asap-protocol 2.5.1__tar.gz → 2.5.2__tar.gz

{asap_protocol-2.5.1 → asap_protocol-2.5.2}/CHANGELOG.md

@@ -7,18 +7,77 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Follow-up (not in v2.5.1)
+### Follow-up (planned v2.5.3+)
 
-- **Adapter Lab II** — new framework adapters (separate PRD: [prd-v2.5.1-adapter-lab-ii.md](product/prd/prd-v2.5.1-adapter-lab-ii.md)).
-- `extra="forbid"` on ingress payload models (`TaskRequestConfig`, `CommonMetadata`).
-- Opt-in protection for operator APIs (`/usage`, `/sla`, `/audit`).
-- Redis-backed `JtiReplayCache` and distributed Next.js rate limits.
+- **Adapter Lab II** — enterprise/workflow adapters ([prd-v2.5.3-adapter-lab-ii.md](product/prd/prd-v2.5.3-adapter-lab-ii.md)).
+- **Distribution Loop** — homepage, templates, metrics ([prd-v2.5.4-distribution-loop.md](product/prd/prd-v2.5.4-distribution-loop.md)).
+- **Formal Spec & Interop** — RFC spec, introspection, privacy ([prd-v2.5.5-formal-spec-interop.md](product/prd/prd-v2.5.5-formal-spec-interop.md)).
 - `@asap-protocol/mcp-auth` HTTP/SSE middleware (deferred from v2.5.0 — see [2.5.0] TypeScript note and [typescript-mcp-auth-spike.md](engineering/tasks/v2.5.0/typescript-mcp-auth-spike.md)).
 - Collapse the dual `UsageMetrics`/`InMemoryMeteringStore` pair retained in S1 for API stability.
 - Reduce the `asap.transport.client` package aggregate LOC below the S2 target.
 
 ---
 
+## [2.5.2] - 2026-07-08
+
+**Security & correctness follow-up** — operator API auth, tighter ingress
+validation, Redis JTI replay, web distributed rate limits, v2.5.1 CR follow-ups,
+and registry fixes. Scope: [prd-v2.5.2-security-follow-up.md](product/prd/prd-v2.5.2-security-follow-up.md).
+Wire protocol and manifest schema are unchanged aside from rejecting unknown
+`config` / `metadata` keys (see Migration).
+
+### Added
+
+- **Opt-in operator API auth (#209)**: `create_app(require_operator_auth=True)`
+  requires an OAuth2 Bearer JWT with scope ``asap:admin`` on ``/usage``,
+  ``/sla``, and ``/audit``. Default remains open (local/operator ergonomics)
+  with the existing startup warnings. Requires ``oauth2_config``.
+- **Redis-backed JTI replay cache (#209)**: Optional
+  :class:`~asap.auth.jti_replay_cache.RedisJtiReplayCache` for multi-worker
+  Host/Agent JWT replay protection. Default remains in-memory
+  :class:`~asap.auth.agent_jwt.JtiReplayCache`. Requires
+  ``pip install 'asap-protocol[redis]'``. Inject via
+  ``create_app(identity_jti_cache=...)`` or ``MCPAuthConfig.jti_replay_cache``.
+
+### Changed
+
+- **Ingress validation (#209)**: `TaskRequestConfig` and `CommonMetadata` now reject
+  unknown fields (`extra="forbid"`, inherited from `ASAPBaseModel`). Previously these
+  models allowed arbitrary extension keys; clients sending custom `config` or
+  `metadata` properties must use known fields only or nest extensions under
+  `TaskRequest.input` / envelope `extensions`. See
+  [migration guide](docs/migration.md#upgrading-from-v251).
+- **CLI legacy imports (#242)**: `DEFAULT_SCHEMAS_DIR`, `export_all_schemas`, and
+  `_repl_namespace` are no longer re-exported from `asap.cli` root. Import from
+  `asap.cli._compat` (shim) or the owning submodules (`asap.cli.schemas`,
+  `asap.schemas`, `asap.cli.repl`). The `_compat` shim is removed in v2.6.0
+  ([#275](https://github.com/adriannoes/asap-protocol/issues/275)).
+  See [migration guide](docs/migration.md#upgrading-from-v251).
+- **Web app (`apps/web`)**: Optional distributed rate limits via Upstash Redis
+  or Vercel KV when `UPSTASH_REDIS_REST_URL` + `UPSTASH_REDIS_REST_TOKEN` (or
+  `KV_REST_API_URL` + `KV_REST_API_TOKEN`) are set; local dev without Redis
+  keeps the existing in-memory per-instance limiter
+  ([#209](https://github.com/adriannoes/asap-protocol/issues/209)).
+- **Auth scope parsing (#243)**: `parse_scope` lives in `asap.auth._scope_parse` so
+  `OAuth2Middleware` no longer needs an inline import to break a cycle.
+
+### Fixed
+
+- **CI security (`pip-audit`)**: Raised `joserfc` to `>=1.6.7,<2` (CVE-2026-48990) and added overrides for `python-engineio>=4.13.2` (CVE-2026-48802 / CVE-2026-48809) and `python-socketio>=5.16.2` (CVE-2026-48804). See [SECURITY.md](SECURITY.md).
+- **Streaming correlation binding (#247)**: SSE and WebSocket streaming now require `TaskStream` chunks to echo the request envelope `id` (not an arbitrary request `correlation_id`), and streamed response payloads reject missing or mismatched `correlation_id` values.
+- **SQLite write serialization (#245)**: `AsyncSqliteRepository.execute()` now holds the same `asyncio.Lock` as other write paths so concurrent writers cannot interleave on a shared connection.
+- **Agent status JTI replay (#249)**: `GET /asap/agent/status` now records JWT `jti` in the replay cache (same hardening as other identity routes).
+- **Registry signed manifests (#224)**: Registration paths accept signed manifest envelopes (unwrap before validation).
+- **Registry validation errors (#227)**: Auto-registration maps `ManifestValidationError` to HTTP 400 instead of a 500.
+
+### Migration
+
+- **v2.5.1 → v2.5.2**: See [migration guide](docs/migration.md#upgrading-from-v251).
+  Breaking for clients that sent unknown keys on `TaskRequest.config` /
+  `CommonMetadata`. Operator auth and Redis JTI remain opt-in.
+
+---
+
 ## [2.5.1] - 2026-06-25
 
