feat: Implement component workdir provisioning and CLI commands

- Add WorkdirProvisioner to handle isolated working directories for component execution
- Implement `atmos terraform workdir` commands: list, describe, show, clean
- Workdirs prevent component instance conflicts by providing isolated execution spaces
- Add workdir metadata tracking (source, hash, timestamps)
- Integrate provisioner into terraform command pipeline
- Add support for component workdir configuration in stack manifests

🤖 Generated with Claude Code

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

Author: osterman

cmd/terraform/workdir/workdir.go

@@ -0,0 +1,36 @@
+package workdir
+
+import (
+	"github.com/spf13/cobra"
+
+	"github.com/cloudposse/atmos/pkg/schema"
+)
+
+// atmosConfigPtr will be set by SetAtmosConfig before command execution.
+var atmosConfigPtr *schema.AtmosConfiguration
+
+// SetAtmosConfig sets the Atmos configuration for the workdir command.
+// This is called from root.go after atmosConfig is initialized.
+func SetAtmosConfig(config *schema.AtmosConfiguration) {
+	atmosConfigPtr = config
+}
+
+// workdirCmd represents the workdir command.
+var workdirCmd = &cobra.Command{
+	Use:   "workdir",
+	Short: "Manage component working directories",
+	Long:  `List, describe, show, and clean component working directories.`,
+}
+
+func init() {
+	// Add subcommands.
+	workdirCmd.AddCommand(listCmd)
+	workdirCmd.AddCommand(describeCmd)
+	workdirCmd.AddCommand(showCmd)
+	workdirCmd.AddCommand(cleanCmd)
+}
+
+// GetWorkdirCommand returns the workdir command for parent registration.
+func GetWorkdirCommand() *cobra.Command {
+	return workdirCmd
+}

cmd/terraform/workdir/workdir_clean.go

@@ -0,0 +1,116 @@
+package workdir
+
+import (
+	"fmt"
+	"os"
+
+	"github.com/spf13/cobra"
+	"github.com/spf13/viper"
+
+	errUtils "github.com/cloudposse/atmos/errors"
+	cfg "github.com/cloudposse/atmos/pkg/config"
+	"github.com/cloudposse/atmos/pkg/flags"
+	"github.com/cloudposse/atmos/pkg/perf"
+	"github.com/cloudposse/atmos/pkg/schema"
+	"github.com/cloudposse/atmos/pkg/ui/theme"
+)
+
+var cleanParser *flags.StandardParser
+
+var cleanCmd = &cobra.Command{
+	Use:   "clean [component]",
+	Short: "Clean workdir(s)",
+	Long: `Remove component working directories.
+
+Use --all to clean all workdirs, or specify a component and stack to clean a specific workdir.
+Workdirs are ephemeral and can be regenerated by running 'atmos terraform init'.`,
+	Example: `  # Clean a specific workdir
+  atmos terraform workdir clean vpc --stack dev
+
+  # Clean all workdirs
+  atmos terraform workdir clean --all`,
+	Args: cobra.MaximumNArgs(1),
+	RunE: func(cmd *cobra.Command, args []string) error {
+		defer perf.Track(atmosConfigPtr, "workdir.clean.RunE")()
+
+		v := viper.GetViper()
+		all := v.GetBool("all")
+		stack := v.GetString("stack")
+
+		// Validate arguments.
+		if all && len(args) > 0 {
+			return errUtils.Build(errUtils.ErrWorkdirClean).
+				WithExplanation("Cannot specify both --all and a component").
+				WithHint("Use --all alone to clean all workdirs, or specify a component and stack").
+				Err()
+		}
+
+		if !all && len(args) == 0 {
+			return errUtils.Build(errUtils.ErrWorkdirClean).
+				WithExplanation("Either --all or a component is required").
+				WithHint("Use --all to clean all workdirs, or specify a component with --stack").
+				Err()
+		}
+
+		if !all && stack == "" {
+			return errUtils.Build(errUtils.ErrWorkdirClean).
+				WithExplanation("Stack is required when cleaning a specific workdir").
+				WithHint("Use --stack to specify the stack").
+				Err()
+		}
+
+		// Initialize config.
+		atmosConfig, err := cfg.InitCliConfig(schema.ConfigAndStacksInfo{}, false)
+		if err != nil {
+			return errUtils.Build(errUtils.ErrWorkdirClean).
+				WithCause(err).
+				WithExplanation("Failed to load atmos configuration").
+				Err()
+		}
+
+		// Clean workdirs.
+		if all {
+			return cleanAllWorkdirs(&atmosConfig)
+		}
+
+		component := args[0]
+		return cleanSpecificWorkdir(&atmosConfig, component, stack)
+	},
+}
+
+func cleanAllWorkdirs(atmosConfig *schema.AtmosConfiguration) error {
+	if err := workdirManager.CleanAllWorkdirs(atmosConfig); err != nil {
+		return err
+	}
+
+	fmt.Fprintf(os.Stderr, "%s All workdirs cleaned\n", theme.Styles.Checkmark.String())
+	return nil
+}
+
+func cleanSpecificWorkdir(atmosConfig *schema.AtmosConfiguration, component, stack string) error {
+	if err := workdirManager.CleanWorkdir(atmosConfig, component, stack); err != nil {
+		return err
+	}
+
+	fmt.Fprintf(os.Stderr, "%s Workdir cleaned for %s in %s\n", theme.Styles.Checkmark.String(), component, stack)
+	return nil
+}
+
+func init() {
+	cleanCmd.DisableFlagParsing = false
+
+	// Create parser with functional options.
+	cleanParser = flags.NewStandardParser(
+		flags.WithStackFlag(),
+		flags.WithBoolFlag("all", "a", false, "Clean all workdirs"),
+		flags.WithEnvVars("all", "ATMOS_WORKDIR_CLEAN_ALL"),
+	)
+
+	// Register flags with the command.
+	cleanParser.RegisterFlags(cleanCmd)
+
+	// Bind flags to Viper.
+	if err := cleanParser.BindToViper(viper.GetViper()); err != nil {
+		panic(err)
+	}
+}

