openai

Anything you compile into a Flutter web build, including --dart-define values, ships to the browser in plain text. The only safe pattern is a small backend proxy that holds the key, authenticates the user, pins the model, and streams the Responses API SSE back. Full Dart shelf proxy and Flutter client, tested with Flutter 3.44, Dart 3.12, and http 1.6.

OpenAI 2.14.0 renamed GlobalMcpToolCallApprovalPolicy, which broke every tool-carrying Responses call through Microsoft.Extensions.AI.OpenAI 10.10.0. Version 10.10.1 moves to OpenAI 2.14.0 and also picks up the null reasoning status fix for OpenAI-compatible endpoints.

On May 17, 2026 GitHub flipped the default Copilot model on Business and Enterprise plans from GPT-4.1 to GPT-5.3-Codex. GPT-4.1 stays free until June 1, then it falls under usage-based billing. Here is what changes for pinned models in your repo and CI.