graph TB
    subgraph Clients["Clients"]
        CLI["CLI & Package Managers<br/><sub>pip · npm · docker · cargo<br/>helm · go · maven · ...</sub>"]
        WebApp["Web Dashboard<br/><sub>Next.js 15 · Desktop Browser</sub>"]
        iOS["iPhone · iPad · Mac<br/><sub>SwiftUI · Swift 6</sub>"]
        Android["Android Phone · Tablet<br/><sub>Jetpack Compose · Kotlin</sub>"]
    end

    subgraph Core["Artifact Keeper Backend"]
        API["REST & gRPC Gateway<br/><sub>Rust · Axum · Tonic</sub>"]
        Handlers["45+ Format Handlers<br/><sub>Native protocol support</sub>"]
        WASM["WASM Plugin Runtime<br/><sub>Wasmtime · WIT</sub>"]
        Auth["Auth Engine<br/><sub>OIDC · LDAP · SAML · JWT</sub>"]
        Policy["Policy Engine<br/><sub>Severity gates · Quarantine</sub>"]
    end

    subgraph Data["Data Layer"]
        PG[("PostgreSQL 16<br/><sub>Metadata & config</sub>")]
        Storage[("Storage<br/><sub>S3 / Filesystem</sub>")]
        Meili[("Meilisearch<br/><sub>Full-text search</sub>")]
    end

    subgraph Security["Security Scanning"]
        Trivy["Trivy<br/><sub>Vulnerability scanning</sub>"]
        DTrack["Dependency-Track<br/><sub>SBOM analysis</sub>"]
    end

    subgraph Edge["Edge Replication"]
        Peer1["Edge Node"]
        Peer2["Edge Node"]
        Peer3["Edge Node"]
    end

    subgraph Infra["Infrastructure (IaC)"]
        Helm["Helm Chart"]
        TF["Terraform<br/><sub>EKS · RDS · S3 · VPC</sub>"]
        ArgoCD["ArgoCD<br/><sub>GitOps</sub>"]
        Mon["Prometheus + Grafana<br/><sub>Monitoring & Alerts</sub>"]
    end

    CLI -->|"Native protocols"| API
    WebApp --> API
    iOS --> API
    Android --> API

    API --> Handlers
    API --> Auth
    Handlers --> WASM
    Handlers --> Policy

    API --> PG
    Handlers --> Storage
    API --> Meili

    Policy --> Trivy
    Policy --> DTrack

    API <-->|"Borg Replication"| Peer1
    API <-->|"Borg Replication"| Peer2
    API <-->|"Borg Replication"| Peer3
    Peer1 <-->|"P2P Mesh"| Peer2
    Peer2 <-->|"P2P Mesh"| Peer3
    Peer1 <-->|"P2P Mesh"| Peer3

    Helm -.->|deploys| Core
    ArgoCD -.->|watches| Helm
    TF -.->|provisions| PG
    TF -.->|provisions| Storage
    Mon -.->|scrapes| API

    style Core fill:#1a1a2e,stroke:#e94560,color:#fff
    style Data fill:#16213e,stroke:#0f3460,color:#fff
    style Security fill:#1a1a2e,stroke:#e94560,color:#fff
    style Edge fill:#0f3460,stroke:#533483,color:#fff
    style Clients fill:#16213e,stroke:#0f3460,color:#fff
    style Infra fill:#0f3460,stroke:#22c55e,color:#fff

    style API fill:#e94560,stroke:#e94560,color:#fff
    style Handlers fill:#e94560,stroke:#e94560,color:#fff
    style WASM fill:#533483,stroke:#533483,color:#fff
    style Auth fill:#e94560,stroke:#e94560,color:#fff
    style Policy fill:#e94560,stroke:#e94560,color:#fff

    style PG fill:#0f3460,stroke:#0f3460,color:#fff
    style Storage fill:#0f3460,stroke:#0f3460,color:#fff
    style Meili fill:#0f3460,stroke:#0f3460,color:#fff

    style Trivy fill:#533483,stroke:#533483,color:#fff
    style DTrack fill:#533483,stroke:#533483,color:#fff

    style Peer1 fill:#533483,stroke:#533483,color:#fff
    style Peer2 fill:#533483,stroke:#533483,color:#fff
    style Peer3 fill:#533483,stroke:#533483,color:#fff

    style Helm fill:#22c55e,stroke:#22c55e,color:#fff
    style TF fill:#22c55e,stroke:#22c55e,color:#fff
    style ArgoCD fill:#22c55e,stroke:#22c55e,color:#fff
    style Mon fill:#22c55e,stroke:#22c55e,color:#fff

    style CLI fill:#0f3460,stroke:#0f3460,color:#fff
    style WebApp fill:#0f3460,stroke:#0f3460,color:#fff
    style iOS fill:#0f3460,stroke:#0f3460,color:#fff
    style Android fill:#0f3460,stroke:#0f3460,color:#fff

graph LR
    subgraph DEV["Development"]
        D1["Docker Compose<br/><sub>Single machine</sub>"]
        D2["Helm (dev values)<br/><sub>Local K8s cluster</sub>"]
    end

    subgraph STG["Staging"]
        S1["Helm + ArgoCD<br/><sub>Auto-sync</sub>"]
        S2["In-cluster PostgreSQL<br/><sub>HPA · PDB · NetworkPolicy</sub>"]
    end

    subgraph PROD["Production"]
        P1["Helm + ArgoCD<br/><sub>Manual sync</sub>"]
        P2["EKS + RDS + S3<br/><sub>Terraform provisioned</sub>"]
        P3["Prometheus + Grafana<br/><sub>12-panel dashboard · 7 alerts</sub>"]
    end

    DEV --> STG --> PROD

    style DEV fill:#22c55e,color:#fff
    style STG fill:#eab308,color:#fff
    style PROD fill:#ef4444,color:#fff