[Bug]: Replace Local E2E public login sites with repo-owned HTML fixtures

[MohabMohie]

Related to #5204. Child of the nightly Local E2E tracker. Do not close #5204 from this ticket; #5204 auto-closes when Local E2E Tests succeeds.

✅ Pre-submission Checklist

• I have searched existing issues; no open ticket asks to replace the blocked public login sites with a repo-owned local HTML fixture.
• This is not a configuration mistake. Nightly MacOSX_Safari_Local failed with a real locator miss after the remote page did not present the expected login form.
• Observed on current main (run 32208082103).

🐛 Describe the Bug

Local E2E GUI tests hit public websites. Those hosts rate-limit or block CI after too many requests. The nightly then fails on a missing element even though SHAFT's action code is fine.

Owner investigation of #5204: the target site is blocking us. Switch those tests to local HTML so the suite stays deterministic.

Confirmed evidence from MacOSX_Safari_Local on that run:

• 1427 tests, 1 broken.
• testPackage.locator.SmartLocatorsTests.testSmartLocators2
• Root cause recorded as NoSuchElementException: Cannot locate an element using Smart Locator: "Username"
• That test navigates to https://practicetestautomation.com/practice-test-login/ then types Username / Password and clicks Submit.

The same class already mixes remote sites (saucedemo.com, selenium.dev, moatazeldebsy.github.io) and one data:text/html fixture (testSmartLocators7). Continuity must not depend on a third-party host answering 200 with a login form.

🔁 Steps to Reproduce

1. Open Local E2E Tests run 32208082103, job MacOSX_Safari_Local.
2. Read Allure extract: SmartLocatorsTests.testSmartLocators2 broken on Smart Locator "Username".
3. Read shaft-engine/src/test/java/testPackage/locator/SmartLocatorsTests.java — testSmartLocators2 uses https://practicetestautomation.com/practice-test-login/.
4. Repeat a burst of that test against the live site (or wait for the next nightly). When the host blocks or serves a challenge page, "Username" is gone and the test breaks.
5. See error: Cannot locate an element using Smart Locator: "Username".

✅ Expected Behavior

Local E2E tests that only need a login form (or similar static markup) load a repo-owned HTML fixture. No public website is required for those cases. The same SHAFT actions still run: navigate, type Username, type Password, click Submit. Nightly MacOSX_Safari_Local does not fail because a third party blocked us.

❌ Actual Behavior

testSmartLocators2 depends on practicetestautomation.com. When that host blocks or changes, Allure records a broken Smart Locator "Username" and the nightly tracker #5204 stays open. Console/Allure do not distinguish "engine bug" from "remote site refused us."

💻 Minimal Reproducible Code

public void testSmartLocators2() {
    driver.get().browser().navigateToURL("https://practicetestautomation.com/practice-test-login/")
            .and().element().type("Username", "student")
            .and().type("Password", "Password123")
            .and().click("Submit");
}

🌍 Environment

Field	Value
SHAFT_ENGINE version	main at the #5204 nightly (f748d770dd era)
Last working SHAFT_ENGINE version	Intermittent; depends on the remote host
Java version	25.0.4 (nightly runner)
Testing framework	TestNG
Operating System	macOS 26.5.2 aarch64 (MacOSX_Safari_Local)
Target platform	Web
Browser & version	Safari via safaridriver
Execution environment	GitHub Actions scheduled Local E2E Tests

📋 Console Logs

Nightly job: https://github.com/ShaftHQ/SHAFT_ENGINE/actions/runs/32208082103/job/95935088978

Allure extract line: broken testPackage.locator.SmartLocatorsTests.testSmartLocators2 — Smart Locator "Username".

User Scenarios & Testing

User Story 1 - Local login fixture replaces the blocked host (Priority: P1)

Independent Test: Run SmartLocatorsTests.testSmartLocators2 offline or with the public host firewalled. It still finds Username / Password / Submit.

Acceptance Scenarios:

1. Given a repo-owned login HTML fixture with accessible name or label text Username, Password, and Submit, When testSmartLocators2 navigates to that fixture, Then type/click succeed without contacting practicetestautomation.com.
2. Given the same fixture, When Local E2E runs on Safari/Chrome/Edge, Then this test is not broken solely because a public host rate-limited CI.

User Story 2 - Sweep other public-only login/demo URLs in Local E2E (Priority: P1)

Independent Test: Inventory GUI tests in the Local E2E scope that navigate to third-party hosts only to exercise locators/actions.

Acceptance Scenarios:

1. Given SmartLocatorsTests and other Local E2E classes that only need static markup (saucedemo v1 login, the-internet.herokuapp.com pages, selenium.dev/selenium/web/login.html when used only as a form), When the sweep lands, Then each such test has a local file:, data:, or served-from-repo HTML equivalent and no longer requires that host for green.
2. Given a test that truly needs a live network (authenticated cloud, paid third-party API), When the sweep classifies it, Then it stays tagged out of Local E2E rather than silently depending on a blockable demo site.

