feat: add CoreServiceBindings interface to ServiceDeps

plugin/community.go

@@ -0,0 +1,13 @@
+package plugin
+
+import (
+	"git.dev.alexdunmow.com/block/core/rbac"
+)
+
+// CoreServiceBindings provides pre-built CMS service bindings that plugins
+// can include in their ServiceRegistration with custom RBAC role mappings.
+// The CMS constructs the actual service handlers — plugins just specify which
+// services to mount and what roles apply.
+type CoreServiceBindings interface {
+	Bind(serviceName string, methodRoles map[string]rbac.Role) (ConnectServiceBinding, error)
+}

plugin/deps.go

@@ -46,6 +46,9 @@ type ServiceDeps struct {
 	// Plugin interop
 	Bridge PluginBridge
 
+	// Core RPC services — pre-built bindings for CMS-provided services
+	CoreServiceBindings CoreServiceBindings
+
 	// Extension points — typed as narrow interfaces where possible
 	JobRunner        JobRunner
 	EmbeddingService EmbeddingService