@bluefly/openstandardagents 0.4.8 → 0.4.9

package/dist/confidence/index.js

@@ -0,0 +1,130 @@
+/**
+ * OSSA SDK — Confidence Scoring Module
+ * @package @bluefly/openstandardagents
+ *
+ * Canonical confidence gate implementation for the OSSA platform.
+ * Referenced by: duadp, workflow-engine, social-gate, any Cedar quality gate consumer.
+ *
+ * Research basis:
+ *   - Cedar Policies for AI Agent Governance (OSSA Research, 2026-03-09)
+ *   - NIST AI RMF 1.0, MEASURE 2.5: AI system performance evaluated using metrics
+ *   - LangChain State of Agent Engineering 2026: 57% orgs run agents in prod;
+ *     quality is primary barrier (32% of respondents)
+ *   - Confidence-Informed Self-Consistency (CISC): 46% fewer reasoning paths
+ *     with equal accuracy (Xiong et al., 2024)
+ */
+// ---------------------------------------------------------------------------
+// Three-tier confidence routing
+// Thresholds: ≥90 auto-approve, 50–89 human review, <50 reject
+// Source: Cedar Policies for AI Agent Governance (OSSA Research 2026)
+// ---------------------------------------------------------------------------
+/**
+ * Gate an agent action based on model confidence score.
+ *
+ * @param confidence  [0–100] confidence score. 0 means not provided — skip gate.
+ * @param trustTier   OSSA trust tier of the resource being published/acted on.
+ * @param validationPassed  Whether OSSA schema validation succeeded.
+ */
+export function confidenceGate(confidence, trustTier = 'community', validationPassed = false) {
+    if (confidence === 0) {
+        return { action: 'proceed', confidence, reason: 'no-model-confidence-provided' };
+    }
+    if (confidence >= 90) {
+        return { action: 'proceed', confidence, reason: 'high-confidence-auto-approve' };
+    }
+    if (confidence >= 50) {
+        const isHighTrust = ['verified', 'official'].includes(trustTier);
+        if (isHighTrust) {
+            return {
+                action: 'human_review',
+                confidence,
+                reason: 'medium-confidence-requires-review-for-high-trust-tier',
+                degraded_tier: 'signed',
+            };
+        }
+        return { action: 'proceed', confidence, reason: 'medium-confidence-acceptable-for-tier' };
+    }
+    if (validationPassed) {
+        return {
+            action: 'human_review',
+            confidence,
+            reason: 'low-confidence-but-validation-passed',
+            degraded_tier: 'community',
+        };
+    }
+    return { action: 'reject', confidence, reason: 'low-confidence-and-validation-failed' };
+}
+// ---------------------------------------------------------------------------
+// Logprob → confidence conversion
+// Source: "log probability analysis" section — Cedar Policies OSSA Research 2026
+// ---------------------------------------------------------------------------
+/**
+ * Convert token log-probabilities to an integer [0–100] confidence score.
+ * Uses mean of exp(logprob) across all tokens.
+ *
+ * Caveat: Even high-performing LLMs show minimal confidence variation between
+ * correct/incorrect answers — domain-specific calibration is recommended
+ * (LangChain State of Agent Engineering 2026, p. 14).
+ */
+export function logprobsToConfidence(logprobs) {
+    if (!logprobs?.length)
+        return 0;
+    const avgProb = logprobs.reduce((s, lp) => s + Math.exp(lp), 0) / logprobs.length;
+    return Math.round(Math.min(1, Math.max(0, avgProb)) * 100);
+}
+// ---------------------------------------------------------------------------
+// Self-consistency confidence scoring
+// Source: CISC method (Xiong et al. 2024) — 46% fewer paths, equal accuracy
+// ---------------------------------------------------------------------------
+/**
+ * Estimate confidence via self-consistency voting.
+ * Samples multiple model outputs and uses agreement rate as confidence proxy.
+ *
+ * @param responses  Array of sampled model outputs (strings).
+ * @returns  [0–100] confidence based on modal agreement rate.
+ */
+export function selfConsistencyConfidence(responses) {
+    if (!responses?.length)
+        return 0;
+    const freq = {};
+    for (const r of responses) {
+        const normalized = r.trim().toLowerCase();
+        freq[normalized] = (freq[normalized] || 0) + 1;
+    }
+    const maxCount = Math.max(...Object.values(freq));
+    return Math.round((maxCount / responses.length) * 100);
+}
+// ---------------------------------------------------------------------------
+// Cedar deploy-gate context builder
+// ---------------------------------------------------------------------------
+/**
+ * Build the Cedar context object for the `deploy` action quality gate.
+ * Reads from CI artifact metrics; pass overrides when calling from tests.
+ */
+export function buildDeployGateContext(overrides = {}) {
+    const days = ['Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday'];
+    return {
+        confidence_score: overrides.confidence_score ?? 0,
+        test_coverage: overrides.test_coverage ?? 0,
+        security_score: overrides.security_score ?? 0,
+        vulnerability_count: overrides.vulnerability_count ?? 0,
+        day_of_week: overrides.day_of_week ?? days[new Date().getDay()],
+        human_approved: overrides.human_approved ?? false,
+    };
+}
+// ---------------------------------------------------------------------------
+// Resource confidence extractor
+// ---------------------------------------------------------------------------
+/**
+ * Extract confidence score from an OSSA resource payload.
+ * Checks metadata.confidence_score, spec.confidence_score, extensions.confidence_score.
+ */
+export function extractConfidenceScore(resource) {
+    const meta = resource.metadata;
+    const spec = resource.spec;
+    const ext = resource.extensions;
+    const raw = meta?.confidence_score ?? spec?.confidence_score ?? ext?.confidence_score ?? 0;
+    const n = typeof raw === 'number' ? raw : parseInt(String(raw), 10);
+    return isNaN(n) ? 0 : Math.min(100, Math.max(0, n));
+}
+//# sourceMappingURL=index.js.map

package/dist/data/platform-matrix.js

@@ -423,6 +423,35 @@ export const PLATFORM_MATRIX = [
         importHow: 'no',
         specUsage: ['Export produces Warp-compatible agent config from manifest.'],
     },
+    {
+        id: 'agentscope',
+        name: 'AgentScope',
+        description: 'AgentScope multi-agent Python framework with MCP tool integration, A2A support, and Mem0 memory',
+        status: 'beta',
+        whatTheyNeed: [
+            'Python 3.9+',
+            'AgentScope SDK (pip install agentscope)',
+            'LLM API key (OpenAI, Anthropic, etc.)',
+            'Optional: Mem0 for long-term memory',
+        ],
+        folderStructure: [
+            '.agents/{name}/manifest.ossa.yaml',
+            '.agents/{name}/src/ (Python agent code)',
+            'requirements.txt with agentscope',
+        ],
+        sdkNpm: [
+            'agentscope (PyPI)',
+            'agentscope[service] (with tool service)',
+        ],
+        exportHow: 'ossa export <manifest> --platform agentscope -o dist/',
+        importHow: 'partial',
+        specUsage: [
+            'Map spec.role to system message; spec.llm to model_config; spec.tools to service_toolkit.',
+            'extensions.agentscope.agent_class selects AgentScope agent type (ReActAgent, DialogAgent, etc.).',
+            'extensions.agentscope.memory_backend configures memory (mem0, local, etc.).',
+            'extensions.agentscope.orchestration selects multi-agent pattern (msghub, pipeline, etc.).',
+        ],
+    },
     {
         id: 'symfony',
         name: 'Symfony AI Agent',

package/dist/mesh/discovery-providers.js

@@ -237,7 +237,7 @@ export class ConsulDiscoveryProvider {
     }
     consulServiceToAgent(service) {
         return {
-            uri: service.Meta.uri || `agent://consul/${service.ID}`,
+            uri: service.Meta.uri || `uadp://consul/${service.ID}`,
             name: service.Service,
             version: service.Meta.version || '1.0.0',
             ossaVersion: service.Meta.ossaVersion || getApiVersion(),
@@ -372,7 +372,7 @@ export class KubernetesDiscoveryProvider {
         const labels = service.metadata.labels || {};
         return {
             uri: annotations['ossa.io/agent-uri'] ||
-                `agent://k8s/${service.metadata.name}`,
+                `uadp://k8s/${service.metadata.name}`,
             name: service.metadata.name,
             version: labels['app.kubernetes.io/version'] || '1.0.0',
             ossaVersion: annotations['ossa.io/version'] || getApiVersion(),

