@bluefly/openstandardagents 0.4.5 → 0.4.8

package/package.json

@@ -1,26 +1,10 @@
 {
   "name": "@bluefly/openstandardagents",
-  "version": "0.4.5",
+  "version": "0.4.8",
   "exports": {
     "./schema": "./spec/v0.4/agent.schema.json",
     "./schema/v0.4": "./spec/v0.4/agent.schema.json",
     "./schema/v0.4.1": "./spec/v0.4/agent.schema.json",
-    "./schema/v0.3.6": "./spec/v0.3/ossa-0.3.6.schema.json",
-    "./schema/v0.3.5": "./spec/v0.3/ossa-0.3.5.schema.json",
-    "./schema/v0.3.4": "./spec/v0.3/ossa-v0.3.schema.json",
-    "./schema/v0.3.3": "./spec/v0.3/ossa-v0.3.schema.json",
-    "./ag2/swarm-topology": "./spec/v0.3.4/extensions/ag2/swarm-topology.schema.json",
-    "./ag2/group-chat": "./spec/v0.3.4/extensions/ag2/group-chat.schema.json",
-    "./ag2/nested-chat": "./spec/v0.3.4/extensions/ag2/nested-chat.schema.json",
-    "./hitl/intervention-points": "./spec/v0.3.4/protocols/hitl/intervention-points.schema.json",
-    "./hitl/human-input-modes": "./spec/v0.3.4/protocols/hitl/human-input-modes.schema.json",
-    "./hitl/approval-workflows": "./spec/v0.3.4/protocols/hitl/approval-workflows.schema.json",
-    "./a2a/service-discovery": "./spec/v0.3.4/protocols/a2a/service-discovery.schema.json",
-    "./a2a/handoff-protocol": "./spec/v0.3.4/protocols/a2a/handoff-protocol.schema.json",
-    "./a2a/capability-advertisement": "./spec/v0.3.4/protocols/a2a/capability-advertisement.schema.json",
-    "./state/context-serialization": "./spec/v0.3.4/runtime/state/context-serialization.schema.json",
-    "./state/memory-portability": "./spec/v0.3.4/runtime/state/memory-portability.schema.json",
-    "./state/teachability": "./spec/v0.3.4/runtime/state/teachability.schema.json",
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
@@ -57,10 +41,37 @@
       "import": "./dist/mesh/index.js",
       "require": "./dist/mesh/index.js"
     },
+    "./agent-card": {
+      "types": "./dist/services/agent-card-generator.d.ts",
+      "import": "./dist/services/agent-card-generator.js",
+      "require": "./dist/services/agent-card-generator.js"
+    },
+    "./agent-card-schema": "./spec/v0.4/agent-card.schema.json",
+    "./sdk": {
+      "types": "./dist/sdk.d.ts",
+      "import": "./dist/sdk.js",
+      "require": "./dist/sdk.js"
+    },
     "./version-management": {
       "types": "./dist/version-management/index.d.ts",
       "import": "./dist/version-management/index.js",
       "require": "./dist/version-management/index.js"
+    },
+    "./mcp-server": "./dist/mcp-server/index.js",
+    "./data/marketplace-skills-catalog": {
+      "types": "./dist/data/marketplace-skills-catalog.d.ts",
+      "import": "./dist/data/marketplace-skills-catalog.js",
+      "require": "./dist/data/marketplace-skills-catalog.js"
+    },
+    "./kagent": {
+      "types": "./dist/sdks/kagent/index.d.ts",
+      "import": "./dist/sdks/kagent/index.js",
+      "require": "./dist/sdks/kagent/index.js"
+    },
+    "./trust": {
+      "types": "./dist/services/trust/trust.service.d.ts",
+      "import": "./dist/services/trust/trust.service.js",
+      "require": "./dist/services/trust/trust.service.js"
     }
   },
   "description": "OSSA - Open Standard for Software Agents. Infrastructure bridge between agent protocols (MCP, A2A) and deployment platforms. Define once in YAML, export to 9+ platforms (Docker, Kubernetes, LangChain, CrewAI, Claude Skills, etc.).",
@@ -97,10 +108,16 @@
     "ossa": "bin/ossa",
     "ossa-dev": "bin/ossa-dev",
     "ossa-version": "bin/ossa-version",
-    "ossa-validate-all": "bin/ossa-validate-all"
+    "ossa-validate-all": "bin/ossa-validate-all",
+    "ossa-mcp": "dist/mcp-server/index.js"
   },
   "files": [
     "dist/",
+    "!dist/dev-cli/",
+    "!dist/sdks/python-generator/",
+    "!dist/sdks/typescript/",
+    "!dist/**/*.js.map",
+    "!dist/**/*.d.ts.map",
     "spec/",
     "bin/",
     "examples/",
@@ -118,7 +135,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://gitlab.com/blueflyio/ossa/openstandardagents/"
+    "url": "git+https://gitlab.com/blueflyio/ossa/openstandardagents.git"
   },
   "bugs": {
     "url": "https://gitlab.com/blueflyio/ossa/openstandardagents/-/issues"
@@ -127,6 +144,7 @@
   "scripts": {
     "// ─────────────────────────────────────────────────────────────────────────────": "",
     "// BUILD & DEVELOPMENT": "",
+    "mcp": "node dist/mcp-server/index.js",
     "prebuild": "npm run docs:process",
     "build": "tsc && npm run build:assets",
     "build:assets": "cp -r spec dist/ && cp package.json .version.json dist/",
@@ -147,18 +165,20 @@
