@camunda/e2e-test-suite 0.0.1287 → 0.0.1288

package/dist/pages/8.9/ModelerCreatePage.js

@@ -7,6 +7,7 @@ const ConnectorMarketplacePage_1 = require("./ConnectorMarketplacePage");
 const clickLocatorWithRetry_1 = require("../../utils/assertionHelpers/clickLocatorWithRetry");
 const ProcessApplicationPage_1 = require("./ProcessApplicationPage");
 const modelerCluster_1 = require("../../utils/modelerCluster");
+const sessionRecovery_1 = require("../../utils/sessionRecovery");
 class ModelerCreatePage {
     page;
     processApplicationPage;
@@ -113,6 +114,8 @@ class ModelerCreatePage {
     eighthPlacedElement;
     deployAndRunMainButton;
     deployAndRunSubButton;
+    deployRunActions;
+    deployAndRunMenuItem;
     dialog;
     backupDeployButton;
     globalConnectToolButton;
@@ -154,6 +157,13 @@ class ModelerCreatePage {
             name: 'Deploy & run',
             exact: true,
         });
+        // camunda-hub deploy-run-combo-action: both the Carbon ComboButton and
+        // the design-system SplitButton carry this test id.
+        this.deployRunActions = page.getByTestId('deploy-run-actions');
+        this.deployAndRunMenuItem = page.getByRole('menuitem', {
+            name: 'Deploy & run',
+            exact: true,
+        });
         this.deployAndRunSubButton = this.dialog.getByRole('button', {
             name: 'Deploy & run',
             exact: true,
@@ -164,9 +174,15 @@ class ModelerCreatePage {
         this.viewProcessInstanceLink = page.getByRole('button', {
             name: 'View process instance',
         });
-        this.viewProcessLink = page.getByRole('button', {
-            name: 'View process in Operate',
-        });
+        // Hub's deploy confirmation carries no "View process in Operate" control:
+        // the 8.9 nightly trace shows POST /v2/projects/<id>/deploy returning 200
+        // and a "Project deployed!" toast. Accept the deployed toast as the
+        // confirmation, as pages/8.8 does.
+        this.viewProcessLink = page
+            .getByRole('button', { name: 'View process in Operate' })
+            .or(page.getByText('view process in Operate'))
+            .or(page.getByText(/^(Diagram|Project|Process application) deployed!$/))
+            .first();
         this.nameInput = page.getByLabel('Name', { exact: true });
         this.diagramBreadcrumb = page.locator('[data-test="breadcrumb-diagram"]');
         // Hub's newer nav (isNavV2, camunda-hub use-file-page-actions.ts) renders
@@ -190,7 +206,13 @@ class ModelerCreatePage {
         this.renameSubmitButton = page.locator('[data-test="rename-submit"]');
         this.variableInput = page.locator('[id="variables-json"]');
         this.embedFormButton = page.getByRole('button', { name: 'Link form' });
-        this.embedButton = page.locator('[data-test="confirm-move"]');
+        // With workspaces on, Hub's "Link a form" picker is LinkTargetModal, which
+        // confirms with `link-target-confirm`; `confirm-move` is the legacy
+        // TargetSelector's. Same as pages/8.8.
+        this.embedButton = page
+            .locator('[data-test="link-target-confirm"]')
+            .or(page.locator('[data-test="confirm-move"]'))
+            .first();
         this.newForm = page
             .locator('[data-test="item-New form"]')
             .getByText('New form');
@@ -214,10 +236,14 @@ class ModelerCreatePage {
         this.webhookIsActiveButton = page.getByRole('button', {
             name: 'Webhook is active in Test',
         });
+        // Hub's design-system panel renders the webhook "Path" as a code block
+        // (<div data-slot="code-block"><pre><code>URL) with a separate copy button;
+        // the <code> holds the URL. The "Path" block precedes the log blocks.
