fufu-cloud-cli 0.9.5__tar.gz → 0.9.7__tar.gz

{fufu_cloud_cli-0.9.5/src/fufu_cloud_cli.egg-info → fufu_cloud_cli-0.9.7}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.4
 Name: fufu-cloud-cli
-Version: 0.9.5
+Version: 0.9.7
 Summary: FUFU Cloud CLI for tenant-scoped mock cloud development and deployment
 License-Expression: LicenseRef-Proprietary
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: PyYAML==6.0.3
+Requires-Dist: jmespath==1.1.0
 Requires-Dist: tomli==2.2.1; python_version < "3.11"
 Provides-Extra: yaml
 Requires-Dist: PyYAML==6.0.3; extra == "yaml"
@@ -26,6 +27,20 @@ Dynamic: license-file
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.7 補齊 Lambda 五種 `wait` 指令、設定／程式碼更新的 `--revision-id`，
+以及常用設定的 `--cli-input-json` 和 `Variables={KEY=value}` shorthand。
+過期 RevisionId 回 `PreconditionFailedException`，保留原部署；CLI 仍等待
+部署完成才返回，waiter 有有限次數與失敗退出碼 255。程式碼雜湊、大小、
+最新修改時間與執行架構來自實際部署；預設記憶體為 128 MiB、期限 3 秒。
+需要配套 Console／compute worker 更新。JSON 只接受明列欄位，ZIP 另以
+`--zip-file fileb://...` 傳入；不支援 Code.S3Bucket、Layers、Image、版本
+或 aliases。Function URL 的無效 AWS 簽名與匿名呼叫回 403。
+
+0.9.6 新增 AWS Lambda Event／DryRun、configuration 更新、JMESPath `--query`、
+json／text／yaml 輸出、SQS FIFO／batch、SSM path／history、DynamoDB Binary
+及 CloudWatch Logs。需要配套後端；Event 202 只表示持久化接受，並非 handler
+執行完成。仍無完整 AWS CLI 自動分頁、table、Layers／Image／aliases 或全量 IAM。
+
 0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
 支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
 insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
@@ -65,7 +80,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.5'
+pip install 'fufu-cloud-cli==0.9.7'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -236,10 +251,11 @@ CLI 無法判斷任意原始碼或 ZIP 內的資料是否可以分享。
 | --- | --- |
 | Cloud Run | 已核准 HTTP 容器或 API 自動建置 Python ASGI 來源；支援配置後的 HTTPS 入口、Invoker policy；無 autoscaling、traffic splitting、Jobs |
 | Cloud Run functions / Functions Gen 1 | Python 3.12 HTTP 函式；Gen 1 為相同 HTTP runtime 的模擬子集，無背景事件 |
-| AWS Lambda | Python 3.10 / 3.12 ZIP、同步 invoke、程式碼更新、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 payload 6 MiB |
+| AWS Lambda | Python 3.10 / 3.12 ZIP、configuration、RequestResponse／Event／DryRun、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 6 MiB／Event 1 MiB；Event 為單機持久化重試，無 destinations／DLQ 或正式 autoscaling |
 | GCS | bucket／object 子集、分段上傳／串流下載／binary cat、generation／metageneration 條件、metadata describe/update、前綴分頁；8 KiB custom metadata；無 versioning、signed URL、bucket IAM、一般 SDK 或 GCS IaC 資源 |
 | S3 | bucket 與 object 子集；分段上傳／串流下載，受主機磁碟限制；已驗證超過 1 GiB，無 versioning / signed URL |
-| DynamoDB / SQS / SSM | 明列資料操作；無完整交易、Streams、FIFO 或 KMS / SecureString |
+| DynamoDB / SQS / SSM | 明列資料操作、Binary、FIFO group／dedup／batch、SSM 版本／path／history；無交易／TTL／Streams、SQS 背景 poller／DLQ／加密、KMS／SecureString |
+| CloudWatch Logs | group／stream、put/get/filter events、retention 設定、CLI／UI／boto3；無 stdout 自動收集、Insights、subscriptions 或 retention 刪除保證 |
 | AWS IAM / GCP IAM | 租戶內 role / service account / policy 子集；default deny、限定 session；無原生雲端全量 IAM 語義 |
