@ghostbyte/agent-docs-kit 4.0.2 → 5.0.0

package/site/app.js

@@ -0,0 +1,121 @@
+const workflowTabs = [...document.querySelectorAll("[data-tab]")];
+const workflowPanels = [...document.querySelectorAll("[data-panel]")];
+
+function selectWorkflow(name, focus = false) {
+  workflowTabs.forEach((tab) => {
+    const selected = tab.dataset.tab === name;
+    tab.setAttribute("aria-selected", String(selected));
+    tab.tabIndex = selected ? 0 : -1;
+    if (selected && focus) tab.focus();
+  });
+  workflowPanels.forEach((panel) => { panel.hidden = panel.dataset.panel !== name; });
+}
+
+workflowTabs.forEach((tab, index) => {
+  tab.addEventListener("click", () => selectWorkflow(tab.dataset.tab));
+  tab.addEventListener("keydown", (event) => {
+    if (!["ArrowLeft", "ArrowRight"].includes(event.key)) return;
+    event.preventDefault();
+    const offset = event.key === "ArrowRight" ? 1 : -1;
+    const next = workflowTabs[(index + offset + workflowTabs.length) % workflowTabs.length];
+    selectWorkflow(next.dataset.tab, true);
+  });
+});
+
+const codeTabs = [...document.querySelectorAll("[data-code-tab]")];
+const codePanels = [...document.querySelectorAll("[data-code-panel]")];
+
+function selectCodeTab(name, focus = false) {
+  codeTabs.forEach((tab) => {
+    const selected = tab.dataset.codeTab === name;
+    tab.classList.toggle("is-active", selected);
+    tab.setAttribute("aria-selected", String(selected));
+    tab.tabIndex = selected ? 0 : -1;
+    if (selected && focus) tab.focus();
+  });
+  codePanels.forEach((panel) => { panel.hidden = panel.dataset.codePanel !== name; });
+}
+
+codeTabs.forEach((tab, index) => {
+  tab.addEventListener("click", () => selectCodeTab(tab.dataset.codeTab));
+  tab.addEventListener("keydown", (event) => {
+    if (!["ArrowLeft", "ArrowRight", "Home", "End"].includes(event.key)) return;
+    event.preventDefault();
+    let nextIndex = event.key === "Home" ? 0 : event.key === "End" ? codeTabs.length - 1 : index + (event.key === "ArrowRight" ? 1 : -1);
+    nextIndex = (nextIndex + codeTabs.length) % codeTabs.length;
+    selectCodeTab(codeTabs[nextIndex].dataset.codeTab, true);
+  });
+});
+
+const commandPrefixes = {
+  npx: "npx @ghostbyte/agent-docs-kit@latest",
+  global: "agent-docs"
+};
+
+const commandExamples = {
+  setup: ["list documentation", "documentation guide system-documentation", "audit documentation --strict"],
+  security: ["list security", "security worksheet api-layer --style learning"],
+  engineering: ["list engineering", "engineering worksheet testing-types"],
+  skill: ["skill install --target project", "", "# Creates:", "# .agents/skills/manage-project-quality"]
+};
+
+const commandModeHelp = {
+  npx: "No installation required. npx downloads and runs the published package when you invoke it.",
+  global: "Use the shorter agent-docs command after installing the package globally. Check its version periodically for updates."
+};
+
+const commandModeButtons = [...document.querySelectorAll("[data-command-mode]")];
+const commandModeHelpElement = document.querySelector("[data-command-mode-help]");
+
+function formatCommand(suffix = "", mode = "npx") {
+  return `${commandPrefixes[mode]}${suffix ? ` ${suffix}` : ""}`;
+}
+
+function savedCommandMode() {
+  try {
+    const saved = window.localStorage.getItem("agent-docs-command-mode");
+    return saved === "global" ? "global" : "npx";
+  } catch {
+    return "npx";
+  }
+}
+
+function selectCommandMode(mode) {
+  commandModeButtons.forEach((button) => {
+    button.setAttribute("aria-pressed", String(button.dataset.commandMode === mode));
+  });
+
+  document.querySelectorAll("[data-command]").forEach((element) => {
+    element.textContent = formatCommand(element.dataset.command, mode);
+  });
+
+  document.querySelectorAll("[data-command-example]").forEach((element) => {
+    const lines = commandExamples[element.dataset.commandExample] ?? [];
+    element.textContent = lines.map((line) => line && !line.startsWith("#") ? formatCommand(line, mode) : line).join("\n");
+  });
+
+  document.querySelectorAll("[data-copy-command]").forEach((button) => {
+    button.dataset.copy = formatCommand(button.dataset.copyCommand, mode);
+  });
+
+  if (commandModeHelpElement) commandModeHelpElement.textContent = commandModeHelp[mode];
+  try { window.localStorage.setItem("agent-docs-command-mode", mode); } catch {}
+}
+
+commandModeButtons.forEach((button) => {
+  button.addEventListener("click", () => selectCommandMode(button.dataset.commandMode));
+});
+selectCommandMode(savedCommandMode());
+
+document.querySelectorAll("[data-copy], [data-copy-command]").forEach((button) => {
+  button.addEventListener("click", async () => {
+    const previous = button.textContent;
+    try {
+      await navigator.clipboard.writeText(button.dataset.copy.replaceAll("\\n", "\n"));
+      button.textContent = "Copied";
+    } catch {
+      button.textContent = "Copy failed";
+    }
+    window.setTimeout(() => { button.textContent = previous; }, 1600);
+  });
+});

package/site/index.html

