@bluefly/openstandardagents 0.3.3 → 0.3.5

package/spec/v0.3.3/examples/access-tiers/doc-generator.ossa.yaml

@@ -1,98 +0,0 @@
-apiVersion: ossa/v0.3.3
-kind: Agent
-metadata:
-  name: doc-generator
-  version: 1.0.0
-  description: Documentation generator agent with sandboxed write access
-  labels:
-    team: platform
-    access_tier: tier_2_write_limited
-    domain: documentation
-  annotations:
-    ossa.io/migration: v0.3.3-to-v0.3.3
-    ossa.io/migrated-date: 2026-01-07
-spec:
-  type: worker
-  role: |
-    You are a documentation generator that creates and updates documentation
-    based on code analysis. You can write to documentation files, create
-    test files, and scaffold new structures.
-
-    IMPORTANT: You cannot modify production code or merge changes. All changes
-    must go through review by a human or supervisor agent.
-  llm:
-    provider: anthropic
-    model: claude-sonnet-4-20250514
-    temperature: 0.3
-  taxonomy:
-    domain: documentation
-    subdomain: api-docs
-    capability: generate_documentation
-    concerns:
-      - quality
-      - architecture
-  access:
-    tier: tier_2_write_limited
-    permissions:
-      - read_code
-      - read_configs
-      - write_docs
-      - write_tests
-      - create_issues
-      - create_mrs_draft
-      - execute_sandboxed
-    prohibited:
-      - write_production_code
-      - merge_mrs
-      - delete_branches
-      - modify_infrastructure
-    audit_level: standard
-    requires_approval: false
-  separation:
-    role: documenter
-    conflicts_with:
-      - executor
-      - deployer
-    can_delegate_to:
-      - analyzer
-  delegation:
-    enabled: true
-    allowed_tiers:
-      - tier_1_read
-    allowed_operations:
-      - analyze_code
-      - scan_dependencies
-    requires:
-      - task_specification
-  tools:
-    - name: filesystem
-      type: mcp
-      config:
-        server: filesystem-mcp-server
-        paths:
-          - docs/**
-          - tests/**
-          - README.md
-    - name: code-reader
-      type: mcp
-      config:
-        server: filesystem-mcp-server
-        read_only: true
-  autonomy:
-    level: assisted
-    allowed_actions:
-      - read_code
-      - write_documentation
-      - create_draft_mr
-    blocked_actions:
-      - modify_production_code
-      - merge_changes
-      - deploy
-  identity:
-    provider: gitlab
-    service_account:
-      username: bot-docs
-      email: bot-docs@bluefly.io
-    token_source:
-      env_var: GITLAB_BOT_DOCS_TOKEN
-      file_path: ~/.tokens/bot-docs

package/spec/v0.3.3/examples/access-tiers/security-scanner.ossa.yaml

@@ -1,118 +0,0 @@
-apiVersion: ossa/v0.3.3
-kind: Agent
-metadata:
-  name: security-scanner
-  version: 1.0.0
-  description: Security vulnerability scanner - read-only analysis agent
-  labels:
-    team: security
-    access_tier: tier_1_read
-    domain: security
-  annotations:
-    ossa.io/migration: v0.3.3-to-v0.3.3
-    ossa.io/migrated-date: 2026-01-07
-spec:
-  type: analyzer
-  role: |
-    You are a security vulnerability scanner that analyzes code for potential
-    security issues. You can read code, scan dependencies, and report findings.
-
-    IMPORTANT: You cannot modify code, approve changes, or execute remediations.
-    You must report findings to a tier_3 remediator agent for action.
-  llm:
-    provider: anthropic
-    model: claude-sonnet-4-20250514
-    temperature: 0.1
-  taxonomy:
-    domain: security
-    subdomain: vulnerability
-    capability: scan_vulnerabilities
-    concerns:
-      - quality
-      - governance
-    recommended_tier: tier_1_read
-  access:
-    tier: tier_1_read
-    permissions:
-      - read_code
-      - read_configs
-      - read_logs
-      - execute_queries
-    prohibited:
-      - write_*
-      - delete_*
-      - execute_commands
-      - modify_infrastructure
-    audit_level: standard
-    requires_approval: false
-  separation:
-    role: scanner
-    conflicts_with:
-      - remediator
-      - executor
-      - approver
-    prohibited_actions:
-      - execute
-      - merge
-      - approve
-  tools:
-    - name: code-reader
-      type: mcp
-      config:
-        server: filesystem-mcp-server
-        read_only: true
-    - name: dependency-scanner
-      type: api
-      config:
-        endpoint: https://api.security.local/scan
-        method: GET
-  autonomy:
-    level: semi_autonomous
-    allowed_actions:
-      - scan_code
-      - generate_report
-      - create_issue
-    blocked_actions:
-      - modify_code
-      - execute_fix
-      - approve_mr
-  safety:
-    content_filtering:
-      enabled: true
-      categories:
-        - credentials
-        - pii
-      action: redact
-    rate_limiting:
-      enabled: true
-      requests_per_minute: 60
-  observability:
-    metrics:
-      enabled: true
-      customMetrics:
-        - name: vulnerabilities_found
-          type: counter
-          description: Total vulnerabilities detected
-        - name: scan_duration_seconds
-          type: histogram
-          description: Time to complete security scan
-  messaging:
-    publishes:
-      - channel: security.vulnerabilities
-        description: Vulnerability findings for remediation
-        schema:
-          type: object
-          properties:
-            severity:
-              type: string
-              enum:
-                - critical
-                - high
-                - medium
-                - low
-            cve:
-              type: string
-            affected_file:
-              type: string
-            remediation_required:
-              type: boolean

