What
Model labels now pass through a sanitizer that strips backticks and angle brackets, neutralises markdown link punctuation, removes control characters, collapses whitespace and truncates, falling back to the literal "unknown model" if nothing is left. This covers both the plain label and the <id> (<resolved>) form in pickers, which matters because model ids and labels can arrive from settings, environment variables or remote config.
Details
- Labels and descriptions fetched from the gateway's model list, and cached extra model options, go through the same defusing and truncation.
- Gateway-sourced picker entries are computed once per fetched payload rather than on every render.
- Model options can now carry a disabled flag and a promotional list price.
Evidence
unknown model, [Bootstrap] Gateway /v1/models, From gateway
Strings lifted out of the shipped bundle, so the claim above can be checked against them.