Release v6.9.2

[code-crusher]

Release v6.9.2

Fixed

• API-only models no longer leak into the model picker. The /v1/models catalog fetch in fetchDynamicModels sent no User-Agent, so the backend's first-party check failed and appended the System One models (e.g. fastino/gliner2.5-decide) to the response; they were registered into the picker like regular chat models. The fetch now sends the standard DEFAULT_HEADERS (orbcode-cli/<version> User-Agent), matching every other backend call.

Changed

• Shell-first exploration. list_files and search_files are no longer offered to the model; it searches and lists with rg, find, ls and git through the Bash tool, with read-only commands skipping the approval prompt and running in parallel.
• execute_command is now Bash, and it really runs bash. Commands run in bash on macOS/Linux (Git Bash on Windows), with process-group cleanup on interrupt/timeout.

Included commits

• e88fc2b feat(tools): shell-first exploration with a bash-backed Bash tool
• a5d134b fix(models): identify as first-party agent in /v1/models catalog fetch
• 6bc1d97 release: v6.9.2 (version bump + changelog)

[matterai-app]

Summary By MatterAI

🔄 What Changed

• Version Bump: Updated package version to 6.9.2 in package.json.
• User-Agent Injection: Included DEFAULT_HEADERS in /v1/models API requests within src/api/models.ts to satisfy backend first-party agent validation.

🔍 Impact of the Change

• API Compatibility: Ensures correct model picker listings by allowing the backend's isFirstPartyAgent check to recognize CLI requests and exclude internal-only models.

📁 Total Files Changed

Click to Expand

File	ChangeLog
Version Bump package.json	Incremented CLI release version to 6.9.2.
Header Update src/api/models.ts	Added DEFAULT_HEADERS to model endpoint requests for proper agent identification.

🧪 Test Added/Recommended

Recommended

• Add unit tests verifying that DEFAULT_HEADERS are correctly injected into API model requests.

🔒 Security Vulnerabilities

• None identified.

⏳ Estimated code review effort

LOW (~5 minutes)

Tip

Quality Recommendations

1. Add integration or unit tests to verify header inclusion on model endpoint fetches.

♫ Tanka Poem

Version rolls ahead,
CLI sends its proper badge,
Models list aligned,
First-party gates open wide,
Clean release takes its swift flight.

Sequence Diagram

sequenceDiagram
    participant CLI as OrbCode CLI
    participant API as Backend Models API
    
    CLI->>API: GET /v1/models (with DEFAULT_HEADERS)
    Note over API: Validates isFirstPartyAgent check
    API-->>CLI: Returns filtered model picker list

Loading

[matterai-app]

✅ Reviewed the changes: Release v6.9.2: version bump plus a targeted fix that spreads DEFAULT_HEADERS (carrying the orbcode-cli/<version> User-Agent) into the /v1/models fetch so the backend's isFirstPartyAgent check passes. The header spread is consistent with existing usage in client.ts (defaultHeaders) and metrics.ts, introduces no key conflicts with Accept/Authorization/org headers, and adds no circular imports (headers.ts only depends on branding.ts and utils/shell.ts). Reviewed src/api/models.ts: no issues found. Reviewed package.json: no issues found.