velocity-python 0.1.129__tar.gz → 0.1.133__tar.gz

{velocity_python-0.1.129 → velocity_python-0.1.133}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: velocity-python
-Version: 0.1.129
+Version: 0.1.133
 Summary: A rapid application development library for interfacing with data storage
 Author-email: Velocity Team <info@codeclubs.org>
 License-Expression: MIT
@@ -13,12 +13,10 @@ Classifier: Intended Audience :: Developers
 Classifier: Topic :: Database
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Operating System :: OS Independent
-Requires-Python: >=3.9
+Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: sqlparse>=0.5.0
@@ -57,8 +55,11 @@ Provides-Extra: payment
 Requires-Dist: stripe>=12.0.0; extra == "payment"
 Requires-Dist: braintree>=4.30.0; extra == "payment"
 Requires-Dist: xmltodict>=0.13.0; extra == "payment"
+Provides-Extra: plaid
+Requires-Dist: velocity-python[payment]; extra == "plaid"
+Requires-Dist: ecdsa>=0.19.0; extra == "plaid"
 Provides-Extra: all
-Requires-Dist: velocity-python[aws,excel,http,payment,pdf,postgres,templates]; extra == "all"
+Requires-Dist: velocity-python[aws,excel,http,payment,pdf,plaid,postgres,templates]; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
 Requires-Dist: pytest-cov>=6.0.0; extra == "dev"
@@ -79,6 +80,7 @@ Requires-Dist: stripe>=12.0.0; extra == "test"
 Requires-Dist: braintree>=4.30.0; extra == "test"
 Requires-Dist: xmltodict>=0.13.0; extra == "test"
 Requires-Dist: authorizenet>=1.1.3; extra == "test"
+Requires-Dist: ecdsa>=0.19.0; extra == "test"
 Requires-Dist: openpyxl>=3.1.0; extra == "test"
 Requires-Dist: redis>=5.0.0; extra == "test"
 Requires-Dist: fakeredis>=2.23.0; extra == "test"
@@ -163,12 +165,16 @@ pip install velocity-python[all]
 | `postgres` | `psycopg[binary]>=3.2.0` | PostgreSQL connections |
 | `aws` | `boto3`, `requests` | Lambda handlers, SQS, Amplify |
 | `excel` | `openpyxl` | Excel export |
+| `parquet` | `pyarrow` | Parquet export |
+| `ods` | `odfpy` | OpenDocument spreadsheet export |
 | `templates` | `jinja2` | Template rendering |
+| `pdf` | `weasyprint` | HTML → PDF rendering (native Pango/Cairo from the OS or a layer) |
 | `http` | `requests` | HTTP utilities |
-| `payment` | `stripe`, `braintree` | Payment processing |
+| `payment` | `stripe`, `braintree`, `xmltodict` | Stripe and Braintree adapters (Authorize.Net additionally needs `authorizenet`, installed separately — see `docs/payment.md`) |
 | `mysql` | `mysql-connector-python` | MySQL connections |
 | `sqlserver` | `python-tds` | SQL Server connections |
-| `all` | All of the above | Full install |
+| `redis`, `mongodb`, `elasticsearch`, `cassandra`, `couchbase` | the matching client | NoSQL adapters (`docs/nosql.md`) |
+| `all` | `postgres`, `aws`, `excel`, `templates`, `http`, `payment`, `pdf` | Typical full install |
 
 **Requires Python 3.9+** and uses **psycopg v3** (not psycopg2) for PostgreSQL.
 
@@ -244,16 +250,19 @@ Full documentation is included in the `docs/` directory of the source distributi
 
