Upgrade Next.js 14.2.35 → 15.5.12 to patch RSC deserialization DoS CVE

[Copilot]

next@14.2.35 is vulnerable to HTTP request deserialization DoS via React Server Components (affected: >= 13.0.0, < 15.0.8). Intermediate versions carry additional CVEs (Authorization Bypass, Cache Poisoning, RCE via React flight protocol); 15.5.12 is the first stable release with zero known advisories.

Dependency changes

• next: 14.2.35 → 15.5.12
• eslint-config-next: 14.2.35 → 15.5.12

Next.js 15 breaking change: params is now a Promise

Page props in Next.js 15 require params to be awaited. The agent detail page is refactored into:

• page.tsx — thin async server component that awaits params and forwards agentId as a plain string prop
• AgentPageClient.tsx — extracted client component (previously inlined in page.tsx) that receives agentId: string

// page.tsx — before (Next.js 14, broken on 15)
export default function AgentPage({ params }: { params: { agentId: string } }) {
  const agent = getAgentById(params.agentId);
  // ...
}

// page.tsx — after (Next.js 15)
export default async function AgentPage({ params }: { params: Promise<{ agentId: string }> }) {
  const { agentId } = await params;
  return <AgentPageClient agentId={agentId} />;
}

Original prompt

Build a Next.js app called Agent Foundry.

The product is a modular AI agent factory that can create and run niche research agents, starting with:

1. Wallet Watch Agent
2. Crypto Narrative Scanner

Requirements:

• Use Next.js with TypeScript
• Clean modular folder structure
• Include a simple homepage
• Include an agent registry/config system
• Each agent should have:
  • name
  • description
  • inputs
  • tools
  • output schema
• Add starter UI for selecting an agent and submitting input
• Add placeholder output cards for summaries, alerts, and insights
• Prepare the codebase so more agents can be added later easily
• Keep styling modern and minimal
• Create a clear README with setup instructions

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.