@circuitwall/jarela 2.2.1 → 2.4.0

package/.next/standalone/.next/server/app/api/v1/allowed-sites/route.js

@@ -47,635 +47,191 @@ module.exports = require("undici");
 
 /***/ }),
 
-/***/ 10471:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+/***/ 10846:
+/***/ ((module) => {
 
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   handler: () => (/* binding */ handler),
-/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
-/* harmony export */   routeModule: () => (/* binding */ routeModule),
-/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
-/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
-/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
-/* harmony export */ });
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
-/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
-/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
+module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
 
+/***/ }),
 
+/***/ 16698:
+/***/ ((module) => {
 
+module.exports = require("node:async_hooks");
 
+/***/ }),
 
+/***/ 19121:
+/***/ ((module) => {
 
+module.exports = require("next/dist/server/app-render/action-async-storage.external.js");
 
+/***/ }),
 
+/***/ 27910:
+/***/ ((module) => {
 
+module.exports = require("stream");
 
+/***/ }),
 
+/***/ 28354:
+/***/ ((module) => {
 
+module.exports = require("util");
 
+/***/ }),
 
+/***/ 29021:
+/***/ ((module) => {
 
+module.exports = require("fs");
 
+/***/ }),
 
+/***/ 29294:
+/***/ ((module) => {
 
-// We inject the nextConfigOutput here so that we can use them in the route
-// module.
-const nextConfigOutput = "standalone"
-const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
-    definition: {
-        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-        page: "/api/v1/allowed-sites/route",
-        pathname: "/api/v1/allowed-sites",
-        filename: "route",
-        bundlePath: "app/api/v1/allowed-sites/route"
-    },
-    distDir: ".next" || 0,
-    relativeProjectDir:  false || '',
-    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/allowed-sites/route.ts",
-    nextConfigOutput,
-    // The lazy require factory ensures that:
-    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
-    //   correctly attributing module load time to application-code rather than
-    //   framework internals.
-    // - In all modes: async modules (route files with top-level await) are
-    //   handled correctly — require() returns a Promise for such modules, which
-    //   ensureUserland() awaits before the first request is handled.
-    userland: ()=>__webpack_require__(58850),
-    // In Turbopack dev mode, also provide a synchronous per-request getter so
-    // server HMR updates are picked up without re-executing the entry chunk.
-    // Using require() (synchronous) avoids adding async overhead that would be
-    // incorrectly attributed to application-code time in devRequestTiming.
-    ... false ? 0 : {}
-});
-// Pull out the exports that we need to expose from the module. This should
-// be eliminated when we've moved the other routes to the new format. These
-// are used to hook into the route.
-const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
-function patchFetch() {
-    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
-        workAsyncStorage,
-        workUnitAsyncStorage
-    });
-}
+module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
 
