Initialize GovOPlaN module seed

src/govoplan_certificates/__init__.py

@@ -0,0 +1 @@
+"""GovOPlaN Certificates module."""

src/govoplan_certificates/backend/__init__.py

@@ -0,0 +1 @@
+"""Backend integration for the GovOPlaN Certificates module."""

src/govoplan_certificates/backend/manifest.py

@@ -0,0 +1,101 @@
+from __future__ import annotations
+
+from govoplan_core.core.access import CAPABILITY_AUTH_PERMISSION_EVALUATOR, CAPABILITY_AUTH_PRINCIPAL_RESOLVER
+from govoplan_core.core.modules import DocumentationLink, DocumentationTopic, ModuleManifest, PermissionDefinition, RoleTemplate
+
+MODULE_ID = "certificates"
+MODULE_NAME = "Certificates"
+MODULE_VERSION = "0.1.6"
+READ_SCOPE = "certificates:workspace:read"
+WRITE_SCOPE = "certificates:workspace:write"
+ADMIN_SCOPE = "certificates:workspace:admin"
+OPTIONAL_DEPENDENCIES = (
+    "learning",
+    "cases",
+    "forms-runtime",
+    "files",
+    "portal",
+    "records",
+)
+
+
+def _permission(scope: str, label: str, description: str) -> PermissionDefinition:
+    module_id, resource, action = scope.split(":", 2)
+    return PermissionDefinition(
+        scope=scope,
+        label=label,
+        description=description,
+        category="Certificates",
+        level="tenant",
+        module_id=module_id,
+        resource=resource,
+        action=action,
+    )
+
+
+PERMISSIONS = (
+    _permission(READ_SCOPE, "View certificates workspace", "Read certificates records, configuration, and workflow context."),
+    _permission(WRITE_SCOPE, "Manage certificates workspace", "Create and update certificates records and workflow state."),
+    _permission(ADMIN_SCOPE, "Administer certificates workspace", "Configure certificates policies, templates, and tenant-level administration."),
+)
+
+ROLE_TEMPLATES = (
+    RoleTemplate(
+        slug="certificates_manager",
+        name="Certificates manager",
+        description="Manage certificates records and workflow state.",
+        permissions=(READ_SCOPE, WRITE_SCOPE),
+    ),
+    RoleTemplate(
+        slug="certificates_viewer",
+        name="Certificates viewer",
+        description="Read certificates records and workflow context.",
+        permissions=(READ_SCOPE,),
+    ),
+)
+
+DOCUMENTATION = (
+    DocumentationTopic(
+        id=f"{MODULE_ID}.module-boundary",
+        title=f"{MODULE_NAME} module boundary",
+        summary="Issuing, revoking, verifying, and archiving certificates, attestations, participation confirmations, permits, and eligibility statements.",
+        body=(
+            "This repository is currently a platform module seed. It registers the domain boundary, "
+            "permission surface, role templates, and documentation metadata before runtime APIs, "
+            "database models, migrations, and WebUI routes are introduced."
+        ),
+        layer="available",
+        documentation_types=("admin",),
+        audience=("operator", "module_admin", "product_owner"),
+        order=100,
+        related_modules=OPTIONAL_DEPENDENCIES,
+        links=(
+            DocumentationLink(
+                label="Repository domain boundary",
+                href="govoplan-certificates/docs/CERTIFICATES_DOMAIN_BOUNDARY.md",
+                kind="repository",
+            ),
+        ),
+        metadata={
+            "seed": True,
+            "domain_objects": ['certificate issuance records', 'revocation and verification state', 'attestation metadata', 'archive references', 'eligibility statements'],
+            "first_slice": "Define certificate templates, issued certificate records, revocation state, and verification lookup contracts.",
+        },
+    ),
+)
+
+manifest = ModuleManifest(
+    id=MODULE_ID,
+    name=MODULE_NAME,
+    version=MODULE_VERSION,
+    dependencies=("access",),
+    optional_dependencies=OPTIONAL_DEPENDENCIES,
+    required_capabilities=(CAPABILITY_AUTH_PRINCIPAL_RESOLVER, CAPABILITY_AUTH_PERMISSION_EVALUATOR),
+    permissions=PERMISSIONS,
+    role_templates=ROLE_TEMPLATES,
+    documentation=DOCUMENTATION,
+)
+
+
+def get_manifest() -> ModuleManifest:
+    return manifest