     "test:mutation:ci": "stryker run --logLevel error",
     "test:watch": "jest --watch",
     "test:ci": "jest --ci --coverage --reporters=default --reporters=jest-junit",
+    "test:mcp": "vitest run src/mcp-server/__tests__/mcp-server.spec.ts",
+    "test:mcp:watch": "vitest watch src/mcp-server/__tests__/mcp-server.spec.ts",
     "ci:validate": "npm run build:clean && npm run quality && npm run test:unit && npm run test:smoke && npm run validate:all",
-    "ci:validate:fast": "npm run typecheck && npm run lint && npm run test:unit && npm run validate:schema",
+    "ci:validate:fast": "npm run typecheck && npm run test:unit && npm run validate:schema",
     "// CODE QUALITY": "",
     "typecheck": "tsc --noEmit",
     "lint": "eslint src tests --ext .ts",
     "lint:fix": "eslint src tests --ext .ts --fix",
     "format": "prettier --write 'src/**/*.ts' 'tests/**/*.ts'",
     "format:check": "prettier --check 'src/**/*.ts' 'tests/**/*.ts'",
-    "quality": "npm run typecheck && npm run lint && npm run format:check",
-    "quality:fix": "npm run lint:fix && npm run format",
+    "quality": "npm run typecheck && npm run format:check",
+    "quality:fix": "npm run format",
     "// VALIDATION": "",
-    "validate": "npm run validate:schema && npm run validate:examples",
+    "validate": "npm run validate:no-symlinks && npm run validate:schema && npm run validate:openapi && npm run validate:examples",
     "validate:all": "npm run validate && npm run validate:sdks",
     "validate:sdks": "npm run validate:sdk:typescript && npm run validate:sdk:python",
     "validate:sdk:typescript": "cd src/sdks/typescript && npm install && npm run build && npm run typecheck",
@@ -166,20 +186,23 @@
     "validate:schema": "npx ajv-cli compile -s $(node -p \"require('./.version.json').spec_path\")/$(node -p \"require('./.version.json').schema_file\") -r $(node -p \"require('./.version.json').spec_path\")/extensions/kagent/kagent.schema.json -r $(node -p \"require('./.version.json').spec_path\")/extensions/mcp/mcp.schema.json -r $(node -p \"require('./.version.json').spec_path\")/extensions/a2a/a2a.schema.json -r $(node -p \"require('./.version.json').spec_path\")/extensions/langchain/langchain.schema.json -r $(node -p \"require('./.version.json').spec_path\")/extensions/langgraph/langgraph.schema.json -r $(node -p \"require('./.version.json').spec_path\")/extensions/ag2/ag2.schema.json -r $(node -p \"require('./.version.json').spec_path\")/extensions/crewai/crewai.schema.json --strict=false --allow-union-types",
     "validate:manifest": "npx ajv-cli validate -s $(node -p \"require('./.version.json').spec_path\")/$(node -p \"require('./.version.json').schema_file\") --strict=false --allow-union-types -d",
     "validate:examples": "find examples \\( -name '*.ossa.yaml' -o -name '*.ossa.yml' \\) | grep -v 'swarm-to-ossa' | head -20 | xargs -I {} npm run validate:manifest -- {} || true",
-    "validate:versions": "tsx tools/validate-versions.ts",
-    "fix:versions": "tsx tools/fix-versions.ts",
+    "validate:versions": "tsx src/tools/validate-versions.ts",
+    "fix:versions": "tsx src/tools/fix-versions.ts",
     "validate:power": "tsx src/tools/validation/validate-ossa.ts",
-    "validate:openapi": "tsx src/tools/validation/validate-openapi-extensions.ts",
+    "validate:openapi": "spectral lint openapi/**/*.yaml --ruleset .spectral.yml 2>/dev/null || spectral lint openapi/**/*.yaml",
+    "validate:openapi:ossa": "tsx src/tools/validation/validate-openapi-extensions.ts",
+    "validate:no-symlinks": "tsx src/tools/validate-no-symlinks.ts",
     "// VERSION MANAGEMENT (via ossa-dev CLI - single source of truth)": "",
     "version:release": "tsx src/dev-cli/src/index.ts version release",
     "version:validate": "tsx src/dev-cli/src/index.ts version validate",
     "version:sync": "tsx src/dev-cli/src/index.ts version sync",
     "version:detect": "tsx src/dev-cli/src/index.ts version detect",
     "version:audit": "tsx src/dev-cli/src/index.ts version audit",
-    "// INFRASTRUCTURE (TODO: Move to buildkit)": "",
+    "// INFRASTRUCTURE (deploy tooling out of scope for OSSA)": "",
     "env:list": "tsx src/dev-cli/src/index.ts env-cleanup --list",
     "env:cleanup": "tsx src/dev-cli/src/index.ts env-cleanup --stop-stuck",
     "// DOCUMENTATION": "",
+    "wiki:publish": "node .gitlab/wiki-publish.cjs",
     "docs:process": "tsx src/tools/docs/process-doc-templates.ts",
     "docs:check": "test -f README.md && test -f CHANGELOG.md",
