[CI-only, do not merge] RDS Data SQL engine — CI validation against main

.claude/settings.local.json

@@ -40,7 +40,10 @@
       "WebFetch(domain:blog.localstack.cloud)",
       "WebFetch(domain:github.com)",
       "WebFetch(domain:pkg.go.dev)",
-      "mcp__playwright__browser_run_code_unsafe"
+      "mcp__playwright__browser_run_code_unsafe",
+      "Bash(git checkout *)",
+      "Bash(bd list *)",
+      "Bash(bd show *)"
     ]
   }
 }

.github/workflows/ci.yml

@@ -281,7 +281,7 @@ jobs:
           tofu_version: "1.11.6"
 
       - name: Cache OpenTofu providers
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: /tmp/gopherstack-tofu-provider-cache
           key: tofu-providers-${{ runner.os }}-aws5
@@ -339,7 +339,7 @@ jobs:
 
       - name: Install Playwright Browsers
         run: |
-          go run github.com/playwright-community/playwright-go/cmd/playwright@latest install --with-deps chromium
+          go run github.com/playwright-community/playwright-go/cmd/playwright@v0.5700.1 install --with-deps chromium
 
       - name: Run E2E Tests
         run: |

PARITY_SWEEP.md

@@ -0,0 +1,163 @@
+# Parity Sweep — single-PR tracking
+
+Single accumulating branch addressing every `### <service>` finding in `parity.md`.
+Polecats (sonnet) branch off `parity-sweep`, ≤3 concurrent; mayor aggregates each completed branch here.
+
+**154 services** · P1 (≥25 finding-lines) first.
+
+| # | service | prio | parity.md lines | status |
+|---|---|---|---|---|
+| 1 | accessanalyzer | P1 | 180-194, 2675-2685 | ☐ |
+| 2 | athena | P1 | 283-288, 2844-2869 | ☐ |
+| 3 | codebuild | P1 | 385-399, 3026-3036 | ☐ |
+| 4 | codecommit | P1 | 400-415, 3037-3046 | ☐ |
+| 5 | cognitoidp | P1 | 479-496, 3096-3106 | ☐ |
+| 6 | comprehend | P1 | 497-513, 3107-3118 | ☐ |
+| 7 | databrew | P1 | 514-528, 3119-3130 | ☐ |
+| 8 | datasync | P1 | 529-541, 3131-3142 | ☐ |
+| 9 | dax | P1 | 135-179, 2620-2674 | ☐ |
+| 10 | detective | P1 | 542-556, 3143-3155 | ☐ |
+| 11 | directoryservice | P1 | 557-570, 3156-3167 | ☐ |
+| 12 | dlm | P1 | 571-582, 3168-3180 | ☐ |
+| 13 | dms | P1 | 583-597, 3181-3192 | ☐ |
+| 14 | docdb | P1 | 598-616, 3193-3202 | ☐ |
+| 15 | dynamodb | P1 | 77-112, 2493-2584 | ✅ |
+| 16 | dynamodbstreams | P1 | 113-134, 2585-2619 | ☐ |
+| 17 | ec2 | P1 | 617-631, 3203-3213 | ✅ |
+| 18 | ecr | P1 | 632-647, 3214-3223 | ✅ |
+| 19 | elasticbeanstalk | P1 | 700-714, 3265-3274 | ☐ |
+| 20 | elbv2 | P1 | 746-765, 3290-3296 | ☐ |
+| 21 | emr | P1 | 766-784, 3297-3303 | ☐ |
+| 22 | eventbridge | P1 | 803-820, 3309-3315 | ☐ |
+| 23 | firehose | P1 | 821-838, 3316-3323 | ☐ |
+| 24 | fis | P1 | 839-856, 3324-3331 | ☐ |
+| 25 | forecast | P1 | 857-872, 3332-3340 | ☐ |
+| 26 | fsx | P1 | 873-894, 3341-3353 | ☐ |
+| 27 | glacier | P1 | 895-915, 3354-3365 | ✅ |
+| 28 | glue | P1 | 916-940, 3366-3378 | ✅ |
+| 29 | guardduty | P1 | 941-960, 3379-3391 | ☐ |
+| 30 | iam | P1 | 961-978, 3392-3402 | ✅ |
+| 31 | identitystore | P1 | 979-995, 3403-3416 | ☐ |
+| 32 | inspector2 | P1 | 996-1013, 3417-3429 | ☐ |
+| 33 | iot | P1 | 1014-1031, 3430-3440 | ☐ |
+| 34 | iotanalytics | P1 | 1032-1053, 3441-3447 | ☐ |
