@oh-my-pi/pi-ai 18.1.21 → 18.2.0

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## [Unreleased]
 
+## [18.2.0] - 2026-09-15
+
+### Added
+
+- Assistant turns from Anthropic-compatible hosts (direct, or via OpenRouter's `reasoning_details`) carry `upstreamModel`, the serving model id recovered from the signed thinking block, so callers can detect a router substituting a different model than requested.
+
+### Fixed
+
+- Fixed OpenCode Go window-limit 429s (`5-hour`/`Weekly`/`Monthly usage limit reached. Resets in …`) not pinning the exhausted credential to the server-stated reset; the window phrasing is now covered by a regression test over the rotation classifier. ([#12091](https://github.com/can1357/oh-my-pi/pull/12091) by [@H4vC](https://github.com/H4vC))
+
+## [18.1.22] - 2026-09-14
+
+### Fixed
+
+- 400-request debug dumps now redact provider-specific auth headers (`x-goog-api-key`, `x-amz-security-token`, and any header whose name carries a key/token/secret), not just a fixed allow-list, so a shared dump can no longer leak a live API key ([#12007](https://github.com/can1357/oh-my-pi/issues/12007)).
+
 ## [18.1.20] - 2026-09-13
 
 ### Fixed

package/THIRD-PARTY-NOTICES.txt

@@ -10843,7 +10843,7 @@ RUST RUNTIME DEPENDENCY LICENSES
 
 Generated from Cargo.lock by cargo-about 0.8.2 in locked, offline, workspace, all-feature, all-target mode, then restricted using cargo metadata to normal and build edges reachable from the workspace (development-only edges are excluded). cargo-deny independently evaluates the complete all-target graph.
 
-Native Opus (audiopus/audiopus_sys) and PCRE2 (pcre2/pcre2-sys) are covered by the exact crate license payloads below. inferno 0.12.8 is package-scoped as CDDL-1.0: its CDDL-covered source remains available in the locked crates.io source archive at https://crates.io/crates/inferno/0.12.8 and https://github.com/jonhoo/inferno. The full locked license text follows below.
+Native Opus (opus/opusic-sys) and PCRE2 (pcre2/pcre2-sys) are covered by the exact crate license payloads below. inferno 0.12.8 is package-scoped as CDDL-1.0: its CDDL-covered source remains available in the locked crates.io source archive at https://crates.io/crates/inferno/0.12.8 and https://github.com/jonhoo/inferno. The full locked license text follows below.
 
 -------------------------------------------------------------------------------
 License: Apache License 2.0 (Apache-2.0)
@@ -12509,6 +12509,58 @@ CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
+-------------------------------------------------------------------------------
+License: BSD 3-Clause "New" or "Revised" License (BSD-3-Clause)
+Used by:
+- opusic-sys 0.7.5 (https://github.com/DoumanAsh/opusic-sys)
+
+Full license text:
+
+Copyright 2001-2023 Xiph.Org, Skype Limited, Octasic,
+                    Jean-Marc Valin, Timothy B. Terriberry,
+                    CSIRO, Gregory Maxwell, Mark Borgerding,
+                    Erik de Castro Lopo, Mozilla, Amazon
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+- Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+- Neither the name of Internet Society, IETF or IETF Trust, nor the
+names of specific contributors, may be used to endorse or promote
+products derived from this software without specific prior written
+permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
+OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Opus is subject to the royalty-free patent licenses which are
+specified at:
+
+Xiph.Org Foundation:
+https://datatracker.ietf.org/ipr/1524/
+
+Microsoft Corporation:
+https://datatracker.ietf.org/ipr/1914/
+
+Broadcom Corporation:
+https://datatracker.ietf.org/ipr/1526/
+
 -------------------------------------------------------------------------------
 License: BSD 3-Clause "New" or "Revised" License (BSD-3-Clause)
 Used by:
@@ -13290,29 +13342,6 @@ jurisdiction of the Federal Courts of the Northern District of
 California and the state courts of the State of California, with
 venue lying in Santa Clara County, California.
 
--------------------------------------------------------------------------------
-License: ISC License (ISC)
-Used by:
-- audiopus_sys 0.2.2 (https://github.com/lakelezz/audiopus_sys.git)
-
-Full license text:
-
-ISC License
-
-Copyright (c) 2019, Lakelezz
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
-OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
 -------------------------------------------------------------------------------
 License: ISC License (ISC)
 Used by:
@@ -18734,7 +18763,7 @@ DEALINGS IN THE SOFTWARE.
 -------------------------------------------------------------------------------
 License: MIT License (MIT)
 Used by:
-- opus 0.3.1 (https://github.com/SpaceManiac/opus-rs)
+- opus 0.4.0 (https://github.com/SpaceManiac/opus-rs)
 
 Full license text:
 

package/dist/types/providers/anthropic-signature.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Recovers the serving model id Anthropic embeds in thinking-block signatures.
+ *
+ * A signature is a base64 protobuf: outer `{1: version, 2: envelope}`, envelope
+ * `{1: header, 2..5: nonce/ciphertext/tag}`, header
+ * `{1: schema, 5: hash, 6: model, 8: "thinking", 11: org uuid, 15: profile, 21: unix ts}`.
+ * Field 6 names the model that actually produced the block — a concrete
+ * snapshot (`claude-haiku-4-5-20251001`) or an internal codename
+ * (`numbat-v6-…`) — which lets a caller notice a gateway serving something other
+ * than the requested model. The v4 outer format (`CAQS…`) ships a header
+ * without field 6; the decoder then yields nothing.
+ */
+/**
+ * Model id embedded in an Anthropic thinking signature, or undefined when the
+ * signature is malformed, uses a format without a cleartext header, or names
+ * nothing resembling a model id.
+ */
+export declare function servedModelFromAnthropicSignature(signature: string): string | undefined;
+/**
+ * Model id from an OpenRouter reasoning item — a `reasoning_details` entry on
+ * chat completions or a Responses `reasoning` output item — which forwards the
+ * upstream Anthropic signature as `{ format: "anthropic-claude-v1", signature }`.
+ * Undefined for other formats.
+ */
+export declare function servedModelFromOpenRouterReasoning(item: unknown): string | undefined;

package/dist/types/registry/types.d.ts

@@ -60,6 +60,8 @@ export interface ProviderDefinition {
     readonly envKeys?: KeyResolver;
     /** Provider transport can authenticate without a resolved API-key string. */
     readonly allowsMissingApiKey?: boolean;
+    /** APIs whose provider transport resolves credentials without a stored account. */
+    readonly nativeAuthApis?: readonly string[];
     /** Provider-owned model normalization that must run before API-specific option mapping. */
     readonly prepareModel?: ProviderModelPreparer;
     /** Provider-owned request shaping applied before generic API dispatch. */

package/dist/types/types.d.ts

@@ -839,7 +839,13 @@ export interface AssistantMessage {
      * providers that expose no such field.
      */
     upstreamProvider?: string;
-    /** Provider-reported concrete model when a router selected one for this turn. */
+    /**
+     * Concrete model that produced this turn when it is knowable independently
+     * of the requested id: reported by a router that selected one, or recovered
+     * from a signed thinking block (Anthropic signatures name the serving
+     * model). Compared against `model` to notice a gateway serving something
+     * other than what was requested.
+     */
     upstreamModel?: string;
     usage: Usage;
     stopReason: StopReason;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@oh-my-pi/pi-ai",
-	"version": "18.1.21",
+	"version": "18.2.0",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"keywords": [
 		"ai",
@@ -124,11 +124,11 @@
 		"fmt": "oxfmt --no-error-on-unmatched-pattern 'src/**/*.{ts,tsx}' '{test,bench,examples,scripts}/**/*.ts' '*.ts'"
 	},
 	"dependencies": {
-		"@oh-my-pi/omptype": "18.1.21",
-		"@oh-my-pi/pi-catalog": "18.1.21",
-		"@oh-my-pi/pi-natives": "18.1.21",
-		"@oh-my-pi/pi-utils": "18.1.21",
-		"@oh-my-pi/pi-wire": "18.1.21"
+		"@oh-my-pi/omptype": "18.2.0",
+		"@oh-my-pi/pi-catalog": "18.2.0",
+		"@oh-my-pi/pi-natives": "18.2.0",
+		"@oh-my-pi/pi-utils": "18.2.0",
+		"@oh-my-pi/pi-wire": "18.2.0"
 	},
 	"devDependencies": {
 		"@types/bun": "^1.3.14"

