sequenceDiagram
    actor User
    participant CLI as JavaClientCLI
    participant Ecosystem as Ecosystem
    participant PythonProviderFactory as PythonProviderFactory
    participant PythonUvProvider as PythonUvProvider
    participant Operations as Operations
    participant SbomFactory as SbomFactory
    participant Sbom as Sbom

    User->>CLI: sbom /path/to/uv-project/pyproject.toml
    CLI->>Ecosystem: resolveProvider(manifestPath)
    Ecosystem->>PythonProviderFactory: create(manifestPath)
    PythonProviderFactory->>PythonProviderFactory: check manifestDir for uv.lock
    alt uv.lock found
      PythonProviderFactory-->>Ecosystem: new PythonUvProvider(manifestPath)
    else no uv.lock
      PythonProviderFactory->>PythonProviderFactory: findLockFileDirInParents(startDir)
      alt parent with uv.lock found
        PythonProviderFactory-->>Ecosystem: new PythonUvProvider(manifestPath)
      else no lock file
        PythonProviderFactory-->>Ecosystem: new PythonPyprojectProvider(manifestPath)
      end
    end

    CLI->>PythonUvProvider: provideStack()
    PythonUvProvider->>PythonUvProvider: validateLockFile(manifestDir)
    PythonUvProvider->>PythonUvProvider: rejectPoetryDependencies()
    PythonUvProvider->>PythonUvProvider: collectIgnoredDeps()

    PythonUvProvider->>Operations: getExecutable("uv", "--version")
    Operations-->>PythonUvProvider: uvExecutable path

    PythonUvProvider->>PythonUvProvider: getUvExportOutput(manifestDir)
    PythonUvProvider->>Operations: runProcessGetFullOutput(cwd, cmd, env)
    Operations-->>PythonUvProvider: ProcessExecOutput(uv export text)

    PythonUvProvider->>PythonUvProvider: parseUvExport(exportOutput)
    PythonUvProvider->>PythonUvProvider: getRootComponentName()
    PythonUvProvider->>PythonUvProvider: getRootComponentVersion()
    PythonUvProvider->>PythonUvProvider: readLicenseFromManifest()

    PythonUvProvider->>SbomFactory: newInstance(BelongingCondition.PURL, "sensitive")
    SbomFactory-->>PythonUvProvider: Sbom

    PythonUvProvider->>Sbom: addRoot(purl, license)
    loop for each direct dependency
      PythonUvProvider->>PythonUvProvider: addDependencyTree(rootPurl, pkg, graph, sbom, visited)
      PythonUvProvider->>Sbom: addDependency(source, target, null)
    end

    PythonUvProvider->>PythonUvProvider: handleIgnoredDependencies(manifestContent, sbom)
    PythonUvProvider->>Sbom: getAsJsonString()
    PythonUvProvider-->>CLI: Content(sbomJson, CYCLONEDX_MEDIA_TYPE)
    CLI-->>User: SBOM JSON output

classDiagram
    direction LR

    class PythonProvider {
      <<abstract>>
      Path manifestPath
      +PythonProvider(Path manifestPath)
      +Content provideStack()
      +Content provideComponent()
      +void validateLockFile(Path lockFileDir)
      +PackageURL toPurl(String name, String version)
      +void handleIgnoredDependencies(String manifestContent, Sbom sbom)
      +String getRootComponentName()
      +String getRootComponentVersion()
      +String readLicenseFromManifest()
      +Set~PackageURL~ getIgnoredDependencies(String manifestContent)
    }

    class PythonPyprojectProvider {
      -TomlParseResult cachedToml
      +PythonPyprojectProvider(Path manifestPath)
      +Content provideStack()
      +Content provideComponent()
      +String readLicenseFromManifest()
      +Set~PackageURL~ getIgnoredDependencies(String manifestContent)
      -void rejectPoetryDependencies()
      -void collectIgnoredDeps()
      -TomlParseResult getToml()
    }

