@camunda/e2e-test-suite 0.0.1019 → 0.0.1021

package/dist/pages/8.10/AuditLogPage.js

@@ -38,6 +38,11 @@ class AuditLogPage {
         await (0, test_1.expect)(checkbox).toBeChecked();
         return true;
     }
+    // Not used by cluster setup: Console re-seeds this panel's checkbox state
+    // from the cluster on every background refresh, so selections made before
+    // "Update" is pressed can be dropped and only some categories get saved. Use
+    // ensureClientAuditLoggingViaApi (utils/consoleApiHelpers) to configure a
+    // cluster; drive this only when the UI itself is what is under test.
     async enableClientOperationLogging() {
         const categories = [
             'Administration',

package/dist/pages/SM-8.10/ManagementIdentityPage.d.ts

@@ -27,7 +27,7 @@ declare class ManagementIdentityPage {
     clickUser(username: string): Promise<void>;
     clickAssignedRolesTab(): Promise<void>;
     clickDemoUser(): Promise<void>;
-    clickDeleteAccessButton(accessToDelete: string): Promise<void>;
+    clickDeleteAccessButton(accessToDelete: string | string[]): Promise<void>;
     clickConfirmDeleteButton(): Promise<void>;
     clickAssignRolesButton(): Promise<void>;
     clickAddButton(): Promise<void>;

package/dist/pages/SM-8.10/ManagementIdentityPage.js

@@ -46,9 +46,16 @@ class ManagementIdentityPage {
         this.optimizeCheckbox = page
             .locator('label')
             .filter({ hasText: 'Optimize (Grants full access to Optimize)' });
-        this.modelerCheckbox = page
-            .locator('label')
-            .filter({ hasText: 'Hub (Grants full access to Hub)' });
+        // Mid-rename: camunda/identity#4541 moves these role descriptions from Web
+        // Modeler to Hub, and the role names follow only later. Depending on which
+        // Identity image the deployed chart carries, the same checkbox renders as
+        // "Web Modeler (Grants full access to Web Modeler)", the half-renamed
+        // "Web Modeler (Grants full access to Hub)", or "Hub (Grants full access to
+        // Hub)". Match all three so the suite stays green on either side of the
+        // rollout. The " (" after the name keeps this off the Admin row.
+        this.modelerCheckbox = page.locator('label').filter({
+            hasText: /(Web Modeler|Hub) \(Grants full access to (Web Modeler|Hub)\)/,
+        });
         this.identityCheckbox = page.locator('label').filter({
             hasText: 'ManagementIdentity (Provides full access to Management Identity)',
         });
@@ -60,8 +67,9 @@ class ManagementIdentityPage {
         this.licenseKeyTagNonCommercial = page.getByText('Non-commercial license');
         this.licenseKeyTagProduction = page.getByText('Production license').first();
         this.licenseKeyTagCommercial = page.getByText('Commercial license');
+        // Same Web Modeler → Hub rename straddle as `modelerCheckbox` above.
         this.modelerAdminCheckbox = page.locator('label').filter({
-            hasText: 'Hub Admin (Grants elevated access to Hub)',
+            hasText: /(Web Modeler|Hub) Admin \(Grants elevated access to (Web Modeler|Hub)\)/,
         });
         this.openSidebarButton = page.getByLabel('Open User Sidebar');
         this.logoutButton = page.getByRole('button', { name: 'Log out' });
@@ -100,9 +108,9 @@ class ManagementIdentityPage {
     // and it does not re-render on its own. Rebuild it from a fresh response
     // between attempts before reporting the role as missing.
     async clickDeleteAccessButton(accessToDelete) {
-        const roleRow = this.page
-            .locator(':text("' + accessToDelete + '")')
-            .first();
+        const candidates = typeof accessToDelete === 'string' ? [accessToDelete] : accessToDelete;
+        const rowSelector = candidates.map((c) => `:text("${c}")`).join(', ');
+        const roleRow = this.page.locator(rowSelector).first();
         for (let attempt = 1; attempt <= 2; attempt++) {
             const rowVisible = await roleRow
                 .waitFor({ state: 'visible', timeout: 30000 })
@@ -114,10 +122,12 @@ class ManagementIdentityPage {
             await this.page.reload({ waitUntil: 'domcontentloaded' });
             await this.clickAssignedRolesTab();
         }
-        await (0, test_1.expect)(roleRow, `No assigned role matching "${accessToDelete}" was found. The role may ` +
-            `already be removed, or its label may have changed in this version.`).toBeVisible({ timeout: 60000 });
+        await (0, test_1.expect)(roleRow, `No assigned role matching ${candidates
+            .map((c) => `"${c}"`)
+            .join(' or ')} was found. The role may already be removed, or its ` +
+            `label may have changed in this version.`).toBeVisible({ timeout: 60000 });
         await this.page
-            .locator('td:right-of(:text("' + accessToDelete + '"))')
+            .locator(candidates.map((c) => `td:right-of(:text("${c}"))`).join(', '))
             .first()
             .click({ timeout: 60000 });
     }

