User prompt (VS Code Copilot)
        │
        ▼
  ontology-mcp  ──► Fuseki KG (Fuseki SPARQL)
        │              returns: intent_id, entities,
        │              validation_sequence, decision_rules
        ▼
  data-mcp  ──► SQL Server  (UM_Users, UM_UserPartnermapping,
        │                    UM_UserMobileNumberVerified)
        ├──────► MongoDB     (users collection — 9 projected fields)
        ├──────► SHACL Validator  (7 shapes evaluated in order)
        └──────► New Relic   (only when all shapes pass — 2-step NRQL)

java -version

infra/fuseki/fuseki-server.jar

python --version

cd c:\Ontology
python -m pip install -r requirements.txt

cd c:\Ontology
java -jar infra\fuseki\fuseki-server.jar --config infra\fuseki\config\login-kg.ttl

$env:PYTHONIOENCODING = "utf-8"
python scripts/kg/load_kg.py  --schema login --version 1.0.0
python scripts/kg/promote.py  --schema login --version 1.0.0

SQL_SERVER_HOST=your-server
SQL_SERVER_DATABASE=your-database
SQL_SERVER_TRUSTED_CONNECTION=yes
SQL_SERVER_ENCRYPT=yes
SQL_SERVER_TRUST_CERT=yes

MONGODB_URI=mongodb://your-host:27017
MONGODB_DATABASE=your-database

NEW_RELIC_API_KEY=NRAK-xxxxxxxxxxxxxxxxxxxx
NEW_RELIC_ACCOUNT_ID=your-account-id
NEW_RELIC_REGION=US

APP_ENV=prod

{
  "servers": {
    "ontology-mcp": {
      "type": "stdio",
      "command": "python",
      "args": ["-m", "mcp_server.server"],
      "cwd": "c:\\Ontology",
      "env": {
        "PYTHONPATH": "c:\\Ontology\\src",
        "PYTHONIOENCODING": "utf-8"
      }
    },
    "data-mcp": {
      "type": "stdio",
      "command": "python",
      "args": ["-m", "mcp_server.diagnostic_server"],
      "cwd": "c:\\Ontology",
      "env": {
        "PYTHONPATH": "c:\\Ontology\\src",
        "PYTHONIOENCODING": "utf-8"
      }
    }
  }
}

User: "testgdpr1235@gep.com can't reset password"
        │
        ▼
① ontology-mcp / resolve_intent(prompt)
     Fuseki SPARQL → KG returns intent_id, validation_sequence, decision_rules
        │
        ▼  (agent extracts username; asks user if missing)
        │
② data-mcp / query_sql_user(username)
     SELECT from UM_Users → islocked, isactive, isdeleted, usertype, ...
        │
③ data-mcp / query_sql_mobile_verification(username)
     SELECT from UM_UserMobileNumberVerified → ismobilenumberverified
        │
④ data-mcp / query_sql_partner_mappings(username)
     SELECT from UM_UserPartnermapping → bpc, partnercode, isactive, contactcode
        │
⑤ data-mcp / query_mongo_user(username)
     db.users.find_one({...}, { 9 diagnostic fields }) → MongoDB document
        │
⑥ data-mcp / validate_login_shapes(username, validation_sequence)
     7 SHACL shapes evaluated in order → PASS/FAIL per shape
        │
   ┌────┴──────────────────┐
violations              all pass
   │                       │
report dr_003..dr_008   ⑦a data-mcp / query_newrelic_login_mfa(username)
(from KG rules)            OR
                        ⑦b data-mcp / query_newrelic_reset_password(username, email)
                            → Transaction → Log per traceId (max 7 days)

Step 1: Transaction table (max 7 days ago)
  /Account/Login          → LoginUserName, traceId, RequiresTwoFactor, TwoFactorDetails
  /Account/RecoverPassword → traceId, errorMessage, RecoveryUserName, RecoveryEmail
  /Account/PreResetPassword → traceId, errorMessage, PreResetUserName
  /Account/ResetPassword  → LoginUserName, traceId, errorMessage

