@@ -62,7 +62,7 @@ from src.poc4.scenarios import ScenarioConfigError, load_demo_scenarios
|
||||
|
||||
LOG = logging.getLogger(__name__)
|
||||
MCP_PROTOCOL_VERSION = "2025-11-25"
|
||||
PREFERRED_TOOL = "ords.query.kb_select_ai_vpd"
|
||||
PREFERRED_TOOL = "oracle.select_ai.smilegate_game_text2sql"
|
||||
DEFAULT_QUESTION = ""
|
||||
MAX_RESPONSE_BYTES = 1_000_000
|
||||
MAX_CONVERSATION_MESSAGES = 8
|
||||
@@ -77,17 +77,21 @@ DEFAULT_QUERY_MODEL_PROFILE = "gpt54_mini_oci"
|
||||
ENV_FILE = ROOT / ".env"
|
||||
MCP_SERVERS_FILE = ROOT / "config" / "mcp_servers.json"
|
||||
VPD_TOKEN_PRESETS_FILE = ROOT / "config" / "vpd_token_presets.json"
|
||||
DEMO_SCENARIOS_FILE = ROOT / "config" / "hmm_demo_scenarios.json"
|
||||
DEMO_SCENARIOS_FILE = ROOT / "config" / "smilegate_demo_scenarios.json"
|
||||
APP_PROFILE_FILE = ROOT / "config" / "app_profile.json"
|
||||
CHAT_DB_FILE = ROOT / "data" / "poc4_mcp_chat.sqlite3"
|
||||
DEFAULT_VPD_USER_ID = "FC00789"
|
||||
VPD_OPERATIONS_URL = "https://kb.cloud-handson.com/"
|
||||
DEFAULT_VPD_USER_ID = "sg-teamlead"
|
||||
VPD_OPERATIONS_URL = "https://smilegate-backoffice.cloud-handson.com/"
|
||||
PORTAL_AUTHENTICATED_KEY = "poc4_portal_authenticated"
|
||||
PORTAL_AUTH_USER_KEY = "poc4_portal_auth_user"
|
||||
PORTAL_LOGIN_FAILURE_KEY = "poc4_portal_login_failed"
|
||||
PORTAL_REMEMBER_TOKEN_PARAM = "poc4_remember"
|
||||
PORTAL_REMEMBER_MAX_AGE_SECONDS = 7 * 24 * 60 * 60
|
||||
AUDIT_SCHEMA = "POC_2"
|
||||
AUDIT_SCHEMA = "SGMP_POC"
|
||||
REFERENCE_EVIDENCE_ENABLED = (
|
||||
os.environ.get("POC4_REFERENCE_EVIDENCE_ENABLED", "").strip().lower()
|
||||
in {"1", "true", "yes"}
|
||||
)
|
||||
AUDIT_DB_ENV_FILE = Path(
|
||||
os.environ.get("POC4_AUDIT_DB_ENV_FILE", "/home/opc/kbmcp/.env")
|
||||
).expanduser()
|
||||
@@ -2374,6 +2378,8 @@ def collect_security_evidence(
|
||||
) -> Mapping[str, Any]:
|
||||
"""Collect predefined, token-scoped security evidence without exposing secrets."""
|
||||
|
||||
if not REFERENCE_EVIDENCE_ENABLED:
|
||||
return {}
|
||||
kind = _security_evidence_kind(question)
|
||||
if not kind or token_preset is None:
|
||||
return {}
|
||||
@@ -2938,6 +2944,8 @@ def collect_business_evidence(
|
||||
) -> Mapping[str, Any]:
|
||||
"""Collect token-validated, explicitly scoped business and catalog evidence."""
|
||||
|
||||
if not REFERENCE_EVIDENCE_ENABLED:
|
||||
return {}
|
||||
kind = _business_evidence_kind(question)
|
||||
if not kind or token_preset is None:
|
||||
return {}
|
||||
@@ -7069,8 +7077,8 @@ def main() -> None:
|
||||
else:
|
||||
selected_token_preset = None
|
||||
if configured_mcp_bearer:
|
||||
# The HMM MCP gateway uses its own server-side credential. VPD user
|
||||
# tokens remain UI context only and must never be forwarded to it.
|
||||
# The Smilegate MCP gateway uses a server-side credential. UI-only
|
||||
# context must never be forwarded as a second bearer token.
|
||||
st.caption("MCP 인증: 서버 관리 토큰 적용")
|
||||
manual_bearer_token = ""
|
||||
elif selected_token_preset is not None:
|
||||
@@ -7256,9 +7264,7 @@ def main() -> None:
|
||||
'<div id="kb-main-tabs-anchor" style="scroll-margin-top: 0.75rem;"></div>',
|
||||
unsafe_allow_html=True,
|
||||
)
|
||||
architecture_tab, scenario_tab, audit_tab, operations_tab = st.tabs(
|
||||
["아키텍처", "시나리오", "감사로그", "보안관리"]
|
||||
)
|
||||
architecture_tab, scenario_tab = st.tabs(["아키텍처", "시나리오"])
|
||||
with architecture_tab:
|
||||
_render_architecture_tab()
|
||||
|
||||
@@ -7359,12 +7365,6 @@ def main() -> None:
|
||||
height=0,
|
||||
)
|
||||
|
||||
with audit_tab:
|
||||
_render_fga_audit_tab()
|
||||
|
||||
with operations_tab:
|
||||
_render_vpd_operations_tab()
|
||||
|
||||
if not submitted:
|
||||
return
|
||||
|
||||
|
||||
Reference in New Issue
Block a user