chore: prepare release readiness docs and workflows

.agents/README.md

@@ -10,8 +10,6 @@ update the canonical docs first.
 
 ## Skills
 
-- [`forms-core-implementation-step`](./skills/forms-core-implementation-step/SKILL.md)
-  - normal iterative implementation workflow.
 - [`forms-core-general-checks`](./skills/forms-core-general-checks/SKILL.md)
   - baseline verification before handoff, PR creation, and review replies.
 - [`forms-core-self-review`](./skills/forms-core-self-review/SKILL.md)

.agents/rules/read-review-contract.mdc

@@ -6,6 +6,6 @@ alwaysApply: true
 # Read Review Contract
 
 Start review and implementation work from `REVIEW.md`, then follow
-`docs/architecture.md`, `docs/steps.md`, `docs/pr-plan.md`,
-`docs/quality-gates.md`, `docs/readme-guidelines.md`, and
+`docs/architecture.md`, `docs/pr-plan.md`, `docs/quality-gates.md`,
+`docs/readme-guidelines.md`, `docs/release-train.md`, and
 `docs/review/forms-core-checklist.md`.

.agents/skills/forms-core-general-checks/SKILL.md

@@ -37,7 +37,7 @@ ready, and after addressing review feedback.
    - `docs/architecture.md`;
    - `docs/quality-gates.md`;
    - `docs/review/forms-core-checklist.md`;
-   - affected step in `docs/steps.md`.
+   - `docs/release-train.md` for release or publish changes.
 
 ## Required Commands
 

.agents/skills/forms-core-self-review/SKILL.md

@@ -26,7 +26,7 @@ description when requested, or PR comment.
 - `docs/quality-gates.md`.
 - `docs/readme-guidelines.md` when README changes.
 - `docs/review/forms-core-checklist.md`.
-- Affected step in `docs/steps.md`.
+- `docs/release-train.md` when release or publish behavior changes.
 
 ## Review Steps
 

.github/workflows/npm-publish.yml

@@ -0,0 +1,22 @@
+name: Publish Package to npmjs
+
+on:
+  push:
+    tags:
+      - 'v[0-9]*.[0-9]*.[0-9]*'
+      - 'v[0-9]*.[0-9]*.[0-9]*-*'
+
+jobs:
+  publish:
+    permissions:
+      contents: read
+      id-token: write
+    uses: revisium/revisium-actions/.github/workflows/npm-publish.yml@184b609dcbc1e23f14021141f29226d4e6a0f1ac # v0.3.6
+    with:
+      node_version: 24.11.1
+      install_command: npm ci
+      npm_access: public
+      publish_auth: token
+      create_github_release: false
+    secrets:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/release-train.yml

@@ -0,0 +1,50 @@
+name: Release Train
+
+on:
+  workflow_dispatch:
+    inputs:
+      action:
+        description: Release train transition
+        required: true
+        type: choice
+        options:
+          - start-minor-alpha
+          - start-major-alpha
+          - start-minor-rc
+          - start-major-rc
+          - start-minor-stable
+          - start-major-stable
+          - alpha-bump
+          - promote-rc
+          - rc-bump
+          - stable
+          - patch
+          - patch-alpha-start
+          - patch-rc-start
+      dry_run:
+        description: Validate and show the computed release without pushing.
+        required: false
+        default: false
+        type: boolean
+
+concurrency:
+  group: ${{ github.repository }}-release-train
+  cancel-in-progress: false
+
+permissions:
+  actions: read
+  contents: read
+
+jobs:
+  release-train:
+    name: Release train
+    uses: revisium/revisium-actions/.github/workflows/release-train.yml@763f2746000f15842e642130dba3acf09c5d00ac # v0.3.2
+    with:
+      action: ${{ inputs.action }}
+      dry_run: ${{ inputs.dry_run }}
+      base_branch: master
+      node_version: 24.11.1
+      install_command: npm ci
+      validate_command: npm run verify
+    secrets:
+      RELEASE_BOT_PRIVATE_KEY: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}

AGENTS.md

@@ -8,7 +8,7 @@ MCP memory when project context must be read or written.
 
 - **Docs first.** Before implementing behavior, read and update the matching
   source-of-truth doc: [docs/architecture.md](./docs/architecture.md),
-  [docs/steps.md](./docs/steps.md), [docs/pr-plan.md](./docs/pr-plan.md),
+  [docs/pr-plan.md](./docs/pr-plan.md),
   [docs/release-train.md](./docs/release-train.md),
   [docs/readme-guidelines.md](./docs/readme-guidelines.md),
   [docs/quality-gates.md](./docs/quality-gates.md), or [REVIEW.md](./REVIEW.md).
@@ -26,13 +26,7 @@ MCP memory when project context must be read or written.
   `@tanstack/form-core` and `mobx` unless the docs and user explicitly approve
   another dependency. Add test dependencies only when the repo lacks a suitable
   test runner.
-- **Update the step tracker.** Every implementation PR must update
-  [docs/steps.md](./docs/steps.md) with completed checks and remaining work.
-  The final cleanup PR removes or replaces this temporary tracker after durable
-  docs, tests, and README cover the result.
 - **Use repo-local skills when available.**
-  [`forms-core-implementation-step`](./.agents/skills/forms-core-implementation-step/SKILL.md)
-  is the normal iterative workflow.
   [`forms-core-general-checks`](./.agents/skills/forms-core-general-checks/SKILL.md)
   is the baseline verification workflow.
   [`forms-core-self-review`](./.agents/skills/forms-core-self-review/SKILL.md)
@@ -55,23 +49,15 @@ MCP memory when project context must be read or written.
 
 ## Quality Gates
 
-For this docs-only bootstrap phase:
-
-```bash
-git status --short --branch
-git diff --check
-```
-
-After the package scaffold lands, update this section and
-[docs/quality-gates.md](./docs/quality-gates.md), then use the repository
-scripts. The intended full gate is:
+Use the repository verification script before handoff, PR creation, or review
+replies:
 
 ```bash
 npm run verify
 ```
 
-The planned `verify` script should run TypeScript, lint, unit tests, build, and
-Markdown/skill checks.
+The `verify` script runs Markdown/skill lint, formatting, TypeScript, ESLint,
+unit tests with coverage, and package build.
 
 Sonar has zero-tolerance semantics for pull requests in this repo. A passing PR
 Quality Gate is not enough by itself: always inspect unresolved Sonar issues for
@@ -84,5 +70,5 @@ only when the repo permits it.
 ## Handoff
 
 Start from [docs/handoff/README.md](./docs/handoff/README.md). It links the
-implementation steps, review contract, architecture, and reusable bootstrap
-pattern for other libraries.
+review contract, architecture, quality gates, release docs, and reusable
+bootstrap pattern for other libraries.