fufu-cloud-cli 0.9.5__tar.gz → 0.9.6__tar.gz

{fufu_cloud_cli-0.9.5/src/fufu_cloud_cli.egg-info → fufu_cloud_cli-0.9.6}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.4
 Name: fufu-cloud-cli
-Version: 0.9.5
+Version: 0.9.6
 Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
 License-Expression: LicenseRef-Proprietary
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: PyYAML==6.0.3
+Requires-Dist: jmespath==1.1.0
 Requires-Dist: tomli==2.2.1; python_version < "3.11"
 Provides-Extra: yaml
 Requires-Dist: PyYAML==6.0.3; extra == "yaml"
@@ -26,6 +27,11 @@ Dynamic: license-file
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.6 新增 AWS Lambda Event／DryRun、configuration 更新、JMESPath `--query`、
+json／text／yaml 輸出、SQS FIFO／batch、SSM path／history、DynamoDB Binary
+及 CloudWatch Logs。需要配套後端；Event 202 只表示持久化接受，並非 handler
+執行完成。仍無完整 AWS CLI 自動分頁、table、Layers／Image／aliases 或全量 IAM。
+
 0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
 支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
 insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
@@ -65,7 +71,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.5'
+pip install 'fufu-cloud-cli==0.9.6'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -236,10 +242,11 @@ CLI 無法判斷任意原始碼或 ZIP 內的資料是否可以分享。
 | --- | --- |
 | Cloud Run | 已核准 HTTP 容器或 API 自動建置 Python ASGI 來源；支援配置後的 HTTPS 入口、Invoker policy；無 autoscaling、traffic splitting、Jobs |
 | Cloud Run functions / Functions Gen 1 | Python 3.12 HTTP 函式；Gen 1 為相同 HTTP runtime 的模擬子集，無背景事件 |
-| AWS Lambda | Python 3.10 / 3.12 ZIP、同步 invoke、程式碼更新、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 payload 6 MiB |
+| AWS Lambda | Python 3.10 / 3.12 ZIP、configuration、RequestResponse／Event／DryRun、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 6 MiB／Event 1 MiB；Event 為單機持久化重試，無 destinations／DLQ 或正式 autoscaling |
 | GCS | bucket／object 子集、分段上傳／串流下載／binary cat、generation／metageneration 條件、metadata describe/update、前綴分頁；8 KiB custom metadata；無 versioning、signed URL、bucket IAM、一般 SDK 或 GCS IaC 資源 |
 | S3 | bucket 與 object 子集；分段上傳／串流下載，受主機磁碟限制；已驗證超過 1 GiB，無 versioning / signed URL |
-| DynamoDB / SQS / SSM | 明列資料操作；無完整交易、Streams、FIFO 或 KMS / SecureString |
+| DynamoDB / SQS / SSM | 明列資料操作、Binary、FIFO group／dedup／batch、SSM 版本／path／history；無交易／TTL／Streams、SQS 背景 poller／DLQ／加密、KMS／SecureString |
+| CloudWatch Logs | group／stream、put/get/filter events、retention 設定、CLI／UI／boto3；無 stdout 自動收集、Insights、subscriptions 或 retention 刪除保證 |
 | AWS IAM / GCP IAM | 租戶內 role / service account / policy 子集；default deny、限定 session；無原生雲端全量 IAM 語義 |
 | API Gateway / Serverless profile | 簡化 HTTP Lambda proxy 和明確來源清單；不執行 plugins / CloudFormation |
 | Azure | account 與資源群組目錄；尚無 Azure Functions 或其他 Azure runtime |

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/README.md

@@ -4,6 +4,11 @@
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.6 新增 AWS Lambda Event／DryRun、configuration 更新、JMESPath `--query`、
+json／text／yaml 輸出、SQS FIFO／batch、SSM path／history、DynamoDB Binary
+及 CloudWatch Logs。需要配套後端；Event 202 只表示持久化接受，並非 handler
+執行完成。仍無完整 AWS CLI 自動分頁、table、Layers／Image／aliases 或全量 IAM。
+
 0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
 支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
 insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
@@ -43,7 +48,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.5'
+pip install 'fufu-cloud-cli==0.9.6'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -214,10 +219,11 @@ CLI 無法判斷任意原始碼或 ZIP 內的資料是否可以分享。
 | --- | --- |
 | Cloud Run | 已核准 HTTP 容器或 API 自動建置 Python ASGI 來源；支援配置後的 HTTPS 入口、Invoker policy；無 autoscaling、traffic splitting、Jobs |
 | Cloud Run functions / Functions Gen 1 | Python 3.12 HTTP 函式；Gen 1 為相同 HTTP runtime 的模擬子集，無背景事件 |
-| AWS Lambda | Python 3.10 / 3.12 ZIP、同步 invoke、程式碼更新、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 payload 6 MiB |
+| AWS Lambda | Python 3.10 / 3.12 ZIP、configuration、RequestResponse／Event／DryRun、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 6 MiB／Event 1 MiB；Event 為單機持久化重試，無 destinations／DLQ 或正式 autoscaling |
 | GCS | bucket／object 子集、分段上傳／串流下載／binary cat、generation／metageneration 條件、metadata describe/update、前綴分頁；8 KiB custom metadata；無 versioning、signed URL、bucket IAM、一般 SDK 或 GCS IaC 資源 |
 | S3 | bucket 與 object 子集；分段上傳／串流下載，受主機磁碟限制；已驗證超過 1 GiB，無 versioning / signed URL |
-| DynamoDB / SQS / SSM | 明列資料操作；無完整交易、Streams、FIFO 或 KMS / SecureString |
+| DynamoDB / SQS / SSM | 明列資料操作、Binary、FIFO group／dedup／batch、SSM 版本／path／history；無交易／TTL／Streams、SQS 背景 poller／DLQ／加密、KMS／SecureString |
+| CloudWatch Logs | group／stream、put/get/filter events、retention 設定、CLI／UI／boto3；無 stdout 自動收集、Insights、subscriptions 或 retention 刪除保證 |
 | AWS IAM / GCP IAM | 租戶內 role / service account / policy 子集；default deny、限定 session；無原生雲端全量 IAM 語義 |
 | API Gateway / Serverless profile | 簡化 HTTP Lambda proxy 和明確來源清單；不執行 plugins / CloudFormation |
 | Azure | account 與資源群組目錄；尚無 Azure Functions 或其他 Azure runtime |

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/pyproject.toml

@@ -4,11 +4,11 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fufu-cloud-cli"
-version = "0.9.5"
+version = "0.9.6"
 description = "FUFU Cloud CLI for tenant-scoped mock cloud development and deployment"
 readme = "README.md"
 requires-python = ">=3.10"
-dependencies = ["PyYAML==6.0.3", "tomli==2.2.1; python_version<'3.11'"]
+dependencies = ["PyYAML==6.0.3", "jmespath==1.1.0", "tomli==2.2.1; python_version<'3.11'"]
 license = "LicenseRef-Proprietary"
 license-files = ["LICENSE"]
 
@@ -30,4 +30,4 @@ bq-fufu = "fufu_cloud_cli.cli:bq_main"
 where = ["src"]
 
