fix: ignore WASM e2e tests in CI until plugins are pre-built

Signed-off-by: Shriti Priya <shritip@ibm.com>

Author: monshri

crates/cpex-wasm-host/tests/test_custom_payload_pipeline.rs

@@ -127,6 +127,7 @@ async fn setup_manager() -> PluginManager {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_identity_resolver_denies_empty_user() {
     init_tracing();
     check_binaries_exist();
@@ -148,6 +149,7 @@ async fn test_identity_resolver_denies_empty_user() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_pii_guard_denies_without_clearance() {
     init_tracing();
     check_binaries_exist();
@@ -169,6 +171,7 @@ async fn test_pii_guard_denies_without_clearance() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_pii_guard_allows_with_clearance() {
     init_tracing();
     check_binaries_exist();
@@ -195,6 +198,7 @@ async fn test_pii_guard_allows_with_clearance() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_remote_authz_allows_user_in_acl() {
     init_tracing();
     check_binaries_exist();
@@ -213,6 +217,7 @@ async fn test_remote_authz_allows_user_in_acl() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_remote_authz_denies_user_not_in_acl() {
     init_tracing();
     check_binaries_exist();
@@ -234,6 +239,7 @@ async fn test_remote_authz_denies_user_not_in_acl() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_non_pii_tool_allowed() {
     init_tracing();
     check_binaries_exist();
@@ -252,6 +258,7 @@ async fn test_non_pii_tool_allowed() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_context_table_threads_across_hooks() {
     init_tracing();
     check_binaries_exist();
@@ -291,6 +298,7 @@ async fn test_context_table_threads_across_hooks() {
 }
 
 #[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore = "requires pre-built WASM plugins — run `make build-all-plugins` first"]
 async fn test_wildcard_route_allowed() {
     init_tracing();
     check_binaries_exist();

crates/cpex-wasm-host/tests/test_sandbox_env.rs

@@ -66,6 +66,7 @@ fn extract_context(
 }
 
 #[tokio::test]
+#[ignore = "requires pre-built WASM plugins — run `make build-test-plugins` first"]
 async fn test_plugin_cannot_see_env_vars_without_policy() {
     init_tracing();
     let path = wasm_path();
@@ -128,6 +129,7 @@ async fn test_plugin_cannot_see_env_vars_without_policy() {
 }
 
 #[tokio::test]
+#[ignore = "requires pre-built WASM plugins — run `make build-test-plugins` first"]
 async fn test_plugin_sees_only_allowed_env_var() {
     init_tracing();
     let path = wasm_path();

crates/cpex-wasm-host/tests/test_sandbox_isolation.rs

@@ -52,6 +52,7 @@ fn make_payload() -> MessagePayload {
 }
 
 #[tokio::test]
+#[ignore = "requires pre-built WASM plugins — run `make build-test-plugins` first"]
 async fn test_plugin_cannot_read_etc_passwd_without_filesystem_policy() {
     init_tracing();
     let path = wasm_path();
@@ -119,6 +120,7 @@ async fn test_plugin_cannot_read_etc_passwd_without_filesystem_policy() {
 }
 
 #[tokio::test]
+#[ignore = "requires pre-built WASM plugins — run `make build-test-plugins` first"]
 async fn test_plugin_cannot_read_etc_passwd_with_unrelated_filesystem_policy() {
     init_tracing();
     let path = wasm_path();

crates/cpex-wasm-host/tests/test_sandbox_network.rs

@@ -51,6 +51,7 @@ fn make_payload() -> MessagePayload {
 }
 
 #[tokio::test]
+#[ignore = "requires pre-built WASM plugins — run `make build-test-plugins` first"]
 async fn test_plugin_cannot_access_network_without_policy() {
     init_tracing();
     let path = wasm_path();
@@ -98,6 +99,7 @@ async fn test_plugin_cannot_access_network_without_policy() {
 }
 
 #[tokio::test]
+#[ignore = "requires pre-built WASM plugins — run `make build-test-plugins` first"]
 async fn test_plugin_cannot_access_network_with_unrelated_allowlist() {
     init_tracing();
     let path = wasm_path();