fufu-cloud-cli 0.5.0__py3-none-any.whl

fufu_cloud_cli/capabilities.json

@@ -0,0 +1,570 @@
+{
+  "backend": "selected-by-credential",
+  "backends": [
+    "local-docker",
+    "api"
+  ],
+  "api-mode-compute": "authenticated-remote-worker",
+  "compatibility": "explicit-subset",
+  "services": {
+    "cloud-run-http": {
+      "status": "implemented",
+      "operations": [
+        "deploy-image",
+        "replace-service-subset",
+        "describe",
+        "list",
+        "invoke-http",
+        "delete"
+      ],
+      "limitations": [
+        "single-approved-container",
+        "GCP-service-account-subset",
+        "explicit-GCS-workload-helper",
+        "no-registry-upload",
+        "no-autoscaling",
+        "no-traffic-splitting",
+        "no-jobs",
+        "no-public-ingress"
+      ],
+      "backends": [
+        "local-docker",
+        "api"
+      ]
+    },
+    "cloud-run-functions-http": {
+      "status": "implemented",
+      "operations": [
+        "deploy-python312-source",
+        "invoke-http",
+        "describe",
+        "list",
+        "delete"
+      ],
+      "limitations": [
+        "Python312-HTTP-only",
+        "no-Eventarc",
+        "no-PubSub-trigger",
+        "remote-source-no-network-dependency-install"
+      ],
+      "backends": [
+        "local-docker",
+        "api"
+      ]
+    },
+    "aws-lambda-sync": {
+      "status": "implemented",
+      "operations": [
+        "create-function-python310-python312-zip",
+        "invoke-RequestResponse",
+        "get-function",
+        "list-functions",
+        "delete-function",
+        "update-function-code-preserving-env"
+      ],
+      "limitations": [
+        "Python310-or-Python312-ZIP",
+        "AWS-IAM-inline-policy-subset",
+        "boto3-data-transport-subset",
+        "no-managed-timeout-equivalence",
+        "no-async-Invoke",
+        "remote-ZIP-6MiB",
+        "workload-token-24h",
+        "per-revision-network"
+      ],
+      "backends": [
+        "local-docker",
+        "api"
+      ]
+    },
+    "serverless-framework": {
+      "status": "unsupported",
+      "reason": "未實作原生 Framework provider/plugins/CloudFormation；可改用明確的 serverless-profile-adapter 子集。"
+    },
+    "azure-functions": {
+      "status": "unsupported",
+      "reason": "尚未建立 Azure Functions runtime adapter。"
+    },
+    "remote-fufu-auth": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "provider-credential-exchange",
+        "tenant-identity",
+        "read-write-scopes",
+        "one-hour-token",
+        "per-command-token-revocation"
+      ],
+      "limitations": [
+        "FUFU-only-credentials",
+        "no-OIDC",
+        "no-native-cloud-auth-actions"
+      ]
+    },
+    "aws-dynamodb-api": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "list-tables",
+        "create-table-HASH-RANGE-and-indexes",
+        "put-item",
+        "get-item",
+        "update-item",
+        "delete-item",
+        "query",
+        "scan",
+        "batch-get-item",
+        "batch-write-item",
+        "delete-table"
+      ],
+      "limitations": [
+        "native-JSON-fields",
+        "HASH-and-RANGE",
+        "Query-Scan-and-batch",
+        "pagination-explicit",
+        "no-Streams",
+        "no-transaction-API",
+        "no-PITR",
+        "binary-AttributeValue-not-yet-verified"
+      ]
+    },
+    "gcp-storage-api": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "bucket-create-list-delete",
+        "binary-object-upload-download-list-delete",
+        "UTF8-preview"
+      ],
+      "limitations": [
+        "object-6MiB",
+        "preview-32KiB",
+        "first-100-objects",
+        "no-signed-URLs",
+        "no-versioning"
+      ]
+    },
+    "azure-catalog-api": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "account-show",
+        "resource-catalog-list-show",
+        "resource-group-catalog-create-delete"
+      ],
+      "limitations": [
+        "catalog-only",
+        "no-Azure-runtime",
+        "no-Entra-STS"
+      ]
+    },
+    "aws-data-services": {
+      "status": "partial",
+      "reason": "DynamoDB、S3、SQS、SSM 已接 CLI 與 boto3；事件僅 SQS 手動 drain，其他服务不推定可用。"
+    },
+    "gcp-data-services": {
+      "status": "partial",
+      "reason": "GCS CLI 與明確 runtime helper 已接 IAM；其他 Google SDK、SQL 與事件投遞未完整接入。"
+    },
+    "managed-ai-gpu": {
+      "status": "unsupported",
+      "reason": "執行容器不等於 Vertex AI、Bedrock 或 GPU 託管行為相容。"
+    },
+    "cloud-functions-gen1-http": {
+      "status": "implemented",
+      "backends": [
+        "local-docker",
+        "api"
+      ],
+      "operations": [
