V3 Terraform CLI capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local terraform CLI ingredient exposes bounded infrastructure-as-code operations for readiness, recursive format checking, and configuration validation. Project operations run from an explicit Terraform working directory cwd supplied at execution time, use Terraform's built-in machine-readable diagnostics where available, avoid caller-supplied Terraform flags, avoid shell wrappers, and never expose plan, apply, destroy, state, import, workspace, init, provider installation, module download, variable files, backend mutation, or arbitrary command execution. Format checking is read-only. Validation is approval-gated because Terraform may execute installed provider plugins while loading provider schemas. Requires terraform on PATH and an already initialized working directory when provider schemas are needed.