Provide managed generated artifact storage

src/govoplan_files/backend/manifest.py

@@ -7,7 +7,10 @@ from sqlalchemy import inspect
 
 from govoplan_core.core.access import CAPABILITY_AUTH_PERMISSION_EVALUATOR, CAPABILITY_AUTH_PRINCIPAL_RESOLVER
 from govoplan_core.core.encryption import CAPABILITY_ENCRYPTION_CONTENT_CIPHER
-from govoplan_core.core.files import CAPABILITY_FILES_ACCESS
+from govoplan_core.core.files import (
+    CAPABILITY_FILES_ACCESS,
+    CAPABILITY_FILES_ARTIFACT_STORE,
+)
 from govoplan_core.core.module_guards import drop_table_retirement_provider, persistent_table_uninstall_guard
 from govoplan_core.core.modules import (
     DocumentationCondition,
@@ -280,6 +283,7 @@ manifest = ModuleManifest(
     provides_interfaces=(
         ModuleInterfaceProvider(name="files.access", version="0.1.6"),
         ModuleInterfaceProvider(name="files.campaign_attachments", version="0.1.6"),
+        ModuleInterfaceProvider(name=CAPABILITY_FILES_ARTIFACT_STORE, version="0.1.14"),
     ),
     requires_interfaces=(
         ModuleInterfaceRequirement(
@@ -792,6 +796,29 @@ manifest = ModuleManifest(
                 "verification": "Run the Files storage round-trip check and a coordinated restore drill against the exact deployment topology.",
             },
         ),
+        DocumentationTopic(
+            id="files.reference.generated-artifact-store",
+            title="Store generated module artifacts",
+            summary="Let optional producer modules persist generated output through the Files authority boundary.",
+            body="The files.artifact_store capability accepts generated bytes plus bounded non-secret provenance, applies Files upload authorization, ownership, path, version, and blob-storage rules, and returns provider-neutral file/version references. Idempotency uses source provenance. Artifact acceptance does not prove printing, mailing, or another external effect.",
+            layer="available",
+            documentation_types=("admin", "user"),
+            audience=("file_admin", "operator", "module_admin", "integrator"),
+            order=55,
+            conditions=(
+                DocumentationCondition(
+                    required_modules=("files",),
+                    any_scopes=("files:file:upload", "files:file:admin"),
+                ),
+            ),
+            links=(
+                DocumentationLink(label="Files", href="/files", kind="runtime"),
+                DocumentationLink(label="Files handbook", href="govoplan-files/docs/FILES_HANDBOOK.md", kind="repository"),
+                DocumentationLink(label="Generated artifact contract", href="govoplan-files/docs/GENERATED_ARTIFACT_STORE.md", kind="repository"),
+            ),
+            related_modules=("templates", "campaigns", "reporting"),
+            metadata={"kind": "reference", "route": "/files"},
+        ),
     ),
     documentation_providers=(documentation_topics,),
     migration_spec=MigrationSpec(
@@ -819,6 +846,7 @@ manifest = ModuleManifest(
     ),
     capability_factories={
         CAPABILITY_FILES_ACCESS: lambda context: __import__("govoplan_files.backend.capabilities", fromlist=["access_capability"]).access_capability(context),
+        CAPABILITY_FILES_ARTIFACT_STORE: lambda context: __import__("govoplan_files.backend.capabilities", fromlist=["artifact_store_capability"]).artifact_store_capability(context),
         "files.campaign_attachments": lambda context: __import__("govoplan_files.backend.capabilities", fromlist=["campaign_capability"]).campaign_capability(context),
     },
     operational_check_providers=(