package/spec/v0.3.3/examples/agent-with-identity.ossa.yaml

@@ -1,63 +0,0 @@
-apiVersion: ossa/v0.3.3
-kind: Agent
-metadata:
-  name: typescript-worker
-  version: 1.0.0
-  description: TypeScript development agent with GitLab service account identity
-  labels:
-    team: platform
-    tier: development
-  annotations:
-    ossa.io/migration: v0.3.3-to-v0.3.3
-    ossa.io/migrated-date: 2026-01-07
-spec:
-  role: |
-    You are a TypeScript development assistant that manages code changes
-    for the agent-buildkit and related TypeScript projects.
-  llm:
-    provider: anthropic
-    model: claude-sonnet-4-20250514
-    temperature: 0.2
-  identity:
-    provider: gitlab
-    service_account:
-      id: 31840529
-      username: bot-ts-local
-      email: bot-ts-local@bluefly.io
-    token_source:
-      env_var: GITLAB_BOT_TS_TOKEN
-      file_path: ~/.tokens/bot-ts-local
-    patterns:
-      - "*/common_npm/*"
-      - "*/agent-buildkit"
-      - "*/agent-studio"
-    dora_tracking:
-      enabled: true
-      metrics:
-        - deployment_frequency
-        - lead_time
-        - change_failure_rate
-        - mttr
-    observability:
-      service_name: typescript-worker
-      service_namespace: development
-      service_version: 1.0.0
-  tools:
-    - name: git
-      type: mcp
-      config:
-        server: git-mcp-server
-    - name: file-operations
-      type: mcp
-      config:
-        server: filesystem-mcp-server
-  autonomy:
-    level: supervised
-    require_approval:
-      - push_to_protected_branch
-      - delete_branch
-      - force_push
-  safety:
-    max_tokens_per_turn: 8000
-    rate_limits:
-      requests_per_minute: 30

package/spec/v0.3.3/examples/drupal-content-writer.ossa.yaml

@@ -1,91 +0,0 @@
-apiVersion: ossa/v0.3.3
-kind: Agent
-metadata:
-  name: drupal-content-writer
-  version: 1.0.0
-  description: Autonomous content generation agent for Drupal with background processing
-  annotations:
-    ossa.io/migration: v0.3.3-to-v0.3.3
-    ossa.io/migrated-date: 2026-01-07
-spec:
-  capabilities:
-    - name: content.create
-      description: Create Drupal content entities (nodes, taxonomy terms)
-    - name: seo.optimize
-      description: Optimize content for SEO (meta tags, keywords, structure)
-    - name: media.select
-      description: Select relevant media from media library
-  role: >
-    You are an autonomous content writer for a Drupal website. You generate
-    high-quality articles
-
-    based on content briefs, optimize them for SEO, and select appropriate media
-    assets.
-
-
-    Process:
-
-    1. Analyze content brief and target audience
-
-    2. Research topic using available tools
-
-    3. Generate article with proper structure (H1, H2, paragraphs)
-
-    4. Optimize for SEO (meta description, keywords, readability)
-
-    5. Select relevant images from media library
-
-    6. Create content entity in Drupal
-  llm:
-    provider: ${OSSA_LLM_PROVIDER:-anthropic}
-    model: ${OSSA_LLM_MODEL:-claude-sonnet-4}
-    temperature: ${OSSA_LLM_TEMPERATURE:-0.7}
-    maxTokens: ${OSSA_LLM_MAX_TOKENS:-8192}
-  tools:
-    - name: drupal.node.create
-      description: Create a new Drupal node (article, page, etc.)
-      handler:
-        runtime: drupal
-        capability: node.create
-    - name: drupal.taxonomy.search
-      description: Search taxonomy terms for tagging
-      handler:
-        runtime: drupal
-        capability: taxonomy.search
-    - name: drupal.media.search
-      description: Search media library for images
-      handler:
-        runtime: drupal
-        capability: media.search
-extensions:
-  drupal:
-    module: ai_agents_ossa
-    config_entity: true
-    permissions:
-      entity_permissions:
-        - create article content
-        - create page content
-        - edit own article content
-        - view media
-        - view taxonomy term
-      custom_permissions:
-        - execute content writer agent
-        - generate ai content
-      execution_user: "1"
-      permission_mode: agent_only
-    messenger:
-      transport: redis
-      queue: content_generation
-      retry_strategy:
-        max_retries: 3
-        delay: 2000
-        multiplier: 2
-        max_delay: 30000
-    workflow_engine: eca
-    discovery_paths:
-      - config/agents/*.ossa.yaml
-      - modules/custom/ai_agents_ossa/agents/*.ossa.yaml
-    hooks:
-      before_execute: ai_agents_ossa_content_writer_before
-      after_execute: ai_agents_ossa_content_writer_after
-      on_error: ai_agents_ossa_content_writer_error

package/spec/v0.3.3/examples/drupal-moderation-assistant.ossa.yaml

@@ -1,80 +0,0 @@
-apiVersion: ossa/v0.3.3
-kind: Agent
-metadata:
-  name: drupal-moderation-assistant
-  version: 1.0.0
-  description: Content moderation assistant that helps users review and publish content
-  annotations:
-    ossa.io/migration: v0.3.3-to-v0.3.3
-    ossa.io/migrated-date: 2026-01-07
-spec:
-  capabilities:
-    - name: content.review
-      description: Review content for quality, SEO, and compliance
-    - name: moderation.suggest
-      description: Suggest moderation workflow transitions
-    - name: quality.score
-      description: Score content quality based on criteria
-  role: >
-    You are a content moderation assistant helping editors review and publish
-    content.
-
-    You work within the user's permission context and respect Drupal's editorial
-    workflow.
-
-
-    Responsibilities:
-
-    1. Review content for quality, readability, and SEO
-
-    2. Check content against style guide and compliance rules
-
-    3. Suggest appropriate moderation state transitions
-
-    4. Provide actionable feedback for improvement
-
-
-    You can only suggest transitions the user is authorized to perform.
-  llm:
-    provider: ${OSSA_LLM_PROVIDER:-anthropic}
-    model: ${OSSA_LLM_MODEL:-claude-sonnet-4}
-    temperature: ${OSSA_LLM_TEMPERATURE:-0.3}
-    maxTokens: ${OSSA_LLM_MAX_TOKENS:-4096}
-  tools:
-    - name: drupal.node.load
-      description: Load a Drupal node for review
-      handler:
-        runtime: drupal
-        capability: node.load
-    - name: drupal.moderation.transitions
-      description: Get available moderation transitions for user
-      handler:
-        runtime: drupal
-        capability: moderation.get_transitions
-    - name: drupal.moderation.apply
-      description: Apply moderation state transition
-      handler:
-        runtime: drupal
-        capability: moderation.apply_transition
-extensions:
-  drupal:
-    module: ai_agents_ossa
-    config_entity: true
-    permissions:
-      entity_permissions:
-        - view any article content
-        - edit any article content
-        - use editorial transition review
-        - use editorial transition publish
-      custom_permissions:
-        - use moderation assistant
-      permission_mode: least_permissive
-    messenger:
-      transport: sync
-    workflow_engine: eca
-    discovery_paths:
-      - modules/custom/ai_agents_ossa/agents/*.ossa.yaml
-    hooks:
-      before_execute: ai_agents_ossa_log_execution
-      after_execute: ai_agents_ossa_track_moderation
-      on_error: ai_agents_ossa_alert_admin

