feat(ui)!: isolate components with Shadow DOM

.changeset/all-humans-leave.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/bitter-pigs-type.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/bright-shadows-plan.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/calm-browsers-test.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Preserve SDK spacing in Safari inside Shadow DOM and document roots by scoping the host CSS reset and inlining the fixed Tailwind spacing scale.

.changeset/calm-firefox-focus.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Skip the Bible version picker's version list scroll area in keyboard Tab order, keep focus on the outside target when dismissing from a language screen, and focus the dialog consistently when opening or rapidly reopening the picker.

.changeset/calm-tabs-loop.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Preserve the Bible chapter picker's natural keyboard order and keep its scrolling book list out of Firefox's sequential focus order.

.changeset/clean-shadows-agree.md

@@ -0,0 +1,4 @@
+---
+---
+
+Reconcile Shadow DOM release metadata and consumer documentation without adding another package release.

.changeset/clear-packages-align.md

@@ -0,0 +1,8 @@
+---
+'@youversion/platform-core': major
+'@youversion/platform-react-hooks': major
+---
+
+Align Core and React Hooks with the UI package at version 3.0.0 as part of the
+fixed package release. This version alignment does not add breaking API changes
+to either package.

.changeset/clever-wolves-fall.md

@@ -0,0 +1,4 @@
+---
+---
+
+Record YPE-6214 final Safari release-candidate validation without publishing a package release.

.changeset/cool-settings-wait.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/coordinated-shadow-dom-rollout.md

@@ -0,0 +1,53 @@
+---
+'@youversion/platform-react-ui': major
+---
+
+Ship the coordinated Shadow DOM rollout as a breaking rendered-DOM change. The
+compatible public UI boundary now mounts in client-created open shadow roots:
+`YouVersionAuthButton`, the chapter and version picker roots,
+`BibleReader.Root`, and standalone theme settings, scripture, card, avatar,
+footnote, and separator surfaces. SDK-owned compound members and composed
+children reuse their owning boundary.
+
+Server output for these components is a childless light-DOM host whose inline
+`display` declares the boundary's intended layout until the passive-effect client
+mount. Automatic shadow hosts therefore require strict CSP applications to allow
+or hash style attributes as described in the
+[UI Content Security Policy guidance](https://github.com/youversion/platform-sdk-react/blob/main/packages/ui/README.md#content-security-policy).
+Document queries and global CSS no longer reach component internals,
+forwarded element refs become available after that mount, and native events
+observed outside a root are retargeted to its host. Keep form
+ownership, native labels, and ARIA ID references within one tree; use public
+props, callbacks, refs, and role-based automation instead of depending on
+internal markup. Fonts remain document-owned, `rem` sizing follows the document
+root, `direction` remains inherited, and ancestor layout can still constrain the
+host. Shadow-local overlays use the native top layer, and opening a peer popover
+dismisses the current peer. The native Popover API is required for isolated
+floating content; there is no inline fallback, and an unhandled open error can
+unmount the affected consumer React root. Popover content also respects Radix's
+available collision height. Validated bubbling `click`, `keydown`, `keyup`,
+`pointerdown`, `pointerup`, `mousedown`, `mouseup`, `dblclick`, `contextmenu`,
+focus, blur, and native `input` paths reach light-DOM ancestor React handlers
+once. The host corrects duplicate React `onInput` delivery; React `onChange` was
+already delivered once because the outer event is retargeted to the non-form
+host. Capture handlers and unlisted composed bubbling families can still receive
+duplicate delivery. YPE-6210 covers `onClickCapture`; focused Chromium probes
+observed duplicate move, wheel, keypress, drag-start, and copy delivery. This
+list is representative, not exhaustive.
+
+`Textarea`, standalone `VerseActionPopover`, `YouVersionProvider`, and
+`BaseYouVersionProvider` remain outside the automatic boundary for their
+document-level form, anchor, context, style, or font contracts. The release does
+not add runtime rollout controls or phased-release infrastructure.
+
+See the
+[release-candidate evidence](https://github.com/youversion/platform-sdk-react/blob/main/docs/shadow-dom-isolation-plan.md#ype-5952-release-candidate-validation)
+for the automated browser matrix, assistive-technology environments and
+per-journey results, and remaining validation gaps. The
+[final actual-Safari gate decision](https://github.com/youversion/platform-sdk-react/blob/main/docs/shadow-dom-isolation-plan.md#ype-6214-final-release-candidate-safari-validation)
+records the accepted standalone-picker limitations and future rerun requirement.
+
+Shared popover dialogs now derive an accessible name from their visible heading
+unless the consumer provides an explicit label. The reader sign-in and sign-out
+menu has an explicit accessible name, and the version picker places initial
+focus on its language selector.

