failproofai 1.0.2-beta.3 → 1.0.2-beta.5

package/.next/standalone/.next/static/chunks/{2ey_ih6j6cm15.js → 3jqm8ubpv3i-4.js}

@@ -1 +1 @@
-(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,16983,e=>{"use strict";var t=e.i(95187);let a=(0,t.createServerReference)("601128be367952aebe7ec7aa21aad14ae5d688a5d9",t.callServer,void 0,t.findSourceMapURL,"searchHookActivityAction");e.s(["searchHookActivityAction",0,a])},73520,e=>{"use strict";var t=e.i(43476),a=e.i(24071),r=e.i(67927);e.s(["default",0,function({currentPage:e,totalPages:s,onPageChange:i}){if(s<=1)return null;let l=e=>`px-3 py-2 text-sm rounded-md transition-colors flex items-center gap-1 bg-muted text-muted-foreground ${e?"opacity-50 cursor-not-allowed":"hover:bg-muted/80"}`;return(0,t.jsxs)("div",{className:"flex items-center justify-center gap-2 py-4",children:[(0,t.jsxs)("button",{onClick:()=>i(e-1),disabled:1===e,className:l(1===e),"aria-label":"Previous page",children:[(0,t.jsx)(a.ChevronLeft,{className:"w-4 h-4"}),(0,t.jsx)("span",{className:"hidden sm:inline",children:"Previous"})]}),(0,t.jsx)("div",{className:"flex items-center gap-1",children:(()=>{if(s<=7)return Array.from({length:s},(e,t)=>t+1);let t=[1],a=Math.max(2,e-1),r=Math.min(s-1,e+1);e<=3&&(r=Math.min(5,s-1)),e>=s-2&&(a=Math.max(2,s-4)),a>2&&t.push("ellipsis-start");for(let e=a;e<=r;e++)t.push(e);return r<s-1&&t.push("ellipsis-end"),t.push(s),t})().map(a=>"string"==typeof a?(0,t.jsx)("span",{className:"px-2 text-muted-foreground",children:"..."},a):(0,t.jsx)("button",{onClick:()=>i(a),className:`min-w-[2.5rem] px-3 py-2 text-sm rounded-md transition-colors ${e===a?"bg-primary text-primary-foreground":"bg-muted text-muted-foreground hover:bg-muted/80"}`,"aria-label":`Page ${a}`,"aria-current":e===a?"page":void 0,children:a},a))}),(0,t.jsxs)("button",{onClick:()=>i(e+1),disabled:e===s,className:l(e===s),"aria-label":"Next page",children:[(0,t.jsx)("span",{className:"hidden sm:inline",children:"Next"}),(0,t.jsx)(r.ChevronRight,{className:"w-4 h-4"})]})]})}])},34713,e=>{"use strict";e.s(["formatDuration",0,function(e){if(e<1e3)return`${e}ms`;let t=Math.round(e/100);if(t<600)return`${(t/10).toFixed(1)}s`;let a=Math.round(e/1e3);if(a<3600){let e=Math.floor(a/60);return`${e}m ${a%60}s`}let r=Math.round(e/6e4),s=Math.floor(r/60);return`${s}h ${r%60}m`},"formatRelativeTime",0,function(e){let t=Date.now()-e;return t<6e4?`${Math.max(1,Math.floor(t/1e3))}s ago`:t<36e5?`${Math.floor(t/6e4)}m ago`:t<864e5?`${Math.floor(t/36e5)}h ago`:`${Math.floor(t/864e5)}d ago`}])},24071,e=>{"use strict";let t=(0,e.i(56420).default)("chevron-left",[["path",{d:"m15 18-6-6 6-6",key:"1wnfg3"}]]);e.s(["ChevronLeft",0,t],24071)},67927,e=>{"use strict";let t=(0,e.i(56420).default)("chevron-right",[["path",{d:"m9 18 6-6-6-6",key:"mthhwq"}]]);e.s(["ChevronRight",0,t],67927)},16306,e=>{"use strict";let t=(0,e.i(56420).default)("shield-alert",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}],["path",{d:"M12 8v4",key:"1got3b"}],["path",{d:"M12 16h.01",key:"1drbdi"}]]);e.s(["ShieldAlert",0,t],16306)},84026,29407,e=>{"use strict";var t=e.i(56420);let a=(0,t.default)("shield-check",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]]);e.s(["ShieldCheck",0,a],84026);let r=(0,t.default)("shield-x",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}],["path",{d:"m14.5 9.5-5 5",key:"17q4r4"}],["path",{d:"m9.5 9.5 5 5",key:"18nt4w"}]]);e.s(["ShieldX",0,r],29407)},82954,e=>{"use strict";let t=(0,e.i(56420).default)("shield",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}]]);e.s(["Shield",0,t],82954)}]);
+(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,89523,e=>{"use strict";var t=e.i(95187);let a=(0,t.createServerReference)("60edf232c907aa5a89901b45da38cd4fccb6ea5326",t.callServer,void 0,t.findSourceMapURL,"searchHookActivityAction");e.s(["searchHookActivityAction",0,a])},73520,e=>{"use strict";var t=e.i(43476),a=e.i(24071),r=e.i(67927);e.s(["default",0,function({currentPage:e,totalPages:s,onPageChange:i}){if(s<=1)return null;let l=e=>`px-3 py-2 text-sm rounded-md transition-colors flex items-center gap-1 bg-muted text-muted-foreground ${e?"opacity-50 cursor-not-allowed":"hover:bg-muted/80"}`;return(0,t.jsxs)("div",{className:"flex items-center justify-center gap-2 py-4",children:[(0,t.jsxs)("button",{onClick:()=>i(e-1),disabled:1===e,className:l(1===e),"aria-label":"Previous page",children:[(0,t.jsx)(a.ChevronLeft,{className:"w-4 h-4"}),(0,t.jsx)("span",{className:"hidden sm:inline",children:"Previous"})]}),(0,t.jsx)("div",{className:"flex items-center gap-1",children:(()=>{if(s<=7)return Array.from({length:s},(e,t)=>t+1);let t=[1],a=Math.max(2,e-1),r=Math.min(s-1,e+1);e<=3&&(r=Math.min(5,s-1)),e>=s-2&&(a=Math.max(2,s-4)),a>2&&t.push("ellipsis-start");for(let e=a;e<=r;e++)t.push(e);return r<s-1&&t.push("ellipsis-end"),t.push(s),t})().map(a=>"string"==typeof a?(0,t.jsx)("span",{className:"px-2 text-muted-foreground",children:"..."},a):(0,t.jsx)("button",{onClick:()=>i(a),className:`min-w-[2.5rem] px-3 py-2 text-sm rounded-md transition-colors ${e===a?"bg-primary text-primary-foreground":"bg-muted text-muted-foreground hover:bg-muted/80"}`,"aria-label":`Page ${a}`,"aria-current":e===a?"page":void 0,children:a},a))}),(0,t.jsxs)("button",{onClick:()=>i(e+1),disabled:e===s,className:l(e===s),"aria-label":"Next page",children:[(0,t.jsx)("span",{className:"hidden sm:inline",children:"Next"}),(0,t.jsx)(r.ChevronRight,{className:"w-4 h-4"})]})]})}])},34713,e=>{"use strict";e.s(["formatDuration",0,function(e){if(e<1e3)return`${e}ms`;let t=Math.round(e/100);if(t<600)return`${(t/10).toFixed(1)}s`;let a=Math.round(e/1e3);if(a<3600){let e=Math.floor(a/60);return`${e}m ${a%60}s`}let r=Math.round(e/6e4),s=Math.floor(r/60);return`${s}h ${r%60}m`},"formatRelativeTime",0,function(e){let t=Date.now()-e;return t<6e4?`${Math.max(1,Math.floor(t/1e3))}s ago`:t<36e5?`${Math.floor(t/6e4)}m ago`:t<864e5?`${Math.floor(t/36e5)}h ago`:`${Math.floor(t/864e5)}d ago`}])},24071,e=>{"use strict";let t=(0,e.i(56420).default)("chevron-left",[["path",{d:"m15 18-6-6 6-6",key:"1wnfg3"}]]);e.s(["ChevronLeft",0,t],24071)},67927,e=>{"use strict";let t=(0,e.i(56420).default)("chevron-right",[["path",{d:"m9 18 6-6-6-6",key:"mthhwq"}]]);e.s(["ChevronRight",0,t],67927)},16306,e=>{"use strict";let t=(0,e.i(56420).default)("shield-alert",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}],["path",{d:"M12 8v4",key:"1got3b"}],["path",{d:"M12 16h.01",key:"1drbdi"}]]);e.s(["ShieldAlert",0,t],16306)},84026,29407,e=>{"use strict";var t=e.i(56420);let a=(0,t.default)("shield-check",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]]);e.s(["ShieldCheck",0,a],84026);let r=(0,t.default)("shield-x",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}],["path",{d:"m14.5 9.5-5 5",key:"17q4r4"}],["path",{d:"m9.5 9.5 5 5",key:"18nt4w"}]]);e.s(["ShieldX",0,r],29407)},82954,e=>{"use strict";let t=(0,e.i(56420).default)("shield",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}]]);e.s(["Shield",0,t],82954)}]);

