@verdaccio/middleware 9.0.0-next-9.3 → 9.0.0-next-9.5

package/build/middlewares/log.js

@@ -1,130 +1,102 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.log = exports.LOG_VERDACCIO_ERROR = exports.LOG_VERDACCIO_BYTES = exports.LOG_STATUS_MESSAGE = void 0;
-var _debug = _interopRequireDefault(require("debug"));
-var _lodash = _interopRequireDefault(require("lodash"));
-var _core = require("@verdaccio/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:middleware:log');
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let lodash = require("lodash");
+lodash = require_runtime.__toESM(lodash);
+//#region src/middlewares/log.ts
+var debug$1 = (0, debug.default)("verdaccio:middleware:log");
 function isStaticRequest(url) {
-  return url.startsWith('/-/static/');
+	return url.startsWith("/-/static/");
 }
-
-// FIXME: deprecated, moved to @verdaccio/dev-commons
-const LOG_STATUS_MESSAGE = exports.LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
-const LOG_VERDACCIO_ERROR = exports.LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
-const LOG_VERDACCIO_BYTES = exports.LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
-const log = (logger, options = {}) => {
-  const {
-    hideStaticLogs = true
-  } = options;
-  return function log(req, res, next) {
-    // logger
-    req.log = logger.child({
-      sub: 'in'
-    });
-    const _auth = req.headers.authorization;
-    if (_lodash.default.isNil(_auth) === false) {
-      req.headers.authorization = '<Classified>';
-    }
-    const _cookie = req.get('cookie');
-    if (_lodash.default.isNil(_cookie) === false) {
-      req.headers.cookie = '<Classified>';
-    }
-    req.url = req.originalUrl;
-    const _skipLog = hideStaticLogs && isStaticRequest(req.url);
-    if (_skipLog) {
-      debug("@{ip} requested '@{req.method} @{req.url}'", {
-        ip: req.ip,
-        req
-      });
-    } else {
-      req.log.info({
-        req: req,
-        ip: req.ip
-      }, "@{ip} requested '@{req.method} @{req.url}'");
-    }
-    req.originalUrl = req.url;
-    if (_lodash.default.isNil(_auth) === false) {
-      req.headers.authorization = _auth;
-    }
-    if (_lodash.default.isNil(_cookie) === false) {
-      req.headers.cookie = _cookie;
-    }
-    let bytesin = 0;
-    req.on('data', function (chunk) {
-      bytesin += chunk.length;
-    });
-    let bytesout = 0;
-    const _write = res.write;
-    // @ts-ignore
-    res.write = function (...args) {
-      bytesout += args[0]?.length || 0;
-      // @ts-ignore
-      return _write.apply(res, args);
-    };
-    const log = function () {
-      const forwardedFor = req.get(_core.HEADERS.FORWARDED_FOR);
-      const remoteAddress = req.socket.remoteAddress;
-      const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;
-      let message;
-      if (res.locals._verdaccio_error) {
-        message = LOG_VERDACCIO_ERROR;
-      } else {
-        message = LOG_VERDACCIO_BYTES;
-      }
-      req.url = req.originalUrl;
-      if (_skipLog) {
-        debug(message, {
-          request: {
-            method: req.method,
-            url: req.url
-          },
-          user: req.remote_user?.name || null,
-          remoteIP,
-          status: res.statusCode,
-          error: res.locals._verdaccio_error,
-          bytes: {
-            in: bytesin,
-            out: bytesout
-          }
-        });
-      } else {
-        req.log.http({
-          request: {
-            method: req.method,
-            url: req.url
-          },
-          user: req.remote_user?.name || null,
-          remoteIP,
-          status: res.statusCode,
-          error: res.locals._verdaccio_error,
-          bytes: {
-            in: bytesin,
-            out: bytesout
-          }
-        }, message);
-      }
-      req.originalUrl = req.url;
-    };
-    req.on('close', function () {
-      log();
-    });
-    const _end = res.end;
-    // @ts-ignore
-    res.end = function (...args) {
-      if (args[0]) {
-        bytesout += args[0].length;
-      }
-      // @ts-ignore
-      _end.apply(res, args);
-      log();
-    };
-    next();
-  };
+var LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
+var LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
+var LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
+var log = (logger, options = {}) => {
+	const { hideStaticLogs = true } = options;
+	return function log(req, res, next) {
+		req.log = logger.child({ sub: "in" });
+		const _auth = req.headers.authorization;
+		if (lodash.default.isNil(_auth) === false) req.headers.authorization = "<Classified>";
+		const _cookie = req.get("cookie");
+		if (lodash.default.isNil(_cookie) === false) req.headers.cookie = "<Classified>";
+		req.url = req.originalUrl;
+		const _skipLog = hideStaticLogs && isStaticRequest(req.url);
+		if (_skipLog) debug$1("@{ip} requested '@{req.method} @{req.url}'", {
+			ip: req.ip,
+			req
+		});
+		else req.log.info({
+			req,
+			ip: req.ip
+		}, "@{ip} requested '@{req.method} @{req.url}'");
+		req.originalUrl = req.url;
+		if (lodash.default.isNil(_auth) === false) req.headers.authorization = _auth;
+		if (lodash.default.isNil(_cookie) === false) req.headers.cookie = _cookie;
+		let bytesin = 0;
+		req.on("data", function(chunk) {
+			bytesin += chunk.length;
+		});
+		let bytesout = 0;
+		const _write = res.write;
+		res.write = function(...args) {
+			bytesout += args[0]?.length || 0;
+			return _write.apply(res, args);
+		};
+		const log = function() {
+			const forwardedFor = req.get(_verdaccio_core.HEADERS.FORWARDED_FOR);
+			const remoteAddress = req.socket.remoteAddress;
+			const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;
+			let message;
+			if (res.locals._verdaccio_error) message = LOG_VERDACCIO_ERROR;
+			else message = LOG_VERDACCIO_BYTES;
+			req.url = req.originalUrl;
+			if (_skipLog) debug$1(message, {
+				request: {
+					method: req.method,
+					url: req.url
+				},
+				user: req.remote_user?.name || null,
+				remoteIP,
+				status: res.statusCode,
+				error: res.locals._verdaccio_error,
+				bytes: {
+					in: bytesin,
+					out: bytesout
+				}
+			});
+			else req.log.http({
+				request: {
+					method: req.method,
+					url: req.url
+				},
+				user: req.remote_user?.name || null,
+				remoteIP,
+				status: res.statusCode,
+				error: res.locals._verdaccio_error,
+				bytes: {
+					in: bytesin,
+					out: bytesout
+				}
+			}, message);
+			req.originalUrl = req.url;
+		};
+		req.on("close", function() {
+			log();
+		});
+		const _end = res.end;
+		res.end = function(...args) {
+			if (args[0]) bytesout += args[0].length;
+			_end.apply(res, args);
+			log();
+		};
+		next();
+	};
 };
+//#endregion
+exports.LOG_STATUS_MESSAGE = LOG_STATUS_MESSAGE;
+exports.LOG_VERDACCIO_BYTES = LOG_VERDACCIO_BYTES;
+exports.LOG_VERDACCIO_ERROR = LOG_VERDACCIO_ERROR;
 exports.log = log;
+
 //# sourceMappingURL=log.js.map

