fix(cli): release the pin when config set writes the selection order

`ocx config set` is fully generic -- it setPaths any dotted path, validates,
and saves -- so writing codexAccountPriorities through it stored the new
order and left activeCodexAccountPinned untouched. Nothing self-heals that:
releaseDrainedCodexAccountPin only fires on a pin whose account is drained,
so a pin on a healthy account kept capping the tier ceiling and the order
just written had no visible effect. The documented rule that any priorities
write releases the pin was true only through `ocx account priority` and the
management route.

`import` is deliberately not covered. That file supplies its own pin, so it
is a statement rather than a leftover.

Found by CodeRabbit on #715.

Author: XertroV

src/cli/config-command.ts

@@ -1,4 +1,5 @@
 import { readFileSync, writeFileSync } from "node:fs";
+import { clearCodexAccountPin } from "../codex/account-priority";
 import { getConfigPath, readConfigDiagnostics, saveConfig, validateConfigCandidate } from "../config";
 import type { OcxConfig } from "../types";
 import { CliUsageError, printData, rejectArgs, runCliAction, takeFlag } from "./runtime-api";
@@ -102,6 +103,14 @@ export async function handleConfigCommand(argv: string[]): Promise<number> {
       setPath(candidate, path, raw === undefined ? undefined : parseValue(raw), action === "unset");
       const config = validate(candidate);
       const savedValue = action === "unset" ? null : getPath(config, path);
+      // Setting the order here is the operator restating it, exactly as through
+      // `ocx account priority` or the management route, so it releases the manual pin
+      // for the same reason those do: a pin made before any order existed would
+      // otherwise outrank every order set afterwards, capping the pool at the pinned
+      // account's tier with nothing on any surface explaining why. `import` is
+      // deliberately not covered — that file supplies its own pin, so there is no
+      // stale one to release.
+      if (pathSegments(path)[0] === "codexAccountPriorities") clearCodexAccountPin(config);
       saveConfig(config);
       printData({ ok: true, path, value: redact(savedValue, path.split(".").at(-1)) }, wantsJson,
         [`${action === "unset" ? "Unset" : "Set"} ${path}.`]);

tests/cli-headless-parity.test.ts

@@ -178,4 +178,41 @@ describe("headless GUI parity CLI", () => {
       rmSync(home, { recursive: true, force: true });
     }
   });
+
+  test("config set releases the manual pin when it writes the selection order", async () => {
+    const home = mkdtempSync(join(tmpdir(), "ocx-cli-priority-pin-"));
+    const previous = process.env.OPENCODEX_HOME;
+    process.env.OPENCODEX_HOME = home;
+    const configPath = join(home, "config.json");
+    const base = {
+      port: 10100,
+      providers: { openai: { adapter: "openai-responses", baseUrl: "https://chatgpt.com/backend-api/codex", authMode: "forward" } },
+      defaultProvider: "openai",
+      activeCodexAccountPinned: "work",
+    };
+    const readPin = () => JSON.parse(readFileSync(configPath, "utf8")).activeCodexAccountPinned;
+    try {
+      // The whole map, one entry, and a removal are all the operator restating the
+      // order, so each releases the pin -- otherwise it keeps capping the tier
+      // ceiling at "work" and the order just written has no visible effect.
+      for (const argv of [
+        ["set", "codexAccountPriorities", '{"work":1}'],
+        ["set", "codexAccountPriorities.work", "2"],
+        ["unset", "codexAccountPriorities"],
+      ]) {
+        writeFileSync(configPath, JSON.stringify({ ...base, codexAccountPriorities: { work: 0 } }));
+        expect(await handleConfigCommand([...argv, "--json"])).toBe(0);
+        expect(readPin()).toBeUndefined();
+      }
+
+      // An unrelated field is not a statement about ordering, so the pin survives.
+      writeFileSync(configPath, JSON.stringify({ ...base, codexAccountPriorities: { work: 1 } }));
+      expect(await handleConfigCommand(["set", "autoSwitchThreshold", "50", "--json"])).toBe(0);
+      expect(readPin()).toBe("work");
+    } finally {
+      if (previous === undefined) delete process.env.OPENCODEX_HOME;
+      else process.env.OPENCODEX_HOME = previous;
+      rmSync(home, { recursive: true, force: true });
+    }
+  });
 });