@verdaccio/middleware 9.0.0-next-9.4 → 9.0.0-next-9.6

package/README.md

@@ -29,16 +29,16 @@ If you want to report a security vulnerability, please follow the steps which we
 
 Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/verdaccio/contribute)]
 
-[![sponsor](https://opencollective.com/verdaccio/sponsor/0/avatar.svg)](https://opencollective.com/verdaccio/sponsor/0/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/1/avatar.svg)](https://opencollective.com/verdaccio/sponsor/1/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/2/avatar.svg)](https://opencollective.com/verdaccio/sponsor/2/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/3/avatar.svg)](https://opencollective.com/verdaccio/sponsor/3/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/4/avatar.svg)](https://opencollective.com/verdaccio/sponsor/4/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/5/avatar.svg)](https://opencollective.com/verdaccio/sponsor/5/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/6/avatar.svg)](https://opencollective.com/verdaccio/sponsor/6/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/7/avatar.svg)](https://opencollective.com/verdaccio/sponsor/7/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/8/avatar.svg)](https://opencollective.com/verdaccio/sponsor/8/website)
-[![sponsor](https://opencollective.com/verdaccio/sponsor/9/avatar.svg)](https://opencollective.com/verdaccio/sponsor/9/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/0/avatar.png)](https://opencollective.com/verdaccio/sponsor/0/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/1/avatar.png)](https://opencollective.com/verdaccio/sponsor/1/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/2/avatar.png)](https://opencollective.com/verdaccio/sponsor/2/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/3/avatar.png)](https://opencollective.com/verdaccio/sponsor/3/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/4/avatar.png)](https://opencollective.com/verdaccio/sponsor/4/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/5/avatar.png)](https://opencollective.com/verdaccio/sponsor/5/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/6/avatar.png)](https://opencollective.com/verdaccio/sponsor/6/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/7/avatar.png)](https://opencollective.com/verdaccio/sponsor/7/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/8/avatar.png)](https://opencollective.com/verdaccio/sponsor/8/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/9/avatar.png)](https://opencollective.com/verdaccio/sponsor/9/website)
 
 ## Open Collective Backers
 

package/build/index.d.ts

@@ -10,6 +10,7 @@ export { antiLoop } from './middlewares/antiLoop';
 export { final } from './middlewares/final';
 export { allow } from './middlewares/allow';
 export { rateLimit } from './middlewares/rate-limit';
+export { registerBodyParser } from './middlewares/body-parser';
 export { userAgent } from './middlewares/user-agent';
 export { webMiddleware, renderWebMiddleware, setSecurityWebHeaders } from './middlewares/web';
 export { errorReportingMiddleware, handleError } from './middlewares/error';

package/build/index.js

@@ -13,6 +13,7 @@ const require_antiLoop = require("./middlewares/antiLoop.js");
 const require_final = require("./middlewares/final.js");
 const require_allow = require("./middlewares/allow.js");
 const require_rate_limit = require("./middlewares/rate-limit.js");
+const require_body_parser = require("./middlewares/body-parser.js");
 const require_user_agent = require("./middlewares/user-agent.js");
 const require_security = require("./middlewares/web/security.js");
 const require_web_urls = require("./middlewares/web/web-urls.js");
@@ -52,6 +53,7 @@ exports.makeURLrelative = require_make_url_relative.makeURLrelative;
 exports.match = require_match.match;
 exports.media = require_media.media;
 exports.rateLimit = require_rate_limit.rateLimit;
+exports.registerBodyParser = require_body_parser.registerBodyParser;
 exports.renderWebMiddleware = require_render_web.renderWebMiddleware;
 exports.setSecurityWebHeaders = require_security.setSecurityWebHeaders;
 exports.userAgent = require_user_agent.userAgent;

package/build/index.mjs

@@ -9,6 +9,7 @@ import { antiLoop } from "./middlewares/antiLoop.mjs";
 import { final } from "./middlewares/final.mjs";
 import { allow } from "./middlewares/allow.mjs";
 import { rateLimit } from "./middlewares/rate-limit.mjs";
+import { registerBodyParser } from "./middlewares/body-parser.mjs";
 import { userAgent } from "./middlewares/user-agent.mjs";
 import { setSecurityWebHeaders } from "./middlewares/web/security.mjs";
 import { WebUrls, WebUrlsNamespace } from "./middlewares/web/web-urls.mjs";
@@ -19,4 +20,4 @@ import { errorReportingMiddleware, handleError } from "./middlewares/error.mjs";
 import { getRequestOptions } from "./middlewares/request-options.mjs";
 import { LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, log } from "./middlewares/log.mjs";
 import { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, STARS_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS } from "./middlewares/api_urls.mjs";
-export { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, STARS_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS, WebUrls, WebUrlsNamespace, allow, antiLoop, dotfiles, encodeScopePackage, errorReportingMiddleware, expectJson, final, getRequestOptions, handleError, log, makeURLrelative, match, media, rateLimit, renderWebMiddleware, setSecurityWebHeaders, userAgent, validateName, validatePackage, web_middleware_default as webMiddleware };
+export { DIST_TAGS_API_ENDPOINTS, LOGIN_API_ENDPOINTS, LOG_STATUS_MESSAGE, LOG_VERDACCIO_BYTES, LOG_VERDACCIO_ERROR, PACKAGE_API_ENDPOINTS, PING_API_ENDPOINTS, PROFILE_API_ENDPOINTS, PUBLISH_API_ENDPOINTS, SEARCH_API_ENDPOINTS, STARS_API_ENDPOINTS, TOKEN_API_ENDPOINTS, USER_API_ENDPOINTS, WebUrls, WebUrlsNamespace, allow, antiLoop, dotfiles, encodeScopePackage, errorReportingMiddleware, expectJson, final, getRequestOptions, handleError, log, makeURLrelative, match, media, rateLimit, registerBodyParser, renderWebMiddleware, setSecurityWebHeaders, userAgent, validateName, validatePackage, web_middleware_default as webMiddleware };

package/build/middlewares/body-parser.d.ts

@@ -0,0 +1,8 @@
+import { Application, Router } from 'express';
+import { Config } from '@verdaccio/types';
+/**
+ * Register JSON body parser on a router if not already registered
+ * @param app Express router instance
+ * @param config Verdaccio config
+ */
+export declare function registerBodyParser(app: Router | Application, config: Config): void;

package/build/middlewares/body-parser.js

@@ -0,0 +1,31 @@
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let express = require("express");
+express = require_runtime.__toESM(express);
+//#region src/middlewares/body-parser.ts
+var debug$1 = (0, debug.default)("verdaccio:middleware:body-parser");
+/**
+* Check if a body parser is already registered on the router
+*/
+function hasBodyParser(app) {
+	return (app.stack || app._router?.stack || []).some((middleware) => {
+		return middleware.handle?.name === "jsonParser" || middleware.name === "jsonParser";
+	});
+}
+/**
+* Register JSON body parser on a router if not already registered
+* @param app Express router instance
+* @param config Verdaccio config
+*/
+function registerBodyParser(app, config) {
+	if (hasBodyParser(app)) debug$1("json parser already registered");
+	else app.use(express.default.json({
+		strict: false,
+		limit: config.max_body_size || "10mb"
+	}));
+}
+//#endregion
+exports.registerBodyParser = registerBodyParser;
+
+//# sourceMappingURL=body-parser.js.map

package/build/middlewares/body-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-parser.js","names":[],"sources":["../../src/middlewares/body-parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Application, Router } from 'express';\nimport express from 'express';\n\nimport type { Config } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:middleware:body-parser');\n\n/**\n * Check if a body parser is already registered on the router\n */\nfunction hasBodyParser(app: Router | Application): boolean {\n  // @ts-ignore - Express internals: app.stack is not part of the public API\n  const stack = (app as any).stack || (app as any)._router?.stack || [];\n  return stack.some((middleware: any) => {\n    return middleware.handle?.name === 'jsonParser' || middleware.name === 'jsonParser';\n  });\n}\n\n/**\n * Register JSON body parser on a router if not already registered\n * @param app Express router instance\n * @param config Verdaccio config\n */\nexport function registerBodyParser(app: Router | Application, config: Config): void {\n  // middleware might have registered a json parser already\n  if (hasBodyParser(app)) {\n    debug('json parser already registered');\n  } else {\n    app.use(\n      express.json({\n        strict: false,\n        limit: config.max_body_size || '10mb',\n      })\n    );\n  }\n}\n"],"mappings":";;;;;;AAMA,IAAM,WAAA,GAAA,MAAA,SAAmB,mCAAmC;;;;AAK5D,SAAS,cAAc,KAAoC;AAGzD,SADe,IAAY,SAAU,IAAY,SAAS,SAAS,EAAE,EACxD,MAAM,eAAoB;AACrC,SAAO,WAAW,QAAQ,SAAS,gBAAgB,WAAW,SAAS;GACvE;;;;;;;AAQJ,SAAgB,mBAAmB,KAA2B,QAAsB;AAElF,KAAI,cAAc,IAAI,CACpB,SAAM,iCAAiC;KAEvC,KAAI,IACF,QAAA,QAAQ,KAAK;EACX,QAAQ;EACR,OAAO,OAAO,iBAAiB;EAChC,CAAC,CACH"}

package/build/middlewares/body-parser.mjs

@@ -0,0 +1,28 @@
+import buildDebug from "debug";
+import express from "express";
+//#region src/middlewares/body-parser.ts
+var debug = buildDebug("verdaccio:middleware:body-parser");
+/**
+* Check if a body parser is already registered on the router
+*/
+function hasBodyParser(app) {
+	return (app.stack || app._router?.stack || []).some((middleware) => {
+		return middleware.handle?.name === "jsonParser" || middleware.name === "jsonParser";
+	});
+}
+/**
+* Register JSON body parser on a router if not already registered
+* @param app Express router instance
+* @param config Verdaccio config
+*/
+function registerBodyParser(app, config) {
+	if (hasBodyParser(app)) debug("json parser already registered");
+	else app.use(express.json({
+		strict: false,
+		limit: config.max_body_size || "10mb"
+	}));
+}
+//#endregion
+export { registerBodyParser };
+
+//# sourceMappingURL=body-parser.mjs.map

package/build/middlewares/body-parser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-parser.mjs","names":[],"sources":["../../src/middlewares/body-parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Application, Router } from 'express';\nimport express from 'express';\n\nimport type { Config } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:middleware:body-parser');\n\n/**\n * Check if a body parser is already registered on the router\n */\nfunction hasBodyParser(app: Router | Application): boolean {\n  // @ts-ignore - Express internals: app.stack is not part of the public API\n  const stack = (app as any).stack || (app as any)._router?.stack || [];\n  return stack.some((middleware: any) => {\n    return middleware.handle?.name === 'jsonParser' || middleware.name === 'jsonParser';\n  });\n}\n\n/**\n * Register JSON body parser on a router if not already registered\n * @param app Express router instance\n * @param config Verdaccio config\n */\nexport function registerBodyParser(app: Router | Application, config: Config): void {\n  // middleware might have registered a json parser already\n  if (hasBodyParser(app)) {\n    debug('json parser already registered');\n  } else {\n    app.use(\n      express.json({\n        strict: false,\n        limit: config.max_body_size || '10mb',\n      })\n    );\n  }\n}\n"],"mappings":";;;AAMA,IAAM,QAAQ,WAAW,mCAAmC;;;;AAK5D,SAAS,cAAc,KAAoC;AAGzD,SADe,IAAY,SAAU,IAAY,SAAS,SAAS,EAAE,EACxD,MAAM,eAAoB;AACrC,SAAO,WAAW,QAAQ,SAAS,gBAAgB,WAAW,SAAS;GACvE;;;;;;;AAQJ,SAAgB,mBAAmB,KAA2B,QAAsB;AAElF,KAAI,cAAc,IAAI,CACpB,OAAM,iCAAiC;KAEvC,KAAI,IACF,QAAQ,KAAK;EACX,QAAQ;EACR,OAAO,OAAO,iBAAiB;EAChC,CAAC,CACH"}

