asap-protocol 0.1.0__py3-none-any.whl → 0.5.0__py3-none-any.whl

{asap_protocol-0.1.0.dist-info → asap_protocol-0.5.0.dist-info}/METADATA

@@ -1,11 +1,12 @@
 Metadata-Version: 2.4
 Name: asap-protocol
-Version: 0.1.0
+Version: 0.5.0
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
 Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
 Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
 Project-URL: Repository, https://github.com/adriannoes/asap-protocol
 Project-URL: Issues, https://github.com/adriannoes/asap-protocol/issues
+Project-URL: PyPI, https://pypi.org/project/asap-protocol/
 Author: ASAP Protocol Contributors
 License: Apache-2.0
 License-File: LICENSE
@@ -19,11 +20,12 @@ Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Topic :: System :: Distributed Computing
 Classifier: Typing :: Typed
 Requires-Python: >=3.13
-Requires-Dist: fastapi>=0.124
+Requires-Dist: fastapi>=0.128.0
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: packaging>=25.0
 Requires-Dist: pydantic>=2.12.5
 Requires-Dist: python-ulid>=3.0
+Requires-Dist: slowapi>=0.1.9
 Requires-Dist: structlog>=24.1
 Requires-Dist: typer>=0.21.1
 Requires-Dist: uvicorn>=0.34
@@ -33,6 +35,7 @@ Requires-Dist: pip-audit>=2.7; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
 Requires-Dist: pytest-benchmark>=5.1; extra == 'dev'
 Requires-Dist: pytest-cov>=6.0; extra == 'dev'
+Requires-Dist: pytest-xdist>=3.5.0; extra == 'dev'
 Requires-Dist: pytest>=8.0; extra == 'dev'
 Requires-Dist: ruff>=0.14.14; extra == 'dev'
 Provides-Extra: docs
@@ -42,17 +45,35 @@ Description-Content-Type: text/markdown
 
 # ASAP: Async Simple Agent Protocol
 
-> A streamlined, scalable, asynchronous protocol for agent-to-agent communication and task coordination.
+![ASAP Protocol Banner](.cursor/docs/asap-protocol-banner.png)
+
+> A streamlined, scalable, asynchronous protocol for agent-to-agent communication and task coordination. Built as a simpler, more powerful alternative to A2A with native MCP integration and stateful orchestration.
+
+**Quick Info**: `v0.5.0` | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](CHANGELOG.md)
+
+⚠️ **Alpha Release**: ASAP Protocol is currently in **alpha** (v0.5.0). We're actively developing and improving the protocol based on real-world usage. Your feedback, contributions, and suggestions are essential to help us evolve and make ASAP better for the entire community. See our [Contributing](#contributing) section to get involved!
 
 ## Why ASAP?
 
-Building multi-agent systems today suffers from three core technical challenges:
+Building multi-agent systems today suffers from three core technical challenges that existing protocols like A2A don't fully address:
 1. **$N^2$ Connection Complexity**: Most protocols assume static point-to-point HTTP connections that don't scale.
 2. **State Drift**: Lack of native persistence makes it impossible to reliably resume long-running agentic workflows.
 3. **Fragmentation**: No unified way to handle task delegation, artifact exchange, and tool execution (MCP) in a single envelope.
 
 **ASAP** provides a production-ready communication layer that simplifies these complexities. It introduces a standardized, stateful orchestration framework that ensures your agents can coordinate reliably across distributed environments.
 
+### Security-First Design
+
+v0.5.0 introduces comprehensive security hardening:
+- **Authentication**: Bearer token authentication with configurable token validators
+- **Replay Attack Prevention**: Timestamp validation (5-minute window) and optional nonce tracking
+- **DoS Protection**: Built-in rate limiting (100 req/min), request size limits (10MB), and thread pool bounds
+- **HTTPS Enforcement**: Client-side HTTPS validation in production mode
+- **Secure Logging**: Automatic sanitization of sensitive data (tokens, credentials, nonces) in logs
+- **Input Validation**: Strict schema validation with Pydantic v2 for all incoming requests
+
+All security features are **opt-in** to maintain backward compatibility with existing deployments.
+
 ### Key Features
 
 - **Stateful Orchestration**: Native task state machine with built-in snapshotting for durable, resumable agent workflows.
@@ -61,8 +82,10 @@ Building multi-agent systems today suffers from three core technical challenges:
 - **Observable Chains**: First-class support for `trace_id` and `correlation_id` to debug complex multi-agent delegation.
 - **MCP Integration**: Uses the Model Context Protocol (MCP) as a tool-execution substrate, wrapped in a high-level coordination envelope.
 - **Async-Native**: Engineered from the ground up for high-concurrency environments using `asyncio` and `httpx`. Supports both sync and async handlers with automatic event loop management.
+- **Security-Hardened (v0.5.0)**: Authentication (Bearer tokens), replay attack prevention (timestamp + nonce validation), HTTPS enforcement, secure logging, and comprehensive input validation. All security features are opt-in for backward compatibility.
+- **DoS Protection**: Built-in rate limiting (100 req/min), request size limits (10MB), and thread pool bounds to prevent resource exhaustion attacks.
 
-> 💡 **Performance Note**: Pure Python codebase leveraging Rust-accelerated dependencies (`pydantic-core`, `orjson`, `python-ulid`) for native-level performance without build complexity.
+💡 **Performance Note**: Pure Python codebase leveraging Rust-accelerated dependencies (`pydantic-core`, `orjson`, `python-ulid`) for native-level performance without build complexity.
 
