npx claudepluginhub xoai/sageThis skill uses the workspace's default tool permissions.
**Layer 1 — Domain Foundation**
Guides Firebase development covering Auth, Firestore, Realtime Database, Cloud Functions, Storage, and Hosting. Addresses security rules, denormalized data modeling, query limits, and cost pitfalls.
Guides secure Firebase backends: auth, Firestore, Realtime DB, Cloud Functions, Storage, Hosting; focuses on security rules, denormalized data models, and SDK best practices.
Initializes Next.js + Tailwind projects with bkend.ai BaaS integration for authentication, MongoDB database, REST APIs, and real-time features. Offers guide and help actions.
Share bugs, ideas, or general feedback.
Layer 1 — Domain Foundation
Universal Backend-as-a-Service principles that apply regardless of platform. Firebase, Supabase, Appwrite — these principles hold.
BaaS is a fundamentally different architecture from custom backends. There are no controllers, no middleware, no routes. The client talks directly to platform services, and security rules replace the API layer. Agents trained on custom backend patterns (Express, Django) apply those patterns to BaaS — building REST APIs in Cloud Functions, normalizing data for a database that can't JOIN, and treating security as a client-side concern. Every pattern in this pack corrects a specific failure that arises from applying custom-backend thinking to BaaS.
| Type | Count | Coverage |
|---|---|---|
| Patterns | 8 | Security rules as auth, data modeling for queries, minimize functions, real-time by default, platform auth, offline support, typed models, cost management |
| Anti-patterns | 7 | Open rules in production, REST API in functions, client-side auth, relational normalization in NoSQL, untyped raw data, one-time fetches everywhere, no billing awareness |
| Constitution | 8 | principles |
Grounded in: Firebase official docs, Supabase official docs, Firebase security checklist, ModernPentest security research (2024-2025), Fireship data modeling guides, and community best practices.
Loads when the project is detected as using a BaaS platform (Firebase SDK, Supabase client, or similar in dependencies).
firebase, supabase)stack-flutter-firebase, etc.)api for custom API development)