@bluefly/openstandardagents 0.4.3 → 0.4.5

package/examples/showcase/security-scanner-enhanced.ossa.yaml

@@ -0,0 +1,304 @@
+apiVersion: ossa/v0.4.5
+kind: Agent
+metadata:
+  name: security-scanner-enhanced
+  version: 1.0.0
+  description: Advanced security scanner with vulnerability scanning, penetration testing, and compliance checking using nmap, OWASP ZAP, and custom scanners
+  labels:
+    ossa.dev/category: security
+    ossa.dev/tier: production-example
+    ossa.dev/autonomy: medium
+    ossa.dev/domain: security-operations
+    ossa.dev/execution: event-driven
+  annotations:
+    ossa.dev/documentation: https://openstandardagents.org/agents/security-scanner-enhanced
+    ossa.dev/tools: nmap,owasp-zap,custom-scanners
+    ossa.dev/triggers: khook,webhook,schedule
+spec:
+  capabilities:
+  - type: function
+    name: vulnerability.scan
+    description: Scan systems and applications for vulnerabilities
+    parameters:
+      type: object
+      properties:
+        target:
+          type: string
+          description: Target host, IP range, or application URL
+        scan_type:
+          type: string
+          enum: [network, web_app, container, cloud, api]
+          description: Type of vulnerability scan
+        depth:
+          type: string
+          enum: [quick, standard, deep, comprehensive]
+          default: standard
+        tools:
+          type: array
+          items:
+            type: string
+            enum: [nmap, zap, nikto, sqlmap, custom]
+          default: [nmap, zap]
+      required: [target, scan_type]
+  - type: function
+    name: penetration.test
+    description: Execute penetration testing procedures
+    parameters:
+      type: object
+      properties:
+        target:
+          type: string
+        test_scope:
+          type: array
+          items:
+            type: string
+            enum: [network, web, wireless, social_engineering, physical]
+        methodology:
+          type: string
+          enum: [owasp, ptes, osstmm, nist]
+          default: owasp
+        authorization:
+          type: object
+          properties:
+            authorized_by:
+              type: string
+            scope_document:
+              type: string
+            valid_until:
+              type: string
+              format: date-time
+          required: [authorized_by, valid_until]
+      required: [target, test_scope, authorization]
+  - type: function
+    name: compliance.check
+    description: Verify compliance with security policies and standards
+    parameters:
+      type: object
+      properties:
+        standards:
+          type: array
+          items:
+            type: string
+            enum: [PCI-DSS, ISO27001, NIST, CIS, OWASP-Top10]
+        scope:
+          type: string
+        baseline:
+          type: string
+          description: Baseline configuration for comparison
+      required: [standards, scope]
+  role: |
+    You are an advanced security scanning specialist responsible for identifying
+    vulnerabilities, executing penetration tests, and ensuring security compliance.
+
+    Your core responsibilities:
+    1. Vulnerability Scanning - Identify security weaknesses using multiple tools
+    2. Penetration Testing - Execute authorized security testing
+    3. Compliance Checking - Verify adherence to security standards
+    4. Threat Analysis - Analyze and classify security threats
+    5. Remediation Guidance - Provide actionable security fixes
+
+    Tools and methodologies:
+    - nmap: Network discovery and security scanning
+    - OWASP ZAP: Web application security scanner
+    - Custom scanners: Specialized security tools
+    - OWASP Top 10: Web application security risks
+    - CVE database: Known vulnerability tracking
+
+    Security scanning principles:
+    - Always operate within authorized scope
+    - Minimize impact on production systems
+    - Follow responsible disclosure practices
+    - Document all findings with evidence
+    - Provide risk-based prioritization
+
+    Always provide:
+    - Severity classification (Critical, High, Medium, Low, Info)
+    - CVE/CWE identifiers when applicable
+    - Affected components and versions
+    - Exploit availability and complexity
+    - Detailed remediation steps with references
+    - Evidence (screenshots, logs, payloads)
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4
+    temperature: 0.1
+    maxTokens: 32768
+    features:
+      promptCaching: true
+      tokenEfficiency: false
+      batchProcessing: false
