The repository contains the extracted access seed implementation under src/govoplan_access/backend. Some live product routes and legacy ORM models still reside in govoplan-core as compatibility code while the staged extraction continues. The staged extraction path is documented in:

/mnt/DATA/git/govoplan-core/docs/ACCESS_EXTRACTION_PLAN.md
/mnt/DATA/git/govoplan-core/docs/MODULE_ARCHITECTURE.md

Initial Ownership

This module will own:

accounts and login identity
authentication routes and session lifecycle
API keys
tenant-local users
groups and memberships
roles and role assignments
principal resolution
permission evaluation
access administration backend routes
access administration WebUI route contributions
access-owned migrations

The kernel remains responsible for module discovery, route aggregation, database/session lifecycle, migration orchestration, capability registry, and stable contracts.

Gitea Workflow

This repository uses the shared GovOPlaN Gitea issue workflow. Issue templates are installed under .gitea/, and the shared label taxonomy is copied to docs/gitea-labels.json.

From the core checkout, labels can be synced once a local GITEA_TOKEN is available:

cd /mnt/DATA/git/govoplan-core
./scripts/gitea-sync-labels.py --root /mnt/DATA/git/govoplan-access --apply

Development Install

From the core checkout:

cd /mnt/DATA/git/govoplan-core
./.venv/bin/python -m pip install -e ../govoplan-access