chore: sync private-runner from Mono

.repository-projection.json

@@ -3,11 +3,11 @@
   "projection": "private-runner",
   "projectionSchemaVersion": 1,
   "sourceRepository": "dx-corp/mono",
-  "sourceSha": "a971433d12b40d9042b3a64c2c074fa8fc398e69",
+  "sourceSha": "c97cbb033be2d815b33abd51b9e1a9a37968066c",
   "destinationRepository": "dx-corp/private-runner",
-  "priorProjectedBase": "12bfd181c9c1eb5ca6c077d5aca864307181c418",
+  "priorProjectedBase": "f8da6caff9cccc9a3eee5428d40dcd891215f108",
   "definitionDigest": "851a6bbb3b1c4baf8c69cb244ea18da79c272bf0f9f21aaf5525836c960f2f7b",
-  "toolDigest": "ff02edcbb40b0028af10ab01a101e918341f157a",
-  "contentDigest": "f17aafbe6f41d8f1a6a6ea7861a871a3b314a6cb732c3622f51eb75b4ae54b32",
+  "toolDigest": "0aae6000dbd0940f5a0af380463ccb5a83285eda",
+  "contentDigest": "e27a7b4c85d849a1f0dab4c7bad4b7c11555655bb93d2304f5168796ec2fb402",
   "publicationEligible": true
 }

scripts/distribution-validation.mjs

@@ -2,7 +2,7 @@
 import { execFileSync, spawnSync } from "node:child_process";
 import { lstat, mkdtemp, readFile, readdir, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join, relative, resolve } from "node:path";
+import { dirname, join, relative, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { parseArgs } from "node:util";
 
@@ -75,6 +75,24 @@ export async function validateSafeTree(name, root) {
   return files;
 }
 
+export async function validateApiDocLinks(root, files) {
+  for (const file of files.filter(path => path.endsWith(".md"))) {
+    const source = await readFile(join(root, file), "utf8");
+    const links = [...source.matchAll(/\]\(([^\s)]+)(?:\s+"[^"]*")?\)/g)]
+      .map(match => ({ target: match[1], base: dirname(join(root, file)) }));
+    const sourcePaths = [...source.matchAll(/(?<![A-Za-z0-9_./-])(?:sdk\/deixic|contracts|proto)\/[A-Za-z0-9_./-]+/g)]
+      .map(match => ({ target: match[0], base: root }));
+    for (const { target, base } of [...links, ...sourcePaths]) {
+      if (/^(?:[a-z][a-z0-9+.-]*:|\/|#)/i.test(target)) continue;
+      const pathname = decodeURIComponent(target.split(/[?#]/, 1)[0]);
+      const resolved = resolve(base, pathname);
+      const path = relative(root, resolved).split("\\").join("/");
+      requireValue(path && !path.startsWith("../") && path !== ".." && files.includes(path),
+        `broken API documentation link: ${file} -> ${target}`);
+    }
+  }
+}
+
 export async function validateProvenance(name, root) {
   const provenance = JSON.parse(await readFile(join(root, ".repository-projection.json"), "utf8"));
   exactKeys(provenance, [
@@ -127,6 +145,7 @@ async function validateDeployment(root, files) {
 }
 
 async function validateApi(root, files) {
+  await validateApiDocLinks(root, files);
   requireValue(files.includes("scripts/contracts/normalize-openapi-generated.py"), "API OpenAPI normalizer is missing");
   const actualProto = files.filter(path => path.startsWith("proto/") && path.endsWith(".proto")).map(path => path.slice(6)).sort();
   requireValue(JSON.stringify(actualProto) === JSON.stringify(PROTO), "API protobuf allowlist differs from the public SDK closure");