@stackonward/cli 0.0.1 → 1.0.1

package/dist/resources/templates/go-backend/docs/openapi-provenance.json

@@ -0,0 +1,489 @@
+{
+  "source_repository": "https://onedev.yhy.gd.cn/platform/onex",
+  "source_commit": "4fd93f675a6579773d16ab8272395cab8c761670",
+  "hash_scope": "Source SHA identifies the inspected upstream working-tree bytes. Target SHA identifies template bytes before variable materialization. Generated dist artifacts are checked by the contract compiler.",
+  "files": [
+    {
+      "target": "api/openapi/README.md",
+      "target_template_sha256": "1a6bb386b39ba2849d2608c76ba01388e462cdd1cdd6eae38629d868794071e2",
+      "source": "backend/api/openapi/README.md",
+      "source_sha256": "21dbd7dc97d312e712e2e390aba57a4ae1706b1a113f6827a7d31b3216d8b415",
+      "adaptation": "Product-local contract/runtime adaptation; upstream generic tooling retained."
+    },
+    {
+      "target": "api/openapi/document.go",
+      "target_template_sha256": "e08b81d6ee40363eeb4d67ddd89a97ff81da9733e2c7f05e1a9648bc4876ce0b",
+      "source": null,
+      "adaptation": "Product template artifact derived from registered runtime routes or scoped tool regression; no upstream product business contract."
+    },
+    {
+      "target": "api/openapi/package.json",
+      "target_template_sha256": "4856c25dfe3292237b4ea4fe9faba3ffa24cf24e60ef76488fcbfdd9a1a7b100",
+      "source": "backend/api/openapi/package.json",
+      "source_sha256": "c1b2ad0b694a95b60662daf2b26e005bcc83edc857c60b5719f87baaf3884d4e",
+      "adaptation": "Private backend contract tool package and product build commands; dependencies pinned to the inspected upstream versions."
+    },
+    {
+      "target": "api/openapi/pnpm-lock.yaml",
+      "target_template_sha256": "47dccb72f0969ceba51977f469847ecafca896777898bc3b3e082f42931eeae6",
+      "source": "backend/api/openapi/pnpm-lock.yaml",
+      "source_sha256": "47dccb72f0969ceba51977f469847ecafca896777898bc3b3e082f42931eeae6",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/redocly-source.yaml",
+      "target_template_sha256": "4808d05b497cac4041f0182ffcd7d721cfac17e520db1e79a7ca9eadbc88b0eb",
+      "source": "backend/api/openapi/redocly-source.yaml",
+      "source_sha256": "4808d05b497cac4041f0182ffcd7d721cfac17e520db1e79a7ca9eadbc88b0eb",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/redocly.yaml",
+      "target_template_sha256": "27e31a5f3309288959adf0a03545690db69c12169c71b72726caffeb9b4a8332",
+      "source": "backend/api/openapi/redocly.yaml",
+      "source_sha256": "814d1a0b4aec01da3c70568d56ade0d30d60a90e582f4e9953f526d3e00f72bf",
+      "adaptation": "Product-local contract/runtime adaptation; upstream generic tooling retained."
+    },
+    {
+      "target": "api/openapi/sdk-generators.json",
+      "target_template_sha256": "17d1b747a66f0671aac4834f8cdf144583abe4df422e669210f0372f82069e17",
+      "source": "backend/api/openapi/sdk-generators.json",
+      "source_sha256": "17d1b747a66f0671aac4834f8cdf144583abe4df422e669210f0372f82069e17",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/service-registry.json",
+      "target_template_sha256": "b63ecf9e7a2a3cc9d003d230cf6c92bfc0c0d5fa1c7572ed50dce9e01388b880",
+      "source": "backend/api/openapi/service-registry.json",
+      "source_sha256": "6094700672c9d80b17c73387b4f438e82f71f6a4695d8fdb4f2229d81c99e93e",
+      "adaptation": "Product API and worker runtime contracts replace platform service registrations."
