@keber/qa-framework 1.9.0 → 1.10.0

package/CHANGELOG.md

@@ -33,6 +33,74 @@ has been removed or parameterized. See `docs/comparison-matrix.md` and `docs/gen
 
 ---
 
+## [1.10.0] - 2026-05-19
+
+### Added
+
+- **`integrations/ado-powershell/pipelines/azure-pipeline-qa.yml`** — pipeline template
+  significantly expanded:
+  - New **Stage 3: API Integration Tests** — separate stage for `qa/07-automation/integration`,
+    with its own `PublishTestResults` and `PublishPipelineArtifact` tasks.
+  - **Cross-project repository checkout** via `resources.repositories` block; each stage
+    now performs an explicit `checkout: source`.
+  - **Smoke test step** in the E2E stage — validates `QA_BASE_URL` is reachable via `curl`
+    before running the suite.
+  - **Commented placeholder** for `AzureCLI@2` login task (Playwright Workspaces / Entra ID)
+    in both E2E and API stages, with `PLAYWRIGHT_SERVICE_URL` env var placeholder.
+  - Optional nightly schedule block (commented out).
+  - `PublishPipelineArtifact` tasks for HTML report and trace artifacts in both stages.
+- **`integrations/playwright-azure-reporter/README.md`** — fully rewritten:
+  - Variables split into local (PAT) vs CI/CD (`SYSTEM_ACCESSTOKEN`) sections.
+  - Config snippet updated to use `ADO_ORG`, `ADO_PROJECT`, `orgUrl` constructed from
+    `ADO_ORG`, and `SYSTEM_ACCESSTOKEN ?? AZURE_TOKEN` token fallback.
+  - New **Playwright Workspaces reporter** section (`@azure/playwright` +
+    `playwright.service.config.ts` + Entra ID authentication notes).
+  - Troubleshooting table expanded with pipeline-specific `401` scenario.
+
+### Changed
+
+- **`azure-pipeline-qa.yml`** — variable names aligned with current conventions:
+  `AZURE_TOKEN` / `ADO_ORG_URL` / `ADO_PROJECT_NAME` replaced by `ADO_ORG` / `ADO_PROJECT`;
+  `ADO_PLAN_ID` split into `ADO_E2E_PLAN_ID` / `ADO_API_PLAN_ID`; `SYSTEM_ACCESSTOKEN`
+  replaces PAT for ADO reporter authentication.
+- **`azure-pipeline-qa.yml`** — E2E job `timeoutInMinutes` increased from 60 to 90.
+- **`azure-pipeline-qa.yml`** — trigger reduced to `main` only (removed `qa` and
+  `release/*` branches); trigger rationale documented in comments.
+- **`azure-pipeline-qa.yml`** — E2E test run consolidated from two `@grep`-tag steps
+  (P0 + P1/P2) into a single `--grep-invert "_inspect|_diag"` run with `continueOnError: true`.
+- **`azure-pipeline-qa.yml`** — cache target changed from `~/.cache/ms-playwright` to
+  `node_modules` per workspace; `cacheHitVar` added to both cache tasks.
+- **`azure-pipeline-qa.yml`** — `pool` block moved above `variables` for readability;
+  `ADO_SYNC_DISABLED` variable removed.
+
+---
+
+## [1.9.1] - 2026-05-15
+
+### Added
+
+- **`integrations/ado-powershell/scripts/md-to-tc-mapping.ps1`** — new script that parses a
+  Plan-de-Pruebas markdown file and generates `tc-mapping.json`. Reads the Tabla de Pruebas
+  table, detects columns dynamically, skips Bloqueado rows (PENDING-CODE), splits steps by
+  `<br>`, and strips leading numbering. Supports a `-TableSection` parameter for plans with
+  non-standard headings. This was previously missing from the framework, forcing agents to
+  implement ad-hoc parsers in each project.
+
+### Fixed
+
+- **`create-testplan-from-mapping.ps1`** — removed Unicode characters that caused
+  `MissingArrayIndexExpression` parser errors in PowerShell 5.1.
+- **`create-testplan-from-mapping.ps1`** — added auto-load of `ado-powershell` skill when
+  `New-AdoTestCase` is not yet in scope; script no longer requires manual dot-sourcing before
+  invocation.
+- **`create-testplan-from-mapping.ps1`** — added fallback to `$mapping.items` when
+  `$mapping.testCases` is absent, for compatibility with mappings generated by older sessions.
+- **`inject-ado-ids.ps1`** — fixed broken regex (`\Q...\E` is not valid PowerShell); replaced
+  with `[regex]::Escape()`. Added `-AdonIdsDir` parameter to process all `ado-ids-*.json`
+  files in a directory in one pass. Added `-DryRun` switch. Fixed UTF-8 encoding on write.
+
+---
+
 ## [1.9.0] - 2026-05-15
 
 ### Changed

package/README.md

@@ -1,7 +1,7 @@
 # qa-framework
 
 > Reusable, installable, agent-oriented QA framework for spec-driven automated testing.
-> Current version: **v1.9.0**
+> Current version: **v1.9.1**
 
 ---
 

package/integrations/ado-powershell/README.md

@@ -7,8 +7,9 @@ All scripts are parameterized and project-agnostic.
 
 | Script | Purpose |
 |--------|---------|
-| `scripts/inject-ado-ids.ps1` | Prepend ADO Work Item IDs to spec file test titles |
-| `scripts/create-testplan-from-mapping.ps1` | Create ADO Test Cases from a TC mapping JSON file |
+| `scripts/md-to-tc-mapping.ps1` | Parse a Plan-de-Pruebas markdown and generate `tc-mapping.json` |
+| `scripts/create-testplan-from-mapping.ps1` | Create ADO Test Cases from `tc-mapping.json` |
+| `scripts/inject-ado-ids.ps1` | Inject ADO WI IDs into Playwright spec file test titles |
 | `scripts/sync-ado-titles.ps1` | Sync spec file test titles back to ADO WI titles |
 | `pipelines/azure-pipeline-qa.yml` | CI pipeline template for running Playwright + ADO sync |
 
@@ -25,10 +26,18 @@ All scripts are parameterized and project-agnostic.
 # 0. Load the ADO skill (initialises session from env vars)
 . .github/skills/ado-powershell/load.ps1
 
