@verdaccio/e2e-ui 2.6.0 → 2.8.0

package/build/esm/tests/index.js

@@ -9,4 +9,7 @@ import { detailTests } from "./detail.js";
 import { failureModeTests } from "./failure-modes.js";
 import { i18nKeyTests } from "./i18n-keys.js";
 import { signupTests } from "./signup.js";
-export { changePasswordTests, detailTests, failureModeTests, homeTests, i18nKeyTests, layoutTests, publishTests, searchTests, settingsTests, signinTests, signupTests };
+import { manifestRenderingTests } from "./manifest-rendering.js";
+import { sessionTests } from "./session.js";
+import { homeDetailUxTests } from "./home-detail-ux.js";
+export { changePasswordTests, detailTests, failureModeTests, homeDetailUxTests, homeTests, i18nKeyTests, layoutTests, manifestRenderingTests, publishTests, searchTests, sessionTests, settingsTests, signinTests, signupTests };

package/build/esm/tests/manifest-rendering.js

@@ -0,0 +1,73 @@
+import { maybeIt } from "../features.js";
+//#region src/tests/manifest-rendering.ts
+/**
+* Manifest-shape rendering tests.
+*
+* npm does not validate these fields on publish: `repository`, `funding`
+* and `bugs` are all valid in string form, `funding` also as an array,
+* and contributors commonly ship without an email. Real packuments carry
+* all of these — the UI must render them instead of silently dropping
+* whole sections (the bug family fixed in verdaccio/verdaccio#6210,
+* where every probe here failed).
+*
+* Requires the `manifest` override support in the publishPackage task.
+*/
+function manifestRenderingTests(config) {
+	const { features } = config;
+	const { package: pkg } = config.testIds;
+	describe("manifest rendering", () => {
+		const pkgName = "@verdaccio/manifest-fixture";
+		let tempFolder = null;
+		const publishWith = (manifest) => cy.task("publishPackage", {
+			pkgName,
+			version: "1.0.0",
+			unique: true,
+			manifest
+		}).then((result) => {
+			tempFolder = result?.tempFolder ?? null;
+		});
+		afterEach(() => {
+			cy.task("unpublishPackage", {
+				pkgName,
+				tempFolder: tempFolder ?? void 0
+			});
+			if (tempFolder) cy.task("cleanupPublished", tempFolder);
+			tempFolder = null;
+		});
+		maybeIt(features.manifestRendering.stringForms)("string repository, funding array and string bugs must all render", () => {
+			publishWith({
+				repository: "git://github.com/verdaccio/verdaccio.git",
+				funding: [{
+					type: "opencollective",
+					url: "https://opencollective.com/verdaccio"
+				}],
+				bugs: "https://github.com/verdaccio/verdaccio/issues"
+			});
+			cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);
+			cy.getByTestId(pkg.sidebar, { timeout: 1e4 }).should("be.visible");
+			cy.getByTestId(pkg.sidebar).find("a[href^=\"https://github.com/verdaccio/verdaccio\"]").should("be.visible");
+			cy.getByTestId(pkg.sidebar).find("a[href=\"https://opencollective.com/verdaccio\"]").should("exist");
+			cy.get("a[href=\"https://github.com/verdaccio/verdaccio/issues\"]").should("exist");
+		});
+		maybeIt(features.manifestRendering.gravatarAvatars)("maintainer emails must render gravatar avatars on the sidebar", () => {
+			publishWith({ contributors: [{
+				name: "Ava Tester",
+				email: "ava@example.com"
+			}] });
+			cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);
+			cy.getByTestId(pkg.sidebar, { timeout: 1e4 }).should("be.visible");
+			cy.getByTestId(pkg.sidebar).find("img[src*=\"gravatar.com/avatar\"]").should("have.length.at.least", 1);
+		});
+		maybeIt(features.manifestRendering.developersWithoutEmail)("contributors without email must not collapse into one", () => {
+			publishWith({ contributors: [{ name: "alice-noemail" }, { name: "bob-noemail" }] });
+			cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);
+			cy.getByTestId(pkg.sidebar, { timeout: 1e4 }).should("be.visible");
+			cy.getByTestId("alice-noemail").should("exist");
+			cy.getByTestId("bob-noemail").should("exist");
+		});
+	});
+}
+//#endregion
+export { manifestRenderingTests };
+
+//# sourceMappingURL=manifest-rendering.js.map

package/build/esm/tests/manifest-rendering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-rendering.js","names":[],"sources":["../../../src/tests/manifest-rendering.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\n/**\n * Manifest-shape rendering tests.\n *\n * npm does not validate these fields on publish: `repository`, `funding`\n * and `bugs` are all valid in string form, `funding` also as an array,\n * and contributors commonly ship without an email. Real packuments carry\n * all of these — the UI must render them instead of silently dropping\n * whole sections (the bug family fixed in verdaccio/verdaccio#6210,\n * where every probe here failed).\n *\n * Requires the `manifest` override support in the publishPackage task.\n */\nexport function manifestRenderingTests(config: RegistryConfig) {\n  const { features } = config;\n  const { package: pkg } = config.testIds;\n\n  describe('manifest rendering', () => {\n    const pkgName = '@verdaccio/manifest-fixture';\n    let tempFolder: string | null = null;\n\n    const publishWith = (manifest: Record<string, unknown>) =>\n      cy\n        .task('publishPackage', {\n          pkgName,\n          version: '1.0.0',\n          unique: true,\n          manifest,\n        })\n        .then((result) => {\n          tempFolder = result?.tempFolder ?? null;\n        });\n\n    afterEach(() => {\n      cy.task('unpublishPackage', {\n        pkgName,\n        tempFolder: tempFolder ?? undefined,\n      });\n      if (tempFolder) {\n        cy.task('cleanupPublished', tempFolder);\n      }\n      tempFolder = null;\n    });\n\n    maybeIt(features.manifestRendering.stringForms)(\n      'string repository, funding array and string bugs must all render',\n      () => {\n        // NOTE: the npm CLI normalizes string `repository`/`bugs` into their\n        // object forms on publish, so what reaches the registry here is the\n        // normalized shape with the git:// protocol kept. The RAW string\n        // forms only arrive via uplink packuments and stay pinned by the\n        // ui-components unit tests; this spec pins what survives publish:\n        // the git:// -> https rewrite, the funding array and the bugs url.\n        publishWith({\n          repository: 'git://github.com/verdaccio/verdaccio.git',\n          funding: [{ type: 'opencollective', url: 'https://opencollective.com/verdaccio' }],\n          bugs: 'https://github.com/verdaccio/verdaccio/issues',\n        });\n\n        cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);\n        cy.getByTestId(pkg.sidebar, { timeout: 10000 }).should('be.visible');\n\n        // repository: rendered, rewritten to a browsable https url\n        // (prefix match: normalization may or may not keep the .git suffix)\n        cy.getByTestId(pkg.sidebar)\n          .find('a[href^=\"https://github.com/verdaccio/verdaccio\"]')\n          .should('be.visible');\n        // funding (array form): the fund button links to the first entry\n        cy.getByTestId(pkg.sidebar)\n          .find('a[href=\"https://opencollective.com/verdaccio\"]')\n          .should('exist');\n        // bugs (string form): open-an-issue action links to it\n        cy.get('a[href=\"https://github.com/verdaccio/verdaccio/issues\"]').should('exist');\n      }\n    );\n\n    maybeIt(features.manifestRendering.gravatarAvatars)(\n      'maintainer emails must render gravatar avatars on the sidebar',\n      () => {\n        publishWith({\n          contributors: [{ name: 'Ava Tester', email: 'ava@example.com' }],\n        });\n\n        cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);\n        cy.getByTestId(pkg.sidebar, { timeout: 10000 }).should('be.visible');\n\n        // the sidebar endpoint computes the gravatar url server-side;\n        // the avatar <img> must actually carry it\n        cy.getByTestId(pkg.sidebar)\n          .find('img[src*=\"gravatar.com/avatar\"]')\n          .should('have.length.at.least', 1);\n      }\n    );\n\n    maybeIt(features.manifestRendering.developersWithoutEmail)(\n      'contributors without email must not collapse into one',\n      () => {\n        publishWith({\n          contributors: [{ name: 'alice-noemail' }, { name: 'bob-noemail' }],\n        });\n\n        cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);\n        cy.getByTestId(pkg.sidebar, { timeout: 10000 }).should('be.visible');\n\n        // each Person renders data-testid=<name>; both must survive dedupe\n        cy.getByTestId('alice-noemail').should('exist');\n        cy.getByTestId('bob-noemail').should('exist');\n      }\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAgBA,SAAgB,uBAAuB,QAAwB;CAC7D,MAAM,EAAE,aAAa;CACrB,MAAM,EAAE,SAAS,QAAQ,OAAO;CAEhC,SAAS,4BAA4B;EACnC,MAAM,UAAU;EAChB,IAAI,aAA4B;EAEhC,MAAM,eAAe,aACnB,GACG,KAAK,kBAAkB;GACtB;GACA,SAAS;GACT,QAAQ;GACR;EACF,CAAC,CAAC,CACD,MAAM,WAAW;GAChB,aAAa,QAAQ,cAAc;EACrC,CAAC;EAEL,gBAAgB;GACd,GAAG,KAAK,oBAAoB;IAC1B;IACA,YAAY,cAAc,KAAA;GAC5B,CAAC;GACD,IAAI,YACF,GAAG,KAAK,oBAAoB,UAAU;GAExC,aAAa;EACf,CAAC;EAED,QAAQ,SAAS,kBAAkB,WAAW,CAAC,CAC7C,0EACM;GAOJ,YAAY;IACV,YAAY;IACZ,SAAS,CAAC;KAAE,MAAM;KAAkB,KAAK;IAAuC,CAAC;IACjF,MAAM;GACR,CAAC;GAED,GAAG,MAAM,GAAG,OAAO,YAAY,gBAAgB,SAAS;GACxD,GAAG,YAAY,IAAI,SAAS,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,OAAO,YAAY;GAInE,GAAG,YAAY,IAAI,OAAO,CAAC,CACxB,KAAK,qDAAmD,CAAC,CACzD,OAAO,YAAY;GAEtB,GAAG,YAAY,IAAI,OAAO,CAAC,CACxB,KAAK,kDAAgD,CAAC,CACtD,OAAO,OAAO;GAEjB,GAAG,IAAI,2DAAyD,CAAC,CAAC,OAAO,OAAO;EAClF,CACF;EAEA,QAAQ,SAAS,kBAAkB,eAAe,CAAC,CACjD,uEACM;GACJ,YAAY,EACV,cAAc,CAAC;IAAE,MAAM;IAAc,OAAO;GAAkB,CAAC,EACjE,CAAC;GAED,GAAG,MAAM,GAAG,OAAO,YAAY,gBAAgB,SAAS;GACxD,GAAG,YAAY,IAAI,SAAS,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,OAAO,YAAY;GAInE,GAAG,YAAY,IAAI,OAAO,CAAC,CACxB,KAAK,mCAAiC,CAAC,CACvC,OAAO,wBAAwB,CAAC;EACrC,CACF;EAEA,QAAQ,SAAS,kBAAkB,sBAAsB,CAAC,CACxD,+DACM;GACJ,YAAY,EACV,cAAc,CAAC,EAAE,MAAM,gBAAgB,GAAG,EAAE,MAAM,cAAc,CAAC,EACnE,CAAC;GAED,GAAG,MAAM,GAAG,OAAO,YAAY,gBAAgB,SAAS;GACxD,GAAG,YAAY,IAAI,SAAS,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,OAAO,YAAY;GAGnE,GAAG,YAAY,eAAe,CAAC,CAAC,OAAO,OAAO;GAC9C,GAAG,YAAY,aAAa,CAAC,CAAC,OAAO,OAAO;EAC9C,CACF;CACF,CAAC;AACH"}

