@pnpm/registry-access.client 1100.1.6 → 1100.1.8

package/CHANGELOG.md

@@ -0,0 +1,78 @@
+# @pnpm/registry-access.client
+
+## 1100.1.8
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/network.fetch@1100.1.6
+
+## 1100.1.7
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/network.fetch@1100.1.5
+
+## 1100.1.6
+
+### Patch Changes
+
+- Updated dependencies [1e81761]
+  - @pnpm/network.web-auth@1101.2.0
+
+## 1100.1.5
+
+### Patch Changes
+
+- Updated dependencies [05b95ab]
+- Updated dependencies [852d537]
+  - @pnpm/network.fetch@1100.1.4
+  - @pnpm/error@1100.0.1
+  - @pnpm/network.web-auth@1101.1.2
+
+## 1100.1.4
+
+### Patch Changes
+
+- Updated dependencies [a31faa7]
+  - @pnpm/network.fetch@1100.1.3
+  - @pnpm/network.web-auth@1101.1.1
+
+## 1100.1.3
+
+### Patch Changes
+
+- @pnpm/network.fetch@1100.1.2
+
+## 1100.1.2
+
+### Patch Changes
+
+- @pnpm/network.fetch@1100.1.1
+
+## 1100.1.1
+
+### Patch Changes
+
+- Updated dependencies [60a1eec]
+  - @pnpm/network.fetch@1100.1.0
+
+## 1100.1.0
+
+### Minor Changes
+
+- b1fa2d5: Fix `pnpm dist-tag add` and `pnpm dist-tag rm` against npmjs.org failing without `--otp` with `[ERR_PNPM_UNAUTHORIZED] You must be logged in to set dist-tag … "You must provide a one-time pass. Upgrade your client to npm@latest in order to use 2FA."`. pnpm now sends `npm-auth-type: web` on dist-tag writes and surfaces the resulting OTP challenge through the existing browser-based 2FA flow (the same `withOtpHandling` helper used by `pnpm publish`), so the browser opens, the user authenticates, and the dist-tag is set on retry. `--otp=<code>` continues to work via the classic flow.
+
+### Patch Changes
+
+- Updated dependencies [b1fa2d5]
+- Updated dependencies [2cadfb5]
+  - @pnpm/network.fetch@1100.0.8
+  - @pnpm/network.web-auth@1101.1.0
+
+## 1100.0.1
+
+### Patch Changes
+
+- @pnpm/network.fetch@1100.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/registry-access.client",
-  "version": "1100.1.6",
+  "version": "1100.1.8",
   "description": "Low-level helpers for npm-registry HTTP endpoints (PUT dist-tag, PUT user, etc.)",
   "keywords": [
     "pnpm",
@@ -27,13 +27,13 @@
     "!*.map"
   ],
   "dependencies": {
-    "@pnpm/npm-package-arg": "^2.0.0",
-    "@pnpm/network.web-auth": "1101.2.0",
     "@pnpm/error": "1100.0.1",
-    "@pnpm/network.fetch": "1100.1.4"
+    "@pnpm/network.fetch": "1100.1.6",
+    "@pnpm/network.web-auth": "1101.2.0",
+    "@pnpm/npm-package-arg": "^2.0.0"
   },
   "devDependencies": {
-    "@pnpm/registry-access.client": "1100.1.6"
+    "@pnpm/registry-access.client": "1100.1.8"
   },
   "engines": {
     "node": ">=22.13"

package/lib/addUser.d.ts

@@ -1,42 +0,0 @@
-export interface AddUserResponse {
-    ok: boolean;
-    status: number;
-    text: () => Promise<string>;
-    json: () => Promise<unknown>;
-    headers: {
-        get: (name: string) => string | null;
-    };
-}
-export interface AddUserFetch {
-    (url: string, init: {
-        method: 'PUT';
-        headers: Record<string, string>;
-        body: string;
-    }): Promise<AddUserResponse>;
-}
-export interface AddUserOptions {
-    username: string;
-    password: string;
-    email: string;
-    registryUrl: string;
-    fetch: AddUserFetch;
-    otp?: string;
-}
-export interface AddUserResult {
-    token: string;
-}
-export declare class AddUserHttpError extends Error {
-    readonly status: number;
-    readonly responseText: string;
-    readonly responseJson: unknown | undefined;
-    readonly responseHeaders: {
-        get: (name: string) => string | null;
-    };
-    constructor(status: number, responseText: string, responseHeaders: {
-        get: (name: string) => string | null;
-    });
-}
-export declare class AddUserNoTokenError extends Error {
-    constructor();
-}
-export declare function addUser(opts: AddUserOptions): Promise<AddUserResult>;

