chore: simplify release publishing

Remove crates.io and npm publishing from the release workflow so tags only produce GitHub Release artifacts.

Document cargo install --git as the supported install path, remove the npm wrapper package, and bump termviz to 0.2.1 for the simplified release.

Author: siriusctrl

.github/workflows/release.yml

@@ -47,11 +47,9 @@ jobs:
         run: |
           set -euo pipefail
           version="$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -n 1)"
-          npm_version="$(node -p "require('./npm/termviz/package.json').version")"
           tag="${RELEASE_TAG#v}"
 
           test "$version" = "$tag"
-          test "$npm_version" = "$version"
 
           echo "version=$version" >> "$GITHUB_OUTPUT"
           echo "tag=$RELEASE_TAG" >> "$GITHUB_OUTPUT"
@@ -154,123 +152,3 @@ jobs:
               --title "$TAG" \
               --notes-file "$NOTES_FILE"
           fi
-
-  crates-io:
-    runs-on: ubuntu-latest
-    needs: build-linux-x64
-    env:
-      CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: ${{ needs.build-linux-x64.outputs.tag }}
-      - uses: dtolnay/rust-toolchain@stable
-
-      - name: Check crates.io package version
-        id: crates-published
-        env:
-          VERSION: ${{ needs.build-linux-x64.outputs.version }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          status="$(
-            curl -sS -o /tmp/crate-version.json -w '%{http_code}' \
-              -H "User-Agent: termviz-release (https://github.com/siriusctrl/termviz)" \
-              "https://crates.io/api/v1/crates/termviz/$VERSION"
-          )"
-          case "$status" in
-            200)
-              echo "published=true" >> "$GITHUB_OUTPUT"
-              ;;
-            404)
-              echo "published=false" >> "$GITHUB_OUTPUT"
-              ;;
-            *)
-              echo "crates.io version check failed with HTTP $status"
-              sed -n '1,120p' /tmp/crate-version.json
-              exit 1
-              ;;
-          esac
-
-      - name: Dry-run crates.io package
-        run: cargo publish --dry-run --locked
-
-      - name: Publish to crates.io
-        if: env.CARGO_REGISTRY_TOKEN != '' && steps.crates-published.outputs.published != 'true'
-        run: cargo publish --locked --token "$CARGO_REGISTRY_TOKEN"
-
-      - name: Skip already published crates.io version
-        if: steps.crates-published.outputs.published == 'true'
-        run: echo "termviz ${{ needs.build-linux-x64.outputs.version }} is already published on crates.io."
-
-      - name: Skip crates.io publish
-        if: env.CARGO_REGISTRY_TOKEN == '' && steps.crates-published.outputs.published != 'true'
-        run: echo "CARGO_REGISTRY_TOKEN is not configured; skipped crates.io publish."
-
-  npm:
-    runs-on: ubuntu-latest
-    needs:
-      - build-linux-x64
-      - crates-io
-    permissions:
-      contents: read
-      id-token: write
-    env:
-      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: ${{ needs.build-linux-x64.outputs.tag }}
-
-      - uses: actions/download-artifact@v8
-        with:
-          name: termviz-linux-x64
-          path: dist
-
-      - uses: actions/setup-node@v6
-        with:
-          node-version: "24"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Check npm package version
-        id: npm-published
-        env:
-          VERSION: ${{ needs.build-linux-x64.outputs.version }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          status=0
-          npm view "termviz@$VERSION" version >/tmp/npm-version.txt 2>/tmp/npm-view.err || status=$?
-          if [ "$status" = "0" ]; then
-            echo "published=true" >> "$GITHUB_OUTPUT"
-          elif grep -q "E404" /tmp/npm-view.err; then
-            echo "published=false" >> "$GITHUB_OUTPUT"
-          else
-            sed -n '1,120p' /tmp/npm-view.err
-            exit "$status"
-          fi
-
-      - name: Prepare npm package
-        if: steps.npm-published.outputs.published != 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          mkdir -p npm/termviz/vendor
-          cp dist/termviz npm/termviz/vendor/termviz
-          cp LICENSE npm/termviz/LICENSE
-          chmod 755 npm/termviz/vendor/termviz
-          node npm/termviz/bin/termviz.js --version
-          npm pack --dry-run ./npm/termviz
-
-      - name: Publish to npm
-        if: env.NODE_AUTH_TOKEN != '' && steps.npm-published.outputs.published != 'true'
-        working-directory: npm/termviz
-        run: npm publish --provenance --access public
-
-      - name: Skip already published npm version
-        if: steps.npm-published.outputs.published == 'true'
-        run: echo "termviz ${{ needs.build-linux-x64.outputs.version }} is already published on npm."
-
-      - name: Skip npm publish
-        if: env.NODE_AUTH_TOKEN == '' && steps.npm-published.outputs.published != 'true'
-        run: echo "NPM_TOKEN is not configured; skipped npm publish."

