refactor: improve CI workflow, build system, docs, and init scripts

- Simplify VERSION_SUFFIX handling in CI by removing if/else branching
- Merge OIDC and API key NuGet push steps into a single conditional step
- Extract ApplyVersionSuffix helper to eliminate repetition across NUKE targets
- Add dotnet-stryker to tool manifest for mutation testing
- Add RefreshLockFiles NUKE target for lock file regeneration
- Set explicit IsPackable=false on test project
- Fix double-slash paths in build.sh
- Fix Calculator API docs (static class, correct parameter names)
- Migrate init script logic to NUKE Init target, simplify shell wrappers

Made-with: Cursor

Author: Hongwei-MB

.config/dotnet-tools.json

@@ -8,6 +8,13 @@
         "reportgenerator"
       ],
       "rollForward": false
+    },
+    "dotnet-stryker": {
+      "version": "4.13.0",
+      "commands": [
+        "stryker"
+      ],
+      "rollForward": false
     }
   }
 }

.github/workflows/ci.yml

@@ -260,26 +260,12 @@ jobs:
       - name: Build and test
         if: runner.os != 'Windows'
         shell: bash
-        env:
-          VERSION_SUFFIX: ${{ needs.resolve-version.outputs.version_suffix }}
-        run: |
-          if [ -n "$VERSION_SUFFIX" ]; then
-            ./build.sh Test --VersionSuffix "$VERSION_SUFFIX"
-          else
-            ./build.sh Test
-          fi
+        run: ./build.sh Test --VersionSuffix "${{ needs.resolve-version.outputs.version_suffix }}"
 
       - name: Build and test (Windows)
         if: runner.os == 'Windows'
         shell: pwsh
-        env:
-          VERSION_SUFFIX: ${{ needs.resolve-version.outputs.version_suffix }}
-        run: |
-          if ($env:VERSION_SUFFIX) {
-            ./build.ps1 Test --VersionSuffix "$env:VERSION_SUFFIX"
-          } else {
-            ./build.ps1 Test
-          }
+        run: ./build.ps1 Test --VersionSuffix "${{ needs.resolve-version.outputs.version_suffix }}"
 
       - name: Generate coverage report
         if: matrix.runtime == 'linux-x64'
@@ -468,35 +454,14 @@ jobs:
         with:
           user: ${{ vars.NUGET_USER || github.repository_owner }}
 
-      - name: Push to NuGet.org (OIDC)
-        if: env.ENABLE_NUGET == 'true' && env.NUGET_USE_OIDC == 'true'
-        shell: bash
-        env:
-          API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
-        run: |
-          shopt -s nullglob
-          PACKAGES=(artifacts/packages/*.nupkg)
-          if [ ${#PACKAGES[@]} -eq 0 ]; then
-            echo "::error::No .nupkg files found"
-            exit 1
-          fi
-          for pkg in "${PACKAGES[@]}"; do
-            echo "Pushing $pkg"
-            dotnet nuget push "$pkg" \
-              --api-key "$API_KEY" \
-              --source https://api.nuget.org/v3/index.json \
-              --skip-duplicate
-          done
-          echo "All packages pushed to NuGet.org via Trusted Publishing"
-
-      - name: Push to NuGet.org (API key)
-        if: env.ENABLE_NUGET == 'true' && env.NUGET_USE_OIDC != 'true'
+      - name: Push to NuGet.org
+        if: env.ENABLE_NUGET == 'true'
         shell: bash
         env:
-          API_KEY: ${{ secrets.NUGET_API_KEY }}
+          API_KEY: ${{ env.NUGET_USE_OIDC == 'true' && steps.nuget-login.outputs.NUGET_API_KEY || secrets.NUGET_API_KEY }}
         run: |
           if [ -z "$API_KEY" ]; then
-            echo "::error::ENABLE_NUGET is true but NUGET_API_KEY secret is not set. Either set the secret or change NUGET_USE_OIDC to true."
+            echo "::error::NUGET_API_KEY is not available. Set the secret or enable OIDC."
             exit 1
           fi
           shopt -s nullglob
@@ -512,12 +477,6 @@ jobs:
               --source https://api.nuget.org/v3/index.json \
               --skip-duplicate
           done
-          echo "All packages pushed to NuGet.org via API key"
-
-      - name: NuGet disabled
-        if: env.ENABLE_NUGET != 'true'
-        shell: bash
-        run: echo "::notice::NuGet is disabled (ENABLE_NUGET != true). Skipping NuGet push."
 
