prprompts-flutter-generator: Command for Claude Code

Generate Phase 1: Core Architecture (v2.0)

Overview

Generate the 10 core architecture PRPROMPTS files following v2.0 strict PRP pattern.

Input

Read: docs/PRD.md - Extract YAML frontmatter for customization.

V2.0 SPECIFICATION

PRP Pattern (MANDATORY)

Every file MUST follow this exact 6-section structure:

## FEATURE
What this guide helps you accomplish

## EXAMPLES
Real code with actual file paths (e.g., lib/features/login/presentation/login_page.dart)

## CONSTRAINTS
✅ DO / ❌ DON'T rules

## VALIDATION GATES
Manual checklist + automated CI checks

## BEST PRACTICES
Junior-friendly explanations with "Why?" sections

## REFERENCES
Official docs, compliance guides, internal ADRs

Quality Requirements

• ✅ Length: 500-600 words per file
• ✅ No Placeholders: Replace all [...], {feature_name}, TODO
• ✅ Real Examples: Actual Flutter file paths
• ✅ Junior-Friendly: Explain "why" behind every rule
• ✅ Validation Gates: Specify tests/docs/reviews required

Critical Security Corrections (v2.0)

1. JWT: NEVER show Flutter signing tokens. Only verification with public key (RS256).
2. PCI-DSS: NEVER store full credit card numbers. Use tokenization (Stripe/PayPal).
3. HIPAA: Always encrypt PHI at rest (AES-256-GCM).

Output

IMPORTANT: All files MUST go inside the PRPROMPTS/ folder.

Files to Generate (10 files)

1. 01-feature_scaffold.md (500-600 words)

   • Clean Architecture + BLoC pattern
   • Folder structure: lib/features/{feature_name}/
   • Real examples with actual paths
   • Dependency rules: domain → no external imports

2. 02-responsive_layout.md (500-600 words)

   • Adaptive UI: LayoutBuilder, MediaQuery, breakpoints
   • Mobile/tablet/desktop patterns
   • Test on 3 screen sizes

3. 03-bloc_implementation.md (500-600 words)

   • BLoC vs Cubit decision matrix
   • Complex state → BLoC, Simple → Cubit
   • on<Event> pattern, NO emit in constructor

4. 04-api_integration.md (500-600 words) ⚠️ CRITICAL

   • Dio/Retrofit setup, JWT verification only
   • ❌ NEVER sign tokens in Flutter
   • ✅ Verify with RSAPublicKey, check aud/iss/exp
   • Include example:

     Future<bool> verifyToken(String token) async {
       final jwt = JWT.verify(token, RSAPublicKey(publicKey),
         audience: Audience(['my-app']), issuer: 'api.example.com');
       return jwt.payload['exp'] > DateTime.now().millisecondsSinceEpoch / 1000;
     }