讓不懂程式的顧問，自己看得出專案有多危險

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart TD
  M["側選單：原始碼掃描"] --> L["① 掃描對象清單"]
  L -->|"新增"| W1["② 精靈頁 1：這是什麼"]
  W1 --> W2["頁 2：程式在哪<br/>源碼包／SBOM 檔"]
  W2 --> W3["頁 3：怎麼掃<br/>標準掃描，進階可勾工具與格式"]
  W3 --> P["清單上顯示四段進度<br/>接收檔案→產出物料清單→比對弱點→整理報告"]
  L -->|"重新掃描"| P
  P --> R["③ 結果頁<br/>顧問層／對照層／原始層"]
  L -->|"看結果"| R
  R -->|"匯出"| X["報表：樣式 × 格式"]
  L -->|"歷次比對"| H["④ 選兩次比：修掉／新增／仍在"]
  H -->|"匯出回訪報告"| X
  S["⑤ 設定頁（管理員）<br/>弱點資料・資源上限"] -.->|"弱點資料日期與上限"| W3

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
sequenceDiagram
    participant C as 顧問瀏覽器
    participant API as guidant-api
    participant OBJ as SeaweedFS
    participant DB as guidant-db
    participant W as guidant-worker
    participant S as guidant-sandbox

    C->>API: 新增掃描（上傳源碼包或 SBOM 檔）
    API->>OBJ: 存原檔（先擋大小與副檔名）
    API->>DB: 建掃描列、background_jobs 入列（payload 只放 uid）
    API-->>C: 回掃描 uid
    W->>DB: 撿單（FOR UPDATE SKIP LOCKED）
    Note over W: 進度①接收檔案
    W->>OBJ: 取原檔寫入共用工作 volume
    Note over W: 進度②產出物料清單
    W->>S: 內網掃描請求（工作路徑、輸入類型）
    alt 源碼包
        S->>S: 安全解壓、syft 產 SBOM
    else SBOM 檔
        S->>S: 辨識格式版本、驗 schema
    end
    Note over W: 進度③比對弱點
    S->>S: trivy sbom 與 grype sbom（離線弱點資料）
    S->>S: syft convert 產 CycloneDX 與 SPDX 各版本
    S-->>W: 原始輸出與 SBOM 檔（共用工作 volume）
    Note over W: 進度④整理報告
    W->>W: 正規化、跨工具配對、KEV／EPSS、六區塊統計、品質分
    W->>OBJ: 存原始輸出與 SBOM（附 sha256）
    W->>DB: 寫元件、弱點、摘要，掃描列標完成
    C->>API: 輪詢掃描狀態
    API-->>C: 四段進度與結果

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart LR
  BR["瀏覽器<br/>顧問／管理員操作介面"]
  AG["遠端 Agent（FR-039）<br/>客戶主機上的檢測代理"]
  HB["Harbor 映像倉庫<br/>只在升級時拉 image"]
  subgraph NDEF["網段 default（一般內網，非 internal；只有 guidant-fe 對外開 80／443）"]
    FE["guidant-fe<br/>nginx：唯一對外入口，SPA＋同源反代"]
    API["guidant-api<br/>REST API，收單、查狀態"]
    SIO["guidant-socketio<br/>即時通知"]
    WK["guidant-worker<br/>背景工作：撿單、證據分類、經 AI 閘道打 AI"]
    DB[("guidant-db<br/>PostgreSQL 16：主庫＋bugsink 庫")]
    RD[("guidant-redis<br/>Redis 8：快取與佇列，只開 TLS")]
    SW[("guidant-seaweedfs<br/>物件儲存：上傳檔與報表")]
    BS["guidant-bugsink<br/>錯誤追蹤站"]
    INIT["guidant-db-init<br/>一次性：裝機建庫、升級套 migration"]
  end
  subgraph NSB["網段 guidant-sandbox（internal，不能出網）"]
    SB["guidant-sandbox<br/>檔案沙箱：拆不可信證據檔"]
  end
  subgraph NERR["網段 guidant-sandbox-errors（internal）"]
    ERRL["成員只有沙箱與 Bugsink<br/>沙箱送錯誤事件專用"]
  end
  subgraph VOL["named volume（資料落點）"]
    VPG[("guidant-pgdata<br/>DB 資料")]
    VSWD[("guidant-seaweedfs-data<br/>物件儲存資料")]
    VCJ[("guidant-classifier-jobs<br/>分類工作暫存<br/>api／socketio／worker／sandbox 共掛")]
    VBS[("guidant-bugsink-data<br/>錯誤站資料")]
  end
  BR -->|"https 443"| FE
  AG -->|"https 443：註冊、回傳結果"| FE
  HB -.->|"只在升級時拉新版 image（各服務同）"| API
  FE -->|"/api/1.0"| API
  FE -->|"/socket.io"| SIO
  FE -->|"/bugsink/"| BS
  API --> DB
  API --> RD
  API --> SW
  SIO --> DB
  SIO --> RD
  WK --> DB
  WK --> RD
  WK --> SW
  WK -.->|"經第二網段 guidant-sandbox：內網 8080 拆檔請求"| SB
  API -->|"錯誤事件（socketio／worker 同）"| BS
  SB -.->|"第二網段：送錯誤事件"| ERRL
  ERRL -.-> BS
  BS -->|"bugsink 庫"| DB
  INIT -->|"profile init，跑完退場"| DB
  DB --- VPG
  SW --- VSWD
  WK --- VCJ
  SB --- VCJ
  BS --- VBS

