@xagents_in/unmask 0.1.1 → 0.1.2

package/dist/model/client.mjs

@@ -9,7 +9,6 @@ const MODELS = new Set([
   "gemini-3-flash-preview",
 ]);
 export const DEFAULT_MODEL_ROUTE = Object.freeze([
-  Object.freeze({ modelId: "gemini-3.5-flash", thinkingLevel: "high" }),
   Object.freeze({
     modelId: "gemini-3-flash-preview",
     thinkingLevel: "minimal",
@@ -661,28 +660,46 @@ const delay = (ms, signal) =>
 function quotaScope(body, modelId) {
   const details = body?.error?.details;
   if (!Array.isArray(details) || details.length > 32) return "unknown";
+  const windows = [];
+  const normalize = (value) => value.toLowerCase().replace(/[^a-z0-9]/g, "");
+  function bindingWindow(binding, identity) {
+    if (/hour|week|month|year|second/.test(identity)) return null;
+    if (binding.includes("perminute") && !/day|daily/.test(identity))
+      return "minute";
+    if (binding.includes("perday") && !identity.includes("perminute"))
+      return "daily";
+    return null;
+  }
   for (const info of details.filter(
     (item) => item?.["@type"] === "type.googleapis.com/google.rpc.ErrorInfo",
   )) {
     const metadata = info.metadata;
-    const identity =
-      `${info.reason ?? ""} ${metadata?.quota_limit ?? ""} ${metadata?.quota_metric ?? ""}`
-        .toLowerCase()
-        .replace(/[^a-z0-9]/g, "");
-    if (identity.includes("day")) return "daily";
+    const binding = normalize(
+      `${metadata?.quota_limit ?? ""} ${metadata?.quota_metric ?? ""}`,
+    );
+    const reason = normalize(String(info.reason ?? ""));
     if (
       ["global", "project"].includes(metadata?.scope) ||
-      (identity.includes("perproject") && !identity.includes("permodel"))
+      reason.includes("global") ||
+      (reason.includes("project") && !reason.includes("model")) ||
+      (binding.includes("perproject") && !binding.includes("permodel"))
     )
       return "global";
+    const window = bindingWindow(binding, binding + reason);
     if (
       !metadata ||
+      !["", "ratelimitexceeded", "quotaexceeded", "resourceexhausted"].includes(
+        reason,
+      ) ||
       ![modelId, `models/${modelId}`].includes(metadata.model) ||
-      !identity.includes("permodel") ||
-      !identity.includes("perminute") ||
-      /hour|week|month|year|second/.test(identity)
+      !binding.includes("permodel") ||
+      !window ||
+      (metadata.scope !== undefined &&
+        metadata.scope !== "model" &&
+        !(metadata.scope === "daily" && window === "daily"))
     )
       return "unknown";
+    windows.push(window);
   }
   const violations = [];
   for (const detail of details) {
@@ -697,40 +714,34 @@ function quotaScope(body, modelId) {
     violations.push(...detail.violations);
   }
   if (!violations.length) return "unknown";
-  if (
-    violations.some((item) =>
-      `${item?.quotaId ?? ""} ${item?.quotaMetric ?? ""}`
-        .toLowerCase()
-        .replace(/[^a-z0-9]/g, "")
-        .includes("day"),
-    )
-  )
-    return "daily";
   for (const item of violations) {
     const dimensions = item?.quotaDimensions;
     if (
       !dimensions ||
       typeof dimensions !== "object" ||
       Array.isArray(dimensions) ||
-      !Object.hasOwn(dimensions, "model")
+      !Object.hasOwn(dimensions, "model") ||
+      ["global", "project"].includes(dimensions.scope)
     )
       return "global";
-    if (["global", "project", "daily"].includes(dimensions.scope))
-      return dimensions.scope === "daily" ? "daily" : "global";
     if (![modelId, `models/${modelId}`].includes(dimensions.model))
       return "unknown";
-    const binding = `${item.quotaId ?? ""} ${item.quotaMetric ?? ""}`
-      .toLowerCase()
-      .replace(/[^a-z0-9]/g, "");
+    const binding = normalize(
+      `${item.quotaId ?? ""} ${item.quotaMetric ?? ""}`,
+    );
     if (!binding.includes("permodel"))
       return binding.includes("perproject") ? "global" : "unknown";
+    const window = bindingWindow(binding, binding);
     if (
-      !binding.includes("perminute") ||
-      /hour|week|month|year|second/.test(binding)
+      !window ||
+      (dimensions.scope !== undefined &&
+        dimensions.scope !== "model" &&
+        !(dimensions.scope === "daily" && window === "daily"))
     )
       return "unknown";
+    windows.push(window);
   }
-  return "model";
+  return windows.includes("daily") ? "model-daily" : "model";
 }
 
