What problem does it solve? TanStack Start code is isomorphic by default, meaning it runs in both server and client bundles, which makes it easy to accidentally leak secrets into the client bundle or cause hydration mismatches. This Skill teaches how to control exactly where code executes. ## Core Features & Use Cases - Environment Boundary APIs: Use createServerFn, createServerOnlyFn, createClientOnlyFn, and createIsomorphicFn to pin code to the correct runtime. - Client-Only Rendering: Apply the ClientOnly component and useHydrated hook for browser-only components and hydration-dependent logic. - Environment Variable Safety: Enforce correct use of VITE_-prefixed public variables versus unprefixed server secrets accessed only inside server functions. - Use Case: When a route loader needs an API secret, wrap the fetch in createServerFn so the secret never ships to the client bundle. ## Quick Start Ask the assistant to refactor a TanStack Start route loader so its secret API key is accessed only inside a createServerFn handler.