# GraphOntology GraphOntology.com is a visual ontology explorer for agents, organizations, legal systems, value graphs, mission systems, and Web4 semantic infrastructure. Tagline: See your ontology. Trace authority. Understand relationships. Primary package: @graphontology/ontology-graph-explorer at packages/ontology-graph-explorer Public API reference: /package-api v0.1 release candidate checklist: docs/V0_1_RELEASE_CANDIDATE.md Host contract matrix: /api/host-contracts Host contract verifier: npm run verify:host-contracts Browser host verifier: npm run verify:host-browser Host export verifier: npm run verify:host-export Mobile host verifier: npm run verify:host-mobile Edge host verifier: npm run verify:host-edges Relationship mode verifier: npm run verify:mode-coverage Toolbar control verifier: npm run verify:control-interactions Filter control verifier: npm run verify:filter-controls Search control verifier: npm run verify:search-controls Inspector detail verifier: npm run verify:inspector-details Export depth verifier: npm run verify:export-depth Plugin action verifier: npm run verify:plugin-actions Algorithm tool verifier: npm run verify:algorithm-tools Import playground verifier: npm run verify:import-playground Report verifier: npm run verify:reports Embed trial verifier: npm run verify:embed-trial Public contract verifier: npm run verify:public-contract Package consumer verifier: npm run verify:package-consumer Package docs verifier: npm run verify:package-docs Release artifact verifier: npm run verify:release-artifacts Deployment readiness verifier: npm run verify:deployment-readiness Production aftercare verifier: npm run verify:production-aftercare Production aftercare runbook: docs/PRODUCTION_AFTERCARE.md Content integrity verifier: npm run verify:content-integrity Accessibility verifier: npm run verify:accessibility Performance verifier: npm run verify:performance Structured metadata verifier: npm run verify:structured-metadata Supply-chain verifier: npm run verify:supply-chain Stable package exports: ## components - OntologyGraphExplorer - OntologyGraphMiniMap - OntologyGraphPanel ## stateAndRendering - useOntologyGraphState - ontologyToCytoscapeElements - cytoscapeElementsToOntology - createOntologyGraphTheme - defaultOntologyTheme - defaultOntologyLayouts - defaultOntologyStyles ## diagnosticsAndAlgorithms - analyzeOntologyGraph - validateOntologyGraph - findShortestOntologyPath - analyzeOntologyImpact - traceOntologyRelationships - createOntologyAdjacencyMatrix ## adapters - adaptJsonOntology - adaptJsonLdOntology - adaptCytoscapeJson - adaptCsvOntology - adaptRegistryOntology - fetchRegistryOntology - adaptJSOntologySchemas - adaptCanonLinkRelationships - adaptValgrafValueGraph - adaptMissionStackTree - adaptPipeFlowMap - defaultOntologyAdapters - adapterFixtureGraphs ## reportsAndExports - exportOntologyGraph - exportOntologyReportMarkdown - createOntologyReport - renderOntologyReportMarkdown - renderOntologyReportHtml - renderOntologyReportPrintHtml - renderOntologyReportJson ## plugins - createOntologyPluginRegistry - defaultOntologyPlugins - defaultOntologyPluginPermissions ## samples - sampleGraphs Internal package modules: - OntologyGraphSidePanel - OntologyGraphInspectorPanel - OntologyGraphEmptyState Primary routes: - / - /explorer - /ontology-explorer - /examples - /adapters - /api/adapters - /playground - /reports - /docs - /package-api - /embed-trial - /embed - /api/examples - /api/package-api - /api/registry-demo - /api/report-demo - /api/routes - /api/next-cdx - /api/host-contracts - /llms.txt - /sitemap.xml - /robots.txt Verified deep links: - /examples?graph=adapter-canonlink - Adapter fixture selected without colliding with the canonical CanonLink sample graph. - /examples?graph=incentivis - Canonical value and incentive graph selected from the examples catalog. - /examples?mode=canon-relationship-map&nodes=organization%2Clegal%2Cevidence&edges=canon%2Cprovenance - Examples route recreates explorer mode plus node and edge filters without requiring a graph key. - /reports?graph=adapter-canonlink&format=print-html - Report route recreates selected adapter graph and print format from URL state. - /playground?format=registry-api&nodes=registry%2Cschema%2Csystem%2Cevidence%2Clegal&edges=registry%2Cauthority%2Cdependency%2Cprovenance - Playground route recreates adapter format plus node and edge filters from URL state. - /playground?mode=authority-chain&layout=concentric&nodes=agent%2Cregistry%2Cmission&edges=authority%2Cdelegates - Playground route recreates explorer mode, layout, node filters, and edge filters from URL state. - /api/report-demo?graph=adapter-canonlink&format=json - Report API resolves adapter-prefixed graph IDs and emits structured JSON. Recommended next CDX: - v0.1-release-handoff: v0.1 Release Handoff - Goal: Prepare the final v0.1 handoff: capture the passing build and verify-all result, keep local ports healthy, and package the launch notes for external sharing. Readiness: ## v0.1 release candidate freeze - docs/V0_1_RELEASE_CANDIDATE.md defines the launch thesis, freeze rules, route checklist, demo stories, known limits, and release acceptance. - The release posture is now demo quality and adoption readiness, not adding more narrow verifier passes. - The full release check suite covers build, package, browser, contract, accessibility, performance, metadata, supply-chain, visual, and artifact checks. - Canonical v0.1 demo stories cover Web4 authority and provenance, CanonLink agreements, and Valgraf/Incentivis value graphs. - Known limits are explicit: synthetic public examples, private in-repo package, fixture-grade adapters, no hosted graph snapshots, and no public plugin marketplace. ## Explorer package - OntologyGraphExplorer renders from canonical graph props. - Search, filters, modes, layouts, focus, inspector, and exports stay inside the shared package. - Package exports include transforms, diagnostics, algorithms, adapters, plugins, reports, themes, and state hooks. - Host contract verification checks sample, adapter, and playground-derived fixtures against the reusable package primitives. - Host browser verification dispatches generic select/focus events through the explorer root and asserts inspector-visible state. - Host export verification clicks copy/export controls and checks JSON payload shape against visible fixture counts. - Host mobile verification checks compact panel tabs, selected-node inspector state, and export access from contract URLs. - Host edge verification selects relationship targets and checks edge inspector fields plus selected-edge copy. - Relationship mode verification asserts focused and dimmed Cytoscape state for every supported graph mode. - Toolbar control verification changes mode and layout through browser events while preserving focus and visible counts. - Filter control verification toggles node and edge type filters, checks empty states, and verifies reset recovery. - Search control verification types node, domain, tag, and edge-label queries, checks no-result states, and verifies URL q state. - Inspector detail verification selects nodes and edges across host fixtures and asserts relationship lists, raw JSON, plugin state, and copy context. - Export depth verification exercises copy fallback, PNG/SVG/JSON export telemetry, menu compactness, and host onExport delivery. - Plugin action verification exercises permitted toolbar actions, plugin inspector panels, and no-plugin host gating. - Algorithm tool verification exercises shortest path, impact, trace, leaf collapse, no-path, and reset recovery states. - Import playground verification exercises JSON, JSON-LD, Cytoscape JSON, CSV, registry/API, warning, invalid input, selection, filter, and export flows. - Report verification exercises page route state, API formats, adapter graph IDs, copy/download actions, and invalid report input errors. - Embed trial verification exercises host switching, custom inspectors, permission previews, plugin gating, export telemetry, and contract preview updates. - Public contract verification checks route discovery, deep links, host fixtures, examples, reports, package API exports, sitemap, llms.txt, and consumer-facing docs. - Package consumer verification compiles an external TypeScript consumer, runs root-import package APIs, and blocks deep imports of implementation details. - Package documentation verification aligns PUBLIC_API.md, /package-api, /api/package-api, /docs, /llms.txt, usage notes, and internal boundaries. - Release artifact verification checks package metadata, route listings, sitemap, robots, llms.txt, readiness, next-CDX data, and QA artifact directories. - Deployment readiness verification checks canonical metadata, cache headers, security-adjacent headers, local predeploy ports, and domain-facing route behavior. - Production aftercare verification checks post-deploy smoke routes, monitoring signals, rollback procedure, handoff evidence, and verify:production-aftercare wiring. - Public content integrity verification checks route markers, docs copy, examples, reports, readiness, and llms.txt for post-deploy copy drift. - Accessibility verification checks headings, landmarks, accessible names, explorer panels, mobile tabs, forms, reports, readiness, and llms.txt. - Performance budget verification checks response-time budgets, payload-size budgets, cache hints, graph readiness markers, and route-level diagnostics. - Structured metadata verification checks JSON-LD, canonical URLs, OpenGraph, Twitter metadata, sitemap coverage, robots policy, and route semantics. - Supply-chain verification checks package manifests, lockfile parity, registry integrity, dependency justifications, and