@verdaccio/e2e-cli 2.10.2 → 2.10.4

package/build/esm/scenarios/install-multiple-deps.js.map

@@ -1 +1 @@
-{"version":3,"file":"install-multiple-deps.js","names":[],"sources":["../../../src/scenarios/install-multiple-deps.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { normalizeInfo } from '../utils/info';\n\nconst debug = buildDebug('verdaccio:e2e-cli:scenario:install-multiple-deps');\n\n/**\n * Scenario: install-multiple-deps\n *\n * Publishes several packages to the registry (some scoped, some unscoped,\n * some with inter-dependencies), then creates a consumer project that\n * depends on all of them and runs `install`.\n *\n * This exercises the registry under realistic load:\n *   - many parallel tarball downloads\n *   - metadata resolution for multiple packages\n *   - scoped-package authentication\n *   - transitive dependency resolution\n */\n\nconst SEED_PACKAGES_COUNT = 5;\n\n/**\n * Parse `info --json` output across all adapters.\n * Yarn classic wraps the result in NDJSON lines with `{ type: \"inspect\", data: { ... } }`.\n */\nfunction parseInfoOutput(stdout: string, adapterType: string): any {\n  if (adapterType === 'yarn-classic') {\n    // Yarn classic outputs NDJSON — find the \"inspect\" line that holds package data\n    const lines = stdout.split('\\n').filter(Boolean);\n    for (const line of lines) {\n      try {\n        const obj = JSON.parse(line);\n        if (obj.type === 'inspect' && obj.data) {\n          return obj.data;\n        }\n      } catch {\n        // skip non-JSON lines\n      }\n    }\n    // Fallback: try parsing the whole output\n    return normalizeInfo(JSON.parse(stdout));\n  }\n  return normalizeInfo(JSON.parse(stdout));\n}\n\nasync function publishSeedPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version: string,\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  debug('publishing seed package %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n\n  if (ctx.adapter.type === 'yarn-modern') {\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s@%s', pkgName, version);\n}\n\nasync function testInstallMultipleDeps(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Shared project folder used as cwd for info commands across subtests.\n  // Yarn modern requires a project context (package.json + .yarnrc.yml) for `yarn npm info`.\n  let projectCwd = '';\n\n  // --- Phase 1: Publish a tree of seed packages ---\n  await ctx.subTest('publish seed packages', async () => {\n    // Leaf packages (no dependencies of their own)\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      const name = `@verdaccio/seed-${id}-${i}`;\n      await publishSeedPackage(ctx, name, '1.0.0');\n    }\n\n    // A \"shared\" package that multiple consumers will pull in\n    const sharedPkg = `@verdaccio/seed-shared-${id}`;\n    await publishSeedPackage(ctx, sharedPkg, '1.0.0');\n\n    // An intermediate package that depends on some leaf packages + shared\n    const intermediatePkg = `@verdaccio/seed-mid-${id}`;\n    await publishSeedPackage(ctx, intermediatePkg, '1.0.0', {\n      [`@verdaccio/seed-${id}-1`]: '1.0.0',\n      [`@verdaccio/seed-${id}-2`]: '1.0.0',\n      [sharedPkg]: '1.0.0',\n    });\n\n    debug('all seed packages published');\n  });\n\n  // --- Phase 2: Create a consumer project that depends on everything ---\n  await ctx.subTest('install all dependencies in consumer project', async () => {\n    const consumerDeps: Record<string, string> = {};\n\n    // Direct deps on all leaf packages\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      consumerDeps[`@verdaccio/seed-${id}-${i}`] = '1.0.0';\n    }\n\n    // Also depend on the intermediate (pulls in transitive deps)\n    consumerDeps[`@verdaccio/seed-mid-${id}`] = '1.0.0';\n\n    // And the shared package directly (already a transitive dep of mid)\n    consumerDeps[`@verdaccio/seed-shared-${id}`] = '1.0.0';\n\n    const consumerName = `@verdaccio/consumer-${id}`;\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      consumerName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      consumerDeps\n    );\n\n    projectCwd = tempFolder;\n\n    debug('installing %d dependencies in consumer project', Object.keys(consumerDeps).length);\n\n    const args = ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n    debug('install completed for consumer project');\n  });\n\n  // --- Phase 3: Verify all packages resolved correctly ---\n  await ctx.subTest('verify installed packages', async () => {\n    // Check that each seed package is retrievable via `info`\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      const name = `@verdaccio/seed-${id}-${i}`;\n      const resp = await ctx.adapter.exec(\n        { cwd: projectCwd },\n        'info',\n        name,\n        '--json',\n        ...ctx.adapter.registryArg(ctx.registryUrl)\n      );\n      const info = parseInfoOutput(resp.stdout, ctx.adapter.type);\n      assert.strictEqual(info.name, name, `Expected package name \"${name}\"`);\n      assert.strictEqual(info.version, '1.0.0', `Expected version 1.0.0 for ${name}`);\n    }\n\n    // Verify intermediate package has correct dependencies in registry metadata\n    const midName = `@verdaccio/seed-mid-${id}`;\n    const resp = await ctx.adapter.exec(\n      { cwd: projectCwd },\n      'info',\n      midName,\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n    const midInfo = parseInfoOutput(resp.stdout, ctx.adapter.type);\n    assert.strictEqual(midInfo.name, midName);\n\n    const deps = midInfo.dependencies || {};\n    assert.strictEqual(\n      deps[`@verdaccio/seed-${id}-1`],\n      '1.0.0',\n      'Intermediate should depend on seed-1'\n    );\n    assert.strictEqual(\n      deps[`@verdaccio/seed-${id}-2`],\n      '1.0.0',\n      'Intermediate should depend on seed-2'\n    );\n    assert.strictEqual(\n      deps[`@verdaccio/seed-shared-${id}`],\n      '1.0.0',\n      'Intermediate should depend on shared'\n    );\n\n    debug('all packages verified');\n  });\n\n  // --- Phase 4: Publish updated versions and re-install ---\n  await ctx.subTest('update and re-install', async () => {\n    // Publish v2 of a leaf and the shared package\n    const leafName = `@verdaccio/seed-${id}-1`;\n    await publishSeedPackage(ctx, leafName, '2.0.0');\n\n    const sharedName = `@verdaccio/seed-shared-${id}`;\n    await publishSeedPackage(ctx, sharedName, '2.0.0');\n\n    // Create a new consumer that uses ^ ranges — should pick up 2.0.0\n    const consumerDeps: Record<string, string> = {\n      [leafName]: '^1.0.0',\n      [sharedName]: '^1.0.0',\n    };\n\n    const consumerName = `@verdaccio/consumer-update-${id}`;\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      consumerName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      consumerDeps\n    );\n\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    // Verify that the registry now serves both versions\n    const leafResp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'info',\n      leafName,\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n    const leafInfo = parseInfoOutput(leafResp.stdout, ctx.adapter.type);\n\n    // dist-tags.latest should be 2.0.0\n    assert.strictEqual(\n      leafInfo['dist-tags']?.latest ?? leafInfo.version,\n      '2.0.0',\n      `Expected latest version of ${leafName} to be 2.0.0`\n    );\n\n    debug('update and re-install verified');\n  });\n}\n\nexport const installMultipleDepsScenario: TestDefinition = {\n  name: 'scenario:install-multiple-deps',\n  requires: ['publish', 'install', 'info'],\n  run: testInstallMultipleDeps,\n};\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,mDAAmD;;;;;;;;;;;;;;AAgB5E,IAAM,sBAAsB;;;;;AAM5B,SAAS,gBAAgB,QAAgB,aAA0B;CACjE,IAAI,gBAAgB,gBAAgB;EAElC,MAAM,QAAQ,OAAO,MAAM,KAAK,CAAC,OAAO,QAAQ;EAChD,KAAK,MAAM,QAAQ,OACjB,IAAI;GACF,MAAM,MAAM,KAAK,MAAM,KAAK;GAC5B,IAAI,IAAI,SAAS,aAAa,IAAI,MAChC,OAAO,IAAI;UAEP;EAKV,OAAO,cAAc,KAAK,MAAM,OAAO,CAAC;;CAE1C,OAAO,cAAc,KAAK,MAAM,OAAO,CAAC;;AAG1C,eAAe,mBACb,KACA,SACA,SACA,eAAuC,EAAE,EAC1B;CACf,MAAM,iCAAiC,SAAS,QAAQ;CACxD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;CAED,IAAI,IAAI,QAAQ,SAAS,eACvB,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,UAAU;CAGxD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,MAAM,mBAAmB,SAAS,QAAQ;;AAG5C,eAAe,wBAAwB,KAAiC;CACtE,MAAM,KAAK,IAAI;CAIf,IAAI,aAAa;CAGjB,MAAM,IAAI,QAAQ,yBAAyB,YAAY;EAErD,KAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KAExC,MAAM,mBAAmB,KAAK,mBADE,GAAG,GAAG,KACF,QAAQ;EAI9C,MAAM,YAAY,0BAA0B;EAC5C,MAAM,mBAAmB,KAAK,WAAW,QAAQ;EAIjD,MAAM,mBAAmB,KAAK,uBADiB,MACA,SAAS;IACrD,mBAAmB,GAAG,MAAM;IAC5B,mBAAmB,GAAG,MAAM;IAC5B,YAAY;GACd,CAAC;EAEF,MAAM,8BAA8B;GACpC;CAGF,MAAM,IAAI,QAAQ,gDAAgD,YAAY;EAC5E,MAAM,eAAuC,EAAE;EAG/C,KAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KACxC,aAAa,mBAAmB,GAAG,GAAG,OAAO;EAI/C,aAAa,uBAAuB,QAAQ;EAG5C,aAAa,0BAA0B,QAAQ;EAE/C,MAAM,eAAe,uBAAuB;EAC5C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;EAED,aAAa;EAEb,MAAM,kDAAkD,OAAO,KAAK,aAAa,CAAC,OAAO;EAEzF,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;EACrE,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,GAAG,KAAK;EAEpD,MAAM,yCAAyC;GAC/C;CAGF,MAAM,IAAI,QAAQ,6BAA6B,YAAY;EAEzD,KAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KAAK;GAC7C,MAAM,OAAO,mBAAmB,GAAG,GAAG;GAQtC,MAAM,OAAO,iBAAgB,MAPV,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,MACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACiC,QAAQ,IAAI,QAAQ,KAAK;GAC3D,OAAO,YAAY,KAAK,MAAM,MAAM,0BAA0B,KAAK,GAAG;GACtE,OAAO,YAAY,KAAK,SAAS,SAAS,8BAA8B,OAAO;;EAIjF,MAAM,UAAU,uBAAuB;EAQvC,MAAM,UAAU,iBAAgB,MAPb,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACoC,QAAQ,IAAI,QAAQ,KAAK;EAC9D,OAAO,YAAY,QAAQ,MAAM,QAAQ;EAEzC,MAAM,OAAO,QAAQ,gBAAgB,EAAE;EACvC,OAAO,YACL,KAAK,mBAAmB,GAAG,MAC3B,SACA,uCACD;EACD,OAAO,YACL,KAAK,mBAAmB,GAAG,MAC3B,SACA,uCACD;EACD,OAAO,YACL,KAAK,0BAA0B,OAC/B,SACA,uCACD;EAED,MAAM,wBAAwB;GAC9B;CAGF,MAAM,IAAI,QAAQ,yBAAyB,YAAY;EAErD,MAAM,WAAW,mBAAmB,GAAG;EACvC,MAAM,mBAAmB,KAAK,UAAU,QAAQ;EAEhD,MAAM,aAAa,0BAA0B;EAC7C,MAAM,mBAAmB,KAAK,YAAY,QAAQ;EAGlD,MAAM,eAAuC;IAC1C,WAAW;IACX,aAAa;GACf;EAED,MAAM,eAAe,8BAA8B;EACnD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;EAED,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAUD,MAAM,WAAW,iBAAgB,MAPV,IAAI,QAAQ,KACjC,EAAE,KAAK,YAAY,EACnB,QACA,UACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACyC,QAAQ,IAAI,QAAQ,KAAK;EAGnE,OAAO,YACL,SAAS,cAAc,UAAU,SAAS,SAC1C,SACA,8BAA8B,SAAS,cACxC;EAED,MAAM,iCAAiC;GACvC;;AAGJ,IAAa,8BAA8C;CACzD,MAAM;CACN,UAAU;EAAC;EAAW;EAAW;EAAO;CACxC,KAAK;CACN"}
+{"version":3,"file":"install-multiple-deps.js","names":[],"sources":["../../../src/scenarios/install-multiple-deps.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { normalizeInfo } from '../utils/info';\n\nconst debug = buildDebug('verdaccio:e2e-cli:scenario:install-multiple-deps');\n\n/**\n * Scenario: install-multiple-deps\n *\n * Publishes several packages to the registry (some scoped, some unscoped,\n * some with inter-dependencies), then creates a consumer project that\n * depends on all of them and runs `install`.\n *\n * This exercises the registry under realistic load:\n *   - many parallel tarball downloads\n *   - metadata resolution for multiple packages\n *   - scoped-package authentication\n *   - transitive dependency resolution\n */\n\nconst SEED_PACKAGES_COUNT = 5;\n\n/**\n * Parse `info --json` output across all adapters.\n * Yarn classic wraps the result in NDJSON lines with `{ type: \"inspect\", data: { ... } }`.\n */\nfunction parseInfoOutput(stdout: string, adapterType: string): any {\n  if (adapterType === 'yarn-classic') {\n    // Yarn classic outputs NDJSON — find the \"inspect\" line that holds package data\n    const lines = stdout.split('\\n').filter(Boolean);\n    for (const line of lines) {\n      try {\n        const obj = JSON.parse(line);\n        if (obj.type === 'inspect' && obj.data) {\n          return obj.data;\n        }\n      } catch {\n        // skip non-JSON lines\n      }\n    }\n    // Fallback: try parsing the whole output\n    return normalizeInfo(JSON.parse(stdout));\n  }\n  return normalizeInfo(JSON.parse(stdout));\n}\n\nasync function publishSeedPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version: string,\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  debug('publishing seed package %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n\n  if (ctx.adapter.type === 'yarn-modern') {\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s@%s', pkgName, version);\n}\n\nasync function testInstallMultipleDeps(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Shared project folder used as cwd for info commands across subtests.\n  // Yarn modern requires a project context (package.json + .yarnrc.yml) for `yarn npm info`.\n  let projectCwd = '';\n\n  // --- Phase 1: Publish a tree of seed packages ---\n  await ctx.subTest('publish seed packages', async () => {\n    // Leaf packages (no dependencies of their own)\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      const name = `@verdaccio/seed-${id}-${i}`;\n      await publishSeedPackage(ctx, name, '1.0.0');\n    }\n\n    // A \"shared\" package that multiple consumers will pull in\n    const sharedPkg = `@verdaccio/seed-shared-${id}`;\n    await publishSeedPackage(ctx, sharedPkg, '1.0.0');\n\n    // An intermediate package that depends on some leaf packages + shared\n    const intermediatePkg = `@verdaccio/seed-mid-${id}`;\n    await publishSeedPackage(ctx, intermediatePkg, '1.0.0', {\n      [`@verdaccio/seed-${id}-1`]: '1.0.0',\n      [`@verdaccio/seed-${id}-2`]: '1.0.0',\n      [sharedPkg]: '1.0.0',\n    });\n\n    debug('all seed packages published');\n  });\n\n  // --- Phase 2: Create a consumer project that depends on everything ---\n  await ctx.subTest('install all dependencies in consumer project', async () => {\n    const consumerDeps: Record<string, string> = {};\n\n    // Direct deps on all leaf packages\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      consumerDeps[`@verdaccio/seed-${id}-${i}`] = '1.0.0';\n    }\n\n    // Also depend on the intermediate (pulls in transitive deps)\n    consumerDeps[`@verdaccio/seed-mid-${id}`] = '1.0.0';\n\n    // And the shared package directly (already a transitive dep of mid)\n    consumerDeps[`@verdaccio/seed-shared-${id}`] = '1.0.0';\n\n    const consumerName = `@verdaccio/consumer-${id}`;\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      consumerName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      consumerDeps\n    );\n\n    projectCwd = tempFolder;\n\n    debug('installing %d dependencies in consumer project', Object.keys(consumerDeps).length);\n\n    const args = ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n    debug('install completed for consumer project');\n  });\n\n  // --- Phase 3: Verify all packages resolved correctly ---\n  await ctx.subTest('verify installed packages', async () => {\n    // Check that each seed package is retrievable via `info`\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      const name = `@verdaccio/seed-${id}-${i}`;\n      const resp = await ctx.adapter.exec(\n        { cwd: projectCwd },\n        'info',\n        name,\n        '--json',\n        ...ctx.adapter.registryArg(ctx.registryUrl)\n      );\n      const info = parseInfoOutput(resp.stdout, ctx.adapter.type);\n      assert.strictEqual(info.name, name, `Expected package name \"${name}\"`);\n      assert.strictEqual(info.version, '1.0.0', `Expected version 1.0.0 for ${name}`);\n    }\n\n    // Verify intermediate package has correct dependencies in registry metadata\n    const midName = `@verdaccio/seed-mid-${id}`;\n    const resp = await ctx.adapter.exec(\n      { cwd: projectCwd },\n      'info',\n      midName,\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n    const midInfo = parseInfoOutput(resp.stdout, ctx.adapter.type);\n    assert.strictEqual(midInfo.name, midName);\n\n    const deps = midInfo.dependencies || {};\n    assert.strictEqual(\n      deps[`@verdaccio/seed-${id}-1`],\n      '1.0.0',\n      'Intermediate should depend on seed-1'\n    );\n    assert.strictEqual(\n      deps[`@verdaccio/seed-${id}-2`],\n      '1.0.0',\n      'Intermediate should depend on seed-2'\n    );\n    assert.strictEqual(\n      deps[`@verdaccio/seed-shared-${id}`],\n      '1.0.0',\n      'Intermediate should depend on shared'\n    );\n\n    debug('all packages verified');\n  });\n\n  // --- Phase 4: Publish updated versions and re-install ---\n  await ctx.subTest('update and re-install', async () => {\n    // Publish v2 of a leaf and the shared package\n    const leafName = `@verdaccio/seed-${id}-1`;\n    await publishSeedPackage(ctx, leafName, '2.0.0');\n\n    const sharedName = `@verdaccio/seed-shared-${id}`;\n    await publishSeedPackage(ctx, sharedName, '2.0.0');\n\n    // Create a new consumer that uses ^ ranges — should pick up 2.0.0\n    const consumerDeps: Record<string, string> = {\n      [leafName]: '^1.0.0',\n      [sharedName]: '^1.0.0',\n    };\n\n    const consumerName = `@verdaccio/consumer-update-${id}`;\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      consumerName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      consumerDeps\n    );\n\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    // Verify that the registry now serves both versions\n    const leafResp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'info',\n      leafName,\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n    const leafInfo = parseInfoOutput(leafResp.stdout, ctx.adapter.type);\n\n    // dist-tags.latest should be 2.0.0\n    assert.strictEqual(\n      leafInfo['dist-tags']?.latest ?? leafInfo.version,\n      '2.0.0',\n      `Expected latest version of ${leafName} to be 2.0.0`\n    );\n\n    debug('update and re-install verified');\n  });\n}\n\nexport const installMultipleDepsScenario: TestDefinition = {\n  name: 'scenario:install-multiple-deps',\n  requires: ['publish', 'install', 'info'],\n  run: testInstallMultipleDeps,\n};\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,kDAAkD;;;;;;;;;;;;;;AAgB3E,IAAM,sBAAsB;;;;;AAM5B,SAAS,gBAAgB,QAAgB,aAA0B;CACjE,IAAI,gBAAgB,gBAAgB;EAElC,MAAM,QAAQ,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,OAAO;EAC/C,KAAK,MAAM,QAAQ,OACjB,IAAI;GACF,MAAM,MAAM,KAAK,MAAM,IAAI;GAC3B,IAAI,IAAI,SAAS,aAAa,IAAI,MAChC,OAAO,IAAI;EAEf,QAAQ,CAER;EAGF,OAAO,cAAc,KAAK,MAAM,MAAM,CAAC;CACzC;CACA,OAAO,cAAc,KAAK,MAAM,MAAM,CAAC;AACzC;AAEA,eAAe,mBACb,KACA,SACA,SACA,eAAuC,CAAC,GACzB;CACf,MAAM,iCAAiC,SAAS,OAAO;CACvD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;CAEA,IAAI,IAAI,QAAQ,SAAS,eACvB,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;CAGvD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,mBAAmB,SAAS,OAAO;AAC3C;AAEA,eAAe,wBAAwB,KAAiC;CACtE,MAAM,KAAK,IAAI;CAIf,IAAI,aAAa;CAGjB,MAAM,IAAI,QAAQ,yBAAyB,YAAY;EAErD,KAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KAExC,MAAM,mBAAmB,KAAK,mBADE,GAAG,GAAG,KACF,OAAO;EAI7C,MAAM,YAAY,0BAA0B;EAC5C,MAAM,mBAAmB,KAAK,WAAW,OAAO;EAIhD,MAAM,mBAAmB,KAAK,uBADiB,MACA,SAAS;IACrD,mBAAmB,GAAG,MAAM;IAC5B,mBAAmB,GAAG,MAAM;IAC5B,YAAY;EACf,CAAC;EAED,MAAM,6BAA6B;CACrC,CAAC;CAGD,MAAM,IAAI,QAAQ,gDAAgD,YAAY;EAC5E,MAAM,eAAuC,CAAC;EAG9C,KAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KACxC,aAAa,mBAAmB,GAAG,GAAG,OAAO;EAI/C,aAAa,uBAAuB,QAAQ;EAG5C,aAAa,0BAA0B,QAAQ;EAE/C,MAAM,eAAe,uBAAuB;EAC5C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;EAEA,aAAa;EAEb,MAAM,kDAAkD,OAAO,KAAK,YAAY,CAAC,CAAC,MAAM;EAExF,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;EACpE,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,GAAG,IAAI;EAEnD,MAAM,wCAAwC;CAChD,CAAC;CAGD,MAAM,IAAI,QAAQ,6BAA6B,YAAY;EAEzD,KAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KAAK;GAC7C,MAAM,OAAO,mBAAmB,GAAG,GAAG;GAQtC,MAAM,OAAO,iBAAgB,MAPV,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,QACA,MACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C,EAAA,CACkC,QAAQ,IAAI,QAAQ,IAAI;GAC1D,OAAO,YAAY,KAAK,MAAM,MAAM,0BAA0B,KAAK,EAAE;GACrE,OAAO,YAAY,KAAK,SAAS,SAAS,8BAA8B,MAAM;EAChF;EAGA,MAAM,UAAU,uBAAuB;EAQvC,MAAM,UAAU,iBAAgB,MAPb,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C,EAAA,CACqC,QAAQ,IAAI,QAAQ,IAAI;EAC7D,OAAO,YAAY,QAAQ,MAAM,OAAO;EAExC,MAAM,OAAO,QAAQ,gBAAgB,CAAC;EACtC,OAAO,YACL,KAAK,mBAAmB,GAAG,MAC3B,SACA,sCACF;EACA,OAAO,YACL,KAAK,mBAAmB,GAAG,MAC3B,SACA,sCACF;EACA,OAAO,YACL,KAAK,0BAA0B,OAC/B,SACA,sCACF;EAEA,MAAM,uBAAuB;CAC/B,CAAC;CAGD,MAAM,IAAI,QAAQ,yBAAyB,YAAY;EAErD,MAAM,WAAW,mBAAmB,GAAG;EACvC,MAAM,mBAAmB,KAAK,UAAU,OAAO;EAE/C,MAAM,aAAa,0BAA0B;EAC7C,MAAM,mBAAmB,KAAK,YAAY,OAAO;EAGjD,MAAM,eAAuC;IAC1C,WAAW;IACX,aAAa;EAChB;EAEA,MAAM,eAAe,8BAA8B;EACnD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;EAEA,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EAUA,MAAM,WAAW,iBAAgB,MAPV,IAAI,QAAQ,KACjC,EAAE,KAAK,WAAW,GAClB,QACA,UACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C,EAAA,CAC0C,QAAQ,IAAI,QAAQ,IAAI;EAGlE,OAAO,YACL,SAAS,YAAY,EAAE,UAAU,SAAS,SAC1C,SACA,8BAA8B,SAAS,aACzC;EAEA,MAAM,gCAAgC;CACxC,CAAC;AACH;AAEA,IAAa,8BAA8C;CACzD,MAAM;CACN,UAAU;EAAC;EAAW;EAAW;CAAM;CACvC,KAAK;AACP"}

