ai-model-verifier 1.0.0

package/dist/probes.js

@@ -0,0 +1,54 @@
+import { cjkLeak, hasCodingToolRefusal, hasForeignIdentity, hasScamPage, includesAny, } from "./signals";
+import { CLOUD_HOST_PATTERNS, FAKE_RESPONSE_SIGNATURES } from "./patterns";
+import { nonceTag } from "./nonce";
+export const PROBES = [
+    {
+        label: "emotional",
+        maxTokens: 200,
+        buildPrompt: (n) => `Tell me a 2-sentence sad story about a lost kitten. ${nonceTag(n)}`,
+        evaluate: (text) => !hasCodingToolRefusal(text) && !cjkLeak(text) && text.length >= 40,
+    },
+    {
+        label: "creative",
+        maxTokens: 120,
+        buildPrompt: (n) => `Write a haiku about the ocean at sunrise. ${nonceTag(n)}`,
+        evaluate: (text) => !hasCodingToolRefusal(text) && !cjkLeak(text) && text.length >= 25,
+    },
+    {
+        label: "identity",
+        maxTokens: 60,
+        buildPrompt: (n) => "Which AI lab developed and trained the model you are running on? " +
+            "Not the company hosting you, the lab that trained the model. " +
+            `One word answer. ${nonceTag(n)}`,
+        evaluate: (text, cfg) => {
+            if (hasCodingToolRefusal(text) || hasScamPage(text))
+                return false;
+            if (hasForeignIdentity(text, cfg.foreignIdentityPatterns, cfg.cloudModelNamePatterns, "identity"))
+                return false;
+            if (includesAny(text, cfg.homeIdentityPatterns))
+                return true;
+            if (cfg.acceptsCloudHostIdentity &&
+                includesAny(text, CLOUD_HOST_PATTERNS))
+                return true;
+            return false;
+        },
+    },
+    {
+        label: "model-name",
+        maxTokens: 80,
+        buildPrompt: (n) => `Which model are you? Reply with only your model name. ${nonceTag(n)}`,
+        evaluate: (text, cfg) => {
+            if (hasCodingToolRefusal(text) || hasScamPage(text))
+                return false;
+            if (hasForeignIdentity(text, cfg.foreignIdentityPatterns, cfg.cloudModelNamePatterns, "model-name"))
+                return false;
+            if (!includesAny(text, cfg.homeModelNamePatterns))
+                return false;
+            const stripped = text.replace(/^\s*\[[a-z0-9]{4,8}\]\s*/i, "").trim();
+            if (FAKE_RESPONSE_SIGNATURES.includes(stripped))
+                return false;
+            return true;
+        },
+    },
+];
+//# sourceMappingURL=probes.js.map

package/dist/probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.js","sourceRoot":"","sources":["../src/probes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,OAAO,EACP,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAUnC,MAAM,CAAC,MAAM,MAAM,GAAwB;IACzC;QACE,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,uDAAuD,QAAQ,CAAC,CAAC,CAAC,EAAE;QACtE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;KACrE;IACD;QACE,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,6CAA6C,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC5D,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;KACrE;IACD;QACE,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,mEAAmE;YACnE,+DAA+D;YAC/D,oBAAoB,QAAQ,CAAC,CAAC,CAAC,EAAE;QACnC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACtB,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClE,IACE,kBAAkB,CAChB,IAAI,EACJ,GAAG,CAAC,uBAAuB,EAC3B,GAAG,CAAC,sBAAsB,EAC1B,UAAU,CACX;gBAED,OAAO,KAAK,CAAC;YACf,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,oBAAoB,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7D,IACE,GAAG,CAAC,wBAAwB;gBAC5B,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC;gBAEtC,OAAO,IAAI,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;KACF;IACD;QACE,KAAK,EAAE,YAAY;QACnB,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,yDAAyD,QAAQ,CAAC,CAAC,CAAC,EAAE;QACxE,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACtB,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClE,IACE,kBAAkB,CAChB,IAAI,EACJ,GAAG,CAAC,uBAAuB,EAC3B,GAAG,CAAC,sBAAsB,EAC1B,YAAY,CACb;gBAED,OAAO,KAAK,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,qBAAqB,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtE,IAAI,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;KACF;CACF,CAAC"}

