@bluefly/openstandardagents 0.3.1 → 0.3.3

package/dist/spec/v0.3.3/runtime-bindings/anthropic.yaml

@@ -0,0 +1,209 @@
+# Anthropic Runtime Binding
+# OSSA v0.3.0 Runtime Binding for Anthropic Claude
+
+apiVersion: ossa/v0.3.0
+kind: RuntimeBinding
+metadata:
+  name: anthropic
+  version: "1.0.0"
+  description: Runtime binding for Anthropic Claude models
+  labels:
+    provider: anthropic
+    category: llm
+    tier: enterprise
+
+spec:
+  # Provider identification
+  provider: anthropic
+  apiVersion: "2024-01-01"
+  
+  # Default model configuration
+  defaultModel: claude-3-5-sonnet-20241022
+  
+  # Supported models with pricing and capabilities
+  models:
+    - id: claude-opus-4-5-20251101
+      name: Claude Opus 4.5
+      contextWindow: 200000
+      maxOutput: 8192
+      pricing:
+        input: 15.0    # per 1M tokens
+        output: 75.0   # per 1M tokens
+      capabilities:
+        - tool_use
+        - vision
+        - extended_thinking
+        - streaming
+      tier: enterprise
+      
+    - id: claude-sonnet-4-20250514
+      name: Claude Sonnet 4
+      contextWindow: 200000
+      maxOutput: 8192
+      pricing:
+        input: 3.0
+        output: 15.0
+      capabilities:
+        - tool_use
+        - vision
+        - streaming
+      tier: standard
+      
+    - id: claude-3-5-sonnet-20241022
+      name: Claude 3.5 Sonnet
+      contextWindow: 200000
+      maxOutput: 8192
+      pricing:
+        input: 3.0
+        output: 15.0
+      capabilities:
+        - tool_use
+        - vision
+        - streaming
+      tier: standard
+      recommended: true
+      
+    - id: claude-3-5-haiku-20241022
+      name: Claude 3.5 Haiku
+      contextWindow: 200000
+      maxOutput: 8192
+      pricing:
+        input: 0.8
+        output: 4.0
+      capabilities:
+        - tool_use
+        - streaming
+      tier: economy
+      
+    - id: claude-3-opus-20240229
+      name: Claude 3 Opus
+      contextWindow: 200000
+      maxOutput: 4096
+      pricing:
+        input: 15.0
+        output: 75.0
+      capabilities:
+        - tool_use
+        - vision
+        - streaming
+      tier: enterprise
+      
+    - id: claude-3-sonnet-20240229
+      name: Claude 3 Sonnet
+      contextWindow: 200000
+      maxOutput: 4096
+      pricing:
+        input: 3.0
+        output: 15.0
+      capabilities:
+        - tool_use
+        - vision
+        - streaming
+      tier: standard
+      deprecated: true
+      
+    - id: claude-3-haiku-20240307
+      name: Claude 3 Haiku
+      contextWindow: 200000
+      maxOutput: 4096
+      pricing:
+        input: 0.25
+        output: 1.25
+      capabilities:
+        - tool_use
+        - streaming
+      tier: economy
+
+  # Capability mapping configuration
+  capabilityMapping:
+    # How OSSA tools map to Anthropic format
+    toolFormat: tool_use
+    
+    # Tool input schema mapping
+    toolSchema:
+      wrapper: null  # Anthropic uses inline schema
+      inputKey: input_schema
+      outputKey: null  # Not supported
+      
+    # Message format mapping
+    messageFormat:
+      systemPrompt: separate  # System prompt is a separate parameter
+      userRole: user
+      assistantRole: assistant
+      toolResultRole: user  # Tool results sent as user messages
+      
+    # Content block mapping
+    contentBlocks:
+      text: text
+      image: image
+      toolUse: tool_use
+      toolResult: tool_result
+      
+    # Structured output support
+    structuredOutput: true
+    
+    # Streaming support
+    streaming: true
+    
+    # Vision/multimodal support
+    vision: true
+
+  # Rate limiting defaults
+  rateLimits:
+    requestsPerMinute: 1000
+    tokensPerMinute: 400000
+    tokensPerDay: 10000000
+
+  # Authentication configuration
+  authentication:
+    type: api_key
+    headerName: x-api-key
+    envVariable: ANTHROPIC_API_KEY
+
+  # Endpoint configuration
+  endpoints:
+    messages: https://api.anthropic.com/v1/messages
+    
+  # Request configuration
+  requestConfig:
+    timeout: 120000  # 2 minutes
+    retries: 3
+    retryDelay: 1000
+    retryBackoff: exponential
+
+  # Extension configuration
+  extensions:
+    # Anthropic-specific OSSA extension
+    anthropic:
+      description: Anthropic-specific configuration options
+      schema:
+        type: object
+        properties:
+          model:
+            type: string
+            description: Override model from manifest
+          system:
+            type: string
+            description: Custom system prompt
+          max_tokens:
+            type: integer
+            description: Maximum tokens to generate
+          temperature:
+            type: number
+            minimum: 0
+            maximum: 1
+          stop_sequences:
+            type: array
+            items:
+              type: string
+            description: Custom stop sequences
+          top_p:
+            type: number
+            minimum: 0
+            maximum: 1
+          top_k:
+            type: integer
+            minimum: 1
+          tools:
+            type: array
+            description: Additional Anthropic-native tools

