@verdaccio/e2e-cli 3.0.0 → 3.2.0

package/build/esm/scenarios/uplink-failure.js

@@ -0,0 +1,139 @@
+import { trace } from "../utils/process.js";
+import { downloadTarball, fetchPackument } from "../utils/http-client.js";
+import { MockUplink } from "../utils/mock-uplink.js";
+import assert from "assert";
+//#region src/scenarios/uplink-failure.ts
+/**
+* Scenario: uplink-failure
+*
+* Verifies how the registry behaves when its uplink misbehaves. Requires the
+* registry to be configured with an uplink pointing at the mock uplink port
+* and a package pattern proxied to it (see `--print-config`):
+*
+*   uplinks:
+*     e2emock:
+*       url: http://localhost:<E2E_UPLINK_PORT>/
+*       timeout: 3s
+*       max_fails: 100
+*   packages:
+*     'e2e-uplink-*':
+*       access: $all
+*       proxy: e2emock
+*
+* The scenario starts its own HTTP server on that port and flips it between
+* modes:
+*   - healthy: packument + tarball proxied through, tarball URL rewritten
+*   - drop-mid-stream: uplink kills the socket halfway through a tarball —
+*     the client must not receive a "successful" corrupt download, and the
+*     tarball must be intact on retry (no poisoned cache)
+*   - down: previously fetched packages still served from cache; unknown
+*     packages fail cleanly; the registry stays alive
+*   - slow: uplink slower than the configured timeout — the registry gives up
+*     instead of hanging
+*
+* Gated on E2E_UPLINK_PORT being set (the harness exports it) so runs against
+* arbitrary registries skip it cleanly, and to the npm adapter so it runs once
+* per suite.
+*/
+function uplinkPort() {
+	return parseInt(process.env.E2E_UPLINK_PORT || "", 10);
+}
+async function testUplinkFailure(ctx) {
+	const id = ctx.runId;
+	const mock = new MockUplink(uplinkPort());
+	const cachedPkg = `e2e-uplink-cached-${id}`;
+	const cached = mock.addPackage(cachedPkg, 524288);
+	await mock.start();
+	try {
+		await ctx.subTest("healthy uplink: packument and tarball proxied through", async () => {
+			const { status, body } = await fetchPackument(ctx.registryUrl, cachedPkg);
+			trace("healthy proxy %s → %d | keys=%j", cachedPkg, status, Object.keys(body ?? {}));
+			assert.strictEqual(status, 200, `Expected 200 proxying ${cachedPkg}, got ${status}`);
+			assert.strictEqual(body.name, cachedPkg, "Proxied packument name mismatch");
+			const tarball = body.versions["1.0.0"].dist.tarball;
+			assert.ok(tarball.startsWith(ctx.registryUrl), `Expected proxied dist.tarball rewritten to ${ctx.registryUrl}, got ${tarball}`);
+			const download = await downloadTarball(tarball);
+			assert.strictEqual(download.status, 200, "Proxied tarball download failed");
+			assert.strictEqual(download.sha1, cached.shasum, "Proxied tarball bytes mismatch");
+			trace("mock uplink requests so far: %j", mock.requests);
+			assert.ok(mock.requests.length > 0, "Expected the registry to hit the mock uplink");
+		});
+		await ctx.subTest("uplink drops connection mid-tarball", async () => {
+			const droppedPkg = `e2e-uplink-dropped-${id}`;
+			const dropped = mock.addPackage(droppedPkg, 524288);
+			const { status, body } = await fetchPackument(ctx.registryUrl, droppedPkg);
+			assert.strictEqual(status, 200, `Expected 200 for ${droppedPkg} packument`);
+			const tarball = body.versions["1.0.0"].dist.tarball;
+			mock.mode = "drop-mid-stream";
+			let sawCleanFailure = false;
+			try {
+				const download = await downloadTarball(tarball, { signal: AbortSignal.timeout(15e3) });
+				sawCleanFailure = download.status !== 200 || download.sha1 !== dropped.shasum;
+				trace("drop-mid-stream download: status=%d bytes=%d sha1=%s (expected %s)", download.status, download.bytes, download.sha1, dropped.shasum);
+			} catch (err) {
+				assert.ok(err.name !== "TimeoutError", "Registry left the client hanging after the uplink dropped mid-tarball (response never terminated within 15s)");
+				sawCleanFailure = true;
+				trace("drop-mid-stream download rejected as expected: %s", err instanceof Error ? err.message : err);
+			}
+			assert.ok(sawCleanFailure, "Expected the client download to fail while the uplink drops mid-stream");
+			mock.mode = "ok";
+			const retry = await downloadTarball(tarball);
+			trace("retry after recovery → %d bytes=%d sha1=%s", retry.status, retry.bytes, retry.sha1);
+			assert.strictEqual(retry.status, 200, "Tarball download after uplink recovery failed");
+			assert.strictEqual(retry.sha1, dropped.shasum, "Registry served a corrupt tarball after a mid-stream uplink failure (poisoned cache?)");
+		});
+		await ctx.subTest("slow uplink hits the timeout instead of hanging", async () => {
+			const slowPkg = `e2e-uplink-slow-${id}`;
+			mock.addPackage(slowPkg);
+			mock.mode = "slow";
+			const start = Date.now();
+			const { status } = await fetchPackument(ctx.registryUrl, slowPkg);
+			const elapsed = Date.now() - start;
+			trace("slow uplink: %s → %d in %dms", slowPkg, status, elapsed);
+			mock.mode = "ok";
+			assert.ok(status >= 400, `Expected an error status for a timed-out uplink, got ${status}`);
+			assert.ok(elapsed < 6e3, `Expected the registry to time out (~3s), but the request took ${elapsed}ms`);
+		});
+		await ctx.subTest("uplink responding 500: cache served, unknown fails cleanly", async () => {
+			mock.mode = "error-500";
+			const cachedResp = await fetchPackument(ctx.registryUrl, cachedPkg);
+			trace("uplink 500: cached %s → %d", cachedPkg, cachedResp.status);
+			assert.strictEqual(cachedResp.status, 200, `Expected cached packument for ${cachedPkg} while the uplink returns 500, got ${cachedResp.status}`);
+			const unknown = await fetchPackument(ctx.registryUrl, `e2e-uplink-500-missing-${id}`);
+			trace("uplink 500: unknown package → %d | body=%j", unknown.status, unknown.body);
+			assert.ok(unknown.status >= 400, `Expected a clean 4xx/5xx for an unknown package while the uplink returns 500, got ${unknown.status}`);
+			const ping = await fetch(`${ctx.registryUrl}/-/ping`);
+			assert.strictEqual(ping.status, 200, "Registry stopped responding after uplink 500s");
+			mock.mode = "ok";
+		});
+	} finally {
+		await mock.stop();
+	}
+	await ctx.subTest("uplink down: cached package still served", async () => {
+		const { status, body } = await fetchPackument(ctx.registryUrl, cachedPkg);
+		trace("uplink down: cached %s → %d", cachedPkg, status);
+		assert.strictEqual(status, 200, `Expected cached packument for ${cachedPkg} while the uplink is down, got ${status}`);
+		const tarball = body.versions["1.0.0"].dist.tarball;
+		const download = await downloadTarball(tarball);
+		assert.strictEqual(download.status, 200, "Cached tarball not served while uplink is down");
+		assert.strictEqual(download.sha1, cached.shasum, "Cached tarball bytes mismatch");
+	});
+	await ctx.subTest("uplink down: unknown package fails cleanly", async () => {
+		const started = Date.now();
+		const { status } = await fetchPackument(ctx.registryUrl, `e2e-uplink-missing-${id}`);
+		trace("uplink down: unknown package → %d in %dms", status, Date.now() - started);
+		assert.ok(status >= 400, `Expected a clean 4xx/5xx for an unknown package with the uplink down, got ${status}`);
+		const ping = await fetch(`${ctx.registryUrl}/-/ping`);
+		assert.strictEqual(ping.status, 200, "Registry stopped responding after uplink failures");
+	});
+}
+var uplinkFailureScenario = {
+	name: "scenario:uplink-failure",
+	appliesTo: (adapter) => adapter.type === "npm" && Number.isFinite(uplinkPort()),
+	timeout: 12e4,
+	run: testUplinkFailure
+};
+//#endregion
+export { uplinkFailureScenario };
+
+//# sourceMappingURL=uplink-failure.js.map

package/build/esm/scenarios/uplink-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uplink-failure.js","names":[],"sources":["../../../src/scenarios/uplink-failure.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { downloadTarball, fetchPackument } from '../utils/http-client';\nimport { MockUplink } from '../utils/mock-uplink';\nimport { trace } from '../utils/process';\n\n/**\n * Scenario: uplink-failure\n *\n * Verifies how the registry behaves when its uplink misbehaves. Requires the\n * registry to be configured with an uplink pointing at the mock uplink port\n * and a package pattern proxied to it (see `--print-config`):\n *\n *   uplinks:\n *     e2emock:\n *       url: http://localhost:<E2E_UPLINK_PORT>/\n *       timeout: 3s\n *       max_fails: 100\n *   packages:\n *     'e2e-uplink-*':\n *       access: $all\n *       proxy: e2emock\n *\n * The scenario starts its own HTTP server on that port and flips it between\n * modes:\n *   - healthy: packument + tarball proxied through, tarball URL rewritten\n *   - drop-mid-stream: uplink kills the socket halfway through a tarball —\n *     the client must not receive a \"successful\" corrupt download, and the\n *     tarball must be intact on retry (no poisoned cache)\n *   - down: previously fetched packages still served from cache; unknown\n *     packages fail cleanly; the registry stays alive\n *   - slow: uplink slower than the configured timeout — the registry gives up\n *     instead of hanging\n *\n * Gated on E2E_UPLINK_PORT being set (the harness exports it) so runs against\n * arbitrary registries skip it cleanly, and to the npm adapter so it runs once\n * per suite.\n */\n\nfunction uplinkPort(): number {\n  return parseInt(process.env.E2E_UPLINK_PORT || '', 10);\n}\n\nasync function testUplinkFailure(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n  const mock = new MockUplink(uplinkPort());\n  const cachedPkg = `e2e-uplink-cached-${id}`;\n  const cached = mock.addPackage(cachedPkg, 512 * 1024);\n\n  await mock.start();\n  try {\n    await ctx.subTest('healthy uplink: packument and tarball proxied through', async () => {\n      const { status, body } = await fetchPackument(ctx.registryUrl, cachedPkg);\n      trace('healthy proxy %s → %d | keys=%j', cachedPkg, status, Object.keys(body ?? {}));\n      assert.strictEqual(status, 200, `Expected 200 proxying ${cachedPkg}, got ${status}`);\n      assert.strictEqual(body.name, cachedPkg, 'Proxied packument name mismatch');\n      const tarball: string = body.versions['1.0.0'].dist.tarball;\n      assert.ok(\n        tarball.startsWith(ctx.registryUrl),\n        `Expected proxied dist.tarball rewritten to ${ctx.registryUrl}, got ${tarball}`\n      );\n      const download = await downloadTarball(tarball);\n      assert.strictEqual(download.status, 200, 'Proxied tarball download failed');\n      assert.strictEqual(download.sha1, cached.shasum, 'Proxied tarball bytes mismatch');\n      trace('mock uplink requests so far: %j', mock.requests);\n      assert.ok(mock.requests.length > 0, 'Expected the registry to hit the mock uplink');\n    });\n\n    await ctx.subTest('uplink drops connection mid-tarball', async () => {\n      const droppedPkg = `e2e-uplink-dropped-${id}`;\n      const dropped = mock.addPackage(droppedPkg, 512 * 1024);\n\n      // Packument fetch is unaffected by drop-mid-stream (tarball route only).\n      const { status, body } = await fetchPackument(ctx.registryUrl, droppedPkg);\n      assert.strictEqual(status, 200, `Expected 200 for ${droppedPkg} packument`);\n      const tarball: string = body.versions['1.0.0'].dist.tarball;\n\n      mock.mode = 'drop-mid-stream';\n      let sawCleanFailure = false;\n      try {\n        // The registry must terminate the client response promptly when its\n        // uplink dies — a client left hanging is a bug, so cap the wait.\n        const download = await downloadTarball(tarball, { signal: AbortSignal.timeout(15_000) });\n        // A non-200, or a truncated/corrupt body, are both acceptable failures —\n        // what must NOT happen is a \"successful\" download with wrong bytes\n        // going undetected, so we check integrity ourselves.\n        sawCleanFailure = download.status !== 200 || download.sha1 !== dropped.shasum;\n        trace(\n          'drop-mid-stream download: status=%d bytes=%d sha1=%s (expected %s)',\n          download.status,\n          download.bytes,\n          download.sha1,\n          dropped.shasum\n        );\n      } catch (err) {\n        assert.ok(\n          (err as Error).name !== 'TimeoutError',\n          'Registry left the client hanging after the uplink dropped mid-tarball ' +\n            '(response never terminated within 15s)'\n        );\n        sawCleanFailure = true;\n        trace(\n          'drop-mid-stream download rejected as expected: %s',\n          err instanceof Error ? err.message : err\n        );\n      }\n      assert.ok(\n        sawCleanFailure,\n        'Expected the client download to fail while the uplink drops mid-stream'\n      );\n\n      // Back to healthy: the tarball must be intact (no partial tarball cached).\n      mock.mode = 'ok';\n      const retry = await downloadTarball(tarball);\n      trace('retry after recovery → %d bytes=%d sha1=%s', retry.status, retry.bytes, retry.sha1);\n      assert.strictEqual(retry.status, 200, 'Tarball download after uplink recovery failed');\n      assert.strictEqual(\n        retry.sha1,\n        dropped.shasum,\n        'Registry served a corrupt tarball after a mid-stream uplink failure (poisoned cache?)'\n      );\n    });\n\n    await ctx.subTest('slow uplink hits the timeout instead of hanging', async () => {\n      const slowPkg = `e2e-uplink-slow-${id}`;\n      mock.addPackage(slowPkg);\n      mock.mode = 'slow';\n      const start = Date.now();\n      const { status } = await fetchPackument(ctx.registryUrl, slowPkg);\n      const elapsed = Date.now() - start;\n      trace('slow uplink: %s → %d in %dms', slowPkg, status, elapsed);\n      mock.mode = 'ok';\n      assert.ok(status >= 400, `Expected an error status for a timed-out uplink, got ${status}`);\n      // Configured uplink timeout is 3s with retry: 0 — anything close to the\n      // mock's 10s answer means retries or timeouts are multiplying again\n      // (the max_fails-as-retry-limit bug family).\n      assert.ok(\n        elapsed < 6_000,\n        `Expected the registry to time out (~3s), but the request took ${elapsed}ms`\n      );\n    });\n\n    await ctx.subTest('uplink responding 500: cache served, unknown fails cleanly', async () => {\n      mock.mode = 'error-500';\n      // The already-proxied package must keep working from cache.\n      const cachedResp = await fetchPackument(ctx.registryUrl, cachedPkg);\n      trace('uplink 500: cached %s → %d', cachedPkg, cachedResp.status);\n      assert.strictEqual(\n        cachedResp.status,\n        200,\n        `Expected cached packument for ${cachedPkg} while the uplink returns 500, got ${cachedResp.status}`\n      );\n      // An unknown package must fail cleanly, not crash or hang.\n      const unknown = await fetchPackument(ctx.registryUrl, `e2e-uplink-500-missing-${id}`);\n      trace('uplink 500: unknown package → %d | body=%j', unknown.status, unknown.body);\n      assert.ok(\n        unknown.status >= 400,\n        `Expected a clean 4xx/5xx for an unknown package while the uplink returns 500, got ${unknown.status}`\n      );\n      const ping = await fetch(`${ctx.registryUrl}/-/ping`);\n      assert.strictEqual(ping.status, 200, 'Registry stopped responding after uplink 500s');\n      mock.mode = 'ok';\n    });\n  } finally {\n    await mock.stop();\n  }\n\n  await ctx.subTest('uplink down: cached package still served', async () => {\n    const { status, body } = await fetchPackument(ctx.registryUrl, cachedPkg);\n    trace('uplink down: cached %s → %d', cachedPkg, status);\n    assert.strictEqual(\n      status,\n      200,\n      `Expected cached packument for ${cachedPkg} while the uplink is down, got ${status}`\n    );\n    const tarball: string = body.versions['1.0.0'].dist.tarball;\n    const download = await downloadTarball(tarball);\n    assert.strictEqual(download.status, 200, 'Cached tarball not served while uplink is down');\n    assert.strictEqual(download.sha1, cached.shasum, 'Cached tarball bytes mismatch');\n  });\n\n  await ctx.subTest('uplink down: unknown package fails cleanly', async () => {\n    const started = Date.now();\n    const { status } = await fetchPackument(ctx.registryUrl, `e2e-uplink-missing-${id}`);\n    trace('uplink down: unknown package → %d in %dms', status, Date.now() - started);\n    assert.ok(\n      status >= 400,\n      `Expected a clean 4xx/5xx for an unknown package with the uplink down, got ${status}`\n    );\n    const ping = await fetch(`${ctx.registryUrl}/-/ping`);\n    assert.strictEqual(ping.status, 200, 'Registry stopped responding after uplink failures');\n  });\n}\n\nexport const uplinkFailureScenario: TestDefinition = {\n  name: 'scenario:uplink-failure',\n  // Needs the harness-provided uplink config; skipped cleanly otherwise.\n  appliesTo: (adapter) => adapter.type === 'npm' && Number.isFinite(uplinkPort()),\n  timeout: 120_000,\n  run: testUplinkFailure,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,SAAS,aAAqB;CAC5B,OAAO,SAAS,QAAQ,IAAI,mBAAmB,IAAI,EAAE;AACvD;AAEA,eAAe,kBAAkB,KAAiC;CAChE,MAAM,KAAK,IAAI;CACf,MAAM,OAAO,IAAI,WAAW,WAAW,CAAC;CACxC,MAAM,YAAY,qBAAqB;CACvC,MAAM,SAAS,KAAK,WAAW,WAAW,MAAU;CAEpD,MAAM,KAAK,MAAM;CACjB,IAAI;EACF,MAAM,IAAI,QAAQ,yDAAyD,YAAY;GACrF,MAAM,EAAE,QAAQ,SAAS,MAAM,eAAe,IAAI,aAAa,SAAS;GACxE,MAAM,mCAAmC,WAAW,QAAQ,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC;GACnF,OAAO,YAAY,QAAQ,KAAK,yBAAyB,UAAU,QAAQ,QAAQ;GACnF,OAAO,YAAY,KAAK,MAAM,WAAW,iCAAiC;GAC1E,MAAM,UAAkB,KAAK,SAAS,QAAQ,CAAC,KAAK;GACpD,OAAO,GACL,QAAQ,WAAW,IAAI,WAAW,GAClC,8CAA8C,IAAI,YAAY,QAAQ,SACxE;GACA,MAAM,WAAW,MAAM,gBAAgB,OAAO;GAC9C,OAAO,YAAY,SAAS,QAAQ,KAAK,iCAAiC;GAC1E,OAAO,YAAY,SAAS,MAAM,OAAO,QAAQ,gCAAgC;GACjF,MAAM,mCAAmC,KAAK,QAAQ;GACtD,OAAO,GAAG,KAAK,SAAS,SAAS,GAAG,8CAA8C;EACpF,CAAC;EAED,MAAM,IAAI,QAAQ,uCAAuC,YAAY;GACnE,MAAM,aAAa,sBAAsB;GACzC,MAAM,UAAU,KAAK,WAAW,YAAY,MAAU;GAGtD,MAAM,EAAE,QAAQ,SAAS,MAAM,eAAe,IAAI,aAAa,UAAU;GACzE,OAAO,YAAY,QAAQ,KAAK,oBAAoB,WAAW,WAAW;GAC1E,MAAM,UAAkB,KAAK,SAAS,QAAQ,CAAC,KAAK;GAEpD,KAAK,OAAO;GACZ,IAAI,kBAAkB;GACtB,IAAI;IAGF,MAAM,WAAW,MAAM,gBAAgB,SAAS,EAAE,QAAQ,YAAY,QAAQ,IAAM,EAAE,CAAC;IAIvF,kBAAkB,SAAS,WAAW,OAAO,SAAS,SAAS,QAAQ;IACvE,MACE,sEACA,SAAS,QACT,SAAS,OACT,SAAS,MACT,QAAQ,MACV;GACF,SAAS,KAAK;IACZ,OAAO,GACJ,IAAc,SAAS,gBACxB,8GAEF;IACA,kBAAkB;IAClB,MACE,qDACA,eAAe,QAAQ,IAAI,UAAU,GACvC;GACF;GACA,OAAO,GACL,iBACA,wEACF;GAGA,KAAK,OAAO;GACZ,MAAM,QAAQ,MAAM,gBAAgB,OAAO;GAC3C,MAAM,8CAA8C,MAAM,QAAQ,MAAM,OAAO,MAAM,IAAI;GACzF,OAAO,YAAY,MAAM,QAAQ,KAAK,+CAA+C;GACrF,OAAO,YACL,MAAM,MACN,QAAQ,QACR,uFACF;EACF,CAAC;EAED,MAAM,IAAI,QAAQ,mDAAmD,YAAY;GAC/E,MAAM,UAAU,mBAAmB;GACnC,KAAK,WAAW,OAAO;GACvB,KAAK,OAAO;GACZ,MAAM,QAAQ,KAAK,IAAI;GACvB,MAAM,EAAE,WAAW,MAAM,eAAe,IAAI,aAAa,OAAO;GAChE,MAAM,UAAU,KAAK,IAAI,IAAI;GAC7B,MAAM,gCAAgC,SAAS,QAAQ,OAAO;GAC9D,KAAK,OAAO;GACZ,OAAO,GAAG,UAAU,KAAK,wDAAwD,QAAQ;GAIzF,OAAO,GACL,UAAU,KACV,iEAAiE,QAAQ,GAC3E;EACF,CAAC;EAED,MAAM,IAAI,QAAQ,8DAA8D,YAAY;GAC1F,KAAK,OAAO;GAEZ,MAAM,aAAa,MAAM,eAAe,IAAI,aAAa,SAAS;GAClE,MAAM,8BAA8B,WAAW,WAAW,MAAM;GAChE,OAAO,YACL,WAAW,QACX,KACA,iCAAiC,UAAU,qCAAqC,WAAW,QAC7F;GAEA,MAAM,UAAU,MAAM,eAAe,IAAI,aAAa,0BAA0B,IAAI;GACpF,MAAM,8CAA8C,QAAQ,QAAQ,QAAQ,IAAI;GAChF,OAAO,GACL,QAAQ,UAAU,KAClB,qFAAqF,QAAQ,QAC/F;GACA,MAAM,OAAO,MAAM,MAAM,GAAG,IAAI,YAAY,QAAQ;GACpD,OAAO,YAAY,KAAK,QAAQ,KAAK,+CAA+C;GACpF,KAAK,OAAO;EACd,CAAC;CACH,UAAU;EACR,MAAM,KAAK,KAAK;CAClB;CAEA,MAAM,IAAI,QAAQ,4CAA4C,YAAY;EACxE,MAAM,EAAE,QAAQ,SAAS,MAAM,eAAe,IAAI,aAAa,SAAS;EACxE,MAAM,+BAA+B,WAAW,MAAM;EACtD,OAAO,YACL,QACA,KACA,iCAAiC,UAAU,iCAAiC,QAC9E;EACA,MAAM,UAAkB,KAAK,SAAS,QAAQ,CAAC,KAAK;EACpD,MAAM,WAAW,MAAM,gBAAgB,OAAO;EAC9C,OAAO,YAAY,SAAS,QAAQ,KAAK,gDAAgD;EACzF,OAAO,YAAY,SAAS,MAAM,OAAO,QAAQ,+BAA+B;CAClF,CAAC;CAED,MAAM,IAAI,QAAQ,8CAA8C,YAAY;EAC1E,MAAM,UAAU,KAAK,IAAI;EACzB,MAAM,EAAE,WAAW,MAAM,eAAe,IAAI,aAAa,sBAAsB,IAAI;EACnF,MAAM,6CAA6C,QAAQ,KAAK,IAAI,IAAI,OAAO;EAC/E,OAAO,GACL,UAAU,KACV,6EAA6E,QAC/E;EACA,MAAM,OAAO,MAAM,MAAM,GAAG,IAAI,YAAY,QAAQ;EACpD,OAAO,YAAY,KAAK,QAAQ,KAAK,mDAAmD;CAC1F,CAAC;AACH;AAEA,IAAa,wBAAwC;CACnD,MAAM;CAEN,YAAY,YAAY,QAAQ,SAAS,SAAS,OAAO,SAAS,WAAW,CAAC;CAC9E,SAAS;CACT,KAAK;AACP"}

package/build/esm/tests/audit.js

@@ -0,0 +1,57 @@
+import { publishLocalPackage } from "../utils/publish.js";
+import buildDebug from "debug";
+import assert from "assert";
+//#region src/tests/audit.ts
+var debug = buildDebug("verdaccio:e2e-cli:test:audit");
+async function testAudit(ctx) {
+	if (ctx.adapter.type !== "npm" && ctx.adapter.type !== "bun") {
+		debug("skipping audit test for %s (npm/bun only)", ctx.adapter.type);
+		return;
+	}
+	const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];
+	const depName = `e2e-audit-dep-${ctx.runId}`;
+	await publishLocalPackage(ctx, depName, "1.0.0");
+	for (const pkgName of packages) {
+		const { tempFolder } = await ctx.adapter.prepareProject(pkgName, "1.0.0", ctx.registryUrl, ctx.port, ctx.token, { [depName]: "1.0.0" });
+		await ctx.adapter.exec({ cwd: tempFolder }, "install", ...ctx.adapter.registryArg(ctx.registryUrl));
+		try {
+			if ((await fetch(`${ctx.registryUrl}/-/npm/v1/security/audits/quick`, {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: "{}"
+			})).status === 404) {
+				debug("audit endpoint not supported by this registry (404), skipping");
+				return;
+			}
+		} catch {
+			debug("audit endpoint probe failed, skipping");
+			return;
+		}
+		let resp;
+		try {
+			resp = await ctx.adapter.exec({ cwd: tempFolder }, "audit", "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			if (/503|ENOTFOUND|EAI_AGAIN|getaddrinfo|ECONNREFUSED|audit/i.test(message)) {
+				debug("audit upstream unreachable (offline?), skipping: %s", message);
+				return;
+			}
+			throw err;
+		}
+		if (ctx.adapter.type === "bun") assert.ok(resp.stdout.length > 0 || resp.stderr.length > 0, "Expected audit output");
+		else {
+			const parsedBody = JSON.parse(resp.stdout);
+			assert.ok(parsedBody.auditReportVersion !== void 0, "Expected \"auditReportVersion\" in audit response");
+			assert.ok(parsedBody.vulnerabilities !== void 0, "Expected \"vulnerabilities\" in audit response");
+		}
+	}
+}
+var auditTest = {
+	name: "audit",
+	requires: ["audit"],
+	run: testAudit
+};
+//#endregion
+export { auditTest };
+
+//# sourceMappingURL=audit.js.map

