@bluefly/openstandardagents 0.3.2 → 0.3.5

package/dist/spec/v0.3.2/schemas/unified-llm.yaml

@@ -1,91 +0,0 @@
-# OSSA v0.3.1 - Unified LLM Configuration Schema
-# Compatible with: OSSA, GitLab Duo, Google A2A, MCP
-# Zero hardcoded models, runtime-configurable, multi-provider
-
-$schema: http://json-schema.org/draft-07/schema#
-$id: https://openstandardagents.org/schemas/v0.3.1/unified-llm.yaml
-
-title: Unified LLM Configuration
-description: |
-  Universal LLM configuration that works across OSSA, GitLab Duo, Google A2A, and MCP.
-  Eliminates hardcoded model names and enables runtime model selection.
-
-type: object
-required:
-  - provider
-  - model
-properties:
-  provider:
-    type: string
-    description: LLM provider name (runtime-configurable via env var)
-    default: ${LLM_PROVIDER:-anthropic}
-    examples:
-      - anthropic
-      - openai
-      - google
-      - groq
-      - ollama
-      - bedrock
-
-  model:
-    type: string
-    description: Model identifier (runtime-configurable via env var)
-    default: ${LLM_MODEL:-claude-sonnet}
-    examples:
-      - claude-sonnet-4
-      - gpt-4o
-      - gemini-2.0-flash
-      - llama-3.3-70b
-      - mixtral-8x7b
-
-  profile:
-    type: string
-    description: Execution profile for task-specific optimization (A2A compatible)
-    default: ${LLM_PROFILE:-balanced}
-    enum:
-      - fast
-      - balanced
-      - deep
-      - safe
-
-  temperature:
-    type: number
-    description: Sampling temperature
-    default: ${LLM_TEMPERATURE:-0.1}
-    minimum: 0.0
-    maximum: 2.0
-
-  maxTokens:
-    type: integer
-    description: Maximum tokens in response
-    default: ${LLM_MAX_TOKENS:-16000}
-
-  topP:
-    type: number
-    description: Nucleus sampling threshold
-    default: ${LLM_TOP_P:-0.9}
-
-  fallback_models:
-    type: array
-    items:
-      type: object
-      required: [provider, model]
-      properties:
-        provider:
-          type: string
-        model:
-          type: string
-        condition:
-          type: string
-          enum: [on_error, on_timeout, on_rate_limit, always]
-
-  retry_config:
-    type: object
-    properties:
-      max_attempts:
-        type: integer
-        default: ${LLM_RETRY_ATTEMPTS:-3}
-      backoff_strategy:
-        type: string
-        enum: [exponential, linear, constant]
-        default: ${LLM_BACKOFF_STRATEGY:-exponential}

package/dist/spec/v0.3.2/taxonomy.yaml

@@ -1,363 +0,0 @@
-# =============================================================================
-# OSSA v0.3.2 - Agent Taxonomy Specification
-# =============================================================================
-# Hierarchical classification system for agents with cross-cutting concerns
-# Now includes access tier integration for separation of duties
-# Issues:
-#   - https://gitlab.com/blueflyio/openstandardagents/-/issues/194 (taxonomy)
-#   - https://gitlab.com/blueflyio/openstandardagents/-/issues/363 (separation of duties)
-# =============================================================================
-
-apiVersion: ossa/v0.3.2
-kind: TaxonomySpec
-version: "2.0.0"
-
-# =============================================================================
-# ACCESS TIER INTEGRATION
-# Links taxonomy to access_tiers.yaml for separation of duties
-# =============================================================================
-access_tier_reference: "./access_tiers.yaml"
-
-# =============================================================================
-# PRIMARY DOMAINS
-# Top-level classification - every agent belongs to exactly one domain
-# =============================================================================
-domains:
-  security:
-    description: "Authentication, authorization, encryption, compliance, vulnerability management"
-    subdomains:
-      - auth                 # Authentication & authorization
-      - encryption          # Encryption & key management
-      - compliance          # Regulatory compliance (SOC2, ISO, GDPR)
-      - vulnerability       # Vulnerability scanning & remediation
-      - secrets             # Secrets management & rotation
-      - threat-detection    # Threat detection & response
-    examples:
-      - security-scanner
-      - compliance-checker
-      - secret-detector
-      - threat-modeler
-
-  infrastructure:
