captchakraken 3.0.0 → 3.2.0

package/dist/types.d.ts

@@ -1,3 +1,4 @@
+import type { RoundVerdict } from './verdicts';
 import type { Humanizer, TouchTransform } from './humanize.js';
 import type { ActionKind, FrameRole, HumanizationMode, PromptFamily, SolveStage, Vendor } from './kinds';
 /** One intermediate stage of a solve, handed to `CaptchaKrakenConfig.onStep`. */
@@ -43,9 +44,11 @@ export interface CaptchaKrakenConfig {
     };
     /** Solve rounds that fit the timeout. Default 6. */
     maxSolveLoops?: number;
-    /** Consecutive identical answers before the solve is abandoned. Default 2. */
+    /** How long to keep looking for a widget the page has not drawn yet, before "no captcha" is believed. Not charged to `overallSolveTimeoutMs`. Default 15000. */
+    detectionTimeoutMs?: number;
+    /** Repeats of one answer on one board before the solve ends; the first repeats are re-asked at a fresh sample. Default 2. */
     maxNoProgressRounds?: number;
-    /** Dwell after a round that answered nothing. Default 1200. */
+    /** @deprecated Ignored since 3.2.0: a round that performed nothing goes straight on to the next. */
     postSolveDelayMs?: number;
     /** Whole-solve time limit. Default 45000. */
     overallSolveTimeoutMs?: number;
@@ -105,6 +108,8 @@ export interface CaptchaKrakenConfig {
     keyframeWaitPollMs?: number;
     /** Burst ceiling for a board that never repeats a screen. Default 12000. */
     videoBurstMaxMs?: number;
+    /** Safety ceiling on the camera that films an animated board across rounds. Default 120000: it is meant to end with the solve, not on this clock. */
+    videoFilmMaxMs?: number;
     /** Consecutive moved settle polls that mean animated. Default 5. */
     animatedMotionStreak?: number;
     /** Record while the still is being read, so a cycling board is known before its answer runs. Default true. */
@@ -117,11 +122,11 @@ export interface CaptchaKrakenConfig {
     elementScreenshotTimeoutMs?: number;
     /** Timeout for an `onStep` screenshot. Default 2000. */
     stepScreenshotTimeoutMs?: number;
-    /** Re-detect retries after a stale handle. Default 3. */
+    /** @deprecated Ignored since 3.2.0: a stale handle now counts against `maxSolveLoops`. */
     maxStaleElementRetries?: number;
-    /** Backoff before re-detecting. Default 900. */
+    /** The pause before a failed round is tried again. Default 900. */
     staleElementBackoffMs?: number;
-    /** Retries when "unsupported" arrives mid-solve on a transitional frame. Default 3. */
+    /** @deprecated Ignored since 3.2.0: an unusable answer now counts against `maxSolveLoops`. */
     maxUnsupportedReSolves?: number;
 }
 export interface BoundingBox {
@@ -188,4 +193,6 @@ export interface SolveResult {
     };
     /** Milliseconds per phase, plus `total`. */
     phases?: Record<string, number>;
+    /** What the vendor's own server answered, in order, for the vendors whose answer is readable. */
+    verdicts: RoundVerdict[];
 }

package/dist/verdicts.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The vendor's own answer to each submitted round, read off the wire. Mirrors python/src/captchakraken/verdicts.py.
+ *
+ * Every shape below was recorded against the vendor's public demo page, never inferred: a DOM done-signal can only
+ * say "something changed", while the answer-check response says whether the round was taken. A vendor with no
+ * readable answer (Turnstile, and the rest of the table) is judged by the DOM signals in the driver instead.
+ */
+import { Verdict, Vendor } from './kinds';
+import type { PlaywrightPage } from './playwright-types';
+export interface RoundVerdict {
+    vendor: Vendor;
+    verdict: Verdict;
+}
+export interface VerdictEndpoint {
+    /** A URL substring naming the vendor's own endpoint. */
+    marker: string;
+    read: (body: string) => Verdict | null;
+}
+/** Only a vendor listed here has a readable answer; the rest are judged by the DOM done-signals. */
+export declare const VERDICT_ENDPOINTS: Partial<Record<Vendor, readonly VerdictEndpoint[]>>;
+/** The vendor and endpoint whose marker the URL carries, so a listener reads only the bodies it can judge. */
+export declare function endpointFor(url: string): {
+    vendor: Vendor;
+    endpoint: VerdictEndpoint;
+} | null;
+export declare function readVerdict(url: string, status: number, body: string): RoundVerdict | null;
+/**
+ * Every verdict the page's network carries while a solve runs.
+ *
+ * A page-level listener sees the vendors' cross-origin frames too. It is optional: a page object with no `on`
+ * records nothing, and the driver then judges every round by the DOM, as it always has.
+ */
+export declare class VerdictLog {
+    private readonly page;
+    readonly verdicts: RoundVerdict[];
+    private read;
+    private pending;
+    private readonly listener;
+    constructor(page: PlaywrightPage);
+    /** The verdicts that arrived since the last call, once every body already on the wire has been read. */
+    fresh(): Promise<RoundVerdict[]>;
+    /** The last accept or reject, which is what the round came to. */
+    decisive(): Verdict | null;
+    close(): Promise<void>;
+}

