Services

This document maps the main service modules to the responsibilities they own.

Core Service Layout

Module	Responsibility
`services/database.ts`	PostgreSQL access
`services/docker.ts`	Docker orchestration
`services/installation.ts`	user installation lifecycle
`services/sharedTools.ts`	shared tool runtime lifecycle + OAuth state
`services/sandbox.ts`	sandbox lifecycle
`services/toolRegistry.ts`	registry-backed tool definitions
`services/toolExecution.ts`	remote tool execution against managed runtimes
`services/storage.ts`	MinIO-backed file storage
`services/infraSsh.ts`	audited infra SSH control plane
`services/webhookEmitter.ts`	fire-and-forget push notifications to registered clients

Runtime Flow

Shared Tools vs Registry

One important nuance:

toolRegistry is the long-term source of truth
sharedTools.ts still carries compatibility behavior for startup, OAuth, and lifecycle
config/sharedTools.ts is deprecated fallback configuration and should be treated that way

That is why the docs now describe shared tools as a live platform concept, while still acknowledging the remaining compatibility layer in code.