@factoidal/core 0.19.0 → 0.21.0

package/bin/pack-host.mjs

@@ -363,6 +363,11 @@ export async function denoReexec (options) {
     return null
   }
   if (granted.indexOf('run') < 0 || granted.indexOf('read') < 0) return null
+  // A `deno compile` executable is not the deno command: given `run ...` it
+  // reads `run` as a factoidal command (found 2026-10-28, building the
+  // single-file executables of docs/designissues/2026-10-28-single-file-app.md).
+  // It packs in process instead.
+  if (!/^deno(\.exe)?$/i.test(Deno.execPath().split(/[\\/]/).pop())) return null
   const main = Deno.mainModule.startsWith('file://')
     ? fileUrlToPath(Deno.mainModule)
     : Deno.mainModule

package/bin/serve.mjs

@@ -147,6 +147,8 @@ export async function openServedStore (root, options = {}) {
   const config = {}
   if (typeof options.queryPath === 'string') config.queryPath = options.queryPath
   if (typeof options.gspPath === 'string') config.gspPath = options.gspPath
+  // The Host and Origin guard (issue 1124): passed unread; the engine decides.
+  if (options.localGuard !== undefined && options.localGuard !== null) config.localGuard = options.localGuard
   const info = engine.callBlobIO('storeServeOpen',
     [manifestHex, JSON.stringify(artifacts), JSON.stringify(state), JSON.stringify(config)],
     concatenate(chunks)).envelope
@@ -233,6 +235,8 @@ export async function openServedTdb2 (root, options = {}) {
   const config = {}
   if (typeof options.queryPath === 'string') config.queryPath = options.queryPath
   if (typeof options.gspPath === 'string') config.gspPath = options.gspPath
+  // The Host and Origin guard (issue 1124): passed unread; the engine decides.
+  if (options.localGuard !== undefined && options.localGuard !== null) config.localGuard = options.localGuard
   const info = engine.callBlobIO('tdb2ServeOpen',
     [JSON.stringify(files), JSON.stringify(config)], concatenate(chunks)).envelope
   const handle = info.handle
@@ -343,9 +347,22 @@ function serveConnection (served, socket, onError) {
  */
 export async function listen (root, options = {}) {
   const net = await import('node:net')
+  const host = typeof options.host === 'string' ? options.host : '127.0.0.1'
+  // `factoidal serve` has no authentication: the engine answers only the
+  // listener's own names and refuses writes from another origin
+  // (https://github.com/danbri/factoidal/issues/1124). Data for its check.
+  const os = await import('node:os')
+  let addresses = []
+  try { addresses = Object.values(os.networkInterfaces()).flat().filter(Boolean).map((i) => i.address) } catch (_error) { addresses = [] }
+  const localGuard = {
+    host,
+    addresses,
+    ...(Array.isArray(options.allowHosts) ? { allowHosts: options.allowHosts } : {}),
+    ...(Array.isArray(options.allowOrigins) ? { allowOrigins: options.allowOrigins } : {})
+  }
   const served = options.tdb2 === true
-    ? await openServedTdb2(root, options)
-    : await openServedStore(root, options)
+    ? await openServedTdb2(root, { ...options, localGuard })
+    : await openServedStore(root, { ...options, localGuard })
   const onError = typeof options.onError === 'function'
     ? options.onError
     : (error) => { console.error(`factoidal serve: ${error && error.message ? error.message : error}`) }
@@ -356,7 +373,6 @@ export async function listen (root, options = {}) {
     serveConnection(served, socket, onError)
   })
   const port = typeof options.port === 'number' ? options.port : 0
-  const host = typeof options.host === 'string' ? options.host : '127.0.0.1'
   await new Promise((resolve, reject) => {
     server.once('error', reject)
     server.listen(port, host, resolve)

package/browser.d.ts

@@ -12,7 +12,9 @@ export type {
   QueryOptions, SerializeOptions, StoreReader, OpenStoreOptions,
   DeltaLogHandle, DeltaLogInspection,
   Sbm11Reader, Sbm11Answer, Sbm11Store, Sbm11ReadEvidence, Sbm11Transport,
+  LiteralValueData, LiteralValueResult,
   ExplainResult, StageInfo, EvidenceRecord, Wire, FactoidalNode, Pipeline, RunResult, RunOptions,
+  NodePort, GraphSource, GraphSpec, GraphIssue, GraphCheck, FactoidalGraph, GraphRunResult,
 } from './index';
 
