# Contributor handoff — TanStack/router

> Canonical page: https://codevetter.com/unpack/router/agent-handoff

# Contributor handoff — TanStack/router

Scanned commit 1f0f20a3206a28365d74fd2485b9a8eedbf74dd0 (2026-10-01). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

Begin at the affected core boundary and its framework consumers, then read the local instructions and executable configuration as source. Tests and CI were inspected, not executed; all commands here describe future validation when execution is authorized. This brief is a bounded investigation of the pinned commit, not comprehensive coverage or a vulnerability audit. Preserve public contracts, request isolation, cancellation ownership, and generated-file boundaries.
- Read root and applicable nested AGENTS.md first; shared routing changes belong in router-core and require checking React, Solid, and Vue consumers, while shared Start runtime/build changes belong in start-*-core. — [AGENTS.md#L3-L6](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L3-L6)
- Begin bug fixes with reachable public-API regressions; verify upstream dependency root causes and obtain explicit authorization before implementing a repository workaround. — [AGENTS.md#L10-L12](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L10-L12)
- Use the pinned pnpm version and repository Node selection, preserve the lockfile and generated route trees, and use control-flow braces; format before authorized validation. — [package.json#L8-L10](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/package.json#L8-L10) [AGENTS.md#L13-L16](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L13-L16)
- Use one Nx command at a time with CI=1 NX_DAEMON=false and --skipRemoteCache; workspace imports consume built packages, and unit targets depend on upstream builds. — [AGENTS.md#L17-L23](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L17-L23) [nx.json#L56-L65](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/nx.json#L56-L65)
- Future code validation should include affected unit, type, and lint targets plus relevant consumers; browser behavior needs e2e, exports need build checks, and published-code changes need a changeset. Their definitions were inspected here, not executed. — [AGENTS.md#L24-L24](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L24-L24) [package.json#L16-L24](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/package.json#L16-L24) [.github/workflows/pr.yml#L33-L38](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/.github/workflows/pr.yml#L33-L38)
- Keep isServer ?? router.isServer directly in runtime branches and avoid server reactivity; shared definitions must not acquire request/user data, and development caching/HMR guards must remain intact. — [AGENTS.md#L28-L33](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L28-L33) [packages/router-core/AGENTS.md#L3-L5](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/packages/router-core/AGENTS.md#L3-L5) [packages/react-router/src/routerStores.ts#L13-L25](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/packages/react-router/src/routerStores.ts#L13-L25)
- Before SSR or RPC transport edits, read STREAMING.md and Start server instructions; preserve response-body ownership, trusted context precedence, and frame compatibility between server and client. — [packages/start-server-core/AGENTS.md#L3-L6](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/packages/start-server-core/AGENTS.md#L3-L6) [packages/router-core/src/ssr/STREAMING.md#L24-L47](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/packages/router-core/src/ssr/STREAMING.md#L24-L47)
- Backpressure validation requires RUN_BACKPRESSURE_PERF=1 and cache bypass; runtime/memory changes require paired identical workloads, and every emitted-client-JavaScript change requires the full final bundle-size skill workflow. — [packages/router-core/AGENTS.md#L8-L11](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/packages/router-core/AGENTS.md#L8-L11) [AGENTS.md#L35-L38](https://github.com/TanStack/router/blob/1f0f20a3206a28365d74fd2485b9a8eedbf74dd0/AGENTS.md#L35-L38)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)