源盾（CodeShield）用户使用手册

./gradlew bceGeneratePassword --no-daemon

mvn com.telecwin.codeshield:codeshield-maven-plugin:1.8.1:generate-password

============================================================
  BCE 加密密码（请妥善保存，丢失将无法解密）
============================================================
  RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ=
============================================================

plugins {
    id 'com.telecwin.codeshield.jvm' version '1.8.1'
}

bceProtect {
    licenseKey = 'YOUR-LICENSE-KEY'  // 替换为你的许可证密钥
    password = 'RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ='
    encryptStrings = true
    excludeStrings = ['java.', 'org.springframework']
}

./gradlew bceProtect --no-daemon

<plugin>
    <groupId>com.telecwin.codeshield</groupId>
    <artifactId>codeshield-maven-plugin</artifactId>
    <version>1.8.1</version>
    <configuration>
        <licenseKey>YOUR-LICENSE-KEY</licenseKey>
        <password>RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ=</password>
        <encryptStrings>true</encryptStrings>
        <excludeStrings>java.,org.springframework</excludeStrings>
    </configuration>
    <executions>
        <execution>
            <goals>
                <goal>protect</goal>
                <goal>extract-agent</goal>
            </goals>
        </execution>
    </executions>
</plugin>

mvn package

# Gradle
./gradlew bceProtect --no-daemon
ls build/libs/*-protected.jar build/libs/bce_agent.dll

# Maven
mvn package
ls target/*-protected.jar target/bce_agent.dll

java -agentpath:./bce_agent.dll=RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ= \
     -jar build/libs/myapp-1.0.0-protected.jar

bceProtect {
    licenseKey = 'YOUR-LICENSE-KEY'
    password = '...'
}

<configuration>
    <licenseKey>YOUR-LICENSE-KEY</licenseKey>
    <password>...</password>
</configuration>

bce-protect.exe input.jar output.jar <password> --license-key=YOUR-LICENSE-KEY

# Windows PowerShell
$env:BCE_LICENSE_KEY="YOUR-LICENSE-KEY"

# Linux/macOS
export BCE_LICENSE_KEY="YOUR-LICENSE-KEY"

License machine limit reached: 3/3 machine(s) already bound to this license.
Please deactivate a previously bound machine first, or contact your license administrator to increase the machine limit.

bceProtect {
    licenseKey = 'YOUR-LICENSE-KEY'
    licenseFile = file('bce.lic')
    password = '...'
}

<configuration>
    <licenseKey>YOUR-LICENSE-KEY</licenseKey>
    <licenseFile>${project.basedir}/bce.lic</licenseFile>
    <password>...</password>
</configuration>

# 配置了 license-file 时仍先尝试在线，失败自动回退离线；--offline 强制离线
bce-protect.exe input.jar output.jar <password> \
    --license-key=YOUR-LICENSE-KEY \
    --license-file=bce.lic --offline

./gradlew bcePrintFingerprint --no-daemon

pluginManagement {
    repositories {
        mavenCentral()         // 源盾插件从这里解析（v1.8.1+）
        gradlePluginPortal()   // 其他插件的兜底的，保留
    }
}

plugins {
    id 'com.telecwin.codeshield.jvm' version '1.8.1'
}

buildscript {
    repositories {
        mavenCentral()   // v1.8.1 起插件在 Maven Central
    }
    dependencies {
        classpath 'com.telecwin.codeshield:codeshield-gradle-plugin:1.8.1'
    }
}

apply plugin: 'com.telecwin.codeshield.jvm'

bceProtect {
    // ===== 必填 =====
    licenseKey = 'YOUR-LICENSE-KEY'  // 许可证密钥（或设 BCE_LICENSE_KEY）
    password = '...'

    // ===== 许可证（可选）=====
    licenseFile = file('bce.lic')   // 离线许可证文件，见第三章
    offline     = false            // true 时强制离线校验

    // ===== 输入/输出 =====
    inputJar = file('build/libs/myapp.jar')
    outputJar = file('build/libs/myapp-protected.jar')

    // ===== 字符串加密 =====
    encryptStrings = true
    excludeStrings = ['java.', 'org.springframework']

    // ===== M1 全加密白名单（YAML）=====
    configFile = 'bce-full-encrypt.yaml'

    // ===== 额外 JAR 同步加密 =====
    extraJars = ['geo_utils', 'com.example:geo_utils', 'libs/custom.jar']

    // ===== Native Agent 输出 =====
    outputAgentDll = true          // 默认 true
    agentDllName = 'bce_agent.dll' // 默认 'bce_agent.dll'

    // ===== 名称混淆 =====
    obfuscationEnabled = false
    obfuscationClasses = ['com.example.SecretUtil']
    obfuscationAdaptClassStrings = true
    obfuscationGenerateMapping = true
}