 [tool.setuptools.package-data]
-fufu_cloud_cli = ["capabilities.json", "pulumi-endpoints.json", "runtime/*/Dockerfile", "runtime/ingress/proxy.py"]
+fufu_cloud_cli = ["capabilities.json", "pulumi-endpoints.json", "runtime/*/Dockerfile", "runtime/ingress/proxy.py", "vendor/AWS-CLI-LICENSE.txt"]

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/__init__.py

@@ -1,3 +1,3 @@
 """FUFU CLI 與本機部署工具；相容範圍見 capabilities.json。"""
 
-__version__ = "0.9.5"
+__version__ = "0.9.6"

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/api_backend.py

@@ -184,6 +184,14 @@ class ApiClient:
                 return json.loads(raw)
         except HTTPError as exc:
             status = exc.code
+            if self.provider == 'aws' and '/control/native' in path:
+                from .aws_errors import AWS_ERRORS
+                try:
+                    value = json.loads(exc.read(4096))
+                    code = value.get('code') if isinstance(value, dict) else None
+                    if code in AWS_ERRORS: raise FufuError(code, 'AWS 操作遭拒；未輸出原始錯誤內容。') from None
+                except (ValueError, OSError): pass
+                finally: exc.close()
             exc.close()
             codes = {401: "AUTHENTICATION_FAILED", 403: "ACCESS_DENIED", 404: "RESOURCE_NOT_FOUND", 409: "RESOURCE_CONFLICT", 410: "UPLOAD_EXPIRED", 412: "PRECONDITION_FAILED", 413: "PAYLOAD_LIMIT", 429: "RATE_LIMITED", 507: "STORAGE_CAPACITY"}
             if status == 507: raise FufuError('STORAGE_CAPACITY', 'FUFU 主機磁碟容量不足；這是目前可用空間的限制，並非雲端物件大小上限。') from None

fufu_cloud_cli-0.9.6/src/fufu_cloud_cli/aws_errors.py

@@ -0,0 +1,6 @@
+"""Only documented provider error codes may cross the public transport boundary."""
+AWS_ERRORS = frozenset('''ConditionalCheckFailedException ResourceNotFoundException ResourceInUseException ValidationException
+NoSuchKey NoSuchBucket NotFound NotModified ParameterNotFound ParameterAlreadyExists ParameterVersionNotFound QueueDoesNotExist
+PreconditionFailed InvalidRange InvalidParameterException InvalidParameterValue InvalidAttributeName InvalidAttributeValue QueueNameExists
+PurgeQueueInProgress ReceiptHandleIsInvalid BatchEntryIdsNotDistinct EmptyBatchRequest BatchRequestTooLong InvalidBatchEntryId
+TooManyEntriesInBatchRequest InvalidMessageContents AWS.SimpleQueueService.NonExistentQueue TooManyRequestsException InvalidRequestContentException'''.split())

fufu_cloud_cli-0.9.6/src/fufu_cloud_cli/aws_output.py

@@ -0,0 +1,65 @@
+"""AWS JMESPath and native text formatting over the supported response subset."""
+import io
+import json
+
+import jmespath
+from jmespath.exceptions import JMESPathError
+
+from .errors import FufuError, require
+from .vendor.aws_text import format_text
+
+
+def expression(value):
+    require(isinstance(value, str) and 0 < len(value) <= 65536,
+            'INVALID_QUERY', 'AWS query 必須為非空 JMESPath 運算式，最多 65536 字元。')
+    try:
+        return jmespath.compile(value)
+    except JMESPathError:
+        raise FufuError('INVALID_QUERY', '無效的 AWS JMESPath query；未執行操作。', 2) from None
+
+
+def configuration(value):
+    if 'FunctionName' in value:
+        return value
+    resources = value.get('resources', {})
+    fields = {'FunctionName': value.get('name'), 'FunctionArn': value.get('functionArn'),
+              'Runtime': value.get('runtime'), 'Handler': value.get('handler'), 'Role': value.get('role'),
+              'MemorySize': resources.get('memoryMiB'), 'Timeout': resources.get('timeoutSeconds'),
+              'RevisionId': value.get('revision'), 'LastModified': value.get('createdAt')}
+    result = {key: item for key, item in fields.items() if item is not None}
+    if resources.get('tmpMiB') is not None: result['EphemeralStorage'] = {'Size': resources['tmpMiB']}
+    if value.get('status') == 'running': result.update(State='Active', LastUpdateStatus='Successful')
+    if 'env' in value: result['Environment'] = {'Variables': value['env']}
+    result['Fufu'] = {key: value[key] for key in ['mode', 'backend', 'readiness', 'serviceId', 'publicAccess', 'iamEnforced'] if key in value}
+    result['Fufu'].setdefault('mode', 'simplified')
+    return result
+
+
+def native(value, argv):
+    if argv[:1] != ['lambda'] or len(argv) < 2 or not isinstance(value, dict):
+        return value
+    action = argv[1]
+    if action == 'list-functions':
+        return {**value, 'Functions': [configuration(item) for item in value.get('Functions', [])]}
+    if action == 'get-function':
+        return {'Configuration': configuration(value), 'Fufu': {'mode': 'simplified', 'codeDownloadAvailable': False}}
+    if action in {'create-function', 'update-function-code', 'get-function-configuration', 'update-function-configuration'}:
+        return configuration(value)
+    if action == 'delete-function': return None
+    return value
+
+
+def render(value, output='json', query=None):
+    require(output in {'json', 'text', 'yaml', 'off'}, 'UNSUPPORTED_FORMAT',
+            'AWS 輸出支援 json、text、yaml、off；table 與 yaml-stream 尚未支援。')
+    try:
+        value = query.search(value) if query else value
+    except JMESPathError:
+        raise FufuError('INVALID_QUERY', 'AWS query 無法套用到回應；操作可能已完成，請先查詢資源狀態。', 2) from None
+    if output == 'off': return ''
+    if output == 'text':
+        stream = io.StringIO(); format_text(value, stream); return stream.getvalue()
+    if output == 'yaml':
+        import yaml
+        return yaml.safe_dump(value, allow_unicode=True, sort_keys=False)
+    return json.dumps(value, ensure_ascii=False, indent=4) + '\n'

