@bluefly/openstandardagents 0.3.1 → 0.3.3

package/{spec/v0.3.0 → dist/spec/v0.3.2}/examples/drupal-content-writer.ossa.yaml

@@ -1,109 +1,90 @@
-apiVersion: ossa/v0.3.0
+apiVersion: ossa/v0.3.3
 kind: Agent
 metadata:
   name: drupal-content-writer
   version: 1.0.0
   description: Autonomous content generation agent for Drupal with background processing
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   capabilities:
     - name: content.create
-      description: "Create Drupal content entities (nodes, taxonomy terms)"
+      description: Create Drupal content entities (nodes, taxonomy terms)
     - name: seo.optimize
-      description: "Optimize content for SEO (meta tags, keywords, structure)"
+      description: Optimize content for SEO (meta tags, keywords, structure)
     - name: media.select
-      description: "Select relevant media from media library"
+      description: Select relevant media from media library
+  role: >
+    You are an autonomous content writer for a Drupal website. You generate
+    high-quality articles
+
+    based on content briefs, optimize them for SEO, and select appropriate media
+    assets.
 
-  role: |
-    You are an autonomous content writer for a Drupal website. You generate high-quality articles
-    based on content briefs, optimize them for SEO, and select appropriate media assets.
 
     Process:
+
     1. Analyze content brief and target audience
+
     2. Research topic using available tools
+
     3. Generate article with proper structure (H1, H2, paragraphs)
+
     4. Optimize for SEO (meta description, keywords, readability)
+
     5. Select relevant images from media library
-    6. Create content entity in Drupal
 
+    6. Create content entity in Drupal
   llm:
     provider: ${OSSA_LLM_PROVIDER:-anthropic}
     model: ${OSSA_LLM_MODEL:-claude-sonnet-4}
     temperature: ${OSSA_LLM_TEMPERATURE:-0.7}
     maxTokens: ${OSSA_LLM_MAX_TOKENS:-8192}
-
   tools:
     - name: drupal.node.create
-      description: "Create a new Drupal node (article, page, etc.)"
+      description: Create a new Drupal node (article, page, etc.)
       handler:
         runtime: drupal
         capability: node.create
-
     - name: drupal.taxonomy.search
-      description: "Search taxonomy terms for tagging"
+      description: Search taxonomy terms for tagging
       handler:
         runtime: drupal
         capability: taxonomy.search
-
     - name: drupal.media.search
-      description: "Search media library for images"
+      description: Search media library for images
       handler:
         runtime: drupal
         capability: media.search
-
 extensions:
   drupal:
-    # Module providing this agent
     module: ai_agents_ossa
-
-    # Store as exportable config entity
     config_entity: true
-
-    # Permissions for autonomous execution
     permissions:
-      # Core Drupal entity permissions
       entity_permissions:
-        - "create article content"
-        - "create page content"
-        - "edit own article content"
-        - "view media"
-        - "view taxonomy term"
-
-      # Custom permissions for agent execution
+        - create article content
+        - create page content
+        - edit own article content
+        - view media
+        - view taxonomy term
       custom_permissions:
-        - "execute content writer agent"
-        - "generate ai content"
-
-      # Run as admin service account for autonomous operation
+        - execute content writer agent
+        - generate ai content
       execution_user: "1"
-
-      # Agent runs with its own permissions (no user context)
       permission_mode: agent_only
-
-    # Async processing via Symfony Messenger
     messenger:
-      # Use Redis for high-performance message queue
       transport: redis
-
-      # Dedicated queue for content generation
       queue: content_generation
-
-      # Retry strategy for failed executions
       retry_strategy:
         max_retries: 3
         delay: 2000
         multiplier: 2
         max_delay: 30000
-
-    # ECA workflow integration
     workflow_engine: eca
-
-    # Discovery paths for manifest loading
     discovery_paths:
-      - "config/agents/*.ossa.yaml"
-      - "modules/custom/ai_agents_ossa/agents/*.ossa.yaml"
-
-    # Drupal hooks for integration
+      - config/agents/*.ossa.yaml
+      - modules/custom/ai_agents_ossa/agents/*.ossa.yaml
     hooks:
       before_execute: ai_agents_ossa_content_writer_before
       after_execute: ai_agents_ossa_content_writer_after

package/{spec/v0.3.0 → dist/spec/v0.3.2}/examples/drupal-moderation-assistant.ossa.yaml

@@ -1,95 +1,79 @@
-apiVersion: ossa/v0.3.0
+apiVersion: ossa/v0.3.3
 kind: Agent
 metadata:
   name: drupal-moderation-assistant
   version: 1.0.0
   description: Content moderation assistant that helps users review and publish content
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   capabilities:
     - name: content.review
-      description: "Review content for quality, SEO, and compliance"
+      description: Review content for quality, SEO, and compliance
     - name: moderation.suggest
-      description: "Suggest moderation workflow transitions"
+      description: Suggest moderation workflow transitions
     - name: quality.score
-      description: "Score content quality based on criteria"
+      description: Score content quality based on criteria
+  role: >
+    You are a content moderation assistant helping editors review and publish
+    content.
+
+    You work within the user's permission context and respect Drupal's editorial
+    workflow.
 
