@verdaccio/core 9.0.0-next-9.4 → 9.0.0-next-9.5

package/build/crypto-utils.js

@@ -23,7 +23,7 @@ function stringToMD5(data) {
 	return (0, node_crypto.createHash)("md5").update(data).digest("hex");
 }
 function generateRandomHexString(length = 8) {
-	return (0, node_crypto.pseudoRandomBytes)(length).toString("hex");
+	return (0, node_crypto.randomBytes)(length).toString("hex");
 }
 /**
 * return a masquerade string with its first and last {charNum} and three dots in between.

package/build/crypto-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-utils.js","names":[],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, pseudoRandomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return pseudoRandomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAa,8BAA8B;AAE3C,SAAgB,oBAA0B;AACxC,SAAA,GAAA,YAAA,YAAkB,4BAA4B;;;;;;;;;AAUhD,SAAgB,YAAY,MAA+B;AAEzD,SAAA,GAAA,YAAA,YAAkB,MAAM,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;AAGrD,SAAgB,wBAAwB,SAAS,GAAW;AAC1D,SAAA,GAAA,YAAA,mBAAyB,OAAO,CAAC,SAAS,MAAM;;;;;;;;AASlD,SAAgB,KAAK,KAAa,UAAU,GAAW;AACrD,QAAO,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ"}
+{"version":3,"file":"crypto-utils.js","names":[],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, randomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return randomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAa,8BAA8B;AAE3C,SAAgB,oBAA0B;AACxC,SAAA,GAAA,YAAA,YAAkB,4BAA4B;;;;;;;;;AAUhD,SAAgB,YAAY,MAA+B;AAEzD,SAAA,GAAA,YAAA,YAAkB,MAAM,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;AAGrD,SAAgB,wBAAwB,SAAS,GAAW;AAC1D,SAAA,GAAA,YAAA,aAAmB,OAAO,CAAC,SAAS,MAAM;;;;;;;;AAS5C,SAAgB,KAAK,KAAa,UAAU,GAAW;AACrD,QAAO,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ"}

package/build/crypto-utils.mjs

@@ -1,5 +1,5 @@
 import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
-import { createHash, pseudoRandomBytes } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 //#region src/crypto-utils.ts
 var crypto_utils_exports = /* @__PURE__ */ __exportAll({
 	createTarballHash: () => createTarballHash,
@@ -23,7 +23,7 @@ function stringToMD5(data) {
 	return createHash("md5").update(data).digest("hex");
 }
 function generateRandomHexString(length = 8) {
-	return pseudoRandomBytes(length).toString("hex");
+	return randomBytes(length).toString("hex");
 }
 /**
 * return a masquerade string with its first and last {charNum} and three dots in between.

package/build/crypto-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-utils.mjs","names":[],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, pseudoRandomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return pseudoRandomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAa,8BAA8B;AAE3C,SAAgB,oBAA0B;AACxC,QAAO,WAAW,4BAA4B;;;;;;;;;AAUhD,SAAgB,YAAY,MAA+B;AAEzD,QAAO,WAAW,MAAM,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;AAGrD,SAAgB,wBAAwB,SAAS,GAAW;AAC1D,QAAO,kBAAkB,OAAO,CAAC,SAAS,MAAM;;;;;;;;AASlD,SAAgB,KAAK,KAAa,UAAU,GAAW;AACrD,QAAO,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ"}
+{"version":3,"file":"crypto-utils.mjs","names":[],"sources":["../src/crypto-utils.ts"],"sourcesContent":["import type { Hash } from 'node:crypto';\nimport { createHash, randomBytes } from 'node:crypto';\n\nexport const defaultTarballHashAlgorithm = 'sha1';\n\nexport function createTarballHash(): Hash {\n  return createHash(defaultTarballHashAlgorithm);\n}\n\n/**\n * Express doesn't do ETAGS with requests <= 1024b\n * we use md5 here, it works well on 1k+ bytes, but sucks with fewer data\n * could improve performance using crc32 after benchmarks.\n * @param {Object} data\n * @return {String}\n */\nexport function stringToMD5(data: Buffer | string): string {\n  // @ts-ignore update method accepts Buffer or string\n  return createHash('md5').update(data).digest('hex');\n}\n\nexport function generateRandomHexString(length = 8): string {\n  return randomBytes(length).toString('hex');\n}\n\n/**\n * return a masquerade string with its first and last {charNum} and three dots in between.\n * @param {String} str\n * @param {Number} charNum\n * @returns {String}\n */\nexport function mask(str: string, charNum = 3): string {\n  return `${str.slice(0, charNum)}...${str.slice(-charNum)}`;\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAa,8BAA8B;AAE3C,SAAgB,oBAA0B;AACxC,QAAO,WAAW,4BAA4B;;;;;;;;;AAUhD,SAAgB,YAAY,MAA+B;AAEzD,QAAO,WAAW,MAAM,CAAC,OAAO,KAAK,CAAC,OAAO,MAAM;;AAGrD,SAAgB,wBAAwB,SAAS,GAAW;AAC1D,QAAO,YAAY,OAAO,CAAC,SAAS,MAAM;;;;;;;;AAS5C,SAAgB,KAAK,KAAa,UAAU,GAAW;AACrD,QAAO,GAAG,IAAI,MAAM,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ"}

package/build/plugin-utils.d.ts

@@ -154,3 +154,23 @@ export interface IBasicAuth {
 export interface ManifestFilter<T> extends Plugin<T> {
     filter_metadata(manifest: Manifest): Promise<Manifest>;
 }
+/**
+ * Sanity check for authentication plugins.
+ * A valid auth plugin must implement at least one of: authenticate, allow_access, allow_publish.
+ */
+export declare function authSanityCheck(plugin: Auth<unknown>): boolean;
+/**
+ * Sanity check for storage plugins.
+ * A valid storage plugin must implement getPackageStorage.
+ */
+export declare function storageSanityCheck(plugin: Storage<unknown>): boolean;
+/**
+ * Sanity check for middleware plugins.
+ * A valid middleware plugin must implement register_middlewares.
+ */
+export declare function middlewareSanityCheck(plugin: ExpressMiddleware<unknown, unknown, unknown>): boolean;
+/**
+ * Sanity check for filter plugins.
+ * A valid filter plugin must implement filter_metadata.
+ */
+export declare function filterSanityCheck(plugin: ManifestFilter<unknown>): boolean;