-    description: "DevOps, CI/CD, deployment, configuration, cloud resources"
-    subdomains:
-      - ci-cd               # CI/CD pipeline management
-      - gitops              # GitOps workflows
-      - deployment          # Deployment automation
-      - configuration       # Configuration management
-      - networking          # Network configuration
-      - storage             # Storage management
-      - kubernetes          # Kubernetes orchestration
-      - cloud               # Cloud provider management
-    examples:
-      - deployment-manager
-      - pipeline-fixer
-      - infrastructure-provisioner
-      - incident-responder
-
-  documentation:
-    description: "Documentation, wiki, guides, knowledge management"
-    subdomains:
-      - api-docs            # API documentation
-      - user-guides         # User guides & tutorials
-      - wiki                # Wiki management
-      - knowledge-base      # Knowledge base management
-      - changelog           # Changelog & release notes
-    examples:
-      - documentation-generator
-      - wiki-manager
-      - api-docs-generator
-
-  backend:
-    description: "API, database, services, business logic"
-    subdomains:
-      - api                 # API design & implementation
-      - database            # Database management
-      - services            # Microservices
-      - messaging           # Message queues & events
-      - caching             # Caching strategies
-      - integration         # System integration
-    examples:
-      - api-builder
-      - database-migrator
-      - service-orchestrator
-
-  frontend:
-    description: "UI/UX, web, mobile interfaces"
-    subdomains:
-      - web                 # Web applications
-      - mobile              # Mobile applications
-      - design-system       # Design system components
-      - accessibility       # Accessibility (a11y)
-      - performance         # Frontend performance
-    examples:
-      - ui-reviewer
-      - accessibility-checker
-      - design-system-manager
-
-  data:
-    description: "Data engineering, analytics, ML/AI operations"
-    subdomains:
-      - analytics           # Business analytics
-      - ml-ops              # ML operations
-      - etl                 # Extract, transform, load
-      - data-quality        # Data quality & validation
-      - data-governance     # Data governance
-      - streaming           # Real-time data streaming
-    examples:
-      - analytics-collector
-      - ml-model-manager
-      - data-quality-checker
-
-  agents:
-    description: "OSSA agents, automation, orchestration, meta-operations"
-    subdomains:
-      - orchestration       # Multi-agent orchestration
-      - workers             # Worker agents
-      - supervisors         # Supervisor agents
-      - mesh                # Agent mesh networking
-      - training            # Agent training & improvement
-      - registry            # Agent registry management
-    examples:
-      - master-orchestrator
-      - agent-trainer
-      - workflow-builder
-
-  development:
-    description: "Software development, code quality, testing"
-    subdomains:
-      - code-review         # Code review automation
-      - testing             # Test generation & execution
-      - refactoring         # Code refactoring
-      - debugging           # Debugging assistance
-      - ide                 # IDE integration
-    examples:
-      - code-reviewer
-      - test-generator
-      - refactoring-assistant
-
-  content:
-    description: "Content management, editing, publishing"
-    subdomains:
-      - authoring           # Content authoring
-      - editing             # Content editing
-      - publishing          # Content publishing
-      - research            # Research & knowledge gathering
-      - localization        # Internationalization & localization
-    examples:
-      - content-orchestrator
-      - editor
-      - researcher
-      - publisher
-
-# =============================================================================
-# CROSS-CUTTING CONCERNS
-# Tags that can apply to any agent regardless of domain
-# An agent can have multiple concerns
-# =============================================================================
-concerns:
-  quality:
-    description: "Testing, code quality, standards enforcement"
-    applies_to: ["development", "backend", "frontend", "infrastructure"]
-
-  observability:
-    description: "Metrics, logging, tracing, monitoring"
-    applies_to: ["*"]  # All domains
-
-  governance:
-    description: "Policies, compliance, audit trails"
-    applies_to: ["*"]
-
-  performance:
-    description: "Optimization, caching, scaling"
-    applies_to: ["*"]
-
-  architecture:
-    description: "Design patterns, system structure"
-    applies_to: ["development", "backend", "infrastructure", "agents"]
-
-  cost:
-    description: "FinOps, resource optimization, budget management"
-    applies_to: ["infrastructure", "data", "agents"]
-
-  reliability:
-    description: "SRE, uptime, resilience, disaster recovery"
-    applies_to: ["infrastructure", "backend", "agents"]
-
-# =============================================================================
-# AGENT TYPE CLASSIFICATION
-# Based on OSSA spec.type field - now with access tier recommendations
-# =============================================================================
-agent_types:
-  analyzer:
-    description: "Read-only analysis, scanning, auditing - no modifications"
-    typical_domains: ["security", "development", "data"]
-    recommended_tier: tier_1_read
-    can_delegate_to: []
-
-  worker:
-    description: "Executes specific tasks, limited write access"
-    typical_domains: ["development", "documentation", "content"]
-    recommended_tier: tier_2_write_limited
-    can_delegate_to: ["analyzer"]
-
-  operator:
-    description: "Modifies production systems, requires approval"
-    typical_domains: ["infrastructure", "agents"]
-    recommended_tier: tier_3_write_elevated
-    can_delegate_to: ["worker", "analyzer"]
-
-  supervisor:
-    description: "Coordinates other agents, can delegate"
-    typical_domains: ["agents", "infrastructure"]
-    recommended_tier: tier_3_write_elevated
-    can_delegate_to: ["worker", "analyzer"]
-
-  orchestrator:
-    description: "High-level coordination, workflow management"
-    typical_domains: ["agents"]
-    recommended_tier: tier_3_write_elevated
-    can_delegate_to: ["supervisor", "worker", "analyzer"]
-
-  governor:
-    description: "Defines policies, cannot execute - ISOLATED"
-    typical_domains: ["security", "agents"]
-    recommended_tier: tier_4_policy
-    can_delegate_to: ["operator"]  # Delegation only, not execution
-    isolation: strict
-
-  specialist:
-    description: "Deep expertise in narrow domain"
-    typical_domains: ["security", "data", "backend"]
-    recommended_tier: tier_1_read  # Most specialists are analyzers
-    can_delegate_to: []
-
-  critic:
-    description: "Reviews and provides feedback, cannot approve"
-    typical_domains: ["development", "security"]
-    recommended_tier: tier_1_read
-    prohibited_actions: ["approve", "merge", "execute"]
-    can_delegate_to: []
-
-# =============================================================================
-# DOMAIN-TIER MAPPINGS
-# Recommended access tiers by domain for separation of duties
-# =============================================================================
-domain_tier_recommendations:
-  security:
-    default_tier: tier_1_read
-    rationale: "Security agents should analyze, not modify"
-    exceptions:
-      - role: remediator
-        tier: tier_3_write_elevated
-        requires: governor_approval
-      - role: policy_definer
-        tier: tier_4_policy
-
-  infrastructure:
-    default_tier: tier_3_write_elevated
-    rationale: "Infrastructure requires elevated access"
-    separation_required:
-      - readers: ["monitor", "cost_reporter"]
-        tier: tier_1_read
-      - operators: ["deployer", "provisioner"]
-        tier: tier_3_write_elevated
-
-  documentation:
-    default_tier: tier_2_write_limited
-    rationale: "Doc changes are low-risk"
-
-  development:
-    default_tier: tier_2_write_limited
-    rationale: "Code generation is sandboxed"
-    separation_required:
-      - critics: ["reviewer", "analyzer"]
-        tier: tier_1_read
-        prohibited: ["approve", "merge"]
-      - generators: ["scaffolder", "test_writer"]
-        tier: tier_2_write_limited
-
-  agents:
-    default_tier: tier_3_write_elevated
-    rationale: "Agent orchestration needs elevated access"
-    separation_required:
-      - governors: ["policy_definer", "compliance_enforcer"]
