fufu-cloud-cli 0.9.4__tar.gz → 0.9.5__tar.gz

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fufu-cloud-cli
-Version: 0.9.4
+Version: 0.9.5
 Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
 License-Expression: LicenseRef-Proprietary
 Requires-Python: >=3.10
@@ -14,14 +14,43 @@ Provides-Extra: test
 Requires-Dist: boto3==1.40.66; extra == "test"
 Provides-Extra: terraform
 Requires-Dist: python-hcl2==7.3.1; extra == "terraform"
+Provides-Extra: gcp
+Requires-Dist: google-cloud-bigquery==3.38.0; extra == "gcp"
+Requires-Dist: google-cloud-tasks==2.20.0; extra == "gcp"
+Requires-Dist: google-cloud-logging==3.12.1; extra == "gcp"
 Dynamic: license-file
 
 # FUFU Cloud CLI
 
-以五個指令操作 FUFU Cloud 的租戶隔離開發環境：`fufu`、`aws-fufu`、
-`gcloud-fufu`、`az-fufu`、`wrangler-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
+以六個指令操作 FUFU Cloud 的租戶隔離開發環境：`fufu`、`aws-fufu`、
+`gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
+支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
+insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
+BigQuery、Cloud Tasks、Logging SDK 的明確 REST factory；可用 `[gcp]` extra
+安裝已驗收相依。需要對應的新後端，並非透明 ADC 或所有 Google SDK 替換。
+
+`fufu infrastructure` 提供 14 類 typed configuration mock。Compute Engine、
+Cloud SQL、App Engine、DNS、VPC、Artifact Registry、Cloud Build、Gemini、
+VM Manager、Eventarc 等設定不會啟動 VM／SQL／registry／網路／推論。
+UI 顯示僅設定，CLI stderr 保留 MOCK ONLY，不因輸出投影而隱藏。
+新服務尚未接入 Terraform／OpenTofu／Pulumi；單機背景投遞不是雲端 HA。
+
+```bash
+gcloud-fufu scheduler jobs list
+gcloud-fufu tasks queues list
+bq-fufu query --use_legacy_sql=false 'SELECT 1 AS ready'
+gcloud-fufu logging read 'severity>=ERROR'
+fufu infrastructure catalog
+```
+
+BigQuery 是 tenant emulator 的 GoogleSQL 子集，無 DML／DDL、load/export、
+外部表與效能／費用等價。Logging 保留每租戶最新 10,000 筆，不自動收集所有
+容器 stdout。Tasks 每 queue 每秒最多 1 次、每租戶 2 個同時投遞；耗盡 task
+留待檢查，與官方刪除策略不同。新的 dependency flow 不代表完整應用都能遷移。
+
 0.9.4 新增 GCS generation／metageneration 條件、`storage objects describe/update/list`、8 KiB 自訂 metadata 與二進位 `cat`。競爭寫入、過期條件、CLI metadata 和官方 gcloud 輸出欄位已對照驗收；不相符條件回傳 `PRECONDITION_FAILED`／HTTP 412。新功能需要同步更新 FUFU Console、GCS 儲存映像和 Cloud Shell。儲存升級前須停寫並備份完整 volume；新 metadata 格式可讀舊資料，回滾須還原升級前備份。
 
 0.9.3 的常用輸出投影、清單篩選／排序／limit、Cloud Run 設定更新、Service Account 啟停及 Pub/Sub attributes／ACK deadline 持續保留。僅明列子集經過官方 gcloud、小用量真實 GCP 與隔離 Docker 驗收；不表示完整 Google IAM、SDK／ADC 或自動擴縮相容。
@@ -36,7 +65,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.4'
+pip install 'fufu-cloud-cli==0.9.5'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -80,7 +109,8 @@ pip install fufu-cloud-cli
 fufu --version
 ```
 
-npm 版本需要 Node.js 18 以上，以及已安裝的 Python 3.10 以上；各入口
+npm registry 尚未發布；以下是 registry 可用後的安裝語法。目前可安裝經驗收
+的 npm tarball。npm 版本需要 Node.js 18 以上，以及已安裝的 Python 3.10 以上；各入口
 呼叫相同的 Python CLI。0.8.0 的 npm 建置包內附純 Python YAML／TOML parser，沒有安裝腳本，
 不會自行下載 Python 或執行 pip。
 
@@ -97,12 +127,12 @@ npx --no-install aws-fufu --help
 
 ## 憑證與 CI
 
-目前工作樹另提供 `fufu tofu`、`fufu pulumi`、`fufu state`。
+目前版本另提供 `fufu tofu`、`fufu pulumi`、`fufu state`。
 Terraform／OpenTofu 可選擇租戶遠端 HTTP state，具備鎖、加密、版本與
 復原；需配套 Console API 和平台金鑰。Pulumi 使用固定官方 Node.js SDK，
 已驗收 SQS、SSM String、Pub/Sub topic／pull subscription，採獨立本機
-DIY backend，秘密欄位需外部 passphrase。這些新能力尚未包含在已發布
-的 0.8.0，不能把套件安裝成功當成支援驗收。
+DIY backend，秘密欄位需外部 passphrase。這些能力從 0.9.0 起納入 CLI，
+仍需要配套服務端；不能把套件安裝成功當成支援驗收。
 
 此工作樹也提供 `fufu terraform`：以官方 AWS／Google Terraform provider
 管理 Lambda ZIP、Cloud Run v2、IAM 與服務入口的明列子集，並使用獨立的
@@ -112,9 +142,9 @@ GCS／S3、Functions Gen 1／Gen 2 等一般 CLI 能力
 不表示官方 Terraform 資源已相容。正式環境使用正常 Terraform、正式認證
 與獨立 state，不可直接搬用 FUFU state。
 
-後續開發版另接入 SQS queue、SSM String parameter、Pub/Sub topic／pull
+目前版本另接入 SQS queue、SSM String parameter、Pub/Sub topic／pull
 subscription；新增能力需要配套的 Console 與 Pub/Sub 後端更新，不能從
-已發布的 0.8.0 安裝成功就推定已具備。`gcloud-fufu pubsub` 提供建立、
+CLI 安裝成功就推定服務端已具備。`gcloud-fufu pubsub` 提供建立、
 查詢、更新、刪除、publish／pull／ack 子集；不支援 push、ordering、
 exactly-once、Function trigger 或保留期限保證。
 

fufu_cloud_cli-0.9.4/src/fufu_cloud_cli.egg-info/PKG-INFO → fufu_cloud_cli-0.9.5/README.md

@@ -1,27 +1,34 @@
-Metadata-Version: 2.4
-Name: fufu-cloud-cli
-Version: 0.9.4
-Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
-License-Expression: LicenseRef-Proprietary
-Requires-Python: >=3.10
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: PyYAML==6.0.3
-Requires-Dist: tomli==2.2.1; python_version < "3.11"
-Provides-Extra: yaml
-Requires-Dist: PyYAML==6.0.3; extra == "yaml"
-Provides-Extra: test
-Requires-Dist: boto3==1.40.66; extra == "test"
-Provides-Extra: terraform
-Requires-Dist: python-hcl2==7.3.1; extra == "terraform"
-Dynamic: license-file
-
 # FUFU Cloud CLI
 
-以五個指令操作 FUFU Cloud 的租戶隔離開發環境：`fufu`、`aws-fufu`、
-`gcloud-fufu`、`az-fufu`、`wrangler-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
+以六個指令操作 FUFU Cloud 的租戶隔離開發環境：`fufu`、`aws-fufu`、
+`gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
+支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
+insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
+BigQuery、Cloud Tasks、Logging SDK 的明確 REST factory；可用 `[gcp]` extra
+安裝已驗收相依。需要對應的新後端，並非透明 ADC 或所有 Google SDK 替換。
+
+`fufu infrastructure` 提供 14 類 typed configuration mock。Compute Engine、
+Cloud SQL、App Engine、DNS、VPC、Artifact Registry、Cloud Build、Gemini、
+VM Manager、Eventarc 等設定不會啟動 VM／SQL／registry／網路／推論。
+UI 顯示僅設定，CLI stderr 保留 MOCK ONLY，不因輸出投影而隱藏。
+新服務尚未接入 Terraform／OpenTofu／Pulumi；單機背景投遞不是雲端 HA。
+
+```bash
+gcloud-fufu scheduler jobs list
+gcloud-fufu tasks queues list
+bq-fufu query --use_legacy_sql=false 'SELECT 1 AS ready'
+gcloud-fufu logging read 'severity>=ERROR'
+fufu infrastructure catalog
+```
+
+BigQuery 是 tenant emulator 的 GoogleSQL 子集，無 DML／DDL、load/export、
+外部表與效能／費用等價。Logging 保留每租戶最新 10,000 筆，不自動收集所有
+容器 stdout。Tasks 每 queue 每秒最多 1 次、每租戶 2 個同時投遞；耗盡 task
+留待檢查，與官方刪除策略不同。新的 dependency flow 不代表完整應用都能遷移。
+
 0.9.4 新增 GCS generation／metageneration 條件、`storage objects describe/update/list`、8 KiB 自訂 metadata 與二進位 `cat`。競爭寫入、過期條件、CLI metadata 和官方 gcloud 輸出欄位已對照驗收；不相符條件回傳 `PRECONDITION_FAILED`／HTTP 412。新功能需要同步更新 FUFU Console、GCS 儲存映像和 Cloud Shell。儲存升級前須停寫並備份完整 volume；新 metadata 格式可讀舊資料，回滾須還原升級前備份。
 
 0.9.3 的常用輸出投影、清單篩選／排序／limit、Cloud Run 設定更新、Service Account 啟停及 Pub/Sub attributes／ACK deadline 持續保留。僅明列子集經過官方 gcloud、小用量真實 GCP 與隔離 Docker 驗收；不表示完整 Google IAM、SDK／ADC 或自動擴縮相容。
@@ -36,7 +43,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.4'
+pip install 'fufu-cloud-cli==0.9.5'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -80,7 +87,8 @@ pip install fufu-cloud-cli
 fufu --version
 ```
 
-npm 版本需要 Node.js 18 以上，以及已安裝的 Python 3.10 以上；各入口
+npm registry 尚未發布；以下是 registry 可用後的安裝語法。目前可安裝經驗收
+的 npm tarball。npm 版本需要 Node.js 18 以上，以及已安裝的 Python 3.10 以上；各入口
 呼叫相同的 Python CLI。0.8.0 的 npm 建置包內附純 Python YAML／TOML parser，沒有安裝腳本，
 不會自行下載 Python 或執行 pip。
 
@@ -97,12 +105,12 @@ npx --no-install aws-fufu --help
 
 ## 憑證與 CI
 
-目前工作樹另提供 `fufu tofu`、`fufu pulumi`、`fufu state`。
+目前版本另提供 `fufu tofu`、`fufu pulumi`、`fufu state`。
 Terraform／OpenTofu 可選擇租戶遠端 HTTP state，具備鎖、加密、版本與
 復原；需配套 Console API 和平台金鑰。Pulumi 使用固定官方 Node.js SDK，
 已驗收 SQS、SSM String、Pub/Sub topic／pull subscription，採獨立本機
-DIY backend，秘密欄位需外部 passphrase。這些新能力尚未包含在已發布
-的 0.8.0，不能把套件安裝成功當成支援驗收。
+DIY backend，秘密欄位需外部 passphrase。這些能力從 0.9.0 起納入 CLI，
+仍需要配套服務端；不能把套件安裝成功當成支援驗收。
 
 此工作樹也提供 `fufu terraform`：以官方 AWS／Google Terraform provider
 管理 Lambda ZIP、Cloud Run v2、IAM 與服務入口的明列子集，並使用獨立的
@@ -112,9 +120,9 @@ GCS／S3、Functions Gen 1／Gen 2 等一般 CLI 能力
 不表示官方 Terraform 資源已相容。正式環境使用正常 Terraform、正式認證
 與獨立 state，不可直接搬用 FUFU state。
 
-後續開發版另接入 SQS queue、SSM String parameter、Pub/Sub topic／pull
+目前版本另接入 SQS queue、SSM String parameter、Pub/Sub topic／pull
 subscription；新增能力需要配套的 Console 與 Pub/Sub 後端更新，不能從
-已發布的 0.8.0 安裝成功就推定已具備。`gcloud-fufu pubsub` 提供建立、
+CLI 安裝成功就推定服務端已具備。`gcloud-fufu pubsub` 提供建立、
 查詢、更新、刪除、publish／pull／ack 子集；不支援 push、ordering、
 exactly-once、Function trigger 或保留期限保證。
 

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fufu-cloud-cli"
-version = "0.9.4"
+version = "0.9.5"
 description = "FUFU Cloud CLI for tenant-scoped mock cloud development and deployment"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -16,6 +16,7 @@ license-files = ["LICENSE"]
 yaml = ["PyYAML==6.0.3"]
 test = ["boto3==1.40.66"]
 terraform = ["python-hcl2==7.3.1"]
+gcp = ["google-cloud-bigquery==3.38.0", "google-cloud-tasks==2.20.0", "google-cloud-logging==3.12.1"]
 
 [project.scripts]
 fufu = "fufu_cloud_cli.cli:main"
@@ -23,6 +24,7 @@ aws-fufu = "fufu_cloud_cli.cli:aws_main"
 gcloud-fufu = "fufu_cloud_cli.cli:gcloud_main"
 az-fufu = "fufu_cloud_cli.cli:az_main"
 wrangler-fufu = "fufu_cloud_cli.cli:wrangler_main"
+bq-fufu = "fufu_cloud_cli.cli:bq_main"
 
 [tool.setuptools.packages.find]
 where = ["src"]

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli/__init__.py

@@ -1,3 +1,3 @@
 """FUFU CLI 與本機部署工具；相容範圍見 capabilities.json。"""
 
-__version__ = "0.9.4"
+__version__ = "0.9.5"

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli/__main__.py

@@ -3,7 +3,7 @@ import sys
 from .cli import entry
 
 if __name__ == "__main__":
-    if len(sys.argv) > 1 and sys.argv[1] in {"fufu", "aws-fufu", "gcloud-fufu", "az-fufu"}:
+    if len(sys.argv) > 1 and sys.argv[1] in {"fufu", "aws-fufu", "gcloud-fufu", "az-fufu", "wrangler-fufu", "bq-fufu"}:
         entry(sys.argv[1], sys.argv[2:])
     else:
         entry("fufu", sys.argv[1:])

