@camunda/e2e-test-suite 0.0.755 → 0.0.757

package/dist/fixtures/8.10.d.ts

@@ -34,6 +34,7 @@ import { OCIdentityRolesPage } from '../pages/8.10/OCIdentityRolesPage';
 import { OCIdentityAuthorizationsPage } from '../pages/8.10/OCIdentityAuthorizationsPage';
 import { OCIdentityClusterVariablesPage } from '../pages/8.10/OCIdentityClusterVariablesPage';
 import { ClientCredentialsDetailsPage } from '../pages/8.10/ClientCredentialsDetailsPage';
+import { AuditLogPage } from '../pages/8.10/AuditLogPage';
 type PlaywrightFixtures = {
     makeAxeBuilder: () => AxeBuilder;
     loginPage: LoginPage;
@@ -71,6 +72,7 @@ type PlaywrightFixtures = {
     ocIdentityAuthorizationsPage: OCIdentityAuthorizationsPage;
     ocIdentityClusterVariablesPage: OCIdentityClusterVariablesPage;
     clientCredentialsDetailsPage: ClientCredentialsDetailsPage;
+    auditLogPage: AuditLogPage;
     overrideTrackingScripts: void;
 };
 declare const test: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & PlaywrightFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;

package/dist/fixtures/8.10.js

@@ -41,6 +41,7 @@ const OCIdentityRolesPage_1 = require("../pages/8.10/OCIdentityRolesPage");
 const OCIdentityAuthorizationsPage_1 = require("../pages/8.10/OCIdentityAuthorizationsPage");
 const OCIdentityClusterVariablesPage_1 = require("../pages/8.10/OCIdentityClusterVariablesPage");
 const ClientCredentialsDetailsPage_1 = require("../pages/8.10/ClientCredentialsDetailsPage");
+const AuditLogPage_1 = require("../pages/8.10/AuditLogPage");
 const test = test_1.test.extend({
     makeAxeBuilder: async ({ page }, use) => {
         const makeAxeBuilder = () => new playwright_1.default({ page }).withTags([
@@ -158,6 +159,9 @@ const test = test_1.test.extend({
     clientCredentialsDetailsPage: async ({ page }, use) => {
         await use(new ClientCredentialsDetailsPage_1.ClientCredentialsDetailsPage(page));
     },
+    auditLogPage: async ({ page }, use) => {
+        await use(new AuditLogPage_1.AuditLogPage(page));
+    },
     overrideTrackingScripts: [
         async ({ context }, use) => {
             await context.route('https://cmp.osano.com/16CVvwSNKHi9t1grQ/9403708a-488b-4f3b-aea6-613825dec79f/osano.js', (route) => route.fulfill({

package/dist/pages/8.10/AuditLogPage.d.ts

@@ -0,0 +1,14 @@
+import { Page, Locator } from '@playwright/test';
+type AuditLogCategory = 'Administration' | 'Deployed resources' | 'User tasks';
+declare class AuditLogPage {
+    readonly auditLogTab: Locator;
+    readonly updateButton: Locator;
+    readonly clientOperationsSection: Locator;
+    readonly clientCategoryCheckbox: (category: AuditLogCategory) => Locator;
+    readonly clientCategoryLabel: (category: AuditLogCategory) => Locator;
+    constructor(page: Page);
+    clickAuditLogTab(): Promise<void>;
+    private ensureChecked;
+    enableClientOperationLogging(): Promise<void>;
+}
+export { AuditLogPage };

package/dist/pages/8.10/AuditLogPage.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogPage = void 0;
+const test_1 = require("@playwright/test");
+class AuditLogPage {
+    auditLogTab;
+    updateButton;
+    clientOperationsSection;
+    clientCategoryCheckbox;
+    clientCategoryLabel;
+    constructor(page) {
+        this.auditLogTab = page.getByRole('tab', { name: 'Audit log' });
+        const auditLogPanel = page.getByRole('tabpanel', { name: 'Audit log' });
+        this.updateButton = auditLogPanel.getByRole('button', {
+            name: 'Update',
+            exact: true,
+        });
+        // Scope to the Client block: the category labels also exist under the User section.
+        this.clientOperationsSection = auditLogPanel
+            .getByText('Client operations to log', { exact: true })
+            .locator('..');
+        this.clientCategoryCheckbox = (category) => this.clientOperationsSection.getByRole('checkbox', { name: category });
+        // Carbon hides the real <input>; toggle via the visible label.
+        this.clientCategoryLabel = (category) => this.clientOperationsSection.locator('label').filter({ hasText: category });
+    }
+    async clickAuditLogTab() {
+        await (0, test_1.expect)(this.auditLogTab).toBeVisible({ timeout: 60000 });
+        await this.auditLogTab.click({ timeout: 60000 });
+    }
+    async ensureChecked(category) {
+        const checkbox = this.clientCategoryCheckbox(category);
+        await (0, test_1.expect)(checkbox).toBeAttached({ timeout: 30000 });
+        if (!(await checkbox.isChecked())) {
+            await this.clientCategoryLabel(category).click({ timeout: 30000 });
+            await (0, test_1.expect)(checkbox).toBeChecked();
+        }
+    }
+    async enableClientOperationLogging() {
+        const categories = [
+            'Administration',
+            'Deployed resources',
+            'User tasks',
+        ];
+        for (const category of categories) {
+            await this.ensureChecked(category);
+        }
+        if (await this.updateButton.isEnabled()) {
+            await this.updateButton.click({ timeout: 60000 });
+            await (0, test_1.expect)(this.updateButton).toBeDisabled({ timeout: 60000 });
+        }
+    }
+}
+exports.AuditLogPage = AuditLogPage;

package/dist/pages/SM-8.10/UtilitiesPage.js

@@ -128,7 +128,28 @@ async function completeTaskWithRetry(page, taskPanelPage, taskDetailsPage, taskN
                 catch {
                     // No toast to dismiss
                 }
-                await page.reload();
+                // A transient backend 500 while opening the task can leave the page on
+                // the raw Tasklist API URL (the JSON error renders as the top-level
+                // document). A bare reload then re-requests that broken URL and never
+                // restores the SPA, so every remaining attempt is wasted. Re-navigate
+                // to the Tasklist list — which uses a different endpoint than the
+                // single-task fetch that 500s — so the app re-mounts and the task can
+                // be re-opened once the blip clears. Progressive backoff gives the
+                // backend time to recover between attempts.
+                await (0, sleep_1.sleep)(2000 * (attempt + 1));
+                const orchestrationContextPath = process.env.ORCHESTRATION_CONTEXT_PATH ?? '/orchestration';
+                const normalizedOrchestrationPath = orchestrationContextPath.startsWith('/')
+                    ? orchestrationContextPath
+                    : `/${orchestrationContextPath}`;
+                try {
+                    await page.goto(`${normalizedOrchestrationPath}/tasklist`, {
+                        timeout: 60000,
+                        waitUntil: 'domcontentloaded',
+                    });
+                }
+                catch {
+                    await page.reload();
+                }
                 await page.waitForLoadState('networkidle');
             }
             else {

package/dist/tests/8.10/orchestration-cluster-mcp-server/api/mcp-processes-audit-log.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/8.10/orchestration-cluster-mcp-server/api/mcp-processes-audit-log.spec.js

