@stackonward/cli 1.6.0 → 1.8.0

package/dist/resources/templates/go-backend/deployments/onex/product-onboarding.example.json

@@ -0,0 +1,201 @@
+{
+  "schema_version": 1,
+  "environment": "development",
+  "product": {
+    "code": "example_product",
+    "name": "Example Product",
+    "product_kind": "content_ai",
+    "default_currency": "USD",
+    "supported_currencies": [
+      "USD"
+    ],
+    "reason": "Register the Example Product product and its isolated service identities"
+  },
+  "applications": [
+    {
+      "application_code": "consumer_web",
+      "display_name": "Example Product Web",
+      "client_kind": "web",
+      "platform": "web",
+      "identifiers": [
+        {
+          "namespace": "web.origin",
+          "identifier_value": "http://127.0.0.1:3000",
+          "is_primary": true
+        }
+      ]
+    }
+  ],
+  "identity": {
+    "clients": {
+      "example_product-web": {
+        "application_code": "consumer_web",
+        "allowed_principal_types": [
+          "user"
+        ],
+        "registration_source": "example_product_web",
+        "oidc": {
+          "display_name": "Example Product",
+          "hosted_path_prefix": "/example-product",
+          "login_uri": "http://127.0.0.1:3000/auth/sign-in",
+          "terms_uri": "https://example.invalid/terms",
+          "privacy_uri": "https://example.invalid/privacy",
+          "redirect_uris": [
+            "http://127.0.0.1:3000/api/auth/callback"
+          ],
+          "post_logout_redirect_uris": [
+            "http://127.0.0.1:3000/"
+          ],
+          "token_endpoint_auth_method": "client_secret_basic",
+          "scopes": [
+            "openid",
+            "profile",
+            "email",
+            "offline_access"
+          ],
+          "client_secret_hash_ref": "example_product-oidc-hash"
+        }
+      }
+    },
+    "resource": {
+      "audience": "urn:onex:resource:example_product",
+      "user_scopes": [
+        "profile:read"
+      ],
+      "guest_scopes": [
+        "profile:read"
+      ]
+    },
+    "protected_resource": {
+      "resource_identifier": "http://127.0.0.1:3000/api",
+      "audience": "urn:onex:resource:example_product",
+      "resource_name": "Example Product API"
+    }
+  },
+  "enrollment": {
+    "mode": "self_service"
+  },
+  "workloads": [
+    {
+      "id": "api",
+      "display_name": "Example Product API",
+      "credential_ref": "example_product-api-credential",
+      "audience": "urn:onex:resource:platform-internal-api",
+      "route_scopes": [
+        "GET /internal/v1/storage/assets/{storage_asset_ref}",
+        "POST /internal/v1/storage/upload-sessions",
+        "POST /internal/v1/storage/assets/{storage_asset_ref}/confirmations"
+      ],
+      "denied_route_scope": "POST /internal/v1/storage/assets/{storage_asset_ref}/deletion-commands",
+      "statements": [
+        {
+          "sid": "AssetAccess",
+          "effect": "Allow",
+          "actions": [
+            "system:asset:create",
+            "system:asset:read",
+            "system:asset:update"
+          ],
+          "resources": [
+            "onex:product:example_product:system:asset/*"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "worker",
+      "display_name": "Example Product worker",
+      "credential_ref": "example_product-worker-credential",
+      "audience": "urn:onex:resource:platform-internal-api",
+      "route_scopes": [
+        "POST /internal/v1/mediagen/runtime-executions",
+        "GET /internal/v1/mediagen/runtime-executions/{id}"
+      ],
+      "denied_route_scope": "POST /internal/v1/storage/upload-sessions",
+      "statements": [
+        {
+          "sid": "GenerationExecution",
+          "effect": "Allow",
+          "actions": [
+            "ai:runtime-execution:run",
+            "ai:runtime-execution:read"
+          ],
+          "resources": [
+            "onex:product:example_product:ai:runtime-execution/*"
+          ]
+        }
+      ]
+    }
+  ],
+  "capabilities": [],
+  "communication": {
+    "product_config": {
+      "display_name": "Example Product",
+      "branding": {},
+      "urls": {
+        "app_url": "http://127.0.0.1:3000",
+        "support_email": "support@example.invalid"
+      },
+      "is_active": false
+    },
+    "sender_profiles": [
+      {
+        "product_code": "example_product",
+        "channel": "in_app",
+        "profile_code": "default",
+        "display_name": "Example Product",
+        "purpose": "transactional",
+        "reply_policy": "no_reply",
+        "in_app_sender_name": "Example Product",
+        "activate": false
+      }
+    ],
+    "templates": [
+      {
+        "template_key": "example_product.account.ready",
+        "category": "account",
+        "purpose": "transactional",
+        "name": "Account ready",
+        "context_root": "user",
+        "default_locale": "en",
+        "supported_channels": ["in_app"],
+        "sender_profile": "default",
+        "reply_policy": "no_reply",
+        "lawful_basis": "contract",
+        "topic_key": null,
+        "draft_content": {
+          "channels": {
+            "default": {
+              "en": {
+                "in_app": {
+                  "title": "Your account is ready",
+                  "body": "You can now use your account."
+                }
+              }
+            },
+            "example_product": {
+              "en": {
+                "in_app": {
+                  "title": "Welcome to {{product_name}}",
+                  "body": "Your account is ready."
+                }
+              }
+            }
+          },
+          "variable_bindings": [
+            {
+              "variable_name": "product_name",
+              "required": true,
+              "owner": "platform",
+              "sensitivity": "public"
+            }
+          ]
+        },
+        "publish": false
+      }
+    ],
+    "bindings": [],
+    "dispatch_policies": [],
+    "provider_references": []
+  }
+}

package/dist/resources/templates/go-backend/docs/onex-notifications.md

@@ -0,0 +1,85 @@
+# 可选 OneX 产品与通知配置
+
+本模板附带 [OneX 原生接入 profile 示例](../deployments/onex/product-onboarding.example.json)，用于已有 OneX 平台上的产品登记和通知配置。它是可编辑输入，不是自动执行步骤；初始化、构建和启动 Go 项目不会调用平台或发送消息。执行器仍由 OneX 的 `deployments/scripts/products/onboard.py` 唯一拥有，本项目不复制 runner。
+
+## 能力边界
+
+示例包含产品、Web 应用、Identity client、独立 API/Worker workload，以及可选 `communication`：通知产品品牌、站内发送身份和一个产品独有草稿。`product_config.is_active`、sender 的 `activate` 和模板的 `publish` 均为 `false`；没有 provider、绑定、分派策略或营销旅程，不会自动发布、启用或补发。
+
+Go 模板的 `internal/integrations/onex/v1` 已包含通用认证传输，`notification` 子包提供原生通知的类型化 HTTP 客户端与测试；不包含产品事件生产者、收件箱 BFF、用户映射或客户端接收流程。完成配置或构造客户端不代表这些业务链路已装配或已验收；`NewSafePostClient` 仍是独立的通用安全出站传输，不替代通知协议客户端。
+
+## 产品服务装配
+
+产品 composition owner 向 `v1.NewClient(httpClient, signer, Config)` 注入既有 HTTP 客户端、面向真实目标的 `internalservice.Signer`、产品码、以 `/internal/v1` 结尾的服务地址和有界超时，再通过 `notification.NewClient(transport, timeout)` 借用该传输。构造过程不访问网络；模板没有自动注册此客户端的 Wire provider、业务路由或后台任务。服务身份与精确 IAM 权限须来自产品登记，不能把 App 会话令牌或其他产品的身份当作 signer。
+
+| 协议能力 | 已分发方法 |
+| --- | --- |
+| 收件箱与未读 | `QueryInbox`、`GetMessage`、`CountUnread` |
+| 已读确认 | `AcknowledgeMessages`、`AcknowledgeScope` |
+| 设备生命周期 | `RegisterDevice`、`RevokeDevice`、`ListDevices` |
+| 推送偏好 | `GetPreferences`、`PutPreferences` |
+| 显式诊断 | `SendTestPush` |
+| 产品事实与失效 | `StartDispatch`、`AdvanceSource` |
+
+产品应从可信服务端上下文提供用户和会话，按实际已查看的 `message_no`/`source_version` 确认消息；范围确认是独立显式操作。设备注销只携带安装能力，不要求保留退出账号的会话。分派输入由产品冻结来源事件、目标和变量，不在协议层生成事件、选择模板或解读导航地址；入队结果不等于设备收到。
+
+传输保留严格响应解码、无重定向、稳定错误和 GET 有界重试。POST/PUT 不自动重试；结果未知时由产品持久流程携带原事实与原命令键恢复，不能生成新键重发。设备版本冲突只返回受控的 `CurrentRegistrationRevision`。产品负责授权、输入校验和生命周期，不能把 wire DTO 直接公开为 BFF 合同。
+
+## 填写输入
+
+1. 将示例另存为产品拥有的公开 profile，替换 `example_product`、名称、应用标识、环境、真实 origin、法务和支持地址。产品码和项目目录名不是同一标识，不自动转换 `{{projectName}}`。`example.invalid` 不能用于上线。
+2. 按实际产品选择 Identity client、workload、精确 route scope 和产品资源权限。示例里的存储/生成权限只演示原生 IAM 结构，并不授权通知调用；不需要的声明不应带入首次登记。
+3. 在 OneX 的 [执行器说明](https://onedev.yhy.gd.cn/platform/onex/~files/main/deployments/scripts/products/README.md)中按「产品声明与登记连接」准备私有 connection：目录 `0700`、文件 `0600`、绝对路径、无符号链接。Admin 凭据、OIDC hash、独立 workload 秘密输出和 state root 均留在该私有位置；不要写入 profile、Git、App 或命令行。运行配置指向目标真实配置，不能用空文件代替。
+4. 产品事件、收件人、用途、变量合同和接收端存在后，才声明相应 binding/policy 和精确权限。邮件、APNs/FCM、Web Push 的 provider 配置来自原生 schema 与私有引用，不从其他产品复制。营销同意按产品与目的隔离，系统 Push 许可不替代营销同意。
+
+`{{product_name}}` 是通知运行时变量，保留原样；它由 Communication 的 `owner=platform` 合同提供，不是项目初始化变量。模板保留 `channels.default` 和产品块，产品自行维护品牌与文案。
+
+## 使用既有执行器
+
+以下路径均由操作者替换为实际绝对路径。`ONEX_ROOT` 指向具备可选 `communication` 合同的 OneX checkout；使用同一执行器版本完成计划和恢复。示例只演示调用，不要求立即执行线上写入。
+
+```bash
+ONEX_ROOT=/absolute/onex
+PRODUCT_ROOT=/absolute/product/backend
+PROFILE=/absolute/product/backend/deployments/onex/product.json
+CONNECTION=/private/onboarding/connection.json
+PLAN=/private/onboarding/initial.plan.json
+
+# 纯本地校验，无需连接、登录或网络写入。
+python3 -B "$ONEX_ROOT/deployments/scripts/products/onboard.py" validate \
+  --profile "$PRODUCT_ROOT/deployments/onex/product-onboarding.example.json"
+python3 -B "$ONEX_ROOT/deployments/scripts/products/onboard.py" validate --profile "$PROFILE"
+
+# 首次登记：读回目标后生成受保护计划，随后按确认的目标执行。
+python3 -B "$ONEX_ROOT/deployments/scripts/products/onboard.py" plan --scope all \
+  --profile "$PROFILE" --connection "$CONNECTION" --plan "$PLAN"
+python3 -B "$ONEX_ROOT/deployments/scripts/products/onboard.py" apply --scope all \
+  --profile "$PROFILE" --connection "$CONNECTION" --plan "$PLAN"
+python3 -B "$ONEX_ROOT/deployments/scripts/products/onboard.py" readback --scope all \
+  --profile "$PROFILE" --connection "$CONNECTION"
+```
+
+`plan` 访问原生管理 owner 并保存私有计划，`apply` 才配置目标资源。先核对 plan 中的产品、环境、动作、激活目标和冲突；配置命令不授予当前操作者额外权限。
+
+已有登记产品只更新通知时，对同一完整 profile 使用 `--scope communication`，选择一个新的通知计划路径，并在 plan/apply/readback 中保持该 scope；保留原 state root 和受管声明。此 scope 不写 Identity runtime，也不建立 SSH。不要用它代替首次 Product/Application 登记。
+
+部分成功或未知结果时，用**原 profile、连接、scope、计划和 state root**恢复：
+
+```bash
+python3 -B "$ONEX_ROOT/deployments/scripts/products/onboard.py" recover --scope all \
+  --profile "$PROFILE" --connection "$CONNECTION" --plan "$PLAN"
+```
+
+不要编辑计划、删除 journal 或换凭据路径来绕过冲突。内容声明改变后另建计划；已完成对象由原生 owner 读回确认。模板发布、sender/产品启用和真实发送分别是显式动作，不因配置成功自动获得授权。
+
+## 配置之后
+
+由产品完成事务事件、来源版本失效、受限服务调用、用户资源授权和接收端生命周期；由部署 owner 加载运行配置。再单独验证真实用户的投递、点击、退出/换号和撤销。保存文件、`readback` 一致、provider accepted 与用户实际看到消息是不同证据；本示例不承诺任何一个真实发送结果。
+
+原生入口和操作依据：
+
+- [通知能力与责任](https://onedev.yhy.gd.cn/platform/onex/~files/main/.codex/skills/product-project-onboarding/references/capabilities/notification/overview.md)
+- [接入执行边界](https://onedev.yhy.gd.cn/platform/onex/~files/main/.codex/skills/product-project-onboarding/references/execution.md)
+- [OneX 执行器与私有连接格式](https://onedev.yhy.gd.cn/platform/onex/~files/main/deployments/scripts/products/README.md)
+
+以上链接需要相应源码仓库权限；本地同一路径以 `ONEX_ROOT` 为根。执行前以选定 OneX 版本的原生合同为准，不将本说明当作自动注册四个渠道的保证。

package/dist/resources/templates/go-backend/docs/openapi-provenance.json

@@ -363,7 +363,7 @@
     },
     {
       "target": "scripts/check-openapi-clean-deletion.sh",
-      "target_template_sha256": "ae2d5e0ae558c2686ee6863bdb4cf559e75191db65248c780b41eb8f19c466fa",
+      "target_template_sha256": "9a4db713cedf52129d9479b491c91cd72a4835b7e06e1240457af80467521061",
       "source": "backend/scripts/check-openapi-clean-deletion.sh",
       "source_sha256": "88dca649e4600fb09d2859b409233c7f2a27d3f7d97429c19c43bcbed79db835",
       "adaptation": "Limit scan to backend-owned paths, use module-independent import matching, and fail on scanner errors."

package/dist/resources/templates/go-backend/docs/runtime-provenance.json

@@ -2,11 +2,32 @@
   "source_repository": "https://onedev.yhy.gd.cn/platform/onex",
   "source_commit": "4fd93f675a6579773d16ab8272395cab8c761670",
   "hash_scope": {
-    "source_sha256": "Exact source file bytes at source_commit.",
+    "source_sha256": "Exact source file bytes at the entry source_commit when present, otherwise the manifest source_commit. Entries marked source_state=working-tree record exact observed bytes over source_base_commit, not committed source bytes.",
     "target_template_sha256": "Exact unrendered template bytes; product generation substitutes template variables.",
-    "coverage": "Runtime composition, configuration, deployment, migrations and runtime verification. Entries with empty origins are product-template-owned verification."
+    "coverage": "Runtime composition, configuration, deployment, migrations, optional onboarding inputs and runtime verification. Entries with empty origins are product-template-owned documentation or verification."
   },
   "files": [
+    {
+      "target": "deployments/onex/product-onboarding.example.json",
+      "target_template_sha256": "843c73acb416ae133783548aa3c8290e4b3206ea1693ec73160833c5698697f0",
+      "transformation": "Exact optional native onboarding example. Keep explicit example identities and runtime template variables; no project-name inference, credentials, runner, automatic activation, publication or sends.",
+      "source": "deployments/config/products/product-onboarding.example.json",
+      "source_state": "working-tree",
+      "source_base_commit": "320d9600417e851b6f30dee0c1dbdca2fd5829df",
+      "source_sha256": "843c73acb416ae133783548aa3c8290e4b3206ea1693ec73160833c5698697f0"
+    },
+    {
+      "target": "docs/onex-notifications.md",
+      "target_template_sha256": "19a63b4e6dabd82f6cf825e4653aad4b01a14ecf0c95b354b31b5e63e0d0099b",
+      "transformation": "Template-owned opt-in instructions delegate to the existing OneX onboarding executor and document explicit generic wire client composition separately from product event, BFF and client implementation.",
+      "origins": []
+    },
+    {
+      "target": "README.md",
+      "target_template_sha256": "4e68c39257ef22d4ea41a76705a053322b421c92242b28616a7ab716d08c1d1d",
+      "transformation": "Template-owned product foundation guide and explicit opt-in link to the native onboarding example; no runtime activation is performed by generation.",
+      "origins": []
+    },
     {
       "target": "cmd/internal/runtime/resources.go",
       "target_template_sha256": "7d68e3092430713a9f4f44faa347b0091f4520d47314d37f6998571680b5a0e2",

package/dist/resources/templates/go-backend/docs/source-provenance.json

@@ -2,9 +2,9 @@
   "source_repository": "https://onedev.yhy.gd.cn/platform/onex",
   "source_commit": "4fd93f675a6579773d16ab8272395cab8c761670",
   "hash_scope": {
-    "source_sha256": "SHA-256 of exact source file bytes under source_repository at source_commit; source paths include backend/.",
+    "source_sha256": "SHA-256 of exact source file bytes under the entry source_repository when present, otherwise the manifest source_repository, at the entry source_commit when present, otherwise the manifest source_commit. Entries marked source_state=working-tree record observed bytes over source_base_commit, not committed source bytes; source paths include backend/.",
     "target_template_sha256": "SHA-256 of exact unrendered template file bytes, including {{module}} tokens; target paths relative to go-backend template root.",
-    "coverage": "Core/common foundation, IAM consumer protocol value closure, public apierror, Go module dependencies. Concrete platform bindings are individually excluded. Runtime/configuration/deployment files have separate ownership."