 **Code quality patch** — behavior-preserving refactor of the transport, storage,
@@ -59,6 +118,9 @@ Deprecated import paths keep working via shims until v2.6.0.
 
 ### Deprecated (remove in v2.6.0)
 
+- `from asap.cli._compat import ...` — use `asap.cli.schemas`, `asap.schemas`, or
+  `asap.cli.repl` directly ([#242](https://github.com/adriannoes/asap-protocol/issues/242);
+  removal tracked in [#275](https://github.com/adriannoes/asap-protocol/issues/275)).
 - `from asap.transport.websocket import ...` — use `asap.transport.ws` directly.
 - `from asap.adapters.mcp import ...` — use `asap.mcp.auth` directly.
 - `RemoteFatalRPCError` / `RemoteRecoverableRPCError` — use `RemoteRPCError` + `is_recoverable`.

{asap_protocol-2.5.1 → asap_protocol-2.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: asap-protocol
-Version: 2.5.1
+Version: 2.5.2
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
 Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
 Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
@@ -27,7 +27,7 @@ Requires-Dist: cryptography<49,>=48.0.1
 Requires-Dist: fastapi>=0.136.1
 Requires-Dist: httpx[http2]>=0.28.1
 Requires-Dist: jcs>=0.2.0
-Requires-Dist: joserfc<2,>=1.6.3
+Requires-Dist: joserfc<2,>=1.6.7
 Requires-Dist: jsonschema>=4.23.0
 Requires-Dist: limits>=3.0
 Requires-Dist: opentelemetry-api>=1.20
@@ -48,6 +48,7 @@ Requires-Dist: crewai>=0.80; extra == 'crewai'
 Provides-Extra: dev
 Requires-Dist: asgi-lifespan>=2.1.0; extra == 'dev'
 Requires-Dist: brotli>=1.1.0; extra == 'dev'
+Requires-Dist: fakeredis>=2.26.0; extra == 'dev'
 Requires-Dist: mypy>=1.19.1; extra == 'dev'
 Requires-Dist: pip-audit>=2.7; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
@@ -61,9 +62,12 @@ Provides-Extra: dns-sd
 Requires-Dist: zeroconf>=0.149.5; extra == 'dns-sd'
 Provides-Extra: docs
 Requires-Dist: ghp-import>=2.1.0; extra == 'docs'
+Requires-Dist: joserfc<2,>=1.6.7; extra == 'docs'
 Requires-Dist: mkdocs-material>=9.5; extra == 'docs'
 Requires-Dist: mkdocstrings[python]>=0.27; extra == 'docs'
 Requires-Dist: pymdown-extensions>=10.21.3; extra == 'docs'
+Requires-Dist: python-engineio>=4.13.2; extra == 'docs'
+Requires-Dist: python-socketio>=5.16.2; extra == 'docs'
 Provides-Extra: langchain
 Requires-Dist: langchain-core>=1.3.3; extra == 'langchain'
 Provides-Extra: llamaindex
@@ -83,7 +87,7 @@ Requires-Dist: smolagents>=1.24.0; extra == 'smolagents'
 Provides-Extra: telemetry
 Requires-Dist: pypistats>=1.11.0; extra == 'telemetry'
 Provides-Extra: webauthn
-Requires-Dist: webauthn<3,>=2.6; extra == 'webauthn'
+Requires-Dist: webauthn<4,>=2.6; extra == 'webauthn'
 Description-Content-Type: text/markdown
 
