pocketbase-best-practices

42 rules across 8 categories for PocketBase v0.36+, prioritized by impact. Try these with your AI agent to see the skill in action: Building a new feature: Fixing issues: Security review: Going to production: Load the relevant category for complete rule documentation with code examples: - coll-field-types : Use appropriate field types (json for objects, select for enums) - coll-auth-vs-base : Extend auth collection for users, base for non-auth data - coll-relations : Use relation fields, not manual ID strings - coll-indexes : Create indexes on frequently filtered/sorted fields - coll-view-collections : Use views for complex aggregations - coll-geopoint : Store coordinates as json field with lat/lng - rules-basics : Always set API rules; empty = public access - rules-filter-syntax : Use @request.auth, @collection, @now in rules - rules-request-context : Access request data via @request.body, @request.query - rules-cross-collection : Use @collection.name.field for cross-collection checks - rules-locked-vs-open : Start locked, open selectively - auth-password : Use authWithPassword for email/password login - auth-oauth2 : Configure OAuth2 providers via Admin UI - auth-token-management : Store tokens securely, refresh before expiry - auth-mfa : Enable MFA for sensitive applications - auth-impersonation : Use impersonation for admin actions on behalf of users - sdk-initialization :...