asap-protocol 2.4.0__tar.gz → 2.5.0__tar.gz

{asap_protocol-2.4.0 → asap_protocol-2.5.0}/CHANGELOG.md

@@ -7,23 +7,105 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Follow-up (not in this release)
+
+- `extra="forbid"` on ingress payload models (`TaskRequestConfig`, `CommonMetadata`)
+- Opt-in protection for operator APIs (`/usage`, `/sla`, `/audit`)
+- Redis-backed `JtiReplayCache` and distributed Next.js rate limits
+- `@asap-protocol/mcp-auth` HTTP/SSE middleware (deferred from v2.5.0 — see [2.5.0] TypeScript note and [typescript-mcp-auth-spike.md](engineering/tasks/v2.5.0/typescript-mcp-auth-spike.md))
+
+### Fixed
+
+- **CI security (`pip-audit`)**: Raised `cryptography` to `>=48.0.1,<49` (GHSA-537c-gmf6-5ccf), `python-multipart>=0.0.31` (CVE-2026-53538–53540), and `starlette>=1.3.1` (CVE-2026-54282 / CVE-2026-54283) via `pyproject.toml` floors and `tool.uv.override-dependencies`.
+- **pydantic-ai (CVE-2026-46678)**: Optional `[pydanticai]` extra pins `pydantic-ai>=1.99.0`; removed obsolete `pip-audit` ignore from CI.
+
+---
+
+## [2.5.0] - 2026-06-24
+
+**MCP Auth Bridge** — ASAP Host/Agent JWT and capability grants as an **opt-in**
+authorization layer for native **stdio MCP** `tools/call` (Mode A). Unprotected
+`MCPServer` usage is unchanged. No wire-protocol or manifest schema breaking
+changes.
+
+### Added
+
+- **feat(adapters): MCP Auth Bridge (`asap.adapters.mcp`)**
+  - **`protect_server(server, config)`** — wraps `MCPServer` via
+    `ProtectedMCPServer`; intercepts `_handle_tools_call` only (MCP-AUTH-006).
+  - **`MCPAuthConfig`** (`config.py`) — `host_store`, `agent_store`,
+    `capability_registry`, `tool_capability_map`, `public_tools`,
+    `enforce_grants`, `jwt_extractor`, `jti_replay_cache`, `expected_audience`.
+  - **Token carriage (stdio)** — Agent JWT in `tools/call` params
+    `_meta.asap_agent_jwt`; optional dev-only `ASAP_AGENT_JWT` when
+    `allow_env_jwt_fallback=True`.
+  - **Grant enforcement** — `verify_agent_jwt` + `CapabilityRegistry.check_grant`
+    with constraint validation on tool arguments; MCP-safe `asap:*` error codes
+    (`asap:auth_required`, `asap:invalid_token`, `asap:capability_denied`,
+    `asap:constraint_violation`).
+  - **Tool → capability mapping** — explicit `tool_capability_map`, register-time
+    metadata, or default identity (tool name == capability); optional startup
+    validation (`validate_tools_at_startup`).
+  - **Reference example** — `examples/mcp_auth_bridge/` (protected stdio server +
+    client, smoke tests in `tests/examples/test_mcp_auth_bridge_example.py`).
+  - **Docs** — [MCP Auth Bridge adapter](docs/adapters/mcp-auth-bridge.md);
+    [MCP integration](docs/mcp-integration.md) distinguishes Mode A (native MCP +
+    bridge) vs Mode B (MCP-over-ASAP envelope).
+- **feat(compliance): `mcp-auth-bridge` profile** (`asap-compliance`) — stdio MCP
+  release gate: auth paths, grants, constraints, manifest tools ⊆ registered
+  tools (MCP-DISC-003). Requires `asap-protocol>=2.5.0`.
+- **test(adapters/mcp)** — unit, grant, startup, and stdio integration coverage
+  (≥90% on `asap.adapters.mcp`).
+
+### Deferred (not in v2.5.0)
+
+- **`hide_unauthorized_tools` / `tools/list` filtering** (MCP-MAP-004) — no
+  standard JWT carriage on stdio `tools/list` today; see
+  [design lock](engineering/tasks/v2.5.0/design-lock-mcp-auth-bridge.md).
+- **`initialize` session-token handshake** (PRD §4.3 SHOULD) — clients pass JWT
+  on each protected `tools/call` in v2.5.0.
+
+### TypeScript
+
+- **`@asap-protocol/mcp-auth` deferred to v2.5.0.1** — MCP-TS-001..003 (HTTP/SSE
+  Bearer middleware) are SHOULD-scope; v2.5.0 ships the Python stdio bridge as the
+  release gate. Rationale and implementation checklist:
+  [typescript-mcp-auth-spike.md](engineering/tasks/v2.5.0/typescript-mcp-auth-spike.md);
+  carry-over tracked in
+  [PRD v2.5.1 §3](product/prd/prd-v2.5.1-adapter-lab-ii.md#3-carry-over-from-v250-asap-protocolmcp-auth).
+  Existing `@asap-protocol/*` npm packages remain at **2.4.1** until a separate
+  publish.
+
+### Migration
+
+- **v2.4.1 → v2.5.0**: **No breaking changes.** MCP servers without
+  `protect_server` behave as before. To enforce Agent JWT + capabilities on native
+  MCP, wrap your server with `protect_server` and configure grants — see
+  [MCP Auth Bridge adapter](docs/adapters/mcp-auth-bridge.md).
+
+---
+
+## [2.4.1] - 2026-06-14
+
+**Security hardening patch** — OAuth2 `iss`/`aud` validation, fail-closed identity
+binding, web app SSRF/redirect fixes, and dependency bumps. Wire protocol and
+manifest schemas are unchanged from v2.4.0.
+
 ### Security
 
 - **OAuth2 middleware**: Validate JWT `iss` and `aud` when `ASAP_AUTH_ISSUER` / `ASAP_AUTH_AUDIENCE` (or `OAuth2Config.expected_issuer` / `expected_audience`) are set; refactored validation through `validate_jwt()` in `asap.auth.jwks`.
 - **Identity binding**: Fail-closed when `manifest_id` is configured but neither custom claim nor `ASAP_AUTH_SUBJECT_MAP` allowlist matches (403 instead of warn-and-pass).
-- **Web app (`apps/web`)**: Block open redirects on E2E fixture login routes via `resolveRedirectUrl`; harden SSRF on `/api/health-check` (127.0.0.0/8, DNS resolve4/6); Zod validation on API query params; rate-limit unit tests.
+- **Web app (`apps/web`)**: Block open redirects on E2E fixture login routes via `resolveRedirectUrl`; harden SSRF on `/api/health-check` (127.0.0.0/8, DNS resolve4/6); Zod strict validation on public API query params (unknown keys return 400); rate-limit unit tests.
 
 ### Fixed
 
 - **CI security (`pip-audit`)**: Bumped transitive pins (`langchain-core`, `langsmith`, `python-multipart`, `urllib3`, `pip`, `smolagents`) and adjusted documented `--ignore-vuln` flags (pygments + **smolagents** CVEs with no PyPI fix yet; pip ≥26.1 clears prior pip ignore). See [SECURITY.md](SECURITY.md).
 - **FastAPI / Starlette**: Raised `fastapi` floor to `>=0.136.1` so `starlette>=1.0.1` resolves **PYSEC-2026-161** (Host header path injection) without a `pip-audit` ignore.
 
-### Follow-up (not in this release)
+### Migration
 
-- `extra="forbid"` on ingress payload models (`TaskRequestConfig`, `CommonMetadata`)
-- Opt-in protection for operator APIs (`/usage`, `/sla`, `/audit`)
-- Redis-backed `JtiReplayCache` and distributed Next.js rate limits
-- Bump optional `pydantic-ai` extra (CVE-2026-46678)
+- **v2.4.0 → v2.4.1**: Security patch — bump dependencies; verify OAuth2 issuer/audience and identity binding if already configured. See
+  [migration guide](docs/migration.md#upgrading-from-v240-to-v241).
 
 ---
 

{asap_protocol-2.4.0 → asap_protocol-2.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: asap-protocol
-Version: 2.4.0
+Version: 2.5.0
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
 Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
 Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
@@ -21,9 +21,9 @@ Classifier: Topic :: System :: Distributed Computing
 Classifier: Typing :: Typed
 Requires-Python: >=3.13
 Requires-Dist: aiosqlite>=0.20
-Requires-Dist: authlib<2,>=1.6.11
+Requires-Dist: authlib<2,>=1.6.12
 Requires-Dist: brotli>=1.2.0
-Requires-Dist: cryptography<47,>=46.0.7
+Requires-Dist: cryptography<49,>=48.0.1
 Requires-Dist: fastapi>=0.136.1
 Requires-Dist: httpx[http2]>=0.28.1
 Requires-Dist: jcs>=0.2.0
@@ -58,7 +58,7 @@ Requires-Dist: pytest>=9.0.3; extra == 'dev'
 Requires-Dist: ruff>=0.14.14; extra == 'dev'
 Requires-Dist: types-jsonschema>=4.0.0; extra == 'dev'
 Provides-Extra: dns-sd
-Requires-Dist: zeroconf>=0.80; extra == 'dns-sd'
+Requires-Dist: zeroconf>=0.149.5; extra == 'dns-sd'
 Provides-Extra: docs
 Requires-Dist: ghp-import>=2.1.0; extra == 'docs'
 Requires-Dist: mkdocs-material>=9.5; extra == 'docs'
@@ -75,7 +75,7 @@ Requires-Dist: openapi-pydantic>=0.5; extra == 'openapi'
 Provides-Extra: openclaw
 Requires-Dist: openclaw-sdk>=2.0; extra == 'openclaw'
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai>=0.2; extra == 'pydanticai'
+Requires-Dist: pydantic-ai>=1.99.0; extra == 'pydanticai'
 Provides-Extra: redis
 Requires-Dist: redis>=5.0.0; extra == 'redis'
 Provides-Extra: smolagents
@@ -95,7 +95,7 @@ Description-Content-Type: text/markdown
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: `v2.4.0` (PyPI) · **npm TS [`2.4.0`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.4.0)** | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | **[PyPI `asap-protocol`](https://pypi.org/project/asap-protocol/)** | **[npm `@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client)** | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
+**Quick Info**: `v2.5.0` (release branch; PyPI/npm publish on `v2.5.0` tag) · **npm TS [`2.4.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.4.1)** (latest published) | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | **[PyPI `asap-protocol`](https://pypi.org/project/asap-protocol/)** | **[npm `@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client)** | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
 
 > 📦 Install the ASAP **Python SDK / protocol** from **`https://pypi.org/project/asap-protocol/`** — package name **`asap-protocol`** on [PyPI](https://pypi.org/project/asap-protocol/).
 
