Skip to content

docs: accuracy fixes (salvaged from #185)#201

Merged
cdot65 merged 1 commit into
mainfrom
cdot65/docs/salvage-185-accuracy
Jul 9, 2026
Merged

docs: accuracy fixes (salvaged from #185)#201
cdot65 merged 1 commit into
mainfrom
cdot65/docs/salvage-185-accuracy

Conversation

@cdot65

@cdot65 cdot65 commented Jul 9, 2026

Copy link
Copy Markdown
Owner

Salvages the accurate, still-relevant content from #185 (a stale/conflicting draft) and rebases it onto current main, dropping its one factual error and folding in docs added since.

Why not just merge #185

#185 was CONFLICTING (8 days stale; ~14 PRs — #187#200 — rewrote several of the same files) and still a DRAFT, and it introduced one bad example (goal_type: 'JAILBREAK', which isn't a valid goal type). Reviewed and verified each claim against source before porting.

What's included (all verified against src/)

  • Scan auth (scan-api.md, architecture.md) — API key HMAC and/or bearer token; lowercase x-pan-token / x-payload-hash headers; init() requires at least one of apiKey/apiToken. Matches ApiKeyAuth + constants.ts.
  • TOKEN_ENDPOINT defaults (configuration.mdx, environment-variables.mdx) — filled in https://auth.apps.paloaltonetworks.com/oauth2/access_token (matches DEFAULT_TOKEN_ENDPOINT) + EU regional endpoint overrides.
  • Pagination reality (architecture.md, vocabulary.md) — replaces the fictional ListingOptions (sort / filters<TFilters> — not in src/listing.ts) with the real per-service contracts: Management offset/limit, Model Security / Red Team skip/limit/search, DLP page/size Page<T>. Documents actual RequestSpec fields and fills in the domain vocabulary.
  • Red Team examples (red-team-api.md) — enum casing (COMPLETED/STATIC/FAILED/HIGH/API/ACTIVE), updatePrompt uses prompt (not content — matches CustomPromptUpdateRequestSchema), and a corrected goal_type: 'AGENT' (valid GoalTypeQueryParam) + status: 'SUCCESSFUL'.
  • index.mdx — zod validation note; "rule instances" vs read-only platform rules.
  • New Runnable Examples page (examples.mdx + sidebar) — all 18 listed scripts verified to exist, plus the red-team-network-broker.ts example the original PR predated.

Verification

Full site build clean (docs:api + docusaurus build, onBrokenLinks: 'throw'). Lint/format/typecheck/tests green via pre-commit.

Closes #185

🤖 Generated with Claude Code

- scan-api/architecture: API key HMAC and/or bearer token; lowercase
  x-pan-token / x-payload-hash headers; init() requires at least one
- config/env: fill TOKEN_ENDPOINT defaults + EU regional endpoints
- architecture/vocabulary: replace fictional ListingOptions (sort/filters)
  with real per-service pagination (Mgmt offset/limit, MS/RT skip/limit/
  search, DLP page/size); document RequestSpec fields; fill domain vocab
- red-team-api: enum casing (COMPLETED/STATIC/FAILED/HIGH/API/ACTIVE),
  updatePrompt uses `prompt` not `content`, corrected goal_type (AGENT,
  not the invalid JAILBREAK from the original PR) + status filter
- index: zod validation note; MS rule instances vs read-only rules
- new Runnable Examples guide page (+ sidebar), including the
  network-broker example the original PR predated

Supersedes #185 (conflicting/stale draft); drops its one bad goal_type
example and folds in docs added since.
@cdot65
cdot65 merged commit bd2473a into main Jul 9, 2026
6 of 7 checks passed
@cdot65
cdot65 deleted the cdot65/docs/salvage-185-accuracy branch July 9, 2026 10:20
@cdot65 cdot65 mentioned this pull request Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant