Skip to content

fix(plugin-chatbot): fence chatbot-floating's raw props spread - #8077

Merged
os-justin merged 1 commit into
mainfrom
claude/issue-7708-chatbot-floating-spread-fence
Sep 6, 2026
Merged

fix(plugin-chatbot): fence chatbot-floating's raw props spread#8077
os-justin merged 1 commit into
mainfrom
claude/issue-7708-chatbot-floating-spread-fence

Conversation

@os-justin

Copy link
Copy Markdown
Collaborator

Fixes #7708

What

chatbot-floating's registration (packages/plugin-chatbot/src/renderer.tsx) ended its FloatingChatbot element with a raw props spread (object-spread, three dots), LAST — where its two siblings (chatbot, chatbot-enhanced) spread toDomProps(props) (object-spread) FIRST. Per the card's ruling (triage comment 5550678895 on #7708, PM dispatch comment 5559736018): fence it, matching the siblings. Option 2 (declare the three keys on ChatbotFloatingSchema) was ruled out — it would fossilise an accidental channel as contract (AGENTS.md #0.1) and leaves the messages override untouched.

This closes all three consequences at once:

  1. A sent message now renders on a floating chatbot. The authored messages seed used to override the live messages prop (bound to the runtime messages) on every render (the raw spread landed after it), so neither the user's own message nor an autoResponse reply ever appeared — the p2 half of the card's grade. Fixed.
  2. processVisibility, surface and showAvatars go dark on chatbot-floating nodes. These reached the panel's ChatbotEnhanced component unfiltered even though ChatbotFloatingSchema never declared them. The three tripwire pins in renderer.authoring-faces-7655.test.tsx (section 4, from finding(types): ChatbotSchema pins type to 'chatbot', so chatbot-enhanced and chatbot-floating nodes have no authoring-face type #7655/PR feat(types): one named authoring-face type per chatbot registration — ChatbotEnhancedSchema and ChatbotFloatingSchema (objectui#7655) #7705) are flipped from lit to dark, deliberately, as that test's own docblock anticipated.
  3. displayMode / systemPrompt / model stop leaking as DOM attributes on the panel root (objectui#4425's leak class, the one plugin-chatbot registration that hadn't closed it). systemPrompt / model are still read normally by name — only the second, unfiltered forward is gone.

Falsifiable premise checked before committing to the fence (per dispatch): every member ChatbotFloatingSchema declares is consumed either by useObjectChat(...) off schema directly, or forwarded by name below the spread — none depend on the raw-spread channel. Verified by reading ChatbotFloatingSchema's own doc comment (packages/types/src/complex.ts) against the registration body before editing. No fork: fencing widens nothing and narrows only the accidental channel, matching the dispatch's Clause-② = no.

Why

Quoting the card: "⛔ Note the asymmetry: only the first option addresses the p2 half." The messages override is a user-visible functional break (a floating chat cannot show anything the user types), not a hygiene finding, and only fencing fixes it.

Tests

  • New: packages/plugin-chatbot/src/__tests__/renderer.floating-spread-fence-7708.test.tsx — the fix's own coverage, previously pinned nowhere:
    • headline: a message sent through the floating composer (and its autoResponse reply) renders, through the real SchemaRenderer host.
    • systemPrompt / model / displayMode no longer land as DOM attributes on the panel root.
  • Updated: packages/plugin-chatbot/src/__tests__/renderer.authoring-faces-7655.test.tsx section 4 — the three tripwire pins flip from lit to dark on chatbot-floating; chatbot-enhanced control cases unchanged (still lit — it reads these by name).
  • packages/types/src/complex.ts: ChatbotFloatingSchema's doc comment updated to describe the closed channel — no type-shape change.

Run locally, from the repo root:

  • pnpm exec vitest run packages/plugin-chatbot/ — 38 files / 458 tests passed.
  • pnpm exec vitest run packages/types/ — 131 files / 2418 tests passed.
  • pnpm --filter @object-ui/plugin-chatbot type-check — pass.
  • pnpm --filter @object-ui/types type-check — pass.
  • node scripts/check-handler-key-read-sites.mjs — pass.
  • node scripts/check-control-bytes.mjs — pass.
  • node scripts/check-published-tsconfig-tooling-exclude.mjs — pass.
  • node scripts/check-changeset-fixed.mjs, check-changeset-no-major.mjs, check-changeset-presence.mjs — pass.
  • eslint on every changed file — 0 errors (pre-existing any warnings only, none introduced by this diff).

Not run locally, both release-time/nightly gates per their own file headers (require a full-repo build the CI-per-PR path deliberately skips): check:published-dist and check:sdui-registration-pins (the latter also unrelated in substance — no sideEffects array or registration key changed here).

Risk / rollback

Behavior change on a shipped registration, shipped minor per this repo's changeset policy (breaking changes ship minor here, not major — see .changeset/7708-chatbot-floating-spread-fence.md). A document that authored processVisibility / surface / showAvatars on a chatbot-floating node to rely on this accidental channel loses that effect; author them on a chatbot-enhanced node instead. Rollback is reverting this PR (the raw spread returns; no data migration involved).


Generated by Claude Code

chatbot-floating ended its <FloatingChatbot> element with a raw
{...props} spread, LAST, where its two sibling registrations (chatbot,
chatbot-enhanced) spread {...toDomProps(props)} FIRST. Per the card's
ruling (fence, not declare), moving it to the head and filtering it
through toDomProps closes all three consequences at once: a sent
message now renders on a floating chatbot (the authored `messages`
seed no longer overrides the live runtime messages), processVisibility
/ surface / showAvatars go dark on chatbot-floating nodes (matching
what ChatbotFloatingSchema has always declared), and displayMode /
systemPrompt / model stop leaking as DOM attributes on the panel root.

The three tripwire pins in renderer.authoring-faces-7655.test.tsx
(section 4) flip from lit to dark, deliberately, as planned when they
were written. New coverage owns the two consequences that were not
pinned anywhere before this fix: renderer.floating-spread-fence-7708.test.tsx.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YBWFb5YgMU5dw8p2VKj16S
@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

✅ Console Performance Budget

Metric Value Budget
Eager closure (gzip, 50 chunks) 3186.1 KB 3191.4 KB
Main entry chunk (gzip) 143.5 KB 350 KB
Entry file index-CeDIL-c3.js
Status PASS

The eager closure is every chunk the entry reaches through static imports — what the browser fetches and parses before the app renders. The entry chunk on its own is a small fraction of it.


📦 Bundle Size Report

Package Size Gzipped
app-shell (consoleActionDispatch.js) 0.20KB 0.19KB
app-shell (index.js) 15.67KB 5.75KB
app-shell (runtime-config.js) 20.68KB 7.36KB
app-shell (types.js) 0.01KB 0.04KB
app-shell (urlParams.js) 10.06KB 3.86KB
auth (ActiveOrganizationStorage.js) 25.05KB 9.16KB
auth (AuthContext.js) 0.31KB 0.24KB
auth (AuthGuard.js) 2.07KB 1.00KB
auth (AuthProvider.js) 40.18KB 10.59KB
auth (AuthShell.js) 3.49KB 1.40KB
auth (ForgotPasswordForm.js) 12.21KB 3.45KB
auth (LoginForm.js) 18.15KB 5.39KB
auth (PreviewBanner.js) 0.90KB 0.50KB
auth (RegisterForm.js) 6.65KB 2.22KB
auth (SocialSignInButtons.js) 9.61KB 3.89KB
auth (UserMenu.js) 3.41KB 1.23KB
auth (auth-gate-events.js) 1.29KB 0.66KB
auth (authStyles.js) 5.04KB 1.72KB
auth (createAuthClient.js) 40.21KB 10.80KB
auth (createAuthenticatedFetch.js) 8.46KB 3.43KB
auth (index.js) 3.19KB 1.44KB
auth (invitation-status.js) 1.22KB 0.70KB
auth (org-roles.js) 6.66KB 2.78KB
auth (phone-identifier.js) 1.11KB 0.66KB
auth (types.js) 0.59KB 0.35KB
auth (useAuth.js) 5.30KB 1.02KB
auth (useWorkspaceAdminStatus.js) 5.13KB 2.35KB
collaboration (CommentThread.js) 26.08KB 7.56KB
collaboration (LiveCursors.js) 3.17KB 1.27KB
collaboration (PresenceAvatars.js) 6.49KB 2.64KB
collaboration (PresenceProvider.js) 2.79KB 1.13KB
collaboration (index.js) 1.68KB 0.73KB
collaboration (useCollaborationTranslation.js) 6.05KB 2.52KB
collaboration (useCommentSearch.js) 1.98KB 0.88KB
collaboration (useConflictResolution.js) 7.75KB 1.86KB
collaboration (useMentionNotifications.js) 1.81KB 0.68KB
collaboration (usePresence.js) 6.33KB 1.84KB
collaboration (useRealtimeSubscription.js) 7.91KB 2.01KB
components (index.js) 497.06KB 113.79KB
core (index.js) 6.96KB 2.79KB
create-plugin (index.js) 10.08KB 3.26KB
data-objectstack (index.js) 182.08KB 50.62KB
fields (index.js) 242.43KB 61.25KB
i18n (LocalizationContext.js) 1.76KB 0.96KB
i18n (builtinAggregateLabels.js) 0.86KB 0.49KB
i18n (currency.js) 1.22KB 0.64KB
i18n (fallbackInterpolation.js) 6.25KB 2.77KB
i18n (i18n.js) 6.57KB 2.76KB
i18n (index.js) 3.65KB 1.47KB
i18n (pickLocalized.js) 7.62KB 3.26KB
i18n (provider.js) 26.89KB 9.04KB
i18n (useDisplayLocale.js) 2.85KB 1.45KB
i18n (useObjectLabel.js) 34.34KB 9.17KB
i18n (useSafeTranslation.js) 5.60KB 2.33KB
layout (index.js) 38.84KB 10.94KB
mobile (MobileProvider.js) 0.92KB 0.49KB
mobile (ResponsiveContainer.js) 0.94KB 0.38KB
mobile (breakpoints.js) 1.51KB 0.70KB
mobile (createOfflineDataSource.js) 5.61KB 1.75KB
mobile (index.js) 1.99KB 0.87KB
mobile (offlineQueue.js) 3.91KB 1.35KB
mobile (pwa.js) 0.97KB 0.49KB
mobile (serviceWorker.js) 1.48KB 0.62KB
mobile (serviceWorkerSource.js) 3.41KB 1.48KB
mobile (useBreakpoint.js) 1.54KB 0.65KB
mobile (useGesture.js) 6.96KB 1.98KB
mobile (useOfflineSync.js) 1.99KB 0.72KB
mobile (usePullToRefresh.js) 2.53KB 0.85KB
mobile (useResponsive.js) 0.72KB 0.42KB
mobile (useSpecGesture.js) 4.39KB 1.66KB
mobile (useTouchTarget.js) 1.01KB 0.54KB
permissions (MePermissionsProvider.js) 11.71KB 4.29KB
permissions (PermissionContext.js) 0.31KB 0.25KB
permissions (PermissionGuard.js) 0.89KB 0.45KB
permissions (PermissionProvider.js) 6.24KB 2.16KB
permissions (discardProofCache.js) 1.04KB 0.55KB
permissions (evaluator.js) 5.12KB 1.74KB
permissions (index.js) 0.93KB 0.41KB
permissions (store.js) 0.91KB 0.42KB
permissions (useFieldPermissions.js) 1.28KB 0.53KB
permissions (usePermissions.js) 4.83KB 2.27KB
plugin-ai (index.js) 15.16KB 3.68KB
plugin-calendar (index.js) 47.29KB 13.18KB
plugin-charts (index.js) 70.43KB 19.71KB
plugin-chatbot (index.js) 193.54KB 46.04KB
plugin-dashboard (index.js) 131.41KB 34.43KB
plugin-designer (index.js) 211.51KB 43.01KB
plugin-detail (index.js) 247.59KB 63.48KB
plugin-editor (index.js) 2.23KB 1.05KB
plugin-form (index.js) 131.01KB 32.32KB
plugin-gantt (index.js) 167.16KB 40.99KB
plugin-grid (index.js) 208.56KB 56.63KB
plugin-kanban (index.js) 52.30KB 14.49KB
plugin-list (index.js) 113.24KB 27.66KB
plugin-map (index.js) 20.35KB 6.77KB
plugin-markdown (index.js) 13.88KB 4.80KB
plugin-report (index.js) 43.42KB 11.92KB
plugin-timeline (index.js) 29.95KB 8.67KB
plugin-tree (index.js) 9.19KB 3.19KB
plugin-view (index.js) 84.33KB 20.75KB
providers (DataSourceProvider.js) 0.75KB 0.39KB
providers (MetadataProvider.js) 1.37KB 0.59KB
providers (ThemeProvider.js) 1.90KB 0.85KB
providers (UploadProvider.js) 11.66KB 3.50KB
providers (index.js) 0.45KB 0.23KB
providers (types.js) 0.01KB 0.04KB
react-runtime (index.js) 5.62KB 2.34KB
react (LazyPluginLoader.js) 4.47KB 1.63KB
react (SchemaRenderer.js) 81.07KB 26.86KB
react (data-invalidation.js) 5.05KB 2.08KB
react (index.js) 4.63KB 2.18KB
react (schema-input.js) 2.32KB 1.24KB
react (spec-input.js) 0.20KB 0.18KB
sdui-parser (codegen.js) 5.41KB 2.34KB
sdui-parser (dashboard-widget-options.js) 3.08KB 1.30KB
sdui-parser (index.js) 4.93KB 2.24KB
sdui-parser (input-type.js) 2.84KB 1.40KB
sdui-parser (parse.js) 20.57KB 5.88KB
sdui-parser (provenance.js) 3.66KB 1.82KB
sdui-parser (types.js) 0.28KB 0.23KB
sdui-parser (validate.js) 10.35KB 3.60KB
types (ai.js) 0.20KB 0.17KB
types (api-types.js) 0.20KB 0.18KB
types (app.js) 2.87KB 1.00KB
types (base.js) 0.20KB 0.18KB
types (blocks.js) 0.20KB 0.18KB
types (complex.js) 2.74KB 1.41KB
types (crud.js) 0.20KB 0.18KB
types (dashboard-filter-alias.js) 6.23KB 2.74KB
types (data-display.js) 3.75KB 1.85KB
types (data-protocol.js) 0.20KB 0.19KB
types (data.js) 0.20KB 0.18KB
types (designer.js) 1.85KB 0.85KB
types (disclosure.js) 0.20KB 0.18KB
types (error-code.js) 1.54KB 0.88KB
types (expression.js) 0.20KB 0.18KB
types (feedback.js) 0.20KB 0.18KB
types (field-types.js) 0.20KB 0.18KB
types (form.js) 0.20KB 0.18KB
types (http-inflight.js) 8.87KB 3.73KB
types (http-retry.js) 4.32KB 2.02KB
types (icon-key-migration.js) 4.26KB 1.63KB
types (index.js) 4.74KB 2.25KB
types (layout.js) 0.20KB 0.18KB
types (managed-by.js) 0.19KB 0.18KB
types (mobile.js) 4.73KB 2.28KB
types (navigation.js) 0.20KB 0.18KB
types (objectql.js) 0.20KB 0.18KB
types (overlay.js) 0.20KB 0.18KB
types (permissions.js) 0.20KB 0.18KB
types (plugin-scope.js) 0.20KB 0.18KB
types (record-components.js) 0.20KB 0.19KB
types (record-semantics.js) 1.28KB 0.67KB
types (registry.js) 0.20KB 0.18KB
types (reports.js) 0.20KB 0.18KB
types (select-option.js) 0.20KB 0.19KB
types (spec-report.js) 5.05KB 1.93KB
types (spec-ui-namespace.js) 0.20KB 0.19KB
types (system-fields.js) 3.33KB 1.54KB
types (theme.js) 6.28KB 2.87KB
types (ui-action.js) 8.11KB 3.32KB
types (views.js) 0.20KB 0.18KB
types (widget.js) 0.20KB 0.18KB

Size Limits

  • ✅ Core packages should be < 50KB gzipped
  • ✅ Component packages should be < 100KB gzipped
  • ⚠️ Plugin packages should be < 150KB gzipped

Copy link
Copy Markdown
Collaborator Author

Landing — in-seat contract review PASSED; standing down on one red that is not this PR's

By the dispatching seat (session_01YBWFb5YgMU5dw8p2VKj16S, os-justin), 15:2xZ.

needs:contract-review → PASS

Reviewed at CONTRACT_REVIEW_TIER against origin/main (295804a63). Clause-② direction: narrows only. ChatbotFloatingSchema's declared member set is byte-identical — the only packages/types edit is two doc-comment hunks in complex.ts (~:1240-1248, ~:1375-1392), every changed line beginning *, both export interface lines unchanged context. What narrows is the delivered set, down to the declared set plus the objectui#4425 whitelist.

The fence was verified member by member against the registration on main, not taken on the PR's word: all 20 ChatbotSharedKey members are named schema.KEY reads into useObjectChat or forwarded by name; enableMarkdown / enableFileUpload / floatingConfig forwarded by name; onClear consumed by handleClear; displayMode is a ?: never tombstone with no read; className / disabled are destructured before ...props, so the spread never carried them. ⇒ Nothing the face declares depended on the spread. The premise the ruling hung on holds.

Two things the review found that the changeset does not name — neither a defect, both worth recording:

  • A bonus fix. Moving the spread to the head also stops an authored onClear from overriding handleClear. Pre-fix, authoring onClear meant clear() never ran.
  • An authored style now also stops reaching the panel (declared on BaseSchema, not in SDUI_DOM_PASS_THROUGH_KEYS). This is correct: both sibling registrations already drop it, and ChatbotEnhanced.tsx:2965-2966 writes style={{ maxHeight }} before {...props} — so an authored style was overriding the panel's own height pin. Behaviour improves; it is simply undisclosed.

The leak pin was checked for vacuity and is not vacuous: data-obj-id is a prop SchemaRenderer hands the component (SchemaRenderer.tsx:1586), not a wrapper div, so [data-obj-id="chat-node"] resolves to the ChatbotEnhanced root — the exact element {...props} was leaking onto. Changeset minor confirmed correct.

⛔ Standing down on Live E2E (informational) — it is NOT this PR's

Every other check on this PR is green: all four Test shards, Type Check, Lint, Build & E2E, Changeset Bump Policy, Governed Surface Queue Guard.

Live E2E (informational) is red, and it is red on main itself — established first-hand, ⛔ not inherited:

job step 7 Start ObjectStack backend (published packages) job
main 09-05, run 33950494089 job 101264218858 ✅ success in 76s ✅ success — the lit control
main 09-06, run 34017174769 job 101442890465 ❌ failure after ~6 min ❌ failure, steps 8–14 all skipped

⚠️ And the trap that hid it: that run reports conclusion: success at the RUN level while its job fails. ⛔ Never read a workflow run's conclusion as evidence in this repo.

No fix exists to port — the break is undiagnosed and carded as objectui#8084, with the published-package hypothesis named as the first thing to test. ⛔ No re-run is being spent here: this is a reproducible base-red, not a flake, and a re-run would only confirm what two main runs already establish.

⇒ Per the standing rule, this is one comment naming the failing check and why it is not this PR's, and then the PR proceeds. Stripping needs:contract-review, flipping ready, enqueuing.


Generated by Claude Code

@os-justin
os-justin marked this pull request as ready for review September 6, 2026 15:11
@os-justin
os-justin added this pull request to the merge queue Sep 6, 2026

Copy link
Copy Markdown
Collaborator Author

⚠️ Correction — my landing comment said the review ran at CONTRACT_REVIEW_TIER. It did not.

Posted additively; ⛔ the original stays as the audit record.

What I claimed. The landing comment above (5560139874) opens "Reviewed at CONTRACT_REVIEW_TIER against origin/main", and I stripped needs:contract-review, flipped ready and enqueued on that basis.

What is true. That review ran at opus. I then read the constant from the single source of truth, objectstack:scripts/pm/dispatch-gates.mjs:10023:

export const CONTRACT_REVIEW_TIER = 'claude-fable-5-1';
export const TIER_FLOOR           = 'sonnet';
export const TIER_DEFAULT         = 'opus';

opus is the default tier. fable is the contract-review tier. The compensating control I said I had satisfied, I had not.

⚠️ The same error runs through this whole round's paperwork: I dispatched four cards at sonnet while calling it "default judgment tier" — sonnet is the floor, which the skill reserves for mechanical cards — and dispatched #6958 at opus calling it "raised one step to contract-review", when opus is simply the default. ⛔ None of this is the devs' error; it is mine, and it was in every claim comment.

What I am doing about it

A review at the real tier (fable) is now running across all four PRs of this round, instructed to re-derive the direction verdict independently rather than inherit the opus review's conclusions, and to lead with any finding on this PR and #8075 specifically because both are already landing.

I have not pulled this PR from the queue, and that is a judgement I am stating rather than hiding. Two independent readings — mine from the tree and the opus review's member-by-member walk of ChatbotFloatingSchema against the registration — both established that the declared member set is byte-identical and only the delivered set narrows. Nothing exported moves. A queue withdrawal has its own cost and I do not think an under-tier review of a diff measured twice as narrowing-only justifies it. ⚠️ If the fable audit finds otherwise I will act on it immediately, up to and including a revert if this has merged by then.

What does not change

The opus review's substantive findings stand on their own evidence and were independently useful — it caught two real defects on the sibling PRs (#8080's wrong changeset bump, #8089's error-severity lint failure), neither of which any gate enforces. Being below tier makes my claim false; it does not retroactively make its readings wrong. The distinction matters and I am not going to blur it in either direction.


Generated by Claude Code

Copy link
Copy Markdown
Collaborator Author

Follow-up to the correction: CONTRACT_REVIEW_TIER is measurably UNAVAILABLE — the quota-exhaustion exemption applies, and opus was the right fallback

I dispatched the fable re-review described in my correction above. It failed:

Agent terminated early due to an API error: You've reached your Fable limit.
error type rate_limit, HTTP 429, request id req_011CenQv6qThwhtEfXed1Ne8
model sent to the API: claude-fable-5-1

A measurement, not an assumption, and it independently corroborates the inherited seat note that this tier was quota-rejected account-wide earlier today.

What that means for this PR — the outcome was right; only my label was wrong

The skill's downgrade rule is explicit: 额度耗尽豁免仅当契约复审档实测不可用才落默认判断档,⛔ 不再往下, with needs:contract-review as the compensating control.

  • CONTRACT_REVIEW_TIER (fable) — measured unavailable, above.
  • The permitted fallback is TIER_DEFAULT = opus, and ⛔ no lower.
  • The review that cleared this PR ran at opus — exactly the permitted fallback.
  • needs:contract-review was carried on the draft and stripped only on PASS — the prescribed compensation, applied.

⇒ The review that landed this PR was at the correct tier under the exemption. ⛔ What was wrong was my naming of it: I called opus "CONTRACT_REVIEW_TIER" when opus is the default tier and fable is the contract-review tier. That false statement stands corrected above and I am not walking it back — but the control itself was satisfied, and the decision to leave this PR in the queue is now supported by a measurement rather than by my judgement alone.

⚠️ One error is NOT dissolved by this, and it is worth recording plainly

The exemption permits falling back to the default tier and ⛔ explicitly no lower. Four cards this round — #7429, #7708, #7681, #7755 — were dispatched at sonnet, the floor, which the skill reserves for mechanical cards whose correctness a gate farm decides. None of the four was mechanical. That is a real breach of the tier rule, it is mine and not the devs', and no exemption covers it.

What limits the damage is that every one of the four was reviewed afterwards at the permitted fallback tier: two passed (this PR and #8075) and two had genuine defects caught and fixed (#8080's wrong changeset bump, #8089's error-severity lint failure). ⇒ The review layer caught what the under-tier dispatch layer let through, which is the argument for keeping that layer — ⛔ not an argument that the dispatch tier did not matter.

Recorded in the seat post so the next seat inherits the corrected tier mapping rather than my wrong one:

TIER_FLOOR           = 'sonnet'   ← mechanical cards only
TIER_DEFAULT         = 'opus'     ← M/L, rulings, anything with design judgement
CONTRACT_REVIEW_TIER = 'fable'    ← clause ①/② work; MEASURED UNAVAILABLE 2026-09-06

Generated by Claude Code

Merged via the queue into main with commit d3499b3 Sep 6, 2026
33 of 34 checks passed
@os-justin
os-justin deleted the claude/issue-7708-chatbot-floating-spread-fence branch September 6, 2026 15:26
os-justin pushed a commit that referenced this pull request Sep 6, 2026
loading, showAvatars, userAvatar, assistantAvatar, markdown and height were
declared on ChatbotSchema, mirrored on its Zod twin, and read by no
plugin-chatbot registration: a schema.KEY census per ComponentRegistry.register
body returns 0/0/0 for all six, with placeholder 1/1/1, messages 1/1/1,
userAvatarUrl 1/1/1, maxHeight 1/1/0, floatingConfig 0/0/1 and
processVisibility 0/1/0 lit on the same instrument.

Each becomes `?: never` on complex.ts plus retirementTombstone() on
complex.zod.ts — both halves, the convention #6972 / #6355 / #7779 already
carry. Deleting them was the wrong route: all six have a Zod arm, and
BaseSchema is .passthrough() with a [key: string]: any index signature, so an
undeclared key is KEPT, not refused.

Enforce was refused per key: <Chatbot>, the component this registration
renders, declares none of the six, so enforcing means growing a component prop
or publishing a second spelling of a key that already works.

showAvatars is the one key the FENCE turned dark rather than a key nothing ever
read: <ChatbotEnhanced> has such a prop and chatbot-floating's raw props spread
delivered an authored value to it until #7708 ruled fence (PR #8077). The
distinction is recorded in the tombstone comment, the changeset and the pin.

processVisibility is NOT folded in — chatbot-enhanced reads it (0/1/0) — and is
pinned live as the scope control.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YBWFb5YgMU5dw8p2VKj16S
github-merge-queue Bot pushed a commit that referenced this pull request Sep 6, 2026
…es (#8154)

loading, showAvatars, userAvatar, assistantAvatar, markdown and height were
declared on ChatbotSchema, mirrored on its Zod twin, and read by no
plugin-chatbot registration: a schema.KEY census per ComponentRegistry.register
body returns 0/0/0 for all six, with placeholder 1/1/1, messages 1/1/1,
userAvatarUrl 1/1/1, maxHeight 1/1/0, floatingConfig 0/0/1 and
processVisibility 0/1/0 lit on the same instrument.

Each becomes `?: never` on complex.ts plus retirementTombstone() on
complex.zod.ts — both halves, the convention #6972 / #6355 / #7779 already
carry. Deleting them was the wrong route: all six have a Zod arm, and
BaseSchema is .passthrough() with a [key: string]: any index signature, so an
undeclared key is KEPT, not refused.

Enforce was refused per key: <Chatbot>, the component this registration
renders, declares none of the six, so enforcing means growing a component prop
or publishing a second spelling of a key that already works.

showAvatars is the one key the FENCE turned dark rather than a key nothing ever
read: <ChatbotEnhanced> has such a prop and chatbot-floating's raw props spread
delivered an authored value to it until #7708 ruled fence (PR #8077). The
distinction is recorded in the tombstone comment, the changeset and the pin.

processVisibility is NOT folded in — chatbot-enhanced reads it (0/1/0) — and is
pinned live as the scope control.


Claude-Session: https://claude.ai/code/session_01YBWFb5YgMU5dw8p2VKj16S

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

2 participants