@@ -0,0 +1,346 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <meta name="description" content="Documentation governance, evidence-based security audits, and engineering-quality reviews in one CLI and one progressive skill.">
+  <meta name="referrer" content="strict-origin-when-cross-origin">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'none'; object-src 'none'; base-uri 'self'; form-action 'none'">
+  <title>Agent Docs & Quality Kit</title>
+  <link rel="stylesheet" href="styles.css">
+  <script src="app.js" defer></script>
+</head>
+<body>
+  <a class="skip-link" href="#main">Skip to content</a>
+
+  <header class="hero" id="top">
+    <nav class="nav shell" aria-label="Primary navigation">
+      <a class="brand" href="#top" aria-label="Agent Docs and Quality Kit home">
+        <span class="brand-mark" aria-hidden="true">AQ</span>
+        <span>Agent Docs &amp; Quality</span>
+      </a>
+      <div class="nav-links">
+        <a href="#workflows">Workflows</a>
+        <a href="#how-it-works">How it works</a>
+        <a href="#commands">Commands</a>
+        <a class="nav-install" href="#quick-start">Install guide</a>
+      </div>
+    </nav>
+
+    <div class="hero-layout shell">
+      <div class="hero-copy">
+        <div class="status-pill"><i aria-hidden="true"></i> Quality infrastructure for human + AI teams</div>
+        <h1>One project memory.<br><em>Three quality lenses.</em></h1>
+        <p class="hero-lead">Build documentation that stays useful, assess security controls with real evidence, and improve engineering practice—without loading an entire reference library into every session.</p>
+        <div class="actions">
+          <a class="button primary" href="#quick-start">Start locally <span aria-hidden="true">→</span></a>
+          <a class="button secondary" href="#workflows">Explore the workflows</a>
+        </div>
+        <dl class="hero-facts" aria-label="Toolkit facts">
+          <div><dt>3</dt><dd>Focused workflows</dd></div>
+          <div><dt>33</dt><dd>Review areas</dd></div>
+          <div><dt>0</dt><dd>Install-time actions</dd></div>
+        </dl>
+      </div>
+
+      <div class="console" aria-label="Example Agent Docs command line session">
+        <div class="console-bar"><span></span><span></span><span></span><b>agent-docs — project</b></div>
+        <div class="console-body">
+          <p><span class="prompt">$</span> <span data-command>npx @ghostbyte/agent-docs-kit@latest</span></p>
+          <p class="console-title">Agent Docs &amp; Quality Kit</p>
+          <ol>
+            <li><i>01</i> Set up documentation</li>
+            <li><i>02</i> Audit documentation</li>
+            <li class="active"><i>03</i> Start security audit <b>selected</b></li>
+            <li><i>04</i> Start engineering review</li>
+            <li><i>05</i> Install project skill</li>
+            <li><i>06</i> Validate package</li>
+            <li><i>07</i> Open documentation website</li>
+          </ol>
+          <p class="console-result"><span>✓</span> Scope selected: API Layer<br><span>→</span> Report starts as <strong>Unverified</strong></p>
+        </div>
+      </div>
+    </div>
+  </header>
+
+  <main id="main">
+    <section class="principle-strip" aria-label="Core principles">
+      <div class="shell">
+        <p><span>Evidence over assumptions</span></p>
+        <p><span>Explicit actions only</span></p>
+        <p><span>Context loaded on demand</span></p>
+        <p><span>Human-readable outputs</span></p>
+      </div>
+    </section>
+
+    <section class="section shell" id="workflows">
+      <header class="section-heading split-heading">
+        <div><p class="eyebrow">Three jobs, clear boundaries</p><h2>Choose the quality lens that matches the work.</h2></div>
+        <p>Documentation, security, and engineering overlap, but they do not mean the same thing. The kit keeps their evidence and consequences separate.</p>
+      </header>
+
+      <div class="workflow-tabs" role="tablist" aria-label="Quality workflows">
+        <button id="tab-documentation" role="tab" aria-selected="true" aria-controls="panel-documentation" tabindex="0" data-tab="documentation"><span>01</span> Documentation</button>
+        <button id="tab-security" role="tab" aria-selected="false" aria-controls="panel-security" tabindex="-1" data-tab="security"><span>02</span> Security</button>
+        <button id="tab-engineering" role="tab" aria-selected="false" aria-controls="panel-engineering" tabindex="-1" data-tab="engineering"><span>03</span> Engineering</button>
+      </div>
+
+      <div class="workflow-panel" id="panel-documentation" role="tabpanel" aria-labelledby="tab-documentation" data-panel="documentation">
+        <div class="workflow-intro">
+          <p class="workflow-number">01 / Documentation governance</p>
+          <h3>Make the repository explain itself.</h3>
+          <p>Use seven canonical guidance areas to preserve project scope, architecture, decisions, operational knowledge, test evidence, proposals, and history in a structure people and agents can navigate.</p>
+          <a href="docs/PURPOSE.md">Read the purpose and boundaries <span aria-hidden="true">→</span></a>
