@bluefly/openstandardagents 0.2.8 → 0.3.0

package/examples/tasks/batch-email-sender.yaml

@@ -0,0 +1,105 @@
+# Example: Batch Email Sender Task
+# A deterministic batch task that sends emails to multiple recipients
+apiVersion: ossa/v0.3.0
+kind: Task
+metadata:
+  name: batch-email-sender
+  version: 1.0.0
+  description: Sends emails to a batch of recipients
+  labels:
+    domain: communication
+    type: batch
+
+spec:
+  execution:
+    type: idempotent  # Safe to retry without duplicate sends
+    runtime: any
+    timeout_seconds: 3600  # 1 hour for large batches
+
+  capabilities:
+    - send_email
+    - validate_email
+
+  input:
+    type: object
+    properties:
+      recipients:
+        type: array
+        items:
+          type: object
+          properties:
+            email:
+              type: string
+              format: email
+            name:
+              type: string
+            variables:
+              type: object
+              description: Template variables for personalization
+          required:
+            - email
+      template_id:
+        type: string
+        description: Email template identifier
+      subject:
+        type: string
+      from_email:
+        type: string
+        format: email
+    required:
+      - recipients
+      - template_id
+      - subject
+      - from_email
+
+  output:
+    type: object
+    properties:
+      total_sent:
+        type: integer
+      total_failed:
+        type: integer
+      failures:
+        type: array
+        items:
+          type: object
+          properties:
+            email:
+              type: string
+            error:
+              type: string
+
+  # Batch processing configuration
+  batch:
+    enabled: true
+    parallelism: 50      # Send 50 emails concurrently
+    chunk_size: 100      # Process 100 recipients at a time
+    retry:
+      max_attempts: 3
+      backoff_strategy: exponential
+      initial_delay_ms: 2000
+    on_item_error: skip  # Continue with other recipients on failure
+
+  error_handling:
+    on_error: continue  # Don't fail entire batch on partial failures
+
+  observability:
+    logging:
+      level: info
+    metrics:
+      enabled: true
+      custom_labels:
+        batch_type: email
+    tracing:
+      enabled: true
+      sample_rate: 0.1  # Sample 10% of emails for tracing
+
+# Runtime bindings for different environments
+runtime:
+  type: symfony_messenger
+  transport: async
+  bindings:
+    send_email:
+      handler: "App\\Service\\EmailService::send"
+    validate_email:
+      handler: "App\\Service\\EmailValidator::validate"

package/examples/tasks/data-transform.yaml

@@ -0,0 +1,82 @@
+# Example: Data Transform Task
+# A pure function task that transforms data between formats
+apiVersion: ossa/v0.3.0
+kind: Task
+metadata:
+  name: data-transform
+  version: 1.0.0
+  description: Transforms data from one format to another
+  labels:
+    domain: data-processing
+    type: pure-function
+
+spec:
+  execution:
+    type: deterministic  # Pure function - same input always produces same output
+    runtime: node
+    entrypoint: "src/transforms/index.ts:transform"
+    timeout_seconds: 30
+
+  capabilities:
+    - transform_data
+    - validate_schema
+
+  input:
+    type: object
+    properties:
+      source_format:
+        type: string
+        enum: [json, xml, csv, yaml]
+      target_format:
+        type: string
+        enum: [json, xml, csv, yaml]
+      data:
+        description: Input data to transform
+      schema:
+        type: object
+        description: Optional JSON Schema for validation
+    required:
+      - source_format
+      - target_format
+      - data
+
+  output:
+    type: object
+    properties:
+      transformed_data:
+        description: Transformed output data
+      metadata:
+        type: object
+        properties:
+          source_records:
+            type: integer
+          output_records:
+            type: integer
+          transform_time_ms:
+            type: number
+
+  preconditions:
+    - expression: "${{ input.source_format != input.target_format }}"
+      error_message: "Source and target formats must be different"
+
+  error_handling:
+    on_error: fail
+    error_mapping:
+      INVALID_SOURCE_DATA: fail
+      SCHEMA_VALIDATION_ERROR: fail
+      TRANSFORM_ERROR: retry
+
+  observability:
+    metrics:
+      enabled: true
+      custom_labels:
+        source_format: "${{ input.source_format }}"
+        target_format: "${{ input.target_format }}"
+
+runtime:
+  type: node
+  bindings:
+    transform_data:
+      handler: "transforms/handlers/dataTransform"
+    validate_schema:
+      handler: "transforms/handlers/schemaValidator"

package/examples/tasks/publish-content.yaml

@@ -0,0 +1,86 @@
+# Example: Publish Content Task
+# A deterministic task that publishes content - no AI required
+apiVersion: ossa/v0.3.0
+kind: Task
+metadata:
+  name: publish-content
+  version: 1.0.0
+  description: Publishes draft content to the live site
+  labels:
+    domain: content-management
+    type: deterministic
+
+spec:
+  execution:
+    type: deterministic
+    runtime: any  # Can run on drupal, symfony, node, etc.
+    timeout_seconds: 60
+
+  # Abstract capabilities - bound to runtime-specific handlers
+  capabilities:
+    - publish_content
+    - send_notification
+
+  input:
+    type: object
+    properties:
+      content_id:
+        type: string
+        description: ID of the content to publish
+      notify_author:
+        type: boolean
+        default: true
+        description: Whether to notify the content author
+    required:
+      - content_id
+
+  output:
+    type: object
+    properties:
+      published:
+        type: boolean
+        description: Whether publishing succeeded
+      url:
+        type: string
+        description: Public URL of published content
+      published_at:
+        type: string
+        format: date-time
+        description: Timestamp of publication
+
+  preconditions:
+    - expression: "${{ input.content_id != '' }}"
+      error_message: "Content ID is required"
+
+  postconditions:
+    - expression: "${{ output.published == true }}"
+      error_message: "Content must be published"
+
+  error_handling:
+    on_error: retry
+    error_mapping:
+      CONTENT_NOT_FOUND: fail
+      PERMISSION_DENIED: fail
+      NETWORK_ERROR: retry
+
+  observability:
+    logging:
+      level: info
+      include_input: false
+      include_output: true
+    metrics:
+      enabled: true
+      custom_labels:
+        task_type: publish
+    tracing:
+      enabled: true
+      sample_rate: 1.0
+
+# Runtime bindings - separate from the portable task definition
+runtime:
+  type: drupal
+  bindings:
+    publish_content:
+      handler: "Drupal\\node\\Entity\\Node::setPublished"
+    send_notification:
+      handler: "Drupal\\ai_agents\\Service\\NotificationService::notify"

package/examples/templates/ossa-compliance.yaml

@@ -1,6 +1,6 @@
 # OSSA v0.1.9 Compliance Configuration for __ARCHIVE_REPORTS
 
-apiVersion: ossa/v0.2.8
+apiVersion: ossa/v0.3.0
 kind: 'ComplianceConfiguration'
 metadata:
   name: '__ARCHIVE_REPORTS-compliance'

package/examples/unified/security-scanner.ossa.yaml

@@ -0,0 +1,311 @@
+# OSSA v0.3.0 - Unified Security Scanner Agent
+# Compatible with: OSSA, GitLab Duo, Google A2A, MCP
+# Zero hardcoded models, runtime-agnostic
+
+apiVersion: ossa/v0.3.0
+kind: Agent
+
+metadata:
+  name: security-scanner
+  version: 1.0.0
+  description: Universal security scanner with multi-runtime support
+  labels:
+    domain: security
+    capability: scanning
+    runtime: unified
+    compliance: ossa-certified
+
+spec:
+  # ============================================
+  # UNIFIED LLM CONFIGURATION
+  # No hardcoded models - all runtime-configurable
+  # ============================================
+  llm:
+    # Primary LLM (configurable via env)
+    provider: ${LLM_PROVIDER:-anthropic}
+    model: ${LLM_MODEL:-claude-sonnet}
+    profile: ${LLM_PROFILE:-safe}  # Use 'safe' profile for security
+    
+    # LLM parameters
+    temperature: ${LLM_TEMPERATURE:-0.0}  # Deterministic for security
+    maxTokens: ${LLM_MAX_TOKENS:-16000}
+    topP: ${LLM_TOP_P:-0.9}
+
+    # Multi-provider fallback (resilience)
+    fallback_models:
+      - provider: ${LLM_FALLBACK_PROVIDER_1:-openai}
+        model: ${LLM_FALLBACK_MODEL_1:-gpt-4o}
+        condition: on_error
+      - provider: ${LLM_FALLBACK_PROVIDER_2:-google}
+        model: ${LLM_FALLBACK_MODEL_2:-gemini-2.0-flash}
+        condition: on_rate_limit
+
+    # Retry configuration
+    retry_config:
+      max_attempts: ${LLM_RETRY_ATTEMPTS:-3}
+      backoff_strategy: ${LLM_BACKOFF_STRATEGY:-exponential}
+      initial_delay_ms: 1000
+      max_delay_ms: 30000
+
+  # ============================================
+  # EXECUTION PROFILES (Google A2A compatible)
+  # ============================================
+  execution_profile:
+    default: ${LLM_PROFILE:-safe}
+    profiles:
+      fast:
+        maxTokens: 4000
+        temperature: 0.0
+        description: "Quick triage scans"
+      balanced:
+        maxTokens: 16000
+        temperature: 0.1
+        description: "Standard security analysis"
+      deep:
+        maxTokens: 32000
+        temperature: 0.0
+        reasoning_enabled: true
+        description: "Deep threat analysis"
+      safe:
+        temperature: 0.0
+        validation_required: true
+        audit_log: true
+        description: "Compliance-grade scanning"
+
+  # ============================================
+  # RUNTIME DECLARATION (Multi-platform)
+  # ============================================
+  runtime:
+    type: ${AGENT_RUNTIME:-unified}
+    supports:
+      - google-a2a
+      - gitlab-duo
+      - ossa-mesh
+      - mcp
+      - local-execution
+      - kubernetes
+    
+    scheduling:
+      strategy: ${AGENT_SCHEDULING:-priority}
+      priority: ${AGENT_PRIORITY:-high}  # Security is high priority
+      max_concurrent: ${AGENT_MAX_CONCURRENT:-5}
+      timeout_seconds: ${AGENT_TIMEOUT:-600}  # 10 min for deep scans
+    
+    resource_limits:
+      memory_mb: ${AGENT_MEMORY_MB:-1024}
+      cpu_millicores: ${AGENT_CPU_MILLICORES:-1000}
+      gpu_required: false
+
+  # ============================================
+  # CAPABILITIES (A2A/Duo compatible)
+  # ============================================
+  capabilities:
+    - name: security_scan
+      type: action
+      runtime: hybrid
+      description: "Run comprehensive security analysis"
+      input_schema:
+        type: object
+        required: [path]
+        properties:
+          path:
+            type: string
+            description: "Path to scan"
+          severity:
+            type: string
+            enum: [low, medium, high, critical]
+            default: medium
+          scan_type:
+            type: string
+            enum: [sast, dast, secrets, dependencies]
+            default: sast
+      output_schema:
+        type: object
+        properties:
+          findings:
+            type: array
+            items:
+              type: object
+              properties:
+                severity:
+                  type: string
+                title:
+                  type: string
+                file:
+                  type: string
+                line:
+                  type: integer
+          score:
+            type: number
+            minimum: 0
+            maximum: 100
+      timeout_seconds: 600
+      retry_policy:
+        max_attempts: 2
+        backoff: exponential
+
+    - name: validate_compliance
+      type: validation
+      runtime: llm
+      description: "Validate OSSA compliance"
+      input_schema:
+        type: object
+        required: [standard]
+        properties:
+          standard:
+            type: string
+            enum: [ossa, nist, fedramp, soc2]
+
+  # ============================================
+  # FUNCTIONS (A2A format - OpenAI compatible)
+  # ============================================
+  functions:
+    - name: scan_security
+      description: "Run OSSA security analysis on codebase"
+      parameters:
+        type: object
+        properties:
+          path:
+            type: string
+            description: "Path to scan (absolute or relative)"
+          severity:
+            type: string
+            enum: [low, medium, high, critical]
+            description: "Minimum severity level to report"
+          scan_type:
+            type: string
+            enum: [sast, dast, secrets, dependencies]
+            description: "Type of security scan"
+        required: [path]
+      returns:
+        type: object
+        properties:
+          findings:
+            type: array
+            description: "List of security findings"
+          score:
+            type: number
+            description: "Overall security score (0-100)"
+          scan_duration_ms:
+            type: integer
+
+    - name: validate_compliance
+      description: "Validate compliance with security standards"
+      parameters:
+        type: object
+        properties:
+          standard:
+            type: string
+            enum: [ossa, nist, fedramp, soc2]
+          path:
+            type: string
+        required: [standard, path]
+      returns:
+        type: object
+        properties:
+          compliant:
+            type: boolean
+          violations:
+            type: array
+
+  # ============================================
+  # EXTENSIONS (A2A compatible)
+  # ============================================
+  extensions:
+    - type: http
+      name: ossa-mesh
+      endpoint: ${OSSA_MESH_URL:-http://ossa-mesh:8080}
+      credentials_ref: OSSA_MESH_TOKEN
+      description: "OSSA mesh network integration"
+    
+    - type: mcp
+      name: gitlab-mcp
+      endpoint: ${GITLAB_MCP_URL:-http://gitlab-mcp:3000}
+      credentials_ref: GITLAB_TOKEN
+      description: "GitLab MCP integration"
+    
+    - type: http
+      name: semgrep-api
+      endpoint: ${SEMGREP_API_URL:-https://semgrep.dev/api}
+      credentials_ref: SEMGREP_TOKEN
+      description: "Semgrep SAST engine"
+
+  # ============================================
+  # AGENT ROLE & BEHAVIOR
+  # ============================================
+  role: |
+    You are a security scanner agent specializing in OSSA compliance and threat detection.
+    
+    Your responsibilities:
+    1. Scan codebases for security vulnerabilities
+    2. Validate OSSA compliance
+    3. Detect secrets and credentials
+    4. Analyze dependencies for known CVEs
+    5. Generate actionable security reports
+    
+    Always:
+    - Use deterministic analysis (temperature=0.0)
+    - Log all findings for audit trail
+    - Prioritize critical vulnerabilities
+    - Provide remediation guidance
+    
+    Never:
+    - Skip validation steps
+    - Ignore low-severity findings
+    - Make assumptions about security
+
+  taxonomy:
+    domain: security
+    subdomain: scanning
+    capability: sast
+
+  # ============================================
+  # TOOLS (MCP format)
+  # ============================================
+  tools:
+    - name: semgrep_scan
+      description: "Run Semgrep SAST analysis"
+      source:
+        type: mcp
+        uri: mcp://semgrep-service/scan
+      input:
+        type: object
+        required: [path, rules]
+        properties:
+          path:
+            type: string
+          rules:
+            type: array
+            items:
+              type: string
+
+    - name: trivy_scan
+      description: "Scan dependencies with Trivy"
+      source:
+        type: mcp
+        uri: mcp://trivy-service/scan
+      input:
+        type: object
+        required: [path]
+        properties:
+          path:
+            type: string
+          scan_type:
+            type: string
+            enum: [vuln, config, secret]
+
+  # ============================================
+  # OBSERVABILITY
+  # ============================================
+  observability:
+    tracing:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT}
+    metrics:
+      enabled: true
+      port: 9090
+    logging:
+      level: ${LOG_LEVEL:-info}
+      format: json
+      audit_enabled: true

package/examples/vercel/edge-agent.ossa.json

@@ -1,5 +1,5 @@
 {
-  "apiVersion": "ossa/v0.2.8",
+  "apiVersion": "ossa/v0.3.0",
   "kind": "Agent",
   "metadata": {
     "name": "edge-chat-agent",