@bluefly/openstandardagents 0.3.3 → 0.3.5

package/examples/ossa-templates/13-accessibility-champion.ossa.yaml

@@ -0,0 +1,264 @@
+apiVersion: ossa/v0.3
+kind: Agent
+metadata:
+  name: accessibility-champion
+  version: 1.0.0
+  description: Accessibility Champion - WCAG 2.1 AA compliance, ARIA best practices, keyboard navigation
+  labels:
+    ossa-version: v0.3.5
+    domain: accessibility
+    category: a11y
+    tier: worker
+    priority: P0
+    skill.priority: '85'
+    skill.contexts: development,review
+spec:
+  taxonomy:
+    domain: frontend
+    subdomain: accessibility
+    capability: a11y_enforcement
+  role: 'You are the Accessibility Champion, ensuring WCAG 2.1 AA compliance across all interfaces.
+
+
+    Your mission:
+
+    1. Enforce WCAG 2.1 AA standards (4.5:1 contrast, keyboard navigation)
+
+    2. Ensure proper ARIA labels and roles
+
+    3. Validate semantic HTML structure
+
+    4. Check keyboard accessibility (tab order, focus management)
+
+    5. Verify screen reader compatibility
+
+    6. Ensure color is not the only indicator
+
+
+    Priority Rules:
+
+    - CRITICAL: WCAG 2.1 AA contrast ratios (4.5:1 for text)
+
+    - CRITICAL: Keyboard navigation for all interactive elements
+
+    - HIGH: ARIA labels for all interactive elements
+
+    - HIGH: Semantic HTML (nav, main, article, etc.)
+
+    - MEDIUM: Focus indicators visible
+
+    - LOW: Reduced motion support'
+  llm:
+    provider: ${LLM_PROVIDER:-anthropic}
+    model: ${LLM_MODEL:-claude-sonnet-4-20250514}
+    temperature: 0.1
+    maxTokens: 16384
+  runtime:
+    triggers:
+      keywords:
+      - accessibility
+      - a11y
+      - wcag
+      - aria
+      - keyboard
+      - screen-reader
+      - contrast
+      file_patterns:
+      - '**/*.{tsx,jsx,html}'
+      - '**/components/**'
+      frameworks:
+      - react
+      - next.js
+      - html
+    activation:
+      automatic: true
+      confidence_threshold: 0.7
+extensions:
+  experts:
+    registry:
+    - id: deep-analysis-expert
+      name: Deep Performance Analysis Expert
+      model:
+        provider: anthropic
+        model: claude-opus-4-5-20251101
+      specializations:
+      - wcag_compliance
+      - aria_best_practices
+      - keyboard_navigation
+      cost_tier: premium
+      capabilities:
+        extended_thinking: true
+        max_tokens: 200000
+        reasoning_depth: deep
+    - id: standard-analysis-expert
+      name: Standard Performance Expert
+      model:
+        provider: anthropic
+        model: claude-sonnet-4-20250514
+      specializations:
+      - wcag_compliance
+      - aria_best_practices
+      - keyboard_navigation
+      cost_tier: standard
+      capabilities:
+        max_tokens: 16384
+        reasoning_depth: balanced
+    - id: quick-scan-expert
+      name: Quick Performance Scan Expert
+      model:
+        provider: google
+        model: gemini-2.0-flash
+      specializations:
+      - wcag_compliance
+      - aria_best_practices
+      - keyboard_navigation
+      cost_tier: economy
+      capabilities:
+        max_tokens: 8192
+        reasoning_depth: fast
+    selection_strategy: agent_controlled
+  bat:
+    selection_criteria:
+    - dimension: analysis_complexity
+      required: true
+      options:
+      - value: complex
+        technologies:
+        - claude-opus
+        - gpt-4-turbo
+        cost_tier: premium
+        use_case: Deep bundle analysis, complex optimization strategies
+      - value: standard
+        technologies:
+        - claude-sonnet
+        - gpt-4o
+        cost_tier: standard
+        use_case: Standard performance analysis, common optimizations
+      - value: simple
+        technologies:
+        - gemini-flash
+        - claude-haiku
+        cost_tier: economy
+        use_case: Quick scans, obvious issues, high-volume checks
+  moe:
+    primary:
+      metric: performance_improvement_percentage
+      description: Percentage improvement in key performance metrics
+      target: 30.0
+      measurement:
+        type: percentage
+        numerator: performance_gain
+        denominator: baseline_performance
+        collection:
+          source: performance-monitor
+          interval: real_time
+    secondary:
+    - metric: bundle_size_reduction
+      description: Reduction in bundle size
+      target: 30.0
+      unit: percentage
+    - metric: render_time_improvement
+      description: Improvement in render time
+      target: 20.0
+      unit: percentage
+    - metric: optimization_accuracy
+      description: Accuracy of optimization recommendations
+      target: 0.85
+      unit: ratio
+  capabilities:
+    discovery:
+      enabled: true
+      registry: agent-mesh
+      refresh_interval: 60s
+  feedback:
+    tools:
+    - name: record_feedback
+      description: Record feedback on optimization effectiveness
+    - name: get_feedback_summary
+      description: Get aggregate feedback for improvement
+    learning:
+      enabled: true
+      strategy: reinforcement
+      data_sources:
+      - optimization_outcomes
+      - performance_metrics
+      - user_feedback
+  infrastructure:
+  - type: agent_mesh
+    endpoint: mesh.blueflyagents.com:3005
+    capabilities:
+    - performance_monitoring
+    - code_analysis
+  runtime:
+    triggers:
+      keywords:
+      - performance
+      - optimize
+      - slow
+      - bundle
+      - waterfall
+      - re-render
+      - memoization
+      - lazy
+      - code-splitting
+      - bundle size
+      - cold start
+      - render performance
+      file_patterns:
+      - '**/*.{tsx,jsx}'
+      - '**/components/**'
+      - '**/app/**'
+      - '**/pages/**'
+      - '**/*.react.{ts,tsx,js,jsx}'
+      frameworks:
+      - next.js
+      - react
+      - remix
+      - gatsby
+      - vite
+      project_types:
+      - react-app
+      - next-app
+      - remix-app
+    activation:
+      automatic: true
+      confidence_threshold: 0.7
+      priority_threshold: 80
+  gitlab:
+    triggers:
+    - event: merge_request
+      filter:
+        labels:
+        - performance
+        - optimization
+        files:
+        - '**/*.{tsx,jsx}'
+    - event: webhook
+      path: /react-performance-expert/analyze
+    custom_fields:
+      performance_impact: estimated
+      optimizations_applied: boolean
+      bundle_size_change: number
+  opentelemetry:
+    enabled: true
+    service_name: react-performance-expert
+    service_version: 1.0.0
+    traces:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://localhost:4317}
+      sample_rate: 1.0
+    metrics:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://localhost:4317}
+    logs:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://localhost:4317}
+      level: info
+    resource_attributes:
+      agent.id: react-performance-expert
+      agent.version: 1.0.0
+      framework: ossa
+      domain: frontend-performance