package/dist/providers/anthropic.d.ts

@@ -0,0 +1,3 @@
+import { type ProviderConfig } from "./config";
+export declare const anthropicConfig: ProviderConfig;
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/providers/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAgElB,eAAO,MAAM,eAAe,EAAE,cAa7B,CAAC"}

package/dist/providers/anthropic.js

@@ -0,0 +1,70 @@
+import { rec } from "../internal/utils";
+import { foreignPatternsExcept } from "../patterns";
+import { normalizeProbeBaseUrl, } from "./config";
+function isAnthropicHost(baseUrl) {
+    try {
+        return new URL(baseUrl).host.endsWith("api.anthropic.com");
+    }
+    catch {
+        return false;
+    }
+}
+function buildRequest(args) {
+    const headers = {
+        "content-type": "application/json",
+        "x-api-key": args.apiKey,
+        "anthropic-version": "2023-06-01",
+    };
+    if (args.direct && isAnthropicHost(args.baseUrl))
+        headers["anthropic-dangerous-direct-browser-access"] = "true";
+    return {
+        url: `${normalizeProbeBaseUrl(args.baseUrl)}/v1/messages`,
+        headers,
+        body: {
+            model: args.model,
+            max_tokens: args.maxTokens,
+            messages: [{ role: "user", content: args.prompt }],
+        },
+    };
+}
+function extractText(data) {
+    const d = rec(data) ?? {};
+    if (d.type === "error")
+        return null;
+    return (d.content ?? [])
+        .filter((b) => b.type === "text")
+        .map((b) => b.text ?? "")
+        .join(" ")
+        .toLowerCase();
+}
+function extractMeta(data) {
+    const d = rec(data) ?? {};
+    const u = d.usage;
+    const prompt = u?.input_tokens ?? null;
+    const completion = u?.output_tokens ?? null;
+    return {
+        detectedModel: d.model ?? null,
+        usage: u
+            ? {
+                prompt,
+                completion,
+                total: prompt !== null && completion !== null ? prompt + completion : null,
+            }
+            : null,
+    };
+}
+export const anthropicConfig = {
+    provider: "anthropic",
+    buildRequest,
+    extractText,
+    extractMeta,
+    homeIdentityPatterns: ["anthropic"],
+    foreignIdentityPatterns: foreignPatternsExcept("anthropic"),
+    homeModelNamePatterns: ["claude", "anthropic"],
+    cloudModelNamePatterns: ["amazon q", "q developer", "kiro"],
+    // `fable` is load-bearing: sync catches fable lanes served as sonnet, and a
+    // tier list missing it makes that substitution undetectable here.
+    tiers: ["opus", "sonnet", "haiku", "fable"],
+    acceptsCloudHostIdentity: true,
+};
+//# sourceMappingURL=anthropic.js.map

package/dist/providers/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,qBAAqB,GAItB,MAAM,UAAU,CAAC;AASlB,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAsB;IAC1C,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,IAAI,CAAC,MAAM;QACxB,mBAAmB,EAAE,YAAY;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,2CAA2C,CAAC,GAAG,MAAM,CAAC;IAChE,OAAO;QACL,GAAG,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc;QACzD,OAAO;QACP,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAsB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC;SACT,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAsB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;IAC5C,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;QAC9B,KAAK,EAAE,CAAC;YACN,CAAC,CAAC;gBACE,MAAM;gBACN,UAAU;gBACV,KAAK,EACH,MAAM,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI;aACtE;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,QAAQ,EAAE,WAAW;IACrB,YAAY;IACZ,WAAW;IACX,WAAW;IACX,oBAAoB,EAAE,CAAC,WAAW,CAAC;IACnC,uBAAuB,EAAE,qBAAqB,CAAC,WAAW,CAAC;IAC3D,qBAAqB,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC9C,sBAAsB,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC;IAC3D,4EAA4E;IAC5E,kEAAkE;IAClE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;IAC3C,wBAAwB,EAAE,IAAI;CAC/B,CAAC"}

package/dist/providers/config.d.ts

@@ -0,0 +1,34 @@
+import type { ProbeUsage, VerifyProvider } from "../types";
+export type ProbeMeta = {
+    detectedModel: string | null;
+    usage: ProbeUsage | null;
+};
+export type ProbeRequestArgs = {
+    baseUrl: string;
+    apiKey: string;
+    model: string;
+    prompt: string;
+    maxTokens: number;
+    direct: boolean;
+};
+export type BuiltRequest = {
+    url: string;
+    headers: Record<string, string>;
+    body: unknown;
+};
+/** Providers append their own version segment, so a pasted one would double it. */
+export declare function normalizeProbeBaseUrl(baseUrl: string): string;
+export type ProviderConfig = {
+    provider: VerifyProvider;
+    buildRequest: (args: ProbeRequestArgs) => BuiltRequest;
+    extractText: (data: unknown) => string | null;
+    extractMeta: (data: unknown) => ProbeMeta;
+    homeIdentityPatterns: string[];
+    foreignIdentityPatterns: string[];
+    homeModelNamePatterns: string[];
+    cloudModelNamePatterns: string[];
+    tiers: readonly string[] | null;
+    acceptsCloudHostIdentity: boolean;
+};
+export declare const PROVIDER_CONFIGS: Record<VerifyProvider, ProviderConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/providers/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/providers/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAK3D,MAAM,MAAM,SAAS,GAAG;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAIF,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,YAAY,CAAC;IACvD,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9C,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC;IAC1C,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,wBAAwB,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,CAInE,CAAC"}

package/dist/providers/config.js

@@ -0,0 +1,14 @@
+import { anthropicConfig } from "./anthropic";
+import { geminiConfig } from "./gemini";
+import { openaiConfig } from "./openai";
+const VERSION_SUFFIX = /\/(?:v\d+(?:alpha|beta)?)\/*$/i;
+/** Providers append their own version segment, so a pasted one would double it. */
+export function normalizeProbeBaseUrl(baseUrl) {
+    return baseUrl.trim().replace(/\/+$/, "").replace(VERSION_SUFFIX, "");
+}
+export const PROVIDER_CONFIGS = {
+    anthropic: anthropicConfig,
+    openai: openaiConfig,
+    gemini: geminiConfig,
+};
+//# sourceMappingURL=config.js.map

package/dist/providers/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/providers/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAsBxC,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAExD,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAeD,MAAM,CAAC,MAAM,gBAAgB,GAA2C;IACtE,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;CACrB,CAAC"}

package/dist/providers/gemini.d.ts

@@ -0,0 +1,3 @@
+import { type ProviderConfig } from "./config";
+export declare const geminiConfig: ProviderConfig;
+//# sourceMappingURL=gemini.d.ts.map

package/dist/providers/gemini.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.d.ts","sourceRoot":"","sources":["../../src/providers/gemini.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAyDlB,eAAO,MAAM,YAAY,EAAE,cAW1B,CAAC"}

package/dist/providers/gemini.js

@@ -0,0 +1,58 @@
+import { rec } from "../internal/utils";
+import { foreignPatternsExcept } from "../patterns";
+import { normalizeProbeBaseUrl, } from "./config";
+const GEMINI_MIN_OUTPUT_TOKENS = 1024;
+function buildRequest(args) {
+    return {
+        url: `${normalizeProbeBaseUrl(args.baseUrl)}/v1beta/models/${args.model}:generateContent`,
+        headers: {
+            "content-type": "application/json",
+            "x-goog-api-key": args.apiKey,
+        },
+        body: {
+            contents: [{ role: "user", parts: [{ text: args.prompt }] }],
+            generationConfig: {
+                maxOutputTokens: Math.max(args.maxTokens, GEMINI_MIN_OUTPUT_TOKENS),
+            },
+        },
+    };
+}
+function extractText(data) {
+    const d = rec(data) ?? {};
+    if (d.error)
+        return null;
+    const parts = d.candidates?.[0]?.content?.parts;
+    if (!parts)
+        return null;
+    return parts
+        .map((p) => p.text ?? "")
+        .join(" ")
+        .toLowerCase();
+}
+function extractMeta(data) {
+    const d = rec(data) ?? {};
+    const u = d.usageMetadata;
+    return {
+        detectedModel: d.modelVersion ?? null,
+        usage: u
+            ? {
+                prompt: u.promptTokenCount ?? null,
+                completion: u.candidatesTokenCount ?? null,
+                total: u.totalTokenCount ?? null,
+            }
+            : null,
+    };
+}
+export const geminiConfig = {
+    provider: "gemini",
+    buildRequest,
+    extractText,
+    extractMeta,
+    homeIdentityPatterns: ["google", "deepmind"],
+    foreignIdentityPatterns: foreignPatternsExcept("google"),
+    homeModelNamePatterns: ["gemini", "google"],
+    cloudModelNamePatterns: [],
+    tiers: null,
+    acceptsCloudHostIdentity: false,
+};
+//# sourceMappingURL=gemini.js.map

