@verdaccio/e2e-ui 2.1.1 → 2.3.0

package/README.md

@@ -0,0 +1,134 @@
+# @verdaccio/e2e-ui
+
+Reusable Cypress test suites for the Verdaccio web UI. Targets Verdaccio.
+
+## Install
+
+```bash
+pnpm add -D @verdaccio/e2e-ui cypress
+```
+
+## Wire up
+
+`cypress.config.ts`:
+
+```ts
+import { defineConfig } from 'cypress';
+import { setupVerdaccioTasks } from '@verdaccio/e2e-ui';
+
+const registryUrl = process.env.VERDACCIO_URL || 'http://localhost:4873';
+
+export default defineConfig({
+  e2e: {
+    baseUrl: registryUrl,
+    supportFile: 'cypress/support/e2e.ts',
+    specPattern: 'cypress/e2e/**/*.cy.ts',
+    setupNodeEvents(on) {
+      setupVerdaccioTasks(on, { registryUrl });
+    },
+  },
+  env: { VERDACCIO_URL: registryUrl },
+});
+```
+
+`cypress/support/e2e.ts`:
+
+```ts
+import '@verdaccio/e2e-ui/commands';
+```
+
+Spec file (one per suite, or use `registerAllTests`):
+
+```ts
+import { createRegistryConfig, homeTests } from '@verdaccio/e2e-ui';
+
+const config = createRegistryConfig({
+  registryUrl: Cypress.env('VERDACCIO_URL'),
+});
+
+homeTests(config);
+```
+
+## Available suites
+
+| Export | Covers |
+|---|---|
+| `homeTests` | Empty-registry landing page, help card, 404 |
+| `signinTests` | Login dialog, greeting, logout |
+| `layoutTests` | `/-/static/ui-options.js` health, header chrome, footer |
+| `searchTests` | Search input, query fires, empty state, clear |
+| `settingsTests` | Settings dialog, language picker, language switch |
+| `publishTests` | Publishes via `cy.task`, asserts readme / sidebar / tabs |
+
+## Configuration
+
+```ts
+createRegistryConfig({
+  registryUrl: 'http://localhost:4873',
+  credentials: { user: 'test', password: 'test' },    // optional
+  testIds: { header: { settingsTooltip: 'my-btn' } }, // optional per-field override
+  selectors: { loginDialog: { submitButton: '#go' } },// optional per-field override
+});
+```
+
+Every data-testid referenced by the suites is configurable. See
+[`src/testIds.ts`](./src/testIds.ts) for the full `TestIds` + `Selectors`
+shapes and defaults. Overrides are merged per section — unspecified fields
+inherit from `DEFAULT_TEST_IDS` / `DEFAULT_SELECTORS`.
+
+## `publishPackage` task
+
+Publishes a throwaway package so downstream specs have something to assert on.
+
+```ts
+cy.task('publishPackage', {
+  pkgName: '@verdaccio/pkg-scoped',
+  version: '1.0.0',
+  dependencies: { debug: '4.0.0' },
+  unique: true, // appends -t<timestamp> so reruns don't collide on 403
+}).then((result) => {
+  // result: { pkgName, version, tempFolder, stdout, stderr, exitCode }
+});
+
+// in after():
+cy.task('cleanupPublished', tempFolder);
+```
+
+Under the hood: creates a throwaway user via `PUT /-/user/...`, scaffolds a
+temp project with an `.npmrc` carrying the legacy auth token, spawns
+`npm publish --tag latest`.
+
+## Verdaccio config requirements
+
+```yaml
+web:
+  enable: true
+  login: true
+  showSettings: true  # required by settingsTests
+
+userRateLimit:
+  windowMs: 1000
+  max: 10000          # default (1000 / 15min) is too tight for a full suite run
+
+packages:
+  '**':
+    access: $all
+    publish: $anonymous $authenticated
+    unpublish: $anonymous $authenticated
+    proxy: npmjs
+```
+
+Restart Verdaccio after changing these — it reads them at startup.
+
+## Custom commands
+
+- `cy.getByTestId(selector)` — shortcut for `cy.get('[data-testid=<selector>]')`
+- `cy.login(user, password, selectors?)` — fills + submits the login dialog;
+  pass `selectors` to override form field IDs for non-default builds
+
+Task calls are strongly typed — `cy.task('publishPackage', …)` returns
+`Chainable<PublishPackageResult>`, unknown task names fail at compile time.
+
+## License
+
+MIT

package/build/cjs/commands/index.cjs

@@ -1,15 +1,31 @@
 //#region src/commands/index.ts
+/**
+* Default login form selectors. Kept in sync with `DEFAULT_SELECTORS`
+* in ../testIds.ts — duplicating them here (as plain constants) lets
+* `cy.login` call sites that don't pass an explicit selectors object
+* still work without importing anything.
