feat(spec): retire the six branded identifier schemas of shared/branded-types.zod.ts

ADR-0049 enforce-or-remove, maintainer ruling 2026-09-01 (director batch C,
verbatim approval: retire; binding weighed and not adopted). No schema in
either repo ever composed a brand, so the promised compile-time safety was
unobtainable, while the surfaces the brands were named for are validated by
inline regexes or bare SnakeCaseIdentifierSchema — those five real
validators are the contract of record and are untouched here. Removes the
module whole (6 schemas + 12 type exports), registers the six shared/* defs
under RETIRED_DEFS_BY_MAJOR 18 plus the D3 semantic entry
branded-identifier-schemas-retired, deletes the six manifest keys behind the
#4725 gate, and regenerates api-surface / declaration-map / export-origins /
reference docs. SnakeCaseIdentifierSchema and SystemIdentifierSchema stay
published and unchanged.

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Mciyv38maJ6HYVMiaM26T1

Author: claude

content/docs/references/index.mdx

@@ -1,6 +1,6 @@
 ---
 title: Protocol Reference
-description: Every schema published by @objectstack/spec — 1598 schemas across 14 protocol modules
+description: Every schema published by @objectstack/spec — 1592 schemas across 14 protocol modules
 ---
 
 {/* ⚠️  AUTO-GENERATED — DO NOT EDIT. Run build-docs.ts to regenerate. Hand-written docs live in the module folders under content/docs/. */}
@@ -29,11 +29,11 @@ counts are sums of the rows they head. Regenerate with
 | [Kernel Protocol](/docs/references/kernel) | 30 | 163 | Plugin lifecycle and manifests, capabilities and security, metadata loading, service registry. |
 | [QA Protocol](/docs/references/qa) | 1 | 8 | Declarative test suites — scenarios, steps, actions and assertions. |
 | [Security Protocol](/docs/references/security) | 5 | 29 | Permission sets, row-level security, sharing rules, tenancy posture. |
-| [Shared Protocol](/docs/references/shared) | 8 | 32 | Primitives used across every protocol — identifiers, HTTP, expressions, error maps, enums. |
+| [Shared Protocol](/docs/references/shared) | 7 | 26 | Primitives used across every protocol — identifiers, HTTP, expressions, error maps, enums. |
 | [Studio Protocol](/docs/references/studio) | 3 | 35 | Studio designer metadata — the authoring surfaces for the protocols above. |
 | [System Protocol](/docs/references/system) | 36 | 291 | The runtime environment — logging, jobs, cache, metrics, notifications, i18n and compliance. |
 | [UI Protocol](/docs/references/ui) | 16 | 153 | Apps, pages, views, dashboards, reports, actions and themes — the ObjectUI layer. |
-| **Total** | **200** | **1598** | 14 protocol modules |
+| **Total** | **199** | **1592** | 14 protocol modules |
 
 ---
 
@@ -286,13 +286,12 @@ Permission sets, row-level security, sharing rules, tenancy posture.
 
 ## Shared Protocol
 
-**Source:** `packages/spec/src/shared/` · **Import:** `@objectstack/spec/shared` · **8 pages, 32 schemas**
+**Source:** `packages/spec/src/shared/` · **Import:** `@objectstack/spec/shared` · **7 pages, 26 schemas**
 
 Primitives used across every protocol — identifiers, HTTP, expressions, error maps, enums.
 
 | File | Schemas |
 | :--- | :--- |
-| [`branded-types.zod.ts`](/docs/references/shared/branded-types) | `AppName`, `FieldName`, `FlowName`, `ObjectName`, `RoleName`, `ViewName` |
 | [`enums.zod.ts`](/docs/references/shared/enums) | `IsolationLevelEnum`, `MutationEventEnum`, `SortDirectionEnum`, `SortItem` |
 | [`expression.zod.ts`](/docs/references/shared/expression) | `CronExpressionInput`, `Expression`, `ExpressionDialect`, `ExpressionInput`, `ExpressionMeta`, `Predicate`, `PredicateInput`, `TemplateExpressionInput` |
 | [`http.zod.ts`](/docs/references/shared/http) | `CorsConfig`, `HttpMethod`, `HttpMethodSubset`, `HttpRequest`, `RateLimitConfig`, `StaticMount` |

content/docs/references/shared/branded-types.mdx

@@ -6,7 +6,6 @@ description: Complete reference for all shared protocol schemas
 This section contains all protocol schemas for the shared layer of ObjectStack.
 
 <Cards>
-  <Card href="/docs/references/shared/branded-types" title="Branded Types" description="Source: packages/spec/src/shared/branded-types.zod.ts" />
   <Card href="/docs/references/shared/enums" title="Enums" description="Source: packages/spec/src/shared/enums.zod.ts" />
   <Card href="/docs/references/shared/expression" title="Expression" description="Source: packages/spec/src/shared/expression.zod.ts" />
   <Card href="/docs/references/shared/http" title="Http" description="Source: packages/spec/src/shared/http.zod.ts" />

content/docs/references/shared/index.mdx

@@ -1,7 +1,6 @@
 {
   "title": "Shared Protocol",
   "pages": [
-    "branded-types",
     "enums",
     "expression",
     "http",

content/docs/references/shared/meta.json

@@ -2,9 +2,6 @@
   "description": "Every exported `name (kind)` of one published entry point of @objectstack/spec — the breadth half of the ADR-0059 backward-compatibility gate. Sharded by entry point (#5837) so two PRs touching different entry points never share a file. Reads the BUILT dist/*.d.ts: regenerate with `pnpm --filter @objectstack/spec gen:api-surface` after a real build.",
   "entry": "./shared",
   "exports": [
-    "AppName (type)",
-    "AppNameParsed (type)",
-    "AppNameSchema (const)",
     "ApplyProtectionContext (interface)",
     "BaseMetadataRecord (type)",
     "BaseMetadataRecordSchema (const)",
@@ -31,12 +28,6 @@
     "F (const)",
     "FieldMapping (type)",
     "FieldMappingSchema (const)",
-    "FieldName (type)",
-    "FieldNameParsed (type)",
-    "FieldNameSchema (const)",
-    "FlowName (type)",
-    "FlowNameParsed (type)",
-    "FlowNameSchema (const)",
     "HttpMethod (type)",
     "HttpMethodSubset (type)",
     "HttpMethodSubsetSchema (const)",
@@ -59,9 +50,6 @@
     "MutationEvent (type)",
     "MutationEventEnum (const)",
     "NormalizeStackInputOptions (interface)",
-    "ObjectName (type)",
-    "ObjectNameParsed (type)",
-    "ObjectNameSchema (const)",
     "ObjectStackRawIssue (type)",
     "P (const)",
     "PLURAL_TO_SINGULAR (const)",
@@ -76,9 +64,6 @@
     "RateLimitConfigParsed (type)",
     "RateLimitConfigSchema (const)",
     "ResilientFetchOptions (interface)",
-    "RoleName (type)",
-    "RoleNameParsed (type)",
-    "RoleNameSchema (const)",
     "SINGULAR_TO_PLURAL (const)",
     "SchemaDiffEntry (interface)",
     "SchemaDiffEntryKind (type)",
@@ -97,9 +82,6 @@
     "TemplateExpressionInputSchema (const)",
     "VISIBILITY_ALIAS_KEYS (const)",
     "VISIBILITY_STRICT_OPTIONS (const)",
-    "ViewName (type)",
-    "ViewNameParsed (type)",
-    "ViewNameSchema (const)",
     "applyProtection (function)",
     "canonicalMetaUrlType (function)",
     "cel (function)",

packages/spec/api-surface/shared.json

@@ -2,8 +2,6 @@
   "description": "TS declaration name → spec registry name (def key) for the schemas @objectstack/spec publishes: entries['ObjectSchemaBase'] === 'data/Object'. Composed from json-schema.manifest/ (the def keys), export-origins/ (which declaration each export resolves to), and a syntactic unwinding of wrapper initializers that recovers module-private base declarations (the ObjectSchemaBase case — see scripts/build-declaration-map.ts). A name that maps to two different def keys is DROPPED into `collisions` rather than guessed, so a lookup miss means \"not known to be an authorable container\". Consumers hold a changed line’s enclosing declaration name and ask which authorable container it declares (docs-audit anchor qualification is the funding one). Generated — never hand-edited; regenerate with `pnpm --filter @objectstack/spec gen:declaration-map` and read the diff.",
   "category": "shared",
   "entries": {
-    "AppName": "shared/AppName",
-    "AppNameSchema": "shared/AppName",
     "BaseMetadataRecord": "shared/BaseMetadataRecord",
     "BaseMetadataRecordSchema": "shared/BaseMetadataRecord",
     "CorsConfig": "shared/CorsConfig",
@@ -21,10 +19,6 @@
     "ExpressionSchema": "shared/Expression",
     "FieldMapping": "shared/FieldMapping",
     "FieldMappingSchema": "shared/FieldMapping",
-    "FieldName": "shared/FieldName",
-    "FieldNameSchema": "shared/FieldName",
-    "FlowName": "shared/FlowName",
-    "FlowNameSchema": "shared/FlowName",
     "HttpMethod": "shared/HttpMethod",
     "HttpMethodSubset": "shared/HttpMethodSubset",
     "HttpMethodSubsetSchema": "shared/HttpMethodSubset",
@@ -36,8 +30,6 @@
     "MetadataItemName": "shared/MetadataItemName",
     "MetadataItemNameSchema": "shared/MetadataItemName",
     "MutationEventEnum": "shared/MutationEventEnum",
-    "ObjectName": "shared/ObjectName",
-    "ObjectNameSchema": "shared/ObjectName",
     "Predicate": "shared/Predicate",
     "PredicateInput": "shared/PredicateInput",
     "PredicateInputSchema": "shared/PredicateInput",
@@ -46,8 +38,6 @@
     "ProtectionSchema": "shared/Protection",
     "RateLimitConfig": "shared/RateLimitConfig",
     "RateLimitConfigSchema": "shared/RateLimitConfig",
-    "RoleName": "shared/RoleName",
-    "RoleNameSchema": "shared/RoleName",
     "SnakeCaseIdentifier": "shared/SnakeCaseIdentifier",
     "SnakeCaseIdentifierSchema": "shared/SnakeCaseIdentifier",
     "SortDirectionEnum": "shared/SortDirectionEnum",
@@ -58,9 +48,7 @@
     "SystemIdentifier": "shared/SystemIdentifier",
     "SystemIdentifierSchema": "shared/SystemIdentifier",
     "TemplateExpressionInput": "shared/TemplateExpressionInput",
-    "TemplateExpressionInputSchema": "shared/TemplateExpressionInput",
-    "ViewName": "shared/ViewName",
-    "ViewNameSchema": "shared/ViewName"
+    "TemplateExpressionInputSchema": "shared/TemplateExpressionInput"
   },
   "collisions": []
 }