package/build/esm/tests/publish.js

@@ -91,7 +91,7 @@ function publishTests(config) {
 			cy.wait("@pkgs");
 			cy.getByTestId(pkg.title).first().click();
 			cy.wait("@sidebar");
-			cy.getByTestId(pkg.keywordList).should("be.visible");
+			cy.getByTestId(pkg.keywordList).scrollIntoView().should("be.visible");
 			cy.getByTestId(pkg.keywordList).should("contain.text", "verdaccio");
 			cy.getByTestId(pkg.keywordList).should("contain.text", "e2e");
 			cy.getByTestId(pkg.keywordList).should("contain.text", "test");

package/build/esm/tests/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","names":[],"sources":["../../../src/tests/publish.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\nexport function publishTests(config: RegistryConfig) {\n  const { header, package: pkg } = config.testIds;\n  const { markdownBody, loginDialog } = config.selectors;\n  const { features } = config;\n  /**\n   * Log in once, reuse the session across tests in the requested suite.\n   * `cy.session` caches cookies + localStorage keyed on the first\n   * argument, so subsequent calls restore without hitting the network.\n   */\n  const loginOnce = (sessionName: string) => {\n    cy.session(\n      [sessionName, config.credentials.user],\n      () => {\n        cy.visit(config.registryUrl);\n        cy.login(config.credentials.user, config.credentials.password, {\n          loginButton: header.loginButton,\n          ...loginDialog,\n        });\n        cy.wait('@sign');\n      },\n      {\n        validate() {\n          cy.request({\n            url: `${config.registryUrl}/-/verdaccio/data/packages`,\n            failOnStatusCode: false,\n          })\n            .its('status')\n            .should('be.oneOf', [200, 304]);\n        },\n        cacheAcrossSpecs: true,\n      }\n    );\n  };\n\n  describe('publish', () => {\n    const pkgName = '@verdaccio/pkg-scoped';\n    // Single source of truth for the dependency the publish fixture\n    // writes into its package.json. The dependencies-tab assertion\n    // reads these back to verify the UI rendered both fields.\n    const depName = 'debug';\n    const depVersion = '4.0.0';\n    // Per-test state so afterEach can clean up the specific publish\n    // that this test created (temp folder + registry entry).\n    let tempFolder: string | null = null;\n\n    beforeEach(() => {\n      cy.intercept('POST', '/-/verdaccio/sec/login').as('sign');\n      cy.intercept('GET', '/-/verdaccio/data/packages').as('pkgs');\n      cy.intercept('GET', `/-/verdaccio/data/sidebar/${pkgName}`).as('sidebar');\n      cy.intercept('GET', `/-/verdaccio/data/package/readme/${pkgName}`).as('readme');\n\n      // Publish a fresh copy for this test. `unique: true` appends a\n      // timestamp suffix so the version is distinct per test even when\n      // the registry briefly has a stale copy from a prior afterEach.\n      cy.task('publishPackage', {\n        pkgName,\n        version: '1.0.0',\n        dependencies: { [depName]: depVersion },\n        unique: true,\n      }).then((result) => {\n        tempFolder = result?.tempFolder ?? null;\n      });\n\n      loginOnce('publish-suite');\n      cy.visit(config.registryUrl);\n    });\n\n    afterEach(() => {\n      // Remove the package from the registry AND the local temp folder.\n      // Run both regardless of test outcome so the next test starts\n      // clean. `unpublishPackage` treats 404 as success, so a re-run\n      // after a half-published state is still safe.\n      cy.task('unpublishPackage', { pkgName, tempFolder: tempFolder ?? undefined });\n      if (tempFolder) {\n        cy.task('cleanupPublished', tempFolder);\n      }\n      tempFolder = null;\n    });\n\n    it('should have one published package', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).should('have.length.at.least', 1);\n    });\n\n    it('should navigate to page detail', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n    });\n\n    it('should have readme content', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.readme).should('be.visible');\n      cy.get(markdownBody).should('have.length', 1);\n      // publishPackage writes a README whose body contains \"e2e testing\".\n      cy.contains(markdownBody, /test/);\n      cy.contains(`${markdownBody} h1`, pkgName).should('be.visible');\n    });\n\n    it('should render the sidebar with install commands for npm, yarn, pnpm', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.sidebar).should('be.visible');\n      cy.getByTestId(pkg.installList).within(() => {\n        cy.getByTestId(pkg.installNpm).should('be.visible');\n        cy.getByTestId(pkg.installYarn).should('be.visible');\n        cy.getByTestId(pkg.installPnpm).should('be.visible');\n      });\n      cy.getByTestId(pkg.installNpm).should('contain.text', pkgName);\n    });\n\n    it('should render the sidebar keywords from the published manifest', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@sidebar');\n      // publishPackage writes `keywords: ['verdaccio', 'e2e', 'test']`\n      // into the generated package.json.\n      cy.getByTestId(pkg.keywordList).should('be.visible');\n      cy.getByTestId(pkg.keywordList).should('contain.text', 'verdaccio');\n      cy.getByTestId(pkg.keywordList).should('contain.text', 'e2e');\n      cy.getByTestId(pkg.keywordList).should('contain.text', 'test');\n    });\n\n    it('should click on dependencies tab', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.dependenciesTab).click();\n      cy.wait(100);\n      cy.getByTestId(pkg.dependencies).should('have.length', 1);\n\n      // The dep Chip uses the dep name as its data-testid (dynamic\n      // Verdaccio convention, see DependencyBlock.tsx:68), and its\n      // label is `\"${name}: ${version}\"` via the `dependencies.\n      // dependency-block` i18n key. Assert BOTH fields are rendered.\n      cy.getByTestId(depName)\n        .should('be.visible')\n        .and('contain.text', depName)\n        .and('contain.text', depVersion);\n\n      // Also verify the Chip text matches the exact \"name: version\"\n      // format so a regression in the label template would fail here\n      // rather than pass via a loose substring match.\n      cy.getByTestId(depName)\n        .invoke('text')\n        .should('match', new RegExp(`${depName}\\\\s*:\\\\s*${depVersion}`));\n    });\n\n    it('should click on versions tab', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.versionsTab).click();\n      // With `unique: true` the version becomes `1.0.0-t<timestamp>`,\n      // but \"1.0.0\" still appears as a substring — match loosely.\n      cy.getByTestId(pkg.tagLatest)\n        .children()\n        .invoke('text')\n        .should('match', /1\\.0\\.0/);\n    });\n\n    it('should click on uplinks tab', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.uplinksTab).click();\n      cy.getByTestId(pkg.noUplinks).should('be.visible');\n    });\n\n    // ── Action-bar FABs: tarball download + raw viewer ─────────────\n    // Both buttons live in the sidebar ActionBar. They're gated on\n    // `web.showDownloadTarball` / `web.showRaw` (both default to true\n    // in the ui-theme's AppConfigurationProvider) and each test is\n    // also guarded by a feature flag so branches that ship a\n    // different action bar can skip cleanly.\n\n    maybeIt(features.publish.downloadTarball)(\n      'should fetch the tarball when the download button is clicked',\n      () => {\n        // The download provider hits the package manifest's dist.tarball\n        // URL directly. For our published fixture the filename looks\n        // like `pkg-scoped-1.0.0-t<ts>.tgz`, served from\n        // `/<pkg>/-/<filename>.tgz`. Intercept before clicking.\n        cy.intercept('GET', '**/pkg-scoped-*.tgz').as('tarballFetch');\n\n        cy.wait('@pkgs');\n        cy.getByTestId(pkg.title).first().click();\n        cy.wait('@sidebar');\n\n        cy.getByTestId(pkg.downloadTarballBtn).should('be.visible').click();\n\n        // The fetch should fire and return 200. We can't assert on the\n        // actual file landing on disk — Cypress doesn't track OS-level\n        // downloads — but a successful GET proves the end-to-end path\n        // from click → download provider → registry.\n        cy.wait('@tarballFetch', { timeout: 10000 }).its('response.statusCode').should('eq', 200);\n      }\n    );\n\n    maybeIt(features.publish.rawViewer)(\n      'should open the raw manifest viewer when the raw button is clicked',\n      () => {\n        cy.wait('@pkgs');\n        cy.getByTestId(pkg.title).first().click();\n        cy.wait('@sidebar');\n\n        // RawViewer is a full-screen MUI Dialog — initially unmounted\n        // because `isOpen=false` keeps Dialog closed and Cypress won't\n        // find it. Clicking the FAB flips `isOpen` to true.\n        cy.getByTestId(pkg.rawBtn).should('be.visible').click();\n\n        cy.getByTestId(pkg.rawViewerDialog, { timeout: 5000 }).should('be.visible');\n        // The ReactJson viewer renders the package manifest — the\n        // package name should appear somewhere in the serialized JSON.\n        cy.getByTestId(pkg.rawViewerDialog).should('contain.text', pkgName);\n\n        // Close via the X button and confirm the dialog goes away so\n        // subsequent tests don't inherit an open overlay.\n        cy.getByTestId(pkg.closeRawViewer).click();\n        cy.getByTestId(pkg.rawViewerDialog).should('not.exist');\n      }\n    );\n  });\n\n  describe('private package tarball downloads', () => {\n    const privatePkgName = '@private/tarball-fixture';\n    let tempFolder: string | null = null;\n\n    beforeEach(() => {\n      cy.intercept('POST', '/-/verdaccio/sec/login').as('sign');\n      cy.intercept('GET', '/-/verdaccio/data/packages').as('pkgs');\n      cy.intercept('GET', '**/-/verdaccio/data/sidebar/@private/tarball-fixture*').as('sidebar');\n\n      cy.task('publishPackage', {\n        pkgName: privatePkgName,\n        version: '1.0.0',\n        unique: true,\n      }).then((result) => {\n        tempFolder = result?.tempFolder ?? null;\n      });\n\n      loginOnce('private-tarball-suite');\n      cy.visit(config.registryUrl);\n    });\n\n    afterEach(() => {\n      cy.task('unpublishPackage', {\n        pkgName: privatePkgName,\n        tempFolder: tempFolder ?? undefined,\n      });\n      if (tempFolder) {\n        cy.task('cleanupPublished', tempFolder);\n      }\n      tempFolder = null;\n    });\n\n    maybeIt(features.publish.privateDownloadTarball)(\n      'should fetch a private tarball from the home package list',\n      () => {\n        cy.intercept('GET', '**/tarball-fixture-*.tgz').as('privateTarballFetch');\n\n        cy.wait('@pkgs');\n        cy.contains(`[data-testid=\"${pkg.title}\"]`, privatePkgName)\n          .should('be.visible')\n          .closest(`[data-testid=\"${pkg.itemList}\"]`)\n          .find(`[data-testid=\"${pkg.downloadTarball}\"]`)\n          .should('be.visible')\n          .click();\n\n        cy.wait('@privateTarballFetch', { timeout: 10000 })\n          .its('response.statusCode')\n          .should('eq', 200);\n      }\n    );\n\n    