+        </div>
+        <div class="workflow-details">
+          <article><h4>Use it when</h4><ul><li>Starting or inheriting a project</li><li>Important decisions live only in chat</li><li>Documentation conflicts with the code</li><li>Operations depend on tribal knowledge</li></ul></article>
+          <article><h4>What it checks</h4><ul><li>Missing or duplicate sources of truth</li><li>Scope and architecture drift</li><li>Broken navigation and stale records</li><li>Undocumented setup and recovery paths</li></ul></article>
+          <article class="result-card"><h4>Document states</h4><div class="status-grid doc-status"><span>Current</span><span>Needs update</span><span>Reference</span><span>Archived</span></div><p>Documentation describes governance. Hooks and CI are what make a policy technically enforceable.</p></article>
+        </div>
+      </div>
+
+      <div class="workflow-panel" id="panel-security" role="tabpanel" aria-labelledby="tab-security" data-panel="security" hidden>
+        <div class="workflow-intro">
+          <p class="workflow-number">02 / Security assurance</p>
+          <h3>Turn controls into verifiable evidence.</h3>
+          <p>Review security across 12 lifecycle phases, from design and local development through release, monitoring, and ongoing operations. Missing evidence is never treated as a pass.</p>
+          <a href="docs/SECURITY_MODEL.md">Review the security model <span aria-hidden="true">→</span></a>
+        </div>
+        <div class="workflow-details">
+          <article><h4>Use it when</h4><ul><li>Designing a sensitive feature</li><li>Preparing an API or cloud deployment</li><li>Running a pre-release security gate</li><li>Reviewing post-release readiness</li></ul></article>
+          <article><h4>Safety boundary</h4><ul><li>Passive repository review can start locally</li><li>Active testing needs explicit authorization</li><li>Staging is preferred over production</li><li>Secrets are redacted from reports</li></ul></article>
+          <article class="result-card"><h4>Security verdicts</h4><div class="status-grid security-status"><span>Pass</span><span>Fail</span><span>Unverified</span><span>N/A</span></div><p>Critical and High failures block release by default unless an accountable owner records a time-bounded exception.</p></article>
+        </div>
+      </div>
+
+      <div class="workflow-panel" id="panel-engineering" role="tabpanel" aria-labelledby="tab-engineering" data-panel="engineering" hidden>
+        <div class="workflow-intro">
+          <p class="workflow-number">03 / Engineering review</p>
+          <h3>Improve the system without importing needless complexity.</h3>
+          <p>Assess maintainability, reliability, performance, testing, data modeling, operations, and cost using recommendations grounded in the project’s real scale and constraints.</p>
+          <a href="docs/ARCHITECTURE.md">Explore the toolkit architecture <span aria-hidden="true">→</span></a>
+        </div>
+        <div class="workflow-details">
+          <article><h4>Use it when</h4><ul><li>Reviewing a design or pull request</li><li>Investigating slow or fragile behavior</li><li>Planning testing and observability</li><li>Evaluating infrastructure cost</li></ul></article>
+          <article><h4>Fourteen topic areas</h4><ul><li>Queries, networking, and rate limits</li><li>Production debugging and code review</li><li>Reliability, observability, and deployment safety</li><li>API compatibility, cost, queues, and capacity</li></ul></article>
+          <article class="result-card"><h4>Engineering outcomes</h4><div class="status-grid engineering-status"><span>Applied</span><span>Partial</span><span>Recommended</span><span>Unverified</span><span>N/A</span></div><p>Recommendations are normally advisory. Security vulnerabilities and correctness defects are reported separately.</p></article>
+        </div>
+      </div>
+    </section>
+
+    <section class="section process-section" id="how-it-works">
+      <div class="shell">
+        <header class="section-heading"><p class="eyebrow">From request to useful record</p><h2>A review process you can inspect.</h2><p>Every workflow follows the same evidence discipline while producing an outcome appropriate to its purpose.</p></header>
+        <ol class="process-list">
+          <li><span>01</span><div><h3>Inspect context</h3><p>Read repository instructions, identify the technology and locate the files that can actually answer the question.</p></div></li>
+          <li><span>02</span><div><h3>Select scope</h3><p>Choose one workflow, then a specific documentation area, security phase, or engineering topic. Define exclusions before the review grows.</p></div></li>
+          <li><span>03</span><div><h3>Collect evidence</h3><p>Use code paths, configuration, tests, command output, or authorized external settings. Separate facts from inference.</p></div></li>
+          <li><span>04</span><div><h3>Record the result</h3><p>Write status, impact, remediation, owner, verification step, and limitations into a durable project report.</p></div></li>
+        </ol>
+      </div>
