docs(credentials): clarify private platform request headers

packages/credentials/deepseek-account/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/credentials/deepseek-account/README.md
-README.md: 72b42ee996b809992e48ea4c124f0793d756526a
-README.zh.md: b30813e24adc2afc9e8245b839432dd195093c63
+README.md: c54dc4feced92308a83c47aa0eb7033766708205
+README.zh.md: 1df0ca4cdc7d55584d8dcba29706746c87dcb31f

packages/credentials/deepseek-account/README.md

@@ -60,4 +60,4 @@ No model request prefix changes.
 
 The [desktop login decision](../../../.agents/notes/implemented/architecture/2026-09-14-deepseek-account-login.md) records cancellation and storage ownership.
 
-PlatformSession may carry private deployment requestHeaders from Host to Electron main. Consumers must exclude those headers from renderer bootstrap and restrict them to the configured origin. mergePlatformCookies preserves unrelated cookie pairs while replacing matching names.
+PlatformSession may carry Host-only requestHeaders from Host to Electron main: deployment headers plus the provider's x-client-platform. Consumers must exclude those headers from renderer bootstrap and restrict them to the configured origin. mergePlatformCookies preserves unrelated cookie pairs while replacing matching names.

packages/credentials/deepseek-account/README.zh.md

@@ -60,4 +60,4 @@ AccountDetails.balance 就绪时，value 保存充值钱包，bonusWallets 保
 
 [桌面登录决策](../../../.agents/notes/implemented/architecture/2026-09-14-deepseek-account-login.zh.md)记录取消和存储的职责。
 
-PlatformSession 可将私有部署 requestHeaders 从 Host 传至 Electron 主进程。消费者必须从渲染层 bootstrap 排除这些请求头，并将其限定于配置来源。mergePlatformCookies 替换同名 Cookie，同时保留其他 Cookie。
+PlatformSession 可将仅限 Host 的 requestHeaders 从 Host 传至 Electron 主进程，其中包含部署请求头和 provider 提供的 x-client-platform。消费者必须从渲染层 bootstrap 排除这些请求头，并将其限定于配置来源。mergePlatformCookies 替换同名 Cookie，同时保留其他 Cookie。

packages/credentials/deepseek-account/src/index.ts

@@ -15,7 +15,7 @@ export interface PlatformSession {
   readonly token: string
   /** Optional dist query value selecting the embedded frontend deployment. */
   readonly embeddedPageDist?: string
-  /** Private deployment headers for native requests; excluded from renderer bootstrap. */
+  /** Host-only request headers: deployment headers and the provider client identity; never exposed through renderer bootstrap. */
   readonly requestHeaders?: Readonly<Record<string, string>>
 }