Open Standard for Software Agents (OSSA)

OpenAPI : APIs :: OSSA : Agents

@bluefly/openstandardagents is a spec-first npm package: JSON Schema for agent manifests, a minimal invocation OpenAPI contract, a validator, and a small CLI. It is not a deployment framework, mesh runtime, or IDE plugin host.

| Resource | Location | |----------|----------| | Specification (v0.5) | spec/v0.5/ | | Discovery document | .well-known/ossa.json | | Migration from pre-recovery tree | MIGRATION.md | | Operator detail | docs/spec.md |

Development: GitLab (source of truth). Issues and MRs belong there.

Install

npm install @bluefly/[email protected]

Requires Node.js 20+.

CLI

After clone, build workspace packages then use the repo script (avoids conflicting global ossa shims):

pnpm install
pnpm build
pnpm run ossa validate path/to/agent.ossa.yaml
pnpm run ossa validate-spec
pnpm run ossa resolve-did did:web:example.com:agent:demo
pnpm run ossa discover https://openstandardagents.org
pnpm run ossa lint-openapi

Exit code 0 prints valid for manifest validation; non-zero prints JSON-pointer paths and messages.

Programmatic validation

import { validateManifestFile } from '@bluefly/openstandardagents';

const result = await validateManifestFile('agent.ossa.yaml');
if (!result.valid) {
  console.error(result.errors);
}

What belongs elsewhere

| Concern | Owner | |---------|--------| | Agent manifests (Blu, platform agents) | WORKING_DEMOs/agents | | Cedar policy source | WORKING_DEMOs/cedar-policies | | OSSA validate + Cedar (HTTP) | compliance-engine (POST /api/v1/compliance/ossa/validate) | | Export to K8s, Kagent, Drupal | ossa-deploy, agent-buildkit, platform-agents | | DUADP discovery | @bluefly/duadp |

CI (this repository)

pnpm ci:validate

Runs install, build, typecheck, vitest conformance, validate:schema, and validate:openapi. All jobs are fail-closed.

Conformance targets

Tests validate the canonical platform agent at WORKING_DEMOs/agents/agents/@blu/agent.ossa.yaml when OSSA_AGENTS_ROOT points at that repo (default relative path from this checkout). Toy example directories are not shipped in this package.

License

Apache-2.0. See LICENSE.