@camunda/e2e-test-suite 0.0.1443 → 0.0.1444

package/.github/c8_versions.json

@@ -4,6 +4,7 @@
   "8.9": "8.9 Cross Component Test Suite",
   "8.8": "8.8 Cross Component Test Suite",
   "8.7": "8.7 Cross Component Test Suite",
+  "SM-8.11": "SM-8.11",
   "SM-8.10": "SM-8.10",
   "SM-8.9": "SM-8.9",
   "SM-8.8": "SM-8.8",

package/README.md

@@ -33,6 +33,8 @@ For the Camunda SM Helm offering, the test suite supports following versions:
 - 8.7.X
 - 8.8.X
 - 8.9.X
+- 8.10.X
+- 8.11.X
 
 The test suite primarily uses Elasticsearch as the default search engine. However, it also supports OpenSearch, with dedicated workflows explicitly named to indicate OpenSearch as the selected engine.
 

package/dist/fixtures/SM-8.11.d.ts

@@ -0,0 +1,77 @@
+import AxeBuilder from '@axe-core/playwright';
+import { LoginPage } from '../pages/SM-8.11/LoginPage';
+import { HomePage } from '../pages/SM-8.11/HomePage';
+import { NavigationPage } from '../pages/SM-8.11/NavigationPage';
+import { ModelerHomePage } from '../pages/SM-8.11/ModelerHomePage';
+import { ModelerCreatePage } from '../pages/SM-8.11/ModelerCreatePage';
+import { PlayPage } from '../pages/SM-8.11/PlayPage';
+import { TaskPanelPage } from '../pages/SM-8.11/TaskPanelPage';
+import { TaskDetailsPage } from '../pages/SM-8.11/TaskDetailsPage';
+import { OperateHomePage } from '../pages/SM-8.11/OperateHomePage';
+import { OperateProcessesPage } from '../pages/SM-8.11/OperateProcessesPage';
+import { OperateProcessInstancePage } from '../pages/SM-8.11/OperateProcessInstancePage';
+import { OptimizeCollectionsPage } from '../pages/SM-8.11/OptimizeCollectionsPage';
+import { OptimizeHomePage } from '../pages/SM-8.11/OptimizeHomePage';
+import { FormJsPage } from '../pages/SM-8.11/FormJsPage';
+import { OptimizeReportPage } from '../pages/SM-8.11/OptimizeReportPage';
+import { SettingsPage } from '../pages/SM-8.11/SettingsPage';
+import { ConnectorSettingsPage } from '../pages/SM-8.11/ConnectorSettingsPage';
+import { ConnectorMarketplacePage } from '../pages/SM-8.11/ConnectorMarketplacePage';
+import { OCIdentityHomePage } from '../pages/SM-8.11/OCIdentityHomePage';
+import { OCIdentityMappingRulesPage } from '../pages/SM-8.11/OCIdentityMappingRulesPage';
+import { OCIdentityClusterVariablesPage } from '../pages/SM-8.11/OCIdentityClusterVariablesPage';
+import { OptimizeDashboardPage } from '../pages/SM-8.11/OptimizeDashboardPage';
+import { TaskProcessesPage } from '../pages/SM-8.11/TaskProcessesPage';
+import { IdentityUsersPage } from '../pages/SM-8.11/IdentityUsersPage';
+import { IdentityTenantPage } from '../pages/SM-8.11/IdentityTenantPage';
+import { ClusterDetailsPage } from '../pages/SM-8.11/ClusterDetailsPage';
+import { ClusterPage } from '../pages/SM-8.11/ClusterPage';
+import { ConnectorTemplatePage } from '../pages/SM-8.11/ConnectorTemplatePage';
+import { OCIdentityRolesPage } from '../pages/SM-8.11/OCIdentityRolesPage';
+import { ManagementIdentityPage } from '../pages/SM-8.11/ManagementIdentityPage';
+import { KeycloakAdminPage } from '../pages/SM-8.11/KeycloakAdminPage';
+import { KeycloakLoginPage } from '../pages/SM-8.11/KeycloakLoginPage';
+import { OCIdentityAuthorizationsPage } from '../pages/SM-8.11/OCIdentityAuthorizationsPage';
+import { OCIdentityGroupsPage } from '../pages/SM-8.11/OCIdentityGroupsPage';
+import { OCTenantPage } from '../pages/SM-8.11/OCTenantPage';
+type PlaywrightFixtures = {
+    makeAxeBuilder: () => AxeBuilder;
+    loginPage: LoginPage;
+    homePage: HomePage;
+    navigationPage: NavigationPage;
+    modelerHomePage: ModelerHomePage;
+    modelerCreatePage: ModelerCreatePage;
+    playPage: PlayPage;
+    taskPanelPage: TaskPanelPage;
+    taskDetailsPage: TaskDetailsPage;
+    operateHomePage: OperateHomePage;
+    operateProcessesPage: OperateProcessesPage;
