velocity-python 0.1.121__tar.gz → 0.1.122__tar.gz

{velocity_python-0.1.121 → velocity_python-0.1.122}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: velocity-python
-Version: 0.1.121
+Version: 0.1.122
 Summary: A rapid application development library for interfacing with data storage
 Author-email: Velocity Team <info@codeclubs.org>
 License-Expression: MIT

{velocity_python-0.1.121 → velocity_python-0.1.122}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "velocity-python"
-version = "0.1.121"
+version = "0.1.122"
 authors = [
   { name="Velocity Team", email="info@codeclubs.org" },
 ]

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/__init__.py

@@ -1,4 +1,4 @@
-__version__ = version = "0.1.121"
+__version__ = version = "0.1.122"
 
 import importlib as _importlib
 

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/__init__.py

@@ -44,6 +44,7 @@ _LAZY_ATTRS = {
     "CLIENT_FILES_BUCKET": "velocity.aws.s3",
     "PUBLIC_ASSETS_BUCKET": "velocity.aws.s3",
     "BACKOFFICE_BUCKET": "velocity.aws.s3",
+    "ADMIN_ASSETS_BUCKET": "velocity.aws.s3",
     "PRIVATE_BUCKETS": "velocity.aws.s3",
     "ALLOWED_UPLOAD_BUCKETS": "velocity.aws.s3",
     # Asset helpers
@@ -96,6 +97,7 @@ __all__ = [
     "CLIENT_FILES_BUCKET",
     "PUBLIC_ASSETS_BUCKET",
     "BACKOFFICE_BUCKET",
+    "ADMIN_ASSETS_BUCKET",
     "PRIVATE_BUCKETS",
     "ALLOWED_UPLOAD_BUCKETS",
     "AssetBackfillSummary",

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/feature_flags.py

@@ -1,6 +1,6 @@
 """Environment-scoped feature flags with cross-database mirroring.
 
-Generalises a pattern proven in production (CaringCent BackOffice): a
+Generalises a pattern proven in production (an admin back-office app): a
 ``sys_feature_flags`` table that holds **one row per system**, keyed by an
 ``applied_system`` column, where every copy of the database carries every
 system's row. Two behaviours follow:
@@ -143,7 +143,7 @@ def load(tx, loader=None) -> dict:
     An injected ``loader(tx)`` wins (apps that resolve flags their own way);
     otherwise :func:`get_cached` — velocity's stage-scoped reader behind the
     container cache — is the source, never raising into the request. The
-    legacy CaringCent ``support.app.helpers`` loader remains only as a last
+    legacy ``support.app.helpers`` loader (an app-layer package) remains only as a last
     resort when the velocity reader finds no row (it raises on a missing
     row, which those apps rely on); absent that package the answer is ``{}``.
     """
@@ -159,7 +159,7 @@ def load(tx, loader=None) -> dict:
 
 
 def _legacy_support_loader(tx):
-    """CaringCent's ``support.app.helpers`` reader, or None when that package
+    """The legacy app-layer ``support.app.helpers`` reader, or None when that package
     is not installed. Kept as its own seam so the fallback can be exercised
     (or silenced) deterministically wherever the layer happens to be on the
     path. It keeps its own raise-on-missing-row behaviour on purpose."""

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/handlers/base_handler.py

@@ -64,12 +64,13 @@ class BaseHandler:
     def _update_lambda_ca_certificates(self):
         """Configure SSL certificates for HTTPS requests in Lambda environments."""
         # This is helpful for running HTTPS clients on lambda.
-        if os.path.exists("/opt/python/ca-certificates.crt"):
-            os.environ["REQUESTS_CA_BUNDLE"] = "/opt/python/ca-certificates.crt"
-        elif os.path.exists("/home/ubuntu/PyLibLayer/ca-certificates.crt"):
-            os.environ["REQUESTS_CA_BUNDLE"] = (
-                "/home/ubuntu/PyLibLayer/ca-certificates.crt"
-            )
+        # A layer may ship a CA bundle at /opt/python; set an explicit
+        # ``VELOCITY_CA_BUNDLE`` path to use one elsewhere (e.g. local dev).
+        bundle = (
+            os.environ.get("VELOCITY_CA_BUNDLE") or "/opt/python/ca-certificates.crt"
+        )
+        if os.path.exists(bundle):
+            os.environ["REQUESTS_CA_BUNDLE"] = bundle
 
     def get_calling_function(self) -> str:
         """

