@bluefly/openstandardagents 0.4.2 → 0.4.4

package/examples/showcase/security-scanner-enhanced.ossa.yaml

@@ -0,0 +1,304 @@
+apiVersion: ossa/v0.4.1
+kind: Agent
+metadata:
+  name: security-scanner-enhanced
+  version: 1.0.0
+  description: Advanced security scanner with vulnerability scanning, penetration testing, and compliance checking using nmap, OWASP ZAP, and custom scanners
+  labels:
+    ossa.dev/category: security
+    ossa.dev/tier: production-example
+    ossa.dev/autonomy: medium
+    ossa.dev/domain: security-operations
+    ossa.dev/execution: event-driven
+  annotations:
+    ossa.dev/documentation: https://openstandardagents.org/agents/security-scanner-enhanced
+    ossa.dev/tools: nmap,owasp-zap,custom-scanners
+    ossa.dev/triggers: khook,webhook,schedule
+spec:
+  capabilities:
+  - type: function
+    name: vulnerability.scan
+    description: Scan systems and applications for vulnerabilities
+    parameters:
+      type: object
+      properties:
+        target:
+          type: string
+          description: Target host, IP range, or application URL
+        scan_type:
+          type: string
+          enum: [network, web_app, container, cloud, api]
+          description: Type of vulnerability scan
+        depth:
+          type: string
+          enum: [quick, standard, deep, comprehensive]
+          default: standard
+        tools:
+          type: array
+          items:
+            type: string
+            enum: [nmap, zap, nikto, sqlmap, custom]
+          default: [nmap, zap]
+      required: [target, scan_type]
+  - type: function
+    name: penetration.test
+    description: Execute penetration testing procedures
+    parameters:
+      type: object
+      properties:
+        target:
+          type: string
+        test_scope:
+          type: array
+          items:
+            type: string
+            enum: [network, web, wireless, social_engineering, physical]
+        methodology:
+          type: string
+          enum: [owasp, ptes, osstmm, nist]
+          default: owasp
+        authorization:
+          type: object
+          properties:
+            authorized_by:
+              type: string
+            scope_document:
+              type: string
+            valid_until:
+              type: string
+              format: date-time
+          required: [authorized_by, valid_until]
+      required: [target, test_scope, authorization]
+  - type: function
+    name: compliance.check
+    description: Verify compliance with security policies and standards
+    parameters:
+      type: object
+      properties:
+        standards:
+          type: array
+          items:
+            type: string
+            enum: [PCI-DSS, ISO27001, NIST, CIS, OWASP-Top10]
+        scope:
+          type: string
+        baseline:
+          type: string
+          description: Baseline configuration for comparison
+      required: [standards, scope]
+  role: |
+    You are an advanced security scanning specialist responsible for identifying
+    vulnerabilities, executing penetration tests, and ensuring security compliance.
+
+    Your core responsibilities:
+    1. Vulnerability Scanning - Identify security weaknesses using multiple tools
+    2. Penetration Testing - Execute authorized security testing
+    3. Compliance Checking - Verify adherence to security standards
+    4. Threat Analysis - Analyze and classify security threats
+    5. Remediation Guidance - Provide actionable security fixes
+
+    Tools and methodologies:
+    - nmap: Network discovery and security scanning
+    - OWASP ZAP: Web application security scanner
+    - Custom scanners: Specialized security tools
+    - OWASP Top 10: Web application security risks
+    - CVE database: Known vulnerability tracking
+
+    Security scanning principles:
+    - Always operate within authorized scope
+    - Minimize impact on production systems
+    - Follow responsible disclosure practices
+    - Document all findings with evidence
+    - Provide risk-based prioritization
+
+    Always provide:
+    - Severity classification (Critical, High, Medium, Low, Info)
+    - CVE/CWE identifiers when applicable
+    - Affected components and versions
+    - Exploit availability and complexity
+    - Detailed remediation steps with references
+    - Evidence (screenshots, logs, payloads)
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4
+    temperature: 0.1
+    maxTokens: 32768
+    features:
+      promptCaching: true
+      tokenEfficiency: false
+      batchProcessing: false
+  tools:
+  - type: function
+    name: nmap.scan
+    description: Network scanning and discovery tool
+  - type: function
+    name: zap.scan
+    description: Web application security scanner
+  - type: function
+    name: cve.lookup
+    description: Query CVE database for vulnerability details
+  - type: function
+    name: exploit.check
+    description: Check exploit availability for vulnerabilities
+  - type: function
+    name: report.generate
+    description: Generate security scan reports
+  autonomy:
+    mode: semi-autonomous
+    humanApproval: true
+    approvalRequired:
+      - before_penetration_test
+      - before_production_scan
+      - on_critical_finding
+    escalation:
+      enabled: true
+      triggers:
+        - critical_vulnerability
+        - active_exploit
+        - compliance_violation
+        - scan_blocked
+      contacts:
+        - role: security_team
+          method: slack
+          priority: high
+        - role: ciso
+          method: email
+          priority: critical
+        - role: soc
+          method: pagerduty
+          priority: critical
+  triggers:
+    khook:
+      enabled: true
+      events:
+        - type: deployment
+          action: trigger_scan
+          filter:
+            environment: [production, staging]
+        - type: code_commit
+          action: trigger_scan
+          filter:
+            branch: [main, master]
+        - type: configuration_change
+          action: trigger_scan
+    webhook:
+      enabled: true
+      endpoints:
+        - path: /scan/trigger
+          method: POST
+          authentication: bearer
+    schedule:
+      enabled: true
+      cron: "0 0 * * 0"  # Weekly on Sunday midnight
+      timezone: UTC
+  observability:
+    metrics:
+      enabled: true
+      provider: prometheus
+      port: 9093
+      custom:
+        - name: vulnerabilities_found
+          type: counter
+          labels: [severity, type]
+        - name: scans_completed
+          type: counter
+          labels: [scan_type, status]
+        - name: scan_duration
+          type: histogram
+          labels: [scan_type]
+        - name: critical_findings
+          type: gauge
+    logging:
+      level: info
+      format: json
+      destination: stdout
+      sensitive_data_filtering: true
+    tracing:
+      enabled: true
+      provider: opentelemetry
+      samplingRate: 1.0
+    alerts:
+      - name: critical_vulnerability_found
+        condition: vulnerabilities_found{severity="critical"} > 0
+        notification: pagerduty
+      - name: scan_failure
+        condition: scans_completed{status="failed"} > 3
+        notification: slack
+  resources:
+    memory: 4Gi
+    cpu: 2000m
+    storage: 20Gi
+    networkPolicy:
+      egress:
+        - to: internet
+          ports: [80, 443, 8080, 8443]
+      ingress:
+        - from: webhook_sources
+          ports: [8080]
+  state:
+    persistence: postgresql
+    ttl: 7776000  # 90 days
+    schema:
+      type: object
+      properties:
+        scan_history:
+          type: array
+        vulnerability_database:
+          type: object
+        baseline_configurations:
+          type: object
+        findings:
+          type: array
+          items:
+            type: object
+            properties:
+              id:
+                type: string
+              severity:
+                type: string
+              status:
+                type: string
+                enum: [open, in_progress, remediated, false_positive]
+              found_date:
+                type: string
+                format: date-time
+  retry:
+    enabled: true
+    maxAttempts: 2
+    backoff:
+      type: linear
+      initialDelay: 10s
+  security:
+    authentication:
+      required: true
+      methods:
+        - mutual_tls
+        - api_key
+    authorization:
+      rbac:
+        enabled: true
+        roles:
+          - security_admin
+          - security_analyst
+          - penetration_tester
+      policies:
+        - resource: scan
+          action: execute
+          conditions:
+            - authorized_scope
+            - valid_authorization
+    dataClassification:
+      - security_findings
+      - vulnerability_data
+      - confidential
+    encryption:
+      at_rest: true
+      in_transit: true
+    audit:
+      enabled: true
+      events:
+        - scan_initiated
+        - scan_completed
+        - critical_finding
+        - penetration_test_started
+        - compliance_check_failed

package/examples/showcase/team-leader.ossa.yaml

@@ -0,0 +1,306 @@
+apiVersion: ossa/v0.4.1
+kind: Agent
+metadata:
+  name: team-leader
+  version: 1.0.0
+  description: Multi-agent team leader with task distribution, coordination, and progress tracking capabilities
+  labels:
+    ossa.dev/category: orchestration
+    ossa.dev/tier: production-example
+    ossa.dev/autonomy: autonomous
+    ossa.dev/domain: coordination
+    ossa.dev/role: leader
+  annotations:
+    ossa.dev/documentation: https://openstandardagents.org/agents/team-leader
+    ossa.dev/a2a-enabled: "true"
+    ossa.dev/team-discovery: "true"
+spec:
+  capabilities:
+  - type: function
+    name: task.distribute
+    description: Distribute tasks to team members based on capabilities
+    parameters:
+      type: object
+      properties:
+        task:
+          type: object
+          properties:
+            id:
+              type: string
+            description:
+              type: string
+            requirements:
+              type: array
+              items:
+                type: string
+            priority:
+              type: string
+              enum: [critical, high, medium, low]
+            deadline:
+              type: string
+              format: date-time
+          required: [id, description, requirements]
+        assignment_strategy:
+          type: string
+          enum: [capability_match, load_balance, round_robin, priority]
+          default: capability_match
+      required: [task]
+  - type: function
+    name: team.coordinate
+    description: Coordinate team member activities and dependencies
+    parameters:
+      type: object
+      properties:
+        coordination_type:
+          type: string
+          enum: [sequential, parallel, conditional, fan_out_fan_in]
+        agents:
+          type: array
+          items:
+            type: object
+            properties:
+              agent_id:
+                type: string
+              role:
+                type: string
+              dependencies:
+                type: array
+                items:
+                  type: string
+        timeout:
+          type: integer
+          description: Coordination timeout in seconds
+          default: 3600
+      required: [coordination_type, agents]
+  - type: function
+    name: progress.track
+    description: Track and report team progress
+    parameters:
+      type: object
+      properties:
+        scope:
+          type: string
+          enum: [agent, task, project, team]
+        metrics:
+          type: array
+          items:
+            type: string
+            enum: [completion_rate, velocity, quality, blockers]
+        report_format:
+          type: string
+          enum: [summary, detailed, dashboard]
+          default: summary
+      required: [scope]
+  - type: query
+    name: team.discover
+    description: Discover available team members and their capabilities
+  role: |
+    You are a team leader agent responsible for orchestrating multi-agent teams,
+    distributing tasks, coordinating activities, and tracking progress.
