From 09b49fee41c689d65b3c140b6f9530d1eb802e50 Mon Sep 17 00:00:00 2001 From: Atharv Kumaria Date: Tue, 21 Jul 2026 15:10:29 -0700 Subject: [PATCH 1/2] docs: fix broken absolute link to CLI commands reference The link in customize-network-policy.mdx pointed to /reference/commands without the /user-guide/ prefix, so it 404s on the published Fern site. Use a relative link, matching the convention already used elsewhere on this page and other variant-shared docs pages. Signed-off-by: Atharv Kumaria --- docs/network-policy/customize-network-policy.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/network-policy/customize-network-policy.mdx b/docs/network-policy/customize-network-policy.mdx index 87c9e59f153..d26cecdc901 100644 --- a/docs/network-policy/customize-network-policy.mdx +++ b/docs/network-policy/customize-network-policy.mdx @@ -26,7 +26,7 @@ Refer to [Agent cannot reach a host-side HTTP service](../reference/troubleshoot Adding a host to the egress policy permits a connection only when the endpoint, port, method, and binary rules match. OpenShell still applies SSRF protection separately, so it can deny a request when the final address resolves to a loopback, private, link-local, or otherwise blocked internal range. -If a package installer or browser runtime download still fails with an SSRF-style denial after you add the public host, install that binary into the sandbox image at build time with [`$$nemoclaw onboard --from`](/reference/commands#--from-dockerfile) instead of relying on runtime egress. +If a package installer or browser runtime download still fails with an SSRF-style denial after you add the public host, install that binary into the sandbox image at build time with [`$$nemoclaw onboard --from`](../reference/commands#--from-dockerfile) instead of relying on runtime egress. ## Prerequisites From b4d9aec6a9d379033910819d56956d9f6d194ac8 Mon Sep 17 00:00:00 2001 From: Prekshi Vyas Date: Thu, 23 Jul 2026 11:16:24 -0700 Subject: [PATCH 2/2] test(docs): guard network policy command link --- test/network-policies-published-routes.test.ts | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/test/network-policies-published-routes.test.ts b/test/network-policies-published-routes.test.ts index 8cda850a620..14ac6f3a069 100644 --- a/test/network-policies-published-routes.test.ts +++ b/test/network-policies-published-routes.test.ts @@ -9,6 +9,7 @@ import { } from "../scripts/check-docs-published-routes.mts"; const NETWORK_POLICIES_SOURCE = "reference/network-policies.mdx"; +const CUSTOMIZE_POLICY_SOURCE = "network-policy/customize-network-policy.mdx"; const APPROVAL_LINK_TEXT = "Approve or Deny Agent Network Requests"; describe("shared Network Policies published routes", () => { @@ -35,4 +36,10 @@ describe("shared Network Policies published routes", () => { }, ]); }); + + it("resolves every customization guide link inside its published variants", () => { + const index = buildPublishedRouteIndex(); + + expect(findBrokenPublishedRoutes(CUSTOMIZE_POLICY_SOURCE, index)).toEqual([]); + }); });