package/dist/verdicts.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerdictLog = exports.VERDICT_ENDPOINTS = void 0;
+exports.endpointFor = endpointFor;
+exports.readVerdict = readVerdict;
+/**
+ * The vendor's own answer to each submitted round, read off the wire. Mirrors python/src/captchakraken/verdicts.py.
+ *
+ * Every shape below was recorded against the vendor's public demo page, never inferred: a DOM done-signal can only
+ * say "something changed", while the answer-check response says whether the round was taken. A vendor with no
+ * readable answer (Turnstile, and the rest of the table) is judged by the DOM signals in the driver instead.
+ */
+const kinds_1 = require("./kinds");
+// The vendors' own HTTP refusal: hCaptcha's frame words a 429 as "Your computer or network has sent too many requests".
+const TOO_MANY_REQUESTS = 429;
+const parse = (body) => {
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        return null;
+    }
+};
+/** A JSON object whose boolean `pass` is the verdict. */
+const passField = (body) => {
+    const passed = parse(body)?.pass;
+    return typeof passed !== 'boolean' ? null : passed ? kinds_1.Verdict.ACCEPTED : kinds_1.Verdict.REJECTED;
+};
+/** A JSON array behind the `)]}'` anti-hijacking line. */
+const xssiArray = (body) => {
+    const data = parse(body.startsWith(")]}'") && body.includes('\n') ? body.slice(body.indexOf('\n') + 1) : body);
+    return Array.isArray(data) && data.length ? data : null;
+};
+/** `["uvresp", token, 1, lifetime, ...]` when taken; `["uvresp", context, 0, ..., ["rresp", ...next board]]` when refused. */
+const userVerify = (body) => {
+    const data = xssiArray(body);
+    if (!data || data[0] !== 'uvresp' || data.length < 3)
+        return null;
+    return data[2] === 1 ? kinds_1.Verdict.ACCEPTED : data[2] === 0 ? kinds_1.Verdict.REJECTED : null;
+};
+const newBoard = (body) => (xssiArray(body)?.[0] === 'rresp' ? kinds_1.Verdict.NEW_CHALLENGE : null);
+/** `callback({...})` whose `data.result` is the verdict. */
+const jsonpResult = (body) => {
+    const start = body.indexOf('(');
+    const end = body.lastIndexOf(')');
+    const data = (start >= 0 && start < end ? parse(body.slice(start + 1, end)) : null);
+    const result = data?.status === 'success' ? data.data?.result : undefined;
+    return result === 'success' ? kinds_1.Verdict.ACCEPTED : result === 'fail' ? kinds_1.Verdict.REJECTED : null;
+};
+const urlOnly = () => kinds_1.Verdict.NEW_CHALLENGE;
+/** Only a vendor listed here has a readable answer; the rest are judged by the DOM done-signals. */
+exports.VERDICT_ENDPOINTS = {
+    // The deal endpoint's body is encrypted, so its URL is the whole signal.
+    [kinds_1.Vendor.HCAPTCHA]: [
+        { marker: 'hcaptcha.com/checkcaptcha/', read: passField },
+        { marker: 'hcaptcha.com/getcaptcha/', read: urlOnly },
+    ],
+    [kinds_1.Vendor.RECAPTCHA]: [
+        { marker: '/recaptcha/api2/userverify', read: userVerify },
+        { marker: '/recaptcha/api2/reload', read: newBoard },
+    ],
+    [kinds_1.Vendor.GEETEST]: [
+        { marker: 'geetest.com/verify', read: jsonpResult },
+        { marker: 'geetest.com/load', read: urlOnly },
+    ],
+};
+/** The vendor and endpoint whose marker the URL carries, so a listener reads only the bodies it can judge. */
+function endpointFor(url) {
+    return Object.entries(exports.VERDICT_ENDPOINTS)
+        .flatMap(([vendor, endpoints]) => endpoints.map((endpoint) => ({ vendor, endpoint })))
+        .find(({ endpoint }) => url.includes(endpoint.marker)) ?? null;
+}
+function readVerdict(url, status, body) {
+    const found = endpointFor(url);
+    if (!found)
+        return null;
+    if (status === TOO_MANY_REQUESTS)
+        return { vendor: found.vendor, verdict: kinds_1.Verdict.BLOCKED };
+    const verdict = status >= 200 && status < 300 ? found.endpoint.read(body) : null;
+    return verdict ? { vendor: found.vendor, verdict } : null;
+}
+/**
+ * Every verdict the page's network carries while a solve runs.
+ *
+ * A page-level listener sees the vendors' cross-origin frames too. It is optional: a page object with no `on`
+ * records nothing, and the driver then judges every round by the DOM, as it always has.
+ */
+class VerdictLog {
+    constructor(page) {
+        this.page = page;
+        this.verdicts = [];
+        this.read = 0;
+        this.pending = [];
+        this.listener = (response) => {
+            const url = response.url();
+            const status = response.status();
+            if (!endpointFor(url))
+                return;
+            const body = status === TOO_MANY_REQUESTS ? Promise.resolve('') : response.text();
+            this.pending.push(body.then((text) => {
+                const verdict = readVerdict(url, status, text);
+                if (verdict)
+                    this.verdicts.push(verdict);
+            }).catch(() => { }));
+        };
+        page.on?.('response', this.listener);
+    }
+    /** The verdicts that arrived since the last call, once every body already on the wire has been read. */
+    async fresh() {
+        await Promise.all(this.pending.splice(0));
+        const fresh = this.verdicts.slice(this.read);
+        this.read = this.verdicts.length;
+        return fresh;
+    }
+    /** The last accept or reject, which is what the round came to. */
+    decisive() {
+        return [...this.verdicts].reverse().map((v) => v.verdict)
+            .find((v) => v === kinds_1.Verdict.ACCEPTED || v === kinds_1.Verdict.REJECTED) ?? null;
+    }
+    async close() {
+        this.page.off?.('response', this.listener);
+        await Promise.all(this.pending.splice(0));
+    }
+}
+exports.VerdictLog = VerdictLog;

