OpenWOP registry
Canonical signed node-pack registry for the openwop workflow orchestration protocol.
72packs published
99versions total
Ed25519signing algorithm
Catalog
Node packs ship reusable workflow building blocks — typed input/output handlers, control nodes (flow / branching / approval gates), and integrations (HTTP, storage, MCP). Authors drop them into the canvas at edit time; hosts load and verify them at runtime. See the node-packs.md spec for the manifest contract and the SRI + Ed25519 trust model. Mixed packs that also ship agents are flagged + agent.
| Name | Version | Nodes | Description | License | Artifacts |
|---|---|---|---|---|---|
community.openwop-team.demo + agent |
0.1.0 | 1 | First community-namespace demo pack. Mixed pack — one trivial node (`uppercase`) plus one agent (`greeter`) — exercising both extension paths in a single tarball under the open-publish `community.*` tier. Manual Ed25519 signed (not Sigstore) to demonstrate the non-OIDC publishing path documented in registry-operations.md §Step 2. MIT-licensed for SPDX-diversity with the Apache-2.0 core packs. | MIT | manifest · tgz · sig |
core.openwop.a2a |
1.1.0 | 17 | Full A2A (Agent-to-Agent) primitives. Client-side: 12 nodes (discover, send, stream, list/get/cancel tasks, resubscribe, multi-turn coordinator, push-config CRUD). Server-side: workflow IS an A2A agent (server-trigger, agent-card-publish, emit-status, emit-artifact, push-send). Routes through ctx.a2a.* host surface. Tracks spec/v1/a2a-integration.md. | Apache-2.0 | manifest · tgz · sig |
core.openwop.agents |
1.0.1 | 12 | Agent composition primitives. Root agent.run + sub-nodes (tools, memory, parsers, model selector). Composes via RFC 0013 expansion semantics and consumes host.aiProviders + host.agentRuntime. | Apache-2.0 | manifest · tgz · sig |
core.openwop.ai |
1.1.2 | 15 | Spec-canonical AI-call pack. v1.0 (chatCompletion, structuredOutput, toolCalling, embeddings) plus v1.1 multi-modal + LLM helpers — image generate/edit/upscale, audio transcribe/synthesize, video generate, rerank, classify, extract, guardrails, transform. Routes through host BYOK aiProviders. | Apache-2.0 | manifest · tgz · sig |
core.openwop.crypto |
1.0.4 | 13 | Pure cryptographic primitives: hashing, HMAC, AEAD encrypt/decrypt, asymmetric sign/verify, JWT mint/verify, TOTP, x509 parse + chain verify. Built on node:crypto (Node 20+). Zero npm deps. Pure with respect to keys passed in via inputs. | Apache-2.0 | manifest · tgz · sig |
core.openwop.data |
1.2.1 | 38 | Spec-canonical data-utility pack. v1.0 baseline (string-case, string-split, array-filter, array-map, object-merge) plus v1.1 additions: string format/regex/encode, array sort/unique/flatten/chunk/zip/reduce, object pick/omit/rename/get-path/set-path, json parse/stringify/schema-validate, jsonpath query, csv parse/stringify, datetime suite, number format/round/clamp, uuid. Zero npm deps (Node 20+). | Apache-2.0 | manifest · tgz · sig |
core.openwop.db |
1.0.0 | 12 | Database adapter primitives — sql, nosql, search, vector. Each gated on its host capability (host.sql, host.nosql, host.searchIndex, host.vectorStore) per RFC 0018. Pack speaks no driver — delegates to ctx.db.*. Parametric SQL only (host enforces). | Apache-2.0 | manifest · tgz · sig |
core.openwop.examples |
1.0.1 | 3 | Spec-canonical examples pack — three minimal nodes (echo, coin-flip, delay-with-progress) that exercise the core node-pack contract end-to-end. Zero npm deps; runs on any Node 20+ host advertising the openwop-node-packs profile. See docs/PACKS-MVP-PLAN.md. | Apache-2.0 | manifest · tgz · sig |
core.openwop.files |
1.0.0 | 19 | File + binary primitives — fs CRUD, base64, mime detection, image / PDF / archive processing, FTP / SFTP / SSH. Capability-gated on host.fs (RFC 0014). Hosts MUST enforce sandbox root + path-traversal protection. | Apache-2.0 | manifest · tgz · sig |
core.openwop.flow |
1.1.0 | 29 | Spec-canonical flow-control primitives. 25 nodes covering branching, merging, iteration, aggregation, batching, sorting, deduplication, repetition, suspension, sub-workflow invocation, and Make-style error handlers. Pure or suspending — no external I/O. Zero npm deps. Engine >=1.0.0 <2.0.0. | Apache-2.0 | manifest · tgz · sig |
core.openwop.hitl |
1.0.0 | 3 | Human-in-the-loop primitives. form-request, approval-request, ask-user — each suspends the run via the existing interrupt mechanism. Zero npm deps. | Apache-2.0 | manifest · tgz · sig |
core.openwop.http |
