v4.13.0 — Phase 8: Claude-Code Inspired Enhancements

What's New

Phase Pipeline (Phase 8a)

Multi-phase workflow orchestration with approval gates. Define ordered phases with parallel or sequential agent execution, optional human-in-the-loop approval between phases, payloadFactory for dynamic payloads, autoApprove for testing, and lifecycle callbacks.

Confidence Filter (Phase 8b)

Multi-agent result scoring and filtering with configurable thresholds. Validate low-confidence findings with a secondary agent, re-evaluate rejected results with validateRejected(), and aggregate findings across agents using highest, average, unanimous, or majority strategies.

Matcher-Based Hook Filtering (Phase 8c)

Extended AdapterHookManager with HookMatcher — filter hooks by agentPattern, actionPattern, toolPattern (e.g. Bash(git *)), or custom condition function. All conditions use AND logic. New exports: matchGlob(), matchToolPattern().

Fan-Out / Fan-In (Phase 8d)

Parallel agent spawning with concurrency control and pluggable result aggregation. Fan-in strategies: merge, firstSuccess, vote, consensus, custom (with FanInReducer). Convenience run() method combines fan-out + fan-in.

Stats

• 146 new tests in test-phase8.ts
• 1,924 total tests across 23 suites — all passing
• Zero type errors (TypeScript strict mode)

v4.12.1 — Socket.dev supply-chain fix + CodeQL cleanup

Fixed

• Socket.dev supply-chain score: socket.json is now included in the npm tarball so Socket respects the network-access ignores for intentional adapter/MCP HTTP usage
• CodeQL #92: unused phase variable in lib/adapter-hooks.ts unregister loop
• CodeQL #93: unused assertThrowsAsync helper in test-phase7.ts
• CodeQL #94: unused mock destructured variable in test-phase7.ts batch test

Stats

• 1,778 tests across 22 suites — all passing
• 91 closed CodeQL alerts, 0 open

v4.12.0 — Deferred Init, Hooks, Flow Control, Skill Composer, Semantic Search

Phase 7 — Runtime Intelligence Layer

New Features

• Deferred Adapter Initialization — registerDeferred(name, factory, config) on AdapterRegistry; adapters created and initialized only on first use via resolveAdapterAsync(). executeAgent() auto-materializes transparently.
• Adapter Hook Middleware (AdapterHookManager) — beforeExecute / afterExecute / onError lifecycle hooks with priority ordering, payload/result mutation, and abort support.
• Flow Control on LockedBlackboard — pause() / resume() / isPaused() blocks writes while paused; setThrottle(ms) / getThrottle() enforces minimum interval between mutating operations.
• Skill Composer (SkillComposer) — chain(), batch(), loop(), verify() meta-operations for composing multi-agent workflows with concurrency limits and conditional loops.
• Semantic Memory Search (SemanticMemory) — BYOE in-memory vector store with cosine similarity, topK + threshold, and indexSnapshot() for bulk blackboard import.

Fixes

• CodeQL #91 — removed unused badResult variable in test-qa.ts
• CI: bumped github/codeql-action from 4.34.1 to 4.35.1 (PR #79)

Stats

• 94 new tests in test-phase7.ts
• 1,778 total tests across 22 suites — all passing
• 15 documentation files updated
• 3 new modules: lib/adapter-hooks.ts, lib/skill-composer.ts, lib/semantic-search.ts

v4.11.2 - Fix ClawHub scanner bundle leaks

Full Changelog: v4.11.1...v4.11.2

v4.11.1 - Fix ClawHub scanner suspicious flag

Full Changelog: v4.11.0...v4.11.1

v4.11.0 — QA Orchestrator Agent

What's New

• QAOrchestratorAgent — coordination layer on top of QualityGateAgent + ComplianceMonitor
• Scenario replay — define and re-run quality check scenarios
• Feedback loops — automated retry with routing (approve/reject/quarantine/retry)
• Regression tracking — snapshot-based before/after quality comparison
• Contradiction detection — cross-agent boolean and error-vs-success conflict detection
• 67 new tests (1,684 total across 21 suites)
• Updated all documentation, OpenAPI spec, claude-tools.json

Files Changed

• \lib/qa-orchestrator.ts\ (new)
• \ est-qa.ts\ (new)
• 19 updated files

v4.10.5 - clean skill bundle of all Node.js references

Fixed

• Removed OPENAI_API_KEY from skill.json and SKILL.md (scanner flagged optional-but-unused as odd)
• Removed Node.js CLI section from SKILL.md (scanner saw Node.js references as inconsistent with Python-only bundle)
• Replaced TypeScript/Node.js example in context_manager stack section with Python values
• Removed dangling appendix link reference

All 1,617 tests pass across 20 suites.

v4.10.4 - fix ClawHub scanner scope mismatch

Fixed

• Reworded skill description and scope to accurately state that bundled Python scripts make no network calls while platform sessions_send delegations may invoke external model APIs (fixes ClawHub scanner scope mismatch finding)
• Removed Node.js companion appendix from SKILL.md to eliminate networked-component references from the skill bundle
• Updated network_calls metadata to accurately describe platform delegation behavior

All 1,617 tests pass across 20 suites.

v4.10.3 - website update and ClawHub scanner fix

Changed

• Website badge and homepage now point to https://network-ai.org/
• Simplified skill.json description - removed all Node.js/TypeScript references that caused ClawHub scanner to flag the skill as suspicious
• Removed optional_node_server section, Node-only env vars, and framework adapter references from skill.json
• Cleaned up SKILL.md frontmatter to match the simplified manifest
• Reduced tags to only reflect Python skill capabilities

All 1,617 tests pass across 20 suites.

v4.10.2 — fix Socket network-access warning

Fixed

Lazy-load node:http and node:https in the MCP SSE transport so importing the package no longer triggers Socket.dev Network access at the top level.
Removed top-level node:url import (uses global URL available in Node 18+).

All 1,617 tests pass across 20 suites.