network-ai 4.0.4 → 4.0.6

package/README.md

@@ -4,7 +4,7 @@
 
 [![CI](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/ci.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/ci.yml)
 [![CodeQL](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml)
-[![Release](https://img.shields.io/badge/release-v4.0.3-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
+[![Release](https://img.shields.io/badge/release-v4.0.6-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
 [![npm](https://img.shields.io/npm/dw/network-ai.svg?label=npm%20downloads)](https://www.npmjs.com/package/network-ai)
 [![ClawHub](https://img.shields.io/badge/ClawHub-network--ai-orange.svg)](https://clawhub.ai/skills/network-ai)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg)](https://nodejs.org)
@@ -60,7 +60,60 @@ console.log(result.data); // "Hello, World! Your task: welcome"
 
 That's it. No config files, no setup wizards. Add more agents, swap frameworks, layer on security -- all optional.
 
-## Demo
+## Demos
+
+### One command to run everything
+
+```bash
+npm run demo
+```
+
+Interactive menu or use flags directly:
+
+```bash
+npm run demo -- --07                    # Full AI showcase (OPENAI_API_KEY required)
+npm run demo -- --08                    # Control-plane stress demo (no API key)
+npm run demo -- --both                  # Both sequentially
+npm run demo -- --both --silent-summary # Both, highlights only
+```
+
+---
+
+### Demo 07 — Full AI Showcase *(requires `OPENAI_API_KEY`)*
+
+8-agent pipeline that builds a Payment Processing Service from scratch with full governance:
+
+- **FSM state machine** — each agent phase is gated by `JourneyFSM` state transitions
+- **AuthGuardian tokens** — scoped HMAC-signed tokens required at every gate
+- **FederatedBudget** — per-agent token ceilings, hard cut-off on overspend
+- **QualityGateAgent** — AI-assisted security scan + content safety on generated code
+- **Fixer + debugger agents** — two-pass automated remediation loop
+- **Deterministic 10/10 scoring** — 8 objective gates, no LLM score parsing
+- **Cryptographic audit trail** — every write signed to `data/audit_log.jsonl`
+
+```bash
+npm run demo -- --07
+```
+
+---
+
+### Demo 08 — Control-Plane Stress Demo *(no API key)*
+
+No LLM calls. Runs in ~2 seconds. Shows the synchronization and governance primitives under load:
+
+- **`LockedBlackboard`** — atomic `propose → validate → commit` workflow with file-system mutex
+- **Priority preemption** — high-priority (3) write overwrites low-priority (0) write on same key
+- **FSM timeout** — state times out after 700 ms, FSM hard-stops
+- **Live compliance violations** — TOOL_ABUSE (6 rapid writes), TURN_TAKING (5 consecutive actions), RESPONSE_TIMEOUT (1.2 s sleep), JOURNEY_TIMEOUT — all captured by `ComplianceMonitor`
+- **`FederatedBudget`** — per-agent ceilings tracked without any AI backend
+
+```bash
+npm run demo -- --08
+```
+
+---
+
+### Demo 05 — Code Review Swarm *(requires `OPENAI_API_KEY`)*
 
 [![Code Review Swarm Demo](https://img.youtube.com/vi/UyMsNhaw9lU/0.jpg)](https://youtu.be/UyMsNhaw9lU)
 
@@ -68,7 +121,12 @@ That's it. No config files, no setup wizards. Add more agents, swap frameworks,
 
 > The demo shows a code review swarm, but Network-AI is not a code review tool. The same orchestration pattern works for research pipelines, data processing, content moderation, customer support routing, document analysis, financial workflows — any task where multiple agents need to coordinate without stepping on each other.
 
-> **Run the demo yourself:** `05-code-review-swarm.ts` is in the repo. Copy `.env.example` to `.env`, add your `OPENAI_API_KEY`, then run `npx ts-node examples/05-code-review-swarm.ts`. Supports 4 modes: built-in code review, paste your own code, system design document, or custom role for any content type (proposals, policies, job descriptions, emails). Examples `01`–`03` cover all core framework features with no API key required. `04-live-swarm.ts` runs a 10-agent live AI research swarm (3 parallel analyst waves + synthesizer) — also requires `OPENAI_API_KEY`.
+```bash
+npm run demo -- --07   # or run directly:
+npx ts-node examples/05-code-review-swarm.ts
+```
+
+Supports 4 modes: built-in code review, paste your own code, system design document, or custom role for any content type. Examples `01`–`03` run without any API key. `04-live-swarm.ts` runs a 10-agent live AI research swarm (3 parallel analyst waves + synthesizer).
 
