Docs
CI build workflow guard
Each repo should include a minimal GitHub Actions workflow that runs install + build to catch dependency/build drift early.
Baseline workflow
- `actions/checkout`
- `actions/setup-node` (Node 22 + npm cache)
- `npm clean-install --progress=false`
- `npm run build`
Keeping repos in sync
- Source of truth: `template/.github/workflows/build.yml`
- Sync script: `tools/scripts/repo-maintenance/sync-build-workflow.mjs`
- Wrapper: `tools/scripts/repo-maintenance/sync-build-workflow.sh --check`
Security maintenance expectation
- CI build guard catches breakage after lockfile security patches.
- Run periodic dependency audit + patch passes across migrated repos.
- Lockfile updates should be followed by repo-by-repo `npm run build` verification.