maybeIt(features.publish.privateDownloadTarball)(\n      'should fetch a private tarball from the package sidebar',\n      () => {\n        cy.intercept('GET', '**/tarball-fixture-*.tgz').as('privateTarballFetch');\n\n        cy.wait('@pkgs');\n        cy.contains(`[data-testid=\"${pkg.title}\"]`, privatePkgName).click();\n        cy.wait('@sidebar');\n        cy.getByTestId(pkg.downloadTarballBtn).should('be.visible').click();\n\n        cy.wait('@privateTarballFetch', { timeout: 10000 })\n          .its('response.statusCode')\n          .should('eq', 200);\n      }\n    );\n  });\n}\n"],"mappings":";;AAIA,SAAgB,aAAa,QAAwB;CACnD,MAAM,EAAE,QAAQ,SAAS,QAAQ,OAAO;CACxC,MAAM,EAAE,cAAc,gBAAgB,OAAO;CAC7C,MAAM,EAAE,aAAa;;;;;;CAMrB,MAAM,aAAa,gBAAwB;EACzC,GAAG,QACD,CAAC,aAAa,OAAO,YAAY,IAAI,SAC/B;GACJ,GAAG,MAAM,OAAO,WAAW;GAC3B,GAAG,MAAM,OAAO,YAAY,MAAM,OAAO,YAAY,UAAU;IAC7D,aAAa,OAAO;IACpB,GAAG;GACL,CAAC;GACD,GAAG,KAAK,OAAO;EACjB,GACA;GACE,WAAW;IACT,GAAG,QAAQ;KACT,KAAK,GAAG,OAAO,YAAY;KAC3B,kBAAkB;IACpB,CAAC,CAAC,CACC,IAAI,QAAQ,CAAC,CACb,OAAO,YAAY,CAAC,KAAK,GAAG,CAAC;GAClC;GACA,kBAAkB;EACpB,CACF;CACF;CAEA,SAAS,iBAAiB;EACxB,MAAM,UAAU;EAIhB,MAAM,UAAU;EAChB,MAAM,aAAa;EAGnB,IAAI,aAA4B;EAEhC,iBAAiB;GACf,GAAG,UAAU,QAAQ,wBAAwB,CAAC,CAAC,GAAG,MAAM;GACxD,GAAG,UAAU,OAAO,4BAA4B,CAAC,CAAC,GAAG,MAAM;GAC3D,GAAG,UAAU,OAAO,6BAA6B,SAAS,CAAC,CAAC,GAAG,SAAS;GACxE,GAAG,UAAU,OAAO,oCAAoC,SAAS,CAAC,CAAC,GAAG,QAAQ;GAK9E,GAAG,KAAK,kBAAkB;IACxB;IACA,SAAS;IACT,cAAc,GAAG,UAAU,WAAW;IACtC,QAAQ;GACV,CAAC,CAAC,CAAC,MAAM,WAAW;IAClB,aAAa,QAAQ,cAAc;GACrC,CAAC;GAED,UAAU,eAAe;GACzB,GAAG,MAAM,OAAO,WAAW;EAC7B,CAAC;EAED,gBAAgB;GAKd,GAAG,KAAK,oBAAoB;IAAE;IAAS,YAAY,cAAc,KAAA;GAAU,CAAC;GAC5E,IAAI,YACF,GAAG,KAAK,oBAAoB,UAAU;GAExC,aAAa;EACf,CAAC;EAED,GAAG,2CAA2C;GAC5C,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,OAAO,wBAAwB,CAAC;EAC5D,CAAC;EAED,GAAG,wCAAwC;GACzC,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;EAC1C,CAAC;EAED,GAAG,oCAAoC;GACrC,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY;GAC9C,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC;GAE5C,GAAG,SAAS,cAAc,MAAM;GAChC,GAAG,SAAS,GAAG,aAAa,MAAM,OAAO,CAAC,CAAC,OAAO,YAAY;EAChE,CAAC;EAED,GAAG,6EAA6E;GAC9E,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,OAAO,CAAC,CAAC,OAAO,YAAY;GAC/C,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,aAAa;IAC3C,GAAG,YAAY,IAAI,UAAU,CAAC,CAAC,OAAO,YAAY;IAClD,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,YAAY;IACnD,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,YAAY;GACrD,CAAC;GACD,GAAG,YAAY,IAAI,UAAU,CAAC,CAAC,OAAO,gBAAgB,OAAO;EAC/D,CAAC;EAED,GAAG,wEAAwE;GACzE,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAGlB,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,YAAY;GACnD,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,gBAAgB,WAAW;GAClE,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,gBAAgB,KAAK;GAC5D,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,gBAAgB,MAAM;EAC/D,CAAC;EAED,GAAG,0CAA0C;GAC3C,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,eAAe,CAAC,CAAC,MAAM;GAC1C,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC;GAMxD,GAAG,YAAY,OAAO,CAAC,CACpB,OAAO,YAAY,CAAC,CACpB,IAAI,gBAAgB,OAAO,CAAC,CAC5B,IAAI,gBAAgB,UAAU;GAKjC,GAAG,YAAY,OAAO,CAAC,CACpB,OAAO,MAAM,CAAC,CACd,OAAO,SAAS,IAAI,OAAO,GAAG,QAAQ,WAAW,YAAY,CAAC;EACnE,CAAC;EAED,GAAG,sCAAsC;GACvC,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,MAAM;GAGtC,GAAG,YAAY,IAAI,SAAS,CAAC,CAC1B,SAAS,CAAC,CACV,OAAO,MAAM,CAAC,CACd,OAAO,SAAS,SAAS;EAC9B,CAAC;EAED,GAAG,qCAAqC;GACtC,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,UAAU,CAAC,CAAC,MAAM;GACrC,GAAG,YAAY,IAAI,SAAS,CAAC,CAAC,OAAO,YAAY;EACnD,CAAC;EASD,QAAQ,SAAS,QAAQ,eAAe,CAAC,CACvC,sEACM;GAKJ,GAAG,UAAU,OAAO,qBAAqB,CAAC,CAAC,GAAG,cAAc;GAE5D,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAElB,GAAG,YAAY,IAAI,kBAAkB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM;GAMlE,GAAG,KAAK,iBAAiB,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,OAAO,MAAM,GAAG;EAC1F,CACF;EAEA,QAAQ,SAAS,QAAQ,SAAS,CAAC,CACjC,4EACM;GACJ,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAKlB,GAAG,YAAY,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM;GAEtD,GAAG,YAAY,IAAI,iBAAiB,EAAE,SAAS,IAAK,CAAC,CAAC,CAAC,OAAO,YAAY;GAG1E,GAAG,YAAY,IAAI,eAAe,CAAC,CAAC,OAAO,gBAAgB,OAAO;GAIlE,GAAG,YAAY,IAAI,cAAc,CAAC,CAAC,MAAM;GACzC,GAAG,YAAY,IAAI,eAAe,CAAC,CAAC,OAAO,WAAW;EACxD,CACF;CACF,CAAC;CAED,SAAS,2CAA2C;EAClD,MAAM,iBAAiB;EACvB,IAAI,aAA4B;EAEhC,iBAAiB;GACf,GAAG,UAAU,QAAQ,wBAAwB,CAAC,CAAC,GAAG,MAAM;GACxD,GAAG,UAAU,OAAO,4BAA4B,CAAC,CAAC,GAAG,MAAM;GAC3D,GAAG,UAAU,OAAO,uDAAuD,CAAC,CAAC,GAAG,SAAS;GAEzF,GAAG,KAAK,kBAAkB;IACxB,SAAS;IACT,SAAS;IACT,QAAQ;GACV,CAAC,CAAC,CAAC,MAAM,WAAW;IAClB,aAAa,QAAQ,cAAc;GACrC,CAAC;GAED,UAAU,uBAAuB;GACjC,GAAG,MAAM,OAAO,WAAW;EAC7B,CAAC;EAED,gBAAgB;GACd,GAAG,KAAK,oBAAoB;IAC1B,SAAS;IACT,YAAY,cAAc,KAAA;GAC5B,CAAC;GACD,IAAI,YACF,GAAG,KAAK,oBAAoB,UAAU;GAExC,aAAa;EACf,CAAC;EAED,QAAQ,SAAS,QAAQ,sBAAsB,CAAC,CAC9C,mEACM;GACJ,GAAG,UAAU,OAAO,0BAA0B,CAAC,CAAC,GAAG,qBAAqB;GAExE,GAAG,KAAK,OAAO;GACf,GAAG,SAAS,iBAAiB,IAAI,MAAM,KAAK,cAAc,CAAC,CACxD,OAAO,YAAY,CAAC,CACpB,QAAQ,iBAAiB,IAAI,SAAS,GAAG,CAAC,CAC1C,KAAK,iBAAiB,IAAI,gBAAgB,GAAG,CAAC,CAC9C,OAAO,YAAY,CAAC,CACpB,MAAM;GAET,GAAG,KAAK,wBAAwB,EAAE,SAAS,IAAM,CAAC,CAAC,CAChD,IAAI,qBAAqB,CAAC,CAC1B,OAAO,MAAM,GAAG;EACrB,CACF;EAEA,QAAQ,SAAS,QAAQ,sBAAsB,CAAC,CAC9C,iEACM;GACJ,GAAG,UAAU,OAAO,0BAA0B,CAAC,CAAC,GAAG,qBAAqB;GAExE,GAAG,KAAK,OAAO;GACf,GAAG,SAAS,iBAAiB,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;GAClE,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,kBAAkB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM;GAElE,GAAG,KAAK,wBAAwB,EAAE,SAAS,IAAM,CAAC,CAAC,CAChD,IAAI,qBAAqB,CAAC,CAC1B,OAAO,MAAM,GAAG;EACrB,CACF;CACF,CAAC;AACH"}
+{"version":3,"file":"publish.js","names":[],"sources":["../../../src/tests/publish.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\nexport function publishTests(config: RegistryConfig) {\n  const { header, package: pkg } = config.testIds;\n  const { markdownBody, loginDialog } = config.selectors;\n  const { features } = config;\n  /**\n   * Log in once, reuse the session across tests in the requested suite.\n   * `cy.session` caches cookies + localStorage keyed on the first\n   * argument, so subsequent calls restore without hitting the network.\n   */\n  const loginOnce = (sessionName: string) => {\n    cy.session(\n      [sessionName, config.credentials.user],\n      () => {\n        cy.visit(config.registryUrl);\n        cy.login(config.credentials.user, config.credentials.password, {\n          loginButton: header.loginButton,\n          ...loginDialog,\n        });\n        cy.wait('@sign');\n      },\n      {\n        validate() {\n          cy.request({\n            url: `${config.registryUrl}/-/verdaccio/data/packages`,\n            failOnStatusCode: false,\n          })\n            .its('status')\n            .should('be.oneOf', [200, 304]);\n        },\n        cacheAcrossSpecs: true,\n      }\n    );\n  };\n\n  describe('publish', () => {\n    const pkgName = '@verdaccio/pkg-scoped';\n    // Single source of truth for the dependency the publish fixture\n    // writes into its package.json. The dependencies-tab assertion\n    // reads these back to verify the UI rendered both fields.\n    const depName = 'debug';\n    const depVersion = '4.0.0';\n    // Per-test state so afterEach can clean up the specific publish\n    // that this test created (temp folder + registry entry).\n    let tempFolder: string | null = null;\n\n    beforeEach(() => {\n      cy.intercept('POST', '/-/verdaccio/sec/login').as('sign');\n      cy.intercept('GET', '/-/verdaccio/data/packages').as('pkgs');\n      cy.intercept('GET', `/-/verdaccio/data/sidebar/${pkgName}`).as('sidebar');\n      cy.intercept('GET', `/-/verdaccio/data/package/readme/${pkgName}`).as('readme');\n\n      // Publish a fresh copy for this test. `unique: true` appends a\n      // timestamp suffix so the version is distinct per test even when\n      // the registry briefly has a stale copy from a prior afterEach.\n      cy.task('publishPackage', {\n        pkgName,\n        version: '1.0.0',\n        dependencies: { [depName]: depVersion },\n        unique: true,\n      }).then((result) => {\n        tempFolder = result?.tempFolder ?? null;\n      });\n\n      loginOnce('publish-suite');\n      cy.visit(config.registryUrl);\n    });\n\n    afterEach(() => {\n      // Remove the package from the registry AND the local temp folder.\n      // Run both regardless of test outcome so the next test starts\n      // clean. `unpublishPackage` treats 404 as success, so a re-run\n      // after a half-published state is still safe.\n      cy.task('unpublishPackage', { pkgName, tempFolder: tempFolder ?? undefined });\n      if (tempFolder) {\n        cy.task('cleanupPublished', tempFolder);\n      }\n      tempFolder = null;\n    });\n\n    it('should have one published package', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).should('have.length.at.least', 1);\n    });\n\n    it('should navigate to page detail', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n    });\n\n    it('should have readme content', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.readme).should('be.visible');\n      cy.get(markdownBody).should('have.length', 1);\n      // publishPackage writes a README whose body contains \"e2e testing\".\n      cy.contains(markdownBody, /test/);\n      cy.contains(`${markdownBody} h1`, pkgName).should('be.visible');\n    });\n\n    it('should render the sidebar with install commands for npm, yarn, pnpm', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.sidebar).should('be.visible');\n      cy.getByTestId(pkg.installList).within(() => {\n        cy.getByTestId(pkg.installNpm).should('be.visible');\n        cy.getByTestId(pkg.installYarn).should('be.visible');\n        cy.getByTestId(pkg.installPnpm).should('be.visible');\n      });\n      cy.getByTestId(pkg.installNpm).should('contain.text', pkgName);\n    });\n\n    it('should render the sidebar keywords from the published manifest', () => {\n      cy.wait('@pkgs');\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@sidebar');\n      // publishPackage writes `keywords: ['verdaccio', 'e2e', 'test']`\n      // into the generated package.json.\n      // the sidebar scrolls; a taller install box can push the keywords below the fold\n      cy.getByTestId(pkg.keywordList).scrollIntoView().should('be.visible');\n      cy.getByTestId(pkg.keywordList).should('contain.text', 'verdaccio');\n      cy.getByTestId(pkg.keywordList).should('contain.text', 'e2e');\n      cy.getByTestId(pkg.keywordList).should('contain.text', 'test');\n    });\n\n    it('should click on dependencies tab', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.dependenciesTab).click();\n      cy.wait(100);\n      cy.getByTestId(pkg.dependencies).should('have.length', 1);\n\n      // The dep Chip uses the dep name as its data-testid (dynamic\n      // Verdaccio convention, see DependencyBlock.tsx:68), and its\n      // label is `\"${name}: ${version}\"` via the `dependencies.\n      // dependency-block` i18n key. Assert BOTH fields are rendered.\n      cy.getByTestId(depName)\n        .should('be.visible')\n        .and('contain.text', depName)\n        .and('contain.text', depVersion);\n\n      // Also verify the Chip text matches the exact \"name: version\"\n      // format so a regression in the label template would fail here\n      // rather than pass via a loose substring match.\n      cy.getByTestId(depName)\n        .invoke('text')\n        .should('match', new RegExp(`${depName}\\\\s*:\\\\s*${depVersion}`));\n    });\n\n    it('should click on versions tab', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.versionsTab).click();\n      // With `unique: true` the version becomes `1.0.0-t<timestamp>`,\n      // but \"1.0.0\" still appears as a substring — match loosely.\n      cy.getByTestId(pkg.tagLatest)\n        .children()\n        .invoke('text')\n        .should('match', /1\\.0\\.0/);\n    });\n\n    it('should click on uplinks tab', () => {\n      cy.wait('@pkgs');\n      cy.wait(300);\n      cy.getByTestId(pkg.title).first().click();\n      cy.wait('@readme');\n      cy.wait('@sidebar');\n      cy.getByTestId(pkg.uplinksTab).click();\n      cy.getByTestId(pkg.noUplinks).should('be.visible');\n    });\n\n    // ── Action-bar FABs: tarball download + raw viewer ─────────────\n    // Both buttons live in the sidebar ActionBar. They're gated on\n    // `web.showDownloadTarball` / `web.showRaw` (both default to true\n    // in the ui-theme's AppConfigurationProvider) and each test is\n    // also guarded by a feature flag so branches that ship a\n    // different action bar can skip cleanly.\n\n    maybeIt(features.publish.downloadTarball)(\n      'should fetch the tarball when the download button is clicked',\n      () => {\n        // The download provider hits the package manifest's dist.tarball\n        // URL directly. For our published fixture the filename looks\n        // like `pkg-scoped-1.0.0-t<ts>.tgz`, served from\n        // `/<pkg>/-/<filename>.tgz`. Intercept before clicking.\n        cy.intercept('GET', '**/pkg-scoped-*.tgz').as('tarballFetch');\n\n        cy.wait('@pkgs');\n        cy.getByTestId(pkg.title).first().click();\n        cy.wait('@sidebar');\n\n        cy.getByTestId(pkg.downloadTarballBtn).should('be.visible').click();\n\n        // The fetch should fire and return 200. We can't assert on the\n        // actual file landing on disk — Cypress doesn't track OS-level\n        // downloads — but a successful GET proves the end-to-end path\n        // from click → download provider → registry.\n        cy.wait('@tarballFetch', { timeout: 10000 }).its('response.statusCode').should('eq', 200);\n      }\n    );\n\n    maybeIt(features.publish.rawViewer)(\n      'should open the raw manifest viewer when the raw button is clicked',\n      () => {\n        cy.wait('@pkgs');\n        cy.getByTestId(pkg.title).first().click();\n        cy.wait('@sidebar');\n\n        // RawViewer is a full-screen MUI Dialog — initially unmounted\n        // because `isOpen=false` keeps Dialog closed and Cypress won't\n        // find it. Clicking the FAB flips `isOpen` to true.\n        cy.getByTestId(pkg.rawBtn).should('be.visible').click();\n\n        cy.getByTestId(pkg.rawViewerDialog, { timeout: 5000 }).should('be.visible');\n        // The ReactJson viewer renders the package manifest — the\n        // package name should appear somewhere in the serialized JSON.\n        cy.getByTestId(pkg.rawViewerDialog).should('contain.text', pkgName);\n\n        // Close via the X button and confirm the dialog goes away so\n        // subsequent tests don't inherit an open overlay.\n        cy.getByTestId(pkg.closeRawViewer).click();\n        cy.getByTestId(pkg.rawViewerDialog).should('not.exist');\n      }\n    );\n  });\n\n  describe('private package tarball downloads', () => {\n    const privatePkgName = '@private/tarball-fixture';\n    let tempFolder: string | null = null;\n\n    beforeEach(() => {\n      cy.intercept('POST', '/-/verdaccio/sec/login').as('sign');\n      cy.intercept('GET', '/-/verdaccio/data/packages').as('pkgs');\n      cy.intercept('GET', '**/-/verdaccio/data/sidebar/@private/tarball-fixture*').as('sidebar');\n\n      cy.task('publishPackage', {\n        pkgName: privatePkgName,\n        version: '1.0.0',\n        unique: true,\n      }).then((result) => {\n        tempFolder = result?.tempFolder ?? null;\n      });\n\n      loginOnce('private-tarball-suite');\n      cy.visit(config.registryUrl);\n    });\n\n    afterEach(() => {\n      cy.task('unpublishPackage', {\n        pkgName: privatePkgName,\n        tempFolder: tempFolder ?? undefined,\n      });\n      if (tempFolder) {\n        cy.task('cleanupPublished', tempFolder);\n      }\n      tempFolder = null;\n    });\n\n    maybeIt(features.publish.privateDownloadTarball)(\n      'should fetch a private tarball from the home package list',\n      () => {\n        cy.intercept('GET', '**/tarball-fixture-*.tgz').as('privateTarballFetch');\n\n        cy.wait('@pkgs');\n        cy.contains(`[data-testid=\"${pkg.title}\"]`, privatePkgName)\n          .should('be.visible')\n          .closest(`[data-testid=\"${pkg.itemList}\"]`)\n          .find(`[data-testid=\"${pkg.downloadTarball}\"]`)\n          .should('be.visible')\n          .click();\n\n        cy.wait('@privateTarballFetch', { timeout: 10000 })\n          .its('response.statusCode')\n          .should('eq', 200);\n      }\n    );\n\n    maybeIt(features.publish.privateDownloadTarball)(\n      'should fetch a private tarball from the package sidebar',\n      () => {\n        cy.intercept('GET', '**/tarball-fixture-*.tgz').as('privateTarballFetch');\n\n        cy.wait('@pkgs');\n        cy.contains(`[data-testid=\"${pkg.title}\"]`, privatePkgName).click();\n        cy.wait('@sidebar');\n        cy.getByTestId(pkg.downloadTarballBtn).should('be.visible').click();\n\n        cy.wait('@privateTarballFetch', { timeout: 10000 })\n          .its('response.statusCode')\n          .should('eq', 200);\n      }\n    );\n  });\n}\n"],"mappings":";;AAIA,SAAgB,aAAa,QAAwB;CACnD,MAAM,EAAE,QAAQ,SAAS,QAAQ,OAAO;CACxC,MAAM,EAAE,cAAc,gBAAgB,OAAO;CAC7C,MAAM,EAAE,aAAa;;;;;;CAMrB,MAAM,aAAa,gBAAwB;EACzC,GAAG,QACD,CAAC,aAAa,OAAO,YAAY,IAAI,SAC/B;GACJ,GAAG,MAAM,OAAO,WAAW;GAC3B,GAAG,MAAM,OAAO,YAAY,MAAM,OAAO,YAAY,UAAU;IAC7D,aAAa,OAAO;IACpB,GAAG;GACL,CAAC;GACD,GAAG,KAAK,OAAO;EACjB,GACA;GACE,WAAW;IACT,GAAG,QAAQ;KACT,KAAK,GAAG,OAAO,YAAY;KAC3B,kBAAkB;IACpB,CAAC,CAAC,CACC,IAAI,QAAQ,CAAC,CACb,OAAO,YAAY,CAAC,KAAK,GAAG,CAAC;GAClC;GACA,kBAAkB;EACpB,CACF;CACF;CAEA,SAAS,iBAAiB;EACxB,MAAM,UAAU;EAIhB,MAAM,UAAU;EAChB,MAAM,aAAa;EAGnB,IAAI,aAA4B;EAEhC,iBAAiB;GACf,GAAG,UAAU,QAAQ,wBAAwB,CAAC,CAAC,GAAG,MAAM;GACxD,GAAG,UAAU,OAAO,4BAA4B,CAAC,CAAC,GAAG,MAAM;GAC3D,GAAG,UAAU,OAAO,6BAA6B,SAAS,CAAC,CAAC,GAAG,SAAS;GACxE,GAAG,UAAU,OAAO,oCAAoC,SAAS,CAAC,CAAC,GAAG,QAAQ;GAK9E,GAAG,KAAK,kBAAkB;IACxB;IACA,SAAS;IACT,cAAc,GAAG,UAAU,WAAW;IACtC,QAAQ;GACV,CAAC,CAAC,CAAC,MAAM,WAAW;IAClB,aAAa,QAAQ,cAAc;GACrC,CAAC;GAED,UAAU,eAAe;GACzB,GAAG,MAAM,OAAO,WAAW;EAC7B,CAAC;EAED,gBAAgB;GAKd,GAAG,KAAK,oBAAoB;IAAE;IAAS,YAAY,cAAc,KAAA;GAAU,CAAC;GAC5E,IAAI,YACF,GAAG,KAAK,oBAAoB,UAAU;GAExC,aAAa;EACf,CAAC;EAED,GAAG,2CAA2C;GAC5C,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,OAAO,wBAAwB,CAAC;EAC5D,CAAC;EAED,GAAG,wCAAwC;GACzC,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;EAC1C,CAAC;EAED,GAAG,oCAAoC;GACrC,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY;GAC9C,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC;GAE5C,GAAG,SAAS,cAAc,MAAM;GAChC,GAAG,SAAS,GAAG,aAAa,MAAM,OAAO,CAAC,CAAC,OAAO,YAAY;EAChE,CAAC;EAED,GAAG,6EAA6E;GAC9E,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,OAAO,CAAC,CAAC,OAAO,YAAY;GAC/C,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,aAAa;IAC3C,GAAG,YAAY,IAAI,UAAU,CAAC,CAAC,OAAO,YAAY;IAClD,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,YAAY;IACnD,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,YAAY;GACrD,CAAC;GACD,GAAG,YAAY,IAAI,UAAU,CAAC,CAAC,OAAO,gBAAgB,OAAO;EAC/D,CAAC;EAED,GAAG,wEAAwE;GACzE,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAIlB,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,YAAY;GACpE,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,gBAAgB,WAAW;GAClE,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,gBAAgB,KAAK;GAC5D,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,OAAO,gBAAgB,MAAM;EAC/D,CAAC;EAED,GAAG,0CAA0C;GAC3C,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,eAAe,CAAC,CAAC,MAAM;GAC1C,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC;GAMxD,GAAG,YAAY,OAAO,CAAC,CACpB,OAAO,YAAY,CAAC,CACpB,IAAI,gBAAgB,OAAO,CAAC,CAC5B,IAAI,gBAAgB,UAAU;GAKjC,GAAG,YAAY,OAAO,CAAC,CACpB,OAAO,MAAM,CAAC,CACd,OAAO,SAAS,IAAI,OAAO,GAAG,QAAQ,WAAW,YAAY,CAAC;EACnE,CAAC;EAED,GAAG,sCAAsC;GACvC,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,WAAW,CAAC,CAAC,MAAM;GAGtC,GAAG,YAAY,IAAI,SAAS,CAAC,CAC1B,SAAS,CAAC,CACV,OAAO,MAAM,CAAC,CACd,OAAO,SAAS,SAAS;EAC9B,CAAC;EAED,GAAG,qCAAqC;GACtC,GAAG,KAAK,OAAO;GACf,GAAG,KAAK,GAAG;GACX,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,SAAS;GACjB,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,UAAU,CAAC,CAAC,MAAM;GACrC,GAAG,YAAY,IAAI,SAAS,CAAC,CAAC,OAAO,YAAY;EACnD,CAAC;EASD,QAAQ,SAAS,QAAQ,eAAe,CAAC,CACvC,sEACM;GAKJ,GAAG,UAAU,OAAO,qBAAqB,CAAC,CAAC,GAAG,cAAc;GAE5D,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAElB,GAAG,YAAY,IAAI,kBAAkB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM;GAMlE,GAAG,KAAK,iBAAiB,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,OAAO,MAAM,GAAG;EAC1F,CACF;EAEA,QAAQ,SAAS,QAAQ,SAAS,CAAC,CACjC,4EACM;GACJ,GAAG,KAAK,OAAO;GACf,GAAG,YAAY,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;GACxC,GAAG,KAAK,UAAU;GAKlB,GAAG,YAAY,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM;GAEtD,GAAG,YAAY,IAAI,iBAAiB,EAAE,SAAS,IAAK,CAAC,CAAC,CAAC,OAAO,YAAY;GAG1E,GAAG,YAAY,IAAI,eAAe,CAAC,CAAC,OAAO,gBAAgB,OAAO;GAIlE,GAAG,YAAY,IAAI,cAAc,CAAC,CAAC,MAAM;GACzC,GAAG,YAAY,IAAI,eAAe,CAAC,CAAC,OAAO,WAAW;EACxD,CACF;CACF,CAAC;CAED,SAAS,2CAA2C;EAClD,MAAM,iBAAiB;EACvB,IAAI,aAA4B;EAEhC,iBAAiB;GACf,GAAG,UAAU,QAAQ,wBAAwB,CAAC,CAAC,GAAG,MAAM;GACxD,GAAG,UAAU,OAAO,4BAA4B,CAAC,CAAC,GAAG,MAAM;GAC3D,GAAG,UAAU,OAAO,uDAAuD,CAAC,CAAC,GAAG,SAAS;GAEzF,GAAG,KAAK,kBAAkB;IACxB,SAAS;IACT,SAAS;IACT,QAAQ;GACV,CAAC,CAAC,CAAC,MAAM,WAAW;IAClB,aAAa,QAAQ,cAAc;GACrC,CAAC;GAED,UAAU,uBAAuB;GACjC,GAAG,MAAM,OAAO,WAAW;EAC7B,CAAC;EAED,gBAAgB;GACd,GAAG,KAAK,oBAAoB;IAC1B,SAAS;IACT,YAAY,cAAc,KAAA;GAC5B,CAAC;GACD,IAAI,YACF,GAAG,KAAK,oBAAoB,UAAU;GAExC,aAAa;EACf,CAAC;EAED,QAAQ,SAAS,QAAQ,sBAAsB,CAAC,CAC9C,mEACM;GACJ,GAAG,UAAU,OAAO,0BAA0B,CAAC,CAAC,GAAG,qBAAqB;GAExE,GAAG,KAAK,OAAO;GACf,GAAG,SAAS,iBAAiB,IAAI,MAAM,KAAK,cAAc,CAAC,CACxD,OAAO,YAAY,CAAC,CACpB,QAAQ,iBAAiB,IAAI,SAAS,GAAG,CAAC,CAC1C,KAAK,iBAAiB,IAAI,gBAAgB,GAAG,CAAC,CAC9C,OAAO,YAAY,CAAC,CACpB,MAAM;GAET,GAAG,KAAK,wBAAwB,EAAE,SAAS,IAAM,CAAC,CAAC,CAChD,IAAI,qBAAqB,CAAC,CAC1B,OAAO,MAAM,GAAG;EACrB,CACF;EAEA,QAAQ,SAAS,QAAQ,sBAAsB,CAAC,CAC9C,iEACM;GACJ,GAAG,UAAU,OAAO,0BAA0B,CAAC,CAAC,GAAG,qBAAqB;GAExE,GAAG,KAAK,OAAO;GACf,GAAG,SAAS,iBAAiB,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;GAClE,GAAG,KAAK,UAAU;GAClB,GAAG,YAAY,IAAI,kBAAkB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM;GAElE,GAAG,KAAK,wBAAwB,EAAE,SAAS,IAAM,CAAC,CAAC,CAChD,IAAI,qBAAqB,CAAC,CAC1B,OAAO,MAAM,GAAG;EACrB,CACF;CACF,CAAC;AACH"}

package/build/esm/tests/session.js

@@ -0,0 +1,49 @@
+import { maybeIt } from "../features.js";
+//#region src/tests/session.ts
+/**
+* Session lifecycle tests around the token stored in localStorage.
+*
+* A JWT that expired must never leave the UI half-logged-in: the header
+* greeting a user whose token the server treats as anonymous was the
+* "private packages vanish but I look logged in" bug fixed in
+* verdaccio/verdaccio#6210.
+*/
+/** Unsigned JWT-shaped token with the given exp (seconds since epoch). */
+function fakeJwt(exp) {
+	const b64 = (obj) => btoa(JSON.stringify(obj)).replace(/=+$/, "");
+	return `${b64({
+		alg: "none",
+		typ: "JWT"
+	})}.${b64({
+		name: "e2e-expired",
+		exp
+	})}.sig`;
+}
+function sessionTests(config) {
+	const { features } = config;
+	const { header } = config.testIds;
+	describe("session token lifecycle", () => {
+		const visitWithExpiredToken = () => {
+			const expired = fakeJwt(Math.floor(Date.now() / 1e3) - 3600);
+			cy.visit(config.registryUrl, { onBeforeLoad(win) {
+				win.localStorage.setItem("username", "e2e-expired");
+				win.localStorage.setItem("token", expired);
+			} });
+			cy.getByTestId(header.container).should("be.visible");
+		};
+		maybeIt(features.session.expiredTokenLoggedOut)("an expired stored token must boot the UI logged out", () => {
+			visitWithExpiredToken();
+			cy.getByTestId(header.loginButton).should("be.visible");
+			cy.getByTestId(header.logInDialogIcon).should("not.exist");
+		});
+		maybeIt(features.session.expiredTokenPurged)("an expired stored token must also be purged from localStorage", () => {
+			visitWithExpiredToken();
+			cy.getByTestId(header.loginButton).should("be.visible");
+			cy.window().its("localStorage").invoke("getItem", "token").should("be.null");
+		});
+	});
+}
+//#endregion
+export { sessionTests };
+
+//# sourceMappingURL=session.js.map

package/build/esm/tests/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","names":[],"sources":["../../../src/tests/session.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\n/**\n * Session lifecycle tests around the token stored in localStorage.\n *\n * A JWT that expired must never leave the UI half-logged-in: the header\n * greeting a user whose token the server treats as anonymous was the\n * \"private packages vanish but I look logged in\" bug fixed in\n * verdaccio/verdaccio#6210.\n */\n\n/** Unsigned JWT-shaped token with the given exp (seconds since epoch). */\nfunction fakeJwt(exp: number): string {\n  const b64 = (obj: unknown) => btoa(JSON.stringify(obj)).replace(/=+$/, '');\n  return `${b64({ alg: 'none', typ: 'JWT' })}.${b64({ name: 'e2e-expired', exp })}.sig`;\n}\n\nexport function sessionTests(config: RegistryConfig) {\n  const { features } = config;\n  const { header } = config.testIds;\n\n  describe('session token lifecycle', () => {\n    const visitWithExpiredToken = () => {\n      const expired = fakeJwt(Math.floor(Date.now() / 1000) - 3600);\n      cy.visit(config.registryUrl, {\n        onBeforeLoad(win) {\n          win.localStorage.setItem('username', 'e2e-expired');\n          win.localStorage.setItem('token', expired);\n        },\n      });\n      cy.getByTestId(header.container).should('be.visible');\n    };\n\n    maybeIt(features.session.expiredTokenLoggedOut)(\n      'an expired stored token must boot the UI logged out',\n      () => {\n        visitWithExpiredToken();\n\n        // login button visible, no greeting for the stale user\n        cy.getByTestId(header.loginButton).should('be.visible');\n        cy.getByTestId(header.logInDialogIcon).should('not.exist');\n      }\n    );\n\n    maybeIt(features.session.expiredTokenPurged)(\n      'an expired stored token must also be purged from localStorage',\n      () => {\n        visitWithExpiredToken();\n        cy.getByTestId(header.loginButton).should('be.visible');\n\n        // otherwise the api client keeps attaching the stale bearer and\n        // the server quietly treats every request as anonymous\n        cy.window().its('localStorage').invoke('getItem', 'token').should('be.null');\n      }\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;AAcA,SAAS,QAAQ,KAAqB;CACpC,MAAM,OAAO,QAAiB,KAAK,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,QAAQ,OAAO,EAAE;CACzE,OAAO,GAAG,IAAI;EAAE,KAAK;EAAQ,KAAK;CAAM,CAAC,EAAE,GAAG,IAAI;EAAE,MAAM;EAAe;CAAI,CAAC,EAAE;AAClF;AAEA,SAAgB,aAAa,QAAwB;CACnD,MAAM,EAAE,aAAa;CACrB,MAAM,EAAE,WAAW,OAAO;CAE1B,SAAS,iCAAiC;EACxC,MAAM,8BAA8B;GAClC,MAAM,UAAU,QAAQ,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,IAAI;GAC5D,GAAG,MAAM,OAAO,aAAa,EAC3B,aAAa,KAAK;IAChB,IAAI,aAAa,QAAQ,YAAY,aAAa;IAClD,IAAI,aAAa,QAAQ,SAAS,OAAO;GAC3C,EACF,CAAC;GACD,GAAG,YAAY,OAAO,SAAS,CAAC,CAAC,OAAO,YAAY;EACtD;EAEA,QAAQ,SAAS,QAAQ,qBAAqB,CAAC,CAC7C,6DACM;GACJ,sBAAsB;GAGtB,GAAG,YAAY,OAAO,WAAW,CAAC,CAAC,OAAO,YAAY;GACtD,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,OAAO,WAAW;EAC3D,CACF;EAEA,QAAQ,SAAS,QAAQ,kBAAkB,CAAC,CAC1C,uEACM;GACJ,sBAAsB;GACtB,GAAG,YAAY,OAAO,WAAW,CAAC,CAAC,OAAO,YAAY;GAItD,GAAG,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,OAAO,WAAW,OAAO,CAAC,CAAC,OAAO,SAAS;EAC7E,CACF;CACF,CAAC;AACH"}

package/build/esm/tests/settings.js

@@ -33,7 +33,7 @@ function settingsTests(config) {
 		it("should show both Package Managers and Translations tabs", () => {
 			cy.getByTestId(header.settingsTooltip).click();
 			cy.get("[role=\"dialog\"]").should("be.visible");
-			cy.get("[role=\"dialog\"] [role=\"tab\"]").should("have.length", 2);
+			cy.get("[role=\"dialog\"] [role=\"tab\"]").should("have.length.at.least", 2);
 			cy.contains("[role=\"dialog\"] [role=\"tab\"]", "Translations").should("be.visible");
 		});
 		it("should switch to the Translations tab and list languages", () => {
@@ -49,7 +49,10 @@ function settingsTests(config) {
 			cy.get("[role=\"dialog\"]").should("be.visible");
 			cy.contains("[role=\"dialog\"] [role=\"tab\"]", "Translations").click();
 			cy.contains("[role=\"dialog\"]", "Configuration").invoke("text").then((englishTitle) => {
-				cy.contains("[role=\"dialog\"] .MuiCard-root", "German").click({ force: true });
+				cy.contains("[role=\"dialog\"] .MuiCard-root", "German").then(($card) => {
+					const $area = $card.find(".MuiCardActionArea-root");
+					cy.wrap($area.length ? $area : $card).click({ force: true });
+				});
 				cy.contains("[role=\"dialog\"] [role=\"tab\"]", "Translations").should("not.exist");
 				cy.contains("[role=\"dialog\"]", englishTitle).should("not.exist");
 			});
@@ -60,6 +63,34 @@ function settingsTests(config) {
 			cy.get("body").type("{esc}");
 			cy.get("[role=\"dialog\"]").should("not.exist");
 		});
+		maybeIt(features.settings.localizedDates)("relative dates must follow the selected language (dayjs locale)", () => {
+			const pkgName = "@verdaccio/dates-fixture";
+			let tempFolder = null;
+			cy.task("publishPackage", {
+				pkgName,
+				version: "1.0.0",
+				unique: true
+			}).then((result) => {
+				tempFolder = result?.tempFolder ?? null;
+			});
+			cy.getByTestId(header.settingsTooltip).click();
+			cy.get("[role=\"dialog\"]").should("be.visible");
+			cy.contains("[role=\"dialog\"] [role=\"tab\"]", "Translations").click();
+			cy.contains("[role=\"dialog\"] .MuiCard-root", "German").click({ force: true });
+			cy.get("body").type("{esc}");
+			const sidebar = `[data-testid="${config.testIds.package.sidebar}"]`;
+			cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);
+			cy.get(sidebar, { timeout: 1e4 }).should("be.visible");
+			cy.get(sidebar).contains(/vor /);
+			cy.get(sidebar).contains(/ago\b/).should("not.exist");
+			cy.task("unpublishPackage", {
+				pkgName,
+				tempFolder: tempFolder ?? void 0
+			});
+			cy.then(() => {
+				if (tempFolder) cy.task("cleanupPublished", tempFolder);
+			});
+		});
 	});
 }
 //#endregion

package/build/esm/tests/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","names":[],"sources":["../../../src/tests/settings.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\n/**\n * Tests for the header Settings dialog and the Translations (language)\n * picker inside it.\n *\n * Requires `web.showSettings: true` in the registry config — the gear\n * icon only renders when the flag is on (see HeaderRight in Verdaccio's\n * ui-components package).\n *\n * Selector strategy: the language cards in LanguageSwitch do NOT have\n * data-testids, so this suite leans on:\n *   - MUI's ARIA roles: `[role=\"dialog\"]`, `[role=\"tab\"]`\n *   - The stable English labels \"Configuration\", \"Translations\",\n *     \"English\", \"German\", and the language description text, which are\n *     bundled into the ui-theme via `@verdaccio/ui-i18n`\n *   - The settings trigger's testid from Verdaccio's HeaderToolTipIcon:\n *     `header--tooltip-settings`\n */\nexport function settingsTests(config: RegistryConfig) {\n  const { header } = config.testIds;\n  const { features } = config;\n\n  describe('settings & language', () => {\n    beforeEach(() => {\n      cy.visit(config.registryUrl);\n      cy.get('body').should('be.visible');\n    });\n\n    it('should open the settings dialog from the header', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      // Dialog title key: dialog.settings.title → \"Configuration\" in EN.\n      cy.contains('[role=\"dialog\"]', 'Configuration').should('be.visible');\n    });\n\n    it('should show both Package Managers and Translations tabs', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      cy.get('[role=\"dialog\"] [role=\"tab\"]').should('have.length', 2);\n      cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').should('be.visible');\n    });\n\n    it('should switch to the Translations tab and list languages', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').click();\n      // language.description text is bundled in EN — good sentinel.\n      cy.contains('[role=\"dialog\"]', /this is the configuration details for the language/i).should(\n        'be.visible'\n      );\n      // Sanity-check a couple of language cards are rendered.\n      cy.contains('[role=\"dialog\"]', 'English').should('be.visible');\n      cy.contains('[role=\"dialog\"]', 'German').should('be.visible');\n    });\n\n    maybeIt(features.settings.languageSwitcher)(\n      'should change the UI language when a language card is clicked',\n      () => {\n        cy.getByTestId(header.settingsTooltip).click();\n        cy.get('[role=\"dialog\"]').should('be.visible');\n        cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').click();\n\n        // Before switching, capture the current dialog title so we can\n        // assert it changes. This avoids hard-coding the German string.\n        cy.contains('[role=\"dialog\"]', 'Configuration')\n          .invoke('text')\n          .then((englishTitle) => {\n            // Click the German card. We scope to the dialog + the MUI\n            // card class to avoid matching other \"German\" text.\n            cy.contains('[role=\"dialog\"] .MuiCard-root', 'German').click({\n              force: true,\n            });\n\n            // The English tab label \"Translations\" must no longer be\n            // present anywhere in the dialog — strongest proof the\n            // language actually switched.\n            cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').should('not.exist');\n            // And the original dialog title text should also be gone.\n            cy.contains('[role=\"dialog\"]', englishTitle).should('not.exist');\n          });\n      }\n    );\n\n    it('should close the settings dialog with Escape', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      cy.get('body').type('{esc}');\n      cy.get('[role=\"dialog\"]').should('not.exist');\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,cAAc,QAAwB;CACpD,MAAM,EAAE,WAAW,OAAO;CAC1B,MAAM,EAAE,aAAa;CAErB,SAAS,6BAA6B;EACpC,iBAAiB;GACf,GAAG,MAAM,OAAO,WAAW;GAC3B,GAAG,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY;EACpC,CAAC;EAED,GAAG,yDAAyD;GAC1D,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAE7C,GAAG,SAAS,qBAAmB,eAAe,CAAC,CAAC,OAAO,YAAY;EACrE,CAAC;EAED,GAAG,iEAAiE;GAClE,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,IAAI,kCAA8B,CAAC,CAAC,OAAO,eAAe,CAAC;GAC9D,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,OAAO,YAAY;EACjF,CAAC;EAED,GAAG,kEAAkE;GACnE,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,MAAM;GAElE,GAAG,SAAS,qBAAmB,qDAAqD,CAAC,CAAC,OACpF,YACF;GAEA,GAAG,SAAS,qBAAmB,SAAS,CAAC,CAAC,OAAO,YAAY;GAC7D,GAAG,SAAS,qBAAmB,QAAQ,CAAC,CAAC,OAAO,YAAY;EAC9D,CAAC;EAED,QAAQ,SAAS,SAAS,gBAAgB,CAAC,CACzC,uEACM;GACJ,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,MAAM;GAIlE,GAAG,SAAS,qBAAmB,eAAe,CAAC,CAC5C,OAAO,MAAM,CAAC,CACd,MAAM,iBAAiB;IAGtB,GAAG,SAAS,mCAAiC,QAAQ,CAAC,CAAC,MAAM,EAC3D,OAAO,KACT,CAAC;IAKD,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,OAAO,WAAW;IAE9E,GAAG,SAAS,qBAAmB,YAAY,CAAC,CAAC,OAAO,WAAW;GACjE,CAAC;EACL,CACF;EAEA,GAAG,sDAAsD;GACvD,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,OAAO;GAC3B,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,WAAW;EAC9C,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"settings.js","names":[],"sources":["../../../src/tests/settings.ts"],"sourcesContent":["/// <reference types=\"cypress\" />\nimport { maybeIt } from '../features';\nimport { RegistryConfig } from '../types';\n\n/**\n * Tests for the header Settings dialog and the Translations (language)\n * picker inside it.\n *\n * Requires `web.showSettings: true` in the registry config — the gear\n * icon only renders when the flag is on (see HeaderRight in Verdaccio's\n * ui-components package).\n *\n * Selector strategy: the language cards in LanguageSwitch do NOT have\n * data-testids, so this suite leans on:\n *   - MUI's ARIA roles: `[role=\"dialog\"]`, `[role=\"tab\"]`\n *   - The stable English labels \"Configuration\", \"Translations\",\n *     \"English\", \"German\", and the language description text, which are\n *     bundled into the ui-theme via `@verdaccio/ui-i18n`\n *   - The settings trigger's testid from Verdaccio's HeaderToolTipIcon:\n *     `header--tooltip-settings`\n */\nexport function settingsTests(config: RegistryConfig) {\n  const { header } = config.testIds;\n  const { features } = config;\n\n  describe('settings & language', () => {\n    beforeEach(() => {\n      cy.visit(config.registryUrl);\n      cy.get('body').should('be.visible');\n    });\n\n    it('should open the settings dialog from the header', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      // Dialog title key: dialog.settings.title → \"Configuration\" in EN.\n      cy.contains('[role=\"dialog\"]', 'Configuration').should('be.visible');\n    });\n\n    it('should show both Package Managers and Translations tabs', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      // 9.x adds a \"Publishing\" tab, so count the two this test is about as a minimum\n      cy.get('[role=\"dialog\"] [role=\"tab\"]').should('have.length.at.least', 2);\n      cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').should('be.visible');\n    });\n\n    it('should switch to the Translations tab and list languages', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').click();\n      // language.description text is bundled in EN — good sentinel.\n      cy.contains('[role=\"dialog\"]', /this is the configuration details for the language/i).should(\n        'be.visible'\n      );\n      // Sanity-check a couple of language cards are rendered.\n      cy.contains('[role=\"dialog\"]', 'English').should('be.visible');\n      cy.contains('[role=\"dialog\"]', 'German').should('be.visible');\n    });\n\n    maybeIt(features.settings.languageSwitcher)(\n      'should change the UI language when a language card is clicked',\n      () => {\n        cy.getByTestId(header.settingsTooltip).click();\n        cy.get('[role=\"dialog\"]').should('be.visible');\n        cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').click();\n\n        // Before switching, capture the current dialog title so we can\n        // assert it changes. This avoids hard-coding the German string.\n        cy.contains('[role=\"dialog\"]', 'Configuration')\n          .invoke('text')\n          .then((englishTitle) => {\n            // Click the German card. We scope to the dialog + the MUI\n            // card class to avoid matching other \"German\" text.\n            // released UIs handle the click on the card, 9.x on its CardActionArea\n            cy.contains('[role=\"dialog\"] .MuiCard-root', 'German').then(($card) => {\n              const $area = $card.find('.MuiCardActionArea-root');\n              cy.wrap($area.length ? $area : $card).click({ force: true });\n            });\n\n            // The English tab label \"Translations\" must no longer be\n            // present anywhere in the dialog — strongest proof the\n            // language actually switched.\n            cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').should('not.exist');\n            // And the original dialog title text should also be gone.\n            cy.contains('[role=\"dialog\"]', englishTitle).should('not.exist');\n          });\n      }\n    );\n\n    it('should close the settings dialog with Escape', () => {\n      cy.getByTestId(header.settingsTooltip).click();\n      cy.get('[role=\"dialog\"]').should('be.visible');\n      cy.get('body').type('{esc}');\n      cy.get('[role=\"dialog\"]').should('not.exist');\n    });\n\n    maybeIt(features.settings.localizedDates)(\n      'relative dates must follow the selected language (dayjs locale)',\n      () => {\n        // fresh fixture so \"published … ago\" is a relative date\n        const pkgName = '@verdaccio/dates-fixture';\n        let tempFolder: string | null = null;\n        cy.task('publishPackage', { pkgName, version: '1.0.0', unique: true }).then((result) => {\n          tempFolder = result?.tempFolder ?? null;\n        });\n\n        // switch the UI to German via the settings dialog\n        cy.getByTestId(header.settingsTooltip).click();\n        cy.get('[role=\"dialog\"]').should('be.visible');\n        cy.contains('[role=\"dialog\"] [role=\"tab\"]', 'Translations').click();\n        cy.contains('[role=\"dialog\"] .MuiCard-root', 'German').click({ force: true });\n        cy.get('body').type('{esc}');\n\n        // the language persists; a fresh page load must localize dayjs too\n        const sidebar = `[data-testid=\"${config.testIds.package.sidebar}\"]`;\n        cy.visit(`${config.registryUrl}/-/web/detail/${pkgName}`);\n        cy.get(sidebar, { timeout: 10000 }).should('be.visible');\n        // dayjs de locale renders relative times as \"vor ein paar Sekunden\";\n        // the released UIs kept English (\"a few seconds ago\") in every language\n        cy.get(sidebar).contains(/vor /);\n        cy.get(sidebar).contains(/ago\\b/).should('not.exist');\n\n        cy.task('unpublishPackage', { pkgName, tempFolder: tempFolder ?? undefined });\n        cy.then(() => {\n          if (tempFolder) cy.task('cleanupPublished', tempFolder);\n        });\n      }\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,cAAc,QAAwB;CACpD,MAAM,EAAE,WAAW,OAAO;CAC1B,MAAM,EAAE,aAAa;CAErB,SAAS,6BAA6B;EACpC,iBAAiB;GACf,GAAG,MAAM,OAAO,WAAW;GAC3B,GAAG,IAAI,MAAM,CAAC,CAAC,OAAO,YAAY;EACpC,CAAC;EAED,GAAG,yDAAyD;GAC1D,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAE7C,GAAG,SAAS,qBAAmB,eAAe,CAAC,CAAC,OAAO,YAAY;EACrE,CAAC;EAED,GAAG,iEAAiE;GAClE,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAE7C,GAAG,IAAI,kCAA8B,CAAC,CAAC,OAAO,wBAAwB,CAAC;GACvE,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,OAAO,YAAY;EACjF,CAAC;EAED,GAAG,kEAAkE;GACnE,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,MAAM;GAElE,GAAG,SAAS,qBAAmB,qDAAqD,CAAC,CAAC,OACpF,YACF;GAEA,GAAG,SAAS,qBAAmB,SAAS,CAAC,CAAC,OAAO,YAAY;GAC7D,GAAG,SAAS,qBAAmB,QAAQ,CAAC,CAAC,OAAO,YAAY;EAC9D,CAAC;EAED,QAAQ,SAAS,SAAS,gBAAgB,CAAC,CACzC,uEACM;GACJ,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,MAAM;GAIlE,GAAG,SAAS,qBAAmB,eAAe,CAAC,CAC5C,OAAO,MAAM,CAAC,CACd,MAAM,iBAAiB;IAItB,GAAG,SAAS,mCAAiC,QAAQ,CAAC,CAAC,MAAM,UAAU;KACrE,MAAM,QAAQ,MAAM,KAAK,yBAAyB;KAClD,GAAG,KAAK,MAAM,SAAS,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,CAAC;IAC7D,CAAC;IAKD,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,OAAO,WAAW;IAE9E,GAAG,SAAS,qBAAmB,YAAY,CAAC,CAAC,OAAO,WAAW;GACjE,CAAC;EACL,CACF;EAEA,GAAG,sDAAsD;GACvD,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,OAAO;GAC3B,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,WAAW;EAC9C,CAAC;EAED,QAAQ,SAAS,SAAS,cAAc,CAAC,CACvC,yEACM;GAEJ,MAAM,UAAU;GAChB,IAAI,aAA4B;GAChC,GAAG,KAAK,kBAAkB;IAAE;IAAS,SAAS;IAAS,QAAQ;GAAK,CAAC,CAAC,CAAC,MAAM,WAAW;IACtF,aAAa,QAAQ,cAAc;GACrC,CAAC;GAGD,GAAG,YAAY,OAAO,eAAe,CAAC,CAAC,MAAM;GAC7C,GAAG,IAAI,mBAAiB,CAAC,CAAC,OAAO,YAAY;GAC7C,GAAG,SAAS,oCAAgC,cAAc,CAAC,CAAC,MAAM;GAClE,GAAG,SAAS,mCAAiC,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,CAAC;GAC5E,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,OAAO;GAG3B,MAAM,UAAU,iBAAiB,OAAO,QAAQ,QAAQ,QAAQ;GAChE,GAAG,MAAM,GAAG,OAAO,YAAY,gBAAgB,SAAS;GACxD,GAAG,IAAI,SAAS,EAAE,SAAS,IAAM,CAAC,CAAC,CAAC,OAAO,YAAY;GAGvD,GAAG,IAAI,OAAO,CAAC,CAAC,SAAS,MAAM;GAC/B,GAAG,IAAI,OAAO,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,OAAO,WAAW;GAEpD,GAAG,KAAK,oBAAoB;IAAE;IAAS,YAAY,cAAc,KAAA;GAAU,CAAC;GAC5E,GAAG,WAAW;IACZ,IAAI,YAAY,GAAG,KAAK,oBAAoB,UAAU;GACxD,CAAC;EACH,CACF;CACF,CAAC;AACH"}