 | Guide | File | Description |
 |-------|------|-------------|
-| Database ORM | `docs/database.md` | Connections, transactions, tables, rows, results, queries, schema management |
+| Database ORM | `docs/database.md` | Connections, `DB_TUNNEL`, transactions, tables, rows, results, queries, purge, schema management |
+| Schema Management | `docs/schema-management.md` | Runtime auto-heal, declarative `ensure_schema()`, schema locking, conflict handling |
 | Performance & Optimization | `docs/performance.md` | Connection pooling, batch operations, query caching, prepared statements, N+1 prevention, observability |
 | Async Support | `docs/async.md` | AsyncTransaction, AsyncTable, AsyncResult, parallel queries with gather() |
-| Configuration Reference | `docs/configuration.md` | All environment variables, engine options, and connection settings |
-| AWS Lambda Handlers | `docs/aws-handlers.md` | LambdaHandler, SqsHandler, auth modes, per-record transactions, async jobs (JobHandler + job result stores) |
+| Configuration Reference | `docs/configuration.md` | Every environment variable and SSM config key velocity reads, `ssm_config`, S3 buckets, engine options |
+| AWS Lambda Handlers | `docs/aws-handlers.md` | LambdaHandler, SqsHandler, auth modes, per-record transactions, DataService client boundary, async jobs (JobHandler + job result stores), failure events |
+| AWS Auth Modes | `docs/AWS_HANDLERS_AUTH.md` | Cognito auth, public endpoints, webhooks |
+| Deployment | `docs/deploy.md` | `velocity.aws.deploy`: least-privilege IAM, function settings, layers, SQS queue reconcile |
 | Cross-database Mirroring | `docs/mirroring.md` | Keep a table identical in two databases (demo ↔ production) by natural key; rwx hooks, FK translation, reconcile |
 | Operations Dashboard | `docs/operations.md` | What the automation is doing: schedules, jobs, failures, stuck work, with drill-down (`velocity.aws.ops` + velocity-react `OpsDashboard`) |
 | NoSQL Adapters | `docs/nosql.md` | Redis, DynamoDB, MongoDB, Elasticsearch, Cassandra, Couchbase behind one capability-honest contract |
-| Payment Processing | `docs/payment.md` | Stripe and Braintree adapters, payment lifecycle |
-| Utilities | `docs/utilities.md` | Excel export, data conversion, formatting, timers, email parsing and SMTP sending |
+| Payment Processing | `docs/payment.md` | Stripe, Braintree and Authorize.Net adapters, processor mirrors, payment lifecycle |
+| Utilities | `docs/utilities.md` | Excel/PDF export, data conversion, formatting, timers, email parsing and SMTP sending |
 | Testing Guide | `docs/TESTING.md` | Running tests, markers, coverage |
 | Security | `docs/SECURITY.md` | Pre-commit hooks, credential scanning |
 
@@ -266,7 +275,7 @@ Engine (singleton — survives Lambda warm starts)
 ├── ConnectionPool (thread-safe, configurable min/max)
 └── Transaction (one per request, borrows from pool)
      ├── Table (CRUD, batch ops, schema management)
-     │    ├── Row (dict-like, lazy-cache, write-through, batch_update)
+     │    ├── Row (dict-like, lazy-cache, write-through, batch_update())
      │    └── Result (streaming cursor iteration, transforms)
      ├── View (create, grant, ensure)
      └── Sequence (create, next, current, configure)
@@ -299,7 +308,7 @@ from velocity.db.servers.sqlite import initialize
 engine = initialize(config={"database": "myapp.db"})
 
 # SQL Server
-from velocity.db.servers.mssql import initialize
+from velocity.db.servers.sqlserver import initialize
 engine = initialize()
 ```
 
@@ -310,32 +319,61 @@ engine = initialize()
 ```
 velocity-python/
 ├── src/velocity/
+│   ├── cache.py                  # Process-level read cache (cache_ttl / memo)
+│   ├── logging.py                # Logging setup (JSON in Lambda, text elsewhere)
 │   ├── db/
 │   │   ├── core/
-│   │   │   ├── engine.py         # Engine, ConnectionPool
-│   │   │   ├── transaction.py    # Transaction, query timing, caching
-│   │   │   ├── table.py          # Table CRUD, batch ops, schema
-│   │   │   ├── row.py            # Row (dict-like ORM object)
+│   │   │   ├── engine.py         # Engine, ConnectionPool, @engine.transaction
+│   │   │   ├── lazy_engine.py    # LazyEngine (build on first use)
+│   │   │   ├── transaction.py    # Transaction, query timing, caching, on_commit
+│   │   │   ├── table.py          # Table CRUD, batch ops, purge, schema
+│   │   │   ├── row.py            # Row (dict-like, write-through, batch_update())
 │   │   │   ├── result.py         # Result (cursor wrapper, transforms)
+│   │   │   ├── column.py         # Column helpers
+│   │   │   ├── database.py       # Database-level operations
+│   │   │   ├── jsonproxy.py      # Live list/dict values for JSON columns
 │   │   │   ├── async_support.py  # Async versions of core classes
 │   │   │   ├── view.py           # View management
 │   │   │   ├── sequence.py       # Sequence management
-│   │   │   └── decorators.py     # @create_missing, @return_default, etc.
-│   │   └── servers/
-│   │       ├── postgres/         # PostgreSQL dialect + initializer
-│   │       ├── mysql/            # MySQL dialect
-│   │       ├── sqlite/           # SQLite dialect
-│   │       └── mssql/            # SQL Server dialect
+│   │   │   └── decorators.py     # @create_missing, @return_default, retries
+│   │   ├── servers/
+│   │   │   ├── postgres/         # PostgreSQL dialect + initializer (primary)
+│   │   │   ├── mysql/            # MySQL dialect
+│   │   │   ├── sqlite/           # SQLite dialect
+│   │   │   ├── sqlserver/        # SQL Server dialect
+│   │   │   └── tablehelper.py    # Where/column/pointer-join compiler
+│   │   ├── fragments.py          # Literal / @@ token handling
+│   │   ├── maintenance.py        # DatabaseMaintenance (clone, snapshot, prune)
+│   │   ├── migrations.py         # `velocity` CLI: migration runner
+│   │   ├── tunnel.py             # DB_TUNNEL support
+│   │   └── exceptions.py         # Db* exception hierarchy
 │   ├── aws/
-│   │   └── handlers/
-│   │       ├── lambda_handler.py # HTTP Lambda handler
-│   │       └── sqs_handler.py    # SQS batch handler
+│   │   ├── handlers/             # LambdaHandler, SqsHandler, context, mixins
+│   │   │   └── mixins/           # DataService, client-input guard, jobs, sessions, web
+│   │   ├── capabilities/         # Per-site capability registry and provisioning
+│   │   ├── assets/               # Asset store: indexing, references, usage
+│   │   ├── deploy/               # Platform-neutral deployment engine
+│   │   ├── ssm_config.py         # SSM-backed config (project, then /Global)
+│   │   ├── s3.py                 # Presigned URLs, configured buckets
+│   │   ├── failures.py           # Failure events (SNS)
+│   │   ├── feature_flags.py      # sys_feature_flags cache + mirror
+│   │   ├── mirror.py             # Cross-database table mirroring
+│   │   ├── job_lifecycle.py      # Job status tracking
+│   │   ├── job_results.py        # Job result stores
+│   │   ├── dirty_pipeline.py     # sys_dirty / on_dirty pipeline
+│   │   ├── ops.py                # Operations dashboard data
+│   │   ├── email.py / sms.py     # SES email, SMS
+│   │   └── amplify.py, amplify_build.py, blobs.py, facets.py
+│   ├── nosql/                    # NoSQL store contract + adapters
 │   ├── payment/
 │   │   ├── base_adapter.py       # Abstract payment interface
-│   │   ├── stripe_adapter.py     # Stripe implementation
-│   │   └── braintree_adapter.py  # Braintree implementation
-│   └── misc/                     # Utility modules
-├── tests/                        # 400+ unit tests
+│   │   ├── stripe_adapter.py     # Stripe
+│   │   ├── braintree_adapter.py  # Braintree
+│   │   ├── authorizenet_adapter.py # Authorize.Net (CIM)
+│   │   ├── *_mirror.py           # Processor mirror tables
+│   │   └── money.py, charge_rules.py, redact.py
+│   └── misc/                     # conv (iconv/oconv), export, format, mail, pdf, timer, ...
+├── tests/                        # Unit tests (make test-unit)
 ├── docs/                         # Detailed documentation
 └── pyproject.toml
 ```
@@ -348,7 +386,10 @@ velocity-python/
 # Install with dev dependencies
 pip install -e ".[dev,test,postgres]"
 
-# Run tests
+# Run the unit suite (no database needed)
+make test-unit
+
+# Or directly
 pytest
 
