@worldcoin/nucleus 0.1.4 → 0.1.5

package/.github/workflows/prepare-release.yml

@@ -1,165 +0,0 @@
-name: Prepare Nucleus Release
-
-on:
-  pull_request:
-    types: [closed]
-    branches: [main]
-  workflow_dispatch:
-    inputs:
-      bump:
-        description: Version bump type
-        required: true
-        type: choice
-        options:
-          - patch
-          - minor
-          - major
-
-concurrency:
-  group: prepare-release-main
-  cancel-in-progress: false
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  prepare-release:
-    if: >-
-      (github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/main') ||
-      (
-        github.event_name == 'pull_request' &&
-        github.event.pull_request.merged == true &&
-        !startsWith(github.event.pull_request.head.ref, 'release/v') &&
-        (
-          contains(github.event.pull_request.labels.*.name, 'major') ||
-          contains(github.event.pull_request.labels.*.name, 'minor') ||
-          contains(github.event.pull_request.labels.*.name, 'patch')
-        )
-      )
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - name: Plan release PR
-        id: plan
-        env:
-          MANUAL_BUMP: ${{ github.event.inputs.bump || '' }}
-          PR_NUMBER: ${{ github.event.pull_request.number || '' }}
-          PR_LABELS: ${{ toJson(github.event.pull_request.labels.*.name) }}
-        run: |
-          git fetch origin main --tags
-          git checkout -B main origin/main
-
-          next_version() {
-            CURRENT_VERSION="$1"
-            BUMP="$2"
-
-            MAJOR=$(echo "$CURRENT_VERSION" | cut -d. -f1)
-            MINOR=$(echo "$CURRENT_VERSION" | cut -d. -f2)
-            PATCH=$(echo "$CURRENT_VERSION" | cut -d. -f3)
-
-            case "$BUMP" in
-              major) echo "$((MAJOR + 1)).0.0" ;;
-              minor) echo "${MAJOR}.$((MINOR + 1)).0" ;;
-              patch) echo "${MAJOR}.${MINOR}.$((PATCH + 1))" ;;
-            esac
-          }
-
-          release_exists() {
-            VERSION_TAG="$1"
-            git rev-parse "$VERSION_TAG" >/dev/null 2>&1
-          }
-
-          set_output() {
-            echo "$1=$2" >> "$GITHUB_OUTPUT"
-          }
-
-          CURRENT_VERSION=$(tr -d '[:space:]' < VERSION)
-          PREVIOUS_VERSION="v${CURRENT_VERSION}"
-          set_output "previous_version" "$PREVIOUS_VERSION"
-
-          if [ -n "$MANUAL_BUMP" ]; then
-            BUMP="$MANUAL_BUMP"
-            SOURCE="manual"
-            SOURCE_PR=""
-          else
-            RELEASE_LABELS=$(echo "$PR_LABELS" | jq -r '
-              map(select(. == "major" or . == "minor" or . == "patch"))
-            ')
-            RELEASE_LABEL_COUNT=$(echo "$RELEASE_LABELS" | jq 'length')
-            BUMP=$(echo "$RELEASE_LABELS" | jq -r '.[0] // empty')
-            SOURCE="pr"
-            SOURCE_PR="$PR_NUMBER"
-
-            if [ "$RELEASE_LABEL_COUNT" -ne 1 ]; then
-              echo "Expected exactly one release label, found $RELEASE_LABEL_COUNT. Skipping release preparation."
-              set_output "action" "skip"
-              exit 0
-            fi
-          fi
-
-          NEXT_VERSION=$(next_version "$CURRENT_VERSION" "$BUMP")
-          VERSION_TAG="v${NEXT_VERSION}"
-          if release_exists "$VERSION_TAG"; then
-            echo "Tag $VERSION_TAG already exists. Skipping release preparation."
-            set_output "action" "skip"
-            exit 0
-          fi
-          set_output "action" "create_pr"
-          set_output "version" "$VERSION_TAG"
-          set_output "source" "$SOURCE"
-          set_output "source_pr" "$SOURCE_PR"
-
-      - uses: actions/setup-node@v5
-        if: steps.plan.outputs.action == 'create_pr'
-        with:
-          node-version: 22
-          cache: npm
-
-      - name: Create release branch and PR
-        if: steps.plan.outputs.action == 'create_pr'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          VERSION_TAG: ${{ steps.plan.outputs.version }}
-          PREVIOUS_VERSION: ${{ steps.plan.outputs.previous_version }}
-          SOURCE: ${{ steps.plan.outputs.source }}
-          SOURCE_PR: ${{ steps.plan.outputs.source_pr }}
-        run: |
-          git fetch origin main --tags
-          git checkout -B main origin/main
-
-          NEXT_VERSION="${VERSION_TAG#v}"
-          RELEASE_BRANCH="release/${VERSION_TAG}"
-
-          EXISTING_PR_URL=$(gh pr list --head "$RELEASE_BRANCH" --base main --state open --json url --jq '.[0].url // empty')
-          if [ -n "$EXISTING_PR_URL" ]; then
-            echo "Release PR already open: $EXISTING_PR_URL"
-            exit 0
-          fi
-
-          printf '%s\n' "$NEXT_VERSION" > VERSION
-          npm version "$NEXT_VERSION" --no-git-tag-version
-
-          LINK="https://github.com/worldcoin/nucleus/compare/${PREVIOUS_VERSION}...${VERSION_TAG}"
-          sed -i "/^# Changelog/a\\\n## ${VERSION_TAG}\n- [Full changelog](${LINK})" CHANGELOG.md
-
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add VERSION package.json package-lock.json CHANGELOG.md
-          git commit -m "release: $VERSION_TAG"
-          git push origin HEAD:"refs/heads/$RELEASE_BRANCH" --force-with-lease
-
-          if [ "$SOURCE" = "manual" ]; then
-            PR_BODY=$'Automated release PR.\n\nTriggered by manual workflow dispatch.'
-          else
-            PR_BODY=$'Automated release PR.\n\nTriggered by merged PR #'"$SOURCE_PR"$'.'
-          fi
-
-          gh pr create \
-            --base main \
-            --head "$RELEASE_BRANCH" \
-            --title "release: $VERSION_TAG" \
-            --body "$PR_BODY"