 # ASAP: Async Simple Agent Protocol
@@ -95,9 +99,9 @@ Description-Content-Type: text/markdown
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: [`v2.5.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.1) | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [Changelog](CHANGELOG.md)
+**Quick Info**: [`v2.5.2`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.2) | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [Changelog](CHANGELOG.md)
 
-> 📦 **Install** the Python SDK ([`asap-protocol` on PyPI](https://pypi.org/project/asap-protocol/)) or the TypeScript client ([`@asap-protocol/client` on npm](https://www.npmjs.com/package/@asap-protocol/client) — **2.4.1**; `@asap-protocol/mcp-auth` npm middleware still deferred).
+> 📦 **Install** — [`asap-protocol` on PyPI](https://pypi.org/project/asap-protocol/) (Python) · [`@asap-protocol/client` on npm](https://www.npmjs.com/package/@asap-protocol/client) (TypeScript)
 
 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.com/) — browse agents, register yours, request verification.
 
@@ -126,13 +130,13 @@ Plain HTTP between two agents is enough for the simplest cases. ASAP is built fo
 | Schema-first | Pydantic v2 + JSON Schema for cross-agent interchange | [API reference](docs/api-reference.md) |
 | Async-native | `asyncio` + `httpx`; sync and async handlers | [Transport](docs/transport.md) |
 | MCP integration | Tool execution and coordination in one envelope (Mode B) | [MCP integration](docs/mcp-integration.md) |
-| MCP Auth Bridge (v2.5.0+) | Opt-in Agent JWT + capability grants on native stdio MCP `tools/call` (Mode A) | [MCP Auth Bridge](docs/adapters/mcp-auth-bridge.md) |
+| MCP Auth Bridge | Opt-in Agent JWT + capability grants on native stdio MCP `tools/call` (Mode A) | [MCP Auth Bridge](docs/adapters/mcp-auth-bridge.md) |
 | Observability | `trace_id` and `correlation_id` for debugging | [Observability](docs/observability.md) |
 | Security | OAuth2/JWT, Ed25519 manifests, mTLS, rate limiting | [Security](docs/security.md) |
-| Identity & capabilities (v2.2+) | Host/Agent JWTs, constrained grants, approval flows, opt-in WebAuthn | [Capabilities](docs/capabilities/index.md) |
-| Streaming & wire protocol (v2.2+) | SSE `/asap/stream`, JSON-RPC batch, `ASAP-Version` negotiation | [Transport](docs/transport.md) |
-| Adoption tools (v2.3.0+) | OpenAPI adapter, `@asap-protocol/client`, auto-registration, escalation | [Migration (v2.2 → v2.3)](docs/migration.md#upgrading-from-v22x-to-v230) |
-| Edge-AI discovery (v2.4.0+) | Hardware/inference manifests, registry mirror, marketplace filters | [ShellClaw guide](docs/guides/shellclaw-registry.md) |
+| Identity & capabilities | Host/Agent JWTs, constrained grants, approval flows, opt-in WebAuthn | [Capabilities](docs/capabilities/index.md) |
+| Streaming & wire protocol | SSE `/asap/stream`, JSON-RPC batch, `ASAP-Version` negotiation | [Transport](docs/transport.md) |
+| Adoption tools | OpenAPI adapter, `@asap-protocol/client`, auto-registration, escalation | [Migration (v2.2 → v2.3)](docs/migration.md#upgrading-from-v22x-to-v230) |
+| Edge-AI discovery | Hardware/inference manifests, registry mirror, marketplace filters | [ShellClaw guide](docs/guides/shellclaw-registry.md) |
 | Framework adapters (npm) | `@asap-protocol/mastra` and `@asap-protocol/openai-agents` tool bridges | [Mastra](docs/integrations/mastra.md) · [OpenAI Agents](docs/integrations/openai-agents.md) |
 | Economics | Usage metering, delegation tokens, SLA breach alerts | [Audit log](docs/audit.md) |
 
