Skip to content

fix(web_core): schema parity and client event context resolution#783

Merged
gspencergoog merged 4 commits intogoogle:mainfrom
gspencergoog:fix_lit_examples
Mar 5, 2026
Merged

fix(web_core): schema parity and client event context resolution#783
gspencergoog merged 4 commits intogoogle:mainfrom
gspencergoog:fix_lit_examples

Conversation

@gspencergoog
Copy link
Collaborator

  • Resolves inconsistencies between Zod schema definitions and TypeScript types for v0.8 API model updates.
  • Refines data path resolution in the Lit shell for resolving context bound values in component actions.

- Resolves inconsistencies between Zod schema definitions and TypeScript types for v0.8 API model updates.
- Refines data path resolution in the Lit shell for resolving context bound values in component actions.
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request focuses on achieving parity between Zod schemas and TypeScript types for the v0.8 API, and improving data path resolution. A significant security vulnerability has been identified: the introduction of recursive data structures in ValueMapSchema without a depth limit poses a potential Denial of Service (DoS) risk due to unbounded recursion. Furthermore, the review highlighted a leftover .only in a test file and an opportunity to refactor demo scripts in package.json for better efficiency.

Copy link
Collaborator

@ditman ditman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's a couple of comments from Gemini that might make sense, but if not, ship it! Thanks for the quick fix!

@gspencergoog
Copy link
Collaborator Author

Addressed the gemini review feedback.

@gspencergoog gspencergoog merged commit b0a2c94 into google:main Mar 5, 2026
8 checks passed
@github-project-automation github-project-automation bot moved this from Todo to Done in A2UI Mar 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants