@verdaccio/core 8.1.4 → 8.2.0

package/build/constants.mjs

@@ -0,0 +1,185 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+import httpCodes from "http-status-codes";
+//#region src/constants.ts
+var constants_exports = /* @__PURE__ */ __exportAll({
+	ANONYMOUS_USER: () => ANONYMOUS_USER,
+	API_MESSAGE: () => API_MESSAGE,
+	CHARACTER_ENCODING: () => CHARACTER_ENCODING,
+	DEFAULT_DOMAIN: () => DEFAULT_DOMAIN,
+	DEFAULT_PASSWORD_VALIDATION: () => DEFAULT_PASSWORD_VALIDATION,
+	DEFAULT_PORT: () => DEFAULT_PORT,
+	DEFAULT_PROTOCOL: () => DEFAULT_PROTOCOL,
+	DEFAULT_USER: () => DEFAULT_USER,
+	DIST_TAGS: () => DIST_TAGS,
+	ERROR_CODE: () => ERROR_CODE,
+	HEADERS: () => HEADERS,
+	HEADER_TYPE: () => HEADER_TYPE,
+	HTTP_STATUS: () => HTTP_STATUS,
+	HtpasswdHashAlgorithm: () => HtpasswdHashAlgorithm,
+	LATEST: () => LATEST,
+	LOG_STATUS_MESSAGE: () => LOG_STATUS_MESSAGE,
+	LOG_VERDACCIO_BYTES: () => LOG_VERDACCIO_BYTES,
+	LOG_VERDACCIO_ERROR: () => LOG_VERDACCIO_ERROR,
+	MAINTAINERS: () => MAINTAINERS,
+	PACKAGE_ACCESS: () => PACKAGE_ACCESS,
+	PLUGIN_CATEGORY: () => PLUGIN_CATEGORY,
+	PLUGIN_PREFIX: () => PLUGIN_PREFIX,
+	PLUGIN_UI_PREFIX: () => PLUGIN_UI_PREFIX,
+	ROLES: () => ROLES,
+	TIME_EXPIRATION_1H: () => "1h",
+	TIME_EXPIRATION_24H: () => "24h",
+	TOKEN_BASIC: () => TOKEN_BASIC,
+	TOKEN_BEARER: () => TOKEN_BEARER,
+	USERS: () => USERS
+});
+var DEFAULT_PASSWORD_VALIDATION = /.{3}$/;
+var DIST_TAGS = "dist-tags";
+var LATEST = "latest";
+var USERS = "users";
+var MAINTAINERS = "maintainers";
+var DEFAULT_USER = "Anonymous";
+var ANONYMOUS_USER = "anonymous";
+var HEADER_TYPE = {
+	CONTENT_ENCODING: "content-encoding",
+	CONTENT_TYPE: "content-type",
+	CONTENT_LENGTH: "content-length",
+	ACCEPT_ENCODING: "accept-encoding",
+	AUTHORIZATION: "authorization"
+};
+var CHARACTER_ENCODING = { UTF8: "utf8" };
+var TOKEN_BASIC = "Basic";
+var TOKEN_BEARER = "Bearer";
+var HEADERS = {
+	ACCEPT: "Accept",
+	ACCEPT_ENCODING: "Accept-Encoding",
+	USER_AGENT: "User-Agent",
+	JSON: "application/json",
+	CONTENT_TYPE: "Content-type",
+	CONTENT_LENGTH: "content-length",
+	TEXT_PLAIN: "text/plain",
+	TEXT_PLAIN_UTF8: "text/plain; charset=utf-8",
+	TEXT_HTML_UTF8: "text/html; charset=utf-8",
+	TEXT_HTML: "text/html",
+	AUTHORIZATION: "authorization",
+	CACHE_CONTROL: "Cache-Control",
+	NO_CACHE: "no-cache, no-store",
+	RETRY_AFTER: "Retry-After",
+	FORWARDED_PROTO: "X-Forwarded-Proto",
+	FORWARDED_FOR: "X-Forwarded-For",
+	FRAMES_OPTIONS: "X-Frame-Options",
+	CSP: "Content-Security-Policy",
+	CTO: "X-Content-Type-Options",
+	XSS: "X-XSS-Protection",
+	CLIENT: "X-Client",
+	POWERED_BY: "X-Powered-By",
+	RATELIMIT_LIMIT: "X-RateLimit-Limit",
+	RATELIMIT_REMAINING: "X-RateLimit-Remaining",
+	NONE_MATCH: "If-None-Match",
+	ETAG: "ETag",
+	JSON_CHARSET: "application/json; charset=utf-8",
+	JSON_INSTALL_CHARSET: "application/vnd.npm.install-v1+json; charset=utf-8",
+	OCTET_STREAM: "application/octet-stream; charset=utf-8",
+	TEXT_CHARSET: "text/plain; charset=utf-8",
+	JAVASCRIPT_CHARSET: "application/javascript; charset=utf-8",
+	WWW_AUTH: "WWW-Authenticate",
+	GZIP: "gzip",
+	HOST: "host"
+};
+/**
+* HTTP status codes used throughout Verdaccio.
+*/
+var HTTP_STATUS = {
+	/** 202: The request has been accepted for processing, but the processing is not yet complete. */
+	ACCEPTED: httpCodes.ACCEPTED,
+	/** 200: Standard response for successful HTTP requests. */
+	OK: httpCodes.OK,
+	/** 201: The request has been fulfilled and resulted in a new resource being created. */
+	CREATED: httpCodes.CREATED,
+	/** 300: Indicates multiple options for the resource from which the client may choose. */
+	MULTIPLE_CHOICES: httpCodes.MULTIPLE_CHOICES,
+	/** 304: Indicates that the resource has not been modified since the last request. */
+	NOT_MODIFIED: httpCodes.NOT_MODIFIED,
+	/** 400: The server could not understand the request due to invalid syntax. */
+	BAD_REQUEST: httpCodes.BAD_REQUEST,
+	/** 401: The client must authenticate itself to get the requested response. */
+	UNAUTHORIZED: httpCodes.UNAUTHORIZED,
+	/** 403: The client does not have access rights to the content. */
+	FORBIDDEN: httpCodes.FORBIDDEN,
+	/** 404: The server can not find the requested resource. */
+	NOT_FOUND: httpCodes.NOT_FOUND,
+	/** 408: The server timed out waiting for the request. */
+	REQUEST_TIMEOUT: httpCodes.REQUEST_TIMEOUT,
+	/** 409: The request could not be completed due to a conflict with the current state of the resource. */
+	CONFLICT: httpCodes.CONFLICT,
+	/** 415: The media format of the requested data is not supported by the server. */
+	UNSUPPORTED_MEDIA: httpCodes.UNSUPPORTED_MEDIA_TYPE,
+	/** 422: The request was well-formed but was unable to be followed due to semantic errors. */
+	BAD_DATA: httpCodes.UNPROCESSABLE_ENTITY,
+	/** 500: The server has encountered a situation it doesn't know how to handle. */
+	INTERNAL_ERROR: httpCodes.INTERNAL_SERVER_ERROR,
+	/** 501: The request method is not supported by the server and cannot be handled. */
+	NOT_IMPLEMENTED: httpCodes.NOT_IMPLEMENTED,
+	/** 502: The server, while acting as a gateway or proxy, received an invalid response from the upstream server. */
+	BAD_GATEWAY: httpCodes.BAD_GATEWAY,
+	/** 503: The server is not ready to handle the request. */
+	SERVICE_UNAVAILABLE: httpCodes.SERVICE_UNAVAILABLE,
+	/** 504: The server, while acting as a gateway or proxy, did not get a response in time from the upstream server. */
+	GATEWAY_TIMEOUT: httpCodes.GATEWAY_TIMEOUT,
+	/** 508: The server detected an infinite loop while processing the request. */
+	LOOP_DETECTED: 508,
+	/** 590: Custom Verdaccio code indicating the server cannot handle the request. */
+	CANNOT_HANDLE: 590
+};
+var ERROR_CODE = { token_required: "token is required" };