@@ -161,7 +165,7 @@ Or with pip:
 pip install asap-protocol
 ```
 
-**TypeScript** (npm, **`2.4.1`** — unchanged for v2.5.1; `@asap-protocol/mcp-auth` HTTP middleware still deferred):
+**TypeScript** (npm, **`2.4.1`** — unchanged for v2.5.2; `@asap-protocol/mcp-auth` HTTP middleware still deferred):
 
 - [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client) — [SDK docs](docs/sdks/typescript.md)
 - [`@asap-protocol/mastra`](https://www.npmjs.com/package/@asap-protocol/mastra) — [docs](docs/integrations/mastra.md) · [demo](apps/example-mastra/README.md)
@@ -173,7 +177,7 @@ npm install @asap-protocol/mastra@2.4.1 @asap-protocol/client @mastra/core zod
 npm install @asap-protocol/openai-agents@2.4.1 @asap-protocol/client @openai/agents zod
 ```
 
-**Python v2.5.1** (code quality patch): `uv add asap-protocol` or `pip install asap-protocol==2.5.1` — see [Migration (v2.5.0 → v2.5.1)](docs/migration.md#upgrading-from-v250-to-v251).
+**Python v2.5.2** (security follow-up): `uv add asap-protocol` or `pip install asap-protocol==2.5.2` — see [Migration (v2.5.1 → v2.5.2)](docs/migration.md#upgrading-from-v251).
 
 ## Quick Start
 
@@ -242,17 +246,18 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 
 ```bash
 asap --version                                    # Show version
-asap list-schemas                                 # List all available schemas
-asap export-schemas                               # Export JSON schemas to file
-asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
+asap list-schemas                                 # List JSON schemas
+asap export-schemas                               # Export schemas to disk
+asap validate-schema payload.json                 # Validate JSON against a schema
+asap compliance-check --url https://agent.example # Remote Compliance Harness v2
 asap audit export --store memory --format json    # Export audit log (stdout)
-asap keys generate -o key.pem                     # Generate Ed25519 keypair
-asap manifest sign -k key.pem manifest.json       # Sign manifest
-asap manifest verify signed.json                  # Verify signature
-asap manifest info signed.json                    # Show trust level
+asap keys generate -o key.pem                     # Ed25519 keypair
+asap manifest sign -k key.pem manifest.json       # Sign agent manifest
+asap delegation create -d <urn> -s read -k key.pem --delegator <urn>
+asap trace <trace-id> --log-file asap.log         # Visualize request flow from logs
 ```
 
-See the [CLI reference](docs/cli.md) for `compliance-check` and `audit export` flag details, the [CI compliance gate](docs/ci-compliance.md) for wiring `compliance-check` into GitHub Actions, the [audit export guide](docs/audit.md), [Identity Signing](docs/guides/identity-signing.md), or run `asap --help` for the full command surface.
+See [docs/cli.md](docs/cli.md) for delegation tokens, schema validation, trace visualization, REPL, and full flag reference. Run `asap --help` for your installed version.
 
 ## Version History
 
@@ -260,6 +265,7 @@ High-level only — see **[Changelog](https://github.com/adriannoes/asap-protoco
 