@@ -123,7 +123,7 @@ For simple point-to-point communication, a basic HTTP API might suffice; ASAP sh
 - **Identity & capabilities (v2.2, WebAuthn real in v2.2.1)** — Per-runtime Host/Agent JWTs, capability grants with constraints (`max`, `min`, `in`, `not_in`), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via `asap-protocol[webauthn]`).
 - **Streaming & wire protocol (v2.2)** — `POST /asap/stream` (SSE / `TaskStream`), JSON-RPC 2.0 batch on `POST /asap`, `ASAP-Version` negotiation, tamper-evident audit logging, Compliance Harness v2.
 - **Adoption Multiplier (v2.3.0)** — OpenAPI → ASAP via `create_from_openapi` (`[openapi]` extra), official **`@asap-protocol/client`** on npm (Vercel AI / OpenAI / Anthropic adapters), optional **Auto-Registration** (`POST /registry/agents`), **capability escalation**, and **ASAP `WWW-Authenticate`** discovery challenges. All opt-in; wire protocol unchanged. See [docs/index.md](docs/index.md) and [docs/migration.md](docs/migration.md).
-- **Edge-AI discovery (v2.4.0)** — Optional `manifest.capabilities.hardware` + `inference`, Lite Registry mirror, marketplace browse filters, and `@asap-protocol/client@2.4.0` discovery types. Wire protocol unchanged. See [Migration (v2.3.x → v2.4.0)](docs/migration.md#upgrading-from-v23x-to-v240) and [ShellClaw registry guide](docs/guides/shellclaw-registry.md).
+- **Edge-AI discovery (v2.4.0)** — Optional `manifest.capabilities.hardware` + `inference`, Lite Registry mirror, marketplace browse filters, and `@asap-protocol/client@2.4.1` discovery types. Wire protocol unchanged. See [Migration (v2.3.x → v2.4.0)](docs/migration.md#upgrading-from-v23x-to-v240) and [ShellClaw registry guide](docs/guides/shellclaw-registry.md).
 - **Framework adapters (v2.3.1+, npm)** — **`@asap-protocol/mastra`** and **`@asap-protocol/openai-agents`** expose ASAP capabilities as Mastra tools and OpenAI Agents SDK `tool()` definitions. See [Migration (v2.3.0 → v2.3.1)](docs/migration.md#upgrading-from-v230-to-v231).
 - **Economics** — Usage metering, delegation tokens, SLA framework with breach alerts.
 
@@ -144,16 +144,16 @@ Or with pip:
 pip install asap-protocol
 ```
 
-**npm** (TypeScript / JavaScript — [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client), **`2.4.0`**). The `latest` dist-tag matches **`npm view @asap-protocol/client version`**.
+**npm** (TypeScript / JavaScript — [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client), **`2.4.1`**). The `latest` dist-tag matches **`npm view @asap-protocol/client version`**.
 
-**npm** Mastra [**`@asap-protocol/mastra@2.4.0`**](https://www.npmjs.com/package/@asap-protocol/mastra) bridges ASAP capabilities onto **`@mastra/core`** tools; docs: [`docs/integrations/mastra.md`](docs/integrations/mastra.md), demo: [`apps/example-mastra/README.md`](apps/example-mastra/README.md).
+**npm** Mastra [**`@asap-protocol/mastra@2.4.1`**](https://www.npmjs.com/package/@asap-protocol/mastra) bridges ASAP capabilities onto **`@mastra/core`** tools; docs: [`docs/integrations/mastra.md`](docs/integrations/mastra.md), demo: [`apps/example-mastra/README.md`](apps/example-mastra/README.md).
 
-**npm** OpenAI Agents SDK [**`@asap-protocol/openai-agents@2.4.0`**](https://www.npmjs.com/package/@asap-protocol/openai-agents) exposes ASAP capabilities as **`@openai/agents`** `tool()` definitions — **not** the Chat Completions helper [`adapters/openai`](packages/typescript/client/src/adapters/openai.ts); docs: [`docs/integrations/openai-agents.md`](docs/integrations/openai-agents.md), demo: [`apps/example-openai-agents/README.md`](apps/example-openai-agents/README.md).
+**npm** OpenAI Agents SDK [**`@asap-protocol/openai-agents@2.4.1`**](https://www.npmjs.com/package/@asap-protocol/openai-agents) exposes ASAP capabilities as **`@openai/agents`** `tool()` definitions — **not** the Chat Completions helper [`adapters/openai`](packages/typescript/client/src/adapters/openai.ts); docs: [`docs/integrations/openai-agents.md`](docs/integrations/openai-agents.md), demo: [`apps/example-openai-agents/README.md`](apps/example-openai-agents/README.md).
 
