@keber/qa-framework 1.10.0 → 1.11.3

package/scripts/init.js

@@ -84,6 +84,7 @@ const topLevelFolders = [
   '04-test-data',
   '05-test-execution',
   '06-defects/open',
+  '06-defects/disputed',
   '06-defects/resolved',
   '07-automation/e2e/tests',
   '07-automation/e2e/tests/helpers/debug',
@@ -98,6 +99,18 @@ for (const folder of topLevelFolders) {
   console.log(`  [created] ${path.relative(cwd, fullPath)}/`);
 }
 
+// --- 06-defects/disputed/README.md ---
+writeIfMissing(path.join(qaRoot, '06-defects', 'disputed', 'README.md'),
+`# 06-defects/disputed/
+
+Use this folder for defects where QA has reproducible evidence but the business or
+development team disputes whether the observed behavior is actually a defect.
+
+A defect stays here while the functional decision is pending. Once the team reaches
+a formal conclusion, move the file to open/ (confirmed defect) or resolved/ (accepted
+behavior or won't fix).
+`);
+
 // --- qa/README.md ---
 const qaReadmeTemplate = path.resolve(__dirname, '..', 'templates', 'qa-readme.md');
 if (fs.existsSync(qaReadmeTemplate)) {
@@ -120,10 +133,17 @@ writeIfMissing(path.join(memoryDir, 'INDEX.md'),
 
 | File | Topic | When to load |
 |---|---|---|
-
-_No memory files yet. Add files to this directory and register them above._
+| \`ci-pipeline-findings.md\` | CI pipeline issues, root causes, applied fixes, failure triage categories | Diagnosing CI failures; reviewing pipeline changes |
+| \`e2e-stabilization-patterns.md\` | Flakiness patterns, crash-recovery techniques, strict-mode conflicts, reference timeouts | Investigating intermittent failures; refactoring fragile specs |
+| \`data-volatility-strategies.md\` | Strategies for handling volatile test data (filter values, row counts, search inputs) | Fixing hardcoded-data failures; choosing an assertion resilience approach |
 `);
 
+// --- qa/memory template files ---
+const memorySrc = path.resolve(__dirname, '..', 'templates', 'memory');
+for (const file of ['ci-pipeline-findings.md', 'e2e-stabilization-patterns.md', 'data-volatility-strategies.md']) {
+  writeIfMissing(path.join(memoryDir, file), fs.readFileSync(path.join(memorySrc, file), 'utf8'));
+}
+
 // --- 03-test-cases README (optional directory marker) ---
 writeIfMissing(path.join(qaRoot, '03-test-cases', 'README.md'),
 `# 03-test-cases/ — Optional Standalone Test Cases
@@ -227,7 +247,7 @@ for (const file of ['playwright.config.ts', 'global-setup.ts', '.env.example', '
 }
 const fixturesDir = path.join(e2eScaffoldDir, 'fixtures');
 fs.mkdirSync(fixturesDir, { recursive: true });
-for (const file of ['auth.ts', 'test-helpers.ts']) {
+for (const file of ['auth.ts', 'test-helpers.ts', 'base.ts']) {
   const dest = path.join(fixturesDir, file);
   if (!fs.existsSync(dest)) {
     fs.copyFileSync(path.join(scaffoldSrc, 'fixtures', file), dest);
@@ -235,9 +255,26 @@ for (const file of ['auth.ts', 'test-helpers.ts']) {
   }
 }
 
