@b4run/inspector 0.8.30 → 0.8.32

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/dev/dev-validation-worker-pool.js

@@ -2,10 +2,26 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
-Object.defineProperty(exports, "installDevValidationWorker", {
-    enumerable: true,
-    get: function() {
+0 && (module.exports = {
+    dropDevValidationWorker: null,
+    installDevValidationWorker: null,
+    mirrorModuleStateToDevValidationWorker: null
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    dropDevValidationWorker: function() {
+        return dropDevValidationWorker;
+    },
+    installDevValidationWorker: function() {
         return installDevValidationWorker;
+    },
+    mirrorModuleStateToDevValidationWorker: function() {
+        return mirrorModuleStateToDevValidationWorker;
     }
 });
 const _jestworker = require("next/dist/compiled/jest-worker");
@@ -13,6 +29,30 @@ const _devvalidationworkerglobals = require("../app-render/dev-validation-worker
 const _requirecache = require("./require-cache");
 const _utils = require("../lib/utils");
 const _needsexperimentalreact = require("../../lib/needs-experimental-react");
+/**
+ * Replays a change the dev server made to its own module state in the
+ * validation worker. Installed alongside the worker, so it is absent when no
+ * worker runs (`experimental.devValidationWorker: false`, or Webpack).
+ */ let mirrorModuleState;
+/**
+ * Drops the validation worker. Called when the dev server cannot repair its own
+ * module state in place and re-evaluates every module from disk, which the
+ * worker matches by starting over: the next validation spawns a worker that
+ * loads the current build output.
+ *
+ * A worker dropped on its own, by a failed replay or a crash, is the one case
+ * where the two can diverge. The dev server keeps the modules it evaluated from
+ * earlier updates, and a worker spawned afterwards has no way to obtain those
+ * scripts, so frames naming them stay unresolved until those modules change
+ * again. The validation itself is unaffected, because the worker loads the
+ * current code from disk.
+ */ let dropWorker;
+function mirrorModuleStateToDevValidationWorker(change) {
+    mirrorModuleState == null ? void 0 : mirrorModuleState(change);
+}
+function dropDevValidationWorker() {
+    dropWorker == null ? void 0 : dropWorker();
+}
 function installDevValidationWorker(options) {
     const { distDir, buildId, deploymentId, nextConfig } = options;
     // A single worker, not a pool. Validation for one navigation runs its depth
@@ -26,8 +66,39 @@ function installDevValidationWorker(options) {
     //
     // TODO(dev-validation-worker): raise `numWorkers` if concurrent navigations
     // across independent requests (e.g. multiple tabs) show a validation-latency
-    // tail.
+    // tail. Raising it means `mirrorChange` has to reach every worker instead of
+    // whichever one the pool hands the call to, and the ordering it relies on
+    // holds per worker rather than across them.
     let pool;
+    const mirrorChange = (change)=>{
+        const current = pool;
+        if (!current) {
+            // No worker to keep current, and nothing to replay into a later one: the
+            // compilation that produced this change also wrote the updated chunk to
+            // disk, so a worker spawning after it reads the current code through
+            // `loadComponents`. Evaluating the update is what an isolate that is
+            // already running needs, not what a new one does.
+            return;
+        }
+        // The worker runs one call at a time, in the order the calls were made
+        // (see `numWorkers` below), so this is replayed before any validation
+        // requested after it, and never in the middle of one. That ordering is by
+        // call time, which is why the call is made here, as the change arrives,
+        // rather than deferred onto a queue of our own. A validation already
+        // queued runs first, which is what its render needs: it was produced
+        // before this change. The dev server does not hold its own updates back
+        // for a validation running in process either.
+        const replayed = change.type === 'invalidate' ? current.invalidateCaches(change.filePaths, change.evictModules) : current.applyHmrUpdate(change.update).then(async (outcome)=>{
+            if (outcome === 'failed') {
+                await tearDownPool();
+            }
+        });
+        void replayed.catch(async ()=>{
+            // A replay that failed leaves the worker's state unknown, so it is
+            // dropped rather than trusted.
+            await tearDownPool();
+        });
+    };
     const getPool = ()=>{
         if (pool) {
             return pool;
@@ -63,7 +134,9 @@ function installDevValidationWorker(options) {
             // `node-environment`) run runtime setup meant only for the isolated
             // worker thread, so they must not be evaluated in the parent.
             exposedMethods: [
-                'runDevValidation'
+                'runDevValidation',
+                'applyHmrUpdate',
+                'invalidateCaches'
             ],
             forkOptions: {
                 env: {
@@ -140,13 +213,19 @@ function installDevValidationWorker(options) {
             validationAbortSignal.removeEventListener('abort', propagateAbort);
         }
     };
-    // The dev server can't reach into the worker to clear its `require.cache` or
-    // manifest caches, so we drop the worker whenever the parent's caches are
-    // invalidated (HMR, route recompile). The next validation lazy-spawns a fresh
-    // worker with empty caches.
-    (0, _requirecache.onCacheInvalidation)(()=>{
-        void tearDownPool();
+    // The dev server just cleared these paths from its own `require.cache` and
+    // manifest caches. The worker clears them from its copies.
+    (0, _requirecache.onCacheInvalidation)((filePaths)=>{
+        mirrorChange({
+            type: 'invalidate',
+            filePaths,
+            evictModules: true
+        });
     });
+    mirrorModuleState = mirrorChange;
+    dropWorker = ()=>{
+        void tearDownPool();
+    };
     (0, _devvalidationworkerglobals.setDevValidationWorker)(runValidation);
 }
 