-async function handler(req, res, ctx) {
-    if (ctx.requestMeta) {
-        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.setRequestMeta)(req, ctx.requestMeta);
-    }
-    if (routeModule.isDev) {
-        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.addRequestMeta)(req, 'devRequestTimingInternalsEnd', process.hrtime.bigint());
-    }
-    let srcPage = "/api/v1/allowed-sites/route";
-    // turbopack doesn't normalize `/index` in the page name
-    // so we need to to process dynamic routes properly
-    // TODO: fix turbopack providing differing value from webpack
-    if (false) {} else if (srcPage === '/index') {
-        // we always normalize /index specifically
-        srcPage = '/';
-    }
-    const multiZoneDraftMode = false;
-    const prepareResult = await routeModule.prepare(req, res, {
-        srcPage,
-        multiZoneDraftMode
-    });
-    if (!prepareResult) {
-        res.statusCode = 400;
-        res.end('Bad Request');
-        ctx.waitUntil == null ? void 0 : ctx.waitUntil.call(ctx, Promise.resolve());
-        return null;
-    }
-    const { buildId, deploymentId, params, nextConfig, parsedUrl, isDraftMode, prerenderManifest, routerServerContext, isOnDemandRevalidate, revalidateOnlyGenerated, resolvedPathname, clientReferenceManifest, serverActionsManifest, previewProps } = prepareResult;
-    const normalizedSrcPage = (0,next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__.normalizeAppPath)(srcPage);
-    // Only this route's prerenders can establish ISR or admit generated params.
-    const isPrerendered = Boolean(prerenderManifest.routes[resolvedPathname]) && (routeModule.isDev || (0,next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__.isRouteCacheOwner)(resolvedPathname, routeModule.cacheOwner, prerenderManifest.routes[resolvedPathname]));
-    let isIsr = Boolean(prerenderManifest.dynamicRoutes[normalizedSrcPage] || isPrerendered);
-    const render404 = async ()=>{
-        // TODO: should route-module itself handle rendering the 404
-        if (routerServerContext == null ? void 0 : routerServerContext.render404) {
-            await routerServerContext.render404(req, res, parsedUrl, false);
-        } else {
-            res.end('This page could not be found');
-        }
-        return null;
+/***/ }),
+
+/***/ 30558:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Rk: () => (/* binding */ listAllowedSites),
+/* harmony export */   Rw: () => (/* binding */ putCookies),
+/* harmony export */   Tp: () => (/* binding */ setSsrfBypass),
+/* harmony export */   aQ: () => (/* binding */ getCookieHeaderForUrl),
+/* harmony export */   hL: () => (/* binding */ addAllowedSite),
+/* harmony export */   rh: () => (/* binding */ isHostAllowed),
+/* harmony export */   uc: () => (/* binding */ removeAllowedSite)
+/* harmony export */ });
+/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(46);
+/* harmony import */ var _lib_crypto_envelope__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(10938);
+// Allowed-sites store. A row represents a host the user has approved the
+// agent to use as them. The single approval grants both:
+//
+//   1. browser-RPC navigation — the extension may drive a tab on this
+//      host on the agent's behalf
+//   2. cookie passthrough — cookies the extension scrapes for this host
+//      (via chrome.cookies.onChanged) get attached to web_fetch requests
+//
+// The two capabilities live on the same row by design: removing a host
+// instantly disables both.
+//
+// Hostname matching is suffix-based: an allow-list entry for `example.com`
+// covers requests to `example.com` and `*.example.com`, but does NOT cover
+// `notexample.com`. The matched entry is what cookies are stored under
+// and what `last_used_at` updates against.
+//
+// Cookie blobs are envelope-encrypted (lib/crypto/envelope.ts) — same
+// scheme as proxy passwords. The UI never receives cookie values; only
+// `has_cookies: boolean` and `cookies_updated_at`.
+
+
+const HOSTNAME_RE = /^(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+const IPV4_RE = /^(?:25[0-5]|2[0-4]\d|[01]?\d\d?)(?:\.(?:25[0-5]|2[0-4]\d|[01]?\d\d?)){3}$/;
+const now = ()=>new Date().toISOString();
+function normaliseHost(input) {
+    if (typeof input !== "string") return null;
+    const trimmed = input.trim().toLowerCase().replace(/\.+$/, "");
+    if (!trimmed) return null;
+    if (trimmed.length > 253) return null;
+    if (HOSTNAME_RE.test(trimmed)) return trimmed;
+    if (IPV4_RE.test(trimmed)) return trimmed;
+    return null;
+}
+function rowToStatus(row) {
+    return {
+        hostname: row.hostname,
+        ssrf_bypass: row.ssrf_bypass === 1,
+        has_cookies: row.cookies_blob != null,
+        created_at: row.created_at,
+        last_used_at: row.last_used_at,
+        cookies_updated_at: row.cookies_updated_at
     };
-    if (isIsr && !isDraftMode) {
-        const prerenderInfo = prerenderManifest.dynamicRoutes[normalizedSrcPage];
-        if (prerenderInfo) {
-            if (prerenderInfo.fallback === false && !isPrerendered) {
-                if (nextConfig.adapterPath) {
-                    return await render404();
-                }
-                throw new next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError();
-            }
+}
+function listAllowedSites() {
+    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
+    const rows = db.prepare("SELECT hostname, ssrf_bypass, cookies_blob, created_at, last_used_at, cookies_updated_at FROM allowed_sites ORDER BY hostname").all();
+    return rows.map(rowToStatus);
+}
+function addAllowedSite(input) {
+    const host = normaliseHost(input.hostname);
+    if (!host) return {
+        error: "hostname is not a valid DNS host or IPv4 address"
+    };
+    const bypass = input.ssrf_bypass === true ? 1 : 0;
+    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
+    const existing = db.prepare("SELECT * FROM allowed_sites WHERE hostname = ?").get(host);
+    if (existing) {
+        if (existing.ssrf_bypass !== bypass) {
+            db.prepare("UPDATE allowed_sites SET ssrf_bypass = ? WHERE hostname = ?").run(bypass, host);
+            existing.ssrf_bypass = bypass;
         }
+        return rowToStatus(existing);
     }
-    let cacheKey = null;
-    if (isIsr && !routeModule.isDev && !isDraftMode) {
-        cacheKey = resolvedPathname;
-        // ensure /index and / is normalized to one key
-        cacheKey = cacheKey === '/index' ? '/' : cacheKey;
-    }
-    // Before rendering (which initializes component tree modules), we have to
-    // set the reference manifests to our global store so Server Action's
-    // encryption util can access to them at the top level of the page module.
-    if (serverActionsManifest && clientReferenceManifest) {
-        (0,next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__.setManifestsSingleton)({
-            page: srcPage,
-            clientReferenceManifest,
-            serverActionsManifest
-        });
-    }
-    const method = req.method || 'GET';
-    const tracer = (0,next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.getTracer)();
-    const activeSpan = tracer.getActiveScopeSpan();
-    const isWrappedByNextServer = Boolean(routerServerContext == null ? void 0 : routerServerContext.isWrappedByNextServer);
-    const isMinimalMode = Boolean((0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'minimalMode'));
-    const incrementalCache = (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'incrementalCache') || await routeModule.getIncrementalCache(req, nextConfig, previewProps, prerenderManifest, isMinimalMode);
-    incrementalCache == null ? void 0 : incrementalCache.resetRequestCache();
-    globalThis.__incrementalCache = incrementalCache;
-    const context = {
-        params,
-        previewProps,
-        renderOpts: {
-            experimental: {
-                authInterrupts: Boolean(nextConfig.experimental.authInterrupts),
-                useCacheTimeout: nextConfig.experimental.useCacheTimeout,
-                durableUseCacheEntries: Boolean(nextConfig.experimental.durableUseCacheEntries)
-            },
-            cacheComponents: Boolean(nextConfig.cacheComponents),
-            validationLevel: nextConfig.experimental.instantInsights.validationLevel,
-            isDraftMode,
-            incrementalCache,
-            hmrRefreshHash: (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'hmrRefreshHash'),
-            cacheLifeProfiles: nextConfig.cacheLife,
-            staticPageGenerationTimeout: nextConfig.staticPageGenerationTimeout,
-            waitUntil: ctx.waitUntil,
-            onClose: (cb)=>{
-                res.on('close', cb);
-            },
-            onAfterTaskError: undefined
-        },
-        sharedContext: {
-            buildId,
-            deploymentId
-        }
+    const created_at = now();
+    db.prepare("INSERT INTO allowed_sites (hostname, ssrf_bypass, created_at) VALUES (?, ?, ?)").run(host, bypass, created_at);
+    return {
+        hostname: host,
+        ssrf_bypass: bypass === 1,
+        has_cookies: false,
+        created_at,
+        last_used_at: null,
+        cookies_updated_at: null
     };
-    const nodeNextReq = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextRequest(req);
-    const nodeNextRes = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextResponse(res);
-    const nextReq = next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.NextRequestAdapter.fromNodeNextRequest(nodeNextReq, (0,next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.signalFromNodeResponse)(res));
-    const responseGenerator = async ({ previousCacheEntry })=>{
-        try {
-            if (!isMinimalMode && isOnDemandRevalidate && revalidateOnlyGenerated && !previousCacheEntry) {
