@vanduo-oss/vd3-cbun 1.2.0 → 1.3.1

package/CHANGELOG.md

@@ -4,6 +4,69 @@ All notable changes to `@vanduo-oss/vd3-cbun` are documented here. This file
 tracks the PACKAGE only — never docs-site content. Per-component VERSION
 constants are listed alongside each bundle release.
 
+## 1.3.1 — 2026-08-02
+
+**flowchart** — CSS token mixes no longer blend toward fixed light cream/white
+(`#ffffff`, `#efe7d4`, `#f5ecd8`, …); panels, nodes, handles, and inspector
+chrome now follow `--vd-bg-primary` / `--vd-bg-secondary` so dark mode stays
+coherent with the site palette. Toolbar actions use Draw-style Phosphor icons
+(zoom / reset / fit / undo / redo / clear) instead of faint text glyphs; the
+left shapes rail is a compact icon panel with stronger stroke contrast and
+pressed states. The layout `<select>` always shows the active mode
+(Tree / Radial / Grid) instead of resetting to a placeholder, with a single
+no-repeat caret. Shell `min-height` no longer forces 560px, so short parents
+(docs fullscreen) keep the bottom border visible. Styling + chrome UX only;
+`VD_FLOWCHART_VERSION` remains `1.2.0` (serialization unchanged).
+
+## 1.3.0 — 2026-07-24
+
+Minor release. **New — chart mark clicks:** `VdChart` (and the typed
+`VdBarChart` / `VdLineChart` / … wrappers) now forward the core's mark-click
+callbacks as an idiomatic Vue emit family — `bar-click`, `point-click`, and
+`slice-click`, each carrying the core `ClickEvent` (`{ event, datum, index }`).
+The wrapper previously dropped the core's `onBarClick` / `onPointClick` /
+`onSliceClick` options, so a `<VdChart>` consumer could not receive a mark click
+at all even though the core's click wiring was already in place. Additive and
+backward-compatible; the `VdChartEmits` type is exported from `./charts`. Takes
+`VD_CHARTS_VERSION` `1.0.1 → 1.1.0`.
+
+**Hardening — bounded deserialization (draw + flowchart):** `normalizeDocument()`
+now caps an untrusted / corrupt document, **truncating (never throwing)** beyond
+conservative limits so a shared or hostile document cannot freeze the tab by
+being coerced O(n) and rendered — draw caps `MAX_SHAPES` (10 000) and
+`MAX_POINTS_PER_SHAPE` (100 000); flowchart caps `MAX_NODES` / `MAX_EDGES`
+(10 000 each). The `toJSON()` output is unchanged for in-range documents, so
+`VD_DRAW_VERSION` stays `1.1.0` and `VD_FLOWCHART_VERSION` stays `1.2.0` (both
+load-bearing — serialized into saved documents).
+
+**Core bug fixes** (framework-agnostic, no API or serialization change).
+**draw** — the undo history now coalesces only at the top of the stack, so a
+coalescing edit (nudge / style / text) made right after an undo no longer
+overwrites an earlier snapshot and corrupts the redo branch (mirrors the
+flowchart core's guard). **charts** — `renderBarChart` / `renderMultiBarChart`
+clamp the bar baseline into the rendered y-domain, so an explicit `yMin > 0` no
+longer draws bars past the axis floor (matches the area/line clamp).
+**music-player** — a repeat-off playlist now stops and dispatches
+`musicplayer:ended` at the final track instead of wrapping with a modulo and
+looping forever; the wrap stays exclusive to `repeat: 'all'`. **hex-grid** —
+`destroy()` now removes every canvas listener `_setupEvents` attaches (stored
+named handlers), fixing a leak on caller-supplied, reused canvases.
+**code-editor** — the CSS/JavaScript tokenizer now classifies an unterminated
+`/*` block comment to end-of-input as a `comment` instead of `plain`. Minor:
+bundle `1.2.0 → 1.3.0`.
+
+Also non-runtime: hex-grid + music-player `vue.d.ts` now type their emit events,
+the draw type surface declares its constants in `shapes.d.ts` (matching runtime),
+and added coverage for the code-editor keymap/`destroy()`, the music-player
+recreate teardown, tokenizer edge classification, and draw `clearHistory()`.
+
+Component versions in this release: **charts 1.1.0, code-editor 1.0.1, draw
+1.1.0, flowchart 1.2.0, hex-grid 1.0.1, music-player 1.0.1** — `charts` takes a
+minor bump `1.0.1 → 1.1.0` for the mark-click emits; code-editor, hex-grid, and
+music-player carry their `1.0.1` core-fix patch; `draw` stays `1.1.0` and
+`flowchart` continues its old-line `1.2.0` lineage (the deserialization caps
+change neither `toJSON()` format).
+
 ## 1.2.0 — 2026-07-22
 
 Adds a sixth component, **`draw`** (`@vanduo-oss/vd3-cbun/draw` + `./draw/css`),

package/README.md

@@ -8,10 +8,11 @@ tree-shakeable subpath exports. It replaces the four per-repo publishes
 (`@vanduo-oss/charts`, `@vanduo-oss/flowchart`, `@vanduo-oss/hex-grid`,
 `@vanduo-oss/music-player`) of the old line.
 
