@kudusov.takhir/ba-toolkit 1.2.0 → 1.2.4

package/CHANGELOG.md

@@ -11,6 +11,52 @@ Versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
+## [1.2.4] — 2026-04-08
+
+### Fixed
+
+- `.github/workflows/release.yml` — added a "Strip classic auth from .npmrc" step before `npm publish`. `actions/setup-node` with `registry-url` writes `//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}` into `.npmrc`; with our empty `NODE_AUTH_TOKEN` this registered as a configured-but-empty classic token, so npm refused to start the OIDC flow and failed with `ENEEDAUTH`. Stripping both `:_authToken=` and `always-auth=` lines lets npm 11.5.1+ detect GitHub Actions OIDC and use Trusted Publishing.
+- Also removed the now-unused `NODE_AUTH_TOKEN: ''` override on the publish step — with the `.npmrc` cleaned up, it's redundant.
+
+### Changed
+
+- Supersedes the unpublished `1.2.3` (which reached the publish step but died on auth) — carries forward all prior changes.
+
+---
+
+## [1.2.3] — 2026-04-08 _(GitHub Release only — npm publish failed on auth, superseded by 1.2.4)_
+
+### Fixed
+
+- `.github/workflows/release.yml` — replaced the `npm install -g npm@latest` step with a direct tarball download via `curl`, bypassing the broken bundled npm in Node 22.22.2 (whose `@npmcli/arborist` is missing its transitive `promise-retry` dep, causing any `npm install` — including self-upgrade, with or without `--force` — to die with `MODULE_NOT_FOUND`). The workaround pulls `npm-11.5.1.tgz` directly from the registry and drops it into the toolcache's `node_modules` without invoking npm at all. Both `1.2.1` and `1.2.2` failed the `publish-npm` job for this reason and were never published to npm; `1.2.3` supersedes both.
+
+### Changed
+
+- Supersedes the unpublished `1.2.1` and `1.2.2` — carries forward all of their documentation, rename, and CI changes.
+
+---
+
+## [1.2.2] — 2026-04-08 _(GitHub Release only — npm publish failed, superseded by 1.2.3)_
+
+### Fixed
+
+- `.github/workflows/release.yml` — added `--force` to the `npm install -g npm@latest` step to work around a known self-upgrade bug where arborist unlinks its own transitive `promise-retry` mid-upgrade and fails with `MODULE_NOT_FOUND`. _(This workaround was insufficient — the bundled npm is broken at rest, not just during self-upgrade. Fixed properly in 1.2.3.)_
+
+### Changed
+
+- Supersedes the unpublished `1.2.1` — carries forward all of its documentation and rename changes.
+
+---
+
+## [1.2.1] — 2026-04-08 _(GitHub Release only — npm publish failed, superseded by 1.2.2)_
+
+### Changed
+
+- npm package renamed from `ba-toolkit` to scoped `@kudusov.takhir/ba-toolkit` to avoid name collisions in the public registry. The CLI binary name (`ba-toolkit`) is unchanged. Install commands are now `npx @kudusov.takhir/ba-toolkit <command>` or `npm install -g @kudusov.takhir/ba-toolkit`.
+- `README.md` and `README.ru.md` updated to use the scoped package name in all `npx` and `npm install -g` examples.
+
+---
+
 ## [1.2.0] — 2026-04-08
 
 ### Added
@@ -119,7 +165,11 @@ Versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
-[Unreleased]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.0...HEAD
+[Unreleased]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.4...HEAD
+[1.2.4]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.3...v1.2.4
+[1.2.3]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.2...v1.2.3
+[1.2.2]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.1...v1.2.2
+[1.2.1]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.0...v1.2.1
 [1.2.0]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.1.0...v1.2.0
 [1.1.0]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.0.0...v1.1.0
 [1.0.0]: https://github.com/TakhirKudusov/ba-toolkit/releases/tag/v1.0.0

package/README.md

@@ -224,11 +224,11 @@ Most pipeline skills follow this cycle:
 
 ```bash
 # One-shot project setup — zero install, just run:
-npx ba-toolkit init
-npx ba-toolkit install --for claude-code
+npx @kudusov.takhir/ba-toolkit init
+npx @kudusov.takhir/ba-toolkit install --for claude-code
 
 # Or install globally and reuse across projects:
-npm install -g ba-toolkit
+npm install -g @kudusov.takhir/ba-toolkit
 ba-toolkit install --for claude-code --global
 ```
 
@@ -397,7 +397,7 @@ ba-toolkit/
 │
 ├── bin/
 │   └── ba-toolkit.js              # 🧰 npm CLI entry point (zero runtime deps)
-├── package.json                   # 📦 npm package manifest (for `npx ba-toolkit`)
+├── package.json                   # 📦 npm package manifest (for `npx @kudusov.takhir/ba-toolkit`)
 ├── init.ps1                       # 🚀 Project initialiser (Windows PowerShell)
 ├── init.sh                        # 🚀 Project initialiser (macOS / Linux bash)
 ├── CHANGELOG.md                   # 📋 Version history

package/README.ru.md

@@ -225,11 +225,11 @@ BA Toolkit использует открытую **спецификацию Agen
 
 ```bash
 # Одноразовая настройка проекта — ничего не устанавливать, просто запустить:
-npx ba-toolkit init
-npx ba-toolkit install --for claude-code
+npx @kudusov.takhir/ba-toolkit init
+npx @kudusov.takhir/ba-toolkit install --for claude-code
 
 # Или установить глобально и переиспользовать для всех проектов:
-npm install -g ba-toolkit
+npm install -g @kudusov.takhir/ba-toolkit
 ba-toolkit install --for claude-code --global
 ```
 
@@ -401,7 +401,7 @@ ba-toolkit/
 │
 ├── bin/
 │   └── ba-toolkit.js              # 🧰 Точка входа npm CLI (нулевые рантайм-зависимости)
-├── package.json                   # 📦 Манифест npm-пакета (для `npx ba-toolkit`)
+├── package.json                   # 📦 Манифест npm-пакета (для `npx @kudusov.takhir/ba-toolkit`)
 ├── init.ps1                       # 🚀 Инициализатор проекта (Windows PowerShell)
 ├── init.sh                        # 🚀 Инициализатор проекта (macOS / Linux bash)
 ├── CHANGELOG.md                   # 📋 История версий

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kudusov.takhir/ba-toolkit",
-  "version": "1.2.0",
+  "version": "1.2.4",
   "description": "AI-powered Business Analyst pipeline — 21 skills from project brief to development handoff. Works with Claude Code, Codex CLI, Gemini CLI, Cursor, and Windsurf.",
   "keywords": [
     "business-analyst",