2.0.0 | 23 | HTTP + general transport pack. v2.0 (RFC 0076 §B): prefers the host-mediated, SSRF-guarded `ctx.http.safeFetch` for all outbound when the host exposes it, falling back to the pack's own `assertPublicUrl` (node:dns) + `globalThis.fetch` otherwise; declares `runtime.requires: ["net.dns","net.outbound"]` for the fallback path. v1.0 baseline: core.openwop.http.fetch (retry, backoff, idempotency). v1.1 additions: openapi-call, GraphQL (query/mutation/subscription), SOAP, gRPC (4 streaming variants), SSE consume, WebSocket client, long-poll, upload (multipart + resumable), download stream, pagination decorators (cursor/offset/link-header), rate-limit-aware retry, circuit breaker, idempotency-key generator, webhook signature verifier (Stripe/GitHub/Slack/raw-hmac). Zero npm deps — Node 20+ fetch/undici; transports requiring native libs delegate to host capabilities. | Apache-2.0 | manifest · tgz · sig |
core.openwop.integration |
1.1.0 | 7 | Integration-layer primitives. v1.0 (email-send, slack-message) plus v1.1 (chat-message-generic, sms-send, voice-call-place, voice-call-tts-greet, notification-push) — provider-neutral cross-cutting integration helpers. | Apache-2.0 | manifest · tgz · sig |
core.openwop.mcp |
1.1.1 | 21 | Spec-canonical MCP (Model Context Protocol) pack. v1.0 four-node client baseline (list-tools, invoke-tool, read-resource, server-status) plus the v1.1 additions: full client-side surface (resources, prompts, completion, logging, ping) AND server-side (workflow IS an MCP server — server-trigger + expose-tool/resource/prompt + handle-sampling/elicitation + provide-roots). Tracks modelcontextprotocol.io 2025-06-18 spec via spec/v1/mcp-integration.md. | Apache-2.0 | manifest · tgz · sig |
core.openwop.messaging |
1.0.0 | 7 | Queue + stream primitives — publish, consume (trigger), ack/nack/dead-letter, stream subscribe/publish. Capability-gated on host.queueBus (RFC 0017). Sibling to host.messaging (outbound-egress-only). | Apache-2.0 | manifest · tgz · sig |
core.openwop.obs |
1.0.0 | 7 | Observability emission primitives. Workflows publish logs / metrics / traces / alerts under the canonical openwop.* OTel namespace. Delegates to ctx.observability when the host advertises it, no-ops gracefully otherwise. Zero npm deps. | Apache-2.0 | manifest · tgz · sig |
core.openwop.rag |
1.0.1 | 13 | Retrieval-Augmented-Generation primitives: loaders, splitters, vector ops (thin wrappers over core.openwop.db.vector-*), and retrievers (basic / multi-query / contextual-compression). | Apache-2.0 | manifest · tgz · sig |
core.openwop.storage |
1.0.0 | 20 | State primitives — kv / table / cache / blob / queue. Each node gated on its specific host capability block (host.kvStorage, host.tableStorage, host.cache, host.blobStorage, host.queue) per RFCs 0015–0019. Pack delegates to ctx.storage.* host surface. Zero npm deps. | Apache-2.0 | manifest · tgz · sig |
core.openwop.triggers |
1.1.0 | 16 | Workflow-trigger pack. Sixteen entry-point shapes — original seven (webhook, schedule, event, envelope, chatMessage, canvas, artifact) plus the v1.1 additions (mailhook, email-imap, form, rss, manual, error, sub-workflow, cron-advanced) and the webhook-response action. Trigger nodes are pass-through executors: they forward `ctx.triggerData` (set by the engine when the trigger fires) to outputs. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-copy-generate |
1.0.0 | 1 | MyndHyve ads.copy.generate — AI-powered multi-variant ad copy generation with per-placement adaptation (truncation to caller-supplied text limits). Routes the AI call through ctx.callAI; replaces the source PlatformSpecRegistry read with caller-supplied inputs.placementTextLimits (resolve upstream from vendor.myndhyve.ads-platforms OR host.adPlatformSpecs). | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-creative-validate |
1.0.0 | 1 | MyndHyve ads.creative.validate — full compliance scanner combining built-in policy text rules, placement text-length checks, AND asset-format checks (image/video dimensions, file sizes, durations). Caller supplies placement spec data via inputs (resolve upstream from vendor.myndhyve.ads-platforms OR host.adPlatformSpecs). | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-export |
1.0.0 | 1 | MyndHyve ads.export.pack — pure-logic export pack builder. Bundles copy variants + creative assets + tracking links into a structured AdExportPack record (JSON-serializable). Lifted from src/canvas-types/campaign-studio/ads-studio/export/AdExportPackService.ts. No host capabilities required; deterministic. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-image-generate |