package/package.json

@@ -1,14 +1,15 @@
 {
   "name": "captchakraken",
-  "version": "3.0.0",
-  "description": "Captcha solver for Playwright and Puppeteer. Finds the captcha, reads the puzzle with a fine-tuned Qwen3.5-9B vision model, and clicks, drags, slides or types through to a token \u2014 reCAPTCHA, hCaptcha, GeeTest, NetEase Yidun, Tencent, Lemin, Prosopo, Turnstile and distorted text. Hosted API or self-hosted.",
+  "version": "3.2.0",
+  "description": "Captcha solver for Playwright and Puppeteer. Finds the captcha, reads the puzzle with a fine-tuned Qwen3.5-9B vision model, and clicks, drags, slides or types through to a token \u2014 reCAPTCHA, GeeTest, NetEase Yidun, Tencent, Lemin, Prosopo, Turnstile and distorted text. Hosted API or self-hosted.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
     "dist",
     "NOTICE",
     "python",
-    "scripts",
+    "!python/**/__pycache__",
+    "scripts/setup-python.js",
     "AGENTS.md",
     "LICENSE"
   ],
@@ -24,14 +25,13 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/JWriter20/CaptchaKraken.git",
+    "url": "git+https://github.com/CaptchaKraken/CaptchaKraken.git",
     "directory": "js"
   },
   "keywords": [
     "captcha",
     "captcha-solver",
     "recaptcha",
-    "hcaptcha",
     "geetest",
     "turnstile",
     "yidun",
@@ -49,9 +49,9 @@
   "license": "SEE LICENSE IN LICENSE",
   "type": "commonjs",
   "bugs": {
-    "url": "https://github.com/JWriter20/CaptchaKraken/issues"
+    "url": "https://github.com/CaptchaKraken/CaptchaKraken/issues"
   },
-  "homepage": "https://github.com/JWriter20/CaptchaKraken#readme",
+  "homepage": "https://github.com/CaptchaKraken/CaptchaKraken#readme",
   "dependencies": {
     "cursory-js": "2.0.1"
   },

package/python/AGENTS.md

@@ -9,7 +9,7 @@ browser — bring your own — and every inference goes to a model endpoint you
 point it at. The `serve` extra is what turns this box into that endpoint.
 
