asap-protocol 2.2.0__tar.gz → 2.2.1__tar.gz

{asap_protocol-2.2.0 → asap_protocol-2.2.1}/.gitignore

@@ -194,3 +194,5 @@ node_modules/
 
 # ESLint report (generated)
 eslint-report.json
+.vercel
+.env*.local

{asap_protocol-2.2.0 → asap_protocol-2.2.1}/CHANGELOG.md

@@ -7,8 +7,115 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+---
+
+## [2.2.1] - 2026-04-21
+
+Patch release: optional WebAuthn verification, compliance and audit CLIs, docs,
+and CI baselines.
+
 ### Added
-- Future changes will be documented here.
+
+- **WebAuthn (optional extra)**: `asap-protocol[webauthn]` enables real
+  registration/assertion verification when `ASAP_WEBAUTHN_RP_ID` and
+  `ASAP_WEBAUTHN_ORIGIN` are set; otherwise behavior matches v2.2.0. See
+  [v2.2.0 → v2.2.1 migration](docs/migration.md#upgrading-from-v220-to-v221).
+- **`asap compliance-check`**: Runs Compliance Harness v2 against an agent
+  `HTTP(S)` base URL; `--output {text,json}`, `--exit-on-fail`, `--timeout`,
+  `--asap-version`. Documented in [docs/cli.md](docs/cli.md) and
+  [docs/ci-compliance.md](docs/ci-compliance.md) (Actions example with
+  `--exit-on-fail`).
+- **`asap audit export`**: Exports hash-chained audit rows from SQLite or an
+  in-memory store; `--verify-chain` fails on tampering. Documented in
+  [docs/cli.md](docs/cli.md#asap-audit-export) and [docs/audit.md](docs/audit.md).
+- **`apps/example-agent`**: Minimal installable example; CI runs Harness v2 and
+  fails on score < 1.0 (regression guard).
+
+### Security
+
+- **`python-dotenv`**: `tool.uv.override-dependencies` pins **≥ 1.2.2** (CVE-2026-28684)
+  on transitive installs.
+- **`apps/web`**: Dependency updates closing npm audit findings (Next.js 16.2.4;
+  `micromatch` subtree forced to `picomatch` ≥ 2.3.2).
+
+### Changed
+
+- **CLI package layout**: Typer subcommands live under `asap.cli` / `src/asap/cli/`
+  (replacing the monolithic `cli.py` module); `asap` console script unchanged.
+- **`ResolvedAgent.run()`**: Tightens the contract from "tri-branch dict[str, Any]" to
+  "the TaskResponse.result dict, or empty dict if result is None". A protocol violation
+  (server responds with anything other than a TaskResponse envelope) now raises
+  `TypeError` so it surfaces at the call site instead of silently coercing into a dict.
+  Return type annotation remains `dict[str, Any]`; no caller API change. Closes the
+  deferred follow-up from v2.1 PR-73 review.
+- **Dependency pins**: `cryptography`, `authlib`, `joserfc`, `pyjwt`, `webauthn` (extra),
+  and `pydantic` now carry explicit upper bounds to the next major version so breaking
+  upstream releases can't auto-install. Policy + bump procedure documented in
+  [SECURITY.md §Dependency policy](SECURITY.md#dependency-policy).
+- **ID generation**: `asap.state.stores.sqlite`, `asap.economics.storage`,
+  `asap.economics.sla`, and `asap.integrations.a2h` now generate entity IDs through
+  `asap.models.ids.generate_id()` (ULID) instead of ad-hoc `uuid.uuid4()`. The
+  slowapi storage-URI suffix in `asap.transport.rate_limit` remains `uuid.uuid4().hex`
+  because it is a backend namespace, not a domain identifier; an inline comment
+  documents the distinction.
+- **`asap.economics.storage` aggregate dispatch**: The six-branch `cast(list[UsageAggregate], ...)`
+  clusters in `InMemoryMeteringStorage.aggregate` and `SQLiteMeteringStorage.aggregate` are
+  consolidated into a single `_dispatch_aggregate(events, group_by)` helper. Eight
