@camunda/e2e-test-suite 0.0.1190 → 0.0.1192

package/dist/pages/8.10/LoginPage.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginPage = void 0;
 const test_1 = require("@playwright/test");
 const UtilitiesPage_1 = require("./UtilitiesPage");
+const authErrorClassification_1 = require("../../utils/authErrorClassification");
 const userNameInputValidInputSchema = {
     _schema: {
         maxlength: 254,
@@ -47,9 +48,14 @@ class LoginPage {
         // missing this detection entirely, so a rate-limited login here fell
         // through to the generic 10-20s retry backoff instead of the 60-90s
         // needed to outlast a typical rate-limit window.
+        //
+        // Kept as one locator because every caller wants to stop waiting on
+        // either page; which of the two rendered is decided at throw time by
+        // classifyAuthErrorPage, since only that distinction says whether the
+        // remedy is a higher limit or an allow-listed runner IP.
         this.rateLimitError = page
-            .getByText(/rate limit has been reached/i)
-            .or(page.getByText(/We are sorry, an error occurred/i));
+            .getByText(authErrorClassification_1.AUTH0_QUOTA_TEXT)
+            .or(page.getByText(authErrorClassification_1.AUTH0_GENERIC_ERROR_TEXT));
         this.loginButton = page.getByRole('button', {
             name: 'Continue',
             exact: true,
@@ -106,13 +112,10 @@ class LoginPage {
             }
             // Surface a rate-limit page with the marker loginWithRetry keys its
             // 60-90s backoff on, rather than burning the remaining attempts on a
-            // form the provider is not going to serve.
-            if (await this.rateLimitError
-                .first()
-                .isVisible()
-                .catch(() => false)) {
-                throw new Error('AUTH0_RATE_LIMIT: identity provider returned an error page');
-            }
+            // form the provider is not going to serve. The marker also records
+            // which of the two Auth0 failure modes this was, and the error copy
+            // behind it, so a recurrence can be diagnosed from the run log alone.
+            await (0, authErrorClassification_1.throwIfAuthErrorPage)(this.page);
             // Neither the password step nor the email step is on screen: some
             // interstitial we do not model. Hand back to fillPassword's own wait
             // instead of re-typing blindly into a page we cannot identify.

package/dist/pages/8.10/UtilitiesPage.js

@@ -6,6 +6,7 @@ const ModelerHomePage_1 = require("./ModelerHomePage");
 const HomePage_1 = require("./HomePage");
 const sleep_1 = require("../../utils/sleep");
 const randomSleep_1 = require("../../utils/randomSleep");
+const authErrorClassification_1 = require("../../utils/authErrorClassification");
 const LoginPage_1 = require("./LoginPage");
 const fileUpload_1 = require("../../utils/fileUpload");
 const mailSlurpClient_1 = require("../../utils/mailSlurpClient");
@@ -53,12 +54,7 @@ async function waitForLoginForm(page, loginPage, totalTimeout = 90000, roundTime
         // whole budget waiting for a login form that will never appear. Bailing
         // out immediately with a typed marker lets loginWithRetry's caller back
         // off long enough to actually outlast the rate-limit window instead.
-        if (await loginPage.rateLimitError
-            .first()
-            .isVisible()
-            .catch(() => false)) {
-            throw new Error('AUTH0_RATE_LIMIT: identity provider returned an error page');
-        }
+        await (0, authErrorClassification_1.throwIfAuthErrorPage)(page);
         try {
             // Confirm we reached the login page before filling credentials.
             // Without this check the locator for 'Email address' can match a hidden
@@ -172,7 +168,7 @@ async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5
         catch (error) {
             lastError = error;
             if (attempt < maxRetries - 1) {
-                const rateLimited = String(error).includes('AUTH0_RATE_LIMIT');
+                const rateLimited = String(error).includes(authErrorClassification_1.AUTH0_RATE_LIMIT);
                 console.warn(`Attempt ${attempt + 1} failed for logging in. Retrying with clean session...`, error);
                 if (rateLimited) {
                     // Auth0 rate-limit windows commonly last 30-90s. Back off long