-                res.statusCode = 404;
-                // on-demand revalidate always sets this header
-                res.setHeader('x-nextjs-cache', 'REVALIDATED');
-                res.end('This page could not be found');
-                return null;
-            }
-            const response = cacheKey === null ? await routeModule.handle(nextReq, context) : await routeModule.prerender(nextReq, context);
-            req.fetchMetrics = context.renderOpts.fetchMetrics;
-            let pendingWaitUntil = context.renderOpts.pendingWaitUntil;
-            // Attempt using provided waitUntil if available
-            // if it's not we fallback to sendResponse's handling
-            if (pendingWaitUntil) {
-                if (ctx.waitUntil) {
-                    ctx.waitUntil(pendingWaitUntil);
-                    pendingWaitUntil = undefined;
-                }
-            }
-            const cacheTags = context.renderOpts.collectedTags;
-            // If the request is for a static response, we can cache it so long
-            // as it's not edge.
-            if (isIsr) {
-                const blob = await response.blob();
-                // Copy the headers from the response.
-                const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.toNodeOutgoingHttpHeaders)(response.headers);
-                if (cacheTags) {
-                    headers[next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER] = cacheTags;
-                }
-                if (!headers['content-type'] && blob.type) {
-                    headers['content-type'] = blob.type;
-                }
-                const revalidate = typeof context.renderOpts.collectedRevalidate === 'undefined' || context.renderOpts.collectedRevalidate >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? false : context.renderOpts.collectedRevalidate;
-                const expire = typeof context.renderOpts.collectedExpire === 'undefined' || context.renderOpts.collectedExpire >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? // route has a numeric `revalidate` but didn't declare an
-                // explicit `expire` (e.g. via `cacheLife`). This mirrors the
-                // build-time fallback in `build/index.ts` so cache entries
-                // and the response Cache-Control header agree on the route's
-                // effective expire. Routes that opt out of revalidation
-                // (`revalidate: false`) or that are dynamic (`revalidate: 0`)
-                // keep `expire: undefined`.
-                revalidate !== false && revalidate > 0 ? nextConfig.expireTime : undefined : context.renderOpts.collectedExpire;
-                // Create the cache entry for the response.
-                const cacheEntry = {
-                    value: {
-                        kind: next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE,
-                        status: response.status,
-                        body: Buffer.from(await blob.arrayBuffer()),
-                        headers
-                    },
-                    cacheControl: {
-                        revalidate,
-                        expire
-                    }
-                };
-                return cacheEntry;
-            } else {
-                // send response without caching if not ISR
-                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, response, pendingWaitUntil);
-                return null;
-            }
-        } catch (err) {
-            // if this is a background revalidate we need to report
-            // the request error here as it won't be bubbled
-            if (previousCacheEntry == null ? void 0 : previousCacheEntry.isStale) {
-                const silenceLog = false;
-                await routeModule.onRequestError(req, err, {
-                    routerKind: 'App Router',
-                    routePath: srcPage,
-                    routeType: 'route',
-                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
-                        isStaticGeneration: cacheKey !== null,
-                        isOnDemandRevalidate
-                    })
-                }, silenceLog, routerServerContext);
-            }
-            throw err;
-        }
-    };
-    const handleResponse = async (currentSpan, parentSpan)=>{
-        try {
-            var _cacheEntry_value;
-            const cacheEntry = await routeModule.handleResponse({
-                req,
-                nextConfig,
-                cacheKey,
-                routeKind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-                isFallback: false,
-                previewProps,
-                prerenderManifest,
-                isRoutePPREnabled: false,
-                isOnDemandRevalidate,
-                revalidateOnlyGenerated,
-                responseGenerator,
-                waitUntil: ctx.waitUntil,
-                isMinimalMode
-            });
-            if (cacheEntry !== null && 'error' in cacheEntry) {
-                throw cacheEntry.error;
-            }
-            // we don't create a cacheEntry for ISR
-            if (!isIsr) {
-                return;
-            }
-            if ((cacheEntry == null ? void 0 : (_cacheEntry_value = cacheEntry.value) == null ? void 0 : _cacheEntry_value.kind) !== next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE) {
-                var _cacheEntry_value1;
-                throw new Error(`Invariant: app-route received invalid cache entry ${cacheEntry == null ? void 0 : (_cacheEntry_value1 = cacheEntry.value) == null ? void 0 : _cacheEntry_value1.kind}`);
-            }
-            if (!isMinimalMode) {
-                res.setHeader('x-nextjs-cache', isOnDemandRevalidate ? 'REVALIDATED' : cacheEntry.isMiss ? 'MISS' : cacheEntry.isStale ? 'STALE' : 'HIT');
-            }
-            // Draft mode should never be cached
-            if (isDraftMode) {
-                res.setHeader('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
-            }
-            const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.fromNodeOutgoingHttpHeaders)(cacheEntry.value.headers);
-            if (!(isMinimalMode && isIsr)) {
-                headers.delete(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER);
-            }
-            // If cache control is already set on the response we don't
-            // override it to allow users to customize it via next.config
-            if (cacheEntry.cacheControl && !res.getHeader('Cache-Control') && !headers.get('Cache-Control')) {
-                headers.set('Cache-Control', (0,next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__.getCacheControlHeader)(cacheEntry.cacheControl));
-            }
-            await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, // @ts-expect-error - Argument of type 'Buffer<ArrayBufferLike>' is not assignable to parameter of type 'BodyInit | null | undefined'.
-            new Response(cacheEntry.value.body, {
-                headers,
-                status: cacheEntry.value.status || 200
-            }));
-            return;
-        } catch (err) {
-            if (!(err instanceof next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError)) {
-                const silenceLog = false;
-                await routeModule.onRequestError(req, err, {
-                    routerKind: 'App Router',
-                    routePath: normalizedSrcPage,
-                    routeType: 'route',
-                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
-                        isStaticGeneration: cacheKey !== null,
-                        isOnDemandRevalidate
-                    })
-                }, silenceLog, routerServerContext);
-            }
-            // rethrow so that we can handle serving error page
-            // If this is during static generation, throw the error again.
-            if (isIsr) throw err;
-            // Otherwise, send a 500 response unless the original response has
-            // already committed. In that case, preserve its status code for
-            // telemetry while still recording the failure and terminating a response
-            // that the failed pipeline left open.
-            if (res.headersSent) {
-                if (currentSpan) {
-                    const error = err instanceof Error ? err : new Error('Unknown app route error');
-                    currentSpan.recordException(error);
-                    currentSpan.setStatus({
-                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR,
-                        message: error.message
-                    });
-                    currentSpan.setAttribute('error.type', error.name);
-                }
-                if (!res.writableEnded && !res.destroyed) {
-                    res.end();
-                }
-            } else {
-                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, new Response(null, {
-                    status: 500
-                }));
-            }
-            return;
-        } finally{
-            ;
-            (()=>{
-                if (!currentSpan) {
-                    return;
-                }
-                let statusCode = res.statusCode;
-                currentSpan.setAttributes({
-                    'http.status_code': statusCode,
-                    'next.rsc': false
-                });
-                if (statusCode && statusCode >= 500) {
-                    // For 5xx status codes: SHOULD be set to 'Error' span status.
-                    // x-ref: https://opentelemetry.io/docs/specs/semconv/http/http-spans/#status
-                    currentSpan.setStatus({
-                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR
-                    });
-                    // For span status 'Error', SHOULD set 'error.type' attribute.
