Lifecycle

Mutations are create and update only. There is no destroy command.

Validate checks YAML, apiVersion, addresses, $refs, cycles, provider connectivity, and resource fields.

Plan is non-mutating. Unmanaged remote objects are ignored. Matomo publication can appear as:

> matomo.container.main: publish -> live [conditional]

Apply executes creates and updates in dependency order, persists identities, then runs publication only after draft mutations succeed.

Import binds one remote identity and prints YAML. It does not mutate Matomo or edit the manifest. Import Tag Manager dependencies before a tag.

State file: agoraform.state.json beside the manifest.