cli-tools

Use `gh run list` to find the workflow run, then `gh run view <id> --log` to pull the full CI logs directly instead of guessing why a check failed. `gh pr checks` shows status before merging.

Use `pnpm -w` for workspace-root commands and `pnpm --filter <pkg>` to target a specific package. Use `pnpm exec <bin>` for locally installed binaries and `pnpm dlx <pkg>` for one-off runs without adding a dependency.

Use `tilt ci` in unattended or dark-factory contexts because it runs resources to completion and exits, unlike the long-running `tilt up`. Use `tilt up --stream=true` or `tilt logs` when you need to follow output non-interactively.

Use `doppler run -- <command>` to inject secrets as environment variables only for that command's duration, rather than exporting them into the shell. Never echo secret values into logs or commit them to files.

The default namespace from the current context can silently differ between environments, causing commands to target the wrong resources. Always pass `-n <namespace>` explicitly for get, logs, describe, and apply operations.

Never amend a commit another agent might be building on, and never force-push a shared branch — revert instead. In shared working trees, commit before yielding a turn so other agents can see your work.