@bluefly/openstandardagents 0.4.6 → 0.4.9

package/dist/services/release-automation/webhook.service.js

@@ -0,0 +1,187 @@
+/**
+ * Webhook Service
+ * Handles GitLab webhooks with Zod validation
+ */
+import { MilestoneWebhookPayloadSchema, PushWebhookPayloadSchema, WebhookResponseSchema, } from './schemas/release.schema.js';
+import { ReleaseService } from './release.service.js';
+import { MilestoneService } from './milestone.service.js';
+import { TagService } from './tag.service.js';
+import { MergeRequestService } from './merge-request.service.js';
+/**
+ * Webhook Service
+ * DRY: Centralized webhook handling
+ */
+export class WebhookService {
+    releaseService;
+    milestoneService;
+    tagService;
+    mergeRequestService;
+    constructor(gitlabToken, projectId = process.env.CI_PROJECT_ID || '') {
+        this.releaseService = new ReleaseService(gitlabToken, projectId);
+        this.milestoneService = new MilestoneService(gitlabToken, projectId);
+        this.tagService = new TagService(gitlabToken, projectId);
+        this.mergeRequestService = new MergeRequestService(gitlabToken, projectId);
+    }
+    /**
+     * Handle milestone webhook
+     */
+    async handleMilestoneWebhook(payload) {
+        try {
+            // Validate payload with Zod
+            const validated = MilestoneWebhookPayloadSchema.parse(payload);
+            const actions = [];
+            const { object_attributes: milestone } = validated;
+            // Determine if this is a create or close event
+            const isNewMilestone = milestone.state === 'active' &&
+                new Date(milestone.created_at).getTime() ===
+                    new Date(milestone.updated_at).getTime();
+            if (isNewMilestone) {
+                // Milestone created - create dev tag and branch
+                const action = await this.handleMilestoneCreate(validated);
+                if (action)
+                    actions.push(action);
+            }
+            else if (milestone.state === 'closed') {
+                // Milestone closed - create RC
+                const action = await this.handleMilestoneClose(validated);
+                if (action)
+                    actions.push(action);
+            }
+            return WebhookResponseSchema.parse({
+                success: true,
+                message: `Milestone ${milestone.title} processed`,
+                actions,
+            });
+        }
+        catch (error) {
+            return WebhookResponseSchema.parse({
+                success: false,
+                message: `Webhook processing failed: ${error}`,
+                actions: [],
+            });
+        }
+    }
+    /**
+     * Handle push webhook
+     */
+    async handlePushWebhook(payload) {
+        try {
+            // Validate payload with Zod
+            const validated = PushWebhookPayloadSchema.parse(payload);
+            const actions = [];
+            // Only process release branch pushes (release/v0.X.x)
+            if (validated.ref.match(/^refs\/heads\/release\/v\d+\.\d+\.x$/)) {
+                const action = await this.handleReleaseBranchPush(validated);
+                if (action)
+                    actions.push(action);
+            }
+            return WebhookResponseSchema.parse({
+                success: true,
+                message: 'Push webhook processed',
+                actions,
+            });
+        }
+        catch (error) {
+            return WebhookResponseSchema.parse({
+                success: false,
+                message: `Webhook processing failed: ${error}`,
+                actions: [],
+            });
+        }
+    }
+    /**
+     * Handle milestone creation
+     */
+    async handleMilestoneCreate(payload) {
+        const { object_attributes: milestone } = payload;
+        const version = milestone.title.replace(/^v/, '');
+        // Extract major.minor from version (e.g., 0.3.0 -> 0.3)
+        const versionMatch = version.match(/^(\d+\.\d+)/);
+        if (!versionMatch) {
+            throw new Error(`Invalid version format: ${version}`);
+        }
+        const releaseBranch = `release/v${versionMatch[1]}.x`;
+        // Create initial dev tag on the appropriate release branch
+        const devTag = `v${version}-dev.0`;
+        await this.tagService.create({
+            name: devTag,
+            ref: releaseBranch,
+            message: `Initial dev tag for ${milestone.title}`,
+        });
+        return {
+            type: 'milestone_created',
+            status: 'success',
+            details: {
+                milestoneId: milestone.id,
+                tag: devTag,
+                version,
+                releaseBranch,
+            },
+        };
+    }
+    /**
+     * Handle milestone closure
+     */
+    async handleMilestoneClose(payload) {
+        const { object_attributes: milestone } = payload;
+        const version = milestone.title.replace(/^v/, '');
+        // Get milestone statistics
+        const milestoneData = await this.milestoneService.read(milestone.id);
+        if (!milestoneData) {
+            throw new Error(`Milestone ${milestone.id} not found`);
+        }
+        // Check all issues are closed
+        if (milestoneData.statistics.openIssues > 0) {
+            throw new Error(`Cannot create RC: ${milestoneData.statistics.openIssues} issues still open`);
+        }
+        // Extract major.minor from version to determine release branch
+        const versionMatch = version.match(/^(\d+\.\d+)/);
+        if (!versionMatch) {
+            throw new Error(`Invalid version format: ${version}`);
+        }
+        const releaseBranch = `release/v${versionMatch[1]}.x`;
+        // Create RC tag on the release branch
+        const rcTag = `v${version}-rc.1`;
+        await this.tagService.create({
+            name: rcTag,
+            ref: releaseBranch,
+            message: `Release candidate for ${milestone.title}`,
+        });
+        // Create MR: release/v0.X.x → main
+        const mr = await this.mergeRequestService.create({
+            sourceBranch: releaseBranch,
+            targetBranch: 'main',
+            title: `Release ${milestone.title}`,
+            description: `Release candidate ${rcTag} for milestone ${milestone.title}`,
+            labels: ['release', 'automation'],
+            milestoneId: milestone.id,
+        });
+        return {
+            type: 'milestone_closed',
+            status: 'success',
+            details: {
+                milestoneId: milestone.id,
+                rcTag,
+                mergeRequestId: mr.id,
+                releaseBranch,
+            },
+        };
+    }
+    /**
+     * Handle release branch push
+     */
+    async handleReleaseBranchPush(payload) {
+        // Auto-increment dev tag on release branch
+        // This would be implemented based on current version detection
+        // For now, return success
+        return {
+            type: 'dev_tag_incremented',
+            status: 'success',
+            details: {
+                branch: payload.ref,
+                commits: payload.commits.length,
+            },
+        };
+    }
+}
+//# sourceMappingURL=webhook.service.js.map