<plugin>
    <groupId>com.telecwin.codeshield</groupId>
    <artifactId>codeshield-maven-plugin</artifactId>
    <version>1.8.1</version>
    <configuration>
        <licenseKey>YOUR-LICENSE-KEY</licenseKey>
        <password>...</password>
    </configuration>
    <executions>
        <execution>
            <goals>
                <goal>protect</goal>
            </goals>
        </execution>
    </executions>
</plugin>

# 生成密码
bce-protect.exe --generate-password

# 打印本机硬件指纹（许可证激活/排障用）
bce-protect.exe --print-fingerprint

# 加密 JAR（在线校验许可证）
bce-protect.exe \
    input.jar \
    output-protected.jar \
    RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ= \
    true "java.,org.springframework" \
    --full-encrypt=com.example.CryptoHelper,com.example.AESUtil \
    --license-key=YOUR-LICENSE-KEY

# 加密 JAR（强制离线校验）
bce-protect.exe input.jar output-protected.jar <password> \
    --license-key=YOUR-LICENSE-KEY \
    --license-file=bce.lic --offline

# 运行时
java -agentpath:./bce_agent.dll=RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ= \
     -jar output-protected.jar

# Windows
java -agentpath:/opt/codeshield/bce_agent.dll=YOUR_PASSWORD -jar app-protected.jar

# Linux
java -agentpath:/opt/codeshield/libbce_agent.so=YOUR_PASSWORD -jar app-protected.jar

# bce-full-encrypt.yaml
fullEncryptClasses:
  - com.example.util.CryptoHelper
  - com.example.algorithm.AESUtil

excludePackages:
  - com.example.controller
  - com.example.entity

excludeClasses:
  - com.example.*Test

bceProtect {
    password = '...'
    configFile = 'bce-full-encrypt.yaml'
}

./gradlew bceAnalyze --no-daemon

bceProtect {
    encryptStrings = true
    excludeStrings = [
        'java.',
        'javax.',
        'org.springframework.',
        'org.hibernate.',
        'com.fasterxml.jackson.',
        'jakarta.',
        'org.slf4j.',
        'ch.qos.logback.',
        'org.apache.tomcat.'
    ]
}

bceProtect {
    obfuscationEnabled = true
    obfuscationClasses = ['com.example.SecretUtil', 'com.example.CryptoHelper']
    obfuscationAdaptClassStrings = true
    obfuscationGenerateMapping = true
}

bceProtect {
    extraJars = [
        'geo_utils',               // 按依赖名
        'com.example:geo_utils',   // 按 group:name
        'libs/my-custom.jar'       // 按相对路径
    ]
}

java -agentpath:./bce_agent.dll=YOUR_PASSWORD \
     -jar app-protected.jar

# Linux / macOS
./codeshield-skill/install/install.sh

# Windows PowerShell
.\codeshield-skill\install\install.ps1

用户：帮我把这个 Java 项目用源盾加密一下。
Agent：
1. 运行 ./gradlew bceGeneratePassword --no-daemon
2. 在 build.gradle 中添加 id 'com.telecwin.codeshield.jvm' version '1.8.1'
3. 配置 bceProtect { licenseKey = '...'; password = '...' }
4. 运行 ./gradlew bceProtect --no-daemon

用户：运行时报 BCEProtected class file cannot be loaded。
Agent：启动命令缺少 -agentpath，请使用：
java -agentpath:./bce_agent.dll=YOUR_PASSWORD -jar app-protected.jar

plugins {
    id 'com.telecwin.codeshield.jvm' version '1.8.1'
}

bceProtect {
    licenseKey = 'YOUR-LICENSE-KEY'
    password = 'RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ='
    encryptStrings = true
    excludeStrings = ['java.', 'org.springframework']
    configFile = 'bce-full-encrypt.yaml'
    extraJars = ['geo_utils']
    outputAgentDll = true
    agentDllName = 'bce_agent.dll'

    obfuscationEnabled       = true
    obfuscationClasses       = ['com.example.SecretUtil']
    obfuscationAdaptClassStrings = true
    obfuscationGenerateMapping = true
}

<plugin>
    <groupId>com.telecwin.codeshield</groupId>
    <artifactId>codeshield-maven-plugin</artifactId>
    <version>1.8.1</version>
    <configuration>
        <licenseKey>YOUR-LICENSE-KEY</licenseKey>
        <password>RJreKJXd58bYAcizcFsClEFCRmCve0AM27YWaoqTpDQ=</password>
        <encryptStrings>true</encryptStrings>
        <excludeStrings>java.,org.springframework</excludeStrings>
        <configFile>bce-full-encrypt.yaml</configFile>
        <outputAgentDll>true</outputAgentDll>
        <agentDllName>bce_agent.dll</agentDllName>
    </configuration>
    <executions>
        <execution>
            <goals>
                <goal>protect</goal>
                <goal>extract-agent</goal>
            </goals>
        </execution>
    </executions>
</plugin>