@oh-my-pi/pi-coding-agent 17.1.0 → 17.1.2

package/dist/types/web/search/providers/kimi.d.ts

@@ -9,6 +9,7 @@
  */
 import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types.js";
+import { type StructuredQuery } from "../query.js";
 import type { SearchParams } from "./base.js";
 import { SearchProvider } from "./base.js";
 type SearchParamsWithFetch = SearchParams & {
@@ -16,6 +17,7 @@ type SearchParamsWithFetch = SearchParams & {
 };
 export interface KimiSearchParams {
     query: string;
+    parsedQuery?: StructuredQuery;
     num_results?: number;
     include_content?: boolean;
     signal?: AbortSignal;

package/dist/types/web/search/providers/parallel.d.ts

@@ -1,5 +1,6 @@
 import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types.js";
+import { type StructuredQuery } from "../query.js";
 import type { SearchParams } from "./base.js";
 import { SearchProvider } from "./base.js";
 export declare function searchParallel(params: {
@@ -7,6 +8,7 @@ export declare function searchParallel(params: {
     num_results?: number;
     signal?: AbortSignal;
     fetch?: FetchImpl;
+    parsedQuery?: StructuredQuery;
 }, authStorage: AuthStorage, sessionId?: string): Promise<SearchResponse>;
 export declare class ParallelProvider extends SearchProvider {
     readonly id = "parallel";

package/dist/types/web/search/providers/perplexity.d.ts

@@ -9,12 +9,15 @@
  */
 import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types.js";
+import { type StructuredQuery } from "../query.js";
 import type { SearchParams } from "./base.js";
 import { SearchProvider } from "./base.js";
 export interface PerplexitySearchParams {
     signal?: AbortSignal;
     query: string;
     system_prompt?: string;
+    /** Pre-parsed view of `query` from the search pipeline; parsed locally when absent. */
+    parsedQuery?: StructuredQuery;
     search_recency_filter?: "hour" | "day" | "week" | "month" | "year";
     num_results?: number;
     /** Maximum output tokens. Defaults to 8192. */

package/dist/types/web/search/providers/searxng.d.ts

@@ -14,6 +14,9 @@
  *   searxng.basicUsername - Optional RFC 7617 Basic auth username
  *   searxng.basicPassword - Optional RFC 7617 Basic auth password
  *   searxng.categories    - Optional comma-separated categories filter
+ *   searxng.engines       - Optional comma-separated engine names or shortcuts
+ *                           (e.g. "duckduckgo, br, sp"); shortcuts resolve via
+ *                           the instance's /config endpoint
  *   searxng.language      - Optional language code (e.g. en, zh-CN)
  *
  * Environment variable fallbacks:
@@ -22,15 +25,22 @@
  *   SEARXNG_BASIC_USERNAME - Optional RFC 7617 Basic auth username
  *   SEARXNG_BASIC_PASSWORD - Optional RFC 7617 Basic auth password
  *
+ * Bang syntax in queries is passed through: `!ddg foo` selects an engine or
+ * category server-side and the bang token is stripped from the upstream query.
+ * External bangs (`!!g`) are removed client-side because SearXNG answers them
+ * with an HTTP redirect even for JSON requests.
+ *
  * Reference: https://docs.searxng.org/dev/search_api.html
  */
 import type { AuthStorage, FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types.js";
+import type { StructuredQuery } from "../query.js";
 import type { SearchParams } from "./base.js";
 import { SearchProvider } from "./base.js";
 /** Execute SearXNG web search. */
 export declare function searchSearXNG(params: {
     query: string;
+    parsedQuery?: StructuredQuery;
     num_results?: number;
     recency?: "day" | "week" | "month" | "year";
     signal?: AbortSignal;

package/dist/types/web/search/providers/tavily.d.ts

@@ -12,6 +12,14 @@ export interface TavilySearchParams {
     query: string;
     num_results?: number;
     recency?: "day" | "week" | "month" | "year";
+    /** `site:` hosts mapped to Tavily's `include_domains`. */
+    include_domains?: string[];
+    /** `-site:` hosts mapped to Tavily's `exclude_domains`. */
+    exclude_domains?: string[];
+    /** `after:` inclusive lower bound, ISO `YYYY-MM-DD`, mapped to `start_date`. */
+    start_date?: string;
+    /** `before:` upper bound, ISO `YYYY-MM-DD`, mapped to `end_date`. */
+    end_date?: string;
     signal?: AbortSignal;
     fetch?: FetchImpl;
 }

package/dist/types/web/search/query.d.ts

@@ -0,0 +1,190 @@
+/**
+ * Structured web-search query parsing.
+ *
+ * Agents habitually embed Google-style directives in search queries —
+ * `site:`, `before:`/`after:`, `inurl:`, `filetype:`, quoted phrases, `OR`
+ * groups, `-exclusions` — regardless of whether the backing engine parses
+ * them. This module turns a raw query into a {@link StructuredQuery} so each
+ * provider can:
+ *
+ * 1. map constraints onto native API parameters where they exist (Perplexity
+ *    `search_domain_filter`, Tavily `include_domains`, Exa date bounds, …),
+ * 2. rebuild a query string containing only the syntax the target engine
+ *    understands ({@link formatQuery}), and
+ * 3. post-filter returned sources leniently ({@link applyQueryConstraints}):
+ *    a constraint dimension that would eliminate every result is dropped and
+ *    reported rather than returning nothing.
+ */
+import type { SearchSource } from "./types.js";
+/** One free-text token of the query (everything that is not a recognized directive). */
+export interface QueryTerm {
+    /** Term text without quotes or operator prefixes. */
+    text: string;
+    /** Quoted exact phrase (`"like this"`) or verbatim-required (`+term`). */
+    phrase?: boolean;
+    /** Excluded via `-term` or `NOT term`. */
+    negated?: boolean;
+    /**
+     * OR-group id. Terms sharing an id are alternatives (`a OR b`); terms
+     * without a group are implicitly AND-ed. Groups are always contiguous
+     * runs in {@link StructuredQuery.terms}.
+     */
+    group?: number;
+}
+/**
+ * A raw query decomposed into free text plus every recognized constraint.
+ *
+ * All list fields are always present (possibly empty) so consumers can map
+ * over them without null checks. Values are stored as typed by the user
+ * except for normalization noted per field.
+ */
+export interface StructuredQuery {
+    /** Original query string, verbatim. */
+    raw: string;
+    /**
+     * Free-text remainder with all recognized directives removed; phrases
+     * stay quoted, exclusions keep `-`, OR groups keep `OR`. Empty when the
+     * query was directives only — use {@link formatQuery} for a never-empty
+     * engine query.
+     */
+    text: string;
+    /** Ordered free-text terms (phrases, exclusions, OR groups). */
+    terms: QueryTerm[];
+    /** `site:`/`domain:`/`host:` includes — any-of. Lowercased, scheme stripped, may carry a path (`github.com/anthropics`). */
+    sites: string[];
+    /** `-site:` exclusions, same normalization as {@link sites}. */
+    excludedSites: string[];
+    /** `inurl:`/`url:`/`allinurl:` substrings — all must appear in the URL. */
+    inUrl: string[];
+    /** `-inurl:` substrings — none may appear in the URL. */
+    excludedInUrl: string[];
+    /** `intitle:`/`title:`/`allintitle:` substrings — all must appear in the title. */
+    inTitle: string[];
+    /** `-intitle:` substrings — none may appear in the title. */
+    excludedInTitle: string[];