package/build/plugin-utils.js

@@ -1,5 +1,11 @@
 //#region src/plugin-utils.ts
-var plugin_utils_exports = /* @__PURE__ */ require("./_virtual/_rolldown/runtime.js").__exportAll({ Plugin: () => Plugin });
+var plugin_utils_exports = /* @__PURE__ */ require("./_virtual/_rolldown/runtime.js").__exportAll({
+	Plugin: () => Plugin,
+	authSanityCheck: () => authSanityCheck,
+	filterSanityCheck: () => filterSanityCheck,
+	middlewareSanityCheck: () => middlewareSanityCheck,
+	storageSanityCheck: () => storageSanityCheck
+});
 /**
 * Base Plugin Class
 *
@@ -19,6 +25,34 @@ var Plugin = class Plugin {
 		return this.version;
 	}
 };
+/**
+* Sanity check for authentication plugins.
+* A valid auth plugin must implement at least one of: authenticate, allow_access, allow_publish.
+*/
+function authSanityCheck(plugin) {
+	return typeof plugin.authenticate !== "undefined" || typeof plugin.allow_access !== "undefined" || typeof plugin.allow_publish !== "undefined";
+}
+/**
+* Sanity check for storage plugins.
+* A valid storage plugin must implement getPackageStorage.
+*/
+function storageSanityCheck(plugin) {
+	return typeof plugin.getPackageStorage !== "undefined";
+}
+/**
+* Sanity check for middleware plugins.
+* A valid middleware plugin must implement register_middlewares.
+*/
+function middlewareSanityCheck(plugin) {
+	return typeof plugin.register_middlewares !== "undefined";
+}
+/**
+* Sanity check for filter plugins.
+* A valid filter plugin must implement filter_metadata.
+*/
+function filterSanityCheck(plugin) {
+	return typeof plugin.filter_metadata !== "undefined";
+}
 //#endregion
 Object.defineProperty(exports, "plugin_utils_exports", {
 	enumerable: true,

