@verdaccio/e2e-cli 2.10.4 → 3.1.0

package/build/esm/utils/mock-uplink.js

@@ -0,0 +1,194 @@
+import { computeDist } from "./http-client.js";
+import buildDebug from "debug";
+import { randomBytes } from "crypto";
+import { createServer } from "http";
+//#region src/utils/mock-uplink.ts
+var debug = buildDebug("verdaccio:e2e-cli:mock-uplink");
+/**
+* Minimal controllable npm uplink used by scenario:uplink-failure.
+*
+* The registry under test is configured (see --print-config) to proxy the
+* `e2e-uplink-*` package pattern to this server, so the scenario can flip the
+* uplink between healthy, dropping connections mid-tarball, slow, and down.
+*/
+var MockUplink = class {
+	port;
+	mode = "ok";
+	requests = [];
+	server;
+	packages = /* @__PURE__ */ new Map();
+	searchResults = [];
+	constructor(port) {
+		this.port = port;
+	}
+	/** Register a package served by this uplink; tarball is random (incompressible) bytes. */
+	addPackage(name, tarballBytes = 65536) {
+		const tarball = randomBytes(tarballBytes);
+		const { shasum, integrity } = computeDist(tarball);
+		const pkg = {
+			name,
+			version: "1.0.0",
+			tarball,
+			shasum,
+			integrity
+		};
+		this.packages.set(name, pkg);
+		return pkg;
+	}
+	/** Register a result served by the /-/v1/search endpoint. */
+	addSearchResult(name, version = "1.0.0") {
+		this.searchResults.push({
+			name,
+			version
+		});
+	}
+	/**
+	* npmjs-faithful /-/v1/search: filters by `text` substring, applies
+	* `from`/`size` itself (like registry.npmjs.org does) and reports the real
+	* `total` of matches. Mimicking the upstream offsetting is what exposes
+	* double pagination in the registry under test.
+	*/
+	searchResponse(url) {
+		const text = url.searchParams.get("text") ?? "";
+		const from = Math.max(0, parseInt(url.searchParams.get("from") ?? "0", 10) || 0);
+		const size = Math.max(0, parseInt(url.searchParams.get("size") ?? "20", 10) || 20);
+		const matches = this.searchResults.filter((r) => r.name.includes(text));
+		const page = matches.slice(from, from + size);
+		return JSON.stringify({
+			objects: page.map((r) => ({
+				package: {
+					name: r.name,
+					version: r.version,
+					description: "mock uplink search result",
+					date: "2020-01-01T00:00:00.000Z",
+					maintainers: [{
+						username: "mock-uplink",
+						email: "mock@example.org"
+					}],
+					links: { npm: `http://localhost:${this.port}/${r.name}` }
+				},
+				score: {
+					final: 1,
+					detail: {
+						quality: 1,
+						popularity: 1,
+						maintenance: 1
+					}
+				},
+				searchScore: 1,
+				flags: {}
+			})),
+			total: matches.length,
+			time: (/* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z")).toISOString()
+		});
+	}
+	packument(pkg) {
+		const tarballUrl = `http://localhost:${this.port}/${pkg.name}/-/${pkg.name}-${pkg.version}.tgz`;
+		return JSON.stringify({
+			name: pkg.name,
+			"dist-tags": { latest: pkg.version },
+			versions: { [pkg.version]: {
+				name: pkg.name,
+				version: pkg.version,
+				description: "mock uplink package",
+				dist: {
+					tarball: tarballUrl,
+					shasum: pkg.shasum,
+					integrity: pkg.integrity
+				}
+			} },
+			time: {
+				created: "2020-01-01T00:00:00.000Z",
+				modified: "2020-01-01T00:00:00.000Z",
+				[pkg.version]: "2020-01-01T00:00:00.000Z"
+			}
+		});
+	}
+	start() {
+		this.server = createServer((req, res) => {
+			const url = req.url || "";
+			this.requests.push(url);
+			debug("mock uplink %s %s (mode: %s)", req.method, url, this.mode);
+			const respond = () => {
+				if (this.mode === "error-500") {
+					res.writeHead(500, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({ error: "mock uplink internal error" }));
+					return;
+				}
+				if (url.startsWith("/-/v1/search")) {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(this.searchResponse(new URL(url, `http://localhost:${this.port}`)));
+					return;
+				}
+				const tarballSep = url.indexOf("/-/");
+				if (tarballSep > 0 && url.endsWith(".tgz")) {
+					const pkg = this.packages.get(decodeURIComponent(url.slice(1, tarballSep)));
+					if (!pkg) {
+						res.writeHead(404, { "Content-Type": "application/json" });
+						res.end(JSON.stringify({ error: "not found" }));
+						return;
+					}
+					if (this.mode === "drop-mid-stream") {
+						res.writeHead(200, {
+							"Content-Type": "application/octet-stream",
+							"Content-Length": String(pkg.tarball.length)
+						});
+						res.write(pkg.tarball.subarray(0, Math.floor(pkg.tarball.length / 2)));
+						setTimeout(() => res.socket?.destroy(), 50);
+						return;
+					}
+					res.writeHead(200, {
+						"Content-Type": "application/octet-stream",
+						"Content-Length": String(pkg.tarball.length)
+					});
+					res.end(pkg.tarball);
+					return;
+				}
+				const pkg = this.packages.get(decodeURIComponent(url.slice(1)));
+				if (!pkg) {
+					res.writeHead(404, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({ error: "not found" }));
+					return;
+				}
+				res.writeHead(200, { "Content-Type": "application/json" });
+				res.end(this.packument(pkg));
+			};
+			const safeRespond = () => {
+				try {
+					respond();
+				} catch (err) {
+					debug("mock uplink response failed (socket gone?): %s", err);
+				}
+			};
+			if (this.mode === "slow") {
+				const timer = setTimeout(safeRespond, 1e4);
+				res.socket?.once("close", () => clearTimeout(timer));
+			} else safeRespond();
+		});
+		return new Promise((resolve, reject) => {
+			this.server.once("error", reject);
+			this.server.listen(this.port, () => {
+				debug("mock uplink listening on %d", this.port);
+				resolve();
+			});
+		});
+	}
+	stop() {
+		return new Promise((resolve) => {
+			if (!this.server) {
+				resolve();
+				return;
+			}
+			this.server.closeAllConnections?.();
+			this.server.close(() => {
+				debug("mock uplink stopped");
+				this.server = void 0;
+				resolve();
+			});
+		});
+	}
+};
+//#endregion
+export { MockUplink };
+
+//# sourceMappingURL=mock-uplink.js.map

package/build/esm/utils/mock-uplink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-uplink.js","names":[],"sources":["../../../src/utils/mock-uplink.ts"],"sourcesContent":["import { randomBytes } from 'crypto';\nimport buildDebug from 'debug';\nimport { Server, createServer } from 'http';\n\nimport { computeDist } from './http-client';\n\nconst debug = buildDebug('verdaccio:e2e-cli:mock-uplink');\n\nexport type UplinkMode =\n  /** Serve packuments and tarballs normally */\n  | 'ok'\n  /** Send tarball headers + half the body, then destroy the socket */\n  | 'drop-mid-stream'\n  /** Delay every response long enough to trip the registry's uplink timeout */\n  | 'slow'\n  /** Respond 500 to everything */\n  | 'error-500';\n\ntype MockPackage = {\n  name: string;\n  version: string;\n  tarball: Buffer;\n  shasum: string;\n  integrity: string;\n};\n\n/**\n * Minimal controllable npm uplink used by scenario:uplink-failure.\n *\n * The registry under test is configured (see --print-config) to proxy the\n * `e2e-uplink-*` package pattern to this server, so the scenario can flip the\n * uplink between healthy, dropping connections mid-tarball, slow, and down.\n */\nexport class MockUplink {\n  public mode: UplinkMode = 'ok';\n  public requests: string[] = [];\n  private server?: Server;\n  private packages = new Map<string, MockPackage>();\n  private searchResults: { name: string; version: string }[] = [];\n\n  constructor(public readonly port: number) {}\n\n  /** Register a package served by this uplink; tarball is random (incompressible) bytes. */\n  addPackage(name: string, tarballBytes = 64 * 1024): MockPackage {\n    const tarball = randomBytes(tarballBytes);\n    const { shasum, integrity } = computeDist(tarball);\n    const pkg: MockPackage = { name, version: '1.0.0', tarball, shasum, integrity };\n    this.packages.set(name, pkg);\n    return pkg;\n  }\n\n  /** Register a result served by the /-/v1/search endpoint. */\n  addSearchResult(name: string, version = '1.0.0'): void {\n    this.searchResults.push({ name, version });\n  }\n\n  /**\n   * npmjs-faithful /-/v1/search: filters by `text` substring, applies\n   * `from`/`size` itself (like registry.npmjs.org does) and reports the real\n   * `total` of matches. Mimicking the upstream offsetting is what exposes\n   * double pagination in the registry under test.\n   */\n  private searchResponse(url: URL): string {\n    const text = url.searchParams.get('text') ?? '';\n    const from = Math.max(0, parseInt(url.searchParams.get('from') ?? '0', 10) || 0);\n    const size = Math.max(0, parseInt(url.searchParams.get('size') ?? '20', 10) || 20);\n    const matches = this.searchResults.filter((r) => r.name.includes(text));\n    const page = matches.slice(from, from + size);\n    return JSON.stringify({\n      objects: page.map((r) => ({\n        package: {\n          name: r.name,\n          version: r.version,\n          description: 'mock uplink search result',\n          date: '2020-01-01T00:00:00.000Z',\n          maintainers: [{ username: 'mock-uplink', email: 'mock@example.org' }],\n          links: { npm: `http://localhost:${this.port}/${r.name}` },\n        },\n        score: { final: 1, detail: { quality: 1, popularity: 1, maintenance: 1 } },\n        searchScore: 1,\n        flags: {},\n      })),\n      total: matches.length,\n      time: new Date('2020-01-01T00:00:00.000Z').toISOString(),\n    });\n  }\n\n  private packument(pkg: MockPackage): string {\n    const tarballUrl = `http://localhost:${this.port}/${pkg.name}/-/${pkg.name}-${pkg.version}.tgz`;\n    return JSON.stringify({\n      name: pkg.name,\n      'dist-tags': { latest: pkg.version },\n      versions: {\n        [pkg.version]: {\n          name: pkg.name,\n          version: pkg.version,\n          description: 'mock uplink package',\n          dist: { tarball: tarballUrl, shasum: pkg.shasum, integrity: pkg.integrity },\n        },\n      },\n      time: {\n        created: '2020-01-01T00:00:00.000Z',\n        modified: '2020-01-01T00:00:00.000Z',\n        [pkg.version]: '2020-01-01T00:00:00.000Z',\n      },\n    });\n  }\n\n  start(): Promise<void> {\n    this.server = createServer((req, res) => {\n      const url = req.url || '';\n      this.requests.push(url);\n      debug('mock uplink %s %s (mode: %s)', req.method, url, this.mode);\n\n      const respond = () => {\n        if (this.mode === 'error-500') {\n          res.writeHead(500, { 'Content-Type': 'application/json' });\n          res.end(JSON.stringify({ error: 'mock uplink internal error' }));\n          return;\n        }\n\n        // Search route: /-/v1/search?text=...&from=...&size=...\n        if (url.startsWith('/-/v1/search')) {\n          res.writeHead(200, { 'Content-Type': 'application/json' });\n          res.end(this.searchResponse(new URL(url, `http://localhost:${this.port}`)));\n          return;\n        }\n\n        // Tarball route: /<name>/-/<file>.tgz — parsed without a regex to\n        // avoid backtracking on untrusted input (CodeQL js/polynomial-redos).\n        const tarballSep = url.indexOf('/-/');\n        if (tarballSep > 0 && url.endsWith('.tgz')) {\n          const pkg = this.packages.get(decodeURIComponent(url.slice(1, tarballSep)));\n          if (!pkg) {\n            res.writeHead(404, { 'Content-Type': 'application/json' });\n            res.end(JSON.stringify({ error: 'not found' }));\n            return;\n          }\n          if (this.mode === 'drop-mid-stream') {\n            res.writeHead(200, {\n              'Content-Type': 'application/octet-stream',\n              'Content-Length': String(pkg.tarball.length),\n            });\n            res.write(pkg.tarball.subarray(0, Math.floor(pkg.tarball.length / 2)));\n            // Kill the connection before the body completes.\n            setTimeout(() => res.socket?.destroy(), 50);\n            return;\n          }\n          res.writeHead(200, {\n            'Content-Type': 'application/octet-stream',\n            'Content-Length': String(pkg.tarball.length),\n          });\n          res.end(pkg.tarball);\n          return;\n        }\n\n        // Packument route: /<name>\n        const pkg = this.packages.get(decodeURIComponent(url.slice(1)));\n        if (!pkg) {\n          res.writeHead(404, { 'Content-Type': 'application/json' });\n          res.end(JSON.stringify({ error: 'not found' }));\n          return;\n        }\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(this.packument(pkg));\n      };\n\n      // The registry (or a stopped server) may have torn the socket down by the\n      // time a delayed response fires — never let that crash the mock.\n      const safeRespond = () => {\n        try {\n          respond();\n        } catch (err) {\n          debug('mock uplink response failed (socket gone?): %s', err);\n        }\n      };\n\n      if (this.mode === 'slow') {\n        // Longer than the uplink timeout configured for the e2e registry (3s).\n        const timer = setTimeout(safeRespond, 10_000);\n        res.socket?.once('close', () => clearTimeout(timer));\n      } else {\n        safeRespond();\n      }\n    });\n\n    return new Promise((resolve, reject) => {\n      this.server!.once('error', reject);\n      this.server!.listen(this.port, () => {\n        debug('mock uplink listening on %d', this.port);\n        resolve();\n      });\n    });\n  }\n\n  stop(): Promise<void> {\n    return new Promise((resolve) => {\n      if (!this.server) {\n        resolve();\n        return;\n      }\n      // closeAllConnections drops keep-alive sockets so close() completes.\n      this.server.closeAllConnections?.();\n      this.server.close(() => {\n        debug('mock uplink stopped');\n        this.server = undefined;\n        resolve();\n      });\n    });\n  }\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,+BAA+B;;;;;;;;AA2BxD,IAAa,aAAb,MAAwB;CAOM;CAN5B,OAA0B;CAC1B,WAA4B,CAAC;CAC7B;CACA,2BAAmB,IAAI,IAAyB;CAChD,gBAA6D,CAAC;CAE9D,YAAY,MAA8B;EAAd,KAAA,OAAA;CAAe;;CAG3C,WAAW,MAAc,eAAe,OAAwB;EAC9D,MAAM,UAAU,YAAY,YAAY;EACxC,MAAM,EAAE,QAAQ,cAAc,YAAY,OAAO;EACjD,MAAM,MAAmB;GAAE;GAAM,SAAS;GAAS;GAAS;GAAQ;EAAU;EAC9E,KAAK,SAAS,IAAI,MAAM,GAAG;EAC3B,OAAO;CACT;;CAGA,gBAAgB,MAAc,UAAU,SAAe;EACrD,KAAK,cAAc,KAAK;GAAE;GAAM;EAAQ,CAAC;CAC3C;;;;;;;CAQA,eAAuB,KAAkB;EACvC,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK;EAC7C,MAAM,OAAO,KAAK,IAAI,GAAG,SAAS,IAAI,aAAa,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,CAAC;EAC/E,MAAM,OAAO,KAAK,IAAI,GAAG,SAAS,IAAI,aAAa,IAAI,MAAM,KAAK,MAAM,EAAE,KAAK,EAAE;EACjF,MAAM,UAAU,KAAK,cAAc,QAAQ,MAAM,EAAE,KAAK,SAAS,IAAI,CAAC;EACtE,MAAM,OAAO,QAAQ,MAAM,MAAM,OAAO,IAAI;EAC5C,OAAO,KAAK,UAAU;GACpB,SAAS,KAAK,KAAK,OAAO;IACxB,SAAS;KACP,MAAM,EAAE;KACR,SAAS,EAAE;KACX,aAAa;KACb,MAAM;KACN,aAAa,CAAC;MAAE,UAAU;MAAe,OAAO;KAAmB,CAAC;KACpE,OAAO,EAAE,KAAK,oBAAoB,KAAK,KAAK,GAAG,EAAE,OAAO;IAC1D;IACA,OAAO;KAAE,OAAO;KAAG,QAAQ;MAAE,SAAS;MAAG,YAAY;MAAG,aAAa;KAAE;IAAE;IACzE,aAAa;IACb,OAAO,CAAC;GACV,EAAE;GACF,OAAO,QAAQ;GACf,uBAAM,IAAI,KAAK,0BAA0B,EAAA,CAAE,YAAY;EACzD,CAAC;CACH;CAEA,UAAkB,KAA0B;EAC1C,MAAM,aAAa,oBAAoB,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,KAAK,GAAG,IAAI,QAAQ;EAC1F,OAAO,KAAK,UAAU;GACpB,MAAM,IAAI;GACV,aAAa,EAAE,QAAQ,IAAI,QAAQ;GACnC,UAAU,GACP,IAAI,UAAU;IACb,MAAM,IAAI;IACV,SAAS,IAAI;IACb,aAAa;IACb,MAAM;KAAE,SAAS;KAAY,QAAQ,IAAI;KAAQ,WAAW,IAAI;IAAU;GAC5E,EACF;GACA,MAAM;IACJ,SAAS;IACT,UAAU;KACT,IAAI,UAAU;GACjB;EACF,CAAC;CACH;CAEA,QAAuB;EACrB,KAAK,SAAS,cAAc,KAAK,QAAQ;GACvC,MAAM,MAAM,IAAI,OAAO;GACvB,KAAK,SAAS,KAAK,GAAG;GACtB,MAAM,gCAAgC,IAAI,QAAQ,KAAK,KAAK,IAAI;GAEhE,MAAM,gBAAgB;IACpB,IAAI,KAAK,SAAS,aAAa;KAC7B,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;KACzD,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,6BAA6B,CAAC,CAAC;KAC/D;IACF;IAGA,IAAI,IAAI,WAAW,cAAc,GAAG;KAClC,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;KACzD,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,oBAAoB,KAAK,MAAM,CAAC,CAAC;KAC1E;IACF;IAIA,MAAM,aAAa,IAAI,QAAQ,KAAK;IACpC,IAAI,aAAa,KAAK,IAAI,SAAS,MAAM,GAAG;KAC1C,MAAM,MAAM,KAAK,SAAS,IAAI,mBAAmB,IAAI,MAAM,GAAG,UAAU,CAAC,CAAC;KAC1E,IAAI,CAAC,KAAK;MACR,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;MACzD,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,YAAY,CAAC,CAAC;MAC9C;KACF;KACA,IAAI,KAAK,SAAS,mBAAmB;MACnC,IAAI,UAAU,KAAK;OACjB,gBAAgB;OAChB,kBAAkB,OAAO,IAAI,QAAQ,MAAM;MAC7C,CAAC;MACD,IAAI,MAAM,IAAI,QAAQ,SAAS,GAAG,KAAK,MAAM,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC;MAErE,iBAAiB,IAAI,QAAQ,QAAQ,GAAG,EAAE;MAC1C;KACF;KACA,IAAI,UAAU,KAAK;MACjB,gBAAgB;MAChB,kBAAkB,OAAO,IAAI,QAAQ,MAAM;KAC7C,CAAC;KACD,IAAI,IAAI,IAAI,OAAO;KACnB;IACF;IAGA,MAAM,MAAM,KAAK,SAAS,IAAI,mBAAmB,IAAI,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK;KACR,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;KACzD,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,YAAY,CAAC,CAAC;KAC9C;IACF;IACA,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU,GAAG,CAAC;GAC7B;GAIA,MAAM,oBAAoB;IACxB,IAAI;KACF,QAAQ;IACV,SAAS,KAAK;KACZ,MAAM,kDAAkD,GAAG;IAC7D;GACF;GAEA,IAAI,KAAK,SAAS,QAAQ;IAExB,MAAM,QAAQ,WAAW,aAAa,GAAM;IAC5C,IAAI,QAAQ,KAAK,eAAe,aAAa,KAAK,CAAC;GACrD,OACE,YAAY;EAEhB,CAAC;EAED,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,OAAQ,KAAK,SAAS,MAAM;GACjC,KAAK,OAAQ,OAAO,KAAK,YAAY;IACnC,MAAM,+BAA+B,KAAK,IAAI;IAC9C,QAAQ;GACV,CAAC;EACH,CAAC;CACH;CAEA,OAAsB;EACpB,OAAO,IAAI,SAAS,YAAY;GAC9B,IAAI,CAAC,KAAK,QAAQ;IAChB,QAAQ;IACR;GACF;GAEA,KAAK,OAAO,sBAAsB;GAClC,KAAK,OAAO,YAAY;IACtB,MAAM,qBAAqB;IAC3B,KAAK,SAAS,KAAA;IACd,QAAQ;GACV,CAAC;EACH,CAAC;CACH;AACF"}

