@factoidal/core 0.34.0 → 0.35.1

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.35.1 (2026-11-11)
+
+- Foafnaut (macOS): a heavy page no longer freezes the app. The host keeps one frame of GPU work in flight for heavy frames (three for light ones); after three frames over 250 ms it slows the page's animation and shows "SLOWED: HEAVY PAGE". Quitting or closing the window stops GPU work, so the app quits within seconds (before, up to 209 s on the Spinal Tap page at 2x). `--gpu-frames-in-flight N` sets the limit.
+- Foafnaut: Arabic letters join again on a page that loaded Noto Sans Math first; a font whose GSUB covers the script is preferred. Chinese, Japanese and Korean text breaks between characters, so long runs wrap instead of pushing right-to-left lines out of their cells.
+- BubblePopJS: conversions between byte arrays and the engine's values are faster (Pako about 14% faster on the native engine), with proofs that the fast forms give the same results.
+- XMPP: xmpp-serve logs each connection by its address tag, never the address (--quiet stops it).
+
+## 0.35.0 (2026-11-10)
+
+- Foafnaut: partial frames. A frame compiles again only the primitives that changed, keeps a damage rectangle, and redraws only that part of a layer. On the Spinal Tap page, one animated frame went from 351 ms to 3.9 ms of GPU and JS time at 1x (1225 ms to 4.0 ms at 2x); engine time per frame 28.5 ms to 10.9 ms. `retained:false` still gives the full path, and tests check that both give the same bytes.
+- Foafnaut: BubblePopJS, the built-in JavaScript engine, runs page scripts by default everywhere, also on the Hub. QuickJS-NG stays in the builds for comparison. Fixes: `r.exec(s)` in a loop no longer pays for the length of `s` on each call; a block with `let` or `const` may hold an `await`.
+- Foafnaut: a shader gallery page (WebGPU, WGSL), the same results on both JavaScript engines.
+- Foafnaut: the Hub starts faster, and layout is faster on large pages.
+- Foafnaut: on a Retina Mac the page is drawn at full resolution.
+- Foafnaut: iframes; form submission in the page's encoding; colour emoji (COLR/CPAL) in text, SVG text and canvas text; more fonts and SMIL animation.
+- Foafnaut: a click is no longer lost when the engine is busy; pointer input runs before queued engine work, and script hit tests use the frame on screen.
+- Foafnaut (macOS): the app links Lean's runtime without GNU MP. The releases that still contain GNU MP carry its notice.
+- `foafnaut` command: with no channel, it starts the newer of the installed release and the local bleeding-edge build, and says which. `--bleeding-edge` says the commit and age of the local build and warns when it is more than 6 hours old.
+- LWS client: `verifyNotification` accepts a notification whose `Signature-Input` covers the derived component `@query` (RFC 9421 section 2.2.7; https://github.com/danbri/factoidal-core/issues/379). The value comes from the inbox URL: `?` and the query, or `?` alone when the URL has no query. Before, the client read `@query` as a header field and refused the notification with "a covered component is missing", so `createNotificationReceiver` answered 401 to every notification from a storage that signs `@query` (sparq-lws-core; seen with 0.26.0 and 0.34.0). The client derives `@method`, `@scheme`, `@authority`, `@path` and `@query` only. Another name that starts with `@` (`@target-uri`, `@request-target`, `@query-param`) is refused and is not read as a header field. The decision is in Lean (`inboxBase` and `urlQuery`, `L4Factoidal/LWS/Client/Machine.lean`), through the wasm op `lwsClientStep`.
+- `foafnaut` command: `--version` prints the commit and the build time of the app that would run. The app gives the answer, from the record that its build wrote. An app that is too old to answer gives the line "this build is too old to answer --version".
+- `foafnaut` command: a page given as `file:name.html`, with no `//`, is a path relative to the current directory. A `file://` URL is read as a URL, so percent-encoded characters in its path are decoded.
+- XMPP: every IQ result the server sends has a `from` (RFC 6120 section 8.1.2.1): the address asked, or the account's bare JID when the request had no `to`. Theorems `handleIq_send_has_from` and `handleIq_domain_from`.
+
 ## 0.34.0 (2026-11-08)
 
 - `foafnaut` command: `--url` and `--html` open a page or a file (`file:` URLs too), and other options are passed to the app.

package/bin/factoidal.mjs

@@ -2998,7 +2998,9 @@ async function commandXmppServe (positional, options) {
     dir: positional[0],
     port: servePort(options, useTls && !startTls ? 5223 : 5222),
     host: serveHost(options),
-    onError: (error) => { if (!quiet) err(`xmpp-serve: ${error.message}`) }
+    onError: (error) => { if (!quiet) err(`xmpp-serve: ${error.message}`) },
+    // Connection events: an address tag (never an address), closes at a timeout.
+    onLog: (line) => { if (!quiet) err(`xmpp-serve: ${line}`) }
   }
   if (typeof options.domain === 'string') settings.domain = options.domain
   if (typeof options.accounts === 'string') {

package/bin/foafnaut.mjs

@@ -5,10 +5,10 @@
 // current -> versions/<commit>, config.json {"bleedingEdge":"/path/to/App.app"}.
 import { spawn, spawnSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
-import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { basename, join, resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
+import { basename, dirname, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
 
 const HELP = `foafnaut [--latest|--bleeding-edge] [PAGE | --url URL | --html FILE] [APP_OPTIONS] [-- APP_ARGS]
 
@@ -23,6 +23,7 @@ const HELP = `foafnaut [--latest|--bleeding-edge] [PAGE | --url URL | --html FIL
   --install-latest  install the newest published build and stop
   --list            list installed versions
   --which           print the app that would run
+  --version         print the commit and build time of that app (the app answers)
   --help            this text
 
 App options, passed to the app as they are:
@@ -33,6 +34,9 @@ App options, passed to the app as they are:
   --font FILE       load this font file
   --bitmap-font     use the baked-in ASCII font only
   --follow-links    open links that a page asks for at load
+  --be-liberal-in-what-we-accept  draw a page without the features this browser may skip
+                    (module scripts, unreadable media conditions, stylesheets that did not
+                    load) and list them in the console (Option-Command-J); the default refuses
 
 Also: foafnaut-latest, foafnaut-bleedingedge. Environment: FOAFNAUT_HOME, and
 FOAFNAUT_APP, which chooses the app outright. Page data goes to the app. Its trace
@@ -108,13 +112,15 @@ async function installLatest() {
 }
 
 // App options that take no value, and those that take one.
-const APP_FLAGS = ['--perf-summary', '--check-pixels', '--wasm-engine', '--bitmap-font', '--follow-links', '--idle-checks-only', '--trace-input'];
+const APP_FLAGS = ['--perf-summary', '--check-pixels', '--wasm-engine', '--bitmap-font', '--follow-links', '--idle-checks-only', '--trace-input', '--be-liberal-in-what-we-accept'];
 const APP_VALUES = ['--native-engine', '--font'];
 