-// --- Integration + Load test placeholders ---
-writeIfMissing(path.join(automationDir, 'integration', 'README.md'),
-`# Integration Tests\n\n> Placeholder for API/integration tests (k6, JMeter, Azure Load Testing, etc.).\n> Each tool gets its own subdirectory.\n`);
+// --- Integration scaffold (lives in 07-automation/integration/) ---
+const integrationDir      = path.join(automationDir, 'integration');
+const integrationScaffold = path.resolve(__dirname, '..', 'templates', 'integration-scaffold');
+fs.mkdirSync(integrationDir, { recursive: true });
+for (const file of ['package.json', 'playwright.config.ts', 'global-setup.ts', 'README.md', '.env.example']) {
+  const dest = path.join(integrationDir, file);
+  if (!fs.existsSync(dest)) {
+    fs.copyFileSync(path.join(integrationScaffold, file), dest);
+    console.log(`  [created] ${path.relative(cwd, dest)}`);
+  }
+}
+const integrationTestsDir = path.join(integrationDir, 'tests');
+fs.mkdirSync(integrationTestsDir, { recursive: true });
+const exampleSpec = path.join(integrationTestsDir, 'example.spec.ts');
+if (!fs.existsSync(exampleSpec)) {
+  fs.copyFileSync(path.join(integrationScaffold, 'tests', 'example.spec.ts'), exampleSpec);
+  console.log(`  [created] ${path.relative(cwd, exampleSpec)}`);
+}
+
+// --- Load test placeholder ---
 writeIfMissing(path.join(automationDir, 'load', 'README.md'),
 `# Load Tests\n\n> Placeholder for load and performance tests.\n> Each tool gets its own subdirectory (e.g. k6/, jmeter/).\n`);
 
@@ -272,37 +309,9 @@ if (fs.existsSync(structureGuideSrc)) {
 const githubDir         = path.join(cwd, '.github');
 const copilotInstrPath  = path.join(githubDir, 'instructions', 'qa-framework.instructions.md');
 
-// Detect whether the ado-qa skill is available (installed or already copied)
-const adoQaInstalled = fs.existsSync(path.join(cwd, 'node_modules', '@keber', 'ado-qa'))
-                    || fs.existsSync(path.join(cwd, 'node_modules', 'ado-qa'));
-const adoSkillReady  = fs.existsSync(path.join(cwd, '.github', 'skills', 'ado-qa'));
-const adoAvailable   = adoQaInstalled || adoSkillReady;
-
-const adoSection = adoAvailable
-  ? `## Azure DevOps integration (ado-qa)
-
-The \`ado-qa\` skill is installed. Load it in PowerShell before any ADO operation:
-\`\`\`powershell
-. .github/skills/ado-qa/load.ps1
-\`\`\`
-Refer to \`qa/00-guides/AGENT-INSTRUCTIONS-ADO-INTEGRATION.md\` for the full ADO workflow.
-
-`
-  : `## Azure DevOps integration (not installed)
-
-> ⚠️ **Agent note:** \`ado-qa\` is not installed in this project.
-> To enable Azure DevOps integration (query Work Items, Test Plans, create bugs, etc.) run:
-> \`\`\`bash
-> npm install github:keber/ado-qa
-> \`\`\`
-> This will automatically copy the ADO skills to \`.github/skills/\` via postinstall.
-
-`;
-
 const instrTemplatePath = path.resolve(__dirname, '..', 'templates', 'qa-framework.instructions.md');
 const copilotInstrContent = fs.readFileSync(instrTemplatePath, 'utf8')
-  .replace('{{VERSION}}', config.frameworkVersion ?? '1.0.0')
-  .replace('{{ADO_SECTION}}', adoSection);
+  .replace('{{VERSION}}', config.frameworkVersion ?? '1.0.0');
 writeIfMissing(copilotInstrPath, copilotInstrContent);
 
 // --- AGENT-NEXT-STEPS.md — readable by the agent after install ---
@@ -328,15 +337,21 @@ Edit \`qa/qa-framework.config.json\` and add your project modules under the \`"m
 npm install @keber/ado-qa
 \`\`\`
 
-**Playwright automation:**
+**Playwright E2E automation:**
 \`\`\`bash
 npm install @playwright/test
 cd qa/07-automation/e2e && npm install && npx playwright install chromium
 \`\`\`
 