+    optimizeCollectionsPage: OptimizeCollectionsPage;
+    operateProcessInstancePage: OperateProcessInstancePage;
+    optimizeHomePage: OptimizeHomePage;
+    formJsPage: FormJsPage;
+    optimizeReportPage: OptimizeReportPage;
+    settingsPage: SettingsPage;
+    connectorSettingsPage: ConnectorSettingsPage;
+    connectorMarketplacePage: ConnectorMarketplacePage;
+    ocIdentityHomePage: OCIdentityHomePage;
+    ocIdentityMappingRulesPage: OCIdentityMappingRulesPage;
+    ocIdentityClusterVariablesPage: OCIdentityClusterVariablesPage;
+    optimizeDashboardPage: OptimizeDashboardPage;
+    taskProcessesPage: TaskProcessesPage;
+    identityUsersPage: IdentityUsersPage;
+    managementIdentityTenantPage: IdentityTenantPage;
+    ocIdentityRolesPage: OCIdentityRolesPage;
+    ocIdentityAuthorizationsPage: OCIdentityAuthorizationsPage;
+    managementIdentityPage: ManagementIdentityPage;
+    keycloakAdminPage: KeycloakAdminPage;
+    keycloakLoginPage: KeycloakLoginPage;
+    clusterPage: ClusterPage;
+    clusterDetailsPage: ClusterDetailsPage;
+    connectorTemplatePage: ConnectorTemplatePage;
+    ocIdentityGroupsPage: OCIdentityGroupsPage;
+    ocTenantPage: OCTenantPage;
+    overrideTrackingScripts: void;
+};
+declare const test: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & PlaywrightFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;
+export { test };

package/dist/fixtures/SM-8.11.js

@@ -0,0 +1,176 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.test = void 0;
+const test_1 = require("@playwright/test");
+const playwright_1 = __importDefault(require("@axe-core/playwright"));
+const LoginPage_1 = require("../pages/SM-8.11/LoginPage");
+const HomePage_1 = require("../pages/SM-8.11/HomePage");
+const NavigationPage_1 = require("../pages/SM-8.11/NavigationPage");
+const ModelerHomePage_1 = require("../pages/SM-8.11/ModelerHomePage");
+const ModelerCreatePage_1 = require("../pages/SM-8.11/ModelerCreatePage");
+const PlayPage_1 = require("../pages/SM-8.11/PlayPage");
+const TaskPanelPage_1 = require("../pages/SM-8.11/TaskPanelPage");
+const TaskDetailsPage_1 = require("../pages/SM-8.11/TaskDetailsPage");
+const OperateHomePage_1 = require("../pages/SM-8.11/OperateHomePage");
+const OperateProcessesPage_1 = require("../pages/SM-8.11/OperateProcessesPage");
+const OperateProcessInstancePage_1 = require("../pages/SM-8.11/OperateProcessInstancePage");
+const OptimizeCollectionsPage_1 = require("../pages/SM-8.11/OptimizeCollectionsPage");
+const OptimizeHomePage_1 = require("../pages/SM-8.11/OptimizeHomePage");
+const FormJsPage_1 = require("../pages/SM-8.11/FormJsPage");
+const OptimizeReportPage_1 = require("../pages/SM-8.11/OptimizeReportPage");
+const SettingsPage_1 = require("../pages/SM-8.11/SettingsPage");
+const ConnectorSettingsPage_1 = require("../pages/SM-8.11/ConnectorSettingsPage");
+const ConnectorMarketplacePage_1 = require("../pages/SM-8.11/ConnectorMarketplacePage");
+const OCIdentityHomePage_1 = require("../pages/SM-8.11/OCIdentityHomePage");
+const OCIdentityMappingRulesPage_1 = require("../pages/SM-8.11/OCIdentityMappingRulesPage");
+const OCIdentityClusterVariablesPage_1 = require("../pages/SM-8.11/OCIdentityClusterVariablesPage");
+const OptimizeDashboardPage_1 = require("../pages/SM-8.11/OptimizeDashboardPage");
+const TaskProcessesPage_1 = require("../pages/SM-8.11/TaskProcessesPage");
+const IdentityUsersPage_1 = require("../pages/SM-8.11/IdentityUsersPage");
+const IdentityTenantPage_1 = require("../pages/SM-8.11/IdentityTenantPage");
+const ClusterDetailsPage_1 = require("../pages/SM-8.11/ClusterDetailsPage");
+const ClusterPage_1 = require("../pages/SM-8.11/ClusterPage");
+const ConnectorTemplatePage_1 = require("../pages/SM-8.11/ConnectorTemplatePage");
+const OCIdentityRolesPage_1 = require("../pages/SM-8.11/OCIdentityRolesPage");
