test: introduce separate e2e stage

feat: add e2e test support in Docker builds

- Add all-e2e target that runs e2e tests with credentials
- Default docker build skips e2e tests (no credentials needed)
- CI runs all-e2e target with GitHub secrets
- E2E tests skip gracefully when credentials not provided

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: nicklasl

.github/workflows/ci.yml

@@ -34,7 +34,7 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          target: all
+          target: all-e2e
           push: false
           cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main
           build-args: |
@@ -46,7 +46,7 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          target: all
+          target: all-e2e
           push: false
           cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main
           cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main,mode=max

Dockerfile

@@ -399,16 +399,29 @@ FROM openfeature-provider-js-base AS openfeature-provider-js.test
 COPY confidence-resolver/protos ../../../confidence-resolver/protos
 COPY wasm/resolver_state.pb ../../../wasm/resolver_state.pb
 
+# Run tests
+RUN make test
+
+# ==============================================================================
+# E2E Test OpenFeature Provider (CI only - requires credentials)
+# ==============================================================================
+FROM openfeature-provider-js.test AS openfeature-provider-js.test_e2e
+
 # Accept e2e test credentials as build args (not persisted in image)
 ARG JS_E2E_CONFIDENCE_API_CLIENT_ID
 ARG JS_E2E_CONFIDENCE_API_CLIENT_SECRET
 
-# Run tests with secrets passed as environment variables
+# Run e2e tests with secrets passed as environment variables
+# If credentials are not provided, skip e2e tests (exit 0)
 # Using ARG in RUN means they're only available during this command execution
 RUN --mount=type=cache,target=/root/.yarn \
-    JS_E2E_CONFIDENCE_API_CLIENT_ID="${JS_E2E_CONFIDENCE_API_CLIENT_ID}" \
-    JS_E2E_CONFIDENCE_API_CLIENT_SECRET="${JS_E2E_CONFIDENCE_API_CLIENT_SECRET}" \
-    make test
+    if [ -n "${JS_E2E_CONFIDENCE_API_CLIENT_ID}" ] && [ -n "${JS_E2E_CONFIDENCE_API_CLIENT_SECRET}" ]; then \
+      JS_E2E_CONFIDENCE_API_CLIENT_ID="${JS_E2E_CONFIDENCE_API_CLIENT_ID}" \
+      JS_E2E_CONFIDENCE_API_CLIENT_SECRET="${JS_E2E_CONFIDENCE_API_CLIENT_SECRET}" \
+      make test-e2e; \
+    else \
+      echo "Skipping e2e tests (credentials not provided)"; \
+    fi
 
 # ==============================================================================
 # Build OpenFeature Provider
@@ -466,7 +479,7 @@ FROM openfeature-provider-java-base AS openfeature-provider-java.build
 RUN make build
 
 # ==============================================================================
-# All - Build and validate everything (default target)
+# All - Build and validate everything (default target - no e2e tests)
 # ==============================================================================
 FROM scratch AS all
 
@@ -494,3 +507,15 @@ COPY --from=wasm-rust-guest.lint /workspace/Cargo.toml /markers/lint-guest
 COPY --from=openfeature-provider-js.build /app/dist/index.node.js /artifacts/openfeature-js/
 COPY --from=openfeature-provider-java.build /app/target/*.jar /artifacts/openfeature-java/
 COPY --from=confidence-cloudflare-resolver.lint /workspace/Cargo.toml /markers/lint-cloudflare
+
+# ==============================================================================
+# All E2E - Build and validate everything including e2e tests (CI only)
+# ==============================================================================
+FROM scratch AS all-e2e
+
+# Copy everything from main all target
+COPY --from=all /artifacts /artifacts
+COPY --from=all /markers /markers
+
+# Additionally force e2e test stage to run
+COPY --from=openfeature-provider-js.test_e2e /app/package.json /markers/test-openfeature-js-e2e

README.md

@@ -28,8 +28,8 @@ The Confidence Flag Resolver implemented in Rust, plus example hosts and a Cloud
 docker build .                    # Build, test, lint everything
 make                              # Same, using Makefile
 
-# With Docker + e2e tests (requires Confidence credentials)
-docker build \
+# With Docker + e2e tests (requires Confidence credentials - used in CI)
+docker build --target all-e2e \
   --build-arg JS_E2E_CONFIDENCE_API_CLIENT_ID=<your-client-id> \
   --build-arg JS_E2E_CONFIDENCE_API_CLIENT_SECRET=<your-secret> \
   .

openfeature-provider/js/Makefile

@@ -42,6 +42,9 @@ install: $(INSTALL_STAMP) $(GEN_TS)
 build: $(BUILD_STAMP)
 
 test: $(WASM_ARTIFACT) $(INSTALL_STAMP) $(GEN_TS)
+	yarn test --run --exclude='**/*.e2e.test.ts'
+
+test-e2e: $(WASM_ARTIFACT) $(INSTALL_STAMP) $(GEN_TS)
 	yarn test --run
 
 clean: