awsquery 1.0.0__tar.gz → 1.2.0__tar.gz

{awsquery-1.0.0 → awsquery-1.2.0}/.github/workflows/quality.yml

@@ -45,4 +45,8 @@ jobs:
 
       - name: Run security checks
         run: |
-          make security-check
+          make security-check
+
+      - name: Check agent reference mirror
+        run: |
+          make llms-check

{awsquery-1.0.0 → awsquery-1.2.0}/.gitignore

@@ -215,4 +215,11 @@ __marimo__/
 
 sample-responses
 test_env
-awsinfo
+awsinfo
+# Codebase graph output (local tooling)
+graphify-out/
+
+# Local working directories and captured command output
+.development/
+.worktrees/
+output.txt

awsquery-1.2.0/.issues/ty5dx-add-per-service-default-actions-so-awsquery-ec2-runs-without-an-action/CONTEXT.md

@@ -0,0 +1,79 @@
+# CONTEXT — ty5dx
+
+Design decisions captured before research/planning. The researcher and planner
+must treat the "Decisions" section as locked.
+
+## Decisions (locked — research/planner must follow)
+
+- **Config location: a new `src/awsquery/default_actions.yaml`**, flat
+  `service: action` map (`ec2: describe_instances`). Not a key inside
+  `default_filters.yaml`.
+  **Why:** two walkers assume the strict `service -> action -> {columns: [...]}`
+  shape — `scripts/audit_default_filters.py:71` (`opcfg.get("columns", [])`) and
+  `tests/unit/test_default_column_filters.py:353`. A sibling string key would
+  raise `AttributeError: 'str' object has no attribute 'get'` in both. A separate
+  file leaves every existing walker untouched.
+  Must be added to the package data list in `pyproject.toml:82` alongside
+  `policy.json` and `default_filters.yaml`, or it will not ship in the wheel.
+
+- **Loader mirrors the existing config module.** Add `load_default_actions()`
+  (`@lru_cache(maxsize=1)`, same FileNotFoundError / YAMLError / generic
+  fallbacks returning `{}`) and `get_default_action(service)` to
+  `src/awsquery/config.py`, shaped exactly like `load_default_filters()` /
+  `get_default_columns()`: lowercased lookup, `debug_print` on both hit and
+  miss, `None` when unset.
+
+- **Action names only — no default parameters.** The map value is the operation
+  name and nothing else. Output shaping stays with `default_filters.yaml`
+  columns.
+
+- **Defaults are restricted to operations with no required parameters.** A
+  service whose natural listing needs an argument (e.g. `logs
+  describe-log-streams` needs `LogGroupName`) gets no default at all rather
+  than a default that fans out. `awsquery <service>` must always be a single
+  immediate call — no multi-level parameter resolution triggered by a default.
+
+- **Coverage: broad sweep (~50+ services).** Cover every service already in
+  `default_filters.yaml` that has an obvious parameterless list/describe entry
+  point. Skip any service where the entry point needs parameters (per the rule
+  above) or where no single operation is clearly "the" default.
+
+- **Announcement: debug only.** A `debug_print` records which default was
+  chosen. No hint on stderr during normal runs — stdout and stderr stay clean
+  for piping.
+
+- **Fallback when a service has no default:** print that service's available
+  actions to stderr, exit non-zero. `awsquery` with no service at all keeps
+  today's behavior (list services on stdout, exit 0).
+
+- **Resolved action takes the normal code path.** Once substituted it flows
+  through `validate_readonly`, default column filters, and any user `--`
+  filters/flags unchanged. `awsquery ec2 -- InstanceId` must equal
+  `awsquery ec2 describe-instances -- InstanceId`.
+
+## Claude's Discretion (research should explore options)
+
+- Exact insertion point in `main()` for the substitution — the current dead end
+  is the `if not args.service or not args.action` branch at
+  `src/awsquery/cli.py:830`, but `_build_filter_argv` (`cli.py:303`) also
+  branches on `args.action` and may need the resolved value.
+- Whether the fallback action listing reuses `get_service_operations()` /
+  `get_service_valid_operations()` (already in `cli.py`, used by
+  `action_completer`) or needs a shared helper.
+- Naming: `get_default_action` vs. something clearer; the surrounding module
+  favours `get_default_*`.
+- How the curated map is validated: a test asserting every entry is a real
+  botocore operation, is ReadOnly per `policy.json`, and has no required
+  parameters is the obvious guard — shape and location are the researcher's
+  call.
+- Whether kebab-case (`describe-instances`) or snake_case
+  (`describe_instances`) is the canonical value in the YAML;
+  `normalize_action_name` (`utils.py`) already exists for conversion.
+
+## Deferred (out of scope for this issue)
+
+- Botocore heuristic inference for services with no curated entry — curated map
+  only in this issue.
+- Default parameters (`MaxResults`, filters) attached to a default action.
+- User-level override of the curated map (`~/.awsquery/` config).
+- Refreshing the stale `.issues/MAP.md` (99 days old at time of writing).