@@ -0,0 +1,146 @@
+"use strict";
+/*
+ * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH under
+ * one or more contributor license agreements. See the NOTICE file distributed
+ * with this work for additional information regarding copyright ownership.
+ * Licensed under the Camunda License 1.0. You may not use this file
+ * except in compliance with the Camunda License 1.0.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+/*
+ * MCP audit-log inbound channel provenance — camunda/camunda#56234
+ * (SC-AUD-01/02/03).
+ */
+const _8_10_1 = require("../../../../fixtures/8.10");
+const test_1 = require("@playwright/test");
+const apiHelpers_1 = require("../../../../utils/apiHelpers");
+const mcpHelpers_1 = require("../../../../utils/mcpHelpers");
+const constants_1 = require("../../../../utils/constants");
+// Raw BPMN `io.camunda.tool:name` annotation — what the audit log stores in
+// inboundChannelToolName (not the composite tools/list name).
+const TOOL_NAME_RAW = 'mcp-as-tool-process';
+const MCP_PROCESS_DEFINITION_ID = 'mcpAsToolProcess';
+let authToken;
+let mcpProcessesUrl;
+let messageSubscriptionsSearchUrl;
+let auditLogsSearchUrl;
+let mcpSessionId = null;
+let restProcessDefinitionKey;
+let compositeToolName;
+_8_10_1.test.describe.configure({ mode: 'parallel' });
+_8_10_1.test.describe('Orchestration Cluster MCP Server — audit log inbound channel', () => {
+    _8_10_1.test.beforeAll(async () => {
+        authToken = await (0, apiHelpers_1.authSaasAPI)(undefined, 'agentic_cluster');
+        mcpProcessesUrl = (0, apiHelpers_1.buildZeebeApiUrl)('/mcp/processes', 'saas', 'agentic_cluster');
+        messageSubscriptionsSearchUrl = (0, apiHelpers_1.buildZeebeApiUrl)('/v2/message-subscriptions/search', 'saas', 'agentic_cluster');
+        auditLogsSearchUrl = (0, apiHelpers_1.buildZeebeApiUrl)('/v2/audit-logs/search', 'saas', 'agentic_cluster');
+        const apiContext = await (0, apiHelpers_1.getApiRequestContext)();
+        mcpSessionId = await (0, mcpHelpers_1.initializeMcpSession)(apiContext, mcpProcessesUrl, authToken, mcpSessionId);
+        const [mcpKey, restKey] = await Promise.all([
+            (0, apiHelpers_1.deployProcess)('./resources/mcp_server_saas/mcp_as_tool_process.bpmn', authToken, 'saas', 'agentic_cluster'),
+            (0, apiHelpers_1.deployProcess)('./resources/mcp_server_saas/mcp_process_instance_test_file.bpmn', authToken, 'saas', 'agentic_cluster'),
+        ]);
+        if (mcpKey == null) {
+            throw new Error('Failed to deploy mcp_as_tool_process.bpmn');
+        }
+        if (restKey == null) {
+            throw new Error('Failed to deploy mcp_process_instance_test_file.bpmn');
+        }
+        restProcessDefinitionKey = String(restKey);
+        // Composite tool name is `<toolName>_<messageSubscriptionKey>`.
+        await (0, test_1.expect)(async () => {
+            const res = await apiContext.post(messageSubscriptionsSearchUrl, {
+                headers: (0, mcpHelpers_1.buildMcpHeaders)(authToken, mcpSessionId),
+                data: {
+                    filter: {
+                        processDefinitionId: MCP_PROCESS_DEFINITION_ID,
+                        messageSubscriptionType: 'START_EVENT',
+                    },
+                    sort: [{ field: 'processDefinitionVersion', order: 'desc' }],
+                    page: { limit: 1 },
+                },
+            });
+            await (0, mcpHelpers_1.assertResponseStatus)(res, 200);
+            const json = (await res.json());
+            (0, test_1.expect)(json.items.length).toBeGreaterThanOrEqual(1);
+            compositeToolName = `${TOOL_NAME_RAW}_${json.items[0].messageSubscriptionKey}`;
+        }).toPass(constants_1.deletionAssertionOptions);
+    });
+    (0, _8_10_1.test)('SC-AUD-01 — MCP tools/call produces audit entry with inboundChannelType=MCP', async () => {
+        const apiContext = await (0, apiHelpers_1.getApiRequestContext)();
+        const callBody = await (0, mcpHelpers_1.callTool)(apiContext, mcpProcessesUrl, authToken, mcpSessionId, compositeToolName, {});
+        (0, test_1.expect)(callBody.result).toBeDefined();
+        (0, test_1.expect)(callBody.result.isError).not.toBe(true);
+        const pik = (0, mcpHelpers_1.extractProcessInstanceKey)(callBody.result.content[0]?.text ?? '');
