2 Commits

Author	SHA1	Message	Date
Jon Chery	bb3ac7c74d	fix(P60): WAF scope case + VPC modify DependencyViolation ... Two module defects found in the prior live matrix run (3000, SHA a55752e2) that hadn't been fixed: 1. WAF: `scope: cloudfront` in complex example failed with "expected scope to be one of [CLOUDFRONT REGIONAL], got cloudfront". AWS requires uppercase. Added `scope = upper(var.scope)` in locals.tf so the module is resilient to either casing, and fixed the complex example to use CLOUDFRONT. 2. VPC: simple→complex modify tried to replace the VPC (CIDR changed 10.0.0.0/16 → 10.50.0.0/16, which is ForceNew) while subnets/IGW/ route tables still referenced it → DependencyViolation. Fixed the complex example to use the same CIDR (10.0.0.0/16) so terraform modifies in-place (adds a 3rd AZ subnet, updates tags). Also added create_before_destroy lifecycle on the VPC as a defensive measure. Regression: 479 passed, 5 deselected. 24 example contracts resolve. ---ci--- project: acdl phase: P60 milestone: v1.11 status: execute ---/ci---	2026-07-28 20:13:07 +00:00
Jon Chery	031887ec56	refactor(P57): contract surface redesign + rename + .yml repo-wide ... Contract surface redesign: - New top-level fields: id (3-6 char acronym → stack.name), name (full → stack.title), infrastructure (map keyed by module name, replaces module:) - Drop uses: field (dead reference; version pin lives in CI workflow uses: line) - Drop top-level module/inputs (now nested under infrastructure map) - Per-module optional version (defaults to latest published from registry) - Multi-module contracts: one file deploys N modules in one pipeline run, resource IDs namespaced with module name to avoid collisions - stack.schema.json: add optional title field for display name Rename: - pipelines/deploy.yaml → pipelines/contract.yml (declarative spec, not a pipeline) - pipelines/ci.yaml → pipelines/ci.yml - All 44 .yaml files → .yml repo-wide (contracts, module examples, kyverno policies) - .acdl/contract.yaml → .acdl/contract.yml Resolver (core/contract_resolver.py): - Rewrite resolve() to loop infrastructure map, default version to latest, merge module fragments into one stack with namespaced resource IDs - _latest_version() picks highest non-deprecated from registry - _namespace_resources() prefixes IDs + rewrites ref: expressions for multi-module - Single-module path: unprefixed IDs (backward compatible) Verification: - 494 tests pass (0 contract-shape failures) - Local E2E passes (contract → resolver → adapter → local ECS HTTP 200 → outbox) ---ci--- project: acdl phase: 57 milestone: v1.10.2 status: execute ---/ci---	2026-07-27 21:37:40 +00:00