ai-model-verifier 1.4.1 → 2.0.0

package/README.md

@@ -3,7 +3,7 @@
 **Is that API endpoint really serving the model it claims?**
 
 Resellers and relay stations sell "Claude Opus" or "GPT-5" and quietly serve
-something cheaper. Given a `base_url`, `api_key` and `model`, this library
+something cheaper. Given a `baseUrl`, `apiKey` and `model`, this library
 probes the endpoint and reports what it actually found: a substituted model, a
 downgraded Claude tier, a stripped thinking signature, inflated token billing,
 or a translation layer sitting in front of the real vendor.
@@ -13,36 +13,93 @@ engine runs in the browser, on a server, and inside our sync pipeline.
 
 ## Design
 
-- **Isomorphic.** Web-standard APIs only (`fetch`, `TextEncoder`,
-  `AbortSignal`); no `node:` imports. The HTTP call itself is injected as a
-  `TransportFn`, so a browser can route around CORS and a server can route
-  through an SSRF-safe fetch.
-- **Opt-in.** Providers and detectors have their own entry points, so a consumer
-  that only checks Anthropic never bundles the Gemini config.
+- **Adapters.** One object per wire format (`anthropic`, `openai`, `gemini`)
+  builds every request and reads every reply. Rules never see a URL.
+- **Rules over evidence.** Every detection is a rule that declares the
+  evidence it needs (the four behavioural probes, a fixed-text pair, a thinking
+  reply, a floor reply). Evidence is collected once per run and shared; the
+  rule table's order is the verdict's precedence.
+- **Model facts.** One glob table says which models think adaptively, which
+  tokenizer generation they bill with, which cannot switch reasoning off.
+- **Isomorphic.** Web-standard APIs only, no `node:` imports. The HTTP call is
+  an injected `TransportFn`, so a browser can route through its backend and a
+  server through an SSRF-safe fetch.
 - **Zero required dependencies.**
 
+## Install
+
+```sh
+npm i ai-model-verifier
+```
+
 ## Use
 
 ```ts
-import { runVerification } from "ai-model-verifier";
-import { anthropicConfig } from "ai-model-verifier/providers/anthropic";
+import { verify } from "ai-model-verifier";
+
+const result = await verify({
+  vendor: "anthropic",
+  baseUrl: "https://relay.example.com",
+  apiKey: process.env.RELAY_KEY!,
+  model: "claude-opus-4-6",
+  mode: "direct",
+  checks: { signature: true, tokenTruth: true, tokenizerFingerprint: true },
+});
+console.log(result.verdict, result.reasons, result.findings);
+```
+
+`runRules` judges chosen rules on a wire you already know works, without a
+handshake, and is what a pipeline with its own connectivity probes wants:
+
+```ts
+import { runRules } from "ai-model-verifier";
+
+const run = await runRules({
+  vendor: "openai",
+  baseUrl,
+  apiKey,
+  model: "pool/claude-opus-4-6",
+  mode: "server",
+  transport: myFetch,
+  bodyExtras: { provider: ["bedrock"] },
+  only: ["coding-tool", "foreign", "served-model-mismatch", "quorum", "tokenizer-fingerprint"],
+});
+for (const f of run.findings) console.log(f.rule, f.severity, f.reason);
+```
+
+Extend without forking:
+
+```ts
+import { createVerifier, defineRule, defineVendor, defineModelFacts } from "ai-model-verifier";
+
+const { verify } = createVerifier({
+  vendors: [defineVendor({ id: "mywire", ... })],
+  rules: [defineRule({ id: "my-rule", layer: "probe", needs: ["probes"], applies: () => true, judge: async (ctx) => ... })],
+  omit: ["substituted"],
+  modelFacts: defineModelFacts([{ match: "my-model*", alwaysThinks: true }]),
+});
 ```
 
