bmad-method-test-architecture-enterprise 1.16.0 → 1.17.0

package/.claude-plugin/marketplace.json

@@ -12,7 +12,7 @@
       "name": "bmad-method-test-architecture-enterprise",
       "source": "./",
       "description": "Master Test Architect module for quality strategy, test automation, CI/CD quality gates, and structured testing education. Part of the BMad Method ecosystem.",
-      "version": "1.16.0",
+      "version": "1.17.0",
       "author": {
         "name": "Murat K Ozcan (TEA Creator) & Brian (BMad) Madison"
       },

package/.github/workflows/docs.yaml

@@ -25,14 +25,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
           cache: "npm"
 
       - name: Install root dependencies

package/.github/workflows/publish.yaml

@@ -43,19 +43,19 @@ jobs:
       - name: Generate GitHub App token
         id: app-token
         if: github.event_name == 'workflow_dispatch' && inputs.channel == 'latest'
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -150,6 +150,14 @@ jobs:
         run: |
           TAG="v$(node -p 'require("./package.json").version')"
           VERSION="${TAG#v}"
+          has_release_notes() {
+            awk '
+              /^[[:space:]]*$/ { next }
+              /^[[:space:]]*-{3,}[[:space:]]*$/ { next }
+              { found = 1 }
+              END { exit found ? 0 : 1 }
+            ' <<< "$1"
+          }
           BODY=$(awk -v ver="$VERSION" '
             /^## / {
               if (found) exit
@@ -158,7 +166,20 @@ jobs:
             }
             found { print }
           ' CHANGELOG.md)
-          if [ -z "$BODY" ]; then
+          if ! has_release_notes "$BODY"; then
+            BODY=$(awk '
+              /^##[[:space:]]*\[Unreleased\]/ { found=1; next }
+              /^## / {
+                if (found) exit
+                next
+              }
+              found { print }
+            ' CHANGELOG.md)
+            if has_release_notes "$BODY"; then
+              echo "::notice::No CHANGELOG.md entry for $TAG — using [Unreleased] notes"
+            fi
+          fi
+          if ! has_release_notes "$BODY"; then
             echo "::warning::No CHANGELOG.md entry for $TAG — falling back to auto-generated notes"
             gh release create "$TAG" --generate-notes
           else

package/.github/workflows/quality.yaml

@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -36,10 +36,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -54,10 +54,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -72,10 +72,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -93,10 +93,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -115,6 +115,3 @@ jobs:
 
       - name: Test agent compilation components
         run: npm run test:install
-
-      - name: Validate marketplace manifest
-        run: npm run validate:marketplace

package/AGENTS.md

@@ -0,0 +1,31 @@
+# Repository Guidelines
+
+## Project Shape
+
+- Core TEA module content lives in `src/`.
+- Public documentation lives in `docs/`; the Starlight site consumes it through `website/`.
+- GitHub Actions workflows live in `.github/workflows/`.
+- Release metadata must stay synchronized across `package.json`, `package-lock.json`, and `.claude-plugin/marketplace.json`.
+
+## Common Commands
+
+- `npm test`: full quality gate used before release.
+- `npm run format:check`: Prettier check.
+- `npm run lint`: ESLint check.
+- `npm run lint:md`: markdownlint check.
+- `npm run docs:validate-links`: docs link validation.
+- `npm run docs:build`: full docs and site build.
+- `npm run test:release-metadata`: package/lockfile/marketplace version sync check.
+
+## Changelog Discipline
+
+- For any user-facing change, documentation change, workflow/CI change, release behavior change, or bug fix, update `CHANGELOG.md` in the same PR.
+- Put unreleased work under the top `## [Unreleased]` section using Keep a Changelog headings such as `Added`, `Changed`, `Fixed`, `Deprecated`, or `Removed`.
+- When preparing or repairing a stable release, convert the relevant `[Unreleased]` notes into an exact version section like `## [1.16.0] - YYYY-MM-DD`.
+- Do not leave release-worthy changes only in GitHub auto-generated notes. The publish workflow can fall back to `[Unreleased]`, but an exact version entry is preferred for stable releases.
+
+## PR Notes
+
+- Mention validation commands actually run.
+- For docs-only changes, at minimum run `npm run docs:validate-links`, `npm run lint:md`, and `npm run format:check`.
+- For workflow or release changes, run `npm run format:check`, `npm run lint:md`, `npm run lint`, and `npm run test:release-metadata`.