 | Version | What shipped |
 | :-- | :-- |
+| **v2.5.2** | **Security & correctness follow-up** — opt-in operator API auth, `extra="forbid"` ingress, Redis JTI replay, web distributed rate limits, v2.5.1 CR follow-ups (#245–#249), registry signed-manifest/400 fixes. See [CHANGELOG](CHANGELOG.md#252---2026-07-08), [PRD](product/prd/prd-v2.5.2-security-follow-up.md), and [Migration (v2.5.1 → v2.5.2)](docs/migration.md#upgrading-from-v251) |
 | **v2.5.1** | **Code quality patch** — behavior-preserving refactor (transport/server, client, websocket, SQLite storage, auth, integrations) + six correctness/security fixes (atomic `revoke_cascade`, `usage_events` DDL, unified Host-JWT verifier, **WS now enforces OAuth2**, OpenAPI handler cleanup, client `correlation_id` binding). Deprecated import paths removed in v2.6.0. See [CHANGELOG](CHANGELOG.md#251---2026-06-25) and [Migration (v2.5.0 → v2.5.1)](docs/migration.md#upgrading-from-v250-to-v251) |
 | **v2.5.0.1** | **Compliance publish** — **[GitHub Release `v2.5.0.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0.1)** · PyPI **`asap-compliance` 1.3.0** (`mcp-auth-bridge` profile; requires `asap-protocol>=2.5.0`). No `asap-protocol` API change. See [CHANGELOG](CHANGELOG.md#2501---2026-06-24) |
 | **v2.5.0** | **MCP Auth Bridge** — **[GitHub Release `v2.5.0`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0)** · opt-in `protect_server` for stdio MCP; Agent JWT + capability grants; reference example `examples/mcp_auth_bridge/`. See [CHANGELOG](CHANGELOG.md#250---2026-06-24) and [Migration (v2.4.1 → v2.5.0)](docs/migration.md#upgrading-from-v241-to-v250) |
@@ -278,7 +284,14 @@ High-level only — see **[Changelog](https://github.com/adriannoes/asap-protoco
 
 ## 🔭 What's Next?
 
-ASAP is evolving toward an **Agent Marketplace** — an open ecosystem where AI agents discover, trust and collaborate autonomously. See the [ADR index](https://github.com/adriannoes/asap-protocol/blob/main/product/decision-records/README.md) and [v2.0 roadmap PRD](https://github.com/adriannoes/asap-protocol/blob/main/product/prd/prd-v2.0-roadmap.md). Detailed long-term strategy narratives are maintained privately (not shipped in this repository).
+The [agentic marketplace](https://asap-protocol.com/) and Lite Registry are live. The **v2.5.x train** focuses on interop and adoption:
+
+- **v2.5.3** — enterprise/workflow adapter spikes (Adapter Lab II)
+- **v2.5.4** — distribution loop (homepage templates, starter kits, adoption metrics)
+- **`@asap-protocol/mcp-auth`** (npm) — HTTP/SSE MCP middleware
+- **Formal spec track** (v2.5.5) — introspection, privacy, cross-protocol interop on the path to v3.0 economy
+
+See the [v2.5 roadmap PRD](https://github.com/adriannoes/asap-protocol/blob/main/product/prd/prd-v2.5-roadmap.md) and [ADR index](https://github.com/adriannoes/asap-protocol/blob/main/product/decision-records/README.md).
 
 ## Contributing
 
@@ -306,4 +319,4 @@ This project is licensed under the Apache 2.0 License - see the [license](https:
 
 ---
 
-**Built with [Cursor](https://cursor.com/)** using Opus 4.6/4.7, Composer 1.5/2.0, Gemini 3.1 Pro and Kimi K2.5.
+**Built with [Cursor](https://cursor.com/)**, with Composer, Opus, Gemini, Kimi and more.

{asap_protocol-2.5.1 → asap_protocol-2.5.2}/README.md

@@ -7,9 +7,9 @@
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: [`v2.5.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.1) | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [Changelog](CHANGELOG.md)
+**Quick Info**: [`v2.5.2`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.2) | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [Changelog](CHANGELOG.md)
 
-> 📦 **Install** the Python SDK ([`asap-protocol` on PyPI](https://pypi.org/project/asap-protocol/)) or the TypeScript client ([`@asap-protocol/client` on npm](https://www.npmjs.com/package/@asap-protocol/client) — **2.4.1**; `@asap-protocol/mcp-auth` npm middleware still deferred).
+> 📦 **Install** — [`asap-protocol` on PyPI](https://pypi.org/project/asap-protocol/) (Python) · [`@asap-protocol/client` on npm](https://www.npmjs.com/package/@asap-protocol/client) (TypeScript)
 
 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.com/) — browse agents, register yours, request verification.
 
