@bitkyc08/opencodex 2.74.0 → 2.75.0

package/src/generated/compatibility-version.json

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "74cbb03f17637817c63923c697f1ff394f69c2431a7da67b0bed378482ef52bc"
+      "sha256": "408e1f2afa7ab9b5bd057e361a77ebd2f9f7ece46ca1227fe8a7e2ac3dc926e4"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -334,7 +334,7 @@
     },
     {
       "path": "src/adapters/devin.ts",
-      "sha256": "d27da84c6814a1cb887539aed95522ced2bb7c8e0be1f8b213a229cd0408825c"
+      "sha256": "61e7d400ffee83439ecdefe29c79f55ecfcef01991ac2533bc721cc98547cf99"
     },
     {
       "path": "src/adapters/devin/cloud-direct/auth.ts",
@@ -346,7 +346,7 @@
     },
     {
       "path": "src/adapters/devin/cloud-direct/chat.ts",
-      "sha256": "a2da318c2629d651ffcaf93fa37bdca9d0a9878967cc2c734cc35365eea7b40a"
+      "sha256": "11b60243816b75fb53eb8024211fc29e00dc2a8042bf9c5edb8e1a9706bebfc2"
     },
     {
       "path": "src/adapters/devin/cloud-direct/index.ts",
@@ -374,7 +374,7 @@
     },
     {
       "path": "src/adapters/devin/live-models.ts",
-      "sha256": "cc790c329be067cfd5b05e79c8ddafa2d5fdb9c75f68b65a082b8d172580a07c"
+      "sha256": "369a2ce283c471014e0df90cb19867ebf1b27ffbf12419dc7aa305035fcc50f6"
     },
     {
       "path": "src/adapters/devin/reasoning-signature.ts",
@@ -864,6 +864,10 @@
       "path": "src/claude/desktop-system-proxy.ts",
       "sha256": "4c08bd2c7148e2c0492416ba29c6659651ccb7065aea6e73c2ccffd1a6b4e49d"
     },
+    {
+      "path": "src/claude/devin-output-order.ts",
+      "sha256": "0893e7ca2a6b2d5ce9f5ea72506e3a0a49ed3ac5467f99e04e891623e8a8f392"
+    },
     {
       "path": "src/claude/first-party-settings.ts",
       "sha256": "6bb66606a4a9ce1e9e7a4a716c08b604fa2bef80c070ec0594dc235ce4ce681e"
@@ -1562,7 +1566,7 @@
     },
     {
       "path": "src/codex/auth-api/pool-quota-probe.ts",
-      "sha256": "5bb57f8f33b007cc8039cf69b29b9203bb47f495855b453ec1a2b8d338d8da99"
+      "sha256": "86e35f3ecad73382aa33c647aa3715fc359c2208911969f8b46fea2c2923bd9e"
     },
     {
       "path": "src/codex/auth-api/reset-credit-service.ts",
@@ -1718,7 +1722,7 @@
     },
     {
       "path": "src/codex/catalog/retained-sync.ts",
-      "sha256": "8aa089d473dfbadee9229f149fec26b2771c493401a178d977c2434775ce211b"
+      "sha256": "1403869c54577977a497c4e35e9f1199a39c4d225ed20a9bfe8aee039197d55a"
     },
     {
       "path": "src/codex/catalog/routed-gather.ts",
@@ -1898,7 +1902,7 @@
     },
     {
       "path": "src/codex/inject/config-toml.ts",
-      "sha256": "aa0fd958aa0b30ce9deb38d663305c383c48ea6589764e7086ecf6a9138f0798"
+      "sha256": "8624e47a2c37a7e5404381211ccd7a60298db8e97e801f50512a239c93f3c67b"
     },
     {
       "path": "src/codex/inject/multi-agent-v2.ts",
@@ -1914,11 +1918,11 @@
     },
     {
       "path": "src/codex/inject/provider-table.ts",
-      "sha256": "c4ac4524e9bc34f24b65515ccd8753f696d5e95e6719ff7546ae4f99e848549a"
+      "sha256": "7eb36e69e56372047b5ede03ec93ca1dc5dcb447bab3a7e1be652ebd1a07b636"
     },
     {
       "path": "src/codex/inject/remove.ts",
-      "sha256": "a52cf440370b4024a658481474ad78d1ffe3f2dcb21e5d864c2d0edf6bdd90c9"
+      "sha256": "ba8283ce9a656d349aa684f490b382cdfb9033ccc7700fbbff5339df9b647b1c"
     },
     {
       "path": "src/codex/inject/restore.ts",
@@ -1934,7 +1938,7 @@
