ai-model-verifier 1.0.0

package/dist/detectors/token-truth.js

@@ -0,0 +1,145 @@
+/**
+ * Token-accounting checks for Anthropic endpoints.
+ *
+ * The signature check answers "is this really Claude". These answer a different
+ * question the signature cannot: "are the numbers you are billing me true".
+ * A relay can forward genuine Claude and still inflate `input_tokens` on every
+ * call, and nothing in an identity probe would notice.
+ *
+ * Ported from veridrop (AGPL-3.0) `token_usage.py` / `integrity.py`, whose
+ * tolerances were calibrated against the official API. Do not tighten them
+ * without re-measuring: the loose-looking bounds exist because real Anthropic
+ * responses sat near them.
+ */
+const SHORT_PROMPT = "Reply with exactly: ok";
+/** The long variant adds a fixed run of tokens; the delta is what we check. */
+const LONG_PROMPT = `${SHORT_PROMPT}\n\nReference text:${" apple".repeat(80)}`;
+const MAX_TOKENS = 16;
+/**
+ * Expected `input_tokens` growth between the short and long prompt.
+ *
+ * Two bands because Anthropic changed tokenizer: opus-4-7/4-8 encode that same
+ * text into materially more tokens. A relay claiming a new-tokenizer model
+ * while serving an older one lands in the wrong band, which makes this a tier
+ * check as well as a billing check.
+ */
+const DELTA_OLD = { min: 45, max: 140 };
+const DELTA_NEW = { min: 90, max: 230 };
+const NEW_TOKENIZER_MODELS = ["claude-opus-4-7", "claude-opus-4-8"];
+/** `count_tokens` should agree with the billed `input_tokens` this closely. */
+const countTolerance = (n) => Math.max(4, Math.round(n * 0.2));
+const normalize = (model) => model.toLowerCase().replace(/[._]/g, "-").split("/").pop() ?? "";
+export function expectedInputDelta(model) {
+    const m = normalize(model);
+    return NEW_TOKENIZER_MODELS.some((p) => m.startsWith(p))
+        ? DELTA_NEW
+        : DELTA_OLD;
+}
+/** Rejects booleans, which are `typeof "number"`-adjacent traps in JS. */
+function intOf(v) {
+    return typeof v === "number" && Number.isInteger(v) && v >= 0 ? v : null;
+}
+function usageOf(data) {
+    const u = data?.usage;
+    return { input: intOf(u?.input_tokens), output: intOf(u?.output_tokens) };
+}
+export async function checkTokenTruth(opts) {
+    const base = opts.baseUrl.replace(/\/+$/, "");
+    const headers = {
+        "Content-Type": "application/json",
+        "x-api-key": opts.apiKey,
+        "anthropic-version": "2023-06-01",
+    };
+    const ask = (prompt) => opts.transport({
+        mode: "direct",
+        url: `${base}/v1/messages`,
+        headers,
+        reqBody: {
+            model: opts.model,
+            max_tokens: MAX_TOKENS,
+            messages: [{ role: "user", content: prompt }],
+        },
+        timeoutMs: opts.timeoutMs,
+    });
+    const [shortRes, longRes] = await Promise.all([
+        ask(SHORT_PROMPT),
+        ask(LONG_PROMPT),
+    ]);
+    const noCounts = {
+        shortInputTokens: null,
+        longInputTokens: null,
+        countTokens: null,
+    };
+    if (shortRes.status === null || shortRes.status >= 400)
+        return {
+            ok: null,
+            checks: [],
+            ...noCounts,
+            reason: `probe-failed:${shortRes.status ?? "network"}`,
+        };
+    const s = usageOf(shortRes.data);
+    const l = usageOf(longRes.data);
+    const checks = [];
+    const usagePresent = s.input !== null && l.input !== null;
+    checks.push({
+        id: "usage-present",
+        pass: usagePresent,
+        detail: usagePresent
+            ? `short=${s.input}, long=${l.input}`
+            : "endpoint reported no usage counts",
+    });
+    // Without usage there is nothing to verify; a missing field is not fraud.
+    if (!usagePresent)
+        return { ok: null, checks, ...noCounts, reason: "no-usage-reported" };
+    const band = expectedInputDelta(opts.model);
+    const delta = l.input - s.input;
+    const deltaOk = delta >= band.min && delta <= band.max;
+    checks.push({
+        id: "input-delta",
+        pass: deltaOk,
+        detail: `delta=${delta}, expected ${band.min}-${band.max}`,
+    });
+    // Output above the cap we set means the count is invented, not merely padded.
+    const outputs = [s.output, l.output].filter((v) => v !== null);
+    const outputOk = outputs.every((v) => v > 0 && v <= MAX_TOKENS + 4);
+    checks.push({
+        id: "output-bounded",
+        pass: outputOk,
+        detail: `outputs=${outputs.join(",") || "none"} (cap ${MAX_TOKENS})`,
+    });
+    // The same upstream pricing the same request without generating: the
+    // strongest anti-inflation signal available, when the endpoint exposes it.
+    let counted = null;
+    const countRes = await opts.transport({
+        mode: "direct",
+        url: `${base}/v1/messages/count_tokens`,
+        headers,
+        reqBody: {
+            model: opts.model,
+            messages: [{ role: "user", content: SHORT_PROMPT }],
+        },
+        timeoutMs: opts.timeoutMs,
+    });
+    if (countRes.status !== null && countRes.status < 400) {
+        counted = intOf(countRes.data?.input_tokens);
+        if (counted !== null) {
+            const drift = Math.abs(counted - s.input);
+            const tol = countTolerance(s.input);
+            checks.push({
+                id: "count-tokens",
+                pass: drift <= tol,
+                detail: `count=${counted} vs billed=${s.input}, drift=${drift} (tolerance ${tol})`,
+            });
+        }
+    }
+    // A missing count_tokens endpoint is common on relays and proves nothing, so
+    // it is simply absent from the checks rather than counted as a failure.
+    return {
+        ok: checks.every((c) => c.pass),
+        checks,
+        shortInputTokens: s.input,
+        longInputTokens: l.input,
+        countTokens: counted,
+    };
+}
+//# sourceMappingURL=token-truth.js.map