package/build/esm/tests/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","names":[],"sources":["../../../src/tests/audit.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { publishLocalPackage } from '../utils/publish';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:audit');\n\nasync function testAudit(ctx: TestContext): Promise<void> {\n  // Audit is only reliable with npm and bun — pnpm/yarn audit output varies too much\n  if (ctx.adapter.type !== 'npm' && ctx.adapter.type !== 'bun') {\n    debug('skipping audit test for %s (npm/bun only)', ctx.adapter.type);\n    return;\n  }\n\n  const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];\n\n  // Publish the dependency locally so metadata/tarball resolution never leaves\n  // the registry under test (the suite must run offline). Only the audit\n  // report request itself may travel upstream, and that is skipped below when\n  // the endpoint is unavailable.\n  const depName = `e2e-audit-dep-${ctx.runId}`;\n  await publishLocalPackage(ctx, depName, '1.0.0');\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      { [depName]: '1.0.0' }\n    );\n\n    // install is required to create package lock file\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    // npm audit exits with code 1 both when vulnerabilities are found AND when\n    // the endpoint is unavailable. We need to distinguish between the two.\n    // Probe the audit endpoint first to avoid false failures on registries\n    // that don't support it (e.g. verdaccio next-7+).\n    try {\n      const probe = await fetch(`${ctx.registryUrl}/-/npm/v1/security/audits/quick`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: '{}',\n      });\n      if (probe.status === 404) {\n        debug('audit endpoint not supported by this registry (404), skipping');\n        return;\n      }\n    } catch {\n      debug('audit endpoint probe failed, skipping');\n      return;\n    }\n\n    let resp;\n    try {\n      resp = await ctx.adapter.exec(\n        { cwd: tempFolder },\n        'audit',\n        '--json',\n        ...ctx.adapter.registryArg(ctx.registryUrl)\n      );\n    } catch (err) {\n      // The registry proxies audit reports upstream; when running offline that\n      // upstream is unreachable and the audit command fails — that is not a\n      // registry bug, so skip instead of failing the suite.\n      const message = err instanceof Error ? err.message : String(err);\n      if (/503|ENOTFOUND|EAI_AGAIN|getaddrinfo|ECONNREFUSED|audit/i.test(message)) {\n        debug('audit upstream unreachable (offline?), skipping: %s', message);\n        return;\n      }\n      throw err;\n    }\n\n    if (ctx.adapter.type === 'bun') {\n      // bun audit output may differ — exit code 0 is sufficient for basic validation\n      assert.ok(resp.stdout.length > 0 || resp.stderr.length > 0, 'Expected audit output');\n    } else {\n      const parsedBody = JSON.parse(resp.stdout);\n      assert.ok(\n        parsedBody.auditReportVersion !== undefined,\n        'Expected \"auditReportVersion\" in audit response'\n      );\n      assert.ok(\n        parsedBody.vulnerabilities !== undefined,\n        'Expected \"vulnerabilities\" in audit response'\n      );\n    }\n  }\n}\n\nexport const auditTest: TestDefinition = {\n  name: 'audit',\n  requires: ['audit'],\n  run: testAudit,\n};\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,8BAA8B;AAEvD,eAAe,UAAU,KAAiC;CAExD,IAAI,IAAI,QAAQ,SAAS,SAAS,IAAI,QAAQ,SAAS,OAAO;EAC5D,MAAM,6CAA6C,IAAI,QAAQ,IAAI;EACnE;CACF;CAEA,MAAM,WAAW,CAAC,mBAAmB,IAAI,SAAS,oBAAoB,IAAI,OAAO;CAMjF,MAAM,UAAU,iBAAiB,IAAI;CACrC,MAAM,oBAAoB,KAAK,SAAS,OAAO;CAE/C,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,GAAG,UAAU,QAAQ,CACvB;EAGA,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EAMA,IAAI;GAMF,KAAI,MALgB,MAAM,GAAG,IAAI,YAAY,kCAAkC;IAC7E,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;IAC9C,MAAM;GACR,CAAC,EAAA,CACS,WAAW,KAAK;IACxB,MAAM,+DAA+D;IACrE;GACF;EACF,QAAQ;GACN,MAAM,uCAAuC;GAC7C;EACF;EAEA,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,IAAI,QAAQ,KACvB,EAAE,KAAK,WAAW,GAClB,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;EACF,SAAS,KAAK;GAIZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,IAAI,0DAA0D,KAAK,OAAO,GAAG;IAC3E,MAAM,uDAAuD,OAAO;IACpE;GACF;GACA,MAAM;EACR;EAEA,IAAI,IAAI,QAAQ,SAAS,OAEvB,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG,uBAAuB;OAC9E;GACL,MAAM,aAAa,KAAK,MAAM,KAAK,MAAM;GACzC,OAAO,GACL,WAAW,uBAAuB,KAAA,GAClC,mDACF;GACA,OAAO,GACL,WAAW,oBAAoB,KAAA,GAC/B,gDACF;EACF;CACF;AACF;AAEA,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;AACP"}

package/build/esm/tests/ci.js

@@ -0,0 +1,80 @@
+import { publishLocalPackage } from "../utils/publish.js";
+import buildDebug from "debug";
+import { join } from "path";
+import { rm } from "fs/promises";
+import assert from "assert";
+//#region src/tests/ci.ts
+var debug = buildDebug("verdaccio:e2e-cli:test:ci");
+/**
+* Test: ci
+*
+* Verifies that lockfile-based install works correctly.
+* Unlike `install`, CI commands skip metadata fetches and resolve
+* tarballs directly from the URLs stored in the lockfile.
+*
+* Flow:
+*   1. Prepare a project with dependencies
+*   2. Run `install` to generate the lockfile
+*   3. Remove node_modules
+*   4. Run the CI-equivalent command (npm ci / pnpm install --frozen-lockfile / yarn --frozen-lockfile / yarn --immutable)
+*   5. Verify it completes successfully
+*/
+function getCiArgs(ctx) {
+	switch (ctx.adapter.type) {
+		case "npm": return ["ci", ...ctx.adapter.registryArg(ctx.registryUrl)];
+		case "pnpm": return [
+			"install",
+			"--frozen-lockfile",
+			...ctx.adapter.registryArg(ctx.registryUrl)
+		];
+		case "yarn-modern": return ["install", "--immutable"];
+		case "bun": return [
+			"install",
+			"--frozen-lockfile",
+			...ctx.adapter.registryArg(ctx.registryUrl)
+		];
+		default: return ["ci", ...ctx.adapter.registryArg(ctx.registryUrl)];
+	}
+}
+async function testCi(ctx) {
+	if (ctx.adapter.type === "deno") {
+		debug("skipping ci test for deno (no ci command)");
+		return;
+	}
+	const depName = `e2e-ci-dep-${ctx.runId}`;
+	await publishLocalPackage(ctx, depName, "1.0.0");
+	const { tempFolder } = await ctx.adapter.prepareProject(`ci-test-${ctx.runId}`, "1.0.0", ctx.registryUrl, ctx.port, ctx.token, { [depName]: "1.0.0" });
+	debug("running initial install to generate lockfile in %s", tempFolder);
+	await ctx.adapter.exec({ cwd: tempFolder }, "install", ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("lockfile generated, removing node_modules");
+	const nodeModulesPath = join(tempFolder, "node_modules");
+	await rm(nodeModulesPath, {
+		recursive: true,
+		force: true
+	});
+	const pnpmStorePath = join(tempFolder, ".pnpm-store");
+	await rm(pnpmStorePath, {
+		recursive: true,
+		force: true
+	});
+	debug("node_modules removed, running ci command");
+	const ciArgs = getCiArgs(ctx);
+	debug("ci args: %o", ciArgs);
+	const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...ciArgs);
+	if (ctx.adapter.type === "npm") {
+		debug("npm ci output: %s", resp.stdout + resp.stderr);
+		assert.ok(true, "npm ci completed successfully");
+	} else {
+		debug("ci completed successfully for %s", ctx.adapter.type);
+		assert.ok(true, `CI install completed successfully for ${ctx.adapter.type}`);
+	}
+}
+var ciTest = {
+	name: "ci",
+	requires: ["install"],
+	run: testCi
+};
+//#endregion
+export { ciTest };
+
+//# sourceMappingURL=ci.js.map