+    "coverage": "Core/common foundation, IAM consumer protocol value closure, public apierror, Go module dependencies and generic OneX notification wire transport. Concrete platform bindings and product event/BFF/session orchestration are excluded. Runtime/configuration/deployment files have separate ownership."
   },
   "files": [
     {
@@ -2620,9 +2620,10 @@
     {
       "source": "backend/internal/common/middleware/cors.go",
       "target": "internal/common/middleware/cors.go",
+      "source_commit": "320d9600417e851b6f30dee0c1dbdca2fd5829df",
       "transformation": "module/import namespace only",
-      "source_sha256": "67cb19d27b01e2114ee79ab5a2be961e17e211bf68a14a9f4c2045c0a5572914",
-      "target_template_sha256": "49c0ad60a477611d4097233cc7fe6a819ed7d6bc6a482f6299cdee79e0f00385"
+      "source_sha256": "3c1e037fcd86f1ae3d6d1c514857068155d158a3199f4229c7716e1dab760c67",
+      "target_template_sha256": "b61e85daab20aa875bf9058d7521773b96bad857ad14da8412ec8df6cfef20ba"
     },
     {
       "source": "backend/internal/common/middleware/event_context.go",
@@ -2725,9 +2726,10 @@
     {
       "source": "backend/internal/common/middleware/middleware_test.go",
       "target": "internal/common/middleware/middleware_test.go",
+      "source_commit": "320d9600417e851b6f30dee0c1dbdca2fd5829df",
       "transformation": "module/import namespace only",
-      "source_sha256": "f5721cc4a149aab8f0fd3d4d0d6c7aefcd00ff90a9d79f7587022a3ebc947694",
-      "target_template_sha256": "5266ee4a8e4ced12b43f223370b2365821f742a84b91c50e5c2a46d42dcdce33"
+      "source_sha256": "1f90dd0fdfd8ce4c24c95c4b530b84920208b35a1fecc1da324d10fe7ba38655",
+      "target_template_sha256": "2faebb32e4bd7fa6be02ffe69412ef84b221b6a4842c94479fdff1f20687c5d4"
     },
     {
       "source": "backend/internal/common/middleware/principal_context.go",
@@ -3574,6 +3576,122 @@
       "target": "internal/core/cache/redis_test.go",
       "target_template_sha256": "21be5f1685dd2b4a2a69e9b69971784e8c109b0e48220d960e549ccd1fff9864",
       "transformation": "added regression for source constructor failure connection cleanup"
+    },
+    {
+      "source": "backend/internal/core/httpclient/safe_post.go",
+      "target": "internal/core/httpclient/safe_post.go",
+      "source_commit": "320d9600417e851b6f30dee0c1dbdca2fd5829df",
+      "transformation": "Exact source; reuse retained safe download DNS validation, pinned connection and TLS helpers for HTTPS POST without redirects or automatic retries.",
+      "source_sha256": "ffa3a83b30e23242290409a1b258f121fbba768aa597820d72ec62ceb26d3331",
+      "target_template_sha256": "ffa3a83b30e23242290409a1b258f121fbba768aa597820d72ec62ceb26d3331"
+    },
+    {
+      "source": "backend/internal/core/httpclient/safe_post_test.go",
+      "target": "internal/core/httpclient/safe_post_test.go",
+      "source_commit": "320d9600417e851b6f30dee0c1dbdca2fd5829df",
+      "transformation": "Exact source tests; retain pinned public destination, body preservation, no redirect, unsafe DNS and HTTPS-only regressions.",
+      "source_sha256": "c8683bbe1e2a7ffd4a707683cd9c72f1dd4e63caa2e536629493cca50c95dda3",
+      "target_template_sha256": "c8683bbe1e2a7ffd4a707683cd9c72f1dd4e63caa2e536629493cca50c95dda3"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/client.go",
+      "target": "internal/integrations/onex/v1/client.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "6412bf093e0da191133b19fd297116f44d579949bba4ae038154788b9f0b8934",
+      "target_template_sha256": "ce544b18c56f5ec6cc6add272ac71044c3d4233ba97408bcecae4d07bdc0f683"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/codec.go",