package/build/middlewares/web/render-web.js

@@ -1,6 +1,7 @@
 const require_runtime = require("../../_virtual/_rolldown/runtime.js");
 const require_security = require("./security.js");
 const require_renderHTML = require("./utils/renderHTML.js");
+const require_ui_options = require("./utils/ui-options.js");
 const require_web_urls = require("./web-urls.js");
 let _verdaccio_core = require("@verdaccio/core");
 let debug = require("debug");
@@ -68,12 +69,19 @@ function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {
 	if (config?.web?.logo) config.web.logo = logo;
 	const logoDark = renderLogo(config?.web?.logoDark);
 	if (config?.web?.logoDark) config.web.logoDark = logoDark;
+	router.get(require_web_urls.WebUrlsNamespace.static + "ui-options.js", function(req, res) {
+		const options = require_ui_options.getUIOptions(config, req, res);
+		const script = `window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(options)};`;
+		res.setHeader(_verdaccio_core.HEADERS.CACHE_CONTROL, _verdaccio_core.HEADERS.NO_CACHE);
+		res.setHeader(_verdaccio_core.HEADERS.CONTENT_TYPE, _verdaccio_core.HEADERS.JAVASCRIPT_CHARSET);
+		res.send(script);
+	});
 	router.get(require_web_urls.WebUrlsNamespace.web, function(req, res) {
-		require_renderHTML.default(config, manifest, manifestFiles, req, res);
+		require_renderHTML.default(config, manifest, manifestFiles, require_ui_options.getUIOptions(config, req, res), res);
 		debug$1("render html section");
 	});
 	router.get(require_web_urls.WebUrlsNamespace.root, function(req, res) {
-		require_renderHTML.default(config, manifest, manifestFiles, req, res);
+		require_renderHTML.default(config, manifest, manifestFiles, require_ui_options.getUIOptions(config, req, res), res);
 		debug$1("render root");
 	});
 	return router;

package/build/middlewares/web/render-web.js.map

@@ -1 +1 @@
-{"version":3,"file":"render-web.js","names":[],"sources":["../../../src/middlewares/web/render-web.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport express from 'express';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HTTP_STATUS } from '@verdaccio/core';\nimport { isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { setSecurityWebHeaders } from './security';\nimport renderHTML from './utils/renderHTML';\nimport { WebUrlsNamespace } from './web-urls';\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst sendFileCallback = (next) => (err) => {\n  if (!err) {\n    return;\n  }\n  if (err.status === HTTP_STATUS.NOT_FOUND) {\n    next();\n  } else {\n    next(err);\n  }\n};\n\nexport function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {\n  const { staticPath, manifest, manifestFiles } = pluginOptions;\n  debug('static path %o', staticPath);\n\n  /* eslint new-cap:off */\n  const router = express.Router();\n  if (typeof tokenMiddleware === 'function') {\n    router.use(tokenMiddleware);\n  }\n\n  router.use(setSecurityWebHeaders);\n\n  // any match within the static is routed to the file system\n  router.get(\n    WebUrlsNamespace.static,\n    function (req: express.Request<{ all: string | string[] }>, res, next) {\n      const filename = Array.isArray(req.params.all) ? req.params.all.join('/') : req.params.all;\n      if (filename === 'favicon.ico' && config?.web?.favicon) {\n        const file = config?.web?.favicon;\n        if (isURLhasValidProtocol(file)) {\n          debug('redirect to favicon %s', file);\n          req.url = file;\n          return next();\n        }\n        debug('render custom favicon %o', file);\n        res.sendFile(file, sendFileCallback(next));\n        return;\n      }\n      debug('render static file %o', filename);\n      res.sendFile(filename, { root: staticPath }, sendFileCallback(next));\n    }\n  );\n\n  function renderLogo(logo: string | undefined): string | undefined {\n    // check the origin of the logo\n    if (logo && !isURLhasValidProtocol(logo)) {\n      // URI related to a local file\n      const absoluteLocalFile = path.posix.resolve(logo);\n      debug('serve local logo %s', absoluteLocalFile);\n      try {\n        // TODO: replace existsSync by async alternative\n        if (\n          fs.existsSync(absoluteLocalFile) &&\n          typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === 'undefined'\n        ) {\n          // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n          // Use POSIX version `path.posix.join` instead.\n          logo = `/-/static/${path.basename(logo)}`;\n          router.get(logo, function (_req, res, next) {\n            // @ts-ignore\n            debug('serve custom logo  web:%s - local:%s', logo, absoluteLocalFile);\n            res.sendFile(\n              path.basename(absoluteLocalFile),\n              { root: path.dirname(absoluteLocalFile) },\n              sendFileCallback(next)\n            );\n          });\n          debug('enabled custom logo %s', logo);\n        } else {\n          logo = undefined;\n          debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n        }\n      } catch {\n        logo = undefined;\n        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n      }\n    }\n    return logo;\n  }\n\n  const logo = renderLogo(config?.web?.logo);\n  if (config?.web?.logo) {\n    config.web.logo = logo;\n  }\n  const logoDark = renderLogo(config?.web?.logoDark);\n  if (config?.web?.logoDark) {\n    config.web.logoDark = logoDark;\n  }\n\n  // Handle all web routes including security routes\n  router.get(WebUrlsNamespace.web, function (req, res) {\n    renderHTML(config, manifest, manifestFiles, req, res);\n    debug('render html section');\n  });\n\n  router.get(WebUrlsNamespace.root, function (req, res) {\n    renderHTML(config, manifest, manifestFiles, req, res);\n    debug('render root');\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAYA,IAAM,WAAA,GAAA,MAAA,SAAmB,uBAAuB;AAEhD,IAAM,oBAAoB,UAAU,QAAQ;AAC1C,KAAI,CAAC,IACH;AAEF,KAAI,IAAI,WAAW,gBAAA,YAAY,UAC7B,OAAM;KAEN,MAAK,IAAI;;AAIb,SAAgB,oBAAoB,QAAQ,iBAAiB,eAAe;CAC1E,MAAM,EAAE,YAAY,UAAU,kBAAkB;AAChD,SAAM,kBAAkB,WAAW;CAGnC,MAAM,SAAS,QAAA,QAAQ,QAAQ;AAC/B,KAAI,OAAO,oBAAoB,WAC7B,QAAO,IAAI,gBAAgB;AAG7B,QAAO,IAAI,iBAAA,sBAAsB;AAGjC,QAAO,IACL,iBAAA,iBAAiB,QACjB,SAAU,KAAkD,KAAK,MAAM;EACrE,MAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,GAAG,IAAI,OAAO,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO;AACvF,MAAI,aAAa,iBAAiB,QAAQ,KAAK,SAAS;GACtD,MAAM,OAAO,QAAQ,KAAK;AAC1B,QAAA,GAAA,eAAA,uBAA0B,KAAK,EAAE;AAC/B,YAAM,0BAA0B,KAAK;AACrC,QAAI,MAAM;AACV,WAAO,MAAM;;AAEf,WAAM,4BAA4B,KAAK;AACvC,OAAI,SAAS,MAAM,iBAAiB,KAAK,CAAC;AAC1C;;AAEF,UAAM,yBAAyB,SAAS;AACxC,MAAI,SAAS,UAAU,EAAE,MAAM,YAAY,EAAE,iBAAiB,KAAK,CAAC;GAEvE;CAED,SAAS,WAAW,MAA8C;AAEhE,MAAI,QAAQ,EAAA,GAAA,eAAA,uBAAuB,KAAK,EAAE;GAExC,MAAM,oBAAoB,UAAA,QAAK,MAAM,QAAQ,KAAK;AAClD,WAAM,uBAAuB,kBAAkB;AAC/C,OAAI;AAEF,QACE,QAAA,QAAG,WAAW,kBAAkB,IAChC,OAAO,QAAA,QAAG,WAAW,mBAAmB,QAAA,QAAG,UAAU,KAAK,KAAK,aAC/D;AAGA,YAAO,aAAa,UAAA,QAAK,SAAS,KAAK;AACvC,YAAO,IAAI,MAAM,SAAU,MAAM,KAAK,MAAM;AAE1C,cAAM,wCAAwC,MAAM,kBAAkB;AACtE,UAAI,SACF,UAAA,QAAK,SAAS,kBAAkB,EAChC,EAAE,MAAM,UAAA,QAAK,QAAQ,kBAAkB,EAAE,EACzC,iBAAiB,KAAK,CACvB;OACD;AACF,aAAM,0BAA0B,KAAK;WAChC;AACL,YAAO,KAAA;AACP,aAAM,2BAA2B,kBAAkB,oCAAoC;;WAEnF;AACN,WAAO,KAAA;AACP,YAAM,2BAA2B,kBAAkB,oCAAoC;;;AAG3F,SAAO;;CAGT,MAAM,OAAO,WAAW,QAAQ,KAAK,KAAK;AAC1C,KAAI,QAAQ,KAAK,KACf,QAAO,IAAI,OAAO;CAEpB,MAAM,WAAW,WAAW,QAAQ,KAAK,SAAS;AAClD,KAAI,QAAQ,KAAK,SACf,QAAO,IAAI,WAAW;AAIxB,QAAO,IAAI,iBAAA,iBAAiB,KAAK,SAAU,KAAK,KAAK;AACnD,qBAAA,QAAW,QAAQ,UAAU,eAAe,KAAK,IAAI;AACrD,UAAM,sBAAsB;GAC5B;AAEF,QAAO,IAAI,iBAAA,iBAAiB,MAAM,SAAU,KAAK,KAAK;AACpD,qBAAA,QAAW,QAAQ,UAAU,eAAe,KAAK,IAAI;AACrD,UAAM,cAAc;GACpB;AAEF,QAAO"}
+{"version":3,"file":"render-web.js","names":[],"sources":["../../../src/middlewares/web/render-web.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport express from 'express';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HEADERS, HTTP_STATUS } from '@verdaccio/core';\nimport { isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { setSecurityWebHeaders } from './security';\nimport renderHTML from './utils/renderHTML';\nimport { getUIOptions } from './utils/ui-options';\nimport { WebUrlsNamespace } from './web-urls';\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst sendFileCallback = (next) => (err) => {\n  if (!err) {\n    return;\n  }\n  if (err.status === HTTP_STATUS.NOT_FOUND) {\n    next();\n  } else {\n    next(err);\n  }\n};\n\nexport function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {\n  const { staticPath, manifest, manifestFiles } = pluginOptions;\n  debug('static path %o', staticPath);\n\n  /* eslint new-cap:off */\n  const router = express.Router();\n  if (typeof tokenMiddleware === 'function') {\n    router.use(tokenMiddleware);\n  }\n\n  router.use(setSecurityWebHeaders);\n\n  // any match within the static is routed to the file system\n  router.get(\n    WebUrlsNamespace.static,\n    function (req: express.Request<{ all: string | string[] }>, res, next) {\n      const filename = Array.isArray(req.params.all) ? req.params.all.join('/') : req.params.all;\n      if (filename === 'favicon.ico' && config?.web?.favicon) {\n        const file = config?.web?.favicon;\n        if (isURLhasValidProtocol(file)) {\n          debug('redirect to favicon %s', file);\n          req.url = file;\n          return next();\n        }\n        debug('render custom favicon %o', file);\n        res.sendFile(file, sendFileCallback(next));\n        return;\n      }\n      debug('render static file %o', filename);\n      res.sendFile(filename, { root: staticPath }, sendFileCallback(next));\n    }\n  );\n\n  function renderLogo(logo: string | undefined): string | undefined {\n    // check the origin of the logo\n    if (logo && !isURLhasValidProtocol(logo)) {\n      // URI related to a local file\n      const absoluteLocalFile = path.posix.resolve(logo);\n      debug('serve local logo %s', absoluteLocalFile);\n      try {\n        // TODO: replace existsSync by async alternative\n        if (\n          fs.existsSync(absoluteLocalFile) &&\n          typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === 'undefined'\n        ) {\n          // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n          // Use POSIX version `path.posix.join` instead.\n          logo = `/-/static/${path.basename(logo)}`;\n          router.get(logo, function (_req, res, next) {\n            // @ts-ignore\n            debug('serve custom logo  web:%s - local:%s', logo, absoluteLocalFile);\n            res.sendFile(\n              path.basename(absoluteLocalFile),\n              { root: path.dirname(absoluteLocalFile) },\n              sendFileCallback(next)\n            );\n          });\n          debug('enabled custom logo %s', logo);\n        } else {\n          logo = undefined;\n          debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n        }\n      } catch {\n        logo = undefined;\n        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n      }\n    }\n    return logo;\n  }\n\n  const logo = renderLogo(config?.web?.logo);\n  if (config?.web?.logo) {\n    config.web.logo = logo;\n  }\n  const logoDark = renderLogo(config?.web?.logoDark);\n  if (config?.web?.logoDark) {\n    config.web.logoDark = logoDark;\n  }\n\n  // Serve external script that loads UI options\n  router.get(WebUrlsNamespace.static + 'ui-options.js', function (req, res) {\n    const options = getUIOptions(config, req, res);\n    const script = `window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(options)};`;\n    res.setHeader(HEADERS.CACHE_CONTROL, HEADERS.NO_CACHE);\n    res.setHeader(HEADERS.CONTENT_TYPE, HEADERS.JAVASCRIPT_CHARSET);\n    res.send(script);\n  });\n\n  // Handle all web routes including security routes\n  router.get(WebUrlsNamespace.web, function (req, res) {\n    const options = getUIOptions(config, req, res);\n    renderHTML(config, manifest, manifestFiles, options, res);\n    debug('render html section');\n  });\n\n  router.get(WebUrlsNamespace.root, function (req, res) {\n    const options = getUIOptions(config, req, res);\n    renderHTML(config, manifest, manifestFiles, options, res);\n    debug('render root');\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAaA,IAAM,WAAA,GAAA,MAAA,SAAmB,uBAAuB;AAEhD,IAAM,oBAAoB,UAAU,QAAQ;AAC1C,KAAI,CAAC,IACH;AAEF,KAAI,IAAI,WAAW,gBAAA,YAAY,UAC7B,OAAM;KAEN,MAAK,IAAI;;AAIb,SAAgB,oBAAoB,QAAQ,iBAAiB,eAAe;CAC1E,MAAM,EAAE,YAAY,UAAU,kBAAkB;AAChD,SAAM,kBAAkB,WAAW;CAGnC,MAAM,SAAS,QAAA,QAAQ,QAAQ;AAC/B,KAAI,OAAO,oBAAoB,WAC7B,QAAO,IAAI,gBAAgB;AAG7B,QAAO,IAAI,iBAAA,sBAAsB;AAGjC,QAAO,IACL,iBAAA,iBAAiB,QACjB,SAAU,KAAkD,KAAK,MAAM;EACrE,MAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,GAAG,IAAI,OAAO,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO;AACvF,MAAI,aAAa,iBAAiB,QAAQ,KAAK,SAAS;GACtD,MAAM,OAAO,QAAQ,KAAK;AAC1B,QAAA,GAAA,eAAA,uBAA0B,KAAK,EAAE;AAC/B,YAAM,0BAA0B,KAAK;AACrC,QAAI,MAAM;AACV,WAAO,MAAM;;AAEf,WAAM,4BAA4B,KAAK;AACvC,OAAI,SAAS,MAAM,iBAAiB,KAAK,CAAC;AAC1C;;AAEF,UAAM,yBAAyB,SAAS;AACxC,MAAI,SAAS,UAAU,EAAE,MAAM,YAAY,EAAE,iBAAiB,KAAK,CAAC;GAEvE;CAED,SAAS,WAAW,MAA8C;AAEhE,MAAI,QAAQ,EAAA,GAAA,eAAA,uBAAuB,KAAK,EAAE;GAExC,MAAM,oBAAoB,UAAA,QAAK,MAAM,QAAQ,KAAK;AAClD,WAAM,uBAAuB,kBAAkB;AAC/C,OAAI;AAEF,QACE,QAAA,QAAG,WAAW,kBAAkB,IAChC,OAAO,QAAA,QAAG,WAAW,mBAAmB,QAAA,QAAG,UAAU,KAAK,KAAK,aAC/D;AAGA,YAAO,aAAa,UAAA,QAAK,SAAS,KAAK;AACvC,YAAO,IAAI,MAAM,SAAU,MAAM,KAAK,MAAM;AAE1C,cAAM,wCAAwC,MAAM,kBAAkB;AACtE,UAAI,SACF,UAAA,QAAK,SAAS,kBAAkB,EAChC,EAAE,MAAM,UAAA,QAAK,QAAQ,kBAAkB,EAAE,EACzC,iBAAiB,KAAK,CACvB;OACD;AACF,aAAM,0BAA0B,KAAK;WAChC;AACL,YAAO,KAAA;AACP,aAAM,2BAA2B,kBAAkB,oCAAoC;;WAEnF;AACN,WAAO,KAAA;AACP,YAAM,2BAA2B,kBAAkB,oCAAoC;;;AAG3F,SAAO;;CAGT,MAAM,OAAO,WAAW,QAAQ,KAAK,KAAK;AAC1C,KAAI,QAAQ,KAAK,KACf,QAAO,IAAI,OAAO;CAEpB,MAAM,WAAW,WAAW,QAAQ,KAAK,SAAS;AAClD,KAAI,QAAQ,KAAK,SACf,QAAO,IAAI,WAAW;AAIxB,QAAO,IAAI,iBAAA,iBAAiB,SAAS,iBAAiB,SAAU,KAAK,KAAK;EACxE,MAAM,UAAU,mBAAA,aAAa,QAAQ,KAAK,IAAI;EAC9C,MAAM,SAAS,0CAA0C,KAAK,UAAU,QAAQ,CAAC;AACjF,MAAI,UAAU,gBAAA,QAAQ,eAAe,gBAAA,QAAQ,SAAS;AACtD,MAAI,UAAU,gBAAA,QAAQ,cAAc,gBAAA,QAAQ,mBAAmB;AAC/D,MAAI,KAAK,OAAO;GAChB;AAGF,QAAO,IAAI,iBAAA,iBAAiB,KAAK,SAAU,KAAK,KAAK;AAEnD,qBAAA,QAAW,QAAQ,UAAU,eADb,mBAAA,aAAa,QAAQ,KAAK,IAAI,EACO,IAAI;AACzD,UAAM,sBAAsB;GAC5B;AAEF,QAAO,IAAI,iBAAA,iBAAiB,MAAM,SAAU,KAAK,KAAK;AAEpD,qBAAA,QAAW,QAAQ,UAAU,eADb,mBAAA,aAAa,QAAQ,KAAK,IAAI,EACO,IAAI;AACzD,UAAM,cAAc;GACpB;AAEF,QAAO"}

