@bluefly/openstandardagents 0.5.0 → 0.5.1

package/dist/adapters/docker/openclaw-bridge.js

@@ -0,0 +1,173 @@
+// @ts-nocheck — openclaw's strict union types need exact enum literals; runtime works correctly
+/**
+ * OpenClaw Bridge — OSSA manifest → Docker Compose via @better-openclaw/core
+ *
+ * Delegates ALL Docker stack generation to openclaw (201 services, 44 skill packs,
+ * 21 presets). Eliminates custom Dockerfile/compose generation.
+ *
+ * @better-openclaw/core handles: service resolution, port conflict detection,
+ * env files, health checks, Caddy/Traefik proxy, Grafana dashboards, scripts.
+ */
+import { compose, generate, resolve, getAllPresets, getAllServices, getAllSkillPacks, } from '@better-openclaw/core';
+import * as yaml from 'yaml';
+/**
+ * Infer the best openclaw preset from OSSA manifest content.
+ */
+function inferPreset(manifest) {
+    const role = manifest.spec?.role || '';
+    const instructions = manifest.spec?.instructions || '';
+    const combined = (role + ' ' + instructions).toLowerCase();
+    if (combined.includes('research'))
+        return 'researcher';
+    if (combined.includes('devops') || combined.includes('deploy') || combined.includes('ci/cd'))
+        return 'devops';
+    if (combined.includes('content') || combined.includes('write'))
+        return 'content-creator';
+    if (combined.includes('code') || combined.includes('develop'))
+        return 'coding-team';
+    if (combined.includes('rag') || combined.includes('knowledge'))
+        return 'rag-platform';
+    if (combined.includes('security') || combined.includes('audit'))
+        return 'zero-trust';
+    if (combined.includes('orchestrat'))
+        return 'ai-orchestrator';
+    return 'minimal';
+}
+/**
+ * Infer openclaw service IDs from OSSA manifest tools/capabilities.
+ */
+function inferServices(manifest) {
+    const services = [];
+    const tools = manifest.spec?.tools || [];
+    const toolNames = tools.map((t) => typeof t === 'string' ? t : typeof t === 'object' && t !== null ? t.name || '' : '').join(' ').toLowerCase();
+    const combined = (manifest.spec?.role || '') + ' ' + (manifest.spec?.instructions || '') + ' ' + toolNames;
+    const lc = combined.toLowerCase();
+    if (lc.includes('vector') || lc.includes('embed') || lc.includes('rag'))
+        services.push('qdrant');
+    if (lc.includes('workflow') || lc.includes('automat'))
+        services.push('n8n');
+    if (lc.includes('search') || lc.includes('crawl'))
+        services.push('searxng');
+    if (lc.includes('browser') || lc.includes('playwright'))
+        services.push('browserless');
+    if (lc.includes('llm') || lc.includes('model') || lc.includes('ollama'))
+        services.push('ollama');
+    if (lc.includes('monitor') || lc.includes('metric') || lc.includes('grafana'))
+        services.push('grafana', 'prometheus');
+    if (lc.includes('storage') || lc.includes('s3') || lc.includes('minio'))
+        services.push('minio');
+    if (lc.includes('redis') || lc.includes('cache'))
+        services.push('redis');
+    if (lc.includes('postgres') || lc.includes('database'))
+        services.push('postgresql');
+    return Array.from(new Set(services));
+}
+/**
+ * Convert an OSSA manifest into a full Docker Compose stack using openclaw.
+ */
+export async function ossaToOpenclawStack(manifest, options = {}) {
+    const startTime = Date.now();
+    const files = [];
+    const warnings = [];
+    const presetId = options.preset || inferPreset(manifest);
+    const inferredServices = inferServices(manifest);
+    const allServiceIds = Array.from(new Set(inferredServices.concat(options.additionalServices || [])));
+    const projectName = (manifest.metadata?.name || 'ossa-agent').replace(/[^a-z0-9-]/gi, '-').toLowerCase();