package/src/providers/anthropic-signature.ts

@@ -0,0 +1,103 @@
+/**
+ * Recovers the serving model id Anthropic embeds in thinking-block signatures.
+ *
+ * A signature is a base64 protobuf: outer `{1: version, 2: envelope}`, envelope
+ * `{1: header, 2..5: nonce/ciphertext/tag}`, header
+ * `{1: schema, 5: hash, 6: model, 8: "thinking", 11: org uuid, 15: profile, 21: unix ts}`.
+ * Field 6 names the model that actually produced the block — a concrete
+ * snapshot (`claude-haiku-4-5-20251001`) or an internal codename
+ * (`numbat-v6-…`) — which lets a caller notice a gateway serving something other
+ * than the requested model. The v4 outer format (`CAQS…`) ships a header
+ * without field 6; the decoder then yields nothing.
+ */
+
+const OUTER_ENVELOPE_FIELD = 2;
+const ENVELOPE_HEADER_FIELD = 1;
+const HEADER_MODEL_FIELD = 6;
+const MAX_MODEL_ID_LENGTH = 128;
+const MODEL_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/;
+
+/** Returns the first length-delimited field `field` in `message`, or undefined. */
+function lengthDelimitedField(message: Uint8Array, field: number): Uint8Array | undefined {
+	let offset = 0;
+	while (offset < message.length) {
+		let tag = 0;
+		let shift = 0;
+		let byte: number;
+		do {
+			if (offset >= message.length) return undefined;
+			byte = message[offset++];
+			tag |= (byte & 0x7f) << shift;
+			shift += 7;
+		} while (byte & 0x80);
+		const fieldNumber = tag >>> 3;
+		const wireType = tag & 7;
+		switch (wireType) {
+			case 0: {
+				do {
+					if (offset >= message.length) return undefined;
+					byte = message[offset++];
+				} while (byte & 0x80);
+				break;
+			}
+			case 1:
+				offset += 8;
+				break;
+			case 2: {
+				let length = 0;
+				shift = 0;
+				do {
+					if (offset >= message.length) return undefined;
+					byte = message[offset++];
+					length |= (byte & 0x7f) << shift;
+					shift += 7;
+				} while (byte & 0x80);
+				if (offset + length > message.length) return undefined;
+				if (fieldNumber === field) return message.subarray(offset, offset + length);
+				offset += length;
+				break;
+			}
+			case 5:
+				offset += 4;
+				break;
+			default:
+				return undefined;
+		}
+	}
+	return undefined;
+}
+
+/**
+ * Model id embedded in an Anthropic thinking signature, or undefined when the
+ * signature is malformed, uses a format without a cleartext header, or names
+ * nothing resembling a model id.
+ */
+export function servedModelFromAnthropicSignature(signature: string): string | undefined {
+	if (signature.length < 8 || signature.length > 8192) return undefined;
+	let raw: Uint8Array;
+	try {
+		raw = Buffer.from(signature, "base64");
+	} catch {
+		return undefined;
+	}
+	const envelope = lengthDelimitedField(raw, OUTER_ENVELOPE_FIELD);
+	if (!envelope) return undefined;
+	const header = lengthDelimitedField(envelope, ENVELOPE_HEADER_FIELD);
+	if (!header) return undefined;
+	const modelBytes = lengthDelimitedField(header, HEADER_MODEL_FIELD);
+	if (!modelBytes || modelBytes.length === 0 || modelBytes.length > MAX_MODEL_ID_LENGTH) return undefined;
+	const model = Buffer.from(modelBytes).toString("utf8");
+	return MODEL_ID_PATTERN.test(model) ? model : undefined;
+}
+
+/**
+ * Model id from an OpenRouter reasoning item — a `reasoning_details` entry on
+ * chat completions or a Responses `reasoning` output item — which forwards the
+ * upstream Anthropic signature as `{ format: "anthropic-claude-v1", signature }`.
+ * Undefined for other formats.
+ */
+export function servedModelFromOpenRouterReasoning(item: unknown): string | undefined {
+	if (!item || typeof item !== "object" || !("format" in item) || !("signature" in item)) return undefined;
+	if (item.format !== "anthropic-claude-v1" || typeof item.signature !== "string") return undefined;
+	return servedModelFromAnthropicSignature(item.signature);
+}

