Add secure HTTP server communication transport - #73

Merged

BenCodez merged 56 commits into

mainfrom

codex/http-transport-library

Sep 7, 2026

Commits on Sep 5, 2026

feat(servercomm): add secure HTTP transport
BenCodez
committed
87d506f
fix(servercomm): persist HTTP replay state
BenCodez
committed
2951868
fix(servercomm): confirm HTTP delivery acknowledgements
BenCodez
committed
f62bf69
fix(servercomm): fail closed on partial HTTP state
BenCodez
committed
e9159c1
fix(servercomm): bound authority state and support IPv6
BenCodez
committed
e3f08cc
fix(servercomm): bound proxy state and secure credential roots
BenCodez
committed
4b92ea3
fix(servercomm): separate HTTP acknowledgement directions
BenCodez
committed
1faa2d2
Handle HTTP renewal and backend state churn
BenCodez
committed
c01f2cc
Make HTTP revocation persistence retryable
BenCodez
committed
80a55da
Fix remaining HTTP transport review findings
BenCodez
committed
9d0166f
Track uncertain HTTP queue publications
BenCodez
committed
ea26fde
Make HTTP enrollment and queue retries safe
BenCodez
committed
8d8e9c8
Fix remaining HTTP transport review findings
BenCodez
committed
989ec3f

Commits on Sep 6, 2026

Fix transport queue uncertainty and 429 handling

Copilot
and
BenCodez
authored
831f2f1
Keep uncertain queue entries hidden after restart
BenCodez
committed
6f31643
Recover generated sends and published credential replacements
BenCodez
committed
a6967d8
Recover authority and completed delivery persistence failures
BenCodez
committed
cf155d9
Retry pre-callback state writes and bound quarantined backends
BenCodez
committed
5bcce2d
Enforce verified private permissions for HTTP transport state
BenCodez
committed
11130ed
Confirm credential activation and safely finish callback shutdown
BenCodez
committed
99ebcc6
Preserve enrollment CA trust and validate codes before reservation
BenCodez
committed
4c7887f
Require trusted CA key continuity for credential renewal
BenCodez
committed
c8befc4
Enforce one-second minimum enrollment lifetime
BenCodez
committed
2ab7908
Lock inbound journal ownership and validate client key pairs
BenCodez
committed
d6a202c
Recover journal retirement and lock outgoing proxy queues
BenCodez
committed
c9b9e6f
Prevent backend state creation after proxy shutdown
BenCodez
committed
d5e8474
Close backend send admission and enforce pending enrollment expiry
BenCodez
committed
2fe4343
Rate limit certificate renewal and serialize TLS identity writes
BenCodez
committed
d2754e9
Reload persisted TLS identity before renewal
BenCodez
committed
8a994f0
Restore inbound journals within the backend capacity bound
BenCodez
committed
7bf06f9
test: isolate failed HTTP revocation retries
BenCodez
committed
c390c0f
Preserve failed revocation target across retries
BenCodez
committed
7beae58
Wait for concurrent JSON saves in tests
BenCodez
committed
826e680
Recover durable HTTP setup failure paths
BenCodez
committed
af984b8
Fix HTTP transport restart and persistence recovery
BenCodez
committed
cf61b6f

Commits on Sep 7, 2026

Fix HTTP enrollment review findings
BenCodez
committed
b2e5f7b
Reclaim retired inbound ownership locks
BenCodez
committed
f451f78
Retry and bound orphaned ownership locks
BenCodez
committed
5e6a149
Serialize and reconcile HTTP enrollment
BenCodez
committed
9ae2eef
Reconcile revocation and startup races
BenCodez
committed
9504823
Track durable revocation reconciliation
BenCodez
committed
640de8b
Drop retired outgoing queue indexes
BenCodez
committed
05e8623
Serialize and bound credential renewal
BenCodez
committed
b076a3d
Decouple credential activation cleanup
BenCodez
committed
9ea7faf
Bound concurrent persistence tests
BenCodez
committed
7801999
Serialize credential renewal issuance
BenCodez
committed
b58bc6c
Defer journal sealing until callbacks stop
BenCodez
committed
aeefebd
Wait for acknowledgement callbacks before sealing
BenCodez
committed
1fd1087
Retain bounded revocation history
BenCodez
committed
bd23fd5
Compact revocation history by generation
BenCodez
committed
196c0b0
Normalize IPv6 certificate names
BenCodez
committed
ab0eed2
Harden HTTP transport recovery
BenCodez
committed
6c470b2
Retain revocation generations during compaction
BenCodez
committed
3a4434b
Harden HTTP transport lifecycle bounds
BenCodez
committed
658c249
Keep revocation and identity recovery durable
BenCodez
committed
73f3c8f
Fence issued certificates during revoke retry
BenCodez
committed
95ee1b3