@bluefly/openstandardagents 0.1.9 → 0.2.5-RC

package/examples/typescript/mcpb-agent-example.ts

@@ -0,0 +1,358 @@
+/**
+ * OSSA Agent with MCPB Integration - TypeScript Example
+ *
+ * This example demonstrates how to create OSSA agents with various bridge configurations
+ * including MCP (Model Context Protocol) Bridge for Claude Desktop integration.
+ */
+
+import type {
+  Agent,
+  CreateAgentRequest,
+  BridgeConfig,
+  MCPBridgeConfig,
+  MCPTool,
+  MCPResource,
+  MCPPrompt,
+} from '../../src/server/types/agent';
+
+// Example 1: Create an MCP-enabled agent for Claude Desktop
+export const createMCPAgent = (): CreateAgentRequest => {
+  return {
+    type: 'worker',
+    name: 'Code Analysis Agent',
+    description: 'Analyzes source code and provides feedback',
+    version: '1.0.0',
+    capabilities: ['code-analysis', 'static-analysis', 'security-scanning'],
+    configuration: {
+      max_file_size_mb: 10,
+      supported_languages: ['typescript', 'javascript', 'python', 'go'],
+    },
+    metadata: {
+      author: 'OSSA Team',
+      tags: ['code', 'analysis', 'mcp'],
+      documentation_url: 'https://docs.example.com/code-analysis-agent',
+    },
+    bridge: {
+      mcp: {
+        enabled: true,
+        server_type: 'stdio', // For Claude Desktop
+        tools: [
+          {
+            name: 'analyze_code',
+            description:
+              'Analyze source code for issues, bugs, and security vulnerabilities',
+            input_schema: {
+              type: 'object',
+              properties: {
+                code: {
+                  type: 'string',
+                  description: 'The source code to analyze',
+                },
+                language: {
+                  type: 'string',
+                  enum: ['typescript', 'javascript', 'python', 'go'],
+                  description: 'Programming language',
+                },
+                rules: {
+                  type: 'array',
+                  items: { type: 'string' },
+                  description: 'Specific rules to check',
+                },
+              },
+              required: ['code', 'language'],
+            },
+            output_schema: {
+              type: 'object',
+              properties: {
+                issues: {
+                  type: 'array',
+                  items: {
+                    type: 'object',
+                    properties: {
+                      severity: {
+                        type: 'string',
+                        enum: ['error', 'warning', 'info'],
+                      },
+                      line: { type: 'number' },
+                      message: { type: 'string' },
+                      rule: { type: 'string' },
+                    },
+                  },
+                },
+                summary: {
+                  type: 'object',
+                  properties: {
+                    total_issues: { type: 'number' },
+                    errors: { type: 'number' },
+                    warnings: { type: 'number' },
+                  },
+                },
+              },
+            },
+            capability: 'code-analysis',
+          },
+          {
+            name: 'suggest_fixes',
+            description: 'Suggest fixes for identified code issues',
+            input_schema: {
+              type: 'object',
+              properties: {
+                issue_id: { type: 'string' },
+                context: { type: 'string' },
+              },
+              required: ['issue_id'],
+            },
+            capability: 'code-analysis',
+          },
+        ],
+        resources: [
+          {
+            uri: 'ossa://code-analysis/results',
+            name: 'Analysis Results',
+            description: 'Access to previous analysis results',
+            mimeType: 'application/json',
+            readonly: true,
+          },
+          {
+            uri: 'ossa://code-analysis/rules',
+            name: 'Analysis Rules',
+            description: 'Code analysis rules and configurations',
+            mimeType: 'application/json',
+            readonly: false,
+          },
+        ],
+        prompts: [
+          {
+            name: 'review_pr',
+            description: 'Review a pull request',
+            template: `Review the following {{language}} code changes:
+
+{{diff}}
+
+Focus on:
+- Code quality
+- Potential bugs
+- Security issues
+- Best practices
+
+Provide specific, actionable feedback.`,
+            arguments: [
+              { name: 'language', type: 'string', required: true },
+              { name: 'diff', type: 'string', required: true },
+            ],
+          },
+          {
+            name: 'explain_issue',
+            description: 'Explain a code issue in detail',
+            template:
+              'Explain the following code issue:\n\n{{issue}}\n\nInclude examples of how to fix it.',
+            arguments: [{ name: 'issue', type: 'string', required: true }],
+          },
+        ],
+        config: {
+          max_message_size: 1048576, // 1MB
+          timeout_ms: 30000, // 30 seconds
+          retry_count: 3,
+        },
+      },
+    },
+  };
+};
+