package/dist/services/skills-pipeline/skills-install.service.js

@@ -12,10 +12,10 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { injectable } from 'inversify';
+import { Octokit } from '@octokit/rest';
 import * as fs from 'fs/promises';
+import { injectable } from 'inversify';
 import * as path from 'path';
-import { Octokit } from '@octokit/rest';
 /**
  * Parse GitHub URL into owner and repo.
  */

package/dist/services/skills-pipeline/skills-research.service.d.ts

@@ -59,28 +59,27 @@ export declare class SkillsResearchService {
      */
     private updateIndex;
     /**
-     * Fetch skills from a research source — dispatches by source type.
-     * Uses @octokit/rest SDK for GitHub and axios for npm registry.
+     * Fetch skills from a research source — dispatches by source type
      */
     private fetchFromSource;
     /**
      * Fetch skills from an awesome-list repo (e.g., awesome-claude-code)
-     * Uses Octokit SDK to fetch README.md and parses markdown links
+     * Parses the README.md for markdown links to skill repos/tools
      */
     private fetchFromAwesomeList;
     /**
      * Fetch skills from a showcase repo (e.g., claude-code-showcase)
-     * Uses Octokit SDK to list directories and read their READMEs
+     * Lists top-level directories and reads their README for metadata
      */
     private fetchFromShowcase;
     /**
      * Fetch skills from npm registry search
-     * Uses axios to search for packages with keyword "claude-skill" or "ossa-agent"
+     * Searches for packages with keyword "claude-skill" or "ossa-agent"
      */
     private fetchFromNpmRegistry;
     /**
      * Fetch skills from a generic GitHub repo
-     * Uses Octokit SDK to list YAML/MD files that look like agent definitions
+     * Lists YAML/MD files that look like agent definitions
      */
     private fetchFromGitHubRepo;
     /**
@@ -89,7 +88,6 @@ export declare class SkillsResearchService {
     private extractTriggersFromText;
     /**
      * Parse GitHub URL into owner/repo
-     * Logs parsing errors instead of silently swallowing them in catch blocks
      */
     private parseGitHubUrl;
     /**