+    </section>
+
+    <section class="section shell architecture-section">
+      <header class="section-heading split-heading">
+        <div><p class="eyebrow">Token-aware by design</p><h2>Load the relevant reference, not the whole library.</h2></div>
+        <p>The unified skill acts as a router. It opens shared evidence rules plus only the documentation area, security phase, or engineering topic required for the task.</p>
+      </header>
+      <div class="routing-diagram" aria-label="Progressive skill loading flow">
+        <div class="route-node request"><small>Your request</small><strong>“Review my API security”</strong></div>
+        <span class="route-arrow" aria-hidden="true">→</span>
+        <div class="route-node router"><small>Unified skill</small><strong>Classify + scope</strong><code>manage-project-quality</code></div>
+        <span class="route-arrow" aria-hidden="true">→</span>
+        <div class="route-stack">
+          <div class="route-node selected"><small>Loaded</small><strong>Security protocol</strong></div>
+          <div class="route-node selected"><small>Loaded</small><strong>04 · API Layer</strong></div>
+          <div class="route-node muted"><small>Not loaded</small><strong>19 unrelated references</strong></div>
+        </div>
+        <span class="route-arrow" aria-hidden="true">→</span>
+        <div class="route-node report"><small>Durable output</small><strong>Evidence-based report</strong><code>docs/04-testing/…</code></div>
+      </div>
+    </section>
+
+    <section class="section command-section" id="commands">
+      <div class="shell command-layout">
+        <div>
+          <p class="eyebrow">Interactive or automatable</p>
+          <h2>Use the menu once. Use direct commands everywhere else.</h2>
+          <p>The no-argument command guides first-time users. Choose how you run the kit and every example on this page will use the right command.</p>
+          <div class="command-mode-card" aria-labelledby="command-mode-title">
+            <strong id="command-mode-title">How are you running it?</strong>
+            <div class="command-mode-switch" role="group" aria-label="Command format">
+              <button type="button" aria-pressed="true" data-command-mode="npx"><span>No install</span><small>Use npx</small></button>
+              <button type="button" aria-pressed="false" data-command-mode="global"><span>Installed globally</span><small>Use agent-docs</small></button>
+            </div>
+            <p class="command-mode-help" data-command-mode-help>No installation required. npx downloads and runs the published package when you invoke it.</p>
+          </div>
+          <div class="command-notes">
+            <p><span>✓</span><strong>Safe preview</strong><small>`--dry-run` reports intended writes.</small></p>
+            <p><span>✓</span><strong>Existing files protected</strong><small>Scaffolds skip existing files; reports and templates choose a new numbered path.</small></p>
+            <p><span>✓</span><strong>No install hook</strong><small>`npm install` does not configure the project.</small></p>
+          </div>
+        </div>
+        <div class="code-window">
+          <div class="code-tabs" role="tablist" aria-label="Command examples">
+            <button id="code-tab-setup" class="is-active" role="tab" aria-selected="true" aria-controls="code-panel-setup" tabindex="0" data-code-tab="setup">Documentation</button>
+            <button id="code-tab-security" role="tab" aria-selected="false" aria-controls="code-panel-security" tabindex="-1" data-code-tab="security">Security</button>
+            <button id="code-tab-engineering" role="tab" aria-selected="false" aria-controls="code-panel-engineering" tabindex="-1" data-code-tab="engineering">Engineering</button>
+            <button id="code-tab-skill" role="tab" aria-selected="false" aria-controls="code-panel-skill" tabindex="-1" data-code-tab="skill">Skill</button>
+          </div>
+          <div id="code-panel-setup" class="code-panel" role="tabpanel" aria-labelledby="code-tab-setup" data-code-panel="setup"><pre><code data-command-example="setup">npx @ghostbyte/agent-docs-kit@latest list documentation
+
+npx @ghostbyte/agent-docs-kit@latest documentation guide system-documentation
+
+npx @ghostbyte/agent-docs-kit@latest audit documentation --strict</code></pre><button class="copy-button" data-copy-command="list documentation">Copy</button></div>
+          <div id="code-panel-security" class="code-panel" role="tabpanel" aria-labelledby="code-tab-security" data-code-panel="security" hidden><pre><code data-command-example="security">npx @ghostbyte/agent-docs-kit@latest list security
+
+npx @ghostbyte/agent-docs-kit@latest security worksheet api-layer --style learning</code></pre><button class="copy-button" data-copy-command="security worksheet api-layer --style learning">Copy</button></div>
+          <div id="code-panel-engineering" class="code-panel" role="tabpanel" aria-labelledby="code-tab-engineering" data-code-panel="engineering" hidden><pre><code data-command-example="engineering">npx @ghostbyte/agent-docs-kit@latest list engineering
