@bluefly/openstandardagents 0.3.3 → 0.3.6

package/spec/v0.3/registry/registry-contract.schema.json

@@ -0,0 +1,359 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://openstandardagents.org/schemas/v0.3.5/registry/registry-contract.json",
+  "title": "OSSA Agent Registry Contract",
+  "description": "Contract schema for OSSA agent registry - enables discovery, publishing, and validation of agents",
+  "type": "object",
+  "properties": {
+    "registry_version": {
+      "type": "string",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
+      "description": "Registry contract version"
+    },
+    "last_updated": {
+      "type": "string",
+      "format": "date-time",
+      "description": "Last update timestamp (ISO 8601)"
+    },
+    "agents": {
+      "type": "array",
+      "description": "List of registered agents",
+      "items": {
+        "$ref": "#/definitions/AgentEntry"
+      }
+    }
+  },
+  "required": ["registry_version", "last_updated", "agents"],
+  "additionalProperties": false,
+  "definitions": {
+    "AgentEntry": {
+      "type": "object",
+      "description": "Agent registry entry",
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*[a-z0-9]$",
+          "description": "Unique agent identifier (DNS-1123 subdomain)"
+        },
+        "name": {
+          "type": "string",
+          "description": "Human-readable agent name"
+        },
+        "version": {
+          "type": "string",
+          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(-[a-zA-Z0-9]+)?$",
+          "description": "Agent version (semver)"
+        },
+        "description": {
+          "type": "string",
+          "description": "Agent description"
+        },
+        "license": {
+          "type": "string",
+          "enum": ["Apache-2.0", "MIT", "BSD-3-Clause", "GPL-3.0", "Proprietary"],
+          "description": "License type"
+        },
+        "frameworks": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["langchain", "langgraph", "autogen", "crewai", "openai", "anthropic", "kagent", "mcp", "a2a"]
+          },
+          "description": "Supported frameworks"
+        },
+        "capabilities": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Agent capabilities (from OSSA taxonomy)"
+        },
+        "artifacts": {
+          "$ref": "#/definitions/Artifacts",
+          "description": "Bundle artifacts with checksums and metadata"
+        },
+        "security_posture": {
+          "$ref": "#/definitions/SecurityPosture",
+          "description": "Security and compliance posture"
+        },
+        "entrypoints": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Entrypoint"
+          },
+          "description": "Agent entrypoints (CLI, API, webhook, etc.)"
+        },
+        "signing": {
+          "$ref": "#/definitions/Signing",
+          "description": "Cryptographic signing metadata (optional)"
+        },
+        "sbom_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$",
+          "description": "SHA256 checksum of agent bundle SBOM (deprecated - use artifacts.sbom.sha256)"
+        },
+        "schema_version": {
+          "type": "string",
+          "pattern": "^0\\.3\\.[4-9]|^0\\.3\\.[0-9]+(-[a-zA-Z0-9]+)?$",
+          "description": "OSSA schema version"
+        },
+        "compat_matrix": {
+          "$ref": "#/definitions/CompatibilityMatrix",
+          "description": "Compatibility matrix"
+        },
+        "manifest_url": {
+          "type": "string",
+          "format": "uri",
+          "description": "URL to agent manifest (OSSA YAML)"
+        },
+        "bundle_url": {
+          "type": "string",
+          "format": "uri",
+          "description": "URL to agent bundle (tarball)"
+        },
+        "git_url": {
+          "type": "string",
+          "format": "uri",
+          "description": "Git repository URL"
+        },
+        "published_at": {
+          "type": "string",
+          "format": "date-time",
+          "description": "Publication timestamp"
+        },
+        "published_by": {
+          "type": "string",
+          "description": "Publisher identifier (GitHub username, GitLab username, etc.)"
+        },
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Searchable tags"
+        }
+      },
+      "required": ["id", "name", "version", "schema_version", "manifest_url"],
+      "additionalProperties": false
+    },
+    "SecurityPosture": {
+      "type": "object",
+      "description": "Security and compliance posture",
+      "properties": {
+        "compliance_level": {
+          "type": "string",
+          "enum": ["baseline", "enterprise", "fedramp", "hipaa", "soc2"],
+          "description": "Compliance level"
+        },
+        "audit_logging": {
+          "type": "boolean",
+          "description": "Audit logging enabled"
+        },
+        "encryption_at_rest": {
+          "type": "boolean",
+          "description": "Encryption at rest"
+        },
+        "encryption_in_transit": {
+          "type": "boolean",
+          "description": "Encryption in transit"
+        },
+        "network": {
+          "type": "object",
+          "properties": {
+            "egress": {
+              "type": "boolean",
+              "description": "Requires network egress (outbound connections)"
+            },
+            "ingress": {
+              "type": "boolean",
+              "description": "Requires network ingress (inbound connections)"
+            }
+          },
+          "description": "Network requirements"
+        },
+        "secrets": {
+          "type": "object",
+          "properties": {
+            "required": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "List of required secret names/keys"
+            }
+          },
+          "description": "Secret requirements"
+        },
+        "tools": {
+          "type": "object",
+          "properties": {
+            "exec": {
+              "type": "boolean",
+              "description": "Requires command execution capabilities"
+            },
+            "file_system": {
+              "type": "boolean",
+              "description": "Requires file system access"
+            }
+          },
+          "description": "Tool/capability requirements"
+        },
+        "k8s": {
+          "type": "object",
+          "properties": {
+            "rbac_summary": {
+              "type": "string",
+              "description": "Summary of required Kubernetes RBAC permissions"
+            }
+          },
+          "description": "Kubernetes-specific security requirements"
+        },
+        "vulnerability_scan": {
+          "type": "object",
+          "properties": {
+            "last_scan": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "critical": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "high": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "medium": {
+              "type": "integer",
+              "minimum": 0
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "CompatibilityMatrix": {
+      "type": "object",
+      "description": "Compatibility matrix",
+      "properties": {
+        "frameworks": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Framework version compatibility"
+        },
+        "runtimes": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["node", "python", "kubernetes", "docker", "serverless"]
+          },
+          "description": "Supported runtimes"
+        },
+        "os": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["linux", "darwin", "windows"]
+          },
+          "description": "Supported operating systems"
+        }
+      },
+      "additionalProperties": false
+    },
+    "Artifacts": {
+      "type": "object",
+      "description": "Bundle artifacts with checksums and metadata",
+      "properties": {
+        "bundle": {
+          "type": "object",
+          "properties": {
+            "sha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$",
+              "description": "SHA256 checksum of bundle tarball"
+            },
+            "size": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Bundle size in bytes"
+            }
+          },
+          "required": ["sha256"],
+          "additionalProperties": false
+        },
+        "sbom": {
+          "type": "object",
+          "properties": {
+            "sha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$",
+              "description": "SHA256 checksum of SBOM"
+            },
+            "format": {
+              "type": "string",
+              "enum": ["spdx", "cyclonedx"],
+              "description": "SBOM format"
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "required": ["bundle"],
+      "additionalProperties": false
+    },
+    "Entrypoint": {
+      "type": "object",
+      "description": "Agent entrypoint configuration",
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": ["cli", "api", "webhook", "grpc"],
+          "description": "Entrypoint type"
+        },
+        "command": {
+          "type": "string",
+          "description": "Command to execute (for CLI type)"
+        },
+        "endpoint": {
+          "type": "string",
+          "format": "uri",
+          "description": "HTTP/gRPC endpoint URL (for API/webhook/grpc types)"
+        }
+      },
+      "required": ["type"],
+      "additionalProperties": false
+    },
+    "Signing": {
+      "type": "object",
+      "description": "Cryptographic signing metadata (optional, reserved for future use)",
+      "properties": {
+        "sigstore": {
+          "type": "object",
+          "properties": {
+            "bundle": {
+              "type": "string",
+              "format": "uri",
+              "description": "URL to Sigstore bundle"
+            }
+          },
+          "additionalProperties": false
+        },
+        "cosign": {
+          "type": "object",
+          "properties": {
+            "signature": {
+              "type": "string",
+              "format": "uri",
+              "description": "URL to Cosign signature"
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    }
+  }
+}

package/spec/v0.3.6/CHANGELOG.md

@@ -0,0 +1,171 @@
+# Changelog
+All notable changes to OSSA will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.3.6] - 2026-01-23
+### Added
+- **Token Efficiency Framework**: Comprehensive cost optimization with significant token savings
+  - Context Management: Semantic pruning, summarization, and caching strategies
+  - Prompt Caching: Provider-specific caching (Anthropic, OpenAI) with 90% savings on repeated context
+  - Token Budgets: Hard limits with soft/hard/adaptive enforcement
+  - Tool Output Limits: Prevent excessive tool outputs with smart truncation
+  - Knowledge Graph Efficiency: Significant token reduction through structured code indexing
+  - Checkpoint Compression: Delta-based state compression for long-running agents
+- **Composite Identity Support**: GitLab Duo-inspired identity merging (vendor-neutral)
+  - Primary identity (service account) + secondary identity (human user)
+  - Merge strategies: restrictive (intersection), permissive (union), custom
+  - Full attribution and audit trail for compliance
+  - Explicit permission management (read, write, execute)
+- **Agent Catalog Metadata**: Discovery and publication support
+  - Visibility controls: public, private, internal
+  - Categories, tags, and search metadata
+  - Pricing models: free, freemium, paid, enterprise
+  - Ratings and documentation links
+- **Efficiency Tier System**: Declarative optimization levels
+  - Premium: No optimization (full quality)
+  - Standard: Basic pruning (moderate savings)
+  - Economy: Aggressive optimization (maximum savings)
+  - Custom: Explicit configuration
+- **Knowledge Graph Integration**: MCP-based codebase understanding
+  - Provider-agnostic (GitLab, GitHub, local, custom)
+  - Index types: files, classes, functions, dependencies, relationships
+  - Query capabilities: semantic search, dependency traversal, code navigation
+  - Significant token reduction vs full codebase inclusion
+- **Version-Specific Schema Naming**: Schema files now use version-specific names (ossa-{version}.schema.json)
+
+### Changed
+- **Schema Naming Convention**: Changed from `ossa-agent.schema.json` to `ossa-0.3.6.schema.json` for website compatibility
+- **Specification**: Updated to v0.3.6 with token efficiency and enterprise features
+- **Package Version**: Bumped to 0.3.6 in package.json and .version.json
+- **Backward Compatibility**: All v0.3.5 agents work with v0.3.6 runtime (100% backward compatible)
+
+### Fixed
+- **Website Integration**: Ensured schema naming matches website validator expectations
+- **Example Validation**: Fixed YAML formatting issues in examples (removed document separators, fixed numeric formats)
+
+## [0.3.5] - 2026-01-15
+### Added
+- **Completion Signals**: Standardized agent termination conditions enabling intelligent workflow orchestration
+- **Session Checkpointing**: Resilient, resumable agent state for long-running tasks and cost optimization
+- **Mixture of Experts (MoE)**: Agent-controlled expert model selection for intelligent routing and cost optimization
+- **BAT Framework**: Best Available Technology selection with multi-dimensional criteria
+- **MOE Metrics**: Measure of Effectiveness framework with primary, secondary, and operational categories
+- **Flow-Based Orchestration**: Native Flow kind support with state machines and transitions (100% compatibility with LangGraph, Temporal, n8n)
+- **Dynamic Capability Discovery**: Runtime-adaptive capabilities with automatic refresh
+- **Feedback & Learning Loops**: Continuous improvement with native feedback tools and learning strategies
+- **Infrastructure Substrate**: Infrastructure as agent-addressable resources for infrastructure-aware deployment
+- **Enhanced A2A Protocol**: Production-ready agent-to-agent communication with completion signals and checkpoint sync
+
+### Changed
+- **Specification**: Updated to v0.3.5 - The OpenAPI for Software Agents
+- **Enterprise Focus**: Refocused all documentation on enterprise adoption and business value
+- **README**: Complete rewrite emphasizing vendor neutrality, cost optimization, and production reliability
+- **Documentation**: Updated all docs (README, llms.txt, CONTRIBUTING) to remove GitLab references, focus on GitHub (public mirror)
+- **Backward Compatibility**: All v0.3.4 agents work with v0.3.5 runtime (100% backward compatible)
+- **Migration Guide**: Complete migration guide available in `spec/v0.3/MIGRATION-v0.3.4-to-v0.3.5.md`
+
+### Fixed
+- **ESLint Configuration**: Fixed 2195 lint errors by disabling problematic rule and excluding test files from type-checking
+- **OpenTelemetry Dependencies**: Added missing dependencies and removed unnecessary @ts-expect-error directives
+- **Build Errors**: Fixed TypeScript compilation errors
+- **Version Sync**: Updated package.json and .version.json to 0.3.5
+
+## [0.3.4] - 2026-01-13
+### Added
