@camunda/e2e-test-suite 0.0.1269 → 0.0.1271

package/dist/pages/8.10/AppsPage.d.ts

@@ -25,9 +25,13 @@ declare class AppsPage {
     readonly operateMenuItem: Locator;
     readonly consoleMenuItem: Locator;
     readonly modelerMenuItem: Locator;
+    readonly hubSidebar: Locator;
     constructor(page: Page);
     private reloadForRecovery;
     private entryAppeared;
+    private expandHubClusterGroup;
+    private hubAppLink;
+    private clickHubClusterApp;
     clickCluster(component: Locator, name: string): Promise<void>;
     clickModeler(): Promise<void>;
     private isModelerAuthTransit;

package/dist/pages/8.10/AppsPage.js

@@ -4,6 +4,9 @@ exports.AppsPage = void 0;
 const test_1 = require("@playwright/test");
 const sleep_1 = require("../../utils/sleep");
 const UtilitiesPage_1 = require("../8.10/UtilitiesPage");
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
 class AppsPage {
     page;
     modelerLink;
@@ -30,8 +33,14 @@ class AppsPage {
     operateMenuItem;
     consoleMenuItem;
     modelerMenuItem;
+    hubSidebar;
     constructor(page) {
         this.page = page;
+        // Camunda Hub's persistent "Main navigation" sidebar lists each cluster
+        // with its own apps (Operate/Tasklist/Optimize/Identity) as child links
+        // -- there is no per-app switcher panel to open on Hub (see
+        // clickCamundaApps below). Mirrors pages/8.9/AppsPage.ts.
+        this.hubSidebar = page.getByRole('navigation', { name: 'Main navigation' });
         this.modelerLink = page.getByRole('link', { name: 'Modeler', exact: true });
         this.appSwitcherButton = page.getByLabel('App Switcher');
         this.tasklistLink = page.getByRole('link', { name: 'Tasklist', exact: true });
@@ -137,6 +146,105 @@ class AppsPage {
             .then(() => true)
             .catch(() => false);
     }
+    // Camunda Hub's sidebar groups by cluster, not by app: each cluster row
+    // expands to reveal its own per-app child links (Operate/Tasklist/...).
+    // camunda-hub's own nav-shell-ds.spec.saas.tsx documents the shape: "the
+    // design system splits the group row into a label control and a chevron
+    // control, both labelled by the cluster name; either one opens it" -- and
+    // the child links do not exist in the DOM at all until expanded (not just
+    // hidden), and are not nested under any container matchable by cluster
+    // name once expanded. So: find the toggle by the cluster's own name
+    // (`.first()` because both controls share that name), click it, then look
+    // up the app link sidebar-wide rather than scoped to a "group" container
+    // that doesn't reliably exist -- which is why every OTHER expanded group
+    // must be collapsed first, below. Ported from pages/8.7/AppsPage.ts
+    // (expandHubClusterGroup), which itself fixed the exact bug an unscoped
+    // sidebar-wide lookup has: with more than one cluster in the org, a
+    // DIFFERENT cluster's group can already be expanded (left over from an
+    // earlier action on the same page), and `.first()` would then silently
+    // resolve to THAT cluster's app link instead of throwing.
+    async expandHubClusterGroup(clusterName) {
+        const toggle = this.hubSidebar
+            .getByRole('button', { name: clusterName })
+            .first();
+        // Check THIS cluster's own toggle state via aria-expanded, not "is any
+        // app link with this name visible anywhere in the sidebar" -- the latter
+        // is exactly the unscoped check that let a different, already-expanded
+        // cluster's link satisfy it.
+        const alreadyExpanded = (await toggle.getAttribute('aria-expanded').catch(() => null)) === 'true';
+        if (!alreadyExpanded) {
+            // This is the only expansion action in the Hub path -- swallowing its
+            // failure made a broken expansion look successful and left the caller
+            // to burn the full 30s below waiting on an app link that could never
+            // appear, hiding the actionable error behind an unrelated timeout.
+            await toggle.click({ timeout: 10000 });
+        }
+        // An app link resolved after this is sidebar-wide (see clickHubClusterApp
+        // below), so if an EARLIER call in the same test left a different
+        // cluster's group expanded too, two links with this app name now exist --
+        // a strict-mode violation, or worse, `.first()` silently picking the
+        // wrong cluster's link. Collapse every other expanded group before
+        // resolving it -- there is no container to scope the link to instead,
+        // since the child links aren't nested under anything matchable by
+        // cluster name once expanded.
+        // hasNotText filters DOM text content, not the accessible name -- the
+        // expanded chevron can be labelled via aria-label with no text content of
