Investigate GH Actions CI failure

docs/subagents/INDEX.md

@@ -71,3 +71,5 @@ Read first. Keep concise.
 | `codex-jellyfin-ts-fix-20260222T071530Z-5e50` | `codex-jellyfin-ts-fix` | `Fix Jellyfin token/session type drift causing TS compile failures in config+main.` | `done` | `docs/subagents/agents/codex-jellyfin-ts-fix-20260222T071530Z-5e50.md` | `2026-02-22T07:23:47Z` |
 | `codex-overlay-toggle-regression-20260222T073450Z-q7m4` | `codex-overlay-toggle-regression` | `Fix post-rebase overlay toggle regression causing transparent non-interactable windows and broken keybinds (TASK-107).` | `testing` | `docs/subagents/agents/codex-overlay-toggle-regression-20260222T073450Z-q7m4.md` | `2026-02-22T07:45:58Z` |
 | `codex-docs-review-20260222T094009Z-g8p2` | `codex-docs-review` | `Review README/docs for drift vs current code/scripts; patch stale or missing documentation.` | `done` | `docs/subagents/agents/codex-docs-review-20260222T094009Z-g8p2.md` | `2026-02-22T09:43:52Z` |
+
+| `codex-gh-fix-ci-20260222T191948Z-b7n4` | `codex-gh-fix-ci` | `Triage failing GitHub Actions checks on active PR; summarize root cause; propose fix plan before edits` | `handoff` | `docs/subagents/agents/codex-gh-fix-ci-20260222T191948Z-b7n4.md` | `2026-02-22T19:24:12Z` |

docs/subagents/agents/codex-gh-fix-ci-20260222T191948Z-b7n4.md

@@ -0,0 +1,40 @@
+# codex-gh-fix-ci-20260222T191948Z-b7n4
+
+- alias: codex-gh-fix-ci
+- mission: Triage failing GitHub Actions checks on active PR; extract root cause; draft fix plan; implement only after explicit approval.
+- status: handoff
+- started_utc: 2026-02-22T19:19:48Z
+- heartbeat_minutes: 5
+
+## Intent
+- Use gh-fix-ci workflow.
+- Verify gh auth.
+- Resolve current branch PR.
+- Inspect failing checks/logs; summarize actionable snippet.
+- Draft minimal fix plan; request approval before edits.
+
+## Planned Files
+- docs/subagents/agents/codex-gh-fix-ci-20260222T191948Z-b7n4.md
+- docs/subagents/INDEX.md
+- docs/subagents/collaboration.md (append only if conflict/coordination note needed)
+
+## Assumptions
+- gh authenticated with repo/workflow scope.
+- Active branch has open PR; otherwise fallback to latest failing Actions run for requested context.
+
+## Activity Log
+- 2026-02-22T19:19:48Z: session initialized; protocol docs read; starting auth + PR checks inspection.
+- 2026-02-22T19:21:48Z: gh auth valid; no open PR on `main`; inspected latest failed CI run `22275189780`.
+- 2026-02-22T19:21:48Z: failure root cause found in `Enforce generated launcher workflow`: `scripts/verify-generated-launcher.sh` calls `rg`, unavailable on ubuntu runner (`rg: command not found`), causing false fail.
+- 2026-02-22T19:21:48Z: pending user approval for fix plan before implementation.
+- 2026-02-22T19:24:12Z: approved + implemented fix: replaced `rg` dependency with portable `grep -Fn` in launcher verification script.
+- 2026-02-22T19:24:12Z: verification passed locally: `make build-launcher`, `dist/launcher/subminer --help`, `bash scripts/verify-generated-launcher.sh`.
+
+## Handoff
+- files_touched:
+  - scripts/verify-generated-launcher.sh
+  - docs/subagents/agents/codex-gh-fix-ci-20260222T191948Z-b7n4.md
+  - docs/subagents/INDEX.md
+- key_decision: prefer `grep` over adding `ripgrep` install step to keep CI minimal and portable.
+- blockers: none.
+- next_step: rerun CI (or push) to confirm `Enforce generated launcher workflow` no longer fails from missing `rg`.

scripts/verify-generated-launcher.sh

@@ -9,7 +9,7 @@ if [[ ! -f "$REPO_ROOT/launcher/main.ts" ]]; then
 	exit 1
 fi
 
-if ! rg -n --fixed-strings -- "--outfile=\"\$(LAUNCHER_OUT)\"" "$REPO_ROOT/Makefile" >/dev/null; then
+if ! grep -Fn -- "--outfile=\"\$(LAUNCHER_OUT)\"" "$REPO_ROOT/Makefile" >/dev/null; then
 	echo "[FAIL] Makefile build-launcher target is not writing to dist/launcher/subminer"
 	exit 1
 fi