feat: allow max reasoning effort policies

Author: masterkain

docs-site/src/content/docs/operators/api-keys.mdx

@@ -152,7 +152,7 @@ Catalog models are derived from current routable model metadata. Manual model id
 Enforced request fields let the key override selected client request values:
 
 1. enforced model
-2. enforced reasoning effort
+2. enforced reasoning effort (`minimal`, `low`, `medium`, `high`, `xhigh`, or `max`)
 3. enforced service tier
 
 Leave a field unset when the client request should pass through unchanged.

lib/codex_pooler/access/api_keys/policy.ex

@@ -7,7 +7,7 @@ defmodule CodexPooler.Access.APIKeys.Policy do
   @status_active "active"
   @status_paused "paused"
   @status_revoked "revoked"
-  @reasoning_efforts ~w(minimal low medium high xhigh)
+  @reasoning_efforts ~w(minimal low medium high xhigh max)
   @service_tiers ~w(auto default flex priority scale)
 
   @type access_error :: %{required(:code) => atom(), required(:message) => String.t()}

lib/codex_pooler/access/schemas/api_key.ex

@@ -5,7 +5,7 @@ defmodule CodexPooler.Access.APIKey do
   import Ecto.Changeset
 
   @derive {Inspect, except: [:key_hash]}
-  @reasoning_efforts ~w(minimal low medium high xhigh)
+  @reasoning_efforts ~w(minimal low medium high xhigh max)
   @service_tiers ~w(auto default flex priority scale)
 
   @type t :: %__MODULE__{}

lib/codex_pooler/gateway/payloads/payload_normalizer.ex

@@ -385,7 +385,7 @@ defmodule CodexPooler.Gateway.Payloads.PayloadNormalizer do
 
   defp normalize_thinking_string(value) do
     case value |> String.trim() |> String.downcase() do
-      effort when effort in ["low", "medium", "high", "xhigh"] -> %{"effort" => effort}
+      effort when effort in ["low", "medium", "high", "xhigh", "max"] -> %{"effort" => effort}
       enabled when enabled in ["enabled", "true", "on"] -> %{"effort" => "medium"}
       disabled when disabled in ["disabled", "false", "off"] -> nil
       _unknown -> nil

lib/codex_pooler_web/live/admin/forms/api_key_policy_form.ex

@@ -101,7 +101,8 @@ defmodule CodexPoolerWeb.Admin.ApiKeyPolicyForm do
       {"Low", "low"},
       {"Medium", "medium"},
       {"High", "high"},
-      {"Extra high", "xhigh"}
+      {"Extra high", "xhigh"},
+      {"Max", "max"}
     ]
   end
 

priv/repo/migrations/20260622035044_allow_max_reasoning_effort.exs

@@ -0,0 +1,35 @@
+defmodule CodexPooler.Repo.Migrations.AllowMaxReasoningEffort do
+  use Ecto.Migration
+
+  def up do
+    execute """
+    ALTER TABLE api_keys
+    DROP CONSTRAINT api_keys_enforced_reasoning_effort_check
+    """
+
+    execute """
+    ALTER TABLE api_keys
+    ADD CONSTRAINT api_keys_enforced_reasoning_effort_check
+    CHECK (enforced_reasoning_effort IS NULL OR enforced_reasoning_effort = ANY (ARRAY['minimal'::text, 'low'::text, 'medium'::text, 'high'::text, 'xhigh'::text, 'max'::text]))
+    """
+  end
+
+  def down do
+    execute """
+    ALTER TABLE api_keys
+    DROP CONSTRAINT api_keys_enforced_reasoning_effort_check
+    """
+
+    execute """
+    UPDATE api_keys
+    SET enforced_reasoning_effort = NULL
+    WHERE enforced_reasoning_effort = 'max'
+    """
+
+    execute """
+    ALTER TABLE api_keys
+    ADD CONSTRAINT api_keys_enforced_reasoning_effort_check
+    CHECK (enforced_reasoning_effort IS NULL OR enforced_reasoning_effort = ANY (ARRAY['minimal'::text, 'low'::text, 'medium'::text, 'high'::text, 'xhigh'::text]))
+    """
+  end
+end

test/codex_pooler/access/api_key_creation_test.exs

@@ -335,7 +335,7 @@ defmodule CodexPooler.Access.APIKeyCreationTest do
           key_hash: <<"typed-policy-valid">>,
           status: "active",
           enforced_model_identifier: "gpt-5.4-mini",
-          enforced_reasoning_effort: "medium",
+          enforced_reasoning_effort: "max",
           enforced_service_tier: "scale"
         })
 

test/codex_pooler/access_test.exs

@@ -599,6 +599,12 @@ defmodule CodexPooler.AccessTest do
 
       assert {:error, :api_key_policy_malformed} =
                Access.normalize_api_key_policy(%{metadata: %{"labels" => "production"}})
+
+      assert {:error, :api_key_policy_malformed} =
+               Access.normalize_api_key_policy(%{enforced_reasoning_effort: "ultra"})
+
+      assert {:error, :api_key_policy_malformed} =
+               Access.normalize_api_key_policy(%{enforced_reasoning_effort: 123})
     end
 
     @tag :api_key_policy_contract
@@ -621,6 +627,14 @@ defmodule CodexPooler.AccessTest do
                })
     end
 
+    @tag :api_key_policy_contract
+    test "normalizes max enforced reasoning effort" do
+      assert {:ok, policy} =
+               Access.normalize_api_key_policy(%{enforced_reasoning_effort: " Max "})
+
+      assert policy.enforced_reasoning_effort == "max"
+    end
+
     @tag :api_key_policy_contract
     @tag :empty_allow_lists
     test "empty model allow-list denies all models" do

test/codex_pooler/db_invariants/access_policy_test.exs

@@ -92,6 +92,20 @@ defmodule CodexPooler.DBInvariants.AccessPolicyTest do
       )
     end)
 
+    [[max_reasoning_id]] =
+      Repo.query!(
+        """
+        INSERT INTO api_keys (
+          pool_id, display_name, key_prefix, key_hash, status, created_by_user_id,
+          enforced_reasoning_effort
+        ) VALUES ($1, 'Max reasoning effort', 'sk_policy_max_reasoning', $2, 'active', $3, 'max')
+        RETURNING id
+        """,
+        [pool_id, <<"policy-max-reasoning">>, user_id]
+      ).rows
+
+    assert count_rows("api_keys", max_reasoning_id) == 1
+
     assert_db_error(:check_violation, fn ->
       Repo.query!(
         """

test/codex_pooler/gateway/payloads/payload_normalizer_test.exs

@@ -471,6 +471,22 @@ defmodule CodexPooler.Gateway.Payloads.PayloadNormalizerTest do
                 }}
     end
 
+    test "normalizes max thinking alias to reasoning effort" do
+      payload = %{"model" => "gpt-4.1", "input" => "hello", "thinking" => "max"}
+      request_options = RequestOptions.build(%{}, "/backend-api/codex/responses", payload)
+      model = %Model{upstream_model_id: "provider-model"}
+
+      assert {:ok, encoded} =
+               PayloadNormalizer.upstream_payload(
+                 payload,
+                 model,
+                 "/backend-api/codex/responses",
+                 request_options
+               )
+
+      assert Jason.decode!(encoded)["reasoning"] == %{"effort" => "max"}
+    end
+
     test "omits enforced auto and default service tiers from upstream JSON" do
       model = %Model{upstream_model_id: "provider-model"}