perf: direct WASM serialization + single-parse; bump to 0.1.1; add release automation

Author: badosa

.github/workflows/release.yml

@@ -0,0 +1,87 @@
+# Release pipeline for jsonstat-wasm.
+#
+# Triggered when a `v*` tag is pushed (e.g. by scripts/release.sh). It rebuilds
+# the package exactly like CI, verifies the tag matches Cargo.toml, publishes
+# the patched pkg/ to npm, and creates the GitHub Release.
+#
+# Required repository secret:
+#   NPM_TOKEN — an npm automation token with publish rights to `jsonstat-wasm`.
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write # create the GitHub Release
+  id-token: write # npm provenance (--provenance) attestation
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  release:
+    name: Build, publish & release
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+          targets: wasm32-unknown-unknown
+
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@v2
+
+      - name: Install wasm-pack
+        run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh -s -- -f --version 0.13.1
+
+      # ── Verify the tag matches the crate version ─────────────────────────
+      # Guards against a tag like v0.1.2 pointing at a commit whose Cargo.toml
+      # still says 0.1.1 (which would publish the wrong version).
+      - name: Verify tag matches Cargo.toml version
+        run: |
+          CARGO_VERSION="$(grep -m1 '^version = ' Cargo.toml | sed -E 's/^version = "(.*)"/\1/')"
+          TAG_VERSION="${GITHUB_REF_NAME#v}"
+          echo "Cargo.toml: ${CARGO_VERSION}    tag: ${TAG_VERSION}"
+          if [[ "${CARGO_VERSION}" != "${TAG_VERSION}" ]]; then
+            echo "::error::Tag ${GITHUB_REF_NAME} does not match Cargo.toml version ${CARGO_VERSION}"
+            exit 1
+          fi
+
+      # ── Verification gates (mirror ci.yml) ───────────────────────────────
+      - name: Run tests
+        run: cargo test
+
+      - name: Build WASM package
+        run: bash scripts/build.sh
+
+      # ── Publish to npm ───────────────────────────────────────────────────
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Type-check bindings
+        run: npx --yes -p typescript@5 tsc --noEmit
+
+      - name: Publish to npm
+        run: npm publish ./pkg --access public --provenance
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      # ── GitHub Release ───────────────────────────────────────────────────
+      - name: Create GitHub Release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release create "${GITHUB_REF_NAME}" --title "${GITHUB_REF_NAME}" --generate-notes

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "jsonstat-wasm"
-version = "0.1.0"
+version = "0.1.1"
 edition = "2021"
 description = "A fast JSON-stat 2.0 parser compiled to WebAssembly"
 repository = "https://github.com/jsonstat/wasm"
@@ -10,14 +10,32 @@ license = "MIT"
 crate-type = ["cdylib", "rlib"]
 
 [dependencies]
-wasm-bindgen = "0.2.92"
+wasm-bindgen = "0.2.125"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["preserve_order"] }
 console_error_panic_hook = "0.1.7"
 serde-wasm-bindgen = "0.6.5"
-js-sys = "0.3.100"
+js-sys = "0.3.102"
 # Preserves insertion order for the `dimension` map so ToJSON() emits
 # dimensions in the same order as the source document. Already resolved
 # transitively via serde_json's `preserve_order` feature; declared directly
 # here to use IndexMap in our own model types.
 indexmap = { version = "2", features = ["serde"] }
+
+# Release profile tuned for WebAssembly: smaller binary and faster runtime.
+# `lto` + `codegen-units = 1` improve both speed and size; `opt-level = "s"`,
+# `strip` and `panic = "abort"` further shrink the `.wasm`. wasm-pack still
+# runs `wasm-opt` on top of this.
+[profile.release]
+opt-level = "s"
+lto = true
+codegen-units = 1
+panic = "abort"
+strip = true
+
+# wasm-opt settings for `wasm-pack build --release`. Current rustc emits the
+# `bulk-memory` and `nontrapping-float-to-int` WASM features by default, which
+# older bundled `wasm-opt` versions reject unless explicitly enabled. We keep
+# `-O` (size/speed optimization) and enable those features so wasm-opt runs.
+[package.metadata.wasm-pack.profile.release]
+wasm-opt = ['-O', '--enable-bulk-memory', '--enable-nontrapping-float-to-int']

Cargo.toml

@@ -134,14 +134,14 @@ esm.sh). Two entry points are available:
 | `…/jsonstat.js` | **High-level facade** — `JSONstat()` toolkit function with automatic one-time init (recommended) |
 | `…/jsonstat_wasm.js` | **Low-level glue** — raw `JSONstat` class + `init()` you call yourself |
 
-Always **pin the version** (here `0.1.0`, matching `Cargo.toml` / `package.json`).
+Always **pin the version** (here `0.1.1`, matching `Cargo.toml` / `package.json`).
 