+  scattered casts become three, all documented in one place.
+- **`asap.transport.server` helper types**: `_validate_envelope` and `_dispatch_to_handler`
+  now return a discriminable `EnvelopeOrError = JSONResponse | tuple[Envelope, str]`
+  union instead of `tuple[Envelope | None, JSONResponse | str]`. Callers narrow via
+  `isinstance(result, JSONResponse)` and no longer need `cast()` at the three call
+  sites. Internal-only refactor; public API unchanged.
+- **`WebAuthnVerifierImpl.start_webauthn_*`**: Returns the full
+  `PublicKeyCredentialCreation/RequestOptions` dict from
+  `webauthn.helpers.options_to_json_dict` (previously a bare base64url
+  challenge). Integrators building a browser adapter get `rp`, `user`,
+  `pubKeyCredParams`, `allowCredentials`, and `userVerification` out of the
+  box and no longer need to hand-assemble the options envelope.
+- **`default_webauthn_verifier()`**: The returned verifier is now cached
+  per-process (keyed by `extra_installed / rp_id / origin`). Pending
+  WebAuthn challenges persist across requests when the defensive fallback in
+  `agent_routes._webauthn_verifier` is hit — previously each fallback call
+  rebuilt an empty `InMemoryWebAuthnCredentialStore`, silently discarding
+  any `start_webauthn_assertion` state. Tests can reset the cache with
+  `asap.auth.self_auth.reset_default_webauthn_verifier_cache()`.
+
+### Fixed
+
+- **Swallowed exceptions in `finish_webauthn_assertion`**: Bare
+  `except Exception:` blocks now catch the specific
+  `InvalidAuthenticationResponse` / `ValueError` / `TypeError` classes and
+  emit structured warnings (`asap.webauthn.assertion.invalid`,
+  `.malformed_challenge`, `.challenge_mismatch`, `.unknown_credential`)
+  via `asap.observability.get_logger` so SIEM rules can detect
+  cloned-authenticator and replay patterns.
+- **`WebAuthnCeremonyError` payload**: Public `detail` is now a stable,
+  PII-free identifier (`webauthn_registration_state_missing`,
+  `webauthn_registration_verification_failed`). `host_id` and the upstream
+  library reason are logged internally instead of leaking into the error
+  surface.
+- **`audit export --verify-chain`**: Replaces fragile string-matching on
+  `"AUDIT_CHAIN_BROKEN"` with a dedicated `asap.economics.audit.AuditChainBroken`
+  exception. Invalid `--since` / `--until` ISO-8601 values now surface as
+  `typer.BadParameter` instead of an unhandled traceback.
+- **CSV export determinism**: `asap audit export --format csv` now writes
+  rows with `lineterminator="\n"` for reproducible diffs on Linux CI.
+- **Test fixtures**: `tests/cli/test_compliance_check.py` uvicorn fixtures
+  now stop the server cooperatively via `server.should_exit = True` +
+  `thread.join`, preventing the leaked-socket flakes flagged under
+  `pytest-xdist` on long suites.
+
+### Known limitations
+
+- **No reference HTTP enrollment route** for the WebAuthn registration
+  ceremony. `WebAuthnVerifierImpl.start_webauthn_registration` /
+  `.finish_webauthn_registration` are Python-only helpers in v2.2.1;
+  integrators must expose their own adapter route (see
+  [docs/security/self-authorization-prevention.md](docs/security/self-authorization-prevention.md#known-limitation-no-reference-http-enrollment-route-in-v221)).
+  A first-class `POST /asap/agent/webauthn/register/{begin,finish}` is
+  tracked for v2.3 (Adoption Multiplier), where new endpoint surface area
+  is permitted.
 
