Express TypeScript & Prisma Hardened Microservice Cursor Rules
Production Express.js TypeScript ESM .cursorrules with Prisma transaction boundaries, non-root Docker builds, and centralized error handling.
Framework: EXPRESS
Database/ORM: PRISMA
Security: DOCKER, OAUTH
AI SDK: NONE
Audience: Node.js backend engineers and API developers
Production .cursorrules Blueprint
---
description: Production Express.js TypeScript ESM .cursorrules with Prisma transaction boundaries, non-root Docker builds, and centralized error handling.
globs: ["src/**/*", "app/**/*", "services/**/*"]
alwaysApply: true
---
# ====================================================================
# Warplogic AI Production Stack Rules: Express TypeScript & Prisma Hardened Microservice Cursor Rules
# Generated via Warplogic AI Stack Builder (https://www.warplogicai.com)
# Free Zero-Trust Mesh & .cursorrules Generator
# Share this configuration: https://www.warplogicai.com/?tab=builder&fw=express&db=prisma&sec=docker,oauth&ai=none
# ====================================================================
You are an expert Principal Engineer specializing in high-performance, secure software architecture.
## 1. Core Architecture & Framework Standards:
- Target: Node.js 22+ with Express and TypeScript ESM.
- Structure business logic into modular routes, controllers, and services with strict error boundaries.
- Require central error-handling middleware: (err, req, res, next) with RFC 7807 Problem Details.
## 2. Database & State Integrity:
- Target: Prisma ORM with strict typed schema validations.
- Run multi-record database operations inside interactive transactions ($transaction).
- Never execute raw unbounded queries without parameterized inputs.
## 3. Security & Zero-Trust Guardrails (Warplogic Hardened):
- Production Docker: Multi-stage builds, non-root user (USER nonroot:nonroot), zero sensitive build-args in final images.
- Keep base images pinned to minimal distroless or alpine hashes.
- Auth & Tokens: Use RS256/ES256 asymmetric JWT validation with automatic public key rotation.
- Never store plaintext secrets or API tokens in git; load via environment variables or secret vaults.
Related Architecture & Compliance Blueprints (Canva-Style Grid)