.changeset/flat-shadows-report.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/focused-versions-tab.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep Firefox keyboard focus on Bible version options when tabbing forward through the version picker.

.changeset/friendly-verses-scroll.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep verse actions open when touch selection moves to another verse, restore focus for initially anchored or conditionally mounted verse actions, and keep reader settings scrollable in constrained popovers. Clarify the automatic Shadow DOM boundary's document-owned font and root-sizing dependencies without expanding its rollout scope.

.changeset/full-flies-worry.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/fuzzy-books-focus.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/iframe-highlight-pointer.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Classify pending-highlight pointer targets with the reader document's element realm.

.changeset/leaf-shadows-wait.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/little-fans-burn.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/prove-production-shadow-overlays.md

@@ -0,0 +1,4 @@
+---
+---
+
+Prove nested and concurrent overlays through the production ShadowRootHost seam (YPE-5355).

.changeset/quiet-events-cross.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/reader-shadows-wait.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/safe-phrasing-hosts.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep auth-button and Bible-picker Shadow DOM hosts valid in server-rendered phrasing content.

.changeset/safe-shadows-fallback.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep isolated UI content rendered with local styles when constructable stylesheet setup fails.

.changeset/salty-lizards-dance.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/scripture-shadows-wait.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/shadow-aware-verse-actions.md

@@ -0,0 +1,5 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep verse action popovers in their component's shadow-local portal and restore focus after dismissal.

.changeset/six-shrimps-stare.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/tall-banks-jump.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/tidy-shadow-events.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/tidy-shadows-reset.md

@@ -0,0 +1,8 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep text direction as the only intentionally inherited CSS property across an
+automatic Shadow DOM boundary. Ambient host custom properties cannot alter SDK
+spacing or radius values, while document-root font sizing still affects rem-based
+dimensions.

.changeset/validate-shadow-dialog.md

@@ -0,0 +1,8 @@
+---
+'@youversion/platform-react-ui': patch
+---
+
+Keep shadow-local top-layer dialogs focus-contained and their background inert
+while mounted. Restore focus to the original opener after dismissal, including
+close/reopen during exit, while ignoring disconnected targets and targets moved
+outside their captured root.

.github/scripts/major-release-signoff.test.sh

@@ -30,10 +30,58 @@ extract_step() {
 }
 
 extract_step "Resolve PR context" > "$TMP/context.sh"
+extract_step "Restore release tooling from the base branch" > "$TMP/restore-tooling.sh"
+extract_step "Compute release preview" > "$TMP/preview.sh"
 extract_step "Decide whether a signoff is required" > "$TMP/decision.sh"
 extract_step "Regenerate and verify release contents" > "$TMP/verify.sh"
 extract_step "Post an unresolved status" > "$TMP/unresolved.sh"
 