 ---
 

{asap_protocol-2.2.0 → asap_protocol-2.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: asap-protocol
-Version: 2.2.0
+Version: 2.2.1
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
 Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
 Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
@@ -21,13 +21,13 @@ Classifier: Topic :: System :: Distributed Computing
 Classifier: Typing :: Typed
 Requires-Python: >=3.13
 Requires-Dist: aiosqlite>=0.20
-Requires-Dist: authlib>=1.6.9
+Requires-Dist: authlib<2,>=1.6.11
 Requires-Dist: brotli>=1.2.0
-Requires-Dist: cryptography>=46.0.7
+Requires-Dist: cryptography<47,>=46.0.7
 Requires-Dist: fastapi>=0.128.0
 Requires-Dist: httpx[http2]>=0.28.1
 Requires-Dist: jcs>=0.2.0
-Requires-Dist: joserfc>=1.6.3
+Requires-Dist: joserfc<2,>=1.6.3
 Requires-Dist: jsonschema>=4.23.0
 Requires-Dist: limits>=3.0
 Requires-Dist: opentelemetry-api>=1.20
@@ -36,7 +36,7 @@ Requires-Dist: opentelemetry-instrumentation-fastapi>=0.41
 Requires-Dist: opentelemetry-instrumentation-httpx>=0.41
 Requires-Dist: opentelemetry-sdk>=1.20
 Requires-Dist: packaging>=25.0
-Requires-Dist: pydantic>=2.12.5
+Requires-Dist: pydantic<3,>=2.12.5
 Requires-Dist: python-ulid>=3.0
 Requires-Dist: structlog>=24.1
 Requires-Dist: typer>=0.21.1
@@ -77,6 +77,8 @@ Provides-Extra: redis
 Requires-Dist: redis>=5.0.0; extra == 'redis'
 Provides-Extra: smolagents
 Requires-Dist: smolagents>=1.0; extra == 'smolagents'
+Provides-Extra: webauthn
+Requires-Dist: webauthn<3,>=2.6; extra == 'webauthn'
 Description-Content-Type: text/markdown
 
 # ASAP: Async Simple Agent Protocol
@@ -88,9 +90,9 @@ Description-Content-Type: text/markdown
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: `v2.1.1` | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
+**Quick Info**: `v2.2.1` | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
 
-> 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.vercel.app/) — Browse agents, register yours, request verification.
+> 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.vercel.app/) — browse agents, register yours, request verification.
 
 ## Why ASAP?
 
@@ -111,6 +113,8 @@ For simple point-to-point communication, a basic HTTP API might suffice; ASAP sh
 - **MCP integration** — Tool execution and coordination in a single envelope.
 - **Observable** — `trace_id` and `correlation_id` for debugging.
 - **Security** — Bearer auth, OAuth2/JWT, Ed25519 signed manifests, optional mTLS, replay prevention, HTTPS, rate limiting. [Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (trust limits, Custom Claims).
+- **Identity & capabilities (v2.2, WebAuthn real in v2.2.1)** — Per-runtime Host/Agent JWTs, capability grants with constraints (`max`, `min`, `in`, `not_in`), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via `asap-protocol[webauthn]`).
+- **Streaming & wire protocol (v2.2)** — `POST /asap/stream` (SSE / `TaskStream`), JSON-RPC 2.0 batch on `POST /asap`, `ASAP-Version` negotiation, tamper-evident audit logging, Compliance Harness v2.
 - **Economics** — Usage metering, delegation tokens, SLA framework with breach alerts.
 
 ### 🆕 Framework Ecosystem
@@ -184,7 +188,7 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 - [Observability](https://github.com/adriannoes/asap-protocol/blob/main/docs/observability.md) | [Testing](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md)
 
 **Decisions & Operations**
-- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 17 Architecture Decision Records
+- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 19 Architecture Decision Records
 - [Tech Stack](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/dev-planning/architecture/tech-stack-decisions.md) — Rationale for Python, Pydantic, Next.js choices
 - [Deployment](https://github.com/adriannoes/asap-protocol/blob/main/docs/deployment/kubernetes.md) | [Troubleshooting](https://github.com/adriannoes/asap-protocol/blob/main/docs/troubleshooting.md)
 
@@ -193,23 +197,32 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 
 ## CLI
 
