@bluefly/openstandardagents 0.4.6 → 0.4.9

package/examples/workflows/batch-email-campaign.yaml

@@ -1,6 +1,6 @@
 # Example: Batch Email Campaign Workflow
 # Demonstrates loops, parallel execution, and batch processing
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Workflow
 metadata:
   name: batch-email-campaign

package/examples/workflows/content-review-publish.yaml

@@ -1,6 +1,6 @@
 # Example: Content Review and Publish Workflow
 # Demonstrates mixed Task + Agent composition
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Workflow
 metadata:
   name: content-review-publish

package/examples/workflows/simple-etl.yaml

@@ -1,6 +1,6 @@
 # Example: Simple ETL Workflow
 # Demonstrates sequential Tasks with data transformation
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Workflow
 metadata:
   name: simple-etl

package/openapi/agent-communication.yaml

@@ -65,8 +65,8 @@ paths:
               taskAssignment:
                 summary: Assign task to worker
                 value:
-                  to: agent://worker-001
-                  from: agent://orchestrator-main
+                  to: uadp://worker-001
+                  from: uadp://orchestrator-main
                   type: TaskAssigned
                   payload:
                     taskId: task-123
@@ -78,8 +78,8 @@ paths:
               queryRequest:
                 summary: Query another agent
                 value:
-                  to: agent://specialist-nlp
-                  from: agent://worker-002
+                  to: uadp://specialist-nlp
+                  from: uadp://worker-002
                   type: QueryRequest
                   payload:
                     query: "Extract entities from text"
@@ -299,7 +299,7 @@ paths:
               webhookSubscription:
                 summary: Webhook-based subscription
                 value:
-                  agentId: agent://worker-003
+                  agentId: uadp://worker-003
                   deliveryMode: push
                   webhookUrl: https://worker-003.example.com/channels/task-updates
                   filter:
@@ -307,7 +307,7 @@ paths:
               pollingSubscription:
                 summary: Polling-based subscription
                 value:
-                  agentId: agent://monitor-001
+                  agentId: uadp://monitor-001
                   deliveryMode: pull
                   filter:
                     messageTypes: [TaskCompleted]
@@ -386,7 +386,7 @@ paths:
                 value:
                   type: AgentStarted
                   payload:
-                    agentId: agent://worker-005
+                    agentId: uadp://worker-005
                     version: 1.2.0
                     capabilities: [text_analysis, entity_extraction]
                     startedAt: "2025-12-18T14:25:00Z"
@@ -627,13 +627,13 @@ components:
         to:
           type: string
           format: uri
-          description: Target agent URI (e.g., agent://worker-001)
-          pattern: '^agent://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
+          description: Target agent URI (e.g., uadp://worker-001)
+          pattern: '^uadp://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
         from:
           type: string
           format: uri
           description: Source agent URI
-          pattern: '^agent://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
+          pattern: '^uadp://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
         type:
           $ref: '#/components/schemas/MessageType'
         payload:
@@ -865,7 +865,7 @@ components:
         agentId:
           type: string
           format: uri
-          pattern: '^agent://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
+          pattern: '^uadp://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
           description: Subscribing agent URI
         deliveryMode:
           type: string
@@ -970,7 +970,7 @@ components:
         agentId:
           type: string
           format: uri
-          pattern: '^agent://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
+          pattern: '^uadp://[a-z0-9]([-a-z0-9]*[a-z0-9])?$'
         description:
           type: string
         events:

package/openapi/marketplace-plugin.openapi.yaml

@@ -2093,7 +2093,7 @@ components:
       properties:
         uri:
           type: string
-          pattern: '^agent://'
+          pattern: '^uadp://'
         name:
           type: string
         version:

package/openapi/protocols/sse-streams.yaml

@@ -80,14 +80,14 @@ paths:
                   value: |
                     event: message
                     id: msg-123e4567-e89b-12d3-a456-426614174000
-                    data: {"type":"message","timestamp":"2025-12-18T14:00:00Z","payload":{"channel":"content.published","data":{"contentId":"node-123"}},"metadata":{"agentId":"agent://example.com/publisher"}}
+                    data: {"type":"message","timestamp":"2025-12-18T14:00:00Z","payload":{"channel":"content.published","data":{"contentId":"node-123"}},"metadata":{"agentId":"uadp://example.com/publisher"}}
 
                 status_event:
                   summary: Status update event
                   value: |
                     event: status
                     id: status-456e7890-a12b-34c5-d678-901234567890
-                    data: {"type":"status","timestamp":"2025-12-18T14:00:00Z","payload":{"status":"healthy","load":0.45},"metadata":{"agentId":"agent://example.com/agent"}}
+                    data: {"type":"status","timestamp":"2025-12-18T14:00:00Z","payload":{"status":"healthy","load":0.45},"metadata":{"agentId":"uadp://example.com/agent"}}
 
         '401':
           description: Unauthorized - Invalid authentication
@@ -401,7 +401,7 @@ components:
           type: string
           format: uri
           description: Agent URI of sender
-          example: agent://example.com/supercali-fragilisticagent
+          example: uadp://example.com/supercali-fragilisticagent
         streamId:
           type: string
           format: uuid

package/openapi/protocols/websocket-events.yaml

@@ -111,8 +111,8 @@ components:
             agentId:
               type: string
               format: uri
-              description: Agent URI (agent://domain/agent-id)
-              example: agent://example.com/supercali-fragilisticagent
+              description: Agent URI (uadp://domain/agent-id)
+              example: uadp://example.com/supercali-fragilisticagent
             capabilities:
               type: array
               items:
@@ -353,7 +353,7 @@ components:
           type: string
           format: uri
           description: Agent URI of sender
-          example: agent://example.com/supercali-fragilisticagent
+          example: uadp://example.com/supercali-fragilisticagent
         correlationId:
           type: string
           format: uuid

package/openapi/uadp-asyncapi.yaml

@@ -1,6 +1,6 @@
 asyncapi: 3.0.0
 info:
-  title: Universal Agent Discovery Protocol (UADP) — Event Streams
+  title: Universal AI Discovery Protocol (UADP) — Event Streams
   version: 0.4.0
   description: |
     ## UADP AsyncAPI Specification v0.4

package/openapi/uadp-openapi.yaml

@@ -1,10 +1,10 @@
 openapi: 3.1.0
 info:
-  title: Universal Agent Discovery Protocol (UADP) — REST API
+  title: Universal AI Discovery Protocol (UADP) — REST API
   version: 0.4.0
   description: |
-    ## Universal Agent Discovery Protocol (UADP) v0.4
-    
+    ## Universal AI Discovery Protocol (UADP) v0.4
+
     UADP is the decentralized discovery and registry standard that is the "missing contract"
     for software agents — part of the Open Standard for Software Agents (OSSA) specification.
 
@@ -52,6 +52,8 @@ tags:
     description: Agent registration and lifecycle management
   - name: discovery
     description: Agent discovery, search, and filtering
+  - name: federation
+    description: Peer-to-peer gossip and node federation (v0.6.0)
   - name: trust
     description: Signature verification and trust badge resolution
   - name: health
@@ -61,6 +63,43 @@ tags:
 
 paths:
   # ─────────────────────────────────────────────
+  # WEBFINGER (Decentralized Discovery)
+  # ─────────────────────────────────────────────
+  /.well-known/webfinger:
+    get:
+      summary: RFC 7033 WebFinger Discovery
+      description: |
+        Given a resource URI (like `uadp://skills.sh/code-review` or `acct:alice@example.com`),
+        this endpoint returns JRD (JSON Resource Descriptor) format links pointing to
+        the agent's OSSA manifest, UADP status, or PGP keys.
+        This prevents UADP from requiring a centralized registry.
+      operationId: uadp_webfinger
+      tags: [discovery]
+      parameters:
+        - name: resource
+          in: query
+          required: true
+          schema:
+            type: string
+          description: "URI to look up (e.g., uadp://skills.sh/tools/linter)"
+          example: "uadp://skills.sh/tools/linter"
+        - name: rel
+          in: query
+          schema:
+            type: string
+          description: "Optional link relation to filter by (e.g., https://openstandardagents.org/rel/manifest)"
+      responses:
+        '200':
+          description: JRD Resource Descriptor
+          content:
+            application/jrd+json:
+              schema:
+                $ref: '#/components/schemas/WebFingerJRD'
+        '400':
+          $ref: '#/components/responses/BadRequest'
+        '404':
+          $ref: '#/components/responses/NotFound'
+  # ─────────────────────────────────────────────
   # REGISTRY
   # ─────────────────────────────────────────────
   /registry/register:
@@ -80,6 +119,15 @@ paths:
           application/json:
             schema:
               $ref: '#/components/schemas/RegistrationRequest'
+      parameters:
+        - name: gossip
+          in: query
+          description: |
+            If true, the registering node/agent wishes to participate in P2P gossip.
+            The response will include a `peers` array of known active UADP nodes.
+          schema:
+            type: boolean
+            default: false
             examples:
               signedAgent:
                 summary: Agent with Ed25519 x-signature
@@ -196,7 +244,7 @@ paths:
         - **capabilities** (capability matching — all must match)
         - **trust** (`verified-signature`, `signed`, `community`, `official`, `experimental`)
         - **status** (active, deprecated, revoked)
-        
+
         pagination via `limit` + `cursor` for large registries.
       operationId: uadp_discoverAgents
       tags: [discovery]
@@ -293,7 +341,7 @@ paths:
       description: |
         Accepts an agent manifest (or just the `metadata.x-signature` block) and performs
         cryptographic verification of the signature against the embedded public key.
-        
+
         Returns a `TrustVerificationResult` indicating whether the signature is valid,
         what tier it earns, and why.
       operationId: uadp_verifySignature
@@ -416,6 +464,46 @@ components:
       description: Unique agent identifier (DNS-1123 subdomain format)
 