-        tier: tier_4_policy
-        isolation: strict
-      - orchestrators: ["coordinator", "scheduler"]
-        tier: tier_3_write_elevated
-
-  backend:
-    default_tier: tier_2_write_limited
-    separation_required:
-      - analyzers: ["db_analyzer", "api_auditor"]
-        tier: tier_1_read
-      - operators: ["db_migrator", "service_deployer"]
-        tier: tier_3_write_elevated
-
-  data:
-    default_tier: tier_1_read
-    rationale: "Data access is sensitive - read-only by default"
-    exceptions:
-      - role: etl_operator
-        tier: tier_3_write_elevated
-        requires: data_governance_approval
-
-# =============================================================================
-# USAGE IN AGENT MANIFESTS
-# =============================================================================
-# Example usage in OSSA agent manifest:
-#
-# metadata:
-#   name: security-scanner
-#   labels:
-#     domain: security
-#     subdomain: vulnerability
-#     concerns: quality,compliance
-#
-# spec:
-#   type: worker
-#   taxonomy:
-#     domain: security
-#     subdomain: vulnerability
-#     capability: scan_vulnerabilities
-#     concerns:
-#       - quality
-#       - compliance
-
-# =============================================================================
-# VALIDATION RULES
-# =============================================================================
-validation:
-  rules:
-    - name: valid-domain
-      description: "Domain must be from approved list"
-      severity: error
-
-    - name: valid-subdomain
-      description: "Subdomain must belong to specified domain"
-      severity: error
-
-    - name: concerns-applicable
-      description: "Concerns must be applicable to domain"
-      severity: warning
-
-    - name: type-domain-match
-      description: "Agent type should match typical domains"
-      severity: info
-
-# =============================================================================
-# MIGRATION FROM LEGACY
-# =============================================================================
-migration:
-  deprecated_domains:
-    ci-cd: { domain: infrastructure, subdomain: ci-cd }
-    gitops: { domain: infrastructure, subdomain: gitops }
-    deployment: { domain: infrastructure, subdomain: deployment }
-    configuration: { domain: infrastructure, subdomain: configuration }
-    cost-management: { domain: infrastructure, concerns: [cost] }
-    database: { domain: backend, subdomain: database }
-    performance: { concerns: [performance] }
-    observability: { concerns: [observability] }
-    governance: { concerns: [governance] }
-    architecture: { concerns: [architecture] }

package/examples/reference-implementations/curl-scripts/01-search-agents.sh

@@ -1,72 +0,0 @@
-#!/bin/bash
-#
-# OSSA API - Search Agents Example
-#
-# Demonstrates searching for agents using various filters.
-#
-
-set -e
-
-# Configuration
-BASE_URL="${OSSA_BASE_URL:-https://registry.openstandardagents.org/api/v1}"
-TOKEN="${OSSA_TOKEN:-}"
-
-echo "🔍 OSSA API - Search Agents Example"
-echo ""
-
-# 1. Search for security agents
-echo "1️⃣  Search for security agents..."
-curl -s "${BASE_URL}/agents?domain=security&limit=5&sort=downloads" \
-  -H "Accept: application/json" \
-  | jq '.agents[] | {name: .name, publisher: .publisher, version: .version, rating: .rating, downloads: .downloads}'
-
-echo ""
-
-# 2. Search with full-text query
-echo "2️⃣  Full-text search for 'vulnerability scanner'..."
-curl -s "${BASE_URL}/agents?q=vulnerability+scanner&limit=3" \
-  -H "Accept: application/json" \
-  | jq '.agents[] | {name: .name, description: .description}'
-
-echo ""
-
-# 3. Filter by capability
-echo "3️⃣  Filter by capability: vulnerability-detection..."
-curl -s "${BASE_URL}/agents?capability=vulnerability-detection&limit=3" \
-  -H "Accept: application/json" \
-  | jq '.agents[] | {name: .name, capabilities: .capabilities}'
-
-echo ""
-
-# 4. Filter by verified publishers only
-echo "4️⃣  Verified publishers only with minimum rating 4.0..."
-curl -s "${BASE_URL}/agents?verified=true&min_rating=4.0&limit=5" \
-  -H "Accept: application/json" \
-  | jq '.agents[] | {name: .name, publisher: .publisher, verified: .verified, rating: .rating}'
-
-echo ""
-
-# 5. Filter by compliance profile
-echo "5️⃣  Agents with FedRAMP moderate compliance..."