 export function createGemmaClient(options = {}) {
@@ -753,6 +764,11 @@ export function createGemmaClient(options = {}) {
     )
   )
     throw new TypeError("Invalid model route");
+  if (
+    new Set(requestedRoute.map((item) => item.modelId)).size !==
+    requestedRoute.length
+  )
+    throw new TypeError("Invalid model route: duplicate model");
   if (
     options.route !== undefined &&
     options.modelId !== undefined &&
@@ -795,10 +811,16 @@ export function createGemmaClient(options = {}) {
   }));
   const generationConfig = route[0].generationConfig;
   const routingPolicy = {
-    version: "ordered-fallback-1",
+    version: "ordered-fallback-2",
     maxGenerationAttempts: Math.max(2, route.length),
-    fallthrough: ["model-scoped-429", "transient-5xx", "timeout"],
+    fallthrough: [
+      "model-scoped-minute-429",
+      "model-scoped-daily-429",
+      "transient-5xx",
+      "timeout",
+    ],
     invalidOutputRetry: "same-tier",
+    modelDailyFallback: "next-tier-no-wait",
   };
   const fetchImpl = options.fetchImpl ?? globalThis.fetch;
   const now = options.now ?? (() => performance.now());
@@ -1108,12 +1130,17 @@ export function createGemmaClient(options = {}) {
                   body = await jsonResponse(response, controller.signal);
                 } catch {}
                 failureScope = quotaScope(body, tier.modelId);
-                const retry = failureScope === "model";
+                const retry =
+                  failureScope === "model" ||
+                  (failureScope === "model-daily" &&
+                    tierIndex + 1 < route.length);
                 throw Object.assign(
                   new Failure(
                     "quota",
                     retry,
-                    retryDelay(response, wallNow()),
+                    failureScope === "model-daily"
+                      ? 0
+                      : retryDelay(response, wallNow()),
                     retry,
                   ),
                   { scope: failureScope },

package/dist/server/app.mjs

@@ -1,4 +1,6 @@
 import { createServer } from "node:http";
+import { buildPackageDetails } from "../core/package-details.mjs";
+import { attachVulnerabilityCheck } from "./enrichment.mjs";
 import { createQueue, resolveLimits, systemClock } from "./queue.mjs";
 import { createReportStore } from "./store.mjs";
 import { renderReport } from "../viewer/render.mjs";
@@ -99,6 +101,7 @@ export function createCacheKeyPrefix(versionInfo, limits) {
 