package/examples/ossa-templates/14-security-hardening-agent.ossa.yaml

@@ -0,0 +1,267 @@
+apiVersion: ossa/v0.3
+kind: Agent
+metadata:
+  name: security-hardening-agent
+  version: 1.0.0
+  description: Security Hardening Agent - OWASP Top 10 prevention, vulnerability scanning, secure coding practices
+  labels:
+    ossa-version: v0.3.5
+    domain: security
+    category: hardening
+    tier: worker
+    priority: P0
+    skill.priority: '95'
+    skill.contexts: development,review
+spec:
+  taxonomy:
+    domain: security
+    subdomain: hardening
+    capability: security_enforcement
+  role: 'You are the Security Hardening Agent, preventing OWASP Top 10 vulnerabilities and enforcing secure coding.
+
+
+    Your mission:
+
+    1. Prevent injection attacks (SQL, XSS, command injection)
+
+    2. Enforce authentication and session management
+
+    3. Prevent sensitive data exposure
+
+    4. Validate and sanitize all inputs
+
+    5. Enforce HTTPS and secure headers
+
+    6. Prevent security misconfigurations
+
+
+    Priority Rules:
+
+    - CRITICAL: Input validation and sanitization
+
+    - CRITICAL: No hardcoded secrets or credentials
+
+    - HIGH: SQL injection prevention (parameterized queries)
+
+    - HIGH: XSS prevention (output encoding)
+
+    - MEDIUM: CSRF protection
+
+    - LOW: Security headers (CSP, HSTS)'
+  llm:
+    provider: ${LLM_PROVIDER:-anthropic}
+    model: ${LLM_MODEL:-claude-sonnet-4-20250514}
+    temperature: 0.1
+    maxTokens: 16384
+  runtime:
+    triggers:
+      keywords:
+      - security
+      - vulnerability
+      - owasp
+      - injection
+      - xss
+      - sql
+      - auth
+      - secret
+      file_patterns:
+      - '**/*.{ts,js,tsx,jsx}'
+      - '**/api/**'
+      - '**/routes/**'
+      frameworks:
+      - express
+      - next.js
+      - react
+      - node
+    activation:
+      automatic: true
+      confidence_threshold: 0.8
+extensions:
+  experts:
+    registry:
+    - id: deep-analysis-expert
+      name: Deep Performance Analysis Expert
+      model:
+        provider: anthropic
+        model: claude-opus-4-5-20251101
+      specializations:
+      - owasp_prevention
+      - vulnerability_scanning
+      - secure_coding
+      cost_tier: premium
+      capabilities:
+        extended_thinking: true
+        max_tokens: 200000
+        reasoning_depth: deep
+    - id: standard-analysis-expert
+      name: Standard Performance Expert
+      model:
+        provider: anthropic
+        model: claude-sonnet-4-20250514
+      specializations:
+      - owasp_prevention
+      - vulnerability_scanning
+      - secure_coding
+      cost_tier: standard
+      capabilities:
+        max_tokens: 16384
+        reasoning_depth: balanced
+    - id: quick-scan-expert
+      name: Quick Performance Scan Expert
+      model:
+        provider: google
+        model: gemini-2.0-flash
+      specializations:
+      - owasp_prevention
+      - vulnerability_scanning
+      - secure_coding
+      cost_tier: economy
+      capabilities:
+        max_tokens: 8192
+        reasoning_depth: fast
+    selection_strategy: agent_controlled
+  bat:
+    selection_criteria:
+    - dimension: analysis_complexity
+      required: true
+      options:
+      - value: complex
+        technologies:
+        - claude-opus
+        - gpt-4-turbo
+        cost_tier: premium
+        use_case: Deep bundle analysis, complex optimization strategies
+      - value: standard
+        technologies:
+        - claude-sonnet
+        - gpt-4o
+        cost_tier: standard
