@stackonward/cli 1.4.0 → 1.5.1

package/dist/resources/templates/go-backend/migrations/000001_infrastructure.up.sql

@@ -714,6 +714,174 @@ $$;
 
 CREATE TRIGGER trg_sys_operation_logs_finalization_guard BEFORE DELETE OR UPDATE ON public.sys_operation_logs FOR EACH ROW EXECUTE FUNCTION public.sys_operation_logs_finalization_guard();
 
+CREATE TABLE public.sys_integration_event_inbox (
+    id bigserial PRIMARY KEY,
+    source_system varchar(191) NOT NULL,
+    event_id varchar(191) NOT NULL,
+    event_type varchar(191) NOT NULL,
+    schema_version varchar(32) NOT NULL,
+    product_code varchar(50) NOT NULL,
+    aggregate_type varchar(128) NOT NULL,
+    aggregate_ref varchar(191) NOT NULL,
+    aggregate_version bigint NOT NULL,
+    payload_hash char(64) NOT NULL,
+    event_payload jsonb NOT NULL,
+    received_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    created_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT ck_sys_integration_event_inbox_identity CHECK (BTRIM(source_system) <> '' AND BTRIM(event_id) <> ''),
+    CONSTRAINT ck_sys_integration_event_inbox_product CHECK (product_code ~ '^[a-z][a-z0-9_]{1,49}$'),
+    CONSTRAINT ck_sys_integration_event_inbox_version CHECK (aggregate_version > 0),
+    CONSTRAINT ck_sys_integration_event_inbox_hash CHECK (payload_hash ~ '^[0-9a-f]{64}$'),
+    CONSTRAINT ck_sys_integration_event_inbox_payload CHECK (jsonb_typeof(event_payload) = 'object'),
+    CONSTRAINT uk_sys_integration_event_inbox_identity UNIQUE (source_system, event_id)
+);
+
+COMMENT ON TABLE public.sys_integration_event_inbox IS '已验证入站 Integration Event 的全局事件身份与规范负载';
+COMMENT ON COLUMN public.sys_integration_event_inbox.id IS '主键 ID';
+COMMENT ON COLUMN public.sys_integration_event_inbox.source_system IS '事件来源系统稳定标识';
+COMMENT ON COLUMN public.sys_integration_event_inbox.event_id IS '来源系统内的事件唯一标识';
+COMMENT ON COLUMN public.sys_integration_event_inbox.event_type IS '事件类型';
+COMMENT ON COLUMN public.sys_integration_event_inbox.schema_version IS '事件负载 schema 版本';
+COMMENT ON COLUMN public.sys_integration_event_inbox.product_code IS '受信事件产品编码';
+COMMENT ON COLUMN public.sys_integration_event_inbox.aggregate_type IS '上游聚合类型';
+COMMENT ON COLUMN public.sys_integration_event_inbox.aggregate_ref IS '上游聚合公开引用';
+COMMENT ON COLUMN public.sys_integration_event_inbox.aggregate_version IS '上游聚合版本';
+COMMENT ON COLUMN public.sys_integration_event_inbox.payload_hash IS '规范事件信封 SHA-256';
+COMMENT ON COLUMN public.sys_integration_event_inbox.event_payload IS 'RFC 8785 规范化事件信封';
+COMMENT ON COLUMN public.sys_integration_event_inbox.received_at IS '入站验证完成时间';
+COMMENT ON COLUMN public.sys_integration_event_inbox.created_at IS '创建时间';
+
+CREATE TABLE public.sys_integration_event_receipts (
+    id bigserial PRIMARY KEY,
+    source_system varchar(191) NOT NULL,
+    subscriber_code varchar(64) NOT NULL,
+    event_id varchar(191) NOT NULL,
+    status varchar(20) NOT NULL DEFAULT 'processing',
+    receipt_status varchar(20),
+    error_code varchar(120),
+    processing_started_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    processed_at timestamptz(3),
+    created_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT uk_sys_integration_event_receipts_subscriber_event UNIQUE (source_system, subscriber_code, event_id),
+    CONSTRAINT ck_sys_integration_event_receipts_status CHECK (status IN ('processing', 'processed', 'failed')),
+    CONSTRAINT ck_sys_integration_event_receipts_result CHECK (
+        (status = 'processed' AND processed_at IS NOT NULL AND receipt_status IN ('processed', 'duplicate') AND error_code IS NULL)
+        OR (status = 'failed' AND processed_at IS NOT NULL AND receipt_status IS NULL AND error_code IS NOT NULL AND BTRIM(error_code) <> '')
+        OR (status = 'processing' AND processed_at IS NULL AND receipt_status IS NULL AND error_code IS NULL)
+    )
+);
+
+COMMENT ON TABLE public.sys_integration_event_receipts IS '每个订阅者对入站事件的独立持久处理回执';
+COMMENT ON COLUMN public.sys_integration_event_receipts.id IS '主键 ID';
+COMMENT ON COLUMN public.sys_integration_event_receipts.source_system IS '事件来源系统稳定标识';
+COMMENT ON COLUMN public.sys_integration_event_receipts.subscriber_code IS '目标订阅者稳定编码';
+COMMENT ON COLUMN public.sys_integration_event_receipts.event_id IS '来源系统内的事件唯一标识';
+COMMENT ON COLUMN public.sys_integration_event_receipts.status IS '订阅者处理状态';
+COMMENT ON COLUMN public.sys_integration_event_receipts.receipt_status IS '处理成功或重复的回执状态';
+COMMENT ON COLUMN public.sys_integration_event_receipts.error_code IS '稳定处理错误码';
+COMMENT ON COLUMN public.sys_integration_event_receipts.processing_started_at IS '订阅者开始处理时间';
+COMMENT ON COLUMN public.sys_integration_event_receipts.processed_at IS '处理终结时间';
+COMMENT ON COLUMN public.sys_integration_event_receipts.created_at IS '创建时间';
+COMMENT ON COLUMN public.sys_integration_event_receipts.updated_at IS '更新时间';
+
+CREATE INDEX idx_sys_integration_event_receipts_active
+    ON public.sys_integration_event_receipts (processing_started_at, id)
+    WHERE status = 'processing';
+
+CREATE TABLE public.sys_integration_aggregate_checkpoints (
+    id bigserial PRIMARY KEY,
+    source_system varchar(191) NOT NULL,
+    subscriber_code varchar(64) NOT NULL,
+    aggregate_type varchar(128) NOT NULL,
+    aggregate_ref varchar(191) NOT NULL,
+    last_aggregate_version bigint NOT NULL,
+    last_event_id varchar(191) NOT NULL,
+    last_payload_hash char(64) NOT NULL,
+    revision_no bigint NOT NULL DEFAULT 1,
+    created_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at timestamptz(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT ck_sys_integration_aggregate_checkpoints_version CHECK (last_aggregate_version > 0 AND revision_no > 0),
+    CONSTRAINT ck_sys_integration_aggregate_checkpoints_hash CHECK (last_payload_hash ~ '^[0-9a-f]{64}$'),
+    CONSTRAINT uk_sys_integration_aggregate_checkpoints_scope UNIQUE (source_system, subscriber_code, aggregate_type, aggregate_ref)
+);
+
+COMMENT ON TABLE public.sys_integration_aggregate_checkpoints IS '入站订阅者对上游聚合的连续版本检查点';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.id IS '主键 ID';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.source_system IS '事件来源系统稳定标识';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.subscriber_code IS '目标订阅者稳定编码';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.aggregate_type IS '上游聚合类型';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.aggregate_ref IS '上游聚合公开引用';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.last_aggregate_version IS '已连续处理的最后聚合版本';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.last_event_id IS '最后处理的事件 ID';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.last_payload_hash IS '最后处理的规范事件信封 SHA-256';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.revision_no IS '本地乐观锁修订号';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.created_at IS '创建时间';
+COMMENT ON COLUMN public.sys_integration_aggregate_checkpoints.updated_at IS '更新时间';
+
