* Could be its own job, but convenient to run during main linux CI.

.github/workflows/ci-compiled-scripts.yaml

@@ -0,0 +1,46 @@
+name: ci-linux
+on:
+  push:
+  pull_request:
+
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      # install deps.
+      - name: install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libsystemd-dev
+
+      - name: Install system dependencies
+        uses: input-output-hk/actions/base@latest
+
+      - uses: haskell-actions/setup@v2
+        id: cabal-setup
+        with:
+          ghc-version: '9.6.6'
+          cabal-version: '3.10.3.0'
+
+      - uses: actions/checkout@v4
+
+      - name: Cache .cabal
+        uses: actions/cache@v3
+        with:
+          path: ${{ steps.cabal-setup.outputs.cabal-store }}
+          key: cabal-${{ hashFiles('cabal.project') }}
+
+      - name: build & test
+        run: |
+          cabal update
+          cabal build -j all --enable-tests
+          cabal test all
+      - name: check compiled scripts are consistent
+        # git diff --quiet implies --exit-code
+        run: |
+          cabal run export-smart-tokens
+          git diff --quiet

.github/workflows/ci-linux.yaml

@@ -39,3 +39,8 @@ jobs:
           cabal update
           cabal build -j all --enable-tests
           cabal test all
+      - name: check compiled scripts are consistent
+        # git diff --quiet implies --exit-code
+        run: |
+          cabal run export-smart-tokens
+          git diff --quiet

.github/workflows/ci-nix.yaml

@@ -48,6 +48,13 @@ jobs:
     #     key: cabal-${{ hashFiles('cabal.project') }}
 
     # We currently do not have a default target
-    - run: nix build --accept-flake-config .#wst-poc-cli
-    - run: nix flake --accept-flake-config check
+    - name: nix build wst-poc client application
+      run: nix build --accept-flake-config .#wst-poc-cli
+    - name: nix flake check
+      run: nix flake --accept-flake-config check
+    - name: check compiled scripts are consistent
+      # git diff --quiet implies --exit-code
+      run: |
+        nix run --accept-flake-config .#export-smart-tokens
+        git diff --quiet