 ```bash
-npm install @asap-protocol/client@2.4.0
-npm install @asap-protocol/mastra@2.4.0 @asap-protocol/client @mastra/core zod
-npm install @asap-protocol/openai-agents@2.4.0 @asap-protocol/client @openai/agents zod
+npm install @asap-protocol/client@2.4.1
+npm install @asap-protocol/mastra@2.4.1 @asap-protocol/client @mastra/core zod
+npm install @asap-protocol/openai-agents@2.4.1 @asap-protocol/client @openai/agents zod
 ```
 
 📦 **Canonical listing:** **[https://pypi.org/project/asap-protocol/](https://pypi.org/project/asap-protocol/)** — package **`asap-protocol`** (`pip install asap-protocol`). Prefer `uv` for reproducible environments when possible.
@@ -176,10 +176,10 @@ uv run python -m asap.examples.run_demo
 uv run pytest -n auto --tb=short
 ```
 
-With coverage:
+With coverage (separate run — do not combine with `-n auto`):
 
 ```bash
-uv run pytest --cov=src --cov-report=term-missing
+uv run pytest --tb=short --cov=asap --cov-report=term-missing --cov-fail-under=85
 ```
 
 [Testing Guide](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md) (structure, fixtures, property/load/chaos tests). [Contributing](https://github.com/adriannoes/asap-protocol/blob/main/CONTRIBUTING.md) (dev setup, CI).

{asap_protocol-2.4.0 → asap_protocol-2.5.0}/README.md

@@ -7,7 +7,7 @@
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: `v2.4.0` (PyPI) · **npm TS [`2.4.0`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.4.0)** | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | **[PyPI `asap-protocol`](https://pypi.org/project/asap-protocol/)** | **[npm `@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client)** | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
+**Quick Info**: `v2.5.0` (release branch; PyPI/npm publish on `v2.5.0` tag) · **npm TS [`2.4.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.4.1)** (latest published) | `Apache 2.0` | `Python 3.13+` | [Documentation](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md) | **[PyPI `asap-protocol`](https://pypi.org/project/asap-protocol/)** | **[npm `@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client)** | [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)
 
 > 📦 Install the ASAP **Python SDK / protocol** from **`https://pypi.org/project/asap-protocol/`** — package name **`asap-protocol`** on [PyPI](https://pypi.org/project/asap-protocol/).
 
@@ -35,7 +35,7 @@ For simple point-to-point communication, a basic HTTP API might suffice; ASAP sh
 - **Identity & capabilities (v2.2, WebAuthn real in v2.2.1)** — Per-runtime Host/Agent JWTs, capability grants with constraints (`max`, `min`, `in`, `not_in`), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via `asap-protocol[webauthn]`).
 - **Streaming & wire protocol (v2.2)** — `POST /asap/stream` (SSE / `TaskStream`), JSON-RPC 2.0 batch on `POST /asap`, `ASAP-Version` negotiation, tamper-evident audit logging, Compliance Harness v2.
 - **Adoption Multiplier (v2.3.0)** — OpenAPI → ASAP via `create_from_openapi` (`[openapi]` extra), official **`@asap-protocol/client`** on npm (Vercel AI / OpenAI / Anthropic adapters), optional **Auto-Registration** (`POST /registry/agents`), **capability escalation**, and **ASAP `WWW-Authenticate`** discovery challenges. All opt-in; wire protocol unchanged. See [docs/index.md](docs/index.md) and [docs/migration.md](docs/migration.md).
-- **Edge-AI discovery (v2.4.0)** — Optional `manifest.capabilities.hardware` + `inference`, Lite Registry mirror, marketplace browse filters, and `@asap-protocol/client@2.4.0` discovery types. Wire protocol unchanged. See [Migration (v2.3.x → v2.4.0)](docs/migration.md#upgrading-from-v23x-to-v240) and [ShellClaw registry guide](docs/guides/shellclaw-registry.md).
+- **Edge-AI discovery (v2.4.0)** — Optional `manifest.capabilities.hardware` + `inference`, Lite Registry mirror, marketplace browse filters, and `@asap-protocol/client@2.4.1` discovery types. Wire protocol unchanged. See [Migration (v2.3.x → v2.4.0)](docs/migration.md#upgrading-from-v23x-to-v240) and [ShellClaw registry guide](docs/guides/shellclaw-registry.md).
 - **Framework adapters (v2.3.1+, npm)** — **`@asap-protocol/mastra`** and **`@asap-protocol/openai-agents`** expose ASAP capabilities as Mastra tools and OpenAI Agents SDK `tool()` definitions. See [Migration (v2.3.0 → v2.3.1)](docs/migration.md#upgrading-from-v230-to-v231).
 - **Economics** — Usage metering, delegation tokens, SLA framework with breach alerts.
 
