test: add tests for api read-write scenario and expand parent ui

Signed-off-by: mrrajan <86094767+mrrajan@users.noreply.github.com.>

Author: mrrajan

e2e/tests/api/features/sbom-groups.ts

@@ -748,6 +748,34 @@ test.describe("SBOM Group assignments", () => {
     await updateAssignments(axios, sbomId, []);
   });
 
+  test("Append assignment preserves existing groups via read-merge-write", async ({
+    axios,
+  }) => {
+    const nameA = `api-test-append-a-${Date.now()}`;
+    const nameB = `api-test-append-b-${Date.now()}`;
+    const { id: idA } = await createGroup(axios, nameA);
+    const { id: idB } = await createGroup(axios, nameB);
+    createdGroupIds.push(idA, idB);
+
+    const sbomId = await findFirstSbomId(axios);
+
+    // Assign to group A
+    await updateAssignments(axios, sbomId, [idA]);
+    const before = await readAssignments(axios, sbomId);
+    expect(before.groupIds).toContain(idA);
+
+    // Read current, merge with group B, write back
+    const merged = [...before.groupIds, idB];
+    await updateAssignments(axios, sbomId, merged, before.etag);
+
+    const after = await readAssignments(axios, sbomId);
+    expect(after.groupIds).toContain(idA);
+    expect(after.groupIds).toContain(idB);
+    expect(after.groupIds).toHaveLength(2);
+
+    await updateAssignments(axios, sbomId, []);
+  });
+
   test("Clear assignments with empty array", async ({ axios }) => {
     const name = `api-test-clear-${Date.now()}`;
     const { id: groupId } = await createGroup(axios, name);

e2e/tests/ui/features/@sbom-groups/sbom-groups.feature

@@ -121,18 +121,17 @@ Feature: SBOM Groups - Manage SBOM groups
     And A group "<groupName>" exists
     When User applies filter "Filter" with value "<groupName>"
     Then The SBOM count is not displayed for group "<groupName>"
-    When User adds SBOMs "<sbom1>" and "<sbom2>" to group "<groupName>"
+    #When User adds SBOMs "<sbom1>" and "<sbom2>" to group "<groupName>"
+    When User adds multiple SBOMs to the group "<groupName>"
     Then Success notification "2" is displayed
     When User navigates to SBOM Groups page
     And User applies filter "Filter" with value "<groupName>"
     Then The SBOM count for group "<groupName>" shows "2 SBOMs"
     When User clicks on group "<groupName>"
-    Then The SBOM "<sbom1>" is visible in the group member list
-    And The SBOM "<sbom2>" is visible in the group member list
-
+    Then The Selected SBOMs are visible in the group member list
     Examples:
-      | groupName        | sbom1  | sbom2     |
-      | Multi SBOM Group | liboqs | claude    |
+      | groupName        |
+      | Multi SBOM Group |
 
   # Product label filtering
   Scenario: Product label badge appears for product groups
@@ -160,6 +159,30 @@ Feature: SBOM Groups - Manage SBOM groups
     When User collapses the tree node for "Tree Parent"
     Then The child group "Tree Child" is not visible
 
+  # ─────────────────────────────────────────────────────────────────
+  # Filter auto-expands parent when child matches
+  # ─────────────────────────────────────────────────────────────────
+
+  Scenario: Filter matching child auto-expands parent to show matching child
+    Given User navigates to SBOM Groups page
+    And A parent group "AutoExpand Parent" with child group "AutoExpand Child" exists
+    When User applies filter "Filter" with value "AutoExpand Child"
+    Then The SBOM Groups table shows filtered results containing "AutoExpand Parent"
+    And The child group "AutoExpand Child" is visible under "AutoExpand Parent"
+
+  # ─────────────────────────────────────────────────────────────────
+  # Filter matching only parent — children not visible after expand
+  # Bug: TC-5060 — filtered tree shows non-matching children when parent is expanded
+  # ─────────────────────────────────────────────────────────────────
+
+  # Scenario: Filter matching only parent shows no children when expanded
+  #   Given User navigates to SBOM Groups page
+  #   And A parent group "OnlyParent Match" with child group "Hidden Offspring" exists
+  #   When User applies filter "Filter" with value "OnlyParent Match"
+  #   Then The SBOM Groups table shows filtered results containing "OnlyParent Match"
+  #   When User expands the tree node for "OnlyParent Match"
+  #   Then The child group "Hidden Offspring" is not visible
+
   # Invalid group ID handling
   Scenario: Navigate to invalid group ID shows error
     When User navigates to group details with invalid ID

e2e/tests/ui/features/@sbom-groups/sbom-groups.step.ts

@@ -259,6 +259,17 @@ Then(
   },
 );
 
