feat(server): createRequestStateCodec — opt-in HMAC sealing for multi-round-trip requestState#2332

Merged

felixweinberger merged 2 commits into

v2-2026-07-28from

fweinberger/on-codec-conformance

Jun 23, 2026

Commits on Jun 23, 2026

feat(server): add createRequestStateCodec — opt-in HMAC sealing for the multi-round-trip requestState
felixweinberger
committed
fix(server): requestState codec hardening — bind as keyed HMAC tag, key snapshot, prefix bound into MAC, constant-time bind compare, fail-closed on unconfigured bind; align {fetch,close,notify,bus}…
felixweinberger
committed