package/build/esm/tests/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","names":[],"sources":["../../../src/tests/ci.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { rm } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { publishLocalPackage } from '../utils/publish';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:ci');\n\n/**\n * Test: ci\n *\n * Verifies that lockfile-based install works correctly.\n * Unlike `install`, CI commands skip metadata fetches and resolve\n * tarballs directly from the URLs stored in the lockfile.\n *\n * Flow:\n *   1. Prepare a project with dependencies\n *   2. Run `install` to generate the lockfile\n *   3. Remove node_modules\n *   4. Run the CI-equivalent command (npm ci / pnpm install --frozen-lockfile / yarn --frozen-lockfile / yarn --immutable)\n *   5. Verify it completes successfully\n */\n\nfunction getCiArgs(ctx: TestContext): string[] {\n  switch (ctx.adapter.type) {\n    case 'npm':\n      // `npm ci` — separate command, reads package-lock.json\n      return ['ci', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'pnpm':\n      // `pnpm install --frozen-lockfile` — same command, strict mode\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    case 'yarn-modern':\n      // `yarn install --immutable`\n      return ['install', '--immutable'];\n    case 'bun':\n      // `bun install --frozen-lockfile`\n      return ['install', '--frozen-lockfile', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    default:\n      return ['ci', ...ctx.adapter.registryArg(ctx.registryUrl)];\n  }\n}\n\nasync function testCi(ctx: TestContext): Promise<void> {\n  // deno doesn't have a CI/frozen-lockfile equivalent\n  if (ctx.adapter.type === 'deno') {\n    debug('skipping ci test for deno (no ci command)');\n    return;\n  }\n\n  // Publish the dependency locally first — the suite must run offline\n  const depName = `e2e-ci-dep-${ctx.runId}`;\n  await publishLocalPackage(ctx, depName, '1.0.0');\n\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `ci-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { [depName]: '1.0.0' }\n  );\n\n  debug('running initial install to generate lockfile in %s', tempFolder);\n\n  // Step 1: Run install to generate the lockfile\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'install',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  debug('lockfile generated, removing node_modules');\n\n  // Step 2: Remove node_modules to force a clean install from lockfile\n  const nodeModulesPath = join(tempFolder, 'node_modules');\n  await rm(nodeModulesPath, { recursive: true, force: true });\n\n  // For pnpm, also clean the virtual store\n  const pnpmStorePath = join(tempFolder, '.pnpm-store');\n  await rm(pnpmStorePath, { recursive: true, force: true });\n\n  debug('node_modules removed, running ci command');\n\n  // Step 3: Run CI-equivalent command (tarball-only, no metadata fetches)\n  const ciArgs = getCiArgs(ctx);\n  debug('ci args: %o', ciArgs);\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...ciArgs);\n\n  // Step 4: Verify success\n  if (ctx.adapter.type === 'npm') {\n    // npm ci with --json is not reliable, just check exit code 0\n    // and verify output mentions added packages\n    const output = resp.stdout + resp.stderr;\n    debug('npm ci output: %s', output);\n    assert.ok(true, 'npm ci completed successfully');\n  } else {\n    debug('ci completed successfully for %s', ctx.adapter.type);\n    assert.ok(true, `CI install completed successfully for ${ctx.adapter.type}`);\n  }\n}\n\nexport const ciTest: TestDefinition = {\n  name: 'ci',\n  requires: ['install'],\n  run: testCi,\n};\n"],"mappings":";;;;;;AAQA,IAAM,QAAQ,WAAW,2BAA2B;;;;;;;;;;;;;;;AAiBpD,SAAS,UAAU,KAA4B;CAC7C,QAAQ,IAAI,QAAQ,MAApB;EACE,KAAK,OAEH,OAAO,CAAC,MAAM,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;EAC3D,KAAK,QAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;EAAC;EACrF,KAAK,eAEH,OAAO,CAAC,WAAW,aAAa;EAClC,KAAK,OAEH,OAAO;GAAC;GAAW;GAAqB,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;EAAC;EACrF,SACE,OAAO,CAAC,MAAM,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;CAC7D;AACF;AAEA,eAAe,OAAO,KAAiC;CAErD,IAAI,IAAI,QAAQ,SAAS,QAAQ;EAC/B,MAAM,2CAA2C;EACjD;CACF;CAGA,MAAM,UAAU,cAAc,IAAI;CAClC,MAAM,oBAAoB,KAAK,SAAS,OAAO;CAE/C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,WAAW,IAAI,SACf,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,GAAG,UAAU,QAAQ,CACvB;CAEA,MAAM,sDAAsD,UAAU;CAGtE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CAEA,MAAM,2CAA2C;CAGjD,MAAM,kBAAkB,KAAK,YAAY,cAAc;CACvD,MAAM,GAAG,iBAAiB;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAG1D,MAAM,gBAAgB,KAAK,YAAY,aAAa;CACpD,MAAM,GAAG,eAAe;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAExD,MAAM,0CAA0C;CAGhD,MAAM,SAAS,UAAU,GAAG;CAC5B,MAAM,eAAe,MAAM;CAC3B,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,GAAG,MAAM;CAGlE,IAAI,IAAI,QAAQ,SAAS,OAAO;EAI9B,MAAM,qBADS,KAAK,SAAS,KAAK,MACD;EACjC,OAAO,GAAG,MAAM,+BAA+B;CACjD,OAAO;EACL,MAAM,oCAAoC,IAAI,QAAQ,IAAI;EAC1D,OAAO,GAAG,MAAM,yCAAyC,IAAI,QAAQ,MAAM;CAC7E;AACF;AAEA,IAAa,SAAyB;CACpC,MAAM;CACN,UAAU,CAAC,SAAS;CACpB,KAAK;AACP"}

package/build/esm/tests/deprecate.js

@@ -0,0 +1,105 @@
+import { parseInfoJson } from "../utils/info.js";
+import buildDebug from "debug";
+import { join } from "path";
+import { readFile, writeFile } from "fs/promises";
+import assert from "assert";
+//#region src/tests/deprecate.ts
+var debug = buildDebug("verdaccio:e2e-cli:test:deprecate");
+async function publishPkg(ctx, tempFolder, pkgName) {
+	if (ctx.adapter.type === "yarn-modern") {
+		debug("running yarn install before publish for %s", pkgName);
+		await ctx.adapter.exec({ cwd: tempFolder }, "install");
+	}
+	debug("publishing %s from %s", pkgName, tempFolder);
+	await ctx.adapter.exec({ cwd: tempFolder }, "publish", ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("published %s successfully", pkgName);
+}
+async function deprecate(ctx, tempFolder, packageVersion, message) {
+	debug("deprecating %s with message: %s", packageVersion, message || "(empty, un-deprecate)");
+	const jsonFlag = ctx.adapter.type === "yarn-modern" ? [] : ["--json"];
+	await ctx.adapter.exec({ cwd: tempFolder }, "deprecate", packageVersion, message, ...jsonFlag, ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("deprecate command completed for %s", packageVersion);
+}
+async function getInfo(ctx, tempFolder, pkgName) {
+	debug("fetching info for %s", pkgName);
+	const resp = await ctx.adapter.exec({ cwd: tempFolder }, "info", pkgName, "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
+	const parsed = parseInfoJson(resp.stdout);
+	debug("info for %s: deprecated=%s", pkgName, parsed.deprecated ?? "(not set)");
+	return parsed;
+}
+async function bumpVersion(ctx, tempFolder) {
+	debug("bumping version (minor) in %s", tempFolder);
+	if (ctx.adapter.type === "yarn-modern") {
+		const pkgPath = join(tempFolder, "package.json");
+		const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+		const [major, minor, patch] = pkg.version.split(".").map(Number);
+		pkg.version = `${major}.${minor + 1}.${patch}`;
+		debug("bumped %s to %s", pkgPath, pkg.version);
+		await writeFile(pkgPath, JSON.stringify(pkg, null, 2));
+	} else await ctx.adapter.exec({ cwd: tempFolder }, "version", "minor", ...ctx.adapter.registryArg(ctx.registryUrl));
+}
+async function prepareDeprecateProject(ctx, pkgName, version) {
+	debug("preparing project for %s@%s", pkgName, version);
+	const { tempFolder } = await ctx.adapter.prepareProject(pkgName, version, ctx.registryUrl, ctx.port, ctx.token);
+	if (ctx.adapter.importPlugin) {
+		debug("importing npm-deprecate plugin into %s", tempFolder);
+		await ctx.adapter.importPlugin(tempFolder, "npm-deprecate");
+	}
+	return tempFolder;
+}
+async function testDeprecate(ctx) {
+	const id = ctx.runId;
+	const message = "some message";
+	await ctx.subTest("deprecate single version", async () => {
+		const pkgName = `@verdaccio/dep1-${id}`;
+		const tf = await prepareDeprecateProject(ctx, pkgName, "1.0.0");
+		await publishPkg(ctx, tf, pkgName);
+		await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);
+		const info = await getInfo(ctx, tf, pkgName);
+		assert.strictEqual(info.name, pkgName);
+		assert.strictEqual(info.deprecated, message, "Package should be deprecated");
+	});
+	await ctx.subTest("un-deprecate", async () => {
+		const pkgName = `@verdaccio/dep2-${id}`;
+		const tf = await prepareDeprecateProject(ctx, pkgName, "1.0.0");
+		await publishPkg(ctx, tf, pkgName);
+		await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);
+		const info1 = await getInfo(ctx, tf, pkgName);
+		assert.strictEqual(info1.deprecated, message);
+		await deprecate(ctx, tf, `${pkgName}@1.0.0`, "");
+		const info2 = await getInfo(ctx, tf, pkgName);
+		assert.strictEqual(info2.deprecated, void 0, "Package should be un-deprecated");
+	});
+	await ctx.subTest("deprecate multiple versions", async () => {
+		const pkgName = `@verdaccio/dep3-${id}`;
+		const tf = await prepareDeprecateProject(ctx, pkgName, "1.0.0");
+		await publishPkg(ctx, tf, pkgName);
+		for (let i = 0; i < 3; i++) {
+			await bumpVersion(ctx, tf);
+			await publishPkg(ctx, tf, pkgName);
+		}
+		await deprecate(ctx, tf, pkgName, message);
+		for (const v of [
+			"1.0.0",
+			"1.1.0",
+			"1.2.0",
+			"1.3.0"
+		]) {
+			const info = await getInfo(ctx, tf, `${pkgName}@${v}`);
+			assert.strictEqual(info.deprecated, message, `Version ${v} should be deprecated`);
+		}
+		await bumpVersion(ctx, tf);
+		await publishPkg(ctx, tf, pkgName);
+		const info = await getInfo(ctx, tf, `${pkgName}@1.4.0`);
+		assert.strictEqual(info.deprecated, void 0, "New version should not be deprecated");
+	});
+}
+var deprecateTest = {
+	name: "deprecate",
+	requires: ["deprecate"],
+	run: testDeprecate
+};
+//#endregion
+export { deprecateTest };
+
+//# sourceMappingURL=deprecate.js.map