package/build/esm/scenarios/minimum-release-age.js

@@ -104,6 +104,6 @@ var minimumReleaseAgeScenario = {
 	run: testMinimumReleaseAge
 };
 //#endregion
-export { minimumReleaseAgeScenario };
+export { isPnpm11Plus, minimumReleaseAgeScenario };
 
 //# sourceMappingURL=minimum-release-age.js.map

package/build/esm/scenarios/minimum-release-age.js.map

@@ -1 +1 @@
-{"version":3,"file":"minimum-release-age.js","names":[],"sources":["../../../src/scenarios/minimum-release-age.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { PackageManagerAdapter, TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:scenario:minimum-release-age');\n\n/**\n * Scenario: minimum-release-age (pnpm 11.1+ only)\n *\n * Exercises pnpm's `minimumReleaseAge` cooldown together with\n * `minimumReleaseAgeExclude`. With a 7-day (10080 minute) cooldown, freshly\n * published versions are normally not installable until they age past the\n * threshold — but packages matching the exclude globs bypass the check.\n *\n *   minimumReleaseAge: 10080\n *   minimumReleaseAgeExclude:\n *     - '@verdaccio/*'\n *     - 'verdaccio-*'\n *\n * The scenario publishes brand-new (age ~0) packages and asserts:\n *   - an excluded scoped package   (@verdaccio/*) installs despite the cooldown\n *   - an excluded unscoped package (verdaccio-*)  installs despite the cooldown\n *   - a non-excluded package is blocked by the cooldown (proving it is active)\n *\n * pnpm reads these settings from `pnpm-workspace.yaml`, mirroring the\n * configuration used by the repo root. The cooldown is only enforced from\n * pnpm 11.1.0 onward (11.0.x silently ignores it), so the scenario is gated to\n * that version range — see {@link isPnpm11Plus}.\n */\n\nconst MINIMUM_RELEASE_AGE = 10080; // 7 days, in minutes\nconst MINIMUM_RELEASE_AGE_EXCLUDE = ['@verdaccio/*', 'verdaccio-*'];\n\nconst PNPM_WORKSPACE_YAML = [\n  `minimumReleaseAge: ${MINIMUM_RELEASE_AGE}`,\n  'minimumReleaseAgeExclude:',\n  ...MINIMUM_RELEASE_AGE_EXCLUDE.map((glob) => `  - '${glob}'`),\n  '',\n].join('\\n');\n\n/**\n * True only for pnpm versions that actually enforce minimumReleaseAge.\n *\n * The cooldown is honored in pnpm 11.1.0+, but it is silently ignored in\n * 11.0.0 / 11.0.1 (and the 11.0.0 release candidates) — those versions install\n * brand-new packages regardless of the configured cooldown. We scope this\n * scenario to pnpm 11.1.0 and newer so it doesn't false-fail on that regression.\n */\nexport function isPnpm11Plus(adapter: PackageManagerAdapter): boolean {\n  if (adapter.type !== 'pnpm') {\n    return false;\n  }\n  const match = adapter.name.match(/pnpm@(\\d+)\\.(\\d+)/);\n  if (!match) {\n    return false;\n  }\n  const major = parseInt(match[1], 10);\n  const minor = parseInt(match[2], 10);\n  return major > 11 || (major === 11 && minor >= 1);\n}\n\nasync function publishPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version: string\n): Promise<void> {\n  debug('publishing %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s@%s', pkgName, version);\n}\n\n/**\n * Build a consumer project with the minimumReleaseAge cooldown configured in\n * pnpm-workspace.yaml, depending on the given packages.\n */\nasync function prepareCooldownConsumer(\n  ctx: TestContext,\n  consumerName: string,\n  dependencies: Record<string, string>\n): Promise<string> {\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    consumerName,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n  await writeFile(join(tempFolder, 'pnpm-workspace.yaml'), PNPM_WORKSPACE_YAML);\n  debug('prepared cooldown consumer %s at %s', consumerName, tempFolder);\n  return tempFolder;\n}\n\nasync function testMinimumReleaseAge(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  const excludedScoped = `@verdaccio/release-age-${id}`;\n  const excludedUnscoped = `verdaccio-release-age-${id}`;\n  const blocked = `e2e-release-age-blocked-${id}`;\n\n  // --- Phase 1: Publish brand-new (age ~0) packages ---\n  await ctx.subTest('publish fresh packages', async () => {\n    await publishPackage(ctx, excludedScoped, '1.0.0');\n    await publishPackage(ctx, excludedUnscoped, '1.0.0');\n    await publishPackage(ctx, blocked, '1.0.0');\n  });\n\n  // --- Phase 2: Excluded packages install despite the cooldown ---\n  await ctx.subTest('excluded packages bypass the cooldown', async () => {\n    const tempFolder = await prepareCooldownConsumer(ctx, `@verdaccio/consumer-excluded-${id}`, {\n      [excludedScoped]: '1.0.0',\n      [excludedUnscoped]: '1.0.0',\n    });\n\n    // Should succeed: both deps match the exclude globs.\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    debug('excluded packages installed successfully under cooldown');\n  });\n\n  // --- Phase 3: Non-excluded fresh package is blocked by the cooldown ---\n  await ctx.subTest('non-excluded fresh package is blocked', async () => {\n    const tempFolder = await prepareCooldownConsumer(ctx, `e2e-consumer-blocked-${id}`, {\n      [blocked]: '1.0.0',\n    });\n\n    let errorMessage = '';\n    try {\n      await ctx.adapter.exec(\n        { cwd: tempFolder },\n        'install',\n        '--frozen-lockfile=false',\n        ...ctx.adapter.registryArg(ctx.registryUrl)\n      );\n    } catch (err) {\n      errorMessage = err instanceof Error ? err.message : String(err);\n      debug('install correctly rejected by cooldown: %s', errorMessage);\n    }\n\n    assert.ok(\n      errorMessage,\n      `Expected install of fresh non-excluded package \"${blocked}\" to be blocked by ` +\n        `minimumReleaseAge (${MINIMUM_RELEASE_AGE} min), but it succeeded`\n    );\n    // pnpm reports ERR_PNPM_NO_MATURE_MATCHING_VERSION / \"minimumReleaseAge\" when a\n    // version is too new. Assert the failure is the cooldown, not an unrelated error.\n    assert.ok(\n      /minimumReleaseAge|NO_MATURE_MATCHING_VERSION/i.test(errorMessage),\n      `Install of \"${blocked}\" failed for an unexpected reason (expected a minimumReleaseAge ` +\n        `cooldown error):\\n${errorMessage}`\n    );\n  });\n}\n\nexport const minimumReleaseAgeScenario: TestDefinition = {\n  name: 'scenario:minimum-release-age',\n  requires: ['publish', 'install'],\n  appliesTo: isPnpm11Plus,\n  run: testMinimumReleaseAge,\n};\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,iDAAiD;;;;;;;;;;;;;;;;;;;;;;;;AA0B1E,IAAM,sBAAsB;AAG5B,IAAM,sBAAsB;CAC1B,sBAAsB;CACtB;CACA,GAAG,CALgC,gBAAgB,cAKhD,CAA4B,KAAK,SAAS,QAAQ,KAAK,GAAG;CAC7D;CACD,CAAC,KAAK,KAAK;;;;;;;;;AAUZ,SAAgB,aAAa,SAAyC;CACpE,IAAI,QAAQ,SAAS,QACnB,OAAO;CAET,MAAM,QAAQ,QAAQ,KAAK,MAAM,oBAAoB;CACrD,IAAI,CAAC,OACH,OAAO;CAET,MAAM,QAAQ,SAAS,MAAM,IAAI,GAAG;CACpC,MAAM,QAAQ,SAAS,MAAM,IAAI,GAAG;CACpC,OAAO,QAAQ,MAAO,UAAU,MAAM,SAAS;;AAGjD,eAAe,eACb,KACA,SACA,SACe;CACf,MAAM,oBAAoB,SAAS,QAAQ;CAC3C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,MAAM,mBAAmB,SAAS,QAAQ;;;;;;AAO5C,eAAe,wBACb,KACA,cACA,cACiB;CACjB,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;CACD,MAAM,UAAU,KAAK,YAAY,sBAAsB,EAAE,oBAAoB;CAC7E,MAAM,uCAAuC,cAAc,WAAW;CACtE,OAAO;;AAGT,eAAe,sBAAsB,KAAiC;CACpE,MAAM,KAAK,IAAI;CAEf,MAAM,iBAAiB,0BAA0B;CACjD,MAAM,mBAAmB,yBAAyB;CAClD,MAAM,UAAU,2BAA2B;CAG3C,MAAM,IAAI,QAAQ,0BAA0B,YAAY;EACtD,MAAM,eAAe,KAAK,gBAAgB,QAAQ;EAClD,MAAM,eAAe,KAAK,kBAAkB,QAAQ;EACpD,MAAM,eAAe,KAAK,SAAS,QAAQ;GAC3C;CAGF,MAAM,IAAI,QAAQ,yCAAyC,YAAY;EACrE,MAAM,aAAa,MAAM,wBAAwB,KAAK,gCAAgC,MAAM;IACzF,iBAAiB;IACjB,mBAAmB;GACrB,CAAC;EAGF,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAED,MAAM,0DAA0D;GAChE;CAGF,MAAM,IAAI,QAAQ,yCAAyC,YAAY;EACrE,MAAM,aAAa,MAAM,wBAAwB,KAAK,wBAAwB,MAAM,GACjF,UAAU,SACZ,CAAC;EAEF,IAAI,eAAe;EACnB,IAAI;GACF,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,2BACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;WACM,KAAK;GACZ,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAC/D,MAAM,8CAA8C,aAAa;;EAGnE,OAAO,GACL,cACA,mDAAmD,QAAQ,wCACnC,oBAAoB,yBAC7C;EAGD,OAAO,GACL,gDAAgD,KAAK,aAAa,EAClE,eAAe,QAAQ,oFACA,eACxB;GACD;;AAGJ,IAAa,4BAA4C;CACvD,MAAM;CACN,UAAU,CAAC,WAAW,UAAU;CAChC,WAAW;CACX,KAAK;CACN"}
+{"version":3,"file":"minimum-release-age.js","names":[],"sources":["../../../src/scenarios/minimum-release-age.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { PackageManagerAdapter, TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:scenario:minimum-release-age');\n\n/**\n * Scenario: minimum-release-age (pnpm 11.1+ only)\n *\n * Exercises pnpm's `minimumReleaseAge` cooldown together with\n * `minimumReleaseAgeExclude`. With a 7-day (10080 minute) cooldown, freshly\n * published versions are normally not installable until they age past the\n * threshold — but packages matching the exclude globs bypass the check.\n *\n *   minimumReleaseAge: 10080\n *   minimumReleaseAgeExclude:\n *     - '@verdaccio/*'\n *     - 'verdaccio-*'\n *\n * The scenario publishes brand-new (age ~0) packages and asserts:\n *   - an excluded scoped package   (@verdaccio/*) installs despite the cooldown\n *   - an excluded unscoped package (verdaccio-*)  installs despite the cooldown\n *   - a non-excluded package is blocked by the cooldown (proving it is active)\n *\n * pnpm reads these settings from `pnpm-workspace.yaml`, mirroring the\n * configuration used by the repo root. The cooldown is only enforced from\n * pnpm 11.1.0 onward (11.0.x silently ignores it), so the scenario is gated to\n * that version range — see {@link isPnpm11Plus}.\n */\n\nconst MINIMUM_RELEASE_AGE = 10080; // 7 days, in minutes\nconst MINIMUM_RELEASE_AGE_EXCLUDE = ['@verdaccio/*', 'verdaccio-*'];\n\nconst PNPM_WORKSPACE_YAML = [\n  `minimumReleaseAge: ${MINIMUM_RELEASE_AGE}`,\n  'minimumReleaseAgeExclude:',\n  ...MINIMUM_RELEASE_AGE_EXCLUDE.map((glob) => `  - '${glob}'`),\n  '',\n].join('\\n');\n\n/**\n * True only for pnpm versions that actually enforce minimumReleaseAge.\n *\n * The cooldown is honored in pnpm 11.1.0+, but it is silently ignored in\n * 11.0.0 / 11.0.1 (and the 11.0.0 release candidates) — those versions install\n * brand-new packages regardless of the configured cooldown. We scope this\n * scenario to pnpm 11.1.0 and newer so it doesn't false-fail on that regression.\n */\nexport function isPnpm11Plus(adapter: PackageManagerAdapter): boolean {\n  if (adapter.type !== 'pnpm') {\n    return false;\n  }\n  const match = adapter.name.match(/pnpm@(\\d+)\\.(\\d+)/);\n  if (!match) {\n    return false;\n  }\n  const major = parseInt(match[1], 10);\n  const minor = parseInt(match[2], 10);\n  return major > 11 || (major === 11 && minor >= 1);\n}\n\nasync function publishPackage(ctx: TestContext, pkgName: string, version: string): Promise<void> {\n  debug('publishing %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s@%s', pkgName, version);\n}\n\n/**\n * Build a consumer project with the minimumReleaseAge cooldown configured in\n * pnpm-workspace.yaml, depending on the given packages.\n */\nasync function prepareCooldownConsumer(\n  ctx: TestContext,\n  consumerName: string,\n  dependencies: Record<string, string>\n): Promise<string> {\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    consumerName,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n  await writeFile(join(tempFolder, 'pnpm-workspace.yaml'), PNPM_WORKSPACE_YAML);\n  debug('prepared cooldown consumer %s at %s', consumerName, tempFolder);\n  return tempFolder;\n}\n\nasync function testMinimumReleaseAge(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  const excludedScoped = `@verdaccio/release-age-${id}`;\n  const excludedUnscoped = `verdaccio-release-age-${id}`;\n  const blocked = `e2e-release-age-blocked-${id}`;\n\n  // --- Phase 1: Publish brand-new (age ~0) packages ---\n  await ctx.subTest('publish fresh packages', async () => {\n    await publishPackage(ctx, excludedScoped, '1.0.0');\n    await publishPackage(ctx, excludedUnscoped, '1.0.0');\n    await publishPackage(ctx, blocked, '1.0.0');\n  });\n\n  // --- Phase 2: Excluded packages install despite the cooldown ---\n  await ctx.subTest('excluded packages bypass the cooldown', async () => {\n    const tempFolder = await prepareCooldownConsumer(ctx, `@verdaccio/consumer-excluded-${id}`, {\n      [excludedScoped]: '1.0.0',\n      [excludedUnscoped]: '1.0.0',\n    });\n\n    // Should succeed: both deps match the exclude globs.\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    debug('excluded packages installed successfully under cooldown');\n  });\n\n  // --- Phase 3: Non-excluded fresh package is blocked by the cooldown ---\n  await ctx.subTest('non-excluded fresh package is blocked', async () => {\n    const tempFolder = await prepareCooldownConsumer(ctx, `e2e-consumer-blocked-${id}`, {\n      [blocked]: '1.0.0',\n    });\n\n    let errorMessage = '';\n    try {\n      await ctx.adapter.exec(\n        { cwd: tempFolder },\n        'install',\n        '--frozen-lockfile=false',\n        ...ctx.adapter.registryArg(ctx.registryUrl)\n      );\n    } catch (err) {\n      errorMessage = err instanceof Error ? err.message : String(err);\n      debug('install correctly rejected by cooldown: %s', errorMessage);\n    }\n\n    assert.ok(\n      errorMessage,\n      `Expected install of fresh non-excluded package \"${blocked}\" to be blocked by ` +\n        `minimumReleaseAge (${MINIMUM_RELEASE_AGE} min), but it succeeded`\n    );\n    // pnpm reports ERR_PNPM_NO_MATURE_MATCHING_VERSION / \"minimumReleaseAge\" when a\n    // version is too new. Assert the failure is the cooldown, not an unrelated error.\n    assert.ok(\n      /minimumReleaseAge|NO_MATURE_MATCHING_VERSION/i.test(errorMessage),\n      `Install of \"${blocked}\" failed for an unexpected reason (expected a minimumReleaseAge ` +\n        `cooldown error):\\n${errorMessage}`\n    );\n  });\n}\n\nexport const minimumReleaseAgeScenario: TestDefinition = {\n  name: 'scenario:minimum-release-age',\n  requires: ['publish', 'install'],\n  appliesTo: isPnpm11Plus,\n  run: testMinimumReleaseAge,\n};\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;AA0BzE,IAAM,sBAAsB;AAG5B,IAAM,sBAAsB;CAC1B,sBAAsB;CACtB;CACA,GAAG,CALgC,gBAAgB,aAKhD,CAAA,CAA4B,KAAK,SAAS,QAAQ,KAAK,EAAE;CAC5D;AACF,CAAC,CAAC,KAAK,IAAI;;;;;;;;;AAUX,SAAgB,aAAa,SAAyC;CACpE,IAAI,QAAQ,SAAS,QACnB,OAAO;CAET,MAAM,QAAQ,QAAQ,KAAK,MAAM,mBAAmB;CACpD,IAAI,CAAC,OACH,OAAO;CAET,MAAM,QAAQ,SAAS,MAAM,IAAI,EAAE;CACnC,MAAM,QAAQ,SAAS,MAAM,IAAI,EAAE;CACnC,OAAO,QAAQ,MAAO,UAAU,MAAM,SAAS;AACjD;AAEA,eAAe,eAAe,KAAkB,SAAiB,SAAgC;CAC/F,MAAM,oBAAoB,SAAS,OAAO;CAC1C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,mBAAmB,SAAS,OAAO;AAC3C;;;;;AAMA,eAAe,wBACb,KACA,cACA,cACiB;CACjB,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;CACA,MAAM,UAAU,KAAK,YAAY,qBAAqB,GAAG,mBAAmB;CAC5E,MAAM,uCAAuC,cAAc,UAAU;CACrE,OAAO;AACT;AAEA,eAAe,sBAAsB,KAAiC;CACpE,MAAM,KAAK,IAAI;CAEf,MAAM,iBAAiB,0BAA0B;CACjD,MAAM,mBAAmB,yBAAyB;CAClD,MAAM,UAAU,2BAA2B;CAG3C,MAAM,IAAI,QAAQ,0BAA0B,YAAY;EACtD,MAAM,eAAe,KAAK,gBAAgB,OAAO;EACjD,MAAM,eAAe,KAAK,kBAAkB,OAAO;EACnD,MAAM,eAAe,KAAK,SAAS,OAAO;CAC5C,CAAC;CAGD,MAAM,IAAI,QAAQ,yCAAyC,YAAY;EACrE,MAAM,aAAa,MAAM,wBAAwB,KAAK,gCAAgC,MAAM;IACzF,iBAAiB;IACjB,mBAAmB;EACtB,CAAC;EAGD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EAEA,MAAM,yDAAyD;CACjE,CAAC;CAGD,MAAM,IAAI,QAAQ,yCAAyC,YAAY;EACrE,MAAM,aAAa,MAAM,wBAAwB,KAAK,wBAAwB,MAAM,GACjF,UAAU,QACb,CAAC;EAED,IAAI,eAAe;EACnB,IAAI;GACF,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,2BACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EACF,SAAS,KAAK;GACZ,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC9D,MAAM,8CAA8C,YAAY;EAClE;EAEA,OAAO,GACL,cACA,mDAAmD,QAAQ,wCACnC,oBAAoB,wBAC9C;EAGA,OAAO,GACL,gDAAgD,KAAK,YAAY,GACjE,eAAe,QAAQ,oFACA,cACzB;CACF,CAAC;AACH;AAEA,IAAa,4BAA4C;CACvD,MAAM;CACN,UAAU,CAAC,WAAW,SAAS;CAC/B,WAAW;CACX,KAAK;AACP"}

