ai-model-verifier 1.4.0 → 2.0.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-model-verifier",
-  "version": "1.4.0",
-  "description": "Verify an AI API endpoint really serves the model it claims: model substitution, Claude thinking signatures, token-billing accuracy, response-envelope and throughput evidence.",
+  "version": "2.0.0",
+  "description": "Verify an AI API endpoint really serves the model it claims: a vendor adapter per wire, a rule table over shared evidence, and per model facts. Model substitution, Claude thinking signatures, token billing accuracy, envelope and throughput evidence.",
   "license": "AGPL-3.0-only",
   "type": "module",
   "repository": {
@@ -21,7 +21,9 @@
     "claude",
     "openai",
     "gemini",
-    "token-billing"
+    "token-billing",
+    "rule-engine",
+    "adapter"
   ],
   "sideEffects": false,
   "files": [
@@ -32,19 +34,32 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
-    "./providers/*": {
-      "types": "./dist/providers/*.d.ts",
-      "default": "./dist/providers/*.js"
+    "./vendors": {
+      "types": "./dist/vendors/index.d.ts",
+      "default": "./dist/vendors/index.js"
     },
-    "./*": {
-      "types": "./dist/*.d.ts",
-      "default": "./dist/*.js"
+    "./rules": {
+      "types": "./dist/rules/index.d.ts",
+      "default": "./dist/rules/index.js"
+    },
+    "./models": {
+      "types": "./dist/models/index.d.ts",
+      "default": "./dist/models/index.js"
+    },
+    "./transport": {
+      "types": "./dist/transport.d.ts",
+      "default": "./dist/transport.js"
+    },
+    "./highlight": {
+      "types": "./dist/highlight.d.ts",
+      "default": "./dist/highlight.js"
     }
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
-    "prepublishOnly": "bun run build"
+    "test": "bun test",
+    "prepublishOnly": "bun run typecheck && bun run build"
   },
   "devDependencies": {
     "typescript": "^7.0.2"

package/dist/detectors/response-metadata.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"response-metadata.d.ts","sourceRoot":"","sources":["../../src/detectors/response-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qEAAqE;IACrE,KAAK,EAAE,aAAa,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,EAAE,aAAa,CAAC;IACxB,iEAAiE;IACjE,UAAU,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,8EAA8E;IAC9E,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kEAAkE;IAClE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAuCF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,aAAa,GACtB,gBAAgB,CAyClB"}

package/dist/detectors/response-metadata.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"response-metadata.js","sourceRoot":"","sources":["../../src/detectors/response-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAsBH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,eAAe;IACf,yBAAyB;IACzB,6BAA6B;CAC9B,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,eAAe;IACf,mBAAmB;IACnB,cAAc;CACf,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,kBAAkB;IAClB,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,EAAW;IAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACjC,sEAAsE;IACtE,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,IAA6B,EAAE,SAAmB;IACjE,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,QAAiB,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,QAAiB,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,WAAoB,CAAC;IAC9B,OAAO,SAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAa,EACb,QAAuB;IAEvB,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,wEAAwE;IACxE,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,KAAK,WAAW,CAAC;QAC1D,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,KAAK,QAAQ,CAAC;QACvD,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,KAAK,WAAW,CAAC;QACzD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAC;IAC7D,IAAI,UAAU;QACZ,KAAK,CAAC,IAAI,CACR,eAAe,KAAK,iBAAiB,QAAQ,iDAAiD,CAC/F,CAAC;IACJ,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM;QAC7D,KAAK,CAAC,IAAI,CACR,cAAc,QAAQ,oEAAoE,CAC3F,CAAC;IACJ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,iBAAiB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CACrF,CAAC;IAEJ,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,SAAS;QACT,gBAAgB;QAChB,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/detectors/thinking-floor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"thinking-floor.d.ts","sourceRoot":"","sources":["../../src/detectors/thinking-floor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,MAAM,oBAAoB,GAAG;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAAuB,CAAC;AAC3E,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAMhD,MAAM,MAAM,kBAAkB;AAC5B,6EAA6E;AAC3E,SAAS;AACX,2EAA2E;GACzE,aAAa;AACf,+CAA+C;GAC7C,YAAY;AACd,+CAA+C;GAC7C,SAAS,CAAC;AAEd,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAKF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAKT;AAYD,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,OAAO,GACZ;IAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAWhE;AAED,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mBAAmB,CA8CrB;AAED,8FAA8F;AAC9F,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0C/B"}

package/dist/detectors/thinking-floor.js

@@ -1,135 +0,0 @@
-/**
- * Thinking-floor check for models that cannot switch reasoning off.
- *
- * Gemini 2.5 Pro has a thinking budget floor (128 tokens): even "Reply with
- * only the word ok." produces hidden thought tokens, reported as
- * `completion_tokens_details.reasoning_tokens` on an OpenAI-shaped hop, folded
- * into `completion_tokens` when the relay strips the breakdown, or as
- * `usageMetadata.thoughtsTokenCount` on the native endpoint. Measured across 66
- * historical probes of genuine 2.5 Pro: the lowest completion count for that
- * prompt was 12, the native thoughts count 99 to 158.
- *
- * A flash-class backend sold under the pro name answers the same prompt with
- * `completion_tokens: 1` (a6 merchant 3623, 2026-09-09), and it still echoes
- * `model: gemini-2.5-pro`, so the envelope substitution check never fires.
- * The token count is the only free evidence left.
- *
- * Not applied to flash tiers: those may legitimately run with thinking off.
- */
-export const DEFAULT_ALWAYS_THINKS = ["gemini-2-5-pro"];
-export const DEFAULT_MIN_COMPLETION_TOKENS = 10;
-const PROBE_PROMPT = "Reply with only the word ok.";
-/** Room for the thoughts plus the word; too small truncates thinking and reads as a fake. */
-const MAX_TOKENS = 2048;
-const normalize = (model) => model.toLowerCase().replace(/[._]/g, "-").split("/").pop() ?? "";
-export function mustAlwaysThink(model, options) {
-    const m = normalize(model);
-    return (options?.models ?? DEFAULT_ALWAYS_THINKS).some((p) => m.startsWith(normalize(p)));
-}
-const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : null;
-/** Completion and reasoning counts from an OpenAI `usage` or a Gemini `usageMetadata`. */
-export function readThinkingUsage(data) {
-    if (!data || typeof data !== "object")
-        return null;
-    const d = data;
-    const u = (d.usage ?? d.usageMetadata);
-    if (!u || typeof u !== "object")
-        return null;
-    const details = u.completion_tokens_details;
-    const reasoning = num(details && typeof details === "object" ? details.reasoning_tokens : null) ??
-        num(u.thoughtsTokenCount);
-    const completion = num(u.completion_tokens) ?? num(u.candidatesTokenCount);
-    return { completion, reasoning };
-}
-/** Judge one reply to the short probe. Pure: pass any response body already collected. */
-export function checkThinkingFloor(model, data, options) {
-    if (!mustAlwaysThink(model, options))
-        return { state: "skipped", completionTokens: null, reasoningTokens: null };
-    const usage = readThinkingUsage(data);
-    if (!usage)
-        return {
-            state: "unmeasured",
-            completionTokens: null,
-            reasoningTokens: null,
-            reason: "no usage in reply",
-        };
-    const floor = options?.minCompletionTokens ?? DEFAULT_MIN_COMPLETION_TOKENS;
-    if (usage.reasoning !== null && usage.reasoning > 0)
-        return {
-            state: "thought",
-            completionTokens: usage.completion,
-            reasoningTokens: usage.reasoning,
-        };
-    if (usage.completion === null)
-        return {
-            state: "unmeasured",
-            completionTokens: null,
-            reasoningTokens: usage.reasoning,
-            reason: "no completion count in usage",
-        };
-    // An empty reply carries no evidence: nothing was generated, so nothing was
-    // skipped. Truncation and refusals land here, not in "no-thinking".
-    if (usage.completion === 0)
-        return {
-            state: "unmeasured",
-            completionTokens: 0,
-            reasoningTokens: usage.reasoning,
-            reason: "empty reply",
-        };
-    if (usage.completion < floor)
-        return {
-            state: "no-thinking",
-            completionTokens: usage.completion,
-            reasoningTokens: usage.reasoning,
-            reason: `completion_tokens ${usage.completion} below floor ${floor} with no reasoning tokens`,
-        };
-    return {
-        state: "thought",
-        completionTokens: usage.completion,
-        reasoningTokens: usage.reasoning,
-    };
-}
-/** One extra generation: the short prompt through the endpoint, then `checkThinkingFloor`. */
-export async function probeThinkingFloor(opts) {
-    if (!mustAlwaysThink(opts.model, opts.options))
-        return { state: "skipped", completionTokens: null, reasoningTokens: null };
-    const base = opts.baseUrl.replace(/\/+$/, "");
-    const req = opts.provider === "gemini"
-        ? {
-            url: `${base}/v1beta/models/${opts.model}:generateContent`,
-            headers: {
-                "content-type": "application/json",
-                "x-goog-api-key": opts.apiKey,
-            },
-            reqBody: {
-                contents: [{ role: "user", parts: [{ text: PROBE_PROMPT }] }],
-                generationConfig: { maxOutputTokens: MAX_TOKENS },
-            },
-        }
-        : {
-            url: `${base}/v1/chat/completions`,
-            headers: {
-                "content-type": "application/json",
-                authorization: `Bearer ${opts.apiKey}`,
-            },
-            reqBody: {
-                model: opts.model,
-                max_tokens: MAX_TOKENS,
-                messages: [{ role: "user", content: PROBE_PROMPT }],
-            },
-        };
-    const res = await opts.transport({
-        mode: "direct",
-        ...req,
-        timeoutMs: opts.timeoutMs,
-    });
-    if (res.status !== 200 || !res.data)
-        return {
-            state: "unmeasured",
-            completionTokens: null,
-            reasoningTokens: null,
-            reason: res.error ?? `http ${res.status ?? "none"}`,
-        };
-    return checkThinkingFloor(opts.model, res.data, opts.options);
-}
-//# sourceMappingURL=thinking-floor.js.map

