Files
onyx/web/tests/e2e
Wenxi f8c224c145 feat(craft): integrate personal and workspace plugin permissions (#16185)
## Description

Let users manage external-app and MCP action permissions in the Plugins
UI. Scheduled tasks use the same controls and keep independent app
selections and policies. Workspace-disabled actions remain locked.

External-app admin tabs follow the MCP flow: Configuration,
Authentication, and Tools, followed by Skills where supported.
Configuration contains the user-management switch. Authentication
contains credentials and custom headers. Tools contains individual
action policies. Bulk changes use a dropdown; each action uses
Auto-approve, Ask, and Disabled buttons.

Plugin modals fit their content up to 80% of the viewport. Scrollbars do
not shift the tabs or move content off center. MCP descriptions appear
below tool names. Save requires changes, and closing an edited form asks
for confirmation. Each opening loads fresh settings; refreshes preserve
the open draft. Policy links open the matching app's permissions tab.

Remove the superseded standalone policy editors. Keep personally
disabled MCP servers in permission catalogs while preserving runtime
restrictions.

## How Has This Been Tested?

- This PR's intermediate tree passed 233 frontend tests across 14 suites
after rebasing onto main.
- Commit hooks passed, including TypeScript, formatting, lint, and
feature-map integrity.
- Earlier local Kind/browser checks covered external-app and MCP saves,
workspace restrictions, bulk edits, reset, dirty-form dismissal, failed
saves, retries, desktop/mobile sizing, and independent browser-tab
saves.

## Additional Options

- [ ] [Optional] Please cherry-pick this PR to the latest release
version.
- [x] [Optional] Override Linear Check


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Manage approval settings for connected Craft-compatible apps and MCP
servers from plugin details. Search actions, apply bulk Auto-approve,
Ask, or Disabled choices, and reset to workspace defaults.
* Task editors offer the same per-action and bulk controls, with
independent task settings and confirmation before discarding unsaved
changes.
* App configuration lets administrators control whether users can manage
approval settings. Editor tabs separate Configuration, Authentication,
Tools, and Skills.
  * Connected app setup cards link directly to approval settings.
* **Improvements**
* MCP tool descriptions are visible inline, and plugin editors use
larger, scrollable modals.
* Workspace-disabled actions remain visible but locked with an
explanation.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-10-19 18:44:14 +00:00
..

Playwright E2E Test Rules

Hard rules for tests under web/tests/e2e/. Read before adding or modifying a spec.

For the broader Onyx testing strategy and where Playwright fits among unit / external-dependency / integration tests, see backend/AGENTS.md ("Testing Strategy") and backend/tests/README.md. For Jest + React Testing Library guidance for component tests, see web/tests/README.md.

1. Use the Page Object Model

All locators and interactions for a UI surface live on a Page Object class — never inline in a spec.

  • One class per surface (e.g. ChatPage, InputBar, AdminUsersPage).
  • Page objects live in tests/e2e/pages/ — one file per class, named after the surface. Keep spec-only helpers (flow glue, assertion utilities) out of pages/; those stay beside their specs or in tests/e2e/utils/.
  • Composite pages expose nested objects: chatPage.inputBar.someMethod().
  • Specs call methods on the page object. They do not construct locators.
  • When extending coverage for an area that has no page object, create one before writing the spec.
// ✅ Good — spec calls into the POM
await chatPage.goto();
await chatPage.inputBar.type("hello");
await chatPage.inputBar.send();
await chatPage.expectHumanMessage("hello");

// ❌ Bad — raw locators in the spec
await page.goto("/app");
await page.locator('[contenteditable="true"]').fill("hello");
await page.keyboard.press("Enter");
await expect(page.locator(".message")).toContainText("hello");

Why: specs that read like a description of user behavior are easier to scan, review, and refactor. Locator churn changes one POM method, not every spec that touched the surface.