@@ -56,16 +56,16 @@ Or with pip:
 pip install asap-protocol
 ```
 
-**npm** (TypeScript / JavaScript — [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client), **`2.4.0`**). The `latest` dist-tag matches **`npm view @asap-protocol/client version`**.
+**npm** (TypeScript / JavaScript — [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client), **`2.4.1`**). The `latest` dist-tag matches **`npm view @asap-protocol/client version`**.
 
-**npm** Mastra [**`@asap-protocol/mastra@2.4.0`**](https://www.npmjs.com/package/@asap-protocol/mastra) bridges ASAP capabilities onto **`@mastra/core`** tools; docs: [`docs/integrations/mastra.md`](docs/integrations/mastra.md), demo: [`apps/example-mastra/README.md`](apps/example-mastra/README.md).
+**npm** Mastra [**`@asap-protocol/mastra@2.4.1`**](https://www.npmjs.com/package/@asap-protocol/mastra) bridges ASAP capabilities onto **`@mastra/core`** tools; docs: [`docs/integrations/mastra.md`](docs/integrations/mastra.md), demo: [`apps/example-mastra/README.md`](apps/example-mastra/README.md).
 
-**npm** OpenAI Agents SDK [**`@asap-protocol/openai-agents@2.4.0`**](https://www.npmjs.com/package/@asap-protocol/openai-agents) exposes ASAP capabilities as **`@openai/agents`** `tool()` definitions — **not** the Chat Completions helper [`adapters/openai`](packages/typescript/client/src/adapters/openai.ts); docs: [`docs/integrations/openai-agents.md`](docs/integrations/openai-agents.md), demo: [`apps/example-openai-agents/README.md`](apps/example-openai-agents/README.md).
+**npm** OpenAI Agents SDK [**`@asap-protocol/openai-agents@2.4.1`**](https://www.npmjs.com/package/@asap-protocol/openai-agents) exposes ASAP capabilities as **`@openai/agents`** `tool()` definitions — **not** the Chat Completions helper [`adapters/openai`](packages/typescript/client/src/adapters/openai.ts); docs: [`docs/integrations/openai-agents.md`](docs/integrations/openai-agents.md), demo: [`apps/example-openai-agents/README.md`](apps/example-openai-agents/README.md).
 
 ```bash
-npm install @asap-protocol/client@2.4.0
-npm install @asap-protocol/mastra@2.4.0 @asap-protocol/client @mastra/core zod
-npm install @asap-protocol/openai-agents@2.4.0 @asap-protocol/client @openai/agents zod
+npm install @asap-protocol/client@2.4.1
+npm install @asap-protocol/mastra@2.4.1 @asap-protocol/client @mastra/core zod
+npm install @asap-protocol/openai-agents@2.4.1 @asap-protocol/client @openai/agents zod
 ```
 
 📦 **Canonical listing:** **[https://pypi.org/project/asap-protocol/](https://pypi.org/project/asap-protocol/)** — package **`asap-protocol`** (`pip install asap-protocol`). Prefer `uv` for reproducible environments when possible.
@@ -88,10 +88,10 @@ uv run python -m asap.examples.run_demo
 uv run pytest -n auto --tb=short
 ```
 
-With coverage:
+With coverage (separate run — do not combine with `-n auto`):
 
 ```bash
-uv run pytest --cov=src --cov-report=term-missing
+uv run pytest --tb=short --cov=asap --cov-report=term-missing --cov-fail-under=85
 ```
 
 [Testing Guide](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md) (structure, fixtures, property/load/chaos tests). [Contributing](https://github.com/adriannoes/asap-protocol/blob/main/CONTRIBUTING.md) (dev setup, CI).

{asap_protocol-2.4.0 → asap_protocol-2.5.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "asap-protocol"
-version = "2.4.0"
+version = "2.5.0"
 description = "Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication"
 authors = [
     {name = "ASAP Protocol Contributors"}
@@ -23,13 +23,13 @@ classifiers = [
 dependencies = [
     "aiosqlite>=0.20",
     # Upper-bound majors per SECURITY.md dependency policy.
-    "cryptography>=46.0.7,<47",
+    "cryptography>=48.0.1,<49",
     "jcs>=0.2.0",
     "jsonschema>=4.23.0",
     "pydantic>=2.12.5,<3",
     "fastapi>=0.136.1",
     "httpx[http2]>=0.28.1",
-    "authlib>=1.6.11,<2",
+    "authlib>=1.6.12,<2",
     "joserfc>=1.6.3,<2",
     "uvicorn>=0.34",
     "python-ulid>=3.0",
@@ -68,7 +68,7 @@ docs = [
     "pymdown-extensions>=10.21.3",
 ]
 dns-sd = [
-    "zeroconf>=0.80",
+    "zeroconf>=0.149.5",
 ]
 # Redis: shared rate limit storage for multi-worker deployments (see rate_limit.py).
 redis = [
@@ -95,7 +95,7 @@ smolagents = [
     "smolagents>=1.24.0",
 ]
 pydanticai = [
-    "pydantic-ai>=0.2",
+    "pydantic-ai>=1.99.0",
 ]
 openclaw = [
     "openclaw-sdk>=2.0",
@@ -116,42 +116,52 @@ Issues = "https://github.com/adriannoes/asap-protocol/issues"
 "PyPI" = "https://pypi.org/project/asap-protocol/"
 