package/.next/standalone/.next/static/chunks/turbopack-2x-o099q64i8h.js

@@ -0,0 +1 @@
+(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,{otherChunks:["static/chunks/1c6aptmytnu6q.js","static/chunks/2yuzx8716maf0.js","static/chunks/3i8rg2fv9nd6e.js","static/chunks/354-n7p7labpn.js"],runtimeModuleIds:[94553]}]),(()=>{let e;if(!Array.isArray(globalThis.TURBOPACK))return;var t,r=function(){if(null!=self.TURBOPACK_ASSET_SUFFIX)return self.TURBOPACK_ASSET_SUFFIX;let e=document?.currentScript?.getAttribute?.("src")??"",t=e.indexOf("?");return t>=0?e.slice(t):""}(),n=((t=n||{})[t.Runtime=0]="Runtime",t[t.Parent=1]="Parent",t[t.Update=2]="Update",t);let o=new WeakMap;function l(e,t){this.m=e,this.e=t}let i=l.prototype,u=Object.prototype.hasOwnProperty,s="u">typeof Symbol&&Symbol.toStringTag;function c(e,t,r){u.call(e,t)||Object.defineProperty(e,t,r)}function a(e,t){let r=e[t];return r||(r=f(t),e[t]=r),r}function f(e){return{exports:{},error:void 0,id:e,namespaceObject:void 0}}function p(e,t,r){c(e,"__esModule",{value:!0}),s&&c(e,s,{value:"Module"});let n=0;for(;n<t.length;){let r=t[n++],o=t[n++];if("number"==typeof o)if(0===o)c(e,r,{value:t[n++],enumerable:!0,writable:!1});else throw Error(`unexpected tag: ${o}`);else"function"==typeof t[n]?c(e,r,{get:o,set:t[n++],enumerable:!0}):c(e,r,{get:o,enumerable:!0})}r||Object.seal(e)}function h(e,t){(null!=t?a(this.c,t):this.m).exports=e}i.s=function(e,t,r){let n,o;null!=t?o=(n=a(this.c,t)).exports:(n=this.m,o=this.e),n.namespaceObject=o,p(o,e,r)},i.j=function(e,t){let r,n;null!=t?n=(r=a(this.c,t)).exports:(r=this.m,n=this.e);let l=function(e,t){let r=o.get(e);if(!r){o.set(e,r=[]);let n=e=>{if("default"!==e){for(let t of r)if(u.call(t,e))return t}};e.exports=e.namespaceObject=new Proxy(t,{get(e,t){if(u.call(e,t)||"default"===t||"__esModule"===t)return Reflect.get(e,t);let r=n(t);return r&&Reflect.get(r,t)},set:()=>!1,defineProperty:()=>!1,deleteProperty:()=>!1,has:(e,t)=>!!Reflect.has(e,t)||"default"!==t&&"__esModule"!==t&&void 0!==n(t),ownKeys(e){let t=Reflect.ownKeys(e);for(let e of r)for(let r of Reflect.ownKeys(e))"default"===r||t.includes(r)||t.push(r);return t},getOwnPropertyDescriptor(e,t){let r=Reflect.getOwnPropertyDescriptor(e,t);if(r||"default"===t||"__esModule"===t)return r;let o=n(t);if(o)return{enumerable:!0,configurable:!0,get:()=>Reflect.get(o,t)}}})}return r}(r,n);"object"==typeof e&&null!==e&&l.push(e)},i.v=h,i.n=function(e,t){let r;(r=null!=t?a(this.c,t):this.m).exports=r.namespaceObject=e};let d=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,m=[null,d({}),d([]),d(d)];function y(e,t,r){let n=[],o=-1;for(let t=e;("object"==typeof t||"function"==typeof t)&&!m.includes(t);t=d(t))for(let r of Object.getOwnPropertyNames(t))n.push(r,function(e,t){return()=>e[t]}(e,r)),-1===o&&"default"===r&&(o=n.length-1);return r&&o>=0||(o>=0?n.splice(o,1,0,e):n.push("default",0,e)),p(t,n),t}function g(e){let t=K(e,this.m);if(t.namespaceObject)return t.namespaceObject;let r=t.exports;return t.namespaceObject=y(r,"function"==typeof r?function(...e){return r.apply(this,e)}:Object.create(null),r&&r.__esModule)}function b(e){let t=e.indexOf("#");-1!==t&&(e=e.substring(0,t));let r=e.indexOf("?");return -1!==r&&(e=e.substring(0,r)),e}i.i=g,i.A=function(e){return this.r(e)(g.bind(this))},i.t="function"==typeof require?require:function(){throw Error("Unexpected use of runtime require")},i.r=function(e){return K(e,this.m).exports},i.f=function(e){function t(t){if(t=b(t),u.call(e,t))return e[t].module();let r=Error(`Cannot find module '${t}'`);throw r.code="MODULE_NOT_FOUND",r}return t.keys=()=>Object.keys(e),t.resolve=t=>{if(t=b(t),u.call(e,t))return e[t].id();let r=Error(`Cannot find module '${t}'`);throw r.code="MODULE_NOT_FOUND",r},t.import=async e=>await t(e),t};let O=function(e){let t=new URL(e,"x:/"),r={};for(let e in t)r[e]=t[e];for(let t in r.href=e,r.pathname=e.replace(/[?#].*/,""),r.origin=r.protocol="",r.toString=r.toJSON=(...t)=>e,r)Object.defineProperty(this,t,{enumerable:!0,configurable:!0,value:r[t]})};function w(e,t){throw Error(`Invariant: ${t(e)}`)}O.prototype=URL.prototype,i.U=O,i.z=function(e){throw Error("dynamic usage of require is not supported")},i.g=globalThis;let R=l.prototype,k="string"==typeof TURBOPACK_CHUNK_BASE_PATH?TURBOPACK_CHUNK_BASE_PATH:"/_next/",U=new Map;i.M=U;let v=new Map,_=new Map,P=new Map;async function C(e,t,r){let n;if("string"==typeof r)return function(e,t,r){return A(e,t,r)}(e,t,E(r));let o=r.included||[],l=o.map(e=>!!U.has(e)||v.get(e));if(l.length>0&&l.every(e=>e))return void await Promise.all(l);for(let l of(n=A(e,t,E(r.path)),o))v.has(l)||v.set(l,n);await n}R.l=function(e){return C(n.Parent,this.m.id,e)};let j=Promise.resolve(void 0),$=new WeakMap;function A(t,r,o){let l=e.loadChunkCached(t,o),i=$.get(l);if(void 0===i){let e=$.set.bind($,l,j);i=l.then(e).catch(e=>{let l;switch(t){case n.Runtime:l=`as a runtime dependency of chunk ${r}`;break;case n.Parent:l=`from module ${r}`;break;case n.Update:l="from an HMR update";break;default:w(t,e=>`Unknown source type: ${e}`)}let i=Error(`Failed to load chunk ${o} ${l}${e?