 | API Gateway / Serverless profile | 簡化 HTTP Lambda proxy 和明確來源清單；不執行 plugins / CloudFormation |
 | Azure | account 與資源群組目錄；尚無 Azure Functions 或其他 Azure runtime |

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.7}/README.md

@@ -4,6 +4,20 @@
 `gcloud-fufu`、`az-fufu`、`wrangler-fufu`、`bq-fufu`。這是 AWS、Google Cloud、Azure 與 Cloudflare 的**明確子集**，
 只供 FUFU mock 環境使用；不會把部署轉送到正式雲端。
 
+0.9.7 補齊 Lambda 五種 `wait` 指令、設定／程式碼更新的 `--revision-id`，
+以及常用設定的 `--cli-input-json` 和 `Variables={KEY=value}` shorthand。
+過期 RevisionId 回 `PreconditionFailedException`，保留原部署；CLI 仍等待
+部署完成才返回，waiter 有有限次數與失敗退出碼 255。程式碼雜湊、大小、
+最新修改時間與執行架構來自實際部署；預設記憶體為 128 MiB、期限 3 秒。
+需要配套 Console／compute worker 更新。JSON 只接受明列欄位，ZIP 另以
+`--zip-file fileb://...` 傳入；不支援 Code.S3Bucket、Layers、Image、版本
+或 aliases。Function URL 的無效 AWS 簽名與匿名呼叫回 403。
+
+0.9.6 新增 AWS Lambda Event／DryRun、configuration 更新、JMESPath `--query`、
+json／text／yaml 輸出、SQS FIFO／batch、SSM path／history、DynamoDB Binary
+及 CloudWatch Logs。需要配套後端；Event 202 只表示持久化接受，並非 handler
+執行完成。仍無完整 AWS CLI 自動分頁、table、Layers／Image／aliases 或全量 IAM。
+
 0.9.5 新增 `gcloud-fufu scheduler`、`tasks`、`logging` 與 `bq-fufu`。
 支援同租戶已登錄 HTTP 應用的排程／背景任務、BigQuery dataset／table、
 insertAll／SELECT 與持久化日誌。`fufu_cloud_cli.gcp_sdk` 提供官方 Python
@@ -43,7 +57,7 @@ Python 預設識別而遇到 Cloudflare HTTP 403／1010。識別標頭不取代
 ## Cloudflare 前端部署與 R2
 
 ```bash
-pip install 'fufu-cloud-cli==0.9.5'
+pip install 'fufu-cloud-cli==0.9.7'
 export FUFU_CLOUDFLARE_CREDENTIAL_FILE=/run/secrets/fufu-cloudflare.json
 wrangler-fufu capabilities
 wrangler-fufu pages project create frontend --production-branch main
@@ -214,10 +228,11 @@ CLI 無法判斷任意原始碼或 ZIP 內的資料是否可以分享。
 | --- | --- |
 | Cloud Run | 已核准 HTTP 容器或 API 自動建置 Python ASGI 來源；支援配置後的 HTTPS 入口、Invoker policy；無 autoscaling、traffic splitting、Jobs |
 | Cloud Run functions / Functions Gen 1 | Python 3.12 HTTP 函式；Gen 1 為相同 HTTP runtime 的模擬子集，無背景事件 |
-| AWS Lambda | Python 3.10 / 3.12 ZIP、同步 invoke、程式碼更新、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 payload 6 MiB |
+| AWS Lambda | Python 3.10 / 3.12 ZIP、configuration、RequestResponse／Event／DryRun、BUFFERED Function URL；ZIP 50 MiB／解壓 250 MiB，同步 6 MiB／Event 1 MiB；Event 為單機持久化重試，無 destinations／DLQ 或正式 autoscaling |
 | GCS | bucket／object 子集、分段上傳／串流下載／binary cat、generation／metageneration 條件、metadata describe/update、前綴分頁；8 KiB custom metadata；無 versioning、signed URL、bucket IAM、一般 SDK 或 GCS IaC 資源 |
 | S3 | bucket 與 object 子集；分段上傳／串流下載，受主機磁碟限制；已驗證超過 1 GiB，無 versioning / signed URL |
-| DynamoDB / SQS / SSM | 明列資料操作；無完整交易、Streams、FIFO 或 KMS / SecureString |
+| DynamoDB / SQS / SSM | 明列資料操作、Binary、FIFO group／dedup／batch、SSM 版本／path／history；無交易／TTL／Streams、SQS 背景 poller／DLQ／加密、KMS／SecureString |
+| CloudWatch Logs | group／stream、put/get/filter events、retention 設定、CLI／UI／boto3；無 stdout 自動收集、Insights、subscriptions 或 retention 刪除保證 |
 | AWS IAM / GCP IAM | 租戶內 role / service account / policy 子集；default deny、限定 session；無原生雲端全量 IAM 語義 |
 | API Gateway / Serverless profile | 簡化 HTTP Lambda proxy 和明確來源清單；不執行 plugins / CloudFormation |