-                    currentSpan.setAttribute('error.type', statusCode.toString());
-                }
-                const rootSpanAttributes = tracer.getRootSpanAttributes();
-                // We were unable to get attributes, probably OTEL is not enabled
-                if (!rootSpanAttributes) {
-                    return;
-                }
-                if (rootSpanAttributes.get('next.span_type') !== next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest) {
-                    console.warn(`Unexpected root span type '${rootSpanAttributes.get('next.span_type')}'. Please report this Next.js issue https://github.com/vercel/next.js`);
-                    return;
-                }
-                const route = rootSpanAttributes.get('next.route') || normalizedSrcPage;
-                const name = `${method} ${route}`;
-                currentSpan.setAttributes({
-                    'next.route': route,
-                    'http.route': route,
-                    'next.span_name': name
-                });
-                currentSpan.updateName(name);
-                // Propagate http.route to the parent span if one exists (e.g.
-                // a platform-created HTTP span in adapter deployments).
-                if (parentSpan && parentSpan !== currentSpan) {
-                    parentSpan.setAttribute('http.route', route);
-                    parentSpan.updateName(name);
-                }
-            })();
-        }
-    };
-    // TODO: activeSpan code path is for when wrapped by
-    // next-server can be removed when this is no longer used
-    if (isWrappedByNextServer && activeSpan) {
-        await handleResponse(activeSpan, undefined);
-    } else {
-        let parentSpan = tracer.getActiveScopeSpan();
-        await tracer.withPropagatedContext(req.headers, ()=>tracer.trace(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest, {
-                spanName: `${method} ${srcPage}`,
-                kind: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanKind.SERVER,
-                attributes: {
-                    'http.method': method,
-                    'http.target': req.url
-                }
-            }, (span)=>handleResponse(span, parentSpan)), undefined, !isWrappedByNextServer);
-    }
-}
-
-//# sourceMappingURL=app-route.js.map
-
-
-/***/ }),
-
-/***/ 10846:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
-
-/***/ }),
-
-/***/ 16698:
-/***/ ((module) => {
-
-module.exports = require("node:async_hooks");
-
-/***/ }),
-
-/***/ 19121:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/action-async-storage.external.js");
-
-/***/ }),
-
-/***/ 27910:
-/***/ ((module) => {
-
-module.exports = require("stream");
-
-/***/ }),
-
-/***/ 28354:
-/***/ ((module) => {
-
-module.exports = require("util");
-
-/***/ }),
-
-/***/ 29021:
-/***/ ((module) => {
-
-module.exports = require("fs");
-
-/***/ }),
-
-/***/ 29294:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
-
-/***/ }),
-
-/***/ 30558:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Rk: () => (/* binding */ listAllowedSites),
-/* harmony export */   Rw: () => (/* binding */ putCookies),
-/* harmony export */   Tp: () => (/* binding */ setSsrfBypass),
-/* harmony export */   aQ: () => (/* binding */ getCookieHeaderForUrl),
-/* harmony export */   hL: () => (/* binding */ addAllowedSite),
-/* harmony export */   rh: () => (/* binding */ isHostAllowed),
-/* harmony export */   uc: () => (/* binding */ removeAllowedSite)
-/* harmony export */ });
-/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(46);
-/* harmony import */ var _lib_crypto_envelope__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(10938);
-// Allowed-sites store. A row represents a host the user has approved the
-// agent to use as them. The single approval grants both:
-//
-//   1. browser-RPC navigation — the extension may drive a tab on this
-//      host on the agent's behalf
-//   2. cookie passthrough — cookies the extension scrapes for this host
-//      (via chrome.cookies.onChanged) get attached to web_fetch requests
-//
-// The two capabilities live on the same row by design: removing a host
-// instantly disables both.
-//
-// Hostname matching is suffix-based: an allow-list entry for `example.com`
-// covers requests to `example.com` and `*.example.com`, but does NOT cover
-// `notexample.com`. The matched entry is what cookies are stored under
-// and what `last_used_at` updates against.
-//
-// Cookie blobs are envelope-encrypted (lib/crypto/envelope.ts) — same
-// scheme as proxy passwords. The UI never receives cookie values; only
-// `has_cookies: boolean` and `cookies_updated_at`.
-
-
-const HOSTNAME_RE = /^(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
-const IPV4_RE = /^(?:25[0-5]|2[0-4]\d|[01]?\d\d?)(?:\.(?:25[0-5]|2[0-4]\d|[01]?\d\d?)){3}$/;
-const now = ()=>new Date().toISOString();
-function normaliseHost(input) {
-    if (typeof input !== "string") return null;
-    const trimmed = input.trim().toLowerCase().replace(/\.+$/, "");
-    if (!trimmed) return null;
-    if (trimmed.length > 253) return null;
-    if (HOSTNAME_RE.test(trimmed)) return trimmed;
-    if (IPV4_RE.test(trimmed)) return trimmed;
-    return null;
-}
-function rowToStatus(row) {
-    return {
-        hostname: row.hostname,
-        ssrf_bypass: row.ssrf_bypass === 1,
-        has_cookies: row.cookies_blob != null,
-        created_at: row.created_at,
-        last_used_at: row.last_used_at,
-        cookies_updated_at: row.cookies_updated_at
-    };
-}
-function listAllowedSites() {
-    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
-    const rows = db.prepare("SELECT hostname, ssrf_bypass, cookies_blob, created_at, last_used_at, cookies_updated_at FROM allowed_sites ORDER BY hostname").all();
-    return rows.map(rowToStatus);
-}
-function addAllowedSite(input) {
-    const host = normaliseHost(input.hostname);
-    if (!host) return {
-        error: "hostname is not a valid DNS host or IPv4 address"
-    };
-    const bypass = input.ssrf_bypass === true ? 1 : 0;
-    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
-    const existing = db.prepare("SELECT * FROM allowed_sites WHERE hostname = ?").get(host);
-    if (existing) {
-        if (existing.ssrf_bypass !== bypass) {
-            db.prepare("UPDATE allowed_sites SET ssrf_bypass = ? WHERE hostname = ?").run(bypass, host);
-            existing.ssrf_bypass = bypass;
-        }
-        return rowToStatus(existing);
-    }
-    const created_at = now();
-    db.prepare("INSERT INTO allowed_sites (hostname, ssrf_bypass, created_at) VALUES (?, ?, ?)").run(host, bypass, created_at);
-    return {
-        hostname: host,
-        ssrf_bypass: bypass === 1,
-        has_cookies: false,
-        created_at,
-        last_used_at: null,
-        cookies_updated_at: null
-    };
-}
-function removeAllowedSite(hostname) {
-    const host = normaliseHost(hostname);
-    if (!host) return false;
-    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
-    const r = db.prepare("DELETE FROM allowed_sites WHERE hostname = ?").run(host);
-    return r.changes > 0;
-}
-function setSsrfBypass(hostname, bypass) {
-    const host = normaliseHost(hostname);
-    if (!host) return false;
-    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
-    const r = db.prepare("UPDATE allowed_sites SET ssrf_bypass = ? WHERE hostname = ?").run(bypass ? 1 : 0, host);
-    return r.changes > 0;
-}
-// Returns the first allow-list entry whose hostname is `host` or a parent
-// suffix of `host` (e.g. host=foo.bar.example.com matches an entry of
-// `bar.example.com` or `example.com`). Walking from the most specific
-// suffix outward means a more-specific allow-list entry wins if both
-// happen to be present. Returns null when no entry matches.
-function findMatchingEntry(host) {
-    const lower = host.toLowerCase();
-    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
-    // Build the suffix list: foo.bar.example.com, bar.example.com,
-    // example.com, com. We could prepare a single OR-clause query, but
-    // sqlite's planner handles a small IN list cleanly enough.
-    const suffixes = [];
-    let i = 0;
-    while(i < lower.length){
-        suffixes.push(lower.slice(i));
-        const dot = lower.indexOf(".", i);
-        if (dot < 0) break;
-        i = dot + 1;
-    }
-    if (suffixes.length === 0) return null;
-    const placeholders = suffixes.map(()=>"?").join(",");
-    const rows = db.prepare(`SELECT hostname, ssrf_bypass, cookies_blob, created_at, last_used_at, cookies_updated_at
-       FROM allowed_sites WHERE hostname IN (${placeholders})`).all(...suffixes);
-    if (rows.length === 0) return null;
-    // Prefer the most-specific match (longest hostname).
-    rows.sort((a, b)=>b.hostname.length - a.hostname.length);
-    return rows[0];
-}
-function isHostAllowed(host) {
-    const norm = normaliseHost(host);
-    if (!norm) return {
-        allowed: false,
-        matchedHostname: null,
-        ssrfBypass: false
+}
+function removeAllowedSite(hostname) {
+    const host = normaliseHost(hostname);
+    if (!host) return false;
+    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
+    const r = db.prepare("DELETE FROM allowed_sites WHERE hostname = ?").run(host);
+    return r.changes > 0;
+}
+function setSsrfBypass(hostname, bypass) {
+    const host = normaliseHost(hostname);
+    if (!host) return false;
+    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
+    const r = db.prepare("UPDATE allowed_sites SET ssrf_bypass = ? WHERE hostname = ?").run(bypass ? 1 : 0, host);
+    return r.changes > 0;
+}
+// Returns the first allow-list entry whose hostname is `host` or a parent
+// suffix of `host` (e.g. host=foo.bar.example.com matches an entry of
