ci(check-links): bring docs/adr/ under a link gate, with fence/code-span discrimination and a shrink-only baseline

.github/workflows/check-links.yml

@@ -33,6 +33,19 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v7
 
+      # ADR cross-link gate (#6592). `docs/adr/` is deliberately NOT added to the
+      # lychee globs below -- see the ⛔ note there for why -- so the decision
+      # registry gets its own resolver, in the same advisory lane.
+      #
+      # Deliberately `node` and not `pnpm`: the script has zero dependencies, so
+      # this lane needs no setup-node / corepack / `pnpm install`, and the whole
+      # advisory job stays a checkout plus two checks. It is also why an author
+      # can run it locally in any container (`pnpm check:adr-links` when a
+      # workspace install exists, `node scripts/check-adr-links.mjs` when it does
+      # not) -- which lychee, installed by the action at CI time, cannot offer.
+      - name: Check ADR cross-links
+        run: node scripts/check-adr-links.mjs --self-test && node scripts/check-adr-links.mjs
+
       - name: Check links with lychee
         uses: lycheeverse/lychee-action@v2
         with:
@@ -55,6 +68,18 @@ jobs:
           # suffix that a site route omits. Without this pair the gate cannot go
           # green at all: 1286 root-relative links fail as "Cannot resolve
           # root-relative link ... provide a root dir".
+          #
+          # ⛔ Do NOT add `docs/adr/**/*.md` here. It looks like the one-line fix
+          # for #6592 and it is not: measured on the pinned lychee 0.24.2, that
+          # glob reports 8 broken links today, every one a pre-existing ADR →
+          # source-tree link whose target moved out of this repo. This job would
+          # be red on every PR from the moment it merged, which is how an
+          # advisory lane becomes a lane nobody reads (#6028 landed it
+          # advisory-first specifically to earn a green streak). `docs/adr/` is
+          # checked by the `Check ADR cross-links` step above instead, which can
+          # freeze those 8 on a shrink-only baseline and fail on a NEW one --
+          # something neither `exclude` nor `.lycheeignore` can express, because
+          # neither ever tells you an entry stopped being needed.
           args: >-
             --offline
             --root-dir ${{ github.workspace }}/content

package.json

@@ -42,6 +42,7 @@
     "check:skill-frame-freshness": "node scripts/check-skill-frame-freshness.mjs --self-test && node scripts/check-skill-frame-freshness.mjs",
     "check:skill-compatibility": "node scripts/check-skill-compatibility-version.mjs --self-test && node scripts/check-skill-compatibility-version.mjs",
     "check:adr-anchors": "node scripts/check-adr-anchors.mjs --self-test && node scripts/check-adr-anchors.mjs",
+    "check:adr-links": "node scripts/check-adr-links.mjs --self-test && node scripts/check-adr-links.mjs",
     "check:platform-checklist": "node scripts/checklist-select.mjs --self-test && node scripts/check-platform-checklist.mjs",
     "check:org-identifier": "node scripts/check-org-identifier.mjs",
     "check:authz-resolver": "node scripts/check-single-authz-resolver.mjs --self-test && node scripts/check-single-authz-resolver.mjs",