   schemas:
+    # ── WEBFINGER JRD ──────────────────────────
+    WebFingerJRD:
+      type: object
+      required: [subject, links]
+      properties:
+        subject:
+          type: string
+          description: The URI of the requested resource
+        aliases:
+          type: array
+          items:
+            type: string
+            format: uri
+        properties:
+          type: object
+          additionalProperties:
+            type: string
+        links:
+          type: array
+          items:
+            type: object
+            required: [rel, href]
+            properties:
+              rel:
+                type: string
+                description: Link relation type
+              type:
+                type: string
+                description: Media type
+              href:
+                type: string
+                format: uri
+              titles:
+                type: object
+                additionalProperties:
+                  type: string
+              properties:
+                type: object
+                additionalProperties:
+                  type: string
     # ── SIGNATURE ──────────────────────────────
     XSignature:
       type: object
@@ -540,6 +628,12 @@ components:
           format: date-time
         tier:
           $ref: '#/components/schemas/TrustTier'
+        peers:
+          type: array
+          description: "List of known UADP node URIs for P2P gossip (present if `gossip=true` was sent)"
+          items:
+            type: string
+            format: uri
 
     # ── AGENT RECORD ───────────────────────────
     AgentRecord:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bluefly/openstandardagents",
-  "version": "0.4.6",
+  "version": "0.4.9",
   "exports": {
     "./schema": "./spec/v0.4/agent.schema.json",
     "./schema/v0.4": "./spec/v0.4/agent.schema.json",
@@ -114,7 +114,6 @@
   "files": [
     "dist/",
     "!dist/dev-cli/",
-    "!dist/services/release-automation/",
     "!dist/sdks/python-generator/",
     "!dist/sdks/typescript/",
     "!dist/**/*.js.map",
@@ -227,7 +226,7 @@
     "prepare": "lefthook install || true",
     "postinstall": "node bin/postinstall || true",
     "// RELEASE & PUBLISH": "",
-    "prepublishOnly": "publint && npm run build",
+    "prepublishOnly": "publint && npm run test:unit && npm run build",
     "validate:deps": "depcheck --ignore-dirs=examples --ignores='@anthropic-ai/claude-agent-sdk,@langchain/openai,@openai/agents,@temporalio/activity,@temporalio/workflow,pino-pretty,readline,@types/*,ts-jest,eslint*,prettier*,lefthook,jest*,vitest,semantic-release*,@semantic-release/*,keep-a-changelog,jest-junit,publint,conventional-changelog-conventionalcommits,ajv-cli,json-schema-to-typescript,json-schema-to-zod,ts-node,@playwright/test,@langchain/anthropic,@langchain/core,langchain'",
     "validate:package": "publint",
     "publish:dry-run": "npm publish --dry-run",
@@ -239,6 +238,7 @@
     "@anthropic-ai/claude-agent-sdk": "^0.2.50",
     "@anthropic-ai/sdk": "^0.71.0",
     "@aws-sdk/client-bedrock-runtime": "^3.955.0",
+    "@cedar-policy/cedar-wasm": "^4.9.1",
     "@gitbeaker/node": "^35.8.1",
     "@gitbeaker/rest": "^43.8.0",
     "@google/generative-ai": "^0.21.0",
@@ -302,6 +302,7 @@
     "zod": "^4.1.11"
   },
   "devDependencies": {
+    "@bluefly/duadp": "^0.1.3",
     "@jest/globals": "^29.7.0",
     "@octokit/rest": "^22.0.1",
     "@semantic-release/changelog": "^6.0.3",
@@ -345,20 +346,12 @@
   "optionalDependencies": {
     "nodemailer": "^6.9.0"
   },
-  "bundledDependencies": [
-    "ajv",
-    "ajv-formats"
-  ],
   "engines": {
-    "node": ">=16.20.0 || >=18.0.0 || >=20.0.0 || >=22.0.0",
-    "npm": ">=8.0.0"
+    "node": ">=20.0.0",
+    "npm": ">=10.0.0"
   },
   "volta": {
-    "node": "18.20.8",
-    "npm": "10.9.4"
-  },
-  "bundleDependencies": [
-    "ajv",
-    "ajv-formats"
-  ]
+    "node": "22.19.0",
+    "npm": "11.10.0"
+  }
 }

package/spec/reference/reference-agents/compliance-auditor/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: compliance-auditor

package/spec/reference/reference-agents/doc-agent/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: doc-agent

package/spec/reference/reference-agents/mr-reviewer/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: mr-reviewer

package/spec/reference/reference-agents/ossa-validator-v0.3/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 
 metadata:

package/spec/reference/reference-agents/pipeline-fixer/manifest.ossa.yaml

@@ -9,7 +9,7 @@
 #
 # ============================================================================
 
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 
 metadata:

package/spec/reference/reference-agents/release-orchestrator/manifest.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.6
+apiVersion: ossa/v0.4.7
 kind: Agent
 metadata:
   name: release-orchestrator