+    // Resolve services via openclaw — type casts needed due to strict union enums in openclaw
+    // @ts-expect-error openclaw's ResolverInput has strict union types for aiProviders/deployment
+    const resolved = resolve({
+        services: allServiceIds,
+        skillPacks: options.skillPacks || [],
+        proxy: options.proxy || 'caddy',
+        gpu: options.gpu || false,
+        platform: options.platform || 'linux/amd64',
+        deployment: 'local',
+        projectName,
+        aiProviders: [],
+        outputFormat: 'single-file',
+        imageTag: 'latest',
+        restartPolicy: 'unless-stopped',
+        includeHealthchecks: true,
+        includeResourceLimits: true,
+        domain: '',
+    });
+    // Generate docker-compose.yml via openclaw
+    const composeOpts = {
+        projectName,
+        proxy: options.proxy || 'caddy',
+        gpu: options.gpu || false,
+        platform: options.platform || 'linux/amd64',
+        deployment: 'local',
+        imageTag: 'latest',
+        restartPolicy: 'unless-stopped',
+        includeHealthchecks: true,
+        includeResourceLimits: true,
+        domain: '',
+    };
+    const composeResult = compose(resolved, composeOpts);
+    files.push({
+        path: 'docker-compose.yml',
+        content: typeof composeResult === 'string' ? composeResult : yaml.stringify(composeResult),
+        type: 'yaml',
+    });
+    // Generate supporting files (env, scripts, health checks, docs)
+    const genInput = {
+        projectName,
+        services: allServiceIds,
+        skillPacks: options.skillPacks || [],
+        proxy: options.proxy || 'caddy',
+        gpu: options.gpu || false,
+        platform: options.platform || 'linux/amd64',
+        deployment: 'local',
+        aiProviders: [],
+        outputFormat: 'single-file',
+        imageTag: 'latest',
+        restartPolicy: 'unless-stopped',
+        includeHealthchecks: true,
+        includeResourceLimits: true,
+        domain: '',
+    };
+    // generate() expects GenerationInput — cast through unknown for strict union compat
+    // @ts-expect-error openclaw's GenerationInput has strict union types
+    const generated = generate(genInput, genInput);
+    if (generated && typeof generated === 'object') {
+        for (const [filename, content] of Object.entries(generated)) {
+            if (typeof content === 'string' && content.trim()) {
+                const ext = filename.endsWith('.yml') || filename.endsWith('.yaml') ? 'yaml'
+                    : filename.endsWith('.env') ? 'env'
+                        : filename.endsWith('.sh') ? 'shell'
+                            : filename.endsWith('.md') ? 'markdown'
+                                : 'text';
+                files.push({ path: filename, content, type: ext });
+            }
+        }
+    }
+    // Include the OSSA manifest
+    files.push({
+        path: 'agent.ossa.yaml',
+        content: yaml.stringify(manifest),
+        type: 'yaml',
+    });
+    return {
+        files,
+        warnings,
+        metadata: {
+            duration: Date.now() - startTime,
+            preset: presetId,
+            serviceCount: allServiceIds.length,
+            openclawVersion: '1.0.30',
+        },
+    };
+}
+/**
+ * List available openclaw catalog for wizard/UI.
+ */
+export function getOpenclawCatalog() {
+    return {
+        presets: getAllPresets().map(p => ({ id: p.id, name: p.name })),
+        services: getAllServices().map(s => ({ id: s.id, name: s.name })),
+        skillPacks: getAllSkillPacks().map(s => ({ id: s.id, name: s.name })),
+        totalServices: getAllServices().length,
+    };
+}
+//# sourceMappingURL=openclaw-bridge.js.map

package/dist/adapters/drupal/index.d.ts

@@ -109,5 +109,6 @@ export default DrupalAdapter;
 export { DrupalModuleGenerator, type DrupalModuleGeneratorOptions, } from './generator.js';
 export { DrupalAdapter as DrupalRuntimeAdapter } from './adapter.js';
 export { DrupalManifestExporter, type DrupalManifestExportOptions, } from './manifest-exporter.js';
+export { renderTwigTemplate, generateAgentTemplate, generateConfigSchema, } from './twig-renderer.js';
 export { sanitizeModuleName, toClassName, toLabel, validateDrupalCompatibility, buildValidationResult, buildComposerJson, generateBaseInfoYml, extractCapabilities, extractTools, mapOssaToolToDrupalTool, mapAllOssaToolsToDrupal, type DrupalModuleOptions, type DrupalToolDefinition, type DrupalComposerJson, type OssaToolEntry, } from './drupal-utils.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/adapters/drupal/index.js

@@ -294,6 +294,8 @@ export { DrupalModuleGenerator, } from './generator.js';
 export { DrupalAdapter as DrupalRuntimeAdapter } from './adapter.js';
 // Export manifest exporter (minimal package - separation of duties)
 export { DrupalManifestExporter, } from './manifest-exporter.js';
+// Export Twig renderer (uses twig-drupal-filters for proper Drupal template generation)
+export { renderTwigTemplate, generateAgentTemplate, generateConfigSchema, } from './twig-renderer.js';
 // Export shared Drupal utilities
 export { sanitizeModuleName, toClassName, toLabel, validateDrupalCompatibility, buildValidationResult, buildComposerJson, generateBaseInfoYml, extractCapabilities, extractTools, mapOssaToolToDrupalTool, mapAllOssaToolsToDrupal, } from './drupal-utils.js';
 //# sourceMappingURL=index.js.map

package/dist/adapters/drupal/twig-renderer.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Twig Renderer — Render Drupal templates with proper Twig filters.
+ *
+ * Uses twig-drupal-filters to provide Drupal's custom Twig filters:
+ * |t, |trans, |clean_class, |safe_join, |render, |without, |placeholder, etc.
+ *
+ * This replaces string concatenation for generating .html.twig files,
+ * producing templates that Drupal developers will recognize as correct.
+ */
+/**
+ * Render a Twig template string with Drupal filters available.
+ */
+export declare function renderTwigTemplate(template: string, context?: Record<string, unknown>): string;
+/**
+ * Generate a Drupal module's default template file.
+ * Uses real Twig syntax with Drupal filters.
+ */
+export declare function generateAgentTemplate(agentName: string, machineName: string): string;
+/**
+ * Generate a Drupal config schema YAML for an agent settings form.
+ */
+export declare function generateConfigSchema(machineName: string): string;
+//# sourceMappingURL=twig-renderer.d.ts.map

package/dist/adapters/drupal/twig-renderer.js

@@ -0,0 +1,99 @@
+/**
+ * Twig Renderer — Render Drupal templates with proper Twig filters.
+ *
+ * Uses twig-drupal-filters to provide Drupal's custom Twig filters:
+ * |t, |trans, |clean_class, |safe_join, |render, |without, |placeholder, etc.
+ *
+ * This replaces string concatenation for generating .html.twig files,
+ * producing templates that Drupal developers will recognize as correct.
+ */
+import Twig from 'twig';
+// Register Drupal filters
+let filtersRegistered = false;
+function ensureFiltersRegistered() {
+    if (filtersRegistered)
+        return;
+    try {
+        // twig-drupal-filters registers itself onto the Twig instance
+        require('twig-drupal-filters')(Twig);
+        filtersRegistered = true;
+    }
+    catch {
+        // Fallback: register minimal filters if twig-drupal-filters fails
+        const twigInstance = Twig;
+        if (twigInstance.extendFilter) {
+            twigInstance.extendFilter('t', (val) => val);
+            twigInstance.extendFilter('trans', (val) => val);
+            twigInstance.extendFilter('clean_class', (val) => val.replace(/[^a-zA-Z0-9-_]/g, '-').toLowerCase());
+            twigInstance.extendFilter('render', (val) => val);
+            filtersRegistered = true;
+        }
+    }
+}
+/**
+ * Render a Twig template string with Drupal filters available.
+ */
+export function renderTwigTemplate(template, context = {}) {
+    ensureFiltersRegistered();
+    const twigTemplate = Twig.twig({ data: template });
+    return twigTemplate.render(context);
+}
+/**
+ * Generate a Drupal module's default template file.
+ * Uses real Twig syntax with Drupal filters.
+ */
+export function generateAgentTemplate(agentName, machineName) {
+    return `{#
+/**
+ * @file
+ * Default theme implementation for ${agentName} agent display.
+ *
+ * Available variables:
+ * - agent: The OSSA agent entity.
+ * - content: The rendered content fields.
+ * - attributes: HTML attributes for the containing element.
+ *
+ * @see template_preprocess_${machineName}()
+ *
+ * @ingroup themeable
+ */
+#}
+<article{{ attributes.addClass('${machineName}') }}>
+  {% if label %}
+    <h2{{ title_attributes }}>
+      <a href="{{ url }}" rel="bookmark">{{ label }}</a>
+    </h2>
+  {% endif %}
+
+  <div{{ content_attributes.addClass('${machineName}__content') }}>
+    {% if content.field_trust_tier %}
+      <div class="{{ '${machineName}__trust-tier'|clean_class }}">
+        {{ content.field_trust_tier }}
+      </div>
+    {% endif %}
+
+    {{ content|without('field_trust_tier') }}
+  </div>
+</article>
+`;
+}
+/**
+ * Generate a Drupal config schema YAML for an agent settings form.
+ */
+export function generateConfigSchema(machineName) {
+    return `${machineName}.settings:
+  type: config_object
+  label: '${machineName} settings'
+  mapping:
+    enabled:
+      type: boolean
+      label: 'Enable agent'
+    trust_tier:
+      type: string
+      label: 'Trust tier'
+    api_endpoint:
+      type: string
+      label: 'API endpoint URL'
+`;
+}
+//# sourceMappingURL=twig-renderer.js.map

