@bluefly/openstandardagents 0.4.8 → 0.4.9

package/dist/spec/v0.5/agent.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://openstandardagents.org/schemas/v0.4.6/agent.schema.json",
-  "title": "OSSA v0.4.6 Agent Manifest Schema",
-  "description": "Open Standard for Software Agents (OSSA) v0.4.6 - Extends v0.4 with Agent Identity, Security Posture, and Protocol Declarations. Backward compatible with v0.4 manifests.",
+  "$id": "https://openstandardagents.org/schemas/v0.4.7/agent.schema.json",
+  "title": "OSSA v0.4.7 Agent Manifest Schema",
+  "description": "Open Standard for Software Agents (OSSA) v0.4.7 - Extends v0.4 with Agent Identity, Security Posture, and Protocol Declarations. Backward compatible with v0.4 manifests.",
   "type": "object",
   "required": [
     "apiVersion",
@@ -13,10 +13,10 @@
     "apiVersion": {
       "type": "string",
       "pattern": "^ossa/v(0\\.5(\\.[0-9]+(-[a-zA-Z0-9.]+)?)?|0\\.4(\\.[0-9]+(-[a-zA-Z0-9.]+)?)?|0\\.3(\\.[4-9]|\\.[0-9]+(-[a-zA-Z0-9.]+)?)?|0\\.2\\.[2-9](-dev)?|1)(\\.[0-9]+)?(-[a-zA-Z0-9.]+)?$",
-      "description": "OSSA API version (v0.4.6 introduces identity, security posture, and protocol declarations)",
+      "description": "OSSA API version (v0.4.7 introduces identity, security posture, and protocol declarations)",
       "examples": [
-        "ossa/v0.4.6",
-        "ossa/v0.4.6.0",
+        "ossa/v0.4.7",
+        "ossa/v0.4.7.0",
         "ossa/v0.4",
         "ossa/v1"
       ]
@@ -35,34 +35,19 @@
       "$ref": "#/definitions/Metadata"
     },
     "spec": {
-      "description": "Specification varies based on kind",
-      "type": "object",
-      "properties": {
-        "user_controls": {
-          "$ref": "#/definitions/UserControls"
-        },
-        "consent": {
-          "$ref": "#/definitions/Consent"
-        },
-        "impact": {
-          "$ref": "#/definitions/Impact"
-        },
-        "transparency": {
-          "$ref": "#/definitions/Transparency"
-        }
-      }
+      "description": "Specification varies based on kind"
     },
     "security": {
       "$ref": "#/definitions/SecurityPosture",
-      "description": "Security posture metadata defining threat model, capability requirements, sandboxing, and network access constraints (v0.4.6)"
+      "description": "Security posture metadata defining threat model, capability requirements, sandboxing, and network access constraints (v0.4.7)"
     },
     "protocols": {
       "$ref": "#/definitions/ProtocolDeclarations",
-      "description": "Protocol declarations for MCP, A2A, and ANP interoperability (v0.4.6)"
+      "description": "Protocol declarations for MCP, A2A, and ANP interoperability (v0.4.7)"
     },
     "token_efficiency": {
       "$ref": "#/definitions/TokenEfficiency",
-      "description": "Token efficiency configuration for cost-optimized execution (v0.4.6)"
+      "description": "Token efficiency configuration for cost-optimized execution (v0.4.7)"
     },
     "cognition": {
       "$ref": "#/definitions/Cognition",
@@ -70,11 +55,26 @@
     },
     "governance": {
       "$ref": "#/definitions/Governance",
-      "description": "Governance and authorization policies including Cedar pre-execution checks and compliance profiles (v0.4.6)"
+      "description": "Governance and authorization policies including Cedar pre-execution checks and compliance profiles (v0.4.7)"
     },
     "extensions": {
       "type": "object",
       "description": "Framework-specific extensions (inherited from v0.4)",
+      "properties": {
+        "agentscope": {
+          "$ref": "#/definitions/AgentScopeExtension"
+        },
+        "security": {
+          "type": "object",
+          "description": "Security extensions including inline authorization policies",
+          "properties": {
+            "cedar": {
+              "$ref": "#/definitions/CedarPolicyExtension"
+            }
+          },
+          "additionalProperties": false
+        }
+      },
       "additionalProperties": true
     },
     "runtime": {
@@ -82,7 +82,7 @@
     },
     "composition": {
       "$ref": "#/definitions/WorkflowComposition",
-      "description": "Workflow composition with sequential/parallel projection (v0.4.6, when kind is Workflow)"
+      "description": "Workflow composition with sequential/parallel projection (v0.4.7, when kind is Workflow)"
     }
   },
   "definitions": {
@@ -211,7 +211,7 @@
         },
         "identity": {
           "$ref": "#/definitions/AgentIdentity",
-          "description": "Agent identity model with namespace, versioned identifier, and publisher information (v0.4.6)"
+          "description": "Agent identity model with namespace, versioned identifier, and publisher information (v0.4.7)"
         },
         "catalog": {
           "type": "object",
@@ -266,6 +266,7 @@
             "langchain",
             "crewai",
             "autogen",
+            "agentscope",
             "llamaindex",
             "haystack",
             "semantic-kernel",
@@ -316,7 +317,7 @@
     },
     "AgentIdentity": {
       "type": "object",
-      "description": "Agent identity model for unique identification, versioning, and publisher attribution (v0.4.6). Enables trust chains, agent discovery, and provenance tracking across registries.",
+      "description": "Agent identity model for unique identification, versioning, and publisher attribution (v0.4.7). Enables trust chains, agent discovery, and provenance tracking across registries.",
       "required": [
         "agent_id"
       ],
@@ -378,6 +379,69 @@
       },
       "additionalProperties": false
     },
+    "AgentScopeExtension": {
+      "type": "object",
+      "description": "AgentScope framework-specific runtime configuration. AgentScope is a production-ready Python agent framework with ReAct agents, RL training, realtime voice, MCP/A2A support, and rich memory backends.",
+      "properties": {
+        "version": {
+          "type": "string",
+          "description": "AgentScope framework version (e.g., 1.0.16)",
+          "pattern": "^\\d+\\.\\d+\\.\\d+"
+        },
+        "agent_class": {
+          "type": "string",
+          "description": "Python agent class to instantiate",
+          "enum": ["ReActAgent", "UserAgent", "A2AAgent", "RealtimeAgent", "custom"],
+          "default": "ReActAgent"
+        },
+        "capabilities": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["rl_training", "realtime_voice", "evaluation", "planning", "rag", "parallel_tool_calls", "meta_tools", "tts"]
+          },
+          "description": "AgentScope-specific capabilities enabled for this agent"
+        },
+        "memory_backend": {
+          "type": "string",
+          "enum": ["in_memory", "redis", "sqlalchemy", "mem0", "reme_personal", "reme_task", "reme_tool"],
+          "default": "in_memory",
+          "description": "Memory backend for working/long-term memory"
+        },
+        "orchestration": {
+          "type": "string",
+          "enum": ["msghub", "sequential_pipeline", "fanout_pipeline", "chatroom"],
+          "description": "Multi-agent orchestration pattern when used in composition"
+        },
+        "max_iters": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 100,
+          "default": 10,
+          "description": "Maximum reasoning-acting loop iterations for ReActAgent"
+        },
+        "formatter": {
+          "type": "string",
+          "enum": ["openai", "anthropic", "gemini", "dashscope", "ollama", "deepseek", "a2a"],
+          "description": "Message formatter for the model provider"
+        },
+        "compression": {
+          "type": "object",
+          "properties": {
+            "enable": { "type": "boolean", "default": false },
+            "trigger_threshold": { "type": "integer", "description": "Token count to trigger compression" },
+            "keep_recent": { "type": "integer", "default": 3, "description": "Recent messages to preserve" }
+          },
+          "description": "Memory compression configuration"
+        },
+        "skill_dirs": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Paths to SKILL.md directories to register as agent skills"
+        }
+      },
+      "additionalProperties": false
+    },
     "Publisher": {
       "type": "object",
       "description": "Publisher information for agent attribution, trust, and contact. Enables trust chains when combined with PGP signatures.",
@@ -433,7 +497,7 @@
     },
     "SecurityPosture": {
       "type": "object",
-      "description": "Security posture metadata defining the agent's threat model, required capabilities, sandboxing requirements, and network access constraints (v0.4.6). Enables security-aware orchestration and policy enforcement.",
+      "description": "Security posture metadata defining the agent's threat model, required capabilities, sandboxing requirements, and network access constraints (v0.4.7). Enables security-aware orchestration and policy enforcement.",
       "properties": {
         "tier": {
           "type": "string",
@@ -721,7 +785,7 @@
     },
     "ProtocolDeclarations": {
       "type": "object",
-      "description": "Protocol declarations for agent interoperability (v0.4.6). Declares which agent communication protocols this agent supports, enabling automatic discovery and routing by orchestrators.",
+      "description": "Protocol declarations for agent interoperability (v0.4.7). Declares which agent communication protocols this agent supports, enabling automatic discovery and routing by orchestrators.",
       "properties": {
         "mcp": {
           "$ref": "#/definitions/MCPProtocol",
@@ -1509,48 +1573,54 @@
       },
       "additionalProperties": false
     },
-    "UserControls": {
+    "CedarPolicyExtension": {
       "type": "object",
-      "description": "Declares what granular runtime controls the orchestrator has over this agent.",
+      "description": "Inline Cedar authorization policies embedded in the manifest for pre-execution evaluation (v0.5)",
+      "required": ["policies"],
       "properties": {
-        "pause": { "type": "boolean", "default": true },
-        "stop": { "type": "boolean", "default": true },
-        "undo": { "type": "boolean", "default": false }
-      },
-      "additionalProperties": false
-    },
-    "Consent": {
-      "type": "object",
-      "description": "Data privacy and telemetry consent properties.",
-      "properties": {
-        "data_collected": {
+        "policies": {
           "type": "array",
-          "items": { "type": "string" }
+          "description": "One or more Cedar policy sets",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "required": ["id", "policy_text"],
+            "properties": {
+              "id": {
+                "type": "string",
+                "description": "Unique policy identifier"
+              },
+              "description": {
+                "type": "string"
+              },
+              "policy_text": {
+                "type": "string",
+                "description": "Cedar policy source code"
+              },
+              "version": {
+                "type": "string"
+              }
+            }
+          }
         },
-        "opt_out": { "type": "boolean", "default": false }
-      },
-      "additionalProperties": false
-    },
-    "Impact": {
-      "type": "object",
-      "description": "Calculated potential blast radius and reversibility of actions.",
-      "properties": {
-        "reversible": { "type": "boolean", "default": true },
-        "blast_radius": {
+        "schema_text": {
           "type": "string",
-          "enum": ["isolated", "local", "system", "external"]
+          "description": "Cedar schema defining entity types, actions, and their relationships"
+        },
+        "entity_types": {
+          "type": "array",
+          "description": "Cedar entity type names referenced by the policies (e.g., Agent, Tool, User)",
+          "items": {
+            "type": "string"
+          }
+        },
+        "default_decision": {
+          "type": "string",
+          "enum": ["deny", "allow"],
+          "default": "deny",
+          "description": "Default authorization decision when no policy matches"
         }
-      },
-      "additionalProperties": false
-    },
-    "Transparency": {
-      "type": "object",
-      "description": "Transparency and provenance declarations.",
-      "properties": {
-        "self_disclosure": { "type": "boolean", "default": true },
-        "provenance": { "type": "string" }
-      },
-      "additionalProperties": false
+      }
     }
   }
 }

