feat(ocsf): create openshell-ocsf crate — standalone OCSF event types, formatters, and tracing layers (#489)

feat(ocsf): create openshell-ocsf crate with OCSF v1.7.0 event types, formatters, and tracing layers

Author: johntmyers

.gitattributes

@@ -8,3 +8,6 @@ python/openshell/_proto/*_pb2.pyi linguist-generated
 
 # Generated Rust protobuf code (excludes hand-written mod.rs)
 crates/openshell-core/src/proto/openshell.*.rs linguist-generated
+
+# Vendored OCSF schemas fetched from schema.ocsf.io
+crates/openshell-ocsf/schemas/** linguist-generated

Cargo.lock

@@ -0,0 +1,25 @@
+# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+[package]
+name = "openshell-ocsf"
+description = "OCSF v1.7.0 event types, formatters, and tracing layers for OpenShell sandbox logging"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+repository.workspace = true
+
+[dependencies]
+chrono = { version = "0.4", features = ["serde"] }
+serde = { workspace = true }
+serde_json = { workspace = true }
+serde_repr = "0.1"
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true }
+
+[dev-dependencies]
+tracing-subscriber = { workspace = true, features = ["env-filter", "json"] }
+
+[lints]
+workspace = true