@verdaccio/api 6.0.0-6-next.25 → 6.0.0-6-next.26

package/CHANGELOG.md

@@ -1,5 +1,66 @@
 # @verdaccio/api
 
+## 6.0.0-6-next.26
+
+### Major Changes
+
+- 292c0a37: feat!: replace deprecated request dependency by got
+
+  This is a big refactoring of the core, fetching dependencies, improve code, more tests and better stability. This is essential for the next release, will take some time but would allow modularize more the core.
+
+  ## Notes
+
+  - Remove deprecated `request` by other `got`, retry improved, custom Agent ( got does not include it built-in)
+  - Remove `async` dependency from storage (used by core) it was linked with proxy somehow safe to remove now
+  - Refactor with promises instead callback wherever is possible
+  - ~Document the API~
+  - Improve testing, integration tests
+  - Bugfix
+  - Clean up old validations
+  - Improve performance
+
+  ## 💥 Breaking changes
+
+  - Plugin API methods were callbacks based are returning promises, this will break current storage plugins, check documentation for upgrade.
+  - Write Tarball, Read Tarball methods parameters change, a new set of options like `AbortController` signals are being provided to the `addAbortSignal` can be internally used with Streams when a request is aborted. eg: `addAbortSignal(signal, fs.createReadStream(pathName));`
+  - `@verdaccio/streams` stream abort support is legacy is being deprecated removed
+  - Remove AWS and Google Cloud packages for future refactoring [#2574](https://github.com/verdaccio/verdaccio/pull/2574).
+
+### Minor Changes
+
+- 00d1d2a1: chore: env variable for launch fastify
+
+  - Update fastify to major release `v4.3.0`
+  - Update CLI launcher
+
+  via CLI
+
+  ```
+  VERDACCIO_SERVER=fastify verdaccio
+  ```
+
+  with docker
+
+  ```
+  docker run -it --rm --name verdaccio \
+    -e "VERDACCIO_SERVER=8080" -p 8080:8080 \
+    -e "VERDACCIO_SERVER=fastify" \
+    verdaccio/verdaccio
+  ```
+
+### Patch Changes
+
+- Updated dependencies [292c0a37]
+- Updated dependencies [a3a209b5]
+- Updated dependencies [00d1d2a1]
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/config@6.0.0-6-next.15
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/logger@6.0.0-6-next.12
+  - @verdaccio/middleware@6.0.0-6-next.23
+  - @verdaccio/store@6.0.0-6-next.23
+  - @verdaccio/utils@6.0.0-6-next.12
+
 ## 6.0.0-6-next.25
 
 ### Patch Changes

package/build/dist-tags.js

@@ -18,68 +18,73 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { de
 function _default(route, auth, storage) {
   const can = (0, _middleware.allow)(auth);
 
-  const tag_package_version = function (req, res, next) {
+  const addTagPackageVersionMiddleware = async function (req, res, next) {
     if (_lodash.default.isString(req.body) === false) {
-      return next('route');
+      return next(_core.errorUtils.getBadRequest('version is missing'));
     }
 
     const tags = {};
     tags[req.params.tag] = req.body;
-    storage.mergeTags(req.params.package, tags, function (err) {
-      if (err) {
-        return next(err);
-      }
 
+    try {
+      await storage.mergeTagsNext(req.params.package, tags);
       res.status(_core.constants.HTTP_STATUS.CREATED);
       return next({
         ok: _core.constants.API_MESSAGE.TAG_ADDED
       });
-    });
+    } catch (err) {
+      next(err);
+    }
   }; // tagging a package.
 
 
-  route.put('/:package/:tag', can('publish'), (0, _middleware.media)(_mime.default.getType('json')), tag_package_version);
-  route.post('/-/package/:package/dist-tags/:tag', can('publish'), (0, _middleware.media)(_mime.default.getType('json')), tag_package_version);
-  route.put('/-/package/:package/dist-tags/:tag', can('publish'), (0, _middleware.media)(_mime.default.getType('json')), tag_package_version);
-  route.delete('/-/package/:package/dist-tags/:tag', can('publish'), function (req, res, next) {
+  route.put('/:package/:tag', can('publish'), (0, _middleware.media)(_mime.default.getType('json')), addTagPackageVersionMiddleware);
+  route.put('/-/package/:package/dist-tags/:tag', can('publish'), (0, _middleware.media)(_mime.default.getType('json')), addTagPackageVersionMiddleware);
+  route.delete('/-/package/:package/dist-tags/:tag', can('publish'), async function (req, res, next) {
     const tags = {};
     tags[req.params.tag] = null;
-    storage.mergeTags(req.params.package, tags, function (err) {
-      if (err) {
-        return next(err);
-      }
 
+    try {
+      await storage.mergeTagsNext(req.params.package, tags);
       res.status(_core.constants.HTTP_STATUS.CREATED);
       return next({
         ok: _core.constants.API_MESSAGE.TAG_REMOVED
       });
-    });
+    } catch (err) {
+      next(err);
+    }
   });
-  route.get('/-/package/:package/dist-tags', can('access'), function (req, res, next) {
-    storage.getPackage({
-      name: req.params.package,
-      uplinksLook: true,
-      req,
-      callback: function (err, info) {
-        if (err) {
-          return next(err);
-        }
+  route.get('/-/package/:package/dist-tags', can('access'), async function (req, res, next) {
+    const name = req.params.package;
+    const requestOptions = {
+      protocol: req.protocol,
+      headers: req.headers,
+      // FIXME: if we migrate to req.hostname, the port is not longer included.
+      host: req.host,
+      remoteAddress: req.socket.remoteAddress
+    };
 
-        next(info[_core.constants.DIST_TAGS]);
-      }
-    });
+    try {
+      const manifest = await storage.getPackageByOptions({
+        name,
+        uplinksLook: true,
+        requestOptions
+      });
+      next(manifest[_core.constants.DIST_TAGS]);
+    } catch (err) {
+      next(err);
+    }
   });
-  route.post('/-/package/:package/dist-tags', can('publish'), function (req, res, next) {
-    storage.mergeTags(req.params.package, req.body, function (err) {
-      if (err) {
-        return next(err);
-      }
-
+  route.post('/-/package/:package/dist-tags', can('publish'), async function (req, res, next) {
+    try {
+      await storage.mergeTagsNext(req.params.package, req.body);
       res.status(_core.constants.HTTP_STATUS.CREATED);
       return next({
         ok: _core.constants.API_MESSAGE.TAG_UPDATED
       });
-    });
+    } catch (err) {
+      next(err);
+    }
   });
 }
 //# sourceMappingURL=dist-tags.js.map

package/build/dist-tags.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/dist-tags.ts"],"names":["route","auth","storage","can","tag_package_version","req","res","next","_","isString","body","tags","params","tag","mergeTags","package","err","status","constants","HTTP_STATUS","CREATED","ok","API_MESSAGE","TAG_ADDED","put","mime","getType","post","delete","TAG_REMOVED","get","getPackage","name","uplinksLook","callback","info","DIST_TAGS","TAG_UPDATED"],"mappings":";;;;;;;AACA;;AACA;;AAGA;;AACA;;;;AAMe,kBAAUA,KAAV,EAAyBC,IAAzB,EAAsCC,OAAtC,EAA8D;AAC3E,QAAMC,GAAG,GAAG,uBAAMF,IAAN,CAAZ;;AACA,QAAMG,mBAAmB,GAAG,UAC1BC,GAD0B,EAE1BC,GAF0B,EAG1BC,IAH0B,EAIR;AAClB,QAAIC,gBAAEC,QAAF,CAAWJ,GAAG,CAACK,IAAf,MAAyB,KAA7B,EAAoC;AAClC,aAAOH,IAAI,CAAC,OAAD,CAAX;AACD;;AAED,UAAMI,IAAI,GAAG,EAAb;AACAA,IAAAA,IAAI,CAACN,GAAG,CAACO,MAAJ,CAAWC,GAAZ,CAAJ,GAAuBR,GAAG,CAACK,IAA3B;AACAR,IAAAA,OAAO,CAACY,SAAR,CAAkBT,GAAG,CAACO,MAAJ,CAAWG,OAA7B,EAAsCJ,IAAtC,EAA4C,UAAUK,GAAV,EAAwC;AAClF,UAAIA,GAAJ,EAAS;AACP,eAAOT,IAAI,CAACS,GAAD,CAAX;AACD;;AACDV,MAAAA,GAAG,CAACW,MAAJ,CAAWC,gBAAUC,WAAV,CAAsBC,OAAjC;AACA,aAAOb,IAAI,CAAC;AAAEc,QAAAA,EAAE,EAAEH,gBAAUI,WAAV,CAAsBC;AAA5B,OAAD,CAAX;AACD,KAND;AAOD,GAlBD,CAF2E,CAsB3E;;;AACAvB,EAAAA,KAAK,CAACwB,GAAN,CAAU,gBAAV,EAA4BrB,GAAG,CAAC,SAAD,CAA/B,EAA4C,uBAAMsB,cAAKC,OAAL,CAAa,MAAb,CAAN,CAA5C,EAAyEtB,mBAAzE;AAEAJ,EAAAA,KAAK,CAAC2B,IAAN,CACE,oCADF,EAEExB,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAMsB,cAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEtB,mBAJF;AAOAJ,EAAAA,KAAK,CAACwB,GAAN,CACE,oCADF,EAEErB,GAAG,CAAC,SAAD,CAFL,EAGE,uBAAMsB,cAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEtB,mBAJF;AAOAJ,EAAAA,KAAK,CAAC4B,MAAN,CACE,oCADF,EAEEzB,GAAG,CAAC,SAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACjF,UAAMI,IAAI,GAAG,EAAb;AACAA,IAAAA,IAAI,CAACN,GAAG,CAACO,MAAJ,CAAWC,GAAZ,CAAJ,GAAuB,IAAvB;AACAX,IAAAA,OAAO,CAACY,SAAR,CAAkBT,GAAG,CAACO,MAAJ,CAAWG,OAA7B,EAAsCJ,IAAtC,EAA4C,UAAUK,GAAV,EAAiD;AAC3F,UAAIA,GAAJ,EAAS;AACP,eAAOT,IAAI,CAACS,GAAD,CAAX;AACD;;AACDV,MAAAA,GAAG,CAACW,MAAJ,CAAWC,gBAAUC,WAAV,CAAsBC,OAAjC;AACA,aAAOb,IAAI,CAAC;AACVc,QAAAA,EAAE,EAAEH,gBAAUI,WAAV,CAAsBO;AADhB,OAAD,CAAX;AAGD,KARD;AASD,GAfH;AAkBA7B,EAAAA,KAAK,CAAC8B,GAAN,CACE,+BADF,EAEE3B,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACjFL,IAAAA,OAAO,CAAC6B,UAAR,CAAmB;AACjBC,MAAAA,IAAI,EAAE3B,GAAG,CAACO,MAAJ,CAAWG,OADA;AAEjBkB,MAAAA,WAAW,EAAE,IAFI;AAGjB5B,MAAAA,GAHiB;AAIjB6B,MAAAA,QAAQ,EAAE,UAAUlB,GAAV,EAA+BmB,IAA/B,EAAgE;AACxE,YAAInB,GAAJ,EAAS;AACP,iBAAOT,IAAI,CAACS,GAAD,CAAX;AACD;;AAEDT,QAAAA,IAAI,CAAC4B,IAAI,CAACjB,gBAAUkB,SAAX,CAAL,CAAJ;AACD;AAVgB,KAAnB;AAYD,GAhBH;AAmBApC,EAAAA,KAAK,CAAC2B,IAAN,CACE,+BADF,EAEExB,GAAG,CAAC,SAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAAmF;AACjFL,IAAAA,OAAO,CAACY,SAAR,CACET,GAAG,CAACO,MAAJ,CAAWG,OADb,EAEEV,GAAG,CAACK,IAFN,EAGE,UAAUM,GAAV,EAAiD;AAC/C,UAAIA,GAAJ,EAAS;AACP,eAAOT,IAAI,CAACS,GAAD,CAAX;AACD;;AACDV,MAAAA,GAAG,CAACW,MAAJ,CAAWC,gBAAUC,WAAV,CAAsBC,OAAjC;AACA,aAAOb,IAAI,CAAC;AACVc,QAAAA,EAAE,EAAEH,gBAAUI,WAAV,CAAsBe;AADhB,OAAD,CAAX;AAGD,KAXH;AAaD,GAjBH;AAmBD","sourcesContent":["import { Router } from 'express';\nimport _ from 'lodash';\nimport mime from 'mime';\n\nimport { IAuth } from '@verdaccio/auth';\nimport { VerdaccioError, constants } from '@verdaccio/core';\nimport { allow, media } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Package } from '@verdaccio/types';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nexport default function (route: Router, auth: IAuth, storage: Storage): void {\n  const can = allow(auth);\n  const tag_package_version = function (\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer\n  ): $NextFunctionVer {\n    if (_.isString(req.body) === false) {\n      return next('route');\n    }\n\n    const tags = {};\n    tags[req.params.tag] = req.body;\n    storage.mergeTags(req.params.package, tags, function (err: Error): $NextFunctionVer {\n      if (err) {\n        return next(err);\n      }\n      res.status(constants.HTTP_STATUS.CREATED);\n      return next({ ok: constants.API_MESSAGE.TAG_ADDED });\n    });\n  };\n\n  // tagging a package.\n  route.put('/:package/:tag', can('publish'), media(mime.getType('json')), tag_package_version);\n\n  route.post(\n    '/-/package/:package/dist-tags/:tag',\n    can('publish'),\n    media(mime.getType('json')),\n    tag_package_version\n  );\n\n  route.put(\n    '/-/package/:package/dist-tags/:tag',\n    can('publish'),\n    media(mime.getType('json')),\n    tag_package_version\n  );\n\n  route.delete(\n    '/-/package/:package/dist-tags/:tag',\n    can('publish'),\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      const tags = {};\n      tags[req.params.tag] = null;\n      storage.mergeTags(req.params.package, tags, function (err: VerdaccioError): $NextFunctionVer {\n        if (err) {\n          return next(err);\n        }\n        res.status(constants.HTTP_STATUS.CREATED);\n        return next({\n          ok: constants.API_MESSAGE.TAG_REMOVED,\n        });\n      });\n    }\n  );\n\n  route.get(\n    '/-/package/:package/dist-tags',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      storage.getPackage({\n        name: req.params.package,\n        uplinksLook: true,\n        req,\n        callback: function (err: VerdaccioError, info: Package): $NextFunctionVer {\n          if (err) {\n            return next(err);\n          }\n\n          next(info[constants.DIST_TAGS]);\n        },\n      });\n    }\n  );\n\n  route.post(\n    '/-/package/:package/dist-tags',\n    can('publish'),\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n      storage.mergeTags(\n        req.params.package,\n        req.body,\n        function (err: VerdaccioError): $NextFunctionVer {\n          if (err) {\n            return next(err);\n          }\n          res.status(constants.HTTP_STATUS.CREATED);\n          return next({\n            ok: constants.API_MESSAGE.TAG_UPDATED,\n          });\n        }\n      );\n    }\n  );\n}\n"],"file":"dist-tags.js"}