@@ -38,13 +38,13 @@ Plain HTTP between two agents is enough for the simplest cases. ASAP is built fo
 | Schema-first | Pydantic v2 + JSON Schema for cross-agent interchange | [API reference](docs/api-reference.md) |
 | Async-native | `asyncio` + `httpx`; sync and async handlers | [Transport](docs/transport.md) |
 | MCP integration | Tool execution and coordination in one envelope (Mode B) | [MCP integration](docs/mcp-integration.md) |
-| MCP Auth Bridge (v2.5.0+) | Opt-in Agent JWT + capability grants on native stdio MCP `tools/call` (Mode A) | [MCP Auth Bridge](docs/adapters/mcp-auth-bridge.md) |
+| MCP Auth Bridge | Opt-in Agent JWT + capability grants on native stdio MCP `tools/call` (Mode A) | [MCP Auth Bridge](docs/adapters/mcp-auth-bridge.md) |
 | Observability | `trace_id` and `correlation_id` for debugging | [Observability](docs/observability.md) |
 | Security | OAuth2/JWT, Ed25519 manifests, mTLS, rate limiting | [Security](docs/security.md) |
-| Identity & capabilities (v2.2+) | Host/Agent JWTs, constrained grants, approval flows, opt-in WebAuthn | [Capabilities](docs/capabilities/index.md) |
-| Streaming & wire protocol (v2.2+) | SSE `/asap/stream`, JSON-RPC batch, `ASAP-Version` negotiation | [Transport](docs/transport.md) |
-| Adoption tools (v2.3.0+) | OpenAPI adapter, `@asap-protocol/client`, auto-registration, escalation | [Migration (v2.2 → v2.3)](docs/migration.md#upgrading-from-v22x-to-v230) |
-| Edge-AI discovery (v2.4.0+) | Hardware/inference manifests, registry mirror, marketplace filters | [ShellClaw guide](docs/guides/shellclaw-registry.md) |
+| Identity & capabilities | Host/Agent JWTs, constrained grants, approval flows, opt-in WebAuthn | [Capabilities](docs/capabilities/index.md) |
+| Streaming & wire protocol | SSE `/asap/stream`, JSON-RPC batch, `ASAP-Version` negotiation | [Transport](docs/transport.md) |
+| Adoption tools | OpenAPI adapter, `@asap-protocol/client`, auto-registration, escalation | [Migration (v2.2 → v2.3)](docs/migration.md#upgrading-from-v22x-to-v230) |
+| Edge-AI discovery | Hardware/inference manifests, registry mirror, marketplace filters | [ShellClaw guide](docs/guides/shellclaw-registry.md) |
 | Framework adapters (npm) | `@asap-protocol/mastra` and `@asap-protocol/openai-agents` tool bridges | [Mastra](docs/integrations/mastra.md) · [OpenAI Agents](docs/integrations/openai-agents.md) |
 | Economics | Usage metering, delegation tokens, SLA breach alerts | [Audit log](docs/audit.md) |
 
@@ -73,7 +73,7 @@ Or with pip:
 pip install asap-protocol
 ```
 
-**TypeScript** (npm, **`2.4.1`** — unchanged for v2.5.1; `@asap-protocol/mcp-auth` HTTP middleware still deferred):
+**TypeScript** (npm, **`2.4.1`** — unchanged for v2.5.2; `@asap-protocol/mcp-auth` HTTP middleware still deferred):
 
 - [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client) — [SDK docs](docs/sdks/typescript.md)
 - [`@asap-protocol/mastra`](https://www.npmjs.com/package/@asap-protocol/mastra) — [docs](docs/integrations/mastra.md) · [demo](apps/example-mastra/README.md)
@@ -85,7 +85,7 @@ npm install @asap-protocol/mastra@2.4.1 @asap-protocol/client @mastra/core zod
 npm install @asap-protocol/openai-agents@2.4.1 @asap-protocol/client @openai/agents zod
 ```
 
-**Python v2.5.1** (code quality patch): `uv add asap-protocol` or `pip install asap-protocol==2.5.1` — see [Migration (v2.5.0 → v2.5.1)](docs/migration.md#upgrading-from-v250-to-v251).
+**Python v2.5.2** (security follow-up): `uv add asap-protocol` or `pip install asap-protocol==2.5.2` — see [Migration (v2.5.1 → v2.5.2)](docs/migration.md#upgrading-from-v251).
 