+
+npx @ghostbyte/agent-docs-kit@latest engineering worksheet testing-types</code></pre><button class="copy-button" data-copy-command="engineering worksheet testing-types">Copy</button></div>
+          <div id="code-panel-skill" class="code-panel" role="tabpanel" aria-labelledby="code-tab-skill" data-code-panel="skill" hidden><pre><code data-command-example="skill">npx @ghostbyte/agent-docs-kit@latest skill install --target project
+
+# Creates:
+# .agents/skills/manage-project-quality</code></pre><button class="copy-button" data-copy-command="skill install --target project">Copy</button></div>
+        </div>
+      </div>
+    </section>
+
+    <section class="section quick-start" id="quick-start">
+      <div class="shell">
+        <header class="section-heading"><p class="eyebrow">Installation guide</p><h2>From a clean terminal to your first safe run.</h2><p>Start with Node.js 22 or newer, then choose between running on demand with npx or installing the shorter global command.</p></header>
+
+        <div class="prerequisite-check">
+          <div><span>Step 01</span><h3>Check Node.js and npm</h3><p>The CLI requires Node.js 22 or newer. npm is included with standard Node.js installations.</p></div>
+          <div class="install-code"><code>node --version
+npm --version</code><button class="copy-button light" data-copy="node --version\nnpm --version">Copy</button></div>
+        </div>
+
+        <div class="install-paths">
+          <article class="recommended">
+            <header><span>Path A · Recommended</span><h3>Run without installing</h3><p>Use the published package directly. Nothing is added to the project or installed globally.</p></header>
+            <ol>
+              <li><div><strong>Confirm the CLI is available</strong><small>This fetches the current published version and prints its help.</small></div><div class="install-code"><code>npx @ghostbyte/agent-docs-kit@latest --help</code><button class="copy-button light" data-copy="npx @ghostbyte/agent-docs-kit@latest --help">Copy</button></div></li>
+              <li><div><strong>Preview the documentation setup</strong><small>The dry run reports intended writes without changing files.</small></div><div class="install-code"><code>npx @ghostbyte/agent-docs-kit@latest setup --dry-run</code><button class="copy-button light" data-copy="npx @ghostbyte/agent-docs-kit@latest setup --dry-run">Copy</button></div></li>
+              <li><div><strong>Open the guided menu</strong><small>Choose documentation, security, engineering, skill installation, or validation.</small></div><div class="install-code"><code>npx @ghostbyte/agent-docs-kit@latest</code><button class="copy-button light" data-copy="npx @ghostbyte/agent-docs-kit@latest">Copy</button></div></li>
+            </ol>
+          </article>
+
+          <article>
+            <header><span>Path B · Repeated use</span><h3>Install the global command</h3><p>Install once on your workstation, then use the shorter <code>agent-docs</code> command in any project.</p></header>
+            <ol>
+              <li><div><strong>Install the latest version</strong><small>Installation is inert and does not configure the current project.</small></div><div class="install-code"><code>npm install --global @ghostbyte/agent-docs-kit@latest</code><button class="copy-button light" data-copy="npm install --global @ghostbyte/agent-docs-kit@latest">Copy</button></div></li>
+              <li><div><strong>Verify the installation</strong><small>The installed version should print without an error.</small></div><div class="install-code"><code>agent-docs --version
+agent-docs --help</code><button class="copy-button light" data-copy="agent-docs --version\nagent-docs --help">Copy</button></div></li>
+              <li><div><strong>Run a safe preview</strong><small>After installation, every command can begin with <code>agent-docs</code>.</small></div><div class="install-code"><code>agent-docs setup --dry-run</code><button class="copy-button light" data-copy="agent-docs setup --dry-run">Copy</button></div></li>
+            </ol>
+          </article>
+        </div>
+
+        <div class="installation-maintenance">
+          <div><span>Step 03</span><h3>Check for a newer global version</h3><p>Compare the installed and published versions. Updating is always explicit; the CLI never updates itself.</p></div>
+          <div><div class="install-code"><code>agent-docs --version
+npm view @ghostbyte/agent-docs-kit version</code><button class="copy-button light" data-copy="agent-docs --version\nnpm view @ghostbyte/agent-docs-kit version">Compare</button></div><div class="install-code"><code>npm install --global @ghostbyte/agent-docs-kit@latest</code><button class="copy-button light" data-copy="npm install --global @ghostbyte/agent-docs-kit@latest">Update</button></div></div>
+        </div>
+
+        <div class="other-installation">
+          <details><summary><span>Team projects</span> Install as a project dependency</summary><div><p>Record the package version in the project lockfile. Run its executable through npx so npm resolves the local binary.</p><div class="install-code"><code>npm install --save-dev @ghostbyte/agent-docs-kit
