velocity-python 0.1.23__tar.gz → 0.1.24__tar.gz

{velocity_python-0.1.23/src/velocity_python.egg-info → velocity_python-0.1.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: velocity-python
-Version: 0.1.23
+Version: 0.1.24
 Summary: A rapid application development library for interfacing with data storage
 Author-email: Velocity Team <info@codeclubs.org>
 License-Expression: MIT

{velocity_python-0.1.23 → velocity_python-0.1.24}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "velocity-python"
-version = "0.1.23"
+version = "0.1.24"
 authors = [
   { name="Velocity Team", email="info@codeclubs.org" },
 ]

{velocity_python-0.1.23 → velocity_python-0.1.24}/src/velocity/__init__.py

@@ -1,4 +1,4 @@
-__version__ = version = "0.1.23"
+__version__ = version = "0.1.24"
 
 import importlib as _importlib
 

velocity_python-0.1.24/src/velocity/aws/ssm_config.py

@@ -0,0 +1,94 @@
+"""
+SSM-backed configuration with environment-variable fallback.
+
+Opt-in: set ``VELOCITY_SSM_ENABLED=true`` in your Amplify environment variables
+(pushed via ``bootstrap.py secrets``).
+
+When enabled, ``getenv(key)`` reads from SSM at::
+
+    /{ProjectName}/{ENV}/{key}
+
+and falls back to ``os.environ`` on a miss or any error.  Results are cached
+for the process lifetime so SSM is called at most once per key per Lambda
+cold start.
+
+When **not** enabled (the default), ``getenv`` is a thin wrapper around
+``os.environ.get`` with zero extra overhead — preserving full backward
+compatibility for projects that don't use SSM (e.g. caringcent).
+"""
+
+from __future__ import annotations
+
+import logging
+import os
+from typing import Optional
+
+logger = logging.getLogger(__name__)
+
+# Per-process cache: key → value (str) or sentinel _MISS.
+_MISS = object()
+_cache: dict[str, object] = {}
+
+# Lazily evaluated once per process.
+_SSM_ENABLED: bool | None = None
+
+
+def _is_enabled() -> bool:
+    global _SSM_ENABLED
+    if _SSM_ENABLED is None:
+        _SSM_ENABLED = os.environ.get('VELOCITY_SSM_ENABLED', '').lower() in ('1', 'true', 'yes')
+    return _SSM_ENABLED
+
+
+def _ssm_prefix() -> str | None:
+    """Return '/{ProjectName}/{ENV}' or None if either var is missing."""
+    project = os.environ.get('ProjectName')
+    env = os.environ.get('ENV')
+    if project and env:
+        return f'/{project}/{env}'
+    return None
+
+
+def _fetch(key: str) -> str | None:
+    """Single SSM GetParameter call; returns value or None on any failure."""
+    prefix = _ssm_prefix()
+    if prefix is None:
+        return None
+    param_name = f'{prefix}/{key}'
+    try:
+        import boto3
+        ssm = boto3.client('ssm', region_name=os.environ.get('REGION', 'us-east-1'))
+        resp = ssm.get_parameter(Name=param_name, WithDecryption=True)
+        return resp['Parameter']['Value']
+    except Exception as exc:
+        logger.debug('SSM miss for %s: %s', param_name, exc)
+        return None
+
+
+def getenv(key: str, default: Optional[str] = None) -> Optional[str]:
+    """
+    Read a config value, checking SSM before ``os.environ``.
+
+    SSM is only consulted when ``VELOCITY_SSM_ENABLED=true`` is set in the
+    Lambda environment *and* both ``ProjectName`` and ``ENV`` are present.
+    All other cases fall straight through to ``os.environ``.
+
+    Results are cached per process so SSM is queried at most once per key
+    per Lambda cold start.
+    """
+    if _is_enabled():
+        if key not in _cache:
+            value = _fetch(key)
+            _cache[key] = value if value is not None else _MISS
+        cached = _cache[key]
+        if cached is not _MISS:
+            return cached  # type: ignore[return-value]
+
+    return os.environ.get(key, default)
+
+
+def clear_cache() -> None:
+    """Clear the SSM cache (useful in tests)."""
+    _cache.clear()
+    global _SSM_ENABLED
+    _SSM_ENABLED = None

