Publish nexis_wasm_plugin crate on release CI

Add a release.yml job and inputs to publish nexis_wasm_plugin via OIDC.
Bump crate version and metadata, add the crate README, and update docs,
examples, and RELEASING.md to document publishing steps.

Author: TriForMine

.github/workflows/release.yml

@@ -13,6 +13,11 @@ on:
         required: false
         default: true
         type: boolean
+      publish_crate_nexis_wasm_plugin:
+        description: "Publish nexis_wasm_plugin crate to crates.io"
+        required: false
+        default: true
+        type: boolean
       publish_images:
         description: "Build and publish Docker images to GHCR"
         required: false
@@ -31,6 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       sdk_ts: ${{ steps.set.outputs.sdk_ts }}
+      crate_nexis_wasm_plugin: ${{ steps.set.outputs.crate_nexis_wasm_plugin }}
       image_rust_server: ${{ steps.set.outputs.image_rust_server }}
       image_control_api: ${{ steps.set.outputs.image_control_api }}
       image_dashboard_ui: ${{ steps.set.outputs.image_dashboard_ui }}
@@ -45,6 +51,8 @@ jobs:
           filters: |
             sdk_ts:
               - 'sdks/ts/**'
+            crate_nexis_wasm_plugin:
+              - 'plugins/rust/nexis_wasm_plugin/**'
             image_rust_server:
               - 'server/**'
               - 'plugins/**'
@@ -60,12 +68,14 @@ jobs:
         run: |
           if [[ "${GITHUB_REF}" == refs/tags/v* ]] || [[ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" ]]; then
             sdk_ts=true
+            crate_nexis_wasm_plugin=true
             image_rust_server=true
             image_control_api=true
             image_dashboard_ui=true
             image_web_demo=true
           else
             sdk_ts="${{ steps.filter.outputs.sdk_ts }}"
+            crate_nexis_wasm_plugin="${{ steps.filter.outputs.crate_nexis_wasm_plugin }}"
             image_rust_server="${{ steps.filter.outputs.image_rust_server }}"
             image_control_api="${{ steps.filter.outputs.image_control_api }}"
             image_dashboard_ui="${{ steps.filter.outputs.image_dashboard_ui }}"
@@ -78,6 +88,7 @@ jobs:
           fi
 
           echo "sdk_ts=${sdk_ts}" >> "$GITHUB_OUTPUT"
+          echo "crate_nexis_wasm_plugin=${crate_nexis_wasm_plugin}" >> "$GITHUB_OUTPUT"
           echo "image_rust_server=${image_rust_server}" >> "$GITHUB_OUTPUT"
           echo "image_control_api=${image_control_api}" >> "$GITHUB_OUTPUT"
           echo "image_dashboard_ui=${image_dashboard_ui}" >> "$GITHUB_OUTPUT"
@@ -388,6 +399,46 @@ jobs:
         working-directory: sdks/ts
         run: npm publish --access public --provenance --tag ${{ steps.npm_tag.outputs.tag }}
 
+  publish-crate-nexis-wasm-plugin:
+    needs: [changes, validate]
+    if: startsWith(github.ref, 'refs/tags/v') && (github.event_name == 'push' || inputs.publish_crate_nexis_wasm_plugin == true) && needs.changes.outputs.crate_nexis_wasm_plugin == 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    environment: release
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@1.89.0
+      - name: Read crate version
+        id: crate
+        shell: bash
+        run: |
+          version="$(grep -m1 '^version = ' plugins/rust/nexis_wasm_plugin/Cargo.toml | sed -E 's/version = \"([^\"]+)\"/\1/')"
+          echo "version=${version}" >> "$GITHUB_OUTPUT"
+      - name: Check if crate version already exists on crates.io
+        id: exists
+        shell: bash
+        run: |
+          if curl -fsS "https://crates.io/api/v1/crates/nexis_wasm_plugin/${{ steps.crate.outputs.version }}" > /dev/null; then
+            echo "already_published=true" >> "$GITHUB_OUTPUT"
+            echo "nexis_wasm_plugin@${{ steps.crate.outputs.version }} is already published."
+          else
+            echo "already_published=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Dry-run publish
+        if: steps.exists.outputs.already_published != 'true'
+        run: cargo publish --dry-run --locked --manifest-path plugins/rust/nexis_wasm_plugin/Cargo.toml
+      - name: Authenticate with crates.io (trusted publishing)
+        if: steps.exists.outputs.already_published != 'true'
+        id: auth
+        uses: rust-lang/crates-io-auth-action@v1
+      - name: Publish crate to crates.io
+        if: steps.exists.outputs.already_published != 'true'
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
+        run: cargo publish --locked --manifest-path plugins/rust/nexis_wasm_plugin/Cargo.toml
+
   build-rust-server-binary:
     needs: validate
     if: startsWith(github.ref, 'refs/tags/v')

README.md

@@ -1,5 +1,7 @@
 # NEXIS
 
+[![npm version](https://img.shields.io/npm/v/%40triformine%2Fnexis-sdk?logo=npm&label=npm)](https://www.npmjs.com/package/@triformine/nexis-sdk)
+
 Nexis is an open-source, engine-agnostic multiplayer backend platform with:
 