+        "deploy-python312-http-source",
+        "describe",
+        "list",
+        "invoke-http",
+        "delete"
+      ],
+      "limitations": [
+        "Functions-Framework-HTTP-runtime-subset",
+        "no-gen1-control-plane",
+        "no-background-events",
+        "remote-source-no-network-dependency-install"
+      ]
+    },
+    "aws-s3-api": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "mb",
+        "rb",
+        "ls",
+        "cp-upload-download",
+        "rm"
+      ],
+      "limitations": [
+        "object-6MiB",
+        "first-100-objects",
+        "no-recursive-copy",
+        "no-presigned-URLs",
+        "no-versioning"
+      ]
+    },
+    "aws-sqs-api": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "create-queue",
+        "list-queues",
+        "delete-queue",
+        "send-message",
+        "receive-message",
+        "delete-message"
+      ],
+      "limitations": [
+        "standard-queues",
+        "message-32KiB",
+        "receive-max-10",
+        "fufu-QueueUrl",
+        "no-FIFO",
+        "manual-Lambda-drain-only",
+        "no-background-poller"
+      ]
+    },
+    "aws-ssm-api": {
+      "status": "implemented",
+      "backend": "api",
+      "operations": [
+        "put-parameter",
+        "get-parameter",
+        "get-parameters",
+        "delete-parameter"
+      ],
+      "limitations": [
+        "String-only",
+        "value-4KiB",
+        "no-SecureString-or-KMS",
+        "profile-environmentFrom-SSM-only"
+      ]
+    },
+    "gcp-bigquery": {
+      "name": "BigQuery",
+      "status": "partial",
+      "reason": "Console 與 emulator 查詢子集；CLI、SQL 完整性與雲端最佳化未驗證。"
+    },
+    "gcp-firestore": {
+      "name": "Firestore",
+      "status": "partial",
+      "reason": "已有 emulator；集合目錄 API 缺口，尚無完整 CLI 契約。"
+    },
+    "gcp-pubsub": {
+      "name": "Pub/Sub",
+      "status": "partial",
+      "reason": "已有 emulator 與 Console 檢視；尚未接入 CLI 部署或函式事件。"
+    },
+    "gcp-cloud-tasks": {
+      "name": "Cloud Tasks",
+      "status": "partial",
+      "reason": "已有 emulator 與 Console 檢視；未驗證 worker 事件投遞。"
+    },
+    "gcp-secret-manager": {
+      "name": "Secret Manager",
+      "status": "partial",
+      "reason": "已有 emulator 與 Console 檢視；CLI 未接入。"
+    },
+    "gcp-firebase-auth": {
+      "name": "Firebase Authentication",
+      "status": "partial",
+      "reason": "已有每租戶 emulator；CLI 認證管理未接入。"
+    },
+    "aws-secrets-manager": {
+      "name": "Secrets Manager",
+      "status": "partial",
+      "reason": "已有每租戶 LocalStack 與 Console 目錄；CLI 未接入。"
+    },
+    "aws-eventbridge-scheduler": {
+      "name": "EventBridge Scheduler",
+      "status": "partial",
+      "reason": "已有每租戶 LocalStack 與 Console；未接線至新 runtime。"
+    },
+    "gcp-cloud-sql": {
+      "name": "Cloud SQL",
+      "status": "partial",
+      "reason": "工作區有 PostgreSQL 引擎；不提供 Cloud SQL 控制面或每租戶 SQL 配置。"
+    },
+    "aws-rds": {
+      "name": "RDS / Aurora",
+      "status": "partial",
+      "reason": "工作區有 PostgreSQL 引擎；不提供 RDS 或 Aurora 控制面。"
+    },
+    "gcp-memorystore": {
+      "name": "Memorystore",
+      "status": "partial",
+      "reason": "工作區有 Redis 引擎；不提供 Memorystore 控制面。"
+    },
+    "aws-elasticache": {
+      "name": "ElastiCache",
+      "status": "partial",
+      "reason": "工作區有 Redis 引擎；不提供 ElastiCache 控制面。"
+    },
+    "gcp-app-engine": {
+      "name": "App Engine",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；App 未執行，不能列為成功部署。"
+    },
+    "gcp-compute-engine": {
+      "name": "Compute Engine",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-gke": {
+      "name": "GKE",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-cloud-run-jobs": {
+      "name": "Cloud Run Jobs",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-cloud-scheduler": {
+      "name": "Cloud Scheduler",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-artifact-registry": {
+      "name": "Artifact Registry",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-cloud-build": {
+      "name": "Cloud Build",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-eventarc": {
+      "name": "Eventarc",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；事件路由未執行，不能列為成功部署。"
+    },
+    "gcp-vertex-ai": {
+      "name": "Vertex AI",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-cloud-logging-monitoring": {
+      "name": "Cloud Logging / Monitoring",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "gcp-load-balancing-nat": {
+      "name": "Cloud Load Balancing / NAT",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-ec2": {
+      "name": "EC2",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；VM 未執行，不能列為成功部署。"
