lidge-jun/opencodex v2.1.4

on GitHub

GO-with-conditions resolved

All remaining Medium/Low conditions from the v2.1.3 security audit are now addressed.

• Connect timeout: connectTimeoutMs (default 30s) covers DNS, TCP, TLS, and response header stalls via AbortSignal.timeout
• Native catalog: supports_parallel_tool_calls preserved from upstream template for native OpenAI models; only routed entries forced to false
• Reasoning summary: suppressed when reasoning.summary is undefined (not just "none"), matching the Responses API spec
• Regression tests: 7 new bridge tests — output order, custom/search tool types, error status, MCP namespace round-trip, hideThinkingSummary SSE + non-stream