+var API_MESSAGE = {
+	PKG_CREATED: "created new package",
+	PKG_CHANGED: "package changed",
+	PKG_REMOVED: "package removed",
+	PKG_PUBLISHED: "package published",
+	TARBALL_UPLOADED: "tarball uploaded successfully",
+	TARBALL_REMOVED: "tarball removed",
+	TAG_UPDATED: "tags updated",
+	TAG_REMOVED: "tag removed",
+	TAG_ADDED: "package tagged",
+	OK: "ok",
+	LOGGED_OUT: "Logged out"
+};
+var LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
+var LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
+var LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
+var ROLES = {
+	$ALL: "$all",
+	ALL: "all",
+	$AUTH: "$authenticated",
+	$ANONYMOUS: "$anonymous",
+	DEPRECATED_ALL: "@all",
+	DEPRECATED_AUTH: "@authenticated",
+	DEPRECATED_ANONYMOUS: "@anonymous"
+};
+var PACKAGE_ACCESS = {
+	SCOPE: "@*/*",
+	ALL: "**"
+};
+var HtpasswdHashAlgorithm = /* @__PURE__ */ function(HtpasswdHashAlgorithm) {
+	HtpasswdHashAlgorithm["md5"] = "md5";
+	HtpasswdHashAlgorithm["sha1"] = "sha1";
+	HtpasswdHashAlgorithm["crypt"] = "crypt";
+	HtpasswdHashAlgorithm["bcrypt"] = "bcrypt";
+	return HtpasswdHashAlgorithm;
+}({});
+var PLUGIN_PREFIX = "verdaccio";
+var PLUGIN_UI_PREFIX = "verdaccio-theme";
+var PLUGIN_CATEGORY = {
+	AUTHENTICATION: "authentication",
+	MIDDLEWARE: "middleware",
+	STORAGE: "storage",
+	FILTER: "filter",
+	THEME: "theme"
+};
+var DEFAULT_PORT = "4873";
+var DEFAULT_PROTOCOL = "http";
+var DEFAULT_DOMAIN = "localhost";
+//#endregion
+export { ANONYMOUS_USER, API_MESSAGE, CHARACTER_ENCODING, DEFAULT_DOMAIN, DEFAULT_PASSWORD_VALIDATION, DEFAULT_PORT, DEFAULT_PROTOCOL, DEFAULT_USER, DIST_TAGS, HEADERS, HEADER_TYPE, HTTP_STATUS, HtpasswdHashAlgorithm, LATEST, MAINTAINERS, PLUGIN_CATEGORY, PLUGIN_PREFIX, PLUGIN_UI_PREFIX, TOKEN_BASIC, TOKEN_BEARER, USERS, constants_exports };
+
+//# sourceMappingURL=constants.mjs.map

package/build/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":[],"sources":["../src/constants.ts"],"sourcesContent":["import httpCodes from 'http-status-codes';\n\nexport const DEFAULT_PASSWORD_VALIDATION = /.{3}$/;\nexport const TIME_EXPIRATION_24H = '24h';\nexport const TIME_EXPIRATION_1H = '1h';\nexport const DIST_TAGS = 'dist-tags';\nexport const LATEST = 'latest';\nexport const USERS = 'users';\nexport const MAINTAINERS = 'maintainers';\nexport const DEFAULT_USER = 'Anonymous'; // for display purposes\nexport const ANONYMOUS_USER = 'anonymous'; // for username purposes\n\nexport const HEADER_TYPE = {\n  CONTENT_ENCODING: 'content-encoding',\n  CONTENT_TYPE: 'content-type',\n  CONTENT_LENGTH: 'content-length',\n  ACCEPT_ENCODING: 'accept-encoding',\n  AUTHORIZATION: 'authorization',\n};\n\nexport const CHARACTER_ENCODING = {\n  UTF8: 'utf8',\n};\n\n// @deprecated use Bearer instead\nexport const TOKEN_BASIC = 'Basic';\nexport const TOKEN_BEARER = 'Bearer';\n\nexport const HEADERS = {\n  ACCEPT: 'Accept',\n  ACCEPT_ENCODING: 'Accept-Encoding',\n  USER_AGENT: 'User-Agent',\n  JSON: 'application/json',\n  CONTENT_TYPE: 'Content-type',\n  CONTENT_LENGTH: 'content-length',\n  TEXT_PLAIN: 'text/plain',\n  TEXT_PLAIN_UTF8: 'text/plain; charset=utf-8',\n  TEXT_HTML_UTF8: 'text/html; charset=utf-8',\n  TEXT_HTML: 'text/html',\n  AUTHORIZATION: 'authorization',\n  CACHE_CONTROL: 'Cache-Control',\n  NO_CACHE: 'no-cache, no-store',\n  RETRY_AFTER: 'Retry-After',\n  // only set with proxy that setup HTTPS\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto\n  FORWARDED_PROTO: 'X-Forwarded-Proto',\n  FORWARDED_FOR: 'X-Forwarded-For',\n  FRAMES_OPTIONS: 'X-Frame-Options',\n  CSP: 'Content-Security-Policy',\n  CTO: 'X-Content-Type-Options',\n  XSS: 'X-XSS-Protection',\n  CLIENT: 'X-Client',\n  POWERED_BY: 'X-Powered-By',\n  RATELIMIT_LIMIT: 'X-RateLimit-Limit',\n  RATELIMIT_REMAINING: 'X-RateLimit-Remaining',\n  NONE_MATCH: 'If-None-Match',\n  ETAG: 'ETag',\n  JSON_CHARSET: 'application/json; charset=utf-8',\n  JSON_INSTALL_CHARSET: 'application/vnd.npm.install-v1+json; charset=utf-8',\n  OCTET_STREAM: 'application/octet-stream; charset=utf-8',\n  TEXT_CHARSET: 'text/plain; charset=utf-8',\n  JAVASCRIPT_CHARSET: 'application/javascript; charset=utf-8',\n  WWW_AUTH: 'WWW-Authenticate',\n  GZIP: 'gzip',\n  HOST: 'host',\n};\n\n/**\n * HTTP status codes used throughout Verdaccio.\n */\nexport const HTTP_STATUS = {\n  /** 202: The request has been accepted for processing, but the processing is not yet complete. */\n  ACCEPTED: httpCodes.ACCEPTED,\n  /** 200: Standard response for successful HTTP requests. */\n  OK: httpCodes.OK,\n  /** 201: The request has been fulfilled and resulted in a new resource being created. */\n  CREATED: httpCodes.CREATED,\n  /** 300: Indicates multiple options for the resource from which the client may choose. */\n  MULTIPLE_CHOICES: httpCodes.MULTIPLE_CHOICES,\n  /** 304: Indicates that the resource has not been modified since the last request. */\n  NOT_MODIFIED: httpCodes.NOT_MODIFIED,\n  /** 400: The server could not understand the request due to invalid syntax. */\n  BAD_REQUEST: httpCodes.BAD_REQUEST,\n  /** 401: The client must authenticate itself to get the requested response. */\n  UNAUTHORIZED: httpCodes.UNAUTHORIZED,\n  /** 403: The client does not have access rights to the content. */\n  FORBIDDEN: httpCodes.FORBIDDEN,\n  /** 404: The server can not find the requested resource. */\n  NOT_FOUND: httpCodes.NOT_FOUND,\n  /** 408: The server timed out waiting for the request. */\n  REQUEST_TIMEOUT: httpCodes.REQUEST_TIMEOUT,\n  /** 409: The request could not be completed due to a conflict with the current state of the resource. */\n  CONFLICT: httpCodes.CONFLICT,\n  /** 415: The media format of the requested data is not supported by the server. */\n  UNSUPPORTED_MEDIA: httpCodes.UNSUPPORTED_MEDIA_TYPE,\n  /** 422: The request was well-formed but was unable to be followed due to semantic errors. */\n  BAD_DATA: httpCodes.UNPROCESSABLE_ENTITY,\n  /** 500: The server has encountered a situation it doesn't know how to handle. */\n  INTERNAL_ERROR: httpCodes.INTERNAL_SERVER_ERROR,\n  /** 501: The request method is not supported by the server and cannot be handled. */\n  NOT_IMPLEMENTED: httpCodes.NOT_IMPLEMENTED,\n  /** 502: The server, while acting as a gateway or proxy, received an invalid response from the upstream server. */\n  BAD_GATEWAY: httpCodes.BAD_GATEWAY,\n  /** 503: The server is not ready to handle the request. */\n  SERVICE_UNAVAILABLE: httpCodes.SERVICE_UNAVAILABLE,\n  /** 504: The server, while acting as a gateway or proxy, did not get a response in time from the upstream server. */\n  GATEWAY_TIMEOUT: httpCodes.GATEWAY_TIMEOUT,\n  /** 508: The server detected an infinite loop while processing the request. */\n  LOOP_DETECTED: 508,\n  /** 590: Custom Verdaccio code indicating the server cannot handle the request. */\n  CANNOT_HANDLE: 590,\n};\n\nexport const ERROR_CODE = {\n  token_required: 'token is required',\n};\n\nexport const API_MESSAGE = {\n  PKG_CREATED: 'created new package',\n  PKG_CHANGED: 'package changed',\n  PKG_REMOVED: 'package removed',\n  PKG_PUBLISHED: 'package published',\n  TARBALL_UPLOADED: 'tarball uploaded successfully',\n  TARBALL_REMOVED: 'tarball removed',\n  TAG_UPDATED: 'tags updated',\n  TAG_REMOVED: 'tag removed',\n  TAG_ADDED: 'package tagged',\n  OK: 'ok',\n  LOGGED_OUT: 'Logged out',\n};\n\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport const ROLES = {\n  $ALL: '$all',\n  ALL: 'all',\n  $AUTH: '$authenticated',\n  $ANONYMOUS: '$anonymous',\n  DEPRECATED_ALL: '@all',\n  DEPRECATED_AUTH: '@authenticated',\n  DEPRECATED_ANONYMOUS: '@anonymous',\n};\n\nexport const PACKAGE_ACCESS = {\n  SCOPE: '@*/*',\n  ALL: '**',\n};\n\nexport enum HtpasswdHashAlgorithm {\n  md5 = 'md5',\n  sha1 = 'sha1',\n  crypt = 'crypt',\n  bcrypt = 'bcrypt',\n}\n\nexport const PLUGIN_PREFIX = 'verdaccio';\nexport const PLUGIN_UI_PREFIX = 'verdaccio-theme';\n\nexport const PLUGIN_CATEGORY = {\n  AUTHENTICATION: 'authentication',\n  MIDDLEWARE: 'middleware',\n  STORAGE: 'storage',\n  FILTER: 'filter',\n  THEME: 'theme',\n};\n\nexport const DEFAULT_PORT = '4873';\nexport const DEFAULT_PROTOCOL = 'http';\nexport const DEFAULT_DOMAIN = 'localhost';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,IAAa,8BAA8B;AAG3C,IAAa,YAAY;AACzB,IAAa,SAAS;AACtB,IAAa,QAAQ;AACrB,IAAa,cAAc;AAC3B,IAAa,eAAe;AAC5B,IAAa,iBAAiB;AAE9B,IAAa,cAAc;CACzB,kBAAkB;CAClB,cAAc;CACd,gBAAgB;CAChB,iBAAiB;CACjB,eAAe;AACjB;AAEA,IAAa,qBAAqB,EAChC,MAAM,OACR;AAGA,IAAa,cAAc;AAC3B,IAAa,eAAe;AAE5B,IAAa,UAAU;CACrB,QAAQ;CACR,iBAAiB;CACjB,YAAY;CACZ,MAAM;CACN,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,iBAAiB;CACjB,gBAAgB;CAChB,WAAW;CACX,eAAe;CACf,eAAe;CACf,UAAU;CACV,aAAa;CAGb,iBAAiB;CACjB,eAAe;CACf,gBAAgB;CAChB,KAAK;CACL,KAAK;CACL,KAAK;CACL,QAAQ;CACR,YAAY;CACZ,iBAAiB;CACjB,qBAAqB;CACrB,YAAY;CACZ,MAAM;CACN,cAAc;CACd,sBAAsB;CACtB,cAAc;CACd,cAAc;CACd,oBAAoB;CACpB,UAAU;CACV,MAAM;CACN,MAAM;AACR;;;;AAKA,IAAa,cAAc;;CAEzB,UAAU,UAAU;;CAEpB,IAAI,UAAU;;CAEd,SAAS,UAAU;;CAEnB,kBAAkB,UAAU;;CAE5B,cAAc,UAAU;;CAExB,aAAa,UAAU;;CAEvB,cAAc,UAAU;;CAExB,WAAW,UAAU;;CAErB,WAAW,UAAU;;CAErB,iBAAiB,UAAU;;CAE3B,UAAU,UAAU;;CAEpB,mBAAmB,UAAU;;CAE7B,UAAU,UAAU;;CAEpB,gBAAgB,UAAU;;CAE1B,iBAAiB,UAAU;;CAE3B,aAAa,UAAU;;CAEvB,qBAAqB,UAAU;;CAE/B,iBAAiB,UAAU;;CAE3B,eAAe;;CAEf,eAAe;AACjB;AAEA,IAAa,aAAa,EACxB,gBAAgB,oBAClB;AAEA,IAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,aAAa;CACb,eAAe;CACf,kBAAkB;CAClB,iBAAiB;CACjB,aAAa;CACb,aAAa;CACb,WAAW;CACX,IAAI;CACJ,YAAY;AACd;AAEA,IAAa,qBACX;AACF,IAAa,sBAAsB,GAAG,mBAAmB;AACzD,IAAa,sBAAsB,GAAG,mBAAmB;AAEzD,IAAa,QAAQ;CACnB,MAAM;CACN,KAAK;CACL,OAAO;CACP,YAAY;CACZ,gBAAgB;CAChB,iBAAiB;CACjB,sBAAsB;AACxB;AAEA,IAAa,iBAAiB;CAC5B,OAAO;CACP,KAAK;AACP;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,SAAA;CACA,sBAAA,UAAA;CACA,sBAAA,WAAA;CACA,sBAAA,YAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAa,gBAAgB;AAC7B,IAAa,mBAAmB;AAEhC,IAAa,kBAAkB;CAC7B,gBAAgB;CAChB,YAAY;CACZ,SAAS;CACT,QAAQ;CACR,OAAO;AACT;AAEA,IAAa,eAAe;AAC5B,IAAa,mBAAmB;AAChC,IAAa,iBAAiB"}

package/build/crypto-utils.d.ts

@@ -1,5 +1,3 @@
-/// <reference types="node" />
-/// <reference types="node" />
 import type { Hash } from 'node:crypto';
 export declare const defaultTarballHashAlgorithm = "sha1";
 export declare function createTarballHash(): Hash;

package/build/crypto-utils.js

@@ -1,41 +1,45 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let node_crypto = require("node:crypto");
+//#region src/crypto-utils.ts
+var crypto_utils_exports = /* @__PURE__ */ require_runtime.__exportAll({
+	createTarballHash: () => createTarballHash,
+	defaultTarballHashAlgorithm: () => defaultTarballHashAlgorithm,
+	generateRandomHexString: () => generateRandomHexString,
+	mask: () => mask,
+	stringToMD5: () => stringToMD5
 });
-exports.createTarballHash = createTarballHash;
-exports.defaultTarballHashAlgorithm = void 0;
-exports.generateRandomHexString = generateRandomHexString;
-exports.mask = mask;
-exports.stringToMD5 = stringToMD5;
-var _nodeCrypto = require("node:crypto");
-const defaultTarballHashAlgorithm = exports.defaultTarballHashAlgorithm = 'sha1';
+var defaultTarballHashAlgorithm = "sha1";
 function createTarballHash() {
-  return (0, _nodeCrypto.createHash)(defaultTarballHashAlgorithm);
+	return (0, node_crypto.createHash)(defaultTarballHashAlgorithm);
 }
-
 /**
- * Express doesn't do ETAGS with requests <= 1024b
- * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data
- * could improve performance using crc32 after benchmarks.