package/build/esm/tests/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","names":[],"sources":["../../../src/tests/audit.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:audit');\n\nasync function testAudit(ctx: TestContext): Promise<void> {\n  // Audit is only reliable with npm and bun — pnpm/yarn audit output varies too much\n  if (ctx.adapter.type !== 'npm' && ctx.adapter.type !== 'bun') {\n    debug('skipping audit test for %s (npm/bun only)', ctx.adapter.type);\n    return;\n  }\n\n  const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      { jquery: '3.6.1' }\n    );\n\n    // install is required to create package lock file\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    // npm audit exits with code 1 both when vulnerabilities are found AND when\n    // the endpoint is unavailable. We need to distinguish between the two.\n    // Probe the audit endpoint first to avoid false failures on registries\n    // that don't support it (e.g. verdaccio next-7+).\n    try {\n      const probe = await fetch(`${ctx.registryUrl}/-/npm/v1/security/audits/quick`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: '{}',\n      });\n      if (probe.status === 404) {\n        debug('audit endpoint not supported by this registry (404), skipping');\n        return;\n      }\n    } catch {\n      debug('audit endpoint probe failed, skipping');\n      return;\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'audit',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (ctx.adapter.type === 'bun') {\n      // bun audit output may differ — exit code 0 is sufficient for basic validation\n      assert.ok(resp.stdout.length > 0 || resp.stderr.length > 0, 'Expected audit output');\n    } else {\n      const parsedBody = JSON.parse(resp.stdout);\n      assert.ok(\n        parsedBody.auditReportVersion !== undefined,\n        'Expected \"auditReportVersion\" in audit response'\n      );\n      assert.ok(\n        parsedBody.vulnerabilities !== undefined,\n        'Expected \"vulnerabilities\" in audit response'\n      );\n    }\n  }\n}\n\nexport const auditTest: TestDefinition = {\n  name: 'audit',\n  requires: ['audit'],\n  run: testAudit,\n};\n"],"mappings":";;;AAKA,IAAM,QAAQ,WAAW,+BAA+B;AAExD,eAAe,UAAU,KAAiC;CAExD,IAAI,IAAI,QAAQ,SAAS,SAAS,IAAI,QAAQ,SAAS,OAAO;EAC5D,MAAM,6CAA6C,IAAI,QAAQ,KAAK;EACpE;;CAGF,MAAM,WAAW,CAAC,mBAAmB,IAAI,SAAS,oBAAoB,IAAI,QAAQ;CAElF,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,QAAQ,SAAS,CACpB;EAGD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAMD,IAAI;GAMF,KAAI,MALgB,MAAM,GAAG,IAAI,YAAY,kCAAkC;IAC7E,QAAQ;IACR,SAAS,EAAE,gBAAgB,oBAAoB;IAC/C,MAAM;IACP,CAAC,EACQ,WAAW,KAAK;IACxB,MAAM,gEAAgE;IACtE;;UAEI;GACN,MAAM,wCAAwC;GAC9C;;EAGF,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAED,IAAI,IAAI,QAAQ,SAAS,OAEvB,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG,wBAAwB;OAC/E;GACL,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;GAC1C,OAAO,GACL,WAAW,uBAAuB,KAAA,GAClC,oDACD;GACD,OAAO,GACL,WAAW,oBAAoB,KAAA,GAC/B,iDACD;;;;AAKP,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,QAAQ;CACnB,KAAK;CACN"}
+{"version":3,"file":"audit.js","names":[],"sources":["../../../src/tests/audit.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:audit');\n\nasync function testAudit(ctx: TestContext): Promise<void> {\n  // Audit is only reliable with npm and bun — pnpm/yarn audit output varies too much\n  if (ctx.adapter.type !== 'npm' && ctx.adapter.type !== 'bun') {\n    debug('skipping audit test for %s (npm/bun only)', ctx.adapter.type);\n    return;\n  }\n\n  const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      { jquery: '3.6.1' }\n    );\n\n    // install is required to create package lock file\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    // npm audit exits with code 1 both when vulnerabilities are found AND when\n    // the endpoint is unavailable. We need to distinguish between the two.\n    // Probe the audit endpoint first to avoid false failures on registries\n    // that don't support it (e.g. verdaccio next-7+).\n    try {\n      const probe = await fetch(`${ctx.registryUrl}/-/npm/v1/security/audits/quick`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: '{}',\n      });\n      if (probe.status === 404) {\n        debug('audit endpoint not supported by this registry (404), skipping');\n        return;\n      }\n    } catch {\n      debug('audit endpoint probe failed, skipping');\n      return;\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'audit',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (ctx.adapter.type === 'bun') {\n      // bun audit output may differ — exit code 0 is sufficient for basic validation\n      assert.ok(resp.stdout.length > 0 || resp.stderr.length > 0, 'Expected audit output');\n    } else {\n      const parsedBody = JSON.parse(resp.stdout);\n      assert.ok(\n        parsedBody.auditReportVersion !== undefined,\n        'Expected \"auditReportVersion\" in audit response'\n      );\n      assert.ok(\n        parsedBody.vulnerabilities !== undefined,\n        'Expected \"vulnerabilities\" in audit response'\n      );\n    }\n  }\n}\n\nexport const auditTest: TestDefinition = {\n  name: 'audit',\n  requires: ['audit'],\n  run: testAudit,\n};\n"],"mappings":";;;AAKA,IAAM,QAAQ,WAAW,8BAA8B;AAEvD,eAAe,UAAU,KAAiC;CAExD,IAAI,IAAI,QAAQ,SAAS,SAAS,IAAI,QAAQ,SAAS,OAAO;EAC5D,MAAM,6CAA6C,IAAI,QAAQ,IAAI;EACnE;CACF;CAEA,MAAM,WAAW,CAAC,mBAAmB,IAAI,SAAS,oBAAoB,IAAI,OAAO;CAEjF,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,QAAQ,QAAQ,CACpB;EAGA,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EAMA,IAAI;GAMF,KAAI,MALgB,MAAM,GAAG,IAAI,YAAY,kCAAkC;IAC7E,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;IAC9C,MAAM;GACR,CAAC,EAAA,CACS,WAAW,KAAK;IACxB,MAAM,+DAA+D;IACrE;GACF;EACF,QAAQ;GACN,MAAM,uCAAuC;GAC7C;EACF;EAEA,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EAEA,IAAI,IAAI,QAAQ,SAAS,OAEvB,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG,uBAAuB;OAC9E;GACL,MAAM,aAAa,KAAK,MAAM,KAAK,MAAM;GACzC,OAAO,GACL,WAAW,uBAAuB,KAAA,GAClC,mDACF;GACA,OAAO,GACL,WAAW,oBAAoB,KAAA,GAC/B,gDACF;EACF;CACF;AACF;AAEA,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;AACP"}

package/build/esm/tests/ci.js

@@ -49,11 +49,13 @@ async function testCi(ctx) {
 	debug("running initial install to generate lockfile in %s", tempFolder);
 	await ctx.adapter.exec({ cwd: tempFolder }, "install", ...ctx.adapter.registryArg(ctx.registryUrl));
 	debug("lockfile generated, removing node_modules");
-	await rm(join(tempFolder, "node_modules"), {
+	const nodeModulesPath = join(tempFolder, "node_modules");
+	await rm(nodeModulesPath, {
 		recursive: true,
 		force: true
 	});
-	await rm(join(tempFolder, ".pnpm-store"), {
+	const pnpmStorePath = join(tempFolder, ".pnpm-store");
+	await rm(pnpmStorePath, {
 		recursive: true,
 		force: true
 	});

package/build/esm/tests/ci.js.map

@@ -1 +1 @@
-{"version":3,"file":"ci.js","names":[],"sources":["../../../src/tests/ci.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { rm } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:ci');\n\n/**\n * Test: ci\n *\n * Verifies that lockfile-based install works correctly.\n * Unlike `install`, CI commands skip metadata fetches and resolve\n * tarballs directly from the URLs stored in the lockfile.\n *\n * Flow:\n *   1. Prepare a project with dependencies\n *   2. Run `install` to generate the lockfile\n *   3. Remove node_modules\n *   4. Run the CI-equivalent command (npm ci / pnpm install --frozen-lockfile / yarn --frozen-lockfile / yarn --immutable)\n *   5. Verify it completes successfully\n */\n\nfunction getCiArgs(ctx: TestContext): string[] {\n  switch (ctx.adapter.type) {\n    case 'npm':\n      // `npm ci` — separate command, reads package-lock.json\n      return ['ci', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'pnpm':\n      // `pnpm install --frozen-lockfile` — same command, strict mode\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'yarn-classic':\n      // `yarn install --frozen-lockfile`\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'yarn-modern':\n      // `yarn install --immutable`\n      return ['install', '--immutable'];\n    case 'bun':\n      // `bun install --frozen-lockfile`\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    default:\n      return ['ci', ...ctx.adapter.registryArg(ctx.registryUrl)];\n  }\n}\n\nasync function testCi(ctx: TestContext): Promise<void> {\n  // deno doesn't have a CI/frozen-lockfile equivalent\n  if (ctx.adapter.type === 'deno') {\n    debug('skipping ci test for deno (no ci command)');\n    return;\n  }\n\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `ci-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { 'is-odd': '1.0.0' }\n  );\n\n  debug('running initial install to generate lockfile in %s', tempFolder);\n\n  // Step 1: Run install to generate the lockfile\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'install',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  debug('lockfile generated, removing node_modules');\n\n  // Step 2: Remove node_modules to force a clean install from lockfile\n  const nodeModulesPath = join(tempFolder, 'node_modules');\n  await rm(nodeModulesPath, { recursive: true, force: true });\n\n  // For pnpm, also clean the virtual store\n  const pnpmStorePath = join(tempFolder, '.pnpm-store');\n  await rm(pnpmStorePath, { recursive: true, force: true });\n\n  debug('node_modules removed, running ci command');\n\n  // Step 3: Run CI-equivalent command (tarball-only, no metadata fetches)\n  const ciArgs = getCiArgs(ctx);\n  debug('ci args: %o', ciArgs);\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...ciArgs);\n\n  // Step 4: Verify success\n  if (ctx.adapter.type === 'npm') {\n    // npm ci with --json is not reliable, just check exit code 0\n    // and verify output mentions added packages\n    const output = resp.stdout + resp.stderr;\n    debug('npm ci output: %s', output);\n    assert.ok(true, 'npm ci completed successfully');\n  } else {\n    debug('ci completed successfully for %s', ctx.adapter.type);\n    assert.ok(true, `CI install completed successfully for ${ctx.adapter.type}`);\n  }\n}\n\nexport const ciTest: TestDefinition = {\n  name: 'ci',\n  requires: ['install'],\n  run: testCi,\n};\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,4BAA4B;;;;;;;;;;;;;;;AAiBrD,SAAS,UAAU,KAA4B;CAC7C,QAAQ,IAAI,QAAQ,MAApB;EACE,KAAK,OAEH,OAAO,CAAC,MAAM,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;EAC5D,KAAK,QAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY;GAAC;EACtF,KAAK,gBAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY;GAAC;EACtF,KAAK,eAEH,OAAO,CAAC,WAAW,cAAc;EACnC,KAAK,OAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY;GAAC;EACtF,SACE,OAAO,CAAC,MAAM,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;;;AAIhE,eAAe,OAAO,KAAiC;CAErD,IAAI,IAAI,QAAQ,SAAS,QAAQ;EAC/B,MAAM,4CAA4C;EAClD;;CAGF,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,WAAW,IAAI,SACf,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,UAAU,SAAS,CACtB;CAED,MAAM,sDAAsD,WAAW;CAGvE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CAED,MAAM,4CAA4C;CAIlD,MAAM,GADkB,KAAK,YAAY,eAChC,EAAiB;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;CAI3D,MAAM,GADgB,KAAK,YAAY,cAC9B,EAAe;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;CAEzD,MAAM,2CAA2C;CAGjD,MAAM,SAAS,UAAU,IAAI;CAC7B,MAAM,eAAe,OAAO;CAC5B,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,GAAG,OAAO;CAGnE,IAAI,IAAI,QAAQ,SAAS,OAAO;EAI9B,MAAM,qBADS,KAAK,SAAS,KAAK,OACA;EAClC,OAAO,GAAG,MAAM,gCAAgC;QAC3C;EACL,MAAM,oCAAoC,IAAI,QAAQ,KAAK;EAC3D,OAAO,GAAG,MAAM,yCAAyC,IAAI,QAAQ,OAAO;;;AAIhF,IAAa,SAAyB;CACpC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}
+{"version":3,"file":"ci.js","names":[],"sources":["../../../src/tests/ci.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { rm } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:ci');\n\n/**\n * Test: ci\n *\n * Verifies that lockfile-based install works correctly.\n * Unlike `install`, CI commands skip metadata fetches and resolve\n * tarballs directly from the URLs stored in the lockfile.\n *\n * Flow:\n *   1. Prepare a project with dependencies\n *   2. Run `install` to generate the lockfile\n *   3. Remove node_modules\n *   4. Run the CI-equivalent command (npm ci / pnpm install --frozen-lockfile / yarn --frozen-lockfile / yarn --immutable)\n *   5. Verify it completes successfully\n */\n\nfunction getCiArgs(ctx: TestContext): string[] {\n  switch (ctx.adapter.type) {\n    case 'npm':\n      // `npm ci` — separate command, reads package-lock.json\n      return ['ci', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'pnpm':\n      // `pnpm install --frozen-lockfile` — same command, strict mode\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'yarn-classic':\n      // `yarn install --frozen-lockfile`\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'yarn-modern':\n      // `yarn install --immutable`\n      return ['install', '--immutable'];\n    case 'bun':\n      // `bun install --frozen-lockfile`\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    default:\n      return ['ci', ...ctx.adapter.registryArg(ctx.registryUrl)];\n  }\n}\n\nasync function testCi(ctx: TestContext): Promise<void> {\n  // deno doesn't have a CI/frozen-lockfile equivalent\n  if (ctx.adapter.type === 'deno') {\n    debug('skipping ci test for deno (no ci command)');\n    return;\n  }\n\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `ci-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { 'is-odd': '1.0.0' }\n  );\n\n  debug('running initial install to generate lockfile in %s', tempFolder);\n\n  // Step 1: Run install to generate the lockfile\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'install',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  debug('lockfile generated, removing node_modules');\n\n  // Step 2: Remove node_modules to force a clean install from lockfile\n  const nodeModulesPath = join(tempFolder, 'node_modules');\n  await rm(nodeModulesPath, { recursive: true, force: true });\n\n  // For pnpm, also clean the virtual store\n  const pnpmStorePath = join(tempFolder, '.pnpm-store');\n  await rm(pnpmStorePath, { recursive: true, force: true });\n\n  debug('node_modules removed, running ci command');\n\n  // Step 3: Run CI-equivalent command (tarball-only, no metadata fetches)\n  const ciArgs = getCiArgs(ctx);\n  debug('ci args: %o', ciArgs);\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...ciArgs);\n\n  // Step 4: Verify success\n  if (ctx.adapter.type === 'npm') {\n    // npm ci with --json is not reliable, just check exit code 0\n    // and verify output mentions added packages\n    const output = resp.stdout + resp.stderr;\n    debug('npm ci output: %s', output);\n    assert.ok(true, 'npm ci completed successfully');\n  } else {\n    debug('ci completed successfully for %s', ctx.adapter.type);\n    assert.ok(true, `CI install completed successfully for ${ctx.adapter.type}`);\n  }\n}\n\nexport const ciTest: TestDefinition = {\n  name: 'ci',\n  requires: ['install'],\n  run: testCi,\n};\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,2BAA2B;;;;;;;;;;;;;;;AAiBpD,SAAS,UAAU,KAA4B;CAC7C,QAAQ,IAAI,QAAQ,MAApB;EACE,KAAK,OAEH,OAAO,CAAC,MAAM,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;EAC3D,KAAK,QAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;EAAC;EACrF,KAAK,gBAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;EAAC;EACrF,KAAK,eAEH,OAAO,CAAC,WAAW,aAAa;EAClC,KAAK,OAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;EAAC;EACrF,SACE,OAAO,CAAC,MAAM,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;CAC7D;AACF;AAEA,eAAe,OAAO,KAAiC;CAErD,IAAI,IAAI,QAAQ,SAAS,QAAQ;EAC/B,MAAM,2CAA2C;EACjD;CACF;CAEA,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,WAAW,IAAI,SACf,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,UAAU,QAAQ,CACtB;CAEA,MAAM,sDAAsD,UAAU;CAGtE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CAEA,MAAM,2CAA2C;CAGjD,MAAM,kBAAkB,KAAK,YAAY,cAAc;CACvD,MAAM,GAAG,iBAAiB;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAG1D,MAAM,gBAAgB,KAAK,YAAY,aAAa;CACpD,MAAM,GAAG,eAAe;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAExD,MAAM,0CAA0C;CAGhD,MAAM,SAAS,UAAU,GAAG;CAC5B,MAAM,eAAe,MAAM;CAC3B,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,GAAG,MAAM;CAGlE,IAAI,IAAI,QAAQ,SAAS,OAAO;EAI9B,MAAM,qBADS,KAAK,SAAS,KAAK,MACD;EACjC,OAAO,GAAG,MAAM,+BAA+B;CACjD,OAAO;EACL,MAAM,oCAAoC,IAAI,QAAQ,IAAI;EAC1D,OAAO,GAAG,MAAM,yCAAyC,IAAI,QAAQ,MAAM;CAC7E;AACF;AAEA,IAAa,SAAyB;CACpC,MAAM;CACN,UAAU,CAAC,SAAS;CACpB,KAAK;AACP"}

package/build/esm/tests/deprecate.js

@@ -22,7 +22,8 @@ async function deprecate(ctx, tempFolder, packageVersion, message) {
 }
 async function getInfo(ctx, tempFolder, pkgName) {
 	debug("fetching info for %s", pkgName);
-	const parsed = parseInfoJson((await ctx.adapter.exec({ cwd: tempFolder }, "info", pkgName, "--json", ...ctx.adapter.registryArg(ctx.registryUrl))).stdout);
+	const resp = await ctx.adapter.exec({ cwd: tempFolder }, "info", pkgName, "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
+	const parsed = parseInfoJson(resp.stdout);
 	debug("info for %s: deprecated=%s", pkgName, parsed.deprecated ?? "(not set)");
 	return parsed;
 }

