mcloh/Enterprise-MCP-Service-Bus
1
0
Fork 0
mirror of https://github.com/mcloh/Enterprise-MCP-Service-Bus.git synced 2026-11-05 22:14:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

M0 e M1 revisados e fixes implementados

Browse Source
This commit is contained in:
Marcos Lohmann
2026-09-14 08:18:53 -03:00
parent 439f60598e
commit f3efcc3414
72 changed files with 4831 additions and 128 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
RI/config/backends/finance-domain.yaml Normal file
View File

@@ -0,0 +1,5 @@
backend: finance-domain
url: ${FINANCE_DOMAIN_URL:-http://127.0.0.1:8101/mcp}
audience: finance-domain-service
credential_mode: service_account
service_account_token_env_var: FINANCE_DOMAIN_SERVICE_TOKEN

8
RI/config/backends/sales-domain.yaml Normal file
View File

@@ -0,0 +1,8 @@
backend: sales-domain
# Fabric router endpoint (EP-06-T01). ${VAR:-default} so `make dev`/tests work
# against 127.0.0.1 without any .env, while docker-compose.yml's SALES_DOMAIN_URL
# points at the compose-internal service DNS name instead.
url: ${SALES_DOMAIN_URL:-http://127.0.0.1:8100/mcp}
audience: sales-domain-service
credential_mode: service_account
service_account_token_env_var: SALES_DOMAIN_SERVICE_TOKEN

12
RI/config/capabilities/finance/invoice-get.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: finance.invoice.get
version: 1.0.0
domain: finance
owner: finance-platform
risk_tier: R1
side_effects: false
idempotent: true
data_classification: [confidential]
entitlements: [Finance.Read, Finance.Payments]
backend:
type: mcp
service: finance-domain

12
RI/config/capabilities/finance/payment-create.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: finance.payment.create
version: 1.0.0
domain: finance
owner: finance-platform
risk_tier: R2
side_effects: true
idempotent: false
data_classification: [confidential, restricted]
entitlements: [Finance.Payments]
backend:
type: mcp
service: finance-domain

16
RI/config/capabilities/finance/payment-execute.yaml Normal file
View File

@@ -0,0 +1,16 @@
# README.md §17 (R3, high impact) + §26 (approval-eligible above Finance.Payments'
# restrictions.approval_threshold, enforced by config/policies/transaction.rego)
name: finance.payment.execute
version: 1.0.0
domain: finance
owner: finance-platform
risk_tier: R3
side_effects: true
idempotent: false
data_classification: [confidential, restricted]
entitlements: [Finance.Payments]
backend:
type: mcp
service: finance-domain
approval:
required: true

12
RI/config/capabilities/sales/customer-get.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: sales.customer.get
version: 1.0.0
domain: sales
owner: sales-platform
risk_tier: R1
side_effects: false
idempotent: true
data_classification: [internal]
entitlements: [Sales.Read]
backend:
type: mcp
service: sales-domain

12
RI/config/capabilities/sales/customer-search.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: sales.customer.search
version: 1.0.0
domain: sales
owner: sales-platform
risk_tier: R1
side_effects: false
idempotent: true
data_classification: [internal]
entitlements: [Sales.Read]
backend:
type: mcp
service: sales-domain

12
RI/config/capabilities/sales/inventory-check.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: sales.inventory.check
version: 1.0.0
domain: sales
owner: sales-platform
risk_tier: R1
side_effects: false
idempotent: true
data_classification: [internal]
entitlements: [Sales.Read]
backend:
type: mcp
service: sales-domain

12
RI/config/capabilities/sales/order-get.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: sales.order.get
version: 1.0.0
domain: sales
owner: sales-platform
risk_tier: R1
side_effects: false
idempotent: true
data_classification: [internal]
entitlements: [Sales.Read]
backend:
type: mcp
service: sales-domain

12
RI/config/capabilities/sales/quote-create.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: sales.quote.create
version: 1.0.0
domain: sales
owner: sales-platform
risk_tier: R2
side_effects: true
idempotent: false
data_classification: [confidential]
entitlements: [Sales.Write]
backend:
type: mcp
service: sales-domain

12
RI/config/capabilities/sales/quote-update.yaml Normal file
View File

@@ -0,0 +1,12 @@
name: sales.quote.update
version: 1.0.0
domain: sales
owner: sales-platform
risk_tier: R2
side_effects: true
idempotent: false
data_classification: [confidential]
entitlements: [Sales.Write]
backend:
type: mcp
service: sales-domain

1
RI/config/clients/profiles/sales-write.yaml
View File

@@ -13,6 +13,7 @@ allowed_tools:
restrictions:
max_transaction_value: 500000
allowed_regions: ["BR-SP", "BR-RJ"]
approval_threshold: 100000
credential_policy:
workload_identity: true
short_lived: true