fufu_cloud_cli-0.9.5/src/fufu_cloud_cli/bigquery.py

@@ -0,0 +1,92 @@
+"""bq command subset. Uses the same IAM-enforced BigQuery API as the console."""
+import json
+import sys
+from pathlib import Path
+from .api_backend import ApiClient
+from .errors import require
+from .gcp_infra import call
+
+
+def reference(value, project):
+    if ':' in value: selected, value = value.split(':', 1)
+    else: selected = project
+    require(selected == project, 'ACCESS_DENIED', 'BigQuery project 必須符合 credential scope。')
+    parts = value.split('.')
+    require(len(parts) <= 2 and all(parts), 'INVALID_RESOURCE', '請使用 project:dataset.table。')
+    return {'projectId': project, 'datasetId': parts[0], **({'tableId': parts[1]} if len(parts) == 2 else {})}
+
+
+def schema(value):
+    path = Path(value)
+    if path.is_file():
+        require(path.stat().st_size <= 1024**2, 'PAYLOAD_LIMIT', 'Schema 檔案超過 1 MiB。')
+        result = json.loads(path.read_text())
+        return result if isinstance(result, dict) else {'fields': result}
+    return {'fields': [{'name': name, 'type': kind.upper()} for name, kind in (field.split(':', 1) for field in value.split(','))]}
+
+
+def command(argv, Parser):
+    # bq permits global flags before or after the command.
+    project = location = None; clean = []; i = 0
+    while i < len(argv):
+        flag, sep, inline = argv[i].partition('=')
+        if flag in {'--project_id', '--location', '--format'}:
+            value = inline if sep else (argv[i + 1] if i + 1 < len(argv) else '')
+            require(value and not value.startswith('--'), 'INVALID_ARGUMENT', '全域參數缺少值。')
+            if flag == '--project_id': project = value
+            elif flag == '--location': location = value
+            else: require(value in {'json', 'prettyjson'}, 'UNSUPPORTED_FORMAT', 'bq-fufu 輸出支援 json 與 prettyjson。')
+            i += 1 if sep else 2
+        elif flag in {'--quiet', '-q', '--headless'}: i += 1
+        else: clean.append(argv[i]); i += 1
+    p = Parser(prog='bq-fufu', description='BigQuery dataset/table、insertAll 與 SELECT 子集。未支援 load jobs、DML/DDL、external tables 或成本估算。')
+    actions = p.add_subparsers(dest='action', required=True)
+    for action in ['mk', 'ls', 'show', 'rm', 'head']:
+        q = actions.add_parser(action)
+        q.add_argument('resource', nargs='?' if action == 'ls' else None)
+        q.add_argument('--dataset', '-d', action='store_true'); q.add_argument('--table', '-t', action='store_true')
+        if action == 'mk': q.add_argument('schema', nargs='?'); q.add_argument('--description')
+        if action == 'rm': q.add_argument('--recursive', '-r', action='store_true'); q.add_argument('--force', '-f', action='store_true')
+        if action in {'head', 'ls'}: q.add_argument('--max_results', '-n', type=int, default=100); q.add_argument('--page_token')
+    q = actions.add_parser('query'); q.add_argument('query'); q.add_argument('--use_legacy_sql', choices=['false'], default='false'); q.add_argument('--nouse_legacy_sql', action='store_true'); q.add_argument('--parameter', action='append', default=[]); q.add_argument('--max_rows', type=int, default=100)
+    q = actions.add_parser('insert'); q.add_argument('resource'); q.add_argument('file')
+    a = p.parse_args(clean)
+    sys.stderr.write('FUFU BigQuery subset: tenant emulator; unsupported SQL and job types fail explicitly.\n')
+    with ApiClient('gcp', read_only=a.action in {'ls', 'show', 'head'}) as api:
+        selected = api.whoami()['projectId']
+        require(project is None or project == selected, 'ACCESS_DENIED', 'BigQuery project 必須符合 credential scope。')
+        if a.action == 'query':
+            params = {'projectId': selected, 'query': a.query, 'useLegacySql': False, 'maxResults': a.max_rows}
+            if location: params['location'] = location
+            if a.parameter:
+                params['parameterMode'] = 'NAMED'; params['queryParameters'] = []
+                for value in a.parameter:
+                    parts = value.split(':', 2); require(len(parts) == 3, 'INVALID_ARGUMENT', 'parameter 請使用 name:type:value。')
+                    name, kind, data = parts
+                    params['queryParameters'].append({'name': name, 'parameterType': {'type': kind.upper() or 'STRING'}, 'parameterValue': {'value': data}})
+            return call(api, 'bigquery', 'queries.query', params)
+        ref = reference(a.resource, selected) if a.resource else {'projectId': selected}
+        table = 'tableId' in ref
+        if getattr(a, 'dataset', False): require(not table, 'INVALID_RESOURCE', 'Dataset 命令不可傳入 table。')
+        if getattr(a, 'table', False): require(table, 'INVALID_RESOURCE', 'Table 命令需要 dataset.table。')
+        group = 'tables' if table else 'datasets'
+        if a.action == 'mk':
+            require(not table or a.schema, 'INVALID_ARGUMENT', 'Table 建立需要 schema。')
+            value = {'tableReference' if table else 'datasetReference': ref}
+            if table: value['schema'] = schema(a.schema)
+            elif location: value['location'] = location
+            if a.description is not None: value['description'] = a.description
+            return call(api, 'bigquery', group + '.insert', {'projectId': selected, **({'datasetId': ref['datasetId']} if table else {}), 'table' if table else 'dataset': value})
+        if a.action == 'rm': return call(api, 'bigquery', group + '.delete', {**ref, **({'deleteContents': a.recursive} if not table else {})})
+        if a.action == 'show': return call(api, 'bigquery', group + '.get', ref)
+        if a.action in {'ls', 'head'}:
+            require(a.action != 'head' or table, 'INVALID_RESOURCE', 'head 需要 table。')
+            require(a.action != 'ls' or not table, 'INVALID_RESOURCE', 'ls 請指定 dataset。')
+            op = 'tabledata.list' if table else 'tables.list' if 'datasetId' in ref else 'datasets.list'
+            return call(api, 'bigquery', op, {**ref, 'maxResults': a.max_results, **({'pageToken': a.page_token} if a.page_token else {})})
+        require(table, 'INVALID_RESOURCE', 'insert 需要 table。')
+        file = Path(a.file); require(file.is_file() and file.stat().st_size <= 10 * 1024**2, 'PAYLOAD_LIMIT', 'NDJSON 檔案超過 10 MiB。')
+        rows = [{'json': json.loads(line)} for line in file.read_text().splitlines() if line.strip()]
+        result = call(api, 'bigquery', 'tabledata.insertAll', {**ref, 'rows': rows})
+        require(not result.get('insertErrors'), 'BIGQUERY_INSERT_FAILED', 'BigQuery 拒絕部分資料列；請檢查 schema。')
+        return result

