@jheavenknows/bluerouter 1.0.78 → 1.0.79

package/app/node_modules/next/dist/server/app-render/action-handler.js

@@ -144,7 +144,8 @@ function addRevalidationHeader(res, { workStore, requestStore }) {
     const origin = process.env.__NEXT_PRIVATE_ORIGIN || `${proto}://${host.value}`;
     const fetchUrl = new URL(`${origin}${basePath}${workerPathname}`);
     try {
-        var _response_headers_get;
+        var _response_headers_get, // Since we aren't consuming the response body, we cancel it to avoid memory leaks
+        _response_body;
         let body;
         if (// The type check here ensures that `req` is correctly typed, and the
         // environment variable check provides dead code elimination.
@@ -188,10 +189,15 @@ function addRevalidationHeader(res, { workStore, requestStore }) {
                 }
             }
             return new _flightrenderresult.FlightRenderResult(response.body);
-        } else {
-            var // Since we aren't consuming the response body, we cancel it to avoid memory leaks
-            _response_body;
-            (_response_body = response.body) == null ? void 0 : _response_body.cancel();
+        }
+        (_response_body = response.body) == null ? void 0 : _response_body.cancel();
+        // Pass the action-not-found marker through so the client throws
+        // UnrecognizedActionError instead of a generic "unexpected response".
+        if (response.headers.get(_approuterheaders.NEXT_ACTION_NOT_FOUND_HEADER) === '1') {
+            res.setHeader(_approuterheaders.NEXT_ACTION_NOT_FOUND_HEADER, '1');
+            res.setHeader('content-type', 'text/plain');
+            res.statusCode = 404;
+            return _renderresult.default.fromStatic('Server action not found.', 'text/plain');
         }
     } catch (err) {
         // we couldn't stream the forwarded response, so we'll just return an empty response
@@ -445,10 +451,14 @@ async function handleAction({ req, res, ComponentMod, generateFlight, workStore,
     res.setHeader('Cache-Control', 'no-cache, no-store, max-age=0, must-revalidate');
     const { actionAsyncStorage } = ComponentMod;
     const actionWasForwarded = Boolean(req.headers['x-action-forwarded']);
-    if (actionId) {
+    // Only attempt to forward if this request has not already been forwarded.
+    // Otherwise middleware that rewrites the action POST can cause the receiving
+    // worker to forward again, looping indefinitely.
+    if (actionId && !actionWasForwarded) {
         const forwardedWorker = (0, _manifestssingleton.selectWorkerForForwarding)(actionId, page);
-        // If forwardedWorker is truthy, it means there isn't a worker for the action
-        // in the current handler, so we forward the request to a worker that has the action.
+        // If forwardedWorker is truthy, it means there isn't a worker for the
+        // action in the current handler, so we forward the request to a worker that
+        // has the action.
         if (forwardedWorker) {
             return {
                 type: 'done',

package/app/node_modules/next/dist/server/config-schema.js

@@ -363,6 +363,7 @@ const experimentalSchema = {
     turbopackImportTypeText: _zod.z.boolean().optional(),
     turbopackUseBuiltinBabel: _zod.z.boolean().optional(),
     turbopackUseBuiltinSass: _zod.z.boolean().optional(),
+    turbopackLocalPostcssConfig: _zod.z.boolean().optional(),
     turbopackModuleIds: _zod.z.enum([
         'named',
         'deterministic'

package/app/node_modules/next/dist/server/config.js

@@ -1106,7 +1106,7 @@ async function applyModifyConfig(config, phase, silent) {
             }
             config = await adapterMod.modifyConfig(config, {
                 phase,
-                nextVersion: "16.2.6"
+                nextVersion: "16.2.7"
             });
         }
     }

