@verdaccio/e2e-cli 3.0.0 → 3.2.0

package/build/esm/utils/mock-uplink.js

@@ -0,0 +1,194 @@
+import { computeDist } from "./http-client.js";
+import buildDebug from "debug";
+import { randomBytes } from "crypto";
+import { createServer } from "http";
+//#region src/utils/mock-uplink.ts
+var debug = buildDebug("verdaccio:e2e-cli:mock-uplink");
+/**
+* Minimal controllable npm uplink used by scenario:uplink-failure.
+*
+* The registry under test is configured (see --print-config) to proxy the
+* `e2e-uplink-*` package pattern to this server, so the scenario can flip the
+* uplink between healthy, dropping connections mid-tarball, slow, and down.
+*/
+var MockUplink = class {
+	port;
+	mode = "ok";
+	requests = [];
+	server;
+	packages = /* @__PURE__ */ new Map();
+	searchResults = [];
+	constructor(port) {
+		this.port = port;
+	}
+	/** Register a package served by this uplink; tarball is random (incompressible) bytes. */
+	addPackage(name, tarballBytes = 65536) {
+		const tarball = randomBytes(tarballBytes);
+		const { shasum, integrity } = computeDist(tarball);
+		const pkg = {
+			name,
+			version: "1.0.0",
+			tarball,
+			shasum,
+			integrity
+		};
+		this.packages.set(name, pkg);
+		return pkg;
+	}
+	/** Register a result served by the /-/v1/search endpoint. */
+	addSearchResult(name, version = "1.0.0") {
+		this.searchResults.push({
+			name,
+			version
+		});
+	}
+	/**
+	* npmjs-faithful /-/v1/search: filters by `text` substring, applies
+	* `from`/`size` itself (like registry.npmjs.org does) and reports the real
+	* `total` of matches. Mimicking the upstream offsetting is what exposes
+	* double pagination in the registry under test.
+	*/
+	searchResponse(url) {
+		const text = url.searchParams.get("text") ?? "";
+		const from = Math.max(0, parseInt(url.searchParams.get("from") ?? "0", 10) || 0);
+		const size = Math.max(0, parseInt(url.searchParams.get("size") ?? "20", 10) || 20);
+		const matches = this.searchResults.filter((r) => r.name.includes(text));
+		const page = matches.slice(from, from + size);
+		return JSON.stringify({
+			objects: page.map((r) => ({
+				package: {
+					name: r.name,
+					version: r.version,
+					description: "mock uplink search result",
+					date: "2020-01-01T00:00:00.000Z",
+					maintainers: [{
+						username: "mock-uplink",
+						email: "mock@example.org"
+					}],
+					links: { npm: `http://localhost:${this.port}/${r.name}` }
+				},
+				score: {
+					final: 1,
+					detail: {
+						quality: 1,
+						popularity: 1,
+						maintenance: 1
+					}
+				},
+				searchScore: 1,
+				flags: {}
+			})),
+			total: matches.length,
+			time: (/* @__PURE__ */ new Date("2020-01-01T00:00:00.000Z")).toISOString()
+		});
+	}
+	packument(pkg) {
+		const tarballUrl = `http://localhost:${this.port}/${pkg.name}/-/${pkg.name}-${pkg.version}.tgz`;
+		return JSON.stringify({
+			name: pkg.name,
+			"dist-tags": { latest: pkg.version },
+			versions: { [pkg.version]: {
+				name: pkg.name,
+				version: pkg.version,
+				description: "mock uplink package",
+				dist: {
+					tarball: tarballUrl,
+					shasum: pkg.shasum,
+					integrity: pkg.integrity
+				}
+			} },
+			time: {
+				created: "2020-01-01T00:00:00.000Z",
+				modified: "2020-01-01T00:00:00.000Z",
+				[pkg.version]: "2020-01-01T00:00:00.000Z"
+			}
+		});
+	}
+	start() {
+		this.server = createServer((req, res) => {
+			const url = req.url || "";
+			this.requests.push(url);
+			debug("mock uplink %s %s (mode: %s)", req.method, url, this.mode);
+			const respond = () => {
+				if (this.mode === "error-500") {
+					res.writeHead(500, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({ error: "mock uplink internal error" }));
+					return;
+				}
+				if (url.startsWith("/-/v1/search")) {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(this.searchResponse(new URL(url, `http://localhost:${this.port}`)));
+					return;
+				}
+				const tarballSep = url.indexOf("/-/");
+				if (tarballSep > 0 && url.endsWith(".tgz")) {
+					const pkg = this.packages.get(decodeURIComponent(url.slice(1, tarballSep)));
+					if (!pkg) {
+						res.writeHead(404, { "Content-Type": "application/json" });
+						res.end(JSON.stringify({ error: "not found" }));
+						return;
+					}
+					if (this.mode === "drop-mid-stream") {
+						res.writeHead(200, {
+							"Content-Type": "application/octet-stream",
+							"Content-Length": String(pkg.tarball.length)
+						});
+						res.write(pkg.tarball.subarray(0, Math.floor(pkg.tarball.length / 2)));
+						setTimeout(() => res.socket?.destroy(), 50);
+						return;
+					}
+					res.writeHead(200, {
+						"Content-Type": "application/octet-stream",
+						"Content-Length": String(pkg.tarball.length)
+					});
+					res.end(pkg.tarball);
+					return;
+				}
+				const pkg = this.packages.get(decodeURIComponent(url.slice(1)));
+				if (!pkg) {
+					res.writeHead(404, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({ error: "not found" }));
+					return;
+				}
+				res.writeHead(200, { "Content-Type": "application/json" });
+				res.end(this.packument(pkg));
+			};
+			const safeRespond = () => {
+				try {
+					respond();
+				} catch (err) {
+					debug("mock uplink response failed (socket gone?): %s", err);
+				}
+			};
+			if (this.mode === "slow") {
+				const timer = setTimeout(safeRespond, 1e4);
+				res.socket?.once("close", () => clearTimeout(timer));
+			} else safeRespond();
+		});
+		return new Promise((resolve, reject) => {
+			this.server.once("error", reject);
+			this.server.listen(this.port, () => {
+				debug("mock uplink listening on %d", this.port);
+				resolve();
+			});
+		});
+	}
+	stop() {
+		return new Promise((resolve) => {
+			if (!this.server) {
+				resolve();
+				return;
+			}
+			this.server.closeAllConnections?.();
+			this.server.close(() => {
+				debug("mock uplink stopped");
+				this.server = void 0;
+				resolve();
+			});
+		});
+	}
+};
+//#endregion
+export { MockUplink };
+
+//# sourceMappingURL=mock-uplink.js.map

package/build/esm/utils/mock-uplink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-uplink.js","names":[],"sources":["../../../src/utils/mock-uplink.ts"],"sourcesContent":["import { randomBytes } from 'crypto';\nimport buildDebug from 'debug';\nimport { Server, createServer } from 'http';\n\nimport { computeDist } from './http-client';\n\nconst debug = buildDebug('verdaccio:e2e-cli:mock-uplink');\n\nexport type UplinkMode =\n  /** Serve packuments and tarballs normally */\n  | 'ok'\n  /** Send tarball headers + half the body, then destroy the socket */\n  | 'drop-mid-stream'\n  /** Delay every response long enough to trip the registry's uplink timeout */\n  | 'slow'\n  /** Respond 500 to everything */\n  | 'error-500';\n\ntype MockPackage = {\n  name: string;\n  version: string;\n  tarball: Buffer;\n  shasum: string;\n  integrity: string;\n};\n\n/**\n * Minimal controllable npm uplink used by scenario:uplink-failure.\n *\n * The registry under test is configured (see --print-config) to proxy the\n * `e2e-uplink-*` package pattern to this server, so the scenario can flip the\n * uplink between healthy, dropping connections mid-tarball, slow, and down.\n */\nexport class MockUplink {\n  public mode: UplinkMode = 'ok';\n  public requests: string[] = [];\n  private server?: Server;\n  private packages = new Map<string, MockPackage>();\n  private searchResults: { name: string; version: string }[] = [];\n\n  constructor(public readonly port: number) {}\n\n  /** Register a package served by this uplink; tarball is random (incompressible) bytes. */\n  addPackage(name: string, tarballBytes = 64 * 1024): MockPackage {\n    const tarball = randomBytes(tarballBytes);\n    const { shasum, integrity } = computeDist(tarball);\n    const pkg: MockPackage = { name, version: '1.0.0', tarball, shasum, integrity };\n    this.packages.set(name, pkg);\n    return pkg;\n  }\n\n  /** Register a result served by the /-/v1/search endpoint. */\n  addSearchResult(name: string, version = '1.0.0'): void {\n    this.searchResults.push({ name, version });\n  }\n\n  /**\n   * npmjs-faithful /-/v1/search: filters by `text` substring, applies\n   * `from`/`size` itself (like registry.npmjs.org does) and reports the real\n   * `total` of matches. Mimicking the upstream offsetting is what exposes\n   * double pagination in the registry under test.\n   */\n  private searchResponse(url: URL): string {\n    const text = url.searchParams.get('text') ?? '';\n    const from = Math.max(0, parseInt(url.searchParams.get('from') ?? '0', 10) || 0);\n    const size = Math.max(0, parseInt(url.searchParams.get('size') ?? '20', 10) || 20);\n    const matches = this.searchResults.filter((r) => r.name.includes(text));\n    const page = matches.slice(from, from + size);\n    return JSON.stringify({\n      objects: page.map((r) => ({\n        package: {\n          name: r.name,\n          version: r.version,\n          description: 'mock uplink search result',\n          date: '2020-01-01T00:00:00.000Z',\n          maintainers: [{ username: 'mock-uplink', email: 'mock@example.org' }],\n          links: { npm: `http://localhost:${this.port}/${r.name}` },\n        },\n        score: { final: 1, detail: { quality: 1, popularity: 1, maintenance: 1 } },\n        searchScore: 1,\n        flags: {},\n      })),\n      total: matches.length,\n      time: new Date('2020-01-01T00:00:00.000Z').toISOString(),\n    });\n  }\n\n  private packument(pkg: MockPackage): string {\n    const tarballUrl = `http://localhost:${this.port}/${pkg.name}/-/${pkg.name}-${pkg.version}.tgz`;\n    return JSON.stringify({\n      name: pkg.name,\n      'dist-tags': { latest: pkg.version },\n      versions: {\n        [pkg.version]: {\n          name: pkg.name,\n          version: pkg.version,\n          description: 'mock uplink package',\n          dist: { tarball: tarballUrl, shasum: pkg.shasum, integrity: pkg.integrity },\n        },\n      },\n      time: {\n        created: '2020-01-01T00:00:00.000Z',\n        modified: '2020-01-01T00:00:00.000Z',\n        [pkg.version]: '2020-01-01T00:00:00.000Z',\n      },\n    });\n  }\n\n  start(): Promise<void> {\n    this.server = createServer((req, res) => {\n      const url = req.url || '';\n      this.requests.push(url);\n      debug('mock uplink %s %s (mode: %s)', req.method, url, this.mode);\n\n      const respond = () => {\n        if (this.mode === 'error-500') {\n          res.writeHead(500, { 'Content-Type': 'application/json' });\n          res.end(JSON.stringify({ error: 'mock uplink internal error' }));\n          return;\n        }\n\n        // Search route: /-/v1/search?text=...&from=...&size=...\n        if (url.startsWith('/-/v1/search')) {\n          res.writeHead(200, { 'Content-Type': 'application/json' });\n          res.end(this.searchResponse(new URL(url, `http://localhost:${this.port}`)));\n          return;\n        }\n\n        // Tarball route: /<name>/-/<file>.tgz — parsed without a regex to\n        // avoid backtracking on untrusted input (CodeQL js/polynomial-redos).\n        const tarballSep = url.indexOf('/-/');\n        if (tarballSep > 0 && url.endsWith('.tgz')) {\n          const pkg = this.packages.get(decodeURIComponent(url.slice(1, tarballSep)));\n          if (!pkg) {\n            res.writeHead(404, { 'Content-Type': 'application/json' });\n            res.end(JSON.stringify({ error: 'not found' }));\n            return;\n          }\n          if (this.mode === 'drop-mid-stream') {\n            res.writeHead(200, {\n              'Content-Type': 'application/octet-stream',\n              'Content-Length': String(pkg.tarball.length),\n            });\n            res.write(pkg.tarball.subarray(0, Math.floor(pkg.tarball.length / 2)));\n            // Kill the connection before the body completes.\n            setTimeout(() => res.socket?.destroy(), 50);\n            return;\n          }\n          res.writeHead(200, {\n            'Content-Type': 'application/octet-stream',\n            'Content-Length': String(pkg.tarball.length),\n          });\n          res.end(pkg.tarball);\n          return;\n        }\n\n        // Packument route: /<name>\n        const pkg = this.packages.get(decodeURIComponent(url.slice(1)));\n        if (!pkg) {\n          res.writeHead(404, { 'Content-Type': 'application/json' });\n          res.end(JSON.stringify({ error: 'not found' }));\n          return;\n        }\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(this.packument(pkg));\n      };\n\n      // The registry (or a stopped server) may have torn the socket down by the\n      // time a delayed response fires — never let that crash the mock.\n      const safeRespond = () => {\n        try {\n          respond();\n        } catch (err) {\n          debug('mock uplink response failed (socket gone?): %s', err);\n        }\n      };\n\n      if (this.mode === 'slow') {\n        // Longer than the uplink timeout configured for the e2e registry (3s).\n        const timer = setTimeout(safeRespond, 10_000);\n        res.socket?.once('close', () => clearTimeout(timer));\n      } else {\n        safeRespond();\n      }\n    });\n\n    return new Promise((resolve, reject) => {\n      this.server!.once('error', reject);\n      this.server!.listen(this.port, () => {\n        debug('mock uplink listening on %d', this.port);\n        resolve();\n      });\n    });\n  }\n\n  stop(): Promise<void> {\n    return new Promise((resolve) => {\n      if (!this.server) {\n        resolve();\n        return;\n      }\n      // closeAllConnections drops keep-alive sockets so close() completes.\n      this.server.closeAllConnections?.();\n      this.server.close(() => {\n        debug('mock uplink stopped');\n        this.server = undefined;\n        resolve();\n      });\n    });\n  }\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,+BAA+B;;;;;;;;AA2BxD,IAAa,aAAb,MAAwB;CAOM;CAN5B,OAA0B;CAC1B,WAA4B,CAAC;CAC7B;CACA,2BAAmB,IAAI,IAAyB;CAChD,gBAA6D,CAAC;CAE9D,YAAY,MAA8B;EAAd,KAAA,OAAA;CAAe;;CAG3C,WAAW,MAAc,eAAe,OAAwB;EAC9D,MAAM,UAAU,YAAY,YAAY;EACxC,MAAM,EAAE,QAAQ,cAAc,YAAY,OAAO;EACjD,MAAM,MAAmB;GAAE;GAAM,SAAS;GAAS;GAAS;GAAQ;EAAU;EAC9E,KAAK,SAAS,IAAI,MAAM,GAAG;EAC3B,OAAO;CACT;;CAGA,gBAAgB,MAAc,UAAU,SAAe;EACrD,KAAK,cAAc,KAAK;GAAE;GAAM;EAAQ,CAAC;CAC3C;;;;;;;CAQA,eAAuB,KAAkB;EACvC,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK;EAC7C,MAAM,OAAO,KAAK,IAAI,GAAG,SAAS,IAAI,aAAa,IAAI,MAAM,KAAK,KAAK,EAAE,KAAK,CAAC;EAC/E,MAAM,OAAO,KAAK,IAAI,GAAG,SAAS,IAAI,aAAa,IAAI,MAAM,KAAK,MAAM,EAAE,KAAK,EAAE;EACjF,MAAM,UAAU,KAAK,cAAc,QAAQ,MAAM,EAAE,KAAK,SAAS,IAAI,CAAC;EACtE,MAAM,OAAO,QAAQ,MAAM,MAAM,OAAO,IAAI;EAC5C,OAAO,KAAK,UAAU;GACpB,SAAS,KAAK,KAAK,OAAO;IACxB,SAAS;KACP,MAAM,EAAE;KACR,SAAS,EAAE;KACX,aAAa;KACb,MAAM;KACN,aAAa,CAAC;MAAE,UAAU;MAAe,OAAO;KAAmB,CAAC;KACpE,OAAO,EAAE,KAAK,oBAAoB,KAAK,KAAK,GAAG,EAAE,OAAO;IAC1D;IACA,OAAO;KAAE,OAAO;KAAG,QAAQ;MAAE,SAAS;MAAG,YAAY;MAAG,aAAa;KAAE;IAAE;IACzE,aAAa;IACb,OAAO,CAAC;GACV,EAAE;GACF,OAAO,QAAQ;GACf,uBAAM,IAAI,KAAK,0BAA0B,EAAA,CAAE,YAAY;EACzD,CAAC;CACH;CAEA,UAAkB,KAA0B;EAC1C,MAAM,aAAa,oBAAoB,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,KAAK,GAAG,IAAI,QAAQ;EAC1F,OAAO,KAAK,UAAU;GACpB,MAAM,IAAI;GACV,aAAa,EAAE,QAAQ,IAAI,QAAQ;GACnC,UAAU,GACP,IAAI,UAAU;IACb,MAAM,IAAI;IACV,SAAS,IAAI;IACb,aAAa;IACb,MAAM;KAAE,SAAS;KAAY,QAAQ,IAAI;KAAQ,WAAW,IAAI;IAAU;GAC5E,EACF;GACA,MAAM;IACJ,SAAS;IACT,UAAU;KACT,IAAI,UAAU;GACjB;EACF,CAAC;CACH;CAEA,QAAuB;EACrB,KAAK,SAAS,cAAc,KAAK,QAAQ;GACvC,MAAM,MAAM,IAAI,OAAO;GACvB,KAAK,SAAS,KAAK,GAAG;GACtB,MAAM,gCAAgC,IAAI,QAAQ,KAAK,KAAK,IAAI;GAEhE,MAAM,gBAAgB;IACpB,IAAI,KAAK,SAAS,aAAa;KAC7B,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;KACzD,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,6BAA6B,CAAC,CAAC;KAC/D;IACF;IAGA,IAAI,IAAI,WAAW,cAAc,GAAG;KAClC,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;KACzD,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,oBAAoB,KAAK,MAAM,CAAC,CAAC;KAC1E;IACF;IAIA,MAAM,aAAa,IAAI,QAAQ,KAAK;IACpC,IAAI,aAAa,KAAK,IAAI,SAAS,MAAM,GAAG;KAC1C,MAAM,MAAM,KAAK,SAAS,IAAI,mBAAmB,IAAI,MAAM,GAAG,UAAU,CAAC,CAAC;KAC1E,IAAI,CAAC,KAAK;MACR,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;MACzD,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,YAAY,CAAC,CAAC;MAC9C;KACF;KACA,IAAI,KAAK,SAAS,mBAAmB;MACnC,IAAI,UAAU,KAAK;OACjB,gBAAgB;OAChB,kBAAkB,OAAO,IAAI,QAAQ,MAAM;MAC7C,CAAC;MACD,IAAI,MAAM,IAAI,QAAQ,SAAS,GAAG,KAAK,MAAM,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC;MAErE,iBAAiB,IAAI,QAAQ,QAAQ,GAAG,EAAE;MAC1C;KACF;KACA,IAAI,UAAU,KAAK;MACjB,gBAAgB;MAChB,kBAAkB,OAAO,IAAI,QAAQ,MAAM;KAC7C,CAAC;KACD,IAAI,IAAI,IAAI,OAAO;KACnB;IACF;IAGA,MAAM,MAAM,KAAK,SAAS,IAAI,mBAAmB,IAAI,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK;KACR,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;KACzD,IAAI,IAAI,KAAK,UAAU,EAAE,OAAO,YAAY,CAAC,CAAC;KAC9C;IACF;IACA,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU,GAAG,CAAC;GAC7B;GAIA,MAAM,oBAAoB;IACxB,IAAI;KACF,QAAQ;IACV,SAAS,KAAK;KACZ,MAAM,kDAAkD,GAAG;IAC7D;GACF;GAEA,IAAI,KAAK,SAAS,QAAQ;IAExB,MAAM,QAAQ,WAAW,aAAa,GAAM;IAC5C,IAAI,QAAQ,KAAK,eAAe,aAAa,KAAK,CAAC;GACrD,OACE,YAAY;EAEhB,CAAC;EAED,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,OAAQ,KAAK,SAAS,MAAM;GACjC,KAAK,OAAQ,OAAO,KAAK,YAAY;IACnC,MAAM,+BAA+B,KAAK,IAAI;IAC9C,QAAQ;GACV,CAAC;EACH,CAAC;CACH;CAEA,OAAsB;EACpB,OAAO,IAAI,SAAS,YAAY;GAC9B,IAAI,CAAC,KAAK,QAAQ;IAChB,QAAQ;IACR;GACF;GAEA,KAAK,OAAO,sBAAsB;GAClC,KAAK,OAAO,YAAY;IACtB,MAAM,qBAAqB;IAC3B,KAAK,SAAS,KAAA;IACd,QAAQ;GACV,CAAC;EACH,CAAC;CACH;AACF"}

