"""Endor concept topology: explicit meshes, storage dependencies and recovery paths.""" from pathlib import Path import drawsvg as d INK = '#233b38' GREEN = '#2d8b77' BLUE = '#467fb4' PURPLE = '#8a6ab4' AMBER = '#b58b47' MUTED = '#6d817c' LINE = '#dce8e3' FONT = 'ui-sans-serif, system-ui, -apple-system, PingFang SC, Microsoft YaHei, sans-serif' def build_architecture(output: Path) -> None: svg = d.Drawing(2000, 1860) svg.append_title('Endor 架构：全球入口、区域网关、独立存储分片与统一备份') svg.append(d.Rectangle(0, 0, 2000, 1860, fill='#fcfdfb')) def rect(x, y, w, h, fill='white', stroke=LINE, radius=12, dash=None): svg.append(d.Rectangle(x, y, w, h, rx=radius, fill=fill, stroke=stroke, stroke_width=1.2, stroke_dasharray=dash)) def text(s, x, y, size=16, color=INK, weight='400', anchor='start'): svg.append(d.Text(s, size, x, y, fill=color, font_family=FONT, font_weight=weight, text_anchor=anchor)) def path(points, color=GREEN, dash=None, width=1.6, arrow=False, opacity=1): p = d.Path(fill='none', stroke=color, stroke_width=width, stroke_dasharray=dash, stroke_linecap='round', stroke_linejoin='round', opacity=opacity) p.M(*points[0]) for pt in points[1:]: p.L(*pt) svg.append(p) if arrow: x, y = points[-1] px, py = points[-2] import math angle = math.atan2(y-py, x-px) a = d.Path(fill='none', stroke=color, stroke_width=width, stroke_linecap='round', opacity=opacity) for sign in [-1, 1]: a.M(x-7*math.cos(angle+sign*.48), y-7*math.sin(angle+sign*.48)).L(x, y) svg.append(a) def dot(x, y, color=GREEN, r=3): svg.append(d.Circle(x, y, r, fill='#fcfdfb', stroke=color, stroke_width=1.5)) def icon(kind, x, y, color=GREEN, scale=1): # Icons are vector geometry rather than font glyphs or downloaded artwork. g = d.Group(transform=f'translate({x},{y}) scale({scale})', stroke=color, stroke_width=1.8, fill='none', stroke_linecap='round', stroke_linejoin='round') if kind == 'globe': g.append(d.Circle(0, 0, 23)); g.append(d.Ellipse(0, 0, 10, 23)) g.append(d.Line(-22, -8, 22, -8)); g.append(d.Line(-22, 8, 22, 8)) elif kind == 'client': g.append(d.Rectangle(-26,-20,52,33,rx=4)); g.append(d.Line(-32,21,32,21)) g.append(d.Lines(-26,13,-32,21,32,21,26,13)) g.append(d.Line(-6,17,6,17)) elif kind == 'edge': g.append(d.Circle(0,0,24)); g.append(d.Lines(-10,-6,0,-14,11,-6,0,2,-10,-6)) g.append(d.Lines(-10,3,0,11,11,3)); g.append(d.Lines(-10,11,0,19,11,11)) elif kind == 'shield': g.append(d.Path().M(0,-25).L(22,-16).L(20,5).Q(17,19,0,27).Q(-17,19,-20,5).L(-22,-16).Z()) g.append(d.Lines(-9,0,-2,7,11,-7)) elif kind == 'lb': g.append(d.Circle(0,-17,7)); g.append(d.Circle(-22,19,7)); g.append(d.Circle(22,19,7)) g.append(d.Lines(0,-10,0,1,-22,1,-22,12)); g.append(d.Lines(0,1,22,1,22,12)) elif kind == 'gateway': # Routing diamond: deliberately distinct from a Runtime server. g.append(d.Lines(0,-23,23,0,0,23,-23,0,0,-23)) g.append(d.Line(-34,0,-12,0)); g.append(d.Lines(-17,-5,-12,0,-17,5)) for yy in [-12,0,12]: g.append(d.Lines(0,0,9,yy,34,yy)) g.append(d.Lines(29,yy-4,34,yy,29,yy+4)) elif kind == 'runtime': for dy in [-14,2]: g.append(d.Rectangle(-25,dy,50,12,rx=3)) g.append(d.Circle(-16,dy+6,1.3,fill=color)); g.append(d.Line(-8,dy+6,16,dy+6)) if kind == 'runtime': g.append(d.Line(-13,20,13,20)); g.append(d.Line(0,14,0,20)) elif kind == 'vm': g.append(d.Rectangle(-17,-13,34,26,rx=4)) for a in [-10,0,10]: g.append(d.Line(a,-18,a,-13)); g.append(d.Line(a,13,a,18)) for a in [-6,6]: g.append(d.Line(-22,a,-17,a)); g.append(d.Line(17,a,22,a)) g.append(d.Path().M(-6,-5).L(0,0).L(-6,5)); g.append(d.Line(4,6,10,6)) elif kind == 'db': g.append(d.Path().M(-21,-12).L(-21,15).C(-21,27,21,27,21,15).L(21,-12)) g.append(d.Ellipse(0,-12,21,8)); g.append(d.Path().M(-21,1).C(-21,12,21,12,21,1)) elif kind == 'pool': for dx,dy in [(-12,-9),(12,-9),(0,12)]: g.append(d.Rectangle(dx-11,dy-10,22,20,rx=5)) g.append(d.Circle(dx,dy,3,fill=color,stroke='none')) elif kind == 'bucket': g.append(d.Ellipse(0,-15,23,7)); g.append(d.Lines(-23,-15,-18,21,18,21,23,-15)) g.append(d.Path().M(-17,6).Q(0,17,17,6)) elif kind == 'backup': g.append(d.Rectangle(-25,-15,50,36,rx=4)); g.append(d.Line(-29,-15,29,-15)) g.append(d.Lines(-6,5,0,-2,6,5)); g.append(d.Line(0,-2,0,14)) svg.append(g) def badge(s, x, y, color=GREEN, bg='#edf5ee', w=118): rect(x, y-17, w, 25, bg, 'none', 5) text(s, x+w/2, y, 12, color, '500', 'middle') text('ENDOR / SYSTEM ATLAS', 40, 42, 14, GREEN, '600') text('01 全球接入', 40, 83, 13, MUTED, '600') path([(160,143),(550,143)], arrow=True) text('动态 API / 对象访问',280,131,13,GREEN) path([(110,113),(110,100),(1300,100),(1300,114)],BLUE,arrow=True) text('静态资源 / 可缓存内容',1000,91,13,BLUE) path([(110,179),(110,214),(1750,214),(1750,179)],PURPLE,'5 6',arrow=True) text('登录 / 换取凭证',1470,204,12,PURPLE) icon('client',110,143) text('全球客户端',110,191,17,INK,'600','middle') icon('globe',600,143) text('endorphin API',654,138,24,INK,'600') text('全球流量入口 · 按健康与策略选区',654,165,14,MUTED) icon('edge',1300,143,BLUE) text('CDN',1340,137,21,INK,'600') text('命中直接返回',1340,162,13,MUTED) icon('shield',1750,143,PURPLE) text('身份服务',1790,138,18,INK,'600') text('登录 / 签发凭证',1790,162,12,MUTED) # A real fan-out includes an open-ended third branch, not just two regions. path([(835,180),(835,243),(1900,243),(1900,306)],GREEN,arrow=True) rect(1855,315,110,132,'#f8faf7',LINE,12,'3 5') text('… / etc',1910,354,23,GREEN,'500','middle') text('其他区域',1910,388,15,INK,'600','middle') text('按需扩展',1910,418,12,MUTED,'400','middle') regions = [('北美','NA',40,GREEN),('亚洲','AS',960,BLUE)] # Each storage family owns its own shard set. No PG/Aerarium/S3 triplets. families = [('PostgreSQL','PG','db',150), ('Aerarium','AO','pool',435), ('S3','S3','bucket',720)] backup_ports = [] for name,prefix,ox,accent in regions: center = ox+435 rect(ox,275,870,1025,'#ffffff',LINE,18) text(f'{name}区域',ox+28,314,24,INK,'600') text(f'{prefix} / 独立故障域',ox+28,340,12,MUTED) badge('区域入口',ox+708,316,accent,'#eff5f0',132) path([(835,180),(835,243),(center,243),(center,352)],GREEN,arrow=True) icon('lb',center,377,accent,.72) text('区域负载均衡',center+42,372,16,INK,'600') text('健康检查 / TLS 路由',center+42,396,12,MUTED) gateways = [ox+265,ox+605] runtime_x = [ox+105+i*165 for i in range(5)] runtime_y = [605,619,605,619,605] for gx in gateways: path([(center,403),(center,423),(gx,423),(gx,444)],accent,arrow=True) text('TRAEFIK',ox+26,467,12,MUTED,'600') text('生产冗余 · 可选',ox+26,491,12,MUTED) for i,gx in enumerate(gateways): icon('gateway',gx,467,accent,.85) text(f'Traefik {i+1}',gx,510,14,INK,'500','middle') if i == 1: badge('HA 副本',gx+49,469,accent,'#edf5f0',85) for nx,ny in zip(runtime_x,runtime_y): path([(gx,523),(nx,ny-30)],accent,width=1.35,opacity=.65) dot(gx,523,accent) text('K₂,₅ 全连接',ox+23,556,11,accent) for i,(nx,ny) in enumerate(zip(runtime_x,runtime_y)): dot(nx,ny-30,accent) icon('runtime',nx,ny,accent) text(f'Nexus Runtime {i+1:02}',nx,ny+39,13,INK,'600','middle') # VM deliberately offset to the lower right of its host. path([(nx+26,ny+5),(nx+64,ny+5),(nx+64,ny+70),(nx+50,ny+70)],accent,'2 4',width=1) icon('vm',nx+35,ny+70,accent,.55) text('Aster VM',nx+35,ny+100,11,INK,'400','middle') # Route storage traffic outside the label/VM, not through them. path([(nx-26,ny),(nx-61,ny),(nx-61,747)],accent,width=1.1,opacity=.75) path([(runtime_x[0]-61,747),(runtime_x[-1]-61,747)],accent,width=1.2) path([(center,747),(center,793)],accent,arrow=True) text('分片定位 / 对象访问',center+16,775,12,MUTED) text('02 独立存储分片群',ox+26,775,13,INK,'600') ys = [880,1020,1160] for label,code,kind,dx in families: cx=ox+dx rect(cx-95,802,190,468,'#f8faf7','#e3ebe2',10) text(label,cx,829,17,INK,'600','middle') text('Object data pool' if code=='AO' else '独立分片群',cx,850,11,MUTED,'400','middle') for i,sy in enumerate(ys): icon(kind,cx,sy,accent,.8) text(f'{prefix}-{code}-{i+1:02}',cx,sy+36,12,INK,'500','middle') path([(cx,sy+43),(cx,sy+54)],accent,'2 4',width=1) icon(kind,cx,sy+69,accent,.32) text('区域 HA',cx+23,sy+73,10,MUTED) dot(cx,1270,AMBER) backup_ports.append((prefix,code,cx)) # K3,3 on each side: every Aerarium shard can address every PG/S3 shard. # The two storage families do not gain a fictitious direct PG-to-S3 edge. pg,ao,s3 = ox+150,ox+435,ox+720 