 ## Quick Start
 
@@ -154,17 +154,18 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 
 ```bash
 asap --version                                    # Show version
-asap list-schemas                                 # List all available schemas
-asap export-schemas                               # Export JSON schemas to file
-asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
+asap list-schemas                                 # List JSON schemas
+asap export-schemas                               # Export schemas to disk
+asap validate-schema payload.json                 # Validate JSON against a schema
+asap compliance-check --url https://agent.example # Remote Compliance Harness v2
 asap audit export --store memory --format json    # Export audit log (stdout)
-asap keys generate -o key.pem                     # Generate Ed25519 keypair
-asap manifest sign -k key.pem manifest.json       # Sign manifest
-asap manifest verify signed.json                  # Verify signature
-asap manifest info signed.json                    # Show trust level
+asap keys generate -o key.pem                     # Ed25519 keypair
+asap manifest sign -k key.pem manifest.json       # Sign agent manifest
+asap delegation create -d <urn> -s read -k key.pem --delegator <urn>
+asap trace <trace-id> --log-file asap.log         # Visualize request flow from logs
 ```
 
-See the [CLI reference](docs/cli.md) for `compliance-check` and `audit export` flag details, the [CI compliance gate](docs/ci-compliance.md) for wiring `compliance-check` into GitHub Actions, the [audit export guide](docs/audit.md), [Identity Signing](docs/guides/identity-signing.md), or run `asap --help` for the full command surface.
+See [docs/cli.md](docs/cli.md) for delegation tokens, schema validation, trace visualization, REPL, and full flag reference. Run `asap --help` for your installed version.
 
 ## Version History
 
@@ -172,6 +173,7 @@ High-level only — see **[Changelog](https://github.com/adriannoes/asap-protoco
 
 | Version | What shipped |
 | :-- | :-- |
+| **v2.5.2** | **Security & correctness follow-up** — opt-in operator API auth, `extra="forbid"` ingress, Redis JTI replay, web distributed rate limits, v2.5.1 CR follow-ups (#245–#249), registry signed-manifest/400 fixes. See [CHANGELOG](CHANGELOG.md#252---2026-07-08), [PRD](product/prd/prd-v2.5.2-security-follow-up.md), and [Migration (v2.5.1 → v2.5.2)](docs/migration.md#upgrading-from-v251) |
 | **v2.5.1** | **Code quality patch** — behavior-preserving refactor (transport/server, client, websocket, SQLite storage, auth, integrations) + six correctness/security fixes (atomic `revoke_cascade`, `usage_events` DDL, unified Host-JWT verifier, **WS now enforces OAuth2**, OpenAPI handler cleanup, client `correlation_id` binding). Deprecated import paths removed in v2.6.0. See [CHANGELOG](CHANGELOG.md#251---2026-06-25) and [Migration (v2.5.0 → v2.5.1)](docs/migration.md#upgrading-from-v250-to-v251) |
 | **v2.5.0.1** | **Compliance publish** — **[GitHub Release `v2.5.0.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0.1)** · PyPI **`asap-compliance` 1.3.0** (`mcp-auth-bridge` profile; requires `asap-protocol>=2.5.0`). No `asap-protocol` API change. See [CHANGELOG](CHANGELOG.md#2501---2026-06-24) |
 | **v2.5.0** | **MCP Auth Bridge** — **[GitHub Release `v2.5.0`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0)** · opt-in `protect_server` for stdio MCP; Agent JWT + capability grants; reference example `examples/mcp_auth_bridge/`. See [CHANGELOG](CHANGELOG.md#250---2026-06-24) and [Migration (v2.4.1 → v2.5.0)](docs/migration.md#upgrading-from-v241-to-v250) |
@@ -190,7 +192,14 @@ High-level only — see **[Changelog](https://github.com/adriannoes/asap-protoco
 