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/dev/dev-validation-worker.js

@@ -2,9 +2,25 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
-Object.defineProperty(exports, "runDevValidation", {
-    enumerable: true,
-    get: function() {
+0 && (module.exports = {
+    applyHmrUpdate: null,
+    invalidateCaches: null,
+    runDevValidation: null
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    applyHmrUpdate: function() {
+        return applyHmrUpdate;
+    },
+    invalidateCaches: function() {
+        return invalidateCaches;
+    },
+    runDevValidation: function() {
         return runDevValidation;
     }
 });
@@ -19,6 +35,8 @@ const _loadcomponents = require("../load-components");
 const _setuphttpagentenv = require("../setup-http-agent-env");
 const _devvalidationerrordelivery = require("../app-render/dev-validation-error-delivery");
 const _devvalidationevents = require("../app-render/dev-validation-events");
+const _loadmanifestexternal = require("../load-manifest.external");
+const _requirecache = require("./require-cache");
 const _manifestssingleton = require("../app-render/manifests-singleton");
 const _patcherrorinspect = require("../patch-error-inspect");
 /**
@@ -33,11 +51,12 @@ const _patcherrorinspect = require("../patch-error-inspect");
  * `loadComponents` pulled in. Frames arriving in the transported payload can
  * point at any chunk the main render touched.
  *
- * This only helps Turbopack, which writes a `.map` beside every chunk. Webpack
- * keeps its dev source maps in the compiler rather than on disk, so its frames
- * from chunks this thread never evaluated stay unresolved, and its module URLs
- * (`webpack-internal://…`) are declined below for the same reason. Frames from
- * dependencies that are not bundled never reach this point, because
+ * Reading from disk covers the chunks, because the worker only runs under
+ * Turbopack (see `next-dev-server.ts`), which writes a `.map` beside every one
+ * of them. A module the server updated in place has no chunk of its own and is
+ * covered instead by this thread applying the same update (see
+ * `applyHmrUpdate`), which leaves its inline map in Node.js' cache here. Frames
+ * from dependencies that are not bundled never reach this point, because
  * `filterStackFrameDEV` drops `node_modules` and `node:` frames; bundled
  * dependencies appear as chunks inside `distDir` like any other code.
  */ function createDiskSourceMapLookup(distDir) {
@@ -59,7 +78,7 @@ const _patcherrorinspect = require("../patch-error-inspect");
             }
         }
         if (!(0, _path.isAbsolute)(chunkPath)) {
-            // Not an emitted chunk, e.g. `webpack-internal://` or `<anonymous>`.
+            // Not an emitted chunk, e.g. `<anonymous>`.
             return undefined;
         }
         const cached = payloads.get(chunkPath);
@@ -187,6 +206,29 @@ const isTestLoggingEnabled = !!(process.env.__NEXT_TEST_MODE && process.env.NEXT
         }
     }));
 }
+async function applyHmrUpdate(update) {
+    if (typeof __turbopack_server_hmr_apply__ !== 'function') {
+        return 'no-runtime';
+    }
+    try {
+        __turbopack_server_hmr_apply__(update);
+    } catch  {
+        // The dev server responds to the same failure by re-evaluating every
+        // module from disk. This thread cannot be repaired in place either, so the
+        // caller drops it.
+        return 'failed';
+    }
+    return 'applied';
+}
+async function invalidateCaches(filePaths, evictModules) {
+    if (evictModules) {
+        (0, _requirecache.deleteCache)(filePaths);
+        return;
+    }
+    for (const filePath of filePaths){
+        (0, _loadmanifestexternal.clearManifestCache)(filePath);
+    }
+}
 async function runDevValidation(message, abortBuffer) {
     // Load the native SWC bindings and wire the code-frame renderer so the errors
     // logged below render with a source-mapped code frame, matching the

