@verdaccio/e2e-cli 3.0.0 → 3.1.0

package/build/esm/utils/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","names":[],"sources":["../../../src/utils/project.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { mkdirSync } from 'fs';\nimport { mkdtemp, writeFile } from 'fs/promises';\nimport { tmpdir } from 'os';\nimport { join } from 'path';\n\nconst debug = buildDebug('verdaccio:e2e-cli:project');\n\nexport async function createTempFolder(prefix: string): Promise<string> {\n  const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, '-');\n  debug('creating temp folder %o', sanitized);\n  return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));\n}\n\nexport function getPackageJSON(\n  packageName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): string {\n  debug('creating package.json %o', packageName);\n  const json = {\n    name: packageName,\n    version,\n    description: 'some cool project',\n    main: 'index.js',\n    scripts: {\n      test: 'echo exit 1',\n    },\n    dependencies,\n    devDependencies,\n    keywords: ['foo', 'bar'],\n    author: 'Verdaccio E2E <verdaccio@example.org>',\n    license: 'MIT',\n  };\n  return JSON.stringify(json);\n}\n\nexport function getREADME(packageName: string): string {\n  return `\n   # My README ${packageName}\n\n   some text\n\n   ## subtitle\n\n   more text\n  `;\n}\n\nexport async function prepareGenericEmptyProject(\n  packageName: string,\n  version: string,\n  port: number,\n  token: string,\n  registryDomain: string,\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): Promise<{ tempFolder: string }> {\n  debug('preparing generic project %o', packageName);\n  // `min-release-age=0` keeps the harness hermetic: npm 12 added a release-age\n  // cooldown that, if set in the developer's global ~/.npmrc, would reject the\n  // just-published packages these tests install (ETARGET / \"no matching version\n  // ... before <date>\"). Pinning it per-project overrides any global value.\n  // It's an npm-only key — pnpm (minimum-release-age) and yarn ignore it.\n  // `audit=false`/`fund=false` stop npm's implicit audit/fund calls on every\n  // install — the registry would proxy those upstream, and the suite must run\n  // fully offline (the dedicated audit test still runs `npm audit` explicitly).\n  const getNPMrc = (port: number, token: string, registry: string) =>\n    `//localhost:${port}/:_authToken=${token}\\nregistry=${registry}\\nmin-release-age=0\\naudit=false\\nfund=false`;\n  const tempFolder = await createTempFolder('temp-folder');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    getPackageJSON(packageName, version, dependencies, devDependencies)\n  );\n  await writeFile(join(tempFolder, 'README.md'), getREADME(packageName));\n  await writeFile(join(tempFolder, '.npmrc'), getNPMrc(port, token, registryDomain));\n  return { tempFolder };\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;AAEpD,eAAsB,iBAAiB,QAAiC;CACtE,MAAM,YAAY,OAAO,QAAQ,mBAAmB,GAAG;CACvD,MAAM,2BAA2B,SAAS;CAC1C,OAAO,QAAQ,KAAK,OAAO,GAAG,iBAAiB,UAAU,EAAE,CAAC;AAC9D;AAEA,SAAgB,eACd,aACA,UAAU,SACV,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACnC;CACR,MAAM,4BAA4B,WAAW;CAe7C,OAAO,KAAK,UAAU;EAbpB,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN,SAAS,EACP,MAAM,cACR;EACA;EACA;EACA,UAAU,CAAC,OAAO,KAAK;EACvB,QAAQ;EACR,SAAS;CAEW,CAAI;AAC5B;AAEA,SAAgB,UAAU,aAA6B;CACrD,OAAO;iBACQ,YAAY;;;;;;;;AAQ7B;AAEA,eAAsB,2BACpB,aACA,SACA,MACA,OACA,gBACA,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACV;CACjC,MAAM,gCAAgC,WAAW;CASjD,MAAM,YAAY,MAAc,OAAe,aAC7C,eAAe,KAAK,eAAe,MAAM,aAAa,SAAS;CACjE,MAAM,aAAa,MAAM,iBAAiB,aAAa;CACvD,MAAM,UACJ,KAAK,YAAY,cAAc,GAC/B,eAAe,aAAa,SAAS,cAAc,eAAe,CACpE;CACA,MAAM,UAAU,KAAK,YAAY,WAAW,GAAG,UAAU,WAAW,CAAC;CACrE,MAAM,UAAU,KAAK,YAAY,QAAQ,GAAG,SAAS,MAAM,OAAO,cAAc,CAAC;CACjF,OAAO,EAAE,WAAW;AACtB"}

