@bluefly/openstandardagents 0.2.9 → 0.3.0

package/spec/v0.3.0/taxonomy.yaml

@@ -0,0 +1,256 @@
+# =============================================================================
+# OSSA v0.3.0 - Agent Taxonomy Specification
+# =============================================================================
+# Hierarchical classification system for agents with cross-cutting concerns
+# Issue: https://gitlab.com/blueflyio/openstandardagents/-/issues/194
+# =============================================================================
+
+apiVersion: ossa/v0.3.0
+kind: TaxonomySpec
+version: "1.0.0"
+
+# =============================================================================
+# PRIMARY DOMAINS
+# Top-level classification - every agent belongs to exactly one domain
+# =============================================================================
+domains:
+  security:
+    description: "Authentication, authorization, encryption, compliance, vulnerability management"
+    subdomains:
+      - auth                 # Authentication & authorization
+      - encryption          # Encryption & key management
+      - compliance          # Regulatory compliance (SOC2, ISO, GDPR)
+      - vulnerability       # Vulnerability scanning & remediation
+      - secrets             # Secrets management & rotation
+      - threat-detection    # Threat detection & response
+    examples:
+      - security-scanner
+      - compliance-checker
+      - secret-detector
+      - threat-modeler
+
+  infrastructure:
+    description: "DevOps, CI/CD, deployment, configuration, cloud resources"
+    subdomains:
+      - ci-cd               # CI/CD pipeline management
+      - gitops              # GitOps workflows
+      - deployment          # Deployment automation
+      - configuration       # Configuration management
+      - networking          # Network configuration
+      - storage             # Storage management
+      - kubernetes          # Kubernetes orchestration
+      - cloud               # Cloud provider management
+    examples:
+      - deployment-manager
+      - pipeline-fixer
+      - infrastructure-provisioner
+      - incident-responder
+
+  documentation:
+    description: "Documentation, wiki, guides, knowledge management"
+    subdomains:
+      - api-docs            # API documentation
+      - user-guides         # User guides & tutorials
+      - wiki                # Wiki management
+      - knowledge-base      # Knowledge base management
+      - changelog           # Changelog & release notes
+    examples:
+      - documentation-generator
+      - wiki-manager
+      - api-docs-generator
+
+  backend:
+    description: "API, database, services, business logic"
+    subdomains:
+      - api                 # API design & implementation
+      - database            # Database management
+      - services            # Microservices
+      - messaging           # Message queues & events
+      - caching             # Caching strategies
+      - integration         # System integration
+    examples:
+      - api-builder
+      - database-migrator
+      - service-orchestrator
+
+  frontend:
+    description: "UI/UX, web, mobile interfaces"
+    subdomains:
+      - web                 # Web applications
+      - mobile              # Mobile applications
+      - design-system       # Design system components
+      - accessibility       # Accessibility (a11y)
+      - performance         # Frontend performance
+    examples:
+      - ui-reviewer
+      - accessibility-checker
+      - design-system-manager
+
+  data:
+    description: "Data engineering, analytics, ML/AI operations"
+    subdomains:
+      - analytics           # Business analytics
+      - ml-ops              # ML operations
+      - etl                 # Extract, transform, load
+      - data-quality        # Data quality & validation
+      - data-governance     # Data governance
+      - streaming           # Real-time data streaming
+    examples:
+      - analytics-collector
+      - ml-model-manager
+      - data-quality-checker
+
+  agents:
+    description: "OSSA agents, automation, orchestration, meta-operations"
+    subdomains:
+      - orchestration       # Multi-agent orchestration
+      - workers             # Worker agents
+      - supervisors         # Supervisor agents
+      - mesh                # Agent mesh networking
+      - training            # Agent training & improvement
+      - registry            # Agent registry management
+    examples:
+      - master-orchestrator
+      - agent-trainer
+      - workflow-builder
+
+  development:
+    description: "Software development, code quality, testing"
+    subdomains:
+      - code-review         # Code review automation