+{"version":3,"file":"dist-tags.js","names":["route","auth","storage","can","allow","addTagPackageVersionMiddleware","req","res","next","_","isString","body","errorUtils","getBadRequest","tags","params","tag","mergeTagsNext","package","status","constants","HTTP_STATUS","CREATED","ok","API_MESSAGE","TAG_ADDED","err","put","media","mime","getType","delete","TAG_REMOVED","get","name","requestOptions","protocol","headers","host","remoteAddress","socket","manifest","getPackageByOptions","uplinksLook","DIST_TAGS","post","TAG_UPDATED"],"sources":["../src/dist-tags.ts"],"sourcesContent":["import { Router } from 'express';\nimport _ from 'lodash';\nimport mime from 'mime';\n\nimport { IAuth } from '@verdaccio/auth';\nimport { constants, errorUtils } from '@verdaccio/core';\nimport { allow, media } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nexport default function (route: Router, auth: IAuth, storage: Storage): void {\n  const can = allow(auth);\n  const addTagPackageVersionMiddleware = async function (\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer\n  ): Promise<$NextFunctionVer> {\n    if (_.isString(req.body) === false) {\n      return next(errorUtils.getBadRequest('version is missing'));\n    }\n\n    const tags = {};\n    tags[req.params.tag] = req.body;\n    try {\n      await storage.mergeTagsNext(req.params.package, tags);\n      res.status(constants.HTTP_STATUS.CREATED);\n      return next({\n        ok: constants.API_MESSAGE.TAG_ADDED,\n      });\n    } catch (err) {\n      next(err);\n    }\n  };\n\n  // tagging a package.\n  route.put(\n    '/:package/:tag',\n    can('publish'),\n    media(mime.getType('json')),\n    addTagPackageVersionMiddleware\n  );\n\n  route.put(\n    '/-/package/:package/dist-tags/:tag',\n    can('publish'),\n    media(mime.getType('json')),\n    addTagPackageVersionMiddleware\n  );\n\n  route.delete(\n    '/-/package/:package/dist-tags/:tag',\n    can('publish'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      const tags = {};\n      tags[req.params.tag] = null;\n      try {\n        await storage.mergeTagsNext(req.params.package, tags);\n        res.status(constants.HTTP_STATUS.CREATED);\n        return next({\n          ok: constants.API_MESSAGE.TAG_REMOVED,\n        });\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n\n  route.get(\n    '/-/package/:package/dist-tags',\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      const name = req.params.package;\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n        remoteAddress: req.socket.remoteAddress,\n      };\n      try {\n        const manifest = await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          requestOptions,\n        });\n        next(manifest[constants.DIST_TAGS]);\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n\n  route.post(\n    '/-/package/:package/dist-tags',\n    can('publish'),\n    async function (\n      req: $RequestExtend,\n      res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      try {\n        await storage.mergeTagsNext(req.params.package, req.body);\n        res.status(constants.HTTP_STATUS.CREATED);\n        return next({\n          ok: constants.API_MESSAGE.TAG_UPDATED,\n        });\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n}\n"],"mappings":";;;;;;;AACA;;AACA;;AAGA;;AACA;;;;AAKe,kBAAUA,KAAV,EAAyBC,IAAzB,EAAsCC,OAAtC,EAA8D;EAC3E,MAAMC,GAAG,GAAG,IAAAC,iBAAA,EAAMH,IAAN,CAAZ;;EACA,MAAMI,8BAA8B,GAAG,gBACrCC,GADqC,EAErCC,GAFqC,EAGrCC,IAHqC,EAIV;IAC3B,IAAIC,eAAA,CAAEC,QAAF,CAAWJ,GAAG,CAACK,IAAf,MAAyB,KAA7B,EAAoC;MAClC,OAAOH,IAAI,CAACI,gBAAA,CAAWC,aAAX,CAAyB,oBAAzB,CAAD,CAAX;IACD;;IAED,MAAMC,IAAI,GAAG,EAAb;IACAA,IAAI,CAACR,GAAG,CAACS,MAAJ,CAAWC,GAAZ,CAAJ,GAAuBV,GAAG,CAACK,IAA3B;;IACA,IAAI;MACF,MAAMT,OAAO,CAACe,aAAR,CAAsBX,GAAG,CAACS,MAAJ,CAAWG,OAAjC,EAA0CJ,IAA1C,CAAN;MACAP,GAAG,CAACY,MAAJ,CAAWC,eAAA,CAAUC,WAAV,CAAsBC,OAAjC;MACA,OAAOd,IAAI,CAAC;QACVe,EAAE,EAAEH,eAAA,CAAUI,WAAV,CAAsBC;MADhB,CAAD,CAAX;IAGD,CAND,CAME,OAAOC,GAAP,EAAY;MACZlB,IAAI,CAACkB,GAAD,CAAJ;IACD;EACF,CApBD,CAF2E,CAwB3E;;;EACA1B,KAAK,CAAC2B,GAAN,CACE,gBADF,EAEExB,GAAG,CAAC,SAAD,CAFL,EAGE,IAAAyB,iBAAA,EAAMC,aAAA,CAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEzB,8BAJF;EAOAL,KAAK,CAAC2B,GAAN,CACE,oCADF,EAEExB,GAAG,CAAC,SAAD,CAFL,EAGE,IAAAyB,iBAAA,EAAMC,aAAA,CAAKC,OAAL,CAAa,MAAb,CAAN,CAHF,EAIEzB,8BAJF;EAOAL,KAAK,CAAC+B,MAAN,CACE,oCADF,EAEE5B,GAAG,CAAC,SAAD,CAFL,EAGE,gBACEG,GADF,EAEEC,GAFF,EAGEC,IAHF,EAIiB;IACf,MAAMM,IAAI,GAAG,EAAb;IACAA,IAAI,CAACR,GAAG,CAACS,MAAJ,CAAWC,GAAZ,CAAJ,GAAuB,IAAvB;;IACA,IAAI;MACF,MAAMd,OAAO,CAACe,aAAR,CAAsBX,GAAG,CAACS,MAAJ,CAAWG,OAAjC,EAA0CJ,IAA1C,CAAN;MACAP,GAAG,CAACY,MAAJ,CAAWC,eAAA,CAAUC,WAAV,CAAsBC,OAAjC;MACA,OAAOd,IAAI,CAAC;QACVe,EAAE,EAAEH,eAAA,CAAUI,WAAV,CAAsBQ;MADhB,CAAD,CAAX;IAGD,CAND,CAME,OAAON,GAAP,EAAY;MACZlB,IAAI,CAACkB,GAAD,CAAJ;IACD;EACF,CAnBH;EAsBA1B,KAAK,CAACiC,GAAN,CACE,+BADF,EAEE9B,GAAG,CAAC,QAAD,CAFL,EAGE,gBACEG,GADF,EAEEC,GAFF,EAGEC,IAHF,EAIiB;IACf,MAAM0B,IAAI,GAAG5B,GAAG,CAACS,MAAJ,CAAWG,OAAxB;IACA,MAAMiB,cAAc,GAAG;MACrBC,QAAQ,EAAE9B,GAAG,CAAC8B,QADO;MAErBC,OAAO,EAAE/B,GAAG,CAAC+B,OAFQ;MAGrB;MACAC,IAAI,EAAEhC,GAAG,CAACgC,IAJW;MAKrBC,aAAa,EAAEjC,GAAG,CAACkC,MAAJ,CAAWD;IALL,CAAvB;;IAOA,IAAI;MACF,MAAME,QAAQ,GAAG,MAAMvC,OAAO,CAACwC,mBAAR,CAA4B;QACjDR,IADiD;QAEjDS,WAAW,EAAE,IAFoC;QAGjDR;MAHiD,CAA5B,CAAvB;MAKA3B,IAAI,CAACiC,QAAQ,CAACrB,eAAA,CAAUwB,SAAX,CAAT,CAAJ;IACD,CAPD,CAOE,OAAOlB,GAAP,EAAY;MACZlB,IAAI,CAACkB,GAAD,CAAJ;IACD;EACF,CA1BH;EA6BA1B,KAAK,CAAC6C,IAAN,CACE,+BADF,EAEE1C,GAAG,CAAC,SAAD,CAFL,EAGE,gBACEG,GADF,EAEEC,GAFF,EAGEC,IAHF,EAIiB;IACf,IAAI;MACF,MAAMN,OAAO,CAACe,aAAR,CAAsBX,GAAG,CAACS,MAAJ,CAAWG,OAAjC,EAA0CZ,GAAG,CAACK,IAA9C,CAAN;MACAJ,GAAG,CAACY,MAAJ,CAAWC,eAAA,CAAUC,WAAV,CAAsBC,OAAjC;MACA,OAAOd,IAAI,CAAC;QACVe,EAAE,EAAEH,eAAA,CAAUI,WAAV,CAAsBsB;MADhB,CAAD,CAAX;IAGD,CAND,CAME,OAAOpB,GAAP,EAAY;MACZlB,IAAI,CAACkB,GAAD,CAAJ;IACD;EACF,CAjBH;AAmBD"}