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/capabilities.json

@@ -103,6 +103,10 @@
       "operations": [
         "create-function-python310-python312-zip",
         "invoke-RequestResponse",
+        "invoke-Event-api-only",
+        "invoke-DryRun-api-only",
+        "get-function-configuration",
+        "update-function-configuration",
         "get-function",
         "list-functions",
         "delete-function",
@@ -113,7 +117,7 @@
         "AWS-IAM-inline-policy-subset",
         "boto3-data-transport-subset",
         "no-managed-timeout-equivalence",
-        "no-async-Invoke",
+        "async-API-only-single-host-queue-no-destinations-or-DLQ",
         "remote-ZIP-50MiB-expanded-250MiB",
         "synchronous-payload-6MiB",
         "workload-lease-24h-renewable-while-active",
@@ -222,9 +226,12 @@
         "no-Entra-STS"
       ]
     },
+    "aws-cloudwatch-logs": {"status": "implemented", "backend": "api", "mode": "simplified", "operations": ["log-group-crud", "log-stream-crud", "put-get-filter-events", "retention-policy", "CLI-UI-boto3"], "limitations": ["no-automatic-stdout-collection", "simple-text-filters-only", "no-Insights-subscriptions-or-KMS", "no-guaranteed-retention-deletion", "service-page-tokens-no-CLI-auto-pagination"]},
+    "aws-lambda-async": {"status": "implemented", "backend": "api", "mode": "simplified", "operations": ["invoke-Event", "invoke-DryRun", "CLI-UI-boto3-Invoke"], "limitations": ["1MiB-payload", "single-host-SQLite-two-dispatchers", "at-least-once", "two-handler-retries-60s-120s", "system-retries-up-to-6h", "no-destinations-or-DLQ", "no-AWS-scaling-or-managed-timeout-equivalence", "10000-events-or-512MiB-encoded-queue-per-tenant"]},
+    "aws-cli-output": {"status": "implemented", "mode": "simplified", "operations": ["JMESPath-query", "json", "text", "yaml"], "limitations": ["no-table-or-yaml-stream", "no-full-CLI-auto-pagination", "Lambda-response-subset-no-Code-download"]},
     "aws-data-services": {
       "status": "partial",
-      "reason": "DynamoDB、S3、SQS、SSM 已接 CLI 與 boto3；事件僅 SQS 手動 drain，其他服务不推定可用。"
+      "reason": "DynamoDB、S3、SQS、SSM、CloudWatch Logs 與 Lambda Invoke 已接 CLI／boto3 明列子集；Lambda Event 可背景執行，SQS mapping 仍需手動 drain。"
     },
     "gcp-data-services": {
       "status": "partial",
@@ -281,6 +288,10 @@
         "list-queues",
         "delete-queue",
         "send-message",
+        "send-message-batch",
+        "delete-message-batch",
+        "change-message-visibility-batch",
+        "purge-queue",
         "receive-message",
         "delete-message",
         "get-queue-attributes",
@@ -291,13 +302,13 @@
         "terraform-lifecycle"
       ],
       "limitations": [
-        "standard-queues",
+        "Standard-and-FIFO-queues",
         "message-1MiB",
         "long-poll-up-to-20s",
         "receive-max-10",
         "fufu-QueueUrl",
-        "no-FIFO",
-        "no-KMS-or-SQS-encryption",
+        "no-DLQ-or-standard-fair-queues",
+        "SSE-default-false-unlike-AWS-true-no-KMS",
         "manual-Lambda-drain-only",
         "no-background-poller"
       ]
@@ -309,6 +320,10 @@
         "put-parameter",
         "get-parameter",
         "get-parameters",
+        "get-parameters-by-path",
+        "get-parameter-history",
+        "get-parameter-version-selector",
+        "delete-parameters",
         "delete-parameter",
         "describe-parameters-exact-name",
         "list-tags-for-resource",
@@ -748,7 +763,8 @@
       "mode": "simplified",
       "limitations": [
         "botocore-event-transport",
-        "DynamoDB-S3-SQS-SSM-only",
+        "DynamoDB-S3-SQS-SSM-SecretsManager-Logs-Lambda-Invoke-subsets",
+        "modeled-binary-timestamps-and-service-exceptions",
         "FUFU-token-not-SigV4",
         "no-real-cloud-fallback",
         "no-presigned-URLs"

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/cli.py

@@ -326,7 +326,7 @@ def gcloud_command(argv):
     return 0 if status < 400 and not failure else 1
 
