%% Standard Authority plug-in component overview (Mermaid)
flowchart LR
    subgraph Host["Authority Host"]
        config[AuthorityPluginConfigurationLoader
(bind + validate options)]
        pluginHost[PluginHost Registrar Loader
(IAuthorityPluginRegistrar)]
        api[Minimal API Endpoints
/token, /device/code, /internal/*]
        telemetry[Structured Telemetry
(logs - metrics - traces)]
    end

    subgraph StandardPlugin["Standard Identity Provider Plug-in"]
        registrar[StandardPluginRegistrar
(registers services, capabilities)]
        options[StandardPluginOptions
(offline YAML input)]
        identity[IIdentityProviderPlugin
(password & bootstrap flows)]
        store[StandardUserCredentialStore
(Mongo collections)]
        capability[Capability Metadata
(password, bootstrap, clientProvisioning)]
    end

    subgraph External["External Systems"]
        mongo[(MongoDB cluster
credential + lockout state)]
        audit[(Audit Sink / Event Bus)]
        secrets[Offline Secrets Bundle
(keys, salts, bootstrap users)]
        opsRepo[(Offline Kit Assets)]
    end

    config --> registrar
    pluginHost --> registrar
    registrar --> options
    registrar --> capability
    registrar --> identity
    identity --> store
    identity --> audit
    store --> mongo
    options --> secrets
    secrets --> registrar
    api --> identity
    telemetry --> opsRepo
    pluginHost --> telemetry
    capability --> pluginHost
    audit --> telemetry