Network-AI
Release

v5.1.0 — OrchestratorAdapter, WorkTree Dashboard, CodeQL Fixes

Published 2026-04-18 | Release notes

OrchestratorAdapter — hierarchical multi-orchestrator coordination: wrap child SwarmOrchestrators as agents for parent orchestration, query child states, timeout guards

Read the release here or open the original release on GitHub.

What's New in v5.1.0

Added

  • OrchestratorAdapter — hierarchical multi-orchestrator coordination: wrap child SwarmOrchestrators as agents for parent orchestration, query child states, timeout guards
  • WorkTree Dashboard — 3-tab layout (Tree, Agents, Supervisor), clickable agent sidebar with expandable logs, supervisor diagnostics panel with health banner and activity narrative
  • SystemDiagnostic / SystemHealth types and computeDiagnostics() for real-time orchestrator health monitoring

Fixed (CodeQL High Severity)

  • #109 Polynomial ReDoS in security.ts — replaced unbounded \s* regex with line-split + bounded \s{0,10} to prevent DoS on prompt-injection heuristic
  • #110 Remote property injection in lib/dashboard.html — replaced plain object with Map to prevent prototype pollution

Fixed (CodeQL Notes)

  • #111 Removed unused imports writeFileSync, appendFileSync from lib/auth-guardian.ts
  • #112 Removed unused import stat from lib/coverage-reporter.ts
  • #113 Removed unused variable taskMap from lib/goal-dsl.ts

Fixed (Testing)

  • Restored 8 deleted adapter test suites (LlamaIndex, SemanticKernel, OpenAI Assistants, Haystack, DSPy, Agno, APS, full registry)
  • BaseAdapter.ensureReady() now throws AdapterNotInitializedError instead of plain Error

Stats

  • 27 adapters (was 26)
  • 2,691 tests passing across 26 suites (was 2,531)
  • All documentation updated across 13 files

Full changelog: https://github.com/Jovancoding/Network-AI/blob/main/CHANGELOG.md npm: npm install network-ai@5.1.0

Continue evaluating

Cross-check the release signals.

Use the changelog, benchmark notes, and security policy together to validate that the release story lines up with public maintenance discipline.

Changelog Benchmarks Security