awsquery-1.2.0/.issues/ty5dx-add-per-service-default-actions-so-awsquery-ec2-runs-without-an-action/EXECUTION.md

@@ -0,0 +1,147 @@
+# Execution: Add per-service default actions so `awsquery ec2` runs without an action
+
+**Started:** 2026-09-08T13:11:12Z
+**Status:** complete
+**Branch:** ty5dx-add-per-service-default-actions-so-awsquery-ec2-runs-without-an-action
+
+## Baseline
+
+`python3 -m pytest tests/ -q` before any changes: 1346 passed.
+
+## Execution Log
+
+- [x] Task 1: Add the curated default_actions.yaml and register it for packaging — commit 1366550
+- [x] Task 2: Add load_default_actions() and get_default_action() to config.py — commit 71056cf
+- [x] Task 3: Pre-parse argv injection in cli.py plus the no-default stderr fallback — commit e440aea
+  - Deviation: [Rule 1 - Bug] `test_argparse_system_exit_handling` in
+    tests/integration/test_end_to_end.py asserted the old dead-end behavior (unrecognized
+    `--unknown-option value` argv left `args.service='value'`, `args.action=None`, and the old
+    combined branch printed the service list and exited 0). The new split branch correctly
+    treats a service with no action as "no default configured", prints that service's actions
+    on stderr, and exits 1 for the now-nonsensical positional `value`. Changed the test's argv
+    to `["awsquery", "--unknown-option"]` (no stray positional) so it still exercises the
+    SystemExit(0)-with-unrecognized-flag path it was written for, without asserting on the
+    accidental "value"-as-service artifact. Included in commit e440aea.
+- [x] Task 4: Curated-map validation, injector, flag pass-through and casing tests — commit 8055ead
+  - Deviation: [Rule 1 - Bug] `_inject_default_action`'s `debug_print("Using default action...")`
+    was silently swallowed on every real invocation: it runs during the *first*
+    `parser.parse_known_args()` call, before `utils.set_debug_enabled(args.debug)` is reached
+    later in `main()`, so the global debug flag was still `False` at the moment the injector's
+    debug_print executed — the line could never appear on stderr for `awsquery -d ec2`,
+    contradicting Task 4's own required test ("`-d ec2` emits the `Using default action` line
+    on stderr") and the plan's success criterion that a debug_print announces the chosen
+    default. Fixed by pre-enabling debug mode from a lightweight scan of raw `sys.argv[1:]`
+    for `-d`/`--debug` immediately before the injection call; the later
+    `utils.set_debug_enabled(args.debug)` (now with its redundant `from . import utils`
+    removed) still re-applies the authoritative parsed value. Included in commit 8055ead.
+- [x] Task 5: Rewrite the vacuously-green integration test at test_end_to_end.py:889 — commit ff45e3b
+- [x] Task 6: Document the default-action shortcut in the README — commit 848bb9c
+
+## Verification Results
+
+**`make test`:** 1420 passed (baseline before this issue: 1346 passed; net +74 new/rewritten
+tests across the six tasks). Full output tail:
+```
+============================ 1420 passed in 11.76s =============================
+```
+
+**`make lint`:** clean.
+```
+flake8 src/ tests/ --count --statistics --show-source
+0
+pylint src/awsquery
+Your code has been rated at 10.00/10 (previous run: 10.00/10, +0.00)
+```
+
+**`make format-check`:** clean.
+```
+black --check --diff src/ tests/
+All done! (62 files would be left unchanged)
+isort --check-only --diff src/ tests/
+(no output — clean)
+```
+
+**Coverage gate:** `pytest.ini`/`Makefile` do not actually pass `--cov-fail-under` to `make
+test` (coverage is opt-in via `make coverage`); nothing to fail on. `make test` completed with
+0 non-coverage failures either way.
+
+**Packaging spot-check** (plan-mandated, not coverable by unit tests):
+```
+python3 -m build
+unzip -l dist/*.whl | grep default_actions.yaml
+     1604  ...  awsquery/default_actions.yaml
+```
+Confirms `default_actions.yaml` ships inside the built wheel. `dist/`, `build/`, and
+`src/awsquery.egg-info/` were removed after the check (build artifacts, not part of the repo).