package/dist/services/skills-pipeline/skills-research.service.js

@@ -58,53 +58,13 @@ const DEFAULT_SOURCES = [
  * Common English stop words to exclude from trigger extraction
  */
 const STOP_WORDS = new Set([
-    'the',
-    'and',
-    'for',
-    'are',
-    'but',
-    'not',
-    'you',
-    'all',
-    'can',
-    'her',
-    'was',
-    'one',
-    'our',
-    'out',
-    'has',
-    'have',
-    'with',
-    'this',
-    'that',
-    'from',
-    'they',
-    'been',
-    'said',
-    'each',
-    'which',
-    'their',
-    'will',
-    'other',
-    'about',
-    'many',
-    'then',
-    'them',
-    'these',
-    'some',
-    'would',
-    'make',
-    'like',
-    'into',
-    'could',
-    'time',
-    'very',
-    'when',
-    'come',
-    'made',
-    'use',
-    'using',
-    'used',
+    'the', 'and', 'for', 'are', 'but', 'not', 'you', 'all',
+    'can', 'her', 'was', 'one', 'our', 'out', 'has', 'have',
+    'with', 'this', 'that', 'from', 'they', 'been', 'said',
+    'each', 'which', 'their', 'will', 'other', 'about', 'many',
+    'then', 'them', 'these', 'some', 'would', 'make', 'like',
+    'into', 'could', 'time', 'very', 'when', 'come', 'made',
+    'use', 'using', 'used',
 ]);
 let SkillsResearchService = class SkillsResearchService {
     indexPath;
@@ -194,8 +154,7 @@ let SkillsResearchService = class SkillsResearchService {
         return deduped;
     }
     /**
-     * Fetch skills from a research source — dispatches by source type.
-     * Uses @octokit/rest SDK for GitHub and axios for npm registry.
+     * Fetch skills from a research source — dispatches by source type
      */
     async fetchFromSource(source) {
         switch (source.type) {
@@ -214,7 +173,7 @@ let SkillsResearchService = class SkillsResearchService {
     }
     /**
      * Fetch skills from an awesome-list repo (e.g., awesome-claude-code)
-     * Uses Octokit SDK to fetch README.md and parses markdown links
+     * Parses the README.md for markdown links to skill repos/tools
      */
     async fetchFromAwesomeList(source) {
         const { owner, repo } = this.parseGitHubUrl(source.url);
@@ -258,7 +217,7 @@ let SkillsResearchService = class SkillsResearchService {
     }
     /**
      * Fetch skills from a showcase repo (e.g., claude-code-showcase)
-     * Uses Octokit SDK to list directories and read their READMEs
+     * Lists top-level directories and reads their README for metadata
      */
     async fetchFromShowcase(source) {
         const { owner, repo } = this.parseGitHubUrl(source.url);
@@ -319,7 +278,7 @@ let SkillsResearchService = class SkillsResearchService {
     }
     /**
      * Fetch skills from npm registry search
-     * Uses axios to search for packages with keyword "claude-skill" or "ossa-agent"
+     * Searches for packages with keyword "claude-skill" or "ossa-agent"
      */
     async fetchFromNpmRegistry(source) {
         const skills = [];
@@ -362,7 +321,7 @@ let SkillsResearchService = class SkillsResearchService {
     }
     /**
      * Fetch skills from a generic GitHub repo
-     * Uses Octokit SDK to list YAML/MD files that look like agent definitions
+     * Lists YAML/MD files that look like agent definitions
      */
     async fetchFromGitHubRepo(source) {
         const { owner, repo } = this.parseGitHubUrl(source.url);
@@ -407,15 +366,11 @@ let SkillsResearchService = class SkillsResearchService {
     }
     /**
      * Parse GitHub URL into owner/repo
-     * Logs parsing errors instead of silently swallowing them in catch blocks
      */
     parseGitHubUrl(url) {
         const match = url.match(/github\.com\/([^/]+)\/([^/]+)/);
-        if (!match) {
-            // Log the specific parsing error before throwing
-            console.warn(`Failed to parse GitHub URL: ${url}`);
+        if (!match)
             throw new Error(`Invalid GitHub URL: ${url}`);
-        }
         return { owner: match[1], repo: match[2].replace(/\.git$/, '') };
     }
     /**