+// Example 2: Multi-bridge agent (MCP + LangChain)
+export const createMultiBridgeAgent = (): CreateAgentRequest => {
+  return {
+    type: 'orchestrator',
+    name: 'Multi-Protocol Orchestrator',
+    version: '1.0.0',
+    capabilities: ['orchestration', 'workflow-execution', 'integration'],
+    configuration: {},
+    bridge: {
+      // Enable MCP for Claude Desktop
+      mcp: {
+        enabled: true,
+        server_type: 'websocket',
+        tools: [
+          {
+            name: 'execute_workflow',
+            description: 'Execute a multi-step workflow',
+            capability: 'workflow-execution',
+          },
+        ],
+      },
+      // Enable LangChain for Python integration
+      langchain: {
+        enabled: true,
+        tool_class: 'OSSAWorkflowTool',
+        chain_type: 'agent',
+        memory: {
+          type: 'conversation',
+          max_tokens: 4096,
+        },
+        export: {
+          as_tool: true,
+          as_chain: true,
+          as_agent: false,
+        },
+      },
+      // Enable OpenAPI for REST integration
+      openapi: {
+        enabled: true,
+        spec_url: 'https://api.example.com/openapi.json',
+        spec_version: '3.1',
+        auto_generate: false,
+      },
+    },
+  };
+};
+
+// Example 3: Helper function to create MCP tools from OSSA capabilities
+export const createMCPToolsFromCapabilities = (
+  capabilities: string[]
+): MCPTool[] => {
+  return capabilities.map((capability) => ({
+    name: capability.replace(/-/g, '_'),
+    description: `Execute ${capability} capability`,
+    capability,
+  }));
+};
+
+// Example 4: Validate MCP configuration
+export const validateMCPConfig = (config: MCPBridgeConfig): boolean => {
+  if (!config.enabled) {
+    return false;
+  }
+
+  // Check transport type
+  if (
+    config.server_type &&
+    !['stdio', 'sse', 'websocket'].includes(config.server_type)
+  ) {
+    throw new Error(`Invalid MCP server type: ${config.server_type}`);
+  }
+
+  // Validate tools
+  if (config.tools) {
+    for (const tool of config.tools) {
+      if (!tool.name || !tool.description) {
+        throw new Error('MCP tools must have name and description');
+      }
+    }
+  }
+
+  // Validate resources
+  if (config.resources) {
+    for (const resource of config.resources) {
+      if (!resource.uri || !resource.name) {
+        throw new Error('MCP resources must have uri and name');
+      }
+    }
+  }
+
+  return true;
+};
+
+// Example 5: Create an agent with custom bridge
+export const createCustomBridgeAgent = (): CreateAgentRequest => {
+  return {
+    type: 'worker',
+    name: 'Custom Bridge Agent',
+    version: '1.0.0',
+    capabilities: ['custom-integration'],
+    configuration: {},
+    bridge: {
+      mcp: {
+        enabled: true,
+        server_type: 'stdio',
+      },
+      custom: {
+        my_protocol: {
+          enabled: true,
+          endpoint: 'wss://custom.example.com',
+          features: ['streaming', 'bidirectional'],
+        },
+      },
+    },
+  };
+};
+
+// Example 6: Runtime bridge configuration
+export class AgentBridgeManager {
+  private agent: Agent;
+
+  constructor(agent: Agent) {
+    this.agent = agent;
+  }
+
+  isMCPEnabled(): boolean {
+    return this.agent.bridge?.mcp?.enabled ?? false;
+  }
+
+  getMCPTransport(): 'stdio' | 'sse' | 'websocket' | undefined {
+    return this.agent.bridge?.mcp?.server_type;
+  }
+
+  getMCPTools(): MCPTool[] {
+    return this.agent.bridge?.mcp?.tools ?? [];
+  }
+
+  getMCPResources(): MCPResource[] {
+    return this.agent.bridge?.mcp?.resources ?? [];
+  }
+
+  getMCPPrompts(): MCPPrompt[] {
+    return this.agent.bridge?.mcp?.prompts ?? [];
+  }
+
+  getSupportedBridges(): string[] {
+    const bridges: string[] = [];
+    if (this.agent.bridge?.mcp?.enabled) bridges.push('mcp');
+    if (this.agent.bridge?.openapi?.enabled) bridges.push('openapi');
+    if (this.agent.bridge?.langchain?.enabled) bridges.push('langchain');
+    if (this.agent.bridge?.crewai?.enabled) bridges.push('crewai');
+    if (this.agent.bridge?.autogen?.enabled) bridges.push('autogen');
+    if (this.agent.bridge?.a2a?.enabled) bridges.push('a2a');
+    return bridges;
+  }
+
+  isMultiBridge(): boolean {
+    return this.getSupportedBridges().length > 1;
+  }
+}
+
+// Example 7: Usage example
+export const exampleUsage = () => {
+  // Create an MCP agent
+  const mcpAgentRequest = createMCPAgent();
+  console.log(
+    'MCP Agent Configuration:',
+    JSON.stringify(mcpAgentRequest, null, 2)
+  );
+
+  // Create a multi-bridge agent
+  const multiBridgeRequest = createMultiBridgeAgent();
+  console.log(
+    'Multi-Bridge Agent:',
+    JSON.stringify(multiBridgeRequest, null, 2)
+  );
+
+  // Validate MCP configuration
+  const mcpConfig: MCPBridgeConfig = {
+    enabled: true,
+    server_type: 'stdio',
+    tools: [{ name: 'test_tool', description: 'Test tool' }],
+  };
+  const isValid = validateMCPConfig(mcpConfig);
+  console.log('MCP Config Valid:', isValid);
+};
+
+// Export types for use in other modules
+export type {
+  Agent,
+  CreateAgentRequest,
+  BridgeConfig,
+  MCPBridgeConfig,
+  MCPTool,
+  MCPResource,
+  MCPPrompt,
+};