 ## What it detects
 
-`coding-tool` refusals (Kiro/Amazon Q wearing a Claude badge), scam pages,
-CJK language leaks from a substituted Chinese model, response-mixing proxies,
-foreign vendor identity, Claude tier substitution (opus billed, sonnet served),
-envelope-level model substitution, and (opt-in, `checkThinkingFloor`) a
-model that cannot switch thinking off answering with no reasoning tokens, the
-signature of a flash tier sold as Gemini 2.5 Pro, and (opt-in,
-`checkTokenizerFingerprint`) the input-token delta for a fixed text, which no
-system prompt can coach. Its job is drift: the delta is deterministic per
-endpoint, so a lane whose delta moves between two measurements changed its
-backend whatever the reply now calls itself. It does not name a tier on its
-own (Opus 4.6, Sonnet 4.6 and Haiku 4.5 share a tokenizer, and relays count
-differently from one another), so the signature table ships empty and is a
-per-endpoint calibration the caller supplies.
+Verdict rules, in precedence order: a must-think model answering with no
+reasoning tokens (`thinking-floor`, opt-in); a tokenizer fingerprint matching a
+cheaper tier under a caller-supplied calibration (`tokenizer-fingerprint`,
+opt-in; ships no table, see the rule's note); `coding-tool` refusals (Kiro or
+Amazon Q wearing a Claude badge); scam pages; CJK language leaks from a
+substituted Chinese model; response-mixing proxies (`mux`); a foreign vendor
+named as the maker; the reply's own `model` field naming another tier
+(`served-model-mismatch`) or another model (`substituted`); and a probe quorum
+that only fails on non-transient evidence.
+
+Note rules report without judging: the Claude thinking signature, token
+accounting against the billed usage, a self-reported tier, the response
+envelope (which vendor's shape and id minted the reply) and throughput.
+
+## Tests
+
+`bun test` replays recordings made with the 1.4.1 build (`test/parity`) and a
+set of synthetic endpoints. `test/parity/record.ts` records a new fixture.
 
 ## License
 

package/dist/engine/context.d.ts

@@ -0,0 +1,43 @@
+import type { ModelFacts } from "../models/facts";
+import type { TierSignatures } from "../rules/tokenizer-fingerprint";
+import type { TransportFn, TransportMode, TransportResult } from "../transport";
+import type { Checks, ProbeAttempt } from "../types";
+import type { BuiltRequest, ChatRequest, VendorAdapter, WireCtx } from "../vendors/types";
+export type ResolvedChecks = {
+    signature: {
+        strict: boolean;
+    } | null;
+    tokenTruth: boolean;
+    thinkingFloor: {
+        minCompletionTokens: number | null;
+    } | null;
+    tokenizerFingerprint: {
+        signatures: TierSignatures | undefined;
+    } | null;
+};
+export declare function resolveChecks(checks: Checks | undefined): ResolvedChecks;
+/** Everything a rule may read about the run. */
+export type RunCtx<V extends string = string> = {
+    model: string;
+    facts: ModelFacts;
+    requestedVendor: V;
+    /** Wire the requests go over (after a handshake fallback, not the requested one). */
+    wire: VendorAdapter<V>;
+    mode: TransportMode;
+    direct: boolean;
+    baseUrl: string;
+    apiKey: string;
+    timeoutMs: number;
+    transport: TransportFn;
+    bodyExtras?: Record<string, unknown>;
+    nonce: () => string;
+    onProbe?: (attempt: ProbeAttempt) => void;
+    checks: ResolvedChecks;
+};
+export declare const wireCtx: (ctx: RunCtx) => WireCtx;
+/** Multipart and binary bodies pass through untouched. */
+export declare function mergeBodyExtras(body: unknown, extras?: Record<string, unknown>): unknown;
+export declare function callWire(ctx: RunCtx, built: BuiltRequest): Promise<TransportResult>;
+export declare const buildChat: (ctx: RunCtx, req: Omit<ChatRequest, "model">) => BuiltRequest;
+export declare const chat: (ctx: RunCtx, req: Omit<ChatRequest, "model">) => Promise<TransportResult>;
+//# sourceMappingURL=context.d.ts.map