+        use_case: Standard performance analysis, common optimizations
+      - value: simple
+        technologies:
+        - gemini-flash
+        - claude-haiku
+        cost_tier: economy
+        use_case: Quick scans, obvious issues, high-volume checks
+  moe:
+    primary:
+      metric: performance_improvement_percentage
+      description: Percentage improvement in key performance metrics
+      target: 30.0
+      measurement:
+        type: percentage
+        numerator: performance_gain
+        denominator: baseline_performance
+        collection:
+          source: performance-monitor
+          interval: real_time
+    secondary:
+    - metric: bundle_size_reduction
+      description: Reduction in bundle size
+      target: 30.0
+      unit: percentage
+    - metric: render_time_improvement
+      description: Improvement in render time
+      target: 20.0
+      unit: percentage
+    - metric: optimization_accuracy
+      description: Accuracy of optimization recommendations
+      target: 0.85
+      unit: ratio
+  capabilities:
+    discovery:
+      enabled: true
+      registry: agent-mesh
+      refresh_interval: 60s
+  feedback:
+    tools:
+    - name: record_feedback
+      description: Record feedback on optimization effectiveness
+    - name: get_feedback_summary
+      description: Get aggregate feedback for improvement
+    learning:
+      enabled: true
+      strategy: reinforcement
+      data_sources:
+      - optimization_outcomes
+      - performance_metrics
+      - user_feedback
+  infrastructure:
+  - type: agent_mesh
+    endpoint: mesh.blueflyagents.com:3005
+    capabilities:
+    - performance_monitoring
+    - code_analysis
+  runtime:
+    triggers:
+      keywords:
+      - performance
+      - optimize
+      - slow
+      - bundle
+      - waterfall
+      - re-render
+      - memoization
+      - lazy
+      - code-splitting
+      - bundle size
+      - cold start
+      - render performance
+      file_patterns:
+      - '**/*.{tsx,jsx}'
+      - '**/components/**'
+      - '**/app/**'
+      - '**/pages/**'
+      - '**/*.react.{ts,tsx,js,jsx}'
+      frameworks:
+      - next.js
+      - react
+      - remix
+      - gatsby
+      - vite
+      project_types:
+      - react-app
+      - next-app
+      - remix-app
+    activation:
+      automatic: true
+      confidence_threshold: 0.7
+      priority_threshold: 80
+  gitlab:
+    triggers:
+    - event: merge_request
+      filter:
+        labels:
+        - performance
+        - optimization
+        files:
+        - '**/*.{tsx,jsx}'
+    - event: webhook
+      path: /react-performance-expert/analyze
+    custom_fields:
+      performance_impact: estimated
+      optimizations_applied: boolean
+      bundle_size_change: number
+  opentelemetry:
+    enabled: true
+    service_name: react-performance-expert
+    service_version: 1.0.0
+    traces:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://localhost:4317}
+      sample_rate: 1.0
+    metrics:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://localhost:4317}
+    logs:
+      enabled: true
+      exporter: otlp
+      endpoint: ${OTEL_EXPORTER_OTLP_ENDPOINT:-http://localhost:4317}
+      level: info
+    resource_attributes:
+      agent.id: react-performance-expert
+      agent.version: 1.0.0
+      framework: ossa
+      domain: frontend-performance

package/examples/production/document-analyzer-openai.yml

@@ -1,7 +1,7 @@
 # OSSA Agent with OpenAI Bridge Configuration Example
 # Document Analyzer Agent - Proof of Concept
 