package/build/middlewares/log.js.map

@@ -1 +1 @@
-{"version":3,"file":"log.js","names":["_debug","_interopRequireDefault","require","_lodash","_core","e","__esModule","default","debug","buildDebug","isStaticRequest","url","startsWith","LOG_STATUS_MESSAGE","exports","LOG_VERDACCIO_ERROR","LOG_VERDACCIO_BYTES","log","logger","options","hideStaticLogs","req","res","next","child","sub","_auth","headers","authorization","_","isNil","_cookie","get","cookie","originalUrl","_skipLog","ip","info","bytesin","on","chunk","length","bytesout","_write","write","args","apply","forwardedFor","HEADERS","FORWARDED_FOR","remoteAddress","socket","remoteIP","message","locals","_verdaccio_error","request","method","user","remote_user","name","status","statusCode","error","bytes","in","out","http","_end","end"],"sources":["../../src/middlewares/log.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport { HEADERS } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:log');\n\nfunction isStaticRequest(url: string): boolean {\n  return url.startsWith('/-/static/');\n}\n\n// FIXME: deprecated, moved to @verdaccio/dev-commons\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport type LogOptions = {\n  // When true, static file requests (/-/static/*) are hidden from pino logs\n  // and only visible via DEBUG=verdaccio:middleware:log. Defaults to true.\n  hideStaticLogs?: boolean;\n};\n\nexport const log = (logger, options: LogOptions = {}) => {\n  const { hideStaticLogs = true } = options;\n\n  return function log(req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    // logger\n    req.log = logger.child({ sub: 'in' });\n\n    const _auth = req.headers.authorization;\n    if (_.isNil(_auth) === false) {\n      req.headers.authorization = '<Classified>';\n    }\n\n    const _cookie = req.get('cookie');\n    if (_.isNil(_cookie) === false) {\n      req.headers.cookie = '<Classified>';\n    }\n\n    req.url = req.originalUrl;\n    const _skipLog = hideStaticLogs && isStaticRequest(req.url);\n    if (_skipLog) {\n      debug(\"@{ip} requested '@{req.method} @{req.url}'\", { ip: req.ip, req });\n    } else {\n      req.log.info({ req: req, ip: req.ip }, \"@{ip} requested '@{req.method} @{req.url}'\");\n    }\n    req.originalUrl = req.url;\n\n    if (_.isNil(_auth) === false) {\n      req.headers.authorization = _auth;\n    }\n\n    if (_.isNil(_cookie) === false) {\n      req.headers.cookie = _cookie;\n    }\n\n    let bytesin = 0;\n    req.on('data', function (chunk): void {\n      bytesin += chunk.length;\n    });\n\n    let bytesout = 0;\n    const _write = res.write;\n    // @ts-ignore\n    res.write = function (...args): boolean {\n      bytesout += args[0]?.length || 0;\n      // @ts-ignore\n      return _write.apply(res, args);\n    };\n\n    const log = function (): void {\n      const forwardedFor = req.get(HEADERS.FORWARDED_FOR);\n      const remoteAddress = req.socket.remoteAddress;\n      const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;\n      let message;\n      if (res.locals._verdaccio_error) {\n        message = LOG_VERDACCIO_ERROR;\n      } else {\n        message = LOG_VERDACCIO_BYTES;\n      }\n\n      req.url = req.originalUrl;\n      if (_skipLog) {\n        debug(message, {\n          request: { method: req.method, url: req.url },\n          user: req.remote_user?.name || null,\n          remoteIP,\n          status: res.statusCode,\n          error: res.locals._verdaccio_error,\n          bytes: { in: bytesin, out: bytesout },\n        });\n      } else {\n        req.log.http(\n          {\n            request: {\n              method: req.method,\n              url: req.url,\n            },\n            user: req.remote_user?.name || null,\n            remoteIP,\n            status: res.statusCode,\n            error: res.locals._verdaccio_error,\n            bytes: {\n              in: bytesin,\n              out: bytesout,\n            },\n          },\n          message\n        );\n      }\n      req.originalUrl = req.url;\n    };\n\n    req.on('close', function (): void {\n      log();\n    });\n\n    const _end = res.end;\n    // @ts-ignore\n    res.end = function (...args): void {\n      if (args[0]) {\n        bytesout += args[0].length;\n      }\n      // @ts-ignore\n      _end.apply(res, args);\n      log();\n    };\n    next();\n  };\n};\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,OAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAA0C,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAI1C,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,0BAA0B,CAAC;AAEpD,SAASC,eAAeA,CAACC,GAAW,EAAW;EAC7C,OAAOA,GAAG,CAACC,UAAU,CAAC,YAAY,CAAC;AACrC;;AAEA;AACO,MAAMC,kBAAkB,GAAAC,OAAA,CAAAD,kBAAA,GAC7B,gFAAgF;AAC3E,MAAME,mBAAmB,GAAAD,OAAA,CAAAC,mBAAA,GAAG,GAAGF,kBAAkB,oBAAoB;AACrE,MAAMG,mBAAmB,GAAAF,OAAA,CAAAE,mBAAA,GAAG,GAAGH,kBAAkB,mCAAmC;AAQpF,MAAMI,GAAG,GAAGA,CAACC,MAAM,EAAEC,OAAmB,GAAG,CAAC,CAAC,KAAK;EACvD,MAAM;IAAEC,cAAc,GAAG;EAAK,CAAC,GAAGD,OAAO;EAEzC,OAAO,SAASF,GAAGA,CAACI,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAQ;IAC3F;IACAF,GAAG,CAACJ,GAAG,GAAGC,MAAM,CAACM,KAAK,CAAC;MAAEC,GAAG,EAAE;IAAK,CAAC,CAAC;IAErC,MAAMC,KAAK,GAAGL,GAAG,CAACM,OAAO,CAACC,aAAa;IACvC,IAAIC,eAAC,CAACC,KAAK,CAACJ,KAAK,CAAC,KAAK,KAAK,EAAE;MAC5BL,GAAG,CAACM,OAAO,CAACC,aAAa,GAAG,cAAc;IAC5C;IAEA,MAAMG,OAAO,GAAGV,GAAG,CAACW,GAAG,CAAC,QAAQ,CAAC;IACjC,IAAIH,eAAC,CAACC,KAAK,CAACC,OAAO,CAAC,KAAK,KAAK,EAAE;MAC9BV,GAAG,CAACM,OAAO,CAACM,MAAM,GAAG,cAAc;IACrC;IAEAZ,GAAG,CAACV,GAAG,GAAGU,GAAG,CAACa,WAAW;IACzB,MAAMC,QAAQ,GAAGf,cAAc,IAAIV,eAAe,CAACW,GAAG,CAACV,GAAG,CAAC;IAC3D,IAAIwB,QAAQ,EAAE;MACZ3B,KAAK,CAAC,4CAA4C,EAAE;QAAE4B,EAAE,EAAEf,GAAG,CAACe,EAAE;QAAEf;MAAI,CAAC,CAAC;IAC1E,CAAC,MAAM;MACLA,GAAG,CAACJ,GAAG,CAACoB,IAAI,CAAC;QAAEhB,GAAG,EAAEA,GAAG;QAAEe,EAAE,EAAEf,GAAG,CAACe;MAAG,CAAC,EAAE,4CAA4C,CAAC;IACtF;IACAf,GAAG,CAACa,WAAW,GAAGb,GAAG,CAACV,GAAG;IAEzB,IAAIkB,eAAC,CAACC,KAAK,CAACJ,KAAK,CAAC,KAAK,KAAK,EAAE;MAC5BL,GAAG,CAACM,OAAO,CAACC,aAAa,GAAGF,KAAK;IACnC;IAEA,IAAIG,eAAC,CAACC,KAAK,CAACC,OAAO,CAAC,KAAK,KAAK,EAAE;MAC9BV,GAAG,CAACM,OAAO,CAACM,MAAM,GAAGF,OAAO;IAC9B;IAEA,IAAIO,OAAO,GAAG,CAAC;IACfjB,GAAG,CAACkB,EAAE,CAAC,MAAM,EAAE,UAAUC,KAAK,EAAQ;MACpCF,OAAO,IAAIE,KAAK,CAACC,MAAM;IACzB,CAAC,CAAC;IAEF,IAAIC,QAAQ,GAAG,CAAC;IAChB,MAAMC,MAAM,GAAGrB,GAAG,CAACsB,KAAK;IACxB;IACAtB,GAAG,CAACsB,KAAK,GAAG,UAAU,GAAGC,IAAI,EAAW;MACtCH,QAAQ,IAAIG,IAAI,CAAC,CAAC,CAAC,EAAEJ,MAAM,IAAI,CAAC;MAChC;MACA,OAAOE,MAAM,CAACG,KAAK,CAACxB,GAAG,EAAEuB,IAAI,CAAC;IAChC,CAAC;IAED,MAAM5B,GAAG,GAAG,SAAAA,CAAA,EAAkB;MAC5B,MAAM8B,YAAY,GAAG1B,GAAG,CAACW,GAAG,CAACgB,aAAO,CAACC,aAAa,CAAC;MACnD,MAAMC,aAAa,GAAG7B,GAAG,CAAC8B,MAAM,CAACD,aAAa;MAC9C,MAAME,QAAQ,GAAGL,YAAY,GAAG,GAAGA,YAAY,QAAQG,aAAa,EAAE,GAAGA,aAAa;MACtF,IAAIG,OAAO;MACX,IAAI/B,GAAG,CAACgC,MAAM,CAACC,gBAAgB,EAAE;QAC/BF,OAAO,GAAGtC,mBAAmB;MAC/B,CAAC,