-# 1. Create Test Cases in ADO from tc-mapping.json
-.\scripts\create-testplan-from-mapping.ps1 `
-  -PlanId      22304 `
-  -MappingFile "qa/08-azure-integration/tc-mapping.json"
+# 1. Parse Plan de Pruebas markdown -> tc-mapping.json
+.\node_modules\@keber\qa-framework\integrations\ado-powershell\scripts\md-to-tc-mapping.ps1 `
+  -PlanFile   "qa/02-test-plans/sprints/Sprint-N/Plan-de-Pruebas-MyProject-Sprint-N-MOD-SUB.md" `
+  -SpecFile   "mod/sub.spec.ts" `
+  -OutputFile "qa/08-azure-integration/tc-mapping-e2e-mod-sub.json" `
+  -PlanId     <PLAN_ID> `
+  -SuiteId    <SUITE_ID>
+
+# 2. Create Test Cases in ADO from tc-mapping.json (session already loaded above)
+.\node_modules\@keber\qa-framework\integrations\ado-powershell\scripts\create-testplan-from-mapping.ps1 `
+  -PlanId      <PLAN_ID> `
+  -MappingFile "qa/08-azure-integration/tc-mapping-e2e-mod-sub.json"
 
 # 2. Inject ADO IDs into spec files (idempotent)
 .\scripts\inject-ado-ids.ps1 `

package/integrations/ado-powershell/pipelines/azure-pipeline-qa.yml

@@ -1,133 +1,278 @@
 # -----------------------------------------------------------------------
 # keber/qa-framework — Azure Pipeline QA Template
 # -----------------------------------------------------------------------
-# Parameterized CI pipeline for running Playwright E2E tests and
-# optionally syncing results to Azure DevOps Test Plans.
+# Parameterized CI pipeline for running Playwright E2E and API tests and
+# syncing results to Azure DevOps Test Plans via SYSTEM_ACCESSTOKEN.
+#
+# Cross-project repository: the test repo lives in a different ADO project.
+# Update 'resources.repositories.name' to match your org/project/repo.
 #
 # Required Pipeline Library Variable Group: "QA-Variables"
-#   QA_BASE_URL          — Target application URL for QA environment
-#   QA_USER_EMAIL        — Default test user email
-#   QA_USER_PASSWORD     — Default test user password (secret)
-#   AZURE_TOKEN          — ADO Personal Access Token (secret)
-#   ADO_ORG_URL          — https://dev.azure.com/your-org
-#   ADO_PROJECT_NAME     — ADO project name
-#   ADO_PLAN_ID          — Test Plan ID
+# Create this group in ADO → Pipelines → Library and add the following:
+#
+#   QA_BASE_URL          — Target application URL  (e.g. https://app-qa.example.com)
+#   QA_USER_EMAIL        — Test user email / RUT
+#   QA_USER_PASSWORD     — Test user password                        [secret]
+#   ADO_ORG              — ADO organization slug  (e.g. garcesfruit-desarrollo)
+#   ADO_PROJECT          — ADO project name        (e.g. gf-portalproveedores)
+#   ADO_E2E_PLAN_ID      — Test Plan ID for the E2E suite            (e.g. 27044)
+#   ADO_API_PLAN_ID      — Test Plan ID for the API/integration suite (e.g. 27046)
+#
+#   NOTE on multiple Plan IDs: ADO variable groups store plain strings — there
+#   is no array type. Use one variable per suite (ADO_E2E_PLAN_ID / ADO_API_PLAN_ID).
+#   If the project has only one suite, a single ADO_PLAN_ID variable is enough.
+#   Results are reported to ADO via System.AccessToken (OAuth); no PAT required.
 # -----------------------------------------------------------------------
 
+# Cross-project repository — update <ADO_SOURCE_PROJECT>/<REPO_NAME> as needed
+resources:
+  repositories:
+    - repository: source
+      type: git
+      name: <ADO_SOURCE_PROJECT>/<REPO_NAME>   # e.g. gf-gestion-qa/gf-portalproveedores
+      ref: refs/heads/main
+
+# Trigger: push and PR to main.
+# The test repo is decoupled from the app repo, so branch triggers are minimal.
 trigger:
   branches:
     include:
       - main
-      - qa
-      - release/*
 
 pr:
   branches:
     include:
       - main
 
+# Optional scheduled run — uncomment and adjust if a nightly regression is needed:
+# schedules:
+#   - cron: '0 6 * * 1-5'   # 06:00 UTC Mon–Fri (03:00 CLT / 02:00 CLST)
+#     displayName: Nightly regression
+#     branches:
+#       include:
+#         - main
+#     always: true
+
+pool:
+  vmImage: 'ubuntu-latest'
+
 variables:
   - group: QA-Variables
   - name: NODE_VERSION
     value: '20.x'
-  - name: QA_DIR
+  - name: E2E_DIR
     value: 'qa/07-automation/e2e'
-  - name: ADO_SYNC_DISABLED
-    value: 'false'
-
-pool:
-  vmImage: 'ubuntu-latest'
+  - name: API_DIR
+    value: 'qa/07-automation/integration'
 
 stages:
   # -----------------------------------------------------------------------
-  # Stage 1: Install & Setup
+  # Stage 1: Install & cache dependencies
   # -----------------------------------------------------------------------
   - stage: Setup
     displayName: 'Install Dependencies'
     jobs:
       - job: Install
-        displayName: 'npm install + Playwright browsers'
+        displayName: 'npm ci + Playwright browsers'
         steps:
+          - checkout: source
+            displayName: 'Checkout source repo'
+
           - task: NodeTool@0
             inputs:
               versionSpec: $(NODE_VERSION)
             displayName: 'Use Node.js $(NODE_VERSION)'
 
           - script: |
-              cd $(QA_DIR)
+              cd $(E2E_DIR)
               npm ci
               npx playwright install chromium --with-deps
-            displayName: 'Install npm deps and Playwright Chromium'
+            displayName: 'Install E2E deps and Playwright Chromium'
 
