chore(main): release codex-pooler 0.2.0

[github-actions]

🤖 I have created a release beep boop

0.2.0 (2026-06-02)

Features

• access: scope runtime credentials by pool (6f1ab99)
• accounts: expose scoped operator assignments (ce6b284)
• accounts: manage operator pool access (3f7f542)
• add production memory telemetry (097d0c3)
• add upstream capacity slot (3223ff4)
• admin: add alert form helpers (bc2d1be)
• admin: add alert incident read model (c9c82ef)
• admin: add alert notification anchors (be2bdc1)
• admin: add alerts management liveview (166df8a)
• admin: add alerts route navigation (bc6a2da)
• admin: add notification read model (7927edf)
• admin: add pool traffic histograms (3e9e1db)
• admin: add stats dashboard observability (0c219f0)
• admin: add upstream account filters (3178e41)
• admin: add upstream account recovery actions (5f3ce2d)
• admin: add upstream account rename dialog (fe49c32)
• admin: add upstream cockpit page (738abbe)
• admin: add upstream cockpit read model (20c5648)
• admin: align upstream scoped filters (bf57554)
• admin: classify request log user agents (2f4fc17)
• admin: combine stats traffic chart (b4a96a7)
• admin: derive upstream quota readiness from windows (5895747)
• admin: expose prompt cache locality toggle (8698553)
• admin: expose upstream codex user-agent setting (e2843ab)
• admin: gate owner-only settings UI (024ff67)
• admin: manage operator pool assignments (cb55d2e)
• admin: mount notification hooks (88e34e7)
• admin: prefill invite recovery dialog (7b77228)
• admin: refine request log filters (e9c6684)
• admin: render alert notification bell (59ef49b)
• admin: render pool quota pressure charts (0617c76)
• admin: render scoped dashboard stats (561244d)
• admin: route owners to global surfaces (aaed91b)
• admin: scope API key management UI (6339929)
• admin: scope invite management UI (9430b11)
• admin: scope pool management UI (bdda129)
• admin: scope request log filters (bdc8575)
• admin: scope stats read models (b4d8fd4)
• admin: show alert audit rows (624519f)
• admin: show scoped job summaries (f37dbb2)
• admin: show translated request origins (f415524)
• admin: support recovery action primitives (b8d8bd4)
• admin: support stacked mobile filter fields (42ecdc8)
• admin: wire notifications on log pages (5c562d9)
• admin: wire notifications on operator pages (c3a13cc)
• admin: wire notifications on pool pages (1904b0e)
• admin: wire notifications on system pages (1e2fb82)
• alerts: add alert audit events (518505e)
• alerts: add alert facade authorization (4a17b58)
• alerts: add alert job scheduling (6d3dcf2)
• alerts: add alert storage schema (34ef1ae)
• alerts: add channel endpoint contracts (c295021)
• alerts: add email delivery adapter (3a6cd87)
• alerts: add incident lifecycle (a3aac3a)
• alerts: add incident receipt storage (41569fc)
• alerts: add notification events (1def0bc)
• alerts: add notification receipt actions (2df7ff4)
• alerts: add persisted evidence evaluator (07310e0)
• alerts: add webhook delivery adapter (0e3147a)
• alerts: add webhook payload signing (3c4d162)
• assets: add ApexCharts LiveView hooks (93e2b84)
• audit: scope audit log visibility (febf08e)
• events: relay pool events through postgres (4ab2e0a)
• export ecto query metrics (4b1a75c)
• gateway: carry forwarded metadata in request options (ff00b77)
• gateway: expose codex model tool mode (22c85f7)
• gateway: synthesize upstream codex user-agent (257951f)
• jobs: restrict admin job history (dcb0b17)
• mcp: attach operator scope to tokens (b9ad512)
• mcp: restrict operator metadata tools (9e02816)
• mcp: scope log metadata tools (f27aa02)
• mcp: scope pool metadata tools (5356810)
• mcp: scope quota metadata tools (62bc8bc)
• openai: track translated request origins (bad25fb)
• payloads: parse transient prompt cache keys (bbeee42)
• pools: add operator pool assignments (f3a5cb4)
• pools: add prompt cache affinity setting (519b9d8)
• pools: enforce assigned pool visibility (5bba627)
• quota: add credit-backed secondary probe routing (c3bc587)
• routing: add prompt cache locality ordering (c8240ec)
• runtime: accept opencode continuity headers (a862128)
• runtime: add codex alpha search proxy (af11721)
• settings: classify upstream codex user-agent (834e59c)
• settings: store upstream codex user-agent (8ecb78b)
• telemetry: add role memory diagnostics (9236153)
• telemetry: expand memory triage metrics (b0d0380)
• telemetry: include stacktraces in memory sampler (3548d78)
• upstreams: enforce assigned pool visibility (9c79328)
• upstreams: persist account emails (58cf2d8)
• upstreams: support account label renames (baab2fd)
• v1: add responses websocket route (ab27766)
• websocket: add bounded lifecycle logger (467db58)