+const ManagementIdentityPage_1 = require("../pages/SM-8.11/ManagementIdentityPage");
+const KeycloakAdminPage_1 = require("../pages/SM-8.11/KeycloakAdminPage");
+const KeycloakLoginPage_1 = require("../pages/SM-8.11/KeycloakLoginPage");
+const OCIdentityAuthorizationsPage_1 = require("../pages/SM-8.11/OCIdentityAuthorizationsPage");
+const OCIdentityGroupsPage_1 = require("../pages/SM-8.11/OCIdentityGroupsPage");
+const OCTenantPage_1 = require("../pages/SM-8.11/OCTenantPage");
+const test = test_1.test.extend({
+    makeAxeBuilder: async ({ page }, use) => {
+        const makeAxeBuilder = () => new playwright_1.default({ page }).withTags([
+            'best-practice',
+            'wcag2a',
+            'wcag2aa',
+            'cat.semantics',
+            'cat.forms',
+        ]);
+        await use(makeAxeBuilder);
+    },
+    loginPage: async ({ page }, use) => {
+        await use(new LoginPage_1.LoginPage(page));
+    },
+    homePage: async ({ page }, use) => {
+        await use(new HomePage_1.HomePage(page));
+    },
+    navigationPage: async ({ page }, use) => {
+        await use(new NavigationPage_1.NavigationPage(page));
+    },
+    modelerHomePage: async ({ page }, use) => {
+        await use(new ModelerHomePage_1.ModelerHomePage(page));
+    },
+    modelerCreatePage: async ({ page }, use) => {
+        await use(new ModelerCreatePage_1.ModelerCreatePage(page));
+    },
+    playPage: async ({ page }, use) => {
+        await use(new PlayPage_1.PlayPage(page));
+    },
+    taskPanelPage: async ({ page }, use) => {
+        await use(new TaskPanelPage_1.TaskPanelPage(page));
+    },
+    taskDetailsPage: async ({ page }, use) => {
+        await use(new TaskDetailsPage_1.TaskDetailsPage(page));
+    },
+    operateHomePage: async ({ page }, use) => {
+        await use(new OperateHomePage_1.OperateHomePage(page));
+    },
+    operateProcessesPage: async ({ page }, use) => {
+        await use(new OperateProcessesPage_1.OperateProcessesPage(page));
+    },
+    operateProcessInstancePage: async ({ page }, use) => {
+        await use(new OperateProcessInstancePage_1.OperateProcessInstancePage(page));
+    },
+    identityUsersPage: async ({ page }, use) => {
+        await use(new IdentityUsersPage_1.IdentityUsersPage(page));
+    },
+    clusterPage: async ({ page }, use) => {
+        await use(new ClusterPage_1.ClusterPage(page));
+    },
+    clusterDetailsPage: async ({ page }, use) => {
+        await use(new ClusterDetailsPage_1.ClusterDetailsPage(page));
+    },
+    optimizeCollectionsPage: async ({ page }, use) => {
+        await use(new OptimizeCollectionsPage_1.OptimizeCollectionsPage(page));
+    },
+    optimizeHomePage: async ({ page }, use) => {
+        await use(new OptimizeHomePage_1.OptimizeHomePage(page));
+    },
+    formJsPage: async ({ page }, use) => {
+        await use(new FormJsPage_1.FormJsPage(page));
+    },
+    optimizeReportPage: async ({ page }, use) => {
+        await use(new OptimizeReportPage_1.OptimizeReportPage(page));
+    },
+    settingsPage: async ({ page }, use) => {
+        await use(new SettingsPage_1.SettingsPage(page));
+    },
+    connectorSettingsPage: async ({ page }, use) => {
+        await use(new ConnectorSettingsPage_1.ConnectorSettingsPage(page));
+    },
+    connectorMarketplacePage: async ({ page }, use) => {
+        await use(new ConnectorMarketplacePage_1.ConnectorMarketplacePage(page));
+    },
+    managementIdentityPage: async ({ page }, use) => {
+        await use(new ManagementIdentityPage_1.ManagementIdentityPage(page));
+    },
+    ocIdentityHomePage: async ({ page }, use) => {
+        await use(new OCIdentityHomePage_1.OCIdentityHomePage(page));
+    },
+    ocIdentityMappingRulesPage: async ({ page }, use) => {
+        await use(new OCIdentityMappingRulesPage_1.OCIdentityMappingRulesPage(page));
