Develop

.github/workflows/ui-tests.yml

@@ -0,0 +1,96 @@
+name: UI-tests
+
+# Separate from HTTP-tests rather than a second job in it. The two share a ~3.5 minute
+# prelude (image build, CLI, certificates) out of a run that is mostly suite, and they pay
+# it in parallel, so folding them together would serialise ~19 minutes to save ~4 of runner
+# time. It would also couple a suite that snapshots and restores the whole dataset to one
+# that owns the instance and reseeds it, and leave one red X to say which of the two broke.
+
+on: push
+
+jobs:
+  ui-tests:
+    name: Build Docker image and run the browser UI suite against it
+    runs-on: ubuntu-latest
+    env:
+      # As http-tests/run.sh exports them, so both suites can be pointed at one instance
+      END_USER_BASE_URL: https://localhost:4443/
+      ADMIN_BASE_URL: https://admin.localhost:4443/
+    steps:
+      - name: Set up Java 21
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+      - name: Checkout code
+        uses: actions/checkout@v7
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+          cache-dependency-path: ui-tests/package-lock.json
+      - name: Add bin/ and its subdirectories to PATH
+        run: |
+          find "$GITHUB_WORKSPACE/bin" -type d >> "$GITHUB_PATH"
+      - name: Build the ldh CLI
+        run: mvn -B package # the suite builds its fixtures with ldh, the way http-tests does
+        working-directory: cli
+      - name: Add the ldh launcher to PATH
+        run: echo "$GITHUB_WORKSPACE/cli/bin" >> "$GITHUB_PATH"
+      - name: Generating server certificate
+        run: |
+          server-cert-gen.sh .env nginx ssl
+        working-directory: http-tests
+      - name: Writing secrets to files
+        # All three, not just the owner's: the base compose file declares each of them as a
+        # secret, and `up` fails outright on a missing source file.
+        run: |
+          mkdir -p ./secrets
+          printf "%s" "${{ secrets.HTTP_TEST_OWNER_CERT_PASSWORD }}" > ./secrets/owner_cert_password.txt
+          printf "%s" "${{ secrets.HTTP_TEST_SECRETARY_CERT_PASSWORD }}" > ./secrets/secretary_cert_password.txt
+          printf "%s" "${{ secrets.HTTP_TEST_SECRETARY_CERT_PASSWORD }}" > ./secrets/client_truststore_password.txt
+        shell: bash
+      - name: Build Docker image & Run Docker containers
+        # No service list: the sef-compiler container has to be up, because importing a
+        # package recomposes the client SEF and the suite's taxonomy fixture imports one.
+        run: docker compose -f docker-compose.yml -f ./http-tests/docker-compose.http-tests.yml --env-file ./http-tests/.env up --build -d
+      - name: Wait for the server to start...
+        run: while ! (status=$(curl -k -s -w "%{http_code}\n" https://localhost:4443 -o /dev/null) && echo "$status" && echo "$status" | grep "403") ; do sleep 1 ; done # wait for the webapp to start (returns 403 by default)
+      - name: Fix certificate permissions on the host
+        # The entrypoint generates the keystore inside the mounted volume as root, and
+        # Playwright reads it as the runner user.
+        run: |
+          sudo chmod 644 ./ssl/owner/keystore.p12
+        working-directory: http-tests
+      - name: Install the Playwright runner and its browser
+        run: npm ci && npx playwright install --with-deps chromium
+        working-directory: ui-tests
+      - name: Run the UI test suite
+        run: npx playwright test
+        working-directory: ui-tests
+        env:
+          # The keystore the http-tests stack generates, rather than the repository root
+          # copy the dev loop uses. OWNER_CERT_PWD keeps the password out of a file the
+          # suite would have to be told about separately.