+        // its own, in which case hasNotText would fail to exclude the toggle we
+        // just expanded and this loop would immediately collapse it again. Match
+        // by accessible name instead, excluding any name CONTAINING clusterName
+        // -- not just one exactly equal to it, since the rendered toggle name
+        // carries more than the bare cluster name.
+        const otherExpandedToggles = this.hubSidebar.getByRole('button', {
+            expanded: true,
+            name: new RegExp(`^(?!.*${escapeRegExp(clusterName)}).+$`),
+        });
+        for (let i = 0; i < 5 && (await otherExpandedToggles.count()) > 0; i++) {
+            // Let a failed collapse throw rather than swallowing it: the app link
+            // is intentionally sidebar-wide, so a group left expanded here produces
+            // the wrong cluster's link below anyway -- failing at the actual cause
+            // is more useful than at that symptom.
+            await otherExpandedToggles.first().click({ timeout: 10000 });
+        }
+    }
+    // When the sidebar is collapsed (the default on a fresh session), the
+    // group toggle opens a Radix popover -- a role="dialog" labelled with the
+    // cluster name and portalled OUTSIDE the "Main navigation" <nav> -- so a
+    // sidebar-scoped lookup finds nothing there. Look in that popover first;
+    // keep the sidebar-scoped lookup for the expanded-sidebar layout, where the
+    // links render inline. Not exact: the rendered accessible name carries
+    // more than the bare app name (e.g. "Operate in <cluster> (opens in a new
+    // tab)"). Ported from pages/8.7/AppsPage.ts (hubAppLink).
+    hubAppLink(clusterName, appName) {
+        const candidates = [
+            this.hubSidebar.getByRole('link', { name: appName }),
+            this.page
+                .getByRole('dialog', { name: clusterName, exact: true })
+                .getByRole('link', { name: appName }),
+        ];
+        // The "<app> in <cluster>" fallback name is only buildable for a literal
+        // app name, not the Admin/Identity alternation regex clickAdmin passes.
+        if (typeof appName === 'string') {
+            candidates.push(this.page.getByRole('link', {
+                name: new RegExp(`^${escapeRegExp(appName)} in ${escapeRegExp(clusterName)}\\b`),
+            }));
+        }
+        return candidates.reduce((acc, locator) => acc.or(locator)).first();
+    }
+    async clickHubClusterApp(clusterName, appName) {
+        await this.expandHubClusterGroup(clusterName);
+        const appLink = this.hubAppLink(clusterName, appName);
+        await (0, test_1.expect)(appLink).toBeVisible({ timeout: 30000 });
+        // Hub's cluster-app links carry target="_blank", so clicking them opens
+        // the app in a new tab while every caller keeps asserting on this.page.
+        // Follow the href in the current tab instead, matching the same-tab
+        // navigation the Console app switcher gave these callers.
+        const href = await appLink.getAttribute('href');
+        if (href) {
+            await this.page.goto(new URL(href, this.page.url()).toString());
+            return;
+        }
+        await appLink.click({ timeout: 10000 });
+    }
     async clickCluster(component, name) {
         // Cluster names are not unique in an org, so this app's sub-menu can list
         // the same name twice; pick the first entry (same row the Console cluster
@@ -156,6 +264,34 @@ class AppsPage {
         // nav V2 breadcrumb switcher: Modeler is a `menuitemradio`, the legacy
         // apps flyout renders it as a link. Resolve whichever this build shows.
         const modelerEntry = this.modelerMenuItem.or(this.modelerLink).first();
+        // Camunda Hub (hub.*) replaced Console + Web Modeler on SaaS and has no
+        // app switcher. Its home is the Modeler/Workspaces home, but a hostname
+        // check alone can't tell whether we're already there -- Hub's cluster
+        // pages are on the same hub.* hostname, and a no-op here would leave a
+        // caller that reaches clickModeler() from a cluster/API-client page
+        // stranded with the next locator running against the wrong page.
+        // Navigate home through the header logo link instead, same as
+        // ModelerHomePage.clickHomeBreadcrumb -- clicking it when already on the
+        // Modeler home is a harmless in-SPA no-op. Ported from
+        // pages/8.9/AppsPage.ts.
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            const header = this.page.locator('header[data-slot="app-header"]');
+            // The href stays literally "/login" until the client's auth state
+            // catches up just after login (camunda-hub NavShellDs.common.tsx) --
+            // clicking it in that window would log the test out instead of