 | Azure | account 與資源群組目錄；尚無 Azure Functions 或其他 Azure runtime |

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.7}/pyproject.toml

@@ -4,11 +4,11 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fufu-cloud-cli"
-version = "0.9.5"
+version = "0.9.7"
 description = "FUFU Cloud CLI for tenant-scoped mock cloud development and deployment"
 readme = "README.md"
 requires-python = ">=3.10"
-dependencies = ["PyYAML==6.0.3", "tomli==2.2.1; python_version<'3.11'"]
+dependencies = ["PyYAML==6.0.3", "jmespath==1.1.0", "tomli==2.2.1; python_version<'3.11'"]
 license = "LicenseRef-Proprietary"
 license-files = ["LICENSE"]
 
@@ -30,4 +30,4 @@ bq-fufu = "fufu_cloud_cli.cli:bq_main"
 where = ["src"]
 
 [tool.setuptools.package-data]
-fufu_cloud_cli = ["capabilities.json", "pulumi-endpoints.json", "runtime/*/Dockerfile", "runtime/ingress/proxy.py"]
+fufu_cloud_cli = ["capabilities.json", "pulumi-endpoints.json", "runtime/*/Dockerfile", "runtime/ingress/proxy.py", "vendor/AWS-CLI-LICENSE.txt"]

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.7}/src/fufu_cloud_cli/__init__.py

@@ -1,3 +1,3 @@
 """FUFU CLI 與本機部署工具；相容範圍見 capabilities.json。"""
 
-__version__ = "0.9.5"
+__version__ = "0.9.7"

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.7}/src/fufu_cloud_cli/api_backend.py

@@ -184,6 +184,22 @@ class ApiClient:
                 return json.loads(raw)
         except HTTPError as exc:
             status = exc.code
+            if self.provider == 'aws' and '/compute/' in path and status in {400, 412}:
+                try:
+                    value = json.loads(exc.read(4096))
+                    code = value.get('error', {}).get('code') if isinstance(value, dict) and isinstance(value.get('error'), dict) else None
+                    if code in {'PreconditionFailedException', 'InvalidRequestContentException'}:
+                        raise FufuError(code, 'Lambda 操作遭拒；未輸出原始設定或錯誤內容。') from None
+                except (ValueError, OSError): pass
+                finally: exc.close()
+            if self.provider == 'aws' and '/control/native' in path:
+                from .aws_errors import AWS_ERRORS
+                try:
+                    value = json.loads(exc.read(4096))
+                    code = value.get('code') if isinstance(value, dict) else None
+                    if code in AWS_ERRORS: raise FufuError(code, 'AWS 操作遭拒；未輸出原始錯誤內容。') from None
+                except (ValueError, OSError): pass
+                finally: exc.close()
             exc.close()
             codes = {401: "AUTHENTICATION_FAILED", 403: "ACCESS_DENIED", 404: "RESOURCE_NOT_FOUND", 409: "RESOURCE_CONFLICT", 410: "UPLOAD_EXPIRED", 412: "PRECONDITION_FAILED", 413: "PAYLOAD_LIMIT", 429: "RATE_LIMITED", 507: "STORAGE_CAPACITY"}
             if status == 507: raise FufuError('STORAGE_CAPACITY', 'FUFU 主機磁碟容量不足；這是目前可用空間的限制，並非雲端物件大小上限。') from None

fufu_cloud_cli-0.9.7/src/fufu_cloud_cli/aws_errors.py

@@ -0,0 +1,6 @@
+"""Only documented provider error codes may cross the public transport boundary."""