package/dist/engine/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/engine/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACR,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE;QAAE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7D,oBAAoB,EAAE;QAAE,UAAU,EAAE,cAAc,GAAG,SAAS,CAAA;KAAE,GAAG,IAAI,CAAC;CACzE,CAAC;AAEF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CA2BxE;AAED,gDAAgD;AAChD,MAAM,MAAM,MAAM,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,EAAE,CAAC,CAAC;IACnB,qFAAqF;IACrF,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,WAAW,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;IAC1C,MAAM,EAAE,cAAc,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,OAAO,QAAS,MAAM,KAAG,OAKpC,CAAC;AAEH,0DAA0D;AAC1D,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAGT;AAED,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAED,eAAO,MAAM,SAAS,QACf,MAAM,OACN,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,KAC9B,YAC4D,CAAC;AAEhE,eAAO,MAAM,IAAI,QAAS,MAAM,OAAO,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,6BAC7B,CAAC"}

package/dist/engine/context.js

@@ -0,0 +1,50 @@
+import { isRecord } from "../internal/utils";
+export function resolveChecks(checks) {
+    const c = checks ?? {};
+    return {
+        signature: c.signature
+            ? {
+                strict: typeof c.signature === "object" && c.signature.strict === true,
+            }
+            : null,
+        tokenTruth: c.tokenTruth === true,
+        thinkingFloor: c.thinkingFloor
+            ? {
+                minCompletionTokens: typeof c.thinkingFloor === "object"
+                    ? (c.thinkingFloor.minCompletionTokens ?? null)
+                    : null,
+            }
+            : null,
+        tokenizerFingerprint: c.tokenizerFingerprint
+            ? {
+                signatures: typeof c.tokenizerFingerprint === "object"
+                    ? c.tokenizerFingerprint.signatures
+                    : undefined,
+            }
+            : null,
+    };
+}
+export const wireCtx = (ctx) => ({
+    baseUrl: ctx.baseUrl,
+    apiKey: ctx.apiKey,
+    direct: ctx.direct,
+    facts: ctx.facts,
+});
+/** Multipart and binary bodies pass through untouched. */
+export function mergeBodyExtras(body, extras) {
+    if (!extras || !isRecord(body))
+        return body;
+    return { ...body, ...extras };
+}
+export function callWire(ctx, built) {
+    return ctx.transport({
+        mode: ctx.mode,
+        url: built.url,
+        headers: built.headers,
+        reqBody: mergeBodyExtras(built.body, ctx.bodyExtras),
+        timeoutMs: ctx.timeoutMs,
+    });
+}
+export const buildChat = (ctx, req) => ctx.wire.ops.chat({ model: ctx.model, ...req }, wireCtx(ctx));
+export const chat = (ctx, req) => callWire(ctx, buildChat(ctx, req));
+//# sourceMappingURL=context.js.map

package/dist/engine/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/engine/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAmB7C,MAAM,UAAU,aAAa,CAAC,MAA0B;IACtD,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;IACvB,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;YACpB,CAAC,CAAC;gBACE,MAAM,EACJ,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI;aACjE;YACH,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI;QACjC,aAAa,EAAE,CAAC,CAAC,aAAa;YAC5B,CAAC,CAAC;gBACE,mBAAmB,EACjB,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;oBACjC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,mBAAmB,IAAI,IAAI,CAAC;oBAC/C,CAAC,CAAC,IAAI;aACX;YACH,CAAC,CAAC,IAAI;QACR,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;YAC1C,CAAC,CAAC;gBACE,UAAU,EACR,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;oBACxC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,UAAU;oBACnC,CAAC,CAAC,SAAS;aAChB;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAqBD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,CAAC;IAChD,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,KAAK,EAAE,GAAG,CAAC,KAAK;CACjB,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAC7B,IAAa,EACb,MAAgC;IAEhC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,GAAW,EACX,KAAmB;IAEnB,OAAO,GAAG,CAAC,SAAS,CAAC;QACnB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;QACpD,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,GAAW,EACX,GAA+B,EACjB,EAAE,CAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAA+B,EAAE,EAAE,CACnE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC"}

package/dist/engine/evidence.d.ts

@@ -0,0 +1,40 @@
+import type { TransportResult } from "../transport";
+import { type RunCtx } from "./context";
+import { type ProbeEval } from "./probe-runner";
+export type FixedTextEvidence = {
+    short: TransportResult;
+    long: TransportResult;
+};
+export type ThinkingReplyEvidence = {
+    res: TransportResult;
+    /** Only when the strict replay ran: the endpoint accepted the block back. */
+    replayAccepted?: boolean;
+} | null;
+/**
+ * What the rules can ask for. Each key is collected at most once per run, so
+ * two rules reading the same replies (token truth and the fingerprint both use
+ * the fixed text) cost one set of requests.
+ */
+export type EvidenceBag = {
+    probes: ProbeEval[];
+    fixedText: FixedTextEvidence;
+    /** null when the wire has no count endpoint or the short reply had no usage. */
+    countTokens: TransportResult | null;
+    /** null when the model has no thinking mode to ask for. */
+    thinkingReply: ThinkingReplyEvidence;
+    /** null when the model may legitimately answer without thinking. */
+    floorReply: TransportResult | null;
+};
+export type EvidenceKey = keyof EvidenceBag;
+/** Collection order when several keys are needed: probes first, then the extras. */
+export declare const EVIDENCE_ORDER: readonly ["probes", "thinkingReply", "fixedText", "countTokens", "floorReply"];
+export declare class EvidenceStore {
+    private readonly probes;
+    private readonly fixedText;
+    private readonly countTokens;
+    private readonly thinkingReply;
+    private readonly floorReply;
+    constructor(ctx: RunCtx);
+    get<K extends EvidenceKey>(key: K): Promise<EvidenceBag[K]>;
+}
+//# sourceMappingURL=evidence.d.ts.map

package/dist/engine/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/engine/evidence.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAA2B,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAQ/D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,eAAe,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,eAAe,CAAC;IACrB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,IAAI,CAAC;AAET;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,gFAAgF;IAChF,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,2DAA2D;IAC3D,aAAa,EAAE,qBAAqB,CAAC;IACrC,oEAAoE;IACpE,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC;AAE5C,oFAAoF;AACpF,eAAO,MAAM,cAAc,gFAMgB,CAAC;AA8E5C,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuC;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IAEnE,YAAY,GAAG,EAAE,MAAM,EAMtB;IAED,GAAG,CAAC,CAAC,SAAS,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;CAe7D"}

