From 70118eb21e11602d00e2b7993a6acef1a8c93e9a Mon Sep 17 00:00:00 2001
From: 0xLeif <leif.algo@pm.me>
Date: Sun, 3 May 2026 09:29:06 -0600
Subject: [PATCH 1/2] ci: add CI workflow (shellcheck + --help smoke)

Runs shellcheck and a `--help` smoke test on every shell binary in bin/.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 42 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 .github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..b452da2
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,42 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  shellcheck:
+    name: ShellCheck
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run shellcheck
+        run: |
+          shopt -s nullglob
+          fail=0
+          for f in bin/*; do
+            if head -n1 "$f" | grep -qE '^#!.*\b(bash|sh)\b'; then
+              echo "▶ shellcheck $f"
+              shellcheck "$f" || fail=1
+            fi
+          done
+          exit "$fail"
+
+  smoke:
+    name: Smoke (--help)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run --help on every bin entry
+        run: |
+          shopt -s nullglob
+          for f in bin/*; do
+            if head -n1 "$f" | grep -qE '^#!.*\b(bash|sh)\b'; then
+              chmod +x "$f"
+              echo "▶ $f --help"
+              "$f" --help || exit 1
+              echo
+            fi
+          done

From 39109e49b1c59e32baa1527b62940fe5b0db0893 Mon Sep 17 00:00:00 2001
From: 0xLeif <leif.algo@pm.me>
Date: Sun, 3 May 2026 09:32:58 -0600
Subject: [PATCH 2/2] ci: relax shellcheck to --severity=warning
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The pretty-printing in fledge-github-prs uses `printf "${COLOR}..."` for
escape codes — flagged at info level (SC2059). The variables are
controlled and don't contain `%`, so this is benign style. Skip
info-level so warnings/errors still fail CI.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b452da2..9413fc8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
           for f in bin/*; do
             if head -n1 "$f" | grep -qE '^#!.*\b(bash|sh)\b'; then
               echo "▶ shellcheck $f"
-              shellcheck "$f" || fail=1
+              shellcheck --severity=warning "$f" || fail=1
             fi
           done
           exit "$fail"