+    },
+    {
+      "target": "api/openapi/services/product-api/conformance/runtime.arazzo.yaml",
+      "target_template_sha256": "ae0ba2c39ef978e4f90fd811cd14c83e3729b218c74be39fb5b2be5c350bd1af",
+      "source": null,
+      "adaptation": "Product template artifact derived from registered runtime routes or scoped tool regression; no upstream product business contract."
+    },
+    {
+      "target": "api/openapi/services/product-api/openapi.yaml",
+      "target_template_sha256": "9e67a04a901c6727a472703c9e2573ca36913676f0d88ebdbfe35e685e254e89",
+      "source": null,
+      "adaptation": "Product template artifact derived from registered runtime routes or scoped tool regression; no upstream product business contract."
+    },
+    {
+      "target": "api/openapi/services/worker/conformance/runtime.arazzo.yaml",
+      "target_template_sha256": "fd812f7629b2d6827e3612b1aaa8088d9691750377313ce57c0e671aee8503e3",
+      "source": null,
+      "adaptation": "Product template artifact derived from registered runtime routes or scoped tool regression; no upstream product business contract."
+    },
+    {
+      "target": "api/openapi/services/worker/openapi.yaml",
+      "target_template_sha256": "8a61cbcdb10ef31c2b5fef8f53c567d10da9d3be8652241d22df1d61a545156b",
+      "source": null,
+      "adaptation": "Product template artifact derived from registered runtime routes or scoped tool regression; no upstream product business contract."
+    },
+    {
+      "target": "api/openapi/tooling/breaking.mjs",
+      "target_template_sha256": "3d13df9f5464c0498e2b7b9b4bb21f18adffc8856c32d024fcf0d95a34004890",
+      "source": "backend/api/openapi/tooling/breaking.mjs",
+      "source_sha256": "592bef850f2107e455898021795e889881330bbe77a147e2220732cc1be26f4c",
+      "adaptation": "Report evidence at the actual product backend output path; preserve semantic and oasdiff compatibility rules."
+    },
+    {
+      "target": "api/openapi/tooling/build.mjs",
+      "target_template_sha256": "ce7641bb399b60aa43b288279b50f86d9a8f7839ab72689c041f2f34f44fcdd8",
+      "source": "backend/api/openapi/tooling/build.mjs",
+      "source_sha256": "e14186f7c81ba609a945175c2d45f41847c916396393d58f3dd52aa867cd3bb6",
+      "adaptation": "Product-owned registry orchestration; canonical compiler, audience projection, documentation privacy, delegated runtime metadata, conformance matrix and SDK adapters retained; platform publication data and review ledger orchestration remain upstream."
+    },
+    {
+      "target": "api/openapi/tooling/conformance_coverage.mjs",
+      "target_template_sha256": "dabde63c8dd43dd1b2bb33c7a776c8af38081076ad7e468a41ae932cc7ff9f56",
+      "source": "backend/api/openapi/tooling/conformance_coverage.mjs",
+      "source_sha256": "dabde63c8dd43dd1b2bb33c7a776c8af38081076ad7e468a41ae932cc7ff9f56",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/contract_compiler.mjs",
+      "target_template_sha256": "78c6a5960daa36a911ca480050fba59238b9d8aaf8040d3b20cc476de5d863f3",
+      "source": "backend/api/openapi/tooling/contract_compiler.mjs",
+      "source_sha256": "78c6a5960daa36a911ca480050fba59238b9d8aaf8040d3b20cc476de5d863f3",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/contract_policy.mjs",
+      "target_template_sha256": "c75cf5148fdf802bb62c92912440ae640c1e73f3acfca3a173af5da14e27b293",
+      "source": "backend/api/openapi/tooling/contract_policy.mjs",
+      "source_sha256": "1e83fdac3dc0dd209645c75d97417e096921e716e8a4e68e2c0122c329c04c5d",
+      "adaptation": "HEAD responses do not emit response bodies; omit automatic error response body injection for HEAD."