 # Run with coverage

{velocity_python-0.1.129 → velocity_python-0.1.133}/README.md

@@ -71,12 +71,16 @@ pip install velocity-python[all]
 | `postgres` | `psycopg[binary]>=3.2.0` | PostgreSQL connections |
 | `aws` | `boto3`, `requests` | Lambda handlers, SQS, Amplify |
 | `excel` | `openpyxl` | Excel export |
+| `parquet` | `pyarrow` | Parquet export |
+| `ods` | `odfpy` | OpenDocument spreadsheet export |
 | `templates` | `jinja2` | Template rendering |
+| `pdf` | `weasyprint` | HTML → PDF rendering (native Pango/Cairo from the OS or a layer) |
 | `http` | `requests` | HTTP utilities |
-| `payment` | `stripe`, `braintree` | Payment processing |
+| `payment` | `stripe`, `braintree`, `xmltodict` | Stripe and Braintree adapters (Authorize.Net additionally needs `authorizenet`, installed separately — see `docs/payment.md`) |
 | `mysql` | `mysql-connector-python` | MySQL connections |
 | `sqlserver` | `python-tds` | SQL Server connections |
-| `all` | All of the above | Full install |
+| `redis`, `mongodb`, `elasticsearch`, `cassandra`, `couchbase` | the matching client | NoSQL adapters (`docs/nosql.md`) |
+| `all` | `postgres`, `aws`, `excel`, `templates`, `http`, `payment`, `pdf` | Typical full install |
 
 **Requires Python 3.9+** and uses **psycopg v3** (not psycopg2) for PostgreSQL.
 
@@ -152,16 +156,19 @@ Full documentation is included in the `docs/` directory of the source distributi
 
 | Guide | File | Description |
 |-------|------|-------------|
-| Database ORM | `docs/database.md` | Connections, transactions, tables, rows, results, queries, schema management |
+| Database ORM | `docs/database.md` | Connections, `DB_TUNNEL`, transactions, tables, rows, results, queries, purge, schema management |
+| Schema Management | `docs/schema-management.md` | Runtime auto-heal, declarative `ensure_schema()`, schema locking, conflict handling |
 | Performance & Optimization | `docs/performance.md` | Connection pooling, batch operations, query caching, prepared statements, N+1 prevention, observability |
 | Async Support | `docs/async.md` | AsyncTransaction, AsyncTable, AsyncResult, parallel queries with gather() |
-| Configuration Reference | `docs/configuration.md` | All environment variables, engine options, and connection settings |
-| AWS Lambda Handlers | `docs/aws-handlers.md` | LambdaHandler, SqsHandler, auth modes, per-record transactions, async jobs (JobHandler + job result stores) |
+| Configuration Reference | `docs/configuration.md` | Every environment variable and SSM config key velocity reads, `ssm_config`, S3 buckets, engine options |
+| AWS Lambda Handlers | `docs/aws-handlers.md` | LambdaHandler, SqsHandler, auth modes, per-record transactions, DataService client boundary, async jobs (JobHandler + job result stores), failure events |
+| AWS Auth Modes | `docs/AWS_HANDLERS_AUTH.md` | Cognito auth, public endpoints, webhooks |
+| Deployment | `docs/deploy.md` | `velocity.aws.deploy`: least-privilege IAM, function settings, layers, SQS queue reconcile |
 | Cross-database Mirroring | `docs/mirroring.md` | Keep a table identical in two databases (demo ↔ production) by natural key; rwx hooks, FK translation, reconcile |
 | Operations Dashboard | `docs/operations.md` | What the automation is doing: schedules, jobs, failures, stuck work, with drill-down (`velocity.aws.ops` + velocity-react `OpsDashboard`) |
 | NoSQL Adapters | `docs/nosql.md` | Redis, DynamoDB, MongoDB, Elasticsearch, Cassandra, Couchbase behind one capability-honest contract |
-| Payment Processing | `docs/payment.md` | Stripe and Braintree adapters, payment lifecycle |
-| Utilities | `docs/utilities.md` | Excel export, data conversion, formatting, timers, email parsing and SMTP sending |
+| Payment Processing | `docs/payment.md` | Stripe, Braintree and Authorize.Net adapters, processor mirrors, payment lifecycle |
+| Utilities | `docs/utilities.md` | Excel/PDF export, data conversion, formatting, timers, email parsing and SMTP sending |
 | Testing Guide | `docs/TESTING.md` | Running tests, markers, coverage |
 | Security | `docs/SECURITY.md` | Pre-commit hooks, credential scanning |
 
@@ -174,7 +181,7 @@ Engine (singleton — survives Lambda warm starts)
 ├── ConnectionPool (thread-safe, configurable min/max)
 └── Transaction (one per request, borrows from pool)
      ├── Table (CRUD, batch ops, schema management)
-     │    ├── Row (dict-like, lazy-cache, write-through, batch_update)
+     │    ├── Row (dict-like, lazy-cache, write-through, batch_update())
      │    └── Result (streaming cursor iteration, transforms)
      ├── View (create, grant, ensure)
      └── Sequence (create, next, current, configure)
@@ -207,7 +214,7 @@ from velocity.db.servers.sqlite import initialize
 engine = initialize(config={"database": "myapp.db"})
 
 # SQL Server
-from velocity.db.servers.mssql import initialize
+from velocity.db.servers.sqlserver import initialize
 engine = initialize()
 ```
 