package/dist/services/trust/trust.service.d.ts

@@ -35,4 +35,13 @@ export declare function canonicalManifestBytes(manifest: Record<string, unknown>
  * Verifies an agent's x-signature block against its canonical manifest.
  */
 export declare function verifyAgentSignature(manifest: Record<string, unknown>, signature: XSignature, agentId?: string): Promise<TrustVerificationResult>;
+/**
+ * Sign an agent manifest using an Ed25519 private key.
+ *
+ * @param manifest The agent manifest to sign
+ * @param privateKeyHex The Ed25519 private key in hex format
+ * @param issuer Optional DID or identifier of the signer
+ * @returns The manifest with the appended x-signature block
+ */
+export declare function signAgentManifest(manifest: Record<string, unknown>, privateKeyHex: string, issuer?: string): Promise<Record<string, unknown>>;
 //# sourceMappingURL=trust.service.d.ts.map

package/dist/services/trust/trust.service.js

@@ -170,6 +170,41 @@ export async function verifyAgentSignature(manifest, signature, agentId) {
         };
     }
 }
+/**
+ * Sign an agent manifest using an Ed25519 private key.
+ *
+ * @param manifest The agent manifest to sign
+ * @param privateKeyHex The Ed25519 private key in hex format
+ * @param issuer Optional DID or identifier of the signer
+ * @returns The manifest with the appended x-signature block
+ */
+export async function signAgentManifest(manifest, privateKeyHex, issuer) {
+    const payload = canonicalManifestBytes(manifest);
+    // Use @noble/ed25519 to sign the payload
+    const sigBytes = await ed.signAsync(payload, privateKeyHex);
+    const pubBytes = await ed.getPublicKeyAsync(privateKeyHex);
+    // Convert to base64 for the signature block
+    const signatureB64 = Buffer.from(sigBytes).toString('base64');
+    const publicKeyB64 = Buffer.from(pubBytes).toString('base64');
+    const signature = {
+        type: 'Ed25519',
+        value: signatureB64,
+        publicKey: publicKeyB64,
+        timestamp: new Date().toISOString()
+    };
+    if (issuer) {
+        signature.issuer = issuer;
+    }
+    // Insert x-signature into metadata
+    const metadata = manifest.metadata || {};
+    return {
+        ...manifest,
+        metadata: {
+            ...metadata,
+            'x-signature': signature
+        }
+    };
+}
 // ─── Utilities ──────────────────────────────────────────────
 function base64ToBytes(b64) {
     const binary = atob(b64);

package/dist/services/validators/a2a.validator.js

@@ -42,8 +42,8 @@ let A2AValidator = class A2AValidator {
             }
         }
         if (a2aConfig.agent_card &&
-            !a2aConfig.agent_card.agent_uri?.startsWith('agent://')) {
-            errors.push('Agent URI must start with agent://');
+            !a2aConfig.agent_card.agent_uri?.startsWith('uadp://')) {
+            errors.push('Agent URI must start with uadp://');
         }
         if (a2aConfig.handoff_protocol && !a2aConfig.service_discovery?.enabled) {
             warnings.push('Handoff protocol configured without service discovery');

package/dist/skills/test-skill/README.md

@@ -0,0 +1,36 @@
+# test-skill
+
+A test skill for unit testing
+
+## Installation
+
+```bash
+npm install @claude-skills/test-skill
+```
+
+This will automatically install the skill to `~/.claude/skills/`.
+
+## Manual Installation
+
+```bash
+# Clone or copy SKILL.md to Claude skills directory
+cp node_modules/@claude-skills/test-skill/SKILL.md ~/.claude/skills/test-skill/
+```
+
+## Trigger Keywords
+
+- testing
+- validation
+- unit-test
+
+## Tags
+
+`test` 
+
+## About Claude Skills
+
+Claude Skills are reusable prompt templates that enhance Claude's capabilities for specific tasks.
+
+## Generated by OSSA
+
+This skill package was generated using [@bluefly/openstandardagents](https://www.npmjs.com/package/@bluefly/openstandardagents)