+    },
+    {
+      "target": "api/openapi/tooling/delegated_contract.mjs",
+      "target_template_sha256": "0dfd66472aeeecc7f698cb2abfe64048af644223c62e463ad0d6ba4e6649e3b6",
+      "source": "backend/api/openapi/tooling/delegated_contract.mjs",
+      "source_sha256": "0dfd66472aeeecc7f698cb2abfe64048af644223c62e463ad0d6ba4e6649e3b6",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/deterministic_archive.mjs",
+      "target_template_sha256": "34393fd9a9176defd0fae2ed4c86b1d0c62f7712ed9ee09d496b42e9d9d71951",
+      "source": "backend/api/openapi/tooling/deterministic_archive.mjs",
+      "source_sha256": "34393fd9a9176defd0fae2ed4c86b1d0c62f7712ed9ee09d496b42e9d9d71951",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/documentation_example_privacy.mjs",
+      "target_template_sha256": "aea7a67ee6a4956ec1034749c80187cef07ad029b05a6041cc5663f323910821",
+      "source": "backend/api/openapi/tooling/documentation_example_privacy.mjs",
+      "source_sha256": "aea7a67ee6a4956ec1034749c80187cef07ad029b05a6041cc5663f323910821",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/documentation_projection.mjs",
+      "target_template_sha256": "acbd088e2756a8e8455f4043b88f619cc7bbaf6b6d7d81c8d217c568166d204e",
+      "source": "backend/api/openapi/tooling/documentation_projection.mjs",
+      "source_sha256": "acbd088e2756a8e8455f4043b88f619cc7bbaf6b6d7d81c8d217c568166d204e",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/documentation_quality.mjs",
+      "target_template_sha256": "932e31dc03543a2b99cf279bbd71e17c6022e5ba735e3ee38ffdb502fbed8dff",
+      "source": "backend/api/openapi/tooling/documentation_quality.mjs",
+      "source_sha256": "932e31dc03543a2b99cf279bbd71e17c6022e5ba735e3ee38ffdb502fbed8dff",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/git_artifact_history.mjs",
+      "target_template_sha256": "34d5d1503ad86f95866c8c086ee2a10c8c006bc5c70903186fbf598add7511bf",
+      "source": "backend/api/openapi/tooling/git_artifact_history.mjs",
+      "source_sha256": "5c151b7726aab9328e0889384353dcd1d11c847464bc378d7d0b34efc50dea7c",
+      "adaptation": "Discover repository and API paths for nested product backends and standalone backend repositories; retain protected-baseline comparison and digest validation."
+    },
+    {
+      "target": "api/openapi/tooling/manifest.mjs",
+      "target_template_sha256": "6941795f78f0c3874c9d8f7fb40c4514ed1b3a3a402c7c2ddd2688a178e5bea8",
+      "source": "backend/api/openapi/tooling/manifest.mjs",
+      "source_sha256": "6941795f78f0c3874c9d8f7fb40c4514ed1b3a3a402c7c2ddd2688a178e5bea8",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/overlay.mjs",
+      "target_template_sha256": "9c11670536defdb3e131f66aaef7d0b0dd7ee6fbc7d0e948bd9877277af07350",
+      "source": "backend/api/openapi/tooling/overlay.mjs",
+      "source_sha256": "9c11670536defdb3e131f66aaef7d0b0dd7ee6fbc7d0e948bd9877277af07350",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/project.mjs",
+      "target_template_sha256": "3957e6a0982ada2445bbb192653f4cb77fd16b766f9d8d5b7b554b6d62044011",