           - task: CacheBeta@1
             inputs:
-              key: 'playwright | "$(Agent.OS)" | $(QA_DIR)/package-lock.json'
-              path: '~/.cache/ms-playwright'
-            displayName: 'Cache Playwright browsers'
+              key: 'e2e | "$(Agent.OS)" | $(E2E_DIR)/package-lock.json'
+              path: '$(E2E_DIR)/node_modules'
+              cacheHitVar: 'CACHE_RESTORED_E2E'
+            displayName: 'Cache E2E node_modules'
+
+          - script: |
+              cd $(API_DIR)
+              npm ci
+            displayName: 'Install API deps'
+
+          - task: CacheBeta@1
+            inputs:
+              key: 'api | "$(Agent.OS)" | $(API_DIR)/package-lock.json'
+              path: '$(API_DIR)/node_modules'
+              cacheHitVar: 'CACHE_RESTORED_API'
+            displayName: 'Cache API node_modules'
 
   # -----------------------------------------------------------------------
-  # Stage 2: E2E Tests
+  # Stage 2: E2E Tests (Playwright/Chromium)
   # -----------------------------------------------------------------------
   - stage: E2E
-    displayName: 'E2E Tests'
+    displayName: 'E2E Tests (Playwright/Chromium)'
     dependsOn: Setup
     jobs:
-      - job: PlaywrightTests
-        displayName: 'Run Playwright suite'
-        timeoutInMinutes: 60
+      - job: PlaywrightE2E
+        displayName: 'Run E2E suite'
+        timeoutInMinutes: 90
         steps:
+          - checkout: source
+            displayName: 'Checkout source repo'
+
           - task: NodeTool@0
             inputs:
               versionSpec: $(NODE_VERSION)
+            displayName: 'Use Node.js $(NODE_VERSION)'
 
           - script: |
-              cd $(QA_DIR)
+              cd $(E2E_DIR)
               npm ci
               npx playwright install chromium --with-deps
-            displayName: 'Restore dependencies'
+            displayName: 'Restore E2E dependencies'
+
+          - script: |
+              echo "QA_BASE_URL = $(QA_BASE_URL)"
+              HTTP_CODE=$(curl -o /dev/null -s -w "%{http_code}" --max-time 30 "$(QA_BASE_URL)")
+              echo "HTTP response: $HTTP_CODE"
+              if [ "$HTTP_CODE" -lt 200 ] || [ "$HTTP_CODE" -ge 400 ]; then
+                echo "##[error]Smoke test failed — $(QA_BASE_URL) returned HTTP $HTTP_CODE"
+                exit 1
+              fi
+              echo "Smoke test passed (HTTP $HTTP_CODE)"
+            displayName: 'Smoke test — verify QA_BASE_URL is reachable'
+
+          # ---------------------------------------------------------------
+          # Playwright Workspaces (Azure App Testing)
+          # Enable once the ADO service connection is configured.
+          # Prerequisite: the service connection must have the Contributor
+          # role on the workspace in Azure Portal (Access control IAM).
+          # ---------------------------------------------------------------
+          # - task: AzureCLI@2
+          #   displayName: 'Login to Azure (Playwright Workspaces)'
+          #   inputs:
+          #     azureSubscription: '<AZURE_SERVICE_CONNECTION_NAME>'
+          #     scriptType: bash
+          #     scriptLocation: inlineScript
+          #     inlineScript: echo "Authenticated via Entra ID"
 
           - script: |
-              cd $(QA_DIR)
-              npx playwright test --grep @P0
-            displayName: 'Run P0 smoke suite'
+              cd $(E2E_DIR)
+              npx playwright test --project=chromium --ignore-snapshots \
+                --grep-invert "_inspect|_diag"
+            displayName: 'Run E2E tests'
+            continueOnError: true
             env:
-              QA_BASE_URL:       $(QA_BASE_URL)
-              QA_USER_EMAIL:     $(QA_USER_EMAIL)
-              QA_USER_PASSWORD:  $(QA_USER_PASSWORD)
-              AZURE_TOKEN:       $(AZURE_TOKEN)
-              ADO_ORG_URL:       $(ADO_ORG_URL)
-              ADO_PROJECT_NAME:  $(ADO_PROJECT_NAME)
-              ADO_PLAN_ID:       $(ADO_PLAN_ID)
-              ADO_SYNC_DISABLED: $(ADO_SYNC_DISABLED)
-              CI:                'true'
+              QA_BASE_URL:        $(QA_BASE_URL)
+              QA_USER_EMAIL:      $(QA_USER_EMAIL)
+              QA_USER_PASSWORD:   $(QA_USER_PASSWORD)
+              ADO_ORG:            $(ADO_ORG)
+              ADO_PROJECT:        $(ADO_PROJECT)
+              ADO_PLAN_ID:        $(ADO_E2E_PLAN_ID)
+              SYSTEM_ACCESSTOKEN: $(System.AccessToken)
+              CI:                 'true'
+              # PLAYWRIGHT_SERVICE_URL: $(PLAYWRIGHT_SERVICE_URL)  # Playwright Workspaces endpoint — enable together with the login task
+
+          - task: PublishTestResults@2
+            condition: always()
+            inputs:
+              testResultsFormat:     'JUnit'
+              testResultsFiles:      '**/test-results/**/*.xml'
+              searchFolder:          $(E2E_DIR)
+              mergeTestResults:      true
+              failTaskOnFailedTests: true
+              testRunTitle:          '[Auto E2E] $(Build.BuildNumber)'
+            displayName: 'Publish E2E test results (JUnit)'
+
+          - task: PublishPipelineArtifact@1
+            condition: always()
+            inputs:
+              targetPath: '$(E2E_DIR)/playwright-report'
+              artifact:   'e2e-playwright-report'
+            displayName: 'Publish E2E HTML report'
+
+          - task: PublishPipelineArtifact@1
+            condition: always()
+            inputs:
+              targetPath: '$(E2E_DIR)/test-results'
+              artifact:   'e2e-test-results'
+            displayName: 'Publish E2E trace artifacts'
+
+  # -----------------------------------------------------------------------
+  # Stage 3: API Integration Tests
+  # -----------------------------------------------------------------------
+  - stage: API
+    displayName: 'API Integration Tests'
+    dependsOn: E2E
+    jobs:
+      - job: PlaywrightAPI
+        displayName: 'Run API suite'
+        timeoutInMinutes: 30
+        steps:
+          - checkout: source
+            displayName: 'Checkout source repo'
+
+          - task: NodeTool@0
+            inputs:
+              versionSpec: $(NODE_VERSION)
+            displayName: 'Use Node.js $(NODE_VERSION)'
+
+          - script: |
+              cd $(API_DIR)
+              npm ci
+            displayName: 'Restore API dependencies'
+
+          # ---------------------------------------------------------------
+          # Playwright Workspaces (Azure App Testing)
+          # Enable once the ADO service connection is configured.
+          # ---------------------------------------------------------------
+          # - task: AzureCLI@2
+          #   displayName: 'Login to Azure (Playwright Workspaces)'
+          #   inputs:
+          #     azureSubscription: '<AZURE_SERVICE_CONNECTION_NAME>'
+          #     scriptType: bash
+          #     scriptLocation: inlineScript
+          #     inlineScript: echo "Authenticated via Entra ID"
 