+    /** `intext:`/`inbody:`/`inanchor:`/`allintext:` body substrings. Not post-filterable (snippets are partial); query-building only. */
+    inText: string[];
+    /** `-intext:` body exclusions. Query-building only. */
+    excludedInText: string[];
+    /** `filetype:`/`ext:` extensions — any-of. Lowercased, no leading dot. */
+    filetypes: string[];
+    /** `-filetype:`/`-ext:` extensions — none may match. */
+    excludedFiletypes: string[];
+    /** Inclusive lower publish-date bound from `after:`/`since:`, ISO `YYYY-MM-DD`. */
+    after?: string;
+    /** Exclusive upper publish-date bound from `before:`/`until:`, ISO `YYYY-MM-DD`. */
+    before?: string;
+    /** Language code from `lang:`/`language:`, lowercased (e.g. `en`, `en-us`). */
+    lang?: string;
+    /** True when any directive or boolean operator was recognized. */
+    hasDirectives: boolean;
+    /** True when any post-filterable constraint is set (sites, url/title terms, filetypes, date bounds). */
+    hasConstraints: boolean;
+}
+/**
+ * Query-syntax capabilities of a target engine, used by {@link formatQuery}
+ * to decide which parsed features are re-emitted as query text. Everything
+ * defaults to `false`: the zero-value produces plain keywords suitable for
+ * natural-language APIs.
+ */
+export interface QuerySyntax {
+    /** Emit `"quoted phrases"`. */
+    phrases?: boolean;
+    /** Emit `-term` exclusions (negated terms are dropped otherwise). */
+    negation?: boolean;
+    /** Emit `OR` between alternatives (groups are flattened to keywords otherwise). */
+    or?: boolean;
+    /** Emit `site:`/`-site:`. */
+    site?: boolean;
+    /** Emit `inurl:`/`-inurl:`. */
+    inUrl?: boolean;
+    /** Emit `intitle:`/`-intitle:`. */
+    inTitle?: boolean;
+    /** Emit `intext:`/`-intext:`. */
+    inText?: boolean;
+    /** Emit `filetype:`/`-filetype:`. */
+    filetype?: boolean;
+    /** Emit `before:`/`after:` ISO date bounds. */
+    dateRange?: boolean;
+}
+/** Full Google-style syntax: engines that parse the classic operator set (Google, Startpage, Ecosia, Brave, Kagi, Mojeek, SearXNG…). */
+export declare const GOOGLE_QUERY_SYNTAX: QuerySyntax;
+/** Result of {@link applyQueryConstraints}. */
+export interface ConstraintFilterResult {
+    /** Sources surviving the lenient filter — never empty when the input was non-empty. */
+    sources: SearchSource[];
+    /**
+     * Directive renderings (`site:arxiv.org`, `before:2024-01-01`, …) of the
+     * constraint dimensions that matched zero sources and were therefore
+     * relaxed instead of enforced.
+     */
+    dropped: string[];
+}
+/**
+ * Parse a `before:`/`after:` value into ISO `YYYY-MM-DD`.
+ * Accepts `YYYY`, `YYYY-MM`, `YYYY-MM-DD` (also `/` and `.` separators) and
+ * `MM/DD/YYYY` (day-first assumed when the first field exceeds 12).
+ * Bare years/months resolve to the first day of the period, matching
+ * Google's `after:2024` ≙ `after:2024-01-01` semantics.
+ */
+export declare function parseDateValue(value: string): string | undefined;
+/**
+ * Parse a raw query into a {@link StructuredQuery}.
+ *
+ * Lenient by construction: unknown `name:value` tokens (URLs, `C:\paths`,
+ * `TS2345:`, jargon) stay in the free text verbatim, and a directive with an
+ * unparseable value (`before:someday`) degrades to a plain term instead of
+ * being dropped.
+ */
+export declare function parseSearchQuery(raw: string): StructuredQuery;
+/**
+ * Rebuild a query string for an engine with the given {@link QuerySyntax}.
+ *
+ * Constraints whose syntax the engine lacks are omitted (the caller maps
+ * them onto API parameters or relies on {@link applyQueryConstraints}).
+ * Never returns an empty string for a non-empty input: a directives-only
