@factoidal/core 0.21.0 → 0.22.0

package/CHANGELOG.md

@@ -2,6 +2,39 @@
 
 ## Unreleased
 
+- RIF BLD (W3C Recommendation, Second Edition 2013) in the Lean engine, `L4Factoidal/RIF/Bld.lean`, over the RIF Core engine: equality in rule conclusions with congruence and list injectivity, inconsistency when two data values are made equal, the semantic conditions on `#` and `##`, rules whose body does not bind every variable, named-argument uniterms, open lists and conjunctive conclusions in the presentation syntax. W3C BLD suite: 28 pass, 0 fail (out of 28 decided), 1 undecided, 3 excluded (defective test data, https://github.com/danbri/factoidal/issues/1186). No npm or wasm op yet.
+
+## 0.22.0 (2026-10-29)
+
+### XPath 4.0, XQuery 4.0 and XSLT 4.0 in the package
+
+- XPath 4.0, XQuery 4.0 and XSLT 4.0: new functions `xpath4Eval(xmlText, expr)`, `xqueryEval(query, contextXml?)` and `xslt4Transform(stylesheetXml, sourceXml)`, in Node, Deno and the browser, over the Lean engines `L4Factoidal/XPath4`, `XQuery4` and `XSLT4`. `xpath4Eval` and `xqueryEval` give `{count, items, adaptive, xml}` (each item with its type and its Serialization 4.0 adaptive form; the whole sequence with the adaptive and the xml method); `xslt4Transform` gives `{output, method, secondary, messages}` (the principal result serialized with the stylesheet's output definition, the `xsl:result-document` results, the `xsl:message` texts). An error rejects with a `FactoidalError` (code `xml.failed`) whose new member `qtError` is `{code, namespace, message}`, for example `XPST0003`. No I/O: `fn:doc`, `fn:unparsed-text`, `fn:json-doc`, `file:` functions, `import module`, `xsl:import` and `xsl:include` of anything but the arguments fail with the specification's error code (FODC0002, FOUT1170, `file:io-error`, XQST0059, XTSE0165). An evaluation deeper than 4,000 nested steps fails with FOER0000; in the wasm module the host's call stack ends first for a document of more than about 6,000 sibling elements, a recursion more than about 400 calls deep or an expression nested more than about 200 levels, measured under Node's default stack; the limits depend on the host's stack size (the call rejects with `op.failed`, https://github.com/danbri/factoidal/issues/1110). New wasm ops `xpath4Eval`, `xqueryEval`, `xslt4Transform` (full engine only); `capabilities().xpath4`, `.xquery`, `.xslt4`. `xpathEval` (XPath 1.0) and `xsltTransform` (XSLT 1.0) do not change.
+
+### Verifiable Credentials and JSON-LD
+
+- JSON-LD expansion of a `null` document gives `[]` (JSON-LD 1.1 API §5.1.2 step 1 and the `expand()` method); it was the error `not JSON-LD`.
+- Verifiable Credentials: the Data Integrity ECDSA cryptosuites `ecdsa-rdfc-2019` and `ecdsa-jcs-2019` (Data Integrity ECDSA Cryptosuites v1.0) with P-256 keys, in one table with `eddsa-rdfc-2022` (`L4Factoidal/VC/Cryptosuite.lean`; https://github.com/danbri/factoidal/issues/1165). New wasm ops `vcDiKey`, `vcDiSecure` and `vcDiVerify` (through `loadEngine().call`): secure and verify a credential at the document level, with did:key resolution on Ed25519, P-256 and P-384. P-384 is refused (HACL\* has no P-384: https://github.com/danbri/factoidal/issues/1166).
+- Verifiable Credentials: `eddsa-jcs-2022` (Data Integrity EdDSA Cryptosuites v1.0 §3.4) in the same table, through the same ops.
+- Verifiable Credentials: Bitstring Status List v1.0 (`L4Factoidal/VC/StatusList.lean`): entries, list credentials, the GZIP and base64url list, and the §3.2 validation, through new wasm ops `vcStatusEntryNew`, `vcStatusListCredential`, `vcStatusEntryCheck` and `vcStatusValidate`.
+- VC DI §2.4 data-loss check: also refuses a top-level member that no context of the document defines, and reads `credentialSubject` keys under the subject's type-scoped contexts.
+- Fixed: base64url decoding of long inputs no longer overflows the wasm stack (loop forms with `csimp` proofs).
+- Fixed: the RFC 8785 (JCS) writer sorts object member names by UTF-16 code units (RFC 8785 §3.2.3); it used code-point order, which differs for names with characters above U+FFFF. This changes the canonical form of JSON-LD `@json` literals with such names.
+
+### In the Lean tree (native runners; not new package functions)
+
+- XML Schema 1.1 structures (`L4Factoidal/XSD11/`): schema components, schema documents (include, import, redefine, override), content models by derivatives with counted repetition and 1.1 `all`, assessment to a PSVI, identity constraints, type alternatives and assertions; the schema-aware parts of XPath 4.0, XQuery 4.0 and XSLT 4.0 use it (https://github.com/danbri/factoidal-core/pull/206, https://github.com/danbri/factoidal-core/pull/217). Native `l4xsd11`: 41086 pass, 479 fail, 103 unsupported (out of 41668), measured on that PR.
+- XSLT 4.0 (https://github.com/danbri/factoidal-core/pull/208) and XSLT Streaming 4.0 (https://github.com/danbri/factoidal-core/pull/213): xslt40-test, all vendored sets, 9096 pass, 1557 fail, 3149 unsupported (out of 13802), measured on PR 213.
+- XQuery 4.0: `%private` across modules and the `xml` prefix in constructors (https://github.com/danbri/factoidal-core/pull/210). qt4tests in XQuery mode, measured on PR 206: 42202 pass, 1788 fail, 1956 unsupported (out of 45946); XPath mode 28248 pass, 707 fail, 9704 unsupported (out of 38659).
+- RDF Data Cube 2014: normalization and the integrity constraints IC-0 to IC-21 (`L4Factoidal/DataCube/`, `lake exe l4datacube`), each computed two ways (the SPARQL queries of the Recommendation and a direct Lean definition) that must agree; 31 pass, 0 fail (out of 31) project cases (the Recommendation has no test suite); theorems `normalize_extensive`, `phase1_rdfs_sound` (https://github.com/danbri/factoidal-core/pull/219).
+- Design records for RDFa and Microdata, XForms, MathML and SMIL 3.0 (https://github.com/danbri/factoidal-core/pull/218).
+- XPath 4.0 and F&O 4.0 toward all qt4tests (https://github.com/danbri/factoidal-core/pull/205).
+- N3 (Notation3): reasoner and built-ins in Lean (https://github.com/danbri/factoidal-core/pull/234).
+- YAML-LD 1.0: a YAML 1.2.2 loader with the JSON-LD 1.1 API on it (https://github.com/danbri/factoidal-core/pull/235).
+
+### Hub
+
+- New pages: "WebDAV, LWS and custodians" (the 0.21.0 theorems and the design behind them), "Pods, bots and access control" (rewritten for 0.21.0), "SPARQL-RL, and how it compares with RIF"; the hub pages load this release.
+
 ## 0.21.0 (2026-10-28)
 
 ### Security: WebDAV (https://github.com/danbri/factoidal/issues/1147)

package/browser.d.ts

@@ -15,6 +15,7 @@ export type {
   LiteralValueData, LiteralValueResult,
   ExplainResult, StageInfo, EvidenceRecord, Wire, FactoidalNode, Pipeline, RunResult, RunOptions,
   NodePort, GraphSource, GraphSpec, GraphIssue, GraphCheck, FactoidalGraph, GraphRunResult,
+  QtError, Qt4Item, Qt4Result, Xslt4Result,
 } from './index';
 
 export {
@@ -94,6 +95,9 @@ export {
   xmlWellformed,
   xpathEval,
   xsltTransform,
+  xpath4Eval,
+  xqueryEval,
+  xslt4Transform,
   schematronValidate,
   jsonSchemaValidate,
   mathmlEval,

package/browser.js

@@ -157,6 +157,10 @@ export const jsonldFromRdf = api.jsonldFromRdf;
 export const xmlWellformed = api.xmlWellformed;
 export const xpathEval = api.xpathEval;
 export const xsltTransform = api.xsltTransform;
+// XPath 4.0, XQuery 4.0 and XSLT 4.0 (formal/lean4/Wasm/Ops/Qt4.lean).
+export const xpath4Eval = api.xpath4Eval;
+export const xqueryEval = api.xqueryEval;
+export const xslt4Transform = api.xslt4Transform;
 export const schematronValidate = api.schematronValidate;
 export const jsonSchemaValidate = api.jsonSchemaValidate;
 export const mathmlEval = api.mathmlEval;

package/index.d.ts

@@ -167,6 +167,20 @@ export class FactoidalError extends Error {
   readonly format?: string;
   /** For a parse failure of text: true when the syntax was inferred. */
   readonly formatInferred?: boolean;
+  /**
+   * For xpath4Eval, xqueryEval and xslt4Transform: the error that the
+   * XPath, XQuery or XSLT 4.0 specification names (code `XPST0003`,
+   * namespace `http://www.w3.org/2005/xqt-errors`, ...).
+   */
+  readonly qtError?: QtError;
+}
+
+/** An error of XPath 4.0, XQuery 4.0 or XSLT 4.0: the local part and the
+ *  namespace of the error QName, and the engine's message. */
+export interface QtError {
+  code: string;
+  namespace: string;
+  message: string;
 }
 
 /** One recoverable-parse diagnostic from a `{lenient:true}` parse() call. */
@@ -1709,6 +1723,63 @@ export function xsltTransform(
   sourceXml: string
 ): Promise<string>;
 
+/** One item of an XPath 4.0 or XQuery 4.0 result. */
+export interface Qt4Item {
+  /** The item's type: `xs:integer`, `element()`, `map(*)`, `array(*)`,
+   *  `function(*)`, ... */
+  type: string;
+  /** The item serialized with the Serialization 4.0 adaptive method. */
+  value: string;
+}
+
+/** The value shape returned by {@link xpath4Eval} and {@link xqueryEval}. */
+export interface Qt4Result {
+  count: number;
+  items: Qt4Item[];
+  /** The whole sequence, Serialization 4.0 adaptive method. */
+  adaptive: string;
+  /** The whole sequence, xml method (no XML declaration); null when the
+   *  xml method cannot serialize it (a map, an array, a function). */
+  xml: string | null;
+}
+
+/**
+ * Evaluate an XPath 4.0 expression with `xmlText` as the context item
+ * ('' for no context item). The engine does no I/O: fn:doc and
+ * fn:unparsed-text of a URI fail (FODC0002, FOUT1170). A QT4 error rejects
+ * with a FactoidalError whose `qtError` names the error code.
+ */
+export function xpath4Eval(xmlText: string, expr: string): Promise<Qt4Result>;
+
+/**
+ * Evaluate an XQuery 4.0 main module, with `contextXml` as the context item
+ * when it is given and not ''. `import module` of a module that is not
+ * given fails with XQST0059; no resource is fetched.
+ */
+export function xqueryEval(query: string, contextXml?: string): Promise<Qt4Result>;
+
+/** The value shape returned by {@link xslt4Transform}. */
+export interface Xslt4Result {
+  /** The principal result, serialized with the stylesheet's unnamed output definition. */
+  output: string;
+  /** The output method used for `output` (xml, html, xhtml, text, json, adaptive, csv). */
+  method: string;
+  /** The results of xsl:result-document, each serialized with its output definition. */
+  secondary: Array<{ href: string; output: string }>;
+  /** The texts of xsl:message. */
+  messages: string[];
+}
+
+/**
+ * XSLT 4.0 transform of `sourceXml` ('' for no global context item) by a
+ * stylesheet of one module. xsl:import and xsl:include of another module
+ * fail with XTSE0165: no module is fetched.
+ */
+export function xslt4Transform(
+  stylesheetXml: string,
+  sourceXml: string
+): Promise<Xslt4Result>;
+
 /** The exact value a Content MathML expression evaluates to. */
 export type MathValue =
   | { kind: 'rat'; num: number; den: number }
@@ -2078,6 +2149,9 @@ export function capabilities(): Promise<{
   xpath: boolean;
   rif: boolean;
   xslt: boolean;
+  xpath4: boolean;
+  xquery: boolean;
+  xslt4: boolean;
   mathml: boolean;
   xforms: boolean;
   jsonSchema: boolean;
@@ -2225,6 +2299,9 @@ declare const _default: {
   deltaLogDestroy: typeof deltaLogDestroy;
   _deltaLogCorruptLastForTest: typeof _deltaLogCorruptLastForTest;
   xsltTransform: typeof xsltTransform;
+  xpath4Eval: typeof xpath4Eval;
+  xqueryEval: typeof xqueryEval;
+  xslt4Transform: typeof xslt4Transform;
   mathmlEval: typeof mathmlEval;
   xformsRecalc: typeof xformsRecalc;
   jsonSchemaValidate: typeof jsonSchemaValidate;