package/dist/detectors/token-truth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-truth.js","sourceRoot":"","sources":["../../src/detectors/token-truth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,+EAA+E;AAC/E,MAAM,WAAW,GAAG,GAAG,YAAY,sBAAsB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACxC,MAAM,oBAAoB,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AAEpE,+EAA+E;AAC/E,MAAM,cAAc,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAkBvE,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;AAEnE,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAID,0EAA0E;AAC1E,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,SAAS,OAAO,CAAC,IAAa;IAC5B,MAAM,CAAC,GAAI,IAA0B,EAAE,KAAK,CAAC;IAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAMrC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,IAAI,CAAC,MAAM;QACxB,mBAAmB,EAAE,YAAY;KAClC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAC7B,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,GAAG,IAAI,cAAc;QAC1B,OAAO;QACP,OAAO,EAAE;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC9C;QACD,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEL,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,GAAG,CAAC,YAAY,CAAC;QACjB,GAAG,CAAC,WAAW,CAAC;KACjB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG;QACf,gBAAgB,EAAE,IAAI;QACtB,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,IAAI;KAClB,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QACpD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE;YACV,GAAG,QAAQ;YACX,MAAM,EAAE,gBAAgB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE;SACvD,CAAC;IAEJ,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,YAAY;YAClB,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,EAAE;YACrC,CAAC,CAAC,mCAAmC;KACxC,CAAC,CAAC;IACH,0EAA0E;IAC1E,IAAI,CAAC,YAAY;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAExE,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,KAAM,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACvD,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,SAAS,KAAK,cAAc,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;KAC3D,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,WAAW,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,SAAS,UAAU,GAAG;KACrE,CAAC,CAAC;IAEH,qEAAqE;IACrE,2EAA2E;IAC3E,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QACpC,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,GAAG,IAAI,2BAA2B;QACvC,OAAO;QACP,OAAO,EAAE;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;SACpD;QACD,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtD,OAAO,GAAG,KAAK,CAAE,QAAQ,CAAC,IAAmC,EAAE,YAAY,CAAC,CAAC;QAC7E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAM,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,KAAM,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,KAAK,IAAI,GAAG;gBAClB,MAAM,EAAE,SAAS,OAAO,cAAc,CAAC,CAAC,KAAK,WAAW,KAAK,eAAe,GAAG,GAAG;aACnF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,wEAAwE;IAExE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/B,MAAM;QACN,gBAAgB,EAAE,CAAC,CAAC,KAAK;QACzB,eAAe,EAAE,CAAC,CAAC,KAAK;QACxB,WAAW,EAAE,OAAO;KACrB,CAAC;AACJ,CAAC"}