 export {
@@ -23,12 +25,26 @@ export {
   canonicalize,
   graphs,
   canonicalHash,
+  asDefaultGraph,
   isomorphic,
+  datasetMerge,
   fromQuads,
+  literalValue,
+  isValidLiteral,
+  canonicalLiteral,
+  literalFromValue,
   ready,
   engineTables,
+  sameValue,
+  syntaxFor,
+  splitIri,
+  isNCName,
+  vocabularies,
+  memberIri,
+  memberOrdinal,
   openDataset,
   closure,
+  sparqlRlInfer,
   formats,
   queryRaw,
   queryHdt,
@@ -61,6 +77,7 @@ export {
   stages,
   node,
   pipe,
+  graph,
   run,
   rdfsPlusClosure,
   rhoDfClosure,
@@ -94,12 +111,18 @@ export {
   vcEd25519SecretToPublic,
   vcEd25519Sign,
   vcEd25519Verify,
+  xmlDecrypt,
+  xmlEncrypt,
+  jweDecrypt,
+  jweEncrypt,
   vcEddsaCreateFromCanonical,
   vcEddsaVerifyFromCanonical,
   vcCheckCredential,
   vcCheckCredentialSubject,
   vcCheckNoDataLoss,
   vcCheckRelatedResourceDigests,
+  cidValidate,
+  cidRetrieveVerificationMethod,
   didKeyResolve,
   capabilities,
   Dataset,

package/browser.js

@@ -83,12 +83,28 @@ export const serialize = api.serialize;
 export const canonicalize = api.canonicalize;
 export const graphs = api.graphs;
 export const canonicalHash = api.canonicalHash;
+export const asDefaultGraph = api.asDefaultGraph;
 export const isomorphic = api.isomorphic;
+export const datasetMerge = api.datasetMerge;
 export const fromQuads = api.fromQuads;
+// Literal values (https://github.com/danbri/factoidal/issues/1051): synchronous
+// after the engine is loaded.
+export const literalValue = api.literalValue;
+export const isValidLiteral = api.isValidLiteral;
+export const canonicalLiteral = api.canonicalLiteral;
+export const literalFromValue = api.literalFromValue;
 export const ready = api.ready;
 export const engineTables = api.engineTables;
+export const sameValue = api.sameValue;
+export const syntaxFor = api.syntaxFor;
+export const splitIri = api.splitIri;
+export const isNCName = api.isNCName;
+export const vocabularies = api.vocabularies;
+export const memberIri = api.memberIri;
+export const memberOrdinal = api.memberOrdinal;
 export const openDataset = api.openDataset;
 export const closure = api.closure;
+export const sparqlRlInfer = api.sparqlRlInfer;
 export const formats = api.formats;
 export const queryRaw = api.queryRaw;
 export const queryHdt = api.queryHdt;
@@ -122,6 +138,7 @@ export const explain = api.explain;
 export const stages = api.stages;
 export const node = api.node;
 export const pipe = api.pipe;
+export const graph = api.graph;
 export const run = api.run;
 export const rdfsPlusClosure = api.rdfsPlusClosure;
 export const rhoDfClosure = api.rhoDfClosure;
@@ -163,12 +180,21 @@ export const vcSha256Hex = api.vcSha256Hex;
 export const vcEd25519SecretToPublic = api.vcEd25519SecretToPublic;
 export const vcEd25519Sign = api.vcEd25519Sign;
 export const vcEd25519Verify = api.vcEd25519Verify;
+
+// XML Encryption 1.1 and JWE; AES through WebCrypto (lib/cipher-host.mjs)
+export const xmlDecrypt = api.xmlDecrypt;
+export const xmlEncrypt = api.xmlEncrypt;
+export const jweDecrypt = api.jweDecrypt;
+export const jweEncrypt = api.jweEncrypt;
 export const vcEddsaCreateFromCanonical = api.vcEddsaCreateFromCanonical;
 export const vcEddsaVerifyFromCanonical = api.vcEddsaVerifyFromCanonical;
 export const vcCheckCredential = api.vcCheckCredential;
 export const vcCheckCredentialSubject = api.vcCheckCredentialSubject;
 export const vcCheckNoDataLoss = api.vcCheckNoDataLoss;
 export const vcCheckRelatedResourceDigests = api.vcCheckRelatedResourceDigests;
+// Controlled Identifiers v1.0 (https://github.com/danbri/factoidal/issues/1100).
+export const cidValidate = api.cidValidate;
+export const cidRetrieveVerificationMethod = api.cidRetrieveVerificationMethod;
 export const didKeyResolve = api.didKeyResolve;
 
 // Types, probes and metadata