56 results available
Sign in
Skills directory

flutter-apply-architecture-best-practices

flutter

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening applied 9 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 8. Review findings remaining: 2.


Open before hardening

1

Low
Open after hardening

1

Low

Expand
File
Group
Subtype
Severity
Status
LICENSE

Excessive Agency & Rogue Autonomy

—

Low
Open

1 finding


SKILL.md

Architecting Flutter Applications

Contents

  • Architectural Layers
  • Project Structure
  • Workflow: Implementing a New Feature
  • Examples

Architectural Layers

Enforce strict Separation of Concerns by dividing the application into distinct layers. Never mix UI rendering with business logic or data fetching.

UI Layer (Presentation)

Implement the MVVM (Model-View-ViewModel) pattern to manage UI state and logic.

  • Views: Write reusable, lean widgets. Restrict logic in Views to UI-specific operations (e.g., animations, layout constraints, simple routing). Pass all required data from the ViewModel.
  • ViewModels: Manage UI state and handle user interactions. Extend ChangeNotifier (or use Listenable) to expose state. Expose immutable state snapshots to the View. Inject Repositories into ViewModels via the constructor. Catch errors from Repositories in the ViewModel and expose an error state, so the View can show a distinct error message with a retry action, separate from the empty state.

Data Layer

Implement the Repository pattern to isolate data access logic and create a single source of truth.

  • Services: Create stateless classes to wrap external APIs (HTTP clients, local databases, platform plugins). Return raw API models or Result wrappers. Keep API keys and tokens out of source code, use HTTPS for network calls, and store tokens in platform secure storage.
  • Repositories: Consume one or more Services. Transform raw API models into clean Domain Models. Handle caching, offline synchronization, and retry logic. Expose Domain Models to ViewModels. Validate required fields, types, and lengths while transforming API models, and return an error or Result for malformed data. Keep any cache separate for each requested id, clear it when the user signs out or switches, and let refresh actions fetch fresh data.

Logic Layer (Domain - Optional)

  • Use Cases: Implement this layer only if the application contains complex business logic that clutters the ViewModel, or if logic must be reused across multiple ViewModels. Extract this logic into dedicated Use Case (interactor) classes that sit between ViewModels and Repositories.

Project Structure

Organize the codebase using a hybrid approach: group UI components by feature, and group Data/Domain components by type.

For existing projects, detect and keep the current state management, dependency injection, and folder conventions, and limit changes to the requested feature or files. Present any file moves or restructuring as a plan and get explicit user confirmation before acting, including before deleting files. Prefer gradual migration under version control.

lib/
├── data/
│   ├── models/         # API models
│   ├── repositories/   # Repository implementations
│   └── services/       # API clients, local storage wrappers
├── domain/
│   ├── models/         # Clean domain models
│   └── use_cases/      # Optional business logic classes
└── ui/
    ├── core/           # Shared widgets, themes, typography
    └── features/
        └── [feature_name]/
            ├── view_models/
            └── views/

Workflow: Implementing a New Feature

Follow this sequential workflow when adding a new feature to the application. Copy the checklist to track progress.

Task Progress

  • Step 1: Define Domain Models. Create immutable data classes for the feature using freezed or built_value. Check the project's existing dependencies first and prefer what is already in use. Ask the user before adding a new package or running a code generation step, and use explicit version constraints for any package added.
  • Step 2: Implement Services. Create or update Service classes to handle external API communication.
  • Step 3: Implement Repositories. Create the Repository to consume Services and return Domain Models.
  • Step 4: Apply Conditional Logic (Domain Layer).
    • If the feature requires complex data transformation or cross-repository logic: Create a Use Case class.
    • If the feature is a simple CRUD operation: Skip to Step 5.
  • Step 5: Implement the ViewModel. Create the ViewModel extending ChangeNotifier. Inject required Repositories/Use Cases. Expose immutable state and command methods.
  • Step 6: Implement the View. Create the UI widget. Use ListenableBuilder or AnimatedBuilder to listen to ViewModel changes.
  • Step 7: Inject Dependencies. Register the new Service, Repository, and ViewModel in the dependency injection container (e.g., provider or get_it). Use the container the project already has, and ask the user before adding a new package.
  • Step 8: Run Validator. Execute unit tests for the ViewModel and Repository.
    • Feedback Loop: Run tests -> Review failures -> Fix logic -> Re-run until passing.
    • Stop after at most three rounds and report any remaining failures to the user. Fix the implementation rather than the tests, and keep existing assertions intact unless the user approves a change. Run only the tests relevant to the feature.

Examples

Data Layer: Service and Repository

// 1. Service (Raw API interaction)
class ApiClient {
  Future<UserApiModel> fetchUser(String id) async {
    // HTTP GET implementation...
  }
}

// 2. Repository (Single source of truth, returns Domain Model)
class UserRepository {
  UserRepository({required ApiClient apiClient}) : _apiClient = apiClient;
  
  final ApiClient _apiClient;
  User? _cachedUser;

  Future<User> getUser(String id) async {
    
    final apiModel = await _apiClient.fetchUser(id);
    _cachedUser = User(id: apiModel.id, name: apiModel.fullName); // Transform to Domain Model
    return _cachedUser!;
  }
}

UI Layer: ViewModel and View

// 3. ViewModel (State management and presentation logic)
class ProfileViewModel extends ChangeNotifier {
  ProfileViewModel({required UserRepository userRepository}) 
      : _userRepository = userRepository;

  final UserRepository _userRepository;

  User? _user;
  User? get user => _user;

  bool _isLoading = false;
  bool get isLoading => _isLoading;

  Future<void> loadProfile(String id) async {
    _isLoading = true;
    notifyListeners();

    try {
      _user = await _userRepository.getUser(id);
    } finally {
      _isLoading = false;
      notifyListeners();
    }
  }
}

// 4. View (Dumb UI component)
class ProfileView extends StatelessWidget {
  const ProfileView({super.key, required this.viewModel});

  final ProfileViewModel viewModel;

  @override
  Widget build(BuildContext context) {
    return ListenableBuilder(
      listenable: viewModel,
      builder: (context, _) {
        if (viewModel.isLoading) {
          return const Center(child: CircularProgressIndicator());
        }
        
        final user = viewModel.user;
        if (user == null) {
          return const Center(child: Text('User not found'));
        }

        return Column(
          children: [
            Text(user.name),
            ElevatedButton(
              onPressed: () => viewModel.loadProfile(user.id),
              child: const Text('Refresh'),
            ),
          ],
        );
      },
    );
  }
}

Install

Install with chainctl
chainctl skill install public/flutter/flutter-apply-architecture-best-practices:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/flutter/skills
Upstream commitc4bef098ef2fb69366bf1091bfc102d1103cecc1
OCI reference

skills.cgr.dev/public/github.com/flutter/skills/flutter-apply-architecture-best-practices:latest

License

BSD-3-Clause

Files

HARDENING.md

LICENSE

SKILL.md


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.