package/dist/handshake.d.ts

@@ -0,0 +1,23 @@
+import { type TransportFn } from "./transport";
+import type { TransportMode, VerifyProvider } from "./types";
+export type HandshakeOutcome = {
+    ok: true;
+    resolvedProvider: VerifyProvider;
+    mode: TransportMode;
+    status: number;
+} | {
+    ok: false;
+    reason: "cors-needs-backend" | "unreachable" | "invalid-key" | "no-format";
+    status: number | null;
+    corsBlocked: boolean;
+};
+export declare function runHandshake(opts: {
+    provider: VerifyProvider;
+    baseUrl: string;
+    apiKey: string;
+    model: string;
+    mode: TransportMode;
+    timeoutMs: number;
+    transport?: TransportFn;
+}): Promise<HandshakeOutcome>;
+//# sourceMappingURL=handshake.d.ts.map

package/dist/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GACxB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,gBAAgB,EAAE,cAAc,CAAC;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACJ,oBAAoB,GAAG,aAAa,GAAG,aAAa,GAAG,WAAW,CAAC;IACrE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAwDN,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,WAAW,CAAC;CACzB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiD5B"}

package/dist/handshake.js

@@ -0,0 +1,90 @@
+import { PROVIDER_CONFIGS } from "./providers/config";
+import { probeTransport } from "./transport";
+import { isTransientError } from "./signals";
+const HANDSHAKE_PROMPT = "hi";
+const HANDSHAKE_MAX_TOKENS = 1;
+function classifyStatus(status) {
+    if (status >= 200 && status < 300)
+        return "ok";
+    if (status === 401 || status === 403)
+        return "auth";
+    if (isTransientError(`HTTP ${status}`))
+        return "transient";
+    if (status >= 400 && status < 500)
+        return "format";
+    return "transient";
+}
+async function tryFormat(args) {
+    const cfg = PROVIDER_CONFIGS[args.provider];
+    const built = cfg.buildRequest({
+        baseUrl: args.baseUrl,
+        apiKey: args.apiKey,
+        model: args.model,
+        prompt: HANDSHAKE_PROMPT,
+        maxTokens: HANDSHAKE_MAX_TOKENS,
+        direct: args.mode === "direct",
+    });
+    const res = await args.transport({
+        mode: args.mode,
+        url: built.url,
+        headers: built.headers,
+        reqBody: built.body,
+        timeoutMs: args.timeoutMs,
+    });
+    if (res.corsBlocked)
+        return { outcome: "cors", status: null, corsBlocked: true };
+    if (res.status === null)
+        return { outcome: "transient", status: null, corsBlocked: false };
+    return {
+        outcome: classifyStatus(res.status),
+        status: res.status,
+        corsBlocked: false,
+    };
+}
+export async function runHandshake(opts) {
+    const transport = opts.transport ?? probeTransport;
+    const order = opts.provider === "openai" ? ["openai"] : [opts.provider, "openai"];
+    let sawAuth = false;
+    let lastStatus = null;
+    for (const provider of order) {
+        const r = await tryFormat({ ...opts, provider, transport });
+        lastStatus = r.status;
+        if (r.outcome === "cors")
+            return {
+                ok: false,
+                reason: "cors-needs-backend",
+                status: null,
+                corsBlocked: true,
+            };
+        if (r.outcome === "ok")
+            return {
+                ok: true,
+                resolvedProvider: provider,
+                mode: opts.mode,
+                status: r.status,
+            };
+        if (r.outcome === "auth")
+            sawAuth = true;
+    }
+    if (sawAuth)
+        return {
+            ok: false,
+            reason: "invalid-key",
+            status: lastStatus,
+            corsBlocked: false,
+        };
+    if (lastStatus === null)
+        return {
+            ok: false,
+            reason: "unreachable",
+            status: null,
+            corsBlocked: false,
+        };
+    return {
+        ok: false,
+        reason: "no-format",
+        status: lastStatus,
+        corsBlocked: false,
+    };
+}
+//# sourceMappingURL=handshake.js.map

