docs: architecture guide, shared security page, footer links

app/[lang]/(home)/about/page.tsx

@@ -82,7 +82,7 @@ export default async function AboutPage({ params }: Props) {
                 max · {words.source}
                 <ArrowRight aria-hidden="true" />
               </a>
-              <Link href={`/${lang}/docs/tg/security`}>
+              <Link href={`/${lang}/docs/security`}>
                 {words.security}
                 <ArrowRight aria-hidden="true" />
               </Link>

components/architecture-diagram.tsx

@@ -0,0 +1,292 @@
+type Lang = "en" | "ru" | "es"
+type Box = { name: string; note: string; tone?: "tool" | "shared" | "core" | "outside" }
+type Row = { boxes: Box[]; label?: string }
+
+const tones = {
+  tool: "border-fd-primary/50 bg-fd-primary/10",
+  shared: "border-fd-border bg-fd-card",
+  core: "border-fd-border bg-fd-secondary",
+  outside: "border-dashed border-fd-border bg-transparent",
+} as const
+
+const diagrams: Record<string, Record<Lang, { title: string; rows: Row[] }>> = {
+  packages: {
+    en: {
+      title: "Packages and who depends on whom",
+      rows: [
+        {
+          boxes: [
+            { name: "@leemour/tg-cli", note: "Telegram adapter, login, setup", tone: "tool" },
+            { name: "@leemour/max-cli", note: "MAX protocol, session, max serve, Bot API", tone: "tool" },
+          ],
+        },
+        {
+          boxes: [
+            {
+              name: "@leemour/cli-messaging",
+              note: "domain, services, store, send guard, commands, MCP",
+              tone: "shared",
+            },
+          ],
+        },
+        {
+          boxes: [
+            {
+              name: "@leemour/cli-core",
+              note: "output, errors and exit codes, keyring, config, codegen",
+              tone: "core",
+            },
+            { name: "cli-messaging-sqlite · -onnx", note: "pinned SQLite and ONNX Runtime builds", tone: "core" },
+          ],
+        },
+        {
+          label: "outside",
+          boxes: [
+            { name: "@mtcute/node", note: "Telegram MTProto, used only by tg", tone: "outside" },
+            { name: "ws · msgpack", note: "MAX WebSocket, used only by max", tone: "outside" },
+          ],
+        },
+      ],
+    },
+    ru: {
+      title: "Пакеты и зависимости между ними",
+      rows: [
+        {
+          boxes: [
+            { name: "@leemour/tg-cli", note: "адаптер Telegram, вход, настройка", tone: "tool" },
+            { name: "@leemour/max-cli", note: "протокол MAX, сессия, max serve, Bot API", tone: "tool" },
+          ],
+        },
+        {
+          boxes: [
+            {
+              name: "@leemour/cli-messaging",
+              note: "модель, сервисы, хранилище, защита отправки, команды, MCP",
+              tone: "shared",
+            },
+          ],
+        },
+        {
+          boxes: [
+            {
+              name: "@leemour/cli-core",
+              note: "вывод, ошибки и коды выхода, ключница, настройки, генератор",
+              tone: "core",
+            },
+            { name: "cli-messaging-sqlite · -onnx", note: "закреплённые сборки SQLite и ONNX Runtime", tone: "core" },
+          ],
+        },
+        {
+          label: "снаружи",
+          boxes: [
+            { name: "@mtcute/node", note: "MTProto Telegram, только в tg", tone: "outside" },
+            { name: "ws · msgpack", note: "WebSocket MAX, только в max", tone: "outside" },
+          ],
+        },
+      ],
+    },
+    es: {
+      title: "Paquetes y quién depende de quién",
+      rows: [
+        {
+          boxes: [
+            { name: "@leemour/tg-cli", note: "adaptador de Telegram, acceso, configuración", tone: "tool" },
+            { name: "@leemour/max-cli", note: "protocolo MAX, sesión, max serve, Bot API", tone: "tool" },
+          ],
+        },
+        {
+          boxes: [
+            {
+              name: "@leemour/cli-messaging",
+              note: "dominio, servicios, almacén, protección de envíos, comandos, MCP",
+              tone: "shared",
+            },
+          ],
+        },
+        {
+          boxes: [
+            {
+              name: "@leemour/cli-core",
+              note: "salida, errores y códigos de salida, llavero, configuración, codegen",
+              tone: "core",