         this.copyWebhookUrlToClipboardButton = page
             .getByRole('textbox', {
             name: 'Copy to clipboard',
         })
+            .or(page.locator('[data-slot="code-block"] code'))
             .first();
         this.createTask = page.getByTitle('Create task');
         this.createEndEvent = page.getByTitle('Create end event');
@@ -230,7 +256,13 @@ class ModelerCreatePage {
         this.firstPlacedElement = page.locator('g:nth-child(2) > .djs-element > .djs-hit');
         this.secondPlacedElement = page.locator('g:nth-child(2) > .djs-element > .djs-hit');
         this.payloadInput = page.locator('[class="fjs-input"]');
-        this.marketPlaceButton = page.getByTitle('Browse Marketplace for more Connectors');
+        // camunda-hub's change-element popup replaced the Marketplace entry with
+        // "Browse all" (browse-all-popup-menu-provider.ts); the 8.9 nightly trace
+        // carries only this title. Same locator as pages/8.8.
+        this.marketPlaceButton = page
+            .getByTitle('Browse Marketplace for more Connectors')
+            .or(page.getByTitle('Browse all available elements and assets'))
+            .first();
         // Match either marketplace display name — the connector was renamed from
         // "Public Holiday Outbound" to "Worldwide Public Holiday"; accepting both
         // keeps the flow green whichever the marketplace currently serves.
@@ -267,9 +299,14 @@ class ModelerCreatePage {
             name: 'Toggle public access',
         });
         this.publicationTab = page.getByRole('tab', { name: 'Publication' });
-        this.copyPublicLinkButton = page.getByRole('textbox', {
+        // Legacy Carbon snippet (textbox) or Hub's design-system code block; both
+        // wrap the link in the <code> that getPublicationLink() reads.
+        this.copyPublicLinkButton = page
+            .getByRole('textbox', {
             name: 'Copy to clipboard',
-        });
+        })
+            .or(page.locator('[data-slot="code-block"]'))
+            .first();
         this.closeButton = page.getByRole('button', { name: 'Close', exact: true });
         this.rbaEnabledDeployedDialog = page.getByRole('dialog', {
             name: 'Process successfully deployed',
@@ -355,9 +392,14 @@ class ModelerCreatePage {
             name: 'Deploy',
         });
         this.globalConnectToolButton = page.locator('[title="Activate global connect tool"]');
+        // Under the design system Hub raises this as a design-system toast, not a
+        // Carbon `cds--toast-*` node, so match the message text itself.
         this.formLinkedSuccessMessage = page
+            .getByText('Form has been successfully linked.')
+            .or(page
             .locator('.cds--toast-notification__subtitle')
-            .getByText('Form has been successfully linked.');
+            .getByText('Form has been successfully linked.'))
+            .first();
         // The legacy breadcrumb shows the name directly; the nav-v2 kebab embeds
         // it in its own accessible name ("<name> actions").
         this.diagramNameBreadcrumb = (diagramName) => page
@@ -556,10 +598,14 @@ class ModelerCreatePage {
         // a form with the same name and the picker then lists two identical entries.
         // Scope to the first matching item so the link step stays deterministic on retry
         // instead of failing with a strict-mode violation.
+        // LinkTargetModal lists each form as a button labelled "Select <name>"
+        // inside `link-target-list` and renders no `item-<name>` node; the legacy
+        // id stays as a fallback for the TargetSelector picker.
         await this.page
-            .locator(`[data-test="item-${name}"]`)
+            .locator('[data-test="link-target-list"]')
+            .getByRole('button', { name: `Select ${name}`, exact: true })
+            .or(this.page.locator(`[data-test="item-${name}"]`).first().getByText(name))
             .first()
-            .getByText(name)
             .click({ timeout: 90000 });
     }
     async clickUserTask(id) {
@@ -641,6 +687,20 @@ class ModelerCreatePage {
         await (0, test_1.expect)(this.viewProcessLink).toBeVisible({ timeout: 30000 });
         await (0, test_1.expect)(this.viewProcessLink).toBeHidden({ timeout: 30000 });
     }
+    // For a user whose org role lacks instance/workflow create permissions,
+    // Hub's checkIfAllowedToRun is false: the split button's primary action
+    // becomes "Deploy" and "Deploy & run" moves into its menu, disabled
+    // (camunda-hub BPMNDeployAndRunButtonsDs.tsx).
+    async assertDeployAndRunNotPermitted() {
+        await (0, test_1.expect)(this.deployRunActions.getByRole('button', { name: 'Deploy', exact: true })).toBeVisible({ timeout: 60000 });
+        await (0, test_1.expect)(this.deployAndRunMainButton).toHaveCount(0);
+        await this.deployRunActions
+            .getByRole('button', { name: 'Additional actions' })
+            .click({ timeout: 30000 });
+        await (0, test_1.expect)(this.deployAndRunMenuItem).toBeVisible({ timeout: 30000 });
+        await (0, test_1.expect)(this.deployAndRunMenuItem).toBeDisabled();
+        await this.page.keyboard.press('Escape');
+    }
     async clickStartInstanceMainButton() {
         await this.deployAndRunMainButton.click({ timeout: 30000 });
     }
@@ -1457,6 +1517,36 @@ class ModelerCreatePage {
         await (0, test_1.expect)(this.playTab).toBeVisible({ timeout: 90000 });
         await this.playTab.click({ timeout: 30000 });
     }
+    // Scopes the "Set up test run" deploy step to the diagram under test.
+    // Hub's step 2 ("Choose resources to deploy") is a radio group whose
+    // "All resources" option (`#deploy-mode-bundle`, value "bundle") arrives
+    // pre-selected, so Play deploys the WHOLE shared project -- and a nightly
+    // trace's network log shows the resulting
+    // `POST /api/internal/v2/projects/<id>/deploy` answering 400 on every one
+    // of the ~25 retry attempts, rejected for OTHER specs' resources left in
+    // the project ("'Document_Handling_Connectors_User_Flow_GCP_Process...bpmn':
+    // Element: StartEvent_1 > extensionElements > ioMapping > output - ERROR:
+    // Expected expression but not found"). "Only this resource"
+    // (`#deploy-mode-single-file`) deploys just this process. Matched by id
+    // because the radio button carries no accessible name of its own: the
+    // label text sits in a sibling <div>.
+    async selectPlayDeploySingleResource() {
+        const singleResourceOption = this.page.locator('#deploy-mode-single-file:not([disabled])');
+        const hasOption = await singleResourceOption
+            .waitFor({ state: 'visible', timeout: 15000 })
+            .then(() => true)
+            .catch(() => false);
+        if (!hasOption) {
+            return;
+        }
+        await (0, test_1.expect)(async () => {
+            if ((await singleResourceOption.getAttribute('aria-checked')) === 'true') {
+                return;
+            }
+            await singleResourceOption.click({ timeout: 10000 });
+            await (0, test_1.expect)(singleResourceOption).toHaveAttribute('aria-checked', 'true', { timeout: 10000 });
+        }).toPass({ timeout: 30000 });
+    }
     async completePlayConfiguration(clusterName) {
         // Play is a tab on the diagram page, not its own URL, so the stage-cluster
         // detour's goto() lands back on the Modeler tab and every Play locator
@@ -1500,9 +1590,12 @@ class ModelerCreatePage {
         // only renders visibly while that item is expanded. It expands by itself
         // once the cluster step completes, but a manual heading click is the
         // recovery path if it did not.
-        const deployStepHeading = this.page.getByRole('button', {
-            name: 'Deploy process',
-        });
+        // With Hub's Environments feature on, the panel is "Set up test run" and
+        // this step is headed "Choose resources to deploy".
