@verdaccio/loaders 8.0.5 → 8.1.0

package/build/_virtual/_rolldown/runtime.js

@@ -0,0 +1,23 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+exports.__toESM = __toESM;

package/build/index.js

@@ -1,13 +1,6 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
 });
-Object.defineProperty(exports, "asyncLoadPlugin", {
-  enumerable: true,
-  get: function get() {
-    return _pluginAsyncLoader.asyncLoadPlugin;
-  }
-});
-var _pluginAsyncLoader = require("./plugin-async-loader");
-//# sourceMappingURL=index.js.map
+const require_plugin_async_loader = require("./plugin-async-loader.js");
+exports.asyncLoadPlugin = require_plugin_async_loader.asyncLoadPlugin;

package/build/index.mjs

@@ -0,0 +1,2 @@
+import { asyncLoadPlugin } from "./plugin-async-loader.mjs";
+export { asyncLoadPlugin };

package/build/plugin-async-loader.d.ts

@@ -23,5 +23,5 @@ import type { PluginType } from './utils';
  * @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware
  * @return {Array} list of plugins
  */
-export declare function asyncLoadPlugin<T extends pluginUtils.Plugin<T>>(pluginConfigs: any, pluginOptions: pluginUtils.PluginOptions, sanityCheck: (plugin: PluginType<T>) => boolean, legacyMergeConfigs?: boolean, prefix?: string, pluginCategory?: string): Promise<PluginType<T>[]>;
+export declare function asyncLoadPlugin<T extends pluginUtils.Plugin<T>>(pluginConfigs: any | undefined, pluginOptions: pluginUtils.PluginOptions, sanityCheck: (plugin: PluginType<T>) => boolean, legacyMergeConfigs?: boolean, prefix?: string, pluginCategory?: string): Promise<PluginType<T>[]>;
 export declare function executePlugin<T>(plugin: PluginType<T>, pluginConfig: unknown, pluginOptions: pluginUtils.PluginOptions, legacyMergeConfigs?: boolean): PluginType<T>;

package/build/plugin-async-loader.js

@@ -1,258 +1,136 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.asyncLoadPlugin = asyncLoadPlugin;
-exports.executePlugin = executePlugin;
-var _debug = _interopRequireDefault(require("debug"));
-var _lodash = _interopRequireDefault(require("lodash"));
-var _promises = require("node:fs/promises");
-var _nodePath = require("node:path");
-var _core = require("@verdaccio/core");
-var _utils = require("./utils");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
-function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
-function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
-function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
-var debug = (0, _debug["default"])('verdaccio:plugin:loader:async');
-function isDirectory(_x) {
-  return _isDirectory.apply(this, arguments);
-}
-function _isDirectory() {
-  _isDirectory = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(pathFolder) {
-    var stat;
-    return _regenerator().w(function (_context) {
-      while (1) switch (_context.n) {
-        case 0:
-          _context.n = 1;
-          return (0, _promises.lstat)(pathFolder);
-        case 1:
-          stat = _context.v;
-          return _context.a(2, stat.isDirectory());
-      }
-    }, _callee);
-  }));
-  return _isDirectory.apply(this, arguments);
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+const require_utils = require("./utils.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let lodash = require("lodash");
+lodash = require_runtime.__toESM(lodash);
+let node_fs_promises = require("node:fs/promises");
+let node_path = require("node:path");
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/plugin-async-loader.ts
+var debug$1 = (0, debug.default)("verdaccio:plugin:loader:async");
+async function isDirectory(pathFolder) {
+	return (await (0, node_fs_promises.lstat)(pathFolder)).isDirectory();
 }
 function mergeConfig(appConfig, pluginConfig) {
-  return _lodash["default"].merge({}, appConfig, pluginConfig);
+	return lodash.default.merge({}, appConfig, pluginConfig);
 }
-
-// type Plugins<T> =
-//   | pluginUtils.Auth<T>
-//   | pluginUtils.Storage<T>
-//   | pluginUtils.ExpressMiddleware<T, unknown, unknown>;
-
 /**
- * The plugin loader find recursively plugins, if one plugin fails is ignored and report the error to the logger.
- *
- * The loader follows the order:
- * - If the at the `config.yaml` file the  `plugins: ./plugins` is defined
- *   - If is absolute will use the provided path
- *   - If is relative, will use the base path of the config file. eg: /root/config.yaml the plugins folder should be
- *     hosted at /root/plugins
- * - The next step is find at the node_modules or global based on the `require` native algorithm.
- * - If the package is scoped eg: @scope/foo, try to load the package `@scope/foo`
- * - If the package is not scoped, will use the default prefix: verdaccio-foo ("verdaccio-theme-" prefix for theme ui plugins).
- * - If a custom prefix is provided, the verdaccio- is replaced by the config.server.pluginPrefix.
- *
- * The `sanityCheck` is the validation for the required methods to load the plugin, if the validation fails the plugin won't be loaded.
- * The `params` is an object that contains the global configuration and the logger.
- *
- * @param {*} pluginConfigs the custom plugin section
- * @param {*} pluginOptions a set of options to initialize the plugin
- * @param {*} sanityCheck callback that check the shape that should fulfill the plugin
- * @param {*} prefix by default is verdaccio but can be override with config.server.pluginPrefix
- * @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware
- * @return {Array} list of plugins
- */
-function asyncLoadPlugin() {
-  return _asyncLoadPlugin.apply(this, arguments);
+* The plugin loader find recursively plugins, if one plugin fails is ignored and report the error to the logger.
+*
+* The loader follows the order:
+* - If the at the `config.yaml` file the  `plugins: ./plugins` is defined
+*   - If is absolute will use the provided path
+*   - If is relative, will use the base path of the config file. eg: /root/config.yaml the plugins folder should be
+*     hosted at /root/plugins
+* - The next step is find at the node_modules or global based on the `require` native algorithm.
+* - If the package is scoped eg: @scope/foo, try to load the package `@scope/foo`
+* - If the package is not scoped, will use the default prefix: verdaccio-foo ("verdaccio-theme-" prefix for theme ui plugins).
+* - If a custom prefix is provided, the verdaccio- is replaced by the config.server.pluginPrefix.
+*
+* The `sanityCheck` is the validation for the required methods to load the plugin, if the validation fails the plugin won't be loaded.
+* The `params` is an object that contains the global configuration and the logger.
+*
+* @param {*} pluginConfigs the custom plugin section
+* @param {*} pluginOptions a set of options to initialize the plugin
+* @param {*} sanityCheck callback that check the shape that should fulfill the plugin
+* @param {*} prefix by default is verdaccio but can be override with config.server.pluginPrefix
+* @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware
+* @return {Array} list of plugins
+*/
+async function asyncLoadPlugin(pluginConfigs = {}, pluginOptions, sanityCheck, legacyMergeConfigs = false, prefix = _verdaccio_core.PLUGIN_PREFIX, pluginCategory = "unknown") {
+	const logger = pluginOptions?.logger;
+	const pluginsIds = Object.keys(pluginConfigs || {});
+	const { config } = pluginOptions;
+	const plugins = [];
+	for (const pluginId of pluginsIds) {
+		debug$1(">>> looking for plugin %o", pluginId);
+		const isScoped = pluginId.startsWith("@") && pluginId.includes("/");
+		debug$1("is scoped plugin: %s", isScoped);
+		const pluginName = isScoped ? pluginId : `${prefix}-${pluginId}`;
+		debug$1("plugin package name %s", pluginName);
+		if (typeof config.plugins === "string") {
+			let pluginsPath = config.plugins;
+			debug$1("plugin path %s", pluginsPath);
+			if (!(0, node_path.isAbsolute)(pluginsPath)) {
+				if (typeof config.config_path === "string" && !config.configPath) logger.error("configPath is missing and the legacy config.config_path is not available for loading plugins");
+				if (!config.configPath) {
+					logger.error("config path property is required for loading plugins");
+					continue;
+				}
+				pluginsPath = (0, node_path.resolve)((0, node_path.join)((0, node_path.dirname)(config.configPath), pluginsPath));
+			}
+			logger.debug({ path: pluginsPath }, "plugins folder defined, loading plugins from @{path} ");
+			try {
+				await isDirectory(pluginsPath);
+				const externalFilePlugin = (0, node_path.resolve)(pluginsPath, pluginName);
+				let plugin = await require_utils.tryLoadAsync(externalFilePlugin, (a, b) => {
+					logger.error(a, b);
+				});
+				debug$1("external plugin %o", plugin);
+				if (plugin && require_utils.isValid(plugin)) {
+					plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);
+					if (!sanityCheck(plugin)) {
+						logger.error({ content: externalFilePlugin }, "@{content} doesn't look like a valid plugin");
+						continue;
+					}
+					debug$1(">>> plugin is running and passed sanity check");
+					plugins.push(plugin);
+					logger.info({
+						pluginName,
+						pluginCategory
+					}, "plugin @{pluginName} successfully loaded (@{pluginCategory})");
+					continue;
+				}
+			} catch (err) {
+				logger.warn({
+					err: err.message,
+					pluginsPath,
+					pluginName
+				}, "@{err} on loading plugins at @{pluginsPath} for @{pluginName}");
+			}
+		}
+		if (typeof pluginId === "string") {
+			let plugin = await require_utils.tryLoadAsync(pluginName, (a, b) => {
+				logger.error(a, b);
+			});
+			if (plugin && require_utils.isValid(plugin)) {
+				plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);
+				if (!sanityCheck(plugin)) {
+					logger.error({ pluginName }, "@{pluginName} doesn't look like a valid plugin");
+					continue;
+				}
+				debug$1(">>> plugin is running and passed sanity check");
+				plugins.push(plugin);
+				logger.info({
+					pluginName,
+					pluginCategory
+				}, "plugin @{pluginName} successfully loaded (@{pluginCategory})");
+				continue;
+			} else {
+				logger.error({ pluginName }, "package not found, try to install @{pluginName} with a package manager");
+				continue;
+			}
+		}
+	}
+	debug$1("%o plugins found: %o", pluginCategory, plugins.length);
+	return plugins;
 }
-function _asyncLoadPlugin() {
-  _asyncLoadPlugin = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2() {
-    var pluginConfigs,
-      pluginOptions,
-      sanityCheck,
-      legacyMergeConfigs,
-      prefix,
-      pluginCategory,
-      logger,
-      pluginsIds,
-      config,
-      plugins,
-      _i,
-      _pluginsIds,
-      pluginId,
-      isScoped,
-      pluginName,
-      pluginsPath,
-      pluginDir,
-      externalFilePlugin,
-      plugin,
-      _plugin,
-      _args2 = arguments,
-      _t;
-    return _regenerator().w(function (_context2) {
-      while (1) switch (_context2.p = _context2.n) {
-        case 0:
-          pluginConfigs = _args2.length > 0 && _args2[0] !== undefined ? _args2[0] : {};
-          pluginOptions = _args2.length > 1 ? _args2[1] : undefined;
-          sanityCheck = _args2.length > 2 ? _args2[2] : undefined;
-          legacyMergeConfigs = _args2.length > 3 && _args2[3] !== undefined ? _args2[3] : false;
-          prefix = _args2.length > 4 && _args2[4] !== undefined ? _args2[4] : _core.PLUGIN_PREFIX;
-          pluginCategory = _args2.length > 5 && _args2[5] !== undefined ? _args2[5] : 'unknown';
-          logger = pluginOptions === null || pluginOptions === void 0 ? void 0 : pluginOptions.logger;
-          pluginsIds = Object.keys(pluginConfigs || {});
-          config = pluginOptions.config;
-          plugins = [];
-          _i = 0, _pluginsIds = pluginsIds;
-        case 1:
-          if (!(_i < _pluginsIds.length)) {
-            _context2.n = 13;
-            break;
-          }
-          pluginId = _pluginsIds[_i];
-          debug('>>> looking for plugin %o', pluginId);
-          isScoped = pluginId.startsWith('@') && pluginId.includes('/');
-          debug('is scoped plugin: %s', isScoped);
-          pluginName = isScoped ? pluginId : "".concat(prefix, "-").concat(pluginId);
-          debug('plugin package name %s', pluginName);
-
-          // Try to load the plugin from the config.plugins path
-          if (!(typeof config.plugins === 'string')) {
-            _context2.n = 9;
-            break;
-          }
-          pluginsPath = config.plugins;
-          debug('plugin path %s', pluginsPath);
-          if ((0, _nodePath.isAbsolute)(pluginsPath)) {
-            _context2.n = 3;
-            break;
-          }
-          if (typeof config.config_path === 'string' && !config.configPath) {
-            logger.error('configPath is missing and the legacy config.config_path is not available for loading plugins');
-          }
-          if (config.configPath) {
-            _context2.n = 2;
-            break;
-          }
-          logger.error('config path property is required for loading plugins');
-          return _context2.a(3, 12);
-        case 2:
-          pluginsPath = (0, _nodePath.resolve)((0, _nodePath.join)((0, _nodePath.dirname)(config.configPath), pluginsPath));
-        case 3:
-          logger.debug({
-            path: pluginsPath
-          }, 'plugins folder defined, loading plugins from @{path} ');
-          // throws if is not a directory
-          _context2.p = 4;
-          _context2.n = 5;
-          return isDirectory(pluginsPath);
-        case 5:
-          pluginDir = pluginsPath;
-          externalFilePlugin = (0, _nodePath.resolve)(pluginDir, pluginName);
-          plugin = (0, _utils.tryLoad)(externalFilePlugin, function (a, b) {
-            logger.error(a, b);
-          });
-          debug('external plugin %o', plugin);
-          if (!(plugin && (0, _utils.isValid)(plugin))) {
-            _context2.n = 7;
-            break;
-          }
-          plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);
-          if (sanityCheck(plugin)) {
-            _context2.n = 6;
-            break;
-          }
-          logger.error({
-            content: externalFilePlugin
-          }, "@{content} doesn't look like a valid plugin");
-          return _context2.a(3, 12);
-        case 6:
-          debug('>>> plugin is running and passed sanity check');
-          plugins.push(plugin);
-          logger.info({
-            pluginName: pluginName,
-            pluginCategory: pluginCategory
-          }, 'plugin @{pluginName} successfully loaded (@{pluginCategory})');
-          return _context2.a(3, 12);
-        case 7:
-          _context2.n = 9;
-          break;
-        case 8:
-          _context2.p = 8;
-          _t = _context2.v;
-          logger.warn({
-            err: _t.message,
-            pluginsPath: pluginsPath,
-            pluginName: pluginName
-          }, '@{err} on loading plugins at @{pluginsPath} for @{pluginName}');
-        case 9:
-          if (!(typeof pluginId === 'string')) {
-            _context2.n = 12;
-            break;
-          }
-          _plugin = (0, _utils.tryLoad)(pluginName, function (a, b) {
-            logger.error(a, b);
-          });
-          if (!(_plugin && (0, _utils.isValid)(_plugin))) {
-            _context2.n = 11;
-            break;
-          }
-          _plugin = executePlugin(_plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);
-          if (sanityCheck(_plugin)) {
-            _context2.n = 10;
-            break;
-          }
-          logger.error({
-            pluginName: pluginName
-          }, "@{pluginName} doesn't look like a valid plugin");
-          return _context2.a(3, 12);
-        case 10:
-          debug('>>> plugin is running and passed sanity check');
-          plugins.push(_plugin);
-          logger.info({
-            pluginName: pluginName,
-            pluginCategory: pluginCategory
-          }, 'plugin @{pluginName} successfully loaded (@{pluginCategory})');
-          return _context2.a(3, 12);
-        case 11:
-          logger.error({
-            pluginName: pluginName
-          }, 'package not found, try to install @{pluginName} with a package manager');
-          return _context2.a(3, 12);
-        case 12:
-          _i++;
-          _context2.n = 1;
-          break;
-        case 13:
-          debug('%o plugins found: %o', pluginCategory, plugins.length);
-          return _context2.a(2, plugins);
-      }
-    }, _callee2, null, [[4, 8]]);
-  }));
-  return _asyncLoadPlugin.apply(this, arguments);
+function executePlugin(plugin, pluginConfig, pluginOptions, legacyMergeConfigs = false) {
+	if (legacyMergeConfigs) {
+		debug$1(">>> plugin merge config enabled");
+		const originalConfig = pluginOptions.config;
+		pluginConfig = mergeConfig(originalConfig, pluginConfig);
+	}
+	if (require_utils.isES6(plugin)) {
+		debug$1("plugin is ES6");
+		return new plugin.default(pluginConfig, pluginOptions);
+	} else {
+		debug$1("plugin is commonJS");
+		return plugin(pluginConfig, pluginOptions);
+	}
 }
-function executePlugin(plugin, pluginConfig, pluginOptions) {
-  var legacyMergeConfigs = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-  // this is a legacy support for plugins that are not using the new API
-  if (legacyMergeConfigs) {
-    debug('>>> plugin merge config enabled');
-    var originalConfig = pluginOptions.config;
-    pluginConfig = mergeConfig(originalConfig, pluginConfig);
-  }
-  if ((0, _utils.isES6)(plugin)) {
-    debug('plugin is ES6');
-    // @ts-expect-error no relevant for the code
+//#endregion
+exports.asyncLoadPlugin = asyncLoadPlugin;
 
-    return new plugin["default"](pluginConfig, pluginOptions);
-  } else {
-    debug('plugin is commonJS');
-    // @ts-expect-error improve this type
-    return plugin(pluginConfig, pluginOptions);
-  }
-}
 //# sourceMappingURL=plugin-async-loader.js.map

package/build/plugin-async-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-async-loader.js","names":["_debug","_interopRequireDefault","require","_lodash","_promises","_nodePath","_core","_utils","e","__esModule","_regenerator","t","r","Symbol","n","iterator","o","toStringTag","i","c","prototype","Generator","u","Object","create","_regeneratorDefine2","f","p","y","G","v","a","d","bind","length","l","TypeError","call","done","value","GeneratorFunction","GeneratorFunctionPrototype","getPrototypeOf","setPrototypeOf","__proto__","displayName","w","m","defineProperty","_regeneratorDefine","_invoke","enumerable","configurable","writable","asyncGeneratorStep","Promise","resolve","then","_asyncToGenerator","arguments","apply","_next","_throw","debug","buildDebug","isDirectory","_x","_isDirectory","_callee","pathFolder","stat","_context","lstat","mergeConfig","appConfig","pluginConfig","_","merge","asyncLoadPlugin","_asyncLoadPlugin","_callee2","pluginConfigs","pluginOptions","sanityCheck","legacyMergeConfigs","prefix","pluginCategory","logger","pluginsIds","config","plugins","_i","_pluginsIds","pluginId","isScoped","pluginName","pluginsPath","pluginDir","externalFilePlugin","plugin","_plugin","_args2","_t","_context2","undefined","PLUGIN_PREFIX","keys","startsWith","includes","concat","isAbsolute","config_path","configPath","error","join","dirname","path","tryLoad","b","isValid","executePlugin","content","push","info","warn","err","message","originalConfig","isES6"],"sources":["../src/plugin-async-loader.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport { lstat } from 'node:fs/promises';\nimport { dirname, isAbsolute, join, resolve } from 'node:path';\n\nimport type { pluginUtils } from '@verdaccio/core';\nimport { PLUGIN_PREFIX } from '@verdaccio/core';\n\nimport type { PluginType } from './utils';\nimport { isES6, isValid, tryLoad } from './utils';\n\nconst debug = buildDebug('verdaccio:plugin:loader:async');\n\nasync function isDirectory(pathFolder: string) {\n  const stat = await lstat(pathFolder);\n  return stat.isDirectory();\n}\n\nfunction mergeConfig(appConfig: unknown, pluginConfig: unknown) {\n  return _.merge({}, appConfig, pluginConfig);\n}\n\n// type Plugins<T> =\n//   | pluginUtils.Auth<T>\n//   | pluginUtils.Storage<T>\n//   | pluginUtils.ExpressMiddleware<T, unknown, unknown>;\n\n/**\n * The plugin loader find recursively plugins, if one plugin fails is ignored and report the error to the logger.\n *\n * The loader follows the order:\n * - If the at the `config.yaml` file the  `plugins: ./plugins` is defined\n *   - If is absolute will use the provided path\n *   - If is relative, will use the base path of the config file. eg: /root/config.yaml the plugins folder should be\n *     hosted at /root/plugins\n * - The next step is find at the node_modules or global based on the `require` native algorithm.\n * - If the package is scoped eg: @scope/foo, try to load the package `@scope/foo`\n * - If the package is not scoped, will use the default prefix: verdaccio-foo (\"verdaccio-theme-\" prefix for theme ui plugins).\n * - If a custom prefix is provided, the verdaccio- is replaced by the config.server.pluginPrefix.\n *\n * The `sanityCheck` is the validation for the required methods to load the plugin, if the validation fails the plugin won't be loaded.\n * The `params` is an object that contains the global configuration and the logger.\n *\n * @param {*} pluginConfigs the custom plugin section\n * @param {*} pluginOptions a set of options to initialize the plugin\n * @param {*} sanityCheck callback that check the shape that should fulfill the plugin\n * @param {*} prefix by default is verdaccio but can be override with config.server.pluginPrefix\n * @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware\n * @return {Array} list of plugins\n */\nexport async function asyncLoadPlugin<T extends pluginUtils.Plugin<T>>(\n  pluginConfigs: any = {},\n  pluginOptions: pluginUtils.PluginOptions,\n  sanityCheck: (plugin: PluginType<T>) => boolean,\n  legacyMergeConfigs: boolean = false,\n  prefix: string = PLUGIN_PREFIX,\n  pluginCategory: string = 'unknown'\n): Promise<PluginType<T>[]> {\n  const logger = pluginOptions?.logger;\n  const pluginsIds = Object.keys(pluginConfigs || {});\n  const { config } = pluginOptions;\n  const plugins: PluginType<T>[] = [];\n  for (const pluginId of pluginsIds) {\n    debug('>>> looking for plugin %o', pluginId);\n\n    const isScoped: boolean = pluginId.startsWith('@') && pluginId.includes('/');\n    debug('is scoped plugin: %s', isScoped);\n    const pluginName = isScoped ? pluginId : `${prefix}-${pluginId}`;\n    debug('plugin package name %s', pluginName);\n\n    // Try to load the plugin from the config.plugins path\n    if (typeof config.plugins === 'string') {\n      let pluginsPath = config.plugins;\n      debug('plugin path %s', pluginsPath);\n      if (!isAbsolute(pluginsPath)) {\n        if (typeof config.config_path === 'string' && !config.configPath) {\n          logger.error(\n            'configPath is missing and the legacy config.config_path is not available for loading plugins'\n          );\n        }\n\n        if (!config.configPath) {\n          logger.error('config path property is required for loading plugins');\n          continue;\n        }\n        pluginsPath = resolve(join(dirname(config.configPath), pluginsPath));\n      }\n      logger.debug({ path: pluginsPath }, 'plugins folder defined, loading plugins from @{path} ');\n      // throws if is not a directory\n      try {\n        await isDirectory(pluginsPath);\n        const pluginDir = pluginsPath;\n        const externalFilePlugin = resolve(pluginDir, pluginName);\n        let plugin = tryLoad<T>(externalFilePlugin, (a: any, b: any) => {\n          logger.error(a, b);\n        });\n        debug('external plugin %o', plugin);\n        if (plugin && isValid(plugin)) {\n          plugin = executePlugin(\n            plugin,\n            pluginConfigs[pluginId],\n            pluginOptions,\n            legacyMergeConfigs\n          );\n          if (!sanityCheck(plugin)) {\n            logger.error(\n              { content: externalFilePlugin },\n              \"@{content} doesn't look like a valid plugin\"\n            );\n            continue;\n          }\n          debug('>>> plugin is running and passed sanity check');\n          plugins.push(plugin);\n          logger.info(\n            { pluginName, pluginCategory },\n            'plugin @{pluginName} successfully loaded (@{pluginCategory})'\n          );\n          continue;\n        }\n      } catch (err: any) {\n        logger.warn(\n          { err: err.message, pluginsPath, pluginName },\n          '@{err} on loading plugins at @{pluginsPath} for @{pluginName}'\n        );\n      }\n    }\n\n    // Try to load the plugin from the node_modules or global based on the `require` native algorithm\n    if (typeof pluginId === 'string') {\n      let plugin = tryLoad<T>(pluginName, (a: any, b: any) => {\n        logger.error(a, b);\n      });\n      if (plugin && isValid(plugin)) {\n        plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);\n        if (!sanityCheck(plugin)) {\n          logger.error({ pluginName }, \"@{pluginName} doesn't look like a valid plugin\");\n          continue;\n        }\n        debug('>>> plugin is running and passed sanity check');\n        plugins.push(plugin);\n        logger.info(\n          { pluginName, pluginCategory },\n          'plugin @{pluginName} successfully loaded (@{pluginCategory})'\n        );\n        continue;\n      } else {\n        logger.error(\n          { pluginName },\n          'package not found, try to install @{pluginName} with a package manager'\n        );\n        continue;\n      }\n    }\n  }\n  debug('%o plugins found: %o', pluginCategory, plugins.length);\n  return plugins;\n}\n\nexport function executePlugin<T>(\n  plugin: PluginType<T>,\n  pluginConfig: unknown,\n  pluginOptions: pluginUtils.PluginOptions,\n  legacyMergeConfigs: boolean = false\n): PluginType<T> {\n  // this is a legacy support for plugins that are not using the new API\n  if (legacyMergeConfigs) {\n    debug('>>> plugin merge config enabled');\n    const originalConfig = pluginOptions.config;\n    pluginConfig = mergeConfig(originalConfig, pluginConfig);\n  }\n  if (isES6(plugin)) {\n    debug('plugin is ES6');\n    // @ts-expect-error no relevant for the code\n\n    return new plugin.default(pluginConfig, pluginOptions) as Plugin;\n  } else {\n    debug('plugin is commonJS');\n    // @ts-expect-error improve this type\n    return plugin(pluginConfig, pluginOptions) as PluginType<T>;\n  }\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AAGA,IAAAI,KAAA,GAAAJ,OAAA;AAGA,IAAAK,MAAA,GAAAL,OAAA;AAAkD,SAAAD,uBAAAO,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,SAAAE,aAAA,IARlD,uKAAAF,CAAA,EAAAG,CAAA,EAAAC,CAAA,wBAAAC,MAAA,GAAAA,MAAA,OAAAC,CAAA,GAAAF,CAAA,CAAAG,QAAA,kBAAAC,CAAA,GAAAJ,CAAA,CAAAK,WAAA,8BAAAC,EAAAN,CAAA,EAAAE,CAAA,EAAAE,CAAA,EAAAE,CAAA,QAAAC,CAAA,GAAAL,CAAA,IAAAA,CAAA,CAAAM,SAAA,YAAAC,SAAA,GAAAP,CAAA,GAAAO,SAAA,EAAAC,CAAA,GAAAC,MAAA,CAAAC,MAAA,CAAAL,CAAA,CAAAC,SAAA,UAAAK,mBAAA,CAAAH,CAAA,uBAAAV,CAAA,EAAAE,CAAA,EAAAE,CAAA,QAAAE,CAAA,EAAAC,CAAA,EAAAG,CAAA,EAAAI,CAAA,MAAAC,CAAA,GAAAX,CAAA,QAAAY,CAAA,OAAAC,CAAA,KAAAF,CAAA,KAAAb,CAAA,KAAAgB,CAAA,EAAAtB,CAAA,EAAAuB,CAAA,EAAAC,CAAA,EAAAN,CAAA,EAAAM,CAAA,CAAAC,IAAA,CAAAzB,CAAA,MAAAwB,CAAA,WAAAA,EAAArB,CAAA,EAAAC,CAAA,WAAAM,CAAA,GAAAP,CAAA,EAAAQ,CAAA,MAAAG,CAAA,GAAAd,CAAA,EAAAqB,CAAA,CAAAf,CAAA,GAAAF,CAAA,EAAAmB,CAAA,gBAAAC,EAAApB,CAAA,EAAAE,CAAA,SAAAK,CAAA,GAAAP,CAAA,EAAAU,CAAA,GAAAR,CAAA,EAAAH,CAAA,OAAAiB,CAAA,IAAAF,CAAA,KAAAV,CAAA,IAAAL,CAAA,GAAAgB,CAAA,CAAAO,MAAA,EAAAvB,CAAA,UAAAK,CAAA,EAAAE,CAAA,GAAAS,CAAA,CAAAhB,CAAA,GAAAqB,CAAA,GAAAH,CAAA,CAAAF,CAAA,EAAAQ,CAAA,GAAAjB,CAAA,KAAAN,CAAA,QAAAI,CAAA,GAAAmB,CAAA,KAAArB,CAAA,MAAAQ,CAAA,GAAAJ,CAAA,EAAAC,CAAA,GAAAD,CAAA,YAAAC,CAAA,WAAAD,CAAA,MAAAA,CAAA,MAAAV,CAAA,IAAAU,CAAA,OAAAc,CAAA,MAAAhB,CAAA,GAAAJ,CAAA,QAAAoB,CAAA,GAAAd,CAAA,QAAAC,CAAA,MAAAU,CAAA,CAAAC,CAAA,GAAAhB,CAAA,EAAAe,CAAA,CAAAf,CAAA,GAAAI,CAAA,OAAAc,CAAA,GAAAG,CAAA,KAAAnB,CAAA,GAAAJ,CAAA,QAAAM,CAAA,MAAAJ,CAAA,IAAAA,CAAA,GAAAqB,CAAA,MAAAjB,CAAA,MAAAN,CAAA,EAAAM,CAAA,MAAAJ,CAAA,EAAAe,CAAA,CAAAf,CAAA,GAAAqB,CAAA,EAAAhB,CAAA,cAAAH,CAAA,IAAAJ,CAAA,aAAAmB,CAAA,QAAAH,CAAA,OAAAd,CAAA,qBAAAE,CAAA,EAAAW,CAAA,EAAAQ,CAAA,QAAAT,CAAA,YAAAU,SAAA,uCAAAR,CAAA,UAAAD,CAAA,IAAAK,CAAA,CAAAL,CAAA,EAAAQ,CAAA,GAAAhB,CAAA,GAAAQ,CAAA,EAAAL,CAAA,GAAAa,CAAA,GAAAxB,CAAA,GAAAQ,CAAA,OAAAX,CAAA,GAAAc,CAAA,MAAAM,CAAA,KAAAV,CAAA,KAAAC,CAAA,GAAAA,CAAA,QAAAA,CAAA,SAAAU,CAAA,CAAAf,CAAA,QAAAkB,CAAA,CAAAb,CAAA,EAAAG,CAAA,KAAAO,CAAA,CAAAf,CAAA,GAAAQ,CAAA,GAAAO,CAAA,CAAAC,CAAA,GAAAR,CAAA,aAAAI,CAAA,MAAAR,CAAA,QAAAC,CAAA,KAAAH,CAAA,YAAAL,CAAA,GAAAO,CAAA,CAAAF,CAAA,WAAAL,CAAA,GAAAA,CAAA,CAAA0B,IAAA,CAAAnB,CAAA,EAAAI,CAAA,UAAAc,SAAA,2CAAAzB,CAAA,CAAA2B,IAAA,SAAA3B,CAAA,EAAAW,CAAA,GAAAX,CAAA,CAAA4B,KAAA,EAAApB,CAAA,SAAAA,CAAA,oBAAAA,CAAA,KAAAR,CAAA,GAAAO,CAAA,eAAAP,CAAA,CAAA0B,IAAA,CAAAnB,CAAA,GAAAC,CAAA,SAAAG,CAAA,GAAAc,SAAA,uCAAApB,CAAA,gBAAAG,CAAA,OAAAD,CAAA,GAAAV,CAAA,cAAAG,CAAA,IAAAiB,CAAA,GAAAC,CAAA,CAAAf,CAAA,QAAAQ,CAAA,GAAAV,CAAA,CAAAyB,IAAA,CAAAvB,CAAA,EAAAe,CAAA,OAAAE,CAAA,kBAAApB,CAAA,IAAAO,CAAA,GAAAV,CAAA,EAAAW,CAAA,MAAAG,CAAA,GAAAX,CAAA,cAAAe,CAAA,mBAAAa,KAAA,EAAA5B,CAAA,EAAA2B,IAAA,EAAAV,CAAA,SAAAhB,CAAA,EAAAI,CAAA,EAAAE,CAAA,QAAAI,CAAA,QAAAS,CAAA,gBAAAV,UAAA,cAAAmB,kBAAA,cAAAC,2BAAA,KAAA9B,CAAA,GAAAY,MAAA,CAAAmB,cAAA,MAAAvB,CAAA,MAAAL,CAAA,IAAAH,CAAA,CAAAA,CAAA,IAAAG,CAAA,SAAAW,mBAAA,CAAAd,CAAA,OAAAG,CAAA,iCAAAH,CAAA,GAAAW,CAAA,GAAAmB,0BAAA,CAAArB,SAAA,GAAAC,SAAA,CAAAD,SAAA,GAAAG,MAAA,CAAAC,MAAA,CAAAL,CAAA,YAAAO,EAAAlB,CAAA,WAAAe,MAAA,CAAAoB,cAAA,GAAApB,MAAA,CAAAoB,cAAA,CAAAnC,CAAA,EAAAiC,0BAAA,KAAAjC,CAAA,CAAAoC,SAAA,GAAAH,0BAAA,EAAAhB,mBAAA,CAAAjB,CAAA,EAAAQ,CAAA,yBAAAR,CAAA,CAAAY,SAAA,GAAAG,MAAA,CAAAC,MAAA,CAAAF,CAAA,GAAAd,CAAA,WAAAgC,iBAAA,CAAApB,SAAA,GAAAqB,0BAAA,EAAAhB,mBAAA,CAAAH,CAAA,iBAAAmB,0BAAA,GAAAhB,mBAAA,CAAAgB,0BAAA,iBAAAD,iBAAA,GAAAA,iBAAA,CAAAK,WAAA,wBAAApB,mBAAA,CAAAgB,0BAAA,EAAAzB,CAAA,wBAAAS,mBAAA,CAAAH,CAAA,GAAAG,mBAAA,CAAAH,CAAA,EAAAN,CAAA,gBAAAS,mBAAA,CAAAH,CAAA,EAAAR,CAAA,iCAAAW,mBAAA,CAAAH,CAAA,8DAAAZ,YAAA,YAAAA,aAAA,aAAAoC,CAAA,EAAA5B,CAAA,EAAA6B,CAAA,EAAArB,CAAA;AAAA,SAAAD,oBAAAjB,CAAA,EAAAI,CAAA,EAAAE,CAAA,EAAAH,CAAA,QAAAO,CAAA,GAAAK,MAAA,CAAAyB,cAAA,QAAA9B,CAAA,uBAAAV,CAAA,IAAAU,CAAA,QAAAO,mBAAA,YAAAwB,mBAAAzC,CAAA,EAAAI,CAAA,EAAAE,CAAA,EAAAH,CAAA,aAAAK,EAAAJ,CAAA,EAAAE,CAAA,IAAAW,mBAAA,CAAAjB,CAAA,EAAAI,CAAA,YAAAJ,CAAA,gBAAA0C,OAAA,CAAAtC,CAAA,EAAAE,CAAA,EAAAN,CAAA,SAAAI,CAAA,GAAAM,CAAA,GAAAA,CAAA,CAAAV,CAAA,EAAAI,CAAA,IAAA2B,KAAA,EAAAzB,CAAA,EAAAqC,UAAA,GAAAxC,CAAA,EAAAyC,YAAA,GAAAzC,CAAA,EAAA0C,QAAA,GAAA1C,CAAA,MAAAH,CAAA,CAAAI,CAAA,IAAAE,CAAA,IAAAE,CAAA,aAAAA,CAAA,cAAAA,CAAA,mBAAAS,mBAAA,CAAAjB,CAAA,EAAAI,CAAA,EAAAE,CAAA,EAAAH,CAAA;AAAA,SAAA2C,mBAAAxC,CAAA,EAAAH,CAAA,EAAAH,CAAA,EAAAI,CAAA,EAAAI,CAAA,EAAAe,CAAA,EAAAZ,CAAA,cAAAD,CAAA,GAAAJ,CAAA,CAAAiB,CAAA,EAAAZ,CAAA,GAAAG,CAAA,GAAAJ,CAAA,CAAAqB,KAAA,WAAAzB,CAAA,gBAAAN,CAAA,CAAAM,CAAA,KAAAI,CAAA,CAAAoB,IAAA,GAAA3B,CAAA,CAAAW,CAAA,IAAAiC,OAAA,CAAAC,OAAA,CAAAlC,CAAA,EAAAmC,IAAA,CAAA7C,CAAA,EAAAI,CAAA;AAAA,SAAA0C,kBAAA5C,CAAA,6BAAAH,CAAA,SAAAH,CAAA,GAAAmD,SAAA,aAAAJ,OAAA,WAAA3C,CAAA,EAAAI,CAAA,QAAAe,CAAA,GAAAjB,CAAA,CAAA8C,KAAA,CAAAjD,CAAA,EAAAH,CAAA,YAAAqD,MAAA/C,CAAA,IAAAwC,kBAAA,CAAAvB,CAAA,EAAAnB,CAAA,EAAAI,CAAA,EAAA6C,KAAA,EAAAC,MAAA,UAAAhD,CAAA,cAAAgD,OAAAhD,CAAA,IAAAwC,kBAAA,CAAAvB,CAAA,EAAAnB,CAAA,EAAAI,CAAA,EAAA6C,KAAA,EAAAC,MAAA,WAAAhD,CAAA,KAAA+C,KAAA;AAUA,IAAME,KAAK,GAAG,IAAAC,iBAAU,EAAC,+BAA+B,CAAC;AAAC,SAE3CC,WAAWA,CAAAC,EAAA;EAAA,OAAAC,YAAA,CAAAP,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAAQ,aAAA;EAAAA,YAAA,GAAAT,iBAAA,cAAAhD,YAAA,GAAAqC,CAAA,CAA1B,SAAAqB,QAA2BC,UAAkB;IAAA,IAAAC,IAAA;IAAA,OAAA5D,YAAA,GAAAoC,CAAA,WAAAyB,QAAA;MAAA,kBAAAA,QAAA,CAAAzD,CAAA;QAAA;UAAAyD,QAAA,CAAAzD,CAAA;UAAA,OACxB,IAAA0D,eAAK,EAACH,UAAU,CAAC;QAAA;UAA9BC,IAAI,GAAAC,QAAA,CAAAzC,CAAA;UAAA,OAAAyC,QAAA,CAAAxC,CAAA,IACHuC,IAAI,CAACL,WAAW,CAAC,CAAC;MAAA;IAAA,GAAAG,OAAA;EAAA,CAC1B;EAAA,OAAAD,YAAA,CAAAP,KAAA,OAAAD,SAAA;AAAA;AAED,SAASc,WAAWA,CAACC,SAAkB,EAAEC,YAAqB,EAAE;EAC9D,OAAOC,kBAAC,CAACC,KAAK,CAAC,CAAC,CAAC,EAAEH,SAAS,EAAEC,YAAY,CAAC;AAC7C;;AAEA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAtBA,SAuBsBG,eAAeA,CAAA;EAAA,OAAAC,gBAAA,CAAAnB,KAAA,OAAAD,SAAA;AAAA;AAAA,SAAAoB,iBAAA;EAAAA,gBAAA,GAAArB,iBAAA,cAAAhD,YAAA,GAAAqC,CAAA,CAA9B,SAAAiC,SAAA;IAAA,IAAAC,aAAA;MAAAC,aAAA;MAAAC,WAAA;MAAAC,kBAAA;MAAAC,MAAA;MAAAC,cAAA;MAAAC,MAAA;MAAAC,UAAA;MAAAC,MAAA;MAAAC,OAAA;MAAAC,EAAA;MAAAC,WAAA;MAAAC,QAAA;MAAAC,QAAA;MAAAC,UAAA;MAAAC,WAAA;MAAAC,SAAA;MAAAC,kBAAA;MAAAC,MAAA;MAAAC,OAAA;MAAAC,MAAA,GAAA1C,SAAA;MAAA2C,EAAA;IAAA,OAAA5F,YAAA,GAAAoC,CAAA,WAAAyD,SAAA;MAAA,kBAAAA,SAAA,CAAA5E,CAAA,GAAA4E,SAAA,CAAAzF,CAAA;QAAA;UACLmE,aAAkB,GAAAoB,MAAA,CAAAnE,MAAA,QAAAmE,MAAA,QAAAG,SAAA,GAAAH,MAAA,MAAG,CAAC,CAAC;UACvBnB,aAAwC,GAAAmB,MAAA,CAAAnE,MAAA,OAAAmE,MAAA,MAAAG,SAAA;UACxCrB,WAA+C,GAAAkB,MAAA,CAAAnE,MAAA,OAAAmE,MAAA,MAAAG,SAAA;UAC/CpB,kBAA2B,GAAAiB,MAAA,CAAAnE,MAAA,QAAAmE,MAAA,QAAAG,SAAA,GAAAH,MAAA,MAAG,KAAK;UACnChB,MAAc,GAAAgB,MAAA,CAAAnE,MAAA,QAAAmE,MAAA,QAAAG,SAAA,GAAAH,MAAA,MAAGI,mBAAa;UAC9BnB,cAAsB,GAAAe,MAAA,CAAAnE,MAAA,QAAAmE,MAAA,QAAAG,SAAA,GAAAH,MAAA,MAAG,SAAS;UAE5Bd,MAAM,GAAGL,aAAa,aAAbA,aAAa,uBAAbA,aAAa,CAAEK,MAAM;UAC9BC,UAAU,GAAGjE,MAAM,CAACmF,IAAI,CAACzB,aAAa,IAAI,CAAC,CAAC,CAAC;UAC3CQ,MAAM,GAAKP,aAAa,CAAxBO,MAAM;UACRC,OAAwB,GAAG,EAAE;UAAAC,EAAA,MAAAC,WAAA,GACZJ,UAAU;QAAA;UAAA,MAAAG,EAAA,GAAAC,WAAA,CAAA1D,MAAA;YAAAqE,SAAA,CAAAzF,CAAA;YAAA;UAAA;UAAtB+E,QAAQ,GAAAD,WAAA,CAAAD,EAAA;UACjB5B,KAAK,CAAC,2BAA2B,EAAE8B,QAAQ,CAAC;UAEtCC,QAAiB,GAAGD,QAAQ,CAACc,UAAU,CAAC,GAAG,CAAC,IAAId,QAAQ,CAACe,QAAQ,CAAC,GAAG,CAAC;UAC5E7C,KAAK,CAAC,sBAAsB,EAAE+B,QAAQ,CAAC;UACjCC,UAAU,GAAGD,QAAQ,GAAGD,QAAQ,MAAAgB,MAAA,CAAMxB,MAAM,OAAAwB,MAAA,CAAIhB,QAAQ,CAAE;UAChE9B,KAAK,CAAC,wBAAwB,EAAEgC,UAAU,CAAC;;UAE3C;UAAA,MACI,OAAON,MAAM,CAACC,OAAO,KAAK,QAAQ;YAAAa,SAAA,CAAAzF,CAAA;YAAA;UAAA;UAChCkF,WAAW,GAAGP,MAAM,CAACC,OAAO;UAChC3B,KAAK,CAAC,gBAAgB,EAAEiC,WAAW,CAAC;UAAC,IAChC,IAAAc,oBAAU,EAACd,WAAW,CAAC;YAAAO,SAAA,CAAAzF,CAAA;YAAA;UAAA;UAC1B,IAAI,OAAO2E,MAAM,CAACsB,WAAW,KAAK,QAAQ,IAAI,CAACtB,MAAM,CAACuB,UAAU,EAAE;YAChEzB,MAAM,CAAC0B,KAAK,CACV,8FACF,CAAC;UACH;UAAC,IAEIxB,MAAM,CAACuB,UAAU;YAAAT,SAAA,CAAAzF,CAAA;YAAA;UAAA;UACpByE,MAAM,CAAC0B,KAAK,CAAC,sDAAsD,CAAC;UAAC,OAAAV,SAAA,CAAAxE,CAAA;QAAA;UAGvEiE,WAAW,GAAG,IAAAxC,iBAAO,EAAC,IAAA0D,cAAI,EAAC,IAAAC,iBAAO,EAAC1B,MAAM,CAACuB,UAAU,CAAC,EAAEhB,WAAW,CAAC,CAAC;QAAC;UAEvET,MAAM,CAACxB,KAAK,CAAC;YAAEqD,IAAI,EAAEpB;UAAY,CAAC,EAAE,uDAAuD,CAAC;UAC5F;UAAAO,SAAA,CAAA5E,CAAA;UAAA4E,SAAA,CAAAzF,CAAA;UAAA,OAEQmD,WAAW,CAAC+B,WAAW,CAAC;QAAA;UACxBC,SAAS,GAAGD,WAAW;UACvBE,kBAAkB,GAAG,IAAA1C,iBAAO,EAACyC,SAAS,EAAEF,UAAU,CAAC;UACrDI,MAAM,GAAG,IAAAkB,cAAO,EAAInB,kBAAkB,EAAE,UAACnE,CAAM,EAAEuF,CAAM,EAAK;YAC9D/B,MAAM,CAAC0B,KAAK,CAAClF,CAAC,EAAEuF,CAAC,CAAC;UACpB,CAAC,CAAC;UACFvD,KAAK,CAAC,oBAAoB,EAAEoC,MAAM,CAAC;UAAC,MAChCA,MAAM,IAAI,IAAAoB,cAAO,EAACpB,MAAM,CAAC;YAAAI,SAAA,CAAAzF,CAAA;YAAA;UAAA;UAC3BqF,MAAM,GAAGqB,aAAa,CACpBrB,MAAM,EACNlB,aAAa,CAACY,QAAQ,CAAC,EACvBX,aAAa,EACbE,kBACF,CAAC;UAAC,IACGD,WAAW,CAACgB,MAAM,CAAC;YAAAI,SAAA,CAAAzF,CAAA;YAAA;UAAA;UACtByE,MAAM,CAAC0B,KAAK,CACV;YAAEQ,OAAO,EAAEvB;UAAmB,CAAC,EAC/B,6CACF,CAAC;UAAC,OAAAK,SAAA,CAAAxE,CAAA;QAAA;UAGJgC,KAAK,CAAC,+CAA+C,CAAC;UACtD2B,OAAO,CAACgC,IAAI,CAACvB,MAAM,CAAC;UACpBZ,MAAM,CAACoC,IAAI,CACT;YAAE5B,UAAU,EAAVA,UAAU;YAAET,cAAc,EAAdA;UAAe,CAAC,EAC9B,8DACF,CAAC;UAAC,OAAAiB,SAAA,CAAAxE,CAAA;QAAA;UAAAwE,SAAA,CAAAzF,CAAA;UAAA;QAAA;UAAAyF,SAAA,CAAA5E,CAAA;UAAA2E,EAAA,GAAAC,SAAA,CAAAzE,CAAA;UAIJyD,MAAM,CAACqC,IAAI,CACT;YAAEC,GAAG,EAAEvB,EAAA,CAAIwB,OAAO;YAAE9B,WAAW,EAAXA,WAAW;YAAED,UAAU,EAAVA;UAAW,CAAC,EAC7C,+DACF,CAAC;QAAC;UAAA,MAKF,OAAOF,QAAQ,KAAK,QAAQ;YAAAU,SAAA,CAAAzF,CAAA;YAAA;UAAA;UAC1BqF,OAAM,GAAG,IAAAkB,cAAO,EAAItB,UAAU,EAAE,UAAChE,CAAM,EAAEuF,CAAM,EAAK;YACtD/B,MAAM,CAAC0B,KAAK,CAAClF,CAAC,EAAEuF,CAAC,CAAC;UACpB,CAAC,CAAC;UAAA,MACEnB,OAAM,IAAI,IAAAoB,cAAO,EAACpB,OAAM,CAAC;YAAAI,SAAA,CAAAzF,CAAA;YAAA;UAAA;UAC3BqF,OAAM,GAAGqB,aAAa,CAACrB,OAAM,EAAElB,aAAa,CAACY,QAAQ,CAAC,EAAEX,aAAa,EAAEE,kBAAkB,CAAC;UAAC,IACtFD,WAAW,CAACgB,OAAM,CAAC;YAAAI,SAAA,CAAAzF,CAAA;YAAA;UAAA;UACtByE,MAAM,CAAC0B,KAAK,CAAC;YAAElB,UAAU,EAAVA;UAAW,CAAC,EAAE,gDAAgD,CAAC;UAAC,OAAAQ,SAAA,CAAAxE,CAAA;QAAA;UAGjFgC,KAAK,CAAC,+CAA+C,CAAC;UACtD2B,OAAO,CAACgC,IAAI,CAACvB,OAAM,CAAC;UACpBZ,MAAM,CAACoC,IAAI,CACT;YAAE5B,UAAU,EAAVA,UAAU;YAAET,cAAc,EAAdA;UAAe,CAAC,EAC9B,8DACF,CAAC;UAAC,OAAAiB,SAAA,CAAAxE,CAAA;QAAA;UAGFwD,MAAM,CAAC0B,KAAK,CACV;YAAElB,UAAU,EAAVA;UAAW,CAAC,EACd,wEACF,CAAC;UAAC,OAAAQ,SAAA,CAAAxE,CAAA;QAAA;UAAA4D,EAAA;UAAAY,SAAA,CAAAzF,CAAA;UAAA;QAAA;UAKRiD,KAAK,CAAC,sBAAsB,EAAEuB,cAAc,EAAEI,OAAO,CAACxD,MAAM,CAAC;UAAC,OAAAqE,SAAA,CAAAxE,CAAA,IACvD2D,OAAO;MAAA;IAAA,GAAAV,QAAA;EAAA,CACf;EAAA,OAAAD,gBAAA,CAAAnB,KAAA,OAAAD,SAAA;AAAA;AAEM,SAAS6D,aAAaA,CAC3BrB,MAAqB,EACrBxB,YAAqB,EACrBO,aAAwC,EAEzB;EAAA,IADfE,kBAA2B,GAAAzB,SAAA,CAAAzB,MAAA,QAAAyB,SAAA,QAAA6C,SAAA,GAAA7C,SAAA,MAAG,KAAK;EAEnC;EACA,IAAIyB,kBAAkB,EAAE;IACtBrB,KAAK,CAAC,iCAAiC,CAAC;IACxC,IAAMgE,cAAc,GAAG7C,aAAa,CAACO,MAAM;IAC3Cd,YAAY,GAAGF,WAAW,CAACsD,cAAc,EAAEpD,YAAY,CAAC;EAC1D;EACA,IAAI,IAAAqD,YAAK,EAAC7B,MAAM,CAAC,EAAE;IACjBpC,KAAK,CAAC,eAAe,CAAC;IACtB;;IAEA,OAAO,IAAIoC,MAAM,WAAQ,CAACxB,YAAY,EAAEO,aAAa,CAAC;EACxD,CAAC,MAAM;IACLnB,KAAK,CAAC,oBAAoB,CAAC;IAC3B;IACA,OAAOoC,MAAM,CAACxB,YAAY,EAAEO,aAAa,CAAC;EAC5C;AACF","ignoreList":[]}