+CREATE FUNCTION public.reject_sys_integration_event_inbox_change() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+    RAISE EXCEPTION 'sys_integration_event_inbox is append-only';
+END;
+$$;
+
+CREATE TRIGGER trg_sys_integration_event_inbox_append
+    BEFORE UPDATE OR DELETE ON public.sys_integration_event_inbox
+    FOR EACH ROW EXECUTE FUNCTION public.reject_sys_integration_event_inbox_change();
+
+CREATE FUNCTION public.guard_sys_integration_event_receipt_transition() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+    IF TG_OP = 'DELETE' THEN
+        RAISE EXCEPTION 'sys_integration_event_receipts cannot be deleted';
+    END IF;
+    IF OLD.source_system IS DISTINCT FROM NEW.source_system
+       OR OLD.subscriber_code IS DISTINCT FROM NEW.subscriber_code
+       OR OLD.event_id IS DISTINCT FROM NEW.event_id
+       OR OLD.processing_started_at IS DISTINCT FROM NEW.processing_started_at
+       OR OLD.created_at IS DISTINCT FROM NEW.created_at THEN
+        RAISE EXCEPTION 'sys_integration_event_receipts identity is immutable';
+    END IF;
+    IF OLD.status = 'processing' AND NEW.status IN ('processed', 'failed') THEN
+        RETURN NEW;
+    END IF;
+    RAISE EXCEPTION 'sys_integration_event_receipts only allow processing to terminal transition';
+END;
+$$;
+
+CREATE TRIGGER trg_sys_integration_event_receipts_transition
+    BEFORE UPDATE OR DELETE ON public.sys_integration_event_receipts
+    FOR EACH ROW EXECUTE FUNCTION public.guard_sys_integration_event_receipt_transition();
+
+CREATE FUNCTION public.guard_sys_integration_aggregate_checkpoint_transition() RETURNS trigger
+    LANGUAGE plpgsql
+    AS $$
+BEGIN
+    IF TG_OP = 'DELETE' THEN
+        RAISE EXCEPTION 'sys_integration_aggregate_checkpoints cannot be deleted';
+    END IF;
+    IF OLD.source_system IS DISTINCT FROM NEW.source_system
+       OR OLD.subscriber_code IS DISTINCT FROM NEW.subscriber_code
+       OR OLD.aggregate_type IS DISTINCT FROM NEW.aggregate_type
+       OR OLD.aggregate_ref IS DISTINCT FROM NEW.aggregate_ref
+       OR OLD.created_at IS DISTINCT FROM NEW.created_at THEN
+        RAISE EXCEPTION 'sys_integration_aggregate_checkpoints identity is immutable';
+    END IF;
+    IF NEW.last_aggregate_version <> OLD.last_aggregate_version + 1
+       OR NEW.revision_no <> OLD.revision_no + 1 THEN
+        RAISE EXCEPTION 'sys_integration_aggregate_checkpoints must advance exactly one version';
+    END IF;
+    RETURN NEW;
+END;
+$$;
+
+CREATE TRIGGER trg_sys_integration_aggregate_checkpoints_transition
+    BEFORE UPDATE OR DELETE ON public.sys_integration_aggregate_checkpoints
+    FOR EACH ROW EXECUTE FUNCTION public.guard_sys_integration_aggregate_checkpoint_transition();
+
 CREATE TABLE sys_command_replay_records (
     id bigserial PRIMARY KEY,
     created_at timestamp(3) with time zone DEFAULT now() NOT NULL,
@@ -721,8 +889,8 @@ CREATE TABLE sys_command_replay_records (
     command_scope character varying(128) NOT NULL,
     idempotency_key character varying(191) NOT NULL,
     request_hash character varying(64) NOT NULL,
-    principal_type character varying(32),
-    principal_ref character varying(64),
+    principal_type character varying(32) NOT NULL,
+    principal_ref character varying(64) NOT NULL,
     status character varying(20) DEFAULT 'started'::character varying NOT NULL,
     response_payload jsonb DEFAULT '{}'::jsonb NOT NULL,
     error_code character varying(120),
@@ -741,8 +909,8 @@ CREATE TABLE sys_command_replay_records (
 );
 