package/build/esm/tests/deprecate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecate.js","names":[],"sources":["../../../src/tests/deprecate.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\nimport { readFile, writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { parseInfoJson } from '../utils/info';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:deprecate');\n\nasync function publishPkg(ctx: TestContext, tempFolder: string, pkgName: string) {\n  if (ctx.adapter.type === 'yarn-modern') {\n    debug('running yarn install before publish for %s', pkgName);\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n  debug('publishing %s from %s', pkgName, tempFolder);\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s successfully', pkgName);\n}\n\nasync function deprecate(\n  ctx: TestContext,\n  tempFolder: string,\n  packageVersion: string,\n  message: string\n) {\n  debug('deprecating %s with message: %s', packageVersion, message || '(empty, un-deprecate)');\n  const jsonFlag = ctx.adapter.type === 'yarn-modern' ? [] : ['--json'];\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'deprecate',\n    packageVersion,\n    message,\n    ...jsonFlag,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('deprecate command completed for %s', packageVersion);\n}\n\nasync function getInfo(ctx: TestContext, tempFolder: string, pkgName: string) {\n  debug('fetching info for %s', pkgName);\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    pkgName,\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  const parsed = parseInfoJson(resp.stdout);\n  debug('info for %s: deprecated=%s', pkgName, parsed.deprecated ?? '(not set)');\n  return parsed;\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string) {\n  debug('bumping version (minor) in %s', tempFolder);\n  if (ctx.adapter.type === 'yarn-modern') {\n    // Bump version by editing package.json directly to avoid\n    // requiring the version plugin (not bundled in Yarn 3)\n    const pkgPath = join(tempFolder, 'package.json');\n    const pkg = JSON.parse(await readFile(pkgPath, 'utf8'));\n    const [major, minor, patch] = pkg.version.split('.').map(Number);\n    pkg.version = `${major}.${minor + 1}.${patch}`;\n    debug('bumped %s to %s', pkgPath, pkg.version);\n    await writeFile(pkgPath, JSON.stringify(pkg, null, 2));\n  } else {\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'version',\n      'minor',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n  }\n}\n\nasync function prepareDeprecateProject(\n  ctx: TestContext,\n  pkgName: string,\n  version: string\n): Promise<string> {\n  debug('preparing project for %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  if (ctx.adapter.importPlugin) {\n    debug('importing npm-deprecate plugin into %s', tempFolder);\n    await ctx.adapter.importPlugin(tempFolder, 'npm-deprecate');\n  }\n  return tempFolder;\n}\n\nasync function testDeprecate(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  const message = 'some message';\n\n  await ctx.subTest('deprecate single version', async () => {\n    const pkgName = `@verdaccio/dep1-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);\n    const info = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info.name, pkgName);\n    assert.strictEqual(info.deprecated, message, 'Package should be deprecated');\n  });\n\n  await ctx.subTest('un-deprecate', async () => {\n    const pkgName = `@verdaccio/dep2-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, message);\n    const info1 = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info1.deprecated, message);\n    await deprecate(ctx, tf, `${pkgName}@1.0.0`, '');\n    const info2 = await getInfo(ctx, tf, pkgName);\n    assert.strictEqual(info2.deprecated, undefined, 'Package should be un-deprecated');\n  });\n\n  await ctx.subTest('deprecate multiple versions', async () => {\n    const pkgName = `@verdaccio/dep3-${id}`;\n    const tf = await prepareDeprecateProject(ctx, pkgName, '1.0.0');\n    await publishPkg(ctx, tf, pkgName);\n    for (let i = 0; i < 3; i++) {\n      await bumpVersion(ctx, tf);\n      await publishPkg(ctx, tf, pkgName);\n    }\n    await deprecate(ctx, tf, pkgName, message);\n    for (const v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {\n      const info = await getInfo(ctx, tf, `${pkgName}@${v}`);\n      assert.strictEqual(info.deprecated, message, `Version ${v} should be deprecated`);\n    }\n    await bumpVersion(ctx, tf);\n    await publishPkg(ctx, tf, pkgName);\n    const info = await getInfo(ctx, tf, `${pkgName}@1.4.0`);\n    assert.strictEqual(info.deprecated, undefined, 'New version should not be deprecated');\n  });\n}\n\nexport const deprecateTest: TestDefinition = {\n  name: 'deprecate',\n  requires: ['deprecate'],\n  run: testDeprecate,\n};\n"],"mappings":";;;;;;AAQA,IAAM,QAAQ,WAAW,kCAAkC;AAE3D,eAAe,WAAW,KAAkB,YAAoB,SAAiB;CAC/E,IAAI,IAAI,QAAQ,SAAS,eAAe;EACtC,MAAM,8CAA8C,OAAO;EAC3D,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;CACvD;CACA,MAAM,yBAAyB,SAAS,UAAU;CAClD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,6BAA6B,OAAO;AAC5C;AAEA,eAAe,UACb,KACA,YACA,gBACA,SACA;CACA,MAAM,mCAAmC,gBAAgB,WAAW,uBAAuB;CAC3F,MAAM,WAAW,IAAI,QAAQ,SAAS,gBAAgB,CAAC,IAAI,CAAC,QAAQ;CACpE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,aACA,gBACA,SACA,GAAG,UACH,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,sCAAsC,cAAc;AAC5D;AAEA,eAAe,QAAQ,KAAkB,YAAoB,SAAiB;CAC5E,MAAM,wBAAwB,OAAO;CACrC,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,SAAS,cAAc,KAAK,MAAM;CACxC,MAAM,8BAA8B,SAAS,OAAO,cAAc,WAAW;CAC7E,OAAO;AACT;AAEA,eAAe,YAAY,KAAkB,YAAoB;CAC/D,MAAM,iCAAiC,UAAU;CACjD,IAAI,IAAI,QAAQ,SAAS,eAAe;EAGtC,MAAM,UAAU,KAAK,YAAY,cAAc;EAC/C,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,SAAS,MAAM,CAAC;EACtD,MAAM,CAAC,OAAO,OAAO,SAAS,IAAI,QAAQ,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;EAC/D,IAAI,UAAU,GAAG,MAAM,GAAG,QAAQ,EAAE,GAAG;EACvC,MAAM,mBAAmB,SAAS,IAAI,OAAO;EAC7C,MAAM,UAAU,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;CACvD,OACE,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,SACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AAEJ;AAEA,eAAe,wBACb,KACA,SACA,SACiB;CACjB,MAAM,+BAA+B,SAAS,OAAO;CACrD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,IAAI,IAAI,QAAQ,cAAc;EAC5B,MAAM,0CAA0C,UAAU;EAC1D,MAAM,IAAI,QAAQ,aAAa,YAAY,eAAe;CAC5D;CACA,OAAO;AACT;AAEA,eAAe,cAAc,KAAiC;CAC5D,MAAM,KAAK,IAAI;CAEf,MAAM,UAAU;CAEhB,MAAM,IAAI,QAAQ,4BAA4B,YAAY;EACxD,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,OAAO;EAC9D,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,OAAO;EACpD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,OAAO;EAC3C,OAAO,YAAY,KAAK,MAAM,OAAO;EACrC,OAAO,YAAY,KAAK,YAAY,SAAS,8BAA8B;CAC7E,CAAC;CAED,MAAM,IAAI,QAAQ,gBAAgB,YAAY;EAC5C,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,OAAO;EAC9D,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,OAAO;EACpD,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,OAAO;EAC5C,OAAO,YAAY,MAAM,YAAY,OAAO;EAC5C,MAAM,UAAU,KAAK,IAAI,GAAG,QAAQ,SAAS,EAAE;EAC/C,MAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,OAAO;EAC5C,OAAO,YAAY,MAAM,YAAY,KAAA,GAAW,iCAAiC;CACnF,CAAC;CAED,MAAM,IAAI,QAAQ,+BAA+B,YAAY;EAC3D,MAAM,UAAU,mBAAmB;EACnC,MAAM,KAAK,MAAM,wBAAwB,KAAK,SAAS,OAAO;EAC9D,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC1B,MAAM,YAAY,KAAK,EAAE;GACzB,MAAM,WAAW,KAAK,IAAI,OAAO;EACnC;EACA,MAAM,UAAU,KAAK,IAAI,SAAS,OAAO;EACzC,KAAK,MAAM,KAAK;GAAC;GAAS;GAAS;GAAS;EAAO,GAAG;GACpD,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,GAAG,GAAG;GACrD,OAAO,YAAY,KAAK,YAAY,SAAS,WAAW,EAAE,sBAAsB;EAClF;EACA,MAAM,YAAY,KAAK,EAAE;EACzB,MAAM,WAAW,KAAK,IAAI,OAAO;EACjC,MAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,GAAG,QAAQ,OAAO;EACtD,OAAO,YAAY,KAAK,YAAY,KAAA,GAAW,sCAAsC;CACvF,CAAC;AACH;AAEA,IAAa,gBAAgC;CAC3C,MAAM;CACN,UAAU,CAAC,WAAW;CACtB,KAAK;AACP"}