+ * query falls back to the constraint values as keywords, then to `raw` — an
+ * engine searching *something* beats an empty-query error.
+ */
+export declare function formatQuery(q: StructuredQuery, syntax?: QuerySyntax): string;
+/**
+ * Build the engine query for a credential-free HTML engine (Google,
+ * Startpage, DuckDuckGo, Ecosia, Mojeek, SearXNG, and the Public Web
+ * fan-out over them).
+ *
+ * Canonicalizes directives via {@link formatQuery} with the engine's
+ * {@link QuerySyntax} (default: full Google syntax), after demoting the
+ * operators that zero-match across the scraper set: engines only match
+ * `site:` against a bare domain (a path yields zero results everywhere),
+ * and DuckDuckGo ignores `inurl:` entirely — so either operator silently
+ * empties the result set. The raw URL as a plain term matches fine, so
+ * bare-domain `site:` filters are kept while path-carrying `site:` and all
+ * `inurl:` values become plain keywords; the demotion is structural (before
+ * formatting), so OR-grouped and quoted directives are covered. Negated
+ * forms (`-site:`, `-inurl:`) pass through untouched — demoting them would
+ * invert an exclusion into a search term; the pipeline post-filter
+ * ({@link applyQueryConstraints}) enforces every demoted or unsupported
+ * constraint on the returned sources. Directive-free queries pass through
+ * byte-identical.
+ */
+export declare function formatScraperQuery(query: string, parsedQuery?: StructuredQuery, syntax?: QuerySyntax): string;
+/**
+ * `site:` matcher: exact host or subdomain of `site`; when `site` carries a
+ * path (`github.com/anthropics`), the URL path must start with it.
+ */
+export declare function matchesSite(url: string, site: string): boolean;
+/**
+ * Strict per-source constraint check: every filterable dimension of `q` must
+ * pass. Sources without a resolvable date pass date bounds (a missing date
+ * is not proof of violation). For custom provider flows; the standard path
+ * is {@link applyQueryConstraints}.
+ */
+export declare function matchesQueryConstraints(source: SearchSource, q: StructuredQuery): boolean;
+/**
+ * Lenient post-filter: applies each constraint dimension of `q` in turn,
+ * skipping (and reporting) any dimension that would eliminate every
+ * remaining source. Guarantees a non-empty result for a non-empty input, so
+ * a mis-scoped directive degrades to unfiltered results plus a note instead
+ * of a dead search.
+ */
+export declare function applyQueryConstraints(sources: readonly SearchSource[], q: StructuredQuery): ConstraintFilterResult;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "17.1.0",
+	"version": "17.1.2",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -53,17 +53,17 @@
 		"@babel/parser": "^7.29.7",
 		"@babel/traverse": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "17.1.0",
-		"@oh-my-pi/omp-stats": "17.1.0",
-		"@oh-my-pi/pi-agent-core": "17.1.0",
-		"@oh-my-pi/pi-ai": "17.1.0",
-		"@oh-my-pi/pi-catalog": "17.1.0",
-		"@oh-my-pi/pi-mnemopi": "17.1.0",
-		"@oh-my-pi/pi-natives": "17.1.0",
-		"@oh-my-pi/pi-tui": "17.1.0",
-		"@oh-my-pi/pi-utils": "17.1.0",
-		"@oh-my-pi/pi-wire": "17.1.0",
-		"@oh-my-pi/snapcompact": "17.1.0",
+		"@oh-my-pi/hashline": "17.1.2",
+		"@oh-my-pi/omp-stats": "17.1.2",
+		"@oh-my-pi/pi-agent-core": "17.1.2",
+		"@oh-my-pi/pi-ai": "17.1.2",
+		"@oh-my-pi/pi-catalog": "17.1.2",
+		"@oh-my-pi/pi-mnemopi": "17.1.2",
+		"@oh-my-pi/pi-natives": "17.1.2",
+		"@oh-my-pi/pi-tui": "17.1.2",
+		"@oh-my-pi/pi-utils": "17.1.2",
+		"@oh-my-pi/pi-wire": "17.1.2",
+		"@oh-my-pi/snapcompact": "17.1.2",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/api-logs": "^0.220.0",
 		"@opentelemetry/context-async-hooks": "^2.9.0",

package/src/cli/args.ts

@@ -396,6 +396,7 @@ ${chalk.bold("Available Tools (default-enabled unless noted):")}
   notebook      - Edit Jupyter notebooks
   inspect_image - Analyze images with a vision model
   browser       - Browser automation (Puppeteer)
+  computer      - Native host desktop capture and input (disabled by default)
   task          - Launch sub-agents for parallel tasks
   todo          - Manage todo/task lists
   web_search    - Search the web

package/src/cli/bench-cli.ts

@@ -76,6 +76,7 @@ export interface BenchCommandArgs {
 
 export interface BenchModelRegistry {
 	getAll(): Model<Api>[];
+	getAvailable(): Model<Api>[];
 	getApiKey(model: Model<Api>, sessionId?: string): Promise<string | undefined>;
 	resolver(model: ApiKeyResolverModel, sessionId?: string): ApiKeyResolver;
 	hasConfiguredAuth?(model: Model<Api>): boolean;
@@ -693,7 +694,17 @@ function resolveBenchModels(
 	const resolved: BenchTarget[] = [];
 	const errors: string[] = [];
 	for (const selector of selectors) {
-		const result = resolveCliModel({ cliModel: selector, modelRegistry, settings, preferences });
+		// Bench intentionally resolves against the full catalog first, then applies
+		// its own exact-id credential fallback below. Using the CLI resolver's
+		// authenticated default here would silently redirect non-equivalent bare
+		// ids and suppress the warning for equivalent cross-provider models.
+		const result = resolveCliModel({
+			cliModel: selector,
+			modelRegistry,
+			availableModels: modelRegistry.getAll(),
+			settings,
+			preferences,
+		});
 		if (result.error) {
 			errors.push(`${selector}: ${result.error}`);
 			continue;

package/src/cli/setup-cli.ts

@@ -11,7 +11,6 @@ import { Settings, settings } from "../config/settings";
 import { theme } from "../modes/theme/theme";
 import { downloadSttModel, isSttModelCached } from "../stt/downloader";
 import { isSttModelKey, STT_MODEL_OPTIONS } from "../stt/models";
-import { detectRecorder, ensureRecorder } from "../stt/recorder";
 import { downloadTtsModel, isTtsLocalModelKey, isTtsModelCached, TTS_LOCAL_MODEL_OPTIONS } from "../tts";
 import { selectSetupModel } from "./setup-model-picker";
 
@@ -170,17 +169,6 @@ interface SpeechComponent {
 
 function buildSpeechComponents(): SpeechComponent[] {
 	return [
-		{
-			name: "Recorder",
-			isReady: async () => detectRecorder() !== null,
-			status: async () => {
-				const recorder = detectRecorder();
-				return recorder ? `${recorder.tool} (${recorder.bin})` : "none — ffmpeg will be downloaded";
-			},
-			ensure: async onProgress => {
-				await ensureRecorder(onProgress);
-			},
-		},
 		{
 			name: "Speech-to-Text model",
 			isReady: () => isSttModelCached(settings.get("stt.modelName")),
@@ -316,7 +304,7 @@ ${chalk.bold("Usage:")}
 
 ${chalk.bold("Components:")}
   python    Verify a Python 3 interpreter is reachable for code execution
-  speech    Pick + download the speech-to-text and text-to-speech models and an audio recorder
+  speech    Pick and download speech-to-text and text-to-speech models
 
