@verdaccio/middleware 9.0.0-next-9.28 → 9.0.0-next-9.30

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/build/index.js CHANGED
@@ -35,6 +35,7 @@ exports.PING_API_ENDPOINTS = require_api_urls.PING_API_ENDPOINTS;
35
35
  exports.PROFILE_API_ENDPOINTS = require_api_urls.PROFILE_API_ENDPOINTS;
36
36
  exports.PUBLISH_API_ENDPOINTS = require_api_urls.PUBLISH_API_ENDPOINTS;
37
37
  exports.SEARCH_API_ENDPOINTS = require_api_urls.SEARCH_API_ENDPOINTS;
38
+ exports.STAGE_API_ENDPOINTS = require_api_urls.STAGE_API_ENDPOINTS;
38
39
  exports.TOKEN_API_ENDPOINTS = require_api_urls.TOKEN_API_ENDPOINTS;
39
40
  exports.USER_API_ENDPOINTS = require_api_urls.USER_API_ENDPOINTS;
40
41
  exports.WebUrls = require_web_urls.WebUrls;
package/build/index.mjs CHANGED
@@ -20,5 +20,5 @@ import "./middlewares/web/index.mjs";
20
20
  import { errorReportingMiddleware, handleError } from "./middlewares/error.mjs";
21
21
  import { getRequestOptions } from "./middlewares/request-options.mjs";
22
22
  import { LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, log } from "./middlewares/log.mjs";
23
- import { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS } from "./middlewares/api_urls.mjs";
24
- export { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS, WebUrls, WebUrlsNamespace, allow, antiLoop, dotfiles, encodeScopePackage, enforceGeneratedTokenMetadata, errorReportingMiddleware, expectJson, final, getRequestOptions, handleError, log, makeURLrelative, match, media, rateLimit, registerBodyParser, renderWebMiddleware, setSecurityWebHeaders, userAgent, validateName, validatePackage, web_middleware_default as webMiddleware };
23
+ import { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, STAGE_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS } from "./middlewares/api_urls.mjs";
24
+ export { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, STAGE_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS, WebUrls, WebUrlsNamespace, allow, antiLoop, dotfiles, encodeScopePackage, enforceGeneratedTokenMetadata, errorReportingMiddleware, expectJson, final, getRequestOptions, handleError, log, makeURLrelative, match, media, rateLimit, registerBodyParser, renderWebMiddleware, setSecurityWebHeaders, userAgent, validateName, validatePackage, web_middleware_default as webMiddleware };
@@ -13,6 +13,39 @@ export declare enum PUBLISH_API_ENDPOINTS {
13
13
  publish_package = "/:package/-rev/:revision",
14
14
  remove_tarball = "/:package/-/:filename/-rev/:revision"
15
15
  }
16
+ /**
17
+ * Staged publish workflow (`npm stage`), matching the routes npmjs documents.
18
+ *
19
+ * | Method | Route | Command |
20
+ * | -------- | ------------------------------ | -------------------- |
21
+ * | `POST` | `/-/stage/package/:package` | `npm stage publish` |
22
+ * | `GET` | `/-/stage` | `npm stage list` |
23
+ * | `GET` | `/-/stage/:stageId` | `npm stage view` |
24
+ * | `GET` | `/-/stage/:stageId/tarball` | `npm stage download` |
25
+ * | `POST` | `/-/stage/:stageId/approve` | `npm stage approve` |
26
+ * | `DELETE` | `/-/stage/:stageId` | `npm stage reject` |
27
+ *
28
+ * `list` accepts `package`, `page` and `perPage` as query parameters. All the
29
+ * routes require authentication.
30
+ *
31
+ * The body of `stage_package` is the same packument a regular publish sends —
32
+ * `libnpmpublish` builds the payload once and only swaps method and route — so
33
+ * staging reuses every validation the publish path already performs.
34
+ *
35
+ * Two constraints on the shapes above:
36
+ *
37
+ * - `stage_package` must keep the literal `package` segment declared before the
38
+ * `:stageId` routes, otherwise they swallow it.
