chore(release): harden npm packaging for first publish

YouCanKeepSilence · claude · YouCanKeepSilence · commit a19fd92b174c · 2026-06-09T17:11:34.000+02:00
- Fix release.yml duplicate-publish guard (was querying the dead
  pre-rename package name @onramper/react-native, so it never fired)
- Add scripts/slim-xcframework.js (wired into release.yml after checksum
  verify) to drop .abi.json/.swiftsourceinfo/private+package interfaces;
  dSYMs kept for downstream symbolication
- Make package.json `files` precise (ios/*.swift + the xcframework dir)
  so ios/Tests sources and the intermediate .xcframework.zip no longer
  ship; tarball 11.9MB -&gt; 5.8MB packed (29.3MB -&gt; 20.8MB unpacked)
- Drop the dead Expo-based Android module (broke bare-RN Gradle); add a
  Platform.OS guard in OnramperNative that throws a clear iOS-only error,
  with a react-native Jest mock; update README
- Add publishConfig.access=public and a prepack guard that aborts if the
  vendored xcframework is missing (gitignored; CI fetches it)
- Fix podspec license UNLICENSED -&gt; MIT to match package.json/LICENSE
- Update bundled OnramperSDK checksum to the refreshed v1.0.0 artifact;
  example Podfile.lock checksums follow the podspec change

Co-Authored-By: Claude Opus 4.8 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -52,7 +52,7 @@ jobs:
         env:
           VERSION: ${{ steps.ver.outputs.version }}
         run: |
-          if npm view "@onramper/react-native@${VERSION}" version 2>/dev/null; then
+          if npm view "@onramper/onramper-react-native@${VERSION}" version 2>/dev/null; then
             echo "Version ${VERSION} already on npm."; exit 1
           fi
 
@@ -68,6 +68,9 @@ jobs:
       - name: Verify checksum recorded
         run: npm run verify-version
 
+      - name: Slim xcframework for npm
+        run: npm run slim-xcframework
+
       - name: Test + build
         run: |
           npm run lint
diff --git a/.gitignore b/.gitignore
@@ -7,12 +7,10 @@ yarn-debug.log
 yarn-error.log
 
 # Native
-ios/Frameworks/OnramperSDK.xcframework/
-ios/Frameworks/OnramperSDK.xcframework.zip
+# Fetched at build/publish time (npm `files` force-includes the xcframework); never tracked
+ios/Frameworks/
 ios/build/
 ios/Pods/
-android/build/
-android/.gradle/
 
 # Expo example app
 example-expo/node_modules/
diff --git a/.npmignore b/.npmignore
@@ -1,25 +1,26 @@
-# Exclude all top-level hidden directories by convention
+# Inclusion is driven by the `files` allowlist in package.json (which lists the
+# exact ios/*.swift sources + the xcframework directory, so ios/Tests and the
+# fetched .xcframework.zip are excluded by construction). This file only trims
+# stray dev artifacts that could otherwise slip in.
+
+# Top-level hidden directories
 /.*/
 
-# Exclude tarballs generated by `npm pack`
+# Tarballs generated by `npm pack`
 /*.tgz
 
-# Tests and mocks not in published package
+# Tests and mocks
 __mocks__
 __tests__
 *.test.ts
 *.test.tsx
 
-# Source xcframework is gitignored but MUST be in npm tarball
-!ios/Frameworks/OnramperSDK.xcframework/
-!ios/Frameworks/
-
-# Exclude example + native test bundles + docs/ci
+# Dev/CI/docs/example
 /babel.config.js
-/android/src/androidTest/
-/android/src/test/
-/android/build/
 /example/
-/ios/Tests/
 /docs/
 /.github/
+
+# Defensive: never ship native test sources or the intermediate framework zip
+ios/Tests/
+ios/Frameworks/*.zip
diff --git a/OnramperReactNative.podspec b/OnramperReactNative.podspec
@@ -7,7 +7,7 @@ Pod::Spec.new do |s|
   s.version        = package['version']
   s.summary        = package['description']
   s.description    = package['description']
-  s.license        = { :type => 'UNLICENSED' }
+  s.license        = { :type => 'MIT', :file => 'LICENSE' }
   s.author         = package['author']
   s.homepage       = package['homepage']
   s.platforms      = { :ios => '16.0' }
diff --git a/README.md b/README.md
@@ -2,7 +2,7 @@
 
 React Native wrapper for the Onramper iOS SDK.
 
-> **iOS only.** Android calls throw `platformUnsupported`. A native Android SDK is not part of this release.
+> **iOS only.** Constructing an `OnramperClient` on a non-iOS platform throws immediately with a clear "iOS-only in this release" error. A native Android SDK is not part of this release, and no Android native code is shipped.
 