 ALTER TABLE sys_command_replay_records
-ADD CONSTRAINT "uk_sys_command_replay_records_namespace_scope_key"
-        UNIQUE ("namespace", "command_scope", "idempotency_key"),
+ADD CONSTRAINT "uk_sys_command_replay_records_principal_scope_key"
+        UNIQUE ("namespace", "principal_type", "principal_ref", "command_scope", "idempotency_key"),
     ADD CONSTRAINT "ck_sys_command_replay_records_namespace"
         CHECK ("namespace" ~ '^[a-z][a-z0-9_-]*([.][a-z][a-z0-9_-]*){2,7}$'),
     ADD CONSTRAINT "ck_sys_command_replay_records_scope"
@@ -753,16 +921,8 @@ ADD CONSTRAINT "uk_sys_command_replay_records_namespace_scope_key"
         CHECK ("status" IN ('started', 'succeeded', 'failed')),
     ADD CONSTRAINT "ck_sys_command_replay_records_principal"
         CHECK (
-            (
-                "principal_type" IS NULL
-                AND "principal_ref" IS NULL
-            )
-            OR (
-                "principal_type" IS NOT NULL
-                AND BTRIM("principal_type") <> ''
-                AND "principal_ref" IS NOT NULL
-                AND BTRIM("principal_ref") <> ''
-            )
+            BTRIM("principal_type") <> ''
+            AND BTRIM("principal_ref") <> ''
         ),
     ADD CONSTRAINT "ck_sys_command_replay_records_error_state"
         CHECK (
@@ -851,9 +1011,9 @@ COMMENT ON COLUMN "sys_command_replay_records"."idempotency_key" IS '调用方
 