 ${chalk.bold("Options:")}
   -c, --check   Check if dependencies are installed without installing
@@ -325,7 +313,7 @@ ${chalk.bold("Options:")}
 ${chalk.bold("Examples:")}
   ${APP_NAME} setup                  Run the onboarding wizard
   ${APP_NAME} setup python           Check Python execution dependencies
-  ${APP_NAME} setup speech           Set up speech (pick STT + TTS models, install a recorder)
+  ${APP_NAME} setup speech           Pick and download the STT and TTS models
   ${APP_NAME} setup speech --check   Check if speech dependencies are available
   ${APP_NAME} setup python --check   Check if Python execution is available
 `);

package/src/cli/web-search-cli.ts

@@ -130,8 +130,15 @@ ${chalk.bold("Options:")}
   --compact           Render condensed output
   -h, --help          Show this help
 
+${chalk.bold("Query directives:")}
+  site:/-site:  after:/before: (YYYY-MM-DD)  inurl:  intitle:  filetype:
+  "exact phrase"  -term  OR
+  Mapped to native provider filters where available, otherwise applied as a
+  lenient post-filter (a constraint matching nothing is relaxed, not fatal).
+
 ${chalk.bold("Examples:")}
   ${APP_NAME} q --provider=exa "what's the color of the sky"
   ${APP_NAME} q --provider=brave --recency=week "latest TypeScript 5.7 changes"
+  ${APP_NAME} q 'transformer scaling site:arxiv.org after:2024 -site:reddit.com'
 `);
 }

package/src/cli.ts

@@ -79,6 +79,7 @@ async function runSmokeTest(): Promise<void> {
 	const { smokeTestTtsWorker } = await import("./tts/tts-client");
 	const { smokeTestMnemopiEmbedWorker } = await import("./mnemopi/embed-client");
 	const { smokeTestJsEvalWorker } = await import("./eval/js/context-manager");
+	const { smokeTestComputerWorker } = await import("./tools/computer/supervisor");
 	// Smoke dependencies stay lazy so normal CLI startup does not load worker clients.
 	const { smokeTestDaemonBroker } = await import("./launch/client");
 	await smokeTestSyncWorker();
@@ -98,6 +99,7 @@ async function runSmokeTest(): Promise<void> {
 	await smokeTestTinyTitleWorker();
 	await smokeTestSttWorker();
 	await smokeTestJsEvalWorker();
+	await smokeTestComputerWorker();
 	await smokeTestTtsWorker();
 	await smokeTestMnemopiEmbedWorker();
 	await smokeTestDaemonBroker();
@@ -107,6 +109,7 @@ async function runSmokeTest(): Promise<void> {
 const TINY_WORKER_ARG = "__omp_worker_tiny_inference";
 const STATS_SYNC_WORKER_ARG = "__omp_worker_stats_sync";
 const TAB_WORKER_ARG = "__omp_worker_tab";
+const COMPUTER_WORKER_ARG = "__omp_worker_computer";
 const JS_EVAL_WORKER_ARG = "__omp_worker_js_eval";
 const JS_EVAL_PROCESS_ARG = "__omp_worker_js_eval_process";
 const STT_WORKER_ARG = "__omp_worker_stt";
@@ -152,6 +155,11 @@ async function runWorkerEntrypoint(arg: string | undefined): Promise<boolean> {
 		await import("./tools/browser/tab-worker-entry");
 		return true;
 	}
+	if (arg === COMPUTER_WORKER_ARG) {
+		if (parentPort) installWorkerInbox(parentPort);
+		await import("./tools/computer/worker-entry");
+		return true;
+	}
 	if (arg === JS_EVAL_WORKER_ARG) {
 		if (parentPort) installWorkerInbox(parentPort);
 		await import("./eval/js/worker-entry");