package/dist/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAoB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAkB7C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,SAAS,cAAc,CACrB,MAAc;IAEd,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,gBAAgB,CAAC,QAAQ,MAAM,EAAE,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAQxB;IAKC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,oBAAoB;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ;KAC/B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,WAAW;QACjB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QACrB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACpE,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAQlC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC;IACnD,MAAM,KAAK,GACT,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEtE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;QAEtB,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;YACpB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,gBAAgB,EAAE,QAAQ;gBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,CAAC,CAAC,MAAO;aAClB,CAAC;QACJ,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,GAAG,IAAI,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO;QACT,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,IAAI,UAAU,KAAK,IAAI;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC"}

package/dist/highlight.d.ts

@@ -0,0 +1,8 @@
+import type { VerifyProvider } from "./types";
+export type HighlightKind = "foreign" | "cjk" | "coding-tool" | "scam" | "home" | null;
+export type HighlightSegment = {
+    text: string;
+    kind: HighlightKind;
+};
+export declare function highlightSpans(text: string, providerKind: VerifyProvider, probeLabel: string): HighlightSegment[];
+//# sourceMappingURL=highlight.d.ts.map

package/dist/highlight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"highlight.d.ts","sourceRoot":"","sources":["../src/highlight.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,MAAM,MAAM,aAAa,GACvB,SAAS,GAAG,KAAK,GAAG,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE7D,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAoBrE,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,cAAc,EAC5B,UAAU,EAAE,MAAM,GACjB,gBAAgB,EAAE,CA6CpB"}