     "docs:generate": "tsx src/tools/docs/generate-api-docs.ts && tsx src/tools/docs/generate-cli-docs.ts && tsx src/tools/docs/generate-schema-docs.ts && tsx src/tools/docs/generate-examples-docs.ts && tsx src/tools/generators/generate-agents-catalog.ts && tsx src/tools/docs/generate-types-docs.ts && tsx src/tools/docs/generate-errors-docs.ts && tsx src/tools/docs/generate-config-docs.ts && tsx src/tools/docs/lowercase-docs.ts",
@@ -203,17 +226,16 @@
     "prepare": "lefthook install || true",
     "postinstall": "node bin/postinstall || true",
     "// RELEASE & PUBLISH": "",
-    "prerelease": "npm run quality && npm run test && npm run validate",
-    "prepublishOnly": "tsx tools/validate-package.ts",
-    "validate:deps": "tsx tools/validate-dependencies.ts",
-    "validate:package": "tsx tools/validate-package.ts",
-    "publish:check": "tsx tools/pre-publish-check.ts",
+    "prepublishOnly": "publint && npm run test:unit && npm run build",
+    "validate:deps": "depcheck --ignore-dirs=examples --ignores='@anthropic-ai/claude-agent-sdk,@langchain/openai,@openai/agents,@temporalio/activity,@temporalio/workflow,pino-pretty,readline,@types/*,ts-jest,eslint*,prettier*,lefthook,jest*,vitest,semantic-release*,@semantic-release/*,keep-a-changelog,jest-junit,publint,conventional-changelog-conventionalcommits,ajv-cli,json-schema-to-typescript,json-schema-to-zod,ts-node,@playwright/test,@langchain/anthropic,@langchain/core,langchain'",
+    "validate:package": "publint",
     "publish:dry-run": "npm publish --dry-run",
-    "release:check": "npm run prerelease && echo '✅ Ready for release'",
-    "release:verify": "tsx src/dev-cli/src/index.ts release verify",
-    "release:prep": "tsx src/dev-cli/src/index.ts release prep v$(node -p \"require('./.version.json').latest_stable\")"
+    "release:check": "npm run typecheck && npm run test:unit && npm run validate:schema && publint",
+    "release:semantic": "npx semantic-release",
+    "release:semantic:dry": "npx semantic-release --dry-run"
   },
   "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.2.50",
     "@anthropic-ai/sdk": "^0.71.0",
     "@aws-sdk/client-bedrock-runtime": "^3.955.0",
     "@gitbeaker/node": "^35.8.1",
@@ -223,6 +245,7 @@
     "@langchain/core": "^0.3.29",
     "@langchain/openai": "^0.3.17",
     "@modelcontextprotocol/sdk": "^0.6.0",
+    "@noble/ed25519": "^2.3.0",
     "@octokit/rest": "^20.0.0",
     "@openai/agents": "^0.4.6",
     "@opentelemetry/api": "^1.9.0",
@@ -250,13 +273,16 @@
     "chokidar": "^5.0.0",
     "cli-table3": "^0.6.5",
     "commander": "^11.1.0",
+    "did-resolver": "^4.1.0",
     "express": "^4.18.2",
     "fast-glob": "^3.3.2",
     "glob": "^11.0.3",
     "gradient-string": "^2.0.2",
     "inquirer": "^9.2.12",
     "inversify": "^7.10.4",
+    "jose": "^5.9.6",
     "js-yaml": "^4.1.0",
+    "json-canonicalize": "^1.0.6",
     "langchain": "^0.3.9",
     "open": "^11.0.0",
     "openai": "^6.9.1",
@@ -269,6 +295,7 @@
     "semver": "^7.7.3",
     "tar": "^7.5.3",
     "uuid": "^11.0.5",
+    "web-did-resolver": "^2.0.32",
     "ws": "^8.19.0",
     "yaml": "^2.3.0",
     "zod": "^4.1.11"
@@ -280,18 +307,22 @@
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/gitlab": "^13.2.9",
+    "@stoplight/spectral-cli": "^6.15.0",
     "@types/express": "^4.17.21",
     "@types/gradient-string": "^1.1.6",
     "@types/inquirer": "^9.0.9",
     "@types/jest": "^29.5.14",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.19.19",
+    "@types/nodemailer": "^6.4.0",
     "@types/pg": "^8.15.5",
     "@types/redis": "^4.0.10",
     "@types/semver": "^7.7.1",
     "@typescript-eslint/eslint-plugin": "^8.48.0",
     "@typescript-eslint/parser": "^8.48.0",
     "ajv-cli": "^5.0.0",
+    "conventional-changelog-conventionalcommits": "^9.2.0",
+    "depcheck": "^1.4.7",
     "eslint": "^8.57.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.4",
@@ -302,6 +333,7 @@
     "keep-a-changelog": "^2.8.0",
     "lefthook": "^1.12.3",
     "prettier": "^3.6.2",
+    "publint": "^0.3.18",
     "semantic-release": "^25.0.1",
     "ts-jest": "^29.2.5",
     "ts-node": "^10.9.2",
@@ -309,12 +341,23 @@
     "typescript": "^5.9.3",
     "vitest": "^2.1.8"
   },
+  "optionalDependencies": {
+    "nodemailer": "^6.9.0"
+  },
+  "bundledDependencies": [
+    "ajv",
+    "ajv-formats"
+  ],
   "engines": {
-    "node": ">=16.20.0 || >=18.0.0 || >=20.0.0 || >=22.0.0",
-    "npm": ">=8.0.0"
+    "node": ">=20.0.0",
+    "npm": ">=10.0.0"
   },
   "volta": {
-    "node": "18.20.8",
-    "npm": "10.9.4"
-  }
+    "node": "22.19.0",
+    "npm": "11.10.0"
+  },
+  "bundleDependencies": [
+    "ajv",
+    "ajv-formats"
+  ]
 }

