v2.1.4
GO-with-conditions resolved
All remaining Medium/Low conditions from the v2.1.3 security audit are now addressed.
- Connect timeout:
connectTimeoutMs(default 30s) covers DNS, TCP, TLS, and response header stalls viaAbortSignal.timeout - Native catalog:
supports_parallel_tool_callspreserved from upstream template for native OpenAI models; only routed entries forced tofalse - Reasoning summary: suppressed when
reasoning.summaryis undefined (not just"none"), matching the Responses API spec - Regression tests: 7 new bridge tests — output order, custom/search tool types, error status, MCP namespace round-trip, hideThinkingSummary SSE + non-stream