cadrumo.domain.auth.apoderamientos package

AEAT apoderamiento scope catalogue and token parser.

The defining catalogue module adapts the published runtime scope catalogue as an ApoderamientosCatalogue of ApoderadoScope records and defines parse_scope_tokens() for operator-supplied --scope values. The parser is a domain validation boundary: scope codes must be uppercase catalogue tokens, ALL expands to every catalogue code, comma-separated values are rejected, duplicate scopes are deduplicated, and unknown codes raise UnknownScopeError.

The subpackage only owns the scope vocabulary and validation rules; its initializer exports no symbols. Persisted represented-party configuration, active-bucket routing, and the permanent refusal of live AEAT-side apoderamiento mutation are application concerns owned by application.auth.apoderado_service.ApoderadoService.

See also

  • domain.auth for the inert parent namespace.

  • application.auth.apoderado_service.ApoderadoService for the encrypted bucket-scoped configuration service that consumes these parsed scope codes.

  • entrypoints.cli.config._apoderado for CLI commands that collect repeated --scope options before calling the application service.

Submodules