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli/capabilities.json

@@ -323,10 +323,82 @@
         "profile-environmentFrom-SSM-only"
       ]
     },
+    "gcp-logging": {
+      "name": "Cloud Logging",
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "operations": [
+        "write-read",
+        "filter-AND-severity-timestamp-logName-resourceType",
+        "logs-list-delete",
+        "partialSuccess",
+        "explicit-official-Python-REST-SDK",
+        "setup-logging"
+      ],
+      "limitations": [
+        "last-10000-entries-per-tenant",
+        "single-writer-128MiB-state-capacity",
+        "no-automatic-container-stdout",
+        "no-sinks-retention-metrics-alerts",
+        "no-new-IaC-resources"
+      ]
+    },
+    "gcp-infrastructure-config": {
+      "name": "GCP infrastructure configuration",
+      "status": "mock-only",
+      "backend": "api",
+      "mode": "mock-only",
+      "services": [
+        "compute-instances",
+        "sql-instances",
+        "sql-databases",
+        "app-services",
+        "artifact-repositories",
+        "dns-zones",
+        "dns-records",
+        "networks",
+        "subnets",
+        "vpc-connectors",
+        "builds",
+        "gemini-models",
+        "vm-policies",
+        "eventarc-triggers"
+      ],
+      "operations": [
+        "typed-crud",
+        "three-locale-mobile-console",
+        "fufu-infrastructure-cli"
+      ],
+      "limitations": [
+        "configuration-only",
+        "no-VM-SQL-network-DNS-build-registry-inference-runtime",
+        "no-new-IaC-resources"
+      ]
+    },
     "gcp-bigquery": {
       "name": "BigQuery",
-      "status": "partial",
-      "reason": "Console 與 emulator 查詢子集；CLI、SQL 完整性與雲端最佳化未驗證。"
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "operations": [
+        "dataset-table-crud",
+        "insertAll",
+        "tabledata-list",
+        "SELECT-CTE",
+        "query-parameters",
+        "query-job-results",
+        "bq-fufu",
+        "explicit-official-Python-REST-SDK"
+      ],
+      "limitations": [
+        "tenant-emulator-required",
+        "no-DML-DDL-load-export-external-tables",
+        "GoogleSQL-subset",
+        "no-billing-or-performance-parity",
+        "last-1000-local-query-handles",
+        "no-new-Terraform-OpenTofu-Pulumi-resources"
+      ]
     },
     "gcp-firestore": {
       "name": "Firestore",
@@ -343,8 +415,28 @@
     },
     "gcp-cloud-tasks": {
       "name": "Cloud Tasks",
-      "status": "partial",
-      "reason": "已有 emulator 與 Console 檢視；未驗證 worker 事件投遞。"
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "operations": [
+        "queue-crud-pause-resume-purge",
+        "HTTP-task-create-list-get-delete-run",
+        "scheduled-background-delivery",
+        "retry",
+        "service-account-invoker-enforcement",
+        "explicit-official-Python-REST-SDK"
+      ],
+      "limitations": [
+        "same-tenant-registered-HTTP-targets-only",
+        "single-local-coordinator",
+        "one-task-per-queue-per-second",
+        "2-active-per-tenant-8-global",
+        "no-AppEngine-targets",
+        "no-Google-ID-token",
+        "24h-task-name-tombstones",
+        "exhausted-tasks-remain-visible",
+        "no-new-IaC-resources"
+      ]
     },
     "gcp-secret-manager": {
       "name": "Secret Manager",
@@ -370,8 +462,13 @@
     },
     "gcp-cloud-sql": {
       "name": "Cloud SQL",
-      "status": "partial",
-      "reason": "工作區有 PostgreSQL 引擎；不提供 Cloud SQL 控制面或每租戶 SQL 配置。"
+      "status": "mock-only",
+      "backend": "api",
+      "mode": "mock-only",
+      "operations": [
+        "typed-instance-database-configuration-crud"
+      ],
+      "reason": "僅保存設定；不建立 SQL runtime、connection endpoint、proxy、backup 或 HA。"
     },
     "aws-rds": {
       "name": "RDS / Aurora",
@@ -391,12 +488,22 @@
     "gcp-app-engine": {
       "name": "App Engine",
       "status": "mock-only",
-      "reason": "明示 mock 目錄；App 未執行，不能列為成功部署。"
+      "backend": "api",
+      "mode": "mock-only",
+      "operations": [
+        "typed-service-configuration-crud"
+      ],
+      "reason": "僅保存設定；不執行 app.yaml、App Engine runtime 或 traffic。"
     },
     "gcp-compute-engine": {
       "name": "Compute Engine",
-      "status": "unsupported",
-      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+      "status": "mock-only",
+      "backend": "api",
+      "mode": "mock-only",
+      "operations": [
+        "typed-instance-configuration-crud"
+      ],
+      "reason": "僅保存設定；無 VM、disk、SSH、guest OS 或 hypervisor。"
     },
     "gcp-gke": {
       "name": "GKE",
@@ -410,23 +517,57 @@
     },
     "gcp-cloud-scheduler": {
       "name": "Cloud Scheduler",
-      "status": "unsupported",
-      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+      "status": "implemented",
+      "backend": "api",
+      "mode": "simplified",
+      "operations": [
+        "HTTP-job-crud",
+        "Unix-cron",
+        "IANA-timezone",
+        "pause-resume-run",
+        "automatic-dispatch",
+        "retry",
+        "service-account-invoker-enforcement"
+      ],
+      "limitations": [
+        "same-tenant-registered-HTTP-targets-only",
+        "no-PubSub-targets",
+        "no-Google-ID-token-or-service-agent",
+        "single-local-coordinator",
+        "missed-schedules-coalesce",
+        "no-HA-or-exactly-once",
+        "no-new-IaC-resources"
+      ]
     },
     "gcp-artifact-registry": {
       "name": "Artifact Registry",
-      "status": "unsupported",
-      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+      "status": "mock-only",
+      "backend": "api",
+      "mode": "mock-only",
+      "operations": [
+        "typed-repository-configuration-crud"
+      ],
+      "reason": "僅保存設定；無 OCI push/pull、package storage、scanning 或 registry authentication。"
     },
     "gcp-cloud-build": {
       "name": "Cloud Build",
-      "status": "unsupported",
-      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+      "status": "mock-only",
+      "backend": "api",
+      "mode": "mock-only",
+      "operations": [
+        "typed-build-configuration-crud"
+      ],
+      "reason": "僅保存設定；Cloud Run 本機 source build 是另一條可執行路徑，不是 Cloud Build。"
     },
     "gcp-eventarc": {
       "name": "Eventarc",
       "status": "mock-only",
-      "reason": "明示 mock 目錄；事件路由未執行，不能列為成功部署。"
+      "backend": "api",
+      "mode": "mock-only",
+      "operations": [
+        "typed-trigger-configuration-crud"
+      ],
+      "reason": "僅保存設定；不投遞事件或執行 CloudEvents 轉換。"
     },
     "gcp-vertex-ai": {
       "name": "Vertex AI",
@@ -435,8 +576,8 @@
     },
     "gcp-cloud-logging-monitoring": {
       "name": "Cloud Logging / Monitoring",
-      "status": "unsupported",
-      "reason": "尚未實作可供 CLI 自動部署與驗證的服務契約。"
+      "status": "partial",
+      "reason": "gcp-logging 已提供可執行日誌子集；Monitoring、alerts、sinks 與完整 stdout 收集未支援。"
     },
     "gcp-load-balancing-nat": {
       "name": "Cloud Load Balancing / NAT",

