Skip to content

docs(sandboxes): document file.parser and deniedDomains in kits spec#25030

Merged
dvdksn merged 4 commits into
docker:mainfrom
dvdksn:docs/sandboxes-kits-file-parser
Jun 5, 2026
Merged

docs(sandboxes): document file.parser and deniedDomains in kits spec#25030
dvdksn merged 4 commits into
docker:mainfrom
dvdksn:docs/sandboxes-kits-file-parser

Conversation

@dvdksn

@dvdksn dvdksn commented May 12, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Adds a #### file.parser subsection under the Credentials spec reference, covering supported forms (json:<dot.path> and plain text), JSON path rules and limitations, priority/fallback behaviour for missing files, worked examples, and common error messages. Behaviour verified against sandboxd/pkg/secrets/store.go.
  • Adds deniedDomains to the Network spec reference table, which was missing despite being a supported field. Deny rules take precedence over allow rules including those from composed kits.

Test plan

  • docker buildx bake lint vale — passes clean for this file
  • Spot-check rendered output on staging

🤖 Generated with Claude Code

@netlify

netlify Bot commented May 12, 2026

Copy link
Copy Markdown

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 486f205
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a1fda890b9c9000083ce96a
😎 Deploy Preview https://deploy-preview-25030--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@dvdksn dvdksn marked this pull request as ready for review May 12, 2026 08:28
@dvdksn dvdksn requested a review from a team May 12, 2026 08:28
@dvdksn dvdksn added the status/review Pull requests that are ready for review label May 12, 2026
@dvdksn

dvdksn commented May 12, 2026

Copy link
Copy Markdown
Contributor Author

/review

@dvdksn

dvdksn commented May 12, 2026

Copy link
Copy Markdown
Contributor Author

/review

@docker-agent docker-agent left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

The added documentation for file.parser and deniedDomains is accurate, well-structured, and follows the style guide. One minor word-list violation was found in the new content.


The proxy resolves the credential to `ghp_xyz`, falling back to `GH_TOKEN` if the file is
missing. If the file exists but the JSON path doesn't resolve, the request fails with the
parser error below instead of falling back.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[MEDIUM] Use "following" instead of "below"

The style guide's word list explicitly requires "following" in place of "below" when referring to content that appears later on the page.

Suggested fix:

the request fails with the following parser error instead of falling back.

dvdksn and others added 4 commits June 3, 2026 09:39
The file.parser field had only a one-line description. Adds a dedicated
subsection covering supported forms (plain text and json:<dot.path>),
JSON path rules and limitations, priority/fallback behaviour for missing
files, worked examples, and the common error messages users will encounter.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The deniedDomains field was missing from the network spec table despite
being a supported field. Deny rules take precedence over allow rules,
including those contributed by other composed kits.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Replace bold pseudo-headings with a synopsis-led structure: a one-line
description of the field's purpose and syntax, a properties table, a
single prose paragraph for json: path rules, and two focused examples
(plain text and nested JSON with env fallback) instead of four.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The previous wording claimed the proxy falls back when a JSON field is
absent. Verified against sandboxd/pkg/secrets/store.go that parser
errors propagate; fallback only happens at discovery time based on file
presence and env var being set.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@dvdksn dvdksn force-pushed the docs/sandboxes-kits-file-parser branch from a22ca66 to 486f205 Compare June 3, 2026 07:40

@akristen akristen left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Non-blocking, I might add some front matter that shortens the ToC and only lists sections up to h2. Alternatively, as a fast follow maybe breaking out the reference doc into its own kind of thing to shorten length. Users might prefer to have windows side-by-side rather than scrolling baack/forth between concept and reference. If you believe that unravelling it will help users then LGTM.

@dvdksn dvdksn merged commit 40eb1f7 into docker:main Jun 5, 2026
14 checks passed
@dvdksn dvdksn deleted the docs/sandboxes-kits-file-parser branch June 5, 2026 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ai status/review Pull requests that are ready for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants