diff --git a/Architecture-Diagram.md b/Architecture-Diagram.md
index 1939d43..850b535 100644
--- a/Architecture-Diagram.md
+++ b/Architecture-Diagram.md
@@ -1,47 +1,156 @@
# FalahOS Architecture Diagram
-
+```mermaid
+graph TB
+ %% Styles
+ classDef user fill:rgba(30,41,59,0.5),stroke:#94a3b8,stroke-width:1.5
+ classDef cf fill:rgba(120,53,15,0.3),stroke:#fbbf24,stroke-width:1.5
+ classDef frontend fill:rgba(8,51,68,0.4),stroke:#22d3ee,stroke-width:1.5
+ classDef backend fill:rgba(6,78,59,0.4),stroke:#34d399,stroke-width:1.5
+ classDef db fill:rgba(76,29,149,0.4),stroke:#a78bfa,stroke-width:1.5
+ classDef agent fill:rgba(136,19,55,0.4),stroke:#fb7185,stroke-width:1.5
+ classDef external fill:rgba(30,41,59,0.5),stroke:#94a3b8,stroke-width:1.5
+ classDef model fill:rgba(251,146,60,0.3),stroke:#fb923c,stroke-width:1.5
-> **⚠️ Note:** The diagram is an interactive HTML/SVG file. View it directly by opening the link below.
+ %% ── Users / Channels ──
+ subgraph USERS["👤 Users & Channels"]
+ direction LR
+ TG[📱 Telegram
DM + Ops Chat]
+ WA[💬 WhatsApp
+6013-225 0691]
+ WB[🌐 Web Browser
ummah + my.falahos.my]
+ end
-👉 **[Open Full Architecture Diagram](FalahOS-Architecture.html)** (opens in browser)
+ %% ── Cloudflare Edge ──
+ subgraph CF["☁️ Cloudflare Edge"]
+ direction LR
+ DNS[DNS
Proxied Records]
+ WAF[WAF
Security Rules]
+ TUN[cloudflared
Tunnel]
+ end
+
+ %% ── cPanel Hosting ──
+ subgraph CP["🖥️ cPanel Hosting — RoketServer 64.20.37.43"]
+ UMMAH[ummah.falahos.my
WordPress + EDD + MailPoet
Members + Tutor LMS]
+ MY[my.falahos.my
WordPress + PayPal Standard
Monetisation Subdomain]
+ MYSQL[(MySQL
Shared Database)]
+ CPT[cPanel Tools
Git + Terminal + Cron + Softaculous]
+ end
+
+ %% ── Contabo VPS ──
+ subgraph CV["🖥️ Contabo VPS — 13.140.161.244"]
+ direction LR
+ GW[Hermes Gateway
Telegram · WhatsApp
Systemd Service]
+ HA[Hermes Agent
60+ Skills · MCP Tools
Sub-agents · Cron]
+ FR[FalahOS Relay
Port :8088
Systemd]
+ SHT[SSH Tunnel
→ Mac Mini :17860]
+ end
+
+ %% ── External Services ──
+ subgraph EXT["🔗 External Services"]
+ direction LR
+ GT[Gitea
git.falahos.my
CI/CD + Wiki]
+ OCP[OpenClaw Proxy
opencode.ai/zen
DeepSeek · Qwen]
+ PP[PayPal Standard
wanjauhari@me.com]
+ MCP[MCP Servers
UI/UX Tester
Browser Tools]
+ end
+
+ %% ── Agent Fleet ──
+ subgraph TS["🔗 Tailscale Mesh Network"]
+ subgraph MM["Mac Mini — 100.72.2.115 (macOS 12.7.6)"]
+ ODY[Odysseus
API Gateway :7860]
+ PI[Pi
AI Assistant :4747]
+ OH[OpenHand
Coding Agent :3000]
+ OCL[OpenClaw
Model Provider :3100]
+ CC[Claude Code
Coding Assistant CLI]
+ end
+ MBA[Hermes MBA
Fallback Agent
100.76.3.26]
+ end
+
+ %% ── Connections ──
+ TG --> GW
+ WA --> GW
+ WB --> DNS
+
+ DNS --> WAF
+ WAF --> TUN
+ TUN --> UMMAH
+ TUN --> MY
+
+ GW --> HA
+ HA --> FR
+ HA --> SHT
+
+ FR --> ODY
+ FR --> PI
+ FR --> OH
+ FR --> OCL
+ FR --> CC
+ FR --> MBA
+
+ SHT -.->|Port Forward :7860| ODY
+
+ UMMAH --> MYSQL
+ MY --> MYSQL
+ UMMAH --> CPT
+
+ MY -.->|Payment IPN| PP
+
+ UMMAH -.->|Git Deploy| GT
+ HA -.->|CI/CD| GT
+
+ OCL -.->|API Calls| OCP
+
+ %% Assign classes
+ class TG,WA,WB user
+ class DNS,WAF,TUN cf
+ class UMMAH,MY frontend
+ class GW,HA,FR,SHT backend
+ class MYSQL db
+ class ODY,PI,OH,CC agent
+ class MBA backend
+ class GT,PP,MCP external
+ class OCL,OCP model
+```
---
## System Overview
### Web Layer
-- **ummah.falahos.my** — Primary WordPress site with EDD, MailPoet, Members, Tutor LMS
-- **my.falahos.my** — Monetisation subdomain with PayPal Standard
-- **Cloudflare** — DNS (proxied), WAF security rules, cloudflared tunnel
-- **cPanel (RoketServer)** — Shared hosting at 64.20.37.43 with Imunify360
+| Component | Details |
+|-----------|---------|
+| **ummah.falahos.my** | Primary WordPress — EDD (payments), MailPoet (email), Members (access), Tutor LMS (courses) |
+| **my.falahos.my** | Monetisation subdomain — PayPal Standard checkout |