package/dist/highlight.js

@@ -0,0 +1,63 @@
+import { CJK_CHAR, CODING_TOOL_NAMES, CODING_TOOL_REFUSAL_PATTERNS, SCAM_PAGE_PATTERNS, } from "./patterns";
+import { PROVIDER_CONFIGS } from "./providers/config";
+function collectPhrase(lower, phrases, kind) {
+    const out = [];
+    for (const phrase of phrases) {
+        if (!phrase)
+            continue;
+        const needle = phrase.toLowerCase();
+        let from = 0;
+        for (;;) {
+            const idx = lower.indexOf(needle, from);
+            if (idx === -1)
+                break;
+            out.push({ start: idx, end: idx + needle.length, kind });
+            from = idx + needle.length;
+        }
+    }
+    return out;
+}
+export function highlightSpans(text, providerKind, probeLabel) {
+    if (!text)
+        return [];
+    const cfg = PROVIDER_CONFIGS[providerKind];
+    if (!cfg)
+        return [{ text, kind: null }];
+    const lower = text.toLowerCase();
+    const matches = [
+        ...collectPhrase(lower, CODING_TOOL_NAMES, "coding-tool"),
+        ...collectPhrase(lower, CODING_TOOL_REFUSAL_PATTERNS, "coding-tool"),
+        ...collectPhrase(lower, SCAM_PAGE_PATTERNS, "scam"),
+        ...collectPhrase(lower, cfg.foreignIdentityPatterns, "foreign"),
+        ...collectPhrase(lower, cfg.homeIdentityPatterns, "home"),
+        ...collectPhrase(lower, cfg.homeModelNamePatterns, "home"),
+    ];
+    if (probeLabel === "model-name")
+        matches.push(...collectPhrase(lower, cfg.cloudModelNamePatterns, "foreign"));
+    for (const m of text.matchAll(CJK_CHAR))
+        if (m.index !== undefined)
+            matches.push({ start: m.index, end: m.index + m[0].length, kind: "cjk" });
+    if (matches.length === 0)
+        return [{ text, kind: null }];
+    matches.sort((a, b) => a.start - b.start || b.end - a.end);
+    const merged = [];
+    let cursor = 0;
+    for (const m of matches) {
+        if (m.start < cursor)
+            continue;
+        merged.push(m);
+        cursor = m.end;
+    }
+    const segments = [];
+    let pos = 0;
+    for (const m of merged) {
+        if (m.start > pos)
+            segments.push({ text: text.slice(pos, m.start), kind: null });
+        segments.push({ text: text.slice(m.start, m.end), kind: m.kind });
+        pos = m.end;
+    }
+    if (pos < text.length)
+        segments.push({ text: text.slice(pos), kind: null });
+    return segments;
+}
+//# sourceMappingURL=highlight.js.map

package/dist/highlight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"highlight.js","sourceRoot":"","sources":["../src/highlight.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAUtD,SAAS,aAAa,CAAC,KAAa,EAAE,OAAiB,EAAE,IAAmB;IAC1E,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,MAAM;YACtB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,YAA4B,EAC5B,UAAkB;IAElB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAY;QACvB,GAAG,aAAa,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC;QACzD,GAAG,aAAa,CAAC,KAAK,EAAE,4BAA4B,EAAE,aAAa,CAAC;QACpE,GAAG,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC;QACnD,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,uBAAuB,EAAE,SAAS,CAAC;QAC/D,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACzD,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC;KAC3D,CAAC;IAEF,IAAI,UAAU,KAAK,YAAY;QAC7B,OAAO,CAAC,IAAI,CACV,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAC/D,CAAC;IAEJ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YACvB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAExD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM;YAAE,SAAS;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IACd,CAAC;IACD,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./types";
+export * from "./rules";
+export { runVerification } from "./runner";
+export { normalizeProbeBaseUrl } from "./providers/config";
+export type { ProviderConfig, ProbeRequestArgs, BuiltRequest, ProbeMeta, } from "./providers/config";
+export type { TransportFn, TransportArgs, TransportResult } from "./transport";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+// Root export: types, the runner and the rule registry. Providers and detectors
+// have their own entry points so a consumer only bundles what it enables.
+export * from "./types";
+export * from "./rules";
+export { runVerification } from "./runner";
+export { normalizeProbeBaseUrl } from "./providers/config";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/internal/utils.d.ts

@@ -0,0 +1,6 @@
+export declare function isRecord(v: unknown): v is Record<string, unknown>;
+export declare function rec(v: unknown): Record<string, unknown> | undefined;
+export declare function isOneOf<const T extends readonly unknown[]>(values: T): (v: unknown) => v is T[number];
+export declare function errMessage(err: unknown): string;
+export declare function sleep(ms: number): Promise<void>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/internal/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/internal/utils.ts"],"names":[],"mappings":"AAIA,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjE;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAEnE;AAED,wBAAgB,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,SAAS,OAAO,EAAE,EACxD,MAAM,EAAE,CAAC,GACR,CAAC,CAAC,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAEhC;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/internal/utils.js