package/spec/ossa-audit-api.yaml

@@ -12,8 +12,8 @@ info:
 servers:
   - url: http://localhost:3000
     description: Local development
-  - url: https://ossa-audit.blueflyagents.com
-    description: Production
+  - url: https://your-ossa-audit.example.com
+    description: Production (configure via environment)
 
 paths:
   /audit/scan:
@@ -48,8 +48,8 @@ paths:
                 specVersion:
                   type: string
                   description: OSSA spec version to validate against
-                  example: "0.3.5"
-                  default: "0.3.5"
+                  example: "0.4.6"
+                  default: "0.4.6"
                 includeExamples:
                   type: boolean
                   description: Include example manifests in scan
@@ -137,7 +137,7 @@ paths:
                   description: Path to manifest file
                 specVersion:
                   type: string
-                  default: "0.3.5"
+                  default: "0.4.6"
       responses:
         '200':
           description: Validation result

package/spec/reference/reference-agents/compliance-auditor/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.5
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: compliance-auditor

package/spec/reference/reference-agents/doc-agent/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.5
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: doc-agent

package/spec/reference/reference-agents/mr-reviewer/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.5
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: mr-reviewer

package/spec/reference/reference-agents/ossa-validator-v0.3/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.5
+apiVersion: ossa/v0.4.7
 kind: Agent
 
 metadata:

package/spec/reference/reference-agents/pipeline-fixer/manifest.ossa.yaml

@@ -9,7 +9,7 @@
 #
 # ============================================================================
 