package/build/plugin-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-utils.js","names":[],"sources":["../src/plugin-utils.ts"],"sourcesContent":["import type { Express, RequestHandler } from 'express';\nimport type { Readable, Writable } from 'node:stream';\n\nimport type {\n  AllowAccess,\n  Callback,\n  Config,\n  Logger,\n  Manifest,\n  PackageAccess,\n  RemoteUser,\n  Token,\n  TokenFilter,\n} from '@verdaccio/types';\n\nimport type { VerdaccioError, searchUtils } from '.';\n\nexport interface PluginOptions {\n  config: Config;\n  logger: Logger;\n}\n\n/**\n * Base Plugin Class\n *\n * Set of utilities for developing plugins.\n */\nexport class Plugin<PluginConfig> {\n  static version = 1;\n  public readonly version: number;\n  public readonly config: PluginConfig | unknown;\n  public readonly options: PluginOptions;\n  public constructor(config: PluginConfig, options: PluginOptions) {\n    this.version = Plugin.version;\n    this.config = config;\n    this.options = options;\n  }\n\n  public getVersion() {\n    return this.version;\n  }\n}\n\n// --- STORAGE PLUGIN ---\n\n/**\n * Storage Handler\n *\n * Used in storage plugin for managing packages and tarballs.\n */\nexport interface StorageHandler {\n  logger: Logger;\n  deletePackage(fileName: string): Promise<void>;\n  removePackage(packageName: string): Promise<void>;\n  //  next packages migration (this list is meant to replace the callback parent functions)\n  updatePackage(\n    packageName: string,\n    handleUpdate: (manifest: Manifest) => Promise<Manifest>\n  ): Promise<Manifest>;\n  readPackage(packageName: string): Promise<Manifest>;\n  savePackage(packageName: string, manifest: Manifest): Promise<void>;\n  readTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;\n  createPackage(packageName: string, manifest: Manifest): Promise<void>;\n  writeTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;\n  // verify if tarball exist in the storage\n  hasTarball(fileName: string): Promise<boolean>;\n  // verify if package exist in the storage\n  hasPackage(packageName: string): Promise<boolean>;\n}\n\n/**\n * Storage Plugin interface\n *\n * https://verdaccio.org/docs/plugin-storage\n */\nexport interface Storage<PluginConfig> extends Plugin<PluginConfig> {\n  add(packageName: string): Promise<void>;\n  remove(packageName: string): Promise<void>;\n  get(): Promise<string[]>;\n  init(): Promise<void>;\n  getSecret(): Promise<string>;\n  setSecret(secret: string): Promise<any>;\n  getPackageStorage(packageName: string): StorageHandler;\n  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;\n  saveToken(token: Token): Promise<any>;\n  deleteToken(user: string, tokenKey: string): Promise<any>;\n  readTokens(filter: TokenFilter): Promise<Token[]>;\n}\n\n// --- MIDDLEWARE PLUGIN ---\n\n/**\n * Middleware Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-middleware\n *\n * This function allow add middleware to the application.\n *\n *  ```ts\n *  import express, { Request, Response } from 'express';\n * \n *  class Middleware extends Plugin {\n *    // instances of auth and storage are injected\n *    register_middlewares(app, auth, storage) {\n *      const router = express.Router();\n *      router.post('/my-endpoint', (req: Request, res: Response): void => {\n        res.status(200).end();\n      });\n *    }\n *  }\n *\n *  const [plugin] = await asyncLoadPlugin(...);\n *  plugin.register_middlewares(app, auth, storage);\n *  ```\n */\nexport interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {\n  register_middlewares(app: Express, auth: Auth, storage: Storage): void;\n}\n\n// --- AUTH PLUGIN ---\n\nexport type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;\n\nexport type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;\nexport type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;\n\nexport interface AuthPluginPackage {\n  packageName: string;\n  packageVersion?: string;\n  tag?: string;\n}\n\n/**\n * Authentication Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-auth\n */\nexport interface Auth<T> extends Plugin<T> {\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public authenticate(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // always return an array of users\n        return done(null, [user]);      \n   *  }\n   * ```\n   */\n  authenticate(user: string, password: string, cb: AuthCallback): void;\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public adduser(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // return boolean\n        return done(null, true);      \n   *  }\n   * ```\n   */\n  adduser?(user: string, password: string, cb: AuthUserCallback): void;\n  changePassword?(\n    user: string,\n    password: string,\n    newPassword: string,\n    cb: AuthChangePasswordCallback\n  ): void;\n  allow_publish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_publish?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AuthAccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: T & PackageAccess, cb: AccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AccessCallback): void;\n  allow_unpublish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_unpublish?(\n    user: RemoteUser,\n    pkg: AllowAccess & PackageAccess,\n    cb: AuthAccessCallback\n  ): void;\n  apiJWTmiddleware?(helpers: any): RequestHandler;\n}\n\nexport interface IBasicAuth {\n  authenticate(user: string, password: string, cb: Callback): void;\n  invalidateToken?(token: string): Promise<void>;\n  changePassword(user: string, password: string, newPassword: string, cb: Callback): void;\n  allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;\n  add_user(user: string, password: string, cb: Callback): any;\n}\n\n// --- FILTER PLUGIN ---\n\n/**\n * Filter Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-filter\n */\nexport interface ManifestFilter<T> extends Plugin<T> {\n  filter_metadata(manifest: Manifest): Promise<Manifest>;\n}\n"],"mappings":";;;;;;;AA2BA,IAAa,SAAb,MAAa,OAAqB;CAChC,OAAO,UAAU;CACjB;CACA;CACA;CACA,YAAmB,QAAsB,SAAwB;AAC/D,OAAK,UAAU,OAAO;AACtB,OAAK,SAAS;AACd,OAAK,UAAU;;CAGjB,aAAoB;AAClB,SAAO,KAAK"}
+{"version":3,"file":"plugin-utils.js","names":[],"sources":["../src/plugin-utils.ts"],"sourcesContent":["import type { Express, RequestHandler } from 'express';\nimport type { Readable, Writable } from 'node:stream';\n\nimport type {\n  AllowAccess,\n  Callback,\n  Config,\n  Logger,\n  Manifest,\n  PackageAccess,\n  RemoteUser,\n  Token,\n  TokenFilter,\n} from '@verdaccio/types';\n\nimport type { VerdaccioError, searchUtils } from '.';\n\nexport interface PluginOptions {\n  config: Config;\n  logger: Logger;\n}\n\n/**\n * Base Plugin Class\n *\n * Set of utilities for developing plugins.\n */\nexport class Plugin<PluginConfig> {\n  static version = 1;\n  public readonly version: number;\n  public readonly config: PluginConfig | unknown;\n  public readonly options: PluginOptions;\n  public constructor(config: PluginConfig, options: PluginOptions) {\n    this.version = Plugin.version;\n    this.config = config;\n    this.options = options;\n  }\n\n  public getVersion() {\n    return this.version;\n  }\n}\n\n// --- STORAGE PLUGIN ---\n\n/**\n * Storage Handler\n *\n * Used in storage plugin for managing packages and tarballs.\n */\nexport interface StorageHandler {\n  logger: Logger;\n  deletePackage(fileName: string): Promise<void>;\n  removePackage(packageName: string): Promise<void>;\n  //  next packages migration (this list is meant to replace the callback parent functions)\n  updatePackage(\n    packageName: string,\n    handleUpdate: (manifest: Manifest) => Promise<Manifest>\n  ): Promise<Manifest>;\n  readPackage(packageName: string): Promise<Manifest>;\n  savePackage(packageName: string, manifest: Manifest): Promise<void>;\n  readTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;\n  createPackage(packageName: string, manifest: Manifest): Promise<void>;\n  writeTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;\n  // verify if tarball exist in the storage\n  hasTarball(fileName: string): Promise<boolean>;\n  // verify if package exist in the storage\n  hasPackage(packageName: string): Promise<boolean>;\n}\n\n/**\n * Storage Plugin interface\n *\n * https://verdaccio.org/docs/plugin-storage\n */\nexport interface Storage<PluginConfig> extends Plugin<PluginConfig> {\n  add(packageName: string): Promise<void>;\n  remove(packageName: string): Promise<void>;\n  get(): Promise<string[]>;\n  init(): Promise<void>;\n  getSecret(): Promise<string>;\n  setSecret(secret: string): Promise<any>;\n  getPackageStorage(packageName: string): StorageHandler;\n  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;\n  saveToken(token: Token): Promise<any>;\n  deleteToken(user: string, tokenKey: string): Promise<any>;\n  readTokens(filter: TokenFilter): Promise<Token[]>;\n}\n\n// --- MIDDLEWARE PLUGIN ---\n\n/**\n * Middleware Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-middleware\n *\n * This function allow add middleware to the application.\n *\n *  ```ts\n *  import express, { Request, Response } from 'express';\n * \n *  class Middleware extends Plugin {\n *    // instances of auth and storage are injected\n *    register_middlewares(app, auth, storage) {\n *      const router = express.Router();\n *      router.post('/my-endpoint', (req: Request, res: Response): void => {\n        res.status(200).end();\n      });\n *    }\n *  }\n *\n *  const [plugin] = await asyncLoadPlugin(...);\n *  plugin.register_middlewares(app, auth, storage);\n *  ```\n */\nexport interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {\n  register_middlewares(app: Express, auth: Auth, storage: Storage): void;\n}\n\n// --- AUTH PLUGIN ---\n\nexport type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;\n\nexport type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;\nexport type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;\n\nexport interface AuthPluginPackage {\n  packageName: string;\n  packageVersion?: string;\n  tag?: string;\n}\n\n/**\n * Authentication Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-auth\n */\nexport interface Auth<T> extends Plugin<T> {\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public authenticate(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // always return an array of users\n        return done(null, [user]);      \n   *  }\n   * ```\n   */\n  authenticate(user: string, password: string, cb: AuthCallback): void;\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public adduser(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // return boolean\n        return done(null, true);      \n   *  }\n   * ```\n   */\n  adduser?(user: string, password: string, cb: AuthUserCallback): void;\n  changePassword?(\n    user: string,\n    password: string,\n    newPassword: string,\n    cb: AuthChangePasswordCallback\n  ): void;\n  allow_publish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_publish?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AuthAccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: T & PackageAccess, cb: AccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AccessCallback): void;\n  allow_unpublish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_unpublish?(\n    user: RemoteUser,\n    pkg: AllowAccess & PackageAccess,\n    cb: AuthAccessCallback\n  ): void;\n  apiJWTmiddleware?(helpers: any): RequestHandler;\n}\n\nexport interface IBasicAuth {\n  authenticate(user: string, password: string, cb: Callback): void;\n  invalidateToken?(token: string): Promise<void>;\n  changePassword(user: string, password: string, newPassword: string, cb: Callback): void;\n  allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;\n  add_user(user: string, password: string, cb: Callback): any;\n}\n\n// --- FILTER PLUGIN ---\n\n/**\n * Filter Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-filter\n */\nexport interface ManifestFilter<T> extends Plugin<T> {\n  filter_metadata(manifest: Manifest): Promise<Manifest>;\n}\n\n// --- SANITY CHECKS ---\n\n/**\n * Sanity check for authentication plugins.\n * A valid auth plugin must implement at least one of: authenticate, allow_access, allow_publish.\n */\nexport function authSanityCheck(plugin: Auth<unknown>): boolean {\n  return (\n    typeof plugin.authenticate !== 'undefined' ||\n    typeof plugin.allow_access !== 'undefined' ||\n    typeof plugin.allow_publish !== 'undefined'\n  );\n}\n\n/**\n * Sanity check for storage plugins.\n * A valid storage plugin must implement getPackageStorage.\n */\nexport function storageSanityCheck(plugin: Storage<unknown>): boolean {\n  return typeof plugin.getPackageStorage !== 'undefined';\n}\n\n/**\n * Sanity check for middleware plugins.\n * A valid middleware plugin must implement register_middlewares.\n */\nexport function middlewareSanityCheck(\n  plugin: ExpressMiddleware<unknown, unknown, unknown>\n): boolean {\n  return typeof plugin.register_middlewares !== 'undefined';\n}\n\n/**\n * Sanity check for filter plugins.\n * A valid filter plugin must implement filter_metadata.\n */\nexport function filterSanityCheck(plugin: ManifestFilter<unknown>): boolean {\n  return typeof plugin.filter_metadata !== 'undefined';\n}\n"],"mappings":";;;;;;;;;;;;;AA2BA,IAAa,SAAb,MAAa,OAAqB;CAChC,OAAO,UAAU;CACjB;CACA;CACA;CACA,YAAmB,QAAsB,SAAwB;AAC/D,OAAK,UAAU,OAAO;AACtB,OAAK,SAAS;AACd,OAAK,UAAU;;CAGjB,aAAoB;AAClB,SAAO,KAAK;;;;;;;AA6KhB,SAAgB,gBAAgB,QAAgC;AAC9D,QACE,OAAO,OAAO,iBAAiB,eAC/B,OAAO,OAAO,iBAAiB,eAC/B,OAAO,OAAO,kBAAkB;;;;;;AAQpC,SAAgB,mBAAmB,QAAmC;AACpE,QAAO,OAAO,OAAO,sBAAsB;;;;;;AAO7C,SAAgB,sBACd,QACS;AACT,QAAO,OAAO,OAAO,yBAAyB;;;;;;AAOhD,SAAgB,kBAAkB,QAA0C;AAC1E,QAAO,OAAO,OAAO,oBAAoB"}

