network-ai - npm Package Compare versions

Comparing version 4.0.8 to 4.0.9

bin/mcp-server.ts

@@ -32,3 +32,3 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.8
+ * @version 4.0.9
  */
@@ -107,3 +107,3 @@
   console.log(`
-network-ai-server — Network-AI MCP Server v4.0.8
+network-ai-server — Network-AI MCP Server v4.0.9
 
@@ -145,3 +145,3 @@ Usage: npx ts-node bin/mcp-server.ts [options]
 
-  console.log(`\n[network-ai-server] Starting MCP Server v4.0.8`);
+  console.log(`\n[network-ai-server] Starting MCP Server v4.0.9`);
   console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
@@ -148,0 +148,0 @@

dist/bin/mcp-server.d.ts

@@ -32,5 +32,5 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.8
+ * @version 4.0.9
  */
 export {};
 //# sourceMappingURL=mcp-server.d.ts.map

dist/bin/mcp-server.js

@@ -33,3 +33,3 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.8
+ * @version 4.0.9
  */
@@ -106,3 +106,3 @@ Object.defineProperty(exports, "__esModule", { value: true });
     console.log(`
-network-ai-server — Network-AI MCP Server v4.0.8
+network-ai-server — Network-AI MCP Server v4.0.9
 
@@ -140,3 +140,3 @@ Usage: npx ts-node bin/mcp-server.ts [options]
     }
-    console.log(`\n[network-ai-server] Starting MCP Server v4.0.8`);
+    console.log(`\n[network-ai-server] Starting MCP Server v4.0.9`);
     console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
@@ -143,0 +143,0 @@ // --------------------------------------------------------------------------

dist/index.d.ts

@@ -10,3 +10,3 @@ /**
  * @module SwarmOrchestrator
- * @version 4.0.8
+ * @version 4.0.9
  * @license MIT
@@ -13,0 +13,0 @@ */

dist/lib/mcp-transport-sse.js

@@ -128,3 +128,3 @@ "use strict";
                         capabilities: { tools: {} },
-                        serverInfo: { name: this.name ?? 'network-ai', version: '4.0.7' },
+                        serverInfo: { name: this.name ?? 'network-ai', version: '4.0.9' },
                     });
@@ -131,0 +131,0 @@ // Client signals it's ready — notification (no response needed, but

package.json

 {
   "name": "network-ai",
-  "version": "4.0.8",
+  "version": "4.0.9",
   "description": "AI agent orchestration framework for TypeScript/Node.js - plug-and-play multi-agent coordination with 12 frameworks (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw). Built-in security, swarm intelligence, and agentic workflow patterns.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/jovanSAPFIONEER/Network-AI#readme",

README.md

@@ -1,34 +0,42 @@
-# Network-AI: Multi-Agent Orchestration Framework
+# Network-AI
 
-**The plug-and-play AI agent orchestrator for TypeScript/Node.js -- connect 12 agent frameworks with zero glue code**
+**TypeScript/Node.js multi-agent orchestrator — shared state, guardrails, budgets, and cross-framework coordination**
 