package/app/node_modules/next/dist/server/dev/hot-reloader-turbopack.js

@@ -240,7 +240,7 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
     }
     const hasRewrites = opts.fsChecker.rewrites.afterFiles.length > 0 || opts.fsChecker.rewrites.beforeFiles.length > 0 || opts.fsChecker.rewrites.fallback.length > 0;
     const hotReloaderSpan = (0, _trace.trace)('hot-reloader', undefined, {
-        version: "16.2.6"
+        version: "16.2.7"
     });
     // Ensure the hotReloaderSpan is flushed immediately as it's the parentSpan for all processing
     // of the current `next dev` invocation.
@@ -294,7 +294,7 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
         writeRoutesHashesManifest: false,
         currentNodeJsVersion,
         isPersistentCachingEnabled: (0, _utils2.isFileSystemCacheEnabledForDev)(opts.nextConfig),
-        nextVersion: "16.2.6",
+        nextVersion: "16.2.7",
         serverHmr: serverFastRefresh
     }, {
         memoryLimit: (_opts_nextConfig_experimental = opts.nextConfig.experimental) == null ? void 0 : _opts_nextConfig_experimental.turbopackMemoryLimit,

package/app/node_modules/next/dist/server/dev/hot-reloader-webpack.js

@@ -234,7 +234,7 @@ class HotReloaderWebpack {
         this.previewProps = previewProps;
         this.rewrites = rewrites;
         this.hotReloaderSpan = (0, _trace.trace)('hot-reloader', undefined, {
-            version: "16.2.6"
+            version: "16.2.7"
         });
         // Ensure the hotReloaderSpan is flushed immediately as it's the parentSpan for all processing
         // of the current `next dev` invocation.

package/app/node_modules/next/dist/server/lib/app-info-log.js

@@ -85,7 +85,7 @@ function logStartInfo({ networkUrl, appUrl, envInfo, logBundler }) {
     if (parts.length > 0) {
         versionSuffix = ` (${parts.join(', ')})`;
     }
-    _log.bootstrap(`${(0, _picocolors.bold)((0, _picocolors.purple)(`${_log.prefixes.ready} Next.js ${"16.2.6"}`))}${versionSuffix}`);
+    _log.bootstrap(`${(0, _picocolors.bold)((0, _picocolors.purple)(`${_log.prefixes.ready} Next.js ${"16.2.7"}`))}${versionSuffix}`);
     if (appUrl) {
         _log.bootstrap(`- Local:         ${appUrl}`);
     }

package/app/node_modules/next/dist/server/lib/encode-cache-tag.js

@@ -0,0 +1,45 @@
+/**
+ * Percent-encode every character outside printable ASCII so a tag value can be
+ * safely serialized as part of the `x-next-cache-tags` HTTP header.
+ *
+ * Node's `validateHeaderValue` rejects any code unit outside `\t\x20-\x7e`, so
+ * a matched route path or user-supplied tag containing a non-ASCII character
+ * (Hebrew, Arabic, Chinese, emoji, …) would otherwise throw `ERR_INVALID_CHAR`
+ * and crash ISR on every affected request.
+ *
+ * This is applied at the public boundaries — tag construction
+ * (`getImplicitTags`, `validateTags`) and invalidation input (`revalidatePath`,
+ * `revalidateTag`, `updateTag`) — so storage, comparison, and the wire all see
+ * the same canonical ASCII-safe form.
+ *
+ * The character class `[\t\x20-\x7e]` mirrors Node's `validHdrChars` table —
+ * `\t` plus printable ASCII through `~`. Anything outside that is rejected
+ * by `validateHeaderValue`, so we encode runs of those characters and leave
+ * everything else (`,`, `/`, `%`, `[`, `]`, `_`, `-`, `\t`, …) byte-for-byte
+ * unchanged. This preserves the comma-separated header format and the
+ * dynamic-segment markers in derived tags (`_N_T_/[slug]/page`).
+ *
+ * Properties:
+ * - Fast-path: input that already fits the validation class is returned
+ *   unchanged. This makes the encoder idempotent on already-encoded `%xx`
+ *   sequences.
+ * - Matches *runs* of out-of-class code units so surrogate pairs (e.g. an
+ *   emoji) are handed to `encodeURIComponent` as a complete code point — a
+ *   per-code-unit regex would split the pair and throw `URIError`.
+ */ "use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "encodeCacheTag", {
+    enumerable: true,
+    get: function() {
+        return encodeCacheTag;
+    }
+});
+const OUT_OF_CLASS_CHAR = /[^\t\x20-\x7e]/;
+const OUT_OF_CLASS_RUN = /[^\t\x20-\x7e]+/g;
+function encodeCacheTag(tag) {
+    return OUT_OF_CLASS_CHAR.test(tag) ? tag.replace(OUT_OF_CLASS_RUN, (run)=>encodeURIComponent(run)) : tag;
+}
+
+//# sourceMappingURL=encode-cache-tag.js.map