 function pageArgs(page) {
   if (page === undefined) return [];
   if (/^https?:\/\//i.test(page)) return ['--url', page];
-  if (/^file:/i.test(page)) page = new URL(page).pathname;
+  // file:///abs/path is a URL; file:name.html has no // and is relative to here.
+  if (/^file:\/\//i.test(page)) page = fileURLToPath(page);
+  else if (/^file:/i.test(page)) page = decodeURIComponent(page.slice(5));
   const path = resolve(page);
   if (!existsSync(path)) fail(`no such file: ${page}`);
   return ['--html', path];
@@ -124,7 +130,7 @@ export async function main(argv, channel = 'current') {
   const split = argv.indexOf('--');
   const options = split < 0 ? argv : argv.slice(0, split);
   const extra = split < 0 ? [] : argv.slice(split + 1);
-  let page, which = false, verbose = false, detach = false;
+  let page, which = false, verbose = false, detach = false, version = false;
   const app_ = [];
   const setPage = (value) => { if (page !== undefined) fail('give one page'); if (value === undefined) fail('a page option needs a value'); page = value; };
   // Each of these picks the app or the action. Two of them have no one meaning.
@@ -136,6 +142,7 @@ export async function main(argv, channel = 'current') {
     else if (arg === '--latest') channel = 'latest';
     else if (arg === '--bleeding-edge') channel = 'bleeding-edge';
     else if (arg === '--which') which = true;
+    else if (arg === '--version') version = true;
     else if (arg === '--verbose' || arg === '-v') verbose = true;
     else if (arg === '--detach') detach = true;
     else if (arg === '--install-latest') { await installLatest(); return; }
@@ -157,9 +164,36 @@ export async function main(argv, channel = 'current') {
   let app = process.env.FOAFNAUT_APP;
   if (!app && channel === 'latest') app = await installLatest();
   if (!app && channel === 'bleeding-edge') app = bleedingEdgeApp();
-  if (!app) app = currentApp() ?? bleedingEdgeApp();
+  // With no channel named: the newer of the installed release and the bleeding-edge build
+  // (owner, 2026-11-09: plain foafnaut started a release of 6 November, older than the
+  // local build, with nothing to say so). Each is dated by its files on disk.
+  if (!app) {
+    const release = currentApp(), local = existsSync(bleedingEdgeApp()) ? bleedingEdgeApp() : undefined;
+    const age = (path) => statSync(path).mtimeMs;
+    app = release && local ? (age(local) >= age(release) ? local : release) : (release ?? local ?? bleedingEdgeApp());
+    if (release && app === release)
+      console.error(`foafnaut: the installed release ${basename(realpathSync(join(home(), 'current')))} (newer than the bleeding-edge build)`);
+    else if (release) console.error('foafnaut: the bleeding-edge build (newer than the installed release; --latest for the release)');
+  }
   if (!existsSync(app)) fail(`no app at ${app}. Run foafnaut --install-latest.`);
+  // The bleeding-edge build says what it was built from (BUILD-INFO.json beside the app,
+  // written when the build is swapped in); an old build is named, so it is not taken for main.
+  if (app === bleedingEdgeApp()) {
+    try {
+      const info = JSON.parse(readFileSync(join(dirname(app), 'BUILD-INFO.json'), 'utf8'));
+      const hours = (Date.now() - Date.parse(info.builtAt)) / 3.6e6;
+      console.error(`foafnaut: bleeding edge built from ${info.commit}${info.dirty ? " with uncommitted changes" : ""} at ${info.builtAt} (${hours.toFixed(1)} h ago)` +
+        (hours > 6 ? '; it may lack newer work on main' : ''));
+    } catch { console.error('foafnaut: bleeding edge has no BUILD-INFO.json; its commit is not known'); }
+  }
   if (which) { console.log(app); return; }
+  // The app answers for itself. `open` shows no output, so run its program directly.
+  if (version) {
+    const run = spawnSync(join(dirname(app), 'native-webgpu-html-darwin-arm64'), ['--version'], { encoding: 'utf8' });
+    if (run.status === 0) process.stdout.write(run.stdout);
+    else console.log(`foafnaut: this build is too old to answer --version (${app})`);
+    process.exit(0);
+  }
   const args = ['-n', ...(detach ? [] : ['-W']), app, '--args', ...pageArgs(page), ...(verbose ? ['--trace-input'] : []), ...app_, ...extra];
   const log = join(homedir(), 'Library', 'Logs', 'foafnaut', 'trace.jsonl');
   if (verbose) console.error(`foafnaut: app ${app}\nfoafnaut: open ${args.join(' ')}\nfoafnaut: trace ${log}`);

package/l4-assets/l4factoidal.js

@@ -37,7 +37,7 @@
 // bytes change.
 