package/dist/spec/{v0.3.0 → v0.3.3}/schemas/agent-unified.yaml

@@ -1,8 +1,8 @@
-# OSSA v0.3.0 - Unified Agent Schema
+# OSSA v0.3.3 - Unified Agent Schema
 # Universal agent platform: OSSA + GitLab Duo + Google A2A + MCP
 # Zero hardcoded models, runtime-agnostic, infrastructure-driven
 
-apiVersion: ossa/v0.3.0
+apiVersion: ossa/v0.3.3
 kind: Agent
 
 metadata:

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/capabilities.yaml

@@ -1,8 +1,8 @@
-# OSSA v0.3.0 - Capabilities Schema
+# OSSA v0.3.3 - Capabilities Schema
 # Google A2A and GitLab Duo compatible capability declarations
 
 $schema: http://json-schema.org/draft-07/schema#
-$id: https://openstandardagents.org/schemas/v0.3.0/capabilities.yaml
+$id: https://openstandardagents.org/schemas/v0.3.3/capabilities.yaml
 
 title: Agent Capabilities
 description: |

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/functions.yaml

@@ -1,8 +1,8 @@
-# OSSA v0.3.0 - Functions Schema
+# OSSA v0.3.3 - Functions Schema
 # Google A2A compatible function declarations (OpenAI function calling format)
 
 $schema: http://json-schema.org/draft-07/schema#
-$id: https://openstandardagents.org/schemas/v0.3.0/functions.yaml
+$id: https://openstandardagents.org/schemas/v0.3.3/functions.yaml
 
 title: Agent Functions
 description: |

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/messaging/channel.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://openstandardagents.org/schemas/v0.3.1/messaging/channel.json",
+  "$id": "https://openstandardagents.org/schemas/v0.3.3/messaging/channel.json",
   "title": "OSSA Channel Schema",
-  "description": "Schema for message channel configuration in OSSA v0.3.1",
+  "description": "Schema for message channel configuration in OSSA v0.3.3",
   "type": "object",
   "required": [
     "name",

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/messaging/delivery-receipt.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://openstandardagents.org/schemas/v0.3.1/messaging/delivery-receipt.json",
+  "$id": "https://openstandardagents.org/schemas/v0.3.3/messaging/delivery-receipt.json",
   "title": "OSSA Delivery Receipt Schema",
-  "description": "Schema for message delivery receipts in OSSA v0.3.1",
+  "description": "Schema for message delivery receipts in OSSA v0.3.3",
   "type": "object",
   "required": [
     "messageId",

package/dist/spec/{v0.3.0 → v0.3.3}/schemas/messaging/message.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://openstandardagents.org/schemas/v0.3.1/messaging/message.json",
+  "$id": "https://openstandardagents.org/schemas/v0.3.3/messaging/message.json",
   "title": "OSSA Message Schema",
-  "description": "Schema for Agent-to-Agent messages in OSSA v0.3.1",
+  "description": "Schema for Agent-to-Agent messages in OSSA v0.3.3",
   "type": "object",
   "required": [
     "id",
@@ -141,7 +141,7 @@
           "examples": [
             {
               "traceparent": "00-4bf92f3577b34da6a3ce929d0e0e4736-00f067aa0ba902b7-01",
-              "user-agent": "OSSA/0.3.1"
+              "user-agent": "OSSA/0.3.3"
             }
           ]
         }