package/dist/engine/evidence.js

@@ -0,0 +1,108 @@
+import { COUNT_PROBE_MAX_TOKENS, FLOOR_PROMPT, LONG_PROMPT, SHORT_PROMPT, SIGNATURE_PROMPT, } from "../probes/prompts";
+import { callWire, chat, wireCtx } from "./context";
+import { collectProbes } from "./probe-runner";
+const THINKING_BUDGET_TOKENS = 2000;
+/** Thinking plus answer; too small and an adaptive model skips thinking to fit. */
+const SIGNATURE_MAX_TOKENS = 16000;
+/** Room for the thoughts plus the word; too small truncates thinking and reads as a fake. */
+const FLOOR_MAX_TOKENS = 2048;
+/** Collection order when several keys are needed: probes first, then the extras. */
+export const EVIDENCE_ORDER = [
+    "probes",
+    "thinkingReply",
+    "fixedText",
+    "countTokens",
+    "floorReply",
+];
+const ok = (r) => r.status !== null && r.status < 400;
+async function collectFixedText(ctx) {
+    const ask = (prompt) => chat(ctx, {
+        maxTokens: COUNT_PROBE_MAX_TOKENS,
+        messages: [{ role: "user", content: prompt }],
+    });
+    const [short, long] = await Promise.all([
+        ask(SHORT_PROMPT),
+        ask(LONG_PROMPT),
+    ]);
+    return { short, long };
+}
+async function collectCountTokens(ctx, store) {
+    const count = ctx.wire.ops.countTokens;
+    if (!count)
+        return null;
+    const { short } = await store.get("fixedText");
+    if (!ok(short) || ctx.wire.read.meta(short.data).usage?.prompt == null)
+        return null;
+    return callWire(ctx, count({
+        model: ctx.model,
+        messages: [{ role: "user", content: SHORT_PROMPT }],
+    }, wireCtx(ctx)));
+}
+async function collectThinkingReply(ctx) {
+    const kind = ctx.facts.thinking;
+    if (kind === "none")
+        return null;
+    const messages = [{ role: "user", content: SIGNATURE_PROMPT }];
+    // Non-streaming on purpose: streaming an adaptive model silently drops the
+    // thinking block, so a real Claude would look unsigned.
+    const res = await chat(ctx, {
+        maxTokens: SIGNATURE_MAX_TOKENS,
+        messages,
+        thinking: { kind, budgetTokens: THINKING_BUDGET_TOKENS },
+    });
+    if (!ctx.checks.signature?.strict || !ok(res))
+        return { res };
+    const found = ctx.wire.read.thinkingBlock?.(res.data);
+    if (!found)
+        return { res };
+    // Hand the block back. Against the vendor this re-validates the signature;
+    // through a relay it does not (a forged 308-byte signature returned 200 on
+    // both upstreams measured), so it is reported as evidence, never a verdict.
+    const replay = await chat(ctx, {
+        maxTokens: 1,
+        messages: [...messages, { role: "assistant", content: [found.block] }],
+    });
+    // A network failure proves nothing; only an explicit rejection counts.
+    return { res, replayAccepted: replay.status === null || replay.status < 400 };
+}
+async function collectFloorReply(ctx) {
+    if (!ctx.facts.alwaysThinks)
+        return null;
+    return chat(ctx, {
+        maxTokens: FLOOR_MAX_TOKENS,
+        messages: [{ role: "user", content: FLOOR_PROMPT }],
+    });
+}
+const memo = (fn) => {
+    let p;
+    return () => (p ??= fn());
+};
+export class EvidenceStore {
+    probes;
+    fixedText;
+    countTokens;
+    thinkingReply;
+    floorReply;
+    constructor(ctx) {
+        this.probes = memo(() => collectProbes(ctx));
+        this.fixedText = memo(() => collectFixedText(ctx));
+        this.countTokens = memo(() => collectCountTokens(ctx, this));
+        this.thinkingReply = memo(() => collectThinkingReply(ctx));
+        this.floorReply = memo(() => collectFloorReply(ctx));
+    }
+    get(key) {
+        switch (key) {
+            case "probes":
+                return this.probes();
+            case "fixedText":
+                return this.fixedText();
+            case "countTokens":
+                return this.countTokens();
+            case "thinkingReply":
+                return this.thinkingReply();
+            case "floorReply":
+                return this.floorReply();
+        }
+    }
+}
+//# sourceMappingURL=evidence.js.map

package/dist/engine/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/engine/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAe,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAE/D,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,IAAI,CAAC;AA+B9B,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ;IACR,eAAe;IACf,WAAW;IACX,aAAa;IACb,YAAY;CAC6B,CAAC;AAE5C,MAAM,EAAE,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;AAEvE,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAC7B,IAAI,CAAC,GAAG,EAAE;QACR,SAAS,EAAE,sBAAsB;QACjC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;KAC9C,CAAC,CAAC;IACL,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,GAAG,CAAC,YAAY,CAAC;QACjB,GAAG,CAAC,WAAW,CAAC;KACjB,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,KAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI;QACpE,OAAO,IAAI,CAAC;IACd,OAAO,QAAQ,CACb,GAAG,EACH,KAAK,CACH;QACE,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;KACpD,EACD,OAAO,CAAC,GAAG,CAAC,CACb,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,GAAW;IAEX,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxE,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE;QAC1B,SAAS,EAAE,oBAAoB;QAC/B,QAAQ;QACR,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,sBAAsB,EAAE;KACzD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC3B,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE;QAC7B,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,uEAAuE;IACvE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE;QACf,SAAS,EAAE,gBAAgB;QAC3B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,IAAI,GAAG,CAAI,EAAoB,EAAE,EAAE;IACvC,IAAI,CAAyB,CAAC;IAC9B,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,OAAO,aAAa;IACP,MAAM,CAA6B;IACnC,SAAS,CAAmC;IAC5C,WAAW,CAAwC;IACnD,aAAa,CAAuC;IACpD,UAAU,CAAwC;IAEnE,YAAY,GAAW;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IAGD,GAAG,CAAC,GAAgB;QAClB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;CACF"}