+// `bar.example.com` or `example.com`). Walking from the most specific
+// suffix outward means a more-specific allow-list entry wins if both
+// happen to be present. Returns null when no entry matches.
+function findMatchingEntry(host) {
+    const lower = host.toLowerCase();
+    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
+    // Build the suffix list: foo.bar.example.com, bar.example.com,
+    // example.com, com. We could prepare a single OR-clause query, but
+    // sqlite's planner handles a small IN list cleanly enough.
+    const suffixes = [];
+    let i = 0;
+    while(i < lower.length){
+        suffixes.push(lower.slice(i));
+        const dot = lower.indexOf(".", i);
+        if (dot < 0) break;
+        i = dot + 1;
+    }
+    if (suffixes.length === 0) return null;
+    const placeholders = suffixes.map(()=>"?").join(",");
+    const rows = db.prepare(`SELECT hostname, ssrf_bypass, cookies_blob, created_at, last_used_at, cookies_updated_at
+       FROM allowed_sites WHERE hostname IN (${placeholders})`).all(...suffixes);
+    if (rows.length === 0) return null;
+    // Prefer the most-specific match (longest hostname).
+    rows.sort((a, b)=>b.hostname.length - a.hostname.length);
+    return rows[0];
+}
+function isHostAllowed(host) {
+    const norm = normaliseHost(host);
+    if (!norm) return {
+        allowed: false,
+        matchedHostname: null,
+        ssrfBypass: false
     };
     const row = findMatchingEntry(norm);
     if (!row) return {
@@ -858,206 +414,657 @@ function noStoreJson(data) {
         headers: {
             "Cache-Control": "no-store"
         }
-    });
-}
-// Validate a JSON request body against a zod schema.
-// Returns either the parsed data or a 400 NextResponse explaining the issue.
-// Caller pattern:
-//   const parsed = await validateBody(req, Schema);
-//   if (parsed instanceof NextResponse) return parsed;
-//   // use parsed.field
-async function validateBody(req, schema) {
-    let raw;
-    try {
-        raw = await req.json();
-    } catch  {
-        return errorResponse("Request body must be valid JSON", 400);
-    }
-    const parsed = schema.safeParse(raw);
-    if (!parsed.success) {
-        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
+    });
+}
+// Validate a JSON request body against a zod schema.
+// Returns either the parsed data or a 400 NextResponse explaining the issue.
+// Caller pattern:
+//   const parsed = await validateBody(req, Schema);
+//   if (parsed instanceof NextResponse) return parsed;
+//   // use parsed.field
+async function validateBody(req, schema) {
+    let raw;
+    try {
+        raw = await req.json();
+    } catch  {
+        return errorResponse("Request body must be valid JSON", 400);
+    }
+    const parsed = schema.safeParse(raw);
+    if (!parsed.success) {
+        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
+    }
+    return parsed.data;
+}
+
+
+/***/ }),
+
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
+/***/ }),
+
+/***/ 51455:
+/***/ ((module) => {
+
+module.exports = require("node:fs/promises");
+
+/***/ }),
+
+/***/ 55511:
+/***/ ((module) => {
+
+module.exports = require("crypto");
+
+/***/ }),
+
+/***/ 55591:
+/***/ ((module) => {
+
+module.exports = require("https");
+
+/***/ }),
+
+/***/ 57075:
+/***/ ((module) => {
+
+module.exports = require("node:stream");
+
+/***/ }),
+
+/***/ 57975:
+/***/ ((module) => {
+
+module.exports = require("node:util");
+
+/***/ }),
+
+/***/ 58850:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   GET: () => (/* binding */ GET),
+/* harmony export */   POST: () => (/* binding */ POST)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
+/* harmony import */ var _lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(30558);
+/* harmony import */ var _lib_api_responses__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39947);
+
+
+
+
+// Allowed-sites list. Each row is a host the user has approved the agent
+// to use as them — granting both browser-RPC navigation and cookie
+// passthrough. Hit by:
+//   - the Settings UI (AllowedSitesSection)
+//   - the browser extension on startup + heartbeat (cached locally so the
+//     SW knows which onChanged events to relay)
+//   - the in-browser approval popup's "Allow always" button (POST)
+//
+// GET returns the list (no cookie values). POST adds a host. Per-host
+// cookie blob writes and removal live at /api/v1/allowed-sites/[hostname].
+const AddInputSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    hostname: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP().min(1).max(253),
+    ssrf_bypass: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY().optional()
+});
+function GET() {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        sites: (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .listAllowedSites */ .Rk)()
+    });
+}
+async function POST(req) {
+    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, AddInputSchema);
+    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
+    const result = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .addAllowedSite */ .hL)(parsed);
+    if ("error" in result) return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(result, {
+        status: 400
+    });
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        site: result
+    }, {
+        status: 201
+    });
+}
+
+
+/***/ }),
+
+/***/ 63033:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
+
+/***/ }),
+
+/***/ 73024:
+/***/ ((module) => {
+
+module.exports = require("node:fs");
+
+/***/ }),
+
+/***/ 75919:
+/***/ ((module) => {
+
+module.exports = require("node:worker_threads");
+
+/***/ }),
+
+/***/ 76760:
+/***/ ((module) => {
+
+module.exports = require("node:path");
+
+/***/ }),
+
+/***/ 77030:
+/***/ ((module) => {
+
+module.exports = require("node:net");
+
+/***/ }),
+
+/***/ 77598:
+/***/ ((module) => {
+
+module.exports = require("node:crypto");
+
+/***/ }),
+
+/***/ 79428:
+/***/ ((module) => {
+
+module.exports = require("buffer");
+
+/***/ }),
+
+/***/ 80099:
+/***/ ((module) => {
+
+module.exports = require("node:sqlite");
+
+/***/ }),
+
+/***/ 80481:
+/***/ ((module) => {
+
+module.exports = require("node:readline");
+
+/***/ }),
+
+/***/ 81630:
+/***/ ((module) => {
+
+module.exports = require("http");
+
+/***/ }),
+
+/***/ 86439:
+/***/ ((module) => {
+
+module.exports = require("next/dist/shared/lib/no-fallback-error.external");
+
+/***/ }),
+
+/***/ 93237:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   handler: () => (/* binding */ handler),
+/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
+/* harmony export */   routeModule: () => (/* binding */ routeModule),
+/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
+/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
+/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
+/* harmony export */ });
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
+/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
+/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+// We inject the nextConfigOutput here so that we can use them in the route
+// module.
+const nextConfigOutput = "standalone"
+const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
+    definition: {
+        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+        page: "/api/v1/allowed-sites/route",
+        pathname: "/api/v1/allowed-sites",
+        filename: "route",
+        bundlePath: "app/api/v1/allowed-sites/route"
+    },
+    distDir: ".next" || 0,
+    relativeProjectDir:  false || '',
+    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/allowed-sites/route.ts",
+    nextConfigOutput,
+    // The lazy require factory ensures that:
+    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
+    //   correctly attributing module load time to application-code rather than
+    //   framework internals.
+    // - In all modes: async modules (route files with top-level await) are
+    //   handled correctly — require() returns a Promise for such modules, which
+    //   ensureUserland() awaits before the first request is handled.
+    userland: ()=>__webpack_require__(58850),
+    // In Turbopack dev mode, also provide a synchronous per-request getter so
+    // server HMR updates are picked up without re-executing the entry chunk.
+    // Using require() (synchronous) avoids adding async overhead that would be
+    // incorrectly attributed to application-code time in devRequestTiming.
+    ... false ? 0 : {}
+});
+// Pull out the exports that we need to expose from the module. This should
+// be eliminated when we've moved the other routes to the new format. These
+// are used to hook into the route.
+const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
+function patchFetch() {
+    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
+        workAsyncStorage,
+        workUnitAsyncStorage
+    });
+}
+
+async function handler(req, res, ctx) {
+    if (ctx.requestMeta) {
+        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.setRequestMeta)(req, ctx.requestMeta);
+    }
+    if (routeModule.isDev) {
+        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.addRequestMeta)(req, 'devRequestTimingInternalsEnd', process.hrtime.bigint());
+    }
+    let srcPage = "/api/v1/allowed-sites/route";
+    // turbopack doesn't normalize `/index` in the page name
+    // so we need to to process dynamic routes properly
+    // TODO: fix turbopack providing differing value from webpack
+    if (false) {} else if (srcPage === '/index') {
+        // we always normalize /index specifically
+        srcPage = '/';
+    }
+    const multiZoneDraftMode = false;
+    const prepareResult = await routeModule.prepare(req, res, {
+        srcPage,
+        multiZoneDraftMode
+    });
+    if (!prepareResult) {
+        res.statusCode = 400;
