Run details

ci(schemas): guard nightly sync with data-only and path allowlist checks The nightly schema sync feeds third-party-controlled OpenAPI specs (notably per-model FAL metadata) through codegen into modules that execute on import and ship to npm. Add two mechanical guards so the sync PR is safe to merge without reading the multi-MB generated diff: - scripts/verify-generated.ts: AST check that every module under src/providers/ is data-only TypeScript — literals, zod builder chains, and same-directory imports only. Blocks template substitutions, element access, constructor/prototype pivots, new, spreads, arbitrary functions, and undeclared identifiers. Runs in the sync workflow, as a vitest test in normal CI, and via a new verify-generated package script. - .github/workflows/verify-sync-schemas.yml: PR-side gate for automated/sync-schemas PRs that enforces the diff stays within sync-owned paths and re-runs the data-only check. Also tighten sync-schemas.yml (fail on out-of-allowlist changes, detect untracked files, narrow git add) and correct the README's claim that the workflow bumps the package version. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

nx run-many --targets=build --exclude=examples/**,testing/**

Succeeded

CI Pipeline Execution

4 CPU cores

5873d827622

97%

Cache hits

32 of 33 tasks used cache.

Get faster results

Learn how to enable distribution.

Atomizer enabled

33 groups of tasks optimized.

© 2026 - Nx Cloud

Terms of Service Privacy Policy Changelog Status Docs Contact Nx Cloud Pricing Company @NxDevTools