+*/
+var DEFAULT_LOGIN_SELECTORS = {
+	loginButton: "header--button-login",
+	usernameInput: "#login--dialog-username",
+	passwordInput: "#login--dialog-password",
+	submitButton: "#login--dialog-button-submit"
+};
 Cypress.Commands.add("getByTestId", (selector, ...args) => {
 	return cy.get(`[data-testid=${selector}]`, ...args);
 });
-Cypress.Commands.add("login", (user, password) => {
-	cy.getByTestId("header--button-login").click();
+Cypress.Commands.add("login", (user, password, selectors = {}) => {
+	const loginButton = selectors.loginButton ?? DEFAULT_LOGIN_SELECTORS.loginButton;
+	const usernameInput = selectors.usernameInput ?? DEFAULT_LOGIN_SELECTORS.usernameInput;
+	const passwordInput = selectors.passwordInput ?? DEFAULT_LOGIN_SELECTORS.passwordInput;
+	const submitButton = selectors.submitButton ?? DEFAULT_LOGIN_SELECTORS.submitButton;
+	cy.getByTestId(loginButton).click();
 	cy.wait(300);
-	cy.get("#login--dialog-username").type(user);
+	cy.get(usernameInput).type(user);
 	cy.wait(200);
-	cy.get("#login--dialog-password").type(password);
+	cy.get(passwordInput).type(password);
 	cy.wait(500);
-	cy.get("#login--dialog-button-submit").click();
+	cy.get(submitButton).click();
 });
 //#endregion
 

package/build/cjs/commands/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/commands/index.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\n\ndeclare global {\n  namespace Cypress {\n    interface Chainable {\n      /**\n       * Find element by data-testid attribute\n       */\n      getByTestId(selector: string, ...args: any[]): Chainable<JQuery<HTMLElement>>;\n      /**\n       * Login to Verdaccio UI\n       */\n      login(user: string, password: string): Chainable<void>;\n    }\n  }\n}\n\nCypress.Commands.add('getByTestId', (selector: string, ...args: any[]) => {\n  return cy.get(`[data-testid=${selector}]`, ...args);\n});\n\nCypress.Commands.add('login', (user: string, password: string) => {\n  cy.getByTestId('header--button-login').click();\n  cy.wait(300);\n  cy.get('#login--dialog-username').type(user);\n  cy.wait(200);\n  cy.get('#login--dialog-password').type(password);\n  cy.wait(500);\n  cy.get('#login--dialog-button-submit').click();\n});\n\nexport {};\n"],"mappings":";AAiBA,QAAQ,SAAS,IAAI,gBAAgB,UAAkB,GAAG,SAAgB;AACxE,QAAO,GAAG,IAAI,gBAAgB,SAAS,IAAI,GAAG,KAAK;EACnD;AAEF,QAAQ,SAAS,IAAI,UAAU,MAAc,aAAqB;AAChE,IAAG,YAAY,uBAAuB,CAAC,OAAO;AAC9C,IAAG,KAAK,IAAI;AACZ,IAAG,IAAI,0BAA0B,CAAC,KAAK,KAAK;AAC5C,IAAG,KAAK,IAAI;AACZ,IAAG,IAAI,0BAA0B,CAAC,KAAK,SAAS;AAChD,IAAG,KAAK,IAAI;AACZ,IAAG,IAAI,+BAA+B,CAAC,OAAO;EAC9C"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/commands/index.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\n\n/**\n * Default login form selectors. Kept in sync with `DEFAULT_SELECTORS`\n * in ../testIds.ts — duplicating them here (as plain constants) lets\n * `cy.login` call sites that don't pass an explicit selectors object\n * still work without importing anything.\n */\nconst DEFAULT_LOGIN_SELECTORS = {\n  loginButton: 'header--button-login',\n  usernameInput: '#login--dialog-username',\n  passwordInput: '#login--dialog-password',\n  submitButton: '#login--dialog-button-submit',\n};\n\nexport interface LoginSelectors {\n  /** data-testid of the header \"Login\" button that opens the dialog. */\n  loginButton?: string;\n  /** CSS selector for the username input. */\n  usernameInput?: string;\n  /** CSS selector for the password input. */\n  passwordInput?: string;\n  /** CSS selector for the submit button. */\n  submitButton?: string;\n}\n\ndeclare global {\n  namespace Cypress {\n    interface Chainable {\n      /**\n       * Find element by data-testid attribute.\n       */\n      getByTestId(selector: string, ...args: any[]): Chainable<JQuery<HTMLElement>>;\n      /**\n       * Login to Verdaccio UI. Selectors default to Verdaccio 6.x\n       * conventions; pass `selectors` to override any subset for\n       * non-default builds.\n       */\n      login(\n        user: string,\n        password: string,\n        selectors?: LoginSelectors\n      ): Chainable<void>;\n    }\n  }\n}\n\nCypress.Commands.add('getByTestId', (selector: string, ...args: any[]) => {\n  return cy.get(`[data-testid=${selector}]`, ...args);\n});\n\nCypress.Commands.add(\n  'login',\n  (user: string, password: string, selectors: LoginSelectors = {}) => {\n    const loginButton = selectors.loginButton ?? DEFAULT_LOGIN_SELECTORS.loginButton;\n    const usernameInput =\n      selectors.usernameInput ?? DEFAULT_LOGIN_SELECTORS.usernameInput;\n    const passwordInput =\n      selectors.passwordInput ?? DEFAULT_LOGIN_SELECTORS.passwordInput;\n    const submitButton =\n      selectors.submitButton ?? DEFAULT_LOGIN_SELECTORS.submitButton;\n\n    cy.getByTestId(loginButton).click();\n    cy.wait(300);\n    cy.get(usernameInput).type(user);\n    cy.wait(200);\n    cy.get(passwordInput).type(password);\n    cy.wait(500);\n    cy.get(submitButton).click();\n  }\n);\n\nexport {};\n"],"mappings":";;;;;;;AAQA,IAAM,0BAA0B;CAC9B,aAAa;CACb,eAAe;CACf,eAAe;CACf,cAAc;CACf;AAkCD,QAAQ,SAAS,IAAI,gBAAgB,UAAkB,GAAG,SAAgB;AACxE,QAAO,GAAG,IAAI,gBAAgB,SAAS,IAAI,GAAG,KAAK;EACnD;AAEF,QAAQ,SAAS,IACf,UACC,MAAc,UAAkB,YAA4B,EAAE,KAAK;CAClE,MAAM,cAAc,UAAU,eAAe,wBAAwB;CACrE,MAAM,gBACJ,UAAU,iBAAiB,wBAAwB;CACrD,MAAM,gBACJ,UAAU,iBAAiB,wBAAwB;CACrD,MAAM,eACJ,UAAU,gBAAgB,wBAAwB;AAEpD,IAAG,YAAY,YAAY,CAAC,OAAO;AACnC,IAAG,KAAK,IAAI;AACZ,IAAG,IAAI,cAAc,CAAC,KAAK,KAAK;AAChC,IAAG,KAAK,IAAI;AACZ,IAAG,IAAI,cAAc,CAAC,KAAK,SAAS;AACpC,IAAG,KAAK,IAAI;AACZ,IAAG,IAAI,aAAa,CAAC,OAAO;EAE/B"}

package/build/cjs/features.cjs

@@ -0,0 +1,64 @@
+//#region src/features.ts
+/** Defaults: all flags on. */
+var DEFAULT_FEATURES = {
+	search: {
+		resultsDropdown: true,
+		resultClickNavigation: true
+	},
+	home: { publishedPackageRendering: true },
+	settings: { languageSwitcher: true },
+	signin: { validationTests: true },
+	layout: { themeSwitch: true },
+	publish: {
+		downloadTarball: true,
+		rawViewer: true
+	}
+};
+/**
+* Merge user overrides into the default feature flags. Per-section,
+* one level deep — matching the style of `mergeTestIds`.