+        res.end('Bad Request');
+        ctx.waitUntil == null ? void 0 : ctx.waitUntil.call(ctx, Promise.resolve());
+        return null;
+    }
+    const { buildId, deploymentId, params, nextConfig, parsedUrl, isDraftMode, prerenderManifest, routerServerContext, isOnDemandRevalidate, revalidateOnlyGenerated, resolvedPathname, clientReferenceManifest, serverActionsManifest, previewProps } = prepareResult;
+    const normalizedSrcPage = (0,next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__.normalizeAppPath)(srcPage);
+    // Only this route's prerenders can establish ISR or admit generated params.
+    const isPrerendered = Boolean(prerenderManifest.routes[resolvedPathname]) && (routeModule.isDev || (0,next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__.isRouteCacheOwner)(resolvedPathname, routeModule.cacheOwner, prerenderManifest.routes[resolvedPathname]));
+    let isIsr = Boolean(prerenderManifest.dynamicRoutes[normalizedSrcPage] || isPrerendered);
+    const render404 = async ()=>{
+        // TODO: should route-module itself handle rendering the 404
+        if (routerServerContext == null ? void 0 : routerServerContext.render404) {
+            await routerServerContext.render404(req, res, parsedUrl, false);
+        } else {
+            res.end('This page could not be found');
+        }
+        return null;
+    };
+    if (isIsr && !isDraftMode) {
+        const prerenderInfo = prerenderManifest.dynamicRoutes[normalizedSrcPage];
+        if (prerenderInfo) {
+            if (prerenderInfo.fallback === false && !isPrerendered) {
+                if (nextConfig.adapterPath) {
+                    return await render404();
+                }
+                throw new next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError();
+            }
+        }
+    }
+    let cacheKey = null;
+    if (isIsr && !routeModule.isDev && !isDraftMode) {
+        cacheKey = resolvedPathname;
+        // ensure /index and / is normalized to one key
+        cacheKey = cacheKey === '/index' ? '/' : cacheKey;
+    }
+    // Before rendering (which initializes component tree modules), we have to
+    // set the reference manifests to our global store so Server Action's
+    // encryption util can access to them at the top level of the page module.
+    if (serverActionsManifest && clientReferenceManifest) {
+        (0,next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__.setManifestsSingleton)({
+            page: srcPage,
+            clientReferenceManifest,
+            serverActionsManifest
+        });
+    }
+    const method = req.method || 'GET';
+    const tracer = (0,next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.getTracer)();
+    const activeSpan = tracer.getActiveScopeSpan();
+    const isWrappedByNextServer = Boolean(routerServerContext == null ? void 0 : routerServerContext.isWrappedByNextServer);
+    const isMinimalMode = Boolean((0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'minimalMode'));
+    const incrementalCache = (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'incrementalCache') || await routeModule.getIncrementalCache(req, nextConfig, previewProps, prerenderManifest, isMinimalMode);
+    incrementalCache == null ? void 0 : incrementalCache.resetRequestCache();
+    globalThis.__incrementalCache = incrementalCache;
+    const context = {
+        params,
+        previewProps,
+        renderOpts: {
+            experimental: {
+                authInterrupts: Boolean(nextConfig.experimental.authInterrupts),
+                useCacheTimeout: nextConfig.experimental.useCacheTimeout,
+                durableUseCacheEntries: Boolean(nextConfig.experimental.durableUseCacheEntries)
+            },
+            cacheComponents: Boolean(nextConfig.cacheComponents),
+            validationLevel: nextConfig.experimental.instantInsights.validationLevel,
+            isDraftMode,
+            incrementalCache,
+            hmrRefreshHash: (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'hmrRefreshHash'),
+            cacheLifeProfiles: nextConfig.cacheLife,
+            staticPageGenerationTimeout: nextConfig.staticPageGenerationTimeout,
+            waitUntil: ctx.waitUntil,
+            onClose: (cb)=>{
+                res.on('close', cb);
+            },
+            onAfterTaskError: undefined
+        },
+        sharedContext: {
+            buildId,
+            deploymentId
+        }
+    };
+    const nodeNextReq = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextRequest(req);
+    const nodeNextRes = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextResponse(res);
+    const nextReq = next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.NextRequestAdapter.fromNodeNextRequest(nodeNextReq, (0,next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.signalFromNodeResponse)(res));
+    const responseGenerator = async ({ previousCacheEntry })=>{
+        try {
+            if (!isMinimalMode && isOnDemandRevalidate && revalidateOnlyGenerated && !previousCacheEntry) {
+                res.statusCode = 404;
+                // on-demand revalidate always sets this header
+                res.setHeader('x-nextjs-cache', 'REVALIDATED');
+                res.end('This page could not be found');
+                return null;
+            }
+            const response = cacheKey === null ? await routeModule.handle(nextReq, context) : await routeModule.prerender(nextReq, context);
+            req.fetchMetrics = context.renderOpts.fetchMetrics;
+            let pendingWaitUntil = context.renderOpts.pendingWaitUntil;
+            // Attempt using provided waitUntil if available
+            // if it's not we fallback to sendResponse's handling
+            if (pendingWaitUntil) {
+                if (ctx.waitUntil) {
+                    ctx.waitUntil(pendingWaitUntil);
+                    pendingWaitUntil = undefined;
+                }
+            }
+            const cacheTags = context.renderOpts.collectedTags;
+            // If the request is for a static response, we can cache it so long
+            // as it's not edge.
+            if (isIsr) {
+                const blob = await response.blob();
+                // Copy the headers from the response.
+                const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.toNodeOutgoingHttpHeaders)(response.headers);
+                if (cacheTags) {
+                    headers[next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER] = cacheTags;
+                }
+                if (!headers['content-type'] && blob.type) {
+                    headers['content-type'] = blob.type;
+                }
+                const revalidate = typeof context.renderOpts.collectedRevalidate === 'undefined' || context.renderOpts.collectedRevalidate >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? false : context.renderOpts.collectedRevalidate;
+                const expire = typeof context.renderOpts.collectedExpire === 'undefined' || context.renderOpts.collectedExpire >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? // route has a numeric `revalidate` but didn't declare an
+                // explicit `expire` (e.g. via `cacheLife`). This mirrors the
+                // build-time fallback in `build/index.ts` so cache entries
+                // and the response Cache-Control header agree on the route's
+                // effective expire. Routes that opt out of revalidation
+                // (`revalidate: false`) or that are dynamic (`revalidate: 0`)
+                // keep `expire: undefined`.
+                revalidate !== false && revalidate > 0 ? nextConfig.expireTime : undefined : context.renderOpts.collectedExpire;
+                // Create the cache entry for the response.
+                const cacheEntry = {
+                    value: {
+                        kind: next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE,
+                        status: response.status,
+                        body: Buffer.from(await blob.arrayBuffer()),
+                        headers
+                    },
+                    cacheControl: {
+                        revalidate,
+                        expire
+                    }
+                };
+                return cacheEntry;
+            } else {
+                // send response without caching if not ISR
+                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, response, pendingWaitUntil);
+                return null;
+            }
+        } catch (err) {
+            // if this is a background revalidate we need to report
+            // the request error here as it won't be bubbled
+            if (previousCacheEntry == null ? void 0 : previousCacheEntry.isStale) {
+                const silenceLog = false;
+                await routeModule.onRequestError(req, err, {
+                    routerKind: 'App Router',
+                    routePath: srcPage,
+                    routeType: 'route',
+                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
+                        isStaticGeneration: cacheKey !== null,
+                        isOnDemandRevalidate
+                    })
+                }, silenceLog, routerServerContext);
+            }
+            throw err;
+        }
+    };
+    const handleResponse = async (currentSpan, parentSpan)=>{
+        try {
+            var _cacheEntry_value;
+            const cacheEntry = await routeModule.handleResponse({
+                req,
+                nextConfig,
+                cacheKey,
+                routeKind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+                isFallback: false,
+                previewProps,
+                prerenderManifest,
+                isRoutePPREnabled: false,
+                isOnDemandRevalidate,
+                revalidateOnlyGenerated,
+                responseGenerator,
+                waitUntil: ctx.waitUntil,
+                isMinimalMode
+            });
+            if (cacheEntry !== null && 'error' in cacheEntry) {
+                throw cacheEntry.error;
+            }
+            // we don't create a cacheEntry for ISR
+            if (!isIsr) {
+                return;
+            }
+            if ((cacheEntry == null ? void 0 : (_cacheEntry_value = cacheEntry.value) == null ? void 0 : _cacheEntry_value.kind) !== next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE) {
+                var _cacheEntry_value1;
+                throw new Error(`Invariant: app-route received invalid cache entry ${cacheEntry == null ? void 0 : (_cacheEntry_value1 = cacheEntry.value) == null ? void 0 : _cacheEntry_value1.kind}`);
+            }
+            if (!isMinimalMode) {
+                res.setHeader('x-nextjs-cache', isOnDemandRevalidate ? 'REVALIDATED' : cacheEntry.isMiss ? 'MISS' : cacheEntry.isStale ? 'STALE' : 'HIT');
+            }
+            // Draft mode should never be cached
+            if (isDraftMode) {
+                res.setHeader('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
+            }
+            const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.fromNodeOutgoingHttpHeaders)(cacheEntry.value.headers);
+            if (!(isMinimalMode && isIsr)) {
+                headers.delete(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER);
+            }
+            // If cache control is already set on the response we don't
+            // override it to allow users to customize it via next.config
+            if (cacheEntry.cacheControl && !res.getHeader('Cache-Control') && !headers.get('Cache-Control')) {
+                headers.set('Cache-Control', (0,next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__.getCacheControlHeader)(cacheEntry.cacheControl));
+            }
+            await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, // @ts-expect-error - Argument of type 'Buffer<ArrayBufferLike>' is not assignable to parameter of type 'BodyInit | null | undefined'.
+            new Response(cacheEntry.value.body, {
+                headers,
+                status: cacheEntry.value.status || 200
+            }));
+            return;
+        } catch (err) {
+            if (!(err instanceof next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError)) {
+                const silenceLog = false;
+                await routeModule.onRequestError(req, err, {
+                    routerKind: 'App Router',
+                    routePath: normalizedSrcPage,
+                    routeType: 'route',
+                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
+                        isStaticGeneration: cacheKey !== null,
+                        isOnDemandRevalidate
+                    })
+                }, silenceLog, routerServerContext);
+            }
+            // rethrow so that we can handle serving error page
+            // If this is during static generation, throw the error again.
+            if (isIsr) throw err;
+            // Otherwise, send a 500 response unless the original response has
+            // already committed. In that case, preserve its status code for
+            // telemetry while still recording the failure and terminating a response
+            // that the failed pipeline left open.
+            if (res.headersSent) {
+                if (currentSpan) {
+                    const error = err instanceof Error ? err : new Error('Unknown app route error');
+                    currentSpan.recordException(error);
+                    currentSpan.setStatus({
+                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR,
+                        message: error.message
+                    });
+                    currentSpan.setAttribute('error.type', error.name);
+                }
+                if (!res.writableEnded && !res.destroyed) {
+                    res.end();
+                }
+            } else {
+                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, new Response(null, {
+                    status: 500
+                }));
+            }
+            return;
+        } finally{
+            ;
+            (()=>{
+                if (!currentSpan) {
+                    return;
+                }
+                let statusCode = res.statusCode;
+                currentSpan.setAttributes({
+                    'http.status_code': statusCode,
+                    'next.rsc': false
+                });
+                if (statusCode && statusCode >= 500) {
+                    // For 5xx status codes: SHOULD be set to 'Error' span status.
+                    // x-ref: https://opentelemetry.io/docs/specs/semconv/http/http-spans/#status
+                    currentSpan.setStatus({
+                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR
+                    });
+                    // For span status 'Error', SHOULD set 'error.type' attribute.
+                    currentSpan.setAttribute('error.type', statusCode.toString());
+                }
+                const rootSpanAttributes = tracer.getRootSpanAttributes();
+                // We were unable to get attributes, probably OTEL is not enabled
+                if (!rootSpanAttributes) {
+                    return;
+                }
+                if (rootSpanAttributes.get('next.span_type') !== next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest) {
+                    console.warn(`Unexpected root span type '${rootSpanAttributes.get('next.span_type')}'. Please report this Next.js issue https://github.com/vercel/next.js`);
+                    return;
+                }
+                const route = rootSpanAttributes.get('next.route') || normalizedSrcPage;
+                const name = `${method} ${route}`;
+                currentSpan.setAttributes({
+                    'next.route': route,
+                    'http.route': route,
+                    'next.span_name': name
+                });
+                currentSpan.updateName(name);
+                // Propagate http.route to the parent span if one exists (e.g.
+                // a platform-created HTTP span in adapter deployments).
+                if (parentSpan && parentSpan !== currentSpan) {
+                    parentSpan.setAttribute('http.route', route);
+                    parentSpan.updateName(name);
+                }
+            })();
+        }
+    };
+    // TODO: activeSpan code path is for when wrapped by
+    // next-server can be removed when this is no longer used
+    if (isWrappedByNextServer && activeSpan) {
+        await handleResponse(activeSpan, undefined);
+    } else {
+        let parentSpan = tracer.getActiveScopeSpan();
+        await tracer.withPropagatedContext(req.headers, ()=>tracer.trace(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest, {
+                spanName: `${method} ${srcPage}`,
+                kind: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanKind.SERVER,
+                attributes: {
+                    'http.method': method,
+                    'http.target': req.url
+                }
+            }, (span)=>handleResponse(span, parentSpan)), undefined, !isWrappedByNextServer);
     }
-    return parsed.data;
-}
-
-
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 51455:
-/***/ ((module) => {
-
-module.exports = require("node:fs/promises");
-
-/***/ }),
-
-/***/ 55511:
-/***/ ((module) => {
-
-module.exports = require("crypto");
-
-/***/ }),
-
-/***/ 55591:
-/***/ ((module) => {
-
-module.exports = require("https");
-
-/***/ }),
-
-/***/ 57075:
-/***/ ((module) => {
-
-module.exports = require("node:stream");
-
-/***/ }),
-
-/***/ 57975:
-/***/ ((module) => {
-
-module.exports = require("node:util");
-
-/***/ }),
-
-/***/ 58850:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   GET: () => (/* binding */ GET),
-/* harmony export */   POST: () => (/* binding */ POST)
-/* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
-/* harmony import */ var _lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(30558);
-/* harmony import */ var _lib_api_responses__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39947);
-
-
-
-
-// Allowed-sites list. Each row is a host the user has approved the agent
-// to use as them — granting both browser-RPC navigation and cookie
-// passthrough. Hit by:
-//   - the Settings UI (AllowedSitesSection)
-//   - the browser extension on startup + heartbeat (cached locally so the
-//     SW knows which onChanged events to relay)
-//   - the in-browser approval popup's "Allow always" button (POST)
-//
-// GET returns the list (no cookie values). POST adds a host. Per-host
-// cookie blob writes and removal live at /api/v1/allowed-sites/[hostname].
-const AddInputSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    hostname: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP().min(1).max(253),
-    ssrf_bypass: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY().optional()
-});
-function GET() {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        sites: (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .listAllowedSites */ .Rk)()
-    });
-}
-async function POST(req) {
-    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, AddInputSchema);
-    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
-    const result = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .addAllowedSite */ .hL)(parsed);
-    if ("error" in result) return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(result, {
-        status: 400
-    });
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        site: result
-    }, {
-        status: 201
-    });
 }
 
+//# sourceMappingURL=app-route.js.map
 
-/***/ }),
-
-/***/ 63033:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
-
-/***/ }),
-
-/***/ 73024:
-/***/ ((module) => {
-
-module.exports = require("node:fs");
-
-/***/ }),
-
-/***/ 75919:
-/***/ ((module) => {
-
-module.exports = require("node:worker_threads");
-
-/***/ }),
-
-/***/ 76760:
-/***/ ((module) => {
-
-module.exports = require("node:path");
-
-/***/ }),
-
-/***/ 77598:
-/***/ ((module) => {
-
-module.exports = require("node:crypto");
-
-/***/ }),
-
-/***/ 79428:
-/***/ ((module) => {
-
-module.exports = require("buffer");
-
-/***/ }),
-
-/***/ 80099:
-/***/ ((module) => {
-
-module.exports = require("node:sqlite");
-
-/***/ }),
-
-/***/ 80481:
-/***/ ((module) => {
-
-module.exports = require("node:readline");
-
-/***/ }),
-
-/***/ 81630:
-/***/ ((module) => {
-
-module.exports = require("http");
-
-/***/ }),
-
-/***/ 86439:
-/***/ ((module) => {
-
-module.exports = require("next/dist/shared/lib/no-fallback-error.external");
 
 /***/ }),
 
@@ -1082,7 +1089,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(10471)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(93237)));
 module.exports = __webpack_exports__;
 
 })();