@bluefly/openstandardagents 0.5.0 → 0.5.1

package/dist/cli/commands/usie-skills.command.js

@@ -0,0 +1,297 @@
+/**
+ * usie-skills.command.ts — `ossa skills ingest|sync|mesh` command group
+ *
+ * USIE (Universal Skills Ingestion Engine) CLI commands.
+ * Distinct from skills.command.ts (which handles Claude Skills export pipeline).
+ *
+ * Commands:
+ *   ossa skills ingest <url>      — POST /api/v1/ingest: ingest GitHub repo onto mesh
+ *   ossa skills mesh sync         — sync all adapters from ~/.ossa/adapters.yaml
+ *   ossa skills mesh list         — list skills on the connected DUADP node
+ *   ossa skills mesh preview <url>— dry-run: detect adapter, show what would be generated
+ *   ossa skills mesh push <gaid>  — push skill bundle to another DUADP node
+ *   ossa skills validate <path>   — validate local SKILL.md against OSSA schema
+ *   ossa skills config            — show ~/.ossa/adapters.yaml and active adapters
+ *
+ * Config: ~/.ossa/adapters.yaml
+ * DUADP node: DUADP_NODE_URL env (default: https://discover.copaw.us)
+ *
+ * SOD: This CLI is a thin consumer of the DUADP /api/v1/ingest endpoint.
+ *      No adapter logic here — that lives in @bluefly/duadp SDK.
+ */
+import { Command } from 'commander';
+import fs from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+// ── Config ────────────────────────────────────────────────────────────────────
+const DUADP_NODE = process.env.DUADP_NODE_URL ?? 'https://discover.copaw.us';
+const OSSA_CONFIG_DIR = path.join(os.homedir(), '.ossa');
+const ADAPTERS_YAML = path.join(OSSA_CONFIG_DIR, 'adapters.yaml');
+const DEFAULT_ADAPTERS_YAML = `# ~/.ossa/adapters.yaml — USIE adapter registry
+# Skill sources that 'ossa skills mesh sync' will ingest.
+
+adapters:
+  - id: kiro-powers
+    label: "Kiro Powers"
+    url: "https://github.com/kirodotdev/powers"
+    adapter: "kiro"
+    enabled: true
+
+  - id: skills-sh
+    label: "skills.sh Registry"
+    url: "https://github.com/skills-sh/skills"
+    adapter: "skills-sh"
+    enabled: true
+
+  # Add your own:
+  # - id: my-skills
+  #   label: "My Custom Skills"
+  #   url: "https://github.com/me/my-skills"
+  #   adapter: "auto"
+  #   enabled: true
+`;
+function ensureConfig() {
+    if (!fs.existsSync(OSSA_CONFIG_DIR))
+        fs.mkdirSync(OSSA_CONFIG_DIR, { recursive: true });
+    if (!fs.existsSync(ADAPTERS_YAML)) {
+        fs.writeFileSync(ADAPTERS_YAML, DEFAULT_ADAPTERS_YAML, 'utf8');
+        console.log(`✅ Created default adapters config: ${ADAPTERS_YAML}\n`);
+    }
+}
+function loadAdapters() {
+    ensureConfig();
+    const lines = fs.readFileSync(ADAPTERS_YAML, 'utf8').split('\n');
+    const adapters = [];
+    let cur = null;
+    for (const line of lines) {
+        const t = line.trim();
+        if (t.startsWith('- id:')) {
+            if (cur?.id)
+                adapters.push(cur);
+            cur = { id: t.replace(/- id:\s*["']?/, '').replace(/["']$/, ''), enabled: true };
+        }
+        else if (cur && t.startsWith('label:'))
+            cur.label = t.replace(/label:\s*["']?/, '').replace(/["']$/, '');
+        else if (cur && t.startsWith('url:'))
+            cur.url = t.replace(/url:\s*["']?/, '').replace(/["']$/, '');
+        else if (cur && t.startsWith('adapter:'))
+            cur.adapter = t.replace(/adapter:\s*["']?/, '').replace(/["']$/, '');
+        else if (cur && t.startsWith('enabled:'))
+            cur.enabled = t.includes('true');
+    }
+    if (cur?.id)
+        adapters.push(cur);
+    return adapters.filter(a => a.enabled !== false && a.url);
+}
+function getToken() {
+    return process.env.DUADP_TOKEN ?? process.env.OSSA_PUBLISH_TOKEN;
+}
+async function apiGet(path) {
+    const res = await fetch(`${DUADP_NODE}${path}`, {
+        headers: { Accept: 'application/json', 'User-Agent': 'ossa-cli/usie' },
+    });
+    if (!res.ok)
+        throw new Error(`${res.status} ${path}`);
+    return res.json();
+}
+async function apiPost(path, body, token) {
+    const headers = { 'Content-Type': 'application/json', 'User-Agent': 'ossa-cli/usie' };
+    if (token)
+        headers['Authorization'] = `Bearer ${token}`;
+    const res = await fetch(`${DUADP_NODE}${path}`, { method: 'POST', headers, body: JSON.stringify(body) });
+    const data = await res.json();
+    if (!res.ok)
+        throw new Error(JSON.stringify(data));
+    return data;
+}
+// ── Implementations ───────────────────────────────────────────────────────────
+async function cmdIngest(url, opts) {
+    const token = getToken();
+    if (!token) {
+        console.error('❌ Set DUADP_TOKEN or OSSA_PUBLISH_TOKEN');
+        process.exit(1);
+    }
+    console.log(`🔍 Ingesting ${url} ...`);
+    try {
+        const r = await apiPost('/api/v1/ingest', { url, adapter: opts.adapter ?? 'auto' }, token);
+        if (opts.json) {
+            console.log(JSON.stringify(r, null, 2));
+            return;
+        }
+        console.log(`\n✅ Skill is live on the mesh!\n`);
+        console.log(`   GAID:        ${r.gaid}`);
+        console.log(`   Name:        ${r.name}`);
+        console.log(`   Adapter:     ${r.adapter_used}`);
+        console.log(`   Trust tier:  ${r.trust_tier}`);
+        console.log(`   Marketplace: ${r.marketplace_url}\n`);
+    }
+    catch (e) {
+        console.error(`❌ ${e.message}`);
+        process.exit(1);
+    }
+}
+async function cmdList(opts) {
+    try {
+        const qs = opts.source ? `?source=${encodeURIComponent(opts.source)}` : '';
+        const d = await apiGet(`/api/v1/skills${qs}`);
+        if (opts.json) {
+            console.log(JSON.stringify(d, null, 2));
+            return;
+        }
+        const src = opts.source ? ` (source: ${opts.source})` : '';
+        console.log(`\n📋 Skills on ${DUADP_NODE}${src}\n`);
+        for (const s of d.data ?? []) {
+            const gaid = s?.identity?.gaid ?? s?.metadata?.name ?? '?';
+            const tier = s?.metadata?.trust_tier ?? 'community';
+            const source = s?.metadata?.annotations?.['usie.source'] ?? '';
+            const icon = source === 'kiro-powers' ? '⚡' : source === 'skills-sh' ? '🎯' : '🔧';
+            console.log(`  ${icon} ${gaid}  [${tier}]`);
+        }
+        console.log(`\n  Total: ${d.meta?.total ?? 0}\n`);
+    }
+    catch (e) {
+        console.error(`❌ ${e.message}`);
+        process.exit(1);
+    }
+}
+async function cmdSync(opts) {
+    const adapters = loadAdapters();
+    const token = getToken();
+    if (!token && !opts.dry) {
+        console.error('❌ Set DUADP_TOKEN or OSSA_PUBLISH_TOKEN');
+        process.exit(1);
+    }
+    console.log(`\n🔄 Syncing ${adapters.length} adapter(s)${opts.dry ? ' [DRY RUN]' : ''}...\n`);
+    const results = [];
+    for (const a of adapters) {
+        process.stdout.write(`  ${a.id}: `);
+        if (opts.dry) {
+            console.log(`${a.url} (skipped)`);
+            results.push({ adapter: a.id, status: 'dry' });
+            continue;
+        }
+        try {
+            const r = await apiPost('/api/v1/ingest', { url: a.url, adapter: a.adapter }, token);
+            console.log(`✅ ${r.gaid ?? r.name}`);
+            results.push({ adapter: a.id, status: 'ok', gaid: r.gaid });
+        }
+        catch (e) {
+            console.log(`❌ ${e.message.slice(0, 80)}`);
+            results.push({ adapter: a.id, status: 'error', error: e.message });
+        }
+    }
+    if (opts.json)
+        console.log(JSON.stringify(results, null, 2));
+    else
+        console.log(`\n  Done. ${results.filter((r) => r['status'] === 'ok').length}/${adapters.length} synced.\n`);
+}
+async function cmdPreview(url) {
+    const slug = url.match(/github\.com\/([^/]+\/[^/]+)/)?.[1] ?? '';
+    const base = `https://raw.githubusercontent.com/${slug}/HEAD`;
+    const [p, s, r] = await Promise.allSettled([
+        fetch(`${base}/POWER.md`, { method: 'HEAD' }),
+        fetch(`${base}/SKILL.md`, { method: 'HEAD' }),
+        fetch(`${base}/README.md`, { method: 'HEAD' }),
+    ]);
+    const ok = (x) => x.status === 'fulfilled' && x.value.ok;
+    const adapter = ok(p) ? '⚡ kiro (POWER.md)' : ok(s) ? '🎯 skills-sh (SKILL.md)' : ok(r) ? '🔧 git-repo (README)' : '❌ no manifest';