package/build/esm/tests/deprecate.js.map

@@ -1 +1 @@
-{"version":3,"file":"deprecate.js","names":[],"sources":["../../../src/tests/deprecate.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { readFile, writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { parseInfoJson } from '../utils/info';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:deprecate');\n\nasync function publishPkg(ctx: TestContext, tempFolder: string, pkgName: string) {\n  if (ctx.adapter.type === 'yarn-modern') {\n    debug('running yarn install before publish for %s', pkgName);\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n  debug('publishing %s from %s', pkgName, tempFolder);\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s successfully', pkgName);\n}\n\nasync function deprecate(\n  ctx: TestContext,\n  tempFolder: string,\n  packageVersion: string,\n  message: string\n) {\n  debug('deprecating %s with message: %s', packageVersion, message || '(empty, un-deprecate)');\n  const jsonFlag = ctx.adapter.type === 'yarn-modern' ? [] : ['--json'];\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'deprecate',\n    packageVersion,\n    message,\n    ...jsonFlag,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('deprecate command completed for %s', packageVersion);\n}\n\nasync function getInfo(ctx: TestContext, tempFolder: string, pkgName: string) {\n  debug('fetching info for %s', pkgName);\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    pkgName,\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  const parsed = parseInfoJson(resp.stdout);\n  debug('info for %s: deprecated=%s', pkgName, parsed.deprecated ?? '(not set)');\n  return parsed;\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string) {\n  debug('bumping version (minor) in %s', tempFolder);\n  if (ctx.adapter.type === 'yarn-modern') {\n    // Bump version by editing package.json directly to avoid\n    // requiring the version plugin (not bundled in Yarn 3)\n    const pkgPath = join(tempFolder, 'package.json');\n    const pkg = JSON.parse(await readFile(pkgPath, 'utf8'));\n    const [major, minor, patch] = pkg.version.split('.').map(Number);\n    pkg.version = `${major}.${minor + 1}.${patch}`;\n    debug('bumped %s to %s', pkgPath, pkg.version);\n    await writeFile(pkgPath, JSON.stringify(pkg, null, 2));\n  } else {\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'version',\n      'minor',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n  }\n}\n\nasync function prepareDeprecateProject(\n  ctx: TestContext,\n  pkgName: string,\n  version: string\n): Promise<string> {\n  debug('preparing project for %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  if (ctx.adapter.importPlugin) {\n    debug('importing npm-deprecate plugin into %s', tempFolder);\n    await ctx.adapter.importPlugin(tempFolder, 'npm-deprecate');\n  }\n  return tempFolder;\n}\n\nasync function testDeprecate(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  const message = 'some message';\n\n  await ctx.subTest('deprecate single version', async () => {\n    const pkgName = `@verdaccio/dep1-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);\n    const info = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info.name, pkgName);\n    assert.strictEqual(info.deprecated, message, 'Package should be deprecated');\n  });\n\n  await ctx.subTest('un-deprecate', async () => {\n    const pkgName = `@verdaccio/dep2-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);\n    const info1 = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info1.deprecated, message);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, '');\n    const info2 = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info2.deprecated, undefined, 'Package should be un-deprecated');\n  });\n\n  await ctx.subTest('deprecate multiple versions', async () => {\n    const pkgName = `@verdaccio/dep3-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    for (let i = 0; i < 3; i++) {\n      await bumpVersion(ctx, tf);\n      await publishPkg(ctx, tf, pkgName);\n    }\n    await deprecate(ctx, tf, pkgName, message);\n    for (const v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {\n      const info = await getInfo(ctx, tf, `${pkgName}@${v}`);\n      assert.strictEqual(info.deprecated, message, `Version ${v} should be deprecated`);\n    }\n    await bumpVersion(ctx, tf);\n    await publishPkg(ctx, tf, pkgName);\n    const info = await getInfo(ctx, tf, `${pkgName}@1.4.0`);\n    assert.strictEqual(info.deprecated, undefined, 'New version should not be deprecated');\n  });\n}\n\nexport const deprecateTest: TestDefinition = {\n  name: 'deprecate',\n  requires: ['deprecate'],\n  run: testDeprecate,\n};\n"],"mappings":";;;;;;AAQA,IAAM,QAAQ,WAAW,mCAAmC;AAE5D,eAAe,WAAW,KAAkB,YAAoB,SAAiB;CAC/E,IAAI,IAAI,QAAQ,SAAS,eAAe;EACtC,MAAM,8CAA8C,QAAQ;EAC5D,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,UAAU;;CAExD,MAAM,yBAAyB,SAAS,WAAW;CACnD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,MAAM,6BAA6B,QAAQ;;AAG7C,eAAe,UACb,KACA,YACA,gBACA,SACA;CACA,MAAM,mCAAmC,gBAAgB,WAAW,wBAAwB;CAC5F,MAAM,WAAW,IAAI,QAAQ,SAAS,gBAAgB,EAAE,GAAG,CAAC,SAAS;CACrE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,aACA,gBACA,SACA,GAAG,UACH,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,MAAM,sCAAsC,eAAe;;AAG7D,eAAe,QAAQ,KAAkB,YAAoB,SAAiB;CAC5E,MAAM,wBAAwB,QAAQ;CAQtC,MAAM,SAAS,eAAc,MAPV,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACiC,OAAO;CACzC,MAAM,8BAA8B,SAAS,OAAO,cAAc,YAAY;CAC9E,OAAO;;AAGT,eAAe,YAAY,KAAkB,YAAoB;CAC/D,MAAM,iCAAiC,WAAW;CAClD,IAAI,IAAI,QAAQ,SAAS,eAAe;EAGtC,MAAM,UAAU,KAAK,YAAY,eAAe;EAChD,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,SAAS,OAAO,CAAC;EACvD,MAAM,CAAC,OAAO,OAAO,SAAS,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI,OAAO;EAChE,IAAI,UAAU,GAAG,MAAM,GAAG,QAAQ,EAAE,GAAG;EACvC,MAAM,mBAAmB,SAAS,IAAI,QAAQ;EAC9C,MAAM,UAAU,SAAS,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC;QAEtD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,SACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;;AAIL,eAAe,wBACb,KACA,SACA,SACiB;CACjB,MAAM,+BAA+B,SAAS,QAAQ;CACtD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,IAAI,IAAI,QAAQ,cAAc;EAC5B,MAAM,0CAA0C,WAAW;EAC3D,MAAM,IAAI,QAAQ,aAAa,YAAY,gBAAgB;;CAE7D,OAAO;;AAGT,eAAe,cAAc,KAAiC;CAC5D,MAAM,KAAK,IAAI;CAEf,MAAM,UAAU;CAEhB,MAAM,IAAI,QAAQ,4BAA4B,YAAY;EACxD,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,QAAQ;EAC/D,MAAM,WAAW,KAAK,IAAI,QAAQ;EAClC,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,QAAQ;EACrD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ;EAC5C,OAAO,YAAY,KAAK,MAAM,QAAQ;EACtC,OAAO,YAAY,KAAK,YAAY,SAAS,+BAA+B;GAC5E;CAEF,MAAM,IAAI,QAAQ,gBAAgB,YAAY;EAC5C,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,QAAQ;EAC/D,MAAM,WAAW,KAAK,IAAI,QAAQ;EAClC,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,QAAQ;EACrD,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ;EAC7C,OAAO,YAAY,MAAM,YAAY,QAAQ;EAC7C,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,GAAG;EAChD,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ;EAC7C,OAAO,YAAY,MAAM,YAAY,KAAA,GAAW,kCAAkC;GAClF;CAEF,MAAM,IAAI,QAAQ,+BAA+B,YAAY;EAC3D,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,QAAQ;EAC/D,MAAM,WAAW,KAAK,IAAI,QAAQ;EAClC,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC1B,MAAM,YAAY,KAAK,GAAG;GAC1B,MAAM,WAAW,KAAK,IAAI,QAAQ;;EAEpC,MAAM,UAAU,KAAK,IAAI,SAAS,QAAQ;EAC1C,KAAK,MAAM,KAAK;GAAC;GAAS;GAAS;GAAS;GAAQ,EAAE;GACpD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,GAAG,IAAI;GACtD,OAAO,YAAY,KAAK,YAAY,SAAS,WAAW,EAAE,uBAAuB;;EAEnF,MAAM,YAAY,KAAK,GAAG;EAC1B,MAAM,WAAW,KAAK,IAAI,QAAQ;EAClC,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,QAAQ;EACvD,OAAO,YAAY,KAAK,YAAY,KAAA,GAAW,uCAAuC;GACtF;;AAGJ,IAAa,gBAAgC;CAC3C,MAAM;CACN,UAAU,CAAC,YAAY;CACvB,KAAK;CACN"}
+{"version":3,"file":"deprecate.js","names":[],"sources":["../../../src/tests/deprecate.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { readFile, writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { parseInfoJson } from '../utils/info';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:deprecate');\n\nasync function publishPkg(ctx: TestContext, tempFolder: string, pkgName: string) {\n  if (ctx.adapter.type === 'yarn-modern') {\n    debug('running yarn install before publish for %s', pkgName);\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n  debug('publishing %s from %s', pkgName, tempFolder);\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s successfully', pkgName);\n}\n\nasync function deprecate(\n  ctx: TestContext,\n  tempFolder: string,\n  packageVersion: string,\n  message: string\n) {\n  debug('deprecating %s with message: %s', packageVersion, message || '(empty, un-deprecate)');\n  const jsonFlag = ctx.adapter.type === 'yarn-modern' ? [] : ['--json'];\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'deprecate',\n    packageVersion,\n    message,\n    ...jsonFlag,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('deprecate command completed for %s', packageVersion);\n}\n\nasync function getInfo(ctx: TestContext, tempFolder: string, pkgName: string) {\n  debug('fetching info for %s', pkgName);\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    pkgName,\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  const parsed = parseInfoJson(resp.stdout);\n  debug('info for %s: deprecated=%s', pkgName, parsed.deprecated ?? '(not set)');\n  return parsed;\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string) {\n  debug('bumping version (minor) in %s', tempFolder);\n  if (ctx.adapter.type === 'yarn-modern') {\n    // Bump version by editing package.json directly to avoid\n    // requiring the version plugin (not bundled in Yarn 3)\n    const pkgPath = join(tempFolder, 'package.json');\n    const pkg = JSON.parse(await readFile(pkgPath, 'utf8'));\n    const [major, minor, patch] = pkg.version.split('.').map(Number);\n    pkg.version = `${major}.${minor + 1}.${patch}`;\n    debug('bumped %s to %s', pkgPath, pkg.version);\n    await writeFile(pkgPath, JSON.stringify(pkg, null, 2));\n  } else {\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'version',\n      'minor',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n  }\n}\n\nasync function prepareDeprecateProject(\n  ctx: TestContext,\n  pkgName: string,\n  version: string\n): Promise<string> {\n  debug('preparing project for %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  if (ctx.adapter.importPlugin) {\n    debug('importing npm-deprecate plugin into %s', tempFolder);\n    await ctx.adapter.importPlugin(tempFolder, 'npm-deprecate');\n  }\n  return tempFolder;\n}\n\nasync function testDeprecate(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  const message = 'some message';\n\n  await ctx.subTest('deprecate single version', async () => {\n    const pkgName = `@verdaccio/dep1-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);\n    const info = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info.name, pkgName);\n    assert.strictEqual(info.deprecated, message, 'Package should be deprecated');\n  });\n\n  await ctx.subTest('un-deprecate', async () => {\n    const pkgName = `@verdaccio/dep2-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);\n    const info1 = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info1.deprecated, message);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, '');\n    const info2 = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info2.deprecated, undefined, 'Package should be un-deprecated');\n  });\n\n  await ctx.subTest('deprecate multiple versions', async () => {\n    const pkgName = `@verdaccio/dep3-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    for (let i = 0; i < 3; i++) {\n      await bumpVersion(ctx, tf);\n      await publishPkg(ctx, tf, pkgName);\n    }\n    await deprecate(ctx, tf, pkgName, message);\n    for (const v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {\n      const info = await getInfo(ctx, tf, `${pkgName}@${v}`);\n      assert.strictEqual(info.deprecated, message, `Version ${v} should be deprecated`);\n    }\n    await bumpVersion(ctx, tf);\n    await publishPkg(ctx, tf, pkgName);\n    const info = await getInfo(ctx, tf, `${pkgName}@1.4.0`);\n    assert.strictEqual(info.deprecated, undefined, 'New version should not be deprecated');\n  });\n}\n\nexport const deprecateTest: TestDefinition = {\n  name: 'deprecate',\n  requires: ['deprecate'],\n  run: testDeprecate,\n};\n"],"mappings":";;;;;;AAQA,IAAM,QAAQ,WAAW,kCAAkC;AAE3D,eAAe,WAAW,KAAkB,YAAoB,SAAiB;CAC/E,IAAI,IAAI,QAAQ,SAAS,eAAe;EACtC,MAAM,8CAA8C,OAAO;EAC3D,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;CACvD;CACA,MAAM,yBAAyB,SAAS,UAAU;CAClD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,6BAA6B,OAAO;AAC5C;AAEA,eAAe,UACb,KACA,YACA,gBACA,SACA;CACA,MAAM,mCAAmC,gBAAgB,WAAW,uBAAuB;CAC3F,MAAM,WAAW,IAAI,QAAQ,SAAS,gBAAgB,CAAC,IAAI,CAAC,QAAQ;CACpE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,aACA,gBACA,SACA,GAAG,UACH,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,sCAAsC,cAAc;AAC5D;AAEA,eAAe,QAAQ,KAAkB,YAAoB,SAAiB;CAC5E,MAAM,wBAAwB,OAAO;CACrC,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,SAAS,cAAc,KAAK,MAAM;CACxC,MAAM,8BAA8B,SAAS,OAAO,cAAc,WAAW;CAC7E,OAAO;AACT;AAEA,eAAe,YAAY,KAAkB,YAAoB;CAC/D,MAAM,iCAAiC,UAAU;CACjD,IAAI,IAAI,QAAQ,SAAS,eAAe;EAGtC,MAAM,UAAU,KAAK,YAAY,cAAc;EAC/C,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,SAAS,MAAM,CAAC;EACtD,MAAM,CAAC,OAAO,OAAO,SAAS,IAAI,QAAQ,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;EAC/D,IAAI,UAAU,GAAG,MAAM,GAAG,QAAQ,EAAE,GAAG;EACvC,MAAM,mBAAmB,SAAS,IAAI,OAAO;EAC7C,MAAM,UAAU,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;CACvD,OACE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,SACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AAEJ;AAEA,eAAe,wBACb,KACA,SACA,SACiB;CACjB,MAAM,+BAA+B,SAAS,OAAO;CACrD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,IAAI,IAAI,QAAQ,cAAc;EAC5B,MAAM,0CAA0C,UAAU;EAC1D,MAAM,IAAI,QAAQ,aAAa,YAAY,eAAe;CAC5D;CACA,OAAO;AACT;AAEA,eAAe,cAAc,KAAiC;CAC5D,MAAM,KAAK,IAAI;CAEf,MAAM,UAAU;CAEhB,MAAM,IAAI,QAAQ,4BAA4B,YAAY;EACxD,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,OAAO;EAC9D,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,OAAO;EACpD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,OAAO;EAC3C,OAAO,YAAY,KAAK,MAAM,OAAO;EACrC,OAAO,YAAY,KAAK,YAAY,SAAS,8BAA8B;CAC7E,CAAC;CAED,MAAM,IAAI,QAAQ,gBAAgB,YAAY;EAC5C,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,OAAO;EAC9D,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,OAAO;EACpD,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,OAAO;EAC5C,OAAO,YAAY,MAAM,YAAY,OAAO;EAC5C,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,EAAE;EAC/C,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,OAAO;EAC5C,OAAO,YAAY,MAAM,YAAY,KAAA,GAAW,iCAAiC;CACnF,CAAC;CAED,MAAM,IAAI,QAAQ,+BAA+B,YAAY;EAC3D,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,OAAO;EAC9D,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC1B,MAAM,YAAY,KAAK,EAAE;GACzB,MAAM,WAAW,KAAK,IAAI,OAAO;EACnC;EACA,MAAM,UAAU,KAAK,IAAI,SAAS,OAAO;EACzC,KAAK,MAAM,KAAK;GAAC;GAAS;GAAS;GAAS;EAAO,GAAG;GACpD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,GAAG,GAAG;GACrD,OAAO,YAAY,KAAK,YAAY,SAAS,WAAW,EAAE,sBAAsB;EAClF;EACA,MAAM,YAAY,KAAK,EAAE;EACzB,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,OAAO;EACtD,OAAO,YAAY,KAAK,YAAY,KAAA,GAAW,sCAAsC;CACvF,CAAC;AACH;AAEA,IAAa,gBAAgC;CAC3C,MAAM;CACN,UAAU,CAAC,WAAW;CACtB,KAAK;AACP"}

package/build/esm/tests/dist-tags.js.map

@@ -1 +1 @@
-{"version":3,"file":"dist-tags.js","names":[],"sources":["../../../src/tests/dist-tags.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function publishPkg(ctx: TestContext, tempFolder: string, extraArgs: string[] = []) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...extraArgs,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'version',\n    'minor',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function testDistTags(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Test 1: list dist-tags\n  const pkgName1 = `@foo/dt1-${id}`;\n  const { tempFolder: tf1 } = await ctx.adapter.prepareProject(\n    pkgName1,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf1);\n  await bumpVersion(ctx, tf1);\n  await publishPkg(ctx, tf1, ['--tag', 'beta']);\n  const resp1 = await ctx.adapter.exec(\n    { cwd: tf1 },\n    'dist-tag',\n    'ls',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp1.stdout, 'beta: 1.1.0latest: 1.0.0');\n\n  // Test 2: remove tag\n  const pkgName2 = `@verdaccio/dt2-${id}`;\n  const { tempFolder: tf2 } = await ctx.adapter.prepareProject(\n    pkgName2,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf2);\n  await bumpVersion(ctx, tf2);\n  await publishPkg(ctx, tf2, ['--tag', 'beta']);\n  const resp2 = await ctx.adapter.exec(\n    { cwd: tf2 },\n    'dist-tag',\n    'rm',\n    `${pkgName2}@1.1.0`,\n    'beta',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp2.stdout, `-beta: ${pkgName2}@1.1.0`);\n\n  // Test 3: add tag\n  const pkgName3 = `@verdaccio/dt3-${id}`;\n  const { tempFolder: tf3 } = await ctx.adapter.prepareProject(\n    pkgName3,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf3);\n  await bumpVersion(ctx, tf3);\n  await publishPkg(ctx, tf3);\n  const resp3 = await ctx.adapter.exec(\n    { cwd: tf3 },\n    'dist-tag',\n    'add',\n    `${pkgName3}@1.1.0`,\n    'alfa',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp3.stdout, `+alfa: ${pkgName3}@1.1.0`);\n}\n\nexport const distTagsTest: TestDefinition = {\n  name: 'dist-tags',\n  requires: ['dist-tag'],\n  run: testDistTags,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAkB,YAAoB,YAAsB,EAAE,EAAE;CACxF,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,WACH,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;;AAGH,eAAe,YAAY,KAAkB,YAAoB;CAC/D,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,SACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;;AAGH,eAAe,aAAa,KAAiC;CAC3D,MAAM,KAAK,IAAI;CAGf,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,MAAM,WAAW,KAAK,IAAI;CAC1B,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,WAAW,KAAK,KAAK,CAAC,SAAS,OAAO,CAAC;CAC7C,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,KAAK,EACZ,YACA,MACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,OAAO,YAAY,MAAM,QAAQ,2BAA2B;CAG5D,MAAM,WAAW,kBAAkB;CACnC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,MAAM,WAAW,KAAK,IAAI;CAC1B,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,WAAW,KAAK,KAAK,CAAC,SAAS,OAAO,CAAC;CAC7C,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,KAAK,EACZ,YACA,MACA,GAAG,SAAS,SACZ,QACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,OAAO,YAAY,MAAM,QAAQ,UAAU,SAAS,QAAQ;CAG5D,MAAM,WAAW,kBAAkB;CACnC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,MAAM,WAAW,KAAK,IAAI;CAC1B,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,WAAW,KAAK,IAAI;CAC1B,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,KAAK,EACZ,YACA,OACA,GAAG,SAAS,SACZ,QACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,OAAO,YAAY,MAAM,QAAQ,UAAU,SAAS,QAAQ;;AAG9D,IAAa,eAA+B;CAC1C,MAAM;CACN,UAAU,CAAC,WAAW;CACtB,KAAK;CACN"}
+{"version":3,"file":"dist-tags.js","names":[],"sources":["../../../src/tests/dist-tags.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function publishPkg(ctx: TestContext, tempFolder: string, extraArgs: string[] = []) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...extraArgs,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'version',\n    'minor',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function testDistTags(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Test 1: list dist-tags\n  const pkgName1 = `@foo/dt1-${id}`;\n  const { tempFolder: tf1 } = await ctx.adapter.prepareProject(\n    pkgName1,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf1);\n  await bumpVersion(ctx, tf1);\n  await publishPkg(ctx, tf1, ['--tag', 'beta']);\n  const resp1 = await ctx.adapter.exec(\n    { cwd: tf1 },\n    'dist-tag',\n    'ls',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp1.stdout, 'beta: 1.1.0latest: 1.0.0');\n\n  // Test 2: remove tag\n  const pkgName2 = `@verdaccio/dt2-${id}`;\n  const { tempFolder: tf2 } = await ctx.adapter.prepareProject(\n    pkgName2,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf2);\n  await bumpVersion(ctx, tf2);\n  await publishPkg(ctx, tf2, ['--tag', 'beta']);\n  const resp2 = await ctx.adapter.exec(\n    { cwd: tf2 },\n    'dist-tag',\n    'rm',\n    `${pkgName2}@1.1.0`,\n    'beta',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp2.stdout, `-beta: ${pkgName2}@1.1.0`);\n\n  // Test 3: add tag\n  const pkgName3 = `@verdaccio/dt3-${id}`;\n  const { tempFolder: tf3 } = await ctx.adapter.prepareProject(\n    pkgName3,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf3);\n  await bumpVersion(ctx, tf3);\n  await publishPkg(ctx, tf3);\n  const resp3 = await ctx.adapter.exec(\n    { cwd: tf3 },\n    'dist-tag',\n    'add',\n    `${pkgName3}@1.1.0`,\n    'alfa',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp3.stdout, `+alfa: ${pkgName3}@1.1.0`);\n}\n\nexport const distTagsTest: TestDefinition = {\n  name: 'dist-tags',\n  requires: ['dist-tag'],\n  run: testDistTags,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAkB,YAAoB,YAAsB,CAAC,GAAG;CACxF,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,WACH,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AACF;AAEA,eAAe,YAAY,KAAkB,YAAoB;CAC/D,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,SACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AACF;AAEA,eAAe,aAAa,KAAiC;CAC3D,MAAM,KAAK,IAAI;CAGf,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,GAAG;CAC1B,MAAM,WAAW,KAAK,KAAK,CAAC,SAAS,MAAM,CAAC;CAC5C,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,YACA,MACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,YAAY,MAAM,QAAQ,0BAA0B;CAG3D,MAAM,WAAW,kBAAkB;CACnC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,GAAG;CAC1B,MAAM,WAAW,KAAK,KAAK,CAAC,SAAS,MAAM,CAAC;CAC5C,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,YACA,MACA,GAAG,SAAS,SACZ,QACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,YAAY,MAAM,QAAQ,UAAU,SAAS,OAAO;CAG3D,MAAM,WAAW,kBAAkB;CACnC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,GAAG;CAC1B,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,YACA,OACA,GAAG,SAAS,SACZ,QACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,YAAY,MAAM,QAAQ,UAAU,SAAS,OAAO;AAC7D;AAEA,IAAa,eAA+B;CAC1C,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;AACP"}

package/build/esm/tests/index.js

@@ -28,6 +28,6 @@ var allTests = [
 	...allScenarios
 ];
 //#endregion
-export { allTests };
+export { allScenarios, allTests, auditTest, ciTest, deprecateTest, distTagsTest, infoTest, installTest, loginTest, pingTest, publishTest, searchTest, unpublishTest };
 