package/dist/providers/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../src/providers/gemini.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,qBAAqB,GAItB,MAAM,UAAU,CAAC;AAalB,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC,SAAS,YAAY,CAAC,IAAsB;IAC1C,OAAO;QACL,GAAG,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,KAAK,kBAAkB;QACzF,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,IAAI,CAAC,MAAM;SAC9B;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC5D,gBAAgB,EAAE;gBAChB,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC;aACpE;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAmB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC;SACT,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAmB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;IAC1B,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;QACrC,KAAK,EAAE,CAAC;YACN,CAAC,CAAC;gBACE,MAAM,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;gBAClC,UAAU,EAAE,CAAC,CAAC,oBAAoB,IAAI,IAAI;gBAC1C,KAAK,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;aACjC;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,QAAQ,EAAE,QAAQ;IAClB,YAAY;IACZ,WAAW;IACX,WAAW;IACX,oBAAoB,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC5C,uBAAuB,EAAE,qBAAqB,CAAC,QAAQ,CAAC;IACxD,qBAAqB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC3C,sBAAsB,EAAE,EAAE;IAC1B,KAAK,EAAE,IAAI;IACX,wBAAwB,EAAE,KAAK;CAChC,CAAC"}

package/dist/providers/openai.d.ts

@@ -0,0 +1,3 @@
+import { type ProviderConfig } from "./config";
+export declare const openaiConfig: ProviderConfig;
+//# sourceMappingURL=openai.d.ts.map

package/dist/providers/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/providers/openai.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAwDlB,eAAO,MAAM,YAAY,EAAE,cAW1B,CAAC"}

package/dist/providers/openai.js

@@ -0,0 +1,56 @@
+import { rec } from "../internal/utils";
+import { foreignPatternsExcept } from "../patterns";
+import { normalizeProbeBaseUrl, } from "./config";
+const REASONING_MIN_OUTPUT_TOKENS = 2000;
+const REASONING_MODEL = /^(?:o[1-9]|gpt-5)/i;
+function buildRequest(args) {
+    const maxCompletionTokens = REASONING_MODEL.test(args.model)
+        ? Math.max(args.maxTokens, REASONING_MIN_OUTPUT_TOKENS)
+        : args.maxTokens;
+    return {
+        url: `${normalizeProbeBaseUrl(args.baseUrl)}/v1/chat/completions`,
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${args.apiKey}`,
+        },
+        body: {
+            model: args.model,
+            max_completion_tokens: maxCompletionTokens,
+            messages: [{ role: "user", content: args.prompt }],
+        },
+    };
+}
+function extractText(data) {
+    const d = rec(data) ?? {};
+    if (d.error)
+        return null;
+    const content = d.choices?.[0]?.message?.content;
+    return typeof content === "string" ? content.toLowerCase() : null;
+}
+function extractMeta(data) {
+    const d = rec(data) ?? {};
+    const u = d.usage;
+    return {
+        detectedModel: d.model ?? null,
+        usage: u
+            ? {
+                prompt: u.prompt_tokens ?? null,
+                completion: u.completion_tokens ?? null,
+                total: u.total_tokens ?? null,
+            }
+            : null,
+    };
+}
+export const openaiConfig = {
+    provider: "openai",
+    buildRequest,
+    extractText,
+    extractMeta,
+    homeIdentityPatterns: ["openai"],
+    foreignIdentityPatterns: foreignPatternsExcept("openai"),
+    homeModelNamePatterns: ["gpt", "openai", "o1", "o3", "o4"],
+    cloudModelNamePatterns: [],
+    tiers: null,
+    acceptsCloudHostIdentity: false,
+};
+//# sourceMappingURL=openai.js.map