-apiVersion: ossa/v0.3.5
+apiVersion: ossa/v0.4.7
 kind: Agent
 
 metadata:

package/spec/reference/reference-agents/release-orchestrator/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.3.5
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: release-orchestrator

package/spec/registry/README.md

@@ -28,6 +28,12 @@ This is your primary reference for understanding how the OSSA Registry works.
 
 ---
 
+### 📐 [project-registry.schema.json](./project-registry.schema.json)
+**JSON Schema for project-level registry** (`.agents-workspace/registry.yaml`):
+- Local agents list, remote sources (MCP endpoint + auth), scopes, resolution order
+- Use for validating a project's decentralized agent registry index
+- See [Agents Workspace and Registry](../../docs/getting-started/agents-workspace-registry.md)
+
 ### 📐 [registry-api.schema.json](./registry-api.schema.json)
 **JSON Schema definitions** for all API request/response types:
 - `AgentRegistryMetadata`: Core agent metadata

package/spec/registry/project-registry.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://openstandardagents.org/schemas/registry/project-registry/v1.json",
+  "title": "OSSA Project Registry (agents-workspace)",
+  "description": "JSON Schema for .agents-workspace/registry.yaml - project-level decentralized agent registry index",
+  "version": "1.0.0",
+  "type": "object",
+  "required": ["version"],
+  "properties": {
+    "version": {
+      "type": "string",
+      "pattern": "^[0-9]+\\.[0-9]+$",
+      "description": "Format version of the project registry (e.g. 1.0)"
+    },
+    "project": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string", "description": "Project name" },
+        "namespace": { "type": "string", "description": "Project namespace (e.g. team or org)" }
+      }
+    },
+    "local": {
+      "type": "array",
+      "description": "Agents defined in this repo (paths under .agents/)",
+      "items": {
+        "type": "object",
+        "required": ["name", "path"],
+        "properties": {
+          "name": { "type": "string", "description": "Agent name" },
+          "path": { "type": "string", "description": "Path to agent (e.g. .agents/my-agent)" }
+        }
+      }
+    },
+    "sources": {
+      "type": "array",
+      "description": "Remote registries to pull from (MCP endpoint + auth)",
+      "items": {
+        "type": "object",
+        "required": ["id", "type", "endpoint", "scope"],
+        "properties": {
+          "id": { "type": "string", "description": "Source identifier" },
+          "type": { "type": "string", "enum": ["mcp"], "description": "Source type (e.g. mcp)" },
+          "endpoint": { "type": "string", "format": "uri", "description": "Registry MCP endpoint URL" },
+          "auth": { "type": "string", "description": "Auth reference (e.g. ref:company-token)" },
+          "scope": {
+            "type": "string",
+            "enum": ["company", "department", "team", "project"],
+            "description": "Scope of this source"
+          }
+        }
+      }
+    },
+    "resolution_order": {
+      "type": "array",
+      "description": "Order for resolving agent name conflicts (first scope wins)",
+      "items": {
+        "type": "string",
+        "enum": ["project", "team", "department", "company"]
+      }
+    }
+  }
+}

package/spec/schema/components/adapter.schema.json

@@ -9,7 +9,7 @@
     "type": {
       "type": "string",
       "description": "Adapter type identifier (e.g., scm.github, runtime.kagent)",
-      "pattern": "^[a-z0-9]+(\.[a-z0-9]+)+$"
+      "pattern": "^[a-z0-9]+(\\.[a-z0-9]+)+$"
     },
     "version": {
       "type": "string",