+**Playwright API/integration automation:**
+\`\`\`bash
+cd qa/07-automation/integration && npm install
+\`\`\`
+
 ### 3. Credentials
-- Copy \`qa/07-automation/e2e/.env.example\` → \`qa/07-automation/e2e/.env\` and fill in credentials
-- Add \`qa/07-automation/e2e/.env\` and \`qa/07-automation/e2e/.auth/\` to \`.gitignore\`
+- Copy \`qa/07-automation/e2e/.env.example\` -> \`qa/07-automation/e2e/.env\` and fill in credentials
+- Copy \`qa/07-automation/integration/.env.example\` -> \`qa/07-automation/integration/.env\` and fill in credentials
+- Add both \`.env\` files and both \`.auth/\` folders to \`.gitignore\`
 `;
 const nextStepsPath = path.join(qaRoot, 'AGENT-NEXT-STEPS.md');
 writeIfMissing(nextStepsPath, nextStepsContent);

package/scripts/upgrade.js

@@ -93,8 +93,7 @@ if (!fs.existsSync(skillsSrc)) {
 const copilotInstrPath = path.join(githubDir, 'instructions', 'qa-framework.instructions.md');
 const instrTemplatePath = path.resolve(__dirname, '..', 'templates', 'qa-framework.instructions.md');
 const copilotContent = fs.readFileSync(instrTemplatePath, 'utf8')
-  .replace('{{VERSION}}', config.frameworkVersion ?? '1.0.0')
-  .replace('{{ADO_SECTION}}', '');
+  .replace('{{VERSION}}', config.frameworkVersion ?? '1.0.0');
 forceWrite(copilotInstrPath, copilotContent);
 
 // ---------------------------------------------------------------------------
@@ -175,6 +174,22 @@ for (const file of scaffoldFiles) {
   }
 }
 
+// 5a.1. Ensure the refreshed fixtures scaffold exists.
+const scaffoldFixturesDir = path.join(e2eDir, 'fixtures');
+const fixtureFiles = ['auth.ts', 'test-helpers.ts', 'base.ts'];
+for (const file of fixtureFiles) {
+  const oldPath = path.join(automationDir, 'fixtures', file);
+  const newPath = path.join(scaffoldFixturesDir, file);
+  if (fs.existsSync(oldPath) && !fs.existsSync(newPath)) {
+    if (!dryRun) {
+      fs.mkdirSync(scaffoldFixturesDir, { recursive: true });
+      fs.renameSync(oldPath, newPath);
+    }
+    updated.push(newPath);
+    console.log(`  [migrated] fixtures/${file} -> e2e/fixtures/${file}`);
+  }
+}
+
 // 5b. fixtures/: 07-automation/fixtures/ -> 07-automation/e2e/fixtures/
 const oldFixturesDir = path.join(automationDir, 'fixtures');
 const newFixturesDir = path.join(e2eDir, 'fixtures');
@@ -211,17 +226,34 @@ if (fs.existsSync(e2eDir)) {
   }
 }
 