package/dist/detectors/thinking-floor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"thinking-floor.js","sourceRoot":"","sources":["../../src/detectors/thinking-floor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAcH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,CAAC,gBAAgB,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,6FAA6F;AAC7F,MAAM,UAAU,GAAG,IAAI,CAAC;AAmBxB,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;AAEnE,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,OAA8B;IAE9B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3D,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;AACJ,CAAC;AASD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CACxC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEzD,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAC/B,IAAa;IAEb,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAAoD,CAAC;IAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,CAA2B,CAAC;IACjE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,yBAAyB,CAAC;IAC5C,MAAM,SAAS,GACb,GAAG,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7E,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC3E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,IAAa,EACb,OAA8B;IAE9B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QACR,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,mBAAmB;SAC5B,CAAC;IACJ,MAAM,KAAK,GAAG,OAAO,EAAE,mBAAmB,IAAI,6BAA6B,CAAC;IAC5E,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;QACjD,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,gBAAgB,EAAE,KAAK,CAAC,UAAU;YAClC,eAAe,EAAE,KAAK,CAAC,SAAS;SACjC,CAAC;IACJ,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAC3B,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,KAAK,CAAC,SAAS;YAChC,MAAM,EAAE,8BAA8B;SACvC,CAAC;IACJ,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,gBAAgB,EAAE,CAAC;YACnB,eAAe,EAAE,KAAK,CAAC,SAAS;YAChC,MAAM,EAAE,aAAa;SACtB,CAAC;IACJ,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK;QAC1B,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,gBAAgB,EAAE,KAAK,CAAC,UAAU;YAClC,eAAe,EAAE,KAAK,CAAC,SAAS;YAChC,MAAM,EAAE,qBAAqB,KAAK,CAAC,UAAU,gBAAgB,KAAK,2BAA2B;SAC9F,CAAC;IACJ,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,eAAe,EAAE,KAAK,CAAC,SAAS;KACjC,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IASxC;IACC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GACP,IAAI,CAAC,QAAQ,KAAK,QAAQ;QACxB,CAAC,CAAC;YACE,GAAG,EAAE,GAAG,IAAI,kBAAkB,IAAI,CAAC,KAAK,kBAAkB;YAC1D,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,IAAI,CAAC,MAAM;aAC9B;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;gBAC7D,gBAAgB,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;aAClD;SACF;QACH,CAAC,CAAC;YACE,GAAG,EAAE,GAAG,IAAI,sBAAsB;YAClC,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;aACvC;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,UAAU;gBACtB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;aACpD;SACF,CAAC;IACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,EAAE,QAAQ;QACd,GAAG,GAAG;QACN,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI;QACjC,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE;SACpD,CAAC;IACJ,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC"}