 #### High-level facade (recommended)
 
 ```html
 <script type="module">
   import { JSONstat }
-    from 'https://cdn.jsdelivr.net/npm/jsonstat-wasm@0.1.0/jsonstat.js';
+    from 'https://cdn.jsdelivr.net/npm/jsonstat-wasm@0.1.1/jsonstat.js';
 
   // No init() needed — the facade initializes the WASM module exactly once
   // on first import and gates every call behind that shared promise.
@@ -158,7 +158,7 @@ at the exact `.js` file the binary is fetched automatically:
 
 ```js
 import init, { JSONstat, init_panic_hook }
-  from 'https://cdn.jsdelivr.net/npm/jsonstat-wasm@0.1.0/jsonstat_wasm.js';
+  from 'https://cdn.jsdelivr.net/npm/jsonstat-wasm@0.1.1/jsonstat_wasm.js';
 
 await init();          // .wasm resolved via import.meta.url ✅
 init_panic_hook();
@@ -171,9 +171,9 @@ case pass the binary URL directly to `init()`, which accepts a
 `string` / `URL` / `Request`:
 
 ```js
-import init, { JSONstat } from 'https://esm.sh/jsonstat-wasm@0.1.0/glue';
+import init, { JSONstat } from 'https://esm.sh/jsonstat-wasm@0.1.1/glue';
 
-await init('https://esm.sh/jsonstat-wasm@0.1.0/jsonstat_wasm_bg.wasm');
+await init('https://esm.sh/jsonstat-wasm@0.1.1/jsonstat_wasm_bg.wasm');
 const ds = new JSONstat(jsonStr);
 ```
 
@@ -254,3 +254,40 @@ cargo test
 # Rust unit tests (WASM target)
 wasm-pack test --node
 ```
+
+## Releasing & Publishing
+
+Releases are tag-driven and fully automated. Pushing a `v<version>` tag triggers
+[`.github/workflows/release.yml`](../.github/workflows/release.yml), which
+rebuilds the package, verifies the tag matches `Cargo.toml`, runs the test and
+type-check gates, **publishes the patched `pkg/` to npm**, and **creates the
+GitHub Release**.
+
+### One-time setup
+
+Add an npm **automation** access token as a repository secret so the workflow
+can publish:
+
+1. Create the token at npm → **Account → Access Tokens → Generate New Token →
+   Automation** (it needs publish rights to `jsonstat-wasm`).
+2. In GitHub: **Settings → Secrets and variables → Actions → New repository
+   secret**, name it `NPM_TOKEN`, and paste the token.
+
+> The workflow publishes with [npm provenance](https://docs.npmjs.com/generating-provenance-statements)
+> (`--provenance`), which relies on the `id-token: write` permission already
+> declared in the workflow. Drop the `--provenance` flag if you don't want it.
+
+### Cutting a release
+
+1. Bump the version in [`Cargo.toml`](../Cargo.toml) (and update any pinned
+   `@<version>` CDN references), then commit and push to `main`.
+2. Run the release helper from a clean tree on `main`:
+
+   ```bash
+   ./scripts/release.sh             # tags v<version> and pushes it
+   ./scripts/release.sh --dry-run   # preview without tagging
+   ```
+
+   The script validates the working tree, builds locally as a sanity check,
+   then creates and pushes the annotated `v<version>` tag. The push is what
+   triggers the publish workflow above — no manual `npm publish` needed.

docs/INSTALL.md

@@ -25,7 +25,7 @@
 // That means a CDN consumer can simply:
 //
 //     import { JSONstat }
-//       from 'https://cdn.jsdelivr.net/npm/jsonstat-wasm@0.1.0/jsonstat.js';
+//       from 'https://cdn.jsdelivr.net/npm/jsonstat-wasm@0.1.1/jsonstat.js';
 //
 // and initialization is fully automatic.
 //