-// 5d. Create integration/ and load/ placeholders if missing.
-const integrationReadme = path.join(automationDir, 'integration', 'README.md');
-const loadReadme        = path.join(automationDir, 'load', 'README.md');
+// 5d. Create integration scaffold if missing (uses template; existing files are never overwritten).
+const integrationDir      = path.join(automationDir, 'integration');
+const integrationScaffold = path.resolve(__dirname, '..', 'templates', 'integration-scaffold');
+const integrationReadme   = path.join(integrationDir, 'README.md');
+const loadReadme          = path.join(automationDir, 'load', 'README.md');
 if (!fs.existsSync(integrationReadme)) {
   if (!dryRun) {
-    fs.mkdirSync(path.dirname(integrationReadme), { recursive: true });
-    fs.writeFileSync(integrationReadme,
-      '# Integration Tests\n\n> Placeholder for API/integration tests (k6, JMeter, Azure Load Testing, etc.).\n> Each tool gets its own subdirectory.\n', 'utf8');
+    fs.mkdirSync(integrationDir, { recursive: true });
+    for (const file of ['package.json', 'playwright.config.ts', 'global-setup.ts', 'README.md', '.env.example']) {
+      const dest = path.join(integrationDir, file);
+      if (!fs.existsSync(dest)) {
+        fs.copyFileSync(path.join(integrationScaffold, file), dest);
+        updated.push(dest);
+        console.log(`  [created] ${path.relative(cwd, dest)}`);
+      }
+    }
+    const integrationTestsDir = path.join(integrationDir, 'tests');
+    fs.mkdirSync(integrationTestsDir, { recursive: true });
+    const exampleSpec = path.join(integrationTestsDir, 'example.spec.ts');
+    if (!fs.existsSync(exampleSpec)) {
+      fs.copyFileSync(path.join(integrationScaffold, 'tests', 'example.spec.ts'), exampleSpec);
+      updated.push(exampleSpec);
+      console.log(`  [created] ${path.relative(cwd, exampleSpec)}`);
+    }
+  } else {
+    updated.push(integrationReadme);
+    console.log(`  [created] ${path.relative(cwd, integrationReadme)}`);
   }
-  updated.push(integrationReadme);
-  console.log(`  [created] ${path.relative(cwd, integrationReadme)}`);
 }
 if (!fs.existsSync(loadReadme)) {
   if (!dryRun) {
@@ -346,6 +378,69 @@ if (!fs.existsSync(testCasesReadme)) {
   console.log(`  [created] 03-test-cases/README.md`);
 }
 
+// ---------------------------------------------------------------------------
+// 7. Ensure 06-defects/disputed/ exists (added in v1.11.0)
+//    Safe: only creates if missing. Never touches existing files.
+// ---------------------------------------------------------------------------
+const defectsDir   = path.join(qaRoot, '06-defects');
+const disputedDir  = path.join(defectsDir, 'disputed');
+const disputedReadme = path.join(disputedDir, 'README.md');
+
+if (fs.existsSync(defectsDir) && !fs.existsSync(disputedDir)) {
+  if (!dryRun) {
+    fs.mkdirSync(disputedDir, { recursive: true });
+    fs.writeFileSync(disputedReadme,
+`# 06-defects/disputed/
+
+Use this folder for defects where QA has reproducible evidence but the business or
+development team disputes whether the observed behavior is actually a defect.
+
+A defect stays here while the functional decision is pending. Once the team reaches
+a formal conclusion, move the file to open/ (confirmed defect) or resolved/ (accepted
+behavior or won't fix).
+`, 'utf8');
+  }
+  updated.push(disputedDir);
+  console.log(`  [created] 06-defects/disputed/`);
+  console.log(`  [created] 06-defects/disputed/README.md`);
+} else if (!fs.existsSync(disputedReadme) && fs.existsSync(disputedDir)) {
+  if (!dryRun) {
+    fs.writeFileSync(disputedReadme,
+`# 06-defects/disputed/
+
+Use this folder for defects where QA has reproducible evidence but the business or
+development team disputes whether the observed behavior is actually a defect.
+
+A defect stays here while the functional decision is pending. Once the team reaches
+a formal conclusion, move the file to open/ (confirmed defect) or resolved/ (accepted
+behavior or won't fix).
+`, 'utf8');
+  }
+  updated.push(disputedReadme);
+  console.log(`  [created] 06-defects/disputed/README.md`);
+}
+
+// ---------------------------------------------------------------------------
+// 8. Seed qa/memory/ template files if missing (added in v1.11.0)
+//    Safe: only creates files that do not exist. Never overwrites user content.
+// ---------------------------------------------------------------------------
+const memoryDir = path.join(qaRoot, 'memory');
+if (fs.existsSync(memoryDir)) {
+  const memorySrc = path.resolve(__dirname, '..', 'templates', 'memory');
+  for (const file of ['ci-pipeline-findings.md', 'e2e-stabilization-patterns.md', 'data-volatility-strategies.md']) {
+    const dest = path.join(memoryDir, file);
+    if (!fs.existsSync(dest)) {
+      if (!dryRun) {
+        fs.copyFileSync(path.join(memorySrc, file), dest);
+      }
+      updated.push(dest);
+      console.log(`  [created] memory/${file}`);
+    } else {
+      skipped.push(dest);
+    }
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Summary
 // ---------------------------------------------------------------------------

