AtomGraph · namedgraph · Aug 26, 2026 · Aug 26, 2026 · Aug 26, 2026 · Aug 26, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,99 @@
+## [6.0.0]
+Bootstrap 2 is gone, and with it the class vocabulary application stylesheets were written against. An app's `ac:stylesheet` points at its own XSLT, which imports the platform's `xsl/bootstrap/2.3.2/layout.xsl` — that import path is unchanged, and the `bs2:` modes it defines are all still there. An override that emits Bootstrap 2 markup therefore still compiles and still runs; it just emits classes no stylesheet backs any more, and renders unstyled with no diagnostic. Hence the major version: the failure gives no signal of its own.
+
+### Migration
+- Legacy Bootstrap buttons (`btn`, `btn-primary`, `btn-large`, …) become the `ldhc-btn` intent/appearance/size vocabulary — `ldhc-btn in-primary ap-solid sz-md`
+- `$ac:langs` and `$ac:lang` stylesheet parameters become the `ac:langs()` and `ac:langs()[1]` functions; an `xsl:with-param` left behind is silently ignored rather than reported
+- `pull-left` and `pull-right` have no replacement — the design system lays out with flex and grid
+- Overrides depending on `bootstrap.js`, jQuery, WYMEditor or the sprite icon layer need rewriting: dropdowns and modals are driven by IXSL templates, icons by the `msi` font, and `rdf:XMLLiteral` editing by the RDFa editor
+- Stylesheets extending the removed vocabulary can be diffed against `ldh-bridge.css`, which carries the primitives LDH still emits
+
+### Added
+- Design system port: the app shell (header, sidebar, footer), content blocks, action bar, breadcrumbs, mode lists, type badges, property lists, pager, modals and forms all render the design system's class vocabulary
+- Vendored design system stylesheets and typefaces, with latin-ext subsets so Latin Extended-A no longer falls back mid-word
+- `ldh-bridge.css` carries the primitives LDH still emits, replacing the Web-Client Bootstrap stylesheet link
+- `ac:langs()` returns the reader's accepted languages, normalised to deduped primary subtags with an `en` floor — one function, an SSR body reading the writer-supplied parameter and a SaxonJS body reading `navigator.languages`
+- `ac:lang-rank()` ranks a value's language against that list, so property values sort by the reader's preference
+- `Content-Language` on HTML responses, negotiated against the languages the UI translation bundle actually ships
+- `Vary: Accept-Language` and language-sensitive entity tags on language-negotiated representations, so a shared cache cannot serve one reader's rendering to another
+- Every rendered literal declares its own language: lang-tagged values carry their tag, untagged values carry `lang=""`, typed non-string values inherit
+- Predicate labels, object links and table cells declare the language their label was chosen in, which may differ from the document's
+- `http-tests/language/`: six scripts covering `Content-Language` by reader and by media type, `Vary`, per-language entity tags, `<html lang>` agreement and per-literal marking
+- `ResponseHeadersFilterTest` covers the response filter's hypermedia — snapshot read-only modes, proxy suppression, the RFC 7089 relations and `Link` folding — alongside the language labelling
+- `BundleLanguagesTest` covers deriving the supported languages from the translation bundle and the RFC 4647 matching behind it
+- Spanish translations completed, so the bundle covers every UI string it claims to
+- View table columns are sortable, keyed off each column's XSD datatype through `ldh:sort-key()`
+- Facet toolbar, three-zone pager, chart controls grid, design-system list and grid modes
+- Block drag-and-drop is payload-typed with an app MIME marker, with a single moving drop marker
+- Copy-URI button reaches every block type through a context-free `ldh:CopyUriButton` mode
+- Empty blocks and empty chart result sets say so through the design system's block-state component
+- `ldh:date-time()`, `ldh:datatype-family()`, `ldh:css-token()` and `ldh:view-cache()` replace logic that had been written out at every call site
+- Package ontologies are declared as `owl:imports` instead of grafted, with an imports characterization test
