Add CI integration and update documentation for E2E tests

Co-authored-by: mgierschdev <62764972+mgierschdev@users.noreply.github.com>

Author: Copilot

.github/workflows/e2e-tests.yml

@@ -0,0 +1,87 @@
+name: E2E QA Validation
+
+on:
+  push:
+    branches: [ main, develop, 'copilot/**' ]
+  pull_request:
+    branches: [ main, develop ]
+  workflow_dispatch:  # Allow manual triggering
+
+permissions:
+  contents: read
+
+jobs:
+  e2e-tests:
+    name: End-to-End QA Validation
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    
+    permissions:
+      contents: read
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    # Set up Java for backend
+    - name: Set up JDK 17
+      uses: actions/setup-java@v4
+      with:
+        java-version: '17'
+        distribution: 'temurin'
+        cache: 'gradle'
+    
+    # Set up Node.js for frontend and tests
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '18'
+        cache: 'npm'
+        cache-dependency-path: |
+          frontend/package-lock.json
+          e2e-tests/package.json
+    
+    # Grant execute permissions
+    - name: Grant execute permission for gradlew
+      run: chmod +x backend/gradlew
+    
+    # Install frontend dependencies (required by E2E test)
+    - name: Install frontend dependencies
+      run: |
+        cd frontend
+        npm ci
+    
+    # Install E2E test dependencies
+    - name: Install E2E test dependencies
+      run: |
+        cd e2e-tests
+        npm ci
+    
+    # Install Playwright browsers
+    - name: Install Playwright Chromium
+      run: |
+        cd e2e-tests
+        npx playwright install chromium
+    
+    # Run E2E tests
+    - name: Run E2E QA validation tests
+      run: |
+        cd e2e-tests
+        npm test
+    
+    # Upload screenshots on failure or success
+    - name: Upload screenshots
+      if: always()
+      uses: actions/upload-artifact@v4
+      with:
+        name: e2e-screenshots
+        path: /tmp/qa-screenshot-*.png
+        if-no-files-found: warn
+    
+    # Upload test logs on failure
+    - name: Upload logs on failure
+      if: failure()
+      uses: actions/upload-artifact@v4
+      with:
+        name: e2e-logs
+        path: e2e-tests/*.log
+        if-no-files-found: ignore

.gitignore

@@ -1 +1,3 @@
-.idea
+.idea
+e2e-tests/node_modules/
+e2e-tests/package-lock.json

README.md

@@ -77,6 +77,19 @@ make test       # Run all tests
 make docker-up  # Start with Docker
 ```
 
+### Validate Installation
+
+Run end-to-end tests to verify everything works:
+
+```bash
+cd e2e-tests
+npm install
+npx playwright install chromium
+npm test
+```
+
+This will start both services, run comprehensive tests, and generate a report.
+
 ## Architecture at a Glance
 
 ```mermaid
@@ -300,9 +313,35 @@ npm test
 
 **Philosophy**: Focus on component behavior and rendering. API calls are tested in integration tests.
 
+### End-to-End Tests
+
+**Location**: `e2e-tests/`
+
+**Coverage**:
+- ✅ **Application Boot** - Backend and frontend startup validation
+- ✅ **Game Initialization** - Board setup and initial state
+- ✅ **Legal Moves** - Basic move validation (e2-e4, e7-e5)
+- ✅ **Illegal Move Rejection** - Move validation and error handling
+- ✅ **Special Rules** - Valid moves API, pawn promotion, castling, en passant
+- ✅ **Check and Checkmate** - Fool's Mate detection
+- ✅ **Non-Goals Validation** - Documented limitations verification
+- ✅ **API Validation** - All REST endpoints
+- ✅ **Security Posture** - Authentication, secrets, CORS
+
+**Run Tests**:
+```bash
+cd e2e-tests
+npm install
+npx playwright install chromium
+npm test
+```
+
+**Philosophy**: Black box testing from a real user's perspective. Uses only public interfaces (HTTP API and browser UI). Tests behavior, not implementation.
+
+**CI Integration**: E2E tests run automatically on push via GitHub Actions workflow.
+
 ### What's Intentionally Missing
 
-- **E2E Tests**: No Playwright/Cypress tests (frontend + backend integration tested manually)
 - **Performance Tests**: No load testing (not a production service)
 - **Security Tests**: No penetration testing (local HTTP only)