package/templates/automation-scaffold/.env.example

@@ -1,4 +1,4 @@
-# -----------------------------------------------------------------------
+# -----------------------------------------------------------------------
 # keber/qa-framework — Environment Variables Reference
 # -----------------------------------------------------------------------
 # Copy this file to .env and fill in real values.
@@ -10,6 +10,20 @@
 # -----------------------------------------------------------------------
 QA_BASE_URL=https://your-app.qa.example.com
 
+# -----------------------------------------------------------------------
+# Session and login resilience
+# -----------------------------------------------------------------------
+QA_SESSION_TTL_MS=7200000
+# Optional path to a server-side logout endpoint if the app exposes one.
+# QA_LOGOUT_PATH=/logout
+
+# When parallel user mode is enabled, limit auth to the matching project(s).
+# QA_AUTH_USER=1
+
+# Optional second test user for 2-project parallel execution.
+# QA_USER2_EMAIL=qa-user2@example.com
+# QA_USER2_PASSWORD=CHANGE_ME
+
 # -----------------------------------------------------------------------
 # Login Configuration
 # These selectors allow the framework to work with any login form.
@@ -54,3 +68,8 @@ QA_USER_PASSWORD=CHANGE_ME
 # -----------------------------------------------------------------------
 # CI=true           # Set automatically by most CI systems
 # ADO_SYNC_DISABLED=false   # Set to true to skip ADO reporter in local runs
+
+# -----------------------------------------------------------------------
+# Playwright Service  (optional - only needed for cloud or self-hosted grid)
+# -----------------------------------------------------------------------
+# PLAYWRIGHT_SERVICE_URL=wss://eastus.api.playwright.microsoft.com/accounts/<your-id>/browsers