+*/
+function mergeFeatures(defaults, overrides) {
+	if (!overrides) return defaults;
+	return {
+		search: {
+			...defaults.search,
+			...overrides.search
+		},
+		home: {
+			...defaults.home,
+			...overrides.home
+		},
+		settings: {
+			...defaults.settings,
+			...overrides.settings
+		},
+		signin: {
+			...defaults.signin,
+			...overrides.signin
+		},
+		layout: {
+			...defaults.layout,
+			...overrides.layout
+		},
+		publish: {
+			...defaults.publish,
+			...overrides.publish
+		}
+	};
+}
+/**
+* Helper that returns either `it` or `it.skip` depending on an
+* enabled flag. Usage:
+*
+*   maybeIt(features.search.resultsDropdown)('…', () => { … });
+*/
+function maybeIt(enabled) {
+	return enabled ? it : it.skip;
+}
+//#endregion
+exports.DEFAULT_FEATURES = DEFAULT_FEATURES;
+exports.maybeIt = maybeIt;
+exports.mergeFeatures = mergeFeatures;
+
+//# sourceMappingURL=features.cjs.map

package/build/cjs/features.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.cjs","names":[],"sources":["../../src/features.ts"],"sourcesContent":["/**\n * Per-test feature flags for enabling/disabling individual test cases\n * in the e2e-ui suites.\n *\n * The Verdaccio UI behaves differently across branches — search result\n * payload shape differs between the `/-/v1/search` and\n * `/-/verdaccio/data/search/*` endpoints, the language picker was\n * added in a specific minor, etc. Rather than forking the suite per\n * branch, consumers can disable individual tests via\n * `createRegistryConfig({ features: { … } })`.\n *\n * Every flag defaults to `true` (test runs). Override to `false` to\n * convert the test into a Mocha `it.skip` call — the suite still\n * reports the test but marks it as pending.\n */\nexport interface Features {\n  search: {\n    /**\n     * Whether to run the \"results dropdown renders a matching\n     * package\" test. Disable on builds where the search result shape\n     * or the Autocomplete rendering differs from the default assumption.\n     */\n    resultsDropdown: boolean;\n    /**\n     * Whether to run the \"clicking a result navigates to detail\" test.\n     * Depends on the Autocomplete `onSelectItem` → router wiring.\n     */\n    resultClickNavigation: boolean;\n  };\n  home: {\n    /**\n     * Whether to run the `with a published package` sub-block inside\n     * `homeTests` (publishes a throwaway package and asserts it\n     * renders in the package list).\n     */\n    publishedPackageRendering: boolean;\n  };\n  settings: {\n    /**\n     * Whether to run the \"change language via card click\" test.\n     * Depends on the `LanguageSwitch` component layout and its\n     * translation sentinels (\"Translations\", \"German\"). Skip on\n     * builds that lag behind the upstream translation file.\n     */\n    languageSwitcher: boolean;\n  };\n  signin: {\n    /**\n     * Whether to run the three validation tests (disabled submit\n     * button, invalid credentials error banner). Depends on the\n     * current yup schema and the hard-coded \"Invalid username or\n     * password\" error string.\n     */\n    validationTests: boolean;\n  };\n  layout: {\n    /**\n     * Whether to run the dark/light theme switch test. Depends on\n     * `web.showThemeSwitch` (defaults to true in ui-theme) and the\n     * `header--button--light` / `header--button--dark` testids.\n     */\n    themeSwitch: boolean;\n  };\n  publish: {\n    /**\n     * Whether to run the \"tarball download button fires a GET\" test.\n     * Depends on `web.showDownloadTarball` (defaults to true) and\n     * the published package manifest having a valid `dist.tarball`.\n     */\n    downloadTarball: boolean;\n    /**\n     * Whether to run the \"raw viewer dialog opens + closes\" test.\n     * Depends on `web.showRaw` (defaults to true).\n     */\n    rawViewer: boolean;\n  };\n}\n\n/** Defaults: all flags on. */\nexport const DEFAULT_FEATURES: Features = {\n  search: {\n    resultsDropdown: true,\n    resultClickNavigation: true,\n  },\n  home: {\n    publishedPackageRendering: true,\n  },\n  settings: {\n    languageSwitcher: true,\n  },\n  signin: {\n    validationTests: true,\n  },\n  layout: {\n    themeSwitch: true,\n  },\n  publish: {\n    downloadTarball: true,\n    rawViewer: true,\n  },\n};\n\nimport type { DeepPartial } from './testIds';\n\n/**\n * Merge user overrides into the default feature flags. Per-section,\n * one level deep — matching the style of `mergeTestIds`.\n */\nexport function mergeFeatures(\n  defaults: Features,\n  overrides?: DeepPartial<Features>\n): Features {\n  if (!overrides) return defaults;\n  return {\n    search: { ...defaults.search, ...overrides.search },\n    home: { ...defaults.home, ...overrides.home },\n    settings: { ...defaults.settings, ...overrides.settings },\n    signin: { ...defaults.signin, ...overrides.signin },\n    layout: { ...defaults.layout, ...overrides.layout },\n    publish: { ...defaults.publish, ...overrides.publish },\n  };\n}\n\n/**\n * Helper that returns either `it` or `it.skip` depending on an\n * enabled flag. Usage:\n *\n *   maybeIt(features.search.resultsDropdown)('…', () => { … });\n */\nexport function maybeIt(enabled: boolean): Mocha.TestFunction | Mocha.PendingTestFunction {\n  return enabled ? it : it.skip;\n}\n"],"mappings":";;AA+EA,IAAa,mBAA6B;CACxC,QAAQ;EACN,iBAAiB;EACjB,uBAAuB;EACxB;CACD,MAAM,EACJ,2BAA2B,MAC5B;CACD,UAAU,EACR,kBAAkB,MACnB;CACD,QAAQ,EACN,iBAAiB,MAClB;CACD,QAAQ,EACN,aAAa,MACd;CACD,SAAS;EACP,iBAAiB;EACjB,WAAW;EACZ;CACF;;;;;AAQD,SAAgB,cACd,UACA,WACU;AACV,KAAI,CAAC,UAAW,QAAO;AACvB,QAAO;EACL,QAAQ;GAAE,GAAG,SAAS;GAAQ,GAAG,UAAU;GAAQ;EACnD,MAAM;GAAE,GAAG,SAAS;GAAM,GAAG,UAAU;GAAM;EAC7C,UAAU;GAAE,GAAG,SAAS;GAAU,GAAG,UAAU;GAAU;EACzD,QAAQ;GAAE,GAAG,SAAS;GAAQ,GAAG,UAAU;GAAQ;EACnD,QAAQ;GAAE,GAAG,SAAS;GAAQ,GAAG,UAAU;GAAQ;EACnD,SAAS;GAAE,GAAG,SAAS;GAAS,GAAG,UAAU;GAAS;EACvD;;;;;;;;AASH,SAAgB,QAAQ,SAAkE;AACxF,QAAO,UAAU,KAAK,GAAG"}

package/build/cjs/index.cjs

@@ -1,10 +1,27 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_publish = require("./tasks/publish.cjs");
+const require_features = require("./features.cjs");
+const require_testIds = require("./testIds.cjs");
 const require_home = require("./tests/home.cjs");
 const require_signin = require("./tests/signin.cjs");
-const require_publish = require("./tests/publish.cjs");
+const require_publish$1 = require("./tests/publish.cjs");
+const require_search = require("./tests/search.cjs");
+const require_settings = require("./tests/settings.cjs");
+const require_layout = require("./tests/layout.cjs");
 //#region src/index.ts
 /**
 * Build a full RegistryConfig from user-provided options with defaults.
+*
+* `testIds` and `selectors` are deep-merged per section with the
+* defaults in `./testIds`. Consumers targeting a non-default Verdaccio
+* build can override just the fields that drifted:
+*
+*   createRegistryConfig({
+*     registryUrl: 'http://localhost:4873',
+*     testIds: {
+*       header: { settingsTooltip: 'my-new-settings-btn' },
+*     },
+*   });
 */
 function createRegistryConfig(options) {
 	const url = new URL(options.registryUrl);
@@ -15,7 +32,10 @@ function createRegistryConfig(options) {
 			user: "test",
 			password: "test"
 		},
-		title: options.title ?? "Verdaccio"
+		title: options.title ?? "Verdaccio",
+		testIds: require_testIds.mergeTestIds(require_testIds.DEFAULT_TEST_IDS, options.testIds),
+		selectors: require_testIds.mergeSelectors(require_testIds.DEFAULT_SELECTORS, options.selectors),
+		features: require_features.mergeFeatures(require_features.DEFAULT_FEATURES, options.features)
 	};
 }
 /**
@@ -34,12 +54,38 @@ function createRegistryConfig(options) {
 */
 function setupVerdaccioTasks(on, options) {
 	const config = createRegistryConfig(options);
-	on("task", { registry() {
-		return {
-			registryUrl: config.registryUrl,
-			port: config.port
-		};
-	} });
+	on("task", {
+		registry() {
+			return {
+				registryUrl: config.registryUrl,
+				port: config.port
+			};
+		},
+		async publishPackage(input) {
+			return require_publish.publishPackage({
+				registryUrl: input.registryUrl ?? config.registryUrl,
+				credentials: input.credentials ?? config.credentials,
+				pkgName: input.pkgName,
+				version: input.version,
+				dependencies: input.dependencies,
+				devDependencies: input.devDependencies,
+				unique: input.unique
+			});
+		},
+		async cleanupPublished(tempFolder) {
+			await require_publish.cleanupPublished(tempFolder);
+			return null;
+		},
+		async unpublishPackage(input) {
+			return require_publish.unpublishPackage(typeof input === "string" ? {
+				pkgName: input,
+				registryUrl: config.registryUrl
+			} : {
+				...input,
+				registryUrl: input.registryUrl ?? config.registryUrl
+			});
+		}
+	});
 }
 /**
 * Register all Verdaccio UI tests.