 
-def aws_command(argv):
+def aws_command(argv, emit_result=emit):
     p = Parser(prog="aws-fufu", description="Lambda ZIP 與同步 invoke、IAM workload role 子集。")
     root = p.add_subparsers(dest="service", required=True)
     s = root.add_parser("lambda").add_subparsers(dest="action", required=True)
@@ -336,26 +336,52 @@ def aws_command(argv):
     c.add_argument("--handler", required=True)
     c.add_argument("--zip-file", required=True)
     c.add_argument('--role')
+    c.add_argument('--environment', help='原生 Environment JSON 或 file:// JSON')
     deployment_options(c)
     update = s.add_parser('update-function-code')
     update.add_argument('--function-name', required=True)
     update.add_argument('--zip-file', required=True)
     deployment_options(update)
-    for action in ("get-function", "delete-function", "invoke"):
+    configure = s.add_parser('update-function-configuration')
+    configure.add_argument('--function-name', required=True)
+    configure.add_argument('--environment', help='原生 Environment JSON 或 file:// JSON；Variables 為完整替換')
+    configure.add_argument('--role')
+    deployment_options(configure)
+    for action in ("get-function", "get-function-configuration", "delete-function", "invoke"):
         q = s.add_parser(action)
         q.add_argument("--function-name", required=True)
         if action == "invoke":
             q.add_argument("--payload", default="{}")
-            q.add_argument("--invocation-type", choices=["RequestResponse"], default="RequestResponse")
+            q.add_argument("--invocation-type", choices=["RequestResponse", "Event", "DryRun"], default="RequestResponse")
             q.add_argument("--cli-binary-format", choices=["raw-in-base64-out"], default="raw-in-base64-out")
             q.add_argument("--request-timeout", type=int, help='呼叫等待期限；預設使用服務配置')
             q.add_argument("outfile")
     s.add_parser("list-functions")
     a = p.parse_args(argv)
     kind = "aws-lambda-sync"
+    def environment():
+        original = env_from_names(a.env)
+        if getattr(a, 'environment', None) is not None:
+            from .control import read_json
+            value = read_json(a.environment)
+            require(isinstance(value, dict) and set(value) == {'Variables'} and not original,
+                    'INVALID_INPUT', 'Environment 必須只包含 Variables，且不能與 --env 混用。')
+            return manifest.environment(value['Variables'])
+        return original
+    if a.action == 'get-function-configuration':
+        return compute_backend(kind).configuration(kind, a.function_name)
+    if a.action == 'update-function-configuration':
+        require(api_selected(), 'API_BACKEND_REQUIRED', 'Lambda 設定更新需要配套的 FUFU API／worker。')
+        body = {}
+        if a.environment is not None or a.env: body['environment_patch'] = {'replace': True, 'values': environment(), 'remove': []}
+        resources = resource_options(a, kind)
+        if resources: body['resources'] = resources
+        if a.role is not None: body['role'] = a.role
+        require(bool(body), 'INVALID_INPUT', '請指定要更新的 Environment、資源限制或 Role。')
+        return compute_backend(kind).configure(kind, a.function_name, body)
     if a.action in {"create-function", "update-function-code"}:
         manifest.name(a.function_name)
-        env = env_from_names(a.env)
+        env = environment()
         require(not getattr(a, 'role', None) or api_selected(), 'IAM_BACKEND_REQUIRED', 'Lambda IAM role 需要 API 模式。')
         require(a.zip_file.startswith("fileb://"), "INVALID_ZIP", "ZIP 參數請使用 fileb:// 路徑。")
         b = compute_backend(kind)
@@ -384,6 +410,7 @@ def aws_command(argv):
     if a.action == "delete-function":
         return compute_backend(kind).delete(kind, a.function_name)
     data = payload(a.payload)
+    require(a.invocation_type == 'RequestResponse' or api_selected(), 'API_BACKEND_REQUIRED', '非同步／DryRun 呼叫需要 FUFU API 與持久化 worker。')
     destination = Path(a.outfile)
     require(not destination.exists() and not destination.is_symlink() and destination.parent.is_dir(),
             "OUTPUT_EXISTS", "輸出檔必須是新檔案且父目錄已存在，避免覆寫既有資料。")
@@ -391,12 +418,14 @@ def aws_command(argv):
     fd = os.open(destination, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
     try:
         with os.fdopen(fd, "wb") as out:
-            status, body, failure = compute_backend(kind).invoke(kind, a.function_name, data, timeout=a.request_timeout)
+            options = {'timeout': a.request_timeout}
+            if api_selected(): options['invocation_type'] = a.invocation_type
+            status, body, failure = compute_backend(kind).invoke(kind, a.function_name, data, **options)
             out.write(body)
         result = {"StatusCode": status}
         if failure:
             result["FunctionError"] = failure
-        emit(result)
+        emit_result(result)
         # AWS 同步 invoke 的 handler error 透過 FunctionError 與 payload 回報。
         return 0 if status < 400 else 1
     except Exception:
@@ -408,8 +437,13 @@ def entry(provider, argv=None):
     selected_keys = ['FUFU_SELECTED_REGION', 'FUFU_SELECTED_PROJECT', 'FUFU_ASSUME_ROLE']
     original_environment = {key: os.environ.get(key) for key in selected_keys}
     output_format = None; output_filter = None; output_sort = None; output_limit = None
+    aws_query = None; aws_format = 'json'
     def emit(value):
-        if provider == 'gcloud-fufu' and (output_format or output_filter or output_sort or output_limit is not None):
+        if provider == 'aws-fufu':
+            from .aws_output import native, render
+            shaped = native(value, argv)
+            if shaped is not None or aws_query is not None: sys.stdout.write(render(shaped, aws_format, aws_query))
+        elif provider == 'gcloud-fufu' and (output_format or output_filter or output_sort or output_limit is not None):
             from .gcloud_output import native, render, select
             shaped = native(value, argv)
             if output_filter or output_sort or output_limit is not None:
@@ -422,6 +456,15 @@ def entry(provider, argv=None):
         require(provider in {"fufu", "aws-fufu", "gcloud-fufu", "az-fufu", "wrangler-fufu", "bq-fufu"}, "UNSUPPORTED_CLI", "未知 CLI 入口。")
         if argv == ['--version']:
             sys.stdout.write(('fufu-cloud-cli ' if provider == 'gcloud-fufu' else '') + __version__ + '\n'); return
+        if provider == 'aws-fufu' and argv in [['--help'], ['-h']]:
+            p = Parser(prog='aws-fufu', description='AWS 部署及資料 API 的明列子集；租戶 IAM、官方 JMESPath 與 text formatter。')
+            p.add_argument('--query', help='JMESPath 回應查詢')
+            p.add_argument('--output', choices=['json', 'text', 'yaml', 'off'])
+            p.add_argument('--region', help='必須符合 FUFU credential 的區域')
+            p.add_argument('--no-cli-pager', action='store_true')
+            groups = p.add_subparsers(title='服務')
+            for group in ['lambda', 'iam', 'sts', 's3', 's3api', 'dynamodb', 'sqs', 'ssm', 'logs', 'secretsmanager', 'apigatewayv2', 'serverless']: groups.add_parser(group)
+            p.print_help(); return
         if provider == 'gcloud-fufu' and argv in [['--help'], ['-h']]:
             p = Parser(prog='gcloud-fufu', description='GCP 開發環境的可執行子集；使用 FUFU credential，功能範圍請見 fufu capabilities。')
             for flag, description in [('--format', 'json／yaml／value／table／csv；支援 dotted path 投影'),
@@ -458,11 +501,18 @@ def entry(provider, argv=None):
             rest = []; i = 0
             while i < len(argv):
                 flag, _, inline = argv[i].partition('=')
-                if flag in {'--region', '--project', '--output', '--format', '--impersonate-service-account', '--filter', '--sort-by'} or flag == '--limit' and provider == 'gcloud-fufu' and 'list' in argv:
+                if flag in {'--region', '--project', '--output', '--format', '--impersonate-service-account', '--filter', '--sort-by', '--query'} or flag == '--limit' and provider == 'gcloud-fufu' and 'list' in argv:
                     value = inline if '=' in argv[i] else (argv[i + 1] if i + 1 < len(argv) else '')
                     i += 1 if '=' in argv[i] else 2
                     require(bool(value) and not value.startswith('--'), 'UNSUPPORTED_ARGUMENT', '全域旗標缺少值。')
-                    if flag == '--impersonate-service-account':
+                    if flag == '--query':
+                        require(provider == 'aws-fufu', 'UNSUPPORTED_ARGUMENT', '--query 只適用於 aws-fufu。')
+                        from .aws_output import expression
+                        aws_query = expression(value)
+                    elif flag == '--output' and provider == 'aws-fufu':
+                        require(value in {'json', 'text', 'yaml', 'off'}, 'UNSUPPORTED_FORMAT', 'AWS 輸出支援 json、text、yaml、off。')
+                        aws_format = value
+                    elif flag == '--impersonate-service-account':
                         require(provider == 'gcloud-fufu', 'UNSUPPORTED_ARGUMENT', '此旗標只適用於 gcloud-fufu。')
                         os.environ['FUFU_ASSUME_ROLE'] = value
                     elif flag == '--format' and provider == 'gcloud-fufu':
@@ -520,7 +570,7 @@ def entry(provider, argv=None):
         if provider == 'fufu' and argv and argv[0] in {'gateway', 'events', 'mock'}:
             from .control import fufu_control
             emit(fufu_control(argv, Parser)); return
-        if provider == 'aws-fufu' and argv and argv[0] in {'iam', 'dynamodb', 's3api', 'sqs', 'ssm'}:
+        if provider == 'aws-fufu' and argv and argv[0] in {'iam', 'dynamodb', 's3api', 'sqs', 'ssm', 'logs'}:
             from .control import command
             emit(command(argv, Parser)); return
         if provider == 'gcloud-fufu' and argv and argv[0] in {'iam', 'projects'}:
@@ -547,7 +597,7 @@ def entry(provider, argv=None):
         if provider in remote and not compute and (provider == "az-fufu" or api_selected() or (argv and argv[0] in api_services[provider])):
             result = remote_command(remote[provider], argv, Parser)
         else:
-            result = {"fufu": fufu_command, "aws-fufu": aws_command, "gcloud-fufu": gcloud_command}[provider](argv)
+            result = aws_command(argv, emit_result=emit) if provider == 'aws-fufu' else {"fufu": fufu_command, "gcloud-fufu": gcloud_command}[provider](argv)
         if type(result) is int:
             raise SystemExit(result)
         if provider == 'az-fufu' and argv and argv[0] != 'account' and isinstance(result, dict):

