From a174eb943d9ea61f26f1521325873d3c357ac2b4 Mon Sep 17 00:00:00 2001
From: Alex Dunmow <alex.dunmow@millcrest.com.au>
Date: Sat, 2 May 2026 11:02:08 +0800
Subject: [PATCH] feat: add CoreServiceBindings interface to ServiceDeps

---
 plugin/community.go | 13 +++++++++++++
 plugin/deps.go      |  3 +++
 2 files changed, 16 insertions(+)
 create mode 100644 plugin/community.go

diff --git a/plugin/community.go b/plugin/community.go
new file mode 100644
index 0000000..ec29a7c
--- /dev/null
+++ b/plugin/community.go
@@ -0,0 +1,13 @@
+package plugin
+
+import (
+	"git.dev.alexdunmow.com/block/core/rbac"
+)
+
+// CoreServiceBindings provides pre-built CMS service bindings that plugins
+// can include in their ServiceRegistration with custom RBAC role mappings.
+// The CMS constructs the actual service handlers — plugins just specify which
+// services to mount and what roles apply.
+type CoreServiceBindings interface {
+	Bind(serviceName string, methodRoles map[string]rbac.Role) (ConnectServiceBinding, error)
+}
diff --git a/plugin/deps.go b/plugin/deps.go
index 2ccefb6..29d7643 100644
--- a/plugin/deps.go
+++ b/plugin/deps.go
@@ -46,6 +46,9 @@ type ServiceDeps struct {
 	// Plugin interop
 	Bridge PluginBridge
 
+	// Core RPC services — pre-built bindings for CMS-provided services
+	CoreServiceBindings CoreServiceBindings
+
 	// Extension points — typed as narrow interfaces where possible
 	JobRunner        JobRunner
 	EmbeddingService EmbeddingService