 ## Installation
 
@@ -78,8 +101,16 @@ Or with pip:
 pip install asap-protocol
 ```
 
+📦 **Available on [PyPI](https://pypi.org/project/asap-protocol/)**
+
 For reproducible environments, prefer `uv` when possible.
 
+## Requirements
+
+- **Python**: 3.13 or higher
+- **Dependencies**: Automatically installed via `uv` or `pip`
+- **Optional**: For development, see [Contributing](CONTRIBUTING.md)
+
 ## Quick Start
 
 ### 1. Create an Agent (Server)
@@ -92,13 +123,15 @@ from asap.transport.server import create_app
 manifest = Manifest(
     id="urn:asap:agent:echo-agent",
     name="Echo Agent",
-    version="0.1.0",
+    version="0.5.0",
     description="Echoes task input as output",
     capabilities=Capability(
         asap_version="0.1",
         skills=[Skill(id="echo", description="Echo back the input")],
         state_persistence=False,
     ),
+    # Development: HTTP localhost is allowed
+    # Production: Always use HTTPS (e.g., "https://api.example.com/asap")
     endpoints=Endpoint(asap="http://127.0.0.1:8001/asap"),
 )
 
@@ -129,6 +162,8 @@ async def main():
         payload_type="task.request",
         payload=request.model_dump(),
     )
+    # Development: HTTP localhost is allowed (with warning)
+    # Production: Always use HTTPS (e.g., "https://api.example.com")
     async with ASAPClient("http://127.0.0.1:8001") as client:
         response = await client.send(envelope)
         print(response.payload)
@@ -158,91 +193,49 @@ Transport:
 - [Spec](.cursor/docs/general-specs.md)
 - [Docs](docs/index.md)
 - [API Reference](docs/api-reference.md)
+- [Changelog](CHANGELOG.md)
+- [PyPI Package](https://pypi.org/project/asap-protocol/)
 
-## Advanced Examples
-
-### State Snapshots
-
-```python
-from datetime import datetime, timezone
-from asap.models.entities import StateSnapshot
-from asap.state import InMemorySnapshotStore
-
-store = InMemorySnapshotStore()
-snapshot = StateSnapshot(
-    id="snap_01HX5K7R...",
-    task_id="task_01HX5K4N...",
-    version=1,
-    data={"status": "submitted", "progress": 0},
-    created_at=datetime.now(timezone.utc),
-)
-store.save(snapshot)
-latest = store.get("task_01HX5K4N...")
-```
-
-### Error Recovery
+## When to Use ASAP?
 
-```python
-from asap.errors import InvalidTransitionError
+ASAP is ideal for:
+- **Multi-agent orchestration**: Coordinate tasks across multiple AI agents
+- **Stateful workflows**: Long-running tasks that need persistence and resumability
+- **MCP integration**: Agents that need to execute tools via Model Context Protocol
+- **Production systems**: High-performance, type-safe agent communication
 
-try:
-    raise InvalidTransitionError(from_state="submitted", to_state="completed")
-except InvalidTransitionError as exc:
-    payload = exc.to_dict()
-    print(payload["code"])
-```
+If you're building simple point-to-point agent communication, a basic HTTP API might suffice. ASAP shines when you need orchestration, state management and multi-agent coordination.
 
-### Async Handlers
+## Advanced Topics
 
-Handlers can be either synchronous or asynchronous:
+Explore these guides for detailed information on specific features:
 
-```python
-# Sync handler
-def my_sync_handler(envelope: Envelope, manifest: Manifest) -> Envelope:
-    # Process synchronously
-    return response_envelope
-
-# Async handler
-async def my_async_handler(envelope: Envelope, manifest: Manifest) -> Envelope:
-    # Process asynchronously (e.g., database calls, API requests)
-    result = await some_async_operation()
-    return response_envelope
-
-registry.register("task.request", my_async_handler)  # Works with both!
-```
+- **[State Management](docs/state-management.md)**: Task lifecycle, state machine, and snapshot persistence for resumable workflows.
+- **[Error Handling](docs/error-handling.md)**: Structured error taxonomy and recovery patterns for robust agent communication.
+- **[Transport Layer](docs/transport.md)**: HTTP/JSON-RPC binding details, async handlers, and server configuration.
+- **[Security](docs/security.md)**: Production security practices, rate limiting, DoS protection, and authentication.
+- **[Observability](docs/observability.md)**: Tracing, metrics, and logging for debugging multi-agent systems.
+- **[Testing](docs/testing.md)**: Testing strategies and utilities for ASAP-based agents.
 
-### Multi-Agent Flow
+### Examples & Demos
 
-Run the built-in demo to see two agents exchanging messages:
+Run the built-in multi-agent demo to see ASAP in action:
 