+  tools:
+  - type: function
+    name: nmap.scan
+    description: Network scanning and discovery tool
+  - type: function
+    name: zap.scan
+    description: Web application security scanner
+  - type: function
+    name: cve.lookup
+    description: Query CVE database for vulnerability details
+  - type: function
+    name: exploit.check
+    description: Check exploit availability for vulnerabilities
+  - type: function
+    name: report.generate
+    description: Generate security scan reports
+  autonomy:
+    mode: semi-autonomous
+    humanApproval: true
+    approvalRequired:
+      - before_penetration_test
+      - before_production_scan
+      - on_critical_finding
+    escalation:
+      enabled: true
+      triggers:
+        - critical_vulnerability
+        - active_exploit
+        - compliance_violation
+        - scan_blocked
+      contacts:
+        - role: security_team
+          method: slack
+          priority: high
+        - role: ciso
+          method: email
+          priority: critical
+        - role: soc
+          method: pagerduty
+          priority: critical
+  triggers:
+    khook:
+      enabled: true
+      events:
+        - type: deployment
+          action: trigger_scan
+          filter:
+            environment: [production, staging]
+        - type: code_commit
+          action: trigger_scan
+          filter:
+            branch: [main, master]
+        - type: configuration_change
+          action: trigger_scan
+    webhook:
+      enabled: true
+      endpoints:
+        - path: /scan/trigger
+          method: POST
+          authentication: bearer
+    schedule:
+      enabled: true
+      cron: "0 0 * * 0"  # Weekly on Sunday midnight
+      timezone: UTC
+  observability:
+    metrics:
+      enabled: true
+      provider: prometheus
+      port: 9093
+      custom:
+        - name: vulnerabilities_found
+          type: counter
+          labels: [severity, type]
+        - name: scans_completed
+          type: counter
+          labels: [scan_type, status]
+        - name: scan_duration
+          type: histogram
+          labels: [scan_type]
+        - name: critical_findings
+          type: gauge
+    logging:
+      level: info
+      format: json
+      destination: stdout
+      sensitive_data_filtering: true
+    tracing:
+      enabled: true
+      provider: opentelemetry
+      samplingRate: 1.0
+    alerts:
+      - name: critical_vulnerability_found
+        condition: vulnerabilities_found{severity="critical"} > 0
+        notification: pagerduty
+      - name: scan_failure
+        condition: scans_completed{status="failed"} > 3
+        notification: slack
+  resources:
+    memory: 4Gi
+    cpu: 2000m
+    storage: 20Gi
+    networkPolicy:
+      egress:
+        - to: internet
+          ports: [80, 443, 8080, 8443]
+      ingress:
+        - from: webhook_sources
+          ports: [8080]
+  state:
+    persistence: postgresql
+    ttl: 7776000  # 90 days
+    schema:
+      type: object
+      properties:
+        scan_history:
+          type: array
+        vulnerability_database:
+          type: object
+        baseline_configurations:
+          type: object
+        findings:
+          type: array
+          items:
+            type: object
+            properties:
+              id:
+                type: string
+              severity:
+                type: string
+              status:
+                type: string
+                enum: [open, in_progress, remediated, false_positive]
+              found_date:
+                type: string
+                format: date-time
+  retry:
+    enabled: true
+    maxAttempts: 2
+    backoff:
+      type: linear
+      initialDelay: 10s
+  security:
+    authentication:
+      required: true
+      methods:
+        - mutual_tls
+        - api_key
+    authorization:
+      rbac:
+        enabled: true
+        roles:
+          - security_admin
+          - security_analyst
+          - penetration_tester
+      policies:
+        - resource: scan
+          action: execute
+          conditions:
+            - authorized_scope
+            - valid_authorization
+    dataClassification:
+      - security_findings
+      - vulnerability_data
+      - confidential
+    encryption:
+      at_rest: true
+      in_transit: true
+    audit:
+      enabled: true
+      events:
+        - scan_initiated
+        - scan_completed
+        - critical_finding
+        - penetration_test_started
+        - compliance_check_failed

package/examples/showcase/security-scanner.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: security-scanner

package/examples/showcase/team-leader.ossa.yaml

@@ -0,0 +1,306 @@
+apiVersion: ossa/v0.4.5
+kind: Agent
+metadata:
+  name: team-leader
+  version: 1.0.0
+  description: Multi-agent team leader with task distribution, coordination, and progress tracking capabilities
+  labels:
+    ossa.dev/category: orchestration
+    ossa.dev/tier: production-example
+    ossa.dev/autonomy: autonomous
+    ossa.dev/domain: coordination
+    ossa.dev/role: leader
+  annotations:
+    ossa.dev/documentation: https://openstandardagents.org/agents/team-leader
+    ossa.dev/a2a-enabled: "true"
+    ossa.dev/team-discovery: "true"
+spec:
+  capabilities:
+  - type: function
+    name: task.distribute
+    description: Distribute tasks to team members based on capabilities
+    parameters:
+      type: object
+      properties:
+        task:
+          type: object
+          properties:
+            id:
+              type: string
+            description:
+              type: string
+            requirements:
+              type: array
+              items:
+                type: string
+            priority:
+              type: string
+              enum: [critical, high, medium, low]
+            deadline:
+              type: string
+              format: date-time
+          required: [id, description, requirements]
+        assignment_strategy:
+          type: string
+          enum: [capability_match, load_balance, round_robin, priority]
+          default: capability_match
+      required: [task]
+  - type: function
+    name: team.coordinate
+    description: Coordinate team member activities and dependencies
+    parameters:
+      type: object
+      properties:
+        coordination_type:
+          type: string
+          enum: [sequential, parallel, conditional, fan_out_fan_in]
+        agents:
+          type: array
+          items:
+            type: object
+            properties:
+              agent_id:
+                type: string
+              role:
+                type: string
+              dependencies:
+                type: array
+                items:
+                  type: string
+        timeout:
+          type: integer
+          description: Coordination timeout in seconds
+          default: 3600
+      required: [coordination_type, agents]
+  - type: function
+    name: progress.track
+    description: Track and report team progress
+    parameters:
+      type: object
+      properties:
+        scope:
+          type: string
+          enum: [agent, task, project, team]
+        metrics:
+          type: array
+          items:
+            type: string
+            enum: [completion_rate, velocity, quality, blockers]
+        report_format:
+          type: string
+          enum: [summary, detailed, dashboard]
+          default: summary
+      required: [scope]
+  - type: query
+    name: team.discover
+    description: Discover available team members and their capabilities
+  role: |
+    You are a team leader agent responsible for orchestrating multi-agent teams,
+    distributing tasks, coordinating activities, and tracking progress.
+
+    Your core responsibilities:
+    1. Task Distribution - Assign tasks to team members based on capabilities
+    2. Team Coordination - Manage dependencies and orchestration patterns
+    3. Progress Tracking - Monitor team progress and identify blockers
+    4. Resource Management - Balance workload across team members
+    5. Communication - Facilitate agent-to-agent communication
+    6. Conflict Resolution - Resolve task conflicts and dependencies
+
+    Orchestration patterns:
+    - Sequential: Execute tasks in order with dependencies
+    - Parallel: Execute independent tasks concurrently
+    - Conditional: Route based on conditions and results
+    - Fan-out/Fan-in: Distribute work and aggregate results
+
+    Team leadership principles:
+    - Capability-based assignment (match tasks to agent strengths)
+    - Load balancing (distribute work evenly)
+    - Proactive monitoring (identify blockers early)
+    - Clear communication (use A2A protocols)
+    - Adaptive coordination (adjust based on team state)
+
+    Always:
+    - Verify agent capabilities before assignment
+    - Monitor task progress and completion
+    - Handle failures gracefully with reassignment
+    - Provide clear status updates
+    - Maintain team state and history
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4
+    temperature: 0.3
+    maxTokens: 16384
+    features:
+      promptCaching: true
+      tokenEfficiency: false
+      batchProcessing: false
+  tools:
+  - type: function
+    name: agent.query
+    description: Query agent capabilities and status
+  - type: function
+    name: task.queue
+    description: Manage task queue and priorities
+  - type: function
+    name: dependency.graph
+    description: Build and analyze task dependency graphs
+  - type: function
+    name: notification.send
+    description: Send notifications to team members
+  autonomy:
+    mode: autonomous
+    humanApproval: false
+    escalation:
+      enabled: true
+      triggers:
+        - team_deadlock
+        - critical_task_failure
+        - resource_exhaustion
+        - prolonged_blocker
+      contacts:
+        - role: team_admin
+          method: slack
+        - role: on_call_engineer
+          method: pagerduty
+  a2a:
+    enabled: true
+    role: leader
+    capabilities:
+      - task-distribution
+      - team-coordination
+      - progress-tracking
+      - agent-discovery
+    protocols:
+      - rest
+      - grpc
+      - websocket
+    discovery:
+      enabled: true
+      broadcast: true
+      interval: 60s
+      endpoints:
+        - url: https://team-leader.company.com/v1
+          protocol: rest
+        - url: wss://team-leader.company.com/ws
+          protocol: websocket
+    communication:
+      patterns:
+        - request-response
+        - publish-subscribe
+        - broadcast
+      messageFormats:
+        - application/json
+      reliability:
+        retries: 3
+        timeout: 30s
+        circuitBreaker:
+          enabled: true
+          threshold: 5
+          resetTimeout: 60s
+  teamDiscovery:
+    enabled: true
+    autoRegister: true
+    heartbeat:
+      interval: 30s
+      timeout: 90s
+    capabilities:
+      query: true
+      filter: true
+      subscribe: true
+  messaging:
+    transport: redis
+    queues:
+      - name: task-assignments
+        description: Task assignment notifications
+        dlq: true
+      - name: status-updates
+        description: Team member status updates
+        dlq: false
+      - name: coordination-events
+        description: Coordination lifecycle events
+        dlq: true
+    events:
+      publish:
+        - task.assigned
+        - task.completed
+        - task.failed
+        - coordination.started
+        - coordination.completed
+        - team.member.discovered
+        - team.member.offline
+      subscribe:
+        - task.status.changed
+        - agent.heartbeat
+        - agent.capability.updated
+  observability:
+    metrics:
+      enabled: true
+      provider: prometheus
+      port: 9092
+      custom:
+        - name: tasks_distributed
+          type: counter
+        - name: team_members_active
+          type: gauge
+        - name: coordination_duration
+          type: histogram
+        - name: task_success_rate
+          type: gauge
+    logging:
+      level: info
+      format: json
+      destination: stdout
+    tracing:
+      enabled: true
+      provider: opentelemetry
+      samplingRate: 0.5
+    dashboards:
+      - type: grafana
+        url: https://grafana.company.com/d/team-leader
+  resources:
+    memory: 2Gi
+    cpu: 2000m
+    storage: 5Gi
+  state:
+    persistence: postgresql
+    ttl: 604800  # 7 days
+    schema:
+      type: object
+      properties:
+        team_members:
+          type: array
+          items:
+            type: object
+            properties:
+              agent_id:
+                type: string
+              capabilities:
+                type: array
+              status:
+                type: string
+              workload:
+                type: integer
+        active_tasks:
+          type: array
+        completed_tasks:
+          type: array
+        task_history:
+          type: array
+        coordination_state:
+          type: object
+  security:
+    authentication:
+      required: true
+      methods:
+        - oauth2
+        - mutual_tls
+    authorization:
+      rbac:
+        enabled: true
+        roles:
+          - team_leader
+          - team_member
+          - team_observer
+    encryption:
+      at_rest: true
+      in_transit: true

package/examples/showcase/test-generator.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: test-generator

package/examples/showcase/workflow-orchestrator.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Workflow
 metadata:
   name: workflow-orchestrator

package/examples/single-agent.ossa.yaml

@@ -0,0 +1,40 @@
+apiVersion: ossa/v0.4
+kind: Agent
+metadata:
+  name: code-assistant
+  version: 1.0.0
+  description: A single code assistant agent
+  agentType: claude
+  agentKind: assistant
+  agentArchitecture:
+    pattern: single
+    capabilities:
+      - tools
+      - code
+      - context
+spec:
+  role: >
+    You are an expert code assistant. You help developers write, review,
+    and debug code across multiple programming languages.
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-5-20250514
+    temperature: 0.3
+    maxTokens: 8192
+  tools:
+    - type: function
+      name: read_file
+      description: Read a file from the filesystem
+    - type: function
+      name: write_file
+      description: Write content to a file
+    - type: function
+      name: run_tests
+      description: Execute test suite
+  constraints:
+    cost:
+      maxTokensPerRequest: 8192
+      maxTokensPerDay: 500000
+    performance:
+      maxLatencySeconds: 30
+      timeoutSeconds: 120

package/examples/skills-example.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: research-agent