@bluefly/openstandardagents 0.4.4 → 0.4.5

package/examples/extensions/agents-md-advanced.yml

@@ -1,7 +1,7 @@
 # OSSA agents.md Extension - Advanced Example
 # Demonstrates advanced features including Cursor integration and custom sections
 
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: fullstack-dev-agent

package/examples/extensions/agents-md-basic.yml

@@ -1,7 +1,7 @@
 # OSSA agents.md Extension - Basic Example
 # Demonstrates basic agents.md generation from OSSA manifest
 
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: code-review-agent

package/examples/extensions/agents-md-sync.yml

@@ -1,7 +1,7 @@
 # OSSA agents.md Extension - Sync Example
 # Demonstrates automatic synchronization configuration
 
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: docs-agent

package/examples/extensions/agents-md-v1.yml

@@ -2,7 +2,7 @@
 # OpenAI agents.md repository-level agent guidance generation
 # See: https://agents.md | https://github.com/openai/agents.md
 
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: ExtensionSchema
 metadata:
   name: agents-md-extension
@@ -166,10 +166,10 @@ spec:
   cliCommands:
     - name: "ossa agents-md generate"
       description: "Generate AGENTS.md from manifest"
-      usage: "ossa agents-md generate --manifest .agents/my-agent/manifest.yaml"
+      usage: "ossa agents-md generate --manifest .agents/supercali-fragilisticagent/manifest.yaml"
     - name: "ossa agents-md validate"
       description: "Validate AGENTS.md against manifest"
-      usage: "ossa agents-md validate --agents-md AGENTS.md --manifest .agents/my-agent/manifest.yaml"
+      usage: "ossa agents-md validate --agents-md AGENTS.md --manifest .agents/supercali-fragilisticagent/manifest.yaml"
     - name: "ossa agents-md sync"
       description: "Sync AGENTS.md with manifest changes"
       usage: "ossa agents-md sync --watch"

package/examples/extensions/drupal-v1.yml

@@ -2,7 +2,7 @@
 # Extension specification for Drupal LLM Platform deployment
 # Compatible with Drupal 10+ and llm-platform modules
 
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: ExtensionSchema
 metadata:
   name: drupal-extension

package/examples/extensions/encryption-multi-provider.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: secure-agent
@@ -28,7 +28,7 @@ spec:
         interval_days: 90
         
 ---
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: vault-encrypted-agent
@@ -57,7 +57,7 @@ spec:
         - "*"  # Encrypt all fields
       
 ---
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: gcp-kms-agent
@@ -86,7 +86,7 @@ spec:
         - pii_fields
       
 ---
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: azure-keyvault-agent

package/examples/extensions/kagent-v1.yml

@@ -2,7 +2,7 @@
 # Production-grade specification for Kubernetes-native agent deployment
 # Compatible with kagent.dev/v1alpha1 CRDs
 
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: ExtensionSchema
 metadata:
   name: kagent-extension

package/examples/extensions/knowledge-sources.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: rag-agent

package/examples/extensions/mcp-full-featured.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: mcp-powered-agent

package/examples/getting-started/01-minimal-agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: hello-world-agent

package/examples/getting-started/02-agent-with-tools.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: code-assistant

package/examples/getting-started/03-agent-with-safety.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: secure-assistant

package/examples/getting-started/04-agent-with-messaging.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: security-scanner

package/examples/getting-started/05-workflow-composition.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Workflow
 metadata:
   name: code-review-pipeline

package/examples/getting-started/hello-world-complete.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.1
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: hello-world-agent
@@ -15,6 +15,7 @@ metadata:
     team: platform-engineering
     domain: examples
     complexity: minimal
+    capability: greeting,echo,status
   annotations:
     documentation: https://docs.ossa.io/examples/hello-world
     support: support@example.com

package/examples/gitlab-agents/DEPLOYMENT.md

@@ -20,7 +20,7 @@ This directory contains **6 production-ready GitLab agents** generated from OSSA
 - Kubernetes cluster with KAgent CRD installed
 - GitLab API token with `api` scope
 - Anthropic API key
-- Domain pointing to cluster: `api.blueflyagents.com`
+- Domain pointing to cluster: `mesh.blueflyagents.com`
 
 ### 1. Install KAgent CRD
 
@@ -66,19 +66,19 @@ daily-code-scan           1/1     Running   1m
 For each webhook agent, configure in **GitLab Project → Settings → Webhooks**:
 
 #### duo-comment-responder
-- **URL**: `http://api.blueflyagents.com/webhook/duo-comment-responder`
+- **URL**: `http://mesh.blueflyagents.com/webhook/duo-comment-responder`
 - **Secret Token**: (from WEBHOOK_SECRET)
 - **Events**: ☑️ Comments, ☑️ Merge requests
 - **SSL verification**: ☐ Disable (internal network)
 
 #### mr-reviewer
-- **URL**: `http://api.blueflyagents.com/webhook/mr-reviewer`
+- **URL**: `http://mesh.blueflyagents.com/webhook/mr-reviewer`
 - **Secret Token**: (from WEBHOOK_SECRET)
 - **Events**: ☑️ Merge requests
 - **SSL verification**: ☐ Disable
 
 #### pipeline-auto-fix
-- **URL**: `http://api.blueflyagents.com/webhook/pipeline-auto-fix`
+- **URL**: `http://mesh.blueflyagents.com/webhook/pipeline-auto-fix`
 - **Secret Token**: (from WEBHOOK_SECRET)
 - **Events**: ☑️ Pipeline events
 - **SSL verification**: ☐ Disable
@@ -87,7 +87,7 @@ For each webhook agent, configure in **GitLab Project → Settings → Webhooks*
 
 ```bash
 # Test duo-comment-responder
-curl -X POST http://api.blueflyagents.com/webhook/duo-comment-responder \
+curl -X POST http://mesh.blueflyagents.com/webhook/duo-comment-responder \
   -H "Content-Type: application/json" \
   -H "X-Gitlab-Token: your-webhook-secret" \
   -d '{
@@ -212,7 +212,7 @@ Each agent exposes Prometheus metrics on `/metrics`:
 
 ```bash
 # Scrape metrics
-curl http://api.blueflyagents.com/webhook/duo-comment-responder/metrics
+curl http://mesh.blueflyagents.com/webhook/duo-comment-responder/metrics
 ```
 
 ## Troubleshooting
@@ -304,7 +304,7 @@ kubectl delete namespace gitlab-agents
 ```
 GitLab Project
       ↓ (webhook)
-api.blueflyagents.com (Ingress)
+mesh.blueflyagents.com (Ingress)
       ↓
 KAgent Controller
       ↓

package/examples/gitlab-agents/daily-code-scan/src/gitlab-client.ts

@@ -19,17 +19,65 @@ export class GitLabClient {
   /**
    * Run comprehensive codebase audit
    */
-  async runFullAudit(projectId: any, ref: any) {
-    // TODO: Implement runFullAudit
-    throw new Error('Not implemented: runFullAudit');
+  async runFullAudit(projectId: string, ref: string) {
+    const tree = await this.gitlab.Repositories.allRepositoryTrees(projectId, { ref, recursive: true });
+    const sourceFiles = (tree as any[]).filter(
+      (item: any) => item.type === 'blob' && /\.(ts|js|py|rb|go|rs)$/.test(item.path)
+    );
+
+    const metrics = {
+      totalFiles: sourceFiles.length,
+      scannedAt: new Date().toISOString(),
+      ref,
+      findings: [] as Array<{ file: string; type: string; message: string }>,
+    };
+
+    // Sample a subset of files for analysis (avoid rate limits)
+    const filesToScan = sourceFiles.slice(0, 50);
+    for (const file of filesToScan) {
+      try {
+        const content = await this.gitlab.RepositoryFiles.show(projectId, file.path, ref);
+        const decoded = Buffer.from(content.content, 'base64').toString('utf-8');
+
+        if (decoded.includes('throw new Error(\'Not implemented')) {
+          metrics.findings.push({
+            file: file.path,
+            type: 'stub',
+            message: 'Contains unimplemented stub method',
+          });
+        }
+        if (decoded.includes('// TODO')) {
+          metrics.findings.push({
+            file: file.path,
+            type: 'todo',
+            message: 'Contains TODO comment',
+          });
+        }
+      } catch {
+        // Skip files that cannot be read
+      }
+    }
+
+    return metrics;
   }
 