package/index.mjs

@@ -153,6 +153,10 @@ export const jsonldFromRdf = api.jsonldFromRdf;
 export const xmlWellformed = api.xmlWellformed;
 export const xpathEval = api.xpathEval;
 export const xsltTransform = api.xsltTransform;
+// XPath 4.0, XQuery 4.0 and XSLT 4.0 (formal/lean4/Wasm/Ops/Qt4.lean).
+export const xpath4Eval = api.xpath4Eval;
+export const xqueryEval = api.xqueryEval;
+export const xslt4Transform = api.xslt4Transform;
 export const schematronValidate = api.schematronValidate;
 export const jsonSchemaValidate = api.jsonSchemaValidate;
 export const mathmlEval = api.mathmlEval;

package/l4-assets/l4factoidal.js

@@ -37,7 +37,7 @@
 // bytes change.
 
 // Stamped by formal/lean4/Wasm/build-wasm.sh step 9 -- do not hand-edit.
-const WASM_VERSION = "18074526651e";
+const WASM_VERSION = "b4f1a5b8cc1d";
 
 import createModule from './l4factoidal.mjs';
 

package/l4-assets/version.json

@@ -2,17 +2,17 @@
   "engine": "lean4",
   "note": "The Lean 4 (L4Factoidal) engine build provenance and claims: the only engine of @factoidal/core since 0.9.0 (issue 713). This committed file is a placeholder. tools/fetch-builds.sh --set web (through tools/stamp-l4-version.mjs) writes the provenance members from the danbri/factoidal-builds release that built the wasm; formal/lean4/Wasm/build-wasm.sh step 9 writes them for a local build. Do not commit a stamped copy.",
   "stamped": true,
-  "release": "danbri/factoidal-builds build-7ab6936b6710-web",
-  "releaseRun": "https://github.com/danbri/factoidal-builds/actions/runs/40733510537",
-  "gitSha": "7ab6936b6710f2a68517a1fd3a1bf047e96c3c7c",
-  "builtAt": "2026-10-28T17:53:09Z",
+  "release": "danbri/factoidal-builds build-24e7d6edaa7d-web",
+  "releaseRun": "https://github.com/danbri/factoidal-builds/actions/runs/40826788173",
+  "gitSha": "24e7d6edaa7da12a9445922c949f762ddacdf17c",
+  "builtAt": "2026-10-29T07:16:14Z",
   "leanToolchain": "leanprover/lean4:v4.33.1",
   "emscripten": "6.0.8",
   "abiVersion": "1",
   "engineVersion": "l4factoidal-wasm 0.2.0 (dispatch: RDF parse/serialize, SPARQL query+update, RDFS/OWL-RL closures, RDFC-1.0, CL/IKL)",
   "version": "l4factoidal-wasm 0.2.0 (dispatch: RDF parse/serialize, SPARQL query+update, RDFS/OWL-RL closures, RDFC-1.0, CL/IKL)",
-  "wasmSha256": "18074526651eb00293b15be5c6d6e117e9d07271f1d104340b9d9ecff3b826c2",
-  "wasmBytes": 19211990,
+  "wasmSha256": "b4f1a5b8cc1d6d5307a836120ba8d09bc7dd7680530bb276366d47a8f95f0d12",
+  "wasmBytes": 29931615,
   "claims": {
     "source": "formal/lean4 (L4Factoidal): no sorry, no user axioms, no native_decide; W3C behaviour pinned by build-time #guard",
     "suitesAtBuildSha": "see docs/test-results and formal/lean4/PORT_NOTES.md at gitSha"

package/lib/api.mjs

@@ -2033,6 +2033,67 @@ function buildApi(driver) {
     return r.output;
   }
 
+  // XPath 4.0, XQuery 4.0 and XSLT 4.0 (formal/lean4/Wasm/Ops/Qt4.lean). The
+  // engine evaluates and serializes; these functions check argument types and
+  // unwrap the envelope. A QT4 error rejects with a FactoidalError (code
+  // `xml.failed`) whose `qtError` is {code, namespace, message}: the error
+  // code the specification names (XPST0003, FODC0002, XTSE0165, ...).
+  // The engine does no I/O: fn:doc, fn:unparsed-text, import module,
+  // xsl:import and xsl:include of anything but the arguments fail with the