 //# sourceMappingURL=index.js.map

package/build/esm/tests/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/tests/index.ts"],"sourcesContent":["import { allScenarios, installMultipleDepsScenario, minimumReleaseAgeScenario } from '../scenarios';\nimport { TestDefinition } from '../types';\nimport { auditTest } from './audit';\nimport { ciTest } from './ci';\nimport { deprecateTest } from './deprecate';\nimport { distTagsTest } from './dist-tags';\nimport { infoTest } from './info';\nimport { installTest } from './install';\nimport { loginTest } from './login';\nimport { pingTest } from './ping';\nimport { publishTest } from './publish';\nimport { searchTest } from './search';\nimport { unpublishTest } from './unpublish';\n\nexport const allTests: TestDefinition[] = [\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  unpublishTest,\n  // Scenarios (complex, multi-step tests)\n  ...allScenarios,\n];\n\nexport {\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  unpublishTest,\n  // Scenarios\n  installMultipleDepsScenario,\n  minimumReleaseAgeScenario,\n  allScenarios,\n};\n"],"mappings":";;;;;;;;;;;;;;;AAcA,IAAa,WAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,GAAG;CACJ"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/tests/index.ts"],"sourcesContent":["import { allScenarios, installMultipleDepsScenario, minimumReleaseAgeScenario } from '../scenarios';\nimport { TestDefinition } from '../types';\nimport { auditTest } from './audit';\nimport { ciTest } from './ci';\nimport { deprecateTest } from './deprecate';\nimport { distTagsTest } from './dist-tags';\nimport { infoTest } from './info';\nimport { installTest } from './install';\nimport { loginTest } from './login';\nimport { pingTest } from './ping';\nimport { publishTest } from './publish';\nimport { searchTest } from './search';\nimport { unpublishTest } from './unpublish';\n\nexport const allTests: TestDefinition[] = [\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  unpublishTest,\n  // Scenarios (complex, multi-step tests)\n  ...allScenarios,\n];\n\nexport {\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  unpublishTest,\n  // Scenarios\n  installMultipleDepsScenario,\n  minimumReleaseAgeScenario,\n  allScenarios,\n};\n"],"mappings":";;;;;;;;;;;;;;;AAcA,IAAa,WAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,GAAG;AACL"}

package/build/esm/tests/info.js.map

@@ -1 +1 @@
-{"version":3,"file":"info.js","names":[],"sources":["../../../src/tests/info.ts"],"sourcesContent":["import assert from 'assert';\nimport { writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { parseInfoJson } from '../utils/info';\nimport { createTempFolder } from '../utils/project';\n\nasync function testInfo(ctx: TestContext): Promise<void> {\n  // Create a minimal temp project so yarn modern has a project context\n  // and yarn classic doesn't pick up the repo's packageManager field\n  const tempFolder = await createTempFolder('info-test');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    JSON.stringify({ name: 'info-test', version: '1.0.0' })\n  );\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    'verdaccio',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (ctx.adapter.type === 'yarn-classic') {\n    const lines = resp.stdout.split('\\n').filter(Boolean);\n    const dataLine = lines.find((l) => {\n      try {\n        const obj = JSON.parse(l);\n        return obj.type === 'inspect';\n      } catch {\n        return false;\n      }\n    });\n    assert.ok(dataLine, 'Expected yarn info NDJSON to contain an \"inspect\" entry');\n  } else if (ctx.adapter.type === 'deno') {\n    // deno info npm:<pkg> outputs a text dependency tree\n    const output = resp.stdout + resp.stderr;\n    assert.ok(output.includes('verdaccio'), 'Expected deno info output to reference verdaccio');\n  } else {\n    const parsedBody = parseInfoJson(resp.stdout);\n    assert.strictEqual(parsedBody.name, 'verdaccio', 'Expected package name \"verdaccio\"');\n    assert.ok(parsedBody.dependencies !== undefined, 'Expected \"dependencies\" to be defined');\n  }\n}\n\nexport const infoTest: TestDefinition = {\n  name: 'info',\n  requires: ['info'],\n  run: testInfo,\n};\n"],"mappings":";;;;;;AAQA,eAAe,SAAS,KAAiC;CAGvD,MAAM,aAAa,MAAM,iBAAiB,YAAY;CACtD,MAAM,UACJ,KAAK,YAAY,eAAe,EAChC,KAAK,UAAU;EAAE,MAAM;EAAa,SAAS;EAAS,CAAC,CACxD;CAED,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,aACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CAED,IAAI,IAAI,QAAQ,SAAS,gBAAgB;EAEvC,MAAM,WADQ,KAAK,OAAO,MAAM,KAAK,CAAC,OAAO,QAC5B,CAAM,MAAM,MAAM;GACjC,IAAI;IAEF,OADY,KAAK,MAAM,EAChB,CAAI,SAAS;WACd;IACN,OAAO;;IAET;EACF,OAAO,GAAG,UAAU,4DAA0D;QACzE,IAAI,IAAI,QAAQ,SAAS,QAAQ;EAEtC,MAAM,SAAS,KAAK,SAAS,KAAK;EAClC,OAAO,GAAG,OAAO,SAAS,YAAY,EAAE,mDAAmD;QACtF;EACL,MAAM,aAAa,cAAc,KAAK,OAAO;EAC7C,OAAO,YAAY,WAAW,MAAM,aAAa,sCAAoC;EACrF,OAAO,GAAG,WAAW,iBAAiB,KAAA,GAAW,0CAAwC;;;AAI7F,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;CACN"}
+{"version":3,"file":"info.js","names":[],"sources":["../../../src/tests/info.ts"],"sourcesContent":["import assert from 'assert';\nimport { writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { parseInfoJson } from '../utils/info';\nimport { createTempFolder } from '../utils/project';\n\nasync function testInfo(ctx: TestContext): Promise<void> {\n  // Create a minimal temp project so yarn modern has a project context\n  // and yarn classic doesn't pick up the repo's packageManager field\n  const tempFolder = await createTempFolder('info-test');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    JSON.stringify({ name: 'info-test', version: '1.0.0' })\n  );\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    'verdaccio',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (ctx.adapter.type === 'yarn-classic') {\n    const lines = resp.stdout.split('\\n').filter(Boolean);\n    const dataLine = lines.find((l) => {\n      try {\n        const obj = JSON.parse(l);\n        return obj.type === 'inspect';\n      } catch {\n        return false;\n      }\n    });\n    assert.ok(dataLine, 'Expected yarn info NDJSON to contain an \"inspect\" entry');\n  } else if (ctx.adapter.type === 'deno') {\n    // deno info npm:<pkg> outputs a text dependency tree\n    const output = resp.stdout + resp.stderr;\n    assert.ok(output.includes('verdaccio'), 'Expected deno info output to reference verdaccio');\n  } else {\n    const parsedBody = parseInfoJson(resp.stdout);\n    assert.strictEqual(parsedBody.name, 'verdaccio', 'Expected package name \"verdaccio\"');\n    assert.ok(parsedBody.dependencies !== undefined, 'Expected \"dependencies\" to be defined');\n  }\n}\n\nexport const infoTest: TestDefinition = {\n  name: 'info',\n  requires: ['info'],\n  run: testInfo,\n};\n"],"mappings":";;;;;;AAQA,eAAe,SAAS,KAAiC;CAGvD,MAAM,aAAa,MAAM,iBAAiB,WAAW;CACrD,MAAM,UACJ,KAAK,YAAY,cAAc,GAC/B,KAAK,UAAU;EAAE,MAAM;EAAa,SAAS;CAAQ,CAAC,CACxD;CAEA,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,QACA,aACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CAEA,IAAI,IAAI,QAAQ,SAAS,gBAAgB;EAEvC,MAAM,WADQ,KAAK,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,OAC5B,CAAA,CAAM,MAAM,MAAM;GACjC,IAAI;IAEF,OADY,KAAK,MAAM,CAChB,CAAA,CAAI,SAAS;GACtB,QAAQ;IACN,OAAO;GACT;EACF,CAAC;EACD,OAAO,GAAG,UAAU,2DAAyD;CAC/E,OAAO,IAAI,IAAI,QAAQ,SAAS,QAAQ;EAEtC,MAAM,SAAS,KAAK,SAAS,KAAK;EAClC,OAAO,GAAG,OAAO,SAAS,WAAW,GAAG,kDAAkD;CAC5F,OAAO;EACL,MAAM,aAAa,cAAc,KAAK,MAAM;EAC5C,OAAO,YAAY,WAAW,MAAM,aAAa,qCAAmC;EACpF,OAAO,GAAG,WAAW,iBAAiB,KAAA,GAAW,yCAAuC;CAC1F;AACF;AAEA,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,MAAM;CACjB,KAAK;AACP"}

package/build/esm/tests/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","names":[],"sources":["../../../src/tests/install.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testInstall(ctx: TestContext): Promise<void> {\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `install-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { react: '18.2.0' }\n  );\n\n  const isNpm = ctx.adapter.type === 'npm';\n\n  // pnpm doesn't support --json on install\n  const args = isNpm\n    ? ['install', '--json', ...ctx.adapter.registryArg(ctx.registryUrl)]\n    : ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n  if (isNpm) {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.ok(parsedBody.added !== undefined, 'Expected \"added\" field in install response');\n  } else {\n    // for pnpm/yarn just verify it completed without error (exit code 0)\n    assert.ok(true, 'Install completed successfully');\n  }\n}\n\nexport const installTest: TestDefinition = {\n  name: 'install',\n  requires: ['install'],\n  run: testInstall,\n};\n"],"mappings":";;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,gBAAgB,IAAI,SACpB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,OAAO,UAAU,CACpB;CAED,MAAM,QAAQ,IAAI,QAAQ,SAAS;CAGnC,MAAM,OAAO,QACT;EAAC;EAAW;EAAU,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY;EAAC,GAClE,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;CAE5D,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,GAAG,KAAK;CAEjE,IAAI,OAAO;EACT,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;EAC1C,OAAO,GAAG,WAAW,UAAU,KAAA,GAAW,+CAA6C;QAGvF,OAAO,GAAG,MAAM,iCAAiC;;AAIrD,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}
+{"version":3,"file":"install.js","names":[],"sources":["../../../src/tests/install.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testInstall(ctx: TestContext): Promise<void> {\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `install-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { react: '18.2.0' }\n  );\n\n  const isNpm = ctx.adapter.type === 'npm';\n\n  // pnpm doesn't support --json on install\n  const args = isNpm\n    ? ['install', '--json', ...ctx.adapter.registryArg(ctx.registryUrl)]\n    : ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n  if (isNpm) {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.ok(parsedBody.added !== undefined, 'Expected \"added\" field in install response');\n  } else {\n    // for pnpm/yarn just verify it completed without error (exit code 0)\n    assert.ok(true, 'Install completed successfully');\n  }\n}\n\nexport const installTest: TestDefinition = {\n  name: 'install',\n  requires: ['install'],\n  run: testInstall,\n};\n"],"mappings":";;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,gBAAgB,IAAI,SACpB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,OAAO,SAAS,CACpB;CAEA,MAAM,QAAQ,IAAI,QAAQ,SAAS;CAGnC,MAAM,OAAO,QACT;EAAC;EAAW;EAAU,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;CAAC,IACjE,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;CAE3D,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,GAAG,IAAI;CAEhE,IAAI,OAAO;EACT,MAAM,aAAa,KAAK,MAAM,KAAK,MAAM;EACzC,OAAO,GAAG,WAAW,UAAU,KAAA,GAAW,8CAA4C;CACxF,OAEE,OAAO,GAAG,MAAM,gCAAgC;AAEpD;AAEA,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,SAAS;CACpB,KAAK;AACP"}

package/build/esm/tests/login.js

@@ -2,7 +2,7 @@ import { createTempFolder, getPackageJSON, getREADME } from "../utils/project.js
 import buildDebug from "debug";
 import { join } from "path";
 import { writeFile } from "fs/promises";
-import YAML from "js-yaml";
+import * as YAML from "js-yaml";
 import assert from "assert";
 //#region src/tests/login.ts
 var debug = buildDebug("verdaccio:e2e-cli:test:login");
@@ -55,12 +55,15 @@ async function testLogin(ctx) {
 		const who = await yarnWhoami(ctx, tf);
 		assert.ok(who.includes(user1), `Expected whoami "${user1}" but got "${who}"`);
 	});
-	await ctx.subTest("login existing user", async () => {
+	await ctx.subTest("legacy re-login is rejected without basic auth", async () => {
 		const tf = await prepareLoginProject(ctx, `verdaccio-login2-${id}`);
-		const loginResp = await yarnLogin(ctx, tf, user1, password1, email1);
-		assert.ok(loginResp.stdout.includes("Logged in") || loginResp.stdout.includes("token saved"), `Expected login success for existing user but got "${loginResp.stdout}"`);
-		const who = await yarnWhoami(ctx, tf);
-		assert.ok(who.includes(user1), `Expected "${user1}" but got "${who}"`);
+		let loginFailed = false;
+		try {
+			await yarnLogin(ctx, tf, user1, password1, email1);
+		} catch {
+			loginFailed = true;
+		}
+		assert.ok(loginFailed, "Legacy re-login for an existing user should fail without Basic auth");
 	});
 	await ctx.subTest("wrong password fails", async () => {
 		const tf = await prepareLoginProject(ctx, `verdaccio-login3-${id}`);
@@ -74,6 +77,9 @@ async function testLogin(ctx) {
 	});
 	await ctx.subTest("login then publish", async () => {
 		const pkgName = `@verdaccio/login-pub-${id}`;
+		const publishUser = `login-pub-${id}`;
+		const publishPassword = "publish-password-123";
+		const publishEmail = `${publishUser}@test.example.com`;
 		const tf = await createTempFolder(`login-pub-${id}`);
 		const yamlContent = YAML.dump({
 			npmRegistryServer: ctx.registryUrl,
@@ -84,19 +90,22 @@ async function testLogin(ctx) {
 		await writeFile(join(tf, "package.json"), getPackageJSON(pkgName, "1.0.0"));
 		await writeFile(join(tf, "README.md"), getREADME(pkgName));
 		if (ctx.adapter.importPlugin) await ctx.adapter.importPlugin(tf, "npm-login");
-		await yarnLogin(ctx, tf, user1, password1, email1);
+		await yarnLogin(ctx, tf, publishUser, publishPassword, publishEmail);
 		await ctx.adapter.exec({ cwd: tf }, "install");
 		const pubResp = await ctx.adapter.exec({ cwd: tf }, "publish");
 		assert.ok(pubResp.stdout.includes("Package archive published"), `Expected publish success but got "${pubResp.stdout}"`);
 	});
 	await ctx.subTest("switch users", async () => {
+		const switchUser1 = `login-switch-a-${id}`;
+		const switchPassword1 = "switch-password-123";
+		const switchEmail1 = `${switchUser1}@test.example.com`;
 		const user2 = `login-b-${id}`;
 		const password2 = "other-password-456";
 		const email2 = `${user2}@test.example.com`;
 		const tf = await prepareLoginProject(ctx, `verdaccio-login5-${id}`);
-		await yarnLogin(ctx, tf, user1, password1, email1);
+		await yarnLogin(ctx, tf, switchUser1, switchPassword1, switchEmail1);
 		const who1 = await yarnWhoami(ctx, tf);
-		assert.ok(who1.includes(user1), `Expected "${user1}" but got "${who1}"`);
+		assert.ok(who1.includes(switchUser1), `Expected "${switchUser1}" but got "${who1}"`);
 		await yarnLogin(ctx, tf, user2, password2, email2);
 		const who2 = await yarnWhoami(ctx, tf);
 		assert.ok(who2.includes(user2), `Expected "${user2}" after switch but got "${who2}"`);