package/dist/skills/test-skill/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: test-skill
+description: A test skill for unit testing
+trigger_keywords:
+  - testing
+  - validation
+  - unit-test
+version: 1.0.0
+author: Test Author
+tags:
+  - test
+---
+
+# test-skill
+
+A test skill for unit testing
+
+## Instructions
+
+This is a test skill for validating the export functionality.
+
+## Capabilities
+
+- testing
+- validation
+
+## When to Use
+
+This skill activates when:
+- Task involves: testing
+- Task involves: validation

package/dist/skills/test-skill/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Claude Skill: test-skill
+ * A test skill for unit testing
+ *
+ * @generated by @bluefly/openstandardagents skills-export
+ */
+
+export type TriggerKeyword =
+  | 'testing'
+  | 'validation'
+  | 'unit-test';
+
+export type SkillTag =
+  | 'test';
+
+export interface ClaudeSkillMetadata {
+  name: 'test-skill';
+  description: string;
+  triggerKeywords: TriggerKeyword[];
+  version: '1.0.0';
+  author?: string;
+  tags?: SkillTag[];
+}
+
+export interface ClaudeSkill {
+  metadata: ClaudeSkillMetadata;
+  skillPath: string;
+}
+
+declare const skill: ClaudeSkill;
+export default skill;

package/dist/skills/test-skill/install.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+/**
+ * Post-install script to copy skill to ~/.claude/skills/
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const homeDir = os.homedir();
+const claudeSkillsDir = path.join(homeDir, '.claude', 'skills');
+const targetDir = path.join(claudeSkillsDir, 'test-skill');
+
+try {
+  // Create ~/.claude/skills/ if it doesn't exist
+  if (!fs.existsSync(claudeSkillsDir)) {
+    fs.mkdirSync(claudeSkillsDir, { recursive: true });
+  }
+
+  // Create target directory
+  if (!fs.existsSync(targetDir)) {
+    fs.mkdirSync(targetDir, { recursive: true });
+  }
+
+  // Copy SKILL.md
+  const skillSource = path.join(__dirname, 'SKILL.md');
+  const skillTarget = path.join(targetDir, 'SKILL.md');
+  fs.copyFileSync(skillSource, skillTarget);
+
+  // Copy additional directories if they exist
+  const dirs = ['templates', 'knowledge', 'examples'];
+  for (const dir of dirs) {
+    const sourcePath = path.join(__dirname, dir);
+    if (fs.existsSync(sourcePath)) {
+      const targetPath = path.join(targetDir, dir);
+      fs.cpSync(sourcePath, targetPath, { recursive: true });
+    }
+  }
+
+  console.log('✓ Skill installed to: ' + targetDir);
+} catch (error) {
+  console.error('Failed to install skill:', error.message);
+  process.exit(1);
+}

package/dist/skills/test-skill/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@claude-skills/test-skill",
+  "version": "1.0.0",
+  "description": "A test skill for unit testing",
+  "main": "SKILL.md",
+  "types": "index.d.ts",
+  "scripts": {
+    "install": "node install.js"
+  },
+  "keywords": [
+    "claude",
+    "claude-skill",
+    "ossa",
+    "ai",
+    "agent",
+    "test",
+    "testing",
+    "validation",
+    "unit-test"
+  ],
+  "author": "Test Author",
+  "license": "MIT",
+  "files": [
+    "SKILL.md",
+    "README.md",
+    "index.d.ts",
+    "install.js",
+    "templates/**",
+    "knowledge/**",
+    "examples/**"
+  ],
+  "ossa": {
+    "type": "claude-skill",
+    "skillPath": "/var/folders/48/d86hncy50j93r_vzsv6knttr0000gn/T/ossa-export-test-1773084155160/test-skill"
+  }
+}

package/dist/spec/reference/reference-agents/compliance-auditor/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: compliance-auditor

package/dist/spec/reference/reference-agents/doc-agent/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: doc-agent

package/dist/spec/reference/reference-agents/mr-reviewer/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: mr-reviewer

package/dist/spec/reference/reference-agents/ossa-validator-v0.3/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 
 metadata:

package/dist/spec/reference/reference-agents/pipeline-fixer/manifest.ossa.yaml

@@ -9,7 +9,7 @@
 #
 # ============================================================================
 
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 
 metadata:

package/dist/spec/reference/reference-agents/release-orchestrator/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: release-orchestrator