Skill · nextjs/next-16 · v1.0.0 · MIT
Next.js 16 App Router
Next.js 16 as it behaves today - Cache Components, the right invalidation call, proxy.ts, safe server actions and 15 to 16 upgrades.
Teaches an agent the Next.js 16 App Router as measured on next 16.4.3 with next build and next start. It concentrates on what agents trained on Next 13-15 get wrong: the Cache Components model (cacheComponents with partialPrefetching, 'use cache', cacheLife, cacheTag, Suspense and the prerender build errors, removed segment configs), choosing updateTag, revalidateTag with a profile, revalidatePath or refresh by what the next request must show (revalidateTag 'max' serves one stale response, updateTag throws outside Server Actions), the 15 to 16 changes that build but misbehave (sync params, sitemap ids as Promises, images.qualities defaulting to 75, revalidateTag semantics), middleware renamed to a Node-only proxy.ts, and server actions as public endpoints whose .bind() arguments are client-controlled.
- Frontend
- Backend
- Security
- Migration
- build
- maintain
- secure
- nextjs
- react
- typescript
- javascript
- nodejs
uplift
No runs exist for this digest.
Not measured for this digest.
Untested is not the same as useless: nobody has measured it yet. Proof comes from A/B runs on hidden tests:
npx sigil prove catalog/skills/nextjs/next-16 --suite <suite> --runs 6trust level · submitted
- in the catalog: met
- structure check: not met
- static scan, no high findings: not met
- canary sandbox passed: not met
- maintainer approved: not met
canary sandbox
Not run for this digest.
static scan
Not run for this digest.
compatibility · targeted, compiled and evaluated are separate claims
| agent | targeted by author | compiled | evaluated in the lab | notes |
|---|---|---|---|---|
| Claude Code | targeted: yes | no record for compiled | no record for evaluated | |
| Codex | targeted: yes | no record for compiled | no record for evaluated | |
| Cursor | targeted: yes | no record for compiled | no record for evaluated | |
| GitHub Copilot | targeted: yes | no record for compiled | no record for evaluated | |
| Gemini CLI | targeted: yes | no record for compiled | no record for evaluated | |
| OpenCode | targeted: yes | no record for compiled | no record for evaluated |
declared permissions
- network
- none
- shell
- npm ls, npm run, npm start, rg
- filesystem
- write
- env
- none
Undeclared access is a finding in the scan and a tripwire in the canary.
source
- path
- catalog/skills/nextjs/next-16
- authors
- dgesteves
- entry
- SKILL.md (agent-skill)
- registry
- 2026-11-02 · 5cb851d
install
$ npx sigil add nextjs/next-16 --agent claude-codeNo compile record for Claude Code on this digest. Install never runs capability scripts, and refuses on any digest mismatch.
known limitations
- Written and verified against next 16.4.3 with React 19.3. A security release was announced for 2026-11-03 and later 16.x minors may change defaults; the docs in node_modules/next/dist/docs win when they disagree.
- App Router only. The Pages Router, custom servers, static export and the Edge runtime are not covered beyond noting that middleware.ts is the way to keep Edge.
- Cache behaviour was measured with the default in-memory cache handler on a single next start process. Serverless platforms, 'use cache remote' handlers and multi-instance deployments behave differently for runtime caching.
- The proof suite drives pages and server actions over HTTP without a browser, so client-side router cache behaviour (stale times, prefetching, Activity state) is taught but not scored.
- Partial Prefetching, Instant Navigations, ensureStatic and adapters are summarised, not taught in depth.