package/app/node_modules/next/dist/server/lib/implicit-tags.js

@@ -10,6 +10,7 @@ Object.defineProperty(exports, "getImplicitTags", {
 });
 const _constants = require("../../lib/constants");
 const _handlers = require("../use-cache/handlers");
+const _encodecachetag = require("./encode-cache-tag");
 const _lazyresult = require("./lazy-result");
 const getDerivedTags = (pathname)=>{
     const derivedTags = [
@@ -49,16 +50,18 @@ const getDerivedTags = (pathname)=>{
 }
 async function getImplicitTags(page, pathname, fallbackRouteParams) {
     const tags = new Set();
-    // Add the derived tags from the page.
+    // Add the derived tags from the page. Encode each tag so a non-ASCII
+    // pathname doesn't trip header validation when written to
+    // `x-next-cache-tags`. Idempotent on already-ASCII input.
     const derivedTags = getDerivedTags(page);
     for (let tag of derivedTags){
-        tag = `${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${tag}`;
+        tag = (0, _encodecachetag.encodeCacheTag)(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${tag}`);
         tags.add(tag);
     }
     // Add the tags from the pathname. If the route has unknown params, we don't
     // want to add the pathname as a tag, as it will be invalid.
     if (pathname && (!fallbackRouteParams || fallbackRouteParams.size === 0)) {
-        const tag = `${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${pathname}`;
+        const tag = (0, _encodecachetag.encodeCacheTag)(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}${pathname}`);
         tags.add(tag);
     }
     if (tags.has(`${_constants.NEXT_CACHE_IMPLICIT_TAG_ID}/`)) {

package/app/node_modules/next/dist/server/lib/patch-fetch.js

@@ -42,6 +42,7 @@ const _workunitasyncstorageexternal = require("../app-render/work-unit-async-sto
 const _responsecache = require("../response-cache");
 const _cloneresponse = require("./clone-response");
 const _stagedrendering = require("../app-render/staged-rendering");
+const _encodecachetag = require("./encode-cache-tag");
 const isEdgeRuntime = process.env.NEXT_RUNTIME === 'edge';
 const NEXT_PATCH_SYMBOL = Symbol.for('next-patch');
 function isFetchPatched() {
@@ -86,7 +87,10 @@ function validateTags(tags, description) {
                 reason: `exceeded max length of ${_constants1.NEXT_CACHE_TAG_MAX_LENGTH}`
             });
         } else {
-            validTags.push(tag);
+            // Encode so a non-ASCII tag can be safely serialized into the
+            // `x-next-cache-tags` HTTP header without tripping Node's header
+            // validation. Length is checked on the raw input above.
+            validTags.push((0, _encodecachetag.encodeCacheTag)(tag));
         }
         if (validTags.length > _constants1.NEXT_CACHE_TAG_MAX_ITEMS) {
             console.warn(`Warning: exceeded max tag count for ${description}, dropped tags:`, tags.slice(i).join(', '));

package/app/node_modules/next/dist/server/lib/start-server.js

@@ -178,7 +178,7 @@ async function getRequestHandlers({ dir, port, isDev, onDevServerCleanup, server
 async function startServer(serverOptions) {
     const { dir, isDev, hostname, minimalMode, allowRetry, keepAliveTimeout, selfSignedCertificate, serverFastRefresh } = serverOptions;
     let { port } = serverOptions;
-    process.title = `next-server (v${"16.2.6"})`;
+    process.title = `next-server (v${"16.2.7"})`;
     let handlersReady = ()=>{};
     let handlersError = ()=>{};
     let handlersPromise = new Promise((resolve, reject)=>{

package/app/node_modules/next/dist/shared/lib/errors/canary-only-config-error.js

@@ -21,7 +21,7 @@ _export(exports, {
     }
 });
 function isStableBuild() {
-    return !"16.2.6"?.includes('canary') && !process.env.__NEXT_TEST_MODE && !process.env.NEXT_PRIVATE_LOCAL_DEV;
+    return !"16.2.7"?.includes('canary') && !process.env.__NEXT_TEST_MODE && !process.env.NEXT_PRIVATE_LOCAL_DEV;
 }
 class CanaryOnlyConfigError extends Error {
     constructor(arg){

package/app/node_modules/next/dist/shared/lib/router/router.js

@@ -150,7 +150,14 @@ function getMiddlewareData(source, response, options) {
                 let as = (0, _addlocale.addLocale)(pathnameInfo.pathname, pathnameInfo.locale);
                 if ((0, _isdynamic.isDynamicRoute)(as) || !rewriteHeader && pages.includes((0, _normalizelocalepath.normalizeLocalePath)((0, _removebasepath.removeBasePath)(as), options.router.locales).pathname)) {
                     const parsedSource = (0, _getnextpathnameinfo.getNextPathnameInfo)((0, _parserelativeurl.parseRelativeUrl)(source).pathname, {
-                        nextConfig: process.env.__NEXT_HAS_REWRITES ? undefined : nextConfig,
+                        // Pass basePath (and trailingSlash) so the basePath prefix is
+                        // stripped before the `_next/data/` check, but omit `i18n` so the
+                        // locale prefix is preserved here — the rewrite resolver below
+                        // handles the locale-prefixed `as`.
+                        nextConfig: {
+                            basePath: nextConfig.basePath,
+                            trailingSlash: nextConfig.trailingSlash
+                        },
                         parseData: true
                     });
                     as = (0, _addbasepath.addBasePath)(parsedSource.pathname);

package/app/node_modules/next/dist/telemetry/anonymous-meta.js

@@ -81,7 +81,7 @@ function getAnonymousMeta() {
         isWsl: _iswsl.default,
         isCI: _ciinfo.isCI,
         ciName: _ciinfo.isCI && _ciinfo.name || null,
-        nextVersion: "16.2.6"
+        nextVersion: "16.2.7"
     };
     return traits;
 }

package/app/node_modules/next/dist/telemetry/events/swc-load-failure.js

@@ -38,7 +38,7 @@ async function eventSwcLoadFailure(event) {
     telemetry.record({
         eventName: EVENT_PLUGIN_PRESENT,
         payload: {
-            nextVersion: "16.2.6",
+            nextVersion: "16.2.7",
             glibcVersion,
             installedSwcPackages,
             arch: process.arch,

package/app/node_modules/next/dist/telemetry/events/version.js

@@ -12,12 +12,12 @@ const EVENT_VERSION = 'NEXT_CLI_SESSION_STARTED';
 function eventCliSession(nextConfig, event) {
     var _nextConfig_experimental_staleTimes, _nextConfig_experimental_staleTimes1, _nextConfig_reactCompiler, _nextConfig_reactCompiler1;
     // This should be an invariant, if it fails our build tooling is broken.
-    if (typeof "16.2.6" !== 'string') {
+    if (typeof "16.2.7" !== 'string') {
         return [];
     }
     const { images, i18n } = nextConfig || {};
     const payload = {
-        nextVersion: "16.2.6",
+        nextVersion: "16.2.7",
         nodeVersion: process.version,
         cliCommand: event.cliCommand,
         isSrcDir: event.isSrcDir,

package/app/node_modules/next/package.json

@@ -1,6 +1,6 @@
 {
   "name": "next",
-  "version": "16.2.6",
+  "version": "16.2.7",
   "description": "The React Framework",
   "main": "./dist/server/next.js",
   "license": "MIT",
@@ -97,7 +97,7 @@
     ]
   },
   "dependencies": {
-    "@next/env": "16.2.6",
+    "@next/env": "16.2.7",
     "@swc/helpers": "0.5.15",
     "baseline-browser-mapping": "^2.9.19",
     "caniuse-lite": "^1.0.30001579",
@@ -128,14 +128,14 @@
   },
   "optionalDependencies": {
     "sharp": "^0.34.5",
-    "@next/swc-darwin-arm64": "16.2.6",
-    "@next/swc-darwin-x64": "16.2.6",
-    "@next/swc-linux-arm64-gnu": "16.2.6",
-    "@next/swc-linux-arm64-musl": "16.2.6",
-    "@next/swc-linux-x64-gnu": "16.2.6",
-    "@next/swc-linux-x64-musl": "16.2.6",
-    "@next/swc-win32-arm64-msvc": "16.2.6",
-    "@next/swc-win32-x64-msvc": "16.2.6"
+    "@next/swc-darwin-arm64": "16.2.7",
+    "@next/swc-darwin-x64": "16.2.7",
+    "@next/swc-linux-arm64-gnu": "16.2.7",
+    "@next/swc-linux-arm64-musl": "16.2.7",
+    "@next/swc-linux-x64-gnu": "16.2.7",
+    "@next/swc-linux-x64-musl": "16.2.7",
+    "@next/swc-win32-arm64-msvc": "16.2.7",
+    "@next/swc-win32-x64-msvc": "16.2.7"
   },
   "devDependencies": {
     "@babel/core": "7.26.10",
@@ -169,11 +169,11 @@
     "@modelcontextprotocol/sdk": "1.18.1",
     "@mswjs/interceptors": "0.23.0",
     "@napi-rs/triples": "1.2.0",
-    "@next/font": "16.2.6",
-    "@next/polyfill-module": "16.2.6",
-    "@next/polyfill-nomodule": "16.2.6",
-    "@next/react-refresh-utils": "16.2.6",
-    "@next/swc": "16.2.6",
+    "@next/font": "16.2.7",
+    "@next/polyfill-module": "16.2.7",
+    "@next/polyfill-nomodule": "16.2.7",
+    "@next/react-refresh-utils": "16.2.7",
+    "@next/swc": "16.2.7",
     "@opentelemetry/api": "1.6.0",
     "@playwright/test": "1.58.2",
     "@rspack/core": "1.6.7",

package/app/node_modules/react/cjs/react.development.js

@@ -1276,7 +1276,7 @@
     exports.useTransition = function () {
       return resolveDispatcher().useTransition();
     };
-    exports.version = "19.2.6";
+    exports.version = "19.2.7";
     "undefined" !== typeof __REACT_DEVTOOLS_GLOBAL_HOOK__ &&
       "function" ===
         typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.registerInternalModuleStop &&

package/app/node_modules/react/cjs/react.production.js

@@ -539,4 +539,4 @@ exports.useSyncExternalStore = function (
 exports.useTransition = function () {
   return ReactSharedInternals.H.useTransition();
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react/package.json

@@ -4,7 +4,7 @@
   "keywords": [
     "react"
   ],
-  "version": "19.2.6",
+  "version": "19.2.7",
   "homepage": "https://react.dev/",
   "bugs": "https://github.com/facebook/react/issues",
   "license": "MIT",

package/app/node_modules/react-dom/cjs/react-dom-server-legacy.browser.production.js

@@ -6600,4 +6600,4 @@ exports.renderToString = function (children, options) {
     'The server used "renderToString" which does not support Suspense. If you intended for this Suspense boundary to render the fallback content on the server consider throwing an Error somewhere within the Suspense boundary. If you intended to have the server wait for the suspended component please switch to "renderToReadableStream" which supports Suspense on the server'
   );
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react-dom/cjs/react-dom-server-legacy.node.production.js

@@ -6689,4 +6689,4 @@ exports.renderToString = function (children, options) {
     'The server used "renderToString" which does not support Suspense. If you intended for this Suspense boundary to render the fallback content on the server consider throwing an Error somewhere within the Suspense boundary. If you intended to have the server wait for the suspended component please switch to "renderToPipeableStream" which supports Suspense on the server'
   );
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react-dom/cjs/react-dom-server.browser.production.js

@@ -7147,12 +7147,12 @@ function getPostponedState(request) {
 }
 function ensureCorrectIsomorphicReactVersion() {
   var isomorphicReactPackageVersion = React.version;
-  if ("19.2.6" !== isomorphicReactPackageVersion)
+  if ("19.2.7" !== isomorphicReactPackageVersion)
     throw Error(
       formatProdErrorMessage(
         527,
         isomorphicReactPackageVersion,
-        "19.2.6"
+        "19.2.7"
       )
     );
 }
@@ -7407,4 +7407,4 @@ exports.resumeAndPrerender = function (children, postponedState, options) {
     startWork(request);
   });
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react-dom/cjs/react-dom-server.edge.production.js

@@ -7251,11 +7251,11 @@ function getPostponedState(request) {
 }
 function ensureCorrectIsomorphicReactVersion() {
   var isomorphicReactPackageVersion = React.version;
-  if ("19.2.6" !== isomorphicReactPackageVersion)
+  if ("19.2.7" !== isomorphicReactPackageVersion)
     throw Error(
       'Incompatible React versions: The "react" and "react-dom" packages must have the exact same version. Instead got:\n  - react:      ' +
         (isomorphicReactPackageVersion +
-          "\n  - react-dom:  19.2.6\nLearn more: https://react.dev/warnings/version-mismatch")
+          "\n  - react-dom:  19.2.7\nLearn more: https://react.dev/warnings/version-mismatch")
     );
 }
 ensureCorrectIsomorphicReactVersion();
@@ -7509,4 +7509,4 @@ exports.resumeAndPrerender = function (children, postponedState, options) {
     startWork(request);
   });
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react-dom/cjs/react-dom-server.node.production.js

@@ -7142,11 +7142,11 @@ function getPostponedState(request) {
 }
 function ensureCorrectIsomorphicReactVersion() {
   var isomorphicReactPackageVersion = React.version;
-  if ("19.2.6" !== isomorphicReactPackageVersion)
+  if ("19.2.7" !== isomorphicReactPackageVersion)
     throw Error(
       'Incompatible React versions: The "react" and "react-dom" packages must have the exact same version. Instead got:\n  - react:      ' +
         (isomorphicReactPackageVersion +
-          "\n  - react-dom:  19.2.6\nLearn more: https://react.dev/warnings/version-mismatch")
+          "\n  - react-dom:  19.2.7\nLearn more: https://react.dev/warnings/version-mismatch")
     );
 }
 ensureCorrectIsomorphicReactVersion();
@@ -7704,4 +7704,4 @@ exports.resumeToPipeableStream = function (children, postponedState, options) {
     }
   };
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react-dom/cjs/react-dom.production.js

@@ -207,4 +207,4 @@ exports.useFormState = function (action, initialState, permalink) {
 exports.useFormStatus = function () {
   return ReactSharedInternals.H.useHostTransitionStatus();
 };
-exports.version = "19.2.6";
+exports.version = "19.2.7";

package/app/node_modules/react-dom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-dom",
-  "version": "19.2.6",
+  "version": "19.2.7",
   "description": "React package for working with the DOM.",
   "main": "index.js",
   "repository": {
@@ -20,7 +20,7 @@
     "scheduler": "^0.27.0"
   },
   "peerDependencies": {
-    "react": "^19.2.6"
+    "react": "^19.2.7"
   },
   "files": [
     "LICENSE",

package/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bluerouter-app",
-  "version": "1.0.78",
+  "version": "1.0.79",
   "description": "Router web dashboard",
   "private": false,
   "scripts": {

package/package.json

@@ -1,6 +1,6 @@
 {
  "name": "@jheavenknows/bluerouter",
- "version": "1.0.78",
+ "version": "1.0.79",
  "description": "Bluerouter CLI - Start and manage Bluerouter server",
  "bin": {
   "bluerouter": "./cli.js"