+      - testing             # Test generation & execution
+      - refactoring         # Code refactoring
+      - debugging           # Debugging assistance
+      - ide                 # IDE integration
+    examples:
+      - code-reviewer
+      - test-generator
+      - refactoring-assistant
+
+  content:
+    description: "Content management, editing, publishing"
+    subdomains:
+      - authoring           # Content authoring
+      - editing             # Content editing
+      - publishing          # Content publishing
+      - research            # Research & knowledge gathering
+      - localization        # Internationalization & localization
+    examples:
+      - content-orchestrator
+      - editor
+      - researcher
+      - publisher
+
+# =============================================================================
+# CROSS-CUTTING CONCERNS
+# Tags that can apply to any agent regardless of domain
+# An agent can have multiple concerns
+# =============================================================================
+concerns:
+  quality:
+    description: "Testing, code quality, standards enforcement"
+    applies_to: ["development", "backend", "frontend", "infrastructure"]
+
+  observability:
+    description: "Metrics, logging, tracing, monitoring"
+    applies_to: ["*"]  # All domains
+
+  governance:
+    description: "Policies, compliance, audit trails"
+    applies_to: ["*"]
+
+  performance:
+    description: "Optimization, caching, scaling"
+    applies_to: ["*"]
+
+  architecture:
+    description: "Design patterns, system structure"
+    applies_to: ["development", "backend", "infrastructure", "agents"]
+
+  cost:
+    description: "FinOps, resource optimization, budget management"
+    applies_to: ["infrastructure", "data", "agents"]
+
+  reliability:
+    description: "SRE, uptime, resilience, disaster recovery"
+    applies_to: ["infrastructure", "backend", "agents"]
+
+# =============================================================================
+# AGENT TYPE CLASSIFICATION
+# Based on OSSA spec.type field
+# =============================================================================
+agent_types:
+  worker:
+    description: "Executes specific tasks, no delegation"
+    typical_domains: ["development", "security", "documentation"]
+
+  supervisor:
+    description: "Coordinates other agents, can delegate"
+    typical_domains: ["agents", "infrastructure"]
+
+  orchestrator:
+    description: "High-level coordination, workflow management"
+    typical_domains: ["agents"]
+
+  specialist:
+    description: "Deep expertise in narrow domain"
+    typical_domains: ["security", "data", "backend"]
+
+# =============================================================================
+# USAGE IN AGENT MANIFESTS
+# =============================================================================
+# Example usage in OSSA agent manifest:
+#
+# metadata:
+#   name: security-scanner
+#   labels:
+#     domain: security
+#     subdomain: vulnerability
+#     concerns: quality,compliance
+#
+# spec:
+#   type: worker
+#   taxonomy:
+#     domain: security
+#     subdomain: vulnerability
+#     capability: scan_vulnerabilities
+#     concerns:
+#       - quality
+#       - compliance
+
+# =============================================================================
+# VALIDATION RULES
+# =============================================================================
+validation:
+  rules:
+    - name: valid-domain
+      description: "Domain must be from approved list"
+      severity: error
+
+    - name: valid-subdomain
+      description: "Subdomain must belong to specified domain"
+      severity: error
+
+    - name: concerns-applicable
+      description: "Concerns must be applicable to domain"
+      severity: warning
+
+    - name: type-domain-match
+      description: "Agent type should match typical domains"
+      severity: info
+
+# =============================================================================
+# MIGRATION FROM LEGACY
+# =============================================================================
+migration:
+  deprecated_domains:
+    ci-cd: { domain: infrastructure, subdomain: ci-cd }
+    gitops: { domain: infrastructure, subdomain: gitops }
+    deployment: { domain: infrastructure, subdomain: deployment }
+    configuration: { domain: infrastructure, subdomain: configuration }
+    cost-management: { domain: infrastructure, concerns: [cost] }
+    database: { domain: backend, subdomain: database }
+    performance: { concerns: [performance] }
+    observability: { concerns: [observability] }
+    governance: { concerns: [governance] }
+    architecture: { concerns: [architecture] }