+
+    Your core responsibilities:
+    1. Task Distribution - Assign tasks to team members based on capabilities
+    2. Team Coordination - Manage dependencies and orchestration patterns
+    3. Progress Tracking - Monitor team progress and identify blockers
+    4. Resource Management - Balance workload across team members
+    5. Communication - Facilitate agent-to-agent communication
+    6. Conflict Resolution - Resolve task conflicts and dependencies
+
+    Orchestration patterns:
+    - Sequential: Execute tasks in order with dependencies
+    - Parallel: Execute independent tasks concurrently
+    - Conditional: Route based on conditions and results
+    - Fan-out/Fan-in: Distribute work and aggregate results
+
+    Team leadership principles:
+    - Capability-based assignment (match tasks to agent strengths)
+    - Load balancing (distribute work evenly)
+    - Proactive monitoring (identify blockers early)
+    - Clear communication (use A2A protocols)
+    - Adaptive coordination (adjust based on team state)
+
+    Always:
+    - Verify agent capabilities before assignment
+    - Monitor task progress and completion
+    - Handle failures gracefully with reassignment
+    - Provide clear status updates
+    - Maintain team state and history
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4
+    temperature: 0.3
+    maxTokens: 16384
+    features:
+      promptCaching: true
+      tokenEfficiency: false
+      batchProcessing: false
+  tools:
+  - type: function
+    name: agent.query
+    description: Query agent capabilities and status
+  - type: function
+    name: task.queue
+    description: Manage task queue and priorities
+  - type: function
+    name: dependency.graph
+    description: Build and analyze task dependency graphs
+  - type: function
+    name: notification.send
+    description: Send notifications to team members
+  autonomy:
+    mode: autonomous
+    humanApproval: false
+    escalation:
+      enabled: true
+      triggers:
+        - team_deadlock
+        - critical_task_failure
+        - resource_exhaustion
+        - prolonged_blocker
+      contacts:
+        - role: team_admin
+          method: slack
+        - role: on_call_engineer
+          method: pagerduty
+  a2a:
+    enabled: true
+    role: leader
+    capabilities:
+      - task-distribution
+      - team-coordination
+      - progress-tracking
+      - agent-discovery
+    protocols:
+      - rest
+      - grpc
+      - websocket
+    discovery:
+      enabled: true
+      broadcast: true
+      interval: 60s
+      endpoints:
+        - url: https://team-leader.company.com/v1
+          protocol: rest
+        - url: wss://team-leader.company.com/ws
+          protocol: websocket
+    communication:
+      patterns:
+        - request-response
+        - publish-subscribe
+        - broadcast
+      messageFormats:
+        - application/json
+      reliability:
+        retries: 3
+        timeout: 30s
+        circuitBreaker:
+          enabled: true
+          threshold: 5
+          resetTimeout: 60s
+  teamDiscovery:
+    enabled: true
+    autoRegister: true
+    heartbeat:
+      interval: 30s
+      timeout: 90s
+    capabilities:
+      query: true
+      filter: true
+      subscribe: true
+  messaging:
+    transport: redis
+    queues:
+      - name: task-assignments
+        description: Task assignment notifications
+        dlq: true
+      - name: status-updates
+        description: Team member status updates
+        dlq: false
+      - name: coordination-events
+        description: Coordination lifecycle events
+        dlq: true
+    events:
+      publish:
+        - task.assigned
+        - task.completed
+        - task.failed
+        - coordination.started
+        - coordination.completed
+        - team.member.discovered
+        - team.member.offline
+      subscribe:
+        - task.status.changed
+        - agent.heartbeat
+        - agent.capability.updated
+  observability:
+    metrics:
+      enabled: true
+      provider: prometheus
+      port: 9092
+      custom:
+        - name: tasks_distributed
+          type: counter
+        - name: team_members_active
+          type: gauge
+        - name: coordination_duration
+          type: histogram
+        - name: task_success_rate
+          type: gauge
+    logging:
+      level: info
+      format: json