+| 35 | iotwireless | P1 | 1073-1092, 3453-3458 | ☐ |
+| 36 | kafka | P1 | 1093-1109, 3459-3467 | ☐ |
+| 37 | kinesis | P1 | 1110-1125, 3468-3476 | ✅ |
+| 38 | kinesisanalytics | P1 | 1126-1143, 3477-3484 | ☐ |
+| 39 | kinesisanalyticsv2 | P1 | 1144-1160, 3485-3492 | ☐ |
+| 40 | kms | P1 | 1161-1175, 3493-3507 | ✅ |
+| 41 | lakeformation | P1 | 1176-1203, 3508-3520 | ✅ |
+| 42 | lambda | P1 | 1204-1227, 3521-3533 | ✅ |
+| 43 | macie2 | P1 | 1228-1256, 3534-3546 | ✅ |
+| 44 | managedblockchain | P1 | 1257-1276, 3547-3558 | ☐ |
+| 45 | mediaconvert | P1 | 1277-1299, 3559-3569 | ☐ |
+| 46 | medialive | P1 | 1300-1320, 3570-3581 | ☐ |
+| 47 | mediapackage | P1 | 1321-1341, 3582-3594 | ☐ |
+| 48 | mediastore | P1 | 1342-1358, 3595-3605 | ☐ |
+| 49 | opensearch | P1 | 1452-1473, 3674-3685 | ☐ |
+| 50 | opsworks | P1 | 1474-1494, 3686-3697 | ☐ |
+| 51 | organizations | P1 | 1495-1515, 3698-3708 | ✅ |
+| 52 | personalize | P1 | 1516-1538, 3709-3719 | ☐ |
+| 53 | pinpoint | P1 | 1539-1558, 3720-3731 | ☐ |
+| 54 | pipes | P1 | 1559-1578, 3732-3744 | ☐ |
+| 55 | polly | P1 | 1579-1599, 3745-3755 | ☐ |
+| 56 | quicksight | P1 | 1624-1639, 3769-3779 | ☐ |
+| 57 | ram | P1 | 1640-1654, 3780-3790 | ☐ |
+| 58 | rekognition | P1 | 1704-1717, 3833-3847 | ☐ |
+| 59 | route53 | P1 | 1757-1770, 3881-3891 | ✅ |
+| 60 | ses | P1 | 1888-1901, 3983-3995 | ☐ |
+| 61 | sesv2 | P1 | 1902-1926, 3996-4014 | ☐ |
+| 62 | shield | P1 | 1927-1949, 4015-4029 | ☐ |
+| 63 | sns | P1 | 1950-1969, 4030-4049 | ✅ |
+| 64 | sqs | P1 | 1970-1987, 4050-4067 | ✅ |
+| 65 | ssm | P1 | 1988-2007, 4068-4087 | ✅ |
+| 66 | ssoadmin | P1 | 2008-2027, 4088-4106 | ☐ |
+| 67 | stepfunctions | P1 | 2028-2047, 4107-4126 | ✅ |
+| 68 | sts | P1 | 2048-2066, 4127-4155 | ✅ |
+| 69 | support | P1 | 2067-2079, 4156-4167 | ☐ |
+| 70 | verifiedpermissions | P1 | 2143-2162, 4254-4261 | ☐ |
+| 71 | vpclattice | P1 | 2163-2181, 4262-4269 | ☐ |
+| 72 | waf | P1 | 2182-2200, 4270-4275 | ☐ |
+| 73 | wafv2 | P1 | 2201-2219, 4276-4287 | ☐ |
+| 74 | workmail | P1 | 2220-2237, 4288-4296 | ☐ |
+| 75 | workspaces | P1 | 2238-2255, 4297-4305 | ✅ |
+| 76 | xray | P1 | 2256-2282, 4306-4315 | ✅ |
+| 77 | account | P2 | 195-201, 2686-2694 | ☐ |
+| 78 | acm | P2 | 202-208, 2695-2705 | ☐ |
+| 79 | acmpca | P2 | 209-215, 2706-2716 | ☐ |
+| 80 | amplify | P2 | 216-222, 2717-2727 | ☐ |
+| 81 | apigateway | P2 | 223-228, 2728-2738 | ☐ |
+| 82 | apigatewaymanagementapi | P2 | 229-234, 2739-2750 | ☐ |
+| 83 | apigatewayv2 | P2 | 235-240, 2751-2766 | ☐ |
+| 84 | appconfig | P2 | 241-246, 2767-2777 | ☐ |
+| 85 | appconfigdata | P2 | 247-252, 2778-2788 | ☐ |
+| 86 | applicationautoscaling | P2 | 253-258, 2789-2799 | ☐ |
+| 87 | appmesh | P2 | 259-264, 2800-2810 | ☐ |
+| 88 | apprunner | P2 | 265-270, 2811-2821 | ☐ |
+| 89 | appstream | P2 | 271-276, 2822-2832 | ☐ |
+| 90 | appsync | P2 | 277-282, 2833-2843 | ☐ |
+| 91 | autoscaling | P2 | 289-294, 2870-2877 | ☐ |
+| 92 | awsconfig | P2 | 295-300, 2878-2884 | ☐ |
+| 93 | backup | P2 | 301-306, 2885-2892 | ☐ |
+| 94 | batch | P2 | 307-312, 2893-2899 | ✅ |
+| 95 | bedrock | P2 | 313-318, 2900-2906 | ☐ |
