Verify NuGet packages

Run the complete package check from the repository root:

bash scripts/verify-packages.sh

Requires .NET SDK 10.0.100 or later with .NET 10 support, Bash, a Git checkout, and access to nuget.org for third-party dependencies. The C# verification tools use .NET file-based apps and the standard library; no additional tool installation is required. The native rendering example is exercised on Linux in CI.

Packages

All packages target net10.0 and share the version in Directory.Build.props, bumped by the release pull request. Each package includes its own English README, the original Moongate logo, XML documentation, and a companion symbol package.

Package and README	Purpose	Direct Moongate dependencies
Moongate.Admin.Contracts	Versioned gRPC contracts and portable .proto definitions	None
Moongate.Core	Shared primitives, geometry, configuration, and utilities	None
Moongate.Hosting	Generic host layer: startup services, event bus, plugin registry, configuration sections, and the contracts of the loop, timers, diagnostics, and shutdown	Core
Moongate.Network	Standalone TCP transport, framing, and pipelines	None
Moongate.Network.Packets	UO packet definitions and span-based serialization	Core
Moongate.Persistence	Asynchronous PostgreSQL modules, transactions, schema operations, and typed entity access	Core, Persistence.Migrations
Moongate.Persistence.Migrations	Versioned SQL catalogs and immutable migration history validation	None
Moongate.Scripting	Embedded Lua 5.2 runtime, attribute-bound modules, coroutine scheduling and editor definitions	Core, Server.Core
Moongate.Server.Core	Server and plugin contracts, and the registrations of the game server	Core, Hosting, Network, Network.Packets
Moongate.Ultima	UO client data readers and rendering utilities	None

Moongate.Server, Moongate.Ctl and the library it runs, Moongate.MigrationRunner, are executables distributed through release artifacts and container images. They do not produce library packages. Moongate.Server.Admin and Moongate.Server.Ultima are embedded modules shipped with the server, also non-packable. Tests and plugin fixtures are excluded from packing.

What the command checks

1. Builds and packs the solution in Release into a new artifacts/nuget.* directory.
2. Checks exactly ten .nupkg and ten .snupkg files: metadata, dependencies, README bytes, original logo hash, DLL/XML payload, Portable PDB identity, and SourceLink pointing to the repository commit recorded in the package.
3. Extracts the marked C# examples from each README into ten temporary console apps outside the repository. Each app references one Moongate package directly; the persistence verifier references Npgsql to provision its isolated database.
4. Restores, builds, and runs those apps, checking their output. This exercises geometry, TCP lifecycle, packet encoding/decoding, PostgreSQL persistence, the event bus, embedded Lua module execution, and native SkiaSharp loading. Separate solution tests verify Redis-backed realm leases and one-use login handoff tickets.

The persistence consumer requires MOONGATE_TEST_POSTGRES_CONNECTION_STRING as an administrative Npgsql connection. It creates a unique moongate_test_nuget_<uuid> database, runs the README example there, and drops only that generated database. Missing configuration fails with an actionable message; it never silently skips.

The current FreeSql.Provider.PostgreSQL 3.5.311 dependency resolves Npgsql 5.0.18. Keep that acknowledged provider constraint rather than silently overriding Npgsql to another major. A provider/driver upgrade must pass the real PostgreSQL package consumer and solution compatibility tests described here.

The solution’s PostgreSQL fixtures use the same connection contract when MOONGATE_TEST_POSTGRES_CONNECTION_STRING is set, and likewise MOONGATE_TEST_REDIS_CONNECTION_STRING for Redis; without them, the solution tests start PostgreSQL and Redis containers through Docker. See the integration-test prerequisites. Run test projects serially because their hosts share these services:

dotnet test Moongate.slnx -c Release -m:1

Each fixture creates a unique moongate_test_<uuid> database and drops only that database. Never use an operator Accounts or Realm connection for this variable.

Consumer apps use a new temporary NuGet cache for each invocation. Package source mapping restricts Moongate.* to the generated local feed and resolves external dependencies from nuget.org. Existing global packages cannot make a broken local package appear to work. No UO client files, external game servers, or fixed listening ports are needed.

Output and troubleshooting

Successful runs print a PASS line per library for both archive and consumer validation, followed by the package output directory. The generated archives remain in that directory for inspection and are ignored by Git. Consumer workspaces are removed after success. On failure, the tool prints the failing operation and retains its temporary workspace for diagnosis.

To rerun a check against an existing output directory, pass its path explicitly:

dotnet run --file scripts/VerifyNuGetPackages.cs -- "$PWD" /path/to/package-directory
dotnet run --file scripts/VerifyNuGetConsumers.cs -- "$PWD" /path/to/package-directory

An empty symbol package indicates missing PDB output. The ten library projects set Release DebugType=portable in their .csproj files, before MSBuild computes symbol output items. Setting it later in Directory.Build.targets is insufficient. Shared README, icon, and symbol-pack metadata are configured in that targets file. The server retains embedded debug information.

A native rendering failure should be reproduced on the deployment platform with its SkiaSharp native runtime. Linux CI does not certify Windows or macOS execution.

CI and publishing

The Release configuration of .forgejo/workflows/ci.yml runs the same verification command after the solution tests. The existing third-party notices check remains enabled. These checks do not publish anything or require a NuGet API key.

Publication is a separate responsibility of the existing release workflow. Running the verification script does not create a release or push packages to a feed. Packability is opt-in: the shared default is IsPackable=false, and only the ten library projects explicitly enable it. Their existing ProjectReference entries become NuGet dependencies instead of bundled copies of other project assemblies.

When changing an example, keep its nuget-smoke HTML comment directly above the C# code fence so the consumer check continues to compile the documented code.