fix(scripts): check-doc-links resolves the #fragment, not just the file (objectui#7644)

LICENSE-THIRD-PARTY.md

@@ -34,8 +34,29 @@ sources, and the licenses they ship under. All entries are MIT-compatible.
   `packages/components/src/ui/` but are required by the AI Elements layer.
 - **Local modifications:** import path rewrites only (see above).
 
+## github-slugger
+
+- **Upstream:** <https://github.com/Flet/github-slugger>
+- **License:** ISC (c) Dan Flettre. MIT-compatible.
+- **Vendored into:** `scripts/github-slug.mjs`
+- **What:** the generated character table `slug()` strips, plus the `slug()` and
+  duplicate-suffix (`-1`/`-2`) logic built on it.
+- **Rationale:** `scripts/check-doc-links.mjs` resolves heading anchors, so it
+  needs the exact rule both renderers use — and it is one of the gates a
+  workflow runs BEFORE `pnpm install`, so it may not import a package. The
+  table is copied rather than re-derived because a Unicode property escape is
+  not equivalent to it; the vendored file's header has the measurement.
+- **Local modifications:** ESM export shape only — the class is a named export
+  and drops the unused `maintainCase` / `reset()` surface. The character table
+  is byte-for-byte upstream.
+- **Re-sync command:** copy the `regex` export out of the installed
+  `github-slugger/regex.js` (already a dependency of `@object-ui/plugin-markdown`
+  and of `fumadocs-core`), then run
+  `pnpm exec vitest run scripts/__tests__/check-doc-links.test.ts` — it pins this
+  copy against the real package over every code point.
+
 ---
 
 If you add another upstream-sourced file under `packages/`, append it to this
 list with the same shape: upstream link, license, files affected, and any
-local edits.
+local edits. The same applies to repo tooling under `scripts/`.

docs/audits/2026-08-zod-to-json-schema-fidelity.md

@@ -24,7 +24,7 @@ artifact are proposed or added by it. The fork stays open.
 | Added to the published package | **+21.5 %** of `dist` pretty, **+12.2 %** minified |
 | Is the artifact closed? | **No.** 276 of 333 objects are open; every one of the 105 node roots is open; `.strict()` is called **0** times in the mirrors |
 | Is it stricter than zod anywhere? | **No — 0 / 475** corpus files. It is a strict *relaxation* |
-| Would objectui#5127's skipped files gain judgement? | **Partly, and not because of the artifact** — see [Q3](#q3-the-5127-judgement-surface) |
+| Would objectui#5127's skipped files gain judgement? | **Partly, and not because of the artifact** — see [Q3](#q3-the-objectui5127-judgement-surface) |
 
 **The headline.** The generated artifact is a **strict relaxation** of the zod
 source: over the repo's 475 root-`type` JSON files it agrees with

package.json

@@ -135,6 +135,7 @@
     "react-dom": "19.2.8",
     "react-i18next": "^17.0.11",
     "react-router-dom": "^7.18.2",
+    "remark-mdx": "^3.1.1",
     "rollup-plugin-visualizer": "^7.1.1",
     "tailwindcss": "^4.3.3",
     "tslib": "^2.8.1",