package/dist/pages/8.8/LoginPage.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginPage = void 0;
 const test_1 = require("@playwright/test");
+const authErrorClassification_1 = require("../../utils/authErrorClassification");
 const UtilitiesPage_1 = require("./UtilitiesPage");
 const sessionRecovery_1 = require("../../utils/sessionRecovery");
 class LoginPage {
@@ -37,8 +38,8 @@ class LoginPage {
         });
         this.errorMessage = page.getByText('Wrong email or password');
         this.rateLimitError = page
-            .getByText(/rate limit has been reached/i)
-            .or(page.getByText(/We are sorry, an error occurred/i));
+            .getByText(authErrorClassification_1.AUTH0_QUOTA_TEXT)
+            .or(page.getByText(authErrorClassification_1.AUTH0_GENERIC_ERROR_TEXT));
     }
     async fillUsername(username) {
         await this.usernameInput.waitFor({ state: 'visible', timeout: 60000 });

package/dist/pages/8.8/UtilitiesPage.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.waitForLoadingToFinish = exports.assertTestUsesCorrectOrganizationFromModeler = exports.expectCountToBeOneOf = exports.createAPIClient = exports.modelAndRunConnectorsTimerEventDiagram = exports.modelAndRunConnectorsDocHandlingDiagram = exports.deleteCluster = exports.deleteAllUserGroups = exports.assertTestUsesCorrectOrganization = exports.clickInvitationLinkInEmail = exports.assertLatestAlertEmail = exports.enableAuthorizations = exports.disableRBA = exports.runMultipleProcesses = exports.modelDiagramFromFile = exports.runProcess = exports.completeTaskWithRetry = exports.assertPageTextWithRetry = exports.assertLocatorVisibleWithRetry = exports.modelRestConnector = exports.loginWithRetry = exports.forceLogoutIfNeeded = void 0;
 const test_1 = require("@playwright/test");
+const authErrorClassification_1 = require("../../utils/authErrorClassification");
 const ModelerHomePage_1 = require("./ModelerHomePage");
 const HomePage_1 = require("./HomePage");
 const sleep_1 = require("../../utils/sleep");
@@ -80,12 +81,7 @@ async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5
             // the usual auth controls. Bail out early on it so the outer retry backs
             // off long enough to outlast the window instead of burning attempts
             // against a 60s wait for a login form that will never render.
-            if (await loginPage.rateLimitError
-                .first()
-                .isVisible()
-                .catch(() => false)) {
-                throw new Error('AUTH0_RATE_LIMIT: identity provider returned an error page');
-            }
+            await (0, authErrorClassification_1.throwIfAuthErrorPage)(page);
             await (0, test_1.expect)(loginPage.loginMessage.or(loginPage.passwordHeading)).toBeVisible({ timeout: 60000 });
             await loginPage.loginWithTestUser(testUser);
             return;
@@ -93,7 +89,7 @@ async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5
         catch (error) {
             lastError = error;
             if (attempt < maxRetries - 1) {
-                const rateLimited = String(error).includes('AUTH0_RATE_LIMIT');
+                const rateLimited = String(error).includes(authErrorClassification_1.AUTH0_RATE_LIMIT);
                 console.warn(`Attempt ${attempt + 1} failed for logging in. Retrying with clean session...`, error);
                 if (rateLimited) {
                     // Auth0 rate-limit windows commonly last 30-90s. Back off long

package/dist/pages/8.9/LoginPage.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginPage = void 0;
 const test_1 = require("@playwright/test");
+const authErrorClassification_1 = require("../../utils/authErrorClassification");
 const UtilitiesPage_1 = require("./UtilitiesPage");
 const userNameInputValidInputSchema = {
     _schema: {
@@ -46,8 +47,8 @@ class LoginPage {
         });
         this.errorMessage = page.getByText('Wrong email or password');
         this.rateLimitError = page
-            .getByText(/rate limit has been reached/i)
-            .or(page.getByText(/We are sorry, an error occurred/i));
+            .getByText(authErrorClassification_1.AUTH0_QUOTA_TEXT)
+            .or(page.getByText(authErrorClassification_1.AUTH0_GENERIC_ERROR_TEXT));
     }
     async fillUsername(username) {
         await (0, test_1.expect)(this.usernameInput.locator).toBeVisible({ timeout: 120000 });
@@ -127,7 +128,11 @@ class LoginPage {
                     .catch(() => false),
             ]);
             if (rateLimitVisible) {
-                throw new Error('AUTH0_RATE_LIMIT: identity provider returned an error page');
+                // Classify which of the two Auth0 failure modes this was, and capture
+                // the error copy, so a recurrence is diagnosable from the run log.
+                // Falls back to the bare marker if the page moved on in between.
+                throw new Error((await (0, authErrorClassification_1.classifyAuthErrorPage)(this.page)) ??
+                    `${authErrorClassification_1.AUTH0_RATE_LIMIT}: identity provider returned an error page`);
             }
             if (passwordHeadingVisible || passwordInputVisible) {
                 authStep = 'password';

