Vault — Claude Code Plugin v1.0.0

A multi-agent development plugin for Vault, a cross-platform subscription tracker, password manager, and secure file storage app built with Flutter 3.29+, Dart 3.6+, Riverpod 3, Drift (SQLCipher), GoRouter, and Freezed.

18 agents · 12 skills · 3 commands

Installation

# From GitHub
/plugin install https://github.com/npranson/vault-plugin

# Local development
claude --plugin-dir /path/to/vault-plugin

Architecture

┌──────────────────────────────────────────────────────────────────────────────┐
│                          SLASH COMMANDS                                      │
│    /brainstorm → /implement → /pr-review                                     │
└────────┬────────────────────┬───────────────────────────┬────────────────────┘
         │                    │                           │
         ▼                    ▼                           ▼
 ┌────────────────┐  ┌────────────────┐  ┌──────────────────────────────────────┐
 │    PLANNER     │  │    CODING      │  │      REVIEW ORCHESTRATOR             │
 │                │  │    AGENTS      │  │      (flutter-reviewer)              │
 │ modern-        │  │                │  │                                      │
 │ standards-     │  │ db-engineer    │  │  ┌─ security-reviewer                │
 │ planner        │  │ logic-engineer │  │  ├─ performance-reviewer             │
 │ (Context7 +    │  │ ui-engineer    │  │  ├─ accessibility-auditor            │
 │  web search)   │  │                │  │  └─ platform-parity-auditor         │
 │                │  │                │  │                                      │
 └────────────────┘  └────────────────┘  └──────────────────────────────────────┘
         │                    │                           │
         ▼                    ▼                           ▼
 ┌──────────────────────────────────────────────────────────────────────────────┐
 │  jira-manager (ALWAYS parallel — ticket creation, updates, Epic linking)     │
 └──────────────────────────────────────────────────────────────────────────────┘
         │                    │                           │
         ▼                    ▼                           ▼
 ┌──────────────────────────────────────────────────────────────────────────────┐
 │                     AUTO-TRIGGERING SKILLS                                   │
 │  drift-patterns · riverpod-patterns · flutter-widgets · freezed-models ·    │
 │  gorouter-navigation · encryption-patterns · error-handling · flutter-tdd · │
 │  accessibility-patterns · platform-adaptive · agent-orchestration ·         │
 │  dart-analysis                                                              │
 └──────────────────────────────────────────────────────────────────────────────┘

Agents (18)

Review Agents (run in parallel via orchestrator)

Agent	Specialization
flutter-reviewer	Orchestrator — spawns all 4 reviewers, runs code quality audit, synthesizes unified verdict
security-reviewer	Encryption correctness, credential exposure, secure storage, key derivation, clipboard, CI pipeline
performance-reviewer	UI thread responsiveness, widget rebuild efficiency, Drift query performance, crypto isolation
accessibility-auditor	Semantics labels, tap targets, color contrast, keyboard navigation, screen reader compatibility
platform-parity-auditor	Cross-platform consistency (iOS, Android, macOS, Windows, Linux, Web)

Coding Agents (invoked per-layer during implementation)

Agent	Domain
db-engineer	Drift table definitions, DAOs, SQLCipher setup, migrations, reactive queries
logic-engineer	Riverpod notifiers, repository interfaces, encryption services, sync orchestration
ui-engineer	Flutter widgets (Material 3), responsive layouts, GoRouter, accessibility, animations

Stakeholder Persona Agents (used during brainstorming)

Agent	Perspective
smb-entrepreneur	SMB founder (15-person firm, 200+ passwords, 40+ subscriptions) — evaluates speed, workflow, cost
enterprise-stakeholder	IT director (2000-person org) — evaluates compliance, admin control, scale, SSO/MDM, security

Planning, Tracking & Utility Agents

Agent	Purpose
modern-standards-planner	Researches current best practices via Context7 (pre-loaded library IDs) + web search; creates planning docs
jira-manager	Ticket lifecycle — creation, Epic linking, milestone updates, follow-up tickets (uses Atlassian MCP)
tester	Test strategy, flutter_test patterns, mocktail, Riverpod testing, coverage analysis
code-simplifier	Code quality — removes complexity, fixes Dart idioms, enforces style limits
build-fixer	Diagnoses Flutter build failures, pub conflicts, build_runner errors, platform-specific issues
ci-engineer	GitHub Actions workflows, multi-platform build matrix, code signing, deployment
docs-engineer	README, architecture docs, DartDoc, planning documents
release-manager	Semantic versioning, changelog, multi-platform release preparation

Skills (12) — Auto-activate based on context

Skill	Triggers When
drift-patterns	Database models, tables, DAOs, migrations, SQLCipher
riverpod-patterns	Providers, notifiers, state management, dependency injection
flutter-widgets	Building views, Material 3, responsive layouts, state rendering
freezed-models	Data classes, union types, JSON serialization
gorouter-navigation	Routing, deep links, auth guards, shell routes
encryption-patterns	AES-256-GCM, key derivation, secure storage, SQLCipher
error-handling	Failure types, AsyncValue, logging, Result pattern
flutter-tdd	Writing tests, mocktail, ProviderContainer, widget tests
accessibility-patterns	Semantics, tap targets, contrast, keyboard nav
platform-adaptive	Responsive layouts, platform detection, conditional features
agent-orchestration	Coordinating multi-agent workflows, parallel execution strategy
dart-analysis	Static analysis, linting, analysis_options.yaml

Commands (3)

Command	Usage
/vault:brainstorm	Design feature → Context7 research → stakeholder review → spec → plan document → Jira ticket
/vault:implement	Plan → db → logic → ui (layered agents) → multi-agent review → Jira updates
/vault:pr-review	All 4 reviewers + code quality in parallel → unified verdict → Jira logged

Parallel Execution

Agents are designed for flexible parallel execution in any combination. The agent-orchestration skill defines dependency rules:

• Always parallel: All review agents run simultaneously. jira-manager runs alongside everything.
• Layered coding: db-engineer → logic-engineer → ui-engineer (chained by dependency, but each can parallelize with jira-manager)
• Any subset: Request any combination — "just run security and performance reviewers", "only the db-engineer", etc.
• Reactive agents: build-fixer and code-simplifier fire on demand, not as part of standard pipeline.

Mandatory Processes (from project CLAUDE.md)

The plugin enforces these non-negotiable processes:

1. Planning document — docs/planning/FEATURE_NAME_PLAN.md for every feature (no exceptions)
2. Context7 usage — Mandatory for code generation, setup, config, API docs lookup
3. Jira ticket hygiene — Every change tracked, updated throughout, with Epic association
4. Platform parity — Features work across iOS, Android, macOS, Windows, Linux, Web
5. Accessibility — Every UI element gets a11y support (mandatory per CLAUDE.md)
6. Security invariants — SQLCipher encryption, flutter_secure_storage for keys, no secrets in logs
7. Dart analysis compliance — flutter analyze zero issues, dart format compliance
8. Riverpod 3 patterns — @riverpod code generation, no setState, no deprecated StateNotifier

Hooks

The plugin includes PostToolUse hooks that run automatically:

Hook	Trigger	Behavior
dart-lint-check.sh	After Write/Edit	Format check, anti-pattern detection, secret logging scan — blocks on critical violations
flutter-build-verify.sh	After Bash	Detects build/analyze commands and reminds to verify results
test-runner.sh	After Bash	Detects test commands and reminds to verify results

Baked-In Knowledge

Agents come pre-loaded with Context7 research for the stack:

• Riverpod 3: @riverpod code generation, AsyncNotifier, AsyncValue.guard(), ProviderContainer testing
• Drift: Type-safe queries, watch() reactive streams, SQLCipher encryption with plaintext header, versioned migrations
• Flutter MVVM: ConsumerWidget, pattern matching on AsyncValue, Material 3, responsive layouts
• Freezed: @freezed immutable classes, sealed unions, copyWith, JSON serialization
• GoRouter: StatefulShellRoute, auth redirects, deep linking, type-safe parameters
• Context7 library IDs: Pre-resolved (/websites/flutter_dev, /rrousselgit/riverpod, /simolus3/drift, /rrousselgit/freezed, /websites/pub_dev_go_router, /websites/pub_dev_packages_flutter_secure_storage) — agents skip the resolve step

License

MIT