@verdaccio/ui-components 5.0.0-next-9.19 → 5.0.0-next-9.21

package/build/store/api.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"api.mjs","names":[],"sources":["../../src/store/api.ts"],"sourcesContent":["import storage from './storage';\n\nexport class CustomError extends Error {\n  code: number;\n\n  constructor(message: string, code?: number) {\n    super(message);\n    this.name = 'CustomError';\n    this.code = code ?? 500;\n  }\n}\n\n/**\n * Handles response according to content type\n * @param {object} response\n * @returns {promise}\n */\nexport function handleResponseType(response: Response): Promise<[boolean, any, number]> {\n  if (response.headers) {\n    const contentType = response.headers.get('Content-Type');\n    if (contentType?.includes('application/pdf')) {\n      return Promise.all([response.ok, response.blob(), response.status]);\n    }\n    if (contentType?.includes('application/json')) {\n      return Promise.all([response.ok, response.json(), response.status]);\n    }\n    // it includes all text types\n    if (contentType?.includes('text/')) {\n      return Promise.all([response.ok, response.text(), response.status]);\n    }\n\n    // unfortunately on download files there is no header available\n    if (response.url && response.url.endsWith('.tgz') === true) {\n      return Promise.all([response.ok, response.blob(), response.status]);\n    }\n  }\n\n  // error handling\n  return Promise.all([response.ok, response.text(), response.status]);\n}\n\nconst AuthHeader = 'Authorization';\n\nclass API {\n  public request<T>(\n    url: string,\n    method = 'GET',\n    options: RequestInit = { headers: {} }\n  ): Promise<T> {\n    const token = storage.getItem('token');\n    const headers = new Headers(options.headers);\n\n    if (token && headers.has(AuthHeader) === false) {\n      headers.set(AuthHeader, `Bearer ${token}`);\n      options.headers = headers;\n    }\n\n    headers.set('x-client', 'verdaccio-ui');\n\n    return new Promise((resolve, reject) => {\n      fetch(url, {\n        method,\n        credentials: 'same-origin',\n        signal: options.signal,\n        ...options,\n      })\n        .then(handleResponseType)\n        .then((response) => {\n          const [ok, data, status] = response;\n          if (ok === true) {\n            resolve(data);\n          } else {\n            const message =\n              typeof data === 'string' ? data : (data?.error ?? data?.message ?? 'Unknown error');\n            reject(new CustomError(message, status));\n          }\n        })\n        .catch((error) => {\n          reject(error);\n        });\n    });\n  }\n}\n\nexport default new API();\n"],"mappings":";;AAEA,IAAa,cAAb,cAAiC,MAAM;CACrC;CAEA,YAAY,SAAiB,MAAe;EAC1C,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO,QAAQ;CACtB;AACF;;;;;;AAOA,SAAgB,mBAAmB,UAAqD;CACtF,IAAI,SAAS,SAAS;EACpB,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;EACvD,IAAI,aAAa,SAAS,iBAAiB,GACzC,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAEpE,IAAI,aAAa,SAAS,kBAAkB,GAC1C,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAGpE,IAAI,aAAa,SAAS,OAAO,GAC/B,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAIpE,IAAI,SAAS,OAAO,SAAS,IAAI,SAAS,MAAM,MAAM,MACpD,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;CAEtE;CAGA,OAAO,QAAQ,IAAI;EAAC,SAAS;EAAI,SAAS,KAAK;EAAG,SAAS;CAAM,CAAC;AACpE;AAEA,IAAM,aAAa;AAEnB,IAAM,MAAN,MAAU;CACR,QACE,KACA,SAAS,OACT,UAAuB,EAAE,SAAS,CAAC,EAAE,GACzB;EACZ,MAAM,QAAQ,gBAAQ,QAAQ,OAAO;EACrC,MAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;EAE3C,IAAI,SAAS,QAAQ,IAAI,UAAU,MAAM,OAAO;GAC9C,QAAQ,IAAI,YAAY,UAAU,OAAO;GACzC,QAAQ,UAAU;EACpB;EAEA,QAAQ,IAAI,YAAY,cAAc;EAEtC,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,KAAK;IACT;IACA,aAAa;IACb,QAAQ,QAAQ;IAChB,GAAG;GACL,CAAC,CAAC,CACC,KAAK,kBAAkB,CAAC,CACxB,MAAM,aAAa;IAClB,MAAM,CAAC,IAAI,MAAM,UAAU;IAC3B,IAAI,OAAO,MACT,QAAQ,IAAI;SAIZ,OAAO,IAAI,YADT,OAAO,SAAS,WAAW,OAAQ,MAAM,SAAS,MAAM,WAAW,iBACrC,MAAM,CAAC;GAE3C,CAAC,CAAC,CACD,OAAO,UAAU;IAChB,OAAO,KAAK;GACd,CAAC;EACL,CAAC;CACH;AACF;AAEA,IAAA,cAAe,IAAI,IAAI"}
+{"version":3,"file":"api.mjs","names":[],"sources":["../../src/store/api.ts"],"sourcesContent":["import storage from './storage';\n\nexport class CustomError extends Error {\n  code: number;\n\n  constructor(message: string, code?: number) {\n    super(message);\n    this.name = 'CustomError';\n    this.code = code ?? 500;\n  }\n}\n\n/**\n * Handles response according to content type\n * @param {object} response\n * @returns {promise}\n */\nexport function handleResponseType(response: Response): Promise<[boolean, any, number]> {\n  if (response.headers) {\n    const contentType = response.headers.get('Content-Type');\n    if (contentType?.includes('application/pdf')) {\n      return Promise.all([response.ok, response.blob(), response.status]);\n    }\n    // binary payloads (e.g. staged tarballs, served without a .tgz url) must\n    // never be decoded as text: invalid utf-8 bytes become U+FFFD and the\n    // downloaded archive is corrupted\n    if (\n      contentType?.includes('application/octet-stream') ||\n      contentType?.includes('application/gzip')\n    ) {\n      return Promise.all([response.ok, response.blob(), response.status]);\n    }\n    if (contentType?.includes('application/json')) {\n      return Promise.all([response.ok, response.json(), response.status]);\n    }\n    // it includes all text types\n    if (contentType?.includes('text/')) {\n      return Promise.all([response.ok, response.text(), response.status]);\n    }\n\n    // unfortunately on download files there is no header available\n    if (response.url && response.url.endsWith('.tgz') === true) {\n      return Promise.all([response.ok, response.blob(), response.status]);\n    }\n  }\n\n  // error handling\n  return Promise.all([response.ok, response.text(), response.status]);\n}\n\nconst AuthHeader = 'Authorization';\n\nclass API {\n  public request<T>(\n    url: string,\n    method = 'GET',\n    options: RequestInit = { headers: {} }\n  ): Promise<T> {\n    const token = storage.getItem('token');\n    const headers = new Headers(options.headers);\n\n    if (token && headers.has(AuthHeader) === false) {\n      headers.set(AuthHeader, `Bearer ${token}`);\n    }\n\n    headers.set('x-client', 'verdaccio-ui');\n    // assign unconditionally: doing it only inside the token branch dropped\n    // the x-client header for anonymous requests\n    options.headers = headers;\n\n    return new Promise((resolve, reject) => {\n      fetch(url, {\n        method,\n        credentials: 'same-origin',\n        signal: options.signal,\n        ...options,\n      })\n        .then(handleResponseType)\n        .then((response) => {\n          const [ok, data, status] = response;\n          if (ok === true) {\n            resolve(data);\n          } else {\n            const message =\n              typeof data === 'string' ? data : (data?.error ?? data?.message ?? 'Unknown error');\n            reject(new CustomError(message, status));\n          }\n        })\n        .catch((error) => {\n          reject(error);\n        });\n    });\n  }\n}\n\nexport default new API();\n"],"mappings":";;AAEA,IAAa,cAAb,cAAiC,MAAM;CACrC;CAEA,YAAY,SAAiB,MAAe;EAC1C,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO,QAAQ;CACtB;AACF;;;;;;AAOA,SAAgB,mBAAmB,UAAqD;CACtF,IAAI,SAAS,SAAS;EACpB,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;EACvD,IAAI,aAAa,SAAS,iBAAiB,GACzC,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAKpE,IACE,aAAa,SAAS,0BAA0B,KAChD,aAAa,SAAS,kBAAkB,GAExC,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAEpE,IAAI,aAAa,SAAS,kBAAkB,GAC1C,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAGpE,IAAI,aAAa,SAAS,OAAO,GAC/B,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;EAIpE,IAAI,SAAS,OAAO,SAAS,IAAI,SAAS,MAAM,MAAM,MACpD,OAAO,QAAQ,IAAI;GAAC,SAAS;GAAI,SAAS,KAAK;GAAG,SAAS;EAAM,CAAC;CAEtE;CAGA,OAAO,QAAQ,IAAI;EAAC,SAAS;EAAI,SAAS,KAAK;EAAG,SAAS;CAAM,CAAC;AACpE;AAEA,IAAM,aAAa;AAEnB,IAAM,MAAN,MAAU;CACR,QACE,KACA,SAAS,OACT,UAAuB,EAAE,SAAS,CAAC,EAAE,GACzB;EACZ,MAAM,QAAQ,gBAAQ,QAAQ,OAAO;EACrC,MAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;EAE3C,IAAI,SAAS,QAAQ,IAAI,UAAU,MAAM,OACvC,QAAQ,IAAI,YAAY,UAAU,OAAO;EAG3C,QAAQ,IAAI,YAAY,cAAc;EAGtC,QAAQ,UAAU;EAElB,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,KAAK;IACT;IACA,aAAa;IACb,QAAQ,QAAQ;IAChB,GAAG;GACL,CAAC,CAAC,CACC,KAAK,kBAAkB,CAAC,CACxB,MAAM,aAAa;IAClB,MAAM,CAAC,IAAI,MAAM,UAAU;IAC3B,IAAI,OAAO,MACT,QAAQ,IAAI;SAIZ,OAAO,IAAI,YADT,OAAO,SAAS,WAAW,OAAQ,MAAM,SAAS,MAAM,WAAW,iBACrC,MAAM,CAAC;GAE3C,CAAC,CAAC,CACD,OAAO,UAAU;IAChB,OAAO,KAAK;GACd,CAAC;EACL,CAAC;CACH;AACF;AAEA,IAAA,cAAe,IAAI,IAAI"}

package/build/types/packageMeta.d.ts

@@ -18,10 +18,10 @@ export type Latest = {
     license?: string | LicenseInterface;
     version: string;
     homepage?: string;
-    bugs?: {
+    bugs?: string | {
         url: string;
     };
-    repository?: {
+    repository?: string | {
         type?: string;
         url?: string;
     };
@@ -48,6 +48,7 @@ export interface Developer {
     email?: string;
     url?: string;
     avatar?: string;
+    _avatar?: string;
 }
 interface Funding {
     type?: string;

package/build/utils/cli-utils.js

@@ -9,11 +9,11 @@ function getCLIChangePassword(command, registryUrl) {
 	return `${command} profile set password --registry ${registryUrl}`;
 }
 function getCLISBerryYamlRegistry(scope, registryUrl) {
-	return !scope ? `// .yarnrc.yml    
+	return !scope ? `# .yarnrc.yml
 npmRegistryServer: "${registryUrl}"
 unsafeHttpWhitelist:
   - ${new URL(registryUrl).host}` : `
-// .yarnrc.yml
+# .yarnrc.yml
 npmRegistryServer: "${registryUrl}"
 npmScopes:
   ${scope.replace("@", "")}:

package/build/utils/cli-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-utils.js","names":[],"sources":["../../src/utils/cli-utils.ts"],"sourcesContent":["import type { SyntheticEvent } from 'react';\n\nexport const copyToClipBoardUtility =\n  (str: string): ((e: SyntheticEvent<HTMLElement>) => void) =>\n  (event: SyntheticEvent<HTMLElement>): void => {\n    event.preventDefault();\n\n    const node = document.createElement('div');\n    node.innerText = str;\n    if (document.body) {\n      document.body.appendChild(node);\n\n      const range = document.createRange();\n      const selection = window.getSelection() as Selection;\n      range.selectNodeContents(node);\n      selection.removeAllRanges();\n      selection.addRange(range);\n      document.execCommand('copy');\n      document.body.removeChild(node);\n    }\n  };\n\nexport function getCLISetConfigRegistry(\n  command: string,\n  scope: string | undefined,\n  registryUrl: string\n): string {\n  // if there is a scope defined there needs to be a \":\" separator between the scope and the registry\n  return `${command} ${scope ? `${scope}:` : ''}registry ${registryUrl}`;\n}\n\nexport function getCLISetRegistry(command: string, registryUrl: string): string {\n  return `${command} --registry ${registryUrl}`;\n}\n\nexport function getCLIChangePassword(command: string, registryUrl: string): string {\n  return `${command} profile set password --registry ${registryUrl}`;\n}\n\nexport function getCLISBerryYamlRegistry(scope: string | undefined, registryUrl: string): string {\n  return !scope\n    ? `// .yarnrc.yml    \nnpmRegistryServer: \"${registryUrl}\"\nunsafeHttpWhitelist:\n  - ${new URL(registryUrl).host}`\n    : `\n// .yarnrc.yml\nnpmRegistryServer: \"${registryUrl}\"\nnpmScopes:\n  ${scope.replace('@', '')}:\n    npmRegistryServer: ${registryUrl}\n    npmPublishRegistry: ${registryUrl}`;\n}\n"],"mappings":";AAsBA,SAAgB,wBACd,SACA,OACA,aACQ;CAER,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,KAAK,GAAG,WAAW;AAC3D;AAEA,SAAgB,kBAAkB,SAAiB,aAA6B;CAC9E,OAAO,GAAG,QAAQ,cAAc;AAClC;AAEA,SAAgB,qBAAqB,SAAiB,aAA6B;CACjF,OAAO,GAAG,QAAQ,mCAAmC;AACvD;AAEA,SAAgB,yBAAyB,OAA2B,aAA6B;CAC/F,OAAO,CAAC,QACJ;sBACgB,YAAY;;MAE5B,IAAI,IAAI,WAAW,CAAC,CAAC,SACrB;;sBAEgB,YAAY;;IAE9B,MAAM,QAAQ,KAAK,EAAE,EAAE;yBACF,YAAY;0BACX;AAC1B"}
+{"version":3,"file":"cli-utils.js","names":[],"sources":["../../src/utils/cli-utils.ts"],"sourcesContent":["import type { SyntheticEvent } from 'react';\n\nexport const copyToClipBoardUtility =\n  (str: string): ((e: SyntheticEvent<HTMLElement>) => void) =>\n  (event: SyntheticEvent<HTMLElement>): void => {\n    event.preventDefault();\n\n    const node = document.createElement('div');\n    node.innerText = str;\n    if (document.body) {\n      document.body.appendChild(node);\n\n      const range = document.createRange();\n      const selection = window.getSelection() as Selection;\n      range.selectNodeContents(node);\n      selection.removeAllRanges();\n      selection.addRange(range);\n      document.execCommand('copy');\n      document.body.removeChild(node);\n    }\n  };\n\nexport function getCLISetConfigRegistry(\n  command: string,\n  scope: string | undefined,\n  registryUrl: string\n): string {\n  // if there is a scope defined there needs to be a \":\" separator between the scope and the registry\n  return `${command} ${scope ? `${scope}:` : ''}registry ${registryUrl}`;\n}\n\nexport function getCLISetRegistry(command: string, registryUrl: string): string {\n  return `${command} --registry ${registryUrl}`;\n}\n\nexport function getCLIChangePassword(command: string, registryUrl: string): string {\n  return `${command} profile set password --registry ${registryUrl}`;\n}\n\nexport function getCLISBerryYamlRegistry(scope: string | undefined, registryUrl: string): string {\n  return !scope\n    ? `# .yarnrc.yml\nnpmRegistryServer: \"${registryUrl}\"\nunsafeHttpWhitelist:\n  - ${new URL(registryUrl).host}`\n    : `\n# .yarnrc.yml\nnpmRegistryServer: \"${registryUrl}\"\nnpmScopes:\n  ${scope.replace('@', '')}:\n    npmRegistryServer: ${registryUrl}\n    npmPublishRegistry: ${registryUrl}`;\n}\n"],"mappings":";AAsBA,SAAgB,wBACd,SACA,OACA,aACQ;CAER,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,KAAK,GAAG,WAAW;AAC3D;AAEA,SAAgB,kBAAkB,SAAiB,aAA6B;CAC9E,OAAO,GAAG,QAAQ,cAAc;AAClC;AAEA,SAAgB,qBAAqB,SAAiB,aAA6B;CACjF,OAAO,GAAG,QAAQ,mCAAmC;AACvD;AAEA,SAAgB,yBAAyB,OAA2B,aAA6B;CAC/F,OAAO,CAAC,QACJ;sBACgB,YAAY;;MAE5B,IAAI,IAAI,WAAW,CAAC,CAAC,SACrB;;sBAEgB,YAAY;;IAE9B,MAAM,QAAQ,KAAK,EAAE,EAAE;yBACF,YAAY;0BACX;AAC1B"}

package/build/utils/cli-utils.mjs

@@ -9,11 +9,11 @@ function getCLIChangePassword(command, registryUrl) {
 	return `${command} profile set password --registry ${registryUrl}`;
 }
 function getCLISBerryYamlRegistry(scope, registryUrl) {
-	return !scope ? `// .yarnrc.yml    
+	return !scope ? `# .yarnrc.yml
 npmRegistryServer: "${registryUrl}"
 unsafeHttpWhitelist:
   - ${new URL(registryUrl).host}` : `
-// .yarnrc.yml
+# .yarnrc.yml
 npmRegistryServer: "${registryUrl}"
 npmScopes:
   ${scope.replace("@", "")}:

package/build/utils/cli-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cli-utils.mjs","names":[],"sources":["../../src/utils/cli-utils.ts"],"sourcesContent":["import type { SyntheticEvent } from 'react';\n\nexport const copyToClipBoardUtility =\n  (str: string): ((e: SyntheticEvent<HTMLElement>) => void) =>\n  (event: SyntheticEvent<HTMLElement>): void => {\n    event.preventDefault();\n\n    const node = document.createElement('div');\n    node.innerText = str;\n    if (document.body) {\n      document.body.appendChild(node);\n\n      const range = document.createRange();\n      const selection = window.getSelection() as Selection;\n      range.selectNodeContents(node);\n      selection.removeAllRanges();\n      selection.addRange(range);\n      document.execCommand('copy');\n      document.body.removeChild(node);\n    }\n  };\n\nexport function getCLISetConfigRegistry(\n  command: string,\n  scope: string | undefined,\n  registryUrl: string\n): string {\n  // if there is a scope defined there needs to be a \":\" separator between the scope and the registry\n  return `${command} ${scope ? `${scope}:` : ''}registry ${registryUrl}`;\n}\n\nexport function getCLISetRegistry(command: string, registryUrl: string): string {\n  return `${command} --registry ${registryUrl}`;\n}\n\nexport function getCLIChangePassword(command: string, registryUrl: string): string {\n  return `${command} profile set password --registry ${registryUrl}`;\n}\n\nexport function getCLISBerryYamlRegistry(scope: string | undefined, registryUrl: string): string {\n  return !scope\n    ? `// .yarnrc.yml    \nnpmRegistryServer: \"${registryUrl}\"\nunsafeHttpWhitelist:\n  - ${new URL(registryUrl).host}`\n    : `\n// .yarnrc.yml\nnpmRegistryServer: \"${registryUrl}\"\nnpmScopes:\n  ${scope.replace('@', '')}:\n    npmRegistryServer: ${registryUrl}\n    npmPublishRegistry: ${registryUrl}`;\n}\n"],"mappings":";AAsBA,SAAgB,wBACd,SACA,OACA,aACQ;CAER,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,KAAK,GAAG,WAAW;AAC3D;AAEA,SAAgB,kBAAkB,SAAiB,aAA6B;CAC9E,OAAO,GAAG,QAAQ,cAAc;AAClC;AAEA,SAAgB,qBAAqB,SAAiB,aAA6B;CACjF,OAAO,GAAG,QAAQ,mCAAmC;AACvD;AAEA,SAAgB,yBAAyB,OAA2B,aAA6B;CAC/F,OAAO,CAAC,QACJ;sBACgB,YAAY;;MAE5B,IAAI,IAAI,WAAW,CAAC,CAAC,SACrB;;sBAEgB,YAAY;;IAE9B,MAAM,QAAQ,KAAK,EAAE,EAAE;yBACF,YAAY;0BACX;AAC1B"}
+{"version":3,"file":"cli-utils.mjs","names":[],"sources":["../../src/utils/cli-utils.ts"],"sourcesContent":["import type { SyntheticEvent } from 'react';\n\nexport const copyToClipBoardUtility =\n  (str: string): ((e: SyntheticEvent<HTMLElement>) => void) =>\n  (event: SyntheticEvent<HTMLElement>): void => {\n    event.preventDefault();\n\n    const node = document.createElement('div');\n    node.innerText = str;\n    if (document.body) {\n      document.body.appendChild(node);\n\n      const range = document.createRange();\n      const selection = window.getSelection() as Selection;\n      range.selectNodeContents(node);\n      selection.removeAllRanges();\n      selection.addRange(range);\n      document.execCommand('copy');\n      document.body.removeChild(node);\n    }\n  };\n\nexport function getCLISetConfigRegistry(\n  command: string,\n  scope: string | undefined,\n  registryUrl: string\n): string {\n  // if there is a scope defined there needs to be a \":\" separator between the scope and the registry\n  return `${command} ${scope ? `${scope}:` : ''}registry ${registryUrl}`;\n}\n\nexport function getCLISetRegistry(command: string, registryUrl: string): string {\n  return `${command} --registry ${registryUrl}`;\n}\n\nexport function getCLIChangePassword(command: string, registryUrl: string): string {\n  return `${command} profile set password --registry ${registryUrl}`;\n}\n\nexport function getCLISBerryYamlRegistry(scope: string | undefined, registryUrl: string): string {\n  return !scope\n    ? `# .yarnrc.yml\nnpmRegistryServer: \"${registryUrl}\"\nunsafeHttpWhitelist:\n  - ${new URL(registryUrl).host}`\n    : `\n# .yarnrc.yml\nnpmRegistryServer: \"${registryUrl}\"\nnpmScopes:\n  ${scope.replace('@', '')}:\n    npmRegistryServer: ${registryUrl}\n    npmPublishRegistry: ${registryUrl}`;\n}\n"],"mappings":";AAsBA,SAAgB,wBACd,SACA,OACA,aACQ;CAER,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,KAAK,GAAG,WAAW;AAC3D;AAEA,SAAgB,kBAAkB,SAAiB,aAA6B;CAC9E,OAAO,GAAG,QAAQ,cAAc;AAClC;AAEA,SAAgB,qBAAqB,SAAiB,aAA6B;CACjF,OAAO,GAAG,QAAQ,mCAAmC;AACvD;AAEA,SAAgB,yBAAyB,OAA2B,aAA6B;CAC/F,OAAO,CAAC,QACJ;sBACgB,YAAY;;MAE5B,IAAI,IAAI,WAAW,CAAC,CAAC,SACrB;;sBAEgB,YAAY;;IAE9B,MAAM,QAAQ,KAAK,EAAE,EAAE;yBACF,YAAY;0BACX;AAC1B"}

package/build/utils/index.js

@@ -11,6 +11,7 @@ exports.getCLISetConfigRegistry = require_cli_utils.getCLISetConfigRegistry;
 exports.getCLISetRegistry = require_cli_utils.getCLISetRegistry;
 exports.isTokenExpire = require_token.isTokenExpire;
 exports.loadable = require_loadable.default;
+exports.tokenExpireInMs = require_token.tokenExpireInMs;
 Object.defineProperty(exports, "url", {
 	enumerable: true,
 	get: function() {

package/build/utils/index.mjs

@@ -3,5 +3,5 @@ import { utils_exports } from "./utils.mjs";
 import { getCLIChangePassword, getCLISBerryYamlRegistry, getCLISetConfigRegistry, getCLISetRegistry } from "./cli-utils.mjs";
 import loadable_default from "./loadable.mjs";
 import { Route } from "./routes.mjs";
-import { isTokenExpire } from "./token.mjs";
-export { Route, getCLIChangePassword, getCLISBerryYamlRegistry, getCLISetConfigRegistry, getCLISetRegistry, isTokenExpire, loadable_default as loadable, url_exports as url, utils_exports as utils };
+import { isTokenExpire, tokenExpireInMs } from "./token.mjs";
+export { Route, getCLIChangePassword, getCLISBerryYamlRegistry, getCLISetConfigRegistry, getCLISetRegistry, isTokenExpire, loadable_default as loadable, tokenExpireInMs, url_exports as url, utils_exports as utils };

package/build/utils/routes.d.ts

@@ -9,15 +9,19 @@ export declare enum Route {
     SUCCESS = "/-/web/success",
     ADD_USER = "/-/web/add-user",
     CHANGE_PASSWORD = "/-/web/change-password",
+    STAGE = "/-/web/stage",
+    STAGE_DETAIL = "/-/web/stage/:stageId",
     LOGIN_API = "/-/v1/login_cli",
     CHANGE_PASSWORD_API = "/-/npm/v1/user"
 }
 export declare enum APIRoute {
     LOGIN = "/-/verdaccio/sec/login",
+    SIGNUP = "/-/verdaccio/sec/signup",
     RESET_PASSWORD = "/-/verdaccio/sec/reset_password",
     CONFIG = "/-/verdaccio/packages",
     PACKAGES = "/-/verdaccio/data/packages",
     SEARCH = "/-/verdaccio/data/search/",// :value
     SIDEBAR = "/-/verdaccio/data/sidebar/",// :packageName?v=version
-    README = "/-/verdaccio/data/package/readme/"
+    README = "/-/verdaccio/data/package/readme/",// :packageName?v=version
+    STAGE = "/-/stage"
 }

package/build/utils/routes.js

@@ -10,18 +10,22 @@ var Route = /* @__PURE__ */ function(Route) {
 	Route["SUCCESS"] = "/-/web/success";
 	Route["ADD_USER"] = "/-/web/add-user";
 	Route["CHANGE_PASSWORD"] = "/-/web/change-password";
+	Route["STAGE"] = "/-/web/stage";
+	Route["STAGE_DETAIL"] = "/-/web/stage/:stageId";
 	Route["LOGIN_API"] = "/-/v1/login_cli";
 	Route["CHANGE_PASSWORD_API"] = "/-/npm/v1/user";
 	return Route;
 }({});
 var APIRoute = /* @__PURE__ */ function(APIRoute) {
 	APIRoute["LOGIN"] = "/-/verdaccio/sec/login";
+	APIRoute["SIGNUP"] = "/-/verdaccio/sec/signup";
 	APIRoute["RESET_PASSWORD"] = "/-/verdaccio/sec/reset_password";
 	APIRoute["CONFIG"] = "/-/verdaccio/packages";
 	APIRoute["PACKAGES"] = "/-/verdaccio/data/packages";
 	APIRoute["SEARCH"] = "/-/verdaccio/data/search/";
 	APIRoute["SIDEBAR"] = "/-/verdaccio/data/sidebar/";
 	APIRoute["README"] = "/-/verdaccio/data/package/readme/";
+	APIRoute["STAGE"] = "/-/stage";
 	return APIRoute;
 }({});
 //#endregion

package/build/utils/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","names":[],"sources":["../../src/utils/routes.ts"],"sourcesContent":["export enum Route {\n  ROOT = '/',\n  DETAIL = '/-/web/detail/',\n  SCOPE_PACKAGE = '/-/web/detail/:scope/:package',\n  SCOPE_PACKAGE_VERSION = '/-/web/detail/:scope/:package/v/:version',\n  PACKAGE = '/-/web/detail/:package',\n  PACKAGE_VERSION = '/-/web/detail/:package/v/:version',\n  // Security UI routes\n  LOGIN = '/-/web/login',\n  SUCCESS = '/-/web/success',\n  ADD_USER = '/-/web/add-user',\n  CHANGE_PASSWORD = '/-/web/change-password',\n  // Security API routes\n  LOGIN_API = '/-/v1/login_cli',\n  CHANGE_PASSWORD_API = '/-/npm/v1/user',\n}\n\n// Example API request:\n// http://localhost:8000/-/verdaccio/data/package/readme/jquery\nexport enum APIRoute {\n  LOGIN = '/-/verdaccio/sec/login',\n  RESET_PASSWORD = '/-/verdaccio/sec/reset_password',\n  CONFIG = '/-/verdaccio/packages',\n  PACKAGES = '/-/verdaccio/data/packages',\n  SEARCH = '/-/verdaccio/data/search/', // :value\n  SIDEBAR = '/-/verdaccio/data/sidebar/', // :packageName?v=version\n  README = '/-/verdaccio/data/package/readme/', // :packageName?v=version\n}\n"],"mappings":";AAAA,IAAY,QAAL,yBAAA,OAAA;CACL,MAAA,UAAA;CACA,MAAA,YAAA;CACA,MAAA,mBAAA;CACA,MAAA,2BAAA;CACA,MAAA,aAAA;CACA,MAAA,qBAAA;CAEA,MAAA,WAAA;CACA,MAAA,aAAA;CACA,MAAA,cAAA;CACA,MAAA,qBAAA;CAEA,MAAA,eAAA;CACA,MAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAIA,IAAY,WAAL,yBAAA,UAAA;CACL,SAAA,WAAA;CACA,SAAA,oBAAA;CACA,SAAA,YAAA;CACA,SAAA,cAAA;CACA,SAAA,YAAA;CACA,SAAA,aAAA;CACA,SAAA,YAAA;;AACF,EAAA,CAAA,CAAA"}
+{"version":3,"file":"routes.js","names":[],"sources":["../../src/utils/routes.ts"],"sourcesContent":["export enum Route {\n  ROOT = '/',\n  DETAIL = '/-/web/detail/',\n  SCOPE_PACKAGE = '/-/web/detail/:scope/:package',\n  SCOPE_PACKAGE_VERSION = '/-/web/detail/:scope/:package/v/:version',\n  PACKAGE = '/-/web/detail/:package',\n  PACKAGE_VERSION = '/-/web/detail/:package/v/:version',\n  // Security UI routes\n  LOGIN = '/-/web/login',\n  SUCCESS = '/-/web/success',\n  ADD_USER = '/-/web/add-user',\n  CHANGE_PASSWORD = '/-/web/change-password',\n  // Staged publish workflow (`npm stage`), behind the `stage` flag\n  STAGE = '/-/web/stage',\n  STAGE_DETAIL = '/-/web/stage/:stageId',\n  // Security API routes\n  LOGIN_API = '/-/v1/login_cli',\n  CHANGE_PASSWORD_API = '/-/npm/v1/user',\n}\n\n// Example API request:\n// http://localhost:8000/-/verdaccio/data/package/readme/jquery\nexport enum APIRoute {\n  LOGIN = '/-/verdaccio/sec/login',\n  SIGNUP = '/-/verdaccio/sec/signup',\n  RESET_PASSWORD = '/-/verdaccio/sec/reset_password',\n  CONFIG = '/-/verdaccio/packages',\n  PACKAGES = '/-/verdaccio/data/packages',\n  SEARCH = '/-/verdaccio/data/search/', // :value\n  SIDEBAR = '/-/verdaccio/data/sidebar/', // :packageName?v=version\n  README = '/-/verdaccio/data/package/readme/', // :packageName?v=version\n  // served by the registry router, not the web one, like CHANGE_PASSWORD_API\n  STAGE = '/-/stage',\n}\n"],"mappings":";AAAA,IAAY,QAAL,yBAAA,OAAA;CACL,MAAA,UAAA;CACA,MAAA,YAAA;CACA,MAAA,mBAAA;CACA,MAAA,2BAAA;CACA,MAAA,aAAA;CACA,MAAA,qBAAA;CAEA,MAAA,WAAA;CACA,MAAA,aAAA;CACA,MAAA,cAAA;CACA,MAAA,qBAAA;CAEA,MAAA,WAAA;CACA,MAAA,kBAAA;CAEA,MAAA,eAAA;CACA,MAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAIA,IAAY,WAAL,yBAAA,UAAA;CACL,SAAA,WAAA;CACA,SAAA,YAAA;CACA,SAAA,oBAAA;CACA,SAAA,YAAA;CACA,SAAA,cAAA;CACA,SAAA,YAAA;CACA,SAAA,aAAA;CACA,SAAA,YAAA;CAEA,SAAA,WAAA;;AACF,EAAA,CAAA,CAAA"}

package/build/utils/routes.mjs

@@ -10,18 +10,22 @@ var Route = /* @__PURE__ */ function(Route) {
 	Route["SUCCESS"] = "/-/web/success";
 	Route["ADD_USER"] = "/-/web/add-user";
 	Route["CHANGE_PASSWORD"] = "/-/web/change-password";
+	Route["STAGE"] = "/-/web/stage";
+	Route["STAGE_DETAIL"] = "/-/web/stage/:stageId";
 	Route["LOGIN_API"] = "/-/v1/login_cli";
 	Route["CHANGE_PASSWORD_API"] = "/-/npm/v1/user";
 	return Route;
 }({});
 var APIRoute = /* @__PURE__ */ function(APIRoute) {
 	APIRoute["LOGIN"] = "/-/verdaccio/sec/login";
+	APIRoute["SIGNUP"] = "/-/verdaccio/sec/signup";
 	APIRoute["RESET_PASSWORD"] = "/-/verdaccio/sec/reset_password";
 	APIRoute["CONFIG"] = "/-/verdaccio/packages";
 	APIRoute["PACKAGES"] = "/-/verdaccio/data/packages";
 	APIRoute["SEARCH"] = "/-/verdaccio/data/search/";
 	APIRoute["SIDEBAR"] = "/-/verdaccio/data/sidebar/";
 	APIRoute["README"] = "/-/verdaccio/data/package/readme/";
+	APIRoute["STAGE"] = "/-/stage";
 	return APIRoute;
 }({});
 //#endregion

package/build/utils/routes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"routes.mjs","names":[],"sources":["../../src/utils/routes.ts"],"sourcesContent":["export enum Route {\n  ROOT = '/',\n  DETAIL = '/-/web/detail/',\n  SCOPE_PACKAGE = '/-/web/detail/:scope/:package',\n  SCOPE_PACKAGE_VERSION = '/-/web/detail/:scope/:package/v/:version',\n  PACKAGE = '/-/web/detail/:package',\n  PACKAGE_VERSION = '/-/web/detail/:package/v/:version',\n  // Security UI routes\n  LOGIN = '/-/web/login',\n  SUCCESS = '/-/web/success',\n  ADD_USER = '/-/web/add-user',\n  CHANGE_PASSWORD = '/-/web/change-password',\n  // Security API routes\n  LOGIN_API = '/-/v1/login_cli',\n  CHANGE_PASSWORD_API = '/-/npm/v1/user',\n}\n\n// Example API request:\n// http://localhost:8000/-/verdaccio/data/package/readme/jquery\nexport enum APIRoute {\n  LOGIN = '/-/verdaccio/sec/login',\n  RESET_PASSWORD = '/-/verdaccio/sec/reset_password',\n  CONFIG = '/-/verdaccio/packages',\n  PACKAGES = '/-/verdaccio/data/packages',\n  SEARCH = '/-/verdaccio/data/search/', // :value\n  SIDEBAR = '/-/verdaccio/data/sidebar/', // :packageName?v=version\n  README = '/-/verdaccio/data/package/readme/', // :packageName?v=version\n}\n"],"mappings":";AAAA,IAAY,QAAL,yBAAA,OAAA;CACL,MAAA,UAAA;CACA,MAAA,YAAA;CACA,MAAA,mBAAA;CACA,MAAA,2BAAA;CACA,MAAA,aAAA;CACA,MAAA,qBAAA;CAEA,MAAA,WAAA;CACA,MAAA,aAAA;CACA,MAAA,cAAA;CACA,MAAA,qBAAA;CAEA,MAAA,eAAA;CACA,MAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAIA,IAAY,WAAL,yBAAA,UAAA;CACL,SAAA,WAAA;CACA,SAAA,oBAAA;CACA,SAAA,YAAA;CACA,SAAA,cAAA;CACA,SAAA,YAAA;CACA,SAAA,aAAA;CACA,SAAA,YAAA;;AACF,EAAA,CAAA,CAAA"}
+{"version":3,"file":"routes.mjs","names":[],"sources":["../../src/utils/routes.ts"],"sourcesContent":["export enum Route {\n  ROOT = '/',\n  DETAIL = '/-/web/detail/',\n  SCOPE_PACKAGE = '/-/web/detail/:scope/:package',\n  SCOPE_PACKAGE_VERSION = '/-/web/detail/:scope/:package/v/:version',\n  PACKAGE = '/-/web/detail/:package',\n  PACKAGE_VERSION = '/-/web/detail/:package/v/:version',\n  // Security UI routes\n  LOGIN = '/-/web/login',\n  SUCCESS = '/-/web/success',\n  ADD_USER = '/-/web/add-user',\n  CHANGE_PASSWORD = '/-/web/change-password',\n  // Staged publish workflow (`npm stage`), behind the `stage` flag\n  STAGE = '/-/web/stage',\n  STAGE_DETAIL = '/-/web/stage/:stageId',\n  // Security API routes\n  LOGIN_API = '/-/v1/login_cli',\n  CHANGE_PASSWORD_API = '/-/npm/v1/user',\n}\n\n// Example API request:\n// http://localhost:8000/-/verdaccio/data/package/readme/jquery\nexport enum APIRoute {\n  LOGIN = '/-/verdaccio/sec/login',\n  SIGNUP = '/-/verdaccio/sec/signup',\n  RESET_PASSWORD = '/-/verdaccio/sec/reset_password',\n  CONFIG = '/-/verdaccio/packages',\n  PACKAGES = '/-/verdaccio/data/packages',\n  SEARCH = '/-/verdaccio/data/search/', // :value\n  SIDEBAR = '/-/verdaccio/data/sidebar/', // :packageName?v=version\n  README = '/-/verdaccio/data/package/readme/', // :packageName?v=version\n  // served by the registry router, not the web one, like CHANGE_PASSWORD_API\n  STAGE = '/-/stage',\n}\n"],"mappings":";AAAA,IAAY,QAAL,yBAAA,OAAA;CACL,MAAA,UAAA;CACA,MAAA,YAAA;CACA,MAAA,mBAAA;CACA,MAAA,2BAAA;CACA,MAAA,aAAA;CACA,MAAA,qBAAA;CAEA,MAAA,WAAA;CACA,MAAA,aAAA;CACA,MAAA,cAAA;CACA,MAAA,qBAAA;CAEA,MAAA,WAAA;CACA,MAAA,kBAAA;CAEA,MAAA,eAAA;CACA,MAAA,yBAAA;;AACF,EAAA,CAAA,CAAA;AAIA,IAAY,WAAL,yBAAA,UAAA;CACL,SAAA,WAAA;CACA,SAAA,YAAA;CACA,SAAA,oBAAA;CACA,SAAA,YAAA;CACA,SAAA,cAAA;CACA,SAAA,YAAA;CACA,SAAA,aAAA;CACA,SAAA,YAAA;CAEA,SAAA,WAAA;;AACF,EAAA,CAAA,CAAA"}

package/build/utils/schemas.d.ts

@@ -1,5 +1,6 @@
 import * as yup from 'yup';
 export declare const USERNAME_MIN_LENGTH = 2;
+export declare const PASSWORD_MIN_LENGTH = 2;
 export declare const usernameSchema: yup.StringSchema<string, yup.AnyObject, undefined, "">;
 export declare const passwordSchema: yup.StringSchema<string, yup.AnyObject, undefined, "">;
 export declare const loginSchema: yup.ObjectSchema<{

package/build/utils/schemas.js

@@ -1,8 +1,8 @@
 const require_runtime = require("../_virtual/_rolldown/runtime.js");
 let yup = require("yup");
 yup = require_runtime.__toESM(yup);
-var usernameSchema = yup.string().required().min(2).matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, "security.error.username-must-be-url-safe");
-var passwordSchema = yup.string().required().min(2);
+var usernameSchema = yup.string().required("form-validation.required-field").min(2, "security.error.username-min-length").matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, "security.error.username-must-be-url-safe");
+var passwordSchema = yup.string().required("form-validation.required-field").min(2, "form-validation.required-min-length");
 var loginSchema = yup.object({
 	username: usernameSchema,
 	password: passwordSchema
@@ -10,13 +10,13 @@ var loginSchema = yup.object({
 var addUserSchema = yup.object({
 	username: usernameSchema,
 	password: passwordSchema,
-	email: yup.string().email().required()
+	email: yup.string().email("form-validation.invalid-email").required("form-validation.required-field")
 });
 var changePasswordSchema = yup.object({
 	username: usernameSchema,
 	oldPassword: passwordSchema,
 	newPassword: passwordSchema,
-	confirmPassword: yup.string().required().oneOf([yup.ref("newPassword")], "security.error.password-mismatch")
+	confirmPassword: yup.string().required("form-validation.required-field").oneOf([yup.ref("newPassword")], "security.error.password-mismatch")
 });
 //#endregion
 exports.addUserSchema = addUserSchema;

package/build/utils/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","names":[],"sources":["../../src/utils/schemas.ts"],"sourcesContent":["import * as yup from 'yup';\n\nexport const USERNAME_MIN_LENGTH = 2;\n\n// Matches your current logic\nexport const usernameSchema = yup\n  .string()\n  .required()\n  .min(USERNAME_MIN_LENGTH)\n  .matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, 'security.error.username-must-be-url-safe');\n\nexport const passwordSchema = yup.string().required().min(2);\n\nexport const loginSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n});\n\nexport type LoginFormValues = yup.InferType<typeof loginSchema>;\n\nexport const addUserSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n  email: yup.string().email().required(),\n});\n\nexport type AddUserFormValues = yup.InferType<typeof addUserSchema>;\n\nexport const changePasswordSchema = yup.object({\n  username: usernameSchema,\n  oldPassword: passwordSchema,\n  newPassword: passwordSchema,\n  confirmPassword: yup\n    .string()\n    .required()\n    .oneOf([yup.ref('newPassword')], 'security.error.password-mismatch'),\n});\n\nexport type ChangePasswordFormValues = yup.InferType<typeof changePasswordSchema>;\n"],"mappings":";;;AAKA,IAAa,iBAAiB,IAC3B,OAAO,CAAC,CACR,SAAS,CAAC,CACV,IAAA,CAAuB,CAAC,CACxB,QAAQ,4BAA4B,0CAA0C;AAEjF,IAAa,iBAAiB,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;AAE3D,IAAa,cAAc,IAAI,OAAO;CACpC,UAAU;CACV,UAAU;AACZ,CAAC;AAID,IAAa,gBAAgB,IAAI,OAAO;CACtC,UAAU;CACV,UAAU;CACV,OAAO,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS;AACvC,CAAC;AAID,IAAa,uBAAuB,IAAI,OAAO;CAC7C,UAAU;CACV,aAAa;CACb,aAAa;CACb,iBAAiB,IACd,OAAO,CAAC,CACR,SAAS,CAAC,CACV,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,kCAAkC;AACvE,CAAC"}
+{"version":3,"file":"schemas.js","names":[],"sources":["../../src/utils/schemas.ts"],"sourcesContent":["import * as yup from 'yup';\n\nexport const USERNAME_MIN_LENGTH = 2;\nexport const PASSWORD_MIN_LENGTH = 2;\n\n// All messages are i18n keys; the form fields translate them on render with\n// t(message, { length }) so they follow the selected language.\nexport const usernameSchema = yup\n  .string()\n  .required('form-validation.required-field')\n  .min(USERNAME_MIN_LENGTH, 'security.error.username-min-length')\n  .matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, 'security.error.username-must-be-url-safe');\n\nexport const passwordSchema = yup\n  .string()\n  .required('form-validation.required-field')\n  .min(PASSWORD_MIN_LENGTH, 'form-validation.required-min-length');\n\nexport const loginSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n});\n\nexport type LoginFormValues = yup.InferType<typeof loginSchema>;\n\nexport const addUserSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n  email: yup\n    .string()\n    .email('form-validation.invalid-email')\n    .required('form-validation.required-field'),\n});\n\nexport type AddUserFormValues = yup.InferType<typeof addUserSchema>;\n\nexport const changePasswordSchema = yup.object({\n  username: usernameSchema,\n  oldPassword: passwordSchema,\n  newPassword: passwordSchema,\n  confirmPassword: yup\n    .string()\n    .required('form-validation.required-field')\n    .oneOf([yup.ref('newPassword')], 'security.error.password-mismatch'),\n});\n\nexport type ChangePasswordFormValues = yup.InferType<typeof changePasswordSchema>;\n"],"mappings":";;;AAOA,IAAa,iBAAiB,IAC3B,OAAO,CAAC,CACR,SAAS,gCAAgC,CAAC,CAC1C,IAAA,GAAyB,oCAAoC,CAAC,CAC9D,QAAQ,4BAA4B,0CAA0C;AAEjF,IAAa,iBAAiB,IAC3B,OAAO,CAAC,CACR,SAAS,gCAAgC,CAAC,CAC1C,IAAA,GAAyB,qCAAqC;AAEjE,IAAa,cAAc,IAAI,OAAO;CACpC,UAAU;CACV,UAAU;AACZ,CAAC;AAID,IAAa,gBAAgB,IAAI,OAAO;CACtC,UAAU;CACV,UAAU;CACV,OAAO,IACJ,OAAO,CAAC,CACR,MAAM,+BAA+B,CAAC,CACtC,SAAS,gCAAgC;AAC9C,CAAC;AAID,IAAa,uBAAuB,IAAI,OAAO;CAC7C,UAAU;CACV,aAAa;CACb,aAAa;CACb,iBAAiB,IACd,OAAO,CAAC,CACR,SAAS,gCAAgC,CAAC,CAC1C,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,kCAAkC;AACvE,CAAC"}