package/dist/pages/8.9/UtilitiesPage.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.waitForLoadingToFinish = exports.assertTestUsesCorrectOrganizationFromModeler = exports.expectCountToBeOneOf = exports.createAPIClient = exports.modelAndRunConnectorsTimerEventDiagram = exports.modelAndRunConnectorsDocHandlingDiagram = exports.deleteCluster = exports.deleteAllUserGroups = exports.assertTestUsesCorrectOrganization = exports.assertLatestAlertEmail = exports.clickInvitationLinkInEmail = exports.enableAuthorizations = exports.disableRBA = exports.runMultipleProcesses = exports.runProcess = exports.completeTaskWithRetry = exports.assertPageTextWithRetry = exports.assertLocatorVisibleWithRetry = exports.modelRestConnector = exports.modelDiagramFromFile = exports.loginWithRetry = void 0;
 const test_1 = require("@playwright/test");
+const authErrorClassification_1 = require("../../utils/authErrorClassification");
 const ModelerHomePage_1 = require("./ModelerHomePage");
 const HomePage_1 = require("./HomePage");
 const sleep_1 = require("../../utils/sleep");
@@ -51,12 +52,7 @@ async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5
             // The identity provider occasionally returns a generic error / rate
             // limit page that has none of the usual auth controls. Bail out early
             // when that page is visible so the outer retry can back off.
-            if (await loginPage.rateLimitError
-                .first()
-                .isVisible()
-                .catch(() => false)) {
-                throw new Error('AUTH0_RATE_LIMIT: identity provider returned an error page');
-            }
+            await (0, authErrorClassification_1.throwIfAuthErrorPage)(page);
             // Auth0 may restore directly on password entry depending on session
             // history, so allow either identifier screen or password screen.
             await (0, test_1.expect)(loginPage.loginMessage.or(loginPage.passwordHeading)).toBeVisible({ timeout: 60000 });
@@ -66,7 +62,7 @@ async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5
         catch (error) {
             lastError = error;
             if (attempt < maxRetries - 1) {
-                const rateLimited = String(error).includes('AUTH0_RATE_LIMIT');
+                const rateLimited = String(error).includes(authErrorClassification_1.AUTH0_RATE_LIMIT);
                 console.warn(`Attempt ${attempt + 1} failed for logging in. Retrying with clean session...`, error);
                 if (rateLimited) {
                     // Auth0 rate-limit windows commonly last 30-90s. Back off long

package/dist/resources/mcp_server/mcp_remote_client_meta.bpmn

@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<bpmn:definitions xmlns:bpmn="http://www.omg.org/spec/BPMN/20100524/MODEL"
+    xmlns:bpmndi="http://www.omg.org/spec/BPMN/20100524/DI"
+    xmlns:dc="http://www.omg.org/spec/DD/20100524/DC"
+    xmlns:zeebe="http://camunda.org/schema/zeebe/1.0"
+    xmlns:di="http://www.omg.org/spec/DD/20100524/DI"
+    xmlns:modeler="http://camunda.org/schema/modeler/1.0" id="Definitions_mcp_meta"
+    targetNamespace="http://bpmn.io/schema/bpmn" exporter="Camunda Modeler" exporterVersion="5.42.0"
+    modeler:executionPlatform="Camunda Cloud" modeler:executionPlatformVersion="8.9.0">
+    <bpmn:process id="mcp_remote_client_meta" name="mcp_remote_client_meta" isExecutable="true">
+        <bpmn:startEvent id="StartEvent_1">
+            <bpmn:outgoing>Flow_start_to_echo</bpmn:outgoing>
+        </bpmn:startEvent>
+        <bpmn:serviceTask id="Activity_echo_meta"
+            zeebe:modelerTemplate="io.camunda.connectors.agenticai.mcp.remoteclient.v0"
+            zeebe:modelerTemplateVersion="3">
+            <bpmn:extensionElements>
+                <zeebe:taskDefinition type="io.camunda.agenticai:mcpremoteclient:1" retries="3" />
+                <zeebe:ioMapping>
+                    <zeebe:input source="http" target="data.transport.type" />
+                    <zeebe:input source="http://localhost:12001/mcp"
+                        target="data.transport.http.url" />
+                    <zeebe:input source="noAuth" target="data.transport.http.authentication.type" />
+                    <zeebe:input source="=false" target="data.options.clientCache" />
+                    <zeebe:input source="standalone" target="data.connectorMode.type" />
+                    <zeebe:input source="tools/call" target="data.connectorMode.operation.type" />
+                    <zeebe:input source="echoMeta" target="data.connectorMode.operation.toolName" />
+                    <zeebe:input source="={exampleMetaKey: &#34;exampleMetaValue&#34;}"
+                        target="data.connectorMode.meta" />
+                </zeebe:ioMapping>
+                <zeebe:taskHeaders>
+                    <zeebe:header key="elementTemplateVersion" value="3" />
+                    <zeebe:header key="elementTemplateId"
+                        value="io.camunda.connectors.agenticai.mcp.remoteclient.v0" />
+                    <zeebe:header key="resultVariable" value="echoMetaResult" />
+                    <zeebe:header key="retryBackoff" value="PT0S" />
+                </zeebe:taskHeaders>
+            </bpmn:extensionElements>
+            <bpmn:incoming>Flow_start_to_echo</bpmn:incoming>
+            <bpmn:outgoing>Flow_echo_to_end</bpmn:outgoing>
+        </bpmn:serviceTask>
+        <bpmn:endEvent id="Event_end">
+            <bpmn:incoming>Flow_echo_to_end</bpmn:incoming>
+        </bpmn:endEvent>
+        <bpmn:sequenceFlow id="Flow_start_to_echo" sourceRef="StartEvent_1"
+            targetRef="Activity_echo_meta" />
+        <bpmn:sequenceFlow id="Flow_echo_to_end" sourceRef="Activity_echo_meta"
+            targetRef="Event_end" />
+    </bpmn:process>
+    <bpmndi:BPMNDiagram id="BPMNDiagram_1">
+        <bpmndi:BPMNPlane id="BPMNPlane_1" bpmnElement="mcp_remote_client_meta">
+            <bpmndi:BPMNShape id="_BPMNShape_StartEvent_2" bpmnElement="StartEvent_1">
+                <dc:Bounds x="152" y="99" width="36" height="36" />
+            </bpmndi:BPMNShape>
+            <bpmndi:BPMNShape id="Activity_echo_meta_di" bpmnElement="Activity_echo_meta">
+                <dc:Bounds x="250" y="77" width="100" height="80" />
+            </bpmndi:BPMNShape>
+            <bpmndi:BPMNShape id="Event_end_di" bpmnElement="Event_end">
+                <dc:Bounds x="412" y="99" width="36" height="36" />
+            </bpmndi:BPMNShape>
+            <bpmndi:BPMNEdge id="Flow_start_to_echo_di" bpmnElement="Flow_start_to_echo">
+                <di:waypoint x="188" y="117" />
+                <di:waypoint x="250" y="117" />
+            </bpmndi:BPMNEdge>
+            <bpmndi:BPMNEdge id="Flow_echo_to_end_di" bpmnElement="Flow_echo_to_end">
+                <di:waypoint x="350" y="117" />
+                <di:waypoint x="412" y="117" />
+            </bpmndi:BPMNEdge>
+        </bpmndi:BPMNPlane>
+    </bpmndi:BPMNDiagram>
+</bpmn:definitions>