39
+ * - `:stageId` is constrained to a UUID, because the npm CLI validates the
40
+ * format client side before it ever calls the registry.
41
+ */
42
+ export declare enum STAGE_API_ENDPOINTS {
43
+ list = "/-/stage",
44
+ stage_package = "/-/stage/package/:package",
45
+ item = "/-/stage/:stageId",
46
+ approve = "/-/stage/:stageId/approve",
47
+ tarball = "/-/stage/:stageId/tarball"
48
+ }
16
49
  export declare enum PING_API_ENDPOINTS {
17
50
  ping = "/-/ping"
18
51
  }
@@ -17,6 +17,40 @@ var PUBLISH_API_ENDPOINTS = /* @__PURE__ */ function(PUBLISH_API_ENDPOINTS) {
17
17
  PUBLISH_API_ENDPOINTS["remove_tarball"] = "/:package/-/:filename/-rev/:revision";
18
18
  return PUBLISH_API_ENDPOINTS;
19
19
  }({});
20
+ /**
21
+ * Staged publish workflow (`npm stage`), matching the routes npmjs documents.
22
+ *
23
+ * | Method | Route | Command |
24
+ * | -------- | ------------------------------ | -------------------- |
25
+ * | `POST` | `/-/stage/package/:package` | `npm stage publish` |
26
+ * | `GET` | `/-/stage` | `npm stage list` |
27
+ * | `GET` | `/-/stage/:stageId` | `npm stage view` |
28
+ * | `GET` | `/-/stage/:stageId/tarball` | `npm stage download` |
29
+ * | `POST` | `/-/stage/:stageId/approve` | `npm stage approve` |
30
+ * | `DELETE` | `/-/stage/:stageId` | `npm stage reject` |
31
+ *
32
+ * `list` accepts `package`, `page` and `perPage` as query parameters. All the
33
+ * routes require authentication.
34
+ *
35
+ * The body of `stage_package` is the same packument a regular publish sends —
36
+ * `libnpmpublish` builds the payload once and only swaps method and route — so
37
+ * staging reuses every validation the publish path already performs.
38
+ *
39
+ * Two constraints on the shapes above:
40
+ *
41
+ * - `stage_package` must keep the literal `package` segment declared before the
42
+ * `:stageId` routes, otherwise they swallow it.
43
+ * - `:stageId` is constrained to a UUID, because the npm CLI validates the
44
+ * format client side before it ever calls the registry.
45
+ */
46
+ var STAGE_API_ENDPOINTS = /* @__PURE__ */ function(STAGE_API_ENDPOINTS) {
47
+ STAGE_API_ENDPOINTS["list"] = "/-/stage";
48
+ STAGE_API_ENDPOINTS["stage_package"] = "/-/stage/package/:package";
49
+ STAGE_API_ENDPOINTS["item"] = "/-/stage/:stageId";
50
+ STAGE_API_ENDPOINTS["approve"] = "/-/stage/:stageId/approve";
51
+ STAGE_API_ENDPOINTS["tarball"] = "/-/stage/:stageId/tarball";
52
+ return STAGE_API_ENDPOINTS;
53
+ }({});
20
54
  var PING_API_ENDPOINTS = /* @__PURE__ */ function(PING_API_ENDPOINTS) {
21
55
  PING_API_ENDPOINTS["ping"] = "/-/ping";
22
56
  return PING_API_ENDPOINTS;
@@ -57,6 +91,7 @@ exports.PING_API_ENDPOINTS = PING_API_ENDPOINTS;
57
91
  exports.PROFILE_API_ENDPOINTS = PROFILE_API_ENDPOINTS;
58
92
  exports.PUBLISH_API_ENDPOINTS = PUBLISH_API_ENDPOINTS;
59
93
  exports.SEARCH_API_ENDPOINTS = SEARCH_API_ENDPOINTS;
94
+ exports.STAGE_API_ENDPOINTS = STAGE_API_ENDPOINTS;
60
95
  exports.TOKEN_API_ENDPOINTS = TOKEN_API_ENDPOINTS;
61
96
  exports.USER_API_ENDPOINTS = USER_API_ENDPOINTS;
62
97
 
@@ -1 +1 @@
1
- {"version":3,"file":"api_urls.js","names":[],"sources":["../../src/middlewares/api_urls.ts"],"sourcesContent":["export enum USER_API_ENDPOINTS {\n whoami = '/-/whoami',\n get_user = '/-/user/:org_couchdb_user',\n add_user = '/-/user/:org_couchdb_user{/:_rev}{/:revision}',\n user_token = '/-/user/token/{*subject}',\n}\n\nexport enum SEARCH_API_ENDPOINTS {\n search = '/-/v1/search',\n deprecated_search = '/-/all{/:since}',\n}\n\nexport enum PUBLISH_API_ENDPOINTS {\n add_package = '/:package',\n publish_package = '/:package/-rev/:revision',\n remove_tarball = '/:package/-/:filename/-rev/:revision',\n}\n\nexport enum PING_API_ENDPOINTS {\n ping = '/-/ping',\n}\n\nexport enum PACKAGE_API_ENDPOINTS {\n get_package_by_version = '/:package{/:version}',\n get_package_tarball = '/:package/-/:filename',\n}\n\nexport enum DIST_TAGS_API_ENDPOINTS {\n tagging = '/:package/:tag',\n tagging_package = '/-/package/:package/dist-tags/:tag',\n get_dist_tags = '/-/package/:package/dist-tags',\n}\n\nexport enum PROFILE_API_ENDPOINTS {\n get_profile = '/-/npm/v1/user',\n}\n\nexport enum TOKEN_API_ENDPOINTS {\n get_tokens = '/-/npm/v1/tokens',\n delete_token = '/-/npm/v1/tokens/token/:tokenKey',\n}\n\nexport enum LOGIN_API_ENDPOINTS {\n login = '/-/v1/login',\n login_cli = '/-/v1/login_cli',\n login_cli_session = '/-/v1/login_cli/:sessionId',\n login_done = '/-/v1/done',\n login_done_session = '/-/v1/done/:sessionId',\n}\n"],"mappings":";AAAA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,YAAA;CACA,mBAAA,cAAA;CACA,mBAAA,cAAA;CACA,mBAAA,gBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,uBAAL,yBAAA,sBAAA;CACL,qBAAA,YAAA;CACA,qBAAA,uBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;CACA,sBAAA,qBAAA;CACA,sBAAA,oBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,UAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,4BAAA;CACA,sBAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,0BAAL,yBAAA,yBAAA;CACL,wBAAA,aAAA;CACA,wBAAA,qBAAA;CACA,wBAAA,mBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,gBAAA;CACA,oBAAA,kBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,WAAA;CACA,oBAAA,eAAA;CACA,oBAAA,uBAAA;CACA,oBAAA,gBAAA;CACA,oBAAA,wBAAA;;AACF,EAAA,CAAA,CAAA"}
1
+ {"version":3,"file":"api_urls.js","names":[],"sources":["../../src/middlewares/api_urls.ts"],"sourcesContent":["export enum USER_API_ENDPOINTS {\n whoami = '/-/whoami',\n get_user = '/-/user/:org_couchdb_user',\n add_user = '/-/user/:org_couchdb_user{/:_rev}{/:revision}',\n user_token = '/-/user/token/{*subject}',\n}\n\nexport enum SEARCH_API_ENDPOINTS {\n search = '/-/v1/search',\n deprecated_search = '/-/all{/:since}',\n}\n\nexport enum PUBLISH_API_ENDPOINTS {\n add_package = '/:package',\n publish_package = '/:package/-rev/:revision',\n remove_tarball = '/:package/-/:filename/-rev/:revision',\n}\n\n/**\n * Staged publish workflow (`npm stage`), matching the routes npmjs documents.\n *\n * | Method | Route | Command |\n * | -------- | ------------------------------ | -------------------- |\n * | `POST` | `/-/stage/package/:package` | `npm stage publish` |\n * | `GET` | `/-/stage` | `npm stage list` |\n * | `GET` | `/-/stage/:stageId` | `npm stage view` |\n * | `GET` | `/-/stage/:stageId/tarball` | `npm stage download` |\n * | `POST` | `/-/stage/:stageId/approve` | `npm stage approve` |\n * | `DELETE` | `/-/stage/:stageId` | `npm stage reject` |\n *\n * `list` accepts `package`, `page` and `perPage` as query parameters. All the\n * routes require authentication.\n *\n * The body of `stage_package` is the same packument a regular publish sends —\n * `libnpmpublish` builds the payload once and only swaps method and route — so\n * staging reuses every validation the publish path already performs.\n *\n * Two constraints on the shapes above:\n *\n * - `stage_package` must keep the literal `package` segment declared before the\n * `:stageId` routes, otherwise they swallow it.\n * - `:stageId` is constrained to a UUID, because the npm CLI validates the\n * format client side before it ever calls the registry.\n */\nexport enum STAGE_API_ENDPOINTS {\n list = '/-/stage',\n stage_package = '/-/stage/package/:package',\n item = '/-/stage/:stageId',\n approve = '/-/stage/:stageId/approve',\n tarball = '/-/stage/:stageId/tarball',\n}\n\nexport enum PING_API_ENDPOINTS {\n ping = '/-/ping',\n}\n\nexport enum PACKAGE_API_ENDPOINTS {\n get_package_by_version = '/:package{/:version}',\n get_package_tarball = '/:package/-/:filename',\n}\n\nexport enum DIST_TAGS_API_ENDPOINTS {\n tagging = '/:package/:tag',\n tagging_package = '/-/package/:package/dist-tags/:tag',\n get_dist_tags = '/-/package/:package/dist-tags',\n}\n\nexport enum PROFILE_API_ENDPOINTS {\n get_profile = '/-/npm/v1/user',\n}\n\nexport enum TOKEN_API_ENDPOINTS {\n get_tokens = '/-/npm/v1/tokens',\n delete_token = '/-/npm/v1/tokens/token/:tokenKey',\n}\n\nexport enum LOGIN_API_ENDPOINTS {\n login = '/-/v1/login',\n login_cli = '/-/v1/login_cli',\n login_cli_session = '/-/v1/login_cli/:sessionId',\n login_done = '/-/v1/done',\n login_done_session = '/-/v1/done/:sessionId',\n}\n"],"mappings":";AAAA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,YAAA;CACA,mBAAA,cAAA;CACA,mBAAA,cAAA;CACA,mBAAA,gBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,uBAAL,yBAAA,sBAAA;CACL,qBAAA,YAAA;CACA,qBAAA,uBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;CACA,sBAAA,qBAAA;CACA,sBAAA,oBAAA;;AACF,EAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,UAAA;CACA,oBAAA,mBAAA;CACA,oBAAA,UAAA;CACA,oBAAA,aAAA;CACA,oBAAA,aAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,UAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,4BAAA;CACA,sBAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,0BAAL,yBAAA,yBAAA;CACL,wBAAA,aAAA;CACA,wBAAA,qBAAA;CACA,wBAAA,mBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,gBAAA;CACA,oBAAA,kBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,WAAA;CACA,oBAAA,eAAA;CACA,oBAAA,uBAAA;CACA,oBAAA,gBAAA;CACA,oBAAA,wBAAA;;AACF,EAAA,CAAA,CAAA"}
@@ -17,6 +17,40 @@ var PUBLISH_API_ENDPOINTS = /* @__PURE__ */ function(PUBLISH_API_ENDPOINTS) {
17
17
  PUBLISH_API_ENDPOINTS["remove_tarball"] = "/:package/-/:filename/-rev/:revision";
18
18
  return PUBLISH_API_ENDPOINTS;
19
19
  }({});
20
+ /**
21
+ * Staged publish workflow (`npm stage`), matching the routes npmjs documents.