package/build/esm/utils/process.js

@@ -2,6 +2,7 @@ import buildDebug from "debug";
 import { spawn } from "child_process";
 import { basename } from "path";
 import { createInterface } from "readline";
+import { format } from "util";
 //#region src/utils/process.ts
 var debug = buildDebug("verdaccio:e2e-cli:process");
 var debugRead = buildDebug("verdaccio:e2e-cli:line");
@@ -20,6 +21,15 @@ var COLORS = {
 function shortCmd(cmd, args) {
 	return `${basename(cmd)} ${args.join(" ")}`;
 }
+/**
+* Always-on scenario tracing, printed inline with the test output in the same
+* style as the verbose `$ <command>` lines — so a red scenario explains what
+* it actually saw (statuses, headers, bodies, timings) in any run, CI or
+* local, without a reproduction. Accepts util.format tokens (%s %d %j %o).
+*/
+function trace(fmt, ...args) {
+	process.stdout.write(`      ${COLORS.dim}» ${format(fmt, ...args)}${COLORS.reset}\n`);
+}
 async function exec(options, cmd, args) {
 	debug("start exec %o %o %o", options, cmd, args ? args.join(" ") : "");
 	let stdout = "";
@@ -77,6 +87,6 @@ async function exec(options, cmd, args) {
 	});
 }
 //#endregion
-export { exec, setVerbose };
+export { exec, setVerbose, trace };
 
 //# sourceMappingURL=process.js.map

package/build/esm/utils/process.js.map

@@ -1 +1 @@
-{"version":3,"file":"process.js","names":[],"sources":["../../../src/utils/process.ts"],"sourcesContent":["import { SpawnOptions, spawn } from 'child_process';\nimport buildDebug from 'debug';\nimport { basename } from 'path';\nimport { createInterface } from 'readline';\n\nimport { ExecOutput } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:process');\nconst debugRead = buildDebug('verdaccio:e2e-cli:line');\n\nlet _verbose = false;\n\nexport function setVerbose(v: boolean) {\n  _verbose = v;\n}\n\nconst COLORS = {\n  reset: '\\x1b[0m',\n  dim: '\\x1b[2m',\n  cyan: '\\x1b[36m',\n  green: '\\x1b[32m',\n  red: '\\x1b[31m',\n  yellow: '\\x1b[33m',\n};\n\nfunction shortCmd(cmd: string, args: string[]): string {\n  const bin = basename(cmd);\n  return `${bin} ${args.join(' ')}`;\n}\n\nexport async function exec(\n  options: SpawnOptions,\n  cmd: string,\n  args: string[]\n): Promise<ExecOutput> {\n  debug('start exec %o %o %o', options, cmd, args ? args.join(' ') : '');\n  let stdout = '';\n  let stderr = '';\n\n  if (_verbose) {\n    const cwd = options.cwd\n      ? ` ${COLORS.dim}(cwd: ${basename(String(options.cwd))})${COLORS.reset}`\n      : '';\n    process.stdout.write(`      ${COLORS.cyan}$${COLORS.reset} ${shortCmd(cmd, args)}${cwd}\\n`);\n  }\n\n  const spawnOptions: SpawnOptions = {\n    cwd: options.cwd,\n    stdio: options.stdio || 'pipe',\n    env: options.env || process.env,\n  };\n\n  if (process.platform.startsWith('win')) {\n    args.unshift('/c', cmd);\n    cmd = 'cmd.exe';\n    spawnOptions.stdio = 'pipe';\n  }\n\n  const start = Date.now();\n  const childProcess = spawn(cmd, args, spawnOptions);\n\n  if (childProcess.stdout) {\n    childProcess.stdout.on('data', (data) => {\n      debugRead('data %o', data.toString());\n    });\n    const rl = createInterface({\n      input: childProcess.stdout,\n      output: process.stdout,\n      terminal: false,\n    });\n\n    rl.on('line', function (line) {\n      debugRead('line %o', line);\n      stdout += line;\n    });\n  }\n\n  if (childProcess.stderr) {\n    childProcess.stderr.on('data', (data) => {\n      stderr += data.toString();\n    });\n  }\n\n  const err = new Error(`Running \"${cmd} ${args.join(' ')}\" returned error code `);\n  return new Promise((resolve, reject) => {\n    childProcess.on('exit', (code) => {\n      const duration = Date.now() - start;\n      debugRead('exit %o', code);\n\n      if (_verbose) {\n        const status = code\n          ? `${COLORS.red}exit ${code}${COLORS.reset}`\n          : `${COLORS.green}ok${COLORS.reset}`;\n        process.stdout.write(\n          `      ${COLORS.dim}  -> ${status} ${COLORS.dim}(${duration}ms)${COLORS.reset}\\n`\n        );\n      }\n\n      if (!code) {\n        resolve({ stdout, stderr });\n      } else {\n        err.message += `${code}...\\n\\nSTDOUT:\\n${stdout}\\n\\nSTDERR:\\n${stderr}\\n`;\n        reject(err);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,2BAA2B;AACpD,IAAM,YAAY,WAAW,wBAAwB;AAErD,IAAI,WAAW;AAEf,SAAgB,WAAW,GAAY;CACrC,WAAW;AACb;AAEA,IAAM,SAAS;CACb,OAAO;CACP,KAAK;CACL,MAAM;CACN,OAAO;CACP,KAAK;CACL,QAAQ;AACV;AAEA,SAAS,SAAS,KAAa,MAAwB;CAErD,OAAO,GADK,SAAS,GACX,EAAI,GAAG,KAAK,KAAK,GAAG;AAChC;AAEA,eAAsB,KACpB,SACA,KACA,MACqB;CACrB,MAAM,uBAAuB,SAAS,KAAK,OAAO,KAAK,KAAK,GAAG,IAAI,EAAE;CACrE,IAAI,SAAS;CACb,IAAI,SAAS;CAEb,IAAI,UAAU;EACZ,MAAM,MAAM,QAAQ,MAChB,IAAI,OAAO,IAAI,QAAQ,SAAS,OAAO,QAAQ,GAAG,CAAC,EAAE,GAAG,OAAO,UAC/D;EACJ,QAAQ,OAAO,MAAM,SAAS,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,SAAS,KAAK,IAAI,IAAI,IAAI,GAAG;CAC5F;CAEA,MAAM,eAA6B;EACjC,KAAK,QAAQ;EACb,OAAO,QAAQ,SAAS;EACxB,KAAK,QAAQ,OAAO,QAAQ;CAC9B;CAEA,IAAI,QAAQ,SAAS,WAAW,KAAK,GAAG;EACtC,KAAK,QAAQ,MAAM,GAAG;EACtB,MAAM;EACN,aAAa,QAAQ;CACvB;CAEA,MAAM,QAAQ,KAAK,IAAI;CACvB,MAAM,eAAe,MAAM,KAAK,MAAM,YAAY;CAElD,IAAI,aAAa,QAAQ;EACvB,aAAa,OAAO,GAAG,SAAS,SAAS;GACvC,UAAU,WAAW,KAAK,SAAS,CAAC;EACtC,CAAC;EAOD,gBAN2B;GACzB,OAAO,aAAa;GACpB,QAAQ,QAAQ;GAChB,UAAU;EACZ,CAEA,CAAA,CAAG,GAAG,QAAQ,SAAU,MAAM;GAC5B,UAAU,WAAW,IAAI;GACzB,UAAU;EACZ,CAAC;CACH;CAEA,IAAI,aAAa,QACf,aAAa,OAAO,GAAG,SAAS,SAAS;EACvC,UAAU,KAAK,SAAS;CAC1B,CAAC;CAGH,MAAM,sBAAM,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,GAAG,EAAE,uBAAuB;CAC/E,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,aAAa,GAAG,SAAS,SAAS;GAChC,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,UAAU,WAAW,IAAI;GAEzB,IAAI,UAAU;IACZ,MAAM,SAAS,OACX,GAAG,OAAO,IAAI,OAAO,OAAO,OAAO,UACnC,GAAG,OAAO,MAAM,IAAI,OAAO;IAC/B,QAAQ,OAAO,MACb,SAAS,OAAO,IAAI,OAAO,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,KAAK,OAAO,MAAM,GAChF;GACF;GAEA,IAAI,CAAC,MACH,QAAQ;IAAE;IAAQ;GAAO,CAAC;QACrB;IACL,IAAI,WAAW,GAAG,KAAK,kBAAkB,OAAO,eAAe,OAAO;IACtE,OAAO,GAAG;GACZ;EACF,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"process.js","names":[],"sources":["../../../src/utils/process.ts"],"sourcesContent":["import { SpawnOptions, spawn } from 'child_process';\nimport buildDebug from 'debug';\nimport { basename } from 'path';\nimport { createInterface } from 'readline';\nimport { format } from 'util';\n\nimport { ExecOutput } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:process');\nconst debugRead = buildDebug('verdaccio:e2e-cli:line');\n\nlet _verbose = false;\n\nexport function setVerbose(v: boolean) {\n  _verbose = v;\n}\n\nconst COLORS = {\n  reset: '\\x1b[0m',\n  dim: '\\x1b[2m',\n  cyan: '\\x1b[36m',\n  green: '\\x1b[32m',\n  red: '\\x1b[31m',\n  yellow: '\\x1b[33m',\n};\n\nfunction shortCmd(cmd: string, args: string[]): string {\n  const bin = basename(cmd);\n  return `${bin} ${args.join(' ')}`;\n}\n\n/**\n * Always-on scenario tracing, printed inline with the test output in the same\n * style as the verbose `$ <command>` lines — so a red scenario explains what\n * it actually saw (statuses, headers, bodies, timings) in any run, CI or\n * local, without a reproduction. Accepts util.format tokens (%s %d %j %o).\n */\nexport function trace(fmt: string, ...args: unknown[]): void {\n  process.stdout.write(`      ${COLORS.dim}» ${format(fmt, ...args)}${COLORS.reset}\\n`);\n}\n\nexport async function exec(\n  options: SpawnOptions,\n  cmd: string,\n  args: string[]\n): Promise<ExecOutput> {\n  debug('start exec %o %o %o', options, cmd, args ? args.join(' ') : '');\n  let stdout = '';\n  let stderr = '';\n\n  if (_verbose) {\n    const cwd = options.cwd\n      ? ` ${COLORS.dim}(cwd: ${basename(String(options.cwd))})${COLORS.reset}`\n      : '';\n    process.stdout.write(`      ${COLORS.cyan}$${COLORS.reset} ${shortCmd(cmd, args)}${cwd}\\n`);\n  }\n\n  const spawnOptions: SpawnOptions = {\n    cwd: options.cwd,\n    stdio: options.stdio || 'pipe',\n    env: options.env || process.env,\n  };\n\n  if (process.platform.startsWith('win')) {\n    args.unshift('/c', cmd);\n    cmd = 'cmd.exe';\n    spawnOptions.stdio = 'pipe';\n  }\n\n  const start = Date.now();\n  const childProcess = spawn(cmd, args, spawnOptions);\n\n  if (childProcess.stdout) {\n    childProcess.stdout.on('data', (data) => {\n      debugRead('data %o', data.toString());\n    });\n    const rl = createInterface({\n      input: childProcess.stdout,\n      output: process.stdout,\n      terminal: false,\n    });\n\n    rl.on('line', function (line) {\n      debugRead('line %o', line);\n      stdout += line;\n    });\n  }\n\n  if (childProcess.stderr) {\n    childProcess.stderr.on('data', (data) => {\n      stderr += data.toString();\n    });\n  }\n\n  const err = new Error(`Running \"${cmd} ${args.join(' ')}\" returned error code `);\n  return new Promise((resolve, reject) => {\n    childProcess.on('exit', (code) => {\n      const duration = Date.now() - start;\n      debugRead('exit %o', code);\n\n      if (_verbose) {\n        const status = code\n          ? `${COLORS.red}exit ${code}${COLORS.reset}`\n          : `${COLORS.green}ok${COLORS.reset}`;\n        process.stdout.write(\n          `      ${COLORS.dim}  -> ${status} ${COLORS.dim}(${duration}ms)${COLORS.reset}\\n`\n        );\n      }\n\n      if (!code) {\n        resolve({ stdout, stderr });\n      } else {\n        err.message += `${code}...\\n\\nSTDOUT:\\n${stdout}\\n\\nSTDERR:\\n${stderr}\\n`;\n        reject(err);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;AAQA,IAAM,QAAQ,WAAW,2BAA2B;AACpD,IAAM,YAAY,WAAW,wBAAwB;AAErD,IAAI,WAAW;AAEf,SAAgB,WAAW,GAAY;CACrC,WAAW;AACb;AAEA,IAAM,SAAS;CACb,OAAO;CACP,KAAK;CACL,MAAM;CACN,OAAO;CACP,KAAK;CACL,QAAQ;AACV;AAEA,SAAS,SAAS,KAAa,MAAwB;CAErD,OAAO,GADK,SAAS,GACX,EAAI,GAAG,KAAK,KAAK,GAAG;AAChC;;;;;;;AAQA,SAAgB,MAAM,KAAa,GAAG,MAAuB;CAC3D,QAAQ,OAAO,MAAM,SAAS,OAAO,IAAI,IAAI,OAAO,KAAK,GAAG,IAAI,IAAI,OAAO,MAAM,GAAG;AACtF;AAEA,eAAsB,KACpB,SACA,KACA,MACqB;CACrB,MAAM,uBAAuB,SAAS,KAAK,OAAO,KAAK,KAAK,GAAG,IAAI,EAAE;CACrE,IAAI,SAAS;CACb,IAAI,SAAS;CAEb,IAAI,UAAU;EACZ,MAAM,MAAM,QAAQ,MAChB,IAAI,OAAO,IAAI,QAAQ,SAAS,OAAO,QAAQ,GAAG,CAAC,EAAE,GAAG,OAAO,UAC/D;EACJ,QAAQ,OAAO,MAAM,SAAS,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,SAAS,KAAK,IAAI,IAAI,IAAI,GAAG;CAC5F;CAEA,MAAM,eAA6B;EACjC,KAAK,QAAQ;EACb,OAAO,QAAQ,SAAS;EACxB,KAAK,QAAQ,OAAO,QAAQ;CAC9B;CAEA,IAAI,QAAQ,SAAS,WAAW,KAAK,GAAG;EACtC,KAAK,QAAQ,MAAM,GAAG;EACtB,MAAM;EACN,aAAa,QAAQ;CACvB;CAEA,MAAM,QAAQ,KAAK,IAAI;CACvB,MAAM,eAAe,MAAM,KAAK,MAAM,YAAY;CAElD,IAAI,aAAa,QAAQ;EACvB,aAAa,OAAO,GAAG,SAAS,SAAS;GACvC,UAAU,WAAW,KAAK,SAAS,CAAC;EACtC,CAAC;EAOD,gBAN2B;GACzB,OAAO,aAAa;GACpB,QAAQ,QAAQ;GAChB,UAAU;EACZ,CAEA,CAAA,CAAG,GAAG,QAAQ,SAAU,MAAM;GAC5B,UAAU,WAAW,IAAI;GACzB,UAAU;EACZ,CAAC;CACH;CAEA,IAAI,aAAa,QACf,aAAa,OAAO,GAAG,SAAS,SAAS;EACvC,UAAU,KAAK,SAAS;CAC1B,CAAC;CAGH,MAAM,sBAAM,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,GAAG,EAAE,uBAAuB;CAC/E,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,aAAa,GAAG,SAAS,SAAS;GAChC,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,UAAU,WAAW,IAAI;GAEzB,IAAI,UAAU;IACZ,MAAM,SAAS,OACX,GAAG,OAAO,IAAI,OAAO,OAAO,OAAO,UACnC,GAAG,OAAO,MAAM,IAAI,OAAO;IAC/B,QAAQ,OAAO,MACb,SAAS,OAAO,IAAI,OAAO,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,KAAK,OAAO,MAAM,GAChF;GACF;GAEA,IAAI,CAAC,MACH,QAAQ;IAAE;IAAQ;GAAO,CAAC;QACrB;IACL,IAAI,WAAW,GAAG,KAAK,kBAAkB,OAAO,eAAe,OAAO;IACtE,OAAO,GAAG;GACZ;EACF,CAAC;CACH,CAAC;AACH"}

package/build/esm/utils/project.js

@@ -37,7 +37,7 @@ function getREADME(packageName) {
 }
 async function prepareGenericEmptyProject(packageName, version, port, token, registryDomain, dependencies = {}, devDependencies = {}) {
 	debug("preparing generic project %o", packageName);
-	const getNPMrc = (port, token, registry) => `//localhost:${port}/:_authToken=${token}\nregistry=${registry}\nmin-release-age=0`;
+	const getNPMrc = (port, token, registry) => `//localhost:${port}/:_authToken=${token}\nregistry=${registry}\nmin-release-age=0\naudit=false\nfund=false`;
 	const tempFolder = await createTempFolder("temp-folder");
 	await writeFile(join(tempFolder, "package.json"), getPackageJSON(packageName, version, dependencies, devDependencies));
 	await writeFile(join(tempFolder, "README.md"), getREADME(packageName));

package/build/esm/utils/project.js.map

@@ -1 +1 @@
-{"version":3,"file":"project.js","names":[],"sources":["../../../src/utils/project.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { mkdirSync } from 'fs';\nimport { mkdtemp, writeFile } from 'fs/promises';\nimport { tmpdir } from 'os';\nimport { join } from 'path';\n\nconst debug = buildDebug('verdaccio:e2e-cli:project');\n\nexport async function createTempFolder(prefix: string): Promise<string> {\n  const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, '-');\n  debug('creating temp folder %o', sanitized);\n  return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));\n}\n\nexport function getPackageJSON(\n  packageName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): string {\n  debug('creating package.json %o', packageName);\n  const json = {\n    name: packageName,\n    version,\n    description: 'some cool project',\n    main: 'index.js',\n    scripts: {\n      test: 'echo exit 1',\n    },\n    dependencies,\n    devDependencies,\n    keywords: ['foo', 'bar'],\n    author: 'Verdaccio E2E <verdaccio@example.org>',\n    license: 'MIT',\n  };\n  return JSON.stringify(json);\n}\n\nexport function getREADME(packageName: string): string {\n  return `\n   # My README ${packageName}\n\n   some text\n\n   ## subtitle\n\n   more text\n  `;\n}\n\nexport async function prepareGenericEmptyProject(\n  packageName: string,\n  version: string,\n  port: number,\n  token: string,\n  registryDomain: string,\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): Promise<{ tempFolder: string }> {\n  debug('preparing generic project %o', packageName);\n  // `min-release-age=0` keeps the harness hermetic: npm 12 added a release-age\n  // cooldown that, if set in the developer's global ~/.npmrc, would reject the\n  // just-published packages these tests install (ETARGET / \"no matching version\n  // ... before <date>\"). Pinning it per-project overrides any global value.\n  // It's an npm-only key — pnpm (minimum-release-age) and yarn ignore it.\n  const getNPMrc = (port: number, token: string, registry: string) =>\n    `//localhost:${port}/:_authToken=${token}\\nregistry=${registry}\\nmin-release-age=0`;\n  const tempFolder = await createTempFolder('temp-folder');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    getPackageJSON(packageName, version, dependencies, devDependencies)\n  );\n  await writeFile(join(tempFolder, 'README.md'), getREADME(packageName));\n  await writeFile(join(tempFolder, '.npmrc'), getNPMrc(port, token, registryDomain));\n  return { tempFolder };\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;AAEpD,eAAsB,iBAAiB,QAAiC;CACtE,MAAM,YAAY,OAAO,QAAQ,mBAAmB,GAAG;CACvD,MAAM,2BAA2B,SAAS;CAC1C,OAAO,QAAQ,KAAK,OAAO,GAAG,iBAAiB,UAAU,EAAE,CAAC;AAC9D;AAEA,SAAgB,eACd,aACA,UAAU,SACV,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACnC;CACR,MAAM,4BAA4B,WAAW;CAe7C,OAAO,KAAK,UAAU;EAbpB,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN,SAAS,EACP,MAAM,cACR;EACA;EACA;EACA,UAAU,CAAC,OAAO,KAAK;EACvB,QAAQ;EACR,SAAS;CAEW,CAAI;AAC5B;AAEA,SAAgB,UAAU,aAA6B;CACrD,OAAO;iBACQ,YAAY;;;;;;;;AAQ7B;AAEA,eAAsB,2BACpB,aACA,SACA,MACA,OACA,gBACA,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACV;CACjC,MAAM,gCAAgC,WAAW;CAMjD,MAAM,YAAY,MAAc,OAAe,aAC7C,eAAe,KAAK,eAAe,MAAM,aAAa,SAAS;CACjE,MAAM,aAAa,MAAM,iBAAiB,aAAa;CACvD,MAAM,UACJ,KAAK,YAAY,cAAc,GAC/B,eAAe,aAAa,SAAS,cAAc,eAAe,CACpE;CACA,MAAM,UAAU,KAAK,YAAY,WAAW,GAAG,UAAU,WAAW,CAAC;CACrE,MAAM,UAAU,KAAK,YAAY,QAAQ,GAAG,SAAS,MAAM,OAAO,cAAc,CAAC;CACjF,OAAO,EAAE,WAAW;AACtB"}
+{"version":3,"file":"project.js","names":[],"sources":["../../../src/utils/project.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { mkdirSync } from 'fs';\nimport { mkdtemp, writeFile } from 'fs/promises';\nimport { tmpdir } from 'os';\nimport { join } from 'path';\n\nconst debug = buildDebug('verdaccio:e2e-cli:project');\n\nexport async function createTempFolder(prefix: string): Promise<string> {\n  const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, '-');\n  debug('creating temp folder %o', sanitized);\n  return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));\n}\n\nexport function getPackageJSON(\n  packageName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): string {\n  debug('creating package.json %o', packageName);\n  const json = {\n    name: packageName,\n    version,\n    description: 'some cool project',\n    main: 'index.js',\n    scripts: {\n      test: 'echo exit 1',\n    },\n    dependencies,\n    devDependencies,\n    keywords: ['foo', 'bar'],\n    author: 'Verdaccio E2E <verdaccio@example.org>',\n    license: 'MIT',\n  };\n  return JSON.stringify(json);\n}\n\nexport function getREADME(packageName: string): string {\n  return `\n   # My README ${packageName}\n\n   some text\n\n   ## subtitle\n\n   more text\n  `;\n}\n\nexport async function prepareGenericEmptyProject(\n  packageName: string,\n  version: string,\n  port: number,\n  token: string,\n  registryDomain: string,\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): Promise<{ tempFolder: string }> {\n  debug('preparing generic project %o', packageName);\n  // `min-release-age=0` keeps the harness hermetic: npm 12 added a release-age\n  // cooldown that, if set in the developer's global ~/.npmrc, would reject the\n  // just-published packages these tests install (ETARGET / \"no matching version\n  // ... before <date>\"). Pinning it per-project overrides any global value.\n  // It's an npm-only key — pnpm (minimum-release-age) and yarn ignore it.\n  // `audit=false`/`fund=false` stop npm's implicit audit/fund calls on every\n  // install — the registry would proxy those upstream, and the suite must run\n  // fully offline (the dedicated audit test still runs `npm audit` explicitly).\n  const getNPMrc = (port: number, token: string, registry: string) =>\n    `//localhost:${port}/:_authToken=${token}\\nregistry=${registry}\\nmin-release-age=0\\naudit=false\\nfund=false`;\n  const tempFolder = await createTempFolder('temp-folder');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    getPackageJSON(packageName, version, dependencies, devDependencies)\n  );\n  await writeFile(join(tempFolder, 'README.md'), getREADME(packageName));\n  await writeFile(join(tempFolder, '.npmrc'), getNPMrc(port, token, registryDomain));\n  return { tempFolder };\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;AAEpD,eAAsB,iBAAiB,QAAiC;CACtE,MAAM,YAAY,OAAO,QAAQ,mBAAmB,GAAG;CACvD,MAAM,2BAA2B,SAAS;CAC1C,OAAO,QAAQ,KAAK,OAAO,GAAG,iBAAiB,UAAU,EAAE,CAAC;AAC9D;AAEA,SAAgB,eACd,aACA,UAAU,SACV,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACnC;CACR,MAAM,4BAA4B,WAAW;CAe7C,OAAO,KAAK,UAAU;EAbpB,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN,SAAS,EACP,MAAM,cACR;EACA;EACA;EACA,UAAU,CAAC,OAAO,KAAK;EACvB,QAAQ;EACR,SAAS;CAEW,CAAI;AAC5B;AAEA,SAAgB,UAAU,aAA6B;CACrD,OAAO;iBACQ,YAAY;;;;;;;;AAQ7B;AAEA,eAAsB,2BACpB,aACA,SACA,MACA,OACA,gBACA,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACV;CACjC,MAAM,gCAAgC,WAAW;CASjD,MAAM,YAAY,MAAc,OAAe,aAC7C,eAAe,KAAK,eAAe,MAAM,aAAa,SAAS;CACjE,MAAM,aAAa,MAAM,iBAAiB,aAAa;CACvD,MAAM,UACJ,KAAK,YAAY,cAAc,GAC/B,eAAe,aAAa,SAAS,cAAc,eAAe,CACpE;CACA,MAAM,UAAU,KAAK,YAAY,WAAW,GAAG,UAAU,WAAW,CAAC;CACrE,MAAM,UAAU,KAAK,YAAY,QAAQ,GAAG,SAAS,MAAM,OAAO,cAAc,CAAC;CACjF,OAAO,EAAE,WAAW;AACtB"}