`: ${e}`:""}`,e?{cause:e}:void 0);throw i.name="ChunkLoadError",i}),$.set(l,i)}return i}R.L=function(e){var t,r;return t=n.Parent,r=this.m.id,A(t,r,e)};R.R=function(e){let t=this.r(e);return t?.default??t},R.P=function(e){return`/ROOT/${e??""}`},R.F=function(e){return e?`file:///ROOT/${e.split("/").map(encodeURIComponent).join("/")}`:"file:///ROOT/"},R.q=function(e,t){h.call(this,`${e}${r}`,t)};let T=/[^A-Za-z0-9\-_.!~*'()/]/;function E(e,t=k){let n=T.test(e)?e.split("/").map(encodeURIComponent).join("/"):e;return`${t}${n}${r}`}function S(e,t){let r,n=e.indexOf("?");if(-1!==n)r=n;else{let t=e.indexOf("#");r=-1!==t?t:e.length}return r>=t.length&&e.startsWith(t,r-t.length)}R.b=k,R.X=r,R.h=E;function M(e){return S(e,".css")}let x={};i.c=x;let K=(e,t)=>{let r=x[e];if(r){if(r.error)throw r.error;return r}return N(e,n.Parent,t.id)};function N(e,t,r){let n=U.get(e);if("function"!=typeof n)throw Error(function(e,t,r){let n;switch(t){case 0:n=`as a runtime entry of chunk ${r}`;break;case 1:n=`because it was required from module ${r}`;break;case 2:n="because of an HMR update";break;default:w(t,e=>`Unknown source type: ${e}`)}return`Module ${e} was instantiated ${n}, but the module factory is not available.`}(e,t,r));let o=f(e),i=o.exports;x[e]=o;let u=new l(o,i);try{n(u,o,i)}catch(e){throw o.error=e,e}return o.namespaceObject&&o.exports!==o.namespaceObject&&y(o.exports,o.namespaceObject),o}function B(t){let r;if(!Array.isArray(t))return e.registerChunk(void 0,t);let n=function(e){if("string"==typeof e)return e;if(e)return{src:e.getAttribute("src")};if("u">typeof TURBOPACK_NEXT_CHUNK_URLS)return{src:TURBOPACK_NEXT_CHUNK_URLS.pop()};throw Error("chunk path empty but not in a worker")}(t[0]);return 2===t.length?r=t[1]:(r=void 0,!function(e,t){let r=1;for(;r<e.length;){let n,o=r+1;for(;o<e.length&&"function"!=typeof e[o];)o++;if(o===e.length)throw Error("malformed chunk format, expected a factory function");let l=e[o];for(let l=r;l<o;l++){let r=e[l],o=t.get(r);if(o){n=o;break}}let i=n??l,u=!1;for(let n=r;n<o;n++){let r=e[n];t.has(r)||(u||(i===l&&Object.defineProperty(l,"name",{value:"module evaluation"}),u=!0),t.set(r,i))}r=o+1}}(t,U)),e.registerChunk(n,r)}let L=new Map;function I(e){let t=L.get(e);if(!t){let r,n;t={resolved:!1,loadingStarted:!1,retryAttempts:0,promise:new Promise((e,t)=>{r=e,n=t}),resolve:()=>{t.resolved=!0,r()},reject:n},L.set(e,t)}return t}function q(e,t,r,n,o){!(null==n||n instanceof DOMException&&"NetworkError"===n.name)||r.retryAttempts>=1||L.get(t)!==r?(L.get(t)===r&&L.delete(t),r.reject(n)):(r.retryAttempts++,setTimeout(()=>{r.resolved||L.get(t)!==r||(o?o():(r.loadingStarted=!1,H(e,t)))},200+Math.floor(401*Math.random())))}function H(e,t){let r=I(t);if(r.loadingStarted)return r.promise;if(e===n.Runtime)return r.loadingStarted=!0,M(t)&&r.resolve(),r.promise;if("function"==typeof importScripts)if(M(t));else if(S(t,".js")){self.TURBOPACK_NEXT_CHUNK_URLS.push(t);try{importScripts(t)}catch(n){q(e,t,r,n)}}else throw Error(`can't infer type of chunk from URL ${t} in worker`);else{let n=decodeURI(t);if(M(t))if(document.querySelectorAll(`link[rel=stylesheet][href="${t}"],link[rel=stylesheet][href^="${t}?"],link[rel=stylesheet][href="${n}"],link[rel=stylesheet][href^="${n}?"]`).length>0)r.resolve();else{let n=()=>{let o=document.createElement("link");return o.rel="stylesheet",o.crossOrigin=null,o.href=t,o.onerror=()=>{let l=document.createComment("");o.replaceWith(l),q(e,t,r,void 0,()=>l.replaceWith(n()))},o.onload=()=>{r.resolve()},o};document.head.appendChild(n())}else if(S(t,".js")){let o=document.querySelectorAll(`script[src="${t}"],script[src^="${t}?"],script[src="${n}"],script[src^="${n}?"]`);if(o.length>0)for(let n of Array.from(o))n.addEventListener("error",()=>{n.remove(),q(e,t,r)},{once:!0});else{let n=document.createElement("script");n.crossOrigin=null,n.src=t,n.onerror=()=>{n.remove(),q(e,t,r)},document.head.appendChild(n)}}else throw Error(`can't infer type of chunk from URL ${t}`)}return r.loadingStarted=!0,r.promise}e={async registerChunk(e,t){let r;if(null!=e&&(r=function(e){if("string"==typeof e)return e;let t=decodeURIComponent(e.src.replace(/[?#].*$/,""));return t.startsWith(k)?t.slice(k.length):t}(e),I("string"==typeof e?E(e):e.src).resolve()),null!=t){for(let e of t.otherChunks)I(E("string"==typeof e?e:e.path));if(await Promise.all(t.otherChunks.map(e=>{var t;return t=r,C(n.Runtime,t,e)})),t.runtimeModuleIds.length>0)for(let e of t.runtimeModuleIds)!function(e,t){let r=x[t];if(r){if(r.error)throw r.error;return}N(t,n.Runtime,e)}(r,e)}},loadChunkCached:(e,t)=>H(e,t)};var F=globalThis.TURBOPACK;globalThis.TURBOPACK={push:B},F.forEach(B)})();