-- **v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite) and Webhooks. 
-- **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md). 
-- **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
-
 ```bash
 asap --version                                    # Show version
 asap list-schemas                                 # List all available schemas
 asap export-schemas                               # Export JSON schemas to file
+asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
+asap audit export --store memory --format json    # Export audit log (stdout)
 asap keys generate -o key.pem                     # Generate Ed25519 keypair
 asap manifest sign -k key.pem manifest.json       # Sign manifest
 asap manifest verify signed.json                  # Verify signature
 asap manifest info signed.json                    # Show trust level
 ```
 
-See [CLI reference](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) or run `asap --help`.
+See the [CLI reference](docs/cli.md) for `compliance-check` and `audit export` flag details, the [CI compliance gate](docs/ci-compliance.md) for wiring `compliance-check` into GitHub Actions, the [audit export guide](docs/audit.md), [Identity Signing](docs/guides/identity-signing.md), or run `asap --help` for the full command surface.
+
+## Version History
+
+- **v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite) and Webhooks.
+- **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md).
+- **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
+- **v2.0** adds the Lean Marketplace Web App (Next.js), Lite Registry on GitHub Pages, IssueOps registration, OAuth sign-in for developers, and Verified Badge flow.
+- **v2.1** adds the Consumer SDK (`MarketClient`), optional framework extras (LangChain, CrewAI, LlamaIndex, SmolAgents, OpenClaw, …), and registry UX improvements on PyPI.
+- **v2.1.1** is a patch release: JWT algorithm allowlist, SQLite async bridging, optional Redis-backed rate limits, SSRF hardening in the web app, and related reliability fixes (see [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)).
+- **v2.2** adds per-runtime agent identity, capability-based authorization, SSE streaming (`POST /asap/stream`), `ASAP-Version` negotiation, JSON-RPC batch requests, tamper-evident audit logging, async state stores, and Compliance Harness v2.
+- **v2.2.1** closes the SELF-002 follow-up with **real WebAuthn** attestation/assertion via the opt-in `asap-protocol[webauthn]` extra, ships the `asap compliance-check` and `asap audit export` CLIs, promotes the client SDK `ResolvedAgent.run()` to a typed contract (raises `TypeError` on protocol violation), introduces the `asap.economics.audit.AuditChainBroken` exception for scripted tamper handling, and pins upper bounds on security-sensitive deps (`cryptography`, `authlib`, `joserfc`, `pyjwt`, `webauthn`, `pydantic`) — see [dependency policy](https://github.com/adriannoes/asap-protocol/blob/main/SECURITY.md#dependency-policy) and full notes in the [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md).
 
-See [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides) and [Identity Signing](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) for details.
+For a structured index of per-version features, see the [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides).
 
 ## 🔭 What's Next?
 
@@ -229,4 +242,4 @@ This project is licensed under the Apache 2.0 License - see the [license](https:
 
 ---
 
-**Built with [Cursor](https://cursor.com/)** using Composer 1.5, Claude Opus 4.6, Gemini 3.1 Pro and Kimi K2.5.
+**Built with [Cursor](https://cursor.com/) and [Claude Code](https://claude.com/claude-code)** — primarily Claude Opus 4.7 (1M context) with Cursor Composer 1.5, Gemini 3.1 Pro, and Kimi K2.5 as collaborators.

{asap_protocol-2.2.0 → asap_protocol-2.2.1}/README.md

@@ -7,9 +7,9 @@
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: `v2.1.1` | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
+**Quick Info**: `v2.2.1` | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | [PyPI](https://pypi.org/project/asap-protocol/) | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
 
-> 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.vercel.app/) — Browse agents, register yours, request verification.
+> 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.vercel.app/) — browse agents, register yours, request verification.
 
 ## Why ASAP?
 
@@ -30,6 +30,8 @@ For simple point-to-point communication, a basic HTTP API might suffice; ASAP sh
 - **MCP integration** — Tool execution and coordination in a single envelope.
 - **Observable** — `trace_id` and `correlation_id` for debugging.
 - **Security** — Bearer auth, OAuth2/JWT, Ed25519 signed manifests, optional mTLS, replay prevention, HTTPS, rate limiting. [Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (trust limits, Custom Claims).
+- **Identity & capabilities (v2.2, WebAuthn real in v2.2.1)** — Per-runtime Host/Agent JWTs, capability grants with constraints (`max`, `min`, `in`, `not_in`), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via `asap-protocol[webauthn]`).
+- **Streaming & wire protocol (v2.2)** — `POST /asap/stream` (SSE / `TaskStream`), JSON-RPC 2.0 batch on `POST /asap`, `ASAP-Version` negotiation, tamper-evident audit logging, Compliance Harness v2.
 - **Economics** — Usage metering, delegation tokens, SLA framework with breach alerts.
 