+      "source": "backend/api/openapi/tooling/project.mjs",
+      "source_sha256": "3957e6a0982ada2445bbb192653f4cb77fd16b766f9d8d5b7b554b6d62044011",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/route_contract.mjs",
+      "target_template_sha256": "fc18cf3fe9b7d576a955431e7ec7d939334214b744a690132c1726971495d446",
+      "source": "backend/api/openapi/tooling/route_contract.mjs",
+      "source_sha256": "fc18cf3fe9b7d576a955431e7ec7d939334214b744a690132c1726971495d446",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/runtime_conformance.mjs",
+      "target_template_sha256": "8329135c39f871e72795999a09942f8939018c051d725275a1927be45b42ee75",
+      "source": "backend/api/openapi/tooling/runtime_conformance.mjs",
+      "source_sha256": "8329135c39f871e72795999a09942f8939018c051d725275a1927be45b42ee75",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/scalar_asset_localization.mjs",
+      "target_template_sha256": "147b063e22010f052f7680b8ceec23dcbb9c8620f4831964626992b2129cfe35",
+      "source": "backend/api/openapi/tooling/scalar_asset_localization.mjs",
+      "source_sha256": "147b063e22010f052f7680b8ceec23dcbb9c8620f4831964626992b2129cfe35",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/sdk_generator.mjs",
+      "target_template_sha256": "3b5da870e3ed470f2e0de1b7d08d911d8af24b2a2a67fb5ec307f78d6d8d03b9",
+      "source": "backend/api/openapi/tooling/sdk_generator.mjs",
+      "source_sha256": "3b5da870e3ed470f2e0de1b7d08d911d8af24b2a2a67fb5ec307f78d6d8d03b9",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/semantic_version.mjs",
+      "target_template_sha256": "8edf2b0ce21066ef6e6bac3eda687bba8420dab756d01763bb1f57319baac434",
+      "source": "backend/api/openapi/tooling/semantic_version.mjs",
+      "source_sha256": "8edf2b0ce21066ef6e6bac3eda687bba8420dab756d01763bb1f57319baac434",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/service_contract_inputs.mjs",
+      "target_template_sha256": "7239037daf150b302631f4c6506b5daecae64e320eb9365a42f5e28268b8b81c",
+      "source": "backend/api/openapi/tooling/service_contract_inputs.mjs",
+      "source_sha256": "7239037daf150b302631f4c6506b5daecae64e320eb9365a42f5e28268b8b81c",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/breaking.test.mjs",
+      "target_template_sha256": "3247aa9371dbf431d6dc38176a4568afe9b8fda70b45de8beb0f988a9dceb6a6",
+      "source": "backend/api/openapi/tooling/test/breaking.test.mjs",
+      "source_sha256": "3247aa9371dbf431d6dc38176a4568afe9b8fda70b45de8beb0f988a9dceb6a6",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/build.test.mjs",
+      "target_template_sha256": "1d8f108c76c1d6ab39bbca7caa5e33c2379573651ba5034107a04b4373867f5c",
+      "source": "backend/api/openapi/tooling/test/build.test.mjs",
+      "source_sha256": "b2a52bd0ccd26c148382a8dd998ef5b13fbadff7fdb8e17b21de542604535207",
+      "adaptation": "Product build regressions cover external audience isolation and delegated runtime ownership; platform publisher build tests are upstream."