package/CHANGELOG.md

@@ -5,6 +5,39 @@ All notable changes to the Test Architect (TEA) module will be documented in thi
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Changed
+
+- GitHub Actions workflow dependencies upgraded to Node 24-compatible major versions:
+  - `actions/checkout@v5`
+  - `actions/setup-node@v6`
+  - `actions/create-github-app-token@v3`
+- Publish releases now use `[Unreleased]` changelog notes before falling back to generated GitHub release notes when an exact version section is missing.
+
+---
+
+## [1.16.0] - 2026-05-08
+
+### Added
+
+- Claude Cowork marketplace plugin support.
+- TEA Phase 3 command examples in the overview docs, including direct slash commands and Codex skill invocations.
+- System-level and per-epic `test-design` usage examples in the TEA overview docs.
+
+### Changed
+
+- Catalog dependency metadata now uses `preceded-by` and `followed-by` column names.
+- TEA overview command guidance now distinguishes workflow names, TEA menu codes, slash commands, and Codex skills.
+
+### Fixed
+
+- Normalized `module-help.csv` to the documented 13-column schema.
+- Clarified the exact `/bmad:tea:ci` command path for Phase 3 CI setup.
+- Clarified the difference between Phase 3 system-level `test-design` and Phase 4 per-epic `test-design`.
+
+---
+
 ## [1.2.4] - 2026-02-22
 
 ### Changed
@@ -15,7 +48,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - Affected workflows: `atdd`, `automate`, `ci`, `framework`, `nfr-assess`, `teach-me-testing`, `test-design`, `test-review`, `trace`
   - Removed redundant `web_bundle: false` from workflow.yaml files
 
-## [Unreleased]
+## [Historical Unreleased Notes]
 
 ### Added
 

package/README.md

@@ -108,32 +108,12 @@ npx bmad-method install
 
 **Note:** TEA is automatically added to party mode after installation. Use `/party` to collaborate with TEA alongside other BMad agents.
 
-### Claude Cowork
-
-Claude.ai web and the Claude desktop chat have no access to your project files, so the `npx` installer's writes can't reach them. [Claude Cowork](https://www.claude.com/product/claude-code) does — it sandboxes your project in a VM and exposes a plugin manager. The `npx` installer still can't write into that sandbox, but Cowork accepts plugins via its marketplace API, which TEA's `.claude-plugin/marketplace.json` ships with.
-
-**Install** (two steps — register the marketplace, then install the plugin):
-
-```
-/plugin marketplace add bmad-code-org/bmad-method-test-architecture-enterprise
-/plugin install bmad-method-test-architecture-enterprise@bmad-method-test-architecture-enterprise
-```
-
-Restart the Cowork session, then `/bmad-method-test-architecture-enterprise:*` slash commands appear.
-
-**Update**: `/plugin marketplace update bmad-method-test-architecture-enterprise`
-
-**Uninstall**: `/plugin uninstall bmad-method-test-architecture-enterprise@bmad-method-test-architecture-enterprise`
-
-**Known issue**: Cowork's plugin reconciler currently has open bugs ([anthropics/claude-code#38429](https://github.com/anthropics/claude-code/issues/38429), [#39274](https://github.com/anthropics/claude-code/issues/39274)) that can purge third-party marketplace plugins on session sync. If your slash commands disappear, re-run the `/plugin install` line.
-
 ### Tool-specific invocation
 
-| Tool                            | Invocation style                 | Example                                                            |
-| ------------------------------- | -------------------------------- | ------------------------------------------------------------------ |
-| Claude Code / Cursor / Windsurf | Slash command                    | `/bmad:tea:automate`                                               |
-| Codex                           | `$` skill from `.agents/skills`  | `$bmad-tea` or `$bmad-tea-testarch-automate`                       |
-| Claude Cowork                   | Marketplace plugin slash command | `/bmad-method-test-architecture-enterprise:bmad-testarch-automate` |
+| Tool                            | Invocation style                | Example                                      |
+| ------------------------------- | ------------------------------- | -------------------------------------------- |
+| Claude Code / Cursor / Windsurf | Slash command                   | `/bmad:tea:automate`                         |
+| Codex                           | `$` skill from `.agents/skills` | `$bmad-tea` or `$bmad-tea-testarch-automate` |
 