package/dist/tests/c8Run-8.10/mcp-meta.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/c8Run-8.10/mcp-meta.spec.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const c8Run_8_10_1 = require("../../fixtures/c8Run-8.10");
+const test_1 = require("@playwright/test");
+const UtilitiesPage_1 = require("../../pages/c8Run-8.10/UtilitiesPage");
+const _setup_1 = require("../../test-setup.js");
+const apiHelpers_1 = require("../../utils/apiHelpers");
+const zeebeClient_1 = require("../../utils/zeebeClient");
+let processId;
+let bpmnPath;
+c8Run_8_10_1.test.beforeAll(async () => {
+    if (process.env.MCP_SERVER_AVAILABLE !== 'true') {
+        return;
+    }
+    await (0, apiHelpers_1.validateMcpServerHealth)();
+    await (0, apiHelpers_1.waitForConnectorsReady)(undefined, 300000, [
+        'io.camunda.agenticai:mcpremoteclient:1',
+    ]);
+    processId = `mcp_remote_client_meta_${await (0, _setup_1.generateRandomStringAsync)(6)}`;
+    const tempDir = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-meta-'));
+    bpmnPath = (0, node_path_1.join)(tempDir, 'mcp_remote_client_meta.bpmn');
+    const bpmn = await (0, promises_1.readFile)('./resources/mcp_server/mcp_remote_client_meta.bpmn', 'utf8');
+    await (0, promises_1.writeFile)(bpmnPath, bpmn.replaceAll('mcp_remote_client_meta', processId));
+    await (0, zeebeClient_1.deploy)([bpmnPath]);
+    await (0, zeebeClient_1.createInstances)(processId, 1, 1);
+});
+c8Run_8_10_1.test.afterAll(async () => {
+    if (bpmnPath) {
+        await (0, promises_1.rm)((0, node_path_1.dirname)(bpmnPath), { recursive: true, force: true });
+    }
+});
+c8Run_8_10_1.test.describe('@tasklistV2 MCP Client connector _meta tests', () => {
+    c8Run_8_10_1.test.skip(process.env.MCP_SERVER_AVAILABLE !== 'true', 'MCP server is only available on Linux and macOS CI runners');
+    c8Run_8_10_1.test.beforeEach(async ({ page, operateLoginPage, operateHomePage }) => {
+        await (0, UtilitiesPage_1.navigateToApp)(page, 'operate');
+        await operateLoginPage.login('demo', 'demo');
+        await operateHomePage.operateBannerIsVisible();
+    });
+    c8Run_8_10_1.test.afterEach(async ({ page }, testInfo) => {
+        await (0, _setup_1.captureScreenshot)(page, testInfo);
+        await (0, _setup_1.captureFailureVideo)(page, testInfo);
+    });
+    (0, c8Run_8_10_1.test)('As a user I can forward MCP _meta and have it echoed back by the server', async ({ operateHomePage, operateProcessesPage, operateProcessInstancePage, }) => {
+        c8Run_8_10_1.test.slow();
+        await c8Run_8_10_1.test.step('Navigate to completed process instance', async () => {
+            await operateHomePage.clickProcessesTab();
+            await operateProcessesPage.clickProcessCompletedCheckbox();
+            await operateProcessesPage.clickProcessInstanceLink(processId);
+            await operateProcessInstancePage.completedIconAssertion();
+        });
+        await c8Run_8_10_1.test.step('Verify echoMetaResult reflects the configured _meta', async () => {
+            await operateProcessInstancePage.verifyVariableJsonContent('echoMetaResult', (value) => {
+                const data = value;
+                (0, test_1.expect)(data.name).toBe('echoMeta');
+                (0, test_1.expect)(data.isError).toBe(false);
+                (0, test_1.expect)(data.content).toBeDefined();
+                (0, test_1.expect)(data.content.length).toBeGreaterThan(0);
+                (0, test_1.expect)(data.content[0].type).toBe('text');
+                // The mcp-test-server echoMeta tool returns the request `_meta`
+                // serialized verbatim as a JSON string. The MCP client forwards
+                // `data.connectorMode.meta` unmodified as the request `_meta`, so a
+                // successful round-trip proves end-to-end `_meta` propagation.
+                const echoed = JSON.parse(data.content[0].text);
+                (0, test_1.expect)(echoed).toMatchObject({
+                    exampleMetaKey: 'exampleMetaValue',
+                });
+            });
+        });
+    });
+});

package/dist/utils/authErrorClassification.d.ts

@@ -0,0 +1,8 @@
+import { Page } from '@playwright/test';
+export declare const AUTH0_RATE_LIMIT = "AUTH0_RATE_LIMIT";
+export declare const AUTH0_RATE_LIMIT_QUOTA = "AUTH0_RATE_LIMIT_QUOTA";
+export declare const AUTH0_RATE_LIMIT_GENERIC = "AUTH0_RATE_LIMIT_GENERIC";
+export declare const AUTH0_QUOTA_TEXT: RegExp;
+export declare const AUTH0_GENERIC_ERROR_TEXT: RegExp;
+export declare function classifyAuthErrorPage(page: Page): Promise<string | null>;
+export declare function throwIfAuthErrorPage(page: Page): Promise<void>;

