App store module (app_store)

The app_store module in src/cluster_erp/modules/app_store/ is a platform module. It keeps the catalogue of sellable apps, the uploaded licence, which roles may use which app, users' requests for apps, and which apps the deployment has installed. Administrators manage it through the store and app manager apps; every user's launcher is rendered from its registry. The enforcement on other modules' APIs is in server/entitlements.py and is explained in app store licensing and entitlements.

At a glance¶

What the module does¶

• Converges the catalogue table to the shipped catalog.json at every start-up and installs new apps on first boot (src/cluster_erp/modules/app_store/module.py:38-52, src/cluster_erp/modules/app_store/services.py:91-135).
• Serves each user's registry: every enabled app with its entitled, installed, seat, and reconsent state (src/cluster_erp/modules/app_store/routes.py:18-39).
• Stores and re-verifies the licence (src/cluster_erp/modules/app_store/services.py:191-265).
• Keeps role seat rules and app requests (src/cluster_erp/modules/app_store/services.py:267-361).
• Installs, reconsents, and uninstalls apps (src/cluster_erp/modules/app_store/services.py:169-189).
• Serves per-app JavaScript bundles from gated_apps/ after a layer check (src/cluster_erp/modules/app_store/routes.py:95-155).

Sub-modules¶

Data model¶

The catalogue holds 28 apps, 6 of them system apps, counted from the entries of catalog.json.

Screens and metadata¶

The module declares no metadata entities; its surfaces are dedicated apps, not metadata screens (src/cluster_erp/modules/app_store/module.py:65-79). The licence card shows License Status (webapp/i18n/en.json key license.status_title) and the store shows License required for an unlicensed app (webapp/i18n/en.json key store.license_needed). The client code is documented in gated app bundles.

Status and actions¶

Business rules¶

• A seat rule blocked on any of the user's roles wins; once any required or available rule exists, only those roles get the app; an app without rules is open (src/cluster_erp/modules/app_store/services.py:23-47).
• Approving an app request makes the app available for every live role of the requester (src/cluster_erp/modules/app_store/services.py:357-361, src/cluster_erp/modules/app_store/routes.py:243-252).
• Re-seeding never re-enables an app that an operator withdrew from sale (src/cluster_erp/modules/app_store/services.py:91-99).
• A replaced or removed licence stays as a deactivated row (src/cluster_erp/modules/app_store/services.py:246-265).

Events and queries¶

The module registers no EventBus handlers (src/cluster_erp/modules/app_store/module.py:59-60). It reads role ids through role_ids_for in modules/auth/guards.py (src/cluster_erp/modules/app_store/routes.py:250-252).

Permissions¶

The four codes are seeded as extra codes (src/cluster_erp/server/app.py:801-807). The registry, the licence read, the asset route, and app requests need authentication only (src/cluster_erp/modules/app_store/routes.py:18-66, src/cluster_erp/modules/app_store/routes.py:103-110).

Privacy, retention, and history¶

The module holds no personal data beyond user and role ids on requests and assignments; it has no privacy_handlers.py. All tables derive from BaseModel, so their changes are in change history; see change history.

Analytics facts¶

This module has no analytics_facts.py.

Settings and reference data¶

license_public_key arms licensing; when empty, every catalogue app is entitled (src/cluster_erp/config/settings.py:566-569). The catalogue itself is vendor data in catalog.json (src/cluster_erp/modules/app_store/services.py:50-63).

Tests¶

Found by file name in tests/ and web-client/.

Terms introduced¶

Related pages¶

• Modules index
• API reference for this module
• App store licensing and entitlements

Verified against commit 92f8051 on 2026-11-13.