sequenceDiagram
  autonumber
  actor User
  participant UI as WebServicesDriverEditPage
  participant Driver as WebServicesDriver
  participant ZAP as ZapProxyService
  participant ZC as ZAP Server

  User->>UI: Enable "Security Testing" + select Scan/Vulnerability/Fail
  UI->>Driver: Bind UseSecurityTesting/ZapScanType/ZapVulnerability/FailAction
  alt UseSecurityTesting = true
    Driver->>ZAP: IsZapRunning()
    ZAP->>ZC: core.version
    ZC-->>ZAP: version
    ZAP-->>Driver: true/false
    alt Active scan
      Driver->>ZAP: ActiveScanAPI(targetHost)
      ZAP->>ZC: core.accessUrl + ascan.scan/status (poll)
      ZC-->>ZAP: scan complete
      Driver->>ZAP: GenerateZapReport(site, dir, file)
      ZAP->>ZC: reports.generate
      ZC-->>ZAP: OK
      Driver-->>UI: Update action status (fail if configured)
    else Passive scan
      Driver->>ZAP: AddUrlToScanTree(site)
      ZAP->>ZC: core.accessUrl + core.urls
      ZAP->>ZC: pscan.recordsToScan (poll)
      ZC-->>ZAP: 0
      Driver->>ZAP: AlertsSummary(target)
      ZAP->>ZC: alert.alertsSummary
      ZC-->>ZAP: counts
      Driver-->>UI: Update status based on threshold
    end
  else UseSecurityTesting = false
    Driver-->>UI: Proceed without ZAP
  end

sequenceDiagram
  autonumber
  actor User
  participant Act as ActSecurityTesting
  participant Page as ActSecurityTestingEditPage
  participant ZAP as ZapProxyService
  participant Repo as SolutionRepository
  participant ZC as ZAP Server

  User->>Page: Configure ScanType + Allowed Alerts
  Page->>Act: Bind ScanType, AlertList/Items
  Act->>Repo: Load ZAPConfiguration
  Act->>ZAP: ExecuteActiveZapScan/ExecutePassiveZapScan(url)
  alt Active
    ZAP->>ZC: ascan.scan/status (poll)
  else Passive
    ZAP->>ZC: pscan.recordsToScan (poll)
  end
  ZAP->>ZC: reports.generate + alert.alertsSummary
  ZC-->>ZAP: report + summary
  ZAP-->>Act: Results
  Act-->>User: Set RunStatus, attach report, return params

sequenceDiagram
  autonumber
  participant Runner as ActionExecutor
  participant Driver as WindowsDriver
  participant Ops as UIElementOperationsHelper
  participant OCR as GingerOcrOperations

  Runner->>Driver: Execute(ActUIElement: GetValueByOCR)
  Driver->>Ops: GetValueByOCR(automationElement)
  Ops->>Ops: Capture rect bitmap -> PNG bytes
  Ops->>OCR: ReadTextFromByteArray(bytes)
  OCR-->>Ops: extracted text
  Ops-->>Driver: ActionResult(value)
  Driver-->>Runner: Output param populated