package/build/esm/utils/publish.js

@@ -0,0 +1,113 @@
+import { computeDist } from "./http-client.js";
+import buildDebug from "debug";
+import { gzipSync } from "zlib";
+//#region src/utils/publish.ts
+var debug = buildDebug("verdaccio:e2e-cli:publish");
+/** Build a single ustar tar entry (512-byte header + padded content). */
+function tarEntry(name, content) {
+	const header = Buffer.alloc(512);
+	header.write(name, 0, 100, "utf8");
+	header.write("0000644\0", 100, 8);
+	header.write("0000000\0", 108, 8);
+	header.write("0000000\0", 116, 8);
+	header.write(content.length.toString(8).padStart(11, "0") + "\0", 124, 12);
+	header.write("00000000000\0", 136, 12);
+	header.write("        ", 148, 8);
+	header.write("0", 156, 1);
+	header.write("ustar\0", 257, 6);
+	header.write("00", 263, 2);
+	let checksum = 0;
+	for (const byte of header) checksum += byte;
+	header.write(checksum.toString(8).padStart(6, "0") + "\0 ", 148, 8);
+	const padding = Buffer.alloc((512 - content.length % 512) % 512);
+	return Buffer.concat([
+		header,
+		content,
+		padding
+	]);
+}
+/** Build a minimal valid npm package tarball (package/package.json inside). */
+function buildPackageTarball(pkgName, version, dependencies = {}) {
+	const manifest = {
+		name: pkgName,
+		version,
+		description: "e2e local package",
+		main: "index.js",
+		dependencies,
+		license: "MIT"
+	};
+	const tar = Buffer.concat([
+		tarEntry("package/package.json", Buffer.from(JSON.stringify(manifest, null, 2))),
+		tarEntry("package/index.js", Buffer.from("module.exports = {};\n")),
+		Buffer.alloc(1024)
+	]);
+	return gzipSync(tar, { level: 9 });
+}
+/**
+* Publish straight through the registry HTTP API (same PUT an npm client
+* sends). Used for adapters that cannot publish themselves (eg. deno) so
+* every fixture still comes from the registry under test — never from an
+* external registry.
+*/
+async function publishViaHttp(ctx, pkgName, version = "1.0.0", dependencies = {}) {
+	const tarball = buildPackageTarball(pkgName, version, dependencies);
+	const { shasum, integrity } = computeDist(tarball);
+	const filename = `${pkgName.replace(/^@[^/]+\//, "")}-${version}.tgz`;
+	const encodedName = pkgName.startsWith("@") ? pkgName.replaceAll("/", "%2f") : pkgName;
+	const tarballUrl = `${ctx.registryUrl}/${encodedName}/-/${filename}`;
+	const body = {
+		_id: pkgName,
+		name: pkgName,
+		description: "e2e local package",
+		"dist-tags": { latest: version },
+		versions: { [version]: {
+			_id: `${pkgName}@${version}`,
+			name: pkgName,
+			version,
+			description: "e2e local package",
+			main: "index.js",
+			dependencies,
+			license: "MIT",
+			dist: {
+				tarball: tarballUrl,
+				shasum,
+				integrity
+			}
+		} },
+		_attachments: { [filename]: {
+			content_type: "application/octet-stream",
+			data: tarball.toString("base64"),
+			length: tarball.length
+		} }
+	};
+	const response = await fetch(`${ctx.registryUrl}/${encodedName}`, {
+		method: "PUT",
+		headers: {
+			"Content-Type": "application/json",
+			Authorization: `Bearer ${ctx.token}`
+		},
+		body: JSON.stringify(body)
+	});
+	if (response.status !== 201 && response.status !== 200) {
+		const text = await response.text();
+		throw new Error(`HTTP publish of ${pkgName}@${version} failed: ${response.status} ${text}`);
+	}
+	debug("published %s@%s via HTTP", pkgName, version);
+}
+/**
+* Publish a package to the registry under test so later steps (install, ci,
+* audit, info, search…) can consume it without ever touching an external
+* registry — the whole suite must be runnable offline. Uses the package
+* manager when it can publish, the raw HTTP API otherwise (eg. deno).
+*/
+async function publishLocalPackage(ctx, pkgName, version = "1.0.0", dependencies = {}) {
+	if (!ctx.adapter.supports.has("publish")) return publishViaHttp(ctx, pkgName, version, dependencies);
+	const { tempFolder } = await ctx.adapter.prepareProject(pkgName, version, ctx.registryUrl, ctx.port, ctx.token, dependencies);
+	if (ctx.adapter.type === "yarn-modern") await ctx.adapter.exec({ cwd: tempFolder }, "install");
+	await ctx.adapter.exec({ cwd: tempFolder }, "publish", ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("published local package %s@%s", pkgName, version);
+}
+//#endregion
+export { buildPackageTarball, publishLocalPackage, publishViaHttp };
+
+//# sourceMappingURL=publish.js.map