- * @param {Object} data
- * @return {String}
- */
+* Express doesn't do ETAGS with requests <= 1024b
+* we use md5 here, it works well on 1k+ bytes, but sucks with fewer data
+* could improve performance using crc32 after benchmarks.
+* @param {Object} data
+* @return {String}
+*/
 function stringToMD5(data) {
-  // @ts-ignore update method accepts Buffer or string
-  return (0, _nodeCrypto.createHash)('md5').update(data).digest('hex');
+	return (0, node_crypto.createHash)("md5").update(data).digest("hex");
 }
 function generateRandomHexString(length = 8) {
-  return (0, _nodeCrypto.randomBytes)(length).toString('hex');
+	return (0, node_crypto.randomBytes)(length).toString("hex");
 }
-
 /**
- * return a masquerade string with its first and last {charNum} and three dots in between.
- * @param {String} str
- * @param {Number} charNum
- * @returns {String}
- */
+* return a masquerade string with its first and last {charNum} and three dots in between.
+* @param {String} str
+* @param {Number} charNum
+* @returns {String}
+*/
 function mask(str, charNum = 3) {
-  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;
+	return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;
 }
+//#endregion
+Object.defineProperty(exports, "crypto_utils_exports", {
+	enumerable: true,
+	get: function() {
+		return crypto_utils_exports;
+	}
+});
+
 //# sourceMappingURL=crypto-utils.js.map

package/build/crypto-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-utils.js","names":["_nodeCrypto","require","defaultTarballHashAlgorithm","exports","createTarballHash","createHash","stringToMD5","data","update","digest","generateRandomHexString","length","randomBytes","toString","mask","str","charNum","slice"],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, randomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return randomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AACA,IAAAA,WAAA,GAAAC,OAAA;AAEO,MAAMC,2BAA2B,GAAAC,OAAA,CAAAD,2BAAA,GAAG,MAAM;AAE1C,SAASE,iBAAiBA,CAAA,EAAS;EACxC,OAAO,IAAAC,sBAAU,EAACH,2BAA2B,CAAC;AAChD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,WAAWA,CAACC,IAAqB,EAAU;EACzD;EACA,OAAO,IAAAF,sBAAU,EAAC,KAAK,CAAC,CAACG,MAAM,CAACD,IAAI,CAAC,CAACE,MAAM,CAAC,KAAK,CAAC;AACrD;AAEO,SAASC,uBAAuBA,CAACC,MAAM,GAAG,CAAC,EAAU;EAC1D,OAAO,IAAAC,uBAAW,EAACD,MAAM,CAAC,CAACE,QAAQ,CAAC,KAAK,CAAC;AAC5C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,IAAIA,CAACC,GAAW,EAAEC,OAAO,GAAG,CAAC,EAAU;EACrD,OAAO,GAAGD,GAAG,CAACE,KAAK,CAAC,CAAC,EAAED,OAAO,CAAC,MAAMD,GAAG,CAACE,KAAK,CAAC,CAACD,OAAO,CAAC,EAAE;AAC5D","ignoreList":[]}
+{"version":3,"file":"crypto-utils.js","names":[],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, randomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return randomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAa,8BAA8B;AAE3C,SAAgB,oBAA0B;CACxC,QAAA,GAAA,YAAA,YAAkB,2BAA2B;AAC/C;;;;;;;;AASA,SAAgB,YAAY,MAA+B;CAEzD,QAAA,GAAA,YAAA,YAAkB,KAAK,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AACpD;AAEA,SAAgB,wBAAwB,SAAS,GAAW;CAC1D,QAAA,GAAA,YAAA,aAAmB,MAAM,EAAE,SAAS,KAAK;AAC3C;;;;;;;AAQA,SAAgB,KAAK,KAAa,UAAU,GAAW;CACrD,OAAO,GAAG,IAAI,MAAM,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,OAAO;AACzD"}

package/build/crypto-utils.mjs

@@ -0,0 +1,40 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+import { createHash, randomBytes } from "node:crypto";
+//#region src/crypto-utils.ts
+var crypto_utils_exports = /* @__PURE__ */ __exportAll({
+	createTarballHash: () => createTarballHash,
+	defaultTarballHashAlgorithm: () => defaultTarballHashAlgorithm,
+	generateRandomHexString: () => generateRandomHexString,
+	mask: () => mask,
+	stringToMD5: () => stringToMD5
+});
+var defaultTarballHashAlgorithm = "sha1";
+function createTarballHash() {
+	return createHash(defaultTarballHashAlgorithm);
+}
+/**
+* Express doesn't do ETAGS with requests <= 1024b
+* we use md5 here, it works well on 1k+ bytes, but sucks with fewer data
+* could improve performance using crc32 after benchmarks.
+* @param {Object} data
+* @return {String}
+*/
+function stringToMD5(data) {
+	return createHash("md5").update(data).digest("hex");
+}
+function generateRandomHexString(length = 8) {
+	return randomBytes(length).toString("hex");
+}
+/**
+* return a masquerade string with its first and last {charNum} and three dots in between.
