pin workflow-children tier models to sol providers only

[0xgleb]

Motivation

The classified-workflows model tiers map mid and light tiers to gpt-5.6-terra/gpt-5.6-luna (openai-codex). After the token-expiry provider outage, children should run on the authenticated sol providers only; gpt-5.6 must not receive workflow-children traffic.

Solution

Mid tier: openai-codex/gpt-5.6-terra → openai-codex/gpt-6.1-sol. Light tier: openai-codex/gpt-5.6-luna → openai-codex/gpt-6.1-sol. No other tier mappings change.

Validation

Focused suite RED→GREEN 6/6 (run in the delivery worktree against the exact staged blobs: 609f8339 source, a5df7ef0 test). Independent review APPROVED the staged diff: no residual gpt-5.6 references, no unrelated removals. Commit bf7e3d5, single commit on master (5b2a077).

Summary by CodeRabbit

• Updates
  • Mid- and light-tier OpenAI Codex models now use GPT-6.1 Sol instead of the previous GPT-5.6 models.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 027845d4-4bed-4ca3-82f7-28b5c0b08528

📥 Commits

Reviewing files that changed from the base of the PR and between 5b2a077 and bf7e3d5.

📒 Files selected for processing (2)

• pi/extensions/shared/model-tiers.test.ts
• pi/extensions/shared/model-tiers.ts

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (4)

• GitHub Check: fj (x86_64-darwin)
• GitHub Check: fj (aarch64-darwin)
• GitHub Check: fj (aarch64-linux)
• GitHub Check: fj (x86_64-linux)

🔇 Additional comments (2)

pi/extensions/shared/model-tiers.ts (1)

33-34: LGTM!

pi/extensions/shared/model-tiers.test.ts (1)

27-28: LGTM!

Also applies to: 32-33

---

Walkthrough

The mid and light OpenAI Codex tiers now use gpt-6.1-sol. The model-tier test expects this model and rejects gpt-5.6.

Changes

OpenAI Codex model tiers

Layer / File(s)	Summary
Update tier models and assertions pi/extensions/shared/model-tiers.ts, pi/extensions/shared/model-tiers.test.ts	The mid and light tier entries now use gpt-6.1-sol. The test expects that model and rejects gpt-5.6.

Priority: ⬇️ Low

Change: Bug fix

Merge Risk: ⚪ Minimal · up to bf7e3

This narrowly updates the Codex mid/light tier targets. No material regression in repository-run workflows was established; actual model availability remains host-configured.

Security Architecture Review

Security architecture risk: 🔵 Low · up to bf7e3

The change redirects existing requests within the same provider without adding privileges or relaxing selection checks. Production availability and authentication for the replacement destination remain unverified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — The demonstrated exposure is existing shared-tier consumers selecting a different model within the same provider. The inspected change does not expand caller-selected providers, process privileges, or tool authority. Host-side endpoint and credential routing remain outside the available evidence.

Trust Boundaries and Controls

• observed — Workflow resolution retains exact matching against availableModels and acceptance only of configured tier models. If no configured candidate matches, preflight returns model_unavailable. These repository checks do not independently prove live credentials for the replacement destination.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: pinning workflow-children tier models to sol providers.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 2…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}