+        const deployStepHeading = this.page
+            .getByRole('button', { name: 'Deploy process' })
+            .or(this.page.getByRole('button', { name: 'Choose resources to deploy' }))
+            .first();
         // Both attributes on this button have been renamed by camunda-hub, in
         // separate commits: a90fd06 changed the label from "Configure scenario" to
         // "Configure test case", and b3958a1649 (#27259, 2026-08-07) then changed
@@ -1544,6 +1637,11 @@ class ModelerCreatePage {
             .locator('[data-test="test-studio-configuration-overlay"]')
             .or(this.page.locator('[data-test="play-configuration-overlay"]'))
             .or(this.page.getByText('Setup environment'))
+            // With Hub's Environments feature on the card is titled "Set up test
+            // run" and its steps are "Choose where to run" / "Choose resources to
+            // deploy" / "Configure test case" -- the 8.9 nightly trace's DOM carries
+            // that title and none of the three locators above. Same as pages/8.8.
+            .or(this.page.getByText('Set up test run', { exact: true }))
             .first();
         const configureTestPanel = this.page.getByTestId('configure-test-panel');
         await (0, test_1.expect)(configurationOverlay
@@ -1578,6 +1676,33 @@ class ModelerCreatePage {
                 .first();
             const clusterHealthyIcon = this.page.locator('[aria-label="Cluster healthy"]');
             const clusterUnavailableIcon = this.page.locator('[aria-label="Cluster unavailable"]');
+            // With Hub's Environments feature on, step 1 ("Choose where to run")
+            // offers "Select environment" instead, which opens the "Choose where to
+            // run" dialog listing the workspace's environment rows (camunda-hub
+            // test-studio ClusterStepContent / TestModeDeployEndpointConfigModal).
+            // Same handling as pages/8.8.
+            const selectEnvironmentButton = this.page.getByRole('button', {
+                name: 'Select environment',
+            });
+            // The step shows "Verifying cluster availability" before either button
+            // renders, so give it a moment instead of a non-waiting isVisible().
+            await connectClusterButton
+                .or(selectEnvironmentButton)
+                .first()
+                .waitFor({ state: 'visible', timeout: 15000 })
+                .catch(() => { });
+            if (await selectEnvironmentButton.isVisible().catch(() => false)) {
+                await selectEnvironmentButton.click({ timeout });
+                const chooseWhereToRunDialog = this.page.getByRole('dialog', {
+                    name: 'Choose where to run',
+                });
+                await (0, test_1.expect)(chooseWhereToRunDialog).toBeVisible({ timeout });
+                await (0, modelerCluster_1.selectDeployEnvironment)(chooseWhereToRunDialog, clusterName);
+                await chooseWhereToRunDialog
+                    .getByRole('button', { name: 'Save', exact: true })
+                    .click({ timeout });
+                await (0, test_1.expect)(chooseWhereToRunDialog).toBeHidden({ timeout });
+            }
             const hasConnectButton = await connectClusterButton
                 .isVisible()
                 .catch(() => false);
@@ -1685,6 +1810,7 @@ class ModelerCreatePage {
                 // Wait for enabled; the button stays disabled until the cluster
                 // connection is confirmed by the backend after the Save in step 1.
                 await (0, test_1.expect)(setupDeployButton).toBeEnabled({ timeout: 60000 });
+                await this.selectPlayDeploySingleResource();
                 // The click is retried against the completion probe rather than fired
                 // once, because the same collapse re-renders the accordion around the
                 // button: it can detach mid-click, which is the second nightly
@@ -1764,6 +1890,7 @@ class ModelerCreatePage {
     }
     async fillStartEventVariablesForDocHandling(zeebeUrl, zeebeClientId, zeebeClientSecret) {
         console.log(`URL: ${zeebeUrl}, ClientId: ${zeebeClientId}, Secret: ${zeebeClientSecret}`);
+        await (0, sessionRecovery_1.recoverStuckModelerLogin)(this.page);
         await (0, test_1.expect)(this.connectorsDocHandlingStartEventElement).toBeVisible({
             timeout: 60000,
         });
@@ -1777,11 +1904,19 @@ class ModelerCreatePage {
         await this.fillZeebeClientId(zeebeClientId);
         await (0, sleep_1.sleep)(1000);
     }
+    // Filling the previous output mapping re-lays out the list, so a header click
+    // can land without opening its entry (the 8.8 trace kept output-2 collapsed
+    // for all 63 polls). Re-drive the toggle until the source editor shows.