 ```bash
 uv run python -m asap.examples.run_demo
 ```
 
-### CLI Tools
-
-The ASAP CLI provides utilities for schema management:
+See [`src/asap/examples/`](src/asap/examples/) for complete example implementations.
 
-```bash
-# Export all JSON schemas
-asap export-schemas --output-dir ./schemas
-
-# List available schemas
-asap list-schemas
-
-# Show a specific schema
-asap show-schema envelope
-
-# Validate JSON against a schema
-asap validate-schema message.json --schema-type envelope
+### CLI Tools
 
-# Verbose output
-asap export-schemas --verbose
-```
+The ASAP CLI provides utilities for schema management. See [CLI documentation](docs/index.md#cli) or run `asap --help` for available commands.
 
 ## Contributing
 
-We love contributions! Whether it's fixing a bug, improving documentation, or proposing a new feature, your help is welcome.
+We love contributions! Whether it's fixing a bug, improving documentation or proposing a new feature.. your help is welcome.
+
+**As an alpha release, community feedback and contributions are essential** for ASAP Protocol's evolution. We're actively working on improvements and your input helps shape the future of the protocol. Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.
 
 Check out our [Contributing Guidelines](CONTRIBUTING.md) to get started. It's easier than you think! 🚀
 

asap_protocol-0.5.0.dist-info/RECORD

@@ -0,0 +1,41 @@
+asap/__init__.py,sha256=Mhc6RFW5rBP7ZrgHSJ4Lsha1ajo1WT7VWtEdGe_f9ng,169
+asap/cli.py,sha256=JzMA3t2Gn94kunkn5bgAkl6ZgzgwGtL5QFcKLYqWZYA,6621
+asap/errors.py,sha256=pc4QQfseteEujGp3bDH-IiPpr-xh1N6DvDL5faiFY9M,11917
+asap/schemas.py,sha256=c9MttEoI4mgXFHDFzphSRAJhw7cpy2rcnXH31jlo1sQ,6135
+asap/examples/README.md,sha256=0XSkQaP5mRYZPtzEf1gYu6HbZw84vrd77pYtx7doHHM,1002
+asap/examples/__init__.py,sha256=LaEkmPQ4tpYrkLFjBE_aodjW3_XUcKWoFLGVFD5kuvo,56
+asap/examples/coordinator.py,sha256=C5Ugi47PGwtbRao8eD29v2l_9tww2_sL-kXK5jQaWGw,5370
+asap/examples/echo_agent.py,sha256=cmNjEx28jCNcU4waYFOZ8ZcHxth1znMOhmaGXIquJzA,2947
+asap/examples/run_demo.py,sha256=GLbtcpggAZfoDSFXpXJf8kdn9jg4HVblg4h3_5u6jrM,4056
+asap/models/__init__.py,sha256=c9TDscYv-_2U8OlEt7G-Il02flISgGbckZu4RtDwgDk,2643
+asap/models/base.py,sha256=PvLkFinOzfU6DDJ4pXMku7PK_2Xsaprh055mJKbdPUA,2008
+asap/models/constants.py,sha256=r-KekW8tmCpsYuUN9Fay-gGc-1T7T4S2pn8-MwO4qAI,3155
+asap/models/entities.py,sha256=Ah2k-aXO9mDLcMUjJ88ZKhpcKiRr4KzQ4HWvMiCuBhY,17938
+asap/models/enums.py,sha256=q8tnW10AT94hxDFoH1Psg1a1x4tzs47x12N7RTGLNRQ,1644
+asap/models/envelope.py,sha256=3EZ7QGi9lVeNN4FAmChbRBgPIiIxQjB7jDkzN1oeXiM,4022
+asap/models/ids.py,sha256=ttTebUohYD_7Gmyg1GRi1jnRtnLcAL2SiXuOi4vGtb0,1425
+asap/models/parts.py,sha256=XiNvlEEqqb0W8cvvvLHYfzYzLULg7oFStMxm817-IZo,6939
+asap/models/payloads.py,sha256=l0taURdWy09BASSJkiCrR6VixbqzD3HrFdVrFad7YqQ,14867
+asap/models/types.py,sha256=ldWyz6gThlK_cxywxfcIiMLD74_BRV0lbfyussvSURg,978
+asap/observability/__init__.py,sha256=V1bBAZix7_IAoy09ETTlkSsi-1ENq5_EpBhi599EBxE,1145
+asap/observability/logging.py,sha256=1nK1OP-3BBpOf8d5UFmpSP8_mULF5kZ27YoS3S3U1a0,6733
+asap/observability/metrics.py,sha256=5yvXfvQ8FpigJ6pJ3vTQetSCQhPnoUCKywWigrxgnCI,14778
+asap/state/__init__.py,sha256=bV1oO86TReF48C5IaglNr8WHczzAWTpw3n7SyDw04nk,565
+asap/state/machine.py,sha256=1Obl1BcwwU-Xz20MX-layuPh1BVzcI1Kiowl_CueuU4,2795
+asap/state/snapshot.py,sha256=wPc2pnQD_EdPecEndbjIC9mXJep-LCJwtdazGMJSUJc,8654
+asap/transport/__init__.py,sha256=VvtPh5Zr1R3-Y5DSj9NWUyvAdvfC_YRCw_mX1FDMQsg,2619
+asap/transport/circuit_breaker.py,sha256=jnPYxaLJ1_ImbAeKa6RZigM2aBY1sx4Y3qzChn9lhiw,6305
+asap/transport/client.py,sha256=wm_V-I4BUEaMr5ujRlD0l0QmjD2Z8ktQy502zS_79wY,42380
+asap/transport/executors.py,sha256=0UH2cd5fVPGPGtnzmnFq1W8IF9BLjp5grCz3Oucj7CQ,5737
+asap/transport/handlers.py,sha256=BGnAF-RDiZYjdh0V-AqmvqrAkCh_QfI0yO-x1wzxOGQ,15924
+asap/transport/jsonrpc.py,sha256=Cnh6ahoXr4Dkmt2KqoXESDKKs_9MwfsgIjn-TDjpkEQ,5800
+asap/transport/middleware.py,sha256=4WFg2_7NUJcT01VdOEa2UpkyFEcl_ZYcLDBuoYBfTaQ,23372
+asap/transport/server.py,sha256=r0DmPoPyw6drR3W-FE39eWWGSbL42PltogZ3JC3dq3E,45878
+asap/transport/validators.py,sha256=CmaRuBZFB1hzBDxDez3WFaR2Rkqotz3KtcoWzSrdGJM,11041
+asap/utils/__init__.py,sha256=aWEjhGOgrzvBjvMVW1Dg5yJH_xixaOqrsilNdU7zz4A,206
+asap/utils/sanitization.py,sha256=kIkuEuYXhTOxGNyychlBg4ffz4ylq_Tj_-WTi1mf-bg,4305
+asap_protocol-0.5.0.dist-info/METADATA,sha256=LloHREQmhwaBilILZQacR514Ptv7HcRslu-LZfGkoDg,11197
+asap_protocol-0.5.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+asap_protocol-0.5.0.dist-info/entry_points.txt,sha256=H_u_JamRG5mGQTXwnCFljBFep6lZPuln9NPLfgq1naM,39
+asap_protocol-0.5.0.dist-info/licenses/LICENSE,sha256=JmjzvAfg8BUP_0y_hu4SQSUgnSniWe2eBS7x2WPTo2A,10771
+asap_protocol-0.5.0.dist-info/RECORD,,

asap_protocol-0.1.0.dist-info/RECORD

@@ -1,36 +0,0 @@
-asap/__init__.py,sha256=YW8oB4OJk7hQo15mjC11rBxXws105kyFXhM_TemD2nI,169
-asap/cli.py,sha256=JzMA3t2Gn94kunkn5bgAkl6ZgzgwGtL5QFcKLYqWZYA,6621
-asap/errors.py,sha256=S0eifqXZd1f9PJKeo8EKF0x1-Yh5m6eGWoxCVEYgeRg,4994
-asap/schemas.py,sha256=c9MttEoI4mgXFHDFzphSRAJhw7cpy2rcnXH31jlo1sQ,6135
-asap/examples/README.md,sha256=xqMIMcZANi1eML6t4cNJ3rG6MjySf2SchgFiecxKpik,765
