Name: planning-architecture
Author: WillWhittakerDHP

Prompt file imported from WillWhittakerDHP/LEGACY_DHP_Differential_Scheduler (.cursor/commands/planning/templates/planning-architecture.md). Copyright stays with the author.

Architecture Planning Template

Purpose: Structure for architectural decisions and planning

Use When: Planning major architectural changes, system design decisions, or structural modifications

Architecture Decision: [Decision Name]

Date: [Date] Status: [Proposed | Approved | Rejected] Decision Maker: [Name/Role]

Context

Problem Statement: [Describe the problem or need that requires an architectural decision]

Constraints:

[Constraint 1]
[Constraint 2]
[Constraint 3]

Requirements:

[Requirement 1]
[Requirement 2]
[Requirement 3]

Alternatives Considered

Alternative 1: [Name]

Description: [Describe this architectural approach]

Pros:

[Advantage 1]
[Advantage 2]
[Advantage 3]

Cons:

[Disadvantage 1]
[Disadvantage 2]
[Disadvantage 3]

Trade-offs:

[Trade-off 1]
[Trade-off 2]

Implementation Complexity: [Low | Medium | High]

Performance Impact: [Positive | Neutral | Negative]

Maintenance Impact: [Low | Medium | High]

Alternative 2: [Name]

Description: [Describe this architectural approach]

Pros:

[Advantage 1]
[Advantage 2]
[Advantage 3]

Cons:

[Disadvantage 1]
[Disadvantage 2]
[Disadvantage 3]

Trade-offs:

[Trade-off 1]
[Trade-off 2]

Implementation Complexity: [Low | Medium | High]

Performance Impact: [Positive | Neutral | Negative]

Maintenance Impact: [Low | Medium | High]

Alternative 3: [Name] (if applicable)

[Repeat structure above]

Decision

Selected Alternative: [Alternative Name]

Rationale: [Explain why this alternative was chosen over others. Reference specific requirements, constraints, or trade-offs that influenced the decision]

Key Factors:

[Factor 1 that influenced decision]
[Factor 2 that influenced decision]
[Factor 3 that influenced decision]

Risk Assessment

Technical Risks:

[Risk 1] - [Mitigation strategy]
[Risk 2] - [Mitigation strategy]
[Risk 3] - [Mitigation strategy]

Timeline Risks:

[Risk 1] - [Mitigation strategy]
[Risk 2] - [Mitigation strategy]

Resource Risks:

[Risk 1] - [Mitigation strategy]
[Risk 2] - [Mitigation strategy]

Implementation Plan

Phase 1: [Description]

Tasks: [Task list]
Timeline: [Timeline]
Dependencies: [Dependencies]

Phase 2: [Description]

Tasks: [Task list]
Timeline: [Timeline]
Dependencies: [Dependencies]

Phase 3: [Description]

Tasks: [Task list]
Timeline: [Timeline]
Dependencies: [Dependencies]

Security Considerations

SQL Injection Prevention

All database queries use parameterized queries/Sequelize methods
No string concatenation for SQL queries
Input validation before database operations
No use of sequelize.query() with user input in SQL strings

XSS Prevention

User input sanitized before rendering
React: Using React's built-in escaping (default behavior)
Vue: Using v-text or proper escaping for user content
No use of dangerouslySetInnerHTML or v-html with user input
Content Security Policy headers configured

Authentication/Authorization

All protected routes verify authentication
User permissions checked before data access
No sensitive data in client-side code
Session tokens properly secured

Input Validation

Server-side validation for all inputs
Type checking and schema validation (Joi/Zod)
Rate limiting on public endpoints
File upload validation (if applicable)

Secure Configuration

Environment variables for secrets (no hardcoded credentials)
HTTPS enforced in production
CORS properly configured
Security headers (helmet.js) configured

Security Validation

Run /security-audit to check for vulnerabilities
Review dependency vulnerabilities (/security-check-dependencies)
Check for exposed secrets (/security-check-secrets)
Validate security configuration (/security-check-config)
Verify CSRF protection (/security-check-csrf)
Check authentication patterns (/security-check-auth)
Review IDOR vulnerabilities (/security-check-idor)
Run ESLint security checks (/validate-security)

Note: Security audit is automatically run in /planning-plan-with-checks as Step 5. See .cursor/commands/security/QUICK_REFERENCE.md for command details.