.gitignore

@@ -2,5 +2,3 @@
 /.DS_Store
 *.swp
 *.swo
-/npm/termviz/LICENSE
-/npm/termviz/vendor/

CHANGELOG.md

@@ -8,15 +8,19 @@ matching `## [X.Y.Z]` section before the release tag is pushed.
 
 ## [Unreleased]
 
+## [0.2.1] - 2026-06-16
+
+### Changed
+
+- Simplify releases to GitHub Release artifacts plus `cargo install --git`.
+  crates.io and npm publishing are no longer part of the release path.
+
 ## [0.2.0] - 2026-06-16
 
 ### Added
 
-- Add a Linux x64 npm package wrapper that ships a prebuilt static `termviz`
-  binary for `npm install -g termviz`.
 - Add a tag-driven release workflow that builds a static Linux x64 artifact,
-  publishes GitHub Release assets, runs a crates.io dry-run, and publishes npm
-  and crates.io when registry tokens are configured.
+  publishes GitHub Release assets, and validates the Rust package locally.
 - Default redirected/export output to PNG when no `--output-format` is provided,
   while still inferring JSON/ANSI/SVG/PNG from optional `--output` extensions
   when they are recognized.
@@ -179,5 +183,5 @@ matching `## [X.Y.Z]` section before the release tag is pushed.
 - Interactive image viewing remains eager-decoded and not tile-based; the safety
   guard blocks very large rasters by default and provides a clear CLI error.
 - Explicit raster export paths still decode the full image.
-- crates.io publishing remains a release task until completed. npm prebuilt
-  binaries are deliberately out of scope for 0.1.0.
+- Registry publishing is not part of the release path. Install from GitHub with
+  `cargo install --git`.

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "termviz"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2024"
 rust-version = "1.85"
 description = "Terminal-first viewer for images and plots"
@@ -9,7 +9,7 @@ repository = "https://github.com/siriusctrl/termviz"
 readme = "README.md"
 keywords = ["terminal", "image", "plot", "viewer", "cli"]
 categories = ["command-line-utilities", "visualization"]
-exclude = [".github/", "npm/"]
+exclude = [".github/"]
 
 [dependencies]
 ab_glyph = "0.2.32"

Cargo.toml

@@ -11,13 +11,13 @@ metadata and explicit exports.
 Install with Cargo:
 
 ```sh
-cargo install termviz
+cargo install --git https://github.com/siriusctrl/termviz
 ```
 
