@verdaccio/e2e-ui 2.5.0 → 2.7.0

package/build/esm/tests/signup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signup.js","names":[],"sources":["../../../src/tests/signup.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\n/**\n * Create-user (web signup) tests.\n *\n * Requires the server flag `createUser: true` (the /-/web/add-user page\n * redirects home without it) and the fixed signup form from\n * verdaccio/verdaccio#6210 — every published ui-theme posted to\n * `PUT /-/web/add-user:<user>`, a URL that only serves the SPA, so the\n * form could never succeed. That is exactly why this suite exists: the\n * bug lived for months because no e2e ever clicked through the flow.\n */\nexport function signupTests(config: RegistryConfig) {\n  const { features } = config;\n  const { signup } = config.selectors;\n\n  describe('signup (create user)', () => {\n    beforeEach(() => {\n      cy.visit(`${config.registryUrl}/-/web/add-user`);\n      cy.get('body').should('be.visible');\n    });\n\n    maybeIt(features.signup.happyPath)(\n      'should create a user through the real signup endpoint and land on success',\n      () => {\n        const username = `e2e-signup-${Date.now()}`;\n\n        cy.intercept('PUT', '/-/verdaccio/sec/signup').as('signup');\n\n        cy.get(signup.usernameInput).type(username);\n        cy.get(signup.passwordInput).type('e2e-password');\n        cy.get(signup.emailInput).type(`${username}@example.com`);\n        cy.get(signup.submitButton).should('not.be.disabled').click();\n\n        // Wire contract: the request must carry name/password/email and\n        // the 36-char sessionId the endpoint validates before anything.\n        cy.wait('@signup', { timeout: 10000 }).then((interception: any) => {\n          const body = interception.request.body;\n          expect(body.name).to.eq(username);\n          expect(body.email).to.eq(`${username}@example.com`);\n          expect(body.sessionId).to.be.a('string').with.length(36);\n          expect(interception.response?.statusCode).to.be.oneOf([200, 201]);\n        });\n\n        cy.location('pathname', { timeout: 10000 }).should('contain', '/-/web/success');\n      }\n    );\n\n    maybeIt(features.signup.validation)(\n      'an invalid email must show a visible message and keep submit disabled',\n      () => {\n        cy.get(signup.usernameInput).type('e2e-validation-user');\n        cy.get(signup.passwordInput).type('e2e-password');\n        cy.get(signup.emailInput).type('not-an-email');\n\n        cy.get(signup.submitButton).should('be.disabled');\n        // The reason must be visible, not a silently disabled button.\n        cy.get(signup.emailInput)\n          .closest('div.MuiFormControl-root')\n          .find('.MuiFormHelperText-root')\n          .should('be.visible')\n          .and('not.be.empty');\n      }\n    );\n\n    maybeIt(features.signup.validation)(\n      'a username with spaces must block submit with a visible message',\n      () => {\n        cy.get(signup.usernameInput).type('user name');\n        cy.get(signup.passwordInput).type('e2e-password');\n        cy.get(signup.emailInput).type('valid@example.com');\n\n        cy.get(signup.submitButton).should('be.disabled');\n        cy.get(signup.usernameInput)\n          .closest('div.MuiFormControl-root')\n          .find('.MuiFormHelperText-root')\n          .should('be.visible')\n          .and('not.be.empty');\n      }\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAcA,SAAgB,YAAY,QAAwB;CAClD,MAAM,EAAE,aAAa;CACrB,MAAM,EAAE,WAAW,OAAO;CAE1B,SAAS,8BAA8B;EACrC,iBAAiB;GACf,GAAG,MAAM,GAAG,OAAO,YAAY,gBAAgB;GAC/C,GAAG,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY;EACpC,CAAC;EAED,QAAQ,SAAS,OAAO,SAAS,CAAC,CAChC,mFACM;GACJ,MAAM,WAAW,cAAc,KAAK,IAAI;GAExC,GAAG,UAAU,OAAO,yBAAyB,CAAC,CAAC,GAAG,QAAQ;GAE1D,GAAG,IAAI,OAAO,aAAa,CAAC,CAAC,KAAK,QAAQ;GAC1C,GAAG,IAAI,OAAO,aAAa,CAAC,CAAC,KAAK,cAAc;GAChD,GAAG,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,GAAG,SAAS,aAAa;GACxD,GAAG,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM;GAI5D,GAAG,KAAK,WAAW,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,MAAM,iBAAsB;IACjE,MAAM,OAAO,aAAa,QAAQ;IAClC,OAAO,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,QAAQ;IAChC,OAAO,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,aAAa;IAClD,OAAO,KAAK,SAAS,CAAC,CAAC,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,OAAO,EAAE;IACvD,OAAO,aAAa,UAAU,UAAU,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC;GAClE,CAAC;GAED,GAAG,SAAS,YAAY,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,OAAO,WAAW,gBAAgB;EAChF,CACF;EAEA,QAAQ,SAAS,OAAO,UAAU,CAAC,CACjC,+EACM;GACJ,GAAG,IAAI,OAAO,aAAa,CAAC,CAAC,KAAK,qBAAqB;GACvD,GAAG,IAAI,OAAO,aAAa,CAAC,CAAC,KAAK,cAAc;GAChD,GAAG,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,cAAc;GAE7C,GAAG,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO,aAAa;GAEhD,GAAG,IAAI,OAAO,UAAU,CAAC,CACtB,QAAQ,yBAAyB,CAAC,CAClC,KAAK,yBAAyB,CAAC,CAC/B,OAAO,YAAY,CAAC,CACpB,IAAI,cAAc;EACvB,CACF;EAEA,QAAQ,SAAS,OAAO,UAAU,CAAC,CACjC,yEACM;GACJ,GAAG,IAAI,OAAO,aAAa,CAAC,CAAC,KAAK,WAAW;GAC7C,GAAG,IAAI,OAAO,aAAa,CAAC,CAAC,KAAK,cAAc;GAChD,GAAG,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,mBAAmB;GAElD,GAAG,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO,aAAa;GAChD,GAAG,IAAI,OAAO,aAAa,CAAC,CACzB,QAAQ,yBAAyB,CAAC,CAClC,KAAK,yBAAyB,CAAC,CAC/B,OAAO,YAAY,CAAC,CACpB,IAAI,cAAc;EACvB,CACF;CACF,CAAC;AACH"}