reusable package import boundaries. - Package boundary verification blocks product-domain report/export defaults from leaking into core runtime files. - The developer API reference documents the package's stable exports and which paths are implementation details. ## Host routes - /explorer provides the public product explorer. - /ontology-explorer provides the JSOntology host route. - /examples preserves canonical sample graphs and adapter fixture output as separate selectable entries. - Verified deep links preserve selected examples, adapter-prefixed graph IDs, report formats, and playground filters. - /embed-trial proves multiple host apps can share the same component without core app assumptions. ## Data ingestion - JSON, JSON-LD, Cytoscape JSON, CSV, and host-app adapters normalize into the canonical graph contract. - Registry/API namespace documents adapt into graph nodes, registration edges, and relationship traces. - Adapter warnings and validation issues are surfaced before graph output is treated as trustworthy. - Sample Web4, JSOntology, CanonLink, Valgraf, Incentivis, MissionStack, CanonDraw, and PipeFlow graphs render without duplication. ## Reports - Markdown, HTML, and structured JSON reports include graph statistics, validation notes, disconnected nodes, cycles, and relationship traces. - Print-optimized HTML reports are available for browser print/PDF workflows. - /reports exposes report generation as a product surface. - Report helpers are exported from the reusable package. ## Public shell - Primary navigation reflects the product workflow: explore, adapt, report, docs, trial, embed. - Sitemap includes product routes. - /api/routes exposes the route contract for external checks and agent-readable inspection. - /api/next-cdx exposes the current recommended next implementation pass. - /api/host-contracts exposes the host contract regression matrix. - /api/examples and /api/package-api expose graph catalogs and stable package exports for downstream consumers. - The host contract matrix now carries fixture URLs and interaction targets for browser-level checks. - Consumer contract verification cross-checks public machine-readable surfaces against live route reachability. - Footer separates product surfaces from reference material. ## Browser visual QA - Dependency-free Chrome DevTools visual verification covers desktop, tablet, and mobile viewports. - Screenshots are captured for home, explorer, adapters, adapter examples, embed trial, filtered playground, reports, and readiness routes. - A narrow mobile viewport is included to catch compact phone overflow and cramped tap targets earlier. - Visual checks catch horizontal overflow, missing page markers, and graph canvas readiness. - Host browser checks open contract URLs, restore URL state, select/focus target nodes, and capture QA screenshots. - Host export checks verify selected-node copy and visible-graph JSON export behavior across sample, adapter, and playground fixtures. - Host mobile checks run the same contract fixtures through a 390px viewport and assert tab reachability without horizontal overflow. - Host edge checks cover sample, adapter, and playground relationships for inspector and copy behavior. - Mode coverage checks exercise overview, neighborhood, authority, delegation, provenance, dependency, registry, canon, and evidence/value maps. - Control interaction checks exercise real mode and layout toolbar selects across public, example, and playground hosts. - Filter interaction checks exercise real left-panel filter checkboxes across public explorer and playground hosts. - Search interaction checks exercise the left-panel search box, slash shortcut, URL q state, and clear recovery. - Inspector detail checks exercise no-selection guidance, node fields, edge fields, raw JSON disclosure, plugin panels, and no-plugin embed hosts. - Export depth checks exercise compact export menus, copy fallback behavior, PNG/SVG/JSON telemetry, and embed host export hooks. - Plugin action checks exercise authority and mission toolbar actions, plugin messages, inspector panels, and no-plugin embed hosts. - Algorithm tool checks exercise shortest path, impact, trace, leaf collapse, no-path messaging, and filter reset recovery. - Import playground checks exercise every adapter format plus warning, invalid input, selection, filter, and export recovery states. - Report checks exercise markdown, HTML, print HTML, JSON, adapter-prefixed graph IDs, route state, copy/download telemetry, and invalid API inputs. - Embed trial checks switch every host contract and assert explorer counts, custom inspector context, no-plugin gating, plugin actions, and host export callbacks. - Public contract checks verify discoverability through /api/routes, /api/host-contracts, /api/examples, /api/package-api, /api/next-cdx, /sitemap.xml, and /llms.txt. ## Release artifacts - Package metadata names graphontology and @graphontology/ontology-graph-explorer consistently. - Route listings, /api/routes, sitemap.xml, robots.txt, llms.txt, readiness, and /api/next-cdx agree on release-facing surfaces. - QA artifact directories contain current browser-backed screenshots for visual, host, edge, mode, control, filter, search, inspector, export, plugin, algorithm, import, report, and embed checks. - The release-artifacts check is included in the full release suite for release handoff automation. ## Deployment domain readiness - Root metadata uses https://graphontology.com as metadataBase, canonical URL, and OpenGraph URL. - Sitemap and robots.txt expose production GraphOntology.com URLs without leaking local development hostnames. - Live page, API, llms.txt, sitemap, robots, and health routes expose expected content types and cache behavior from a configurable base URL. - Security-adjacent headers disable the Next powered-by header and expose content-type, referrer, permissions, and DNS prefetch policies. - Local predeploy ports remain health-checkable verification surfaces. ## Production aftercare - Post-deploy smoke runs against the live URL as part of the full release check suite. - The smoke verifier checks the home page, explorer, readiness, route API, package API, next-CDX API, health endpoint, and llms.txt. - Monitoring guidance tracks uptime, route health, cache freshness, metadata drift, API contract drift, and visual regression artifacts without app-specific analytics assumptions. - Rollback guidance restores the last passing build artifact and reruns production aftercare plus deployment readiness checks before handoff. - docs/PRODUCTION_AFTERCARE.md records smoke, monitoring, rollback, minimum restore checks, and release handoff evidence. ## Public content integrity - verify:content-integrity compares route-contracts.json with /api/routes and live route markers. - Public pages, deep links, readiness, and llms.txt are checked for local development host leaks, stale next-CDX text, and package-name drift. - Examples pages are checked against /api/examples labels and descriptions. - Report JSON titles are checked against the machine-readable examples catalog. - Readiness and llms.txt expose the content integrity verifier for future release handoffs. ## Accessibility and semantic markup - verify:accessibility checks core routes for a main landmark, exactly one h1, and GraphOntology product identity. - The shared explorer exposes accessible names for filters, graph canvas, inspector, toolbar selects, export menu, focus trail, plugin actions, and mobile tabs. - Playground input, adapter actions, report source selection, format controls, copy, and download actions expose accessible names. - Reports, docs, readiness, and API-facing handoff pages preserve semantic structure. - Readiness and llms.txt expose the accessibility verifier for future release handoffs. ## Performance budget and payload - verify:performance checks response-time and payload-size budgets for core pages, APIs, assets, and deep links. - Explorer, examples, playground, reports, readiness, and llms.txt stay within explicit local predeploy budgets. - The performance verifier checks cache hints for static pages, dynamic pages, APIs, sitemap, robots, and llms.txt. - Graph-heavy routes expose readiness markers for explorer nodes/edges, import graph counts, and report payload bytes. - Readiness and llms.txt expose the performance budget verifier for future release handoffs. ## Structured data and search metadata - verify:structured-metadata checks rendered JSON-LD, canonical URLs, OpenGraph, Twitter metadata, sitemap coverage, robots policy, and route labels. - The homepage exposes schema.org WebSite, SoftwareApplication, Dataset, and Organization graph metadata from a shared structured metadata contract. - Core public pages preserve GraphOntology identity, semantic route markers, and main landmarks for crawler-facing inspection. - Sitemap, robots.txt, and llms.txt avoid local host leaks and include production GraphOntology.com URLs. - Readiness and llms.txt expose the structured metadata verifier for future release handoffs. ## Dependency and supply-chain hygiene - verify:supply-chain checks package.json, package-lock.json, dependency classifications, heavy dependency justifications, and verifier wiring. - Lockfile metadata matches the package manifest and blocks local, file, workspace, git, GitHub, loopback, and non-HTTPS registry specifiers. - Runtime dependencies are documented in lib/supply-chain-contract.json with category, usage, and import expectations. - The reusable explorer package can import only approved core runtime dependencies and cannot pull host-only framework or visualization dependencies. - Readiness and llms.txt expose the supply-chain verifier for future release handoffs.