package/lib/addUser.js

@@ -1,54 +0,0 @@
-export class AddUserHttpError extends Error {
-    status;
-    responseText;
-    responseJson;
-    responseHeaders;
-    constructor(status, responseText, responseHeaders) {
-        super(`addUser failed (HTTP ${status}): ${responseText}`);
-        this.name = 'AddUserHttpError';
-        this.status = status;
-        this.responseText = responseText;
-        this.responseHeaders = responseHeaders;
-        try {
-            this.responseJson = JSON.parse(responseText);
-        }
-        catch {
-            this.responseJson = undefined;
-        }
-    }
-}
-export class AddUserNoTokenError extends Error {
-    constructor() {
-        super('The registry returned a successful response but no token');
-        this.name = 'AddUserNoTokenError';
-    }
-}
-export async function addUser(opts) {
-    const url = new URL(`-/user/org.couchdb.user:${encodeURIComponent(opts.username)}`, opts.registryUrl).href;
-    const response = await opts.fetch(url, {
-        method: 'PUT',
-        headers: {
-            'content-type': 'application/json',
-            accept: 'application/json',
-            'npm-auth-type': 'web',
-            ...(opts.otp != null ? { 'npm-otp': opts.otp } : {}),
-        },
-        body: JSON.stringify({
-            _id: `org.couchdb.user:${opts.username}`,
-            name: opts.username,
-            password: opts.password,
-            email: opts.email,
-            type: 'user',
-        }),
-    });
-    if (!response.ok) {
-        const text = await response.text();
-        throw new AddUserHttpError(response.status, text, response.headers);
-    }
-    const body = await response.json();
-    if (!body?.token) {
-        throw new AddUserNoTokenError();
-    }
-    return { token: body.token };
-}
-//# sourceMappingURL=addUser.js.map

package/lib/index.d.ts

@@ -1,2 +0,0 @@
-export * from './addUser.js';
-export * from './setDistTag.js';

package/lib/setDistTag.d.ts

@@ -1,18 +0,0 @@
-import type { FetchFromRegistry } from '@pnpm/network.fetch';
-export type AuthType = 'web' | 'legacy';
-export interface SetDistTagOptions {
-    packageName: string;
-    version: string;
-    distTag: string;
-    registryUrl: string;
-    fetchFromRegistry: FetchFromRegistry;
-    authHeader?: string;
-    /** Mirrors npm CLI's `auth-type` flat option: `'web'` (default) opts into the
-     * web-OTP challenge, `'legacy'` is set automatically when the user passes
-     * `--otp` so a classic 6-digit code can be sent. */
-    authType?: AuthType;
-    /** OTP token to send as `npm-otp`. May be a classic 6-digit code (legacy) or
-     * the 64-character token returned by the web flow. */
-    otp?: string;
-}
-export declare function setDistTag(opts: SetDistTagOptions): Promise<void>;

package/lib/setDistTag.js

@@ -1,50 +0,0 @@
-import { PnpmError } from '@pnpm/error';
-import { SyntheticOtpError } from '@pnpm/network.web-auth';
-import npa from '@pnpm/npm-package-arg';
-export async function setDistTag(opts) {
-    const encodedName = npa(opts.packageName).escapedName;
-    const url = new URL(`-/package/${encodedName}/dist-tags/${encodeURIComponent(opts.distTag)}`, opts.registryUrl).href;
-    const response = await opts.fetchFromRegistry(url, {
-        authHeaderValue: opts.authHeader,
-        method: 'PUT',
-        headers: {
-            'content-type': 'application/json',
-            'npm-auth-type': opts.authType ?? 'web',
-            ...(opts.otp ? { 'npm-otp': opts.otp } : {}),
-        },
-        body: JSON.stringify(opts.version),
-    });
-    if (response.ok)
-        return;
-    const body = await response.text();
-    if (response.status === 401) {
-        throw parseAuthError(body, opts.distTag);
-    }
-    const action = `set dist-tag "${opts.distTag}" on`;
-    if (response.status === 403) {
-        throw new PnpmError('FORBIDDEN', `You do not have permission to ${action} this package. ${body}`);
-    }
-    throw new PnpmError('REGISTRY_ERROR', `Failed to ${action} package: ${response.status} ${response.statusText}. ${body}`);
-}
-function parseAuthError(body, distTag) {
-    const parsed = tryParseJson(body);
-    if (parsed != null && typeof parsed === 'object' && 'authUrl' in parsed && 'doneUrl' in parsed) {
-        return new SyntheticOtpError({
-            authUrl: typeof parsed.authUrl === 'string' ? parsed.authUrl : undefined,
-            doneUrl: typeof parsed.doneUrl === 'string' ? parsed.doneUrl : undefined,
-        });
-    }
-    if (/one-time pass/i.test(body)) {
-        return new SyntheticOtpError(undefined);
-    }
-    return new PnpmError('UNAUTHORIZED', `You must be logged in to set dist-tag "${distTag}" on packages. ${body}`);
-}
-function tryParseJson(body) {
-    try {
-        return JSON.parse(body);
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=setDistTag.js.map