@stacksjs/registry 0.10.35 → 0.10.40

package/README.md

@@ -2,6 +2,10 @@
 
 Pantry package registry backend. A simple, fast package registry that works with the Pantry CLI.
 
+The authoritative route, authentication, integrity, storage, failure, operations,
+and test contract is [docs/registry.md](../../docs/registry.md). CI verifies its
+critical claims directly against the route handlers.
+
 ## Features
 
 - **npm-compatible API** - Works with the Pantry CLI out of the box
@@ -9,7 +13,7 @@ Pantry package registry backend. A simple, fast package registry that works with
 - **Zig package support** - Host Zig packages with content-addressed hashing
 - **S3 storage** - Tarball storage via S3 (or local filesystem for development)
 - **Analytics** - Track download counts and package statistics
-- **Simple metadata** - JSON file or DynamoDB for package metadata
+- **Portable metadata** - Local/in-memory stores for development and an object-storage snapshot for production
 - **Zero config** - Works out of the box for local development
 
 ## Quick Start

package/dist/index.js

@@ -41014,22 +41014,25 @@ async function handleZigRoutes(path, req, url, storage, baseUrl, corsHeaders, an
   }
   return null;
 }
-var REGISTRY_TOKEN = process.env.PANTRY_REGISTRY_TOKEN || process.env.PANTRY_TOKEN;
+function getRegistryToken() {
+  return process.env.PANTRY_REGISTRY_TOKEN || process.env.PANTRY_TOKEN;
+}
 function validateToken(authHeader) {
-  if (!REGISTRY_TOKEN) {
+  const registryToken = getRegistryToken();
+  if (!registryToken) {
     return { valid: false, error: "Server misconfigured \u2014 no registry token set" };
   }
   if (!authHeader) {
     return { valid: false, error: "Authorization required" };
   }
   const token = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : authHeader;
-  const maxLen = Math.max(token.length, REGISTRY_TOKEN.length);
+  const maxLen = Math.max(token.length, registryToken.length);
   const tokenBuf = Buffer.alloc(maxLen);
   const legacyBuf = Buffer.alloc(maxLen);
   Buffer.from(token).copy(tokenBuf);
-  Buffer.from(REGISTRY_TOKEN).copy(legacyBuf);
+  Buffer.from(registryToken).copy(legacyBuf);
   const crypto5 = __require("crypto");
-  if (!crypto5.timingSafeEqual(tokenBuf, legacyBuf) || token.length !== REGISTRY_TOKEN.length) {
+  if (!crypto5.timingSafeEqual(tokenBuf, legacyBuf) || token.length !== registryToken.length) {
     return { valid: false, error: "Invalid token" };
   }
   return { valid: true };
@@ -41627,11 +41630,11 @@ async function handlePhpRoutes(path, req, url, storage, baseUrl, corsHeaders, an
   }
   return null;
 }
-function getRegistryToken() {
+function getRegistryToken2() {
   return process.env.PANTRY_REGISTRY_TOKEN || process.env.PANTRY_TOKEN;
 }
 function validateToken2(authHeader) {
-  const registryToken = getRegistryToken();
+  const registryToken = getRegistryToken2();
   if (!registryToken) {
     return { valid: false, error: "Server misconfigured \u2014 no registry token set" };
   }
@@ -101896,10 +101899,10 @@ async function handleAnalyticsEvent(req, analytics, corsHeaders) {
     return Response.json({ error: "Invalid JSON body" }, { status: 400, headers: corsHeaders });
   }
 }
-function getRegistryToken2() {
+function getRegistryToken3() {
   return process.env.PANTRY_REGISTRY_TOKEN || process.env.PANTRY_TOKEN;
 }
-if (!getRegistryToken2()) {
+if (!getRegistryToken3()) {
   console.warn("WARNING: PANTRY_REGISTRY_TOKEN or PANTRY_TOKEN must be set \u2014 publish/admin endpoints will reject all requests");
 }
 var _authService;
@@ -101913,7 +101916,7 @@ async function validateToken3(authHeader) {
     return { valid: false, error: "Authorization required" };
   }
   const token = authHeader.startsWith("Bearer ") ? authHeader.slice(7) : authHeader;
-  const registryToken = getRegistryToken2();
+  const registryToken = getRegistryToken3();
   if (_authService && isUserApiToken(token)) {
     const result = await _authService.validatePublishToken(token, registryToken ?? "");
     return result;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stacksjs/registry",
-  "version": "0.10.35",
+  "version": "0.10.40",
   "type": "module",
   "description": "Pantry package registry backend - S3 storage with DynamoDB metadata",
   "author": "Stacks.js",