graph TB
  subgraph CLIENT["Client Layer"]
    direction LR
    WEB["Web App · React + Vite"]
    WASM["WASM Audio Engine · C++ / Emscripten"]
    FACE["Faceplate UI · React WebView"]
  end

  subgraph EDGE["Edge / CDN · Cloudflare"]
    direction LR
    CF_PAGES["Pages · Static Hosting"]
    CF_WORKER["Worker · Route Proxy"]
    CF_R2["R2 · Object Storage"]
  end

  subgraph BACKEND["Backend · Supabase"]
    direction LR
    SB_AUTH["Auth · ES256 JWT"]
    SB_DB["PostgreSQL · RLS"]
    SB_EDGE["Edge Functions · Deno"]
  end

  subgraph SERVICES["Third-Party"]
    direction LR
    STRIPE["Stripe"]
    SENDGRID["SendGrid"]
    POSTHOG["PostHog"]
    ANTHROPIC["Claude AI"]
  end

  subgraph BUILD["Build · GitHub Actions"]
    direction LR
    GH_ACTIONS["CI/CD Pipelines"]
    BUILD_WIN["Windows Runner"]
    BUILD_MAC["macOS Runner"]
  end

  CLIENT --> EDGE
  EDGE --> BACKEND
  BACKEND --> SERVICES
  GH_ACTIONS --> BUILD_WIN
  GH_ACTIONS --> BUILD_MAC
  BUILD_WIN --> CF_R2
  BUILD_MAC --> CF_R2

  style WEB fill:transparent,color:#93c5fd,stroke:#3b82f6,stroke-width:1px
  style WASM fill:transparent,color:#fca5a5,stroke:#ef4444,stroke-width:1px
  style FACE fill:transparent,color:#c4b5fd,stroke:#8b5cf6,stroke-width:1px
  style CF_PAGES fill:transparent,color:#fdba74,stroke:#f97316,stroke-width:1px
  style CF_WORKER fill:transparent,color:#fdba74,stroke:#f97316,stroke-width:1px
  style CF_R2 fill:transparent,color:#fdba74,stroke:#f97316,stroke-width:1px
  style SB_AUTH fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style SB_DB fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style SB_EDGE fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style GH_ACTIONS fill:transparent,color:#93c5fd,stroke:#3b82f6,stroke-width:1px

graph LR
  USER["User designs in Node Editor"]
  WASM_E["WASM Engine processes graph"]
  ZUSTAND["Zustand Store"]
  REACT["React UI"]

  USER --> WASM_E --> ZUSTAND --> REACT
  REACT -->|user action| WASM_E

  SAVE["Save Project"]
  SB["Supabase DB"]
  GHA["GitHub Actions"]
  JUCE["JUCE C++ Build"]
  SIGN["Code Signing"]
  R2["Upload to R2"]
  DL["Download via Signed URL"]

  SAVE --> SB --> GHA --> JUCE --> SIGN --> R2 --> DL

  style USER fill:transparent,color:#93c5fd,stroke:#3b82f6,stroke-width:1px
  style WASM_E fill:transparent,color:#fca5a5,stroke:#ef4444,stroke-width:1px
  style SB fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style GHA fill:transparent,color:#93c5fd,stroke:#3b82f6,stroke-width:1px
  style R2 fill:transparent,color:#fdba74,stroke:#f97316,stroke-width:1px

graph TB
  DEV["develop branch"] -->|push| STAGING["Deploy Staging"]
  MAIN["main branch"] -->|push| PROD["Deploy Production"]

  PROD --> LINK["Link Supabase"]
  LINK --> MIGRATE["Push DB Migrations"]
  MIGRATE --> TEST["Run Deno Tests"]
  TEST --> SECRETS["Set Secrets"]
  SECRETS --> DEPLOY["Deploy Edge Functions"]
  DEPLOY --> HEALTH["Health Check · 3 retries"]

  ADMIN["Push admin/**"] --> WASM_BUILD["Build WASM"]
  WASM_BUILD --> NPM["Build React App"]
  NPM --> CF["Deploy to CF Pages"]

  DISPATCH["API Trigger"] --> FETCH["Fetch project_data"]
  FETCH --> CMAKE["CMake + JUCE Build"]
  CMAKE --> CODESIGN["Code Sign"]
  CODESIGN --> UPLOAD["Upload to R2"]
  UPLOAD --> NOTIFY["Notify Backend"]

  style DEV fill:transparent,color:#fde68a,stroke:#eab308,stroke-width:1px
  style MAIN fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style PROD fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style STAGING fill:transparent,color:#fde68a,stroke:#eab308,stroke-width:1px

graph TB
  SIGNUP["User Signup"] --> CONFIRM["Email Confirmation"]
  CONFIRM --> TRIGGER["DB Trigger"]
  TRIGGER --> PROFILE["profiles table"]

  PROFILE --> CHECK{"Creator whitelist?"}
  CHECK -->|Yes| ONBOARD["Creator Onboarding"]
  ONBOARD --> TNC["Accept T&C"]
  TNC --> STRIPE["Stripe Connect"]
  STRIPE --> CREATOR["creator_profiles"]

  PROFILE --> INVITE["Org Invite"]
  INVITE --> MEMBER["organization_members"]
  MEMBER --> ROLE["owner / admin / member"]

  CREATOR -->|publishes| PKG["packages"]
  PROFILE -->|owns| PROJECT["Project"]
  PROJECT --> OWNER_U["owner_user_id"]
  PROJECT --> OWNER_O["owner_org_id"]
  OWNER_U -.->|XOR| OWNER_O

  subgraph RLS["Row Level Security"]
    PRIVATE["private · owner only"]
    ORG_VIS["org · members only"]
    PUBLIC["public · world-readable"]
  end

  style PROFILE fill:transparent,color:#93c5fd,stroke:#3b82f6,stroke-width:1px
  style CREATOR fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px
  style PRIVATE fill:transparent,color:#fca5a5,stroke:#ef4444,stroke-width:1px
  style ORG_VIS fill:transparent,color:#fde68a,stroke:#f59e0b,stroke-width:1px
  style PUBLIC fill:transparent,color:#86efac,stroke:#22c55e,stroke-width:1px