package/dist/detectors/thinking-signature.d.ts

@@ -1,70 +0,0 @@
-/**
- * Anthropic thinking-signature check.
- *
- * Claude attaches a server-generated `signature` to every thinking block. A
- * relay serving some other model cannot produce one, so this is the only
- * evidence here that does not rest on asking the model who it is: identity and
- * behaviour probes can be coached with a system prompt, a signature cannot.
- *
- * What it does NOT prove: which tier answered. Sonnet returns a perfectly valid
- * signature when sold as Opus, so a pass here still needs the tier checks.
- *
- * Ported from veridrop (AGPL-3.0), whose detector stops at "a signature-shaped
- * string is present".
- *
- * Their DESIGN.md also specifies a replay step (hand the thinking block back so
- * Anthropic re-validates the signature, rejecting a forgery with 400/422) which
- * they never implemented. We built and measured it: **it does not work through a
- * relay**. Tested against two live upstreams (a6 merchant 3542 and pol) by
- * replaying a genuine block and then the same block with 308 bytes of random
- * base64 in place of the signature. Both upstreams returned 200 for both. A
- * relay re-issues the turn to its own backend rather than passing our thinking
- * block through, so nothing ever validates it.
- *
- * `strict` therefore stays off by default and is documented as proving only
- * that the endpoint accepts the block, not that the signature is real. Do not
- * present it as cryptographic proof.
- */
-import type { TransportFn } from "../transport";
-export type SignatureState = 
-/** Signed thinking block: a genuine Anthropic path answered. */
-"signed"
-/**
- * Thought, but no signature. Expected when the lane crosses an
- * OpenAI-shaped hop, which has no field to carry one, so this is
- * unprovable rather than fake. Never a hard fail on its own.
- */
- | "unsigned"
-/** Thinking was requested and no block came back at all. */
- | "no-thinking"
-/** Model or endpoint cannot be asked; carries no evidence either way. */
- | "skipped";
-export type SignatureResult = {
-    state: SignatureState;
-    signatureLength: number;
-    /** First 32 chars, for the report; never the whole signature. */
-    signaturePrefix: string | null;
-    thinkingChars: number;
-    /** Only set when the replay check actually ran. */
-    replayVerified?: boolean;
-    reason?: string;
-};
-export declare function thinkingModeFor(model: string): {
-    kind: "adaptive" | "extended";
-} | null;
-export declare function checkThinkingSignature(opts: {
-    transport: TransportFn;
-    baseUrl: string;
-    apiKey: string;
-    model: string;
-    timeoutMs: number;
-    /**
-     * Replay the thinking block to the same endpoint. Measured as NOT proving
-     * authenticity through a relay (see the module docstring): both a genuine and
-     * a forged signature come back 200, because the relay re-issues the turn
-     * upstream instead of forwarding our block. Off by default; it only tells you
-     * the endpoint accepts a thinking block in the request.
-     */
-    strict?: boolean;
-}): Promise<SignatureResult>;
-//# sourceMappingURL=thinking-signature.d.ts.map

package/dist/detectors/thinking-signature.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"thinking-signature.d.ts","sourceRoot":"","sources":["../../src/detectors/thinking-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAqBhD,MAAM,MAAM,cAAc;AACxB,gEAAgE;AAC9D,QAAQ;AACV;;;;GAIG;GACD,UAAU;AACZ,4DAA4D;GAC1D,aAAa;AACf,yEAAyE;GACvE,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,cAAc,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAkBF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAAA;CAAE,GAAG,IAAI,CAK1C;AA4BD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0E3B"}

