v2.5.4

Distribution Loop — homepage, thin starters, Build for agents guide, and maintainer
telemetry ops (no public metrics UI). Scope:
prd-v2.5.4-distribution-loop.md.
npm @asap-protocol/* packages remain at 2.4.1.

Added

• Thin starters under examples/starters/:
  • openapi-provider/ — OpenAPI → ASAP skills wrapper
  • typescript-consumer/ — @asap-protocol/client consumer smoke
  • mcp-auth-bridge/ — MCP Auth Bridge (protect_server) wrapper
• Build for agents guide — docs/guides/build-for-agents.md
  (agent-first onboarding into the three starters).
• Homepage agent-first narrative — hero / CTAs route to docs, starters, and
  examples (marketplace browse/register remain secondary).
• Telemetry ops — collector defaults expanded (npm ≥3 scoped packages,
  PyPI ≥2); maintainer runbook; no public live metrics UI (PRD D4).

Security (deps)

• Raise optional [mcp] floor to mcp>=1.28.1 for CVE-2026-52869,
  CVE-2026-52870, and CVE-2026-59950. See SECURITY.md.

Migration

• v2.5.3 → v2.5.4: See migration guide.
  No breaking wire-protocol changes; adopt starters/guide as needed.

---

---

Full Changelog: v2.5.3...v2.5.4