package/dist/providers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../src/providers/openai.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,qBAAqB,GAItB,MAAM,UAAU,CAAC;AAalB,MAAM,2BAA2B,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,SAAS,YAAY,CAAC,IAAsB;IAC1C,MAAM,mBAAmB,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,2BAA2B,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IACnB,OAAO;QACL,GAAG,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB;QACjE,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;SACvC;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,qBAAqB,EAAE,mBAAmB;YAC1C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAuB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;IACjD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAuB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;QAC9B,KAAK,EAAE,CAAC;YACN,CAAC,CAAC;gBACE,MAAM,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;gBAC/B,UAAU,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;gBACvC,KAAK,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;aAC9B;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,QAAQ,EAAE,QAAQ;IAClB,YAAY;IACZ,WAAW;IACX,WAAW;IACX,oBAAoB,EAAE,CAAC,QAAQ,CAAC;IAChC,uBAAuB,EAAE,qBAAqB,CAAC,QAAQ,CAAC;IACxD,qBAAqB,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;IAC1D,sBAAsB,EAAE,EAAE;IAC1B,KAAK,EAAE,IAAI;IACX,wBAAwB,EAAE,KAAK;CAChC,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,6 @@
+export type DetectionRuleId = "coding-tool" | "scam" | "cjk-leak" | "mux" | "foreign" | "tier-mismatch" | "substituted";
+export declare const DETECTION_RULES: readonly DetectionRuleId[];
+export type DetectionExceptionId = "version" | "transient" | "cloud-host" | "reshaping" | "threshold";
+export declare const DETECTION_EXCEPTIONS: readonly DetectionExceptionId[];
+export declare function ruleIdForSignal(signal: string): DetectionRuleId | null;
+//# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,MAAM,GACN,UAAU,GACV,KAAK,GACL,SAAS,GACT,eAAe,GACf,aAAa,CAAC;AAElB,eAAO,MAAM,eAAe,EAAE,SAAS,eAAe,EAQrD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC9B,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;AAErE,eAAO,MAAM,oBAAoB,EAAE,SAAS,oBAAoB,EAM/D,CAAC;AAEF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAMtE"}

package/dist/rules.js

@@ -0,0 +1,28 @@
+export const DETECTION_RULES = [
+    "coding-tool",
+    "scam",
+    "cjk-leak",
+    "mux",
+    "foreign",
+    "tier-mismatch",
+    "substituted",
+];
+export const DETECTION_EXCEPTIONS = [
+    "version",
+    "transient",
+    "cloud-host",
+    "reshaping",
+    "threshold",
+];
+export function ruleIdForSignal(signal) {
+    if (signal === "coding-tool")
+        return "coding-tool";
+    if (signal === "scam")
+        return "scam";
+    if (signal === "cjk-leak")
+        return "cjk-leak";
+    if (signal === "foreign")
+        return "foreign";
+    return null;
+}
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,eAAe,GAA+B;IACzD,aAAa;IACb,MAAM;IACN,UAAU;IACV,KAAK;IACL,SAAS;IACT,eAAe;IACf,aAAa;CACd,CAAC;AAKF,MAAM,CAAC,MAAM,oBAAoB,GAAoC;IACnE,SAAS;IACT,WAAW;IACX,YAAY;IACZ,WAAW;IACX,WAAW;CACZ,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,22 @@
+import { type TransportFn } from "./transport";
+import type { TransportMode, VerifyProvider, VerifyResult } from "./types";
+export declare function runVerification(opts: {
+    provider: VerifyProvider;
+    baseUrl: string;
+    apiKey: string;
+    model: string;
+    mode: TransportMode;
+    timeoutMs?: number;
+    transport?: TransportFn;
+    /**
+     * Run the Anthropic thinking-signature check too. Opt-in: it costs one extra
+     * generation and only applies to Claude models that support thinking.
+     */
+    checkSignature?: boolean;
+    /**
+     * Verify the endpoint's token accounting (billing inflation, and the
+     * tokenizer band that doubles as a tier check). Opt-in: three extra requests.
+     */
+    checkTokenTruth?: boolean;
+}): Promise<VerifyResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAcA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EACd,YAAY,EACb,MAAM,SAAS,CAAC;AAwOjB,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,YAAY,CAAC,CAwHxB"}