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli/cli.py

@@ -125,6 +125,7 @@ def fufu_parser():
     sub.add_parser('tofu', help='官方 OpenTofu；支援本機或遠端 FUFU state')
     sub.add_parser('pulumi', help='官方 Pulumi Node.js SDK；使用獨立 FUFU 開發 state')
     sub.add_parser('state', help='管理 Terraform／OpenTofu 遠端 state、版本與鎖')
+    sub.add_parser('infrastructure', help='GCP 基礎設施配置 mock 的查詢與 CRUD；不啟動資源')
     for action in ("plan", "deploy"):
         q = sub.add_parser(action)
         q.add_argument("--file", required=True)
@@ -176,7 +177,11 @@ def fufu_command(argv):
         if a.remote:
             with ApiClient(a.provider, read_only=True) as api:
                 d['remote'] = api.request('GET', '/capabilities' if a.provider == 'cloudflare' else '/compute/capabilities')
+                if a.provider == 'gcp': d['infrastructure'] = api.request('GET', '/services/capabilities')
             available = ['cloudflare-pages', 'cloudflare-workers-static', 'cloudflare-r2'] if a.provider == 'cloudflare' and d['remote'].get('executable') else d['remote'].get('kinds', []) + d['remote'].get('features', [])
+            if a.provider == 'gcp':
+                names = {'scheduler': 'gcp-cloud-scheduler', 'tasks': 'gcp-cloud-tasks', 'bigquery': 'gcp-bigquery', 'logging': 'gcp-logging'}
+                available += [names[service['id']] for service in d['infrastructure']['services'] if service['executable'] and service['id'] in names]
             require(all(k in available for k in a.require), 'CAPABILITY_NOT_SUPPORTED', '目前 provider 的服務端不支援必要能力。')
         d['selectedBackend'] = backend
         return d
@@ -414,7 +419,7 @@ def entry(provider, argv=None):
     try:
         argv = sys.argv[1:] if argv is None else argv
         argv = list(argv)
-        require(provider in {"fufu", "aws-fufu", "gcloud-fufu", "az-fufu", "wrangler-fufu"}, "UNSUPPORTED_CLI", "未知 CLI 入口。")
+        require(provider in {"fufu", "aws-fufu", "gcloud-fufu", "az-fufu", "wrangler-fufu", "bq-fufu"}, "UNSUPPORTED_CLI", "未知 CLI 入口。")
         if argv == ['--version']:
             sys.stdout.write(('fufu-cloud-cli ' if provider == 'gcloud-fufu' else '') + __version__ + '\n'); return
         if provider == 'gcloud-fufu' and argv in [['--help'], ['-h']]:
@@ -426,8 +431,11 @@ def entry(provider, argv=None):
             p.add_argument('--quiet', '-q', action='store_true', help='非互動執行')
             p.add_argument('--version', action='store_true', help='CLI 版本')
             groups = p.add_subparsers(title='服務')
-            for group in ['run', 'functions', 'iam', 'projects', 'pubsub', 'secrets', 'storage', 'auth']: groups.add_parser(group)
+            for group in ['run', 'functions', 'iam', 'projects', 'pubsub', 'secrets', 'storage', 'auth', 'scheduler', 'tasks', 'logging', 'compute', 'sql', 'artifacts', 'dns', 'eventarc']: groups.add_parser(group)
             p.print_help(); return
+        if provider == 'bq-fufu':
+            from .bigquery import command
+            emit(command(argv, Parser)); return
         if provider == 'wrangler-fufu':
             from .cloudflare import command
             result = command(argv, Parser)
@@ -442,6 +450,9 @@ def entry(provider, argv=None):
         if provider == 'fufu' and argv[:1] == ['state']:
             from .iac_state import command
             emit(command(argv[1:], Parser)); return
+        if provider == 'fufu' and argv[:1] == ['infrastructure']:
+            from .gcp_infra import configuration_command
+            emit(configuration_command(argv[1:], Parser)); return
         # Native global selectors are checked against the authenticated tenant scope.
         if provider in {'aws-fufu', 'gcloud-fufu'}:
             rest = []; i = 0
@@ -477,11 +488,18 @@ def entry(provider, argv=None):
                 if output_filter or output_sort or output_limit is not None:
                     list_commands = [('run', 'services', 'list'), ('functions', 'list'), ('iam', 'service-accounts', 'list'),
                                      ('pubsub', 'topics', 'list'), ('pubsub', 'subscriptions', 'list'), ('secrets', 'list'),
-                                     ('secrets', 'versions', 'list'), ('storage', 'buckets', 'list'), ('storage', 'objects', 'list')]
+                                     ('secrets', 'versions', 'list'), ('storage', 'buckets', 'list'), ('storage', 'objects', 'list'),
+                                     ('scheduler', 'jobs', 'list'), ('tasks', 'queues', 'list'), ('tasks', 'list'),
+                                     ('compute', 'instances', 'list'), ('sql', 'instances', 'list'), ('sql', 'databases', 'list'),
+                                     ('artifacts', 'repositories', 'list'), ('dns', 'managed-zones', 'list'), ('eventarc', 'triggers', 'list'),
+                                     ('compute', 'networks', 'list'), ('compute', 'networks', 'subnets', 'list'), ('compute', 'networks', 'vpc-access', 'connectors', 'list')]
                     require(any(tuple(argv[:len(command)]) == command for command in list_commands), 'UNSUPPORTED_ARGUMENT', '清單選取旗標只適用於資源 list；未執行操作。')
                 if output_format and argv[:2] == ['functions', 'call']:
                     require(output_format == 'json', 'UNSUPPORTED_FORMAT', 'Functions call 目前只支援 JSON 回應。')
         from . import public_access
+        if provider == 'gcloud-fufu' and argv and argv[0] in {'scheduler', 'tasks', 'logging', 'compute', 'sql', 'artifacts', 'dns', 'eventarc'}:
+            from .gcp_infra import command
+            emit(command(argv, Parser)); return
         if provider == 'aws-fufu' and argv[:1] == ['secretsmanager'] or provider == 'gcloud-fufu' and argv[:1] == ['secrets']:
             from .secrets import command
             emit(command('aws' if provider == 'aws-fufu' else 'gcp', argv[1:], Parser)); return
@@ -565,3 +583,7 @@ def az_main():
 
 def wrangler_main():
     entry("wrangler-fufu")
+
+
+def bq_main():
+    entry("bq-fufu")

fufu_cloud_cli-0.9.5/src/fufu_cloud_cli/gcp_infra.py

@@ -0,0 +1,222 @@
+"""Native command subsets for the shared, tenant-scoped GCP infrastructure API."""
+import base64
+import json
+import os
+import sys
+import time
+from pathlib import Path
+from .api_backend import ApiClient
+from .errors import require
+from .gcloud_environment import dictionary
+
+
+def call(api, service, operation, params):
+    return api._request('POST', '/api/cloud/gcp/services/' + service,
+                        {'operation': operation, 'params': params}, large=True)
+
+
+def all_pages(api, service, operation, params, key):
+    result, seen, deadline = [], set(), time.monotonic() + 60
+    for _ in range(1000):
+        require(time.monotonic() < deadline, 'PAGINATION_FAILED', '分頁讀取超過期限。')
+        response = call(api, service, operation, params)
+        result.extend(response.get(key, []))
+        token = response.get('nextPageToken')
+        if not token: return result
+        require(token not in seen, 'PAGINATION_FAILED', '後端重複回傳分頁。')
+        seen.add(token); params = {**params, 'pageToken': token}
+    require(False, 'PAGINATION_FAILED', '分頁數超過上限。')
+
+
+def native_name(parent, collection, value):
+    prefix = parent + '/' + collection + '/'
+    if value.startswith('projects/'):
+        require(value.startswith(prefix) and '/' not in value[len(prefix):], 'ACCESS_DENIED', '資源必須屬於目前 project、location 與 parent。')
+        return value
+    require('/' not in value and value, 'INVALID_RESOURCE', '資源名稱不合法。')
+    return prefix + value
+
+
+def target_flags(parser, scheduler):
+    parser.add_argument('--uri' if scheduler else '--url', dest='uri')
+    parser.add_argument('--http-method' if scheduler else '--method', dest='method')
+    parser.add_argument('--headers')
+    body = parser.add_mutually_exclusive_group()
+    body.add_argument('--message-body' if scheduler else '--body-content', dest='body')
+    body.add_argument('--message-body-from-file' if scheduler else '--body-file', dest='body_file')
+    parser.add_argument('--oidc-service-account-email')
+    parser.add_argument('--oidc-token-audience')
+
+
+def target(a, existing=None, tasks=False):
+    result = dict(existing or {})
+    if a.uri is not None: result['url' if tasks else 'uri'] = a.uri
+    if a.method is not None: result['httpMethod'] = a.method
+    if a.headers is not None: result['headers'] = dictionary(a.headers)
+    if a.body is not None: result['body'] = base64.b64encode(a.body.encode()).decode()
+    if a.body_file:
+        p = Path(a.body_file)
+        require(p.is_file() and p.stat().st_size <= 1024**2, 'PAYLOAD_LIMIT', '工作內容檔案不得超過 1 MiB。')
+        result['body'] = base64.b64encode(p.read_bytes()).decode()
+    if a.oidc_service_account_email is not None:
+        result['oidcToken'] = {'serviceAccountEmail': a.oidc_service_account_email}
+    if a.oidc_token_audience is not None:
+        result.setdefault('oidcToken', {})['audience'] = a.oidc_token_audience
+    return result
+
+
+def jobs_command(argv, Parser):
+    scheduler = argv[0] == 'scheduler'
+    p = Parser(prog='gcloud-fufu ' + argv[0], description='HTTP 工作的可執行子集：同租戶已登錄端點、OIDC identity、cron／重試。無外部 HTTP 投遞。')
+    groups = p.add_subparsers(dest='group', required=True)
+    for group in (['jobs'] if scheduler else ['queues', 'tasks']):
+        actions = groups if group == 'tasks' else groups.add_parser(group).add_subparsers(dest='action', required=True)
+        verbs = ['create', 'describe', 'list', 'delete', 'run', 'pause', 'resume', 'update'] if scheduler else ['create', 'describe', 'list', 'delete', 'update', 'pause', 'resume', 'purge'] if group == 'queues' else ['create-http-task', 'describe', 'list', 'delete', 'run']
+        for action in verbs:
+            q = actions.add_parser(action)
+            if group == 'tasks': q.set_defaults(group='tasks', action=action)
+            if scheduler and action in {'create', 'update'}:
+                q = q.add_subparsers(dest='target_type', required=True).add_parser('http')
+            if action != 'list': q.add_argument('name', nargs='?' if action == 'create-http-task' else None)
+            else: q.add_argument('--page-size', type=int, default=100); q.add_argument('--page-token')
+            q.add_argument('--location')
+            if group == 'tasks':
+                q.add_argument('--queue', required=True); q.add_argument('--response-view', choices=['basic', 'full'], default='basic')
+            if scheduler and action in {'create', 'update'}:
+                q.add_argument('--schedule', required=action == 'create'); q.add_argument('--time-zone'); q.add_argument('--description'); q.add_argument('--attempt-deadline')
+                q.add_argument('--max-retry-attempts', type=int); q.add_argument('--min-backoff'); q.add_argument('--max-backoff'); q.add_argument('--max-doublings', type=int); q.add_argument('--max-retry-duration')
+                target_flags(q, True)
+            if group == 'queues' and action in {'create', 'update'}:
+                q.add_argument('--max-dispatches-per-second', type=int); q.add_argument('--max-concurrent-dispatches', type=int)
+                q.add_argument('--max-attempts', type=int); q.add_argument('--min-backoff'); q.add_argument('--max-backoff'); q.add_argument('--max-doublings', type=int); q.add_argument('--max-retry-duration')
+            if action == 'create-http-task':
+                target_flags(q, False); q.add_argument('--schedule-time'); q.add_argument('--dispatch-deadline')
+    a = p.parse_args(argv[1:])
+    with ApiClient('gcp', read_only=a.action in {'describe', 'list'}) as api:
+        who = api.whoami(); region = a.location or os.environ.get('FUFU_SELECTED_REGION') or who['region']
+        require(region == who['region'], 'ACCESS_DENIED', 'location 必須符合 credential scope。')
+        parent = 'projects/' + who['projectId'] + '/locations/' + region
+        service = 'scheduler' if scheduler else 'tasks'
+        task = a.group == 'tasks'
+        if task: parent = native_name(parent, 'queues', a.queue)
+        full = native_name(parent, a.group, a.name) if getattr(a, 'name', None) else None
+        operation = lambda action: action if scheduler else a.group + '.' + action
+        if a.action == 'list':
+            return all_pages(api, service, operation('list'), {'parent': parent, 'pageSize': a.page_size, **({'pageToken': a.page_token} if a.page_token else {}), **({'responseView': a.response_view.upper()} if task else {})}, a.group)
+        if a.action in {'create', 'update', 'create-http-task'}:
+            current = call(api, service, operation('get'), {'name': full}) if a.action == 'update' else {}
+            body = {'name': full} if full else {}
+            if scheduler:
+                for flag, field in [('schedule', 'schedule'), ('time_zone', 'timeZone'), ('description', 'description'), ('attempt_deadline', 'attemptDeadline')]:
+                    if getattr(a, flag) is not None: body[field] = getattr(a, flag)
+                http = target(a, current.get('httpTarget'))
+                if http: body['httpTarget'] = http
+            elif task:
+                body['httpRequest'] = target(a, tasks=True)
+                if a.schedule_time: body['scheduleTime'] = a.schedule_time
+                if a.dispatch_deadline: body['dispatchDeadline'] = a.dispatch_deadline
+            else:
+                rate = dict(current.get('rateLimits', {}))
+                for flag, field in [('max_dispatches_per_second', 'maxDispatchesPerSecond'), ('max_concurrent_dispatches', 'maxConcurrentDispatches')]:
+                    if getattr(a, flag) is not None: rate[field] = getattr(a, flag)
+                if rate: body['rateLimits'] = rate
+            if not task:
+                config = dict(current.get('retryConfig', {}))
+                for flag, field in [('max_retry_attempts' if scheduler else 'max_attempts', 'retryCount' if scheduler else 'maxAttempts'), ('min_backoff', 'minBackoffDuration' if scheduler else 'minBackoff'), ('max_backoff', 'maxBackoffDuration' if scheduler else 'maxBackoff'), ('max_doublings', 'maxDoublings'), ('max_retry_duration', 'maxRetryDuration')]:
+                    if getattr(a, flag) is not None: config[field] = getattr(a, flag)
+                if config: body['retryConfig'] = config
+            key = 'job' if scheduler else 'task' if task else 'queue'
+            params = {key: body}
+            if a.action == 'update': params['updateMask'] = ','.join(k for k in body if k != 'name')
+            else: params['parent'] = parent
+            if task: params['responseView'] = a.response_view.upper()
+            return call(api, service, operation('update' if a.action == 'update' else 'create'), params)
+        return call(api, service, operation('get' if a.action == 'describe' else a.action), {'name': full, **({'responseView': a.response_view.upper()} if task and a.action in {'describe', 'run'} else {})})
+
+
+def logging_command(argv, Parser):
+    p = Parser(prog='gcloud-fufu logging', description='持久化本機日誌；保留最近 10,000 筆，不含正式 Log Router、retention 或全容器 stdout。')
+    actions = p.add_subparsers(dest='action', required=True)
+    q = actions.add_parser('write'); q.add_argument('log'); q.add_argument('message'); q.add_argument('--payload-type', choices=['text', 'json'], default='text'); q.add_argument('--severity', default='DEFAULT')
+    q = actions.add_parser('read'); q.add_argument('filter', nargs='?', default=''); q.add_argument('--limit', type=int, default=50); q.add_argument('--order', choices=['asc', 'desc'], default='desc')
+    logs = actions.add_parser('logs').add_subparsers(dest='logs_action', required=True)
+    logs.add_parser('list'); logs.add_parser('delete').add_argument('log')
+    a = p.parse_args(argv)
+    with ApiClient('gcp', read_only=a.action == 'read' or a.action == 'logs' and a.logs_action == 'list') as api:
+        project = 'projects/' + api.whoami()['projectId']
+        if a.action == 'logs' and a.logs_action == 'list': return all_pages(api, 'logging', 'logs-list', {'parent': project}, 'logNames')
+        if a.action == 'read':
+            require(1 <= a.limit <= 10000, 'INVALID_LIMIT', '日誌 limit 必須介於 1–10000。')
+            return all_pages(api, 'logging', 'read', {'resourceNames': [project], 'filter': a.filter, 'orderBy': 'timestamp ' + a.order, 'pageSize': min(a.limit, 1000)}, 'entries')[:a.limit]
+        name = a.log if a.log.startswith('projects/') else project + '/logs/' + a.log
+        if a.action == 'logs': return call(api, 'logging', 'logs-delete', {'logName': name})
+        entry = {'severity': a.severity, 'jsonPayload' if a.payload_type == 'json' else 'textPayload': json.loads(a.message) if a.payload_type == 'json' else a.message}
+        return call(api, 'logging', 'write', {'logName': name, 'entries': [entry]})
+
+
+# Native flag spelling is kept; values remain configuration-only and never imply runtime success.
+MOCK_GROUPS = {
+    ('compute', 'instances'): ('compute-instances', {'zone': 'zone', 'machine-type': 'machineType', 'image': 'image', 'image-project': 'imageProject', 'boot-disk-size': 'bootDiskSizeGb'}),
+    ('compute', 'networks'): ('networks', {'subnet-mode': 'subnetMode', 'mtu': 'mtu', 'description': 'description'}),
+    ('compute', 'networks', 'subnets'): ('subnets', {'network': 'network', 'range': 'ipCidrRange'}),
+    ('sql', 'instances'): ('sql-instances', {'database-version': 'databaseVersion', 'tier': 'tier', 'storage-size': 'storageSizeGb', 'availability-type': 'availabilityType'}),
+    ('sql', 'databases'): ('sql-databases', {'instance': 'instance', 'charset': 'charset', 'collation': 'collation'}),
+    ('artifacts', 'repositories'): ('artifact-repositories', {'repository-format': 'format', 'location': 'location', 'description': 'description'}),
+    ('dns', 'managed-zones'): ('dns-zones', {'dns-name': 'dnsName', 'description': 'description', 'visibility': 'visibility'}),
+    ('compute', 'os-config', 'os-policy-assignments'): ('vm-policies', {'zone': 'zone', 'description': 'description'}),
+    ('compute', 'networks', 'vpc-access', 'connectors'): ('vpc-connectors', {'network': 'network', 'range': 'range', 'min-instances': 'minInstances', 'max-instances': 'maxInstances'}),
+    ('eventarc', 'triggers'): ('eventarc-triggers', {'location': 'location', 'destination-run-service': 'destination', 'event-filters': 'eventType', 'service-account': 'serviceAccount'}),
+}
+
+
+def mock_command(argv, Parser):
+    match = next((k for k in sorted(MOCK_GROUPS, key=len, reverse=True) if tuple(argv[:len(k)]) == k), None)
+    require(match is not None, 'CAPABILITY_NOT_SUPPORTED', '此服務只有文件列出的配置 mock；目前命令未支援。')
+    service, flags = MOCK_GROUPS[match]
+    p = Parser(prog='gcloud-fufu ' + ' '.join(match), description='MOCK ONLY：只儲存配置，不建立或啟動真正資源。')
+    actions = p.add_subparsers(dest='action', required=True)
+    for action in ['create', 'update', 'describe', 'list', 'delete']:
+        q = actions.add_parser(action)
+        if action != 'list': q.add_argument('name')
+        if action in {'create', 'update'}:
+            for flag, field in flags.items(): q.add_argument('--' + flag, dest=field, type=int if field in {'bootDiskSizeGb', 'storageSizeGb', 'mtu', 'minInstances', 'maxInstances'} else str)
+    a = p.parse_args(argv[len(match):])
+    sys.stderr.write('FUFU MOCK ONLY: configuration is persisted; no VM, database, registry, DNS or network is provisioned.\n')
+    with ApiClient('gcp', read_only=a.action in {'list', 'describe'}) as api:
+        if a.action == 'list': return all_pages(api, service, 'list', {}, 'items')
+        params = {'name': a.name}
+        if a.action in {'create', 'update'}:
+            config = {field: getattr(a, field) for field in flags.values() if getattr(a, field) is not None}
+            if service in {'sql-instances', 'subnets', 'vpc-connectors'}: config['region'] = os.environ.get('FUFU_SELECTED_REGION') or api.whoami()['region']
+            params['config'] = config
+        return call(api, service, 'get' if a.action == 'describe' else a.action, params)
+
+
+def command(argv, Parser):
+    if argv[0] in {'scheduler', 'tasks'}: return jobs_command(argv, Parser)
+    if argv[0] == 'logging': return logging_command(argv[1:], Parser)
+    return mock_command(argv, Parser)
+
+
+def configuration_command(argv, Parser):
+    p = Parser(prog='fufu infrastructure', description='GCP 配置 mock 的明確擴充介面；不會執行 VM、SQL、DNS、Cloud Build 或 AI 推論。')
+    actions = p.add_subparsers(dest='action', required=True)
+    actions.add_parser('catalog')
+    for action in ['create', 'update', 'describe', 'list', 'delete']:
+        q = actions.add_parser(action); q.add_argument('service')
+        if action != 'list': q.add_argument('name')
+        if action in {'create', 'update'}: q.add_argument('--config-file', required=True)
+    a = p.parse_args(argv)
+    with ApiClient('gcp', read_only=a.action in {'catalog', 'describe', 'list'}) as api:
+        capabilities = api.request('GET', '/services/capabilities')
+        mocks = {s['id']: s for s in capabilities['services'] if not s['executable']}
+        if a.action == 'catalog': return {'services': list(mocks.values())}
+        require(a.service in mocks, 'CAPABILITY_NOT_SUPPORTED', '這個介面只處理明確列出的配置 mock。')
+        sys.stderr.write('FUFU MOCK ONLY: configuration is persisted; no underlying resource is provisioned.\n')
+        if a.action == 'list': return all_pages(api, a.service, 'list', {}, 'items')
+        params = {'name': a.name}
+        if a.action in {'create', 'update'}:
+            source = Path(a.config_file)
+            require(source.is_file() and source.stat().st_size <= 1024**2, 'INVALID_CONFIG', '配置 JSON 檔案須存在且不超過 1 MiB。')
+            params['config'] = json.loads(source.read_text())
+        return call(api, a.service, 'get' if a.action == 'describe' else a.action, params)