 ## Quickstart
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "bmad-method-test-architecture-enterprise",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "description": "Master Test Architect for quality strategy, test automation, and release gates",
   "keywords": [
     "bmad",
@@ -37,14 +37,13 @@
     "release:minor": "gh workflow run publish.yaml -f channel=latest -f bump=minor",
     "release:next": "gh workflow run publish.yaml -f channel=next",
     "release:patch": "gh workflow run publish.yaml -f channel=latest -f bump=patch",
-    "test": "npm run test:schemas && npm run test:install && npm run test:knowledge && npm run test:release-metadata && npm run test:tea-workflow-descriptions && npm run validate:schemas && npm run validate:marketplace && npm run lint && npm run lint:md && npm run format:check",
+    "test": "npm run test:schemas && npm run test:install && npm run test:knowledge && npm run test:release-metadata && npm run test:tea-workflow-descriptions && npm run validate:schemas && npm run lint && npm run lint:md && npm run format:check",
     "test:coverage": "c8 npm test",
     "test:install": "node test/test-installation-components.js",
     "test:knowledge": "node test/test-knowledge-base.js",
     "test:release-metadata": "node test/test-release-metadata.js",
     "test:schemas": "node test/test-agent-schema.js",
     "test:tea-workflow-descriptions": "node tools/validate-tea-workflow-descriptions.js",
-    "validate:marketplace": "node tools/validate-marketplace.js --strict",
     "validate:schemas": "node tools/validate-agent-schema.js",
     "validate:tea-workflow-descriptions": "node tools/validate-tea-workflow-descriptions.js"
   },

