# Oh My Pi 17.2.1: opt-in security workflow, session imports, remote model discovery fixes

> Patch release with an opt-in native security workflow subsystem (scan plans, Codex subscription affinity, SARIF/canonical findings), session imports from Claude and Codex (/resume @claude / @codex), Anthropic OAuth requests now matching Cowork's claude-desktop profile, and fixes for remote llama.cpp/Ollama endpoint discovery and extension validation for createEditTool/createWriteTool imports.

| | |
|---|---|
| **Tool** | Oh My Pi |
| **Version** | v17.2.1 |
| **Kind** | release |
| **Published** | 2026-07-30 |
| **Observed** | 2026-08-21 |
| **Significance** | 3/5 |
| **Breaking** | no |
| **Categories** | feature, fix, capability |

## What changed


- **Security workflow** (`security.enabled`, default off): immutable scan plans, exact-account Codex subscription affinity, task-worker review, canonical findings/coverage/SARIF publication, project-scoped history, explicit dispositions, read-only `security://` resource namespace, and Codex Security cloud operations integration.
- **Session imports**: `--from-claude` and `--from-codex` flags, also `/resume @claude` and `/resume @codex`.
- **Anthropic OAuth**: now reproduces Cowork's `claude-desktop` request profile including client/runtime metadata, beta selection, system/billing attestation, 64K output cap, and stable HTTP/1.1 header ordering.
- **OAuth credential resolution**: exact resolution by durable credential ID, no ranking/rotation/fallback.
- **Fixes**: remote llama.cpp/Ollama endpoints now use generous discovery timeout; Ollama cache rows scoped to normalized endpoint; `omp install` extension validation now exports `createEditTool`/`createWriteTool`; Python eval loopback tool bridge no longer routed through macOS system HTTP proxies.
- **Wayland**: `computer` tool probes root drawability at init and fails fast with actionable message on rootless XWayland.
- **`postmortem.quit`** config option for safe shutdown after terminal disconnect.


## Sources

- [github_release](https://github.com/can1357/oh-my-pi/releases/tag/v17.2.1) — retrieved 2026-08-21


## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/oh-my-pi/v17-2-1
Entity: https://changelogs.info/oh-my-pi
Event ID: `evt_2026-07-30_oh-my-pi_v17-2-1`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.