+{"version":3,"file":"plugin-async-loader.js","names":[],"sources":["../src/plugin-async-loader.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport { lstat } from 'node:fs/promises';\nimport { dirname, isAbsolute, join, resolve } from 'node:path';\n\nimport type { pluginUtils } from '@verdaccio/core';\nimport { PLUGIN_PREFIX } from '@verdaccio/core';\n\nimport type { PluginType } from './utils';\nimport { isES6, isValid, tryLoadAsync } from './utils';\n\nconst debug = buildDebug('verdaccio:plugin:loader:async');\n\nasync function isDirectory(pathFolder: string) {\n  const stat = await lstat(pathFolder);\n  return stat.isDirectory();\n}\n\nfunction mergeConfig(appConfig: unknown, pluginConfig: unknown) {\n  return _.merge({}, appConfig, pluginConfig);\n}\n\n// type Plugins<T> =\n//   | pluginUtils.Auth<T>\n//   | pluginUtils.Storage<T>\n//   | pluginUtils.ExpressMiddleware<T, unknown, unknown>;\n\n/**\n * The plugin loader find recursively plugins, if one plugin fails is ignored and report the error to the logger.\n *\n * The loader follows the order:\n * - If the at the `config.yaml` file the  `plugins: ./plugins` is defined\n *   - If is absolute will use the provided path\n *   - If is relative, will use the base path of the config file. eg: /root/config.yaml the plugins folder should be\n *     hosted at /root/plugins\n * - The next step is find at the node_modules or global based on the `require` native algorithm.\n * - If the package is scoped eg: @scope/foo, try to load the package `@scope/foo`\n * - If the package is not scoped, will use the default prefix: verdaccio-foo (\"verdaccio-theme-\" prefix for theme ui plugins).\n * - If a custom prefix is provided, the verdaccio- is replaced by the config.server.pluginPrefix.\n *\n * The `sanityCheck` is the validation for the required methods to load the plugin, if the validation fails the plugin won't be loaded.\n * The `params` is an object that contains the global configuration and the logger.\n *\n * @param {*} pluginConfigs the custom plugin section\n * @param {*} pluginOptions a set of options to initialize the plugin\n * @param {*} sanityCheck callback that check the shape that should fulfill the plugin\n * @param {*} prefix by default is verdaccio but can be override with config.server.pluginPrefix\n * @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware\n * @return {Array} list of plugins\n */\nexport async function asyncLoadPlugin<T extends pluginUtils.Plugin<T>>(\n  pluginConfigs: any = {},\n  pluginOptions: pluginUtils.PluginOptions,\n  sanityCheck: (plugin: PluginType<T>) => boolean,\n  legacyMergeConfigs: boolean = false,\n  prefix: string = PLUGIN_PREFIX,\n  pluginCategory: string = 'unknown'\n): Promise<PluginType<T>[]> {\n  const logger = pluginOptions?.logger;\n  const pluginsIds = Object.keys(pluginConfigs || {});\n  const { config } = pluginOptions;\n  const plugins: PluginType<T>[] = [];\n  for (const pluginId of pluginsIds) {\n    debug('>>> looking for plugin %o', pluginId);\n\n    const isScoped: boolean = pluginId.startsWith('@') && pluginId.includes('/');\n    debug('is scoped plugin: %s', isScoped);\n    const pluginName = isScoped ? pluginId : `${prefix}-${pluginId}`;\n    debug('plugin package name %s', pluginName);\n\n    // Try to load the plugin from the config.plugins path\n    if (typeof config.plugins === 'string') {\n      let pluginsPath = config.plugins;\n      debug('plugin path %s', pluginsPath);\n      if (!isAbsolute(pluginsPath)) {\n        if (typeof config.config_path === 'string' && !config.configPath) {\n          logger.error(\n            'configPath is missing and the legacy config.config_path is not available for loading plugins'\n          );\n        }\n\n        if (!config.configPath) {\n          logger.error('config path property is required for loading plugins');\n          continue;\n        }\n        pluginsPath = resolve(join(dirname(config.configPath), pluginsPath));\n      }\n      logger.debug({ path: pluginsPath }, 'plugins folder defined, loading plugins from @{path} ');\n      // throws if is not a directory\n      try {\n        await isDirectory(pluginsPath);\n        const pluginDir = pluginsPath;\n        const externalFilePlugin = resolve(pluginDir, pluginName);\n        let plugin = await tryLoadAsync<T>(externalFilePlugin, (a: any, b: any) => {\n          logger.error(a, b);\n        });\n        debug('external plugin %o', plugin);\n        if (plugin && isValid(plugin)) {\n          plugin = executePlugin(\n            plugin,\n            pluginConfigs[pluginId],\n            pluginOptions,\n            legacyMergeConfigs\n          );\n          if (!sanityCheck(plugin)) {\n            logger.error(\n              { content: externalFilePlugin },\n              \"@{content} doesn't look like a valid plugin\"\n            );\n            continue;\n          }\n          debug('>>> plugin is running and passed sanity check');\n          plugins.push(plugin);\n          logger.info(\n            { pluginName, pluginCategory },\n            'plugin @{pluginName} successfully loaded (@{pluginCategory})'\n          );\n          continue;\n        }\n      } catch (err: any) {\n        logger.warn(\n          { err: err.message, pluginsPath, pluginName },\n          '@{err} on loading plugins at @{pluginsPath} for @{pluginName}'\n        );\n      }\n    }\n\n    // Try to load the plugin from the node_modules or global based on the `require` native algorithm\n    if (typeof pluginId === 'string') {\n      let plugin = await tryLoadAsync<T>(pluginName, (a: any, b: any) => {\n        logger.error(a, b);\n      });\n      if (plugin && isValid(plugin)) {\n        plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);\n        if (!sanityCheck(plugin)) {\n          logger.error({ pluginName }, \"@{pluginName} doesn't look like a valid plugin\");\n          continue;\n        }\n        debug('>>> plugin is running and passed sanity check');\n        plugins.push(plugin);\n        logger.info(\n          { pluginName, pluginCategory },\n          'plugin @{pluginName} successfully loaded (@{pluginCategory})'\n        );\n        continue;\n      } else {\n        logger.error(\n          { pluginName },\n          'package not found, try to install @{pluginName} with a package manager'\n        );\n        continue;\n      }\n    }\n  }\n  debug('%o plugins found: %o', pluginCategory, plugins.length);\n  return plugins;\n}\n\nexport function executePlugin<T>(\n  plugin: PluginType<T>,\n  pluginConfig: unknown,\n  pluginOptions: pluginUtils.PluginOptions,\n  legacyMergeConfigs: boolean = false\n): PluginType<T> {\n  // this is a legacy support for plugins that are not using the new API\n  if (legacyMergeConfigs) {\n    debug('>>> plugin merge config enabled');\n    const originalConfig = pluginOptions.config;\n    pluginConfig = mergeConfig(originalConfig, pluginConfig);\n  }\n  if (isES6(plugin)) {\n    debug('plugin is ES6');\n    // @ts-expect-error no relevant for the code\n\n    return new plugin.default(pluginConfig, pluginOptions) as Plugin;\n  } else {\n    debug('plugin is commonJS');\n    // @ts-expect-error improve this type\n    return plugin(pluginConfig, pluginOptions) as PluginType<T>;\n  }\n}\n"],"mappings":";;;;;;;;;;AAWA,IAAM,WAAA,GAAA,MAAA,SAAmB,+BAA+B;AAExD,eAAe,YAAY,YAAoB;CAE7C,QAAO,OAAA,GAAA,iBAAA,OADkB,UAAU,GACvB,YAAY;AAC1B;AAEA,SAAS,YAAY,WAAoB,cAAuB;CAC9D,OAAO,OAAA,QAAE,MAAM,CAAC,GAAG,WAAW,YAAY;AAC5C;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,eAAsB,gBACpB,gBAAqB,CAAC,GACtB,eACA,aACA,qBAA8B,OAC9B,SAAiB,gBAAA,eACjB,iBAAyB,WACC;CAC1B,MAAM,SAAS,eAAe;CAC9B,MAAM,aAAa,OAAO,KAAK,iBAAiB,CAAC,CAAC;CAClD,MAAM,EAAE,WAAW;CACnB,MAAM,UAA2B,CAAC;CAClC,KAAK,MAAM,YAAY,YAAY;EACjC,QAAM,6BAA6B,QAAQ;EAE3C,MAAM,WAAoB,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG;EAC3E,QAAM,wBAAwB,QAAQ;EACtC,MAAM,aAAa,WAAW,WAAW,GAAG,OAAO,GAAG;EACtD,QAAM,0BAA0B,UAAU;EAG1C,IAAI,OAAO,OAAO,YAAY,UAAU;GACtC,IAAI,cAAc,OAAO;GACzB,QAAM,kBAAkB,WAAW;GACnC,IAAI,EAAA,GAAA,UAAA,YAAY,WAAW,GAAG;IAC5B,IAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,YACpD,OAAO,MACL,8FACF;IAGF,IAAI,CAAC,OAAO,YAAY;KACtB,OAAO,MAAM,sDAAsD;KACnE;IACF;IACA,eAAA,GAAA,UAAA,UAAA,GAAA,UAAA,OAAA,GAAA,UAAA,SAAmC,OAAO,UAAU,GAAG,WAAW,CAAC;GACrE;GACA,OAAO,MAAM,EAAE,MAAM,YAAY,GAAG,uDAAuD;GAE3F,IAAI;IACF,MAAM,YAAY,WAAW;IAE7B,MAAM,sBAAA,GAAA,UAAA,SAA6B,aAAW,UAAU;IACxD,IAAI,SAAS,MAAM,cAAA,aAAgB,qBAAqB,GAAQ,MAAW;KACzE,OAAO,MAAM,GAAG,CAAC;IACnB,CAAC;IACD,QAAM,sBAAsB,MAAM;IAClC,IAAI,UAAU,cAAA,QAAQ,MAAM,GAAG;KAC7B,SAAS,cACP,QACA,cAAc,WACd,eACA,kBACF;KACA,IAAI,CAAC,YAAY,MAAM,GAAG;MACxB,OAAO,MACL,EAAE,SAAS,mBAAmB,GAC9B,6CACF;MACA;KACF;KACA,QAAM,+CAA+C;KACrD,QAAQ,KAAK,MAAM;KACnB,OAAO,KACL;MAAE;MAAY;KAAe,GAC7B,8DACF;KACA;IACF;GACF,SAAS,KAAU;IACjB,OAAO,KACL;KAAE,KAAK,IAAI;KAAS;KAAa;IAAW,GAC5C,+DACF;GACF;EACF;EAGA,IAAI,OAAO,aAAa,UAAU;GAChC,IAAI,SAAS,MAAM,cAAA,aAAgB,aAAa,GAAQ,MAAW;IACjE,OAAO,MAAM,GAAG,CAAC;GACnB,CAAC;GACD,IAAI,UAAU,cAAA,QAAQ,MAAM,GAAG;IAC7B,SAAS,cAAc,QAAQ,cAAc,WAAW,eAAe,kBAAkB;IACzF,IAAI,CAAC,YAAY,MAAM,GAAG;KACxB,OAAO,MAAM,EAAE,WAAW,GAAG,gDAAgD;KAC7E;IACF;IACA,QAAM,+CAA+C;IACrD,QAAQ,KAAK,MAAM;IACnB,OAAO,KACL;KAAE;KAAY;IAAe,GAC7B,8DACF;IACA;GACF,OAAO;IACL,OAAO,MACL,EAAE,WAAW,GACb,wEACF;IACA;GACF;EACF;CACF;CACA,QAAM,wBAAwB,gBAAgB,QAAQ,MAAM;CAC5D,OAAO;AACT;AAEA,SAAgB,cACd,QACA,cACA,eACA,qBAA8B,OACf;CAEf,IAAI,oBAAoB;EACtB,QAAM,iCAAiC;EACvC,MAAM,iBAAiB,cAAc;EACrC,eAAe,YAAY,gBAAgB,YAAY;CACzD;CACA,IAAI,cAAA,MAAM,MAAM,GAAG;EACjB,QAAM,eAAe;EAGrB,OAAO,IAAI,OAAO,QAAQ,cAAc,aAAa;CACvD,OAAO;EACL,QAAM,oBAAoB;EAE1B,OAAO,OAAO,cAAc,aAAa;CAC3C;AACF"}

package/build/plugin-async-loader.mjs

@@ -0,0 +1,133 @@
+import { isES6, isValid, tryLoadAsync } from "./utils.mjs";
+import buildDebug from "debug";
+import _ from "lodash";
+import { lstat } from "node:fs/promises";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+import { PLUGIN_PREFIX } from "@verdaccio/core";
+//#region src/plugin-async-loader.ts
+var debug = buildDebug("verdaccio:plugin:loader:async");
+async function isDirectory(pathFolder) {
+	return (await lstat(pathFolder)).isDirectory();
+}
+function mergeConfig(appConfig, pluginConfig) {
+	return _.merge({}, appConfig, pluginConfig);
+}
+/**
+* The plugin loader find recursively plugins, if one plugin fails is ignored and report the error to the logger.
+*
+* The loader follows the order:
+* - If the at the `config.yaml` file the  `plugins: ./plugins` is defined
+*   - If is absolute will use the provided path
+*   - If is relative, will use the base path of the config file. eg: /root/config.yaml the plugins folder should be
+*     hosted at /root/plugins
+* - The next step is find at the node_modules or global based on the `require` native algorithm.
+* - If the package is scoped eg: @scope/foo, try to load the package `@scope/foo`
+* - If the package is not scoped, will use the default prefix: verdaccio-foo ("verdaccio-theme-" prefix for theme ui plugins).
+* - If a custom prefix is provided, the verdaccio- is replaced by the config.server.pluginPrefix.
+*
+* The `sanityCheck` is the validation for the required methods to load the plugin, if the validation fails the plugin won't be loaded.
+* The `params` is an object that contains the global configuration and the logger.
+*
+* @param {*} pluginConfigs the custom plugin section
+* @param {*} pluginOptions a set of options to initialize the plugin
+* @param {*} sanityCheck callback that check the shape that should fulfill the plugin
+* @param {*} prefix by default is verdaccio but can be override with config.server.pluginPrefix
+* @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware
+* @return {Array} list of plugins
+*/
+async function asyncLoadPlugin(pluginConfigs = {}, pluginOptions, sanityCheck, legacyMergeConfigs = false, prefix = PLUGIN_PREFIX, pluginCategory = "unknown") {
+	const logger = pluginOptions?.logger;
+	const pluginsIds = Object.keys(pluginConfigs || {});
+	const { config } = pluginOptions;
+	const plugins = [];
+	for (const pluginId of pluginsIds) {
+		debug(">>> looking for plugin %o", pluginId);
+		const isScoped = pluginId.startsWith("@") && pluginId.includes("/");
+		debug("is scoped plugin: %s", isScoped);
+		const pluginName = isScoped ? pluginId : `${prefix}-${pluginId}`;
+		debug("plugin package name %s", pluginName);
+		if (typeof config.plugins === "string") {
+			let pluginsPath = config.plugins;
+			debug("plugin path %s", pluginsPath);
+			if (!isAbsolute(pluginsPath)) {
+				if (typeof config.config_path === "string" && !config.configPath) logger.error("configPath is missing and the legacy config.config_path is not available for loading plugins");
+				if (!config.configPath) {
+					logger.error("config path property is required for loading plugins");
+					continue;
+				}
+				pluginsPath = resolve(join(dirname(config.configPath), pluginsPath));
+			}
+			logger.debug({ path: pluginsPath }, "plugins folder defined, loading plugins from @{path} ");
+			try {
+				await isDirectory(pluginsPath);
+				const externalFilePlugin = resolve(pluginsPath, pluginName);
+				let plugin = await tryLoadAsync(externalFilePlugin, (a, b) => {
+					logger.error(a, b);
+				});
+				debug("external plugin %o", plugin);
+				if (plugin && isValid(plugin)) {
+					plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);
+					if (!sanityCheck(plugin)) {
+						logger.error({ content: externalFilePlugin }, "@{content} doesn't look like a valid plugin");
+						continue;
+					}
+					debug(">>> plugin is running and passed sanity check");
+					plugins.push(plugin);
+					logger.info({
+						pluginName,
+						pluginCategory
+					}, "plugin @{pluginName} successfully loaded (@{pluginCategory})");
+					continue;
+				}
+			} catch (err) {
+				logger.warn({
+					err: err.message,
+					pluginsPath,
+					pluginName
+				}, "@{err} on loading plugins at @{pluginsPath} for @{pluginName}");
+			}
+		}
+		if (typeof pluginId === "string") {
+			let plugin = await tryLoadAsync(pluginName, (a, b) => {
+				logger.error(a, b);
+			});
+			if (plugin && isValid(plugin)) {
+				plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);
+				if (!sanityCheck(plugin)) {
+					logger.error({ pluginName }, "@{pluginName} doesn't look like a valid plugin");
+					continue;
+				}
+				debug(">>> plugin is running and passed sanity check");
+				plugins.push(plugin);
+				logger.info({
+					pluginName,
+					pluginCategory
+				}, "plugin @{pluginName} successfully loaded (@{pluginCategory})");
+				continue;
+			} else {
+				logger.error({ pluginName }, "package not found, try to install @{pluginName} with a package manager");
+				continue;
+			}
+		}
+	}
+	debug("%o plugins found: %o", pluginCategory, plugins.length);
+	return plugins;
+}
+function executePlugin(plugin, pluginConfig, pluginOptions, legacyMergeConfigs = false) {
+	if (legacyMergeConfigs) {
+		debug(">>> plugin merge config enabled");
+		const originalConfig = pluginOptions.config;
+		pluginConfig = mergeConfig(originalConfig, pluginConfig);
+	}
+	if (isES6(plugin)) {
+		debug("plugin is ES6");
+		return new plugin.default(pluginConfig, pluginOptions);
+	} else {
+		debug("plugin is commonJS");
+		return plugin(pluginConfig, pluginOptions);
+	}
+}
+//#endregion
+export { asyncLoadPlugin };
+
+//# sourceMappingURL=plugin-async-loader.mjs.map

package/build/plugin-async-loader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-async-loader.mjs","names":[],"sources":["../src/plugin-async-loader.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport { lstat } from 'node:fs/promises';\nimport { dirname, isAbsolute, join, resolve } from 'node:path';\n\nimport type { pluginUtils } from '@verdaccio/core';\nimport { PLUGIN_PREFIX } from '@verdaccio/core';\n\nimport type { PluginType } from './utils';\nimport { isES6, isValid, tryLoadAsync } from './utils';\n\nconst debug = buildDebug('verdaccio:plugin:loader:async');\n\nasync function isDirectory(pathFolder: string) {\n  const stat = await lstat(pathFolder);\n  return stat.isDirectory();\n}\n\nfunction mergeConfig(appConfig: unknown, pluginConfig: unknown) {\n  return _.merge({}, appConfig, pluginConfig);\n}\n\n// type Plugins<T> =\n//   | pluginUtils.Auth<T>\n//   | pluginUtils.Storage<T>\n//   | pluginUtils.ExpressMiddleware<T, unknown, unknown>;\n\n/**\n * The plugin loader find recursively plugins, if one plugin fails is ignored and report the error to the logger.\n *\n * The loader follows the order:\n * - If the at the `config.yaml` file the  `plugins: ./plugins` is defined\n *   - If is absolute will use the provided path\n *   - If is relative, will use the base path of the config file. eg: /root/config.yaml the plugins folder should be\n *     hosted at /root/plugins\n * - The next step is find at the node_modules or global based on the `require` native algorithm.\n * - If the package is scoped eg: @scope/foo, try to load the package `@scope/foo`\n * - If the package is not scoped, will use the default prefix: verdaccio-foo (\"verdaccio-theme-\" prefix for theme ui plugins).\n * - If a custom prefix is provided, the verdaccio- is replaced by the config.server.pluginPrefix.\n *\n * The `sanityCheck` is the validation for the required methods to load the plugin, if the validation fails the plugin won't be loaded.\n * The `params` is an object that contains the global configuration and the logger.\n *\n * @param {*} pluginConfigs the custom plugin section\n * @param {*} pluginOptions a set of options to initialize the plugin\n * @param {*} sanityCheck callback that check the shape that should fulfill the plugin\n * @param {*} prefix by default is verdaccio but can be override with config.server.pluginPrefix\n * @param {*} pluginCategory the category of the plugin, eg: auth, storage, middleware\n * @return {Array} list of plugins\n */\nexport async function asyncLoadPlugin<T extends pluginUtils.Plugin<T>>(\n  pluginConfigs: any = {},\n  pluginOptions: pluginUtils.PluginOptions,\n  sanityCheck: (plugin: PluginType<T>) => boolean,\n  legacyMergeConfigs: boolean = false,\n  prefix: string = PLUGIN_PREFIX,\n  pluginCategory: string = 'unknown'\n): Promise<PluginType<T>[]> {\n  const logger = pluginOptions?.logger;\n  const pluginsIds = Object.keys(pluginConfigs || {});\n  const { config } = pluginOptions;\n  const plugins: PluginType<T>[] = [];\n  for (const pluginId of pluginsIds) {\n    debug('>>> looking for plugin %o', pluginId);\n\n    const isScoped: boolean = pluginId.startsWith('@') && pluginId.includes('/');\n    debug('is scoped plugin: %s', isScoped);\n    const pluginName = isScoped ? pluginId : `${prefix}-${pluginId}`;\n    debug('plugin package name %s', pluginName);\n\n    // Try to load the plugin from the config.plugins path\n    if (typeof config.plugins === 'string') {\n      let pluginsPath = config.plugins;\n      debug('plugin path %s', pluginsPath);\n      if (!isAbsolute(pluginsPath)) {\n        if (typeof config.config_path === 'string' && !config.configPath) {\n          logger.error(\n            'configPath is missing and the legacy config.config_path is not available for loading plugins'\n          );\n        }\n\n        if (!config.configPath) {\n          logger.error('config path property is required for loading plugins');\n          continue;\n        }\n        pluginsPath = resolve(join(dirname(config.configPath), pluginsPath));\n      }\n      logger.debug({ path: pluginsPath }, 'plugins folder defined, loading plugins from @{path} ');\n      // throws if is not a directory\n      try {\n        await isDirectory(pluginsPath);\n        const pluginDir = pluginsPath;\n        const externalFilePlugin = resolve(pluginDir, pluginName);\n        let plugin = await tryLoadAsync<T>(externalFilePlugin, (a: any, b: any) => {\n          logger.error(a, b);\n        });\n        debug('external plugin %o', plugin);\n        if (plugin && isValid(plugin)) {\n          plugin = executePlugin(\n            plugin,\n            pluginConfigs[pluginId],\n            pluginOptions,\n            legacyMergeConfigs\n          );\n          if (!sanityCheck(plugin)) {\n            logger.error(\n              { content: externalFilePlugin },\n              \"@{content} doesn't look like a valid plugin\"\n            );\n            continue;\n          }\n          debug('>>> plugin is running and passed sanity check');\n          plugins.push(plugin);\n          logger.info(\n            { pluginName, pluginCategory },\n            'plugin @{pluginName} successfully loaded (@{pluginCategory})'\n          );\n          continue;\n        }\n      } catch (err: any) {\n        logger.warn(\n          { err: err.message, pluginsPath, pluginName },\n          '@{err} on loading plugins at @{pluginsPath} for @{pluginName}'\n        );\n      }\n    }\n\n    // Try to load the plugin from the node_modules or global based on the `require` native algorithm\n    if (typeof pluginId === 'string') {\n      let plugin = await tryLoadAsync<T>(pluginName, (a: any, b: any) => {\n        logger.error(a, b);\n      });\n      if (plugin && isValid(plugin)) {\n        plugin = executePlugin(plugin, pluginConfigs[pluginId], pluginOptions, legacyMergeConfigs);\n        if (!sanityCheck(plugin)) {\n          logger.error({ pluginName }, \"@{pluginName} doesn't look like a valid plugin\");\n          continue;\n        }\n        debug('>>> plugin is running and passed sanity check');\n        plugins.push(plugin);\n        logger.info(\n          { pluginName, pluginCategory },\n          'plugin @{pluginName} successfully loaded (@{pluginCategory})'\n        );\n        continue;\n      } else {\n        logger.error(\n          { pluginName },\n          'package not found, try to install @{pluginName} with a package manager'\n        );\n        continue;\n      }\n    }\n  }\n  debug('%o plugins found: %o', pluginCategory, plugins.length);\n  return plugins;\n}\n\nexport function executePlugin<T>(\n  plugin: PluginType<T>,\n  pluginConfig: unknown,\n  pluginOptions: pluginUtils.PluginOptions,\n  legacyMergeConfigs: boolean = false\n): PluginType<T> {\n  // this is a legacy support for plugins that are not using the new API\n  if (legacyMergeConfigs) {\n    debug('>>> plugin merge config enabled');\n    const originalConfig = pluginOptions.config;\n    pluginConfig = mergeConfig(originalConfig, pluginConfig);\n  }\n  if (isES6(plugin)) {\n    debug('plugin is ES6');\n    // @ts-expect-error no relevant for the code\n\n    return new plugin.default(pluginConfig, pluginOptions) as Plugin;\n  } else {\n    debug('plugin is commonJS');\n    // @ts-expect-error improve this type\n    return plugin(pluginConfig, pluginOptions) as PluginType<T>;\n  }\n}\n"],"mappings":";;;;;;;AAWA,IAAM,QAAQ,WAAW,+BAA+B;AAExD,eAAe,YAAY,YAAoB;CAE7C,QAAO,MADY,MAAM,UAAU,GACvB,YAAY;AAC1B;AAEA,SAAS,YAAY,WAAoB,cAAuB;CAC9D,OAAO,EAAE,MAAM,CAAC,GAAG,WAAW,YAAY;AAC5C;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,eAAsB,gBACpB,gBAAqB,CAAC,GACtB,eACA,aACA,qBAA8B,OAC9B,SAAiB,eACjB,iBAAyB,WACC;CAC1B,MAAM,SAAS,eAAe;CAC9B,MAAM,aAAa,OAAO,KAAK,iBAAiB,CAAC,CAAC;CAClD,MAAM,EAAE,WAAW;CACnB,MAAM,UAA2B,CAAC;CAClC,KAAK,MAAM,YAAY,YAAY;EACjC,MAAM,6BAA6B,QAAQ;EAE3C,MAAM,WAAoB,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG;EAC3E,MAAM,wBAAwB,QAAQ;EACtC,MAAM,aAAa,WAAW,WAAW,GAAG,OAAO,GAAG;EACtD,MAAM,0BAA0B,UAAU;EAG1C,IAAI,OAAO,OAAO,YAAY,UAAU;GACtC,IAAI,cAAc,OAAO;GACzB,MAAM,kBAAkB,WAAW;GACnC,IAAI,CAAC,WAAW,WAAW,GAAG;IAC5B,IAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,YACpD,OAAO,MACL,8FACF;IAGF,IAAI,CAAC,OAAO,YAAY;KACtB,OAAO,MAAM,sDAAsD;KACnE;IACF;IACA,cAAc,QAAQ,KAAK,QAAQ,OAAO,UAAU,GAAG,WAAW,CAAC;GACrE;GACA,OAAO,MAAM,EAAE,MAAM,YAAY,GAAG,uDAAuD;GAE3F,IAAI;IACF,MAAM,YAAY,WAAW;IAE7B,MAAM,qBAAqB,QAAQ,aAAW,UAAU;IACxD,IAAI,SAAS,MAAM,aAAgB,qBAAqB,GAAQ,MAAW;KACzE,OAAO,MAAM,GAAG,CAAC;IACnB,CAAC;IACD,MAAM,sBAAsB,MAAM;IAClC,IAAI,UAAU,QAAQ,MAAM,GAAG;KAC7B,SAAS,cACP,QACA,cAAc,WACd,eACA,kBACF;KACA,IAAI,CAAC,YAAY,MAAM,GAAG;MACxB,OAAO,MACL,EAAE,SAAS,mBAAmB,GAC9B,6CACF;MACA;KACF;KACA,MAAM,+CAA+C;KACrD,QAAQ,KAAK,MAAM;KACnB,OAAO,KACL;MAAE;MAAY;KAAe,GAC7B,8DACF;KACA;IACF;GACF,SAAS,KAAU;IACjB,OAAO,KACL;KAAE,KAAK,IAAI;KAAS;KAAa;IAAW,GAC5C,+DACF;GACF;EACF;EAGA,IAAI,OAAO,aAAa,UAAU;GAChC,IAAI,SAAS,MAAM,aAAgB,aAAa,GAAQ,MAAW;IACjE,OAAO,MAAM,GAAG,CAAC;GACnB,CAAC;GACD,IAAI,UAAU,QAAQ,MAAM,GAAG;IAC7B,SAAS,cAAc,QAAQ,cAAc,WAAW,eAAe,kBAAkB;IACzF,IAAI,CAAC,YAAY,MAAM,GAAG;KACxB,OAAO,MAAM,EAAE,WAAW,GAAG,gDAAgD;KAC7E;IACF;IACA,MAAM,+CAA+C;IACrD,QAAQ,KAAK,MAAM;IACnB,OAAO,KACL;KAAE;KAAY;IAAe,GAC7B,8DACF;IACA;GACF,OAAO;IACL,OAAO,MACL,EAAE,WAAW,GACb,wEACF;IACA;GACF;EACF;CACF;CACA,MAAM,wBAAwB,gBAAgB,QAAQ,MAAM;CAC5D,OAAO;AACT;AAEA,SAAgB,cACd,QACA,cACA,eACA,qBAA8B,OACf;CAEf,IAAI,oBAAoB;EACtB,MAAM,iCAAiC;EACvC,MAAM,iBAAiB,cAAc;EACrC,eAAe,YAAY,gBAAgB,YAAY;CACzD;CACA,IAAI,MAAM,MAAM,GAAG;EACjB,MAAM,eAAe;EAGrB,OAAO,IAAI,OAAO,QAAQ,cAAc,aAAa;CACvD,OAAO;EACL,MAAM,oBAAoB;EAE1B,OAAO,OAAO,cAAc,aAAa;CAC3C;AACF"}