+AWS_ERRORS = frozenset('''ConditionalCheckFailedException ResourceNotFoundException ResourceInUseException ValidationException
+NoSuchKey NoSuchBucket NotFound NotModified ParameterNotFound ParameterAlreadyExists ParameterVersionNotFound QueueDoesNotExist
+PreconditionFailed InvalidRange InvalidParameterException InvalidParameterValue InvalidAttributeName InvalidAttributeValue QueueNameExists
+PurgeQueueInProgress ReceiptHandleIsInvalid BatchEntryIdsNotDistinct EmptyBatchRequest BatchRequestTooLong InvalidBatchEntryId
+TooManyEntriesInBatchRequest InvalidMessageContents AWS.SimpleQueueService.NonExistentQueue TooManyRequestsException InvalidRequestContentException'''.split())

fufu_cloud_cli-0.9.7/src/fufu_cloud_cli/aws_lambda.py

@@ -0,0 +1,125 @@
+"""Lambda command inputs and bounded AWS waiter semantics for the supported subset."""
+import json
+import re
+import time
+
+from .aws_output import configuration
+from .errors import FufuError, require
+
+
+WAITERS = {
+    'function-exists': ('describe', None, None, 1, 20),
+    'function-active': ('configuration', 'State', 'Active', 5, 60),
+    'function-active-v2': ('describe', 'State', 'Active', 1, 300),
+    'function-updated': ('configuration', 'LastUpdateStatus', 'Successful', 5, 60),
+    'function-updated-v2': ('describe', 'LastUpdateStatus', 'Successful', 1, 300),
+}
+
+
+def wait(backend, waiter, name):
+    method, field, success, delay, attempts = WAITERS[waiter]
+    deadline = time.monotonic() + delay * attempts
+    for attempt in range(attempts):
+        try:
+            value = configuration(getattr(backend, method)('aws-lambda-sync', name))
+        except FufuError as error:
+            if waiter != 'function-exists' or error.code not in {'NOT_FOUND', 'RESOURCE_NOT_FOUND', 'ResourceNotFoundException'}:
+                raise FufuError('WAITER_FAILED', '等待服務時查詢失敗；請確認權限與服務狀態。', 255) from None
+        else:
+            if field is None or value.get(field) == success: return
+            if value.get(field) == 'Failed':
+                raise FufuError('WAITER_FAILED', '服務回報失敗狀態；未達到等待條件。', 255)
+        remaining = deadline - time.monotonic()
+        if attempt + 1 == attempts or remaining <= 0: break
+        time.sleep(min(delay, remaining))
+    raise FufuError('WAITER_FAILED', '等待超過期限；服務操作可能仍在執行，請重新查詢。', 255)
+
+
+def environment(value):
+    """Native JSON or Variables={KEY=value,...}; malformed/ambiguous input fails closed."""
+    from .control import read_json
+    if value.startswith(('{', 'file://')):
+        return read_json(value)
+    require(value.startswith('Variables={') and value.endswith('}'), 'INVALID_INPUT',
+            'Environment 請使用 JSON、file:// JSON 或 Variables={KEY=value,...}。')
+    text = value[len('Variables={'):-1]
+    values = {}; position = 0
+    # Quotes and escaped commas are supported without shell execution or expansion.