package/build/esm/utils/pending-checks.js

@@ -0,0 +1,21 @@
+//#region src/utils/pending-checks.ts
+/**
+* Pending contract checks pin registry behavior that is correct per the
+* npmjs contract but still red against some published Verdaccio versions.
+* They are off by default; E2E_PENDING_CONTRACT_CHECKS enables them:
+*
+*   E2E_PENDING_CONTRACT_CHECKS=true              → all scenarios
+*   E2E_PENDING_CONTRACT_CHECKS=tarballs          → one scenario
+*   E2E_PENDING_CONTRACT_CHECKS=tarballs,search   → a list
+*
+* Flip the default once the registry-side fixes are published everywhere.
+*/
+function pendingContractChecksEnabled(scenario) {
+	const value = (process.env.E2E_PENDING_CONTRACT_CHECKS || "").toLowerCase();
+	if (value === "true" || value === "1" || value === "all") return true;
+	return value.split(",").map((entry) => entry.trim()).includes(scenario);
+}
+//#endregion
+export { pendingContractChecksEnabled };
+
+//# sourceMappingURL=pending-checks.js.map

package/build/esm/utils/pending-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-checks.js","names":[],"sources":["../../../src/utils/pending-checks.ts"],"sourcesContent":["/**\n * Pending contract checks pin registry behavior that is correct per the\n * npmjs contract but still red against some published Verdaccio versions.\n * They are off by default; E2E_PENDING_CONTRACT_CHECKS enables them:\n *\n *   E2E_PENDING_CONTRACT_CHECKS=true              → all scenarios\n *   E2E_PENDING_CONTRACT_CHECKS=tarballs          → one scenario\n *   E2E_PENDING_CONTRACT_CHECKS=tarballs,search   → a list\n *\n * Flip the default once the registry-side fixes are published everywhere.\n */\nexport function pendingContractChecksEnabled(scenario: string): boolean {\n  const value = (process.env.E2E_PENDING_CONTRACT_CHECKS || '').toLowerCase();\n  if (value === 'true' || value === '1' || value === 'all') {\n    return true;\n  }\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .includes(scenario);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,6BAA6B,UAA2B;CACtE,MAAM,SAAS,QAAQ,IAAI,+BAA+B,GAAA,CAAI,YAAY;CAC1E,IAAI,UAAU,UAAU,UAAU,OAAO,UAAU,OACjD,OAAO;CAET,OAAO,MACJ,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,SAAS,QAAQ;AACtB"}