package/build/plugin-utils.mjs

@@ -1,6 +1,12 @@
 import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
 //#region src/plugin-utils.ts
-var plugin_utils_exports = /* @__PURE__ */ __exportAll({ Plugin: () => Plugin });
+var plugin_utils_exports = /* @__PURE__ */ __exportAll({
+	Plugin: () => Plugin,
+	authSanityCheck: () => authSanityCheck,
+	filterSanityCheck: () => filterSanityCheck,
+	middlewareSanityCheck: () => middlewareSanityCheck,
+	storageSanityCheck: () => storageSanityCheck
+});
 /**
 * Base Plugin Class
 *
@@ -20,6 +26,34 @@ var Plugin = class Plugin {
 		return this.version;
 	}
 };
+/**
+* Sanity check for authentication plugins.
+* A valid auth plugin must implement at least one of: authenticate, allow_access, allow_publish.
+*/
+function authSanityCheck(plugin) {
+	return typeof plugin.authenticate !== "undefined" || typeof plugin.allow_access !== "undefined" || typeof plugin.allow_publish !== "undefined";
+}
+/**
+* Sanity check for storage plugins.
+* A valid storage plugin must implement getPackageStorage.
+*/
+function storageSanityCheck(plugin) {
+	return typeof plugin.getPackageStorage !== "undefined";
+}
+/**
+* Sanity check for middleware plugins.
+* A valid middleware plugin must implement register_middlewares.
+*/
+function middlewareSanityCheck(plugin) {
+	return typeof plugin.register_middlewares !== "undefined";
+}
+/**
+* Sanity check for filter plugins.
+* A valid filter plugin must implement filter_metadata.
+*/
+function filterSanityCheck(plugin) {
+	return typeof plugin.filter_metadata !== "undefined";
+}
 //#endregion
 export { plugin_utils_exports };
 