     },
     {
       "path": "src/codex/injected-marker.ts",
-      "sha256": "0211f0b30445d7247d4511d6961a88e0b0b3bb37b3a2189a3b3a7919bd11237d"
+      "sha256": "399b7fe9a849642f4e7f1e5c4fb5eca43ac7afcc10b641043f3422c56733c4ab"
     },
     {
       "path": "src/codex/integration-record.ts",
@@ -2202,7 +2206,7 @@
     },
     {
       "path": "src/codex/quota-auto-refresh.ts",
-      "sha256": "a6250d8d686d7558fb841bbcad981870869c27c29532b9087e1a5c665546c354"
+      "sha256": "f377202f6b73113d076f4117a161deb60c19ee239c03809080d0d965b1b5ffad"
     },
     {
       "path": "src/codex/quota-capacity.ts",
@@ -2238,7 +2242,7 @@
     },
     {
       "path": "src/codex/quota.ts",
-      "sha256": "898e4100742e9d1a98aca7e9463e0c917166afe51a5eab02c4e64175879b47c6"
+      "sha256": "dc07e2e53066528331af46ba3946552fff74abd1a339f3161499de0138db852e"
     },
     {
       "path": "src/codex/refresh.ts",
@@ -2374,7 +2378,7 @@
     },
     {
       "path": "src/codex/toml-source-lines.ts",
-      "sha256": "32049ebeb9efdd9079c25c793a701830b24304c68317c174572fccf6ca081dcb"
+      "sha256": "aefc3a941f073ec41ddd56511b52339bcea281c1afb5cc9585be1a427ae1f9c8"
     },
     {
       "path": "src/codex/transition-state.ts",
@@ -2454,7 +2458,7 @@
     },
     {
       "path": "src/config.ts",
-      "sha256": "4c062766f13fdd7b7abffa17dd3d60ee7b801d79519643dcd137ed93b5722ec7"
+      "sha256": "2540d8851dbc204cc78fd570f73818bd6a4103a55441de1225730780b5c1fd87"
     },
     {
       "path": "src/config/admitted-identity.ts",
@@ -2482,7 +2486,7 @@
     },
     {
       "path": "src/config/live-reconcile.ts",
-      "sha256": "6fcf9218424c49de377671b02b0f3b76c5836536944221718f0547370b75a43e"
+      "sha256": "05cd6efa7bd35ecc75e42078c21478b23e59ebc0e79204de2434258feb288f3b"
     },
     {
       "path": "src/config/load-degrade.ts",
@@ -2554,7 +2558,7 @@
     },
     {
       "path": "src/config/rebase-provenance.ts",
-      "sha256": "7d2d8c5fd2f2b01bbdffea4437146580d7373639d7a8e0b332ae46656b826a82"
+      "sha256": "badcb6dddc61f93ed4a9761d36f19aff92cc56e2ace5d272ad2984b4358e53cc"
     },
     {
       "path": "src/config/salvage.ts",
@@ -2662,7 +2666,7 @@
     },
     {
       "path": "src/images/loop.ts",
-      "sha256": "f7b7c58778aaaa665499eb1750f78d8c76a22c6a4e18334470baf3ede472190e"
+      "sha256": "3fbbc06d608fa2da7a29306d6c7da7797b4d9a412509540a81da322d830abf72"
     },
     {
       "path": "src/images/plan.ts",
@@ -2730,7 +2734,7 @@
     },
     {
       "path": "src/integrations/cursor-local-installer.ts",
-      "sha256": "a771e3ace879f3b8dae8f9b9fa58046e43845e2539edafa31c521dc6fe2894ab"
+      "sha256": "43da14dd298d6faf0e198ca0c183e77ec00a1d6ce70da947a67cd60ed465192b"
     },
     {
       "path": "src/integrations/cursor-seen.ts",
@@ -3534,7 +3538,7 @@
     },
     {
       "path": "src/lib/redact.ts",
-      "sha256": "e5435e440cc86cdbc39171ea5ca91cb31eed2af19f01e989a1523dfb9f56edb6"
+      "sha256": "2e6579780aec91c3eb551ab0262c6448cf4979e958941fc893b93b2a50f287b5"
     },
     {
       "path": "src/lib/request-execution-budget.ts",
@@ -3792,6 +3796,10 @@
       "path": "src/oauth/account-quota-rank.ts",
       "sha256": "dad7dc420e424ff63cad47bf5c142a12e8c45ec7021de99d2d9f01ddfa357c0c"
     },
+    {
+      "path": "src/oauth/anthropic-account-refusal.ts",