package/build/middlewares/web/render-web.mjs

@@ -1,7 +1,8 @@
 import { setSecurityWebHeaders } from "./security.mjs";
 import renderHTML from "./utils/renderHTML.mjs";
+import { getUIOptions } from "./utils/ui-options.mjs";
 import { WebUrlsNamespace } from "./web-urls.mjs";
-import { HTTP_STATUS } from "@verdaccio/core";
+import { HEADERS, HTTP_STATUS } from "@verdaccio/core";
 import buildDebug from "debug";
 import express from "express";
 import fs from "node:fs";
@@ -63,12 +64,19 @@ function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {
 	if (config?.web?.logo) config.web.logo = logo;
 	const logoDark = renderLogo(config?.web?.logoDark);
 	if (config?.web?.logoDark) config.web.logoDark = logoDark;
+	router.get(WebUrlsNamespace.static + "ui-options.js", function(req, res) {
+		const options = getUIOptions(config, req, res);
+		const script = `window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(options)};`;
+		res.setHeader(HEADERS.CACHE_CONTROL, HEADERS.NO_CACHE);
+		res.setHeader(HEADERS.CONTENT_TYPE, HEADERS.JAVASCRIPT_CHARSET);
+		res.send(script);
+	});
 	router.get(WebUrlsNamespace.web, function(req, res) {
-		renderHTML(config, manifest, manifestFiles, req, res);
+		renderHTML(config, manifest, manifestFiles, getUIOptions(config, req, res), res);
 		debug("render html section");
 	});
 	router.get(WebUrlsNamespace.root, function(req, res) {
-		renderHTML(config, manifest, manifestFiles, req, res);
+		renderHTML(config, manifest, manifestFiles, getUIOptions(config, req, res), res);
 		debug("render root");
 	});
 	return router;