package/.cursorrules

@@ -1,84 +0,0 @@
-# OSSA Project Rules for Cursor Agent
-
-This file contains project-specific rules for Cursor Agent. Additional detailed rules are in `.cursor/rules/`.
-
-## Core Principles
-- OpenAPI-First: All APIs must be defined in OpenAPI 3.1 specs
-- TDD-Centric: Write tests first, then implement, then refactor
-- Schema-Driven: OSSA schema is the source of truth
-- No Vendor Lock-in: OSSA is a standard, not a framework
-
-## Critical Workflows
-
-### Version Management
-**NEVER manually update version numbers in any file.**
-- Single source of truth: `.version.json`
-- Use `npm run version:bump <type>` to change versions (rc, patch, minor, major, release)
-- Use `{{VERSION}}` placeholders in documentation
-- Versions auto-sync before every build
-- See `.gitlab/docs/development/VERSIONING.md` for complete guide
-
-### Before Config Work
-**ALWAYS** run `ddev drush cst` before working with Drupal config. This is CRITICAL.
-
-### Schema Updates
-1. Update schema JSON in `spec/v0.2.5-RC/`
-2. Run `npm run gen:types` to generate TypeScript types
-3. Run `npm run gen:zod` to generate Zod validators
-4. Run `npm run validate:schema` to validate schema
-5. Update examples and tests
-
-### OSSA Manifest Validation
-- All `.ossa.yaml` and `agent.yml` files must validate
-- Run `ossa validate` before committing
-- Examples in `examples/` must all validate
-
-### Testing Requirements
-- Unit tests for service logic and utilities
-- Integration tests for CLI commands and workflows
-- E2E tests for full validation workflows
-- 95%+ test coverage required
-
-## Prohibited Operations
-- ❌ Direct commits to `main` or `development` branches
-- ❌ Skipping tests
-- ❌ Breaking schema without migration
-- ❌ Hardcoded secrets
-- ❌ Bypassing hooks (`LEFTHOOK=0`)
-- ❌ Creating `.md` files (use GitLab Wiki)
-- ❌ Creating `.sh` files (use TypeScript/Node scripts)
-- ❌ Deleting critical files (use `__DELETE_LATER/` folder)
-
-## File Organization
-- `spec/` - OSSA schema definitions
-- `src/` - Source code (TypeScript)
-- `tests/` - Test files (unit, integration, e2e)
-- `examples/` - Example OSSA manifests
-- `openapi/` - OpenAPI specifications
-- `docs/` - Documentation
-
-## Custom Commands
-Use these custom commands for OSSA workflows:
-- `/ossa-validate` - Validate OSSA manifests
-- `/ossa-generate` - Generate OSSA agents
-- `/ossa-migrate` - Migrate between versions
-- `/ossa-test` - Run test suite
-- `/ossa-openapi` - Work with OpenAPI specs
-- `/ossa-schema` - Work with schema
-- `/ossa-release` - Manage releases
-- `/ossa-refactor` - Refactor code
-- `/ossa-debug` - Debug issues
-
-## Git Workflow
-- Feature branches branch off `development`
-- No direct commits to `main` or `development`
-- Merge requests required
-- CI must pass before merge
-
-## Release Process
-Releases require:
-- Milestone 100% complete and closed
-- `ENABLE_RELEASE=true` CI variable set
-
-See `.cursor/rules/ossa-development.md` for detailed rules.
-

package/.devfile.yaml

@@ -1,87 +0,0 @@
-schemaVersion: 2.2.0
-metadata:
-  name: ossa-development
-  # Version is managed by package.json - run `npm run version:sync` to update
-  description: OSSA development environment with GitLab agent access
-components:
-  - name: dev-tools
-    container:
-      image: node:22-alpine
-      memoryLimit: 4Gi
-      cpuLimit: 2000m
-      mountSources: true
-      env:
-        - name: NODE_ENV
-          value: development
-        - name: KUBECONFIG
-          value: /workspace/.kube/config
-      volumeMounts:
-        - name: kube-config
-          path: /workspace/.kube
-  
-  - name: kubectl
-    container:
-      image: bitnami/kubectl:latest
-      memoryLimit: 512Mi
-      cpuLimit: 500m
-      env:
-        - name: KUBECONFIG
-          value: /workspace/.kube/config
-      volumeMounts:
-        - name: kube-config
-          path: /workspace/.kube
-
-volumes:
-  - name: kube-config
-    ephemeral: true
-
-commands:
-  - id: install
-    exec:
-      component: dev-tools
-      commandLine: npm ci --legacy-peer-deps
-      workingDir: ${PROJECT_SOURCE}
-  
-  - id: build
-    exec:
-      component: dev-tools
-      commandLine: npm run build
-      workingDir: ${PROJECT_SOURCE}
-  
-  - id: test
-    exec:
-      component: dev-tools
-      commandLine: npm test
-      workingDir: ${PROJECT_SOURCE}
-  
-  - id: lint
-    exec:
-      component: dev-tools
-      commandLine: npm run lint
-      workingDir: ${PROJECT_SOURCE}
-  
-  - id: version-sync
-    exec:
-      component: dev-tools
-      commandLine: npm run version:sync
-      workingDir: ${PROJECT_SOURCE}
-  
-  - id: deploy-agents
-    exec:
-      component: kubectl
-      commandLine: kubectl apply -f .gitlab/agents/
-      workingDir: ${PROJECT_SOURCE}
-  
-  - id: get-pods
-    exec:
-      component: kubectl
-      commandLine: kubectl get pods -n ossa-agents
-  
-  - id: agent-logs
-    exec:
-      component: kubectl
-      commandLine: kubectl logs -n ossa-agents -l app=version-manager --tail=100 -f
-
-events:
-  postStart:
-    - install

