Index authorized mailbox cache changes in Search

src/govoplan_mail/backend/manifest.py

@@ -35,6 +35,7 @@ from govoplan_core.core.provider_governance import (
     ProviderObjectDeclaration,
     declared_module_architecture,
 )
+from govoplan_core.core.search import SearchSourceProviderRegistration
 from govoplan_core.core.views import ViewSurface
 from govoplan_core.db.base import Base
 from govoplan_mail.backend.documentation import (
@@ -48,6 +49,7 @@ from govoplan_mail.backend.provider_state import (
     smtp_provider_states,
 )
 from govoplan_mail.backend.db import models as mail_models  # noqa: F401 - populate Mail ORM metadata
+from govoplan_mail.backend.search_source import create_mail_search_source
 
 
 _mail_table_retirement_provider = drop_table_retirement_provider(
@@ -299,7 +301,7 @@ manifest = ModuleManifest(
     name="Mail",
     version="0.1.10",
     required_capabilities=(CAPABILITY_AUTH_PRINCIPAL_RESOLVER, CAPABILITY_AUTH_PERMISSION_EVALUATOR),
-    optional_dependencies=("campaigns", "addresses", "calendar"),
+    optional_dependencies=("campaigns", "addresses", "calendar", "search"),
     provides_interfaces=(
         ModuleInterfaceProvider(name="mail.campaign_delivery", version="0.2.0"),
         ModuleInterfaceProvider(name="mail.delivery_commands", version="0.1.0"),
@@ -332,10 +334,22 @@ manifest = ModuleManifest(
             version_max_exclusive="0.2.0",
             optional=True,
         ),
+        ModuleInterfaceRequirement(
+            name="search.source",
+            version_min="1.0.0",
+            version_max_exclusive="2.0.0",
+            optional=True,
+        ),
     ),
     permissions=PERMISSIONS,
     route_factory=_mail_router,
     role_templates=ROLE_TEMPLATES,
+    search_sources=(
+        SearchSourceProviderRegistration(
+            id="mail.mailbox_messages",
+            factory=create_mail_search_source,
+        ),
+    ),
     nav_items=(NavItem(path="/mail", label="Mail", icon="mail", required_any=("mail:mailbox:read", "mail:bounce:read", "mail:bounce:manage"), order=50),),
     frontend=FrontendModule(
         module_id="mail",
@@ -404,6 +418,23 @@ manifest = ModuleManifest(
         ).SqlMailBounceProcessingProvider(),
     },
     documentation=(
+        DocumentationTopic(
+            id="mail.search.mailbox-messages",
+            title="Search authorized mailbox messages",
+            summary="Expose bounded cached mailbox message metadata and previews to permission-aware platform Search.",
+            body=(
+                "When Search is installed, Mail contributes its read-only mailbox cache, never credentials or "
+                "unbounded raw messages. Results require both mailbox-read and profile-use authority and recheck "
+                "the current profile scope, policy, activity, tenant, user, group, or Campaign visibility before "
+                "returning a result. Mailbox refreshes publish durable index changes; a rebuild remains available "
+                "for reconciliation."
+            ),
+            layer="configured",
+            documentation_types=("admin", "user"),
+            audience=("mail_user", "mail_admin", "administrator"),
+            related_modules=("search",),
+            order=38,
+        ),
         DocumentationTopic(
             id="mail.profiles-and-policy",
             title="Mail profiles and policy hierarchy",