package/examples/vercel/edge-agent.ossa.json

@@ -0,0 +1,43 @@
+{
+  "apiVersion": "ossa/v0.2",
+  "kind": "Agent",
+  "metadata": {
+    "name": "edge-chat-agent",
+    "version": "1.0.0",
+    "description": "Vercel AI SDK edge runtime agent"
+  },
+  "spec": {
+    "role": "You are a helpful AI assistant running on Vercel Edge.",
+    "llm": {
+      "provider": "openai",
+      "model": "gpt-4",
+      "temperature": 0.7
+    },
+    "tools": []
+  },
+  "extensions": {
+    "vercel_ai": {
+      "enabled": true,
+      "runtime": "edge",
+      "stream": true,
+      "route": "/api/chat",
+      "tools": [
+        {
+          "name": "get_weather",
+          "description": "Get current weather for a location",
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "location": {
+                "type": "string",
+                "description": "City name"
+              }
+            },
+            "required": ["location"]
+          }
+        }
+      ]
+    }
+  }
+}
+

package/infrastructure/docker-compose.yml

@@ -0,0 +1,33 @@
+version: "3.8"
+
+services:
+  ossa:
+    build:
+      context: ..
+      dockerfile: Dockerfile
+    container_name: ossa
+    ports:
+      - "7001:7001"
+    environment:
+      - NODE_ENV=production
+      - PORT=7001
+      - HOST=0.0.0.0
+    networks:
+      - llm-network
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "require('http').get('http://localhost:7001/health', (r) => process.exit(r.statusCode === 200 ? 0 : 1))",
+        ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+    restart: unless-stopped
+
+networks:
+  llm-network:
+    external: true

package/infrastructure/gitlab-agent/rbac.yaml

@@ -0,0 +1,126 @@
+# GitLab Kubernetes Agent RBAC Configuration
+# Production-ready RBAC with least privilege principles
+# This replaces the default cluster-admin role with more restrictive permissions
+
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gitlab-agent
+  namespace: gitlab-agent
+  labels:
+    app: gitlab-agent
+    component: ossa-agent
+---
+# ClusterRole with minimal required permissions for GitLab agent
+# Adjust based on your specific needs
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: gitlab-agent
+  labels:
+    app: gitlab-agent
+    component: ossa-agent
+rules:
+  # Core API access for agent operations
+  - apiGroups: [""]
+    resources:
+      - namespaces
+      - pods
+      - pods/exec
+      - pods/log
+      - pods/portforward
+      - services
+      - endpoints
+      - configmaps
+      - secrets
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  
+  # Deployment and workload management
+  - apiGroups: ["apps"]
+    resources:
+      - deployments
+      - replicasets
+      - statefulsets
+      - daemonsets
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  
+  # Job and CronJob management
+  - apiGroups: ["batch"]
+    resources:
+      - jobs
+      - cronjobs
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  
+  # Ingress management
+  - apiGroups: ["networking.k8s.io"]
+    resources:
+      - ingresses
+      - ingressclasses
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  
+  # Service account and RBAC (for CI/CD operations)
+  - apiGroups: [""]
+    resources:
+      - serviceaccounts
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  
+  - apiGroups: ["rbac.authorization.k8s.io"]
+    resources:
+      - roles
+      - rolebindings
+      - clusterroles
+      - clusterrolebindings
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  
+  # Events for observability
+  - apiGroups: [""]
+    resources:
+      - events
+    verbs: ["get", "list", "watch", "create", "patch"]
+  
+  # Nodes (read-only for cluster info)
+  - apiGroups: [""]
+    resources:
+      - nodes
+    verbs: ["get", "list", "watch"]
+  
+  # Persistent volumes (if needed for deployments)
+  - apiGroups: [""]
+    resources:
+      - persistentvolumes
+      - persistentvolumeclaims
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  
+  # Custom resources (for OSSA agents and other CRDs)
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["get", "list", "watch"]
+  
+  # Metrics and monitoring
+  - apiGroups: ["metrics.k8s.io"]
+    resources:
+      - nodes
+      - pods
+    verbs: ["get", "list"]
+  
+  # Health checks
+  - nonResourceURLs: ["/healthz", "/readyz", "/livez"]
+    verbs: ["get"]
+---
+# ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: gitlab-agent
+  labels:
+    app: gitlab-agent
+    component: ossa-agent
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: gitlab-agent
+subjects:
+  - kind: ServiceAccount
+    name: gitlab-agent
+    namespace: gitlab-agent
+