           - script: |
-              cd $(QA_DIR)
-              npx playwright test --grep "@P1|@P2"
-            displayName: 'Run P1/P2 regression suite'
-            condition: succeededOrFailed()
+              cd $(API_DIR)
+              npx playwright test --grep-invert "_inspect|_diag"
+            displayName: 'Run API integration tests'
+            continueOnError: true
             env:
-              QA_BASE_URL:       $(QA_BASE_URL)
-              QA_USER_EMAIL:     $(QA_USER_EMAIL)
-              QA_USER_PASSWORD:  $(QA_USER_PASSWORD)
-              AZURE_TOKEN:       $(AZURE_TOKEN)
-              ADO_ORG_URL:       $(ADO_ORG_URL)
-              ADO_PROJECT_NAME:  $(ADO_PROJECT_NAME)
-              ADO_PLAN_ID:       $(ADO_PLAN_ID)
-              CI:                'true'
+              QA_BASE_URL:        $(QA_BASE_URL)
+              QA_USER_EMAIL:      $(QA_USER_EMAIL)
+              QA_USER_PASSWORD:   $(QA_USER_PASSWORD)
+              ADO_ORG:            $(ADO_ORG)
+              ADO_PROJECT:        $(ADO_PROJECT)
+              ADO_PLAN_ID:        $(ADO_API_PLAN_ID)
+              SYSTEM_ACCESSTOKEN: $(System.AccessToken)
+              CI:                 'true'
+              # PLAYWRIGHT_SERVICE_URL: $(PLAYWRIGHT_SERVICE_URL)  # Playwright Workspaces endpoint — enable together with the login task
 
           - task: PublishTestResults@2
             condition: always()
             inputs:
-              testResultsFormat: 'JUnit'
-              testResultsFiles:  '$(QA_DIR)/test-results/junit*.xml'
-              mergeTestResults:  true
-              testRunTitle:      'Playwright E2E — $(Build.SourceBranchName)'
-            displayName: 'Publish test results'
+              testResultsFormat:     'JUnit'
+              testResultsFiles:      '**/test-results/**/*.xml'
+              searchFolder:          $(API_DIR)
+              mergeTestResults:      true
+              failTaskOnFailedTests: true
+              testRunTitle:          '[Auto API] $(Build.BuildNumber)'
+            displayName: 'Publish API test results (JUnit)'
+
+          - task: PublishPipelineArtifact@1
+            condition: always()
+            inputs:
+              targetPath: '$(API_DIR)/playwright-report'
+              artifact:   'api-playwright-report'
+            displayName: 'Publish API HTML report'
 
-          - task: PublishBuildArtifacts@1
+          - task: PublishPipelineArtifact@1
             condition: always()
             inputs:
-              pathToPublish: '$(QA_DIR)/playwright-report'
-              artifactName:  'playwright-report'
-            displayName: 'Publish Playwright HTML report'
+              targetPath: '$(API_DIR)/test-results'
+              artifact:   'api-test-results'
+            displayName: 'Publish API trace artifacts'

package/integrations/ado-powershell/scripts/create-testplan-from-mapping.ps1

@@ -41,9 +41,19 @@ param(
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Stop'
 
-# Verify ADO session is available
+# Auto-load ADO session if not already active
 if (-not (Get-Command 'New-AdoTestCase' -ErrorAction SilentlyContinue)) {
-    Write-Error "ADO session not loaded. Run: . .github/skills/ado-powershell/load.ps1"
+    $loadScript = Join-Path $PSScriptRoot '..\..\..\node_modules\@keber\ado-powershell\.github\skills\ado-powershell\load.ps1'
+    if (Test-Path $loadScript) {
+        . $loadScript
+    } else {
+        Write-Error "ADO session not loaded and load.ps1 not found. Run: . node_modules\@keber\ado-powershell\.github\skills\ado-powershell\load.ps1"
+        exit 1
+    }
+}
+
+if (-not (Get-Command 'New-AdoTestCase' -ErrorAction SilentlyContinue)) {
+    Write-Error "New-AdoTestCase not available after loading ado-powershell. Check the skill version (requires >= 1.3.0)."
     exit 1
 }
 
@@ -53,40 +63,41 @@ $mapping = Get-Content $MappingFile -Raw | ConvertFrom-Json
 
 $suiteId = if ($SuiteId -gt 0) { $SuiteId } else { $mapping.suiteId }
 
-Write-Host "[create-testplan] Creating $($mapping.testCases.Count) test cases in Plan $PlanId / Suite $suiteId"
+# Support both 'testCases' (canonical) and 'items' (legacy)
+$tcList = if ($mapping.PSObject.Properties['testCases']) { $mapping.testCases } else { $mapping.items }
+
+Write-Host "[create-testplan] Creating $($tcList.Count) test cases in Plan $PlanId / Suite $suiteId"
 
 $results = @()
 
-foreach ($tc in $mapping.testCases) {
+foreach ($tc in $tcList) {
     $steps          = if ($tc.PSObject.Properties['steps'])          { $tc.steps          } else { @() }
     $expectedResult = if ($tc.PSObject.Properties['expectedResult']) { $tc.expectedResult  } else { ''  }
 
