From d107b0f6531ed98ed191e0956b26fc67c9d60b55 Mon Sep 17 00:00:00 2001
From: Serge Gatezh <2880401+gatezh@users.noreply.github.com>
Date: Tue, 22 Sep 2026 21:20:56 -0600
Subject: [PATCH] chore: commit every shell script as 100755

Two of the seven tracked scripts were 100644 while their siblings were
100755, with no rule separating them. All seven have a shebang, and the
sandbox template bind-mounts init-firewall.sh and executes it by path, so
the exec bit is the correct default. Record the rule in CLAUDE.md.

Fixes #127
---
 .claude/CLAUDE.md                         | 1 +
 claude-bun/.devcontainer/init-firewall.sh | 0
 claude-code/.devcontainer/init-plugins.sh | 0
 3 files changed, 1 insertion(+)
 mode change 100644 => 100755 claude-bun/.devcontainer/init-firewall.sh
 mode change 100644 => 100755 claude-code/.devcontainer/init-plugins.sh

diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
index 95fe306..7593051 100644
--- a/.claude/CLAUDE.md
+++ b/.claude/CLAUDE.md
@@ -54,6 +54,7 @@ Never duplicate: wiki pages link to READMEs, READMEs link back. Every wiki page
 - Use comments in devcontainer.json (JSONC format)
 - Dockerfile instruction order: ARG → FROM → packages → user/permissions → tools → LABEL
 - For images with multiple binary downloads, use multi-stage parallel builds (see `ralphex-fe/Dockerfile`)
+- Commit every `.sh` file as `100755` (they all have a shebang); check with `git ls-files -s '*.sh'`
 
 ## Validation
 
diff --git a/claude-bun/.devcontainer/init-firewall.sh b/claude-bun/.devcontainer/init-firewall.sh
old mode 100644
new mode 100755
diff --git a/claude-code/.devcontainer/init-plugins.sh b/claude-code/.devcontainer/init-plugins.sh
old mode 100644
new mode 100755