graph TB
    subgraph Clients["Clients"]
        CLI["CLI & Package Managers<br/><sub>pip · npm · docker · cargo<br/>helm · go · maven · buf · ...</sub>"]
        WebApp["Web Dashboard<br/><sub>Next.js 15 · Desktop Browser</sub>"]
        iOS["iPhone · iPad · Mac<br/><sub>SwiftUI · Swift 6</sub>"]
        Android["Android Phone · Tablet<br/><sub>Jetpack Compose · Kotlin</sub>"]
    end

    subgraph Upstream["Public Registries (Proxy Upstream)"]
        NPMjs["npmjs.com"]
        PyPIorg["pypi.org"]
        DockerHub["Docker Hub"]
        MavenCentral["Maven Central"]
    end

    subgraph Core["Artifact Keeper Backend"]
        API["REST & gRPC Gateway<br/><sub>Rust · Axum · Tonic</sub>"]
        Handlers["45+ Format Handlers<br/><sub>Local · Proxy · Virtual repos</sub>"]
        WASM["WASM Plugin Runtime<br/><sub>Wasmtime · WIT</sub>"]
        Auth["Auth Engine<br/><sub>OIDC · LDAP · SAML · JWT</sub>"]
        Policy["Policy Engine<br/><sub>Quality gates · Signing · Quarantine</sub>"]
    end

    subgraph Data["Data Layer"]
        PG[("PostgreSQL 16<br/><sub>Metadata & config</sub>")]
        Storage[("Storage<br/><sub>S3 / GCS / Filesystem</sub>")]
        Meili[("Meilisearch<br/><sub>Full-text search</sub>")]
    end

    subgraph Security["Security & Compliance"]
        Trivy["Trivy<br/><sub>Vulnerability scanning</sub>"]
        DTrack["Dependency-Track<br/><sub>SBOM analysis</sub>"]
        OpenSCAP["OpenSCAP<br/><sub>Compliance auditing</sub>"]
    end

    subgraph Observe["Observability"]
        Prom["Prometheus<br/><sub>30+ ak_* metrics</sub>"]
        OTel["OpenTelemetry<br/><sub>OTLP traces · Jaeger · Tempo</sub>"]
        Grafana["Grafana<br/><sub>Dashboards & Alerts</sub>"]
    end

    subgraph Edge["Peer Replication"]
        Peer1["Peer Node"]
        Peer2["Peer Node"]
        Peer3["Peer Node"]
    end

    subgraph Infra["Infrastructure (IaC)"]
        Helm["Helm Chart"]
        TF["Terraform<br/><sub>EKS · RDS · S3 · VPC</sub>"]
        ArgoCD["ArgoCD<br/><sub>GitOps</sub>"]
    end

    CLI -->|"Native protocols"| API
    WebApp --> API
    iOS --> API
    Android --> API

    API --> Handlers
    API --> Auth
    Handlers --> WASM
    Handlers --> Policy
    Handlers -->|"Proxy cache"| Upstream

    API --> PG
    Handlers --> Storage
    API --> Meili

    Policy --> Trivy
    Policy --> DTrack
    Policy --> OpenSCAP

    Prom -->|"Scrapes /metrics"| API
    OTel -->|"OTLP gRPC"| API
    Grafana --> Prom

    API <-->|"Mesh Replication"| Peer1
    API <-->|"Mesh Replication"| Peer2
    API <-->|"Mesh Replication"| Peer3
    Peer1 <-->|"P2P"| Peer2
    Peer2 <-->|"P2P"| Peer3
    Peer1 <-->|"P2P"| Peer3

    Helm -.->|deploys| Core
    ArgoCD -.->|watches| Helm
    TF -.->|provisions| PG
    TF -.->|provisions| Storage

    style Core fill:#1a1a2e,stroke:#e94560,color:#fff
    style Data fill:#16213e,stroke:#0f3460,color:#fff
    style Security fill:#1a1a2e,stroke:#e94560,color:#fff
    style Observe fill:#16213e,stroke:#22c55e,color:#fff
    style Edge fill:#0f3460,stroke:#533483,color:#fff
    style Clients fill:#16213e,stroke:#0f3460,color:#fff
    style Infra fill:#0f3460,stroke:#22c55e,color:#fff
    style Upstream fill:#16213e,stroke:#0f3460,color:#fff

    style API fill:#e94560,stroke:#e94560,color:#fff
    style Handlers fill:#e94560,stroke:#e94560,color:#fff
    style WASM fill:#533483,stroke:#533483,color:#fff
    style Auth fill:#e94560,stroke:#e94560,color:#fff
    style Policy fill:#e94560,stroke:#e94560,color:#fff

    style PG fill:#0f3460,stroke:#0f3460,color:#fff
    style Storage fill:#0f3460,stroke:#0f3460,color:#fff
    style Meili fill:#0f3460,stroke:#0f3460,color:#fff

    style Trivy fill:#533483,stroke:#533483,color:#fff
    style DTrack fill:#533483,stroke:#533483,color:#fff
    style OpenSCAP fill:#533483,stroke:#533483,color:#fff

    style Prom fill:#22c55e,stroke:#22c55e,color:#fff
    style OTel fill:#22c55e,stroke:#22c55e,color:#fff
    style Grafana fill:#22c55e,stroke:#22c55e,color:#fff

    style Peer1 fill:#533483,stroke:#533483,color:#fff
    style Peer2 fill:#533483,stroke:#533483,color:#fff
    style Peer3 fill:#533483,stroke:#533483,color:#fff

    style Helm fill:#22c55e,stroke:#22c55e,color:#fff
    style TF fill:#22c55e,stroke:#22c55e,color:#fff
    style ArgoCD fill:#22c55e,stroke:#22c55e,color:#fff

    style CLI fill:#0f3460,stroke:#0f3460,color:#fff
    style WebApp fill:#0f3460,stroke:#0f3460,color:#fff
    style iOS fill:#0f3460,stroke:#0f3460,color:#fff
    style Android fill:#0f3460,stroke:#0f3460,color:#fff

    style NPMjs fill:#0f3460,stroke:#0f3460,color:#fff
    style PyPIorg fill:#0f3460,stroke:#0f3460,color:#fff
    style DockerHub fill:#0f3460,stroke:#0f3460,color:#fff
    style MavenCentral fill:#0f3460,stroke:#0f3460,color:#fff

graph LR
    subgraph DEV["Development"]
        D1["Docker Compose<br/><sub>Single machine</sub>"]
        D2["Helm (dev values)<br/><sub>Local K8s cluster</sub>"]
    end

    subgraph STG["Staging"]
        S1["Helm + ArgoCD<br/><sub>Auto-sync</sub>"]
        S2["In-cluster PostgreSQL<br/><sub>HPA · PDB · NetworkPolicy</sub>"]
    end

    subgraph PROD["Production"]
        P1["Helm + ArgoCD<br/><sub>Manual sync</sub>"]
        P2["EKS + RDS + S3<br/><sub>Terraform provisioned</sub>"]
        P3["Prometheus + Grafana<br/><sub>12-panel dashboard · 7 alerts</sub>"]
    end

    DEV --> STG --> PROD

    style DEV fill:#22c55e,color:#fff
    style STG fill:#eab308,color:#fff
    style PROD fill:#ef4444,color:#fff