DevOps & Infra Skill
Bash Defensive Patterns
Master defensive Bash programming techniques for production-grade scripts.
$15
Bazel Build Optimization
Optimize Bazel builds for large-scale monorepos.
Turn a slow, flaky monorepo into a fast, reproducible build machine. This skill applies production Bazel patterns: hermetic sandboxing, content-addressable caching, remote execution and fine-grained target decomposition, so your team stops waiting on rebuilds and starts shipping. Built for JavaScript/TypeScript and Python monorepos that have outgrown npm and webpack.
$15 one-time
Add to a kit → Prices include 20% VAT. · Forged on real agency work · one-time, no lock-in
- Type Skill
- Category DevOps & Infra
- Delivery Email · instant
- License One-time
Inside the run · no black box
See the actual work before you buy it.
The actual optimization loop the skill runs on a large Bazel monorepo, in order:
- Pins the build for reproducibility first: every http_archive in WORKSPACE.bazel gets a mandatory sha256, the Bazel version is locked in .bazelversion, and toolchains (for example Node 20.9.0) are registered at fixed versions so the same source always produces byte-identical output.
- Layers .bazelrc configs: local disk and repository caches, jobs and CPU/RAM resource limits, then named configs for remote-cache, remote-exec and CI so each environment opts into exactly the caching tier it needs.
- Decomposes BUILD files into fine-grained targets: one library per target with explicit srcs and deps instead of broad globs, plus visibility restrictions so architectural boundaries fail at compile time rather than at runtime.
- Measures the dependency graph with bazel query: rdeps shows what rebuilds when a target changes, and the graph output reveals targets whose blast radius is too wide and should be split further.
- Diagnoses cache misses with --execution_log_json_file and --profile: actions that rerun despite unchanged code usually leak a volatile input (timestamp, env var), which gets removed with strict_action_env and hermetic sandboxing.
- Scales out with remote execution: platform targets define worker container images and exec_properties, hundreds of jobs run in parallel, and determinism is proven by rebuilding with --noremote_accept_cached and comparing outputs byte for byte.
One power source. 6 lines out.
bazel-build-optimization · core
core active · 6 lines
- ✓ setting up bazel for a m…
Setting up Bazel for a multi-language monorepo
- ✓ configuring remote cache
Configuring remote cache and remote execution (RBE)
- ✓ cutting ci build time with
Cutting CI build time with shared artifact caching
- ✓ writing custom bazel rules
Writing custom Bazel rules (e.g. Docker image builds)
- ✓ debugging cache misses and
Debugging cache misses and non-deterministic builds
- ✓ migrating an existing repo
Migrating an existing repo onto Bazel incrementally
Yours to keep.
Drag time forward. Watch what stays.
Forever
That's what owning means.
The rented stack
ai writing tool: subscription
expired · access lostanalytics suite: subscription
expired · access lostdesign platform: subscription
expired · access lost(nothing left)
Your forge
-
Slash CI build time 50-80% by sharing cache across workers
license: perpetual -
Guarantee byte-for-byte reproducible builds across every machine
license: perpetual -
Rebuild only what changed with fine-grained target granularity
license: perpetual -
Enforce architecture boundaries at build time via visibility rules
license: perpetual
subscriptions expire · deeds don't
Everything in the box.
Pick a piece up. Watch it work.
Ready-to-use WORKSPACE.bazel and .bazelrc configuration templates
6 parts · one working system · ships instantly by email
This wasn't forged for everyone.
- Not for you if you'd rather rent a tool than own one.
- Not for you if you want someone else to run your stack.
- Not for you if you're happy guessing.
Platform and DevOps engineers maintaining large-scale JS/TS or Python monorepos where build speed and reproducibility have become the bottleneck.
then this was forged for you.Works with
Universal by design: these run in any AI. Delivered in the open Agent Skills + MCP format (native in Claude); ChatGPT, Gemini, Cursor and Copilot adapt the same files their own way.
- Claude Native format
- ChatGPT Adapts via open standards
- Gemini Adapts via open standards
- Cursor Adapts via open standards
- Copilot Adapts via open standards
Catch what's on your mind.
the air is clear. nothing between you and the forge.
catch a spark: the forge will answer
-
Do I have to convert the entire monorepo to Bazel before I see any benefit?
Bazel needs explicit BUILD targets, so it's not a drop-in, but fine-grained target decomposition lets you bring packages over incrementally. The caching and remote execution payoff grows as more of the graph is defined.
-
Remote caching sounds risky, how do I know a cache hit actually matches a fresh build?
That's exactly why hermetic sandboxing comes first here. When every action declares its inputs and runs isolated, a cache hit is provably identical to rebuilding, which is what makes the shared cache safe to trust.
-
Is this worth setting up for a small single-language repo?
Usually not, the hermeticity and target setup cost outweighs the gain until you have a large or multi-language monorepo. The speedups here scale with size and build-graph complexity, not small projects.
-
How is it delivered?
By email right after purchase: ready to run, downloaded instantly, no setup wait.
-
One-time or subscription?
A one-time purchase; no subscription or hidden fees. VAT (20%) is included.
-
Can I get a refund?
As a digital product, it can’t be refunded once downloaded. That’s why we show exactly what’s inside and who it’s for, right here.