feat: compliance with AGENTS.md and standard project health files

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: CI
 
 on:
   push:
-    branches: [ main ]
+    branches: [main]
   pull_request:
-    branches: [ main ]
+    branches: [main]
 
 jobs:
   verify:
@@ -27,4 +27,3 @@ jobs:
         run: |
           compose-agentsmd --compose
           git diff --exit-code AGENTS.md
-

.gitignore

@@ -0,0 +1,6 @@
+node_modules/
+.DS_Store
+*.log
+.gemini/
+.claude/
+.threads.jsonl

.markdownlint.json

@@ -1,5 +1,5 @@
-{
-  "MD013": false,
-  "MD033": false,
-  "MD041": false
-}
+{
+  "MD013": false,
+  "MD033": false,
+  "MD041": false
+}

AGENTS.md

@@ -73,6 +73,11 @@ Source: github:metyatech/agent-rules@HEAD/rules/global/command-execution.md
 - Do not assume agent platform capabilities beyond what is available; fail explicitly when unavailable.
 - When building a CLI, follow standard conventions: --help/-h, --version/-V, stdin/stdout piping, --json output, --dry-run for mutations, deterministic exit codes, and JSON Schema config validation.
 
+## Codex-only: Commands blocked by policy (PowerShell)
+
+- `Remove-Item` (aliases: `rm`, `ri`, `del`, `erase`) → Use: `if ([IO.File]::Exists($p)) { [IO.File]::SetAttributes($p,[IO.FileAttributes]::Normal); [IO.File]::Delete($p) }`
+- `Remove-Item -Recurse` (aliases: `rmdir`, `rd`) → Use: `if ([IO.Directory]::Exists($d)) { [IO.File]::SetAttributes($d,[IO.FileAttributes]::Normal); foreach ($e in [IO.Directory]::EnumerateFileSystemEntries($d,'*',[IO.SearchOption]::AllDirectories)) { [IO.File]::SetAttributes($e,[IO.FileAttributes]::Normal) }; [IO.Directory]::Delete($d,$true) }`
+
 ## Post-change deployment
 
 After modifying code, check whether deployment steps beyond commit/push are needed before concluding.
@@ -284,3 +289,24 @@ Source: github:metyatech/agent-rules@HEAD/rules/global/writing-and-documentation
 ## Markdown linking
 
 - When a Markdown document links to a local file, use a path relative to the Markdown file.
+
+Source: github:metyatech/agent-rules@HEAD/rules/domains/node/module-system.md
+
+# Node module system (ESM)
+
+- Default to TypeScript (.ts/.tsx); use JavaScript only for tool-required config files.
+- Always set "type": "module" in package.json.
+- Prefer ESM with .js extensions for JavaScript config/scripts (e.g., next.config.js as ESM).
+
+Source: github:metyatech/agent-rules@HEAD/rules/domains/node/npm-packages.md
+
+# Node package publishing
+
+- For scoped npm packages, set publishConfig.access = "public".
+- Set files to constrain the published contents.
+- If a clean npm install is insufficient, use prepare (or equivalent) to build.
+
+## Verification
+
+- Use npm pack --dry-run to inspect the package contents.
+- Run npm test when tests exist.

CHANGELOG.md

@@ -1,8 +1,16 @@
-# Changelog
-
-All notable changes to this project will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [0.1.0] - Initial release
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2026-03-02
+
+### Added
+
+- Initial release of `@metyatech/skill-quality-workflow`.
+- `AGENTS.md` rules with `node` domain.
+- `package.json` with linting and verification scripts.
+- `.gitignore` for standard exclusions.
+- Standard health files: `CONTRIBUTING.md`, `SECURITY.md`, and `CHANGELOG.md`.

CONTRIBUTING.md

@@ -1,20 +1,20 @@
-# Contributing
-
-Thank you for your interest in contributing to `skill-quality-workflow`.
-
-## Development setup
-
-```bash
-git clone https://github.com/metyatech/skill-quality-workflow.git
-cd skill-quality-workflow
-```
-
-## Submitting changes
-
-1. Fork the repository and create a feature branch.
-2. Add or update tests for any changed behavior.
-3. Open a pull request with a clear description of the change.
-
-## Scope
-
-This skill covers **quality management procedures**. Please keep PRs scoped to testing strategies, defect fixing workflows, and root cause analysis.
+# Contributing
+
+Thank you for your interest in contributing to `skill-quality-workflow`.
+
+## Development setup
+
+```bash
+git clone https://github.com/metyatech/skill-quality-workflow.git
+cd skill-quality-workflow
+```
+
+## Submitting changes
+
+1. Fork the repository and create a feature branch.
+2. Add or update tests for any changed behavior.
+3. Open a pull request with a clear description of the change.
+
+## Scope
+
+This skill covers **quality management procedures**. Please keep PRs scoped to testing strategies, defect fixing workflows, and root cause analysis.

README.md

@@ -21,6 +21,12 @@ Provides guidance for:
 npx skills add metyatech/skill-quality-workflow --yes --global
 ```
 
+## Community and Support
+
+- [Contributing](CONTRIBUTING.md) — How to contribute to this project
+- [Security](SECURITY.md) — Security policy and reporting
+- [Changelog](CHANGELOG.md) — Notable changes to this project
+
 ## License
 
-MIT
+MIT - see [LICENSE](LICENSE) for details.

SECURITY.md

@@ -1,15 +1,15 @@
-# Security Policy
-
-## Supported Versions
-
-| Version | Supported |
-| ------- | --------- |
-| 0.1.x   | Yes       |
-
-## Reporting a Vulnerability
-
-Please report security vulnerabilities by opening a [GitHub Security Advisory](https://github.com/metyatech/skill-quality-workflow/security/advisories/new).
-
-Do not open a public issue for security vulnerabilities.
-
-We aim to respond within 5 business days and will coordinate a fix and disclosure timeline with you.
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported |
+| ------- | --------- |
+| 0.1.x   | Yes       |
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities by opening a [GitHub Security Advisory](https://github.com/metyatech/skill-quality-workflow/security/advisories/new).
+
+Do not open a public issue for security vulnerabilities.
+
+We aim to respond within 5 business days and will coordinate a fix and disclosure timeline with you.

agent-ruleset.json

@@ -1,5 +1,10 @@
-{
-  "source": "github:metyatech/agent-rules@HEAD",
-  "global": true,
-  "domains": []
-}
+{
+  "source": "github:metyatech/agent-rules@latest",
+  "domains": ["node"],
+  "extra": [],
+  "claude": {
+    "enabled": true,
+    "output": "CLAUDE.md"
+  },
+  "output": "AGENTS.md"
+}