Serve raw ontology graphs without RDFS inference

[namedgraph]

Problem

View blocks rendered as generic property lists instead of executing their spin:query. Root cause: OntologyFilter materialized an RDFS-inferred imports closure, and ProxyRequestFilter's namespace short-circuit served proxied ?uri= requests via DESCRIBE over that inferred model. ldh:View a rdfs:Class + rules rdfs7b/rdfs9 type every instance rdf:type rdfs:Resource, so proxied ontology documents carried an extra type on every term — producing multi-token @typeof that the client's exact-equality *[@typeof = '&ldh;View'] match no longer satisfied.

Changes

No RDFS inference over application ontologies. An audit showed the reasoner was vestigial: constructors recurse over direct superclasses, SPIN constraint collection walks rdfs:subClassOf itself, and every client ontology query already uses (rdfs:subClassOf)* property paths. The owl:imports closure is now resolved natively by ontapi (OntModelFactory.createModel over a new ScopedGraphRepository view) as a live union graph — the manual flatten/infer/materialize pipeline is deleted. rdfs:Class terms are promoted to owl:Class in a separate union member (ontapi's OWL2 named-class factory doesn't recognize bare rdfs:Class), so no document graph is polluted. Closure union graphs are cached in a bounded map on Application; per-request OntModel wrapping is preserved.

Two ontapi interaction subtleties surfaced by the HTTP test suite, both pinned by the new OntologyClosureCIReproTest:

• ontapi consults GraphRepository.contains() before get() when resolving imports; ScopedGraphRepository.contains() now answers resolvability (attempting the load) instead of cache state, otherwise every bundled-mapped/SPARQL/HTTP import was silently replaced by an empty graph — stripping SPIN constraints from the closure
• ontapi keys imports under their declared ontology IRIs; the doc-URI aliasing loop only touches ids the shared repository actually holds, so a content-addressed upload declaring a foreign ontology IRI no longer triggers an HTTP dereference of that IRI during load

Raw document graphs on the wire, uniformly. The shared repository now only holds raw per-document graphs. ProxyRequestFilter serves closure documents with their raw graphs — asserted triples only, identical to a direct document GET — guarded by isCached so arbitrary external URIs can't trigger repository loading outside the SSRF-validated external-client path. The DESCRIBE fallback remains for terms minted in external namespaces and is now inference-free. Namespace's no-query GET reuses the shared raw cache instead of a per-request createRepository SPARQL round-trip. Invalidation updated in ClearOntology and ValidatingModelProvider.

Also fixed in passing: UninstallPackage no longer reads a materialized closure when a package URI is a loaded app ontology, and admin ontologies importing each other can no longer fold one closure's artifacts into another on the shared system repository.

With the server no longer serving inferred types, LDH-authored blocks carry single-token @typeof again — the client XSL is untouched relative to develop.

Test plan

• Full unit suite passes (92 tests). OntologyImportsCharacterizationTest rewritten to pin: eager closure resolution, zero inference in the union, raw document graphs untouched (isomorphism), promotion not leaking into raw graphs, getOntClass recognition of rdfs:Class-only terms, import-cycle tolerance. OntologyClosureCIReproTest pins the production-shaped closure (real bundled location mappings) and the mismatched-IRI upload import
• http-tests/proxy/GET-proxied-ontology-ns.sh extended: proxied ontology-document hash terms served with no rdf:type rdfs:Resource; same negative assertion on the DESCRIBE fallback
• Full HTTP test suite green in CI
• Browser: View block on the homepage executes its query and renders the table; single-token typeof in the DOM

🤖 Generated with Claude Code