+    },
+    "aws-ecs": {
+      "name": "ECS / Fargate",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；Task 與容器未執行，不能列為成功部署。"
+    },
+    "aws-eks": {
+      "name": "EKS",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-app-runner": {
+      "name": "App Runner",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-api-gateway": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "OpenAPI-3.0.1-subset",
+        "Lambda-proxy-payload-1.0",
+        "FUFU-authentication-required",
+        "Cognito-claims-explicit-mock",
+        "no-public-ingress",
+        "no-custom-domains-or-usage-plans"
+      ]
+    },
+    "aws-cloudformation": {
+      "name": "CloudFormation",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；Stack 引擎未執行，不能列為成功部署。"
+    },
+    "aws-ecr": {
+      "name": "ECR",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-sns": {
+      "name": "SNS",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-step-functions": {
+      "name": "Step Functions",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；狀態機未執行，不能列為成功部署。"
+    },
+    "aws-cognito": {
+      "name": "Cognito",
+      "status": "mock-only",
+      "reason": "明示 mock 目錄；使用者池未執行，不能列為成功部署。"
+    },
+    "aws-ses": {
+      "name": "SES",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-cloudwatch": {
+      "name": "CloudWatch",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-cloudfront": {
+      "name": "CloudFront",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-vpc-nat-elb": {
+      "name": "VPC / NAT Gateway / ELB",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-bedrock": {
+      "name": "Bedrock",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-container-apps": {
+      "name": "Azure Container Apps",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-app-service": {
+      "name": "Azure App Service",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-aks": {
+      "name": "AKS",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-vm": {
+      "name": "Azure Virtual Machines",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-blob": {
+      "name": "Azure Blob Storage",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-sql": {
+      "name": "Azure SQL",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-cosmos-db": {
+      "name": "Cosmos DB",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-service-bus": {
+      "name": "Service Bus",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "azure-key-vault": {
+      "name": "Key Vault",
+      "status": "unsupported",
+      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+    },
+    "aws-iam": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "tenant-owner-bootstrap",
+        "inline-role-policies",
+        "default-deny",
+        "explicit-deny",
+        "PassRole",
+        "tenant-root-and-Lambda-trust-only",
+        "role-session-1h",
+        "no-Condition-or-managed-policy-or-OIDC"
+      ]
+    },
+    "gcp-iam": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "service-accounts",
+        "project-bindings",
+        "predefined-roles-subset",
+        "workload-enforcement",
+        "no-custom-roles-or-IAM-Conditions-or-org-hierarchy",
+        "owner-issued-restricted-service-account-session",
+        "no-role-chaining-or-native-Google-OAuth",
+        "session-cannot-manage-IAM"
+      ]
+    },
+    "aws-sdk-runtime": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "botocore-event-transport",
+        "DynamoDB-S3-SQS-SSM-only",
+        "FUFU-token-not-SigV4",
+        "no-real-cloud-fallback",
+        "no-presigned-URLs"
+      ]
+    },
+    "aws-sqs-lambda-mapping": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "standard-SQS-to-Lambda",
+        "manual-drain",
+        "one-batch-per-request",
+        "failed-batch-not-acknowledged",
+        "no-background-poller-or-DLQ-or-partial-batch-ack"
+      ]
+    },
+    "serverless-profile-adapter": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "original-selected-handlers-and-HTTP-routes",
+        "explicit-environment-and-IAM-resource-overlays",
+        "up-to-8-functions",
+        "no-plugins-or-CloudFormation",
+        "per-function-replacement-not-stack-rollback",
+        "unselected-functions-not-deployed"
+      ]
+    },
+    "gcp-storage-runtime": {
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "limitations": [
+        "explicit-Python-rpc-helper",
+        "project-service-account-bindings",
+        "objects-only",
+        "no-transparent-Google-SDK-compatibility"
+      ]
+    }
+  }
+}