-  role: |
-    You are a content moderation assistant helping editors review and publish content.
-    You work within the user's permission context and respect Drupal's editorial workflow.
 
     Responsibilities:
+
     1. Review content for quality, readability, and SEO
+
     2. Check content against style guide and compliance rules
+
     3. Suggest appropriate moderation state transitions
+
     4. Provide actionable feedback for improvement
 
-    You can only suggest transitions the user is authorized to perform.
 
+    You can only suggest transitions the user is authorized to perform.
   llm:
     provider: ${OSSA_LLM_PROVIDER:-anthropic}
     model: ${OSSA_LLM_MODEL:-claude-sonnet-4}
     temperature: ${OSSA_LLM_TEMPERATURE:-0.3}
     maxTokens: ${OSSA_LLM_MAX_TOKENS:-4096}
-
   tools:
     - name: drupal.node.load
-      description: "Load a Drupal node for review"
+      description: Load a Drupal node for review
       handler:
         runtime: drupal
         capability: node.load
-
     - name: drupal.moderation.transitions
-      description: "Get available moderation transitions for user"
+      description: Get available moderation transitions for user
       handler:
         runtime: drupal
         capability: moderation.get_transitions
-
     - name: drupal.moderation.apply
-      description: "Apply moderation state transition"
+      description: Apply moderation state transition
       handler:
         runtime: drupal
         capability: moderation.apply_transition
-
 extensions:
   drupal:
-    # Module providing this agent
     module: ai_agents_ossa
-
-    # Store as config entity for export
     config_entity: true
-
-    # Permissions for user-context execution
     permissions:
-      # Required entity permissions
       entity_permissions:
-        - "view any article content"
-        - "edit any article content"
-        - "use editorial transition review"
-        - "use editorial transition publish"
-
-      # Custom agent permission
+        - view any article content
+        - edit any article content
+        - use editorial transition review
+        - use editorial transition publish
       custom_permissions:
-        - "use moderation assistant"
-
-      # Run in user context (no service account)
-      # execution_user not specified - uses current user
-
-      # User must have ALL required permissions (intersection)
+        - use moderation assistant
       permission_mode: least_permissive
-
-    # Synchronous execution (no queue)
     messenger:
       transport: sync
-
-    # Integrated with ECA workflow builder
     workflow_engine: eca
-
-    # Discovery from module
     discovery_paths:
-      - "modules/custom/ai_agents_ossa/agents/*.ossa.yaml"
-
-    # Hooks for tracking and logging
+      - modules/custom/ai_agents_ossa/agents/*.ossa.yaml
     hooks:
       before_execute: ai_agents_ossa_log_execution
       after_execute: ai_agents_ossa_track_moderation

