cadrumo.application.modelo.review_package_signing_ports module

Application-owned keypair capability for review-package signing.

Signing policy and the keypair DTO remain application concerns. The bucket-scoped mint/load/persist operation is supplied by an outer composition root so secure-object storage and its failure modes cannot enter the application service.

class ReviewPackageSigningKeypairCapability(*args, **kwargs)

Bases: Protocol

Application-facing capability for one bucket’s signing keypair.

ensure_keypair(*, bucket_id, generated_at=None)

Return or mint the bucket-scoped signing keypair.

Return type:

ReviewPackageSigningKeypair

Parameters:

• bucket_id (str)

• generated_at (datetime | None)

class ReviewPackageSigningKeypairCapabilityFactory(*args, **kwargs)

Bases: Protocol

Construct a signing-keypair capability for one profile bucket.