asap-protocol 0.3.0__py3-none-any.whl → 0.5.0__py3-none-any.whl

{asap_protocol-0.3.0.dist-info → asap_protocol-0.5.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: asap-protocol
-Version: 0.3.0
+Version: 0.5.0
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
 Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
 Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
@@ -49,9 +49,9 @@ Description-Content-Type: text/markdown
 
 > A streamlined, scalable, asynchronous protocol for agent-to-agent communication and task coordination. Built as a simpler, more powerful alternative to A2A with native MCP integration and stateful orchestration.
 
-**Quick Info**: `v0.3.0` | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](CHANGELOG.md)
+**Quick Info**: `v0.5.0` | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](CHANGELOG.md)
 
-⚠️ **Alpha Release**: ASAP Protocol is currently in **alpha** (v0.3.0). We're actively developing and improving the protocol based on real-world usage. Your feedback, contributions, and suggestions are essential to help us evolve and make ASAP better for the entire community. See our [Contributing](#contributing) section to get involved!
+⚠️ **Alpha Release**: ASAP Protocol is currently in **alpha** (v0.5.0). We're actively developing and improving the protocol based on real-world usage. Your feedback, contributions, and suggestions are essential to help us evolve and make ASAP better for the entire community. See our [Contributing](#contributing) section to get involved!
 
 ## Why ASAP?
 
@@ -62,6 +62,18 @@ Building multi-agent systems today suffers from three core technical challenges
 
 **ASAP** provides a production-ready communication layer that simplifies these complexities. It introduces a standardized, stateful orchestration framework that ensures your agents can coordinate reliably across distributed environments.
 
+### Security-First Design
+
+v0.5.0 introduces comprehensive security hardening:
+- **Authentication**: Bearer token authentication with configurable token validators
+- **Replay Attack Prevention**: Timestamp validation (5-minute window) and optional nonce tracking
+- **DoS Protection**: Built-in rate limiting (100 req/min), request size limits (10MB), and thread pool bounds
+- **HTTPS Enforcement**: Client-side HTTPS validation in production mode
+- **Secure Logging**: Automatic sanitization of sensitive data (tokens, credentials, nonces) in logs
+- **Input Validation**: Strict schema validation with Pydantic v2 for all incoming requests
+
+All security features are **opt-in** to maintain backward compatibility with existing deployments.
+
 ### Key Features
 
 - **Stateful Orchestration**: Native task state machine with built-in snapshotting for durable, resumable agent workflows.
@@ -70,6 +82,7 @@ Building multi-agent systems today suffers from three core technical challenges
 - **Observable Chains**: First-class support for `trace_id` and `correlation_id` to debug complex multi-agent delegation.
 - **MCP Integration**: Uses the Model Context Protocol (MCP) as a tool-execution substrate, wrapped in a high-level coordination envelope.
 - **Async-Native**: Engineered from the ground up for high-concurrency environments using `asyncio` and `httpx`. Supports both sync and async handlers with automatic event loop management.
+- **Security-Hardened (v0.5.0)**: Authentication (Bearer tokens), replay attack prevention (timestamp + nonce validation), HTTPS enforcement, secure logging, and comprehensive input validation. All security features are opt-in for backward compatibility.
 - **DoS Protection**: Built-in rate limiting (100 req/min), request size limits (10MB), and thread pool bounds to prevent resource exhaustion attacks.
 
 💡 **Performance Note**: Pure Python codebase leveraging Rust-accelerated dependencies (`pydantic-core`, `orjson`, `python-ulid`) for native-level performance without build complexity.
@@ -110,13 +123,15 @@ from asap.transport.server import create_app
 manifest = Manifest(
     id="urn:asap:agent:echo-agent",
     name="Echo Agent",
-    version="0.3.0",
+    version="0.5.0",
     description="Echoes task input as output",
     capabilities=Capability(
         asap_version="0.1",
         skills=[Skill(id="echo", description="Echo back the input")],
         state_persistence=False,
     ),
+    # Development: HTTP localhost is allowed
+    # Production: Always use HTTPS (e.g., "https://api.example.com/asap")
     endpoints=Endpoint(asap="http://127.0.0.1:8001/asap"),
 )
 
@@ -147,6 +162,8 @@ async def main():
         payload_type="task.request",
         payload=request.model_dump(),
     )
+    # Development: HTTP localhost is allowed (with warning)
+    # Production: Always use HTTPS (e.g., "https://api.example.com")
     async with ASAPClient("http://127.0.0.1:8001") as client:
         response = await client.send(envelope)
         print(response.payload)
@@ -187,7 +204,7 @@ ASAP is ideal for:
 - **MCP integration**: Agents that need to execute tools via Model Context Protocol
 - **Production systems**: High-performance, type-safe agent communication
 
-If you're building simple point-to-point agent communication, a basic HTTP API might suffice. ASAP shines when you need orchestration, state management, and multi-agent coordination.
+If you're building simple point-to-point agent communication, a basic HTTP API might suffice. ASAP shines when you need orchestration, state management and multi-agent coordination.
 
