diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0293002..61046e3 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -45,6 +45,11 @@ jobs:
         run: npm pack --dry-run
 
       - name: Publish to npm
-        run: npm publish --access public --provenance
+        run: |
+          if [ -z "$NODE_AUTH_TOKEN" ]; then
+            echo "NODE_AUTH_TOKEN is not configured; skipping npm publish."
+            exit 0
+          fi
+          npm publish --access public --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8bdcd61..11e2fa4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 ## [Unreleased]
 
+### Changed
+
+- Docs: install from GitHub instead of npm.
+- CI: publish skips without a configured token.
+
 ## [0.1.3] - 2026-09-24
 
 First tagged release from this repository.
diff --git a/README.md b/README.md
index b1041ef..bdd8583 100644
--- a/README.md
+++ b/README.md
@@ -41,18 +41,18 @@ Custom provider names are supported when the model id starts with `gpt-` and its
 
 The package targets the [`pi`](https://github.com/badlogic/pi-mono/tree/main/packages/coding-agent) coding agent. Pi loads extensions from `~/.pi/agent/extensions/`, project `.pi/extensions/`, or via the `--extension` / `-e` CLI flag.
 
-```bash
-# 1. From npm (once published)
-pi install npm:@code-yeongyu/pi-apply-patch
+This package is distributed from GitHub; the npm name is not published by this project.
 
-# 2. From git
+```bash
+# 1. From git
 pi install git:github.com/code-yeongyu/pi-apply-patch
+senpi install git:github.com/code-yeongyu/pi-apply-patch
 
-# 3. Manual placement
+# 2. Manual placement
 git clone https://github.com/code-yeongyu/pi-apply-patch ~/.pi/agent/extensions/pi-apply-patch
 cd ~/.pi/agent/extensions/pi-apply-patch && npm install
 
-# 4. Dev / one-shot test
+# 3. Dev / one-shot test
 pi -e /path/to/pi-apply-patch/src/index.ts
 ```