@@ -0,0 +1,19 @@
+// Vendored from unorouter's src/lib/utils/base.ts so the package stays
+// dependency-free. Four helpers, copied verbatim; keep them in step if the
+// originals change.
+export function isRecord(v) {
+    return !!v && typeof v === "object" && !Array.isArray(v);
+}
+export function rec(v) {
+    return isRecord(v) ? v : undefined;
+}
+export function isOneOf(values) {
+    return (v) => values.some((x) => x === v);
+}
+export function errMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+export function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=utils.js.map

package/dist/internal/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/internal/utils.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,2EAA2E;AAC3E,oBAAoB;AAEpB,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAU;IAC5B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,MAAS;IAET,OAAO,CAAC,CAAC,EAAkB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/models.d.ts

@@ -0,0 +1,5 @@
+import type { VerifyProvider } from "./types";
+export declare const CURATED_MODELS: Record<VerifyProvider, readonly string[]>;
+export declare function vendorForRow(provider: VerifyProvider, model?: string): string;
+export declare function providerForModel(model: string): VerifyProvider | null;
+//# sourceMappingURL=models.d.ts.map

package/dist/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAU9C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAUpE,CAAC;AAgBF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAG7E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAerE"}

package/dist/models.js

@@ -0,0 +1,54 @@
+import { isOneOf } from "./internal/utils";
+const VERIFY_PROVIDERS = [
+    "anthropic",
+    "openai",
+    "gemini",
+];
+const isVerifyProvider = isOneOf(VERIFY_PROVIDERS);
+export const CURATED_MODELS = {
+    anthropic: [
+        "claude-opus-4-6",
+        "claude-opus-4-7",
+        "claude-opus-4-8",
+        "claude-sonnet-4-6",
+        "claude-haiku-4-5",
+    ],
+    openai: ["gpt-5.5", "gpt-5.4", "gpt-5.1", "o3", "o4-mini"],
+    gemini: ["gemini-3.1-pro-preview", "gemini-3.1-flash", "gemini-2.5-pro"],
+};
+const MODEL_TO_PROVIDER = {};
+for (const provider of Object.keys(CURATED_MODELS)) {
+    if (!isVerifyProvider(provider))
+        continue;
+    for (const model of CURATED_MODELS[provider]) {
+        MODEL_TO_PROVIDER[model] = provider;
+    }
+}
+const PROVIDER_VENDOR = {
+    anthropic: "anthropic",
+    openai: "openai",
+    gemini: "google",
+};
+export function vendorForRow(provider, model) {
+    const inferred = model ? providerForModel(model) : null;
+    return PROVIDER_VENDOR[inferred ?? provider];
+}
+export function providerForModel(model) {
+    const id = model.trim().toLowerCase();
+    if (!id)
+        return null;
+    if (MODEL_TO_PROVIDER[id])
+        return MODEL_TO_PROVIDER[id];
+    if (id.includes("claude"))
+        return "anthropic";
+    if (id.includes("gemini"))
+        return "gemini";
+    if (id.startsWith("gpt-") ||
+        id.startsWith("o1") ||
+        id.startsWith("o3") ||
+        id.startsWith("o4") ||
+        id.startsWith("chatgpt"))
+        return "openai";
+    return null;
+}
+//# sourceMappingURL=models.js.map

package/dist/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG3C,MAAM,gBAAgB,GAA8B;IAClD,WAAW;IACX,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAA8C;IACvE,SAAS,EAAE;QACT,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,mBAAmB;QACnB,kBAAkB;KACnB;IACD,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC;IAC1D,MAAM,EAAE,CAAC,wBAAwB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;CACzE,CAAC;AAEF,MAAM,iBAAiB,GAAmC,EAAE,CAAC;AAC7D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;IACnD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,SAAS;IAC1C,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,iBAAiB,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAmC;IACtD,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,QAAwB,EAAE,KAAc;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,OAAO,eAAe,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAAE,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,IACE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QACrB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAExB,OAAO,QAAQ,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/nonce.d.ts

