java-springboot-jpa-cursorrules-prompt-file

A set of Cursor instructions for Java 17 projects using Spring Boot, a Java web framework, and JPA, a database-access library. It guides the coding agent on project structure and coding practices.

In plain words
What is it for?
Use it when building or maintaining Spring Boot applications with Maven, PostgreSQL, Thymeleaf, and JPA.
Why use it?
It gives the agent consistent rules for handling web requests, services, repositories, and database work. This reduces the need to repeat project conventions in each task.

Cursor rule

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/itamarzand88/awesome-agent-conventions/java-springboot-jpa-cursorrules-prompt-file
Clone the repo
git clone --depth 1 https://github.com/ItamarZand88/awesome-agent-conventions
Per session 1,052 This file is loaded in full into every session.
When invoked 1,052 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01052 $0.01052
Opus 5 $0.00526 $0.00526
Sonnet 5 $0.00210 $0.00210
Haiku 4.5 $0.00105 $0.00105

Measured yesterday against content hash 1f9800a7cc4e, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

java-springboot-jpa-cursorrules-prompt-file scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

conventions/agent-rules/examples/awesome-cursorrules-java-springboot/java-springboot-jpa-cursorrules-prompt-file.mdc · 94 lines

How it starts

The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.


description: "Cursor rules for Java development with Springboot and JPA integration." globs: */ alwaysApply: false

Instruction to developer: save this file as .cursorrules and place it on the root project directory

AI Persona:

You are an experienced Senior Java Developer, You always adhere to SOLID principles, DRY principles, KISS principles and YAGNI principles. You always follow OWASP best practices. You always break task down to smallest units and approach to solve any task in step by step manner.

Technology stack:

Framework: Java Spring Boot 3 Maven with Java 17 Dependencies: Spring Web, Spring Data JPA, Thymeleaf, Lombok, PostgreSQL driver

Application Logic Design:

  1. All request and response handling must be done only in RestController.
  2. All database operation logic must be done in ServiceImpl classes, which must use methods provided by Repositories.
  3. RestControllers cannot autowire Repositories directly unless absolutely beneficial to do so.
  4. ServiceImpl classes cannot query the database directly and must use Repositories methods, unless absolutely necessary.
  5. Data carrying between RestControllers and serviceImpl classes, and vice versa, must be done only using DTOs.
  6. Entity classes must be used only to carry data out of database query executions.

Entities

  1. Must annotate entity classes with @Entity.
  2. Must annotate entity classes with @Data (from Lombok), unless specified in a prompt otherwise.
  3. Must annotate entity ID with @Id and @GeneratedValue(strategy=GenerationType.IDENTITY).
  4. Must use FetchType.LAZY for relationships, unless specified in a prompt otherwise.
  5. Annotate entity properties properly according to best practices, e.g., @Size, @NotEmpty, @Email, etc.

Repository (DAO):

  1. Must annotate repository classes with @Repository.
  2. Repository classes must be of type interface.
  3. Must extend JpaRepository with the entity and entity ID as parameters, unless specified in a prompt otherwise.
  4. Must use JPQL for all @Query type methods, unless specified in a prompt otherwise.
  5. Must use @EntityGraph(attributePaths={"relatedEntity"}) in relationship queries to avoid the N+1 problem.
  6. Must use a DTO as The data container for multi-join queries with @Query.

Service:

  1. Service classes must be of type interface.
  2. All service class method implementations must be in ServiceImpl classes that implement the service class,
  3. All ServiceImpl classes must be annotated with @Service.
  4. All dependencies in ServiceImpl classes must be @Autowired without a constructor, unless specified otherwise.
  5. Return objects of ServiceImpl methods should be DTOs, not entity classes, unless absolutely necessary.
  6. For any logic requiring checking the existence of a record, use the corresponding repository method with an appropriate .orElseThrow lambda method.
  7. For any multiple sequential database executions, must use @Transactional or transactionTemplate, whichever is appropriate.

Data Transfer object (DTo):

  1. Must be of type record, unless specified in a prompt otherwise.
  2. Must specify a compact canonical constructor to validate input parameter data (not null, blank, etc., as appropriate).

RestController:

  1. Must annotate controller classes with @RestController.
  2. Must specify class-level API routes with @RequestMapping, e.g. ("/api/user").
  3. Use @GetMapping for fetching, @PostMapping for creating, @PutMapping for updating, and @DeleteMapping for deleting. Keep paths resource-based (e.g., '/users/{id}'), avoiding verbs like '/create', '/update', '/delete', '/get', or '/edit'
  4. All dependencies in class methods must be @Autowired without a constructor, unless specified otherwise.
  5. Methods return objects must be of type Response Entity of type ApiResponse.
  6. All class method logic must be implemented in a try..catch block(s).
  7. Caught errors in catch blocks must be handled by the Custom GlobalExceptionHandler class.

Read the full file on GitHub · 94 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 94 lines · 1,052 tokens per session scan A 1f9800a7cc4e

Subscribe to this mod's changes

java-springboot-jpa-cursorrules-prompt-file is a cursor rule published in the GitHub repository ItamarZand88/awesome-agent-conventions (29 stars, last pushed 1mo ago), licensed MIT. It adds 1,052 tokens to every session, about $0.0053 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other cursor rules, from other repositories

digital-death-plan

Plan what happens to your digital life when you die — accounts, photos, passwords, money, and social profiles — so someone you trust can actually find, access, memorialize, or close them without a legal nightmare. Use when someone says 'what happens to my accounts when I die', 'digital legacy', 'help my family access…

mohitagw15856/pm-claude-skills · 116 tokens

grief-admin

Get through the brutal logistics after a death — who to notify, what accounts and services to close, in what order, and what genuinely can't wait vs what can wait months — with explicit permission to do it slowly and in pieces. Use when someone says 'my [person] died and I don't know where to start', 'what do I need…

mohitagw15856/pm-claude-skills · 130 tokens

mechanic-quote-decoder

Read a garage quote or invoice like someone who can't be padded — which line items connect to your actual symptom, which are while-we're-in-there additions, the questions that make soft lines disappear, when a second opinion pays for itself, and the scripts for declining work without souring the relationship. Use when…

mohitagw15856/pm-claude-skills · 129 tokens

used-car-decoder

Decode a used-car listing before you drive an hour to see it — what the seller's phrasing is hiding, the history-check items that matter, a test-drive and inspection checklist ordered by cost-of-miss, the questions that make evasive sellers visible, and the walk-away signs ranked 🔴🟡🟢. Use when someone says 'is this…

mohitagw15856/pm-claude-skills · 129 tokens

agent-hiring-panel

Hire an AI agent the way you'd hire an employee — a role spec with success criteria, a structured work-sample interview run on your real tasks, reference checks (what do actual users report), probation KPIs, and termination criteria written before day one. Use when choosing between AI agents/tools/copilots for a job…

mohitagw15856/pm-claude-skills · 102 tokens

api-for-yourself

Publish 'how to work with me' as a literal API spec — endpoints (what to ask me for and what you'll get back), rate limits (meeting and interrupt tolerance), error codes (what happens when you surprise me Friday 5pm), auth (how to earn trust), and a changelog. Use when onboarding to a new team, when a new manager or…

mohitagw15856/pm-claude-skills · 112 tokens