@@ -218,32 +225,61 @@ engine = initialize()
 ```
 velocity-python/
 ├── src/velocity/
+│   ├── cache.py                  # Process-level read cache (cache_ttl / memo)
+│   ├── logging.py                # Logging setup (JSON in Lambda, text elsewhere)
 │   ├── db/
 │   │   ├── core/
-│   │   │   ├── engine.py         # Engine, ConnectionPool
-│   │   │   ├── transaction.py    # Transaction, query timing, caching
-│   │   │   ├── table.py          # Table CRUD, batch ops, schema
-│   │   │   ├── row.py            # Row (dict-like ORM object)
+│   │   │   ├── engine.py         # Engine, ConnectionPool, @engine.transaction
+│   │   │   ├── lazy_engine.py    # LazyEngine (build on first use)
+│   │   │   ├── transaction.py    # Transaction, query timing, caching, on_commit
+│   │   │   ├── table.py          # Table CRUD, batch ops, purge, schema
+│   │   │   ├── row.py            # Row (dict-like, write-through, batch_update())
 │   │   │   ├── result.py         # Result (cursor wrapper, transforms)
+│   │   │   ├── column.py         # Column helpers
+│   │   │   ├── database.py       # Database-level operations
+│   │   │   ├── jsonproxy.py      # Live list/dict values for JSON columns
 │   │   │   ├── async_support.py  # Async versions of core classes
 │   │   │   ├── view.py           # View management
 │   │   │   ├── sequence.py       # Sequence management
-│   │   │   └── decorators.py     # @create_missing, @return_default, etc.
-│   │   └── servers/
-│   │       ├── postgres/         # PostgreSQL dialect + initializer
-│   │       ├── mysql/            # MySQL dialect
-│   │       ├── sqlite/           # SQLite dialect
-│   │       └── mssql/            # SQL Server dialect
+│   │   │   └── decorators.py     # @create_missing, @return_default, retries
+│   │   ├── servers/
+│   │   │   ├── postgres/         # PostgreSQL dialect + initializer (primary)
+│   │   │   ├── mysql/            # MySQL dialect
+│   │   │   ├── sqlite/           # SQLite dialect
+│   │   │   ├── sqlserver/        # SQL Server dialect
+│   │   │   └── tablehelper.py    # Where/column/pointer-join compiler
+│   │   ├── fragments.py          # Literal / @@ token handling
+│   │   ├── maintenance.py        # DatabaseMaintenance (clone, snapshot, prune)
+│   │   ├── migrations.py         # `velocity` CLI: migration runner
+│   │   ├── tunnel.py             # DB_TUNNEL support
+│   │   └── exceptions.py         # Db* exception hierarchy
 │   ├── aws/
-│   │   └── handlers/
-│   │       ├── lambda_handler.py # HTTP Lambda handler
-│   │       └── sqs_handler.py    # SQS batch handler
+│   │   ├── handlers/             # LambdaHandler, SqsHandler, context, mixins
+│   │   │   └── mixins/           # DataService, client-input guard, jobs, sessions, web
+│   │   ├── capabilities/         # Per-site capability registry and provisioning
+│   │   ├── assets/               # Asset store: indexing, references, usage
+│   │   ├── deploy/               # Platform-neutral deployment engine
+│   │   ├── ssm_config.py         # SSM-backed config (project, then /Global)
+│   │   ├── s3.py                 # Presigned URLs, configured buckets
+│   │   ├── failures.py           # Failure events (SNS)
+│   │   ├── feature_flags.py      # sys_feature_flags cache + mirror
+│   │   ├── mirror.py             # Cross-database table mirroring
+│   │   ├── job_lifecycle.py      # Job status tracking
+│   │   ├── job_results.py        # Job result stores
+│   │   ├── dirty_pipeline.py     # sys_dirty / on_dirty pipeline
+│   │   ├── ops.py                # Operations dashboard data
+│   │   ├── email.py / sms.py     # SES email, SMS
+│   │   └── amplify.py, amplify_build.py, blobs.py, facets.py
+│   ├── nosql/                    # NoSQL store contract + adapters
 │   ├── payment/
 │   │   ├── base_adapter.py       # Abstract payment interface
-│   │   ├── stripe_adapter.py     # Stripe implementation
-│   │   └── braintree_adapter.py  # Braintree implementation
-│   └── misc/                     # Utility modules
-├── tests/                        # 400+ unit tests
+│   │   ├── stripe_adapter.py     # Stripe
+│   │   ├── braintree_adapter.py  # Braintree
+│   │   ├── authorizenet_adapter.py # Authorize.Net (CIM)
+│   │   ├── *_mirror.py           # Processor mirror tables
+│   │   └── money.py, charge_rules.py, redact.py
+│   └── misc/                     # conv (iconv/oconv), export, format, mail, pdf, timer, ...
+├── tests/                        # Unit tests (make test-unit)
 ├── docs/                         # Detailed documentation
 └── pyproject.toml
 ```
@@ -256,7 +292,10 @@ velocity-python/
 # Install with dev dependencies
 pip install -e ".[dev,test,postgres]"
 