package/.github/workflows/publish-release.yml

@@ -1,174 +0,0 @@
-name: Publish Nucleus Release
-
-on:
-  pull_request:
-    types: [closed]
-    branches: [main]
-
-concurrency:
-  group: publish-release-main
-  cancel-in-progress: false
-
-permissions:
-  contents: write
-  packages: write
-
-jobs:
-  release:
-    if: >-
-      github.event.pull_request.merged == true &&
-      startsWith(github.event.pull_request.head.ref, 'release/v')
-    runs-on: ubuntu-latest
-    outputs:
-      version: ${{ steps.plan.outputs.version }}
-      target_sha: ${{ steps.plan.outputs.target_sha }}
-      publish: ${{ steps.tag.outputs.publish }}
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - name: Detect merged release PR
-        id: plan
-        env:
-          MERGE_SHA: ${{ github.event.pull_request.merge_commit_sha }}
-        run: |
-          git fetch origin main --tags
-          git checkout -B main origin/main
-
-          set_output() {
-            echo "$1=$2" >> "$GITHUB_OUTPUT"
-          }
-
-          CURRENT_VERSION=$(tr -d '[:space:]' < VERSION)
-          set_output "action" "publish"
-          set_output "target_sha" "$MERGE_SHA"
-          set_output "version" "v${CURRENT_VERSION}"
-
-      - name: Tag merged release commit
-        id: tag
-        if: steps.plan.outputs.action == 'publish'
-        env:
-          TARGET_SHA: ${{ steps.plan.outputs.target_sha }}
-          VERSION_TAG: ${{ steps.plan.outputs.version }}
-        run: |
-          git fetch origin main --tags
-
-          if git rev-parse "$VERSION_TAG" >/dev/null 2>&1; then
-            echo "Tag $VERSION_TAG already exists. Skipping publish jobs."
-            echo "publish=false" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          git tag "$VERSION_TAG" "$TARGET_SHA"
-          git push origin "$VERSION_TAG"
-          echo "publish=true" >> "$GITHUB_OUTPUT"
-
-  build:
-    needs: release
-    if: needs.release.outputs.publish == 'true'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: ${{ needs.release.outputs.version }}
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          cache: npm
-
-      - run: npm ci
-      - run: npm run format:check
-      - run: npm run lint
-      - run: npm run typecheck
-      - run: npm run build
-
-      - uses: actions/upload-artifact@v4
-        with:
-          name: web-tokens
-          path: build/web/
-
-  publish-mvn:
-    needs: [release, build]
-    if: needs.release.outputs.publish == 'true'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: ${{ needs.release.outputs.version }}
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          cache: npm
-
-      - run: npm ci
-      - run: npm run build
-
-      - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: 17
-
-      - uses: gradle/actions/setup-gradle@v3
-
-      - name: Publish to GitHub Packages
-        working-directory: android
-        env:
-          GITHUB_ACTOR: ${{ github.actor }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: ./gradlew :nucleus:publishReleasePublicationToGitHubPackagesRepository
-
-  # Primary registry: public npm (findable on npmjs, installable without auth). Independent of the
-  # GitHub Packages mirror below so a failure in one doesn't block the other.
-  publish-npm:
-    needs: [release, build]
-    if: needs.release.outputs.publish == 'true'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          name: web-tokens
-          path: web-build/
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          registry-url: https://registry.npmjs.org/
-          scope: "@worldcoin"
-
-      - name: Publish to npm
-        working-directory: web-build
-        env:
-          # npm token with publish rights to the @worldcoin org (same as minikit-js / idkit-js).
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        # --ignore-scripts: the web package is pre-built (build/web), so it has no publish-time
-        # lifecycle scripts; skipping them prevents any injected prepublish/prepare script from
-        # running while a publish token is in the environment. --access public marks the scoped
-        # package public on npm.
-        run: npm publish --ignore-scripts --access public
-
-  # Backup registry: GitHub Packages. Separate job so it runs even if the public-npm publish fails
-  # (e.g. NPM_TOKEN missing), and vice versa.
-  publish-gh-packages:
-    needs: [release, build]
-    if: needs.release.outputs.publish == 'true'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          name: web-tokens
-          path: web-build/
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          registry-url: https://npm.pkg.github.com
-          scope: "@worldcoin"
-
-      - name: Publish to GitHub Packages (backup)
-        working-directory: web-build
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npm publish --ignore-scripts

