AI Workflow Configuration

Centralized AI assistant configurations for WordPress plugin development.

Overview

This repository contains configuration files that help AI assistants understand your codebase, follow your coding standards, and maintain consistent code quality.

Folder Structure

ai-workflow/
├── .claude/                # Claude Code CLI
│   ├── instructions.md     # Coding standards 
│   ├── settings.local.json # Local permissions
│   ├── agents/             # Specialized agents
│   │   ├── code-reviewer.md
│   │   └── wordpress-plugin-engineer.md
│   ├── commands/           # Slash commands
│   │   ├── start.md        # /start - Project analysis
│   │   ├── commit.md       # /commit - Smart commits
│   │   └── code-review.md  # /code-review - Security review
│   └── skills/             # Reusable skill definitions
│       ├── code-review/
│       └── wordpress-plugin-engineer/
│
└── README.md

Configuration Types

Folder	Tool	Purpose
.claude/	Claude Code CLI	Agents, commands, skills

Key Features

Coding Standards

All code must match @username patterns from the demo repository. The AI will:

• Analyze existing code before writing new code
• Match naming conventions, file structure, and architectural patterns
• Follow the same error handling and validation strategies

Security-First Development

Built-in checks for common WordPress vulnerabilities:

• SQL Injection (missing $wpdb->prepare())
• XSS (unescaped output)
• CSRF (missing nonce verification)
• Missing capability checks
• Hardcoded secrets

Automated Code Review

The /commit command automatically reviews code and blocks commits if:

• CRITICAL: SQL injection, XSS, hardcoded secrets, path traversal
• HIGH: Missing nonces, debug statements, REST endpoints without permission_callback

Quick Start

With Claude Code

# Start Claude Code
claude

# Analyze the project
/start

# Review your changes
/code-review

# Commit with auto-review
/commit

Tech Stack

Layer	Technology
Backend	WordPress, PHP, Laravel-style MVC
Frontend	Vue.js 3, Element Plus, Vite
Database	WordPress $wpdb, Migrations
Build	Vite, npm, Composer

Commands Reference

Command	Description
/start	Deep analysis of FluentMembers architecture
/code-review	Review git changes against security checklist
/commit	Smart commit with auto-review (blocks on issues)

Agents Reference

Agent	When to Use
code-reviewer	Review uncommitted/staged changes, PR reviews
wordpress-plugin-engineer	Plugin architecture, security, debugging

Severity Levels

Level	Action	Examples
CRITICAL	Must fix	SQL injection, XSS, hardcoded secrets
HIGH	Should fix	Missing nonces, debug statements
MEDIUM	Consider	Large functions, N+1 queries
LOW	Optional	Style issues, minor optimizations

License

Private configuration files for internal development use.