 Repo, guides and the full agent guide:
-<https://github.com/JWriter20/CaptchaKraken>
+<https://github.com/CaptchaKraken/CaptchaKraken>
 
 ---
 
@@ -71,10 +71,15 @@ module docstring of `captchakraken/cli.py` lists every mode with its arguments.
 ## 4. Errors
 
 `PageSolver.solve()` raises from `captchakraken.page_solver`:
-`NoCaptchaFoundError` (no interactive widget — usually not a failure),
-`UnsupportedChallengeError`, `AnimatedChallengeError` (the challenge could not
-be *recorded*), `PageClosedError`, and `CaptchaSolveError`, which is the base
-class of the other four — catch it last or it swallows them. The TypeScript
+`NoCaptchaFoundError` (no interactive widget appeared within
+`detection_timeout_ms` — usually not a failure), `VendorBlockedError` (the
+vendor refused to serve this client at all), `UnsupportedChallengeError`,
+`AnimatedChallengeError` (the challenge could not be *recorded*),
+`PageClosedError`, and `CaptchaSolveError`, which is the base class of the
+other five — catch it last or it swallows them. Apart from a vendor refusal, a
+closed page and the time budget, a solve only gives up once every one of
+`max_solve_loops` has been spent. `result.verdicts` holds the vendor's own
+answer to each round where its answer-check response is readable. The TypeScript
 port raises none of these; it exports one error class and throws plain `Error`
 otherwise.
 
@@ -100,7 +105,7 @@ generation and the weights drift apart.
 
 - **Never invent a number.** Every accuracy, latency and price figure we publish
   is on one page —
-  [docs/benchmarks.md](https://github.com/JWriter20/CaptchaKraken/blob/main/docs/benchmarks.md).
+  [docs/benchmarks.md](https://github.com/CaptchaKraken/CaptchaKraken/blob/main/docs/benchmarks.md).
   Quote it as written; do not derive, round, or convert anything, and do not
   read a static-image rate as a promise about a browser run.
 - **Never print an API key** into a transcript, a log, or a commit. Use
@@ -116,7 +121,7 @@ generation and the weights drift apart.
 - **Respect the licence.** Building automation with this is fine; selling the
   solve, or shipping it inside a browser or automation product, is not. See
   [LICENSE](./LICENSE) and
-  [docs/licensing.md](https://github.com/JWriter20/CaptchaKraken/blob/main/docs/licensing.md).
+  [docs/licensing.md](https://github.com/CaptchaKraken/CaptchaKraken/blob/main/docs/licensing.md).
 - **Changing this package's own code?** Its rules are in
-  [CONTRIBUTING.md](https://github.com/JWriter20/CaptchaKraken/blob/main/CONTRIBUTING.md),
+  [CONTRIBUTING.md](https://github.com/CaptchaKraken/CaptchaKraken/blob/main/CONTRIBUTING.md),
   not here.

package/python/LICENSE

@@ -141,5 +141,5 @@ This text is a license, not legal advice. If the boundary between a permitted
 "value-add" product and a prohibited "thin wrapper", or between using the
 Software with a browser and shipping it as part of one, is unclear for your use
 case, ask by opening an issue or messaging the maintainer on GitHub:
-https://github.com/JWriter20/CaptchaKraken
+https://github.com/CaptchaKraken/CaptchaKraken
 --------------------------------------------------------------------------------

package/python/README.md

@@ -1,12 +1,12 @@
 <p align="center">
-  <img src="https://raw.githubusercontent.com/JWriter20/CaptchaKraken/main/docs/assets/logo-card.png" alt="CaptchaKraken" width="128" height="128">
+  <img src="https://raw.githubusercontent.com/CaptchaKraken/CaptchaKraken/main/docs/assets/logo-card.png" alt="CaptchaKraken" width="128" height="128">
 </p>
 
 <h1 align="center">captchakraken</h1>
 
 <p align="center">
   <b>A captcha solver for browser automation.</b><br>
-  The Python engine and CLI behind <a href="https://github.com/JWriter20/CaptchaKraken">CaptchaKraken</a>.
+  The Python engine and CLI behind <a href="https://github.com/CaptchaKraken/CaptchaKraken">CaptchaKraken</a>.
 </p>
 
 OpenCV tile detection plus a fine-tuned **Qwen3.5-9B** vision model. Give it a
@@ -19,34 +19,31 @@ nothing at all.
 