+    },
+    {
+      "target": "api/openapi/tooling/test/conformance_coverage.test.mjs",
+      "target_template_sha256": "5f9931e8079a28f0ca8049046616e976989a3532bdbe27cd01e9b29d8632eb1d",
+      "source": "backend/api/openapi/tooling/test/conformance_coverage.test.mjs",
+      "source_sha256": "5f9931e8079a28f0ca8049046616e976989a3532bdbe27cd01e9b29d8632eb1d",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/contract_policy.test.mjs",
+      "target_template_sha256": "4ff68b99cc4e2389f3a1ff6514649d95fe5f9962c1f3176fe405e52f244eec73",
+      "source": "backend/api/openapi/tooling/test/contract_policy.test.mjs",
+      "source_sha256": "4ff68b99cc4e2389f3a1ff6514649d95fe5f9962c1f3176fe405e52f244eec73",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/delegated_contract.test.mjs",
+      "target_template_sha256": "ed7de8be6caa3de79cf37d3c2d3f4c9701d0e2ad65e1635f0bf27c560b4ad3da",
+      "source": "backend/api/openapi/tooling/test/delegated_contract.test.mjs",
+      "source_sha256": "ed7de8be6caa3de79cf37d3c2d3f4c9701d0e2ad65e1635f0bf27c560b4ad3da",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/documentation_example_privacy.test.mjs",
+      "target_template_sha256": "b374a96d0cb035504c687ec610a2c602f3af0f886476a32699b86dfc9ece67d2",
+      "source": "backend/api/openapi/tooling/test/documentation_example_privacy.test.mjs",
+      "source_sha256": "b374a96d0cb035504c687ec610a2c602f3af0f886476a32699b86dfc9ece67d2",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/documentation_projection.test.mjs",
+      "target_template_sha256": "f94ec534eeefec7bf5934edbe9679f4851be815b513dfe6722d5a65f8083a708",
+      "source": "backend/api/openapi/tooling/test/documentation_projection.test.mjs",
+      "source_sha256": "f94ec534eeefec7bf5934edbe9679f4851be815b513dfe6722d5a65f8083a708",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/documentation_quality.test.mjs",
+      "target_template_sha256": "80894a16cbd025ed60e238bd87b6ecf6a3956b258f92fb6febc6b4a6f4bf5745",
+      "source": "backend/api/openapi/tooling/test/documentation_quality.test.mjs",
+      "source_sha256": "80894a16cbd025ed60e238bd87b6ecf6a3956b258f92fb6febc6b4a6f4bf5745",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/git_artifact_history.test.mjs",
+      "target_template_sha256": "e23d8df7e8498d353f04f81b7d155b7043c246b3fc8541b9f6d008fdebecbfa3",
+      "source": "backend/api/openapi/tooling/test/git_artifact_history.test.mjs",
+      "source_sha256": "e23d8df7e8498d353f04f81b7d155b7043c246b3fc8541b9f6d008fdebecbfa3",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/head_policy.test.mjs",
+      "target_template_sha256": "6edfe899dc0151f4592714a2730a8a25c18bd952cbef6f7c08fcfcf998d1c5fd",
+      "source": null,
+      "adaptation": "Product template artifact derived from registered runtime routes or scoped tool regression; no upstream product business contract."
+    },
+    {
+      "target": "api/openapi/tooling/test/overlay.test.mjs",
+      "target_template_sha256": "2530e5bc6477a2678c77c110f0be2ae8286d280123eaba077d581030831e1c7d",
+      "source": "backend/api/openapi/tooling/test/overlay.test.mjs",
+      "source_sha256": "2530e5bc6477a2678c77c110f0be2ae8286d280123eaba077d581030831e1c7d",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/projection.test.mjs",
+      "target_template_sha256": "67e43a3c3b672f3b04c073692dc86ac4c8c46cb84d5753002bcca3b8f6a99a9d",
+      "source": "backend/api/openapi/tooling/test/projection.test.mjs",
+      "source_sha256": "67e43a3c3b672f3b04c073692dc86ac4c8c46cb84d5753002bcca3b8f6a99a9d",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/redocly_documentation_rules.test.mjs",
+      "target_template_sha256": "145bf454266bd4e4c775a35ddb38df2527e67b4ef02bdd37b18c33e4ad89b0fc",
+      "source": "backend/api/openapi/tooling/test/redocly_documentation_rules.test.mjs",
+      "source_sha256": "145bf454266bd4e4c775a35ddb38df2527e67b4ef02bdd37b18c33e4ad89b0fc",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/release_manifest.test.mjs",
+      "target_template_sha256": "c4b11fdd8672ddd3572f4301b314929a14249738994b8e7f6ee5dae5ca6fc986",
+      "source": "backend/api/openapi/tooling/test/release_manifest.test.mjs",
+      "source_sha256": "b6041872a1a83d44f074c3aa55fd83353641283bee4a6285f13ce2f89532bf8e",
+      "adaptation": "Retain generic artifact provenance and deterministic archive tests; omit the 73-artifact OneX integration-event catalog assertion."
+    },
+    {
+      "target": "api/openapi/tooling/test/route_contract.test.mjs",
+      "target_template_sha256": "844d08562325e2a599bb42b93daf9ba605be8991e7aac8025162972b6569d334",
+      "source": "backend/api/openapi/tooling/test/route_contract.test.mjs",
+      "source_sha256": "844d08562325e2a599bb42b93daf9ba605be8991e7aac8025162972b6569d334",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/runtime_conformance.test.mjs",
+      "target_template_sha256": "0025b72fcca1f36dd4edec2cd30d3b711a115a69835cd5a78c817fd8f7e09aaf",
+      "source": "backend/api/openapi/tooling/test/runtime_conformance.test.mjs",
+      "source_sha256": "0025b72fcca1f36dd4edec2cd30d3b711a115a69835cd5a78c817fd8f7e09aaf",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/scalar_asset_localization.test.mjs",
+      "target_template_sha256": "20b7af9e910d6dbebb7727574a6661005f6a1e44cf87d71d4dac261260b90e6f",
+      "source": "backend/api/openapi/tooling/test/scalar_asset_localization.test.mjs",
+      "source_sha256": "20b7af9e910d6dbebb7727574a6661005f6a1e44cf87d71d4dac261260b90e6f",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/sdk_generator.test.mjs",
+      "target_template_sha256": "e7189297fe00e60f1782eaffb9a1dd3567a2b242b170a5e8b9951bc6bbdf8c8d",
+      "source": "backend/api/openapi/tooling/test/sdk_generator.test.mjs",
+      "source_sha256": "e7189297fe00e60f1782eaffb9a1dd3567a2b242b170a5e8b9951bc6bbdf8c8d",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/semantic_version.test.mjs",
+      "target_template_sha256": "2f8bccbfb44a535dd9ee7044aeaa0ecc72246213d801727cb6ad4b8c21e03dbf",
+      "source": "backend/api/openapi/tooling/test/semantic_version.test.mjs",
+      "source_sha256": "2f8bccbfb44a535dd9ee7044aeaa0ecc72246213d801727cb6ad4b8c21e03dbf",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "api/openapi/tooling/test/service_contract_inputs.test.mjs",
+      "target_template_sha256": "339a9e62e912a407ab450c15ffe65c7f030b426dce7192d709d0c6993da91258",
+      "source": "backend/api/openapi/tooling/test/service_contract_inputs.test.mjs",
+      "source_sha256": "339a9e62e912a407ab450c15ffe65c7f030b426dce7192d709d0c6993da91258",
+      "adaptation": "unchanged"
+    },
+    {
+      "target": "scripts/check-openapi-clean-deletion.sh",
+      "target_template_sha256": "ae2d5e0ae558c2686ee6863bdb4cf559e75191db65248c780b41eb8f19c466fa",
+      "source": "backend/scripts/check-openapi-clean-deletion.sh",
+      "source_sha256": "88dca649e4600fb09d2859b409233c7f2a27d3f7d97429c19c43bcbed79db835",
+      "adaptation": "Limit scan to backend-owned paths, use module-independent import matching, and fail on scanner errors."
+    }
+  ],
+  "excluded_files": [
+    {
+      "source": "backend/api/openapi/tooling/integration_event_artifacts.mjs",
+      "source_sha256": "787e366454ad6ba31a9e2915a0156704b28f924f4aa200e901bb554440658bf2",
+      "reason": "OneX integration-event publication consumes the platform event catalog and release output; product contracts do not own this catalog."
