cadrumo.application.workflow.profile_bucket_scan module

Committed-capsule profile discovery for workflow projections.

Workflow sees only the non-authoritative UUID and label projection emitted by the custody capsule owner. It does not inspect manifests, buckets, deleted directories, or record facts.

That projection is exactly what the profile summary inventory observes, so this module reads it rather than building a second one. It previously went through the authenticated aggregate, which took a per-profile custody lock and could publish a label head as a side effect of resolving a name – work no consumer here needs, and a second definition of “which profiles exist” that could disagree with the first.

It takes the REFUSING half of that boundary. Callers here receive a pointer or None, with no channel to explain a store that could not be read, so an unreadable capsule must raise rather than resolve to “absent” – health assessment distinguishes a dangling pointer from an unreadable capsule, and collapsing the two reports a damaged profile as a missing one.

read_profile_bucket(label, *, root=None)

Resolve one exact label from committed-capsule label projections.

Return type:

ProfileBucketPointer | None

Parameters:

• label (str)

• root (Path | None)

read_profile_bucket_by_id(profile_id, *, root=None)

Resolve one UUID only when its current capsule is committed.

Return type:

ProfileBucketPointer | None

Parameters:

• profile_id (str)

• root (Path | None)

resolve_profile_bucket(identifier, *, root=None)

Resolve a UUID or exact label through the current capsule projection.

Return type:

ProfileBucketPointer | None

Parameters:

• identifier (str)

• root (Path | None)

list_profile_buckets(*, root=None)

Return every committed capsule’s non-authoritative label projection.

Return type:

dict[str, ProfileBucketPointer]

Parameters:

root (Path | None)