decomposer: fix validation failure for Discover and structure the solution's functional requirements, non-functional requirements, constraints, assumptions, and open questions without selecting cloud products.; Select Google Cloud products from the confirmed requirements and produce the solution architecture, Mermaid diagram, architecture description, and Terraform infrastructure-as-code.; Validate the Terraform infrastructure and architecture artifacts without deploying resources by running formatting checks, Terraform validation, and a dry-run or plan-oriented deployment check.; Package the approved requirements, architecture, Mermaid diagram, Terraform IaC, and validation results into solution-architecture-guide.md in the gcp_solution_architecture_agent repository.; Verify that the gcp_solution_architecture_agent repository contains the packaged solution-architecture-guide.md with the approved workflow outputs.; Verify that the repository is derived from the workflow_agent template and implements the complete four-phase Google Cloud solution architecture workflow alongside the packaged guide.; Publish the verified gcp_solution_architecture_agent repository with its completed workflow implementation and solution architecture guide.; Verify that the published repository revision contains the completed workflow implementation and solution architecture guide.

terraform/variables.tf

@@ -1,11 +1,25 @@
-variable "project_id" { type = string }
-variable "region" { type = string default = "us-central1" }
-variable "name" { type = string default = "orders" }
-variable "connector_cidr" { type = string default = "10.8.0.0/28" }
-variable "sql_tier" { type = string default = "db-custom-1-3840" }
-variable "db_user" { type = string default = "orders_app" }
-variable "db_password" { type = string sensitive = true }
-variable "api_image" { type = string default = "us-docker.pkg.dev/cloudrun/container/placeholder-api:latest" }
-variable "worker_image" { type = string default = "us-docker.pkg.dev/cloudrun/container/placeholder-worker:latest" }
-variable "api_max_instances" { type = number default = 20 }
-variable "worker_max_instances" { type = number default = 20 }
+variable "provision" {
+  description = "Explicit opt-in for provisioning. Keep false for planning and validation."
+  type        = bool
+  default     = false
+}
+
+variable "project_id" {
+  description = "Google Cloud project to target when provisioning is enabled."
+  type        = string
+}
+
+variable "region" {
+  type    = string
+  default = "us-central1"
+}
+
+variable "service_image" {
+  description = "Immutable application image reference."
+  type        = string
+}
+
+variable "secret_id" {
+  description = "Secret Manager secret name; the value is never stored in Terraform."
+  type        = string
+}