+    },
+    ocIdentityClusterVariablesPage: async ({ page }, use) => {
+        await use(new OCIdentityClusterVariablesPage_1.OCIdentityClusterVariablesPage(page));
+    },
+    ocIdentityRolesPage: async ({ page }, use) => {
+        await use(new OCIdentityRolesPage_1.OCIdentityRolesPage(page));
+    },
+    ocIdentityAuthorizationsPage: async ({ page }, use) => {
+        await use(new OCIdentityAuthorizationsPage_1.OCIdentityAuthorizationsPage(page));
+    },
+    optimizeDashboardPage: async ({ page }, use) => {
+        await use(new OptimizeDashboardPage_1.OptimizeDashboardPage(page));
+    },
+    taskProcessesPage: async ({ page }, use) => {
+        await use(new TaskProcessesPage_1.TaskProcessesPage(page));
+    },
+    managementIdentityTenantPage: async ({ page }, use) => {
+        await use(new IdentityTenantPage_1.IdentityTenantPage(page));
+    },
+    connectorTemplatePage: async ({ page }, use) => {
+        await use(new ConnectorTemplatePage_1.ConnectorTemplatePage(page));
+    },
+    keycloakLoginPage: async ({ page }, use) => {
+        await use(new KeycloakLoginPage_1.KeycloakLoginPage(page));
+    },
+    keycloakAdminPage: async ({ page }, use) => {
+        await use(new KeycloakAdminPage_1.KeycloakAdminPage(page));
+    },
+    ocIdentityGroupsPage: async ({ page }, use) => {
+        await use(new OCIdentityGroupsPage_1.OCIdentityGroupsPage(page));
+    },
+    ocTenantPage: async ({ page }, use) => {
+        await use(new OCTenantPage_1.OCTenantPage(page));
+    },
+    overrideTrackingScripts: [
+        async ({ context }, use) => {
+            await context.route('https://cmp.osano.com/16CVvwSNKHi9t1grQ/9403708a-488b-4f3b-aea6-613825dec79f/osano.js', (route) => route.fulfill({
+                status: 200,
+                headers: {
+                    'Content-Type': 'text/javascript;charset=UTF-8',
+                },
+                body: '',
+            }));
+            await use();
+        },
+        {
+            auto: true,
+        },
+    ],
+});
+exports.test = test;

package/dist/pages/SM-8.11/Authorization.d.ts

@@ -0,0 +1,39 @@
+import { Page, Locator } from '@playwright/test';
+declare class Authorization {
+    readonly page: Page;
+    protected readonly selectResourceTypeTab: (name: string) => Locator;
+    protected readonly createAuthorizationModal: Locator;
+    protected readonly createAuthorizationButton: Locator;
+    protected readonly createAuthorizationOwnerTypeCombobox: Locator;
+    protected readonly createAuthorizationOwnerTypeOption: (name: string) => Locator;
+    protected readonly createAuthorizationOwnerComboBox: Locator;
+    protected readonly createAuthorizationOwnerOption: (name: string) => Locator;
+    protected readonly createAuthorizationOwnerSearchInput: Locator;
+    protected readonly createAuthorizationOwnerSearchOption: (name: string) => Locator;
+    protected readonly createAuthorizationOwnerCommandInput: Locator;
+    protected readonly createAuthorizationOwnerCommandOptions: Locator;
+    protected readonly createAuthorizationResourceTypeDropdown: Locator;
+    protected readonly createAuthorizationResourceTypeOption: (name: string) => Locator;
+    protected readonly createAuthorizationResourceIdField: Locator;
+    protected readonly createAuthorizationAccessPermission: (name: string) => Locator;
+    protected readonly createAuthorizationSubmitButton: Locator;
+    protected readonly authorizationsList: Locator;
+    protected readonly deleteAuthorizationButton: (name: string) => Locator;
+    protected readonly deleteAuthorizationModal: Locator;
+    protected readonly deleteAuthorizationModalDeleteButton: Locator;
+    protected readonly tableFilter: Locator;
+    constructor(page: Page);
