@bluefly/openstandardagents 0.3.2 → 0.3.5

package/spec/v0.3/registry/registry-contract.schema.json

@@ -0,0 +1,359 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://openstandardagents.org/schemas/v0.3.5/registry/registry-contract.json",
+  "title": "OSSA Agent Registry Contract",
+  "description": "Contract schema for OSSA agent registry - enables discovery, publishing, and validation of agents",
+  "type": "object",
+  "properties": {
+    "registry_version": {
+      "type": "string",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
+      "description": "Registry contract version"
+    },
+    "last_updated": {
+      "type": "string",
+      "format": "date-time",
+      "description": "Last update timestamp (ISO 8601)"
+    },
+    "agents": {
+      "type": "array",
+      "description": "List of registered agents",
+      "items": {
+        "$ref": "#/definitions/AgentEntry"
+      }
+    }
+  },
+  "required": ["registry_version", "last_updated", "agents"],
+  "additionalProperties": false,
+  "definitions": {
+    "AgentEntry": {
+      "type": "object",
+      "description": "Agent registry entry",
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*[a-z0-9]$",
+          "description": "Unique agent identifier (DNS-1123 subdomain)"
+        },
+        "name": {
+          "type": "string",
+          "description": "Human-readable agent name"
+        },
+        "version": {
+          "type": "string",
+          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(-[a-zA-Z0-9]+)?$",
+          "description": "Agent version (semver)"
+        },
+        "description": {
+          "type": "string",
+          "description": "Agent description"
+        },
+        "license": {
+          "type": "string",
+          "enum": ["Apache-2.0", "MIT", "BSD-3-Clause", "GPL-3.0", "Proprietary"],
+          "description": "License type"
+        },
+        "frameworks": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["langchain", "langgraph", "autogen", "crewai", "openai", "anthropic", "kagent", "mcp", "a2a"]
+          },
+          "description": "Supported frameworks"
+        },
+        "capabilities": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Agent capabilities (from OSSA taxonomy)"
+        },
+        "artifacts": {
+          "$ref": "#/definitions/Artifacts",
+          "description": "Bundle artifacts with checksums and metadata"
+        },
+        "security_posture": {
+          "$ref": "#/definitions/SecurityPosture",
+          "description": "Security and compliance posture"
+        },
+        "entrypoints": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Entrypoint"
+          },
+          "description": "Agent entrypoints (CLI, API, webhook, etc.)"
+        },
+        "signing": {
+          "$ref": "#/definitions/Signing",
+          "description": "Cryptographic signing metadata (optional)"
+        },
+        "sbom_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$",
+          "description": "SHA256 checksum of agent bundle SBOM (deprecated - use artifacts.sbom.sha256)"
+        },
+        "schema_version": {
+          "type": "string",
+          "pattern": "^0\\.3\\.[4-9]|^0\\.3\\.[0-9]+(-[a-zA-Z0-9]+)?$",
+          "description": "OSSA schema version"
+        },
+        "compat_matrix": {
+          "$ref": "#/definitions/CompatibilityMatrix",
+          "description": "Compatibility matrix"
+        },
+        "manifest_url": {
+          "type": "string",
+          "format": "uri",
+          "description": "URL to agent manifest (OSSA YAML)"
+        },
+        "bundle_url": {
+          "type": "string",
+          "format": "uri",
+          "description": "URL to agent bundle (tarball)"
+        },
+        "git_url": {
+          "type": "string",
+          "format": "uri",
+          "description": "Git repository URL"
+        },
+        "published_at": {
+          "type": "string",
+          "format": "date-time",
+          "description": "Publication timestamp"
+        },
+        "published_by": {
+          "type": "string",
+          "description": "Publisher identifier (GitHub username, GitLab username, etc.)"
+        },
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Searchable tags"
+        }
+      },
+      "required": ["id", "name", "version", "schema_version", "manifest_url"],
+      "additionalProperties": false
+    },
+    "SecurityPosture": {
+      "type": "object",
+      "description": "Security and compliance posture",
+      "properties": {
+        "compliance_level": {
+          "type": "string",
+          "enum": ["baseline", "enterprise", "fedramp", "hipaa", "soc2"],
+          "description": "Compliance level"
+        },
+        "audit_logging": {
+          "type": "boolean",
+          "description": "Audit logging enabled"
+        },
+        "encryption_at_rest": {
+          "type": "boolean",
+          "description": "Encryption at rest"
+        },
+        "encryption_in_transit": {
+          "type": "boolean",
+          "description": "Encryption in transit"