-    if ($PSCmdlet.ShouldProcess($tc.localId, "Create ADO Test Case")) {
-        try {
-            $splatArgs = @{
-                Title   = "[$($tc.localId)] $($tc.title)"
-                Confirm = $false
-            }
-            if ($steps.Count -gt 0) {
-                $splatArgs.Steps          = $steps
-                $splatArgs.ExpectedResult = $expectedResult
-            }
-
-            $wi   = New-AdoTestCase @splatArgs
-            $wiId = $wi.id
-            Write-Host "  [CREATED] $($tc.localId) → WI #$wiId"
-
-            Add-AdoTestCaseToSuite -PlanId $PlanId -SuiteId $suiteId -TestCaseIds @($wiId) -Confirm:$false
-
-            $results += [PSCustomObject]@{
-                localId  = $tc.localId
-                adoWiId  = $wiId
-                specFile = $tc.specFile
-                title    = $tc.title
-            }
-        } catch {
-            Write-Warning "  [FAILED] $($tc.localId) — $($_.Exception.Message)"
+    try {
+        $splatArgs = @{
+            Title   = "[$($tc.localId)] $($tc.title)"
+            Confirm = $false
+        }
+        if ($steps.Count -gt 0) {
+            $splatArgs.Steps          = $steps
+            $splatArgs.ExpectedResult = $expectedResult
+        }
+
+        $wi   = New-AdoTestCase @splatArgs
+        $wiId = $wi.id
+        Write-Host "  [CREATED] $($tc.localId) -> WI #$wiId"
+
+        Add-AdoTestCaseToSuite -PlanId $PlanId -SuiteId $suiteId -TestCaseIds @($wiId) -Confirm:$false
+
+        $results += [PSCustomObject]@{
+            localId  = $tc.localId
+            adoWiId  = $wiId
+            specFile = $tc.specFile
+            title    = $tc.title
         }
+    } catch {
+        Write-Warning "  [FAILED] $($tc.localId) -- $($_.Exception.Message)"
     }
 }
 
@@ -94,6 +105,6 @@ foreach ($tc in $mapping.testCases) {
 $outFile = if ($OutputFile) { $OutputFile } else {
     Join-Path (Split-Path $MappingFile) 'ado-ids.json'
 }
-$results | ConvertTo-Json -Depth 5 | Set-Content $outFile
+$results | ConvertTo-Json -Depth 5 | Set-Content $outFile -Encoding UTF8
 Write-Host ""
 Write-Host "[create-testplan] Done. $($results.Count) WIs created. Output: $outFile"

package/integrations/ado-powershell/scripts/inject-ado-ids.ps1

@@ -3,94 +3,109 @@
     Prepends Azure DevOps Work Item IDs to Playwright spec file test titles.
 
 .DESCRIPTION
-    Reads ado-ids.json (produced by create-testplan-from-mapping.ps1) and
-    updates every matching test() / test.skip() call in the spec files to
-    include the ADO WI ID as a prefix.
+    Reads one or more ado-ids-*.json files and updates every matching test()
+    call in the spec files to include the ADO WI ID as a [NNNNN] prefix.
+    This operation is IDEMPOTENT: if the ID is already present, it is skipped.
 
-    This operation is IDEMPOTENT: if the ID is already present, it is not
-    duplicated.
+    Two modes:
+      -MappingFile  Process a single ado-ids.json file (backward-compatible).
+      -AdonIdsDir   Process all ado-ids-*.json files found in a directory.
 
 .PARAMETER SpecDir
-    Root directory containing Playwright spec files (.spec.ts).
-    Searched recursively.
+    Root directory containing Playwright spec files (.spec.ts). Searched recursively.
 
 .PARAMETER MappingFile
-    Path to ado-ids.json — array of { localId, adoWiId, specFile }.
+    Path to a single ado-ids.json file. Mutually exclusive with -AdonIdsDir.
+
+.PARAMETER AdonIdsDir
+    Directory containing ado-ids-*.json files. All matching files are processed.
+    Mutually exclusive with -MappingFile.
+
+.PARAMETER DryRun
+    Shows what would be changed without modifying any files.
 
 .EXAMPLE
-    .\inject-ado-ids.ps1 `
-        -SpecDir     "qa/07-automation/e2e" `
-        -MappingFile "qa/08-azure-integration/ado-ids.json"
+    # Single file
+    .\inject-ado-ids.ps1 -SpecDir "qa/07-automation/e2e/tests" -MappingFile "qa/08-azure-integration/ado-ids.json"
+
+.EXAMPLE
+    # All ado-ids-*.json files in a directory
+    .\inject-ado-ids.ps1 -SpecDir "qa/07-automation/e2e/tests" -AdonIdsDir "qa/08-azure-integration"
 
 .NOTES
     Does NOT require a network connection or ADO token.
     Commit the modified spec files after running.
 #>
-[CmdletBinding(SupportsShouldProcess)]
+[CmdletBinding()]
 param(
     [Parameter(Mandatory)]
     [string] $SpecDir,
 
-    [Parameter(Mandatory)]
-    [string] $MappingFile
+    [Parameter(ParameterSetName='SingleFile', Mandatory)]
+    [string] $MappingFile,
+
+    [Parameter(ParameterSetName='MultiFile', Mandatory)]
+    [string] $AdonIdsDir,
+
+    [switch] $DryRun
 )
 
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Stop'
 
-# Load mapping
-if (-not (Test-Path $MappingFile)) {
-    Write-Error "Mapping file not found: $MappingFile"
-    exit 1
+# Collect input files based on mode
+$adoIdFiles = if ($PSCmdlet.ParameterSetName -eq 'SingleFile') {
+    if (-not (Test-Path $MappingFile)) { Write-Error "Not found: $MappingFile"; exit 1 }
+    @(Get-Item $MappingFile)
+} else {
+    @(Get-ChildItem -Path $AdonIdsDir -Filter 'ado-ids-*.json')
 }
-$mapping = Get-Content $MappingFile -Raw | ConvertFrom-Json
 
-Write-Host "[inject-ado-ids] Loaded $($mapping.Count) mapping entries from $MappingFile"
+Write-Host "[inject-ado-ids] Processing $($adoIdFiles.Count) mapping file(s)"
 
-$updated = 0
-$skipped = 0
+$totalUpdated = 0
+$totalSkipped = 0
 
-foreach ($entry in $mapping) {
-    $adoId   = $entry.adoWiId
-    $localId = $entry.localId
+foreach ($f in $adoIdFiles) {
+    $entries = Get-Content $f.FullName -Raw | ConvertFrom-Json
+    if ($entries -isnot [array]) { $entries = @($entries) }
+    Write-Host "  $($f.Name) ($($entries.Count) entries)"
 
-    # Find spec files matching this entry
-    $pattern = if ($entry.specFile) { $entry.specFile } else { "**/*.spec.ts" }
-    $files   = Get-ChildItem -Path $SpecDir -Recurse -Filter "*.spec.ts" |
-               Where-Object { $_.FullName -like "*$($entry.specFile)*" }
+    foreach ($entry in $entries) {
+        $localId  = $entry.localId
+        $wiId     = $entry.adoWiId
+        $specHint = $entry.specFile
 
-    foreach ($file in $files) {
-        $content = Get-Content $file.FullName -Raw
+        $specHintNorm = $specHint -replace '/', '\'
+        $specFiles = Get-ChildItem -Path $SpecDir -Recurse -Filter '*.spec.ts' |
+                     Where-Object { $_.FullName -like "*$specHintNorm*" }
 
-        # Match test titles containing the localId but NOT already prefixed with adoId
-        # Pattern: test('...[TC-x-x-NNN]...') where [NNN_ADOID] not yet present
-        $adoPrefix   = "[$adoId]"
-        $escapedId   = [regex]::Escape($localId)
+        foreach ($sf in $specFiles) {
+            $content  = Get-Content $sf.FullName -Raw
+            $wiPrefix = "[$wiId]"
 
-        # Check if already injected (idempotent guard)
-        if ($content -match [regex]::Escape($adoPrefix)) {
-            Write-Verbose "[$localId] ADO WI $adoId already present in $($file.Name) — skipping"
-            $skipped++
-            continue
-        }
+            # Idempotent: skip if this wiId is already associated with this localId
+            if ($content -match "$([regex]::Escape($wiPrefix)).*$([regex]::Escape($localId))") {
+                $totalSkipped++
+                continue
+            }
 
-        # Replace: test('ORIGINAL_TITLE') → test('[ADOID] ORIGINAL_TITLE')
-        # Matches both single and double quotes, test() and test.skip()
-        $newContent = $content -replace `
-            "(?<=(test(?:\.skip)?\s*\()(['""]))\s*(?=.*\Q$localId\E)", `
-            "$adoPrefix "
-
-        if ($newContent -ne $content) {
-            if ($PSCmdlet.ShouldProcess($file.FullName, "Inject ADO WI $adoId for $localId")) {
-                Set-Content -Path $file.FullName -Value $newContent -NoNewline
-                Write-Host "  [UPDATED] $($file.Name) — injected [$adoId] for $localId"
-                $updated++
+            # Inject [wiId] before the title of any test containing this localId
+            $escaped     = [regex]::Escape($localId)
+            $pattern     = "(test(?:\.(?:skip|fail|fixme))?\s*\(\s*['""])(?!\[$wiId\])([^'""]*$escaped)"
+            $replacement = "`${1}$wiPrefix `${2}"
+            $newContent  = [regex]::Replace($content, $pattern, $replacement)
+
+            if ($newContent -ne $content) {
+                if (-not $DryRun) {
+                    [System.IO.File]::WriteAllText($sf.FullName, $newContent, [System.Text.Encoding]::UTF8)
+                }
+                Write-Host "    [UPDATED] $($sf.Name) -- injected $wiPrefix for $localId$(if($DryRun){' (dry run)'})"
+                $totalUpdated++
             }
-        } else {
-            Write-Verbose "  [NO MATCH] $localId not found by pattern in $($file.Name)"
         }
     }
 }
 
 Write-Host ""
-Write-Host "[inject-ado-ids] Done. Updated: $updated | Skipped (already present): $skipped"
+Write-Host "[inject-ado-ids] Done. Updated=$totalUpdated Skipped=$totalSkipped$(if($DryRun){' (DRY RUN)'})"