-Linux x64 users can also install the prebuilt static binary wrapper from npm:
+To install a tagged version:
 
 ```sh
-npm install -g termviz
+cargo install --git https://github.com/siriusctrl/termviz --tag v0.2.1
 ```
 
 ```sh

README.md

@@ -20,7 +20,7 @@ Read these when the task matches:
   - version and tag policy
   - changelog and release notes policy
   - GitHub Release artifacts and checksums
-  - crates.io and npm publishing
+  - `cargo install --git` install path
 - `docs/visual-verification.md`
   - PTY recording artifacts
   - keyframe/contact-sheet inspection

docs/INDEX.md

@@ -8,7 +8,7 @@ requirements.
 ## Release Rules
 
 - Use semantic versioning.
-- Keep version numbers aligned across all package manifests.
+- Keep the `Cargo.toml` version aligned with the release tag.
 - Add a `CHANGELOG.md` entry before tagging or publishing.
 - Never publish with placeholder release notes.
 - Use Conventional Commits with explanatory bodies.
@@ -63,71 +63,29 @@ Before publishing:
 2. Confirm GitHub Actions pass for formatting, tests, Clippy, and any release
    artifact jobs that exist.
 3. For tagged releases or manual dispatches, confirm the release workflow builds
-   `termviz-linux-x64.tar.gz`, `sha256sums.txt`, and the npm vendor binary.
+   `termviz-linux-x64.tar.gz` and `sha256sums.txt`.
 4. If CI is missing or incomplete for the release, record the local verification
    commands and results in the release PR or release notes.
 
 ## Release Artifacts
 
 Release artifacts are a Linux x64 static binary tarball plus SHA-256 checksum.
-The same static binary is used as the npm package's `vendor/termviz` payload.
 The release workflow verifies that the binary has no glibc runtime interpreter
-before packaging, so `npm install -g termviz` installs a self-contained CLI
-tool for Linux x64 users.
+before packaging, so Linux x64 users can download a self-contained CLI from the
+GitHub Release page.
 
-## crates.io
+## Install From Git
 
-Run a dry-run before publishing:
+The supported package-manager-free install path is Cargo from GitHub:
 
 ```sh
-cargo publish --dry-run --locked
-```
-
-Inspect the packaged contents before publishing if the dry-run output is
-surprising:
-
-```sh
-cargo package --list --locked
-```
-
-Publish only after the changelog entry, local checks, and CI are complete:
-
-```sh
-cargo publish --locked
-```
-
-After publishing, verify the crate page and install path:
-
-```sh
-cargo install termviz --version X.Y.Z
+cargo install --git https://github.com/siriusctrl/termviz --tag vX.Y.Z
 termviz --version
 ```
 
-## npm
-
-The npm package lives under `npm/termviz`. It is a binary distribution wrapper:
-`bin/termviz.js` validates `linux-x64`, then execs `vendor/termviz`.
-
-The release workflow builds `x86_64-unknown-linux-musl`, copies the static
-binary into `npm/termviz/vendor/termviz`, copies `LICENSE`, runs the wrapper's
-`--version` command, runs `npm pack --dry-run`, and publishes when `NPM_TOKEN`
-is configured.
-
-For a local smoke check before tagging:
-
-```sh
-cargo build --release --locked
-mkdir -p npm/termviz/vendor
-cp target/release/termviz npm/termviz/vendor/termviz
-cp LICENSE npm/termviz/LICENSE
-chmod 755 npm/termviz/vendor/termviz
-npm pack --dry-run ./npm/termviz
-npm install --prefix /tmp/termviz-npm-smoke ./npm/termviz
-/tmp/termviz-npm-smoke/node_modules/.bin/termviz --version
-```
-
-Prefer the release workflow for publishing so npm and GitHub Release artifacts
-use the same checked static binary.
+For local validation before tagging, run `scripts/release-verify.sh`. The script
+also runs `cargo package --locked --allow-dirty` as a non-publish packaging
+safety check.
 
 ## GitHub Release
 
@@ -140,15 +98,15 @@ use the same checked static binary.
 
 2. Create a GitHub Release for `vX.Y.Z`.
 3. Use the matching `CHANGELOG.md` section as the release notes.
-4. Attach `termviz-linux-x86_64.tar.gz` and its `.sha256` file if the release
-   artifact workflow produced them.
+4. Attach `termviz-linux-x64.tar.gz` and `sha256sums.txt` if the release
+   workflow produced them.
 5. Do not publish a GitHub Release with placeholder text such as "TBD",
    "initial release", or copied internal implementation phases.
 
 ## Post-Release
 
-1. Confirm the GitHub Release, crates.io page, and install command point to the
-   same version.
+1. Confirm the GitHub Release and `cargo install --git --tag vX.Y.Z` install
+   command point to the same version.
 2. Confirm `CHANGELOG.md` still has an `Unreleased` section ready for future
    user-facing changes.
 3. If anything failed after publishing, document the follow-up in the next