+        },
+        "network": {
+          "type": "object",
+          "properties": {
+            "egress": {
+              "type": "boolean",
+              "description": "Requires network egress (outbound connections)"
+            },
+            "ingress": {
+              "type": "boolean",
+              "description": "Requires network ingress (inbound connections)"
+            }
+          },
+          "description": "Network requirements"
+        },
+        "secrets": {
+          "type": "object",
+          "properties": {
+            "required": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "List of required secret names/keys"
+            }
+          },
+          "description": "Secret requirements"
+        },
+        "tools": {
+          "type": "object",
+          "properties": {
+            "exec": {
+              "type": "boolean",
+              "description": "Requires command execution capabilities"
+            },
+            "file_system": {
+              "type": "boolean",
+              "description": "Requires file system access"
+            }
+          },
+          "description": "Tool/capability requirements"
+        },
+        "k8s": {
+          "type": "object",
+          "properties": {
+            "rbac_summary": {
+              "type": "string",
+              "description": "Summary of required Kubernetes RBAC permissions"
+            }
+          },
+          "description": "Kubernetes-specific security requirements"
+        },
+        "vulnerability_scan": {
+          "type": "object",
+          "properties": {
+            "last_scan": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "critical": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "high": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "medium": {
+              "type": "integer",
+              "minimum": 0
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "CompatibilityMatrix": {
+      "type": "object",
+      "description": "Compatibility matrix",
+      "properties": {
+        "frameworks": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Framework version compatibility"
+        },
+        "runtimes": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["node", "python", "kubernetes", "docker", "serverless"]
+          },
+          "description": "Supported runtimes"
+        },
+        "os": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["linux", "darwin", "windows"]
+          },
+          "description": "Supported operating systems"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Artifacts": {
+      "type": "object",
+      "description": "Bundle artifacts with checksums and metadata",
+      "properties": {
+        "bundle": {
+          "type": "object",
+          "properties": {
+            "sha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$",
+              "description": "SHA256 checksum of bundle tarball"
+            },
+            "size": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Bundle size in bytes"
+            }
+          },
+          "required": ["sha256"],
+          "additionalProperties": false
+        },
+        "sbom": {
+          "type": "object",
+          "properties": {
+            "sha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$",
+              "description": "SHA256 checksum of SBOM"
+            },
+            "format": {
+              "type": "string",
+              "enum": ["spdx", "cyclonedx"],
+              "description": "SBOM format"
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "required": ["bundle"],
+      "additionalProperties": false
+    },
+    "Entrypoint": {
+      "type": "object",
+      "description": "Agent entrypoint configuration",
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": ["cli", "api", "webhook", "grpc"],
+          "description": "Entrypoint type"
+        },
+        "command": {
+          "type": "string",
+          "description": "Command to execute (for CLI type)"
+        },
+        "endpoint": {
+          "type": "string",
+          "format": "uri",
+          "description": "HTTP/gRPC endpoint URL (for API/webhook/grpc types)"
+        }
+      },
+      "required": ["type"],
+      "additionalProperties": false
+    },
+    "Signing": {
+      "type": "object",
+      "description": "Cryptographic signing metadata (optional, reserved for future use)",
+      "properties": {
+        "sigstore": {
+          "type": "object",
+          "properties": {
+            "bundle": {
+              "type": "string",
+              "format": "uri",
+              "description": "URL to Sigstore bundle"
+            }
+          },
+          "additionalProperties": false
+        },
+        "cosign": {
+          "type": "object",
+          "properties": {
+            "signature": {
+              "type": "string",
+              "format": "uri",
+              "description": "URL to Cosign signature"
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    }
+  }
+}

