network-ai - npm Package Compare versions

Comparing version 4.0.16 to 4.0.17

dist/index.d.ts

@@ -10,3 +10,3 @@ /**
  * @module SwarmOrchestrator
- * @version 4.0.16
+ * @version 4.0.17
  * @license MIT
@@ -13,0 +13,0 @@ */

package.json

 {
   "name": "network-ai",
-  "version": "4.0.16",
+  "version": "4.0.17",
   "description": "AI agent orchestration framework for TypeScript/Node.js - plug-and-play multi-agent coordination with 12 frameworks (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw). Built-in security, swarm intelligence, and agentic workflow patterns.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/jovanSAPFIONEER/Network-AI#readme",

README.md

@@ -1,2 +0,2 @@
-# Network-AI
+# Network-AI
 
@@ -7,3 +7,3 @@ **TypeScript/Node.js multi-agent orchestrator — shared state, guardrails, budgets, and cross-framework coordination**
 [![CodeQL](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml)
-[![Release](https://img.shields.io/badge/release-v4.0.16-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
+[![Release](https://img.shields.io/badge/release-v4.0.17-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
 [![npm](https://img.shields.io/npm/dw/network-ai.svg?label=npm%20downloads)](https://www.npmjs.com/package/network-ai)
@@ -48,28 +48,34 @@ [![Tests](https://img.shields.io/badge/tests-1184%20passing-brightgreen.svg)](#testing)
 