+    console.log(`\n  URL:        ${url}`);
+    console.log(`  Adapter:    ${adapter}`);
+    console.log(`  POWER.md:   ${ok(p) ? '✅' : '—'}   SKILL.md: ${ok(s) ? '✅' : '—'}   README.md: ${ok(r) ? '✅' : '—'}`);
+    console.log(`\n  Run: ossa skills ingest ${url}\n`);
+}
+async function cmdValidate(skillPath) {
+    const file = path.resolve(skillPath);
+    if (!fs.existsSync(file)) {
+        console.error(`❌ Not found: ${file}`);
+        process.exit(1);
+    }
+    const content = await readFile(file, 'utf8');
+    const errs = [];
+    if (!content.includes('name:') && !/^# .+/m.test(content))
+        errs.push('Missing name: or # Heading');
+    if (!content.includes('description:') && !/## description/i.test(content))
+        errs.push('Missing description');
+    if (errs.length === 0)
+        console.log(`✅ ${path.basename(file)} — valid OSSA skill manifest`);
+    else {
+        console.log(`❌ ${path.basename(file)} — ${errs.length} issue(s):\n${errs.map(e => `  - ${e}`).join('\n')}`);
+        process.exit(1);
+    }
+}
+async function cmdPush(gaid, opts) {
+    const token = getToken();
+    if (!token) {
+        console.error('❌ Set DUADP_TOKEN or OSSA_PUBLISH_TOKEN');
+        process.exit(1);
+    }
+    const target = opts.node ?? DUADP_NODE;
+    console.log(`📤 Pushing ${gaid} → ${target} ...`);
+    try {
+        const bundle = await apiGet(`/api/v1/skills/${encodeURIComponent(gaid)}/bundle`);
+        const res = await fetch(`${target}/api/v1/publish`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` },
+            body: JSON.stringify(bundle),
+        });
+        const r = await res.json();
+        if (!res.ok)
+            throw new Error(JSON.stringify(r));
+        console.log(`✅ Pushed: ${r.gaid ?? gaid}`);
+    }
+    catch (e) {
+        console.error(`❌ ${e.message}`);
+        process.exit(1);
+    }
+}
+// ── Commander export ──────────────────────────────────────────────────────────
+export function usieSkillsCommandGroup() {
+    const skills = new Command('skills').description('USIE: ingest and manage skills on the agent mesh');
+    skills
+        .command('ingest <url>')
+        .description('Ingest a GitHub repo as a skill (30-second DrupalCon demo)')
+        .option('--adapter <type>', 'Force adapter: kiro|skills-sh|git-repo|auto', 'auto')
+        .option('--json', 'JSON output')
+        .action(cmdIngest);
+    const mesh = skills.command('mesh').description('Manage skills on the DUADP mesh');
+    mesh
+        .command('list')
+        .description('List skills on the connected DUADP node')
+        .option('--source <id>', 'Filter by adapter: kiro-powers|skills-sh|git-repo')
+        .option('--json', 'JSON output')
+        .action(cmdList);
+    mesh
+        .command('sync')
+        .description('Sync all adapters in ~/.ossa/adapters.yaml to the DUADP node')
+        .option('--dry', 'Dry run — show what would be ingested')
+        .option('--json', 'JSON output')
+        .action(cmdSync);
+    mesh
+        .command('preview <url>')
+        .description('Preview adapter detection for a GitHub URL (no publish)')
+        .action(cmdPreview);
+    mesh
+        .command('push <gaid>')
+        .description('Push a skill bundle to another DUADP node')
+        .option('--node <url>', 'Target DUADP node URL')
+        .action(cmdPush);
+    skills
+        .command('validate <path>')
+        .description('Validate a local SKILL.md or POWER.md')
+        .action(cmdValidate);
+    skills
+        .command('config')
+        .description('Show adapters.yaml config and active adapters')
+        .action(() => {
+        ensureConfig();
+        const adapters = loadAdapters();
+        console.log(`\n📁 ${ADAPTERS_YAML}`);
+        console.log(`🔌 Node: ${DUADP_NODE}\n`);
+        for (const a of adapters)
+            console.log(`  ${a.id}  ${a.url}  (${a.adapter})`);
+        console.log();
+    });
+    return skills;
+}
+//# sourceMappingURL=usie-skills.command.js.map

