cnpmcore 0.0.2 → 1.2.0

package/dist/app/port/UserRoleManager.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserRoleManager = void 0;
+const tegg_1 = require("@eggjs/tegg");
+const egg_errors_1 = require("egg-errors");
+const UserUtil_1 = require("../common/UserUtil");
+let UserRoleManager = class UserRoleManager {
+    constructor() {
+        this.handleAuthorized = false;
+    }
+    // {
+    //   'user-agent': 'npm/8.1.2 node/v16.13.1 darwin arm64 workspaces/false',
+    //   'npm-command': 'adduser',
+    //   authorization: 'Bearer 379f84d8-ba98-480b-909e-a8260af3a3ee',
+    //   'content-type': 'application/json',
+    //   accept: '*/*',
+    //   'content-length': '166',
+    //   'accept-encoding': 'gzip,deflate',
+    //   host: 'localhost:7001',
+    //   connection: 'keep-alive'
+    // }
+    async getAuthorizedUserAndToken(ctx) {
+        if (this.handleAuthorized) {
+            if (!this.currentAuthorizedUser)
+                return null;
+            return {
+                token: this.currentAuthorizedToken,
+                user: this.currentAuthorizedUser,
+            };
+        }
+        this.handleAuthorized = true;
+        const authorization = ctx.get('authorization');
+        if (!authorization)
+            return null;
+        const matchs = /^Bearer ([\w\.]+?)$/.exec(authorization);
+        if (!matchs)
+            return null;
+        const tokenValue = matchs[1];
+        const tokenKey = (0, UserUtil_1.sha512)(tokenValue);
+        const authorizedUserAndToken = await this.userRepository.findUserAndTokenByTokenKey(tokenKey);
+        if (authorizedUserAndToken) {
+            this.currentAuthorizedToken = authorizedUserAndToken.token;
+            this.currentAuthorizedUser = authorizedUserAndToken.user;
+            ctx.userId = authorizedUserAndToken.user.userId;
+        }
+        return authorizedUserAndToken;
+    }
+    async requiredAuthorizedUser(ctx, role) {
+        const authorizedUserAndToken = await this.getAuthorizedUserAndToken(ctx);
+        if (!authorizedUserAndToken) {
+            const authorization = ctx.get('authorization');
+            const message = authorization ? 'Invalid token' : 'Login first';
+            throw new egg_errors_1.UnauthorizedError(message);
+        }
+        const { user, token } = authorizedUserAndToken;
+        if (role === 'publish') {
+            if (token.isReadonly) {
+                throw new egg_errors_1.ForbiddenError(`Read-only Token "${token.tokenMark}" can't publish`);
+            }
+            // only support npm >= 7.0.0 allow publish action
+            // user-agent: "npm/6.14.12 node/v10.24.1 darwin x64"
+            const m = /npm\/(\w{1,1000}\.)/.exec(ctx.get('user-agent'));
+            if (!m) {
+                throw new egg_errors_1.ForbiddenError('Only allow npm client to access');
+            }
+            const major = parseInt(m[1]);
+            if (major < 7) {
+                throw new egg_errors_1.ForbiddenError('Only allow npm@>=7.0.0 client to access');
+            }
+        }
+        if (role === 'setting') {
+            if (token.isReadonly) {
+                throw new egg_errors_1.ForbiddenError(`Read-only Token "${token.tokenMark}" can't setting`);
+            }
+            if (token.isAutomation) {
+                throw new egg_errors_1.ForbiddenError(`Automation Token "${token.tokenMark}" can't setting`);
+            }
+        }
+        return user;
+    }
+    async requiredPackageMaintainer(pkg, user) {
+        // should be private package
+        if (!pkg.isPrivate) {
+            // admins can modified public package
+            if (this.config.cnpmcore.admins[user.name]) {
+                this.logger.warn('[UserRoleManager.requiredPackageMaintainer] admin "%s" modified public package "%s"', user.name, pkg.fullname);
+                return;
+            }
+            throw new egg_errors_1.ForbiddenError(`Can\'t modify npm public package "${pkg.fullname}"`);
+        }
+        const maintainers = await this.packageRepository.listPackageMaintainers(pkg.packageId);
+        const maintainer = maintainers.find(m => m.userId === user.userId);
+        if (!maintainer) {
+            const names = maintainers.map(m => m.name).join(', ');
+            throw new egg_errors_1.ForbiddenError(`"${user.name}" not authorized to modify ${pkg.fullname}, please contact maintainers: "${names}"`);
+        }
+    }
+    async requiredPackageScope(scope, user) {
+        var _a;
+        const cnpmcoreConfig = this.config.cnpmcore;
+        if (!cnpmcoreConfig.allowPublishNonScopePackage) {
+            const allowScopes = (_a = user.scopes) !== null && _a !== void 0 ? _a : cnpmcoreConfig.allowScopes;
+            if (!scope) {
+                throw new egg_errors_1.ForbiddenError(`Package scope required, legal scopes: "${allowScopes.join(', ')}"`);
+            }
+            if (!allowScopes.includes(scope)) {
+                throw new egg_errors_1.ForbiddenError(`Scope "${scope}" not match legal scopes: "${allowScopes.join(', ')}"`);
+            }
+        }
+    }
+    async isAdmin(ctx) {
+        const authorizedUserAndToken = await this.getAuthorizedUserAndToken(ctx);
+        if (!authorizedUserAndToken)
+            return false;
+        const { user, token } = authorizedUserAndToken;
+        if (token.isReadonly)
+            return false;
+        return user.name in this.config.cnpmcore.admins;
+    }
+};
+__decorate([
+    (0, tegg_1.Inject)()
+], UserRoleManager.prototype, "userRepository", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], UserRoleManager.prototype, "packageRepository", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], UserRoleManager.prototype, "config", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], UserRoleManager.prototype, "logger", void 0);
+UserRoleManager = __decorate([
+    (0, tegg_1.ContextProto)({
+        // only inject on port module
+        accessLevel: tegg_1.AccessLevel.PRIVATE,
+    })
+], UserRoleManager);
+exports.UserRoleManager = UserRoleManager;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/app/port/controller/AbstractController.d.ts

@@ -0,0 +1,32 @@
+import { NotFoundError, UnavailableForLegalReasonsError } from 'egg-errors';
+import { EggContext } from '@eggjs/tegg';
+import { EggLogger, EggAppConfig } from 'egg';
+import { MiddlewareController } from '../middleware';
+import { UserRoleManager } from '../UserRoleManager';
+import { PackageRepository } from '../../repository/PackageRepository';
+import { UserRepository } from '../../repository/UserRepository';
+import { Package as PackageEntity } from '../../core/entity/Package';
+import { PackageVersion as PackageVersionEntity } from '../../core/entity/PackageVersion';
+import { UserService } from '../../core/service/UserService';
+declare class PackageNotFoundError extends NotFoundError {
+}
+export declare abstract class AbstractController extends MiddlewareController {
+    protected logger: EggLogger;
+    protected config: EggAppConfig;
+    protected userRoleManager: UserRoleManager;
+    protected packageRepository: PackageRepository;
+    protected userRepository: UserRepository;
+    protected userService: UserService;
+    protected get sourceRegistry(): string;
+    protected get enableSyncAll(): boolean;
+    protected isPrivateScope(scope: string): any;
+    protected createPackageNotFoundError(fullname: string, version?: string): PackageNotFoundError;
+    protected createPackageBlockError(reason: string, fullname: string, version?: string): UnavailableForLegalReasonsError;
+    protected getPackageEntityByFullname(fullname: string): Promise<PackageEntity>;
+    protected getPackageEntityAndRequiredMaintainer(ctx: EggContext, fullname: string): Promise<PackageEntity>;
+    protected getPackageEntity(scope: string, name: string): Promise<PackageEntity>;
+    protected getPackageVersionEntity(pkg: PackageEntity, version: string): Promise<PackageVersionEntity>;
+    protected getAndCheckVersionFromFilename(ctx: EggContext, fullname: string, filenameWithVersion: string): string;
+    protected setCDNHeaders(ctx: EggContext): void;
+}
+export {};

package/dist/app/port/controller/AbstractController.js

@@ -0,0 +1,112 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractController = void 0;
+const egg_errors_1 = require("egg-errors");
+const tegg_1 = require("@eggjs/tegg");
+const middleware_1 = require("../middleware");
+const PackageUtil_1 = require("../../common/PackageUtil");
+const typebox_1 = require("../typebox");
+class PackageNotFoundError extends egg_errors_1.NotFoundError {
+}
+class AbstractController extends middleware_1.MiddlewareController {
+    get sourceRegistry() {
+        return this.config.cnpmcore.sourceRegistry;
+    }
+    get enableSyncAll() {
+        return this.config.cnpmcore.syncMode === 'all';
+    }
+    isPrivateScope(scope) {
+        return scope && this.config.cnpmcore.allowScopes.includes(scope);
+    }
+    createPackageNotFoundError(fullname, version) {
+        const message = version ? `${fullname}@${version} not found` : `${fullname} not found`;
+        const err = new PackageNotFoundError(message);
+        const [scope] = (0, PackageUtil_1.getScopeAndName)(fullname);
+        // dont sync private scope
+        if (!this.isPrivateScope(scope)) {
+            // syncMode = none, redirect public package to source registry
+            if (!this.enableSyncAll) {
+                err.redirectToSourceRegistry = this.sourceRegistry;
+            }
+        }
+        return err;
+    }
+    createPackageBlockError(reason, fullname, version) {
+        const message = version ? `${fullname}@${version} was blocked` : `${fullname} was blocked`;
+        return new egg_errors_1.UnavailableForLegalReasonsError(`${message}, reason: ${reason}`);
+    }
+    async getPackageEntityByFullname(fullname) {
+        const [scope, name] = (0, PackageUtil_1.getScopeAndName)(fullname);
+        return await this.getPackageEntity(scope, name);
+    }
+    // 1. get package
+    // 2. check current user is maintainer
+    // 3. make sure current token can publish
+    async getPackageEntityAndRequiredMaintainer(ctx, fullname) {
+        const [scope, name] = (0, PackageUtil_1.getScopeAndName)(fullname);
+        const pkg = await this.getPackageEntity(scope, name);
+        const authorizedUser = await this.userRoleManager.requiredAuthorizedUser(ctx, 'publish');
+        await this.userRoleManager.requiredPackageMaintainer(pkg, authorizedUser);
+        return pkg;
+    }
+    // try to get package entity, throw NotFoundError when package not exists
+    async getPackageEntity(scope, name) {
+        const packageEntity = await this.packageRepository.findPackage(scope, name);
+        if (!packageEntity) {
+            const fullname = (0, PackageUtil_1.getFullname)(scope, name);
+            throw this.createPackageNotFoundError(fullname);
+        }
+        return packageEntity;
+    }
+    async getPackageVersionEntity(pkg, version) {
+        const packageVersion = await this.packageRepository.findPackageVersion(pkg.packageId, version);
+        if (!packageVersion) {
+            throw new egg_errors_1.NotFoundError(`${pkg.fullname}@${version} not found`);
+        }
+        return packageVersion;
+    }
+    getAndCheckVersionFromFilename(ctx, fullname, filenameWithVersion) {
+        const scopeAndName = (0, PackageUtil_1.getScopeAndName)(fullname);
+        const name = scopeAndName[1];
+        // @foo/bar/-/bar-1.0.0 == filename: bar ==> 1.0.0
+        // bar/-/bar-1.0.0 == filename: bar ==> 1.0.0
+        const version = filenameWithVersion.substring(name.length + 1);
+        // check version format
+        const data = { version };
+        ctx.tValidate(typebox_1.VersionRule, data);
+        return data.version;
+    }
+    setCDNHeaders(ctx) {
+        const config = this.config.cnpmcore;
+        if (config.enableCDN) {
+            ctx.set('cache-control', config.cdnCacheControlHeader);
+            ctx.vary(config.cdnVaryHeader);
+        }
+    }
+}
+__decorate([
+    (0, tegg_1.Inject)()
+], AbstractController.prototype, "logger", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], AbstractController.prototype, "config", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], AbstractController.prototype, "userRoleManager", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], AbstractController.prototype, "packageRepository", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], AbstractController.prototype, "userRepository", void 0);
+__decorate([
+    (0, tegg_1.Inject)()
+], AbstractController.prototype, "userService", void 0);
+exports.AbstractController = AbstractController;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/app/port/controller/BinarySyncController.d.ts

@@ -0,0 +1,36 @@
+/// <reference types="node" />
+import { EggContext } from '@eggjs/tegg';
+import { AbstractController } from './AbstractController';
+export declare class BinarySyncController extends AbstractController {
+    private binarySyncerService;
+    showBinaryHTML(ctx: EggContext): Promise<string>;
+    listBinaries(): Promise<{
+        name: string;
+        description: string;
+        distUrl: string;
+        repoUrl: string;
+        type: string;
+        url: string;
+    }[]>;
+    showBinary(ctx: EggContext, binaryName: string, subpath: string): Promise<import("stream").Readable | {
+        id: string;
+        category: string;
+        name: string;
+        date: string;
+        type: string;
+        size: number | undefined;
+        url: string;
+        modified: Date;
+    }[] | undefined>;
+    showBinaryIndex(ctx: EggContext, binaryName: string): Promise<import("stream").Readable | {
+        id: string;
+        category: string;
+        name: string;
+        date: string;
+        type: string;
+        size: number | undefined;
+        url: string;
+        modified: Date;
+    }[] | undefined>;
+    private formatItems;
+}

package/dist/app/port/controller/BinarySyncController.js

@@ -0,0 +1,123 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BinarySyncController = void 0;
+const tegg_1 = require("@eggjs/tegg");
+const path_1 = __importDefault(require("path"));
+const egg_errors_1 = require("egg-errors");
+const AbstractController_1 = require("./AbstractController");
+const binaries_1 = __importDefault(require("../../../config/binaries"));
+let BinarySyncController = class BinarySyncController extends AbstractController_1.AbstractController {
+    async showBinaryHTML(ctx) {
+        ctx.type = 'html';
+        return ctx.app.binaryHTML;
+    }
+    async listBinaries() {
+        return Object.values(binaries_1.default).map(binaryConfig => {
+            return {
+                name: `${binaryConfig.category}/`,
+                description: binaryConfig.description,
+                distUrl: binaryConfig.distUrl,
+                repoUrl: /^https?:\/\//.test(binaryConfig.repo) ? binaryConfig.repo : `https://github.com/${binaryConfig.repo}`,
+                type: 'dir',
+                url: `${this.config.cnpmcore.registry}/-/binary/${binaryConfig.category}/`,
+            };
+        });
+    }
+    async showBinary(ctx, binaryName, subpath) {
+        subpath = subpath || '/';
+        if (subpath === '/') {
+            const items = await this.binarySyncerService.listRootBinaries(binaryName);
+            return this.formatItems(items);
+        }
+        subpath = `/${subpath}`;
+        const parsed = path_1.default.parse(subpath);
+        const parent = parsed.dir === '/' ? '/' : `${parsed.dir}/`;
+        const name = subpath.endsWith('/') ? `${parsed.base}/` : parsed.base;
+        const binary = await this.binarySyncerService.findBinary(binaryName, parent, name);
+        if (!binary) {
+            throw new egg_errors_1.NotFoundError(`Binary "${binaryName}${subpath}" not found`);
+        }
+        if (binary.isDir) {
+            const items = await this.binarySyncerService.listDirBinaries(binary);
+            return this.formatItems(items);
+        }
+        // download file
+        const urlOrStream = await this.binarySyncerService.downloadBinary(binary);
+        if (!urlOrStream) {
+            throw new egg_errors_1.NotFoundError(`Binary "${binaryName}${subpath}" not found`);
+        }
+        if (typeof urlOrStream === 'string') {
+            ctx.redirect(urlOrStream);
+            return;
+        }
+        ctx.attachment(name);
+        return urlOrStream;
+    }
+    async showBinaryIndex(ctx, binaryName) {
+        return await this.showBinary(ctx, binaryName, '/');
+    }
+    formatItems(items) {
+        return items.map(item => {
+            return {
+                id: item.binaryId,
+                category: item.category,
+                name: item.name,
+                date: item.date,
+                type: item.isDir ? 'dir' : 'file',
+                size: item.isDir ? undefined : item.size,
+                url: `${this.config.cnpmcore.registry}/-/binary/${item.category}${item.parent}${item.name}`,
+                modified: item.updatedAt,
+            };
+        });
+    }
+};
+__decorate([
+    (0, tegg_1.Inject)()
+], BinarySyncController.prototype, "binarySyncerService", void 0);
+__decorate([
+    (0, tegg_1.HTTPMethod)({
+        path: '/binary.html',
+        method: tegg_1.HTTPMethodEnum.GET,
+    }),
+    __param(0, (0, tegg_1.Context)())
+], BinarySyncController.prototype, "showBinaryHTML", null);
+__decorate([
+    (0, tegg_1.HTTPMethod)({
+        path: '/-/binary/',
+        method: tegg_1.HTTPMethodEnum.GET,
+    })
+], BinarySyncController.prototype, "listBinaries", null);
+__decorate([
+    (0, tegg_1.HTTPMethod)({
+        path: '/-/binary/:binaryName(@[^/]{1,220}\/[^/]{1,220}|[^@/]{1,220})/:subpath(.*)',
+        method: tegg_1.HTTPMethodEnum.GET,
+    }),
+    __param(0, (0, tegg_1.Context)()),
+    __param(1, (0, tegg_1.HTTPParam)()),
+    __param(2, (0, tegg_1.HTTPParam)())
+], BinarySyncController.prototype, "showBinary", null);
+__decorate([
+    (0, tegg_1.HTTPMethod)({
+        path: '/-/binary/:binaryName(@[^/]{1,220}\/[^/]{1,220}|[^@/]{1,220})',
+        method: tegg_1.HTTPMethodEnum.GET,
+    }),
+    __param(0, (0, tegg_1.Context)()),
+    __param(1, (0, tegg_1.HTTPParam)())
+], BinarySyncController.prototype, "showBinaryIndex", null);
+BinarySyncController = __decorate([
+    (0, tegg_1.HTTPController)()
+], BinarySyncController);
+exports.BinarySyncController = BinarySyncController;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/app/port/controller/ChangesStreamController.d.ts