package/build/utils.d.ts

@@ -8,3 +8,10 @@ export declare function isES6<T>(plugin: PluginType<T>): boolean;
  * @return {Object}
  */
 export declare function tryLoad<T>(path: string, onError: any): PluginType<T> | null;
+/**
+ * Dynamically imports a module (supports ESM plugins).
+ * Falls back from require() to import() for ESM compatibility.
+ * @param {*} path the module's path
+ * @return {Object}
+ */
+export declare function tryLoadAsync<T>(path: string, onError: any): Promise<PluginType<T> | null>;

package/build/utils.js

@@ -1,50 +1,120 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.isES6 = isES6;
-exports.isValid = isValid;
-exports.tryLoad = tryLoad;
-var _debug = _interopRequireDefault(require("debug"));
-var _lodash = _interopRequireDefault(require("lodash"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-var debug = (0, _debug["default"])('verdaccio:plugin:loader:utils');
-var MODULE_NOT_FOUND = 'MODULE_NOT_FOUND';
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let lodash = require("lodash");
+lodash = require_runtime.__toESM(lodash);
+let node_path = require("node:path");
+let node_fs = require("node:fs");
+let node_module = require("node:module");
+let node_url = require("node:url");
+//#region src/utils.ts
+var debug$1 = (0, debug.default)("verdaccio:plugin:loader:utils");
+var MODULE_NOT_FOUND = "MODULE_NOT_FOUND";
+var ERR_REQUIRE_ESM = "ERR_REQUIRE_ESM";
+var ERR_REQUIRE_ASYNC_MODULE = "ERR_REQUIRE_ASYNC_MODULE";
+var requireModule = {}.url ? (0, node_module.createRequire)({}.url) : (0, node_module.createRequire)(__filename);
 function isValid(plugin) {
-  // @ts-expect-error default not relevant
-  return _lodash["default"].isFunction(plugin) || _lodash["default"].isFunction(plugin["default"]);
+	return lodash.default.isFunction(plugin) || lodash.default.isFunction(plugin.default);
 }
 function isES6(plugin) {
-  return Object.keys(plugin).includes('default');
+	return Object.keys(plugin).includes("default");
 }
-
 /**
- * Requires a module.
- * @param {*} path the module's path
- * @return {Object}
- */
+* Requires a module.
+* @param {*} path the module's path
+* @return {Object}
+*/
 function tryLoad(path, onError) {
-  try {
-    debug('loading plugin %s', path);
-    return require(path);
-  } catch (err) {
-    if (err.code === MODULE_NOT_FOUND) {
-      debug('"require" failed for plugin %s', path);
-      // If loading fails, because a dependency is missing,
-      // we want to log the error message and require stack
-      // to see where the missing dependency is.
-      var message = err.message.replace(/\\\\/g, '\\').split('\n');
-      if (!message[0].includes(path)) {
-        debug('%o', message[0]); // error message
-        debug('%o', message.slice(1)); // stack trace
-      }
-      return null;
-    }
-    onError({
-      err: err.msg
-    }, 'error loading plugin @{err}');
-    throw err;
-  }
+	try {
+		debug$1("loading plugin %s", path);
+		return requireModule(path);
+	} catch (err) {
+		if (err.code === MODULE_NOT_FOUND) {
+			debug$1("\"require\" failed for plugin %s", path);
+			const message = err.message.replace(/\\\\/g, "\\").split("\n");
+			if (!message[0].includes(path)) {
+				debug$1("%o", message[0]);
+				debug$1("%o", message.slice(1));
+				onError({ err: err.message }, "error loading plugin @{err}");
+				throw err;
+			}
+			return null;
+		}
+		if (err.code === ERR_REQUIRE_ESM || err.code === ERR_REQUIRE_ASYNC_MODULE) {
+			debug$1("\"require\" failed for ESM plugin %s, will try dynamic import", path);
+			return null;
+		}
+		onError({ err: err.message }, "error loading plugin @{err}");
+		throw err;
+	}
+}
+/**
+* Resolve the entry point for a directory-based plugin.
+* dynamic import() does not support directory imports, so we need to
+* find the actual file to import (via package.json "main"/"exports" or index.js).
+*/
+function resolveEntryPoint(dirPath) {
+	const pkgPath = (0, node_path.join)(dirPath, "package.json");
+	if ((0, node_fs.existsSync)(pkgPath)) try {
+		const pkg = JSON.parse((0, node_fs.readFileSync)(pkgPath, "utf-8"));
+		if (pkg.exports) {
+			const dotExport = pkg.exports["."] ?? pkg.exports;
+			if (typeof dotExport === "string") return (0, node_path.join)(dirPath, dotExport);
+			if (typeof dotExport?.import === "string") return (0, node_path.join)(dirPath, dotExport.import);
+			if (typeof dotExport?.import?.default === "string") return (0, node_path.join)(dirPath, dotExport.import.default);
+			if (typeof dotExport?.default === "string") return (0, node_path.join)(dirPath, dotExport.default);
+		}
+		if (pkg.module) return (0, node_path.join)(dirPath, pkg.module);
+		if (pkg.main) return (0, node_path.join)(dirPath, pkg.main);
+	} catch {}
+	return (0, node_path.join)(dirPath, "index.js");
 }
+/**
+* Dynamically imports a module (supports ESM plugins).
+* Falls back from require() to import() for ESM compatibility.
+* @param {*} path the module's path
+* @return {Object}
+*/
+async function tryLoadAsync(path, onError) {
+	try {
+		const cjsResult = tryLoad(path, onError);
+		if (cjsResult !== null) return cjsResult;
+	} catch (err) {
+		debug$1("require() threw a real load error for %s: %s", path, err.message);
+		throw err;
+	}
+	let importPath = path;
+	try {
+		if ((0, node_path.isAbsolute)(path) && ((0, node_fs.existsSync)((0, node_path.join)(path, "package.json")) || (0, node_fs.existsSync)((0, node_path.join)(path, "index.js")))) {
+			importPath = resolveEntryPoint(path);
+			debug$1("resolved ESM entry point: %s", importPath);
+		}
+		const importUrl = (0, node_path.isAbsolute)(importPath) ? (0, node_url.pathToFileURL)(importPath).href : importPath;
+		debug$1("trying dynamic import for plugin %s", importUrl);
+		const module = await import(importUrl);
+		debug$1("dynamic import succeeded for plugin %s", importUrl);
+		return module;
+	} catch (err) {
+		if (err.code === "ERR_UNSUPPORTED_DIR_IMPORT") {
+			debug$1("\"import\" failed for plugin %s", path);
+			return null;
+		}
+		if (err.code === MODULE_NOT_FOUND || err.code === "ERR_MODULE_NOT_FOUND") {
+			const missingRaw = /Cannot find (?:module|package) '([^']+)'/.exec(err.message)?.[1];
+			const missing = missingRaw?.startsWith("file://") ? (0, node_url.fileURLToPath)(missingRaw) : missingRaw;
+			if (missing === void 0 || missing === path || missing === importPath || missing.startsWith(path)) {
+				debug$1("\"import\" failed for plugin %s", path);
+				return null;
+			}
+			debug$1("plugin %s exists but its dependency %s is missing", path, missing);
+		}
+		onError({ err: err.message }, "error loading plugin @{err}");
+		throw err;
+	}
+}
+//#endregion
+exports.isES6 = isES6;
+exports.isValid = isValid;
+exports.tryLoadAsync = tryLoadAsync;
+
 //# sourceMappingURL=utils.js.map

package/build/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":["_debug","_interopRequireDefault","require","_lodash","e","__esModule","debug","buildDebug","MODULE_NOT_FOUND","isValid","plugin","_","isFunction","isES6","Object","keys","includes","tryLoad","path","onError","err","code","message","replace","split","slice","msg"],"sources":["../src/utils.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport type { pluginUtils } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:plugin:loader:utils');\nconst MODULE_NOT_FOUND = 'MODULE_NOT_FOUND';\n\nexport type PluginType<T> = T extends pluginUtils.Plugin<T> ? T : never;\n\nexport function isValid<T>(plugin: PluginType<T>): boolean {\n  // @ts-expect-error default not relevant\n  return _.isFunction(plugin) || _.isFunction(plugin.default);\n}\n\nexport function isES6<T>(plugin: PluginType<T>): boolean {\n  return Object.keys(plugin).includes('default');\n}\n\n/**\n * Requires a module.\n * @param {*} path the module's path\n * @return {Object}\n */\nexport function tryLoad<T>(path: string, onError: any): PluginType<T> | null {\n  try {\n    debug('loading plugin %s', path);\n    return require(path) as PluginType<T>;\n  } catch (err: any) {\n    if (err.code === MODULE_NOT_FOUND) {\n      debug('\"require\" failed for plugin %s', path);\n      // If loading fails, because a dependency is missing,\n      // we want to log the error message and require stack\n      // to see where the missing dependency is.\n      const message = err.message.replace(/\\\\\\\\/g, '\\\\').split('\\n');\n      if (!message[0].includes(path)) {\n        debug('%o', message[0]); // error message\n        debug('%o', message.slice(1)); // stack trace\n      }\n      return null;\n    }\n    onError({ err: err.msg }, 'error loading plugin @{err}');\n    throw err;\n  }\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAAuB,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAIvB,IAAME,KAAK,GAAG,IAAAC,iBAAU,EAAC,+BAA+B,CAAC;AACzD,IAAMC,gBAAgB,GAAG,kBAAkB;AAIpC,SAASC,OAAOA,CAAIC,MAAqB,EAAW;EACzD;EACA,OAAOC,kBAAC,CAACC,UAAU,CAACF,MAAM,CAAC,IAAIC,kBAAC,CAACC,UAAU,CAACF,MAAM,WAAQ,CAAC;AAC7D;AAEO,SAASG,KAAKA,CAAIH,MAAqB,EAAW;EACvD,OAAOI,MAAM,CAACC,IAAI,CAACL,MAAM,CAAC,CAACM,QAAQ,CAAC,SAAS,CAAC;AAChD;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASC,OAAOA,CAAIC,IAAY,EAAEC,OAAY,EAAwB;EAC3E,IAAI;IACFb,KAAK,CAAC,mBAAmB,EAAEY,IAAI,CAAC;IAChC,OAAOhB,OAAO,CAACgB,IAAI,CAAC;EACtB,CAAC,CAAC,OAAOE,GAAQ,EAAE;IACjB,IAAIA,GAAG,CAACC,IAAI,KAAKb,gBAAgB,EAAE;MACjCF,KAAK,CAAC,gCAAgC,EAAEY,IAAI,CAAC;MAC7C;MACA;MACA;MACA,IAAMI,OAAO,GAAGF,GAAG,CAACE,OAAO,CAACC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAACC,KAAK,CAAC,IAAI,CAAC;MAC9D,IAAI,CAACF,OAAO,CAAC,CAAC,CAAC,CAACN,QAAQ,CAACE,IAAI,CAAC,EAAE;QAC9BZ,KAAK,CAAC,IAAI,EAAEgB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzBhB,KAAK,CAAC,IAAI,EAAEgB,OAAO,CAACG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;MACjC;MACA,OAAO,IAAI;IACb;IACAN,OAAO,CAAC;MAAEC,GAAG,EAAEA,GAAG,CAACM;IAAI,CAAC,EAAE,6BAA6B,CAAC;IACxD,MAAMN,GAAG;EACX;AACF","ignoreList":[]}
+{"version":3,"file":"utils.js","names":[],"sources":["../src/utils.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { createRequire } from 'node:module';\nimport { isAbsolute, join } from 'node:path';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\n\nimport type { pluginUtils } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:plugin:loader:utils');\nconst MODULE_NOT_FOUND = 'MODULE_NOT_FOUND';\nconst ERR_REQUIRE_ESM = 'ERR_REQUIRE_ESM';\n// thrown by require(esm) when the module uses top-level await\nconst ERR_REQUIRE_ASYNC_MODULE = 'ERR_REQUIRE_ASYNC_MODULE';\n\n// the ESM build has no ambient require; create one so CJS plugins keep loading.\n// rolldown rewrites bare `require` to a throwing stub in the ESM output and\n// lowers `import.meta` to `{}` in the CJS output, so `import.meta.url` is only\n// truthy in the ESM build; module-scoped __filename covers the CJS build\n// (checking `typeof __filename`/`typeof require` instead is unsafe: node -e and\n// the REPL leak both as globals into ESM modules)\nconst requireModule = import.meta.url ? createRequire(import.meta.url) : createRequire(__filename);\n\nexport type PluginType<T> = T extends pluginUtils.Plugin<T> ? T : never;\n\nexport function isValid<T>(plugin: PluginType<T>): boolean {\n  // @ts-expect-error default not relevant\n  return _.isFunction(plugin) || _.isFunction(plugin.default);\n}\n\nexport function isES6<T>(plugin: PluginType<T>): boolean {\n  return Object.keys(plugin).includes('default');\n}\n\n/**\n * Requires a module.\n * @param {*} path the module's path\n * @return {Object}\n */\nexport function tryLoad<T>(path: string, onError: any): PluginType<T> | null {\n  try {\n    debug('loading plugin %s', path);\n    return requireModule(path) as PluginType<T>;\n  } catch (err: any) {\n    if (err.code === MODULE_NOT_FOUND) {\n      debug('\"require\" failed for plugin %s', path);\n      const message = err.message.replace(/\\\\\\\\/g, '\\\\').split('\\n');\n      if (!message[0].includes(path)) {\n        // the plugin itself was found but one of its own dependencies is\n        // missing: that is a real load error — reporting \"not found\" (and\n        // re-evaluating the plugin through the import() fallback) would mask\n        // the actual cause and run its side effects twice\n        debug('%o', message[0]); // error message\n        debug('%o', message.slice(1)); // stack trace\n        onError({ err: err.message }, 'error loading plugin @{err}');\n        throw err;\n      }\n      return null;\n    }\n    if (err.code === ERR_REQUIRE_ESM || err.code === ERR_REQUIRE_ASYNC_MODULE) {\n      debug('\"require\" failed for ESM plugin %s, will try dynamic import', path);\n      return null;\n    }\n    onError({ err: err.message }, 'error loading plugin @{err}');\n    throw err;\n  }\n}\n\n/**\n * Resolve the entry point for a directory-based plugin.\n * dynamic import() does not support directory imports, so we need to\n * find the actual file to import (via package.json \"main\"/\"exports\" or index.js).\n */\nfunction resolveEntryPoint(dirPath: string): string {\n  const pkgPath = join(dirPath, 'package.json');\n  if (existsSync(pkgPath)) {\n    try {\n      const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));\n      // Check exports first, then module, then main; only string entries are\n      // usable paths — condition objects without them fall through to the\n      // next field (otherwise we would return the directory itself, which\n      // dynamic import() rejects)\n      if (pkg.exports) {\n        // exports may use the sugar form with conditions at the top level\n        // instead of a '.' subpath map\n        const dotExport = pkg.exports['.'] ?? pkg.exports;\n        if (typeof dotExport === 'string') {\n          return join(dirPath, dotExport);\n        }\n        if (typeof dotExport?.import === 'string') {\n          return join(dirPath, dotExport.import);\n        }\n        if (typeof dotExport?.import?.default === 'string') {\n          return join(dirPath, dotExport.import.default);\n        }\n        if (typeof dotExport?.default === 'string') {\n          return join(dirPath, dotExport.default);\n        }\n      }\n      if (pkg.module) {\n        return join(dirPath, pkg.module);\n      }\n      if (pkg.main) {\n        return join(dirPath, pkg.main);\n      }\n    } catch {\n      // fall through to index.js\n    }\n  }\n  return join(dirPath, 'index.js');\n}\n\n/**\n * Dynamically imports a module (supports ESM plugins).\n * Falls back from require() to import() for ESM compatibility.\n * @param {*} path the module's path\n * @return {Object}\n */\nexport async function tryLoadAsync<T>(path: string, onError: any): Promise<PluginType<T> | null> {\n  // Try require first (handles CJS and will be fast)\n  try {\n    const cjsResult = tryLoad<T>(path, onError);\n    if (cjsResult !== null) {\n      return cjsResult;\n    }\n  } catch (err: any) {\n    // tryLoad() returns null for the not-found / ESM cases and only throws on\n    // a real load error (the plugin itself failed to evaluate); retrying via\n    // import() would run the plugin's side effects twice and mask the error\n    debug('require() threw a real load error for %s: %s', path, err.message);\n    throw err;\n  }\n\n  // Fallback to dynamic import for ESM modules\n  // import() doesn't support directory imports — resolve the entry point,\n  // also for manifest-less directory plugins that only ship an index.js\n  let importPath = path;\n  try {\n    if (\n      isAbsolute(path) &&\n      (existsSync(join(path, 'package.json')) || existsSync(join(path, 'index.js')))\n    ) {\n      importPath = resolveEntryPoint(path);\n      debug('resolved ESM entry point: %s', importPath);\n    }\n\n    // Convert to file URL for import() compatibility (isAbsolute also covers\n    // Windows paths like C:\\..., which startsWith('/') would miss)\n    const importUrl = isAbsolute(importPath) ? pathToFileURL(importPath).href : importPath;\n    debug('trying dynamic import for plugin %s', importUrl);\n    const module = await import(importUrl);\n    debug('dynamic import succeeded for plugin %s', importUrl);\n    return module as PluginType<T>;\n  } catch (err: any) {\n    if (err.code === 'ERR_UNSUPPORTED_DIR_IMPORT') {\n      // only the plugin path itself is ever imported as a directory\n      debug('\"import\" failed for plugin %s', path);\n      return null;\n    }\n    if (err.code === MODULE_NOT_FOUND || err.code === 'ERR_MODULE_NOT_FOUND') {\n      // \"not found\" may refer to the plugin itself (plugin not installed:\n      // return null) or to a missing dependency inside an existing plugin —\n      // a real load error that must surface, mirroring the require() path\n      // the missing specifier may be reported as a file:// URL\n      const missingRaw = /Cannot find (?:module|package) '([^']+)'/.exec(err.message)?.[1];\n      const missing = missingRaw?.startsWith('file://') ? fileURLToPath(missingRaw) : missingRaw;\n      const refersToPlugin =\n        missing === undefined ||\n        missing === path ||\n        missing === importPath ||\n        missing.startsWith(path);\n      if (refersToPlugin) {\n        debug('\"import\" failed for plugin %s', path);\n        return null;\n      }\n      debug('plugin %s exists but its dependency %s is missing', path, missing);\n    }\n    onError({ err: err.message }, 'error loading plugin @{err}');\n    throw err;\n  }\n}\n"],"mappings":";;;;;;;;;;AASA,IAAM,WAAA,GAAA,MAAA,SAAmB,+BAA+B;AACxD,IAAM,mBAAmB;AACzB,IAAM,kBAAkB;AAExB,IAAM,2BAA2B;AAQjC,IAAM,gBAAA,CAAA,EAA4B,OAAA,GAAA,YAAA,eAAA,CAAA,EAAgC,GAAG,KAAA,GAAA,YAAA,eAAkB,UAAU;AAIjG,SAAgB,QAAW,QAAgC;CAEzD,OAAO,OAAA,QAAE,WAAW,MAAM,KAAK,OAAA,QAAE,WAAW,OAAO,OAAO;AAC5D;AAEA,SAAgB,MAAS,QAAgC;CACvD,OAAO,OAAO,KAAK,MAAM,EAAE,SAAS,SAAS;AAC/C;;;;;;AAOA,SAAgB,QAAW,MAAc,SAAoC;CAC3E,IAAI;EACF,QAAM,qBAAqB,IAAI;EAC/B,OAAO,cAAc,IAAI;CAC3B,SAAS,KAAU;EACjB,IAAI,IAAI,SAAS,kBAAkB;GACjC,QAAM,oCAAkC,IAAI;GAC5C,MAAM,UAAU,IAAI,QAAQ,QAAQ,SAAS,IAAI,EAAE,MAAM,IAAI;GAC7D,IAAI,CAAC,QAAQ,GAAG,SAAS,IAAI,GAAG;IAK9B,QAAM,MAAM,QAAQ,EAAE;IACtB,QAAM,MAAM,QAAQ,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,KAAK,IAAI,QAAQ,GAAG,6BAA6B;IAC3D,MAAM;GACR;GACA,OAAO;EACT;EACA,IAAI,IAAI,SAAS,mBAAmB,IAAI,SAAS,0BAA0B;GACzE,QAAM,iEAA+D,IAAI;GACzE,OAAO;EACT;EACA,QAAQ,EAAE,KAAK,IAAI,QAAQ,GAAG,6BAA6B;EAC3D,MAAM;CACR;AACF;;;;;;AAOA,SAAS,kBAAkB,SAAyB;CAClD,MAAM,WAAA,GAAA,UAAA,MAAe,SAAS,cAAc;CAC5C,KAAA,GAAA,QAAA,YAAe,OAAO,GACpB,IAAI;EACF,MAAM,MAAM,KAAK,OAAA,GAAA,QAAA,cAAmB,SAAS,OAAO,CAAC;EAKrD,IAAI,IAAI,SAAS;GAGf,MAAM,YAAY,IAAI,QAAQ,QAAQ,IAAI;GAC1C,IAAI,OAAO,cAAc,UACvB,QAAA,GAAA,UAAA,MAAY,SAAS,SAAS;GAEhC,IAAI,OAAO,WAAW,WAAW,UAC/B,QAAA,GAAA,UAAA,MAAY,SAAS,UAAU,MAAM;GAEvC,IAAI,OAAO,WAAW,QAAQ,YAAY,UACxC,QAAA,GAAA,UAAA,MAAY,SAAS,UAAU,OAAO,OAAO;GAE/C,IAAI,OAAO,WAAW,YAAY,UAChC,QAAA,GAAA,UAAA,MAAY,SAAS,UAAU,OAAO;EAE1C;EACA,IAAI,IAAI,QACN,QAAA,GAAA,UAAA,MAAY,SAAS,IAAI,MAAM;EAEjC,IAAI,IAAI,MACN,QAAA,GAAA,UAAA,MAAY,SAAS,IAAI,IAAI;CAEjC,QAAQ,CAER;CAEF,QAAA,GAAA,UAAA,MAAY,SAAS,UAAU;AACjC;;;;;;;AAQA,eAAsB,aAAgB,MAAc,SAA6C;CAE/F,IAAI;EACF,MAAM,YAAY,QAAW,MAAM,OAAO;EAC1C,IAAI,cAAc,MAChB,OAAO;CAEX,SAAS,KAAU;EAIjB,QAAM,gDAAgD,MAAM,IAAI,OAAO;EACvE,MAAM;CACR;CAKA,IAAI,aAAa;CACjB,IAAI;EACF,KAAA,GAAA,UAAA,YACa,IAAI,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MACE,MAAM,cAAc,CAAC,MAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAqB,MAAM,UAAU,CAAC,IAC5E;GACA,aAAa,kBAAkB,IAAI;GACnC,QAAM,gCAAgC,UAAU;EAClD;EAIA,MAAM,aAAA,GAAA,UAAA,YAAuB,UAAU,KAAA,GAAA,SAAA,eAAkB,UAAU,EAAE,OAAO;EAC5E,QAAM,uCAAuC,SAAS;EACtD,MAAM,SAAS,MAAM,OAAO;EAC5B,QAAM,0CAA0C,SAAS;EACzD,OAAO;CACT,SAAS,KAAU;EACjB,IAAI,IAAI,SAAS,8BAA8B;GAE7C,QAAM,mCAAiC,IAAI;GAC3C,OAAO;EACT;EACA,IAAI,IAAI,SAAS,oBAAoB,IAAI,SAAS,wBAAwB;GAKxE,MAAM,aAAa,2CAA2C,KAAK,IAAI,OAAO,IAAI;GAClF,MAAM,UAAU,YAAY,WAAW,SAAS,KAAA,GAAA,SAAA,eAAkB,UAAU,IAAI;GAMhF,IAJE,YAAY,KAAA,KACZ,YAAY,QACZ,YAAY,cACZ,QAAQ,WAAW,IAAI,GACL;IAClB,QAAM,mCAAiC,IAAI;IAC3C,OAAO;GACT;GACA,QAAM,qDAAqD,MAAM,OAAO;EAC1E;EACA,QAAQ,EAAE,KAAK,IAAI,QAAQ,GAAG,6BAA6B;EAC3D,MAAM;CACR;AACF"}

package/build/utils.mjs

@@ -0,0 +1,115 @@
+import buildDebug from "debug";
+import _ from "lodash";
+import { isAbsolute, join } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { fileURLToPath, pathToFileURL } from "node:url";
+//#region src/utils.ts
+var debug = buildDebug("verdaccio:plugin:loader:utils");
+var MODULE_NOT_FOUND = "MODULE_NOT_FOUND";
+var ERR_REQUIRE_ESM = "ERR_REQUIRE_ESM";
+var ERR_REQUIRE_ASYNC_MODULE = "ERR_REQUIRE_ASYNC_MODULE";
+var requireModule = import.meta.url ? createRequire(import.meta.url) : createRequire(__filename);
+function isValid(plugin) {
+	return _.isFunction(plugin) || _.isFunction(plugin.default);
+}
+function isES6(plugin) {
+	return Object.keys(plugin).includes("default");
+}
+/**
+* Requires a module.
+* @param {*} path the module's path
+* @return {Object}
+*/
+function tryLoad(path, onError) {
+	try {
+		debug("loading plugin %s", path);
+		return requireModule(path);
+	} catch (err) {
+		if (err.code === MODULE_NOT_FOUND) {
+			debug("\"require\" failed for plugin %s", path);
+			const message = err.message.replace(/\\\\/g, "\\").split("\n");
+			if (!message[0].includes(path)) {
+				debug("%o", message[0]);
+				debug("%o", message.slice(1));
+				onError({ err: err.message }, "error loading plugin @{err}");
+				throw err;
+			}
+			return null;
+		}
+		if (err.code === ERR_REQUIRE_ESM || err.code === ERR_REQUIRE_ASYNC_MODULE) {
+			debug("\"require\" failed for ESM plugin %s, will try dynamic import", path);
+			return null;
+		}
+		onError({ err: err.message }, "error loading plugin @{err}");
+		throw err;
+	}
+}
+/**
+* Resolve the entry point for a directory-based plugin.
+* dynamic import() does not support directory imports, so we need to
+* find the actual file to import (via package.json "main"/"exports" or index.js).
+*/
+function resolveEntryPoint(dirPath) {
+	const pkgPath = join(dirPath, "package.json");
+	if (existsSync(pkgPath)) try {
+		const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+		if (pkg.exports) {
+			const dotExport = pkg.exports["."] ?? pkg.exports;
+			if (typeof dotExport === "string") return join(dirPath, dotExport);
+			if (typeof dotExport?.import === "string") return join(dirPath, dotExport.import);
+			if (typeof dotExport?.import?.default === "string") return join(dirPath, dotExport.import.default);
+			if (typeof dotExport?.default === "string") return join(dirPath, dotExport.default);
+		}
+		if (pkg.module) return join(dirPath, pkg.module);
+		if (pkg.main) return join(dirPath, pkg.main);
+	} catch {}
+	return join(dirPath, "index.js");
+}
+/**
+* Dynamically imports a module (supports ESM plugins).
+* Falls back from require() to import() for ESM compatibility.
+* @param {*} path the module's path
+* @return {Object}
+*/
+async function tryLoadAsync(path, onError) {
+	try {
+		const cjsResult = tryLoad(path, onError);
+		if (cjsResult !== null) return cjsResult;
+	} catch (err) {
+		debug("require() threw a real load error for %s: %s", path, err.message);
+		throw err;
+	}
+	let importPath = path;
+	try {
+		if (isAbsolute(path) && (existsSync(join(path, "package.json")) || existsSync(join(path, "index.js")))) {
+			importPath = resolveEntryPoint(path);
+			debug("resolved ESM entry point: %s", importPath);
+		}
+		const importUrl = isAbsolute(importPath) ? pathToFileURL(importPath).href : importPath;
+		debug("trying dynamic import for plugin %s", importUrl);
+		const module = await import(importUrl);
+		debug("dynamic import succeeded for plugin %s", importUrl);
+		return module;
+	} catch (err) {
+		if (err.code === "ERR_UNSUPPORTED_DIR_IMPORT") {
+			debug("\"import\" failed for plugin %s", path);
+			return null;
+		}
+		if (err.code === MODULE_NOT_FOUND || err.code === "ERR_MODULE_NOT_FOUND") {
+			const missingRaw = /Cannot find (?:module|package) '([^']+)'/.exec(err.message)?.[1];
+			const missing = missingRaw?.startsWith("file://") ? fileURLToPath(missingRaw) : missingRaw;
+			if (missing === void 0 || missing === path || missing === importPath || missing.startsWith(path)) {
+				debug("\"import\" failed for plugin %s", path);
+				return null;
+			}
+			debug("plugin %s exists but its dependency %s is missing", path, missing);
+		}
+		onError({ err: err.message }, "error loading plugin @{err}");
+		throw err;
+	}
+}
+//#endregion
+export { isES6, isValid, tryLoadAsync };
+
+//# sourceMappingURL=utils.mjs.map

package/build/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","names":[],"sources":["../src/utils.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { createRequire } from 'node:module';\nimport { isAbsolute, join } from 'node:path';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\n\nimport type { pluginUtils } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:plugin:loader:utils');\nconst MODULE_NOT_FOUND = 'MODULE_NOT_FOUND';\nconst ERR_REQUIRE_ESM = 'ERR_REQUIRE_ESM';\n// thrown by require(esm) when the module uses top-level await\nconst ERR_REQUIRE_ASYNC_MODULE = 'ERR_REQUIRE_ASYNC_MODULE';\n\n// the ESM build has no ambient require; create one so CJS plugins keep loading.\n// rolldown rewrites bare `require` to a throwing stub in the ESM output and\n// lowers `import.meta` to `{}` in the CJS output, so `import.meta.url` is only\n// truthy in the ESM build; module-scoped __filename covers the CJS build\n// (checking `typeof __filename`/`typeof require` instead is unsafe: node -e and\n// the REPL leak both as globals into ESM modules)\nconst requireModule = import.meta.url ? createRequire(import.meta.url) : createRequire(__filename);\n\nexport type PluginType<T> = T extends pluginUtils.Plugin<T> ? T : never;\n\nexport function isValid<T>(plugin: PluginType<T>): boolean {\n  // @ts-expect-error default not relevant\n  return _.isFunction(plugin) || _.isFunction(plugin.default);\n}\n\nexport function isES6<T>(plugin: PluginType<T>): boolean {\n  return Object.keys(plugin).includes('default');\n}\n\n/**\n * Requires a module.\n * @param {*} path the module's path\n * @return {Object}\n */\nexport function tryLoad<T>(path: string, onError: any): PluginType<T> | null {\n  try {\n    debug('loading plugin %s', path);\n    return requireModule(path) as PluginType<T>;\n  } catch (err: any) {\n    if (err.code === MODULE_NOT_FOUND) {\n      debug('\"require\" failed for plugin %s', path);\n      const message = err.message.replace(/\\\\\\\\/g, '\\\\').split('\\n');\n      if (!message[0].includes(path)) {\n        // the plugin itself was found but one of its own dependencies is\n        // missing: that is a real load error — reporting \"not found\" (and\n        // re-evaluating the plugin through the import() fallback) would mask\n        // the actual cause and run its side effects twice\n        debug('%o', message[0]); // error message\n        debug('%o', message.slice(1)); // stack trace\n        onError({ err: err.message }, 'error loading plugin @{err}');\n        throw err;\n      }\n      return null;\n    }\n    if (err.code === ERR_REQUIRE_ESM || err.code === ERR_REQUIRE_ASYNC_MODULE) {\n      debug('\"require\" failed for ESM plugin %s, will try dynamic import', path);\n      return null;\n    }\n    onError({ err: err.message }, 'error loading plugin @{err}');\n    throw err;\n  }\n}\n\n/**\n * Resolve the entry point for a directory-based plugin.\n * dynamic import() does not support directory imports, so we need to\n * find the actual file to import (via package.json \"main\"/\"exports\" or index.js).\n */\nfunction resolveEntryPoint(dirPath: string): string {\n  const pkgPath = join(dirPath, 'package.json');\n  if (existsSync(pkgPath)) {\n    try {\n      const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));\n      // Check exports first, then module, then main; only string entries are\n      // usable paths — condition objects without them fall through to the\n      // next field (otherwise we would return the directory itself, which\n      // dynamic import() rejects)\n      if (pkg.exports) {\n        // exports may use the sugar form with conditions at the top level\n        // instead of a '.' subpath map\n        const dotExport = pkg.exports['.'] ?? pkg.exports;\n        if (typeof dotExport === 'string') {\n          return join(dirPath, dotExport);\n        }\n        if (typeof dotExport?.import === 'string') {\n          return join(dirPath, dotExport.import);\n        }\n        if (typeof dotExport?.import?.default === 'string') {\n          return join(dirPath, dotExport.import.default);\n        }\n        if (typeof dotExport?.default === 'string') {\n          return join(dirPath, dotExport.default);\n        }\n      }\n      if (pkg.module) {\n        return join(dirPath, pkg.module);\n      }\n      if (pkg.main) {\n        return join(dirPath, pkg.main);\n      }\n    } catch {\n      // fall through to index.js\n    }\n  }\n  return join(dirPath, 'index.js');\n}\n\n/**\n * Dynamically imports a module (supports ESM plugins).\n * Falls back from require() to import() for ESM compatibility.\n * @param {*} path the module's path\n * @return {Object}\n */\nexport async function tryLoadAsync<T>(path: string, onError: any): Promise<PluginType<T> | null> {\n  // Try require first (handles CJS and will be fast)\n  try {\n    const cjsResult = tryLoad<T>(path, onError);\n    if (cjsResult !== null) {\n      return cjsResult;\n    }\n  } catch (err: any) {\n    // tryLoad() returns null for the not-found / ESM cases and only throws on\n    // a real load error (the plugin itself failed to evaluate); retrying via\n    // import() would run the plugin's side effects twice and mask the error\n    debug('require() threw a real load error for %s: %s', path, err.message);\n    throw err;\n  }\n\n  // Fallback to dynamic import for ESM modules\n  // import() doesn't support directory imports — resolve the entry point,\n  // also for manifest-less directory plugins that only ship an index.js\n  let importPath = path;\n  try {\n    if (\n      isAbsolute(path) &&\n      (existsSync(join(path, 'package.json')) || existsSync(join(path, 'index.js')))\n    ) {\n      importPath = resolveEntryPoint(path);\n      debug('resolved ESM entry point: %s', importPath);\n    }\n\n    // Convert to file URL for import() compatibility (isAbsolute also covers\n    // Windows paths like C:\\..., which startsWith('/') would miss)\n    const importUrl = isAbsolute(importPath) ? pathToFileURL(importPath).href : importPath;\n    debug('trying dynamic import for plugin %s', importUrl);\n    const module = await import(importUrl);\n    debug('dynamic import succeeded for plugin %s', importUrl);\n    return module as PluginType<T>;\n  } catch (err: any) {\n    if (err.code === 'ERR_UNSUPPORTED_DIR_IMPORT') {\n      // only the plugin path itself is ever imported as a directory\n      debug('\"import\" failed for plugin %s', path);\n      return null;\n    }\n    if (err.code === MODULE_NOT_FOUND || err.code === 'ERR_MODULE_NOT_FOUND') {\n      // \"not found\" may refer to the plugin itself (plugin not installed:\n      // return null) or to a missing dependency inside an existing plugin —\n      // a real load error that must surface, mirroring the require() path\n      // the missing specifier may be reported as a file:// URL\n      const missingRaw = /Cannot find (?:module|package) '([^']+)'/.exec(err.message)?.[1];\n      const missing = missingRaw?.startsWith('file://') ? fileURLToPath(missingRaw) : missingRaw;\n      const refersToPlugin =\n        missing === undefined ||\n        missing === path ||\n        missing === importPath ||\n        missing.startsWith(path);\n      if (refersToPlugin) {\n        debug('\"import\" failed for plugin %s', path);\n        return null;\n      }\n      debug('plugin %s exists but its dependency %s is missing', path, missing);\n    }\n    onError({ err: err.message }, 'error loading plugin @{err}');\n    throw err;\n  }\n}\n"],"mappings":";;;;;;;AASA,IAAM,QAAQ,WAAW,+BAA+B;AACxD,IAAM,mBAAmB;AACzB,IAAM,kBAAkB;AAExB,IAAM,2BAA2B;AAQjC,IAAM,gBAAgB,OAAO,KAAK,MAAM,cAAc,OAAO,KAAK,GAAG,IAAI,cAAc,UAAU;AAIjG,SAAgB,QAAW,QAAgC;CAEzD,OAAO,EAAE,WAAW,MAAM,KAAK,EAAE,WAAW,OAAO,OAAO;AAC5D;AAEA,SAAgB,MAAS,QAAgC;CACvD,OAAO,OAAO,KAAK,MAAM,EAAE,SAAS,SAAS;AAC/C;;;;;;AAOA,SAAgB,QAAW,MAAc,SAAoC;CAC3E,IAAI;EACF,MAAM,qBAAqB,IAAI;EAC/B,OAAO,cAAc,IAAI;CAC3B,SAAS,KAAU;EACjB,IAAI,IAAI,SAAS,kBAAkB;GACjC,MAAM,oCAAkC,IAAI;GAC5C,MAAM,UAAU,IAAI,QAAQ,QAAQ,SAAS,IAAI,EAAE,MAAM,IAAI;GAC7D,IAAI,CAAC,QAAQ,GAAG,SAAS,IAAI,GAAG;IAK9B,MAAM,MAAM,QAAQ,EAAE;IACtB,MAAM,MAAM,QAAQ,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,KAAK,IAAI,QAAQ,GAAG,6BAA6B;IAC3D,MAAM;GACR;GACA,OAAO;EACT;EACA,IAAI,IAAI,SAAS,mBAAmB,IAAI,SAAS,0BAA0B;GACzE,MAAM,iEAA+D,IAAI;GACzE,OAAO;EACT;EACA,QAAQ,EAAE,KAAK,IAAI,QAAQ,GAAG,6BAA6B;EAC3D,MAAM;CACR;AACF;;;;;;AAOA,SAAS,kBAAkB,SAAyB;CAClD,MAAM,UAAU,KAAK,SAAS,cAAc;CAC5C,IAAI,WAAW,OAAO,GACpB,IAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,SAAS,OAAO,CAAC;EAKrD,IAAI,IAAI,SAAS;GAGf,MAAM,YAAY,IAAI,QAAQ,QAAQ,IAAI;GAC1C,IAAI,OAAO,cAAc,UACvB,OAAO,KAAK,SAAS,SAAS;GAEhC,IAAI,OAAO,WAAW,WAAW,UAC/B,OAAO,KAAK,SAAS,UAAU,MAAM;GAEvC,IAAI,OAAO,WAAW,QAAQ,YAAY,UACxC,OAAO,KAAK,SAAS,UAAU,OAAO,OAAO;GAE/C,IAAI,OAAO,WAAW,YAAY,UAChC,OAAO,KAAK,SAAS,UAAU,OAAO;EAE1C;EACA,IAAI,IAAI,QACN,OAAO,KAAK,SAAS,IAAI,MAAM;EAEjC,IAAI,IAAI,MACN,OAAO,KAAK,SAAS,IAAI,IAAI;CAEjC,QAAQ,CAER;CAEF,OAAO,KAAK,SAAS,UAAU;AACjC;;;;;;;AAQA,eAAsB,aAAgB,MAAc,SAA6C;CAE/F,IAAI;EACF,MAAM,YAAY,QAAW,MAAM,OAAO;EAC1C,IAAI,cAAc,MAChB,OAAO;CAEX,SAAS,KAAU;EAIjB,MAAM,gDAAgD,MAAM,IAAI,OAAO;EACvE,MAAM;CACR;CAKA,IAAI,aAAa;CACjB,IAAI;EACF,IACE,WAAW,IAAI,MACd,WAAW,KAAK,MAAM,cAAc,CAAC,KAAK,WAAW,KAAK,MAAM,UAAU,CAAC,IAC5E;GACA,aAAa,kBAAkB,IAAI;GACnC,MAAM,gCAAgC,UAAU;EAClD;EAIA,MAAM,YAAY,WAAW,UAAU,IAAI,cAAc,UAAU,EAAE,OAAO;EAC5E,MAAM,uCAAuC,SAAS;EACtD,MAAM,SAAS,MAAM,OAAO;EAC5B,MAAM,0CAA0C,SAAS;EACzD,OAAO;CACT,SAAS,KAAU;EACjB,IAAI,IAAI,SAAS,8BAA8B;GAE7C,MAAM,mCAAiC,IAAI;GAC3C,OAAO;EACT;EACA,IAAI,IAAI,SAAS,oBAAoB,IAAI,SAAS,wBAAwB;GAKxE,MAAM,aAAa,2CAA2C,KAAK,IAAI,OAAO,IAAI;GAClF,MAAM,UAAU,YAAY,WAAW,SAAS,IAAI,cAAc,UAAU,IAAI;GAMhF,IAJE,YAAY,KAAA,KACZ,YAAY,QACZ,YAAY,cACZ,QAAQ,WAAW,IAAI,GACL;IAClB,MAAM,mCAAiC,IAAI;IAC3C,OAAO;GACT;GACA,MAAM,qDAAqD,MAAM,OAAO;EAC1E;EACA,QAAQ,EAAE,KAAK,IAAI,QAAQ,GAAG,6BAA6B;EAC3D,MAAM;CACR;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "8.0.5",
+  "version": "8.1.0",
   "description": "Verdaccio Loader Logic",
   "keywords": [
     "enterprise",
@@ -32,30 +32,43 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "main": "./build/index.js",
-  "types": "build/index.d.ts",
+  "module": "./build/index.mjs",
+  "types": "./build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./build/index.d.ts",
+        "default": "./build/index.mjs"
+      },
+      "require": {
+        "types": "./build/index.d.ts",
+        "default": "./build/index.js"
+      }
+    },
+    "./build/*": "./build/*"
+  },
   "dependencies": {
-    "@verdaccio/core": "8.1.4",
+    "@verdaccio/core": "8.2.0",
     "debug": "4.4.3",
     "lodash": "4.18.1"
   },
   "devDependencies": {
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
-    "@verdaccio/config": "8.1.4",
-    "@verdaccio/core": "8.1.4",
-    "@verdaccio/logger": "8.0.5",
+    "@verdaccio/config": "8.2.0",
+    "@verdaccio/core": "8.2.0",
+    "@verdaccio/logger": "8.1.0",
+    "vite": "8.0.16",
     "vitest": "4.1.2",
-    "verdaccio-auth-memory": "13.0.5"
+    "verdaccio-auth-memory": "13.1.0"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "scripts": {
     "clean": "rimraf ./build",
     "test": "vitest run",
     "type-check": "tsc --noEmit -p tsconfig.build.json",
-    "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
-    "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
-    "watch": "pnpm build:js -- --watch",
-    "build": "pnpm run build:js && pnpm run build:types"
+    "watch": "vite build --watch",
+    "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.build.json"
   }
 }

package/build/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["_pluginAsyncLoader","require"],"sources":["../src/index.ts"],"sourcesContent":["export { asyncLoadPlugin } from './plugin-async-loader';\n"],"mappings":";;;;;;;;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA","ignoreList":[]}