Edge Cases

• Do not weaken or delete testSmartLocators2 to hide the nightly red. Change the target document, not the assertion that Username exists.
• Keep Smart Locator text identical (Username, Password, Submit) so the test still proves the locator engine, not a new CSS id shortcut.
• testSmartLocators7 already uses data:text/html. Prefer one shared fixture file over more inline data URIs if several tests need the same form.
• Do not replace BrowserStack / cloud E2E targets. This ticket is Local E2E continuity only.
• Do not treat a 200 challenge/captcha page as success; the fixture must actually contain the labeled controls.

Functional Requirements

• FR-001: Add a repo-owned HTML login (and any other static pages the sweep needs) under test resources, served as file: or an equivalent local URL SHAFT already supports.
• FR-002: Point SmartLocatorsTests.testSmartLocators2 at that fixture. Keep the Username / Password / Submit action sequence.
• FR-003: Sweep Local E2E GUI tests that use public demo hosts only as markup sources; migrate those that do not need the live internet.
• FR-004: Keep taxonomy labels valid (one primary, one lifecycle, at least one subsystem/module).

Success Criteria

• SC-001: SmartLocatorsTests.testSmartLocators2 passes with the public login host unreachable.
• SC-002: A documented inventory lists each migrated Local E2E URL and the tests left on the live internet, with a reason.
• SC-003: Existing Smart Locator coverage is preserved, not deleted to go green.

Assumptions

• Owner root cause for the Nightly failure: Local E2E Tests #5204 Safari break is remote blocking / an incomplete login page, not a Smart Locator regression.
• https://www.selenium.dev/selenium/web/login.html may stay if it is stable; still inventory it. The required migrate is practicetestautomation.com.

Out of scope

• Fixing Allure missing steps (sibling ticket).
• Fixing the offline trace HTML viewer (sibling ticket).
• Changing Smart Locator matching algorithms.
• Closing Nightly failure: Local E2E Tests #5204 from this ticket's PR. Nightly success closes Nightly failure: Local E2E Tests #5204.

📝 Additional Context

Sibling of the Allure action-step ticket and the trace-viewer solidification ticket, both filed from the same #5204 investigation.

[MohabMohie]

Plan (orchestrator, 2026-08-19)

Parent tracker: #5212. Do not close #5204 from this PR.

Grounding

Check	Record
Issue state	OPEN
Closing PRs	none
Live-file contradiction	Confirmed: shaft-engine/src/test/java/testPackage/locator/SmartLocatorsTests.java:27 still navigates to https://practicetestautomation.com/practice-test-login/

Chosen approach

Reuse testPackage.TestPageServer + a new HTML file under shaft-engine/src/test/resources/testDataFiles/. Keep Smart Locator strings Username / Password / Submit. Reject extra inline data: URIs (class already has one in testSmartLocators7; ticket prefers one shared fixture).

Rejected steelman: keep public URLs and add retry/skip. That hides the nightly host block instead of removing the dependency.

Files

• shaft-engine/src/test/resources/testDataFiles/ — new login (and any other static pages the Local E2E sweep needs)
• shaft-engine/src/test/java/testPackage/locator/SmartLocatorsTests.java — required migrate of testSmartLocators2; migrate siblings that only need static markup
• Other Local E2E GUI tests that use public demo hosts only as markup (inventory required)
• Precedent: TestPageServer.url("locatorBuilderFixture.html") in LocatorBuilderTest.java

Out of scope

• Allure step-per-action ([Bug]: Allure must record one step per SHAFT action including navigate #5208)
• Trace HTML viewer ([Bug]: Offline trace report HTML shows no archive data and ignores clicks #5209)
• Smart Locator matching algorithms
• Closing Nightly failure: Local E2E Tests #5204
• BrowserStack / cloud E2E targets

RED / proof

1. Inventory check that fails while practicetestautomation.com remains in Local E2E GUI tests.
2. Focused GUI: SmartLocatorsTests.testSmartLocators2 against the local fixture.

Recommended balanced command (PowerShell, quote properties):

mvn -pl shaft-engine "-Dtest=testPackage.locator.SmartLocatorsTests" "-Dallure.automaticallyOpen=false" test

Plus any other tests whose URLs this PR migrates.

Stores

• Memory: used. decision.unreproducible-e2e-ci-blind-fix-and-close is adjacent, not controlling — this failure is reproduced (remote host missing Username).
• MemPalace: used. Hits were LocalApiServer / LocalApiTestServer, not GUI HTML. Live precedent is TestPageServer.
• Graphify / knowledge_stores: used. No useful SmartLocators hit. Live file settled it.

Dispatching one implementer on a fresh ChaosEngine/* worktree. Writer stops when the PR exists.

[MohabMohie]

Implementer checkpoint: PR #5215 (head 35f2fefc99). closingIssuesReferences is only #5207. Writer stops here.