package/build/index.js

@@ -9,8 +9,6 @@ var _bodyParser = _interopRequireDefault(require("body-parser"));
 
 var _express = _interopRequireDefault(require("express"));
 
-var _semver = _interopRequireDefault(require("semver"));
-
 var _middleware = require("@verdaccio/middleware");
 
 var _distTags = _interopRequireDefault(require("./dist-tags"));
@@ -37,10 +35,6 @@ var _whoami = _interopRequireDefault(require("./whoami"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-if (_semver.default.lte(process.version, 'v15.0.0')) {
-  global.AbortController = require('abortcontroller-polyfill/dist/cjs-ponyfill').AbortController;
-}
-
 function _default(config, auth, storage) {
   /* eslint new-cap:off */
   const app = _express.default.Router();
@@ -77,7 +71,7 @@ function _default(config, auth, storage) {
   (0, _search.default)(app);
   (0, _user.default)(app, auth, config);
   (0, _distTags.default)(app, auth, storage);
-  (0, _publish.default)(app, auth, storage, config);
+  (0, _publish.default)(app, auth, storage);
   (0, _ping.default)(app);
   (0, _stars.default)(app, storage); // @ts-ignore
 

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["semver","lte","process","version","global","AbortController","require","config","auth","storage","app","express","Router","param","validatePackage","validateName","use","apiJWTmiddleware","bodyParser","json","strict","limit","max_body_size","encodeScopePackage"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AAGA;;AAUA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;;;AAEA,IAAIA,gBAAOC,GAAP,CAAWC,OAAO,CAACC,OAAnB,EAA4B,SAA5B,CAAJ,EAA4C;AAC1CC,EAAAA,MAAM,CAACC,eAAP,GAAyBC,OAAO,CAAC,4CAAD,CAAP,CAAsDD,eAA/E;AACD;;AAEc,kBAAUE,MAAV,EAA0BC,IAA1B,EAAuCC,OAAvC,EAAiE;AAC9E;AACA,QAAMC,GAAG,GAAGC,iBAAQC,MAAR,EAAZ;AACA;AAEA;AACA;;;AACAF,EAAAA,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBC,2BAArB;AACAJ,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,KAAV,EAAiBE,wBAAjB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBE,wBAArB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,OAAV,EAAmBE,wBAAnB,EAZ8E,CAc9E;AACA;;AACAL,EAAAA,GAAG,CAACG,KAAJ,CAAU,MAAV,EAAkB,uBAAM,QAAN,CAAlB;AACAH,EAAAA,GAAG,CAACG,KAAJ,CAAU,kBAAV,EAA8B,uBAAM,sBAAN,CAA9B;AACAH,EAAAA,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsB,uBAAM,IAAN,CAAtB;AACAH,EAAAA,GAAG,CAACM,GAAJ,CAAQR,IAAI,CAACS,gBAAL,EAAR;AACAP,EAAAA,GAAG,CAACM,GAAJ,CAAQE,oBAAWC,IAAX,CAAgB;AAAEC,IAAAA,MAAM,EAAE,KAAV;AAAiBC,IAAAA,KAAK,EAAEd,MAAM,CAACe,aAAP,IAAwB;AAAhD,GAAhB,CAAR,EApB8E,CAqB9E;;AACAZ,EAAAA,GAAG,CAACM,GAAJ,CAAQ,0BAAST,MAAT,CAAR,EAtB8E,CAuB9E;;AACAG,EAAAA,GAAG,CAACM,GAAJ,CAAQO,8BAAR,EAxB8E,CAyB9E;;AACA,uBAAOb,GAAP;AACA,wBAAIA,GAAJ,EAASF,IAAT,EAAeC,OAAf;AACA,wBAAQC,GAAR,EAAaF,IAAb,EA5B8E,CA6B9E;;AACA,uBAAOE,GAAP;AACA,qBAAKA,GAAL,EAAUF,IAAV,EAAgBD,MAAhB;AACA,yBAASG,GAAT,EAAcF,IAAd,EAAoBC,OAApB;AACA,wBAAQC,GAAR,EAAaF,IAAb,EAAmBC,OAAnB,EAA4BF,MAA5B;AACA,qBAAKG,GAAL;AACA,sBAAMA,GAAN,EAAWD,OAAX,EAnC8E,CAoC9E;;AACA,wBAASC,GAAT,EAAcF,IAAd,EAAoBC,OAApB;AACA,sBAAMC,GAAN,EAAWF,IAAX,EAAiBC,OAAjB,EAA0BF,MAA1B;AACA,SAAOG,GAAP;AACD","sourcesContent":["import bodyParser from 'body-parser';\nimport express, { Router } from 'express';\nimport semver from 'semver';\n\nimport { IAuth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  match,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Config } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nif (semver.lte(process.version, 'v15.0.0')) {\n  global.AbortController = require('abortcontroller-polyfill/dist/cjs-ponyfill').AbortController;\n}\n\nexport default function (config: Config, auth: IAuth, storage: Storage): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n  /* eslint new-cap:off */\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // these can't be safely put into express url for some reason\n  // TODO: For some reason? what reason?\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n  app.param('anything', match(/.*/));\n  app.use(auth.apiJWTmiddleware());\n  app.use(bodyParser.json({ strict: false, limit: config.max_body_size || '10mb' }));\n  // @ts-ignore\n  app.use(antiLoop(config));\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  pkg(app, auth, storage);\n  profile(app, auth);\n  // @deprecated endpoint, 404 by default\n  search(app);\n  user(app, auth, config);\n  distTags(app, auth, storage);\n  publish(app, auth, storage, config);\n  ping(app);\n  stars(app, storage);\n  // @ts-ignore\n  v1Search(app, auth, storage);\n  token(app, auth, storage, config);\n  return app;\n}\n"],"file":"index.js"}
+{"version":3,"file":"index.js","names":["config","auth","storage","app","express","Router","param","validatePackage","validateName","match","use","apiJWTmiddleware","bodyParser","json","strict","limit","max_body_size","antiLoop","encodeScopePackage","whoami","pkg","profile","search","user","distTags","publish","ping","stars","v1Search","token"],"sources":["../src/index.ts"],"sourcesContent":["import bodyParser from 'body-parser';\nimport express, { Router } from 'express';\n\nimport { IAuth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  match,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport { Config } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nexport default function (config: Config, auth: IAuth, storage: Storage): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n  /* eslint new-cap:off */\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // these can't be safely put into express url for some reason\n  // TODO: For some reason? what reason?\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n  app.param('anything', match(/.*/));\n  app.use(auth.apiJWTmiddleware());\n  app.use(bodyParser.json({ strict: false, limit: config.max_body_size || '10mb' }));\n  // @ts-ignore\n  app.use(antiLoop(config));\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  pkg(app, auth, storage);\n  profile(app, auth);\n  // @deprecated endpoint, 404 by default\n  search(app);\n  user(app, auth, config);\n  distTags(app, auth, storage);\n  publish(app, auth, storage);\n  ping(app);\n  stars(app, storage);\n  // @ts-ignore\n  v1Search(app, auth, storage);\n  token(app, auth, storage, config);\n  return app;\n}\n"],"mappings":";;;;;;;AAAA;;AACA;;AAGA;;AAUA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;AACA;;;;AAEe,kBAAUA,MAAV,EAA0BC,IAA1B,EAAuCC,OAAvC,EAAiE;EAC9E;EACA,MAAMC,GAAG,GAAGC,gBAAA,CAAQC,MAAR,EAAZ;EACA;EAEA;EACA;;;EACAF,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBC,2BAArB;EACAJ,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;EACAL,GAAG,CAACG,KAAJ,CAAU,KAAV,EAAiBE,wBAAjB;EACAL,GAAG,CAACG,KAAJ,CAAU,SAAV,EAAqBE,wBAArB;EACAL,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsBE,wBAAtB;EACAL,GAAG,CAACG,KAAJ,CAAU,OAAV,EAAmBE,wBAAnB,EAZ8E,CAc9E;EACA;;EACAL,GAAG,CAACG,KAAJ,CAAU,MAAV,EAAkB,IAAAG,iBAAA,EAAM,QAAN,CAAlB;EACAN,GAAG,CAACG,KAAJ,CAAU,kBAAV,EAA8B,IAAAG,iBAAA,EAAM,sBAAN,CAA9B;EACAN,GAAG,CAACG,KAAJ,CAAU,UAAV,EAAsB,IAAAG,iBAAA,EAAM,IAAN,CAAtB;EACAN,GAAG,CAACO,GAAJ,CAAQT,IAAI,CAACU,gBAAL,EAAR;EACAR,GAAG,CAACO,GAAJ,CAAQE,mBAAA,CAAWC,IAAX,CAAgB;IAAEC,MAAM,EAAE,KAAV;IAAiBC,KAAK,EAAEf,MAAM,CAACgB,aAAP,IAAwB;EAAhD,CAAhB,CAAR,EApB8E,CAqB9E;;EACAb,GAAG,CAACO,GAAJ,CAAQ,IAAAO,oBAAA,EAASjB,MAAT,CAAR,EAtB8E,CAuB9E;;EACAG,GAAG,CAACO,GAAJ,CAAQQ,8BAAR,EAxB8E,CAyB9E;;EACA,IAAAC,eAAA,EAAOhB,GAAP;EACA,IAAAiB,gBAAA,EAAIjB,GAAJ,EAASF,IAAT,EAAeC,OAAf;EACA,IAAAmB,gBAAA,EAAQlB,GAAR,EAAaF,IAAb,EA5B8E,CA6B9E;;EACA,IAAAqB,eAAA,EAAOnB,GAAP;EACA,IAAAoB,aAAA,EAAKpB,GAAL,EAAUF,IAAV,EAAgBD,MAAhB;EACA,IAAAwB,iBAAA,EAASrB,GAAT,EAAcF,IAAd,EAAoBC,OAApB;EACA,IAAAuB,gBAAA,EAAQtB,GAAR,EAAaF,IAAb,EAAmBC,OAAnB;EACA,IAAAwB,aAAA,EAAKvB,GAAL;EACA,IAAAwB,cAAA,EAAMxB,GAAN,EAAWD,OAAX,EAnC8E,CAoC9E;;EACA,IAAA0B,gBAAA,EAASzB,GAAT,EAAcF,IAAd,EAAoBC,OAApB;EACA,IAAA2B,cAAA,EAAM1B,GAAN,EAAWF,IAAX,EAAiBC,OAAjB,EAA0BF,MAA1B;EACA,OAAOG,GAAP;AACD"}

package/build/package.js

@@ -15,43 +15,27 @@ function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { de
 
 const debug = (0, _debug.default)('verdaccio:api:package');
 
-const downloadStream = (packageName, filename, storage, _req, res) => {
-  const stream = storage.getTarball(packageName, filename);
-  stream.on('content-length', function (content) {
-    res.header('Content-Length', content);
-  });
-  stream.on('error', function (err) {
-    return res.locals.report_error(err);
-  });
-  res.header(_core.HEADERS.CONTENT_TYPE, _core.HEADERS.OCTET_STREAM);
-  stream.pipe(res);
-};
-
 function _default(route, auth, storage) {
   const can = (0, _middleware.allow)(auth);
   route.get('/:package/:version?', can('access'), async function (req, _res, next) {
     debug('init package by version');
     const name = req.params.package;
-    let queryVersion = req.params.version;
+    let version = req.params.version;
+    const write = req.query.write === 'true';
     const requestOptions = {
       protocol: req.protocol,
       headers: req.headers,
       // FIXME: if we migrate to req.hostname, the port is not longer included.
-      host: req.host
+      host: req.host,
+      remoteAddress: req.socket.remoteAddress,
+      byPassCache: write
     };
 
