实战：Bitz CLI 的 NuGet 双轨分发与发版运维手册

<Project Sdk="Microsoft.NET.Sdk">

  <PropertyGroup>
    <!-- 输出类型必须为可执行文件 -->
    <OutputType>Exe</OutputType>
    <TargetFramework>net10.0</TargetFramework>
    <Nullable>enable</Nullable>
    <ImplicitUsings>enable</ImplicitUsings>

    <!-- 关键属性：声明为可分发的 .NET 全局工具 -->
    <PackAsTool>true</PackAsTool>
    <!-- 注册到系统 PATH 的短指令别名 -->
    <ToolCommandName>bitz</ToolCommandName>
    <PackageOutputPath>$(MSBuildThisFileDirectory)../../artifacts/packages</PackageOutputPath>

    <!-- 包标识与语义版本元数据 -->
    <PackageId>BitzOrcas.Cli</PackageId>
    <Title>Bitz CLI Developer Toolchain</Title>
    <Authors>BitzOrcas Core Architecture Team</Authors>
    <Company>LinkedLaw BitzSoft</Company>
    <Description>Developer toolchain, vertical slice scaffolding, and licensing manager for BitzOrcas.Modern.</Description>
    <PackageTags>dotnet-tool;bitz;architecture;scaffolding;cqrs</PackageTags>
    <PackageLicenseExpression>Apache-2.0</PackageLicenseExpression>
  </PropertyGroup>

</Project>

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <packageSources>
    <clear />
    <!-- 官方公共源 -->
    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
    <!-- 商业企业私有源 -->
    <add key="BitzOrcasCommercial" value="%BITZORCAS_COMMERCIAL_FEED_URL%" />
  </packageSources>

  <!-- 强制包命名空间映射，彻底阻断依赖混淆与钓鱼包投毒 -->
  <packageSourceMapping>
    <!-- 公共开源包仅允许从 nuget.org 检索并拉取 -->
    <packageSource key="nuget.org">
      <package pattern="*" />
      <package pattern="BitzOrcas.Cli" />
      <package pattern="Microsoft.*" />
      <package pattern="System.*" />
    </packageSource>

    <!-- 商业私有包严禁检索公网，仅受信任的内部云效源提供 -->
    <packageSource key="BitzOrcasCommercial">
      <package pattern="BitzOrcas.*" />
      <package pattern="BitzOrcas.Cli.Enterprise" />
      <package pattern="Bitzsoft.Licensing.*" />
    </packageSource>
  </packageSourceMapping>
</configuration>

name: Publish Bitz CLI Global Tool

on:
  push:
    tags:
      - 'v*.*.*'

jobs:
  build-and-publish:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Setup .NET 10 SDK
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '10.0.x'

      - name: Pack CLI
        run: |
          VERSION=${GITHUB_REF_NAME#v}
          dotnet pack src/tooling/BitzOrcas.Cli/BitzOrcas.Cli.csproj \
            -c Release \
            -p:Version=${VERSION} \
            -o ./artifacts/packages

      - name: Push to Enterprise Yunxiao Feed
        env:
          FEED_URL: ${{ secrets.BITZORCAS_COMMERCIAL_FEED_URL }}
          FEED_TOKEN: ${{ secrets.BITZORCAS_COMMERCIAL_PUSH_TOKEN }}
        run: |
          dotnet nuget push ./artifacts/packages/*.nupkg \
            --source "${FEED_URL}" \
            --api-key "${FEED_TOKEN}" \
            --skip-duplicate

      - name: Push to NuGet.org (Public Track)
        if: "!contains(github.ref, '-rc') && !contains(github.ref, '-beta')"
        env:
          NUGET_KEY: ${{ secrets.NUGET_ORG_API_KEY }}
        run: |
          dotnet nuget push ./artifacts/packages/BitzOrcas.Cli.*.nupkg \
            --source https://api.nuget.org/v3/index.json \
            --api-key "${NUGET_KEY}" \
            --skip-duplicate