+* @param {String} str
+* @param {Number} charNum
+* @returns {String}
+*/
+function mask(str, charNum = 3) {
+	return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;
+}
+//#endregion
+export { crypto_utils_exports };
+
+//# sourceMappingURL=crypto-utils.mjs.map

package/build/crypto-utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-utils.mjs","names":[],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, randomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return randomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAa,8BAA8B;AAE3C,SAAgB,oBAA0B;CACxC,OAAO,WAAW,2BAA2B;AAC/C;;;;;;;;AASA,SAAgB,YAAY,MAA+B;CAEzD,OAAO,WAAW,KAAK,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AACpD;AAEA,SAAgB,wBAAwB,SAAS,GAAW;CAC1D,OAAO,YAAY,MAAM,EAAE,SAAS,KAAK;AAC3C;;;;;;;AAQA,SAAgB,KAAK,KAAa,UAAU,GAAW;CACrD,OAAO,GAAG,IAAI,MAAM,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,OAAO;AACzD"}

package/build/error-utils.js

@@ -1,104 +1,116 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+const require_constants = require("./constants.js");
+let http_errors = require("http-errors");
+http_errors = require_runtime.__toESM(http_errors);
+//#region src/error-utils.ts
+var error_utils_exports = /* @__PURE__ */ require_runtime.__exportAll({
+	API_ERROR: () => API_ERROR,
+	APP_ERROR: () => APP_ERROR,
+	SUPPORT_ERRORS: () => SUPPORT_ERRORS,
+	getBadData: () => getBadData,
+	getBadRequest: () => getBadRequest,
+	getCode: () => getCode,
+	getConflict: () => getConflict,
+	getForbidden: () => getForbidden,
+	getInternalError: () => getInternalError,
+	getNotFound: () => getNotFound,
+	getServiceUnavailable: () => getServiceUnavailable,
+	getUnauthorized: () => getUnauthorized
 });
-exports.SUPPORT_ERRORS = exports.APP_ERROR = exports.API_ERROR = void 0;
-exports.getBadData = getBadData;
-exports.getBadRequest = getBadRequest;
-exports.getCode = getCode;
-exports.getConflict = getConflict;
-exports.getForbidden = getForbidden;
-exports.getInternalError = getInternalError;
-exports.getNotFound = getNotFound;
-exports.getServiceUnavailable = getServiceUnavailable;
-exports.getUnauthorized = getUnauthorized;
-var _httpErrors = _interopRequireDefault(require("http-errors"));
-var _constants = require("./constants");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const API_ERROR = exports.API_ERROR = {
-  PASSWORD_SHORT: 'The provided password does not pass the validation',
-  MUST_BE_LOGGED: 'You must be logged in to publish packages.',
-  PLUGIN_ERROR: 'bug in the auth plugin system',
-  CONFIG_BAD_FORMAT: 'config file must be an object',
-  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',
-  NO_PACKAGE: 'no such package available',
-  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',
-  BAD_DATA: 'bad data',
-  NOT_ALLOWED: 'not allowed to access package',
-  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',
-  INTERNAL_SERVER_ERROR: 'internal server error',
-  UNKNOWN_ERROR: 'unknown error',
-  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',
-  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',
-  UPLINK_OFFLINE: 'uplink is offline',
-  NOT_MODIFIED_NO_DATA: 'no data',
-  CONTENT_MISMATCH: 'content length mismatch',
-  NOT_FILE_UPLINK: "file doesn't exist on uplink",
-  MAX_USERS_REACHED: 'maximum amount of users reached',
-  VERSION_NOT_EXIST: "this version doesn't exist",
-  NO_SUCH_FILE: 'no such file available',
-  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',
-  FILE_NOT_FOUND: 'File not found',
-  REGISTRATION_DISABLED: 'user registration disabled',
-  UNAUTHORIZED_ACCESS: 'unauthorized access',
-  BAD_STATUS_CODE: 'bad status code',
-  SERVER_TIME_OUT: 'looks like the server is taking to long to respond',
-  PACKAGE_EXIST: 'this package is already present',
-  BAD_AUTH_HEADER: 'bad authorization header',
-  WEB_DISABLED: 'Web interface is disabled in the config file',
-  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',
-  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',
-  RESOURCE_UNAVAILABLE: 'resource unavailable',
-  BAD_PACKAGE_DATA: 'bad incoming package data',
-  USERNAME_PASSWORD_REQUIRED: 'username and password is required',
-  USERNAME_ALREADY_REGISTERED: 'username is already registered',
-  USERNAME_MISMATCH: 'username does not match logged in user',
-  SESSION_ID_REQUIRED: 'session id is required',
-  SESSION_ID_INVALID: 'session id is invalid',
-  SESSION_TOKEN_EXPIRED: 'session token expired'
+var API_ERROR = {
+	PASSWORD_SHORT: "The provided password does not pass the validation",
+	MUST_BE_LOGGED: "You must be logged in to publish packages.",
+	PLUGIN_ERROR: "bug in the auth plugin system",
+	CONFIG_BAD_FORMAT: "config file must be an object",
+	BAD_USERNAME_PASSWORD: "bad username/password, access denied",
+	NO_PACKAGE: "no such package available",
+	PACKAGE_CANNOT_BE_ADDED: "this package cannot be added",
+	BAD_DATA: "bad data",
+	NOT_ALLOWED: "not allowed to access package",
+	NOT_ALLOWED_PUBLISH: "not allowed to publish package",
+	INTERNAL_SERVER_ERROR: "internal server error",
+	UNKNOWN_ERROR: "unknown error",
+	NOT_PACKAGE_UPLINK: "package does not exist on uplink",
+	UPLINK_OFFLINE_PUBLISH: "one of the uplinks is down, refuse to publish",
+	UPLINK_OFFLINE: "uplink is offline",
+	NOT_MODIFIED_NO_DATA: "no data",
+	CONTENT_MISMATCH: "content length mismatch",
+	NOT_FILE_UPLINK: "file doesn't exist on uplink",
+	MAX_USERS_REACHED: "maximum amount of users reached",
+	VERSION_NOT_EXIST: "this version doesn't exist",
+	NO_SUCH_FILE: "no such file available",
+	UNSUPORTED_REGISTRY_CALL: "unsupported registry call",
+	FILE_NOT_FOUND: "File not found",
+	REGISTRATION_DISABLED: "user registration disabled",
+	UNAUTHORIZED_ACCESS: "unauthorized access",
+	BAD_STATUS_CODE: "bad status code",
+	SERVER_TIME_OUT: "looks like the server is taking to long to respond",
+	PACKAGE_EXIST: "this package is already present",
+	BAD_AUTH_HEADER: "bad authorization header",
+	WEB_DISABLED: "Web interface is disabled in the config file",
+	DEPRECATED_BASIC_HEADER: "basic authentication is deprecated, please use JWT instead",
+	BAD_FORMAT_USER_GROUP: "user groups is different than an array",
+	RESOURCE_UNAVAILABLE: "resource unavailable",
+	BAD_PACKAGE_DATA: "bad incoming package data",
+	USERNAME_PASSWORD_REQUIRED: "username and password is required",
+	USERNAME_ALREADY_REGISTERED: "username is already registered",
+	USERNAME_MISMATCH: "username does not match logged in user",
+	SESSION_ID_REQUIRED: "session id is required",
+	SESSION_ID_INVALID: "session id is invalid",
+	SESSION_TOKEN_EXPIRED: "session token expired"
 };
-const SUPPORT_ERRORS = exports.SUPPORT_ERRORS = {
-  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',
-  TFA_DISABLED: 'the two-factor authentication is not yet supported',
-  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',
-  PARAMETERS_NOT_VALID: 'the parameters are not valid'
+var SUPPORT_ERRORS = {
+	PLUGIN_MISSING_INTERFACE: "the plugin does not provide implementation of the requested feature",
+	TFA_DISABLED: "the two-factor authentication is not yet supported",
+	STORAGE_NOT_IMPLEMENT: "the storage does not support token saving",
+	PARAMETERS_NOT_VALID: "the parameters are not valid"
 };
-const APP_ERROR = exports.APP_ERROR = {
-  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',
-  PROFILE_ERROR: 'profile unexpected error',
-  PASSWORD_VALIDATION: 'not valid password'
+var APP_ERROR = {
+	CONFIG_NOT_VALID: "CONFIG: it does not look like a valid config file",
+	PROFILE_ERROR: "profile unexpected error",
+	PASSWORD_VALIDATION: "not valid password"
 };
 function getError(code, message) {
-  const httpError = (0, _httpErrors.default)(code, message);
-  httpError.code = code;
-  return httpError;
+	const httpError = (0, http_errors.default)(code, message);
+	httpError.code = code;
+	return httpError;
 }
 function getConflict(message = API_ERROR.PACKAGE_EXIST) {
-  return getError(_constants.HTTP_STATUS.CONFLICT, message);
+	return getError(require_constants.HTTP_STATUS.CONFLICT, message);
 }
 function getBadData(customMessage) {
-  return getError(_constants.HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);
+	return getError(require_constants.HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);
 }
 function getBadRequest(customMessage) {
-  return getError(_constants.HTTP_STATUS.BAD_REQUEST, customMessage);
+	return getError(require_constants.HTTP_STATUS.BAD_REQUEST, customMessage);
 }
 function getInternalError(customMessage) {
-  return customMessage ? getError(_constants.HTTP_STATUS.INTERNAL_ERROR, customMessage) : getError(_constants.HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);
+	return customMessage ? getError(require_constants.HTTP_STATUS.INTERNAL_ERROR, customMessage) : getError(require_constants.HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);
 }
-function getUnauthorized(message = 'no credentials provided') {
-  return getError(_constants.HTTP_STATUS.UNAUTHORIZED, message);
+function getUnauthorized(message = "no credentials provided") {
+	return getError(require_constants.HTTP_STATUS.UNAUTHORIZED, message);
 }
 function getForbidden(message = "can't use this filename") {
-  return getError(_constants.HTTP_STATUS.FORBIDDEN, message);
+	return getError(require_constants.HTTP_STATUS.FORBIDDEN, message);
 }
 function getServiceUnavailable(message = API_ERROR.RESOURCE_UNAVAILABLE) {
-  return getError(_constants.HTTP_STATUS.SERVICE_UNAVAILABLE, message);
+	return getError(require_constants.HTTP_STATUS.SERVICE_UNAVAILABLE, message);
 }
 function getNotFound(customMessage) {
-  return getError(_constants.HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);
+	return getError(require_constants.HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);
 }
 function getCode(statusCode, customMessage) {
-  return getError(statusCode, customMessage);
+	return getError(statusCode, customMessage);
 }
+//#endregion
+exports.API_ERROR = API_ERROR;
+exports.APP_ERROR = APP_ERROR;
+exports.SUPPORT_ERRORS = SUPPORT_ERRORS;
+Object.defineProperty(exports, "error_utils_exports", {
+	enumerable: true,
+	get: function() {
+		return error_utils_exports;
+	}
+});
+
 //# sourceMappingURL=error-utils.js.map

package/build/error-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-utils.js","names":["_httpErrors","_interopRequireDefault","require","_constants","e","__esModule","default","API_ERROR","exports","PASSWORD_SHORT","MUST_BE_LOGGED","PLUGIN_ERROR","CONFIG_BAD_FORMAT","BAD_USERNAME_PASSWORD","NO_PACKAGE","PACKAGE_CANNOT_BE_ADDED","BAD_DATA","NOT_ALLOWED","NOT_ALLOWED_PUBLISH","INTERNAL_SERVER_ERROR","UNKNOWN_ERROR","NOT_PACKAGE_UPLINK","UPLINK_OFFLINE_PUBLISH","UPLINK_OFFLINE","NOT_MODIFIED_NO_DATA","CONTENT_MISMATCH","NOT_FILE_UPLINK","MAX_USERS_REACHED","VERSION_NOT_EXIST","NO_SUCH_FILE","UNSUPORTED_REGISTRY_CALL","FILE_NOT_FOUND","REGISTRATION_DISABLED","UNAUTHORIZED_ACCESS","BAD_STATUS_CODE","SERVER_TIME_OUT","PACKAGE_EXIST","BAD_AUTH_HEADER","WEB_DISABLED","DEPRECATED_BASIC_HEADER","BAD_FORMAT_USER_GROUP","RESOURCE_UNAVAILABLE","BAD_PACKAGE_DATA","USERNAME_PASSWORD_REQUIRED","USERNAME_ALREADY_REGISTERED","USERNAME_MISMATCH","SESSION_ID_REQUIRED","SESSION_ID_INVALID","SESSION_TOKEN_EXPIRED","SUPPORT_ERRORS","PLUGIN_MISSING_INTERFACE","TFA_DISABLED","STORAGE_NOT_IMPLEMENT","PARAMETERS_NOT_VALID","APP_ERROR","CONFIG_NOT_VALID","PROFILE_ERROR","PASSWORD_VALIDATION","getError","code","message","httpError","createError","getConflict","HTTP_STATUS","CONFLICT","getBadData","customMessage","getBadRequest","BAD_REQUEST","getInternalError","INTERNAL_ERROR","getUnauthorized","UNAUTHORIZED","getForbidden","FORBIDDEN","getServiceUnavailable","SERVICE_UNAVAILABLE","getNotFound","NOT_FOUND","getCode","statusCode"],"sources":["../src/error-utils.ts"],"sourcesContent":["import type { HttpError } from 'http-errors';\nimport createError from 'http-errors';\n\nimport { HTTP_STATUS } from './constants';\n\nexport const API_ERROR = {\n  PASSWORD_SHORT: 'The provided password does not pass the validation',\n  MUST_BE_LOGGED: 'You must be logged in to publish packages.',\n  PLUGIN_ERROR: 'bug in the auth plugin system',\n  CONFIG_BAD_FORMAT: 'config file must be an object',\n  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',\n  NO_PACKAGE: 'no such package available',\n  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',\n  BAD_DATA: 'bad data',\n  NOT_ALLOWED: 'not allowed to access package',\n  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',\n  INTERNAL_SERVER_ERROR: 'internal server error',\n  UNKNOWN_ERROR: 'unknown error',\n  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',\n  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',\n  UPLINK_OFFLINE: 'uplink is offline',\n  NOT_MODIFIED_NO_DATA: 'no data',\n  CONTENT_MISMATCH: 'content length mismatch',\n  NOT_FILE_UPLINK: \"file doesn't exist on uplink\",\n  MAX_USERS_REACHED: 'maximum amount of users reached',\n  VERSION_NOT_EXIST: \"this version doesn't exist\",\n  NO_SUCH_FILE: 'no such file available',\n  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',\n  FILE_NOT_FOUND: 'File not found',\n  REGISTRATION_DISABLED: 'user registration disabled',\n  UNAUTHORIZED_ACCESS: 'unauthorized access',\n  BAD_STATUS_CODE: 'bad status code',\n  SERVER_TIME_OUT: 'looks like the server is taking to long to respond',\n  PACKAGE_EXIST: 'this package is already present',\n  BAD_AUTH_HEADER: 'bad authorization header',\n  WEB_DISABLED: 'Web interface is disabled in the config file',\n  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',\n  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',\n  RESOURCE_UNAVAILABLE: 'resource unavailable',\n  BAD_PACKAGE_DATA: 'bad incoming package data',\n  USERNAME_PASSWORD_REQUIRED: 'username and password is required',\n  USERNAME_ALREADY_REGISTERED: 'username is already registered',\n  USERNAME_MISMATCH: 'username does not match logged in user',\n  SESSION_ID_REQUIRED: 'session id is required',\n  SESSION_ID_INVALID: 'session id is invalid',\n  SESSION_TOKEN_EXPIRED: 'session token expired',\n};\n\nexport const SUPPORT_ERRORS = {\n  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',\n  TFA_DISABLED: 'the two-factor authentication is not yet supported',\n  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',\n  PARAMETERS_NOT_VALID: 'the parameters are not valid',\n};\n\nexport const APP_ERROR = {\n  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',\n  PROFILE_ERROR: 'profile unexpected error',\n  PASSWORD_VALIDATION: 'not valid password',\n};\n\nexport type VerdaccioError = HttpError & { code: number };\n\nfunction getError(code: number, message: string): VerdaccioError {\n  const httpError = createError(code, message);\n\n  httpError.code = code;\n\n  return httpError as VerdaccioError;\n}\n\nexport function getConflict(message: string = API_ERROR.PACKAGE_EXIST): VerdaccioError {\n  return getError(HTTP_STATUS.CONFLICT, message);\n}\n\nexport function getBadData(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);\n}\n\nexport function getBadRequest(customMessage: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_REQUEST, customMessage);\n}\n\nexport function getInternalError(customMessage?: string): VerdaccioError {\n  return customMessage\n    ? getError(HTTP_STATUS.INTERNAL_ERROR, customMessage)\n    : getError(HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);\n}\n\nexport function getUnauthorized(message = 'no credentials provided'): VerdaccioError {\n  return getError(HTTP_STATUS.UNAUTHORIZED, message);\n}\n\nexport function getForbidden(message = \"can't use this filename\"): VerdaccioError {\n  return getError(HTTP_STATUS.FORBIDDEN, message);\n}\n\nexport function getServiceUnavailable(\n  message: string = API_ERROR.RESOURCE_UNAVAILABLE\n): VerdaccioError {\n  return getError(HTTP_STATUS.SERVICE_UNAVAILABLE, message);\n}\n\nexport function getNotFound(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);\n}\n\nexport function getCode(statusCode: number, customMessage: string): VerdaccioError {\n  return getError(statusCode, customMessage);\n}\n"],"mappings":";;;;;;;;;;;;;;;AACA,IAAAA,WAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,UAAA,GAAAD,OAAA;AAA0C,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEnC,MAAMG,SAAS,GAAAC,OAAA,CAAAD,SAAA,GAAG;EACvBE,cAAc,EAAE,oDAAoD;EACpEC,cAAc,EAAE,4CAA4C;EAC5DC,YAAY,EAAE,+BAA+B;EAC7CC,iBAAiB,EAAE,+BAA+B;EAClDC,qBAAqB,EAAE,sCAAsC;EAC7DC,UAAU,EAAE,2BAA2B;EACvCC,uBAAuB,EAAE,8BAA8B;EACvDC,QAAQ,EAAE,UAAU;EACpBC,WAAW,EAAE,+BAA+B;EAC5CC,mBAAmB,EAAE,gCAAgC;EACrDC,qBAAqB,EAAE,uBAAuB;EAC9CC,aAAa,EAAE,eAAe;EAC9BC,kBAAkB,EAAE,kCAAkC;EACtDC,sBAAsB,EAAE,+CAA+C;EACvEC,cAAc,EAAE,mBAAmB;EACnCC,oBAAoB,EAAE,SAAS;EAC/BC,gBAAgB,EAAE,yBAAyB;EAC3CC,eAAe,EAAE,8BAA8B;EAC/CC,iBAAiB,EAAE,iCAAiC;EACpDC,iBAAiB,EAAE,4BAA4B;EAC/CC,YAAY,EAAE,wBAAwB;EACtCC,wBAAwB,EAAE,2BAA2B;EACrDC,cAAc,EAAE,gBAAgB;EAChCC,qBAAqB,EAAE,4BAA4B;EACnDC,mBAAmB,EAAE,qBAAqB;EAC1CC,eAAe,EAAE,iBAAiB;EAClCC,eAAe,EAAE,oDAAoD;EACrEC,aAAa,EAAE,iCAAiC;EAChDC,eAAe,EAAE,0BAA0B;EAC3CC,YAAY,EAAE,8CAA8C;EAC5DC,uBAAuB,EAAE,4DAA4D;EACrFC,qBAAqB,EAAE,wCAAwC;EAC/DC,oBAAoB,EAAE,sBAAsB;EAC5CC,gBAAgB,EAAE,2BAA2B;EAC7CC,0BAA0B,EAAE,mCAAmC;EAC/DC,2BAA2B,EAAE,gCAAgC;EAC7DC,iBAAiB,EAAE,wCAAwC;EAC3DC,mBAAmB,EAAE,wBAAwB;EAC7CC,kBAAkB,EAAE,uBAAuB;EAC3CC,qBAAqB,EAAE;AACzB,CAAC;AAEM,MAAMC,cAAc,GAAAzC,OAAA,CAAAyC,cAAA,GAAG;EAC5BC,wBAAwB,EAAE,qEAAqE;EAC/FC,YAAY,EAAE,oDAAoD;EAClEC,qBAAqB,EAAE,2CAA2C;EAClEC,oBAAoB,EAAE;AACxB,CAAC;AAEM,MAAMC,SAAS,GAAA9C,OAAA,CAAA8C,SAAA,GAAG;EACvBC,gBAAgB,EAAE,mDAAmD;EACrEC,aAAa,EAAE,0BAA0B;EACzCC,mBAAmB,EAAE;AACvB,CAAC;AAID,SAASC,QAAQA,CAACC,IAAY,EAAEC,OAAe,EAAkB;EAC/D,MAAMC,SAAS,GAAG,IAAAC,mBAAW,EAACH,IAAI,EAAEC,OAAO,CAAC;EAE5CC,SAAS,CAACF,IAAI,GAAGA,IAAI;EAErB,OAAOE,SAAS;AAClB;AAEO,SAASE,WAAWA,CAACH,OAAe,GAAGrD,SAAS,CAAC6B,aAAa,EAAkB;EACrF,OAAOsB,QAAQ,CAACM,sBAAW,CAACC,QAAQ,EAAEL,OAAO,CAAC;AAChD;AAEO,SAASM,UAAUA,CAACC,aAAsB,EAAkB;EACjE,OAAOT,QAAQ,CAACM,sBAAW,CAAChD,QAAQ,EAAEmD,aAAa,IAAI5D,SAAS,CAACS,QAAQ,CAAC;AAC5E;AAEO,SAASoD,aAAaA,CAACD,aAAqB,EAAkB;EACnE,OAAOT,QAAQ,CAACM,sBAAW,CAACK,WAAW,EAAEF,aAAa,CAAC;AACzD;AAEO,SAASG,gBAAgBA,CAACH,aAAsB,EAAkB;EACvE,OAAOA,aAAa,GAChBT,QAAQ,CAACM,sBAAW,CAACO,cAAc,EAAEJ,aAAa,CAAC,GACnDT,QAAQ,CAACM,sBAAW,CAACO,cAAc,EAAEhE,SAAS,CAACa,aAAa,CAAC;AACnE;AAEO,SAASoD,eAAeA,CAACZ,OAAO,GAAG,yBAAyB,EAAkB;EACnF,OAAOF,QAAQ,CAACM,sBAAW,CAACS,YAAY,EAAEb,OAAO,CAAC;AACpD;AAEO,SAASc,YAAYA,CAACd,OAAO,GAAG,yBAAyB,EAAkB;EAChF,OAAOF,QAAQ,CAACM,sBAAW,CAACW,SAAS,EAAEf,OAAO,CAAC;AACjD;AAEO,SAASgB,qBAAqBA,CACnChB,OAAe,GAAGrD,SAAS,CAACkC,oBAAoB,EAChC;EAChB,OAAOiB,QAAQ,CAACM,sBAAW,CAACa,mBAAmB,EAAEjB,OAAO,CAAC;AAC3D;AAEO,SAASkB,WAAWA,CAACX,aAAsB,EAAkB;EAClE,OAAOT,QAAQ,CAACM,sBAAW,CAACe,SAAS,EAAEZ,aAAa,IAAI5D,SAAS,CAACO,UAAU,CAAC;AAC/E;AAEO,SAASkE,OAAOA,CAACC,UAAkB,EAAEd,aAAqB,EAAkB;EACjF,OAAOT,QAAQ,CAACuB,UAAU,EAAEd,aAAa,CAAC;AAC5C","ignoreList":[]}