@@ -0,0 +1,13 @@
+import { EggContext } from '@eggjs/tegg';
+import { AbstractController } from './AbstractController';
+export declare class ChangesStreamController extends AbstractController {
+    private changeRepository;
+    listChanges(ctx: EggContext, since: string): Promise<{
+        results: {
+            seq: bigint;
+            type: string;
+            id: string;
+            changes: any[];
+        }[];
+    }>;
+}

package/dist/app/port/controller/ChangesStreamController.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangesStreamController = void 0;
+const tegg_1 = require("@eggjs/tegg");
+const typebox_1 = require("@sinclair/typebox");
+const AbstractController_1 = require("./AbstractController");
+const ChangeRule = typebox_1.Type.Object({
+    since: typebox_1.Type.Integer({ minimum: 0 }),
+});
+let ChangesStreamController = class ChangesStreamController extends AbstractController_1.AbstractController {
+    // https://github.com/cnpm/cnpmcore/issues/70
+    async listChanges(ctx, since) {
+        const params = { since: since ? Number(since) : 0 };
+        ctx.tValidate(ChangeRule, params);
+        const limit = 1000;
+        const changes = await this.changeRepository.query(params.since, limit);
+        const results = changes.reverse().map(change => {
+            return {
+                seq: change.id,
+                type: change.type,
+                id: change.targetName,
+                changes: [change.data],
+            };
+        });
+        return { results };
+    }
+};
+__decorate([
+    (0, tegg_1.Inject)()
+], ChangesStreamController.prototype, "changeRepository", void 0);
+__decorate([
+    (0, tegg_1.HTTPMethod)({
+        // /_changes?since=${since}
+        path: '/_changes',
+        method: tegg_1.HTTPMethodEnum.GET,
+    }),
+    __param(0, (0, tegg_1.Context)()),
+    __param(1, (0, tegg_1.HTTPQuery)())
+], ChangesStreamController.prototype, "listChanges", null);
+ChangesStreamController = __decorate([
+    (0, tegg_1.HTTPController)()
+], ChangesStreamController);
+exports.ChangesStreamController = ChangesStreamController;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQ2hhbmdlc1N0cmVhbUNvbnRyb2xsZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9hcHAvcG9ydC9jb250cm9sbGVyL0NoYW5nZXNTdHJlYW1Db250cm9sbGVyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7OztBQUFBLHNDQVFxQjtBQUNyQiwrQ0FBeUM7QUFDekMsNkRBQTBEO0FBRzFELE1BQU0sVUFBVSxHQUFHLGNBQUksQ0FBQyxNQUFNLENBQUM7SUFDN0IsS0FBSyxFQUFFLGNBQUksQ0FBQyxPQUFPLENBQUMsRUFBRSxPQUFPLEVBQUUsQ0FBQyxFQUFFLENBQUM7Q0FDcEMsQ0FBQyxDQUFDO0FBR0gsSUFBYSx1QkFBdUIsR0FBcEMsTUFBYSx1QkFBd0IsU0FBUSx1Q0FBa0I7SUFJN0QsNkNBQTZDO0lBTTdDLEtBQUssQ0FBQyxXQUFXLENBQVksR0FBZSxFQUFlLEtBQWE7UUFDdEUsTUFBTSxNQUFNLEdBQUcsRUFBRSxLQUFLLEVBQUUsS0FBSyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1FBQ3BELEdBQUcsQ0FBQyxTQUFTLENBQUMsVUFBVSxFQUFFLE1BQU0sQ0FBQyxDQUFDO1FBQ2xDLE1BQU0sS0FBSyxHQUFHLElBQUksQ0FBQztRQUNuQixNQUFNLE9BQU8sR0FBRyxNQUFNLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDLEtBQUssRUFBRSxLQUFLLENBQUMsQ0FBQztRQUN2RSxNQUFNLE9BQU8sR0FBRyxPQUFPLENBQUMsT0FBTyxFQUFFLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFO1lBQzdDLE9BQU87Z0JBQ0wsR0FBRyxFQUFFLE1BQU0sQ0FBQyxFQUFFO2dCQUNkLElBQUksRUFBRSxNQUFNLENBQUMsSUFBSTtnQkFDakIsRUFBRSxFQUFFLE1BQU0sQ0FBQyxVQUFVO2dCQUNyQixPQUFPLEVBQUUsQ0FBRSxNQUFNLENBQUMsSUFBSSxDQUFFO2FBQ3pCLENBQUM7UUFDSixDQUFDLENBQUMsQ0FBQztRQUNILE9BQU8sRUFBRSxPQUFPLEVBQUUsQ0FBQztJQUNyQixDQUFDO0NBQ0YsQ0FBQTtBQXZCQztJQURDLElBQUEsYUFBTSxHQUFFO2lFQUNrQztBQVEzQztJQUxDLElBQUEsaUJBQVUsRUFBQztRQUNWLDJCQUEyQjtRQUMzQixJQUFJLEVBQUUsV0FBVztRQUNqQixNQUFNLEVBQUUscUJBQWMsQ0FBQyxHQUFHO0tBQzNCLENBQUM7SUFDaUIsV0FBQSxJQUFBLGNBQU8sR0FBRSxDQUFBO0lBQW1CLFdBQUEsSUFBQSxnQkFBUyxHQUFFLENBQUE7MERBY3pEO0FBeEJVLHVCQUF1QjtJQURuQyxJQUFBLHFCQUFjLEdBQUU7R0FDSix1QkFBdUIsQ0F5Qm5DO0FBekJZLDBEQUF1QiJ9

package/dist/app/port/controller/DownloadController.d.ts

@@ -0,0 +1,18 @@
+import { AbstractController } from './AbstractController';
+export declare class DownloadController extends AbstractController {
+    private packageVersionDownloadRepository;
+    showPackageDownloads(fullname: string, range: string): Promise<{
+        downloads: {
+            day: string;
+            downloads: number;
+        }[];
+        versions: {};
+    }>;
+    showTotalDownloads(scope: string, range: string): Promise<{
+        downloads: {
+            day: string;
+            downloads: number;
+        }[];
+    }>;
+    private checkAndGetRange;
+}