feat: update caserun aggregation and v02 deploy config

scripts/deploy-desired-state-plan.test.mjs

@@ -7,6 +7,7 @@ import test from "node:test";
 import { promisify } from "node:util";
 
 import { buildDesiredStatePlan } from "./src/deploy-desired-state-plan.mjs";
+import { writeStructuredFile } from "./src/structured-config.mjs";
 
 const execFileAsync = promisify(execFile);
 
@@ -316,7 +317,7 @@ async function makeFixture({
       }
     ]
   };
-  await writeFile(path.join(root, "deploy/deploy.json"), `${JSON.stringify(deploy, null, 2)}\n`);
+  await writeStructuredFile(root, "deploy/deploy.yaml", deploy);
   await writeFile(path.join(root, "deploy/artifact-catalog.dev.json"), `${JSON.stringify(catalog, null, 2)}\n`);
   await writeFile(path.join(root, "deploy/k8s/base/workloads.yaml"), `${JSON.stringify(workloads, null, 2)}\n`);
   return root;
@@ -463,7 +464,7 @@ test("blocks when cloud-api DB SSL mode drifts back to require", async () => {
   assert.ok(plan.diagnostics.some((diagnostic) => diagnostic.code === "cloud_api_db_contract_mismatch"));
 });
 
-test("blocks when generated runtime identity leaks into deploy.json", async () => {
+test("blocks when generated runtime identity leaks into deploy.yaml", async () => {
   const repoRoot = await makeFixture({
     serviceId: "hwlab-cloud-web",
     deployEnvMirrors: true,
@@ -474,7 +475,7 @@ test("blocks when generated runtime identity leaks into deploy.json", async () =
   assert.equal(plan.summary.blockers, 3);
   assert.ok(plan.diagnostics.some((diagnostic) =>
     diagnostic.code === "generated_artifact_identity" &&
-    diagnostic.path === "deploy/deploy.json.services.hwlab-cloud-web.env.HWLAB_COMMIT_ID"
+    diagnostic.path === "deploy/deploy.yaml.services.hwlab-cloud-web.env.HWLAB_COMMIT_ID"
   ));
   assert.ok(plan.diagnostics.some((diagnostic) =>
     diagnostic.code === "generated_artifact_identity" &&
@@ -541,7 +542,7 @@ test("target check accepts accepted first-parent main on the checked-out merge c
   await git(repoRoot, ["checkout", "-b", "desired-state-refresh"]);
 
   for (const relativePath of [
-    "deploy/deploy.json",
+    "deploy/deploy.yaml",
     "deploy/artifact-catalog.dev.json",
     "deploy/k8s/base/workloads.yaml"
   ]) {
@@ -600,7 +601,7 @@ test("ignores generated workload mirror drift because render owns runtime identi
   assert.deepEqual(plan.diagnostics, []);
 });
 
-test("blocks on skills commit mirror leak in deploy.json", async () => {
+test("blocks on skills commit mirror leak in deploy.yaml", async () => {
   const repoRoot = await makeFixture({ deployEnvMirrors: true, deploySkillsCommitId: "badcafe" });
   const plan = await buildDesiredStatePlan({ repoRoot });
   assert.equal(plan.status, "blocked");