for ay in ys: path([(ao-25,ay),(ao-75,ay)],accent,width=1.1) path([(ao+25,ay),(ao+75,ay)],accent,width=1.1) for by in ys: path([(ao-75,ay),(pg+75,by)],accent,width=1.15,opacity=.55) path([(ao+75,ay),(s3-75,by)],accent,width=1.15,opacity=.55) dot(ao-75,ay,accent,2.5); dot(ao+75,ay,accent,2.5) for sy in ys: path([(pg+75,sy),(pg+25,sy)],accent,width=1.1,arrow=True) path([(s3-75,sy),(s3-25,sy)],accent,width=1.1,arrow=True) dot(pg+75,sy,accent,2.5); dot(s3-75,sy,accent,2.5) text('Aerarium ↔ PG / S3：各分片群全连接，按归属与映射定位数据',center,1290,12,MUTED,'400','middle') # Identity is a control-plane relation; representative endpoints are labeled. path([(1750,180),(1750,227),(935,227),(935,653)],PURPLE,'5 6') path([(935,653),(900,653),(900,605),(871,605)],PURPLE,'5 6',arrow=True) path([(935,653),(985,653),(985,605),(1038,605)],PURPLE,'5 6',arrow=True) rect(870,667,130,49,'#fcfdfb','none',4) text('JWKS / 凭证验证',935,686,11,PURPLE,anchor='middle') text('Nexus 本地验证',935,705,10,PURPLE,anchor='middle') # CDN fills from an S3 shard, without crossing other storage labels. path([(1300,180),(1300,207),(1975,207),(1975,885),(1808,885),(1808,880),(1705,880)],BLUE,'2 6',arrow=True) rect(1948,559,49,51,'#fcfdfb','none',3) text('CDN',1972,580,11,BLUE,anchor='middle') text('回源',1972,601,11,BLUE,anchor='middle') # One system, not a North America / Asia pair of backup silos. for i,(prefix,code,cx) in enumerate(backup_ports): dest={'PG':370,'AO':980,'S3':1580}[code] lane=1325+i*18 path([(cx,1270),(cx,lane),(dest,lane),(dest,1460)],AMBER,'6 6',arrow=True) rect(40,1460,1790,280,'#fbf8f1','#e9dec8',16) text('03 统一备份系统',68,1502,23,INK,'600') text('全区域 / 全部分片 · 统一编排、持久化、校验与恢复',68,1531,14,MUTED) for kind,cx,label,line1,line2 in [ ('db',370,'PostgreSQL 备份','基础备份 + WAL / 恢复点','各区域 PostgreSQL 分片的事务恢复材料'), ('pool',980,'Aerarium 备份','对象池状态 + 索引 / 版本映射','关联对象、PG 恢复点与 S3 对象版本'), ('bucket',1580,'S3 备份','对象版本 + Blob / 快照','各区域 S3 分片的实际对象与文件数据'), ]: icon(kind,cx-145,1596,AMBER,1.05) text(label,cx-95,1587,18,INK,'600') text(line1,cx-95,1615,14,MUTED) text(line2,cx-95,1641,12,MUTED) path([(90,1670),(1780,1670)],'#e3d5b9',width=1) text('统一恢复目录：区域 / 存储类型 / 分片 ID / 恢复清单 / 校验和 / 重试状态',935,1709,14,AMBER,'500','middle') path([(50,1790),(105,1790)],GREEN,arrow=True) text('请求 / 存储依赖',118,1795,12,MUTED) path([(365,1790),(420,1790)],PURPLE,'5 6') text('身份控制 / 公钥',433,1795,12,MUTED) path([(680,1790),(735,1790)],BLUE,'2 6') text('缓存回源',748,1795,12,MUTED) path([(965,1790),(1020,1790)],AMBER,'6 6') text('统一备份采集',1033,1795,12,MUTED) text('实线为逻辑可达关系；全连接不表示广播，也不表示任意分片拥有相同数据。',40,1837,12,MUTED) text('备份保证以已持久化且已校验的恢复点为边界。',1830,1837,12,AMBER,anchor='end') output.parent.mkdir(parents=True, exist_ok=True) svg.save_svg(str(output))