chore(main): release codex-pooler 0.7.9

[github-actions]

🤖 I have created a release beep boop

0.7.9 (2026-09-11)

Features

• admin: show requested, upstream-reported, and priced service tiers separately (072580e)
• admin: show the downstream delivery receipt in the request log attempt drawer (457bfd9)
• admin: tell the service tier apart from reasoning effort in request logs (2601d36)
• gateway: derive the Codex routing hint for /v1 requests and keep it out of websocket reuse (1934516)
• gateway: forward provider session headers on the native websocket handshake (b3075a9)
• gateway: record a downstream delivery receipt for native websocket terminals (fbe2e71)
• gateway: record the downstream delivery receipt for HTTP SSE turns (6b31f1d)
• gateway: relay upstream parameter validation rejections to clients (632d90b)
• gateway: send a derived session-id upstream for /v1 requests with a prompt_cache_key (4e32aeb)
• runtime: name the blocking transaction when an owner lease renewal times out (1f48723)
• status: add OpenAI incidents feed and admin surface (2a0f615)

Bug Fixes

• accounting: keep the delivery receipt projection a runtime reference and accept an already-dead owner in the witness test (faaaef8)
• accounting: lock the session before the API key in the websocket resend claim (cdb307b)
• catalog: accept the flat default per-minute pricing shape (1348a59)
• gateway: admit a byte-identical resend after a lifecycle-only upstream stream cut (d1fb7ef)
• gateway: admit a byte-identical websocket resend after a provider terminal failure (af00377)
• gateway: bound the idle lifetime of pooled upstream HTTP connections (299bf37)
• gateway: finalize a websocket turn whose response task died by exception (f9bf8f9)
• gateway: refresh and retry HTTP dispatch on a provider 401 instead of passing it to the client (3f7b4ed)
• gateway: rewrite ultra to the highest catalog level when a model lists no max (b737f4e)
• gateway: scope the /v1 derived session-id to the Pool and API key (dc16bb6)
• platform: bound idle pooled connections for every outbound HTTP caller (41ea506)
• release: restore the Repo config after a release task names its connections (f457282)
• runtime: bound the synchronous owner lease renewal lock wait inside Postgres (ec9f577)
• runtime: reference the lock wait diagnostics type through the owning module (06c211a)
• status: preserve feed errors for worker retries (d9704fc)
• upstreams: bound idle pooled connections for every provider HTTP caller (db8380a)
• websocket: acknowledge a parked local-owner response task when the socket terminates (2d21e4f)
• websocket: deliver at most one error frame per native turn on owner-forwarded sockets (5d375fd)
• websocket: keep native websocket turns off HTTP dispatch regardless of the stream flag (7878f5e)
• websocket: never relay a provider models ETag on native replay turns (dc786f9)
• websocket: settle direct and proxy response tasks when their socket dies unacknowledged (edbddb8)

Performance Improvements

• access: take a share lock on api_keys for read-only runtime paths (4e679c8)
• gateway: end socket terminate drains on signals and plumb owner timeouts through recovery (d3c31cf)
• gateway: report pre-content owner terminals immediately, plumb handoff timeouts, and bound hosted shell validation (75c97dd)

Tests

• gateway: give the rejection drain, replay cleanup and saved-reset decision time test-facing knobs (10b9d7f)
• keep the suite fast, quiet, and off the network (c53e54e)
• platform: give the replay migration rehearsal and the owner protocol test real detection budgets (cd65d47)
• platform: pin one Finch pool per distinct outbound option set (4a17825)
• quota: prime the header exhaustion row from the hard-pin recovery test itself (7ca2782)
• runtime: close the timing races in the backend HTTP owner lease tests (28700ab)
• runtime: give the local owner crash test its own sandbox connections (b8020d6)
• runtime: purge the crash test's identity, secrets and assignment rows too (2bb1d1b)
• runtime: purge the owner crash test's committed rows and scope table-wide assertions to the Pool (a29aceb)
• runtime: split the owner forwarding websocket test into family files (1270b46)
• runtime: split the websocket controller test into family files (b752030)
• support: mark the lifecycle log capture helper for dialyzer (945a1f9)
• support: release held FakeUpstream websocket barriers on shutdown instead of waiting out the 15 s kill (ea9abb0)
• upstream: add a native per-frame barrier mode to FakeUpstream and tag strict fixture provenance (3eabd6a)
• upstream: finish the strict FakeUpstream migration (e6210dd)
• upstream: migrate one protocol-sensitive test per family to strict fixtures (5c6d346)
• v1: wait for each websocket terminal settlement before the next loop shape (7a5e64f)

Miscellaneous Chores

• deps: update dependency helm/helm to v4.3.0 (#382) (423457d)
• deps: update dependency node to v26.8.2 (#383) (fbdd0c7)

---

This PR was generated with Release Please. See documentation.