@octanejs/radix 0.1.40 → 0.1.42

package/{LICENSE → LICENSE.upstream}

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Dominic Gannaway
+Copyright (c) 2022 WorkOS
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/UPSTREAM.md

@@ -0,0 +1,69 @@
+# Radix React upstream ledger
+
+`@octanejs/radix` targets the unified `radix-ui@1.6.4` package from
+`https://github.com/radix-ui/primitives.git`.
+
+## Immutable pin
+
+- Package: `radix-ui@1.6.4`
+- Release commit: `eb8b851619a655e278c819b959be0d3924b0ada8` (`New release (1.6.4)`)
+- npm archive SHA-256: `034b075b204bcd82bc7d52c82954e5204e7aa5493d34f3b534bc0440c785e571`
+- npm lock integrity: `sha512-Kpgb9sx08toOydBK42//0N3MqIPlqjHcY39CYuGG8+7DrF6+NTfAnc3o+f1kvoKzG6cI56ri7Z45XEBQqG1QqQ==`
+- Supported range: exactly `1.6.4`
+- License: MIT
+- React oracle: workspace-pinned React and React DOM
+
+The release has no unified-package git tag or npm `gitHead`. The immutable commit above is the
+repository release commit whose package versions and unified manifest are `1.6.4`.
+
+## Source and test boundary
+
+The unified package has 55 direct workspace dependencies. Following those dependencies through the
+pinned monorepo produces 61 packages, 207 source files, and 38 canonical runtime test files. The
+byte-exact package directories and root MIT license are vendored under `upstream/`; all 452 files
+verify offline against the upstream git blob shas recorded in `audit/upstream.lock.json`, and the
+pinned license is republished at the package root as `LICENSE.upstream`. The executable checker rejects file,
+package-graph, source, test inventory, or root-export crosswalk drift.
+
+The 38 canonical tests are preserved as provenance. Pristine React execution and a case-by-case
+adapted Octane lane for that suite remain open follow-up work; until those lanes land the binding
+stays `recorded-unverified`. Vendoring alone is not behavioral evidence.
+
+## Root export crosswalk
+
+`packages/radix/audit/export-crosswalk.json` (enforced by
+`packages/radix/scripts/check-upstream-ledger.mjs`) maps every unified `radix-ui` root export to its
+Octane binding, disposition, and evidence. Notable root-surface differences:
+
+| Upstream export | Octane mapping | Disposition |
+| --- | --- | --- |
+| `unstable_OneTimePasswordField` | `OneTimePasswordField` | ported-renamed |
+| `unstable_PasswordToggleField` | `PasswordToggleField` | ported-renamed |
+| `Slot` (namespace) | `Slot`, `Slottable` (named) | adapted (descriptor API) |
+
+Octane also exposes composition substrates that are not unified root exports (`Arrow`, `Menu`,
+`Popper`, `Primitive`, `Presence`, `RovingFocus`, and several utilities). Those are listed under
+`octaneAdditional` in the crosswalk so they cannot silently expand the claimed root surface.
+
+## Executable evidence
+
+- Differential lane: all 16 collected same-fixture scenarios against `@octanejs/radix` and the
+  pinned real `radix-ui` package (byte-identical DOM).
+- Type lanes: repo-authored pristine `tsc` and adapted `tsrx-tsc` root-export smokes (not a
+  one-for-one upstream type suite).
+- Ordinary audit contracts: authenticate the vendored boundary and keep the Slot descriptor /
+  ref-as-prop adaptations explicit. Those contracts are repo-authored ledger evidence, not an
+  adapted upstream runtime suite.
+
+The other local tests are Octane framework contracts. They cover additional component behavior but
+are not counted as React parity. The differential suite is bounded jsdom evidence, not exhaustive
+coverage of portals, focus management, pointer geometry, observers, SSR, hydration, or all 38
+canonical upstream suites.
+
+## Intentional adaptations and open coverage
+
+- `Slot` and `asChild` consume Octane element descriptors rather than React children-position JSX.
+- React `forwardRef` wrappers become Octane ref-as-prop components.
+- SSR and hydration coverage for overlay and portal components remains open.
+- Canonical upstream runtime suite: pristine React execution where feasible, plus adapted Octane
+  cases recorded with concrete incompatibilities — still open.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@octanejs/radix",
-  "version": "0.1.40",
+  "version": "0.1.42",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
@@ -33,7 +33,9 @@
   "files": [
     "src",
     "dist/cjs",
-    "README.md"
+    "LICENSE.upstream",
+    "README.md",
+    "UPSTREAM.md"
   ],
   "exports": {
     ".": {
@@ -45,10 +47,10 @@
   },
   "dependencies": {
     "aria-hidden": "^1.2.6",
-    "@octanejs/floating-ui": "0.1.40"
+    "@octanejs/floating-ui": "0.1.42"
   },
   "peerDependencies": {
-    "octane": "0.1.41"
+    "octane": "0.1.43"
   },
   "devDependencies": {
     "@tsrx/react": "^0.2.58",
@@ -57,7 +59,7 @@
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "vitest": "^4.1.10",
-    "octane": "0.1.41"
+    "octane": "0.1.43"
   },
   "scripts": {
     "build:cjs": "node ../../scripts/build-package-commonjs.mjs",