+- **BAT (Browser Automation Testing)**: E2E testing, visual regression, performance testing configuration
+- **MOE (Model Output Evaluation)**: Output validation, quality scoring, auto-correction, context enrichment
+- **Dynamic Version Detection**: Version now derived from git tags (not static .version.json)
+- **Browser Automation Tool Type**: Added `browser-automation` tool type for Playwright/Selenium/Cypress
+- **Testing Capabilities**: Added testing, browser_automation, output_evaluation capability types to taxonomy
+- **AG2 Swarm Topology Support**: Comprehensive swarm topology patterns for multi-agent orchestration
+  - Sequential, fan-out, fan-in, hierarchical, mesh, hub-and-spoke, pipeline, and dynamic topologies
+  - Speaker selection strategies and transition rules
+  - Termination conditions and orchestration modes
+- **AG2 Group Chat Extension**: Multi-agent group chat configuration schemas
+  - Round-robin, auto, manual, and random speaker selection
+  - Conversation termination conditions
+  - Message history management
+  - Context variables and shared state
+- **AG2 Nested Chat Support**: Hierarchical conversation patterns
+  - Trigger conditions for nested conversations
+  - Context propagation strategies (full, summary, selective)
+  - Result aggregation modes
+  - Carryover configuration for context transfer
+- **Human-in-the-Loop Protocols**:
+  - Intervention points schema defining when human authorization is required
+  - Human input modes (ALWAYS, NEVER, TERMINATE)
+  - Multi-step approval workflows with escalation policies
+  - Notification channels and timeout handling
+- **Agent-to-Agent Interoperability**:
+  - Service discovery with health checks and registry integration
+  - Handoff protocol for task delegation between agents
+  - Capability advertisement for agent discovery
+  - Load balancing and capability matching
+- **State Management & Memory Portability**:
+  - Context serialization for save/restore operations
+  - Memory portability between runtimes (working, long-term, episodic, semantic, procedural)
+  - Teachability configuration for agent learning
+  - Vector store support for semantic search
+- **New Top-level Schema Properties**:
+  - `orchestration`: Swarm topology and group chat configuration
+  - `hitl`: Human-in-the-loop configuration
+  - `a2a`: Agent-to-agent interoperability
+  - `state_management`: Context and memory configuration
+- **Example Manifests**: Three complete AG2 integration examples
+  - Hierarchical software development swarm
+  - Group chat research team
+  - Fan-out data processing pipeline
+
+### Changed
+- **Version Management**: `.version.json` is now DEPRECATED - version comes from git tags dynamically
+- **Version Services**: All version services now use `VersionDetectionService` to read from git tags
+- Updated main schema to v0.3.4 with AG2 integration support
+- Updated package.json exports to include all new AG2 schemas
+
+### Fixed
+- Fixed test validation for platform extensions
+- Fixed cross-platform compatibility validation
+
+## [0.3.3] - 2025-01-11
+### Added
+- **Skills Compatibility Extension**: New extension for cross-platform agent skill compatibility
+- **llms.txt Extension**: Full support for llmstxt.org standard with bidirectional sync
+- **AGENTS.md Extension**: Complete agents.md integration with OpenAI agents.md format
+- **Migration System Fix**: Fixed version placeholder handling in migration detection
+- **OpenAPI Compliance**: All CLI commands now defined in OpenAPI specifications
+- **Zod Validation**: Complete runtime validation with Zod schemas
+- **CRUD Operations**: Full Create/Read/Update/Delete for all resources
+- **TypeScript SDK**: Rebuilt SDK following SOLID, DRY, Zod, OpenAPI principles
+- **Extension Development Tools**: TypeScript-based extension team management
+
+### Changed
+- Migrated all shell scripts to TypeScript (project compliance)
+- Reorganized SDK structure into src/sdks/
+- Enhanced version management with proper placeholder handling
+- Improved error messages and validation feedback
+- CI/CD: Install git before using git commands in sync:auto
+- CI/CD: Remove all release jobs, auto-deploy pages on main
+- CI/CD: Update OSSA_VERSION to 0.3.3 on main
+- CI/CD: Update versions.json to 0.3.3 on main
+- CI/CD: Add rebase before push in sync:auto job to handle concurrent commits
+- CI/CD: Allow changelog:generate to fail until push token configured
+- CI/CD: Only run changelog:generate on release branches
+- CI/CD: Auto-deploy pages on main instead of manual
+- CI/CD: Remove resource_group for auto pages deploy
+- CI/CD: Remove environment block from pages job
+- CI/CD: Add missing documentation files from framework website
+- CI/CD: Add all automation documentation files from framework website
+- CI/CD: Sync main into release/v0.3.x for clean deploy
+
+### Fixed
+- Fixed migration detection breaking when package.json contains 0.3.4 placeholder
+- Fixed version comparison logic to handle template placeholders correctly
+- Removed all shell scripts, replaced with TypeScript implementations
+- Fixed CI/CD configuration for proper Docker image usage
+- Fixed hardcoded version detection and validation
+
+[0.3.5]: https://github.com/blueflyio/openstandardagents/compare/v0.3.4...v0.3.5
+[0.3.4]: https://github.com/blueflyio/openstandardagents/compare/v0.3.3...v0.3.4
+[0.3.3]: https://github.com/blueflyio/openstandardagents/releases/tag/v0.3.3