@factoidal/core 0.30.0 → 0.31.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.31.0 (2026-11-05)
+
+- Stack use on phones. The engine failed on iPhone Safari with "Maximum call stack size exceeded". Two faults are fixed:
+  - The ordered regex matcher (`cmatchE`) nested stack frames for each character of a star. `REPLACE`, `fn:replace` and other capture-aware operations overflowed on long text: in 0.30.0, `REPLACE` with a star failed at 40,000 characters under Node's default stack. A star over one character class is now a loop, with the same order of outcomes. A star over a group still recurses.
+  - Engine start decoded a test fixture (`Codec/Archive.lean`, `realTar`) with one stack frame for each byte. In WebKit, start needed about 1 MB of stack. The decoder is now a loop.
+  - `test/stack-use.test.mjs` gates both faults in the package suite. All of its tests fail against 0.30.0.
+- SPARQL `SERVICE`: variable correlation, and scoped query provider grants (https://github.com/danbri/factoidal-core/pull/283).
+- XPath: `parse-QName` function values capture static namespaces (https://github.com/danbri/factoidal-core/pull/278).
+- VC-JOSE-COSE: draft plan and checklist (https://github.com/danbri/factoidal-core/pull/232).
+- Proof that checked normalization is preserved into the actual RDFS closure (https://github.com/danbri/factoidal-core/pull/288).
+
 ## 0.30.0 (2026-11-04)
 
 - The Lean XMPP server now has an in-page host (`@factoidal/core/xmpp/inpage`): `openInPageXmppServer` exposes ordered message connections and `inPageWebSocket` adapts them for RFC 7395 clients. Protocol decisions remain in Lean, with shared routing for direct messages, MUC rooms, MIX channels and experimental GC3 groups. This provides an app-to-app transport; it does not include a chat UI or WebMCP bridge.

package/l4-assets/l4factoidal.js

@@ -37,7 +37,7 @@
 // bytes change.
 
 // Stamped by formal/lean4/Wasm/build-wasm.sh step 9 -- do not hand-edit.
-const WASM_VERSION = "0b80e57ea8e5";
+const WASM_VERSION = "14599aeba24a";
 
 import createModule from './l4factoidal.mjs';
 

package/l4-assets/version.json

@@ -2,17 +2,17 @@
   "engine": "lean4",
   "note": "The Lean 4 (L4Factoidal) engine build provenance and claims: the only engine of @factoidal/core since 0.9.0 (issue 713). This committed file is a placeholder. tools/fetch-builds.sh --set web (through tools/stamp-l4-version.mjs) writes the provenance members from the danbri/factoidal-builds release that built the wasm; formal/lean4/Wasm/build-wasm.sh step 9 writes them for a local build. Do not commit a stamped copy.",
   "stamped": true,
-  "release": "danbri/factoidal-builds build-084162b863c1-web",
-  "releaseRun": "https://github.com/danbri/factoidal-builds/actions/runs/41860977405",
-  "gitSha": "084162b863c1f3a28d6dddab32511caa2d6e7c30",
-  "builtAt": "2026-11-04T16:27:40Z",
+  "release": "danbri/factoidal-builds build-ace53d982f83-web",
+  "releaseRun": "https://github.com/danbri/factoidal-builds/actions/runs/42050112010",
+  "gitSha": "ace53d982f83e6bf0a1a749a5e800481cc092b9f",
+  "builtAt": "2026-11-05T16:35:31Z",
   "leanToolchain": "leanprover/lean4:v4.33.1",
   "emscripten": "6.0.8",
   "abiVersion": "1",
   "engineVersion": "l4factoidal-wasm 0.2.0 (dispatch: RDF parse/serialize, SPARQL query+update, RDFS/OWL-RL closures, RDFC-1.0, CL/IKL)",
   "version": "l4factoidal-wasm 0.2.0 (dispatch: RDF parse/serialize, SPARQL query+update, RDFS/OWL-RL closures, RDFC-1.0, CL/IKL)",
-  "wasmSha256": "0b80e57ea8e53299640cc8b1d75bfd5974ea91963988ab91d3aa4f5d2c0d7778",
-  "wasmBytes": 31363760,
+  "wasmSha256": "14599aeba24a46bf05e1c7ce8aa885df536fe1398a797034eff107e04fa4ebc3",
+  "wasmBytes": 31371405,
   "claims": {
     "source": "formal/lean4 (L4Factoidal): no sorry, no user axioms, no native_decide; W3C behaviour pinned by build-time #guard",
     "suitesAtBuildSha": "see docs/test-results and formal/lean4/PORT_NOTES.md at gitSha"

package/lib/version.mjs

@@ -2,4 +2,4 @@
 // needs import attributes, which not every runtime this package targets
 // reads). test/dts-drift.test.js checks that it equals package.json's
 // `version`.
-export const version = '0.30.0';
+export const version = '0.31.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@factoidal/core",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "description": "EXPERIMENTAL UNDER-REVIEWED CODE: do not run public services on it without careful independent expert review. RDF parsing and writing (Turtle, TriG, N-Triples, N-Quads, RDF/XML, JSON-LD), SPARQL 1.1 and 1.2, RDFS and OWL reasoning, SHACL and ShEx validation, CSVW and RML mapping, RDFC-1.0, and SPARQL, LWS and Solid servers, for Node, Deno and browsers.",
   "keywords": [
     "sparql",