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/handlers/context.py

@@ -42,8 +42,14 @@ def _get_work_queue_name() -> str:
     return queue_name
 
 
+DEFAULT_ENQUEUE_METRIC_NAMESPACE = "Velocity/Enqueue"
+
+
 def _emit_enqueue_failure_metric(action, count):
-    """Emit a CloudWatch ``CaringCent/Enqueue SendFailures`` metric.
+    """Emit a CloudWatch ``SendFailures`` metric.
+
+    The namespace is the ``EnqueueMetricNamespace`` config key (SSM/env), default
+    ``Velocity/Enqueue``; set it to keep existing alarms pointed at the metric.
 
     SQS send failures are a pre-queue loss the dead-letter queue can never see
     (a message that was never sent never reaches the DLQ), so this metric makes
@@ -55,7 +61,8 @@ def _emit_enqueue_failure_metric(action, count):
     try:
         stage = config_get_stage("") or "unknown"
         boto3.client("cloudwatch").put_metric_data(
-            Namespace="CaringCent/Enqueue",
+            Namespace=config_getenv("EnqueueMetricNamespace")
+            or DEFAULT_ENQUEUE_METRIC_NAMESPACE,
             MetricData=[
                 {
                     "MetricName": "SendFailures",
@@ -726,7 +733,7 @@ class Context:
 
         An injected loader wins. Otherwise velocity's own stage-scoped reader
         (``velocity.aws.feature_flags.get``) is the source — one reader for
-        the whole framework. The legacy CaringCent ``support.app.helpers``
+        the whole framework. The legacy app-layer ``support.app.helpers``
         loader remains only as a last resort when the velocity reader finds
         no row (it raises on a missing row, which those apps rely on).
         """
@@ -834,7 +841,7 @@ class Context:
 
         # Federated identities that are not Cognito User Pool logins — e.g.
         # developer-authenticated Identity Pool identities used for admin
-        # masquerade — carry a provider name (like "login.caringcent.masquerade")
+        # masquerade — carry a provider name (like "login.example.masquerade")
         # that is not a user-pool id. Detect that and fail with a clear message
         # rather than passing an invalid value to admin_get_user (which raises a
         # cryptic "userPoolId failed to satisfy constraint" error).

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/handlers/masquerade.py

@@ -21,7 +21,7 @@ Payload claims:
     exp              expiry unix seconds
     jti              unique id for one-time-use / revocation tracking
 
-This module is business-agnostic: it knows nothing about CaringCent pools,
+This module is business-agnostic: it knows nothing about user pools,
 Cognito, or specific apps. Callers supply the secret and claim values.
 """
 

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/handlers/mixins/data_service.py

@@ -207,8 +207,8 @@ class DataServiceMixin:
 
     # Ceiling on rows a single un-paginated `query` may materialize (None =
     # no cap). Apps set the class attribute; the `QueryMaxRows` config key
-    # overrides it per environment. Promoted 2026-09-04 from BackOffice's
-    # full query_hook override, which existed largely to carry this.
+    # overrides it per environment. Promoted 2026-09-04 from an app's full
+    # query_hook override, which existed largely to carry this.
     query_max_rows = None
 
     # PostgreSQL type mappings for frontend display

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/handlers/mixins/job_handler.py

@@ -7,8 +7,8 @@ three ``/event`` actions after a response carries ``jobs.events``:
 * ``download-job-result`` → a ``file-download`` (or ``redirect``) response action
 * ``cancel-job``          → flags the job ``CancelRequested`` for the worker
 
-They are identical for every app, so they live here (extracted from
-BackOfficeEvents). Mix into the HTTP handler alongside ``WebHandler``::
+They are identical for every app, so they live here (extracted from an
+admin app's HTTP handler). Mix into the HTTP handler alongside ``WebHandler``::
 
     class HttpEventHandler(ButtonHandler, JobHandler, WebHandler, LambdaHandler):
         ...
@@ -112,7 +112,7 @@ class JobHandler:
             raise AlertError("Job result is not ready")
 