 export function createApp({
   runAnalysis,
+  enrichJob,
   versionInfo,
   limits: overrides,
   clock = systemClock,
@@ -114,6 +117,8 @@ export function createApp({
     throw new TypeError(
       "versionInfo requires version, commit and tarballSha256 strings",
     );
+  if (enrichJob !== undefined && typeof enrichJob !== "function")
+    throw new TypeError("enrichJob must be a function");
   const limits = resolveLimits(overrides);
   const version = Object.fromEntries(
     ["version", "commit", "tarballSha256"].map((key) => [
@@ -128,7 +133,14 @@ export function createApp({
     clock,
   });
   const keyPrefix = createCacheKeyPrefix(versionInfo, limits);
-  const queue = createQueue({ runAnalysis, store, limits, clock, keyPrefix });
+  const queue = createQueue({
+    runAnalysis,
+    enrichJob,
+    store,
+    limits,
+    clock,
+    keyPrefix,
+  });
   const server = createServer(
     { maxHeaderSize: 8192, headersTimeout: 10000, requestTimeout: 15000 },
     (req, res) => {
@@ -248,7 +260,9 @@ export function createApp({
         if (path === "/") return send(200, renderHome());
         if (path === "/healthz") return json(200, { status: "ok" });
         if (path === "/version") return json(200, version);
-        const match = /^\/r\/([a-f0-9]{32})(\.json)?$/.exec(path);
+        const match = /^\/r\/([a-f0-9]{32})(\.details\.json|\.json)?$/.exec(
+          path,
+        );
         if (!match)
           return error(
             404,
@@ -265,10 +279,21 @@ export function createApp({
         const pending = ["queued", "running"].includes(job.status);
         if (match[2]) {
           if (job.report)
-            return json(200, job.report, {
-              "content-disposition":
-                'attachment; filename="unmask-report.json"',
-            });
+            return json(
+              200,
+              match[2] === ".details.json"
+                ? attachVulnerabilityCheck(
+                    buildPackageDetails(job.report),
+                    job.vulnerabilityCheck,
+                  )
+                : job.report,
+              {
+                "content-disposition":
+                  match[2] === ".details.json"
+                    ? 'attachment; filename="unmask-package-details.json"'
+                    : 'attachment; filename="unmask-report.json"',
+              },
+            );
           const { key, ...publicJob } = job;
           return json(
             pending ? 202 : 200,

package/dist/server/enrichment.mjs

@@ -0,0 +1,116 @@
+export const DETAILS_RESPONSE_LIMITS = Object.freeze({
+  packageDetailsBytes: 2097152,
+  vulnerabilityCheckBytes: 2096128,
+  combinedBytes: 4194304,
+});
+
+export function unavailableVulnerabilityCheck(spec, clock, reason) {
+  const separator = typeof spec === "string" ? spec.lastIndexOf("@") : -1;
+  return {
+    schemaVersion: "1",
+    source: "OSV",
+    package:
+      separator > 0
+        ? {
+            ecosystem: "npm",
+            name: spec.slice(0, separator),
+            version: spec.slice(separator + 1),
+          }
+        : null,
+    queriedAt: new Date(clock.now()).toISOString(),
+    status: "unavailable",
+    complete: false,
+    reasons: [reason],
+    advisories: [],
+    pagesFetched: 0,
+    limits: { resultBytes: DETAILS_RESPONSE_LIMITS.vulnerabilityCheckBytes },
+  };
+}
+
+export function boundedVulnerabilityCheck(value, spec, clock) {
+  try {
+    const json = JSON.stringify(value);
+    if (
+      Buffer.byteLength(json) > DETAILS_RESPONSE_LIMITS.vulnerabilityCheckBytes
+    )
+      return unavailableVulnerabilityCheck(spec, clock, "result-byte-cap");
+    const snapshot = JSON.parse(json);
+    if (
+      snapshot.schemaVersion !== "1" ||
+      snapshot.source !== "OSV" ||
+      !["found", "none-reported", "incomplete", "unavailable"].includes(
+        snapshot.status,
+      ) ||
+      snapshot.complete !==
+        ["found", "none-reported"].includes(snapshot.status) ||
+      !Array.isArray(snapshot.reasons) ||
+      !snapshot.reasons.every((reason) => typeof reason === "string") ||
+      !Array.isArray(snapshot.advisories) ||
+      snapshot.advisories.some(
+        (item) => !item || typeof item !== "object" || Array.isArray(item),
+      ) ||
+      (snapshot.status === "found" && snapshot.advisories.length === 0) ||
+      (snapshot.status === "none-reported" &&
+        snapshot.advisories.length !== 0) ||
+      !Number.isSafeInteger(snapshot.pagesFetched) ||
+      snapshot.pagesFetched < 0 ||
+      (snapshot.complete &&
+        (snapshot.pagesFetched === 0 || snapshot.reasons.length !== 0)) ||
+      typeof snapshot.queriedAt !== "string" ||
+      !Number.isFinite(Date.parse(snapshot.queriedAt)) ||
+      !snapshot.limits ||
+      typeof snapshot.limits !== "object"
+    )
+      throw new TypeError("Invalid vulnerability enrichment");
+    const expected = unavailableVulnerabilityCheck(
+      spec,
+      clock,
+      "unused",
+    ).package;
+    if (
+      snapshot.package !== null &&
+      (snapshot.package.ecosystem !== "npm" ||
+        snapshot.package.name !== expected?.name ||
+        snapshot.package.version !== expected?.version)
+    )
+      throw new TypeError("Vulnerability enrichment identity mismatch");
+    if (snapshot.complete && snapshot.package === null)
+      throw new TypeError("Vulnerability enrichment identity missing");
+    return snapshot;
+  } catch {
+    return unavailableVulnerabilityCheck(spec, clock, "invalid-result");
+  }
+}
+
+export function attachVulnerabilityCheck(details, value) {
+  const vulnerabilityCheck = value ?? {
+    source: "OSV",
+    status: "not-assessed",
+    complete: false,
+    reasons: ["hosted-enrichment-disabled"],
+    advisories: [],
+  };
+  const complete =
+    vulnerabilityCheck.complete === true &&
+    ["found", "none-reported"].includes(vulnerabilityCheck.status);
+  const result = {
+    ...details,
+    scope: {
+      ...details.scope,
+      vulnerabilityScan: complete
+        ? "OSV-exact-package-query-complete"
+        : "not-assessed",
+      knownVulnerabilities: complete
+        ? "queried-exact-package-only"
+        : "not-assessed",
+    },
+    vulnerabilityCheck,
+    responseLimits: DETAILS_RESPONSE_LIMITS,
+  };
+  if (
+    Buffer.byteLength(JSON.stringify(result)) >
+    DETAILS_RESPONSE_LIMITS.combinedBytes
+  )
+    throw new TypeError("Combined details response exceeds cap");
+  return result;
+}