     try {
-      // TODO: this is just temporary while I migrate all plugins to use the new API
-      // the method will be renamed to getPackage again but Promise Based.
-      if (!storage.getPackageByOptions) {
-        throw _core.errorUtils.getInternalError('getPackageByOptions not implemented, check pr-2750 for more details');
-      }
-
       const manifest = await storage.getPackageByOptions({
         name,
         uplinksLook: true,
-        req,
-        version: queryVersion,
+        version,
         requestOptions
       });
       next(manifest);
@@ -59,15 +43,36 @@ function _default(route, auth, storage) {
       next(err);
     }
   });
-  route.get('/:scopedPackage/-/:scope/:filename', can('access'), function (req, res) {
+  route.get('/:pkg/-/:filename', can('access'), async function (req, res, next) {
     const {
-      scopedPackage,
+      pkg,
       filename
     } = req.params;
-    downloadStream(scopedPackage, filename, storage, req, res);
-  });
-  route.get('/:package/-/:filename', can('access'), function (req, res) {
-    downloadStream(req.params.package, req.params.filename, storage, req, res);
+    const abort = new AbortController();
+
+    try {
+      const stream = await storage.getTarballNext(pkg, filename, {
+        signal: abort.signal // enableRemote: true,
+
+      });
+      stream.on('content-length', size => {
+        res.header(_core.HEADER_TYPE.CONTENT_LENGTH, size);
+      });
+      stream.once('error', err => {
+        res.locals.report_error(err);
+        next(err);
+      });
+      req.on('abort', () => {
+        debug('request aborted for %o', req.url);
+        abort.abort();
+      });
+      res.header(_core.HEADERS.CONTENT_TYPE, _core.HEADERS.OCTET_STREAM);
+      stream.pipe(res);
+    } catch (err) {
+      // console.log('catch API error request', err);
+      res.locals.report_error(err);
+      next(err);
+    }
   });
 }
 //# sourceMappingURL=package.js.map