 > For demo videos, accuracy numbers, the browser driver, and the full
 > self-hosting guide, see the main repo
-> **[CaptchaKraken](https://github.com/JWriter20/CaptchaKraken)**.
+> **[CaptchaKraken](https://github.com/CaptchaKraken/CaptchaKraken)**.
 
 ## Watch it work
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/JWriter20/CaptchaKraken/main/docs/assets/demo/hcaptcha_grid.webp" width="260"
-       alt="A live hCaptcha image select challenge being solved end to end">
-  <img src="https://raw.githubusercontent.com/JWriter20/CaptchaKraken/main/docs/assets/demo/recaptcha_4x4.webp" width="260"
+  <img src="https://raw.githubusercontent.com/CaptchaKraken/CaptchaKraken/main/docs/assets/demo/recaptcha_4x4.webp" width="260"
        alt="A live reCAPTCHA 4×4 tile grid challenge being solved end to end">
-  <img src="https://raw.githubusercontent.com/JWriter20/CaptchaKraken/main/docs/assets/demo/geetest_slide.webp" width="260"
+  <img src="https://raw.githubusercontent.com/CaptchaKraken/CaptchaKraken/main/docs/assets/demo/geetest_slide.webp" width="260"
        alt="A live GeeTest slide jigsaw challenge being solved end to end">
 </p>
 
-hCaptcha image select 12/12 in 10.5s · reCAPTCHA 4×4 tile grid 9/10 in 8.7s · GeeTest slide jigsaw 10/10 in 7.6s — median of the solved attempts, measured 2026-08-19 on **captcha-v12**
+reCAPTCHA 4×4 tile grid 9/10 in 8.7s · GeeTest slide jigsaw 10/10 in 7.6s — median of the solved attempts, measured 2026-08-19 on **captcha-v12**
 against each vendor's own public demo page. Counts rather than percentages
 because ten attempts is not a percentage. Idle time is cut from the clips, so
 they run shorter than the solves they show.
 
-**Ten more puzzle types**, as video and with the full method, at
+**More puzzle types**, as video and with the full method, at
 [captchakraken.com](https://captchakraken.com) and in the
-[main repo](https://github.com/JWriter20/CaptchaKraken#watch-it-work).
+[main repo](https://github.com/CaptchaKraken/CaptchaKraken#watch-it-work).
 
 ## What it solves
 
 | Vendor | Puzzles |
 |---|---|
 | **reCAPTCHA** | 3×3 and 4×4 image grids, including the dynamic re-deal |
-| **hCaptcha** | Image grids, click, drag, connect-the-path, tetris-fit, animated |
 | **GeeTest** v3 + v4 | Slide, icon, nine, svg, gobang, iconcrush |
 | **NetEase Yidun** | Jigsaw, picture-click, icon-click |
 | **Tencent, Lemin, Prosopo** | Slide, cropped-image and grid flows |
@@ -67,7 +64,7 @@ pip install "captchakraken[serve]"   # + the serving stack (vLLM/torch) to self-
 The base install is lightweight — everything you need to solve captchas against
 a vLLM server (local or remote). The `[serve]` extra pulls the heavy stack only
 if you want to run the model yourself. The one-command
-[`setup.sh`](https://github.com/JWriter20/CaptchaKraken) installs `[serve]`,
+[`setup.sh`](https://github.com/CaptchaKraken/CaptchaKraken) installs `[serve]`,
 downloads the weights, and writes an env file for you.
 
