initial commit after split

2026-06-24 01:43:21 +02:00
parent 23213b15e2
commit d922b7701c
47 changed files with 4432 additions and 0 deletions
--- a/src/govoplan_mail/backend/manifest.py
+++ b/src/govoplan_mail/backend/manifest.py
@@ -0,0 +1,83 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+from govoplan_core.core.modules import FrontendModule, MigrationSpec, ModuleContext, ModuleManifest, PermissionDefinition, RoleTemplate
+from govoplan_core.db.base import Base
+from govoplan_mail.backend.db import models as mail_models  # noqa: F401 - populate Mail ORM metadata
+
+
+def _permission(scope: str, label: str, description: str) -> PermissionDefinition:
+    module_id, resource, action = scope.split(":", 2)
+    return PermissionDefinition(
+        scope=scope,
+        label=label,
+        description=description,
+        category="Mail",
+        level="tenant",
+        module_id=module_id,
+        resource=resource,
+        action=action,
+    )
+
+
+PERMISSIONS = (
+    _permission("mail:profile:read", "View mail profiles", "Inspect reusable SMTP/IMAP profile metadata."),
+    _permission("mail:profile:use", "Use mail profiles", "Select an approved mail profile for delivery."),
+    _permission("mail:profile:test", "Test mail profiles", "Run SMTP/IMAP connection tests."),
+    _permission("mail:profile:write", "Manage mail profiles", "Create and edit reusable mail profiles."),
+    _permission("mail:secret:manage", "Manage mail secrets", "Create or replace stored SMTP/IMAP credentials."),
+)
+
+ROLE_TEMPLATES = (
+    RoleTemplate(
+        slug="mail_profile_admin",
+        name="Mail profile administrator",
+        description="Manage reusable mail profiles and credentials.",
+        permissions=(
+            "mail:profile:read",
+            "mail:profile:use",
+            "mail:profile:test",
+            "mail:profile:write",
+            "mail:secret:manage",
+        ),
+    ),
+    RoleTemplate(
+        slug="mail_profile_user",
+        name="Mail profile user",
+        description="Use and test approved mail profiles without reading secrets.",
+        permissions=("mail:profile:read", "mail:profile:use", "mail:profile:test"),
+    ),
+)
+
+
+def _mail_router(context: ModuleContext):
+    from govoplan_mail.backend.runtime import configure_runtime
+
+    configure_runtime(settings=context.settings)
+    from govoplan_mail.backend.router import router
+
+    return router
+
+
+manifest = ModuleManifest(
+    id="mail",
+    name="Mail",
+    version="1.0.0",
+    dependencies=("access",),
+    optional_dependencies=(),
+    permissions=PERMISSIONS,
+    route_factory=_mail_router,
+    role_templates=ROLE_TEMPLATES,
+    frontend=FrontendModule(module_id="mail", package_name="@govoplan/mail-webui"),
+    migration_spec=MigrationSpec(
+        module_id="mail",
+        metadata=Base.metadata,
+        script_location=str(Path(__file__).with_name("migrations") / "versions"),
+    ),
+)
+
+
+def get_manifest() -> ModuleManifest:
+    return manifest
+