package/build/package.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/package.ts"],"names":["debug","downloadStream","packageName","filename","storage","_req","res","stream","getTarball","on","content","header","err","locals","report_error","HEADERS","CONTENT_TYPE","OCTET_STREAM","pipe","route","auth","can","get","req","_res","next","name","params","package","queryVersion","version","requestOptions","protocol","headers","host","getPackageByOptions","errorUtils","getInternalError","manifest","uplinksLook","scopedPackage"],"mappings":";;;;;;;AAAA;;AAIA;;AACA;;;;AAKA,MAAMA,KAAK,GAAG,oBAAW,uBAAX,CAAd;;AAEA,MAAMC,cAAc,GAAG,CACrBC,WADqB,EAErBC,QAFqB,EAGrBC,OAHqB,EAIrBC,IAJqB,EAKrBC,GALqB,KAMZ;AACT,QAAMC,MAAM,GAAGH,OAAO,CAACI,UAAR,CAAmBN,WAAnB,EAAgCC,QAAhC,CAAf;AAEAI,EAAAA,MAAM,CAACE,EAAP,CAAU,gBAAV,EAA4B,UAAUC,OAAV,EAAyB;AACnDJ,IAAAA,GAAG,CAACK,MAAJ,CAAW,gBAAX,EAA6BD,OAA7B;AACD,GAFD;AAIAH,EAAAA,MAAM,CAACE,EAAP,CAAU,OAAV,EAAmB,UAAUG,GAAV,EAAqB;AACtC,WAAON,GAAG,CAACO,MAAJ,CAAWC,YAAX,CAAwBF,GAAxB,CAAP;AACD,GAFD;AAIAN,EAAAA,GAAG,CAACK,MAAJ,CAAWI,cAAQC,YAAnB,EAAiCD,cAAQE,YAAzC;AACAV,EAAAA,MAAM,CAACW,IAAP,CAAYZ,GAAZ;AACD,CAnBD;;AAqBe,kBAAUa,KAAV,EAAyBC,IAAzB,EAAsChB,OAAtC,EAA8D;AAC3E,QAAMiB,GAAG,GAAG,uBAAMD,IAAN,CAAZ;AAEAD,EAAAA,KAAK,CAACG,GAAN,CACE,qBADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,gBACEE,GADF,EAEEC,IAFF,EAGEC,IAHF,EAIiB;AACfzB,IAAAA,KAAK,CAAC,yBAAD,CAAL;AACA,UAAM0B,IAAI,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAAxB;AACA,QAAIC,YAAY,GAAGN,GAAG,CAACI,MAAJ,CAAWG,OAA9B;AACA,UAAMC,cAAc,GAAG;AACrBC,MAAAA,QAAQ,EAAET,GAAG,CAACS,QADO;AAErBC,MAAAA,OAAO,EAAEV,GAAG,CAACU,OAFQ;AAGrB;AACAC,MAAAA,IAAI,EAAEX,GAAG,CAACW;AAJW,KAAvB;;AAOA,QAAI;AACF;AACA;AACA,UAAI,CAAC9B,OAAO,CAAC+B,mBAAb,EAAkC;AAChC,cAAMC,iBAAWC,gBAAX,CACJ,qEADI,CAAN;AAGD;;AAED,YAAMC,QAAQ,GAAG,MAAMlC,OAAO,CAAC+B,mBAAR,CAA4B;AACjDT,QAAAA,IADiD;AAEjDa,QAAAA,WAAW,EAAE,IAFoC;AAGjDhB,QAAAA,GAHiD;AAIjDO,QAAAA,OAAO,EAAED,YAJwC;AAKjDE,QAAAA;AALiD,OAA5B,CAAvB;AAOAN,MAAAA,IAAI,CAACa,QAAD,CAAJ;AACD,KAjBD,CAiBE,OAAO1B,GAAP,EAAY;AACZa,MAAAA,IAAI,CAACb,GAAD,CAAJ;AACD;AACF,GAtCH;AAyCAO,EAAAA,KAAK,CAACG,GAAN,CACE,oCADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BjB,GAA/B,EAA2D;AACzD,UAAM;AAAEkC,MAAAA,aAAF;AAAiBrC,MAAAA;AAAjB,QAA8BoB,GAAG,CAACI,MAAxC;AAEA1B,IAAAA,cAAc,CAACuC,aAAD,EAAgBrC,QAAhB,EAA0BC,OAA1B,EAAmCmB,GAAnC,EAAwCjB,GAAxC,CAAd;AACD,GAPH;AAUAa,EAAAA,KAAK,CAACG,GAAN,CACE,uBADF,EAEED,GAAG,CAAC,QAAD,CAFL,EAGE,UAAUE,GAAV,EAA+BjB,GAA/B,EAA2D;AACzDL,IAAAA,cAAc,CAACsB,GAAG,CAACI,MAAJ,CAAWC,OAAZ,EAAqBL,GAAG,CAACI,MAAJ,CAAWxB,QAAhC,EAA0CC,OAA1C,EAAmDmB,GAAnD,EAAwDjB,GAAxD,CAAd;AACD,GALH;AAOD","sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { IAuth } from '@verdaccio/auth';\nimport { HEADERS, errorUtils } from '@verdaccio/core';\nimport { allow } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:package');\n\nconst downloadStream = (\n  packageName: string,\n  filename: string,\n  storage: any,\n  _req: $RequestExtend,\n  res: $ResponseExtend\n): void => {\n  const stream = storage.getTarball(packageName, filename);\n\n  stream.on('content-length', function (content): void {\n    res.header('Content-Length', content);\n  });\n\n  stream.on('error', function (err): void {\n    return res.locals.report_error(err);\n  });\n\n  res.header(HEADERS.CONTENT_TYPE, HEADERS.OCTET_STREAM);\n  stream.pipe(res);\n};\n\nexport default function (route: Router, auth: IAuth, storage: Storage): void {\n  const can = allow(auth);\n\n  route.get(\n    '/:package/:version?',\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      _res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('init package by version');\n      const name = req.params.package;\n      let queryVersion = req.params.version;\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n      };\n\n      try {\n        // TODO: this is just temporary while I migrate all plugins to use the new API\n        // the method will be renamed to getPackage again but Promise Based.\n        if (!storage.getPackageByOptions) {\n          throw errorUtils.getInternalError(\n            'getPackageByOptions not implemented, check pr-2750 for more details'\n          );\n        }\n\n        const manifest = await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          req,\n          version: queryVersion,\n          requestOptions,\n        });\n        next(manifest);\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n\n  route.get(\n    '/:scopedPackage/-/:scope/:filename',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend): void {\n      const { scopedPackage, filename } = req.params;\n\n      downloadStream(scopedPackage, filename, storage, req, res);\n    }\n  );\n\n  route.get(\n    '/:package/-/:filename',\n    can('access'),\n    function (req: $RequestExtend, res: $ResponseExtend): void {\n      downloadStream(req.params.package, req.params.filename, storage, req, res);\n    }\n  );\n}\n"],"file":"package.js"}