package/build/features.d.ts

@@ -46,6 +46,13 @@ export interface Features {
          * builds that lag behind the upstream translation file.
          */
         languageSwitcher: boolean;
+        /**
+         * Whether to assert that dates follow the selected language
+         * (dayjs locale). Released UIs never load the dayjs locale, so
+         * relative dates stay English in every language (fixed in
+         * verdaccio/verdaccio#6210) — probe.
+         */
+        localizedDates: boolean;
     };
     signin: {
         /**
@@ -87,6 +94,138 @@ export interface Features {
          */
         rawViewer: boolean;
     };
+    detail: {
+        /**
+         * Whether to run the "visiting /v/<version> pins that version" test
+         * (asserts the sidebar request carries `?v=<version>`).
+         */
+        versionPinned: boolean;
+        /**
+         * Whether to run the wire-format test for scoped packages: the UI
+         * must request `/-/verdaccio/data/sidebar/@scope/name` with the `@`
+         * and `/` literal (npm registry convention), never `%40`-encoded.
+         * Pins the regression caught by these suites in
+         * verdaccio/verdaccio#6210.
+         */
+        scopedWireFormat: boolean;
+        /**
+         * Whether to run the "nonexistent version renders Not Found" test.
+         * Requires the server to answer 404 for unknown `?v=` values
+         * (verdaccio/verdaccio#6210); released lines silently fall back to
+         * `latest`, so this defaults to `false` as a probe.
+         */
+        versionNotFound: boolean;
+        /**
+         * Whether to run the "versions tab shows the CURRENT package after
+         * SPA navigation" test. The detail routes reuse one mounted
+         * component, and released UIs cache the previous package's versions
+         * in local state (fixed in verdaccio/verdaccio#6210) — defaults to
+         * `false` as a probe.
+         */
+        staleVersionsNavigation: boolean;
+    };
+    manifestRendering: {
+        /**
+         * Whether to run the string-form manifest tests: `repository`,
+         * `funding` and `bugs` in their string/array forms are valid npm
+         * and must render (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        stringForms: boolean;
+        /**
+         * Whether to assert gravatar avatars render on the detail sidebar.
+         * Released UIs read `avatar` while the sidebar endpoint sends
+         * `_avatar` (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        gravatarAvatars: boolean;
+        /**
+         * Whether to assert contributors without email don't collapse into
+         * one (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        developersWithoutEmail: boolean;
+    };
+    session: {
+        /**
+         * Whether to assert that an expired token in localStorage boots the
+         * UI logged out (header shows the login button). Holds on every
+         * released line.
+         */
+        expiredTokenLoggedOut: boolean;
+        /**
+         * Whether to assert the expired token is also PURGED from
+         * localStorage on boot — otherwise the api client keeps attaching
+         * it (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        expiredTokenPurged: boolean;
+    };
+    failureModes: {
+        /**
+         * Whether to run the "backend 5xx on the package list must not
+         * render the empty-registry onboarding" test. Holds on every line
+         * (a 5xx carries an HTTP code the UI always treated as an error).
+         */
+        homeServerError: boolean;
+        /**
+         * Whether to run the network-failure variant (request never
+         * reaches the server). Released UIs treat a network failure as an
+         * empty registry and show the onboarding card
+         * (verdaccio/verdaccio#6210 fixes it), so this defaults to `false`
+         * as a probe.
+         */
+        homeNetworkError: boolean;
+        /**
+         * Whether to run the "5xx on the detail page renders an error
+         * state instead of a blank page" test. Requires the generic error
+         * page from verdaccio/verdaccio#6210; released UIs render blank,
+         * so this defaults to `false` as a probe.
+         */
+        detailErrorState: boolean;
+        /**
+         * Whether to run the "search 5xx shows an error, not 'no results
+         * found'" test. The error state ships with verdaccio/verdaccio#6210
+         * — probe.
+         */
+        searchError: boolean;
+        /**
+         * Whether to run the "failed tarball download shows an error
+         * snackbar" test — clicking download and having nothing happen sent
+         * users retrying blindly (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        downloadError: boolean;
+    };
+    i18n: {
+        /**
+         * Whether to scan the home and detail pages for raw i18n keys
+         * (visible text like `sidebar.detail.version`). Holds on every
+         * released line — these pages ship fully translated.
+         */
+        noRawKeysCorePages: boolean;
+        /**
+         * Whether to scan the security pages (login dialog, /-/web/login,
+         * add-user, change-password) for raw i18n keys. The whole
+         * `security.*` namespace is missing from every published ui-theme
+         * bundle (fixed in verdaccio/verdaccio#6210), so this defaults to
+         * `false` as a probe.
+         */
+        noRawKeysSecurityPages: boolean;
+    };
+    signup: {
+        /**
+         * Whether to run the create-user happy path (fill the form on
+         * /-/web/add-user, submit, land on the success page) and assert
+         * the wire contract: `PUT /-/verdaccio/sec/signup` with a 36-char
+         * `sessionId`. Requires the server flag `createUser: true` AND the
+         * fixed signup form from verdaccio/verdaccio#6210 — every
+         * published ui-theme posts to a URL that only serves the SPA, so
+         * this defaults to `false` as a probe.
+         */
+        happyPath: boolean;
+        /**
+         * Whether to run the client-side validation tests on the add-user
+         * form (invalid email shows a message, url-unsafe username blocks
+         * submit). Same requirements as `happyPath`.
+         */
+        validation: boolean;
+    };
     changePassword: {
         /**
          * Whether to run the happy-path test (submit valid change,

package/build/index.d.ts

@@ -6,7 +6,7 @@ export type { Features } from './features';
 export { DEFAULT_SELECTORS, DEFAULT_TEST_IDS } from './testIds';
 export { DEFAULT_FEATURES, maybeIt } from './features';
 export { publishPackage, cleanupPublished, unpublishPackage } from './tasks';
-export { homeTests, signinTests, publishTests, searchTests, settingsTests, layoutTests, changePasswordTests, } from './tests';
+export { homeTests, signinTests, publishTests, searchTests, settingsTests, layoutTests, changePasswordTests, detailTests, failureModeTests, i18nKeyTests, manifestRenderingTests, sessionTests, signupTests, } from './tests';
 /**
  * Build a full RegistryConfig from user-provided options with defaults.
  *

package/build/tasks/publish.d.ts

@@ -8,6 +8,15 @@ export interface PublishPackageInput {
     };
     dependencies?: Record<string, string>;
     devDependencies?: Record<string, string>;
+    /**
+     * Extra fields merged into the generated package.json AFTER the
+     * defaults, so fixtures can carry arbitrary manifest shapes: a string
+     * `repository`, a `funding` array, `contributors` without email, a
+     * non-string `homepage`… — exactly the field forms npm accepts on
+     * publish but UIs tend to mishandle. `name`, `version` and
+     * `publishConfig` always win over this override.
+     */
+    manifest?: Record<string, unknown>;
     /**
      * When true, append a timestamp suffix to the version so reruns against
      * a persistent registry don't collide on 403. The suffix is a valid