package/dist/utils/authErrorClassification.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.throwIfAuthErrorPage = exports.classifyAuthErrorPage = exports.AUTH0_GENERIC_ERROR_TEXT = exports.AUTH0_QUOTA_TEXT = exports.AUTH0_RATE_LIMIT_GENERIC = exports.AUTH0_RATE_LIMIT_QUOTA = exports.AUTH0_RATE_LIMIT = void 0;
+// Auth0 renders an error page for two structurally different failures, and
+// until now both were counted as one signal. They need different responses:
+//
+//   QUOTA   - the tenant's request rate limit ("...rate limit has been
+//             reached"). This is what moving the tenant to a Production
+//             environment raises.
+//   GENERIC - Auth0's catch-all error page. Attack Protection blocks
+//             (suspicious IP throttling, brute-force protection) surface here,
+//             and those are governed by their own settings rather than the
+//             tenant's rate limits, so a Production environment does nothing
+//             for them. A CI runner signing in as ~19 freshly created accounts
+//             from one egress IP inside a few minutes is precisely the pattern
+//             they exist to detect.
+//
+// Telling them apart matters because the remedies do not overlap: one is a
+// limit to raise, the other is a source IP to allow-list. Counting them as one
+// number is why we could not say which we were hitting.
+//
+// Both markers keep the AUTH0_RATE_LIMIT prefix, so the existing
+// String(error).includes(AUTH0_RATE_LIMIT) backoff checks match unchanged.
+exports.AUTH0_RATE_LIMIT = 'AUTH0_RATE_LIMIT';
+exports.AUTH0_RATE_LIMIT_QUOTA = `${exports.AUTH0_RATE_LIMIT}_QUOTA`;
+exports.AUTH0_RATE_LIMIT_GENERIC = `${exports.AUTH0_RATE_LIMIT}_GENERIC`;
+exports.AUTH0_QUOTA_TEXT = /rate limit has been reached/i;
+exports.AUTH0_GENERIC_ERROR_TEXT = /We are sorry, an error occurred/i;
+const MAX_DETAIL_CHARS = 300;
+// The error page's own copy and error code are what separate the two
+// mechanisms, so capture them rather than only the fact that some error
+// rendered. Deliberately narrow: host plus path, and Auth0's two error query
+// params, never the whole URL - on an OAuth redirect that can carry `code` and
+// `state`, which do not belong in a CI log.
+async function readErrorContext(page) {
+    const parts = [];
+    try {
+        const url = new URL(page.url());
+        parts.push(`${url.host}${url.pathname}`);
+        for (const key of ['error', 'error_description']) {
+            const value = url.searchParams.get(key);
+            if (value) {
+                parts.push(`${key}=${value}`);
+            }
+        }
+    }
+    catch {
+        // page.url() is not always parsable (about:blank on a torn-down context).
+    }
+    try {
+        const text = await page.locator('body').innerText({ timeout: 5000 });
+        const collapsed = text.replace(/\s+/g, ' ').trim();
+        if (collapsed) {
+            parts.push(`text="${collapsed.slice(0, MAX_DETAIL_CHARS)}"`);
+        }
+    }
+    catch {
+        // Best-effort only: this runs on a failure path and must never replace
+        // the caller's diagnosis with its own.
+    }
+    return parts.join(' | ');
+}
+// Returns the message to throw when an Auth0 error page is on screen, or null
+// when it is not. Never throws, for the reason above.
+async function classifyAuthErrorPage(page) {
+    const [quota, generic] = await Promise.all([
+        page
+            .getByText(exports.AUTH0_QUOTA_TEXT)
+            .first()
+            .isVisible()
+            .catch(() => false),
+        page
+            .getByText(exports.AUTH0_GENERIC_ERROR_TEXT)
+            .first()
+            .isVisible()
+            .catch(() => false),
+    ]);
+    if (!quota && !generic) {
+        return null;
+    }
+    // Quota wins when both match: its copy is the specific diagnosis, and the
+    // generic banner can wrap it.
+    const marker = quota ? exports.AUTH0_RATE_LIMIT_QUOTA : exports.AUTH0_RATE_LIMIT_GENERIC;
+    const context = await readErrorContext(page);
+    const summary = `${marker}: identity provider returned an error page`;
+    return context ? `${summary} | ${context}` : summary;
+}
+exports.classifyAuthErrorPage = classifyAuthErrorPage;
+async function throwIfAuthErrorPage(page) {
+    const message = await classifyAuthErrorPage(page);
+    if (message) {
+        throw new Error(message);
+    }
+}
+exports.throwIfAuthErrorPage = throwIfAuthErrorPage;

package/dist/utils/utils.d.ts

@@ -1,3 +1,4 @@
 import { Page } from '@playwright/test';
-export declare const AUTH0_RATE_LIMIT = "AUTH0_RATE_LIMIT";
+import { AUTH0_RATE_LIMIT } from './authErrorClassification';
+export { AUTH0_RATE_LIMIT };
 export declare function loginToApp(appName: string, page: Page): Promise<void>;

package/dist/utils/utils.js

@@ -3,16 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loginToApp = exports.AUTH0_RATE_LIMIT = void 0;
 const test_1 = require("@playwright/test");
 const LoginPage_1 = require("../pages/8.8/LoginPage");
-exports.AUTH0_RATE_LIMIT = 'AUTH0_RATE_LIMIT';
-async function throwIfRateLimited(loginPage) {
-    const rateLimited = await loginPage.rateLimitError
-        .first()
-        .isVisible()
-        .catch(() => false);
-    if (rateLimited) {
-        throw new Error(`${exports.AUTH0_RATE_LIMIT}: identity provider returned an error page`);
-    }
-}
+const authErrorClassification_1 = require("./authErrorClassification");
+Object.defineProperty(exports, "AUTH0_RATE_LIMIT", { enumerable: true, get: function () { return authErrorClassification_1.AUTH0_RATE_LIMIT; } });
 async function loginToApp(appName, page) {
     await page.goto(appName, { waitUntil: 'domcontentloaded', timeout: 60000 });
     // 8.8 SaaS occasionally experiences 429s on app.js during navigation rendering,
@@ -25,13 +17,13 @@ async function loginToApp(appName, page) {
     // caller can tell a rate limit apart from a slow login form, and the caller
     // needs that distinction to pick a backoff long enough to outlast the window.
     await (0, test_1.expect)(loginPage.usernameInput.or(loginPage.rateLimitError.first())).toBeVisible({ timeout: 60000 });
-    await throwIfRateLimited(loginPage);
+    await (0, authErrorClassification_1.throwIfAuthErrorPage)(page);
     await loginPage.fillUsername(process.env.C8_USERNAME);
     await (0, test_1.expect)(loginPage.usernameInput).toHaveValue(process.env.C8_USERNAME);
     await (0, test_1.expect)(loginPage.loginMessage).toBeVisible();
     await loginPage.clickContinueButton();
     await (0, test_1.expect)(loginPage.passwordInput.or(loginPage.rateLimitError.first())).toBeVisible({ timeout: 90000 });
-    await throwIfRateLimited(loginPage);
+    await (0, authErrorClassification_1.throwIfAuthErrorPage)(page);
     await loginPage.fillPassword(process.env.C8_PASSWORD);
     await (0, test_1.expect)(loginPage.passwordHeading).toBeVisible({ timeout: 90000 });
     await loginPage.clickLoginButton();
@@ -44,7 +36,7 @@ async function loginToApp(appName, page) {
     catch (error) {
         // Auth0 can also serve the rate-limit page as the response to the password
         // submit, in which case the redirect back to appName never happens.
-        await throwIfRateLimited(loginPage);
+        await (0, authErrorClassification_1.throwIfAuthErrorPage)(page);
         throw error;
     }
     await page

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.1190",
+  "version": "0.0.1192",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",

package/resources/mcp_server/mcp_remote_client_meta.bpmn

@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<bpmn:definitions xmlns:bpmn="http://www.omg.org/spec/BPMN/20100524/MODEL"
+    xmlns:bpmndi="http://www.omg.org/spec/BPMN/20100524/DI"
+    xmlns:dc="http://www.omg.org/spec/DD/20100524/DC"
+    xmlns:zeebe="http://camunda.org/schema/zeebe/1.0"
+    xmlns:di="http://www.omg.org/spec/DD/20100524/DI"
+    xmlns:modeler="http://camunda.org/schema/modeler/1.0" id="Definitions_mcp_meta"
+    targetNamespace="http://bpmn.io/schema/bpmn" exporter="Camunda Modeler" exporterVersion="5.42.0"
+    modeler:executionPlatform="Camunda Cloud" modeler:executionPlatformVersion="8.9.0">
+    <bpmn:process id="mcp_remote_client_meta" name="mcp_remote_client_meta" isExecutable="true">
+        <bpmn:startEvent id="StartEvent_1">
+            <bpmn:outgoing>Flow_start_to_echo</bpmn:outgoing>
+        </bpmn:startEvent>
+        <bpmn:serviceTask id="Activity_echo_meta"
+            zeebe:modelerTemplate="io.camunda.connectors.agenticai.mcp.remoteclient.v0"
+            zeebe:modelerTemplateVersion="3">
+            <bpmn:extensionElements>
+                <zeebe:taskDefinition type="io.camunda.agenticai:mcpremoteclient:1" retries="3" />
+                <zeebe:ioMapping>
+                    <zeebe:input source="http" target="data.transport.type" />
+                    <zeebe:input source="http://localhost:12001/mcp"
+                        target="data.transport.http.url" />
+                    <zeebe:input source="noAuth" target="data.transport.http.authentication.type" />
+                    <zeebe:input source="=false" target="data.options.clientCache" />
+                    <zeebe:input source="standalone" target="data.connectorMode.type" />
+                    <zeebe:input source="tools/call" target="data.connectorMode.operation.type" />
+                    <zeebe:input source="echoMeta" target="data.connectorMode.operation.toolName" />
+                    <zeebe:input source="={exampleMetaKey: &#34;exampleMetaValue&#34;}"
+                        target="data.connectorMode.meta" />
+                </zeebe:ioMapping>
+                <zeebe:taskHeaders>
+                    <zeebe:header key="elementTemplateVersion" value="3" />
+                    <zeebe:header key="elementTemplateId"
+                        value="io.camunda.connectors.agenticai.mcp.remoteclient.v0" />
+                    <zeebe:header key="resultVariable" value="echoMetaResult" />
+                    <zeebe:header key="retryBackoff" value="PT0S" />
+                </zeebe:taskHeaders>
+            </bpmn:extensionElements>
+            <bpmn:incoming>Flow_start_to_echo</bpmn:incoming>
+            <bpmn:outgoing>Flow_echo_to_end</bpmn:outgoing>
+        </bpmn:serviceTask>
+        <bpmn:endEvent id="Event_end">
+            <bpmn:incoming>Flow_echo_to_end</bpmn:incoming>
+        </bpmn:endEvent>
+        <bpmn:sequenceFlow id="Flow_start_to_echo" sourceRef="StartEvent_1"
+            targetRef="Activity_echo_meta" />
+        <bpmn:sequenceFlow id="Flow_echo_to_end" sourceRef="Activity_echo_meta"
+            targetRef="Event_end" />
+    </bpmn:process>
+    <bpmndi:BPMNDiagram id="BPMNDiagram_1">
+        <bpmndi:BPMNPlane id="BPMNPlane_1" bpmnElement="mcp_remote_client_meta">
+            <bpmndi:BPMNShape id="_BPMNShape_StartEvent_2" bpmnElement="StartEvent_1">
+                <dc:Bounds x="152" y="99" width="36" height="36" />
+            </bpmndi:BPMNShape>
+            <bpmndi:BPMNShape id="Activity_echo_meta_di" bpmnElement="Activity_echo_meta">
+                <dc:Bounds x="250" y="77" width="100" height="80" />
+            </bpmndi:BPMNShape>
+            <bpmndi:BPMNShape id="Event_end_di" bpmnElement="Event_end">
+                <dc:Bounds x="412" y="99" width="36" height="36" />
+            </bpmndi:BPMNShape>
+            <bpmndi:BPMNEdge id="Flow_start_to_echo_di" bpmnElement="Flow_start_to_echo">
+                <di:waypoint x="188" y="117" />
+                <di:waypoint x="250" y="117" />
+            </bpmndi:BPMNEdge>
+            <bpmndi:BPMNEdge id="Flow_echo_to_end_di" bpmnElement="Flow_echo_to_end">
+                <di:waypoint x="350" y="117" />
+                <di:waypoint x="412" y="117" />
+            </bpmndi:BPMNEdge>
+        </bpmndi:BPMNPlane>
+    </bpmndi:BPMNDiagram>
+</bpmn:definitions>