+| **Cloudflare** | DNS proxied, WAF rules, cloudflared tunnel |
+| **cPanel (RoketServer)** | Shared hosting at 64.20.37.43 — Imunify360 blocks datacenter IPs |
### AI Agent Layer
-- **Hermes Agent (Contabo VPS)** — Primary orchestrator at 13.140.161.244
- - Gateway (Telegram, WhatsApp)
- - Skills engine (60+ skills), MCP tools, sub-agents
- - Cron scheduler for automated tasks
-- **FalahOS Relay** — Telegram relay bus at :8088 (systemd)
+| Component | Host | Role |
+|-----------|------|------|
+| **Hermes Agent** | Contabo VPS 13.140.161.244 | Primary orchestrator — skills, tools, MCP, cron |
+| **Hermes Gateway** | Contabo VPS | Telegram + WhatsApp messaging (systemd) |
+| **FalahOS Relay** | Contabo VPS :8088 | Telegram relay bus to agent fleet |
### Agent Fleet (Tailscale Mesh)
-| Agent | Host | Port | Role |
-|-------|------|------|------|
-| Odysseus | Mac Mini 100.72.2.115 | :7860 | API Gateway |
-| Pi | Mac Mini 100.72.2.115 | :4747 | AI Assistant |
-| OpenHand | Mac Mini 100.72.2.115 | :3000 | Coding Agent |
-| OpenClaw | Mac Mini 100.72.2.115 | :3100 | Model Provider |
-| Claude Code | Mac Mini 100.72.2.115 | CLI | Coding Assistant |
-| Hermes (MBA) | MacBook Air 100.76.3.26 | — | Fallback Agent |
+| Agent | Host | Port | Purpose |
+|-------|------|------|---------|
+| **Odysseus** | Mac Mini 100.72.2.115 | :7860 | API Gateway, AI chat, email, documents |
+| **Pi** | Mac Mini 100.72.2.115 | :4747 | AI assistant agent |
+| **OpenHand** | Mac Mini 100.72.2.115 | :3000 | Autonomous coding agent |
+| **OpenClaw** | Mac Mini 100.72.2.115 | :3100 | Model provider proxy (DeepSeek, Qwen) |
+| **Claude Code** | Mac Mini 100.72.2.115 | CLI | Coding assistant |
+| **Hermes (MBA)** | MacBook Air 100.76.3.26 | — | Fallback agent, residential IP |
### External Integrations
-- **Gitea** (git.falahos.my) — Git repos, CI/CD Actions, Wiki
-- **OpenClaw Proxy** → DeepSeek v4, Qwen 3.6 models
-- **PayPal Standard** (wanjauhari@me.com)
-- **WhatsApp** Baileys bridge (+6013-225 0691)
+| Service | URL | Purpose |
+|---------|-----|---------|
+| **Gitea** | git.falahos.my | Git repos, CI/CD Actions, Wiki |
+| **OpenClaw Proxy** | opencode.ai/zen | Model inference (DeepSeek v4 Flash/Pro, Qwen 3.6) |
+| **PayPal Standard** | wanjauhari@me.com | Payment processing |
### Key Architecture Decisions
-- **Hybrid model**: cPanel hosts web frontend/payments; Mac Mini/Contabo handle AI compute
-- **Tailscale mesh** for inter-agent routing (no exposed ports)
+- **Hybrid model**: cPanel hosts web frontend/payments/email — Mac Mini/Contabo handle AI compute
+- **Tailscale mesh** for inter-agent routing (no exposed ports, direct connections)
- **FalahOS Ops Chat** as unified agent coordination channel
- **Imunify360** blocks datacenter IPs — cPanel Git/Terminal APIs used as bypass
-
+- **Residential IP** (MacBook Air) provides bypass for Imunify360 JS challenges
diff --git a/FalahOS-Architecture.html b/FalahOS-Architecture.html
deleted file mode 100644
index 1fda48f..0000000
--- a/FalahOS-Architecture.html
+++ /dev/null
@@ -1,409 +0,0 @@
-
-
-
-
-
- FalahOS Architecture Diagram
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- - • ummah.falahos.my — Primary WP site (EDD, MailPoet, Members, Tutor LMS)
- - • my.falahos.my — Monetisation subdomain (PayPal Standard)
- - • Cloudflare DNS + WAF (proxied records)
- - • Imunify360 (cPanel) blocks datacenter IPs
-
-
-
-
-
-
- - • Hermes Agent (Contabo) — Primary orchestrator
- - • FalahOS Ops Chat — Telegram relay bus
- - • Mac Mini Agent Fleet — Odysseus, Pi, OpenHand, OpenClaw
- - • Claude Code + Hermes (MBA) — Fallback / support
- - • Tailscale mesh network for inter-agent routing
-
-
-
-
-
-
- - • Gitea (git.falahos.my) — Git repos, CI/CD, Wiki
- - • OpenClaw Proxy → DeepSeek v4, Qwen 3.6 models
- - • PayPal Standard (wanjauhari@me.com)
- - • WhatsApp Baileys bridge (+6013-225 0691)
-
-
-
-
-
-