package/build/esm/utils/publish.js

@@ -0,0 +1,113 @@
+import { computeDist } from "./http-client.js";
+import buildDebug from "debug";
+import { gzipSync } from "zlib";
+//#region src/utils/publish.ts
+var debug = buildDebug("verdaccio:e2e-cli:publish");
+/** Build a single ustar tar entry (512-byte header + padded content). */
+function tarEntry(name, content) {
+	const header = Buffer.alloc(512);
+	header.write(name, 0, 100, "utf8");
+	header.write("0000644\0", 100, 8);
+	header.write("0000000\0", 108, 8);
+	header.write("0000000\0", 116, 8);
+	header.write(content.length.toString(8).padStart(11, "0") + "\0", 124, 12);
+	header.write("00000000000\0", 136, 12);
+	header.write("        ", 148, 8);
+	header.write("0", 156, 1);
+	header.write("ustar\0", 257, 6);
+	header.write("00", 263, 2);
+	let checksum = 0;
+	for (const byte of header) checksum += byte;
+	header.write(checksum.toString(8).padStart(6, "0") + "\0 ", 148, 8);
+	const padding = Buffer.alloc((512 - content.length % 512) % 512);
+	return Buffer.concat([
+		header,
+		content,
+		padding
+	]);
+}
+/** Build a minimal valid npm package tarball (package/package.json inside). */
+function buildPackageTarball(pkgName, version, dependencies = {}) {
+	const manifest = {
+		name: pkgName,
+		version,
+		description: "e2e local package",
+		main: "index.js",
+		dependencies,
+		license: "MIT"
+	};
+	const tar = Buffer.concat([
+		tarEntry("package/package.json", Buffer.from(JSON.stringify(manifest, null, 2))),
+		tarEntry("package/index.js", Buffer.from("module.exports = {};\n")),
+		Buffer.alloc(1024)
+	]);
+	return gzipSync(tar, { level: 9 });
+}
+/**
+* Publish straight through the registry HTTP API (same PUT an npm client
+* sends). Used for adapters that cannot publish themselves (eg. deno) so
+* every fixture still comes from the registry under test — never from an
+* external registry.
+*/
+async function publishViaHttp(ctx, pkgName, version = "1.0.0", dependencies = {}) {
+	const tarball = buildPackageTarball(pkgName, version, dependencies);
+	const { shasum, integrity } = computeDist(tarball);
+	const filename = `${pkgName.replace(/^@[^/]+\//, "")}-${version}.tgz`;
+	const encodedName = pkgName.startsWith("@") ? pkgName.replaceAll("/", "%2f") : pkgName;
+	const tarballUrl = `${ctx.registryUrl}/${encodedName}/-/${filename}`;
+	const body = {
+		_id: pkgName,
+		name: pkgName,
+		description: "e2e local package",
+		"dist-tags": { latest: version },
+		versions: { [version]: {
+			_id: `${pkgName}@${version}`,
+			name: pkgName,
+			version,
+			description: "e2e local package",
+			main: "index.js",
+			dependencies,
+			license: "MIT",
+			dist: {
+				tarball: tarballUrl,
+				shasum,
+				integrity
+			}
+		} },
+		_attachments: { [filename]: {
+			content_type: "application/octet-stream",
+			data: tarball.toString("base64"),
+			length: tarball.length
+		} }
+	};
+	const response = await fetch(`${ctx.registryUrl}/${encodedName}`, {
+		method: "PUT",
+		headers: {
+			"Content-Type": "application/json",
+			Authorization: `Bearer ${ctx.token}`
+		},
+		body: JSON.stringify(body)
+	});
+	if (response.status !== 201 && response.status !== 200) {
+		const text = await response.text();
+		throw new Error(`HTTP publish of ${pkgName}@${version} failed: ${response.status} ${text}`);
+	}
+	debug("published %s@%s via HTTP", pkgName, version);
+}
+/**
+* Publish a package to the registry under test so later steps (install, ci,
+* audit, info, search…) can consume it without ever touching an external
+* registry — the whole suite must be runnable offline. Uses the package
+* manager when it can publish, the raw HTTP API otherwise (eg. deno).
+*/
+async function publishLocalPackage(ctx, pkgName, version = "1.0.0", dependencies = {}) {
+	if (!ctx.adapter.supports.has("publish")) return publishViaHttp(ctx, pkgName, version, dependencies);
+	const { tempFolder } = await ctx.adapter.prepareProject(pkgName, version, ctx.registryUrl, ctx.port, ctx.token, dependencies);
+	if (ctx.adapter.type === "yarn-modern") await ctx.adapter.exec({ cwd: tempFolder }, "install");
+	await ctx.adapter.exec({ cwd: tempFolder }, "publish", ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("published local package %s@%s", pkgName, version);
+}
+//#endregion
+export { buildPackageTarball, publishLocalPackage, publishViaHttp };
+
+//# sourceMappingURL=publish.js.map