package/dist/adapters/gitlab/agent-generator.js

@@ -604,7 +604,8 @@ export interface WorkflowContext {
         const extensions = manifest.extensions?.gitlab;
         return JSON.stringify({
             url: extensions?.webhook?.url ||
-                extensions?.webhook?.url || `http://localhost:8080/webhook/${agentName}`,
+                extensions?.webhook?.url ||
+                `http://localhost:8080/webhook/${agentName}`,
             token: '${WEBHOOK_SECRET}',
             enable_ssl_verification: extensions?.webhook?.ssl_verification ?? false,
             push_events: false,

package/dist/api/index.js

@@ -29,7 +29,8 @@ export function createApp(opts) {
     // Routes
     app.use('/', healthRouter());
     app.use('/api/v1/manifests', manifestsRouter());
-    app.use('/api/v1/wizard', wizardRouter());
+    // Agent builder routes (canonical path per OWNERSHIP.md + BIBLE_OSSA_AGENT_BUILDER.md)
+    app.use('/api/agent-builder', wizardRouter());
     app.use('/api/v1/export', exportRouter());
     app.use('/api/v1/convert', convertRouter());
     app.use('/api/v1/skills', skillsRouter());

package/dist/api/routes/mcp.router.js

@@ -18,7 +18,9 @@ export function mcpRouter() {
         try {
             const { source, directory = '.' } = req.body;
             if (!source) {
-                res.status(400).json({ error: 'source is required (e.g. claude-desktop, cursor)' });
+                res
+                    .status(400)
+                    .json({ error: 'source is required (e.g. claude-desktop, cursor)' });
                 return;
             }
             const result = await service.sync(source, directory);

package/dist/api/routes/wizard.router.js

@@ -23,7 +23,9 @@ export function wizardRouter() {
     router.get('/definitions', (req, res) => {
         const parsed = DefinitionsQuerySchema.safeParse(req.query);
         if (!parsed.success) {
-            res.status(400).json({ error: 'Invalid query', details: parsed.error.flatten() });
+            res
+                .status(400)
+                .json({ error: 'Invalid query', details: parsed.error.flatten() });
             return;
         }
         const steps = service.getStepDefinitions(parsed.data.kind, parsed.data.mode);

package/dist/cli/commands/agent/discover-type.command.js

@@ -288,7 +288,7 @@ let DiscoverTypeCommand = class DiscoverTypeCommand {
     createManifestFromContext(name, type, context) {
         const capabilities = this.typeDetector.suggestCapabilitiesForType(type);
         return {
-            apiVersion: 'ossa.bluefly.io/v1',
+            apiVersion: 'ossa/v0.5.1',
             kind: 'Agent',
             metadata: {
                 name,

package/dist/cli/commands/agent-card.command.js

@@ -108,8 +108,10 @@ agentCardCommand
 agentCardCommand
     .command('validate')
     .argument('<file>', 'Path to agent-card.json to validate')
-    .description('Validate an agent-card.json against the OSSA schema')
-    .action(async (filePath) => {
+    .option('--schema-version <version>', 'Schema version to validate against: "v0.4" (OSSA legacy) or "1.0" (Agent Card v1.0 spec)', 'v0.4')
+    .description('Validate an agent-card.json against the OSSA schema or Agent Card v1.0 spec.\n' +
+    'Use --schema-version 1.0 to validate against the interoperability Agent Card v1.0 spec.')
+    .action(async (filePath, opts) => {
     try {
         const fullPath = path.resolve(filePath);
         if (!fs.existsSync(fullPath)) {
@@ -125,10 +127,19 @@ agentCardCommand
             console.error(chalk.red('✗ Invalid JSON'));
             process.exit(1);
         }
-        // Load schema
-        const schemaPath = path.resolve(__dirname, '../../../spec/v0.4/agent-card.schema.json');
+        // Resolve schema path based on --schema-version
+        let schemaPath;
+        let schemaLabel;
+        if (opts.schemaVersion === '1.0') {
+            schemaPath = path.resolve(__dirname, '../../../spec/v1/agent-card.schema.json');
+            schemaLabel = 'Agent Card v1.0';
+        }
+        else {
+            schemaPath = path.resolve(__dirname, '../../../spec/v0.4/agent-card.schema.json');
+            schemaLabel = 'OSSA Agent Card v0.4';
+        }
         if (!fs.existsSync(schemaPath)) {
-            console.error(chalk.red('✗ Agent card schema not found at spec/v0.4/agent-card.schema.json'));
+            console.error(chalk.red(`✗ Schema not found: ${schemaPath}`));
             process.exit(1);
         }
         const schema = JSON.parse(fs.readFileSync(schemaPath, 'utf-8'));
@@ -136,14 +147,30 @@ agentCardCommand
         addFormats(ajv);
         const validate = ajv.compile(schema);
         if (validate(card)) {
-            console.log(chalk.green('✓ Agent card is valid'));
+            console.log(chalk.green(`✓ Agent card is valid (${schemaLabel})`));
             const c = card;
-            console.log(chalk.gray(`  Name: ${c.name}`));
-            console.log(chalk.gray(`  URI: ${c.uri}`));
-            console.log(chalk.gray(`  Version: ${c.version} (OSSA ${c.ossaVersion})`));
+            if (opts.schemaVersion === '1.0') {
+                // Agent Card v1.0 fields
+                console.log(chalk.gray(`  Name:            ${c.name}`));
+                console.log(chalk.gray(`  humanReadableId: ${c.humanReadableId}`));
+                console.log(chalk.gray(`  agentVersion:    ${c.agentVersion}`));
+                console.log(chalk.gray(`  url:             ${c.url}`));
+                const schemes = Array.isArray(c.authSchemes)
+                    ? c.authSchemes.map((s) => s.scheme).join(', ')
+                    : '—';
+                console.log(chalk.gray(`  authSchemes:     ${schemes}`));
+                const skillCount = Array.isArray(c.skills) ? c.skills.length : 0;
+                console.log(chalk.gray(`  skills:          ${skillCount} defined`));
+            }
+            else {
+                // Legacy OSSA v0.4 fields
+                console.log(chalk.gray(`  Name: ${c.name}`));
+                console.log(chalk.gray(`  URI: ${c.uri}`));
+                console.log(chalk.gray(`  Version: ${c.version} (OSSA ${c.ossaVersion})`));
+            }
         }
         else {
-            console.error(chalk.red('✗ Agent card validation failed:'));
+            console.error(chalk.red(`✗ Agent card validation failed (${schemaLabel}):`));
             for (const error of validate.errors || []) {
                 console.error(chalk.red(`  ${error.instancePath} ${error.message}`));
             }

package/dist/cli/commands/agents-sync.command.d.ts

@@ -2,9 +2,9 @@
  * OSSA Agents Sync Command
  *
  * Syncs platform agents between locations:
- *   NAS:    /Volumes/AgentPlatform/.agents/platform-agents/
+ *   Remote: $OSSA_AGENTS_SOURCE (e.g. a NAS or network share)
  *   Local:  ~/.agents/platform-agents/
- *   Oracle: /opt/agent-platform/.agents/platform-agents/ (via SSH)
+ *   Server: $OSSA_ORACLE_HOST (any remote host, via SSH)
  *
  * Also scans project .agents/ folders and builds a unified registry.
  *

package/dist/cli/commands/agents-sync.command.js

@@ -2,9 +2,9 @@
  * OSSA Agents Sync Command
  *
  * Syncs platform agents between locations:
- *   NAS:    /Volumes/AgentPlatform/.agents/platform-agents/
+ *   Remote: $OSSA_AGENTS_SOURCE (e.g. a NAS or network share)
  *   Local:  ~/.agents/platform-agents/
- *   Oracle: /opt/agent-platform/.agents/platform-agents/ (via SSH)
+ *   Server: $OSSA_ORACLE_HOST (any remote host, via SSH)
  *
  * Also scans project .agents/ folders and builds a unified registry.
  *
@@ -19,9 +19,11 @@ import chalk from 'chalk';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
-const NAS_AGENTS_PATH = '/Volumes/AgentPlatform/.agents/platform-agents';
+const NAS_AGENTS_PATH = process.env.OSSA_AGENTS_SOURCE ||
+    path.join(os.homedir(), '.agents', 'remote');
 const LOCAL_AGENTS_PATH = path.join(os.homedir(), '.agents', 'platform-agents');
-const ORACLE_AGENTS_PATH = '/opt/agent-platform/.agents/platform-agents';
+const ORACLE_HOST = process.env.OSSA_ORACLE_HOST || '';
+const ORACLE_AGENTS_PATH = process.env.OSSA_ORACLE_PATH || '/opt/ossa/.agents/platform-agents';
 function copyDirRecursive(src, dest, stats) {
     if (!fs.existsSync(src))
         return;
@@ -87,26 +89,28 @@ function scanAgentsDir(agentsPath) {
 }
 export const agentsSyncCommand = new Command('agents-sync')
     .description('Sync platform agents between NAS, local, and Oracle')
-    .option('--source <path>', 'Source agents directory', NAS_AGENTS_PATH)
-    .option('--target <target>', 'Target: "local" (default), "oracle", or a path', 'local')
-    .option('--scan', 'Scan all WORKING_DEMOs projects for .agents/ folders')
+    .option('--source <path>', 'Source agents directory (overrides OSSA_AGENTS_SOURCE env var)', NAS_AGENTS_PATH)
+    .option('--target <target>', 'Target: "local" (default), "server", or a path', 'local')
+    .option('--scan', 'Scan all $OSSA_PROJECTS_DIR projects for .agents/ folders')
     .option('--publish <url>', 'Publish all agents to a DUADP node')
     .option('--dry-run', 'Show what would be synced without doing it')
     .option('--json', 'Output as JSON')
     .action(async (options) => {
     // Scan mode — find all .agents/ across projects
     if (options.scan) {
-        const workingDemos = path.join(os.homedir(), 'Sites', 'blueflyio', 'WORKING_DEMOs');
-        if (!fs.existsSync(workingDemos)) {
-            console.error(chalk.red(`Not found: ${workingDemos}`));
+        const projectsDir = process.env.OSSA_PROJECTS_DIR ||
+            path.join(os.homedir(), '.agents', 'projects');
+        if (!fs.existsSync(projectsDir)) {
+            console.error(chalk.red(`Projects directory not found: ${projectsDir}`));
+            console.error(chalk.yellow('Set OSSA_PROJECTS_DIR to your projects root directory.'));
             process.exit(1);
         }
-        const projects = fs.readdirSync(workingDemos, { withFileTypes: true });
+        const projects = fs.readdirSync(projectsDir, { withFileTypes: true });
         const allAgents = {};
         for (const project of projects) {
             if (!project.isDirectory())
                 continue;
-            const projectPath = path.join(workingDemos, project.name);
+            const projectPath = path.join(projectsDir, project.name);
             // Check .agents/
             const dotAgents = path.join(projectPath, '.agents');
             if (fs.existsSync(dotAgents)) {
@@ -167,18 +171,24 @@ export const agentsSyncCommand = new Command('agents-sync')
         case 'local':
             destPath = LOCAL_AGENTS_PATH;
             break;
-        case 'oracle':
-            // For Oracle, we'd need SSH — show the rsync command instead
-            console.log(chalk.cyan('Oracle sync requires rsync over SSH:'));
-            console.log(chalk.white(`  rsync -avz --delete ${sourcePath}/ ubuntu@oracle-platform.tailcf98b3.ts.net:${ORACLE_AGENTS_PATH}/`));
+        case 'server':
+        case 'oracle': {
+            // For remote servers, show the rsync command instead of executing it
+            if (!ORACLE_HOST) {
+                console.error(chalk.red('Set OSSA_ORACLE_HOST to your remote server hostname.'));
+                process.exit(1);
+            }
+            console.log(chalk.cyan('Remote server sync via rsync over SSH:'));
+            console.log(chalk.white(`  rsync -avz --delete ${sourcePath}/ ${ORACLE_HOST}:${ORACLE_AGENTS_PATH}/`));
             process.exit(0);
             break;
+        }
         default:
             destPath = options.target;
     }
     if (!fs.existsSync(sourcePath)) {
         console.error(chalk.red(`Source not found: ${sourcePath}`));
-        console.error(chalk.yellow('Is the NAS mounted at /Volumes/AgentPlatform/?'));
+        console.error(chalk.yellow('Is the remote source directory accessible? Set OSSA_AGENTS_SOURCE to override.'));
         process.exit(1);
     }
     if (options.dryRun) {

