bug fix 内核更新

[dofastted]

把本地未提交的 2.1.280 改动和两个未合并 PR 收进 main。

• cch 按 2.1.280 原文投影计算，beta 对齐 sdk-cli 抓包
• share/wrap-cli/cli-node 用 UPX 5.0.1 从 124MB 压到 33MB
• 并入 fix(protocol): clamp 64-token cli-hop requests #101（64 token cli-hop 边界）和 fix: collect guest identity without legacy worker socket #84（Docker 身份采集不再依赖 worker.sock）

额度用尽调度已经在 1.3.38，这次没有再改那一层。

---

Note

High Risk
Changes billing cch computation and outbound beta headers that must match upstream Claude Code 2.1.280; misalignment can break API acceptance. Deploy also requires syncing the rebuilt cli-node binary into running slots.

Overview
Aligns outbound Claude Code mimicry with 2.1.280 (linux-x64 sdk-cli capture): billing cch now hashes a text projection of the request (placeholder cch, cleared "model" strings, stripped fallbacks / fallback_credit_token / numeric max_tokens) with seed 0x4D659218E32A3268, while the wire body keeps the real fields. Main Messages anthropic-beta order and tokens are updated (advanced-tool-use back with thinking-binding-controls, plus mid-conversation-system-clear-at, extended-cache-ttl, cache-diagnosis; no context-1m / fallback-credit in the default mimic set), mirrored in Go worker telemetry defaults.

cli-hop bumps max_tokens of 64 to 1024 (probe/classifier boundary, #101). With persona preset official, usage is no longer hidden on the cli-hop path.

Docker slot identity is collected via docker exec in a new guest reader instead of the worker HTTP socket (#84). Changelog notes a rebuilt UPX-compressed share/wrap-cli/cli-node requiring wrap-cli/sync or kernel release on deploy.

^{Reviewed by Cursor Bugbot for commit 97c62be. Configure here.}

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_5c3cb0ef-30e2-48e3-bbc4-7d1ed0f055ff)