package/dist/pages/SM-8.10/NavigationPage.js

@@ -6,13 +6,17 @@ const LoginPage_1 = require("./LoginPage");
 const sleep_1 = require("../../utils/sleep");
 const constants_1 = require("../../utils/constants");
 const env_1 = require("../../utils/env");
-const ORCHESTRATION_CONTEXT_PATH = process.env.ORCHESTRATION_CONTEXT_PATH ?? '/orchestration';
+// Context paths use `||`, not `??`: an env var set to the empty string must fall back to the
+// default. CI wiring that always exports a variable (set to "" when the leg has no override)
+// otherwise defeats the default — `page.goto('')` resolves to Playwright's baseURL, so the app
+// under test is never reached and the failure surfaces as an unrelated navigation timeout.
+const ORCHESTRATION_CONTEXT_PATH = process.env.ORCHESTRATION_CONTEXT_PATH || '/orchestration';
 const NORMALIZED_ORCHESTRATION_CONTEXT_PATH = ORCHESTRATION_CONTEXT_PATH.startsWith('/')
     ? ORCHESTRATION_CONTEXT_PATH
     : `/${ORCHESTRATION_CONTEXT_PATH}`;
-const MODELER_CONTEXT_PATH = process.env.MODELER_CONTEXT_PATH ?? '/modeler';
-const OPTIMIZE_CONTEXT_PATH = process.env.OPTIMIZE_CONTEXT_PATH ?? '/optimize';
-const MANAGEMENT_IDENTITY_CONTEXT_PATH = process.env.MANAGEMENT_IDENTITY_CONTEXT_PATH ?? '/identity';
+const MODELER_CONTEXT_PATH = process.env.MODELER_CONTEXT_PATH || '/modeler';
+const OPTIMIZE_CONTEXT_PATH = process.env.OPTIMIZE_CONTEXT_PATH || '/optimize';
+const MANAGEMENT_IDENTITY_CONTEXT_PATH = process.env.MANAGEMENT_IDENTITY_CONTEXT_PATH || '/identity';
 const IDENTITY_FIRSTUSER_USERNAME = process.env.DISTRO_QA_E2E_TESTS_IDENTITY_FIRSTUSER_USERNAME || 'demo';
 const IDENTITY_FIRSTUSER_PASSWORD = process.env.DISTRO_QA_E2E_TESTS_IDENTITY_FIRSTUSER_PASSWORD || 'demo';
 class NavigationPage {

package/dist/pages/SM-8.10/UtilitiesPage.js

@@ -142,7 +142,7 @@ async function completeTaskWithRetry(page, taskPanelPage, taskDetailsPage, taskN
                 // be re-opened once the blip clears. Progressive backoff gives the
                 // backend time to recover between attempts.
                 await (0, sleep_1.sleep)(2000 * (attempt + 1));
-                const orchestrationContextPath = process.env.ORCHESTRATION_CONTEXT_PATH ?? '/orchestration';
+                const orchestrationContextPath = process.env.ORCHESTRATION_CONTEXT_PATH || '/orchestration';
                 const normalizedOrchestrationPath = orchestrationContextPath.startsWith('/')
                     ? orchestrationContextPath
                     : `/${orchestrationContextPath}`;

package/dist/pages/SM-8.9/NavigationPage.js

@@ -5,14 +5,18 @@ const test_1 = require("@playwright/test");
 const LoginPage_1 = require("./LoginPage");
 const sleep_1 = require("../../utils/sleep");
 const constants_1 = require("../../utils/constants");
-const ORCHESTRATION_CONTEXT_PATH = process.env.ORCHESTRATION_CONTEXT_PATH ?? '/orchestration';
+// Context paths use `||`, not `??`: an env var set to the empty string must fall back to the
+// default. CI wiring that always exports a variable (set to "" when the leg has no override)
+// otherwise defeats the default — `page.goto('')` resolves to Playwright's baseURL, so the app
+// under test is never reached and the failure surfaces as an unrelated navigation timeout.
+const ORCHESTRATION_CONTEXT_PATH = process.env.ORCHESTRATION_CONTEXT_PATH || '/orchestration';
 const NORMALIZED_ORCHESTRATION_CONTEXT_PATH = ORCHESTRATION_CONTEXT_PATH.startsWith('/')
     ? ORCHESTRATION_CONTEXT_PATH
     : `/${ORCHESTRATION_CONTEXT_PATH}`;
-const MODELER_CONTEXT_PATH = process.env.MODELER_CONTEXT_PATH ?? '/modeler';
-const OPTIMIZE_CONTEXT_PATH = process.env.OPTIMIZE_CONTEXT_PATH ?? '/optimize';
-const CONSOLE_CONTEXT_PATH = process.env.CONSOLE_CONTEXT_PATH ?? '/console';
-const MANAGEMENT_IDENTITY_CONTEXT_PATH = process.env.MANAGEMENT_IDENTITY_CONTEXT_PATH ?? '/identity';
+const MODELER_CONTEXT_PATH = process.env.MODELER_CONTEXT_PATH || '/modeler';
+const OPTIMIZE_CONTEXT_PATH = process.env.OPTIMIZE_CONTEXT_PATH || '/optimize';
+const CONSOLE_CONTEXT_PATH = process.env.CONSOLE_CONTEXT_PATH || '/console';
+const MANAGEMENT_IDENTITY_CONTEXT_PATH = process.env.MANAGEMENT_IDENTITY_CONTEXT_PATH || '/identity';
 const IDENTITY_FIRSTUSER_USERNAME = process.env.DISTRO_QA_E2E_TESTS_IDENTITY_FIRSTUSER_USERNAME || 'demo';
 const IDENTITY_FIRSTUSER_PASSWORD = process.env.DISTRO_QA_E2E_TESTS_IDENTITY_FIRSTUSER_PASSWORD || 'demo';
 // Navigation errors raised by Chromium's network stack rather than by the app:

package/dist/tests/8.10/test-setup.spec.js

@@ -55,7 +55,7 @@ _8_10_1.test.describe('Cluster Setup Tests', () => {
             await clusterSecretsPage.createSetOfSecrets(clusterName, connectorSecrets_1.bedrockCodeInterpreterSecretsValues);
         }
     });
-    (0, _8_10_1.test)('Create Agentic Orchestration Cluster', async ({ page, loginPage, homePage, clusterPage, clusterDetailsPage, clusterSecretsPage, auditLogPage, }, testInfo) => {
+    (0, _8_10_1.test)('Create Agentic Orchestration Cluster', async ({ page, loginPage, homePage, clusterPage, clusterDetailsPage, clusterSecretsPage, }, testInfo) => {
         _8_10_1.test.skip(process.env.IS_PROD === 'true', 'Skipping test because not required on PROD test org');
         _8_10_1.test.skip(process.env.IS_AG === 'true', 'Skipping test because not required when IS_AG is true');
         _8_10_1.test.slow();
@@ -69,8 +69,9 @@ _8_10_1.test.describe('Cluster Setup Tests', () => {
         await homePage.clickClusters();
         await clusterPage.clickClusterLink(clusterName);
         await clusterDetailsPage.assertComponentsHealth();
-        await auditLogPage.clickAuditLogTab();
-        await auditLogPage.enableClientOperationLogging();
+        // Must happen before the MCP toggle: the restart that toggle triggers is
+        // what makes the new audit-log configuration live on the cluster.
+        await (0, consoleApiHelpers_1.ensureClientAuditLoggingViaApi)(page, clusterUuid);
         await clusterDetailsPage.clickSettingsTab();
         await clusterDetailsPage.checkMcpSupportToggle();
         // Enabling MCP support restarts the cluster (Console shows a "Restart

package/dist/tests/SM-8.10/identity-user-flows.spec.js

@@ -53,7 +53,12 @@ SM_8_10_1.test.describe('Identity User Flow Tests', () => {
             });
         }
         await SM_8_10_1.test.step('Remove Access from Hub', async () => {
-            await managementIdentityPage.clickDeleteAccessButton('Grants full access to Hub');
+            // Either wording, for the same Web Modeler → Hub rename straddle the
+            // `modelerCheckbox` locator documents.
+            await managementIdentityPage.clickDeleteAccessButton([
+                'Grants full access to Hub',
+                'Grants full access to Web Modeler',
+            ]);
             await managementIdentityPage.clickConfirmDeleteButton();
         });
         await SM_8_10_1.test.step('Reset Session', async () => {