Bug Fixes

• access: store invited account email (81503d0)
• accounting: aggregate reservation windows in database (0c8f765)
• accounting: price owner-forwarded websocket usage (64eddf5)
• accounting: project request log debug metadata (b0ad798)
• accounting: snapshot upstream account emails (4611407)
• accounting: summarize pinned reauth denials safely (4fc1be7)
• add token state to upstream card footer (34621b5)
• admin: add request log metadata icons (5532d74)
• admin: avoid misleading quota chart zeros (cb37798)
• admin: clarify pool quota availability (287ef8c)
• admin: clarify request logs header copy (04cbcd4)
• admin: clarify upstream quota refresh status (ad8a436)
• admin: contain admin shell scrolling (06e78fa)
• admin: prefill reinvites from account email (2706062)
• admin: preserve live chart updates (90320a9)
• admin: show renamed upstream accounts in request logs (0f8266d)
• admin: simplify access admin page titles (548357e)
• admin: simplify operations admin page titles (6ec63eb)
• admin: simplify traffic admin page titles (a05db01)
• admin: suffix core admin page titles (18ed78c)
• alerts: enqueue incident deliveries (9261429)
• align pool metrics footer (ff953ba)
• align upstream card header content (1dfa076)
• allow internal metrics scrapes without ssl redirect (7817814)
• auth: require current password for password changes (959d6d6)
• auth: require reauth for reused refresh tokens (ff7d652)
• bound incomplete stream buffers (aaf6779)
• browser-security: centralize csp ownership (f95f2bd)
• chart: harden app drain rollout (8ab92d7)
• chart: harden oban rollouts (43e45a4)
• chart: label app service for metrics (54110b3)
• dev: load upstream secret env for host mix (01654d7)
• docker: use italian debian mirrors (b18e0fb)
• events: suppress local pubsub echoes (048564c)
• events: tighten postgres relay flow (8c8c2d1)
• expand single upstream quota limits (3efcd2e)
• files: generate file request correlation ids (c744bcc)
• gateway: add pinned reauth recovery contract (7fd60e2)
• gateway: bound retained stream bodies (20608e3)
• gateway: bound retained websocket bodies (5c90ab4)
• gateway: classify pinned reauth continuations (c9fa984)
• gateway: classify usage-limit terminal events (bb1c45e)
• gateway: forward codex responses metadata headers (862a069)
• gateway: generate server correlation ids (f5b9278)
• gateway: ignore non-quota websocket frames (6340efa)
• gateway: mark visible stream output once (f9c95b1)
• gateway: parse websocket response usage (1eb7899)
• gateway: recover session start conflicts (debaa1b)
• gateway: release websocket payloads during upstream waits (a7b71c8)
• gateway: settle websocket usage costs (331e5a7)
• health: drain readiness with marker (711a6f4)
• helm: raise memory (ad4c84c)
• helm: raise to 1millicore (e5d0cce)
• jobs: configure oban shutdown grace (e299e41)
• keep fresh stream sessions routable (7d236d3)
• keep sse server errors circuit-neutral (05b04e8)
• keep upstream actions menu in card header (ce0edb0)
• make admin sidebar navigation scrollable (c198cf2)
• match pool wizard plan badge style (282578d)
• mcp: expose request log debug fields (e0114d8)
• mcp: expose stored upstream account email (09fdc3b)
• mcp: ignore blank quota filters (9fbb61c)
• mcp: keep error results schema-safe (fd2fc4f)
• mcp: match request log metadata ids (49803f5)
• mcp: sanitize pinned reauth log metadata (d191533)
• move upstream readiness to card footer (5245eb9)
• openai: accept ai sdk continuation references (49c09f1)
• openai: emit chat usage stream chunks (d25f4cb)
• openai: normalize response input shapes (db59a06)
• openai: normalize supported SDK controls (ef9b983)
• openai: support chat sdk shapes (32dbf45)
• openai: support responses sdk shapes (9ca0526)
• pools: polish admin pool cards (20bd39c)
• preserve oversized public responses SSE events (5e7a2bd)
• prevent upstream card row stretching (5532ff1)
• pricing: default openai catalog to github pages (601bd8a)
• quota: preserve explicit zero credits (a6c6e0a)
• quota: preserve newer usage resets (929caed)
• quota: project credit-backed probe state (c4a81e6)
• reconciliation: expose failed quota refreshes (f890037)
• reduce upstream card title size (2555a88)
• release: return pricing import result (d5a3101)
• release: start repo for pricing import (f662b64)
• remove onboarding privacy notice card (71caae9)
• remove pool metric helper captions (56a1581)
• remove upstream add capacity card (9cb835e)
• rename pool TPS metric label (341c031)