22
+ *
23
+ * | Method | Route | Command |
24
+ * | -------- | ------------------------------ | -------------------- |
25
+ * | `POST` | `/-/stage/package/:package` | `npm stage publish` |
26
+ * | `GET` | `/-/stage` | `npm stage list` |
27
+ * | `GET` | `/-/stage/:stageId` | `npm stage view` |
28
+ * | `GET` | `/-/stage/:stageId/tarball` | `npm stage download` |
29
+ * | `POST` | `/-/stage/:stageId/approve` | `npm stage approve` |
30
+ * | `DELETE` | `/-/stage/:stageId` | `npm stage reject` |
31
+ *
32
+ * `list` accepts `package`, `page` and `perPage` as query parameters. All the
33
+ * routes require authentication.
34
+ *
35
+ * The body of `stage_package` is the same packument a regular publish sends —
36
+ * `libnpmpublish` builds the payload once and only swaps method and route — so
37
+ * staging reuses every validation the publish path already performs.
38
+ *
39
+ * Two constraints on the shapes above:
40
+ *
41
+ * - `stage_package` must keep the literal `package` segment declared before the
42
+ * `:stageId` routes, otherwise they swallow it.
43
+ * - `:stageId` is constrained to a UUID, because the npm CLI validates the
44
+ * format client side before it ever calls the registry.
45
+ */
46
+ var STAGE_API_ENDPOINTS = /* @__PURE__ */ function(STAGE_API_ENDPOINTS) {
47
+ STAGE_API_ENDPOINTS["list"] = "/-/stage";
48
+ STAGE_API_ENDPOINTS["stage_package"] = "/-/stage/package/:package";
49
+ STAGE_API_ENDPOINTS["item"] = "/-/stage/:stageId";
50
+ STAGE_API_ENDPOINTS["approve"] = "/-/stage/:stageId/approve";
51
+ STAGE_API_ENDPOINTS["tarball"] = "/-/stage/:stageId/tarball";
52
+ return STAGE_API_ENDPOINTS;
53
+ }({});
20
54
  var PING_API_ENDPOINTS = /* @__PURE__ */ function(PING_API_ENDPOINTS) {
21
55
  PING_API_ENDPOINTS["ping"] = "/-/ping";
22
56
  return PING_API_ENDPOINTS;
@@ -50,6 +84,6 @@ var LOGIN_API_ENDPOINTS = /* @__PURE__ */ function(LOGIN_API_ENDPOINTS) {
50
84
  return LOGIN_API_ENDPOINTS;
51
85
  }({});
52
86
  //#endregion
53
- export { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS };
87
+ export { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, STAGE_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS };
54
88
 
55
89
  //# sourceMappingURL=api_urls.mjs.map
@@ -1 +1 @@
1
- {"version":3,"file":"api_urls.mjs","names":[],"sources":["../../src/middlewares/api_urls.ts"],"sourcesContent":["export enum USER_API_ENDPOINTS {\n whoami = '/-/whoami',\n get_user = '/-/user/:org_couchdb_user',\n add_user = '/-/user/:org_couchdb_user{/:_rev}{/:revision}',\n user_token = '/-/user/token/{*subject}',\n}\n\nexport enum SEARCH_API_ENDPOINTS {\n search = '/-/v1/search',\n deprecated_search = '/-/all{/:since}',\n}\n\nexport enum PUBLISH_API_ENDPOINTS {\n add_package = '/:package',\n publish_package = '/:package/-rev/:revision',\n remove_tarball = '/:package/-/:filename/-rev/:revision',\n}\n\nexport enum PING_API_ENDPOINTS {\n ping = '/-/ping',\n}\n\nexport enum PACKAGE_API_ENDPOINTS {\n get_package_by_version = '/:package{/:version}',\n get_package_tarball = '/:package/-/:filename',\n}\n\nexport enum DIST_TAGS_API_ENDPOINTS {\n tagging = '/:package/:tag',\n tagging_package = '/-/package/:package/dist-tags/:tag',\n get_dist_tags = '/-/package/:package/dist-tags',\n}\n\nexport enum PROFILE_API_ENDPOINTS {\n get_profile = '/-/npm/v1/user',\n}\n\nexport enum TOKEN_API_ENDPOINTS {\n get_tokens = '/-/npm/v1/tokens',\n delete_token = '/-/npm/v1/tokens/token/:tokenKey',\n}\n\nexport enum LOGIN_API_ENDPOINTS {\n login = '/-/v1/login',\n login_cli = '/-/v1/login_cli',\n login_cli_session = '/-/v1/login_cli/:sessionId',\n login_done = '/-/v1/done',\n login_done_session = '/-/v1/done/:sessionId',\n}\n"],"mappings":";AAAA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,YAAA;CACA,mBAAA,cAAA;CACA,mBAAA,cAAA;CACA,mBAAA,gBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,uBAAL,yBAAA,sBAAA;CACL,qBAAA,YAAA;CACA,qBAAA,uBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;CACA,sBAAA,qBAAA;CACA,sBAAA,oBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,UAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,4BAAA;CACA,sBAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,0BAAL,yBAAA,yBAAA;CACL,wBAAA,aAAA;CACA,wBAAA,qBAAA;CACA,wBAAA,mBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,gBAAA;CACA,oBAAA,kBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,WAAA;CACA,oBAAA,eAAA;CACA,oBAAA,uBAAA;CACA,oBAAA,gBAAA;CACA,oBAAA,wBAAA;;AACF,EAAA,CAAA,CAAA"}
1
+ {"version":3,"file":"api_urls.mjs","names":[],"sources":["../../src/middlewares/api_urls.ts"],"sourcesContent":["export enum USER_API_ENDPOINTS {\n whoami = '/-/whoami',\n get_user = '/-/user/:org_couchdb_user',\n add_user = '/-/user/:org_couchdb_user{/:_rev}{/:revision}',\n user_token = '/-/user/token/{*subject}',\n}\n\nexport enum SEARCH_API_ENDPOINTS {\n search = '/-/v1/search',\n deprecated_search = '/-/all{/:since}',\n}\n\nexport enum PUBLISH_API_ENDPOINTS {\n add_package = '/:package',\n publish_package = '/:package/-rev/:revision',\n remove_tarball = '/:package/-/:filename/-rev/:revision',\n}\n\n/**\n * Staged publish workflow (`npm stage`), matching the routes npmjs documents.\n *\n * | Method | Route | Command |\n * | -------- | ------------------------------ | -------------------- |\n * | `POST` | `/-/stage/package/:package` | `npm stage publish` |\n * | `GET` | `/-/stage` | `npm stage list` |\n * | `GET` | `/-/stage/:stageId` | `npm stage view` |\n * | `GET` | `/-/stage/:stageId/tarball` | `npm stage download` |\n * | `POST` | `/-/stage/:stageId/approve` | `npm stage approve` |\n * | `DELETE` | `/-/stage/:stageId` | `npm stage reject` |\n *\n * `list` accepts `package`, `page` and `perPage` as query parameters. All the\n * routes require authentication.\n *\n * The body of `stage_package` is the same packument a regular publish sends —\n * `libnpmpublish` builds the payload once and only swaps method and route — so\n * staging reuses every validation the publish path already performs.\n *\n * Two constraints on the shapes above:\n *\n * - `stage_package` must keep the literal `package` segment declared before the\n * `:stageId` routes, otherwise they swallow it.\n * - `:stageId` is constrained to a UUID, because the npm CLI validates the\n * format client side before it ever calls the registry.\n */\nexport enum STAGE_API_ENDPOINTS {\n list = '/-/stage',\n stage_package = '/-/stage/package/:package',\n item = '/-/stage/:stageId',\n approve = '/-/stage/:stageId/approve',\n tarball = '/-/stage/:stageId/tarball',\n}\n\nexport enum PING_API_ENDPOINTS {\n ping = '/-/ping',\n}\n\nexport enum PACKAGE_API_ENDPOINTS {\n get_package_by_version = '/:package{/:version}',\n get_package_tarball = '/:package/-/:filename',\n}\n\nexport enum DIST_TAGS_API_ENDPOINTS {\n tagging = '/:package/:tag',\n tagging_package = '/-/package/:package/dist-tags/:tag',\n get_dist_tags = '/-/package/:package/dist-tags',\n}\n\nexport enum PROFILE_API_ENDPOINTS {\n get_profile = '/-/npm/v1/user',\n}\n\nexport enum TOKEN_API_ENDPOINTS {\n get_tokens = '/-/npm/v1/tokens',\n delete_token = '/-/npm/v1/tokens/token/:tokenKey',\n}\n\nexport enum LOGIN_API_ENDPOINTS {\n login = '/-/v1/login',\n login_cli = '/-/v1/login_cli',\n login_cli_session = '/-/v1/login_cli/:sessionId',\n login_done = '/-/v1/done',\n login_done_session = '/-/v1/done/:sessionId',\n}\n"],"mappings":";AAAA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,YAAA;CACA,mBAAA,cAAA;CACA,mBAAA,cAAA;CACA,mBAAA,gBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,uBAAL,yBAAA,sBAAA;CACL,qBAAA,YAAA;CACA,qBAAA,uBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;CACA,sBAAA,qBAAA;CACA,sBAAA,oBAAA;;AACF,EAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,UAAA;CACA,oBAAA,mBAAA;CACA,oBAAA,UAAA;CACA,oBAAA,aAAA;CACA,oBAAA,aAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,qBAAL,yBAAA,oBAAA;CACL,mBAAA,UAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,4BAAA;CACA,sBAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,0BAAL,yBAAA,yBAAA;CACL,wBAAA,aAAA;CACA,wBAAA,qBAAA;CACA,wBAAA,mBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,wBAAL,yBAAA,uBAAA;CACL,sBAAA,iBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,gBAAA;CACA,oBAAA,kBAAA;;AACF,EAAA,CAAA,CAAA;AAEA,IAAY,sBAAL,yBAAA,qBAAA;CACL,oBAAA,WAAA;CACA,oBAAA,eAAA;CACA,oBAAA,uBAAA;CACA,oBAAA,gBAAA;CACA,oBAAA,wBAAA;;AACF,EAAA,CAAA,CAAA"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@verdaccio/middleware",
3
- "version": "9.0.0-next-9.28",
3
+ "version": "9.0.0-next-9.30",
4
4
  "description": "Verdaccio Express Middleware",
5
5
  "main": "./build/index.js",
6
6
  "types": "build/index.d.ts",
@@ -33,9 +33,9 @@
33
33
  "node": ">=24"
34
34
  },
35
35
  "dependencies": {
36
- "@verdaccio/config": "9.0.0-next-9.28",
37
- "@verdaccio/core": "9.0.0-next-9.28",
38
- "@verdaccio/url": "14.0.0-next-9.28",
36
+ "@verdaccio/config": "9.0.0-next-9.30",
37
+ "@verdaccio/core": "9.0.0-next-9.30",
38
+ "@verdaccio/url": "14.0.0-next-9.30",
39
39
  "debug": "4.4.3",
40
40
  "express": "5.2.1",
41
41
  "express-rate-limit": "8.6.0",
@@ -48,8 +48,8 @@
48
48
  },
49
49
  "devDependencies": {
50
50
  "@types/lodash-es": "4.17.12",
51
- "@verdaccio/logger": "9.0.0-next-9.28",
52
- "@verdaccio/types": "14.0.0-next-9.12",
51
+ "@verdaccio/logger": "9.0.0-next-9.30",
52
+ "@verdaccio/types": "14.0.0-next-9.13",
53
53
  "http-errors": "2.0.1",
54
54
  "rimraf": "6.1.3",
55
55
  "supertest": "7.1.4",