+          OWNER_CERT_KEYSTORE: ${{ github.workspace }}/http-tests/ssl/owner/keystore.p12
+          OWNER_CERT_PWD: ${{ secrets.HTTP_TEST_OWNER_CERT_PASSWORD }}
+      - name: Upload the HTML report and traces
+        if: always() && hashFiles('ui-tests/out/**', 'ui-tests/test-results/**') != ''
+        uses: actions/upload-artifact@v4
+        with:
+          name: ui-test-results
+          path: |
+            ui-tests/out/
+            ui-tests/test-results/
+          if-no-files-found: ignore
+      - name: Dump container logs on failure
+        if: failure()
+        run: docker compose --env-file ./http-tests/.env logs --no-color
+      - name: Dump Tomcat logs from linkeddatahub container on failure
+        if: failure()
+        run: docker compose --env-file ./http-tests/.env exec -T linkeddatahub sh -c 'for f in /usr/local/tomcat/logs/*; do echo "=== $f ==="; cat "$f"; done' || true
+      - name: Stop Docker containers and remove volumes
+        run: docker compose --env-file ./http-tests/.env down -v
+      - name: Remove Docker containers
+        run: docker compose --env-file ./http-tests/.env rm -f

.gitignore

@@ -2,6 +2,7 @@
 /target
 /.env
 /uploads
+/sef
 /nb-configuration.xml
 /node
 /node_modules
@@ -16,3 +17,6 @@
 /fuseki
 .claude/scheduled_tasks.lock
 /cli/target
+/ui-tests/node_modules
+/ui-tests/out
+/ui-tests/test-results

CHANGELOG.md

@@ -1,3 +1,106 @@
+## [6.0.0]
+Bootstrap 2 is gone, and with it the class vocabulary application stylesheets were written against. An app's `ac:stylesheet` points at its own XSLT, which imports the platform's `xsl/bootstrap/2.3.2/layout.xsl` — that import path is unchanged, and the `bs2:` modes it defines are all still there. An override that emits Bootstrap 2 markup therefore still compiles and still runs; it just emits classes no stylesheet backs any more, and renders unstyled with no diagnostic. Hence the major version: the failure gives no signal of its own.
+
+### Migration
+- Legacy Bootstrap buttons (`btn`, `btn-primary`, `btn-large`, …) become the `ac-btn` intent/appearance/size vocabulary — `ac-btn in-primary ap-solid sz-md`
+- `$ac:langs` and `$ac:lang` stylesheet parameters become the `ac:langs()` and `ac:langs()[1]` functions; an `xsl:with-param` left behind is silently ignored rather than reported
+- `pull-left` and `pull-right` have no replacement — the design system lays out with flex and grid
+- Overrides depending on `bootstrap.js`, jQuery, WYMEditor or the sprite icon layer need rewriting: dropdowns and modals are driven by IXSL templates, icons by the `msi` font, and `rdf:XMLLiteral` editing by the RDFa editor
+- Stylesheets extending the removed vocabulary can be diffed against `ldh-bridge.css`, which carries the primitives LDH still emits
+
+### Added
+- Design system port: the app shell (header, sidebar, footer), content blocks, action bar, breadcrumbs, mode lists, type badges, property lists, pager, modals and forms all render the design system's class vocabulary
+- Vendored design system stylesheets and typefaces, with latin-ext subsets so Latin Extended-A no longer falls back mid-word
+- A long-form typography layer binds headings, `code`/`samp`/`kbd`, `pre`, `dl`, `blockquote`, `hr` and tables to the design system on the element itself, so `rdf:XMLLiteral` content is dressed under the XHTML block and under the documentation site alike
+- `ldh-bridge.css` carries the primitives LDH still emits, replacing the Web-Client Bootstrap stylesheet link
+- `ac:langs()` returns the reader's accepted languages, normalised to deduped primary subtags with an `en` floor — one function, an SSR body reading the writer-supplied parameter and a SaxonJS body reading `navigator.languages`
+- `ac:lang-rank()` ranks a value's language against that list, so property values sort by the reader's preference
+- `Content-Language` on HTML responses, negotiated against the languages the UI translation bundle actually ships
+- `Vary: Accept-Language` and language-sensitive entity tags on language-negotiated representations, so a shared cache cannot serve one reader's rendering to another
+- Every rendered literal declares its own language: lang-tagged values carry their tag, untagged values carry `lang=""`, typed non-string values inherit
+- Predicate labels, object links and table cells declare the language their label was chosen in, which may differ from the document's
+- `http-tests/language/`: six scripts covering `Content-Language` by reader and by media type, `Vary`, per-language entity tags, `<html lang>` agreement and per-literal marking
+- `ResponseHeadersFilterTest` covers the response filter's hypermedia — snapshot read-only modes, proxy suppression, the RFC 7089 relations and `Link` folding — alongside the language labelling
+- `BundleLanguagesTest` covers deriving the supported languages from the translation bundle and the RFC 4647 matching behind it
+- Spanish translations completed, so the bundle covers every UI string it claims to
+- View table columns are sortable, keyed off each column's XSD datatype through `ldh:sort-key()`
+- Facet toolbar, three-zone pager, chart controls grid, design-system list and grid modes