 ## Install
 
diff --git a/__tests__/__mocks__/react-native.ts b/__tests__/__mocks__/react-native.ts
@@ -0,0 +1,8 @@
+// Minimal `react-native` mock for the node/ts-jest environment. The real module
+// can't load outside a RN runtime; tests only need `Platform`. Defaults to 'ios'
+// so the iOS-only native-creation guard in OnramperNative passes.
+export const Platform = {
+  OS: 'ios' as 'ios' | 'android' | 'web',
+  select: <T,>(specifics: { ios?: T; android?: T; default?: T }): T | undefined =>
+    specifics.ios ?? specifics.default,
+};
diff --git a/android/build.gradle b/android/build.gradle
diff --git a/android/src/main/AndroidManifest.xml b/android/src/main/AndroidManifest.xml
diff --git a/android/src/main/java/com/onramper/reactnative/OnramperReactNativeModule.kt b/android/src/main/java/com/onramper/reactnative/OnramperReactNativeModule.kt
diff --git a/example-expo/ios/Podfile.lock b/example-expo/ios/Podfile.lock
@@ -2265,7 +2265,7 @@ SPEC CHECKSUMS:
   FBLazyVector: 24e62c765683b8d89006a88a2c8f5cf019f0074d
   hermes-engine: 1e3480e747c85101d73438cb3a6199150e345f9f
   NitroModules: 16bc17a076b12304d608f7c915b9d321f56dfc19
-  OnramperReactNative: a0f6d570fce3d918cd5b1b3ab019bfabefb21c8f
+  OnramperReactNative: b9e09079bec3395b7eae69a8eb11a9286309cc59
   RCTDeprecation: a4c521821fab57cbb125b36effe84d897d0dfa12
   RCTRequired: 9f3a7e5645d4bc3f551593de7550bb66ab6e42bc
   RCTSwiftUI: 239ed2eb9e73de5a6f518810630f0c95e01c8702
diff --git a/example/ios/Podfile.lock b/example/ios/Podfile.lock
@@ -2145,7 +2145,7 @@ SPEC CHECKSUMS:
   FBLazyVector: 24e62c765683b8d89006a88a2c8f5cf019f0074d
   hermes-engine: 8fc490c7fad76475c7610cd63c9a55316b6dca16
   NitroModules: 16bc17a076b12304d608f7c915b9d321f56dfc19
-  OnramperReactNative: a0f6d570fce3d918cd5b1b3ab019bfabefb21c8f
+  OnramperReactNative: b9e09079bec3395b7eae69a8eb11a9286309cc59
   RCTDeprecation: a4c521821fab57cbb125b36effe84d897d0dfa12
   RCTRequired: 9f3a7e5645d4bc3f551593de7550bb66ab6e42bc
   RCTSwiftUI: 239ed2eb9e73de5a6f518810630f0c95e01c8702
diff --git a/jest.config.js b/jest.config.js
@@ -8,5 +8,6 @@ module.exports = {
   },
   moduleNameMapper: {
     '^react-native-nitro-modules$': '<rootDir>/__tests__/__mocks__/react-native-nitro-modules.ts',
+    '^react-native$': '<rootDir>/__tests__/__mocks__/react-native.ts',
   },
 };
diff --git a/package.json b/package.json
@@ -24,8 +24,8 @@
   "files": [
     "lib",
     "src",
-    "ios",
-    "android",
+    "ios/*.swift",
+    "ios/Frameworks/OnramperSDK.xcframework",
     "nitrogen/generated",
     "nitro.json",
     "OnramperReactNative.podspec",
@@ -43,8 +43,13 @@
     "typecheck": "tsc --noEmit",
     "nitrogen": "nitrogen && node scripts/sync-view-config.js",
     "prepare": "bob build",
+    "prepack": "node scripts/check-xcframework.js",
     "verify-version": "node scripts/verify-version.js",
-    "fetch-xcframework": "node scripts/fetch-xcframework.js"
+    "fetch-xcframework": "node scripts/fetch-xcframework.js",
+    "slim-xcframework": "node scripts/slim-xcframework.js"
+  },
+  "publishConfig": {
+    "access": "public"
   },
   "keywords": [
     "react-native",
@@ -58,7 +63,7 @@
   "license": "MIT",
   "homepage": "https://github.com/onramper/onramper-react-native#readme",
   "onramperSDK": {
-    "checksum": "26cd91f63b8f6ab40a9e572d2ad3f2254151fc66005cd54e88e7f3c787dda4c6"
+    "checksum": "c644d91bc2fb03e79213e5c326310875a07889ab8ba009bc29449ea7517590bf"
   },
   "peerDependencies": {
     "react": ">=19.0.0",
@@ -83,8 +88,18 @@
     "source": "src",
     "output": "lib",
     "targets": [
-      ["commonjs", { "esm": true }],
-      ["module", { "esm": true }],
+      [
+        "commonjs",
+        {
+          "esm": true
+        }
+      ],
+      [
+        "module",
+        {
+          "esm": true
+        }
+      ],
       "typescript"
     ]
   }
diff --git a/scripts/check-xcframework.js b/scripts/check-xcframework.js
@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+// prepack guard: refuse to pack/publish if the vendored xcframework is missing.
+// The framework is gitignored and fetched via `npm run fetch-xcframework`, so a
+// manual `npm pack`/`npm publish` from a fresh checkout would otherwise ship a
+// binary-less, broken package. CI fetches it before publishing, so this is the
+// safety net for local publishes.
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const xcframework = path.resolve(__dirname, '..', 'ios', 'Frameworks', 'OnramperSDK.xcframework');
+
+if (!fs.existsSync(xcframework)) {
+  console.error('ios/Frameworks/OnramperSDK.xcframework is missing.');
+  console.error('Run `npm run fetch-xcframework` before packing or publishing.');
+  process.exit(1);
+}
diff --git a/scripts/slim-xcframework.js b/scripts/slim-xcframework.js
@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+// Trims link-irrelevant artifacts from ios/Frameworks/OnramperSDK.xcframework
+// before the framework is packed into the npm tarball. Run AFTER
+// `fetch-xcframework` + `verify-version` (those hash the source .zip; this
+// mutates the unzipped directory only).
+//
+// Removed (not used to compile/link against the framework):
+//   - **/*.swiftmodule/*.abi.json                 (ABI-diffing tooling only)
+//   - **/*.swiftmodule/Project/                   (*.swiftsourceinfo; leaks internal paths)
+//   - **/*.swiftmodule/*.private.swiftinterface   (non-public API surface)
+//   - **/*.swiftmodule/*.package.swiftinterface   (non-public API surface)
+//
+// KEPT intentionally: dSYMs (downstream crash symbolication), the OnramperSDK
+// binary, Info.plist, the public *.swiftinterface + *.swiftdoc, module.modulemap,
+// the resource bundle, and PrivacyInfo.xcprivacy.
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const root = path.resolve(__dirname, '..');
+const xcframework = path.join(root, 'ios', 'Frameworks', 'OnramperSDK.xcframework');
+
+if (!fs.existsSync(xcframework)) {
+  console.error('ios/Frameworks/OnramperSDK.xcframework not found — run `npm run fetch-xcframework` first.');
+  process.exit(1);
+}
+
+let removedFiles = 0;
+let removedBytes = 0;
+
+function sizeOf(p) {
+  const st = fs.statSync(p);
+  if (!st.isDirectory()) return st.size;
+  return fs
+    .readdirSync(p)
+    .reduce((sum, name) => sum + sizeOf(path.join(p, name)), 0);
+}
+
+function remove(p) {
+  removedBytes += sizeOf(p);
+  const before = countFiles(p);
+  fs.rmSync(p, { recursive: true, force: true });
+  removedFiles += before;
+}
+
+function countFiles(p) {
+  const st = fs.statSync(p);
+  if (!st.isDirectory()) return 1;
+  return fs.readdirSync(p).reduce((n, name) => n + countFiles(path.join(p, name)), 0);
+}
+
+// Walk every *.swiftmodule directory inside the framework and prune within it.
+function walk(dir) {
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name.endsWith('.swiftmodule')) {
+        pruneSwiftModule(full);
+      } else {
+        walk(full);
+      }
+    }
+  }
+}
+
+function pruneSwiftModule(moduleDir) {
+  for (const entry of fs.readdirSync(moduleDir, { withFileTypes: true })) {
+    const full = path.join(moduleDir, entry.name);
+    if (entry.isDirectory() && entry.name === 'Project') {
+      remove(full); // *.swiftsourceinfo
+    } else if (
+      entry.isFile() &&
+      (entry.name.endsWith('.abi.json') ||
+        entry.name.endsWith('.private.swiftinterface') ||
+        entry.name.endsWith('.package.swiftinterface'))
+    ) {
+      remove(full);
+    }
+  }
+}
+
+walk(xcframework);
+
+console.log(
+  `Slimmed xcframework: removed ${removedFiles} file(s), ${(removedBytes / 1e6).toFixed(1)} MB (dSYMs kept).`,
+);
diff --git a/src/OnramperNative.ts b/src/OnramperNative.ts
@@ -1,3 +1,4 @@
+import { Platform } from 'react-native';
 import { NitroModules } from 'react-native-nitro-modules';
 import type { OnramperNitro } from './specs/OnramperNitro.nitro';
 
@@ -7,6 +8,11 @@ import type { OnramperNitro } from './specs/OnramperNitro.nitro';
  * isolated per client and torn down by `destroy()` → `dispose()`.
  */
 export function createOnramperNative(): OnramperNitro {
+  // iOS-only in this release. Fail with a clear message rather than the opaque
+  // "hybrid object not found" Nitro would throw on platforms without a native impl.
+  if (Platform.OS !== 'ios') {
+    throw new Error(`Onramper React Native is iOS-only in this release; it is not supported on ${Platform.OS}.`);
+  }
   return NitroModules.createHybridObject<OnramperNitro>('OnramperNitro');
 }
 
