asap-protocol 2.1.1__tar.gz → 2.2.1__tar.gz

{asap_protocol-2.1.1 → asap_protocol-2.2.1}/.gitignore

@@ -177,9 +177,11 @@ cython_debug/
 
 # Project specific
 !/.cursor/
+/drafts/
 # Strategy docs (private — do not commit)
 .cursor/product-specs/strategy/
 node_modules/
+.pnpm-store/
 .github/wiki/
 
 # Next.js app lib (do not ignore; root lib/ is for Python)
@@ -192,3 +194,5 @@ node_modules/
 
 # ESLint report (generated)
 eslint-report.json
+.vercel
+.env*.local

{asap_protocol-2.1.1 → asap_protocol-2.2.1}/CHANGELOG.md

@@ -7,8 +7,201 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+---
+
+## [2.2.1] - 2026-04-21
+
+Patch release: optional WebAuthn verification, compliance and audit CLIs, docs,
+and CI baselines.
+
 ### Added
-- Future changes will be documented here.
+
+- **WebAuthn (optional extra)**: `asap-protocol[webauthn]` enables real
+  registration/assertion verification when `ASAP_WEBAUTHN_RP_ID` and
+  `ASAP_WEBAUTHN_ORIGIN` are set; otherwise behavior matches v2.2.0. See
+  [v2.2.0 → v2.2.1 migration](docs/migration.md#upgrading-from-v220-to-v221).
+- **`asap compliance-check`**: Runs Compliance Harness v2 against an agent
+  `HTTP(S)` base URL; `--output {text,json}`, `--exit-on-fail`, `--timeout`,
+  `--asap-version`. Documented in [docs/cli.md](docs/cli.md) and
+  [docs/ci-compliance.md](docs/ci-compliance.md) (Actions example with
+  `--exit-on-fail`).
+- **`asap audit export`**: Exports hash-chained audit rows from SQLite or an
+  in-memory store; `--verify-chain` fails on tampering. Documented in
+  [docs/cli.md](docs/cli.md#asap-audit-export) and [docs/audit.md](docs/audit.md).
+- **`apps/example-agent`**: Minimal installable example; CI runs Harness v2 and
+  fails on score < 1.0 (regression guard).
+
+### Security
+
+- **`python-dotenv`**: `tool.uv.override-dependencies` pins **≥ 1.2.2** (CVE-2026-28684)
+  on transitive installs.
+- **`apps/web`**: Dependency updates closing npm audit findings (Next.js 16.2.4;
+  `micromatch` subtree forced to `picomatch` ≥ 2.3.2).
+
+### Changed
+
+- **CLI package layout**: Typer subcommands live under `asap.cli` / `src/asap/cli/`
+  (replacing the monolithic `cli.py` module); `asap` console script unchanged.
+- **`ResolvedAgent.run()`**: Tightens the contract from "tri-branch dict[str, Any]" to
+  "the TaskResponse.result dict, or empty dict if result is None". A protocol violation
+  (server responds with anything other than a TaskResponse envelope) now raises
+  `TypeError` so it surfaces at the call site instead of silently coercing into a dict.
+  Return type annotation remains `dict[str, Any]`; no caller API change. Closes the
+  deferred follow-up from v2.1 PR-73 review.
+- **Dependency pins**: `cryptography`, `authlib`, `joserfc`, `pyjwt`, `webauthn` (extra),
+  and `pydantic` now carry explicit upper bounds to the next major version so breaking
+  upstream releases can't auto-install. Policy + bump procedure documented in
+  [SECURITY.md §Dependency policy](SECURITY.md#dependency-policy).
+- **ID generation**: `asap.state.stores.sqlite`, `asap.economics.storage`,
+  `asap.economics.sla`, and `asap.integrations.a2h` now generate entity IDs through
+  `asap.models.ids.generate_id()` (ULID) instead of ad-hoc `uuid.uuid4()`. The
+  slowapi storage-URI suffix in `asap.transport.rate_limit` remains `uuid.uuid4().hex`
+  because it is a backend namespace, not a domain identifier; an inline comment
+  documents the distinction.
+- **`asap.economics.storage` aggregate dispatch**: The six-branch `cast(list[UsageAggregate], ...)`
+  clusters in `InMemoryMeteringStorage.aggregate` and `SQLiteMeteringStorage.aggregate` are
+  consolidated into a single `_dispatch_aggregate(events, group_by)` helper. Eight
+  scattered casts become three, all documented in one place.
+- **`asap.transport.server` helper types**: `_validate_envelope` and `_dispatch_to_handler`
+  now return a discriminable `EnvelopeOrError = JSONResponse | tuple[Envelope, str]`
+  union instead of `tuple[Envelope | None, JSONResponse | str]`. Callers narrow via
+  `isinstance(result, JSONResponse)` and no longer need `cast()` at the three call
+  sites. Internal-only refactor; public API unchanged.
+- **`WebAuthnVerifierImpl.start_webauthn_*`**: Returns the full
+  `PublicKeyCredentialCreation/RequestOptions` dict from
+  `webauthn.helpers.options_to_json_dict` (previously a bare base64url
+  challenge). Integrators building a browser adapter get `rp`, `user`,
+  `pubKeyCredParams`, `allowCredentials`, and `userVerification` out of the
+  box and no longer need to hand-assemble the options envelope.
+- **`default_webauthn_verifier()`**: The returned verifier is now cached
+  per-process (keyed by `extra_installed / rp_id / origin`). Pending
+  WebAuthn challenges persist across requests when the defensive fallback in
+  `agent_routes._webauthn_verifier` is hit — previously each fallback call
+  rebuilt an empty `InMemoryWebAuthnCredentialStore`, silently discarding
+  any `start_webauthn_assertion` state. Tests can reset the cache with
+  `asap.auth.self_auth.reset_default_webauthn_verifier_cache()`.
+
+### Fixed
+
+- **Swallowed exceptions in `finish_webauthn_assertion`**: Bare
+  `except Exception:` blocks now catch the specific
+  `InvalidAuthenticationResponse` / `ValueError` / `TypeError` classes and
+  emit structured warnings (`asap.webauthn.assertion.invalid`,
+  `.malformed_challenge`, `.challenge_mismatch`, `.unknown_credential`)
+  via `asap.observability.get_logger` so SIEM rules can detect
+  cloned-authenticator and replay patterns.
+- **`WebAuthnCeremonyError` payload**: Public `detail` is now a stable,
+  PII-free identifier (`webauthn_registration_state_missing`,
+  `webauthn_registration_verification_failed`). `host_id` and the upstream
+  library reason are logged internally instead of leaking into the error
+  surface.
+- **`audit export --verify-chain`**: Replaces fragile string-matching on
+  `"AUDIT_CHAIN_BROKEN"` with a dedicated `asap.economics.audit.AuditChainBroken`
+  exception. Invalid `--since` / `--until` ISO-8601 values now surface as
+  `typer.BadParameter` instead of an unhandled traceback.
+- **CSV export determinism**: `asap audit export --format csv` now writes
+  rows with `lineterminator="\n"` for reproducible diffs on Linux CI.
+- **Test fixtures**: `tests/cli/test_compliance_check.py` uvicorn fixtures
+  now stop the server cooperatively via `server.should_exit = True` +
+  `thread.join`, preventing the leaked-socket flakes flagged under
+  `pytest-xdist` on long suites.
+
+### Known limitations
+
+- **No reference HTTP enrollment route** for the WebAuthn registration
+  ceremony. `WebAuthnVerifierImpl.start_webauthn_registration` /
+  `.finish_webauthn_registration` are Python-only helpers in v2.2.1;
+  integrators must expose their own adapter route (see
+  [docs/security/self-authorization-prevention.md](docs/security/self-authorization-prevention.md#known-limitation-no-reference-http-enrollment-route-in-v221)).
+  A first-class `POST /asap/agent/webauthn/register/{begin,finish}` is
+  tracked for v2.3 (Adoption Multiplier), where new endpoint surface area
+  is permitted.
+
+---
+
+## [2.2.0] - 2026-04-15
+
+Protocol Hardening release: per-runtime agent identity, capability-based authorization, approval flows, SSE streaming, structured error taxonomy, version negotiation, and async state stores.
+
+### Added
+
+#### Per-Runtime Agent Identity (S1, ADR-17 extension)
+- **Host/Agent JWT**: `create_host_jwt`, `create_agent_jwt`, `verify_host_jwt`, `verify_agent_jwt` — Ed25519 (EdDSA) JWTs with `jti` replay cache (`auth/agent_jwt.py`)
+- **Identity stores**: `HostIdentity`, `AgentSession`, `HostStore`, `AgentStore`, `InMemoryHostStore`, `InMemoryAgentStore` — per-host and per-agent identity with JWK thumbprint (RFC 7638) (`auth/identity.py`)
+- **Agent endpoints**: `POST /asap/agent/register`, `GET /asap/agent/status`, `POST /asap/agent/revoke`, `POST /asap/agent/rotate-key` — Host JWT Bearer authentication (`transport/agent_routes.py`)
+
+#### Capability-Based Authorization (S1)
+- **Capability system**: `CapabilityDefinition`, `CapabilityGrant`, `CapabilityRegistry`, `validate_constraints` — grants with constraints (`max`, `min`, `in`, `not_in`) (`auth/capabilities.py`)
+- **Capability endpoints**: `GET /asap/capability/list`, `GET /asap/capability/describe`, `POST /asap/capability/execute`, `POST /asap/agent/reactivate` (`transport/capability_routes.py`)
+
+#### Agent Lifecycle (S1)
+- **Session lifecycle**: `check_agent_expiry`, `extend_session`, `reactivate_agent` — TTL-based session management (`auth/lifecycle.py`)
+
+#### Approval Flows (S2)
+- **Device Authorization & CIBA**: `create_device_authorization`, `create_ciba_approval`, `select_approval_method`, `ApprovalStore`, `InMemoryApprovalStore` — RFC 8628 / CIBA-style approval (`auth/approval.py`)
+- **A2H channel**: `A2HApprovalChannel` for agent-to-human approval resolution
+
+#### Self-Auth Prevention (S2)
+- **Fresh session**: `FreshSessionConfig`, `check_fresh_session`, `fresh_session_violation_detail` — time-windowed Host JWT validation (`auth/self_auth.py`)
+- **WebAuthn**: Optional `WebAuthnVerifier` for high-risk capability registration
+
+#### SSE Streaming (S3)
+- **SSE endpoint**: `POST /asap/stream` returns `text/event-stream` with Envelope JSON events (`transport/server.py`)
+- **TaskStream payload**: Streaming chunks with `chunk`, `progress`, `final`, `status` fields (`models/payloads.py`)
+- **Client streaming**: `ASAPClient.stream(envelope)` parses SSE events into Envelope objects (`transport/client.py`)
+- **Streaming handlers**: `HandlerRegistry.register_streaming_handler`, `dispatch_stream_async` for async generator handlers (`transport/handlers.py`)
+
+#### Error Taxonomy (S3, PRD §4.7)
+- **Error hierarchy**: `RecoverableError` / `FatalError` base classes with taxonomy URIs and JSON-RPC codes (-32000 to -32059) (`errors.py`)
+- **Recovery hints**: `retry_after_ms`, `alternative_agents`, `fallback_action` on all ASAP errors
+- **Remote errors**: `RemoteFatalRPCError`, `RemoteRecoverableRPCError` for client-side error reconstruction
+- **Error code registry**: Documented in `docs/error-codes.md`
+
+#### ASAP-Version Negotiation (S4)
+- **Version header**: `ASAP-Version` request/response header for wire-level version negotiation (`models/constants.py`)
+- **Version middleware**: `ASAPVersionMiddleware` validates version on `POST /asap` and `POST /asap/stream`; returns `VERSION_INCOMPATIBLE` JSON-RPC error for unsupported versions (`transport/middleware.py`)
+- **Client negotiation**: `ASAPClient` sends supported versions and tracks `last_response_asap_version` (`transport/client.py`)
+- **Manifest field**: `Manifest.supported_versions` for discovery-time version advertisement
+
+#### Async State Stores (S4)
+- **AsyncSnapshotStore**: Async protocol (`save`, `get`, `list_versions`, `delete`) replacing sync `SnapshotStore` (deprecated) (`state/snapshot.py`)
+- **AsyncMeteringStore**: Async protocol (`record`, `query`, `aggregate`) replacing sync `MeteringStore` (deprecated) (`state/metering.py`)
+- **SQLite async**: `SQLiteAsyncSnapshotStore` with WAL mode and pragma cache (`state/stores/sqlite.py`)
+
+#### JSON-RPC Batch Operations (S5)
+- **Server-side batch**: `POST /asap` accepts JSON arrays per JSON-RPC 2.0 batch spec; processes each request independently and returns array of responses (`transport/server.py`)
+- **Batch size limit**: Configurable `max_batch_size` (default 50); oversized batches rejected with `INVALID_REQUEST` error
+- **Rate limit integration**: `ASAPRateLimiter.check_n()` counts batch sub-requests against rate limits (`transport/rate_limit.py`)
+- **Client batch**: `ASAPClient.batch(envelopes)` sends single HTTP request with JSON array body (`transport/client.py`)
+
+#### Tamper-Evident Audit Logging (S5)
+- **Audit models**: `AuditEntry` with SHA-256 hash chain (`prev_hash` → `hash`) for tamper detection (`economics/audit.py`)
+- **AuditStore protocol**: `append`, `query`, `verify_chain`, `count` — with `InMemoryAuditStore` and `SQLiteAuditStore` implementations
+- **Audit hooks**: Optional `audit_store` parameter in `create_app`; automatic logging of successful message processing
+- **Audit API**: `GET /audit` with `urn`, `start`, `end`, `limit`, `offset` query parameters
+
+#### Compliance Harness v2 (S5)
+- **Harness runner**: `run_compliance_harness_v2(app)` validates ASGI applications against v2.2 spec (`testing/compliance.py`)
+- **Check categories**: Identity, streaming, errors, versioning, batch, audit — each with multiple checks
+- **Compliance report**: `ComplianceReport` with score (0.0–1.0), check results, and JSON export via `to_json()`
+
+### Security
+
+- **Dependency upgrades**: pillow 12.2.0 (CVE-2026-40192), pytest 9.0.3 (CVE-2025-71176), python-multipart 0.0.26 (CVE-2026-40347), langsmith 0.7.32 (GHSA-rr7j-v2q5-chgv)
+- **Self-auth prevention**: Agents cannot register capabilities without fresh host session and optional WebAuthn verification
+- **JTI replay cache**: Prevents JWT replay on mutating agent identity endpoints
+
+### Changed
+
+- **Wire version**: Default transport version bumped from `2.1` to `2.2`; backward compatible with `2.1`
+- **State stores**: `SnapshotStore` and `MeteringStore` sync protocols deprecated in favor of async variants
+
+### Technical Details
+
+- **Python**: 3.13+
+- **Tests**: 2941 passed, 7 skipped; full CI green (ruff, mypy, pytest, pip-audit)
+- **Coverage**: ≥90% for new v2.2 modules
+- **Full Changelog**: https://github.com/adriannoes/asap-protocol/compare/v2.1.1...v2.2.0
 
 ---
 

{asap_protocol-2.1.1 → asap_protocol-2.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: asap-protocol
-Version: 2.1.1
+Version: 2.2.1
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
 Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
 Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
@@ -21,13 +21,13 @@ Classifier: Topic :: System :: Distributed Computing
 Classifier: Typing :: Typed
 Requires-Python: >=3.13
 Requires-Dist: aiosqlite>=0.20
-Requires-Dist: authlib>=1.3
+Requires-Dist: authlib<2,>=1.6.11
 Requires-Dist: brotli>=1.2.0
-Requires-Dist: cryptography>=41.0
+Requires-Dist: cryptography<47,>=46.0.7
 Requires-Dist: fastapi>=0.128.0
 Requires-Dist: httpx[http2]>=0.28.1
 Requires-Dist: jcs>=0.2.0
-Requires-Dist: joserfc>=1.0
+Requires-Dist: joserfc<2,>=1.6.3
 Requires-Dist: jsonschema>=4.23.0
 Requires-Dist: limits>=3.0
 Requires-Dist: opentelemetry-api>=1.20
@@ -36,7 +36,7 @@ Requires-Dist: opentelemetry-instrumentation-fastapi>=0.41
 Requires-Dist: opentelemetry-instrumentation-httpx>=0.41
 Requires-Dist: opentelemetry-sdk>=1.20
 Requires-Dist: packaging>=25.0
-Requires-Dist: pydantic>=2.12.5
+Requires-Dist: pydantic<3,>=2.12.5
 Requires-Dist: python-ulid>=3.0
 Requires-Dist: structlog>=24.1
 Requires-Dist: typer>=0.21.1
@@ -53,7 +53,7 @@ Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
 Requires-Dist: pytest-benchmark>=5.1; extra == 'dev'
 Requires-Dist: pytest-cov>=6.0; extra == 'dev'
 Requires-Dist: pytest-xdist>=3.5.0; extra == 'dev'
-Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.3; extra == 'dev'
 Requires-Dist: ruff>=0.14.14; extra == 'dev'
 Requires-Dist: types-jsonschema>=4.0.0; extra == 'dev'
 Provides-Extra: dns-sd
@@ -62,6 +62,7 @@ Provides-Extra: docs
 Requires-Dist: ghp-import>=2.1.0; extra == 'docs'
 Requires-Dist: mkdocs-material>=9.5; extra == 'docs'
 Requires-Dist: mkdocstrings[python]>=0.27; extra == 'docs'
+Requires-Dist: pymdown-extensions>=10.21; extra == 'docs'
 Provides-Extra: langchain
 Requires-Dist: langchain-core>=0.2; extra == 'langchain'
 Provides-Extra: llamaindex
@@ -76,6 +77,8 @@ Provides-Extra: redis
 Requires-Dist: redis>=5.0.0; extra == 'redis'
 Provides-Extra: smolagents
 Requires-Dist: smolagents>=1.0; extra == 'smolagents'
+Provides-Extra: webauthn
+Requires-Dist: webauthn<3,>=2.6; extra == 'webauthn'
 Description-Content-Type: text/markdown
 
 # ASAP: Async Simple Agent Protocol
@@ -87,9 +90,9 @@ Description-Content-Type: text/markdown
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: `v2.1.0` | `Apache 2.0` | `Python 3.13+` | [Marketplace](https://asap-protocol.vercel.app/) | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
+**Quick Info**: `v2.2.1` | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
 
-> 🚀 **Live now** our agentic marketplace**](https://asap-protocol.vercel.app/) — Browse agents, register yours, request verification.
+> 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.vercel.app/) — browse agents, register yours, request verification.
 
 ## Why ASAP?
 
@@ -98,7 +101,7 @@ Building multi-agent systems today suffers from three core technical challenges
 2. **State Drift**: Lack of native persistence makes it impossible to reliably resume long-running agentic workflows.
 3. **Fragmentation**: No unified way to handle task delegation, artifact exchange and tool execution (MCP) in a single envelope.
 
-**ASAP** provides a production-ready communication layer that simplifies these complexities. It's ideal for **multi-agent orchestration**, **stateful workflows** (persistence, resumability), **MCP integration**, and **production systems** requiring high-performance, type-safe agent communication. 
+**ASAP** provides a production-ready communication layer that simplifies these complexities. It's ideal for **multi-agent orchestration**, **stateful workflows** (persistence, resumability), **MCP support** and **production systems** requiring high-performance, type-safe agent communication. 
 
 For simple point-to-point communication, a basic HTTP API might suffice; ASAP shines when you need orchestration, state management and multi-agent coordination. See the [spec](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/product-specs/strategy/v0-original-specs.md) for details.
 
@@ -109,11 +112,13 @@ For simple point-to-point communication, a basic HTTP API might suffice; ASAP sh
 - **Async-native** — `asyncio` + `httpx`; sync and async handlers supported.
 - **MCP integration** — Tool execution and coordination in a single envelope.
 - **Observable** — `trace_id` and `correlation_id` for debugging.
-- **Security** — Bearer auth, OAuth2/JWT (v1.1), Ed25519 signed manifests (v1.2), optional mTLS, replay prevention, HTTPS, rate limiting. [v1.1 Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (trust limits, Custom Claims).
+- **Security** — Bearer auth, OAuth2/JWT, Ed25519 signed manifests, optional mTLS, replay prevention, HTTPS, rate limiting. [Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (trust limits, Custom Claims).
+- **Identity & capabilities (v2.2, WebAuthn real in v2.2.1)** — Per-runtime Host/Agent JWTs, capability grants with constraints (`max`, `min`, `in`, `not_in`), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via `asap-protocol[webauthn]`).
+- **Streaming & wire protocol (v2.2)** — `POST /asap/stream` (SSE / `TaskStream`), JSON-RPC 2.0 batch on `POST /asap`, `ASAP-Version` negotiation, tamper-evident audit logging, Compliance Harness v2.
 - **Economics** — Usage metering, delegation tokens, SLA framework with breach alerts.
 
 ### 🆕 Framework Ecosystem
-ASAP is built for interoperability. Seamlessly integrate your agents into **OpenClaw**,**LangChain**, **CrewAI** and **LlamaIndex** workflows using our growing library of native adapters and standardized tool-calling schemas.
+ASAP is built for interoperability. Seamlessly integrate your agents into **OpenClaw**, **LangChain**, **CrewAI** and **LlamaIndex** workflows using our growing library of native adapters and standardized tool-calling schemas.
 
 ## Installation
 
@@ -129,7 +134,7 @@ Or with pip:
 pip install asap-protocol
 ```
 
-📦 **Available on [PyPI](https://pypi.org/project/asap-protocol/)**. For reproducible environments, prefer `uv` when possible.
+📦 **Available on [PyPI](https://pypi.org/project/asap-protocol/)** — for reproducible environments, prefer `uv` when possible.
 
 ## Quick Start
 
@@ -168,10 +173,6 @@ pytest --asap-agent-url https://your-agent.example.com -m asap_compliance
 
 See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/compliance-testing.md) for handshake, schema and state machine validation.
 
-## Benchmarks
-
-[Benchmark Results](https://github.com/adriannoes/asap-protocol/blob/main/benchmarks/RESULTS.md): load (1,500+ RPS), stress, memory.
-
 ## Documentation
 
 **Learn**
@@ -187,7 +188,7 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 - [Observability](https://github.com/adriannoes/asap-protocol/blob/main/docs/observability.md) | [Testing](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md)
 
 **Decisions & Operations**
-- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 17 Architecture Decision Records
+- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 19 Architecture Decision Records
 - [Tech Stack](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/dev-planning/architecture/tech-stack-decisions.md) — Rationale for Python, Pydantic, Next.js choices
 - [Deployment](https://github.com/adriannoes/asap-protocol/blob/main/docs/deployment/kubernetes.md) | [Troubleshooting](https://github.com/adriannoes/asap-protocol/blob/main/docs/troubleshooting.md)
 
@@ -196,40 +197,42 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 
 ## CLI
 
-**v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite), and Webhooks. **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md). **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
-
 ```bash
 asap --version                                    # Show version
 asap list-schemas                                 # List all available schemas
 asap export-schemas                               # Export JSON schemas to file
-asap keys generate -o key.pem                     # Generate Ed25519 keypair (v1.2)
-asap manifest sign -k key.pem manifest.json       # Sign manifest (v1.2)
-asap manifest verify signed.json                  # Verify signature (v1.2)
-asap manifest info signed.json                    # Show trust level (v1.2)
+asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
+asap audit export --store memory --format json    # Export audit log (stdout)
+asap keys generate -o key.pem                     # Generate Ed25519 keypair
+asap manifest sign -k key.pem manifest.json       # Sign manifest
+asap manifest verify signed.json                  # Verify signature
+asap manifest info signed.json                    # Show trust level
 ```
 
-See [CLI reference](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) or run `asap --help`.
+See the [CLI reference](docs/cli.md) for `compliance-check` and `audit export` flag details, the [CI compliance gate](docs/ci-compliance.md) for wiring `compliance-check` into GitHub Actions, the [audit export guide](docs/audit.md), [Identity Signing](docs/guides/identity-signing.md), or run `asap --help` for the full command surface.
 
-See [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides) and [Identity Signing](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) for details.
+## Version History
 
-## What's Next? 🔭
+- **v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite) and Webhooks.
+- **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md).
+- **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
+- **v2.0** adds the Lean Marketplace Web App (Next.js), Lite Registry on GitHub Pages, IssueOps registration, OAuth sign-in for developers, and Verified Badge flow.
+- **v2.1** adds the Consumer SDK (`MarketClient`), optional framework extras (LangChain, CrewAI, LlamaIndex, SmolAgents, OpenClaw, …), and registry UX improvements on PyPI.
+- **v2.1.1** is a patch release: JWT algorithm allowlist, SQLite async bridging, optional Redis-backed rate limits, SSRF hardening in the web app, and related reliability fixes (see [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)).
+- **v2.2** adds per-runtime agent identity, capability-based authorization, SSE streaming (`POST /asap/stream`), `ASAP-Version` negotiation, JSON-RPC batch requests, tamper-evident audit logging, async state stores, and Compliance Harness v2.
+- **v2.2.1** closes the SELF-002 follow-up with **real WebAuthn** attestation/assertion via the opt-in `asap-protocol[webauthn]` extra, ships the `asap compliance-check` and `asap audit export` CLIs, promotes the client SDK `ResolvedAgent.run()` to a typed contract (raises `TypeError` on protocol violation), introduces the `asap.economics.audit.AuditChainBroken` exception for scripted tamper handling, and pins upper bounds on security-sensitive deps (`cryptography`, `authlib`, `joserfc`, `pyjwt`, `webauthn`, `pydantic`) — see [dependency policy](https://github.com/adriannoes/asap-protocol/blob/main/SECURITY.md#dependency-policy) and full notes in the [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md).
 
-ASAP is evolving toward an **Agent Marketplace** — an open ecosystem where AI agents discover, trust and collaborate autonomously:
+For a structured index of per-version features, see the [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides).
 
-- **v1.1**: Identity Layer (OAuth2, WebSocket, Discovery) ✅
-- **v1.2**: Trust Layer (Signed Manifests, Compliance Harness, mTLS) ✅
-- **v1.3**: Economics Layer (Metering, SLAs, Delegation) ✅
-- **v1.4**: Resilience & Scale (Type Safety, Storage Pagination) ✅
-- **v2.0**: Agent Marketplace with Web App (Lean Registry, Verified Badge, IssueOps) ✅
-- **v2.1**: PyPI distribution, Consumer SDK, framework integrations (LangChain, CrewAI, LlamaIndex, SmolAgents, OpenClaw) ✅
+## 🔭 What's Next?
 
-See our [vision document](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/product-specs/strategy/vision-agent-marketplace.md) for the full roadmap.
+ASAP is evolving toward an **Agent Marketplace** — an open ecosystem where AI agents discover, trust and collaborate autonomously. See our [vision document](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/product-specs/strategy/vision-agent-marketplace.md) for the full roadmap.
 
 ## Contributing
 
-**Community feedback and contributions are essential** for ASAP Protocol's evolution. 
+**Community feedback and contributions are essential** for ASAP Protocol's evolution. We're working on improvements and your input helps shape the future of the protocol. 
 
-We're working on improvements and your input helps shape the future of the protocol. Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.
+Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.
 
 Check out our [contributing guidelines](https://github.com/adriannoes/asap-protocol/blob/main/CONTRIBUTING.md) to get started. It's easier than you think! 🚀
 
@@ -239,4 +242,4 @@ This project is licensed under the Apache 2.0 License - see the [license](https:
 
 ---
 
-**Built with [Cursor](https://cursor.com/)** using Composer 1.5, Claude Opus 4.6, Gemini 3.1 Pro and Kimi K2.5.
+**Built with [Cursor](https://cursor.com/) and [Claude Code](https://claude.com/claude-code)** — primarily Claude Opus 4.7 (1M context) with Cursor Composer 1.5, Gemini 3.1 Pro, and Kimi K2.5 as collaborators.

{asap_protocol-2.1.1 → asap_protocol-2.2.1}/README.md

@@ -7,9 +7,9 @@
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: `v2.1.0` | `Apache 2.0` | `Python 3.13+` | [Marketplace](https://asap-protocol.vercel.app/) | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
+**Quick Info**: `v2.2.1` | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
 
-> 🚀 **Live now** our agentic marketplace**](https://asap-protocol.vercel.app/) — Browse agents, register yours, request verification.
+> 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.vercel.app/) — browse agents, register yours, request verification.
 
 ## Why ASAP?
 
@@ -18,7 +18,7 @@ Building multi-agent systems today suffers from three core technical challenges
 2. **State Drift**: Lack of native persistence makes it impossible to reliably resume long-running agentic workflows.
 3. **Fragmentation**: No unified way to handle task delegation, artifact exchange and tool execution (MCP) in a single envelope.
 
-**ASAP** provides a production-ready communication layer that simplifies these complexities. It's ideal for **multi-agent orchestration**, **stateful workflows** (persistence, resumability), **MCP integration**, and **production systems** requiring high-performance, type-safe agent communication. 
+**ASAP** provides a production-ready communication layer that simplifies these complexities. It's ideal for **multi-agent orchestration**, **stateful workflows** (persistence, resumability), **MCP support** and **production systems** requiring high-performance, type-safe agent communication. 
 
 For simple point-to-point communication, a basic HTTP API might suffice; ASAP shines when you need orchestration, state management and multi-agent coordination. See the [spec](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/product-specs/strategy/v0-original-specs.md) for details.
 
@@ -29,11 +29,13 @@ For simple point-to-point communication, a basic HTTP API might suffice; ASAP sh
 - **Async-native** — `asyncio` + `httpx`; sync and async handlers supported.
 - **MCP integration** — Tool execution and coordination in a single envelope.
 - **Observable** — `trace_id` and `correlation_id` for debugging.
-- **Security** — Bearer auth, OAuth2/JWT (v1.1), Ed25519 signed manifests (v1.2), optional mTLS, replay prevention, HTTPS, rate limiting. [v1.1 Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (trust limits, Custom Claims).
+- **Security** — Bearer auth, OAuth2/JWT, Ed25519 signed manifests, optional mTLS, replay prevention, HTTPS, rate limiting. [Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (trust limits, Custom Claims).
+- **Identity & capabilities (v2.2, WebAuthn real in v2.2.1)** — Per-runtime Host/Agent JWTs, capability grants with constraints (`max`, `min`, `in`, `not_in`), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via `asap-protocol[webauthn]`).
+- **Streaming & wire protocol (v2.2)** — `POST /asap/stream` (SSE / `TaskStream`), JSON-RPC 2.0 batch on `POST /asap`, `ASAP-Version` negotiation, tamper-evident audit logging, Compliance Harness v2.
 - **Economics** — Usage metering, delegation tokens, SLA framework with breach alerts.
 
 ### 🆕 Framework Ecosystem
-ASAP is built for interoperability. Seamlessly integrate your agents into **OpenClaw**,**LangChain**, **CrewAI** and **LlamaIndex** workflows using our growing library of native adapters and standardized tool-calling schemas.
+ASAP is built for interoperability. Seamlessly integrate your agents into **OpenClaw**, **LangChain**, **CrewAI** and **LlamaIndex** workflows using our growing library of native adapters and standardized tool-calling schemas.
 
 ## Installation
 
@@ -49,7 +51,7 @@ Or with pip:
 pip install asap-protocol
 ```
 