+    },
+    {
+      "source": "backend/api/openapi/tooling/review_ledger.mjs",
+      "source_sha256": "dcbed2b905cd2322dc63ee43bee6ff4490a39f9fd045b319ab61341a2b331df1",
+      "reason": "OneX contract review ledger binds platform publication attestations and committed source approvals; the product build validates contracts without asserting platform publication approval."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/admin_recovery_contract.test.mjs",
+      "source_sha256": "914fd71d181694d0a56b6f3db7742fd1378bfa4a3c5d3a0bbcfd5685022ad540",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/admin_trade_product_context_contract.test.mjs",
+      "source_sha256": "9294e7899ae30acd6426c1d4777a3ab24b59e0220d1a2667051ea9276a615e64",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/api_contract_admin_contract.test.mjs",
+      "source_sha256": "3473cd7fbe93cc0d87394d3a8a8fd4284b567c93dbbec727fe5c5daf57a824c9",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/checkout_session_contract.test.mjs",
+      "source_sha256": "8d2ac9f16deedba91148a952a04192038ff8e8b31bb2c00aa29e240de84d3918",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/client_platform_contract.test.mjs",
+      "source_sha256": "d1d6abd815c4be789e8175dcd0bd79e9d7e7038ce343d113467cc95a5e4c8436",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/contract_compiler.test.mjs",
+      "source_sha256": "178e446d57a476f84fa9d50543c334b429dd8cae1b595716695b3c8117b6f0fa",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/credit_benefit_admin_contract.test.mjs",
+      "source_sha256": "afea861559b19a12a0c69665340d8ff5c74a24f8dae7fac9d4a563b9bac72f92",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/documentation_admin_contract.test.mjs",
+      "source_sha256": "ad4e700d6e69b29d3ae533ba22d6802afc95d19604ed91a61d1b2bc9e772fb88",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/documentation_ai_contract.test.mjs",
+      "source_sha256": "e9ff6dbc7aa3efa52e367e936f9335b8e784fa2e0440ee28d433968b3eebb049",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/iam_service_token_contract.test.mjs",
+      "source_sha256": "ee86555b444252bdabf13f2c75375671387eb3117633d29fb05e0c610ffd0dcf",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/iam_token_exchange_contract.test.mjs",
+      "source_sha256": "005a09f8cc1644faf937ccc183aceeaf161bb142c3e37f821d76a0ef1f4a820d",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/organization_runtime_contract.test.mjs",
+      "source_sha256": "6212c106129c8648046712664ac28c93e89f2021195fffdc046c8e51cb0ee5a0",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/platform_oauth_callback_contract.test.mjs",
+      "source_sha256": "7e0ce9223f5f0d2a4bc43db045256b3b6b903f04e7dbe2a1fc029756036a7eb1",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/platform_runtime_routes_contract.test.mjs",
+      "source_sha256": "9d062a4029355a50ea4ae35cd42848a198b1702017020dfc754e85f7b5d1a43f",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/quota_allocation_contract.test.mjs",
+      "source_sha256": "2d5864cb189a86231f320b0d9334192d51dd77cec14a2138f0befb9e5554de3d",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/store_purchase_admin_contract.test.mjs",
+      "source_sha256": "0c6d1290683edfa56aa19d42b721493208d054448e1bed68241d1e1610684ce3",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/storefront_catalog_projection.test.mjs",
+      "source_sha256": "3b8f74f58e0d21c578399931793a4bb2e3457968693cdab93f014d89633eabc9",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/test/toolchain_policy.test.mjs",
+      "source_sha256": "8f9c6bad5154b80d0d5d8c4e1c4cfa7dbd1e8f6085de7ef94eef21b135e94c0f",
+      "reason": "Platform service contract, publication ledger, or business fixture assertion; the owning OneX contracts and release data are not copied into product templates."
+    },
+    {
+      "source": "backend/api/openapi/tooling/validate.mjs",
+      "source_sha256": "9e0ec61a3751f9ec519651f8db61c7b001b466a822e83f798684456521446153",
+      "reason": "Platform release-catalog validator imports platform buildCatalog and publisher-owned roots; product build --check owns deterministic product artifacts."
+    }
+  ],
+  "excluded_roots": [
+    {
+      "source": "backend/api/openapi/services",
+      "reason": "Platform business service specifications, approval metadata, delegated contracts and their generated publications stay platform-owned; product-api and worker define their own runtime surface."
+    },
+    {
+      "source": "backend/api/openapi/publish",
+      "reason": "Platform documentation and SDK release distribution output is not a product source dependency."
+    }
+  ]
+}