@bluefly/openstandardagents 0.4.9 → 0.5.1

package/examples/agents/05-sales-assistant/agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.7
+apiVersion: ossa/v0.5
 kind: Agent
 metadata:
   name: sales-assistant
@@ -19,20 +19,17 @@ spec:
     - Automated follow-up communication
     - Meeting scheduling and coordination
     - Sales pipeline management
-
   llm:
     provider: openai
     model: gpt-4o
     temperature: 0.7
     maxTokens: 1500
-
   capabilities:
     - search_crm
     - create_lead
     - send_followup
     - schedule_meeting
     - update_pipeline
-
   tools:
     - type: function
       name: search_crm
@@ -51,7 +48,6 @@ spec:
                 type: string
               revenue_range:
                 type: string
-
     - type: function
       name: create_lead
       description: Create new lead in CRM
@@ -73,7 +69,6 @@ spec:
         required:
           - name
           - email
-
     - type: function
       name: send_followup
       description: Send automated follow-up email
@@ -84,13 +79,16 @@ spec:
             type: string
           template:
             type: string
-            enum: [intro, demo_followup, pricing, closing]
+            enum:
+              - intro
+              - demo_followup
+              - pricing
+              - closing
           personalization:
             type: object
         required:
           - leadId
           - template
-
     - type: function
       name: schedule_meeting
       description: Schedule meeting with lead
@@ -101,7 +99,11 @@ spec:
             type: string
           meetingType:
             type: string
-            enum: [discovery, demo, negotiation, closing]
+            enum:
+              - discovery
+              - demo
+              - negotiation
+              - closing
           duration:
             type: integer
           suggestedTimes:
@@ -112,16 +114,23 @@ spec:
         required:
           - leadId
           - meetingType
-
   memory:
     enabled: true
     type: entity_memory
     entities:
       - type: lead
-        fields: [name, company, status, last_contact, notes]
+        fields:
+          - name
+          - company
+          - status
+          - last_contact
+          - notes
       - type: interaction
-        fields: [date, type, summary, outcome]
-
+        fields:
+          - date
+          - type
+          - summary
+          - outcome
   observability:
     logging:
       level: info
@@ -132,15 +141,18 @@ spec:
         - emails_sent
         - meetings_scheduled
         - conversion_rate
-
 extensions:
   langchain:
-    agent_type: react
-    memory_type: entity
-    tools_mapping:
-      - ossa_capability: search_crm
-        langchain_tool: crm_search
-      - ossa_capability: create_lead
-        langchain_tool: create_lead
-      - ossa_capability: send_followup
-        langchain_tool: send_email
+    enabled: true
+    chain_type: agent
+    memory:
+      type: vector
+    tools:
+      - name: search_crm
+        description: Search CRM for contacts and accounts
+      - name: create_lead
+        description: Create new lead in CRM
+      - name: send_followup
+        description: Send automated follow-up email
+      - name: schedule_meeting
+        description: Schedule meeting with lead