 COMMENT ON COLUMN "sys_command_replay_records"."request_hash" IS '规范请求载荷 SHA-256 摘要';
 
-COMMENT ON COLUMN "sys_command_replay_records"."principal_type" IS '调用主体类型';
+COMMENT ON COLUMN "sys_command_replay_records"."principal_type" IS '参与幂等作用域的可信调用主体类型';
 
-COMMENT ON COLUMN "sys_command_replay_records"."principal_ref" IS '调用主体公开引用';
+COMMENT ON COLUMN "sys_command_replay_records"."principal_ref" IS '参与幂等作用域的可信调用主体公开引用';
 
 COMMENT ON COLUMN "sys_command_replay_records"."status" IS '命令执行状态';
 

package/dist/resources/templates/go-backend/tests/infrastructure.sql

@@ -8,22 +8,125 @@ BEGIN
     WHERE table_schema = 'public' AND table_name IN (
         'sys_access_logs', 'sys_login_logs', 'sys_audit_logs', 'sys_operation_logs',
         'sys_audit_event_inbox', 'sys_outbox_events', 'sys_outbox_event_deliveries',
-        'sys_command_replay_records'
+        'sys_command_replay_records', 'sys_integration_event_inbox',
+        'sys_integration_event_receipts', 'sys_integration_aggregate_checkpoints'
     );
-    IF table_count <> 8 THEN
+    IF table_count <> 11 THEN
         RAISE EXCEPTION 'infrastructure tables are incomplete';
     END IF;
 