 [![CI](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/ci.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/ci.yml)
 [![CodeQL](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml)
-[![Release](https://img.shields.io/badge/release-v4.0.8-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
+[![Release](https://img.shields.io/badge/release-v4.0.9-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
 [![npm](https://img.shields.io/npm/dw/network-ai.svg?label=npm%20downloads)](https://www.npmjs.com/package/network-ai)
-[![ClawHub](https://img.shields.io/badge/ClawHub-network--ai-orange.svg)](https://clawhub.ai/skills/network-ai)
+[![Tests](https://img.shields.io/badge/tests-1216%20passing-brightgreen.svg)](#testing)
+[![Adapters](https://img.shields.io/badge/frameworks-12%20supported-blueviolet.svg)](#adapter-system)
+[![License](https://img.shields.io/badge/license-MIT-brightgreen.svg)](LICENSE)
+[![Socket](https://socket.dev/api/badge/npm/package/network-ai)](https://socket.dev/npm/package/network-ai/overview)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg)](https://nodejs.org)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.x-3178C6.svg)](https://typescriptlang.org)
-[![Python](https://img.shields.io/badge/python-3.9+-green.svg)](https://python.org)
-[![License](https://img.shields.io/badge/license-MIT-brightgreen.svg)](LICENSE)
-[![Socket](https://socket.dev/api/badge/npm/package/network-ai)](https://socket.dev/npm/package/network-ai/overview)
-[![AgentSkills](https://img.shields.io/badge/AgentSkills-compatible-orange.svg)](https://agentskills.io)
-[![Tests](https://img.shields.io/badge/tests-1216%20passing-brightgreen.svg)](#testing)
-[![Adapters](https://img.shields.io/badge/frameworks-12%20supported-blueviolet.svg)](#adapter-system)
-[![RSS Feed](https://img.shields.io/badge/RSS-releases-orange?logo=rss)](https://github.com/jovanSAPFIONEER/Network-AI/releases.atom)
+[![ClawHub](https://img.shields.io/badge/ClawHub-network--ai-orange.svg)](https://clawhub.ai/skills/network-ai)
 [![Integration Guide](https://img.shields.io/badge/docs-integration%20guide-informational.svg)](INTEGRATION_GUIDE.md)
 
-> **Legacy Users:** This skill works with **Clawdbot** and **Moltbot** (now OpenClaw). If you're searching for *Moltbot Security*, *Clawdbot Swarm*, or *Moltbot multi-agent* -- you're in the right place!
+Network-AI is a TypeScript/Node.js multi-agent orchestrator for teams that need shared state, guardrails, budgets, and cross-framework coordination.
 
-If network-ai saves you time, a ⭐ on GitHub helps others find it.
+- **Shared blackboard with locking** — atomic commits prevent race conditions and split-brain failures across parallel agents
+- **Guardrails and budgets** — FSM governance, per-agent token ceilings, HMAC audit trails, and permission gating
+- **12 framework adapters** — LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, and more in one orchestrator — no glue code, no lock-in
 
-Connect agents across **12 frameworks** through a shared blackboard with built-in security, compliance enforcement, and behavioral governance -- in a single `npm install`. No glue code, no lock-in.
+If network-ai saves you time, a ⭐ helps others find it.  |  [**60-second quickstart →**](#hello-world----get-running-in-60-seconds)  |  [**Architecture →**](#architecture)  |  [**All adapters →**](#adapter-system)
 
-**Why Network-AI?**
-- **Framework-agnostic** -- LangChain, AutoGen, CrewAI, MCP, OpenAI Assistants, and 7 more in one orchestrator
-- **Governed coordination** -- FSM-controlled agent turns, permission gating, audit trails, budget ceilings
-- **Shared state** -- Atomic blackboard with conflict resolution for safe parallel agent coordination
-- **Production security** -- AES-256 encryption, HMAC audit logs, rate limiting, input sanitization
-- **Zero config** -- Works out of the box with `createSwarmOrchestrator()`
+---
 
+## Why teams use Network-AI
+
+| Problem | How Network-AI solves it |
+|---|---|
+| Race conditions in parallel agents | Atomic blackboard: `propose → validate → commit` with file-system mutex |
+| Agent overspend / runaway costs | `FederatedBudget` — hard per-agent token ceilings with live spend tracking |
+| No visibility into what agents did | HMAC-signed audit log on every write, permission grant, and FSM transition |
+| Locked into one AI framework | 12 adapters — mix LangChain + AutoGen + CrewAI + custom in one swarm |
+| Agents escalating beyond their scope | `AuthGuardian` — scoped permission tokens required before sensitive operations |
+
+> Validated by **1,216 passing tests** across 9 test suites — [see testing section](#testing)
+
+---
+
 ## Architecture
@@ -35,0 +43,0 @@

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1280198

0.02%

Number of lines in readme file

1158

0.7%

No dependency changes