1.0.0 | 1 | MyndHyve ads.image.generate — generate ad creative images via the host's ctx.callImageGenerator (host.aiProviders.imageGeneration sub-capability from spec PR #48). Batches N prompts through one host call each, computes per-placement dimensions from caller-supplied placementSpec, applies platform/style/brand-color prompt enhancement, and aggregates safety-filter stats. First consumer of the new sub-capability. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-metrics-import |
1.0.0 | 1 | MyndHyve ads.metrics.import — pure-logic aggregation of ad metric snapshots. Caller supplies snapshots[]; pack filters by platformAdIds + optional platform/dateRange, validates each entry, and computes weighted aggregations (overallCtr / overallCpc / overallRoas / overallConversionRate + per-platform breakdown). Mirrors source AdMetricsService.getAggregatedMetrics math. No host capabilities required. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-platforms |
1.0.0 | 1 | MyndHyve ads.platform.specs — pure-data executor exposing the creative specs for 9 ad platforms (amazon, google, linkedin, meta, pinterest, reddit, snapchat, tiktok, x) across their placements. ~1500 LOC of platform spec data (aspect ratios, text limits, file sizes, format support, CTA presets, safe zones, caption + audio guidance) inlined verbatim from src/canvas-types/campaign-studio/ads-studio/platforms/. No host capabilities required. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-policy |
1.0.0 | 1 | MyndHyve ads.policy.check — built-in policy text-rule scanner. Detects claims (guarantees, income, superlatives), trademark mentions, prohibited content (before/after, deceptive urgency), discriminatory targeting. Caller-supplied placement text-limits + trust-guardrail results for fuller coverage; standalone for text-rule-only checks. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-publish-google |
1.0.0 | 1 | MyndHyve ads.publish.google — publish an ad to Google Ads API v18 (Search + Display). Symmetric companion to ads-publish-meta. Resolves 2 secrets (OAuth + developer-token) via ctx.secrets.resolve, then runs the 4-step publish pipeline (budget → campaign → ad-group → ad) with best-effort REMOVE-rollback. Supports 6 bidding strategies + 6 channel types + responsive_search & responsive_display ad formats. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-publish-meta |
1.0.0 | 1 | MyndHyve ads.publish.meta — publish an ad to Meta Marketing API v21.0 (Facebook/Instagram). First consumer of the secrets.resolveInPack sub-capability (spec PR #52). Resolves OAuth token via ctx.secrets.resolve, then runs the 4-step publish pipeline (creative → campaign → ad set → ad) with best-effort rollback on failure. Validates all 6 Meta enums (objective, status, bidStrategy, billingEvent, targeting flexible-spec, placements) pre-flight. Maps Meta API errors to retryable/non-retryable per spec failure-mode glossary. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-publish-tiktok |
1.0.0 | 1 | MyndHyve ads.publish.tiktok — publish an ad to TikTok Marketing API v1.3. Third + final platform-publish pack of the Stage 5 cohort. Single OAuth secret (Access-Token header, not Bearer); TikTok envelope { code, message, data } where code !== 0 means business error even on HTTP 200; optional image upload by URL before ad creation. 3-step pipeline (campaign → adgroup → ad; no separate budget). No rollback per TikTok API semantics (no hard-delete via this surface); partialState surfaced for manual cleanup. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-studio-core |
1.0.0 | 4 | MyndHyve Ads Studio core — four pure-logic executors lifted from src/canvas-types/campaign-studio/nodes/adsStudioPack/. ads.brief.build (CreativeBriefBuilder), ads.variant.plan (VariantPlanService), ads.video.qa (VideoQAService), ads.winner.synthesize (WinnerSynthesisService). All four executors are deterministic — no host capabilities required beyond the core NodeContext. Marks the Phase A pilot of the canvas-type executor migration per openwop/openwop#11. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-tools |
1.0.0 | 2 | MyndHyve Ads Studio tools — 2 pure-logic executors (ads.brief.extract, ads.tracking.link) lifted from src/canvas-types/campaign-studio/ads-studio/. Both are deterministic — no AI calls, no host capabilities. brief.extract derives an AdBrief from caller-supplied page sections; tracking.link builds UTM-tagged per-platform URLs with click-ID macros. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ads-video-generate |
1.0.0 | 1 | MyndHyve ads.video.generate — generate ad creative videos via the host's ctx.callVideoGenerator (aiProviders.videoGeneration sub-capability from spec PR #53). Symmetric companion to ads-image-generate but adapted for video (single video per call, host hides async polling internally, typical 30-120s latency). Caller-supplied placementSpec.videoSpec replaces source's PlatformSpecRegistry lookup. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.agent-orchestration |
1.0.0 | 12 | MyndHyve agent-orchestration pack. Six nodes that operate on RFC 0007 / 0008 / 0011 protocol primitives — spawn, delegate-smart, consensus-vote, message-send, skill-invoke, swarm-execute. Routes through the host's agent runtime (ctx.agentRuntime.*). Inherits RFC 0007 §F suspend mechanics for low-confidence escalation. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.ai |
1.0.0 | 3 | MyndHyve envelope-protocol AI nodes. Distinct from core.openwop.ai (which ships provider-agnostic chat-completion + structured-output + embeddings) — this pack ships MyndHyve-specific nodes that work with typed envelopes (`prd.create`, `theme.create`, etc.) emitted into the workflow's envelope stream, and prompts resolved from MyndHyve's prompt library by ID. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.app-builder |
1.0.0 | 2 | MyndHyve App Builder typeIds — app-builder.per-screen (single-task screen generation: chat-send → typed-envelope-await with bounded retry) + app-builder.iterate-tasks (multi-task serial loop over feature tasks with task-level failure isolation). Both consume host.chat + host.aiEnvelope.await. Host concerns (progress cards, telemetry, pilot materializer) intentionally NOT in pack — pack returns categorized task results that host MAY render however it wishes. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.brand |
1.1.0 | 14 | MyndHyve brand-workflow pack. 14 nodes — 8 theme (analyze/discovery/generate/implement/publish/review/templates/validate) + 6 persona (discover/generate/keywordStrategy/publish/review/validate). Each is an AI-driven envelope-emitting node anchored on the brand canvas type. Routes through ctx.brand.* + ctx.aiEnvelope.generate. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.campaign-sequence |
1.0.0 | 3 | MyndHyve campaign-sequence step executors — three pure-control nodes (wait, tag, condition) lifted from src/canvas-types/campaign-studio/sequences/sequenceStepModules.ts. Self-contained: only ctx.inputs + ctx.log; no host capabilities required beyond core NodeContext. The integration siblings (email, sms, webhook) ship in a follow-up pack once openwop NodeContext extensions for host.email / host.sms / host.http land. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.campaign-sequence-integration |
1.0.1 | 3 | MyndHyve campaign-sequence integration nodes — email, sms, webhook. Companion pack to vendor.myndhyve.campaign-sequence (which carries the 3 pure-control nodes). Declares `host.campaignMessaging` peerDependency for the email + sms surface (matching MyndHyve's EmailSMSAdapterService shape); webhook is self-contained via Node 20 fetch + bundled HMAC signature. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.canvas |
1.0.0 | 4 | First vendor-namespace pack. Ships MyndHyve canvas-coordination nodes — canvasRead / canvasWrite / canvasCreate / crossCanvasInvoke — preserving the `core.coordination.*` typeIds in the wild (typeId-preserve strategy from the migration plan §4). The pack itself is MyndHyve-internal: hosts that don't advertise `host.canvas: supported` cannot register it. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.chat |
1.0.0 | 6 | MyndHyve chat-bridge nodes — sendMessage, progressCard, updateCard, phaseInputGate, approvalGate, clarificationGate. Routes through the host's chat adapter (ctx.chat.*) + ctx.suspend for HITL gates. Preserves the core.chat.* typeIds in the wild. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.data-integration |
1.0.0 | 8 | MyndHyve data-integration pack. 7 nodes for fetching from typed data sources (REST / GraphQL / A2A / MCP), transforming results, applying bindings to UI templates, and managing run-scoped variables. Routes through ctx.dataIntegration.* host adapter. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.entities |
1.0.0 | 5 | MyndHyve entities + validation + asset-decision + messaging primitives. 5 nodes covering project creation, cross-stage validation (deterministic, no LLM), workspace asset decision gates (brand / persona / KB), and chat send/reply via the messaging connector layer. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.kanban |
1.0.0 | 7 | MyndHyve kanban-coordination pack. 7 nodes covering board lifecycle, task management (assign + AI-powered decompose), timeline planning, automation rules, and resource monitoring. Routes through ctx.kanban.* host adapter. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.knowledge-tools |