-📦 **Available on [PyPI](https://pypi.org/project/asap-protocol/)**. For reproducible environments, prefer `uv` when possible.
+📦 **Available on [PyPI](https://pypi.org/project/asap-protocol/)** — for reproducible environments, prefer `uv` when possible.
 
 ## Quick Start
 
@@ -88,10 +90,6 @@ pytest --asap-agent-url https://your-agent.example.com -m asap_compliance
 
 See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/compliance-testing.md) for handshake, schema and state machine validation.
 
-## Benchmarks
-
-[Benchmark Results](https://github.com/adriannoes/asap-protocol/blob/main/benchmarks/RESULTS.md): load (1,500+ RPS), stress, memory.
-
 ## Documentation
 
 **Learn**
@@ -107,7 +105,7 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 - [Observability](https://github.com/adriannoes/asap-protocol/blob/main/docs/observability.md) | [Testing](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md)
 
 **Decisions & Operations**
-- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 17 Architecture Decision Records
+- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 19 Architecture Decision Records
 - [Tech Stack](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/dev-planning/architecture/tech-stack-decisions.md) — Rationale for Python, Pydantic, Next.js choices
 - [Deployment](https://github.com/adriannoes/asap-protocol/blob/main/docs/deployment/kubernetes.md) | [Troubleshooting](https://github.com/adriannoes/asap-protocol/blob/main/docs/troubleshooting.md)
 
@@ -116,40 +114,42 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 
 ## CLI
 