-asap/examples/__init__.py,sha256=LaEkmPQ4tpYrkLFjBE_aodjW3_XUcKWoFLGVFD5kuvo,56
-asap/examples/coordinator.py,sha256=hBwyNgJ7SgBl8OoliLtiaN_dpOVW2UXgwje05ThgvJc,5370
-asap/examples/echo_agent.py,sha256=WW-p8fpBvdbRylYSbPqjMkUfSNjqXdi5QL6XLjHoQYM,2947
-asap/examples/run_demo.py,sha256=bFHH4IY-xYXIw66opgKGfmuXSC7_6astkERLtN0a9pw,3700
-asap/models/__init__.py,sha256=iUriI2CN9NcpH1_TyY5PkWiX3Mz7UnJDC9IeJzcWFUI,2511
-asap/models/base.py,sha256=PvLkFinOzfU6DDJ4pXMku7PK_2Xsaprh055mJKbdPUA,2008
-asap/models/constants.py,sha256=Ur8ngPehsOZtFUicVtdHbn1LhsvKjMDqgGMVA7X4kHs,360
-asap/models/entities.py,sha256=siZCt-XqbOSPleXFBvwCSC9sVfZCrydNrUiKso8RHDo,16742
-asap/models/enums.py,sha256=q8tnW10AT94hxDFoH1Psg1a1x4tzs47x12N7RTGLNRQ,1644
-asap/models/envelope.py,sha256=MTlFEmYcT47gpQhOxWYGEUe99hw_woMWqWdp3rZl-co,3733
-asap/models/ids.py,sha256=ttTebUohYD_7Gmyg1GRi1jnRtnLcAL2SiXuOi4vGtb0,1425
-asap/models/parts.py,sha256=XiNvlEEqqb0W8cvvvLHYfzYzLULg7oFStMxm817-IZo,6939
-asap/models/payloads.py,sha256=l0taURdWy09BASSJkiCrR6VixbqzD3HrFdVrFad7YqQ,14867
-asap/models/types.py,sha256=ldWyz6gThlK_cxywxfcIiMLD74_BRV0lbfyussvSURg,978
-asap/observability/__init__.py,sha256=V1bBAZix7_IAoy09ETTlkSsi-1ENq5_EpBhi599EBxE,1145
-asap/observability/logging.py,sha256=1nK1OP-3BBpOf8d5UFmpSP8_mULF5kZ27YoS3S3U1a0,6733
-asap/observability/metrics.py,sha256=k0nr5Ovj0dJBuK1YVy3GvkL2IQSjxMq9FHp4MHT7C2U,14685
-asap/state/__init__.py,sha256=bV1oO86TReF48C5IaglNr8WHczzAWTpw3n7SyDw04nk,565
-asap/state/machine.py,sha256=1Obl1BcwwU-Xz20MX-layuPh1BVzcI1Kiowl_CueuU4,2795
-asap/state/snapshot.py,sha256=wPc2pnQD_EdPecEndbjIC9mXJep-LCJwtdazGMJSUJc,8654
-asap/transport/__init__.py,sha256=rX_hcnm0c-XxJKvxc4H2b_APNIVmdvXphRIqDrDWC8U,2506
-asap/transport/client.py,sha256=fHzz8M_qeNMLZhDxsOWeAVMXMNeOHFnmovptBMDsN2I,14325
-asap/transport/handlers.py,sha256=t7VKooeoP4eaqV4IFCymCIEECDBk3KxNgC5x2D_FJ00,15238
-asap/transport/jsonrpc.py,sha256=Cnh6ahoXr4Dkmt2KqoXESDKKs_9MwfsgIjn-TDjpkEQ,5800
-asap/transport/middleware.py,sha256=bijTgqKbYQ32Wz869y2nCPNs7YGXgoQc6xxagdqZbC0,12666
-asap/transport/server.py,sha256=7bMecSo8w__wwlmAe-kwYAJoZ3e6cz590_QCf8m0x70,27924
-asap_protocol-0.1.0.dist-info/METADATA,sha256=DRmzSrjqSZaGbaaTrIkX7EZR-Gg3duaNZYI8SK7Y0a8,8342
-asap_protocol-0.1.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-asap_protocol-0.1.0.dist-info/entry_points.txt,sha256=H_u_JamRG5mGQTXwnCFljBFep6lZPuln9NPLfgq1naM,39
-asap_protocol-0.1.0.dist-info/licenses/LICENSE,sha256=JmjzvAfg8BUP_0y_hu4SQSUgnSniWe2eBS7x2WPTo2A,10771
-asap_protocol-0.1.0.dist-info/RECORD,,