+      "sha256": "80aa11761049970cde3cd6e668e712ecb67a09b8ca712cf71894278a8c7533fc"
+    },
     {
       "path": "src/oauth/anthropic-account-threshold.ts",
       "sha256": "2bc5aed137e94b27a1463cc93c4642df72b0f2d968275dcc9fe568889dbca028"
@@ -3802,7 +3810,7 @@
     },
     {
       "path": "src/oauth/anthropic-routing.ts",
-      "sha256": "8057c4340b77ace4bd214c32d8e8db2e5190dd4b72bcdd9dbe91969e4f28d6a6"
+      "sha256": "cb0bf7f08c5b49dea69b29bc6b066331b8846d290f51a035c6150e0de1a91ae7"
     },
     {
       "path": "src/oauth/anthropic.ts",
@@ -4256,9 +4264,13 @@
       "path": "src/providers/muse-subscription-usage.ts",
       "sha256": "bd9f7bb833625a124e5d9828f8e8bf82badc9a316b2a6e34d5234b600f0ecdbe"
     },
+    {
+      "path": "src/providers/new-model-policy-runtime.ts",
+      "sha256": "c2e50d97236ffef238f81ec0e8b4e74ec3a17dfb033cd3c585117809b44fa146"
+    },
     {
       "path": "src/providers/new-model-policy.ts",
-      "sha256": "02c7c4000aa9a8bdd8264027fa4e07844f09c92eda516afec7c2270818ae1618"
+      "sha256": "a58ec74435dcf59417109a25c6388e48b1c5111aa74000a2b42f813bb2df2c11"
     },
     {
       "path": "src/providers/ollama-show.ts",
@@ -4366,7 +4378,7 @@
     },
     {
       "path": "src/providers/registry/entries-core.ts",
-      "sha256": "62c363bd05f81c79b47d172255906f4dd1c1ab5f875f0b7c3f7e5700471f42d6"
+      "sha256": "e171cb17b690b359cfd718e0cb64ea6d131e7a7da4ca0afdce6914293651b7eb"
     },
     {
       "path": "src/providers/registry/entries-extended.ts",
@@ -4378,7 +4390,7 @@
     },
     {
       "path": "src/providers/registry/model-seeds.ts",
-      "sha256": "4b72d7fc2cc7b97ee32c6850562523921016a7e7bd2a5079f10adaaa71dc8e39"
+      "sha256": "deacbedbf3f200d08cfa871b597c689b112bba1aebc8f54a2c20a435305e9248"
     },
     {
       "path": "src/providers/registry/types.ts",
@@ -4438,7 +4450,7 @@
     },
     {
       "path": "src/providers/xai-transport.ts",
-      "sha256": "677513d1c600974bdbe86c08b77877b4cd0e1173a0d0a801115a28e7fa9c7250"
+      "sha256": "1ae46666416e0ca3162bfe04427c4c26a06cd38dd77b06fa15a9fb842098b231"
     },
     {
       "path": "src/providers/zai-responses-migration.ts",
@@ -4950,7 +4962,7 @@
     },
     {
       "path": "src/server/claude-messages.ts",
-      "sha256": "1e5e514f60c773fc2f7679ee0036abd2966d3c2342b4c2ab50407cd303c38c94"
+      "sha256": "96c6cc4de3130746d230feda91ade95b902fe8a65bdf2cbeecf43183dd9ee4e7"
     },
     {
       "path": "src/server/context-history.ts",
@@ -5138,7 +5150,7 @@
     },
     {
       "path": "src/server/management/agent-settings-routes.ts",
-      "sha256": "76a8851196baaa607f4635e220957a563f941819b68598da9c446516116fbbf3"
+      "sha256": "4e6f962a8f843473343c676eee6083965fe7a79e6408ff1ae08f46f9e66e15e7"
     },
     {
       "path": "src/server/management/anthropic-account-threshold.ts",
@@ -5234,7 +5246,7 @@
     },
     {
       "path": "src/server/management/model-rows.ts",
-      "sha256": "fa507041352498cab901deb62b99f6019b96b0d8f95146fdaba9aefa2f1e5d17"
+      "sha256": "c8c7c99b4cc5587ae14ba0d051f2906879a79ab7ac2e5387ea5581bf06b4083a"
     },
     {
       "path": "src/server/management/native-integration-routes.ts",
@@ -5302,7 +5314,7 @@
     },
     {
       "path": "src/server/management/shared.ts",
-      "sha256": "1586ec6efb5ea72b328d8d4d336f3928870673b1bb53fde75a0a13eabe84181b"
+      "sha256": "797ce8c65b067f241ead4402d1e2967bba991c745e09853b62a586c57fac6492"
     },
     {
       "path": "src/server/management/sibling-guard.ts",
@@ -5498,15 +5510,15 @@
     },
     {
       "path": "src/server/responses/adapter-continuation.ts",
-      "sha256": "3c00690b8097c1c0ca28496360d23387fd8489ec2df383dbbacc208a442aa576"
+      "sha256": "ecb3ca3fb55747289b64b11cddd22d061fd15270a119d2b160052978c16cab63"
     },
     {
       "path": "src/server/responses/adapter-delivery.ts",
-      "sha256": "cdaa9044fd488a52ecb9b700dc33b7efa5be6729d1ac8ae3e9ebc060d51b8690"
+      "sha256": "ed70b7767028c18e6963343505659c3f4d17cb1c6736296f5698b1da2df9ef8c"
     },
     {
       "path": "src/server/responses/adapter-dispatch.ts",
-      "sha256": "8112f5c857d779e82bbaf061b52b5bf027900ec00c50f6a4e4be2222b70aeecd"
+      "sha256": "9fa345fa8468a5461dea9d96e6ca767144d9edbb1e97c5e863fcae494219eb96"
     },
     {
       "path": "src/server/responses/agent-task-recovery-cache.ts",
@@ -5570,7 +5582,7 @@
     },
     {
       "path": "src/server/responses/compact.ts",
-      "sha256": "4351116d0a990132e90af2807d1f8849c9f50603028013454541cc04d748f76d"
+      "sha256": "6295be94e0e18090b5cb6e7b785cb523d6b95afc32b88bde1674dce7814847c9"
     },
     {
       "path": "src/server/responses/compaction-recovery-policy.ts",
@@ -5598,7 +5610,7 @@
     },
     {
       "path": "src/server/responses/core-codex-account.ts",
-      "sha256": "961658c9c9552d5f78f1e755e1bb32328277958e5ce1752c58f293fdda242e2c"
+      "sha256": "4739da1b80564820492f5390d390150bd7a1dee8ffe0725c0c6664698ad678c7"
     },
     {
       "path": "src/server/responses/core-combo-failure.ts",
@@ -5718,7 +5730,7 @@
     },
     {
       "path": "src/server/responses/passthrough-delivery.ts",
-      "sha256": "0c933cd16298d1929b25b68b6a2d45a67a0807b90a7cdb5299657b6509665e2b"
+      "sha256": "38827ee50e10130e9d661bd21df0a969634e7d5989aea1a259ffd1f6ae6e508c"
     },
     {
       "path": "src/server/responses/passthrough-dispatch.ts",
@@ -5758,7 +5770,7 @@
     },
     {
       "path": "src/server/responses/request-transport.ts",
-      "sha256": "6b17689d298d4ac1a6b757875fa1ac3c28858b94339b4180c43b3e39fc09007a"
+      "sha256": "fda410751c027be01238c8b4f7cb42c518df6b15e7146074fbea410b20601fab"
     },
     {
       "path": "src/server/responses/reset-replay.ts",
@@ -5774,7 +5786,7 @@
     },
     {
       "path": "src/server/responses/run-turn-execution.ts",
-      "sha256": "c9a1cb9b722e402b8f97b78d883e8b6346e46c2de484eca47346cd4a152ba493"
+      "sha256": "ce6d5e7795264e20d816dff04521a5c8a511b6fa04458f7a7cbb742c78e88165"
     },
     {
       "path": "src/server/responses/shadow-target-availability.ts",
@@ -5782,7 +5794,7 @@
     },
     {
       "path": "src/server/responses/sidecar-execution.ts",
-      "sha256": "253e08d77adfdbd341533c0b77ac9d28b5e3d1c4edeb3de8261ca59239acfcd3"
+      "sha256": "4aacc777a84aefdd55f058d0401fc7d210b48e19a71feb1fbfa7c5c72bc4e273"
     },
     {
       "path": "src/server/responses/skills-snapshot.ts",
@@ -6494,7 +6506,7 @@
     },
     {
       "path": "src/web-search/loop.ts",
-      "sha256": "233dbe833b96ba875ab71b27c6b1c7345e60bdae8596f61f3ae5b71399d6e99c"
+      "sha256": "64731bb318e103a542568d2910ddd9621f9e4d318259167304f65d7107f69f93"
     },
     {
       "path": "src/web-search/ollama-executor.ts",