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/control.py

@@ -28,24 +28,35 @@ AWS_OPERATIONS = {
  },
  's3api': {
   'CreateBucket': 'Bucket CreateBucketConfiguration', 'DeleteBucket': 'Bucket', 'ListBuckets': '', 'HeadBucket': 'Bucket',
-  'ListObjectsV2': 'Bucket Prefix MaxKeys ContinuationToken Delimiter StartAfter', 'PutObject': 'Bucket Key Body ContentType Metadata',
-  'GetObject': 'Bucket Key ChecksumMode', 'HeadObject': 'Bucket Key ChecksumMode', 'DeleteObject': 'Bucket Key',
+  'ListObjectsV2': 'Bucket Prefix MaxKeys ContinuationToken Delimiter StartAfter EncodingType', 'PutObject': 'Bucket Key Body ContentType Metadata',
+  'GetObject': 'Bucket Key ChecksumMode Range IfMatch IfNoneMatch', 'HeadObject': 'Bucket Key ChecksumMode IfMatch IfNoneMatch', 'DeleteObject': 'Bucket Key',
  },
  'sqs': {
   'CreateQueue': 'QueueName Attributes tags', 'GetQueueUrl': 'QueueName', 'ListQueues': 'QueueNamePrefix MaxResults NextToken', 'DeleteQueue': 'QueueUrl',
   'ListQueueTags': 'QueueUrl', 'TagQueue': 'QueueUrl Tags', 'UntagQueue': 'QueueUrl TagKeys',
   'GetQueueAttributes': 'QueueUrl AttributeNames', 'SetQueueAttributes': 'QueueUrl Attributes',
-  'SendMessage': 'QueueUrl MessageBody DelaySeconds MessageAttributes', 'ReceiveMessage': 'QueueUrl MaxNumberOfMessages VisibilityTimeout WaitTimeSeconds MessageAttributeNames AttributeNames',
+  'SendMessage': 'QueueUrl MessageBody DelaySeconds MessageAttributes MessageGroupId MessageDeduplicationId', 'ReceiveMessage': 'QueueUrl MaxNumberOfMessages VisibilityTimeout WaitTimeSeconds MessageAttributeNames AttributeNames MessageSystemAttributeNames ReceiveRequestAttemptId',
+  'SendMessageBatch': 'QueueUrl Entries', 'DeleteMessageBatch': 'QueueUrl Entries', 'ChangeMessageVisibilityBatch': 'QueueUrl Entries', 'PurgeQueue': 'QueueUrl',
   'DeleteMessage': 'QueueUrl ReceiptHandle', 'ChangeMessageVisibility': 'QueueUrl ReceiptHandle VisibilityTimeout',
  },
- 'ssm': { 'PutParameter': 'Name Value Type Overwrite Description Tags', 'GetParameter': 'Name WithDecryption', 'GetParameters': 'Names WithDecryption', 'DeleteParameter': 'Name',
+ 'ssm': { 'PutParameter': 'Name Value Type Overwrite Description Tags Tier DataType', 'GetParameter': 'Name WithDecryption', 'GetParameters': 'Names WithDecryption', 'DeleteParameter': 'Name',
           'DescribeParameters': 'ParameterFilters', 'ListTagsForResource': 'ResourceType ResourceId',
-          'AddTagsToResource': 'ResourceType ResourceId Tags', 'RemoveTagsFromResource': 'ResourceType ResourceId TagKeys' },
+          'AddTagsToResource': 'ResourceType ResourceId Tags', 'RemoveTagsFromResource': 'ResourceType ResourceId TagKeys',
+          'GetParametersByPath': 'Path Recursive WithDecryption MaxResults NextToken', 'GetParameterHistory': 'Name WithDecryption MaxResults NextToken', 'DeleteParameters': 'Names' },
+ 'logs': {
+  'CreateLogGroup': 'logGroupName', 'DeleteLogGroup': 'logGroupName', 'DescribeLogGroups': 'logGroupNamePrefix limit nextToken',
+  'CreateLogStream': 'logGroupName logStreamName', 'DeleteLogStream': 'logGroupName logStreamName',
+  'DescribeLogStreams': 'logGroupName logStreamNamePrefix orderBy descending limit nextToken',
+  'PutLogEvents': 'logGroupName logStreamName logEvents sequenceToken',
+  'GetLogEvents': 'logGroupName logStreamName startTime endTime startFromHead limit nextToken',
+  'FilterLogEvents': 'logGroupName logStreamNames logStreamNamePrefix startTime endTime filterPattern limit nextToken',
+  'PutRetentionPolicy': 'logGroupName retentionInDays', 'DeleteRetentionPolicy': 'logGroupName',
+ },
 }
-JSON_FIELDS = set('AssumeRolePolicyDocument PolicyDocument AttributeDefinitions KeySchema ProvisionedThroughput GlobalSecondaryIndexes LocalSecondaryIndexes StreamSpecification Item Key ExpressionAttributeNames ExpressionAttributeValues ExclusiveStartKey RequestItems CreateBucketConfiguration Metadata Attributes MessageAttributes Tags tags ParameterFilters'.split())
-LIST_FIELDS = set('ActionNames ResourceArns Names AttributeNames MessageAttributeNames TagKeys'.split())
-BOOL_FIELDS = set('ConsistentRead ScanIndexForward WithDecryption Overwrite Enabled'.split())
-INT_FIELDS = set('Limit MaxKeys MaxResults MaxNumberOfMessages VisibilityTimeout WaitTimeSeconds DelaySeconds BatchSize'.split())
+JSON_FIELDS = set('AssumeRolePolicyDocument PolicyDocument AttributeDefinitions KeySchema ProvisionedThroughput GlobalSecondaryIndexes LocalSecondaryIndexes StreamSpecification Item Key ExpressionAttributeNames ExpressionAttributeValues ExclusiveStartKey RequestItems CreateBucketConfiguration Metadata Attributes MessageAttributes Tags tags ParameterFilters Entries logEvents'.split())
+LIST_FIELDS = set('ActionNames ResourceArns Names AttributeNames MessageAttributeNames MessageSystemAttributeNames TagKeys logStreamNames'.split())
+BOOL_FIELDS = set('ConsistentRead ScanIndexForward WithDecryption Overwrite Enabled Recursive descending startFromHead'.split())
+INT_FIELDS = set('Limit MaxKeys MaxResults MaxNumberOfMessages VisibilityTimeout WaitTimeSeconds DelaySeconds BatchSize limit startTime endTime retentionInDays'.split())
 
 
 def dashed(value):
@@ -60,6 +71,19 @@ def read_json(value):
     return json.loads(value)
 