package/dist/detectors/thinking-signature.js

@@ -1,177 +0,0 @@
-/**
- * Anthropic thinking-signature check.
- *
- * Claude attaches a server-generated `signature` to every thinking block. A
- * relay serving some other model cannot produce one, so this is the only
- * evidence here that does not rest on asking the model who it is: identity and
- * behaviour probes can be coached with a system prompt, a signature cannot.
- *
- * What it does NOT prove: which tier answered. Sonnet returns a perfectly valid
- * signature when sold as Opus, so a pass here still needs the tier checks.
- *
- * Ported from veridrop (AGPL-3.0), whose detector stops at "a signature-shaped
- * string is present".
- *
- * Their DESIGN.md also specifies a replay step (hand the thinking block back so
- * Anthropic re-validates the signature, rejecting a forgery with 400/422) which
- * they never implemented. We built and measured it: **it does not work through a
- * relay**. Tested against two live upstreams (a6 merchant 3542 and pol) by
- * replaying a genuine block and then the same block with 308 bytes of random
- * base64 in place of the signature. Both upstreams returned 200 for both. A
- * relay re-issues the turn to its own backend rather than passing our thinking
- * block through, so nothing ever validates it.
- *
- * `strict` therefore stays off by default and is documented as proving only
- * that the endpoint accepts the block, not that the signature is real. Do not
- * present it as cryptographic proof.
- */
-/**
- * Multi-step GCD: hard enough that adaptive models decide to think, and
- * deliberately not the 1071/462 pair from Anthropic's own docs, which a relay
- * could special-case.
- */
-const PROBE_PROMPT = "Find the greatest common divisor of 2378 and 1547 using the Euclidean algorithm.";
-const THINKING_BUDGET_TOKENS = 2000;
-/**
- * Covers thinking + answer together. Too small and an adaptive model skips
- * thinking entirely to fit, which reads as a fake when it is our own fault.
- */
-const MAX_TOKENS = 16000;
-/** Real signatures run to hundreds of chars; this only rejects a stub. */
-const SIGNATURE_MIN_LEN = 50;
-/** Adaptive-thinking models take `effort` at the top level, not inside `thinking`. */
-const ADAPTIVE_MODELS = ["claude-opus-4-7", "claude-opus-4-8"];
-/** Extended-thinking models take a token budget instead. */
-const EXTENDED_MODELS = [
-    "claude-opus-4-6",
-    "claude-opus-4-5",
-    "claude-opus-4-1",
-    "claude-sonnet-4-6",
-    "claude-sonnet-4-5",
-    "claude-haiku-4-5",
-];
-const normalize = (model) => model.toLowerCase().replace(/[._]/g, "-").split("/").pop() ?? "";
-export function thinkingModeFor(model) {
-    const m = normalize(model);
-    if (ADAPTIVE_MODELS.some((p) => m.startsWith(p)))
-        return { kind: "adaptive" };
-    if (EXTENDED_MODELS.some((p) => m.startsWith(p)))
-        return { kind: "extended" };
-    return null;
-}
-function readThinking(data) {
-    const content = data?.content;
-    if (!Array.isArray(content))
-        return { block: null, signature: "", chars: 0 };
-    for (const raw of content) {
-        if (!raw || typeof raw !== "object")
-            continue;
-        const b = raw;
-        if (b.type !== "thinking" && b.type !== "redacted_thinking")
-            continue;
-        return {
-            block: b,
-            signature: typeof b.signature === "string" ? b.signature : "",
-            chars: typeof b.thinking === "string" ? b.thinking.length : 0,
-        };
-    }
-    return { block: null, signature: "", chars: 0 };
-}
-export async function checkThinkingSignature(opts) {
-    const mode = thinkingModeFor(opts.model);
-    const empty = { signatureLength: 0, signaturePrefix: null, thinkingChars: 0 };
-    if (!mode)
-        return { state: "skipped", ...empty, reason: "model-has-no-thinking-mode" };
-    const url = `${opts.baseUrl.replace(/\/+$/, "")}/v1/messages`;
-    const headers = {
-        "Content-Type": "application/json",
-        "x-api-key": opts.apiKey,
-        "anthropic-version": "2023-06-01",
-    };
-    const messages = [{ role: "user", content: PROBE_PROMPT }];
-    // Non-streaming on purpose: streaming an adaptive model silently drops the
-    // thinking block, so a real Claude would look unsigned.
-    const body = {
-        model: opts.model,
-        max_tokens: MAX_TOKENS,
-        messages,
-        thinking: mode.kind === "extended"
-            ? { type: "enabled", budget_tokens: THINKING_BUDGET_TOKENS }
-            : { type: "adaptive", display: "summarized" },
-    };
-    // Sibling of `thinking`, never nested inside it: nesting is a 400.
-    if (mode.kind === "adaptive")
-        body["output_config"] = { effort: "xhigh" };
-    const res = await opts.transport({
-        mode: "direct",
-        url,
-        headers,
-        reqBody: body,
-        timeoutMs: opts.timeoutMs,
-    });
-    if (res.status === null || res.status >= 400)
-        return {
-            state: "skipped",
-            ...empty,
-            reason: `probe-failed:${res.status ?? "network"}`,
-        };
-    const found = readThinking(res.data);
-    if (!found.block)
-        return { state: "no-thinking", ...empty, reason: "no-thinking-block" };
-    const sig = found.signature;
-    const base = {
-        signatureLength: sig.length,
-        signaturePrefix: sig ? sig.slice(0, 32) : null,
-        thinkingChars: found.chars,
-    };
-    if (!sig)
-        return { state: "unsigned", ...base, reason: "no-signature-field" };
-    if (sig.length < SIGNATURE_MIN_LEN)
-        return { state: "unsigned", ...base, reason: "signature-too-short" };
-    if (!opts.strict)
-        return { state: "signed", ...base };
-    const replayVerified = await verifySignature({
-        transport: opts.transport,
-        url,
-        headers,
-        model: opts.model,
-        block: found.block,
-        timeoutMs: opts.timeoutMs,
-    });
-    // A rejection is real evidence (the endpoint checked and refused); an
-    // acceptance is not, so it never upgrades or downgrades the state on its own.
-    return {
-        state: replayVerified ? "signed" : "unsigned",
-        ...base,
-        replayVerified,
-        ...(replayVerified ? {} : { reason: "signature-rejected-on-replay" }),
-    };
-}
-/**
- * Hand the thinking block back to the endpoint. Against api.anthropic.com this
- * would re-validate the signature; against a relay it does not (measured: a
- * forged 308-byte signature returned 200 on both upstreams tested), so the
- * result is reported as `replayVerified` evidence rather than a verdict.
- */
-async function verifySignature(opts) {
-    const res = await opts.transport({
-        mode: "direct",
-        url: opts.url,
-        headers: opts.headers,
-        reqBody: {
-            model: opts.model,
-            max_tokens: 1,
-            messages: [
-                { role: "user", content: PROBE_PROMPT },
-                { role: "assistant", content: [opts.block] },
-            ],
-        },
-        timeoutMs: opts.timeoutMs,
-    });
-    // A network failure proves nothing, so treat only an explicit rejection as
-    // a forged signature.
-    if (res.status === null)
-        return true;
-    return res.status < 400;
-}
-//# sourceMappingURL=thinking-signature.js.map