package/build/esm/tests/dist-tags.js

@@ -0,0 +1,41 @@
+import assert from "assert";
+//#region src/tests/dist-tags.ts
+async function publishPkg(ctx, tempFolder, extraArgs = []) {
+	await ctx.adapter.exec({ cwd: tempFolder }, "publish", ...extraArgs, ...ctx.adapter.registryArg(ctx.registryUrl));
+}
+async function bumpVersion(ctx, tempFolder) {
+	await ctx.adapter.exec({ cwd: tempFolder }, "version", "minor", ...ctx.adapter.registryArg(ctx.registryUrl));
+}
+async function testDistTags(ctx) {
+	const id = ctx.runId;
+	const pkgName1 = `@foo/dt1-${id}`;
+	const { tempFolder: tf1 } = await ctx.adapter.prepareProject(pkgName1, "1.0.0", ctx.registryUrl, ctx.port, ctx.token);
+	await publishPkg(ctx, tf1);
+	await bumpVersion(ctx, tf1);
+	await publishPkg(ctx, tf1, ["--tag", "beta"]);
+	const resp1 = await ctx.adapter.exec({ cwd: tf1 }, "dist-tag", "ls", "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
+	assert.strictEqual(resp1.stdout, "beta: 1.1.0latest: 1.0.0");
+	const pkgName2 = `@verdaccio/dt2-${id}`;
+	const { tempFolder: tf2 } = await ctx.adapter.prepareProject(pkgName2, "1.0.0", ctx.registryUrl, ctx.port, ctx.token);
+	await publishPkg(ctx, tf2);
+	await bumpVersion(ctx, tf2);
+	await publishPkg(ctx, tf2, ["--tag", "beta"]);
+	const resp2 = await ctx.adapter.exec({ cwd: tf2 }, "dist-tag", "rm", `${pkgName2}@1.1.0`, "beta", ...ctx.adapter.registryArg(ctx.registryUrl));
+	assert.strictEqual(resp2.stdout, `-beta: ${pkgName2}@1.1.0`);
+	const pkgName3 = `@verdaccio/dt3-${id}`;
+	const { tempFolder: tf3 } = await ctx.adapter.prepareProject(pkgName3, "1.0.0", ctx.registryUrl, ctx.port, ctx.token);
+	await publishPkg(ctx, tf3);
+	await bumpVersion(ctx, tf3);
+	await publishPkg(ctx, tf3);
+	const resp3 = await ctx.adapter.exec({ cwd: tf3 }, "dist-tag", "add", `${pkgName3}@1.1.0`, "alfa", ...ctx.adapter.registryArg(ctx.registryUrl));
+	assert.strictEqual(resp3.stdout, `+alfa: ${pkgName3}@1.1.0`);
+}
+var distTagsTest = {
+	name: "dist-tags",
+	requires: ["dist-tag"],
+	run: testDistTags
+};
+//#endregion
+export { distTagsTest };
+
+//# sourceMappingURL=dist-tags.js.map

package/build/esm/tests/dist-tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist-tags.js","names":[],"sources":["../../../src/tests/dist-tags.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function publishPkg(ctx: TestContext, tempFolder: string, extraArgs: string[] = []) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...extraArgs,\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function bumpVersion(ctx: TestContext, tempFolder: string) {\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'version',\n    'minor',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n}\n\nasync function testDistTags(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Test 1: list dist-tags\n  const pkgName1 = `@foo/dt1-${id}`;\n  const { tempFolder: tf1 } = await ctx.adapter.prepareProject(\n    pkgName1,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf1);\n  await bumpVersion(ctx, tf1);\n  await publishPkg(ctx, tf1, ['--tag', 'beta']);\n  const resp1 = await ctx.adapter.exec(\n    { cwd: tf1 },\n    'dist-tag',\n    'ls',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp1.stdout, 'beta: 1.1.0latest: 1.0.0');\n\n  // Test 2: remove tag\n  const pkgName2 = `@verdaccio/dt2-${id}`;\n  const { tempFolder: tf2 } = await ctx.adapter.prepareProject(\n    pkgName2,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf2);\n  await bumpVersion(ctx, tf2);\n  await publishPkg(ctx, tf2, ['--tag', 'beta']);\n  const resp2 = await ctx.adapter.exec(\n    { cwd: tf2 },\n    'dist-tag',\n    'rm',\n    `${pkgName2}@1.1.0`,\n    'beta',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp2.stdout, `-beta: ${pkgName2}@1.1.0`);\n\n  // Test 3: add tag\n  const pkgName3 = `@verdaccio/dt3-${id}`;\n  const { tempFolder: tf3 } = await ctx.adapter.prepareProject(\n    pkgName3,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n  await publishPkg(ctx, tf3);\n  await bumpVersion(ctx, tf3);\n  await publishPkg(ctx, tf3);\n  const resp3 = await ctx.adapter.exec(\n    { cwd: tf3 },\n    'dist-tag',\n    'add',\n    `${pkgName3}@1.1.0`,\n    'alfa',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  assert.strictEqual(resp3.stdout, `+alfa: ${pkgName3}@1.1.0`);\n}\n\nexport const distTagsTest: TestDefinition = {\n  name: 'dist-tags',\n  requires: ['dist-tag'],\n  run: testDistTags,\n};\n"],"mappings":";;AAIA,eAAe,WAAW,KAAkB,YAAoB,YAAsB,CAAC,GAAG;CACxF,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,WACH,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AACF;AAEA,eAAe,YAAY,KAAkB,YAAoB;CAC/D,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,SACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;AACF;AAEA,eAAe,aAAa,KAAiC;CAC3D,MAAM,KAAK,IAAI;CAGf,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,GAAG;CAC1B,MAAM,WAAW,KAAK,KAAK,CAAC,SAAS,MAAM,CAAC;CAC5C,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,YACA,MACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,YAAY,MAAM,QAAQ,0BAA0B;CAG3D,MAAM,WAAW,kBAAkB;CACnC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,GAAG;CAC1B,MAAM,WAAW,KAAK,KAAK,CAAC,SAAS,MAAM,CAAC;CAC5C,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,YACA,MACA,GAAG,SAAS,SACZ,QACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,YAAY,MAAM,QAAQ,UAAU,SAAS,OAAO;CAG3D,MAAM,WAAW,kBAAkB;CACnC,MAAM,EAAE,YAAY,QAAQ,MAAM,IAAI,QAAQ,eAC5C,UACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CACA,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,YAAY,KAAK,GAAG;CAC1B,MAAM,WAAW,KAAK,GAAG;CACzB,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAC9B,EAAE,KAAK,IAAI,GACX,YACA,OACA,GAAG,SAAS,SACZ,QACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,OAAO,YAAY,MAAM,QAAQ,UAAU,SAAS,OAAO;AAC7D;AAEA,IAAa,eAA+B;CAC1C,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;AACP"}

package/build/esm/tests/index.js

@@ -0,0 +1,37 @@
+import "../scenarios/install-multiple-deps.js";
+import "../scenarios/metadata.js";
+import "../scenarios/minimum-release-age.js";
+import "../scenarios/search.js";
+import "../scenarios/tarballs.js";
+import "../scenarios/uplink-failure.js";
+import { allScenarios } from "../scenarios/index.js";
+import { auditTest } from "./audit.js";
+import { ciTest } from "./ci.js";
+import { deprecateTest } from "./deprecate.js";
+import { distTagsTest } from "./dist-tags.js";
+import { infoTest } from "./info.js";
+import { installTest } from "./install.js";
+import { loginTest } from "./login.js";
+import { pingTest } from "./ping.js";
+import { publishTest } from "./publish.js";
+import { searchTest } from "./search.js";
+import { unpublishTest } from "./unpublish.js";
+//#region src/tests/index.ts
+var allTests = [
+	publishTest,
+	installTest,
+	ciTest,
+	auditTest,
+	infoTest,
+	deprecateTest,
+	distTagsTest,
+	loginTest,
+	pingTest,
+	searchTest,
+	unpublishTest,
+	...allScenarios
+];
+//#endregion
+export { allScenarios, allTests, auditTest, ciTest, deprecateTest, distTagsTest, infoTest, installTest, loginTest, pingTest, publishTest, searchTest, unpublishTest };
+
+//# sourceMappingURL=index.js.map