package/build/features.d.ts

@@ -46,6 +46,13 @@ export interface Features {
          * builds that lag behind the upstream translation file.
          */
         languageSwitcher: boolean;
+        /**
+         * Whether to assert that dates follow the selected language
+         * (dayjs locale). Released UIs never load the dayjs locale, so
+         * relative dates stay English in every language (fixed in
+         * verdaccio/verdaccio#6210) — probe.
+         */
+        localizedDates: boolean;
     };
     signin: {
         /**
@@ -108,6 +115,47 @@ export interface Features {
          * `latest`, so this defaults to `false` as a probe.
          */
         versionNotFound: boolean;
+        /**
+         * Whether to run the "versions tab shows the CURRENT package after
+         * SPA navigation" test. The detail routes reuse one mounted
+         * component, and released UIs cache the previous package's versions
+         * in local state (fixed in verdaccio/verdaccio#6210) — defaults to
+         * `false` as a probe.
+         */
+        staleVersionsNavigation: boolean;
+    };
+    manifestRendering: {
+        /**
+         * Whether to run the string-form manifest tests: `repository`,
+         * `funding` and `bugs` in their string/array forms are valid npm
+         * and must render (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        stringForms: boolean;
+        /**
+         * Whether to assert gravatar avatars render on the detail sidebar.
+         * Released UIs read `avatar` while the sidebar endpoint sends
+         * `_avatar` (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        gravatarAvatars: boolean;
+        /**
+         * Whether to assert contributors without email don't collapse into
+         * one (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        developersWithoutEmail: boolean;
+    };
+    session: {
+        /**
+         * Whether to assert that an expired token in localStorage boots the
+         * UI logged out (header shows the login button). Holds on every
+         * released line.
+         */
+        expiredTokenLoggedOut: boolean;
+        /**
+         * Whether to assert the expired token is also PURGED from
+         * localStorage on boot — otherwise the api client keeps attaching
+         * it (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        expiredTokenPurged: boolean;
     };
     failureModes: {
         /**
@@ -131,6 +179,18 @@ export interface Features {
          * so this defaults to `false` as a probe.
          */
         detailErrorState: boolean;
+        /**
+         * Whether to run the "search 5xx shows an error, not 'no results
+         * found'" test. The error state ships with verdaccio/verdaccio#6210
+         * — probe.
+         */
+        searchError: boolean;
+        /**
+         * Whether to run the "failed tarball download shows an error
+         * snackbar" test — clicking download and having nothing happen sent
+         * users retrying blindly (fixed in verdaccio/verdaccio#6210) — probe.
+         */
+        downloadError: boolean;
     };
     i18n: {
         /**
@@ -166,6 +226,51 @@ export interface Features {
          */
         validation: boolean;
     };
+    homeDetailUx: {
+        /**
+         * Whether to run the home toolbar tests: filter narrows the list and
+         * lives in `?q=`, `?scope=` restores the scope, no-match message.
+         * Ships with the 9.x home toolbar — probe, defaults to `false`.
+         */
+        homeToolbar: boolean;
+        /**
+         * Whether to assert the package page tab lives in `?tab=` (click
+         * writes it, a link opens it, readme removes it) — probe.
+         */
+        detailTabInUrl: boolean;
+        /**
+         * Whether to assert the step-by-step welcome card (setup tabs per
+         * package manager, `.npmrc` tab, uplinks note) — probe.
+         */
+        welcomeGuide: boolean;
+        /**
+         * Whether to assert the sidebar install box lists `bun` and the
+         * `.npmrc` registry line. Needs `bun` in `web.pkgManagers` (default
+         * on 9.x) — probe.
+         */
+        installBunAndNpmrc: boolean;
+        /**
+         * Whether to assert that a copy button confirms the copy (its
+         * accessible name switches to "Copied") — probe.
+         */
+        copyFeedback: boolean;
+        /**
+         * Whether to assert search results are grouped by origin and a
+         * locally published package lands in the "published here" group.
+         * Needs `web.showUplinks` (default true) — probe.
+         */
+        searchGrouping: boolean;
+        /**
+         * Whether to assert that the version on each home list item links
+         * to its version page `/-/web/detail/<name>/v/<version>` — probe.
+         */
+        versionLink: boolean;
+        /**
+         * Whether to assert the settings dialog has a "Publishing" tab with
+         * the welcome guide, so it stays reachable once packages exist — probe.
+         */
+        settingsPublishTab: boolean;
+    };
     changePassword: {
         /**
          * Whether to run the happy-path test (submit valid change,

package/build/index.d.ts

@@ -6,7 +6,7 @@ export type { Features } from './features';
 export { DEFAULT_SELECTORS, DEFAULT_TEST_IDS } from './testIds';
 export { DEFAULT_FEATURES, maybeIt } from './features';
 export { publishPackage, cleanupPublished, unpublishPackage } from './tasks';
-export { homeTests, signinTests, publishTests, searchTests, settingsTests, layoutTests, changePasswordTests, detailTests, failureModeTests, i18nKeyTests, signupTests, } from './tests';
+export { homeTests, signinTests, publishTests, searchTests, settingsTests, layoutTests, changePasswordTests, detailTests, failureModeTests, i18nKeyTests, manifestRenderingTests, sessionTests, signupTests, homeDetailUxTests, } from './tests';
 /**
  * Build a full RegistryConfig from user-provided options with defaults.
  *

package/build/tasks/publish.d.ts

@@ -8,6 +8,15 @@ export interface PublishPackageInput {
     };
     dependencies?: Record<string, string>;
     devDependencies?: Record<string, string>;
+    /**
+     * Extra fields merged into the generated package.json AFTER the
+     * defaults, so fixtures can carry arbitrary manifest shapes: a string
+     * `repository`, a `funding` array, `contributors` without email, a
+     * non-string `homepage`… — exactly the field forms npm accepts on
+     * publish but UIs tend to mishandle. `name`, `version` and
+     * `publishConfig` always win over this override.
+     */
+    manifest?: Record<string, unknown>;
     /**
      * When true, append a timestamp suffix to the version so reruns against
      * a persistent registry don't collide on 403. The suffix is a valid

package/build/testIds.d.ts

@@ -21,6 +21,20 @@ export interface TestIds {
         helpCard: string;
         /** 404 "not found" container. */
         notFound: string;
+        /** Filter / scope / sort bar above the package list (9.x). */
+        packageListToolbar: string;
+        /** Text filter input inside the toolbar. */
+        packageListFilter: string;
+        /** Native input of the scope select (only with more than one scope). */
+        packageListScope: string;
+        /** Message shown when the filter matches no package. */
+        packageListNoMatch: string;
+        /** Prefix of the welcome card setup tabs: `<prefix><manager>`. */
+        helpSetupTabPrefix: string;
+        /** Note on the welcome card explaining cached uplink packages. */
+        helpUplinksNote: string;
+        /** Step list of the publishing guide, in the welcome card and the settings (9.x). */
+        helpGuide: string;
     };
     header: {
         /** Outermost `<NavBar>` element. */
@@ -39,6 +53,10 @@ export interface TestIds {
         loginButton: string;
         /** Gear icon that opens the settings dialog. */
         settingsTooltip: string;
+        /** "Publishing" tab of the settings dialog (9.x). */
+        settingsPublishTab: string;
+        /** Panel of the "Publishing" tab (9.x). */
+        settingsPublishPanel: string;
         /** Info icon that opens the registry info dialog. */
         infoTooltip: string;
         /**
@@ -79,6 +97,8 @@ export interface TestIds {
         itemList: string;
         /** Package name link in the package list (home + search results). */
         title: string;
+        /** Version link of a package list item, to its version page (9.x). */
+        versionLink: string;
         /** Readme container on the package detail page. */
         readme: string;
         /** Sidebar container on the package detail page. */
@@ -91,6 +111,14 @@ export interface TestIds {
         installYarn: string;
         /** Individual install line for pnpm. */
         installPnpm: string;
+        /** Individual install line for bun (9.x). */
+        installBun: string;
+        /** `.npmrc` registry line below the install commands (9.x). */
+        installNpmrc: string;
+        /** Copy button of the `.npmrc` registry line. */
+        installNpmrcCopy: string;
+        /** Tab that shows the readme. */
+        readmeTab: string;
         /** Keyword list below the install section. */
         keywordList: string;
         /** Tab that reveals the dependencies view. */
@@ -116,6 +144,12 @@ export interface TestIds {
         /** Close button inside the raw viewer dialog. */
         closeRawViewer: string;
     };
+    search: {
+        /** Prefix of the origin group headers: `<prefix>private|cached|remote`. */
+        groupPrefix: string;
+        /** Prefix of the origin icon on each result: `<prefix>private|...`. */
+        originPrefix: string;
+    };
     errors: {
         /**
          * Generic error page shown when a data request fails without a

package/build/tests/home-detail-ux.d.ts

@@ -0,0 +1,10 @@
+import { RegistryConfig } from '../types';
+/**
+ * Home and package page UX that ships with the 9.x web UI: the package
+ * list toolbar, the tab in the address, the welcome guide, the install
+ * box (bun and `.npmrc`), copy feedback and search grouped by origin.
+ *
+ * Every test is a probe (flag defaults to `false`): released lines do
+ * not have these features yet.
+ */
+export declare function homeDetailUxTests(config: RegistryConfig): void;

package/build/tests/index.d.ts

@@ -9,3 +9,6 @@ export { detailTests } from './detail';
 export { failureModeTests } from './failure-modes';
 export { i18nKeyTests } from './i18n-keys';
 export { signupTests } from './signup';
+export { manifestRenderingTests } from './manifest-rendering';
+export { sessionTests } from './session';
+export { homeDetailUxTests } from './home-detail-ux';

package/build/tests/manifest-rendering.d.ts

@@ -0,0 +1,14 @@
+import { RegistryConfig } from '../types';
+/**
+ * Manifest-shape rendering tests.
+ *
+ * npm does not validate these fields on publish: `repository`, `funding`
+ * and `bugs` are all valid in string form, `funding` also as an array,
+ * and contributors commonly ship without an email. Real packuments carry
+ * all of these — the UI must render them instead of silently dropping
+ * whole sections (the bug family fixed in verdaccio/verdaccio#6210,
+ * where every probe here failed).
+ *
+ * Requires the `manifest` override support in the publishPackage task.
+ */
+export declare function manifestRenderingTests(config: RegistryConfig): void;

package/build/tests/session.d.ts

@@ -0,0 +1,2 @@
+import { RegistryConfig } from '../types';
+export declare function sessionTests(config: RegistryConfig): void;