+    pattern = re.compile(r'\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*')
+    while position < len(text):
+        matched = pattern.match(text, position)
+        require(matched is not None, 'INVALID_INPUT', 'Environment shorthand 格式無效。')
+        key = matched[1]; position = matched.end(); chars = []; quote = None
+        require(key not in values, 'INVALID_INPUT', 'Environment 不可重複指定相同變數。')
+        if position < len(text) and text[position] in {'"', "'"}:
+            quote = text[position]; position += 1
+        closed = quote is None
+        while position < len(text):
+            character = text[position]; position += 1
+            if character == '\\':
+                require(position < len(text), 'INVALID_INPUT', 'Environment 跳脫序列未完成。')
+                chars.append(text[position]); position += 1
+            elif quote and character == quote:
+                closed = True
+                while position < len(text) and text[position].isspace(): position += 1
+                require(position == len(text) or text[position] == ',', 'INVALID_INPUT', 'Environment 引號後有多餘內容。')
+                if position < len(text): position += 1
+                break
+            elif not quote and character == ',': break
+            else:
+                require(quote is not None or character not in {'{', '}', '[', ']', '"', "'"},
+                        'UNSUPPORTED_ARGUMENT', '複雜 Environment 值請使用 JSON 或引號。')
+                chars.append(character)
+        require(closed, 'INVALID_INPUT', 'Environment 引號未關閉。')
+        values[key] = ''.join(chars) if quote else ''.join(chars).rstrip()
+        require(position != len(text) or not text.endswith(','), 'INVALID_INPUT', 'Environment 不可有結尾逗號。')
+    return {'Variables': values}
+
+
+FIELDS = {
+    'FunctionName': ('--function-name', str), 'Runtime': ('--runtime', str),
+    'Handler': ('--handler', str), 'Role': ('--role', str),
+    'Environment': ('--environment', dict), 'MemorySize': ('--memory-size', int),
+    'Timeout': ('--timeout', int), 'EphemeralStorage': ('--ephemeral-storage', dict),
+    'RevisionId': ('--revision-id', str), 'InvocationType': ('--invocation-type', str),
+    'Payload': ('--payload', str),
+}
+INPUTS = {
+    'create-function': {'FunctionName', 'Runtime', 'Handler', 'Role', 'Environment', 'MemorySize', 'Timeout', 'EphemeralStorage'},
+    'update-function-code': {'FunctionName', 'RevisionId'},
+    'update-function-configuration': {'FunctionName', 'Role', 'Environment', 'MemorySize', 'Timeout', 'EphemeralStorage', 'RevisionId'},
+    'get-function': {'FunctionName'}, 'get-function-configuration': {'FunctionName'},
+    'delete-function': {'FunctionName'}, 'invoke': {'FunctionName', 'InvocationType', 'Payload'},
+    'list-functions': set(),
+}
+
+
+def input_json(argv):
+    """Expand validated native JSON before argparse; explicit flags take precedence."""
+    from .control import read_json
+    if len(argv) < 2: return argv
+    rest = []; documents = []; index = 2
+    while index < len(argv):
+        flag, separator, value = argv[index].partition('=')
+        if flag == '--cli-input-json':
+            if not separator:
+                index += 1
+                require(index < len(argv), 'INVALID_INPUT', 'cli-input-json 缺少值。')
+                value = argv[index]
+            documents.append(value)
+        else: rest.append(argv[index])
+        index += 1
+    if not documents: return argv
+    require(len(documents) == 1 and argv[1] in INPUTS, 'UNSUPPORTED_ARGUMENT', '此操作不支援指定的 cli-input-json。')
+    value = read_json(documents[0])
+    require(isinstance(value, dict) and not value.keys() - INPUTS[argv[1]], 'UNSUPPORTED_ARGUMENT',
+            'Lambda JSON 含未支援的欄位；ZIP 請另用 --zip-file fileb:// 傳入，未執行操作。')
+    explicit = {arg.partition('=')[0] for arg in rest if arg.startswith('--')}
+    # FUFU memory alias selects the same official field.
+    if '--memory' in explicit: explicit.add('--memory-size')
+    expanded = []
+    for key, item in value.items():
+        flag, expected = FIELDS[key]
+        require(type(item) is expected, 'INVALID_INPUT', 'Lambda JSON 欄位型別無效。')
+        if flag not in explicit: expanded.extend([flag + '=' + (json.dumps(item) if expected is dict else str(item))])
+    return argv[:2] + expanded + rest

fufu_cloud_cli-0.9.7/src/fufu_cloud_cli/aws_output.py

@@ -0,0 +1,73 @@
+"""AWS JMESPath and native text formatting over the supported response subset."""
+import io
+import json
+import base64
+
+import jmespath
+from jmespath.exceptions import JMESPathError
+
+from .errors import FufuError, require
+from .vendor.aws_text import format_text
+
+
+def expression(value):
+    require(isinstance(value, str) and 0 < len(value) <= 65536,
+            'INVALID_QUERY', 'AWS query 必須為非空 JMESPath 運算式，最多 65536 字元。')
+    try:
+        return jmespath.compile(value)
+    except JMESPathError:
+        raise FufuError('INVALID_QUERY', '無效的 AWS JMESPath query；未執行操作。', 2) from None
+
+
+def configuration(value):
+    if 'FunctionName' in value:
+        return value
+    resources = value.get('resources', {})
+    fields = {'FunctionName': value.get('name'), 'FunctionArn': value.get('functionArn'),
+              'Runtime': value.get('runtime'), 'Handler': value.get('handler'), 'Role': value.get('role'),
+              'MemorySize': resources.get('memoryMiB'), 'Timeout': resources.get('timeoutSeconds'),
+              'RevisionId': value.get('revision'), 'LastModified': value.get('lastModified', value.get('createdAt'))}
+    result = {key: item for key, item in fields.items() if item is not None}
+    if resources.get('tmpMiB') is not None: result['EphemeralStorage'] = {'Size': resources['tmpMiB']}
+    if value.get('status') == 'running': result.update(State='Active', LastUpdateStatus='Successful')
+    if value.get('state'): result['State'] = value['state']
+    if value.get('lastUpdateStatus'): result['LastUpdateStatus'] = value['lastUpdateStatus']
+    result.update(Version='$LATEST', PackageType='Zip')
+    if value.get('architecture'): result['Architectures'] = [value['architecture']]
+    source = value.get('source', {})
+    if source.get('sha256'): result['CodeSha256'] = base64.b64encode(bytes.fromhex(source['sha256'])).decode()
+    if source.get('size') is not None: result['CodeSize'] = source['size']
+    if 'env' in value: result['Environment'] = {'Variables': value['env']}
+    result['Fufu'] = {key: value[key] for key in ['mode', 'backend', 'readiness', 'serviceId', 'publicAccess', 'iamEnforced'] if key in value}
+    result['Fufu'].setdefault('mode', 'simplified')
+    return result
+
+
+def native(value, argv):
+    if argv[:1] != ['lambda'] or len(argv) < 2 or not isinstance(value, dict):
+        return value
+    action = argv[1]
+    if action == 'list-functions':
+        return {**value, 'Functions': [configuration(item) for item in value.get('Functions', [])]}
+    if action == 'get-function':
+        return {'Configuration': configuration(value), 'Fufu': {'mode': 'simplified', 'codeDownloadAvailable': False}}
+    if action in {'create-function', 'update-function-code', 'get-function-configuration', 'update-function-configuration'}:
+        return configuration(value)
+    if action == 'delete-function': return None
+    return value
+
+
+def render(value, output='json', query=None):
+    require(output in {'json', 'text', 'yaml', 'off'}, 'UNSUPPORTED_FORMAT',
+            'AWS 輸出支援 json、text、yaml、off；table 與 yaml-stream 尚未支援。')
+    try:
+        value = query.search(value) if query else value
+    except JMESPathError:
+        raise FufuError('INVALID_QUERY', 'AWS query 無法套用到回應；操作可能已完成，請先查詢資源狀態。', 2) from None
+    if output == 'off': return ''
+    if output == 'text':
+        stream = io.StringIO(); format_text(value, stream); return stream.getvalue()
+    if output == 'yaml':
+        import yaml
+        return yaml.safe_dump(value, allow_unicode=True, sort_keys=False)
+    return json.dumps(value, ensure_ascii=False, indent=4) + '\n'

{fufu_cloud_cli-0.9.5 → fufu_cloud_cli-0.9.7}/src/fufu_cloud_cli/capabilities.json

@@ -103,6 +103,10 @@
       "operations": [