package/tools/validate-marketplace.js

@@ -1,186 +0,0 @@
-'use strict';
-
-/**
- * Marketplace Drift Validator
- *
- * Verifies .claude-plugin/marketplace.json stays in sync with src/**\/SKILL.md.
- * The marketplace.json is what Claude Code (and Claude Cowork) consume when a
- * user runs `/plugin marketplace add bmad-code-org/bmad-method-test-architecture-enterprise` — every skill
- * shipped to other IDEs through the regular installer must also be reachable
- * through the marketplace, or Cowork users silently miss skills.
- *
- * Checks:
- *   - Every src/**\/SKILL.md path is declared in some plugin's `skills` array.
- *   - Every declared skill path resolves to an existing src/.../SKILL.md.
- *   - No skill path is declared by more than one plugin.
- *
- * Usage:
- *   node tools/validate-marketplace.js              human-readable report
- *   node tools/validate-marketplace.js --strict     exit 1 on any drift (CI)
- *   node tools/validate-marketplace.js --json       JSON output
- */
-
-const fs = require('node:fs');
-const path = require('node:path');
-
-const PROJECT_ROOT = path.resolve(__dirname, '..');
-const SRC_DIR = path.join(PROJECT_ROOT, 'src');
-const MARKETPLACE_PATH = path.join(PROJECT_ROOT, '.claude-plugin', 'marketplace.json');
-
-const args = new Set(process.argv.slice(2));
-const STRICT = args.has('--strict');
-const JSON_OUTPUT = args.has('--json');
-
-function findSkillPaths(dir, acc = []) {
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      findSkillPaths(full, acc);
-    } else if (entry.name === 'SKILL.md') {
-      // Normalize to forward slashes so the string-equal comparison against
-      // marketplace.json paths works on Windows (where path.relative uses '\').
-      const rel = path.relative(PROJECT_ROOT, path.dirname(full)).split(path.sep).join('/');
-      acc.push('./' + rel);
-    }
-  }
-  return acc;
-}
-
-function suggestPlugin(skillPath, plugins) {
-  // Score by shared path-segment depth (not raw character prefix), so a new
-  // module like ./src/cis-skills/foo doesn't get falsely suggested under
-  // bmad-pro-skills just because both share './src/'.
-  // Suggest only when the match goes beyond the './src/<family>/' boundary.
-  const skillSegments = skillPath.split('/');
-  let best = null;
-  let bestScore = 0;
-  for (const plugin of plugins) {
-    for (const declared of plugin.skills || []) {
-      const declaredSegments = declared.split('/');
-      let i = 0;
-      while (i < skillSegments.length && i < declaredSegments.length && skillSegments[i] === declaredSegments[i]) {
-        i++;
-      }
-      if (i > bestScore) {
-        bestScore = i;
-        best = plugin.name;
-      }
-    }
-  }
-  // Two skills in the same module family (e.g., both under ./src/core-skills/)
-  // share exactly 3 segments: '.', 'src', '<family>'. A skill in a brand-new
-  // family (e.g., ./src/cis-skills/) only shares 2 segments. Require >= 3
-  // so suggestions stay within the same family and don't leak across modules.
-  return bestScore >= 3 ? best : null;
-}
-
-function validate() {
-  if (!fs.existsSync(MARKETPLACE_PATH)) {
-    return { ok: false, fatal: `marketplace.json not found at ${MARKETPLACE_PATH}` };
-  }
-
-  let marketplace;
-  try {
-    marketplace = JSON.parse(fs.readFileSync(MARKETPLACE_PATH, 'utf8'));
-  } catch (error) {
-    return { ok: false, fatal: `marketplace.json is not valid JSON: ${error.message}` };
-  }
-
-  if (!fs.existsSync(SRC_DIR)) {
-    return { ok: false, fatal: `src directory not found at ${SRC_DIR}` };
-  }
-
-  const plugins = Array.isArray(marketplace.plugins) ? marketplace.plugins : [];
-  const declaredBy = new Map(); // skillPath -> [pluginName]
-  for (const plugin of plugins) {
-    const skills = Array.isArray(plugin.skills) ? plugin.skills : [];
-    for (const skillPath of skills) {
-      if (!declaredBy.has(skillPath)) declaredBy.set(skillPath, []);
-      declaredBy.get(skillPath).push(plugin.name);
-    }
-  }
-
-  const onDisk = new Set(findSkillPaths(SRC_DIR));
-
-  const missing = []; // SKILL.md exists in src/ but no plugin declares it
-  for (const skillPath of [...onDisk].sort()) {
-    if (!declaredBy.has(skillPath)) {
-      missing.push({ path: skillPath, suggestedPlugin: suggestPlugin(skillPath, plugins) });
-    }
-  }
-
-  const orphans = []; // plugin declares a path that has no SKILL.md
-  for (const skillPath of declaredBy.keys()) {
-    if (!onDisk.has(skillPath)) {
-      orphans.push({ path: skillPath, declaredBy: declaredBy.get(skillPath) });
-    }
-  }
-
-  const duplicates = []; // same path declared more than once (within or across plugins)
-  for (const [skillPath, names] of declaredBy) {
-    if (names.length > 1) {
-      const uniquePlugins = [...new Set(names)];
-      duplicates.push({
-        path: skillPath,
-        declaredBy: uniquePlugins,
-        withinSamePlugin: uniquePlugins.length === 1,
-      });
-    }
-  }
-
-  return {
-    ok: missing.length === 0 && orphans.length === 0 && duplicates.length === 0,
-    totals: { onDisk: onDisk.size, declared: declaredBy.size, plugins: plugins.length },
-    missing,
-    orphans,
-    duplicates,
-  };
-}
-
-function reportHuman(result) {
-  if (result.fatal) {
-    console.error(`✗ ${result.fatal}`);
-    return;
-  }
-  const { totals, missing, orphans, duplicates, ok } = result;
-  console.log(`Marketplace coverage: ${totals.declared} declared / ${totals.onDisk} on disk across ${totals.plugins} plugin(s)`);
-
-  if (missing.length > 0) {
-    console.log(`\n✗ ${missing.length} skill(s) on disk are not declared in marketplace.json:`);
-    for (const m of missing) {
-      const hint = m.suggestedPlugin ? ` → likely belongs in "${m.suggestedPlugin}"` : '';
-      console.log(`    ${m.path}${hint}`);
-    }
-  }
-
-  if (orphans.length > 0) {
-    console.log(`\n✗ ${orphans.length} declared skill path(s) do not exist on disk:`);
-    for (const o of orphans) {
-      console.log(`    ${o.path}  (declared by: ${o.declaredBy.join(', ')})`);
-    }
-  }
-
-  if (duplicates.length > 0) {
-    console.log(`\n✗ ${duplicates.length} skill path(s) declared more than once:`);
-    for (const d of duplicates) {
-      const where = d.withinSamePlugin
-        ? `listed multiple times in "${d.declaredBy[0]}"`
-        : `in multiple plugins: ${d.declaredBy.join(', ')}`;
-      console.log(`    ${d.path}  (${where})`);
-    }
-  }
-
-  if (ok) console.log('\n✓ marketplace.json is in sync with src/');
-}
-
-const result = validate();
-
-if (JSON_OUTPUT) {
-  console.log(JSON.stringify(result, null, 2));
-} else {
-  reportHuman(result);
-}
-
-if (!result.ok && (STRICT || result.fatal)) {
-  process.exit(1);
-}