package/templates/automation-scaffold/fixtures/base.ts

@@ -0,0 +1,108 @@
+/**
+ * fixtures/base.ts
+ *
+ * Playwright test wrapper with TTL-aware session refresh.
+ * Import this file instead of `@playwright/test` when the app uses a
+ * server-side session that may expire during long runs.
+ */
+
+import { test as base, devices } from '@playwright/test';
+import { SESSION_TTL_MS } from '../playwright.config';
+import * as dotenv from 'dotenv';
+import * as fs from 'fs';
+import * as path from 'path';
+
+dotenv.config();
+
+const authTimestamps = new Map<string, number>();
+
+function stateFileForProject(storageState: unknown): string {
+  if (typeof storageState === 'string' && storageState) {
+    return path.resolve(__dirname, '..', storageState);
+  }
+  return path.resolve(__dirname, '../.auth/user-default.json');
+}
+
+function credentialsForState(stateFile: string): { email: string; password: string } {
+  if (stateFile.includes('user-2')) {
+    return {
+      email: process.env.QA_USER2_EMAIL ?? '',
+      password: process.env.QA_USER2_PASSWORD ?? '',
+    };
+  }
+
+  return {
+    email: process.env.QA_USER_EMAIL ?? '',
+    password: process.env.QA_USER_PASSWORD ?? '',
+  };
+}
+
+function lastAuthTime(stateFile: string): number {
+  if (!authTimestamps.has(stateFile)) {
+    try {
+      authTimestamps.set(stateFile, fs.statSync(stateFile).mtimeMs);
+    } catch {
+      authTimestamps.set(stateFile, 0);
+    }
+  }
+  return authTimestamps.get(stateFile) ?? 0;
+}
+
+async function reauth(browser: import('@playwright/test').Browser, stateFile: string): Promise<void> {
+  const { email, password } = credentialsForState(stateFile);
+  const baseURL = process.env.QA_BASE_URL ?? '';
+  const loginPath = process.env.QA_LOGIN_PATH ?? '/login';
+  const emailSelector = process.env.QA_LOGIN_EMAIL_SELECTOR ?? 'input[type="email"]';
+  const passwordSelector = process.env.QA_LOGIN_PASSWORD_SELECTOR ?? 'input[type="password"]';
+  const submitSelector = process.env.QA_LOGIN_SUBMIT_SELECTOR ?? 'button[type="submit"]';
+  const successSelector = process.env.QA_LOGIN_SUCCESS_SELECTOR ?? '.dashboard, .main-content, [data-testid="app-shell"]';
+
+  const context = await browser.newContext({ ...devices['Desktop Chrome'], baseURL });
+  const page = await context.newPage();
+
+  try {
+    await page.goto(loginPath, { waitUntil: 'load', timeout: 60_000 });
+    await page.locator(emailSelector).fill(email);
+    await page.locator(passwordSelector).fill(password);
+    await page.locator(submitSelector).click();
+    await page.waitForSelector(successSelector, { timeout: 30_000 });
+
+    const dir = path.dirname(stateFile);
+    if (!fs.existsSync(dir)) {
+      fs.mkdirSync(dir, { recursive: true });
+    }
+
+    await context.storageState({ path: stateFile });
+    authTimestamps.set(stateFile, Date.now());
+    console.log(`[session-refresh] storageState renewed: ${stateFile}`);
+  } finally {
+    await context.close();
+  }
+}
+
+export const test = base.extend<{ authStatePath: string }>({
+  authStatePath: async ({}, use, testInfo) => {
+    await use(stateFileForProject(testInfo.project.use.storageState));
+  },
+
+  context: async ({ browser }, use, testInfo) => {
+    const stateFile = stateFileForProject(testInfo.project.use.storageState);
+    if (Date.now() - lastAuthTime(stateFile) > SESSION_TTL_MS) {
+      await reauth(browser, stateFile).catch((error) => {
+        console.error(`[session-refresh] reauth failed: ${(error as Error).message}`);
+      });
+    }
+
+    const context = await browser.newContext({
+      ...devices['Desktop Chrome'],
+      storageState: stateFile,
+      baseURL: process.env.QA_BASE_URL,
+    });
+
+    await use(context);
+    await context.close();
+  },
+});
+
+export { expect } from '@playwright/test';
+export type { Page, Browser, BrowserContext } from '@playwright/test';

package/templates/automation-scaffold/global-setup.ts

@@ -30,6 +30,74 @@ import * as fs from 'fs';
 
 dotenv.config();
 
+function resolveVar(param: string | undefined, envKey: string, defaultValue: string): [string, string] {
+  if (param !== undefined) {
+    return [param, 'param'];
+  }
+  if (process.env[envKey] !== undefined) {
+    return [process.env[envKey]!, `env:${envKey}`];
+  }
+  return [defaultValue, 'default'];
+}
+
+function resolveAuthUsers(config: FullConfig): Set<'1' | '2'> {
+  const explicit = process.env.QA_AUTH_USER;
+  if (explicit) {
+    const resolved = new Set<'1' | '2'>();
+    for (const token of explicit.split(',').map((value) => value.trim())) {
+      if (token === '1' || token === '2') {
+        resolved.add(token);
+      }
+    }
+    if (resolved.size) {
+      return resolved;
+    }
+  }
+
+  const fromProjects = new Set<'1' | '2'>();
+  for (const project of config.projects) {
+    const storageState = (project.use as { storageState?: unknown } | undefined)?.storageState;
+    if (typeof storageState === 'string') {
+      if (storageState.includes('user-2')) {
+        fromProjects.add('2');
+      } else if (storageState.includes('user-1')) {
+        fromProjects.add('1');
+      }
+    }
+  }
+
+  if (fromProjects.size) {
+    return fromProjects;
+  }
+
+  return new Set(['1']);
+}
+
+async function dismissOnboardingFlow(page: import('@playwright/test').Page): Promise<void> {
+  // Override this with your app's onboarding dismissal logic.
+  // Use QA_DISMISS_ONBOARDING_LABELS (comma-separated button labels) to enable
+  // without modifying this file. Example: QA_DISMISS_ONBOARDING_LABELS=Skip,Got it
+  const raw = process.env.QA_DISMISS_ONBOARDING_LABELS ?? '';
+  const labels = raw.split(',').map((l: string) => l.trim()).filter(Boolean);
+  if (!labels.length) return;
+
+  for (let round = 0; round < 3; round++) {
+    let dismissed = false;
+    for (const label of labels) {
+      const button = page.getByRole('button', { name: label, exact: true }).first();
+      const visible = await button.isVisible({ timeout: 1_000 }).catch(() => false);
+      if (visible) {
+        await button.click({ timeout: 2_000 }).catch(() => {});
+        await page.waitForTimeout(250);
+        dismissed = true;
+      }
+    }
+    if (!dismissed) {
+      break;
+    }
+  }
+}
+
 /** Perform login and persist storageState to disk. */
 async function loginAs(params: {
   email:             string;
@@ -59,11 +127,33 @@ async function loginAs(params: {
   const page    = await context.newPage();
 
   try {
-    await page.goto(`${baseURL}${loginPath}`, { waitUntil: 'domcontentloaded' });
-    await page.locator(emailSelector).fill(email);
-    await page.locator(passwordSelector).fill(password);
-    await page.locator(submitSelector).click();
-    await page.waitForSelector(successSelector, { timeout: 15_000 });
+    const loginUrl = `${baseURL}${loginPath.startsWith('/') ? loginPath : `/${loginPath}`}`;
+    let signedIn = false;
+
+    for (let attempt = 1; attempt <= 3 && !signedIn; attempt++) {
+      await page.goto(loginUrl, { waitUntil: 'load', timeout: 60_000 });
+      await page.locator(emailSelector).fill(email);
+      await page.locator(passwordSelector).fill(password);
+      await page.locator(submitSelector).click();
+
+      const result = await Promise.race([
+        page.waitForSelector(successSelector, { timeout: 30_000 }).then(() => 'ok' as const),
+        page.locator('text=An unhandled error has occurred.').waitFor({ state: 'visible', timeout: 30_000 }).then(() => 'crash' as const),
+      ]).catch(() => 'timeout' as const);
+
+      if (result === 'ok') {
+        signedIn = true;
+      } else if (result === 'crash') {
+        await page.getByText('Reload').click({ timeout: 5_000 }).catch(() => {});
+        await page.waitForTimeout(2_000);
+      }
+    }
+
+    if (!signedIn) {
+      throw new Error('[qa-framework] Login did not reach the success selector after 3 attempts.');
+    }
+
+    await dismissOnboardingFlow(page);
 
     // Ensure .auth/ directory exists
     const dir = path.dirname(stateFile);
@@ -78,29 +168,29 @@ async function loginAs(params: {
 
 export default async function globalSetup(_config: FullConfig): Promise<void> {
   const baseURL  = process.env.QA_BASE_URL!;
-  const email    = process.env.QA_USER_EMAIL!;
-  const password = process.env.QA_USER_PASSWORD!;
+  const authUsers = resolveAuthUsers(_config);
 
