test(live): add sandboxed live test suite

[serhii-workato]

Summary

Added a sandbox-only live test suite that mirrors integration workflows, split by domain for clarity, with shared helpers, safety guards, and documentation.

What’s included

• New live test files:
  • tests/live/test_workspace_live.py
  • tests/live/test_projects_live.py
  • tests/live/test_recipes_live.py
  • tests/live/test_connections_live.py
  • tests/live/test_connectors_live.py
  • tests/live/test_profiles_live.py
• Shared live helpers and fixtures:
  • tests/live/helpers.py (sandbox guard, project resolver, init helpers, cleanup)
  • tests/live/conftest.py (auto-close Workato client sessions)
• Documentation:
  • tests/live/README.md with required env vars and flags
  • docs/DEVELOPER_GUIDE.md updated with live-test instructions

Safety / automation

• Destructive actions are opt-in (push, recipe start/stop).
• Project-creation test cleans up automatically; skips if token lacks permission.
• Sandbox confirmation required via WORKATO_LIVE_SANDBOX=1 (unless host includes trial / preview / sandbox).

How to run

WORKATO_LIVE_SANDBOX=1 make test-live

Optional env vars:

• WORKATO_TEST_PROJECT_ID or WORKATO_TEST_PROJECT_NAME
• WORKATO_TEST_RECIPE_ID
• WORKATO_TEST_CONNECTION_ID
• WORKATO_TEST_PICKLIST_NAME
• WORKATO_LIVE_ALLOW_PUSH=1
• WORKATO_LIVE_ALLOW_RECIPE_CONTROL=1

[github-actions]

Coverage Report

File	Stmts	Miss	Cover	Missing
__init__.py	68	4	94%	10–11, 69–70
cli
__init__.py	52	3	94%	49, 51, 60
containers.py	27	0	100%
cli/commands
__init__.py	0	0	100%
api_clients.py	291	9	96%	27, 302, 448–449, 483, 493, 584, 615, 623
api_collections.py	257	3	98%	28, 183, 347
assets.py	47	2	95%	57–58
connections.py	526	5	99%	591, 593, 599, 637, 988
data_tables.py	165	5	96%	31, 253, 267, 321–322
guide.py	166	1	99%	106
init.py	107	0	100%
profiles.py	231	0	100%
properties.py	97	1	98%	21
pull.py	172	2	98%	193–194
workspace.py	39	2	94%	61, 71
cli/commands/connectors
__init__.py	0	0	100%
command.py	90	2	97%	110, 159
connector_manager.py	203	4	98%	176, 292, 300–301
cli/commands/projects
__init__.py	0	0	100%
command.py	272	10	96%	359–362, 373, 439–441, 491, 495
project_manager.py	166	7	95%	48, 66, 263–264, 276, 317, 325
cli/commands/push
__init__.py	0	0	100%
command.py	133	4	96%	109, 112, 230, 308
cli/commands/recipes
__init__.py	0	0	100%
command.py	427	9	97%	117, 133–134, 272–275, 403, 709
validator.py	706	20	97%	174, 883, 1136, 1223, 1246, 1279, 1281–1282, 1359–1361, 1457–1458, 1517–1518, 1707–1708, 1736–1738
cli/utils
__init__.py	4	0	100%
exception_handler.py	345	33	90%	134–135, 140–141, 143–144, 174–175, 181, 184–185, 270, 300, 333–337, 371, 398, 425, 482, 517, 576, 578–579, 584–585, 587–591
gitignore.py	14	0	100%
ignore_patterns.py	23	0	100%
spinner.py	43	0	100%
token_input.py	45	17	62%	70, 98, 100, 102–104, 107, 124, 127–128, 132–133, 136, 139–140, 142, 144
version_checker.py	135	6	95%	24, 26, 33–34, 72, 102
cli/utils/config
__init__.py	5	0	100%
manager.py	531	33	93%	127, 138, 149, 157–159, 162, 165, 177, 227–228, 399, 417, 421, 424–427, 443, 464, 478, 491, 533, 623–624, 661, 875, 1018–1019, 1033–1034, 1090, 1149
models.py	33	0	100%
profiles.py	334	15	95%	99, 195–196, 199, 234–236, 261–263, 522, 530, 541–542, 546
workspace.py	68	0	100%
TOTAL	5822	197	96%

[serhii-workato]

@hovu96 What do you think - should we parse WORKATO_HOST more explicitly to classify the environment? Right now I decide to add as an example checking substrings (trial, preview, sandbox). We also have URLs like https://app-.devenv.awstf.workato.com which won’t match. Should we allow a regex/whitelist for those, or require WORKATO_LIVE_SANDBOX=1 for any non‑standard host/define type of test running?

Context: How should we define/standardize environment identification for live test runs?