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/messaging/subscription.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://openstandardagents.org/schemas/v0.3.1/messaging/subscription.json",
+  "$id": "https://openstandardagents.org/schemas/v0.3.3/messaging/subscription.json",
   "title": "OSSA Subscription Schema",
-  "description": "Schema for agent message subscriptions in OSSA v0.3.1",
+  "description": "Schema for agent message subscriptions in OSSA v0.3.3",
   "type": "object",
   "required": [
     "channel",

package/dist/spec/{v0.3.0 → v0.3.3}/schemas/runtime.yaml

@@ -1,8 +1,8 @@
-# OSSA v0.3.0 - Runtime Declaration Schema
+# OSSA v0.3.3 - Runtime Declaration Schema
 # Multi-runtime compatibility: Google A2A, GitLab Duo, OSSA Mesh, MCP
 
 $schema: http://json-schema.org/draft-07/schema#
-$id: https://openstandardagents.org/schemas/v0.3.0/runtime.yaml
+$id: https://openstandardagents.org/schemas/v0.3.3/runtime.yaml
 
 title: Agent Runtime Declaration
 description: |

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/taxonomy.yaml

@@ -1,12 +1,12 @@
-# OSSA Agent Taxonomy Schema v0.3.0
+# OSSA Agent Taxonomy Schema v0.3.3
 # Comprehensive hierarchical classification for AI agents
 # Aligned with OSSA spec roles, multi-agent patterns, and industry standards
 
-apiVersion: ossa/v0.3.0
+apiVersion: ossa/v0.3.3
 kind: Taxonomy
 metadata:
   name: agent-taxonomy
-  version: "0.3.0"
+  version: "0.3.3"
   description: |
     Formal agent taxonomy with hierarchical domains, cross-cutting capabilities,
     autonomy levels, and multi-agent orchestration patterns. Designed for

package/{spec/v0.3.0 → dist/spec/v0.3.3}/schemas/unified-llm.yaml

@@ -1,9 +1,9 @@
-# OSSA v0.3.0 - Unified LLM Configuration Schema
+# OSSA v0.3.3 - Unified LLM Configuration Schema
 # Compatible with: OSSA, GitLab Duo, Google A2A, MCP
 # Zero hardcoded models, runtime-configurable, multi-provider
 
 $schema: http://json-schema.org/draft-07/schema#
-$id: https://openstandardagents.org/schemas/v0.3.0/unified-llm.yaml
+$id: https://openstandardagents.org/schemas/v0.3.3/unified-llm.yaml
 
 title: Unified LLM Configuration
 description: |

package/dist/spec/{v0.3.0 → v0.3.3}/taxonomy.yaml

@@ -1,13 +1,22 @@
 # =============================================================================
-# OSSA v0.3.0 - Agent Taxonomy Specification
+# OSSA v0.3.3 - Agent Taxonomy Specification
 # =============================================================================
 # Hierarchical classification system for agents with cross-cutting concerns
-# Issue: https://gitlab.com/blueflyio/openstandardagents/-/issues/194
+# Now includes access tier integration for separation of duties
+# Issues:
+#   - https://gitlab.com/blueflyio/openstandardagents/-/issues/194 (taxonomy)
+#   - https://gitlab.com/blueflyio/openstandardagents/-/issues/363 (separation of duties)
 # =============================================================================
 
-apiVersion: ossa/v0.3.0
+apiVersion: ossa/v0.3.3
 kind: TaxonomySpec
-version: "1.0.0"
+version: "2.0.0"
+
+# =============================================================================
+# ACCESS TIER INTEGRATION
+# Links taxonomy to access_tiers.yaml for separation of duties
+# =============================================================================
+access_tier_reference: "./access_tiers.yaml"
 
 # =============================================================================
 # PRIMARY DOMAINS
@@ -177,24 +186,122 @@ concerns:
 
