ci: gate doc coverage + package exports, generate API reference in docs build

Widget CI now runs 'pnpm docs:api:check' (fails on any undocumented public export or broken @link) and 'pnpm check:exports' (publint + attw) after the build. The Docs workflow installs the widget and runs 'pnpm docs:api' before building so the generated HTML reference ships with the Cloudflare Pages deploy, and now also triggers on widget/** changes so the reference rebuilds when the public API changes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Paul Mulligan

.github/workflows/ci.yml

@@ -42,12 +42,18 @@ jobs:
       - name: Type check
         run: pnpm typecheck
 
+      - name: API docs coverage (TSDoc)
+        run: pnpm docs:api:check
+
       - name: Test (Vitest)
         run: pnpm test
 
       - name: Build
         run: pnpm build
 
+      - name: Validate package exports (attw + publint)
+        run: pnpm check:exports
+
   worker:
     name: Validate Worker
     runs-on: ubuntu-latest

.github/workflows/docs.yml

@@ -5,11 +5,13 @@ on:
     branches: [main]
     paths:
       - "docs/**"
+      - "widget/**"
       - ".github/workflows/docs.yml"
   pull_request:
     branches: [main]
     paths:
       - "docs/**"
+      - "widget/**"
       - ".github/workflows/docs.yml"
   workflow_dispatch:
 
@@ -40,6 +42,17 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      # The hosted API reference is generated from the widget's TSDoc and copied
+      # into docs/public/api by the docs build (scripts/copy-api.mjs). Generate
+      # it here first so it ships with this deploy.
+      - name: Install widget dependencies
+        working-directory: widget
+        run: pnpm install --frozen-lockfile
+
+      - name: Generate API reference (TypeDoc)
+        working-directory: widget
+        run: pnpm docs:api
+
       - name: Build (includes Pagefind index)
         run: pnpm build