+npx agent-docs --help</code><button class="copy-button light" data-copy="npm install --save-dev @ghostbyte/agent-docs-kit\nnpx agent-docs --help">Copy</button></div></div></details>
+        </div>
+
+        <aside class="install-troubleshooting"><div><span>Troubleshooting</span><h3>If <code>agent-docs</code> is not recognized</h3></div><p>Close and reopen the terminal after a global installation, then run <code>npm config get prefix</code> and confirm npm’s global executable directory is on your PATH. In Windows PowerShell, use <code>npm.cmd</code> or <code>npx.cmd</code> if script execution blocks the corresponding PowerShell shim.</p></aside>
+      </div>
+    </section>
+
+    <section class="section library-section" id="contents">
+      <div class="shell">
+        <header class="section-heading split-heading"><div><p class="eyebrow">Inside the package</p><h2>A working library, not just a command wrapper.</h2></div><p>The npm archive carries the CLI, canonical quality content, report assets, documentation, and a self-contained Codex skill. The same catalog drives both command-line and agent workflows.</p></header>
+
+        <div class="package-parts">
+          <article><span>CLI</span><h3>Command interface</h3><p>Guided menu, direct commands, safe file operations, project setup, report generation, validation, and diagnostics.</p></article>
+          <article><span>CONTENT</span><h3>Canonical library</h3><p>Seven documentation areas, 12 security phases, and 14 engineering topics share one versioned catalog and focused reference model.</p></article>
+          <article><span>SKILL</span><h3>Agent workflow</h3><p>A concise router, workflow protocols, evidence rules, progressive references, report assets, and a structural report checker.</p></article>
+          <article><span>OUTPUT</span><h3>Project records</h3><p>A maintainable docs hierarchy plus dated security audits, engineering reviews, documentation audits, and supporting evidence.</p></article>
+        </div>
+
+        <div class="catalog-layout">
+          <article class="catalog-card documentation-catalog">
+            <header><span>Documentation structure</span><strong>7 areas</strong></header>
+            <ol><li><b>01</b> System Documentation</li><li><b>02</b> Project Governance</li><li><b>03</b> Development Records</li><li><b>04</b> Testing &amp; Evidence</li><li><b>05</b> Operations &amp; Runbooks</li><li><b>06</b> Future Proposals</li><li><b>07</b> Archive Governance</li></ol>
+          </article>
+          <article class="catalog-card security-catalog">
+            <header><span>Security assurance</span><strong>12 phases</strong></header>
+            <ol><li><b>01</b> Design &amp; Architecture</li><li><b>02</b> Local Development</li><li><b>03</b> Database &amp; Backend</li><li><b>04</b> API Layer</li><li><b>05</b> Frontend &amp; UI</li><li><b>06</b> Application Security Testing</li><li><b>07</b> CI/CD &amp; Release Engineering</li><li><b>08</b> Cloud Infrastructure</li><li><b>09</b> Edge, CDN &amp; DNS</li><li><b>10</b> Release &amp; Rollout</li><li><b>11</b> Monitoring &amp; Incident Response</li><li><b>12</b> Ongoing Operations</li></ol>
+          </article>
+          <article class="catalog-card engineering-catalog">
+            <header><span>Engineering review</span><strong>14 topics</strong></header>
+            <ol><li><b>01</b> Query Performance</li><li><b>02</b> Networking Fundamentals</li><li><b>03</b> Rate Limiting Algorithms</li><li><b>04</b> Production Debugging</li><li><b>05</b> Code Review Practices</li><li><b>06</b> Data Modeling</li><li><b>07</b> Cloud Cost Saving</li><li><b>08</b> Testing Types</li><li><b>09</b> Message Queues</li><li><b>10</b> API Design &amp; Compatibility</li><li><b>11</b> Reliability, SLOs &amp; Error Budgets</li><li><b>12</b> Observability &amp; Telemetry</li><li><b>13</b> Deployment &amp; Change Safety</li><li><b>14</b> Capacity &amp; Concurrency</li></ol>
+          </article>
+        </div>
+
+        <div class="skill-detail">
+          <div><p class="eyebrow">What the installed skill does</p><h3><code>$manage-project-quality</code></h3><p>The skill classifies the request, establishes scope and safety boundaries, loads only the required references, inspects repository evidence, applies the correct status model, and produces a durable result.</p></div>
+          <ol><li><span>1</span>Route to documentation, security, or engineering</li><li><span>2</span>Select standard or learning interaction style</li><li><span>3</span>Load shared evidence rules plus one relevant reference</li><li><span>4</span>Inspect files without guessing unavailable facts</li><li><span>5</span>Write findings, remediation, verification, and limitations</li></ol>
+        </div>
+      </div>
+    </section>
+
+    <section class="section shell trust-section">
+      <header class="section-heading"><p class="eyebrow">Designed for controlled adoption</p><h2>Useful automation without hidden authority.</h2></header>
+      <div class="trust-grid">
