feat(035): publish to NuGet.org instead of GitHub Packages

Move Spectra package distribution to nuget.org so install requires zero
configuration. Three packages (Core, CLI, MCP) now ship with full
nuget.org metadata (Apache-2.0 license, repo URL, tags, embedded README).
Version is derived solely from the git tag via -p:PackageVersion=, no
hardcoded <Version> in csproj. publish.yml runs tests before packing,
pushes to api.nuget.org with NUGET_API_KEY, and uses --skip-duplicate
for idempotent re-runs. Bundled deploy-dashboard.yml template drops the
GitHub Packages source registration and the GH_PACKAGES_TOKEN secret;
install becomes a one-line dotnet tool install. docs/getting-started.md
install command casing fixed (spectra -> Spectra.CLI). Legacy
docs/deployment/github-packages-setup.md deleted along with the
deployment.md reference.

All 1453 existing tests pass.

Author: angelovstanton

.github/workflows/deploy-dashboard.yml.template

@@ -51,7 +51,7 @@ jobs:
           dotnet-version: '8.0'
 
       - name: Install SPECTRA CLI
-        run: dotnet tool install -g spectra-cli
+        run: dotnet tool install -g Spectra.CLI
 
       - name: Run coverage analysis with auto-linking
         run: spectra ai analyze --coverage --auto-link

.github/workflows/publish.yml

@@ -6,7 +6,6 @@ on:
 
 permissions:
   contents: write
-  packages: write
 
 jobs:
   publish:
@@ -35,16 +34,19 @@ jobs:
         run: dotnet build --configuration Release --no-restore
 
       - name: Test
-        run: dotnet test --configuration Release --no-restore
+        run: dotnet test --configuration Release --no-build
+
+      - name: Pack Spectra.Core
+        run: dotnet pack src/Spectra.Core/Spectra.Core.csproj --configuration Release --no-build --output ./nupkg -p:PackageVersion=${{ steps.version.outputs.VERSION }}
 
       - name: Pack Spectra.CLI
-        run: dotnet pack src/Spectra.CLI/Spectra.CLI.csproj --configuration Release --no-build --output ./nupkg /p:Version=${{ steps.version.outputs.VERSION }}
+        run: dotnet pack src/Spectra.CLI/Spectra.CLI.csproj --configuration Release --no-build --output ./nupkg -p:PackageVersion=${{ steps.version.outputs.VERSION }}
 
       - name: Pack Spectra.MCP
-        run: dotnet pack src/Spectra.MCP/Spectra.MCP.csproj --configuration Release --no-build --output ./nupkg /p:Version=${{ steps.version.outputs.VERSION }}
+        run: dotnet pack src/Spectra.MCP/Spectra.MCP.csproj --configuration Release --no-build --output ./nupkg -p:PackageVersion=${{ steps.version.outputs.VERSION }}
 
-      - name: Push to GitHub Packages
-        run: dotnet nuget push ./nupkg/*.nupkg --api-key ${{ secrets.GITHUB_TOKEN }} --source "https://nuget.pkg.github.com/${{ github.repository_owner }}/index.json" --skip-duplicate
+      - name: Push to NuGet.org
+        run: dotnet nuget push ./nupkg/*.nupkg --api-key ${{ secrets.NUGET_API_KEY }} --source https://api.nuget.org/v3/index.json --skip-duplicate
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2

docs/deployment.md

@@ -7,4 +7,4 @@ permalink: /deployment
 
 # Deployment
 
-Guides for deploying the SPECTRA dashboard and configuring external integrations (Cloudflare Pages, GitHub Packages, Copilot Spaces).
+Guides for deploying the SPECTRA dashboard and configuring external integrations (Cloudflare Pages, Copilot Spaces).

docs/deployment/github-packages-setup.md

@@ -25,7 +25,7 @@ Related: [CLI Reference](cli-reference.md) | [Configuration](configuration.md)
 ## Install
 
 ```bash
-dotnet tool install -g spectra
+dotnet tool install -g Spectra.CLI
 ```
 
 ## Initialize a Repository

docs/getting-started.md

@@ -0,0 +1,36 @@
+# Specification Quality Checklist: Publish to NuGet.org
+
+**Purpose**: Validate specification completeness and quality before proceeding to planning
+**Created**: 2026-04-10
+**Feature**: [spec.md](../spec.md)
+
+## Content Quality
+
+- [x] No implementation details (languages, frameworks, APIs)
+- [x] Focused on user value and business needs
+- [x] Written for non-technical stakeholders
+- [x] All mandatory sections completed
+
+## Requirement Completeness
+
+- [x] No [NEEDS CLARIFICATION] markers remain
+- [x] Requirements are testable and unambiguous
+- [x] Success criteria are measurable
+- [x] Success criteria are technology-agnostic (no implementation details)
+- [x] All acceptance scenarios are defined
+- [x] Edge cases are identified
+- [x] Scope is clearly bounded
+- [x] Dependencies and assumptions identified
+
+## Feature Readiness
+
+- [x] All functional requirements have clear acceptance criteria
+- [x] User scenarios cover primary flows
+- [x] Feature meets measurable outcomes defined in Success Criteria
+- [x] No implementation details leak into specification
+
+## Notes
+
+- The original `/speckit.specify` input was already implementation-rich (full YAML/XML snippets, file paths, exact commands). The spec deliberately abstracts away from those details and re-states the intent in user/business terms — implementation specifics will return in `/speckit.plan`.
+- "Public default .NET package feed" is used in place of "nuget.org" within FRs to keep them tool-agnostic; the Assumptions section names the concrete target.
+- Items marked incomplete require spec updates before `/speckit.clarify` or `/speckit.plan`.

specs/035-nuget-org-publish/checklists/requirements.md

@@ -0,0 +1,75 @@
+# Contract: Publish Workflow
+
+**Feature**: 035-nuget-org-publish
+**Date**: 2026-04-10
+
+This is the external contract between a maintainer pushing a tag and the resulting state on nuget.org.
+
+## Trigger
+
+| Input | Format | Example |
+|-------|--------|---------|
+| Git tag push to `AutomateThePlanet/Spectra` | `v<MAJOR>.<MINOR>.<PATCH>` | `v1.36.0` |
+
+The workflow file `.github/workflows/publish.yml` MUST declare:
+
+```yaml
+on:
+  push:
+    tags: ['v*']
+```
+
+## Inputs (provided by environment)
+
+| Input | Source | Required |
+|-------|--------|----------|
+| `GITHUB_REF` | GitHub Actions runtime | Yes (used to derive version) |
+| `secrets.NUGET_API_KEY` | Repository secret | Yes (push step fails without it) |
+
+## Steps (ordered, each MUST succeed for the next to run)
+
+1. Checkout (`actions/checkout@v6`, `fetch-depth: 0`).
+2. Setup .NET 8 SDK (`actions/setup-dotnet@v5`).
+3. Extract version: `VERSION=${GITHUB_REF#refs/tags/v}`.
+4. `dotnet restore`.
+5. `dotnet build --configuration Release --no-restore`.
+6. `dotnet test --configuration Release --no-build`. **GATE**: failure here aborts the workflow with no packages published.
+7. `dotnet pack src/Spectra.Core/Spectra.Core.csproj --configuration Release --no-build --output ./nupkg -p:PackageVersion=${VERSION}`.
+8. `dotnet pack src/Spectra.CLI/Spectra.CLI.csproj --configuration Release --no-build --output ./nupkg -p:PackageVersion=${VERSION}`.
+9. `dotnet pack src/Spectra.MCP/Spectra.MCP.csproj --configuration Release --no-build --output ./nupkg -p:PackageVersion=${VERSION}`.
+10. `dotnet nuget push ./nupkg/*.nupkg --api-key ${{ secrets.NUGET_API_KEY }} --source https://api.nuget.org/v3/index.json --skip-duplicate`.
+11. Create GitHub Release (`softprops/action-gh-release@v2`) — preserved from existing workflow, attaches the three `.nupkg` files.
+
+## Outputs (observable post-conditions)
+
+| Output | Location | Verification |
+|--------|----------|--------------|
+| `Spectra.Core.${VERSION}.nupkg` | `https://www.nuget.org/packages/Spectra.Core/${VERSION}` | Page exists, metadata matches data-model.md |
+| `Spectra.CLI.${VERSION}.nupkg` | `https://www.nuget.org/packages/Spectra.CLI/${VERSION}` | Page exists, README rendered, install command works |
+| `Spectra.MCP.${VERSION}.nupkg` | `https://www.nuget.org/packages/Spectra.MCP/${VERSION}` | Page exists, README rendered |
+| GitHub Release `v${VERSION}` | `https://github.com/AutomateThePlanet/Spectra/releases/tag/v${VERSION}` | Auto-generated notes + 3 attached `.nupkg` |
+
+## Error contract
+
+| Failure | Workflow exit | nuget.org state |
+|---------|---------------|-----------------|
+| Build fails | Step 5 fails, workflow red | Unchanged |
+| Tests fail | Step 6 fails, workflow red | Unchanged |
+| Pack fails (e.g., missing README) | Steps 7–9 fail, workflow red | Unchanged |
+| Push fails for one package, succeeds for two | Step 10 fails, workflow red | Partial — visible in nuget.org listing; maintainer bumps patch and re-tags |
+| Tag re-pushed (version already on nuget.org) | Step 10 succeeds via `--skip-duplicate`, workflow green | Unchanged (existing version preserved) |
+| `NUGET_API_KEY` missing/invalid | Step 10 fails with auth error | Unchanged |
+
+## Idempotency contract
+
+Re-running the workflow on a tag whose version is already on nuget.org MUST:
+- Produce a green workflow run (`--skip-duplicate` makes the push a no-op).
+- Leave the existing published versions byte-identical (no overwrite).
+- Re-create / update the GitHub Release if `softprops/action-gh-release@v2` is configured to do so (it is — `tag_name` matches existing).
+
+## Out of contract
+
+- This workflow does not sign packages.
+- This workflow does not produce symbol packages (.snupkg).
+- This workflow does not push to any feed other than nuget.org.
+- This workflow does not bump version files in the repo (version comes from the tag, period).

