flowchart TD
  subgraph community["  Campus community  "]
    direction LR
    users["Students, faculty & staff"]
    guests["Public visitors"]
  end

  idp["Campus identity provider"]

  subgraph deployment["  CampusCore deployment - dedicated AWS environment per university  "]
    spa["Frontend"]
    subgraph backend["  Backend system  "]
      agent["AI Agent"]
    end
    kb[("Knowledge base
PostgreSQL + pgvector")]
    files[("Object storage (S3)")]

    subgraph ingestion["  Content ingestion  "]
      scraper["Web scraper"]
      connectors["Connectors
Canvas · ServiceNow ·
Gmail · Google Calendar · Google Drive ·
Outlook · OneDrive · SharePoint ·
PostgreSQL · S3 buckets"]
      pipeline["Ingestion pipeline
queues + workers"]
    end
  end

  subgraph sources["  Campus content sources  "]
    direction LR
    web["Campus websites"]
    uploads["Documents & files"]
    systems["Campus systems"]
  end

  subgraph providers["  AI model providers  "]
    direction LR
    openai["OpenAI"]
    google["Google"]
    cohere["Cohere
planned"]
  end

  users -- "sign in through campus SSO" --> idp
  idp -- "asserts identity
(SAML / OIDC)" --> backend
  users -- "ask questions, upload
documents, administer" --> spa
  guests -- "ask questions without an account
(optional, enabled per school)" --> spa
  spa -- "calls typed APIs; answers stream
back live with source citations" --> backend
  agent -- "hybrid semantic +
keyword search;
access rules enforced
on every query" --> kb
  agent -- "sends question + retrieved context;
receives the generated answer" --> providers

  web -- "crawled on a schedule" --> scraper
  uploads -- "uploaded in the app or
attached to conversations" --> pipeline
  systems -- "ingested via APIs or file stores,
e.g. Google Drive, Canvas" --> connectors
  scraper -- "queues discovered pages" --> pipeline
  connectors -- "queues synced content" --> pipeline
  pipeline -- "keeps original files" --> files
  pipeline -- "extracts, chunks, embeds,
and indexes content" --> kb
  pipeline -- "embedding & OCR
during ingestion" --> providers

  classDef ccPeople fill:#f1f5f9,stroke:#94a3b8,color:#0f172a
  classDef ccCloud fill:#eff6ff,stroke:#3b82f6,color:#0f172a
  classDef ccExternal fill:#fffbeb,stroke:#d97706,color:#0f172a
  classDef ccBoundary fill:#f8fafc,stroke:#cbd5e1,color:#475569
  classDef ccCloudBoundary fill:#f5f9ff,stroke:#3b82f6,stroke-width:2px,color:#1d4ed8
  classDef ccInnerBoundary fill:#ffffff,stroke:#93c5fd,color:#3b82f6
  class users,guests,web,uploads,systems ccPeople
  class spa,agent,kb,files,scraper,connectors,pipeline ccCloud
  class idp,openai,google,cohere ccExternal
  class community,sources,providers ccBoundary
  class deployment ccCloudBoundary
  class ingestion,backend ccInnerBoundary