-# Run tests
+# Run the unit suite (no database needed)
+make test-unit
+
+# Or directly
 pytest
 
 # Run with coverage

{velocity_python-0.1.129 → velocity_python-0.1.133}/pyproject.toml

@@ -4,14 +4,14 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "velocity-python"
-version = "0.1.129"
+version = "0.1.133"
 authors = [
   { name="Velocity Team", email="info@codeclubs.org" },
 ]
 description = "A rapid application development library for interfacing with data storage"
 readme = "README.md"
 license = "MIT"
-requires-python = ">=3.9"
+requires-python = ">=3.11"
 keywords = ["database", "orm", "sql", "rapid-development", "data-storage"]
 classifiers = [
     "Development Status :: 4 - Beta",
@@ -19,8 +19,6 @@ classifiers = [
     "Topic :: Database",
     "Topic :: Software Development :: Libraries :: Python Modules",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.9",
-    "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Operating System :: OS Independent",
@@ -90,8 +88,17 @@ payment = [
   "braintree>=4.30.0",
   "xmltodict>=0.13.0",
 ]
+# Plaid webhook ES256 verification (velocity.payment.plaid_webhook). ecdsa is
+# pure Python, so it fits a Lambda layer where `cryptography` does not.
+# Includes [payment] because importing velocity.payment.plaid_webhook runs
+# velocity/payment/__init__.py, which imports stripe and braintree eagerly;
+# drop it once those package-level imports are lazy or guarded.
+plaid = [
+  "velocity-python[payment]",
+  "ecdsa>=0.19.0",
+]
 all = [
-  "velocity-python[postgres,aws,excel,templates,http,payment,pdf]",
+  "velocity-python[postgres,aws,excel,templates,http,payment,plaid,pdf]",
 ]
 dev = [
   "pytest>=8.0.0",
@@ -117,6 +124,7 @@ test = [
   "braintree>=4.30.0",
   "xmltodict>=0.13.0",
   "authorizenet>=1.1.3",
+  "ecdsa>=0.19.0",
   "openpyxl>=3.1.0",
   # NoSQL adapter unit tests run against in-process fakes (real clients for
   # the wire formats, fakes for the servers). ES/Cassandra/Couchbase have
@@ -140,7 +148,7 @@ where = ["src"]
 
 [tool.black]
 line-length = 88
-target-version = ['py39', 'py310', 'py311', 'py312']
+target-version = ['py311', 'py312']
 include = '\.pyi?$'
 extend-exclude = '''
 /(
@@ -163,7 +171,7 @@ line_length = 88
 known_first_party = ["velocity"]
 
 [tool.mypy]
-python_version = "3.9"
+python_version = "3.11"
 mypy_path = "src"
 explicit_package_bases = true
 exclude = "(?x)(^src/velocity/.*/tests/)"

