chore(audit): close remaining stub gaps + ECS tag coverage

[vieiralucas]

Summary

• Final batch of the 10-batch "fill all not-yet-implemented gaps" pass.
• ECS: TagResource/UntagResource/ListTagsForResource now cover service, task, task-set, container-instance, and capacity-provider on top of cluster + task-definition.
• SSM SendCommand/ListCommands return StatusDetails mirroring the command status (was literal "Details placeholder").
• DynamoDB + SSM "Stubs" comment headers retitled to "Synthetic defaults" — the listed ops are a mix of canned synthetic responses and real-state-backed operations; "Stubs" was misleading after batches 7+ landed real impls.
• ELBv2 docs already trimmed in batch 2; verified no stale "Not yet implemented" remains beyond the documented HTTP-routing data-plane non-goal.

Test plan

• cargo test -p fakecloud-ssm --lib (199 pass)
• cargo test -p fakecloud-ecs --lib (30 pass)
• New E2E tag_untag_service_and_capacity_provider passes
• Existing E2E tag_untag_cluster_and_task_definition still passes
• cargo clippy --workspace --all-targets -- -D warnings clean
• cargo fmt --check clean

---

Summary by cubic

Expands ECS tagging to services, tasks, task sets, container instances, and capacity providers, and fixes short-ARN lookups for services and container instances. Also aligns SSM command StatusDetails with Status and clarifies DynamoDB/SSM comments as “Synthetic defaults.”

• New Features

  • ECS: TagResource/UntagResource/ListTagsForResource now support service, task, task-set, container-instance, and capacity-provider.
  • Added E2E test for service and capacity-provider tagging.

• Bug Fixes

  • ECS: Tag/Untag/ListTags now resolve both short- and long-form ARNs for service and container-instance (no more false ResourceNotFound).
  • SSM: SendCommand and ListCommands now set StatusDetails to match Status (was a placeholder).

^{Written for commit 83963f9. Summary will update on new commits.}

[codecov]

Codecov Report

❌ Patch coverage is 50.00000% with 101 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
crates/fakecloud-ecs/src/service.rs	49.49%	100 Missing ⚠️
crates/fakecloud-ssm/src/service/mod.rs	50.00%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[cubic-dev-ai]

2 issues found across 6 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="crates/fakecloud-ecs/src/service.rs">

<violation number="1" location="crates/fakecloud-ecs/src/service.rs:1220">
P2: Service tag operations use `tail` directly as the state key, which breaks for short service ARNs (`service/<name>`) because stored keys are `cluster/service`.</violation>

<violation number="2" location="crates/fakecloud-ecs/src/service.rs:1242">
P2: Container-instance tag operations lookup by raw ARN tail, which fails for short ARNs because state keys are stored as `cluster/id`.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}