package/dist/types/index.d.ts

@@ -34,7 +34,7 @@ export type { A2AAgentCard, A2AAuthentication, A2ACapabilities, A2AProtocol, A2A
  * Agent Type - Runtime platform/framework for agent execution
  * Specifies which platform will execute this agent
  */
-export type AgentType = 'claude' | 'kagent' | 'openai' | 'langchain' | 'crewai' | 'autogen' | 'llamaindex' | 'haystack' | 'semantic-kernel' | 'vertex-ai' | 'bedrock' | 'pydantic-ai' | 'swarm' | 'a2a' | 'mcp-server' | 'agent-sdk' | 'adk' | 'custom';
+export type AgentType = 'claude' | 'kagent' | 'openai' | 'langchain' | 'crewai' | 'autogen' | 'llamaindex' | 'haystack' | 'semantic-kernel' | 'vertex-ai' | 'bedrock' | 'pydantic-ai' | 'swarm' | 'a2a' | 'mcp-server' | 'agent-sdk' | 'adk' | 'agentscope' | 'custom';
 /**
  * Agent Kind - Functional role of the agent
  * Describes WHAT the agent does in the system
@@ -520,6 +520,8 @@ export interface AgentsMdSection {
     enabled?: boolean;
     source?: string;
     custom?: string;
+    append?: string;
+    prepend?: string;
     title_format?: string;
 }
 /**

package/dist/validation/progressive-scorer.d.ts

@@ -58,7 +58,7 @@ export declare class ProgressiveScorer {
     /**
      * Score a manifest
      */
-    score(manifest: OssaAgent, validationResult: ValidationResult): ValidationScore;
+    score(manifest: OssaAgent, _validationResult: ValidationResult): ValidationScore;
     /**
      * Score compatibility (agentType × capabilities)
      */

package/dist/validation/progressive-scorer.js

@@ -25,7 +25,7 @@ export class ProgressiveScorer {
     /**
      * Score a manifest
      */
-    score(manifest, validationResult) {
+    score(manifest, _validationResult) {
         const dimensions = {
             compatibility: this.scoreCompatibility(manifest),
             performance: this.scorePerformance(manifest),
@@ -122,6 +122,23 @@ export class ProgressiveScorer {
             }
             return 1.0;
         }
+        // AgentScope support
+        if (agentType === 'agentscope') {
+            const unsupported = capabilities.filter((c) => ![
+                'handoff',
+                'streaming',
+                'context',
+                'tools',
+                'memory',
+                'rag',
+                'parallel_tool_calls',
+            ].includes(c));
+            if (unsupported.length > 0) {
+                issues.push(`AgentScope may not support: ${unsupported.join(', ')}`);
+                return 1.0 - unsupported.length / capabilities.length;
+            }
+            return 1.0;
+        }
         // Unknown agent type
         if (!agentType) {
             issues.push('No agentType specified');
@@ -276,7 +293,7 @@ export class ProgressiveScorer {
     /**
      * Rank improvements by ROI (impact / effort)
      */
-    rankImprovements(manifest, dimensions) {
+    rankImprovements(_manifest, dimensions) {
         const improvements = [];
         // Generate improvements from each dimension
         for (const [dimName, dim] of Object.entries(dimensions)) {

package/dist/version-management/api/server.d.ts

@@ -1,3 +1,3 @@
-declare const app: import("express-serve-static-core").Express;
+declare const app: any;
 export default app;
 //# sourceMappingURL=server.d.ts.map

package/examples/agent-mesh/DISCOVERY.md

@@ -115,7 +115,7 @@ const discovery = new DiscoveryService(registry);
 
 // Define your agent
 const myAgent: AgentCard = {
-  uri: 'agent://team/creative-agent-naming',
+  uri: 'uadp://team/creative-agent-naming',
   name: 'My Agent',
   version: '1.0.0',
   ossaVersion: '0.4.1',
@@ -172,16 +172,16 @@ const graph = new AgentGraphBuilder()
     {
       id: 'security',
       name: 'Security Team',
-      leader: 'agent://security/leader',
-      members: ['agent://security/scanner'],
-      specialists: ['agent://security/secrets-detector'],
+      leader: 'uadp://security/leader',
+      members: ['uadp://security/scanner'],
+      specialists: ['uadp://security/secrets-detector'],
       capabilities: ['vulnerability-scanning', 'secret-detection'],
     },
   ])
   .withRelationships([
     {
-      from: 'agent://security/leader',
-      to: 'agent://security/scanner',
+      from: 'uadp://security/leader',
+      to: 'uadp://security/scanner',
       type: 'leader',
       weight: 1.0,
       bidirectional: false,
@@ -192,8 +192,8 @@ const graph = new AgentGraphBuilder()
 
 // Record communication
 graph.recordCommunication({
-  from: 'agent://security/scanner',
-  to: 'agent://compliance/auditor',
+  from: 'uadp://security/scanner',
+  to: 'uadp://compliance/auditor',
   channel: 'security.vulnerabilities',
   frequency: 5.2,
   latencyMs: 45,
@@ -206,8 +206,8 @@ const topAgents = graph.getTopAgents(5);
 
 // Find path
 const path = graph.findPath(
-  'agent://security/scanner',
-  'agent://compliance/auditor'
+  'uadp://security/scanner',
+  'uadp://compliance/auditor'
 );
 ```
 
@@ -231,7 +231,7 @@ const router = new AdvancedAgentRouter({
 const agent = await router.routeByCapability('data-processing', {
   preferredRegion: 'us-east-1',
   maxLatencyMs: 100,
-  excludeAgents: ['agent://workers/worker-1'],
+  excludeAgents: ['uadp://workers/worker-1'],
 });
 
 // Route to multiple agents
@@ -266,7 +266,7 @@ Uses DNS SRV and TXT records for discovery.
 **DNS Structure:**
 ```
 _agents._tcp.agents.internal           SRV    0 0 8080 agent1.agents.internal
-agent1.agents.internal                 TXT    {"uri":"agent://team/agent1","capabilities":["scan"]}
+agent1.agents.internal                 TXT    {"uri":"uadp://team/agent1","capabilities":["scan"]}
 