package/src/providers/anthropic.ts

@@ -122,6 +122,7 @@ import {
 	resolveGitHubCopilotBaseUrl,
 	wrapFetchForCopilotFallback,
 } from "./github-copilot-headers";
+import { servedModelFromAnthropicSignature } from "./anthropic-signature";
 import { getOpenAIPromptCacheKey } from "./openai-shared";
 import { applyInferenceHeaders } from "./inference-headers";
 import { redactSensitiveCredentials, transformMessages } from "./transform-messages";
@@ -2588,6 +2589,11 @@ const streamAnthropicOnce = (
 					if (unwrappedThinking !== undefined) {
 						block.thinking = unwrappedThinking;
 						block.thinkingSignature = undefined;
+					} else if (!output.upstreamModel && block.thinkingSignature) {
+						// The signature names the model that actually produced the
+						// block; a gateway serving a different model than requested
+						// cannot mint one that says otherwise.
+						output.upstreamModel = servedModelFromAnthropicSignature(block.thinkingSignature);
 					}
 					stream.push({ type: "thinking_end", contentIndex, content: block.thinking, partial: output });
 				} else if (block.type === "anthropicServerTool" && block.block.type === "server_tool_use") {
@@ -3289,6 +3295,7 @@ const streamAnthropicOnce = (
 						output.content.length = 0;
 						output.model = model.id;
 						output.responseId = undefined;
+						output.upstreamModel = undefined;
 						output.errorMessage = undefined;
 						output.providerPayload = undefined;
 						output.usage = createEmptyUsage(copilotDynamicHeaders?.premiumRequests);
@@ -3318,6 +3325,7 @@ const streamAnthropicOnce = (
 						output.content.length = 0;
 						output.model = model.id;
 						output.responseId = undefined;
+						output.upstreamModel = undefined;
 						output.errorMessage = undefined;
 						output.inputTransformations = undefined;
 						output.providerPayload = undefined;
@@ -3351,6 +3359,7 @@ const streamAnthropicOnce = (
 						output.content.length = 0;
 						output.model = model.id;
 						output.responseId = undefined;
+						output.upstreamModel = undefined;
 						output.errorMessage = undefined;
 						output.providerPayload = undefined;
 						output.usage = createEmptyUsage(copilotDynamicHeaders?.premiumRequests);
@@ -3378,6 +3387,7 @@ const streamAnthropicOnce = (
 						output.content.length = 0;
 						output.model = model.id;
 						output.responseId = undefined;
+						output.upstreamModel = undefined;
 						output.errorMessage = undefined;
 						output.providerPayload = undefined;
 						output.usage = createEmptyUsage(copilotDynamicHeaders?.premiumRequests);

package/src/providers/openai-completions.ts

@@ -78,6 +78,7 @@ import {
 	rememberOpenAIReasoningEffortFallback,
 	resolveOpenAIReasoningEffortFallback,
 } from "./openai-reasoning-fallback";
+import { servedModelFromOpenRouterReasoning } from "./anthropic-signature";
 import { resolveCopilotRequestIdentity, wrapFetchForCopilotFallback } from "./github-copilot-headers";
 import {
 	applyChatCompletionsReasoningParams,
@@ -1379,6 +1380,7 @@ const streamOpenAICompletionsOnce = (
 					if (Array.isArray(reasoningDetails)) {
 						for (const detail of reasoningDetails) {
 							if (!detail || typeof detail !== "object") continue;
+							if (!output.upstreamModel) output.upstreamModel = servedModelFromOpenRouterReasoning(detail);
 							const detailObject = detail as { type?: unknown; id?: unknown; data?: unknown };
 							if (detailObject.type === "reasoning.encrypted" && detailObject.id && detailObject.data) {
 								const matchingToolCall = output.content.find(

package/src/providers/openai-shared.ts

@@ -97,6 +97,7 @@ import {
 	hasCopilotVisionInput,
 	resolveGitHubCopilotBaseUrl,
 } from "./github-copilot-headers";
+import { servedModelFromOpenRouterReasoning } from "./anthropic-signature";
 import type { ChatCompletionCreateParamsStreaming } from "./openai-chat-wire";
 import type { InputItem } from "./openai-codex/request-transformer";
 import type {
@@ -3250,6 +3251,7 @@ export async function processResponsesStream<TApi extends Api>(
 				if (reasoningBlock) {
 					reasoningBlock.thinking = finalizeReasoningThinking(item, reasoningBlock.thinking);
 					reasoningBlock.thinkingSignature = JSON.stringify(item);
+					if (!output.upstreamModel) output.upstreamModel = servedModelFromOpenRouterReasoning(item);
 					stream.push({
 						type: "thinking_end",
 						contentIndex: contentIndexOf(reasoningBlock),

package/src/registry/build.ts

@@ -62,6 +62,7 @@ export function buildProviderDefinition(
 		...transport,
 		...(envKeys !== undefined ? { envKeys } : {}),
 		...(policy.allowsMissingApiKey !== undefined ? { allowsMissingApiKey: policy.allowsMissingApiKey } : {}),
+		...(policy.nativeAuthApis !== undefined ? { nativeAuthApis: policy.nativeAuthApis } : {}),
 		...(policy.available !== undefined ? { available: policy.available } : {}),
 		...(policy.showInLoginList !== undefined ? { showInLoginList: policy.showInLoginList } : {}),
 		...(policy.storeAs !== undefined ? { storeCredentialsAs: policy.storeAs } : {}),