@@ -0,0 +1,4 @@
+export declare function makeNonce(): string;
+export declare function nonceTag(nonce: string): string;
+export declare function echoesNonce(text: string, nonce: string): boolean;
+//# sourceMappingURL=nonce.d.ts.map

package/dist/nonce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.d.ts","sourceRoot":"","sources":["../src/nonce.ts"],"names":[],"mappings":"AAAA,wBAAgB,SAAS,IAAI,MAAM,CAIlC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhE"}

package/dist/nonce.js

@@ -0,0 +1,12 @@
+export function makeNonce() {
+    const bytes = new Uint8Array(4);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+export function nonceTag(nonce) {
+    return `Begin your reply with the tag [${nonce}] then a space, then your answer.`;
+}
+export function echoesNonce(text, nonce) {
+    return text.includes(nonce.toLowerCase());
+}
+//# sourceMappingURL=nonce.js.map

package/dist/nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.js","sourceRoot":"","sources":["../src/nonce.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS;IACvB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,kCAAkC,KAAK,mCAAmC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/patterns.d.ts

@@ -0,0 +1,16 @@
+export declare const CODING_TOOL_REFUSAL_PATTERNS: string[];
+export declare const CODING_TOOL_NAMES: string[];
+export declare const SCAM_PAGE_PATTERNS: string[];
+export declare const VENDOR_PATTERNS: {
+    readonly anthropic: readonly ["anthropic", "claude"];
+    readonly openai: readonly ["openai", "chatgpt", "gpt-3", "gpt-4", "gpt-5", "o1-", "o3-", "o4-"];
+    readonly google: readonly ["google", "deepmind", "gemini"];
+    readonly other: readonly ["deepseek", "qwen", "moonshot", "kimi", "mistral", "llama", "meta", "grok", "xai", "zhipu"];
+};
+export type VendorKey = keyof typeof VENDOR_PATTERNS;
+export declare function foreignPatternsExcept(home: VendorKey): string[];
+export declare const CLOUD_HOST_PATTERNS: string[];
+export declare const FAKE_RESPONSE_SIGNATURES: string[];
+export declare const CJK_CHAR: RegExp;
+export declare const CJK_LEAK_MIN_CHARS = 4;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,UA2BxC,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAAiC,CAAC;AAEhE,eAAO,MAAM,kBAAkB,UAM9B,CAAC;AAEF,eAAO,MAAM,eAAe;aAC1B,SAAS,YAAG,WAAW,EAAE,QAAQ;aACjC,MAAM,YAAG,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;aAC5E,MAAM,YAAG,QAAQ,EAAE,UAAU,EAAE,QAAQ;aACvC,KAAK,YACH,UAAU,EACV,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO;CAED,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,eAAe,CAAC;AAErD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,EAAE,CAK/D;AAGD,eAAO,MAAM,mBAAmB,UAA6E,CAAC;AAE9G,eAAO,MAAM,wBAAwB,UAA0B,CAAC;AAEhE,eAAO,MAAM,QAAQ,QAAuB,CAAC;AAE7C,eAAO,MAAM,kBAAkB,IAAI,CAAC"}