package/integrations/ado-powershell/scripts/md-to-tc-mapping.ps1

@@ -0,0 +1,196 @@
+<#
+.SYNOPSIS
+  Generates a tc-mapping.json from a Plan-de-Pruebas markdown file.
+
+.DESCRIPTION
+  Reads the "Tabla de Pruebas" table in a Plan-de-Pruebas markdown file,
+  skips rows with Tipo = "Bloqueado" (PENDING-CODE), splits Steps by <br>,
+  and outputs a tc-mapping.json compatible with create-testplan-from-mapping.ps1.
+
+  Paths are resolved relative to the current working directory (project root).
+  Always run this script from the project root.
+
+.PARAMETER PlanFile
+  Path to the Plan-de-Pruebas-*.md file to parse (relative to project root or absolute).
+
+.PARAMETER SpecFile
+  Relative path to the Playwright spec file (e.g. "reg/apl.spec.ts").
+  Stored as metadata in the output; not validated by this script.
+
+.PARAMETER OutputFile
+  Path to write the tc-mapping.json output (relative to project root or absolute).
+
+.PARAMETER PlanId
+  ADO Test Plan ID to embed in the JSON. Fill in after creating the plan (default: 0).
+
+.PARAMETER SuiteId
+  ADO Test Suite ID to embed in the JSON. Fill in after creating the suite (default: 0).
+
+.PARAMETER TableSection
+  Heading text of the table section to parse. Defaults to "Tabla de Pruebas".
+  Use the exact heading text if your plan uses a different section name
+  (e.g. "6. Casos de prueba").
+
+.EXAMPLE
+  .\integrations\ado-powershell\scripts\md-to-tc-mapping.ps1 `
+    -PlanFile   "qa/02-test-plans/sprints/Sprint-2/Plan-de-Pruebas-MyProject-Sprint-2-REG-APL.md" `
+    -SpecFile   "reg/apl.spec.ts" `
+    -OutputFile "qa/08-azure-integration/tc-mapping-e2e-reg-apl.json"
+
+.EXAMPLE
+  # For plans where the table is under a different heading:
+  .\integrations\ado-powershell\scripts\md-to-tc-mapping.ps1 `
+    -PlanFile      "qa/02-test-plans/sprints/Sprint-10/Plan-de-Pruebas-MyProject-Sprint-10-MOD-API-Neg.md" `
+    -SpecFile      "mod.api.negative.spec.ts" `
+    -OutputFile    "qa/08-azure-integration/tc-mapping-api-mod-neg.json" `
+    -TableSection  "6. Casos de prueba"
+#>
+param(
+    [Parameter(Mandatory)][string]$PlanFile,
+    [Parameter(Mandatory)][string]$SpecFile,
+    [Parameter(Mandatory)][string]$OutputFile,
+    [int]$PlanId        = 0,
+    [int]$SuiteId       = 0,
+    [string]$TableSection = 'Tabla de Pruebas'
+)
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+function Trim-Cell([string]$cell) { return $cell.Trim() }
+
+# Resolve paths relative to current working directory (project root)
+$WorkspaceRoot = (Get-Location).Path
+if (-not [System.IO.Path]::IsPathRooted($PlanFile)) {
+    $PlanFile = Join-Path $WorkspaceRoot $PlanFile
+}
+if (-not [System.IO.Path]::IsPathRooted($OutputFile)) {
+    $OutputFile = Join-Path $WorkspaceRoot $OutputFile
+}
+
+if (-not (Test-Path $PlanFile)) {
+    throw "Plan file not found: $PlanFile"
+}
+
+$lines = Get-Content $PlanFile -Encoding UTF8
+
+# Find the table section (configurable heading)
+$tableStart = -1
+for ($i = 0; $i -lt $lines.Count; $i++) {
+    if ($lines[$i] -match "##\s+$([regex]::Escape($TableSection))") {
+        $tableStart = $i + 1
+        break
+    }
+}
+if ($tableStart -lt 0) {
+    throw "Section '## $TableSection' not found in: $PlanFile"
+}
+
+# Find the header row (first line starting with |)
+$headerIdx = -1
+for ($i = $tableStart; $i -lt $lines.Count; $i++) {
+    if ($lines[$i].TrimStart().StartsWith('|')) {
+        $headerIdx = $i
+        break
+    }
+}
+if ($headerIdx -lt 0) {
+    throw "Table header row not found after '## $TableSection'"
+}
+
+# Parse header to find column indices dynamically
+$headerCells = $lines[$headerIdx] -split '\|' | Where-Object { $_ -ne '' }
+$colMap = @{}
+for ($c = 0; $c -lt $headerCells.Count; $c++) {
+    $name = (Trim-Cell $headerCells[$c]).ToLower()
+    $colMap[$name] = $c
+}
+
+# Determine column indices (handle both E2E and API table formats)
+$idxTcId   = if ($colMap.ContainsKey('tc-id'))              { $colMap['tc-id'] }              else { 1 }
+$idxTitulo = if ($colMap.ContainsKey('titulo'))              { $colMap['titulo'] }             else { 3 }
+$idxSteps  = if ($colMap.ContainsKey('steps'))               { $colMap['steps'] }              `
+             elseif ($colMap.ContainsKey('pasos'))            { $colMap['pasos'] }              else { 5 }
+$idxResult = if ($colMap.ContainsKey('resultado esperado'))  { $colMap['resultado esperado'] } else { 6 }
+$idxTipo   = if ($colMap.ContainsKey('tipo'))                { $colMap['tipo'] }               else { -1 }
+
+# Data rows start after header + separator
+$dataStart = $headerIdx + 2
+
+$tcList = [System.Collections.Generic.List[hashtable]]::new()
+
+for ($i = $dataStart; $i -lt $lines.Count; $i++) {
+    $line = $lines[$i].TrimStart()
+
+    # Stop at blank line or next section heading
+    if ($line -eq '' -or $line.StartsWith('#')) { break }
+    if (-not $line.StartsWith('|')) { continue }
+
+    # Split row into cells, strip leading empty element
+    $cells = $lines[$i] -split '\|'
+    if ($cells[0] -eq '' -or $cells[0] -match '^\s*$') {
+        $cells = $cells[1..($cells.Count - 1)]
+    }
+    if ($cells.Count -lt 3) { continue }
+
+    function Get-Cell([string[]]$arr, [int]$idx) {
+        if ($idx -ge 0 -and $idx -lt $arr.Count) { return (Trim-Cell $arr[$idx]) }
+        return ''
+    }
+
+    $tipo   = Get-Cell $cells $idxTipo
+    $tcId   = Get-Cell $cells $idxTcId
+    $titulo = Get-Cell $cells $idxTitulo
+    $steps  = Get-Cell $cells $idxSteps
+    $result = Get-Cell $cells $idxResult
+
+    # Skip sub-header rows or empty rows
+    if ($tcId -eq '' -or $tcId -eq 'TC-ID') { continue }
+
+    # Skip blocked TCs (PENDING-CODE)
+    if ($tipo -ieq 'Bloqueado') {
+        Write-Host "  [skip] $tcId - Bloqueado (PENDING-CODE)" -ForegroundColor DarkYellow
+        continue
+    }
+
+    # Fallback: use Descripcion column as title if Titulo is absent
+    if ($titulo -eq '' -or $titulo -eq 'N/A') {
+        $idxDesc = if ($colMap.ContainsKey('descripcion')) { $colMap['descripcion'] } else { 1 }
+        $titulo  = Get-Cell $cells $idxDesc
+    }
+
+    # Parse steps: split on <br>, strip leading numbering (e.g. "1. ", "2) ")
+    $stepList = @()
+    if ($steps -ne '' -and $steps -ne 'N/A') {
+        $rawSteps = $steps -split '(?i)<br\s*/?>'
+        foreach ($s in $rawSteps) {
+            $cleaned = $s.Trim() -replace '^\d+[\.\)]\s*', ''
+            if ($cleaned -ne '') { $stepList += $cleaned }
+        }
+    }
+
+    $tcList.Add(@{
+        localId        = $tcId
+        title          = $titulo
+        specFile       = $SpecFile
+        steps          = $stepList
+        expectedResult = $result
+    })
+}
+
+$output = @{
+    planId    = $PlanId
+    suiteId   = $SuiteId
+    testCases = @($tcList)
+}
+
+# Ensure output directory exists
+$outputDir = Split-Path $OutputFile
+if (-not (Test-Path $outputDir)) {
+    New-Item -ItemType Directory -Path $outputDir -Force | Out-Null
+}
+
+$json = $output | ConvertTo-Json -Depth 10
+[System.IO.File]::WriteAllText($OutputFile, $json, [System.Text.Encoding]::UTF8)
+
+Write-Host "(ok) Generated $($tcList.Count) TC mappings -> $OutputFile" -ForegroundColor Green

package/integrations/playwright-azure-reporter/README.md

@@ -1,4 +1,4 @@
-# Integration — playwright-azure-reporter
+# Integration - playwright-azure-reporter
 
 Connects Playwright test results to Azure DevOps Test Plans automatically.
 