package/infrastructure/gitlab-agent/values.yaml

@@ -0,0 +1,150 @@
+# GitLab Kubernetes Agent Helm Values
+# Production-ready configuration for OSSA agents
+
+# Agent configuration
+config:
+  # Agent token (set via --set config.token=<token> or from secret)
+  # token: ""
+  
+  # KAS address for self-hosted GitLab
+  # Replace with your GitLab instance URL
+  kasAddress: "wss://your-gitlab-instance.com/-/kubernetes-agent/"
+  
+  # Optional: KAS CA certificate for self-signed certs
+  # kasCaCert: ""
+
+# Image configuration
+image:
+  repository: registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk
+  tag: "v18.4.0"  # Match your GitLab version
+  pullPolicy: IfNotPresent
+
+# Service account configuration
+serviceAccount:
+  create: true
+  name: gitlab-agent
+  annotations: {}
+  # annotations:
+  #   eks.amazonaws.com/role-arn: "arn:aws:iam::ACCOUNT_ID:role/ROLE_NAME"
+
+# RBAC configuration
+rbac:
+  create: true
+  # Use existing role instead of creating cluster-admin
+  # useExistingRole: false
+  # existingRoleName: ""
+
+# Resource limits
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 500m
+    memory: 512Mi
+
+# Pod configuration
+podAnnotations:
+  prometheus.io/scrape: "true"
+  prometheus.io/port: "8080"
+  prometheus.io/path: "/metrics"
+
+podLabels:
+  app: gitlab-agent
+  component: ossa-agent
+  managed-by: helm
+
+# Security context
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 65534
+  fsGroup: 65534
+  seccompProfile:
+    type: RuntimeDefault
+
+# Node selector (optional)
+nodeSelector: {}
+
+# Tolerations (optional)
+tolerations: []
+
+# Affinity rules (optional)
+affinity: {}
+
+# Extra environment variables
+extraEnv: []
+# Example:
+# extraEnv:
+#   - name: LOG_LEVEL
+#     value: "debug"
+
+# Liveness and readiness probes
+livenessProbe:
+  httpGet:
+    path: /liveness
+    port: 8080
+  initialDelaySeconds: 30
+  periodSeconds: 30
+  timeoutSeconds: 5
+  failureThreshold: 3
+
+readinessProbe:
+  httpGet:
+    path: /readiness
+    port: 8080
+  initialDelaySeconds: 10
+  periodSeconds: 10
+  timeoutSeconds: 5
+  failureThreshold: 3
+
+# Pod disruption budget
+podDisruptionBudget:
+  enabled: true
+  minAvailable: 1
+
+# Service monitor for Prometheus (if Prometheus Operator is installed)
+serviceMonitor:
+  enabled: false
+  interval: 30s
+  scrapeTimeout: 10s
+  labels: {}
+
+# Network policy (if supported)
+networkPolicy:
+  enabled: false
+
+# Priority class (optional)
+priorityClassName: ""
+
+# Extra volumes
+extraVolumes: []
+
+# Extra volume mounts
+extraVolumeMounts: []
+
+# Init containers
+initContainers: []
+
+# Additional containers (sidecars)
+additionalContainers: []
+
+# Deployment configuration
+replicaCount: 1
+
+# Strategy
+strategy:
+  type: RollingUpdate
+  rollingUpdate:
+    maxSurge: 1
+    maxUnavailable: 0
+
+# Termination grace period
+terminationGracePeriodSeconds: 30
+
+# Namespace configuration
+namespace:
+  create: true
+  name: gitlab-agent
+  annotations: {}
+  labels: {}
+

package/infrastructure/k8s/monitoring/00-namespace.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: monitoring
+  labels:
+    name: monitoring
+    app.kubernetes.io/name: monitoring