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/dev/hot-reloader-turbopack.js

@@ -24,6 +24,7 @@ const _utils = require("../../shared/lib/utils");
 const _utils1 = require("../utils");
 const _loadmanifestexternal = require("../load-manifest.external");
 const _requirecache = require("./require-cache");
+const _devvalidationworkerpool = require("./dev-validation-worker-pool");
 const _renderserver = require("../lib/render-server");
 const _denormalizepagepath = require("../../shared/lib/page-path/denormalize-page-path");
 const _trace = require("../../trace");
@@ -189,6 +190,12 @@ function setupServerHmr(project, { reEvaluateAllModulesExpensive, onApplied }) {
             if (typeof __turbopack_server_hmr_apply__ === 'function') {
                 try {
                     __turbopack_server_hmr_apply__(update);
+                    // The validation worker keeps its own copy of the module graph, and
+                    // applies the same update to it.
+                    (0, _devvalidationworkerpool.mirrorModuleStateToDevValidationWorker)({
+                        type: 'apply',
+                        update
+                    });
                 } catch  {
                     // A matching runtime tried the apply and threw. Evict require.cache
                     // so the next request loads fresh, then skip onApplied. (A no-match
@@ -295,7 +302,7 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
     }
     const hasRewrites = opts.fsChecker.rewrites.afterFiles.length > 0 || opts.fsChecker.rewrites.beforeFiles.length > 0 || opts.fsChecker.rewrites.fallback.length > 0;
     const hotReloaderSpan = (0, _trace.trace)('hot-reloader', undefined, {
-        version: "16.3.0"
+        version: "16.3.3"
     });
     // Ensure the hotReloaderSpan is flushed immediately as it's the parentSpan for all processing
     // of the current `next dev` invocation.
@@ -355,7 +362,7 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
         writeRoutesHashesManifest: false,
         currentNodeJsVersion,
         isPersistentCachingEnabled: (0, _utils2.isFileSystemCacheEnabledForDev)(opts.nextConfig),
-        nextVersion: "16.3.0",
+        nextVersion: "16.3.3",
         serverHmr: serverFastRefresh
     }, {
         turbopackMemoryEviction: opts.nextConfig.experimental.turbopackMemoryEvictionMode,
@@ -1716,6 +1723,10 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
                 // Clear all edge contexts
                 await (0, _renderserver.clearAllModuleContexts)();
                 resetFetch();
+                // This thread gave up on repairing its module graph in place. The
+                // validation worker cannot repair its own either, so it is dropped and
+                // the next validation loads the build output afresh.
+                (0, _devvalidationworkerpool.dropDevValidationWorker)();
                 notifyServerComponentChanges();
             },
             onApplied: (chunkPaths)=>{
@@ -1723,9 +1734,18 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
                 // next RSC render picks up the HMR-applied module changes. Unlike
                 // a full restart, this does NOT clear require.cache — the HMR-applied
                 // modules in devModuleCache must persist for dep preservation.
-                for (const chunkPath of chunkPaths){
-                    (0, _loadmanifestexternal.clearManifestCache)((0, _path.join)(distDir, chunkPath));
+                const manifestPaths = chunkPaths.map((chunkPath)=>(0, _path.join)(distDir, chunkPath));
+                for (const manifestPath of manifestPaths){
+                    (0, _loadmanifestexternal.clearManifestCache)(manifestPath);
                 }
+                // This path clears the manifest cache without going through
+                // `deleteCache`, so `onCacheInvalidation` does not report it to the
+                // validation worker. Report it here instead.
+                (0, _devvalidationworkerpool.mirrorModuleStateToDevValidationWorker)({
+                    type: 'invalidate',
+                    filePaths: manifestPaths,
+                    evictModules: false
+                });
                 notifyServerComponentChanges();
             }
         });

