ci.yml

name: CI

on:
  push:
    branches: [main]
    paths:
      - bin/**
      - .github/workflows/ci.yml
  pull_request:
    branches: [main]
    paths:
      - bin/**
      - .github/workflows/ci.yml

permissions:
  contents: read

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  shellcheck:
    name: ShellCheck
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v5
      - name: Run shellcheck
        run: |
          shopt -s nullglob
          fail=0
          for f in bin/*; do
            if head -n1 "$f" | grep -qE '^#!.*\b(bash|sh)\b'; then
              echo "▶ shellcheck $f"
              shellcheck --severity=warning "$f" || fail=1
            fi
          done
          exit "$fail"

  syntax:
    name: Bash syntax check
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v5
      - name: Check bash -n on all scripts
        run: |
          shopt -s nullglob
          fail=0
          for f in bin/*; do
            if head -n1 "$f" | grep -qE '^#!.*\bbash\b'; then
              echo "▶ bash -n $f"
              bash -n "$f" || fail=1
            fi
          done
          exit "$fail"

  smoke:
    name: Smoke (--help)
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v5
      - name: Run --help on every bin entry
        run: |
          shopt -s nullglob
          for f in bin/*; do
            if head -n1 "$f" | grep -qE '^#!.*\b(bash|sh)\b'; then
              chmod +x "$f"
              echo "▶ $f --help"
              "$f" --help || exit 1
              echo
            fi
          done