package/dist/mesh/discovery.js

@@ -201,7 +201,7 @@ export class AgentUriParser {
      * Build an agent URI from namespace and name
      */
     static build(namespace, name) {
-        return `agent://${namespace}/${name}`;
+        return `uadp://${namespace}/${name}`;
     }
     /**
      * Validate an agent URI

package/dist/mesh/index.d.ts

@@ -21,7 +21,7 @@
  *
  * // Define local agent
  * const localAgent = {
- *   uri: 'agent://team-a/my-agent',
+ *   uri: 'uadp://team-a/my-agent',
  *   name: 'My Agent',
  *   version: '1.0.0',
  *   ossaVersion: '0.3.0',
@@ -62,7 +62,7 @@
  *
  * // Request/response
  * const response = await client.request(
- *   'agent://team-b/analyzer',
+ *   'uadp://team-b/analyzer',
  *   { action: 'analyze', data: 'sample' }
  * );
  *

package/dist/mesh/index.js

@@ -21,7 +21,7 @@
  *
  * // Define local agent
  * const localAgent = {
- *   uri: 'agent://team-a/my-agent',
+ *   uri: 'uadp://team-a/my-agent',
  *   name: 'My Agent',
  *   version: '1.0.0',
  *   ossaVersion: '0.3.0',
@@ -62,7 +62,7 @@
  *
  * // Request/response
  * const response = await client.request(
- *   'agent://team-b/analyzer',
+ *   'uadp://team-b/analyzer',
  *   { action: 'analyze', data: 'sample' }
  * );
  *

package/dist/mesh/types.d.ts

@@ -45,7 +45,7 @@ export interface MessageEnvelope<T = unknown> {
     id: string;
     /** Message creation timestamp (ISO 8601) */
     timestamp: string;
-    /** Sender agent URI (format: agent://{namespace}/{name}) */
+    /** Sender agent URI (format: uadp://{namespace}/{name}) */
     from: string;
     /** Recipient agent URI or topic */
     to: string;
@@ -107,6 +107,8 @@ export interface AgentCard {
     name: string;
     version: string;
     ossaVersion: string;
+    uuid?: string;
+    gaid?: string;
     taxonomy?: AgentTaxonomy;
     capabilities: string[];
     tools?: ToolDescriptor[];
@@ -374,6 +376,205 @@ export interface AgentObservability {
         format?: string;
     };
 }
+/**
+ * Agent Taxonomy
+ * Classifies the agent by runtime platform, functional role, and architecture pattern.
+ */
+export interface AgentTaxonomy {
+    /** Runtime platform: claude, kagent, openai, langchain, crewai, etc. */
+    agentType?: string;
+    /** Functional role: orchestrator, worker, reviewer, analyzer, etc. */
+    agentKind?: string;
+    /** Architecture pattern and capabilities */
+    architecture?: {
+        /** Pattern: swarm, pipeline, tree, graph, etc. */
+        pattern?: string;
+        /** Architecture capabilities: handoff, streaming, context, tools, vision */
+        capabilities?: string[];
+        /** Coordination strategy */
+        coordination?: {
+            handoffStrategy?: string;
+            maxDepth?: number;
+        };
+        /** Runtime characteristics */
+        runtime?: {
+            scalability?: string;
+            executionModel?: string;
+            preferredRegion?: string;
+        };
+    };
+}
+/**
+ * Agent Model Info
+ * LLM configuration powering this agent.
+ */
+export interface AgentModelInfo {
+    provider?: string;
+    model?: string;
+    temperature?: number;
+    maxTokens?: number;
+    topP?: number;
+}
+/**
+ * MCP Server Descriptor
+ * Model Context Protocol server this agent connects to.
+ */
+export interface McpServerDescriptor {
+    name: string;
+    description?: string;
+    transport?: {
+        type: string;
+        command?: string;
+        args?: string[];
+        url?: string;
+    };
+    version?: string;
+    capabilities?: {
+        resources?: {
+            subscribe?: boolean;
+            listChanged?: boolean;
+        };
+        tools?: {
+            listChanged?: boolean;
+        };
+        logging?: {
+            enabled?: boolean;
+            level?: string;
+        };
+    };
+    resources?: McpResourceDescriptor[];
+}
+/**
+ * MCP Resource Descriptor
+ */
+export interface McpResourceDescriptor {
+    uri: string;
+    name: string;
+    description?: string;
+    mimeType?: string;
+}
+/**
+ * A2A Protocol Descriptor
+ * How this agent communicates with other agents.
+ */
+export interface A2AProtocolDescriptor {
+    /** Protocol type and version */
+    protocol?: {
+        type?: string;
+        version?: string;
+        messageFormat?: string;
+    };
+    /** Connected agent endpoints */
+    agentEndpoints?: Array<{
+        agentId: string;
+        url: string;
+        capabilities?: string[];
+        priority?: number;
+    }>;
+    /** Routing configuration */
+    routing?: {
+        strategy?: string;
+        rules?: Array<{
+            name: string;
+            condition: string;
+            target: string;
+            priority?: number;
+        }>;
+    };
+    /** Delegation and handoff rules */
+    delegation?: {
+        enabled?: boolean;
+        maxDepth?: number;
+        timeout?: number;
+        handoffRules?: Array<{
+            name: string;
+            condition: string;
+            target: string;
+            message?: string;
+        }>;
+    };
+    /** Completion signals */
+    completionSignals?: {
+        signals?: string[];
+        handlers?: Array<{
+            signal: string;
+            action: string;
+            target?: string;
+        }>;
+    };
+    /** Retry policy */
+    retryPolicy?: {
+        maxRetries?: number;
+        backoff?: string;
+        retryableErrors?: string[];
+    };
+    /** Circuit breaker */
+    circuitBreaker?: {
+        enabled?: boolean;
+        failureThreshold?: number;
+        timeout?: number;
+    };
+}
+/**
+ * Agent Handoff
+ * Direct delegation targets from spec.handoffs.
+ */
+export interface AgentHandoff {
+    to: string;
+    condition?: string;
+}
+/**
+ * Agent Autonomy
+ * How independently this agent operates.
+ */
+export interface AgentAutonomy {
+    level?: string;
+    approvalRequired?: boolean;
+    allowedActions?: string[];
+    blockedActions?: string[];
+}
+/**
+ * Agent Constraints
+ * Operational limits for cost, performance, and resources.
+ */
+export interface AgentConstraints {
+    cost?: {
+        maxTokensPerDay?: number;
+        maxTokensPerRequest?: number;
+        maxCostPerDay?: number;
+        currency?: string;
+    };
+    performance?: {
+        maxLatencySeconds?: number;
+        maxConcurrentRequests?: number;
+        timeoutSeconds?: number;
+    };
+    resources?: {
+        cpu?: string;
+        memory?: string;
+    };
+}
+/**
+ * Agent Observability
+ * Tracing, metrics, and logging configuration.
+ */
+export interface AgentObservability {
+    tracing?: {
+        enabled?: boolean;
+        exporter?: string;
+        endpoint?: string;
+        samplingRate?: number;
+    };
+    metrics?: {
+        enabled?: boolean;
+        exporter?: string;
+        endpoint?: string;
+    };
+    logging?: {
+        level?: string;
+        format?: string;
+    };
+}
 /**
  * Tool Descriptor
  */