+    protected selectResourceType(resourceType: string, timeout?: number): Promise<void>;
+    private selectAuthorizationOwner;
+    createAuthorization(authorization: {
+        ownerType: string;
+        ownerId: string;
+        resourceType: string;
+        resourceId: string;
+        accessPermissions: string[];
+    }): Promise<void>;
+    private expectAuthorizationListed;
+    private filterAuthorizationsByOwner;
+    deleteAuthorization(resourceId: string, resourceType: string): Promise<void>;
+}
+export { Authorization };

package/dist/pages/SM-8.11/Authorization.js

@@ -0,0 +1,349 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Authorization = void 0;
+const test_1 = require("@playwright/test");
+const findLocatorWithPagination_1 = require("../../utils/assertionHelpers/findLocatorWithPagination");
+const submitModalWithRetry_1 = require("../../utils/assertionHelpers/submitModalWithRetry");
+const sleep_1 = require("../../utils/sleep");
+class Authorization {
+    page;
+    selectResourceTypeTab;
+    createAuthorizationModal;
+    createAuthorizationButton;
+    createAuthorizationOwnerTypeCombobox;
+    createAuthorizationOwnerTypeOption;
+    createAuthorizationOwnerComboBox;
+    createAuthorizationOwnerOption;
+    createAuthorizationOwnerSearchInput;
+    createAuthorizationOwnerSearchOption;
+    createAuthorizationOwnerCommandInput;
+    createAuthorizationOwnerCommandOptions;
+    createAuthorizationResourceTypeDropdown;
+    createAuthorizationResourceTypeOption;
+    createAuthorizationResourceIdField;
+    createAuthorizationAccessPermission;
+    createAuthorizationSubmitButton;
+    authorizationsList;
+    deleteAuthorizationButton;
+    deleteAuthorizationModal;
+    deleteAuthorizationModalDeleteButton;
+    tableFilter;
+    constructor(page) {
+        this.page = page;
+        this.selectResourceTypeTab = (resourceType) => page.getByRole('tab', { name: resourceType });
+        this.authorizationsList = page.getByRole('table');
+        this.createAuthorizationButton = page.getByRole('button', {
+            name: /create authorization/i,
+        });
+        this.createAuthorizationModal = page.getByRole('dialog', {
+            name: 'Create authorization',
+        });
+        this.createAuthorizationOwnerTypeCombobox =
+            this.createAuthorizationModal.getByRole('combobox', {
+                name: 'Owner type',
+            });
+        // The design-system Select portals its listbox to the end of <body>, so
+        // the options are siblings of the dialog rather than descendants, and
+        // while the listbox is open Radix marks everything outside it aria-hidden
+        // - which takes the dialog itself out of the accessibility tree. Query the
+        // options from the page root so both placements resolve.
+        this.createAuthorizationOwnerTypeOption = (name) => this.page
+            .getByRole('option', {
+            name,
+            exact: true,
+        })
+            .first();
+        this.createAuthorizationOwnerComboBox =
+            this.createAuthorizationModal.getByRole('combobox', {
+                name: 'Owner',
+                exact: true,
+            });
+        this.createAuthorizationOwnerOption = (name) => this.createAuthorizationModal.getByRole('option', {
+            name,
+            exact: true,
+        });
+        // Every owner type now renders a server-backed search dropdown instead of
+        // the combobox that listed all owners up front. The dropdown is a Carbon
+        // Search inside a ListBox, so it has no combobox role; its results are
+        // list-box menu items that carry the owner ID as their title. The
+        // design-system build renders the same field as a command palette whose
+        // results are role=option items in a popover portalled out of the dialog.