+- `ldh packages list`, `ldh packages add` and `ldh packages remove` give the CLI the package management the settings modal has: the catalog read through the Linked Data proxy with the imported packages marked, and the `ldh:import` declaration written through `PATCH /settings`
+- `ldh get` reaches a versioned document's RFC 7089 Memento roles through mutually exclusive `--timemap`, `--version <sha>` and `--timegate` options, the last taking a `--datetime` in RFC 1123 or ISO 8601 and printing the negotiated version's URI as its only output
+
+### Changed
+- **BREAKING**: `ldh` commands regroup by verb, dropping the `bin/` directory mirror: the hyphenated leaves split into `create`, `add` and `remove` groups (`ldh create item`, `ldh add view`, `ldh remove block`), the `imports`, `content`, `admin acl` and `admin ontologies` groups dissolve into them (`ldh import rdf`, `ldh add object-block`, `ldh admin create group`, `ldh admin add class`), `import` carries the composite workflows — `rdf`, `csv` and `admin import ontology` — apart from the atomic `add rdf-import`/`add csv-import`, and `admin acl add-agent-to-group` shortens to `ldh admin add agent`; the script → command table in `cli/README.md` maps every name
+- `<html lang>` is taken from the `Content-Language` the response carries, so the header and the document agree by construction rather than by two computations staying in step
+- The language a page reports is the first accepted language the UI bundle has, not the reader's top preference — asking for German no longer puts `lang="de"` on a page written entirely in English
+- Published language tags are the shortest the bundle justifies (`en`, not `en-US`), keeping a region subtag only where the bundle distinguishes two variants of one language
+- Supported UI languages are derived from `translations.rdf` rather than declared beside it in `web.xml`
+- Property lists and table cells order their values by the reader's language instead of hiding the ones that do not match, so a reader whose language the data lacks still sees every value
+- Language negotiation moved out of `Application` into `LanguageNegotiator`
+- Object metadata merges on the RDF term rather than the lexical form, so a tagged literal is no longer collapsed into an untagged twin
+- Document responses pass the accepted languages into entity tag computation, so tags stop colliding across languages
+- Legacy Bootstrap buttons move to the `ldhc-btn` intent/appearance/size vocabulary
+- Block link columns route through the `ldh-drawer`; backlinks and copy-URI split into two placements chosen by what a click does
+- Charts draw with resolved design tokens; the HTML Table chart is skinned in CSS and fills the block width
+- Client-side HTTP moves to promise chains, retiring the legacy `ixsl:schedule-action` `http-request` form
+- The busy cursor becomes a promise concern rather than 53 copies of the same `ixsl:set-style`
+- Dropdown dismissal moves into IXSL, and the `DOMContentLoaded` block retires into an `ldh:CloseDropdown` mode
+- Subject-control change handlers move from JavaScript into `ixsl:onchange` templates
+- `ac:uuid()` generates through the platform, and the seven call sites that went around it stop doing so
+- One navigation leaves one history entry
+- CSR failures render through the design system's block states instead of `div.alert.alert-block`
+- The RDFa editor's XMLLiteral canonicalization runs as a single `cm:canonical` pass in `ldh:FormPreSubmit`
+- RDFa editor template names and modes move into their module namespaces
+- Document-level map and graph modes fill the space between action bar and footer
+- The map marker info window is the card itself, fitted into the map viewport and panning the least it can to reveal itself
+- Editing forms already open on the page reconcile with the constructor after a constructor save
+- The edit pencil on a resource description appears only under `acl:Write`
+- `http-tests` assertions read captured responses from a here-string instead of piping `curl` into `grep -q`
+- Web-Client dependency bumped to 5.0.4
+
+### Removed
+- Bootstrap 2: the framework stylesheets, `bootstrap.js`, jQuery, WYMEditor, the sprite icon layer and the `pull-left`/`pull-right` tokens
+- The Bootstrap 2 class vocabulary that no stylesheet backed