+
+**Manual injector spot-check** (matches README examples):
+```
+_inject_default_action(['ec2']) == ['ec2', 'describe-instances']
+_inject_default_action(['s3', '--', 'Name']) == ['s3', 'list-buckets', '--', 'Name']
+```
+
+## Deviations from Plan
+
+### Auto-fixed (Rules 1-3)
+
+1. **[Rule 1 - Bug] `test_argparse_system_exit_handling` asserted the old dead-end branch
+   behavior** (Task 3, commit e440aea)
+   - Found during: Task 3 full-suite verification (`python3 -m pytest tests/ -q`)
+   - Issue: `sys.argv = ["awsquery", "--unknown-option", "value"]` left argparse assigning
+     `args.service = "value"` (positional match) and `args.action = None`. Before this issue,
+     the combined `if not args.service or not args.action:` branch printed the service list and
+     exited 0 for this case — the test asserted `exit code == 0`. After splitting the branch
+     (per Task 3's own spec), a service with no action but no configured default now correctly
+     prints that service's actions on stderr and exits 1, so `"value"` (not a real service)
+     produced `ERROR: Unknown service 'value'` and exit 1, failing the old assertion.
+   - Fix: Changed the test's argv to `["awsquery", "--unknown-option"]` (no stray positional),
+     which still leaves `args.service = None` and exercises the same "unrecognized flag doesn't
+     crash the parser, still exits 0" intent the test was written for, without depending on the
+     accidental "value"-as-service artifact that the new behavior correctly stops tolerating.
+   - Files: `tests/integration/test_end_to_end.py`
+
+2. **[Rule 1 - Bug] `_inject_default_action`'s debug_print was silently swallowed on every real
+   invocation** (Task 4, commit 8055ead)
+   - Found during: Task 4, writing the required test that `-d ec2` emits the `Using default
+     action` line on stderr
+   - Issue: the injector's `debug_print(...)` executes during the *first*
+     `parser.parse_known_args()` call, which is chronologically before
+     `utils.set_debug_enabled(args.debug)` runs later in `main()`. The global debug flag was
+     therefore still `False` at the moment the injector's debug_print fired, so the line could
+     never appear on stderr for `awsquery -d ec2` — contradicting both Task 4's required test
+     and the plan's stated success criterion ("Only a debug_print announces the chosen
+     default").
+   - Fix: pre-enable debug mode from a lightweight scan of raw `sys.argv[1:]` for `-d`/`--debug`
+     immediately before the injection call; the later `utils.set_debug_enabled(args.debug)`
+     (with its now-redundant `from . import utils` removed) still re-applies the authoritative
+     parsed value, so final debug state is unaffected — only the injector's own debug line was
+     previously lost.
+   - Files: `src/awsquery/cli.py`
+
+### Blocked (Rule 4)
+
+None.
+
+## Discovered Issues
+
+None found outside the scope of this issue.
+
+## Self-Check
+
+- [x] All files from plan exist (verified: `src/awsquery/default_actions.yaml`,
+  `src/awsquery/config.py`, `src/awsquery/cli.py`, `pyproject.toml`, all five test files,
+  `README.md`)
+- [x] All 6 commit hashes exist on branch (`git log --oneline` confirmed:
+  1366550, 71056cf, e440aea, 8055ead, ff45e3b, 848bb9c)
+- [x] Full verification suite passes for real: `make test` (1420 passed), `make lint` (clean),
+  `make format-check` (clean), plus the plan's packaging spot-check
+- [x] No stubs/TODOs/placeholders introduced (`grep -iE "TODO|FIXME|HACK|XXX|PLACEHOLDER|coming
+  soon|not implemented"` over the diff: no matches)
+- [x] No leftover debug code (`grep` over the diff for `console.log`/`debugger`/`binding.pry`/
+  `breakpoint()` bare prints: no matches; all `print()`/`debug_print()` calls are intentional
+  CLI output or the existing debug-logging convention)
+- **Result:** PASSED
+
+**Completed:** 2026-09-08T13:21:59Z
+**Duration:** ~11 minutes
+**Commits:** 6

awsquery-1.2.0/.issues/ty5dx-add-per-service-default-actions-so-awsquery-ec2-runs-without-an-action/ISSUE.md