{velocity_python-0.1.129 → velocity_python-0.1.133}/src/velocity/__init__.py

@@ -1,4 +1,4 @@
-__version__ = version = "0.1.129"
+__version__ = version = "0.1.133"
 
 import importlib as _importlib
 

{velocity_python-0.1.129 → velocity_python-0.1.133}/src/velocity/aws/__init__.py

@@ -1,37 +1,18 @@
-import importlib as _importlib
-import os
-
-_APP_STAGE = os.environ.get("AppStage") or os.environ.get("AWS_BRANCH") or "demo"
-DEBUG = (_APP_STAGE != "production") or (os.environ.get("DEBUG") == "Y")
-
-
-# This is helpful for running HTTPS clients on lambda.
-if os.path.exists("/opt/python/ca-certificates.crt"):
-    os.environ["REQUESTS_CA_BUNDLE"] = "/opt/python/ca-certificates.crt"
+"""AWS helpers for velocity: handlers, SSM config, deploy, S3 and assets.
 
+Importing this package has no side effects: stage resolution lives in
+``velocity.aws.ssm_config`` and the Lambda CA bundle is exported as
+``REQUESTS_CA_BUNDLE`` when a handler is constructed (``BaseHandler.__init__``
+via ``_update_lambda_ca_certificates``; override the path with
+``VELOCITY_CA_BUNDLE``).
+"""
 
-class AWS(object):
-    # Get AWS EC2 Instance ID. Must run this from the EC2 instance itself to get the ID
-    @staticmethod
-    def instance_id(cls):
-        import requests
-
-        response = requests.get("http://169.254.169.254/latest/meta-data/instance-id")
-        instance_id = response.text
-        return instance_id
-
+import importlib as _importlib
 
 # Lazy-load heavy modules (boto3-dependent) on first access
 _LAZY_ATTRS = {
     "AmplifyProject": "velocity.aws.amplify",
-    # Legacy deployment API (shim over velocity.aws.deploy; legacy-union
-    # policy mode). New projects: import from velocity.aws.deploy directly.
-    "BackendDeploymentConfig": "velocity.aws.amplify_build",
-    "get_amplify_app_id_and_branch": "velocity.aws.amplify_build",
-    "initialize_build_environment": "velocity.aws.amplify_build",
-    "run_backend_deployment": "velocity.aws.amplify_build",
-    "update_lambda_layers_to_latest": "velocity.aws.amplify_build",
-    # Platform-neutral deployment API
+    # Platform-neutral deployment API (the full set is in velocity.aws.deploy)
     "AmplifyTarget": "velocity.aws.deploy",
     "DeploymentConfig": "velocity.aws.deploy",
     "PlainTarget": "velocity.aws.deploy",
@@ -39,6 +20,7 @@ _LAZY_ATTRS = {
     # S3 utilities
     "generate_presigned_get": "velocity.aws.s3",
     "generate_presigned_put": "velocity.aws.s3",
+    "iter_objects": "velocity.aws.s3",
     "list_client_files": "velocity.aws.s3",
     "normalize_client_prefix": "velocity.aws.s3",
     "CLIENT_FILES_BUCKET": "velocity.aws.s3",
@@ -62,7 +44,6 @@ _LAZY_ATTRS = {
     "extract_asset_references_from_html": "velocity.aws.assets",
     "extract_asset_references_from_record": "velocity.aws.assets",
     "extract_asset_references_from_value": "velocity.aws.assets",
-    "iter_s3_objects": "velocity.aws.assets",
     "list_assets": "velocity.aws.assets",
     "normalize_asset_record": "velocity.aws.assets",
     "reconcile_asset_usages": "velocity.aws.assets",
@@ -80,18 +61,13 @@ def __getattr__(name: str):
 __all__ = [
     "AmplifyProject",
     "AmplifyTarget",
-    "AWS",
-    "BackendDeploymentConfig",
     "DeploymentConfig",
     "PlainTarget",
-    "get_amplify_app_id_and_branch",
-    "initialize_build_environment",
-    "run_backend_deployment",
     "run_deployment",
-    "update_lambda_layers_to_latest",
     # S3 utilities
     "generate_presigned_get",
     "generate_presigned_put",
+    "iter_objects",
     "list_client_files",
     "normalize_client_prefix",
     "CLIENT_FILES_BUCKET",
@@ -114,7 +90,6 @@ __all__ = [
     "extract_asset_references_from_record",
     "extract_asset_references_from_value",
     "find_existing_asset",
-    "iter_s3_objects",
     "list_assets",
     "normalize_asset_record",
     "reconcile_asset_usages",