-curl -s "${BASE_URL}/agents?compliance=fedramp-moderate&limit=3" \
-  -H "Accept: application/json" \
-  | jq '.agents[] | {name: .name, compliance_profiles: .compliance_profiles}'
-
-echo ""
-
-# 6. Pagination example
-echo "6️⃣  Pagination - First page (10 results)..."
-curl -s "${BASE_URL}/agents?limit=10&offset=0" \
-  -H "Accept: application/json" \
-  | jq '{total: .total, limit: .limit, offset: .offset, count: (.agents | length)}'
-
-echo ""
-
-# 7. Combined filters
-echo "7️⃣  Combined filters: domain=security, license=Apache-2.0, min_rating=3.5..."
-curl -s "${BASE_URL}/agents?domain=security&license=Apache-2.0&min_rating=3.5" \
-  -H "Accept: application/json" \
-  | jq '.agents[] | {name: .name, license: .license, rating: .rating}'
-
-echo ""
-echo "✅ Search examples completed!"

package/examples/reference-implementations/curl-scripts/02-get-agent-details.sh

@@ -1,74 +0,0 @@
-#!/bin/bash
-#
-# OSSA API - Get Agent Details Example
-#
-# Demonstrates retrieving detailed information about agents.
-#
-
-set -e
-
-# Configuration
-BASE_URL="${OSSA_BASE_URL:-https://registry.openstandardagents.org/api/v1}"
-PUBLISHER="${1:-blueflyio}"
-AGENT_NAME="${2:-security-scanner}"
-
-echo "📋 OSSA API - Get Agent Details Example"
-echo ""
-
-# 1. Get latest version of agent
-echo "1️⃣  Get agent details: ${PUBLISHER}/${AGENT_NAME}..."
-curl -s "${BASE_URL}/agents/${PUBLISHER}/${AGENT_NAME}" \
-  -H "Accept: application/json" \
-  | jq '{
-      name: .name,
-      version: .version,
-      publisher: .publisher.name,
-      verified: .publisher.verified,
-      description: .description,
-      license: .license,
-      taxonomy: .taxonomy,
-      capabilities: .capabilities,
-      downloads: .download_stats,
-      rating: .rating_info
-    }'
-
-echo ""
-
-# 2. List all versions
-echo "2️⃣  List all versions of ${PUBLISHER}/${AGENT_NAME}..."
-curl -s "${BASE_URL}/agents/${PUBLISHER}/${AGENT_NAME}/versions" \
-  -H "Accept: application/json" \
-  | jq '.versions[] | {version: .version, published_at: .published_at, downloads: .downloads, deprecated: .deprecated}'
-
-echo ""
-
-# 3. Get specific version
-echo "3️⃣  Get specific version details..."
-VERSION=$(curl -s "${BASE_URL}/agents/${PUBLISHER}/${AGENT_NAME}/versions" \
-  -H "Accept: application/json" \
-  | jq -r '.versions[0].version')
-
-if [ -n "$VERSION" ]; then
-  curl -s "${BASE_URL}/agents/${PUBLISHER}/${AGENT_NAME}/${VERSION}" \
-    -H "Accept: application/json" \
-    | jq '{name: .name, version: .version, created_at: .created_at, manifest_url: .manifest_url}'
-fi
-
-echo ""
-
-# 4. Get agent dependencies
-echo "4️⃣  Get agent dependencies..."
-curl -s "${BASE_URL}/agents/${PUBLISHER}/${AGENT_NAME}/dependencies" \
-  -H "Accept: application/json" \
-  | jq '{agent: .agent, version: .version, dependencies: .dependencies}'
-
-echo ""
-
-# 5. Get download statistics
-echo "5️⃣  Get download statistics (last month)..."
-curl -s "${BASE_URL}/agents/${PUBLISHER}/${AGENT_NAME}/stats?period=month" \
-  -H "Accept: application/json" \
-  | jq '{agent: .agent, period: .period, downloads: .downloads.total}'
-
-echo ""
-echo "✅ Agent details examples completed!"