 # Override transitive dependencies for security fixes:
-# - pyjwt>=2.12.0 for CVE-2026-32597 (crit header validation)
+# - pyjwt>=2.13.0 for PYSEC-2026-175/177/178/179 (CVE-2026-32597 baseline at 2.12.0)
+# - aiohttp>=3.14.0,<4 for CVE-2026-34993 / CVE-2026-47265 (transitive, e.g. openclaw/mcp stacks)
+# - zeroconf>=0.149.5 for CVE-2026-47180/47183/47184 ([dns-sd] extra)
 # - pyasn1>=0.6.3 for CVE-2026-30922 (DoS via unbounded recursion)
 # - tinytag>=2.2.1 for CVE-2026-32889
-# - cryptography>=46.0.7 for CVE-2026-39892 / CVE-2026-34073 (name-constraint / peer identity)
+# - cryptography>=48.0.1 for GHSA-537c-gmf6-5ccf (CVE-2026-39892 / CVE-2026-34073 baseline at 46.0.7)
 # - requests>=2.33.0 for CVE-2026-25645 (extract_zipped_paths temp file)
 # - pillow>=12.2.0 for CVE-2026-40192 (transitive, e.g. pdf/vision stacks)
 # - pytest>=9.0.3 for CVE-2025-71176 (dev)
-# - python-multipart>=0.0.27 for CVE-2026-42561 / CVE-2026-40347 (FastAPI stack)
+# - python-multipart>=0.0.31 for CVE-2026-53538–53540 (FastAPI stack; prior floor 0.0.27)
+# - starlette>=1.3.1 for CVE-2026-54282 / CVE-2026-54283 (FastAPI stack)
 # - pygments>=2.20.0 for CVE-2026-4539
-# - langsmith>=0.8.0 for CVE-2026-45134 (prior: GHSA-rr7j-v2q5-chgv)
+# - langsmith>=0.8.18 for GHSA-f4xh-w4cj-qxq8 (prior: CVE-2026-45134 at >=0.8.0)
 # - langchain-core>=1.3.3 for CVE-2026-44843
 # - urllib3>=2.7.0 for CVE-2026-44431 / CVE-2026-44432
-# - pip>=26.1 for CVE-2026-6357 (transitive via pip-api / venv)
+# - pip>=26.1.2 for PYSEC-2026-196 (CVE-2026-6357 baseline at 26.1)
 # - python-dotenv>=1.2.2 for CVE-2026-28684 (transitive, e.g. pydantic-settings / uvicorn stacks)
+# - pydantic-settings>=2.14.2 for GHSA-4xgf-cpjx-pc3j (transitive, e.g. langchain / mcp stacks)
+# - msgpack>=1.2.1 for GHSA-6v7p-g79w-8964 (transitive, e.g. locust / cache stacks)
 # - idna>=3.15 for CVE-2026-45409 (DoS in idna.encode; transitive via httpx/requests)
 # - markdown>=3.10.2 for PYSEC-2026-89 (DoS in html.parser during Markdown parse; mkdocs stack)
 # - pymdown-extensions>=10.21.3 for CVE-2026-46338 (snippets base_path prefix bypass; mkdocs stack)
 [tool.uv]
 override-dependencies = [
-    "pyjwt>=2.12.0,<3",
+    "aiohttp>=3.14.0,<4",
+    "pyjwt>=2.13.0,<3",
     "pyasn1>=0.6.3",
     "tinytag>=2.2.1",
-    "cryptography>=46.0.7,<47",
+    "cryptography>=48.0.1,<49",
     "requests>=2.33.0",
     "pillow>=12.2.0",
     "pytest>=9.0.3",
-    "python-multipart>=0.0.27",
+    "python-multipart>=0.0.31",
+    "starlette>=1.3.1",
     "pygments>=2.20.0",
-    "langsmith>=0.8.0",
+    "langsmith>=0.8.18",
     "langchain-core>=1.3.3",
     "urllib3>=2.7.0",
-    "pip>=26.1",
+    "pip>=26.1.2",
+    "zeroconf>=0.149.5",
     "python-dotenv>=1.2.2",
     "idna>=3.15",
     "markdown>=3.10.2",
     "pymdown-extensions>=10.21.3",
+    "pydantic-settings>=2.14.2",
+    "msgpack>=1.2.1",
 ]
 
 [project.scripts]
@@ -302,7 +312,7 @@ addopts = [
     "--strict-markers",
     "--strict-config",
 ]
-# Coverage options: use explicitly when needed (e.g., pytest --cov=src --cov-report=xml)
+# Coverage options: use explicitly when needed (e.g., pytest --tb=short --cov=asap --cov-report=xml --cov-fail-under=85)
 # NOT included in addopts to avoid conflicts with pytest-xdist (-n auto)
 testpaths = ["tests"]
 # Note: benchmarks/ excluded from testpaths - Locust monkey-patches gevent/ssl which
@@ -340,5 +350,5 @@ dev = [
     "memory-profiler>=0.61",
     "pytest-asyncio>=0.24",
     "pytest-cov>=6.0",
-    "pip>=26.0.1",
+    "pip>=26.1.2",
 ]