-**Status: 1.2.0.** Six Vue3-only component families — charts, code-editor, draw,
+**Status: 1.3.1.** Six Vue3-only component families — charts, code-editor, draw,
 flowchart, hex-grid, music-player — each on its own tree-shakeable subpath, with
-the esbuild metafile isolation guard in place. (1.2.0 adds the first-party
-`draw` vector drawing tool — a brush engine + color palette; see the
+the esbuild metafile isolation guard in place. (1.3.0 adds chart mark-click
+emits + bounded draw/flowchart deserialization; 1.3.1 dark-aware flowchart
+chrome, icon toolbar, and short-parent sizing; see the
 [changelog](./CHANGELOG.md).)
 
 ## Install
@@ -57,8 +58,8 @@ import { VD3_CBUN_VERSIONS } from '@vanduo-oss/vd3-cbun';
 
 Each subpath entry (`dist/<component>/index.js`) re-exports **both** the Vue
 component and its framework-agnostic core (the core aliased with a `Core`
-suffix where the names collide — `VdCodeEditorCore`, `VdFlowchartCore`,
-`VdHexGridCore`). Isolation
+suffix where the names collide — `VdCodeEditorCore`, `VdDrawCore`,
+`VdFlowchartCore`, `VdHexGridCore`). Isolation
 is not a convention but a build guard: `scripts/build.js` bundles every entry
 separately with `vue` external, emits an esbuild metafile (`dist/meta.json`),
 and **fails the build** if any component entry's inputs reach outside its own
@@ -69,8 +70,8 @@ to confirm tree-shaking downstream.
 
 Notes:
 
-- `vue >=3.3.0` is a **required** peer dependency (the only runtime dep; never
-  bundled — it stays external in both the esm and cjs outputs).
+- The `vue` peer (see [Install](#install)) is never bundled — it stays external
+  in both the esm and cjs outputs.
 - Named exports only — no default exports on any subpath.
 - No IIFE builds and no `./vue` subpaths — the Vue bindings ARE the subpath
   exports; framework-agnostic cores stay exported alongside them.
@@ -82,11 +83,11 @@ Notes:
 The bundle's own semver (`package.json` version) is decoupled from the
 components inside it. Each component carries a VERSION constant tracked in
 `component-versions.json` at the repo root and asserted in tests against the
-exported `VD3_CBUN_VERSIONS` map. charts, code-editor, hex-grid, and
-music-player sit at `1.0.0`, draw at `1.1.0`; **flowchart continues its old-line lineage at
-`1.2.0`** because `VD_FLOWCHART_VERSION` is load-bearing — it is serialized
-into user documents via `toJSON().version`. A new component enters the manifest
-at `1.0.0` (`draw` did, in bundle 1.2.0).
+exported `VD3_CBUN_VERSIONS` map. charts, code-editor, hex-grid, and music-player
+sit at `1.0.1`, draw at `1.1.0`; **flowchart continues its
+old-line lineage at `1.2.0`** because `VD_FLOWCHART_VERSION` is load-bearing —
+it is serialized into user documents via `toJSON().version`. A new component
+enters the manifest at `1.0.0` (`draw` did, in bundle 1.2.0).
 
 ## Theming
 
@@ -113,9 +114,10 @@ tokens works — but it is the canonical source.)
 
 ## Security
 
-- **One runtime dependency** — the `vue >=3.3.0` peer; nothing else is bundled
-  or required (`vue` stays external in every esm/cjs output, and the build fails
-  if any other module is externalized or any `node_modules` input is bundled).
+- **No bundled dependencies** — beyond the `vue` peer ([Install](#install)),
+  nothing is bundled or required; the build fails if any other module is
+  externalized or any `node_modules` input is bundled (the
+  [isolation guard](#subpath-import-model)).
 - **Hardened `.npmrc`:** `ignore-scripts`, `minimum-release-age`, `save-exact`,
   `strict-peer-dependencies`, `trust-policy=no-downgrade`,
   `block-exotic-subdeps`, and an explicit `registry`.

package/SKILL.md

@@ -43,7 +43,7 @@ the scales (`scaleLinear`, `scaleTime`, `scaleBand`, `scalePoint`,
 `scaleOrdinal`), accessor/tick helpers (`createAccessor`, `ticks`,
 `niceDomain`), the path builders (`linePath`, `areaPath`, `arcPath`), and
 `resolveTheme`. No name collision, so the core factories keep their own names.
-CSS ships at `@vanduo-oss/vd3-cbun/charts/css`. `VD_CHARTS_VERSION` is `1.0.0`.
+CSS ships at `@vanduo-oss/vd3-cbun/charts/css`. `VD_CHARTS_VERSION` is `1.0.1`.
 
 ## Code-editor
 
@@ -136,7 +136,7 @@ subpath (coordinate transforms, rotation, distance, plus the terrain tables:
 and the `isPassable` / `getMovementCost` / `getTerrainYields` / `getTerrainColor`
 helpers). Hex-grid ships **no CSS** — it renders to a canvas and reads `--vd-*`
 theme tokens off the host element via `getComputedStyle`. `VD_HEX_VERSION` is
-`1.0.0`.
+`1.0.1`.
 
 ## Music-player
 
@@ -153,7 +153,7 @@ core (no name collision, so it keeps its own name) re-exported alongside
 `musicplayer:detach`, `musicplayer:attach`, `musicplayer:minimize`,
 `musicplayer:expand`); the wrapper re-emits each as a Vue event (`@play`,
 `@trackchange`, …, plus `@ready`) carrying `event.detail`. CSS ships at
-`@vanduo-oss/vd3-cbun/music-player/css`. `VD_MUSIC_PLAYER_VERSION` is `1.0.0`.
+`@vanduo-oss/vd3-cbun/music-player/css`. `VD_MUSIC_PLAYER_VERSION` is `1.0.1`.
 
 ## Theming
 

package/dist/charts/index.cjs

@@ -70,7 +70,7 @@ var DEFAULT_COLORS = [
   "#be4bdb",
   "#fd7e14"
 ];
-var VD_CHARTS_VERSION = "1.0.0";
+var VD_CHARTS_VERSION = "1.1.0";
 var chartId = 0;
 function nextId(prefix) {
   chartId += 1;
@@ -946,7 +946,7 @@ function renderBarChart(instance) {
   drawAnnotations(svg, options, plot, xScale, yScale, theme);
   const labels = dataLabelConfig(options);
   const markGroup = append(svg, svgEl("g", { class: "vd-chart-marks vd-chart-bars" }));
-  const baseline = yScale(0);
+  const baseline = yScale(Math.min(Math.max(0, yDomain[0]), yDomain[1]));
   rows.forEach((row) => {
     const x = xScale(row.x);
     const y = yScale(row.y);
@@ -1038,7 +1038,7 @@ function renderMultiBarChart(instance) {
   drawAnnotations(svg, options, plot, xScale, yScale, theme);
   const labels = dataLabelConfig(options);
   const markGroup = append(svg, svgEl("g", { class: "vd-chart-marks vd-chart-bars" }));
-  const baseline = yScale(0);
+  const baseline = yScale(Math.min(Math.max(0, yDomain[0]), yDomain[1]));
   seriesList.forEach((series) => {
     const fill = seriesColor(series, theme);
     series.rows.forEach((row) => {
@@ -1704,7 +1704,7 @@ var CHART_PROPS = {
   xAxis: { type: Object, default: void 0 },
   yAxis: { type: Object, default: void 0 }
 };
-function optionsFrom(target, props) {
+function optionsFrom(target, props, emit) {
   return {
     target,
     type: props.type,
@@ -1735,20 +1735,30 @@ function optionsFrom(target, props) {
     xFormat: props.xFormat,
     yFormat: props.yFormat,
     xAxis: props.xAxis,
-    yAxis: props.yAxis
+    yAxis: props.yAxis,
+    // Forward the core's mark-click callbacks as the Vue emit family. Passing
+    // all three unconditionally is safe: the core only fires the callback
+    // relevant to the rendered chart type (bars → onBarClick, points →
+    // onPointClick, slices → onSliceClick).
+    onBarClick: (e) => emit("bar-click", e),
+    onPointClick: (e) => emit("point-click", e),
+    onSliceClick: (e) => emit("slice-click", e)
   };
 }
 var VdChart = (0, import_vue.defineComponent)({
   name: "VdChart",
   props: CHART_PROPS,
-  setup(props) {
+  // Mark clicks the core reports through its callbacks are re-emitted here as
+  // idiomatic kebab-case Vue events carrying the core `ClickEvent` payload.
+  emits: ["point-click", "bar-click", "slice-click"],
+  setup(props, { emit }) {
     const el = (0, import_vue.ref)(null);
     let instance = null;
     let currentType = props.type;
     const create = () => {
       const factory = FACTORIES[props.type] || BarChart;
       currentType = props.type;
-      instance = factory(optionsFrom(el.value, props));
+      instance = factory(optionsFrom(el.value, props, emit));
     };
     (0, import_vue.onMounted)(() => {
       if (typeof window === "undefined" || !el.value) return;
@@ -1792,7 +1802,7 @@ var VdChart = (0, import_vue.defineComponent)({
           instance.destroy();
           create();
         } else {
-          instance.update(optionsFrom(el.value, props));
+          instance.update(optionsFrom(el.value, props, emit));
         }
       },
       { deep: true }