1.0.0 | 2 | MyndHyve knowledge-tools — first reference consumer of the v1 host.knowledge surface. Two typeIds: (1) knowledge.retrieve — thin pass-through over ctx.knowledge.retrieve with optional score-floor filtering; (2) knowledge.augment-prompt — composition primitive that retrieves + renders a Sources block + builds an augmented user message + emits a citation list. Host advertises host.knowledge: supported per spec/v1/host-capabilities.md §host.knowledge. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.landing-page |
1.0.0 | 7 | MyndHyve landing-page executors — 7 nodes (landing.{content.generate, structure.create, variants.generate, theme.apply, tracking.setup, page.validate, page.publish}). Lifted from src/canvas-types/campaign-studio/nodes/pageBuilder/. Two AI-call sites (content.generate, variants.generate) route through ctx.callAI; the original useDesignSystemStore + useIntegrationStore reads are replaced with input-passthrough — the workflow author resolves design tokens + tracking integrations upstream and feeds them into the executor. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.launch-studio |
1.0.0 | 2 | MyndHyve Launch Studio pack. 2 nodes for the LS backbone: link a project to a step + propagate inherited artifact context, and dispatch ready WOP stack items (todo → doing) for a step's canvas type. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-ad-angles |
1.0.0 | 1 | MyndHyve market-intel.ad-angles — generates 5-10 ad-angle briefs from VoC research + ICP/product context via one AI call. Each brief carries angleName, segment, corePain, promise, mechanism, proof requirements, objections to handle, 3-5 hook variants, recommended CTA, source quotes, and a 5-dimension score (volume / intensity / commercialIntent / clarity / uniqueness + weighted total). Briefs are sorted by total score descending. Second marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-audience-targeting |
1.0.0 | 1 | MyndHyve market-intel.audience-targeting — generate per-platform paid-media targeting packs (interests + keywords + community placements + audience definitions) for 6 ad platforms (meta / google / linkedin / tiktok / reddit / x) from market-research data (communities + angles). One AI call. Outputs cross-platform insights + testing sequence (phased) + budget allocation. Seventh marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-community-rank |
1.0.0 | 1 | MyndHyve market-intel.community-rank — rank candidate communities (from a discovery step or connector) by VoC research relevance. Per-community: relevanceScore (0..1) + signalQuality (high/medium/low) + ICP problem alignment + expected intent stages + search strategy + risk factors. Distinct from market-intel.ai-discovery (which generates NEW community suggestions): this pack ranks EXISTING candidates. Ninth marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-content-extraction |
1.0.0 | 1 | MyndHyve market-intel.content-extraction — extract structured content from raw HTML via one ctx.callAI. Outputs title, cleaned content, author, publishedAt, contentType, engagement metrics, tags, summary, and relevantQuotes. Sits between host.webResearch.fetchBatch and market-intel.voc-extraction in the canonical pipeline. Fifth marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-discovery |
1.0.0 | 1 | MyndHyve market-intel.ai-discovery — AI-powered source-discovery via one ctx.callAI. Given a topic + optional industry/audience/platforms, returns relevant URLs, communities (with platform / relevanceScore / estimatedPostCount), and search queries. Replaces the manual URL-input step of the marketIntel research pipeline. Third marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-opportunity-scoring |
1.0.0 | 1 | MyndHyve market-intel.opportunity-scoring — score and rank communities AND messaging angles on a 5-dimension scale (volume / intensity / commercialIntent / clarity / uniqueness, weighted total) given a VoC corpus + community metadata. Composable primitive slotting between voc-extraction (aggregator) and ad-angles (downstream). Source-side this prompt is used inside the market-intel.research orchestrator; published here as a standalone typeId so workflow authors can compose it directly. Fourth marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-query-builder |
1.0.0 | 1 | MyndHyve market-intel.query-builder — generate intent-mapped search queries (4-8 query groups × 4 intent stages, 2-4 variations each, synonym maps, platform hints) + per-competitor query packs (comparison/switching/alternative) + topic clusters from ICP + product context. Pairs with ai-discovery: query-builder produces 'what to search for', ai-discovery produces 'where to search'. Eighth marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-thread-triage |
1.0.0 | 1 | MyndHyve market-intel.thread-triage — cost-aware pre-filter for VoC extraction. Triages candidate threads into priority tiers (critical/high/medium/low/skip), predicts VoC value + intent stages + tag types, estimates extraction tokens per thread, and builds an extraction queue within token budget. Sits between ai-discovery and voc-extraction in the canonical pipeline. Sixth marketIntel pack of the Stage 5 cohort. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.market-intel-voc |
1.0.0 | 1 | MyndHyve market-intel.voc-extraction — extract Voice of Customer records (verbatim quotes + tagType + intentStage + confidence + rationale) from a single piece of content via a single AI call. First marketIntel pack of the Stage 5 cohort. Schema validation strips invalid records with per-record warnings; output preserves source structure (records + summary + warnings). | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.web-research |
1.0.0 | 4 | MyndHyve web-research pack — 4 nodes for the search → fetch → research → synthesize pipeline. webSearch + fetchUrls + researchWeb route through the host's webResearch adapter (search API + scraping policy + rate-limit + cache layer); synthesize composes results into a typed envelope via the AI envelope surface. | Apache-2.0 | manifest · tgz · sig |
vendor.myndhyve.wop-refinement |
1.0.0 | 1 | MyndHyve WOP feature-refinement node — wop.feature.refine. Driven by a `feature.breakdown` LLM envelope; decides whether a stack item is actionable as a node, executable as a chain, must be split into sub-items, needs clarification, or should be blocked. Enforces hard `maxDepth` + `maxGeneratedItems` constraints regardless of LLM proposal. Used by both runner-driven dispatch (StackAutoplayRunner) and chain-driven sub-workflows. | Apache-2.0 | manifest · tgz · sig |
vendor.openwop.rust-hello yanked |
1.0.0 | 1 | Reference WASM node pack proving RFC 0008 ABI v1 works end-to-end across an independent toolchain. One node type: vendor.openwop.rust-hello.greet. | Apache-2.0 | manifest · tgz · sig |
Agent packs ship reusable agent personas — each one bundles
a system prompt, a tool allowlist, a memory shape, and handoff schemas. They
are addressed by AgentRef and resolved at run time through the
host's agent runtime, so the same pack can plug into supervisor, ReAct, or
deep-research orchestration patterns. See
RFC 0003 (Active)
for the manifest contract. Mixed packs that also ship nodes are flagged
+ nodes.
| Name | Version | Agents | Description | License | Artifacts |
|---|---|---|---|---|---|
community.openwop-team.demo + nodes |
0.1.0 | 1 | First community-namespace demo pack. Mixed pack — one trivial node (`uppercase`) plus one agent (`greeter`) — exercising both extension paths in a single tarball under the open-publish `community.*` tier. Manual Ed25519 signed (not Sigstore) to demonstrate the non-OIDC publishing path documented in registry-operations.md §Step 2. MIT-licensed for SPDX-diversity with the Apache-2.0 core packs. | MIT | manifest · tgz · sig |
core.openwop.agent-examples |
1.0.0 | 2 | First pure-agent pack — ships two minimal agent manifests with no node runtime. Validates the `agents[]` extension to the pack manifest (per agent-manifest.schema.json + RFC 0003). Echo agent inlines its system prompt; Summarizer references `prompts/summarizer.md` to demonstrate the `systemPromptRef` path. Both agents are stateless (memoryShape.longTerm: false). Vendor-neutral: no model is pinned — hosts resolve via their BYOK aiProviders surface. | Apache-2.0 | manifest · tgz · sig |
core.openwop.agents.deep-research |
1.0.1 | 1 | Long-horizon research agent. Plans, dispatches sub-investigations, retrieves from RAG + web, writes up findings. Mirrors LangGraph Deep Agents (planner + subagents + filesystem). Pure-agent pack. | Apache-2.0 | manifest · tgz · sig |
core.openwop.agents.react |
1.0.1 | 1 | Canonical ReAct (Reason + Act) loop agent. Pure-agent pack — ships one agent manifest with a configurable toolAllowlist. Composes via RFC 0007 dispatch and consumes host.aiProviders + host.agentRuntime. The 'hello world' of openwop agents. | Apache-2.0 | manifest · tgz · sig |
core.openwop.agents.supervisor |
1.0.1 | 1 | Multi-agent supervisor. Routes user tasks to specialized subagents via RFC 0007 dispatch + RFC 0006 orchestrator semantics. Mirrors LangGraph Supervisor and CrewAI's hierarchical-process pattern. Pure-agent pack. | Apache-2.0 | manifest · tgz · sig |
Artifact-type packs register typed artifact schemas (a
JSON Schema + export targets) into a host's artifact registry — so workflow
outputs (one-pagers, brand kits, SOWs) are typed, validated, and exportable.
