prprompts-flutter-generator: Command for Claude Code

Generate Phase 2: Quality & Security (v2.0)

Overview

Generate the 12 quality and security PRPROMPTS files following v2.0 strict PRP pattern.

Input

Read: docs/PRD.md - Extract YAML frontmatter for customization.

V2.0 SPECIFICATION

PRP Pattern (MANDATORY)

Every file MUST follow this exact 6-section structure:

## FEATURE
What this guide helps you accomplish

## EXAMPLES
Real code with actual file paths

## CONSTRAINTS
✅ DO / ❌ DON'T rules

## VALIDATION GATES
Manual checklist + automated CI checks

## BEST PRACTICES
Junior-friendly "Why?" explanations

## REFERENCES
Official docs, compliance guides, ADRs

Quality Requirements

• ✅ Length: 500-600 words per file
• ✅ No Placeholders: All content actionable
• ✅ Real Examples: Actual code, commands, workflows
• ✅ Junior-Friendly: Explain rationale
• ✅ Security-Critical: Double-check HIPAA/PCI-DSS/GDPR patterns

Output

IMPORTANT: All files MUST go inside the PRPROMPTS/ folder.

Files to Generate (12 files, numbered 11-22)

1. 11-git_branching_strategy.md (500-600 words)

   • Feature branches, PR reviews, Git Flow
   • Branch naming: feature/, fix/, hotfix/
   • 2 approvals required

2. 12-progress_tracking_workflow.md (500-600 words)

   • Jira/Linear/GitHub Projects
   • Sprint planning, story points
   • All PRs must reference issues

3. 13-multi_team_coordination.md (500-600 words)

   • API contracts, shared libraries
   • Downstream approval for breaking changes
   • Adapt to team size from PRD

4. 14-security_audit_checklist.md (500-600 words)

   • No secrets in code, HTTPS only
   • git secrets --scan
   • OWASP Mobile Top 10

5. 15-release_management.md (500-600 words)

   • App Store submission, versioning
   • TestFlight/Firebase beta
   • QA signoff required

6. 16-security_and_compliance.md (500-600 words) ⭐ CRITICAL - PRD-CUSTOMIZED

   • MUST adapt based on PRD's compliance field
   • HIPAA: PHI encryption (AES-256-GCM), audit logging

     final encrypted = await _encryptor.encrypt(
       patientData, key: await _secureStorage.getEncryptionKey());
     await _db.insert('patients', {'data': encrypted});
     

   • PCI-DSS: Payment tokenization (Stripe/PayPal), NEVER store full cards

     final last4 = cardNumber.substring(cardNumber.length - 4);
     await _db.insert('cards', {'last4': last4, 'token': stripeToken});
     

   • GDPR: Consent management, right to erasure
   • JWT: Verification only (NO signing in Flutter)

     Future<bool> verifyToken(String token) async {
       final jwt = JWT.verify(token, RSAPublicKey(publicKey),
         audience: Audience(['my-app']), issuer: 'api.example.com');
       return jwt.payload['exp'] > DateTime.now().millisecondsSinceEpoch / 1000;
     }