package/dist/detectors/thinking-signature.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"thinking-signature.js","sourceRoot":"","sources":["../../src/detectors/thinking-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH;;;;GAIG;AACH,MAAM,YAAY,GAChB,kFAAkF,CAAC;AAErF,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC;;;GAGG;AACH,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA2B7B,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AAE/D,4DAA4D;AAC5D,MAAM,eAAe,GAAG;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;AAEnE,MAAM,UAAU,eAAe,CAC7B,KAAa;IAEb,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9E,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,SAAS,YAAY,CAAC,IAAa;IAKjC,MAAM,OAAO,GAAI,IAA8B,EAAE,OAAO,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,CAAC,GAAG,GAAoB,CAAC;QAC/B,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB;YAAE,SAAS;QACtE,OAAO;YACL,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YAC7D,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAc5C;IACC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,EAAE,eAAe,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC9E,IAAI,CAAC,IAAI;QACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAE9E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC;IAC9D,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,IAAI,CAAC,MAAM;QACxB,mBAAmB,EAAE,YAAY;KAClC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,UAAU;QACtB,QAAQ;QACR,QAAQ,EACN,IAAI,CAAC,IAAI,KAAK,UAAU;YACtB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,sBAAsB,EAAE;YAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE;KAClD,CAAC;IACF,mEAAmE;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAE1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,EAAE,QAAQ;QACd,GAAG;QACH,OAAO;QACP,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QAC1C,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,GAAG,KAAK;YACR,MAAM,EAAE,gBAAgB,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE;SAClD,CAAC;IAEJ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK;QACd,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAEzE,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG;QACX,eAAe,EAAE,GAAG,CAAC,MAAM;QAC3B,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9C,aAAa,EAAE,KAAK,CAAC,KAAK;KAC3B,CAAC;IACF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC9E,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB;QAChC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAEvE,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IAEtD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG;QACH,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,sEAAsE;IACtE,8EAA8E;IAC9E,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QAC7C,GAAG,IAAI;QACP,cAAc;QACd,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,IAO9B;IACC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE;gBACvC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;aAC7C;SACF;QACD,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,2EAA2E;IAC3E,sBAAsB;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;AAC1B,CAAC"}