+      destination: stdout
+    tracing:
+      enabled: true
+      provider: opentelemetry
+      samplingRate: 0.5
+    dashboards:
+      - type: grafana
+        url: https://grafana.company.com/d/team-leader
+  resources:
+    memory: 2Gi
+    cpu: 2000m
+    storage: 5Gi
+  state:
+    persistence: postgresql
+    ttl: 604800  # 7 days
+    schema:
+      type: object
+      properties:
+        team_members:
+          type: array
+          items:
+            type: object
+            properties:
+              agent_id:
+                type: string
+              capabilities:
+                type: array
+              status:
+                type: string
+              workload:
+                type: integer
+        active_tasks:
+          type: array
+        completed_tasks:
+          type: array
+        task_history:
+          type: array
+        coordination_state:
+          type: object
+  security:
+    authentication:
+      required: true
+      methods:
+        - oauth2
+        - mutual_tls
+    authorization:
+      rbac:
+        enabled: true
+        roles:
+          - team_leader
+          - team_member
+          - team_observer
+    encryption:
+      at_rest: true
+      in_transit: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bluefly/openstandardagents",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "exports": {
     "./schema": "./spec/v0.4/agent.schema.json",
     "./schema/v0.4": "./spec/v0.4/agent.schema.json",
@@ -81,17 +81,10 @@
     "openapi/",
     "schemas/",
     "templates/",
+    ".version.json",
     "README.md",
-    "DEMO.md",
     "LICENSE",
-    "CHANGELOG.md",
-    ".env.local",
-    ".devfile.yaml",
-    ".wiki-config.json",
-    ".gitlab-ci-trigger",
-    "junit.xml",
-    "llms-ctx-full.txt",
-    "llms-ctx.txt"
+    "CHANGELOG.md"
   ],
   "publishConfig": {
     "access": "public",
@@ -124,6 +117,8 @@
     "test:smoke:npm-pack": "jest tests/e2e/npm-pack.smoke.spec.ts",
     "test:smoke:schema": "jest tests/e2e/schema-coverage.smoke.spec.ts",
     "test:coverage": "jest --coverage",
+    "test:mutation": "stryker run",
+    "test:mutation:ci": "stryker run --logLevel error",
     "test:watch": "jest --watch",
     "test:ci": "jest --ci --coverage --reporters=default --reporters=jest-junit",
     "ci:validate": "npm run build:clean && npm run quality && npm run test:unit && npm run test:smoke && npm run validate:all",
@@ -183,8 +178,9 @@
     "postinstall": "node bin/postinstall || true",
     "// RELEASE & PUBLISH": "",
     "prerelease": "npm run quality && npm run test && npm run validate",
-    "prepublishOnly": "npm run validate:deps && npm run build:clean && npm run test:unit && npm run test:smoke",
+    "prepublishOnly": "tsx tools/validate-package.ts",
     "validate:deps": "tsx tools/validate-dependencies.ts",
+    "validate:package": "tsx tools/validate-package.ts",
     "release:check": "npm run prerelease && echo '✅ Ready for release'",
     "release:verify": "tsx src/dev-cli/src/index.ts release verify",
     "release:prep": "tsx src/dev-cli/src/index.ts release prep v$(node -p \"require('./.version.json').latest_stable\")"
@@ -231,12 +227,13 @@
     "axios": "^1.12.2",
     "boxen": "^7.1.1",
     "chalk": "^5.6.2",
-    "cli-table3": "^0.6.5",
     "chokidar": "^5.0.0",
+    "cli-table3": "^0.6.5",
     "commander": "^11.1.0",
     "express": "^4.18.2",
     "fast-glob": "^3.3.2",
     "glob": "^11.0.3",
+    "gradient-string": "^2.0.2",
     "inquirer": "^9.2.12",
     "inversify": "^7.10.4",
     "js-yaml": "^4.1.0",
@@ -244,6 +241,9 @@
     "open": "^11.0.0",
     "openai": "^6.9.1",
     "ora": "^8.0.1",
+    "pino": "^10.3.0",
+    "pino-pretty": "^13.1.3",
+    "prom-client": "^15.1.3",
     "readline": "^1.3.0",
     "reflect-metadata": "^0.2.2",
     "semver": "^7.7.3",
@@ -263,6 +263,7 @@
     "@semantic-release/github": "^12.0.0",
     "@semantic-release/gitlab": "^13.2.9",
     "@types/express": "^4.17.21",
+    "@types/gradient-string": "^1.1.6",
     "@types/inquirer": "^9.0.9",
     "@types/jest": "^29.5.14",
     "@types/js-yaml": "^4.0.9",
@@ -290,6 +291,10 @@
     "typescript": "^5.9.3",
     "vitest": "^2.1.8"
   },
+  "engines": {
+    "node": ">=16.20.0 || >=18.0.0 || >=20.0.0 || >=22.0.0",
+    "npm": ">=8.0.0"
+  },
   "volta": {
     "node": "18.20.8",
     "npm": "10.9.4"