 ### 🆕 Framework Ecosystem
@@ -103,7 +105,7 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 - [Observability](https://github.com/adriannoes/asap-protocol/blob/main/docs/observability.md) | [Testing](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md)
 
 **Decisions & Operations**
-- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 17 Architecture Decision Records
+- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 19 Architecture Decision Records
 - [Tech Stack](https://github.com/adriannoes/asap-protocol/blob/main/.cursor/dev-planning/architecture/tech-stack-decisions.md) — Rationale for Python, Pydantic, Next.js choices
 - [Deployment](https://github.com/adriannoes/asap-protocol/blob/main/docs/deployment/kubernetes.md) | [Troubleshooting](https://github.com/adriannoes/asap-protocol/blob/main/docs/troubleshooting.md)
 
@@ -112,23 +114,32 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 
 ## CLI
 
-- **v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite) and Webhooks. 
-- **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md). 
-- **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
-
 ```bash
 asap --version                                    # Show version
 asap list-schemas                                 # List all available schemas
 asap export-schemas                               # Export JSON schemas to file
+asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
+asap audit export --store memory --format json    # Export audit log (stdout)
 asap keys generate -o key.pem                     # Generate Ed25519 keypair
 asap manifest sign -k key.pem manifest.json       # Sign manifest
 asap manifest verify signed.json                  # Verify signature
 asap manifest info signed.json                    # Show trust level
 ```
 
-See [CLI reference](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) or run `asap --help`.
+See the [CLI reference](docs/cli.md) for `compliance-check` and `audit export` flag details, the [CI compliance gate](docs/ci-compliance.md) for wiring `compliance-check` into GitHub Actions, the [audit export guide](docs/audit.md), [Identity Signing](docs/guides/identity-signing.md), or run `asap --help` for the full command surface.
+
+## Version History
+
+- **v1.1** adds OAuth2, WebSocket, Discovery (well-known + Lite Registry), State Storage (SQLite) and Webhooks.
+- **v1.2** adds Ed25519 signed manifests, trust levels, optional mTLS and the [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md).
+- **v1.3** adds delegation commands (`asap delegation create`, `asap delegation revoke`).
+- **v2.0** adds the Lean Marketplace Web App (Next.js), Lite Registry on GitHub Pages, IssueOps registration, OAuth sign-in for developers, and Verified Badge flow.
+- **v2.1** adds the Consumer SDK (`MarketClient`), optional framework extras (LangChain, CrewAI, LlamaIndex, SmolAgents, OpenClaw, …), and registry UX improvements on PyPI.
+- **v2.1.1** is a patch release: JWT algorithm allowlist, SQLite async bridging, optional Redis-backed rate limits, SSRF hardening in the web app, and related reliability fixes (see [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)).
+- **v2.2** adds per-runtime agent identity, capability-based authorization, SSE streaming (`POST /asap/stream`), `ASAP-Version` negotiation, JSON-RPC batch requests, tamper-evident audit logging, async state stores, and Compliance Harness v2.
+- **v2.2.1** closes the SELF-002 follow-up with **real WebAuthn** attestation/assertion via the opt-in `asap-protocol[webauthn]` extra, ships the `asap compliance-check` and `asap audit export` CLIs, promotes the client SDK `ResolvedAgent.run()` to a typed contract (raises `TypeError` on protocol violation), introduces the `asap.economics.audit.AuditChainBroken` exception for scripted tamper handling, and pins upper bounds on security-sensitive deps (`cryptography`, `authlib`, `joserfc`, `pyjwt`, `webauthn`, `pydantic`) — see [dependency policy](https://github.com/adriannoes/asap-protocol/blob/main/SECURITY.md#dependency-policy) and full notes in the [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md).
 