         "create-function-python310-python312-zip",
         "invoke-RequestResponse",
+        "invoke-Event-api-only",
+        "invoke-DryRun-api-only",
+        "get-function-configuration",
+        "update-function-configuration",
         "get-function",
         "list-functions",
         "delete-function",
@@ -113,7 +117,7 @@
         "AWS-IAM-inline-policy-subset",
         "boto3-data-transport-subset",
         "no-managed-timeout-equivalence",
-        "no-async-Invoke",
+        "async-API-only-single-host-queue-no-destinations-or-DLQ",
         "remote-ZIP-50MiB-expanded-250MiB",
         "synchronous-payload-6MiB",
         "workload-lease-24h-renewable-while-active",
@@ -222,9 +226,12 @@
         "no-Entra-STS"
       ]
     },
+    "aws-cloudwatch-logs": {"status": "implemented", "backend": "api", "mode": "simplified", "operations": ["log-group-crud", "log-stream-crud", "put-get-filter-events", "retention-policy", "CLI-UI-boto3"], "limitations": ["no-automatic-stdout-collection", "simple-text-filters-only", "no-Insights-subscriptions-or-KMS", "no-guaranteed-retention-deletion", "service-page-tokens-no-CLI-auto-pagination"]},
+    "aws-lambda-async": {"status": "implemented", "backend": "api", "mode": "simplified", "operations": ["invoke-Event", "invoke-DryRun", "CLI-UI-boto3-Invoke"], "limitations": ["1MiB-payload", "single-host-SQLite-two-dispatchers", "at-least-once", "two-handler-retries-60s-120s", "system-retries-up-to-6h", "no-destinations-or-DLQ", "no-AWS-scaling-or-managed-timeout-equivalence", "10000-events-or-512MiB-encoded-queue-per-tenant"]},
+    "aws-cli-output": {"status": "implemented", "mode": "simplified", "operations": ["JMESPath-query", "json", "text", "yaml"], "limitations": ["no-table-or-yaml-stream", "no-full-CLI-auto-pagination", "Lambda-response-subset-no-Code-download"]},
     "aws-data-services": {
       "status": "partial",
-      "reason": "DynamoDB、S3、SQS、SSM 已接 CLI 與 boto3；事件僅 SQS 手動 drain，其他服务不推定可用。"
+      "reason": "DynamoDB、S3、SQS、SSM、CloudWatch Logs 與 Lambda Invoke 已接 CLI／boto3 明列子集；Lambda Event 可背景執行，SQS mapping 仍需手動 drain。"
     },
     "gcp-data-services": {
       "status": "partial",
@@ -281,6 +288,10 @@
         "list-queues",
         "delete-queue",
         "send-message",
+        "send-message-batch",
+        "delete-message-batch",
+        "change-message-visibility-batch",
+        "purge-queue",
         "receive-message",
         "delete-message",
         "get-queue-attributes",
@@ -291,13 +302,13 @@
         "terraform-lifecycle"
       ],
       "limitations": [
-        "standard-queues",
+        "Standard-and-FIFO-queues",
         "message-1MiB",
         "long-poll-up-to-20s",
         "receive-max-10",
         "fufu-QueueUrl",
-        "no-FIFO",
-        "no-KMS-or-SQS-encryption",
+        "no-DLQ-or-standard-fair-queues",
+        "SSE-default-false-unlike-AWS-true-no-KMS",
         "manual-Lambda-drain-only",
         "no-background-poller"
       ]
@@ -309,6 +320,10 @@
         "put-parameter",
         "get-parameter",
         "get-parameters",
+        "get-parameters-by-path",
+        "get-parameter-history",
+        "get-parameter-version-selector",
+        "delete-parameters",
         "delete-parameter",
         "describe-parameters-exact-name",
         "list-tags-for-resource",
@@ -748,7 +763,8 @@
       "mode": "simplified",
       "limitations": [
         "botocore-event-transport",
-        "DynamoDB-S3-SQS-SSM-only",
+        "DynamoDB-S3-SQS-SSM-SecretsManager-Logs-Lambda-Invoke-subsets",
+        "modeled-binary-timestamps-and-service-exceptions",
         "FUFU-token-not-SigV4",
         "no-real-cloud-fallback",
         "no-presigned-URLs"