fix(d3): systemischer Permission-Resolver-Bug behoben — DMS/Mail get_entity_models-Overrides ergänzt (dms_file/dms_folder/file/mail_account fehlten im ENTITY_MODELS-Mapping → ValueError bei allen Entity-Freigaben zur Laufzeit); pgvector-Extension in conftest db_setup verankert; test_permissions 22/22 grün; Resolver-Auflösung aller 4 Typen direkt bewiesen

app/plugins/builtins/dms/plugin.py

@@ -54,6 +54,19 @@ class DmsPlugin(BasePlugin):
         contract_version="1.0.0",
     )
 
+    def get_entity_models(self) -> dict[str, type]:
+        """Entity types owned by DMS for the permission resolver.
+
+        ``file`` is a legacy alias still used by the permissions routes.
+        """
+        from app.plugins.builtins.dms.models import File, Folder
+
+        return {
+            "dms_file": File,
+            "dms_folder": Folder,
+            "file": File,
+        }
+
     async def on_activate(self, db, service_container, event_bus) -> None:
         """Activate plugin: register restore config + history hooks."""
         await super().on_activate(db, service_container, event_bus)

app/plugins/builtins/mail/plugin.py

@@ -159,6 +159,12 @@ class MailPlugin(BasePlugin):
         contract_version="1.0.0",
     )
 
+    def get_entity_models(self) -> dict[str, type]:
+        """Entity types owned by Mail for the permission resolver."""
+        from app.plugins.builtins.mail.models import MailAccount
+
+        return {"mail_account": MailAccount}
+
     async def on_activate(
         self, db, service_container, event_bus
     ) -> None: