- WebSocketSession supports client-mode outgoing frame masking (RFC 6455) via in-place XOR, reusing the unmask routine already used for inbound frames. - HeaderMap gains an allocation-free forEach(HeaderConsumer) for callers that must handle an open-ended set of header names (e.g. proxying). - HttpServer relays streaming/chunked response bodies through a shared per-connection ThreadLocal buffer instead of relying on InputStream#transferTo (which allocates internally) or a fresh byte[8192] per chunked write. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>