package/build/esm/utils/process.js

@@ -0,0 +1,92 @@
+import buildDebug from "debug";
+import { spawn } from "child_process";
+import { basename } from "path";
+import { createInterface } from "readline";
+import { format } from "util";
+//#region src/utils/process.ts
+var debug = buildDebug("verdaccio:e2e-cli:process");
+var debugRead = buildDebug("verdaccio:e2e-cli:line");
+var _verbose = false;
+function setVerbose(v) {
+	_verbose = v;
+}
+var COLORS = {
+	reset: "\x1B[0m",
+	dim: "\x1B[2m",
+	cyan: "\x1B[36m",
+	green: "\x1B[32m",
+	red: "\x1B[31m",
+	yellow: "\x1B[33m"
+};
+function shortCmd(cmd, args) {
+	return `${basename(cmd)} ${args.join(" ")}`;
+}
+/**
+* Always-on scenario tracing, printed inline with the test output in the same
+* style as the verbose `$ <command>` lines — so a red scenario explains what
+* it actually saw (statuses, headers, bodies, timings) in any run, CI or
+* local, without a reproduction. Accepts util.format tokens (%s %d %j %o).
+*/
+function trace(fmt, ...args) {
+	process.stdout.write(`      ${COLORS.dim}» ${format(fmt, ...args)}${COLORS.reset}\n`);
+}
+async function exec(options, cmd, args) {
+	debug("start exec %o %o %o", options, cmd, args ? args.join(" ") : "");
+	let stdout = "";
+	let stderr = "";
+	if (_verbose) {
+		const cwd = options.cwd ? ` ${COLORS.dim}(cwd: ${basename(String(options.cwd))})${COLORS.reset}` : "";
+		process.stdout.write(`      ${COLORS.cyan}$${COLORS.reset} ${shortCmd(cmd, args)}${cwd}\n`);
+	}
+	const spawnOptions = {
+		cwd: options.cwd,
+		stdio: options.stdio || "pipe",
+		env: options.env || process.env
+	};
+	if (process.platform.startsWith("win")) {
+		args.unshift("/c", cmd);
+		cmd = "cmd.exe";
+		spawnOptions.stdio = "pipe";
+	}
+	const start = Date.now();
+	const childProcess = spawn(cmd, args, spawnOptions);
+	if (childProcess.stdout) {
+		childProcess.stdout.on("data", (data) => {
+			debugRead("data %o", data.toString());
+		});
+		createInterface({
+			input: childProcess.stdout,
+			output: process.stdout,
+			terminal: false
+		}).on("line", function(line) {
+			debugRead("line %o", line);
+			stdout += line;
+		});
+	}
+	if (childProcess.stderr) childProcess.stderr.on("data", (data) => {
+		stderr += data.toString();
+	});
+	const err = /* @__PURE__ */ new Error(`Running "${cmd} ${args.join(" ")}" returned error code `);
+	return new Promise((resolve, reject) => {
+		childProcess.on("exit", (code) => {
+			const duration = Date.now() - start;
+			debugRead("exit %o", code);
+			if (_verbose) {
+				const status = code ? `${COLORS.red}exit ${code}${COLORS.reset}` : `${COLORS.green}ok${COLORS.reset}`;
+				process.stdout.write(`      ${COLORS.dim}  -> ${status} ${COLORS.dim}(${duration}ms)${COLORS.reset}\n`);
+			}
+			if (!code) resolve({
+				stdout,
+				stderr
+			});
+			else {
+				err.message += `${code}...\n\nSTDOUT:\n${stdout}\n\nSTDERR:\n${stderr}\n`;
+				reject(err);
+			}
+		});
+	});
+}
+//#endregion
+export { exec, setVerbose, trace };
+
+//# sourceMappingURL=process.js.map

package/build/esm/utils/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","names":[],"sources":["../../../src/utils/process.ts"],"sourcesContent":["import { SpawnOptions, spawn } from 'child_process';\nimport buildDebug from 'debug';\nimport { basename } from 'path';\nimport { createInterface } from 'readline';\nimport { format } from 'util';\n\nimport { ExecOutput } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:process');\nconst debugRead = buildDebug('verdaccio:e2e-cli:line');\n\nlet _verbose = false;\n\nexport function setVerbose(v: boolean) {\n  _verbose = v;\n}\n\nconst COLORS = {\n  reset: '\\x1b[0m',\n  dim: '\\x1b[2m',\n  cyan: '\\x1b[36m',\n  green: '\\x1b[32m',\n  red: '\\x1b[31m',\n  yellow: '\\x1b[33m',\n};\n\nfunction shortCmd(cmd: string, args: string[]): string {\n  const bin = basename(cmd);\n  return `${bin} ${args.join(' ')}`;\n}\n\n/**\n * Always-on scenario tracing, printed inline with the test output in the same\n * style as the verbose `$ <command>` lines — so a red scenario explains what\n * it actually saw (statuses, headers, bodies, timings) in any run, CI or\n * local, without a reproduction. Accepts util.format tokens (%s %d %j %o).\n */\nexport function trace(fmt: string, ...args: unknown[]): void {\n  process.stdout.write(`      ${COLORS.dim}» ${format(fmt, ...args)}${COLORS.reset}\\n`);\n}\n\nexport async function exec(\n  options: SpawnOptions,\n  cmd: string,\n  args: string[]\n): Promise<ExecOutput> {\n  debug('start exec %o %o %o', options, cmd, args ? args.join(' ') : '');\n  let stdout = '';\n  let stderr = '';\n\n  if (_verbose) {\n    const cwd = options.cwd\n      ? ` ${COLORS.dim}(cwd: ${basename(String(options.cwd))})${COLORS.reset}`\n      : '';\n    process.stdout.write(`      ${COLORS.cyan}$${COLORS.reset} ${shortCmd(cmd, args)}${cwd}\\n`);\n  }\n\n  const spawnOptions: SpawnOptions = {\n    cwd: options.cwd,\n    stdio: options.stdio || 'pipe',\n    env: options.env || process.env,\n  };\n\n  if (process.platform.startsWith('win')) {\n    args.unshift('/c', cmd);\n    cmd = 'cmd.exe';\n    spawnOptions.stdio = 'pipe';\n  }\n\n  const start = Date.now();\n  const childProcess = spawn(cmd, args, spawnOptions);\n\n  if (childProcess.stdout) {\n    childProcess.stdout.on('data', (data) => {\n      debugRead('data %o', data.toString());\n    });\n    const rl = createInterface({\n      input: childProcess.stdout,\n      output: process.stdout,\n      terminal: false,\n    });\n\n    rl.on('line', function (line) {\n      debugRead('line %o', line);\n      stdout += line;\n    });\n  }\n\n  if (childProcess.stderr) {\n    childProcess.stderr.on('data', (data) => {\n      stderr += data.toString();\n    });\n  }\n\n  const err = new Error(`Running \"${cmd} ${args.join(' ')}\" returned error code `);\n  return new Promise((resolve, reject) => {\n    childProcess.on('exit', (code) => {\n      const duration = Date.now() - start;\n      debugRead('exit %o', code);\n\n      if (_verbose) {\n        const status = code\n          ? `${COLORS.red}exit ${code}${COLORS.reset}`\n          : `${COLORS.green}ok${COLORS.reset}`;\n        process.stdout.write(\n          `      ${COLORS.dim}  -> ${status} ${COLORS.dim}(${duration}ms)${COLORS.reset}\\n`\n        );\n      }\n\n      if (!code) {\n        resolve({ stdout, stderr });\n      } else {\n        err.message += `${code}...\\n\\nSTDOUT:\\n${stdout}\\n\\nSTDERR:\\n${stderr}\\n`;\n        reject(err);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;AAQA,IAAM,QAAQ,WAAW,2BAA2B;AACpD,IAAM,YAAY,WAAW,wBAAwB;AAErD,IAAI,WAAW;AAEf,SAAgB,WAAW,GAAY;CACrC,WAAW;AACb;AAEA,IAAM,SAAS;CACb,OAAO;CACP,KAAK;CACL,MAAM;CACN,OAAO;CACP,KAAK;CACL,QAAQ;AACV;AAEA,SAAS,SAAS,KAAa,MAAwB;CAErD,OAAO,GADK,SAAS,GACX,EAAI,GAAG,KAAK,KAAK,GAAG;AAChC;;;;;;;AAQA,SAAgB,MAAM,KAAa,GAAG,MAAuB;CAC3D,QAAQ,OAAO,MAAM,SAAS,OAAO,IAAI,IAAI,OAAO,KAAK,GAAG,IAAI,IAAI,OAAO,MAAM,GAAG;AACtF;AAEA,eAAsB,KACpB,SACA,KACA,MACqB;CACrB,MAAM,uBAAuB,SAAS,KAAK,OAAO,KAAK,KAAK,GAAG,IAAI,EAAE;CACrE,IAAI,SAAS;CACb,IAAI,SAAS;CAEb,IAAI,UAAU;EACZ,MAAM,MAAM,QAAQ,MAChB,IAAI,OAAO,IAAI,QAAQ,SAAS,OAAO,QAAQ,GAAG,CAAC,EAAE,GAAG,OAAO,UAC/D;EACJ,QAAQ,OAAO,MAAM,SAAS,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,SAAS,KAAK,IAAI,IAAI,IAAI,GAAG;CAC5F;CAEA,MAAM,eAA6B;EACjC,KAAK,QAAQ;EACb,OAAO,QAAQ,SAAS;EACxB,KAAK,QAAQ,OAAO,QAAQ;CAC9B;CAEA,IAAI,QAAQ,SAAS,WAAW,KAAK,GAAG;EACtC,KAAK,QAAQ,MAAM,GAAG;EACtB,MAAM;EACN,aAAa,QAAQ;CACvB;CAEA,MAAM,QAAQ,KAAK,IAAI;CACvB,MAAM,eAAe,MAAM,KAAK,MAAM,YAAY;CAElD,IAAI,aAAa,QAAQ;EACvB,aAAa,OAAO,GAAG,SAAS,SAAS;GACvC,UAAU,WAAW,KAAK,SAAS,CAAC;EACtC,CAAC;EAOD,gBAN2B;GACzB,OAAO,aAAa;GACpB,QAAQ,QAAQ;GAChB,UAAU;EACZ,CAEA,CAAA,CAAG,GAAG,QAAQ,SAAU,MAAM;GAC5B,UAAU,WAAW,IAAI;GACzB,UAAU;EACZ,CAAC;CACH;CAEA,IAAI,aAAa,QACf,aAAa,OAAO,GAAG,SAAS,SAAS;EACvC,UAAU,KAAK,SAAS;CAC1B,CAAC;CAGH,MAAM,sBAAM,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,KAAK,GAAG,EAAE,uBAAuB;CAC/E,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,aAAa,GAAG,SAAS,SAAS;GAChC,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,UAAU,WAAW,IAAI;GAEzB,IAAI,UAAU;IACZ,MAAM,SAAS,OACX,GAAG,OAAO,IAAI,OAAO,OAAO,OAAO,UACnC,GAAG,OAAO,MAAM,IAAI,OAAO;IAC/B,QAAQ,OAAO,MACb,SAAS,OAAO,IAAI,OAAO,OAAO,GAAG,OAAO,IAAI,GAAG,SAAS,KAAK,OAAO,MAAM,GAChF;GACF;GAEA,IAAI,CAAC,MACH,QAAQ;IAAE;IAAQ;GAAO,CAAC;QACrB;IACL,IAAI,WAAW,GAAG,KAAK,kBAAkB,OAAO,eAAe,OAAO;IACtE,OAAO,GAAG;GACZ;EACF,CAAC;CACH,CAAC;AACH"}