   /**
-   * Get metrics from previous scans
+   * Get metrics from previous scans by reading scan issues
    */
-  async getHistoricalMetrics(projectId: any, daysBack: any) {
-    // TODO: Implement getHistoricalMetrics
-    throw new Error('Not implemented: getHistoricalMetrics');
+  async getHistoricalMetrics(projectId: string, daysBack: number) {
+    const since = new Date(Date.now() - daysBack * 86400000).toISOString();
+    const issues = await this.gitlab.Issues.all({
+      projectId,
+      labels: 'code-scan',
+      createdAfter: since,
+    });
+
+    return (issues as any[]).map((issue: any) => ({
+      date: issue.created_at,
+      title: issue.title,
+      state: issue.state,
+      url: issue.web_url,
+    }));
   }
 
   /**
@@ -50,10 +98,38 @@ export class GitLabClient {
   }
 
   /**
-   * Update quality metrics dashboard
+   * Update quality metrics dashboard by writing metrics to a wiki page
    */
-  async updateMetricsDashboard(projectId: any, metrics: any) {
-    // TODO: Implement updateMetricsDashboard
-    throw new Error('Not implemented: updateMetricsDashboard');
+  async updateMetricsDashboard(projectId: string, metrics: { totalFiles: number; findings: any[]; scannedAt: string }) {
+    const dashboardContent = [
+      '# Code Quality Metrics Dashboard',
+      '',
+      `**Last Scan:** ${metrics.scannedAt}`,
+      `**Total Files:** ${metrics.totalFiles}`,
+      `**Findings:** ${metrics.findings.length}`,
+      '',
+      '## Findings',
+      '',
+      ...metrics.findings.map((f) => `- **${f.type}** \`${f.file}\`: ${f.message}`),
+    ].join('\n');
+
+    try {
+      await this.gitlab.RepositoryFiles.edit(
+        projectId,
+        'docs/quality-metrics.md',
+        'main',
+        dashboardContent,
+        'chore: update quality metrics dashboard'
+      );
+    } catch {
+      // File does not exist yet, create it
+      await this.gitlab.RepositoryFiles.create(
+        projectId,
+        'docs/quality-metrics.md',
+        'main',
+        dashboardContent,
+        'chore: create quality metrics dashboard'
+      );
+    }
   }
 }

package/examples/gitlab-agents/duo-comment-responder/README.md

@@ -69,7 +69,7 @@ kubectl apply -f k8s/deployment.yaml
 Configure the webhook in your GitLab project:
 
 1. Go to **Settings** → **Webhooks**
-2. Add webhook URL: `http://api.blueflyagents.com/webhook/duo-comment-responder`
+2. Add webhook URL: `http://mesh.blueflyagents.com/webhook/duo-comment-responder`
 3. Set secret token (from .env WEBHOOK_SECRET)
 4. Select events: Comments
 5. Save webhook

package/examples/gitlab-agents/duo-comment-responder/webhook-config.json

@@ -1,5 +1,5 @@
 {
-  "url": "http://api.blueflyagents.com/webhook/duo-comment-responder",
+  "url": "http://mesh.blueflyagents.com/webhook/duo-comment-responder",
   "token": "${WEBHOOK_SECRET}",
   "enable_ssl_verification": false,
   "push_events": false,

package/examples/gitlab-agents/k8s/deploy-all.yaml

@@ -98,7 +98,7 @@ spec:
 
   ingress:
     enabled: true
-    host: api.blueflyagents.com
+    host: mesh.blueflyagents.com
     path: /webhook/duo-comment-responder
     annotations:
       cert-manager.io/cluster-issuer: letsencrypt-prod
@@ -167,7 +167,7 @@ spec:
 
   ingress:
     enabled: true
-    host: api.blueflyagents.com
+    host: mesh.blueflyagents.com
     path: /webhook/mr-reviewer
 
 ---
@@ -232,7 +232,7 @@ spec:
 
   ingress:
     enabled: true
-    host: api.blueflyagents.com
+    host: mesh.blueflyagents.com
     path: /webhook/pipeline-auto-fix
 