package/build/plugin-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-utils.mjs","names":[],"sources":["../src/plugin-utils.ts"],"sourcesContent":["import type { Express, RequestHandler } from 'express';\nimport type { Readable, Writable } from 'node:stream';\n\nimport type {\n  AllowAccess,\n  Callback,\n  Config,\n  Logger,\n  Manifest,\n  PackageAccess,\n  RemoteUser,\n  Token,\n  TokenFilter,\n} from '@verdaccio/types';\n\nimport type { VerdaccioError, searchUtils } from '.';\n\nexport interface PluginOptions {\n  config: Config;\n  logger: Logger;\n}\n\n/**\n * Base Plugin Class\n *\n * Set of utilities for developing plugins.\n */\nexport class Plugin<PluginConfig> {\n  static version = 1;\n  public readonly version: number;\n  public readonly config: PluginConfig | unknown;\n  public readonly options: PluginOptions;\n  public constructor(config: PluginConfig, options: PluginOptions) {\n    this.version = Plugin.version;\n    this.config = config;\n    this.options = options;\n  }\n\n  public getVersion() {\n    return this.version;\n  }\n}\n\n// --- STORAGE PLUGIN ---\n\n/**\n * Storage Handler\n *\n * Used in storage plugin for managing packages and tarballs.\n */\nexport interface StorageHandler {\n  logger: Logger;\n  deletePackage(fileName: string): Promise<void>;\n  removePackage(packageName: string): Promise<void>;\n  //  next packages migration (this list is meant to replace the callback parent functions)\n  updatePackage(\n    packageName: string,\n    handleUpdate: (manifest: Manifest) => Promise<Manifest>\n  ): Promise<Manifest>;\n  readPackage(packageName: string): Promise<Manifest>;\n  savePackage(packageName: string, manifest: Manifest): Promise<void>;\n  readTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;\n  createPackage(packageName: string, manifest: Manifest): Promise<void>;\n  writeTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;\n  // verify if tarball exist in the storage\n  hasTarball(fileName: string): Promise<boolean>;\n  // verify if package exist in the storage\n  hasPackage(packageName: string): Promise<boolean>;\n}\n\n/**\n * Storage Plugin interface\n *\n * https://verdaccio.org/docs/plugin-storage\n */\nexport interface Storage<PluginConfig> extends Plugin<PluginConfig> {\n  add(packageName: string): Promise<void>;\n  remove(packageName: string): Promise<void>;\n  get(): Promise<string[]>;\n  init(): Promise<void>;\n  getSecret(): Promise<string>;\n  setSecret(secret: string): Promise<any>;\n  getPackageStorage(packageName: string): StorageHandler;\n  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;\n  saveToken(token: Token): Promise<any>;\n  deleteToken(user: string, tokenKey: string): Promise<any>;\n  readTokens(filter: TokenFilter): Promise<Token[]>;\n}\n\n// --- MIDDLEWARE PLUGIN ---\n\n/**\n * Middleware Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-middleware\n *\n * This function allow add middleware to the application.\n *\n *  ```ts\n *  import express, { Request, Response } from 'express';\n * \n *  class Middleware extends Plugin {\n *    // instances of auth and storage are injected\n *    register_middlewares(app, auth, storage) {\n *      const router = express.Router();\n *      router.post('/my-endpoint', (req: Request, res: Response): void => {\n        res.status(200).end();\n      });\n *    }\n *  }\n *\n *  const [plugin] = await asyncLoadPlugin(...);\n *  plugin.register_middlewares(app, auth, storage);\n *  ```\n */\nexport interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {\n  register_middlewares(app: Express, auth: Auth, storage: Storage): void;\n}\n\n// --- AUTH PLUGIN ---\n\nexport type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;\n\nexport type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;\nexport type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;\n\nexport interface AuthPluginPackage {\n  packageName: string;\n  packageVersion?: string;\n  tag?: string;\n}\n\n/**\n * Authentication Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-auth\n */\nexport interface Auth<T> extends Plugin<T> {\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public authenticate(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // always return an array of users\n        return done(null, [user]);      \n   *  }\n   * ```\n   */\n  authenticate(user: string, password: string, cb: AuthCallback): void;\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public adduser(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // return boolean\n        return done(null, true);      \n   *  }\n   * ```\n   */\n  adduser?(user: string, password: string, cb: AuthUserCallback): void;\n  changePassword?(\n    user: string,\n    password: string,\n    newPassword: string,\n    cb: AuthChangePasswordCallback\n  ): void;\n  allow_publish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_publish?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AuthAccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: T & PackageAccess, cb: AccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AccessCallback): void;\n  allow_unpublish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_unpublish?(\n    user: RemoteUser,\n    pkg: AllowAccess & PackageAccess,\n    cb: AuthAccessCallback\n  ): void;\n  apiJWTmiddleware?(helpers: any): RequestHandler;\n}\n\nexport interface IBasicAuth {\n  authenticate(user: string, password: string, cb: Callback): void;\n  invalidateToken?(token: string): Promise<void>;\n  changePassword(user: string, password: string, newPassword: string, cb: Callback): void;\n  allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;\n  add_user(user: string, password: string, cb: Callback): any;\n}\n\n// --- FILTER PLUGIN ---\n\n/**\n * Filter Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-filter\n */\nexport interface ManifestFilter<T> extends Plugin<T> {\n  filter_metadata(manifest: Manifest): Promise<Manifest>;\n}\n"],"mappings":";;;;;;;;AA2BA,IAAa,SAAb,MAAa,OAAqB;CAChC,OAAO,UAAU;CACjB;CACA;CACA;CACA,YAAmB,QAAsB,SAAwB;AAC/D,OAAK,UAAU,OAAO;AACtB,OAAK,SAAS;AACd,OAAK,UAAU;;CAGjB,aAAoB;AAClB,SAAO,KAAK"}
+{"version":3,"file":"plugin-utils.mjs","names":[],"sources":["../src/plugin-utils.ts"],"sourcesContent":["import type { Express, RequestHandler } from 'express';\nimport type { Readable, Writable } from 'node:stream';\n\nimport type {\n  AllowAccess,\n  Callback,\n  Config,\n  Logger,\n  Manifest,\n  PackageAccess,\n  RemoteUser,\n  Token,\n  TokenFilter,\n} from '@verdaccio/types';\n\nimport type { VerdaccioError, searchUtils } from '.';\n\nexport interface PluginOptions {\n  config: Config;\n  logger: Logger;\n}\n\n/**\n * Base Plugin Class\n *\n * Set of utilities for developing plugins.\n */\nexport class Plugin<PluginConfig> {\n  static version = 1;\n  public readonly version: number;\n  public readonly config: PluginConfig | unknown;\n  public readonly options: PluginOptions;\n  public constructor(config: PluginConfig, options: PluginOptions) {\n    this.version = Plugin.version;\n    this.config = config;\n    this.options = options;\n  }\n\n  public getVersion() {\n    return this.version;\n  }\n}\n\n// --- STORAGE PLUGIN ---\n\n/**\n * Storage Handler\n *\n * Used in storage plugin for managing packages and tarballs.\n */\nexport interface StorageHandler {\n  logger: Logger;\n  deletePackage(fileName: string): Promise<void>;\n  removePackage(packageName: string): Promise<void>;\n  //  next packages migration (this list is meant to replace the callback parent functions)\n  updatePackage(\n    packageName: string,\n    handleUpdate: (manifest: Manifest) => Promise<Manifest>\n  ): Promise<Manifest>;\n  readPackage(packageName: string): Promise<Manifest>;\n  savePackage(packageName: string, manifest: Manifest): Promise<void>;\n  readTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Readable>;\n  createPackage(packageName: string, manifest: Manifest): Promise<void>;\n  writeTarball(fileName: string, { signal }: { signal: AbortSignal }): Promise<Writable>;\n  // verify if tarball exist in the storage\n  hasTarball(fileName: string): Promise<boolean>;\n  // verify if package exist in the storage\n  hasPackage(packageName: string): Promise<boolean>;\n}\n\n/**\n * Storage Plugin interface\n *\n * https://verdaccio.org/docs/plugin-storage\n */\nexport interface Storage<PluginConfig> extends Plugin<PluginConfig> {\n  add(packageName: string): Promise<void>;\n  remove(packageName: string): Promise<void>;\n  get(): Promise<string[]>;\n  init(): Promise<void>;\n  getSecret(): Promise<string>;\n  setSecret(secret: string): Promise<any>;\n  getPackageStorage(packageName: string): StorageHandler;\n  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;\n  saveToken(token: Token): Promise<any>;\n  deleteToken(user: string, tokenKey: string): Promise<any>;\n  readTokens(filter: TokenFilter): Promise<Token[]>;\n}\n\n// --- MIDDLEWARE PLUGIN ---\n\n/**\n * Middleware Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-middleware\n *\n * This function allow add middleware to the application.\n *\n *  ```ts\n *  import express, { Request, Response } from 'express';\n * \n *  class Middleware extends Plugin {\n *    // instances of auth and storage are injected\n *    register_middlewares(app, auth, storage) {\n *      const router = express.Router();\n *      router.post('/my-endpoint', (req: Request, res: Response): void => {\n        res.status(200).end();\n      });\n *    }\n *  }\n *\n *  const [plugin] = await asyncLoadPlugin(...);\n *  plugin.register_middlewares(app, auth, storage);\n *  ```\n */\nexport interface ExpressMiddleware<PluginConfig, Storage, Auth> extends Plugin<PluginConfig> {\n  register_middlewares(app: Express, auth: Auth, storage: Storage): void;\n}\n\n// --- AUTH PLUGIN ---\n\nexport type AuthCallback = (error: VerdaccioError | null, groups?: string[] | false) => void;\n\nexport type AuthAccessCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AuthUserCallback = (error: VerdaccioError | null, access?: boolean | string) => void;\nexport type AuthChangePasswordCallback = (error: VerdaccioError | null, access?: boolean) => void;\nexport type AccessCallback = (error: VerdaccioError | null, ok?: boolean) => void;\n\nexport interface AuthPluginPackage {\n  packageName: string;\n  packageVersion?: string;\n  tag?: string;\n}\n\n/**\n * Authentication Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-auth\n */\nexport interface Auth<T> extends Plugin<T> {\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public authenticate(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // always return an array of users\n        return done(null, [user]);      \n   *  }\n   * ```\n   */\n  authenticate(user: string, password: string, cb: AuthCallback): void;\n  /**\n   * Handles the authenticated method.\n   * ```ts\n   *  class Auth {\n      public adduser(user: string, password: string, done: AuthCallback): void {\n        if (!password) {\n          return done(errorUtils.getUnauthorized(API_ERROR.BAD_USERNAME_PASSWORD));\n        }\n        // return boolean\n        return done(null, true);      \n   *  }\n   * ```\n   */\n  adduser?(user: string, password: string, cb: AuthUserCallback): void;\n  changePassword?(\n    user: string,\n    password: string,\n    newPassword: string,\n    cb: AuthChangePasswordCallback\n  ): void;\n  allow_publish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_publish?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AuthAccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: T & PackageAccess, cb: AccessCallback): void;\n  allow_access?(user: RemoteUser, pkg: AllowAccess & PackageAccess, cb: AccessCallback): void;\n  allow_unpublish?(user: RemoteUser, pkg: T & PackageAccess, cb: AuthAccessCallback): void;\n  allow_unpublish?(\n    user: RemoteUser,\n    pkg: AllowAccess & PackageAccess,\n    cb: AuthAccessCallback\n  ): void;\n  apiJWTmiddleware?(helpers: any): RequestHandler;\n}\n\nexport interface IBasicAuth {\n  authenticate(user: string, password: string, cb: Callback): void;\n  invalidateToken?(token: string): Promise<void>;\n  changePassword(user: string, password: string, newPassword: string, cb: Callback): void;\n  allow_access(pkg: AuthPluginPackage, user: RemoteUser, callback: Callback): void;\n  add_user(user: string, password: string, cb: Callback): any;\n}\n\n// --- FILTER PLUGIN ---\n\n/**\n * Filter Plugin Interface\n *\n * https://verdaccio.org/docs/plugin-filter\n */\nexport interface ManifestFilter<T> extends Plugin<T> {\n  filter_metadata(manifest: Manifest): Promise<Manifest>;\n}\n\n// --- SANITY CHECKS ---\n\n/**\n * Sanity check for authentication plugins.\n * A valid auth plugin must implement at least one of: authenticate, allow_access, allow_publish.\n */\nexport function authSanityCheck(plugin: Auth<unknown>): boolean {\n  return (\n    typeof plugin.authenticate !== 'undefined' ||\n    typeof plugin.allow_access !== 'undefined' ||\n    typeof plugin.allow_publish !== 'undefined'\n  );\n}\n\n/**\n * Sanity check for storage plugins.\n * A valid storage plugin must implement getPackageStorage.\n */\nexport function storageSanityCheck(plugin: Storage<unknown>): boolean {\n  return typeof plugin.getPackageStorage !== 'undefined';\n}\n\n/**\n * Sanity check for middleware plugins.\n * A valid middleware plugin must implement register_middlewares.\n */\nexport function middlewareSanityCheck(\n  plugin: ExpressMiddleware<unknown, unknown, unknown>\n): boolean {\n  return typeof plugin.register_middlewares !== 'undefined';\n}\n\n/**\n * Sanity check for filter plugins.\n * A valid filter plugin must implement filter_metadata.\n */\nexport function filterSanityCheck(plugin: ManifestFilter<unknown>): boolean {\n  return typeof plugin.filter_metadata !== 'undefined';\n}\n"],"mappings":";;;;;;;;;;;;;;AA2BA,IAAa,SAAb,MAAa,OAAqB;CAChC,OAAO,UAAU;CACjB;CACA;CACA;CACA,YAAmB,QAAsB,SAAwB;AAC/D,OAAK,UAAU,OAAO;AACtB,OAAK,SAAS;AACd,OAAK,UAAU;;CAGjB,aAAoB;AAClB,SAAO,KAAK;;;;;;;AA6KhB,SAAgB,gBAAgB,QAAgC;AAC9D,QACE,OAAO,OAAO,iBAAiB,eAC/B,OAAO,OAAO,iBAAiB,eAC/B,OAAO,OAAO,kBAAkB;;;;;;AAQpC,SAAgB,mBAAmB,QAAmC;AACpE,QAAO,OAAO,OAAO,sBAAsB;;;;;;AAO7C,SAAgB,sBACd,QACS;AACT,QAAO,OAAO,OAAO,yBAAyB;;;;;;AAOhD,SAAgB,kBAAkB,QAA0C;AAC1E,QAAO,OAAO,OAAO,oBAAoB"}