+        (0, test_1.expect)(pik, 'Expected processInstanceKey from MCP tools/call').not.toBeNull();
+        await (0, test_1.expect)(async () => {
+            const res = await apiContext.post(auditLogsSearchUrl, {
+                headers: (0, mcpHelpers_1.buildMcpHeaders)(authToken, mcpSessionId),
+                data: {
+                    filter: {
+                        processInstanceKey: pik,
+                        operationType: 'CREATE',
+                    },
+                    page: { limit: 10 },
+                },
+            });
+            await (0, mcpHelpers_1.assertResponseStatus)(res, 200);
+            const json = (await res.json());
+            const entry = json.items.find((i) => i.entityType === 'PROCESS_INSTANCE');
+            (0, test_1.expect)(entry, `Expected a PROCESS_INSTANCE CREATE audit entry for pik ${pik}`).toBeDefined();
+            (0, test_1.expect)(entry.inboundChannelType).toBe('MCP');
+        }).toPass(constants_1.auditLogAssertionOptions);
+    });
+    (0, _8_10_1.test)('SC-AUD-02 — MCP audit entry captures the raw tool name in inboundChannelToolName', async () => {
+        const apiContext = await (0, apiHelpers_1.getApiRequestContext)();
+        const callBody = await (0, mcpHelpers_1.callTool)(apiContext, mcpProcessesUrl, authToken, mcpSessionId, compositeToolName, {});
+        (0, test_1.expect)(callBody.result).toBeDefined();
+        (0, test_1.expect)(callBody.result.isError).not.toBe(true);
+        const pik = (0, mcpHelpers_1.extractProcessInstanceKey)(callBody.result.content[0]?.text ?? '');
+        (0, test_1.expect)(pik).not.toBeNull();
+        await (0, test_1.expect)(async () => {
+            const res = await apiContext.post(auditLogsSearchUrl, {
+                headers: (0, mcpHelpers_1.buildMcpHeaders)(authToken, mcpSessionId),
+                data: {
+                    filter: {
+                        processInstanceKey: pik,
+                        operationType: 'CREATE',
+                    },
+                    page: { limit: 10 },
+                },
+            });
+            await (0, mcpHelpers_1.assertResponseStatus)(res, 200);
+            const json = (await res.json());
+            const entry = json.items.find((i) => i.entityType === 'PROCESS_INSTANCE');
+            (0, test_1.expect)(entry, `Expected a PROCESS_INSTANCE CREATE audit entry for pik ${pik}`).toBeDefined();
+            // Raw annotation value, not the composite tools/list name.
+            (0, test_1.expect)(entry.inboundChannelToolName).toBe(TOOL_NAME_RAW);
+            (0, test_1.expect)(entry.inboundChannelType).toBe('MCP');
+        }).toPass(constants_1.auditLogAssertionOptions);
+    });
+    (0, _8_10_1.test)('SC-AUD-03 — REST-triggered start is distinguishable from MCP (inboundChannelType and tool name both null)', async () => {
+        const apiContext = await (0, apiHelpers_1.getApiRequestContext)();
+        // NONE-start BPMN started via REST — bypasses MCP entirely.
+        const restPik = await (0, apiHelpers_1.createProcessInstance)(restProcessDefinitionKey, authToken, 'saas', 'agentic_cluster');
+        (0, test_1.expect)(restPik).toBeTruthy();
+        await (0, test_1.expect)(async () => {
+            const res = await apiContext.post(auditLogsSearchUrl, {
+                headers: (0, mcpHelpers_1.buildMcpHeaders)(authToken, mcpSessionId),
+                data: {
+                    filter: {
+                        processInstanceKey: restPik,
+                        operationType: 'CREATE',
+                    },
+                    page: { limit: 10 },
+                },
+            });
+            await (0, mcpHelpers_1.assertResponseStatus)(res, 200);
+            const json = (await res.json());
+            const entry = json.items.find((i) => i.entityType === 'PROCESS_INSTANCE');
+            (0, test_1.expect)(entry, `Expected a PROCESS_INSTANCE CREATE audit entry for REST pik ${restPik}`).toBeDefined();
+            // REST-triggered entries have both fields null (verified on 8.10-SNAPSHOT).
+            (0, test_1.expect)(entry.inboundChannelType).toBeNull();
+            (0, test_1.expect)(entry.inboundChannelToolName).toBeNull();
+        }).toPass(constants_1.auditLogAssertionOptions);
+    });
+});