package/build/esm/utils/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","names":[],"sources":["../../../src/utils/publish.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { gzipSync } from 'zlib';\n\nimport { TestContext } from '../types';\nimport { computeDist } from './http-client';\n\nconst debug = buildDebug('verdaccio:e2e-cli:publish');\n\n/** Build a single ustar tar entry (512-byte header + padded content). */\nfunction tarEntry(name: string, content: Buffer): Buffer {\n  const header = Buffer.alloc(512);\n  header.write(name, 0, 100, 'utf8');\n  header.write('0000644\\0', 100, 8); // mode\n  header.write('0000000\\0', 108, 8); // uid\n  header.write('0000000\\0', 116, 8); // gid\n  header.write(content.length.toString(8).padStart(11, '0') + '\\0', 124, 12); // size\n  header.write('00000000000\\0', 136, 12); // mtime (epoch, keeps output deterministic)\n  header.write('        ', 148, 8); // chksum placeholder (spaces while summing)\n  header.write('0', 156, 1); // typeflag: regular file\n  header.write('ustar\\0', 257, 6); // magic\n  header.write('00', 263, 2); // version\n  let checksum = 0;\n  for (const byte of header) {\n    checksum += byte;\n  }\n  header.write(checksum.toString(8).padStart(6, '0') + '\\0 ', 148, 8);\n  const padding = Buffer.alloc((512 - (content.length % 512)) % 512);\n  return Buffer.concat([header, content, padding]);\n}\n\n/** Build a minimal valid npm package tarball (package/package.json inside). */\nexport function buildPackageTarball(\n  pkgName: string,\n  version: string,\n  dependencies: Record<string, string> = {}\n): Buffer {\n  const manifest = {\n    name: pkgName,\n    version,\n    description: 'e2e local package',\n    main: 'index.js',\n    dependencies,\n    license: 'MIT',\n  };\n  const tar = Buffer.concat([\n    tarEntry('package/package.json', Buffer.from(JSON.stringify(manifest, null, 2))),\n    tarEntry('package/index.js', Buffer.from('module.exports = {};\\n')),\n    Buffer.alloc(1024), // tar end-of-archive marker\n  ]);\n  return gzipSync(tar, { level: 9 });\n}\n\n/**\n * Publish straight through the registry HTTP API (same PUT an npm client\n * sends). Used for adapters that cannot publish themselves (eg. deno) so\n * every fixture still comes from the registry under test — never from an\n * external registry.\n */\nexport async function publishViaHttp(\n  ctx: TestContext,\n  pkgName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  const tarball = buildPackageTarball(pkgName, version, dependencies);\n  const { shasum, integrity } = computeDist(tarball);\n  const filename = `${pkgName.replace(/^@[^/]+\\//, '')}-${version}.tgz`;\n  const encodedName = pkgName.startsWith('@') ? pkgName.replaceAll('/', '%2f') : pkgName;\n  const tarballUrl = `${ctx.registryUrl}/${encodedName}/-/${filename}`;\n  const body = {\n    _id: pkgName,\n    name: pkgName,\n    description: 'e2e local package',\n    'dist-tags': { latest: version },\n    versions: {\n      [version]: {\n        _id: `${pkgName}@${version}`,\n        name: pkgName,\n        version,\n        description: 'e2e local package',\n        main: 'index.js',\n        dependencies,\n        license: 'MIT',\n        dist: { tarball: tarballUrl, shasum, integrity },\n      },\n    },\n    _attachments: {\n      [filename]: {\n        content_type: 'application/octet-stream',\n        data: tarball.toString('base64'),\n        length: tarball.length,\n      },\n    },\n  };\n  const response = await fetch(`${ctx.registryUrl}/${encodedName}`, {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${ctx.token}`,\n    },\n    body: JSON.stringify(body),\n  });\n  if (response.status !== 201 && response.status !== 200) {\n    const text = await response.text();\n    throw new Error(`HTTP publish of ${pkgName}@${version} failed: ${response.status} ${text}`);\n  }\n  debug('published %s@%s via HTTP', pkgName, version);\n}\n\n/**\n * Publish a package to the registry under test so later steps (install, ci,\n * audit, info, search…) can consume it without ever touching an external\n * registry — the whole suite must be runnable offline. Uses the package\n * manager when it can publish, the raw HTTP API otherwise (eg. deno).\n */\nexport async function publishLocalPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  if (!ctx.adapter.supports.has('publish')) {\n    return publishViaHttp(ctx, pkgName, version, dependencies);\n  }\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n  // yarn modern requires an install first to generate the lockfile\n  if (ctx.adapter.type === 'yarn-modern') {\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published local package %s@%s', pkgName, version);\n}\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;;AAGpD,SAAS,SAAS,MAAc,SAAyB;CACvD,MAAM,SAAS,OAAO,MAAM,GAAG;CAC/B,OAAO,MAAM,MAAM,GAAG,KAAK,MAAM;CACjC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,QAAQ,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,MAAM,KAAK,EAAE;CACzE,OAAO,MAAM,iBAAiB,KAAK,EAAE;CACrC,OAAO,MAAM,YAAY,KAAK,CAAC;CAC/B,OAAO,MAAM,KAAK,KAAK,CAAC;CACxB,OAAO,MAAM,WAAW,KAAK,CAAC;CAC9B,OAAO,MAAM,MAAM,KAAK,CAAC;CACzB,IAAI,WAAW;CACf,KAAK,MAAM,QAAQ,QACjB,YAAY;CAEd,OAAO,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI,OAAO,KAAK,CAAC;CAClE,MAAM,UAAU,OAAO,OAAO,MAAO,QAAQ,SAAS,OAAQ,GAAG;CACjE,OAAO,OAAO,OAAO;EAAC;EAAQ;EAAS;CAAO,CAAC;AACjD;;AAGA,SAAgB,oBACd,SACA,SACA,eAAuC,CAAC,GAChC;CACR,MAAM,WAAW;EACf,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN;EACA,SAAS;CACX;CACA,MAAM,MAAM,OAAO,OAAO;EACxB,SAAS,wBAAwB,OAAO,KAAK,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC,CAAC;EAC/E,SAAS,oBAAoB,OAAO,KAAK,wBAAwB,CAAC;EAClE,OAAO,MAAM,IAAI;CACnB,CAAC;CACD,OAAO,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC;AACnC;;;;;;;AAQA,eAAsB,eACpB,KACA,SACA,UAAU,SACV,eAAuC,CAAC,GACzB;CACf,MAAM,UAAU,oBAAoB,SAAS,SAAS,YAAY;CAClE,MAAM,EAAE,QAAQ,cAAc,YAAY,OAAO;CACjD,MAAM,WAAW,GAAG,QAAQ,QAAQ,aAAa,EAAE,EAAE,GAAG,QAAQ;CAChE,MAAM,cAAc,QAAQ,WAAW,GAAG,IAAI,QAAQ,WAAW,KAAK,KAAK,IAAI;CAC/E,MAAM,aAAa,GAAG,IAAI,YAAY,GAAG,YAAY,KAAK;CAC1D,MAAM,OAAO;EACX,KAAK;EACL,MAAM;EACN,aAAa;EACb,aAAa,EAAE,QAAQ,QAAQ;EAC/B,UAAU,GACP,UAAU;GACT,KAAK,GAAG,QAAQ,GAAG;GACnB,MAAM;GACN;GACA,aAAa;GACb,MAAM;GACN;GACA,SAAS;GACT,MAAM;IAAE,SAAS;IAAY;IAAQ;GAAU;EACjD,EACF;EACA,cAAc,GACX,WAAW;GACV,cAAc;GACd,MAAM,QAAQ,SAAS,QAAQ;GAC/B,QAAQ,QAAQ;EAClB,EACF;CACF;CACA,MAAM,WAAW,MAAM,MAAM,GAAG,IAAI,YAAY,GAAG,eAAe;EAChE,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU,IAAI;EAC/B;EACA,MAAM,KAAK,UAAU,IAAI;CAC3B,CAAC;CACD,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;EACtD,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,QAAQ,WAAW,SAAS,OAAO,GAAG,MAAM;CAC5F;CACA,MAAM,4BAA4B,SAAS,OAAO;AACpD;;;;;;;AAQA,eAAsB,oBACpB,KACA,SACA,UAAU,SACV,eAAuC,CAAC,GACzB;CACf,IAAI,CAAC,IAAI,QAAQ,SAAS,IAAI,SAAS,GACrC,OAAO,eAAe,KAAK,SAAS,SAAS,YAAY;CAE3D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;CAEA,IAAI,IAAI,QAAQ,SAAS,eACvB,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;CAEvD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,iCAAiC,SAAS,OAAO;AACzD"}

