把檢測工具接進稽核任務，讓掃描自己跑、報告自己回。

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','lineColor':'#5f7274','secondaryColor':'#EEF2F3','tertiaryColor':'#FBFCFC','fontFamily':'ui-monospace, monospace','fontSize':'13px','actorBkg':'#0E7C86','actorTextColor':'#ffffff','actorLineColor':'#0B5E66','signalColor':'#3a4a4c','signalTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#5a4410','noteBorderColor':'#c9a24a'}}}%%
sequenceDiagram
    autonumber
    actor Admin as 租戶管理員
    participant Web as Guidant AI (雲端)
    participant Agent as 客戶端 Agent
    participant Tool as OpenVAS
    actor Owner as 任務負責人

    Note over Admin,Web: 前置一次性設定
    Admin->>Web: ① 設定檢測工具 (url/key/token，加密存 config schema)
    Admin->>Web: ② 安裝 & 註冊 Agent (已有 mTLS 註冊機制)
    Admin->>Web: ③ 任務設為「檢測工具執行」+ 設掃描參數 (IP/網址/設備)

    Note over Owner,Tool: 執行期
    Owner->>Web: ④ 按下「開始執行任務」
    Web->>Web: 建立 agent_task (pending)
    Agent-->>Web: ⑤ 心跳輪詢，領到待辦任務
    Agent->>Tool: ⑥ 依連線型態呼叫 (API / CLI command)
    Tool-->>Agent: ⑦ 掃描完成，回傳報告
    Agent->>Web: ⑧ 回傳結果 + 報告檔
    Web->>Web: ⑨ 報告存回 job_evidences (source=DETECTION_TOOL)
    Web->>Owner: ⑩ 發信通知：掃描完成
    alt 完成模式 = auto
        Web->>Web: ⑪ 系統自動 complete_job → 任務完成
    else 完成模式 = manual
        Note over Owner,Web: 任務留在既有 PROCESSING 狀態（不新增狀態）
        Owner->>Web: ⑪ 看過報告 → 手動按完成，或抽屜內重掃 / 補上傳
    end
      

%%{init: {'theme':'base','themeVariables':{'fontFamily':'ui-monospace, monospace','fontSize':'12px','lineColor':'#5f7274','clusterBkg':'#FFFFFF','clusterBorder':'#c7d1d2'}}}%%
flowchart TB
    subgraph CLOUD["雲端 · Guidant AI"]
      direction TB
      FE["前端
檢測工具管理頁 · 任務設置頁"]
      subgraph BE["後端 (DDD)"]
        SVC["App Service
工具設定 · 派工 · 結果回收"]
        subgraph CFG["config schema (新)"]
          T1["detection_tools
工具目錄"]
          T2["tenant_detection_tool_configs
租戶憑證 (加密)"]
          T3["detection_tool_param_schemas
動態欄位定義"]
        end
        subgraph COMP["compliance schema"]
          T4["agent_tasks (新)
派工 + 狀態機"]
          T5["detection_executions (新)
執行歷史"]
          T6["job_evidences
證據 (既有)"]
        end
      end
      FE --> SVC --> CFG
      SVC --> COMP
    end

    subgraph SITE["客戶端"]
      AG["Agent (evidence-agent)
+ 新 executor 模組"]
      OV["OpenVAS
(未來 Nessus / SonarQube)"]
      AG -->|API / CLI| OV
    end

    SVC <-.->|mTLS+JWT 心跳夾帶派工| AG
    AG -.->|回傳報告| T6

    classDef node fill:#E2F0F1,stroke:#0E7C86,stroke-width:1px,color:#14201F;
    classDef nodeNew fill:#EDE7F5,stroke:#7A5AA8,stroke-width:1px,color:#241938;
    classDef nodeExt fill:#F6EBD5,stroke:#9C6B12,stroke-width:1px,color:#4a3608;
    class FE,SVC,T6 node;
    class T1,T2,T3,T4,T5,AG nodeNew;
    class OV nodeExt;
    style CLOUD fill:#FBFCFC,stroke:#c7d1d2,color:#4A5A5C;
    style SITE fill:#FBFCFC,stroke:#c7d1d2,color:#4A5A5C;
    style BE fill:#F3F6F6,stroke:#d3dcdc,color:#4A5A5C;
    style CFG fill:#FFFFFF,stroke:#b9d4d6,color:#0B5E66;
    style COMP fill:#FFFFFF,stroke:#cdd6d7,color:#4A5A5C;
      

%%{init: {'theme':'base','themeVariables':{'fontFamily':'ui-monospace, monospace','fontSize':'13px','lineColor':'#5f7274'}}}%%
flowchart LR
    A["FR-056.1
工具管理
config schema"] --> B["FR-056.2
任務類型
+ 參數"]
    A --> C["FR-056.3
Agent 派工
+ executor"]
    B --> D["FR-056.4
執行編排
證據 · 通知"]
    C --> D
    style A fill:#E2F0F1,stroke:#0E7C86,stroke-width:2px,color:#14201F
    style B fill:#E2F0F1,stroke:#0E7C86,stroke-width:1px,color:#14201F
    style C fill:#E2F0F1,stroke:#0E7C86,stroke-width:1px,color:#14201F
    style D fill:#EDE7F5,stroke:#7A5AA8,stroke-width:2px,color:#241938
      

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','lineColor':'#5f7274','fontFamily':'ui-monospace, monospace','fontSize':'13px','actorBkg':'#0E7C86','actorTextColor':'#ffffff','signalTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#5a4410','noteBorderColor':'#c9a24a'}}}%%
sequenceDiagram
    autonumber
    participant Web as 雲端 BE
    participant Agent as Agent (輪詢迴圈)
    participant Tool as OpenVAS
    loop 既有心跳每 N 秒
        Agent->>Web: heartbeat (mTLS+JWT)
        Web-->>Agent: { status:ok, pending_tasks:[...] }
    end
    Note over Agent: 領到 scan 任務
    Agent->>Web: ack (task → dispatched)
    Agent->>Tool: 執行掃描 (API/CLI)
    Agent->>Web: 回報 running
    Tool-->>Agent: 報告產出
    Agent->>Web: POST /agents/tasks/{id}/result + 報告檔
    Web-->>Agent: 200 (task → succeeded)
      

%%{init: {'theme':'base','themeVariables':{'fontFamily':'ui-monospace, monospace','fontSize':'13px','lineColor':'#5f7274','primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86'}}}%%
flowchart TB
    A["任務 PROCESSING（既有狀態）"] --> B["按「開始執行」→ 派工 → Agent 掃描 → 回報告"]
    B --> C["證據入庫 + detection_executions 落一筆 + 發信通知負責人"]
    C --> D{"完成模式"}
    D -->|auto| E["系統自動 complete_job → COMPLETED"]
    D -->|manual| F["任務仍 PROCESSING，等人工判斷"]
    F -->|證據可用| G["手動 complete_job → COMPLETED"]
    F -->|不可用| H["抽屜重掃（留歷史）或補上傳證據 → 再手動完成"]
    B -.->|掃描失敗| I["detection_executions 標 failed（不 silent），任務仍 PROCESSING 可重試"]
    classDef ok fill:#E4F1EA,stroke:#2E7D5B,color:#14201F;
    classDef warn fill:#F6EBD5,stroke:#9C6B12,color:#4a3608;
    classDef crit fill:#F6E2DE,stroke:#B93A2B,color:#4a1510;
    classDef base fill:#E2F0F1,stroke:#0E7C86,color:#14201F;
    class A,B,C base
    class E,G ok
    class F,H warn
    class I crit