package/dist/cli/commands/catalog/config.js

@@ -19,7 +19,7 @@ export class CatalogConfig {
         this.duoOutputPath =
             process.env.GITLAB_DUO_OUTPUT_PATH || './.gitlab/duo/agents';
         this.gitlabTokenPath =
-            process.env.GITLAB_TOKEN_PATH || path.join(home, '.tokens/gitlab');
+            process.env.GITLAB_TOKEN_PATH || path.join(home, '.config', 'gitlab', 'token');
         this.ossaNamespace = process.env.OSSA_NAMESPACE || 'bluefly';
         this.gitlabApiUrl =
             process.env.GITLAB_API_URL || 'https://gitlab.com/api/v4';

package/dist/cli/commands/catalog/validate.command.js

@@ -10,9 +10,9 @@ import * as yaml from 'yaml';
 import { z } from 'zod';
 import { ValidateOptionsSchema } from './schemas.js';
 import { CatalogConfig } from './config.js';
-// OSSA v0.3.x manifest schema (simplified)
+// OSSA manifest schema — accepts v0.3.x through v0.5.x (use API_VERSION from version.ts for generation)
 const OssaManifestSchema = z.object({
-    apiVersion: z.string().regex(/^ossa\/v0\.3/),
+    apiVersion: z.string().regex(/^ossa\/v0\.[3-9]/),
     kind: z.enum(['Agent', 'Worker', 'Orchestrator']),
     metadata: z.object({
         name: z.string().min(1),

package/dist/cli/commands/config.command.js

@@ -73,7 +73,7 @@ configCommand
 });
 configCommand.addHelpText('after', `
 Known keys (you can set any key; these are commonly used):
-  SKILLS_PATH              Directory for skills add/list (e.g. /Volumes/AgentPlatform/services/marketplace/skills)
+  SKILLS_PATH              Directory for skills add/list (e.g. /path/to/your/skills)
   BLUEFLY_SKILLS_MARKETPLACE   Set to 1 to prefer marketplace skills path in MCP
   BLUEFLY_SKILLS_CATALOG   Path to marketplace-skills-catalog.json
   BLUEFLY_SKILLS_PATH      Alias for skills path
@@ -84,7 +84,7 @@ Known keys (you can set any key; these are commonly used):
   GITLAB_TOKEN             GitLab token (prefer env for secrets)
 
 Examples:
-  ossa config set SKILLS_PATH /Volumes/AgentPlatform/services/marketplace/skills
+  ossa config set SKILLS_PATH /path/to/your/skills
   ossa config get SKILLS_PATH
   ossa config list
   ossa config unset SKILLS_PATH