package/.next/standalone/SECURITY.md

@@ -58,9 +58,24 @@ When the OSV-Scanner gate fails on a PR:
    transitive dependency that a parent pins to a vulnerable version, add a minimal
    [`overrides`](package.json) entry (as we do for `postcss`) and let CI validate
    the build.
-2. **Only if there is no fix**, add a justified, time-boxed entry to
-   [`osv-scanner.toml`](osv-scanner.toml) (`id`, `reason`, `ignoreUntil`). Never
-   blanket-ignore. Re-review entries when their `ignoreUntil` date passes.
+2. **Only if there is no fix**, add a justified, time-boxed `[[IgnoredVulns]]`
+   entry to [`osv-scanner.toml`](osv-scanner.toml) (`id`, `reason`,
+   `ignoreUntil`). One advisory per entry, which is the point: any *other*
+   advisory against the same package still blocks. The scanner resolves
+   **aliases**, so one id covers every spelling of the *same* advisory — naming
+   both a `PYSEC-` id and its `GHSA-` alias adds nothing and gets reported as an
+   unused ignore. It does **not** cover a distinct advisory against that package,
+   which still fails the gate until it gets its own entry. Re-review entries when
+   their `ignoreUntil` date passes.
+3. **Only for a package that keeps accruing unfixable advisories**, where an id
+   list has become whack-a-mole — each new disclosure reddening the gate on an
+   unrelated PR until someone appends another id — use `[[PackageOverrides]]`
+   instead (`name`, `version`, `ecosystem`, `vulnerability.ignore`,
+   `effectiveUntil`; note the different date key). This silences *every*
+   advisory against that package, **including fixable ones**, so the `reason`
+   must say why losing that signal is acceptable for this package specifically.
+   Pin `version` to the locked version so a lockfile bump re-opens the gate, and
+   never omit `effectiveUntil`.
 
 ## Maintainer setup (one-time)
 

package/.next/standalone/fp-cloud-cli/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog — `fp` CLI
 
+## 0.0.1b2 — 2026-08-25
+
+Open for the next release. `0.0.1b1` published on 2026-08-24 and the `bump` job
+moved the version here automatically; nothing has landed against `0.0.1b2` yet.
+Add entries as changes merge — this section becomes the GitHub Release body when
+it ships.
+
 ## 0.0.1b1 — 2026-08-24
 
 ### The package is `fp-cloud-cli`; the command is still `fp`

package/.next/standalone/fp-cloud-cli/uv.lock

@@ -375,7 +375,7 @@ wheels = [
 
 [[package]]
 name = "posthog"
-version = "7.39.1"
+version = "7.42.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "backoff" },
@@ -383,18 +383,18 @@ dependencies = [
     { name = "requests" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/4f/77/3737f60571995ba07677b058bb1523b7c26f28570806b8ffaf83a66df18c/posthog-7.39.1.tar.gz", hash = "sha256:0d184596e35057457fc1094883646fd23de2d6338db8b9c3ea770643fb55d8a2", size = 428586, upload-time = "2026-08-14T13:50:24.688Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/79/97/32cc0a72d7896cc2d27d442c75c9d24cc77d0140be9f5e98df7f4ce98f6a/posthog-7.42.0.tar.gz", hash = "sha256:c7e9297446208d413c3071348f101f4c05e32fba4228ac0a85e9d0014c2a274e", size = 469662, upload-time = "2026-08-21T12:57:15.05Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/88/79/ee5c01937bfb0c80415929e25aa1e8296c48e26fc9a10fe1d9f665f0f478/posthog-7.39.1-py3-none-any.whl", hash = "sha256:e76e82fe571314a0a9bc11d039fd1a1a8d210cd0f737899d41b31f61b73bf08c", size = 504259, upload-time = "2026-08-14T13:50:22.896Z" },
+    { url = "https://files.pythonhosted.org/packages/31/f0/46e28b947a19c992ad7289931d3197358cfdf4980b33317b5e7cf9c24abe/posthog-7.42.0-py3-none-any.whl", hash = "sha256:6429c9a4145572a8f54ab00330bbfe987340025d3a464212505be814b2b0950d", size = 559119, upload-time = "2026-08-21T12:57:13.299Z" },
 ]
 
 [[package]]
 name = "pygments"
-version = "2.20.0"
+version = "2.21.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c3/b2/bc9c9196916376152d655522fdcebac55e66de6603a76a02bca1b6414f6c/pygments-2.20.0.tar.gz", hash = "sha256:6757cd03768053ff99f3039c1a36d6c0aa0b263438fcab17520b30a303a82b5f", size = 4955991, upload-time = "2026-03-29T13:29:33.898Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/49/2e/ced460408999b33da6b31b0021b0f37d329e202d4169aeb164493778f25b/pygments-2.21.0.tar.gz", hash = "sha256:610ca751c9bc2492b38eb9a38a7fbc93edbbb2d7182edaf34e66ae493dee5c8c", size = 5005329, upload-time = "2026-08-17T08:02:48.824Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/f4/7e/a72dd26f3b0f4f2bf1dd8923c85f7ceb43172af56d63c7383eb62b332364/pygments-2.20.0-py3-none-any.whl", hash = "sha256:81a9e26dd42fd28a23a2d169d86d7ac03b46e2f8b59ed4698fb4785f946d0176", size = 1231151, upload-time = "2026-03-29T13:29:30.038Z" },
+    { url = "https://files.pythonhosted.org/packages/71/46/17f022dd3e953bf20a04a028a21ec746d942f8d2af30fa0f124fa0e6a684/pygments-2.21.0-py3-none-any.whl", hash = "sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9", size = 1250147, upload-time = "2026-08-17T08:02:44.912Z" },
 ]
 
 [[package]]

package/.next/standalone/lib/opencode-db.ts

@@ -0,0 +1,77 @@
+/**
+ * Read-only access to OpenCode's SQLite database.
+ *
+ * This used to shell out: `opencode db --format json "<sql>"`, on the reasoning
+ * that going through the CLI avoided coupling us to opencode's internal schema.
+ * It did not — the SQL was ours either way, naming opencode's own tables and
+ * columns, so the schema coupling was identical and the subprocess bought
+ * nothing but its own cost.
+ *
+ * And that cost was the single largest component of `failproofai audit` on any
+ * machine with opencode installed. Each spawn is a full CLI start: ~1.5s
+ * measured. `getOpenCodeSessionExport` issues three queries, so a 30-session
+ * history spent ~135 seconds launching 90 processes — against a total audit
+ * time of ~140s. The audit sat at ~0% CPU throughout, which is why it read as
+ * "slow scanning" rather than as what it was: waiting on `execFileSync`.
+ *
+ * Reading the file directly is the same thing every other SQLite-backed
+ * integration already does through `openSqliteReadonly` — goose, devin, hermes,
+ * openclaw and antigravity. Opening the database costs microseconds, and one
+ * open now serves every query a caller needs instead of one process per query.
+ *
+ * Fail-open contract is unchanged: a missing file, an unreadable database or a
+ * query error yields `null`, and callers degrade to an empty result exactly as
+ * they did when the binary was absent from PATH.
+ */
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { openSqliteReadonly, type SqliteReader } from "./sqlite-reader";
+
+/**
+ * Where the database lives.
+ *
+ * `OPENCODE_DB_PATH` names the file outright and `OPENCODE_HOME` the directory
+ * holding it — the same override shape `GOOSE_DB_PATH`/`GOOSE_HOME` and
+ * `DEVIN_DB_PATH`/`DEVIN_HOME` use, so tests point at a fixture the same way
+ * for every one of them.
+ */
+export function opencodeDbPath(): string {
+  if (process.env.OPENCODE_DB_PATH) return process.env.OPENCODE_DB_PATH;
+  const home = process.env.OPENCODE_HOME ?? join(homedir(), ".local", "share", "opencode");
+  return join(home, "opencode.db");
+}
+
+/**
+ * Open the database, hand it to `fn`, and always close it.
+ *
+ * Callers that need several queries take ONE of these and run them all inside
+ * it. That is the whole point: the shape being replaced ran a separate process
+ * per query, so three related reads cost three CLI starts.
+ */
+export async function withOpenCodeDb<T>(
+  fn: (db: SqliteReader) => T,
+): Promise<T | null> {
+  const db = await openSqliteReadonly(opencodeDbPath());
+  if (!db) return null;
+  try {
+    return fn(db);
+  } catch {
+    // A query error is indistinguishable from a missing database to every
+    // caller, and both mean "no opencode data" rather than "audit failed".
+    return null;
+  } finally {
+    try {
+      db.close();
+    } catch {
+      /* closing a read-only handle cannot fail in a way that matters here */
+    }
+  }
+}
+
+/** One query, for callers that genuinely need only one. */
+export async function queryOpenCodeDb<T = Record<string, unknown>>(
+  sql: string,
+  params: unknown[] = [],
+): Promise<T[] | null> {
+  return withOpenCodeDb((db) => db.query<T>(sql, params));
+}

package/.next/standalone/lib/opencode-projects.ts

@@ -3,10 +3,15 @@
  *
  * Unlike the other agent CLIs that store sessions as filesystem JSONL trees,
  * OpenCode stores everything in a single SQLite database (managed by
- * Drizzle ORM) at `~/.local/share/opencode/opencode.db`. Rather than read
- * the DB directly with `bun:sqlite` (which would couple us to opencode's
- * internal schema), we shell out to `opencode db --format json "<sql>"` —
- * the same surface opencode itself documents as read-only safe.
+ * Drizzle ORM) at `~/.local/share/opencode/opencode.db`, read directly
+ * through `lib/opencode-db.ts`.
+ *
+ * This used to shell out to `opencode db --format json "<sql>"`, to avoid
+ * coupling to opencode's internal schema. That reasoning did not survive
+ * contact with the SQL: the queries name opencode's own tables and columns
+ * either way, so the coupling was identical and the subprocess bought only
+ * its own cost — see `lib/opencode-db.ts` for what that cost turned out to
+ * be.
  *
  * Verified live against opencode v1.14.31:
  *   • `session` columns: id, project_id, parent_id, slug, directory, title,
@@ -21,7 +26,7 @@
  * Refs: https://opencode.ai/docs/   (CLI reference)
  *       https://opencode.ai/docs/plugins/  (plugin model context)
  */
-import { execFileSync } from "node:child_process";
+import { queryOpenCodeDb, withOpenCodeDb } from "./opencode-db";
 import { encodeFolderName } from "./paths";
 import type { ProjectFolder, SessionFile } from "./projects";
 import { runtimeCache } from "./runtime-cache";
@@ -51,41 +56,34 @@ interface OpenCodeProjectRow {
 }
 
 /**
- * Run `opencode db --format json "<sql>"` and parse the result. Returns
- * `null` (not an empty array) when the binary is missing or the query fails
- * — callers can decide whether absent vs. empty is meaningful.
- */
-function runOpenCodeDb<T>(sql: string): T[] | null {
-  try {
-    const stdout = execFileSync("opencode", ["db", "--format", "json", sql], {
-      encoding: "utf8",
-      timeout: 5_000,
-      stdio: ["ignore", "pipe", "pipe"],
-    });
-    if (!stdout.trim()) return [];
-    const parsed = JSON.parse(stdout) as unknown;
-    if (!Array.isArray(parsed)) return null;
-    return parsed as T[];
-  } catch {
-    // Binary missing, db locked, malformed JSON, or SQL error — fail open.
-    return null;
-  }
-}
-
-/**
- * Pull session rows directly from opencode's SQLite. Selects the columns the
- * dashboard needs and orders newest-first.
+ * Session rows the dashboard needs, newest first.
+ *
+ * One caller needs sessions alone; the other two need sessions and projects
+ * together and take `readBothRows`, which serves both from a single open
+ * rather than two.
  */
-function readSessionRows(): OpenCodeSessionRow[] | null {
-  return runOpenCodeDb<OpenCodeSessionRow>(
-    `SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session ORDER BY time_updated DESC LIMIT ${SESSION_LIMIT}`,
+async function readSessionRows(): Promise<OpenCodeSessionRow[] | null> {
+  return queryOpenCodeDb<OpenCodeSessionRow>(
+    "SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session ORDER BY time_updated DESC LIMIT ?",
+    [SESSION_LIMIT],
   );
 }
 
-function readProjectRows(): OpenCodeProjectRow[] | null {
-  return runOpenCodeDb<OpenCodeProjectRow>(
-    `SELECT id, worktree, vcs, name, time_created, time_updated FROM project`,
-  );
+/** Both tables from one open, for the callers that use them together. */
+async function readBothRows(): Promise<{
+  sessions: OpenCodeSessionRow[] | null;
+  projects: OpenCodeProjectRow[] | null;
+}> {
+  const rows = await withOpenCodeDb((db) => ({
+    sessions: db.query<OpenCodeSessionRow>(
+      "SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session ORDER BY time_updated DESC LIMIT ?",
+      [SESSION_LIMIT],
+    ),
+    projects: db.query<OpenCodeProjectRow>(
+      "SELECT id, worktree, vcs, name, time_created, time_updated FROM project",
+    ),
+  }));
+  return { sessions: rows?.sessions ?? null, projects: rows?.projects ?? null };
 }
 
 /**
@@ -97,8 +95,7 @@ function readProjectRows(): OpenCodeProjectRow[] | null {
  * if no sessions exist yet).
  */
 export async function getOpenCodeProjects(): Promise<ProjectFolder[]> {
-  const sessions = readSessionRows();
-  const projects = readProjectRows();
+  const { sessions, projects } = await readBothRows();
   if (sessions === null && projects === null) {
     // Binary missing or query failed — silent degrade (no log spam).
     return [];
@@ -163,7 +160,7 @@ export async function getOpenCodeProjects(): Promise<ProjectFolder[]> {
 
 /** Sessions under a given absolute cwd. Used by the project detail page. */
 export async function getOpenCodeSessionsForCwd(cwd: string): Promise<SessionFile[]> {
-  const sessions = readSessionRows();
+  const sessions = await readSessionRows();
   if (!sessions) return [];
   const matches = sessions.filter((s) => s.directory === cwd);
   return matches.map((s) => {
@@ -193,8 +190,7 @@ export async function getOpenCodeSessionsByEncodedName(name: string): Promise<Op
   let projects: OpenCodeProjectRow[] | null;
   let sessions: OpenCodeSessionRow[] | null;
   try {
-    projects = readProjectRows();
-    sessions = readSessionRows();
+    ({ projects, sessions } = await readBothRows());
   } catch (error) {
     logWarn("Failed to read OpenCode DB:", error);
     return { cwd: null, sessions: [] };

package/.next/standalone/lib/opencode-sessions.ts

@@ -2,9 +2,10 @@
  * OpenCode (sst/opencode) session transcript loader.
  *
  * Sessions live in opencode's SQLite DB (`~/.local/share/opencode/opencode.db`),
- * not on disk as JSONL like the other CLIs. We read them by shelling out to
- * `opencode db --format json "<sql>"` — same surface as `lib/opencode-projects.ts`
- * and the same fail-open contract (binary missing → return null).
+ * not on disk as JSONL like the other CLIs. Read directly through
+ * `lib/opencode-db.ts` — see there for why this stopped shelling out to
+ * `opencode db` — with the same fail-open contract as every other provider
+ * (database unreadable → return null).
  *
  * Schema verified live on opencode v1.14.31:
  *   • `session(id, project_id, parent_id, slug, directory, title, time_*, …)`
@@ -17,7 +18,7 @@
  *
  * Refs: https://opencode.ai/docs/   (CLI reference)
  */
-import { execFileSync } from "node:child_process";
+import { withOpenCodeDb } from "./opencode-db";
 import { runtimeCache } from "./runtime-cache";
 import {
   baseEntry,
@@ -59,19 +60,19 @@ interface OpenCodePartRow {
   data: string; // JSON-encoded
 }
 
-/** Run a parameter-free SELECT against opencode's DB. Returns `null` on any
- *  failure (binary missing, query error, malformed output). */
-function runOpenCodeDb<T>(sql: string): T[] | null {
+/**
+ * One query, with its failure isolated to itself.
+ *
+ * The three reads below used to be three separate processes, so one of them
+ * failing left the others' results intact — and the callers depend on that: a
+ * session row that loads while its messages do not yields an EMPTY log rather
+ * than a missing one. Running all three inside a single open would otherwise
+ * turn any one failure into a null for the whole session, which reads to the
+ * dashboard as "no such session" rather than "no messages".
+ */
+function safeQuery<T>(run: () => T[]): T[] | null {
   try {
-    const stdout = execFileSync("opencode", ["db", "--format", "json", sql], {
-      encoding: "utf8",
-      timeout: 5_000,
-      stdio: ["ignore", "pipe", "pipe"],
-    });
-    if (!stdout.trim()) return [];
-    const parsed = JSON.parse(stdout) as unknown;
-    if (!Array.isArray(parsed)) return null;
-    return parsed as T[];
+    return run();
   } catch {
     return null;
   }
@@ -215,19 +216,33 @@ export interface OpenCodeSessionLogData {
  * or the binary is unavailable.
  */
 export async function getOpenCodeSessionLog(sessionId: string): Promise<OpenCodeSessionLogData | null> {
-  if (!sessionId || !/^[A-Za-z0-9_-]+$/.test(sessionId)) return null; // SQL-injection guard
-  const sessions = runOpenCodeDb<OpenCodeSessionRow>(
-    `SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session WHERE id = '${sessionId}'`,
-  );
+  // Parameter binding already makes injection impossible, so this guard is no
+  // longer load-bearing for that — but an id that cannot match anything is
+  // still not worth a database open, and weakening an existing check while
+  // changing transport is how a regression gets in unnoticed.
+  if (!sessionId || !/^[A-Za-z0-9_-]+$/.test(sessionId)) return null;
+  // One open, three queries. Each of these was a separate `opencode db`
+  // process — and this function is called once per session by the audit, so
+  // the spawns were the audit.
+  const rows = await withOpenCodeDb((db) => ({
+    sessions: safeQuery(() => db.query<OpenCodeSessionRow>(
+      "SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session WHERE id = ?",
+      [sessionId],
+    )),
+    messages: safeQuery(() => db.query<OpenCodeMessageRow>(
+      "SELECT id, session_id, time_created, time_updated, data FROM message WHERE session_id = ? ORDER BY time_created ASC",
+      [sessionId],
+    )),
+    parts: safeQuery(() => db.query<OpenCodePartRow>(
+      "SELECT id, message_id, session_id, time_created, time_updated, data FROM part WHERE session_id = ? ORDER BY time_created ASC",
+      [sessionId],
+    )),
+  }));
+  const sessions = rows?.sessions ?? null;
   if (!sessions || sessions.length === 0) return null;
   const session = sessions[0];
-
-  const messages = runOpenCodeDb<OpenCodeMessageRow>(
-    `SELECT id, session_id, time_created, time_updated, data FROM message WHERE session_id = '${sessionId}' ORDER BY time_created ASC`,
-  );
-  const parts = runOpenCodeDb<OpenCodePartRow>(
-    `SELECT id, message_id, session_id, time_created, time_updated, data FROM part WHERE session_id = '${sessionId}' ORDER BY time_created ASC`,
-  );
+  const messages = rows?.messages ?? null;
+  const parts = rows?.parts ?? null;
   if (!messages) return { entries: [], rawLines: [], cwd: session.directory ?? undefined, filePath: `opencode://${sessionId}` };
 
   // Group parts by message_id for O(1) lookup.
@@ -289,20 +304,28 @@ export interface OpenCodeSessionExportData {
 
 export async function getOpenCodeSessionExport(sessionId: string): Promise<OpenCodeSessionExportData | null> {
   if (!sessionId || !/^[A-Za-z0-9_-]+$/.test(sessionId)) return null;
-  const sessions = runOpenCodeDb<OpenCodeSessionRow>(
-    `SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session WHERE id = '${sessionId}'`,
-  );
+  const rows = await withOpenCodeDb((db) => ({
+    sessions: safeQuery(() => db.query<OpenCodeSessionRow>(
+      "SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session WHERE id = ?",
+      [sessionId],
+    )),
+    messages: safeQuery(() => db.query<OpenCodeMessageRow>(
+      "SELECT id, session_id, time_created, time_updated, data FROM message WHERE session_id = ? ORDER BY time_created ASC",
+      [sessionId],
+    )),
+    parts: safeQuery(() => db.query<OpenCodePartRow>(
+      "SELECT id, message_id, session_id, time_created, time_updated, data FROM part WHERE session_id = ? ORDER BY time_created ASC",
+      [sessionId],
+    )),
+  }));
+  const sessions = rows?.sessions ?? null;
   if (!sessions || sessions.length === 0) return null;
   // Don't coalesce a `null` return (query failure) into `[]` — that would
   // silently serve an "empty session" export. A genuinely empty session has
   // an `[]` from the DB; a query failure has `null`. Treat the latter as
   // not-found so the route returns 404 rather than a misleading 200.
-  const messages = runOpenCodeDb<OpenCodeMessageRow>(
-    `SELECT id, session_id, time_created, time_updated, data FROM message WHERE session_id = '${sessionId}' ORDER BY time_created ASC`,
-  );
-  const parts = runOpenCodeDb<OpenCodePartRow>(
-    `SELECT id, message_id, session_id, time_created, time_updated, data FROM part WHERE session_id = '${sessionId}' ORDER BY time_created ASC`,
-  );
+  const messages = rows?.messages ?? null;
+  const parts = rows?.parts ?? null;
   if (messages === null || parts === null) return null;
   return {
     session: sessions[0],