         # One file per job result; descriptors without a store are legacy
-        # BackOffice S3 entries.
+        # S3-only entries written before stores existed.
         descriptor = dict(files[0])
         descriptor.setdefault("store", "s3" if descriptor.get("bucket") else "db")
         deliver_job_result(tx, context, descriptor)

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/handlers/mixins/session_control.py

@@ -31,8 +31,8 @@ Usage::
         user_table = "app_user"
         single_session_enforcement = True
 
-Promoted 2026-09-07 from dance.10sp.us (same lifecycle as tenspace's
-app_auth: proven in the app, then centralized).
+Promoted 2026-09-07 from a production app (proven in the app, then
+centralized).
 """
 
 import datetime

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/job_results.py

@@ -7,7 +7,7 @@ velocity-react is already polling via ``get-job-status`` — fetches it with
 
 * workers call :func:`store_job_result` — persist the bytes through a
   :class:`JobResultStore` and record a *file descriptor* on the job's
-  ``aws_job_activity.message.result.files`` (the shape BackOffice's export
+  ``aws_job_activity.message.result.files`` (the shape the original export
   pipeline established, so existing UI code keeps working);
 * the web tier (``JobHandler.OnActionDownloadJobResult``) calls
   :func:`deliver_job_result`, which routes the descriptor back to the store
@@ -50,6 +50,7 @@ def _alert(message: str) -> Exception:
 
     return AlertError(message)
 
+
 __all__ = [
     "JOB_RESULTS_TABLE",
     "JOB_RESULTS_SCHEMA",
@@ -392,7 +393,7 @@ def record_job_result(
 
     Status is left alone: the queue handler's ``afterAction`` flips it to
     ``Completed``, and a lifecycle that preserves a message carrying ``result``
-    (as BackOffice's does) keeps these descriptors intact.
+    keeps these descriptors intact.
     """
     if isinstance(descriptors, dict):
         descriptors = [descriptors]
@@ -430,7 +431,9 @@ def store_job_result(
     store = store or default_job_result_store()
     if created_by is None:
         payload_meta = context.payload() or {}
-        created_by = payload_meta.get("requested_by") if isinstance(payload_meta, dict) else None
+        created_by = (
+            payload_meta.get("requested_by") if isinstance(payload_meta, dict) else None
+        )
     descriptor = store.put(
         tx,
         job_id=job_id,

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/aws/s3.py

@@ -2,20 +2,36 @@
 
 Architectural principles enforced here
 ---------------------------------------
-* All files in *private* buckets (e.g. ``caringcent.client.files``) MUST be
-  stored without a public ACL.  Access is granted exclusively through
-  time-limited presigned GET URLs generated by this module.
+* All files in *private* buckets MUST be stored without a public ACL.  Access
+  is granted exclusively through time-limited presigned GET URLs generated by
+  this module.
 * Direct browser-to-S3 uploads are supported via presigned PUT URLs so that
   file bytes never pass through Lambda (avoids the 6 MB API Gateway payload
   ceiling and reduces Lambda cost).
-* Public-asset buckets (``donate.resources``, ``backoffice.resources``) remain
-  unaffected by this module; they continue to use ``ACL: public-read`` when
-  uploaded via ``helpers.upload(public=True)``.
-
-Bucket constants
------------------
-Import and compare against these rather than hard-coding bucket names in
-Lambda handlers so a rename only needs to happen in one place.
+* Public-asset buckets remain unaffected by this module; they continue to use
+  ``ACL: public-read`` when uploaded via ``helpers.upload(public=True)``.
+
+Bucket names
+------------
+Bucket names are deployment configuration, not library constants. They are
+resolved on access through :mod:`velocity.aws.ssm_config` (SSM
+``/{ProjectName}/{stage}/<key>``, then ``/Global/{stage}/<key>``, then the
+environment):
+
+    ==========================  ===================  ==========================
+    attribute                   config key           purpose
+    ==========================  ===================  ==========================
+    ``CLIENT_FILES_BUCKET``     ``ClientFilesBucket``  private per-client files
+    ``PUBLIC_ASSETS_BUCKET``    ``PublicAssetsBucket`` public images / form assets
+    ``ADMIN_ASSETS_BUCKET``     ``AdminAssetsBucket``  internal admin assets
+    ==========================  ===================  ==========================
+
+``BACKOFFICE_BUCKET`` is a legacy alias of ``ADMIN_ASSETS_BUCKET``. Reading an
+unconfigured bucket raises :class:`LookupError` naming the missing key, so a
+misconfigured deployment fails loudly instead of writing to the wrong place.
+``PRIVATE_BUCKETS`` and ``ALLOWED_UPLOAD_BUCKETS`` are derived from whichever
+buckets are configured. Import and compare against these rather than
+hard-coding bucket names in handlers so a rename is a config change.
 """
 
 from __future__ import annotations
@@ -23,26 +39,61 @@ from __future__ import annotations
 import re
 import boto3
 
+from velocity.aws import ssm_config
+
 # ---------------------------------------------------------------------------
-# Bucket name constants
+# Bucket name configuration (resolved lazily, see module docstring)
 # ---------------------------------------------------------------------------
 
-CLIENT_FILES_BUCKET: str = "caringcent.client.files"
-"""Private bucket that stores per-client files (billing reports, uploads)."""
-
-PUBLIC_ASSETS_BUCKET: str = "donate.resources"
-"""Public bucket for images and form-builder assets embedded in donation forms."""
-
-BACKOFFICE_BUCKET: str = "backoffice.resources"
-"""Internal bucket for BackOffice admin assets (help videos, data-load ZIPs)."""
-
-# Buckets that must never be served with a public ACL.
-PRIVATE_BUCKETS: frozenset[str] = frozenset({CLIENT_FILES_BUCKET})
-
-# Buckets that are permitted as upload destinations from BackOffice.
-ALLOWED_UPLOAD_BUCKETS: frozenset[str] = frozenset(
-    {CLIENT_FILES_BUCKET, PUBLIC_ASSETS_BUCKET, BACKOFFICE_BUCKET}
-)
+BUCKET_CONFIG_KEYS: dict[str, str] = {
+    "CLIENT_FILES_BUCKET": "ClientFilesBucket",
+    "PUBLIC_ASSETS_BUCKET": "PublicAssetsBucket",
+    "ADMIN_ASSETS_BUCKET": "AdminAssetsBucket",
+    "BACKOFFICE_BUCKET": "AdminAssetsBucket",  # legacy alias
+}
+
+
+def configured_bucket(attr: str) -> str | None:
+    """The configured bucket name for ``attr`` (e.g. ``"CLIENT_FILES_BUCKET"``),
+    or None when that key is not set anywhere."""
+    key = BUCKET_CONFIG_KEYS[attr]
+    value = ssm_config.getenv(key)
+    return value.strip() if isinstance(value, str) and value.strip() else None
+
+
+def _require_bucket(attr: str) -> str:
+    value = configured_bucket(attr)
+    if value is None:
+        key = BUCKET_CONFIG_KEYS[attr]
+        raise LookupError(
+            f"velocity.aws.s3.{attr} is not configured: set the {key!r} config key "
+            f"(SSM /{{ProjectName}}/{{stage}}/{key}, /Global/{{stage}}/{key}, or the "
+            f"{key} environment variable)"
+        )
+    return value
+
+
+def __getattr__(name: str):
+    if name in BUCKET_CONFIG_KEYS:
+        return _require_bucket(name)
+    if name == "PRIVATE_BUCKETS":
+        # Buckets that must never be served with a public ACL.
+        return frozenset(b for b in [configured_bucket("CLIENT_FILES_BUCKET")] if b)
+    if name == "ALLOWED_UPLOAD_BUCKETS":
+        # Buckets that are permitted as presigned-upload destinations.
+        return frozenset(
+            b
+            for b in (
+                configured_bucket(a)
+                for a in (
+                    "CLIENT_FILES_BUCKET",
+                    "PUBLIC_ASSETS_BUCKET",
+                    "ADMIN_ASSETS_BUCKET",
+                )
+            )
+            if b
+        )
+    raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
 
 
 # ---------------------------------------------------------------------------

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/db/core/result.py

@@ -85,7 +85,7 @@ class Result:
         # INSERT/UPDATE/DELETE ... RETURNING (PostgreSQL), OUTPUT (SQL Server).
         # Judging by the verb alone marked EVERY write as row-less, so
         # `UPDATE ... RETURNING sys_id` silently reported nothing — a claim taken
-        # that way looked refused forever (tenspace.gmail, 2026-09-17). A write
+        # that way looked refused forever (a claim-queue consumer, 2026-09-17). A write
         # with no described columns has only a rowcount, and fetchone() on it
         # raises on most drivers, so that case is still short-circuited.
         if (

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/db/maintenance.py

@@ -12,13 +12,15 @@ runs DDL in autocommit, and terminates other sessions as needed.
     m = maintenance.DatabaseMaintenance()      # env (DBHost/DBUser/...), maint db 'postgres'
 
     # Server-side template clone -- instant, no dump/restore round-trip:
-    m.refresh("caringcent-production", "caringcent-develop")  # snapshot dest, then clone source -> dest
-    m.snapshot("caringcent-develop")                          # -> caringcent-develop-snapshot-<ts>
-    m.prune_snapshots("caringcent-develop", keep=3)           # drop all but the 3 newest snapshots
+    m.refresh("app-production", "app-develop")  # snapshot dest, then clone source -> dest
+    m.snapshot("app-develop")                   # -> app-develop-snapshot-<ts>
+    m.prune_snapshots("app-develop", keep=3)    # drop all but the 3 newest snapshots
 
 Every database name is identifier-quoted; string-literal comparisons are escaped.
 A configurable ``protected`` set blocks destructive ops (drop / rename / overwrite)
-on critical databases (default: ``caringcent-production``).
+on critical databases. Pass ``protected={...}`` explicitly, or set the
+``VELOCITY_PROTECTED_DATABASES`` environment variable (comma-separated) as the
+default; the library itself protects nothing by default.
 
 Snapshot databases are named ``<db>-snapshot-<YYYYMMDD-HHMMSS>`` -- a **sortable**
 timestamp, so listing/pruning by name is chronological.
@@ -34,7 +36,16 @@ from velocity.db.servers import postgres
 
 SNAPSHOT_INFIX = "-snapshot-"
 TS_FORMAT = "%Y%m%d-%H%M%S"  # sortable: lexical order == chronological order
-DEFAULT_PROTECTED = frozenset({"caringcent-production"})
+DEFAULT_PROTECTED: frozenset = frozenset()
+PROTECTED_ENV_VAR = "VELOCITY_PROTECTED_DATABASES"
+
+
+def default_protected() -> frozenset:
+    """Protected database names from ``VELOCITY_PROTECTED_DATABASES`` (comma-separated),
+    or an empty set."""
+    raw = os.environ.get(PROTECTED_ENV_VAR, "")
+    return frozenset(name.strip() for name in raw.split(",") if name.strip())
+
 
 _BACKUP_FORMAT_FLAGS = {
     "custom": "-Fc",
@@ -66,11 +77,13 @@ class DatabaseMaintenance:
         *,
         maintenance_db: str = "postgres",
         config: Optional[dict] = None,
-        protected: Iterable[str] = DEFAULT_PROTECTED,
+        protected: Optional[Iterable[str]] = None,
         engine=None,
     ):
         self.maintenance_db = maintenance_db
-        self.protected = frozenset(protected or ())
+        self.protected = (
+            frozenset(protected) if protected is not None else default_protected()
+        )
         self._config = dict(config or {})
         # Lazily initialized so construction never opens a connection (keeps the
         # class unit-testable without a live database).

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/db/servers/postgres/__init__.py

@@ -71,7 +71,7 @@ class PostgreSQLInitializer(BaseInitializer):
             final_config.setdefault("sslmode", ssl_mode)
 
         # R25 — optional server-side timeouts (milliseconds), composed into the
-        # libpq `options` parameter. Both default OFF: the dominant CaringCent
+        # libpq `options` parameter. Both default OFF: the dominant application
         # pattern is an external HTTP call (Stripe/Plaid/Braintree) *inside* an
         # open transaction, which leaves the session idle-in-transaction — so an
         # aggressive idle_in_transaction_session_timeout would abort legitimate

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/db/tests/test_postgres_unchanged.py

@@ -5,7 +5,9 @@ Quick test to verify PostgreSQL implementation is functionally unchanged.
 import sys
 import os
 
-sys.path.insert(0, "/home/ubuntu/tenspace/velocity-python/src")
+sys.path.insert(
+    0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "..", "..", "..")
+)
 
 
 def test_postgres_unchanged():

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/db/tests/test_process_error_robustness.py

