@octanejs/zag 0.0.8 → 0.0.9

package/{LICENSE → LICENSE.upstream}

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Dominic Gannaway
+Copyright (c) 2021 Chakra UI
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/UPSTREAM.md

@@ -11,13 +11,21 @@
 | React oracle | `19.2.7` with `@types/react@19.2.7` and `@types/react-dom@19.2.3` (`catalog:zag-react-oracle`) |
 | Testing Library oracle | `@testing-library/react@16.3.2` (`catalog:zag-react-oracle`; satisfies upstream `^16.3.2`) |
 | jsdom oracle | `29.0.1` (`catalog:zag-react-oracle`; satisfies upstream `^29.0.1`) |
-| Vendored tree integrity | `sha256:037f857d00462559b9790acc2214c818678eb9d61970d6c394dc26dcfcd1516d` (`packages/zag/upstream/SHA256SUMS`) |
-| License | MIT, © Chakra UI |
+| Pinned tree integrity | `audit/upstream.lock.json` (fingerprint `3883ca3c33ce1b95fcb8b5d8969c267081eabc0ff6a295d8415d4f2184974114`; per-file git blob shas) |
+| License | MIT, © Chakra UI (`LICENSE.upstream`, hash-matched to the lock) |
 
 Repository: `https://github.com/chakra-ui/zag.git`. The npm artifact publishes
 compiled `dist/` output. The framework adapter source and its Vitest suite at
-this pin live under `packages/frameworks/react` in the canonical repository and
-are vendored byte-exact at `packages/zag/upstream/` (MIT). Framework-agnostic
+this pin live under `packages/frameworks/react` in the canonical repository.
+They are committed byte-exact under `packages/zag/upstream/` and pinned by
+`audit/upstream.lock.json`, which records each file's git blob sha — its
+content address in the upstream repository — so the committed copy verifies
+offline against the pinned commit (`pnpm react-port:materialize run --check`).
+The adapted suite regenerates into `tests/upstream/` (git-ignored) from the
+pristine bytes plus the lock's mechanical `adaptedRewrites`; every mapped file
+currently needs no divergence patch, and the pinned StrictMode suite is
+dispositioned out via its committed `.skip` rationale in
+`audit/upstream-patches/`. Framework-agnostic
 `@zag-js/core`, `@zag-js/store`, `@zag-js/types`, and `@zag-js/utils` at the same
 version are reused unchanged and are not reimplemented here.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@octanejs/zag",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -32,7 +32,8 @@
   "files": [
     "src",
     "README.md",
-    "UPSTREAM.md"
+    "UPSTREAM.md",
+    "LICENSE.upstream"
   ],
   "exports": {
     ".": "./src/index.ts"
@@ -44,7 +45,7 @@
     "@zag-js/utils": "1.42.0"
   },
   "peerDependencies": {
-    "octane": "0.1.42"
+    "octane": "0.1.43"
   },
   "devDependencies": {
     "@tsrx/react": "^0.2.58",
@@ -59,13 +60,14 @@
     "@testing-library/react": "16.3.2",
     "@vitejs/plugin-react": "^6.0.3",
     "jsdom": "29.0.1",
-    "octane": "0.1.42",
-    "@octanejs/testing-library": "0.1.39"
+    "octane": "0.1.43",
+    "@octanejs/testing-library": "0.1.40"
   },
   "scripts": {
-    "test": "vitest run --root ../.. --project zag --project zag-differential --project zag-ssr --project zag-pristine",
-    "test:upstream": "node scripts/run-pristine-upstream.mjs",
+    "test": "pnpm upstream:materialize && vitest run --root ../.. --project zag --project zag-differential --project zag-ssr --project zag-pristine",
+    "test:upstream": "node ../../scripts/react-parity/run-pristine.mjs zag",
     "typecheck": "tsrx-tsc --noEmit -p tsconfig.json && tsrx-tsc --noEmit -p typetests/tsconfig.json",
-    "upstream:verify": "node scripts/verify-upstream.mjs"
+    "upstream:materialize": "node ../../scripts/react-port/materialize.mjs run --package-dir .",
+    "upstream:verify": "node ../../scripts/react-port/materialize.mjs run --check --package-dir ."
   }
 }