[nicholls73]

Summary

• Add the native OpenAI Decisions provider and OpenAI Auto routing preset.
• Reuse the first successful model/effort choice for the same explicit conversation, avoiding another Decisions API evaluation on each message. Native OpenAI pinning has no idle expiry by default; sessionPin: false opts out and sessionPin: { ttlMs } sets an idle window.
• Persist anonymous loopback pins across clean proxy restarts, and isolate loopback callers presenting different valid local API keys. Authenticated callers remain process-local because their principal identity is process-scoped.
• Keep TypeSafe and generic JEV pin behavior unchanged; update the GUI, CLI/config surfaces, tests, and routing documentation.

Verification

• bun run test:changed — 56,007 passed, 257 skipped, 5 failed (56,269 tests across 2,442 files).
  • Two compiled-child tests could not run because this host has neither Cargo nor a prebuilt ocx-child binary.
  • The update-stop test's restart was refused because service-registration ownership could not be verified on this host.
  • The native catalog test's temporary .codex/models_cache.json fixture was absent.
  • The native async-lifetime test failed under parallel execution but passed when rerun alone.
• Focused pin regressions — 37 passed, 146 expectations.
• Isolated rerun of the five failures — confirmed the two Cargo/binary blockers, update-registration refusal, and missing catalog fixture; the async-lifetime test passed.
• bun run typecheck — passed (2,496 files).
• bun run structure:check, bun run privacy:scan, bun run lint:gui, and bun run build:gui — passed.
• docs-site build — passed (766 pages; 115,618 internal links checked).
• git diff --check — passed.

Checklist

• Scope stays focused and avoids unrelated cleanup.
• Docs or release notes were updated when needed.
• Security-sensitive changes were reviewed for secrets, auth, and unsafe defaults.

Review readiness checklist

This PR stays in draft until every box below is ticked. Tick all four boxes once the requirements are met:

• Required local validation passed; commands, results, and any full-suite exception are documented.

• I pushed my PR to a recent dev commit (at most 10 behind; a maintainer may still ask for the exact tip before merge).

• I resolved all correct Codex and CodeRabbit findings.

• My PR is ready for review.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[github-actions]

✅ Deterministic PR hygiene checks passed.

[github-actions]

⏳ DRAFT

• review readiness checklist open (1/4 boxes ticked).

What to do

• Tick all four boxes in the PR description once you're done (currently 1/4).

Review readiness checklist

• ⬜ Required local validation passed; commands, results, and any full-suite exception are documented.
• ✅ I pushed my PR to a recent dev commit (at most 10 behind; a maintainer may still ask for the exact tip before merge).
• ⬜ I resolved all correct Codex and CodeRabbit findings.
• ⬜ My PR is ready for review.

1/4 boxes ticked.

This PR stays in draft until every box above is ticked.