fufu_cloud_cli-0.9.5/src/fufu_cloud_cli/gcp_sdk.py

@@ -0,0 +1,60 @@
+"""Explicit Google SDK client factories for deployed FUFU workloads.
+
+Native request/response serialization stays in Google's SDK. Only documented
+REST operations are routed; there is no ADC search or real-cloud fallback.
+"""
+import os
+from urllib.parse import urlsplit
+
+
+def _configuration():
+    endpoint = os.environ.get('FUFU_RUNTIME_ENDPOINT', '')
+    parsed = urlsplit(endpoint)
+    token = os.environ.get('FUFU_WORKLOAD_TOKEN')
+    project = os.environ.get('GOOGLE_CLOUD_PROJECT')
+    if parsed.scheme != 'http' or parsed.hostname != 'fufu-api' or parsed.port != 8080 or parsed.path != '/api/runtime/gcp' or parsed.query or parsed.fragment or parsed.username or parsed.password or not token or not project:
+        raise RuntimeError('A deployed FUFU GCP workload and its scoped identity are required')
+    from google.auth.credentials import Credentials
+
+    class WorkloadCredentials(Credentials):
+        def __init__(self):
+            super().__init__(); self.token = token
+        def refresh(self, request):
+            # The server renews the lease only while this exact deployment is live.
+            self.token = token
+
+    return endpoint, project, WorkloadCredentials()
+
+
+def bigquery_client():
+    from google.cloud import bigquery
+    endpoint, project, credentials = _configuration()
+    return bigquery.Client(project=project, credentials=credentials, client_options={'api_endpoint': endpoint + '/bigquery'})
+
+
+def tasks_client():
+    from google.cloud import tasks_v2
+    endpoint, _, credentials = _configuration()
+    return tasks_v2.CloudTasksClient(credentials=credentials, transport='rest', client_options={'api_endpoint': endpoint + '/tasks'})
+
+
+def logging_client():
+    from google.cloud import logging_v2
+    from google.cloud.logging_v2.resource import Resource
+    from google.cloud.logging_v2.handlers import CloudLoggingHandler
+    from google.cloud.logging_v2.handlers.transports import SyncTransport
+    endpoint, project, credentials = _configuration()
+    resource = Resource(type='global', labels={'project_id': project})
+
+    class ScopedLoggingClient(logging_v2.Client):
+        def logger(self, name, *, labels=None, resource=None):
+            return super().logger(name, labels=labels, resource=resource or Resource(type='global', labels={'project_id': project}))
+
+        def get_default_handler(self, **kwargs):
+            # setup_logging must send to the explicit endpoint even when Cloud Run
+            # environment variables would normally choose stdout collection.
+            kwargs.setdefault('resource', resource)
+            kwargs.setdefault('transport', SyncTransport)
+            return CloudLoggingHandler(self, **kwargs)
+
+    return ScopedLoggingClient(project=project, credentials=credentials, _use_grpc=False, client_options={'api_endpoint': endpoint + '/logging'})

fufu_cloud_cli-0.9.4/README.md → fufu_cloud_cli-0.9.5/src/fufu_cloud_cli.egg-info/PKG-INFO

