nextjs-data-access-layer

Data Access Layer (DAL)

Priority: P1 (HIGH)

Centralize all data access (Database & External APIs) to ensure consistent security, authorization, and caching.

Principles

1. Server-Only: Must include import 'server-only' to prevent Client bundling.
2. Auth Co-location: Auth checks (session.role) must be inside the DAL function.
3. DTO Transformation: Return plain objects (DTOs), never raw ORM instances.
4. No Internal Fetch: Call DAL functions directly. Do not fetch('localhost/api').

Implementation

Limitations

• Client Components: Cannot import DAL files. Must use Server Actions or Route Handlers as bridges.