fix: resolve some issues pointed out by coderabbit

Author: danielroe

app/pages/package/[[org]]/[name].vue

@@ -271,7 +271,7 @@ const isHydratingWithServerContent = shallowRef(
 // HTML as a static snapshot while data refetches, avoiding any visual flash.
 const serverRenderedHtml = shallowRef<string | null>(
   isHydratingWithServerContent.value
-    ? (document.querySelector('article')?.innerHTML ?? null)
+    ? (document.getElementById('package-article')?.innerHTML ?? null)
     : null,
 )
 
@@ -739,14 +739,21 @@ const showSkeleton = shallowRef(false)
     />
 
     <!-- During hydration without payload, show captured server HTML as a static snapshot.
-         This avoids a visual flash: the user sees the server content while data refetches. -->
+         This avoids a visual flash: the user sees the server content while data refetches.
+         v-html is safe here: the content originates from the server's own SSR output,
+         captured from the DOM before hydration — it is not user-controlled input. -->
     <article
       v-else-if="isHydratingWithServerContent && serverRenderedHtml"
+      id="package-article"
       :class="$style.packagePage"
       v-html="serverRenderedHtml"
     />
 
-    <article v-else-if="status === 'success' && pkg" :class="$style.packagePage">
+    <article
+      v-else-if="status === 'success' && pkg"
+      id="package-article"
+      :class="$style.packagePage"
+    >
       <!-- Package header -->
       <header
         class="sticky top-14 z-1 bg-[--bg] py-2 border-border"

server/plugins/payload-cache.ts

@@ -119,9 +119,10 @@ export default defineNitroPlugin(nitroApp => {
 
     if (isPayloadRequest) {
       // This was a _payload.json render — cache the response body directly
+      if (typeof response.body !== 'string') return
       const routePath = getRouteFromPayloadUrl(ctx.event.path)
       cachePayload(ctx.event, routePath, {
-        body: response.body as string,
+        body: response.body,
         statusCode: response.statusCode ?? 200,
         headers: {
           'content-type': 'application/json;charset=utf-8',
@@ -133,7 +134,8 @@ export default defineNitroPlugin(nitroApp => {
       // stashed a serialized payload on the event context
       const cachedPayload = ctx.event.context._cachedPayloadResponse
       if (cachedPayload) {
-        const routePath = ctx.event.path === '/' ? '/' : ctx.event.path.replace(/\/$/, '')
+        const pathWithoutQuery = ctx.event.path.replace(/\?.*$/, '')
+        const routePath = pathWithoutQuery === '/' ? '/' : pathWithoutQuery.replace(/\/$/, '')
         cachePayload(ctx.event, routePath, cachedPayload)
         // Clean up the stashed payload
         delete ctx.event.context._cachedPayloadResponse