specs/035-nuget-org-publish/contracts/publish-workflow.md

@@ -0,0 +1,77 @@
+# Phase 1 — Data Model: Publish to NuGet.org
+
+**Feature**: 035-nuget-org-publish
+**Date**: 2026-04-10
+
+This feature has no runtime data model. The "entities" are build/release artifacts and configuration. They are documented here as schemas so the implementation tasks have an unambiguous target shape.
+
+## Entity 1 — Published Package
+
+A `.nupkg` file uploaded to nuget.org. One per publishable Spectra project.
+
+| Field | Source | Spectra.Core | Spectra.CLI | Spectra.MCP |
+|-------|--------|--------------|-------------|-------------|
+| `PackageId` | `.csproj` | `Spectra.Core` | `Spectra.CLI` | `Spectra.MCP` |
+| `Version` | git tag (workflow) | `${VERSION}` | `${VERSION}` | `${VERSION}` |
+| `Authors` | `.csproj` | `Anton Angelov` | `Anton Angelov` | `Anton Angelov` |
+| `Company` | `.csproj` | `Automate The Planet` | `Automate The Planet` | `Automate The Planet` |
+| `Description` | `.csproj` | "Core library for SPECTRA — AI-native test generation framework. Shared models, parsing, validation, and coverage analysis." | "AI-native test generation CLI. Generate test cases from documentation with dual-model grounding verification, coverage analysis, and visual dashboards." | "MCP execution server for SPECTRA. Deterministic AI-orchestrated test execution with state machine, pause/resume, and multi-format reports." |
+| `PackageLicenseExpression` | `.csproj` | `Apache-2.0` | `Apache-2.0` | `Apache-2.0` |
+| `PackageProjectUrl` | `.csproj` | `https://github.com/AutomateThePlanet/Spectra` | same | same |
+| `RepositoryUrl` | `.csproj` | same | same | same |
+| `RepositoryType` | `.csproj` | `git` | `git` | `git` |
+| `PackageTags` | `.csproj` | `testing;test-generation;ai;mcp;qa;test-automation;spectra` | `testing;test-generation;ai;mcp;copilot;qa;test-automation;spectra;dotnet-tool` | `testing;mcp;test-execution;ai;qa;spectra;dotnet-tool` |
+| `PackageReadmeFile` | `.csproj` | `README.md` | `README.md` | `README.md` |
+| `PackAsTool` | `.csproj` | _(absent)_ | `true` | `true` |
+| `ToolCommandName` | `.csproj` | _(N/A)_ | `spectra` | `spectra-mcp` |
+| Embedded README | `<None Include="../../README.md" Pack="true" PackagePath="/" />` | required | required | required |
+
+### Validation rules
+
+- `PackageId` MUST match the casing in README install commands and the `nuget.org` badge URLs.
+- `<Version>` element MUST NOT appear in any of the three project files. Version is supplied at pack time via `-p:PackageVersion=`.
+- `PackageLicenseExpression` MUST be `Apache-2.0` (matches the `LICENSE` file at repo root). Not `MIT`.
+- `PackageReadmeFile` MUST resolve to a file actually included in the .nupkg via the `<None>` item. If the include is missing, `dotnet pack` fails with NU5039.
+- All three projects MUST list identical `Authors`, `Company`, `RepositoryUrl`, `PackageProjectUrl`, `RepositoryType`, `PackageLicenseExpression`, `PackageReadmeFile`. Differences allowed only on `PackageId`, `Description`, `PackageTags`, `PackAsTool`, `ToolCommandName`.
+
+## Entity 2 — Release Tag
+
+A git tag matching the pattern `v*` pushed to the `AutomateThePlanet/Spectra` repository.
+
+| Field | Format | Example | Validation |
+|-------|--------|---------|------------|
+| Raw ref | `refs/tags/v<semver>` | `refs/tags/v1.36.0` | Workflow trigger filter `tags: ['v*']` |
+| Stripped version | `<semver>` | `1.36.0` | Computed by `${GITHUB_REF#refs/tags/v}`; passed to `dotnet pack -p:PackageVersion=...` |
+
+### State transitions
+
+```
+(no tag)  --[git tag v1.36.0 && git push]-->  TAG_PUSHED
+TAG_PUSHED  --[publish.yml runs]-->            BUILDING
+BUILDING    --[tests pass]-->                   PACKING
+BUILDING    --[tests fail]-->                   FAILED (no publish)
+PACKING     --[3 .nupkg produced]-->            PUSHING
+PUSHING     --[push success]-->                 PUBLISHED
+PUSHING     --[version already exists]-->       PUBLISHED (--skip-duplicate, idempotent)
+PUSHING     --[push error (auth/network)]-->    FAILED (partial state visible in run log)
+```
+
+## Entity 3 — Publish Credential
+
+A repository secret authorizing the workflow to push to nuget.org.
+
+| Field | Value |
+|-------|-------|
+| Secret name | `NUGET_API_KEY` |
+| Scope | nuget.org API key, glob `Spectra.*` |
+| Permissions | Push new packages and new versions of existing packages |
+| Consumer | `dotnet nuget push --api-key ${{ secrets.NUGET_API_KEY }}` step in `publish.yml` |
+| Provisioned by | Repository admin (already done — out of scope for this feature) |
+
+### Decommissioning
+
+The legacy secret `GH_PACKAGES_TOKEN` MUST be removable from the repo secret store after this feature ships. No workflow file may reference it. This is verified post-implementation by grepping the entire `.github/workflows/` and `src/Spectra.CLI/Templates/` directories for the string `GH_PACKAGES_TOKEN` and finding zero matches.
+
+---
+
+**Status**: Phase 1 data model complete.