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bluefly/openstandardagents",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "exports": {
     "./schema": "./spec/v0.4/agent.schema.json",
     "./schema/v0.4": "./spec/v0.4/agent.schema.json",
@@ -142,7 +142,7 @@
   },
   "homepage": "https://openstandardagents.org",
   "scripts": {
-    "// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500": "",
+    "// ─────────────────────────────────────────────────────────────────────────────": "",
     "// BUILD & DEVELOPMENT": "",
     "mcp": "node dist/mcp-server/index.js",
     "prebuild": "npm run docs:process",
@@ -238,6 +238,7 @@
     "@anthropic-ai/claude-agent-sdk": "^0.2.50",
     "@anthropic-ai/sdk": "^0.71.0",
     "@aws-sdk/client-bedrock-runtime": "^3.955.0",
+    "@cedar-policy/cedar-wasm": "^4.9.1",
     "@gitbeaker/node": "^35.8.1",
     "@gitbeaker/rest": "^43.8.0",
     "@google/generative-ai": "^0.21.0",
@@ -301,6 +302,7 @@
     "zod": "^4.1.11"
   },
   "devDependencies": {
+    "@bluefly/duadp": "^0.1.3",
     "@jest/globals": "^29.7.0",
     "@octokit/rest": "^22.0.1",
     "@semantic-release/changelog": "^6.0.3",
@@ -344,10 +346,6 @@
   "optionalDependencies": {
     "nodemailer": "^6.9.0"
   },
-  "bundledDependencies": [
-    "ajv",
-    "ajv-formats"
-  ],
   "engines": {
     "node": ">=20.0.0",
     "npm": ">=10.0.0"
@@ -355,9 +353,5 @@
   "volta": {
     "node": "22.19.0",
     "npm": "11.10.0"
-  },
-  "bundleDependencies": [
-    "ajv",
-    "ajv-formats"
-  ]
-}
+  }
+}

package/dist/services/agent-card-generator.d.ts

@@ -16,10 +16,10 @@
  * - manifestRef, manifestDigest: options or metadata.manifest_ref, metadata.manifest_digest
  * - tokenEfficiencySummary: top-level token_efficiency
  */
-import type { OssaAgent } from '../types/index.js';
 import type { AgentCard } from '../mesh/types.js';
+import type { OssaAgent } from '../types/index.js';
 export interface AgentCardGeneratorOptions {
-    /** Override the agent URI (default: agent://{namespace}/{name}) */
+    /** Override the agent URI (default: uadp://{namespace}/{name}) */
     uri?: string;
     /** Namespace for the agent URI (default: 'default') */
     namespace?: string;

package/dist/services/agent-card-generator.js

@@ -49,7 +49,7 @@ export class AgentCardGenerator {
         const name = manifest.metadata.name;
         const version = manifest.metadata?.version || '1.0.0';
         const namespace = options?.namespace || 'default';
-        const uri = options?.uri || `agent://${namespace}/${name}`;
+        const uri = options?.uri || `uadp://${namespace}/${name}`;
         // Extract all features
         const taxonomy = this.extractTaxonomy(manifest);
         const capabilities = this.extractCapabilities(manifest, taxonomy);
@@ -88,6 +88,8 @@ export class AgentCardGenerator {
             name,
             version,
             ossaVersion: manifest.apiVersion || 'ossa/v0.4',
+            ...(manifest.metadata?.identity?.uuid ? { uuid: manifest.metadata.identity.uuid } : {}),
+            ...(manifest.metadata?.identity?.gaid ? { gaid: manifest.metadata.identity.gaid } : {}),
             // Taxonomy — what kind of agent
             ...(taxonomy ? { taxonomy } : {}),
             // Capabilities & tools

package/dist/services/agents-md/agents-md.service.d.ts

@@ -7,6 +7,10 @@ import type { OssaAgent } from '../../types/index.js';
  * Service for generating and managing agents.md files from OSSA manifests
  */
 export declare class AgentsMdService {
+    /**
+     * Append optional configured block content to a generated section.
+     */
+    private addOptionalBlock;
     /**
      * Generate AGENTS.md content from OSSA manifest
      * @param manifest - OSSA agent manifest