package/build/esm/utils/project.js

@@ -0,0 +1,50 @@
+import buildDebug from "debug";
+import { join } from "path";
+import { mkdtemp, writeFile } from "fs/promises";
+import { tmpdir } from "os";
+//#region src/utils/project.ts
+var debug = buildDebug("verdaccio:e2e-cli:project");
+async function createTempFolder(prefix) {
+	const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, "-");
+	debug("creating temp folder %o", sanitized);
+	return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));
+}
+function getPackageJSON(packageName, version = "1.0.0", dependencies = {}, devDependencies = {}) {
+	debug("creating package.json %o", packageName);
+	return JSON.stringify({
+		name: packageName,
+		version,
+		description: "some cool project",
+		main: "index.js",
+		scripts: { test: "echo exit 1" },
+		dependencies,
+		devDependencies,
+		keywords: ["foo", "bar"],
+		author: "Verdaccio E2E <verdaccio@example.org>",
+		license: "MIT"
+	});
+}
+function getREADME(packageName) {
+	return `
+   # My README ${packageName}
+
+   some text
+
+   ## subtitle
+
+   more text
+  `;
+}
+async function prepareGenericEmptyProject(packageName, version, port, token, registryDomain, dependencies = {}, devDependencies = {}) {
+	debug("preparing generic project %o", packageName);
+	const getNPMrc = (port, token, registry) => `//localhost:${port}/:_authToken=${token}\nregistry=${registry}\nmin-release-age=0\naudit=false\nfund=false`;
+	const tempFolder = await createTempFolder("temp-folder");
+	await writeFile(join(tempFolder, "package.json"), getPackageJSON(packageName, version, dependencies, devDependencies));
+	await writeFile(join(tempFolder, "README.md"), getREADME(packageName));
+	await writeFile(join(tempFolder, ".npmrc"), getNPMrc(port, token, registryDomain));
+	return { tempFolder };
+}
+//#endregion
+export { createTempFolder, getPackageJSON, getREADME, prepareGenericEmptyProject };
+
+//# sourceMappingURL=project.js.map

package/build/esm/utils/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","names":[],"sources":["../../../src/utils/project.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { mkdirSync } from 'fs';\nimport { mkdtemp, writeFile } from 'fs/promises';\nimport { tmpdir } from 'os';\nimport { join } from 'path';\n\nconst debug = buildDebug('verdaccio:e2e-cli:project');\n\nexport async function createTempFolder(prefix: string): Promise<string> {\n  const sanitized = prefix.replace(/[^a-zA-Z0-9-_]/g, '-');\n  debug('creating temp folder %o', sanitized);\n  return mkdtemp(join(tmpdir(), `verdaccio-e2e-${sanitized}-`));\n}\n\nexport function getPackageJSON(\n  packageName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): string {\n  debug('creating package.json %o', packageName);\n  const json = {\n    name: packageName,\n    version,\n    description: 'some cool project',\n    main: 'index.js',\n    scripts: {\n      test: 'echo exit 1',\n    },\n    dependencies,\n    devDependencies,\n    keywords: ['foo', 'bar'],\n    author: 'Verdaccio E2E <verdaccio@example.org>',\n    license: 'MIT',\n  };\n  return JSON.stringify(json);\n}\n\nexport function getREADME(packageName: string): string {\n  return `\n   # My README ${packageName}\n\n   some text\n\n   ## subtitle\n\n   more text\n  `;\n}\n\nexport async function prepareGenericEmptyProject(\n  packageName: string,\n  version: string,\n  port: number,\n  token: string,\n  registryDomain: string,\n  dependencies: Record<string, string> = {},\n  devDependencies: Record<string, string> = {}\n): Promise<{ tempFolder: string }> {\n  debug('preparing generic project %o', packageName);\n  // `min-release-age=0` keeps the harness hermetic: npm 12 added a release-age\n  // cooldown that, if set in the developer's global ~/.npmrc, would reject the\n  // just-published packages these tests install (ETARGET / \"no matching version\n  // ... before <date>\"). Pinning it per-project overrides any global value.\n  // It's an npm-only key — pnpm (minimum-release-age) and yarn ignore it.\n  // `audit=false`/`fund=false` stop npm's implicit audit/fund calls on every\n  // install — the registry would proxy those upstream, and the suite must run\n  // fully offline (the dedicated audit test still runs `npm audit` explicitly).\n  const getNPMrc = (port: number, token: string, registry: string) =>\n    `//localhost:${port}/:_authToken=${token}\\nregistry=${registry}\\nmin-release-age=0\\naudit=false\\nfund=false`;\n  const tempFolder = await createTempFolder('temp-folder');\n  await writeFile(\n    join(tempFolder, 'package.json'),\n    getPackageJSON(packageName, version, dependencies, devDependencies)\n  );\n  await writeFile(join(tempFolder, 'README.md'), getREADME(packageName));\n  await writeFile(join(tempFolder, '.npmrc'), getNPMrc(port, token, registryDomain));\n  return { tempFolder };\n}\n"],"mappings":";;;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;AAEpD,eAAsB,iBAAiB,QAAiC;CACtE,MAAM,YAAY,OAAO,QAAQ,mBAAmB,GAAG;CACvD,MAAM,2BAA2B,SAAS;CAC1C,OAAO,QAAQ,KAAK,OAAO,GAAG,iBAAiB,UAAU,EAAE,CAAC;AAC9D;AAEA,SAAgB,eACd,aACA,UAAU,SACV,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACnC;CACR,MAAM,4BAA4B,WAAW;CAe7C,OAAO,KAAK,UAAU;EAbpB,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN,SAAS,EACP,MAAM,cACR;EACA;EACA;EACA,UAAU,CAAC,OAAO,KAAK;EACvB,QAAQ;EACR,SAAS;CAEW,CAAI;AAC5B;AAEA,SAAgB,UAAU,aAA6B;CACrD,OAAO;iBACQ,YAAY;;;;;;;;AAQ7B;AAEA,eAAsB,2BACpB,aACA,SACA,MACA,OACA,gBACA,eAAuC,CAAC,GACxC,kBAA0C,CAAC,GACV;CACjC,MAAM,gCAAgC,WAAW;CASjD,MAAM,YAAY,MAAc,OAAe,aAC7C,eAAe,KAAK,eAAe,MAAM,aAAa,SAAS;CACjE,MAAM,aAAa,MAAM,iBAAiB,aAAa;CACvD,MAAM,UACJ,KAAK,YAAY,cAAc,GAC/B,eAAe,aAAa,SAAS,cAAc,eAAe,CACpE;CACA,MAAM,UAAU,KAAK,YAAY,WAAW,GAAG,UAAU,WAAW,CAAC;CACrE,MAAM,UAAU,KAAK,YAAY,QAAQ,GAAG,SAAS,MAAM,OAAO,cAAc,CAAC;CACjF,OAAO,EAAE,WAAW;AACtB"}

package/build/esm/utils/publish.js

@@ -0,0 +1,113 @@
+import { computeDist } from "./http-client.js";
+import buildDebug from "debug";
+import { gzipSync } from "zlib";
+//#region src/utils/publish.ts
+var debug = buildDebug("verdaccio:e2e-cli:publish");
+/** Build a single ustar tar entry (512-byte header + padded content). */
+function tarEntry(name, content) {
+	const header = Buffer.alloc(512);
+	header.write(name, 0, 100, "utf8");
+	header.write("0000644\0", 100, 8);
+	header.write("0000000\0", 108, 8);
+	header.write("0000000\0", 116, 8);
+	header.write(content.length.toString(8).padStart(11, "0") + "\0", 124, 12);
+	header.write("00000000000\0", 136, 12);
+	header.write("        ", 148, 8);
+	header.write("0", 156, 1);
+	header.write("ustar\0", 257, 6);
+	header.write("00", 263, 2);
+	let checksum = 0;
+	for (const byte of header) checksum += byte;
+	header.write(checksum.toString(8).padStart(6, "0") + "\0 ", 148, 8);
+	const padding = Buffer.alloc((512 - content.length % 512) % 512);
+	return Buffer.concat([
+		header,
+		content,
+		padding
+	]);
+}
+/** Build a minimal valid npm package tarball (package/package.json inside). */
+function buildPackageTarball(pkgName, version, dependencies = {}) {
+	const manifest = {
+		name: pkgName,
+		version,
+		description: "e2e local package",
+		main: "index.js",
+		dependencies,
+		license: "MIT"
+	};
+	const tar = Buffer.concat([
+		tarEntry("package/package.json", Buffer.from(JSON.stringify(manifest, null, 2))),
+		tarEntry("package/index.js", Buffer.from("module.exports = {};\n")),
+		Buffer.alloc(1024)
+	]);
+	return gzipSync(tar, { level: 9 });
+}
+/**
+* Publish straight through the registry HTTP API (same PUT an npm client
+* sends). Used for adapters that cannot publish themselves (eg. deno) so
+* every fixture still comes from the registry under test — never from an
+* external registry.
+*/
+async function publishViaHttp(ctx, pkgName, version = "1.0.0", dependencies = {}) {
+	const tarball = buildPackageTarball(pkgName, version, dependencies);
+	const { shasum, integrity } = computeDist(tarball);
+	const filename = `${pkgName.replace(/^@[^/]+\//, "")}-${version}.tgz`;
+	const encodedName = pkgName.startsWith("@") ? pkgName.replaceAll("/", "%2f") : pkgName;
+	const tarballUrl = `${ctx.registryUrl}/${encodedName}/-/${filename}`;
+	const body = {
+		_id: pkgName,
+		name: pkgName,
+		description: "e2e local package",
+		"dist-tags": { latest: version },
+		versions: { [version]: {
+			_id: `${pkgName}@${version}`,
+			name: pkgName,
+			version,
+			description: "e2e local package",
+			main: "index.js",
+			dependencies,
+			license: "MIT",
+			dist: {
+				tarball: tarballUrl,
+				shasum,
+				integrity
+			}
+		} },
+		_attachments: { [filename]: {
+			content_type: "application/octet-stream",
+			data: tarball.toString("base64"),
+			length: tarball.length
+		} }
+	};
+	const response = await fetch(`${ctx.registryUrl}/${encodedName}`, {
+		method: "PUT",
+		headers: {
+			"Content-Type": "application/json",
+			Authorization: `Bearer ${ctx.token}`
+		},
+		body: JSON.stringify(body)
+	});
+	if (response.status !== 201 && response.status !== 200) {
+		const text = await response.text();
+		throw new Error(`HTTP publish of ${pkgName}@${version} failed: ${response.status} ${text}`);
+	}
+	debug("published %s@%s via HTTP", pkgName, version);
+}
+/**
+* Publish a package to the registry under test so later steps (install, ci,
+* audit, info, search…) can consume it without ever touching an external
+* registry — the whole suite must be runnable offline. Uses the package
+* manager when it can publish, the raw HTTP API otherwise (eg. deno).
+*/
+async function publishLocalPackage(ctx, pkgName, version = "1.0.0", dependencies = {}) {
+	if (!ctx.adapter.supports.has("publish")) return publishViaHttp(ctx, pkgName, version, dependencies);
+	const { tempFolder } = await ctx.adapter.prepareProject(pkgName, version, ctx.registryUrl, ctx.port, ctx.token, dependencies);
+	if (ctx.adapter.type === "yarn-modern") await ctx.adapter.exec({ cwd: tempFolder }, "install");
+	await ctx.adapter.exec({ cwd: tempFolder }, "publish", ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("published local package %s@%s", pkgName, version);
+}
+//#endregion
+export { buildPackageTarball, publishLocalPackage, publishViaHttp };
+
+//# sourceMappingURL=publish.js.map

package/build/esm/utils/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","names":[],"sources":["../../../src/utils/publish.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { gzipSync } from 'zlib';\n\nimport { TestContext } from '../types';\nimport { computeDist } from './http-client';\n\nconst debug = buildDebug('verdaccio:e2e-cli:publish');\n\n/** Build a single ustar tar entry (512-byte header + padded content). */\nfunction tarEntry(name: string, content: Buffer): Buffer {\n  const header = Buffer.alloc(512);\n  header.write(name, 0, 100, 'utf8');\n  header.write('0000644\\0', 100, 8); // mode\n  header.write('0000000\\0', 108, 8); // uid\n  header.write('0000000\\0', 116, 8); // gid\n  header.write(content.length.toString(8).padStart(11, '0') + '\\0', 124, 12); // size\n  header.write('00000000000\\0', 136, 12); // mtime (epoch, keeps output deterministic)\n  header.write('        ', 148, 8); // chksum placeholder (spaces while summing)\n  header.write('0', 156, 1); // typeflag: regular file\n  header.write('ustar\\0', 257, 6); // magic\n  header.write('00', 263, 2); // version\n  let checksum = 0;\n  for (const byte of header) {\n    checksum += byte;\n  }\n  header.write(checksum.toString(8).padStart(6, '0') + '\\0 ', 148, 8);\n  const padding = Buffer.alloc((512 - (content.length % 512)) % 512);\n  return Buffer.concat([header, content, padding]);\n}\n\n/** Build a minimal valid npm package tarball (package/package.json inside). */\nexport function buildPackageTarball(\n  pkgName: string,\n  version: string,\n  dependencies: Record<string, string> = {}\n): Buffer {\n  const manifest = {\n    name: pkgName,\n    version,\n    description: 'e2e local package',\n    main: 'index.js',\n    dependencies,\n    license: 'MIT',\n  };\n  const tar = Buffer.concat([\n    tarEntry('package/package.json', Buffer.from(JSON.stringify(manifest, null, 2))),\n    tarEntry('package/index.js', Buffer.from('module.exports = {};\\n')),\n    Buffer.alloc(1024), // tar end-of-archive marker\n  ]);\n  return gzipSync(tar, { level: 9 });\n}\n\n/**\n * Publish straight through the registry HTTP API (same PUT an npm client\n * sends). Used for adapters that cannot publish themselves (eg. deno) so\n * every fixture still comes from the registry under test — never from an\n * external registry.\n */\nexport async function publishViaHttp(\n  ctx: TestContext,\n  pkgName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  const tarball = buildPackageTarball(pkgName, version, dependencies);\n  const { shasum, integrity } = computeDist(tarball);\n  const filename = `${pkgName.replace(/^@[^/]+\\//, '')}-${version}.tgz`;\n  const encodedName = pkgName.startsWith('@') ? pkgName.replaceAll('/', '%2f') : pkgName;\n  const tarballUrl = `${ctx.registryUrl}/${encodedName}/-/${filename}`;\n  const body = {\n    _id: pkgName,\n    name: pkgName,\n    description: 'e2e local package',\n    'dist-tags': { latest: version },\n    versions: {\n      [version]: {\n        _id: `${pkgName}@${version}`,\n        name: pkgName,\n        version,\n        description: 'e2e local package',\n        main: 'index.js',\n        dependencies,\n        license: 'MIT',\n        dist: { tarball: tarballUrl, shasum, integrity },\n      },\n    },\n    _attachments: {\n      [filename]: {\n        content_type: 'application/octet-stream',\n        data: tarball.toString('base64'),\n        length: tarball.length,\n      },\n    },\n  };\n  const response = await fetch(`${ctx.registryUrl}/${encodedName}`, {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${ctx.token}`,\n    },\n    body: JSON.stringify(body),\n  });\n  if (response.status !== 201 && response.status !== 200) {\n    const text = await response.text();\n    throw new Error(`HTTP publish of ${pkgName}@${version} failed: ${response.status} ${text}`);\n  }\n  debug('published %s@%s via HTTP', pkgName, version);\n}\n\n/**\n * Publish a package to the registry under test so later steps (install, ci,\n * audit, info, search…) can consume it without ever touching an external\n * registry — the whole suite must be runnable offline. Uses the package\n * manager when it can publish, the raw HTTP API otherwise (eg. deno).\n */\nexport async function publishLocalPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version = '1.0.0',\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  if (!ctx.adapter.supports.has('publish')) {\n    return publishViaHttp(ctx, pkgName, version, dependencies);\n  }\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n  // yarn modern requires an install first to generate the lockfile\n  if (ctx.adapter.type === 'yarn-modern') {\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published local package %s@%s', pkgName, version);\n}\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,2BAA2B;;AAGpD,SAAS,SAAS,MAAc,SAAyB;CACvD,MAAM,SAAS,OAAO,MAAM,GAAG;CAC/B,OAAO,MAAM,MAAM,GAAG,KAAK,MAAM;CACjC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,aAAa,KAAK,CAAC;CAChC,OAAO,MAAM,QAAQ,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,MAAM,KAAK,EAAE;CACzE,OAAO,MAAM,iBAAiB,KAAK,EAAE;CACrC,OAAO,MAAM,YAAY,KAAK,CAAC;CAC/B,OAAO,MAAM,KAAK,KAAK,CAAC;CACxB,OAAO,MAAM,WAAW,KAAK,CAAC;CAC9B,OAAO,MAAM,MAAM,KAAK,CAAC;CACzB,IAAI,WAAW;CACf,KAAK,MAAM,QAAQ,QACjB,YAAY;CAEd,OAAO,MAAM,SAAS,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI,OAAO,KAAK,CAAC;CAClE,MAAM,UAAU,OAAO,OAAO,MAAO,QAAQ,SAAS,OAAQ,GAAG;CACjE,OAAO,OAAO,OAAO;EAAC;EAAQ;EAAS;CAAO,CAAC;AACjD;;AAGA,SAAgB,oBACd,SACA,SACA,eAAuC,CAAC,GAChC;CACR,MAAM,WAAW;EACf,MAAM;EACN;EACA,aAAa;EACb,MAAM;EACN;EACA,SAAS;CACX;CACA,MAAM,MAAM,OAAO,OAAO;EACxB,SAAS,wBAAwB,OAAO,KAAK,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC,CAAC;EAC/E,SAAS,oBAAoB,OAAO,KAAK,wBAAwB,CAAC;EAClE,OAAO,MAAM,IAAI;CACnB,CAAC;CACD,OAAO,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC;AACnC;;;;;;;AAQA,eAAsB,eACpB,KACA,SACA,UAAU,SACV,eAAuC,CAAC,GACzB;CACf,MAAM,UAAU,oBAAoB,SAAS,SAAS,YAAY;CAClE,MAAM,EAAE,QAAQ,cAAc,YAAY,OAAO;CACjD,MAAM,WAAW,GAAG,QAAQ,QAAQ,aAAa,EAAE,EAAE,GAAG,QAAQ;CAChE,MAAM,cAAc,QAAQ,WAAW,GAAG,IAAI,QAAQ,WAAW,KAAK,KAAK,IAAI;CAC/E,MAAM,aAAa,GAAG,IAAI,YAAY,GAAG,YAAY,KAAK;CAC1D,MAAM,OAAO;EACX,KAAK;EACL,MAAM;EACN,aAAa;EACb,aAAa,EAAE,QAAQ,QAAQ;EAC/B,UAAU,GACP,UAAU;GACT,KAAK,GAAG,QAAQ,GAAG;GACnB,MAAM;GACN;GACA,aAAa;GACb,MAAM;GACN;GACA,SAAS;GACT,MAAM;IAAE,SAAS;IAAY;IAAQ;GAAU;EACjD,EACF;EACA,cAAc,GACX,WAAW;GACV,cAAc;GACd,MAAM,QAAQ,SAAS,QAAQ;GAC/B,QAAQ,QAAQ;EAClB,EACF;CACF;CACA,MAAM,WAAW,MAAM,MAAM,GAAG,IAAI,YAAY,GAAG,eAAe;EAChE,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU,IAAI;EAC/B;EACA,MAAM,KAAK,UAAU,IAAI;CAC3B,CAAC;CACD,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;EACtD,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,QAAQ,WAAW,SAAS,OAAO,GAAG,MAAM;CAC5F;CACA,MAAM,4BAA4B,SAAS,OAAO;AACpD;;;;;;;AAQA,eAAsB,oBACpB,KACA,SACA,UAAU,SACV,eAAuC,CAAC,GACzB;CACf,IAAI,CAAC,IAAI,QAAQ,SAAS,IAAI,SAAS,GACrC,OAAO,eAAe,KAAK,SAAS,SAAS,YAAY;CAE3D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,YACF;CAEA,IAAI,IAAI,QAAQ,SAAS,eACvB,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,WAAW,GAAG,SAAS;CAEvD,MAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,WAAW,GAClB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,WAAW,CAC5C;CACA,MAAM,iCAAiC,SAAS,OAAO;AACzD"}

package/build/esm/utils/registry-client.js

@@ -0,0 +1,53 @@
+import buildDebug from "debug";
+import { ping } from "@verdaccio/registry-cli";
+//#region src/utils/registry-client.ts
+var debug = buildDebug("verdaccio:e2e-cli:registry-client");
+/**
+* Creates a user on the registry and returns the auth token.
+* Uses a unique username per run to avoid 409 conflicts.
+* Works against any running Verdaccio instance with htpasswd auth.
+*/
+async function createUser(registryUrl, user = `e2e-user-${Date.now()}`, password = "e2e-test-password") {
+	debug("creating user %s on %s", user, registryUrl);
+	const url = `${registryUrl}/-/user/org.couchdb.user:${encodeURIComponent(user)}`;
+	const response = await fetch(url, {
+		method: "PUT",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify({
+			name: user,
+			password,
+			_id: `org.couchdb.user:${user}`,
+			type: "user",
+			roles: [],
+			date: (/* @__PURE__ */ new Date()).toISOString()
+		})
+	});
+	const body = await response.json();
+	if (response.status === 201 || response.status === 200 || response.status === 409) {
+		const token = body.token;
+		if (token) {
+			debug("user %s authenticated, token obtained", user);
+			return {
+				token,
+				user
+			};
+		}
+	}
+	throw new Error(`Failed to create/login user "${user}" on ${registryUrl}: ${response.status} ${JSON.stringify(body)}`);
+}
+/**
+* Ping the registry to check it's alive.
+* Uses @verdaccio/registry-cli ping.
+*/
+async function pingRegistry(registryUrl) {
+	debug("pinging %s", registryUrl);
+	try {
+		return (await ping(registryUrl)).ok;
+	} catch {
+		return false;
+	}
+}
+//#endregion
+export { createUser, pingRegistry };
+
+//# sourceMappingURL=registry-client.js.map

package/build/esm/utils/registry-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-client.js","names":[],"sources":["../../../src/utils/registry-client.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { ping } from '@verdaccio/registry-cli';\n\nconst debug = buildDebug('verdaccio:e2e-cli:registry-client');\n\nexport type RegistryAuth = {\n  token: string;\n  user: string;\n};\n\n/**\n * Creates a user on the registry and returns the auth token.\n * Uses a unique username per run to avoid 409 conflicts.\n * Works against any running Verdaccio instance with htpasswd auth.\n */\nexport async function createUser(\n  registryUrl: string,\n  user = `e2e-user-${Date.now()}`,\n  password = 'e2e-test-password'\n): Promise<RegistryAuth> {\n  debug('creating user %s on %s', user, registryUrl);\n  const url = `${registryUrl}/-/user/org.couchdb.user:${encodeURIComponent(user)}`;\n  const response = await fetch(url, {\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify({\n      name: user,\n      password,\n      _id: `org.couchdb.user:${user}`,\n      type: 'user',\n      roles: [],\n      date: new Date().toISOString(),\n    }),\n  });\n\n  const body = (await response.json()) as any;\n\n  if (response.status === 201 || response.status === 200 || response.status === 409) {\n    const token = body.token;\n    if (token) {\n      debug('user %s authenticated, token obtained', user);\n      return { token, user };\n    }\n  }\n\n  throw new Error(\n    `Failed to create/login user \"${user}\" on ${registryUrl}: ${response.status} ${JSON.stringify(body)}`\n  );\n}\n\n/**\n * Ping the registry to check it's alive.\n * Uses @verdaccio/registry-cli ping.\n */\nexport async function pingRegistry(registryUrl: string): Promise<boolean> {\n  debug('pinging %s', registryUrl);\n  try {\n    const result = await ping(registryUrl);\n    return result.ok;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;AAIA,IAAM,QAAQ,WAAW,mCAAmC;;;;;;AAY5D,eAAsB,WACpB,aACA,OAAO,YAAY,KAAK,IAAI,KAC5B,WAAW,qBACY;CACvB,MAAM,0BAA0B,MAAM,WAAW;CACjD,MAAM,MAAM,GAAG,YAAY,2BAA2B,mBAAmB,IAAI;CAC7E,MAAM,WAAW,MAAM,MAAM,KAAK;EAChC,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,MAAM,KAAK,UAAU;GACnB,MAAM;GACN;GACA,KAAK,oBAAoB;GACzB,MAAM;GACN,OAAO,CAAC;GACR,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EAC/B,CAAC;CACH,CAAC;CAED,MAAM,OAAQ,MAAM,SAAS,KAAK;CAElC,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;EACjF,MAAM,QAAQ,KAAK;EACnB,IAAI,OAAO;GACT,MAAM,yCAAyC,IAAI;GACnD,OAAO;IAAE;IAAO;GAAK;EACvB;CACF;CAEA,MAAM,IAAI,MACR,gCAAgC,KAAK,OAAO,YAAY,IAAI,SAAS,OAAO,GAAG,KAAK,UAAU,IAAI,GACpG;AACF;;;;;AAMA,eAAsB,aAAa,aAAuC;CACxE,MAAM,cAAc,WAAW;CAC/B,IAAI;EAEF,QAAO,MADc,KAAK,WAAW,EAAA,CACvB;CAChB,QAAQ;EACN,OAAO;CACT;AACF"}

package/build/index.d.ts

@@ -1,15 +1,6 @@
-export type ExecOutput = { stdout: string; stderr: string };
-export type PackageManagerAdapter = unknown;
-export type TestDefinition = unknown;
-export type TestContext = unknown;
-export type CliOptions = unknown;
-export const allTests: TestDefinition[];
-export const allScenarios: TestDefinition[];
-export function runAll(...args: unknown[]): never;
-export function runSuite(...args: unknown[]): never;
-export function createNpmAdapter(...args: unknown[]): never;
-export function createPnpmAdapter(...args: unknown[]): never;
-export function createYarnClassicAdapter(...args: unknown[]): never;
-export function createYarnModernAdapter(...args: unknown[]): never;
-export function createBunAdapter(...args: unknown[]): never;
-export function createDenoAdapter(...args: unknown[]): never;
+export declare function main(argv?: string[]): Promise<void>;
+export { allTests } from './tests';
+export { allScenarios } from './scenarios';
+export { createBunAdapter, createDenoAdapter, createNpmAdapter, createPnpmAdapter, createYarnModernAdapter, } from './adapters';
+export { runAll, runSuite } from './runner';
+export type { PackageManagerAdapter, TestDefinition, TestContext, CliOptions } from './types';

package/build/reporter.d.ts

@@ -0,0 +1,7 @@
+import { SuiteResult, TestResult } from './types';
+export declare function reportTestStart(adapterName: string, testName: string): void;
+export declare function reportTestResult(result: TestResult, hasSubTests?: boolean): void;
+export declare function reportSuiteStart(adapterName: string): void;
+export declare function reportSubTestResult(label: string, passed: boolean, duration?: number): void;
+export declare function reportSkipped(testName: string): void;
+export declare function reportSummary(results: SuiteResult[]): void;

package/build/runner.d.ts

@@ -0,0 +1,13 @@
+import { PackageManagerAdapter, SuiteResult, TestDefinition } from './types';
+export declare function runSuite(adapter: PackageManagerAdapter, tests: TestDefinition[], registryUrl: string, token: string, options: {
+    timeout: number;
+    testFilter?: string[];
+}): Promise<SuiteResult>;
+export declare function runAll(adapters: PackageManagerAdapter[], tests: TestDefinition[], registryUrl: string, token: string, options: {
+    timeout: number;
+    concurrency: number;
+    testFilter?: string[];
+}): Promise<{
+    results: SuiteResult[];
+    exitCode: number;
+}>;