+{"version":3,"file":"error-utils.js","names":[],"sources":["../src/error-utils.ts"],"sourcesContent":["import type { HttpError } from 'http-errors';\nimport createError from 'http-errors';\n\nimport { HTTP_STATUS } from './constants';\n\nexport const API_ERROR = {\n  PASSWORD_SHORT: 'The provided password does not pass the validation',\n  MUST_BE_LOGGED: 'You must be logged in to publish packages.',\n  PLUGIN_ERROR: 'bug in the auth plugin system',\n  CONFIG_BAD_FORMAT: 'config file must be an object',\n  BAD_USERNAME_PASSWORD: 'bad username/password, access denied',\n  NO_PACKAGE: 'no such package available',\n  PACKAGE_CANNOT_BE_ADDED: 'this package cannot be added',\n  BAD_DATA: 'bad data',\n  NOT_ALLOWED: 'not allowed to access package',\n  NOT_ALLOWED_PUBLISH: 'not allowed to publish package',\n  INTERNAL_SERVER_ERROR: 'internal server error',\n  UNKNOWN_ERROR: 'unknown error',\n  NOT_PACKAGE_UPLINK: 'package does not exist on uplink',\n  UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',\n  UPLINK_OFFLINE: 'uplink is offline',\n  NOT_MODIFIED_NO_DATA: 'no data',\n  CONTENT_MISMATCH: 'content length mismatch',\n  NOT_FILE_UPLINK: \"file doesn't exist on uplink\",\n  MAX_USERS_REACHED: 'maximum amount of users reached',\n  VERSION_NOT_EXIST: \"this version doesn't exist\",\n  NO_SUCH_FILE: 'no such file available',\n  UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',\n  FILE_NOT_FOUND: 'File not found',\n  REGISTRATION_DISABLED: 'user registration disabled',\n  UNAUTHORIZED_ACCESS: 'unauthorized access',\n  BAD_STATUS_CODE: 'bad status code',\n  SERVER_TIME_OUT: 'looks like the server is taking to long to respond',\n  PACKAGE_EXIST: 'this package is already present',\n  BAD_AUTH_HEADER: 'bad authorization header',\n  WEB_DISABLED: 'Web interface is disabled in the config file',\n  DEPRECATED_BASIC_HEADER: 'basic authentication is deprecated, please use JWT instead',\n  BAD_FORMAT_USER_GROUP: 'user groups is different than an array',\n  RESOURCE_UNAVAILABLE: 'resource unavailable',\n  BAD_PACKAGE_DATA: 'bad incoming package data',\n  USERNAME_PASSWORD_REQUIRED: 'username and password is required',\n  USERNAME_ALREADY_REGISTERED: 'username is already registered',\n  USERNAME_MISMATCH: 'username does not match logged in user',\n  SESSION_ID_REQUIRED: 'session id is required',\n  SESSION_ID_INVALID: 'session id is invalid',\n  SESSION_TOKEN_EXPIRED: 'session token expired',\n};\n\nexport const SUPPORT_ERRORS = {\n  PLUGIN_MISSING_INTERFACE: 'the plugin does not provide implementation of the requested feature',\n  TFA_DISABLED: 'the two-factor authentication is not yet supported',\n  STORAGE_NOT_IMPLEMENT: 'the storage does not support token saving',\n  PARAMETERS_NOT_VALID: 'the parameters are not valid',\n};\n\nexport const APP_ERROR = {\n  CONFIG_NOT_VALID: 'CONFIG: it does not look like a valid config file',\n  PROFILE_ERROR: 'profile unexpected error',\n  PASSWORD_VALIDATION: 'not valid password',\n};\n\nexport type VerdaccioError = HttpError & { code: number };\n\nfunction getError(code: number, message: string): VerdaccioError {\n  const httpError = createError(code, message);\n\n  httpError.code = code;\n\n  return httpError as VerdaccioError;\n}\n\nexport function getConflict(message: string = API_ERROR.PACKAGE_EXIST): VerdaccioError {\n  return getError(HTTP_STATUS.CONFLICT, message);\n}\n\nexport function getBadData(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_DATA, customMessage || API_ERROR.BAD_DATA);\n}\n\nexport function getBadRequest(customMessage: string): VerdaccioError {\n  return getError(HTTP_STATUS.BAD_REQUEST, customMessage);\n}\n\nexport function getInternalError(customMessage?: string): VerdaccioError {\n  return customMessage\n    ? getError(HTTP_STATUS.INTERNAL_ERROR, customMessage)\n    : getError(HTTP_STATUS.INTERNAL_ERROR, API_ERROR.UNKNOWN_ERROR);\n}\n\nexport function getUnauthorized(message = 'no credentials provided'): VerdaccioError {\n  return getError(HTTP_STATUS.UNAUTHORIZED, message);\n}\n\nexport function getForbidden(message = \"can't use this filename\"): VerdaccioError {\n  return getError(HTTP_STATUS.FORBIDDEN, message);\n}\n\nexport function getServiceUnavailable(\n  message: string = API_ERROR.RESOURCE_UNAVAILABLE\n): VerdaccioError {\n  return getError(HTTP_STATUS.SERVICE_UNAVAILABLE, message);\n}\n\nexport function getNotFound(customMessage?: string): VerdaccioError {\n  return getError(HTTP_STATUS.NOT_FOUND, customMessage || API_ERROR.NO_PACKAGE);\n}\n\nexport function getCode(statusCode: number, customMessage: string): VerdaccioError {\n  return getError(statusCode, customMessage);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAKA,IAAa,YAAY;CACvB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,mBAAmB;CACnB,uBAAuB;CACvB,YAAY;CACZ,yBAAyB;CACzB,UAAU;CACV,aAAa;CACb,qBAAqB;CACrB,uBAAuB;CACvB,eAAe;CACf,oBAAoB;CACpB,wBAAwB;CACxB,gBAAgB;CAChB,sBAAsB;CACtB,kBAAkB;CAClB,iBAAiB;CACjB,mBAAmB;CACnB,mBAAmB;CACnB,cAAc;CACd,0BAA0B;CAC1B,gBAAgB;CAChB,uBAAuB;CACvB,qBAAqB;CACrB,iBAAiB;CACjB,iBAAiB;CACjB,eAAe;CACf,iBAAiB;CACjB,cAAc;CACd,yBAAyB;CACzB,uBAAuB;CACvB,sBAAsB;CACtB,kBAAkB;CAClB,4BAA4B;CAC5B,6BAA6B;CAC7B,mBAAmB;CACnB,qBAAqB;CACrB,oBAAoB;CACpB,uBAAuB;AACzB;AAEA,IAAa,iBAAiB;CAC5B,0BAA0B;CAC1B,cAAc;CACd,uBAAuB;CACvB,sBAAsB;AACxB;AAEA,IAAa,YAAY;CACvB,kBAAkB;CAClB,eAAe;CACf,qBAAqB;AACvB;AAIA,SAAS,SAAS,MAAc,SAAiC;CAC/D,MAAM,aAAA,GAAA,YAAA,SAAwB,MAAM,OAAO;CAE3C,UAAU,OAAO;CAEjB,OAAO;AACT;AAEA,SAAgB,YAAY,UAAkB,UAAU,eAA+B;CACrF,OAAO,SAAS,kBAAA,YAAY,UAAU,OAAO;AAC/C;AAEA,SAAgB,WAAW,eAAwC;CACjE,OAAO,SAAS,kBAAA,YAAY,UAAU,iBAAiB,UAAU,QAAQ;AAC3E;AAEA,SAAgB,cAAc,eAAuC;CACnE,OAAO,SAAS,kBAAA,YAAY,aAAa,aAAa;AACxD;AAEA,SAAgB,iBAAiB,eAAwC;CACvE,OAAO,gBACH,SAAS,kBAAA,YAAY,gBAAgB,aAAa,IAClD,SAAS,kBAAA,YAAY,gBAAgB,UAAU,aAAa;AAClE;AAEA,SAAgB,gBAAgB,UAAU,2BAA2C;CACnF,OAAO,SAAS,kBAAA,YAAY,cAAc,OAAO;AACnD;AAEA,SAAgB,aAAa,UAAU,2BAA2C;CAChF,OAAO,SAAS,kBAAA,YAAY,WAAW,OAAO;AAChD;AAEA,SAAgB,sBACd,UAAkB,UAAU,sBACZ;CAChB,OAAO,SAAS,kBAAA,YAAY,qBAAqB,OAAO;AAC1D;AAEA,SAAgB,YAAY,eAAwC;CAClE,OAAO,SAAS,kBAAA,YAAY,WAAW,iBAAiB,UAAU,UAAU;AAC9E;AAEA,SAAgB,QAAQ,YAAoB,eAAuC;CACjF,OAAO,SAAS,YAAY,aAAa;AAC3C"}