package/dist/spec/v0.3.2/examples/multi-provider-identity.ossa.yaml

@@ -0,0 +1,205 @@
+apiVersion: ossa/v0.3.3
+kind: Agent
+metadata:
+  name: enterprise-deployer
+  version: 2.0.0
+  description: Enterprise deployment agent with multi-provider identity and compliance
+  labels:
+    team: platform
+    tier: production
+    compliance: soc2
+  annotations:
+    security.ossa.io/audit-level: high
+    security.ossa.io/mfa-required: "true"
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
+spec:
+  role: |
+    You are an enterprise deployment orchestrator responsible for managing
+    production deployments across multiple cloud providers and git platforms.
+    You must ensure all operations are auditable, compliant, and follow
+    the principle of least privilege.
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+    temperature: 0.1
+    max_tokens: 16000
+  identity:
+    provider: gitlab
+    service_account:
+      id: 31840535
+      username: bot-ci-local
+      email: bot-ci-local@bluefly.io
+      display_name: CI/CD Bot
+      roles:
+        - maintainer
+    authentication:
+      method: project_access_token
+      scopes:
+        - api
+        - read_repository
+        - write_repository
+        - read_registry
+        - write_registry
+      auto_refresh: true
+      expiry_warning_days: 14
+      rotation_policy:
+        enabled: true
+        interval_days: 90
+        notify_on_rotation: true
+    token_source:
+      env_var: GITLAB_BOT_CI_TOKEN
+      file_path: ~/.tokens/bot-ci-local
+      vault:
+        path: secret/data/ci/gitlab-token
+        key: token
+        role: ci-agent
+      kubernetes_secret:
+        name: gitlab-ci-token
+        namespace: ci-cd
+        key: token
+    patterns:
+      - "*/gitlab_components"
+      - "*/infrastructure/*"
+      - "**/deploy/**"
+      - "**/ci-cd/**"
+    fallback:
+      - provider: github
+        service_account:
+          username: enterprise-ci-bot
+          email: ci-bot@enterprise.com
+        token_source:
+          env_var: GITHUB_CI_TOKEN
+          vault:
+            path: secret/data/ci/github-token
+        condition:
+          platform_unavailable: true
+      - provider: azure-devops
+        service_account:
+          username: ado-ci-service
+          email: ci-service@enterprise.onmicrosoft.com
+        token_source:
+          azure_key_vault:
+            vault_url: https://enterprise-vault.vault.azure.net
+            secret_name: ado-ci-token
+        condition:
+          pattern_match:
+            - "**/azure/**"
+    dora_tracking:
+      enabled: true
+      metrics:
+        - deployment_frequency
+        - lead_time
+        - change_failure_rate
+        - mttr
+      labels:
+        environment: production
+        team: platform
+        cost_center: engineering
+      prometheus:
+        push_gateway: http://prometheus-pushgateway:9091
+        job_name: enterprise-deployer
+      classifications:
+        deployment_frequency:
+          elite: multiple_per_day
+          high: daily
+          medium: weekly
+          low: monthly
+        lead_time:
+          elite: "1"
+          high: "24"
+          medium: "168"
+          low: "720"
+    session:
+      init_on_start: true
+      propagate_to_subprocesses: true
+      git_attribution: true
+      heartbeat_interval: 60
+      timeout: 7200
+      hooks:
+        pre_prompt_submit: true
+        post_session: true
+    observability:
+      service_name: enterprise-deployer
+      service_namespace: production
+      service_version: 2.0.0
+      service_instance_id: ${HOSTNAME}
+      resource_attributes:
+        deployment.environment: production
+        cloud.provider: multi
+    compliance:
+      require_mfa: true
+      ip_allowlist:
+        - 10.0.0.0/8
+        - 172.16.0.0/12
+        - 192.168.0.0/16
+      audit_logging: required
+      data_residency: us-east-1
+      frameworks:
+        - SOC2
+        - ISO27001
+    security:
+      token_encryption: both
+      minimum_token_length: 40
+      prohibited_actions:
+        - delete_production_branch
+        - disable_branch_protection
+        - modify_security_policies
+      required_approvals:
+        force_push: true
+        delete_protected_branch: true
+        modify_ci_config: true
+      rate_limits:
+        requests_per_minute: 100
+        requests_per_hour: 2000
+        git_operations_per_hour: 200
+  tools:
+    - name: kubernetes
+      type: mcp
+      config:
+        server: kubernetes-mcp-server
+        allowed_namespaces:
+          - production
+          - staging
+    - name: terraform
+      type: mcp
+      config:
+        server: terraform-mcp-server
+        workspace: production
+    - name: git
+      type: mcp
+      config:
+        server: git-mcp-server
+  autonomy:
+    level: semi-autonomous
+    require_approval:
+      - deploy_to_production
+      - rollback_deployment
+      - scale_down_replicas
+      - modify_secrets
+    approval_timeout: 3600
+    escalation:
+      enabled: true
+      timeout: 1800
+      channels:
+        - slack://platform-oncall
+        - pagerduty://platform-critical
+  safety:
+    max_tokens_per_turn: 16000
+    rate_limits:
+      requests_per_minute: 30
+      max_concurrent_requests: 5
+    circuit_breaker:
+      enabled: true
+      failure_threshold: 5
+      recovery_timeout: 300
+    kill_switch:
+      enabled: true
+      trigger_conditions:
+        - error_rate > 0.5
+        - latency_p99 > 30000
+      recovery_requires_approval: true
+  state:
+    storage: redis
+    ttl: 86400
+    encryption: aes-256-gcm