+        this.createAuthorizationOwnerSearchInput =
+            this.createAuthorizationModal.getByPlaceholder('Search by owner ID');
+        this.createAuthorizationOwnerSearchOption = (name) => this.page
+            .locator('.cds--list-box__menu-item, [role="option"]')
+            .filter({ hasText: name })
+            .first();
+        // In the design-system build the closed Owner control is a combobox-role
+        // trigger that paints "Search by owner ID" as static text (no placeholder
+        // attribute), and the cmdk search box plus its result listbox only mount
+        // in a popover once the trigger is opened. That popover is portalled out
+        // of the dialog, and while it is open Radix marks the dialog aria-hidden,
+        // so both must be queried from the page root.
+        this.createAuthorizationOwnerCommandInput = this.page
+            .locator('[data-slot="command-input"]')
+            .first();
+        this.createAuthorizationOwnerCommandOptions = this.page
+            .getByRole('listbox')
+            .getByRole('option');
+        this.createAuthorizationResourceTypeDropdown =
+            this.createAuthorizationModal.getByRole('combobox', {
+                name: 'Resource type',
+            });
+        this.createAuthorizationResourceTypeOption = (name) => this.page
+            .getByRole('option', {
+            name,
+            exact: true,
+        })
+            .first();
+        this.createAuthorizationResourceIdField =
+            this.createAuthorizationModal.getByRole('textbox', {
+                name: 'Resource ID',
+            });
+        this.createAuthorizationAccessPermission = (name) => this.createAuthorizationModal.locator(`label[for="${name}"]`);
+        this.createAuthorizationSubmitButton =
+            this.createAuthorizationModal.getByRole('button', {
+                name: 'Create authorization',
+            });
+        this.authorizationsList = page.getByRole('table');
+        this.deleteAuthorizationButton = (name) => this.authorizationsList
+            .getByRole('row', { name })
+            .getByRole('button', { name: 'Delete' });
+        this.deleteAuthorizationModal = page.getByRole('dialog', {
+            name: /delete authorization/i,
+        });
+        this.deleteAuthorizationModalDeleteButton =
+            this.deleteAuthorizationModal.getByRole('button', {
+                name: /delete authorization/i,
+            });
+        // Carbon labels the table toolbar search "Filter table"; the
+        // design-system shell the Admin is migrating onto exposes the placeholder
+        // as the accessible name instead. Match either.
+        this.tableFilter = page
+            .getByRole('searchbox', { name: 'Filter table' })
+            .or(page.getByRole('searchbox', { name: 'Search by owner ID' }))
+            .first();
+    }
+    // The Admin's Authorizations page is migrating onto the new design-system
+    // shell, which replaces the per-resource-type tabs with a single filter
+    // combobox (identity/client ListV2.tsx). That combobox's accessible name was
+    // renamed from "Authorization type" to "Resource type" in camunda/camunda
+    // commit 377b0e3; match either so both image versions resolve. Select the
+    // resource type through whichever this build renders: click the tab, or open
+    // the combobox and pick the option.
+    async selectResourceType(resourceType, timeout = 60000) {
+        const tab = this.selectResourceTypeTab(resourceType);
+        const filterCombobox = this.page
+            .getByRole('combobox', { name: 'Resource type' })
+            .or(this.page.getByRole('combobox', { name: 'Authorization type' }));
+        await (0, test_1.expect)(tab.or(filterCombobox)).toBeVisible({ timeout });
+        if (await tab.isVisible()) {
+            await tab.click();
+            return;
+        }
+        await filterCombobox.click();
+        await this.page
+            .getByRole('option', { name: resourceType, exact: true })
+            .click({ timeout: Math.min(timeout, 30000) });
+    }
+    // Released 8.10 alpha images still render the Carbon combobox that lists
+    // every owner, so accept whichever of the three owner fields this build
+    // shows: the Carbon search dropdown, the Carbon combobox that lists every
+    // owner inline, or the design-system combobox whose cmdk popover only loads
+    // results once the owner ID is typed.
+    async selectAuthorizationOwner(ownerId) {
+        await (0, test_1.expect)(this.createAuthorizationOwnerSearchInput.or(this.createAuthorizationOwnerComboBox)).toBeVisible({ timeout: 30000 });
+        if (await this.createAuthorizationOwnerSearchInput.isVisible()) {
+            await this.createAuthorizationOwnerSearchInput.fill(ownerId);
+            const ownerOption = this.createAuthorizationOwnerSearchOption(ownerId);
+            // The search is debounced and served by the API, so a just-created
+            // owner can take a while to surface.
+            await (0, test_1.expect)(ownerOption).toBeVisible({ timeout: 60000 });
+            await ownerOption.click({ timeout: 30000 });
+            // Picking an owner replaces the search input with a tag holding the
+            // selection, which is how we know the choice was committed.