 # =============================================================================
 # AGENT TYPE CLASSIFICATION
-# Based on OSSA spec.type field
+# Based on OSSA spec.type field - now with access tier recommendations
 # =============================================================================
 agent_types:
+  analyzer:
+    description: "Read-only analysis, scanning, auditing - no modifications"
+    typical_domains: ["security", "development", "data"]
+    recommended_tier: tier_1_read
+    can_delegate_to: []
+
   worker:
-    description: "Executes specific tasks, no delegation"
-    typical_domains: ["development", "security", "documentation"]
+    description: "Executes specific tasks, limited write access"
+    typical_domains: ["development", "documentation", "content"]
+    recommended_tier: tier_2_write_limited
+    can_delegate_to: ["analyzer"]
+
+  operator:
+    description: "Modifies production systems, requires approval"
+    typical_domains: ["infrastructure", "agents"]
+    recommended_tier: tier_3_write_elevated
+    can_delegate_to: ["worker", "analyzer"]
 
   supervisor:
     description: "Coordinates other agents, can delegate"
     typical_domains: ["agents", "infrastructure"]
+    recommended_tier: tier_3_write_elevated
+    can_delegate_to: ["worker", "analyzer"]
 
   orchestrator:
     description: "High-level coordination, workflow management"
     typical_domains: ["agents"]
+    recommended_tier: tier_3_write_elevated
+    can_delegate_to: ["supervisor", "worker", "analyzer"]
+
+  governor:
+    description: "Defines policies, cannot execute - ISOLATED"
+    typical_domains: ["security", "agents"]
+    recommended_tier: tier_4_policy
+    can_delegate_to: ["operator"]  # Delegation only, not execution
+    isolation: strict
 
   specialist:
     description: "Deep expertise in narrow domain"
     typical_domains: ["security", "data", "backend"]
+    recommended_tier: tier_1_read  # Most specialists are analyzers
+    can_delegate_to: []
+
+  critic:
+    description: "Reviews and provides feedback, cannot approve"
+    typical_domains: ["development", "security"]
+    recommended_tier: tier_1_read
+    prohibited_actions: ["approve", "merge", "execute"]
+    can_delegate_to: []
+
+# =============================================================================
+# DOMAIN-TIER MAPPINGS
+# Recommended access tiers by domain for separation of duties
+# =============================================================================
+domain_tier_recommendations:
+  security:
+    default_tier: tier_1_read
+    rationale: "Security agents should analyze, not modify"
+    exceptions:
+      - role: remediator
+        tier: tier_3_write_elevated
+        requires: governor_approval
+      - role: policy_definer
+        tier: tier_4_policy
+
+  infrastructure:
+    default_tier: tier_3_write_elevated
+    rationale: "Infrastructure requires elevated access"
+    separation_required:
+      - readers: ["monitor", "cost_reporter"]
+        tier: tier_1_read
+      - operators: ["deployer", "provisioner"]
+        tier: tier_3_write_elevated
+
+  documentation:
+    default_tier: tier_2_write_limited
+    rationale: "Doc changes are low-risk"
+
+  development:
+    default_tier: tier_2_write_limited
+    rationale: "Code generation is sandboxed"
+    separation_required:
+      - critics: ["reviewer", "analyzer"]
+        tier: tier_1_read
+        prohibited: ["approve", "merge"]
+      - generators: ["scaffolder", "test_writer"]
+        tier: tier_2_write_limited
+
+  agents:
+    default_tier: tier_3_write_elevated
+    rationale: "Agent orchestration needs elevated access"
+    separation_required:
+      - governors: ["policy_definer", "compliance_enforcer"]
+        tier: tier_4_policy
+        isolation: strict
+      - orchestrators: ["coordinator", "scheduler"]
+        tier: tier_3_write_elevated
+
+  backend:
+    default_tier: tier_2_write_limited
+    separation_required:
+      - analyzers: ["db_analyzer", "api_auditor"]
+        tier: tier_1_read
+      - operators: ["db_migrator", "service_deployer"]
+        tier: tier_3_write_elevated
+
+  data:
+    default_tier: tier_1_read
+    rationale: "Data access is sensitive - read-only by default"
+    exceptions:
+      - role: etl_operator
+        tier: tier_3_write_elevated
+        requires: data_governance_approval
 
 # =============================================================================
 # USAGE IN AGENT MANIFESTS