+    async openOutputMappingEntry(header, sourceEditor) {
+        await (0, test_1.expect)(async () => {
+            if (!(await sourceEditor.isVisible().catch(() => false))) {
+                await header.click({ timeout: 15000 });
+            }
+            await (0, test_1.expect)(sourceEditor).toBeVisible({ timeout: 10000 });
+        }).toPass({ timeout: 60000, intervals: [1000, 2000, 5000] });
+    }
     async fillZeebeClientId(clientId) {
-        await this.zeebeClientIdVariable.click();
-        await (0, test_1.expect)(this.variableAssignmentValueTextboxThirdVariable).toBeVisible({
-            timeout: 60000,
-        });
+        await this.openOutputMappingEntry(this.zeebeClientIdVariable, this.variableAssignmentValueTextboxThirdVariable);
         await this.variableAssignmentValueTextboxThirdVariable.click();
         await (0, sleep_1.sleep)(1000);
         await this.variableAssignmentValueTextboxThirdVariable.fill('');
@@ -1789,10 +1924,7 @@ class ModelerCreatePage {
         await (0, test_1.expect)(this.variableAssignmentValueTextboxThirdVariable).toHaveText(clientId);
     }
     async fillZeebeSecretValue(zeebeSecret) {
-        await this.zeebeSecretVariable.click();
-        await (0, test_1.expect)(this.variableAssignmentValueTextboxSecondVariable).toBeVisible({
-            timeout: 60000,
-        });
+        await this.openOutputMappingEntry(this.zeebeSecretVariable, this.variableAssignmentValueTextboxSecondVariable);
         await this.variableAssignmentValueTextboxSecondVariable.click();
         await (0, sleep_1.sleep)(1000);
         await this.variableAssignmentValueTextboxSecondVariable.fill('');

package/dist/pages/8.9/ModelerHomePage.d.ts

@@ -69,6 +69,7 @@ declare class ModelerHomePage {
     private clickCreateProcessApplication;
     private ensureInResourceContainer;
     returnToResourceContainer(): Promise<void>;
+    private isOnHubLoginRoute;
     startBlankBpmnDiagram(): Promise<void>;
     private becameVisible;
     private createWorkspaceViaWizard;

package/dist/pages/8.9/ModelerHomePage.js

@@ -570,12 +570,37 @@ class ModelerHomePage {
             await this.clickWorkspaceBreadcrumb();
             return;
         }
-        await this.page.goto(this.processApplicationUrl, {
-            waitUntil: 'domcontentloaded',
-        });
-        await this.processApplicationPage.waitForProcessApplication();
+        // Every goto re-runs Hub's Auth0 hand-off, and CI runs show it stalling on
+        // /login-callback. Its code is single-use, so recover with a fresh goto,
+        // never a reload; any other failure still throws.
+        for (let attempt = 1;; attempt++) {
+            await this.page.goto(this.processApplicationUrl, {
+                waitUntil: 'domcontentloaded',
+            });
+            try {
+                await this.processApplicationPage.waitForProcessApplication(attempt === 1 ? 90000 : 150000);
+                break;
+            }
+            catch (error) {
+                const stalledInLogin = (await (0, sessionRecovery_1.restoreSessionIfLoggedOut)(this.page)) ||
+                    this.isOnHubLoginRoute();
+                if (attempt === 2 || !stalledInLogin) {
+                    throw error;
+                }
+                console.warn(`Hub's login hand-off stalled at ${this.page.url()}; ` +
+                    're-entering the process application.');
+            }
+        }
         await this.dismissOverlays();
     }
+    // Hub's own /login and /login-callback routes render only a spinner
+    // (camunda-hub App.tsx); the identity provider's pages are not these.