 
+def flat_map(value):
+    if value.startswith(('{', '[', 'file://')): return read_json(value)
+    import shlex
+    lexer = shlex.shlex(value, posix=True); lexer.whitespace = ','; lexer.whitespace_split = True; lexer.commenters = ''
+    result = {}
+    for item in lexer:
+        key, separator, val = item.partition('='); key = key.strip()
+        require(bool(separator) and bool(key) and key not in result, 'INVALID_INPUT', 'AWS map shorthand 必須使用不同的 key=value。')
+        result[key] = val
+    require(bool(result), 'INVALID_INPUT', 'AWS map 不可為空 shorthand；空物件請使用 {}。')
+    return result
+
+
 def command(argv, Parser):
     p = Parser(prog='aws-fufu', description='FUFU IAM 與資料服務子集；原生欄位、預設拒絕與 explicit Deny。')
     services = p.add_subparsers(dest='service', required=True)
@@ -86,9 +110,10 @@ def command(argv, Parser):
     for key in AWS_OPERATIONS[a.service][a.native_operation].split():
         value = getattr(a, key)
         if value is None: continue
-        require(key not in params, 'INVALID_INPUT', '同一欄位不能同時由 JSON 與旗標指定。')
+        # Official CLI command-line values override the same cli-input-json field.
         if key in {'AttributeDefinitions', 'KeySchema'}:
             value = read_json(value[0]) if len(value) == 1 and (value[0].startswith(('[', 'file://'))) else [dict(item.split('=', 1) for item in v.split(',')) for v in value]
+        elif key in {'Attributes', 'Metadata', 'ExpressionAttributeNames', 'tags'} or key == 'Tags' and a.service == 'sqs': value = flat_map(value)
         elif key in JSON_FIELDS and (key != 'Key' or a.service == 'dynamodb'): value = read_json(value)
         if key == 'Body':
             file = Path(value.removeprefix('fileb://').removeprefix('file://'))
@@ -108,12 +133,12 @@ def command(argv, Parser):
         params.setdefault('Overwrite', False)
         params.setdefault('Type', 'String')
     if a.service == 'sqs' and 'QueueUrl' in params:
-        require(isinstance(params['QueueUrl'], str) and re.fullmatch(r'(?:fufu://sqs/|https://sqs\.[a-z0-9-]+\.fufu\.invalid/[0-9]{12}/)[A-Za-z0-9_-]{1,80}', params['QueueUrl']), 'INVALID_RESOURCE', 'QueueUrl 必須是 FUFU 租戶資源識別。')
+        require(isinstance(params['QueueUrl'], str) and re.fullmatch(r'(?:fufu://sqs/|https://sqs\.[a-z0-9-]+\.fufu\.invalid/[0-9]{12}/)[A-Za-z0-9_-]+(?:\.fifo)?', params['QueueUrl']) and len(params['QueueUrl'].rsplit('/', 1)[-1]) <= 80, 'INVALID_RESOURCE', 'QueueUrl 必須是 FUFU 租戶資源識別。')
     with ApiClient('aws', read_only=bool(re.match(r'^(Get|List|Describe|Query|Scan|BatchGet|Simulate|Head)', a.native_operation))) as api:
         if a.service == 's3api' and a.native_operation == 'PutObject' and isinstance(params.get('Body'), Path):
             from .object_transfer import upload_file
             return upload_file(api, params['Body'], params.get('Bucket'), params.get('Key'), content_type=params.get('ContentType'), metadata=params.get('Metadata'))
-        if a.service == 's3api' and a.native_operation == 'GetObject':
+        if a.service == 's3api' and a.native_operation == 'GetObject' and not (set(params) - {'Bucket', 'Key'}):
             from .object_transfer import download_file
             return download_file(api, a.outfile, params.get('Bucket'), params.get('Key'))
         result = api.request('POST', '/control/native', {'service': 's3' if a.service == 's3api' else a.service, 'operation': a.native_operation, 'params': params})

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/remote_compute.py

@@ -143,6 +143,10 @@ class RemoteBackend:
         with ApiClient(self.provider, read_only=True) as api:
             return api.request('GET', '/compute/services/' + segment(kind) + '/' + segment(service))
 
+    def configuration(self, kind, service):
+        with ApiClient(self.provider, read_only=True) as api:
+            return api.request('GET', '/compute/services/' + segment(kind) + '/' + segment(service) + '/configuration')
+
     def configure(self, kind, service, body):
         with ApiClient(self.provider) as api:
             return self.wait(api, api.request('PATCH', '/compute/services/' + segment(kind) + '/' + segment(service) + '/configuration', body))
@@ -155,10 +159,10 @@ class RemoteBackend:
         with ApiClient(self.provider) as api:
             return self.wait(api, api.request('DELETE', '/compute/services/' + segment(kind) + '/' + segment(service)), timeout=120)
 
-    def invoke(self, kind, service, payload, *, path='/', timeout=None):
+    def invoke(self, kind, service, payload, *, path='/', timeout=None, invocation_type='RequestResponse'):
         if timeout is None: timeout = compute_limits(kind)['timeoutSeconds']
         require(1 <= timeout <= compute_limits(kind)['timeoutSeconds'], 'INVALID_TIMEOUT', '遠端呼叫超過此服務的期限上限。')
         with ApiClient(self.provider) as api:
             response = api.request('POST', '/compute/services/' + segment(kind) + '/' + segment(service) + '/invoke',
-                                   {'payload': base64.b64encode(payload).decode(), 'path': path, 'timeout': timeout})
+                                   {'payload': base64.b64encode(payload).decode(), 'path': path, 'timeout': timeout, 'invocation_type': invocation_type})
             return response['status'], base64.b64decode(response['payload'], validate=True), response.get('function_error')

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli/runtime_sdk.py

@@ -51,11 +51,16 @@ def rpc(service, operation, params):
         code = body.get('code') if isinstance(body, dict) else None
         # Only documented error names are allowed to cross the SDK boundary.
         allowed = {'ConditionalCheckFailedException', 'ResourceNotFoundException', 'ResourceInUseException',
-                   'ValidationException', 'NoSuchKey', 'NoSuchBucket', 'ParameterNotFound',
-                   'ParameterAlreadyExists', 'QueueDoesNotExist'}
+                   'ValidationException', 'NoSuchKey', 'NoSuchBucket', 'NotFound', 'NotModified', 'ParameterNotFound',
+                   'ParameterAlreadyExists', 'ParameterVersionNotFound', 'QueueDoesNotExist', 'PreconditionFailed',
+                   'InvalidRange', 'InvalidParameterException', 'InvalidParameterValue', 'InvalidAttributeName',
+                   'InvalidAttributeValue', 'QueueNameExists', 'PurgeQueueInProgress', 'ReceiptHandleIsInvalid',
+                   'BatchEntryIdsNotDistinct', 'EmptyBatchRequest', 'BatchRequestTooLong', 'InvalidBatchEntryId',
+                   'TooManyEntriesInBatchRequest', 'InvalidMessageContents', 'AWS.SimpleQueueService.NonExistentQueue',
+                   'TooManyRequestsException', 'InvalidRequestContentException'}
         if code not in allowed:
             code = 'AccessDeniedException' if status in {401, 403} else 'NoSuchKey' if service == 's3' and operation == 'GetObject' and status == 404 else 'FufuUnsupportedCapability' if status == 422 else 'FufuServiceError'
-        if service in {'dynamodb', 's3', 'sqs', 'ssm', 'secretsmanager'}:
+        if service in {'dynamodb', 's3', 'sqs', 'ssm', 'secretsmanager', 'logs', 'lambda'}:
             from botocore.exceptions import ClientError
             raise ClientError({'Error': {'Code': code, 'Message': 'FUFU SDK request failed; see the documented capability subset'}, 'ResponseMetadata': {'HTTPStatusCode': status}}, operation) from None
         raise FufuCapabilityError('FUFU runtime request rejected (HTTP %s)' % status) from None
@@ -69,7 +74,7 @@ def _rpc(service, operation, params):
     token = os.environ.get('FUFU_WORKLOAD_TOKEN')
     if not token:
         raise FufuCapabilityError('FUFU workload credential is required')
-    if service == 's3' and operation in {'GetObject', 'PutObject'}:
+    if service == 's3' and operation in {'GetObject', 'PutObject'} and (operation == 'PutObject' or not (set(params) - {'Bucket', 'Key'})):
         from botocore.response import StreamingBody
         allowed = {'Bucket', 'Key'} | ({'Body', 'ContentType', 'Metadata', 'ContentLength'} if operation == 'PutObject' else set())
         if set(params) - allowed:
@@ -93,7 +98,7 @@ def _rpc(service, operation, params):
     if len(data) > 48 * 1024**2:
         raise FufuCapabilityError('FUFU SDK payload exceeds limit')
     req = Request(endpoint, data=data, headers={'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token}, method='POST')
-    with build_opener(ProxyHandler({}), NoRedirect()).open(req, timeout=90) as response:
+    with build_opener(ProxyHandler({}), NoRedirect()).open(req, timeout=930 if service == 'lambda' and operation == 'Invoke' else 90) as response:
         body = response.read(48 * 1024**2 + 1)
         if len(body) > 48 * 1024**2:
             raise FufuCapabilityError('FUFU SDK response exceeds limit')
@@ -150,6 +155,24 @@ def access_secret_version(name):
 _installed = False
 