package/build/utils/schemas.mjs

@@ -1,6 +1,6 @@
 import * as yup from "yup";
-var usernameSchema = yup.string().required().min(2).matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, "security.error.username-must-be-url-safe");
-var passwordSchema = yup.string().required().min(2);
+var usernameSchema = yup.string().required("form-validation.required-field").min(2, "security.error.username-min-length").matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, "security.error.username-must-be-url-safe");
+var passwordSchema = yup.string().required("form-validation.required-field").min(2, "form-validation.required-min-length");
 var loginSchema = yup.object({
 	username: usernameSchema,
 	password: passwordSchema
@@ -8,13 +8,13 @@ var loginSchema = yup.object({
 var addUserSchema = yup.object({
 	username: usernameSchema,
 	password: passwordSchema,
-	email: yup.string().email().required()
+	email: yup.string().email("form-validation.invalid-email").required("form-validation.required-field")
 });
 var changePasswordSchema = yup.object({
 	username: usernameSchema,
 	oldPassword: passwordSchema,
 	newPassword: passwordSchema,
-	confirmPassword: yup.string().required().oneOf([yup.ref("newPassword")], "security.error.password-mismatch")
+	confirmPassword: yup.string().required("form-validation.required-field").oneOf([yup.ref("newPassword")], "security.error.password-mismatch")
 });
 //#endregion
 export { addUserSchema, changePasswordSchema, loginSchema, passwordSchema, usernameSchema };

package/build/utils/schemas.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.mjs","names":[],"sources":["../../src/utils/schemas.ts"],"sourcesContent":["import * as yup from 'yup';\n\nexport const USERNAME_MIN_LENGTH = 2;\n\n// Matches your current logic\nexport const usernameSchema = yup\n  .string()\n  .required()\n  .min(USERNAME_MIN_LENGTH)\n  .matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, 'security.error.username-must-be-url-safe');\n\nexport const passwordSchema = yup.string().required().min(2);\n\nexport const loginSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n});\n\nexport type LoginFormValues = yup.InferType<typeof loginSchema>;\n\nexport const addUserSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n  email: yup.string().email().required(),\n});\n\nexport type AddUserFormValues = yup.InferType<typeof addUserSchema>;\n\nexport const changePasswordSchema = yup.object({\n  username: usernameSchema,\n  oldPassword: passwordSchema,\n  newPassword: passwordSchema,\n  confirmPassword: yup\n    .string()\n    .required()\n    .oneOf([yup.ref('newPassword')], 'security.error.password-mismatch'),\n});\n\nexport type ChangePasswordFormValues = yup.InferType<typeof changePasswordSchema>;\n"],"mappings":";AAKA,IAAa,iBAAiB,IAC3B,OAAO,CAAC,CACR,SAAS,CAAC,CACV,IAAA,CAAuB,CAAC,CACxB,QAAQ,4BAA4B,0CAA0C;AAEjF,IAAa,iBAAiB,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;AAE3D,IAAa,cAAc,IAAI,OAAO;CACpC,UAAU;CACV,UAAU;AACZ,CAAC;AAID,IAAa,gBAAgB,IAAI,OAAO;CACtC,UAAU;CACV,UAAU;CACV,OAAO,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS;AACvC,CAAC;AAID,IAAa,uBAAuB,IAAI,OAAO;CAC7C,UAAU;CACV,aAAa;CACb,aAAa;CACb,iBAAiB,IACd,OAAO,CAAC,CACR,SAAS,CAAC,CACV,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,kCAAkC;AACvE,CAAC"}
+{"version":3,"file":"schemas.mjs","names":[],"sources":["../../src/utils/schemas.ts"],"sourcesContent":["import * as yup from 'yup';\n\nexport const USERNAME_MIN_LENGTH = 2;\nexport const PASSWORD_MIN_LENGTH = 2;\n\n// All messages are i18n keys; the form fields translate them on render with\n// t(message, { length }) so they follow the selected language.\nexport const usernameSchema = yup\n  .string()\n  .required('form-validation.required-field')\n  .min(USERNAME_MIN_LENGTH, 'security.error.username-min-length')\n  .matches(/^[-a-zA-Z0-9_.!~*'()@]+$/, 'security.error.username-must-be-url-safe');\n\nexport const passwordSchema = yup\n  .string()\n  .required('form-validation.required-field')\n  .min(PASSWORD_MIN_LENGTH, 'form-validation.required-min-length');\n\nexport const loginSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n});\n\nexport type LoginFormValues = yup.InferType<typeof loginSchema>;\n\nexport const addUserSchema = yup.object({\n  username: usernameSchema,\n  password: passwordSchema,\n  email: yup\n    .string()\n    .email('form-validation.invalid-email')\n    .required('form-validation.required-field'),\n});\n\nexport type AddUserFormValues = yup.InferType<typeof addUserSchema>;\n\nexport const changePasswordSchema = yup.object({\n  username: usernameSchema,\n  oldPassword: passwordSchema,\n  newPassword: passwordSchema,\n  confirmPassword: yup\n    .string()\n    .required('form-validation.required-field')\n    .oneOf([yup.ref('newPassword')], 'security.error.password-mismatch'),\n});\n\nexport type ChangePasswordFormValues = yup.InferType<typeof changePasswordSchema>;\n"],"mappings":";AAOA,IAAa,iBAAiB,IAC3B,OAAO,CAAC,CACR,SAAS,gCAAgC,CAAC,CAC1C,IAAA,GAAyB,oCAAoC,CAAC,CAC9D,QAAQ,4BAA4B,0CAA0C;AAEjF,IAAa,iBAAiB,IAC3B,OAAO,CAAC,CACR,SAAS,gCAAgC,CAAC,CAC1C,IAAA,GAAyB,qCAAqC;AAEjE,IAAa,cAAc,IAAI,OAAO;CACpC,UAAU;CACV,UAAU;AACZ,CAAC;AAID,IAAa,gBAAgB,IAAI,OAAO;CACtC,UAAU;CACV,UAAU;CACV,OAAO,IACJ,OAAO,CAAC,CACR,MAAM,+BAA+B,CAAC,CACtC,SAAS,gCAAgC;AAC9C,CAAC;AAID,IAAa,uBAAuB,IAAI,OAAO;CAC7C,UAAU;CACV,aAAa;CACb,aAAa;CACb,iBAAiB,IACd,OAAO,CAAC,CACR,SAAS,gCAAgC,CAAC,CAC1C,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,kCAAkC;AACvE,CAAC"}

package/build/utils/session-id.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Random 36-char session id (uuid v4 format) for the signup endpoint.
+ *
+ * `crypto.randomUUID` only exists in secure contexts (https / localhost);
+ * plain-http LAN registries — a very common deployment — need the
+ * `getRandomValues` fallback, which is available everywhere.
+ */
+export declare function generateSessionId(): string;

package/build/utils/session-id.js

@@ -0,0 +1,26 @@
+//#region src/utils/session-id.ts
+/**
+* Random 36-char session id (uuid v4 format) for the signup endpoint.
+*
+* `crypto.randomUUID` only exists in secure contexts (https / localhost);
+* plain-http LAN registries — a very common deployment — need the
+* `getRandomValues` fallback, which is available everywhere.
+*/
+function generateSessionId() {
+	if (typeof crypto.randomUUID === "function") return crypto.randomUUID();
+	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
+	bytes[6] = bytes[6] & 15 | 64;
+	bytes[8] = bytes[8] & 63 | 128;
+	const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+	return [
+		hex.slice(0, 8),
+		hex.slice(8, 12),
+		hex.slice(12, 16),
+		hex.slice(16, 20),
+		hex.slice(20)
+	].join("-");
+}
+//#endregion
+exports.generateSessionId = generateSessionId;
+
+//# sourceMappingURL=session-id.js.map

package/build/utils/session-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.js","names":[],"sources":["../../src/utils/session-id.ts"],"sourcesContent":["/**\n * Random 36-char session id (uuid v4 format) for the signup endpoint.\n *\n * `crypto.randomUUID` only exists in secure contexts (https / localhost);\n * plain-http LAN registries — a very common deployment — need the\n * `getRandomValues` fallback, which is available everywhere.\n */\nexport function generateSessionId(): string {\n  if (typeof crypto.randomUUID === 'function') {\n    return crypto.randomUUID();\n  }\n\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  // eslint-disable-next-line no-bitwise\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // version 4\n  // eslint-disable-next-line no-bitwise\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // variant 10xx\n  const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20),\n  ].join('-');\n}\n"],"mappings":";;;;;;;;AAOA,SAAgB,oBAA4B;CAC1C,IAAI,OAAO,OAAO,eAAe,YAC/B,OAAO,OAAO,WAAW;CAG3B,MAAM,QAAQ,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CAEvD,MAAM,KAAM,MAAM,KAAK,KAAQ;CAE/B,MAAM,KAAM,MAAM,KAAK,KAAQ;CAC/B,MAAM,MAAM,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;CACnF,OAAO;EACL,IAAI,MAAM,GAAG,CAAC;EACd,IAAI,MAAM,GAAG,EAAE;EACf,IAAI,MAAM,IAAI,EAAE;EAChB,IAAI,MAAM,IAAI,EAAE;EAChB,IAAI,MAAM,EAAE;CACd,CAAC,CAAC,KAAK,GAAG;AACZ"}

package/build/utils/session-id.mjs

@@ -0,0 +1,26 @@
+//#region src/utils/session-id.ts
+/**
+* Random 36-char session id (uuid v4 format) for the signup endpoint.
+*
+* `crypto.randomUUID` only exists in secure contexts (https / localhost);
+* plain-http LAN registries — a very common deployment — need the
+* `getRandomValues` fallback, which is available everywhere.
+*/
+function generateSessionId() {
+	if (typeof crypto.randomUUID === "function") return crypto.randomUUID();
+	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
+	bytes[6] = bytes[6] & 15 | 64;
+	bytes[8] = bytes[8] & 63 | 128;
+	const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+	return [
+		hex.slice(0, 8),
+		hex.slice(8, 12),
+		hex.slice(12, 16),
+		hex.slice(16, 20),
+		hex.slice(20)
+	].join("-");
+}
+//#endregion
+export { generateSessionId };
+
+//# sourceMappingURL=session-id.mjs.map

package/build/utils/session-id.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.mjs","names":[],"sources":["../../src/utils/session-id.ts"],"sourcesContent":["/**\n * Random 36-char session id (uuid v4 format) for the signup endpoint.\n *\n * `crypto.randomUUID` only exists in secure contexts (https / localhost);\n * plain-http LAN registries — a very common deployment — need the\n * `getRandomValues` fallback, which is available everywhere.\n */\nexport function generateSessionId(): string {\n  if (typeof crypto.randomUUID === 'function') {\n    return crypto.randomUUID();\n  }\n\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  // eslint-disable-next-line no-bitwise\n  bytes[6] = (bytes[6] & 0x0f) | 0x40; // version 4\n  // eslint-disable-next-line no-bitwise\n  bytes[8] = (bytes[8] & 0x3f) | 0x80; // variant 10xx\n  const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20),\n  ].join('-');\n}\n"],"mappings":";;;;;;;;AAOA,SAAgB,oBAA4B;CAC1C,IAAI,OAAO,OAAO,eAAe,YAC/B,OAAO,OAAO,WAAW;CAG3B,MAAM,QAAQ,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC;CAEvD,MAAM,KAAM,MAAM,KAAK,KAAQ;CAE/B,MAAM,KAAM,MAAM,KAAK,KAAQ;CAC/B,MAAM,MAAM,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;CACnF,OAAO;EACL,IAAI,MAAM,GAAG,CAAC;EACd,IAAI,MAAM,GAAG,EAAE;EACf,IAAI,MAAM,IAAI,EAAE;EAChB,IAAI,MAAM,IAAI,EAAE;EAChB,IAAI,MAAM,EAAE;CACd,CAAC,CAAC,KAAK,GAAG;AACZ"}

package/build/utils/token.d.ts

@@ -1 +1,2 @@
+export declare function tokenExpireInMs(token: string | null): number | null;
 export declare function isTokenExpire(token: string | null): boolean;

package/build/utils/token.js

@@ -1,22 +1,26 @@
 let js_base64 = require("js-base64");
 let lodash_es = require("lodash-es");
 //#region src/utils/token.ts
-function isTokenExpire(token) {
-	if (typeof token !== "string") return true;
+function tokenExpireInMs(token) {
+	if (typeof token !== "string") return null;
 	const [, payload] = token.split(".");
-	if (!payload) return true;
+	if (!payload) return null;
 	let exp;
 	try {
 		exp = JSON.parse(js_base64.Base64.decode(payload)).exp;
 	} catch (error) {
-		console.error("Invalid token:", error, token);
-		return true;
+		console.error("Invalid token:", error);
+		return null;
 	}
-	if (!exp || !(0, lodash_es.isNumber)(exp)) return true;
-	const jsTimestamp = exp * 1e3 - 3e4;
-	return Date.now() >= jsTimestamp;
+	if (!exp || !(0, lodash_es.isNumber)(exp)) return null;
+	return exp * 1e3 - 3e4 - Date.now();
+}
+function isTokenExpire(token) {
+	const remaining = tokenExpireInMs(token);
+	return remaining === null || remaining <= 0;
 }
 //#endregion
 exports.isTokenExpire = isTokenExpire;
+exports.tokenExpireInMs = tokenExpireInMs;
 
 //# sourceMappingURL=token.js.map

package/build/utils/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","names":[],"sources":["../../src/utils/token.ts"],"sourcesContent":["import { Base64 } from 'js-base64';\nimport { isNumber } from 'lodash-es';\n\nexport function isTokenExpire(token: string | null): boolean {\n  if (typeof token !== 'string') {\n    return true;\n  }\n\n  const [, payload] = token.split('.');\n\n  if (!payload) {\n    return true;\n  }\n\n  let exp: number;\n  try {\n    exp = JSON.parse(Base64.decode(payload)).exp;\n  } catch (error: unknown) {\n    console.error('Invalid token:', error, token);\n    return true;\n  }\n\n  if (!exp || !isNumber(exp)) {\n    return true;\n  }\n  // Report as expire before (real expire time - 30s)\n  const jsTimestamp = exp * 1000 - 30000;\n  const expired = Date.now() >= jsTimestamp;\n\n  return expired;\n}\n"],"mappings":";;;AAGA,SAAgB,cAAc,OAA+B;CAC3D,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,GAAG,WAAW,MAAM,MAAM,GAAG;CAEnC,IAAI,CAAC,SACH,OAAO;CAGT,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,MAAM,UAAA,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC;CAC3C,SAAS,OAAgB;EACvB,QAAQ,MAAM,kBAAkB,OAAO,KAAK;EAC5C,OAAO;CACT;CAEA,IAAI,CAAC,OAAO,EAAA,GAAC,UAAA,SAAA,CAAS,GAAG,GACvB,OAAO;CAGT,MAAM,cAAc,MAAM,MAAO;CAGjC,OAFgB,KAAK,IAAI,KAAK;AAGhC"}
+{"version":3,"file":"token.js","names":[],"sources":["../../src/utils/token.ts"],"sourcesContent":["import { Base64 } from 'js-base64';\nimport { isNumber } from 'lodash-es';\n\n// ms until the token reports as expired (30s guard included); null when undecodable\nexport function tokenExpireInMs(token: string | null): number | null {\n  if (typeof token !== 'string') {\n    return null;\n  }\n\n  const [, payload] = token.split('.');\n\n  if (!payload) {\n    return null;\n  }\n\n  let exp: number;\n  try {\n    exp = JSON.parse(Base64.decode(payload)).exp;\n  } catch (error: unknown) {\n    // never log the token itself: even a malformed one is credential material\n    console.error('Invalid token:', error);\n    return null;\n  }\n\n  if (!exp || !isNumber(exp)) {\n    return null;\n  }\n  // Report as expired before (real expire time - 30s)\n  return exp * 1000 - 30000 - Date.now();\n}\n\nexport function isTokenExpire(token: string | null): boolean {\n  const remaining = tokenExpireInMs(token);\n  return remaining === null || remaining <= 0;\n}\n"],"mappings":";;;AAIA,SAAgB,gBAAgB,OAAqC;CACnE,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,GAAG,WAAW,MAAM,MAAM,GAAG;CAEnC,IAAI,CAAC,SACH,OAAO;CAGT,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,MAAM,UAAA,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC;CAC3C,SAAS,OAAgB;EAEvB,QAAQ,MAAM,kBAAkB,KAAK;EACrC,OAAO;CACT;CAEA,IAAI,CAAC,OAAO,EAAA,GAAC,UAAA,SAAA,CAAS,GAAG,GACvB,OAAO;CAGT,OAAO,MAAM,MAAO,MAAQ,KAAK,IAAI;AACvC;AAEA,SAAgB,cAAc,OAA+B;CAC3D,MAAM,YAAY,gBAAgB,KAAK;CACvC,OAAO,cAAc,QAAQ,aAAa;AAC5C"}

package/build/utils/token.mjs

@@ -1,22 +1,25 @@
 import { Base64 } from "js-base64";
 import { isNumber } from "lodash-es";
 //#region src/utils/token.ts
-function isTokenExpire(token) {
-	if (typeof token !== "string") return true;
+function tokenExpireInMs(token) {
+	if (typeof token !== "string") return null;
 	const [, payload] = token.split(".");
-	if (!payload) return true;
+	if (!payload) return null;
 	let exp;
 	try {
 		exp = JSON.parse(Base64.decode(payload)).exp;
 	} catch (error) {
-		console.error("Invalid token:", error, token);
-		return true;
+		console.error("Invalid token:", error);
+		return null;
 	}
-	if (!exp || !isNumber(exp)) return true;
-	const jsTimestamp = exp * 1e3 - 3e4;
-	return Date.now() >= jsTimestamp;
+	if (!exp || !isNumber(exp)) return null;
+	return exp * 1e3 - 3e4 - Date.now();
+}
+function isTokenExpire(token) {
+	const remaining = tokenExpireInMs(token);
+	return remaining === null || remaining <= 0;
 }
 //#endregion
-export { isTokenExpire };
+export { isTokenExpire, tokenExpireInMs };
 
 //# sourceMappingURL=token.mjs.map

package/build/utils/token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"token.mjs","names":[],"sources":["../../src/utils/token.ts"],"sourcesContent":["import { Base64 } from 'js-base64';\nimport { isNumber } from 'lodash-es';\n\nexport function isTokenExpire(token: string | null): boolean {\n  if (typeof token !== 'string') {\n    return true;\n  }\n\n  const [, payload] = token.split('.');\n\n  if (!payload) {\n    return true;\n  }\n\n  let exp: number;\n  try {\n    exp = JSON.parse(Base64.decode(payload)).exp;\n  } catch (error: unknown) {\n    console.error('Invalid token:', error, token);\n    return true;\n  }\n\n  if (!exp || !isNumber(exp)) {\n    return true;\n  }\n  // Report as expire before (real expire time - 30s)\n  const jsTimestamp = exp * 1000 - 30000;\n  const expired = Date.now() >= jsTimestamp;\n\n  return expired;\n}\n"],"mappings":";;;AAGA,SAAgB,cAAc,OAA+B;CAC3D,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,GAAG,WAAW,MAAM,MAAM,GAAG;CAEnC,IAAI,CAAC,SACH,OAAO;CAGT,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC;CAC3C,SAAS,OAAgB;EACvB,QAAQ,MAAM,kBAAkB,OAAO,KAAK;EAC5C,OAAO;CACT;CAEA,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,GACvB,OAAO;CAGT,MAAM,cAAc,MAAM,MAAO;CAGjC,OAFgB,KAAK,IAAI,KAAK;AAGhC"}
+{"version":3,"file":"token.mjs","names":[],"sources":["../../src/utils/token.ts"],"sourcesContent":["import { Base64 } from 'js-base64';\nimport { isNumber } from 'lodash-es';\n\n// ms until the token reports as expired (30s guard included); null when undecodable\nexport function tokenExpireInMs(token: string | null): number | null {\n  if (typeof token !== 'string') {\n    return null;\n  }\n\n  const [, payload] = token.split('.');\n\n  if (!payload) {\n    return null;\n  }\n\n  let exp: number;\n  try {\n    exp = JSON.parse(Base64.decode(payload)).exp;\n  } catch (error: unknown) {\n    // never log the token itself: even a malformed one is credential material\n    console.error('Invalid token:', error);\n    return null;\n  }\n\n  if (!exp || !isNumber(exp)) {\n    return null;\n  }\n  // Report as expired before (real expire time - 30s)\n  return exp * 1000 - 30000 - Date.now();\n}\n\nexport function isTokenExpire(token: string | null): boolean {\n  const remaining = tokenExpireInMs(token);\n  return remaining === null || remaining <= 0;\n}\n"],"mappings":";;;AAIA,SAAgB,gBAAgB,OAAqC;CACnE,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,GAAG,WAAW,MAAM,MAAM,GAAG;CAEnC,IAAI,CAAC,SACH,OAAO;CAGT,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,MAAM,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC;CAC3C,SAAS,OAAgB;EAEvB,QAAQ,MAAM,kBAAkB,KAAK;EACrC,OAAO;CACT;CAEA,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,GACvB,OAAO;CAGT,OAAO,MAAM,MAAO,MAAQ,KAAK,IAAI;AACvC;AAEA,SAAgB,cAAc,OAA+B;CAC3D,MAAM,YAAY,gBAAgB,KAAK;CACvC,OAAO,cAAc,QAAQ,aAAa;AAC5C"}

package/build/utils/url.js

@@ -11,7 +11,7 @@ var url_exports = /* @__PURE__ */ require_runtime.__exportAll({
 	isURL: () => isURL
 });
 function isURL(url) {
-	return (0, validator_lib_isURL.default)(url || "", {
+	return (0, validator_lib_isURL.default)(typeof url === "string" ? url : "", {
 		protocols: [
 			"http",
 			"https",

package/build/utils/url.js.map

@@ -1 +1 @@
-{"version":3,"file":"url.js","names":[],"sources":["../../src/utils/url.ts"],"sourcesContent":["import isEmailValidator from 'validator/lib/isEmail';\nimport isURLValidator from 'validator/lib/isURL';\n\nexport function isURL(url: string): boolean {\n  return isURLValidator(url || '', {\n    protocols: ['http', 'https', 'git+https', 'git'],\n    require_protocol: true,\n    require_tld: false,\n  });\n}\n\nexport function isEmail(email: string): boolean {\n  return isEmailValidator(email || '');\n}\n\nexport function extractFileName(url: string): string {\n  return url.substring(url.lastIndexOf('/') + 1);\n}\n\n// Legacy Edge support for file downloads\ninterface NavigatorWithMSSaveBlob extends Navigator {\n  msSaveBlob?: (blob: Blob, fileName: string) => boolean;\n}\n\nfunction blobToFile(blob: Blob, fileName: string): File {\n  // Create a proper File object by extending the Blob with File properties\n  const fileProperties = {\n    lastModified: Date.now(),\n    name: fileName,\n  };\n\n  // Use Object.assign to copy properties while maintaining the Blob prototype\n  return Object.assign(blob, fileProperties) as File;\n}\n\nexport function downloadFile(fileStream: Blob, fileName: string): void {\n  let file: File;\n  // File constructor is not supported by Edge\n  // https://developer.mozilla.org/en-US/docs/Web/API/File#Browser_compatibility\n  const nav = navigator as NavigatorWithMSSaveBlob;\n  if (nav.msSaveBlob) {\n    // Detect if Edge\n    file = blobToFile(new Blob([fileStream], { type: 'application/octet-stream' }), fileName);\n  } else {\n    file = new File([fileStream], fileName, {\n      type: 'application/octet-stream',\n      lastModified: Date.now(),\n    });\n  }\n\n  const objectURL = URL.createObjectURL(file);\n  const fileLink = document.createElement('a');\n  fileLink.href = objectURL;\n  fileLink.download = fileName;\n\n  // Skip actual download in test environment to avoid JSDOM navigation error\n  // Check if we're in a test environment (JSDOM)\n  const isTestEnvironment =\n    (typeof window !== 'undefined' &&\n      window.navigator &&\n      window.navigator.userAgent &&\n      window.navigator.userAgent.includes('Node.js')) ||\n    window.navigator.userAgent.includes('jsdom');\n\n  if (!isTestEnvironment) {\n    // Without appending to an HTML Element, download dialog does not show up on Firefox\n    // https://github.com/verdaccio/ui/issues/119\n    document.documentElement.appendChild(fileLink);\n    fileLink.click();\n    // firefox requires remove the object url\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n      document.documentElement.removeChild(fileLink);\n    }, 150);\n  } else {\n    // In test environment, just clean up without triggering navigation\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n    }, 150);\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAGA,SAAgB,MAAM,KAAsB;CAC1C,QAAA,GAAO,oBAAA,QAAA,CAAe,OAAO,IAAI;EAC/B,WAAW;GAAC;GAAQ;GAAS;GAAa;EAAK;EAC/C,kBAAkB;EAClB,aAAa;CACf,CAAC;AACH;AAEA,SAAgB,QAAQ,OAAwB;CAC9C,QAAA,GAAO,sBAAA,QAAA,CAAiB,SAAS,EAAE;AACrC;AAEA,SAAgB,gBAAgB,KAAqB;CACnD,OAAO,IAAI,UAAU,IAAI,YAAY,GAAG,IAAI,CAAC;AAC/C;AAOA,SAAS,WAAW,MAAY,UAAwB;CAQtD,OAAO,OAAO,OAAO,MAAM;EALzB,cAAc,KAAK,IAAI;EACvB,MAAM;CAImB,CAAc;AAC3C;AAEA,SAAgB,aAAa,YAAkB,UAAwB;CACrE,IAAI;CAIJ,IAAI,UAAI,YAEN,OAAO,WAAW,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,MAAM,2BAA2B,CAAC,GAAG,QAAQ;MAExF,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU;EACtC,MAAM;EACN,cAAc,KAAK,IAAI;CACzB,CAAC;CAGH,MAAM,YAAY,IAAI,gBAAgB,IAAI;CAC1C,MAAM,WAAW,SAAS,cAAc,GAAG;CAC3C,SAAS,OAAO;CAChB,SAAS,WAAW;CAWpB,IAAI,EAND,OAAO,WAAW,eACjB,OAAO,aACP,OAAO,UAAU,aACjB,OAAO,UAAU,UAAU,SAAS,SAAS,KAC/C,OAAO,UAAU,UAAU,SAAS,OAAO,IAErB;EAGtB,SAAS,gBAAgB,YAAY,QAAQ;EAC7C,SAAS,MAAM;EAEf,iBAAiB;GACf,IAAI,gBAAgB,SAAS;GAC7B,SAAS,gBAAgB,YAAY,QAAQ;EAC/C,GAAG,GAAG;CACR,OAEE,iBAAiB;EACf,IAAI,gBAAgB,SAAS;CAC/B,GAAG,GAAG;AAEV"}
+{"version":3,"file":"url.js","names":[],"sources":["../../src/utils/url.ts"],"sourcesContent":["import isEmailValidator from 'validator/lib/isEmail';\nimport isURLValidator from 'validator/lib/isURL';\n\nexport function isURL(url: string): boolean {\n  // npm does not validate these fields on publish: a non-string truthy value\n  // (e.g. `homepage: 123`) would make the validator throw and crash the page\n  return isURLValidator(typeof url === 'string' ? url : '', {\n    protocols: ['http', 'https', 'git+https', 'git'],\n    require_protocol: true,\n    require_tld: false,\n  });\n}\n\nexport function isEmail(email: string): boolean {\n  return isEmailValidator(email || '');\n}\n\nexport function extractFileName(url: string): string {\n  return url.substring(url.lastIndexOf('/') + 1);\n}\n\n// Legacy Edge support for file downloads\ninterface NavigatorWithMSSaveBlob extends Navigator {\n  msSaveBlob?: (blob: Blob, fileName: string) => boolean;\n}\n\nfunction blobToFile(blob: Blob, fileName: string): File {\n  // Create a proper File object by extending the Blob with File properties\n  const fileProperties = {\n    lastModified: Date.now(),\n    name: fileName,\n  };\n\n  // Use Object.assign to copy properties while maintaining the Blob prototype\n  return Object.assign(blob, fileProperties) as File;\n}\n\nexport function downloadFile(fileStream: Blob, fileName: string): void {\n  let file: File;\n  // File constructor is not supported by Edge\n  // https://developer.mozilla.org/en-US/docs/Web/API/File#Browser_compatibility\n  const nav = navigator as NavigatorWithMSSaveBlob;\n  if (nav.msSaveBlob) {\n    // Detect if Edge\n    file = blobToFile(new Blob([fileStream], { type: 'application/octet-stream' }), fileName);\n  } else {\n    file = new File([fileStream], fileName, {\n      type: 'application/octet-stream',\n      lastModified: Date.now(),\n    });\n  }\n\n  const objectURL = URL.createObjectURL(file);\n  const fileLink = document.createElement('a');\n  fileLink.href = objectURL;\n  fileLink.download = fileName;\n\n  // Skip actual download in test environment to avoid JSDOM navigation error\n  // Check if we're in a test environment (JSDOM)\n  const isTestEnvironment =\n    (typeof window !== 'undefined' &&\n      window.navigator &&\n      window.navigator.userAgent &&\n      window.navigator.userAgent.includes('Node.js')) ||\n    window.navigator.userAgent.includes('jsdom');\n\n  if (!isTestEnvironment) {\n    // Without appending to an HTML Element, download dialog does not show up on Firefox\n    // https://github.com/verdaccio/ui/issues/119\n    document.documentElement.appendChild(fileLink);\n    fileLink.click();\n    // firefox requires remove the object url\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n      document.documentElement.removeChild(fileLink);\n    }, 150);\n  } else {\n    // In test environment, just clean up without triggering navigation\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n    }, 150);\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAGA,SAAgB,MAAM,KAAsB;CAG1C,QAAA,GAAO,oBAAA,QAAA,CAAe,OAAO,QAAQ,WAAW,MAAM,IAAI;EACxD,WAAW;GAAC;GAAQ;GAAS;GAAa;EAAK;EAC/C,kBAAkB;EAClB,aAAa;CACf,CAAC;AACH;AAEA,SAAgB,QAAQ,OAAwB;CAC9C,QAAA,GAAO,sBAAA,QAAA,CAAiB,SAAS,EAAE;AACrC;AAEA,SAAgB,gBAAgB,KAAqB;CACnD,OAAO,IAAI,UAAU,IAAI,YAAY,GAAG,IAAI,CAAC;AAC/C;AAOA,SAAS,WAAW,MAAY,UAAwB;CAQtD,OAAO,OAAO,OAAO,MAAM;EALzB,cAAc,KAAK,IAAI;EACvB,MAAM;CAImB,CAAc;AAC3C;AAEA,SAAgB,aAAa,YAAkB,UAAwB;CACrE,IAAI;CAIJ,IAAI,UAAI,YAEN,OAAO,WAAW,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,MAAM,2BAA2B,CAAC,GAAG,QAAQ;MAExF,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU;EACtC,MAAM;EACN,cAAc,KAAK,IAAI;CACzB,CAAC;CAGH,MAAM,YAAY,IAAI,gBAAgB,IAAI;CAC1C,MAAM,WAAW,SAAS,cAAc,GAAG;CAC3C,SAAS,OAAO;CAChB,SAAS,WAAW;CAWpB,IAAI,EAND,OAAO,WAAW,eACjB,OAAO,aACP,OAAO,UAAU,aACjB,OAAO,UAAU,UAAU,SAAS,SAAS,KAC/C,OAAO,UAAU,UAAU,SAAS,OAAO,IAErB;EAGtB,SAAS,gBAAgB,YAAY,QAAQ;EAC7C,SAAS,MAAM;EAEf,iBAAiB;GACf,IAAI,gBAAgB,SAAS;GAC7B,SAAS,gBAAgB,YAAY,QAAQ;EAC/C,GAAG,GAAG;CACR,OAEE,iBAAiB;EACf,IAAI,gBAAgB,SAAS;CAC/B,GAAG,GAAG;AAEV"}

package/build/utils/url.mjs

@@ -9,7 +9,7 @@ var url_exports = /* @__PURE__ */ __exportAll({
 	isURL: () => isURL
 });
 function isURL(url) {
-	return isURLValidator(url || "", {
+	return isURLValidator(typeof url === "string" ? url : "", {
 		protocols: [
 			"http",
 			"https",

package/build/utils/url.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"url.mjs","names":[],"sources":["../../src/utils/url.ts"],"sourcesContent":["import isEmailValidator from 'validator/lib/isEmail';\nimport isURLValidator from 'validator/lib/isURL';\n\nexport function isURL(url: string): boolean {\n  return isURLValidator(url || '', {\n    protocols: ['http', 'https', 'git+https', 'git'],\n    require_protocol: true,\n    require_tld: false,\n  });\n}\n\nexport function isEmail(email: string): boolean {\n  return isEmailValidator(email || '');\n}\n\nexport function extractFileName(url: string): string {\n  return url.substring(url.lastIndexOf('/') + 1);\n}\n\n// Legacy Edge support for file downloads\ninterface NavigatorWithMSSaveBlob extends Navigator {\n  msSaveBlob?: (blob: Blob, fileName: string) => boolean;\n}\n\nfunction blobToFile(blob: Blob, fileName: string): File {\n  // Create a proper File object by extending the Blob with File properties\n  const fileProperties = {\n    lastModified: Date.now(),\n    name: fileName,\n  };\n\n  // Use Object.assign to copy properties while maintaining the Blob prototype\n  return Object.assign(blob, fileProperties) as File;\n}\n\nexport function downloadFile(fileStream: Blob, fileName: string): void {\n  let file: File;\n  // File constructor is not supported by Edge\n  // https://developer.mozilla.org/en-US/docs/Web/API/File#Browser_compatibility\n  const nav = navigator as NavigatorWithMSSaveBlob;\n  if (nav.msSaveBlob) {\n    // Detect if Edge\n    file = blobToFile(new Blob([fileStream], { type: 'application/octet-stream' }), fileName);\n  } else {\n    file = new File([fileStream], fileName, {\n      type: 'application/octet-stream',\n      lastModified: Date.now(),\n    });\n  }\n\n  const objectURL = URL.createObjectURL(file);\n  const fileLink = document.createElement('a');\n  fileLink.href = objectURL;\n  fileLink.download = fileName;\n\n  // Skip actual download in test environment to avoid JSDOM navigation error\n  // Check if we're in a test environment (JSDOM)\n  const isTestEnvironment =\n    (typeof window !== 'undefined' &&\n      window.navigator &&\n      window.navigator.userAgent &&\n      window.navigator.userAgent.includes('Node.js')) ||\n    window.navigator.userAgent.includes('jsdom');\n\n  if (!isTestEnvironment) {\n    // Without appending to an HTML Element, download dialog does not show up on Firefox\n    // https://github.com/verdaccio/ui/issues/119\n    document.documentElement.appendChild(fileLink);\n    fileLink.click();\n    // firefox requires remove the object url\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n      document.documentElement.removeChild(fileLink);\n    }, 150);\n  } else {\n    // In test environment, just clean up without triggering navigation\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n    }, 150);\n  }\n}\n"],"mappings":";;;;;;;;;;AAGA,SAAgB,MAAM,KAAsB;CAC1C,OAAO,eAAe,OAAO,IAAI;EAC/B,WAAW;GAAC;GAAQ;GAAS;GAAa;EAAK;EAC/C,kBAAkB;EAClB,aAAa;CACf,CAAC;AACH;AAEA,SAAgB,QAAQ,OAAwB;CAC9C,OAAO,iBAAiB,SAAS,EAAE;AACrC;AAEA,SAAgB,gBAAgB,KAAqB;CACnD,OAAO,IAAI,UAAU,IAAI,YAAY,GAAG,IAAI,CAAC;AAC/C;AAOA,SAAS,WAAW,MAAY,UAAwB;CAQtD,OAAO,OAAO,OAAO,MAAM;EALzB,cAAc,KAAK,IAAI;EACvB,MAAM;CAImB,CAAc;AAC3C;AAEA,SAAgB,aAAa,YAAkB,UAAwB;CACrE,IAAI;CAIJ,IAAI,UAAI,YAEN,OAAO,WAAW,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,MAAM,2BAA2B,CAAC,GAAG,QAAQ;MAExF,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU;EACtC,MAAM;EACN,cAAc,KAAK,IAAI;CACzB,CAAC;CAGH,MAAM,YAAY,IAAI,gBAAgB,IAAI;CAC1C,MAAM,WAAW,SAAS,cAAc,GAAG;CAC3C,SAAS,OAAO;CAChB,SAAS,WAAW;CAWpB,IAAI,EAND,OAAO,WAAW,eACjB,OAAO,aACP,OAAO,UAAU,aACjB,OAAO,UAAU,UAAU,SAAS,SAAS,KAC/C,OAAO,UAAU,UAAU,SAAS,OAAO,IAErB;EAGtB,SAAS,gBAAgB,YAAY,QAAQ;EAC7C,SAAS,MAAM;EAEf,iBAAiB;GACf,IAAI,gBAAgB,SAAS;GAC7B,SAAS,gBAAgB,YAAY,QAAQ;EAC/C,GAAG,GAAG;CACR,OAEE,iBAAiB;EACf,IAAI,gBAAgB,SAAS;CAC/B,GAAG,GAAG;AAEV"}
+{"version":3,"file":"url.mjs","names":[],"sources":["../../src/utils/url.ts"],"sourcesContent":["import isEmailValidator from 'validator/lib/isEmail';\nimport isURLValidator from 'validator/lib/isURL';\n\nexport function isURL(url: string): boolean {\n  // npm does not validate these fields on publish: a non-string truthy value\n  // (e.g. `homepage: 123`) would make the validator throw and crash the page\n  return isURLValidator(typeof url === 'string' ? url : '', {\n    protocols: ['http', 'https', 'git+https', 'git'],\n    require_protocol: true,\n    require_tld: false,\n  });\n}\n\nexport function isEmail(email: string): boolean {\n  return isEmailValidator(email || '');\n}\n\nexport function extractFileName(url: string): string {\n  return url.substring(url.lastIndexOf('/') + 1);\n}\n\n// Legacy Edge support for file downloads\ninterface NavigatorWithMSSaveBlob extends Navigator {\n  msSaveBlob?: (blob: Blob, fileName: string) => boolean;\n}\n\nfunction blobToFile(blob: Blob, fileName: string): File {\n  // Create a proper File object by extending the Blob with File properties\n  const fileProperties = {\n    lastModified: Date.now(),\n    name: fileName,\n  };\n\n  // Use Object.assign to copy properties while maintaining the Blob prototype\n  return Object.assign(blob, fileProperties) as File;\n}\n\nexport function downloadFile(fileStream: Blob, fileName: string): void {\n  let file: File;\n  // File constructor is not supported by Edge\n  // https://developer.mozilla.org/en-US/docs/Web/API/File#Browser_compatibility\n  const nav = navigator as NavigatorWithMSSaveBlob;\n  if (nav.msSaveBlob) {\n    // Detect if Edge\n    file = blobToFile(new Blob([fileStream], { type: 'application/octet-stream' }), fileName);\n  } else {\n    file = new File([fileStream], fileName, {\n      type: 'application/octet-stream',\n      lastModified: Date.now(),\n    });\n  }\n\n  const objectURL = URL.createObjectURL(file);\n  const fileLink = document.createElement('a');\n  fileLink.href = objectURL;\n  fileLink.download = fileName;\n\n  // Skip actual download in test environment to avoid JSDOM navigation error\n  // Check if we're in a test environment (JSDOM)\n  const isTestEnvironment =\n    (typeof window !== 'undefined' &&\n      window.navigator &&\n      window.navigator.userAgent &&\n      window.navigator.userAgent.includes('Node.js')) ||\n    window.navigator.userAgent.includes('jsdom');\n\n  if (!isTestEnvironment) {\n    // Without appending to an HTML Element, download dialog does not show up on Firefox\n    // https://github.com/verdaccio/ui/issues/119\n    document.documentElement.appendChild(fileLink);\n    fileLink.click();\n    // firefox requires remove the object url\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n      document.documentElement.removeChild(fileLink);\n    }, 150);\n  } else {\n    // In test environment, just clean up without triggering navigation\n    setTimeout(() => {\n      URL.revokeObjectURL(objectURL);\n    }, 150);\n  }\n}\n"],"mappings":";;;;;;;;;;AAGA,SAAgB,MAAM,KAAsB;CAG1C,OAAO,eAAe,OAAO,QAAQ,WAAW,MAAM,IAAI;EACxD,WAAW;GAAC;GAAQ;GAAS;GAAa;EAAK;EAC/C,kBAAkB;EAClB,aAAa;CACf,CAAC;AACH;AAEA,SAAgB,QAAQ,OAAwB;CAC9C,OAAO,iBAAiB,SAAS,EAAE;AACrC;AAEA,SAAgB,gBAAgB,KAAqB;CACnD,OAAO,IAAI,UAAU,IAAI,YAAY,GAAG,IAAI,CAAC;AAC/C;AAOA,SAAS,WAAW,MAAY,UAAwB;CAQtD,OAAO,OAAO,OAAO,MAAM;EALzB,cAAc,KAAK,IAAI;EACvB,MAAM;CAImB,CAAc;AAC3C;AAEA,SAAgB,aAAa,YAAkB,UAAwB;CACrE,IAAI;CAIJ,IAAI,UAAI,YAEN,OAAO,WAAW,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,MAAM,2BAA2B,CAAC,GAAG,QAAQ;MAExF,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU;EACtC,MAAM;EACN,cAAc,KAAK,IAAI;CACzB,CAAC;CAGH,MAAM,YAAY,IAAI,gBAAgB,IAAI;CAC1C,MAAM,WAAW,SAAS,cAAc,GAAG;CAC3C,SAAS,OAAO;CAChB,SAAS,WAAW;CAWpB,IAAI,EAND,OAAO,WAAW,eACjB,OAAO,aACP,OAAO,UAAU,aACjB,OAAO,UAAU,UAAU,SAAS,SAAS,KAC/C,OAAO,UAAU,UAAU,SAAS,OAAO,IAErB;EAGtB,SAAS,gBAAgB,YAAY,QAAQ;EAC7C,SAAS,MAAM;EAEf,iBAAiB;GACf,IAAI,gBAAgB,SAAS;GAC7B,SAAS,gBAAgB,YAAY,QAAQ;EAC/C,GAAG,GAAG;CACR,OAEE,iBAAiB;EACf,IAAI,gBAAgB,SAAS;CAC/B,GAAG,GAAG;AAEV"}

package/build/utils/utils.d.ts

@@ -19,6 +19,16 @@ export interface Repository {
 export declare function formatRepository(repository: string | {
     url?: string;
 } | unknown): string | null;
+/**
+ * Normalizes the `bugs` field to its url.
+ * @see https://docs.npmjs.com/cli/configuring-npm/package-json#bugs
+ */
+export declare function getBugsUrl(bugs: unknown): string | null;
+/**
+ * Normalizes the `funding` field (string, object or array of both) to a url.
+ * @see https://docs.npmjs.com/cli/configuring-npm/package-json#funding
+ */
+export declare function getFundingUrl(funding: unknown): string | null;
 export declare function formatDate(lastUpdate: string | number): string;
 export declare function formatDateDistance(lastUpdate: Date | string | number): string;
 /**