+    isOnHubLoginRoute() {
+        if ((0, sessionRecovery_1.isAtIdentityProvider)(this.page)) {
+            return false;
+        }
+        return /^\/login(-callback)?\/?$/.test(new URL(this.page.url()).pathname);
+    }
     // Single seam for "give me an empty BPMN diagram in this test's container".
     // A process application always ships an auto-created main process; this adds
     // a new diagram rather than adopting that one, so every existing modelling

package/dist/pages/8.9/PlayPage.js

@@ -14,7 +14,17 @@ class PlayPage {
     constructor(page) {
         this.page = page;
         this.diagram = page.getByTestId('diagram');
-        this.completeJobButton = this.diagram.getByLabel('Complete job');
+        // Hub's Test Studio renders this canvas overlay control as
+        // <button data-testid="<elementId>-Complete job"><svg aria-hidden/>
+        // <span>Complete job</span></button> with NO aria-label, so getByLabel()
+        // cannot see it. Its accessible name still comes from the span, so match
+        // by role as well and keep getByLabel for the pre-design-system overlay.
+        // Same locator as pages/8.8.
+        this.completeJobButton = this.diagram
+            .getByLabel('Complete job')
+            .or(this.diagram.getByRole('button', { name: 'Complete job' }))
+            .or(this.diagram.getByTestId(/-Complete job$/))
+            .first();
         // Newer Modeler Play UI: the "Configure Scenario" floating card hosts a
         // primary "Start" Carbon button (variants: "Start", "Start with
         // variables", "Start with a form"). Source:

package/dist/pages/8.9/ProcessApplicationPage.js

@@ -255,6 +255,20 @@ class ProcessApplicationPage {
         if (!container || container.developmentCluster === clusterName) {
             return false;
         }
+        // A caller that just reloaded can still be on Hub's /login-callback
+        // (the session refresh round-trip) -- the 8.9 nightly trace caught
+        // returnTo as /login-callback?code=..., and replaying that single-use
+        // code on the way back landed on the Auth0 login page, so every later
+        // lookup on the diagram timed out. Let Hub finish the exchange (measured
+        // at ~45s on CI, see assertTestUsesCorrectOrganization) before recording
+        // where to come back to.
+        if (this.page.url().includes('/login-callback')) {
+            await this.page
+                .waitForURL((url) => !url.pathname.startsWith('/login-callback'), {
+                timeout: 120000,
+            })
+                .catch(() => { });
+        }
         const returnTo = this.page.url();
         const paUrl = container.url.replace(/[?#].*$/, '').replace(/\/$/, '');
         // Retried as a whole, re-entering the page on every attempt. This binding
@@ -287,6 +301,17 @@ class ProcessApplicationPage {
         }).toPass({ timeout: 240000, intervals: [1000, 2000, 5000] });
         container.developmentCluster = clusterName;
         await this.page.goto(returnTo, { waitUntil: 'domcontentloaded' });
+        // A full navigation on Hub bounces through /login?returnUrl=... and
+        // /login-callback before it lands back on returnTo, and goto() resolves on
+        // the FIRST document. Callers act on the page straight away -- the 8.9
+        // Play nightly trace shows switchToPlay's page.evaluate dying with
+        // "Execution context was destroyed" mid-redirect -- so wait for the
+        // round-trip to finish.
