System Architecture Overview

This document presents the deep system architecture of NovaServe, its execution primitives, state isolation mechanisms, and hyper-scaler integration model.

Architectural Principles

1. Application-Defined Infrastructure — declarations reside inside application code for compiler-driven optimization
2. Deterministic State Compilation — identical ASTs produce identical Nova IR and SHA-256 hashes
3. Zero-Trust Privilege Boundary — IAM policies generated algorithmically from code analysis
4. Cloud Abstraction — Nova IR decouples high-level primitives from provider APIs

System Layers

Client Layer

• novaserve CLI binary — user-facing terminal interface
• nova.config.ts — project-level compiler and deployment configuration
• App.ts — application source with resource declarations

Compiler Core

• TypeScript AST Parser — extracts resource declarations from source code
• Dependency Graph Engine — builds DAG of resource relationships
• IAM Synthesizer — infers exact permissions from method invocations
• Nova IR Generator — produces provider-neutral intermediate representation

State & Lock Layer

• .nova/state.json — SHA-256 deployment state lock
• Checksum Engine — deterministic hashing for drift detection

Target Emitter Layer

• AWS Driver — Cloud Control API, CloudFormation/CDK plans
• Cloudflare Driver — Workers API, V8 isolate bundles
• Docker Driver — OCI multi-stage build context

Data Flow

Developer writes App.ts
       │
       ▼
  NovaServe CLI (nova deploy)
       │
       ▼
  TypeScript AST Parser (0.04s)
       │
       ▼
  Dependency Graph + IAM Synthesis
       │
       ▼
  Nova IR Generation + SHA-256 Hash
       │
       ├── AWS Provider Driver ──→ Lambda + S3 + SQS + API Gateway
       │
       ├── Cloudflare Driver ──→ Workers + KV + R2
       │
       └── Docker Driver ──→ OCI Multi-Stage Image
       │
       ▼
  State Lock Update (.nova/state.json)

Related

• Compiler Pipeline
• Nova IR Specification
• Providers
• State & Drift