 ## 🔭 What's Next?
 
-ASAP is evolving toward an **Agent Marketplace** — an open ecosystem where AI agents discover, trust and collaborate autonomously. See the [ADR index](https://github.com/adriannoes/asap-protocol/blob/main/product/decision-records/README.md) and [v2.0 roadmap PRD](https://github.com/adriannoes/asap-protocol/blob/main/product/prd/prd-v2.0-roadmap.md). Detailed long-term strategy narratives are maintained privately (not shipped in this repository).
+The [agentic marketplace](https://asap-protocol.com/) and Lite Registry are live. The **v2.5.x train** focuses on interop and adoption:
+
+- **v2.5.3** — enterprise/workflow adapter spikes (Adapter Lab II)
+- **v2.5.4** — distribution loop (homepage templates, starter kits, adoption metrics)
+- **`@asap-protocol/mcp-auth`** (npm) — HTTP/SSE MCP middleware
+- **Formal spec track** (v2.5.5) — introspection, privacy, cross-protocol interop on the path to v3.0 economy
+
+See the [v2.5 roadmap PRD](https://github.com/adriannoes/asap-protocol/blob/main/product/prd/prd-v2.5-roadmap.md) and [ADR index](https://github.com/adriannoes/asap-protocol/blob/main/product/decision-records/README.md).
 
 ## Contributing
 
@@ -218,4 +227,4 @@ This project is licensed under the Apache 2.0 License - see the [license](https:
 
 ---
 
-**Built with [Cursor](https://cursor.com/)** using Opus 4.6/4.7, Composer 1.5/2.0, Gemini 3.1 Pro and Kimi K2.5.
+**Built with [Cursor](https://cursor.com/)**, with Composer, Opus, Gemini, Kimi and more.

{asap_protocol-2.5.1 → asap_protocol-2.5.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "asap-protocol"
-version = "2.5.1"
+version = "2.5.2"
 description = "Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication"
 authors = [
     {name = "ASAP Protocol Contributors"}
@@ -30,7 +30,7 @@ dependencies = [
     "fastapi>=0.136.1",
     "httpx[http2]>=0.28.1",
     "authlib>=1.6.12,<2",
-    "joserfc>=1.6.3,<2",
+    "joserfc>=1.6.7,<2",
     "uvicorn>=0.34",
     "python-ulid>=3.0",
     "packaging>=25.0",
@@ -60,12 +60,16 @@ dev = [
     "types-jsonschema>=4.0.0",
     "ruff>=0.14.14",
     "pip-audit>=2.7",
+    "fakeredis>=2.26.0",
 ]
 docs = [
     "ghp-import>=2.1.0",
     "mkdocs-material>=9.5",
     "mkdocstrings[python]>=0.27",
     "pymdown-extensions>=10.21.3",
+    "joserfc>=1.6.7,<2",
+    "python-engineio>=4.13.2",
+    "python-socketio>=5.16.2",
 ]
 dns-sd = [
     "zeroconf>=0.149.5",
@@ -76,7 +80,7 @@ redis = [
 ]
 # Optional WebAuthn (real attestation/assertion when extra installed).
 webauthn = [
-    "webauthn>=2.6,<3",
+    "webauthn>=2.6,<4",
 ]
 # Framework integrations (Sprint E3 — PKG-003).
 mcp = [
@@ -138,6 +142,9 @@ Issues = "https://github.com/adriannoes/asap-protocol/issues"
 # - idna>=3.15 for CVE-2026-45409 (DoS in idna.encode; transitive via httpx/requests)
 # - markdown>=3.10.2 for PYSEC-2026-89 (DoS in html.parser during Markdown parse; mkdocs stack)
 # - pymdown-extensions>=10.21.3 for CVE-2026-46338 (snippets base_path prefix bypass; mkdocs stack)
+# - joserfc>=1.6.7 for CVE-2026-48990 (JWT/JWS primitives; direct + override)
+# - python-engineio>=4.13.2 for CVE-2026-48802 / CVE-2026-48809 (transitive, locust stack)
+# - python-socketio>=5.16.2 for CVE-2026-48804 (transitive, locust stack)
 [tool.uv]
 override-dependencies = [
     "aiohttp>=3.14.0,<4",
@@ -162,6 +169,9 @@ override-dependencies = [
     "pymdown-extensions>=10.21.3",
     "pydantic-settings>=2.14.2",
     "msgpack>=1.2.1",
+    "joserfc>=1.6.7,<2",
+    "python-engineio>=4.13.2",
+    "python-socketio>=5.16.2",
 ]
 
 [project.scripts]

{asap_protocol-2.5.1 → asap_protocol-2.5.2}/schemas/entities/conversation.schema.json

@@ -2,7 +2,7 @@
   "$defs": {
     "CommonMetadata": {
       "additionalProperties": false,
-      "description": "Common metadata keys (extra allowed).",
+      "description": "Common metadata keys (unknown keys rejected).",
       "properties": {
         "purpose": {
           "anyOf": [