 
+def modeled_response(value, shape):
+    """Restore SDK model types after the JSON gateway without changing application map keys."""
+    if value is None or shape is None: return value
+    if shape.type_name == 'blob':
+        if isinstance(value, dict) and set(value) == {'__fufu_bytes'}: value = value['__fufu_bytes']
+        return base64.b64decode(value, validate=True) if isinstance(value, str) else value
+    if shape.type_name == 'timestamp':
+        from botocore.utils import parse_to_aware_datetime
+        return parse_to_aware_datetime(value)
+    if shape.type_name == 'structure' and isinstance(value, dict):
+        return {key: modeled_response(item, shape.members.get(key)) for key, item in value.items()}
+    if shape.type_name == 'map' and isinstance(value, dict):
+        return {key: modeled_response(item, shape.value) for key, item in value.items()}
+    if shape.type_name == 'list' and isinstance(value, list):
+        return [modeled_response(item, shape.member) for item in value]
+    return value
+
+
 def install():
     global _installed
     if _installed or not os.environ.get('FUFU_RUNTIME_ENDPOINT'):
@@ -160,7 +183,7 @@ def install():
     original = botocore.session.Session.create_client
 
     def create_client(session, service_name, *args, **kwargs):
-        if service_name not in {'dynamodb', 's3', 'sqs', 'ssm', 'secretsmanager'}:
+        if service_name not in {'dynamodb', 's3', 'sqs', 'ssm', 'secretsmanager', 'logs', 'lambda'}:
             raise FufuCapabilityError('FUFU SDK service is not implemented: ' + service_name)
         kwargs['aws_access_key_id'] = 'FUFU_WORKLOAD'
         kwargs['aws_secret_access_key'] = 'fufu-transport-does-not-use-sigv4'
@@ -176,12 +199,21 @@ def install():
             context['fufu_params'] = params
 
         def call(model, context, **unused):
-            result = rpc(service_name, model.name, context['fufu_params'])
-            if service_name == 's3' and isinstance(result.get('Body'), dict):
-                data = base64.b64decode(result['Body']['__fufu_bytes'], validate=True)
-                result['Body'] = StreamingBody(io.BytesIO(data), len(data))
-            result['ResponseMetadata'] = {'HTTPStatusCode': 200, 'HTTPHeaders': {'x-fufu-mode': 'simplified'}, 'RetryAttempts': 0}
-            return AWSResponse('http://fufu-api', 200, {}, None), result
+            from botocore.exceptions import ClientError
+            try: result = rpc(service_name, model.name, context['fufu_params'])
+            except ClientError as error:
+                # Native SDK callers commonly catch client.exceptions.<Code>.
+                # Preserve the modeled exception, not just its JSON error code.
+                exception = client.exceptions.from_code(error.response['Error']['Code'])
+                raise exception(error.response, model.name) from None
+            result = modeled_response(result, model.output_shape)
+            for field in ['Body'] if service_name == 's3' else ['Payload'] if service_name == 'lambda' else []:
+                if isinstance(result.get(field), (bytes, bytearray)):
+                    data = result[field]; result[field] = StreamingBody(io.BytesIO(data), len(data))
+            status = 206 if service_name == 's3' and model.name == 'GetObject' and result.get('ContentRange') else 204 if service_name == 's3' and model.name in {'DeleteObject', 'DeleteBucket'} else 200
+            if service_name == 'lambda' and model.name == 'Invoke': status = result.get('StatusCode', 200)
+            result['ResponseMetadata'] = {'HTTPStatusCode': status, 'HTTPHeaders': {'x-fufu-mode': 'simplified'}, 'RetryAttempts': 0}
+            return AWSResponse('http://fufu-api', status, {}, None), result
 
         client.meta.events.register('before-parameter-build', capture)
         client.meta.events.register('before-call', call)

fufu_cloud_cli-0.9.6/src/fufu_cloud_cli/vendor/AWS-CLI-LICENSE.txt

@@ -0,0 +1,12 @@
+Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License"). You
+may not use this file except in compliance with the License. A copy of
+the License is located at
+
+    http://aws.amazon.com/apache2.0/
+
+or in the "license" file accompanying this file. This file is
+distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+ANY KIND, either express or implied. See the License for the specific
+language governing permissions and limitations under the License.

fufu_cloud_cli-0.9.6/src/fufu_cloud_cli/vendor/__init__.py

@@ -0,0 +1 @@
+"""Small third-party modules with their original licenses."""