@@ -4,13 +4,16 @@
 Test the robustness of the improved process_error method
 """
 
+import os
 import sys
 import unittest
 from unittest.mock import Mock, patch
 import logging
 
 # Add the source directory to the path
-sys.path.insert(0, "/home/ubuntu/tenspace/velocity-python/src")
+sys.path.insert(
+    0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "..", "..", "..")
+)
 
 from velocity.db.core.engine import Engine
 from velocity.db import exceptions

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/misc/tests/test_mail_send.py

@@ -74,7 +74,7 @@ def config(**overrides):
         port=587,
         username="test-user@example.com",
         password="test-password",
-        sender="Tenspace <info@example.com>",
+        sender="Example Co <info@example.com>",
         use_tls=True,
     )
     base.update(overrides)
@@ -179,7 +179,7 @@ class TestMailer(unittest.TestCase):
         self.assertEqual(smtp.login_args, ("test-user@example.com", "test-password"))
         self.assertTrue(smtp.quit_called)
         sender, recipients, raw = smtp.sent[0]
-        self.assertEqual(sender, "Tenspace <info@example.com>")
+        self.assertEqual(sender, "Example Co <info@example.com>")
         self.assertEqual(recipients, ["b@example.com"])
         self.assertIn("Subject: Hello", raw)
         self.assertEqual(message["To"], "b@example.com")

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/payment/braintree_adapter.py

@@ -78,7 +78,7 @@ class BraintreeAdapter(PaymentProcessorAdapter):
 
         The retry policy lives here, once — apps were hand-rolling identical
         backoff loops around raw ``client_token.generate()`` calls (promoted
-        2026-09-04 from DonateMain / BackOffice copies).
+        2026-09-04 from per-app copies).
         """
         params: Dict[str, Any] = {"customer_id": customer_id} if customer_id else {}
         last_exc: Optional[Exception] = None
@@ -295,7 +295,7 @@ class BraintreeAdapter(PaymentProcessorAdapter):
     ) -> Optional[str]:
         """
         Braintree doesn't support hosted onboarding flows.
-        Returns None (onboarding must be done via BackOffice forms).
+        Returns None (onboarding must be done via the merchant admin UI).
         """
         return None
 
@@ -732,7 +732,7 @@ class BraintreeAdapter(PaymentProcessorAdapter):
         """
         Generate initial onboarding checklist for Braintree sub-merchants.
 
-        Note: Braintree onboarding is simpler - mostly done via BackOffice forms.
+        Note: Braintree onboarding is simpler - mostly done via the merchant admin UI.
         """
         return {
             "version": "1.0",

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity/payment/stripe_adapter.py

@@ -460,7 +460,7 @@ class StripeAdapter(PaymentProcessorAdapter):
             # Calculate platform fee (revenue split). An explicit
             # application_fee_amount in payment_data overrides this so the caller can
             # carry platform + donor-paid processing fee + tip in a single application
-            # fee (see CaringCent developer/requirements/FeeModel.md). Backward
+            # fee (see the platform fee model). Backward
             # compatible: when omitted, the destination charge keeps the platform fee.
             platform_fee_cents = self.calculate_platform_fee(
                 amount_cents, revenue_split_percentage
@@ -592,7 +592,7 @@ class StripeAdapter(PaymentProcessorAdapter):
                 amount_cents, revenue_split_percentage
             )
             # Explicit override lets the caller carry platform + donor fee + tip in one
-            # application fee (CaringCent FeeModel.md); falls back to the platform fee.
+            # application fee (platform fee model); falls back to the platform fee.
             application_fee_cents = payment_data.get("application_fee_amount")
             if application_fee_cents is None:
                 application_fee_cents = platform_fee_cents
@@ -1054,7 +1054,7 @@ class StripeAdapter(PaymentProcessorAdapter):
         (``balance_transaction.fee``). Returns ``None`` when it is not yet available
         (e.g. an uncaptured manual authorization) or cannot be fetched — callers then
         keep their formula estimate rather than over-reporting. Never raises. This is the
-        ``stripe_settled`` actual-cost source in CaringCent's FeeModel.md (M6).
+        ``stripe_settled`` actual-cost source for fee reconciliation.
         """
         if not charge:
             return None