package/dist/spec/{v0.3.0 → v0.3.2}/examples/quick-wins/complete-agent-with-quick-wins.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.0
+apiVersion: ossa/v0.3.3
 kind: Agent
 metadata:
   name: example-agent-quick-wins
@@ -6,10 +6,11 @@ metadata:
   labels:
     app: example
     version: v1.0.0
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
-  role: "Example agent demonstrating all quick-win capabilities"
-  
-  # 1. Health Monitoring Configuration
+  role: Example agent demonstrating all quick-win capabilities
   health:
     enabled: true
     endpoints:
@@ -22,8 +23,6 @@ spec:
       enabled: true
       max_restarts: 3
       restart_delay_seconds: 10
-  
-  # 2. Secrets Management
   secrets:
     provider: gitlab_vault
     injection:
@@ -39,8 +38,6 @@ spec:
     audit:
       enabled: true
       log_access: true
-  
-  # 3. LLM Configuration with Circuit Breaker (via retry)
   llm:
     provider: anthropic
     model: claude-sonnet-4
@@ -57,8 +54,6 @@ spec:
         timeout_ms: 60000
         half_open_max_calls: 3
         success_threshold: 2
-  
-  # 4. Error Handling with Aggregation
   error_handling:
     strategy: fail_fast
     aggregation:
@@ -74,8 +69,6 @@ spec:
           - timeout
           - rate_limit
           - validation
-  
-  # 5. State Management with Versioning & Conflict Resolution
   state:
     mode: long_running
     storage:
@@ -93,8 +86,6 @@ spec:
       enabled: true
       backup_interval_seconds: 300
       restore_on_startup: true
-  
-  # 6. Security Boundaries
   safety:
     content_filtering:
       enabled: true
@@ -115,8 +106,6 @@ spec:
       audit_logging:
         enabled: true
         retention_days: 90
-  
-  # 7. Rollback Configuration
   rollback:
     triggers:
       - health_check_failure
@@ -128,8 +117,6 @@ spec:
       notification_channels:
         - slack
         - email
-  
-  # 8. Testing Configuration (Optional)
   testing:
     framework: jest
     mock_llm:

package/dist/spec/v0.3.2/examples/tasks/data-transform.ossa.yaml

@@ -0,0 +1,137 @@
+apiVersion: ossa/v0.3.3
+kind: Task
+metadata:
+  name: transform-csv-to-json
+  version: 1.0.0
+  labels:
+    domain: data-engineering
+    tier: tier_1_read
+  annotations:
+    ossa.io/description: Transform CSV data to structured JSON
+    ossa.io/category: data-transformation
+    ossa.io/idempotent: "true"
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
+spec:
+  execution:
+    type: idempotent
+    runtime: any
+    entrypoint: transform
+    timeout_seconds: 300
+  capabilities:
+    - read_file
+    - parse_csv
+    - write_json
+    - validate_schema
+  input:
+    type: object
+    required:
+      - source_path
+      - target_path
+      - schema
+    properties:
+      source_path:
+        type: string
+        description: Path to source CSV file
+      target_path:
+        type: string
+        description: Path to output JSON file
+      schema:
+        type: object
+        description: JSON Schema for validation
+        properties:
+          columns:
+            type: array
+            items:
+              type: object
+              properties:
+                name:
+                  type: string
+                type:
+                  type: string
+                  enum:
+                    - string
+                    - integer
+                    - number
+                    - boolean
+                    - date
+                required:
+                  type: boolean
+      options:
+        type: object
+        properties:
+          delimiter:
+            type: string
+            default: ","
+          skip_header:
+            type: boolean
+            default: true
+          null_value:
+            type: string
+            default: ""
+          batch_size:
+            type: integer
+            default: 1000
+  output:
+    type: object
+    required:
+      - success
+      - records_processed
+    properties:
+      success:
+        type: boolean
+      records_processed:
+        type: integer
+        minimum: 0
+      records_failed:
+        type: integer
+        minimum: 0
+      output_path:
+        type: string
+      checksum:
+        type: string
+        description: SHA256 of output file
+      processing_time_ms:
+        type: integer
+  batch:
+    enabled: true
+    parallelism: 10
+    retry: 3
+    backoff_seconds: 5
+  error_handling:
+    on_failure: continue
+    retryable_errors:
+      - IO_ERROR
+      - MEMORY_LIMIT
+    fatal_errors:
+      - SCHEMA_MISMATCH
+      - INVALID_FORMAT
+runtime:
+  python:
+    read_file:
+      module: pathlib
+      class: Path
+      method: read_text
+    parse_csv:
+      module: csv
+      function: DictReader
+    write_json:
+      module: json
+      function: dump
+    validate_schema:
+      module: jsonschema
+      function: validate
+  node:
+    read_file:
+      module: fs/promises
+      function: readFile
+    parse_csv:
+      module: csv-parse
+      function: parse
+    write_json:
+      module: fs/promises
+      function: writeFile
+    validate_schema:
+      module: ajv
+      class: Ajv
+      method: validate