diff --git a/firmware/justfile b/firmware/justfile
index 355ecca..2475437 100644
--- a/firmware/justfile
+++ b/firmware/justfile
@@ -39,6 +39,20 @@ build:
 flash:
     {{esp_env}} cargo run --release --bin firmware
 
+# Full editor firmware WITH git publishing — the HEAVY build: compiles libgit2 +
+# mbedTLS and links git2. The `build`/`flash` recipes above stay light (no
+# libgit2 component — LIBGIT2_SRC unset — and no git2 crate, `git` feature off),
+# so use those for iterating on the editor / EPD / USB / SD. Only reach for this
+# to exercise `:sync`'s push. Bakes the TW_* creds into flash like the git
+# spikes (ADR-005: not for a shipping image). NB: git isn't wired into main.rs
+# yet, so today this just builds slower and behaves like the light build.
+build-firmware-git:
+    {{esp_env}} {{git_env}} cargo build --release --bin firmware --features git
+
+# Full firmware — build + flash + monitor (see build-firmware-git).
+flash-firmware-git:
+    {{esp_env}} {{git_env}} cargo run --release --bin firmware --features git
+
 # serial monitor only, with decoded backtraces
 monitor:
     espflash monitor --elf {{elf}}