package/build/esm/utils/registry-client.js

@@ -0,0 +1,53 @@
+import buildDebug from "debug";
+import { ping } from "@verdaccio/registry-cli";
+//#region src/utils/registry-client.ts
+var debug = buildDebug("verdaccio:e2e-cli:registry-client");
+/**
+* Creates a user on the registry and returns the auth token.
+* Uses a unique username per run to avoid 409 conflicts.
+* Works against any running Verdaccio instance with htpasswd auth.
+*/
+async function createUser(registryUrl, user = `e2e-user-${Date.now()}`, password = "e2e-test-password") {
+	debug("creating user %s on %s", user, registryUrl);
+	const url = `${registryUrl}/-/user/org.couchdb.user:${encodeURIComponent(user)}`;
+	const response = await fetch(url, {
+		method: "PUT",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify({
+			name: user,
+			password,
+			_id: `org.couchdb.user:${user}`,
+			type: "user",
+			roles: [],
+			date: (/* @__PURE__ */ new Date()).toISOString()
+		})
+	});
+	const body = await response.json();
+	if (response.status === 201 || response.status === 200 || response.status === 409) {
+		const token = body.token;
+		if (token) {
+			debug("user %s authenticated, token obtained", user);
+			return {
+				token,
+				user
+			};
+		}
+	}
+	throw new Error(`Failed to create/login user "${user}" on ${registryUrl}: ${response.status} ${JSON.stringify(body)}`);
+}
+/**
+* Ping the registry to check it's alive.
+* Uses @verdaccio/registry-cli ping.
+*/
+async function pingRegistry(registryUrl) {
+	debug("pinging %s", registryUrl);
+	try {
+		return (await ping(registryUrl)).ok;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { createUser, pingRegistry };
+
+//# sourceMappingURL=registry-client.js.map