{velocity_python-0.1.23 → velocity_python-0.1.24}/src/velocity/db/servers/postgres/__init__.py

@@ -1,6 +1,7 @@
 import os
 from ..base.initializer import BaseInitializer
 from velocity.db.core import engine
+from velocity.aws.ssm_config import getenv as _getenv
 
 
 # Default TCP keepalive settings for PostgreSQL connections.
@@ -41,14 +42,14 @@ class PostgreSQLInitializer(BaseInitializer):
 
         from .sql import SQL
 
-        # Base configuration from environment
+        # Base configuration from environment / SSM
         # psycopg v3 uses libpq param names; 'dbname' not 'database'.
         base_config = {
-            "dbname": os.environ.get("DBDatabase"),
-            "host": os.environ.get("DBHost"),
-            "port": os.environ.get("DBPort"),
-            "user": os.environ.get("DBUser"),
-            "password": os.environ.get("DBPassword"),
+            "dbname": _getenv("DBDatabase"),
+            "host": _getenv("DBHost"),
+            "port": _getenv("DBPort"),
+            "user": _getenv("DBUser"),
+            "password": _getenv("DBPassword"),
         }
 
         # Remove None values
@@ -65,7 +66,7 @@ class PostgreSQLInitializer(BaseInitializer):
 
         # SSL mode — default to "prefer" so connections upgrade when the
         # server supports TLS but don't fail when it doesn't.
-        ssl_mode = os.environ.get("VELOCITY_SSL_MODE")
+        ssl_mode = _getenv("VELOCITY_SSL_MODE")
         if ssl_mode:
             final_config.setdefault("sslmode", ssl_mode)
 
@@ -108,11 +109,11 @@ def initialize(config=None, schema_locked=False, **kwargs):
     from .sql import SQL
 
     konfig = {
-        "dbname": os.environ["DBDatabase"],
-        "host": os.environ["DBHost"],
-        "port": os.environ["DBPort"],
-        "user": os.environ["DBUser"],
-        "password": os.environ["DBPassword"],
+        "dbname": _getenv("DBDatabase") or os.environ["DBDatabase"],
+        "host": _getenv("DBHost") or os.environ["DBHost"],
+        "port": _getenv("DBPort") or os.environ["DBPort"],
+        "user": _getenv("DBUser") or os.environ["DBUser"],
+        "password": _getenv("DBPassword") or os.environ["DBPassword"],
     }
     konfig.update(config or {})
     konfig.update(kwargs)
@@ -122,7 +123,7 @@ def initialize(config=None, schema_locked=False, **kwargs):
         konfig.setdefault(key, default_val)
 
     # SSL mode.
-    ssl_mode = os.environ.get("VELOCITY_SSL_MODE")
+    ssl_mode = _getenv("VELOCITY_SSL_MODE")
     if ssl_mode:
         konfig.setdefault("sslmode", ssl_mode)
 

{velocity_python-0.1.23 → velocity_python-0.1.24/src/velocity_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: velocity-python
-Version: 0.1.23
+Version: 0.1.24
 Summary: A rapid application development library for interfacing with data storage
 Author-email: Velocity Team <info@codeclubs.org>
 License-Expression: MIT

{velocity_python-0.1.23 → velocity_python-0.1.24}/src/velocity_python.egg-info/SOURCES.txt

@@ -7,6 +7,7 @@ src/velocity/aws/__init__.py
 src/velocity/aws/amplify.py
 src/velocity/aws/amplify_build.py
 src/velocity/aws/s3.py
+src/velocity/aws/ssm_config.py
 src/velocity/aws/handlers/__init__.py
 src/velocity/aws/handlers/base_handler.py
 src/velocity/aws/handlers/context.py