-**v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite), and Webhooks. **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md). **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
-
 ```bash
 asap --version                                    # Show version
 asap list-schemas                                 # List all available schemas
 asap export-schemas                               # Export JSON schemas to file
-asap keys generate -o key.pem                     # Generate Ed25519 keypair (v1.2)
-asap manifest sign -k key.pem manifest.json       # Sign manifest (v1.2)
-asap manifest verify signed.json                  # Verify signature (v1.2)
-asap manifest info signed.json                    # Show trust level (v1.2)
+asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
+asap audit export --store memory --format json    # Export audit log (stdout)
+asap keys generate -o key.pem                     # Generate Ed25519 keypair
+asap manifest sign -k key.pem manifest.json       # Sign manifest
+asap manifest verify signed.json                  # Verify signature
+asap manifest info signed.json                    # Show trust level
 ```
 
-See [CLI reference](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) or run `asap --help`.
+See the [CLI reference](docs/cli.md) for `compliance-check` and `audit export` flag details, the [CI compliance gate](docs/ci-compliance.md) for wiring `compliance-check` into GitHub Actions, the [audit export guide](docs/audit.md), [Identity Signing](docs/guides/identity-signing.md), or run `asap --help` for the full command surface.
 
-See [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides) and [Identity Signing](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) for details.
+## Version History
 
-## What's Next? 🔭
+- **v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite) and Webhooks.
+- **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md).
+- **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
+- **v2.0** adds the Lean Marketplace Web App (Next.js), Lite Registry on GitHub Pages, IssueOps registration, OAuth sign-in for developers, and Verified Badge flow.
+- **v2.1** adds the Consumer SDK (`MarketClient`), optional framework extras (LangChain, CrewAI, LlamaIndex, SmolAgents, OpenClaw, …), and registry UX improvements on PyPI.
+- **v2.1.1** is a patch release: JWT algorithm allowlist, SQLite async bridging, optional Redis-backed rate limits, SSRF hardening in the web app, and related reliability fixes (see [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)).
+- **v2.2** adds per-runtime agent identity, capability-based authorization, SSE streaming (`POST /asap/stream`), `ASAP-Version` negotiation, JSON-RPC batch requests, tamper-evident audit logging, async state stores, and Compliance Harness v2.
+- **v2.2.1** closes the SELF-002 follow-up with **real WebAuthn** attestation/assertion via the opt-in `asap-protocol[webauthn]` extra, ships the `asap compliance-check` and `asap audit export` CLIs, promotes the client SDK `ResolvedAgent.run()` to a typed contract (raises `TypeError` on protocol violation), introduces the `asap.economics.audit.AuditChainBroken` exception for scripted tamper handling, and pins upper bounds on security-sensitive deps (`cryptography`, `authlib`, `joserfc`, `pyjwt`, `webauthn`, `pydantic`) — see [dependency policy](https://github.com/adriannoes/asap-protocol/blob/main/SECURITY.md#dependency-policy) and full notes in the [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md).
 
-ASAP is evolving toward an **Agent Marketplace** — an open ecosystem where AI agents discover, trust and collaborate autonomously:
+For a structured index of per-version features, see the [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides).
 
-- **v1.1**: Identity Layer (OAuth2, WebSocket, Discovery) ✅
-- **v1.2**: Trust Layer (Signed Manifests, Compliance Harness, mTLS) ✅
-- **v1.3**: Economics Layer (Metering, SLAs, Delegation) ✅
-- **v1.4**: Resilience & Scale (Type Safety, Storage Pagination) ✅
-- **v2.0**: Agent Marketplace with Web App (Lean Registry, Verified Badge, IssueOps) ✅
-- **v2.1**: PyPI distribution, Consumer SDK, framework integrations (LangChain, CrewAI, LlamaIndex, SmolAgents, OpenClaw) ✅
+## 🔭 What's Next?
 
-See our [vision document](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/product-specs/strategy/vision-agent-marketplace.md) for the full roadmap.
+ASAP is evolving toward an **Agent Marketplace** — an open ecosystem where AI agents discover, trust and collaborate autonomously. See our [vision document](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/product-specs/strategy/vision-agent-marketplace.md) for the full roadmap.
 
 ## Contributing
 
-**Community feedback and contributions are essential** for ASAP Protocol's evolution. 
+**Community feedback and contributions are essential** for ASAP Protocol's evolution. We're working on improvements and your input helps shape the future of the protocol. 
 
-We're working on improvements and your input helps shape the future of the protocol. Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.
+Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.
 
 Check out our [contributing guidelines](https://github.com/adriannoes/asap-protocol/blob/main/CONTRIBUTING.md) to get started. It's easier than you think! 🚀
 
@@ -159,4 +159,4 @@ This project is licensed under the Apache 2.0 License - see the [license](https:
 
 ---
 
-**Built with [Cursor](https://cursor.com/)** using Composer 1.5, Claude Opus 4.6, Gemini 3.1 Pro and Kimi K2.5.
+**Built with [Cursor](https://cursor.com/) and [Claude Code](https://claude.com/claude-code)** — primarily Claude Opus 4.7 (1M context) with Cursor Composer 1.5, Gemini 3.1 Pro, and Kimi K2.5 as collaborators.