客戶程式碼不進主系統，弱點資料天天自己更新

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
sequenceDiagram
    participant U as 顧問（瀏覽器）
    participant API as 主系統 api
    participant AG as Agent（客戶機房）
    participant DB as 主系統 DB
    U->>API: 精靈：建掃描對象、選 Agent
    API->>DB: 建 source_scans（queued，agent_uid）
    API-->>U: 回「上傳票」（短效、綁這台 Agent）
    U->>AG: PUT 源碼包 到 Agent 8443（帶上傳票）
    AG->>AG: 落本機 /data/scan-input，算 sha256
    AG-->>U: 回 file_uid、sha256
    U->>API: 送 file_uid、sha256 → 開始掃描
    API->>DB: 建 agent_tasks（sbom_scan）
    AG->>API: 心跳 → 領走 pending_tasks
    AG->>AG: 安全解壓 → syft → trivy／grype／osv（離線，讀本機 vulndb）
    AG->>API: 回傳 SBOM 多格式＋三家原始 JSON（不含源碼）
    API->>API: 正規化：配對、KEV／EPSS、六區塊統計、NTIA
    API->>DB: 寫 components／findings／summary（done）
    U->>API: 看結果、匯出報表（與現在完全相同）

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#E2F0F1','primaryTextColor':'#14201F','primaryBorderColor':'#0E7C86','secondaryColor':'#EEF2F3','secondaryTextColor':'#14201F','tertiaryColor':'#FBFCFC','tertiaryTextColor':'#14201F','lineColor':'#4A5A5C','textColor':'#14201F','mainBkg':'#E2F0F1','nodeBorder':'#0E7C86','nodeTextColor':'#14201F','edgeLabelBackground':'#FBFCFC','titleColor':'#14201F','clusterBkg':'#FBFCFC','clusterBorder':'#E4EAEB','actorBkg':'#E2F0F1','actorTextColor':'#14201F','actorBorder':'#0E7C86','actorLineColor':'#C7D1D2','signalColor':'#4A5A5C','signalTextColor':'#14201F','labelBoxBkgColor':'#EEF2F3','labelBoxBorderColor':'#C7D1D2','labelTextColor':'#14201F','loopTextColor':'#14201F','noteBkgColor':'#F6EBD5','noteTextColor':'#14201F','noteBorderColor':'#9C6B12','activationBkgColor':'#EEF2F3','activationBorderColor':'#C7D1D2','sequenceNumberColor':'#FFFFFF'}}}%%
flowchart LR
  subgraph JT["我們（每日 03:00，GitLab 排程 → 188 runner）"]
    UP["上游公開資料<br/>Trivy DB／Grype DB／OSV／KEV／EPSS"] --> BUILD["build_vulndb_bundle.sh<br/>（既有）"]
    BUILD --> LC["License Center 蓋章<br/>（既有 vulndb_manifest 型）"]
    LC --> R2["Cloudflare R2<br/>guidant-vulndb-YYYYMMDD.tar.zst<br/>latest.json"]
  end
  subgraph CUST["客戶（連網）"]
    R2 -->|"每日 GET latest.json<br/>較新才下載"| API["主系統 api／worker<br/>驗章 → volume → 紀錄"]
    API -->|"心跳回應：date＋sha256"| AG1["Agent A"]
    API -->|"心跳回應"| AG2["Agent B"]
    AG1 -->|"GET /agents/vulndb/bundle<br/>（控制面通道）"| API
  end
  subgraph CLOSED["客戶（封閉網路）"]
    ADMIN["管理員上傳更新包<br/>（既有設定頁）"] --> API2["主系統"]
    API2 -->|同一條心跳機制| AG3["Agent C"]
  end