package/dist/cli/commands/validate.command.js

@@ -251,7 +251,14 @@ validateCommand.action(async (path, options) => {
             }
             // Platform-specific validation
             const platforms = options.all
-                ? ['kagent', 'langchain', 'crewai', 'agentscope', 'docker', 'kubernetes']
+                ? [
+                    'kagent',
+                    'langchain',
+                    'crewai',
+                    'agentscope',
+                    'docker',
+                    'kubernetes',
+                ]
                 : options.platform
                     ? [options.platform]
                     : [];

package/dist/cli/commands/verify.d.ts

@@ -3,9 +3,9 @@
  *
  * Usage:
  *   ossa verify <gaid>
- *   ossa verify did:ossa:blueflyio:agent-123
- *   ossa verify did:ossa:blueflyio:agent-123 --card ./agent-card.yaml
- *   ossa verify did:ossa:blueflyio:agent-123 --json
+ *   ossa verify did:ossa:<your-namespace>:agent-123
+ *   ossa verify did:ossa:<your-namespace>:agent-123 --card ./agent-card.yaml
+ *   ossa verify did:ossa:<your-namespace>:agent-123 --json
  */
 import { Command } from 'commander';
 /**

package/dist/cli/commands/verify.js

@@ -3,9 +3,9 @@
  *
  * Usage:
  *   ossa verify <gaid>
- *   ossa verify did:ossa:blueflyio:agent-123
- *   ossa verify did:ossa:blueflyio:agent-123 --card ./agent-card.yaml
- *   ossa verify did:ossa:blueflyio:agent-123 --json
+ *   ossa verify did:ossa:<your-namespace>:agent-123
+ *   ossa verify did:ossa:<your-namespace>:agent-123 --card ./agent-card.yaml
+ *   ossa verify did:ossa:<your-namespace>:agent-123 --json
  */
 import { DuadpClient, resolveGaid } from '@bluefly/duadp';
 import chalk from 'chalk';
@@ -19,9 +19,13 @@ import { addRegistryOptions, resolveRegistryUrl, } from '../utils/standard-optio
 class AgentProtocolClient {
     client;
     constructor(config) {
-        const baseUrl = config?.baseUrl || process.env.OSSA_REGISTRY_URL || 'https://registry.openstandardagents.org';
+        const baseUrl = config?.baseUrl ||
+            process.env.OSSA_REGISTRY_URL ||
+            'https://registry.openstandardagents.org';
         this.client = new DuadpClient(baseUrl, {
-            token: config?.apiKey || process.env.AGENT_PROTOCOL_TOKEN || process.env.GITLAB_PRIVATE_TOKEN,
+            token: config?.apiKey ||
+                process.env.AGENT_PROTOCOL_TOKEN ||
+                process.env.GITLAB_PRIVATE_TOKEN,
         });
     }
     /**
@@ -31,7 +35,9 @@ class AgentProtocolClient {
         try {
             // 1. If it's a URI, resolve directly
             if (gaid.startsWith('uadp://') || gaid.startsWith('uadp://')) {
-                const resolution = await resolveGaid(gaid, { token: this.client['token'] });
+                const resolution = await resolveGaid(gaid, {
+                    token: this.client['token'],
+                });
                 if (resolution.kind === 'agents') {
                     const agent = await resolution.client.getAgent(resolution.name);
                     return this.mapToDIDResult(agent, gaid);

package/dist/cli/commands/workspace.command.d.ts

@@ -3,6 +3,7 @@
  *
  * Subcommands:
  *   ossa workspace init          - Initialize .agents-workspace/ structure
+ *   ossa workspace validate      - Run workspace health validators (from ai.json run_order or built-in)
  *   ossa workspace list          - List agents in workspace registry
  *   ossa workspace policy check  - Validate agent against workspace policies
  *   ossa workspace policy list   - List allowed/denied tools

