From 4cbcc835d1e7fc616a23a6d516e9cc68b1282d40 Mon Sep 17 00:00:00 2001
From: RGBadmin <zzlwork@qq.com>
Date: Wed, 11 Feb 2026 15:21:19 +0800
Subject: [PATCH] feat: read per-account excluded_models at routing time

---
 sdk/cliproxy/service.go | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/sdk/cliproxy/service.go b/sdk/cliproxy/service.go
index 0ae05c08..b77de8c6 100644
--- a/sdk/cliproxy/service.go
+++ b/sdk/cliproxy/service.go
@@ -740,6 +740,26 @@ func (s *Service) registerModelsForAuth(a *coreauth.Auth) {
 		provider = "openai-compatibility"
 	}
 	excluded := s.oauthExcludedModels(provider, authKind)
+	// Merge per-account excluded models from auth attributes (set by synthesizer)
+	if a.Attributes != nil {
+		if perAccount := strings.TrimSpace(a.Attributes["excluded_models"]); perAccount != "" {
+			parts := strings.Split(perAccount, ",")
+			seen := make(map[string]struct{}, len(excluded)+len(parts))
+			for _, e := range excluded {
+				seen[strings.ToLower(strings.TrimSpace(e))] = struct{}{}
+			}
+			for _, p := range parts {
+				seen[strings.ToLower(strings.TrimSpace(p))] = struct{}{}
+			}
+			merged := make([]string, 0, len(seen))
+			for k := range seen {
+				if k != "" {
+					merged = append(merged, k)
+				}
+			}
+			excluded = merged
+		}
+	}
 	var models []*ModelInfo
 	switch provider {
 	case "gemini":