@db-ux/core-components 3.0.1 → 3.0.2-copilot2-e7bf98b

package/agent/_instructions.md

@@ -0,0 +1,9 @@
+## Common AI mistakes
+
+### `DBButton` or `db-button`
+
+- available variants are `outline`, `brand`, `filled`, `ghost`
+- always use variant `outline` as default
+- use variant `brand` as CTA or primary action
+- if `noText`/`no-text` property is used add a `DBTooltip` or `db-tooltip` inside the Button
+- always add a `type` as property as best practise

package/build/assets/fonts/generate-eu-fonts.ts

@@ -1,5 +1,5 @@
 import { glob } from 'glob';
-import { exec } from 'node:child_process';
+import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 
 import { dirname } from 'path';
@@ -8,12 +8,16 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename).replaceAll('\\', '/');
 
-const execAsync = promisify(exec);
+// Security: Using execFile instead of exec to eliminate shell injection risks
+// execFile directly executes the binary without involving a shell
+const execFileAsync = promisify(execFile);
 
 const generateFonts = async () => {
 	console.log('Generating EU fonts...');
 	try {
-		await execAsync('pyftsubset --help');
+		// Security: Using array arguments instead of concatenated string
+		// This prevents shell interpretation of special characters
+		await execFileAsync('pyftsubset', ['--help']);
 	} catch (e) {
 		console.warn(
 			'You need to install pyftsubset. Check packages/foundations/assets/fonts/README.md for more information.'
@@ -22,19 +26,28 @@ const generateFonts = async () => {
 
 	try {
 		const files = await glob(`${__dirname}/*.ttf`);
-		const commands = files.map((file) =>
-			[
-				'pyftsubset',
+
+		for (const file of files) {
+			// Security: Validate that the file is within the expected directory
+			// and has the expected extension to prevent path traversal attacks
+			if (!file.startsWith(__dirname) || !file.endsWith('.ttf')) {
+				console.warn(`Skipping potentially unsafe file path: ${file}`);
+				continue;
+			}
+
+			// Security: Arguments are passed as separate array elements
+			// No shell concatenation means no risk of command injection
+			const args = [
 				file,
 				'--layout-features=*',
 				'--flavor=woff2',
 				`--unicodes-file=${__dirname}/unicode-eu.txt`,
 				`--output-file=${file.replace('.ttf', '-EU.woff2')}`
-			].join(' ')
-		);
+			];
 
-		for (const command of commands) {
-			const { stdout, stderr } = await execAsync(command);
+			// Security: execFile provides better performance and type safety
+			// as it doesn't spawn a shell process
+			const { stdout, stderr } = await execFileAsync('pyftsubset', args);
 			if (stdout) console.log(`stdout: ${stdout}`);
 			if (stderr) console.error(`stderr: ${stderr}`);
 		}

package/build/components/drawer/drawer.scss

@@ -26,6 +26,10 @@
 
 %full-horizontal {
 	&:not([data-width="full"]) {
+		/// Sets the maximum height of the drawer
+		/// @propertyname max-block-size
+		/// @cssprop --db-drawer-max-height
+		/// @default calc(100% - #{variables.$db-spacing-fixed-xl})
 		max-block-size: var(
 			--db-drawer-max-height,
 			calc(100% - #{variables.$db-spacing-fixed-xl})
@@ -87,6 +91,10 @@ $spacings: (
 
 	.db-drawer-header {
 		// We need this variable to overwrite it inside the header
+		/// Controls the bottom padding inside the drawer header
+		/// @propertyname padding-block-end
+		/// @cssprop --db-drawer-header-padding-block-end
+		/// @default #{map.get($spacing, "block")}
 		/* stylelint-disable-next-line db-ux/use-spacings */
 		padding-block-end: var(
 			--db-drawer-header-padding-block-end,
@@ -97,6 +105,10 @@ $spacings: (
 
 	.db-drawer-content {
 		// We need this variable to overwrite it inside the header
+		/// Controls left/right padding inside the drawer content area
+		/// @propertyname padding-inline
+		/// @cssprop --db-drawer-content-padding-inline
+		/// @default #{map.get($spacing, "inline")}
 		/* stylelint-disable-next-line db-ux/use-spacings */
 		padding-inline: var(
 			--db-drawer-content-padding-inline,
@@ -134,6 +146,19 @@ $spacings: (
 		box-shadow: variables.$db-elevation-md;
 
 		&:not([data-width="full"]) {
+			/// Sets the maximum width of the drawer
+			/// and some default values for the drawer
+			/// @propertyname max-inline-size
+			/// @cssprop --db-drawer-max-width
+			/// @default calc(100% - #{variables.$db-spacing-fixed-xl})
+			///
+			/// @example css - Wide drawer
+			///   .db-drawer-wide {
+			///     --db-drawer-max-width: 800px;
+			///   }
+			///   <div class="db-drawer db-drawer-wide">
+			///     <!-- wide drawer -->
+			///   </div>
 			max-inline-size: var(
 				--db-drawer-max-width,
 				calc(100% - #{variables.$db-spacing-fixed-xl})

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@db-ux/core-components",
-  "version": "3.0.1",
+  "version": "3.0.2-copilot2-e7bf98b",
   "type": "module",
   "description": "",
   "repository": {
@@ -10,6 +10,7 @@
   "author": "General technical components out of DB UX Design System (Version 3)",
   "license": "Apache-2.0",
   "files": [
+    "agent",
     "build"
   ],
   "scripts": {
@@ -27,6 +28,7 @@
     "compile:vue": "mitosis build --config configs/vue/mitosis.config.cjs && tsx scripts/exec/vue.ts && cpr ../../output/tmp/vue/src ../../output/vue/src --overwrite",
     "copy-assets": "cpr ../foundations/assets build/assets -o",
     "copy-output": "npm-run-all copy:*",
+    "copy:agent": "cpr agent ../../build-outputs/components/agent -o",
     "copy:outputs": "cpr build ../../build-outputs/components/build --overwrite",
     "copy:package.json": "cpr package.json ../../build-outputs/components/package.json --overwrite",
     "copy:readme": "cpr README.md ../../build-outputs/components/README.md --overwrite",
@@ -36,13 +38,14 @@
     "dev:scss": "npm run build-style:01_sass -- --watch",
     "dev:stencil": "nodemon --watch src --watch scripts --ext tsx,ts --exec \"npm run compile:stencil\"",
     "dev:vue": "nodemon --watch src --watch scripts --ext tsx,ts --exec \"npm run compile:vue\"",
+    "generate:agent": "mitosis build -c configs/mitosis.agent.config.cjs",
     "generate:component": "hygen mitosis new",
     "generate:docs": "hygen update-docs new",
     "prepack": "npm run copy-assets",
     "start": "nodemon --watch src --watch scripts --watch scripts --ext js,tsx,ts,scss,json --exec \"npm run build\""
   },
   "dependencies": {
-    "@db-ux/core-foundations": "3.0.1"
+    "@db-ux/core-foundations": "3.0.2-copilot2-e7bf98b"
   },
   "devDependencies": {
     "@builder.io/eslint-plugin-mitosis": "0.0.17",
@@ -54,6 +57,7 @@
     "hygen": "6.2.11",
     "nodemon": "3.1.10",
     "sass": "1.85.0",
+    "sassdoc": "^2.7.4",
     "tsx": "4.20.3"
   },
   "publishConfig": {