+  // specification's error code.
+  function qt4Result(r) {
+    const { ok: _ok, ...rest } = r;
+    return rest;
+  }
+
+  /**
+   * Evaluate an XPath 4.0 expression with an XML document as context item.
+   * @param {string} xmlText the context document, or '' for no context item
+   * @param {string} expr an XPath 4.0 expression
+   * @returns {Promise<{count:number, items:Array<{type:string,value:string}>, adaptive:string, xml:string|null}>}
+   */
+  async function xpath4Eval(xmlText, expr) {
+    if (typeof xmlText !== 'string' || typeof expr !== 'string') {
+      throw new TypeError('xpath4Eval: xmlText and expr must be strings');
+    }
+    const e = await entry();
+    requireEntryFn(e, 'xpath4Eval', 'XPath 4.0 evaluation');
+    return qt4Result(entryResult(e.xpath4Eval(xmlText, expr), 'xpath4Eval'));
+  }
+
+  /**
+   * Evaluate an XQuery 4.0 main module, optionally with an XML document as
+   * context item.
+   * @param {string} query an XQuery 4.0 main module
+   * @param {string} [contextXml] the context document ('' or absent: none)
+   * @returns {Promise<{count:number, items:Array<{type:string,value:string}>, adaptive:string, xml:string|null}>}
+   */
+  async function xqueryEval(query, contextXml) {
+    if (typeof query !== 'string' || (contextXml !== undefined && typeof contextXml !== 'string')) {
+      throw new TypeError('xqueryEval: query must be a string, contextXml a string when given');
+    }
+    const e = await entry();
+    requireEntryFn(e, 'xqueryEval', 'XQuery 4.0 evaluation');
+    return qt4Result(entryResult(e.xqueryEval(query, contextXml ?? ''), 'xqueryEval'));
+  }
+
+  /**
+   * XSLT 4.0 transform. The principal result is serialized with the
+   * stylesheet's unnamed output definition; `secondary` holds the results of
+   * xsl:result-document, `messages` the xsl:message texts.
+   * @param {string} stylesheetXml an XSLT stylesheet (one module)
+   * @param {string} sourceXml the source document, or '' for no global context item
+   * @returns {Promise<{output:string, method:string, secondary:Array<{href:string,output:string}>, messages:string[]}>}
+   */
+  async function xslt4Transform(stylesheetXml, sourceXml) {
+    if (typeof stylesheetXml !== 'string' || typeof sourceXml !== 'string') {
+      throw new TypeError('xslt4Transform: stylesheetXml and sourceXml must be strings');
+    }
+    const e = await entry();
+    requireEntryFn(e, 'xslt4Transform', 'XSLT 4.0 transform');
+    return qt4Result(entryResult(e.xslt4Transform(stylesheetXml, sourceXml), 'xslt4Transform'));
+  }
+
   /**
    * Evaluate a Content MathML document (entry_jsoo.ml's mathmlEval
    * export -> MathML.Content.eval_doc_env). `bindings` maps
@@ -2508,6 +2569,9 @@ function buildApi(driver) {
       xpath: has('xpathEval'),
       rif: has('rifEval'),
       xslt: has('xsltTransform'),
+      xpath4: has('xpath4Eval'),
+      xquery: has('xqueryEval'),
+      xslt4: has('xslt4Transform'),
       mathml: has('mathmlEval'),
       xforms: has('xformsRecalc'),
       jsonSchema: has('jsonSchemaValidate'),
@@ -2688,6 +2752,9 @@ function buildApi(driver) {
     clNormalize,
     rifEval,
     xsltTransform,
+    xpath4Eval,
+    xqueryEval,
+    xslt4Transform,
     mathmlEval,
     xformsRecalc,
     jsonSchemaValidate,

