Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Build backends with PocketBase collections, auth, and realtime.
Build backends with PocketBase collections, auth, and realtime.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Import from pocketbase not pocketbase/dist โ the dist path is internal and breaks on updates Always check pb.authStore.isValid before using pb.authStore.model โ expired tokens return stale data without error After login, token is auto-attached to requests โ no need to manually set Authorization headers
Use expand parameter to load relations: pb.collection('posts').getList(1, 20, { expand: 'author,comments' }) Expanded records appear in record.expand.fieldName โ not directly on the record object Filter syntax is SQL-like but uses single quotes: filter: "status = 'active' && created >= '2024-01-01'" Combine conditions with && and ||, not AND/OR โ SQL keywords don't work
Users collection is users (lowercase) โ _users or Users returns empty results authWithPassword(email, password) returns the full user record plus token OAuth flow: authWithOAuth2({ provider: 'google' }) opens popup automatically in browser Logout requires both pb.authStore.clear() and invalidating server-side if using tokens elsewhere
Subscribe with pb.collection('posts').subscribe('*', callback) โ the '*' means all record changes Callback receives { action: 'create'|'update'|'delete', record } โ check action before processing Always unsubscribe on cleanup: pb.collection('posts').unsubscribe() โ orphan subscriptions leak memory
Files require FormData, not JSON: formData.append('document', file) then pass to create() Get file URL with pb.files.getURL(record, record.filename) โ don't construct URLs manually Multiple files to same field: append with same key multiple times
Empty rule = blocked for everyone, "" (empty string) rule = open to everyone โ counterintuitive Use @request.auth.id to reference logged-in user, @request.data for submitted data Example restrict to owner: @request.auth.id = user.id in View/Update/Delete rules
JavaScript hooks go in pb_hooks/*.pb.js โ the .pb.js extension is required Hooks run synchronously and block the request โ keep them fast or use routines Access app with $app, event data with e โ common: e.record, e.httpContext
Admin endpoints need superuser auth, not regular user tokens Create admin token: pb.admins.authWithPassword(email, password) Admin operations use pb.admins or pb.collections, not pb.collection()
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.