+    INSERT INTO sys_integration_event_inbox (
+        source_system, event_id, event_type, schema_version, product_code,
+        aggregate_type, aggregate_ref, aggregate_version, payload_hash, event_payload
+    ) VALUES (
+        'source-a', 'event-1', 'resource.created', '1.0.0', 'product_a',
+        'resource', 'resource-1', 1, repeat('a', 64), '{"id":"event-1"}'
+    );
+    INSERT INTO sys_integration_event_inbox (
+        source_system, event_id, event_type, schema_version, product_code,
+        aggregate_type, aggregate_ref, aggregate_version, payload_hash, event_payload
+    ) VALUES (
+        'source-b', 'event-1', 'resource.created', '1.0.0', 'product_a',
+        'resource', 'resource-1', 1, repeat('a', 64), '{"id":"event-1"}'
+    );
+    BEGIN
+        INSERT INTO sys_integration_event_inbox (
+            source_system, event_id, event_type, schema_version, product_code,
+            aggregate_type, aggregate_ref, aggregate_version, payload_hash, event_payload
+        ) VALUES (
+            'source-a', 'event-1', 'resource.created', '1.0.0', 'product_a',
+            'resource', 'resource-1', 1, repeat('b', 64), '{"id":"event-1"}'
+        );
+        RAISE EXCEPTION 'duplicate global integration event identity was accepted';
+    EXCEPTION WHEN unique_violation THEN NULL;
+    END;
+    BEGIN
+        UPDATE sys_integration_event_inbox SET event_type = 'resource.changed'
+        WHERE source_system = 'source-a' AND event_id = 'event-1';
+        RAISE EXCEPTION 'integration event inbox mutation was accepted';
+    EXCEPTION WHEN raise_exception THEN
+        IF SQLERRM <> 'sys_integration_event_inbox is append-only' THEN RAISE; END IF;
+    END;
+
+    INSERT INTO sys_integration_event_receipts (source_system, subscriber_code, event_id)
+    VALUES ('source-a', 'subscriber-a', 'event-1');
+    INSERT INTO sys_integration_event_receipts (source_system, subscriber_code, event_id)
+    VALUES ('source-a', 'subscriber-b', 'event-1');
+    BEGIN
+        INSERT INTO sys_integration_event_receipts (source_system, subscriber_code, event_id)
+        VALUES ('source-a', 'subscriber-a', 'event-1');
+        RAISE EXCEPTION 'duplicate subscriber integration event receipt was accepted';
+    EXCEPTION WHEN unique_violation THEN NULL;
+    END;
+    UPDATE sys_integration_event_receipts
+    SET status = 'processed', receipt_status = 'processed', processed_at = now(), updated_at = now()
+    WHERE source_system = 'source-a' AND subscriber_code = 'subscriber-a' AND event_id = 'event-1';
+    BEGIN
+        UPDATE sys_integration_event_receipts SET status = 'processing', receipt_status = NULL, processed_at = NULL
+        WHERE source_system = 'source-a' AND subscriber_code = 'subscriber-a' AND event_id = 'event-1';
+        RAISE EXCEPTION 'terminal integration event receipt regressed';
+    EXCEPTION WHEN raise_exception THEN
+        IF SQLERRM <> 'sys_integration_event_receipts only allow processing to terminal transition' THEN RAISE; END IF;
+    END;
+
+    INSERT INTO sys_integration_aggregate_checkpoints (
+        source_system, subscriber_code, aggregate_type, aggregate_ref,
+        last_aggregate_version, last_event_id, last_payload_hash
+    ) VALUES ('source-a', 'subscriber-a', 'resource', 'resource-1', 1, 'event-1', repeat('a', 64));
+    INSERT INTO sys_integration_aggregate_checkpoints (
+        source_system, subscriber_code, aggregate_type, aggregate_ref,
+        last_aggregate_version, last_event_id, last_payload_hash
+    ) VALUES ('source-b', 'subscriber-a', 'resource', 'resource-1', 1, 'event-1', repeat('a', 64));
+    BEGIN
+        INSERT INTO sys_integration_aggregate_checkpoints (
+            source_system, subscriber_code, aggregate_type, aggregate_ref,
+            last_aggregate_version, last_event_id, last_payload_hash
+        ) VALUES ('source-a', 'subscriber-a', 'resource', 'resource-1', 1, 'event-1', repeat('a', 64));
+        RAISE EXCEPTION 'duplicate aggregate checkpoint scope was accepted';
+    EXCEPTION WHEN unique_violation THEN NULL;
+    END;
+    UPDATE sys_integration_aggregate_checkpoints
+    SET last_aggregate_version = 2, last_event_id = 'event-2', last_payload_hash = repeat('b', 64),
+        revision_no = 2, updated_at = now()
+    WHERE source_system = 'source-a' AND subscriber_code = 'subscriber-a'
+      AND aggregate_type = 'resource' AND aggregate_ref = 'resource-1';
+    BEGIN
+        UPDATE sys_integration_aggregate_checkpoints
+        SET last_aggregate_version = 4, revision_no = 3, updated_at = now()
+        WHERE source_system = 'source-a' AND subscriber_code = 'subscriber-a'
+          AND aggregate_type = 'resource' AND aggregate_ref = 'resource-1';
+        RAISE EXCEPTION 'aggregate checkpoint gap was accepted';
+    EXCEPTION WHEN raise_exception THEN
+        IF SQLERRM <> 'sys_integration_aggregate_checkpoints must advance exactly one version' THEN RAISE; END IF;
+    END;
+
     INSERT INTO sys_command_replay_records (
-        namespace, command_scope, idempotency_key, request_hash, expires_at
-    ) VALUES ('company.product.action', 'actor', 'request-1', repeat('a', 64), now() + interval '1 hour');
+        namespace, principal_type, principal_ref, command_scope, idempotency_key, request_hash, expires_at
+    ) VALUES ('company.product.action', 'identity', 'user_123', 'actor', 'request-1', repeat('a', 64), now() + interval '1 hour');
     BEGIN
         INSERT INTO sys_command_replay_records (
-            namespace, command_scope, idempotency_key, request_hash, expires_at
-        ) VALUES ('company.product.action', 'actor', 'request-1', repeat('a', 64), now() + interval '1 hour');
+            namespace, principal_type, principal_ref, command_scope, idempotency_key, request_hash, expires_at
+        ) VALUES ('company.product.action', 'identity', 'user_123', 'actor', 'request-1', repeat('a', 64), now() + interval '1 hour');
         RAISE EXCEPTION 'duplicate command was accepted';
     EXCEPTION WHEN unique_violation THEN NULL;
     END;
+    INSERT INTO sys_command_replay_records (
+        namespace, principal_type, principal_ref, command_scope, idempotency_key, request_hash, expires_at
+    ) VALUES ('company.product.action', 'identity', 'user_456', 'actor', 'request-1', repeat('b', 64), now() + interval '1 hour');
+    BEGIN
+        INSERT INTO sys_command_replay_records (
+            namespace, command_scope, idempotency_key, request_hash, expires_at
+        ) VALUES ('company.product.action', 'actor', 'request-2', repeat('c', 64), now() + interval '1 hour');
+        RAISE EXCEPTION 'command without principal was accepted';
+    EXCEPTION WHEN not_null_violation THEN NULL;
+    END;
+    BEGIN
+        INSERT INTO sys_command_replay_records (
+            namespace, principal_type, principal_ref, command_scope, idempotency_key, request_hash, expires_at
+        ) VALUES ('company.product.action', ' ', 'user_789', 'actor', 'request-3', repeat('d', 64), now() + interval '1 hour');
+        RAISE EXCEPTION 'command with blank principal was accepted';
+    EXCEPTION WHEN check_violation THEN NULL;
+    END;
     BEGIN
         UPDATE sys_command_replay_records SET status = 'failed'
         WHERE namespace = 'company.product.action';