package/build/esm/tests/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/tests/index.ts"],"sourcesContent":["import {\n  allScenarios,\n  installMultipleDepsScenario,\n  metadataScenario,\n  minimumReleaseAgeScenario,\n  searchScenario,\n  tarballsScenario,\n  uplinkFailureScenario,\n} from '../scenarios';\nimport { TestDefinition } from '../types';\nimport { auditTest } from './audit';\nimport { ciTest } from './ci';\nimport { deprecateTest } from './deprecate';\nimport { distTagsTest } from './dist-tags';\nimport { infoTest } from './info';\nimport { installTest } from './install';\nimport { loginTest } from './login';\nimport { pingTest } from './ping';\nimport { publishTest } from './publish';\nimport { searchTest } from './search';\nimport { unpublishTest } from './unpublish';\n\nexport const allTests: TestDefinition[] = [\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  unpublishTest,\n  // Scenarios (complex, multi-step tests)\n  ...allScenarios,\n];\n\nexport {\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  unpublishTest,\n  // Scenarios\n  installMultipleDepsScenario,\n  minimumReleaseAgeScenario,\n  tarballsScenario,\n  metadataScenario,\n  searchScenario,\n  uplinkFailureScenario,\n  allScenarios,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAsBA,IAAa,WAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,GAAG;AACL"}

package/build/esm/tests/info.js

@@ -0,0 +1,29 @@
+import { parseInfoJson } from "../utils/info.js";
+import { publishLocalPackage } from "../utils/publish.js";
+import assert from "assert";
+//#region src/tests/info.ts
+async function testInfo(ctx) {
+	const depName = `e2e-info-dep-${ctx.runId}`;
+	const pkgName = `e2e-info-${ctx.runId}`;
+	await publishLocalPackage(ctx, depName, "1.0.0");
+	await publishLocalPackage(ctx, pkgName, "1.0.0", { [depName]: "1.0.0" });
+	const { tempFolder } = await ctx.adapter.prepareProject(`info-client-${ctx.runId}`, "1.0.0", ctx.registryUrl, ctx.port, ctx.token);
+	const resp = await ctx.adapter.exec({ cwd: tempFolder }, "info", pkgName, "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
+	if (ctx.adapter.type === "deno") {
+		const output = resp.stdout + resp.stderr;
+		assert.ok(output.includes(pkgName), `Expected deno info output to reference ${pkgName}`);
+	} else {
+		const parsedBody = parseInfoJson(resp.stdout);
+		assert.strictEqual(parsedBody.name, pkgName, `Expected package name "${pkgName}"`);
+		assert.ok(parsedBody.dependencies !== void 0, "Expected \"dependencies\" to be defined");
+	}
+}
+var infoTest = {
+	name: "info",
+	requires: ["info"],
+	run: testInfo
+};
+//#endregion
+export { infoTest };
+
+//# sourceMappingURL=info.js.map

package/build/esm/tests/info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.js","names":[],"sources":["../../../src/tests/info.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { parseInfoJson } from '../utils/info';\nimport { publishLocalPackage } from '../utils/publish';\n\nasync function testInfo(ctx: TestContext): Promise<void> {\n  // Publish the package we inspect (with one dependency, also local) — asking\n  // for a real npmjs package would need an uplink and the suite must run\n  // offline. deno resolves the dependency tree, so the dep must exist too.\n  const depName = `e2e-info-dep-${ctx.runId}`;\n  const pkgName = `e2e-info-${ctx.runId}`;\n  await publishLocalPackage(ctx, depName, '1.0.0');\n  await publishLocalPackage(ctx, pkgName, '1.0.0', { [depName]: '1.0.0' });\n\n  // Run from a prepared project: it gives yarn modern a project context, and\n  // its .npmrc (fresh token) shields the test from stale credentials in\n  // ~/.npmrc.\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `info-client-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token\n  );\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    pkgName,\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (ctx.adapter.type === 'deno') {\n    // deno info npm:<pkg> outputs a text dependency tree\n    const output = resp.stdout + resp.stderr;\n    assert.ok(output.includes(pkgName), `Expected deno info output to reference ${pkgName}`);\n  } else {\n    const parsedBody = parseInfoJson(resp.stdout);\n    assert.strictEqual(parsedBody.name, pkgName, `Expected package name \"${pkgName}\"`);\n    assert.ok(parsedBody.dependencies !== undefined, 'Expected \"dependencies\" to be defined');\n  }\n}\n\nexport const infoTest: TestDefinition = {\n  name: 'info',\n  requires: ['info'],\n  run: testInfo,\n};\n"],"mappings":";;;;AAMA,eAAe,SAAS,KAAiC;CAIvD,MAAM,UAAU,gBAAgB,IAAI;CACpC,MAAM,UAAU,YAAY,IAAI;CAChC,MAAM,oBAAoB,KAAK,SAAS,OAAO;CAC/C,MAAM,oBAAoB,KAAK,SAAS,SAAS,GAAG,UAAU,QAAQ,CAAC;CAKvE,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,eAAe,IAAI,SACnB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,KACN;CAEA,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,WAAW,GAClB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CAEA,IAAI,IAAI,QAAQ,SAAS,QAAQ;EAE/B,MAAM,SAAS,KAAK,SAAS,KAAK;EAClC,OAAO,GAAG,OAAO,SAAS,OAAO,GAAG,0CAA0C,SAAS;CACzF,OAAO;EACL,MAAM,aAAa,cAAc,KAAK,MAAM;EAC5C,OAAO,YAAY,WAAW,MAAM,SAAS,0BAA0B,QAAQ,EAAE;EACjF,OAAO,GAAG,WAAW,iBAAiB,KAAA,GAAW,yCAAuC;CAC1F;AACF;AAEA,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,MAAM;CACjB,KAAK;AACP"}

package/build/esm/tests/install.js

@@ -0,0 +1,28 @@
+import { publishLocalPackage } from "../utils/publish.js";
+import assert from "assert";
+//#region src/tests/install.ts
+async function testInstall(ctx) {
+	const depName = `e2e-install-dep-${ctx.runId}`;
+	await publishLocalPackage(ctx, depName, "1.0.0");
+	const { tempFolder } = await ctx.adapter.prepareProject(`install-test-${ctx.runId}`, "1.0.0", ctx.registryUrl, ctx.port, ctx.token, { [depName]: "1.0.0" });
+	const isNpm = ctx.adapter.type === "npm";
+	const args = isNpm ? [
+		"install",
+		"--json",
+		...ctx.adapter.registryArg(ctx.registryUrl)
+	] : ["install", ...ctx.adapter.registryArg(ctx.registryUrl)];
+	const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...args);
+	if (isNpm) {
+		const parsedBody = JSON.parse(resp.stdout);
+		assert.ok(parsedBody.added !== void 0, "Expected \"added\" field in install response");
+	} else assert.ok(true, "Install completed successfully");
+}
+var installTest = {
+	name: "install",
+	requires: ["install"],
+	run: testInstall
+};
+//#endregion
+export { installTest };
+
+//# sourceMappingURL=install.js.map

package/build/esm/tests/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","names":[],"sources":["../../../src/tests/install.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { publishLocalPackage } from '../utils/publish';\n\nasync function testInstall(ctx: TestContext): Promise<void> {\n  // Publish the dependency locally first — the suite must work offline, so\n  // nothing is ever resolved from an external registry.\n  const depName = `e2e-install-dep-${ctx.runId}`;\n  await publishLocalPackage(ctx, depName, '1.0.0');\n\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `install-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { [depName]: '1.0.0' }\n  );\n\n  const isNpm = ctx.adapter.type === 'npm';\n\n  // pnpm doesn't support --json on install\n  const args = isNpm\n    ? ['install', '--json', ...ctx.adapter.registryArg(ctx.registryUrl)]\n    : ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n  if (isNpm) {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.ok(parsedBody.added !== undefined, 'Expected \"added\" field in install response');\n  } else {\n    // for pnpm/yarn just verify it completed without error (exit code 0)\n    assert.ok(true, 'Install completed successfully');\n  }\n}\n\nexport const installTest: TestDefinition = {\n  name: 'install',\n  requires: ['install'],\n  run: testInstall,\n};\n"],"mappings":";;;AAKA,eAAe,YAAY,KAAiC;CAG1D,MAAM,UAAU,mBAAmB,IAAI;CACvC,MAAM,oBAAoB,KAAK,SAAS,OAAO;CAE/C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,gBAAgB,IAAI,SACpB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,GAAG,UAAU,QAAQ,CACvB;CAEA,MAAM,QAAQ,IAAI,QAAQ,SAAS;CAGnC,MAAM,OAAO,QACT;EAAC;EAAW;EAAU,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW;CAAC,IACjE,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAAC;CAE3D,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,GAAG,IAAI;CAEhE,IAAI,OAAO;EACT,MAAM,aAAa,KAAK,MAAM,KAAK,MAAM;EACzC,OAAO,GAAG,WAAW,UAAU,KAAA,GAAW,8CAA4C;CACxF,OAEE,OAAO,GAAG,MAAM,gCAAgC;AAEpD;AAEA,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,SAAS;CACpB,KAAK;AACP"}