package/src/registry/types.ts

@@ -69,6 +69,8 @@ export interface ProviderDefinition {
 	readonly envKeys?: KeyResolver;
 	/** Provider transport can authenticate without a resolved API-key string. */
 	readonly allowsMissingApiKey?: boolean;
+	/** APIs whose provider transport resolves credentials without a stored account. */
+	readonly nativeAuthApis?: readonly string[];
 	/** Provider-owned model normalization that must run before API-specific option mapping. */
 	readonly prepareModel?: ProviderModelPreparer;
 	/** Provider-owned request shaping applied before generic API dispatch. */

package/src/stream.ts

@@ -13,7 +13,7 @@ import {
 	requireSupportedEffort,
 	resolveWireModelId,
 } from "@oh-my-pi/pi-catalog/model-thinking";
-import { CATALOG_PROVIDERS, type ProviderCatalogEntry } from "@oh-my-pi/pi-catalog/provider-models";
+import { providerEntries } from "@oh-my-pi/pi-catalog/compat/providers";
 import { CODEX_BASE_URL } from "@oh-my-pi/pi-catalog/wire/codex";
 import { $env, $pickenv, getProviderInFlightRoot, isEnoent, logger } from "@oh-my-pi/pi-utils";
 import { getCustomApi } from "./api-registry";
@@ -815,11 +815,12 @@ const LEGACY_ENV_KEYS: Record<string, KeyResolver> = {
 };
 
 /**
- * Env fallbacks derived from the catalog table — the single source for plain
- * provider env-var names. Registry defs override with computed resolvers
- * (Foundry/ADC/Bedrock probes); legacy non-provider keys merge last.
+ * Env fallbacks derived from the catalog provider entries (`env` in
+ * `providers/<id>.kdl`) — the single source for plain provider env-var names.
+ * Registry defs override with computed resolvers (Foundry/ADC/Bedrock
+ * probes); legacy non-provider keys merge last.
  */
-const CATALOG_ENTRY_ENV_KEYS = (CATALOG_PROVIDERS as readonly ProviderCatalogEntry[]).flatMap(provider => {
+const CATALOG_ENTRY_ENV_KEYS = Object.values(providerEntries()).flatMap(provider => {
 	const envVars = provider.envVars;
 	if (!envVars || envVars.length === 0) return [];
 	const resolver: KeyResolver = envVars.length === 1 ? envVars[0] : () => $pickenv(...envVars);

package/src/types.ts

@@ -1041,7 +1041,13 @@ export interface AssistantMessage {
 	 * providers that expose no such field.
 	 */
 	upstreamProvider?: string;
-	/** Provider-reported concrete model when a router selected one for this turn. */
+	/**
+	 * Concrete model that produced this turn when it is knowable independently
+	 * of the requested id: reported by a router that selected one, or recovered
+	 * from a signed thinking block (Anthropic signatures name the serving
+	 * model). Compared against `model` to notice a gateway serving something
+	 * other than what was requested.
+	 */
 	upstreamModel?: string;
 	usage: Usage;
 	stopReason: StopReason;

package/src/utils/http-inspector.ts

@@ -20,7 +20,16 @@ export type CapturedHttpErrorResponse = {
 	bodyJson?: unknown;
 };
 
-const SENSITIVE_HEADERS = ["authorization", "x-api-key", "api-key", "cookie", "set-cookie", "proxy-authorization"];
+/**
+ * Matches any header name whose value carries a credential, so a persisted dump
+ * never leaks one. A substring match — not a hand-maintained allow-list — so
+ * provider-specific auth headers (`x-goog-api-key`, `x-amz-security-token`, …)
+ * are redacted without enumerating every provider's spelling; the fixed list it
+ * replaced silently leaked any auth header it did not name. Redacting a benign
+ * header that happens to match is harmless: dumps exist to diagnose the request
+ * body, not its transport headers.
+ */
+const SENSITIVE_HEADER_PATTERN = /key|token|secret|auth|credential|cookie/i;
 
 /**
  * Build the JSON persisted for a rejected request. Request fields stay at the
@@ -167,7 +176,7 @@ function redactHeaders(headers: Record<string, string> | undefined): Record<stri
 
 	const redacted: Record<string, string> = {};
 	for (const [key, value] of Object.entries(headers)) {
-		if (SENSITIVE_HEADERS.includes(key.toLowerCase())) {
+		if (SENSITIVE_HEADER_PATTERN.test(key)) {
 			redacted[key] = "[redacted]";
 			continue;
 		}