package/dist/tests/SM-8.9/connectors-user-flows.spec.js

@@ -117,8 +117,28 @@ SM_8_9_1.test.describe('Connectors User Flow Tests @tasklistV2', () => {
         await SM_8_9_1.test.step('Make Authorization Request', async () => {
             const baseURL = process.env.PLAYWRIGHT_BASE_URL ||
                 `http://gke-${process.env.BASE_URL}.ci.distro.ultrawombat.com`;
-            const response = await request.post(`${baseURL}/connectors/inbound/test-webhook-id${randomString}`);
-            await (0, test_1.expect)(response.status()).toBe(200);
+            const url = `${baseURL}/connectors/inbound/test-webhook-id${randomString}`;
+            // Deploying the process does not mean the gateway is already serving the
+            // inbound endpoint, so the first POST can land on a not-yet-registered
+            // webhook and come back 5xx with nothing actually wrong. The sibling
+            // Intermediate Event step below polls for the same reason.
+            //
+            // Retry ONLY on 5xx. A 5xx means the request was not processed, so
+            // re-posting cannot double-trigger the process; a 2xx or 4xx is a real
+            // answer about a live endpoint and must be asserted as-is rather than
+            // retried until it changes.
+            let response = await request.post(url);
+            const deadline = Date.now() + 180000;
+            let attempt = 0;
+            while (response.status() >= 500 && Date.now() < deadline) {
+                attempt++;
+                console.error(`Webhook readiness attempt ${attempt}: ${url} -> ${response.status()}`);
+                await (0, sleep_1.sleep)(10000);
+                response = await request.post(url);
+            }
+            // Not awaited: expect() on a plain value is synchronous, so an `await`
+            // here would read as a retrying assertion while doing nothing.
+            (0, test_1.expect)(response.status()).toBe(200);
         });
         await SM_8_9_1.test.step('Assert Diagram Has Successfully Completed in Operate', async () => {
             await navigationPage.goToOperate();

package/dist/utils/apiHelpers.js

@@ -190,7 +190,7 @@ function buildZeebeApiUrl(resourcePath, environmentOverride, clusterType) {
     const normalizedPath = resourcePath.startsWith('/')
         ? resourcePath
         : `/${resourcePath}`;
-    const contextPath = process.env.ORCHESTRATION_CONTEXT_PATH ?? '/orchestration';
+    const contextPath = process.env.ORCHESTRATION_CONTEXT_PATH || '/orchestration';
     const pathWithPrefix = environment === 'sm' ? `${contextPath}${normalizedPath}` : normalizedPath;
     return `${baseUrl}${pathWithPrefix}`;
 }

package/dist/utils/consoleApiHelpers.d.ts

@@ -3,5 +3,6 @@ export declare function deleteClusterViaApi(page: Page, clusterName: string): Pr
 export declare function createClusterViaApi(page: Page, clusterName: string, region?: string, tasklistV2Enabled?: boolean): Promise<string>;
 export declare function ensureClusterViaApi(page: Page, clusterName: string, region?: string, tasklistV2Enabled?: boolean): Promise<string>;
 export declare function ensureTasklistV2Enabled(page: Page, clusterUuid: string): Promise<void>;
+export declare function ensureClientAuditLoggingViaApi(page: Page, clusterUuid: string): Promise<void>;
 export declare function waitForClusterHealthyViaApi(page: Page, clusterUuid: string, timeoutMs?: number): Promise<void>;
 export declare function waitForClusterRestartHealthyViaApi(page: Page, clusterUuid: string, timeoutMs?: number): Promise<void>;