+{"version":3,"file":"package.js","names":["debug","buildDebug","route","auth","storage","can","allow","get","req","_res","next","name","params","package","version","write","query","requestOptions","protocol","headers","host","remoteAddress","socket","byPassCache","manifest","getPackageByOptions","uplinksLook","err","res","pkg","filename","abort","AbortController","stream","getTarballNext","signal","on","size","header","HEADER_TYPE","CONTENT_LENGTH","once","locals","report_error","url","HEADERS","CONTENT_TYPE","OCTET_STREAM","pipe"],"sources":["../src/package.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Router } from 'express';\n\nimport { IAuth } from '@verdaccio/auth';\nimport { HEADERS, HEADER_TYPE } from '@verdaccio/core';\nimport { allow } from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nconst debug = buildDebug('verdaccio:api:package');\n\nexport default function (route: Router, auth: IAuth, storage: Storage): void {\n  const can = allow(auth);\n\n  route.get(\n    '/:package/:version?',\n    can('access'),\n    async function (\n      req: $RequestExtend,\n      _res: $ResponseExtend,\n      next: $NextFunctionVer\n    ): Promise<void> {\n      debug('init package by version');\n      const name = req.params.package;\n      let version = req.params.version;\n      const write = req.query.write === 'true';\n      const requestOptions = {\n        protocol: req.protocol,\n        headers: req.headers as any,\n        // FIXME: if we migrate to req.hostname, the port is not longer included.\n        host: req.host,\n        remoteAddress: req.socket.remoteAddress,\n        byPassCache: write,\n      };\n\n      try {\n        const manifest = await storage.getPackageByOptions({\n          name,\n          uplinksLook: true,\n          version,\n          requestOptions,\n        });\n        next(manifest);\n      } catch (err) {\n        next(err);\n      }\n    }\n  );\n\n  route.get(\n    '/:pkg/-/:filename',\n    can('access'),\n    async function (req: $RequestExtend, res: $ResponseExtend, next): Promise<void> {\n      const { pkg, filename } = req.params;\n      const abort = new AbortController();\n      try {\n        const stream = (await storage.getTarballNext(pkg, filename, {\n          signal: abort.signal,\n          // enableRemote: true,\n        })) as any;\n\n        stream.on('content-length', (size) => {\n          res.header(HEADER_TYPE.CONTENT_LENGTH, size);\n        });\n\n        stream.once('error', (err) => {\n          res.locals.report_error(err);\n          next(err);\n        });\n\n        req.on('abort', () => {\n          debug('request aborted for %o', req.url);\n          abort.abort();\n        });\n\n        res.header(HEADERS.CONTENT_TYPE, HEADERS.OCTET_STREAM);\n        stream.pipe(res);\n      } catch (err: any) {\n        // console.log('catch API error request', err);\n        res.locals.report_error(err);\n        next(err);\n      }\n    }\n  );\n}\n"],"mappings":";;;;;;;AAAA;;AAIA;;AACA;;;;AAKA,MAAMA,KAAK,GAAG,IAAAC,cAAA,EAAW,uBAAX,CAAd;;AAEe,kBAAUC,KAAV,EAAyBC,IAAzB,EAAsCC,OAAtC,EAA8D;EAC3E,MAAMC,GAAG,GAAG,IAAAC,iBAAA,EAAMH,IAAN,CAAZ;EAEAD,KAAK,CAACK,GAAN,CACE,qBADF,EAEEF,GAAG,CAAC,QAAD,CAFL,EAGE,gBACEG,GADF,EAEEC,IAFF,EAGEC,IAHF,EAIiB;IACfV,KAAK,CAAC,yBAAD,CAAL;IACA,MAAMW,IAAI,GAAGH,GAAG,CAACI,MAAJ,CAAWC,OAAxB;IACA,IAAIC,OAAO,GAAGN,GAAG,CAACI,MAAJ,CAAWE,OAAzB;IACA,MAAMC,KAAK,GAAGP,GAAG,CAACQ,KAAJ,CAAUD,KAAV,KAAoB,MAAlC;IACA,MAAME,cAAc,GAAG;MACrBC,QAAQ,EAAEV,GAAG,CAACU,QADO;MAErBC,OAAO,EAAEX,GAAG,CAACW,OAFQ;MAGrB;MACAC,IAAI,EAAEZ,GAAG,CAACY,IAJW;MAKrBC,aAAa,EAAEb,GAAG,CAACc,MAAJ,CAAWD,aALL;MAMrBE,WAAW,EAAER;IANQ,CAAvB;;IASA,IAAI;MACF,MAAMS,QAAQ,GAAG,MAAMpB,OAAO,CAACqB,mBAAR,CAA4B;QACjDd,IADiD;QAEjDe,WAAW,EAAE,IAFoC;QAGjDZ,OAHiD;QAIjDG;MAJiD,CAA5B,CAAvB;MAMAP,IAAI,CAACc,QAAD,CAAJ;IACD,CARD,CAQE,OAAOG,GAAP,EAAY;MACZjB,IAAI,CAACiB,GAAD,CAAJ;IACD;EACF,CAhCH;EAmCAzB,KAAK,CAACK,GAAN,CACE,mBADF,EAEEF,GAAG,CAAC,QAAD,CAFL,EAGE,gBAAgBG,GAAhB,EAAqCoB,GAArC,EAA2DlB,IAA3D,EAAgF;IAC9E,MAAM;MAAEmB,GAAF;MAAOC;IAAP,IAAoBtB,GAAG,CAACI,MAA9B;IACA,MAAMmB,KAAK,GAAG,IAAIC,eAAJ,EAAd;;IACA,IAAI;MACF,MAAMC,MAAM,GAAI,MAAM7B,OAAO,CAAC8B,cAAR,CAAuBL,GAAvB,EAA4BC,QAA5B,EAAsC;QAC1DK,MAAM,EAAEJ,KAAK,CAACI,MAD4C,CAE1D;;MAF0D,CAAtC,CAAtB;MAKAF,MAAM,CAACG,EAAP,CAAU,gBAAV,EAA6BC,IAAD,IAAU;QACpCT,GAAG,CAACU,MAAJ,CAAWC,iBAAA,CAAYC,cAAvB,EAAuCH,IAAvC;MACD,CAFD;MAIAJ,MAAM,CAACQ,IAAP,CAAY,OAAZ,EAAsBd,GAAD,IAAS;QAC5BC,GAAG,CAACc,MAAJ,CAAWC,YAAX,CAAwBhB,GAAxB;QACAjB,IAAI,CAACiB,GAAD,CAAJ;MACD,CAHD;MAKAnB,GAAG,CAAC4B,EAAJ,CAAO,OAAP,EAAgB,MAAM;QACpBpC,KAAK,CAAC,wBAAD,EAA2BQ,GAAG,CAACoC,GAA/B,CAAL;QACAb,KAAK,CAACA,KAAN;MACD,CAHD;MAKAH,GAAG,CAACU,MAAJ,CAAWO,aAAA,CAAQC,YAAnB,EAAiCD,aAAA,CAAQE,YAAzC;MACAd,MAAM,CAACe,IAAP,CAAYpB,GAAZ;IACD,CAtBD,CAsBE,OAAOD,GAAP,EAAiB;MACjB;MACAC,GAAG,CAACc,MAAJ,CAAWC,YAAX,CAAwBhB,GAAxB;MACAjB,IAAI,CAACiB,GAAD,CAAJ;IACD;EACF,CAjCH;AAmCD"}