package/dist/engine/handshake.d.ts

@@ -0,0 +1,16 @@
+import type { ConnectivityError } from "../types";
+import type { VendorAdapter } from "../vendors/types";
+import { type RunCtx } from "./context";
+export type HandshakeOutcome<V extends string> = {
+    ok: true;
+    wire: VendorAdapter<V>;
+    status: number;
+} | {
+    ok: false;
+    reason: ConnectivityError;
+    status: number | null;
+    corsBlocked: boolean;
+};
+/** The requested wire first, then its declared fallbacks, until one answers. */
+export declare function runHandshake<V extends string>(ctx: RunCtx<V>, vendors: readonly VendorAdapter<V>[]): Promise<HandshakeOutcome<V>>;
+//# sourceMappingURL=handshake.d.ts.map

package/dist/engine/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/engine/handshake.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAqB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAE3D,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,IACzC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAwEN,gFAAgF;AAChF,wBAAsB,YAAY,CAAC,CAAC,SAAS,MAAM,EACjD,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EACd,OAAO,EAAE,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,GACnC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CA6C9B"}

package/dist/{handshake.js → engine/handshake.js}

@@ -1,6 +1,6 @@
-import { PROVIDER_CONFIGS } from "./providers/config";
-import { probeTransport } from "./transport";
-import { isTransientError } from "./signals";
+import { isTransientError } from "../identity/signals";
+import { vendorFor } from "../vendors/table";
+import { callWire, wireCtx } from "./context";
 const HANDSHAKE_PROMPT = "hi";
 const HANDSHAKE_MAX_TOKENS = 1;
 function classifyStatus(status) {
@@ -40,23 +40,13 @@ function rejectsModel(data) {
             msg.includes("not supported") ||
             msg.includes("does not exist")));
 }
-async function tryFormat(args) {
-    const cfg = PROVIDER_CONFIGS[args.provider];
-    const built = cfg.buildRequest({
-        baseUrl: args.baseUrl,
-        apiKey: args.apiKey,
-        model: args.model,
-        prompt: HANDSHAKE_PROMPT,
+async function tryWire(ctx, wire) {
+    const built = wire.ops.chat({
+        model: ctx.model,
         maxTokens: HANDSHAKE_MAX_TOKENS,
-        direct: args.mode === "direct",
-    });
-    const res = await args.transport({
-        mode: args.mode,
-        url: built.url,
-        headers: built.headers,
-        reqBody: built.body,
-        timeoutMs: args.timeoutMs,
-    });
+        messages: [{ role: "user", content: HANDSHAKE_PROMPT }],
+    }, wireCtx(ctx));
+    const res = await callWire(ctx, built);
     if (res.corsBlocked)
         return { outcome: "cors", status: null, corsBlocked: true };
     if (res.status === null)
@@ -68,15 +58,21 @@ async function tryFormat(args) {
         corsBlocked: false,
     };
 }
-export async function runHandshake(opts) {
-    const transport = opts.transport ?? probeTransport;
-    const order = opts.provider === "openai" ? ["openai"] : [opts.provider, "openai"];
+/** The requested wire first, then its declared fallbacks, until one answers. */
+export async function runHandshake(ctx, vendors) {
+    const order = [
+        ctx.wire,
+        ...ctx.wire.fallbackWires.flatMap((id) => {
+            const w = vendorFor(vendors, id);
+            return w ? [w] : [];
+        }),
+    ];
     let sawAuth = false;
     let sawModelRejected = false;
     let sawTransient = false;
     let lastStatus = null;
-    for (const provider of order) {
-        const r = await tryFormat({ ...opts, provider, transport });
+    for (const wire of order) {
+        const r = await tryWire(ctx, wire);
         lastStatus = r.status;
         if (r.outcome === "cors")
             return {
@@ -86,12 +82,7 @@ export async function runHandshake(opts) {
                 corsBlocked: true,
             };
         if (r.outcome === "ok")
-            return {
-                ok: true,
-                resolvedProvider: provider,
-                mode: opts.mode,
-                status: r.status,
-            };
+            return { ok: true, wire, status: r.status };
         if (r.outcome === "auth")
             sawAuth = true;
         if (r.outcome === "model")
@@ -99,43 +90,24 @@ export async function runHandshake(opts) {
         if (r.outcome === "transient")
             sawTransient = true;
     }
+    const fail = (reason) => ({
+        ok: false,
+        reason,
+        status: lastStatus,
+        corsBlocked: false,
+    });
     // Before the key check: a gateway that rejects the model name often answers
-    // 403 on the second format too, which would otherwise read as a bad key.
+    // 403 on the second wire too, which would otherwise read as a bad key.
     if (sawModelRejected)
-        return {
-            ok: false,
-            reason: "model-rejected",
-            status: lastStatus,
-            corsBlocked: false,
-        };
+        return fail("model-rejected");
     if (sawAuth)
-        return {
-            ok: false,
-            reason: "invalid-key",
-            status: lastStatus,
-            corsBlocked: false,
-        };
+        return fail("invalid-key");
     if (lastStatus === null)
-        return {
-            ok: false,
-            reason: "unreachable",
-            status: null,
-            corsBlocked: false,
-        };
-    // Every format answered 429/5xx: the endpoint is having a bad moment, which
-    // is never evidence that it speaks no supported format.
+        return fail("unreachable");
+    // Every wire answered 429/5xx: the endpoint is having a bad moment, which is
+    // never evidence that it speaks no supported format.
     if (sawTransient)
-        return {
-            ok: false,
-            reason: "endpoint-busy",
-            status: lastStatus,
-            corsBlocked: false,
-        };
-    return {
-        ok: false,
-        reason: "no-format",
-        status: lastStatus,
-        corsBlocked: false,
-    };
+        return fail("endpoint-busy");
+    return fail("no-format");
 }
 //# sourceMappingURL=handshake.js.map

