codegen-check.yml

# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
---
name: Codegen drift check
on:
  pull_request: { paths: [src/kp2bw/_bw_api_types.py, specs/vault-management-api.json] }
  push: { branches: [master], paths: [src/kp2bw/_bw_api_types.py, specs/vault-management-api.json] }
permissions: {}
jobs:
  check-bw-api-types:
    runs-on: ubuntu-latest
    permissions: { contents: read }
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0

      - name: Regenerate _bw_api_types.py from spec
        run: bash scripts/generate-bw-types.sh

      - name: Fail if generated file has drifted from spec
        run: |
          if ! git diff --exit-code src/kp2bw/_bw_api_types.py; then
            echo "::error file=src/kp2bw/_bw_api_types.py::Generated file is out of sync with specs/vault-management-api.json. Run 'bash scripts/generate-bw-types.sh' and commit the result."
            exit 1
          fi