@verdaccio/types 14.0.0-next-9.11 → 14.0.0-next-9.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/types",
-  "version": "14.0.0-next-9.11",
+  "version": "14.0.0-next-9.13",
   "description": "Verdaccio Type Definitions",
   "keywords": [
     "private",

package/src/configuration.ts

@@ -48,6 +48,14 @@ export interface PackageAccessYaml {
   proxy?: string;
   access?: string;
   unpublish?: string;
+  /**
+   * Who may submit a version for review with `npm stage publish`.
+   *
+   * Falls back to `publish` when omitted, which keeps the historical behaviour.
+   * Setting it to a narrower group than `publish` is what separates proposing a
+   * release from making one.
+   */
+  stage?: string;
 }
 
 export interface Headers {
@@ -103,6 +111,23 @@ export type FlagsConfig = {
    */
   createUser?: boolean;
 
+  /**
+   * Enables the staged publish workflow (`npm stage`).
+   *
+   * Adds the `/-/stage` endpoints, which let a version be uploaded for review
+   * and only become installable once a maintainer approves it.
+   *
+   * @default false
+   */
+  stage?: boolean;
+
+  /**
+   * Enables two-factor authentication (TOTP).
+   *
+   * @default false
+   */
+  tfa?: boolean;
+
   /**
    * Enables web-based login flow.
    *
@@ -266,6 +291,11 @@ export type ServerSettingsConf = {
   // express-rate-limit settings
   rateLimit: RateLimit;
   keepAliveTimeout?: number;
+  legacyAuthCache?: {
+    enabled?: boolean;
+    maxEntries?: number;
+    ttlMs?: number;
+  };
   /**
    * Plugins should be prefixed verdaccio-XXXXXX by default.
    * To override the default prefix, use this property without `-`

package/src/manifest.ts

@@ -4,6 +4,7 @@ export interface PackageAccess {
   proxy?: string[];
   access?: string[];
   unpublish?: string[] | boolean; // false means fallback to publish access
+  stage?: string[] | boolean; // false means fallback to publish access
 }
 
 export interface PackageList {
@@ -298,7 +299,15 @@ export interface PublishManifest {
    */
   publisher?: Publisher;
   publishedPackage?: string;
-  publishType?: 'publish' | 'unpublish';
+  /**
+   * Which event triggered the notification.
+   *
+   * - `publish` / `unpublish`: a version became installable, or stopped being so.
+   *   Approving a staged version reports `publish`, because that is what it does.
+   * - `stage` / `unstage`: a version was submitted for review, or that submission
+   *   was discarded. Neither changes what is installable.
+   */
+  publishType?: 'publish' | 'unpublish' | 'stage' | 'unstage';
 }
 
 /**