@octanejs/markdown 0.0.8 → 0.0.9

package/LICENSE.upstream

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) Espen Hovlandsdal
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/UPSTREAM.md

@@ -14,9 +14,15 @@
 | Type oracle | `@types/react@19.2.17` / `@types/react-dom@19.2.3` |
 | License | MIT, retained byte-exact under both evidence boundaries |
 
-`upstream/npm/package/` is the unpacked registry artifact. `upstream/source/`
-contains the canonical runtime source, test suite, JSX loader, TypeScript
-configuration, package metadata, and license from the pinned commit. The npm
+`upstream-artifact/package/` is the unpacked registry artifact, hash-pinned by
+the provenance verifier. `upstream/` contains the canonical runtime source,
+test suite, JSX loader, TypeScript configuration, package metadata, and
+license from the pinned commit, pinned by `audit/upstream.lock.json`: each
+committed file verifies offline against its upstream git blob sha
+(`pnpm react-port:materialize run --check --package-dir packages/markdown`),
+and the verifier's negative controls exercise that layer. The upstream MIT
+license is retained byte-exact as `LICENSE.upstream`, hash-matched to the
+lock. The npm
 artifact does not publish `test.jsx` or `script/load-jsx.js`, so the canonical
 repository supplies that test boundary. The runtime source and license present
 in both artifacts are byte-identical.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@octanejs/markdown",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
@@ -23,7 +23,8 @@
     "src",
     "LICENSE",
     "README.md",
-    "UPSTREAM.md"
+    "UPSTREAM.md",
+    "LICENSE.upstream"
   ],
   "exports": {
     ".": "./src/index.ts"
@@ -42,7 +43,7 @@
     "vfile": "^6.0.0"
   },
   "peerDependencies": {
-    "octane": "0.1.42"
+    "octane": "0.1.43"
   },
   "devDependencies": {
     "@testing-library/react": "16.3.2",
@@ -61,13 +62,13 @@
     "remark-gfm": "^4.0.1",
     "remark-toc": "^9.0.0",
     "vitest": "^4.1.10",
-    "@octanejs/testing-library": "0.1.39",
-    "octane": "0.1.42"
+    "@octanejs/testing-library": "0.1.40",
+    "octane": "0.1.43"
   },
   "scripts": {
     "test": "pnpm upstream:verify && pnpm test:pristine && vitest run --config vitest.config.ts --root . tests/probes/async-component.server.test.ts tests/adoption/consumer.test.ts tests/adoption/consumer.server.test.ts tests/audit tests/differential tests/conformance tests/async tests/hooks tests/validation.test.ts",
     "test:architecture": "vitest run --config vitest.config.ts --root . tests/probes/async-component.server.test.ts",
-    "test:pristine": "node ../../scripts/react-parity/node-full-runner.mjs --root packages/markdown/upstream/source --file packages/markdown/upstream/source/test.jsx --loader packages/markdown/upstream/source/script/load-jsx.js --inventory packages/markdown/audit/pristine-runtime.json",
+    "test:pristine": "node ../../scripts/react-parity/node-full-runner.mjs --root packages/markdown/upstream --file packages/markdown/upstream/test.jsx --loader packages/markdown/upstream/script/load-jsx.js --inventory packages/markdown/audit/pristine-runtime.json",
     "upstream:verify": "node audit/verify-provenance.mjs --self-test",
     "typecheck": "tsrx-tsc --noEmit -p tsconfig.json && tsrx-tsc --noEmit -p typetests/tsconfig.json"
   }