+            // navigating home, so exclude that href and wait for the authenticated
+            // one rather than racing it.
+            const homeLink = header
+                .getByRole('link', { name: 'Camunda Modeler home' })
+                .and(this.page.locator(':not([href$="/login"])'))
+                .or(header
+                .getByRole('link', { name: 'Camunda Hub home' })
+                .and(this.page.locator(':not([href$="/login"])')))
+                .first();
+            await (0, test_1.expect)(homeLink).toBeVisible({ timeout: 30000 });
+            await homeLink.click({ timeout: 30000 });
+            return;
+        }
         for (let retries = 0; retries < maxRetries; retries++) {
             try {
                 if (retries > 0) {
@@ -338,6 +474,12 @@ class AppsPage {
         }
     }
     async clickTasklist(clusterName) {
+        // Camunda Hub replaced the global app switcher with a per-cluster
+        // sidebar; ported from pages/8.9/AppsPage.ts.
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            await this.clickHubClusterApp(clusterName, 'Tasklist');
+            return;
+        }
         const maxRetries = 3;
         for (let retries = 0; retries < maxRetries; retries++) {
             try {
@@ -461,6 +603,16 @@ class AppsPage {
         }
     }
     async clickAdmin(clusterName) {
+        // Camunda Hub replaced the global app switcher with a per-cluster
+        // sidebar; ported from pages/8.9/AppsPage.ts. Non-anchored, matching the
+        // substring lookup clickHubClusterApp uses for Operate/Tasklist/Optimize
+        // -- an anchored pattern fails the same way an exact-string match did for
+        // those apps if the rendered link's accessible name carries any extra
+        // content (icon/badge).
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            await this.clickHubClusterApp(clusterName, /Admin|Identity/);
+            return;
+        }
         const maxRetries = 5;
         for (let retries = 0; retries < maxRetries; retries++) {
             try {
@@ -543,6 +695,12 @@ class AppsPage {
         await this.clickCluster(this.optimizeListItem, clusterName);
     }
     async clickOperate(clusterName) {
+        // Camunda Hub replaced the global app switcher with a per-cluster
+        // sidebar; ported from pages/8.9/AppsPage.ts.
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            await this.clickHubClusterApp(clusterName, 'Operate');
+            return;
+        }
         const maxRetries = 3;
         for (let retries = 0; retries < maxRetries; retries++) {
             try {
@@ -573,6 +731,12 @@ class AppsPage {
         throw new Error(`Failed to click the operate link after ${maxRetries} attempts.`);
     }
     async clickOptimize(clusterName) {
+        // Camunda Hub replaced the global app switcher with a per-cluster
+        // sidebar; ported from pages/8.9/AppsPage.ts.
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            await this.clickHubClusterApp(clusterName, 'Optimize');
+            return;
+        }
         const maxRetries = 3;
         for (let retries = 0; retries < maxRetries; retries++) {
             try {
@@ -614,6 +778,14 @@ class AppsPage {
         throw new Error(`Failed to click the optimize link after ${maxRetries} attempts.`);
     }
     async clickCamundaApps(maxRetries = 3) {
+        // Camunda Hub's rewritten shells have no app-switcher button to open --
+        // Modeler is already Hub's home area and the other apps are reached
+        // per-cluster via the persistent sidebar, not through a global switcher
+        // panel. Mirrors the same hostname guard in clickModeler() above. Ported
+        // from pages/8.9/AppsPage.ts.
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            return;
+        }
         await (0, sleep_1.sleep)(2000);
         const appButtons = [
             this.camundaComponentsButton,
@@ -631,6 +803,16 @@ class AppsPage {
         }
     }
     async clickConsoleLink() {
+        // Camunda Hub folded Console into the same persistent shell as
+        // Modeler/home: Console's Dashboard/Clusters/Organization links are just
+        // another section of the same "Main navigation" sidebar, not a separate
+        // app to switch into. Its header banner (homePage.consoleBanner, via
+        // hubHeader) is already visible from any Hub page, so there is no
+        // navigation action needed here -- mirrors the same hostname guard in
+        // clickModeler(). Ported from pages/8.9/AppsPage.ts.
+        if (new URL(this.page.url()).hostname.startsWith('hub.')) {
+            return;
+        }
         const maxRetries = 3;
         // nav V2 breadcrumb switcher: Console is a `menuitemradio`, the legacy
         // apps flyout renders it as a link. Resolve whichever this build shows.

