Break the 6,500-line worker/azure.rs into a directory module so each
concern can be read and reviewed in isolation:

- azure/mod.rs: controller struct, environment-wake retry tracking, and
  the #[controller] handler impl (kept whole for macro state generation)
- azure/support.rs: naming helpers, wait/delay helpers, error
  classifiers, heartbeat emission, and AzureStorageTriggerInfrastructure
- azure/helpers.rs: the plain helper-method impl block
- azure/tests.rs: the controller test module

Pure code motion: moved items are bumped to pub(super) where needed;
external paths are unchanged via the existing worker::azure re-exports.

Break the 5,700-line gcp/compute.rs into a directory module so each
concern can be read and reviewed in isolation:

- compute/mod.rs: module doc, ComputeServiceConfig, and re-exports
- compute/api.rs: the ComputeApi trait (automock still generates
  MockComputeApi here, re-exported unchanged)
- compute/client.rs: ComputeClient and its ComputeApi impl
- compute/types/: the serde data structures, split along the existing
  section banners (operations, network, load_balancer, instance)
- compute/tests.rs: the PSC serde test module

Pure code motion: no items were renamed or reordered; external paths
are unchanged via glob re-exports from compute/mod.rs. Note in
gcp/AGENTS.md that compute/ is the directory-module variant of the
cloudrun.rs pattern.

Break the 4,800-line lib.rs into concern modules so each area can be
read and reviewed in isolation:

- lib.rs: build_stack orchestration, build_resource, and
  build_target_to_file
- push.rs: push_stack, push targets, OCI tarball selection, and
  image index assembly
- cache.rs: artifact cache keys, source hashing, cargo metadata,
  and cached artifact lookup
- base_images.rs: base image resolution, entrypoint/cmd handling,
  and pull/retry classification
- tests.rs: the unit test module, still gated by #[cfg(test)]

Pure code motion: moved items are bumped to pub(crate); the public
API is unchanged via the root pub use of push_stack.

Break the 4,647-line generator.rs into a generator/ directory so each
concern can be read and reviewed in isolation:

- mod.rs: the options types, the generate_helm_chart and
  render_manager_fetch_values entrypoints, and shared JSON/YAML/name
  helpers
- operator.rs: generate_operator_manifest and the operator document
  builders
- values.rs: ChartAnalysis, values.yaml assembly, and cloud-identity
  mapping
- schema.rs: values.schema.json
- templates.rs: the Helm template (.tpl) bodies
- examples.rs: the per-target values examples and README
- tests.rs: the unit test module, still gated by #[cfg(test)]

Pure code motion: moved helpers are bumped to pub(super); the public
API is unchanged (lib.rs still re-exports generate_operator_manifest and
the other entrypoints). The file drops off the hk.pkl max-lines exclude
now that every module is under the 2000-line cap.

Break the 2,262-line generator.rs into a generator/ directory so each
concern can be read and reviewed in isolation:

- mod.rs: the template constants, the RegistrationMode /
  CloudFormationOptions / CloudFormationTarget types, the
  generate_cloudformation_template entrypoint, YAML serialization,
  stack validation, and the shared resource/output helpers
- parameters.rs: the standard/network/compute parameter blocks, the
  supported-region and custom-domain rules, the standard conditions,
  and the parameter-default helpers
- expressions.rs: the kubernetes/network/domains/management settings
  expressions, the JSON <-> CfExpression bridge, and the CfParameter /
  CfOutput constructors
- tests.rs: the unit test module, still gated by #[cfg(test)]

Pure code motion: moved helpers are bumped to pub(super); the public
API is unchanged (lib.rs still re-exports generate_cloudformation_template
and the other entrypoints). The file drops off the hk.pkl max-lines
exclude now that every module is under the 2000-line cap.

The EC2 client lived in a single 3616-line file. Split it into an
ec2/ module mirroring the existing client layout: api (the Ec2Api
trait), client (Ec2Client and its impls plus the cpu-options unit
tests), and types/ grouped by resource (common, network,
security_group, instance, volume, launch_template).

Pure code motion with import redistribution and module wiring; no
behavior change. Remove the file from the max-lines exclude list now
that every resulting file is under the 2000-line cap.

Break the 3,140-line gcp_compute_client_tests.rs into a directory test
target so each area can be read and reviewed in isolation. The binary
name (gcp_compute_client_tests) and all 17 tests are unchanged:

- main.rs: crate doc, module wiring, and the framework smoke test
- context.rs: the ComputeTestContext fixture and its cleanup/wait helpers
- vpc.rs, load_balancing.rs, disks.rs, instances.rs, ssl_proxy.rs: the
  comprehensive lifecycle tests, one area per module
- errors.rs: the not-found/error-mapping tests plus the operation-status
  test

Pure code motion: no test logic changed. Fixture items used across
modules are bumped from private to pub(crate), per-module imports are
consolidated, the mid-function rcgen import is hoisted to the top of
ssl_proxy.rs, and a mislabeled "Error Handling Tests for New APIs" banner
that sat above the SSL lifecycle test is dropped. The file is removed
from the hk.pkl max-lines exclude list now that every module is under the
2,000-line cap.