+Then(
+  "The Selected SBOMs are visible in the group member list",
+  async ({ page, selectedSbomNames }) => {
+    const detailPage = await SbomGroupDetailPage.fromCurrentPage(page);
+    const table = await detailPage.getMemberSbomsTable();
+    for (const sbomName of selectedSbomNames) {
+      await expect(table).toHaveColumnWithValue("Name", sbomName);
+    }
+  },
+);
+
 When("User clears all filters on SBOM List page", async ({ page }) => {
   const listPage = await SbomListPage.fromCurrentPage(page);
   const toolbar = await listPage.getToolbar();
@@ -291,6 +302,28 @@ When(
   },
 );
 
+When(
+  "User adds multiple SBOMs to the group {string}",
+  async ({ page, selectedSbomNames }, groupName: string) => {
+    const listPage = await SbomListPage.build(page);
+    const table = await listPage.getTable();
+    const row1 = (await table.getRows()).nth(1);
+    const row2 = (await table.getRows()).nth(2);
+
+    const name1 = await row1.locator('td[data-label="Name"]').textContent();
+    const name2 = await row2.locator('td[data-label="Name"]').textContent();
+    if (name1) selectedSbomNames.push(name1.trim());
+    if (name2) selectedSbomNames.push(name2.trim());
+
+    await row1.getByRole("checkbox").click();
+    await row2.getByRole("checkbox").click();
+    await page.getByRole("button", { name: "Add to group" }).click();
+    const modal = await AddToGroupModal.build(page);
+    await modal.selectGroup(groupName);
+    await modal.submit();
+  },
+);
+
 // Filtering
 When("User clears all filters on SBOM Groups page", async ({ page }) => {
   const listPage = await SbomGroupListPage.fromCurrentPage(page);
@@ -397,6 +430,15 @@ Then(
   },
 );
 
+Then(
+  "The group {string} is not expandable",
+  async ({ page }, groupName: string) => {
+    const listPage = await SbomGroupListPage.fromCurrentPage(page);
+    const isExpandable = await listPage.isGroupExpandable(groupName);
+    expect(isExpandable).toBe(false);
+  },
+);
+
 // Invalid group ID handling
 When("User navigates to group details with invalid ID", async ({ page }) => {
   await page.goto("/sbom-groups/invalid-group-id-12345");

e2e/tests/ui/fixtures.ts

@@ -4,7 +4,12 @@ import { test as base } from "playwright-bdd";
 
 const istanbulCLIOutput = join(__dirname, "../../.nyc_output");
 
-export const test = base.extend({
+export const test = base.extend<{ selectedSbomNames: string[] }>({
+  // eslint-disable-next-line no-empty-pattern
+  selectedSbomNames: async ({}, use) => {
+    // eslint-disable-next-line @eslint-react/rules-of-hooks
+    await use([]);
+  },
   context: async ({ context }, use, testInfo) => {
     await context.addInitScript(() =>
       window.addEventListener("beforeunload", () =>

e2e/tests/ui/pages/sbom-group-list/SbomGroupListPage.ts

@@ -107,6 +107,12 @@ export class SbomGroupListPage {
     await row.getByRole("button", { name: /collapse row/i }).click();
   }
 
+  async isGroupExpandable(groupName: string): Promise<boolean> {
+    const row = this.getGroupRow(groupName);
+    const expandButton = row.getByRole("button", { name: /expand row/i });
+    return (await expandButton.count()) > 0;
+  }
+
   async clickGroupLink(groupName: string) {
     const link = this.getTreegrid().getByRole("link", {
       name: groupName,