Success Criteria

[Criterion 1]
[Criterion 2]
[Criterion 3]

References

[Reference document 1]
[Reference document 2]
[Related decision 1]

Notes

[Additional notes, concerns, or follow-up items]

# Architecture Planning Template **Purpose:** Structure for architectural decisions and planning **Use When:** Planning major architectural changes, system design decisions, or structural modifications --- ## Architecture Decision: [Decision Name] **Date:** [Date] **Status:** [Proposed | Approved | Rejected] **Decision Maker:** [Name/Role] ### Context **Problem Statement:** [Describe the problem or need that requires an architectural decision] **Constraints:** - [Constraint 1] - [Constraint 2] - [Constraint 3] **Requirements:** - [Requirement 1] - [Requirement 2] - [Requirement 3] --- ## Alternatives Considered ### Alternative 1: [Name] **Description:** [Describe this architectural approach] **Pros:** - [Advantage 1] - [Advantage 2] - [Advantage 3] **Cons:** - [Disadvantage 1] - [Disadvantage 2] - [Disadvantage 3] **Trade-offs:** - [Trade-off 1] - [Trade-off 2] **Implementation Complexity:** [Low | Medium | High] **Performance Impact:** [Positive | Neutral | Negative] **Maintenance Impact:** [Low | Medium | High] --- ### Alternative 2: [Name] **Description:** [Describe this architectural approach] **Pros:** - [Advantage 1] - [Advantage 2] - [Advantage 3] **Cons:** - [Disadvantage 1] - [Disadvantage 2] - [Disadvantage 3] **Trade-offs:** - [Trade-off 1] - [Trade-off 2] **Implementation Complexity:** [Low | Medium | High] **Performance Impact:** [Positive | Neutral | Negative] **Maintenance Impact:** [Low | Medium | High] --- ### Alternative 3: [Name] (if applicable) [Repeat structure above] --- ## Decision **Selected Alternative:** [Alternative Name] **Rationale:** [Explain why this alternative was chosen over others. Reference specific requirements, constraints, or trade-offs that influenced the decision] **Key Factors:** - [Factor 1 that influenced decision] - [Factor 2 that influenced decision] - [Factor 3 that influenced decision] --- ## Risk Assessment **Technical Risks:** - [Risk 1] - [Mitigation strategy] - [Risk 2] - [Mitigation strategy] - [Risk 3] - [Mitigation strategy] **Timeline Risks:** - [Risk 1] - [Mitigation strategy] - [Risk 2] - [Mitigation strategy] **Resource Risks:** - [Risk 1] - [Mitigation strategy] - [Risk 2] - [Mitigation strategy] --- ## Implementation Plan **Phase 1:** [Description] - Tasks: [Task list] - Timeline: [Timeline] - Dependencies: [Dependencies] **Phase 2:** [Description] - Tasks: [Task list] - Timeline: [Timeline] - Dependencies: [Dependencies] **Phase 3:** [Description] - Tasks: [Task list] - Timeline: [Timeline] - Dependencies: [Dependencies] --- ## Security Considerations ### SQL Injection Prevention - [ ] All database queries use parameterized queries/Sequelize methods - [ ] No string concatenation for SQL queries - [ ] Input validation before database operations - [ ] No use of `sequelize.query()` with user input in SQL strings ### XSS Prevention - [ ] User input sanitized before rendering - [ ] React: Using React's built-in escaping (default behavior) - [ ] Vue: Using v-text or proper escaping for user content - [ ] No use of `dangerouslySetInnerHTML` or `v-html` with user input - [ ] Content Security Policy headers configured ### Authentication/Authorization - [ ] All protected routes verify authentication - [ ] User permissions checked before data access - [ ] No sensitive data in client-side code - [ ] Session tokens properly secured ### Input Validation - [ ] Server-side validation for all inputs - [ ] Type checking and schema validation (Joi/Zod) - [ ] Rate limiting on public endpoints - [ ] File upload validation (if applicable) ### Secure Configuration - [ ] Environment variables for secrets (no hardcoded credentials) - [ ] HTTPS enforced in production - [ ] CORS properly configured - [ ] Security headers (helmet.js) configured ### Security Validation - [ ] Run `/security-audit` to check for vulnerabilities - [ ] Review dependency vulnerabilities (`/security-check-dependencies`) - [ ] Check for exposed secrets (`/security-check-secrets`) - [ ] Validate security configuration (`/security-check-config`) - [ ] Verify CSRF protection (`/security-check-csrf`) - [ ] Check authentication patterns (`/security-check-auth`) - [ ] Review IDOR vulnerabilities (`/security-check-idor`) - [ ] Run ESLint security checks (`/validate-security`) **Note:** Security audit is automatically run in `/planning-plan-with-checks` as Step 5. See `.cursor/commands/security/QUICK_REFERENCE.md` for command details. --- ## Success Criteria - [ ] [Criterion 1] - [ ] [Criterion 2] - [ ] [Criterion 3] --- ## References - [Reference document 1] - [Reference document 2] - [Related decision 1] --- ## Notes [Additional notes, concerns, or follow-up items]

{ "prompt": "# Architecture Planning Template\n\n**Purpose:** Structure for architectural decisions and planning\n\n**Use When:** Planning major architectural changes, system design decisions, or structural modifications\n\n---\n\n## Architecture Decision: [Decision Name]\n\n**Date:** [Date]\n**Status:** [Proposed | Approved | Rejected]\n**Decision Maker:** [Name/Role]\n\n### Context\n\n**Problem Statement:**\n[Describe the problem or need that requires an architectural decision]\n\n**Constraints:**\n- [Constraint 1]\n- [Constraint 2]\n- [Constraint 3]\n\n**Requirements:**\n- [Requirement 1]\n- [Requirement 2]\n- [Requirement 3]\n\n---\n\n## Alternatives Considered\n\n### Alternative 1: [Name]\n\n**Description:**\n[Describe this architectural approach]\n\n**Pros:**\n- [Advantage 1]\n- [Advantage 2]\n- [Advantage 3]\n\n**Cons:**\n- [Disadvantage 1]\n- [Disadvantage 2]\n- [Disadvantage 3]\n\n**Trade-offs:**\n- [Trade-off 1]\n- [Trade-off 2]\n\n**Implementation Complexity:** [Low | Medium | High]\n\n**Performance Impact:** [Positive | Neutral | Negative]\n\n**Maintenance Impact:** [Low | Medium | High]\n\n---\n\n### Alternative 2: [Name]\n\n**Description:**\n[Describe this architectural approach]\n\n**Pros:**\n- [Advantage 1]\n- [Advantage 2]\n- [Advantage 3]\n\n**Cons:**\n- [Disadvantage 1]\n- [Disadvantage 2]\n- [Disadvantage 3]\n\n**Trade-offs:**\n- [Trade-off 1]\n- [Trade-off 2]\n\n**Implementation Complexity:** [Low | Medium | High]\n\n**Performance Impact:** [Positive | Neutral | Negative]\n\n**Maintenance Impact:** [Low | Medium | High]\n\n---\n\n### Alternative 3: [Name] (if applicable)\n\n[Repeat structure above]\n\n---\n\n## Decision\n\n**Selected Alternative:** [Alternative Name]\n\n**Rationale:**\n[Explain why this alternative was chosen over others. Reference specific requirements, constraints, or trade-offs that influenced the decision]\n\n**Key Factors:**\n- [Factor 1 that influenced decision]\n- [Factor 2 that influenced decision]\n- [Factor 3 that influenced decision]\n\n---\n\n## Risk Assessment\n\n**Technical Risks:**\n- [Risk 1] - [Mitigation strategy]\n- [Risk 2] - [Mitigation strategy]\n- [Risk 3] - [Mitigation strategy]\n\n**Timeline Risks:**\n- [Risk 1] - [Mitigation strategy]\n- [Risk 2] - [Mitigation strategy]\n\n**Resource Risks:**\n- [Risk 1] - [Mitigation strategy]\n- [Risk 2] - [Mitigation strategy]\n\n---\n\n## Implementation Plan\n\n**Phase 1:** [Description]\n- Tasks: [Task list]\n- Timeline: [Timeline]\n- Dependencies: [Dependencies]\n\n**Phase 2:** [Description]\n- Tasks: [Task list]\n- Timeline: [Timeline]\n- Dependencies: [Dependencies]\n\n**Phase 3:** [Description]\n- Tasks: [Task list]\n- Timeline: [Timeline]\n- Dependencies: [Dependencies]\n\n---\n\n## Security Considerations\n\n### SQL Injection Prevention\n- [ ] All database queries use parameterized queries/Sequelize methods\n- [ ] No string concatenation for SQL queries\n- [ ] Input validation before database operations\n- [ ] No use of `sequelize.query()` with user input in SQL strings\n\n### XSS Prevention\n- [ ] User input sanitized before rendering\n- [ ] React: Using React's built-in escaping (default behavior)\n- [ ] Vue: Using v-text or proper escaping for user content\n- [ ] No use of `dangerouslySetInnerHTML` or `v-html` with user input\n- [ ] Content Security Policy headers configured\n\n### Authentication/Authorization\n- [ ] All protected routes verify authentication\n- [ ] User permissions checked before data access\n- [ ] No sensitive data in client-side code\n- [ ] Session tokens properly secured\n\n### Input Validation\n- [ ] Server-side validation for all inputs\n- [ ] Type checking and schema validation (Joi/Zod)\n- [ ] Rate limiting on public endpoints\n- [ ] File upload validation (if applicable)\n\n### Secure Configuration\n- [ ] Environment variables for secrets (no hardcoded credentials)\n- [ ] HTTPS enforced in production\n- [ ] CORS properly configured\n- [ ] Security headers (helmet.js) configured\n\n### Security Validation\n- [ ] Run `/security-audit` to check for vulnerabilities\n- [ ] Review dependency vulnerabilities (`/security-check-dependencies`)\n- [ ] Check for exposed secrets (`/security-check-secrets`)\n- [ ] Validate security configuration (`/security-check-config`)\n- [ ] Verify CSRF protection (`/security-check-csrf`)\n- [ ] Check authentication patterns (`/security-check-auth`)\n- [ ] Review IDOR vulnerabilities (`/security-check-idor`)\n- [ ] Run ESLint security checks (`/validate-security`)\n\n**Note:** Security audit is automatically run in `/planning-plan-with-checks` as Step 5. See `.cursor/commands/security/QUICK_REFERENCE.md` for command details.\n\n---\n\n## Success Criteria\n\n- [ ] [Criterion 1]\n- [ ] [Criterion 2]\n- [ ] [Criterion 3]\n\n---\n\n## References\n\n- [Reference document 1]\n- [Reference document 2]\n- [Related decision 1]\n\n---\n\n## Notes\n\n[Additional notes, concerns, or follow-up items]", "variables": [], "notes": "[Repeat structure above]", "metadata": { "source": { "provider": "github-cursor-commands", "repository": "https://github.com/WillWhittakerDHP/LEGACY_DHP_Differential_Scheduler", "path": ".cursor/commands/planning/templates/planning-architecture.md", "ref": "1d1659501a23cb4a6156c6e70e8ceb86e55b5663", "url": "https://github.com/WillWhittakerDHP/LEGACY_DHP_Differential_Scheduler/blob/1d1659501a23cb4a6156c6e70e8ceb86e55b5663/.cursor/commands/planning/templates/planning-architecture.md", "key": "WillWhittakerDHP/LEGACY_DHP_Differential_Scheduler/.cursor/commands/planning/templates/planning-architecture.md" } } }

planning-architecture

About