Two bugs identified from article "Claude Code封号真相":
1. cch=00000 never replaced (fix):
signBillingHeaderCCH was gated by enableCCH (default false), so the
cch=00000 placeholder injected by buildBillingAttributionBlockJSON was
sent to Anthropic as-is — an obvious fake signal. The function already
guards itself via regex match, so the enableCCH gate is removed.
2. NormalizeSystemPromptEnv was dead code (fix):
Platform/Shell/OS Version/Working directory fields in user system prompts
leaked real machine info (e.g. "Darwin 25.3.0", "/Users/win/...") that
Anthropic could use to correlate requests across accounts. Now normalized
to canonical values before injecting into the messages pair.
038f0ee8d3