@bluefly/openstandardagents 0.4.4 → 0.4.6

package/dist/services/skills-pipeline/skills-research.service.js

@@ -0,0 +1,471 @@
+/**
+ * Skills Research Service
+ * Research and index skills from various sources (awesome-claude-code, claude-code-showcase, npm registry)
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { injectable } from 'inversify';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import { z } from 'zod';
+import { Octokit } from '@octokit/rest';
+import axios from 'axios';
+/**
+ * Skill Research Result Schema
+ */
+export const SkillResearchResultSchema = z.object({
+    name: z.string(),
+    description: z.string(),
+    triggers: z.array(z.string()),
+    sourceUrl: z.string().url(),
+    installCommand: z.string().optional(),
+    author: z.string().optional(),
+    tags: z.array(z.string()).optional(),
+    rating: z.number().optional(),
+    lastUpdated: z.string().optional(),
+});
+/**
+ * Default Research Sources
+ */
+const DEFAULT_SOURCES = [
+    {
+        name: 'awesome-claude-code',
+        type: 'awesome-list',
+        url: 'https://github.com/anthropics/awesome-claude-code',
+        enabled: true,
+    },
+    {
+        name: 'claude-code-showcase',
+        type: 'showcase',
+        url: 'https://github.com/anthropics/claude-code-showcase',
+        enabled: true,
+    },
+    {
+        name: 'npm-registry',
+        type: 'registry',
+        url: 'https://registry.npmjs.org',
+        enabled: true,
+    },
+];
+/**
+ * Common English stop words to exclude from trigger extraction
+ */
+const STOP_WORDS = new Set([
+    'the',
+    'and',
+    'for',
+    'are',
+    'but',
+    'not',
+    'you',
+    'all',
+    'can',
+    'her',
+    'was',
+    'one',
+    'our',
+    'out',
+    'has',
+    'have',
+    'with',
+    'this',
+    'that',
+    'from',
+    'they',
+    'been',
+    'said',
+    'each',
+    'which',
+    'their',
+    'will',
+    'other',
+    'about',
+    'many',
+    'then',
+    'them',
+    'these',
+    'some',
+    'would',
+    'make',
+    'like',
+    'into',
+    'could',
+    'time',
+    'very',
+    'when',
+    'come',
+    'made',
+    'use',
+    'using',
+    'used',
+]);
+let SkillsResearchService = class SkillsResearchService {
+    indexPath;
+    sources = DEFAULT_SOURCES;
+    octokit;
+    constructor() {
+        const homeDir = process.env.HOME || process.env.USERPROFILE || '~';
+        this.indexPath = path.join(homeDir, '.ossa', 'skills-index.json');
+        // Use GITHUB_TOKEN if available (higher rate limits), otherwise unauthenticated
+        const token = process.env.GITHUB_TOKEN;
+        this.octokit = new Octokit(token ? { auth: token } : {});
+    }
+    /**
+     * Research skills from configured sources
+     */
+    async research(options) {
+        const { query, sources, limit = 20, updateIndex = false } = options;
+        // Filter sources if specified
+        const activeSources = sources
+            ? this.sources.filter((s) => sources.includes(s.name))
+            : this.sources.filter((s) => s.enabled);
+        if (activeSources.length === 0) {
+            throw new Error('No active research sources configured');
+        }
+        // Load existing index
+        let indexData = await this.loadIndex();
+        // Update index if requested or if empty
+        if (updateIndex || indexData.length === 0) {
+            indexData = await this.updateIndex(activeSources);
+        }
+        // Search index
+        const results = this.searchIndex(indexData, query);
+        // Apply limit
+        return results.slice(0, limit);
+    }
+    /**
+     * Load skills index from disk
+     */
+    async loadIndex() {
+        try {
+            const data = await fs.readFile(this.indexPath, 'utf-8');
+            const parsed = JSON.parse(data);
+            return z.array(SkillResearchResultSchema).parse(parsed.skills || []);
+        }
+        catch {
+            // Return empty array if file doesn't exist or is invalid
+            return [];
+        }
+    }
+    /**
+     * Save skills index to disk
+     */
+    async saveIndex(skills) {
+        const indexDir = path.dirname(this.indexPath);
+        await fs.mkdir(indexDir, { recursive: true });
+        const data = {
+            version: '1.0',
+            lastUpdated: new Date().toISOString(),
+            skills,
+        };
+        await fs.writeFile(this.indexPath, JSON.stringify(data, null, 2), 'utf-8');
+    }
+    /**
+     * Update skills index from sources
+     */
+    async updateIndex(sources) {
+        const allSkills = [];
+        for (const source of sources) {
+            try {
+                const skills = await this.fetchFromSource(source);
+                allSkills.push(...skills);
+            }
+            catch (error) {
+                console.warn(`Warning: Failed to fetch from ${source.name}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        // Deduplicate by name
+        const seen = new Set();
+        const deduped = allSkills.filter((skill) => {
+            if (seen.has(skill.name))
+                return false;
+            seen.add(skill.name);
+            return true;
+        });
+        // Save updated index
+        await this.saveIndex(deduped);
+        return deduped;
+    }
+    /**
+     * Fetch skills from a research source — dispatches by source type.
+     * Uses @octokit/rest SDK for GitHub and axios for npm registry.
+     */
+    async fetchFromSource(source) {
+        switch (source.type) {
+            case 'awesome-list':
+                return this.fetchFromAwesomeList(source);
+            case 'showcase':
+                return this.fetchFromShowcase(source);
+            case 'registry':
+                return this.fetchFromNpmRegistry(source);
+            case 'github':
+                return this.fetchFromGitHubRepo(source);
+            default:
+                console.warn(`Unknown source type: ${source.type}`);
+                return [];
+        }
+    }
+    /**
+     * Fetch skills from an awesome-list repo (e.g., awesome-claude-code)
+     * Uses Octokit SDK to fetch README.md and parses markdown links
+     */
+    async fetchFromAwesomeList(source) {
+        const { owner, repo } = this.parseGitHubUrl(source.url);
+        const skills = [];
+        const response = await this.octokit.rest.repos.getContent({
+            owner,
+            repo,
+            path: 'README.md',
+        });
+        if (!('content' in response.data))
+            return skills;
+        const content = Buffer.from(response.data.content, 'base64').toString('utf-8');
+        // Parse markdown links: - [Name](url) - Description
+        const linkPattern = /^[-*]\s+\[([^\]]+)\]\(([^)]+)\)\s*[-–—:]*\s*(.*?)$/gm;
+        let match;
+        while ((match = linkPattern.exec(content)) !== null) {
+            const [, name, url, description] = match;
+            if (!name || !url)
+                continue;
+            // Skip non-project links (anchors, images, badges)
+            if (url.startsWith('#') || url.endsWith('.png') || url.endsWith('.svg'))
+                continue;
+            const cleanName = name
+                .toLowerCase()
+                .replace(/[^a-z0-9-]/g, '-')
+                .replace(/-+/g, '-')
+                .replace(/^-|-$/g, '');
+            skills.push({
+                name: cleanName || name,
+                description: description?.trim() || name,
+                triggers: this.extractTriggersFromText(`${name} ${description}`),
+                sourceUrl: url.startsWith('http')
+                    ? url
+                    : `https://github.com/${url.replace(/^\//, '')}`,
+                author: owner,
+                tags: ['awesome-list', 'claude-code'],
+                lastUpdated: new Date().toISOString().split('T')[0],
+            });
+        }
+        return skills;
+    }
+    /**
+     * Fetch skills from a showcase repo (e.g., claude-code-showcase)
+     * Uses Octokit SDK to list directories and read their READMEs
+     */
+    async fetchFromShowcase(source) {
+        const { owner, repo } = this.parseGitHubUrl(source.url);
+        const skills = [];
+        // Get the repo tree to find directories
+        const treeResponse = await this.octokit.rest.git.getTree({
+            owner,
+            repo,
+            tree_sha: 'HEAD',
+        });
+        const dirs = treeResponse.data.tree.filter((entry) => entry.type === 'tree' &&
+            entry.path &&
+            !entry.path.startsWith('.') &&
+            !['node_modules', 'dist', '__pycache__'].includes(entry.path));
+        // Read README from each directory (up to 30 to respect rate limits)
+        for (const dir of dirs.slice(0, 30)) {
+            if (!dir.path)
+                continue;
+            try {
+                const readmeResponse = await this.octokit.rest.repos.getContent({
+                    owner,
+                    repo,
+                    path: `${dir.path}/README.md`,
+                });
+                let description = dir.path;
+                if ('content' in readmeResponse.data) {
+                    const readmeContent = Buffer.from(readmeResponse.data.content, 'base64').toString('utf-8');
+                    // Extract first non-heading, non-empty line as description
+                    const lines = readmeContent.split('\n');
+                    const descLine = lines.find((l) => l.trim() && !l.startsWith('#') && !l.startsWith('!'));
+                    if (descLine)
+                        description = descLine.trim();
+                }
+                skills.push({
+                    name: dir.path,
+                    description,
+                    triggers: this.extractTriggersFromText(`${dir.path} ${description}`),
+                    sourceUrl: `https://github.com/${owner}/${repo}/tree/main/${dir.path}`,
+                    author: owner,
+                    tags: ['showcase', 'claude-code'],
+                    lastUpdated: new Date().toISOString().split('T')[0],
+                });
+            }
+            catch {
+                // No README — still list the directory
+                skills.push({
+                    name: dir.path,
+                    description: `Claude Code showcase: ${dir.path}`,
+                    triggers: this.extractTriggersFromText(dir.path),
+                    sourceUrl: `https://github.com/${owner}/${repo}/tree/main/${dir.path}`,
+                    author: owner,
+                    tags: ['showcase', 'claude-code'],
+                    lastUpdated: new Date().toISOString().split('T')[0],
+                });
+            }
+        }
+        return skills;
+    }
+    /**
+     * Fetch skills from npm registry search
+     * Uses axios to search for packages with keyword "claude-skill" or "ossa-agent"
+     */
+    async fetchFromNpmRegistry(source) {
+        const skills = [];
+        const searchTerms = [
+            'keywords:claude-skill',
+            'keywords:ossa-agent',
+            'keywords:claude-code-skill',
+        ];
+        for (const term of searchTerms) {
+            try {
+                const response = await axios.get(`${source.url}/-/v1/search`, {
+                    params: { text: term, size: 50 },
+                    timeout: 10000,
+                });
+                const packages = response.data?.objects || [];
+                for (const pkg of packages) {
+                    const p = pkg.package;
+                    if (!p?.name)
+                        continue;
+                    skills.push({
+                        name: p.name,
+                        description: p.description || p.name,
+                        triggers: p.keywords || [],
+                        sourceUrl: p.links?.npm || `https://www.npmjs.com/package/${p.name}`,
+                        installCommand: `npm install ${p.name}`,
+                        author: p.author?.name || p.publisher?.username,
+                        tags: p.keywords || [],
+                        rating: pkg.score?.final
+                            ? Math.round(pkg.score.final * 5 * 10) / 10
+                            : undefined,
+                        lastUpdated: p.date?.split('T')[0],
+                    });
+                }
+            }
+            catch {
+                // Individual search term failure is non-fatal
+            }
+        }
+        return skills;
+    }
+    /**
+     * Fetch skills from a generic GitHub repo
+     * Uses Octokit SDK to list YAML/MD files that look like agent definitions
+     */
+    async fetchFromGitHubRepo(source) {
+        const { owner, repo } = this.parseGitHubUrl(source.url);
+        const skills = [];
+        const treeResponse = await this.octokit.rest.git.getTree({
+            owner,
+            repo,
+            tree_sha: 'HEAD',
+            recursive: 'true',
+        });
+        const agentFiles = treeResponse.data.tree.filter((entry) => entry.type === 'blob' &&
+            entry.path &&
+            (entry.path.endsWith('.ossa.yaml') ||
+                entry.path.endsWith('.ossa.yml') ||
+                entry.path === 'SKILL.md' ||
+                entry.path.endsWith('/SKILL.md')));
+        for (const file of agentFiles.slice(0, 30)) {
+            if (!file.path)
+                continue;
+            skills.push({
+                name: path.basename(file.path, path.extname(file.path)),
+                description: `Agent definition from ${owner}/${repo}`,
+                triggers: this.extractTriggersFromText(file.path),
+                sourceUrl: `https://github.com/${owner}/${repo}/blob/main/${file.path}`,
+                author: owner,
+                tags: ['github', 'ossa'],
+                lastUpdated: new Date().toISOString().split('T')[0],
+            });
+        }
+        return skills;
+    }
+    /**
+     * Extract trigger keywords from text
+     */
+    extractTriggersFromText(text) {
+        const words = text
+            .toLowerCase()
+            .replace(/[^a-z0-9\s-]/g, ' ')
+            .split(/\s+/)
+            .filter((w) => w.length > 2 && !STOP_WORDS.has(w));
+        return [...new Set(words)].slice(0, 10);
+    }
+    /**
+     * Parse GitHub URL into owner/repo
+     * Logs parsing errors instead of silently swallowing them in catch blocks
+     */
+    parseGitHubUrl(url) {
+        const match = url.match(/github\.com\/([^/]+)\/([^/]+)/);
+        if (!match) {
+            // Log the specific parsing error before throwing
+            console.warn(`Failed to parse GitHub URL: ${url}`);
+            throw new Error(`Invalid GitHub URL: ${url}`);
+        }
+        return { owner: match[1], repo: match[2].replace(/\.git$/, '') };
+    }
+    /**
+     * Search index for skills matching query
+     */
+    searchIndex(skills, query) {
+        const lowerQuery = query.toLowerCase();
+        return skills
+            .filter((skill) => {
+            // Search in name, description, and triggers
+            const searchText = [
+                skill.name,
+                skill.description,
+                ...(skill.triggers || []),
+                ...(skill.tags || []),
+            ]
+                .join(' ')
+                .toLowerCase();
+            return searchText.includes(lowerQuery);
+        })
+            .sort((a, b) => {
+            // Sort by rating (if available), then alphabetically
+            if (a.rating && b.rating) {
+                return b.rating - a.rating;
+            }
+            return a.name.localeCompare(b.name);
+        });
+    }
+    /**
+     * Get configured research sources
+     */
+    getSources() {
+        return [...this.sources];
+    }
+    /**
+     * Add a custom research source
+     */
+    addSource(source) {
+        this.sources.push(source);
+    }
+    /**
+     * Get index path
+     */
+    getIndexPath() {
+        return this.indexPath;
+    }
+};
+SkillsResearchService = __decorate([
+    injectable(),
+    __metadata("design:paramtypes", [])
+], SkillsResearchService);
+export { SkillsResearchService };
+//# sourceMappingURL=skills-research.service.js.map

package/dist/services/taxonomy-service.d.ts

@@ -1,11 +1,11 @@
 /**
  * Agent Taxonomy Service
- * OSSA v0.3.6 - Full CRUD operations for agent classification and taxonomy
+ * Agent classification and taxonomy operations
  */
 import { z } from 'zod';
 export declare const TaxonomyCategoryTypeSchema: z.ZodEnum<{
-    runtime: "runtime";
     custom: "custom";
+    runtime: "runtime";
     capability: "capability";
     role: "role";
     domain: "domain";
@@ -14,8 +14,8 @@ export declare const TaxonomyCategoryInputSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
     type: z.ZodEnum<{
-        runtime: "runtime";
         custom: "custom";
+        runtime: "runtime";
         capability: "capability";
         role: "role";
         domain: "domain";
@@ -29,8 +29,8 @@ export declare const TaxonomyCategorySchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
     type: z.ZodEnum<{
-        runtime: "runtime";
         custom: "custom";
+        runtime: "runtime";
         capability: "capability";
         role: "role";
         domain: "domain";

package/dist/services/taxonomy-service.js

@@ -1,6 +1,6 @@
 /**
  * Agent Taxonomy Service
- * OSSA v0.3.6 - Full CRUD operations for agent classification and taxonomy
+ * Agent classification and taxonomy operations
  */
 import { v4 as uuidv4 } from 'uuid';
 import { z } from 'zod';

package/dist/services/taxonomy.service.js

@@ -79,6 +79,7 @@ let TaxonomyService = class TaxonomyService {
         const integrationPattern = this.inferIntegrationPattern(useCaseLower);
         const costProfile = this.inferCostProfile(useCaseLower);
         const performanceTier = this.inferPerformanceTier(useCaseLower);
+        const inferredAgentType = agentType || this.inferAgentTypeFromUseCase(useCaseLower, taxonomy);
         const classification = {
             domain,
             subdomain,
@@ -87,16 +88,27 @@ let TaxonomyService = class TaxonomyService {
             integrationPattern,
             costProfile,
             performanceTier,
-            agentType: agentType || this.inferAgentTypeFromUseCase(useCaseLower, taxonomy),
+            agentType: inferredAgentType,
         };
+        const reasoning = [
+            `Domain "${domain}" matched from use case keywords`,
+            `Deployment pattern "${deploymentPattern}" inferred from use case`,
+            `Integration pattern "${integrationPattern}" inferred from use case`,
+        ];
+        const facetsMatched = (domain !== 'agents' ? 1 : 0) +
+            (subdomain ? 1 : 0) +
+            (concerns.length > 0 ? 1 : 0) +
+            (deploymentPattern ? 1 : 0) +
+            (integrationPattern ? 1 : 0) +
+            (costProfile ? 1 : 0) +
+            (performanceTier ? 1 : 0) +
+            (inferredAgentType !== 'worker' ? 1 : 0);
+        const maxFacets = 8;
+        const confidence = Math.min(1, Math.round((0.4 + (facetsMatched / maxFacets) * 0.6) * 100) / 100);
         return {
             classification,
-            confidence: 0.8, // TODO: Calculate actual confidence
-            reasoning: [
-                `Domain "${domain}" matched from use case keywords`,
-                `Deployment pattern "${deploymentPattern}" inferred from use case`,
-                `Integration pattern "${integrationPattern}" inferred from use case`,
-            ],
+            confidence,
+            reasoning,
         };
     }
     /**

package/dist/services/template-processor.service.js

@@ -8,7 +8,7 @@ import { injectable } from 'inversify';
 import * as fs from 'fs/promises';
 import * as path from 'path';
 let TemplateProcessorService = class TemplateProcessorService {
-    legacyTemplatePath = '/Users/thomas.scola/Sites/blueflyio/AGENTS.md.template';
+    legacyTemplatePath = path.join(process.cwd(), 'AGENTS.md.template');
     /**
      * Process template with variables
      */
@@ -46,11 +46,13 @@ let TemplateProcessorService = class TemplateProcessorService {
         repoUrl = repoUrl.replace(/^git\+/, '').replace(/\.git$/, '');
         const projectType = this.inferProjectType(repoPath, packageJson);
         const wikiUrl = repoUrl ? `${repoUrl}.wiki` : '';
-        // Relative path in bare repos structure (with fallback if not in expected structure)
-        const baseBarePath = '/Volumes/AgentPlatform/repos/bare/blueflyio';
+        // Use relative path from cwd if possible
         let repoPathRel = repoPath;
-        if (repoPath.startsWith(baseBarePath)) {
-            repoPathRel = path.relative(baseBarePath, repoPath);
+        try {
+            repoPathRel = path.relative(process.cwd(), repoPath);
+        }
+        catch {
+            // Keep absolute path as fallback
         }
         return {
             PROJECT_NAME: projectName,
@@ -88,9 +90,18 @@ let TemplateProcessorService = class TemplateProcessorService {
      * Load the default template with prioritized lookup
      */
     async loadDefaultTemplate() {
+        const home = process.env.HOME || require('os').homedir() || '';
+        const platformHome = process.env.AGENT_PLATFORM_HOME
+            ? process.env.AGENT_PLATFORM_HOME
+            : path.join(home, '.agent-platform');
+        // Canonical folder is openstandardagents; ossa supported for backward compatibility
+        const ossaDirCanonical = path.join(platformHome, 'openstandardagents');
+        const ossaDirLegacy = path.join(platformHome, 'ossa');
         const lookupPaths = [
             path.join(process.cwd(), 'AGENTS.md.template'),
-            path.join(process.env.HOME || '', '.ossa', 'AGENTS.md.template'),
+            path.join(ossaDirCanonical, 'AGENTS.md.template'),
+            path.join(ossaDirLegacy, 'AGENTS.md.template'),
+            path.join(home, '.ossa', 'AGENTS.md.template'),
             this.legacyTemplatePath,
         ];
         for (const templatePath of lookupPaths) {

package/dist/services/trust/trust.service.d.ts

@@ -0,0 +1,38 @@
+/**
+ * OSSA Trust Verification Service
+ *
+ * Verifies agent `x-signature` blocks using:
+ *   - @noble/ed25519  for Ed25519 (default, fastest)
+ *   - jose            for JWT, JWK, VC, ECDSA, RSA-PSS (IETF-standard)
+ *   - did-resolver    for DID document resolution (did:web, did:key)
+ *   - json-canonicalize for RFC 8785 canonical form (payload that was signed)
+ *
+ * NO custom cryptographic primitives — only audited open-source libraries.
+ */
+export interface XSignature {
+    type: 'Ed25519' | 'RSA-PSS' | 'ECDSA' | 'jwt' | 'vc' | 'did';
+    value: string;
+    publicKey: string;
+    issuer?: string;
+    timestamp?: string;
+}
+export type TrustTier = 'official' | 'verified-signature' | 'signed' | 'community' | 'experimental';
+export interface TrustVerificationResult {
+    verified: boolean;
+    tier: TrustTier;
+    signatureType?: string;
+    issuer?: string;
+    verifiedAt: string;
+    reason?: string;
+}
+/**
+ * Canonicalize the agent manifest using RFC 8785 (json-canonicalize),
+ * then return the UTF-8 bytes. This is the payload that x-signature.value signs.
+ */
+export declare function canonicalManifestBytes(manifest: Record<string, unknown>): Uint8Array;
+/**
+ * Main entry point.
+ * Verifies an agent's x-signature block against its canonical manifest.
+ */
+export declare function verifyAgentSignature(manifest: Record<string, unknown>, signature: XSignature, agentId?: string): Promise<TrustVerificationResult>;
+//# sourceMappingURL=trust.service.d.ts.map