v0.0.11
v0.0.11 adds stronger timeout/error semantics, safer notification delivery, and official multi-architecture container publishing.
Highlights
- Polled commands now support enforced
response_timeoutdeadlines so expired MCP work and late responses stop cleanly. - MCP and tunnel failures now preserve structured error provenance without exposing raw exception or response content.
Reliability and security
- Retries honor
Retry-After, preserve response payloads and deadlines, and avoid replaying ambiguous notification writes. - Malformed downstream MCP responses now return terminal structured errors instead of leaving requests unresolved.
- Harpoon reconnects after connection TTL expiry and recognizes
localhostas loopback. - OAuth and mTLS handling now preserves PRMD resource identifiers, tolerates genuinely absent OAuth metadata in
doctor, and scopes client certificates to the target origin. - Extra headers are validated and safely encoded; logs redact sensitive URL details; malformed control-plane API keys fail fast.
- Fixed false auth-readiness classification and Windows embedded help loading.
Distribution
- Official Linux
amd64/arm64images publish toghcr.io/openai/tunnel-client:v0.0.11with stable aliases, commit-SHA, SBOM, and provenance metadata. - Linux, macOS, and Windows archives are published for
amd64andarm64. - Homebrew Formula generation and smoke-test tooling landed, but Homebrew publication is not enabled yet.
Full Changelog: v0.0.10...v0.0.11