@bluefly/openstandardagents 0.4.5 → 0.4.6

package/examples/bridges/.gitlab-ci.yml

@@ -30,7 +30,7 @@ validate:openapi:
   stage: validate
   image: stoplight/spectral:latest
   script:
-    - spectral lint aiflow-registration-api.openapi.yml --ruleset .spectral.yaml
+    - spectral lint aiflow-registration-api.openapi.yml --ruleset ../../config/linting/.spectral.yaml
   only:
     - merge_requests
     - main

package/examples/build-once-use-everywhere/agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: universal-agent

package/examples/claude-code/code-reviewer.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: claude-code-reviewer

package/examples/claude-code/ossa-validator.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: ossa-validator

package/examples/common_npm/agent-router.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: agent-router

package/examples/contracts/data-consumer.ossa.yaml

@@ -8,7 +8,7 @@
 # 3. Contract validation between consumer and provider
 # 4. Schema compatibility testing
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: data-consumer

package/examples/contracts/data-producer-v2.ossa.yaml

@@ -11,7 +11,7 @@
 # Use this to test:
 #   ossa contract breaking-changes examples/contracts/data-producer.ossa.yaml examples/contracts/data-producer-v2.ossa.yaml
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: data-producer

package/examples/contracts/data-producer.ossa.yaml

@@ -8,7 +8,7 @@
 # 3. Test schema compatibility with consumer agents
 # 4. Detect breaking changes between versions
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: data-producer

package/examples/drupal/content-moderator.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: content_moderator
@@ -49,6 +49,7 @@ spec:
     - type: api
       name: analyze_content
       description: Analyze content for spam, toxicity, and policy violations
+      operation: read
       parameters:
         content:
           type: string
@@ -61,6 +62,7 @@ spec:
     - type: api
       name: check_history
       description: Check user's moderation history
+      operation: read
       parameters:
         user_id:
           type: integer
@@ -69,6 +71,7 @@ spec:
     - type: api
       name: moderate_content
       description: Apply moderation action to content
+      operation: update
       parameters:
         entity_id:
           type: integer
@@ -105,3 +108,110 @@ spec:
       export_traces: true
       export_metrics: true
       track_user_satisfaction: true
+
+extensions:
+  drupal:
+    execution_model: ai-agent-runner
+    drupal_version: "^11"
+    php_version: "8.3"
+    module_dependencies:
+      - ai
+      - ai_agents
+      - tool
+      - eca
+
+    ai_agent_plugin: content_moderator
+    content_types:
+      - node
+      - comment
+      - user_profile
+    permissions:
+      - administer content moderation
+      - access content moderation reports
+
+    tool_plugins:
+      - id: content_moderator.analyze_content
+        ossa_tool_ref: analyze_content
+        operation: read
+        ai_callable: true
+        input_schema:
+          type: object
+          properties:
+            content:
+              type: string
+            content_type:
+              type: string
+              enum: [node, comment, user_profile]
+          required: [content]
+        output_schema:
+          type: object
+          properties:
+            score:
+              type: number
+            flags:
+              type: array
+              items:
+                type: string
+            status:
+              type: string
+              enum: [APPROVED, FLAGGED, REJECTED]
+
+      - id: content_moderator.check_history
+        ossa_tool_ref: check_history
+        operation: read
+        ai_callable: true
+        input_schema:
+          type: object
+          properties:
+            user_id:
+              type: integer
+          required: [user_id]
+        output_schema:
+          type: object
+          properties:
+            total_actions:
+              type: integer
+            violations:
+              type: integer
+
+      - id: content_moderator.moderate_content
+        ossa_tool_ref: moderate_content
+        operation: update
+        ai_callable: true
+        input_schema:
+          type: object
+          properties:
+            entity_id:
+              type: integer
+            action:
+              type: string
+              enum: [approve, flag, unpublish, block_user]
+          required: [entity_id, action]
+        output_schema:
+          type: object
+          properties:
+            success:
+              type: boolean
+            message:
+              type: string
+
+    eca_events:
+      - content_entity:presave
+      - content_entity:insert
+
+    actions:
+      - content_moderator_moderate_action
+
+    conditions:
+      - ossa_agent_enabled
+
+    recipes:
+      - name: content-moderator-agent
+        description: Install and configure the OSSA content moderator agent
+        type: AI Agent
+
+    hooks:
+      - name: CronHooks
+        hook: cron
+      - name: EntityHooks
+        hook: entity_presave

package/examples/drupal/gitlab-ml-recommender.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: gitlab-ml-recommender

package/examples/export/langchain/production-agent-with-memory/agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: production-agent-with-memory

package/examples/export/langchain/production-agent-with-tools/agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: production-agent-with-tools

package/examples/extensions/agents-md-advanced.yml

@@ -1,7 +1,7 @@
 # OSSA agents.md Extension - Advanced Example
 # Demonstrates advanced features including Cursor integration and custom sections
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: fullstack-dev-agent

package/examples/extensions/agents-md-basic.yml

@@ -1,7 +1,7 @@
 # OSSA agents.md Extension - Basic Example
 # Demonstrates basic agents.md generation from OSSA manifest
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: code-review-agent

package/examples/extensions/agents-md-sync.yml

@@ -1,7 +1,7 @@
 # OSSA agents.md Extension - Sync Example
 # Demonstrates automatic synchronization configuration
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: docs-agent

package/examples/extensions/agents-md-v1.yml

@@ -1,8 +1,8 @@
 # OSSA agents.md Extension Schema
-# OpenAI agents.md repository-level agent guidance generation
-# See: https://agents.md | https://github.com/openai/agents.md
+# agents.md standard: repository-level agent guidance (AAIF / agents.md)
+# See: https://agents.md | https://github.com/agentsmd/agents.md
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: ExtensionSchema
 metadata:
   name: agents-md-extension
@@ -11,11 +11,12 @@ metadata:
 spec:
   compatibleWith:
     - agents.md/v1
-  description: "Extension schema for OpenAI agents.md repository-level agent guidance"
+  description: "Extension schema for agents.md (AAIF) repository-level agent guidance"
 
   references:
     specification: https://agents.md
-    repository: https://github.com/openai/agents.md
+    repository: https://github.com/agentsmd/agents.md
+    stewardship: "Agentic AI Foundation (AAIF) under Linux Foundation"
     adoption: "20,000+ OSS projects"
 
   supportedTools:

package/examples/extensions/drupal-v1.yml

@@ -2,7 +2,7 @@
 # Extension specification for Drupal LLM Platform deployment
 # Compatible with Drupal 10+ and llm-platform modules
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: ExtensionSchema
 metadata:
   name: drupal-extension

package/examples/extensions/encryption-multi-provider.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: secure-agent
@@ -28,7 +28,7 @@ spec:
         interval_days: 90
         
 ---
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: vault-encrypted-agent
@@ -57,7 +57,7 @@ spec:
         - "*"  # Encrypt all fields
       
 ---
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: gcp-kms-agent
@@ -86,7 +86,7 @@ spec:
         - pii_fields
       
 ---
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: azure-keyvault-agent

package/examples/extensions/kagent-v1.yml

@@ -2,7 +2,7 @@
 # Production-grade specification for Kubernetes-native agent deployment
 # Compatible with kagent.dev/v1alpha1 CRDs
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: ExtensionSchema
 metadata:
   name: kagent-extension

package/examples/extensions/knowledge-sources.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: rag-agent

package/examples/extensions/mcp-full-featured.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: mcp-powered-agent

package/examples/getting-started/01-minimal-agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: hello-world-agent

package/examples/getting-started/02-agent-with-tools.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: code-assistant

package/examples/getting-started/03-agent-with-safety.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: secure-assistant

package/examples/getting-started/04-agent-with-messaging.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: security-scanner

package/examples/getting-started/05-workflow-composition.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Workflow
 metadata:
   name: code-review-pipeline

package/examples/getting-started/hello-world-complete.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: hello-world-agent

package/examples/gitlab-agents/DEPLOYMENT.md

@@ -20,7 +20,7 @@ This directory contains **6 production-ready GitLab agents** generated from OSSA
 - Kubernetes cluster with KAgent CRD installed
 - GitLab API token with `api` scope
 - Anthropic API key
-- Domain pointing to cluster: `mesh.blueflyagents.com`
+- Domain pointing to cluster: `your-mesh-registry.example.com`
 
 ### 1. Install KAgent CRD
 
@@ -66,19 +66,19 @@ daily-code-scan           1/1     Running   1m
 For each webhook agent, configure in **GitLab Project → Settings → Webhooks**:
 
 #### duo-comment-responder
-- **URL**: `http://mesh.blueflyagents.com/webhook/duo-comment-responder`
+- **URL**: `http://your-mesh-registry.example.com/webhook/duo-comment-responder`
 - **Secret Token**: (from WEBHOOK_SECRET)
 - **Events**: ☑️ Comments, ☑️ Merge requests
 - **SSL verification**: ☐ Disable (internal network)
 
 #### mr-reviewer
-- **URL**: `http://mesh.blueflyagents.com/webhook/mr-reviewer`
+- **URL**: `http://your-mesh-registry.example.com/webhook/mr-reviewer`
 - **Secret Token**: (from WEBHOOK_SECRET)
 - **Events**: ☑️ Merge requests
 - **SSL verification**: ☐ Disable
 
 #### pipeline-auto-fix
-- **URL**: `http://mesh.blueflyagents.com/webhook/pipeline-auto-fix`
+- **URL**: `http://your-mesh-registry.example.com/webhook/pipeline-auto-fix`
 - **Secret Token**: (from WEBHOOK_SECRET)
 - **Events**: ☑️ Pipeline events
 - **SSL verification**: ☐ Disable
@@ -87,7 +87,7 @@ For each webhook agent, configure in **GitLab Project → Settings → Webhooks*
 
 ```bash
 # Test duo-comment-responder
-curl -X POST http://mesh.blueflyagents.com/webhook/duo-comment-responder \
+curl -X POST http://your-mesh-registry.example.com/webhook/duo-comment-responder \
   -H "Content-Type: application/json" \
   -H "X-Gitlab-Token: your-webhook-secret" \
   -d '{
@@ -212,7 +212,7 @@ Each agent exposes Prometheus metrics on `/metrics`:
 
 ```bash
 # Scrape metrics
-curl http://mesh.blueflyagents.com/webhook/duo-comment-responder/metrics
+curl http://your-mesh-registry.example.com/webhook/duo-comment-responder/metrics
 ```
 
 ## Troubleshooting
@@ -304,7 +304,7 @@ kubectl delete namespace gitlab-agents
 ```
 GitLab Project
       ↓ (webhook)
-mesh.blueflyagents.com (Ingress)
+your-mesh-registry.example.com (Ingress)
       ↓
 KAgent Controller
       ↓

package/examples/gitlab-agents/duo-comment-responder/README.md

@@ -69,7 +69,7 @@ kubectl apply -f k8s/deployment.yaml
 Configure the webhook in your GitLab project:
 
 1. Go to **Settings** → **Webhooks**
-2. Add webhook URL: `http://mesh.blueflyagents.com/webhook/duo-comment-responder`
+2. Add webhook URL: `http://your-mesh-registry.example.com/webhook/duo-comment-responder`
 3. Set secret token (from .env WEBHOOK_SECRET)
 4. Select events: Comments
 5. Save webhook

package/examples/gitlab-agents/duo-comment-responder/webhook-config.json

@@ -1,5 +1,5 @@
 {
-  "url": "http://mesh.blueflyagents.com/webhook/duo-comment-responder",
+  "url": "http://your-mesh-registry.example.com/webhook/duo-comment-responder",
   "token": "${WEBHOOK_SECRET}",
   "enable_ssl_verification": false,
   "push_events": false,

package/examples/gitlab-agents/k8s/deploy-all.yaml

@@ -98,7 +98,7 @@ spec:
 
   ingress:
     enabled: true
-    host: mesh.blueflyagents.com
+    host: your-mesh-registry.example.com
     path: /webhook/duo-comment-responder
     annotations:
       cert-manager.io/cluster-issuer: letsencrypt-prod
@@ -167,7 +167,7 @@ spec:
 
   ingress:
     enabled: true
-    host: mesh.blueflyagents.com
+    host: your-mesh-registry.example.com
     path: /webhook/mr-reviewer
 
 ---
@@ -232,7 +232,7 @@ spec:
 
   ingress:
     enabled: true
-    host: mesh.blueflyagents.com
+    host: your-mesh-registry.example.com
     path: /webhook/pipeline-auto-fix
 
 ---
@@ -312,10 +312,10 @@ spec:
   ingressClassName: nginx
   tls:
     - hosts:
-        - mesh.blueflyagents.com
+        - your-mesh-registry.example.com
       secretName: gitlab-agents-tls
   rules:
-    - host: mesh.blueflyagents.com
+    - host: your-mesh-registry.example.com
       http:
         paths:
           - path: /webhook/duo-comment-responder(/|$)(.*)

package/examples/gitlab-agents/mr-reviewer/README.md

@@ -69,7 +69,7 @@ kubectl apply -f k8s/deployment.yaml
 Configure the webhook in your GitLab project:
 
 1. Go to **Settings** → **Webhooks**
-2. Add webhook URL: `http://mesh.blueflyagents.com/webhook/mr-reviewer`
+2. Add webhook URL: `http://your-mesh-registry.example.com/webhook/mr-reviewer`
 3. Set secret token (from .env WEBHOOK_SECRET)
 4. Select events: Merge requests
 5. Save webhook

package/examples/gitlab-agents/mr-reviewer/webhook-config.json

@@ -1,5 +1,5 @@
 {
-  "url": "http://mesh.blueflyagents.com/webhook/mr-reviewer",
+  "url": "http://your-mesh-registry.example.com/webhook/mr-reviewer",
   "token": "${WEBHOOK_SECRET}",
   "enable_ssl_verification": false,
   "push_events": false,

package/examples/gitlab-agents/pipeline-auto-fix/README.md

@@ -69,7 +69,7 @@ kubectl apply -f k8s/deployment.yaml
 Configure the webhook in your GitLab project:
 
 1. Go to **Settings** → **Webhooks**
-2. Add webhook URL: `http://mesh.blueflyagents.com/webhook/pipeline-auto-fix`
+2. Add webhook URL: `http://your-mesh-registry.example.com/webhook/pipeline-auto-fix`
 3. Set secret token (from .env WEBHOOK_SECRET)
 4. Select events: Pipelines
 5. Save webhook

package/examples/gitlab-agents/pipeline-auto-fix/src/workflow.ts

@@ -100,7 +100,7 @@ Analyze and provide fix in JSON:
       // Step 6: Apply Code Fixes
       this.logger.info('Executing step: Apply Code Fixes');
       context.outputs.apply-fixes = await this.gitlabClient.createCommit(
-        context.variables.PROJECT_ID, context.variables.branch.name, "${analysis.commit_message}\n\nAuto-generated fix for pipeline #${PIPELINE_ID}\n\nRoot cause: ${analysis.root_cause}\n\nCo-Authored-By: Pipeline Auto-Fix Agent <pipeline-remediation@blueflyagents.com>\n", context.variables.analysis.code_changes
+        context.variables.PROJECT_ID, context.variables.branch.name, "${analysis.commit_message}\n\nAuto-generated fix for pipeline #${PIPELINE_ID}\n\nRoot cause: ${analysis.root_cause}\n\nCo-Authored-By: Pipeline Auto-Fix Agent <pipeline-remediation@example.com>\n", context.variables.analysis.code_changes
       );
 
 

package/examples/gitlab-agents/pipeline-auto-fix/webhook-config.json

@@ -1,5 +1,5 @@
 {
-  "url": "http://mesh.blueflyagents.com/webhook/pipeline-auto-fix",
+  "url": "http://your-mesh-registry.example.com/webhook/pipeline-auto-fix",
   "token": "${WEBHOOK_SECRET}",
   "enable_ssl_verification": false,
   "push_events": false,

package/examples/hierarchical-agent.ossa.yaml

@@ -12,7 +12,7 @@
 #   - Context isolation enforced for all subagents
 #   - Results flow up: subagent -> parent -> user
 
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: code-review-pipeline

package/examples/infrastructure/token-rotation/README.md

@@ -36,7 +36,9 @@ This manifest demonstrates **automated token rotation** using OSSA v0.4.4 featur
 
 ## Configuration
 
-### Rotation Policy
+### Rotation Policy and Observability
+
+OSSA v0.4 `rotation_policy` supports optional runtime observability: `last_rotated_at` (date-time) and `last_rotated_by` (agent/user id). These are set by runtime or tooling (e.g. buildkit `gitlab token self-rotate`) after successful rotation, not in the manifest; used for audit and expiry warnings.
 
 ```yaml
 authentication:

package/examples/infrastructure/token-rotation/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: token-rotation-manager

package/examples/infrastructure/token-rotation/openapi.yaml

@@ -8,7 +8,7 @@ info:
     For production API, see platform-agents/@ossa/token-rotation-manager/openapi.yaml
 
 servers:
-  - url: https://workflow.blueflyagents.com/v1
+  - url: https://your-workflow.example.com/v1
     description: Production
 
 paths:

package/examples/integration-patterns/agent-to-agent-orchestration.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: workflow-orchestrator

package/examples/kagent/README.md

@@ -4,13 +4,14 @@ OSSA agent manifests for Kubernetes-native agent deployment.
 
 ## Examples
 
+- **ossa-kagent-poc.ossa.yaml** - POC: OSSA-first manifest for kagent.dev (v1alpha2). Export with `ossa export ossa-kagent-poc.ossa.yaml --platform kagent --crd-version v1alpha2 -o ./out`; deploy with `kubectl apply -f out/`.
 - **compliance-validator.ossa.yaml** - Validates FedRAMP/HIPAA compliance
 - **cost-optimizer.ossa.yaml** - Optimizes cloud infrastructure costs
 - **documentation-agent.ossa.yaml** - Generates technical documentation
 - **k8s-troubleshooter.ossa.yaml** - Kubernetes troubleshooting and diagnostics
 - **security-scanner.ossa.yaml** - Security vulnerability scanning
 
-All examples follow OSSA v0.2.2 specification.
+All examples follow OSSA v0.4 specification.
 
 ## Usage
 
@@ -20,7 +21,7 @@ Validate any example:
 ossa validate compliance-validator.ossa.yaml
 ```
 
-Deploy to Kubernetes (requires agent-buildkit):
+Deploy to Kubernetes (e.g. with your platform CLI; optional: agent-buildkit):
 
 ```bash
 buildkit agents deploy compliance-validator.ossa.yaml

package/examples/kagent/compliance-validator.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: compliance-validator

package/examples/kagent/cost-optimizer.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: cost-optimizer

package/examples/kagent/documentation-agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.5
+apiVersion: ossa/v0.4.6
 kind: Agent
 metadata:
   name: documentation-agent