MAAM;QACLsC,OAAO,GAAGrC,mBAAmB;MAC/B;MAEAK,GAAG,CAACV,GAAG,GAAGU,GAAG,CAACa,WAAW;MACzB,IAAIC,QAAQ,EAAE;QACZ3B,KAAK,CAAC6C,OAAO,EAAE;UACbG,OAAO,EAAE;YAAEC,MAAM,EAAEpC,GAAG,CAACoC,MAAM;YAAE9C,GAAG,EAAEU,GAAG,CAACV;UAAI,CAAC;UAC7C+C,IAAI,EAAErC,GAAG,CAACsC,WAAW,EAAEC,IAAI,IAAI,IAAI;UACnCR,QAAQ;UACRS,MAAM,EAAEvC,GAAG,CAACwC,UAAU;UACtBC,KAAK,EAAEzC,GAAG,CAACgC,MAAM,CAACC,gBAAgB;UAClCS,KAAK,EAAE;YAAEC,EAAE,EAAE3B,OAAO;YAAE4B,GAAG,EAAExB;UAAS;QACtC,CAAC,CAAC;MACJ,CAAC,MAAM;QACLrB,GAAG,CAACJ,GAAG,CAACkD,IAAI,CACV;UACEX,OAAO,EAAE;YACPC,MAAM,EAAEpC,GAAG,CAACoC,MAAM;YAClB9C,GAAG,EAAEU,GAAG,CAACV;UACX,CAAC;UACD+C,IAAI,EAAErC,GAAG,CAACsC,WAAW,EAAEC,IAAI,IAAI,IAAI;UACnCR,QAAQ;UACRS,MAAM,EAAEvC,GAAG,CAACwC,UAAU;UACtBC,KAAK,EAAEzC,GAAG,CAACgC,MAAM,CAACC,gBAAgB;UAClCS,KAAK,EAAE;YACLC,EAAE,EAAE3B,OAAO;YACX4B,GAAG,EAAExB;UACP;QACF,CAAC,EACDW,OACF,CAAC;MACH;MACAhC,GAAG,CAACa,WAAW,GAAGb,GAAG,CAACV,GAAG;IAC3B,CAAC;IAEDU,GAAG,CAACkB,EAAE,CAAC,OAAO,EAAE,YAAkB;MAChCtB,GAAG,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,MAAMmD,IAAI,GAAG9C,GAAG,CAAC+C,GAAG;IACpB;IACA/C,GAAG,CAAC+C,GAAG,GAAG,UAAU,GAAGxB,IAAI,EAAQ;MACjC,IAAIA,IAAI,CAAC,CAAC,CAAC,EAAE;QACXH,QAAQ,IAAIG,IAAI,CAAC,CAAC,CAAC,CAACJ,MAAM;MAC5B;MACA;MACA2B,IAAI,CAACtB,KAAK,CAACxB,GAAG,EAAEuB,IAAI,CAAC;MACrB5B,GAAG,CAAC,CAAC;IACP,CAAC;IACDM,IAAI,CAAC,CAAC;EACR,CAAC;AACH,CAAC;AAACT,OAAA,CAAAG,GAAA,GAAAA,GAAA","ignoreList":[]}
+{"version":3,"file":"log.js","names":[],"sources":["../../src/middlewares/log.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport { HEADERS } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:log');\n\nfunction isStaticRequest(url: string): boolean {\n  return url.startsWith('/-/static/');\n}\n\n// FIXME: deprecated, moved to @verdaccio/dev-commons\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport type LogOptions = {\n  // When true, static file requests (/-/static/*) are hidden from pino logs\n  // and only visible via DEBUG=verdaccio:middleware:log. Defaults to true.\n  hideStaticLogs?: boolean;\n};\n\nexport const log = (logger, options: LogOptions = {}) => {\n  const { hideStaticLogs = true } = options;\n\n  return function log(req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    // logger\n    req.log = logger.child({ sub: 'in' });\n\n    const _auth = req.headers.authorization;\n    if (_.isNil(_auth) === false) {\n      req.headers.authorization = '<Classified>';\n    }\n\n    const _cookie = req.get('cookie');\n    if (_.isNil(_cookie) === false) {\n      req.headers.cookie = '<Classified>';\n    }\n\n    req.url = req.originalUrl;\n    const _skipLog = hideStaticLogs && isStaticRequest(req.url);\n    if (_skipLog) {\n      debug(\"@{ip} requested '@{req.method} @{req.url}'\", { ip: req.ip, req });\n    } else {\n      req.log.info({ req: req, ip: req.ip }, \"@{ip} requested '@{req.method} @{req.url}'\");\n    }\n    req.originalUrl = req.url;\n\n    if (_.isNil(_auth) === false) {\n      req.headers.authorization = _auth;\n    }\n\n    if (_.isNil(_cookie) === false) {\n      req.headers.cookie = _cookie;\n    }\n\n    let bytesin = 0;\n    req.on('data', function (chunk): void {\n      bytesin += chunk.length;\n    });\n\n    let bytesout = 0;\n    const _write = res.write;\n    // @ts-ignore\n    res.write = function (...args): boolean {\n      bytesout += args[0]?.length || 0;\n      // @ts-ignore\n      return _write.apply(res, args);\n    };\n\n    const log = function (): void {\n      const forwardedFor = req.get(HEADERS.FORWARDED_FOR);\n      const remoteAddress = req.socket.remoteAddress;\n      const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;\n      let message;\n      if (res.locals._verdaccio_error) {\n        message = LOG_VERDACCIO_ERROR;\n      } else {\n        message = LOG_VERDACCIO_BYTES;\n      }\n\n      req.url = req.originalUrl;\n      if (_skipLog) {\n        debug(message, {\n          request: { method: req.method, url: req.url },\n          user: req.remote_user?.name || null,\n          remoteIP,\n          status: res.statusCode,\n          error: res.locals._verdaccio_error,\n          bytes: { in: bytesin, out: bytesout },\n        });\n      } else {\n        req.log.http(\n          {\n            request: {\n              method: req.method,\n              url: req.url,\n            },\n            user: req.remote_user?.name || null,\n            remoteIP,\n            status: res.statusCode,\n            error: res.locals._verdaccio_error,\n            bytes: {\n              in: bytesin,\n              out: bytesout,\n            },\n          },\n          message\n        );\n      }\n      req.originalUrl = req.url;\n    };\n\n    req.on('close', function (): void {\n      log();\n    });\n\n    const _end = res.end;\n    // @ts-ignore\n    res.end = function (...args): void {\n      if (args[0]) {\n        bytesout += args[0].length;\n      }\n      // @ts-ignore\n      _end.apply(res, args);\n      log();\n    };\n    next();\n  };\n};\n"],"mappings":";;;;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,2BAA2B;AAEpD,SAAS,gBAAgB,KAAsB;AAC7C,QAAO,IAAI,WAAW,aAAa;;AAIrC,IAAa,qBACX;AACF,IAAa,sBAAsB,GAAG,mBAAmB;AACzD,IAAa,sBAAsB,GAAG,mBAAmB;AAQzD,IAAa,OAAO,QAAQ,UAAsB,EAAE,KAAK;CACvD,MAAM,EAAE,iBAAiB,SAAS;AAElC,QAAO,SAAS,IAAI,KAAqB,KAAsB,MAA8B;AAE3F,MAAI,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM,CAAC;EAErC,MAAM,QAAQ,IAAI,QAAQ;AAC1B,MAAI,OAAA,QAAE,MAAM,MAAM,KAAK,MACrB,KAAI,QAAQ,gBAAgB;EAG9B,MAAM,UAAU,IAAI,IAAI,SAAS;AACjC,MAAI,OAAA,QAAE,MAAM,QAAQ,KAAK,MACvB,KAAI,QAAQ,SAAS;AAGvB,MAAI,MAAM,IAAI;EACd,MAAM,WAAW,kBAAkB,gBAAgB,IAAI,IAAI;AAC3D,MAAI,SACF,SAAM,8CAA8C;GAAE,IAAI,IAAI;GAAI;GAAK,CAAC;MAExE,KAAI,IAAI,KAAK;GAAO;GAAK,IAAI,IAAI;GAAI,EAAE,6CAA6C;AAEtF,MAAI,cAAc,IAAI;AAEtB,MAAI,OAAA,QAAE,MAAM,MAAM,KAAK,MACrB,KAAI,QAAQ,gBAAgB;AAG9B,MAAI,OAAA,QAAE,MAAM,QAAQ,KAAK,MACvB,KAAI,QAAQ,SAAS;EAGvB,IAAI,UAAU;AACd,MAAI,GAAG,QAAQ,SAAU,OAAa;AACpC,cAAW,MAAM;IACjB;EAEF,IAAI,WAAW;EACf,MAAM,SAAS,IAAI;AAEnB,MAAI,QAAQ,SAAU,GAAG,MAAe;AACtC,eAAY,KAAK,IAAI,UAAU;AAE/B,UAAO,OAAO,MAAM,KAAK,KAAK;;EAGhC,MAAM,MAAM,WAAkB;GAC5B,MAAM,eAAe,IAAI,IAAI,gBAAA,QAAQ,cAAc;GACnD,MAAM,gBAAgB,IAAI,OAAO;GACjC,MAAM,WAAW,eAAe,GAAG,aAAa,OAAO,kBAAkB;GACzE,IAAI;AACJ,OAAI,IAAI,OAAO,iBACb,WAAU;OAEV,WAAU;AAGZ,OAAI,MAAM,IAAI;AACd,OAAI,SACF,SAAM,SAAS;IACb,SAAS;KAAE,QAAQ,IAAI;KAAQ,KAAK,IAAI;KAAK;IAC7C,MAAM,IAAI,aAAa,QAAQ;IAC/B;IACA,QAAQ,IAAI;IACZ,OAAO,IAAI,OAAO;IAClB,OAAO;KAAE,IAAI;KAAS,KAAK;KAAU;IACtC,CAAC;OAEF,KAAI,IAAI,KACN;IACE,SAAS;KACP,QAAQ,IAAI;KACZ,KAAK,IAAI;KACV;IACD,MAAM,IAAI,aAAa,QAAQ;IAC/B;IACA,QAAQ,IAAI;IACZ,OAAO,IAAI,OAAO;IAClB,OAAO;KACL,IAAI;KACJ,KAAK;KACN;IACF,EACD,QACD;AAEH,OAAI,cAAc,IAAI;;AAGxB,MAAI,GAAG,SAAS,WAAkB;AAChC,QAAK;IACL;EAEF,MAAM,OAAO,IAAI;AAEjB,MAAI,MAAM,SAAU,GAAG,MAAY;AACjC,OAAI,KAAK,GACP,aAAY,KAAK,GAAG;AAGtB,QAAK,MAAM,KAAK,KAAK;AACrB,QAAK;;AAEP,QAAM"}