+- Block drag-and-drop is payload-typed with an app MIME marker, with a single moving drop marker
+- Copy-URI button reaches every block type through a context-free `ldh:CopyUriButton` mode
+- Empty blocks and empty chart result sets say so through the design system's block-state component
+- `ldh:date-time()`, `ldh:datatype-family()`, `ldh:css-token()` and `ldh:view-cache()` replace logic that had been written out at every call site
+- Package ontologies are declared as `owl:imports` instead of grafted, with an imports characterization test
+- `ldh packages list`, `ldh packages add` and `ldh packages remove` give the CLI the package management the settings modal has: the catalog read through the Linked Data proxy with the imported packages marked, and the `ldh:import` declaration written through `PATCH /settings`
+- `ldh get` reaches a versioned document's RFC 7089 Memento roles through mutually exclusive `--timemap`, `--version <sha>` and `--timegate` options, the last taking a `--datetime` in RFC 1123 or ISO 8601 and printing the negotiated version's URI as its only output
+- `ldh put` and `ldh post` take an optional `FILE` argument and recognize the RDF syntax from its extension (`ldh put "$LDH_BASE" root.ttl`); `-t/--content-type` stays required when reading stdin, which carries no name to go by
+
+### Changed
+- **BREAKING**: the bundled package is named for what it does rather than for the vocabulary it speaks: `https://packages.linkeddatahub.com/skos/#this` becomes `https://packages.linkeddatahub.com/editor/taxonomy/#this`, opening an `editor/` namespace for the editors that follow, and its stylesheet becomes `skos.xsl` — the package is the taxonomy editor, that module is the SKOS-specific part of it. An `ldh:import` naming the old URI resolves to nothing and renders the application without the package: re-declare it with the new one
+- **BREAKING**: `ldh` commands regroup by verb, dropping the `bin/` directory mirror: the hyphenated leaves split into `create`, `add` and `remove` groups (`ldh create item`, `ldh add view`, `ldh remove block`), the `imports`, `content`, `admin acl` and `admin ontologies` groups dissolve into them (`ldh import rdf`, `ldh add object-block`, `ldh admin create group`, `ldh admin add class`), `import` carries the composite workflows — `rdf`, `csv` and `admin import ontology` — apart from the atomic `add rdf-import`/`add csv-import`, and `admin acl add-agent-to-group` shortens to `ldh admin add agent`; the script → command table in `cli/README.md` maps every name
+- `<html lang>` is taken from the `Content-Language` the response carries, so the header and the document agree by construction rather than by two computations staying in step
+- The language a page reports is the first accepted language the UI bundle has, not the reader's top preference — asking for German no longer puts `lang="de"` on a page written entirely in English
+- Published language tags are the shortest the bundle justifies (`en`, not `en-US`), keeping a region subtag only where the bundle distinguishes two variants of one language
+- Supported UI languages are derived from `translations.rdf` rather than declared beside it in `web.xml`
+- Property lists and table cells order their values by the reader's language instead of hiding the ones that do not match, so a reader whose language the data lacks still sees every value
+- Language negotiation moved out of `Application` into `LanguageNegotiator`
+- Object metadata merges on the RDF term rather than the lexical form, so a tagged literal is no longer collapsed into an untagged twin
+- Document responses pass the accepted languages into entity tag computation, so tags stop colliding across languages
+- Legacy Bootstrap buttons move to the `ac-btn` intent/appearance/size vocabulary
+- Block link columns route through the `ldh-drawer`; backlinks and copy-URI split into two placements chosen by what a click does
+- Charts draw with resolved design tokens; the HTML Table chart is skinned in CSS and fills the block width
+- Client-side HTTP moves to promise chains, retiring the legacy `ixsl:schedule-action` `http-request` form
+- The busy cursor becomes a promise concern rather than 53 copies of the same `ixsl:set-style`
+- Dropdown dismissal moves into IXSL, and the `DOMContentLoaded` block retires into an `ldh:CloseDropdown` mode
+- Subject-control change handlers move from JavaScript into `ixsl:onchange` templates
+- `ac:uuid()` generates through the platform, and the seven call sites that went around it stop doing so
+- One navigation leaves one history entry
+- CSR failures render through the design system's block states instead of `div.alert.alert-block`
+- The RDFa editor's XMLLiteral canonicalization runs as a single `cm:canonical` pass in `ldh:FormPreSubmit`
+- RDFa editor template names and modes move into their module namespaces
+- Document-level map and graph modes fill the space between action bar and footer
+- The map marker info window is the card itself, fitted into the map viewport and panning the least it can to reveal itself
+- Editing forms already open on the page reconcile with the constructor after a constructor save
+- The edit pencil on a resource description appears only under `acl:Write`
+- `http-tests` assertions read captured responses from a here-string instead of piping `curl` into `grep -q`
+- Web-Client dependency bumped to 5.0.4
+
+### Removed
+- Bootstrap 2: the framework stylesheets, `bootstrap.js`, jQuery, WYMEditor, the sprite icon layer and the `pull-left`/`pull-right` tokens
+- The Bootstrap 2 class vocabulary that no stylesheet backed
+- `$ac:langs` and `$ac:lang` parameters, replaced by `ac:langs()` and `ac:langs()[1]` at 36 call sites
+- `ldt:lang`, which nothing declared, read or wrote
+- `DEBUG:` output from `http-tests`, with the diagnostic-only `gh api` and `curl` calls and the helper that fed them
+
+### Fixed
+- `curl ... | grep -q` was a race under `pipefail`: `grep -q` closes the pipe on its first match and `curl` dies with 141, failing the pipeline even though the assertion passed
+- View sort's numeric keys yield an empty sequence rather than `NaN` for non-numeric values
+- `DataTransfer.types` marshals to an XDM array under SaxonJS, so payload guards compare via `array:flatten`
+- The content-body drag-and-drop guards spell the child step `./div`, since after `and` a bare `div` parses as the division operator
+- Reading an `ixsl:call` result of two numbers as an XDM array hung the renderer with no diagnostic; it arrives as a sequence of doubles
+- Nested cards no longer draw doubled borders, and `dl` column placement is corrected
+- The DataTable converters recognise the derived numeric and dateTime types
+- An alert an author writes inside an XHTML content block keeps its prose spacing, instead of inheriting the flush margins the block-failure alert needs
+- The violation renderer fails on an absent form again, rather than falling back to the rejected rendering
+- Concurrent writes to a versioned application silently lost commits: the commit chain was keyed by file path, while the GitHub Contents API takes its optimistic lock on the branch head — two documents committing at once conflicted and the loser was dropped with only a log line. Commits to one branch now share a single chain
+- A conflicting write is retried with a re-read blob SHA (`MAX_CONFLICT_RETRIES`) instead of being abandoned, so a writer outside this JVM no longer costs a version
+- A rate-limited commit retried with an empty request body: the builder had already been spent by the first attempt, and `JsonObjectBuilder` yields its object only once
+- `release.sh` published to Maven Central before its `git checkout master`, so a failed checkout left 5.10.0 on Central with no tag: the switches are now proven possible first, and once published the trap prints recovery steps instead of deleting the tag that records what was published
+- `release.sh`'s clean check could not see `skip-worktree`/`assume-unchanged` files — git reports them as matching the index whatever is on disk, while a branch switch refuses to overwrite them; they are now warned about at startup and checked precisely before publishing
+- `release.sh` derived the release and snapshot commits positionally (`git log -2`), which breaks as soon as anything else commits in between; they are derived from an anchor taken before `release:prepare`
+- A drop-down flips to whichever side of its trigger has room, on both axes, so the action bar's left-zone menu no longer opens off the viewport edge
+- The language tag renders as a pill wherever a value is laid out rather than only inside a property list, so a table cell's tag stops running into the value it annotates
+- A view block derived from the ontology keeps its URI across reloads: the fragment is hashed from the host resource and the view instead of drawn from `ac:uuid()`, and a fragment scroll waits for the injected blocks to hydrate
+- An injected view block's subject keeps the hash that makes it a fragment
+- A `pre` in an `ldh:XHTML` block takes the recessed code surface the inline chip and error listing already share, instead of running on the bare page background
+- The property-list grid keys on the wrapped `dt`/`dd` shape, leaving prose `dl`s to their own layout
+- An error page renders without the action bar, which had nothing left to act on
+
+### Security
+- CSV/RDF imports now validate the `ldh:file` source and `spin:query` URIs via `URLValidator` before fetching, closing a previously unguarded SSRF surface on the import path (same class as LNK-002; the import client carries delegation/client-cert). Loopback stays allowed; `ALLOW_INTERNAL_URLS` remains the escape hatch
+
+### Known limitations
+- The in-place editor edits tab-group content but cannot create tab groups: while a region is edited every tab panel is shown stacked and editable, and the markup round-trips intact, but there is no gesture that inserts a new tab group — that markup is authored via the HTTP API (e.g. `ldh put`) for now
+
 ## [5.10.0] - 2026-08-30
 ### Added
 - `ldh` command line interface (`cli/`): a standalone picocli/Jena port of the `bin/` HTTP API scripts — one command per script with the same option names, `bin/` subdirectories as nested subcommand groups, PKCS12 WebID keystore authentication, env-var defaults and a shaded executable jar