 ---
@@ -312,10 +312,10 @@ spec:
   ingressClassName: nginx
   tls:
     - hosts:
-        - api.blueflyagents.com
+        - mesh.blueflyagents.com
       secretName: gitlab-agents-tls
   rules:
-    - host: api.blueflyagents.com
+    - host: mesh.blueflyagents.com
       http:
         paths:
           - path: /webhook/duo-comment-responder(/|$)(.*)

package/examples/gitlab-agents/mr-reviewer/README.md

@@ -69,7 +69,7 @@ kubectl apply -f k8s/deployment.yaml
 Configure the webhook in your GitLab project:
 
 1. Go to **Settings** → **Webhooks**
-2. Add webhook URL: `http://api.blueflyagents.com/webhook/mr-reviewer`
+2. Add webhook URL: `http://mesh.blueflyagents.com/webhook/mr-reviewer`
 3. Set secret token (from .env WEBHOOK_SECRET)
 4. Select events: Merge requests
 5. Save webhook

package/examples/gitlab-agents/mr-reviewer/src/gitlab-client.ts

@@ -19,25 +19,95 @@ export class GitLabClient {
   /**
    * Get all file changes in the MR
    */
-  async getMRChanges(projectId: any, mrIid: any) {
-    // TODO: Implement getMRChanges
-    throw new Error('Not implemented: getMRChanges');
+  async getMRChanges(projectId: string, mrIid: number) {
+    const changes = await this.gitlab.MergeRequests.allDiffs(projectId, mrIid);
+    return changes.map((diff: any) => ({
+      oldPath: diff.old_path,
+      newPath: diff.new_path,
+      diff: diff.diff,
+      newFile: diff.new_file,
+      renamedFile: diff.renamed_file,
+      deletedFile: diff.deleted_file,
+    }));
   }
 
   /**
    * Run production-grade audit on changed files
    */
-  async runAudit(projectId: any, mrIid: any) {
-    // TODO: Implement runAudit
-    throw new Error('Not implemented: runAudit');
+  async runAudit(projectId: string, mrIid: number) {
+    const changes = await this.getMRChanges(projectId, mrIid);
+    const findings: Array<{ file: string; severity: string; message: string }> = [];
+
+    for (const change of changes) {
+      if (change.deletedFile) continue;
+
+      // Check for common issues in diffs
+      if (change.diff?.includes('console.log')) {
+        findings.push({
+          file: change.newPath,
+          severity: 'warning',
+          message: 'Contains console.log statement - consider removing for production',
+        });
+      }
+      if (change.diff?.includes('TODO') || change.diff?.includes('FIXME')) {
+        findings.push({
+          file: change.newPath,
+          severity: 'info',
+          message: 'Contains TODO/FIXME comment',
+        });
+      }
+      if (change.diff?.includes('password') || change.diff?.includes('secret')) {
+        findings.push({
+          file: change.newPath,
+          severity: 'critical',
+          message: 'Potential credential exposure detected',
+        });
+      }
+    }
+
+    return {
+      totalFiles: changes.length,
+      findings,
+      passed: !findings.some((f) => f.severity === 'critical'),
+    };
   }
 
   /**
    * Run security scan on dependencies
    */
-  async runSecurityScan(projectId: any, branch: any) {
-    // TODO: Implement runSecurityScan
-    throw new Error('Not implemented: runSecurityScan');
+  async runSecurityScan(projectId: string, branch: string) {
+    // Fetch package.json to check dependencies
+    const vulnerabilities: Array<{ dependency: string; severity: string; advisory: string }> = [];
+
+    try {
+      const file = await this.gitlab.RepositoryFiles.show(projectId, 'package.json', branch);
+      const packageJson = JSON.parse(Buffer.from(file.content, 'base64').toString('utf-8'));
+      const allDeps = {
+        ...packageJson.dependencies,
+        ...packageJson.devDependencies,
+      };
+
+      // Flag known patterns that indicate insecure version ranges
+      for (const [dep, version] of Object.entries(allDeps)) {
+        const versionStr = String(version);
+        if (versionStr === '*' || versionStr === 'latest') {
+          vulnerabilities.push({
+            dependency: dep,
+            severity: 'warning',
+            advisory: `Unpinned dependency version: ${versionStr}`,
+          });
+        }
+      }
+    } catch {
+      // package.json not found or not parseable - skip dependency check
+    }
+
+    return {
+      scannedAt: new Date().toISOString(),
+      branch,
+      vulnerabilities,
+      passed: !vulnerabilities.some((v) => v.severity === 'critical'),
+    };
   }
 
   /**
@@ -57,10 +127,10 @@ export class GitLabClient {
   }
 
   /**
-   * Block MR with required changes
+   * Block MR with required changes by posting a blocking comment
    */
-  async blockMR(projectId: any, mrIid: any, reason: any) {
-    // TODO: Implement blockMR
-    throw new Error('Not implemented: blockMR');
+  async blockMR(projectId: string, mrIid: number, reason: string) {
+    const blockComment = `**Changes Requested**\n\nThis MR cannot be merged until the following issues are resolved:\n\n${reason}`;
+    return await this.gitlab.MergeRequestNotes.create(projectId, mrIid, blockComment);
   }
 }

package/examples/gitlab-agents/mr-reviewer/webhook-config.json

@@ -1,5 +1,5 @@
 {
-  "url": "http://api.blueflyagents.com/webhook/mr-reviewer",
+  "url": "http://mesh.blueflyagents.com/webhook/mr-reviewer",
   "token": "${WEBHOOK_SECRET}",
   "enable_ssl_verification": false,
   "push_events": false,

package/examples/gitlab-agents/pipeline-auto-fix/README.md

@@ -69,7 +69,7 @@ kubectl apply -f k8s/deployment.yaml
 Configure the webhook in your GitLab project:
 
 1. Go to **Settings** → **Webhooks**
-2. Add webhook URL: `http://api.blueflyagents.com/webhook/pipeline-auto-fix`
+2. Add webhook URL: `http://mesh.blueflyagents.com/webhook/pipeline-auto-fix`
 3. Set secret token (from .env WEBHOOK_SECRET)
 4. Select events: Pipelines
 5. Save webhook

package/examples/gitlab-agents/pipeline-auto-fix/src/gitlab-client.ts

@@ -70,8 +70,7 @@ export class GitLabClient {
   /**
    * Post comment explaining the fix
    */
-  async postComment(projectId: any, mrIid: any, body: any) {
-    // TODO: Implement postComment
-    throw new Error('Not implemented: postComment');
+  async postComment(projectId: string, mrIid: number, body: string) {
+    return await this.gitlab.MergeRequestNotes.create(projectId, mrIid, body);
   }
 }

package/examples/gitlab-agents/pipeline-auto-fix/webhook-config.json

@@ -1,5 +1,5 @@
 {
-  "url": "http://api.blueflyagents.com/webhook/pipeline-auto-fix",
+  "url": "http://mesh.blueflyagents.com/webhook/pipeline-auto-fix",
   "token": "${WEBHOOK_SECRET}",
   "enable_ssl_verification": false,
   "push_events": false,

package/examples/gitlab-duo/README.md

@@ -20,16 +20,16 @@ The GitLab Duo export transforms OSSA agents into production-ready GitLab Duo fl
 
 ```bash
 # Using OSSA CLI
-ossa export my-agent.ossa.yaml --platform gitlab --format flow -o .gitlab/duo/flows/
+ossa export creative-agent-naming.ossa.yaml --platform gitlab --format flow -o .gitlab/duo/flows/
 
 # This generates:
-# .gitlab/duo/flows/my-agent.yaml
+# .gitlab/duo/flows/creative-agent-naming.yaml
 ```
 
 ### OSSA Manifest Example
 
 ```yaml
-apiVersion: ossa/v0.4.4
+apiVersion: ossa/v0.4.5
 kind: Agent
 metadata:
   name: code-review-agent
@@ -172,10 +172,10 @@ llm:
 mkdir -p .gitlab/duo/flows
 
 # Copy generated flow
-cp my-agent-flow.yaml .gitlab/duo/flows/
+cp creative-agent-naming-flow.yaml .gitlab/duo/flows/
 
 # Commit and push
-git add .gitlab/duo/flows/my-agent-flow.yaml
+git add .gitlab/duo/flows/creative-agent-naming-flow.yaml
 git commit -m "feat: add code review agent flow"
 git push
 ```
@@ -192,10 +192,10 @@ git push
 
 ```bash
 # Trigger via comment in MR
-@my-agent-flow review this code
+@creative-agent-naming-flow review this code
 
 # Or use GitLab Duo Chat
-/duo ask my-agent-flow to analyze this merge request
+/duo ask creative-agent-naming-flow to analyze this merge request
 ```
 
 ## Advanced Configuration