@@ -60,14 +106,27 @@ function setupVerdaccioTasks(on, options) {
 function registerAllTests(config) {
 	require_home.homeTests(config);
 	require_signin.signinTests(config);
-	require_publish.publishTests(config);
+	require_layout.layoutTests(config);
+	require_search.searchTests(config);
+	require_settings.settingsTests(config);
+	require_publish$1.publishTests(config);
 }
 //#endregion
+exports.DEFAULT_FEATURES = require_features.DEFAULT_FEATURES;
+exports.DEFAULT_SELECTORS = require_testIds.DEFAULT_SELECTORS;
+exports.DEFAULT_TEST_IDS = require_testIds.DEFAULT_TEST_IDS;
+exports.cleanupPublished = require_publish.cleanupPublished;
 exports.createRegistryConfig = createRegistryConfig;
 exports.homeTests = require_home.homeTests;
-exports.publishTests = require_publish.publishTests;
+exports.layoutTests = require_layout.layoutTests;
+exports.maybeIt = require_features.maybeIt;
+exports.publishPackage = require_publish.publishPackage;
+exports.publishTests = require_publish$1.publishTests;
 exports.registerAllTests = registerAllTests;
+exports.searchTests = require_search.searchTests;
+exports.settingsTests = require_settings.settingsTests;
 exports.setupVerdaccioTasks = setupVerdaccioTasks;
 exports.signinTests = require_signin.signinTests;
+exports.unpublishPackage = require_publish.unpublishPackage;
 
 //# sourceMappingURL=index.cjs.map

package/build/cjs/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":[],"sources":["../../src/index.ts"],"sourcesContent":["import { RegistryConfig, VerdaccioUiOptions } from './types';\n\nexport type { RegistryConfig, VerdaccioUiOptions } from './types';\nexport { homeTests, signinTests, publishTests } from './tests';\n\n/**\n * Build a full RegistryConfig from user-provided options with defaults.\n */\nexport function createRegistryConfig(options: VerdaccioUiOptions): RegistryConfig {\n  const url = new URL(options.registryUrl);\n  return {\n    registryUrl: options.registryUrl,\n    port: options.port ?? (parseInt(url.port, 10) || 4873),\n    credentials: options.credentials ?? { user: 'test', password: 'test' },\n    title: options.title ?? 'Verdaccio',\n  };\n}\n\n/**\n * Register Verdaccio Cypress tasks in setupNodeEvents.\n *\n * Usage in cypress.config.ts:\n *   import { setupVerdaccioTasks } from '@verdaccio/e2e-ui';\n *\n *   export default defineConfig({\n *     e2e: {\n *       setupNodeEvents(on) {\n *         setupVerdaccioTasks(on, { registryUrl: 'http://localhost:4873' });\n *       },\n *     },\n *   });\n */\nexport function setupVerdaccioTasks(\n  on: Cypress.PluginEvents,\n  options: VerdaccioUiOptions\n): void {\n  const config = createRegistryConfig(options);\n\n  on('task', {\n    registry() {\n      return {\n        registryUrl: config.registryUrl,\n        port: config.port,\n      };\n    },\n  });\n}\n\n/**\n * Register all Verdaccio UI tests.\n *\n * Usage in a spec file:\n *   import { registerAllTests, createRegistryConfig } from '@verdaccio/e2e-ui';\n *\n *   const config = createRegistryConfig({ registryUrl: 'http://localhost:4873' });\n *   registerAllTests(config);\n *\n * Or pick individual suites:\n *   import { homeTests, signinTests } from '@verdaccio/e2e-ui';\n *\n *   const config = createRegistryConfig({ registryUrl: 'http://localhost:4873' });\n *   homeTests(config);\n *   signinTests(config);\n */\nexport function registerAllTests(config: RegistryConfig): void {\n  homeTests(config);\n  signinTests(config);\n  publishTests(config);\n}\n\n// Re-export for convenience\nimport { homeTests, signinTests, publishTests } from './tests';\n"],"mappings":";;;;;;;;AAQA,SAAgB,qBAAqB,SAA6C;CAChF,MAAM,MAAM,IAAI,IAAI,QAAQ,YAAY;AACxC,QAAO;EACL,aAAa,QAAQ;EACrB,MAAM,QAAQ,SAAS,SAAS,IAAI,MAAM,GAAG,IAAI;EACjD,aAAa,QAAQ,eAAe;GAAE,MAAM;GAAQ,UAAU;GAAQ;EACtE,OAAO,QAAQ,SAAS;EACzB;;;;;;;;;;;;;;;;AAiBH,SAAgB,oBACd,IACA,SACM;CACN,MAAM,SAAS,qBAAqB,QAAQ;AAE5C,IAAG,QAAQ,EACT,WAAW;AACT,SAAO;GACL,aAAa,OAAO;GACpB,MAAM,OAAO;GACd;IAEJ,CAAC;;;;;;;;;;;;;;;;;;AAmBJ,SAAgB,iBAAiB,QAA8B;AAC7D,cAAA,UAAU,OAAO;AACjB,gBAAA,YAAY,OAAO;AACnB,iBAAA,aAAa,OAAO"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../src/index.ts"],"sourcesContent":["import {\n  cleanupPublished,\n  publishPackage,\n  PublishPackageResult,\n  PublishPackageTaskInput,\n  unpublishPackage,\n  UnpublishPackageInput,\n  UnpublishPackageResult,\n} from './tasks';\nimport { DEFAULT_FEATURES, mergeFeatures } from './features';\nimport {\n  DEFAULT_SELECTORS,\n  DEFAULT_TEST_IDS,\n  mergeSelectors,\n  mergeTestIds,\n} from './testIds';\nimport { RegistryConfig, RegistryTaskResult, VerdaccioUiOptions } from './types';\n\nexport type {\n  RegistryConfig,\n  RegistryTaskResult,\n  VerdaccioUiOptions,\n} from './types';\nexport type {\n  PublishPackageInput,\n  PublishPackageTaskInput,\n  PublishPackageResult,\n  UnpublishPackageInput,\n  UnpublishPackageResult,\n} from './tasks';\nexport type { DeepPartial, Selectors, TestIds } from './testIds';\nexport type { Features } from './features';\nexport { DEFAULT_SELECTORS, DEFAULT_TEST_IDS } from './testIds';\nexport { DEFAULT_FEATURES, maybeIt } from './features';\nexport { publishPackage, cleanupPublished, unpublishPackage } from './tasks';\nexport {\n  homeTests,\n  signinTests,\n  publishTests,\n  searchTests,\n  settingsTests,\n  layoutTests,\n} from './tests';\n\n/**\n * Build a full RegistryConfig from user-provided options with defaults.