package/src/config/model-registry.ts

@@ -65,6 +65,7 @@ const BUILT_IN_DISCOVERY_NON_AUTHORITATIVE_RETRY_MS = 5 * 60 * 1000;
 import type { ApiKeyResolver, FetchImpl } from "@oh-my-pi/pi-ai";
 import { registerOAuthProvider, unregisterOAuthProviders } from "@oh-my-pi/pi-ai/oauth";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
+import { setCodexAttestationProvider } from "@oh-my-pi/pi-ai/providers/openai-codex-responses";
 import {
 	getBundledModelReferenceIndex,
 	inheritReferenceThinking,
@@ -72,6 +73,7 @@ import {
 } from "@oh-my-pi/pi-catalog/identity";
 import { isBunTestRuntime, isRecord, logger, wrapFetchForExtraCa } from "@oh-my-pi/pi-utils";
 import { parseModelString, resolveProviderModelReference } from "../config/model-resolver";
+import { generateCodexAttestation } from "../live/attestation";
 import type { AuthStorage, OAuthCredential } from "../session/auth-storage";
 import { type ApiKeyResolverModel, type ApiKeyResolverOptions, createApiKeyResolver } from "./api-key-resolver";
 import type { ConfigError, ConfigFile } from "./config-file";
@@ -90,6 +92,10 @@ import { ModelsConfigFile, type ProviderValidationModel, validateProviderConfigu
 import type { ModelOverride, ModelsConfig, ProviderAuthMode } from "./models-config-schema";
 import { settings } from "./settings";
 
+// DeviceCheck attestation (`x-oai-attestation`) for ChatGPT-OAuth Codex
+// requests; the pi-ai provider resolves it just-in-time per request.
+setCodexAttestationProvider(generateCodexAttestation);
+
 export const kNoAuth = "N/A";
 
 export function isAuthenticated(apiKey: string | undefined | null): apiKey is string {

package/src/config/model-resolver.ts

@@ -466,7 +466,7 @@ export interface ModelMatchPreferences {
 }
 
 export type ModelLookupRegistry = Pick<ModelRegistry, "getAvailable">;
-type CliModelRegistry = Pick<ModelRegistry, "getAll">;
+type CliModelRegistry = Pick<ModelRegistry, "getAll" | "getAvailable">;
 type InitialModelRegistry = Pick<ModelRegistry, "getAvailable" | "find">;
 type RestorableModelRegistry = Pick<ModelRegistry, "getAvailable" | "find" | "getApiKey">;
 
@@ -1601,6 +1601,7 @@ function findExactCliModel(
 	selector: string,
 	allModels: Model<Api>[],
 	availableModels: Model<Api>[],
+	options?: { catalogFallback?: boolean },
 ): Model<Api> | undefined {
 	// Explicit provider/id references stay authoritative against the full catalog.
 	const referenced = findExactModelReferenceMatch(selector, allModels);
@@ -1615,6 +1616,13 @@ function findExactCliModel(
 		model.id.toLowerCase() === lower || formatModelString(model).toLowerCase() === lower;
 	const preferred = availableModels.find(isFlatMatch);
 	if (preferred) return preferred;
+	// The unauthenticated catalog fallback is a weak match: a bare id like
+	// `default` collides with the bundled `cursor/default` model, which must not
+	// shadow a configured `modelRoles.default` role the user can actually run.
+	// Callers resolving a possible role name pass `catalogFallback: false` so the
+	// role gets a chance first; the deferred fuzzy fallback below still recovers
+	// the catalog id when no role matches.
+	if (options?.catalogFallback === false) return undefined;
 	return availableModels === allModels ? undefined : allModels.find(isFlatMatch);
 }
 
@@ -1635,13 +1643,16 @@ export interface ResolveCliModelResult {
 /**
  * Resolve a single model from CLI flags.
  *
- * Exact model names take precedence over configured role names.
+ * Explicit `provider/id` references and authenticated bare ids take precedence
+ * over configured role names, which in turn take precedence over an
+ * unauthenticated catalog-only id (so a bundled `cursor/default` never shadows a
+ * configured `modelRoles.default`).
  */
 export function resolveCliModel(options: {
 	cliProvider?: string;
 	cliModel?: string;
 	modelRegistry: CliModelRegistry;
-	/** Authenticated models to prefer for unqualified selectors; omit to preserve catalog-order behavior. */
+	/** Authenticated models to prefer for unqualified selectors; defaults to the registry's authenticated set. */
 	availableModels?: Model<Api>[];
 	settings?: Settings;
 	preferences?: ModelMatchPreferences;
@@ -1662,7 +1673,7 @@ export function resolveCliModel(options: {
 		};
 	}
 