{asap_protocol-2.4.0 → asap_protocol-2.5.0}/src/asap/__init__.py

@@ -8,7 +8,7 @@ from __future__ import annotations
 
 from typing import Any
 
-__version__ = "2.4.0"
+__version__ = "2.5.0"
 
 __all__ = ["__version__", "create_from_openapi"]
 

asap_protocol-2.5.0/src/asap/adapters/mcp/__init__.py

@@ -0,0 +1,17 @@
+"""MCP Auth Bridge adapter (v2.5.0).
+
+Opt-in protection for native ``MCPServer`` via ``protect_server``.
+"""
+
+from __future__ import annotations
+
+from asap.adapters.mcp.auth_middleware import protect_server
+from asap.adapters.mcp.config import MCPAuthConfig, resolve_jwt_extractor
+from asap.adapters.mcp.protected_server import ProtectedMCPServer
+
+__all__ = [
+    "MCPAuthConfig",
+    "ProtectedMCPServer",
+    "protect_server",
+    "resolve_jwt_extractor",
+]

asap_protocol-2.5.0/src/asap/adapters/mcp/auth_middleware.py

@@ -0,0 +1,33 @@
+"""MCP Auth Bridge middleware entry point (v2.5.0)."""
+
+from __future__ import annotations
+
+from asap.adapters.mcp.config import MCPAuthConfig, resolve_jwt_extractor
+from asap.adapters.mcp.protected_server import ProtectedMCPServer
+from asap.mcp.server import MCPServer
+
+__all__ = ["MCPAuthConfig", "protect_server", "resolve_jwt_extractor"]
+
+
+def protect_server(server: MCPServer, config: MCPAuthConfig) -> ProtectedMCPServer:
+    """Return an MCP server with JWT and capability enforcement on ``tools/call``.
+
+    Verifies Agent JWT extraction/verification, the ``public_tools`` allowlist, and
+    (when ``enforce_grants=True``) JWT capability claims plus
+    :meth:`~asap.auth.capabilities.CapabilityRegistry.check_grant`.
+
+    ``from_server`` copies register-time capability metadata onto the protected instance
+    without mutating ``config``.
+
+    See PRD v2.5.0 MCP Auth Bridge (``product/prd/prd-v2.5.0-mcp-auth-bridge.md``)
+    and design lock ADR (``engineering/tasks/v2.5.0/design-lock-mcp-auth-bridge.md``).
+
+    Args:
+        server: Native MCP server with registered tools.
+        config: Auth configuration (identity stores, capability registry, extractors).
+
+    Returns:
+        Protected server instance; unprotected ``MCPServer`` usage remains valid when
+        this function is not called.
+    """
+    return ProtectedMCPServer.from_server(server, config)

asap_protocol-2.5.0/src/asap/adapters/mcp/capability_map.py

@@ -0,0 +1,74 @@
+"""Tool-to-capability resolution for MCP Auth Bridge (v2.5.0)."""
+
+from __future__ import annotations
+
+from asap.adapters.mcp.config import MCPAuthConfig
+from asap.auth.capabilities import ConstraintViolation
+from asap.mcp.server import MCPServer
+
+
+def resolve_capability(
+    tool_name: str,
+    config: MCPAuthConfig,
+    *,
+    server: MCPServer | None = None,
+) -> str:
+    """Resolve an MCP tool name to an ASAP capability name.
+
+    Resolution order (MCP-MAP-001, MCP-MAP-002):
+
+    1. ``config.tool_capability_map`` (explicit runtime override)
+    2. ``server.get_tool_capability(tool_name)`` when register-time metadata is set
+    3. Identity default: ``tool_name`` unchanged
+
+    Args:
+        tool_name: Registered MCP tool name from ``tools/call``.
+        config: MCP auth configuration including capability maps.
+        server: MCP server providing register-time capability metadata.
+
+    Returns:
+        ASAP capability name used for grant checks.
+
+    Example:
+        >>> from asap.adapters.mcp.config import MCPAuthConfig
+        >>> from asap.auth.capabilities import CapabilityRegistry
+        >>> from asap.auth.identity import InMemoryAgentStore, InMemoryHostStore
+        >>> from asap.mcp.server import MCPServer
+        >>> agents = InMemoryAgentStore()
+        >>> config = MCPAuthConfig(
+        ...     host_store=InMemoryHostStore(agent_store=agents),
+        ...     agent_store=agents,
+        ...     capability_registry=CapabilityRegistry(),
+        ...     tool_capability_map={"search": "web_search"},
+        ... )
+        >>> resolve_capability("search", config)
+        'web_search'
+        >>> resolve_capability("echo", config)
+        'echo'
+    """
+    if tool_name in config.tool_capability_map:
+        return config.tool_capability_map[tool_name]
+    if server is not None:
+        registered = server.get_tool_capability(tool_name)
+        if registered is not None:
+            return registered
+    return tool_name
+
+
+def format_constraint_violations(violations: list[ConstraintViolation]) -> str:
+    """Format grant constraint violations for MCP ``tools/call`` error detail.
+
+    Args:
+        violations: Constraint failures from :meth:`CapabilityRegistry.check_grant`.
+
+    Returns:
+        Human-readable detail string joined with ``; ``.
+
+    Example:
+        >>> from asap.auth.capabilities import ConstraintViolation
+        >>> format_constraint_violations([
+        ...     ConstraintViolation("tokens", "max", 100, 150, "tokens: 150 exceeds maximum 100"),
+        ... ])
+        'tokens: 150 exceeds maximum 100'
+    """
+    return "; ".join(v.message for v in violations)

asap_protocol-2.5.0/src/asap/adapters/mcp/config.py

@@ -0,0 +1,70 @@
+"""MCP Auth Bridge configuration (v2.5.0)."""
+
+from __future__ import annotations
+
+from collections.abc import Callable
+from dataclasses import dataclass, field
+
+from asap.adapters.mcp.jwt_extractor import default_jwt_extractor
+from asap.auth.agent_jwt import JtiReplayCache
+from asap.auth.capabilities import CapabilityRegistry
+from asap.auth.identity import AgentStore, HostStore
+from asap.mcp.protocol import CallToolRequestParams
+
+
+MCP_COMPLIANCE_ENV_VAR = "ASAP_MCP_COMPLIANCE"
+
+
+@dataclass
+class MCPAuthConfig:
+    """Configuration for ASAP auth on a native MCP server.
+
+    JWT extraction: middleware MUST call :func:`resolve_jwt_extractor` (or
+    equivalent ``config.jwt_extractor or`` closure over
+    :func:`default_jwt_extractor` with ``allow_env_fallback=config.allow_env_jwt_fallback``).
+    Do not invoke a ``None`` extractor.
+
+    ``hide_unauthorized_tools`` is reserved for MCP-MAP-004 (deferred per design-lock §6);
+    stdio ``tools/list`` has no standard JWT carriage in v2.5.0.
+
+    Example:
+        >>> config = MCPAuthConfig(
+        ...     host_store=host_store,
+        ...     agent_store=agent_store,
+        ...     capability_registry=registry,
+        ... )
+    """
+
+    host_store: HostStore
+    agent_store: AgentStore
+    capability_registry: CapabilityRegistry
+    tool_capability_map: dict[str, str] = field(default_factory=dict)
+    public_tools: frozenset[str] = frozenset()
+    enforce_grants: bool = True
+    hide_unauthorized_tools: bool = False
+    validate_tools_at_startup: bool = False
+    jwt_extractor: Callable[[CallToolRequestParams], str | None] | None = None
+    allow_env_jwt_fallback: bool = False
+    jti_replay_cache: JtiReplayCache | None = None
+    expected_audience: str | list[str] | None = None
+    manifest_url: str | None = None
+
+
+def resolve_jwt_extractor(config: MCPAuthConfig) -> Callable[[CallToolRequestParams], str | None]:
+    """Return the JWT extractor for middleware (custom or default with config flags).
+
+    Args:
+        config: MCP auth configuration.
+
+    Returns:
+        Callable that extracts an Agent JWT from ``tools/call`` params.
+    """
+    if config.jwt_extractor is not None:
+        return config.jwt_extractor
+
+    allow_env = config.allow_env_jwt_fallback
+
+    def extract(params: CallToolRequestParams) -> str | None:
+        return default_jwt_extractor(params, allow_env_fallback=allow_env)
+
+    return extract

asap_protocol-2.5.0/src/asap/adapters/mcp/errors.py

@@ -0,0 +1,32 @@
+"""MCP-facing ASAP auth error codes and result helpers (v2.5.0)."""
+
+from __future__ import annotations
+
+from typing import Any
+
+from asap.mcp.protocol import CallToolResult, TextContent
+
+AUTH_REQUIRED = "asap:auth_required"
+INVALID_TOKEN = "asap:invalid_token"
+CAPABILITY_DENIED = "asap:capability_denied"
+CONSTRAINT_VIOLATION = "asap:constraint_violation"
+
+
+def tool_error_result(code: str, detail: str | None = None) -> dict[str, Any]:
+    """Build a ``tools/call`` error payload with ``isError: true``.
+
+    Args:
+        code: ASAP-namespaced error code (e.g. ``asap:auth_required``).
+        detail: Optional human-readable detail appended after the code.
+
+    Returns:
+        Dict suitable for JSON-RPC ``result`` (``CallToolResult`` shape).
+
+    Example:
+        >>> tool_error_result(AUTH_REQUIRED)["isError"]
+        True
+    """
+    text = code if detail is None else f"{code}: {detail}"
+    result = CallToolResult(content=[TextContent(text=text).model_dump(by_alias=True)])
+    result.is_error = True
+    return result.model_dump(by_alias=True, exclude_none=True)