package/build/esm/tests/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","names":[],"sources":["../../../src/tests/login.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { writeFile } from 'fs/promises';\nimport YAML from 'js-yaml';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { createTempFolder, getPackageJSON, getREADME } from '../utils/project';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:login');\n\n/**\n * Creates a project with registry config but WITHOUT auth token,\n * so whoami will use the token saved by login to ~/.yarnrc.yml.\n */\nasync function prepareLoginProject(ctx: TestContext, name: string): Promise<string> {\n  debug('preparing project for %s (no auth token)', name);\n  const tempFolder = await createTempFolder(name);\n  const yamlContent = YAML.dump({\n    npmRegistryServer: ctx.registryUrl,\n    enableImmutableInstalls: false,\n    unsafeHttpWhitelist: ['localhost'],\n  });\n  await writeFile(join(tempFolder, '.yarnrc.yml'), yamlContent);\n  await writeFile(join(tempFolder, 'package.json'), JSON.stringify({ name, version: '1.0.0' }));\n  if (ctx.adapter.importPlugin) {\n    debug('importing npm-login plugin into %s', tempFolder);\n    await ctx.adapter.importPlugin(tempFolder, 'npm-login');\n  }\n  return tempFolder;\n}\n\nasync function yarnLogin(\n  ctx: TestContext,\n  cwd: string,\n  user: string,\n  password: string,\n  email: string\n) {\n  debug('yarn npm login as %s', user);\n  return ctx.adapter.exec(\n    { cwd },\n    'login',\n    '--auth-type=legacy',\n    `--user=${user}`,\n    `--password=${password}`,\n    `--email=${email}`\n  );\n}\n\nasync function yarnWhoami(ctx: TestContext, cwd: string): Promise<string> {\n  const resp = await ctx.adapter.exec({ cwd }, 'whoami');\n  debug('yarn npm whoami: %s', resp.stdout);\n  return resp.stdout;\n}\n\nasync function testLogin(ctx: TestContext): Promise<void> {\n  const type = ctx.adapter.type;\n  const id = ctx.runId;\n\n  if (type !== 'yarn-modern') {\n    debug('login test only supported for yarn-modern, skipping %s', type);\n    return;\n  }\n\n  const user1 = `login-a-${id}`;\n  const password1 = 'test-password-123';\n  const email1 = `${user1}@test.example.com`;\n\n  await ctx.subTest('create new user + whoami', async () => {\n    const tf = await prepareLoginProject(ctx, `verdaccio-login1-${id}`);\n    const loginResp = await yarnLogin(ctx, tf, user1, password1, email1);\n    assert.ok(\n      loginResp.stdout.includes('Logged in') || loginResp.stdout.includes('token saved'),\n      `Expected login success message but got \"${loginResp.stdout}\"`\n    );\n    const who = await yarnWhoami(ctx, tf);\n    assert.ok(who.includes(user1), `Expected whoami \"${user1}\" but got \"${who}\"`);\n  });\n\n  await ctx.subTest('login existing user', async () => {\n    const tf = await prepareLoginProject(ctx, `verdaccio-login2-${id}`);\n    const loginResp = await yarnLogin(ctx, tf, user1, password1, email1);\n    assert.ok(\n      loginResp.stdout.includes('Logged in') || loginResp.stdout.includes('token saved'),\n      `Expected login success for existing user but got \"${loginResp.stdout}\"`\n    );\n    const who = await yarnWhoami(ctx, tf);\n    assert.ok(who.includes(user1), `Expected \"${user1}\" but got \"${who}\"`);\n  });\n\n  await ctx.subTest('wrong password fails', async () => {\n    const tf = await prepareLoginProject(ctx, `verdaccio-login3-${id}`);\n    let loginFailed = false;\n    try {\n      await yarnLogin(ctx, tf, user1, 'wrong-password', email1);\n    } catch {\n      loginFailed = true;\n    }\n    assert.ok(loginFailed, 'Login with wrong password should have failed');\n  });\n\n  await ctx.subTest('login then publish', async () => {\n    const pkgName = `@verdaccio/login-pub-${id}`;\n    const tf = await createTempFolder(`login-pub-${id}`);\n    const yamlContent = YAML.dump({\n      npmRegistryServer: ctx.registryUrl,\n      enableImmutableInstalls: false,\n      unsafeHttpWhitelist: ['localhost'],\n    });\n    await writeFile(join(tf, '.yarnrc.yml'), yamlContent);\n    await writeFile(join(tf, 'package.json'), getPackageJSON(pkgName, '1.0.0'));\n    await writeFile(join(tf, 'README.md'), getREADME(pkgName));\n    if (ctx.adapter.importPlugin) {\n      await ctx.adapter.importPlugin(tf, 'npm-login');\n    }\n    await yarnLogin(ctx, tf, user1, password1, email1);\n    await ctx.adapter.exec({ cwd: tf }, 'install');\n    const pubResp = await ctx.adapter.exec({ cwd: tf }, 'publish');\n    assert.ok(\n      pubResp.stdout.includes('Package archive published'),\n      `Expected publish success but got \"${pubResp.stdout}\"`\n    );\n  });\n\n  await ctx.subTest('switch users', async () => {\n    const user2 = `login-b-${id}`;\n    const password2 = 'other-password-456';\n    const email2 = `${user2}@test.example.com`;\n    const tf = await prepareLoginProject(ctx, `verdaccio-login5-${id}`);\n\n    await yarnLogin(ctx, tf, user1, password1, email1);\n    const who1 = await yarnWhoami(ctx, tf);\n    assert.ok(who1.includes(user1), `Expected \"${user1}\" but got \"${who1}\"`);\n\n    await yarnLogin(ctx, tf, user2, password2, email2);\n    const who2 = await yarnWhoami(ctx, tf);\n    assert.ok(who2.includes(user2), `Expected \"${user2}\" after switch but got \"${who2}\"`);\n  });\n}\n\nexport const loginTest: TestDefinition = {\n  name: 'login',\n  requires: ['login'],\n  run: testLogin,\n};\n"],"mappings":";;;;;;;AASA,IAAM,QAAQ,WAAW,+BAA+B;;;;;AAMxD,eAAe,oBAAoB,KAAkB,MAA+B;CAClF,MAAM,4CAA4C,KAAK;CACvD,MAAM,aAAa,MAAM,iBAAiB,KAAK;CAC/C,MAAM,cAAc,KAAK,KAAK;EAC5B,mBAAmB,IAAI;EACvB,yBAAyB;EACzB,qBAAqB,CAAC,YAAY;EACnC,CAAC;CACF,MAAM,UAAU,KAAK,YAAY,cAAc,EAAE,YAAY;CAC7D,MAAM,UAAU,KAAK,YAAY,eAAe,EAAE,KAAK,UAAU;EAAE;EAAM,SAAS;EAAS,CAAC,CAAC;CAC7F,IAAI,IAAI,QAAQ,cAAc;EAC5B,MAAM,sCAAsC,WAAW;EACvD,MAAM,IAAI,QAAQ,aAAa,YAAY,YAAY;;CAEzD,OAAO;;AAGT,eAAe,UACb,KACA,KACA,MACA,UACA,OACA;CACA,MAAM,wBAAwB,KAAK;CACnC,OAAO,IAAI,QAAQ,KACjB,EAAE,KAAK,EACP,SACA,sBACA,UAAU,QACV,cAAc,YACd,WAAW,QACZ;;AAGH,eAAe,WAAW,KAAkB,KAA8B;CACxE,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,EAAE,SAAS;CACtD,MAAM,uBAAuB,KAAK,OAAO;CACzC,OAAO,KAAK;;AAGd,eAAe,UAAU,KAAiC;CACxD,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,KAAK,IAAI;CAEf,IAAI,SAAS,eAAe;EAC1B,MAAM,0DAA0D,KAAK;EACrE;;CAGF,MAAM,QAAQ,WAAW;CACzB,MAAM,YAAY;CAClB,MAAM,SAAS,GAAG,MAAM;CAExB,MAAM,IAAI,QAAQ,4BAA4B,YAAY;EACxD,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,KAAK;EACnE,MAAM,YAAY,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,OAAO;EACpE,OAAO,GACL,UAAU,OAAO,SAAS,YAAY,IAAI,UAAU,OAAO,SAAS,cAAc,EAClF,2CAA2C,UAAU,OAAO,GAC7D;EACD,MAAM,MAAM,MAAM,WAAW,KAAK,GAAG;EACrC,OAAO,GAAG,IAAI,SAAS,MAAM,EAAE,oBAAoB,MAAM,aAAa,IAAI,GAAG;GAC7E;CAEF,MAAM,IAAI,QAAQ,uBAAuB,YAAY;EACnD,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,KAAK;EACnE,MAAM,YAAY,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,OAAO;EACpE,OAAO,GACL,UAAU,OAAO,SAAS,YAAY,IAAI,UAAU,OAAO,SAAS,cAAc,EAClF,qDAAqD,UAAU,OAAO,GACvE;EACD,MAAM,MAAM,MAAM,WAAW,KAAK,GAAG;EACrC,OAAO,GAAG,IAAI,SAAS,MAAM,EAAE,aAAa,MAAM,aAAa,IAAI,GAAG;GACtE;CAEF,MAAM,IAAI,QAAQ,wBAAwB,YAAY;EACpD,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,KAAK;EACnE,IAAI,cAAc;EAClB,IAAI;GACF,MAAM,UAAU,KAAK,IAAI,OAAO,kBAAkB,OAAO;UACnD;GACN,cAAc;;EAEhB,OAAO,GAAG,aAAa,+CAA+C;GACtE;CAEF,MAAM,IAAI,QAAQ,sBAAsB,YAAY;EAClD,MAAM,UAAU,wBAAwB;EACxC,MAAM,KAAK,MAAM,iBAAiB,aAAa,KAAK;EACpD,MAAM,cAAc,KAAK,KAAK;GAC5B,mBAAmB,IAAI;GACvB,yBAAyB;GACzB,qBAAqB,CAAC,YAAY;GACnC,CAAC;EACF,MAAM,UAAU,KAAK,IAAI,cAAc,EAAE,YAAY;EACrD,MAAM,UAAU,KAAK,IAAI,eAAe,EAAE,eAAe,SAAS,QAAQ,CAAC;EAC3E,MAAM,UAAU,KAAK,IAAI,YAAY,EAAE,UAAU,QAAQ,CAAC;EAC1D,IAAI,IAAI,QAAQ,cACd,MAAM,IAAI,QAAQ,aAAa,IAAI,YAAY;EAEjD,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,OAAO;EAClD,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,IAAI,EAAE,UAAU;EAC9C,MAAM,UAAU,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,IAAI,EAAE,UAAU;EAC9D,OAAO,GACL,QAAQ,OAAO,SAAS,4BAA4B,EACpD,qCAAqC,QAAQ,OAAO,GACrD;GACD;CAEF,MAAM,IAAI,QAAQ,gBAAgB,YAAY;EAC5C,MAAM,QAAQ,WAAW;EACzB,MAAM,YAAY;EAClB,MAAM,SAAS,GAAG,MAAM;EACxB,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,KAAK;EAEnE,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,OAAO;EAClD,MAAM,OAAO,MAAM,WAAW,KAAK,GAAG;EACtC,OAAO,GAAG,KAAK,SAAS,MAAM,EAAE,aAAa,MAAM,aAAa,KAAK,GAAG;EAExE,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,OAAO;EAClD,MAAM,OAAO,MAAM,WAAW,KAAK,GAAG;EACtC,OAAO,GAAG,KAAK,SAAS,MAAM,EAAE,aAAa,MAAM,0BAA0B,KAAK,GAAG;GACrF;;AAGJ,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,QAAQ;CACnB,KAAK;CACN"}
+{"version":3,"file":"login.js","names":[],"sources":["../../../src/tests/login.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { writeFile } from 'fs/promises';\nimport * as YAML from 'js-yaml';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { createTempFolder, getPackageJSON, getREADME } from '../utils/project';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:login');\n\n/**\n * Creates a project with registry config but WITHOUT auth token,\n * so whoami will use the token saved by login to ~/.yarnrc.yml.\n */\nasync function prepareLoginProject(ctx: TestContext, name: string): Promise<string> {\n  debug('preparing project for %s (no auth token)', name);\n  const tempFolder = await createTempFolder(name);\n  const yamlContent = YAML.dump({\n    npmRegistryServer: ctx.registryUrl,\n    enableImmutableInstalls: false,\n    unsafeHttpWhitelist: ['localhost'],\n  });\n  await writeFile(join(tempFolder, '.yarnrc.yml'), yamlContent);\n  await writeFile(join(tempFolder, 'package.json'), JSON.stringify({ name, version: '1.0.0' }));\n  if (ctx.adapter.importPlugin) {\n    debug('importing npm-login plugin into %s', tempFolder);\n    await ctx.adapter.importPlugin(tempFolder, 'npm-login');\n  }\n  return tempFolder;\n}\n\nasync function yarnLogin(\n  ctx: TestContext,\n  cwd: string,\n  user: string,\n  password: string,\n  email: string\n) {\n  debug('yarn npm login as %s', user);\n  return ctx.adapter.exec(\n    { cwd },\n    'login',\n    '--auth-type=legacy',\n    `--user=${user}`,\n    `--password=${password}`,\n    `--email=${email}`\n  );\n}\n\nasync function yarnWhoami(ctx: TestContext, cwd: string): Promise<string> {\n  const resp = await ctx.adapter.exec({ cwd }, 'whoami');\n  debug('yarn npm whoami: %s', resp.stdout);\n  return resp.stdout;\n}\n\nasync function testLogin(ctx: TestContext): Promise<void> {\n  const type = ctx.adapter.type;\n  const id = ctx.runId;\n\n  if (type !== 'yarn-modern') {\n    debug('login test only supported for yarn-modern, skipping %s', type);\n    return;\n  }\n\n  const user1 = `login-a-${id}`;\n  const password1 = 'test-password-123';\n  const email1 = `${user1}@test.example.com`;\n\n  await ctx.subTest('create new user + whoami', async () => {\n    const tf = await prepareLoginProject(ctx, `verdaccio-login1-${id}`);\n    const loginResp = await yarnLogin(ctx, tf, user1, password1, email1);\n    assert.ok(\n      loginResp.stdout.includes('Logged in') || loginResp.stdout.includes('token saved'),\n      `Expected login success message but got \"${loginResp.stdout}\"`\n    );\n    const who = await yarnWhoami(ctx, tf);\n    assert.ok(who.includes(user1), `Expected whoami \"${user1}\" but got \"${who}\"`);\n  });\n\n  await ctx.subTest('legacy re-login is rejected without basic auth', async () => {\n    const tf = await prepareLoginProject(ctx, `verdaccio-login2-${id}`);\n    let loginFailed = false;\n    try {\n      await yarnLogin(ctx, tf, user1, password1, email1);\n    } catch {\n      loginFailed = true;\n    }\n    assert.ok(loginFailed, 'Legacy re-login for an existing user should fail without Basic auth');\n  });\n\n  await ctx.subTest('wrong password fails', async () => {\n    const tf = await prepareLoginProject(ctx, `verdaccio-login3-${id}`);\n    let loginFailed = false;\n    try {\n      await yarnLogin(ctx, tf, user1, 'wrong-password', email1);\n    } catch {\n      loginFailed = true;\n    }\n    assert.ok(loginFailed, 'Login with wrong password should have failed');\n  });\n\n  await ctx.subTest('login then publish', async () => {\n    const pkgName = `@verdaccio/login-pub-${id}`;\n    const publishUser = `login-pub-${id}`;\n    const publishPassword = 'publish-password-123';\n    const publishEmail = `${publishUser}@test.example.com`;\n    const tf = await createTempFolder(`login-pub-${id}`);\n    const yamlContent = YAML.dump({\n      npmRegistryServer: ctx.registryUrl,\n      enableImmutableInstalls: false,\n      unsafeHttpWhitelist: ['localhost'],\n    });\n    await writeFile(join(tf, '.yarnrc.yml'), yamlContent);\n    await writeFile(join(tf, 'package.json'), getPackageJSON(pkgName, '1.0.0'));\n    await writeFile(join(tf, 'README.md'), getREADME(pkgName));\n    if (ctx.adapter.importPlugin) {\n      await ctx.adapter.importPlugin(tf, 'npm-login');\n    }\n    await yarnLogin(ctx, tf, publishUser, publishPassword, publishEmail);\n    await ctx.adapter.exec({ cwd: tf }, 'install');\n    const pubResp = await ctx.adapter.exec({ cwd: tf }, 'publish');\n    assert.ok(\n      pubResp.stdout.includes('Package archive published'),\n      `Expected publish success but got \"${pubResp.stdout}\"`\n    );\n  });\n\n  await ctx.subTest('switch users', async () => {\n    const switchUser1 = `login-switch-a-${id}`;\n    const switchPassword1 = 'switch-password-123';\n    const switchEmail1 = `${switchUser1}@test.example.com`;\n    const user2 = `login-b-${id}`;\n    const password2 = 'other-password-456';\n    const email2 = `${user2}@test.example.com`;\n    const tf = await prepareLoginProject(ctx, `verdaccio-login5-${id}`);\n\n    await yarnLogin(ctx, tf, switchUser1, switchPassword1, switchEmail1);\n    const who1 = await yarnWhoami(ctx, tf);\n    assert.ok(who1.includes(switchUser1), `Expected \"${switchUser1}\" but got \"${who1}\"`);\n\n    await yarnLogin(ctx, tf, user2, password2, email2);\n    const who2 = await yarnWhoami(ctx, tf);\n    assert.ok(who2.includes(user2), `Expected \"${user2}\" after switch but got \"${who2}\"`);\n  });\n}\n\nexport const loginTest: TestDefinition = {\n  name: 'login',\n  requires: ['login'],\n  run: testLogin,\n};\n"],"mappings":";;;;;;;AASA,IAAM,QAAQ,WAAW,8BAA8B;;;;;AAMvD,eAAe,oBAAoB,KAAkB,MAA+B;CAClF,MAAM,4CAA4C,IAAI;CACtD,MAAM,aAAa,MAAM,iBAAiB,IAAI;CAC9C,MAAM,cAAc,KAAK,KAAK;EAC5B,mBAAmB,IAAI;EACvB,yBAAyB;EACzB,qBAAqB,CAAC,WAAW;CACnC,CAAC;CACD,MAAM,UAAU,KAAK,YAAY,aAAa,GAAG,WAAW;CAC5D,MAAM,UAAU,KAAK,YAAY,cAAc,GAAG,KAAK,UAAU;EAAE;EAAM,SAAS;CAAQ,CAAC,CAAC;CAC5F,IAAI,IAAI,QAAQ,cAAc;EAC5B,MAAM,sCAAsC,UAAU;EACtD,MAAM,IAAI,QAAQ,aAAa,YAAY,WAAW;CACxD;CACA,OAAO;AACT;AAEA,eAAe,UACb,KACA,KACA,MACA,UACA,OACA;CACA,MAAM,wBAAwB,IAAI;CAClC,OAAO,IAAI,QAAQ,KACjB,EAAE,IAAI,GACN,SACA,sBACA,UAAU,QACV,cAAc,YACd,WAAW,OACb;AACF;AAEA,eAAe,WAAW,KAAkB,KAA8B;CACxE,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,IAAI,GAAG,QAAQ;CACrD,MAAM,uBAAuB,KAAK,MAAM;CACxC,OAAO,KAAK;AACd;AAEA,eAAe,UAAU,KAAiC;CACxD,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,KAAK,IAAI;CAEf,IAAI,SAAS,eAAe;EAC1B,MAAM,0DAA0D,IAAI;EACpE;CACF;CAEA,MAAM,QAAQ,WAAW;CACzB,MAAM,YAAY;CAClB,MAAM,SAAS,GAAG,MAAM;CAExB,MAAM,IAAI,QAAQ,4BAA4B,YAAY;EACxD,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,IAAI;EAClE,MAAM,YAAY,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,MAAM;EACnE,OAAO,GACL,UAAU,OAAO,SAAS,WAAW,KAAK,UAAU,OAAO,SAAS,aAAa,GACjF,2CAA2C,UAAU,OAAO,EAC9D;EACA,MAAM,MAAM,MAAM,WAAW,KAAK,EAAE;EACpC,OAAO,GAAG,IAAI,SAAS,KAAK,GAAG,oBAAoB,MAAM,aAAa,IAAI,EAAE;CAC9E,CAAC;CAED,MAAM,IAAI,QAAQ,kDAAkD,YAAY;EAC9E,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,IAAI;EAClE,IAAI,cAAc;EAClB,IAAI;GACF,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,MAAM;EACnD,QAAQ;GACN,cAAc;EAChB;EACA,OAAO,GAAG,aAAa,qEAAqE;CAC9F,CAAC;CAED,MAAM,IAAI,QAAQ,wBAAwB,YAAY;EACpD,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,IAAI;EAClE,IAAI,cAAc;EAClB,IAAI;GACF,MAAM,UAAU,KAAK,IAAI,OAAO,kBAAkB,MAAM;EAC1D,QAAQ;GACN,cAAc;EAChB;EACA,OAAO,GAAG,aAAa,8CAA8C;CACvE,CAAC;CAED,MAAM,IAAI,QAAQ,sBAAsB,YAAY;EAClD,MAAM,UAAU,wBAAwB;EACxC,MAAM,cAAc,aAAa;EACjC,MAAM,kBAAkB;EACxB,MAAM,eAAe,GAAG,YAAY;EACpC,MAAM,KAAK,MAAM,iBAAiB,aAAa,IAAI;EACnD,MAAM,cAAc,KAAK,KAAK;GAC5B,mBAAmB,IAAI;GACvB,yBAAyB;GACzB,qBAAqB,CAAC,WAAW;EACnC,CAAC;EACD,MAAM,UAAU,KAAK,IAAI,aAAa,GAAG,WAAW;EACpD,MAAM,UAAU,KAAK,IAAI,cAAc,GAAG,eAAe,SAAS,OAAO,CAAC;EAC1E,MAAM,UAAU,KAAK,IAAI,WAAW,GAAG,UAAU,OAAO,CAAC;EACzD,IAAI,IAAI,QAAQ,cACd,MAAM,IAAI,QAAQ,aAAa,IAAI,WAAW;EAEhD,MAAM,UAAU,KAAK,IAAI,aAAa,iBAAiB,YAAY;EACnE,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,GAAG,GAAG,SAAS;EAC7C,MAAM,UAAU,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,GAAG,GAAG,SAAS;EAC7D,OAAO,GACL,QAAQ,OAAO,SAAS,2BAA2B,GACnD,qCAAqC,QAAQ,OAAO,EACtD;CACF,CAAC;CAED,MAAM,IAAI,QAAQ,gBAAgB,YAAY;EAC5C,MAAM,cAAc,kBAAkB;EACtC,MAAM,kBAAkB;EACxB,MAAM,eAAe,GAAG,YAAY;EACpC,MAAM,QAAQ,WAAW;EACzB,MAAM,YAAY;EAClB,MAAM,SAAS,GAAG,MAAM;EACxB,MAAM,KAAK,MAAM,oBAAoB,KAAK,oBAAoB,IAAI;EAElE,MAAM,UAAU,KAAK,IAAI,aAAa,iBAAiB,YAAY;EACnE,MAAM,OAAO,MAAM,WAAW,KAAK,EAAE;EACrC,OAAO,GAAG,KAAK,SAAS,WAAW,GAAG,aAAa,YAAY,aAAa,KAAK,EAAE;EAEnF,MAAM,UAAU,KAAK,IAAI,OAAO,WAAW,MAAM;EACjD,MAAM,OAAO,MAAM,WAAW,KAAK,EAAE;EACrC,OAAO,GAAG,KAAK,SAAS,KAAK,GAAG,aAAa,MAAM,0BAA0B,KAAK,EAAE;CACtF,CAAC;AACH;AAEA,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;AACP"}

package/build/esm/tests/ping.js.map

@@ -1 +1 @@
-{"version":3,"file":"ping.js","names":[],"sources":["../../../src/tests/ping.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testPing(ctx: TestContext): Promise<void> {\n  const type = ctx.adapter.type;\n  const needsProject = type === 'yarn-modern';\n  let cwd: string | undefined;\n\n  if (needsProject) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      `verdaccio-ping-${ctx.runId}`,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token\n    );\n    cwd = tempFolder;\n    if (ctx.adapter.importPlugin) {\n      await ctx.adapter.importPlugin(tempFolder, 'npm-ping');\n    }\n  }\n\n  const jsonFlag = type === 'yarn-modern' ? [] : ['--json'];\n  const resp = await ctx.adapter.exec(\n    { cwd },\n    'ping',\n    ...jsonFlag,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (type === 'yarn-modern') {\n    // yarn npm ping succeeding (exit code 0) is sufficient proof the registry is reachable\n    assert.ok(true, 'ping succeeded');\n  } else {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.strictEqual(\n      parsedBody.registry,\n      ctx.registryUrl + '/',\n      `Expected registry \"${ctx.registryUrl}/\" but got \"${parsedBody.registry}\"`\n    );\n  }\n}\n\nexport const pingTest: TestDefinition = {\n  name: 'ping',\n  requires: ['ping'],\n  run: testPing,\n};\n"],"mappings":";;AAIA,eAAe,SAAS,KAAiC;CACvD,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,eAAe,SAAS;CAC9B,IAAI;CAEJ,IAAI,cAAc;EAChB,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,kBAAkB,IAAI,SACtB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;EACD,MAAM;EACN,IAAI,IAAI,QAAQ,cACd,MAAM,IAAI,QAAQ,aAAa,YAAY,WAAW;;CAI1D,MAAM,WAAW,SAAS,gBAAgB,EAAE,GAAG,CAAC,SAAS;CACzD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,EACP,QACA,GAAG,UACH,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CAED,IAAI,SAAS,eAEX,OAAO,GAAG,MAAM,iBAAiB;MAC5B;EACL,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;EAC1C,OAAO,YACL,WAAW,UACX,IAAI,cAAc,KAClB,sBAAsB,IAAI,YAAY,cAAc,WAAW,SAAS,GACzE;;;AAIL,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;CACN"}
+{"version":3,"file":"ping.js","names":[],"sources":["../../../src/tests/ping.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testPing(ctx: TestContext): Promise<void> {\n  const type = ctx.adapter.type;\n  const needsProject = type === 'yarn-modern';\n  let cwd: string | undefined;\n\n  if (needsProject) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      `verdaccio-ping-${ctx.runId}`,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token\n    );\n    cwd = tempFolder;\n    if (ctx.adapter.importPlugin) {\n      await ctx.adapter.importPlugin(tempFolder, 'npm-ping');\n    }\n  }\n\n  const jsonFlag = type === 'yarn-modern' ? [] : ['--json'];\n  const resp = await ctx.adapter.exec(\n    { cwd },\n    'ping',\n    ...jsonFlag,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (type === 'yarn-modern') {\n    // yarn npm ping succeeding (exit code 0) is sufficient proof the registry is reachable\n    assert.ok(true, 'ping succeeded');\n  } else {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.strictEqual(\n      parsedBody.registry,\n      ctx.registryUrl + '/',\n      `Expected registry \"${ctx.registryUrl}/\" but got \"${parsedBody.registry}\"`\n    );\n  }\n}\n\nexport const pingTest: TestDefinition = {\n  name: 'ping',\n  requires: ['ping'],\n  run: testPing,\n};\n"],"mappings":";;AAIA,eAAe,SAAS,KAAiC;CACvD,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,eAAe,SAAS;CAC9B,IAAI;CAEJ,IAAI,cAAc;EAChB,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,kBAAkB,IAAI,SACtB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;EACA,MAAM;EACN,IAAI,IAAI,QAAQ,cACd,MAAM,IAAI,QAAQ,aAAa,YAAY,UAAU;CAEzD;CAEA,MAAM,WAAW,SAAS,gBAAgB,CAAC,IAAI,CAAC,QAAQ;CACxD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,IAAI,GACN,QACA,GAAG,UACH,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CAEA,IAAI,SAAS,eAEX,OAAO,GAAG,MAAM,gBAAgB;MAC3B;EACL,MAAM,aAAa,KAAK,MAAM,KAAK,MAAM;EACzC,OAAO,YACL,WAAW,UACX,IAAI,cAAc,KAClB,sBAAsB,IAAI,YAAY,cAAc,WAAW,SAAS,EAC1E;CACF;AACF;AAEA,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,MAAM;CACjB,KAAK;AACP"}