+        await this.page
+            .waitForURL((url) => !/^\/login(-callback)?\/?$/.test(url.pathname), {
+            timeout: 120000,
+        })
+            .catch(() => { });
         return true;
     }
     // Assigns the Environment backed by clusterName to the workspace, from
@@ -325,10 +350,29 @@ class ProcessApplicationPage {
         const manageUrl = `${new URL(paUrl).origin}/workspaces/${workspaceId}/manage?tab=environments`;
         await this.page.goto(manageUrl, { waitUntil: 'domcontentloaded' });
         const heading = this.page.locator('[data-test="manage-environments-heading"]');
-        if (!(await heading
-            .waitFor({ state: 'visible', timeout: 60000 })
-            .then(() => true)
-            .catch(() => false))) {
+        // Hub only offers the Environments tab to users with an elevated or
+        // DevOps org role (camunda-hub WorkspaceManageBody, #28955) and rewrites
+        // `?tab=environments` to `?tab=members` for everyone else -- the 8.9 RBA
+        // nightly traces show exactly that redirect for the handed-off test user.
+        // Such a user cannot assign anything here; the spec's elevated user has
+        // to have done it already. Leave the check to the deploy dialog, whose
+        // selectDeployEnvironment fails with a precise "not assigned" error.
+        const tabOutcome = await Promise.race([
+            heading
+                .waitFor({ state: 'visible', timeout: 60000 })
+                .then(() => 'environments'),
+            this.page
+                .waitForURL((url) => url.searchParams.get('tab') === 'members', {
+                timeout: 60000,
+            })
+                .then(() => 'members'),
+        ]).catch(() => 'none');
+        if (tabOutcome === 'members') {
+            console.log(`The workspace Environments tab is not available to this user; ` +
+                `relying on "${clusterName}" having been assigned by an elevated user`);
+            return;
+        }
+        if (tabOutcome !== 'environments') {
             throw new Error(`Could not bind "${clusterName}" as a deploy target: the project page ` +
                 'has no Connected clusters "Configure" control, and the workspace ' +
                 `Environments tab did not render at ${manageUrl}.`);

package/dist/pages/8.9/UtilitiesPage.js

@@ -36,6 +36,24 @@ async function suppressOnboardingTour(page) {
     }, '^hub\\.onboarding\\..*\\.seen\\.');
 }
 async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5) {
+    // A blank credential cannot be fixed by retrying, and in the browser it
+    // looks like a slow login: auth0 keeps the tab on its own page until every
+    // attempt times out. GitHub leaves a password empty when it drops the
+    // create-organization job output that carries it ("Skip output ... since it
+    // may contain secret"), because a generated password can contain a masked
+    // value by chance.
+    if (!testUser?.username || !testUser?.password) {
+        const missing = [
+            testUser?.username ? null : 'username',
+            testUser?.password ? null : 'password',
+        ]
+            .filter(Boolean)
+            .join(' and ');
+        throw new Error(`Cannot log in: this test user has no ${missing}. The credential never ` +
+            'reached the runner -- check the create-organization job for a ' +
+            '"Skip output ... since it may contain secret" warning on the ' +
+            'matching C8_*_PASSWORD output.');
+    }
     await suppressOnboardingTour(page);
     let lastError;
     // `timeout` is a stable per-worker identifier (derived from workerIndex),
@@ -52,8 +70,13 @@ async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 5
             // for the tab's whole lifetime; without clearing it here alongside
             // cookies/storage, a flow that logs a different user into the same
             // page could have getUserToken() return the PREVIOUS user's token.
-            (0, consoleApiHelpers_1.resetHubBearerToken)(page);
+            // Listen from before Hub loads: an API helper called later on an idle
+            // Hub page would otherwise find no request carrying the token.
+            (0, consoleApiHelpers_1.observeBearerTokens)(page);
             await page.goto('about:blank');
+            // After about:blank: until then the previous user's Hub page can still
+            // send a request, and its token must not count for the new session.
+            (0, consoleApiHelpers_1.resetHubBearerToken)(page);
             await page
                 .evaluate(() => {
                 try {
@@ -312,6 +335,20 @@ async function runProcess(clusterName, page, modelerHomePage, modelerCreatePage,
     await (0, test_1.expect)(modelerCreatePage.viewProcessInstanceLink).toBeVisible({
         timeout: 60000,
     });
+    // camunda-hub 6813a7e (2026-09-25) made the "Instance started!" toast
+    // persistent (shouldPersist) whenever it carries the Operate action, so it
+    // no longer times out on its own -- the 8.9 nightly trace shows it still
+    // open when the 60s wait below expires. Close it via its "Dismiss" button.
