direction: right

host: "macOS host\n40 cores · 128 GiB" {
  lifecycle: "make + tools/fleet.py"
  ingress: "host-loopback endpoints"
}

single: "Compact Ubuntu 26.04 profile" {
  node: "single-01\n4 vCPU · 16 GiB · 64 GiB" {
    edge: "ingress + control + portals"
    compute: "4 shared workerd pool members"
    data: "all data services + 2 Durable Object shards"
    observe: "Prometheus · Loki · Tempo · Grafana"
  }
}

fleet: "Six-node Ubuntu 26.04 profile" {
  control: "control-01\n4 vCPU · 6 GiB · 32 GiB" {
    edge: "HAProxy + Data Plane API"
    services: "control · identity · quotas · Access · certificates"
    portals: "tenant + admin portals"
  }
  compute1: "compute-01\n6 vCPU · 8 GiB · 24 GiB" {
    pool1: "4 workerd pool members"
  }
  compute2: "compute-02\n6 vCPU · 8 GiB · 24 GiB" {
    pool2: "4 workerd pool members"
  }
  data1: "data-01\n4 vCPU · 8 GiB · 96 GiB" {
    objects: "object storage + assets + Images"
  }
  data2: "data-02\n4 vCPU · 12 GiB · 64 GiB" {
    state: "queues + key-value + databases + vector search"
    durable: "2 shared native Durable Object members\napplication state + Cron coordination"
  }
  observe: "observe-01\n4 vCPU · 10 GiB · 64 GiB" {
    lgtm: "Prometheus · Loki · Tempo · Grafana"
  }
}

private: "WireGuard service plane 10.77.0.0/24\nsingle address or full mesh · service ports admitted only on wg0"

host.lifecycle -> single: "create · start · stop · destroy"
host.lifecycle -> fleet: "create · start · stop · destroy"
host.ingress -> single.node: "8080 · 8081 · 8082 · management · telemetry"
host.ingress -> fleet.control: "8080 · 8081 · 8082 · management"
host.ingress -> fleet.observe: "3000 · 9091 · 3100 · 3200"
single.node -> private
fleet.control.edge -> fleet.compute1.pool1: "consistent-hash scheduling"
fleet.control.edge -> fleet.compute2.pool2: "additional active capacity"
fleet.compute1 -> private
fleet.compute2 -> private
fleet.control -> private
fleet.data1 -> private
fleet.data2 -> private
fleet.observe -> private

statement: "Two shapes, one platform" {
  text: "Both profiles use the same Ansible roles, APIs, and Wrangler path.\nThe compact node minimizes infrastructure; the fleet adds placement and capacity.\nNeither profile automatically replicates state or claims HA."
}