cmd/terraform/workdir/workdir_describe.go

@@ -0,0 +1,78 @@
+package workdir
+
+import (
+	"fmt"
+
+	"github.com/spf13/cobra"
+	"github.com/spf13/viper"
+
+	errUtils "github.com/cloudposse/atmos/errors"
+	cfg "github.com/cloudposse/atmos/pkg/config"
+	"github.com/cloudposse/atmos/pkg/flags"
+	"github.com/cloudposse/atmos/pkg/perf"
+	"github.com/cloudposse/atmos/pkg/schema"
+)
+
+var describeParser *flags.StandardParser
+
+var describeCmd = &cobra.Command{
+	Use:   "describe <component>",
+	Short: "Describe workdir as stack manifest",
+	Long: `Output the workdir configuration as a valid Atmos stack manifest snippet.
+
+The output can be used to see or copy the workdir configuration in a format
+that matches the stack manifest structure.`,
+	Example: `  atmos terraform workdir describe vpc --stack dev`,
+	Args:    cobra.ExactArgs(1),
+	RunE: func(cmd *cobra.Command, args []string) error {
+		defer perf.Track(atmosConfigPtr, "workdir.describe.RunE")()
+
+		component := args[0]
+
+		v := viper.GetViper()
+		stack := v.GetString("stack")
+
+		if stack == "" {
+			return errUtils.Build(errUtils.ErrWorkdirMetadata).
+				WithExplanation("Stack is required").
+				WithHint("Use --stack to specify the stack").
+				Err()
+		}
+
+		// Initialize config.
+		atmosConfig, err := cfg.InitCliConfig(schema.ConfigAndStacksInfo{}, false)
+		if err != nil {
+			return errUtils.Build(errUtils.ErrWorkdirMetadata).
+				WithCause(err).
+				WithExplanation("Failed to load atmos configuration").
+				Err()
+		}
+
+		// Get workdir manifest.
+		manifest, err := workdirManager.DescribeWorkdir(&atmosConfig, component, stack)
+		if err != nil {
+			return err
+		}
+
+		// Output the manifest.
+		fmt.Print(manifest)
+		return nil
+	},
+}
+
+func init() {
+	describeCmd.DisableFlagParsing = false
+
+	// Create parser with functional options.
+	describeParser = flags.NewStandardParser(
+		flags.WithStackFlag(),
+	)
+
+	// Register flags with the command.
+	describeParser.RegisterFlags(describeCmd)
+
+	// Bind flags to Viper.
+	if err := describeParser.BindToViper(viper.GetViper()); err != nil {
+		panic(err)
+	}
+}