Middleware with proper matcher

Auth check in middleware returns 401

Params awaited in dynamic routes

Search params for pagination

GET cache control for dynamic data

Validation on POST endpoint

request.json() wrapped in try/catch

Structured error responses

No internal error leaks

Functional implementation

Route Handlers for public API

Server Actions for admin forms

Revalidation after mutations

Validation in both Route Handlers and Server Actions

Server Action error handling pattern

Params awaited in dynamic routes

Structured error responses from Route Handlers

use client on form components

Functional implementation

Server Action used (not Route Handler)

Zod validation with safeParse

Field-level errors returned as state

useActionState hook used

Revalidation after mutation

'use client' on form component

Loading/pending state

Error boundary

Functional implementation

Params awaited in dynamic routes

Zod or schema validation on input

Structured error responses

request.json() wrapped in try/catch

NextResponse.json used correctly

GET caching control

No internal error leaks

Error boundary for menu page

CRUD endpoints functional

Middleware with matcher config

Middleware at project root

Middleware uses only Web APIs

request.json() wrapped in try/catch

Webhook payload validation

Structured error responses

Signature verification

GET events endpoint with cache control

No internal error leaks

Functional implementation