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart LR
  BR["瀏覽器<br/>顧問／管理員操作介面"]
  AG["遠端 Agent（FR-039）<br/>客戶主機上的檢測代理"]
  HB["Harbor 映像倉庫<br/>只在升級時拉 image"]
  subgraph NDEF["網段 default（一般內網，非 internal；只有 guidant-fe 對外開 80／443）"]
    FE["guidant-fe<br/>nginx：唯一對外入口，SPA＋同源反代"]
    API["guidant-api<br/>REST API，收單、查狀態"]
    SIO["guidant-socketio<br/>即時通知"]
    WK["guidant-worker<br/>背景工作：撿單、證據分類、派掃描、產報表"]
    DB[("guidant-db<br/>PostgreSQL 16：主庫＋bugsink 庫")]
    RD[("guidant-redis<br/>Redis 8：快取與佇列，只開 TLS")]
    SW[("guidant-seaweedfs<br/>物件儲存：上傳檔與報表")]
    BS["guidant-bugsink<br/>錯誤追蹤站"]
    INIT["guidant-db-init<br/>一次性：裝機建庫、升級套 migration"]
  end
  subgraph HARD["套用共用加固樣板（唯讀、去權限、資源上限）；未來新沙箱套同一份"]
    subgraph NSB["網段 guidant-sandbox（internal，不能出網）"]
      SB["guidant-sandbox：拆檔＋SBOM 弱點掃描<br/>image 擴充：加 Syft・Trivy・Grype"]
    end
  end
  subgraph NERR["網段 guidant-sandbox-errors（internal）"]
    ERRL["成員只有沙箱與 Bugsink<br/>沙箱送錯誤事件專用"]
  end
  subgraph VOL["named volume（資料落點）"]
    VPG[("guidant-pgdata<br/>DB 資料")]
    VSWD[("guidant-seaweedfs-data<br/>物件儲存資料")]
    VCJ[("guidant-classifier-jobs<br/>分類工作暫存<br/>api／socketio／worker／sandbox 共掛")]
    VBS[("guidant-bugsink-data<br/>錯誤站資料")]
    VDB[("guidant-scan-vulndb<br/>弱點資料庫，D4 更新包匯入")]
  end
  BR -->|"https 443：上傳源碼包／SBOM 檔"| FE
  AG -->|"https 443：註冊、回傳結果"| FE
  HB -.->|"只在升級時拉新版 image（各服務同）"| API
  FE -->|"/api/1.0"| API
  FE -->|"/socket.io"| SIO
  FE -->|"/bugsink/"| BS
  API --> DB
  API --> RD
  API -->|"存上傳原檔"| SW
  SIO --> DB
  SIO --> RD
  WK --> DB
  WK --> RD
  SW -->|"取上傳原檔"| WK
  WK -.->|"經第二網段 guidant-sandbox：內網 8080 拆檔／掃描請求"| SB
  SB -->|"唯讀掛載"| VDB
  API -->|"錯誤事件（socketio／worker 同）"| BS
  SB -.->|"第二網段：送錯誤事件"| ERRL
  ERRL -.-> BS
  BS -->|"bugsink 庫"| DB
  INIT -->|"profile init，跑完退場"| DB
  DB --- VPG
  SW --- VSWD
  WK --- VCJ
  SB --- VCJ
  BS --- VBS
  style SB fill:#fff3cd,stroke:#d39e00
  style VDB fill:#fff3cd,stroke:#d39e00
  style HARD fill:#ffffff,stroke:#d39e00,stroke-dasharray:6 4

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart LR
  BR["瀏覽器<br/>獨立模組頁／稽核任務頁"] -->|"443：上傳源碼包／SBOM 檔"| NG["guidant-fe（nginx）"]
  NG --> API["guidant-api<br/>入口 1 模組 API・入口 2 檢測工具執行<br/>（execution_target=server 不派 Agent）"]
  API --> PG[("guidant-db<br/>掃描表・background_jobs<br/>detection_executions")]
  API -->|"存原檔"| OBJ[("SeaweedFS<br/>原檔・原始輸出・報表")]
  WK["guidant-worker<br/>撿單・正規化・產報表"] --> PG
  OBJ -->|"取原檔"| WK
  WK -->|"存原始輸出與報表"| OBJ
  subgraph INT["網段 guidant-sandbox：internal，不能出網"]
    SB["guidant-sandbox<br/>拆證據檔＋Syft・Trivy・Grype"]
  end
  WK -->|"內網 8080：掃描請求"| SB
  WK -->|"寫輸入"| WV[("volume<br/>guidant-classifier-jobs<br/>既有共用工作區")]
  WV -->|"讀輸入、寫輸出"| SB
  VDB[("volume<br/>guidant-scan-vulndb")] -->|"唯讀"| SB
  CLI["guidantai vulndb import"] -->|"匯入更新包"| VDB

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart LR
  A["A 沙箱擴充"] --> B["B 弱點資料更新"]
  A --> C["C 掃描後端"]
  C --> D["D 前端"]
  C --> E["E 報表與 AI 分析"]
  C --> F["F 歷次比對"]
  D --> F
  B --> G["G 收尾"]
  D --> G
  E --> G
  F --> G
  C --> H["H 檢測工具入口"]
  H --> G