 // Stamped by formal/lean4/Wasm/build-wasm.sh step 9 -- do not hand-edit.
-const WASM_VERSION = "a92a94475fa0";
+const WASM_VERSION = "2e241365bd79";
 
 import createModule from './l4factoidal.mjs';
 

package/l4-assets/version.json

@@ -2,17 +2,17 @@
   "engine": "lean4",
   "note": "The Lean 4 (L4Factoidal) engine build provenance and claims: the only engine of @factoidal/core since 0.9.0 (issue 713). This committed file is a placeholder. tools/fetch-builds.sh --set web (through tools/stamp-l4-version.mjs) writes the provenance members from the danbri/factoidal-builds release that built the wasm; formal/lean4/Wasm/build-wasm.sh step 9 writes them for a local build. Do not commit a stamped copy.",
   "stamped": true,
-  "release": "danbri/factoidal-builds build-20ff52ea9005-web",
-  "releaseRun": "https://github.com/danbri/factoidal-builds/actions/runs/42520417546",
-  "gitSha": "20ff52ea90050c8db7bb7135aa0c20ee118183e5",
-  "builtAt": "2026-11-08T21:35:07Z",
+  "release": "danbri/factoidal-builds build-6f57afba14e0-web",
+  "releaseRun": "https://github.com/danbri/factoidal-builds/actions/runs/42968513371",
+  "gitSha": "6f57afba14e04ed648358e4693790edff69a6cd3",
+  "builtAt": "2026-11-11T07:07:29Z",
   "leanToolchain": "leanprover/lean4:v4.33.1",
   "emscripten": "6.0.8",
   "abiVersion": "1",
   "engineVersion": "l4factoidal-wasm 0.2.0 (dispatch: RDF parse/serialize, SPARQL query+update, RDFS/OWL-RL closures, RDFC-1.0, CL/IKL)",
   "version": "l4factoidal-wasm 0.2.0 (dispatch: RDF parse/serialize, SPARQL query+update, RDFS/OWL-RL closures, RDFC-1.0, CL/IKL)",
-  "wasmSha256": "a92a94475fa0cfc6fe9aeb28b197e81c3c3162806ecbba562f200fbaea51416b",
-  "wasmBytes": 32702060,
+  "wasmSha256": "2e241365bd7906474320610a65af99641474534fa0fe0e744ed3d9edeef4ee41",
+  "wasmBytes": 32703824,
   "claims": {
     "source": "formal/lean4 (L4Factoidal): no sorry, no user axioms, no native_decide; W3C behaviour pinned by build-time #guard",
     "suitesAtBuildSha": "see docs/test-results and formal/lean4/PORT_NOTES.md at gitSha"

package/lib/version.mjs

@@ -2,4 +2,4 @@
 // needs import attributes, which not every runtime this package targets
 // reads). test/dts-drift.test.js checks that it equals package.json's
 // `version`.
-export const version = '0.34.0';
+export const version = '0.35.1';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@factoidal/core",
-  "version": "0.34.0",
+  "version": "0.35.1",
   "description": "EXPERIMENTAL UNDER-REVIEWED CODE: do not run public services on it without careful independent expert review. RDF parsing and writing (Turtle, TriG, N-Triples, N-Quads, RDF/XML, JSON-LD), SPARQL 1.1 and 1.2, RDFS and OWL reasoning, SHACL and ShEx validation, CSVW and RML mapping, RDFC-1.0, and SPARQL, LWS and Solid servers, for Node, Deno and browsers.",
   "keywords": [
     "sparql",
@@ -28,7 +28,8 @@
   "author": "Dan Brickley <danbri@danbri.org>",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/danbri/factoidal-builds.git"
+    "url": "git+https://github.com/danbri/factoidal.git",
+    "directory": "npm/factoidal"
   },
   "main": "./index.js",
   "module": "./index.mjs",