Conversation
… package mention Documentation audit pass, cross-checked against api/openapi.yaml and internal/ package structure: - plugins/e2a/docs/setup.md and plugins/e2a/skills/e2a/SKILL.md showed a flat update_protection request body (outbound_gate_policy, outbound_gate_allowlist, outbound_gate_action, holds_on_expiry). The actual ProtectionConfigRequest schema requires the nested inbound/outbound/holds shape (every level has additionalProperties: false), so an agent following the old example verbatim would get its request rejected. Fixed both to the nested shape and regenerated web/public/setup.md via scripts/sync-agent-docs.mjs. - AGENTS.md's "Auth" package list omitted internal/delegated (RFC 9068 delegated access-token verification, E2A_DELEGATED_ENABLED) even though it's a fully documented feature elsewhere (docs/deployment.md, docs/observability.md, its own prober scenario). - Bumped the e2a plugin version (0.9.5 -> 0.9.6) for the SKILL.md fix and regenerated the derived plugin manifests via scripts/generate-plugin-manifests.mjs. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01NH4faSeyu6Gdk23qEBPr5b
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Scheduled documentation audit pass (Markdown-only), cross-checked against
api/openapi.yaml,internal/package structure, and the actualupdate_protectionrequest schema. Before starting, I checked open PRs/branches and confirmed PR #1011 already covers the Go-toolchain-version andinternal/sendingpolicy/E2A_OIDC_LOGOUT_URLdoc gaps — those are intentionally excluded here to avoid duplicating that work.plugins/e2a/docs/setup.md,plugins/e2a/skills/e2a/SKILL.md— the "require human review for every outbound email" example calledupdate_protectionwith a flat body (outbound_gate_policy,outbound_gate_allowlist,outbound_gate_action,holds_on_expiry). The actualProtectionConfigRequestschema (api/openapi.yaml) requires the nestedinbound/outbound/holdsshape, and every level setsadditionalProperties: false— so an agent following the old example verbatim would get the request rejected. Fixed both to the nested shape matching the schema (and the correct example already inREADME.md). Regenerated the derived mirrorweb/public/setup.mdandweb/public/llms-full.txtvianode scripts/sync-agent-docs.mjs.AGENTS.md— the "Auth" package list under "Backend architecture" omittedinternal/delegated(RFC 9068 delegated access-token verification,E2A_DELEGATED_ENABLED), even though it's a real, fully documented feature elsewhere (docs/deployment.md,docs/observability.mdmetrics, its own prober scenario). Added it to the inventory.e2aplugin version (0.9.5→0.9.6) for theSKILL.mdcontent fix and regenerated the derived plugin manifests vianode scripts/generate-plugin-manifests.mjs(required by the plugin version-bump CI gate).No behavior changes — documentation and generated-manifest changes only.
Operational risk
None — Markdown/JSON manifest changes only; no code paths touched.
Test plan
api/openapi.yaml'sProtectionConfigRequest/ProtectionDirectionRequest/ProtectionGateRequest/ProtectionScanRequest/ProtectionHoldsRequestschemas (all required fields present, noadditionalPropertiesviolations).internal/delegatedexists and is documented elsewhere (docs/deployment.md:33,212).node scripts/sync-agent-docs.mjs --check— passes.node scripts/generate-plugin-manifests.mjsthennode scripts/validate-plugin.mjs— passes, no drift.node scripts/check-plugin-version-bump.mjs origin/main— passes.bash scripts/check-repository-text-integrity.sh— passes.🤖 Generated with Claude Code
https://claude.ai/code/session_01NH4faSeyu6Gdk23qEBPr5b
Generated by Claude Code