Serve raw ontology graphs without RDFS inference; token-safe @typeof matching

[namedgraph]

Problem

View blocks rendered as generic property lists instead of executing their spin:query. Root cause: OntologyFilter materialized an RDFS-inferred imports closure, and ProxyRequestFilter's namespace short-circuit served proxied ?uri= requests via DESCRIBE over that inferred model. ldh:View a rdfs:Class + rules rdfs7b/rdfs9 type every instance rdf:type rdfs:Resource, so proxied ontology documents carried an extra type on every term — producing multi-token @typeof that the client's exact-equality *[@typeof = '&ldh;View'] match no longer satisfied.

Changes

No RDFS inference over application ontologies. An audit showed the reasoner was vestigial: constructors recurse over direct superclasses, SPIN constraint collection walks rdfs:subClassOf itself, and every client ontology query already uses (rdfs:subClassOf)* property paths. The owl:imports closure is now resolved natively by ontapi (OntModelFactory.createModel over a new ScopedGraphRepository view) as a live union graph — the manual flatten/infer/materialize pipeline is deleted. rdfs:Class terms are promoted to owl:Class in a separate union member (ontapi's OWL2 named-class factory doesn't recognize bare rdfs:Class, and its legacy-compat config control only applies to OWL1/expression factories), so no document graph is polluted. Closure union graphs are cached in a bounded map on Application; per-request OntModel wrapping is preserved.

Raw document graphs on the wire, uniformly. The shared repository now only holds raw per-document graphs. ProxyRequestFilter serves closure documents with their raw graphs — asserted triples only, identical to a direct document GET — guarded by isCached so arbitrary external URIs can't trigger repository loading outside the SSRF-validated external-client path. The DESCRIBE fallback remains for terms minted in external namespaces and is now inference-free. Namespace's no-query GET reuses the shared raw cache instead of a per-request createRepository SPARQL round-trip. Invalidation updated in ClearOntology and ValidatingModelProvider.

Token-safe @typeof matching. All 28 exact-equality @typeof comparisons in the client XSLT (View/Object/query/chart blocks, View pager/mode/order/facet handlers) switch to tokenize(@typeof, ' '), per RDFa's whitespace-separated list semantics — any legitimately multi-typed resource would have degraded the same way.

Also fixed in passing: UninstallPackage no longer reads a materialized closure when a package URI is a loaded app ontology, and admin ontologies importing each other can no longer fold one closure's artifacts into another on the shared system repository.

Test plan

• Full unit suite: 90/90 pass. OntologyImportsCharacterizationTest rewritten to pin: eager closure resolution, zero inference in the union, raw document graphs untouched (isomorphism), promotion not leaking into raw graphs, getOntClass recognition of rdfs:Class-only terms, import-cycle tolerance
• http-tests/proxy/GET-proxied-ontology-ns.sh extended: proxied ontology document contains the authored classes and no rdf:type rdfs:Resource; same negative assertion on the DESCRIBE fallback
• Stack rebuild + http-tests run (proxy/, admin/model/, form/constructor suites)
• Browser: View block on the homepage executes its query and renders the table; single-token typeof in the DOM

🤖 Generated with Claude Code