+- `$ac:langs` and `$ac:lang` parameters, replaced by `ac:langs()` and `ac:langs()[1]` at 36 call sites
+- `ldt:lang`, which nothing declared, read or wrote
+- `DEBUG:` output from `http-tests`, with the diagnostic-only `gh api` and `curl` calls and the helper that fed them
+
+### Fixed
+- `curl ... | grep -q` was a race under `pipefail`: `grep -q` closes the pipe on its first match and `curl` dies with 141, failing the pipeline even though the assertion passed
+- View sort's numeric keys yield an empty sequence rather than `NaN` for non-numeric values
+- `DataTransfer.types` marshals to an XDM array under SaxonJS, so payload guards compare via `array:flatten`
+- The content-body drag-and-drop guards spell the child step `./div`, since after `and` a bare `div` parses as the division operator
+- Reading an `ixsl:call` result of two numbers as an XDM array hung the renderer with no diagnostic; it arrives as a sequence of doubles
+- Nested cards no longer draw doubled borders, and `dl` column placement is corrected
+- The DataTable converters recognise the derived numeric and dateTime types
+- The violation renderer fails on an absent form again, rather than falling back to the rejected rendering
+- Concurrent writes to a versioned application silently lost commits: the commit chain was keyed by file path, while the GitHub Contents API takes its optimistic lock on the branch head — two documents committing at once conflicted and the loser was dropped with only a log line. Commits to one branch now share a single chain
+- A conflicting write is retried with a re-read blob SHA (`MAX_CONFLICT_RETRIES`) instead of being abandoned, so a writer outside this JVM no longer costs a version
+- A rate-limited commit retried with an empty request body: the builder had already been spent by the first attempt, and `JsonObjectBuilder` yields its object only once
+- `release.sh` published to Maven Central before its `git checkout master`, so a failed checkout left 5.10.0 on Central with no tag: the switches are now proven possible first, and once published the trap prints recovery steps instead of deleting the tag that records what was published
+- `release.sh`'s clean check could not see `skip-worktree`/`assume-unchanged` files — git reports them as matching the index whatever is on disk, while a branch switch refuses to overwrite them; they are now warned about at startup and checked precisely before publishing
+- `release.sh` derived the release and snapshot commits positionally (`git log -2`), which breaks as soon as anything else commits in between; they are derived from an anchor taken before `release:prepare`
+- A drop-down flips to whichever side of its trigger has room, on both axes, so the action bar's left-zone menu no longer opens off the viewport edge
+- The language tag renders as a pill wherever a value is laid out rather than only inside a property list, so a table cell's tag stops running into the value it annotates
+- A view block derived from the ontology keeps its URI across reloads: the fragment is hashed from the host resource and the view instead of drawn from `ac:uuid()`, and a fragment scroll waits for the injected blocks to hydrate
+- An injected view block's subject keeps the hash that makes it a fragment
+- A `pre` in an `ldh:XHTML` block takes the recessed code surface the inline chip and error listing already share, instead of running on the bare page background
+- The property-list grid keys on the wrapped `dt`/`dd` shape, leaving prose `dl`s to their own layout
+- An error page renders without the action bar, which had nothing left to act on
+
+### Known limitations
+- The in-place editor edits tab-group content but cannot create tab groups: while a region is edited every tab panel is shown stacked and editable, and the markup round-trips intact, but there is no gesture that inserts a new tab group — that markup is authored via the HTTP API (e.g. `ldh put`) for now
+
 ## [5.10.0] - 2026-08-30
 ### Added
 - `ldh` command line interface (`cli/`): a standalone picocli/Jena port of the `bin/` HTTP API scripts — one command per script with the same option names, `bin/` subdirectories as nested subcommand groups, PKCS12 WebID keystore authentication, env-var defaults and a shaded executable jar

