feat(provider-tck): add Java conformance suite for OpenFeature providers

.github/component_owners.yml

@@ -46,6 +46,8 @@ components:
     - toddbaert
   tools/flagd-http-connector:
     - liran2000
+  tools/tck:
+    - aepfli
 
 ignored-authors:
   - renovate-bot

.github/workflows/ci.yml

@@ -7,8 +7,57 @@ on:
       - reopened
     branches:
       - main
+      # Temporary, for the duration of the provider conformance suite's review.
+      # Without it a stacked pull request gets no CI at all: this filter matches
+      # the pull request's BASE branch, so only the suite PR itself -- the one
+      # targeting main -- was ever checked, and the report and adoption PRs
+      # stacked on it were merged-in-theory and tested never. Remove once the
+      # chain has landed. See open-feature/spec#417.
+      - 'feat/provider-tck*'
 
 jobs:
+  # Fast canary for the Provider TCK: runs the full applicable conformance suite three times --
+  # against the SDK's InMemoryProvider, against MultiProvider wrapping one of them, and against
+  # the TCK's own controllable provider, which has a real initialisation and so is the only one
+  # of the three that covers the @lifecycle scenarios. No Docker, no Compose stack and no
+  # network. It finishes in seconds, so a broken step definition, a mis-wired capability gate or
+  # a regression in the shared harness is reported long before the containerised provider suites
+  # in `main` get there — and it points at the TCK rather than at whichever provider noticed
+  # first.
+  #
+  # Deliberately not a gate on `main`: the two run in parallel so a green run is not delayed.
+  # The same suite also runs inside `main` as part of the reactor build; this job exists to
+  # report it fast and in isolation.
+  tck:
+    name: Provider TCK (no Docker)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        with:
+          # The feature files, canonical flag set and control-API document are copied in from
+          # the open-feature/spec submodule at generate-resources; without it there is no suite.
+          submodules: recursive
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5
+        with:
+          java-version: 21
+          distribution: 'temurin'
+          cache: maven
+
+      - name: Cache local Maven repository
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}21-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}21-maven-
+
+      - name: Verify the TCK against the in-memory provider
+        # No `e2e` profile and no Docker: the in-memory suite is not gated behind either.
+        run: mvn --batch-mode --activate-profiles codequality -pl tools/tck -am clean verify
+
   main:
     strategy:
         matrix:

.gitmodules

@@ -18,3 +18,6 @@
 	path = tools/flagd-api-testkit/test-harness
 	url = https://github.com/open-feature/test-harness.git
 	branch = v3.10.1
+[submodule "tools/tck/spec"]
+	path = tools/tck/spec
+	url = https://github.com/open-feature/spec.git

.release-please-manifest.json

@@ -17,6 +17,7 @@
   "tools/flagd-http-connector": "0.0.5",
   "tools/flagd-api": "1.0.0",
   "tools/flagd-api-testkit": "0.2.1",
+  "tools/tck": "0.1.0",
   "tools/flagd-core": "2.0.1",
   ".": "1.0.0",
   "providers/optimizely": "1.0.0"

pom.xml

@@ -28,6 +28,7 @@
     </licenses>
 
     <modules>
+        <module>tools/tck</module>
         <module>tools/flagd-api-testkit</module>
         <module>tools/flagd-api</module>
         <module>tools/flagd-core</module>

release-please-config.json

@@ -205,6 +205,17 @@
         "README.md"
       ]
     },
+    "tools/tck": {
+      "package-name": "dev.openfeature.contrib.tools.tck",
+      "release-type": "simple",
+      "bump-minor-pre-major": true,
+      "bump-patch-for-minor-pre-major": true,
+      "versioning": "default",
+      "extra-files": [
+        "pom.xml",
+        "README.md"
+      ]
+    },
     "tools/flagd-api-testkit": {
       "package-name": "dev.openfeature.contrib.tools.flagdapitestkit",
       "release-type": "simple",

tools/tck/.gitignore

@@ -0,0 +1,7 @@
+# Copied from the `spec` submodule at build time (mvn generate-resources).
+# Do not edit these files directly — they are the language-agnostic definition of the
+# provider contract and live in open-feature/spec, under
+# specification/assets/provider-tck/ (Appendix F).
+src/main/resources/gherkin/
+src/main/resources/flags/
+src/main/resources/openapi/