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: velocity-python
-Version: 0.1.121
+Version: 0.1.122
 Summary: A rapid application development library for interfacing with data storage
 Author-email: Velocity Team <info@codeclubs.org>
 License-Expression: MIT

{velocity_python-0.1.121 → velocity_python-0.1.122}/src/velocity_python.egg-info/SOURCES.txt

@@ -233,6 +233,7 @@ tests/test_decorators.py
 tests/test_delete_hook_fk_blocked.py
 tests/test_dirty_pipeline_fast_path.py
 tests/test_email_processing.py
+tests/test_enqueue_metric_namespace.py
 tests/test_enqueue_send_failures.py
 tests/test_facets.py
 tests/test_feature_flags.py
@@ -282,6 +283,7 @@ tests/test_retry_side_effect_guard.py
 tests/test_return_default_safety.py
 tests/test_row_batch_update.py
 tests/test_row_cache_staleness.py
+tests/test_s3_bucket_config.py
 tests/test_schema_migrations.py
 tests/test_security_capability.py
 tests/test_security_hardening.py

{velocity_python-0.1.121 → velocity_python-0.1.122}/tests/test_amplify_build.py

@@ -16,19 +16,19 @@ class FakeDeployProject:
         return "us-east-1"
 
     def get_account_id(self):
-        return "741671896925"
+        return "123456789012"
 
     def list_lambda_functions_filtered(self, branch):
         return [
             {
                 "FunctionName": f"ClientEvents-{branch}",
-                "Role": "arn:aws:iam::741671896925:role/clientsLambdaRole-demo",
+                "Role": "arn:aws:iam::123456789012:role/exampleLambdaRole-demo",
                 "Layers": [
                     {
-                        "Arn": "arn:aws:lambda:us-east-1:741671896925:layer:py-lib-support:225"
+                        "Arn": "arn:aws:lambda:us-east-1:123456789012:layer:example-layer-a:225"
                     },
                     {
-                        "Arn": "arn:aws:lambda:us-east-1:741671896925:layer:py-lib-accounting:34"
+                        "Arn": "arn:aws:lambda:us-east-1:123456789012:layer:example-layer-b:34"
                     },
                 ],
             }
@@ -41,16 +41,16 @@ class FakeLambdaClient:
 
     def list_layer_versions(self, LayerName, MaxItems):
         versions = {
-            "py-lib-support": [
+            "example-layer-a": [
                 {
                     "Version": 240,
-                    "LayerVersionArn": "arn:aws:lambda:us-east-1:741671896925:layer:py-lib-support:240",
+                    "LayerVersionArn": "arn:aws:lambda:us-east-1:123456789012:layer:example-layer-a:240",
                 }
             ],
-            "py-lib-accounting": [
+            "example-layer-b": [
                 {
                     "Version": 34,
-                    "LayerVersionArn": "arn:aws:lambda:us-east-1:741671896925:layer:py-lib-accounting:34",
+                    "LayerVersionArn": "arn:aws:lambda:us-east-1:123456789012:layer:example-layer-b:34",
                 }
             ],
         }
@@ -129,7 +129,7 @@ def test_run_backend_deployment_refreshes_lambda_layers(monkeypatch, tmp_path):
     refreshes layers to latest, and never touches function env vars."""
     monkeypatch.setattr(
         "velocity.aws.deploy.reconcile._ensure_shared_policies",
-        lambda *args, **kwargs: "arn:aws:iam::741671896925:policy/lambda-vpc-execution",
+        lambda *args, **kwargs: "arn:aws:iam::123456789012:policy/lambda-vpc-execution",
     )
     monkeypatch.setattr(
         "velocity.aws.deploy.reconcile.policy_ops.attach_role_policies",
@@ -164,8 +164,8 @@ def test_run_backend_deployment_refreshes_lambda_layers(monkeypatch, tmp_path):
     assert update_call["MemorySize"] == 512
     assert "Environment" not in update_call
     assert update_call["Layers"] == [
-        "arn:aws:lambda:us-east-1:741671896925:layer:py-lib-support:240",
-        "arn:aws:lambda:us-east-1:741671896925:layer:py-lib-accounting:34",
+        "arn:aws:lambda:us-east-1:123456789012:layer:example-layer-a:240",
+        "arn:aws:lambda:us-east-1:123456789012:layer:example-layer-b:34",
     ]