Use when writing or editing server-side code - Next.js route handlers, server actions, MongoDB queries, API contracts, auth checks. Covers parsing input with Zod at every boundary, ordering auth guards before work, typed domain errors mapped to HTTP in one place, never returning raw database documents, and MongoDB driver patterns for connection reuse, projections, and injection-safe queries.
