Add NUnit + Reqnroll + Playwright BrowserStack SDK sample

[saraswati-padmawar]

Populates this customer-facing sample repo (previously skeleton: README + CODEOWNERS + Semgrep only) with a working NUnit + Reqnroll + Playwright (C#) sample driven by the BrowserStack .NET SDK.

What's included

• Features/Sample.feature + StepDefinitions/SampleSteps.cs — public bstackdemo.com add-to-cart scenario
• Features/LocalSample.feature + StepDefinitions/LocalSampleSteps.cs — BrowserStack Local scenario (bs-local.com:45454)
• Hooks/PlaywrightHooks.cs — creates IPage per scenario (SDK routes Chromium.LaunchAsync())
• browserstack.yml — credentials, platforms, Local toggle, framework: nunit
• .sln / .csproj (Reqnroll.NUnit + NUnit + Microsoft.Playwright.NUnit + BrowserStack.TestAdapter), .gitignore, sanity-workflow.yml, README

References

• Direct adaptation of browserstack/xunit-reqnroll-playwright-browserstack, swapping the xUnit runner for NUnit (packages + Assert.That assertions + framework: nunit)
• NUnit package set aligned with browserstack/csharp-playwright-browserstack
• Follows the standardized Automate sample template (Confluence: SDK Sample Repo Generator, R1–R4)

Verified on BrowserStack ✅

Built and ran both scenarios end-to-end against BrowserStack Automate (.NET 8, arm64), passing on the configured platforms (Windows 11/chrome, OS X Ventura/playwright-webkit)
Reqnroll generated the NUnit tests from the .feature files. Project: BrowserStack Samples.

Note from verification: the SDK's auto-generated patch references the Microsoft.Playwright.NUnit namespace, so Microsoft.Playwright.NUnit is required in the .csproj (without it dotnet build fails CS0234) — added in this PR.

🤖 Generated with Claude Code

[Rohannagariya1]

LGTM ✅ — solid NUnit/Reqnroll adaptation, both scenarios verified. Approving.

A few low-risk, optional cleanups (non-blocking):

• System.Net.Http 4.3.4 and System.Text.RegularExpressions 4.3.1 in the .csproj are in-box on net8.0 and unnecessary — safe to drop (and they're the kind of legacy refs Semgrep/dependabot tend to flag).
• browserstack.yml is missing testReporting: true (+ the reporting comment block) that both Node siblings include — minor cross-sample consistency.
• The workflow's "completed" step calls checks.create again rather than updating the in-progress run, so you get one stuck in_progress + one completed check. Copied from the xunit reference, so low priority.
• [id="\31 "] works but is inconsistent with the plain [id="1"] attribute selector used in the JS samples — purely cosmetic.

[saraswati-padmawar]

Claude Code PR Review

PR: #2 • Head: 5d67d9f • Reviewers: stack:code-reviewer

Summary

Populates this previously-skeleton sample repo with a working NUnit + Reqnroll + Playwright (C#) sample driven by the BrowserStack .NET SDK — a faithful conversion of the xunit-reqnroll-playwright-browserstack sibling. Verified green on BrowserStack (public + Local scenarios, Windows/chrome + macOS/webkit).

Review Table

Priority	Category	Check	Status	Notes
High	Security	No hardcoded secrets or credentials	Pass	Placeholders only; org secrets in workflow
High	Security	Authentication/authorization checks present	N/A	Sample test project
High	Security	Input validation and sanitization	N/A	—
High	Security	No IDOR — resource ownership validated	N/A	—
High	Security	No SQL injection (parameterized queries)	N/A	No DB
High	Correctness	Logic is correct, handles edge cases	Pass	NUnit Assert.That conversions correct; verified green
High	Correctness	Error handling is explicit, no swallowed exceptions	Pass	Hooks dispose browser/playwright
High	Correctness	No race conditions or concurrency issues	Pass	Per-scenario page via ScenarioContext
Medium	Testing	New code has corresponding tests	Pass	The sample is the test
Medium	Testing	Error paths and edge cases tested	N/A	Sample scope
Medium	Testing	Existing tests still pass (no regressions)	Pass	Fresh repo
Medium	Performance	No N+1 queries or unbounded data fetching	N/A	—
Medium	Performance	Long-running tasks use background jobs	N/A	—
Medium	Quality	Follows existing codebase patterns	Pass	Faithful mirror of the xUnit sibling
Medium	Quality	Changes are focused (single concern)	Pass	—
Low	Quality	Meaningful names, no dead code	Pass	—
Low	Quality	Comments explain why, not what	Pass	—
Low	Quality	No unnecessary dependencies added	Pass	Microsoft.Playwright.NUnit required by SDK patch; see below re legacy pkgs

Findings

No correctness or security issues. Workflow has no injection risk — the untrusted commit_sha input is passed via env: and read as process.env, never interpolated into a run: shell or the github-script body; github-script is pinned to a full SHA; least-privilege permissions.

• File: NunitCsharpReqnrollPlaywrightBrowserstack.Tests/NunitCsharpReqnrollPlaywrightBrowserstack.Tests.csproj:14

• Severity: Low (inherited from the xUnit sibling)

• Reviewer: stack:code-reviewer

• Issue: BrowserStack.TestAdapter 0.*, Microsoft.Playwright *, Microsoft.Playwright.NUnit * use open wildcards → non-reproducible builds; a future Playwright major could break the sample with no code change.

• Suggestion: pin the Playwright packages to a floating-minor (e.g. 1.*) for a customer-facing sample.

• File: NunitCsharpReqnrollPlaywrightBrowserstack.Tests/NunitCsharpReqnrollPlaywrightBrowserstack.Tests.csproj:19

• Severity: Low (inherited)

• Reviewer: stack:code-reviewer

• Issue: System.Net.Http 4.3.4 and System.Text.RegularExpressions 4.3.1 are .NET Framework-era packages, unnecessary on net8.0.

• Suggestion: drop them (also worth fixing in the xUnit sibling).

---

Verdict: PASS — the cleanest of the three: correct NUnit conversion, no security/injection issues, and verified green on BrowserStack. Only inherited Low-severity dependency hygiene remains.

Review run via the BrowserStack AI harness stack:pr-review methodology (harness not installed in the run environment → independent stack:code-reviewer fallback).