Docs

    CI build workflow guard

    Each repo should include a minimal GitHub Actions workflow that runs install + build to catch dependency/build drift early.

    Baseline workflow

    - `actions/checkout`

    - `actions/setup-node` (Node 22 + npm cache)

    - `npm clean-install --progress=false`

    - `npm run build`

    Keeping repos in sync

    - Source of truth: `template/.github/workflows/build.yml`

    - Sync script: `tools/scripts/repo-maintenance/sync-build-workflow.mjs`

    - Wrapper: `tools/scripts/repo-maintenance/sync-build-workflow.sh --check`

    Security maintenance expectation

    - CI build guard catches breakage after lockfile security patches.

    - Run periodic dependency audit + patch passes across migrated repos.

    - Lockfile updates should be followed by repo-by-repo `npm run build` verification.