+        <article><span aria-hidden="true">◇</span><h3>Inert installation</h3><p>No preinstall, install, or postinstall lifecycle script changes your repository.</p></article>
+        <article><span aria-hidden="true">◎</span><h3>Evidence-first status</h3><p>Reports begin as Unverified. A generated checklist is not proof that a control passes.</p></article>
+        <article><span aria-hidden="true">⌁</span><h3>Bounded security work</h3><p>Active tests require explicit target authorization and should prefer staging over production.</p></article>
+        <article><span aria-hidden="true">↺</span><h3>Repeatable records</h3><p>Reports live with the project so findings, decisions, and verification survive the session.</p></article>
+      </div>
+    </section>
+
+    <section class="section shell reference-section" id="command-reference">
+      <header class="section-heading split-heading">
+        <div><p class="eyebrow">Complete CLI reference</p><h2>Know what every command does before you run it.</h2></div>
+        <p>Commands marked “writes” create an owned scaffold or record. Scaffolds skip existing files; reports and templates select a collision-safe numbered filename. Read-only commands inspect or print information without changing the target project.</p>
+      </header>
+
+      <div class="command-reference" role="list">
+        <article role="listitem"><div class="command-meta"><span class="read-label">Interactive</span><code data-command>npx @ghostbyte/agent-docs-kit@latest</code></div><div><h3>Open the guided menu</h3><p>Choose documentation setup, documentation audit, security audit, engineering review, project-skill installation, or package validation. In a non-interactive shell, it prints help instead of waiting for input.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="write-label">Writes</span><code data-command="setup">npx @ghostbyte/agent-docs-kit@latest setup</code></div><div><h3>Create the documentation workspace</h3><p>Adds `.agent-docs/config.json` and the initial `docs/` hierarchy for system, project, development, testing, operations, future work, and archives. Use `--dry-run` first; existing files are skipped.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only*</span><code data-command="audit documentation">npx @ghostbyte/agent-docs-kit@latest audit documentation</code></div><div><h3>Check documentation health</h3><p>Checks configured required documents, duplicate headings, placeholders, relative links, anchors, and optional metadata. Add <code>--strict</code> for CI, <code>--format</code> for text, Markdown, or JSON, and <code>--report</code> to persist the result.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="list documentation">npx @ghostbyte/agent-docs-kit@latest list documentation</code></div><div><h3>List documentation areas</h3><p>Prints the seven canonical documentation area IDs, slugs, and names from the same catalog used by security and engineering.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="documentation guide &lt;area&gt;">npx @ghostbyte/agent-docs-kit@latest documentation guide &lt;area&gt;</code></div><div><h3>Read focused documentation guidance</h3><p>Prints one canonical area with stable <code>DOC-*</code> controls and evidence questions without loading the entire documentation library.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="list security">npx @ghostbyte/agent-docs-kit@latest list security</code></div><div><h3>List security audit phases</h3><p>Prints the 12 available phase IDs, slugs, and names so you can select a precise review scope without loading every security reference.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="write-label">Writes</span><code data-command="security worksheet &lt;phase&gt;">npx @ghostbyte/agent-docs-kit@latest security worksheet &lt;phase&gt;</code></div><div><h3>Create a scoped security worksheet</h3><p>Creates a dated, configuration-aware report with control IDs, priority, evidence, remediation, owner, and verification. It does not run active scans or claim controls pass. The v4 <code>audit security</code> form remains an alias.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="list engineering">npx @ghostbyte/agent-docs-kit@latest list engineering</code></div><div><h3>List engineering topics</h3><p>Prints all 14 review topics and selectors, including reliability, observability, deployment safety, API compatibility, and capacity.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="write-label">Writes</span><code data-command="engineering worksheet &lt;topic&gt;">npx @ghostbyte/agent-docs-kit@latest engineering worksheet &lt;topic&gt;</code></div><div><h3>Create an engineering review worksheet</h3><p>Creates a dated report with practice ID, evidence, impact, recommendation, owner, and verification. Recommendations remain advisory unless evidence establishes a separate defect. The v4 <code>review engineering</code> form remains an alias.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="template list">npx @ghostbyte/agent-docs-kit@latest template list</code></div><div><h3>List documentation templates</h3><p>Shows the available ADR, runbook, change record, incident review, and test evidence templates.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="write-label">Writes</span><code data-command="template create &lt;type&gt; --name &lt;slug&gt;">npx @ghostbyte/agent-docs-kit@latest template create &lt;type&gt; --name &lt;slug&gt;</code></div><div><h3>Create a durable project record</h3><p>Creates a dated template below the configured documentation root. Use <code>--name</code> for a descriptive filename; repeated unnamed records receive a safe numeric suffix.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="write-label">Writes</span><code data-command="skill install --target project">npx @ghostbyte/agent-docs-kit@latest skill install --target project</code></div><div><h3>Install the skill for one repository</h3><p>Copies the complete `manage-project-quality` skill into `.agents/skills/` in the selected project. This is the recommended target when the workflow should travel with the repository.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="write-label">Writes</span><code data-command="skill install --target codex">npx @ghostbyte/agent-docs-kit@latest skill install --target codex</code></div><div><h3>Install the skill for the current user</h3><p>Copies the skill into the user’s Codex skills directory. This is an explicit global installation and affects future projects that can discover user-level skills.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="validate">npx @ghostbyte/agent-docs-kit@latest validate</code></div><div><h3>Validate the distributed library</h3><p>Confirms that all seven documentation areas, 12 security phases, 14 engineering topics, templates, catalog schema, and unified skill metadata are intact.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code data-command="doctor">npx @ghostbyte/agent-docs-kit@latest doctor</code></div><div><h3>Check local prerequisites</h3><p>Reports whether the supported Node.js version and Git are available. It does not install or update either tool.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Opens browser</span><code data-command="website">npx @ghostbyte/agent-docs-kit@latest website</code></div><div><h3>Open the documentation website</h3><p>Opens <code>https://ghostbyte1014.github.io/Agent_Docs_Kit/</code> in the default browser and prints the URL as a fallback for terminals that cannot launch a browser.</p></div></article>
+        <article role="listitem"><div class="command-meta"><span class="read-label">Read-only</span><code><span data-command="--help">npx @ghostbyte/agent-docs-kit@latest --help</span><br><span data-command="--version">npx @ghostbyte/agent-docs-kit@latest --version</span></code></div><div><h3>Inspect the command surface</h3><p>Prints usage and options or the installed package version. These are useful when verifying an npm or npx installation.</p></div></article>
+      </div>
+
+      <div class="options-block">
+        <div><p class="eyebrow">Shared options</p><h3>Control scope and output.</h3></div>
+        <dl>
+          <div><dt><code>--cwd &lt;path&gt;</code></dt><dd>Run against another project directory instead of the current directory.</dd></div>
+          <div><dt><code>--dry-run</code></dt><dd>Preview owned file writes without creating or replacing anything.</dd></div>
+          <div><dt><code>--force</code></dt><dd>Replace files owned by the selected command. Unrelated files remain outside its scope.</dd></div>
+          <div><dt><code>--style standard|learning</code></dt><dd>Choose concise findings or add “why this matters” teaching context.</dd></div>
+          <div><dt><code>--report</code></dt><dd>Persist a documentation-audit result instead of printing it only.</dd></div>
+          <div><dt><code>--strict</code></dt><dd>Return a failing exit code when a documentation audit finds a problem.</dd></div>
+          <div><dt><code>--format text|markdown|json</code></dt><dd>Choose terminal or persisted documentation-audit output.</dd></div>
+          <div><dt><code>--name &lt;slug&gt;</code></dt><dd>Give a template record a lowercase, hyphenated filename suffix.</dd></div>
+          <div><dt><code>--phase / --topic</code></dt><dd>Alternative named selectors for security phases and engineering topics.</dd></div>
+        </dl>
+      </div>
+    </section>
+  </main>
+
+  <footer>
+    <div class="shell footer-layout"><div><a class="brand" href="#top"><span class="brand-mark" aria-hidden="true">AQ</span><span>Agent Docs &amp; Quality</span></a><p>Documentation governance, security assurance, and engineering review in one project-quality library.</p></div><div><p>Project</p><a href="https://github.com/ghostbyte1014/Agent_Docs_Kit">GitHub repository</a><a href="docs/GITHUB_AND_NPM_SETUP.md">Setup guide</a><a href="docs/ARCHITECTURE.md">Architecture</a></div><div><p>Reference</p><a href="docs/PURPOSE.md">Purpose</a><a href="docs/SECURITY_MODEL.md">Security model</a><a href="docs/RELEASE_PROCESS.md">Release process</a></div></div>
+    <div class="shell footer-bottom"><span>Created by ghostbyte1014</span><span>MIT License</span></div>
+  </footer>
+</body>
+</html>