package/build/ping.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/ping.ts"],"names":["route","get","req","res","next"],"mappings":";;;;;;;AAIe,kBAAUA,KAAV,EAA+B;AAC5CA,EAAAA,KAAK,CAACC,GAAN,CACE,SADF,EAEE,UAAUC,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;AAC3EA,IAAAA,IAAI,CAAC,EAAD,CAAJ;AACD,GAJH;AAMD","sourcesContent":["import { Router } from 'express';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nexport default function (route: Router): void {\n  route.get(\n    '/-/ping',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next({});\n    }\n  );\n}\n"],"file":"ping.js"}
+{"version":3,"file":"ping.js","names":["route","get","req","res","next"],"sources":["../src/ping.ts"],"sourcesContent":["import { Router } from 'express';\n\nimport { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\n\nexport default function (route: Router): void {\n  route.get(\n    '/-/ping',\n    function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n      next({});\n    }\n  );\n}\n"],"mappings":";;;;;;;AAIe,kBAAUA,KAAV,EAA+B;EAC5CA,KAAK,CAACC,GAAN,CACE,SADF,EAEE,UAAUC,GAAV,EAA+BC,GAA/B,EAAqDC,IAArD,EAA6E;IAC3EA,IAAI,CAAC,EAAD,CAAJ;EACD,CAJH;AAMD"}

package/build/publish.d.ts

@@ -1,26 +1,83 @@
 import { Router } from 'express';
 import { IAuth } from '@verdaccio/auth';
 import { Storage } from '@verdaccio/store';
-import { Config } from '@verdaccio/types';
-import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
-export default function publish(router: Router, auth: IAuth, storage: Storage, config: Config): void;
 /**
- * Publish a package
- */
-export declare function publishPackage(storage: Storage, config: Config, auth: IAuth): any;
-/**
- * un-publish a package
- */
-export declare function unPublishPackage(storage: Storage): (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) => Promise<any>;
-/**
- * Delete tarball
- */
-export declare function removeTarball(storage: Storage): (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) => void;
-/**
- * Adds a new version
- */
-export declare function addVersion(storage: Storage): (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) => void;
-/**
- * uploadPackageTarball
- */
-export declare function uploadPackageTarball(storage: Storage): (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) => void;
+   * Publish a package / update package / un/start a package
+   *
+   * There are multiples scenarios here to be considered:
+   *
+   * 1. Publish scenario
+   *
+   * Publish a package consist of at least 1 step (PUT) with a metadata payload.
+   * When a package is published, an _attachment property is present that contains the data
+   * of the tarball.
+   *
+   * Example flow of publish.
+   *
+   *  npm http fetch PUT 201 http://localhost:4873/@scope%2ftest1 9627ms
+      npm info lifecycle @scope/test1@1.0.1~publish: @scope/test1@1.0.1
+      npm info lifecycle @scope/test1@1.0.1~postpublish: @scope/test1@1.0.1
+      + @scope/test1@1.0.1
+      npm verb exit [ 0, true ]
+   *
+   *
+   * 2. Unpublish scenario
+   *
+   * Unpublish consist in 3 steps.
+   *  1. Try to fetch  metadata -> if it fails, return 404
+   *  2. Compute metadata locally (client side) and send a mutate payload excluding the version to
+   *    be unpublished
+   *    eg: if metadata reflects 1.0.1, 1.0.2 and 1.0.3, the computed metadata won't include 1.0.3.
+   *  3. Once the second step has been successfully finished, delete the tarball.
+   *
+   *  All these steps are consecutive and required, there is no transacions here, if step 3 fails,
+   *  metadata might get corrupted.
+   *
+   *  Note the unpublish call will suffix in the url a /-rev/14-5d500cfce92f90fd revision number,
+   *  this not
+   *  used internally.
+   *
+   *
+   * Example flow of unpublish.
+   *
+   * There are two possible flows:
+   *
+   * - Remove all pacakges (entirely)
+   *   eg: npm unpublish package-name@* --force
+   *   eg: npm unpublish package-name  --force
+   *
+   * npm http fetch GET 200 http://localhost:4873/custom-name?write=true 1680ms
+   * npm http fetch DELETE 201 http://localhost:4873/custom-name/-/test1-1.0.3.tgz/-rev/16-e11c8db282b2d992 19ms
+   *
+   * - Remove a specific version
+   *   eg: npm unpublish package-name@1.0.0 --force
+   *
+   * Get fresh manifest
+   * npm http fetch GET 200 http://localhost:4873/custom-name?write=true 1680ms
+   * Update manifest without the version to be unpublished
+   * npm http fetch PUT 201 http://localhost:4873/custom-name/-rev/14-5d500cfce92f90fd 956606ms
+   * Get fresh manifest (revision should be different)
+   * npm http fetch GET 200 http://localhost:4873/custom-name?write=true 1601ms
+   * Remove the tarball
+   * npm http fetch DELETE 201 http://localhost:4873/custom-name/-/test1-1.0.3.tgz/-rev/16-e11c8db282b2d992 19ms
+   *
+   * 3. Star a package
+   *
+   * Permissions: start a package depends of the publish and unpublish permissions, there is no
+   * specific flag for star or un start.
+   * The URL for star is similar to the unpublish (change package format)
+   *
+   * npm has no enpoint for star a package, rather mutate the metadata and acts as, the difference
+   * is the users property which is part of the payload and the body only includes
+   *
+   * {
+          "_id": pkgName,
+        "_rev": "3-b0cdaefc9bdb77c8",
+          "users": {
+            [username]: boolean value (true, false)
+          }
+    }
+   *
+   */
+export default function publish(router: Router, auth: IAuth, storage: Storage): void;
+export declare function publishPackageNext(storage: Storage): any;