Deployment And Environment Isolation

flowchart TB
    subgraph GitHub["GitHub"]
        DEV["dev branch"]
        PROD["prod branch"]
        PR["Pull request validation"]
        WF[".github/workflows/deploy.yml"]
    end

    subgraph Build["Build + Packaging"]
        DETECT["Detect changed components"]
        BUILDUI["Build UI when apps/ui changed"]
        BUILDDOCS["Render architecture docs when docs changed"]
        BUILDLAMBDA["Build changed Lambda modules"]
        ARTIFACTS["Upload jars to env-reef-a-matic-api"]
        SEEDJSON["Refresh seed JSON when reference modules change"]
    end

    subgraph Terraform["Terraform"]
        TFSTATE["S3 backend: terraform/env/reef-a-matic-api.tfstate"]
        APPLY["terraform apply for target env"]
        API["REST + WebSocket APIs"]
        LAMBDA["Lambda functions"]
        DDB["DynamoDB tables"]
        SQS["SQS queues"]
        S3["S3 buckets"]
        EVENT["EventBridge"]
        OBS["Observability resources"]
    end

    subgraph UI["Frontend Deploy"]
        RESOLVE["Resolve target AWS config"]
        GUARD["Prod guard rejects dev URLs, dev Cognito, dev domain"]
        UIS3["Sync dist to env-reef-a-matic-ui"]
        CF["Resolve CloudFront distribution by domain"]
        INVALIDATE["Invalidate /*"]
    end

    subgraph Docs["Architecture Docs Deploy"]
        DOCSBUILD["Generate static HTML from docs markdown + Mermaid"]
        DOCSS3["Sync to env-reef-a-matic-docs"]
        DOCSCF["CloudFront: docs.env.reefamatic.com"]
        DOCSACM["ACM DNS validated certificate"]
        DOCSINVALIDATE["Invalidate docs /*"]
    end

    subgraph Seed["Reference Data"]
        TESTLOAD["env-test-load-test-data"]
        DOSELOAD["dose/correction seed loaders"]
        TESTE["env-test-element: Oceamo + Triton ICP panels"]
        DOSEE["env-dose-element"]
        CORR["env-element-correction"]
    end

    PR --> WF
    DEV --> WF
    PROD --> WF
    WF --> DETECT
    DETECT --> BUILDUI
    DETECT --> BUILDDOCS
    DETECT --> BUILDLAMBDA
    BUILDLAMBDA --> ARTIFACTS
    ARTIFACTS --> APPLY
    DETECT --> APPLY
    APPLY --> TFSTATE
    APPLY --> API
    APPLY --> LAMBDA
    APPLY --> DDB
    APPLY --> SQS
    APPLY --> S3
    APPLY --> EVENT
    APPLY --> OBS
    BUILDUI --> RESOLVE
    RESOLVE --> GUARD
    GUARD --> UIS3
    UIS3 --> CF
    CF --> INVALIDATE
    BUILDDOCS --> DOCSBUILD
    DOCSBUILD --> DOCSS3
    APPLY --> DOCSACM
    APPLY --> DOCSCF
    DOCSS3 --> DOCSCF
    DOCSCF --> DOCSINVALIDATE
    DETECT --> SEEDJSON
    SEEDJSON --> TESTLOAD
    SEEDJSON --> DOSELOAD
    TESTLOAD --> TESTE
    DOSELOAD --> DOSEE
    DOSELOAD --> CORR