 ## Advanced Topics
 

{asap_protocol-0.3.0.dist-info → asap_protocol-0.5.0.dist-info}/RECORD

@@ -1,18 +1,18 @@
-asap/__init__.py,sha256=kyqepZHflLpgwKPTQYlSrCZpSa9i9moeiyiaYMTvbHw,169
+asap/__init__.py,sha256=Mhc6RFW5rBP7ZrgHSJ4Lsha1ajo1WT7VWtEdGe_f9ng,169
 asap/cli.py,sha256=JzMA3t2Gn94kunkn5bgAkl6ZgzgwGtL5QFcKLYqWZYA,6621
-asap/errors.py,sha256=Kqj6fLhVjwHWYcZU_U7ZgK75HPGKUq5jAgL1-wQjb40,6396
+asap/errors.py,sha256=pc4QQfseteEujGp3bDH-IiPpr-xh1N6DvDL5faiFY9M,11917
 asap/schemas.py,sha256=c9MttEoI4mgXFHDFzphSRAJhw7cpy2rcnXH31jlo1sQ,6135
-asap/examples/README.md,sha256=xqMIMcZANi1eML6t4cNJ3rG6MjySf2SchgFiecxKpik,765
+asap/examples/README.md,sha256=0XSkQaP5mRYZPtzEf1gYu6HbZw84vrd77pYtx7doHHM,1002
 asap/examples/__init__.py,sha256=LaEkmPQ4tpYrkLFjBE_aodjW3_XUcKWoFLGVFD5kuvo,56
 asap/examples/coordinator.py,sha256=C5Ugi47PGwtbRao8eD29v2l_9tww2_sL-kXK5jQaWGw,5370
 asap/examples/echo_agent.py,sha256=cmNjEx28jCNcU4waYFOZ8ZcHxth1znMOhmaGXIquJzA,2947
-asap/examples/run_demo.py,sha256=bFHH4IY-xYXIw66opgKGfmuXSC7_6astkERLtN0a9pw,3700
-asap/models/__init__.py,sha256=iUriI2CN9NcpH1_TyY5PkWiX3Mz7UnJDC9IeJzcWFUI,2511
+asap/examples/run_demo.py,sha256=GLbtcpggAZfoDSFXpXJf8kdn9jg4HVblg4h3_5u6jrM,4056
+asap/models/__init__.py,sha256=c9TDscYv-_2U8OlEt7G-Il02flISgGbckZu4RtDwgDk,2643
 asap/models/base.py,sha256=PvLkFinOzfU6DDJ4pXMku7PK_2Xsaprh055mJKbdPUA,2008
-asap/models/constants.py,sha256=AEPklwTNZbYnSRsZ6HIeVI8F8T_zt1nZVzZPkqXo1rY,425
-asap/models/entities.py,sha256=siZCt-XqbOSPleXFBvwCSC9sVfZCrydNrUiKso8RHDo,16742
+asap/models/constants.py,sha256=r-KekW8tmCpsYuUN9Fay-gGc-1T7T4S2pn8-MwO4qAI,3155
+asap/models/entities.py,sha256=Ah2k-aXO9mDLcMUjJ88ZKhpcKiRr4KzQ4HWvMiCuBhY,17938
 asap/models/enums.py,sha256=q8tnW10AT94hxDFoH1Psg1a1x4tzs47x12N7RTGLNRQ,1644
-asap/models/envelope.py,sha256=MTlFEmYcT47gpQhOxWYGEUe99hw_woMWqWdp3rZl-co,3733
+asap/models/envelope.py,sha256=3EZ7QGi9lVeNN4FAmChbRBgPIiIxQjB7jDkzN1oeXiM,4022
 asap/models/ids.py,sha256=ttTebUohYD_7Gmyg1GRi1jnRtnLcAL2SiXuOi4vGtb0,1425
 asap/models/parts.py,sha256=XiNvlEEqqb0W8cvvvLHYfzYzLULg7oFStMxm817-IZo,6939
 asap/models/payloads.py,sha256=l0taURdWy09BASSJkiCrR6VixbqzD3HrFdVrFad7YqQ,14867
@@ -23,15 +23,19 @@ asap/observability/metrics.py,sha256=5yvXfvQ8FpigJ6pJ3vTQetSCQhPnoUCKywWigrxgnCI