• requests: cover archived pool log filters (9ef8985)
• reuse plan badges in pool wizard (016299d)
• runtime: use synthetic user-agent for upstream callers (c93e02a)
• security: expose browser CSP to quality scan (4051590)
• settings: backfill development flags (988d02c)
• settings: refresh cached gateway defaults (139a375)
• simplify pool row telemetry (c0bef0a)
• skip live reload for Codex desktop browser (3f3f509)
• soften pool traffic chart styling (15c3667)
• split upstream footer metadata cells (ca38a28)
• streaming: buffer incomplete response sse chunks (2c39016)
• streaming: canonicalize typeless websocket failures (396e9e7)
• streaming: clean up covered sse chunk clause (6d65344)
• streaming: surface websocket idle timeouts (dad0185)
• test: serialize shared database test runs (0672928)
• tests: isolate last active admin check (f6e0b50)
• tests: stop websocket owner sessions (03d6d2b)
• tighten admin chart tooltips (566135c)
• tighten admin notice body leading (a9b3499)
• upstreams: preserve unknown quota chart remaining (4eef314)
• upstreams: store auth json account email (d790fb9)
• v1: accept opencode ordinary replay (c05a878)
• v1: accept opencode replay response items (d7b833c)
• v1: coerce public websocket creates (83cf027)
• v1: coerce public websocket response frames (0434a50)
• v1: recover opencode native replay call ids (0d03e9e)
• v1: send generate flag on public websocket frames (3edb238)
• websocket: cancel owner worker on detach (437c374)
• websocket: capture frame error headers (de96f46)
• websocket: classify graceful owner monitor exits (9df8858)
• websocket: classify wrapped stream errors (b2def15)
• websocket: close owner crash sockets cleanly (4d808a9)
• websocket: drain local response tasks after cleanup (bcfa988)
• websocket: drain owner response tasks briefly (eedb87a)
• websocket: drain response tasks on close (3297c9e)
• websocket: finalize client disconnect turns (bd9c512)
• websocket: finalize owner turns on downstream close (8468b6d)
• websocket: ignore stale owner monitor exits (bb2c670)
• websocket: persist quota evidence from frames (8bfe211)
• websocket: preserve interrupted owner turns (0f6e63b)
• websocket: preserve owner auth failures (0b2e4cd)
• websocket: preserve remote owner result types (032e0ee)
• websocket: recover crashed owner sockets (ced5fd8)
• websocket: recover missing local owners during dispatch (aec014f)
• websocket: recover missing remote owners during dispatch (6ec272e)
• websocket: recover owner lifecycle leftovers (bd9c567)
• websocket: reduce recovered owner takeover alarm (3cbe035)
• websocket: refresh terminal auth before output (4d664a4)
• websocket: remove unreachable owner renewal guard (fc90147)
• websocket: renew live owner leases (7e3f2b4)
• websocket: replace stale local owners before dispatch (f5d7564)
• websocket: report early close lifecycle (e15300e)
• websocket: retry connection limits before output (f13ae05)
• websocket: return owner request results (99b1cfc)
• websocket: sanitize terminal event headers (064abda)
• websocket: store sanitized frame metadata (d5775c8)
• websocket: suppress cleanup-only owner detach warnings (e9d936b)
• websocket: take over drained local owners during dispatch (4b346e6)
• websocket: wait for typed terminal events (b86cbd2)

Performance Improvements

• access: debounce api key touches (e535182)
• accounting: avoid settlement rereads (be0239c)
• accounting: batch ledger window usage (a02e36e)
• accounting: fold final request snapshot writes (4d19eb3)
• accounting: lock effective policy once (95f356e)
• accounting: narrow policy reservation locks (7b9f189)
• accounting: reuse identity snapshots (3289d2d)
• dev: expand gateway probe budgets (473d6c7)
• gateway: add request-local route state (416c0e4)
• gateway: batch quota projection reads (2c55e43)
• gateway: carry route snapshots through dispatch (94de9c9)
• gateway: defer route metadata writes (230ae4d)
• gateway: reuse control-plane routing settings (a27a5ed)
• gateway: reuse hydrated model visibility (e5b8c71)
• pools: expose default routing settings (7d91f46)
• quota: batch route window snapshots (0d754d8)
• routing: batch circuit eligibility snapshots (5770127)
• routing: consume request-local route state (58b7025)
• routing: hydrate model visibility once (05d83a4)
• routing: reuse circuit snapshots for selection (549b511)
• routing: reuse quota snapshots for ordering (69754a3)

---

This PR was generated with Release Please. See documentation.