@@ -0,0 +1,72 @@
+---
+id: ty5dx
+title: Add per-service default actions so awsquery ec2 runs without an action
+status: done
+ship_state: pr_open
+priority: medium
+labels:
+- enhancement
+- cli
+remote:
+- source: github
+  id: '18'
+  url: https://github.com/flomotlik/awsquery/issues/18
+---
+
+## Context
+
+Today `awsquery ec2` (service given, no action) falls into the `if not args.service or not args.action` branch in `src/awsquery/cli.py:830` and prints the full list of AWS services — which ignores the service the user just typed and is not useful.
+
+`awsinfo` treats the bare service name as a shortcut for its most common read operation. We want the same: `awsquery ec2` should behave as `awsquery ec2 describe-instances`, `awsquery s3` as `awsquery s3 list-buckets`, and so on.
+
+The pieces to build on already exist: `src/awsquery/config.py` loads and caches `src/awsquery/default_filters.yaml` (`load_default_filters`), and `get_default_columns(service, action)` already resolves per-service/per-action output columns from it. A default *action* is the missing counterpart to the default *columns*.
+
+## Scope
+
+**1. Curated YAML map for default actions**
+
+- Add a per-service `default_action:` key to the existing `default_filters.yaml` structure (sibling of the per-action entries), e.g.:
+
+  ```yaml
+  ec2:
+    default_action: describe_instances
+    describe_instances:
+      columns:
+      - InstanceId$
+      ...
+  ```
+
+- Hand-curate the mapping for the common services (ec2, s3, rds, lambda, ecs, eks, iam, cloudformation, dynamodb, sqs, sns, elbv2, autoscaling, cloudwatch, logs, ssm, secretsmanager, route53, acm, …). Curated only — no botocore heuristic inference in this issue.
+- Add a `get_default_action(service)` accessor in `src/awsquery/config.py`, matching the existing `get_default_columns` shape (normalized/lowercased lookup, `debug_print` on hit and miss, returns `None` when unset).
+
+**2. CLI wiring**
+
+- In `main()` (`src/awsquery/cli.py`), when `args.service` is set and `args.action` is empty, resolve the default action via `get_default_action(service)` and continue as if the user had typed it.
+- The resolved action must go through the normal path unchanged: `validate_readonly` security validation, parameter requirements / multi-level resolution, default column filters, and any user-supplied `--` filters and flags. `awsquery ec2 -- InstanceId` must work exactly like `awsquery ec2 describe-instances -- InstanceId`.
+- Emit a `debug_print` recording which default action was chosen.
+- The default action name carries **no default parameters** — it is only the operation name. Output shaping stays with the existing `default_filters.yaml` columns.
+
+**3. Fallback when no default is configured**
+
+- `awsquery <service>` for a service with no `default_action:` prints the available actions **for that service** to stderr and exits non-zero — replacing today's full-service-list behavior for this case.
+- `awsquery` with no service at all keeps its current behavior (print available services, exit 0).
+
+**4. Docs and tests**
+
+- Update README/help text to document the shortcut and how to configure `default_action:`.
+- Tests exercise the real implementation with only boto3 mocked, per the repo's testing rules — no pytest markers, no over-mocking.
+
+## Acceptance Criteria
+
+- [ ] `default_filters.yaml` carries a `default_action:` entry for each curated service, and the file still parses cleanly via `load_default_filters()`
+- [ ] `config.get_default_action(service)` returns the configured action, is case/format-insensitive in the same way as `get_default_columns`, and returns `None` for unconfigured services
+- [ ] `awsquery ec2` produces the same output as `awsquery ec2 describe-instances`
+- [ ] `awsquery s3` produces the same output as `awsquery s3 list-buckets`
+- [ ] User filters and flags apply to the defaulted action (`awsquery ec2 -- InstanceId` == `awsquery ec2 describe-instances -- InstanceId`)
+- [ ] The defaulted action passes through `validate_readonly` — a non-ReadOnly default would be rejected like any other action
+- [ ] Default column filters from `default_filters.yaml` still apply to the defaulted action
+- [ ] `awsquery <service-without-default>` lists that service's actions on stderr and exits non-zero
+- [ ] `awsquery` with no arguments still lists available services and exits 0
+- [ ] Tests cover: default resolution, unconfigured-service fallback, filter/flag pass-through, and readonly validation of the defaulted action
+- [ ] README documents the shortcut and the `default_action:` config key
+- [ ] `make test`, `make lint`, and `make format-check` pass