package/.env.example

@@ -1,63 +0,0 @@
-# OSSA Production Environment Variables
-# Copy to .env.local and update values
-
-# ===========================================
-# Version & Environment
-# ===========================================
-VERSION=0.2.9
-NODE_ENV=production
-LOG_LEVEL=info
-
-# ===========================================
-# GitLab Configuration
-# ===========================================
-# Primary GitLab instance (PUBLIC - gitlab.com)
-GITLAB_PRIMARY_URL=https://gitlab.com/blueflyio/openstandardagents
-GITLAB_API_URL=https://gitlab.com/api/v4
-GITLAB_PUSH_TOKEN=your-gitlab-push-token-here
-GITLAB_URL=https://gitlab.com
-GITLAB_PROJECT_PATH=blueflyio/openstandardagents
-GITLAB_PROJECT_ID=your-project-id
-
-
-# ===========================================
-# GitHub Configuration (Mirror)
-# ===========================================
-GITHUB_API_URL=https://api.github.com
-GITHUB_BASE_URL=https://api.github.com
-GITHUB_URL=https://github.com
-GITHUB_REPOSITORY=blueflyio/openstandardagents
-GITHUB_MIRROR_TOKEN=your-github-token-here
-GITHUB_TOKEN=your-github-token-here
-
-# ===========================================
-# Security & Authentication
-# ===========================================
-JWT_SECRET=your-super-secret-jwt-key-change-this-in-production
-API_KEY=your-api-key-for-external-access
-REDIS_PASSWORD=your-redis-password-change-this
-
-# ===========================================
-# Database Configuration
-# ===========================================
-DB_PASSWORD=your-postgres-password-change-this
-POSTGRES_URL=postgresql://ossa:${DB_PASSWORD}@ossa-postgres:5432/ossa
-
-# ===========================================
-# Monitoring & Observability
-# ===========================================
-GRAFANA_USER=admin
-GRAFANA_PASSWORD=your-grafana-password-change-this
-
-# ===========================================
-# External Service URLs (if needed)
-# ===========================================
-VECTOR_HUB_URL=http://vector-hub:8000
-LLM_GATEWAY_URL=http://llm-gateway:3000
-PROMETHEUS_URL=http://prometheus:9090
-
-# ===========================================
-# Development Overrides (optional)
-# ===========================================
-# DOCKER_BUILDKIT=1
-# COMPOSE_PROJECT_NAME=ossa

package/.eslintrc.cjs

@@ -1,43 +0,0 @@
-module.exports = {
-  root: true,
-  parser: '@typescript-eslint/parser',
-  parserOptions: {
-    ecmaVersion: 2020,
-    sourceType: 'module',
-    project: './tsconfig.json',
-  },
-  plugins: ['@typescript-eslint'],
-  extends: [
-    'eslint:recommended',
-    'plugin:@typescript-eslint/recommended',
-  ],
-  env: {
-    node: true,
-    es2020: true,
-  },
-  rules: {
-    '@typescript-eslint/explicit-module-boundary-types': 'off',
-    '@typescript-eslint/no-explicit-any': 'warn',
-    '@typescript-eslint/no-unused-vars': ['warn', { argsIgnorePattern: '^_' }],
-  },
-  ignorePatterns: [
-    'node_modules/',
-    'dist/',
-    'out/',
-    '*.js',
-    '*.d.ts',
-    'website/',
-    'examples/',
-  ],
-  overrides: [
-    {
-      files: ['tests/**/*.ts'],
-      parserOptions: {
-        project: null,
-      },
-      rules: {
-        '@typescript-eslint/no-explicit-any': 'off',
-      },
-    },
-  ],
-};