fix(npm): prefer scoped package and harden publish

.github/workflows/npm-publish.yml

@@ -263,9 +263,9 @@ jobs:
 
             echo "${package_name}@${VERSION} is not published yet; publishing."
             prepare_package "$package_name"
-            publish_args=(--provenance)
+            publish_args=(--provenance --ignore-scripts)
             if [[ "$package_name" == @*/* ]]; then
-              publish_args=(--access public --provenance)
+              publish_args=(--access public --provenance --ignore-scripts)
             fi
 
             # The pre-publish `npm view` guard above can race npm's

README.md

@@ -45,18 +45,14 @@ This drops `coven-code` into `~/.coven-code/bin` (or `%USERPROFILE%\.coven-code\
 ### npm / Bun
 
 ```bash
-npm install -g coven-code
-# or the scoped package
 npm install -g @opencoven/coven-code
 
-bun install -g coven-code
-# or the scoped package
 bun install -g @opencoven/coven-code
 ```
 
 ```bash
-npx coven-code
-bunx coven-code
+npx @opencoven/coven-code
+bunx @opencoven/coven-code
 ```
 
 ### Upgrade

docs/installation.md

@@ -73,19 +73,19 @@ native binary for your platform from GitHub Releases — no compilation needed.
 
 ```bash
 # npm
-npm install -g coven-code
+npm install -g @opencoven/coven-code
 
 # bun
-bun install -g coven-code
+bun install -g @opencoven/coven-code
 ```
 
 After installation, run `coven-code` directly from your terminal.
 
 You can also run Coven Code without a permanent install:
 
 ```bash
-npx coven-code          # via npm
-bunx coven-code         # via bun
+npx @opencoven/coven-code          # via npm
+bunx @opencoven/coven-code         # via bun
 ```
 
 **Supported platforms via npm:**

docs/src/content/installation.js

@@ -44,14 +44,14 @@ export function render() {
 
     <h2>Via npm / bun</h2>
 
-    <pre><code data-lang="bash">npm install -g coven-code
+    <pre><code data-lang="bash">npm install -g @opencoven/coven-code
 # or
-bun install -g coven-code</code></pre>
+bun install -g @opencoven/coven-code</code></pre>
 
     <p>The postinstall script downloads the correct pre-built binary from GitHub Releases — no compilation needed. Or run without a permanent install:</p>
 
-    <pre><code data-lang="bash">npx coven-code
-bunx coven-code</code></pre>
+    <pre><code data-lang="bash">npx @opencoven/coven-code
+bunx @opencoven/coven-code</code></pre>
 
     <h2>Upgrading</h2>
 

npm/bin/coven-code

@@ -12,7 +12,7 @@ const binary = path.join(__dirname, '..', 'native', `coven-code${ext}`);
 if (!fs.existsSync(binary)) {
   console.error(
     'coven-code: native binary not found.\n' +
-    'Try reinstalling: npm install -g coven-code\n' +
+    'Try reinstalling: npm install -g @opencoven/coven-code\n' +
     `Expected: ${binary}`
   );
   process.exit(1);