package/dist/cli/commands/workspace.command.js

@@ -3,6 +3,7 @@
  *
  * Subcommands:
  *   ossa workspace init          - Initialize .agents-workspace/ structure
+ *   ossa workspace validate      - Run workspace health validators (from ai.json run_order or built-in)
  *   ossa workspace list          - List agents in workspace registry
  *   ossa workspace policy check  - Validate agent against workspace policies
  *   ossa workspace policy list   - List allowed/denied tools
@@ -14,6 +15,7 @@ import { DuadpClient } from '@bluefly/duadp';
 import chalk from 'chalk';
 import { Command } from 'commander';
 import * as fs from 'fs';
+import { runWorkspaceValidate } from '../workspace-validate.js';
 import { glob } from 'glob';
 import * as path from 'path';
 import * as yaml from 'yaml';
@@ -150,6 +152,22 @@ Global conventions and standards that apply to all agents in this workspace.
     }
 });
 // ============================================================================
+// Subcommand: workspace validate
+// ============================================================================
+workspaceCommand
+    .command('validate')
+    .description('Run workspace health validators. Uses ai.json control_primitives.run_order or control_primitives_run_order if present; otherwise runs built-in layout and registry checks.')
+    .option('--json', 'Pass --json to validators that support it')
+    .action(async (options) => {
+    try {
+        const result = runWorkspaceValidate({ cwd: process.cwd(), json: options.json });
+        process.exit(result.ok ? 0 : 1);
+    }
+    catch (error) {
+        handleCommandError(error);
+    }
+});
+// ============================================================================
 // Subcommand: workspace scaffold
 // ============================================================================
 workspaceCommand
@@ -520,7 +538,9 @@ workspaceCommand
             process.env.MESH_URL ||
             process.env.AGENT_REGISTRY_URL ||
             'https://registry.openstandardagents.org';
-        const token = options.token || process.env.AGENT_PROTOCOL_TOKEN || process.env.GITLAB_PRIVATE_TOKEN;
+        const token = options.token ||
+            process.env.AGENT_PROTOCOL_TOKEN ||
+            process.env.GITLAB_PRIVATE_TOKEN;
         const cwd = process.cwd();
         const registryPath = path.resolve(cwd, getDefaultWorkspaceDir(), getWorkspaceRegistryPath());
         if (!fs.existsSync(registryPath)) {
@@ -564,7 +584,9 @@ workspaceCommand
                     totalPublished++;
                 }
                 catch (e) {
-                    console.log(chalk.red(`  ✗ Failed to publish `) + agentRef.name + `: ${e.message}`);
+                    console.log(chalk.red(`  ✗ Failed to publish `) +
+                        agentRef.name +
+                        `: ${e.message}`);
                     totalFailed++;
                 }
             }
@@ -596,7 +618,9 @@ workspaceCommand
             process.env.OSSA_REGISTRY_URL ||
             'https://registry.openstandardagents.org';
         const client = new DuadpClient(registryUrl);
-        const res = await client.listAgents({ limit: parseInt(options.limit || '50', 10) });
+        const res = await client.listAgents({
+            limit: parseInt(options.limit || '50', 10),
+        });
         if (options.json) {
             console.log(JSON.stringify(res, null, 2));
             process.exit(0);
@@ -616,7 +640,7 @@ workspaceCommand
             }
             const caps = agent.spec?.capabilities || [];
             if (caps.length > 0) {
