diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..ef16b6c
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,5 @@
+# Scope -> coulomb Forgejo npm registry. The token is read from the environment
+# (NPM_AUTH_TOKEN, injected by `secrets-engine exec --catalog <lane> --` or
+# `warden access`); never write a token into this file.
+@coulomb:registry=https://forgejo.coulomb.social/api/packages/coulomb/npm/
+//forgejo.coulomb.social/api/packages/coulomb/npm/:_authToken=${NPM_AUTH_TOKEN}
diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
index c099b52..3985174 100644
--- a/ARCHITECTURE.md
+++ b/ARCHITECTURE.md
@@ -198,22 +198,19 @@ String html = adapter.generateHtml(markdown, "edit", config);
 
 ## 📦 Distribution Models
 
-### Model 1: CDN (Simplest)
+### Model 1: Self-hosted file (simplest)
 
-```html
-<!-- Use directly from CDN -->
-<script src="https://cdn.jsdelivr.net/npm/testdrive-jsui@1.0.0/dist/testdrive-jsui.min.js"></script>
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/testdrive-jsui@1.0.0/dist/testdrive-jsui.min.css">
-```
+Copy `dist/testdrive-jsui.min.js` and `dist/testdrive-jsui.css` from the package (or a release build) next to your page and load them with `<script>` / `<link>`. Public CDNs (jsDelivr, unpkg) only mirror npmjs.org and do not serve the coulomb Forgejo registry.
 
-### Model 2: npm Package
+### Model 2: npm package (coulomb Forgejo registry)
 
 ```bash
-npm install testdrive-jsui
+# .npmrc: @coulomb:registry=https://forgejo.coulomb.social/api/packages/coulomb/npm/
+npm install @coulomb/testdrive-jsui marked
 ```
 
 ```javascript
-import TestDriveJSUI from 'testdrive-jsui';
+import TestDriveJSUI from '@coulomb/testdrive-jsui';
 ```
 
 ### Model 3: With Language Adapter
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4dffa75..1497a34 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.0.0] - 2026-10-03
+## [1.0.1] - 2026-10-03
+
+### Changed
+- Package is now `@coulomb/testdrive-jsui`, published to the coulomb Forgejo npm registry (`publishConfig.registry`); install with the `@coulomb:registry` scope mapping in `.npmrc`
+- `1.0.0` was tagged (`v1.0.0`) but never published under any name; `1.0.1` is the first published version. Code is identical apart from the name, registry and version
+- Public CDNs (jsDelivr, unpkg) mirror npmjs.org only and do not serve this registry
+
+## [1.0.0] - 2026-10-03 (tagged, not published)
 
 ### Added
 - Initial public release of TestDrive-JSUI as standalone npm package
diff --git a/NPM_PUBLICATION_PLAN.md b/NPM_PUBLICATION_PLAN.md
index 186a65a..ccf4ed0 100644
--- a/NPM_PUBLICATION_PLAN.md
+++ b/NPM_PUBLICATION_PLAN.md
@@ -1,3 +1,5 @@
+> **Superseded for the destination (2026-10-03):** the package is published to the coulomb Forgejo npm registry as `@coulomb/testdrive-jsui`, not to npmjs.org; the CDN and npm-badge steps below do not apply. See CHANGELOG.md 1.0.1. Kept for history.
+
 # TestDrive-JSUI npm Publication Workplan
 
 **Goal**: Bundle and publish testdrive-jsui as a production-ready npm package
diff --git a/package-lock.json b/package-lock.json
index 0042b5a..9481d87 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
-  "name": "testdrive-jsui",
-  "version": "1.0.0",
+  "name": "@coulomb/testdrive-jsui",
+  "version": "1.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "testdrive-jsui",
-      "version": "1.0.0",
+      "name": "@coulomb/testdrive-jsui",
+      "version": "1.0.1",
       "license": "MIT",
       "dependencies": {
         "jsdom": "^23.0.0"
diff --git a/package.json b/package.json
index 0325c56..65b62b0 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
-  "name": "testdrive-jsui",
-  "version": "1.0.0",
+  "name": "@coulomb/testdrive-jsui",
+  "version": "1.0.1",
   "description": "JavaScript-first markdown editor library with interactive UI",
   "type": "module",
   "main": "dist/testdrive-jsui.cjs",
@@ -190,5 +190,8 @@
         }
       }
     ]
+  },
+  "publishConfig": {
+    "registry": "https://forgejo.coulomb.social/api/packages/coulomb/npm/"
   }
 }
diff --git a/scripts/consumer-smoke.sh b/scripts/consumer-smoke.sh
index 21ca527..f610b79 100755
--- a/scripts/consumer-smoke.sh
+++ b/scripts/consumer-smoke.sh
@@ -9,6 +9,7 @@ trap 'rm -rf "$TMP"' EXIT
 cd "$ROOT" && npm run build:prod >/dev/null
 TARBALL="$(npm pack --pack-destination "$TMP" 2>/dev/null | tail -1)"
 cd "$TMP" && npm init -y >/dev/null
+PKG="$(node -p "require('$ROOT/package.json').name")"
 npm i --no-audit --no-fund marked@13 jsdom "./$TARBALL" >/dev/null 2>&1
 SETUP="const {JSDOM}=require('jsdom');const d=new JSDOM('<!doctype html><body></body>',{url:'http://localhost/'});
 globalThis.window=globalThis;globalThis.document=d.window.document;globalThis.location=d.window.location;
@@ -19,7 +20,7 @@ check() { # check <marker> <label> <node args...>
     local out; out="$(node "$@" 2>&1 || true)"
     grep -q "^$marker" <<<"$out" || { echo "FAIL: $label"; exit 1; }
 }
-check 'CJS ok' "CJS require" -e "$SETUP const m=require('testdrive-jsui');console.log('CJS ok',typeof m)"
-check 'ESM ok' "ESM import" -e "$SETUP import('testdrive-jsui').then(m=>console.log('ESM ok',typeof m.default))"
-check 'CSS ok' "style.css" -e "console.log('CSS ok',require.resolve('testdrive-jsui/style.css'))"
+check 'CJS ok' "CJS require" -e "$SETUP const m=require('$PKG');console.log('CJS ok',typeof m)"
+check 'ESM ok' "ESM import" -e "$SETUP import('$PKG').then(m=>console.log('ESM ok',typeof m.default))"
+check 'CSS ok' "style.css" -e "console.log('CSS ok',require.resolve('$PKG/style.css'))"
 echo "consumer smoke: ESM, CJS, CSS ok"