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -148,15 +148,16 @@ The SPARQL endpoint forwarding chain ensures ContentMode blocks (charts, maps) q
 ## CLI Tools
 
 `ldh` (in `cli/`) is the command line interface for the HTTP API — one command per `bin/` script,
-same option names, `bin/` subdirectories as nested subcommand groups. Built with Maven on Java 21
+same option names, grouped by verb (`create`, `add`, `remove`, `import`) plus the `packages`
+family and the `admin` scope. Built with Maven on Java 21
 into a shaded `cli/target/ldh.jar` that `cli/bin/ldh` launches. See `cli/README.md` for the full
 script → command table and the behavioral differences from the scripts.
 
 ```bash
 cd cli && mvn package && export PATH="$PWD/bin:$PATH"
 
-ldh create-container --parent "$LDH_BASE" --title "Some" --slug some
-ldh admin acl add-agent-to-group --agent "$AGENT_URI" "${ADMIN_BASE}acl/groups/writers/"
+ldh create container --parent "$LDH_BASE" --title "Some" --slug some
+ldh admin add agent --agent "$AGENT_URI" "${ADMIN_BASE}acl/groups/writers/"
 ```
 
 `cli/` is not a module of the platform reactor (the root pom is the webapp artifact, so it cannot
@@ -165,11 +166,18 @@ around both release bumps, and `make cli-version` re-aligns it if it drifts.
 
 `LDH_CERT_FILE`, `LDH_CERT_PASSWORD`, `LDH_BASE` and `LDH_PROXY` supply defaults for `-f`, `-p`,
 `-b` and `--proxy`. Commands that create or append to a document print its URL as the only line on
-stdout (diagnostics go to stderr), so `item=$(ldh create-item ...)` works; exit codes are `0`
+stdout (diagnostics go to stderr), so `item=$(ldh create item ...)` works; exit codes are `0`
 success, `1` HTTP or runtime failure, `2` usage error.
 
-Packages have no command — an application imports one with a single `<app> ldh:import <package>`
-triple, so `ldh patch` on the application's `settings` document is the whole interface.
+Packages are declarative: an application imports one with a single `<app> ldh:import <package>`
+triple in its settings, and `ldh packages list`, `ldh packages add` and
+`ldh packages remove` write that triple through `PATCH /settings`. `packages list` reads the
+registry catalog through the Linked Data proxy, marking the imported ones.
+
+`ldh get` also addresses the RFC 7089 Memento roles of a versioned document, as mutually exclusive
+options: `--timemap` (version history), `--version <sha>` (a historical version) and `--timegate`
+with an optional `--datetime` (RFC 1123 or ISO 8601), which prints the selected version's URI as the
+only line on stdout so it pipes into another `ldh get`.
 
 The `bin/` HTTP API scripts are **deprecated** — `ldh` replaces them, and http-tests build their
 fixtures with it. Authentication moves from the `.pem` the scripts feed `curl -E` to the PKCS12

diff --git a/README.md b/README.md
@@ -297,11 +297,11 @@ export LDH_CERT_FILE=./ssl/owner/keystore.p12
 export LDH_CERT_PASSWORD=$(cat secrets/owner_cert_password.txt)
 export LDH_BASE=https://localhost:4443/
 
-ldh create-container --parent "$LDH_BASE" --title "Concepts" --slug concepts
-ldh create-item --container "${LDH_BASE}concepts/" --title "Example" --slug example
+ldh create container --parent "$LDH_BASE" --title "Concepts" --slug concepts
+ldh create item --container "${LDH_BASE}concepts/" --title "Example" --slug example
 ```
 
-Commands that create or append to a document print its URL as the only line on stdout, so they compose in shell pipelines: `item=$(ldh create-item ...)`. The `bin/` subdirectories became nested subcommand groups — `ldh admin acl create-group`, `ldh content add-xhtml-block`, `ldh imports import-csv`. See [`cli/README.md`](https://github.com/AtomGraph/LinkedDataHub/blob/master/cli/README.md) for the full command table and the differences from the scripts.
+Commands that create or append to a document print its URL as the only line on stdout, so they compose in shell pipelines: `item=$(ldh create item ...)`. Commands group by verb — `ldh create container`, `ldh add xhtml-block`, `ldh import csv`, `ldh admin create group` — with `import` holding the workflows that compose the atomic commands. See [`cli/README.md`](https://github.com/AtomGraph/LinkedDataHub/blob/master/cli/README.md) for the full command table and the differences from the scripts.
 
 _:warning: The `bin/` HTTP API scripts that `ldh` replaces are **deprecated**. The certificate and WebID tooling (`webid-keygen.sh`, `webid-keygen-pem.sh`, `webid-uri.sh`, `webid-modulus.sh`, `server-cert-gen.sh`) talks to no API and stays in `bin/`._