package/.next/standalone/node_modules/@next/env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@next/env",
-  "version": "16.3.1",
+  "version": "16.3.2",
   "keywords": [
     "react",
     "next",

package/.next/standalone/node_modules/next/dist/build/swc/index.js

@@ -139,7 +139,7 @@ var HmrTarget = /*#__PURE__*/ function(HmrTarget) {
     HmrTarget["Server"] = "server";
     return HmrTarget;
 }({});
-const nextVersion = "16.3.1";
+const nextVersion = "16.3.2";
 const ArchName = (0, _os.arch)();
 const PlatformName = (0, _os.platform)();
 function infoLog(...args) {

package/.next/standalone/node_modules/next/dist/client/components/segment-cache/cache.js

@@ -1620,11 +1620,8 @@ fetchStrategy) {
             rejectRemainingSegmentsInBundle(segments, now + 10 * 1000);
         } else {
             writeSegmentBundleResponse(map, shellResponse, responseSize, segments, segmentCount, now, _types.FetchStrategy.StaticShell, // When the shell IS the full response (no shell/full split), the
-            // entries this write fulfills carry full-tier content, so PPR is
-            // the strategy that describes it. They're still keyed at the shell
-            // vary path: that's the reusable slot, and it serves concrete
-            // fallback reads correctly precisely because the shell and concrete
-            // variants coincide.
+            // entries this write fulfills carry full-tier content, so PPR is the
+            // strategy that describes it.
             shellResponse === serverResponse ? _types.FetchStrategy.PPR : _types.FetchStrategy.StaticShell);
         }
     } else {
@@ -1739,39 +1736,31 @@ payloadFetchStrategy) {
         // Otherwise the content is only as complete as the static tier it was
         // requested at, so a follow-up runtime request can still supersede it.
         const recordedFetchStrategy = !needsRuntimeRequest ? payloadFetchStrategy === _types.FetchStrategy.StaticShell ? _types.FetchStrategy.RuntimeShell : _types.FetchStrategy.PPRRuntime : fetchStrategy;
-        // Determine the vary path to key the segment at. For the full payload,
-        // re-key to a more generic path if the server tells us which params the
-        // segment varies by.
-        const payloadVaryPath = fetchStrategy === _types.FetchStrategy.StaticShell ? node.tree.shellVaryPath : process.env.__NEXT_VARY_PARAMS && varyParams !== null ? (0, _varypath.getFulfilledSegmentVaryPath)(node.tree.varyPath, varyParams) : (0, _varypath.getSegmentVaryPathForRequest)(_types.FetchStrategy.PPR, node.tree);
+        // Key the entry by which params the server said this segment depends on.
+        // Reusing one copy across param values is the point of the shell, but it
+        // requires knowing the content doesn't depend on those params, and the
+        // server's report is the direct evidence of that.
+        //
+        // Without that report, assume every param varies. The exception is a
+        // shell variant, which reduces param-dependent content to param
+        // fallbacks, so it really is good for any value of them.
+        const payloadVaryPath = process.env.__NEXT_VARY_PARAMS && varyParams !== null ? (0, _varypath.getFulfilledSegmentVaryPath)(node.tree.varyPath, varyParams) : (0, _varypath.getSegmentVaryPathForRequest)(payloadFetchStrategy, node.tree);
         const nodeEntry = node.entry;
         if (nodeEntry !== null && nodeEntry.status === _cachemap.EntryStatus.Pending) {
             // We own this entry — fulfill it directly.
             const fulfilledEntry = fulfillSegmentCacheEntry(nodeEntry, data.rsc, entryStaleAt, isPartial, responseIsUpgradeableISRFallback, recordedFetchStrategy);
-            if (fetchStrategy === _types.FetchStrategy.StaticShell) {
-                // Re-key at the shell vary path, mirroring the RuntimeShell re-key
-                // in fulfillEntrySpawnedByRuntimePrefetch. Usually the entry already
-                // lives there, but the scheduler can also upgrade a pre-existing
-                // Empty entry at a more concrete path in place, so the re-key is
-                // load-bearing. The shadow eviction keeps a stale settled entry at
-                // a more specific path from hiding the shell entry (the just-written
-                // full payload's entry is preferred and survives it). Routed through
-                // the upsert rather than a bare set so the usual precedence rules
-                // apply: a concurrent task's response (e.g. a RuntimeShell entry)
-                // can land in the shell slot first, and this write must not
-                // downgrade it. (In the common case the slot already holds this
-                // very entry, which the upsert replaces in place.)
-                if (process.env.__NEXT_VARY_PARAMS) {
-                    upsertSegmentEntry(now, map, node.tree.shellVaryPath, fulfilledEntry, node.tree.varyPath);
-                }
-            } else {
-                // Set the fulfilled entry into the canonical cache slot. Pass the
-                // concrete lookup path — the most specific path a read for this
-                // segment position would use — so that if the canonical path is more
-                // generic (i.e. the server re-keyed the segment), any stale settled
-                // entry at a more specific path (e.g. a partial shell entry) that
-                // would shadow this one is evicted. See evictShadowingSegmentEntries.
-                upsertSegmentEntry(now, map, payloadVaryPath, fulfilledEntry, node.tree.varyPath);
-            }
+            // Move the entry to that key. This is load-bearing rather than a no-op:
+            // a task spawns its entries before it knows what the response will
+            // contain, so the key it guessed can be more reusable than the response
+            // turned out to deserve.
+            //
+            // Pass the concrete lookup path — the most specific path a read for
+            // this segment position would use — so that if the entry lands at a
+            // more generic key, a stale entry at a more specific one can't shadow
+            // it. See evictShadowingSegmentEntries. The upsert (rather than a bare
+            // set) applies the usual precedence rules, so a concurrent task's more
+            // complete response already in this slot isn't downgraded.
+            upsertSegmentEntry(now, map, payloadVaryPath, fulfilledEntry, node.tree.varyPath);
         } else {
             // We don't own this entry. Create a detached entry and attempt to
             // upsert it into this payload's slot.