package/dist/resources/templates/nuxt/.claude/docs/stack.md

@@ -98,7 +98,11 @@ Single page presentation? → page-private component
 Used by multiple pages? → existing shared app component or package
 ```
 
-File names follow installed conventions: Vue components use descriptive PascalCase, composables `useFeature.ts`, Nuxt pages/routes use filesystem route syntax, and server endpoints include method suffixes such as `.get.ts`. Avoid generic `helper`, `manager`, `new` or caller-branded names.
+Directories, modules and packages are namespaces; child files and symbols keep only the minimum responsibility. Use `analytics/events.ts::EventInput`, `useTracking`, `GTMOptions` and `GA4Event`, never `types/marketing-analytics.ts` or a prefix swap such as `MarketingHeader` -> `PublicHeader`. External semantic identifiers such as `purchase`, `login` and `gateway_*` remain unchanged.
+
+Directories, packages and ordinary TypeScript modules use kebab-case; Vue composables use `useX.ts`; Vue component files and types use PascalCase; variables/functions use camelCase; only fixed invariants use UPPER_SNAKE_CASE. Nuxt routes use filesystem syntax and server endpoints keep method suffixes such as `.get.ts`. Vague standalone or catch-all names such as `helper`, `utils`, `common` and `manager` are forbidden; choose a precise owner and responsibility. `temp`, `new` and `final` naming residue is forbidden.
+
+Nuxt component directories remain namespaces. `components/site/Header.vue` is `Header` through a local explicit import and `SiteHeader` across owners or through global auto-import. Preserve default path-aware auto-naming; global `pathPrefix: false` is forbidden. Search existing owners, siblings and usages before naming or renaming, update all references, and delete superseded names together.
 
 ## IV. Forbidden Patterns
 

package/dist/resources/templates/nuxt/.dockerignore

@@ -0,0 +1,19 @@
+.git
+.github
+.claude
+.husky
+.nuxt
+node_modules
+coverage
+test
+playwright-report
+
+.env
+.env.*
+.npmrc
+
+*.log
+.DS_Store
+
+deploy.config.json
+README.md

package/dist/resources/templates/nuxt/deploy.config.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "name": "{{projectName}}",
+  "profile": "nuxt-node",
+  "source": {
+    "verify": {
+      "executable": "pnpm",
+      "args": ["check"]
+    },
+    "build": {
+      "executable": "pnpm",
+      "args": ["build"]
+    },
+    "output": ".output"
+  },
+  "image": {
+    "dockerfile": "Dockerfile",
+    "context": ".",
+    "repository": "{{projectName}}",
+    "platform": "linux/amd64"
+  },
+  "environments": {
+    "production": {
+      "target": "registry-only"
+    }
+  }
+}

package/dist/resources/templates/nuxt/package.json

@@ -28,10 +28,10 @@
     "check": "pnpm format:check && pnpm lint && pnpm typecheck && pnpm test && pnpm build"
   },
   "dependencies": {
-    "@stackonward/api-client": "^0.0.2",
-    "@stackonward/google-tag-manager-nuxt": "^0.3.0",
-    "@stackonward/nuxt-layer-base": "^0.0.3",
-    "@stackonward/nuxt-site-shell": "^0.3.0"
+    "@stackonward/api-client": "^0.0.3",
+    "@stackonward/google-tag-manager-nuxt": "^0.3.2",
+    "@stackonward/nuxt-layer-base": "^0.0.4",
+    "@stackonward/nuxt-site-shell": "^0.3.1"
   },
   "devDependencies": {
     "@commitlint/cli": "^21.2.2",
@@ -45,10 +45,10 @@
     "@nuxtjs/seo": "^5.3.2",
     "@pinia/colada-nuxt": "^1.0.1",
     "@pinia/nuxt": "^0.11.3",
-    "@stackonward/commitlint-config": "^0.1.0",
-    "@stackonward/eslint-config": "^1.0.0",
-    "@stackonward/prettier-config": "^0.0.2",
-    "@stackonward/stylelint-config": "^0.1.0",
+    "@stackonward/commitlint-config": "^0.1.1",
+    "@stackonward/eslint-config": "^1.0.1",
+    "@stackonward/prettier-config": "^0.0.3",
+    "@stackonward/stylelint-config": "^0.1.1",
     "@types/node": "^22.0.0",
     "@vueuse/nuxt": "^14.3.0",
     "eslint": "^10.10.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackonward/cli",
-  "version": "1.4.0",
+  "version": "1.5.1",
   "description": "StackOnward CLI for creating projects and installing reusable components and snippets",
   "type": "module",
   "main": "dist/index.js",
@@ -36,8 +36,10 @@
     "ora": "^8.0.0",
     "prompts": "^2.4.2",
     "zod": "4",
-    "@stackonward/api-client": "0.0.2",
-    "@stackonward/google-tag-manager": "0.2.0"
+    "@stackonward/api-client": "0.0.3",
+    "@stackonward/google-tag-manager": "0.2.2",
+    "@stackonward/onedev-provisioning": "0.1.0",
+    "@stackonward/provisioning": "0.1.0"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",