Migrating a Tauri app to TypeScript 7 and Oxlint
How I replaced ESLint and typescript-eslint with Oxlint to unlock the native TypeScript 7 compiler in a Vite + Tauri repo.
Blog
10⁻¹X Engineer stuff.
Managing the Android SDK as a mise dependency
Moving a Tauri Android setup from an Android Studio Mac to a headless Debian VM by pinning the SDK as a mise tool.
From a 6.2GB baked toolchain image to boot-time installs from repo lockfiles
I removed the per-repo toolchain from my Gondolin dev VM image and made each repo install its own tools at boot from its mise.lock.
Fixing pi's TUI: clipboard and file drops over SSH, and scrollback wipes
How I got image paste and file drag-and-drop working in pi over SSH from kitty, and stopped pi's regular TUI mode from wiping scrollback, without forking pi.
Crash-Safe Submissions Against a Flaky External API
How I made submissions to a slow, unreliable governmental API safe to crash and safe to retry, with a submission state machine, a ShedLock-guarded recovery cron, an idempotency guard, and a full audit trail.
Offline-First React Native: Replacing Custom Sync Queues with PowerSync
How I replaced a fragile hand-rolled API retry queue with a local-first SQLite sync layer, and the per-user sync rules and server-authoritative upload model that kept it correct.
aube blocks renovate installs on a @yarnpkg/libzip trust downgrade
mise's embedded aube installer refuses to install renovate because @yarnpkg/libzip@3.2.2 lost the provenance attestation its 3.2.0 release had.
RENOVATE_SCHEDULE loses to repo config; RENOVATE_FORCE wins
Self-hosted Renovate parses RENOVATE_* env vars for almost every option, but repository config is merged over env values; only the bot-admin force object overrides the merged result.
Daily runs, weekly batches: splitting Renovate's trigger from its policy on self-hosted GitLab
A single daily GitLab schedule keeps Renovate's vulnerability detection fast while a repository-level schedule window collapses routine dependency churn into one weekly review batch.
A Deploy Script Was Silently Rolling Back Our Let's Encrypt Renewals
An unconditional S3 snapshot restore on every deploy rolled back Let's Encrypt renewals until an expired certificate wedged CertMagic at boot.
Antigravity CLI discovers global skills in ~/.gemini/config/skills, not ~/.gemini/skills
Antigravity CLI's TUI displays global and shared skill paths that the engine ignores, but linking ~/.agents/skills into ~/.gemini/config/skills makes them machine-wide.
Next.js 16.3 writes CLAUDE.md unless you commit AGENTS.md
Next.js auto-generates agent files when it detects an AI agent, but a committed AGENTS.md with its managed block stops CLAUDE.md from ever being scaffolded.
Renewing Proton Pass CLI PAT Sessions with macOS Keychain
Proton Pass PAT sessions expire after two hours, but a scoped PAT in the macOS login Keychain can renew them without exposing it in shell history.
Where to put git worktrees when you have many repos
Comparing three git worktree layouts for many local repos, and why I settled on ~/worktrees/<repo>/<slug>.
How I split a shared Bash and Zsh configuration without changing startup behavior
I reorganized a shared shell configuration into XDG-aligned domain modules while preserving startup order, behavior, and warm-shell performance.