexpected ignored-transaction or benchmark code found."
            exit 1
          fi

      - name: Verify no generated database artifacts
        shell: bash
        run: |
          if find \
              ef-core/testing-sqlite-inmemory-vs-inmemory \
              -type f \
              \( \
                -name '*.db' \
                -o -name '*.sqlite' \
                -o -name '*.sqlite3' \
              \) \
              -print \
              -quit |
              grep \
                --quiet \
                .; then
            echo "Generated SQLite database file found."
            exit 1
          fi


  test-agent-framework-incident-triage:
    name: Test Agent Framework incident triage sample
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.x"

      - name: Restore
        run: >
          dotnet restore
          dotnet-ai/agent-framework-incident-triage/AgentFrameworkIncidentTriage.slnx

      - name: Build
        run: >
          dotnet build
          dotnet-ai/agent-framework-incident-triage/AgentFrameworkIncidentTriage.slnx
          --configuration Release
          --no-restore

      - name: Test deterministic layers
        run: >
          dotnet test
          dotnet-ai/agent-framework-incident-triage/AgentFrameworkIncidentTriage.slnx
          --configuration Release
          --no-build

  test-mcp-server-csharp-dotnet:
    name: Test first MCP server sample
    runs-on: ubuntu-latest

    defaults:
      run:
        working-directory: dotnet-ai/mcp-server-csharp-dotnet

    steps:
      - name: Check out repository
        uses: actions/checkout@v5

      - name: Install .NET 10 SDK
        uses: actions/setup-dotnet@v5
        with:
          dotnet-version: "10.0.401"

      - name: Show selected .NET SDK
        run: dotnet --version

      - name: Restore
        run: >
          dotnet restore
          FirstMcpServer.slnx

      - name: Build
        run: >
          dotnet build
          FirstMcpServer.slnx
          --configuration Release
          --no-restore

      - name: Test deterministic layers
        run: >
          dotnet test
          tests/FirstMcpServer.Tests/FirstMcpServer.Tests.csproj
          --configuration Release
          --no-build

      - name: Verify MCP stdio end to end
        run: >
          dotnet run
          --project src/McpClientDemo/McpClientDemo.csproj
          --configuration Release
          --no-build
          --
          src/FirstMcpServer/bin/Release/net10.0/FirstMcpServer.dll