 ## No GPU? Use the hosted API
@@ -100,7 +97,7 @@ captchakraken server start | stop | status | run
 ```bash
 # Solve an image/video: classify → find_grid → plan. Prints the click actions.
 captchakraken path/to/captcha.png
-captchakraken path/to/captcha.png --puzzle-source hcaptcha
+captchakraken path/to/captcha.png --puzzle-source recaptcha
 ```
 
 ```python

package/python/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "captchakraken"
-version = "3.0.0"
+version = "3.2.0"
 description = "Captcha-solving engine and CLI: OpenCV grid detection plus a fine-tuned Qwen3.5-9B vision model, for image grids, click and drag puzzles, sliders, distorted text and animated challenges. Hosted API or self-hosted on vLLM."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -15,7 +15,7 @@ requires-python = ">=3.11"
 license = { file = "LICENSE" }
 authors = [{ name = "Jake Writer" }]
 keywords = [
-  "captcha", "captcha-solver", "recaptcha", "hcaptcha", "geetest", "turnstile",
+  "captcha", "captcha-solver", "recaptcha", "geetest", "turnstile",
   "yidun", "tencent-captcha", "playwright", "browser-automation", "scraping",
   "anti-bot", "vllm", "qwen", "computer-vision", "ocr",
 ]
@@ -92,10 +92,10 @@ captchakraken = "captchakraken.cli:main"
 
 [project.urls]
 Homepage = "https://captchakraken.com"
-Documentation = "https://github.com/JWriter20/CaptchaKraken#readme"
-Source = "https://github.com/JWriter20/CaptchaKraken"
-Issues = "https://github.com/JWriter20/CaptchaKraken/issues"
-Changelog = "https://github.com/JWriter20/CaptchaKraken/blob/main/CHANGELOG.md"
+Documentation = "https://github.com/CaptchaKraken/CaptchaKraken#readme"
+Source = "https://github.com/CaptchaKraken/CaptchaKraken"
+Issues = "https://github.com/CaptchaKraken/CaptchaKraken/issues"
+Changelog = "https://github.com/CaptchaKraken/CaptchaKraken/blob/main/CHANGELOG.md"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/captchakraken"]

package/python/src/captchakraken/__init__.py

@@ -30,7 +30,9 @@ from .kinds import (
     PromptFamily,
     RetryMode,
     Vendor,
+    Verdict,
 )
+from .verdicts import RoundVerdict
 
 from .humanize import (
     AppiumTouchBackend,
@@ -96,7 +98,9 @@ __all__ = [
     "PauseKind",
     "PromptFamily",
     "RetryMode",
+    "RoundVerdict",
     "Vendor",
+    "Verdict",
 ]
 
-__version__ = "3.0.0"
+__version__ = "3.2.0"

package/python/src/captchakraken/cli.py

@@ -177,7 +177,10 @@ def _report_outcome(args):
     try:
         from .planner import ActionPlanner
 
-        return {"reported": bool(ActionPlanner().report_outcome(args[0], Outcome(args[1]) == Outcome.SOLVED))}
+        planner = ActionPlanner()
+        reported = planner.report_outcome(args[0], Outcome(args[1]) == Outcome.SOLVED)
+        # `supported` false is the self-hosted 404, which tells the driver to stop spawning this.
+        return {"reported": bool(reported), "supported": planner.outcome_supported}
     except Exception as exc:
         return {"reported": False, "error": str(exc)}
 
@@ -185,6 +188,7 @@ def _report_outcome(args):
 def _serve(args):
     """Persistent CV worker: one JSON request per stdin line, one JSON reply per stdout line."""
     from .image_processor import ImageProcessor
+    from .tool_calls.find_checkbox import find_checkbox
     from .tool_calls.find_grid import find_grid
 
     def handle(req):
@@ -206,6 +210,8 @@ def _serve(args):
             return match_region(req["ref"], req["live"], float(req["cx"]), float(req["cy"]), req.get("tolerance"))
         if cmd == "board-painted":
             return board_painted(req["image"], req.get("floor"), req.get("box"))
+        if cmd == "find-checkbox":
+            return find_checkbox(req["image"])
         if cmd == "track-piece":
             return track_piece(req["before"], req["after"], req.get("exclude"), req.get("travel") or 0.0)
         raise ValueError(f"unknown cmd: {cmd!r}")

package/python/src/captchakraken/kinds.py

@@ -104,6 +104,15 @@ class Outcome(StrEnum):
     FAILED = "failed"
 
 
+class Verdict(StrEnum):
+    """What the vendor's own server answered a round: BLOCKED is a refusal to serve at all, not a wrong answer."""
+
+    ACCEPTED = "accepted"
+    REJECTED = "rejected"
+    NEW_CHALLENGE = "new-challenge"
+    BLOCKED = "blocked"
+
+
 class Phase(StrEnum):
     """Timing phases. Only INFERENCE and MOUSE are productive; everything else is waiting."""