app

type Deps struct {
	Config        *config.Config
	ControlDB     *gorm.DB
	DBPool        *pgxpool.Pool
	River         *river.Client[pgx.Tx]
	Tenants       *database.TenantManager
	Jobs          workflow.Enqueuer
	TokenSessions *service.TokenSessionService
	Policies      *service.PolicyService

	// Flags is the feature flag registry's resolver. Distinct from Policies
	// because the two merge in opposite directions: a policy can only tighten as
	// it descends, and a flag's whole purpose is that the narrower level
	// overrides — in either direction.
	Flags   *service.FeatureFlagService
	Estates *service.EstateService
	Mail    service.EmailSender

	// APIKeys verifies every key/secret credential, on every surface. One
	// instance, because scope exclusion is only a boundary if the same code
	// enforces it for org keys and agent keys alike.
	APIKeys *service.APIKeyService

	// Admission is THE org-creation gate, constructed once so registration and
	// social bootstrap cannot end up enforcing different limits. It is a
	// pointer whose nil case denies rather than panics, because api.Build is
	// exercised with partially-populated Deps in the router tests.
	Admission *service.AdmissionService
}