package/spec/schema/components/metadata.schema.json

@@ -30,6 +30,21 @@
       "type": "object",
       "additionalProperties": { "type": "string" },
       "description": "Key-value annotations for tooling"
+    },
+    "uuid": {
+      "type": "string",
+      "format": "uuid",
+      "description": "Globally unique identifier for the agent"
+    },
+    "machine_name": {
+      "type": "string",
+      "pattern": "^[a-z0-9_]+$",
+      "description": "System-friendly identifier used by Drupal and other CMS"
+    },
+    "status": {
+      "type": "string",
+      "enum": ["draft", "published", "deprecated", "revoked"],
+      "description": "Publication lifecycle status of the agent"
     }
   },
   "required": ["name", "version"],

package/spec/v0.4/agent-card.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://openstandardagents.org/schemas/v0.4/agent-card.schema.json",
   "title": "OSSA Agent Card",
-  "description": "Universal agent contract for discovery. Bridges MCP (tools) and A2A (agents). Generated from OSSA manifests and served at .well-known/agent-card.json.",
+  "description": "Universal agent contract for discovery, Agent Social profile, marketplace, and global/GitLab registry. Every attribute is defined in and projected from the OSSA agent spec (metadata, spec, or extensions). Single source of truth: OSSA manifest. Serve at .well-known/agent-card.json or .well-known/agent.json (A2A).",
   "type": "object",
   "required": ["uri", "name", "version", "ossaVersion", "capabilities", "endpoints", "transport", "authentication", "encryption"],
   "properties": {
@@ -22,7 +22,7 @@
     },
     "ossaVersion": {
       "type": "string",
-      "description": "OSSA specification version (e.g., ossa/v0.4.5)"
+      "description": "OSSA specification version (e.g., ossa/v0.4.7)"
     },
     "taxonomy": {
       "type": "object",
@@ -384,6 +384,93 @@
       "type": "string",
       "format": "date-time",
       "description": "Last heartbeat timestamp (ISO 8601)"
+    },
+    "state": {
+      "type": "object",
+      "description": "State persistence for discovery and session resume (SoD: defined in OSSA manifest, projected here)",
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": ["stateless", "session", "long_running"],
+          "description": "State persistence mode"
+        },
+        "storageHint": {
+          "type": "string",
+          "description": "Storage backend: redis, postgres, vector-db, kv, custom"
+        },
+        "sessionEndpoint": {
+          "type": "string",
+          "format": "uri",
+          "description": "URL to create or resume session"
+        },
+        "checkpointIntervalSeconds": {
+          "type": "integer",
+          "description": "Checkpoint interval in seconds"
+        },
+        "retention": {
+          "type": "string",
+          "description": "Data retention e.g. 30d, 1h"
+        }
+      }
+    },
+    "tokenEfficiencySummary": {
+      "type": "object",
+      "description": "Token efficiency hints for routing and cost (SoD: defined in OSSA manifest, projected here)",
+      "properties": {
+        "serializationProfile": {
+          "type": "string",
+          "enum": ["compact", "full", "fingerprint"]
+        },
+        "observationFormat": {
+          "type": "string",
+          "enum": ["projected", "summary", "diff", "full"]
+        },
+        "maxInputTokens": { "type": "integer" },
+        "cascade": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Model cascade e.g. haiku, sonnet, opus"
+        },
+        "consolidationStrategy": { "type": "string" }
+      }
+    },
+    "manifestRef": {
+      "type": "string",
+      "format": "uri",
+      "description": "URL to full OSSA manifest (single source of truth)"
+    },
+    "manifestDigest": {
+      "type": "string",
+      "description": "Content digest of manifest (e.g. SHA-256) for integrity and deduplication"
+    },
+    "separation": {
+      "type": "object",
+      "description": "Separation of duties for discovery and policy (SoD: defined in OSSA spec.access and spec.separation)",
+      "properties": {
+        "accessTier": {
+          "type": "string",
+          "enum": ["tier_1_read", "tier_2_write_limited", "tier_3_write_elevated", "tier_4_policy"]
+        },
+        "role": {
+          "type": "string",
+          "description": "Primary role (e.g. reviewer, deployer)"
+        },
+        "conflictsWith": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Roles this agent must not also perform"
+        }
+      }
+    },
+    "cardProfile": {
+      "type": "string",
+      "enum": ["minimal", "discovery", "full"],
+      "description": "Card profile: minimal (uri,name,capabilities), discovery (+ state, tokenEfficiency), full (all)"
+    },
+    "extensions": {
+      "type": "object",
+      "additionalProperties": true,
+      "description": "Extension data for platform-specific fields"
     }
   },
   "additionalProperties": false