+```mermaid
+%%{init: {'theme': 'base', 'themeVariables': {'primaryColor': '#1e293b', 'primaryTextColor': '#e2e8f0', 'primaryBorderColor': '#475569', 'lineColor': '#94a3b8', 'clusterBkg': '#0f172a', 'clusterBorder': '#334155', 'edgeLabelBackground': '#1e293b', 'edgeLabelColor': '#cbd5e1', 'titleColor': '#e2e8f0'}}}%%
+flowchart TD
+    classDef app        fill:#1e3a5f,stroke:#3b82f6,color:#bfdbfe,font-weight:bold
+    classDef security   fill:#451a03,stroke:#d97706,color:#fde68a
+    classDef routing    fill:#14532d,stroke:#16a34a,color:#bbf7d0
+    classDef quality    fill:#3b0764,stroke:#9333ea,color:#e9d5ff
+    classDef blackboard fill:#0c4a6e,stroke:#0284c7,color:#bae6fd
+    classDef adapters   fill:#064e3b,stroke:#059669,color:#a7f3d0
+    classDef audit      fill:#1e293b,stroke:#475569,color:#94a3b8
+
+    App["Your Application"]:::app
+    App -->|"createSwarmOrchestrator()"| SO
+
+    subgraph SO["SwarmOrchestrator"]
+        AG["AuthGuardian\n(permission gating)"]:::security
+        AR["AdapterRegistry\n(route tasks to frameworks)"]:::routing
+        QG["QualityGateAgent\n(validate blackboard writes)"]:::quality
+        BB["SharedBlackboard\n(shared agent state)\npropose → validate → commit\nfilesystem mutex"]:::blackboard
+        AD["Adapters — plug any framework in, swap freely\nLangChain · AutoGen · CrewAI · MCP · LlamaIndex · …"]:::adapters
+
+        AG -->|"grant / deny"| AR
+        AR -->|"tasks dispatched"| AD
+        AD -->|"writes results"| BB
+        QG -->|"validates"| BB
+    end
+
+    SO --> AUDIT["data/audit_log.jsonl"]:::audit
 ```
-┌─────────────────────────────────────────────────────────────┐
-│                     Your Application                        │
-└──────────────────────────┬──────────────────────────────────┘
-                           │  createSwarmOrchestrator()
-┌──────────────────────────▼──────────────────────────────────┐
-│                  SwarmOrchestrator                          │
-│  ┌──────────────┐  ┌───────────────┐  ┌─────────────────┐  │
-│  │ AdapterRegistry│  │ AuthGuardian  │  │ FederatedBudget │  │
-│  │ (route tasks) │  │ (permissions) │  │ (token ceilings)│  │
-│  └──────┬───────┘  └───────────────┘  └─────────────────┘  │
-│         │                                                    │
-│  ┌──────▼──────────────────────────────────────────────┐   │
-│  │            LockedBlackboard (shared state)           │   │
-│  │   propose → validate → commit  (file-system mutex)  │   │
-│  └──────────────────────────────────────────────────────┘   │
-│         │                                                    │
-│  ┌──────▼───────────────────────────────────────────────┐  │
-│  │  Adapters (plug any framework in, swap out freely)   │  │
-│  │  LangChain │ AutoGen │ CrewAI │ MCP │ LlamaIndex │…  │  │
-│  └──────────────────────────────────────────────────────┘  │
-└─────────────────────────────────────────────────────────────┘
-                           │
-              HMAC-signed audit log
-```
 
+> `FederatedBudget` is a standalone export — instantiate it separately and optionally wire it to a blackboard backend for cross-node token budget enforcement.
+
 → [Full architecture, FSM journey, and handoff protocol](ARCHITECTURE.md)
@@ -134,3 +140,3 @@
 
-Runs in ~2 seconds. Proves the coordination primitives without any LLM calls.
+Runs in ~3 seconds. Proves the coordination primitives without any LLM calls.
 
@@ -141,4 +147,6 @@ ```bash
 
-What it shows: atomic blackboard locking, priority preemption (priority-3 wins over priority-0 on same key), FSM hard-stop at 700 ms, live compliance violation capture (TOOL_ABUSE, TURN_TAKING, RESPONSE_TIMEOUT, JOURNEY_TIMEOUT), and `FederatedBudget` tracking — all without a single API call.
+What it shows: atomic blackboard locking, priority preemption (priority-3 wins over priority-0 on same key), **AuthGuardian permission gate** (blocked → justified → granted with token), FSM hard-stop at 700 ms, live compliance violation capture (TOOL_ABUSE, TURN_TAKING, RESPONSE_TIMEOUT, JOURNEY_TIMEOUT), and `FederatedBudget` tracking — all without a single API call.
 
+[![Control Plane Demo](https://img.youtube.com/vi/niVRZJu1MEo/0.jpg)](https://www.youtube.com/watch?v=niVRZJu1MEo)
+
 **8-agent AI pipeline** (requires `OPENAI_API_KEY` — builds a Payment Processing Service end-to-end):
@@ -183,8 +191,8 @@
 |---|---|---|---|---|
-| Cross-framework agents in one swarm | ✅ 12 adapters | ❌ LangChain only | ❌ CrewAI only | ❌ AutoGen only |
-| Atomic shared state (conflict-safe) | ✅ `propose → validate → commit` | ⚠️ Last-write-wins | ⚠️ Last-write-wins | ⚠️ Last-write-wins |
-| Hard budget ceiling per agent | ✅ `FederatedBudget` | ⚠️ Callbacks only | ❌ | ❌ |
-| Permission gating before sensitive ops | ✅ `AuthGuardian` | ❌ | ❌ | ❌ |
-| Tamper-evident audit trail | ✅ HMAC-signed | ❌ | ❌ | ❌ |
-| Encryption at rest | ✅ AES-256-GCM | ❌ | ❌ | ❌ |
+| Cross-framework agents in one swarm | ✅ 12 built-in adapters | ⚠️ Nodes can call any code; no adapter abstraction | ⚠️ Extensible via tools; CrewAI-native agents only | ⚠️ Extensible via plugins; AutoGen-native agents only |
+| Atomic shared state (conflict-safe) | ✅ `propose → validate → commit` mutex | ⚠️ State passed between nodes; last-write-wins | ⚠️ Shared memory available; no conflict resolution | ⚠️ Shared context available; no conflict resolution |
+| Hard token ceiling per agent | ✅ `FederatedBudget` (first-class API) | ⚠️ Via callbacks / custom middleware | ⚠️ Via callbacks / custom middleware | ⚠️ Built-in token tracking in v0.4+; no swarm-level ceiling |
+| Permission gating before sensitive ops | ✅ `AuthGuardian` (built-in) | ⚠️ Possible via custom node logic | ⚠️ Possible via custom tools | ⚠️ Possible via custom middleware |
+| Append-only audit log | ✅ plain JSONL (`data/audit_log.jsonl`) | ⚠️ Not built-in | ⚠️ Not built-in | ⚠️ Not built-in |
+| Encryption at rest | ✅ AES-256-GCM (TypeScript layer) | ⚠️ Not built-in | ⚠️ Not built-in | ⚠️ Not built-in |
 | Language | TypeScript / Node.js | Python | Python | Python |
@@ -257,6 +265,6 @@
 <details>
-<summary>Keywords (for search)</summary>
+<summary>Keywords</summary>
 
-ai-agents, agentic-ai, multi-agent, multi-agent-systems, multi-agent-system, agent-framework, ai-agent-framework, agentic-framework, agentic-workflow, llm, llm-agents, llm-agent, large-language-models, generative-ai, genai, orchestration, ai-orchestration, swarm, swarm-intelligence, autonomous-agents, agents, ai, typescript, nodejs, mcp, model-context-protocol, a2a, agent-to-agent, function-calling, tool-integration, context-engineering, rag, ai-safety, multi-agents-collaboration, multi-agents, aiagents, aiagentframework, plug-and-play, adapter-registry, blackboard-pattern, agent-coordination, agent-handoffs, token-permissions, budget-tracking, cost-awareness, atomic-commits, hallucination-detection, content-quality-gate, behavioral-control-plane, governance-layer, compliance-enforcement, fan-out-fan-in, agent-observability, permission-gating, audit-trail, OpenClaw, ClawHub, clawhub, AgentSkills, LangChain adapter, LangGraph, AutoGen adapter, AG2, CrewAI adapter, MCP adapter, LlamaIndex adapter, Semantic Kernel adapter, OpenAI Assistants adapter, Haystack adapter, DSPy adapter, Agno adapter, custom-adapter, AES-256 encryption, HMAC tokens, rate limiting, input sanitization, privilege escalation prevention, agentic-rag, deep-research, workflow-orchestration, ai-assistant, ai-tools, developer-tools, open-source
+multi-agent · agent orchestration · AI agents · agentic AI · agentic workflow · TypeScript · Node.js · LangGraph · CrewAI · AutoGen · MCP · model-context-protocol · LlamaIndex · Semantic Kernel · OpenAI Assistants · Haystack · DSPy · Agno · OpenClaw · ClawHub · shared state · blackboard pattern · atomic commits · guardrails · token budgets · permission gating · audit trail · agent coordination · agent handoffs · governance · cost-awareness
 
 </details>

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

265

3.11%

Worsened metrics

Total package byte prevSize

1248142

-0.08%

No dependency changes