-apiVersion: ossa/v0.3.3
+apiVersion: ossa/v0.3.5
 kind: Agent
 metadata:
   name: document-analyzer

package/examples/quickstart/support-agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.3
+apiVersion: ossa/v0.3.5
 kind: Agent
 metadata:
   name: support-agent

package/examples/real-world/gitlab-cicd-optimizer.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.3
+apiVersion: ossa/v0.3.5
 kind: Agent
 metadata:
   name: gitlab-cicd-optimizer
@@ -156,9 +156,16 @@ spec:
       provider: opentelemetry
       endpoint: "${env.OTEL_ENDPOINT}"
     metrics:
-      - name: pipelines_analyzed
-        type: counter
-      - name: recommendations_generated
-        type: counter
-      - name: average_pipeline_duration
-        type: gauge
+      enabled: true
+      exporter: prometheus
+      port: 9090
+      customMetrics:
+        - name: pipelines_analyzed
+          type: counter
+          description: Total number of pipelines analyzed
+        - name: recommendations_generated
+          type: counter
+          description: Total number of recommendations generated
+        - name: average_pipeline_duration
+          type: gauge
+          description: Average pipeline duration in seconds

package/examples/real-world/rag-documentation-assistant.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.3
+apiVersion: ossa/v0.3.5
 kind: Agent
 metadata:
   name: rag-documentation-assistant
@@ -225,12 +225,5 @@ spec:
       enabled: true
       provider: opentelemetry
     metrics:
-      - name: questions_answered
-        type: counter
-        labels: [user_id, confidence_bucket]
-      - name: retrieval_latency
-        type: histogram
-      - name: generation_latency
-        type: histogram
-      - name: knowledge_base_size
-        type: gauge
+      enabled: true
+      port: 9090

package/examples/registry/USAGE.txt

@@ -0,0 +1,105 @@
+OSSA Registry MVP - Usage Guide
+================================
+
+The OSSA Registry MVP provides local agent discovery and publishing capabilities.
+
+Quick Start
+-----------
+
+1. Publish an agent to the local registry:
+
+   ossa publish examples/registry/agents/security-scanner --registry ./examples/registry
+
+   This will:
+   - Validate the agent manifest
+   - Create a bundle tarball with SBOM and checksums
+   - Update the registry index.json
+
+2. Search for agents in the registry:
+
+   ossa catalog search security --registry ./examples/registry
+
+   Filter by role:
+   ossa catalog search --role audit --registry ./examples/registry
+
+   Filter by compliance:
+   ossa catalog search --compliance fedramp --registry ./examples/registry
+
+3. View detailed agent information:
+
+   ossa catalog info security-scanner --registry ./examples/registry
+
+   View as JSON:
+   ossa catalog info security-scanner --json --registry ./examples/registry
+
+
+Example Agents
+--------------
+
+This directory contains two example agents:
+
+1. security-scanner (v1.0.0)
+   - Role: audit
+   - Automated security vulnerability scanner
+   - Capabilities: CVE scanning, secret detection, SAST analysis
+   - Compliance: FedRAMP, SOC2, ISO27001
+
+2. code-reviewer (v1.0.0)
+   - Role: workflow
+   - Intelligent code review agent
+   - Capabilities: code analysis, best practices, security review
+   - Compliance: SOC2, ISO27001
+
+
+Registry Structure
+------------------
+
+./examples/registry/
+├── index.json              # Registry index (searchable metadata)
+├── agents/
+│   ├── security-scanner/
+│   │   └── agent.yaml     # Agent manifest
+│   └── code-reviewer/
+│       └── agent.yaml     # Agent manifest
+└── bundles/               # Published bundles (created by ossa publish)
+    ├── security-scanner-1.0.0.tar.gz
+    ├── security-scanner-1.0.0.tar.gz.sha256
+    ├── code-reviewer-1.0.0.tar.gz
+    └── code-reviewer-1.0.0.tar.gz.sha256
+
+
+Bundle Contents
+---------------
+
+Each published bundle includes:
+- agent.yaml: Agent manifest
+- sbom.json: Software Bill of Materials (CycloneDX format)
+- SHA-256 checksum for integrity verification
+
+
+Publishing Workflow
+-------------------
+
+1. Create agent manifest (agent.yaml)
+2. Run: ossa publish <agent-dir> --registry <registry-path>
+3. Agent is added to registry index
+4. Bundle is created with SBOM and checksum
+5. Search and discover agents via catalog commands
+
+
+Integration Tests
+-----------------
+
+Run the registry integration tests:
+
+npm test tests/integration/registry/
+
+
+Next Steps
+----------
+
+- Install published agents from the registry
+- Remote registry support (GitLab/GitHub)
+- Agent versioning and updates
+- Digital signatures for bundles
+- Registry mirroring and replication