package/src/dev-cli/README.md

@@ -0,0 +1,53 @@
+# OSSA Developer CLI
+
+**Production tool in `src/`** - Separate from npm package, only for developers working on OSSA itself.
+
+## Purpose
+
+- **Version Management**: One command to release (`ossa-dev version:release`)
+- **Validation**: Validate version consistency (`ossa-dev version:validate`)
+- **Audit**: Find all hardcoded versions (`ossa-dev version:audit`)
+- **Spec Generation**: Generate spec in CI (`ossa-dev spec:generate`)
+
+## Architecture
+
+- **OpenAPI-First**: `openapi/dev-cli.openapi.yml` defines all commands
+- **Zod Validation**: All inputs/outputs validated with Zod schemas
+- **DRY**: Single source of truth (`.version.json`)
+- **SOLID**: Each command is a separate service
+
+## Commands
+
+```bash
+# Version Management
+ossa-dev version:release [patch|minor|major]  # One command to release
+ossa-dev version:validate                     # Validate consistency
+ossa-dev version:audit                        # Find hardcoded versions
+ossa-dev version:sync                         # Sync 0.3.4 placeholders
+ossa-dev version:replace <old> <new>         # Replace version in files
+
+# Spec Generation (for CI)
+ossa-dev spec:generate                        # Generate spec from source
+ossa-dev spec:validate                        # Validate generated spec
+
+# Workflow Help
+ossa-dev workflow:release                     # Show release workflow
+ossa-dev workflow:validate                    # Show validation workflow
+```
+
+## Installation
+
+```bash
+# Install dependencies
+npm install
+
+# Link locally
+npm link
+
+# Use
+ossa-dev version:release patch
+```
+
+## CI Integration
+
+The CI uses `ossa-dev spec:generate` to generate the spec from source, preventing local AI bots from breaking it.

package/src/dev-cli/src/index.ts

@@ -0,0 +1,47 @@
+#!/usr/bin/env tsx
+
+/**
+ * OSSA Developer CLI
+ *
+ * Separate from npm package - Only for developers working on OSSA itself.
+ *
+ * Architecture:
+ * - OpenAPI-First: openapi/dev-cli.openapi.yml defines all commands
+ * - Zod Validation: All inputs/outputs validated with Zod schemas
+ * - DRY: Single source of truth (.version.json)
+ * - SOLID: Each command is a separate service
+ */
+
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { versionCommand } from './commands/version.command.js';
+import { specCommand } from './commands/spec.command.js';
+import { workflowCommand } from './commands/workflow.command.js';
+import { releaseCommand } from './commands/release.command.js';
+import { v035Command } from './commands/v035.command.js';
+import { migrateCommand } from './commands/migrate.command.js';
+import { createEnvCleanupCommand } from './commands/env-cleanup.command.js';
+
+const program = new Command();
+
+program
+  .name('ossa-dev')
+  .description('OSSA Developer CLI - Version management and spec generation')
+  .version('1.0.0');
+
+// Add command groups
+program.addCommand(versionCommand);
+program.addCommand(specCommand);
+program.addCommand(workflowCommand);
+program.addCommand(releaseCommand);
+program.addCommand(v035Command);
+program.addCommand(migrateCommand);
+program.addCommand(createEnvCleanupCommand()); // TODO: Move to buildkit
+
+// Error handling
+program.configureOutput({
+  writeErr: (str) => process.stderr.write(chalk.red(str)),
+});
+
+// Parse arguments
+program.parse();

package/templates/platforms/cursor/code-assistant/manifest.ossa.yaml

@@ -0,0 +1,40 @@
+apiVersion: ossa.io/v1
+kind: Agent
+metadata:
+  name: ${AGENT_NAME}
+  version: 1.0.0
+  description: Cursor IDE code assistant agent
+spec:
+  role: |
+    You are a Cursor IDE code assistant agent specializing in:
+    - Code generation and refactoring
+    - TypeScript/JavaScript development
+    - Code review and quality assurance
+    - Test generation
+    - Documentation generation
+  
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+  
+  tools:
+    - type: capability
+      name: code_generation
+    - type: capability
+      name: code_review
+    - type: capability
+      name: test_generation
+  
+  integrations:
+    cursor:
+      enabled: true
+      mcp_servers:
+        - agent-buildkit
+        - agent-router
+        - agent-brain
+        - agent-mesh
+  
+  observability:
+    enabled: true
+    log_level: info
+    metrics_enabled: true