-See [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides) and [Identity Signing](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) for details.
+For a structured index of per-version features, see the [docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides).
 
 ## 🔭 What's Next?
 
@@ -148,4 +159,4 @@ This project is licensed under the Apache 2.0 License - see the [license](https:
 
 ---
 
-**Built with [Cursor](https://cursor.com/)** using Composer 1.5, Claude Opus 4.6, Gemini 3.1 Pro and Kimi K2.5.
+**Built with [Cursor](https://cursor.com/) and [Claude Code](https://claude.com/claude-code)** — primarily Claude Opus 4.7 (1M context) with Cursor Composer 1.5, Gemini 3.1 Pro, and Kimi K2.5 as collaborators.

{asap_protocol-2.2.0 → asap_protocol-2.2.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "asap-protocol"
-version = "2.2.0"
+version = "2.2.1"
 description = "Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication"
 authors = [
     {name = "ASAP Protocol Contributors"}
@@ -22,14 +22,15 @@ classifiers = [
 
 dependencies = [
     "aiosqlite>=0.20",
-    "cryptography>=46.0.7",
+    # Upper-bound majors per SECURITY.md dependency policy.
+    "cryptography>=46.0.7,<47",
     "jcs>=0.2.0",
     "jsonschema>=4.23.0",
-    "pydantic>=2.12.5",
+    "pydantic>=2.12.5,<3",
     "fastapi>=0.128.0",
     "httpx[http2]>=0.28.1",
-    "authlib>=1.6.9",
-    "joserfc>=1.6.3",
+    "authlib>=1.6.11,<2",
+    "joserfc>=1.6.3,<2",
     "uvicorn>=0.34",
     "python-ulid>=3.0",
     "packaging>=25.0",
@@ -72,6 +73,10 @@ dns-sd = [
 redis = [
     "redis>=5.0.0",
 ]
+# Optional WebAuthn (real attestation/assertion when extra installed).
+webauthn = [
+    "webauthn>=2.6,<3",
+]
 # Framework integrations (Sprint E3 — PKG-003).
 mcp = [
     "mcp>=1.0.0",
@@ -113,18 +118,20 @@ Issues = "https://github.com/adriannoes/asap-protocol/issues"
 # - python-multipart>=0.0.26 for CVE-2026-40347 (FastAPI stack)
 # - pygments>=2.20.0 for CVE-2026-4539
 # - langsmith>=0.7.31 for GHSA-rr7j-v2q5-chgv
+# - python-dotenv>=1.2.2 for CVE-2026-28684 (transitive, e.g. pydantic-settings / uvicorn stacks)
 [tool.uv]
 override-dependencies = [
-    "pyjwt>=2.12.0",
+    "pyjwt>=2.12.0,<3",
     "pyasn1>=0.6.3",
     "tinytag>=2.2.1",
-    "cryptography>=46.0.7",
+    "cryptography>=46.0.7,<47",
     "requests>=2.33.0",
     "pillow>=12.2.0",
     "pytest>=9.0.3",
     "python-multipart>=0.0.26",
     "pygments>=2.20.0",
     "langsmith>=0.7.31",
+    "python-dotenv>=1.2.2",
 ]
 
 [project.scripts]
@@ -183,7 +190,7 @@ ignore = [
 "src/asap/transport/usage_api.py" = ["B008"]
 "src/asap/transport/delegation_api.py" = ["B008"]
 "src/asap/transport/sla_api.py" = ["B008"]
-"src/asap/cli.py" = ["B008"]
+"src/asap/cli/__init__.py" = ["B008"]
 
 [tool.ruff.format]
 quote-style = "double"

{asap_protocol-2.2.0 → asap_protocol-2.2.1}/src/asap/__init__.py

@@ -4,6 +4,6 @@ A streamlined, scalable, asynchronous protocol for agent-to-agent communication
 and task coordination.
 """
 
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 
 __all__ = ["__version__"]