They are declarative: a manifest with kind: "artifact-type"
and an artifactTypes[] array, no runtime. See
RFC 0075
(publishable per RFC 0107).
| Name | Version | Types | Description | License | Artifacts |
|---|---|---|---|---|---|
core.openwop.artifact-types |
1.0.0 | 2 | Example artifact-type pack (ADR 0055 Phase 3 / RFC 0075) — proves the kind:'artifact-type' pack tier registers its declared types through the host artifact-type registry (registrationSource:'pack'), advertised under host.artifactTypes and served at /schemas/artifacts/{id}.schema.json. | Apache-2.0 | manifest · tgz · sig |
Connection packs ship portable provider definitions — OAuth /
API-key auth, scopes, and reach (MCP / OpenAPI / integration) — that make a
host's connection registry installable for third-party providers. They are
declarative: a manifest with kind: "connection" and a
provider object, no runtime and no credential material
(enforced). See
RFC 0095
(publishable per RFC 0107).
| Name | Version | Provider | Description | License | Artifacts |
|---|---|---|---|---|---|
core.openwop.connections.github |
1.0.0 | 1 | GitHub connection pack (RFC 0095) — OAuth2 provider definition, reached via the official GitHub MCP server. Demonstrates the openwop-app connection-pack loader: drop this pack in and `github` becomes a resolvable provider. Carries NO secret; the operator supplies the OAuth client id/secret host-side (ADR 0024 §7). | Apache-2.0 | manifest · tgz · sig |
core.openwop.connections.jira |
1.0.0 | 1 | Jira connection pack (RFC 0095) — Atlassian OAuth2 (3LO) provider for Jira Cloud. ADR 0033 DEPLOY-GATED. Reach is `mcp` against Atlassian's official first-party remote MCP server (the Rovo MCP server, https://mcp.atlassian.com/v1/mcp), which fronts Jira (and Confluence) under the signed-in user's permissions. Carries NO secret; the operator supplies the OAuth client id/secret host-side (ADR 0024 §7). | Apache-2.0 | manifest · tgz · sig |
core.openwop.connections.microsoft365 |
1.0.0 | 1 | Microsoft 365 connection pack (RFC 0095) — OAuth2 provider for Teams, Outlook (Mail/Calendar), and SharePoint via the Microsoft Graph API. ADR 0033 DEPLOY-GATED. Reach is `openapi` against the Microsoft Graph OpenAPI surface: Microsoft's first-party remote MCP servers are per-tenant/preview (a tenant-templated URL, not a single global https endpoint the manifest can fix), so a stable Graph OpenAPI path is the honest day-1 reach (ADR 0033 §4 capability honesty). Carries NO secret; the operator supplies the OAuth client id/secret host-side (ADR 0024 §7). | Apache-2.0 | manifest · tgz · sig |
core.openwop.connections.notion |
1.0.0 | 1 | Notion connection pack (RFC 0095) — OAuth2 provider for Notion pages + databases. ADR 0033 DEPLOY-GATED. Reach is `mcp` against Notion's official first-party hosted MCP server (https://mcp.notion.com/mcp, Streamable HTTP), which searches/reads/creates/updates workspace content under the connected user's permissions. Notion consent is a static developer-portal capability set rather than per-request OAuth scopes (scopeModel `capabilities`). Carries NO secret; the operator supplies the OAuth client id/secret host-side (ADR 0024 §7). | Apache-2.0 | manifest · tgz · sig |
core.openwop.connections.salesforce |
1.0.0 | 1 | Salesforce connection pack (RFC 0095) — OAuth2 (web-server flow) provider for the Salesforce REST API. ADR 0033 DEPLOY-GATED. Reach is `openapi`: Salesforce has no single global first-party MCP server (the API lives on a per-org `*.my.salesforce.com` instance host, supplied per connection via instanceUrlTemplate), so a documented OpenAPI/REST surface is the honest day-1 reach (ADR 0033 §4). Carries NO secret; the operator supplies the connected-app consumer key/secret host-side (ADR 0024 §7). | Apache-2.0 | manifest · tgz · sig |
core.openwop.connections.workday |
1.0.0 | 1 | Workday connection pack (RFC 0095) — OAuth2 provider for the Workday REST API (HCM / People). ADR 0033 DEPLOY-GATED. Reach is `openapi`: Workday has no first-party global MCP server, and its OAuth authorize/token endpoints plus REST base are TENANT-SPECIFIC (`https://{instance}.workday.com/{tenant}/...`), supplied per connection via instanceUrlTemplate. The manifest declares the global https hosts and the per-tenant template; the operator fills the tenant at connection time (ADR 0033 §4 capability honesty). Carries NO secret; the operator supplies the API-client id/secret host-side (ADR 0024 §7). | Apache-2.0 | manifest · tgz · sig |
Workflow-chain packs ship reusable sub-workflows — a parameterized
DAG of nodes that callers invoke as a single step (and that expands inline at edit
time). They are declarative: a manifest with kind: "workflow-chain"
and a chains[] array, no runtime. See
RFC 0013
(publishable per RFC 0107).