package/examples/agents/07-research-assistant/agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.7
+apiVersion: ossa/v0.5
 kind: Agent
 metadata:
   name: research-assistant
@@ -19,19 +19,16 @@ spec:
     - Citation management
     - Research question formulation
     - Methodology analysis
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
     temperature: 0.5
     maxTokens: 4000
-
   capabilities:
     - search_papers
     - summarize_paper
     - generate_citations
     - compare_studies
-
   tools:
     - type: function
       name: search_papers
@@ -45,7 +42,11 @@ spec:
             type: array
             items:
               type: string
-              enum: [pubmed, arxiv, semantic_scholar, google_scholar]
+              enum:
+                - pubmed
+                - arxiv
+                - semantic_scholar
+                - google_scholar
           filters:
             type: object
             properties:
@@ -57,7 +58,6 @@ spec:
                 type: number
         required:
           - query
-
     - type: function
       name: summarize_paper
       description: Generate structured summary of research paper
@@ -68,10 +68,13 @@ spec:
             type: string
           summaryType:
             type: string
-            enum: [abstract, full, methodology, findings]
+            enum:
+              - abstract
+              - full
+              - methodology
+              - findings
         required:
           - paperId
-
     - type: function
       name: generate_citations
       description: Generate citations in various formats
@@ -84,11 +87,14 @@ spec:
               type: string
           format:
             type: string
-            enum: [apa, mla, chicago, bibtex]
+            enum:
+              - apa
+              - mla
+              - chicago
+              - bibtex
         required:
           - papers
           - format
-
   personality:
     name: Full-Stack Research Developer
     tone:
@@ -132,7 +138,6 @@ spec:
       response_length: moderate
       use_bullets: true
       use_code_blocks: true
-
   autonomy:
     level: autonomous
     approval_required: false
@@ -148,7 +153,6 @@ spec:
       cannot_decide:
         - Publishing research without human review
         - Sharing proprietary research data
-
   memory:
     enabled: true
     type: summary_memory
@@ -157,7 +161,6 @@ spec:
       summary_prompt: |
         Summarize the key research topics, papers discussed,
         and important findings from this session.
-
   observability:
     logging:
       level: info
@@ -167,13 +170,16 @@ spec:
         - papers_searched
         - summaries_generated
         - citations_created
-
 extensions:
   langchain:
-    agent_type: react
-    memory_type: conversation_summary
-    tools_mapping:
-      - ossa_capability: search_papers
-        langchain_tool: academic_search
-      - ossa_capability: summarize_paper
-        langchain_tool: paper_summarizer
+    enabled: true
+    chain_type: agent
+    memory:
+      type: summary
+    tools:
+      - name: search_papers
+        description: Search academic papers and publications
+      - name: summarize_paper
+        description: Generate structured summary of research paper
+      - name: generate_citations
+        description: Generate citations in various formats

package/examples/agents/10-meeting-assistant/agent.ossa.yaml

@@ -1,4 +1,4 @@
-apiVersion: ossa/v0.4.7
+apiVersion: ossa/v0.5
 kind: Agent
 metadata:
   name: meeting-assistant
@@ -19,19 +19,16 @@ spec:
     - Action item identification and tracking
     - Meeting minutes generation
     - Follow-up task creation
-
   llm:
     provider: openai
     model: gpt-4o
     temperature: 0.5
     maxTokens: 3000
-
   capabilities:
     - transcribe_audio
     - summarize_meeting
     - extract_action_items
     - generate_minutes
-
   tools:
     - type: function
       name: transcribe_audio
@@ -50,7 +47,6 @@ spec:
             default: true
         required:
           - audioUrl
-
     - type: function
       name: summarize_meeting
       description: Generate meeting summary
@@ -61,13 +57,15 @@ spec:
             type: string
           summaryType:
             type: string
-            enum: [brief, detailed, executive]
+            enum:
+              - brief
+              - detailed
+              - executive
           includeTopic:
             type: boolean
             default: true
         required:
           - transcript
-
     - type: function
       name: extract_action_items
       description: Extract action items from meeting
@@ -82,7 +80,6 @@ spec:
               type: string
         required:
           - transcript
-
     - type: function
       name: generate_minutes
       description: Generate formal meeting minutes
@@ -103,19 +100,22 @@ spec:
                 type: array
           format:
             type: string
-            enum: [markdown, html, pdf]
+            enum:
+              - markdown
+              - html
+              - pdf
             default: markdown
         required:
           - meetingData
-
   triggers:
     - type: webhook
       source: zoom
-      events: [recording.completed]
+      events:
+        - recording.completed
     - type: webhook
       source: google_meet
-      events: [recording.ready]
-
+      events:
+        - recording.ready
   tasks:
     - name: process-recording
       steps:
@@ -125,20 +125,17 @@ spec:
           params:
             audioUrl: ${inputs.recording_url}
             speakerDiarization: true
-
         - name: generate-summary
           action: function_call
           function: summarize_meeting
           params:
             transcript: ${outputs.transcript}
             summaryType: detailed
-
         - name: extract-actions
           action: function_call
           function: extract_action_items
           params:
             transcript: ${outputs.transcript}
-
         - name: create-minutes
           action: function_call
           function: generate_minutes
@@ -148,26 +145,23 @@ spec:
               attendees: ${inputs.attendees}
               topics: ${outputs.summary}
               decisions: ${outputs.action_items}
-
         - name: send-to-participants
           action: http
           method: POST
           url: ${env.EMAIL_SERVICE_URL}/send
           body:
             to: ${inputs.attendees}
-            subject: "Meeting Notes: ${inputs.meeting_title}"
+            subject: 'Meeting Notes: ${inputs.meeting_title}'
             body: ${outputs.minutes}
             attachments:
               - type: pdf
                 content: ${outputs.minutes_pdf}
-
   memory:
     enabled: true
     type: conversation_buffer
     window_size: 5
     persistence:
       enabled: false
-
   outputs:
     - name: transcript
       type: string
@@ -181,7 +175,6 @@ spec:
     - name: minutes
       type: string
       description: Formal meeting minutes
-
   observability:
     logging:
       level: info
@@ -193,19 +186,18 @@ spec:
         - action_items_extracted
     tracing:
       enabled: true
-
 extensions:
   langchain:
-    agent_type: react
-    memory_type: conversation_buffer
-    tools_mapping:
-      - ossa_capability: transcribe_audio
-        langchain_tool: whisper_transcriber
-      - ossa_capability: summarize_meeting
-        langchain_tool: meeting_summarizer
-      - ossa_capability: extract_action_items
-        langchain_tool: action_extractor
-    export_config:
-      format: python
-      include_dependencies: true
-      output_file: meeting_assistant.py
+    enabled: true
+    chain_type: agent
+    memory:
+      type: buffer
+    tools:
+      - name: transcribe_audio
+        description: Transcribe meeting audio to text
+      - name: summarize_meeting
+        description: Generate meeting summary
+      - name: extract_action_items
+        description: Extract action items from meeting
+      - name: generate_minutes
+        description: Generate formal meeting minutes

package/examples/agents/security-audit-agent.ossa.yaml

@@ -0,0 +1,234 @@
+apiVersion: ossa/v0.5
+kind: Agent
+metadata:
+  name: security-audit-agent
+  version: 1.0.0
+  description: Repository security scanner. Runs static analysis, dependency audits, secret detection, and Dragonfly audit rules against codebases. Reports findings with severity and remediation guidance.
+  labels:
+    use-case: security-audit
+    production-ready: 'false'
+    ossa-native: 'true'
+  agentType: custom
+  agentKind: specialist
+  identity:
+    namespace: blueflyio/ossa
+    agent_id: security-audit-agent
+    version: 1.0.0
+    publisher:
+      name: BlueFly.io
+      email: agents@bluefly.io
+      website: https://openstandardagents.org
+    created_at: 2026-03-10T12:00:00Z
+    updated_at: 2026-03-10T12:00:00Z
+  catalog:
+    published: true
+    visibility: public
+    categories:
+      - security
+      - code-quality
+      - compliance
+    tags:
+      - security
+      - audit
+      - phpstan
+      - phpcs
+      - dragonfly
+      - ossa-native
+spec:
+  role: |
+    You are a security audit specialist agent.
+
+    Your mission:
+    1. Scan repositories for vulnerabilities using static analysis tools
+    2. Run PHPStan at strictest levels for type safety issues
+    3. Run PHPCS for coding standard violations
+    4. Execute Dragonfly audit rules for anti-patterns and best practices
+    5. Check for exposed secrets and credentials
+    6. Produce structured reports with severity ratings and remediation steps
+
+    Guidelines:
+    - Never output or log actual secret values
+    - Classify findings by severity: critical, high, medium, low, informational
+    - Provide actionable remediation for each finding
+    - Reference CWE/CVE identifiers where applicable
+    - Map findings to NIST AI RMF and OWASP Top 10 where relevant
+  llm:
+    provider: anthropic
+    model: claude-sonnet-4-20250514
+    temperature: 0.1
+    max_tokens: 16384
+  tools:
+    - type: command
+      name: phpstan_analyze
+      description: Run PHPStan static analysis
+      operation: read
+      command: phpstan analyse
+      parameters:
+        path:
+          type: string
+          description: Path to analyze
+        level:
+          type: number
+          description: Analysis strictness 0-9
+          default: 8
+    - type: command
+      name: phpcs_check
+      description: Run PHP CodeSniffer checks
+      operation: read
+      command: phpcs
+      parameters:
+        path:
+          type: string
+          description: Path to check
+        standard:
+          type: string
+          default: Drupal,DrupalPractice
+    - type: command
+      name: npm_audit
+      description: Run npm audit for JS/TS dependencies
+      operation: read
+      command: npm audit
+      parameters:
+        path:
+          type: string
+          description: Project path with package.json
+    - type: command
+      name: secret_scan
+      description: Scan for exposed secrets and credentials
+      operation: read
+      command: git secrets --scan
+      parameters:
+        path:
+          type: string
+          description: Repository path to scan
+    - type: api
+      name: dragonfly_audit
+      description: Run Dragonfly audit rules from catalog
+      operation: read
+      parameters:
+        rule_set:
+          type: string
+          description: Audit rule set (e.g. anti-patterns, best-practices, a11y, seo)
+        target_url:
+          type: string
+          description: URL or path to audit
+  capabilities:
+    - name: static-analysis
+      description: PHPStan and PHPCS code analysis
+    - name: dependency-audit
+      description: npm/composer dependency vulnerability checks
+    - name: secret-detection
+      description: Scan for exposed credentials and secrets
+    - name: dragonfly-audit
+      description: Run Dragonfly quality audit rules
+    - name: compliance-mapping
+      description: Map findings to NIST, OWASP, CWE frameworks
+  safety:
+    guardrails:
+      - never_output_secrets
+      - read_only_operations
+      - audit_all_actions
+    pii_handling: redact
+    audit_all_actions: true
+    max_cost_per_execution: 0.4
+  observability:
+    telemetry:
+      enabled: true
+      export_traces: true
+      export_metrics: true
+security:
+  tier: tier_1_read
+  threat_model:
+    - category: information-disclosure
+      severity: critical
+      mitigations:
+        - output-filtering
+        - secret-redaction
+      description: Must never expose secrets found during scanning
+  capabilities:
+    required:
+      - filesystem-read
+      - network-outbound
+      - process-spawn
+      - tool-execution
+    optional:
+      - browser
+  sandboxing:
+    required: true
+    type: container
+    resource_limits:
+      max_memory_mb: 2048
+      max_cpu_cores: 2
+      max_execution_seconds: 600
+  network_access:
+    allowed_domains:
+      - registry.npmjs.org
+      - packagist.org
+      - api.anthropic.com
+      - nvd.nist.gov
+    protocols:
+      - https
+    egress_policy: allow-list
+  data_classification: confidential
+  audit:
+    log_inputs: true
+    log_outputs: false
+    log_tool_calls: true
+    retention_days: 365
+protocols:
+  mcp:
+    version: 1.0.0
+    role: client
+    capabilities:
+      tools: true
+      resources: true
+      prompts: false
+      sampling: false
+    servers:
+      - name: dragonfly
+        transport: stdio
+        command: dragonfly
+        tools:
+          - dragonfly_audit
+  a2a:
+    version: 0.2.0
+    endpoint: https://openstandardagents.org/agents/security-audit-agent
+    agent_card:
+      name: Security Audit Agent
+      description: Run repository security audits and compliance scans
+      skills:
+        - id: audit-repository
+          name: Audit Repository
+          description: Run a security audit on a repository
+    capabilities:
+      streaming: false
+      pushNotifications: false
+      stateTransitionHistory: true
+    authentication:
+      schemes:
+        - none
+governance:
+  authorization:
+    clearance_level: 1
+    policy_references:
+      - blueflyio/cedar-policies
+    tool_permissions:
+      - tool: phpstan_analyze
+        risk_level: low
+      - tool: phpcs_check
+        risk_level: low
+      - tool: npm_audit
+        risk_level: low
+      - tool: secret_scan
+        risk_level: medium
+      - tool: dragonfly_audit
+        risk_level: medium
+  quality_requirements:
+    confidence_threshold: 0.9
+    security_score_threshold: 90
+    max_vulnerability_count: 0
+  compliance:
+    frameworks:
+      - NIST-800-53
+    data_classification: confidential
+    audit_logging_required: true

package/examples/agentscope/react-assistant/README.md

@@ -71,7 +71,7 @@ agent = ReActAgent(
 
 The manifest declares two MCP tool servers under `spec.tools`:
 
-1. **knowledge-base** -- Graph knowledge base at `gkg.blueflyagents.com` for codebase analysis and structured queries.
+1. **knowledge-base** -- Graph knowledge base at `gkg.bluefly.internal` for codebase analysis and structured queries.
 2. **web-search** -- General MCP server at `mcp.blueflyagents.com` for web search and content retrieval.
 
 At runtime, the adapter connects to these SSE endpoints, discovers available tools, and registers them with the AgentScope `ReActAgent` tool list.