Overview
Covers the Cloud/Alibaba BOM, Boot parent, ddd4j BOM, version ownership, and effective POM uniformly, not split per artifact. Choose the Cloud→Boot→ddd4j primary combination first, then read the current branch.
When to Use
- Managing the
cloud-parent,cloud-dependencies, andcloud-bomPOMs and their consumer coordinates. - Choosing or verifying Spring Cloud and Spring Cloud Alibaba versions plus the aligned Boot parent.
- Auditing the effective POM and the BOM import order for a line.
- Deciding version ownership — which versions consumers may or may not override.
- Cleaning up extensions that re-pin managed versions.
- Preparing consumer coordinates for downstream clean-cache verification.
When NOT to Use
Do not use this skill when:
- Which Cloud→Boot→ddd4j combination to target is the question — use
ddd4j-cloud-version-selectioninstead. Install:npx skills add full-stack-skills/ddd4j-skills --skill ddd4j-cloud-version-selection. - The wiring is plain Spring Boot ddd4j with no Cloud modules — use
ddd4j-boot-bominstead. Install:npx skills add full-stack-skills/ddd4j-skills --skill ddd4j-boot-bom. - Module layout and upstream boundaries are the question — use
ddd4j-cloud-architectureinstead. Install:npx skills add full-stack-skills/ddd4j-skills --skill ddd4j-cloud-architecture. - A single service wants its own dependency versions — do not use this skill; apply generic Maven
dependencyManagementpractice (java-skills, no install command). Import order and ownership of the ddd4j-cloud BOMs themselves always belong here. - Publishing the line or proving remote consumption is the goal — use
ddd4j-cloud-releaseinstead. Install:npx skills add full-stack-skills/ddd4j-skills --skill ddd4j-cloud-release. - Core domain or SPI contracts are the question — use
ddd4j-coreinstead. Install:npx skills add full-stack-skills/ddd4j-skills --skill ddd4j-core.
Trigger Keywords
English: BOM import order, version ownership, effective POM, Boot parent, dependency management, consumer coordinates
Chinese: BOM import, version ownership, effective POM, Boot parent, dependency management, consumption coordinates
Core Scope
Cloud/Alibaba BOM, Boot parent, ddd4j BOM, version ownership, effective POM.
Core Rules
- Primary combinations and compatible alternatives are kept separate; never guess Boot/ddd4j from the branch name.
- Old cmpt and new extensions naming must not be mixed.
- Context/Tenant are restored on sync, async, Reactor, and Feign terminal states.
- Binder, database, Nacos, Sentinel, and the like need real external behavior evidence.
- Upstream gaps, Cloud failures, CI, publishing, and consumption are classified separately.
Capability Boundaries
✅ Strong At
- Implementation choice for BOM management and Spring Cloud integration.
- Upstream/downstream versions and cross-service boundaries.
- Differences across the eight maintenance lines.
⚠️ Needs Input
- Target Cloud line, Boot parent, and POM.
- Capabilities, external services, and deployment requirements.
- Current source/test/remote evidence.
❌ Out of Scope
- Treating README module names as completed capabilities.
- Substituting configuration presence for external service behavior.
- Unauthorized releases or production operations.
Workflow
Step 1: Confirm the source of truth
Run ddd4j-cloud-version-selection to fix the combination, then read the cloud-parent, cloud-dependencies, and cloud-bom POMs on the confirmed branch and SHA.
Step 2: Verify version ownership
Confirm Spring Cloud and Spring Cloud Alibaba versions come from their own BOMs, that the Boot parent alignment matches the combination matrix, and that no extension re-pins a managed version.
Step 3: Verify import order
Build the effective POM and confirm the BOM import order resolves as intended — the order of spring-cloud-dependencies, the Alibaba BOM, and the ddd4j BOM changes the effective versions. Record consumer coordinates for downstream verification.
Step 4: Validate the build
Run the target module build and tests on the selected combination and check CI for the final SHA.
Step 5: Report the audit
Output the combination and effective-POM findings, the version ownership map with import-order confirmation, consumer coordinates with evidence state per tier, and violations with proposed fixes.
Gotchas
- The Cloud BOM import order changes the effective version — importing
spring-cloud-dependenciesbefore the Alibaba BOM and the ddd4j BOM produces a different resolution than the reverse. - The declared POM and the effective POM are different documents — ownership violations only show up in the effective resolution, not in reading sources.
- An extension that re-pins a "harmless" library version silently splits the line: two services on the same line can resolve different dependency graphs.
- Old
cmptcoordinates in a consumer POM resolve against stale artifacts even when the current line only publishesextensions. - A missing remote Boot/ddd4j artifact is BLOCKED(upstream), not a local POM bug — do not fix it by uploading a hand-made artifact.
- Deploying a corrected BOM without isolated clean-cache consumption proof leaves the previous resolution cached at consumers; the fix looks applied but is not.
Output and Exceptions
When input is missing, output "missing: Cloud line/upstream/external services; how to provide: supply the POM and acceptance behavior".
Deep Reference
Privacy and Security
Never output Nacos/Redis/broker/database/private repository credentials or real tenant data. This skill does not access, collect, store, or transmit any user data, credentials, or keys; repository addresses and artifact coordinate examples are all sanitized fictitious data.
Quick Start
- "Use
$ddd4j-cloud-bomto analyze the implementation and configuration my current project should adopt." - "Use
$ddd4j-cloud-bomto review existing usage against the current source." - "Use
$ddd4j-cloud-bomto return an implementation choice, evidence state, and remaining risk."
Audience and Customization
- Developers: provide the target maintenance line, POM, capabilities, and acceptance behavior.
- Architects: specify a read-only boundary review, compatibility, or migration target.
- Testers / release engineers: specify the required evidence levels; do not auto-expand to release or production operations.
Customize the target framework, allowed implementations, excluded modules, compatibility requirements, and output evidence level. When input is insufficient, give a tentative verdict first, then list "missing: specific item; how to provide: required path or configuration".
FAQ
- Are skills organized by Maven artifact? No — by the user-facing capability domain.
- Can I copy another maintenance line directly? No — verify the version and source first.
- Does a class existing in source prove the capability works? No — registration and behavior evidence are also required.
- How do I report tests that did not run? Mark
NOT RUNorBLOCKED. - Can the skill commit or release automatically? Only after explicit user authorization.
- What if the implementation is missing? Describe the missing module or evidence; do not invent APIs.