Step 2: Log table (per traceId from Step 1)
  SELECT * FROM Log WHERE trace.id = '{traceId}' SINCE {transaction_timestamp}

$env:PYTHONIOENCODING = "utf-8"
python scripts/generate/generate.py --schema login --version 1.0.0
python scripts/kg/load_kg.py       --schema login --version 1.0.0
python scripts/kg/promote.py       --schema login --version 1.0.0

c:\Ontology\
├── src/
│   └── mcp_server/                        # PYTHONPATH=c:\Ontology\src
│       ├── server.py                      # ontology-mcp entrypoint (KG tools)
│       ├── diagnostic_server.py           # data-mcp entrypoint (DB/NR tools)
│       ├── connectors/
│       │   ├── sql_connector.py           # pyodbc — UM_Users, UM_UserPartnermapping, ...
│       │   ├── mongo_connector.py         # pymongo — users collection (projected)
│       │   └── newrelic_connector.py      # NerdGraph GraphQL — 2-step NRQL
│       ├── diagnostics/
│       │   ├── data_fetcher.py            # orchestrates SQL + MongoDB fetch
│       │   ├── shacl_validator.py         # programmatic 7-shape evaluation
│       │   └── rule_engine.py             # maps violations → rules, dispatches NR
│       ├── tools/
│       │   ├── resolve_intent.py          # KG tool handler
│       │   ├── get_descriptor.py          # KG tool handler
│       │   ├── list_intents.py            # KG tool handler
│       │   ├── fetch_user_data.py         # DB tool handlers (4 SQL/Mongo queries)
│       │   ├── validate_shapes.py         # shape validation handler
│       │   ├── query_newrelic.py          # New Relic tool handlers
│       │   └── diagnose_login.py          # combined flow (legacy)
│       ├── kg/sparql_client.py
│       └── registry/schema_registry.py
│
├── ontology/
│   ├── schemas/
│   │   ├── registry.yaml
│   │   └── login/v1.0.0/
│   │       ├── login.yaml                 # root: imports + intents + rules + shapes
│   │       ├── shared/types.yaml
│   │       ├── shared/enums.yaml          # AuthenticationTypeEnum, UserTypeEnum
│   │       ├── shared/subsets.yaml
│   │       └── entities/
│   │           ├── abstract_user.yaml
│   │           ├── user.yaml              # SQL UM_Users
│   │           ├── partner_mapping.yaml   # SQL UM_UserPartnermapping
│   │           ├── mobile_verification.yaml # SQL UM_UserMobileNumberVerified
│   │           └── user_document.yaml     # MongoDB users (+ IsdCode, MongoPartnerMapping)
│   └── sparql/
│       ├── resolve_intent.sparql
│       ├── get_entity_descriptor.sparql
│       ├── list_intents.sparql
│       └── get_decision_rules.sparql
│
├── artifacts/login/v1.0.0/
│   ├── owl/login.owl.ttl
│   ├── shacl/login.shacl.ttl
│   ├── skos/login.skos.ttl
│   ├── rules/login.rules.ttl
│   ├── descriptors/login.descriptors.json
│   └── jsonld/login.context.jsonld + login.agent_template.json
│
├── scripts/
│   ├── generate/generate.py + gen_*.py + _yaml_loader.py
│   └── kg/load_kg.py + promote.py
│
├── infra/fuseki/
│   ├── fuseki-server.jar                  # not committed — download separately
│   ├── config/login-kg.ttl
│   └── data/                              # TDB2 storage — gitignored
│
├── .vscode/mcp.json                       # MCP server registration (2 servers)
├── config/settings.yaml
├── .env / .env.example
├── requirements.txt
└── README.md

# 1. Start Fuseki
java -jar infra\fuseki\fuseki-server.jar --config infra\fuseki\config\login-kg.ttl

# 2. Load KG (only after schema or artifact changes)
$env:PYTHONIOENCODING = "utf-8"
python scripts/kg/load_kg.py --schema login --version 1.0.0
python scripts/kg/promote.py --schema login --version 1.0.0

# 3. Open VS Code — both MCP servers start automatically