direction: right

tenant: "Organization boundary" {
  wrangler: "Wrangler\nqueue lifecycle + deploy"
  producer: "Producer Worker\nenv.DOCUMENTS.send()"
  consumer: "Consumer Worker\nqueue(batch, env, ctx)"
  console: "Console\nhealth · backlog trend · activity · events · DLQ"
}

identity: "Identity service\nqueues.read · queues.write"
control: "Control plane" {
  queue_api: "Wrangler-compatible Queues API"
  artifact: "Immutable artifact\nproducer binding only"
  routes: "Current Worker route"
}

runtime: "Shared workerd runtime" {
  binding: "Trusted Queue binding\norganization + queue capability"
  dispatch: "Native Fetcher.queue() dispatch"
  isolate: "Current consumer isolate"
}

broker: "Dedicated queue workerd service" {
  registry: "Registry Durable Object\nper organization"
  queue: "Broker Durable Object\norganization:queue"
  sqlite: "Durable Object SQLite\nmessages · attempts · backlog snapshots · events"
  alarm: "Alarm scheduler\nretry + retention"
}

private_proxy: "Private HAProxy listener\n127.0.0.1:9194"
dlq: "Dead-letter broker\nsame organization"

tenant.wrangler -> identity: "authorize account"
tenant.wrangler -> control.queue_api: "create queue + configure consumer"
control.queue_api -> broker.registry: "service-authenticated management"
broker.registry -> broker.queue
tenant.wrangler -> control.artifact: "upload producer/consumer bindings"
tenant.producer -> runtime.binding
runtime.binding -> broker.queue: "durably enqueue"
broker.queue -> broker.sqlite
broker.alarm -> private_proxy: "authenticated batch"
private_proxy -> runtime.dispatch
runtime.dispatch -> control.routes: "resolve active version"
runtime.dispatch -> runtime.isolate: "queue(name, messages, metadata)"
runtime.isolate -> broker.queue: "ack/retry result"
broker.queue -> dlq: "after max retries"
tenant.console -> control.queue_api: "tenant-scoped inspection"

guarantee: "A queue identity includes the organization UUID.\nNo public queue hostname exists. Queue messages survive service restart,\nbut remain disposable with the data-02 node."