package/build/esm/utils/registry-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-client.js","names":[],"sources":["../../../src/utils/registry-client.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { ping } from '@verdaccio/registry-cli';\n\nconst debug = buildDebug('verdaccio:e2e-cli:registry-client');\n\nexport type RegistryAuth = {\n  token: string;\n  user: string;\n};\n\n/**\n * Creates a user on the registry and returns the auth token.\n * Uses a unique username per run to avoid 409 conflicts.\n * Works against any running Verdaccio instance with htpasswd auth.\n */\nexport async function createUser(\n  registryUrl: string,\n  user = `e2e-user-${Date.now()}`,\n  password = 'e2e-test-password'\n): Promise<RegistryAuth> {\n  debug('creating user %s on %s', user, registryUrl);\n  const url = `${registryUrl}/-/user/org.couchdb.user:${encodeURIComponent(user)}`;\n  const response = await fetch(url, {\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify({\n      name: user,\n      password,\n      _id: `org.couchdb.user:${user}`,\n      type: 'user',\n      roles: [],\n      date: new Date().toISOString(),\n    }),\n  });\n\n  const body = (await response.json()) as any;\n\n  if (response.status === 201 || response.status === 200 || response.status === 409) {\n    const token = body.token;\n    if (token) {\n      debug('user %s authenticated, token obtained', user);\n      return { token, user };\n    }\n  }\n\n  throw new Error(\n    `Failed to create/login user \"${user}\" on ${registryUrl}: ${response.status} ${JSON.stringify(body)}`\n  );\n}\n\n/**\n * Ping the registry to check it's alive.\n * Uses @verdaccio/registry-cli ping.\n */\nexport async function pingRegistry(registryUrl: string): Promise<boolean> {\n  debug('pinging %s', registryUrl);\n  try {\n    const result = await ping(registryUrl);\n    return result.ok;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;AAIA,IAAM,QAAQ,WAAW,mCAAmC;;;;;;AAY5D,eAAsB,WACpB,aACA,OAAO,YAAY,KAAK,IAAI,KAC5B,WAAW,qBACY;CACvB,MAAM,0BAA0B,MAAM,WAAW;CACjD,MAAM,MAAM,GAAG,YAAY,2BAA2B,mBAAmB,IAAI;CAC7E,MAAM,WAAW,MAAM,MAAM,KAAK;EAChC,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,MAAM,KAAK,UAAU;GACnB,MAAM;GACN;GACA,KAAK,oBAAoB;GACzB,MAAM;GACN,OAAO,CAAC;GACR,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EAC/B,CAAC;CACH,CAAC;CAED,MAAM,OAAQ,MAAM,SAAS,KAAK;CAElC,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;EACjF,MAAM,QAAQ,KAAK;EACnB,IAAI,OAAO;GACT,MAAM,yCAAyC,IAAI;GACnD,OAAO;IAAE;IAAO;GAAK;EACvB;CACF;CAEA,MAAM,IAAI,MACR,gCAAgC,KAAK,OAAO,YAAY,IAAI,SAAS,OAAO,GAAG,KAAK,UAAU,IAAI,GACpG;AACF;;;;;AAMA,eAAsB,aAAa,aAAuC;CACxE,MAAM,cAAc,WAAW;CAC/B,IAAI;EAEF,QAAO,MADc,KAAK,WAAW,EAAA,CACvB;CAChB,QAAQ;EACN,OAAO;CACT;AACF"}

package/build/index.d.ts

@@ -1,15 +1,6 @@
-export type ExecOutput = { stdout: string; stderr: string };
-export type PackageManagerAdapter = unknown;
-export type TestDefinition = unknown;
-export type TestContext = unknown;
-export type CliOptions = unknown;
-export const allTests: TestDefinition[];
-export const allScenarios: TestDefinition[];
-export function runAll(...args: unknown[]): never;
-export function runSuite(...args: unknown[]): never;
-export function createNpmAdapter(...args: unknown[]): never;
-export function createPnpmAdapter(...args: unknown[]): never;
-export function createYarnClassicAdapter(...args: unknown[]): never;
-export function createYarnModernAdapter(...args: unknown[]): never;
-export function createBunAdapter(...args: unknown[]): never;
-export function createDenoAdapter(...args: unknown[]): never;
+export declare function main(argv?: string[]): Promise<void>;
+export { allTests } from './tests';
+export { allScenarios } from './scenarios';
+export { createBunAdapter, createDenoAdapter, createNpmAdapter, createPnpmAdapter, createYarnModernAdapter, } from './adapters';
+export { runAll, runSuite } from './runner';
+export type { PackageManagerAdapter, TestDefinition, TestContext, CliOptions } from './types';

package/build/reporter.d.ts

@@ -0,0 +1,7 @@
+import { SuiteResult, TestResult } from './types';
+export declare function reportTestStart(adapterName: string, testName: string): void;
+export declare function reportTestResult(result: TestResult, hasSubTests?: boolean): void;
+export declare function reportSuiteStart(adapterName: string): void;
+export declare function reportSubTestResult(label: string, passed: boolean, duration?: number): void;
+export declare function reportSkipped(testName: string): void;
+export declare function reportSummary(results: SuiteResult[]): void;

package/build/runner.d.ts

@@ -0,0 +1,13 @@
+import { PackageManagerAdapter, SuiteResult, TestDefinition } from './types';
+export declare function runSuite(adapter: PackageManagerAdapter, tests: TestDefinition[], registryUrl: string, token: string, options: {
+    timeout: number;
+    testFilter?: string[];
+}): Promise<SuiteResult>;
+export declare function runAll(adapters: PackageManagerAdapter[], tests: TestDefinition[], registryUrl: string, token: string, options: {
+    timeout: number;
+    concurrency: number;
+    testFilter?: string[];
+}): Promise<{
+    results: SuiteResult[];
+    exitCode: number;
+}>;