package/dist/server/main.mjs

@@ -47,6 +47,7 @@ export async function startServer({
   runnerOptions = {},
   versionInfo,
   modelClient,
+  enrichJob,
 } = {}) {
   if (
     typeof host !== "string" ||
@@ -62,6 +63,14 @@ export async function startServer({
       : modelClient === undefined
         ? await modelClientFromEnv()
         : modelClient;
+  const enrichment =
+    enrichJob === null
+      ? undefined
+      : enrichJob === undefined
+        ? (await import("../core/advisories.mjs")).lookupNpmAdvisories
+        : enrichJob;
+  if (enrichment !== undefined && typeof enrichment !== "function")
+    throw new TypeError("enrichJob must be a function or null");
   const run = await createRunner({
     ...runnerOptions,
     tempRoot,
@@ -81,6 +90,13 @@ export async function startServer({
   };
   const server = createApp({
     runAnalysis,
+    enrichJob:
+      enrichment === undefined
+        ? undefined
+        : (spec, { signal }) =>
+            enrichment(spec, {
+              signal: AbortSignal.any([signal, shutdown.signal]),
+            }),
     versionInfo: {
       ...(versionInfo || (await loadVersionInfo())),
       modelConfigDigest:

package/dist/server/queue.mjs

@@ -1,4 +1,8 @@
 import { randomBytes } from "node:crypto";
+import {
+  boundedVulnerabilityCheck,
+  unavailableVulnerabilityCheck,
+} from "./enrichment.mjs";
 
 export const DEFAULT_LIMITS = Object.freeze({
   maxBodyBytes: 4096,
@@ -28,6 +32,7 @@ export function resolveLimits(overrides = {}) {
 