Locator priority — when defining locators on a page object, prefer in this order:

  1. data-testid / aria-label (getByTestId, getByLabel) — preferred for Onyx components.
  2. Role-based (getByRole) — standard HTML elements.
  3. Text / label (getByText, getByLabel) — visible text content.
  4. CSS selectors (locator(...)) — last resort, only when nothing above works.

Never reach for complex CSS/XPath when a built-in locator fits.

2. Use auto-retrying matchers — never getAttribute / evaluate for async state

Playwright's expect(locator).* matchers retry until the assertion passes or the timeout expires. locator.getAttribute() and page.evaluate() are single snapshots — they read the DOM exactly once and fail immediately on a stale read.

If the value can be set by a React state update, an effect, a microtask, or anything else asynchronous, snapshot reads will flake.

Asserting on Use Don't use
Attribute expect(locator).toHaveAttribute(name, value) locator.getAttribute(name) then expect(...)
Class expect(locator).toHaveClass(/regex/) / .not.toHaveClass(...) page.evaluate(el => el.classList.contains(...))
Text expect(locator).toHaveText(value) / toContainText(value) locator.textContent() then expect(...)
Count expect(locator).toHaveCount(n) locator.count() then expect(...)
Visibility expect(locator).toBeVisible() / toBeHidden() manual isVisible() checks
Value expect(locator).toHaveValue(value) locator.inputValue() then expect(...)
// ✅ Good — retries until the attribute settles
await expect(tile).toHaveAttribute("data-text", "modified text");

// ❌ Bad — one-shot read, flakes when the attribute updates after a React render
const text = await tile.getAttribute("data-text");
expect(text).toBe("modified text");

// ✅ Good — retries until the class settles
await expect(tile.first()).toHaveClass(/rich-input-tile-selected/);

// ❌ Bad — one-shot DOM snapshot
const selected = await page.evaluate(
  () => !!document.querySelector(".rich-input-tile-selected")
);
expect(selected).toBe(true);

getAttribute / evaluate / textContent / count are still appropriate when you need the value for control flow inside the spec (e.g. branching on it, logging it). They are not appropriate as the basis of an assertion on async state.

3. The LLM is the scripted mock LLM server

Every LLM call of the Playwright deployment goes to the scripted mock LLM server (backend/tests/integration/mock_services/mock_llm_server/server.py). Global setup registers its default script and makes the public openai_compatible provider "PW Mock LLM" the default. The script's default reply answers every request that no conversation serves with This is a mock LLM response.

To script a turn, use tests/e2e/utils/mockLlm.ts. Add a conversation to the default script that matches a nonce, and put the nonce in the chat message. Do not change the default provider to script a spec: all workers share it.

const nonce = mockLlmNonce();
await addMockLlmConversation({
  name: nonce,
  conditions: { prompt_contains: [nonce] },
  replies: [
    { tool_calls: [{ id: `call-${nonce}`, name: "tool_0", arguments: {} }] },
    { text: "Done.", conditions: { has_results_for: [`call-${nonce}`] } },
  ],
});
await sendMessage(page, `Run tool_0. ${nonce}`);

A tool-free request (no tools and no tool results), such as session naming, gets the default reply unless a conversation or reply conditions set has_tools: false. The web app names a new chat after the first answer without waiting for it, so its naming request can overlap the next turn. Set has_tools: false only on a reply that must answer a tool-free chat turn.

To run the specs locally, start the server with the rest of the stack:

cd deployment/docker_compose
docker compose -f docker-compose.yml -f docker-compose.dev.yml -f docker-compose.mock-llm-test.yml up -d

You can also run it on the host with cd backend && MOCK_LLM_SERVER_PORT=8095 python -m tests.integration.mock_services.mock_llm_server.server. The runner reaches the server at MOCK_LLM_SERVER_URL (default http://localhost:8095), and the backend reaches it at MOCK_LLM_BACKEND_URL (default http://mock_llm_server:8095). When the backend runs on the host, set MOCK_LLM_BACKEND_URL=http://localhost:8095. Global setup replaces the default LLM of the target deployment.