mir-frontend-react-nextlisted

Make It Right (Next.js module). Next.js 16 App Router mechanics — the footguns that exist only in this meta-framework, not in React generally. Carries the Server/Client Component boundary and how one 'use client' pulls its entire import graph into the browser bundle; Server Actions as public POST endpoints that must re-authenticate and re-authorize on every call (hiding the button is not access control); proxy.ts as an optimistic redirect and never the sole auth gate — this framework has a repeating middleware-bypass advisory class (CVE-2025-29927, CVE-2026-45109); the opt-in caching layers after Next 16 ('use cache', cacheComponents, cacheTag, revalidateTag vs updateTag vs revalidatePath); request waterfalls from sequential awaits in nested layouts; and NEXT_PUBLIC_ vars inlined at build time. Chains: mir-frontend → mir-frontend-react → this. TRIGGER only when the React meta-framework is Next.js — work in app/, page.tsx, layout.tsx, route.ts, proxy.ts or middleware.ts, any 'use server' file, next.config.ts,
anantbhandarkar/make-it-right · ★ 15 · Web & Frontend · score 81

Install: claude install-skill anantbhandarkar/make-it-right

# /mir-frontend-react-next · Make It Right (Next.js App Router) Bottom tier of the chain: `mir-frontend` (generic gates) → `mir-frontend-react` (React reactivity) → **this** (Next.js library mechanics). Run the gates first. Reach for this at Gate 5 (rendering ownership), Gate 6 (implementation), and Gate 7 (review). **React-level rules — Rules of Hooks, derived state, stale closures, list keys, Compiler interop — live in `mir-frontend-react`, not here.** **Stack assumed, versions verified 13 Aug 2026.** App Router only; Pages Router (`getServerSideProps`, `pages/api`) is legacy and out of scope. | Release | Status | Notes | |---|---|---| | Next.js 16.3 (3 Aug 2026) | current stable | `partialPrefetching`, root params (`next/root-params`), `catchError`, TypeScript 7 type-checking, experimental `useOffline` | | Next.js 16.2.11 | **Active LTS — minimum patch floor** | Carries the July 2026 security release | | Next.js 15.5.21 | Maintenance LTS | Same fixes backported; 15.x gets security only | | Next.js 16.0 (Oct 2025) | baseline for everything below | Turbopack default · Cache Components · `middleware.ts` → `proxy.ts` · Node.js ≥ 20.9 · TypeScript ≥ 5.1 · async `params`/`searchParams`/`cookies()`/`headers()` | Removed in 16: `experimental.ppr`, `experimental.dynamicIO` (renamed `cacheComponents`), `serverRuntimeConfig`/`publicRuntimeConfig`, `next lint`, AMP. Deprecated: `middleware.ts`, `images.domains`, single-argument `revalidateTag()`. A Next.js 17 was not released at t