package/build/middlewares/web/render-web.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"render-web.mjs","names":[],"sources":["../../../src/middlewares/web/render-web.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport express from 'express';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HTTP_STATUS } from '@verdaccio/core';\nimport { isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { setSecurityWebHeaders } from './security';\nimport renderHTML from './utils/renderHTML';\nimport { WebUrlsNamespace } from './web-urls';\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst sendFileCallback = (next) => (err) => {\n  if (!err) {\n    return;\n  }\n  if (err.status === HTTP_STATUS.NOT_FOUND) {\n    next();\n  } else {\n    next(err);\n  }\n};\n\nexport function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {\n  const { staticPath, manifest, manifestFiles } = pluginOptions;\n  debug('static path %o', staticPath);\n\n  /* eslint new-cap:off */\n  const router = express.Router();\n  if (typeof tokenMiddleware === 'function') {\n    router.use(tokenMiddleware);\n  }\n\n  router.use(setSecurityWebHeaders);\n\n  // any match within the static is routed to the file system\n  router.get(\n    WebUrlsNamespace.static,\n    function (req: express.Request<{ all: string | string[] }>, res, next) {\n      const filename = Array.isArray(req.params.all) ? req.params.all.join('/') : req.params.all;\n      if (filename === 'favicon.ico' && config?.web?.favicon) {\n        const file = config?.web?.favicon;\n        if (isURLhasValidProtocol(file)) {\n          debug('redirect to favicon %s', file);\n          req.url = file;\n          return next();\n        }\n        debug('render custom favicon %o', file);\n        res.sendFile(file, sendFileCallback(next));\n        return;\n      }\n      debug('render static file %o', filename);\n      res.sendFile(filename, { root: staticPath }, sendFileCallback(next));\n    }\n  );\n\n  function renderLogo(logo: string | undefined): string | undefined {\n    // check the origin of the logo\n    if (logo && !isURLhasValidProtocol(logo)) {\n      // URI related to a local file\n      const absoluteLocalFile = path.posix.resolve(logo);\n      debug('serve local logo %s', absoluteLocalFile);\n      try {\n        // TODO: replace existsSync by async alternative\n        if (\n          fs.existsSync(absoluteLocalFile) &&\n          typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === 'undefined'\n        ) {\n          // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n          // Use POSIX version `path.posix.join` instead.\n          logo = `/-/static/${path.basename(logo)}`;\n          router.get(logo, function (_req, res, next) {\n            // @ts-ignore\n            debug('serve custom logo  web:%s - local:%s', logo, absoluteLocalFile);\n            res.sendFile(\n              path.basename(absoluteLocalFile),\n              { root: path.dirname(absoluteLocalFile) },\n              sendFileCallback(next)\n            );\n          });\n          debug('enabled custom logo %s', logo);\n        } else {\n          logo = undefined;\n          debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n        }\n      } catch {\n        logo = undefined;\n        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n      }\n    }\n    return logo;\n  }\n\n  const logo = renderLogo(config?.web?.logo);\n  if (config?.web?.logo) {\n    config.web.logo = logo;\n  }\n  const logoDark = renderLogo(config?.web?.logoDark);\n  if (config?.web?.logoDark) {\n    config.web.logoDark = logoDark;\n  }\n\n  // Handle all web routes including security routes\n  router.get(WebUrlsNamespace.web, function (req, res) {\n    renderHTML(config, manifest, manifestFiles, req, res);\n    debug('render html section');\n  });\n\n  router.get(WebUrlsNamespace.root, function (req, res) {\n    renderHTML(config, manifest, manifestFiles, req, res);\n    debug('render root');\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;AAYA,IAAM,QAAQ,WAAW,uBAAuB;AAEhD,IAAM,oBAAoB,UAAU,QAAQ;AAC1C,KAAI,CAAC,IACH;AAEF,KAAI,IAAI,WAAW,YAAY,UAC7B,OAAM;KAEN,MAAK,IAAI;;AAIb,SAAgB,oBAAoB,QAAQ,iBAAiB,eAAe;CAC1E,MAAM,EAAE,YAAY,UAAU,kBAAkB;AAChD,OAAM,kBAAkB,WAAW;CAGnC,MAAM,SAAS,QAAQ,QAAQ;AAC/B,KAAI,OAAO,oBAAoB,WAC7B,QAAO,IAAI,gBAAgB;AAG7B,QAAO,IAAI,sBAAsB;AAGjC,QAAO,IACL,iBAAiB,QACjB,SAAU,KAAkD,KAAK,MAAM;EACrE,MAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,GAAG,IAAI,OAAO,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO;AACvF,MAAI,aAAa,iBAAiB,QAAQ,KAAK,SAAS;GACtD,MAAM,OAAO,QAAQ,KAAK;AAC1B,OAAI,sBAAsB,KAAK,EAAE;AAC/B,UAAM,0BAA0B,KAAK;AACrC,QAAI,MAAM;AACV,WAAO,MAAM;;AAEf,SAAM,4BAA4B,KAAK;AACvC,OAAI,SAAS,MAAM,iBAAiB,KAAK,CAAC;AAC1C;;AAEF,QAAM,yBAAyB,SAAS;AACxC,MAAI,SAAS,UAAU,EAAE,MAAM,YAAY,EAAE,iBAAiB,KAAK,CAAC;GAEvE;CAED,SAAS,WAAW,MAA8C;AAEhE,MAAI,QAAQ,CAAC,sBAAsB,KAAK,EAAE;GAExC,MAAM,oBAAoB,KAAK,MAAM,QAAQ,KAAK;AAClD,SAAM,uBAAuB,kBAAkB;AAC/C,OAAI;AAEF,QACE,GAAG,WAAW,kBAAkB,IAChC,OAAO,GAAG,WAAW,mBAAmB,GAAG,UAAU,KAAK,KAAK,aAC/D;AAGA,YAAO,aAAa,KAAK,SAAS,KAAK;AACvC,YAAO,IAAI,MAAM,SAAU,MAAM,KAAK,MAAM;AAE1C,YAAM,wCAAwC,MAAM,kBAAkB;AACtE,UAAI,SACF,KAAK,SAAS,kBAAkB,EAChC,EAAE,MAAM,KAAK,QAAQ,kBAAkB,EAAE,EACzC,iBAAiB,KAAK,CACvB;OACD;AACF,WAAM,0BAA0B,KAAK;WAChC;AACL,YAAO,KAAA;AACP,WAAM,2BAA2B,kBAAkB,oCAAoC;;WAEnF;AACN,WAAO,KAAA;AACP,UAAM,2BAA2B,kBAAkB,oCAAoC;;;AAG3F,SAAO;;CAGT,MAAM,OAAO,WAAW,QAAQ,KAAK,KAAK;AAC1C,KAAI,QAAQ,KAAK,KACf,QAAO,IAAI,OAAO;CAEpB,MAAM,WAAW,WAAW,QAAQ,KAAK,SAAS;AAClD,KAAI,QAAQ,KAAK,SACf,QAAO,IAAI,WAAW;AAIxB,QAAO,IAAI,iBAAiB,KAAK,SAAU,KAAK,KAAK;AACnD,aAAW,QAAQ,UAAU,eAAe,KAAK,IAAI;AACrD,QAAM,sBAAsB;GAC5B;AAEF,QAAO,IAAI,iBAAiB,MAAM,SAAU,KAAK,KAAK;AACpD,aAAW,QAAQ,UAAU,eAAe,KAAK,IAAI;AACrD,QAAM,cAAc;GACpB;AAEF,QAAO"}
+{"version":3,"file":"render-web.mjs","names":[],"sources":["../../../src/middlewares/web/render-web.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport express from 'express';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HEADERS, HTTP_STATUS } from '@verdaccio/core';\nimport { isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { setSecurityWebHeaders } from './security';\nimport renderHTML from './utils/renderHTML';\nimport { getUIOptions } from './utils/ui-options';\nimport { WebUrlsNamespace } from './web-urls';\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst sendFileCallback = (next) => (err) => {\n  if (!err) {\n    return;\n  }\n  if (err.status === HTTP_STATUS.NOT_FOUND) {\n    next();\n  } else {\n    next(err);\n  }\n};\n\nexport function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {\n  const { staticPath, manifest, manifestFiles } = pluginOptions;\n  debug('static path %o', staticPath);\n\n  /* eslint new-cap:off */\n  const router = express.Router();\n  if (typeof tokenMiddleware === 'function') {\n    router.use(tokenMiddleware);\n  }\n\n  router.use(setSecurityWebHeaders);\n\n  // any match within the static is routed to the file system\n  router.get(\n    WebUrlsNamespace.static,\n    function (req: express.Request<{ all: string | string[] }>, res, next) {\n      const filename = Array.isArray(req.params.all) ? req.params.all.join('/') : req.params.all;\n      if (filename === 'favicon.ico' && config?.web?.favicon) {\n        const file = config?.web?.favicon;\n        if (isURLhasValidProtocol(file)) {\n          debug('redirect to favicon %s', file);\n          req.url = file;\n          return next();\n        }\n        debug('render custom favicon %o', file);\n        res.sendFile(file, sendFileCallback(next));\n        return;\n      }\n      debug('render static file %o', filename);\n      res.sendFile(filename, { root: staticPath }, sendFileCallback(next));\n    }\n  );\n\n  function renderLogo(logo: string | undefined): string | undefined {\n    // check the origin of the logo\n    if (logo && !isURLhasValidProtocol(logo)) {\n      // URI related to a local file\n      const absoluteLocalFile = path.posix.resolve(logo);\n      debug('serve local logo %s', absoluteLocalFile);\n      try {\n        // TODO: replace existsSync by async alternative\n        if (\n          fs.existsSync(absoluteLocalFile) &&\n          typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === 'undefined'\n        ) {\n          // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n          // Use POSIX version `path.posix.join` instead.\n          logo = `/-/static/${path.basename(logo)}`;\n          router.get(logo, function (_req, res, next) {\n            // @ts-ignore\n            debug('serve custom logo  web:%s - local:%s', logo, absoluteLocalFile);\n            res.sendFile(\n              path.basename(absoluteLocalFile),\n              { root: path.dirname(absoluteLocalFile) },\n              sendFileCallback(next)\n            );\n          });\n          debug('enabled custom logo %s', logo);\n        } else {\n          logo = undefined;\n          debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n        }\n      } catch {\n        logo = undefined;\n        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n      }\n    }\n    return logo;\n  }\n\n  const logo = renderLogo(config?.web?.logo);\n  if (config?.web?.logo) {\n    config.web.logo = logo;\n  }\n  const logoDark = renderLogo(config?.web?.logoDark);\n  if (config?.web?.logoDark) {\n    config.web.logoDark = logoDark;\n  }\n\n  // Serve external script that loads UI options\n  router.get(WebUrlsNamespace.static + 'ui-options.js', function (req, res) {\n    const options = getUIOptions(config, req, res);\n    const script = `window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(options)};`;\n    res.setHeader(HEADERS.CACHE_CONTROL, HEADERS.NO_CACHE);\n    res.setHeader(HEADERS.CONTENT_TYPE, HEADERS.JAVASCRIPT_CHARSET);\n    res.send(script);\n  });\n\n  // Handle all web routes including security routes\n  router.get(WebUrlsNamespace.web, function (req, res) {\n    const options = getUIOptions(config, req, res);\n    renderHTML(config, manifest, manifestFiles, options, res);\n    debug('render html section');\n  });\n\n  router.get(WebUrlsNamespace.root, function (req, res) {\n    const options = getUIOptions(config, req, res);\n    renderHTML(config, manifest, manifestFiles, options, res);\n    debug('render root');\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;;AAaA,IAAM,QAAQ,WAAW,uBAAuB;AAEhD,IAAM,oBAAoB,UAAU,QAAQ;AAC1C,KAAI,CAAC,IACH;AAEF,KAAI,IAAI,WAAW,YAAY,UAC7B,OAAM;KAEN,MAAK,IAAI;;AAIb,SAAgB,oBAAoB,QAAQ,iBAAiB,eAAe;CAC1E,MAAM,EAAE,YAAY,UAAU,kBAAkB;AAChD,OAAM,kBAAkB,WAAW;CAGnC,MAAM,SAAS,QAAQ,QAAQ;AAC/B,KAAI,OAAO,oBAAoB,WAC7B,QAAO,IAAI,gBAAgB;AAG7B,QAAO,IAAI,sBAAsB;AAGjC,QAAO,IACL,iBAAiB,QACjB,SAAU,KAAkD,KAAK,MAAM;EACrE,MAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,GAAG,IAAI,OAAO,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO;AACvF,MAAI,aAAa,iBAAiB,QAAQ,KAAK,SAAS;GACtD,MAAM,OAAO,QAAQ,KAAK;AAC1B,OAAI,sBAAsB,KAAK,EAAE;AAC/B,UAAM,0BAA0B,KAAK;AACrC,QAAI,MAAM;AACV,WAAO,MAAM;;AAEf,SAAM,4BAA4B,KAAK;AACvC,OAAI,SAAS,MAAM,iBAAiB,KAAK,CAAC;AAC1C;;AAEF,QAAM,yBAAyB,SAAS;AACxC,MAAI,SAAS,UAAU,EAAE,MAAM,YAAY,EAAE,iBAAiB,KAAK,CAAC;GAEvE;CAED,SAAS,WAAW,MAA8C;AAEhE,MAAI,QAAQ,CAAC,sBAAsB,KAAK,EAAE;GAExC,MAAM,oBAAoB,KAAK,MAAM,QAAQ,KAAK;AAClD,SAAM,uBAAuB,kBAAkB;AAC/C,OAAI;AAEF,QACE,GAAG,WAAW,kBAAkB,IAChC,OAAO,GAAG,WAAW,mBAAmB,GAAG,UAAU,KAAK,KAAK,aAC/D;AAGA,YAAO,aAAa,KAAK,SAAS,KAAK;AACvC,YAAO,IAAI,MAAM,SAAU,MAAM,KAAK,MAAM;AAE1C,YAAM,wCAAwC,MAAM,kBAAkB;AACtE,UAAI,SACF,KAAK,SAAS,kBAAkB,EAChC,EAAE,MAAM,KAAK,QAAQ,kBAAkB,EAAE,EACzC,iBAAiB,KAAK,CACvB;OACD;AACF,WAAM,0BAA0B,KAAK;WAChC;AACL,YAAO,KAAA;AACP,WAAM,2BAA2B,kBAAkB,oCAAoC;;WAEnF;AACN,WAAO,KAAA;AACP,UAAM,2BAA2B,kBAAkB,oCAAoC;;;AAG3F,SAAO;;CAGT,MAAM,OAAO,WAAW,QAAQ,KAAK,KAAK;AAC1C,KAAI,QAAQ,KAAK,KACf,QAAO,IAAI,OAAO;CAEpB,MAAM,WAAW,WAAW,QAAQ,KAAK,SAAS;AAClD,KAAI,QAAQ,KAAK,SACf,QAAO,IAAI,WAAW;AAIxB,QAAO,IAAI,iBAAiB,SAAS,iBAAiB,SAAU,KAAK,KAAK;EACxE,MAAM,UAAU,aAAa,QAAQ,KAAK,IAAI;EAC9C,MAAM,SAAS,0CAA0C,KAAK,UAAU,QAAQ,CAAC;AACjF,MAAI,UAAU,QAAQ,eAAe,QAAQ,SAAS;AACtD,MAAI,UAAU,QAAQ,cAAc,QAAQ,mBAAmB;AAC/D,MAAI,KAAK,OAAO;GAChB;AAGF,QAAO,IAAI,iBAAiB,KAAK,SAAU,KAAK,KAAK;AAEnD,aAAW,QAAQ,UAAU,eADb,aAAa,QAAQ,KAAK,IAAI,EACO,IAAI;AACzD,QAAM,sBAAsB;GAC5B;AAEF,QAAO,IAAI,iBAAiB,MAAM,SAAU,KAAK,KAAK;AAEpD,aAAW,QAAQ,UAAU,eADb,aAAa,QAAQ,KAAK,IAAI,EACO,IAAI;AACzD,QAAM,cAAc;GACpB;AAEF,QAAO"}

