zooqueenandHanzo Dev 6c4f4d660b A sandbox read takes Square's sandbox names only ...

thirdparty/square.FromEnv is the one reader of the deployment's Square
account: SQUARE_SANDBOX_* for sandbox, SQUARE_* for production, never
mixed. The five readers (the org processor, the public tenant config,
the unified provider's env seed, the standalone init and payment links)
call it, so an empty sandbox set is an unconfigured processor and a
sandbox token is never paired with a production location.

The resolver tests now set the sandbox names they expect and keep the
production ones as hostile values a sandbox org must not show.

Co-authored-by: Hanzo Dev <[email protected]>

2026-10-16 07:27:17 -07:00

..

customer_test.go

fix(billing): one Square customer per billing subject, found or made once

2026-10-14 14:15:41 -07:00

customer.go

fix(billing): one Square customer per billing subject, found or made once

2026-10-14 14:15:41 -07:00

env_test.go

A sandbox read takes Square's sandbox names only

2026-10-16 07:27:17 -07:00

env.go

A sandbox read takes Square's sandbox names only

2026-10-16 07:27:17 -07:00

idem_test.go

Hanzo Commerce

2026-09-23 21:52:16 -07:00

idem.go

fix(billing): one Square customer per billing subject, found or made once

2026-10-14 14:15:41 -07:00

init.go

A sandbox read takes Square's sandbox names only

2026-10-16 07:27:17 -07:00

processor.go

billing: a wallet sale asks Square again instead of guessing, and seats are bounded

2026-10-15 22:26:31 -07:00

said_test.go

billing: a wallet sale asks Square again instead of guessing, and seats are bounded

2026-10-15 22:26:31 -07:00

webhook_signature_test.go

A dispute moves money only while Square withholds the funds, every dispute report is ordered by the dispute's version, and Square's dispute.state.updated is read as dispute.state.changed was

2026-10-01 17:42:55 -07:00