       - name: Generate SBOM
         uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1

.nuke/build.schema.json

@@ -30,10 +30,12 @@
         "CoverageReport",
         "Format",
         "GenerateReleaseManifest",
+        "Init",
         "MutationTest",
         "Pack",
         "PackageApp",
         "Publish",
+        "RefreshLockFiles",
         "Restore",
         "ShowVersion",
         "Test",
@@ -113,6 +115,10 @@
   "allOf": [
     {
       "properties": {
+        "Author": {
+          "type": "string",
+          "description": "Author / organization for Init target"
+        },
         "BenchmarkFilter": {
           "type": "string",
           "description": "Filter expression for BenchmarkDotNet (e.g., '*Calculator*')"
@@ -135,6 +141,14 @@
           "description": "Minimum line coverage percentage (0-100). CoverageReport fails if below this threshold",
           "format": "int32"
         },
+        "ProjectName": {
+          "type": "string",
+          "description": "New project name for Init target (e.g. Acme.Payments)"
+        },
+        "ResetGit": {
+          "type": "boolean",
+          "description": "Reset git history to a fresh commit during Init"
+        },
         "Runtime": {
           "type": "string",
           "description": "Target runtime identifier used by Publish target"

Directory.Build.props

@@ -31,7 +31,7 @@
 
        To publish an RC: trigger workflow_dispatch with prerelease_suffix=rc.1 -->
   <PropertyGroup>
-    <VersionPrefix>0.2.7</VersionPrefix>
+    <VersionPrefix>0.2.8</VersionPrefix>
     <FileVersion Condition="'$(BuildNumber)' != ''">$(VersionPrefix).$(BuildNumber)</FileVersion>
   </PropertyGroup>
 

build.sh

@@ -10,9 +10,9 @@ SCRIPT_DIR=$(cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd)
 ###########################################################################
 
 BUILD_PROJECT_FILE="$SCRIPT_DIR/build/_build.csproj"
-TEMP_DIRECTORY="$SCRIPT_DIR//.nuke/temp"
+TEMP_DIRECTORY="$SCRIPT_DIR/.nuke/temp"
 
-DOTNET_GLOBAL_FILE="$SCRIPT_DIR//global.json"
+DOTNET_GLOBAL_FILE="$SCRIPT_DIR/global.json"
 DOTNET_INSTALL_URL="https://dot.net/v1/dotnet-install.sh"
 DOTNET_CHANNEL="STS"
 

build/BuildTask.Helpers.cs

@@ -0,0 +1,16 @@
+using Nuke.Common.Tools.DotNet;
+
+partial class BuildTask
+{
+    DotNetBuildSettings ApplyVersionSuffix(DotNetBuildSettings settings) =>
+        string.IsNullOrWhiteSpace(VersionSuffix) ? settings : settings.SetVersionSuffix(VersionSuffix);
+
+    DotNetPackSettings ApplyVersionSuffix(DotNetPackSettings settings) =>
+        string.IsNullOrWhiteSpace(VersionSuffix) ? settings : settings.SetVersionSuffix(VersionSuffix);
+
+    DotNetPublishSettings ApplyVersionSuffix(DotNetPublishSettings settings) =>
+        string.IsNullOrWhiteSpace(VersionSuffix) ? settings : settings.SetVersionSuffix(VersionSuffix);
+
+    DotNetTestSettings ApplyVersionSuffix(DotNetTestSettings settings) =>
+        string.IsNullOrWhiteSpace(VersionSuffix) ? settings : settings.SetProperty("VersionSuffix", VersionSuffix);
+}

build/BuildTask.Parameters.cs

@@ -32,6 +32,15 @@ partial class BuildTask
     [Parameter("Minimum branch coverage percentage (0-100). CoverageReport fails if below this threshold.")]
     readonly int BranchCoverageThreshold = 90;
 
+    [Parameter("New project name for Init target (e.g. Acme.Payments)")]
+    readonly string ProjectName = string.Empty;
+
+    [Parameter("Author / organization for Init target")]
+    readonly string Author = string.Empty;
+
+    [Parameter("Reset git history to a fresh commit during Init")]
+    readonly bool ResetGit;
+
     // Common output/input locations.
     AbsolutePath ArtifactsDirectory => RootDirectory / "artifacts";
     AbsolutePath TestResultsDirectory => ArtifactsDirectory / "test-results";

build/BuildTask.Targets.Build.cs

@@ -8,19 +8,11 @@ partial class BuildTask
         .DependsOn(Restore)
         .Executes(() =>
         {
-            DotNetBuild(settings =>
-            {
-                settings = settings
+            DotNetBuild(settings => ApplyVersionSuffix(settings
                     .SetProjectFile(BuildPath)
                     .SetConfiguration(Configuration)
                     .EnableNoRestore()
-                    .SetNoLogo(true);
-
-                if (!string.IsNullOrWhiteSpace(VersionSuffix))
-                    settings = settings.SetVersionSuffix(VersionSuffix);
-
-                return settings;
-            });
+                    .SetNoLogo(true)));
 
             WriteBuildOutputsMarker();
         });