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/dev/hot-reloader-webpack.js

@@ -234,7 +234,7 @@ class HotReloaderWebpack {
         this.previewProps = previewProps;
         this.rewrites = rewrites;
         this.hotReloaderSpan = (0, _trace.trace)('hot-reloader', undefined, {
-            version: "16.3.0"
+            version: "16.3.3"
         });
         // Ensure the hotReloaderSpan is flushed immediately as it's the parentSpan for all processing
         // of the current `next dev` invocation.

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/dev/use-cache-probe-worker.js

@@ -160,6 +160,7 @@ function buildProbeWorkStore(msg) {
         cacheLifeProfiles: msg.nextConfigSerializable.cacheLifeProfiles,
         buildId: msg.buildId,
         deploymentId: msg.deploymentId,
+        requestStartTime: msg.request.requestStartTime,
         // Empty values for cache-handler / RDC bookkeeping. The `useCacheProbeMode`
         // branch in `cache()` returns before any code that reads or writes these
         // fields, so the values can never be observed.

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/image-optimizer.js

@@ -168,7 +168,8 @@ const BYPASS_TYPES = [
     ICNS,
     BMP,
     JXL,
-    HEIC
+    HEIC,
+    AVIF
 ];
 const BLUR_IMG_SIZE = 8 // should match `next-image-loader`
 ;
@@ -206,10 +207,10 @@ function getSharp(concurrency, operationCache) {
         });
         _sharp.unblock({
             operation: [
-                'VipsForeignLoadHeif',
                 'VipsForeignLoadJpeg',
                 'VipsForeignLoadNsgif',
                 'VipsForeignLoadPng',
+                'VipsForeignLoadSvg',
                 'VipsForeignLoadTiff',
                 'VipsForeignLoadWebp'
             ]

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/lib/app-info-log.js

@@ -79,7 +79,7 @@ function _interop_require_wildcard(obj, nodeInterop) {
 }
 function logStartInfo({ networkUrl, appUrl, envInfo, logBundler }) {
     const versionSuffix = logBundler ? ` (${(0, _bundler.bundlerName)((0, _bundler.getBundlerFromEnv)())})` : '';
-    _log.bootstrap(`${(0, _picocolors.bold)((0, _picocolors.purple)(`${_log.prefixes.ready} Next.js ${"16.3.0"}`))}${versionSuffix}`);
+    _log.bootstrap(`${(0, _picocolors.bold)((0, _picocolors.purple)(`${_log.prefixes.ready} Next.js ${"16.3.3"}`))}${versionSuffix}`);
     if (appUrl) {
         _log.bootstrap(`- Local:         ${appUrl}`);
     }

package/.next/standalone/node_modules/.pnpm/next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb/node_modules/next/dist/server/lib/encode-header-safe.js