package/templates/platforms/drupal/content-agent/manifest.ossa.yaml

@@ -0,0 +1,39 @@
+apiVersion: ossa.io/v1
+kind: Agent
+metadata:
+  name: ${AGENT_NAME}
+  version: 1.0.0
+  description: Drupal content management and module development agent
+spec:
+  role: |
+    You are a Drupal content management agent specializing in:
+    - Content type and field management
+    - Module development and customization
+    - Drupal coding standards (PSR-12 + Drupal standards)
+    - Configuration management
+    - Theme development
+  
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+  
+  tools:
+    - type: capability
+      name: drupal_content_management
+    - type: capability
+      name: drupal_module_development
+    - type: capability
+      name: drupal_standards_enforcement
+  
+  integrations:
+    drupal:
+      enabled: true
+      version: 11
+      standards:
+        - psr12
+        - drupal_standards
+  
+  observability:
+    enabled: true
+    log_level: info
+    metrics_enabled: true

package/templates/platforms/gitlab/ci-agent/manifest.ossa.yaml

@@ -0,0 +1,41 @@
+apiVersion: ossa.io/v1
+kind: Agent
+metadata:
+  name: ${AGENT_NAME}
+  version: 1.0.0
+  description: GitLab CI/CD automation agent
+spec:
+  role: |
+    You are a GitLab CI/CD automation agent specializing in:
+    - Pipeline configuration and optimization
+    - CI/CD workflow automation
+    - GitLab component integration
+    - Build and deployment automation
+    - Pipeline failure diagnosis and remediation
+  
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+  
+  tools:
+    - type: capability
+      name: gitlab_ci_automation
+    - type: capability
+      name: pipeline_remediation
+    - type: capability
+      name: component_integration
+  
+  integrations:
+    gitlab:
+      enabled: true
+      api_version: v4
+      scopes:
+        - api
+        - read_repository
+        - write_repository
+  
+  observability:
+    enabled: true
+    log_level: info
+    metrics_enabled: true
+    tracing_enabled: true

package/templates/platforms/kubernetes/operator-agent/manifest.ossa.yaml

@@ -0,0 +1,39 @@
+apiVersion: ossa.io/v1
+kind: Agent
+metadata:
+  name: ${AGENT_NAME}
+  version: 1.0.0
+  description: Kubernetes operator agent for cluster management
+spec:
+  role: |
+    You are a Kubernetes operator agent specializing in:
+    - Cluster management and operations
+    - Resource deployment and scaling
+    - Service mesh coordination
+    - GitLab Agent integration
+    - OSSA agent deployment to Kubernetes
+  
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+  
+  tools:
+    - type: capability
+      name: kubernetes_operations
+    - type: capability
+      name: cluster_management
+    - type: capability
+      name: agent_deployment
+  
+  integrations:
+    kubernetes:
+      enabled: true
+      api_version: v1
+    gitlab_agent:
+      enabled: true
+  
+  observability:
+    enabled: true
+    log_level: info
+    metrics_enabled: true
+    tracing_enabled: true

package/templates/platforms/langflow/workflow-agent/manifest.ossa.yaml

@@ -0,0 +1,38 @@
+apiVersion: ossa.io/v1
+kind: Agent
+metadata:
+  name: ${AGENT_NAME}
+  version: 1.0.0
+  description: Langflow workflow orchestration agent
+spec:
+  role: |
+    You are a Langflow workflow orchestration agent specializing in:
+    - Workflow design and execution
+    - Multi-agent coordination
+    - Complex task orchestration
+    - Workflow optimization
+    - Integration with GitLab Flows
+  
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+  
+  tools:
+    - type: capability
+      name: workflow_orchestration
+    - type: capability
+      name: multi_agent_coordination
+    - type: capability
+      name: workflow_optimization
+  
+  integrations:
+    langflow:
+      enabled: true
+    gitlab_flows:
+      enabled: true
+  
+  observability:
+    enabled: true
+    log_level: info
+    metrics_enabled: true
+    tracing_enabled: true