package/build/scenarios/index.d.ts

@@ -0,0 +1,9 @@
+import { TestDefinition } from '../types';
+import { installMultipleDepsScenario } from './install-multiple-deps';
+import { metadataScenario } from './metadata';
+import { minimumReleaseAgeScenario } from './minimum-release-age';
+import { searchScenario } from './search';
+import { tarballsScenario } from './tarballs';
+import { uplinkFailureScenario } from './uplink-failure';
+export declare const allScenarios: TestDefinition[];
+export { installMultipleDepsScenario, minimumReleaseAgeScenario, searchScenario, tarballsScenario, metadataScenario, uplinkFailureScenario, };

package/build/scenarios/install-multiple-deps.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const installMultipleDepsScenario: TestDefinition;

package/build/scenarios/metadata.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const metadataScenario: TestDefinition;

package/build/scenarios/minimum-release-age.d.ts

@@ -0,0 +1,11 @@
+import { PackageManagerAdapter, TestDefinition } from '../types';
+/**
+ * True only for pnpm versions that actually enforce minimumReleaseAge.
+ *
+ * The cooldown is honored in pnpm 11.1.0+, but it is silently ignored in
+ * 11.0.0 / 11.0.1 (and the 11.0.0 release candidates) — those versions install
+ * brand-new packages regardless of the configured cooldown. We scope this
+ * scenario to pnpm 11.1.0 and newer so it doesn't false-fail on that regression.
+ */
+export declare function isPnpm11Plus(adapter: PackageManagerAdapter): boolean;
+export declare const minimumReleaseAgeScenario: TestDefinition;

package/build/scenarios/search.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const searchScenario: TestDefinition;

package/build/scenarios/tarballs.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const tarballsScenario: TestDefinition;

package/build/scenarios/uplink-failure.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const uplinkFailureScenario: TestDefinition;

package/build/tests/audit.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const auditTest: TestDefinition;

package/build/tests/ci.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const ciTest: TestDefinition;

package/build/tests/deprecate.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const deprecateTest: TestDefinition;

package/build/tests/dist-tags.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const distTagsTest: TestDefinition;

package/build/tests/index.d.ts

@@ -0,0 +1,15 @@
+import { allScenarios, installMultipleDepsScenario, metadataScenario, minimumReleaseAgeScenario, searchScenario, tarballsScenario, uplinkFailureScenario } from '../scenarios';
+import { TestDefinition } from '../types';
+import { auditTest } from './audit';
+import { ciTest } from './ci';
+import { deprecateTest } from './deprecate';
+import { distTagsTest } from './dist-tags';
+import { infoTest } from './info';
+import { installTest } from './install';
+import { loginTest } from './login';
+import { pingTest } from './ping';
+import { publishTest } from './publish';
+import { searchTest } from './search';
+import { unpublishTest } from './unpublish';
+export declare const allTests: TestDefinition[];
+export { publishTest, installTest, ciTest, auditTest, infoTest, deprecateTest, distTagsTest, loginTest, pingTest, searchTest, unpublishTest, installMultipleDepsScenario, minimumReleaseAgeScenario, tarballsScenario, metadataScenario, searchScenario, uplinkFailureScenario, allScenarios, };

package/build/tests/info.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const infoTest: TestDefinition;

package/build/tests/install.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const installTest: TestDefinition;

package/build/tests/login.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const loginTest: TestDefinition;

package/build/tests/ping.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const pingTest: TestDefinition;

package/build/tests/publish.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const publishTest: TestDefinition;

package/build/tests/search.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const searchTest: TestDefinition;

package/build/tests/unpublish.d.ts

@@ -0,0 +1,2 @@
+import { TestDefinition } from '../types';
+export declare const unpublishTest: TestDefinition;