package/dist/patterns.js

@@ -0,0 +1,63 @@
+export const CODING_TOOL_REFUSAL_PATTERNS = [
+    "assist with development",
+    "here to assist with development tasks",
+    "sensitive, personal, or emotional",
+    "i'm here to help with coding",
+    "i'm here to help with development",
+    "i'm designed to help with development",
+    "let me help you with your code",
+    "i'm a coding assistant",
+    "development tasks, writing, analysis",
+    "infrastructure and configuration",
+    "falls outside what i can help with",
+    "i'm focused on software development",
+    "focused on software development and coding",
+    "best suited for software development",
+    "i'm built to help with software development",
+    "i'm built to help with coding",
+    "help with software development, coding",
+    "what can i help you build",
+    "got a tricky bug",
+    "got a coding challenge",
+    "got any code challenges",
+    "i'm here to help with software",
+    "i'm here for coding",
+    "i'm droid",
+    "development workflows, cli commands",
+    "here to help with coding, development workflows",
+];
+export const CODING_TOOL_NAMES = ["kiro", "cascade", "codeium"];
+export const SCAM_PAGE_PATTERNS = [
+    "token被盗",
+    "token被人盗刷",
+    "本站token",
+    "盗取token",
+    "微信jemes",
+];
+export const VENDOR_PATTERNS = {
+    anthropic: ["anthropic", "claude"],
+    openai: ["openai", "chatgpt", "gpt-3", "gpt-4", "gpt-5", "o1-", "o3-", "o4-"],
+    google: ["google", "deepmind", "gemini"],
+    other: [
+        "deepseek",
+        "qwen",
+        "moonshot",
+        "kimi",
+        "mistral",
+        "llama",
+        "meta",
+        "grok",
+        "xai",
+        "zhipu",
+    ],
+};
+export function foreignPatternsExcept(home) {
+    const keys = Object.keys(VENDOR_PATTERNS).filter((k) => k in VENDOR_PATTERNS);
+    return keys.filter((k) => k !== home).flatMap((k) => [...VENDOR_PATTERNS[k]]);
+}
+// prettier-ignore
+export const CLOUD_HOST_PATTERNS = ["amazon", "aws", "bedrock", "google", "vertex", "microsoft", "azure", "foundry"];
+export const FAKE_RESPONSE_SIGNATURES = ["claude sonnet (4.0)"];
+export const CJK_CHAR = /[぀-ヿ㐀-䶿一-鿿豈-﫿가-힯]/g;
+export const CJK_LEAK_MIN_CHARS = 4;
+//# sourceMappingURL=patterns.js.map

package/dist/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../src/patterns.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,yBAAyB;IACzB,uCAAuC;IACvC,mCAAmC;IACnC,8BAA8B;IAC9B,mCAAmC;IACnC,uCAAuC;IACvC,gCAAgC;IAChC,wBAAwB;IACxB,sCAAsC;IACtC,kCAAkC;IAClC,oCAAoC;IACpC,qCAAqC;IACrC,4CAA4C;IAC5C,sCAAsC;IACtC,6CAA6C;IAC7C,+BAA+B;IAC/B,wCAAwC;IACxC,2BAA2B;IAC3B,kBAAkB;IAClB,wBAAwB;IACxB,yBAAyB;IACzB,gCAAgC;IAChC,qBAAqB;IACrB,WAAW;IACX,qCAAqC;IACrC,iDAAiD;CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS;IACT,WAAW;IACX,SAAS;IACT,SAAS;IACT,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;IAClC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC7E,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC;IACxC,KAAK,EAAE;QACL,UAAU;QACV,MAAM;QACN,UAAU;QACV,MAAM;QACN,SAAS;QACT,OAAO;QACP,MAAM;QACN,MAAM;QACN,KAAK;QACL,OAAO;KACR;CACO,CAAC;AAIX,MAAM,UAAU,qBAAqB,CAAC,IAAe;IACnD,MAAM,IAAI,GAAgB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAC3D,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,IAAI,eAAe,CAC5C,CAAC;IACF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,kBAAkB;AAClB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,OAAO,EAAC,SAAS,CAAC,CAAC;AAE9G,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC"}

package/dist/probes.d.ts

@@ -0,0 +1,10 @@
+import type { ProviderConfig } from "./providers/config";
+import type { ProbeLabel } from "./types";
+export type ProbeDef = {
+    label: ProbeLabel;
+    maxTokens: number;
+    buildPrompt: (nonce: string) => string;
+    evaluate: (text: string, cfg: ProviderConfig) => boolean;
+};
+export declare const PROBES: readonly ProbeDef[];
+//# sourceMappingURL=probes.d.ts.map

package/dist/probes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../src/probes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAUzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC;CAC1D,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,SAAS,QAAQ,EAkErC,CAAC"}