From 71a2a1e52c02d2fa6df2a4d5f5e808e17fe07221 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Sat, 3 Oct 2026 00:53:03 +0200
Subject: [PATCH] release 1.0.1: publish as @coulomb/testdrive-jsui to the
 coulomb Forgejo npm registry

Scoped name, publishConfig.registry, secret-free .npmrc (token from
NPM_AUTH_TOKEN env), changelog (1.0.0 tagged but never published), install
docs without public-CDN claims, consumer smoke uses the package name.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 299063@bnt-lap001
Assistant-Session: 53eb1e1c-c13a-4277-9ce2-3702960d93f7
---
 .npmrc                    |  5 +++++
 ARCHITECTURE.md           | 15 ++++++---------
 CHANGELOG.md              |  9 ++++++++-
 NPM_PUBLICATION_PLAN.md   |  2 ++
 package-lock.json         |  8 ++++----
 package.json              |  7 +++++--
 scripts/consumer-smoke.sh |  7 ++++---
 7 files changed, 34 insertions(+), 19 deletions(-)
 create mode 100644 .npmrc

diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..ef16b6c
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,5 @@
+# Scope -> coulomb Forgejo npm registry. The token is read from the environment
+# (NPM_AUTH_TOKEN, injected by `secrets-engine exec --catalog <lane> --` or
+# `warden access`); never write a token into this file.
+@coulomb:registry=https://forgejo.coulomb.social/api/packages/coulomb/npm/
+//forgejo.coulomb.social/api/packages/coulomb/npm/:_authToken=${NPM_AUTH_TOKEN}
diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
index c099b52..3985174 100644
--- a/ARCHITECTURE.md
+++ b/ARCHITECTURE.md
@@ -198,22 +198,19 @@ String html = adapter.generateHtml(markdown, "edit", config);
 
 ## 📦 Distribution Models
 
-### Model 1: CDN (Simplest)
+### Model 1: Self-hosted file (simplest)
 
-```html
-<!-- Use directly from CDN -->
-<script src="https://cdn.jsdelivr.net/npm/testdrive-jsui@1.0.0/dist/testdrive-jsui.min.js"></script>
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/testdrive-jsui@1.0.0/dist/testdrive-jsui.min.css">
-```
+Copy `dist/testdrive-jsui.min.js` and `dist/testdrive-jsui.css` from the package (or a release build) next to your page and load them with `<script>` / `<link>`. Public CDNs (jsDelivr, unpkg) only mirror npmjs.org and do not serve the coulomb Forgejo registry.
 
-### Model 2: npm Package
+### Model 2: npm package (coulomb Forgejo registry)
 
 ```bash
-npm install testdrive-jsui
+# .npmrc: @coulomb:registry=https://forgejo.coulomb.social/api/packages/coulomb/npm/
+npm install @coulomb/testdrive-jsui marked
 ```
 
 ```javascript
-import TestDriveJSUI from 'testdrive-jsui';
+import TestDriveJSUI from '@coulomb/testdrive-jsui';
 ```
 
 ### Model 3: With Language Adapter
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4dffa75..1497a34 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.0.0] - 2026-10-03
+## [1.0.1] - 2026-10-03
+
+### Changed
+- Package is now `@coulomb/testdrive-jsui`, published to the coulomb Forgejo npm registry (`publishConfig.registry`); install with the `@coulomb:registry` scope mapping in `.npmrc`
+- `1.0.0` was tagged (`v1.0.0`) but never published under any name; `1.0.1` is the first published version. Code is identical apart from the name, registry and version
+- Public CDNs (jsDelivr, unpkg) mirror npmjs.org only and do not serve this registry
+
+## [1.0.0] - 2026-10-03 (tagged, not published)
 
 ### Added
 - Initial public release of TestDrive-JSUI as standalone npm package
diff --git a/NPM_PUBLICATION_PLAN.md b/NPM_PUBLICATION_PLAN.md
index 186a65a..ccf4ed0 100644
--- a/NPM_PUBLICATION_PLAN.md
+++ b/NPM_PUBLICATION_PLAN.md
@@ -1,3 +1,5 @@
+> **Superseded for the destination (2026-10-03):** the package is published to the coulomb Forgejo npm registry as `@coulomb/testdrive-jsui`, not to npmjs.org; the CDN and npm-badge steps below do not apply. See CHANGELOG.md 1.0.1. Kept for history.
+
 # TestDrive-JSUI npm Publication Workplan
 
 **Goal**: Bundle and publish testdrive-jsui as a production-ready npm package
diff --git a/package-lock.json b/package-lock.json
index 0042b5a..9481d87 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
-  "name": "testdrive-jsui",
-  "version": "1.0.0",
+  "name": "@coulomb/testdrive-jsui",
+  "version": "1.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "testdrive-jsui",
-      "version": "1.0.0",
+      "name": "@coulomb/testdrive-jsui",
+      "version": "1.0.1",
       "license": "MIT",
       "dependencies": {
         "jsdom": "^23.0.0"
diff --git a/package.json b/package.json
index 0325c56..65b62b0 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
-  "name": "testdrive-jsui",
-  "version": "1.0.0",
+  "name": "@coulomb/testdrive-jsui",
+  "version": "1.0.1",
   "description": "JavaScript-first markdown editor library with interactive UI",
   "type": "module",
   "main": "dist/testdrive-jsui.cjs",
@@ -190,5 +190,8 @@
         }
       }
     ]
+  },
+  "publishConfig": {
+    "registry": "https://forgejo.coulomb.social/api/packages/coulomb/npm/"
   }
 }
diff --git a/scripts/consumer-smoke.sh b/scripts/consumer-smoke.sh
index 21ca527..f610b79 100755
--- a/scripts/consumer-smoke.sh
+++ b/scripts/consumer-smoke.sh
@@ -9,6 +9,7 @@ trap 'rm -rf "$TMP"' EXIT
 cd "$ROOT" && npm run build:prod >/dev/null
 TARBALL="$(npm pack --pack-destination "$TMP" 2>/dev/null | tail -1)"
 cd "$TMP" && npm init -y >/dev/null
+PKG="$(node -p "require('$ROOT/package.json').name")"
 npm i --no-audit --no-fund marked@13 jsdom "./$TARBALL" >/dev/null 2>&1
 SETUP="const {JSDOM}=require('jsdom');const d=new JSDOM('<!doctype html><body></body>',{url:'http://localhost/'});
 globalThis.window=globalThis;globalThis.document=d.window.document;globalThis.location=d.window.location;
@@ -19,7 +20,7 @@ check() { # check <marker> <label> <node args...>
     local out; out="$(node "$@" 2>&1 || true)"
     grep -q "^$marker" <<<"$out" || { echo "FAIL: $label"; exit 1; }
 }
-check 'CJS ok' "CJS require" -e "$SETUP const m=require('testdrive-jsui');console.log('CJS ok',typeof m)"
-check 'ESM ok' "ESM import" -e "$SETUP import('testdrive-jsui').then(m=>console.log('ESM ok',typeof m.default))"
-check 'CSS ok' "style.css" -e "console.log('CSS ok',require.resolve('testdrive-jsui/style.css'))"
+check 'CJS ok' "CJS require" -e "$SETUP const m=require('$PKG');console.log('CJS ok',typeof m)"
+check 'ESM ok' "ESM import" -e "$SETUP import('$PKG').then(m=>console.log('ESM ok',typeof m.default))"
+check 'CSS ok' "style.css" -e "console.log('CSS ok',require.resolve('$PKG/style.css'))"
 echo "consumer smoke: ESM, CJS, CSS ok"