Fix React Server Components CVE vulnerabilities

CLAUDE.md

@@ -0,0 +1,51 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Overview
+
+This is the CodePress investor pitch deck - a Next.js presentation app with slide-based navigation and embedded CodePress visual editor demos. It's part of the larger CodePress monorepo.
+
+## Common Commands
+
+- **Dev server**: `pnpm dev` - starts Next.js at http://localhost:3000
+- **Build**: `pnpm build`
+- **Lint**: `pnpm lint` (uses ESLint with next/core-web-vitals and next/typescript)
+- **Type check**: `npx tsc --noEmit`
+
+## Architecture
+
+### Slide System
+
+The deck uses a custom slide presentation system with keyboard navigation (arrow keys):
+
+- **Slide routes**: Defined in `src/slides/slideRoutes.ts` - add new slides to this array
+- **SlideLayout**: `src/slides/components/SlideLayout.tsx` - handles navigation, animations, and keyboard controls
+- **Slide components**: Each slide is a page in `src/pages/slides/` (e.g., `hero.tsx`, `demo.tsx`)
+- **Root redirect**: `src/pages/index.tsx` redirects to the first slide
+
+### Key Directories
+
+- `src/pages/slides/` - Individual slide pages
+- `src/slides/components/` - Shared slide UI components (SlideHeader, SlideLayout, demo apps)
+- `src/components/ui/` - shadcn/ui components with TailwindCSS
+- `src/slides/seoMeta.ts` - SEO metadata for each slide
+
+### CodePress Integration
+
+The deck uses CodePress's own visual editing tools:
+- `@codepress/codepress-engine` - SWC plugin and webpack plugin configured in `next.config.ts`
+- `@quantfive/codepress-browser-extension` - Editor UI components
+- Demo page (`src/pages/slides/demo.tsx`) embeds the CodePress editor with configurable API endpoint
+
+### Environment
+
+- API URL is set via `CODEPRESS_EDITOR_API_BASE_URL` in `src/pages/slides/demo.tsx`:
+  - Production: `https://api.codepress.dev/v1`
+  - Development: `http://localhost:8007/v1`
+
+## Code Style
+
+- **Styling**: TailwindCSS v4 with shadcn/ui components
+- **Path aliases**: `@/*` maps to `./src/*`
+- `codepress-ignore="true"` attribute on elements excludes them from visual editing

package.json

@@ -19,7 +19,7 @@
     "clsx": "^2.1.1",
     "geist": "^1.5.1",
     "lucide-react": "^0.541.0",
-    "next": "15.5.7",
+    "next": "15.5.9",
     "react": "19.1.2",
     "react-dom": "19.1.2",
     "react-player": "^3.3.2",