@oh-my-pi/pi-catalog 17.4.1 → 17.4.2

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [17.4.2] - 2026-08-21
+
+### Added
+
+- Added identification of provider-side image fetchers (OpenAI, Anthropic, xAI, Google), so a server hosting images by URL can attribute an inbound fetch to the vendor that issued it.
+
+### Fixed
+
+- Fixed Cursor model discovery showing separate picker rows for pure effort-suffixed models beyond GPT-5.6 by collapsing each standard and Fast lane into one reasoning-effort model ([#9237](https://github.com/can1357/oh-my-pi/issues/9237)).
+
 ## [17.4.1] - 2026-08-21
 
 ### Added

package/dist/types/index.d.ts

@@ -16,3 +16,4 @@ export * from "./wire/codex.js";
 export * from "./wire/coreweave.js";
 export * from "./wire/gemini-headers.js";
 export * from "./wire/github-copilot.js";
+export * from "./wire/image-fetchers.js";

package/dist/types/provider-models/cache-provider-id.d.ts

@@ -2,6 +2,8 @@ export interface ModelCacheProviderIdOptions {
     apiKey?: string;
     baseUrl?: string;
 }
+/** Whether a provider's model-cache namespace requires its resolved credential. */
+export declare function isCredentialScopedModelCacheProvider(providerId: string): boolean;
 export declare function getDefaultModelDiscoveryBaseUrl(providerId: string): string | undefined;
 /** Resolve an Ollama model-cache namespace scoped to the normalized discovery endpoint. */
 export declare function resolveOllamaModelCacheProviderId(providerId: string, baseUrl?: string): string;

package/dist/types/variant-collapse.d.ts

@@ -91,10 +91,11 @@ export declare function isVariantCollapsedSpec(spec: VariantSpecLike): boolean;
  */
 export declare function collapseEffortVariants<TSpec extends VariantSpecLike>(specs: readonly TSpec[], table: VariantCollapseTable): TSpec[];
 /**
- * Collapse a full mixed-provider list: per provider, the hand table (when
- * registered) plus the automatic `X`/`X-thinking` pair rule. Used by the
- * catalog generator; the runtime equivalent lives at the model-manager merge
- * point. Output is regrouped by provider — callers re-sort.
+ * Collapse a full mixed-provider list: per provider, the hand table, Cursor's
+ * conservative live effort-sibling rule, and the automatic `X`/`X-thinking`
+ * pair rule. Used by the catalog generator; the runtime equivalent lives at
+ * the model-manager merge point. Output is regrouped by provider — callers
+ * re-sort.
  */
 export declare function collapseEffortVariantsAcrossProviders<TSpec extends VariantSpecLike>(specs: readonly TSpec[]): TSpec[];
 /**
@@ -107,29 +108,30 @@ export declare function collapseEffortVariantsAcrossProviders<TSpec extends Vari
 export declare function collapseBuiltModelVariants<TApi extends Api>(models: readonly Model<TApi>[]): Model<TApi>[];
 /**
  * Resolve a retired effort-tier variant id (collapsed member, recycled id) to
- * its replacement model id for `provider` via the hand table. Returns
- * `undefined` when the id is not a known alias; derived `X-thinking` members
- * resolve through `stripThinkingVariantToken` instead. Callers must try an
- * exact model lookup first — a live model always wins over an alias.
+ * its replacement model id for `provider` via hand-table or registered live
+ * aliases. Returns `undefined` when the id is not a known alias; derived
+ * `X-thinking` members also resolve through `stripThinkingVariantToken`.
+ * Callers must try an exact model lookup first — a live model always wins over
+ * an alias.
  */
 export declare function resolveVariantAlias(provider: Provider, modelId: string): string | undefined;
 /** Bare-id alias hit: replacement id plus the providers declaring it. */
 export interface BareVariantAliasHit {
     id: string;
-    /** Providers whose table declares the alias — candidates from these win ties. */
+    /** Providers declaring the alias — candidates from these win ties. */
     providers: readonly Provider[];
 }
 /**
- * Provider-agnostic hand-table alias lookup for bare-id selectors. Returns
- * the declaring providers so callers can prefer their models when the
- * replacement id exists on unrelated providers too (e.g. a retired Cursor
- * tier id must not resolve to `openai/gpt-5.4`).
+ * Provider-agnostic alias lookup for bare-id selectors. Returns the declaring
+ * providers so callers can prefer their models when the replacement id exists
+ * on unrelated providers too (e.g. a retired Cursor tier id must not resolve
+ * to `openai/gpt-5.4`).
  */
 export declare function resolveBareVariantAlias(modelId: string): BareVariantAliasHit | undefined;
 /**
  * Reverse alias lookup: the retired ids that resolve to `modelId` for
- * `provider` via the hand table. Used to re-key config keyed by raw member
- * ids (models.yml `modelOverrides`, suppressed selectors) onto the collapsed
- * model. Empty for providers without a table.
+ * `provider` via hand-table or registered live aliases. Used to re-key config
+ * keyed by raw member ids (models.yml `modelOverrides`, suppressed selectors)
+ * onto the collapsed model.
  */
 export declare function getVariantAliasSources(provider: Provider, modelId: string): readonly string[];

