@pnpm/registry-access.client 1100.0.1 → 1100.1.1

package/lib/setDistTag.d.ts

@@ -1,4 +1,5 @@
 import type { FetchFromRegistry } from '@pnpm/network.fetch';
+export type AuthType = 'web' | 'legacy';
 export interface SetDistTagOptions {
     packageName: string;
     version: string;
@@ -6,6 +7,12 @@ export interface SetDistTagOptions {
     registryUrl: string;
     fetchFromRegistry: FetchFromRegistry;
     authHeader?: string;
+    /** Mirrors npm CLI's `auth-type` flat option: `'web'` (default) opts into the
+     * web-OTP challenge, `'legacy'` is set automatically when the user passes
+     * `--otp` so a classic 6-digit code can be sent. */
+    authType?: AuthType;
+    /** OTP token to send as `npm-otp`. May be a classic 6-digit code (legacy) or
+     * the 64-character token returned by the web flow. */
     otp?: string;
 }
 export declare function setDistTag(opts: SetDistTagOptions): Promise<void>;

package/lib/setDistTag.js

@@ -1,4 +1,5 @@
 import { PnpmError } from '@pnpm/error';
+import { SyntheticOtpError } from '@pnpm/network.web-auth';
 import npa from '@pnpm/npm-package-arg';
 export async function setDistTag(opts) {
     const encodedName = npa(opts.packageName).escapedName;
@@ -8,6 +9,7 @@ export async function setDistTag(opts) {
         method: 'PUT',
         headers: {
             'content-type': 'application/json',
+            'npm-auth-type': opts.authType ?? 'web',
             ...(opts.otp ? { 'npm-otp': opts.otp } : {}),
         },
         body: JSON.stringify(opts.version),
@@ -15,13 +17,34 @@ export async function setDistTag(opts) {
     if (response.ok)
         return;
     const body = await response.text();
-    const action = `set dist-tag "${opts.distTag}" on`;
     if (response.status === 401) {
-        throw new PnpmError('UNAUTHORIZED', `You must be logged in to ${action} packages. ${body}`);
+        throw parseAuthError(body, opts.distTag);
     }
+    const action = `set dist-tag "${opts.distTag}" on`;
     if (response.status === 403) {
         throw new PnpmError('FORBIDDEN', `You do not have permission to ${action} this package. ${body}`);
     }
     throw new PnpmError('REGISTRY_ERROR', `Failed to ${action} package: ${response.status} ${response.statusText}. ${body}`);
 }
+function parseAuthError(body, distTag) {
+    const parsed = tryParseJson(body);
+    if (parsed != null && typeof parsed === 'object' && 'authUrl' in parsed && 'doneUrl' in parsed) {
+        return new SyntheticOtpError({
+            authUrl: typeof parsed.authUrl === 'string' ? parsed.authUrl : undefined,
+            doneUrl: typeof parsed.doneUrl === 'string' ? parsed.doneUrl : undefined,
+        });
+    }
+    if (/one-time pass/i.test(body)) {
+        return new SyntheticOtpError(undefined);
+    }
+    return new PnpmError('UNAUTHORIZED', `You must be logged in to set dist-tag "${distTag}" on packages. ${body}`);
+}
+function tryParseJson(body) {
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        return undefined;
+    }
+}
 //# sourceMappingURL=setDistTag.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/registry-access.client",
-  "version": "1100.0.1",
+  "version": "1100.1.1",
   "description": "Low-level helpers for npm-registry HTTP endpoints (PUT dist-tag, PUT user, etc.)",
   "keywords": [
     "pnpm",
@@ -8,7 +8,10 @@
   ],
   "license": "MIT",
   "funding": "https://opencollective.com/pnpm",
-  "repository": "https://github.com/pnpm/pnpm/tree/main/registry-access/client",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/pnpm/pnpm/tree/main/registry-access/client"
+  },
   "homepage": "https://github.com/pnpm/pnpm/tree/main/registry-access/client#readme",
   "bugs": {
     "url": "https://github.com/pnpm/pnpm/issues"
@@ -25,11 +28,12 @@
   ],
   "dependencies": {
     "@pnpm/npm-package-arg": "^2.0.0",
-    "@pnpm/network.fetch": "1100.0.7",
-    "@pnpm/error": "1100.0.0"
+    "@pnpm/error": "1100.0.0",
+    "@pnpm/network.fetch": "1100.1.0",
+    "@pnpm/network.web-auth": "1101.1.0"
   },
   "devDependencies": {
-    "@pnpm/registry-access.client": "1100.0.1"
+    "@pnpm/registry-access.client": "1100.1.1"
   },
   "engines": {
     "node": ">=22.13"