-	const availableModels = preferredModels ?? allModels;
+	const availableModels = preferredModels ?? modelRegistry.getAvailable();
 	const providerMap = new Map<string, string>();
 	for (const model of allModels) {
 		providerMap.set(model.provider.toLowerCase(), model.provider);
@@ -1680,7 +1691,7 @@ export function resolveCliModel(options: {
 
 	const trimmedModel = cliModel.trim();
 	if (!provider) {
-		const exact = findExactCliModel(trimmedModel, allModels, availableModels);
+		const exact = findExactCliModel(trimmedModel, allModels, availableModels, { catalogFallback: false });
 		if (exact) {
 			return {
 				model: exact,
@@ -1696,7 +1707,7 @@ export function resolveCliModel(options: {
 			MAX_THINKING_SUFFIX_OPTIONS,
 		);
 		if (exactThinkingLevel) {
-			const exactSuffixed = findExactCliModel(exactBase, allModels, availableModels);
+			const exactSuffixed = findExactCliModel(exactBase, allModels, availableModels, { catalogFallback: false });
 			if (exactSuffixed) {
 				return {
 					model: exactSuffixed,

package/src/config/settings-schema.ts

@@ -141,6 +141,7 @@ export const TAB_GROUPS: Record<SettingTab, readonly string[]> = {
 		"Available Tools",
 		"Todos",
 		"Grep & Browser",
+		"Computer",
 		"GitHub",
 		"Output Limits",
 		"Execution",
@@ -3830,6 +3831,66 @@ export const SETTINGS_SCHEMA = {
 		},
 	},
 
+	"computer.enabled": {
+		type: "boolean",
+		default: false,
+		ui: {
+			tab: "tools",
+			group: "Available Tools",
+			label: "Computer",
+			description: "Enable native host-desktop screenshots and input for OpenAI computer use",
+		},
+	},
+
+	"computer.backend": {
+		type: "enum",
+		values: ["auto", "native"] as const,
+		default: "auto",
+		ui: {
+			tab: "tools",
+			group: "Computer",
+			label: "Computer Backend",
+			description: "Select automatic or explicit platform-native desktop capture and input",
+			options: [
+				{ value: "auto", label: "Auto" },
+				{ value: "native", label: "Native" },
+			],
+		},
+	},
+
+	"computer.display": {
+		type: "string",
+		default: "all",
+		ui: {
+			tab: "tools",
+			group: "Computer",
+			label: "Computer Display",
+			description: "Composite all displays or select a native display id",
+		},
+	},
+
+	"computer.maxWidth": {
+		type: "number",
+		default: 1920,
+		ui: {
+			tab: "tools",
+			group: "Computer",
+			label: "Computer Screenshot Width",
+			description: "Maximum composite screenshot width in pixels",
+		},
+	},
+
+	"computer.maxHeight": {
+		type: "number",
+		default: 1200,
+		ui: {
+			tab: "tools",
+			group: "Computer",
+			label: "Computer Screenshot Height",
+			description: "Maximum composite screenshot height in pixels",
+		},
+	},
+
 	"checkpoint.enabled": {
 		type: "boolean",
 		default: false,
@@ -5205,6 +5266,11 @@ export const SETTINGS_SCHEMA = {
 		default: undefined,
 	},
 
+	"searxng.engines": {
+		type: "string",
+		default: undefined,
+	},
+
 	"searxng.language": {
 		type: "string",
 		default: undefined,