 export function createQueue({
   runAnalysis,
+  enrichJob,
   store,
   limits,
   clock = systemClock,
@@ -39,7 +44,20 @@ export function createQueue({
   let admissions = [];
   function persist(job) {
     if (!store.put(job)) {
-      const { report, ...small } = job;
+      if (
+        job.report &&
+        job.vulnerabilityCheck &&
+        store.put({
+          ...job,
+          vulnerabilityCheck: unavailableVulnerabilityCheck(
+            job.nameAtExactVersion,
+            clock,
+            "storage-byte-cap",
+          ),
+        })
+      )
+        return;
+      const { report, vulnerabilityCheck, ...small } = job;
       store.put({ ...small, status: "incomplete", reason: "report-too-large" });
     }
   }
@@ -61,12 +79,26 @@ export function createQueue({
     job.status = "running";
     job.startedAt = clock.now();
     const controller = new AbortController();
+    let coreReport;
     const timer = clock.setTimeout(() => {
-      job.status = "incomplete";
-      job.reason = "execution-timeout";
       job.finishedAt = clock.now();
+      if (coreReport) {
+        job.status = coreReport.policy.exitCode === 2 ? "incomplete" : "done";
+        persist({
+          ...publicJob(job),
+          report: coreReport,
+          vulnerabilityCheck: unavailableVulnerabilityCheck(
+            job.nameAtExactVersion,
+            clock,
+            "aborted",
+          ),
+        });
+      } else {
+        job.status = "incomplete";
+        job.reason = "execution-timeout";
+        persist(job);
+      }
       controller.abort();
-      persist(job);
     }, limits.executionMs);
     timer?.unref?.();
     job.cancel = () => {
@@ -77,7 +109,7 @@ export function createQueue({
       .then(() =>
         runAnalysis(job.nameAtExactVersion, { signal: controller.signal }),
       )
-      .then((report) => {
+      .then(async (report) => {
         if (job.status !== "running" || closed) return;
         if (
           !report ||
@@ -86,9 +118,56 @@ export function createQueue({
           ![0, 2, 3].includes(report.policy?.exitCode)
         )
           throw new TypeError("Invalid report");
+        coreReport = report;
+        let vulnerabilityCheck;
+        if (enrichJob) {
+          let abort;
+          const interrupted = new Promise((resolve) => {
+            abort = () =>
+              resolve(
+                unavailableVulnerabilityCheck(
+                  job.nameAtExactVersion,
+                  clock,
+                  "aborted",
+                ),
+              );
+            controller.signal.addEventListener("abort", abort, { once: true });
+            if (controller.signal.aborted) abort();
+          });
+          try {
+            const value = await Promise.race([
+              Promise.resolve().then(() =>
+                enrichJob(job.nameAtExactVersion, {
+                  signal: controller.signal,
+                }),
+              ),
+              interrupted,
+            ]);
+            vulnerabilityCheck = boundedVulnerabilityCheck(
+              value,
+              job.nameAtExactVersion,
+              clock,
+            );
+          } catch {
+            vulnerabilityCheck = unavailableVulnerabilityCheck(
+              job.nameAtExactVersion,
+              clock,
+              "lookup-failed",
+            );
+          } finally {
+            controller.signal.removeEventListener("abort", abort);
+          }
+        }
+        if (job.status !== "running" || closed) return;
         const status = report.policy.exitCode === 2 ? "incomplete" : "done";
         const finishedAt = clock.now();
-        persist({ ...publicJob(job), status, report, finishedAt });
+        persist({
+          ...publicJob(job),
+          status,
+          report,
+          finishedAt,
+          ...(vulnerabilityCheck ? { vulnerabilityCheck } : {}),
+        });
         job.status = status;
         job.finishedAt = finishedAt;
       })