-                console.log(chalk.gray(`    Capabilities: ${caps.map((c) => typeof c === 'string' ? c : c.name).join(', ')}`));
+                console.log(chalk.gray(`    Capabilities: ${caps.map((c) => (typeof c === 'string' ? c : c.name)).join(', ')}`));
             }
         }
         console.log('');

package/dist/cli/index.js

@@ -15,7 +15,10 @@
  */
 import { program } from 'commander';
 import 'reflect-metadata';
+import { installGlobalFetch } from '../utils/http-client.js';
 import { initializeAdapters } from '../adapters/index.js';
+// Patch fetch globally — all HTTP calls get proxy support + OSSA user-agent
+installGlobalFetch();
 // Core OSSA commands (platform-agnostic)
 import { agentsLocalCommandGroup } from './commands/agents-local.command.js';
 import { agentsMdCommand } from './commands/agents-md.command.js';
@@ -52,6 +55,7 @@ import { standardizeCommand } from './commands/standardize.command.js';
 import { testCommand } from './commands/test.command.js';
 import { updateCommand } from './commands/update.command.js';
 import { validateCommand } from './commands/validate.command.js';
+import { executionProfileCommand, contextPackCommand, taskCommand, } from './commands/economics.command.js';
 import { wizardAPIFirstCommand } from './commands/wizard-api-first.command.js';
 import { wizardCommand } from './commands/wizard.command.js';
 // Agent Card (A2A discovery)
@@ -64,6 +68,7 @@ import { manifestCommandGroup } from './commands/manifest/index.js';
 import { mcpCommand } from './commands/mcp.command.js';
 import { registerCommand } from './commands/register.js';
 import { skillsCommandGroup } from './commands/skills.command.js';
+import { usieSkillsCommandGroup } from './commands/usie-skills.command.js';
 import { taxonomyCommandGroup } from './commands/taxonomy.command.js';
 import { templateCommandGroup } from './commands/template.command.js';
 import { toolCommandGroup } from './commands/tool/index.js';
@@ -75,6 +80,8 @@ import { langchainCommand } from './commands/langchain.command.js';
 import { langflowCommand } from './commands/langflow.command.js';
 // Lifecycle & curation commands
 import { createLifecycleCommand } from './commands/lifecycle.command.js';
+// Memory tier management
+import { memoryCommand } from './commands/memory.command.js';
 // Additional commands (previously unregistered)
 import { agentWizardCommand } from './commands/agent-wizard.command.js';
 import { docsCommand } from './commands/docs.command.js';
@@ -202,6 +209,7 @@ program.addCommand(agentsCommandGroup);
 program.addCommand(agentsLocalCommandGroup);
 program.addCommand(agentCardCommand);
 program.addCommand(generateGaidCommand);
+program.addCommand(memoryCommand);
 // --- Development ---
 program.addCommand(generateCommand);
 program.addCommand(daemonCommand);
@@ -227,6 +235,7 @@ program.addCommand(docsCommand);
 program.addCommand(platformsCommand);
 // --- Skills & Templates ---
 program.addCommand(skillsCommandGroup);
+program.addCommand(usieSkillsCommandGroup()); // USIE: ingest/sync/list/preview on the mesh
 program.addCommand(templateCommandGroup);
 // --- Tool & Capability Management ---
 program.addCommand(toolCommandGroup);
@@ -239,6 +248,9 @@ program.addCommand(governanceCommand);
 program.addCommand(contractCommand);
 program.addCommand(signCommand);
 program.addCommand(policyCommand);
+program.addCommand(executionProfileCommand);
+program.addCommand(contextPackCommand);
+program.addCommand(taskCommand);
 // --- Advanced (hidden from main --help, still fully accessible) ---
 for (const cmd of [
     quickstartCommand,

