fufu-cloud-cli 0.9.0__tar.gz → 0.9.1__tar.gz

{fufu_cloud_cli-0.9.0/src/fufu_cloud_cli.egg-info → fufu_cloud_cli-0.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fufu-cloud-cli
-Version: 0.9.0
+Version: 0.9.1
 Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
 License-Expression: LicenseRef-Proprietary
 Requires-Python: >=3.10
@@ -22,12 +22,17 @@ Dynamic: license-file
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.1 統一所有 CLI API 請求的 `User-Agent: fufu-cloud-cli`，涵蓋物件傳輸、
+Cloudflare 靜態檔案部署、IaC 遠端 state 與 Cloud Shell session，避免沿用
+Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代 credential
+或 IAM；HTTPS 驗證、禁止重新導向與不使用環境代理的行為保留。
+
 0.8.0 包含資源配額、分段傳輸、Terraform 核心子集與 Cloudflare 靜態部署／R2。需要同步更新服務端；CLI 安裝成功不表示任意 FUFU 服務端都已有這些能力。
 
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.8.0'
+pip install 'fufu-cloud-cli==0.9.1'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main

{fufu_cloud_cli-0.9.0 → fufu_cloud_cli-0.9.1}/README.md

@@ -4,12 +4,17 @@
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.1 統一所有 CLI API 請求的 `User-Agent: fufu-cloud-cli`，涵蓋物件傳輸、
+Cloudflare 靜態檔案部署、IaC 遠端 state 與 Cloud Shell session，避免沿用
+Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代 credential
+或 IAM；HTTPS 驗證、禁止重新導向與不使用環境代理的行為保留。
+
 0.8.0 包含資源配額、分段傳輸、Terraform 核心子集與 Cloudflare 靜態部署／R2。需要同步更新服務端；CLI 安裝成功不表示任意 FUFU 服務端都已有這些能力。
 
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.8.0'
+pip install 'fufu-cloud-cli==0.9.1'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main

{fufu_cloud_cli-0.9.0 → fufu_cloud_cli-0.9.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fufu-cloud-cli"
-version = "0.9.0"
+version = "0.9.1"
 description = "FUFU Cloud CLI for tenant-scoped mock cloud development and deployment"
 readme = "README.md"
 requires-python = ">=3.10"

{fufu_cloud_cli-0.9.0 → fufu_cloud_cli-0.9.1}/src/fufu_cloud_cli/__init__.py

@@ -1,3 +1,3 @@
 """FUFU CLI 與本機部署工具；相容範圍見 capabilities.json。"""
 
-__version__ = "0.9.0"
+__version__ = "0.9.1"

{fufu_cloud_cli-0.9.0 → fufu_cloud_cli-0.9.1}/src/fufu_cloud_cli/api_backend.py

@@ -19,6 +19,7 @@ PROVIDERS = {"aws", "gcp", "azure", "cloudflare"}
 from .limits import JSON_BODY_BYTES, JSON_RESPONSE_BYTES
 
 MAX_RESPONSE = 8 * 1024 * 1024
+HTTP_USER_AGENT = "fufu-cloud-cli"
 
 
 @contextmanager
@@ -49,6 +50,15 @@ class NoRedirect(HTTPRedirectHandler):
         return None
 
 
+def api_opener():
+    """Keep the CLI identity on every request, including binary and IaC traffic."""
+    opener = build_opener(ProxyHandler({}), NoRedirect(), HTTPSHandler(context=ssl.create_default_context()))
+    # Python-urllib's default identity can trigger Cloudflare error 1010. Set
+    # this at the transport boundary so new request paths inherit it as well.
+    opener.addheaders = [("User-Agent", HTTP_USER_AGENT)]
+    return opener
+
+
 def endpoint_url(value):
     require(isinstance(value, str) and value == value.strip(), "INVALID_ENDPOINT", "請提供有效的 FUFU API endpoint。")
     parsed = urlsplit(value)
@@ -113,7 +123,7 @@ def load_credential(provider=None, filename=None):
 class ApiClient:
     def __init__(self, provider=None, filename=None, read_only=False):
         self.owns_token = True
-        self.opener = build_opener(ProxyHandler({}), NoRedirect(), HTTPSHandler(context=ssl.create_default_context()))
+        self.opener = api_opener()
         if os.environ.get('FUFU_SESSION_FILE') and not filename:
             p = Path(os.environ['FUFU_SESSION_FILE'])
             require(p.is_file() and p.stat().st_size <= 16384, 'INVALID_SESSION', 'Session 檔案無效。')
@@ -133,7 +143,6 @@ class ApiClient:
         credential, self.endpoint = load_credential(provider, filename)
         self.provider = credential["provider"]
         self.token = None
-        self.opener = build_opener(ProxyHandler({}), NoRedirect(), HTTPSHandler(context=ssl.create_default_context()))
         scopes = [f"{self.provider}:read"] + ([] if read_only else [f"{self.provider}:write"])
         issued = self._request("POST", "/api/auth/token", {**credential, "scopes": scopes,
             **({'assume_role': os.environ['FUFU_ASSUME_ROLE']} if os.environ.get('FUFU_ASSUME_ROLE') else {})})
@@ -157,7 +166,7 @@ class ApiClient:
     def _request(self, method, path, body=None, *, large=False):
         require(path.startswith("/api/") and "\r" not in path and "\n" not in path,
                 "INVALID_REQUEST", "API 路徑無效。")
-        headers = {"Accept": "application/json", "User-Agent": "fufu-cloud-cli"}
+        headers = {"Accept": "application/json"}
         if self.token:
             headers["Authorization"] = f"Bearer {self.token}"
         data = None if body is None else json.dumps(body).encode("utf-8")

{fufu_cloud_cli-0.9.0 → fufu_cloud_cli-0.9.1/src/fufu_cloud_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fufu-cloud-cli
-Version: 0.9.0
+Version: 0.9.1
 Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
 License-Expression: LicenseRef-Proprietary
 Requires-Python: >=3.10
@@ -22,12 +22,17 @@ Dynamic: license-file
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.1 統一所有 CLI API 請求的 `User-Agent: fufu-cloud-cli`，涵蓋物件傳輸、
+Cloudflare 靜態檔案部署、IaC 遠端 state 與 Cloud Shell session，避免沿用
+Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代 credential
+或 IAM；HTTPS 驗證、禁止重新導向與不使用環境代理的行為保留。
+
 0.8.0 包含資源配額、分段傳輸、Terraform 核心子集與 Cloudflare 靜態部署／R2。需要同步更新服務端；CLI 安裝成功不表示任意 FUFU 服務端都已有這些能力。
 
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.8.0'
+pip install 'fufu-cloud-cli==0.9.1'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main