package/dist/services/agents-md/agents-md.service.js

@@ -15,6 +15,15 @@ import { watch } from 'fs';
  * Service for generating and managing agents.md files from OSSA manifests
  */
 let AgentsMdService = class AgentsMdService {
+    /**
+     * Append optional configured block content to a generated section.
+     */
+    addOptionalBlock(lines, content) {
+        if (!content?.trim()) {
+            return;
+        }
+        lines.push('', content);
+    }
     /**
      * Generate AGENTS.md content from OSSA manifest
      * @param manifest - OSSA agent manifest
@@ -61,9 +70,11 @@ let AgentsMdService = class AgentsMdService {
      */
     generateDevEnvironmentSection(manifest, config) {
         const lines = ['# Dev environment tips'];
+        this.addOptionalBlock(lines, config?.prepend);
         // Use custom content if provided
         if (config?.custom) {
             lines.push('', config.custom);
+            this.addOptionalBlock(lines, config?.append);
             return lines.join('\n');
         }
         // Derive from spec.tools if source is specified
@@ -92,6 +103,7 @@ let AgentsMdService = class AgentsMdService {
             lines.push('- Ensure all required dependencies are installed');
             lines.push('- Configure environment variables as needed');
         }
+        this.addOptionalBlock(lines, config?.append);
         return lines.join('\n');
     }
     /**
@@ -99,9 +111,11 @@ let AgentsMdService = class AgentsMdService {
      */
     generateTestingSection(manifest, config) {
         const lines = ['# Testing instructions'];
+        this.addOptionalBlock(lines, config?.prepend);
         // Use custom content if provided
         if (config?.custom) {
             lines.push('', config.custom);
+            this.addOptionalBlock(lines, config?.append);
             return lines.join('\n');
         }
         // Derive from spec.constraints if source is specified
@@ -133,6 +147,7 @@ let AgentsMdService = class AgentsMdService {
             lines.push('- Ensure code coverage meets project standards');
             lines.push('- Validate against OSSA schema: `ossa validate manifest.yaml`');
         }
+        this.addOptionalBlock(lines, config?.append);
         return lines.join('\n');
     }
     /**
@@ -140,9 +155,11 @@ let AgentsMdService = class AgentsMdService {
      */
     generatePRInstructionsSection(manifest, config) {
         const lines = ['# PR instructions'];
+        this.addOptionalBlock(lines, config?.prepend);
         // Use custom content if provided
         if (config?.custom) {
             lines.push('', config.custom);
+            this.addOptionalBlock(lines, config?.append);
             return lines.join('\n');
         }
         // Derive from spec.autonomy if source is specified
@@ -176,6 +193,7 @@ let AgentsMdService = class AgentsMdService {
             lines.push('- Update documentation as needed');
             lines.push('- Ensure CI passes before requesting review');
         }
+        this.addOptionalBlock(lines, config?.append);
         return lines.join('\n');
     }
     /**

package/dist/services/governance/cedar-validator.service.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Cedar Policy Validator Service
+ *
+ * Uses @cedar-policy/cedar-wasm to validate Cedar policies embedded in OSSA manifests.
+ * This is OSSA's responsibility: schema definition + offline validation.
+ * Runtime enforcement belongs to DUADP.
+ */
+export interface CedarValidationResult {
+    valid: boolean;
+    policyId?: string;
+    errors: string[];
+    warnings: string[];
+}
+export interface CedarManifestValidationResult {
+    valid: boolean;
+    policyCount: number;
+    results: CedarValidationResult[];
+    hasSchema: boolean;
+}
+/**
+ * Validate a single Cedar policy text for syntax correctness.
+ */
+export declare function validatePolicyText(policyText: string, policyId?: string): CedarValidationResult;
+/**
+ * Validate a Cedar policy against a Cedar schema.
+ */
+export declare function validatePolicyWithSchema(policyText: string, schemaText: string, policyId?: string): CedarValidationResult;
+/**
+ * Extract and validate all Cedar policies from an OSSA manifest.
+ */
+export declare function validateManifestCedarPolicies(manifest: Record<string, unknown>): CedarManifestValidationResult;
+//# sourceMappingURL=cedar-validator.service.d.ts.map