+| 96 | bedrockagent | P2 | 319-324, 2907-2914 | ☐ |
+| 97 | bedrockruntime | P2 | 325-330, 2915-2922 | ☐ |
+| 98 | ce | P2 | 331-336, 2923-2929 | ☐ |
+| 99 | cleanrooms | P2 | 337-342, 2930-2942 | ☐ |
+| 100 | cloudcontrol | P2 | 343-348, 2943-2955 | ☐ |
+| 101 | cloudformation | P2 | 349-354, 2956-2968 | ✅ |
+| 102 | cloudfront | P2 | 355-360, 2969-2980 | ☐ |
+| 103 | cloudtrail | P2 | 361-366, 2981-2992 | ☐ |
+| 104 | cloudwatch | P2 | 367-372, 2993-3003 | ✅ |
+| 105 | cloudwatchlogs | P2 | 373-378, 3004-3015 | ✅ |
+| 106 | codeartifact | P2 | 379-384, 3016-3025 | ☐ |
+| 107 | codeconnections | P2 | 416-429, 3047-3055 | ☐ |
+| 108 | codedeploy | P2 | 430-441, 3056-3067 | ☐ |
+| 109 | codepipeline | P2 | 442-456, 3068-3076 | ☐ |
+| 110 | codestarconnections | P2 | 457-467, 3077-3085 | ☐ |
+| 111 | cognitoidentity | P2 | 468-478, 3086-3095 | ☐ |
+| 112 | ecs | P2 | 648-661, 3224-3233 | ✅ |
+| 113 | efs | P2 | 662-674, 3234-3244 | ☐ |
+| 114 | eks | P2 | 675-687, 3245-3254 | ☐ |
+| 115 | elasticache | P2 | 688-699, 3255-3264 | ✅ |
+| 116 | elasticsearch | P2 | 715-728, 3275-3282 | ☐ |
+| 117 | elb | P2 | 729-745, 3283-3289 | ☐ |
+| 118 | emrserverless | P2 | 785-802, 3304-3308 | ☐ |
+| 119 | iotdataplane | P2 | 1054-1072, 3448-3452 | ☐ |
+| 120 | mediastoredata | P2 | 1359-1369, 3606-3613 | ☐ |
+| 121 | mediatailor | P2 | 1370-1380, 3614-3622 | ☐ |
+| 122 | memorydb | P2 | 1381-1392, 3623-3631 | ☐ |
+| 123 | mq | P2 | 1393-1403, 3632-3640 | ☐ |
+| 124 | mwaa | P2 | 1404-1413, 3641-3648 | ☐ |
+| 125 | neptune | P2 | 1414-1424, 3649-3656 | ☐ |
+| 126 | networkmonitor | P2 | 1425-1436, 3657-3664 | ☐ |
+| 127 | omics | P2 | 1437-1451, 3665-3673 | ☐ |
+| 128 | qldb | P2 | 1600-1617, 3756-3761 | ☐ |
+| 129 | qldbsession | P2 | 1618-1623, 3762-3768 | ☐ |
+| 130 | rds | P2 | 1655-1667, 3791-3801 | ✅ |
+| 131 | rdsdata | P2 | 1668-1679, 3802-3811 | ☐ |
+| 132 | redshift | P2 | 1680-1691, 3812-3822 | ☐ |
+| 133 | redshiftdata | P2 | 1692-1703, 3823-3832 | ☐ |
+| 134 | resourcegroups | P2 | 1718-1730, 3848-3858 | ☐ |
+| 135 | resourcegroupstaggingapi | P2 | 1731-1743, 3859-3869 | ☐ |
+| 136 | rolesanywhere | P2 | 1744-1756, 3870-3880 | ☐ |
+| 137 | route53resolver | P2 | 1771-1782, 3892-3902 | ☐ |
+| 138 | s3 | P2 | 1783-1794, 3903-3914 | ✅ |
+| 139 | s3control | P2 | 1795-1807, 3915-3924 | ☐ |
+| 140 | s3tables | P2 | 1808-1819, 3925-3933 | ☐ |
+| 141 | sagemaker | P2 | 1820-1829, 3934-3940 | ☐ |
+| 142 | sagemakerruntime | P2 | 1830-1839, 3941-3947 | ☐ |
+| 143 | scheduler | P2 | 1840-1848, 3948-3954 | ☐ |
+| 144 | secretsmanager | P2 | 1849-1858, 3955-3961 | ☐ |
+| 145 | securityhub | P2 | 1859-1868, 3962-3968 | ☐ |
+| 146 | serverlessrepo | P2 | 1869-1878, 3969-3975 | ☐ |
+| 147 | servicediscovery | P2 | 1879-1887, 3976-3982 | ☐ |
+| 148 | swf | P2 | 2080-2090, 4168-4180 | ☐ |
+| 149 | textract | P2 | 2091-2100, 4181-4193 | ☐ |
+| 150 | timestreamquery | P2 | 2101-2108, 4194-4204 | ☐ |
+| 151 | timestreamwrite | P2 | 2109-2114, 4205-4218 | ☐ |
+| 152 | transcribe | P2 | 2115-2123, 4219-4231 | ☐ |
+| 153 | transfer | P2 | 2124-2132, 4232-4243 | ☐ |
+| 154 | translate | P2 | 2133-2142, 4244-4253 | ☐ |

README.md

@@ -51,11 +51,14 @@ The dashboard lets you browse and manage DynamoDB tables, S3 buckets, and more 
 - **Data Integrity**: Automatic checksum calculation supporting CRC32, CRC32C, SHA1, and SHA256.
 - **Compression**: Integrated Gzip compression for efficient memory usage.
 
-### Lambda (image-based only)
+### Lambda (Zip and Image packaging)
 
-Gopherstack supports AWS Lambda with **Docker image-based functions only** (`PackageType: Image`).
+Gopherstack supports AWS Lambda with both **Zip** (`PackageType: Zip`) and **container image** (`PackageType: Image`) functions.
 
-> **Important:** Only `PackageType: Image` is supported. Zip deployments, S3-based code delivery, and direct Go binary execution on the host are **not supported**. Your function must be packaged as a Docker image (e.g. a standard AWS base image or your own custom image).
+- **Zip functions**: The uploaded archive is extracted and run on the matching AWS runtime base image, so the standard managed runtimes work without modification — `python3.9`–`python3.13`, `nodejs18.x`/`20.x`/`22.x`, `java11`/`17`/`21`, `dotnet8`/`dotnet9`, `ruby3.2`/`3.3`, and `provided.al2`/`provided.al2023`.
+- **Image functions**: Provide an `ImageUri` (a standard AWS base image or your own custom image).
+
+> **Important:** Both packaging modes require a running Docker (or Podman) daemon to execute invocations. S3-based code delivery and direct Go binary execution on the host are not supported. All other Gopherstack services continue to work without Docker.
 
 - **Supported operations**: `CreateFunction`, `GetFunction`, `ListFunctions`, `DeleteFunction`, `UpdateFunctionCode`, `UpdateFunctionConfiguration`, `Invoke`, `PutFunctionConcurrency`, `GetFunctionConcurrency`
 - **Invocation modes**: `RequestResponse` (synchronous) and `Event` (asynchronous / fire-and-forget)