chore: release v1.21.0-beta.3

[Soju06]

Summary

• Prepares beta release v1.21.0-beta.3 for the 1.21.0 stable train.
• Updates release-managed version files only; release-please remains the stable release owner.
• Merging this PR will publish v1.21.0-beta.3 only after the release-candidate validation checklist below is completed for this exact candidate SHA.
• Synced automatically from release-please PR chore(main): release 1.21.0 #1087; no manual beta workflow dispatch is required.

Changes since v1.21.0-beta.2

• fix(proxy): send complete Codex identity headers (fix(proxy): send complete Codex identity headers #1197) (d57307b)
• fix(account-ui): expand account list on tall viewports (fix(account-ui): expand account list on tall viewports #1195) (
  d5cef8)
• fix(proxy): hide blank reasoning summary comments (fix(proxy): hide blank reasoning summary comments #1154) (
  b62e03)
• fix(proxy): wait on local account cap pressure (fix(proxy): wait on local account cap pressure #1155) (
  689c6d)
• fix(proxy): preserve admitted bridge waiters on upstream close (fix(proxy): preserve admitted bridge waiters on upstream close #1191) (
  03b777)
• feat(proxy): add Fast Mode prohibition setting (feat(proxy): add Fast Mode prohibition setting #1190) (
  cab7ef)
• fix(proxy): isolate unanchored parallel bridge requests (fix(proxy): isolate unanchored parallel bridge requests #1169) (
  cea524)
• fix(proxy): reserve stream capacity for recovery (fix(proxy): reserve stream capacity for recovery #1188) (
  bf0345)
• fix(proxy): omit synthesized tools on owner-forward and source egress (fix(proxy): omit synthesized tools on owner-forward and source egress #1203) (
  e94e07)
• fix(proxy): normalize selected installation metadata (fix(proxy): normalize selected installation metadata #1204) (
  2d52ff)
• fix(accounts): sync free-to-paid plan upgrades (fix(accounts): sync free-to-paid plan upgrades #1217) (
  57ebc3)
• fix(ci): keep manual rerun attempts authoritative (fix(ci): keep manual rerun attempts authoritative #1216) (
  87b590)
• fix(proxy): preserve responses turn-state fidelity (fix(proxy): preserve responses turn-state fidelity #1193) (
  88540b)
• fix(models): retain hidden metadata across partial refreshes (fix(models): retain hidden metadata across partial refreshes #1221) (
  cf8723)
• fix(proxy): preserve websocket reconnect affinity (fix(proxy): preserve websocket reconnect affinity #1220) (
  ca1043)
• fix(proxy): preserve websocket incomplete reasons (fix(proxy): preserve websocket incomplete reasons #1219) (
  b962b3)
• fix(proxy): reselect only safe websocket turns (fix(proxy): reselect only safe websocket turns #1207) (
  4c3d10)
• fix(proxy): route by complete account capability catalogs (fix(proxy): route by complete account capability catalogs #1205) (
  f8815b)
• fix(proxy): keep native capacity waits alive (fix(proxy): keep native capacity waits alive #1218) (
  0b0d43)
• fix(ui): make routing strategy guide clickable cards (fix(ui): make routing strategy guide clickable cards #1229) (
  534d95)
• fix(oauth): isolate reauth by Team seat identity (fix(oauth): isolate reauth by Team seat identity #1224) (
  64b9f7)
• fix(proxy): prevent sequenced websocket replay (fix(proxy): prevent sequenced websocket replay #1223) (
  4f891a)
• feat(proxy): configure account concurrency caps (feat(proxy): configure account concurrency caps #1214) (
  88807e)
• feat(dashboard): show request log speed metrics (Show request log speed metrics #1210) (
  3de4dd)
• fix(warmup): separate idle threshold, fix jitter, redesign warm-up UI (fix(warmup): separate idle threshold, fix jitter, redesign warm-up UI #1230) (
  1c6355)

Release-candidate validation

Validated candidate: bad6fd2

Complete these checks on the exact candidate SHA above before merging. The beta release guard and publish workflow fail while any item remains unchecked or the SHA is stale.

• Backend/unit/integration gates
• Frontend tests/build
• Wheel/package validation
• Docker/container smoke
• Live upstream/account smoke
• Live upstream/account smoke not required

Validation evidence (2026-07-12, candidate bad6fd2 = main 1c63550 + version bump; bundles all round-3/4/5 merges):

• CI matrix green on the candidate (31 checks; only the guard pending this checklist).
• Wheel codex_lb-1.21.0b3 built, fresh-venv install OK, codex-lb --help exit 0, metadata version 1.21.0b3; verify_release_version → tag v1.21.0-beta.3 / pypi 1.21.0b3.
• Docker: fresh-start applies Alembic to head 20260711_030000, drift-check clean, /health/live + / = 200, no tracebacks. Upgrade path verified: seeded DB at 20260711_000000 → startup applied the 3-step chain 010000→020000→030000 (chatgpt_user_id, concurrency caps nullable, idle_threshold FLOAT NOT NULL default 1.0) cleanly with drift-check passing.
• pytest tests/unit at the SHA: 3511 passed, 3 skipped; ruff + ty (frozen) clean.
• Live upstream/account smoke PERFORMED (real Codex CLI 0.144.1 + real ChatGPT account, scratch instance on identical code): gpt-5.6 catalog (model_messages + correct efforts incl ultra on sol/terra), shell tool execution, and collaboration.spawn_agent multi-agent-v2 flow (subagent returned correct sha256) — 7/7 gpt-5.6 upstream requests success, ZERO 400s.
• ⚠️ Operator note (not a release blocker): production DBs that predate accounts.codex_installation_id must apply a manual column-add + uuid backfill + NOT-NULL alter before the beta.3 startup drift-check passes; the migration chain does not self-heal that pre-existing gap. Reproduced and remediated on a prod-DB copy during E2E.

Install after publish

uvx --from "codex-lb==1.21.0b3" codex-lb
docker pull ghcr.io/Soju06/codex-lb:1.21.0-beta.3
helm install codex-lb oci://ghcr.io/soju06/charts/codex-lb --version 1.21.0-beta.3 --devel

Promotion

Merge the normal release-please PR to promote this beta-tested train to 1.21.0.

[Soju06]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Delightful!

Reviewed commit: 227e084b22

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Soju06]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: 4a3150f27e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Soju06]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

Reviewed commit: 5340ef50a7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Soju06]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: a225f0db0c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".