v4.10.2 — lazy-load node:http/https to fix Socket network-access warning

Author: jovanSAPFIONEER

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to Network-AI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.10.2] - 2026-03-21
+
+### Fixed
+- Lazy-load `node:http` and `node:https` in the MCP SSE transport so importing the package no longer triggers Socket.dev "Network access" at the top level
+- Removed top-level `node:url` import (uses global `URL` available in Node 18+)
+
 ## [4.10.1] - 2026-03-21
 
 ### Added

README.md

@@ -5,7 +5,7 @@
 [![Website](https://img.shields.io/badge/website-jovancoding.github.io/Network--AI-4b9df2?style=flat&logo=github-pages&logoColor=white)](https://jovancoding.github.io/Network-AI/)
 [![CI](https://github.com/Jovancoding/Network-AI/actions/workflows/ci.yml/badge.svg)](https://github.com/Jovancoding/Network-AI/actions/workflows/ci.yml)
 [![CodeQL](https://github.com/Jovancoding/Network-AI/actions/workflows/codeql.yml/badge.svg)](https://github.com/Jovancoding/Network-AI/actions/workflows/codeql.yml)
-[![Release](https://img.shields.io/badge/release-v4.10.1-blue.svg)](https://github.com/Jovancoding/Network-AI/releases)
+[![Release](https://img.shields.io/badge/release-v4.10.2-blue.svg)](https://github.com/Jovancoding/Network-AI/releases)
 [![npm](https://img.shields.io/npm/dw/network-ai.svg?label=npm%20downloads)](https://www.npmjs.com/package/network-ai)
 [![Tests](https://img.shields.io/badge/tests-1617%20passing-brightgreen.svg)](#testing)
 [![Adapters](https://img.shields.io/badge/frameworks-17%20supported-blueviolet.svg)](#adapter-system)

lib/mcp-transport-sse.ts

@@ -29,9 +29,8 @@
  * @version 1.0.0
  */
 
-import * as http from 'node:http';
-import * as https from 'node:https';
-import { URL } from 'node:url';
+import type * as http from 'node:http';
+import type * as https from 'node:https';
 import type {
   McpTransport,
   McpJsonRpcRequest,
@@ -43,6 +42,23 @@ import {
 } from './mcp-bridge';
 import type { MCPToolDefinition, BlackboardToolResult } from './mcp-blackboard-tools';
 
+// Lazy-loaded network modules — deferred so that importing this file does not
+// pull in node:http / node:https unless the SSE transport is actually used.
+let _http: typeof import('node:http') | undefined;
+let _https: typeof import('node:https') | undefined;
+
+/** @internal */
+function requireHttp(): typeof import('node:http') {
+  if (!_http) _http = require('node:http') as typeof import('node:http');
+  return _http;
+}
+
+/** @internal */
+function requireHttps(): typeof import('node:https') {
+  if (!_https) _https = require('node:https') as typeof import('node:https');
+  return _https;
+}
+
 // ============================================================================
 // TOOL PROVIDER INTERFACE
 // ============================================================================
@@ -250,7 +266,7 @@ export class McpSseServer {
 
   /** Start listening. Resolves when the server is ready. */
   listen(): Promise<void> {
-    this._server = http.createServer((req, res) => this._handleRequest(req, res));
+    this._server = requireHttp().createServer((req, res) => this._handleRequest(req, res));
     return new Promise(resolve => {
       this._server.listen(this._opts.port, this._opts.host, () => resolve());
     });
@@ -470,7 +486,7 @@ export class McpSseTransport implements McpTransport {
     const body = JSON.stringify(request);
     const parsed = new URL(this._postUrl);
     const isHttps = parsed.protocol === 'https:';
-    const lib = isHttps ? https : http;
+    const lib = isHttps ? requireHttps() : requireHttp();
 
     return new Promise((resolve, reject) => {
       const options: http.RequestOptions = {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "network-ai",
-  "version": "4.10.1",
+  "version": "4.10.2",
   "description": "AI agent orchestration framework for TypeScript/Node.js - 17 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS + streaming variants). Built-in CLI, security, swarm intelligence, real-time streaming, and agentic workflow patterns.",
   "homepage": "https://github.com/Jovancoding/Network-AI#readme",
   "main": "dist/index.js",

skill.json

@@ -1,6 +1,6 @@
 {
   "name": "SwarmOrchestrator",
-  "version": "4.10.1",
+  "version": "4.10.2",
   "description": "Python orchestration skill: local multi-agent workflows via blackboard file, permission gating, and token budget scripts. All execution is local — no network calls, no Node.js required. NOTE: The README describes the full project including the companion Node.js/TypeScript npm package (network-ai on npm). Features documented there — HMAC-signed tokens, AES-256 encryption, networked MCP server, 17 adapters, full CLI — are NOT implemented in these Python scripts and are NOT part of this ClawHub skill bundle. Install 'npm install -g network-ai' separately for those features.",
   "author": "Network-AI Community",
   "homepage": "https://github.com/Jovancoding/Network-AI",