{velocity_python-0.1.129 → velocity_python-0.1.133}/src/velocity/aws/amplify.py

@@ -1,6 +1,65 @@
-import boto3
+import re
 from collections.abc import Mapping, Sequence
 
+import boto3
+
+# Extensions served as real files by the SPA rewrite; every other path is
+# rewritten to the SPA. Anything NOT listed (and not passed as an extra) is
+# invisible on the deployed site — e.g. a static .html page in public/.
+# One canonical list: apps add to it via extra_extensions, never copy it.
+SPA_STATIC_EXTENSIONS = (
+    "css",
+    "gif",
+    "html",
+    "ico",
+    "jpeg",
+    "jpg",
+    "js",
+    "json",
+    "map",
+    "otf",
+    "pdf",
+    "png",
+    "svg",
+    "ttf",
+    "txt",
+    "webp",
+    "woff",
+    "xml",
+)
+
+_EXTENSION_RE = re.compile(r"^[a-z0-9]+$")
+
+
+def spa_static_extensions(extra_extensions: Sequence[str] = ()) -> tuple:
+    """``SPA_STATIC_EXTENSIONS`` plus ``extra_extensions`` (leading dots and
+    case ignored), de-duplicated, canonical entries first."""
+    if isinstance(extra_extensions, str):
+        extra_extensions = (extra_extensions,)
+    extensions = list(SPA_STATIC_EXTENSIONS)
+    for raw in extra_extensions:
+        ext = str(raw).strip().lstrip(".").lower()
+        if not _EXTENSION_RE.match(ext):
+            raise ValueError(f"invalid static file extension: {raw!r}")
+        if ext not in extensions:
+            extensions.append(ext)
+    return tuple(extensions)
+
+
+def spa_custom_rules(extra_extensions: Sequence[str] = ()) -> list:
+    """Amplify customRules for a single-page app: 404s fall back to
+    /index.html, and every extension-less path or path whose extension is not
+    a served static type is rewritten to /."""
+    joined = "|".join(spa_static_extensions(extra_extensions))
+    return [
+        {"source": "/<*>", "target": "/index.html", "status": "404-200"},
+        {
+            "source": f"</^[^.]+$|\\.(?!({joined})$)([^.]+$)/>",
+            "target": "/",
+            "status": "200",
+        },
+    ]
+
 
 class AmplifyProject:
     def __init__(self, app_id: str):
@@ -108,41 +167,13 @@ class AmplifyProject:
                 appId=self.app_id, environmentVariables=env_vars
             )
 
-    def update_custom_redirect_rules(self):
-        # Extensions served as real files; every other path is rewritten to the
-        # SPA. Anything NOT listed here (including static .html pages in
-        # public/) is invisible on the deployed site.
-        srv_list = [
-            "css",
-            "gif",
-            "html",
-            "ico",
-            "jpeg",
-            "jpg",
-            "js",
-            "json",
-            "map",
-            "otf",
-            "png",
-            "svg",
-            "ttf",
-            "txt",
-            "webp",
-            "woff",
-            "xml",
-            "pdf",
-        ]
-        self.amplify_client.update_app(
-            appId=self.app_id,
-            customRules=[
-                {"source": "/<*>", "target": "/index.html", "status": "404-200"},
-                {
-                    "source": f'</^[^.]+$|\\.(?!({"|".join(srv_list)})$)([^.]+$)/>',
-                    "target": "/",
-                    "status": "200",
-                },
-            ],
-        )
+    def update_custom_redirect_rules(self, extra_extensions: Sequence[str] = ()):
+        """Apply the canonical SPA rewrite rules (``spa_custom_rules``) to the
+        app, serving ``SPA_STATIC_EXTENSIONS`` plus ``extra_extensions`` as
+        real files. Returns the rules applied."""
+        rules = spa_custom_rules(extra_extensions)
+        self.amplify_client.update_app(appId=self.app_id, customRules=rules)
+        return rules
 
     def get_sqs_policy_template(
         self,