package/build/types.d.ts

@@ -0,0 +1,91 @@
+import { SpawnOptions } from 'child_process';
+export type ExecOutput = {
+    stdout: string;
+    stderr: string;
+};
+export type ExecFn = (options: SpawnOptions, ...args: string[]) => Promise<ExecOutput>;
+export type TestContext = {
+    registryUrl: string;
+    token: string;
+    port: number;
+    exec: ExecFn;
+    adapter: PackageManagerAdapter;
+    /** Unique suffix for package names to avoid conflicts across runs */
+    runId: string;
+    /** Report a sub-test step. Runs the callback and reports pass/fail. */
+    subTest: (label: string, fn: () => Promise<void>) => Promise<void>;
+};
+export type SubTestResult = {
+    label: string;
+    passed: boolean;
+    duration: number;
+    error?: string;
+};
+export type TestResult = {
+    name: string;
+    passed: boolean;
+    duration: number;
+    error?: string;
+    subTests?: SubTestResult[];
+};
+export type SuiteResult = {
+    adapter: string;
+    tests: TestResult[];
+    passed: number;
+    failed: number;
+    skipped: number;
+    duration: number;
+};
+export type TestDefinition = {
+    name: string;
+    run: (ctx: TestContext) => Promise<void>;
+    /** Commands required for this test (e.g. 'deprecate', 'search'). Skipped if adapter doesn't support them. */
+    requires?: string[];
+    /**
+     * Minimum timeout (ms) for this test. The effective timeout is the larger of
+     * this and the CLI-level --timeout. Use for long scenarios (large tarballs,
+     * uplink failure simulation) that outgrow the default per-test budget.
+     */
+    timeout?: number;
+    /**
+     * Predicate to gate a test to specific adapters/versions. Returns false to skip.
+     * Use for tests that only make sense on a particular package manager or version
+     * (e.g. pnpm-only settings). Evaluated after the `requires` check.
+     */
+    appliesTo?: (adapter: PackageManagerAdapter) => boolean;
+};
+export interface PackageManagerAdapter {
+    /** Display name, e.g. "npm@10" */
+    name: string;
+    /** Package manager type: npm, pnpm, yarn-modern, bun, deno */
+    type: 'npm' | 'pnpm' | 'yarn-modern' | 'bun' | 'deno';
+    /** Resolved path to the binary */
+    bin: string;
+    /** Commands this PM supports */
+    supports: Set<string>;
+    /** Build --registry args */
+    registryArg(url: string): string[];
+    /** Build --prefix / --cwd args */
+    prefixArg(folder: string): string[];
+    /** Execute a command with this PM */
+    exec(options: SpawnOptions, ...args: string[]): Promise<ExecOutput>;
+    /** Prepare a temp project for testing. Returns path to temp folder. */
+    prepareProject(packageName: string, version: string, registryUrl: string, port: number, token: string, dependencies?: Record<string, string>, devDependencies?: Record<string, string>): Promise<{
+        tempFolder: string;
+    }>;
+    /** Import a Verdaccio yarn plugin into a project (yarn-modern only) */
+    importPlugin?(cwd: string, pluginName: string): Promise<void>;
+}
+export type CliOptions = {
+    registry: string;
+    pm?: string[];
+    test?: string[];
+    concurrency: number;
+    timeout: number;
+    token?: string;
+    verbose: boolean;
+    /** Port of the mock uplink used by scenario:uplink-failure (also E2E_UPLINK_PORT) */
+    uplinkPort?: number;
+    /** Print the recommended registry config for the full battery and exit */
+    printConfig?: boolean;
+};

package/build/utils/e2e-config.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Recommended Verdaccio config for running the full e2e-cli battery,
+ * printed by `verdaccio-e2e --print-config`. It is what the consuming repos'
+ * CI jobs and scripts/run-e2e.sh feed to `verdaccio --config`:
+ *
+ *   - max_body_size raised so scenario:tarballs can publish ~30 MB packages
+ *     (Verdaccio's default is 10mb)
+ *   - an `e2emock` uplink + `e2e-uplink-*` package pattern wired to the mock
+ *     uplink server that scenario:uplink-failure starts on E2E_UPLINK_PORT
+ *     (short timeout so the "slow uplink" case completes quickly; high
+ *     max_fails so simulated failures don't trip the circuit breaker for
+ *     later sub-tests)
+ *   - NO npmjs uplink: the whole suite publishes every package it consumes,
+ *     so the registry under test never talks to the outside world and the
+ *     battery runs fully offline (and deterministically in CI)
+ *
+ * Relative paths (storage/htpasswd) resolve next to the config file, so write
+ * it into a disposable directory.
+ */
+export declare const DEFAULT_UPLINK_PORT = 4874;
+export declare function buildE2EConfig(uplinkPort?: number): string;

package/build/utils/http-client.d.ts

@@ -0,0 +1,49 @@
+export type PackumentResponse = {
+    status: number;
+    headers: Headers;
+    /** Parsed JSON body, or undefined when the response is not JSON (e.g. 304) */
+    body?: any;
+};
+export type TarballDownload = {
+    status: number;
+    headers: Headers;
+    /** Total bytes received */
+    bytes: number;
+    /** hex-encoded sha1 of the received bytes (matches dist.shasum) */
+    sha1: string;
+    /** `sha512-<base64>` of the received bytes (matches dist.integrity) */
+    integrity: string;
+};
+export type FetchPackumentOptions = {
+    /** Request the abbreviated (install) metadata format */
+    abbreviated?: boolean;
+    /** Send If-None-Match with this value */
+    etag?: string;
+    /** Bearer token */
+    token?: string;
+};
+export declare const ABBREVIATED_ACCEPT = "application/vnd.npm.install-v1+json";
+/**
+ * Registry URL for a package name. Scoped names are encoded with the same
+ * `%2f` form npm clients use: `@scope%2fname`.
+ */
+export declare function packumentUrl(registryUrl: string, pkgName: string): string;
+export declare function fetchPackument(registryUrl: string, pkgName: string, options?: FetchPackumentOptions): Promise<PackumentResponse>;
+export type DownloadTarballOptions = {
+    signal?: AbortSignal;
+    token?: string;
+    /** Called after the first chunk of the body arrives (useful to abort mid-stream) */
+    onFirstChunk?: () => void;
+    /** Called after every chunk with the total bytes received so far (useful to abort at a threshold) */
+    onChunk?: (bytesReceived: number) => void;
+};
+/**
+ * Download a tarball fully, computing sha1/sha512 integrity on the fly.
+ * Rejects with the underlying error when aborted or the connection drops.
+ */
+export declare function downloadTarball(url: string, options?: DownloadTarballOptions): Promise<TarballDownload>;
+/** Compute npm-style dist values (shasum/integrity) for a buffer. */
+export declare function computeDist(buffer: Buffer): {
+    shasum: string;
+    integrity: string;
+};

