feat(blend): add check and format commands

.github/workflows/ci.yml → .github/workflows/blend-ci.yml

@@ -1,4 +1,4 @@
-name: blend CI
+name: Blend CI
 
 on:
   push:
@@ -7,13 +7,13 @@ on:
       - "blend/**"
       - "Cargo.toml"
       - "Cargo.lock"
-      - ".github/workflows/ci.yml"
+      - ".github/workflows/blend-ci.yml"
   pull_request:
     paths:
       - "blend/**"
       - "Cargo.toml"
       - "Cargo.lock"
-      - ".github/workflows/ci.yml"
+      - ".github/workflows/blend-ci.yml"
 
 permissions:
   contents: read
@@ -44,3 +44,5 @@ jobs:
       - run: cargo fmt --check
       - run: cargo clippy -- -D warnings
       - run: cargo test
+      - run: cargo run -- check
+      - run: cargo run -- format --check

.github/workflows/orders-ci.yml

@@ -0,0 +1,40 @@
+name: Orders CI
+
+on:
+  push:
+    branches: [master]
+    paths:
+      - "orders/**"
+      - ".github/workflows/orders-ci.yml"
+  pull_request:
+    paths:
+      - "orders/**"
+      - ".github/workflows/orders-ci.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+
+      - name: Install latest blend release
+        run: |
+          set -eu
+          mkdir -p "$RUNNER_TEMP/bin"
+          curl --proto '=https' --tlsv1.2 -fsSL https://github.com/frantic1048/Vanilla/releases/latest/download/blend-installer.sh -o "$RUNNER_TEMP/blend-installer.sh"
+          sh "$RUNNER_TEMP/blend-installer.sh" --dir "$RUNNER_TEMP/bin" --quiet
+          "$RUNNER_TEMP/bin/blend" --version
+
+      - name: Check orders
+        run: '"$RUNNER_TEMP/bin/blend" check'
+
+      - name: Check order formatting
+        run: '"$RUNNER_TEMP/bin/blend" format --check'

CLAUDE.md

@@ -26,14 +26,18 @@ Migration from the legacy nushell-based blend + `packages/` (stow-managed) to Ru
 
 ## blend Development
 
-blend is being enhanced iteratively via manual testing. No CI yet.
+blend is being enhanced iteratively via manual testing and CI.
+
+**Commit conventions:** use semantic/conventional commit subjects for changes to the blend program and its release/CI tooling (for example, `feat(blend): ...`, `fix(blend): ...`, `ci: ...`, `chore(blend): ...`).
+
+**Branch conventions:** development branches should use the `dev/*` namespace.
 
 **Pre-release posture:** blend is pre-initial-release with one user (the repo owner). Backwards compatibility is *not* a constraint — prefer the cleanest design over compat shims, deprecation paths, or migration tooling for hypothetical external users. Migrating the user's own dotfiles in this repo is still in scope.
 
 **Build / common tasks (via `just`):**
 ```sh
 just build         # cargo build --release + symlink target/release/blend → bin/blend
-just check         # blend view --dry-run (validates all orders)
+just check         # blend check (validates all orders)
 just test          # cargo test --release
 just fmt-check     # rustfmt --check
 just clippy        # cargo clippy -- -D warnings