 - a Rust data plane for realtime gameplay traffic

RELEASING.md

@@ -16,6 +16,7 @@ This document defines the release process for Nexis.
    - `server/Cargo.toml` workspace version
    - `sdks/ts/package.json`
    - `dashboard/control-api/package.json`
+   - `plugins/rust/nexis_wasm_plugin/Cargo.toml`
 3. Update `CHANGELOG.md`.
 4. Run quality gates:
    - `cargo test --manifest-path server/Cargo.toml`
@@ -24,6 +25,7 @@ This document defines the release process for Nexis.
    - `bun test` in `dashboard/control-api`
    - `bunx tsc --noEmit` in `dashboard/control-api`
    - `bun run build` in `docs-site`
+   - `cargo publish --dry-run --manifest-path plugins/rust/nexis_wasm_plugin/Cargo.toml`
 5. Validate stack (locally or CI compose-smoke):
    - `docker compose -f infra/docker-compose.yml up -d --build --wait`
    - `bun infra/smoke.ts`
@@ -56,6 +58,32 @@ On tag push (`v*`) it:
    - `ghcr.io/<owner>/web-demo:<tag>`
    - plus `:latest`
 3. publishes `@triformine/nexis-sdk` to npm
+4. publishes `nexis_wasm_plugin` to crates.io
+
+## crates.io Publish (`nexis_wasm_plugin`)
+
+`release.yml` publishes this crate automatically on tag pushes (`v*`) using
+crates.io trusted publishing (OIDC).
+
+One-time setup on crates.io:
+
+1. Open crate settings for `nexis_wasm_plugin`.
+2. Add trusted publisher:
+   - Provider: `GitHub Actions`
+   - Organization/user: `TriForMine`
+   - Repository: `nexis`
+   - Workflow filename: `release.yml`
+3. Save configuration.
+
+Manual fallback:
+
+1. Run dry-run:
+   - `cargo publish --dry-run --manifest-path plugins/rust/nexis_wasm_plugin/Cargo.toml`
+2. Publish:
+   - `cargo publish --manifest-path plugins/rust/nexis_wasm_plugin/Cargo.toml`
+3. Verify:
+   - <https://crates.io/crates/nexis_wasm_plugin>
+   - <https://docs.rs/nexis_wasm_plugin>
 
 ## npm Trusted Publishing (OIDC)
 

docs-site/content/docs/guides/plugins.mdx

@@ -32,6 +32,14 @@ Best when:
 
 Configured through `NEXIS_WASM_ROOM_PLUGINS`.
 
+Rust plugin authors can use the helper crate published on crates.io:
+
+```toml
+[dependencies]
+nexis_wasm_plugin = "0.1.5"
+serde_json = "1"
+```
+
 ## Message contract inside plugins
 
 Room message payload in plugin `on_message`:

examples/wasm-plugins/README.md

@@ -10,6 +10,16 @@ This example uses Nexis' Rust helper crate:
 
 so plugin authors write normal Rust handlers instead of raw ABI exports.
 
+For external projects, depend on crates.io:
+
+```toml
+[dependencies]
+nexis_wasm_plugin = "0.1.5"
+serde_json = "1"
+```
+
+Inside this monorepo example, we keep a local path dependency for development.
+
 Build:
 
 ```bash

plugins/rust/nexis_wasm_plugin/Cargo.lock

@@ -2,11 +2,22 @@
 name = "nexis_wasm_plugin"
 version = "0.1.5"
 edition = "2021"
+rust-version = "1.89"
 license = "Apache-2.0"
+description = "Rust helper crate for authoring Nexis runtime-loaded WASM room plugins."
+readme = "README.md"
+repository = "https://github.com/TriForMine/nexis"
+homepage = "https://triformine.github.io/nexis/"
+documentation = "https://docs.rs/nexis_wasm_plugin"
+keywords = ["nexis", "multiplayer", "wasm", "plugin"]
+categories = ["api-bindings", "game-development", "wasm"]
 authors = ["TriForMine <quentin@triformine.dev>"]
 
 [lib]
 path = "src/lib.rs"
 
 [dependencies]
 serde_json = "1"
+
+[package.metadata.docs.rs]
+targets = ["wasm32-unknown-unknown"]

plugins/rust/nexis_wasm_plugin/Cargo.toml

@@ -0,0 +1,67 @@
+# nexis_wasm_plugin
+
+Rust helper crate for building Nexis runtime-loaded WASM room plugins.
+
+This crate gives plugin authors:
+
+- a `RoomPlugin` trait with lifecycle hooks
+- a `PluginOutput` type for returning state and optional events
+- an `export_plugin!` macro that exports the host ABI functions
+
+## Install
+
+```toml
+[dependencies]
+nexis_wasm_plugin = "0.1.5"
+serde_json = "1"
+```
+
+## Minimal Plugin
+
+```rust
+use nexis_wasm_plugin::{export_plugin, PluginOutput, RoomPlugin};
+use serde_json::{json, Value};
+
+#[derive(Default)]
+struct CounterPlugin;
+
+impl RoomPlugin for CounterPlugin {
+    fn initial_state(&self) -> Value {
+        json!({ "counter": 0 })
+    }
+
+    fn on_message(&self, state: &Value, input: &Value) -> PluginOutput {
+        if input.get("type").and_then(Value::as_str) == Some("inc") {
+            let by = input
+                .get("data")
+                .and_then(|data| data.get("by"))
+                .and_then(Value::as_i64)
+                .unwrap_or(1);
+            let current = state.get("counter").and_then(Value::as_i64).unwrap_or(0);
+            let next = current + by;
+            return PluginOutput::state_with_event(
+                json!({ "counter": next }),
+                json!({ "type": "counter.updated", "data": { "counter": next } }),
+            );
+        }
+
+        PluginOutput::state(state.clone())
+    }
+}
+
+export_plugin!(CounterPlugin);
+```
+
+## Build for Nexis Runtime
+
+```bash
+rustup target add wasm32-unknown-unknown
+cargo build --target wasm32-unknown-unknown --release
+```
+
+Use the generated `.wasm` in `NEXIS_WASM_ROOM_PLUGINS`.
+
+## Compatibility
+
+`nexis_wasm_plugin` follows Nexis `0.x` compatibility policy: APIs can evolve between minor releases.
+Pin and test before upgrading.