Foundry Execution Backends

C4Context
    title System Context - Knowmler Lab builds via Context Foundry on Azure
    Person(admin, "Lab Admin", "Promotes an idea and clicks Build")
    Person_Ext(viewer, "Preview Viewer", "Opens the built app")
    System(knowmler, "Knowmler", "Lab platform. Submits builds and polls status.")
    System(foundry, "Context Foundry Build Service", "/v1 control plane: queue, idempotency, logs, artifacts, TTL, auth proxy")
    System_Ext(azure, "Microsoft Azure", "Build compute and preview hosting")
    System_Ext(anthropic, "Anthropic Claude", "LLM, via Foundry scoped auth proxy")
    Rel(admin, knowmler, "Clicks Build")
    Rel(knowmler, foundry, "POST /v1/jobs; polls", "HTTPS + bearer")
    Rel(foundry, azure, "Runs build job, builds image, deploys preview", "ARM API")
    Rel(foundry, anthropic, "Per-job scoped proxy token", "HTTPS")
    Rel(viewer, azure, "Opens app.org.knowmler.com", "HTTPS")
    UpdateLayoutConfig($c4ShapeInRow="3", $c4BoundaryInRow="2")
  

C4Container
    title Container Diagram - azure_container_apps backend
    Person(admin, "Lab Admin")
    System_Boundary(kn, "Knowmler (VPS)") {
        Container(fe, "Frontend", "Next.js", "Lab UI and Build button")
        Container(be, "Backend + Worker", "FastAPI", "Calls /v1/jobs, polls")
    }
    System_Boundary(az, "Azure Resource Group: rg-foundry-prod") {
        Container(daemon, "foundry serve", "Container App (Rust)", "The /v1 control plane")
        Container(job, "Build Job", "ACA Job (foundry-builder)", "QRPBA, 2 vCPU / 4 GiB, scoped token")
        Container(preview, "Preview App", "Container App, scale-to-zero", "The built application")
        Container(acr, "Container Registry", "ACR", "foundry-builder + per-app images")
        ContainerDb(blob, "Job Storage", "Blob foundry-jobs", "inputs, logs, artifacts")
        ContainerDb(logs, "Log Analytics", "Workspace", "ACA environment logs")
    }
    System_Ext(anthropic, "Anthropic Claude")
    Rel(admin, fe, "Build")
    Rel(fe, be, "POST /api/lab/ideas/{id}/build")
    Rel(be, daemon, "POST /v1/jobs; poll", "HTTPS")
    Rel(daemon, job, "Create + start ACA Job", "ARM")
    Rel(job, blob, "I/O via SAS")
    Rel(job, anthropic, "scoped proxy token")
    Rel(daemon, acr, "Build app image (ACR Tasks)")
    Rel(daemon, preview, "Deploy from image", "ARM")
    Rel(preview, acr, "Pull image")
    Rel(daemon, logs, "logs")
    UpdateLayoutConfig($c4ShapeInRow="2", $c4BoundaryInRow="1")
  

flowchart TB
    classDef az fill:#e6f2fb,stroke:#0078D4,stroke-width:1.5px,color:#243a5e;
    classDef edge fill:#f3f9fd,stroke:#5b6b7f,stroke-width:1px,color:#243a5e;
    VIEWER["Preview Viewer"]:::edge
    CF["Cloudflare DNS + TLS
*.org.knowmler.com"]:::edge
    BE["Knowmler Backend + Worker
POST /v1/jobs, poll"]:::edge
    subgraph RG["Azure Resource Group: rg-foundry-prod"]
      direction TB
      SVC["Container App: ca-foundry-service
foundry serve (/v1)"]:::az
      ENV["Container Apps Env: cae-foundry"]:::az
      JOB["ACA Job: caj-foundry-build
2 vCPU / 4 GiB"]:::az
      PREV["Container Apps: ca-preview-*
scale-to-zero"]:::az
      ACR["Container Registry: crfoundry"]:::az
      ST["Storage + Blob
stfoundryjobs / foundry-jobs"]:::az
      LOG["Log Analytics: log-foundry"]:::az
      ID["Managed Identity: id-foundry"]:::az
    end
    BE -->|/v1 HTTPS + bearer| SVC
    SVC -->|create/start ARM| JOB
    SVC -->|ACR Tasks build| ACR
    SVC -->|deploy ARM| PREV
    JOB -->|SAS I/O| ST
    JOB -->|pull builder| ACR
    PREV -->|pull app image| ACR
    SVC --- ENV
    JOB --- ENV
    PREV --- ENV
    ENV --> LOG
    SVC -. uses .-> ID
    VIEWER --> CF -->|CNAME| PREV
  

sequenceDiagram
    autonumber
    participant K as Knowmler worker
    participant F as foundry serve
    participant J as ACA Job (builder)
    participant R as ACR
    participant P as Preview App
    K->>F: POST /v1/jobs (SPEC.md, TASKS.md, org_slug)
    F->>F: enqueue, idempotency, SAS grant + scoped proxy token
    F->>J: create + start ACA Job
    J->>J: QRPBA build (LLM via proxy token)
    J-->>F: stream.jsonl via append blob
    F->>R: ACR Tasks build app image, push
    F->>P: deploy scale-to-zero Container App
    P-->>F: FQDN
    F-->>K: status ready + preview_url
    Note over F,P: TTL reaper + teardown DELETE Job, Container App, ACR repo