package/dist/version.json

@@ -1 +1 @@
-{"buildSchema":"1","version":"0.1.1","dirty":false,"commit":"a4feff4f745100dff319ce977d11eef23fb28f99","sourceSha256":"65f343ae9cf7954c25d4399d859ca4d7660fc2f30eca08ecbe2866f8ccf5df38","packageSha256":"7b95ad50264cfbbd206827541e2aba9822f44daee96ef36e90ff353496ca0dd7","lockfileSha256":"c0c5f8e46a66e9933a5d4dde017e24c62a541e9d16b94844d1f4d9b20b7cca2c","files":{"cli/hosted.mjs":{"sha256":"dea7b512a2e811102521565e9f218c77aab916fe05e838f55a9aeb7b43cd0852","size":7436},"cli/main.mjs":{"sha256":"3bff23e18025d73dbfd8eb3a9571a7797702f03ed14e8d2d1edd6a12304c579e","size":6597},"core/acquire.mjs":{"sha256":"aee5ed002292edf1b03385ceec8ebfb03de452dba36bbdced96f888eaafa1d67","size":9549},"core/archive.mjs":{"sha256":"80aa4373c0324458fe322a83af18a4cfd0ffec4b39ebdeffc9084639a8655410","size":16193},"core/compare.mjs":{"sha256":"540614266e06a2875010793d036d256ddfac72f978157cd3d147ffb99015d8e4","size":7579},"core/manifests.mjs":{"sha256":"29c40e01ff1e1dfaed444600d8c78380d23d4bc9be71960251e39ea3594de2f1","size":17891},"core/online.mjs":{"sha256":"368a3f2558e16db0701d2eaf068b48e2661e7e01ab7cf5605cdd22766aeb5cca","size":9741},"core/pipeline.mjs":{"sha256":"9c4ddc5c258a99455a1230c978fd132c135057ad7bb6c7baa201ae530ee136fd","size":11060},"core/policy.mjs":{"sha256":"4281c626c00a6424992f5e1eba26876e2b70f4b968450a8ca52fa42f5a121ba5","size":2954},"core/report.mjs":{"sha256":"aa167c94c257a5ff6d830630a37a51a9a9e47f82aa4a0a7b96ead91a5967294b","size":15844},"core/resolve.mjs":{"sha256":"d5575da49ff78e8fea8df1f2fc10a39540adea285eddfa347746e848f9fdf957","size":5202},"core/source.mjs":{"sha256":"798fe74e3fba836b82576cd46e1b91e6f6e0a4e3cf273c533b5e074247c81373","size":3238},"core/syntax.mjs":{"sha256":"2d50f2e73e17aedbcbccd92af280e171de4ef78b55acccd23d6b6ef11e891776","size":10450},"model/client.mjs":{"sha256":"040a1422aaa715d19b1c597e0fcb5008d94578ddade6a3c13ba64d0e9795f27e","size":41854},"model/config.mjs":{"sha256":"127605979a299616be15f4a47e94dcd82928b00ad2af71744ffaa6e359516486","size":3245},"server/app.mjs":{"sha256":"36c265269bdf3f063e98997f26efed077b2b3a3113e709b06a91af69d8376b3c","size":9392},"server/main.mjs":{"sha256":"bffc78cbb973d0dd9900bbdc307d86b15de91b1ea2b0f312a16c2b673a0801bc","size":4044},"server/queue.mjs":{"sha256":"37290655ef70c35383381ec5e76f10922b918f40224fca51a92abd714c095cf7","size":5094},"server/runner.mjs":{"sha256":"a6ca5bfbd7b239f7110639d854ca9a263f4cf3aaf06701ea54493b29f8244706","size":9071},"server/store.mjs":{"sha256":"efa2a35c7e9d0344c26e24ba360a457cdf80f4f48975f0186f81844b9fb7a097","size":2706},"server/worker.mjs":{"sha256":"1df839608cd1c691fc2801d89e698daeef3e48d7f4b8843ce1252a21fde9730a","size":1902},"viewer/render.mjs":{"sha256":"c77442c27041a5fe28269b8c80c9d24c72b73a226e8d4491e6d7285a9feb5309","size":19443},"viewer/shell.mjs":{"sha256":"5f800d0a97fe416d02cf9abef766d651b444b4745ad3a998926599469358ca79","size":9408}}}