package/dist/cli/workspace-validate.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Workspace validate – run ai.json control_primitives.run_order or built-in checks.
+ * No DI, no ValidationService. Safe to import from CLI or from package consumers.
+ */
+export interface WorkspaceValidateResult {
+    ok: boolean;
+    results?: Array<{
+        script: string;
+        status: number;
+        duration_ms: number;
+    }>;
+}
+export interface WorkspaceValidateOptions {
+    cwd?: string;
+    json?: boolean;
+    runner?: string;
+}
+/**
+ * Run workspace validators from ai.json control_primitives.run_order, or built-in layout/registry checks.
+ * Returns result; caller should process.exit(result.ok ? 0 : 1) if used as CLI.
+ */
+export declare function runWorkspaceValidate(options?: WorkspaceValidateOptions): WorkspaceValidateResult;
+//# sourceMappingURL=workspace-validate.d.ts.map

package/dist/cli/workspace-validate.js

@@ -0,0 +1,117 @@
+/**
+ * Workspace validate – run ai.json control_primitives.run_order or built-in checks.
+ * No DI, no ValidationService. Safe to import from CLI or from package consumers.
+ */
+import { spawnSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as yaml from 'yaml';
+import chalk from 'chalk';
+import { getDefaultWorkspaceDir, getRequiredWorkspaceDirs, getWorkspacePolicyPath, getWorkspaceRegistryPath, } from '../config/defaults.js';
+const VALIDATE_TIMEOUT_MS = 30000;
+/**
+ * Run workspace validators from ai.json control_primitives.run_order, or built-in layout/registry checks.
+ * Returns result; caller should process.exit(result.ok ? 0 : 1) if used as CLI.
+ */
+export function runWorkspaceValidate(options = {}) {
+    const cwd = path.resolve(options.cwd ?? process.cwd());
+    const cwdResolved = cwd;
+    const workspaceDir = path.join(cwd, getDefaultWorkspaceDir());
+    if (!fs.existsSync(workspaceDir)) {
+        console.log(chalk.yellow('No .agents-workspace/ found'));
+        console.log(chalk.gray('  Run `ossa workspace init` first'));
+        return { ok: false };
+    }
+    const jsonArg = options.json ? ['--json'] : [];
+    const runner = options.runner ?? process.env.OSSA_VALIDATE_RUNNER ?? 'node';
+    let runOrder = [];
+    const aiPath = path.join(cwd, 'ai.json');
+    if (fs.existsSync(aiPath)) {
+        try {
+            const ai = JSON.parse(fs.readFileSync(aiPath, 'utf-8'));
+            runOrder =
+                ai.control_primitives?.run_order ??
+                    ai.control_primitives_run_order ??
+                    [];
+        }
+        catch {
+            // ignore
+        }
+    }
+    if (runOrder.length > 0) {
+        const results = [];
+        if (!options.json) {
+            console.log(chalk.blue('Running workspace validators from ai.json run_order...'));
+        }
+        for (const script of runOrder) {
+            const scriptPath = path.join(workspaceDir, script);
+            const atRoot = path.join(cwd, script);
+            const resolved = fs.existsSync(atRoot) ? atRoot : fs.existsSync(scriptPath) ? scriptPath : null;
+            if (!resolved) {
+                if (!options.json)