fufu_cloud_cli-0.9.6/src/fufu_cloud_cli/vendor/aws_text.py

@@ -0,0 +1,117 @@
+# Copyright 2012-2014 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+
+#     http://aws.amazon.com/apache2.0/
+
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+
+def format_text(data, stream):
+    _format_text(data, stream)
+
+
+def _format_text(item, stream, identifier=None, scalar_keys=None):
+    if isinstance(item, dict):
+        _format_dict(scalar_keys, item, identifier, stream)
+    elif isinstance(item, list):
+        _format_list(item, identifier, stream)
+    else:
+        # If it's not a list or a dict, we just write the scalar
+        # value out directly.
+        stream.write(str(item))
+        stream.write('\n')
+
+
+def _format_list(item, identifier, stream):
+    if not item:
+        return
+    if any(isinstance(el, dict) for el in item):
+        all_keys = _all_scalar_keys(item)
+        for element in item:
+            _format_text(
+                element,
+                stream=stream,
+                identifier=identifier,
+                scalar_keys=all_keys,
+            )
+    elif any(isinstance(el, list) for el in item):
+        scalar_elements, non_scalars = _partition_list(item)
+        if scalar_elements:
+            _format_scalar_list(scalar_elements, identifier, stream)
+        for non_scalar in non_scalars:
+            _format_text(non_scalar, stream=stream, identifier=identifier)
+    else:
+        _format_scalar_list(item, identifier, stream)
+
+
+def _partition_list(item):
+    scalars = []
+    non_scalars = []
+    for element in item:
+        if isinstance(element, (list, dict)):
+            non_scalars.append(element)
+        else:
+            scalars.append(element)
+    return scalars, non_scalars
+
+
+def _format_scalar_list(elements, identifier, stream):
+    if identifier is not None:
+        for item in elements:
+            stream.write('%s\t%s\n' % (identifier.upper(), item))
+    else:
+        # For a bare list, just print the contents.
+        stream.write('\t'.join([str(item) for item in elements]))
+        stream.write('\n')
+
+
+def _format_dict(scalar_keys, item, identifier, stream):
+    scalars, non_scalars = _partition_dict(item, scalar_keys=scalar_keys)
+    if scalars:
+        if identifier is not None:
+            scalars.insert(0, identifier.upper())
+        stream.write('\t'.join(scalars))
+        stream.write('\n')
+    for new_identifier, non_scalar in non_scalars:
+        _format_text(item=non_scalar, stream=stream, identifier=new_identifier)
+
+
+def _all_scalar_keys(list_of_dicts):
+    keys_seen = set()
+    for item_dict in list_of_dicts:
+        for key, value in item_dict.items():
+            if not isinstance(value, (dict, list)):
+                keys_seen.add(key)
+    return list(sorted(keys_seen))
+
+
+def _partition_dict(item_dict, scalar_keys):
+    # Given a dictionary, partition it into two list based on the
+    # values associated with the keys.
+    # {'foo': 'scalar', 'bar': 'scalar', 'baz': ['not, 'scalar']}
+    # scalar = [('foo', 'scalar'), ('bar', 'scalar')]
+    # non_scalar = [('baz', ['not', 'scalar'])]
+    scalar = []
+    non_scalar = []
+    if scalar_keys is None:
+        # scalar_keys can have more than just the keys in the item_dict,
+        # but if user does not provide scalar_keys, we'll grab the keys
+        # from the current item_dict
+        for key, value in sorted(item_dict.items()):
+            if isinstance(value, (dict, list)):
+                non_scalar.append((key, value))
+            else:
+                scalar.append(str(value))
+    else:
+        for key in scalar_keys:
+            scalar.append(str(item_dict.get(key, '')))
+        remaining_keys = sorted(set(item_dict.keys()) - set(scalar_keys))
+        for remaining_key in remaining_keys:
+            non_scalar.append((remaining_key, item_dict[remaining_key]))
+    return scalar, non_scalar

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6/src/fufu_cloud_cli.egg-info}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.4
 Name: fufu-cloud-cli
-Version: 0.9.5
+Version: 0.9.6
 Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
 License-Expression: LicenseRef-Proprietary
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: PyYAML==6.0.3
+Requires-Dist: jmespath==1.1.0
 Requires-Dist: tomli==2.2.1; python_version < "3.11"
 Provides-Extra: yaml
 Requires-Dist: PyYAML==6.0.3; extra == "yaml"
@@ -26,6 +27,11 @@ Dynamic: license-file
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.6 新增 AWS Lambda Event／DryRun、configuration 更新、JMESPath `--query`、
+json／text／yaml 輸出、SQS FIFO／batch、SSM path／history、DynamoDB Binary
+及 CloudWatch Logs。需要配套後端；Event 202 只表示持久化接受，並非 handler
+執行完成。仍無完整 AWS CLI 自動分頁、table、Layers／Image／aliases 或全量 IAM。
+
 0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
 支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
 insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
@@ -65,7 +71,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.5'
+pip install 'fufu-cloud-cli==0.9.6'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -236,10 +242,11 @@ CLI 無法判斷任意原始碼或 ZIP 內的資料是否可以分享。
 | --- | --- |
 | Cloud Run | 已核准 HTTP 容器或 API 自動建置 Python ASGI 來源；支援配置後的 HTTPS 入口、Invoker policy；無 autoscaling、traffic splitting、Jobs |
 | Cloud Run functions / Functions Gen 1 | Python 3.12 HTTP 函式；Gen 1 為相同 HTTP runtime 的模擬子集，無背景事件 |
-| AWS Lambda | Python 3.10 / 3.12 ZIP、同步 invoke、程式碼更新、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 payload 6 MiB |
+| AWS Lambda | Python 3.10 / 3.12 ZIP、configuration、RequestResponse／Event／DryRun、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 6 MiB／Event 1 MiB；Event 為單機持久化重試，無 destinations／DLQ 或正式 autoscaling |
 | GCS | bucket／object 子集、分段上傳／串流下載／binary cat、generation／metageneration 條件、metadata describe/update、前綴分頁；8 KiB custom metadata；無 versioning、signed URL、bucket IAM、一般 SDK 或 GCS IaC 資源 |
 | S3 | bucket 與 object 子集；分段上傳／串流下載，受主機磁碟限制；已驗證超過 1 GiB，無 versioning / signed URL |
-| DynamoDB / SQS / SSM | 明列資料操作；無完整交易、Streams、FIFO 或 KMS / SecureString |
+| DynamoDB / SQS / SSM | 明列資料操作、Binary、FIFO group／dedup／batch、SSM 版本／path／history；無交易／TTL／Streams、SQS 背景 poller／DLQ／加密、KMS／SecureString |
+| CloudWatch Logs | group／stream、put/get/filter events、retention 設定、CLI／UI／boto3；無 stdout 自動收集、Insights、subscriptions 或 retention 刪除保證 |
 | AWS IAM / GCP IAM | 租戶內 role / service account / policy 子集；default deny、限定 session；無原生雲端全量 IAM 語義 |
 | API Gateway / Serverless profile | 簡化 HTTP Lambda proxy 和明確來源清單；不執行 plugins / CloudFormation |
 | Azure | account 與資源群組目錄；尚無 Azure Functions 或其他 Azure runtime |

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli.egg-info/SOURCES.txt

@@ -5,6 +5,8 @@ pyproject.toml
 src/fufu_cloud_cli/__init__.py
 src/fufu_cloud_cli/__main__.py
 src/fufu_cloud_cli/api_backend.py
+src/fufu_cloud_cli/aws_errors.py
+src/fufu_cloud_cli/aws_output.py
 src/fufu_cloud_cli/bigquery.py
 src/fufu_cloud_cli/capabilities.json
 src/fufu_cloud_cli/capacity.py
@@ -49,4 +51,7 @@ src/fufu_cloud_cli/terraform_bridge/common.py
 src/fufu_cloud_cli/terraform_bridge/google.py
 src/fufu_cloud_cli/terraform_bridge/google_pubsub.py
 src/fufu_cloud_cli/terraform_bridge/remote_state.py
-src/fufu_cloud_cli/terraform_bridge/runner.py
+src/fufu_cloud_cli/terraform_bridge/runner.py
+src/fufu_cloud_cli/vendor/AWS-CLI-LICENSE.txt
+src/fufu_cloud_cli/vendor/__init__.py
+src/fufu_cloud_cli/vendor/aws_text.py

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.6}/src/fufu_cloud_cli.egg-info/requires.txt

@@ -1,4 +1,5 @@
 PyYAML==6.0.3
+jmespath==1.1.0
 
 [:python_version < "3.11"]
 tomli==2.2.1