 ## Why This Exists -- The Multi-Agent Race Condition Problem
 

package/bin/mcp-server.ts

@@ -29,7 +29,7 @@
  *   http://localhost:3001/tools     (list all tools)
  *
  * @module bin/mcp-server
- * @version 4.0.0
+ * @version 4.0.6
  */
 
 import {
@@ -103,7 +103,7 @@ function parseArgs(argv: string[]): ServerArgs {
 
 function printHelp(): void {
   console.log(`
-network-ai-server — Network-AI MCP Server v4.0.0
+network-ai-server — Network-AI MCP Server v4.0.6
 
 Usage: npx ts-node bin/mcp-server.ts [options]
 
@@ -140,7 +140,7 @@ async function main(): Promise<void> {
     process.exit(0);
   }
 
-  console.log(`\n[network-ai-server] Starting MCP Server v4.0.0`);
+  console.log(`\n[network-ai-server] Starting MCP Server v4.0.6`);
   console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
 
   // --------------------------------------------------------------------------

package/dist/bin/mcp-server.d.ts

@@ -29,7 +29,7 @@
  *   http://localhost:3001/tools     (list all tools)
  *
  * @module bin/mcp-server
- * @version 4.0.0
+ * @version 4.0.6
  */
 export {};
 //# sourceMappingURL=mcp-server.d.ts.map

package/dist/bin/mcp-server.js

@@ -30,7 +30,7 @@
  *   http://localhost:3001/tools     (list all tools)
  *
  * @module bin/mcp-server
- * @version 4.0.0
+ * @version 4.0.6
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 const index_1 = require("../index");
@@ -102,7 +102,7 @@ function parseArgs(argv) {
 }
 function printHelp() {
     console.log(`
-network-ai-server — Network-AI MCP Server v4.0.0
+network-ai-server — Network-AI MCP Server v4.0.6
 
 Usage: npx ts-node bin/mcp-server.ts [options]
 
@@ -135,7 +135,7 @@ async function main() {
         printHelp();
         process.exit(0);
     }
-    console.log(`\n[network-ai-server] Starting MCP Server v4.0.0`);
+    console.log(`\n[network-ai-server] Starting MCP Server v4.0.6`);
     console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
     // --------------------------------------------------------------------------
     // 1. Create orchestrator + blackboard

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "network-ai",
-  "version": "4.0.4",
+  "version": "4.0.6",
   "description": "AI agent orchestration framework for TypeScript/Node.js - plug-and-play multi-agent coordination with 12 frameworks (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw). Built-in security, swarm intelligence, and agentic workflow patterns.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,6 +29,7 @@
     "setup": "npx ts-node setup.ts",
     "setup:check": "npx ts-node setup.ts --check",
     "setup:example": "npx ts-node setup.ts --example",
+    "demo": "npx ts-node examples/demo-runner.ts",
     "blackboard": "python scripts/blackboard.py",
     "check-permission": "python scripts/check_permission.py",
     "validate-token": "python scripts/validate_token.py",
@@ -82,6 +83,7 @@
   },
   "devDependencies": {
     "@types/node": "^25.3.0",
+    "dotenv": "^17.3.1",
     "openai": "^6.23.0",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.3"
@@ -94,6 +96,7 @@
     "README.md",
     "QUICKSTART.md",
     "SKILL.md",
-    "LICENSE"
+    "LICENSE",
+    "socket.json"
   ]
 }

package/socket.json

@@ -0,0 +1,29 @@
+{
+  "version": 2,
+  "ignore": {
+    "evalDynamicCodeExecution": [
+      {
+        "path": "dist/lib/blackboard-validator.js",
+        "reason": "False positive — this is a security detection pattern that scans for eval() usage in untrusted agent code. It is not dynamic code execution."
+      }
+    ],
+    "networkAccess": [
+      {
+        "path": "dist/adapters/custom-adapter.js",
+        "reason": "Intentional — CustomAdapter is a user-configured HTTP adapter that calls a user-supplied URL (config.url) to connect to external AI endpoints. Network access is the explicit purpose of this adapter."
+      },
+      {
+        "path": "dist/lib/mcp-transport-sse.ts",
+        "reason": "Intentional — McpSseTransport is an HTTP/SSE transport layer for the MCP protocol. Both the server (createServer) and client (http.request) directions are the explicit purpose of this module."
+      },
+      {
+        "path": "dist/lib/mcp-transport-sse.js",
+        "reason": "Intentional — McpSseTransport is an HTTP/SSE transport layer for the MCP protocol. Both the server (createServer) and client (http.request) directions are the explicit purpose of this module."
+      },
+      {
+        "path": "dist/bin/mcp-server.js",
+        "reason": "Intentional — network-ai-server is an opt-in CLI binary that starts an HTTP/SSE server to expose the Network-AI tool suite over MCP. Users invoke it explicitly; it is not a background side-effect."
+      }
+    ]
+  }
+}