feat: add n8n community node wrapper

Author: NPFernando

.github/workflows/publish.yml

@@ -0,0 +1,44 @@
+name: Publish
+
+on:
+  push:
+    tags:
+      - '*.*.*'
+
+jobs:
+  publish:
+    name: Publish to npm
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          # npm Trusted Publishing requires Node >=22.14.0 and npm >=11.5.1.
+          node-version: '22.14.0'
+          cache: npm
+          registry-url: https://registry.npmjs.org
+
+      - name: Upgrade npm for Trusted Publishing
+        run: |
+          npm install -g npm@latest
+          node --version
+          npm --version
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Validate package
+        run: npm run validate
+
+      - name: Publish
+        run: |
+          [ -n "$NPM_TOKEN" ] && npm config set //registry.npmjs.org/:_authToken "$NPM_TOKEN"
+          npm publish --provenance --access public
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.nvmrc

@@ -1 +1 @@
-20.19.6
+22.14.0

README.md

@@ -1,6 +1,6 @@
 # n8n Node Package Auditor
 
-A TypeScript CLI that audits n8n community-node packages for public package quality, CI readiness, npm provenance publishing, and documentation hygiene.
+An n8n community node plus CLI that audits n8n community-node packages for public package quality, CI readiness, npm provenance publishing, and documentation hygiene.
 
 It was built as a portfolio-friendly automation tool after hardening and publishing `n8n-nodes-textdotlk`.
 
@@ -13,21 +13,59 @@ It was built as a portfolio-friendly automation tool after hardening and publish
 - GitHub Actions CI workflow signals, including dependency installation plus validation commands
 - npm Trusted Publishing / provenance workflow signals, including tag triggers and OIDC permissions
 - README installation and usage sections
-- SECURITY.md or README security guidance
+- `SECURITY.md` or README security guidance
 
-## Install for local development
+## Install in n8n
+
+After the package is published to npm, install it from n8n:
+
+1. Go to **Settings → Community Nodes**.
+2. Select **Install a community node**.
+3. Enter:
+
+```text
+n8n-nodes-package-auditor
+```
+
+4. Click **Install** and restart n8n if prompted.
+
+The installed node appears as **n8n Package Auditor**.
+
+### n8n node parameters
+
+- **Package Path**: Path to the package folder as seen by the n8n runtime.
+- **Output Format**: `JSON`, `Markdown`, or `Text` for the `formattedReport` field.
+- **Minimum Score**: Score threshold used to set the boolean `passed` output.
+
+For Docker-based n8n, mount the package/repo you want to audit into the n8n container first, then use that container path in **Package Path**.
+
+## Install as a CLI
+
+After publish, install globally:
+
+```bash
+npm install -g n8n-nodes-package-auditor
+```
+
+The CLI binary remains:
+
+```bash
+n8n-node-package-auditor ./some-n8n-node-package --format text
+```
+
+## Local development setup
 
 ```bash
 git clone https://github.com/NPFernando/n8n-node-package-auditor.git
 cd n8n-node-package-auditor
-nvm use
+nvm use # Node.js 22.14+ and npm 10+
 npm ci
 npm run validate
 ```
 
-## Usage
+## CLI usage from source
 
-Run against an n8n community node package folder:
+Run against an n8n community-node package folder:
 
 ```bash
 npm run build
@@ -48,7 +86,7 @@ Gate automation with a minimum score:
 node dist/cli.js ../n8n-nodes-textdotlk --min-score 85
 ```
 
-## Example
+## Example output
 
 ```text
 n8n Node Package Audit
@@ -66,13 +104,27 @@ npm test
 npm run lint
 npm run build
 npm run validate
+npm pack --dry-run
+```
+
+Verify the package installs and loads in a real n8n Docker image:
+
+```bash
+npm run smoke:n8n:docker
+```
+
+To verify a published npm version after release:
+
+```bash
+PACKAGE_VERSION=0.1.0 npm run smoke:n8n:docker
 ```
 
 ## Design notes
 
-- Local-first CLI; no secrets required.
+- Local-first CLI and n8n node; no secrets required.
 - Static package-folder audit only; it does not call npm or GitHub APIs yet.
-- Failing checks exit with a non-zero status so the tool can run in CI.
+- Failing checks exit with a non-zero status so the CLI can run in CI.
+- The n8n node returns structured fields plus a `formattedReport` string.
 - JSON and Markdown formats are intended for automation reports and PR comments.
 - Text reports hide absolute local path prefixes by default to avoid leaking machine-specific WSL/home paths in public snippets.
 
@@ -81,8 +133,8 @@ npm run validate
 - Add optional npm registry version/provenance verification.
 - Add GitHub API checks for package/repo topics and latest CI status.
 - Add configurable scoring profiles.
-- Publish as an npm package after CLI UX stabilizes.
+- Add npm/GitHub URL audit mode for n8n Cloud-friendly workflows.
 
 ## Security
 
-This tool reads local package files and prints metadata. It should not read `.env` files or secrets. If future API integrations are added, credentials should be provided through environment variables and never serialized into reports.
+This tool reads package files from the path you provide and prints package metadata. It should not read `.env` files or secrets. If future API integrations are added, credentials should be provided through environment variables or n8n credentials and never serialized into reports.