@@ -1,9 +1,56 @@
+Metadata-Version: 2.4
+Name: fufu-cloud-cli
+Version: 0.9.5
+Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
+License-Expression: LicenseRef-Proprietary
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: PyYAML==6.0.3
+Requires-Dist: tomli==2.2.1; python_version < "3.11"
+Provides-Extra: yaml
+Requires-Dist: PyYAML==6.0.3; extra == "yaml"
+Provides-Extra: test
+Requires-Dist: boto3==1.40.66; extra == "test"
+Provides-Extra: terraform
+Requires-Dist: python-hcl2==7.3.1; extra == "terraform"
+Provides-Extra: gcp
+Requires-Dist: google-cloud-bigquery==3.38.0; extra == "gcp"
+Requires-Dist: google-cloud-tasks==2.20.0; extra == "gcp"
+Requires-Dist: google-cloud-logging==3.12.1; extra == "gcp"
+Dynamic: license-file
+
 # FUFU Cloud CLI
 
-以五個指令操作 FUFU Cloud 的租戶隔離開發環境：`fufu`、`aws-fufu`、
-`gcloud-fufu`、`az-fufu`、`wrangler-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
+以六個指令操作 FUFU Cloud 的租戶隔離開發環境：`fufu`、`aws-fufu`、
+`gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
+支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
+insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
+BigQuery、Cloud Tasks、Logging SDK 的明確 REST factory；可用 `[gcp]` extra
+安裝已驗收相依。需要對應的新後端，並非透明 ADC 或所有 Google SDK 替換。
+
+`fufu infrastructure` 提供 14 類 typed configuration mock。Compute Engine、
+Cloud SQL、App Engine、DNS、VPC、Artifact Registry、Cloud Build、Gemini、
+VM Manager、Eventarc 等設定不會啟動 VM／SQL／registry／網路／推論。
+UI 顯示僅設定，CLI stderr 保留 MOCK ONLY，不因輸出投影而隱藏。
+新服務尚未接入 Terraform／OpenTofu／Pulumi；單機背景投遞不是雲端 HA。
+
+```bash
+gcloud-fufu scheduler jobs list
+gcloud-fufu tasks queues list
+bq-fufu query --use_legacy_sql=false 'SELECT 1 AS ready'
+gcloud-fufu logging read 'severity>=ERROR'
+fufu infrastructure catalog
+```
+
+BigQuery 是 tenant emulator 的 GoogleSQL 子集，無 DML／DDL、load/export、
+外部表與效能／費用等價。Logging 保留每租戶最新 10,000 筆，不自動收集所有
+容器 stdout。Tasks 每 queue 每秒最多 1 次、每租戶 2 個同時投遞；耗盡 task
+留待檢查，與官方刪除策略不同。新的 dependency flow 不代表完整應用都能遷移。
+
 0.9.4 新增 GCS generation／metageneration 條件、`storage objects describe/update/list`、8 KiB 自訂 metadata 與二進位 `cat`。競爭寫入、過期條件、CLI metadata 和官方 gcloud 輸出欄位已對照驗收；不相符條件回傳 `PRECONDITION_FAILED`／HTTP 412。新功能需要同步更新 FUFU Console、GCS 儲存映像和 Cloud Shell。儲存升級前須停寫並備份完整 volume；新 metadata 格式可讀舊資料，回滾須還原升級前備份。
 
 0.9.3 的常用輸出投影、清單篩選／排序／limit、Cloud Run 設定更新、Service Account 啟停及 Pub/Sub attributes／ACK deadline 持續保留。僅明列子集經過官方 gcloud、小用量真實 GCP 與隔離 Docker 驗收；不表示完整 Google IAM、SDK／ADC 或自動擴縮相容。
@@ -18,7 +65,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.4'
+pip install 'fufu-cloud-cli==0.9.5'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -62,7 +109,8 @@ pip install fufu-cloud-cli
 fufu --version
 ```
 
-npm 版本需要 Node.js 18 以上，以及已安裝的 Python 3.10 以上；各入口
+npm registry 尚未發布；以下是 registry 可用後的安裝語法。目前可安裝經驗收
+的 npm tarball。npm 版本需要 Node.js 18 以上，以及已安裝的 Python 3.10 以上；各入口
 呼叫相同的 Python CLI。0.8.0 的 npm 建置包內附純 Python YAML／TOML parser，沒有安裝腳本，
 不會自行下載 Python 或執行 pip。
 
@@ -79,12 +127,12 @@ npx --no-install aws-fufu --help
 
 ## 憑證與 CI
 
-目前工作樹另提供 `fufu tofu`、`fufu pulumi`、`fufu state`。
+目前版本另提供 `fufu tofu`、`fufu pulumi`、`fufu state`。
 Terraform／OpenTofu 可選擇租戶遠端 HTTP state，具備鎖、加密、版本與
 復原；需配套 Console API 和平台金鑰。Pulumi 使用固定官方 Node.js SDK，
 已驗收 SQS、SSM String、Pub/Sub topic／pull subscription，採獨立本機
-DIY backend，秘密欄位需外部 passphrase。這些新能力尚未包含在已發布
-的 0.8.0，不能把套件安裝成功當成支援驗收。
+DIY backend，秘密欄位需外部 passphrase。這些能力從 0.9.0 起納入 CLI，
+仍需要配套服務端；不能把套件安裝成功當成支援驗收。
 
 此工作樹也提供 `fufu terraform`：以官方 AWS／Google Terraform provider
 管理 Lambda ZIP、Cloud Run v2、IAM 與服務入口的明列子集，並使用獨立的
@@ -94,9 +142,9 @@ GCS／S3、Functions Gen 1／Gen 2 等一般 CLI 能力
 不表示官方 Terraform 資源已相容。正式環境使用正常 Terraform、正式認證
 與獨立 state，不可直接搬用 FUFU state。
 
-後續開發版另接入 SQS queue、SSM String parameter、Pub/Sub topic／pull
+目前版本另接入 SQS queue、SSM String parameter、Pub/Sub topic／pull
 subscription；新增能力需要配套的 Console 與 Pub/Sub 後端更新，不能從
-已發布的 0.8.0 安裝成功就推定已具備。`gcloud-fufu pubsub` 提供建立、
+CLI 安裝成功就推定服務端已具備。`gcloud-fufu pubsub` 提供建立、
 查詢、更新、刪除、publish／pull／ack 子集；不支援 push、ordering、
 exactly-once、Function trigger 或保留期限保證。
 

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli.egg-info/SOURCES.txt

@@ -5,6 +5,7 @@ pyproject.toml
 src/fufu_cloud_cli/__init__.py
 src/fufu_cloud_cli/__main__.py
 src/fufu_cloud_cli/api_backend.py
+src/fufu_cloud_cli/bigquery.py
 src/fufu_cloud_cli/capabilities.json
 src/fufu_cloud_cli/capacity.py
 src/fufu_cloud_cli/cli.py
@@ -15,6 +16,8 @@ src/fufu_cloud_cli/docker_backend.py
 src/fufu_cloud_cli/errors.py
 src/fufu_cloud_cli/gcloud_environment.py
 src/fufu_cloud_cli/gcloud_output.py
+src/fufu_cloud_cli/gcp_infra.py
+src/fufu_cloud_cli/gcp_sdk.py
 src/fufu_cloud_cli/gcs.py
 src/fufu_cloud_cli/http_runtime.py
 src/fufu_cloud_cli/iac_state.py

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli.egg-info/entry_points.txt

@@ -1,6 +1,7 @@
 [console_scripts]
 aws-fufu = fufu_cloud_cli.cli:aws_main
 az-fufu = fufu_cloud_cli.cli:az_main
+bq-fufu = fufu_cloud_cli.cli:bq_main
 fufu = fufu_cloud_cli.cli:main
 gcloud-fufu = fufu_cloud_cli.cli:gcloud_main
 wrangler-fufu = fufu_cloud_cli.cli:wrangler_main

{fufu_cloud_cli-0.9.4 → fufu_cloud_cli-0.9.5}/src/fufu_cloud_cli.egg-info/requires.txt

@@ -3,6 +3,11 @@ PyYAML==6.0.3
 [:python_version < "3.11"]
 tomli==2.2.1
 
+[gcp]
+google-cloud-bigquery==3.38.0
+google-cloud-tasks==2.20.0
+google-cloud-logging==3.12.1
+
 [terraform]
 python-hcl2==7.3.1