-  // --- Default role login ---
-  await loginAs({
-    email,
-    password,
-    baseURL,
-    stateFile: '.auth/user-default.json',
-  });
-
-  // --- Additional roles (uncomment and adapt as needed) ---
-  // await loginAs({
-  //   email:     process.env.QA_ADMIN_EMAIL!,
-  //   password:  process.env.QA_ADMIN_PASSWORD!,
-  //   baseURL,
-  //   stateFile: '.auth/user-admin.json',
-  // });
-  //
-  // await loginAs({
-  //   email:     process.env.QA_READONLY_EMAIL!,
-  //   password:  process.env.QA_READONLY_PASSWORD!,
-  //   baseURL,
-  //   stateFile: '.auth/user-readonly.json',
-  // });
+  if (authUsers.has('1')) {
+    const [email, emailSource] = resolveVar(process.env.QA_USER_EMAIL, 'QA_USER_EMAIL', 'qa-user@example.com');
+    const [password, passwordSource] = resolveVar(process.env.QA_USER_PASSWORD, 'QA_USER_PASSWORD', 'CHANGE_ME');
+    console.log(`[global-setup] user-1 credentials from ${emailSource} / ${passwordSource}`);
+    await loginAs({
+      email,
+      password,
+      baseURL,
+      stateFile: '.auth/user-default.json',
+    });
+  }
+
+  if (authUsers.has('2') && process.env.QA_USER2_EMAIL && process.env.QA_USER2_PASSWORD) {
+    const [email, emailSource] = resolveVar(process.env.QA_USER2_EMAIL, 'QA_USER2_EMAIL', 'qa-user2@example.com');
+    const [password, passwordSource] = resolveVar(process.env.QA_USER2_PASSWORD, 'QA_USER2_PASSWORD', 'CHANGE_ME');
+    console.log(`[global-setup] user-2 credentials from ${emailSource} / ${passwordSource}`);
+    await loginAs({
+      email,
+      password,
+      baseURL,
+      stateFile: '.auth/user-2.json',
+    });
+  }
 }

package/templates/automation-scaffold/playwright.config.ts

@@ -2,6 +2,8 @@ import { defineConfig, devices } from '@playwright/test';
 import * as dotenv from 'dotenv';
 dotenv.config();
 
+export const SESSION_TTL_MS = Number(process.env.QA_SESSION_TTL_MS ?? 2 * 60 * 60 * 1000);
+
 // -------------------------------------------------------------------
 // Validate required environment variables at config load time
 // -------------------------------------------------------------------
@@ -92,6 +94,28 @@ export default defineConfig({
     },
   ],
 
+  // ------ Parallel 2-user variant ------
+  // Uncomment and replace the single chromium project above to run two parallel
+  // workers with separate credentials. Also set QA_USER2_EMAIL and
+  // QA_USER2_PASSWORD in .env.
+  //
+  // {
+  //   name: 'chromium-user1',
+  //   use: {
+  //     ...devices['Desktop Chrome'],
+  //     storageState: '.auth/user-1.json',
+  //   },
+  //   dependencies: ['setup'],
+  // },
+  // {
+  //   name: 'chromium-user2',
+  //   use: {
+  //     ...devices['Desktop Chrome'],
+  //     storageState: '.auth/user-2.json',
+  //   },
+  //   dependencies: ['setup'],
+  // },
+
   // ------ Output directories ------
   outputDir:         'test-results/',
   snapshotPathTemplate: '{testDir}/__snapshots__/{testFilePath}/{arg}{ext}',

package/templates/defect-report.md

@@ -6,7 +6,7 @@
 | Title | {{Short title (max 80 chars)}} |
 | Severity | Critical / High / Medium / Low |
 | Priority | P0 / P1 / P2 / P3 |
-| Status | Open / In Progress / Resolved / Closed |
+| Status | Open / In Progress / Disputed / Resolved / Closed |
 | Assigned to | {{Developer or "Unassigned"}} |
 | Module | {{Module name}} |
 | Submodule | {{Submodule name}} |