package/build/warning-utils.js

@@ -1,10 +1,12 @@
 const require_runtime = require("./_virtual/_rolldown/runtime.js");
 let process_warning = require("process-warning");
+process_warning = require_runtime.__toESM(process_warning);
 //#region src/warning-utils.ts
 var warning_utils_exports = /* @__PURE__ */ require_runtime.__exportAll({
 	Codes: () => Codes,
 	emit: () => emit
 });
+var { createDeprecation, createWarning } = process_warning.default;
 var verdaccioWarning = "VerdaccioWarning";
 var Codes = /* @__PURE__ */ function(Codes) {
 	Codes["VERWAR001"] = "VERWAR001";
@@ -17,38 +19,38 @@ var Codes = /* @__PURE__ */ function(Codes) {
 	return Codes;
 }({});
 var warnings = {};
-warnings[Codes.VERWAR001] = (0, process_warning.createWarning)({
+warnings[Codes.VERWAR001] = createWarning({
 	name: verdaccioWarning,
 	code: Codes.VERWAR001,
 	message: `Verdaccio doesn't need superuser privileges. don't run it under root`
 });
-warnings[Codes.VERWAR002] = (0, process_warning.createWarning)({
+warnings[Codes.VERWAR002] = createWarning({
 	name: verdaccioWarning,
 	code: Codes.VERWAR002,
 	message: `The configuration property "logs" has been deprecated, please rename to "log" for future compatibility`
 });
-warnings[Codes.VERWAR003] = (0, process_warning.createWarning)({
+warnings[Codes.VERWAR003] = createWarning({
 	name: verdaccioWarning,
 	code: Codes.VERWAR003,
 	message: "rotating-file type is not longer supported, consider use [logrotate] instead"
 });
-warnings[Codes.VERWAR004] = (0, process_warning.createWarning)({
+warnings[Codes.VERWAR004] = createWarning({
 	name: verdaccioWarning,
 	code: Codes.VERWAR004,
 	message: `invalid address - %s, we expect a port (e.g. "4873"),
 host:port (e.g. "localhost:4873") or full url '(e.g. "http://localhost:4873/")
-https://verdaccio.org/docs/en/configuration#listen-port`
+https://verdaccio.org/docs/configuration#listen-port`
 });
-warnings[Codes.VERWAR006] = (0, process_warning.createDeprecation)({
+warnings[Codes.VERWAR006] = createDeprecation({
 	code: Codes.VERWAR006,
 	message: "the auth plugin method \"add_user\" in the auth plugin is deprecated and will be removed in next major release, rename to \"adduser\""
 });
-warnings[Codes.VERWAR007] = (0, process_warning.createDeprecation)({
+warnings[Codes.VERWAR007] = createDeprecation({
 	code: Codes.VERWAR007,
 	message: `the secret length is too long, it must be 32 characters long, please consider generate a new one
   Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`
 });
-warnings[Codes.VERDEP003] = (0, process_warning.createDeprecation)({
+warnings[Codes.VERDEP003] = createDeprecation({
 	code: Codes.VERDEP003,
 	message: "multiple addresses will be deprecated in the next major, only use one"
 });

package/build/warning-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"warning-utils.js","names":[],"sources":["../src/warning-utils.ts"],"sourcesContent":["import { createDeprecation, createWarning } from 'process-warning';\n\nconst verdaccioWarning = 'VerdaccioWarning';\n\nexport enum Codes {\n  VERWAR001 = 'VERWAR001',\n  VERWAR002 = 'VERWAR002',\n  VERWAR003 = 'VERWAR003',\n  VERWAR004 = 'VERWAR004',\n  // deprecation warnings\n  VERDEP003 = 'VERDEP003',\n  VERWAR006 = 'VERWAR006',\n  VERWAR007 = 'VERWAR007',\n}\n\n/* general warnings */\n\nconst warnings: Record<string, (a?: any, b?: any, c?: any) => void> = {};\n\nwarnings[Codes.VERWAR001] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR001,\n  message: `Verdaccio doesn't need superuser privileges. don't run it under root`,\n});\n\nwarnings[Codes.VERWAR002] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR002,\n  message: `The configuration property \"logs\" has been deprecated, please rename to \"log\" for future compatibility`,\n});\n\nwarnings[Codes.VERWAR003] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR003,\n  message: 'rotating-file type is not longer supported, consider use [logrotate] instead',\n});\n\nwarnings[Codes.VERWAR004] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR004,\n  message: `invalid address - %s, we expect a port (e.g. \"4873\"),\nhost:port (e.g. \"localhost:4873\") or full url '(e.g. \"http://localhost:4873/\")\nhttps://verdaccio.org/docs/en/configuration#listen-port`,\n});\n\nwarnings[Codes.VERWAR006] = createDeprecation({\n  code: Codes.VERWAR006,\n  message:\n    'the auth plugin method \"add_user\" in the auth plugin is deprecated and will be removed in next major release, rename to \"adduser\"',\n});\n\nwarnings[Codes.VERWAR007] = createDeprecation({\n  code: Codes.VERWAR007,\n  message: `the secret length is too long, it must be 32 characters long, please consider generate a new one\n  Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`,\n});\n\n/* deprecation warnings */\n\nwarnings[Codes.VERDEP003] = createDeprecation({\n  code: Codes.VERDEP003,\n  message: 'multiple addresses will be deprecated in the next major, only use one',\n});\n\nexport function emit(code: string, a?: string, b?: string, c?: string) {\n  const warning = warnings[code];\n  if (warning) {\n    warning(a, b, c);\n  }\n}\n"],"mappings":";;;;;;;AAEA,IAAM,mBAAmB;AAEzB,IAAY,QAAL,yBAAA,OAAA;AACL,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AAEA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;;KACD;AAID,IAAM,WAAgE,EAAE;AAExE,SAAS,MAAM,cAAA,GAAA,gBAAA,eAA2B;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,cAAA,GAAA,gBAAA,eAA2B;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,cAAA,GAAA,gBAAA,eAA2B;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,cAAA,GAAA,gBAAA,eAA2B;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;;;CAGV,CAAC;AAEF,SAAS,MAAM,cAAA,GAAA,gBAAA,mBAA+B;CAC5C,MAAM,MAAM;CACZ,SACE;CACH,CAAC;AAEF,SAAS,MAAM,cAAA,GAAA,gBAAA,mBAA+B;CAC5C,MAAM,MAAM;CACZ,SAAS;;CAEV,CAAC;AAIF,SAAS,MAAM,cAAA,GAAA,gBAAA,mBAA+B;CAC5C,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAgB,KAAK,MAAc,GAAY,GAAY,GAAY;CACrE,MAAM,UAAU,SAAS;AACzB,KAAI,QACF,SAAQ,GAAG,GAAG,EAAE"}
+{"version":3,"file":"warning-utils.js","names":[],"sources":["../src/warning-utils.ts"],"sourcesContent":["import processWarning from 'process-warning';\n\nconst { createDeprecation, createWarning } = processWarning;\n\nconst verdaccioWarning = 'VerdaccioWarning';\n\nexport enum Codes {\n  VERWAR001 = 'VERWAR001',\n  VERWAR002 = 'VERWAR002',\n  VERWAR003 = 'VERWAR003',\n  VERWAR004 = 'VERWAR004',\n  // deprecation warnings\n  VERDEP003 = 'VERDEP003',\n  VERWAR006 = 'VERWAR006',\n  VERWAR007 = 'VERWAR007',\n}\n\n/* general warnings */\n\nconst warnings: Record<string, (a?: any, b?: any, c?: any) => void> = {};\n\nwarnings[Codes.VERWAR001] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR001,\n  message: `Verdaccio doesn't need superuser privileges. don't run it under root`,\n});\n\nwarnings[Codes.VERWAR002] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR002,\n  message: `The configuration property \"logs\" has been deprecated, please rename to \"log\" for future compatibility`,\n});\n\nwarnings[Codes.VERWAR003] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR003,\n  message: 'rotating-file type is not longer supported, consider use [logrotate] instead',\n});\n\nwarnings[Codes.VERWAR004] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR004,\n  message: `invalid address - %s, we expect a port (e.g. \"4873\"),\nhost:port (e.g. \"localhost:4873\") or full url '(e.g. \"http://localhost:4873/\")\nhttps://verdaccio.org/docs/configuration#listen-port`,\n});\n\nwarnings[Codes.VERWAR006] = createDeprecation({\n  code: Codes.VERWAR006,\n  message:\n    'the auth plugin method \"add_user\" in the auth plugin is deprecated and will be removed in next major release, rename to \"adduser\"',\n});\n\nwarnings[Codes.VERWAR007] = createDeprecation({\n  code: Codes.VERWAR007,\n  message: `the secret length is too long, it must be 32 characters long, please consider generate a new one\n  Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`,\n});\n\n/* deprecation warnings */\n\nwarnings[Codes.VERDEP003] = createDeprecation({\n  code: Codes.VERDEP003,\n  message: 'multiple addresses will be deprecated in the next major, only use one',\n});\n\nexport function emit(code: string, a?: string, b?: string, c?: string) {\n  const warning = warnings[code];\n  if (warning) {\n    warning(a, b, c);\n  }\n}\n"],"mappings":";;;;;;;;AAEA,IAAM,EAAE,mBAAmB,kBAAkB,gBAAA;AAE7C,IAAM,mBAAmB;AAEzB,IAAY,QAAL,yBAAA,OAAA;AACL,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AAEA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;;KACD;AAID,IAAM,WAAgE,EAAE;AAExE,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;;;CAGV,CAAC;AAEF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SACE;CACH,CAAC;AAEF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SAAS;;CAEV,CAAC;AAIF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAgB,KAAK,MAAc,GAAY,GAAY,GAAY;CACrE,MAAM,UAAU,SAAS;AACzB,KAAI,QACF,SAAQ,GAAG,GAAG,EAAE"}

package/build/warning-utils.mjs

@@ -1,10 +1,11 @@
 import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
-import { createDeprecation, createWarning } from "process-warning";
+import processWarning from "process-warning";
 //#region src/warning-utils.ts
 var warning_utils_exports = /* @__PURE__ */ __exportAll({
 	Codes: () => Codes,
 	emit: () => emit
 });
+var { createDeprecation, createWarning } = processWarning;
 var verdaccioWarning = "VerdaccioWarning";
 var Codes = /* @__PURE__ */ function(Codes) {
 	Codes["VERWAR001"] = "VERWAR001";
@@ -37,7 +38,7 @@ warnings[Codes.VERWAR004] = createWarning({
 	code: Codes.VERWAR004,
 	message: `invalid address - %s, we expect a port (e.g. "4873"),
 host:port (e.g. "localhost:4873") or full url '(e.g. "http://localhost:4873/")
-https://verdaccio.org/docs/en/configuration#listen-port`
+https://verdaccio.org/docs/configuration#listen-port`
 });
 warnings[Codes.VERWAR006] = createDeprecation({
 	code: Codes.VERWAR006,