+      "target": "internal/integrations/onex/v1/codec.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "48f8a31bea64d175c394a5f637dd362cdac2405579293b9fc1061a3b7f0395b4",
+      "target_template_sha256": "d8f2188bb9b5ffa7b0ed5fc4ee91804ef17aae85a46bb9d35d1219eb622b567a"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/error.go",
+      "target": "internal/integrations/onex/v1/error.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "70a954eee75dc658d53f51733fef931e946cfdeafe6a44d56ad455f872d973a6",
+      "target_template_sha256": "11c4dc6a3f154bf62238c51ca7da529d94ebbb9b99320eccbb7c78abb277a48b"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/resilience.go",
+      "target": "internal/integrations/onex/v1/resilience.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "db3d5e31d99e48d2ecffd86d935634579e1dd2b57e6db8729f8c1e7b64839746",
+      "target_template_sha256": "db3d5e31d99e48d2ecffd86d935634579e1dd2b57e6db8729f8c1e7b64839746"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/transport_policy.go",
+      "target": "internal/integrations/onex/v1/transport_policy.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "a522fb3e0d7d2d928078967cfe049fefe35627f0a390e46bc45ca1bf712f9167",
+      "target_template_sha256": "a522fb3e0d7d2d928078967cfe049fefe35627f0a390e46bc45ca1bf712f9167"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/client_test.go",
+      "target": "internal/integrations/onex/v1/client_test.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "675472bbc44efa7a83b2027a32e1c846319d8dbec7a99304c47de961b6ec74ff",
+      "target_template_sha256": "503399109f58423a778c973e2e5cbda0b0208f521b0b11075f9ad4d56b7dd2ec"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/error_notification_test.go",
+      "target": "internal/integrations/onex/v1/error_notification_test.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "f4437470420beae1f239227a5db5eeaaf5d6331b8a76abf96fa3227f375f13d0",
+      "target_template_sha256": "309df48e5aa2c1b5975cd486bbb4059e1e7cace3b73e237f3555b678af7b4549"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/notification/client.go",
+      "target": "internal/integrations/onex/v1/notification/client.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "accbddeec1cc06175a45fc733509efc145d9453b7a2091f935d70cf3cb597264",
+      "target_template_sha256": "ac841c50f719670f836d733d5e26d22fd626d83ffbcdaaa883e348166e2d6642"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/notification/contracts.go",
+      "target": "internal/integrations/onex/v1/notification/contracts.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "dec9d4bf3c0957a0bb29c4677f7c7b4c2048d9e7b265bacdbf2b7e146dd21be0",
+      "target_template_sha256": "dec9d4bf3c0957a0bb29c4677f7c7b4c2048d9e7b265bacdbf2b7e146dd21be0"
+    },
+    {
+      "source_repository": "https://onedev.yhy.gd.cn/stikumi",
+      "source_state": "working-tree",
+      "source_base_commit": "b4b299dd2a0777f71d0ff1ee7a7809df3e1acec6",
+      "source": "backend/internal/integrations/onex/v1/notification/client_test.go",
+      "target": "internal/integrations/onex/v1/notification/client_test.go",
+      "transformation": "Module namespace to {{module}}; OneX idempotency header constant to existing HeaderIdempotencyKey; product command header test literal preserved as Idempotency-Key; transport test product fixtures to sample_product/SampleProduct; gofmt. No product adapter, event producer, BFF or dispatch orchestration copied.",
+      "source_sha256": "a16eecc0818fad0b804b9e3876e032cdb6c63765f329f5ff8fb222152c3eda4d",
+      "target_template_sha256": "80f288ebc40fd8f3d3722f99fdad3a5fe2377e60b65808b4b5dbd97655504816"
     }
   ]
 }