package/build/middlewares/web/utils/renderHTML.d.ts

@@ -1,7 +1,5 @@
 import { Response } from 'express';
-import { ConfigYaml } from '@verdaccio/types';
-import { RequestOptions } from '@verdaccio/url';
+import { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';
 import { Manifest } from './manifest';
 import { AssetManifest } from './template';
-export declare function resolveLogo(logo: string | undefined, url_prefix: string | undefined, requestOptions: RequestOptions): string;
-export default function renderHTML(config: ConfigYaml, manifest: AssetManifest, manifestFiles: Manifest | null | undefined, requestOptions: RequestOptions, res: Response): void;
+export default function renderHTML(config: ConfigYaml, manifest: AssetManifest, manifestFiles: Manifest | null | undefined, options: TemplateUIOptions, res: Response): void;

package/build/middlewares/web/utils/renderHTML.js

@@ -1,18 +1,10 @@
 const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
 const require_template = require("./template.js");
-const require_web_utils = require("./web-utils.js");
 let _verdaccio_core = require("@verdaccio/core");
 let debug = require("debug");
 debug = require_runtime.__toESM(debug);
-let node_url = require("node:url");
-let _verdaccio_config = require("@verdaccio/config");
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path);
-let _verdaccio_url = require("@verdaccio/url");
-let lru_cache = require("lru-cache");
 //#region src/middlewares/web/utils/renderHTML.ts
-var DEFAULT_LANGUAGE = "es-US";
-var cache = new lru_cache.LRUCache({
+var cache = new (require("lru-cache")).LRUCache({
 	max: 500,
 	ttl: 1e3 * 60 * 60
 });
@@ -22,70 +14,11 @@ var defaultManifestFiles = {
 	ico: "favicon.ico",
 	css: []
 };
-function resolveLogo(logo, url_prefix, requestOptions) {
-	if (typeof logo !== "string") return "";
-	if (logo && !(0, _verdaccio_url.isURLhasValidProtocol)(logo)) return `${(0, _verdaccio_url.getPublicUrl)(url_prefix, requestOptions)}-/static/${node_path.default.basename(logo)}`;
-	else if ((0, _verdaccio_url.isURLhasValidProtocol)(logo)) return logo;
-	else return "";
-}
-function renderHTML(config, manifest, manifestFiles, requestOptions, res) {
-	const { url_prefix } = config;
-	const base = (0, _verdaccio_url.getPublicUrl)(config?.url_prefix, requestOptions);
-	const basename = node_url.URL.canParse(base) ? new node_url.URL(base).pathname : base;
-	const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
-	const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
+function renderHTML(config, manifest, manifestFiles, options, res) {
 	const needHtmlCache = [void 0, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
-	const darkMode = config?.web?.darkMode ?? false;
-	const title = config?.web?.title ?? _verdaccio_config.WEB_TITLE;
-	const login = require_web_utils.hasLogin(config);
-	const scope = config?.web?.scope ?? "";
-	const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
-	const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
-	const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
-	const pkgManagers = config?.web?.pkgManagers ?? [
-		"yarn",
-		"pnpm",
-		"npm"
-	];
-	const version = res.locals.app_version ?? "";
-	const flags = {
-		...config.flags,
-		...config.experiments
-	};
-	const primaryColor = require_web_utils.validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? "#4b5e40";
-	const { scriptsBodyAfter, metaScripts, scriptsbodyBefore, showInfo, showSettings, showThemeSwitch, showFooter, showSearch, showDownloadTarball, showRaw, showUplinks } = Object.assign({}, {
-		scriptsBodyAfter: [],
-		bodyBefore: [],
-		metaScripts: []
-	}, config?.web);
-	let scriptsBodyBefore = config?.web?.scriptsBodyBefore;
-	if (scriptsbodyBefore && !scriptsBodyBefore) scriptsBodyBefore = scriptsbodyBefore;
-	const options = {
-		showInfo,
-		showSettings,
-		showThemeSwitch,
-		showFooter,
-		showSearch,
-		showDownloadTarball,
-		showRaw,
-		showUplinks,
-		darkMode,
-		url_prefix,
-		basename,
-		base,
-		primaryColor,
-		version,
-		logo,
-		logoDark,
-		favicon,
-		flags,
-		login,
-		pkgManagers,
-		title,
-		scope,
-		language,
-		hideDeprecatedVersions
-	};
+	const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];
+	const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];
+	const metaScripts = config?.web?.metaScripts || [];
 	let webPage;
 	const cacheKey = `template:${JSON.stringify(options)}`;
 	try {

package/build/middlewares/web/utils/renderHTML.js.map

@@ -1 +1 @@
-{"version":3,"file":"renderHTML.js","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport type { RequestOptions } from '@verdaccio/url';\nimport { getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'es-US';\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport function resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  requestOptions: RequestOptions,\n  res: Response\n) {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    scriptsBodyAfter,\n    metaScripts,\n    scriptsbodyBefore, // deprecated\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign(\n    {},\n    {\n      scriptsBodyAfter: [],\n      bodyBefore: [],\n      metaScripts: [],\n    },\n    config?.web\n  );\n  // Fallback\n  let scriptsBodyBefore = config?.web?.scriptsBodyBefore;\n  if (scriptsbodyBefore && !scriptsBodyBefore) {\n    scriptsBodyBefore = scriptsbodyBefore;\n  }\n  const options: TemplateUIOptions = {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,IAAM,mBAAmB;AAEzB,IAAM,QAAQ,IAAI,UAAA,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;CAAI,CAAC;AAE7D,IAAM,WAAA,GAAA,MAAA,SAAmB,uBAAuB;AAEhD,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,UAAU;CAC7B,KAAK;CACL,KAAK,EAAE;CACR;AAED,SAAgB,YACd,MACA,YACA,gBACA;AACA,KAAI,OAAO,SAAS,SAClB,QAAO;AAIT,KAFoB,QAAQ,EAAA,GAAA,eAAA,uBAAuB,KAAK,CAGtD,QAAO,IAAA,GAAA,eAAA,cAAgB,YAAY,eAAe,CAAC,WAAW,UAAA,QAAK,SAAS,KAAK;oDAClD,KAAK,CACpC,QAAO;KAEP,QAAO;;AAIX,SAAwB,WACtB,QACA,UACA,eACA,gBACA,KACA;CACA,MAAM,EAAE,eAAe;CACvB,MAAM,QAAA,GAAA,eAAA,cAAoB,QAAQ,YAAY,eAAe;CAC7D,MAAM,WAAW,SAAA,IAAI,SAAS,KAAK,GAAG,IAAI,SAAA,IAAI,KAAK,CAAC,WAAW;CAC/D,MAAM,WAAW,QAAQ,MAAM,OAAO;CACtC,MAAM,yBAAyB,QAAQ,KAAK,0BAA0B;CAEtE,MAAM,gBAAgB,CAAC,KAAA,GAAW,KAAK,CAAC,SAAS,QAAQ,KAAK,WAAW,GACrE,OACA,QAAQ,KAAK;CACjB,MAAM,WAAW,QAAQ,KAAK,YAAY;CAC1C,MAAM,QAAQ,QAAQ,KAAK,SAAS,kBAAA;CACpC,MAAM,QAAQ,kBAAA,SAAS,OAAO;CAC9B,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS,QAAQ,YAAY,eAAe;CACrF,MAAM,OAAO,YAAY,QAAQ,KAAK,MAAM,QAAQ,YAAY,eAAe;CAC/E,MAAM,WAAW,YAAY,QAAQ,KAAK,UAAU,QAAQ,YAAY,eAAe;CACvF,MAAM,cAAc,QAAQ,KAAK,eAAe;EAAC;EAAQ;EAAQ;EAAM;CACvE,MAAM,UAAU,IAAI,OAAO,eAAe;CAC1C,MAAM,QAAQ;EACZ,GAAG,OAAO;EAEV,GAAG,OAAO;EACX;CACD,MAAM,eACJ,kBAAA,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,aAAa,IAAI;CACnF,MAAM,EACJ,kBACA,aACA,mBACA,UACA,cACA,iBACA,YACA,YACA,qBACA,SACA,gBACE,OAAO,OACT,EAAE,EACF;EACE,kBAAkB,EAAE;EACpB,YAAY,EAAE;EACd,aAAa,EAAE;EAChB,EACD,QAAQ,IACT;CAED,IAAI,oBAAoB,QAAQ,KAAK;AACrC,KAAI,qBAAqB,CAAC,kBACxB,qBAAoB;CAEtB,MAAM,UAA6B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CAED,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,QAAQ;AAEpD,KAAI;AACF,YAAU,MAAM,IAAI,SAAS;AAC7B,MAAI,CAAC,SAAS;AACZ,aAAU,iBAAA,QACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;IACD,EACD,SACD;AAED,OAAI,eAAe;AACjB,UAAM,IAAI,UAAU,QAAQ;AAC5B,YAAM,qBAAqB;;QAG7B,SAAM,uBAAuB;UAExB,OAAY;AACnB,QAAM,IAAI,MAAM,kCAAkC,MAAM,QAAQ;;AAElE,KAAI,UAAU,gBAAgB,gBAAA,QAAQ,UAAU;AAChD,KAAI,KAAK,QAAQ;AACjB,SAAM,eAAe"}
+{"version":3,"file":"renderHTML.js","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\n\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\n\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  options: TemplateUIOptions,\n  res: Response\n) {\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n\n  const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];\n  const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];\n  const metaScripts = config?.web?.metaScripts || [];\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;AAYA,IAAM,QAAQ,2BAAI,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;CAAI,CAAC;AAE7D,IAAM,WAAA,GAAA,MAAA,SAAmB,uBAAuB;AAEhD,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,UAAU;CAC7B,KAAK;CACL,KAAK,EAAE;CACR;AAED,SAAwB,WACtB,QACA,UACA,eACA,SACA,KACA;CAEA,MAAM,gBAAgB,CAAC,KAAA,GAAW,KAAK,CAAC,SAAS,QAAQ,KAAK,WAAW,GACrE,OACA,QAAQ,KAAK;CAEjB,MAAM,oBAAoB,QAAQ,KAAK,qBAAqB,QAAQ,KAAK,qBAAqB,EAAE;CAChG,MAAM,mBAAmB,QAAQ,KAAK,oBAAoB,EAAE;CAC5D,MAAM,cAAc,QAAQ,KAAK,eAAe,EAAE;CAElD,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,QAAQ;AAEpD,KAAI;AACF,YAAU,MAAM,IAAI,SAAS;AAC7B,MAAI,CAAC,SAAS;AACZ,aAAU,iBAAA,QACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;IACD,EACD,SACD;AAED,OAAI,eAAe;AACjB,UAAM,IAAI,UAAU,QAAQ;AAC5B,YAAM,qBAAqB;;QAG7B,SAAM,uBAAuB;UAExB,OAAY;AACnB,QAAM,IAAI,MAAM,kCAAkC,MAAM,QAAQ;;AAElE,KAAI,UAAU,gBAAgB,gBAAA,QAAQ,UAAU;AAChD,KAAI,KAAK,QAAQ;AACjB,SAAM,eAAe"}

package/build/middlewares/web/utils/renderHTML.mjs

@@ -1,14 +1,8 @@
 import renderTemplate from "./template.mjs";
-import { hasLogin, validatePrimaryColor } from "./web-utils.mjs";
 import { HEADERS } from "@verdaccio/core";
 import buildDebug from "debug";
-import { URL } from "node:url";
-import { WEB_TITLE } from "@verdaccio/config";
-import path from "node:path";
-import { getPublicUrl, isURLhasValidProtocol } from "@verdaccio/url";
 import { LRUCache } from "lru-cache";
 //#region src/middlewares/web/utils/renderHTML.ts
-var DEFAULT_LANGUAGE = "es-US";
 var cache = new LRUCache({
 	max: 500,
 	ttl: 1e3 * 60 * 60
@@ -19,70 +13,11 @@ var defaultManifestFiles = {
 	ico: "favicon.ico",
 	css: []
 };
-function resolveLogo(logo, url_prefix, requestOptions) {
-	if (typeof logo !== "string") return "";
-	if (logo && !isURLhasValidProtocol(logo)) return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;
-	else if (isURLhasValidProtocol(logo)) return logo;
-	else return "";
-}
-function renderHTML(config, manifest, manifestFiles, requestOptions, res) {
-	const { url_prefix } = config;
-	const base = getPublicUrl(config?.url_prefix, requestOptions);
-	const basename = URL.canParse(base) ? new URL(base).pathname : base;
-	const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
-	const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
+function renderHTML(config, manifest, manifestFiles, options, res) {
 	const needHtmlCache = [void 0, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
-	const darkMode = config?.web?.darkMode ?? false;
-	const title = config?.web?.title ?? WEB_TITLE;
-	const login = hasLogin(config);
-	const scope = config?.web?.scope ?? "";
-	const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
-	const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
-	const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
-	const pkgManagers = config?.web?.pkgManagers ?? [
-		"yarn",
-		"pnpm",
-		"npm"
-	];
-	const version = res.locals.app_version ?? "";
-	const flags = {
-		...config.flags,
-		...config.experiments
-	};
-	const primaryColor = validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? "#4b5e40";
-	const { scriptsBodyAfter, metaScripts, scriptsbodyBefore, showInfo, showSettings, showThemeSwitch, showFooter, showSearch, showDownloadTarball, showRaw, showUplinks } = Object.assign({}, {
-		scriptsBodyAfter: [],
-		bodyBefore: [],
-		metaScripts: []
-	}, config?.web);
-	let scriptsBodyBefore = config?.web?.scriptsBodyBefore;
-	if (scriptsbodyBefore && !scriptsBodyBefore) scriptsBodyBefore = scriptsbodyBefore;
-	const options = {
-		showInfo,
-		showSettings,
-		showThemeSwitch,
-		showFooter,
-		showSearch,
-		showDownloadTarball,
-		showRaw,
-		showUplinks,
-		darkMode,
-		url_prefix,
-		basename,
-		base,
-		primaryColor,
-		version,
-		logo,
-		logoDark,
-		favicon,
-		flags,
-		login,
-		pkgManagers,
-		title,
-		scope,
-		language,
-		hideDeprecatedVersions
-	};
+	const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];
+	const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];
+	const metaScripts = config?.web?.metaScripts || [];
 	let webPage;
 	const cacheKey = `template:${JSON.stringify(options)}`;
 	try {

package/build/middlewares/web/utils/renderHTML.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"renderHTML.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport type { RequestOptions } from '@verdaccio/url';\nimport { getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'es-US';\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport function resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  requestOptions: RequestOptions,\n  res: Response\n) {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    scriptsBodyAfter,\n    metaScripts,\n    scriptsbodyBefore, // deprecated\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign(\n    {},\n    {\n      scriptsBodyAfter: [],\n      bodyBefore: [],\n      metaScripts: [],\n    },\n    config?.web\n  );\n  // Fallback\n  let scriptsBodyBefore = config?.web?.scriptsBodyBefore;\n  if (scriptsbodyBefore && !scriptsBodyBefore) {\n    scriptsBodyBefore = scriptsbodyBefore;\n  }\n  const options: TemplateUIOptions = {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;;;;AAiBA,IAAM,mBAAmB;AAEzB,IAAM,QAAQ,IAAI,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;CAAI,CAAC;AAE7D,IAAM,QAAQ,WAAW,uBAAuB;AAEhD,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,UAAU;CAC7B,KAAK;CACL,KAAK,EAAE;CACR;AAED,SAAgB,YACd,MACA,YACA,gBACA;AACA,KAAI,OAAO,SAAS,SAClB,QAAO;AAIT,KAFoB,QAAQ,CAAC,sBAAsB,KAAK,CAGtD,QAAO,GAAG,aAAa,YAAY,eAAe,CAAC,WAAW,KAAK,SAAS,KAAK;UACxE,sBAAsB,KAAK,CACpC,QAAO;KAEP,QAAO;;AAIX,SAAwB,WACtB,QACA,UACA,eACA,gBACA,KACA;CACA,MAAM,EAAE,eAAe;CACvB,MAAM,OAAO,aAAa,QAAQ,YAAY,eAAe;CAC7D,MAAM,WAAW,IAAI,SAAS,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,WAAW;CAC/D,MAAM,WAAW,QAAQ,MAAM,OAAO;CACtC,MAAM,yBAAyB,QAAQ,KAAK,0BAA0B;CAEtE,MAAM,gBAAgB,CAAC,KAAA,GAAW,KAAK,CAAC,SAAS,QAAQ,KAAK,WAAW,GACrE,OACA,QAAQ,KAAK;CACjB,MAAM,WAAW,QAAQ,KAAK,YAAY;CAC1C,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,QAAQ,SAAS,OAAO;CAC9B,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS,QAAQ,YAAY,eAAe;CACrF,MAAM,OAAO,YAAY,QAAQ,KAAK,MAAM,QAAQ,YAAY,eAAe;CAC/E,MAAM,WAAW,YAAY,QAAQ,KAAK,UAAU,QAAQ,YAAY,eAAe;CACvF,MAAM,cAAc,QAAQ,KAAK,eAAe;EAAC;EAAQ;EAAQ;EAAM;CACvE,MAAM,UAAU,IAAI,OAAO,eAAe;CAC1C,MAAM,QAAQ;EACZ,GAAG,OAAO;EAEV,GAAG,OAAO;EACX;CACD,MAAM,eACJ,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,aAAa,IAAI;CACnF,MAAM,EACJ,kBACA,aACA,mBACA,UACA,cACA,iBACA,YACA,YACA,qBACA,SACA,gBACE,OAAO,OACT,EAAE,EACF;EACE,kBAAkB,EAAE;EACpB,YAAY,EAAE;EACd,aAAa,EAAE;EAChB,EACD,QAAQ,IACT;CAED,IAAI,oBAAoB,QAAQ,KAAK;AACrC,KAAI,qBAAqB,CAAC,kBACxB,qBAAoB;CAEtB,MAAM,UAA6B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;CAED,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,QAAQ;AAEpD,KAAI;AACF,YAAU,MAAM,IAAI,SAAS;AAC7B,MAAI,CAAC,SAAS;AACZ,aAAU,eACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;IACD,EACD,SACD;AAED,OAAI,eAAe;AACjB,UAAM,IAAI,UAAU,QAAQ;AAC5B,UAAM,qBAAqB;;QAG7B,OAAM,uBAAuB;UAExB,OAAY;AACnB,QAAM,IAAI,MAAM,kCAAkC,MAAM,QAAQ;;AAElE,KAAI,UAAU,gBAAgB,QAAQ,UAAU;AAChD,KAAI,KAAK,QAAQ;AACjB,OAAM,eAAe"}
+{"version":3,"file":"renderHTML.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport { LRUCache } from 'lru-cache';\n\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\n\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  options: TemplateUIOptions,\n  res: Response\n) {\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n\n  const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];\n  const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];\n  const metaScripts = config?.web?.metaScripts || [];\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;AAYA,IAAM,QAAQ,IAAI,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;CAAI,CAAC;AAE7D,IAAM,QAAQ,WAAW,uBAAuB;AAEhD,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,UAAU;CAC7B,KAAK;CACL,KAAK,EAAE;CACR;AAED,SAAwB,WACtB,QACA,UACA,eACA,SACA,KACA;CAEA,MAAM,gBAAgB,CAAC,KAAA,GAAW,KAAK,CAAC,SAAS,QAAQ,KAAK,WAAW,GACrE,OACA,QAAQ,KAAK;CAEjB,MAAM,oBAAoB,QAAQ,KAAK,qBAAqB,QAAQ,KAAK,qBAAqB,EAAE;CAChG,MAAM,mBAAmB,QAAQ,KAAK,oBAAoB,EAAE;CAC5D,MAAM,cAAc,QAAQ,KAAK,eAAe,EAAE;CAElD,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,QAAQ;AAEpD,KAAI;AACF,YAAU,MAAM,IAAI,SAAS;AAC7B,MAAI,CAAC,SAAS;AACZ,aAAU,eACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;IACD,EACD,SACD;AAED,OAAI,eAAe;AACjB,UAAM,IAAI,UAAU,QAAQ;AAC5B,UAAM,qBAAqB;;QAG7B,OAAM,uBAAuB;UAExB,OAAY;AACnB,QAAM,IAAI,MAAM,kCAAkC,MAAM,QAAQ;;AAElE,KAAI,UAAU,gBAAgB,QAAQ,UAAU;AAChD,KAAI,KAAK,QAAQ;AACjB,OAAM,eAAe"}

package/build/middlewares/web/utils/template.js

@@ -16,9 +16,7 @@ function renderTemplate(template, manifest) {
         <title>${template?.options?.title ?? ""}</title>
         <link rel="icon" href="${template?.options.base}-/static/favicon.ico">
         <meta name="viewport" content="width=device-width, initial-scale=1">
-        <script>
-            window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(template.options)}
-        <\/script>
+        <script src="${template?.options.base}-/static/ui-options.js"><\/script>
         ${template.manifest.css?.length ? require_manifest.getManifestValue(template.manifest.css, manifest, template?.options.base).map((item) => `<link rel="stylesheet" href="${item}">`).join("\n        ") : ""}
         ${template?.metaScripts ? template.metaScripts.join("") : ""}
       </head>

package/build/middlewares/web/utils/template.js.map

@@ -1 +1 @@
-{"version":3,"file":"template.js","names":[],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport { getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsBodyBefore?: string[];\n};\n\nexport interface AssetManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: AssetManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\">\n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>\n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <script>\n            window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(template.options)}\n        </script>\n        ${\n          template.manifest.css?.length\n            ? getManifestValue(template.manifest.css, manifest, template?.options.base)\n                .map((item) => `<link rel=\"stylesheet\" href=\"${item}\">`)\n                .join('\\n        ')\n            : ''\n        }\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>\n      <body class=\"body\">\n        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script type=\"module\" src=\"${item}\"></script>`)\n          .join(`\\n        `)}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,gCAAgC;AAczD,SAAwB,eAAe,UAAoB,UAAyB;AAClF,SAAM,eAAe,SAAS;AAC9B,SAAM,eAAe,SAAS;AAE9B,QAAO;;;;;sBAKa,UAAU,QAAQ,KAAK;iBAC5B,UAAU,SAAS,SAAS,GAAG;iCACf,UAAU,QAAQ,KAAK;;;qDAGH,KAAK,UAAU,SAAS,QAAQ,CAAC;;UAG5E,SAAS,SAAS,KAAK,SACnB,iBAAA,iBAAiB,SAAS,SAAS,KAAK,UAAU,UAAU,QAAQ,KAAK,CACtE,KAAK,SAAS,gCAAgC,KAAK,IAAI,CACvD,KAAK,aAAa,GACrB,GACL;UACC,UAAU,cAAc,SAAS,YAAY,KAAK,GAAG,GAAG,GAAG;;;UAG3D,UAAU,oBAAoB,SAAS,kBAAkB,KAAK,GAAG,GAAG,GAAG;;UAEvE,iBAAA,iBAAiB,SAAS,SAAS,IAAI,UAAU,UAAU,QAAQ,KAAK,CACvE,KAAK,SAAS,8BAA8B,KAAK,cAAa,CAC9D,KAAK,aAAa,CAAC;UACpB,UAAU,mBAAmB,SAAS,iBAAiB,KAAK,GAAG,GAAG,GAAG"}
+{"version":3,"file":"template.js","names":[],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport { getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsBodyBefore?: string[];\n};\n\nexport interface AssetManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: AssetManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\">\n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>\n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <script src=\"${template?.options.base}-/static/ui-options.js\"></script>\n        ${\n          template.manifest.css?.length\n            ? getManifestValue(template.manifest.css, manifest, template?.options.base)\n                .map((item) => `<link rel=\"stylesheet\" href=\"${item}\">`)\n                .join('\\n        ')\n            : ''\n        }\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>\n      <body class=\"body\">\n        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script type=\"module\" src=\"${item}\"></script>`)\n          .join(`\\n        `)}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,gCAAgC;AAczD,SAAwB,eAAe,UAAoB,UAAyB;AAClF,SAAM,eAAe,SAAS;AAC9B,SAAM,eAAe,SAAS;AAE9B,QAAO;;;;;sBAKa,UAAU,QAAQ,KAAK;iBAC5B,UAAU,SAAS,SAAS,GAAG;iCACf,UAAU,QAAQ,KAAK;;uBAEjC,UAAU,QAAQ,KAAK;UAEpC,SAAS,SAAS,KAAK,SACnB,iBAAA,iBAAiB,SAAS,SAAS,KAAK,UAAU,UAAU,QAAQ,KAAK,CACtE,KAAK,SAAS,gCAAgC,KAAK,IAAI,CACvD,KAAK,aAAa,GACrB,GACL;UACC,UAAU,cAAc,SAAS,YAAY,KAAK,GAAG,GAAG,GAAG;;;UAG3D,UAAU,oBAAoB,SAAS,kBAAkB,KAAK,GAAG,GAAG,GAAG;;UAEvE,iBAAA,iBAAiB,SAAS,SAAS,IAAI,UAAU,UAAU,QAAQ,KAAK,CACvE,KAAK,SAAS,8BAA8B,KAAK,cAAa,CAC9D,KAAK,aAAa,CAAC;UACpB,UAAU,mBAAmB,SAAS,iBAAiB,KAAK,GAAG,GAAG,GAAG"}

package/build/middlewares/web/utils/template.mjs

@@ -14,9 +14,7 @@ function renderTemplate(template, manifest) {
         <title>${template?.options?.title ?? ""}</title>
         <link rel="icon" href="${template?.options.base}-/static/favicon.ico">
         <meta name="viewport" content="width=device-width, initial-scale=1">
-        <script>
-            window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(template.options)}
-        <\/script>
+        <script src="${template?.options.base}-/static/ui-options.js"><\/script>
         ${template.manifest.css?.length ? getManifestValue(template.manifest.css, manifest, template?.options.base).map((item) => `<link rel="stylesheet" href="${item}">`).join("\n        ") : ""}
         ${template?.metaScripts ? template.metaScripts.join("") : ""}
       </head>

package/build/middlewares/web/utils/template.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"template.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport { getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsBodyBefore?: string[];\n};\n\nexport interface AssetManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: AssetManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\">\n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>\n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <script>\n            window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(template.options)}\n        </script>\n        ${\n          template.manifest.css?.length\n            ? getManifestValue(template.manifest.css, manifest, template?.options.base)\n                .map((item) => `<link rel=\"stylesheet\" href=\"${item}\">`)\n                .join('\\n        ')\n            : ''\n        }\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>\n      <body class=\"body\">\n        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script type=\"module\" src=\"${item}\"></script>`)\n          .join(`\\n        `)}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;AAOA,IAAM,QAAQ,WAAW,gCAAgC;AAczD,SAAwB,eAAe,UAAoB,UAAyB;AAClF,OAAM,eAAe,SAAS;AAC9B,OAAM,eAAe,SAAS;AAE9B,QAAO;;;;;sBAKa,UAAU,QAAQ,KAAK;iBAC5B,UAAU,SAAS,SAAS,GAAG;iCACf,UAAU,QAAQ,KAAK;;;qDAGH,KAAK,UAAU,SAAS,QAAQ,CAAC;;UAG5E,SAAS,SAAS,KAAK,SACnB,iBAAiB,SAAS,SAAS,KAAK,UAAU,UAAU,QAAQ,KAAK,CACtE,KAAK,SAAS,gCAAgC,KAAK,IAAI,CACvD,KAAK,aAAa,GACrB,GACL;UACC,UAAU,cAAc,SAAS,YAAY,KAAK,GAAG,GAAG,GAAG;;;UAG3D,UAAU,oBAAoB,SAAS,kBAAkB,KAAK,GAAG,GAAG,GAAG;;UAEvE,iBAAiB,SAAS,SAAS,IAAI,UAAU,UAAU,QAAQ,KAAK,CACvE,KAAK,SAAS,8BAA8B,KAAK,cAAa,CAC9D,KAAK,aAAa,CAAC;UACpB,UAAU,mBAAmB,SAAS,iBAAiB,KAAK,GAAG,GAAG,GAAG"}
+{"version":3,"file":"template.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport { getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsBodyBefore?: string[];\n};\n\nexport interface AssetManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: AssetManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\">\n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>\n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <script src=\"${template?.options.base}-/static/ui-options.js\"></script>\n        ${\n          template.manifest.css?.length\n            ? getManifestValue(template.manifest.css, manifest, template?.options.base)\n                .map((item) => `<link rel=\"stylesheet\" href=\"${item}\">`)\n                .join('\\n        ')\n            : ''\n        }\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>\n      <body class=\"body\">\n        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script type=\"module\" src=\"${item}\"></script>`)\n          .join(`\\n        `)}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;AAOA,IAAM,QAAQ,WAAW,gCAAgC;AAczD,SAAwB,eAAe,UAAoB,UAAyB;AAClF,OAAM,eAAe,SAAS;AAC9B,OAAM,eAAe,SAAS;AAE9B,QAAO;;;;;sBAKa,UAAU,QAAQ,KAAK;iBAC5B,UAAU,SAAS,SAAS,GAAG;iCACf,UAAU,QAAQ,KAAK;;uBAEjC,UAAU,QAAQ,KAAK;UAEpC,SAAS,SAAS,KAAK,SACnB,iBAAiB,SAAS,SAAS,KAAK,UAAU,UAAU,QAAQ,KAAK,CACtE,KAAK,SAAS,gCAAgC,KAAK,IAAI,CACvD,KAAK,aAAa,GACrB,GACL;UACC,UAAU,cAAc,SAAS,YAAY,KAAK,GAAG,GAAG,GAAG;;;UAG3D,UAAU,oBAAoB,SAAS,kBAAkB,KAAK,GAAG,GAAG,GAAG;;UAEvE,iBAAiB,SAAS,SAAS,IAAI,UAAU,UAAU,QAAQ,KAAK,CACvE,KAAK,SAAS,8BAA8B,KAAK,cAAa,CAC9D,KAAK,aAAa,CAAC;UACpB,UAAU,mBAAmB,SAAS,iBAAiB,KAAK,GAAG,GAAG,GAAG"}

package/build/middlewares/web/utils/ui-options.d.ts

@@ -0,0 +1,4 @@
+import { Response } from 'express';
+import { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';
+import { RequestOptions } from '@verdaccio/url';
+export declare function getUIOptions(config: ConfigYaml, requestOptions: RequestOptions, res: Response): TemplateUIOptions;

package/build/middlewares/web/utils/ui-options.js

@@ -0,0 +1,71 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
+const require_web_utils = require("./web-utils.js");
+let node_url = require("node:url");
+let _verdaccio_config = require("@verdaccio/config");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path);
+let _verdaccio_url = require("@verdaccio/url");
+//#region src/middlewares/web/utils/ui-options.ts
+var DEFAULT_LANGUAGE = "en-US";
+function resolveLogo(logo, url_prefix, requestOptions) {
+	if (typeof logo !== "string") return "";
+	if (logo && !(0, _verdaccio_url.isURLhasValidProtocol)(logo)) return `${(0, _verdaccio_url.getPublicUrl)(url_prefix, requestOptions)}-/static/${node_path.default.basename(logo)}`;
+	else if ((0, _verdaccio_url.isURLhasValidProtocol)(logo)) return logo;
+	else return "";
+}
+function getUIOptions(config, requestOptions, res) {
+	const { url_prefix } = config;
+	const base = (0, _verdaccio_url.getPublicUrl)(config?.url_prefix, requestOptions);
+	const basename = node_url.URL.canParse(base) ? new node_url.URL(base).pathname : base;
+	const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
+	const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
+	const darkMode = config?.web?.darkMode ?? false;
+	const title = config?.web?.title ?? _verdaccio_config.WEB_TITLE;
+	const login = require_web_utils.hasLogin(config);
+	const scope = config?.web?.scope ?? "";
+	const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
+	const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
+	const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
+	const pkgManagers = config?.web?.pkgManagers ?? [
+		"yarn",
+		"pnpm",
+		"npm"
+	];
+	const version = res.locals.app_version ?? "";
+	const flags = {
+		...config.flags,
+		...config.experiments
+	};
+	const primaryColor = require_web_utils.validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? "#4b5e40";
+	const { showInfo, showSettings, showThemeSwitch, showFooter, showSearch, showDownloadTarball, showRaw, showUplinks } = Object.assign({}, config?.web);
+	return {
+		showInfo,
+		showSettings,
+		showThemeSwitch,
+		showFooter,
+		showSearch,
+		showDownloadTarball,
+		showRaw,
+		showUplinks,
+		darkMode,
+		url_prefix,
+		basename,
+		base,
+		primaryColor,
+		version,
+		logo,
+		logoDark,
+		favicon,
+		flags,
+		login,
+		pkgManagers,
+		title,
+		scope,
+		language,
+		hideDeprecatedVersions
+	};
+}
+//#endregion
+exports.getUIOptions = getUIOptions;
+
+//# sourceMappingURL=ui-options.js.map