+TOOLING_SOURCE="$TMP/tooling-source"
+TOOLING_WORK="$TMP/tooling-work"
+git init --quiet "$TOOLING_SOURCE"
+git -C "$TOOLING_SOURCE" config commit.gpgsign false
+git -C "$TOOLING_SOURCE" config user.name test
+git -C "$TOOLING_SOURCE" config user.email test@example.com
+mkdir -p "$TOOLING_SOURCE/scripts" "$TOOLING_SOURCE/.changeset" \
+  "$TOOLING_SOURCE/packages/ui" "$TOOLING_SOURCE/examples/demo" "$TOOLING_SOURCE/tools/config"
+for file in scripts/preview-release.mjs package.json pnpm-lock.yaml \
+  pnpm-workspace.yaml .changeset/config.json .npmrc packages/ui/package.json \
+  examples/demo/package.json tools/config/package.json; do
+  printf 'main %s\n' "$file" > "$TOOLING_SOURCE/$file"
+done
+git -C "$TOOLING_SOURCE" add -A
+git -C "$TOOLING_SOURCE" commit --quiet -m main
+git -C "$TOOLING_SOURCE" branch -M main
+git -C "$TOOLING_SOURCE" switch --quiet -c journey
+mkdir -p "$TOOLING_SOURCE/packages/pr-only"
+printf 'journey-only importer\n' > "$TOOLING_SOURCE/packages/pr-only/package.json"
+for file in scripts/preview-release.mjs package.json pnpm-lock.yaml \
+  pnpm-workspace.yaml .changeset/config.json packages/ui/package.json; do
+  printf 'journey %s\n' "$file" > "$TOOLING_SOURCE/$file"
+done
+rm "$TOOLING_SOURCE/.npmrc"
+printf 'journey pnpm hook\n' > "$TOOLING_SOURCE/.pnpmfile.cjs"
+git -C "$TOOLING_SOURCE" add -A
+git -C "$TOOLING_SOURCE" commit --quiet -m journey
+TOOLING_HEAD=$(git -C "$TOOLING_SOURCE" rev-parse HEAD)
+git -C "$TOOLING_SOURCE" switch --quiet main
+git clone --quiet "$TOOLING_SOURCE" "$TOOLING_WORK"
+git -C "$TOOLING_WORK" checkout --quiet "$TOOLING_HEAD"
+
+if (cd "$TOOLING_WORK" && bash "$TMP/restore-tooling.sh") >/dev/null 2>&1 &&
+  [ "$(git -C "$TOOLING_WORK" rev-parse HEAD)" = "$TOOLING_HEAD" ] &&
+  [ "$(cat "$TOOLING_WORK/package.json")" = 'main package.json' ] &&
+  [ "$(cat "$TOOLING_WORK/pnpm-lock.yaml")" = 'main pnpm-lock.yaml' ] &&
+  [ "$(cat "$TOOLING_WORK/packages/ui/package.json")" = 'main packages/ui/package.json' ] &&
+  [ "$(cat "$TOOLING_WORK/.npmrc")" = 'main .npmrc' ] &&
+  [ ! -e "$TOOLING_WORK/packages/pr-only/package.json" ] &&
+  [ ! -e "$TOOLING_WORK/.pnpmfile.cjs" ]; then
+  pass "restores the complete release dependency graph from trusted main"
+else
+  fail "restores the complete release dependency graph from trusted main" \
+    "expected main-owned workspace manifests and install inputs with PR-only importers removed"
+fi
+
 mkdir "$TMP/bin"
 # The context step backs off between retries; real delays would add ~9s per error case.
 cat > "$TMP/bin/sleep" <<'EOF'
@@ -376,7 +424,7 @@ run_decision_case "failed ordinary previews remain blocked, not major" \
   'blocked=release preview did not succeed (failure)' false false skipped '' failure ''
 
 extract_step "Restore release tooling from the base branch" > "$TMP/restore.sh"
-PREVIEW_REPO="$TMP/preview-repo"
+PREVIEW_REPO="$TMP/restore-preview-repo"
 git init --quiet --initial-branch=main "$PREVIEW_REPO"
 git -C "$PREVIEW_REPO" config commit.gpgsign false
 git -C "$PREVIEW_REPO" config user.name test
@@ -440,6 +488,107 @@ else
   fail "generated release identity always stays out of the ordinary preview" "preview does not use generated release identity"
 fi
 
+PREVIEW_REMOTE="$TMP/preview-remote.git"
+PREVIEW_REPO="$TMP/preview-repo"
+git init --quiet --bare "$PREVIEW_REMOTE"
+git init --quiet "$PREVIEW_REPO"
+git -C "$PREVIEW_REPO" config commit.gpgsign false
+git -C "$PREVIEW_REPO" config user.name test
+git -C "$PREVIEW_REPO" config user.email test@example.com
+git -C "$PREVIEW_REPO" remote add origin "$PREVIEW_REMOTE"
+mkdir -p "$PREVIEW_REPO/scripts" "$PREVIEW_REPO/.changeset" \
+  "$PREVIEW_REPO/packages/core" "$PREVIEW_REPO/packages/hooks" "$PREVIEW_REPO/packages/ui"
+cp "$ROOT/scripts/preview-release.mjs" "$PREVIEW_REPO/scripts/preview-release.mjs"
+cp "$ROOT/scripts/signoff-token.mjs" "$PREVIEW_REPO/scripts/signoff-token.mjs"
+cp "$ROOT/.changeset/config.json" "$PREVIEW_REPO/.changeset/config.json"
+cat > "$PREVIEW_REPO/package.json" <<'EOF'
+{"name":"preview-fixture","private":true,"packageManager":"pnpm@11.10.0"}
+EOF
+cat > "$PREVIEW_REPO/pnpm-workspace.yaml" <<'EOF'
+packages:
+  - "packages/*"
+EOF
+for package in core hooks ui; do
+  case "$package" in
+    core) name='@youversion/platform-core' ;;
+    hooks) name='@youversion/platform-react-hooks' ;;
+    ui) name='@youversion/platform-react-ui' ;;
+  esac
+  printf '{"name":"%s","version":"1.0.0"}\n' "$name" > "$PREVIEW_REPO/packages/$package/package.json"
+done
+git -C "$PREVIEW_REPO" add -A
+git -C "$PREVIEW_REPO" commit --quiet -m main
+git -C "$PREVIEW_REPO" branch -M main
+git -C "$PREVIEW_REPO" push --quiet origin main
+
+git -C "$PREVIEW_REPO" switch --quiet -c target
+cat > "$PREVIEW_REPO/.changeset/target-major.md" <<'EOF'
+---
+"@youversion/platform-core": major
+---
+
+Major change inherited from the target branch.
+EOF
+git -C "$PREVIEW_REPO" add -A
+git -C "$PREVIEW_REPO" commit --quiet -m 'target major'
+git -C "$PREVIEW_REPO" push --quiet origin target
+PREVIEW_BASE_SHA=$(git -C "$PREVIEW_REPO" rev-parse HEAD)
+
+git -C "$PREVIEW_REPO" switch --quiet -c pr
+printf 'non-major PR change\n' > "$PREVIEW_REPO/README.md"
+git -C "$PREVIEW_REPO" add README.md
+git -C "$PREVIEW_REPO" commit --quiet -m 'non-major PR change'
+git -C "$PREVIEW_REPO" push --quiet origin pr
+ln -s "$ROOT/node_modules" "$PREVIEW_REPO/node_modules"
+PREVIEW_BIN="$TMP/preview-bin"
+mkdir "$PREVIEW_BIN"
+cat > "$PREVIEW_BIN/pnpm" <<EOF
+#!/usr/bin/env bash
+set -euo pipefail
+[ "\$1" = exec ] && [ "\$2" = changeset ] && [ "\$3" = status ]
+output=\${4#--output=}
+printf '%s\n' \
+  '{"releases":[{"name":"@youversion/platform-core","type":"major","oldVersion":"1.0.0","newVersion":"2.0.0"}]}' \
+  > "\$output"
+EOF
+chmod +x "$PREVIEW_BIN/pnpm"
+
+run_preview_case() {
+  local name="$1" expected_introduced="$2" expected_output="$3"
+  local output="$TMP/preview-output"
+  local error="$TMP/preview-error"
+  local preview="$PREVIEW_REPO/preview.json"
+  local head_sha
+  head_sha=$(git -C "$PREVIEW_REPO" rev-parse HEAD)
+  : > "$output"
+  rm -f "$preview"
+  if (cd "$PREVIEW_REPO" && \
+    PATH="$PREVIEW_BIN:$PATH" BASE_SHA="$PREVIEW_BASE_SHA" HEAD_SHA="$head_sha" \
+    GITHUB_OUTPUT="$output" \
+    bash "$TMP/preview.sh") >/dev/null 2> "$error" &&
+    jq -e ".introduced_major == $expected_introduced" "$preview" >/dev/null &&
+    grep -Fxq "is_major=$expected_output" "$output"; then
+    pass "$name"
+  else
+    fail "$name" \
+      "expected introduced_major=$expected_introduced and is_major=$expected_output; preview: $(cat "$preview" 2>/dev/null || true); output: $(tr '\n' ' ' < "$output"); error: $(tr '\n' ' ' < "$error")"
+  fi
+}
+
+run_preview_case "stacked PRs ignore a major inherited from their target branch" false 0
+
+cat > "$PREVIEW_REPO/.changeset/pr-major.md" <<'EOF'
+---
+"@youversion/platform-react-ui": major
+---
+
+Major change introduced by the pull request.
+EOF
+git -C "$PREVIEW_REPO" add .changeset/pr-major.md
+git -C "$PREVIEW_REPO" commit --quiet -m 'PR major'
+git -C "$PREVIEW_REPO" push --quiet origin pr
+run_preview_case "stacked PRs require signoff for a newly introduced major" true 1
+
 if grep -Fq 'Generated release PR; major signoff is enforced on source PRs.' "$WORKFLOW"; then
   pass "generated releases publish an explicit lifecycle-aware success"
 else