package/build/utils/index.d.ts

@@ -0,0 +1,4 @@
+export { exec, setVerbose } from './process';
+export { createTempFolder, getPackageJSON, getREADME, prepareGenericEmptyProject } from './project';
+export { createUser, pingRegistry } from './registry-client';
+export { normalizeInfo, parseInfoJson } from './info';

package/build/utils/info.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Normalize the parsed output of `npm/pnpm info <pkg> --json`.
+ *
+ * npm 12+ wraps the result in a single-element JSON array
+ * (e.g. `[{ "name": "verdaccio", ... }]`) for both full-packument and
+ * version-specific queries, whereas older npm versions return a bare object.
+ * When multiple results match a range, the array holds one entry per match;
+ * the last entry is the highest (latest) version, which is what the tests want.
+ *
+ * Returns the bare object as-is for backward compatibility.
+ */
+export declare function normalizeInfo(parsed: any): any;
+/** Parse `info --json` stdout and normalize to a single info object. */
+export declare function parseInfoJson(stdout: string): any;

package/build/utils/mock-uplink.d.ts

@@ -0,0 +1,47 @@
+export type UplinkMode = 
+/** Serve packuments and tarballs normally */
+'ok'
+/** Send tarball headers + half the body, then destroy the socket */
+ | 'drop-mid-stream'
+/** Delay every response long enough to trip the registry's uplink timeout */
+ | 'slow'
+/** Respond 500 to everything */
+ | 'error-500';
+type MockPackage = {
+    name: string;
+    version: string;
+    tarball: Buffer;
+    shasum: string;
+    integrity: string;
+};
+/**
+ * Minimal controllable npm uplink used by scenario:uplink-failure.
+ *
+ * The registry under test is configured (see --print-config) to proxy the
+ * `e2e-uplink-*` package pattern to this server, so the scenario can flip the
+ * uplink between healthy, dropping connections mid-tarball, slow, and down.
+ */
+export declare class MockUplink {
+    readonly port: number;
+    mode: UplinkMode;
+    requests: string[];
+    private server?;
+    private packages;
+    private searchResults;
+    constructor(port: number);
+    /** Register a package served by this uplink; tarball is random (incompressible) bytes. */
+    addPackage(name: string, tarballBytes?: number): MockPackage;
+    /** Register a result served by the /-/v1/search endpoint. */
+    addSearchResult(name: string, version?: string): void;
+    /**
+     * npmjs-faithful /-/v1/search: filters by `text` substring, applies
+     * `from`/`size` itself (like registry.npmjs.org does) and reports the real
+     * `total` of matches. Mimicking the upstream offsetting is what exposes
+     * double pagination in the registry under test.
+     */
+    private searchResponse;
+    private packument;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+}
+export {};

package/build/utils/process.d.ts

@@ -0,0 +1,11 @@
+import { SpawnOptions } from 'child_process';
+import { ExecOutput } from '../types';
+export declare function setVerbose(v: boolean): void;
+/**
+ * Always-on scenario tracing, printed inline with the test output in the same
+ * style as the verbose `$ <command>` lines — so a red scenario explains what
+ * it actually saw (statuses, headers, bodies, timings) in any run, CI or
+ * local, without a reproduction. Accepts util.format tokens (%s %d %j %o).
+ */
+export declare function trace(fmt: string, ...args: unknown[]): void;
+export declare function exec(options: SpawnOptions, cmd: string, args: string[]): Promise<ExecOutput>;

package/build/utils/project.d.ts

@@ -0,0 +1,6 @@
+export declare function createTempFolder(prefix: string): Promise<string>;
+export declare function getPackageJSON(packageName: string, version?: string, dependencies?: Record<string, string>, devDependencies?: Record<string, string>): string;
+export declare function getREADME(packageName: string): string;
+export declare function prepareGenericEmptyProject(packageName: string, version: string, port: number, token: string, registryDomain: string, dependencies?: Record<string, string>, devDependencies?: Record<string, string>): Promise<{
+    tempFolder: string;
+}>;

package/build/utils/publish.d.ts

@@ -0,0 +1,17 @@
+import { TestContext } from '../types';
+/** Build a minimal valid npm package tarball (package/package.json inside). */
+export declare function buildPackageTarball(pkgName: string, version: string, dependencies?: Record<string, string>): Buffer;
+/**
+ * Publish straight through the registry HTTP API (same PUT an npm client
+ * sends). Used for adapters that cannot publish themselves (eg. deno) so
+ * every fixture still comes from the registry under test — never from an
+ * external registry.
+ */
+export declare function publishViaHttp(ctx: TestContext, pkgName: string, version?: string, dependencies?: Record<string, string>): Promise<void>;
+/**
+ * Publish a package to the registry under test so later steps (install, ci,
+ * audit, info, search…) can consume it without ever touching an external
+ * registry — the whole suite must be runnable offline. Uses the package
+ * manager when it can publish, the raw HTTP API otherwise (eg. deno).
+ */
+export declare function publishLocalPackage(ctx: TestContext, pkgName: string, version?: string, dependencies?: Record<string, string>): Promise<void>;