flowchart LR
  clients["Browser, editor, and mobile clients"]
  web["Web control plane"]
  gateway["Kilo Gateway"]
  automation["Automation Workers"]
  agent["Cloud Agent"]
  preview["App Builder preview"]
  deployBuilder["Deployment builder"]
  deployEdge["Deployment dispatcher"]
  claw["KiloClaw"]
  chat["Kilo Chat / Event Service / Notifications"]
  town["Gas Town"]
  wasteland["Wasteland"]
  repos["GitHub and GitLab repositories"]
  providers["Model providers and gateways"]
  stores["PostgreSQL, Durable Objects, queues, R2, KV, and analytics stores"]

  clients --> web
  clients --> gateway
  web -. "short-lived connection ticket" .-> clients
  clients -->|"ticketed WebSocket"| chat
  web --> automation --> agent
  web --> agent
  web --> preview
  web --> deployBuilder --> deployEdge
  web --> claw
  chat --> claw
  agent --> repos
  agent --> providers
  claw --> providers
  town --> repos
  town --> providers
  town --> wasteland
  gateway --> stores
  agent --> stores
  preview --> stores
  deployBuilder --> stores
  claw --> stores
  chat --> stores
  wasteland --> stores

flowchart TB
  callers["Web control plane and automation Workers"]
  session["CloudAgentSession Durable Object"]
  sandbox["Sandbox"]
  small["SandboxSmall"]
  dind["SandboxDIND"]
  ingest["Session Ingest binding"]
  tokens["Git Token Service binding"]
  notify["Notifications binding"]
  r2["R2 session bucket"]
  db["Hyperdrive -> PostgreSQL"]
  callback["Callback queue"]
  report["Report queue"]
  dlq["Report dead-letter queue"]

  callers --> session
  session --> sandbox
  session --> small
  session --> dind
  session --> ingest
  session --> tokens
  session --> notify
  session --> r2
  session --> db
  session --> callback
  session --> report --> dlq

flowchart TB
  prompt["User prompt"] --> web["Web App Builder orchestration"] --> coding["Cloud Agent
coding and iteration"]

  subgraph previewBoundary ["Preview boundary: services/app-builder/"]
    direction LR
    worker["app-builder Worker"] --> repo["GitRepositoryDO"] --> preview["PreviewDO"] --> previewSandbox["Preview Sandbox container"]
  end

  subgraph deployBoundary ["Deployment build boundary: services/deploy-infra/builder/"]
    direction LR
    builder["Deployment builder"] --> orchestrator["DeploymentOrchestrator"] --> buildSandbox["Deployment build Sandbox container"]
  end

  subgraph ingressBoundary ["Public ingress boundary: services/deploy-infra/dispatcher/"]
    direction LR
    dispatcher["Public wildcard ingress"] --> app["Dispatched generated application"]
  end

  coding --> worker
  coding --> builder
  buildSandbox --> dispatcher

flowchart TB
  github["GitHub Dependabot API"]
  postgres["PostgreSQL
Security Agent state"]

  subgraph sync ["Finding sync"]
    direction LR
    interactive["Interactive web sync"] --> web["Web Security Agent handler"] --> github
    cron["security-sync
six-hour cron"] --> queue["Owner-level sync queue"] --> tokens["Git Token Service binding"] --> github
    github --> postgres
  end

  subgraph analysis ["Analysis"]
    direction LR
    postgres -->|"Queued analysis row"| worker["security-auto-analysis"] --> triage["Model gateway triage"] --> deep{"Deep analysis needed?"}
    deep -->|"Yes"| agent["Cloud Agent
deep analysis"] --> callback["Finding-scoped callback"] --> postgres
    deep -->|"No"| postgres
  end

  subgraph cleanup ["Stale-analysis cleanup"]
    direction LR
    cleanupCron["Web cleanup cron"] --> reconcile["Reconcile stale running findings
without active queue work"] --> postgres
  end

sequenceDiagram
  participant Client as Browser or mobile client
  participant Ticket as Event Service ticket API
  participant Events as Event Service
  participant Session as UserSessionDO
  participant Chat as Kilo Chat conversation-state DOs
  participant Notify as NotificationChannelDO
  participant Expo
  participant Queue as Receipt queue

  Client->>Ticket: Request short-lived connection ticket
  Ticket-->>Client: Return short-lived ticket
  Client->>Events: Open WebSocket with ticket
  Events->>Session: Register presence
  Chat->>Events: Fan out conversation event
  Events-->>Client: Deliver WebSocket event
  Chat->>Notify: Request selected conversation push
  Notify->>Events: Check presence context
  Events-->>Notify: Return presence context
  alt User already present
    Notify-->>Chat: Suppress push
  else Push needed
    Notify->>Expo: Send push
    Expo-->>Notify: Return receipt
    Notify->>Queue: Enqueue receipt
    Queue->>Notify: Process receipt and stale-token cleanup
  end

flowchart TB
  subgraph worker ["Cloudflare Worker"]
    direction LR
    auth["JWT auth
tied to Kilo user"]
    instanceDO["Per-instance Durable Object"]
    dbConnection["Kilo database connection"]
  end

  db["Kilo database
Instances
Short-lived access codes
Image catalog
Billing and user preferences"]
  proxy["Fly proxy
Per-user Fly app
Per-user encryption
Routes to pinned instance"]

  subgraph flyInstance ["Fly instance: owner-scoped runtime"]
    direction TB
    subgraph container ["KiloClaw container"]
      direction TB
      controller["KiloClaw controller
Supervises OpenClaw gateway
Exposes control endpoints
Proxies HTTP and WebSocket traffic"]
      openclaw["OpenClaw
Gateway and Control UI"]
      tools["Pre-installed tools and skills"]
      controller --> openclaw
      tools --> openclaw
    end
    volume["Persistent Fly volume
/root/.openclaw config
/root/clawd workspace"]
    volume --> openclaw
  end

  dbConnection <--> db
  worker <--> proxy
  proxy <--> controller

flowchart LR
  town["Gas Town TownDO"]
  container["TownContainerDO"]
  binding["WASTELAND_SERVICE binding"]
  wasteland["Wasteland Worker"]
  dos["WastelandDO and WastelandRegistryDO"]
  dolt["DoltHub-backed collaborative commons"]

  town --> container
  town --> binding --> wasteland --> dos --> dolt