package/dist/pages/8.10/ClusterPage.js

@@ -79,33 +79,33 @@ class ClusterPage {
             .or(page.getByRole('tab', {
             name: 'Connector Secrets',
         }));
-        this.belgiumRegion = page.locator('label').filter({
+        // Camunda Hub's create-cluster form replaced the Carbon tiles (a
+        // <label> per option) and tabs with design-system choice cards and toggle
+        // groups, all exposed as role="radio" named by their title. Each locator
+        // below accepts either shape via this helper. Ported from
+        // pages/8.9/ClusterPage.ts.
+        const choice = (legacy, name) => legacy.or(page.getByRole('radio', { name, exact: true }));
+        this.belgiumRegion = choice(page.locator('label').filter({
             hasText: 'Chaos, Belgium, Europe (europe-west1)',
-        });
-        this.londonRegion = page.locator('label').filter({
-            hasText: 'London, Europe (europe-west2)',
-        });
-        this.ohioRegion = page.locator('label').filter({
+        }), 'Chaos, Belgium, Europe (europe-west1)');
+        this.londonRegion = choice(page.locator('label').filter({ hasText: 'London, Europe (europe-west2)' }), 'London, Europe (europe-west2)');
+        this.ohioRegion = choice(page.locator('label').filter({
             hasText: 'Ohio, North America (us-east-2)',
-        });
-        this.finlandRegion = page.locator('label').filter({
+        }), 'Ohio, North America (us-east-2)');
+        this.finlandRegion = choice(page.locator('label').filter({
             hasText: 'Finland, Europe (europe-north1)',
-        });
+        }), 'Finland, Europe (europe-north1)');
         this.createAClusterButton = page.getByRole('button', {
             name: 'Create a Cluster',
         });
         this.clusterVersionOption = page.getByText(`${process.env.CLUSTER_VERSION}`, { exact: true });
         this.generationSearchInput = page.getByPlaceholder('Search generations');
-        this.g3DevClusterType = page.locator('label').filter({
-            hasText: this.defaultClusterType,
-        });
-        this.alphaTab = page.getByRole('tab', { name: 'Alpha' });
-        this.devTab = page.getByRole('tab', { name: 'Internal Dev' });
-        this.stableTab = page.getByRole('tab', { name: 'Stable' });
-        this.qaGenerationsTab = page.getByRole('tab', { name: 'QA Generations' });
-        this.gcpRegion = page.getByRole('tab', {
-            name: 'GCP',
-        });
+        this.g3DevClusterType = choice(page.locator('label').filter({ hasText: this.defaultClusterType }), this.defaultClusterType);
+        this.alphaTab = choice(page.getByRole('tab', { name: 'Alpha' }), 'Alpha');
+        this.devTab = choice(page.getByRole('tab', { name: 'Internal Dev' }), 'Internal Dev');
+        this.stableTab = choice(page.getByRole('tab', { name: 'Stable' }), 'Stable');
+        this.qaGenerationsTab = choice(page.getByRole('tab', { name: 'QA Generations' }), 'QA Generations');
+        this.gcpRegion = choice(page.getByRole('tab', { name: 'GCP' }), 'GCP');
         this.clustersList = page
             .getByRole('row')
             .filter({ hasNotText: 'Generation' }); //Filter out header row

package/dist/pages/8.10/HomePage.js

@@ -51,14 +51,27 @@ class HomePage {
         });
         this.camundaAppsButton = page.getByLabel('Camunda apps');
         this.appSwitcher = page.getByLabel('App Switcher');
+        // Specs assert this as "the authenticated app shell has rendered" before
+        // navigating. Camunda Hub has no app-switcher button at all (apps are
+        // reached from the sidebar -- see AppsPage.clickCamundaApps), so on Hub
+        // its authenticated header is the equivalent readiness signal. Ported
+        // from pages/8.9/HomePage.ts.
         this.camundaComponentsButton = page
             .getByLabel('Camunda components')
             .or(this.camundaAppsButton)
-            .or(this.appSwitcher);
+            .or(this.appSwitcher)
+            .or(this.hubHeader);
         this.openOrganizationButton = page.getByLabel('Open Organizations');
-        this.consoleBanner = page.getByRole('link', {
+        // "Camunda logo Console" was the old Carbon header's logo link. Camunda
+        // Hub has no equivalent link -- its post-login landing is `hubHeader`
+        // (see above) -- so callers that assert this banner as a login/Console
+        // arrival signal need the Hub fallback too. Ported from
+        // pages/8.9/HomePage.ts.
+        this.consoleBanner = page
+            .getByRole('link', {
             name: 'Camunda logo Console',
-        });
+        })
+            .or(this.hubHeader);
         this.gettingStartedHeading = page.getByText('start by creating a project');
         this.buttonSkipCustomization = page.getByRole('button', {
             name: 'Skip customization',

package/dist/tests/8.10/web-modeler-user-flows.spec.js

@@ -35,7 +35,8 @@ _8_10_1.test.describe('Web Modeler User Flow Tests', () => {
             await (0, mailSlurpClient_1.deleteInbox)(inboxes[testInfo.title]);
         }
     });
-    (0, _8_10_1.test)('Form.js Integration with User Task and AI Generated Form @ai-external', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, formJsPage, consoleOrganizationsPage, loginPage, }, testInfo) => {
+    // Skipped due to bug #29346: https://github.com/camunda/camunda-hub/issues/29346
+    _8_10_1.test.skip('Form.js Integration with User Task and AI Generated Form @ai-external', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, formJsPage, consoleOrganizationsPage, loginPage, }, testInfo) => {
         _8_10_1.test.slow();
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'User_Task_Process_With_AI_Form' + randomString;

package/dist/tests/SM-8.8/topology-orchestration-smoke.spec.js

@@ -2,23 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const test_1 = require("@playwright/test");
 const SM_8_8_1 = require("../../fixtures/SM-8.8");
-const ModelerCreatePage_1 = require("../../pages/SM-8.10/ModelerCreatePage");
-const ModelerHomePage_1 = require("../../pages/SM-8.10/ModelerHomePage");
-const NavigationPage_1 = require("../../pages/SM-8.10/NavigationPage");
 const UtilitiesPage_1 = require("../../pages/SM-8.8/UtilitiesPage");
 const _setup_1 = require("../../test-setup.js");
 SM_8_8_1.test.afterEach(async ({ page }, testInfo) => {
     await (0, _setup_1.captureScreenshot)(page, testInfo);
     await (0, _setup_1.captureFailureVideo)(page, testInfo);
 });
-(0, SM_8_8_1.test)('Topology orchestration golden path @tasklistV2', async ({ navigationPage, operateHomePage, operateProcessesPage, operateProcessInstancePage, taskPanelPage, taskDetailsPage, optimizeHomePage, page, request, }) => {
+(0, SM_8_8_1.test)('Topology orchestration golden path @tasklistV2', async ({ modelerHomePage, modelerCreatePage, navigationPage, operateHomePage, operateProcessesPage, operateProcessInstancePage, taskPanelPage, taskDetailsPage, optimizeHomePage, page, request, }) => {
     SM_8_8_1.test.slow();
     const processName = `Topology_Orchestration_${await (0, _setup_1.generateRandomStringAsync)(5)}`;
-    const hubNavigationPage = new NavigationPage_1.NavigationPage(page);
-    const modelerHomePage = new ModelerHomePage_1.ModelerHomePage(page);
-    const modelerCreatePage = new ModelerCreatePage_1.ModelerCreatePage(page);
     await SM_8_8_1.test.step('Create and start a process in Web Modeler', async () => {
-        await hubNavigationPage.goToModeler();
+        await navigationPage.goToModeler();
         await modelerHomePage.createCrossComponentProjectFolder();
         await modelerHomePage.clickDiagramTypeDropdown();
         await modelerHomePage.clickBpmnTemplateOption();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.1269",
+  "version": "0.0.1271",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",

package/playwright.config.ts

@@ -224,6 +224,83 @@ const changedFolders =
     ? args[changedFoldersArgIndex + 1].split(',')
     : [];
 
+// Run-budget guards. See the "A hung test is not an infrastructure failure"
+// note in docs/ci-failure-categories.md, and issue #3115.
+const isSmoke = process.env.IS_SMOKE === 'true';
+
+// Reads a numeric env override. An unset, empty, negative or unparseable value
+// returns undefined so the guard falls back to its default rather than being
+// silently switched off by a typo. An explicit 0 is honoured -- Playwright
+// reads 0 as "no limit" for both globalTimeout and maxFailures.
+const numericEnv = (name: string): number | undefined => {
+  const raw = process.env[name];
+  if (raw === undefined || raw.trim() === '') return undefined;
+  const value = Number(raw);
+  return Number.isFinite(value) && value >= 0 ? value : undefined;
+};
+
+// Without globalTimeout Playwright never stops itself, so one hung test costs
+// `timeout x (retries + 1)` -- 24 minutes at the 12-minute default -- and
+// GitHub SIGKILLs the job at its `timeout-minutes` before any report is
+// written. A run with no report has total_tests == 0, which
+// docs/ci-failure-categories.md classifies as
+// `infrastructure` -- a hung test gets filed as a platform problem and never
+// reaches anyone who can fix it. When Playwright owns the deadline instead it
+// runs its reporters first (runner/tasks.js finishTaskRun calls onEnd on every
+// status), so the run fails with a report naming the stuck test.
+//
+// The budget belongs to the caller: globalTimeout is only correct below the
+// job's `timeout-minutes`, and that differs per workflow. The smoke leg is the
+// one context this file can infer -- the blocking gate with the tightest
+// budget (25 minutes, camunda/camunda-platform-helm
+// .github/workflows/test-integration-runner.yaml), which a single hang already
+// exhausts. Every other caller opts in with C8E2E_GLOBAL_TIMEOUT_MIN. Jobs that
+// declare no `timeout-minutes` (this repo's nightlies, the repeat-each
+// validation loops that run for hours) have no budget to protect, so they keep
+// the unbounded behaviour.
+const SMOKE_GLOBAL_TIMEOUT_MINUTES = 20;
+
+const globalTimeout = () => {
+  const override = numericEnv('C8E2E_GLOBAL_TIMEOUT_MIN');
+  if (override !== undefined) return override * 60 * 1000;
+  return isSmoke ? SMOKE_GLOBAL_TIMEOUT_MINUTES * 60 * 1000 : undefined;
+};
+
+// The missing fail-fast lever: once the platform is down there is no value in
+// paying the per-test timeout for every remaining test. Smoke is a blocking
+// gate over a single spec, so the first failure is already the answer.
+//
+// Everywhere else the default stays 0 (no limit) on purpose. The nightly triage
+// dispatchers (.github/workflows/triage-nightly-failures*.yml) fan out one fix
+// agent per failing test and docs/ci-failure-categories.md derives
+// failure_category from the full counts, so truncating the failure list would
+// hide work rather than save time. Callers with a real budget set
+// C8E2E_MAX_FAILURES.
+const maxFailures = () => {
+  const override = numericEnv('C8E2E_MAX_FAILURES');
+  if (override !== undefined) return override;
+  return isSmoke ? 1 : 0;
+};
+
+// @playwright/test sets the context navigation timeout to 0 -- no limit --
+// whenever `navigationTimeout` is absent (playwright/lib/index.js
+// `_setupContextOptions`: `navigationTimeout || 0`), and TimeoutSettings
+// resolves that 0 before it ever falls through to `actionTimeout`. So today
+// every `goto`, `waitForURL` and `waitForLoadState` call that does not pass its
+// own `timeout` is bounded only by the 12-minute test timeout.
+//
+// That is the hang primitive: `waitForLoadState('networkidle')` waits for 500ms
+// of network silence that never arrives while a backend restarts and clients
+// retry, and the suite has 86 of those calls. Bounding navigation converts a
+// 12-minute stall into a 2-minute failure with a stack trace, without touching
+// the per-test budget that genuinely slow flows rely on.
+//
+// A call that passes its own `timeout` always wins, so nothing bounded today
+// becomes stricter; 120s matches the most generous explicit navigation timeout
+// the suite already uses.
+const NAVIGATION_TIMEOUT_MS =
+  numericEnv('C8E2E_NAVIGATION_TIMEOUT_MS') ?? 120 * 1000;
+
 const timeout = () => {
   if (process.env.MINOR_VERSION?.includes('SM-8.7')) {
     // OpenSearch indexes more slowly than Elasticsearch — give SM-8.7 the
@@ -268,6 +345,8 @@ export default defineConfig({
   // API specs into a browser project that has none of their environment.
   testIgnore: /[\\/]tests[\\/]api[\\/]/,
   timeout: timeout(),
+  globalTimeout: globalTimeout(),
+  maxFailures: maxFailures(),
   workers: workerCount(),
   retries: 1,
   fullyParallel: false,
@@ -275,6 +354,7 @@ export default defineConfig({
   use: {
     baseURL: getBaseURL(),
     actionTimeout: 10000,
+    navigationTimeout: NAVIGATION_TIMEOUT_MS,
     // Stage 5: trace on-first-retry. With retries=1, a passing-on-retry
     // test (i.e., a flake) leaves a trace from the first attempt — exactly
     // the cases worth debugging. Green runs pay no trace cost.