network-ai 4.4.1 → 4.4.3

package/SKILL.md

@@ -33,6 +33,24 @@ metadata:
 
 > **Scope of this skill bundle:** All instructions below run local Python scripts (`scripts/*.py`). No network calls are made by this skill. Tokens are UUID-based (`grant_{uuid4().hex}`) stored in `data/active_grants.json`. Audit logging is plain JSONL (`data/audit_log.jsonl`) — no HMAC signing in the Python layer. HMAC-signed tokens, AES-256 encryption, and the standalone MCP server are all features of the **companion Node.js package** (`npm install -g network-ai`) — they are **not** implemented in these Python scripts and do **not** run automatically.
 
+## Setup
+
+**No pip install required.** All 5 scripts use Python standard library only — zero third-party packages.
+
+```bash
+# Prerequisite: python3 (any version ≥ 3.8)
+python3 --version
+
+# That's it. Run any script directly:
+python3 scripts/blackboard.py list
+python3 scripts/swarm_guard.py budget-init --task-id "task_001" --budget 10000
+
+# Optional: for cross-platform file locking on Windows production hosts
+pip install filelock  # only needed if you see locking issues on Windows
+```
+
+The `data/` directory is created automatically on first run. No configuration files, environment variables, or credentials are required.
+
 Multi-agent coordination system for complex workflows requiring task delegation, parallel execution, and permission-controlled access to sensitive APIs.
 
 ## 🎯 Orchestrator System Instructions

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "network-ai",
-  "version": "4.4.1",
+  "version": "4.4.3",
   "description": "AI agent orchestration framework for TypeScript/Node.js - 14 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex + streaming variants). Built-in CLI, security, swarm intelligence, real-time streaming, and agentic workflow patterns.",
   "homepage": "https://github.com/jovanSAPFIONEER/Network-AI#readme",
   "main": "dist/index.js",

package/scripts/blackboard.py

@@ -1,4 +1,11 @@
 #!/usr/bin/env python3
+# SECURITY: This script makes NO network calls and spawns NO subprocesses.
+# All I/O is local file operations only:
+#   READS:  swarm-blackboard.md, data/pending_changes/<id>.json
+#   WRITES: swarm-blackboard.md, data/pending_changes/<id>.json
+# Imports used: argparse, json, os, re, sys, time, hashlib, datetime, pathlib,
+#               typing, contextlib, fcntl (Unix file-lock only, no network use)
+# No imports of: requests, socket, subprocess, urllib, http, ssl, ftplib, smtplib
 """
 Shared Blackboard - Agent Coordination State Manager (Atomic Commit Edition)
 

package/scripts/check_permission.py

@@ -1,4 +1,10 @@
 #!/usr/bin/env python3
+# SECURITY: This script makes NO network calls and spawns NO subprocesses.
+# All I/O is local file operations only:
+#   READS:  data/active_grants.json, data/audit_log.jsonl
+#   WRITES: data/active_grants.json, data/audit_log.jsonl
+# Imports used: argparse, json, re, sys, uuid, datetime, pathlib, typing
+# No imports of: requests, socket, subprocess, urllib, http, ssl, ftplib, smtplib
 """
 AuthGuardian Permission Checker
 

package/scripts/revoke_token.py

@@ -1,4 +1,10 @@
 #!/usr/bin/env python3
+# SECURITY: This script makes NO network calls and spawns NO subprocesses.
+# All I/O is local file operations only:
+#   READS:  data/active_grants.json, data/audit_log.jsonl
+#   WRITES: data/active_grants.json, data/audit_log.jsonl
+# Imports used: argparse, json, sys, datetime, pathlib, typing
+# No imports of: requests, socket, subprocess, urllib, http, ssl, ftplib, smtplib
 """
 Revoke Grant Token & TTL Enforcement
 

package/scripts/swarm_guard.py

@@ -1,4 +1,10 @@
 #!/usr/bin/env python3
+# SECURITY: This script makes NO network calls and spawns NO subprocesses.
+# All I/O is local file operations only:
+#   READS:  data/swarm_budgets.json, data/heartbeats.json, data/audit_log.jsonl
+#   WRITES: data/swarm_budgets.json, data/heartbeats.json, data/audit_log.jsonl
+# Imports used: argparse, json, sys, datetime, pathlib, typing
+# No imports of: requests, socket, subprocess, urllib, http, ssl, ftplib, smtplib
 """
 Swarm Guard - Prevents Handoff Tax, Silent Failures, and Budget Overruns
 

package/scripts/validate_token.py

@@ -1,4 +1,10 @@
 #!/usr/bin/env python3
+# SECURITY: This script makes NO network calls and spawns NO subprocesses.
+# All I/O is local file operations only:
+#   READS:  data/active_grants.json
+#   WRITES: none
+# Imports used: argparse, json, sys, datetime, pathlib, typing
+# No imports of: requests, socket, subprocess, urllib, http, ssl, ftplib, smtplib
 """
 Validate Grant Token