package/dist/detectors/throughput.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"throughput.d.ts","sourceRoot":"","sources":["../../src/detectors/throughput.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,gBAAgB,GAAG,IAAI,CAa1B;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,QAAQ,GAAG,QAAQ,CAAC;KAChC,EAAE,CAAC;IACJ,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAQF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,EAAE,EAC3B,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,oBAAoB,EAAE,CA8CxB"}

package/dist/detectors/throughput.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"throughput.js","sourceRoot":"","sources":["../../src/detectors/throughput.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAWH,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC;IACjC,wEAAwE;IACxE,wDAAwD;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,MAAM;QACpB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KAChE,CAAC;AACJ,CAAC;AAgBD,MAAM,MAAM,GAAG,CAAC,EAAY,EAAE,EAAE;IAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,GAAG,CAAE,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA2B,EAC3B,IAAgC;IAEhC,MAAM,KAAK,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAClB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACxD,MAAM,QAAQ,GACZ,KAAK,CAAC,MAAM,IAAI,CAAC;YACf,CAAC,CAAC,KAAK;iBACF,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,eAAe,IAAI,GAAG,GAAG,KAAK;gBAChC,CAAC,CAAC,eAAe,IAAI,GAAG,GAAG,KAAK,CACnC;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpD,SAAS,EACP,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;aACtE,CAAC,CAAC;iBACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;YAC1D,CAAC,CAAC,EAAE,CAAC;QAET,GAAG,CAAC,IAAI,CAAC;YACP,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,SAAS,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1B,QAAQ;YACR,IAAI,EACF,KAAK,CAAC,MAAM,GAAG,CAAC;gBACd,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,sCAAsC;oBACxC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,oHAAoH;SAC/I,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/detectors/token-truth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-truth.d.ts","sourceRoot":"","sources":["../../src/detectors/token-truth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAuBhD,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,eAAe,GAAG,aAAa,GAAG,gBAAgB,GAAG,cAAc,CAAC;IACxE,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,0EAA0E;IAC1E,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAKF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAK9E;AAcD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2G5B"}

