diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 74a6ea8..f72387e 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -31,8 +31,8 @@ jobs:
           REDIS_INTEGRATION_URL: ${{ secrets.REDIS_INTEGRATION_URL }}
         run: bun run test
 
-      - name: Check TypeScript
-        run: bunx tsc --noEmit
+      - name: Generate route types and check TypeScript
+        run: bun run typecheck
 
       - name: Lint
         run: bun run lint
diff --git a/README.md b/README.md
index 1607788..6081842 100644
--- a/README.md
+++ b/README.md
@@ -143,7 +143,7 @@ Run the complete host-safe verification set with:
 ```bash
 bun install --frozen-lockfile
 bun run test
-bunx tsc --noEmit
+bun run typecheck
 bun run lint
 kubectl kustomize k8s/ >/dev/null
 ```
diff --git a/package.json b/package.json
index 19d158d..4ebc2a1 100644
--- a/package.json
+++ b/package.json
@@ -7,7 +7,7 @@
     "build": "next build",
     "start": "next start",
     "lint": "eslint .",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "next typegen && tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
diff --git a/tests/deployment-contract.test.ts b/tests/deployment-contract.test.ts
index e9b959b..d926434 100644
--- a/tests/deployment-contract.test.ts
+++ b/tests/deployment-contract.test.ts
@@ -88,7 +88,7 @@ describe("production deployment contract", () => {
 
     expect(workflow).toContain("bun install --frozen-lockfile");
     expect(workflow).toContain("bun run test");
-    expect(workflow).toContain("bunx tsc --noEmit");
+    expect(workflow).toContain("bun run typecheck");
     expect(workflow).toContain("bun run lint");
     expect(workflow).toContain("kubectl kustomize k8s/");
     expect(workflow).toContain("target: app");