\n *\n * `testIds` and `selectors` are deep-merged per section with the\n * defaults in `./testIds`. Consumers targeting a non-default Verdaccio\n * build can override just the fields that drifted:\n *\n *   createRegistryConfig({\n *     registryUrl: 'http://localhost:4873',\n *     testIds: {\n *       header: { settingsTooltip: 'my-new-settings-btn' },\n *     },\n *   });\n */\nexport function createRegistryConfig(options: VerdaccioUiOptions): RegistryConfig {\n  const url = new URL(options.registryUrl);\n  return {\n    registryUrl: options.registryUrl,\n    port: options.port ?? (parseInt(url.port, 10) || 4873),\n    credentials: options.credentials ?? { user: 'test', password: 'test' },\n    title: options.title ?? 'Verdaccio',\n    testIds: mergeTestIds(DEFAULT_TEST_IDS, options.testIds),\n    selectors: mergeSelectors(DEFAULT_SELECTORS, options.selectors),\n    features: mergeFeatures(DEFAULT_FEATURES, options.features),\n  };\n}\n\n/**\n * Register Verdaccio Cypress tasks in setupNodeEvents.\n *\n * Usage in cypress.config.ts:\n *   import { setupVerdaccioTasks } from '@verdaccio/e2e-ui';\n *\n *   export default defineConfig({\n *     e2e: {\n *       setupNodeEvents(on) {\n *         setupVerdaccioTasks(on, { registryUrl: 'http://localhost:4873' });\n *       },\n *     },\n *   });\n */\nexport function setupVerdaccioTasks(\n  on: Cypress.PluginEvents,\n  options: VerdaccioUiOptions\n): void {\n  const config = createRegistryConfig(options);\n\n  on('task', {\n    registry(): RegistryTaskResult {\n      return {\n        registryUrl: config.registryUrl,\n        port: config.port,\n      };\n    },\n    /**\n     * Publish a throwaway package to the registry.\n     *\n     * Usage from a Cypress spec:\n     *\n     *   cy.task('publishPackage', { pkgName: '@verdaccio/pkg-scoped' });\n     *\n     * Any field not provided falls back to the values configured here\n     * (registryUrl, credentials). The task returns a PublishPackageResult.\n     */\n    async publishPackage(\n      input: PublishPackageTaskInput\n    ): Promise<PublishPackageResult> {\n      return publishPackage({\n        registryUrl: input.registryUrl ?? config.registryUrl,\n        credentials: input.credentials ?? config.credentials,\n        pkgName: input.pkgName,\n        version: input.version,\n        dependencies: input.dependencies,\n        devDependencies: input.devDependencies,\n        unique: input.unique,\n      });\n    },\n    /**\n     * Remove a temp project folder returned by a previous publishPackage\n     * call. Returns null (Cypress tasks must return something serializable).\n     *\n     *   cy.task('cleanupPublished', result.tempFolder);\n     */\n    async cleanupPublished(tempFolder: string): Promise<null> {\n      await cleanupPublished(tempFolder);\n      return null;\n    },\n    /**\n     * Unpublish a package from the registry so the next test starts\n     * from a clean slate. Accepts either a package name or a full input\n     * object (to reuse a prior tempFolder's token).\n     *\n     *   cy.task('unpublishPackage', '@verdaccio/pkg-scoped');\n     *   cy.task('unpublishPackage', { pkgName, tempFolder });\n     */\n    async unpublishPackage(\n      input: string | (Omit<UnpublishPackageInput, 'registryUrl'> & {\n        registryUrl?: string;\n      })\n    ): Promise<UnpublishPackageResult> {\n      const normalized =\n        typeof input === 'string'\n          ? { pkgName: input, registryUrl: config.registryUrl }\n          : { ...input, registryUrl: input.registryUrl ?? config.registryUrl };\n      return unpublishPackage(normalized);\n    },\n  });\n}\n\n/**\n * Register all Verdaccio UI tests.\n *\n * Usage in a spec file:\n *   import { registerAllTests, createRegistryConfig } from '@verdaccio/e2e-ui';\n *\n *   const config = createRegistryConfig({ registryUrl: 'http://localhost:4873' });\n *   registerAllTests(config);\n *\n * Or pick individual suites:\n *   import { homeTests, signinTests } from '@verdaccio/e2e-ui';\n *\n *   const config = createRegistryConfig({ registryUrl: 'http://localhost:4873' });\n *   homeTests(config);\n *   signinTests(config);\n */\nexport function registerAllTests(config: RegistryConfig): void {\n  homeTests(config);\n  signinTests(config);\n  layoutTests(config);\n  searchTests(config);\n  settingsTests(config);\n  publishTests(config);\n}\n\n// Re-export for convenience\nimport {\n  homeTests,\n  signinTests,\n  publishTests,\n  searchTests,\n  settingsTests,\n  layoutTests,\n} from './tests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,SAAgB,qBAAqB,SAA6C;CAChF,MAAM,MAAM,IAAI,IAAI,QAAQ,YAAY;AACxC,QAAO;EACL,aAAa,QAAQ;EACrB,MAAM,QAAQ,SAAS,SAAS,IAAI,MAAM,GAAG,IAAI;EACjD,aAAa,QAAQ,eAAe;GAAE,MAAM;GAAQ,UAAU;GAAQ;EACtE,OAAO,QAAQ,SAAS;EACxB,SAAS,gBAAA,aAAa,gBAAA,kBAAkB,QAAQ,QAAQ;EACxD,WAAW,gBAAA,eAAe,gBAAA,mBAAmB,QAAQ,UAAU;EAC/D,UAAU,iBAAA,cAAc,iBAAA,kBAAkB,QAAQ,SAAS;EAC5D;;;;;;;;;;;;;;;;AAiBH,SAAgB,oBACd,IACA,SACM;CACN,MAAM,SAAS,qBAAqB,QAAQ;AAE5C,IAAG,QAAQ;EACT,WAA+B;AAC7B,UAAO;IACL,aAAa,OAAO;IACpB,MAAM,OAAO;IACd;;EAYH,MAAM,eACJ,OAC+B;AAC/B,UAAO,gBAAA,eAAe;IACpB,aAAa,MAAM,eAAe,OAAO;IACzC,aAAa,MAAM,eAAe,OAAO;IACzC,SAAS,MAAM;IACf,SAAS,MAAM;IACf,cAAc,MAAM;IACpB,iBAAiB,MAAM;IACvB,QAAQ,MAAM;IACf,CAAC;;EAQJ,MAAM,iBAAiB,YAAmC;AACxD,SAAM,gBAAA,iBAAiB,WAAW;AAClC,UAAO;;EAUT,MAAM,iBACJ,OAGiC;AAKjC,UAAO,gBAAA,iBAHL,OAAO,UAAU,WACb;IAAE,SAAS;IAAO,aAAa,OAAO;IAAa,GACnD;IAAE,GAAG;IAAO,aAAa,MAAM,eAAe,OAAO;IAAa,CACrC;;EAEtC,CAAC;;;;;;;;;;;;;;;;;;AAmBJ,SAAgB,iBAAiB,QAA8B;AAC7D,cAAA,UAAU,OAAO;AACjB,gBAAA,YAAY,OAAO;AACnB,gBAAA,YAAY,OAAO;AACnB,gBAAA,YAAY,OAAO;AACnB,kBAAA,cAAc,OAAO;AACrB,mBAAA,aAAa,OAAO"}

package/build/cjs/tasks/publish.cjs

@@ -0,0 +1,245 @@
+let child_process = require("child_process");
+let fs_promises = require("fs/promises");
+let os = require("os");
+let path = require("path");
+//#region src/tasks/publish.ts
+function sanitizeFolderName(name) {
+	return name.replace(/[^a-zA-Z0-9-_]/g, "-");
+}
+/**
+* Obtain a registry-API-compatible (legacy) auth token for publish.
+*
+* Strategy: create a throwaway user per call. `PUT /-/user/org.couchdb.user:<name>`
+* only returns a token on CREATE (and 409s on existing users), so we
+* guarantee success by generating a unique username each time.
+*
+* We need a legacy token specifically because:
+*   - Verdaccio's default API middleware accepts legacy tokens but NOT
+*     JWTs from `/-/verdaccio/sec/login`
+*   - Modern npm (>= 10.x) refuses to run `npm publish` at all without
+*     an `_authToken` entry in `.npmrc`, even against a registry that
+*     allows `$anonymous` publish — it errors out client-side
+*
+* The throwaway user stays in the test registry's htpasswd store after
+* the run, which is fine for ephemeral CI environments and local temp
+* setups (both wipe storage between runs).
+*/
+async function obtainLegacyToken(registryUrl) {
+	const user = `e2e-bot-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+	const password = "e2e-bot-password";
+	const url = `${registryUrl.replace(/\/$/, "")}/-/user/org.couchdb.user:${encodeURIComponent(user)}`;
+	const res = await fetch(url, {
+		method: "PUT",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify({
+			name: user,
+			password,
+			_id: `org.couchdb.user:${user}`,
+			type: "user",
+			roles: []
+		})
+	});
+	if (!res.ok) {
+		const body = await res.text();
+		throw new Error(`[publishPackage] failed to create throwaway user "${user}" (HTTP ${res.status}): ${body}`);
+	}
+	const json = await res.json();
+	if (!json.token) throw new Error(`[publishPackage] user creation response did not contain a token: ${JSON.stringify(json)}`);
+	return {
+		user,
+		token: json.token
+	};
+}
+async function createTempProject(pkgName, version, registryUrl, token, dependencies, devDependencies) {
+	const tempFolder = await (0, fs_promises.mkdtemp)((0, path.join)((0, os.tmpdir)(), `verdaccio-e2e-ui-${sanitizeFolderName(pkgName)}-`));
+	const manifest = {
+		name: pkgName,
+		version,
+		description: `e2e test fixture ${pkgName}`,
+		main: "index.js",
+		dependencies,
+		devDependencies,
+		keywords: [
+			"verdaccio",
+			"e2e",
+			"test"
+		],
+		author: "Verdaccio E2E <verdaccio@example.org>",
+		license: "MIT",
+		publishConfig: {
+			access: "public",
+			registry: registryUrl
+		}
+	};
+	await (0, fs_promises.writeFile)((0, path.join)(tempFolder, "package.json"), JSON.stringify(manifest, null, 2));
+	await (0, fs_promises.writeFile)((0, path.join)(tempFolder, "README.md"), `# ${pkgName}\n\nPublished by @verdaccio/e2e-ui for e2e testing.\n`);
+	await (0, fs_promises.writeFile)((0, path.join)(tempFolder, "index.js"), `module.exports = ${JSON.stringify(pkgName)};\n`);
+	const registryHost = registryUrl.replace(/^https?:/, "");
+	const npmrc = [
+		`registry=${registryUrl}`,
+		`${registryHost}/:_authToken=${token}`,
+		"access=public",
+		""
+	].join("\n");
+	await (0, fs_promises.writeFile)((0, path.join)(tempFolder, ".npmrc"), npmrc);
+	return tempFolder;
+}
+function spawnNpmPublish(cwd, registryUrl) {
+	return new Promise((resolvePromise, rejectPromise) => {
+		const proc = (0, child_process.spawn)("npm", [
+			"publish",
+			"--registry",
+			registryUrl,
+			"--tag",
+			"latest",
+			"--loglevel=error"
+		], {
+			cwd,
+			env: { ...process.env }
+		});
+		let stdout = "";
+		let stderr = "";
+		proc.stdout.on("data", (chunk) => {
+			stdout += chunk.toString();
+		});
+		proc.stderr.on("data", (chunk) => {
+			stderr += chunk.toString();
+		});
+		proc.on("error", rejectPromise);
+		proc.on("close", (code) => {
+			resolvePromise({
+				stdout,
+				stderr,
+				exitCode: code ?? -1
+			});
+		});
+	});
+}
+/**
+* Publish a throwaway npm package to the target Verdaccio registry.
+*
+* Flow:
+*   1. Create a throwaway user via `PUT /-/user/...` and capture its
+*      legacy auth token. See `obtainLegacyToken` for why.
+*   2. Scaffold a temp project with `package.json`, `README.md`,
+*      `index.js`, and an `.npmrc` that includes the token.
+*   3. Spawn `npm publish` from that temp dir.
+*
+* `input.credentials` is kept on the signature for forward-compat but
+* is currently unused — each call mints its own throwaway user.
+*
+* Throws on non-zero npm exit. Returns the temp folder path on success
+* so callers can inspect or clean up.
+*/
+async function publishPackage(input) {
+	const baseVersion = input.version ?? "1.0.0";
+	const version = input.unique ? `${baseVersion}-t${Date.now()}` : baseVersion;
+	const { token } = await obtainLegacyToken(input.registryUrl);
+	const tempFolder = await createTempProject(input.pkgName, version, input.registryUrl, token, input.dependencies ?? {}, input.devDependencies ?? {});
+	const { stdout, stderr, exitCode } = await spawnNpmPublish(tempFolder, input.registryUrl);
+	if (exitCode !== 0) throw new Error(`[publishPackage] npm publish failed for ${input.pkgName}@${version} (exit ${exitCode}):\n${stderr || stdout}`);
+	return {
+		pkgName: input.pkgName,
+		version,
+		tempFolder,
+		stdout,
+		stderr,
+		exitCode
+	};
+}
+/**
+* Remove a temp project folder previously created by publishPackage.
+* Safe to call with a missing path or a path outside the OS tmp dir —
+* in the latter case it refuses rather than rm-rf'ing arbitrary paths.
+*/
+async function cleanupPublished(tempFolder) {
+	if (!tempFolder) return;
+	const tmpRoot = (0, os.tmpdir)();
+	if (!tempFolder.startsWith(tmpRoot)) throw new Error(`[cleanupPublished] refusing to remove "${tempFolder}" — not under ${tmpRoot}`);
+	await (0, fs_promises.rm)(tempFolder, {
+		recursive: true,
+		force: true
+	});
+}
+function spawnNpmUnpublish(cwd, registryUrl, pkgSpec) {
+	return new Promise((resolvePromise, rejectPromise) => {
+		const proc = (0, child_process.spawn)("npm", [
+			"unpublish",
+			pkgSpec,
+			"--force",
+			"--registry",
+			registryUrl,
+			"--loglevel=error"
+		], {
+			cwd,
+			env: { ...process.env }
+		});
+		let stdout = "";
+		let stderr = "";
+		proc.stdout.on("data", (chunk) => {
+			stdout += chunk.toString();
+		});
+		proc.stderr.on("data", (chunk) => {
+			stderr += chunk.toString();
+		});
+		proc.on("error", rejectPromise);
+		proc.on("close", (code) => {
+			resolvePromise({
+				stdout,
+				stderr,
+				exitCode: code ?? -1
+			});
+		});
+	});
+}
+/**
+* Unpublish a package from the target registry so subsequent tests
+* start from a clean slate.
+*
+* If `tempFolder` is provided (typically from a prior `publishPackage`
+* result), its `.npmrc` is reused so no extra throwaway user is
+* minted. Otherwise this function creates its own temp folder + token.
+* Either way the temp folder used by THIS call is removed on exit
+* (but callers still own the lifecycle of a tempFolder they passed in).
+*
+* Treats HTTP 404 / "tarball does not exist" as success so reruns and
+* parallel teardowns don't flap.
+*/
+async function unpublishPackage(input) {
+	let workingFolder = input.tempFolder;
+	let ownsWorkingFolder = false;
+	if (!workingFolder) {
+		ownsWorkingFolder = true;
+		const { token } = await obtainLegacyToken(input.registryUrl);
+		workingFolder = await (0, fs_promises.mkdtemp)((0, path.join)((0, os.tmpdir)(), `verdaccio-e2e-ui-unpublish-`));
+		const registryHost = input.registryUrl.replace(/^https?:/, "");
+		await (0, fs_promises.writeFile)((0, path.join)(workingFolder, ".npmrc"), [
+			`registry=${input.registryUrl}`,
+			`${registryHost}/:_authToken=${token}`,
+			""
+		].join("\n"));
+	}
+	try {
+		const { stdout, stderr, exitCode } = await spawnNpmUnpublish(workingFolder, input.registryUrl, input.pkgName);
+		const alreadyGone = /404|not found|no such package|does not (exist|match)/i.test(`${stderr}\n${stdout}`);
+		if (exitCode !== 0 && !alreadyGone) throw new Error(`[unpublishPackage] npm unpublish failed for ${input.pkgName} (exit ${exitCode}):\n${stderr || stdout}`);
+		return {
+			pkgName: input.pkgName,
+			stdout,
+			stderr,
+			exitCode,
+			alreadyGone
+		};
+	} finally {
+		if (ownsWorkingFolder && workingFolder) await (0, fs_promises.rm)(workingFolder, {
+			recursive: true,
+			force: true
+		}).catch(() => void 0);
+	}
+}
+//#endregion
+exports.cleanupPublished = cleanupPublished;
+exports.publishPackage = publishPackage;
+exports.unpublishPackage = unpublishPackage;
+
+//# sourceMappingURL=publish.cjs.map