package/lib/errors.mjs

@@ -24,6 +24,10 @@
  * - `cause`: the underlying error, when there is one.
  * - `format`, `formatInferred`: for a parse failure of text, the syntax it
  *   was read as and whether that syntax was inferred.
+ * - `qtError`: for xpath4Eval, xqueryEval and xslt4Transform, the error the
+ *   XPath, XQuery or XSLT 4.0 specification names: `{code, namespace,
+ *   message}` (for example code `XPST0003` in
+ *   http://www.w3.org/2005/xqt-errors).
  */
 export class FactoidalError extends Error {
   constructor(message, info) {
@@ -35,6 +39,7 @@ export class FactoidalError extends Error {
     this.spec = i.spec || null;
     if (i.format !== undefined) this.format = i.format;
     if (i.formatInferred !== undefined) this.formatInferred = i.formatInferred;
+    if (i.qtError !== undefined) this.qtError = i.qtError;
     if (typeof Error.captureStackTrace === 'function') {
       Error.captureStackTrace(this, FactoidalError);
     }
@@ -81,6 +86,7 @@ export function errorFromEnvelope(env, text) {
     spec: env && env.spec,
     position,
     format: env && env.format,
+    qtError: env && env.qtError && typeof env.qtError === 'object' ? env.qtError : undefined,
   });
 }
 

package/lib/version.mjs

@@ -2,4 +2,4 @@
 // needs import attributes, which not every runtime this package targets
 // reads). test/dts-drift.test.js checks that it equals package.json's
 // `version`.
-export const version = '0.21.0';
+export const version = '0.22.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@factoidal/core",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "description": "EXPERIMENTAL UNREVIEWED CODE: do not run public services on it without careful independent expert review. RDF parsing and writing (Turtle, TriG, N-Triples, N-Quads, RDF/XML, JSON-LD), SPARQL 1.1 and 1.2, RDFS and OWL reasoning, SHACL and ShEx validation, CSVW and RML mapping, RDFC-1.0, and SPARQL, LWS and Solid servers, for Node, Deno and browsers.",
   "keywords": [
     "sparql",