 _vulnerability-scanning._tcp.agents.internal  SRV    0 0 8080 scanner.agents.internal
 ```
@@ -317,7 +317,7 @@ await consul.unregister(myAgent.uri);
   "Name": "security-scanner",
   "Tags": ["ossa-agent", "vulnerability-scanning"],
   "Meta": {
-    "uri": "agent://security/scanner",
+    "uri": "uadp://security/scanner",
     "version": "1.0.0",
     "ossaVersion": "0.4.1",
     "capabilities": "vulnerability-scanning,secret-detection"
@@ -362,7 +362,7 @@ metadata:
     app.kubernetes.io/component: ossa-agent
     app.kubernetes.io/version: "1.0.0"
   annotations:
-    ossa.io/agent-uri: "agent://security/scanner"
+    ossa.io/agent-uri: "uadp://security/scanner"
     ossa.io/version: "0.4.1"
     ossa.io/capabilities: "vulnerability-scanning,secret-detection"
 spec:
@@ -506,8 +506,8 @@ states.forEach((state, uri) => {
 
 ```typescript
 graph.addRelationship({
-  from: 'agent://security/leader',
-  to: 'agent://security/scanner',
+  from: 'uadp://security/leader',
+  to: 'uadp://security/scanner',
   type: 'leader',
   weight: 1.0,
   bidirectional: false,
@@ -519,7 +519,7 @@ graph.addRelationship({
 
 // Get related agents
 const workers = graph.findRelatedAgents(
-  'agent://security/leader',
+  'uadp://security/leader',
   'leader'
 );
 ```
@@ -530,8 +530,8 @@ Track message frequency, latency, and errors between agents.
 
 ```typescript
 graph.recordCommunication({
-  from: 'agent://security/scanner',
-  to: 'agent://compliance/auditor',
+  from: 'uadp://security/scanner',
+  to: 'uadp://compliance/auditor',
   channel: 'security.vulnerabilities',
   frequency: 5.2,  // messages per minute
   latencyMs: 45,
@@ -540,8 +540,8 @@ graph.recordCommunication({
 
 // Get statistics
 const stats = graph.getCommunicationStats(
-  'agent://security/scanner',
-  'agent://compliance/auditor'
+  'uadp://security/scanner',
+  'uadp://compliance/auditor'
 );
 
 console.log(`Total messages: ${stats.totalMessages}`);
@@ -640,7 +640,7 @@ process.on('SIGTERM', async () => {
 
 ```typescript
 // Check if agent is registered
-const agent = await discovery.discoverByUri('agent://team/creative-agent-naming');
+const agent = await discovery.discoverByUri('uadp://team/creative-agent-naming');
 if (!agent) {
   console.log('Agent not registered');
 }
@@ -657,9 +657,9 @@ const healthyAgents = await discovery.findHealthyAgents();
 
 ```typescript
 const states = router.getCircuitBreakerStates();
-if (states.get('agent://team/agent') === 'open') {
+if (states.get('uadp://team/agent') === 'open') {
   // Reset manually if issue resolved
-  router.resetCircuitBreaker('agent://team/agent');
+  router.resetCircuitBreaker('uadp://team/agent');
 }
 ```
 
@@ -667,7 +667,7 @@ if (states.get('agent://team/agent') === 'open') {
 
 ```typescript
 // Check communication patterns
-const stats = graph.getCommunicationStats('agent://source', 'agent://target');
+const stats = graph.getCommunicationStats('uadp://source', 'uadp://target');
 console.log(`Avg latency: ${stats.avgLatency}ms`);
 
 // Route to nearest agent

package/examples/agent-mesh/README.ts

@@ -39,7 +39,7 @@
  *
  * // 2. Define your agent
  * const agent = {
- *   uri: 'agent://team/my-agent',
+ *   uri: 'uadp://team/my-agent',
  *   name: 'My Agent',
  *   version: '1.0.0',
  *   ossaVersion: '0.3.0',
@@ -136,7 +136,7 @@
  * ```typescript
  * // Requester
  * const response = await client.request(
- *   'agent://team/analyzer',
+ *   'uadp://team/analyzer',
  *   { action: 'analyze', data: 'sample' },
  *   { timeoutMs: 30000 }
  * );
@@ -168,7 +168,7 @@
  *
  * ```typescript
  * // Send message directly to specific agent
- * await client.send('agent://team/specific-agent', {
+ * await client.send('uadp://team/specific-agent', {
  *   message: 'Hello!',
  * });
  * ```
@@ -183,11 +183,11 @@
  * const router = new DefaultMessageRouter();
  *
  * router.addRule({
- *   source: 'agent://security/scanner',
+ *   source: 'uadp://security/scanner',
  *   channel: 'security.vulnerabilities',
  *   targets: [
- *     'agent://compliance/auditor',
- *     'agent://monitoring/alerter',
+ *     'uadp://compliance/auditor',
+ *     'uadp://monitoring/alerter',
  *   ],
  *   filter: {
  *     fields: { severity: ['critical', 'high'] }