package/build/middlewares/web/utils/ui-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-options.js","names":[],"sources":["../../../../src/middlewares/web/utils/ui-options.ts"],"sourcesContent":["import type { Response } from 'express';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport { type RequestOptions, getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'en-US';\n\nfunction resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport function getUIOptions(\n  config: ConfigYaml,\n  requestOptions: RequestOptions,\n  res: Response\n): TemplateUIOptions {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign({}, config?.web);\n\n  return {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n}\n"],"mappings":";;;;;;;;AAUA,IAAM,mBAAmB;AAEzB,SAAS,YACP,MACA,YACA,gBACA;AACA,KAAI,OAAO,SAAS,SAClB,QAAO;AAIT,KAFoB,QAAQ,EAAA,GAAA,eAAA,uBAAuB,KAAK,CAGtD,QAAO,IAAA,GAAA,eAAA,cAAgB,YAAY,eAAe,CAAC,WAAW,UAAA,QAAK,SAAS,KAAK;oDAClD,KAAK,CACpC,QAAO;KAEP,QAAO;;AAIX,SAAgB,aACd,QACA,gBACA,KACmB;CACnB,MAAM,EAAE,eAAe;CACvB,MAAM,QAAA,GAAA,eAAA,cAAoB,QAAQ,YAAY,eAAe;CAC7D,MAAM,WAAW,SAAA,IAAI,SAAS,KAAK,GAAG,IAAI,SAAA,IAAI,KAAK,CAAC,WAAW;CAC/D,MAAM,WAAW,QAAQ,MAAM,OAAO;CACtC,MAAM,yBAAyB,QAAQ,KAAK,0BAA0B;CACtE,MAAM,WAAW,QAAQ,KAAK,YAAY;CAC1C,MAAM,QAAQ,QAAQ,KAAK,SAAS,kBAAA;CACpC,MAAM,QAAQ,kBAAA,SAAS,OAAO;CAC9B,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS,QAAQ,YAAY,eAAe;CACrF,MAAM,OAAO,YAAY,QAAQ,KAAK,MAAM,QAAQ,YAAY,eAAe;CAC/E,MAAM,WAAW,YAAY,QAAQ,KAAK,UAAU,QAAQ,YAAY,eAAe;CACvF,MAAM,cAAc,QAAQ,KAAK,eAAe;EAAC;EAAQ;EAAQ;EAAM;CACvE,MAAM,UAAU,IAAI,OAAO,eAAe;CAC1C,MAAM,QAAQ;EACZ,GAAG,OAAO;EAEV,GAAG,OAAO;EACX;CACD,MAAM,eACJ,kBAAA,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,aAAa,IAAI;CACnF,MAAM,EACJ,UACA,cACA,iBACA,YACA,YACA,qBACA,SACA,gBACE,OAAO,OAAO,EAAE,EAAE,QAAQ,IAAI;AAElC,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD"}

package/build/middlewares/web/utils/ui-options.mjs

@@ -0,0 +1,69 @@
+import { hasLogin, validatePrimaryColor } from "./web-utils.mjs";
+import { URL } from "node:url";
+import { WEB_TITLE } from "@verdaccio/config";
+import path from "node:path";
+import { getPublicUrl, isURLhasValidProtocol } from "@verdaccio/url";
+//#region src/middlewares/web/utils/ui-options.ts
+var DEFAULT_LANGUAGE = "en-US";
+function resolveLogo(logo, url_prefix, requestOptions) {
+	if (typeof logo !== "string") return "";
+	if (logo && !isURLhasValidProtocol(logo)) return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;
+	else if (isURLhasValidProtocol(logo)) return logo;
+	else return "";
+}
+function getUIOptions(config, requestOptions, res) {
+	const { url_prefix } = config;
+	const base = getPublicUrl(config?.url_prefix, requestOptions);
+	const basename = URL.canParse(base) ? new URL(base).pathname : base;
+	const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
+	const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
+	const darkMode = config?.web?.darkMode ?? false;
+	const title = config?.web?.title ?? WEB_TITLE;
+	const login = hasLogin(config);
+	const scope = config?.web?.scope ?? "";
+	const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);
+	const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);
+	const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);
+	const pkgManagers = config?.web?.pkgManagers ?? [
+		"yarn",
+		"pnpm",
+		"npm"
+	];
+	const version = res.locals.app_version ?? "";
+	const flags = {
+		...config.flags,
+		...config.experiments
+	};
+	const primaryColor = validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? "#4b5e40";
+	const { showInfo, showSettings, showThemeSwitch, showFooter, showSearch, showDownloadTarball, showRaw, showUplinks } = Object.assign({}, config?.web);
+	return {
+		showInfo,
+		showSettings,
+		showThemeSwitch,
+		showFooter,
+		showSearch,
+		showDownloadTarball,
+		showRaw,
+		showUplinks,
+		darkMode,
+		url_prefix,
+		basename,
+		base,
+		primaryColor,
+		version,
+		logo,
+		logoDark,
+		favicon,
+		flags,
+		login,
+		pkgManagers,
+		title,
+		scope,
+		language,
+		hideDeprecatedVersions
+	};
+}
+//#endregion
+export { getUIOptions };
+
+//# sourceMappingURL=ui-options.mjs.map

package/build/middlewares/web/utils/ui-options.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-options.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/ui-options.ts"],"sourcesContent":["import type { Response } from 'express';\nimport path from 'node:path';\nimport { URL } from 'node:url';\n\nimport { WEB_TITLE } from '@verdaccio/config';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\nimport { type RequestOptions, getPublicUrl, isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { hasLogin, validatePrimaryColor } from './web-utils';\n\nconst DEFAULT_LANGUAGE = 'en-US';\n\nfunction resolveLogo(\n  logo: string | undefined,\n  url_prefix: string | undefined,\n  requestOptions: RequestOptions\n) {\n  if (typeof logo !== 'string') {\n    return '';\n  }\n  const isLocalFile = logo && !isURLhasValidProtocol(logo);\n\n  if (isLocalFile) {\n    return `${getPublicUrl(url_prefix, requestOptions)}-/static/${path.basename(logo)}`;\n  } else if (isURLhasValidProtocol(logo)) {\n    return logo;\n  } else {\n    return '';\n  }\n}\n\nexport function getUIOptions(\n  config: ConfigYaml,\n  requestOptions: RequestOptions,\n  res: Response\n): TemplateUIOptions {\n  const { url_prefix } = config;\n  const base = getPublicUrl(config?.url_prefix, requestOptions);\n  const basename = URL.canParse(base) ? new URL(base).pathname : base;\n  const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;\n  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;\n  const darkMode = config?.web?.darkMode ?? false;\n  const title = config?.web?.title ?? WEB_TITLE;\n  const login = hasLogin(config);\n  const scope = config?.web?.scope ?? '';\n  const favicon = resolveLogo(config?.web?.favicon, config?.url_prefix, requestOptions);\n  const logo = resolveLogo(config?.web?.logo, config?.url_prefix, requestOptions);\n  const logoDark = resolveLogo(config?.web?.logoDark, config?.url_prefix, requestOptions);\n  const pkgManagers = config?.web?.pkgManagers ?? ['yarn', 'pnpm', 'npm'];\n  const version = res.locals.app_version ?? '';\n  const flags = {\n    ...config.flags,\n    // legacy from 5.x\n    ...config.experiments,\n  };\n  const primaryColor =\n    validatePrimaryColor(config?.web?.primary_color ?? config?.web?.primaryColor) ?? '#4b5e40';\n  const {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n  } = Object.assign({}, config?.web);\n\n  return {\n    showInfo,\n    showSettings,\n    showThemeSwitch,\n    showFooter,\n    showSearch,\n    showDownloadTarball,\n    showRaw,\n    showUplinks,\n    darkMode,\n    url_prefix,\n    basename,\n    base,\n    primaryColor,\n    version,\n    logo,\n    logoDark,\n    favicon,\n    flags,\n    login,\n    pkgManagers,\n    title,\n    scope,\n    language,\n    hideDeprecatedVersions,\n  };\n}\n"],"mappings":";;;;;;AAUA,IAAM,mBAAmB;AAEzB,SAAS,YACP,MACA,YACA,gBACA;AACA,KAAI,OAAO,SAAS,SAClB,QAAO;AAIT,KAFoB,QAAQ,CAAC,sBAAsB,KAAK,CAGtD,QAAO,GAAG,aAAa,YAAY,eAAe,CAAC,WAAW,KAAK,SAAS,KAAK;UACxE,sBAAsB,KAAK,CACpC,QAAO;KAEP,QAAO;;AAIX,SAAgB,aACd,QACA,gBACA,KACmB;CACnB,MAAM,EAAE,eAAe;CACvB,MAAM,OAAO,aAAa,QAAQ,YAAY,eAAe;CAC7D,MAAM,WAAW,IAAI,SAAS,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,WAAW;CAC/D,MAAM,WAAW,QAAQ,MAAM,OAAO;CACtC,MAAM,yBAAyB,QAAQ,KAAK,0BAA0B;CACtE,MAAM,WAAW,QAAQ,KAAK,YAAY;CAC1C,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,QAAQ,SAAS,OAAO;CAC9B,MAAM,QAAQ,QAAQ,KAAK,SAAS;CACpC,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS,QAAQ,YAAY,eAAe;CACrF,MAAM,OAAO,YAAY,QAAQ,KAAK,MAAM,QAAQ,YAAY,eAAe;CAC/E,MAAM,WAAW,YAAY,QAAQ,KAAK,UAAU,QAAQ,YAAY,eAAe;CACvF,MAAM,cAAc,QAAQ,KAAK,eAAe;EAAC;EAAQ;EAAQ;EAAM;CACvE,MAAM,UAAU,IAAI,OAAO,eAAe;CAC1C,MAAM,QAAQ;EACZ,GAAG,OAAO;EAEV,GAAG,OAAO;EACX;CACD,MAAM,eACJ,qBAAqB,QAAQ,KAAK,iBAAiB,QAAQ,KAAK,aAAa,IAAI;CACnF,MAAM,EACJ,UACA,cACA,iBACA,YACA,YACA,qBACA,SACA,gBACE,OAAO,OAAO,EAAE,EAAE,QAAQ,IAAI;AAElC,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "9.0.0-next-9.4",
+  "version": "9.0.0-next-9.6",
   "description": "Verdaccio Express Middleware",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -33,9 +33,9 @@
     "node": ">=24"
   },
   "dependencies": {
-    "@verdaccio/config": "9.0.0-next-9.4",
-    "@verdaccio/core": "9.0.0-next-9.4",
-    "@verdaccio/url": "14.0.0-next-9.4",
+    "@verdaccio/config": "9.0.0-next-9.6",
+    "@verdaccio/core": "9.0.0-next-9.6",
+    "@verdaccio/url": "14.0.0-next-9.6",
     "debug": "4.4.3",
     "express": "5.2.1",
     "express-rate-limit": "8.2.1",
@@ -47,12 +47,11 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "9.0.0-next-9.4",
-    "@verdaccio/types": "14.0.0-next-9.1",
+    "@verdaccio/logger": "9.0.0-next-9.6",
+    "@verdaccio/types": "14.0.0-next-9.3",
     "http-errors": "2.0.1",
     "supertest": "7.1.4",
-    "jsdom": "28.1.0",
-    "vitest": "3.2.4"
+    "vitest": "4.1.0"
   },
   "module": "./build/index.mjs",
   "exports": {