package/src/images/loop.ts

@@ -335,6 +335,7 @@ export interface ImageBridgeDeps {
     retryAfterHeader: string | null,
     responseHeaders?: Headers,
     retryParsed?: OcxParsedRequest,
+    // A 403 requires this complete response; status-only callbacks retain 429 semantics.
     originalResponse?: Response,
   ) =>
     | { adapter: ProviderAdapter; recoveryKind: AttemptRecoveryKind }
@@ -687,6 +688,7 @@ export async function runWithImageBridge(deps: ImageBridgeDeps): Promise<Respons
       }
       // 429 key-failover parity with web-search / normal routed path.
       while ((prepared.response.status === 429
+        || (prepared.response.status === 403 && deps.incomingMeta?.providerName === "anthropic")
         || (iterParsed._kiroAuthContext && (prepared.response.status === 400 || prepared.response.status === 403))) && deps.on429) {
         const rotated = await deps.on429(prepared.response.headers.get("retry-after"), prepared.response.headers,
           iterParsed, prepared.response);

package/src/integrations/cursor-local-installer.ts

@@ -17,6 +17,9 @@
 const DEFAULT_UPDATE_HOST = "https://api2.cursor.sh";
 
 const UPDATE_MANIFEST_TIMEOUT_MS = 4_000;
+const UPDATE_MANIFEST_MAX_BYTES = 64 * 1024;
+const UPDATE_MANIFEST_MAX_VERSION_LENGTH = 256;
+const UPDATE_MANIFEST_MAX_URL_LENGTH = 4 * 1024;
 const CACHE_TTL_OK_MS = 30 * 60_000;
 const CACHE_TTL_FAILED_MS = 5 * 60_000;
 
@@ -63,7 +66,29 @@ export function realCursorLocalHintDeps(): CursorLocalHintDeps {
     fetchJson: async (url, timeoutMs) => {
       const response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
       if (!response.ok) throw new Error(`HTTP ${response.status}`);
-      return response.json();
+      if (!response.body) throw new Error("Missing response body");
+      const reader = response.body.getReader();
+      const chunks: Uint8Array[] = [];
+      let size = 0;
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        size += value.byteLength;
+        if (size > UPDATE_MANIFEST_MAX_BYTES) {
+          // Best-effort discard: awaiting cancel() could hang on a stalled source
+          // even though AbortSignal.timeout already bounds the request itself.
+          void reader.cancel().catch(() => {});
+          throw new Error("Update manifest exceeds byte limit");
+        }
+        chunks.push(value);
+      }
+      const body = new Uint8Array(size);
+      let offset = 0;
+      for (const chunk of chunks) {
+        body.set(chunk, offset);
+        offset += chunk.byteLength;
+      }
+      return JSON.parse(new TextDecoder().decode(body));
     },
   };
 }
@@ -86,7 +111,8 @@ export function platformForHost(os: string, arch: string): CursorLocalPlatform |
 function parseManifest(raw: unknown): { version: string; url: string } | null {
   if (!raw || typeof raw !== "object") return null;
   const record = raw as CursorLocalManifest;
-  if (typeof record.url !== "string" || !/^https:\/\/downloads\.cursor\.com\/local-mode\//.test(record.url)) {
+  if (typeof record.url !== "string" || record.url.length > UPDATE_MANIFEST_MAX_URL_LENGTH
+    || !/^https:\/\/downloads\.cursor\.com\/local-mode\//.test(record.url)) {
     return null;
   }
   // Windows and Linux manifests carry `version`/`productVersion`; the Darwin ones return only
@@ -94,6 +120,7 @@ function parseManifest(raw: unknown): { version: string; url: string } | null {
   const candidate = typeof record.version === "string" ? record.version
     : typeof record.productVersion === "string" ? record.productVersion
       : typeof record.name === "string" ? record.name : "";
+  if (candidate.length > UPDATE_MANIFEST_MAX_VERSION_LENGTH) return null;
   const version = candidate.trim();
   if (version === "") return null;
   // The Linux channel advertises the AppImage's zsync delta metadata (what the in-app updater

package/src/lib/redact.ts

@@ -100,13 +100,6 @@ const OTHER_FRAMED_CREDENTIALS: Array<[RegExp, string]> = [
     ),
     "element",
   ],
-  [
-    new RegExp(
-      `(<[^\\S\\r\\n]*(?:[A-Za-z_][\\w.-]*:)?[A-Za-z_][\\w:.-]*)(?=[^>]*?(?<![\\w:.-])(?:name|key|id)[^\\S]*=[^\\S]*["']?(?:${CREDENTIAL_HEADER_LABEL})["']?(?=[\\s/>]))[\\s\\S]*`,
-      "gi",
-    ),
-    "element",
-  ],
   // Multipart part: everything from a credential-named part header to the end
   // of the input. Part-based, not line-based — a body can span lines and the
   // blank line is often missing in a malformed echo.
@@ -136,7 +129,60 @@ const OTHER_FRAMED_CREDENTIALS: Array<[RegExp, string]> = [
 function maskOtherFramings(value: string): string {
   // Same union rule as the header pass: decoding may add coverage, never
   // remove it.
-  return maskOtherFramingsOnce(maskOtherFramingsOnce(value, true), false);
+  const decoded = maskOtherFramingsOnce(value, true);
+  const decodedXml = maskXmlIdentifyingAttribute(decoded, true);
+  const plain = maskOtherFramingsOnce(decodedXml, false);
+  return maskXmlIdentifyingAttribute(plain, false);
+}
+
+const XML_TAG_NAME = /<[^\S\r\n]*(?:[A-Za-z_][\w.-]*:)?[A-Za-z_][\w:.-]*/y;
+const XML_CREDENTIAL_ATTRIBUTE = new RegExp(
+  `(?<![\\w:.-])(?:name|key|id)[^\\S]*=[^\\S]*["']?(?:${CREDENTIAL_HEADER_LABEL})["']?(?=[\\s/>])`,
+  "i",
+);
+
+/** Find a tag terminator without treating a quoted attribute's `>` as syntax. */
+function findXmlTagClose(text: string, from: number): number {
+  let quote = "";
+  for (let index = from; index < text.length; index += 1) {
+    const character = text.charAt(index);
+    if (quote) {
+      if (character === quote) quote = "";
+    } else if (character === '"' || character === "'") {
+      quote = character;
+    } else if (character === ">") {
+      return index;
+    }
+  }
+  return -1;
+}
+
+/** Scan each tag once; a suffix-searching lookahead here makes unterminated tags quadratic. */
+function maskXmlIdentifyingAttribute(value: string, decodeEscapes: boolean): string {
+  const { folded, map } = foldForMatching(value, decodeEscapes);
+  let searchFrom = 0;
+  while (searchFrom < folded.length) {
+    const relativeStart = folded.indexOf("<", searchFrom);
+    if (relativeStart === -1) return value;
+    const tagStart = relativeStart;
+    XML_TAG_NAME.lastIndex = tagStart;
+    const tagName = XML_TAG_NAME.exec(folded);
+    if (!tagName) {
+      searchFrom = tagStart + 1;
+      continue;
+    }
+    const close = findXmlTagClose(folded, tagStart + tagName[0].length);
+    const tagEnd = close === -1 ? folded.length : close + 1;
+    const attributes = folded.slice(tagStart + tagName[0].length, tagEnd);
+    if (XML_CREDENTIAL_ATTRIBUTE.test(attributes)) {
+      const start = map[tagStart] ?? value.length;
+      const headEnd = map[tagStart + tagName[0].length] ?? value.length;
+      return value.slice(0, start) + value.slice(start, headEnd) + REDACTED_SECRET;
+    }
+    if (close === -1) return value;
+    searchFrom = tagEnd;
+  }
+  return value;
 }
 