+{"buildSchema":"1","version":"0.1.2","dirty":false,"commit":"85bd6d9c0ce7bc31c16d3b1aef695826c0b52354","sourceSha256":"41b4925fd7f4c0d5e8a0018bce3244e138397b48b9663b68a08a9e0e4b32f898","packageSha256":"97af1181106db21be2cde05366ede4e8c018c367cf9bd6b21168dcb78baaff56","lockfileSha256":"84beb1a861f96a8cb788de5bfeeaddcaff04af8c766ec6489601ba42b89fc583","files":{"cli/hosted.mjs":{"sha256":"dea7b512a2e811102521565e9f218c77aab916fe05e838f55a9aeb7b43cd0852","size":7436},"cli/main.mjs":{"sha256":"3bff23e18025d73dbfd8eb3a9571a7797702f03ed14e8d2d1edd6a12304c579e","size":6597},"core/acquire.mjs":{"sha256":"aee5ed002292edf1b03385ceec8ebfb03de452dba36bbdced96f888eaafa1d67","size":9549},"core/advisories.mjs":{"sha256":"388088e44422ffeb3b60d930c84cec29fbc89b98d8dfd2879bc6ede50f4e7ea9","size":13004},"core/archive.mjs":{"sha256":"80aa4373c0324458fe322a83af18a4cfd0ffec4b39ebdeffc9084639a8655410","size":16193},"core/compare.mjs":{"sha256":"540614266e06a2875010793d036d256ddfac72f978157cd3d147ffb99015d8e4","size":7579},"core/manifests.mjs":{"sha256":"29c40e01ff1e1dfaed444600d8c78380d23d4bc9be71960251e39ea3594de2f1","size":17891},"core/online.mjs":{"sha256":"368a3f2558e16db0701d2eaf068b48e2661e7e01ab7cf5605cdd22766aeb5cca","size":9741},"core/package-details.mjs":{"sha256":"770551a6ab84e523dbc56ede6131b08eb22b8c21fc9c8b179fe0d1769fb2ec00","size":21538},"core/pipeline.mjs":{"sha256":"9c4ddc5c258a99455a1230c978fd132c135057ad7bb6c7baa201ae530ee136fd","size":11060},"core/policy.mjs":{"sha256":"4281c626c00a6424992f5e1eba26876e2b70f4b968450a8ca52fa42f5a121ba5","size":2954},"core/report.mjs":{"sha256":"aa167c94c257a5ff6d830630a37a51a9a9e47f82aa4a0a7b96ead91a5967294b","size":15844},"core/resolve.mjs":{"sha256":"d5575da49ff78e8fea8df1f2fc10a39540adea285eddfa347746e848f9fdf957","size":5202},"core/source.mjs":{"sha256":"798fe74e3fba836b82576cd46e1b91e6f6e0a4e3cf273c533b5e074247c81373","size":3238},"core/syntax.mjs":{"sha256":"2d50f2e73e17aedbcbccd92af280e171de4ef78b55acccd23d6b6ef11e891776","size":10450},"model/client.mjs":{"sha256":"efb68132710cbdff6b86b58cbac006c48e10f9317e852f00b120ef7c3c7ed9c1","size":42865},"model/config.mjs":{"sha256":"127605979a299616be15f4a47e94dcd82928b00ad2af71744ffaa6e359516486","size":3245},"server/app.mjs":{"sha256":"54cb435f6ab70739c16a2db9eb63eb91704a5e1515cbb2c25793f47baa4e0299","size":10128},"server/enrichment.mjs":{"sha256":"3c5cc57f2c8f019f79418457f366a9422e0a03a8ba86a41b0767aba636bde179","size":3825},"server/main.mjs":{"sha256":"e5bdcd02209c2ccc1ed8c73b85b9988d61aa3e1bcf7c8d119eed782a4bfcd224","size":4587},"server/queue.mjs":{"sha256":"23e30f3ff570771b77a244be9200ad510d2f19811eee566d68b364b7f741a9d7","size":7371},"server/runner.mjs":{"sha256":"a6ca5bfbd7b239f7110639d854ca9a263f4cf3aaf06701ea54493b29f8244706","size":9071},"server/store.mjs":{"sha256":"efa2a35c7e9d0344c26e24ba360a457cdf80f4f48975f0186f81844b9fb7a097","size":2706},"server/worker.mjs":{"sha256":"1df839608cd1c691fc2801d89e698daeef3e48d7f4b8843ce1252a21fde9730a","size":1902},"viewer/render.mjs":{"sha256":"c77442c27041a5fe28269b8c80c9d24c72b73a226e8d4491e6d7285a9feb5309","size":19443},"viewer/shell.mjs":{"sha256":"5f800d0a97fe416d02cf9abef766d651b444b4745ad3a998926599469358ca79","size":9408}}}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xagents_in/unmask",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": false,
   "description": "Evidence-based comparison of npm packages and their source archives",
   "license": "MIT",