package/build/esm/utils/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","names":[],"sources":["../../../src/utils/publish.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { gzipSync } from 'zlib';\n\nimport { TestContext } from '../types';\nimport { computeDist } from './http-client';\n\nconst debug = buildDebug('verdaccio:e2e-cli:publish');\n\n/** Build a single ustar tar entry (512-byte header + padded content). */\nfunction tarEntry(name: string, content: Buffer): Buffer {\n  const header = Buffer.alloc(512);\n  header.write(name, 0, 100, 'utf8');\n  header.write('0000644\\0', 100, 8); // mode\n  header.write('0000000\\0', 108, 8); // uid\n  header.write('0000000\\0', 116, 8); // gid\n  header.write(content.length.toString(8).padStart(11, '0') + '\\0', 124, 12); // size\n  header.write('00000000000\\0', 136, 12); // mtime (epoch, keeps output deterministic)\n  header.write('        ', 148, 8); // chksum placeholder (spaces while summing)\n  header.write('0', 156, 1); // typeflag: regular file\n  header.write('ustar\\0', 257, 6); // magic\n  header.write('00', 263, 2); // version\n  let checksum = 0;\n  for (const byte of header) {\n    checksum += byte;\n  }\n  header.write(checksum.toString(8).padStart(6, '0') + '\\0 ', 148, 8);\n  const padding = Buffer.alloc((512 - (content.length % 512)) % 512);\n  return Buffer.concat([header, content, padding]);\n}\n\n/** Build a minimal valid npm package tarball (package/package.json inside). */\nexport function buildPackageTarball(\n  pkgName: string,\n  version: string,\n  dependencies: Record<string, string> = {}\n): Buffer {\n  const manifest = {\n    name: pkgName,\n    version,\n    description: 'e2e local package',\n    main: 'index.js',\n    dependencies,\n    license: 'MIT',\n  };\n  const tar = Buffer.concat([\n    tarEntry('package/package.json', Buffer.from(JSON.stringify(manifest, null, 2))),\n    tarEntry('package/index.js', Buffer.from('module.exports = {};\\n')),\n    Buffer.alloc(1024), // tar end-of-archive marker\n  ]);\n  return gzipSync(tar, { level: 9 });\n}\n\n/**\n * Publish straight through the registry HTTP API (same PUT an npm client\n * sends). Used for adapters that cannot publish themselves (eg. deno) so\n * every fixture still comes from the registry under test — never from an\n * external registry.\n */\nexport async function publishViaHttp(\n  ctx: TestContext,\n  pkgName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  const tarball = buildPackageTarball(pkgName, version, dependencies);\n  const { shasum, integrity } = computeDist(tarball);\n  const filename = `${pkgName.replace(/^@[^/]+\\//, '')}-${version}.tgz`;\n  const encodedName = pkgName.startsWith('@') ? pkgName.replaceAll('/', '%2f') : pkgName;\n  const tarballUrl = `${ctx.registryUrl}/${encodedName}/-/${filename}`;\n  const body = {\n    _id: pkgName,\n    name: pkgName,\n    description: 'e2e local package',\n    'dist-tags': { latest: version },\n    versions: {\n      [version]: {\n        _id: `${pkgName}@${version}`,\n        name: pkgName,\n        version,\n        description: 'e2e local package',\n        main: 'index.js',\n        dependencies,\n        license: 'MIT',\n        dist: { tarball: tarballUrl, shasum, integrity },\n      },\n    },\n    _attachments: {\n      [filename]: {\n        content_type: 'application/octet-stream',\n        data: tarball.toString('base64'),\n        length: tarball.length,\n      },\n    },\n  };\n  const response = await fetch(`${ctx.registryUrl}/${encodedName}`, {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${ctx.token}`,\n    },\n    body: JSON.stringify(body),\n  });\n  if (response.status !== 201 && response.status !== 200) {\n    const text = await response.text();\n    throw new Error(`HTTP publish of ${pkgName}@${version} failed: ${response.status} ${text}`);\n  }\n  debug('published %s@%s via HTTP', pkgName, version);\n}\n\n/**\n * Publish a package to the registry under test so later steps (install, ci,\n * audit, info, search…) can consume it without ever touching an external\n * registry — the whole suite must be runnable offline. Uses the package\n * manager when it can publish, the raw HTTP API otherwise (eg. deno).\n */\nexport async function publishLocalPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  if (!ctx.adapter.supports.has('publish')) {\n    return publishViaHttp(ctx, pkgName, version, dependencies);\n  }\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n  // yarn modern requires an install first to generate the lockfile\n  if (ctx.adapter.type === 'yarn-modern') {\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published local package %s@%s', pkgName, version);\n}\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;;AAGpD,SAAS,SAAS,MAAc,SAAyB;CACvD,MAAM,SAAS,OAAO,MAAM,GAAG;CAC/B,OAAO,MAAM,MAAM,GAAG,KAAK,MAAM;CACjC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,QAAQ,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,MAAM,KAAK,EAAE;CACzE,OAAO,MAAM,iBAAiB,KAAK,EAAE;CACrC,OAAO,MAAM,YAAY,KAAK,CAAC;CAC/B,OAAO,MAAM,KAAK,KAAK,CAAC;CACxB,OAAO,MAAM,WAAW,KAAK,CAAC;CAC9B,OAAO,MAAM,MAAM,KAAK,CAAC;CACzB,IAAI,WAAW;CACf,KAAK,MAAM,QAAQ,QACjB,YAAY;CAEd,OAAO,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI,OAAO,KAAK,CAAC;CAClE,MAAM,UAAU,OAAO,OAAO,MAAO,QAAQ,SAAS,OAAQ,GAAG;CACjE,OAAO,OAAO,OAAO;EAAC;EAAQ;EAAS;CAAO,CAAC;AACjD;;AAGA,SAAgB,oBACd,SACA,SACA,eAAuC,CAAC,GAChC;CACR,MAAM,WAAW;EACf,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN;EACA,SAAS;CACX;CACA,MAAM,MAAM,OAAO,OAAO;EACxB,SAAS,wBAAwB,OAAO,KAAK,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC,CAAC;EAC/E,SAAS,oBAAoB,OAAO,KAAK,wBAAwB,CAAC;EAClE,OAAO,MAAM,IAAI;CACnB,CAAC;CACD,OAAO,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC;AACnC;;;;;;;AAQA,eAAsB,eACpB,KACA,SACA,UAAU,SACV,eAAuC,CAAC,GACzB;CACf,MAAM,UAAU,oBAAoB,SAAS,SAAS,YAAY;CAClE,MAAM,EAAE,QAAQ,cAAc,YAAY,OAAO;CACjD,MAAM,WAAW,GAAG,QAAQ,QAAQ,aAAa,EAAE,EAAE,GAAG,QAAQ;CAChE,MAAM,cAAc,QAAQ,WAAW,GAAG,IAAI,QAAQ,WAAW,KAAK,KAAK,IAAI;CAC/E,MAAM,aAAa,GAAG,IAAI,YAAY,GAAG,YAAY,KAAK;CAC1D,MAAM,OAAO;EACX,KAAK;EACL,MAAM;EACN,aAAa;EACb,aAAa,EAAE,QAAQ,QAAQ;EAC/B,UAAU,GACP,UAAU;GACT,KAAK,GAAG,QAAQ,GAAG;GACnB,MAAM;GACN;GACA,aAAa;GACb,MAAM;GACN;GACA,SAAS;GACT,MAAM;IAAE,SAAS;IAAY;IAAQ;GAAU;EACjD,EACF;EACA,cAAc,GACX,WAAW;GACV,cAAc;GACd,MAAM,QAAQ,SAAS,QAAQ;GAC/B,QAAQ,QAAQ;EAClB,EACF;CACF;CACA,MAAM,WAAW,MAAM,MAAM,GAAG,IAAI,YAAY,GAAG,eAAe;EAChE,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU,IAAI;EAC/B;EACA,MAAM,KAAK,UAAU,IAAI;CAC3B,CAAC;CACD,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;EACtD,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,QAAQ,WAAW,SAAS,OAAO,GAAG,MAAM;CAC5F;CACA,MAAM,4BAA4B,SAAS,OAAO;AACpD;;;;;;;AAQA,eAAsB,oBACpB,KACA,SACA,UAAU,SACV,eAAuC,CAAC,GACzB;CACf,IAAI,CAAC,IAAI,QAAQ,SAAS,IAAI,SAAS,GACrC,OAAO,eAAe,KAAK,SAAS,SAAS,YAAY;CAE3D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;CAEA,IAAI,IAAI,QAAQ,SAAS,eACvB,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;CAEvD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,iCAAiC,SAAS,OAAO;AACzD"}

package/build/index.d.ts

@@ -1,6 +1,6 @@
 export declare function main(argv?: string[]): Promise<void>;
 export { allTests } from './tests';
 export { allScenarios } from './scenarios';
-export { createBunAdapter, createDenoAdapter, createNpmAdapter, createPnpmAdapter, createYarnClassicAdapter, createYarnModernAdapter, } from './adapters';
+export { createBunAdapter, createDenoAdapter, createNpmAdapter, createPnpmAdapter, createYarnModernAdapter, } from './adapters';
 export { runAll, runSuite } from './runner';
 export type { PackageManagerAdapter, TestDefinition, TestContext, CliOptions } from './types';

