Make sure we generate only what we decide we want to generate (#237)

Author: ernest-nowacki

packages/cre-sdk/README.md

@@ -516,6 +516,15 @@ This SDK uses [@bufbuild/protobuf](https://www.npmjs.com/package/@bufbuild/proto
 - `buf.gen.yaml` - Code generation configuration using ts-proto
 - Generated files are placed in `src/generated/`
 
+**Opt-in proto allowlist:**
+
+[`buf.gen.yaml`](./buf.gen.yaml) uses an explicit `paths:` allowlist under its `inputs`. Protos added to the `chainlink-protos` submodule are **not** picked up automatically — a new capability must be added to both:
+
+1. [`packages/cre-sdk/buf.gen.yaml`](./buf.gen.yaml) — to generate the raw `*_pb.ts` types.
+2. [`packages/cre-sdk/scripts/src/generate-sdks.ts`](./scripts/src/generate-sdks.ts) — to generate the SDK wrapper classes and mocks.
+
+This prevents leaking in-progress or internal capabilities into the public SDK surface before they are ready.
+
 ### Chain Selectors Generation
 
 Auto-generated TypeScript files for 200+ blockchain networks from the official [Chainlink chain-selectors repository](https://github.com/smartcontractkit/chain-selectors).

packages/cre-sdk/buf.gen.yaml

@@ -10,6 +10,26 @@ managed:
 
 inputs:
   - directory: ../../submodules/chainlink-protos/cre
+    # Allowlist: only generate for protos we explicitly opt into.
+    # New protos added to chainlink-protos/cre will NOT be picked up
+    # until listed here. Keep in sync with generate-sdks.ts.
+    paths:
+      - ../../submodules/chainlink-protos/cre/capabilities/blockchain/aptos/v1alpha
+      - ../../submodules/chainlink-protos/cre/capabilities/blockchain/evm/v1alpha
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/actionandtrigger/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/basicaction/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/basictrigger/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/consensus/v1alpha
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/importclash/p1/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/importclash/p2/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/importclash/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/internal/nodeaction/v1
+      - ../../submodules/chainlink-protos/cre/capabilities/networking/confidentialhttp/v1alpha
+      - ../../submodules/chainlink-protos/cre/capabilities/networking/http/v1alpha
+      - ../../submodules/chainlink-protos/cre/capabilities/scheduler/cron/v1
+      - ../../submodules/chainlink-protos/cre/sdk/v1alpha
+      - ../../submodules/chainlink-protos/cre/tools/generator/v1alpha
+      - ../../submodules/chainlink-protos/cre/values/v1
 
 plugins:
   # Modern @bufbuild/protoc-gen-es plugin