Prepare GovOPlaN self-hosted release workflow

src/govoplan_core/tenancy/service.py

@@ -6,8 +6,8 @@ from sqlalchemy.orm import Session
 
 from govoplan_core.admin.common import AdminValidationError
 from govoplan_core.admin.settings import get_system_settings
+from govoplan_core.core.access import CAPABILITY_ACCESS_ADMINISTRATION, AccessAdministration
 from govoplan_core.core.runtime import get_registry
-from govoplan_access.backend.db.models import ApiKey, Group, User
 from govoplan_core.tenancy.scope import Tenant
 
 
@@ -57,14 +57,27 @@ def _tenant_module_counts(session: Session, tenant_id: str) -> dict[str, int]:
     return counts
 
 
+def _access_administration() -> AccessAdministration | None:
+    registry = get_registry()
+    if registry is None or not hasattr(registry, "has_capability") or not registry.has_capability(CAPABILITY_ACCESS_ADMINISTRATION):
+        return None
+    capability = registry.require_capability(CAPABILITY_ACCESS_ADMINISTRATION)
+    if not isinstance(capability, AccessAdministration):
+        raise TypeError("Access administration capability is invalid")
+    return capability
+
+
 def tenant_counts(session: Session, tenant_id: str) -> dict[str, int]:
     module_counts = _tenant_module_counts(session, tenant_id)
+    access_administration = _access_administration()
+    access_counts = access_administration.tenant_counts(session, tenant_id) if access_administration is not None else {}
 
     return {
-        "users": session.query(User).filter(User.tenant_id == tenant_id).count(),
-        "active_users": session.query(User).filter(User.tenant_id == tenant_id, User.is_active.is_(True)).count(),
-        "groups": session.query(Group).filter(Group.tenant_id == tenant_id).count(),
+        "users": int(access_counts.get("users", 0)),
+        "active_users": int(access_counts.get("active_users", 0)),
+        "groups": int(access_counts.get("groups", 0)),
         "campaigns": module_counts.get("campaigns", 0),
         "files": module_counts.get("files", 0),
-        "api_keys": session.query(ApiKey).filter(ApiKey.tenant_id == tenant_id, ApiKey.revoked_at.is_(None)).count(),
+        "api_keys": int(access_counts.get("api_keys", 0)),
+        "active_api_keys": int(access_counts.get("active_api_keys", access_counts.get("api_keys", 0))),
     }