package/build/scenarios/index.d.ts

@@ -1,5 +1,9 @@
 import { TestDefinition } from '../types';
 import { installMultipleDepsScenario } from './install-multiple-deps';
+import { metadataScenario } from './metadata';
 import { minimumReleaseAgeScenario } from './minimum-release-age';
+import { searchScenario } from './search';
+import { tarballsScenario } from './tarballs';
+import { uplinkFailureScenario } from './uplink-failure';
 export declare const allScenarios: TestDefinition[];
-export { installMultipleDepsScenario, minimumReleaseAgeScenario };
+export { installMultipleDepsScenario, minimumReleaseAgeScenario, searchScenario, tarballsScenario, metadataScenario, uplinkFailureScenario, };

package/build/scenarios/metadata.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const metadataScenario: TestDefinition;

package/build/scenarios/search.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const searchScenario: TestDefinition;

package/build/scenarios/tarballs.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const tarballsScenario: TestDefinition;

package/build/scenarios/uplink-failure.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const uplinkFailureScenario: TestDefinition;

package/build/tests/index.d.ts

@@ -1,4 +1,4 @@
-import { allScenarios, installMultipleDepsScenario, minimumReleaseAgeScenario } from '../scenarios';
+import { allScenarios, installMultipleDepsScenario, metadataScenario, minimumReleaseAgeScenario, searchScenario, tarballsScenario, uplinkFailureScenario } from '../scenarios';
 import { TestDefinition } from '../types';
 import { auditTest } from './audit';
 import { ciTest } from './ci';
@@ -12,4 +12,4 @@ import { publishTest } from './publish';
 import { searchTest } from './search';
 import { unpublishTest } from './unpublish';
 export declare const allTests: TestDefinition[];
-export { publishTest, installTest, ciTest, auditTest, infoTest, deprecateTest, distTagsTest, loginTest, pingTest, searchTest, unpublishTest, installMultipleDepsScenario, minimumReleaseAgeScenario, allScenarios, };
+export { publishTest, installTest, ciTest, auditTest, infoTest, deprecateTest, distTagsTest, loginTest, pingTest, searchTest, unpublishTest, installMultipleDepsScenario, minimumReleaseAgeScenario, tarballsScenario, metadataScenario, searchScenario, uplinkFailureScenario, allScenarios, };

package/build/types.d.ts

@@ -41,6 +41,12 @@ export type TestDefinition = {
     run: (ctx: TestContext) => Promise<void>;
     /** Commands required for this test (e.g. 'deprecate', 'search'). Skipped if adapter doesn't support them. */
     requires?: string[];
+    /**
+     * Minimum timeout (ms) for this test. The effective timeout is the larger of
+     * this and the CLI-level --timeout. Use for long scenarios (large tarballs,
+     * uplink failure simulation) that outgrow the default per-test budget.
+     */
+    timeout?: number;
     /**
      * Predicate to gate a test to specific adapters/versions. Returns false to skip.
      * Use for tests that only make sense on a particular package manager or version
@@ -51,8 +57,8 @@ export type TestDefinition = {
 export interface PackageManagerAdapter {
     /** Display name, e.g. "npm@10" */
     name: string;
-    /** Package manager type: npm, pnpm, yarn-classic, yarn-modern, bun, deno */
-    type: 'npm' | 'pnpm' | 'yarn-classic' | 'yarn-modern' | 'bun' | 'deno';
+    /** Package manager type: npm, pnpm, yarn-modern, bun, deno */
+    type: 'npm' | 'pnpm' | 'yarn-modern' | 'bun' | 'deno';
     /** Resolved path to the binary */
     bin: string;
     /** Commands this PM supports */
@@ -78,4 +84,8 @@ export type CliOptions = {
     timeout: number;
     token?: string;
     verbose: boolean;
+    /** Port of the mock uplink used by scenario:uplink-failure (also E2E_UPLINK_PORT) */
+    uplinkPort?: number;
+    /** Print the recommended registry config for the full battery and exit */
+    printConfig?: boolean;
 };

package/build/utils/e2e-config.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Recommended Verdaccio config for running the full e2e-cli battery,
+ * printed by `verdaccio-e2e --print-config`. It is what the consuming repos'
+ * CI jobs and scripts/run-e2e.sh feed to `verdaccio --config`:
+ *
+ *   - max_body_size raised so scenario:tarballs can publish ~30 MB packages
+ *     (Verdaccio's default is 10mb)
+ *   - an `e2emock` uplink + `e2e-uplink-*` package pattern wired to the mock
+ *     uplink server that scenario:uplink-failure starts on E2E_UPLINK_PORT
+ *     (short timeout so the "slow uplink" case completes quickly; high
+ *     max_fails so simulated failures don't trip the circuit breaker for
+ *     later sub-tests)
+ *   - NO npmjs uplink: the whole suite publishes every package it consumes,
+ *     so the registry under test never talks to the outside world and the
+ *     battery runs fully offline (and deterministically in CI)
+ *
+ * Relative paths (storage/htpasswd) resolve next to the config file, so write
+ * it into a disposable directory.
+ */
+export declare const DEFAULT_UPLINK_PORT = 4874;
+export declare function buildE2EConfig(uplinkPort?: number): string;

package/build/utils/http-client.d.ts

@@ -0,0 +1,49 @@
+export type PackumentResponse = {
+    status: number;
+    headers: Headers;
+    /** Parsed JSON body, or undefined when the response is not JSON (e.g. 304) */
+    body?: any;
+};
+export type TarballDownload = {
+    status: number;
+    headers: Headers;
+    /** Total bytes received */
+    bytes: number;
+    /** hex-encoded sha1 of the received bytes (matches dist.shasum) */
+    sha1: string;
+    /** `sha512-<base64>` of the received bytes (matches dist.integrity) */
+    integrity: string;
+};
+export type FetchPackumentOptions = {
+    /** Request the abbreviated (install) metadata format */
+    abbreviated?: boolean;
+    /** Send If-None-Match with this value */
+    etag?: string;
+    /** Bearer token */
+    token?: string;
+};
+export declare const ABBREVIATED_ACCEPT = "application/vnd.npm.install-v1+json";
+/**
+ * Registry URL for a package name. Scoped names are encoded with the same
+ * `%2f` form npm clients use: `@scope%2fname`.
+ */
+export declare function packumentUrl(registryUrl: string, pkgName: string): string;
+export declare function fetchPackument(registryUrl: string, pkgName: string, options?: FetchPackumentOptions): Promise<PackumentResponse>;
+export type DownloadTarballOptions = {
+    signal?: AbortSignal;
+    token?: string;
+    /** Called after the first chunk of the body arrives (useful to abort mid-stream) */
+    onFirstChunk?: () => void;
+    /** Called after every chunk with the total bytes received so far (useful to abort at a threshold) */
+    onChunk?: (bytesReceived: number) => void;
+};
+/**
+ * Download a tarball fully, computing sha1/sha512 integrity on the fly.
+ * Rejects with the underlying error when aborted or the connection drops.
+ */
+export declare function downloadTarball(url: string, options?: DownloadTarballOptions): Promise<TarballDownload>;
+/** Compute npm-style dist values (shasum/integrity) for a buffer. */
+export declare function computeDist(buffer: Buffer): {
+    shasum: string;
+    integrity: string;
+};

package/build/utils/mock-uplink.d.ts

@@ -0,0 +1,47 @@
+export type UplinkMode = 
+/** Serve packuments and tarballs normally */
+'ok'
+/** Send tarball headers + half the body, then destroy the socket */
+ | 'drop-mid-stream'
+/** Delay every response long enough to trip the registry's uplink timeout */
+ | 'slow'
+/** Respond 500 to everything */
+ | 'error-500';
+type MockPackage = {
+    name: string;
+    version: string;
+    tarball: Buffer;
+    shasum: string;
+    integrity: string;
+};
+/**
+ * Minimal controllable npm uplink used by scenario:uplink-failure.
+ *
+ * The registry under test is configured (see --print-config) to proxy the
+ * `e2e-uplink-*` package pattern to this server, so the scenario can flip the
+ * uplink between healthy, dropping connections mid-tarball, slow, and down.
+ */
+export declare class MockUplink {
+    readonly port: number;
+    mode: UplinkMode;
+    requests: string[];
+    private server?;
+    private packages;
+    private searchResults;
+    constructor(port: number);
+    /** Register a package served by this uplink; tarball is random (incompressible) bytes. */
+    addPackage(name: string, tarballBytes?: number): MockPackage;
+    /** Register a result served by the /-/v1/search endpoint. */
+    addSearchResult(name: string, version?: string): void;
+    /**
+     * npmjs-faithful /-/v1/search: filters by `text` substring, applies
+     * `from`/`size` itself (like registry.npmjs.org does) and reports the real
+     * `total` of matches. Mimicking the upstream offsetting is what exposes
+     * double pagination in the registry under test.
+     */
+    private searchResponse;
+    private packument;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+}
+export {};