package/dist/utils/consoleApiHelpers.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.waitForClusterRestartHealthyViaApi = exports.waitForClusterHealthyViaApi = exports.ensureTasklistV2Enabled = exports.ensureClusterViaApi = exports.createClusterViaApi = exports.deleteClusterViaApi = void 0;
+exports.waitForClusterRestartHealthyViaApi = exports.waitForClusterHealthyViaApi = exports.ensureClientAuditLoggingViaApi = exports.ensureTasklistV2Enabled = exports.ensureClusterViaApi = exports.createClusterViaApi = exports.deleteClusterViaApi = void 0;
 const test_1 = require("@playwright/test");
 const sleep_1 = require("./sleep");
 const PLAN_TYPE_ID = '574cde5f-54ae-43c1-851a-e6fb4f03423a';
@@ -401,6 +401,42 @@ async function ensureTasklistV2Enabled(page, clusterUuid) {
     }
 }
 exports.ensureTasklistV2Enabled = ensureTasklistV2Enabled;
+// Client operation logging is opt-in: a fresh cluster carries no audit-log
+// config at all, which Console renders as "all user categories, no client
+// categories". The MCP audit-log specs assert on CLIENT-actor PROCESS_INSTANCE
+// entries, and the engine only records those when the DEPLOYED_RESOURCES client
+// category is enabled.
+//
+// Driving the Audit log tab's checkboxes cannot set this reliably: the panel
+// re-seeds its checkbox state from the cluster every time Console refreshes it
+// in the background, silently dropping selections made before "Update" is
+// pressed. The 2026-08-26/27 nightlies persisted only the last category clicked
+// ("USER_TASKS"), so DEPLOYED_RESOURCES stayed off and every SC-AUD spec polled
+// an audit log that would never receive an entry. Call the same endpoint the
+// Update button calls, then read the config back until it is really persisted.
+const AUDIT_LOG_CATEGORIES = ['ADMIN', 'DEPLOYED_RESOURCES', 'USER_TASKS'];
+async function ensureClientAuditLoggingViaApi(page, clusterUuid) {
+    const orgId = getOrgId();
+    const url = `${getConsoleBaseUrl()}/api/orgs/${orgId}/clusters/${clusterUuid}`;
+    const response = await clusterApiRequest(page, 'PATCH', url, {
+        auditLogEnabled: true,
+        auditLogUserCategories: AUDIT_LOG_CATEGORIES,
+        auditLogClientCategories: AUDIT_LOG_CATEGORIES,
+    });
+    if (response.status() !== 200 && response.status() !== 204) {
+        throw new Error(`Failed to enable client audit logging on cluster "${clusterUuid}": ` +
+            `HTTP ${response.status()} - ${await response.text()}`);
+    }
+    await (0, test_1.expect)(async () => {
+        const readBack = await clusterApiRequest(page, 'GET', url);
+        (0, test_1.expect)(readBack.status()).toBe(200);
+        const body = await readBack.json();
+        const auditLog = (body.data ?? body)?.externalMetadata?.auditLog;
+        (0, test_1.expect)(auditLog?.enabled).toBe(true);
+        (0, test_1.expect)([...(auditLog?.clientCategories ?? [])].sort()).toEqual([...AUDIT_LOG_CATEGORIES].sort());
+    }).toPass({ timeout: 120000, intervals: [2000, 5000, 10000] });
+}
+exports.ensureClientAuditLoggingViaApi = ensureClientAuditLoggingViaApi;
 async function waitForClusterHealthyViaApi(page, clusterUuid, timeoutMs = 1500000) {
     const orgId = getOrgId();
     const url = `${getConsoleBaseUrl()}/api/orgs/${orgId}/clusters/${clusterUuid}`;

package/dist/utils/constants.js

@@ -14,14 +14,13 @@ exports.deletionAssertionOptions = {
     intervals: [5000, 10000, 15000, 30000],
     timeout: 60000,
 };
-// Longest options for audit-log assertions: entries land in secondary storage
-// only after the audit config propagates to the exporters, which is markedly
-// slower on freshly-provisioned SaaS clusters. 90s occasionally lapsed before
-// the CLIENT-actor PROCESS_INSTANCE CREATE entry surfaced, then 180s did too
-// (every audit test in the nightly timed out on the same fresh org, including
-// the REST-triggered one, so nothing about the entry itself was wrong — the
-// pipeline simply had not started exporting yet). Poll for 360s, which still
-// leaves headroom inside the 12-minute test timeout after the ~60s beforeAll.
+// Longest options for audit-log assertions. Measured on the nightly, a
+// CLIENT-actor PROCESS_INSTANCE CREATE entry surfaces within ~10s whenever the
+// cluster has the DEPLOYED_RESOURCES client category enabled — the earlier 90s
+// and 180s budgets were raised against runs where that category was never
+// persisted at all, so no budget could have helped. Keep a generous 360s so a
+// genuinely slow export still passes; it fits inside the 12-minute test timeout
+// after the ~60s beforeAll.
 exports.auditLogAssertionOptions = {
     intervals: [5000, 10000, 15000, 20000, 30000],
     timeout: 360000,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.1019",
+  "version": "0.0.1021",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",