package/build/warning-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"warning-utils.mjs","names":[],"sources":["../src/warning-utils.ts"],"sourcesContent":["import { createDeprecation, createWarning } from 'process-warning';\n\nconst verdaccioWarning = 'VerdaccioWarning';\n\nexport enum Codes {\n  VERWAR001 = 'VERWAR001',\n  VERWAR002 = 'VERWAR002',\n  VERWAR003 = 'VERWAR003',\n  VERWAR004 = 'VERWAR004',\n  // deprecation warnings\n  VERDEP003 = 'VERDEP003',\n  VERWAR006 = 'VERWAR006',\n  VERWAR007 = 'VERWAR007',\n}\n\n/* general warnings */\n\nconst warnings: Record<string, (a?: any, b?: any, c?: any) => void> = {};\n\nwarnings[Codes.VERWAR001] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR001,\n  message: `Verdaccio doesn't need superuser privileges. don't run it under root`,\n});\n\nwarnings[Codes.VERWAR002] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR002,\n  message: `The configuration property \"logs\" has been deprecated, please rename to \"log\" for future compatibility`,\n});\n\nwarnings[Codes.VERWAR003] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR003,\n  message: 'rotating-file type is not longer supported, consider use [logrotate] instead',\n});\n\nwarnings[Codes.VERWAR004] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR004,\n  message: `invalid address - %s, we expect a port (e.g. \"4873\"),\nhost:port (e.g. \"localhost:4873\") or full url '(e.g. \"http://localhost:4873/\")\nhttps://verdaccio.org/docs/en/configuration#listen-port`,\n});\n\nwarnings[Codes.VERWAR006] = createDeprecation({\n  code: Codes.VERWAR006,\n  message:\n    'the auth plugin method \"add_user\" in the auth plugin is deprecated and will be removed in next major release, rename to \"adduser\"',\n});\n\nwarnings[Codes.VERWAR007] = createDeprecation({\n  code: Codes.VERWAR007,\n  message: `the secret length is too long, it must be 32 characters long, please consider generate a new one\n  Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`,\n});\n\n/* deprecation warnings */\n\nwarnings[Codes.VERDEP003] = createDeprecation({\n  code: Codes.VERDEP003,\n  message: 'multiple addresses will be deprecated in the next major, only use one',\n});\n\nexport function emit(code: string, a?: string, b?: string, c?: string) {\n  const warning = warnings[code];\n  if (warning) {\n    warning(a, b, c);\n  }\n}\n"],"mappings":";;;;;;;AAEA,IAAM,mBAAmB;AAEzB,IAAY,QAAL,yBAAA,OAAA;AACL,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AAEA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;;KACD;AAID,IAAM,WAAgE,EAAE;AAExE,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;;;CAGV,CAAC;AAEF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SACE;CACH,CAAC;AAEF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SAAS;;CAEV,CAAC;AAIF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAgB,KAAK,MAAc,GAAY,GAAY,GAAY;CACrE,MAAM,UAAU,SAAS;AACzB,KAAI,QACF,SAAQ,GAAG,GAAG,EAAE"}
+{"version":3,"file":"warning-utils.mjs","names":[],"sources":["../src/warning-utils.ts"],"sourcesContent":["import processWarning from 'process-warning';\n\nconst { createDeprecation, createWarning } = processWarning;\n\nconst verdaccioWarning = 'VerdaccioWarning';\n\nexport enum Codes {\n  VERWAR001 = 'VERWAR001',\n  VERWAR002 = 'VERWAR002',\n  VERWAR003 = 'VERWAR003',\n  VERWAR004 = 'VERWAR004',\n  // deprecation warnings\n  VERDEP003 = 'VERDEP003',\n  VERWAR006 = 'VERWAR006',\n  VERWAR007 = 'VERWAR007',\n}\n\n/* general warnings */\n\nconst warnings: Record<string, (a?: any, b?: any, c?: any) => void> = {};\n\nwarnings[Codes.VERWAR001] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR001,\n  message: `Verdaccio doesn't need superuser privileges. don't run it under root`,\n});\n\nwarnings[Codes.VERWAR002] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR002,\n  message: `The configuration property \"logs\" has been deprecated, please rename to \"log\" for future compatibility`,\n});\n\nwarnings[Codes.VERWAR003] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR003,\n  message: 'rotating-file type is not longer supported, consider use [logrotate] instead',\n});\n\nwarnings[Codes.VERWAR004] = createWarning({\n  name: verdaccioWarning,\n  code: Codes.VERWAR004,\n  message: `invalid address - %s, we expect a port (e.g. \"4873\"),\nhost:port (e.g. \"localhost:4873\") or full url '(e.g. \"http://localhost:4873/\")\nhttps://verdaccio.org/docs/configuration#listen-port`,\n});\n\nwarnings[Codes.VERWAR006] = createDeprecation({\n  code: Codes.VERWAR006,\n  message:\n    'the auth plugin method \"add_user\" in the auth plugin is deprecated and will be removed in next major release, rename to \"adduser\"',\n});\n\nwarnings[Codes.VERWAR007] = createDeprecation({\n  code: Codes.VERWAR007,\n  message: `the secret length is too long, it must be 32 characters long, please consider generate a new one\n  Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`,\n});\n\n/* deprecation warnings */\n\nwarnings[Codes.VERDEP003] = createDeprecation({\n  code: Codes.VERDEP003,\n  message: 'multiple addresses will be deprecated in the next major, only use one',\n});\n\nexport function emit(code: string, a?: string, b?: string, c?: string) {\n  const warning = warnings[code];\n  if (warning) {\n    warning(a, b, c);\n  }\n}\n"],"mappings":";;;;;;;AAEA,IAAM,EAAE,mBAAmB,kBAAkB;AAE7C,IAAM,mBAAmB;AAEzB,IAAY,QAAL,yBAAA,OAAA;AACL,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;AAEA,OAAA,eAAA;AACA,OAAA,eAAA;AACA,OAAA,eAAA;;KACD;AAID,IAAM,WAAgE,EAAE;AAExE,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAS,MAAM,aAAa,cAAc;CACxC,MAAM;CACN,MAAM,MAAM;CACZ,SAAS;;;CAGV,CAAC;AAEF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SACE;CACH,CAAC;AAEF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SAAS;;CAEV,CAAC;AAIF,SAAS,MAAM,aAAa,kBAAkB;CAC5C,MAAM,MAAM;CACZ,SAAS;CACV,CAAC;AAEF,SAAgB,KAAK,MAAc,GAAY,GAAY,GAAY;CACrE,MAAM,UAAU,SAAS;AACzB,KAAI,QACF,SAAQ,GAAG,GAAG,EAAE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "9.0.0-next-9.4",
+  "version": "9.0.0-next-9.5",
   "description": "Verdaccio Core Components",
   "keywords": [
     "private",
@@ -41,10 +41,10 @@
     "semver": "7.7.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "14.0.0-next-9.1",
+    "@verdaccio/types": "14.0.0-next-9.2",
     "express": "5.2.1",
     "typedoc": "0.28.14",
-    "vitest": "3.2.4"
+    "vitest": "4.1.0"
   },
   "funding": {
     "type": "opencollective",