 asap/state/__init__.py,sha256=bV1oO86TReF48C5IaglNr8WHczzAWTpw3n7SyDw04nk,565
 asap/state/machine.py,sha256=1Obl1BcwwU-Xz20MX-layuPh1BVzcI1Kiowl_CueuU4,2795
 asap/state/snapshot.py,sha256=wPc2pnQD_EdPecEndbjIC9mXJep-LCJwtdazGMJSUJc,8654
-asap/transport/__init__.py,sha256=rX_hcnm0c-XxJKvxc4H2b_APNIVmdvXphRIqDrDWC8U,2506
-asap/transport/client.py,sha256=fHzz8M_qeNMLZhDxsOWeAVMXMNeOHFnmovptBMDsN2I,14325
+asap/transport/__init__.py,sha256=VvtPh5Zr1R3-Y5DSj9NWUyvAdvfC_YRCw_mX1FDMQsg,2619
+asap/transport/circuit_breaker.py,sha256=jnPYxaLJ1_ImbAeKa6RZigM2aBY1sx4Y3qzChn9lhiw,6305
+asap/transport/client.py,sha256=wm_V-I4BUEaMr5ujRlD0l0QmjD2Z8ktQy502zS_79wY,42380
 asap/transport/executors.py,sha256=0UH2cd5fVPGPGtnzmnFq1W8IF9BLjp5grCz3Oucj7CQ,5737
 asap/transport/handlers.py,sha256=BGnAF-RDiZYjdh0V-AqmvqrAkCh_QfI0yO-x1wzxOGQ,15924
 asap/transport/jsonrpc.py,sha256=Cnh6ahoXr4Dkmt2KqoXESDKKs_9MwfsgIjn-TDjpkEQ,5800
-asap/transport/middleware.py,sha256=pcY3SIynXY2ZrHg4_xlSHrPQeyjfrnOT51bNXevEAqQ,23276
-asap/transport/server.py,sha256=Ev5Q--9ZdEHd2m-xi-TH24HHT0o6UX6pLzlsoU0l29Q,42575
-asap_protocol-0.3.0.dist-info/METADATA,sha256=cjtpIzaR1QND7YiGII29-3PhhrhmDhShMbe2FHtHRQs,9954
-asap_protocol-0.3.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-asap_protocol-0.3.0.dist-info/entry_points.txt,sha256=H_u_JamRG5mGQTXwnCFljBFep6lZPuln9NPLfgq1naM,39
-asap_protocol-0.3.0.dist-info/licenses/LICENSE,sha256=JmjzvAfg8BUP_0y_hu4SQSUgnSniWe2eBS7x2WPTo2A,10771
-asap_protocol-0.3.0.dist-info/RECORD,,
+asap/transport/middleware.py,sha256=4WFg2_7NUJcT01VdOEa2UpkyFEcl_ZYcLDBuoYBfTaQ,23372
+asap/transport/server.py,sha256=r0DmPoPyw6drR3W-FE39eWWGSbL42PltogZ3JC3dq3E,45878
+asap/transport/validators.py,sha256=CmaRuBZFB1hzBDxDez3WFaR2Rkqotz3KtcoWzSrdGJM,11041
+asap/utils/__init__.py,sha256=aWEjhGOgrzvBjvMVW1Dg5yJH_xixaOqrsilNdU7zz4A,206
+asap/utils/sanitization.py,sha256=kIkuEuYXhTOxGNyychlBg4ffz4ylq_Tj_-WTi1mf-bg,4305
+asap_protocol-0.5.0.dist-info/METADATA,sha256=LloHREQmhwaBilILZQacR514Ptv7HcRslu-LZfGkoDg,11197
+asap_protocol-0.5.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+asap_protocol-0.5.0.dist-info/entry_points.txt,sha256=H_u_JamRG5mGQTXwnCFljBFep6lZPuln9NPLfgq1naM,39
+asap_protocol-0.5.0.dist-info/licenses/LICENSE,sha256=JmjzvAfg8BUP_0y_hu4SQSUgnSniWe2eBS7x2WPTo2A,10771
+asap_protocol-0.5.0.dist-info/RECORD,,