flowchart TB
    subgraph Client["Client Layer"]
        WEB[Web Browser]
        MOBILE[Mobile App]
        SERVICE[External Service]
    end

    subgraph Gateway["API Gateway"]
        REST[REST API<br/>Axum :8080]
        GRPC[gRPC API<br/>Tonic :9090]
    end

    subgraph Plugins["Plugin System"]
        WASM[WASM Runtime<br/>Wasmtime]
        AUDIT[Audit Plugin]
        CUSTOM[Custom Plugins]
    end

    subgraph Controller["Controller Layer"]
        AUTH_CTRL[Auth Controller]
        USER_CTRL[User Controller]
        HEALTH[Health Controller]
    end

    subgraph Service["Service Layer"]
        AUTH_SVC[Auth Service]
        USER_SVC[User Service]
        TOKEN[Token Provider]
    end

    subgraph Repository["Repository Layer"]
        USER_REPO[User Repository]
        OAUTH_REPO[OAuth Repository]
    end

    subgraph Data["Data Layer"]
        MYSQL[(MySQL/PostgreSQL)]
        REDIS[(Redis Cache)]
    end

    subgraph Resilience["Resilience"]
        CB[Circuit Breaker]
        RETRY[Retry Policy]
        RATE[Rate Limiter]
    end

    WEB --> REST
    MOBILE --> GRPC
    SERVICE --> REST

    REST --> AUTH_CTRL
    REST --> USER_CTRL
    REST --> HEALTH
    GRPC --> AUTH_CTRL
    GRPC --> USER_CTRL

    AUTH_CTRL --> AUTH_SVC
    USER_CTRL --> USER_SVC
    AUTH_SVC --> TOKEN
    AUTH_SVC --> USER_REPO
    USER_SVC --> USER_REPO

    USER_REPO --> MYSQL
    OAUTH_REPO --> MYSQL
    TOKEN --> REDIS

    WASM --> AUDIT
    WASM --> CUSTOM
    AUTH_SVC -.-> WASM
    USER_SVC -.-> WASM

    USER_SVC -.-> CB
    USER_SVC -.-> RETRY
    REST -.-> RATE

    style Client fill:#e0f2fe
    style Gateway fill:#fef3c7
    style Plugins fill:#fce7f3
    style Controller fill:#dcfce7
    style Service fill:#f3e8ff
    style Repository fill:#fed7aa
    style Data fill:#f3f4f6
    style Resilience fill:#e0e7ff

mindmap
  root((Arcana Cloud<br/>Rust))
    Clean Architecture
      Domain Layer
      Service Layer
      Repository Layer
      Controller Layer
    Dual Protocol
      REST/Axum
      gRPC/Tonic
      2.1x Speedup
    WASM Plugins
      Wasmtime Runtime
      Sandboxed Execution
      Hot Reload
      Signature Verification
    Job Queue
      Redis Backend
      Priority Queues
      Cron Scheduler
      Dead Letter Queue
    Security
      JWT Auth
      Argon2 Hashing
      RBAC
      mTLS Support
    Resilience
      Circuit Breaker
      Retry Policies
      Rate Limiting
      Timeouts
    Deployment
      Monolithic
      Layered HTTP
      Layered gRPC
      Kubernetes
    Observability
      Tracing
      Prometheus Metrics
      Structured Logging

flowchart LR
    subgraph Host["Host Application"]
        RUNTIME[Plugin Runtime<br/>Wasmtime]
        MANAGER[Plugin Manager]
        API[Plugin API]
    end

    subgraph Plugins["WASM Plugins"]
        P1[Audit Plugin]
        P2[Custom Plugin]
        P3[Analytics Plugin]
    end

    subgraph Extensions["Extension Points"]
        E1[Event Handlers]
        E2[HTTP Interceptors]
        E3[Scheduled Tasks]
        E4[Custom Services]
    end

    MANAGER --> RUNTIME
    RUNTIME --> P1
    RUNTIME --> P2
    RUNTIME --> P3

    P1 --> E1
    P2 --> E2
    P3 --> E3
    P2 --> E4

    API -.-> RUNTIME

    style Host fill:#dcfce7
    style Plugins fill:#fce7f3
    style Extensions fill:#e0f2fe

sequenceDiagram
    participant Manager as Plugin Manager
    participant Runtime as Wasmtime Runtime
    participant Plugin as WASM Plugin

    Manager->>Runtime: Load WASM module
    Runtime->>Plugin: Instantiate
    Plugin-->>Runtime: PluginDescriptor

    Manager->>Runtime: Enable plugin
    Runtime->>Plugin: on_enable()
    Plugin-->>Runtime: Ok(())

    Note over Manager,Plugin: Plugin Active

    Manager->>Runtime: Handle event
    Runtime->>Plugin: on_event(data)
    Plugin-->>Runtime: Response

    Manager->>Runtime: Disable plugin
    Runtime->>Plugin: on_disable()
    Plugin-->>Runtime: Ok(())

flowchart TB
    subgraph Producers["Job Producers"]
        API[REST API]
        GRPC_P[gRPC Service]
        SCHEDULER[Cron Scheduler]
    end

    subgraph Redis["Redis Queue Backend"]
        PRIORITY[Priority Queues<br/>Critical/High/Normal/Low]
        DELAYED[Delayed Jobs]
        DLQ[Dead Letter Queue]
    end

    subgraph Workers["Worker Pool"]
        W1[Worker 1]
        W2[Worker 2]
        W3[Worker N]
    end

    subgraph Monitoring["Observability"]
        METRICS[Prometheus Metrics]
        STATUS[Status API]
        ALERTS[Alerting]
    end

    API --> PRIORITY
    GRPC_P --> PRIORITY
    SCHEDULER --> PRIORITY
    SCHEDULER --> DELAYED

    DELAYED -.->|scheduled time| PRIORITY

    PRIORITY --> W1
    PRIORITY --> W2
    PRIORITY --> W3

    W1 -->|success| COMPLETED[(Completed)]
    W1 -->|failure| RETRY{Retry?}
    RETRY -->|yes| PRIORITY
    RETRY -->|max retries| DLQ

    W1 -.-> METRICS
    W2 -.-> METRICS
    W3 -.-> METRICS
    SCHEDULER -.-> METRICS

    METRICS --> STATUS
    METRICS --> ALERTS

    style Producers fill:#dcfce7
    style Redis fill:#fef3c7
    style Workers fill:#e0f2fe
    style Monitoring fill:#f3e8ff

sequenceDiagram
    participant Client
    participant Controller
    participant SSR as SSR Engine
    participant Cache
    participant Runtime as JS Runtime Pool

    Client->>Controller: GET /page
    Controller->>SSR: render(template, data)

    SSR->>Cache: Check cache
    alt Cache Hit
        Cache-->>SSR: Cached HTML
    else Cache Miss
        SSR->>Runtime: Acquire runtime
        Runtime-->>SSR: JS Context
        SSR->>Runtime: Execute render
        Runtime-->>SSR: HTML output
        SSR->>Cache: Store result
    end

    SSR-->>Controller: HTML
    Controller-->>Client: 200 OK + HTML