package/build/esm/tests/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","names":[],"sources":["../../../src/tests/publish.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testPublish(ctx: TestContext): Promise<void> {\n  const packages = [\n    `verdaccio-memory-${ctx.runId}`,\n    `verdaccio-${ctx.runId}`,\n    `@verdaccio/foo-${ctx.runId}`,\n    `@verdaccio/some-foo-${ctx.runId}`,\n  ];\n\n  const type = ctx.adapter.type;\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token\n    );\n\n    // yarn modern requires install before publish to generate lockfile\n    if (type === 'yarn-modern') {\n      await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'publish',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (type === 'yarn-modern') {\n      assert.ok(\n        resp.stdout.match(/Package archive published/),\n        `Expected \"Package archive published\" for ${pkgName} but got \"${resp.stdout}\"`\n      );\n    } else if (type === 'yarn-classic') {\n      // yarn classic --json outputs NDJSON — just verify no error exit (exit code 0 is enough)\n      assert.ok(resp.stdout.length > 0, `Expected publish output for ${pkgName}`);\n    } else if (type === 'bun') {\n      // bun publish outputs text confirmation — exit code 0 is sufficient\n      assert.ok(true, `Publish succeeded for ${pkgName}`);\n    } else {\n      // npm / pnpm\n      try {\n        const parsedBody = JSON.parse(resp.stdout);\n        assert.strictEqual(\n          parsedBody.name,\n          pkgName,\n          `Expected package name \"${pkgName}\" but got \"${parsedBody.name}\"`\n        );\n        assert.ok(parsedBody.files, `Expected files to be defined for ${pkgName}`);\n      } catch {\n        // pnpm v11+ native publish doesn't output JSON — exit code 0 is sufficient\n        assert.ok(true, `Publish succeeded for ${pkgName}`);\n      }\n    }\n  }\n}\n\nexport const publishTest: TestDefinition = {\n  name: 'publish',\n  requires: ['publish'],\n  run: testPublish,\n};\n"],"mappings":";;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,WAAW;EACf,oBAAoB,IAAI;EACxB,aAAa,IAAI;EACjB,kBAAkB,IAAI;EACtB,uBAAuB,IAAI;EAC5B;CAED,MAAM,OAAO,IAAI,QAAQ;CAEzB,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;EAGD,IAAI,SAAS,eACX,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,UAAU;EAGxD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,WACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAED,IAAI,SAAS,eACX,OAAO,GACL,KAAK,OAAO,MAAM,4BAA4B,EAC9C,4CAA4C,QAAQ,YAAY,KAAK,OAAO,GAC7E;OACI,IAAI,SAAS,gBAElB,OAAO,GAAG,KAAK,OAAO,SAAS,GAAG,+BAA+B,UAAU;OACtE,IAAI,SAAS,OAElB,OAAO,GAAG,MAAM,yBAAyB,UAAU;OAGnD,IAAI;GACF,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;GAC1C,OAAO,YACL,WAAW,MACX,SACA,0BAA0B,QAAQ,aAAa,WAAW,KAAK,GAChE;GACD,OAAO,GAAG,WAAW,OAAO,oCAAoC,UAAU;UACpE;GAEN,OAAO,GAAG,MAAM,yBAAyB,UAAU;;;;AAM3D,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}
+{"version":3,"file":"publish.js","names":[],"sources":["../../../src/tests/publish.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testPublish(ctx: TestContext): Promise<void> {\n  const packages = [\n    `verdaccio-memory-${ctx.runId}`,\n    `verdaccio-${ctx.runId}`,\n    `@verdaccio/foo-${ctx.runId}`,\n    `@verdaccio/some-foo-${ctx.runId}`,\n  ];\n\n  const type = ctx.adapter.type;\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token\n    );\n\n    // yarn modern requires install before publish to generate lockfile\n    if (type === 'yarn-modern') {\n      await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'publish',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (type === 'yarn-modern') {\n      assert.ok(\n        resp.stdout.match(/Package archive published/),\n        `Expected \"Package archive published\" for ${pkgName} but got \"${resp.stdout}\"`\n      );\n    } else if (type === 'yarn-classic') {\n      // yarn classic --json outputs NDJSON — just verify no error exit (exit code 0 is enough)\n      assert.ok(resp.stdout.length > 0, `Expected publish output for ${pkgName}`);\n    } else if (type === 'bun') {\n      // bun publish outputs text confirmation — exit code 0 is sufficient\n      assert.ok(true, `Publish succeeded for ${pkgName}`);\n    } else {\n      // npm / pnpm\n      try {\n        const parsedBody = JSON.parse(resp.stdout);\n        assert.strictEqual(\n          parsedBody.name,\n          pkgName,\n          `Expected package name \"${pkgName}\" but got \"${parsedBody.name}\"`\n        );\n        assert.ok(parsedBody.files, `Expected files to be defined for ${pkgName}`);\n      } catch {\n        // pnpm v11+ native publish doesn't output JSON — exit code 0 is sufficient\n        assert.ok(true, `Publish succeeded for ${pkgName}`);\n      }\n    }\n  }\n}\n\nexport const publishTest: TestDefinition = {\n  name: 'publish',\n  requires: ['publish'],\n  run: testPublish,\n};\n"],"mappings":";;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,WAAW;EACf,oBAAoB,IAAI;EACxB,aAAa,IAAI;EACjB,kBAAkB,IAAI;EACtB,uBAAuB,IAAI;CAC7B;CAEA,MAAM,OAAO,IAAI,QAAQ;CAEzB,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;EAGA,IAAI,SAAS,eACX,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;EAGvD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,WACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EAEA,IAAI,SAAS,eACX,OAAO,GACL,KAAK,OAAO,MAAM,2BAA2B,GAC7C,4CAA4C,QAAQ,YAAY,KAAK,OAAO,EAC9E;OACK,IAAI,SAAS,gBAElB,OAAO,GAAG,KAAK,OAAO,SAAS,GAAG,+BAA+B,SAAS;OACrE,IAAI,SAAS,OAElB,OAAO,GAAG,MAAM,yBAAyB,SAAS;OAGlD,IAAI;GACF,MAAM,aAAa,KAAK,MAAM,KAAK,MAAM;GACzC,OAAO,YACL,WAAW,MACX,SACA,0BAA0B,QAAQ,aAAa,WAAW,KAAK,EACjE;GACA,OAAO,GAAG,WAAW,OAAO,oCAAoC,SAAS;EAC3E,QAAQ;GAEN,OAAO,GAAG,MAAM,yBAAyB,SAAS;EACpD;CAEJ;AACF;AAEA,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,SAAS;CACpB,KAAK;AACP"}

package/build/esm/tests/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","names":[],"sources":["../../../src/tests/search.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testSearch(ctx: TestContext): Promise<void> {\n  const resp = await ctx.adapter.exec(\n    {},\n    'search',\n    '@verdaccio/cli',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  const parsedBody = JSON.parse(resp.stdout);\n  const pkgFind = parsedBody.find((item: any) => item.name === '@verdaccio/cli');\n  assert.ok(pkgFind, 'Expected to find @verdaccio/cli in search results');\n  assert.strictEqual(pkgFind.name, '@verdaccio/cli');\n}\n\nexport const searchTest: TestDefinition = {\n  name: 'search',\n  requires: ['search'],\n  run: testSearch,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAiC;CACzD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,EACF,UACA,kBACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CAED,MAAM,UADa,KAAK,MAAM,KAAK,OACnB,CAAW,MAAM,SAAc,KAAK,SAAS,iBAAiB;CAC9E,OAAO,GAAG,SAAS,oDAAoD;CACvE,OAAO,YAAY,QAAQ,MAAM,iBAAiB;;AAGpD,IAAa,aAA6B;CACxC,MAAM;CACN,UAAU,CAAC,SAAS;CACpB,KAAK;CACN"}
+{"version":3,"file":"search.js","names":[],"sources":["../../../src/tests/search.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testSearch(ctx: TestContext): Promise<void> {\n  const resp = await ctx.adapter.exec(\n    {},\n    'search',\n    '@verdaccio/cli',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  const parsedBody = JSON.parse(resp.stdout);\n  const pkgFind = parsedBody.find((item: any) => item.name === '@verdaccio/cli');\n  assert.ok(pkgFind, 'Expected to find @verdaccio/cli in search results');\n  assert.strictEqual(pkgFind.name, '@verdaccio/cli');\n}\n\nexport const searchTest: TestDefinition = {\n  name: 'search',\n  requires: ['search'],\n  run: testSearch,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAiC;CACzD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,CAAC,GACD,UACA,kBACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CAEA,MAAM,UADa,KAAK,MAAM,KAAK,MACnB,CAAA,CAAW,MAAM,SAAc,KAAK,SAAS,gBAAgB;CAC7E,OAAO,GAAG,SAAS,mDAAmD;CACtE,OAAO,YAAY,QAAQ,MAAM,gBAAgB;AACnD;AAEA,IAAa,aAA6B;CACxC,MAAM;CACN,UAAU,CAAC,QAAQ;CACnB,KAAK;AACP"}

package/build/esm/tests/unpublish.js.map

@@ -1 +1 @@
-{"version":3,"file":"unpublish.js","names":[],"sources":["../../../src/tests/unpublish.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function publishPkg(ctx: TestContext, tempFolder: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string, bump: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'version',\n    bump,\n    '--no--git-tag-version',\n    '--loglevel=info',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function testUnpublish(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Test 1: unpublish a full package\n  const pkgName = `@verdaccio/unpub1-${id}`;\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tempFolder);\n  await bumpVersion(ctx, tempFolder, 'minor');\n  await publishPkg(ctx, tempFolder);\n  await bumpVersion(ctx, tempFolder, 'minor');\n  await publishPkg(ctx, tempFolder);\n  await bumpVersion(ctx, tempFolder, 'major');\n  await publishPkg(ctx, tempFolder);\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'unpublish',\n    pkgName,\n    '--force',\n    '--loglevel=info',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.ok(\n    resp.stdout.includes(pkgName),\n    `Expected unpublish output to contain \"${pkgName}\" but got \"${resp.stdout}\"`\n  );\n\n  // Test 2: unpublish a specific version\n  const pkgName2 = `@verdaccio/unpub2-${id}`;\n  const { tempFolder: tf2 } = await ctx.adapter.prepareProject(\n    pkgName2,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf2);\n  await bumpVersion(ctx, tf2, 'minor');\n  await publishPkg(ctx, tf2);\n\n  const resp2 = await ctx.adapter.exec(\n    { cwd: tf2 },\n    'unpublish',\n    `${pkgName2}@1.0.0`,\n    '--force',\n    '--loglevel=info',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.ok(\n    resp2.stdout.includes(pkgName2),\n    `Expected unpublish output to contain \"${pkgName2}\" but got \"${resp2.stdout}\"`\n  );\n}\n\nexport const unpublishTest: TestDefinition = {\n  name: 'unpublish',\n  requires: ['unpublish'],\n  run: testUnpublish,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAkB,YAAoB;CAC9D,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;;AAGH,eAAe,YAAY,KAAkB,YAAoB,MAAc;CAC7E,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,MACA,yBACA,mBACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;;AAGH,eAAe,cAAc,KAAiC;CAC5D,MAAM,KAAK,IAAI;CAGf,MAAM,UAAU,qBAAqB;CACrC,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,MAAM,WAAW,KAAK,WAAW;CACjC,MAAM,YAAY,KAAK,YAAY,QAAQ;CAC3C,MAAM,WAAW,KAAK,WAAW;CACjC,MAAM,YAAY,KAAK,YAAY,QAAQ;CAC3C,MAAM,WAAW,KAAK,WAAW;CACjC,MAAM,YAAY,KAAK,YAAY,QAAQ;CAC3C,MAAM,WAAW,KAAK,WAAW;CAEjC,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,aACA,SACA,WACA,mBACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,OAAO,GACL,KAAK,OAAO,SAAS,QAAQ,EAC7B,yCAAyC,QAAQ,aAAa,KAAK,OAAO,GAC3E;CAGD,MAAM,WAAW,qBAAqB;CACtC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;CACD,MAAM,WAAW,KAAK,IAAI;CAC1B,MAAM,YAAY,KAAK,KAAK,QAAQ;CACpC,MAAM,WAAW,KAAK,IAAI;CAE1B,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,KAAK,EACZ,aACA,GAAG,SAAS,SACZ,WACA,mBACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;CACD,OAAO,GACL,MAAM,OAAO,SAAS,SAAS,EAC/B,yCAAyC,SAAS,aAAa,MAAM,OAAO,GAC7E;;AAGH,IAAa,gBAAgC;CAC3C,MAAM;CACN,UAAU,CAAC,YAAY;CACvB,KAAK;CACN"}
+{"version":3,"file":"unpublish.js","names":[],"sources":["../../../src/tests/unpublish.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function publishPkg(ctx: TestContext, tempFolder: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string, bump: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'version',\n    bump,\n    '--no--git-tag-version',\n    '--loglevel=info',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function testUnpublish(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Test 1: unpublish a full package\n  const pkgName = `@verdaccio/unpub1-${id}`;\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tempFolder);\n  await bumpVersion(ctx, tempFolder, 'minor');\n  await publishPkg(ctx, tempFolder);\n  await bumpVersion(ctx, tempFolder, 'minor');\n  await publishPkg(ctx, tempFolder);\n  await bumpVersion(ctx, tempFolder, 'major');\n  await publishPkg(ctx, tempFolder);\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'unpublish',\n    pkgName,\n    '--force',\n    '--loglevel=info',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.ok(\n    resp.stdout.includes(pkgName),\n    `Expected unpublish output to contain \"${pkgName}\" but got \"${resp.stdout}\"`\n  );\n\n  // Test 2: unpublish a specific version\n  const pkgName2 = `@verdaccio/unpub2-${id}`;\n  const { tempFolder: tf2 } = await ctx.adapter.prepareProject(\n    pkgName2,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf2);\n  await bumpVersion(ctx, tf2, 'minor');\n  await publishPkg(ctx, tf2);\n\n  const resp2 = await ctx.adapter.exec(\n    { cwd: tf2 },\n    'unpublish',\n    `${pkgName2}@1.0.0`,\n    '--force',\n    '--loglevel=info',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.ok(\n    resp2.stdout.includes(pkgName2),\n    `Expected unpublish output to contain \"${pkgName2}\" but got \"${resp2.stdout}\"`\n  );\n}\n\nexport const unpublishTest: TestDefinition = {\n  name: 'unpublish',\n  requires: ['unpublish'],\n  run: testUnpublish,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAkB,YAAoB;CAC9D,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AACF;AAEA,eAAe,YAAY,KAAkB,YAAoB,MAAc;CAC7E,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,MACA,yBACA,mBACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AACF;AAEA,eAAe,cAAc,KAAiC;CAC5D,MAAM,KAAK,IAAI;CAGf,MAAM,UAAU,qBAAqB;CACrC,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,UAAU;CAChC,MAAM,YAAY,KAAK,YAAY,OAAO;CAC1C,MAAM,WAAW,KAAK,UAAU;CAChC,MAAM,YAAY,KAAK,YAAY,OAAO;CAC1C,MAAM,WAAW,KAAK,UAAU;CAChC,MAAM,YAAY,KAAK,YAAY,OAAO;CAC1C,MAAM,WAAW,KAAK,UAAU;CAEhC,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,aACA,SACA,WACA,mBACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,GACL,KAAK,OAAO,SAAS,OAAO,GAC5B,yCAAyC,QAAQ,aAAa,KAAK,OAAO,EAC5E;CAGA,MAAM,WAAW,qBAAqB;CACtC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,KAAK,OAAO;CACnC,MAAM,WAAW,KAAK,GAAG;CAEzB,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,aACA,GAAG,SAAS,SACZ,WACA,mBACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,GACL,MAAM,OAAO,SAAS,QAAQ,GAC9B,yCAAyC,SAAS,aAAa,MAAM,OAAO,EAC9E;AACF;AAEA,IAAa,gBAAgC;CAC3C,MAAM;CACN,UAAU,CAAC,WAAW;CACtB,KAAK;AACP"}

package/build/esm/utils/info.js.map

@@ -1 +1 @@
-{"version":3,"file":"info.js","names":[],"sources":["../../../src/utils/info.ts"],"sourcesContent":["/**\n * Normalize the parsed output of `npm/pnpm info <pkg> --json`.\n *\n * npm 12+ wraps the result in a single-element JSON array\n * (e.g. `[{ \"name\": \"verdaccio\", ... }]`) for both full-packument and\n * version-specific queries, whereas older npm versions return a bare object.\n * When multiple results match a range, the array holds one entry per match;\n * the last entry is the highest (latest) version, which is what the tests want.\n *\n * Returns the bare object as-is for backward compatibility.\n */\nexport function normalizeInfo(parsed: any): any {\n  if (Array.isArray(parsed)) {\n    return parsed[parsed.length - 1];\n  }\n  return parsed;\n}\n\n/** Parse `info --json` stdout and normalize to a single info object. */\nexport function parseInfoJson(stdout: string): any {\n  return normalizeInfo(JSON.parse(stdout));\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,cAAc,QAAkB;CAC9C,IAAI,MAAM,QAAQ,OAAO,EACvB,OAAO,OAAO,OAAO,SAAS;CAEhC,OAAO;;;AAIT,SAAgB,cAAc,QAAqB;CACjD,OAAO,cAAc,KAAK,MAAM,OAAO,CAAC"}
+{"version":3,"file":"info.js","names":[],"sources":["../../../src/utils/info.ts"],"sourcesContent":["/**\n * Normalize the parsed output of `npm/pnpm info <pkg> --json`.\n *\n * npm 12+ wraps the result in a single-element JSON array\n * (e.g. `[{ \"name\": \"verdaccio\", ... }]`) for both full-packument and\n * version-specific queries, whereas older npm versions return a bare object.\n * When multiple results match a range, the array holds one entry per match;\n * the last entry is the highest (latest) version, which is what the tests want.\n *\n * Returns the bare object as-is for backward compatibility.\n */\nexport function normalizeInfo(parsed: any): any {\n  if (Array.isArray(parsed)) {\n    return parsed[parsed.length - 1];\n  }\n  return parsed;\n}\n\n/** Parse `info --json` stdout and normalize to a single info object. */\nexport function parseInfoJson(stdout: string): any {\n  return normalizeInfo(JSON.parse(stdout));\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,cAAc,QAAkB;CAC9C,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO,OAAO,OAAO,SAAS;CAEhC,OAAO;AACT;;AAGA,SAAgB,cAAc,QAAqB;CACjD,OAAO,cAAc,KAAK,MAAM,MAAM,CAAC;AACzC"}