+            await (0, test_1.expect)(this.createAuthorizationOwnerSearchInput).toBeHidden({
+                timeout: 30000,
+            });
+            return;
+        }
+        await this.createAuthorizationOwnerComboBox.click();
+        const commandInput = this.createAuthorizationOwnerCommandInput;
+        const inlineOwnerOption = this.createAuthorizationOwnerOption(ownerId);
+        await (0, test_1.expect)(commandInput.or(inlineOwnerOption).first()).toBeVisible({
+            timeout: 30000,
+        });
+        if (await commandInput.isVisible()) {
+            await commandInput.fill(ownerId);
+            // The result list is served by the API and debounced, and each option is
+            // labelled "<owner id> — <name>" rather than the bare ID, so narrow the
+            // search to the single row this unique owner ID resolves to instead of
+            // matching on the label text.
+            const ownerOptions = this.createAuthorizationOwnerCommandOptions;
+            await (0, test_1.expect)(ownerOptions).toHaveCount(1, { timeout: 60000 });
+            await ownerOptions.first().click({ timeout: 30000, force: true });
+            // Committing the choice closes the popover, which is what hands the
+            // dialog back to the accessibility tree for the fields that follow.
+            await (0, test_1.expect)(commandInput).toBeHidden({ timeout: 30000 });
+            return;
+        }
+        await (0, test_1.expect)(inlineOwnerOption).toBeVisible({
+            timeout: 30000,
+        });
+        await inlineOwnerOption.click({
+            timeout: 30000,
+        });
+    }
+    async createAuthorization(authorization) {
+        await this.createAuthorizationButton.click();
+        await (0, test_1.expect)(this.createAuthorizationModal).toBeVisible();
+        await this.createAuthorizationOwnerTypeCombobox.click();
+        await this.createAuthorizationOwnerTypeOption(authorization.ownerType).click();
+        await this.selectAuthorizationOwner(authorization.ownerId);
+        // The Resource type is pre-selected and disabled when the dialog is
+        // opened from a specific resource-type tab. Only pick it from the dropdown
+        // when the field is still enabled (editable).
+        await (0, test_1.expect)(this.createAuthorizationResourceTypeDropdown).toBeVisible({
+            timeout: 30000,
+        });
+        if (await this.createAuthorizationResourceTypeDropdown.isEnabled()) {
+            await this.createAuthorizationResourceTypeDropdown.click();
+            await this.createAuthorizationResourceTypeOption(authorization.resourceType).click({ timeout: 30000 });
+        }
+        await this.createAuthorizationResourceIdField.fill(authorization.resourceId);
+        for (const permission of authorization.accessPermissions) {
+            await (0, sleep_1.sleep)(200);
+            const permissionLabel = this.createAuthorizationAccessPermission(permission);
+            const permissionInput = this.createAuthorizationModal.locator(`input[id="${permission}"], [role="checkbox"][id="${permission}"]`);
+            await (0, test_1.expect)(permissionLabel).toBeVisible();
+            if (!(await permissionInput.isChecked())) {
+                await permissionLabel.scrollIntoViewIfNeeded();
+                await (0, sleep_1.sleep)(300);
+                let clickAttempts = 0;
+                const maxAttempts = 3;
+                while (!(await permissionInput.isChecked()) &&
+                    clickAttempts < maxAttempts) {
+                    clickAttempts++;
+                    await permissionLabel.click({ force: true });
+                    await (0, sleep_1.sleep)(500);
+                    if (await permissionInput.isChecked()) {
+                        break;
+                    }
+                    if (clickAttempts < maxAttempts) {
+                        await permissionLabel.click();
+                        await (0, sleep_1.sleep)(300);
+                    }
+                }
+                await (0, test_1.expect)(permissionInput).toBeChecked({ timeout: 3000 });
+            }
+        }
+        await (0, submitModalWithRetry_1.submitModalWithRetry)(this.createAuthorizationSubmitButton, this.createAuthorizationModal);
+        await this.selectResourceType(authorization.resourceType);
+        const item = this.page
+            .getByRole('row')
+            .filter({
+            hasText: `${authorization.ownerId}${authorization.resourceId}`,
+        })
+            .first();
+        await this.expectAuthorizationListed(authorization, item);
+    }
+    // The toolbar search filters by owner ID, so filling it with the resource
+    // type narrowed nothing, and the retry helper it fed reloads before it
+    // asserts, which dropped the filter entirely. That left the new row to be
+    // found on page 1 of the unfiltered table - and the authorizations table
+    // paginates, so with the RBA specs creating owners in parallel it is
+    // regularly on a later page. Filter by owner, then page through what is
+    // left; fall back to the unfiltered table for builds whose search has not
+    // caught up with a just-created owner yet.
+    async expectAuthorizationListed(authorization, item) {
+        const deadline = Date.now() + 180000;
+        const budget = (max) => Math.max(5000, Math.min(max, deadline - Date.now()));
+        const maxAttempts = 5;
+        let lastError;
+        for (let attempt = 0; attempt < maxAttempts; attempt++) {
+            if (attempt > 0 && Date.now() >= deadline) {
+                break;
+            }
+            try {
+                await this.selectResourceType(authorization.resourceType, budget(30000));
+                for (const filterValue of [authorization.ownerId, '']) {
+                    await this.filterAuthorizationsByOwner(filterValue);
+                    const found = await (0, findLocatorWithPagination_1.findLocatorWithPagination)(this.page, item, {
+                        timeout: budget(filterValue === '' ? 45000 : 15000),
+                    });
+                    if (found) {
+                        await (0, test_1.expect)(item).toBeVisible({ timeout: 5000 });
+                        return;
+                    }
+                }
+                throw new Error(`No row for owner "${authorization.ownerId}" and resource ` +
+                    `"${authorization.resourceId}" in the ` +
+                    `${authorization.resourceType} table`);
+            }
+            catch (error) {
+                lastError = error;
+                if (attempt < maxAttempts - 1) {
+                    console.warn(`Attempt ${attempt + 1} did not list the ` +
+                        `${authorization.resourceType} authorization for ` +
+                        `"${authorization.ownerId}". Retrying...`);
+                    // A refused/reset connection while the gateway restarts must feed
+                    // the next attempt, not abort the retry loop.
+                    await this.page
+                        .reload({ waitUntil: 'domcontentloaded' })
+                        .catch((reloadError) => {
+                        lastError = reloadError;
+                    });
+                }
+            }
+        }
+        throw new Error(`Authorization for "${authorization.ownerId}" on ` +
+            `"${authorization.resourceId}" was not listed: ${String(lastError)}`);
+    }
+    async filterAuthorizationsByOwner(ownerId) {
+        const hasFilter = await this.tableFilter
+            .isVisible({ timeout: 5000 })
+            .catch(() => false);
+        if (!hasFilter) {
+            return;
+        }
+        await this.tableFilter.fill(ownerId);
+        await (0, sleep_1.sleep)(1000);
+    }
+    async deleteAuthorization(resourceId, resourceType) {
+        // Same paginated table as createAuthorization: the row being deleted is
+        // not necessarily on page 1, and the toolbar search cannot narrow by
+        // resource ID.
+        const found = await (0, findLocatorWithPagination_1.findLocatorWithPagination)(this.page, this.deleteAuthorizationButton(resourceId), { timeout: 60000 });
+        if (!found) {
+            throw new Error(`No ${resourceType} authorization row for resource "${resourceId}"`);
+        }
+        await this.deleteAuthorizationButton(resourceId).click();
+        await (0, test_1.expect)(this.deleteAuthorizationModal).toBeVisible();
+        await this.deleteAuthorizationModalDeleteButton.click();
+        await (0, test_1.expect)(this.deleteAuthorizationModal).not.toBeVisible();
+        // Re-selecting the resource type takes two interactions on the
+        // design-system build, so this cannot go through the shared
+        // reload-click-assert helper, which only accepts a single click locator.
+        const deletedCell = this.authorizationsList
+            .getByRole('cell', { name: resourceId })
+            .first();
+        let lastError;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            await this.page.reload();
+            await this.page.waitForLoadState('domcontentloaded');
+            await this.selectResourceType(resourceType);
+            try {
+                await (0, test_1.expect)(deletedCell).not.toBeVisible({ timeout: 5000 });
+                return;
+            }
+            catch (error) {
+                lastError = error;
+                console.warn(`Attempt ${attempt + 1} still listed the ${resourceType} ` +
+                    `authorization for "${resourceId}". Retrying...`);
+            }
+        }
+        throw new Error(`Authorization for resource "${resourceId}" is still listed: ` +
+            String(lastError));
+    }
+}
+exports.Authorization = Authorization;