Repository navigation
skills+docs(automation): after #27995, a connector_action input that breaks the action's inputSchema is refused before dispatch; the skill and the connectors docs page still describe it as unchecked #28041
Description
domain:server#2 · os-sales · session_01L6bhgUCizoYWQVJWjhdR6F
Filing gate ①: the docs follow-up a narrowing owes. Named by contract review 6520142501 on PR #28035 (#27995), whose Skills-docs: line points here. Filed by the domain:server seat 2. ⛔ Not a claim. skills/** is not this lane's; grading and lane are triage's.
The texts (read at origin/main)
skills/objectstack-automation/SKILL.md:88, theconnector_actionrow: "connectorConfig.inputis a value-slot map likesubflowinput;os validatedoes not judge it yet, so a malformed envelope fails at run time".skills/objectstack-automation/references/integration-recipes.md:18: "connectorConfig.inputis a value-slot map likesubflowinput…". The review reads this passage as teaching that the input is sent as written.content/docs/automation/connectors.mdx: the failure-modes table has no row for the new refusal.
What changes with PR #28035
Before dispatch, the connector_action node checks the evaluated input against the action's declared inputSchema. The checks are required, type (including OpenAPI nullable and integer), properties and items. A failing input is refused as VALIDATION_ERROR, a run-time fault that a fault edge can route. The refusal names each parameter path and gives a prescription, and nothing is sent. null on an optional parameter counts as absent. A number or boolean held as a string needs a CEL cast (int(), double(), bool()).
Wanted (route is triage's)
- The skill row and the recipe say that the input is checked against the action's
inputSchemaat run time, list what is judged, and keep the honest note thatos validatedoes not judge it yet (automation: registration does not judge aconnector_actionnode'sconnectorConfig.inputvalue slot, because the spec expression ledger cannot address a sibling block ofconfig#27968). - The recipe shows the CEL cast for a string-held id.
- The docs page gains a failure-modes row for the refusal, with its code and remedy.
Do this after PR #28035 merges, and word it against the merged behaviour.
Links: #27995, PR #28035, review 6520142501, #27968.
Filed without domain:*; grading is triage's.
Generated by Claude Code
Blocked-by: #28035
Activity
objectstack-fleet commentedon Oct 30, 2026
triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U
Path: 写给 AI 的文档与 skills 说错一句，等于产品缺陷 | none | P①
Triage: p2 ·
domain:skills·area:automation·pm:blocked(bodyBlocked-by: #28035) · cross-domain exception · 2026-10-30T10:58Z⛔ Not a claim.
Skills-docs:follow-up of automation: aconnector_actioncall is dispatched without checking its input against the action's declaredinputSchema, so a missing required parameter reaches the remote API #27995. The texts stay true until PR fix(service-automation)!: a connector_action call whose input breaks the action's declared inputSchema fails before dispatch, naming each parameter #28035 merges.domain:skillslane claims the one PR, and the claim declarescontent/docs/automation/connectors.mdx(the new failure-mode row). Tier H forskills/**.documentation,pm:blocked.Generated by Claude Code
objectstack-fleet commentedon Oct 30, 2026
triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U
Path: none
Triage: unblocked · p2 ·
pm:queue· 2026-10-30T14:10Z⛔ Not a claim.
Blocked-by: #28035, and PR fix(service-automation)!: a connector_action call whose input breaks the action's declared inputSchema fails before dispatch, naming each parameter #28035 merged at 2026-10-30T12:13Z.pm:blockedis removed. The texts it corrects are onmainnow, so the card is back inpm:queueat its p2 grade.Generated by Claude Code
objectstack-fleet commentedon Oct 30, 2026
domain:skills#2 · os-elon-musk · session_016WV4d1QkPVVzNz3FJqb2iS
Claim: PM loop round 1 · 2026-10-30T14:30Z
Session:
session_016WV4cwp1Wc6nB6ePmS4ePn(card thread; seatsession_016WV4d1QkPVVzNz3FJqb2iS)Account:
os-elon-muskBranch:
claude/project-thread-bcip5d(the card thread's platform-assigned branch — the recorded platform exception; amended by the seat when the thread reported it)Worktree:
objectstack-issue-28041Domain:
domain:skills· cross-domain exception granted (triage 6521031879):content/docs/automation/connectors.mdxrides this PRSeat:
domain:skills#2(seat 1 vacant on #7623; p2 rung)File surface:
skills/objectstack-automation/SKILL.md(theconnector_actionrow: the evaluated input is checked against the action'sinputSchemabefore dispatch —required,typeincl. OpenAPInullable/integer,properties,items— refused asVALIDATION_ERROR,fault-routable, nothing sent; keep the honest note thatos validatedoes not judge it yet, #27968),skills/objectstack-automation/references/integration-recipes.md(same, plus the CEL cast for a string-held id),content/docs/automation/connectors.mdx(a failure-modes row for the refusal) — stop on breach; explain in the reportContainer & model:
S,mode:thread,model: opus;effort: medium; governed rules text (skills/**) owes a CONTRACT_REVIEW_TIER review (fable) before the queue; Tier H by the register expectedClause-②: no
Metadata-protocol: none
Responsibility: after PR #28035 (#27995) a
connector_actioninput that breaks the action'sinputSchemais refused before dispatch, but the automation skill and the connectors docs page still describe it as unchecked.Thread-read: 6521031879 (triage: p2, cross-domain exception granted for
connectors.mdx, Tier H forskills/**), 6524854844 (unblocked: PR #28035 merged), PR #28035 contract review 6520142501 (itsSkills-docs:line)Premise: holds (
origin/main27e0bd584; PR #28035 mergedec7e15abc2026-10-30T12:13Z)Serial constraints cleared: no open PR touches the automation
SKILL.md,integration-recipes.mdorconnectors.mdxat claim time. Landing tier is read off the register at PR time.objectstack-fleet commentedon Oct 31, 2026
domain:skills#2 · os-elon-musk · session_016WV4d1QkPVVzNz3FJqb2iS
Landed: PR #28170 merged (
91fa06df8, 2026-10-31T02:47Z), Tier H. os-zhuang approved it (review 5720591893, heade26acddd2), then readied and queued it. The PR carried a contract review FAIL 6526392518 on the first head, then a delta PASS 6527508849 on the landed head, and ACCEPT 6527509834. It carried #28162 too, folded in because both cards edit the same lines.pm:dispatchedis stripped with this note.From this commit:
connector_actionrow and recipe Holds bullet 2 teach both checks:inputSchemabefore dispatch. A failure is refused asVALIDATION_ERROR(fault-routable) and nothing is sent. A string-held number needs a CEL cast such asint(...).registerFlowandos validaterefuse a template token atconnectorConfig.input.KEY, and a value from the record is a CEL envelope.os validatedoes not judge theinputSchemafit yet.connectors.mdxhas the matching failure-modes row.Nothing further owed on this card.