@@ -0,0 +1,44 @@
+/**
+ * Percent-encode every character other than horizontal tab and printable ASCII
+ * so a value can be safely serialized into an HTTP header.
+ *
+ * Node's `validateHeaderValue` and `fetch`'s ByteString conversion accept
+ * different character ranges. Restricting values to `\t\x20-\x7e` produces a
+ * conservative representation that both can serialize. Characters outside a
+ * transport's accepted range (Hebrew, Arabic, Chinese, emoji, …) would
+ * otherwise throw `ERR_INVALID_CHAR` or a `TypeError`, which crashes ISR or
+ * fails a cache read on every affected request.
+ *
+ * Cache tags are encoded at the public boundaries — tag construction
+ * (`getImplicitTags`, `validateTags`) and invalidation input
+ * (`revalidatePath`, `revalidateTag`, `updateTag`) — so storage, comparison,
+ * and the wire all see the same canonical form.
+ *
+ * The class is narrower than either transport accepts. Everything inside it
+ * passes through byte-for-byte, including `,`, `/`, `%`, `[`, `]`, `_`, `-` and
+ * `\t`, which preserves the comma-separated header format and the
+ * dynamic-segment markers in derived tags (`_N_T_/[slug]/page`).
+ *
+ * Properties:
+ * - Fast-path: input that already fits the class is returned unchanged. This
+ *   makes the encoder idempotent on already-encoded `%xx` sequences.
+ * - Matches *runs* of out-of-class code units so surrogate pairs (e.g. an
+ *   emoji) are handed to `encodeURIComponent` as a complete code point — a
+ *   per-code-unit regex would split the pair and throw `URIError`.
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "encodeHeaderSafe", {
+    enumerable: true,
+    get: function() {
+        return encodeHeaderSafe;
+    }
+});
+const OUT_OF_CLASS_CHAR = /[^\t\x20-\x7e]/;
+const OUT_OF_CLASS_RUN = /[^\t\x20-\x7e]+/g;
+function encodeHeaderSafe(value) {
+    return OUT_OF_CLASS_CHAR.test(value) ? value.replace(OUT_OF_CLASS_RUN, (run)=>encodeURIComponent(run)) : value;
+}
+
+//# sourceMappingURL=encode-header-safe.js.map

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/lib/implicit-tags.js

@@ -10,7 +10,7 @@ Object.defineProperty(exports, "getImplicitTags", {
 });
 const _constants = require("../../lib/constants");
 const _handlers = require("../use-cache/handlers");
-const _encodecachetag = require("./encode-cache-tag");
+const _encodeheadersafe = require("./encode-header-safe");
 const _lazyresult = require("./lazy-result");
 const getDerivedTags = (pathname)=>{
     const derivedTags = [
@@ -62,13 +62,13 @@ async function getImplicitTags(page, pathname, fallbackRouteParams) {
     // `x-next-cache-tags`. Idempotent on already-ASCII input.
     const derivedTags = getDerivedTags(page);
     for (let tag of derivedTags){
-        tag = (0, _encodecachetag.encodeCacheTag)(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${tag}`);
+        tag = (0, _encodeheadersafe.encodeHeaderSafe)(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${tag}`);
         tags.add(tag);
     }
     // Add the tags from the pathname. If the route has unknown params, we don't
     // want to add the pathname as a tag, as it will be invalid.
     if (pathname && (!fallbackRouteParams || fallbackRouteParams.size === 0)) {
-        const tag = (0, _encodecachetag.encodeCacheTag)(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${pathname}`);
+        const tag = (0, _encodeheadersafe.encodeHeaderSafe)(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${pathname}`);
         tags.add(tag);
     }
     if (tags.has(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}/`)) {

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/lib/incremental-cache/file-system-cache.js

@@ -310,18 +310,22 @@ class FileSystemCache {
         // Wait for all FS operations to complete.
         await writer.wait();
     }
-    getFilePath(pathname, kind) {
+    getFilePath(key, kind) {
+        let rootDir;
         switch(kind){
             case _responsecache.IncrementalCacheKind.FETCH:
                 // we store in .next/cache/fetch-cache so it can be persisted
                 // across deploys
-                return _path.default.join(this.serverDistDir, '..', 'cache', 'fetch-cache', pathname);
+                rootDir = _path.default.join(this.serverDistDir, '..', 'cache', 'fetch-cache');
+                break;
             case _responsecache.IncrementalCacheKind.PAGES:
-                return _path.default.join(this.serverDistDir, 'pages', pathname);
+                rootDir = _path.default.join(this.serverDistDir, 'pages');
+                break;
             case _responsecache.IncrementalCacheKind.IMAGE:
             case _responsecache.IncrementalCacheKind.APP_PAGE:
             case _responsecache.IncrementalCacheKind.APP_ROUTE:
-                return _path.default.join(this.serverDistDir, 'app', pathname);
+                rootDir = _path.default.join(this.serverDistDir, 'app');
+                break;
             default:
                 throw Object.defineProperty(new Error(`Unexpected file path kind: ${kind}`), "__NEXT_ERROR_CODE", {
                     value: "E479",
@@ -329,6 +333,15 @@ class FileSystemCache {
                     configurable: true
                 });
         }
+        const filePath = _path.default.join(rootDir, key);
+        if (!(filePath.startsWith(rootDir + _path.default.sep) || filePath === rootDir)) {
+            throw Object.defineProperty(new Error(`Invalid file path: ${filePath}`), "__NEXT_ERROR_CODE", {
+                value: "E1468",
+                enumerable: false,
+                configurable: true
+            });
+        }
+        return filePath;
     }
 }
 

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/lib/patch-fetch.js

@@ -44,7 +44,7 @@ const _workunitasyncstorageexternal = require("../app-render/work-unit-async-sto
 const _responsecache = require("../response-cache");
 const _cloneresponse = require("./clone-response");
 const _stagedrendering = require("../app-render/staged-rendering");
-const _encodecachetag = require("./encode-cache-tag");
+const _encodeheadersafe = require("./encode-header-safe");
 const isEdgeRuntime = process.env.NEXT_RUNTIME === 'edge';
 const NEXT_PATCH_SYMBOL = Symbol.for('next-patch');
 function isFetchPatched() {
@@ -94,7 +94,7 @@ function validateTags(tags, description) {
             // Encode so a non-ASCII tag can be safely serialized into the
             // `x-next-cache-tags` HTTP header without tripping Node's header
             // validation. Length is checked on the raw input above.
-            validTags.push((0, _encodecachetag.encodeCacheTag)(tag));
+            validTags.push((0, _encodeheadersafe.encodeHeaderSafe)(tag));
         }
         if (validTags.length > _constants1.NEXT_CACHE_TAG_MAX_ITEMS) {
             console.warn(`Warning: exceeded max tag count for ${description}, dropped tags:`, tags.slice(i).join(', '));

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/lib/start-server.js

@@ -177,7 +177,7 @@ async function getRequestHandlers({ dir, port, isDev, onDevServerCleanup, server
 async function startServer(serverOptions) {
     const { dir, isDev, hostname, minimalMode, allowRetry, keepAliveTimeout, selfSignedCertificate, serverFastRefresh } = serverOptions;
     let { port } = serverOptions;
-    process.title = `next-server (v${"16.3.0"})`;
+    process.title = `next-server (v${"16.3.3"})`;
     let handlersReady = ()=>{};
     let handlersError = ()=>{};
     let handlersPromise = new Promise((resolve, reject)=>{