    class PythonUvProvider {
      <<final>>
      +static String LOCK_FILE
      +static String PROP_TRUSTIFY_DA_UV_EXPORT
      -String uvExecutable
      -Set~String~ collectedIgnoredDeps
      -TomlParseResult cachedToml
      +PythonUvProvider(Path manifest)
      +void validateLockFile(Path lockFileDir)
      +Content provideStack()
      +Content provideComponent()
      +String readLicenseFromManifest()
      +Set~PackageURL~ getIgnoredDependencies(String manifestContent)
      -void addDependencyTree(PackageURL source, UvPackage pkg, Map~String, UvPackage~ graph, Sbom sbom, Set~String~ visited)
      -UvDependencyData parseUvExport(String exportOutput)
      -static void recordViaParent(String parentName, String childKey, String projectName, List~String~ directDeps, List~String[]~ parentChildPairs)
      -String getUvExportOutput(Path manifestDir)
      -TomlParseResult getToml()
      -void rejectPoetryDependencies()
      -void collectIgnoredDeps()
    }

    class PythonProviderFactory {
      <<final>>
      -static Map~String, Function~Path, PythonProvider~~ PYTHON_PROVIDERS
      +static PythonProvider create(Path manifestPath)
      +static Path findLockFileDirInParents(Path startDir)
    }

    class PyprojectTomlUtils {
      <<final>>
      +static TomlParseResult parseToml(Path manifest)
      +static Set~String~ collectIgnoredDeps(Path manifest, TomlParseResult toml)
      +static String getProjectName(TomlParseResult toml)
      +static String getProjectVersion(TomlParseResult toml)
      +static String getLicense(TomlParseResult toml)
      +static boolean hasPoetryDependencies(TomlParseResult toml)
      +static String canonicalize(String name)
      +static boolean isUvWorkspaceRoot(Path dir)
    }

    class PythonControllerBase {
      +static String getDependencyName(String dep)
      +String getDependencyNameShow(String pipShowOutput)
    }

    class Ecosystem {
      -static Provider resolveProvider(Path manifestPath)
    }

    class Operations {
      +static String getExecutable(String binaryName, String versionArg)
      +static Operations.ProcessExecOutput runProcessGetFullOutput(Path cwd, String[] cmd, Map~String,String~ env)
      +static java.util.Optional~String~ getGitRootDir(String startDir)
    }

    class Environment {
      +static String get(String key)
    }

    class SbomFactory {
      +static Sbom newInstance()
      +static Sbom newInstance(Sbom.BelongingCondition condition, String sensitivity)
    }

    class Sbom {
      +static enum BelongingCondition
      +void addRoot(PackageURL purl, String license)
      +PackageURL getRoot()
      +void addDependency(PackageURL source, PackageURL target, String scope)
      +StringBuilder getAsJsonString()
    }

    class LicenseUtils {
      +static String readLicenseFile(Path manifestPath)
    }

    class Provider {
      <<interface>>
      +Content provideStack()
      +Content provideComponent()
      +void validateLockFile(Path lockFileDir)
    }

    class Content {
      +Content(byte[] data, String mediaType)
    }

    class UvPackage {
      <<record>>
      +String name
      +String version
      +List~String~ children
    }

    class UvDependencyData {
      <<record>>
      +List~String~ directDeps
      +Map~String, UvPackage~ graph
    }

    class IgnorePatternDetector {
      +static boolean containsIgnorePattern(String line)
    }

    PythonProvider <|-- PythonPyprojectProvider
    PythonProvider <|-- PythonUvProvider

    Provider <|.. PythonProvider

    Ecosystem --> PythonProviderFactory : uses
    PythonProviderFactory --> PythonUvProvider : returns
    PythonProviderFactory --> PythonPyprojectProvider : returns

    PythonUvProvider --> PyprojectTomlUtils : uses
    PythonUvProvider --> Operations : uses
    PythonUvProvider --> Environment : uses
    PythonUvProvider --> SbomFactory : uses
    PythonUvProvider --> Sbom : uses
    PythonUvProvider --> LicenseUtils : uses
    PythonUvProvider --> PythonControllerBase : uses

    PythonPyprojectProvider --> PyprojectTomlUtils : uses

    PythonProviderFactory --> Operations : uses
    PythonProviderFactory --> Environment : uses
    PythonProviderFactory --> PyprojectTomlUtils : uses

    PyprojectTomlUtils --> IgnorePatternDetector : uses

    SbomFactory --> Sbom : creates

    Content --> Api : mediaType

    class Api {
      +static String CYCLONEDX_MEDIA_TYPE
    }