+            },
+            { name: "cli-messaging-sqlite · -onnx", note: "builds fijados de SQLite y ONNX Runtime", tone: "core" },
+          ],
+        },
+        {
+          label: "fuera",
+          boxes: [
+            { name: "@mtcute/node", note: "MTProto de Telegram, solo en tg", tone: "outside" },
+            { name: "ws · msgpack", note: "WebSocket de MAX, solo en max", tone: "outside" },
+          ],
+        },
+      ],
+    },
+  },
+  command: {
+    en: {
+      title: "One command, start to finish",
+      rows: [
+        { boxes: [{ name: "argv", note: 'tg work messages send "Book club" …' }] },
+        { boxes: [{ name: "run()", note: "profile, settings, deadline, run record; never throws" }] },
+        { boxes: [{ name: "command", note: "parses its options, asks for services" }] },
+        { boxes: [{ name: "send guard", note: "permissions → recipients → hourly limit; writes only" }] },
+        { boxes: [{ name: "service", note: "the use case, shared with the MCP tool" }] },
+        {
+          boxes: [
+            { name: "adapter + decorators", note: "times each call, saves what was read" },
+            { name: "local store", note: "SQLite, one transaction per call", tone: "core" },
+          ],
+        },
+        { boxes: [{ name: "messenger", note: "Telegram or MAX", tone: "outside" }] },
+        {
+          boxes: [
+            { name: "stdout · exit code", note: "data on stdout, notes on stderr, everything closed", tone: "tool" },
+          ],
+        },
+      ],
+    },
+    ru: {
+      title: "Одна команда от начала до конца",
+      rows: [
+        { boxes: [{ name: "argv", note: 'tg work messages send "Book club" …' }] },
+        { boxes: [{ name: "run()", note: "профиль, настройки, тайм-аут, запись запуска; не бросает исключений" }] },
+        { boxes: [{ name: "команда", note: "разбирает свои параметры, просит сервисы" }] },
+        { boxes: [{ name: "защита отправки", note: "права → получатели → лимит в час; только для записи" }] },
+        { boxes: [{ name: "сервис", note: "сценарий, общий с MCP-инструментом" }] },
+        {
+          boxes: [
+            { name: "адаптер + обёртки", note: "замеряют каждый вызов, сохраняют прочитанное" },
+            { name: "локальная копия", note: "SQLite, одна транзакция на вызов", tone: "core" },
+          ],
+        },
+        { boxes: [{ name: "мессенджер", note: "Telegram или MAX", tone: "outside" }] },
+        {
+          boxes: [
+            { name: "stdout · код выхода", note: "данные в stdout, заметки в stderr, всё закрыто", tone: "tool" },
+          ],
+        },
+      ],
+    },
+    es: {
+      title: "Un comando, de principio a fin",
+      rows: [
+        { boxes: [{ name: "argv", note: 'tg work messages send "Book club" …' }] },
+        { boxes: [{ name: "run()", note: "perfil, ajustes, plazo, registro de ejecución; nunca lanza" }] },
+        { boxes: [{ name: "comando", note: "analiza sus opciones, pide servicios" }] },
+        {
+          boxes: [
+            { name: "protección de envíos", note: "permisos → destinatarios → límite por hora; solo escrituras" },
+          ],
+        },
+        { boxes: [{ name: "servicio", note: "el caso de uso, compartido con la herramienta MCP" }] },
+        {
+          boxes: [
+            { name: "adaptador + decoradores", note: "miden cada llamada, guardan lo leído" },
+            { name: "almacén local", note: "SQLite, una transacción por llamada", tone: "core" },
+          ],
+        },
+        { boxes: [{ name: "mensajero", note: "Telegram o MAX", tone: "outside" }] },
+        {
+          boxes: [
+            { name: "stdout · código de salida", note: "datos en stdout, notas en stderr, todo cerrado", tone: "tool" },
+          ],
+        },
+      ],
+    },
+  },
+  layers: {
+    en: {
+      title: "Layers: each calls only the ones below",
+      rows: [
+        {
+          boxes: [{ name: "interface", note: "CLI commands · MCP tools", tone: "tool" }],
+        },
+        { boxes: [{ name: "services", note: "messages, chats, people, inbox, archive, conversations…" }] },
+        { boxes: [{ name: "ports", note: "MessengerAdapter · MessageStore" }] },
+        {
+          boxes: [
+            { name: "adapters", note: "TelegramAdapter (tg) · maxAdapter (max)", tone: "outside" },