package/.github/workflows/relyance-sci.yml

@@ -1,24 +0,0 @@
-name: Relyance SCI Scan
-
-on:
-  schedule:
-    - cron: "49 0 * * *"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  execute-relyance-sci:
-    name: Relyance SCI Job
-    runs-on:
-      group: arc-public-large-amd64-runner
-    permissions:
-      contents: read
-
-    steps:
-      - name: Run Relyance SCI
-        uses: worldcoin/gh-actions-public/relyance@main
-        # More information: https://github.com/worldcoin/gh-actions-public/tree/main/relyance
-        with:
-          secrets-dpp-sci-key: ${{ secrets.DPP_SCI_KEY }}

package/.github/workflows/verify.yml

@@ -1,58 +0,0 @@
-name: Verify Builds
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-permissions:
-  contents: read
-
-jobs:
-  tokens:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-
-      - uses: actions/setup-node@v5
-        with:
-          node-version: 22
-          cache: npm
-
-      - run: npm ci
-      - run: npm run format:check
-      - run: npm run lint
-      - run: npm run typecheck
-      - run: npm run build
-
-      - name: Verify generated tokens are committed
-        run: |
-          if ! git diff --exit-code; then
-            echo "::error::Generated tokens are out of sync with the committed sources. Run 'npm run build' and commit the result."
-            exit 1
-          fi
-
-  android:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-
-      - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: 17
-
-      - uses: gradle/actions/setup-gradle@v3
-
-      - name: Run Android checks
-        working-directory: android
-        run: ./gradlew :nucleus:check
-
-  ios:
-    runs-on: macos-26
-    steps:
-      - uses: actions/checkout@v5
-
-      - name: Build SPM package
-        run: xcodebuild build -scheme Nucleus-Package -destination 'generic/platform=iOS' -skipPackagePluginValidation

package/CHANGELOG.md

@@ -1,34 +0,0 @@
-# Changelog
-
-## v0.1.4
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.1.3...v0.1.4)
-
-## v0.1.3
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.1.2...v0.1.3)
-
-## v0.1.2
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.1.1...v0.1.2)
-
-## v0.1.1
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.1.0...v0.1.1)
-
-## v0.1.0
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.6...v0.1.0)
-
-## v0.0.6
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.5...v0.0.6)
-
-## v0.0.5
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.4...v0.0.5)
-
-## v0.0.4
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.3...v0.0.4)
-
-## v0.0.3
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.2...v0.0.3)
-
-## v0.0.2
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.1...v0.0.2)
-
-## v0.0.1
-- [Full changelog](https://github.com/worldcoin/nucleus/compare/v0.0.0...v0.0.1)

package/Package.swift

@@ -1,66 +0,0 @@
-// swift-tools-version: 6.2
-
-import PackageDescription
-
-let package = Package(
-    name: "Nucleus",
-    platforms: [
-        .iOS(.v15),
-    ],
-    products: [
-        .library(
-            name: "NucleusColors",
-            targets: ["NucleusColors"]
-        ),
-        .library(
-            name: "NucleusFonts",
-            targets: ["NucleusFonts"]
-        ),
-        .library(
-            name: "NucleusButtons",
-            targets: ["NucleusButtons"]
-        ),
-        .library(
-            name: "NucleusIcons",
-            targets: ["NucleusIcons"]
-        ),
-        .library(
-            name: "NucleusTokens",
-            targets: ["NucleusTokens"]
-        ),
-    ],
-    targets: [
-        // Zero-dependency protocol target. Each primitive conforms in its own module so consumers
-        // only link what they import — no target that depends on every module.
-        .target(
-            name: "NucleusTokens",
-            path: "ios/Sources/NucleusTokens"
-        ),
-        .target(
-            name: "NucleusColors",
-            dependencies: ["NucleusTokens"],
-            path: "ios/Sources/NucleusColors"
-        ),
-        .target(
-            name: "NucleusFonts",
-            dependencies: ["NucleusTokens"],
-            path: "ios/Sources/NucleusFonts",
-            resources: [
-                .process("Resources/Fonts"),
-            ]
-        ),
-        .target(
-            name: "NucleusButtons",
-            dependencies: ["NucleusTokens", "NucleusColors", "NucleusFonts"],
-            path: "ios/Sources/NucleusButtons"
-        ),
-        .target(
-            name: "NucleusIcons",
-            dependencies: ["NucleusTokens"],
-            path: "ios/Sources/NucleusIcons",
-            resources: [
-                .process("Resources/Icons.xcassets"),
-            ]
-        ),
-    ]
-)