Release v6.9.2

CHANGELOG.md

@@ -5,7 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [6.9.2] - 2026-10-03
+
+### Fixed
+
+- **API-only models no longer leak into the model picker.** The `/v1/models` catalog fetch in `fetchDynamicModels` sent no `User-Agent`, so the backend's first-party check failed and appended the System One models (e.g. `fastino/gliner2.5-decide`) to the response; they were registered into the picker like regular chat models. The fetch now sends the standard `DEFAULT_HEADERS` (`orbcode-cli/<version>` User-Agent), matching every other backend call, and the backend hides System One models from first-party agents again.
 
 ### Changed
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@matterailab/orbcode",
-  "version": "6.9.1",
+  "version": "6.9.2",
   "description": "OrbCode CLI — agentic coding in your terminal, by MatterAI",
   "type": "module",
   "bin": {

src/api/models.ts

@@ -4,6 +4,8 @@ import * as fs from "node:fs"
 import * as os from "node:os"
 import * as path from "node:path"
 
+import { DEFAULT_HEADERS } from "./headers.js"
+
 /**
  * Read the currently selected model id from disk without triggering the full
  * settings-load side effects (env application, custom-model registration).
@@ -447,7 +449,11 @@ export async function fetchDynamicModels(
       ? getUrlFromToken("https://api.matterai.so/v1/models", token)
       : "https://api.matterai.so/v1/models";
 
+    // DEFAULT_HEADERS carries the `orbcode-cli/<version>` User-Agent the
+    // backend's isFirstPartyAgent check requires; without it /v1/models
+    // appends the API-only System One models to the picker list.
     const headers: Record<string, string> = {
+      ...DEFAULT_HEADERS,
       Accept: "application/json",
     };
     if (token) {