package/dist/engine/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../../src/engine/handshake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAe,MAAM,WAAW,CAAC;AAW3D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,SAAS,cAAc,CACrB,MAAc;IAEd,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,gBAAgB,CAAC,QAAQ,MAAM,EAAE,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG;IACxB,iBAAiB;IACjB,qBAAqB;IACrB,eAAe;IACf,eAAe;CAChB,CAAC;AAEF,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,GAAG,GAAI,IAAmC,EAAE,KAAK,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,MAAM,GAAG,GAA4D,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,MAAM,GAAG,GACP,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAClC,CAAC;AACJ,CAAC;AAID,KAAK,UAAU,OAAO,CACpB,GAAc,EACd,IAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CACzB;QACE,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;KACxD,EACD,OAAO,CAAC,GAAG,CAAC,CACb,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,WAAW;QACjB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QACrB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,OAAO,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACvE,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAc,EACd,OAAoC;IAEpC,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,IAAI;QACR,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACvC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,CAAC,CAAC;KACH,CAAC;IAEF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,CAAC;QACrE,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAAE,gBAAgB,GAAG,IAAI,CAAC;QACnD,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW;YAAE,YAAY,GAAG,IAAI,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAuB,EAAE,CAAC,CAAC;QAChE,EAAE,EAAE,KAAK;QACT,MAAM;QACN,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IACH,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,gBAAgB;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,6EAA6E;IAC7E,qDAAqD;IACrD,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC"}

package/dist/engine/probe-runner.d.ts

@@ -0,0 +1,14 @@
+import { type ProbeSignal } from "../probes/table";
+import type { ProbeOutcome } from "../types";
+import { type RunCtx } from "./context";
+/** A probe's outcome plus what the rules need but the result never carries. */
+export type ProbeEval = ProbeOutcome & {
+    text: string | undefined;
+    raw: unknown;
+    corsBlocked: boolean;
+};
+export declare function probeReason(pass: boolean, signal: ProbeSignal, muxFailure: boolean, transient: boolean): string;
+export declare function collectProbes(ctx: RunCtx): Promise<ProbeEval[]>;
+/** The probe that generated the most: the reply worth reading metadata from. */
+export declare function richestProbe(probes: readonly ProbeEval[]): ProbeEval | null;
+//# sourceMappingURL=probe-runner.d.ts.map

package/dist/engine/probe-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-runner.d.ts","sourceRoot":"","sources":["../../src/engine/probe-runner.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAS7D,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG;IACrC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,wBAAgB,WAAW,CACzB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,OAAO,EACnB,SAAS,EAAE,OAAO,GACjB,MAAM,CAUR;AAsJD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAE/D;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,GAAG,IAAI,CAM3E"}