Repository navigation

[Server] Bind `requestState` to the request it was minted for - #625

Merged

chr-hertel merged 10 commits into

modelcontextprotocol:mainfrom

BrocksiNet:feat/request-state-binder

Nov 5, 2026

Merged

[Server] Bind `requestState` to the request it was minted for#625
chr-hertel merged 10 commits into
modelcontextprotocol:mainfrom
BrocksiNet:feat/request-state-binder

Commits on Nov 4, 2026
- [Server] Bind `requestState` to the request it was minted for
  
  BrocksiNet
  authored and
  chr-hertel
  committed
  cde79d5
- [Server] Take the `requestState` binder as an argument of `setRequestState()`
  
  BrocksiNet
  authored and
  chr-hertel
  committed
  c60cdfd
- [Docs] Explain which `requestState` only the binder can bind
  
  BrocksiNet
  authored and
  chr-hertel
  committed
  39e2b80
- [Server] Harden `OriginatingRequestBinder` against colliding principals and arguments
  
  BrocksiNet
  authored and
  chr-hertel
  committed
  0ab6a4d
- [Server] Fail the request when the `requestState` binder throws
  chr-hertel
  committed
  6ba0af5
- [Server] Throw the SDK's `RuntimeException` when `OriginatingRequestBinder` cannot encode
  chr-hertel
  committed
  e3abcb8
- [Server] Pin that `1` and `1.0` bind to the same `requestState`
  chr-hertel
  committed
  e83136a
- [Server] Keep NUL-prefixed argument names in the `requestState` binding
  chr-hertel
  committed
  9f3a072
- [Server] Encode the canonical arguments deep enough for any decoded request
  chr-hertel
  committed
  989a854
- [Server] Keep issuer and client bound when a resolver names the `requestState` subject
  chr-hertel
  committed
  514abc3