+    // Same handling as pages/8.7 and pages/8.8.
+    const instanceStartedToast = page
+        .locator('[data-sonner-toast]')
+        .filter({ has: modelerCreatePage.viewProcessInstanceLink });
+    const dismissButton = instanceStartedToast.getByRole('button', {
+        name: 'Dismiss',
+    });
+    if (await dismissButton.isVisible().catch(() => false)) {
+        await dismissButton.click({ timeout: 10000 });
+    }
     await (0, test_1.expect)(modelerCreatePage.viewProcessInstanceLink).toBeHidden({
         timeout: 60000,
     });
@@ -383,24 +420,27 @@ async function clickInvitationLinkInEmail(page, id) {
 }
 exports.clickInvitationLinkInEmail = clickInvitationLinkInEmail;
 async function assertLatestAlertEmail(id, mailSlurp, processName, alertText) {
-    const maxRetries = 5;
-    for (let retries = 0; retries < maxRetries; retries++) {
-        try {
-            const email = await mailSlurp.waitForLatestEmail(id, 120000);
-            if (email && email.body) {
-                (0, test_1.expect)(email.body).toContain(processName);
-                (0, test_1.expect)(email.body).toContain(alertText);
-                return email.body;
-            }
-            else {
-                throw new Error('Email or email body is null or undefined.');
+    // waitForLatestEmail returns the newest email at once when the inbox is not
+    // empty, so a second call on the same inbox re-reads the first alert email.
+    // Search the inbox for an email that carries the expected text instead.
+    let body;
+    await (0, test_1.expect)(async () => {
+        const previews = await mailSlurp.getEmails(id, {
+            minCount: 1,
+            retryTimeout: 60000,
+        });
+        for (const preview of previews) {
+            const email = await mailSlurp.getEmail(preview.id);
+            if (email?.body?.includes(processName) &&
+                email.body.includes(alertText)) {
+                body = email.body;
+                return;
             }
         }
-        catch (error) {
-            console.warn(`Click attempt ${retries + 1} failed: ${error}`);
-        }
-    }
-    throw new Error(`Failed to get latest alert (${processName}) email for ${id} after ${maxRetries} attempts.`);
+        throw new Error(`No alert email for "${processName}" containing "${alertText}" in ` +
+            `inbox ${id} yet (${previews.length} email(s) present)`);
+    }).toPass({ timeout: 360000, intervals: [5000, 10000, 20000] });
+    return body;
 }
 exports.assertLatestAlertEmail = assertLatestAlertEmail;
 async function assertTestUsesCorrectOrganization(page) {

package/dist/pages/8.9/WorkspaceMembersPage.d.ts

@@ -0,0 +1,21 @@
+import { Page, Locator } from '@playwright/test';
+type WorkspaceRole = 'Workspace Admin' | 'Editor' | 'Commenter' | 'Viewer';
+declare class WorkspaceMembersPage {
+    private page;
+    readonly membersTab: Locator;
+    readonly manageMembersHeading: Locator;
+    readonly addMembersButton: Locator;
+    readonly addMemberSearchbox: Locator;
+    readonly addMemberSubmitButton: Locator;
+    constructor(page: Page);
+    showAllWorkspaces(): Promise<void>;
+    openManageMembers(workspaceName: string): Promise<void>;
+    workspaceId(): string;
+    private memberRow;
+    isMember(email: string): Promise<boolean>;
+    addMember(email: string, role: WorkspaceRole): Promise<void>;
+    private selectRoleIn;
+    setMemberRole(email: string, role: WorkspaceRole): Promise<void>;
+    removeMember(email: string): Promise<void>;
+}
+export { WorkspaceMembersPage, WorkspaceRole };