package/dist/tests/8.10/test-setup.spec.js

@@ -47,7 +47,7 @@ _8_10_1.test.describe('Cluster Setup Tests', () => {
             await clusterSecretsPage.createSetOfSecrets(clusterName, connectorSecrets_1.bedrockCodeInterpreterSecretsValues);
         }
     });
-    (0, _8_10_1.test)('Create Agentic Orchestration Cluster', async ({ page, loginPage, homePage, clusterPage, clusterDetailsPage, clusterSecretsPage, }, testInfo) => {
+    (0, _8_10_1.test)('Create Agentic Orchestration Cluster', async ({ page, loginPage, homePage, clusterPage, clusterDetailsPage, clusterSecretsPage, auditLogPage, }, testInfo) => {
         _8_10_1.test.skip(process.env.IS_PROD === 'true', 'Skipping test because not required on PROD test org');
         _8_10_1.test.skip(process.env.IS_AG === 'true', 'Skipping test because not required when IS_AG is true');
         _8_10_1.test.slow();
@@ -60,6 +60,8 @@ _8_10_1.test.describe('Cluster Setup Tests', () => {
         await clusterPage.assertClusterHealthyStatusWithRetry(clusterName, 300000, 1500000);
         await clusterPage.clickClusterLink(clusterName);
         await clusterDetailsPage.assertComponentsHealth();
+        await auditLogPage.clickAuditLogTab();
+        await auditLogPage.enableClientOperationLogging();
         await clusterDetailsPage.clickSettingsTab();
         await clusterDetailsPage.checkMcpSupportToggle();
         await homePage.clickClusters();

package/dist/tests/SM-8.10/migration-path-user-flows.spec.js

@@ -111,30 +111,30 @@ if (process.env.IS_MIGRATION === 'true') {
         (0, SM_8_10_1.test)('Assert Users Persist in Management Identity With Correct Roles @tasklistV2', async ({ managementIdentityPage, identityUsersPage, }) => {
             await managementIdentityPage.clickUsersLink();
             await identityUsersPage.assertUserIsAssignedCorrectRole('demo', [
-                'Console',
                 'Default user role',
                 'ManagementIdentity',
                 'Optimize',
                 'Orchestration',
                 'Web Modeler',
+                'Web Modeler Admin',
             ]);
             await managementIdentityPage.clickUsersLink();
             await identityUsersPage.assertUserIsAssignedCorrectRole('bart', [
-                'Console',
                 'Default user role',
                 'ManagementIdentity',
                 'Optimize',
                 'Orchestration',
                 'Web Modeler',
+                'Web Modeler Admin',
             ]);
             await managementIdentityPage.clickUsersLink();
             await identityUsersPage.assertUserIsAssignedCorrectRole('lisa', [
-                'Console',
                 'Default user role',
                 'ManagementIdentity',
                 'Optimize',
                 'Orchestration',
                 'Web Modeler',
+                'Web Modeler Admin',
             ]);
         });
         (0, SM_8_10_1.test)('Assert Demo User Can Deploy Processes', async ({ page, modelerHomePage, navigationPage, modelerCreatePage, operateHomePage, operateProcessesPage, operateProcessInstancePage, taskDetailsPage, taskPanelPage, }) => {

package/dist/utils/constants.d.ts

@@ -10,6 +10,10 @@ export declare const deletionAssertionOptions: {
     intervals: number[];
     timeout: number;
 };
+export declare const auditLogAssertionOptions: {
+    intervals: number[];
+    timeout: number;
+};
 export declare const TIMEOUT: {
     short: number;
     medium: number;

package/dist/utils/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TIMEOUT = exports.deletionAssertionOptions = exports.defaultAssertionOptions = exports._3_MINUTES_IN_MS = exports._1_MINUTE_IN_MS = exports._1_SECOND_IN_MS = exports._100_MS = void 0;
+exports.TIMEOUT = exports.auditLogAssertionOptions = exports.deletionAssertionOptions = exports.defaultAssertionOptions = exports._3_MINUTES_IN_MS = exports._1_MINUTE_IN_MS = exports._1_SECOND_IN_MS = exports._100_MS = void 0;
 exports._100_MS = 100;
 exports._1_SECOND_IN_MS = 1000;
 exports._1_MINUTE_IN_MS = 60 * 1000;
@@ -14,6 +14,12 @@ exports.deletionAssertionOptions = {
     intervals: [5000, 10000, 15000, 30000],
     timeout: 60000,
 };
+// Longest options for audit-log assertions: entries land in secondary storage
+// only after the audit config propagates to the exporters.
+exports.auditLogAssertionOptions = {
+    intervals: [5000, 10000, 15000, 15000],
+    timeout: 90000,
+};
 exports.TIMEOUT = {
     short: 15000,
     medium: 30000,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.755",
+  "version": "0.0.757",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",