package/build/testIds.d.ts

@@ -116,6 +116,14 @@ export interface TestIds {
         /** Close button inside the raw viewer dialog. */
         closeRawViewer: string;
     };
+    errors: {
+        /**
+         * Generic error page shown when a data request fails without a
+         * specific status (5xx, network failure). Added by
+         * verdaccio/verdaccio#6210 — only present on builds with that fix.
+         */
+        genericError: string;
+    };
 }
 /**
  * CSS selectors (not data-testids) used by the test suites. These are
@@ -133,6 +141,16 @@ export interface Selectors {
         /** Submit button inside the login dialog. */
         submitButton: string;
     };
+    signup: {
+        /** Username input on /-/web/add-user (shares ids with the login form). */
+        usernameInput: string;
+        /** Password input on /-/web/add-user. */
+        passwordInput: string;
+        /** Email input on /-/web/add-user (only email-typed input on the page). */
+        emailInput: string;
+        /** Submit button on /-/web/add-user. */
+        submitButton: string;
+    };
 }
 /**
  * Defaults matching Verdaccio 6.x (bundled ui-theme@9.0.0-next-9.x).

package/build/tests/detail.d.ts

@@ -0,0 +1,12 @@
+import { RegistryConfig } from '../types';
+/**
+ * Package detail page tests: version-pinned URLs and the wire format of
+ * the UI's data requests.
+ *
+ * The wire format is an observable contract, not an implementation
+ * detail: proxies, intercepts and every npm client expect scoped names
+ * as literal `/@scope/name`. A ui-components refactor that
+ * percent-encoded the `@` broke exactly these suites
+ * (verdaccio/verdaccio#6210), which is why it is pinned here on purpose.
+ */
+export declare function detailTests(config: RegistryConfig): void;

package/build/tests/failure-modes.d.ts

@@ -0,0 +1,11 @@
+import { RegistryConfig } from '../types';
+/**
+ * Failure-mode tests: what the UI shows when the backend misbehaves.
+ *
+ * A registry that is down must never look like a healthy empty registry
+ * (that invites the user to publish into the void), and a failed detail
+ * request must render an error state instead of a blank page. These are
+ * the failure classes fixed by verdaccio/verdaccio#6210 — the strict
+ * assertions are feature-gated probes until that ships.
+ */
+export declare function failureModeTests(config: RegistryConfig): void;

package/build/tests/i18n-keys.d.ts

@@ -0,0 +1,2 @@
+import { RegistryConfig } from '../types';
+export declare function i18nKeyTests(config: RegistryConfig): void;

package/build/tests/index.d.ts

@@ -5,3 +5,9 @@ export { searchTests } from './search';
 export { settingsTests } from './settings';
 export { layoutTests } from './layout';
 export { changePasswordTests } from './change-password';
+export { detailTests } from './detail';
+export { failureModeTests } from './failure-modes';
+export { i18nKeyTests } from './i18n-keys';
+export { signupTests } from './signup';
+export { manifestRenderingTests } from './manifest-rendering';
+export { sessionTests } from './session';

package/build/tests/manifest-rendering.d.ts

@@ -0,0 +1,14 @@
+import { RegistryConfig } from '../types';
+/**
+ * Manifest-shape rendering tests.
+ *
+ * npm does not validate these fields on publish: `repository`, `funding`
+ * and `bugs` are all valid in string form, `funding` also as an array,
+ * and contributors commonly ship without an email. Real packuments carry
+ * all of these — the UI must render them instead of silently dropping
+ * whole sections (the bug family fixed in verdaccio/verdaccio#6210,
+ * where every probe here failed).
+ *
+ * Requires the `manifest` override support in the publishPackage task.
+ */
+export declare function manifestRenderingTests(config: RegistryConfig): void;

package/build/tests/session.d.ts

@@ -0,0 +1,2 @@
+import { RegistryConfig } from '../types';
+export declare function sessionTests(config: RegistryConfig): void;

package/build/tests/signup.d.ts

@@ -0,0 +1,12 @@
+import { RegistryConfig } from '../types';
+/**
+ * Create-user (web signup) tests.
+ *
+ * Requires the server flag `createUser: true` (the /-/web/add-user page
+ * redirects home without it) and the fixed signup form from
+ * verdaccio/verdaccio#6210 — every published ui-theme posted to
+ * `PUT /-/web/add-user:<user>`, a URL that only serves the SPA, so the
+ * form could never succeed. That is exactly why this suite exists: the
+ * bug lived for months because no e2e ever clicked through the flow.
+ */
+export declare function signupTests(config: RegistryConfig): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/e2e-ui",
-  "version": "2.5.0",
+  "version": "2.7.0",
   "type": "module",
   "license": "MIT",
   "description": "Cypress plugin for Verdaccio UI e2e tests — run against any registry",