+                    console.log(chalk.gray(`  Skip ${script} (not found)`));
+                continue;
+            }
+            const resolvedAbs = path.resolve(resolved);
+            if (!resolvedAbs.startsWith(cwdResolved)) {
+                console.error(chalk.red('Invalid script path (must be under cwd)'));
+                return { ok: false, results };
+            }
+            const start = Date.now();
+            const result = spawnSync(runner, [resolvedAbs, ...jsonArg], {
+                cwd,
+                stdio: 'inherit',
+                encoding: 'utf-8',
+                env: process.env,
+                timeout: VALIDATE_TIMEOUT_MS,
+            });
+            const duration_ms = Date.now() - start;
+            const status = result.status ?? (result.signal ? 1 : 0);
+            results.push({ script, status, duration_ms });
+            if (status !== 0) {
+                if (options.json)
+                    console.log(JSON.stringify({ results, ok: false }));
+                return { ok: false, results };
+            }
+        }
+        if (options.json)
+            console.log(JSON.stringify({ results, ok: true }));
+        else
+            console.log(chalk.green('Workspace validation passed'));
+        return { ok: true, results };
+    }
+    if (!options.json)
+        console.log(chalk.blue('Running built-in workspace checks...'));
+    const dirs = getRequiredWorkspaceDirs();
+    for (const d of dirs) {
+        const p = path.join(workspaceDir, d);
+        if (!fs.existsSync(p) || !fs.statSync(p).isDirectory()) {
+            console.error(chalk.red(`Missing or not a directory: .agents-workspace/${d}`));
+            return { ok: false };
+        }
+    }
+    const registryPath = path.join(workspaceDir, getWorkspaceRegistryPath());
+    const policyPath = path.join(workspaceDir, getWorkspacePolicyPath());
+    if (fs.existsSync(registryPath)) {
+        try {
+            yaml.parse(fs.readFileSync(registryPath, 'utf-8'));
+        }
+        catch (e) {
+            console.error(chalk.red('Invalid registry YAML:'), e.message);
+            return { ok: false };
+        }
+    }
+    if (fs.existsSync(policyPath)) {
+        try {
+            yaml.parse(fs.readFileSync(policyPath, 'utf-8'));
+        }
+        catch (e) {
+            console.error(chalk.red('Invalid policy YAML:'), e.message);
+            return { ok: false };
+        }
+    }
+    if (!options.json)
+        console.log(chalk.green('Workspace validation passed'));
+    return { ok: true };
+}
+//# sourceMappingURL=workspace-validate.js.map

package/dist/data/platform-matrix.js

@@ -439,10 +439,7 @@ export const PLATFORM_MATRIX = [
             '.agents/{name}/src/ (Python agent code)',
             'requirements.txt with agentscope',
         ],
-        sdkNpm: [
-            'agentscope (PyPI)',
-            'agentscope[service] (with tool service)',
-        ],
+        sdkNpm: ['agentscope (PyPI)', 'agentscope[service] (with tool service)'],
         exportHow: 'ossa export <manifest> --platform agentscope -o dist/',
         importHow: 'partial',
         specUsage: [