@danypops/pi-packed 0.21.7 → 0.21.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danypops/pi-packed",
-  "version": "0.21.7",
+  "version": "0.21.8",
   "description": "Pi package lifecycle, validation, daemon, tools, profiles, and TUI",
   "type": "module",
   "bin": {

package/service/src/registry/registry.ts

@@ -16,6 +16,7 @@ import { createLogger } from "../shared/log.ts";
 
 const log = createLogger("registry");
 const README_MAX_CHARS = 50_000;
+const README_DOCUMENT_MAX_BYTES = 1024 * 1024;
 
 /** Upstream etiquette: honor Retry-After on 429, exponential backoff
  * otherwise, give up after RETRY_MAX_ATTEMPTS. */
@@ -126,11 +127,10 @@ export class HttpRegistry implements Registry {
 			pi?: Record<string, unknown>;
 			peerDependencies?: Record<string, string>;
 			scripts?: Record<string, string>;
-			readme?: unknown;
 			dist?: { unpackedSize?: number; integrity?: string; attestations?: { url?: string; provenance?: unknown } };
 		};
 		const manifestFields = v.pi ? Object.keys(v.pi).filter((key) => ["extensions", "skills", "prompts", "themes"].includes(key)) : [];
-		const readme = boundedString(v.readme, README_MAX_CHARS);
+		const readme = await this.publishedReadme(encoded);
 		return {
 			name: boundedString(v.name, 214) ?? boundedString(name, 214)!,
 			version: boundedString(v.version, 128) ?? "",
@@ -166,6 +166,22 @@ export class HttpRegistry implements Registry {
 		};
 	}
 
+	private async publishedReadme(encodedName: string): Promise<string | undefined> {
+		try {
+			const response = await fetchWithRetry(
+				`${this.base}/${encodedName}`,
+				{ headers: { accept: "application/json" } },
+				this.retryBaseDelayMs,
+			);
+			if (!response.ok) return undefined;
+			const document = (await boundedJson(response, README_DOCUMENT_MAX_BYTES)) as { readme?: unknown };
+			return boundedString(document.readme, README_MAX_CHARS);
+		} catch (error) {
+			log.debug("published README unavailable", { error: error instanceof Error ? error.message : String(error) });
+			return undefined;
+		}
+	}
+
 	/** Uses npm's abbreviated multi-version doc, not `/latest` (which carries
 	 * no `time`/`modified` field at all -- confirmed against the live
 	 * registry). Still bounded well under the full unabbreviated document's

package/service/test/core.test.ts

@@ -69,7 +69,6 @@ describe("HttpRegistry", () => {
 						license: "MIT",
 						keywords: ["pi-package", "lsp"],
 						pi: { extensions: ["./src/index.ts"] },
-						readme: `# pi-lsp\n\n${"r".repeat(60_000)}`,
 						dist: {
 							unpackedSize: 12345,
 							integrity: "sha512-test",
@@ -77,6 +76,7 @@ describe("HttpRegistry", () => {
 						},
 					});
 				}
+				if (url.pathname === "/pi-lsp") return Response.json({ readme: `# pi-lsp\n\n${"r".repeat(60_000)}` });
 				return new Response("nf", { status: 404 });
 			},
 		});

package/service/test/npm-metadata-e2e.test.ts

@@ -52,10 +52,16 @@ describe("published npm metadata E2E", () => {
 						description: "Encrypted credential vault daemon",
 						license: "MIT",
 						repository: { type: "git", url: "git+https://github.com/DanyPops/enigma.git" },
-						readme: PUBLISHED_README,
 						dist: { integrity: "sha512-published-fixture" },
 					});
 				}
+				if (url.pathname === "/%40danypops/enigma") {
+					return Response.json({
+						name: "@danypops/enigma",
+						"dist-tags": { latest: "0.22.1" },
+						readme: PUBLISHED_README,
+					});
+				}
 				return new Response("not found", { status: 404 });
 			},
 		});
@@ -78,7 +84,13 @@ describe("published npm metadata E2E", () => {
 		const client = new PackedClient(`http://127.0.0.1:${daemonServer.port}`, TOKEN);
 		const info = await client.info("@danypops/enigma");
 
-		expect(npmRequests).toEqual([{ path: "/%40danypops/enigma/latest", accept: "application/json" }]);
+		expect(npmRequests).toHaveLength(2);
+		expect(npmRequests).toEqual(
+			expect.arrayContaining([
+				{ path: "/%40danypops/enigma/latest", accept: "application/json" },
+				{ path: "/%40danypops/enigma", accept: "application/json" },
+			]),
+		);
 		expect(info).toMatchObject({
 			name: "@danypops/enigma",
 			version: "0.22.1",