Summary

• wires this repo's GitHub CI to run codebase-intelligence ci on PRs and main pushes using the published canary package
• uses full history checkout so origin/<base> and previous-push refs are available for --new-only
• emits GitHub annotations, SARIF, a markdown PR-summary artifact, and the same markdown into the job summary

Channel choice

• Uses npx -y codebase-intelligence@canary now, so the repo dogfoods the latest canary release as an external quality gate.
• After 2.5.0 is promoted stable, this can move to codebase-intelligence@latest.
• Local pnpm build and pnpm test remain in CI so PRs still prove the source code under review works.

Validation

• npx -y codebase-intelligence@canary ci . --base origin/main --new-only --changed-workspaces --format annotations --summary --force PASS
• npx -y codebase-intelligence@canary ci . --base origin/main --new-only --changed-workspaces --format sarif --output codebase-intelligence.sarif --summary --force PASS
• npx -y codebase-intelligence@canary ci . --base origin/main --new-only --changed-workspaces --comment markdown --output codebase-intelligence-pr-comment.md --summary --force PASS
• pnpm lint PASS
• pnpm typecheck PASS
• pnpm build PASS
• pnpm test PASS: 38 files, 486 tests
• git diff --check PASS

Follow-up

• Setup UX should become one command: codebase-intelligence init --ci github or codebase-intelligence doctor --fix ci to generate this workflow automatically.

Notes

• This PR intentionally does not merge itself.