package/dist/detectors/token-truth.js

@@ -1,142 +0,0 @@
-/**
- * Token-accounting checks for Anthropic endpoints.
- *
- * The signature check answers "is this really Claude". These answer a different
- * question the signature cannot: "are the numbers you are billing me true".
- * A relay can forward genuine Claude and still inflate `input_tokens` on every
- * call, and nothing in an identity probe would notice.
- *
- * Ported from veridrop (AGPL-3.0) `token_usage.py` / `integrity.py`, whose
- * tolerances were calibrated against the official API. Do not tighten them
- * without re-measuring: the loose-looking bounds exist because real Anthropic
- * responses sat near them.
- */
-import { COUNT_PROBE_MAX_TOKENS as MAX_TOKENS, LONG_PROMPT, SHORT_PROMPT, } from "../internal/fixed-text";
-/**
- * Expected `input_tokens` growth between the short and long prompt.
- *
- * Two bands because Anthropic changed tokenizer: opus-4-7/4-8 encode that same
- * text into materially more tokens. A relay claiming a new-tokenizer model
- * while serving an older one lands in the wrong band, which makes this a tier
- * check as well as a billing check.
- */
-const DELTA_OLD = { min: 45, max: 140 };
-const DELTA_NEW = { min: 90, max: 230 };
-const NEW_TOKENIZER_MODELS = ["claude-opus-4-7", "claude-opus-4-8"];
-/** `count_tokens` should agree with the billed `input_tokens` this closely. */
-const countTolerance = (n) => Math.max(4, Math.round(n * 0.2));
-const normalize = (model) => model.toLowerCase().replace(/[._]/g, "-").split("/").pop() ?? "";
-export function expectedInputDelta(model) {
-    const m = normalize(model);
-    return NEW_TOKENIZER_MODELS.some((p) => m.startsWith(p))
-        ? DELTA_NEW
-        : DELTA_OLD;
-}
-/** Rejects booleans, which are `typeof "number"`-adjacent traps in JS. */
-function intOf(v) {
-    return typeof v === "number" && Number.isInteger(v) && v >= 0 ? v : null;
-}
-function usageOf(data) {
-    const u = data?.usage;
-    return { input: intOf(u?.input_tokens), output: intOf(u?.output_tokens) };
-}
-export async function checkTokenTruth(opts) {
-    const base = opts.baseUrl.replace(/\/+$/, "");
-    const headers = {
-        "Content-Type": "application/json",
-        "x-api-key": opts.apiKey,
-        "anthropic-version": "2023-06-01",
-    };
-    const ask = (prompt) => opts.transport({
-        mode: "direct",
-        url: `${base}/v1/messages`,
-        headers,
-        reqBody: {
-            model: opts.model,
-            max_tokens: MAX_TOKENS,
-            messages: [{ role: "user", content: prompt }],
-        },
-        timeoutMs: opts.timeoutMs,
-    });
-    const [shortRes, longRes] = await Promise.all([
-        ask(SHORT_PROMPT),
-        ask(LONG_PROMPT),
-    ]);
-    const noCounts = {
-        shortInputTokens: null,
-        longInputTokens: null,
-        countTokens: null,
-    };
-    if (shortRes.status === null || shortRes.status >= 400)
-        return {
-            ok: null,
-            checks: [],
-            ...noCounts,
-            reason: `probe-failed:${shortRes.status ?? "network"}`,
-        };
-    const s = usageOf(shortRes.data);
-    const l = usageOf(longRes.data);
-    const checks = [];
-    const usagePresent = s.input !== null && l.input !== null;
-    checks.push({
-        id: "usage-present",
-        pass: usagePresent,
-        detail: usagePresent
-            ? `short=${s.input}, long=${l.input}`
-            : "endpoint reported no usage counts",
-    });
-    // Without usage there is nothing to verify; a missing field is not fraud.
-    if (!usagePresent)
-        return { ok: null, checks, ...noCounts, reason: "no-usage-reported" };
-    const band = expectedInputDelta(opts.model);
-    const delta = l.input - s.input;
-    const deltaOk = delta >= band.min && delta <= band.max;
-    checks.push({
-        id: "input-delta",
-        pass: deltaOk,
-        detail: `delta=${delta}, expected ${band.min}-${band.max}`,
-    });
-    // Output above the cap we set means the count is invented, not merely padded.
-    const outputs = [s.output, l.output].filter((v) => v !== null);
-    const outputOk = outputs.every((v) => v > 0 && v <= MAX_TOKENS + 4);
-    checks.push({
-        id: "output-bounded",
-        pass: outputOk,
-        detail: `outputs=${outputs.join(",") || "none"} (cap ${MAX_TOKENS})`,
-    });
-    // The same upstream pricing the same request without generating: the
-    // strongest anti-inflation signal available, when the endpoint exposes it.
-    let counted = null;
-    const countRes = await opts.transport({
-        mode: "direct",
-        url: `${base}/v1/messages/count_tokens`,
-        headers,
-        reqBody: {
-            model: opts.model,
-            messages: [{ role: "user", content: SHORT_PROMPT }],
-        },
-        timeoutMs: opts.timeoutMs,
-    });
-    if (countRes.status !== null && countRes.status < 400) {
-        counted = intOf(countRes.data?.input_tokens);
-        if (counted !== null) {
-            const drift = Math.abs(counted - s.input);
-            const tol = countTolerance(s.input);
-            checks.push({
-                id: "count-tokens",
-                pass: drift <= tol,
-                detail: `count=${counted} vs billed=${s.input}, drift=${drift} (tolerance ${tol})`,
-            });
-        }
-    }
-    // A missing count_tokens endpoint is common on relays and proves nothing, so
-    // it is simply absent from the checks rather than counted as a failure.
-    return {
-        ok: checks.every((c) => c.pass),
-        checks,
-        shortInputTokens: s.input,
-        longInputTokens: l.input,
-        countTokens: counted,
-    };
-}
-//# sourceMappingURL=token-truth.js.map