 function maskOtherFramingsOnce(value: string, decodeEscapes: boolean): string {

package/src/oauth/anthropic-account-refusal.ts

@@ -0,0 +1,76 @@
+/** Narrow pre-output account recovery, fenced to the bearer that physically sent the turn. */
+import { readBoundedResponseBody } from "../lib/bounded-body";
+import { isNonReplayableResponse } from "../lib/upstream-retry";
+import { credentialGeneration, getAccountCredentialWithStatus } from "./store";
+import type { OAuthAccessSnapshot } from "./index";
+import type { OcxConfig } from "../types";
+import type { AnthropicRouteDecision } from "./anthropic-model-routes";
+import { recordAnthropicAccountRefusal, rotateAnthropicAccountOnRefusal } from "./anthropic-routing";
+
+const responseCredentials = new WeakMap<Response, Pick<OAuthAccessSnapshot, "accountId" | "generation">>();
+const verdicts = new WeakMap<Response, Promise<boolean>>();
+
+/** Called only when the outgoing headers prove ownership of the selected stored bearer. */
+export function bindAnthropicRefusalCredential(response: Response, snapshot: OAuthAccessSnapshot): void {
+  responseCredentials.set(response, { accountId: snapshot.accountId, generation: snapshot.generation });
+}
+
+async function isAccountRefusal(response: Response, signal?: AbortSignal): Promise<boolean> {
+  try {
+    const body = await readBoundedResponseBody(response.clone(), { signal });
+    if (!body.displaySafe || body.truncated) return false;
+    const payload: unknown = JSON.parse(body.text);
+    if (!payload || typeof payload !== "object" || Array.isArray(payload) || !("error" in payload)) return false;
+    const error = payload.error;
+    if (!error || typeof error !== "object" || Array.isArray(error) || !("type" in error) || !("message" in error)
+      || typeof error.message !== "string") return false;
+    // Whole-message patterns: request-policy/model/resource refusals and quoted diagnostics
+    // must not acquire account authority merely by containing entitlement keywords.
+    if ("code" in error && error.code != null
+      && (typeof error.code !== "string" || !["subscription_required", "insufficient_quota", "permission_denied"].includes(error.code))) return false;
+    const message = error.message.trim();
+    if (error.type === "permission_error" && /^(?:Your account does not have access to Claude Code|Your (?:Claude )?subscription (?:has expired|is (?:expired|inactive))|Your account does not have an active subscription)[.!]?$/i.test(message)) return true;
+    return (error.type === "billing_error" || error.type === "permission_error")
+      && /^Your credit balance is too low to access the Anthropic API\.(?: Please go to Plans & Billing to upgrade or purchase credits\.)?$/i.test(message);
+  } catch {
+    // Malformed, over-limit, interrupted and unreadable error bodies are never authority.
+    return false;
+  }
+}
+
+export async function rotateAnthropicAccountOnResponse(
+  response: Response,
+  options: {
+    config: OcxConfig;
+    accountId: string;
+    sessionKey?: string | null;
+    decision?: AnthropicRouteDecision | null;
+    signal?: AbortSignal;
+    canRetry: boolean;
+    allowAccountRefusal?: boolean;
+  },
+): Promise<string | null> {
+  if (options.signal?.aborted || isNonReplayableResponse(response)) return null;
+  if (response.status !== 429) {
+    if (response.status !== 403 || options.allowAccountRefusal === false) return null;
+    const sent = responseCredentials.get(response);
+    if (!sent || sent.accountId !== options.accountId) return null;
+    let verdict = verdicts.get(response);
+    if (!verdict) {
+      verdict = isAccountRefusal(response, options.signal);
+      verdicts.set(response, verdict);
+    }
+    if (!await verdict || options.signal?.aborted) return null;
+    // A late refusal must not cool a new credential stored while its body was being read.
+    const current = getAccountCredentialWithStatus("anthropic", sent.accountId);
+    if (!current || current.paused || current.needsReauth || credentialGeneration(current.credential) !== sent.generation) return null;
+  }
+  const status = response.status === 429 ? 429 : 403;
+  if (!options.canRetry) {
+    recordAnthropicAccountRefusal(options.config, options.accountId, status,
+      response.headers.get("retry-after"), Date.now(), response.headers);
+    return null;
+  }
+  return rotateAnthropicAccountOnRefusal(options.config, options.accountId, status,
+    response.headers.get("retry-after"), options.sessionKey, Date.now(), response.headers, options.decision);
+}