@@ -8,42 +8,98 @@ Connects Playwright test results to Azure DevOps Test Plans automatically.
 npm install --save-dev @alex_neo/playwright-azure-reporter
 ```
 
-## Required environment variables
+## Environment variables
+
+### Local development (`.env`)
 
 ```
-ADO_ORG_URL=https://dev.azure.com/your-org
-ADO_PROJECT_NAME=YourProject
+ADO_ORG=<org-slug>
+ADO_PROJECT=<project-name>
 ADO_PLAN_ID=<plan-id>
-AZURE_TOKEN=<personal-access-token>
+AZURE_TOKEN=<personal-access-token> # PAT with Test Management: Read & Write
+```
+
+> NEVER commit `.env` files to source control.
+
+### CI/CD pipeline (`QA-Variables` Library Variable Group)
+
+In the pipeline, `SYSTEM_ACCESSTOKEN` (OAuth) is used instead of a PAT -
+no `AZURE_TOKEN` is needed. The reporter accepts both authentication methods.
+
+```
+ADO_ORG=<org-slug>
+ADO_PROJECT=<project-name>
+ADO_E2E_PLAN_ID=<plan-id>
+ADO_API_PLAN_ID=<plan-id>
 ```
 
-> These variables MUST be injected via CI secrets (Azure Pipeline Library Variable Group).
-> NEVER store tokens in `.env` files committed to source control.
+`SYSTEM_ACCESSTOKEN` is injected automatically by the pipeline via `$(System.AccessToken)`.
 
 ## playwright.config.ts snippet
 
 ```typescript
-import type { PlaywrightTestConfig } from '@playwright/test';
+import { defineConfig } from '@playwright/test';
 
-const config: PlaywrightTestConfig = {
+export default defineConfig({
   reporter: [
     ['list'],
     ['html', { open: 'never' }],
     ['@alex_neo/playwright-azure-reporter', {
-      token:           process.env.AZURE_TOKEN!,
-      planId:          Number(process.env.ADO_PLAN_ID),
-      projectName:     process.env.ADO_PROJECT_NAME!,
-      orgUrl:          process.env.ADO_ORG_URL!,
-      testRunTitle:    `[Automated] ${new Date().toISOString().slice(0, 10)}`,
+      token:                   process.env.SYSTEM_ACCESSTOKEN ?? process.env.AZURE_TOKEN!,
+      planId:                  Number(process.env.ADO_PLAN_ID),
+      projectName:             process.env.ADO_PROJECT!,
+      orgUrl:                  `https://dev.azure.com/${process.env.ADO_ORG}`,
+      testRunTitle:            `[Automated] ${new Date().toISOString().slice(0, 10)}`,
       publishResultsOnFailure: true,
-      isDisabled:      process.env.ADO_SYNC_DISABLED === 'true',
     }],
   ],
-};
+});
+```
+
+> `token` falls back to `AZURE_TOKEN` when `SYSTEM_ACCESSTOKEN` is not present (local runs).
+
+## Playwright Workspaces reporter (optional)
+
+To also publish results to the Azure Playwright Workspaces dashboard, add
+`@azure/playwright` alongside `@alex_neo/playwright-azure-reporter`.
 
-export default config;
+```bash
+npm install --save-dev @azure/playwright
 ```
 
+Create a `playwright.service.config.ts` file next to `playwright.config.ts`:
+
+```typescript
+import { defineConfig } from '@playwright/test';
+import { createAzurePlaywrightConfig } from '@azure/playwright';
+import { DefaultAzureCredential } from '@azure/identity';
+import config from './playwright.config';
+
+export default defineConfig(
+  config,
+  createAzurePlaywrightConfig(config, {
+    credential: new DefaultAzureCredential(),
+  })
+);
+```
+
+Run using the service config in CI:
+
+```bash
+npx playwright test -c playwright.service.config.ts
+```
+
+Required variable (add to `QA-Variables` Library Variable Group):
+
+```
+PLAYWRIGHT_SERVICE_URL=<workspace-endpoint-url>   # Azure Portal -> Playwright workspace -> Get Started
+```
+
+Authentication uses Microsoft Entra ID via the pipeline's Azure service connection
+(`AzureCLI@2` login task). No `PLAYWRIGHT_SERVICE_ACCESS_TOKEN` is needed when
+Entra ID is configured. See `pipelines/azure-pipeline-qa.yml` for the commented
+placeholder steps.
+
 ## Test case title format (required for ADO sync)
 
 The reporter matches test titles to ADO Work Items by the numeric prefix.
@@ -73,16 +129,11 @@ file/describe block to its ADO Test Suite. Example:
 }
 ```
 
-## Disabling ADO sync locally
-
-Set `ADO_SYNC_DISABLED=true` in your `.env` to skip reporting while running
-tests locally.
-
 ## Troubleshooting
 
 | Symptom | Cause | Fix |
 |---------|-------|-----|
-| `401 Unauthorized` | Expired PAT | Regenerate PAT in ADO → User Settings |
+| `401 Unauthorized` (local) | Expired PAT | Regenerate PAT in ADO -> User Settings |
+| `401 Unauthorized` (pipeline) | `SYSTEM_ACCESSTOKEN` not passed | Verify `env: SYSTEM_ACCESSTOKEN: $(System.AccessToken)` in the pipeline step |
 | `Test case not found` | WI ID mismatch | Re-run `inject-ado-ids.ps1` |
-| Results not published | `isDisabled: true` | Remove or set to `false` |
 | Duplicate test runs | Reporter called twice | Check for duplicate reporter arrays |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keber/qa-framework",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Reusable spec-driven QA framework for IDE-agent-assisted automated testing. Installable as an npm package. Provides structure, templates, agent instructions, and optional integrations for Playwright and Azure DevOps.",
   "keywords": [
     "qa",