package/dist/types/wire/image-fetchers.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Identification of provider-side image fetchers.
+ *
+ * A request may carry an image either inline (base64) or as a URL. With a URL,
+ * the provider's backend performs its own server-side GET against that URL, so
+ * a local blob server sees an inbound request from vendor infrastructure rather
+ * than from the client. This module names those fetchers, letting a blob server
+ * attribute an inbound GET to the vendor that issued it — which is how a caller
+ * learns where a request actually landed when a router sits between them and
+ * the model.
+ *
+ * NOT an authentication mechanism. Every value here is a request header chosen
+ * by the caller and is trivially forged. Authorize blob reads with an
+ * unguessable URL (single-use capability token, short TTL) and treat a fetcher
+ * match as attribution/telemetry only.
+ *
+ * Each entry was captured from a live fetch triggered by handing that vendor's
+ * API a URL-sourced image.
+ */
+/** Vendor whose infrastructure performed an inbound fetch. */
+export type ImageFetcherVendor = "openai" | "anthropic" | "xai" | "google";
+/** Registry key for a known fetcher. */
+export type ImageFetcherId = "openai-file-downloader" | "anthropic-claude-user" | "anthropic-claude-user-preview" | "xai-image-api-fetch" | "google";
+/** Request signature of one provider-side fetcher. */
+export interface ImageFetcherIdentity {
+    vendor: ImageFetcherVendor;
+    /** Human-readable name for logs and UI. */
+    label: string;
+    /**
+     * `User-Agent` contract: an exact string for fetchers that send a fixed
+     * value, or a pattern for those embedding a client version.
+     */
+    userAgent: string | RegExp;
+    /**
+     * Vendor-proprietary headers observed alongside the agent, used to
+     * corroborate a `User-Agent` claim. Generic infrastructure headers
+     * (`traceparent`, `x-cloud-trace-context`) are deliberately excluded: they
+     * are emitted by unrelated infrastructure and corroborate nothing. Empty
+     * means the agent string is the only available signal, so
+     * {@link ImageFetcherMatch.corroborated} can never be true for that entry.
+     */
+    markerHeaders: readonly string[];
+    /** API surface the capture came from. */
+    observedVia: string;
+    /** Operational caveats a blob server should account for. */
+    note?: string;
+}
+/**
+ * Known provider-side fetchers.
+ *
+ * Agent contracts do not overlap — exact strings never collide with the
+ * versioned patterns — so lookup order carries no meaning.
+ */
+export declare const IMAGE_FETCHERS: Readonly<Record<ImageFetcherId, ImageFetcherIdentity>>;
+/** Attribution outcome for one inbound request. */
+export interface ImageFetcherMatch {
+    id: ImageFetcherId;
+    identity: ImageFetcherIdentity;
+    /**
+     * Whether every proprietary marker header for the matched identity is
+     * present. Always false for identities declaring no markers — absence of
+     * corroboration is not evidence against the match.
+     */
+    corroborated: boolean;
+}
+/** Inbound header bag, as exposed by either `fetch` or a Node-style server. */
+export type InboundHeaders = Headers | Readonly<Record<string, string | readonly string[] | undefined>>;
+/**
+ * Attribute an inbound blob request to a known provider-side fetcher, or
+ * `null` when the agent matches none.
+ *
+ * Matches on `User-Agent` alone and reports marker-header corroboration
+ * separately; callers MUST NOT treat either as proof of origin. Gate access on
+ * the unguessable URL.
+ */
+export declare function identifyImageFetcher(headers: InboundHeaders): ImageFetcherMatch | null;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-catalog",
-	"version": "17.4.1",
+	"version": "17.4.2",
 	"description": "Model catalog for omp: bundled model database, provider discovery descriptors, model identity, classification, and equivalence",
 	"homepage": "https://omp.sh",
 	"author": "Stencil Labs, Inc.",
@@ -34,11 +34,11 @@
 		"gen:proto": "bun scripts/generate-protocols.ts"
 	},
 	"dependencies": {
-		"@oh-my-pi/omptype": "17.4.1",
-		"@oh-my-pi/pi-utils": "17.4.1"
+		"@oh-my-pi/omptype": "17.4.2",
+		"@oh-my-pi/pi-utils": "17.4.2"
 	},
 	"devDependencies": {
-		"@oh-my-pi/pi-ai": "17.4.1",
+		"@oh-my-pi/pi-ai": "17.4.2",
 		"@types/bun": "^1.3.14"
 	},
 	"engines": {

package/src/index.ts

@@ -16,3 +16,4 @@ export * from "./wire/codex";
 export * from "./wire/coreweave";
 export * from "./wire/gemini-headers";
 export * from "./wire/github-copilot";
+export * from "./wire/image-fetchers";