+            { name: "SQLite store", note: "Node and Bun drivers", tone: "core" },
+          ],
+        },
+        { boxes: [{ name: "domain", note: "Chat, Message, Person, Page… types only", tone: "core" }] },
+      ],
+    },
+    ru: {
+      title: "Слои: каждый вызывает только нижние",
+      rows: [
+        { boxes: [{ name: "интерфейс", note: "команды CLI · MCP-инструменты", tone: "tool" }] },
+        { boxes: [{ name: "сервисы", note: "messages, chats, people, inbox, archive, conversations…" }] },
+        { boxes: [{ name: "порты", note: "MessengerAdapter · MessageStore" }] },
+        {
+          boxes: [
+            { name: "адаптеры", note: "TelegramAdapter (tg) · maxAdapter (max)", tone: "outside" },
+            { name: "хранилище SQLite", note: "драйверы Node и Bun", tone: "core" },
+          ],
+        },
+        { boxes: [{ name: "модель", note: "Chat, Message, Person, Page… только типы", tone: "core" }] },
+      ],
+    },
+    es: {
+      title: "Capas: cada una llama solo a las de abajo",
+      rows: [
+        { boxes: [{ name: "interfaz", note: "comandos CLI · herramientas MCP", tone: "tool" }] },
+        { boxes: [{ name: "servicios", note: "messages, chats, people, inbox, archive, conversations…" }] },
+        { boxes: [{ name: "puertos", note: "MessengerAdapter · MessageStore" }] },
+        {
+          boxes: [
+            { name: "adaptadores", note: "TelegramAdapter (tg) · maxAdapter (max)", tone: "outside" },
+            { name: "almacén SQLite", note: "drivers de Node y Bun", tone: "core" },
+          ],
+        },
+        { boxes: [{ name: "dominio", note: "Chat, Message, Person, Page… solo tipos", tone: "core" }] },
+      ],
+    },
+  },
+}
+
+const Arrow = () => (
+  <svg
+    className="mx-auto my-1 block text-fd-muted-foreground"
+    width="14"
+    height="18"
+    viewBox="0 0 14 18"
+    aria-hidden="true"
+  >
+    <path d="M7 0v15M2 10l5 6 5-6" fill="none" stroke="currentColor" strokeWidth="1.6" />
+  </svg>
+)
+
+/** A box diagram drawn from data, so its labels follow the page language and its colours the theme. */
+export function ArchitectureDiagram({ name, lang = "en" }: { name: keyof typeof diagrams; lang?: Lang }) {
+  const diagram = diagrams[name]?.[lang] ?? diagrams[name]?.en
+  if (!diagram) return null
+  return (
+    <figure
+      className="not-prose my-6 rounded-xl border border-fd-border bg-fd-background p-4"
+      aria-label={diagram.title}
+    >
+      <figcaption className="mb-3 text-center text-sm font-semibold text-fd-foreground">{diagram.title}</figcaption>
+      {diagram.rows.map((row, index) => (
+        <div key={row.boxes.map((box) => box.name).join()}>
+          {index > 0 && <Arrow />}
+          {row.label && (
+            <p className="mb-1 text-center text-xs uppercase tracking-wide text-fd-muted-foreground">{row.label}</p>
+          )}
+          <div className="flex flex-col gap-2 sm:flex-row">
+            {row.boxes.map((box) => (
+              <div
+                key={box.name}
+                className={`flex-1 rounded-lg border px-3 py-2 text-center ${tones[box.tone ?? "shared"]}`}
+              >
+                <div className="font-mono text-sm font-semibold text-fd-foreground">{box.name}</div>
+                <div className="text-xs text-fd-muted-foreground">{box.note}</div>
+              </div>
+            ))}
+          </div>
+        </div>
+      ))}
+    </figure>
+  )
+}

components/mdx.tsx

@@ -3,6 +3,7 @@ import defaultMdxComponents from "fumadocs-ui/mdx"
 import { ExternalLink } from "lucide-react"
 import type { MDXComponents } from "mdx/types"
 import type { ComponentProps, ComponentType } from "react"
+import { ArchitectureDiagram } from "@/components/architecture-diagram"
 import { DocTerm } from "@/components/doc-term"
 import { DocsCodeBlock } from "@/components/docs-code-block"
 import { InstallationGuide } from "@/components/installation-guide"
@@ -28,6 +29,7 @@ export function getMDXComponents(components?: MDXComponents) {
     ),
     h2: (props: ComponentProps<"h2"> & { "data-static-heading"?: boolean }) =>
       props["data-static-heading"] ? <h2 {...props}>{props.children}</h2> : <Heading as="h2" {...props} />,
+    ArchitectureDiagram,
     InstallationGuide,
     DocTerm,
     SearchPlayground,