Best Practices
This guide covers security recommendations, workflow optimization, and tips for getting the most out of Calmo Local Bridge’s integrated environment.Security Recommendations
Command Approval Strategy
Review Before Approving
Always read the full command in the Command Approval panel before clicking Allow. Understand what it will do before execution.
Understand Risk Levels
Pay attention to risk indicators:
- 🟢 LOW = Safe reads
- 🟡 MEDIUM = State changes
- 🔴 HIGH = Potentially dangerous
Auto-Approve Patterns
Use Always strategically for low-risk, frequently-used commands: Safe patterns to auto-approve:Integrated Environment Workflows
Chat + Terminal + Files
The power of Calmo Bridge comes from using all three panels together: Workflow Example: Fixing a Configuration Bug- Chat (right): “The API deployment is failing in staging”
-
Terminal (center bottom): See logs appear
-
File Browser (left): Navigate to
kubernetes/staging/api/ -
Editor (center top): Open
deployment.yaml, spot the typo -
Edit the file: Fix
api-confg→api-config - Chat: “Apply the fixed deployment”
- Terminal: Watch the apply succeed
Context Switching Best Practices
Efficient Navigation:- Cmd/Ctrl+` - Toggle Terminal visibility
- Cmd/Ctrl+/ - Focus Chat input
- Click file in tree - Open in editor
- Click Terminal/Activity tabs - Switch views
- Keep relevant files open in tabs
- Use Terminal tab for active execution
- Switch to Activity tab to review history
- Minimize/maximize panels as needed
Using Workspaces Effectively
Organization:- Do
- Don't
✅ Add specific project directories✅ Use workspace categories
- Git Repositories for app code
- Terraform Projects for infrastructure
- CI/CD Pipelines for deployment configs
- 3-10 workspaces is ideal
- Remove when projects are archived
File Editing Strategy
When to edit in Bridge:- Quick config tweaks
- Viewing files during chat
- Small changes suggested by Calmo
- Files you want to reference in conversation
- Large refactorings
- Complex multi-file changes
- Debugging sessions
- Long coding sessions
The Bridge editor is designed for quick edits and AI collaboration, not as a full IDE replacement.
Workflow Optimization
Effective Prompting
Be specific when asking Calmo to run commands: Good prompts:- “Check the logs for the api-server pod in the staging namespace, last 50 lines”
- “Show me all pods in CrashLoopBackOff state across all namespaces”
- “List recent commits in this repo with their authors”
- “Check the logs” (which pod? which namespace?)
- “What’s wrong?” (too vague for targeted commands)
Batch Operations
For multiple related operations, ask Calmo to handle them sequentially:- Approve them one by one as you review
- Click Allow on all if they’re safe
- Deny any that look incorrect
Leveraging MCP Servers
Extend capabilities strategically:| Use Case | MCP Server | Benefit |
|---|---|---|
| Look up library docs | context7 | Get up-to-date documentation for any library |
| Access project docs | @mastra/mcp-docs-server | Quick reference to your framework docs |
| Complex problem-solving | sequential-thinking | Structured reasoning for debugging |
| GitHub operations | server-github | Create PRs, list issues, manage repos |
Development Workflows
Kubernetes Debugging
A streamlined debugging session:Get Overview
Auto-approve
kubectl get patterns for quick status checks.Chat: “Show me all pods in staging”Deep Dive
Auto-approve
kubectl describe and kubectl logs.Chat: “Describe the failing pod and show me its logs”Take Action
Manually approve any
kubectl delete, kubectl apply, or kubectl scale.Chat: “Delete the crashlooping pod to restart it”Review the command, then click Allow.Infrastructure Changes
For Terraform or Kubernetes manifest changes:- Edit in Bridge - Make changes to YAML/HCL files
- Preview first - Run
terraform planorkubectl diff(safe, auto-approve-able) - Review changes - Read the plan output in Terminal
- Apply intentionally - Manually approve
terraform applyorkubectl apply - Verify - Check resources with get commands
Git Operations
Safe to auto-approve:git status,git log,git diffgit branch -a,git remote -vgit show <commit>
git commit- Review commit messagegit push- Ensure correct branchgit merge- Understand what’s being mergedgit checkout- Verify branch/file changes
- Chat: “Show me the status and recent changes”
- Review output in Terminal
- Chat: “Commit these changes with message: fix: correct API endpoint”
- Review commit command, approve
- Chat: “Push to feature branch”
- Verify branch name, approve
Performance Tips
Keep Bridge Running
Maintain state and connections by keeping Bridge in the background:- Close window → Minimizes to menu bar/tray
- Connection persists → No re-pairing needed
- History preserved → Command and chat history available
- MCP servers stay connected → No reload time
- After updating Bridge version
- If memory usage is very high
- When troubleshooting connection issues
Manage Pending Commands
Don’t let commands queue indefinitely:- Approve or deny promptly - Review and decide
- Set up auto-approve for safe patterns
- Clear queue if needed - Deny commands you don’t need
Regular Cleanup
Clear Activity Log:- Click Clear in Activity tab when log grows large
- Doesn’t affect command history with Calmo
- Frees up memory
- Close file tabs you’re no longer referencing
- Cmd/Ctrl+W to close active tab
- Right-click → Close All to clear all tabs
Team Usage
If multiple team members use Local Bridge:Individual Setup
- Each person pairs their own machine - One Bridge per developer
- Personal approval patterns - Auto-approve lists are per-user
- Individual workspaces - Add your own project directories
Shared Standards
Document across your team: Auto-Approve Patterns:mcp.json template:
- Production systems → High scrutiny, minimal auto-approve
- Staging/dev → More auto-approve, faster iteration
- Local only → Maximum freedom
What to Avoid
Workflow Anti-Patterns:- ❌ Editing production configs without review
- ❌ Running commands blindly without reading them
- ❌ Adding workspaces you don’t actively use
- ❌ Keeping 50+ file tabs open
- ❌ Ignoring risk level indicators
Quick Reference
Risk Assessment Matrix
| Command Type | Risk | Auto-Approve? | Examples |
|---|---|---|---|
| Read operations | Low | ✅ Recommended | get, list, describe, logs, status, diff |
| Plan/preview | Low | ✅ Recommended | terraform plan, kubectl diff, --dry-run |
| Write operations | Medium | ⚠️ Case by case | apply, create, scale, commit |
| Delete operations | High | ❌ Never | delete, rm, destroy, drop |
| Deploy/push | High | ❌ Never | push, publish, deploy (to prod) |
Workspace Scope Guidelines
| Scope | Recommendation | Examples |
|---|---|---|
| Single project | ✅ Ideal | /Users/you/projects/my-api |
| Related projects | ✅ Good | Multiple repos for one system |
| Entire code directory | ⚠️ Broad | /Users/you/code - consider splitting |
| Home directory | ❌ Too broad | /Users/you - security risk |
| System directories | ❌ Unnecessary | /etc, /var - dangerous |
MCP Server Selection Guide
| Need | Recommended Server | Configuration Type |
|---|---|---|
| Library documentation | context7 | HTTP (requires API key) |
| Framework docs (Mastra) | @mastra/mcp-docs-server | Stdio (npm package) |
| Structured problem-solving | server-sequential-thinking | Stdio (npm package) |
| GitHub integration | server-github | Stdio (requires GitHub token) |
| Database queries | server-postgres | Stdio (requires DB credentials) |
Troubleshooting Your Workflow
Commands Taking Too Long
If commands seem slow:-
Check command scope - Are you querying too much data?
- Use
-n namespaceinstead of-A(all namespaces) - Add
--tail=100to log commands - Use
| head -n 20to limit output
- Use
-
Network latency - Remote clusters take longer
- Use
kubectlcontexts for faster access - Consider running commands on the cluster directly
- Use
- Optimize patterns - Make commands more specific
Losing Context in Chat
If Calmo seems to forget what you’re working on:- Reference open files - “Look at the deployment.yaml I have open”
- Be explicit - “In the staging namespace” instead of “there”
- Use workspace context - Calmo sees your workspace structure
- Provide recent terminal output - “Based on the logs you just showed me…”
Terminal Output Hard to Read
If terminal output is difficult to parse:- Use filtering -
| grep,| less,| head - Request formatted output - Ask Calmo to summarize
- Resize panels - Drag dividers for more space
- Copy to editor - Copy output, paste in new file for analysis
For additional workflow guidance, contact our support team at [email protected].