package/spec/v0.3.3/examples/multi-provider-identity.ossa.yaml

@@ -1,205 +0,0 @@
-apiVersion: ossa/v0.3.3
-kind: Agent
-metadata:
-  name: enterprise-deployer
-  version: 2.0.0
-  description: Enterprise deployment agent with multi-provider identity and compliance
-  labels:
-    team: platform
-    tier: production
-    compliance: soc2
-  annotations:
-    security.ossa.io/audit-level: high
-    security.ossa.io/mfa-required: "true"
-    ossa.io/migration: v0.3.3-to-v0.3.3
-    ossa.io/migrated-date: 2026-01-07
-spec:
-  role: |
-    You are an enterprise deployment orchestrator responsible for managing
-    production deployments across multiple cloud providers and git platforms.
-    You must ensure all operations are auditable, compliant, and follow
-    the principle of least privilege.
-  llm:
-    provider: anthropic
-    model: claude-sonnet-4-20250514
-    temperature: 0.1
-    max_tokens: 16000
-  identity:
-    provider: gitlab
-    service_account:
-      id: 31840535
-      username: bot-ci-local
-      email: bot-ci-local@bluefly.io
-      display_name: CI/CD Bot
-      roles:
-        - maintainer
-    authentication:
-      method: project_access_token
-      scopes:
-        - api
-        - read_repository
-        - write_repository
-        - read_registry
-        - write_registry
-      auto_refresh: true
-      expiry_warning_days: 14
-      rotation_policy:
-        enabled: true
-        interval_days: 90
-        notify_on_rotation: true
-    token_source:
-      env_var: GITLAB_BOT_CI_TOKEN
-      file_path: ~/.tokens/bot-ci-local
-      vault:
-        path: secret/data/ci/gitlab-token
-        key: token
-        role: ci-agent
-      kubernetes_secret:
-        name: gitlab-ci-token
-        namespace: ci-cd
-        key: token
-    patterns:
-      - "*/gitlab_components"
-      - "*/infrastructure/*"
-      - "**/deploy/**"
-      - "**/ci-cd/**"
-    fallback:
-      - provider: github
-        service_account:
-          username: enterprise-ci-bot
-          email: ci-bot@enterprise.com
-        token_source:
-          env_var: GITHUB_CI_TOKEN
-          vault:
-            path: secret/data/ci/github-token
-        condition:
-          platform_unavailable: true
-      - provider: azure-devops
-        service_account:
-          username: ado-ci-service
-          email: ci-service@enterprise.onmicrosoft.com
-        token_source:
-          azure_key_vault:
-            vault_url: https://enterprise-vault.vault.azure.net
-            secret_name: ado-ci-token
-        condition:
-          pattern_match:
-            - "**/azure/**"
-    dora_tracking:
-      enabled: true
-      metrics:
-        - deployment_frequency
-        - lead_time
-        - change_failure_rate
-        - mttr
-      labels:
-        environment: production
-        team: platform
-        cost_center: engineering
-      prometheus:
-        push_gateway: http://prometheus-pushgateway:9091
-        job_name: enterprise-deployer
-      classifications:
-        deployment_frequency:
-          elite: multiple_per_day
-          high: daily
-          medium: weekly
-          low: monthly
-        lead_time:
-          elite: "1"
-          high: "24"
-          medium: "168"
-          low: "720"
-    session:
-      init_on_start: true
-      propagate_to_subprocesses: true
-      git_attribution: true
-      heartbeat_interval: 60
-      timeout: 7200
-      hooks:
-        pre_prompt_submit: true
-        post_session: true
-    observability:
-      service_name: enterprise-deployer
-      service_namespace: production
-      service_version: 2.0.0
-      service_instance_id: ${HOSTNAME}
-      resource_attributes:
-        deployment.environment: production
-        cloud.provider: multi
-    compliance:
-      require_mfa: true
-      ip_allowlist:
-        - 10.0.0.0/8
-        - 172.16.0.0/12
-        - 192.168.0.0/16
-      audit_logging: required
-      data_residency: us-east-1
-      frameworks:
-        - SOC2
-        - ISO27001
-    security:
-      token_encryption: both
-      minimum_token_length: 40
-      prohibited_actions:
-        - delete_production_branch
-        - disable_branch_protection
-        - modify_security_policies
-      required_approvals:
-        force_push: true
-        delete_protected_branch: true
-        modify_ci_config: true
-      rate_limits:
-        requests_per_minute: 100
-        requests_per_hour: 2000
-        git_operations_per_hour: 200
-  tools:
-    - name: kubernetes
-      type: mcp
-      config:
-        server: kubernetes-mcp-server
-        allowed_namespaces:
-          - production
-          - staging
-    - name: terraform
-      type: mcp
-      config:
-        server: terraform-mcp-server
-        workspace: production
-    - name: git
-      type: mcp
-      config:
-        server: git-mcp-server
-  autonomy:
-    level: semi-autonomous
-    require_approval:
-      - deploy_to_production
-      - rollback_deployment
-      - scale_down_replicas
-      - modify_secrets
-    approval_timeout: 3600
-    escalation:
-      enabled: true
-      timeout: 1800
-      channels:
-        - slack://platform-oncall
-        - pagerduty://platform-critical
-  safety:
-    max_tokens_per_turn: 16000
-    rate_limits:
-      requests_per_minute: 30
-      max_concurrent_requests: 5
-    circuit_breaker:
-      enabled: true
-      failure_threshold: 5
-      recovery_timeout: 300
-    kill_switch:
-      enabled: true
-      trigger_conditions:
-        - error_rate > 0.5
-        - latency_p99 > 30000
-      recovery_requires_approval: true
-  state:
-    storage: redis
-    ttl: 86400
-    encryption: aes-256-gcm