package/build/esm/utils/process.js.map

@@ -1 +1 @@
-{"version":3,"file":"process.js","names":[],"sources":["../../../src/utils/process.ts"],"sourcesContent":["import { SpawnOptions, spawn } from 'child_process';\nimport buildDebug from 'debug';\nimport { basename } from 'path';\nimport { createInterface } from 'readline';\n\nimport { ExecOutput } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:process');\nconst debugRead = buildDebug('verdaccio:e2e-cli:line');\n\nlet _verbose = false;\n\nexport function setVerbose(v: boolean) {\n  _verbose = v;\n}\n\nconst COLORS = {\n  reset: '\\x1b[0m',\n  dim: '\\x1b[2m',\n  cyan: '\\x1b[36m',\n  green: '\\x1b[32m',\n  red: '\\x1b[31m',\n  yellow: '\\x1b[33m',\n};\n\nfunction shortCmd(cmd: string, args: string[]): string {\n  const bin = basename(cmd);\n  return `${bin} ${args.join(' ')}`;\n}\n\nexport async function exec(\n  options: SpawnOptions,\n  cmd: string,\n  args: string[]\n): Promise<ExecOutput> {\n  debug('start exec %o %o %o', options, cmd, args ? args.join(' ') : '');\n  let stdout = '';\n  let stderr = '';\n\n  if (_verbose) {\n    const cwd = options.cwd\n      ? ` ${COLORS.dim}(cwd: ${basename(String(options.cwd))})${COLORS.reset}`\n      : '';\n    process.stdout.write(`      ${COLORS.cyan}$${COLORS.reset} ${shortCmd(cmd, args)}${cwd}\\n`);\n  }\n\n  const spawnOptions: SpawnOptions = {\n    cwd: options.cwd,\n    stdio: options.stdio || 'pipe',\n    env: options.env || process.env,\n  };\n\n  if (process.platform.startsWith('win')) {\n    args.unshift('/c', cmd);\n    cmd = 'cmd.exe';\n    spawnOptions.stdio = 'pipe';\n  }\n\n  const start = Date.now();\n  const childProcess = spawn(cmd, args, spawnOptions);\n\n  if (childProcess.stdout) {\n    childProcess.stdout.on('data', (data) => {\n      debugRead('data %o', data.toString());\n    });\n    const rl = createInterface({\n      input: childProcess.stdout,\n      output: process.stdout,\n      terminal: false,\n    });\n\n    rl.on('line', function (line) {\n      debugRead('line %o', line);\n      stdout += line;\n    });\n  }\n\n  if (childProcess.stderr) {\n    childProcess.stderr.on('data', (data) => {\n      stderr += data.toString();\n    });\n  }\n\n  const err = new Error(`Running \"${cmd} ${args.join(' ')}\" returned error code `);\n  return new Promise((resolve, reject) => {\n    childProcess.on('exit', (code) => {\n      const duration = Date.now() - start;\n      debugRead('exit %o', code);\n\n      if (_verbose) {\n        const status = code\n          ? `${COLORS.red}exit ${code}${COLORS.reset}`\n          : `${COLORS.green}ok${COLORS.reset}`;\n        process.stdout.write(\n          `      ${COLORS.dim}  -> ${status} ${COLORS.dim}(${duration}ms)${COLORS.reset}\\n`\n        );\n      }\n\n      if (!code) {\n        resolve({ stdout, stderr });\n      } else {\n        err.message += `${code}...\\n\\nSTDOUT:\\n${stdout}\\n\\nSTDERR:\\n${stderr}\\n`;\n        reject(err);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,4BAA4B;AACrD,IAAM,YAAY,WAAW,yBAAyB;AAEtD,IAAI,WAAW;AAEf,SAAgB,WAAW,GAAY;CACrC,WAAW;;AAGb,IAAM,SAAS;CACb,OAAO;CACP,KAAK;CACL,MAAM;CACN,OAAO;CACP,KAAK;CACL,QAAQ;CACT;AAED,SAAS,SAAS,KAAa,MAAwB;CAErD,OAAO,GADK,SAAS,IACX,CAAI,GAAG,KAAK,KAAK,IAAI;;AAGjC,eAAsB,KACpB,SACA,KACA,MACqB;CACrB,MAAM,uBAAuB,SAAS,KAAK,OAAO,KAAK,KAAK,IAAI,GAAG,GAAG;CACtE,IAAI,SAAS;CACb,IAAI,SAAS;CAEb,IAAI,UAAU;EACZ,MAAM,MAAM,QAAQ,MAChB,IAAI,OAAO,IAAI,QAAQ,SAAS,OAAO,QAAQ,IAAI,CAAC,CAAC,GAAG,OAAO,UAC/D;EACJ,QAAQ,OAAO,MAAM,SAAS,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,SAAS,KAAK,KAAK,GAAG,IAAI,IAAI;;CAG7F,MAAM,eAA6B;EACjC,KAAK,QAAQ;EACb,OAAO,QAAQ,SAAS;EACxB,KAAK,QAAQ,OAAO,QAAQ;EAC7B;CAED,IAAI,QAAQ,SAAS,WAAW,MAAM,EAAE;EACtC,KAAK,QAAQ,MAAM,IAAI;EACvB,MAAM;EACN,aAAa,QAAQ;;CAGvB,MAAM,QAAQ,KAAK,KAAK;CACxB,MAAM,eAAe,MAAM,KAAK,MAAM,aAAa;CAEnD,IAAI,aAAa,QAAQ;EACvB,aAAa,OAAO,GAAG,SAAS,SAAS;GACvC,UAAU,WAAW,KAAK,UAAU,CAAC;IACrC;EAOF,gBAN2B;GACzB,OAAO,aAAa;GACpB,QAAQ,QAAQ;GAChB,UAAU;GACX,CAED,CAAG,GAAG,QAAQ,SAAU,MAAM;GAC5B,UAAU,WAAW,KAAK;GAC1B,UAAU;IACV;;CAGJ,IAAI,aAAa,QACf,aAAa,OAAO,GAAG,SAAS,SAAS;EACvC,UAAU,KAAK,UAAU;GACzB;CAGJ,MAAM,sBAAM,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,wBAAwB;CAChF,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,aAAa,GAAG,SAAS,SAAS;GAChC,MAAM,WAAW,KAAK,KAAK,GAAG;GAC9B,UAAU,WAAW,KAAK;GAE1B,IAAI,UAAU;IACZ,MAAM,SAAS,OACX,GAAG,OAAO,IAAI,OAAO,OAAO,OAAO,UACnC,GAAG,OAAO,MAAM,IAAI,OAAO;IAC/B,QAAQ,OAAO,MACb,SAAS,OAAO,IAAI,OAAO,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,KAAK,OAAO,MAAM,IAC/E;;GAGH,IAAI,CAAC,MACH,QAAQ;IAAE;IAAQ;IAAQ,CAAC;QACtB;IACL,IAAI,WAAW,GAAG,KAAK,kBAAkB,OAAO,eAAe,OAAO;IACtE,OAAO,IAAI;;IAEb;GACF"}
+{"version":3,"file":"process.js","names":[],"sources":["../../../src/utils/process.ts"],"sourcesContent":["import { SpawnOptions, spawn } from 'child_process';\nimport buildDebug from 'debug';\nimport { basename } from 'path';\nimport { createInterface } from 'readline';\n\nimport { ExecOutput } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:process');\nconst debugRead = buildDebug('verdaccio:e2e-cli:line');\n\nlet _verbose = false;\n\nexport function setVerbose(v: boolean) {\n  _verbose = v;\n}\n\nconst COLORS = {\n  reset: '\\x1b[0m',\n  dim: '\\x1b[2m',\n  cyan: '\\x1b[36m',\n  green: '\\x1b[32m',\n  red: '\\x1b[31m',\n  yellow: '\\x1b[33m',\n};\n\nfunction shortCmd(cmd: string, args: string[]): string {\n  const bin = basename(cmd);\n  return `${bin} ${args.join(' ')}`;\n}\n\nexport async function exec(\n  options: SpawnOptions,\n  cmd: string,\n  args: string[]\n): Promise<ExecOutput> {\n  debug('start exec %o %o %o', options, cmd, args ? args.join(' ') : '');\n  let stdout = '';\n  let stderr = '';\n\n  if (_verbose) {\n    const cwd = options.cwd\n      ? ` ${COLORS.dim}(cwd: ${basename(String(options.cwd))})${COLORS.reset}`\n      : '';\n    process.stdout.write(`      ${COLORS.cyan}$${COLORS.reset} ${shortCmd(cmd, args)}${cwd}\\n`);\n  }\n\n  const spawnOptions: SpawnOptions = {\n    cwd: options.cwd,\n    stdio: options.stdio || 'pipe',\n    env: options.env || process.env,\n  };\n\n  if (process.platform.startsWith('win')) {\n    args.unshift('/c', cmd);\n    cmd = 'cmd.exe';\n    spawnOptions.stdio = 'pipe';\n  }\n\n  const start = Date.now();\n  const childProcess = spawn(cmd, args, spawnOptions);\n\n  if (childProcess.stdout) {\n    childProcess.stdout.on('data', (data) => {\n      debugRead('data %o', data.toString());\n    });\n    const rl = createInterface({\n      input: childProcess.stdout,\n      output: process.stdout,\n      terminal: false,\n    });\n\n    rl.on('line', function (line) {\n      debugRead('line %o', line);\n      stdout += line;\n    });\n  }\n\n  if (childProcess.stderr) {\n    childProcess.stderr.on('data', (data) => {\n      stderr += data.toString();\n    });\n  }\n\n  const err = new Error(`Running \"${cmd} ${args.join(' ')}\" returned error code `);\n  return new Promise((resolve, reject) => {\n    childProcess.on('exit', (code) => {\n      const duration = Date.now() - start;\n      debugRead('exit %o', code);\n\n      if (_verbose) {\n        const status = code\n          ? `${COLORS.red}exit ${code}${COLORS.reset}`\n          : `${COLORS.green}ok${COLORS.reset}`;\n        process.stdout.write(\n          `      ${COLORS.dim}  -> ${status} ${COLORS.dim}(${duration}ms)${COLORS.reset}\\n`\n        );\n      }\n\n      if (!code) {\n        resolve({ stdout, stderr });\n      } else {\n        err.message += `${code}...\\n\\nSTDOUT:\\n${stdout}\\n\\nSTDERR:\\n${stderr}\\n`;\n        reject(err);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,2BAA2B;AACpD,IAAM,YAAY,WAAW,wBAAwB;AAErD,IAAI,WAAW;AAEf,SAAgB,WAAW,GAAY;CACrC,WAAW;AACb;AAEA,IAAM,SAAS;CACb,OAAO;CACP,KAAK;CACL,MAAM;CACN,OAAO;CACP,KAAK;CACL,QAAQ;AACV;AAEA,SAAS,SAAS,KAAa,MAAwB;CAErD,OAAO,GADK,SAAS,GACX,EAAI,GAAG,KAAK,KAAK,GAAG;AAChC;AAEA,eAAsB,KACpB,SACA,KACA,MACqB;CACrB,MAAM,uBAAuB,SAAS,KAAK,OAAO,KAAK,KAAK,GAAG,IAAI,EAAE;CACrE,IAAI,SAAS;CACb,IAAI,SAAS;CAEb,IAAI,UAAU;EACZ,MAAM,MAAM,QAAQ,MAChB,IAAI,OAAO,IAAI,QAAQ,SAAS,OAAO,QAAQ,GAAG,CAAC,EAAE,GAAG,OAAO,UAC/D;EACJ,QAAQ,OAAO,MAAM,SAAS,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,SAAS,KAAK,IAAI,IAAI,IAAI,GAAG;CAC5F;CAEA,MAAM,eAA6B;EACjC,KAAK,QAAQ;EACb,OAAO,QAAQ,SAAS;EACxB,KAAK,QAAQ,OAAO,QAAQ;CAC9B;CAEA,IAAI,QAAQ,SAAS,WAAW,KAAK,GAAG;EACtC,KAAK,QAAQ,MAAM,GAAG;EACtB,MAAM;EACN,aAAa,QAAQ;CACvB;CAEA,MAAM,QAAQ,KAAK,IAAI;CACvB,MAAM,eAAe,MAAM,KAAK,MAAM,YAAY;CAElD,IAAI,aAAa,QAAQ;EACvB,aAAa,OAAO,GAAG,SAAS,SAAS;GACvC,UAAU,WAAW,KAAK,SAAS,CAAC;EACtC,CAAC;EAOD,gBAN2B;GACzB,OAAO,aAAa;GACpB,QAAQ,QAAQ;GAChB,UAAU;EACZ,CAEA,CAAA,CAAG,GAAG,QAAQ,SAAU,MAAM;GAC5B,UAAU,WAAW,IAAI;GACzB,UAAU;EACZ,CAAC;CACH;CAEA,IAAI,aAAa,QACf,aAAa,OAAO,GAAG,SAAS,SAAS;EACvC,UAAU,KAAK,SAAS;CAC1B,CAAC;CAGH,MAAM,sBAAM,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,GAAG,EAAE,uBAAuB;CAC/E,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,aAAa,GAAG,SAAS,SAAS;GAChC,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,UAAU,WAAW,IAAI;GAEzB,IAAI,UAAU;IACZ,MAAM,SAAS,OACX,GAAG,OAAO,IAAI,OAAO,OAAO,OAAO,UACnC,GAAG,OAAO,MAAM,IAAI,OAAO;IAC/B,QAAQ,OAAO,MACb,SAAS,OAAO,IAAI,OAAO,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,KAAK,OAAO,MAAM,GAChF;GACF;GAEA,IAAI,CAAC,MACH,QAAQ;IAAE;IAAQ;GAAO,CAAC;QACrB;IACL,IAAI,WAAW,GAAG,KAAK,kBAAkB,OAAO,eAAe,OAAO;IACtE,OAAO,GAAG;GACZ;EACF,CAAC;CACH,CAAC;AACH"}

package/build/esm/utils/project.js.map

@@ -1 +1 @@
-{"version":3,"file":"project.js","names":[],"sources":["../../../src/utils/project.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { mkdirSync } from 'fs';\nimport { mkdtemp, writeFile } from 'fs/promises';\nimport { tmpdir } from 'os';\nimport { join } from 'path';\n\nconst debug = buildDebug('verdaccio:e2e-cli:project');\n\nexport async function createTempFolder(prefix: string): Promise<string> {\n  const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, '-');\n  debug('creating temp folder %o', sanitized);\n  return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));\n}\n\nexport function getPackageJSON(\n  packageName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): string {\n  debug('creating package.json %o', packageName);\n  const json = {\n    name: packageName,\n    version,\n    description: 'some cool project',\n    main: 'index.js',\n    scripts: {\n      test: 'echo exit 1',\n    },\n    dependencies,\n    devDependencies,\n    keywords: ['foo', 'bar'],\n    author: 'Verdaccio E2E <verdaccio@example.org>',\n    license: 'MIT',\n  };\n  return JSON.stringify(json);\n}\n\nexport function getREADME(packageName: string): string {\n  return `\n   # My README ${packageName}\n\n   some text\n\n   ## subtitle\n\n   more text\n  `;\n}\n\nexport async function prepareGenericEmptyProject(\n  packageName: string,\n  version: string,\n  port: number,\n  token: string,\n  registryDomain: string,\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): Promise<{ tempFolder: string }> {\n  debug('preparing generic project %o', packageName);\n  // `min-release-age=0` keeps the harness hermetic: npm 12 added a release-age\n  // cooldown that, if set in the developer's global ~/.npmrc, would reject the\n  // just-published packages these tests install (ETARGET / \"no matching version\n  // ... before <date>\"). Pinning it per-project overrides any global value.\n  // It's an npm-only key — pnpm (minimum-release-age) and yarn ignore it.\n  const getNPMrc = (port: number, token: string, registry: string) =>\n    `//localhost:${port}/:_authToken=${token}\\nregistry=${registry}\\nmin-release-age=0`;\n  const tempFolder = await createTempFolder('temp-folder');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    getPackageJSON(packageName, version, dependencies, devDependencies)\n  );\n  await writeFile(join(tempFolder, 'README.md'), getREADME(packageName));\n  await writeFile(join(tempFolder, '.npmrc'), getNPMrc(port, token, registryDomain));\n  return { tempFolder };\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,4BAA4B;AAErD,eAAsB,iBAAiB,QAAiC;CACtE,MAAM,YAAY,OAAO,QAAQ,mBAAmB,IAAI;CACxD,MAAM,2BAA2B,UAAU;CAC3C,OAAO,QAAQ,KAAK,QAAQ,EAAE,iBAAiB,UAAU,GAAG,CAAC;;AAG/D,SAAgB,eACd,aACA,UAAU,SACV,eAAuC,EAAE,EACzC,kBAA0C,EAAE,EACpC;CACR,MAAM,4BAA4B,YAAY;CAe9C,OAAO,KAAK,UAAU;EAbpB,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN,SAAS,EACP,MAAM,eACP;EACD;EACA;EACA,UAAU,CAAC,OAAO,MAAM;EACxB,QAAQ;EACR,SAAS;EAEW,CAAK;;AAG7B,SAAgB,UAAU,aAA6B;CACrD,OAAO;iBACQ,YAAY;;;;;;;;;AAU7B,eAAsB,2BACpB,aACA,SACA,MACA,OACA,gBACA,eAAuC,EAAE,EACzC,kBAA0C,EAAE,EACX;CACjC,MAAM,gCAAgC,YAAY;CAMlD,MAAM,YAAY,MAAc,OAAe,aAC7C,eAAe,KAAK,eAAe,MAAM,aAAa,SAAS;CACjE,MAAM,aAAa,MAAM,iBAAiB,cAAc;CACxD,MAAM,UACJ,KAAK,YAAY,eAAe,EAChC,eAAe,aAAa,SAAS,cAAc,gBAAgB,CACpE;CACD,MAAM,UAAU,KAAK,YAAY,YAAY,EAAE,UAAU,YAAY,CAAC;CACtE,MAAM,UAAU,KAAK,YAAY,SAAS,EAAE,SAAS,MAAM,OAAO,eAAe,CAAC;CAClF,OAAO,EAAE,YAAY"}
+{"version":3,"file":"project.js","names":[],"sources":["../../../src/utils/project.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { mkdirSync } from 'fs';\nimport { mkdtemp, writeFile } from 'fs/promises';\nimport { tmpdir } from 'os';\nimport { join } from 'path';\n\nconst debug = buildDebug('verdaccio:e2e-cli:project');\n\nexport async function createTempFolder(prefix: string): Promise<string> {\n  const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, '-');\n  debug('creating temp folder %o', sanitized);\n  return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));\n}\n\nexport function getPackageJSON(\n  packageName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): string {\n  debug('creating package.json %o', packageName);\n  const json = {\n    name: packageName,\n    version,\n    description: 'some cool project',\n    main: 'index.js',\n    scripts: {\n      test: 'echo exit 1',\n    },\n    dependencies,\n    devDependencies,\n    keywords: ['foo', 'bar'],\n    author: 'Verdaccio E2E <verdaccio@example.org>',\n    license: 'MIT',\n  };\n  return JSON.stringify(json);\n}\n\nexport function getREADME(packageName: string): string {\n  return `\n   # My README ${packageName}\n\n   some text\n\n   ## subtitle\n\n   more text\n  `;\n}\n\nexport async function prepareGenericEmptyProject(\n  packageName: string,\n  version: string,\n  port: number,\n  token: string,\n  registryDomain: string,\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): Promise<{ tempFolder: string }> {\n  debug('preparing generic project %o', packageName);\n  // `min-release-age=0` keeps the harness hermetic: npm 12 added a release-age\n  // cooldown that, if set in the developer's global ~/.npmrc, would reject the\n  // just-published packages these tests install (ETARGET / \"no matching version\n  // ... before <date>\"). Pinning it per-project overrides any global value.\n  // It's an npm-only key — pnpm (minimum-release-age) and yarn ignore it.\n  const getNPMrc = (port: number, token: string, registry: string) =>\n    `//localhost:${port}/:_authToken=${token}\\nregistry=${registry}\\nmin-release-age=0`;\n  const tempFolder = await createTempFolder('temp-folder');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    getPackageJSON(packageName, version, dependencies, devDependencies)\n  );\n  await writeFile(join(tempFolder, 'README.md'), getREADME(packageName));\n  await writeFile(join(tempFolder, '.npmrc'), getNPMrc(port, token, registryDomain));\n  return { tempFolder };\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;AAEpD,eAAsB,iBAAiB,QAAiC;CACtE,MAAM,YAAY,OAAO,QAAQ,mBAAmB,GAAG;CACvD,MAAM,2BAA2B,SAAS;CAC1C,OAAO,QAAQ,KAAK,OAAO,GAAG,iBAAiB,UAAU,EAAE,CAAC;AAC9D;AAEA,SAAgB,eACd,aACA,UAAU,SACV,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACnC;CACR,MAAM,4BAA4B,WAAW;CAe7C,OAAO,KAAK,UAAU;EAbpB,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN,SAAS,EACP,MAAM,cACR;EACA;EACA;EACA,UAAU,CAAC,OAAO,KAAK;EACvB,QAAQ;EACR,SAAS;CAEW,CAAI;AAC5B;AAEA,SAAgB,UAAU,aAA6B;CACrD,OAAO;iBACQ,YAAY;;;;;;;;AAQ7B;AAEA,eAAsB,2BACpB,aACA,SACA,MACA,OACA,gBACA,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACV;CACjC,MAAM,gCAAgC,WAAW;CAMjD,MAAM,YAAY,MAAc,OAAe,aAC7C,eAAe,KAAK,eAAe,MAAM,aAAa,SAAS;CACjE,MAAM,aAAa,MAAM,iBAAiB,aAAa;CACvD,MAAM,UACJ,KAAK,YAAY,cAAc,GAC/B,eAAe,aAAa,SAAS,cAAc,eAAe,CACpE;CACA,MAAM,UAAU,KAAK,YAAY,WAAW,GAAG,UAAU,WAAW,CAAC;CACrE,MAAM,UAAU,KAAK,YAAY,QAAQ,GAAG,SAAS,MAAM,OAAO,cAAc,CAAC;CACjF,OAAO,EAAE,WAAW;AACtB"}