naftiko: 1.0.0-alpha2
info:
  title: Bnp Temenos Transact Core Banking Governance Capability
  description: A governance capability over Temenos Transact core banking — every account/transaction call passes through Naftiko governance and emits an audit event.
  tags: [Naftiko, BNP, Temenos, Core Banking]
  created: '2026-05-01'
  modified: '2026-05-04'
binds:
- namespace: temenos-env
  keys: {TEMENOS_HOST: TEMENOS_HOST, TEMENOS_TOKEN: TEMENOS_TOKEN}
capability:
  consumes:
  - namespace: temenos
    type: http
    baseUri: https://{{TEMENOS_HOST}}
    authentication: {type: bearer, token: '{{TEMENOS_TOKEN}}'}
    resources:
    - name: account
      path: /irf-provider-container/api/v1.0.0/holdings/accounts/{{account_id}}
      operations:
      - {name: get-account, method: GET, inputParameters: [{name: account_id, in: path}]}
    - name: account-balance
      path: /irf-provider-container/api/v1.0.0/holdings/accounts/{{account_id}}/balances
      operations:
      - {name: get-account-balance, method: GET, inputParameters: [{name: account_id, in: path}]}
    - name: transactions
      path: /irf-provider-container/api/v1.0.0/holdings/accounts/{{account_id}}/transactions
      operations:
      - {name: list-transactions, method: GET, inputParameters: [{name: account_id, in: path}]}
  exposes:
  - type: rest
    address: 0.0.0.0
    port: 8080
    namespace: bnp-temenos-transact-core-banking-governance-capability-rest
    description: Governance-gated Temenos surface.
    resources:
    - name: account
      path: /accounts/{{account_id}}
      operations:
      - {method: GET, name: get-governed-account, inputParameters: [{name: account_id, in: path, type: string}], call: temenos.get-account}
  - type: mcp
    address: 0.0.0.0
    port: 3010
    namespace: bnp-temenos-transact-core-banking-governance-capability-mcp
    description: MCP for governed Temenos ops.
    tools:
    - name: get-account
      hints: {readOnly: true}
      inputParameters: [{name: account_id, type: string, required: true}]
      call: temenos.get-account
    - name: list-transactions
      hints: {readOnly: true}
      inputParameters: [{name: account_id, type: string, required: true}]
      call: temenos.list-transactions
  - type: skill
    address: 0.0.0.0
    port: 3011
    namespace: bnp-temenos-transact-core-banking-governance-capability-skills
    description: Skill for governed Temenos.
    skills:
    - name: bnp-temenos-transact-core-banking-governance-capability
      description: Governed Temenos Transact access.
      location: file:///opt/naftiko/skills/bnp-temenos-transact-core-banking-governance-capability
      allowed-tools: get-account,list-transactions
      tools:
      - {name: get-account, from: {sourceNamespace: bnp-temenos-transact-core-banking-governance-capability-mcp, action: get-account}}
      - {name: list-transactions, from: {sourceNamespace: bnp-temenos-transact-core-banking-governance-capability-mcp, action: list-transactions}}