package/build/middlewares/log.mjs

@@ -0,0 +1,96 @@
+import { HEADERS } from "@verdaccio/core";
+import buildDebug from "debug";
+import _ from "lodash";
+//#region src/middlewares/log.ts
+var debug = buildDebug("verdaccio:middleware:log");
+function isStaticRequest(url) {
+	return url.startsWith("/-/static/");
+}
+var LOG_STATUS_MESSAGE = "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
+var LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
+var LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
+var log = (logger, options = {}) => {
+	const { hideStaticLogs = true } = options;
+	return function log(req, res, next) {
+		req.log = logger.child({ sub: "in" });
+		const _auth = req.headers.authorization;
+		if (_.isNil(_auth) === false) req.headers.authorization = "<Classified>";
+		const _cookie = req.get("cookie");
+		if (_.isNil(_cookie) === false) req.headers.cookie = "<Classified>";
+		req.url = req.originalUrl;
+		const _skipLog = hideStaticLogs && isStaticRequest(req.url);
+		if (_skipLog) debug("@{ip} requested '@{req.method} @{req.url}'", {
+			ip: req.ip,
+			req
+		});
+		else req.log.info({
+			req,
+			ip: req.ip
+		}, "@{ip} requested '@{req.method} @{req.url}'");
+		req.originalUrl = req.url;
+		if (_.isNil(_auth) === false) req.headers.authorization = _auth;
+		if (_.isNil(_cookie) === false) req.headers.cookie = _cookie;
+		let bytesin = 0;
+		req.on("data", function(chunk) {
+			bytesin += chunk.length;
+		});
+		let bytesout = 0;
+		const _write = res.write;
+		res.write = function(...args) {
+			bytesout += args[0]?.length || 0;
+			return _write.apply(res, args);
+		};
+		const log = function() {
+			const forwardedFor = req.get(HEADERS.FORWARDED_FOR);
+			const remoteAddress = req.socket.remoteAddress;
+			const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;
+			let message;
+			if (res.locals._verdaccio_error) message = LOG_VERDACCIO_ERROR;
+			else message = LOG_VERDACCIO_BYTES;
+			req.url = req.originalUrl;
+			if (_skipLog) debug(message, {
+				request: {
+					method: req.method,
+					url: req.url
+				},
+				user: req.remote_user?.name || null,
+				remoteIP,
+				status: res.statusCode,
+				error: res.locals._verdaccio_error,
+				bytes: {
+					in: bytesin,
+					out: bytesout
+				}
+			});
+			else req.log.http({
+				request: {
+					method: req.method,
+					url: req.url
+				},
+				user: req.remote_user?.name || null,
+				remoteIP,
+				status: res.statusCode,
+				error: res.locals._verdaccio_error,
+				bytes: {
+					in: bytesin,
+					out: bytesout
+				}
+			}, message);
+			req.originalUrl = req.url;
+		};
+		req.on("close", function() {
+			log();
+		});
+		const _end = res.end;
+		res.end = function(...args) {
+			if (args[0]) bytesout += args[0].length;
+			_end.apply(res, args);
+			log();
+		};
+		next();
+	};
+};
+//#endregion
+export { LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, log };
+
+//# sourceMappingURL=log.mjs.map

package/build/middlewares/log.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.mjs","names":[],"sources":["../../src/middlewares/log.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport _ from 'lodash';\n\nimport { HEADERS } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:log');\n\nfunction isStaticRequest(url: string): boolean {\n  return url.startsWith('/-/static/');\n}\n\n// FIXME: deprecated, moved to @verdaccio/dev-commons\nexport const LOG_STATUS_MESSAGE =\n  \"@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'\";\nexport const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;\nexport const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;\n\nexport type LogOptions = {\n  // When true, static file requests (/-/static/*) are hidden from pino logs\n  // and only visible via DEBUG=verdaccio:middleware:log. Defaults to true.\n  hideStaticLogs?: boolean;\n};\n\nexport const log = (logger, options: LogOptions = {}) => {\n  const { hideStaticLogs = true } = options;\n\n  return function log(req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    // logger\n    req.log = logger.child({ sub: 'in' });\n\n    const _auth = req.headers.authorization;\n    if (_.isNil(_auth) === false) {\n      req.headers.authorization = '<Classified>';\n    }\n\n    const _cookie = req.get('cookie');\n    if (_.isNil(_cookie) === false) {\n      req.headers.cookie = '<Classified>';\n    }\n\n    req.url = req.originalUrl;\n    const _skipLog = hideStaticLogs && isStaticRequest(req.url);\n    if (_skipLog) {\n      debug(\"@{ip} requested '@{req.method} @{req.url}'\", { ip: req.ip, req });\n    } else {\n      req.log.info({ req: req, ip: req.ip }, \"@{ip} requested '@{req.method} @{req.url}'\");\n    }\n    req.originalUrl = req.url;\n\n    if (_.isNil(_auth) === false) {\n      req.headers.authorization = _auth;\n    }\n\n    if (_.isNil(_cookie) === false) {\n      req.headers.cookie = _cookie;\n    }\n\n    let bytesin = 0;\n    req.on('data', function (chunk): void {\n      bytesin += chunk.length;\n    });\n\n    let bytesout = 0;\n    const _write = res.write;\n    // @ts-ignore\n    res.write = function (...args): boolean {\n      bytesout += args[0]?.length || 0;\n      // @ts-ignore\n      return _write.apply(res, args);\n    };\n\n    const log = function (): void {\n      const forwardedFor = req.get(HEADERS.FORWARDED_FOR);\n      const remoteAddress = req.socket.remoteAddress;\n      const remoteIP = forwardedFor ? `${forwardedFor} via ${remoteAddress}` : remoteAddress;\n      let message;\n      if (res.locals._verdaccio_error) {\n        message = LOG_VERDACCIO_ERROR;\n      } else {\n        message = LOG_VERDACCIO_BYTES;\n      }\n\n      req.url = req.originalUrl;\n      if (_skipLog) {\n        debug(message, {\n          request: { method: req.method, url: req.url },\n          user: req.remote_user?.name || null,\n          remoteIP,\n          status: res.statusCode,\n          error: res.locals._verdaccio_error,\n          bytes: { in: bytesin, out: bytesout },\n        });\n      } else {\n        req.log.http(\n          {\n            request: {\n              method: req.method,\n              url: req.url,\n            },\n            user: req.remote_user?.name || null,\n            remoteIP,\n            status: res.statusCode,\n            error: res.locals._verdaccio_error,\n            bytes: {\n              in: bytesin,\n              out: bytesout,\n            },\n          },\n          message\n        );\n      }\n      req.originalUrl = req.url;\n    };\n\n    req.on('close', function (): void {\n      log();\n    });\n\n    const _end = res.end;\n    // @ts-ignore\n    res.end = function (...args): void {\n      if (args[0]) {\n        bytesout += args[0].length;\n      }\n      // @ts-ignore\n      _end.apply(res, args);\n      log();\n    };\n    next();\n  };\n};\n"],"mappings":";;;;AAOA,IAAM,QAAQ,WAAW,2BAA2B;AAEpD,SAAS,gBAAgB,KAAsB;AAC7C,QAAO,IAAI,WAAW,aAAa;;AAIrC,IAAa,qBACX;AACF,IAAa,sBAAsB,GAAG,mBAAmB;AACzD,IAAa,sBAAsB,GAAG,mBAAmB;AAQzD,IAAa,OAAO,QAAQ,UAAsB,EAAE,KAAK;CACvD,MAAM,EAAE,iBAAiB,SAAS;AAElC,QAAO,SAAS,IAAI,KAAqB,KAAsB,MAA8B;AAE3F,MAAI,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM,CAAC;EAErC,MAAM,QAAQ,IAAI,QAAQ;AAC1B,MAAI,EAAE,MAAM,MAAM,KAAK,MACrB,KAAI,QAAQ,gBAAgB;EAG9B,MAAM,UAAU,IAAI,IAAI,SAAS;AACjC,MAAI,EAAE,MAAM,QAAQ,KAAK,MACvB,KAAI,QAAQ,SAAS;AAGvB,MAAI,MAAM,IAAI;EACd,MAAM,WAAW,kBAAkB,gBAAgB,IAAI,IAAI;AAC3D,MAAI,SACF,OAAM,8CAA8C;GAAE,IAAI,IAAI;GAAI;GAAK,CAAC;MAExE,KAAI,IAAI,KAAK;GAAO;GAAK,IAAI,IAAI;GAAI,EAAE,6CAA6C;AAEtF,MAAI,cAAc,IAAI;AAEtB,MAAI,EAAE,MAAM,MAAM,KAAK,MACrB,KAAI,QAAQ,gBAAgB;AAG9B,MAAI,EAAE,MAAM,QAAQ,KAAK,MACvB,KAAI,QAAQ,SAAS;EAGvB,IAAI,UAAU;AACd,MAAI,GAAG,QAAQ,SAAU,OAAa;AACpC,cAAW,MAAM;IACjB;EAEF,IAAI,WAAW;EACf,MAAM,SAAS,IAAI;AAEnB,MAAI,QAAQ,SAAU,GAAG,MAAe;AACtC,eAAY,KAAK,IAAI,UAAU;AAE/B,UAAO,OAAO,MAAM,KAAK,KAAK;;EAGhC,MAAM,MAAM,WAAkB;GAC5B,MAAM,eAAe,IAAI,IAAI,QAAQ,cAAc;GACnD,MAAM,gBAAgB,IAAI,OAAO;GACjC,MAAM,WAAW,eAAe,GAAG,aAAa,OAAO,kBAAkB;GACzE,IAAI;AACJ,OAAI,IAAI,OAAO,iBACb,WAAU;OAEV,WAAU;AAGZ,OAAI,MAAM,IAAI;AACd,OAAI,SACF,OAAM,SAAS;IACb,SAAS;KAAE,QAAQ,IAAI;KAAQ,KAAK,IAAI;KAAK;IAC7C,MAAM,IAAI,aAAa,QAAQ;IAC/B;IACA,QAAQ,IAAI;IACZ,OAAO,IAAI,OAAO;IAClB,OAAO;KAAE,IAAI;KAAS,KAAK;KAAU;IACtC,CAAC;OAEF,KAAI,IAAI,KACN;IACE,SAAS;KACP,QAAQ,IAAI;KACZ,KAAK,IAAI;KACV;IACD,MAAM,IAAI,aAAa,QAAQ;IAC/B;IACA,QAAQ,IAAI;IACZ,OAAO,IAAI,OAAO;IAClB,OAAO;KACL,IAAI;KACJ,KAAK;KACN;IACF,EACD,QACD;AAEH,OAAI,cAAc,IAAI;;AAGxB,MAAI,GAAG,SAAS,WAAkB;AAChC,QAAK;IACL;EAEF,MAAM,OAAO,IAAI;AAEjB,MAAI,MAAM,SAAU,GAAG,MAAY;AACjC,OAAI,KAAK,GACP,aAAY,KAAK,GAAG;AAGtB,QAAK,MAAM,KAAK,KAAK;AACrB,QAAK;;AAEP,QAAM"}

package/build/middlewares/make-url-relative.d.ts

@@ -1,4 +1,4 @@
-import type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
+import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
 /**
  * Removes the host from the URL and turns it into a relative URL.
  * @param req

package/build/middlewares/make-url-relative.js

@@ -1,45 +1,30 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.makeURLrelative = makeURLrelative;
-var _debug = _interopRequireDefault(require("debug"));
-var _nodeUrl = require("node:url");
-var _core = require("@verdaccio/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:middleware:make-url-relative');
-
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let node_url = require("node:url");
+//#region src/middlewares/make-url-relative.ts
+var debug$1 = (0, debug.default)("verdaccio:middleware:make-url-relative");
 /**
- * Removes the host from the URL and turns it into a relative URL.
- * @param req
- * @param res
- * @param next
- */
+* Removes the host from the URL and turns it into a relative URL.
+* @param req
+* @param res
+* @param next
+*/
 function makeURLrelative(req, res, next) {
-  const original = req.url;
-
-  // npm requests can contain the full URL, including the hostname, for example:
-  // tarball downloads. Removing the hostname makes the URL relative and allows
-  // the application to handle requests in a more consistent way.
-
-  let url;
-  try {
-    // In productive use, the URL is absolute (and base will be ignored)
-    // In tests, the URL might brelative (and base will be used)
-    // https://nodejs.org/docs/latest/api/url.html#new-urlinput-base
-    url = new _nodeUrl.URL(req.url, `${req.protocol}://${req.headers.host}/`);
-  } catch (error) {
-    return next(_core.errorUtils.getBadRequest(`Invalid URL: ${req.url} (${error})`));
-  }
-
-  // Rebuild the URL without hostname
-  req.url = url.pathname + url.search + url.hash;
-  if (original !== req.url) {
-    debug('makeURLrelative: %o -> %o', original, req.url);
-  } else {
-    debug('makeURLrelative: %o (unchanged)', original);
-  }
-  next();
+	const original = req.url;
+	let url;
+	try {
+		url = new node_url.URL(req.url, `${req.protocol}://${req.headers.host}/`);
+	} catch (error) {
+		return next(_verdaccio_core.errorUtils.getBadRequest(`Invalid URL: ${req.url} (${error})`));
+	}
+	req.url = url.pathname + url.search + url.hash;
+	if (original !== req.url) debug$1("makeURLrelative: %o -> %o", original, req.url);
+	else debug$1("makeURLrelative: %o (unchanged)", original);
+	next();
 }
+//#endregion
+exports.makeURLrelative = makeURLrelative;
+
 //# sourceMappingURL=make-url-relative.js.map

package/build/middlewares/make-url-relative.js.map

@@ -1 +1 @@
-{"version":3,"file":"make-url-relative.js","names":["_debug","_interopRequireDefault","require","_nodeUrl","_core","e","__esModule","default","debug","buildDebug","makeURLrelative","req","res","next","original","url","URL","protocol","headers","host","error","errorUtils","getBadRequest","pathname","search","hash"],"sources":["../../src/middlewares/make-url-relative.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { URL } from 'node:url';\n\nimport { errorUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:make-url-relative');\n\n/**\n * Removes the host from the URL and turns it into a relative URL.\n * @param req\n * @param res\n * @param next\n */\nexport function makeURLrelative(\n  req: $RequestExtend,\n  res: $ResponseExtend,\n  next: $NextFunctionVer\n): void {\n  const original = req.url;\n\n  // npm requests can contain the full URL, including the hostname, for example:\n  // tarball downloads. Removing the hostname makes the URL relative and allows\n  // the application to handle requests in a more consistent way.\n\n  let url;\n  try {\n    // In productive use, the URL is absolute (and base will be ignored)\n    // In tests, the URL might brelative (and base will be used)\n    // https://nodejs.org/docs/latest/api/url.html#new-urlinput-base\n    url = new URL(req.url, `${req.protocol}://${req.headers.host}/`);\n  } catch (error) {\n    return next(errorUtils.getBadRequest(`Invalid URL: ${req.url} (${error})`));\n  }\n\n  // Rebuild the URL without hostname\n  req.url = url.pathname + url.search + url.hash;\n\n  if (original !== req.url) {\n    debug('makeURLrelative: %o -> %o', original, req.url);\n  } else {\n    debug('makeURLrelative: %o (unchanged)', original);\n  }\n  next();\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAA6C,SAAAD,uBAAAI,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAI7C,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,wCAAwC,CAAC;;AAElE;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,eAAeA,CAC7BC,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EAChB;EACN,MAAMC,QAAQ,GAAGH,GAAG,CAACI,GAAG;;EAExB;EACA;EACA;;EAEA,IAAIA,GAAG;EACP,IAAI;IACF;IACA;IACA;IACAA,GAAG,GAAG,IAAIC,YAAG,CAACL,GAAG,CAACI,GAAG,EAAE,GAAGJ,GAAG,CAACM,QAAQ,MAAMN,GAAG,CAACO,OAAO,CAACC,IAAI,GAAG,CAAC;EAClE,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd,OAAOP,IAAI,CAACQ,gBAAU,CAACC,aAAa,CAAC,gBAAgBX,GAAG,CAACI,GAAG,KAAKK,KAAK,GAAG,CAAC,CAAC;EAC7E;;EAEA;EACAT,GAAG,CAACI,GAAG,GAAGA,GAAG,CAACQ,QAAQ,GAAGR,GAAG,CAACS,MAAM,GAAGT,GAAG,CAACU,IAAI;EAE9C,IAAIX,QAAQ,KAAKH,GAAG,CAACI,GAAG,EAAE;IACxBP,KAAK,CAAC,2BAA2B,EAAEM,QAAQ,EAAEH,GAAG,CAACI,GAAG,CAAC;EACvD,CAAC,MAAM;IACLP,KAAK,CAAC,iCAAiC,EAAEM,QAAQ,CAAC;EACpD;EACAD,IAAI,CAAC,CAAC;AACR","ignoreList":[]}
+{"version":3,"file":"make-url-relative.js","names":[],"sources":["../../src/middlewares/make-url-relative.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { URL } from 'node:url';\n\nimport { errorUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:make-url-relative');\n\n/**\n * Removes the host from the URL and turns it into a relative URL.\n * @param req\n * @param res\n * @param next\n */\nexport function makeURLrelative(\n  req: $RequestExtend,\n  res: $ResponseExtend,\n  next: $NextFunctionVer\n): void {\n  const original = req.url;\n\n  // npm requests can contain the full URL, including the hostname, for example:\n  // tarball downloads. Removing the hostname makes the URL relative and allows\n  // the application to handle requests in a more consistent way.\n\n  let url;\n  try {\n    // In productive use, the URL is absolute (and base will be ignored)\n    // In tests, the URL might brelative (and base will be used)\n    // https://nodejs.org/docs/latest/api/url.html#new-urlinput-base\n    url = new URL(req.url, `${req.protocol}://${req.headers.host}/`);\n  } catch (error) {\n    return next(errorUtils.getBadRequest(`Invalid URL: ${req.url} (${error})`));\n  }\n\n  // Rebuild the URL without hostname\n  req.url = url.pathname + url.search + url.hash;\n\n  if (original !== req.url) {\n    debug('makeURLrelative: %o -> %o', original, req.url);\n  } else {\n    debug('makeURLrelative: %o (unchanged)', original);\n  }\n  next();\n}\n"],"mappings":";;;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,yCAAyC;;;;;;;AAQlE,SAAgB,gBACd,KACA,KACA,MACM;CACN,MAAM,WAAW,IAAI;CAMrB,IAAI;AACJ,KAAI;AAIF,QAAM,IAAI,SAAA,IAAI,IAAI,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,QAAQ,KAAK,GAAG;UACzD,OAAO;AACd,SAAO,KAAK,gBAAA,WAAW,cAAc,gBAAgB,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC;;AAI7E,KAAI,MAAM,IAAI,WAAW,IAAI,SAAS,IAAI;AAE1C,KAAI,aAAa,IAAI,IACnB,SAAM,6BAA6B,UAAU,IAAI,IAAI;KAErD,SAAM,mCAAmC,SAAS;AAEpD,OAAM"}

package/build/middlewares/make-url-relative.mjs

@@ -0,0 +1,28 @@
+import { errorUtils } from "@verdaccio/core";
+import buildDebug from "debug";
+import { URL } from "node:url";
+//#region src/middlewares/make-url-relative.ts
+var debug = buildDebug("verdaccio:middleware:make-url-relative");
+/**
+* Removes the host from the URL and turns it into a relative URL.
+* @param req
+* @param res
+* @param next
+*/
+function makeURLrelative(req, res, next) {
+	const original = req.url;
+	let url;
+	try {
+		url = new URL(req.url, `${req.protocol}://${req.headers.host}/`);
+	} catch (error) {
+		return next(errorUtils.getBadRequest(`Invalid URL: ${req.url} (${error})`));
+	}
+	req.url = url.pathname + url.search + url.hash;
+	if (original !== req.url) debug("makeURLrelative: %o -> %o", original, req.url);
+	else debug("makeURLrelative: %o (unchanged)", original);
+	next();
+}
+//#endregion
+export { makeURLrelative };
+
+//# sourceMappingURL=make-url-relative.mjs.map

package/build/middlewares/make-url-relative.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"make-url-relative.mjs","names":[],"sources":["../../src/middlewares/make-url-relative.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { URL } from 'node:url';\n\nimport { errorUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nconst debug = buildDebug('verdaccio:middleware:make-url-relative');\n\n/**\n * Removes the host from the URL and turns it into a relative URL.\n * @param req\n * @param res\n * @param next\n */\nexport function makeURLrelative(\n  req: $RequestExtend,\n  res: $ResponseExtend,\n  next: $NextFunctionVer\n): void {\n  const original = req.url;\n\n  // npm requests can contain the full URL, including the hostname, for example:\n  // tarball downloads. Removing the hostname makes the URL relative and allows\n  // the application to handle requests in a more consistent way.\n\n  let url;\n  try {\n    // In productive use, the URL is absolute (and base will be ignored)\n    // In tests, the URL might brelative (and base will be used)\n    // https://nodejs.org/docs/latest/api/url.html#new-urlinput-base\n    url = new URL(req.url, `${req.protocol}://${req.headers.host}/`);\n  } catch (error) {\n    return next(errorUtils.getBadRequest(`Invalid URL: ${req.url} (${error})`));\n  }\n\n  // Rebuild the URL without hostname\n  req.url = url.pathname + url.search + url.hash;\n\n  if (original !== req.url) {\n    debug('makeURLrelative: %o -> %o', original, req.url);\n  } else {\n    debug('makeURLrelative: %o (unchanged)', original);\n  }\n  next();\n}\n"],"mappings":";;;;AAOA,IAAM,QAAQ,WAAW,yCAAyC;;;;;;;AAQlE,SAAgB,gBACd,KACA,KACA,MACM;CACN,MAAM,WAAW,IAAI;CAMrB,IAAI;AACJ,KAAI;AAIF,QAAM,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,QAAQ,KAAK,GAAG;UACzD,OAAO;AACd,SAAO,KAAK,WAAW,cAAc,gBAAgB,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC;;AAI7E,KAAI,MAAM,IAAI,WAAW,IAAI,SAAS,IAAI;AAE1C,KAAI,aAAa,IAAI,IACnB,OAAM,6BAA6B,UAAU,IAAI,IAAI;KAErD,OAAM,mCAAmC,SAAS;AAEpD,OAAM"}

package/build/middlewares/match.js

@@ -1,16 +1,11 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.match = match;
+//#region src/middlewares/match.ts
 function match(regexp) {
-  return function (req, res, next, value) {
-    if (regexp.exec(value)) {
-      next();
-    } else {
-      next('route');
-    }
-  };
+	return function(req, res, next, value) {
+		if (regexp.exec(value)) next();
+		else next("route");
+	};
 }
+//#endregion
+exports.match = match;
+
 //# sourceMappingURL=match.js.map

package/build/middlewares/match.js.map

@@ -1 +1 @@
-{"version":3,"file":"match.js","names":["match","regexp","req","res","next","value","exec"],"sources":["../../src/middlewares/match.ts"],"sourcesContent":["import type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function match(regexp: RegExp): any {\n  return function (\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer,\n    value: string\n  ): void {\n    if (regexp.exec(value)) {\n      next();\n    } else {\n      next('route');\n    }\n  };\n}\n"],"mappings":";;;;;;AAEO,SAASA,KAAKA,CAACC,MAAc,EAAO;EACzC,OAAO,UACLC,GAAmB,EACnBC,GAAoB,EACpBC,IAAsB,EACtBC,KAAa,EACP;IACN,IAAIJ,MAAM,CAACK,IAAI,CAACD,KAAK,CAAC,EAAE;MACtBD,IAAI,CAAC,CAAC;IACR,CAAC,MAAM;MACLA,IAAI,CAAC,OAAO,CAAC;IACf;EACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"file":"match.js","names":[],"sources":["../../src/middlewares/match.ts"],"sourcesContent":["import type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function match(regexp: RegExp): any {\n  return function (\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer,\n    value: string\n  ): void {\n    if (regexp.exec(value)) {\n      next();\n    } else {\n      next('route');\n    }\n  };\n}\n"],"mappings":";AAEA,SAAgB,MAAM,QAAqB;AACzC,QAAO,SACL,KACA,KACA,MACA,OACM;AACN,MAAI,OAAO,KAAK,MAAM,CACpB,OAAM;MAEN,MAAK,QAAQ"}

package/build/middlewares/match.mjs

@@ -0,0 +1,11 @@
+//#region src/middlewares/match.ts
+function match(regexp) {
+	return function(req, res, next, value) {
+		if (regexp.exec(value)) next();
+		else next("route");
+	};
+}
+//#endregion
+export { match };
+
+//# sourceMappingURL=match.mjs.map

package/build/middlewares/match.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.mjs","names":[],"sources":["../../src/middlewares/match.ts"],"sourcesContent":["import type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function match(regexp: RegExp): any {\n  return function (\n    req: $RequestExtend,\n    res: $ResponseExtend,\n    next: $NextFunctionVer,\n    value: string\n  ): void {\n    if (regexp.exec(value)) {\n      next();\n    } else {\n      next('route');\n    }\n  };\n}\n"],"mappings":";AAEA,SAAgB,MAAM,QAAqB;AACzC,QAAO,SACL,KACA,KACA,MACA,OACM;AACN,MAAI,OAAO,KAAK,MAAM,CACpB,OAAM;MAEN,MAAK,QAAQ"}

package/build/middlewares/media.js

@@ -1,22 +1,18 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.media = media;
-var _core = require("@verdaccio/core");
+require("../_virtual/_rolldown/runtime.js");
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/middlewares/media.ts
 function media(expect) {
-  return function (req, res, next) {
-    const header = req.headers[_core.HEADER_TYPE.CONTENT_TYPE];
-    if (!header) {
-      next(_core.errorUtils.getCode(_core.HTTP_STATUS.UNSUPPORTED_MEDIA, 'content-type is missing, expect: ' + expect));
-      return;
-    }
-    if (typeof header !== 'string' || header.split(';')[0].trim() !== expect) {
-      next(_core.errorUtils.getCode(_core.HTTP_STATUS.UNSUPPORTED_MEDIA, 'wrong content-type, expect: ' + expect + ', got: ' + req.get(_core.HEADER_TYPE.CONTENT_TYPE)));
-    } else {
-      next();
-    }
-  };
+	return function(req, res, next) {
+		const header = req.headers[_verdaccio_core.HEADER_TYPE.CONTENT_TYPE];
+		if (!header) {
+			next(_verdaccio_core.errorUtils.getCode(_verdaccio_core.HTTP_STATUS.UNSUPPORTED_MEDIA, "content-type is missing, expect: " + expect));
+			return;
+		}
+		if (typeof header !== "string" || header.split(";")[0].trim() !== expect) next(_verdaccio_core.errorUtils.getCode(_verdaccio_core.HTTP_STATUS.UNSUPPORTED_MEDIA, "wrong content-type, expect: " + expect + ", got: " + req.get(_verdaccio_core.HEADER_TYPE.CONTENT_TYPE)));
+		else next();
+	};
 }
+//#endregion
+exports.media = media;
+
 //# sourceMappingURL=media.js.map

package/build/middlewares/media.js.map

@@ -1 +1 @@
-{"version":3,"file":"media.js","names":["_core","require","media","expect","req","res","next","header","headers","HEADER_TYPE","CONTENT_TYPE","errorUtils","getCode","HTTP_STATUS","UNSUPPORTED_MEDIA","split","trim","get"],"sources":["../../src/middlewares/media.ts"],"sourcesContent":["import { HEADER_TYPE, HTTP_STATUS, errorUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function media(expect: string | null): any {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const header = req.headers[HEADER_TYPE.CONTENT_TYPE];\n    if (!header) {\n      next(\n        errorUtils.getCode(\n          HTTP_STATUS.UNSUPPORTED_MEDIA,\n          'content-type is missing, expect: ' + expect\n        )\n      );\n      return;\n    }\n\n    if (typeof header !== 'string' || header.split(';')[0].trim() !== expect) {\n      next(\n        errorUtils.getCode(\n          HTTP_STATUS.UNSUPPORTED_MEDIA,\n          'wrong content-type, expect: ' + expect + ', got: ' + req.get(HEADER_TYPE.CONTENT_TYPE)\n        )\n      );\n    } else {\n      next();\n    }\n  };\n}\n"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAIO,SAASC,KAAKA,CAACC,MAAqB,EAAO;EAChD,OAAO,UAAUC,GAAmB,EAAEC,GAAoB,EAAEC,IAAsB,EAAQ;IACxF,MAAMC,MAAM,GAAGH,GAAG,CAACI,OAAO,CAACC,iBAAW,CAACC,YAAY,CAAC;IACpD,IAAI,CAACH,MAAM,EAAE;MACXD,IAAI,CACFK,gBAAU,CAACC,OAAO,CAChBC,iBAAW,CAACC,iBAAiB,EAC7B,mCAAmC,GAAGX,MACxC,CACF,CAAC;MACD;IACF;IAEA,IAAI,OAAOI,MAAM,KAAK,QAAQ,IAAIA,MAAM,CAACQ,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAAC,KAAKb,MAAM,EAAE;MACxEG,IAAI,CACFK,gBAAU,CAACC,OAAO,CAChBC,iBAAW,CAACC,iBAAiB,EAC7B,8BAA8B,GAAGX,MAAM,GAAG,SAAS,GAAGC,GAAG,CAACa,GAAG,CAACR,iBAAW,CAACC,YAAY,CACxF,CACF,CAAC;IACH,CAAC,MAAM;MACLJ,IAAI,CAAC,CAAC;IACR;EACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"file":"media.js","names":[],"sources":["../../src/middlewares/media.ts"],"sourcesContent":["import { HEADER_TYPE, HTTP_STATUS, errorUtils } from '@verdaccio/core';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';\n\nexport function media(expect: string | null): any {\n  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n    const header = req.headers[HEADER_TYPE.CONTENT_TYPE];\n    if (!header) {\n      next(\n        errorUtils.getCode(\n          HTTP_STATUS.UNSUPPORTED_MEDIA,\n          'content-type is missing, expect: ' + expect\n        )\n      );\n      return;\n    }\n\n    if (typeof header !== 'string' || header.split(';')[0].trim() !== expect) {\n      next(\n        errorUtils.getCode(\n          HTTP_STATUS.UNSUPPORTED_MEDIA,\n          'wrong content-type, expect: ' + expect + ', got: ' + req.get(HEADER_TYPE.CONTENT_TYPE)\n        )\n      );\n    } else {\n      next();\n    }\n  };\n}\n"],"mappings":";;;AAIA,SAAgB,MAAM,QAA4B;AAChD,QAAO,SAAU,KAAqB,KAAsB,MAA8B;EACxF,MAAM,SAAS,IAAI,QAAQ,gBAAA,YAAY;AACvC,MAAI,CAAC,QAAQ;AACX,QACE,gBAAA,WAAW,QACT,gBAAA,YAAY,mBACZ,sCAAsC,OACvC,CACF;AACD;;AAGF,MAAI,OAAO,WAAW,YAAY,OAAO,MAAM,IAAI,CAAC,GAAG,MAAM,KAAK,OAChE,MACE,gBAAA,WAAW,QACT,gBAAA,YAAY,mBACZ,iCAAiC,SAAS,YAAY,IAAI,IAAI,gBAAA,YAAY,aAAa,CACxF,CACF;MAED,OAAM"}