| Name | Version | Chains | Description | License | Artifacts |
|---|---|---|---|---|---|
vendor.openwop.workflow-chain-sample |
1.0.0 | 2 | Reference workflow-chain pack proving the RFC 0013 manifest format works end-to-end across schema validation, registry indexing, and the reference expansion library. Two chains: a 1-node 'summarize text' chain showing literal parameter substitution, and a 2-node 'fetch-and-summarize' chain showing multi-node DAG composition with edge wiring and capability propagation. In-tree only (NOT published to packs.openwop.dev); the canonical proof that the chain-pack contract is implementable with real-world-shaped content. | Apache-2.0 | manifest · tgz · sig |
Prompt packs ship reusable, versioned prompt templates — named,
parameterized text with model hints — that a host's prompt library resolves at run
time (with the override hierarchy of RFC 0029). They are declarative: a
manifest with kind: "prompt" and a prompts[] array, no runtime. See
RFC 0027
(publishable per RFC 0107).
| Name | Version | Templates | Description | License | Artifacts |
|---|---|---|---|---|---|
vendor.openwop.prompt-sample |
1.0.0 | 2 | Reference prompt pack proving the RFC 0028 §B manifest format works end-to-end across schema validation, registry indexing, and the in-memory PromptStore's installPackTemplates() seam. Two templates: a writer-system prompt and a critic-system prompt — the minimal pair that lets a multi-agent workflow author point a `writer` + `critic` node pair at vendor-published prompts via `prompt:writer-system@1.0.0` / `prompt:critic-system@1.0.0` refs. In-tree only (NOT published to packs.openwop.dev); the canonical proof that the prompt-pack contract is implementable with real-world-shaped content. | Apache-2.0 | manifest · tgz · sig |
Card packs ship reusable, prompt-driven AI chat cards — a
typed input form + a prompt template + an output contract — that a host's chat
surface (host.chat.cardPacks) resolves and executes through its AI
envelope. They are declarative: a manifest with kind: "card"
and a cards[] array, no runtime; card-input content is treated as
contentTrust: "untrusted". See
RFC 0071
(publishable per RFC 0107).
| Name | Version | Cards | Description | License | Artifacts |
|---|---|---|---|---|---|
vendor.openwop.card-sample |
1.0.0 | 2 | Reference chat-card pack (RFC 0071) — two portable, host-agnostic AI chat cards: a text summarizer and a meeting action-item extractor. Demonstrates the card manifest contract (typed inputs from the portable subset, a prompt template with placeholder mapping, no runtime). | Apache-2.0 | manifest · tgz · sig |
Trust & verification
Every tarball is signed with the registry's Ed25519 root key. Hosts running in verified trust mode (per node-packs.md §Trust model) MUST verify each .tgz against this key before unpacking.
/keys/openwop-registry-root.pubroot public key (PEM, Ed25519)
Verification recipe (Node 20+)
const { createPublicKey, verify } = require('node:crypto');
const { readFileSync } = require('node:fs');
const pub = createPublicKey({ key: readFileSync('root.pub'), format: 'pem' });
const ok = verify(null, readFileSync('pack.tgz'), pub, readFileSync('pack.sig'));
// ok === true if the tarball is signed by this registry's root keyAPI
The registry is read-only; programmatic access via the documented endpoints:
/.well-known/openwop-registrydiscovery — declares all endpoint templates/v1/index.jsonfull pack catalog/v1/packs/{name}/index.jsonper-pack metadata + versions list/v1/packs/{name}/-/{version}.jsonversion manifest/v1/packs/{name}/-/{version}.tgzsigned tarball/v1/packs/{name}/-/{version}.sigEd25519 signature
Pack schemas declared with a $id URL of the form https://packs.openwop.dev/{name}/{version}/<schema>.json resolve to the schema content extracted from the signed tarball. The tarball is canonical; the mirrored URL is a derived view — consumers wanting cryptographic integrity should verify against the tarball (see node-packs.md §"Schema $id resolution").
Publishing a pack
Submissions land via maintainer pull request — write API is intentionally not exposed. Build the pack, sign the tarball with your private key, commit alongside the manifest, open a PR. CI validates JSON parsing, sha256 integrity, signature presence, and (in verified mode) signature correctness before merge. The deploy ships on merge to main.
Detailed flow: registry/README.md.
Namespaces
core.*— reserved for the openwop working group; spec-canonical packs only.vendor.<org>.*— under control of a specific vendor organization.community.<author>.*— open-publish; first-claim wins per name.
private.* and local.* namespaces MUST NOT appear in this registry; they're for host-internal and in-repo packs respectively.