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/use-cache/handlers.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "__esModule", {
     getDevTieredCacheHandler: null,
     getPrivateCacheHandler: null,
     initializeCacheHandlers: null,
+    isBuiltInCacheHandler: null,
     isCustomCacheHandler: null,
     isMemoryCacheDisabled: null,
     setCacheHandler: null
@@ -38,6 +39,9 @@ _export(exports, {
     initializeCacheHandlers: function() {
         return initializeCacheHandlers;
     },
+    isBuiltInCacheHandler: function() {
+        return isBuiltInCacheHandler;
+    },
     isCustomCacheHandler: function() {
         return isCustomCacheHandler;
     },
@@ -57,6 +61,7 @@ const handlersSymbol = Symbol.for('@next/cache-handlers');
 const handlersMapSymbol = Symbol.for('@next/cache-handlers-map');
 const handlersSetSymbol = Symbol.for('@next/cache-handlers-set');
 const privateHandlerSymbol = Symbol.for('@next/cache-handlers-private');
+const builtInHandlersSymbol = Symbol.for('@next/cache-handlers-built-in');
 const devFrontHandlersSymbol = Symbol.for('@next/cache-handlers-dev-fronts');
 const devTieredHandlersSymbol = Symbol.for('@next/cache-handlers-dev-tiered');
 const memoryCacheDisabledSymbol = Symbol.for('@next/cache-handlers-memory-disabled');
@@ -80,6 +85,8 @@ function initializeCacheHandlers(cacheMaxMemorySize) {
     debug == null ? void 0 : debug('initializing cache handlers');
     const handlersMap = new Map();
     reference[handlersMapSymbol] = handlersMap;
+    const builtInHandlers = new Set();
+    reference[builtInHandlersSymbol] = builtInHandlers;
     // In development, `cacheMaxMemorySize: 0` would make the built-in default
     // handler a no-op, so every reload would miss. Use a real in-memory size
     // instead so dev stays fast; the "use cache" wrapper forces a dynamic cache
@@ -95,6 +102,7 @@ function initializeCacheHandlers(cacheMaxMemorySize) {
         } else {
             debug == null ? void 0 : debug('setting "default" cache handler from default');
             fallback = (0, _default.createDefaultCacheHandler)(builtInSize);
+            builtInHandlers.add(fallback);
         }
         handlersMap.set('default', fallback);
         if (reference[handlersSymbol].RemoteCache) {
@@ -106,6 +114,7 @@ function initializeCacheHandlers(cacheMaxMemorySize) {
         }
     } else {
         const handler = (0, _default.createDefaultCacheHandler)(builtInSize);
+        builtInHandlers.add(handler);
         debug == null ? void 0 : debug('setting "default" cache handler from default');
         handlersMap.set('default', handler);
         debug == null ? void 0 : debug('setting "remote" cache handler from default');
@@ -166,6 +175,11 @@ function isCustomCacheHandler(kind) {
     }
     return ((_reference_devFrontHandlersSymbol = reference[devFrontHandlersSymbol]) == null ? void 0 : _reference_devFrontHandlersSymbol.has(kind)) ?? false;
 }
+function isBuiltInCacheHandler(kind) {
+    var _reference_handlersMapSymbol, _reference_builtInHandlersSymbol;
+    const handler = (_reference_handlersMapSymbol = reference[handlersMapSymbol]) == null ? void 0 : _reference_handlersMapSymbol.get(kind);
+    return handler !== undefined && Boolean((_reference_builtInHandlersSymbol = reference[builtInHandlersSymbol]) == null ? void 0 : _reference_builtInHandlersSymbol.has(handler));
+}
 function getDevTieredCacheHandler(kind) {
     var _reference_devTieredHandlersSymbol;
     if (!process.env.__NEXT_DEV_SERVER) {

package/.next/standalone/node_modules/.pnpm/{next@16.3.0_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_dbc857abffbbe11b366888a920df3956 → next@16.3.3_@babel+core@7.29.7_@opentelemetry+api@1.9.1_@playwright+test@1.62.1_@types+_f5724aa723373cda7a6a041d1a1258bb}/node_modules/next/dist/server/use-cache/use-cache-probe-scheduler.js

@@ -48,7 +48,8 @@ function setupProbeScheduler(opts) {
                 rootParams: outerRequestStore.rootParams ?? {},
                 isDraftMode: workStore.isDraftMode ?? false,
                 isHmrRefresh: outerRequestStore.isHmrRefresh ?? false,
-                hmrRefreshHash: outerRequestStore.hmrRefreshHash
+                hmrRefreshHash: outerRequestStore.hmrRefreshHash,
+                requestStartTime: workStore.requestStartTime
             },
             timeoutMs: probeInternalTimeoutMs
         }).then((completed)=>{