Break the 2,265-line aws_s3_client_tests.rs into a directory test target
so each area can be read and reviewed in isolation. The binary name
(aws_s3_client_tests) and all 37 tests are unchanged:

- main.rs: the crate attribute and module wiring
- context.rs: the S3TestContext fixture, its cleanup helpers, and the
  put_test_object helper
- bucket.rs: bucket lifecycle, policy, lifecycle-config, public-access
  block, name validation, and notification-config tests
- object.rs: object put/get/head, listing, delete, and empty-bucket tests
- versioning.rs: bucket-versioning and versioned-object tests
- location.rs: the get_bucket_location tests

Pure code motion: no test logic changed. Fixture items used across
modules are bumped from private to pub(crate) and per-module imports are
consolidated. The file is removed from the hk.pkl max-lines exclude list
now that every module is under the 2,000-line cap.

Break the 4,726-line distribution.rs into a distribution/ directory so
each concern can be read and reviewed in isolation:

- mod.rs: DistributionArtifactCleanup, setup_distribution and
  prepare_distribution, the flow-availability and stack-settings
  helpers, the cross-domain flow orchestrators (run_cloudformation_k8s,
  run_terraform_cloud/k8s, run_onprem_k8s), and stack import/finalize
- cleanup.rs: post-error cleanup and retained-resource teardown
- cloudformation.rs: run_cloudformation_aws and the CloudFormation
  request/output/stack-event helpers
- terraform.rs: the Terraform apply/import flow, tfvars, outputs, and
  handoff-debug helpers
- helm.rs: chart/values rendering, the Kubernetes helm target and
  kubeconfig materialization, and image-rewrite helpers
- permissions.rs: the GCP and Azure management permission probes
- env.rs: cloud env assembly (aws/gcp/azure/terraform)
- exec.rs: the process runners and shell-quote helpers
- tests.rs: the unit test module, still gated by #[cfg(test)]

Pure code motion: moved helpers are bumped to pub(super); the public
API is unchanged (setup_distribution and DistributionArtifactCleanup
are still defined in mod.rs). The file drops off the hk.pkl max-lines
exclude now that every module is under the 2,000-line cap.

Break the 2,700-line heartbeat.rs into a heartbeat/ directory so each
family of provider heartbeat types can be read and reviewed on its own:

- mod.rs: the ResourceHeartbeat envelope, ObservedInventoryBatch /
  ObservedResourceSample, shared health/lifecycle/backend/collection
  enums, event snapshots, raw snippets, and metric types
- storage.rs: StorageHeartbeatData and the S3/Blob/GCS/Local variants
- workload.rs: worker, container, and daemon heartbeat data plus the
  runtime unit and pod status types
- cluster.rs: compute-cluster and kubernetes-cluster heartbeat data with
  capacity/drain/fleet and node status types
- data_services.rs: queue, kv, postgres, and vault families
- platform.rs: service-account, network, and remote-stack-management
  families
- registry_build.rs: artifact-registry, build, and service-activation
  families
- azure_platform.rs: Azure resource-group, storage-account, container
  apps environment, and service-bus-namespace families
- tests.rs: the serde round-trip unit module, still gated by #[cfg(test)]

Pure code motion: submodules are glob re-exported from mod.rs so the
public API at the crate root is unchanged. Drop the file from the hk.pkl
max-lines exclude list now that every module is under the cap.

The generator split dedented the tests module by one level to extract it into
its own file, which unintentionally stripped four spaces from a line inside a
raw-string YAML literal, placing deploymentLabelValue at the document root
instead of under logCollector.scope. Helm 4 schema validation rejects the
root-level key, failing log_collector_enabled_chart_lints_and_templates.

Restore the four-space indentation so the literal is byte-identical to
pre-split. Verified with helm 4.2.3 + kubeconform: alien-helm 15/15 tests pass.

Relocate post-split changes from main into their focused modules and extract test modules that crossed the 2,000-line limit after the merge.

…files

# Conflicts:
#	crates/alien-terraform/src/generator.rs
#	crates/alien-test/src/distribution.rs

…/split-large-files

…ings' into refactor/split-large-files

…ings' into refactor/split-large-files

# Conflicts:
#	crates/alien-infra/src/worker/azure/mod.rs

# Conflicts:
#	crates/alien-test/src/distribution.rs

…ings' into refactor/split-large-files

# Conflicts:
#	crates/alien-cloudformation/src/generator.rs
#	crates/alien-terraform/src/generator.rs