Vault — Claude Code Plugin v1.0.0
A multi-agent development plugin for Vault, a cross-platform subscription tracker, password manager, and secure file storage app built with Flutter 3.29+, Dart 3.6+, Riverpod 3, Drift (SQLCipher), GoRouter, and Freezed.
18 agents · 12 skills · 3 commands
Installation
# From GitHub
/plugin install https://github.com/npranson/vault-plugin
# Local development
claude --plugin-dir /path/to/vault-pluginArchitecture
┌──────────────────────────────────────────────────────────────────────────────┐
│ SLASH COMMANDS │
│ /brainstorm → /implement → /pr-review │
└────────┬────────────────────┬───────────────────────────┬────────────────────┘
│ │ │
▼ ▼ ▼
┌────────────────┐ ┌────────────────┐ ┌──────────────────────────────────────┐
│ PLANNER │ │ CODING │ │ REVIEW ORCHESTRATOR │
│ │ │ AGENTS │ │ (flutter-reviewer) │
│ modern- │ │ │ │ │
│ standards- │ │ db-engineer │ │ ┌─ security-reviewer │
│ planner │ │ logic-engineer │ │ ├─ performance-reviewer │
│ (Context7 + │ │ ui-engineer │ │ ├─ accessibility-auditor │
│ web search) │ │ │ │ └─ platform-parity-auditor │
│ │ │ │ │ │
└────────────────┘ └────────────────┘ └──────────────────────────────────────┘
│ │ │
▼ ▼ ▼
┌──────────────────────────────────────────────────────────────────────────────┐
│ jira-manager (ALWAYS parallel — ticket creation, updates, Epic linking) │
└──────────────────────────────────────────────────────────────────────────────┘
│ │ │
▼ ▼ ▼
┌──────────────────────────────────────────────────────────────────────────────┐
│ AUTO-TRIGGERING SKILLS │
│ drift-patterns · riverpod-patterns · flutter-widgets · freezed-models · │
│ gorouter-navigation · encryption-patterns · error-handling · flutter-tdd · │
│ accessibility-patterns · platform-adaptive · agent-orchestration · │
│ dart-analysis │
└──────────────────────────────────────────────────────────────────────────────┘Agents (18)
Review Agents (run in parallel via orchestrator)
| Agent | Specialization | |---|---| | flutter-reviewer | Orchestrator — spawns all 4 reviewers, runs code quality audit, synthesizes unified verdict | | security-reviewer | Encryption correctness, credential exposure, secure storage, key derivation, clipboard, CI pipeline | | performance-reviewer | UI thread responsiveness, widget rebuild efficiency, Drift query performance, crypto isolation | | accessibility-auditor | Semantics labels, tap targets, color contrast, keyboard navigation, screen reader compatibility | | platform-parity-auditor | Cross-platform consistency (iOS, Android, macOS, Windows, Linux, Web) |
Coding Agents (invoked per-layer during implementation)
| Agent | Domain | |---|---| | db-engineer | Drift table definitions, DAOs, SQLCipher setup, migrations, reactive queries | | logic-engineer | Riverpod notifiers, repository interfaces, encryption services, sync orchestration | | ui-engineer | Flutter widgets (Material 3), responsive layouts, GoRouter, accessibility, animations |
Stakeholder Persona Agents (used during brainstorming)
| Agent | Perspective | |---|---| | smb-entrepreneur | SMB founder (15-person firm, 200+ passwords, 40+ subscriptions) — evaluates speed, workflow, cost | | enterprise-stakeholder | IT director (2000-person org) — evaluates compliance, admin control, scale, SSO/MDM, security |
Planning, Tracking & Utility Agents
| Agent | Purpose | |---|---| | modern-standards-planner | Researches current best practices via Context7 (pre-loaded library IDs) + web search; creates planning docs | | jira-manager | Ticket lifecycle — creation, Epic linking, milestone updates, follow-up tickets (uses Atlassian MCP) | | tester | Test strategy, flutter_test patterns, mocktail, Riverpod testing, coverage analysis | | code-simplifier | Code quality — removes complexity, fixes Dart idioms, enforces style limits | | build-fixer | Diagnoses Flutter build failures, pub conflicts, build_runner errors, platform-specific issues | | ci-engineer | GitHub Actions workflows, multi-platform build matrix, code signing, deployment | | docs-engineer | README, architecture docs, DartDoc, planning documents | | release-manager | Semantic versioning, changelog, multi-platform release preparation |
Skills (12) — Auto-activate based on context
| Skill | Triggers When | |---|---| | drift-patterns | Database models, tables, DAOs, migrations, SQLCipher | | riverpod-patterns | Providers, notifiers, state management, dependency injection | | flutter-widgets | Building views, Material 3, responsive layouts, state rendering | | freezed-models | Data classes, union types, JSON serialization | | gorouter-navigation | Routing, deep links, auth guards, shell routes | | encryption-patterns | AES-256-GCM, key derivation, secure storage, SQLCipher | | error-handling | Failure types, AsyncValue, logging, Result pattern | | flutter-tdd | Writing tests, mocktail, ProviderContainer, widget tests | | accessibility-patterns | Semantics, tap targets, contrast, keyboard nav | | platform-adaptive | Responsive layouts, platform detection, conditional features | | agent-orchestration | Coordinating multi-agent workflows, parallel execution strategy | | dart-analysis | Static analysis, linting, analysis_options.yaml |
Commands (3)
| Command | Usage | |---|---| | /vault:brainstorm | Design feature → Context7 research → stakeholder review → spec → plan document → Jira ticket | | /vault:implement | Plan → db → logic → ui (layered agents) → multi-agent review → Jira updates | | /vault:pr-review | All 4 reviewers + code quality in parallel → unified verdict → Jira logged |
Parallel Execution
Agents are designed for flexible parallel execution in any combination. The agent-orchestration skill defines dependency rules:
- Always parallel: All review agents run simultaneously.
jira-managerruns alongside everything. - Layered coding:
db-engineer→logic-engineer→ui-engineer(chained by dependency, but each can parallelize withjira-manager) - Any subset: Request any combination — "just run security and performance reviewers", "only the db-engineer", etc.
- Reactive agents:
build-fixerandcode-simplifierfire on demand, not as part of standard pipeline.
Mandatory Processes (from project CLAUDE.md)
The plugin enforces these non-negotiable processes:
1. Planning document — docs/planning/FEATURE_NAME_PLAN.md for every feature (no exceptions) 2. Context7 usage — Mandatory for code generation, setup, config, API docs lookup 3. Jira ticket hygiene — Every change tracked, updated throughout, with Epic association 4. Platform parity — Features work across iOS, Android, macOS, Windows, Linux, Web 5. Accessibility — Every UI element gets a11y support (mandatory per CLAUDE.md) 6. Security invariants — SQLCipher encryption, flutter_secure_storage for keys, no secrets in logs 7. Dart analysis compliance — flutter analyze zero issues, dart format compliance 8. Riverpod 3 patterns — @riverpod code generation, no setState, no deprecated StateNotifier
Hooks
The plugin includes PostToolUse hooks that run automatically:
| Hook | Trigger | Behavior | |---|---|---| | dart-lint-check.sh | After Write/Edit | Format check, anti-pattern detection, secret logging scan — blocks on critical violations | | flutter-build-verify.sh | After Bash | Detects build/analyze commands and reminds to verify results | | test-runner.sh | After Bash | Detects test commands and reminds to verify results |
Baked-In Knowledge
Agents come pre-loaded with Context7 research for the stack:
- Riverpod 3:
@riverpodcode generation,AsyncNotifier,AsyncValue.guard(),ProviderContainertesting - Drift: Type-safe queries,
watch()reactive streams, SQLCipher encryption with plaintext header, versioned migrations - Flutter MVVM:
ConsumerWidget, pattern matching onAsyncValue, Material 3, responsive layouts - Freezed:
@freezedimmutable classes, sealed unions,copyWith, JSON serialization - GoRouter:
StatefulShellRoute, auth redirects, deep linking, type-safe parameters - Context7 library IDs: Pre-resolved (
/websites/flutter_dev,/rrousselgit/riverpod,/simolus3/drift,/rrousselgit/freezed,/websites/pub_dev_go_router,/websites/pub_dev_packages_flutter_secure_storage) — agents skip the resolve step
License
MIT