packages/spec/declaration-map/shared.json

@@ -2,9 +2,6 @@
   "description": "Which SOURCE DECLARATION each name exported by one public entry point of @objectstack/spec resolves to, after its alias chain is unwound: `<src path>#<declared name> (<kind>)`. Two exports share an origin string iff they are the same declaration — so equal origins across two entries are a harmless re-export, and different origins under one name are the #4411 dual-source trap. Generated from src/ (no build needed) and read by the export-surface pin tests, which compare against it instead of each building their own ts.createProgram — that was ~55s of compilation per CI lap and a non-deterministic timeout that ejected unrelated PRs from the merge queue (#4796). Sharded by entry point (#5837) so two retirement PRs never share a file. Carries NO line numbers: the pins asserted the line as `\\d+`, and recording it would rewrite this artifact on every edit that shifts a line in any .zod.ts. Regenerate with `pnpm --filter @objectstack/spec gen:export-origins` and read the diff.",
   "entry": "./shared",
   "exports": {
-    "AppName": "src/shared/branded-types.zod.ts#AppName (type)",
-    "AppNameParsed": "src/shared/branded-types.zod.ts#AppNameParsed (type)",
-    "AppNameSchema": "src/shared/branded-types.zod.ts#AppNameSchema (const)",
     "ApplyProtectionContext": "src/shared/protection.zod.ts#ApplyProtectionContext (interface)",
     "BaseMetadataRecord": "src/shared/metadata-types.zod.ts#BaseMetadataRecord (type)",
     "BaseMetadataRecordSchema": "src/shared/metadata-types.zod.ts#BaseMetadataRecordSchema (const)",
@@ -31,12 +28,6 @@
     "F": "src/shared/expression.zod.ts#F (const)",
     "FieldMapping": "src/shared/mapping.zod.ts#FieldMapping (type)",
     "FieldMappingSchema": "src/shared/mapping.zod.ts#FieldMappingSchema (const)",
-    "FieldName": "src/shared/branded-types.zod.ts#FieldName (type)",
-    "FieldNameParsed": "src/shared/branded-types.zod.ts#FieldNameParsed (type)",
-    "FieldNameSchema": "src/shared/branded-types.zod.ts#FieldNameSchema (const)",
-    "FlowName": "src/shared/branded-types.zod.ts#FlowName (type)",
-    "FlowNameParsed": "src/shared/branded-types.zod.ts#FlowNameParsed (type)",
-    "FlowNameSchema": "src/shared/branded-types.zod.ts#FlowNameSchema (const)",
     "HttpMethod": "src/shared/http.zod.ts#HttpMethod (type)",
     "HttpMethodSubset": "src/shared/http.zod.ts#HttpMethodSubset (type)",
     "HttpMethodSubsetSchema": "src/shared/http.zod.ts#HttpMethodSubsetSchema (const)",
@@ -59,9 +50,6 @@
     "MutationEvent": "src/shared/enums.zod.ts#MutationEvent (type)",
     "MutationEventEnum": "src/shared/enums.zod.ts#MutationEventEnum (const)",
     "NormalizeStackInputOptions": "src/shared/metadata-collection.zod.ts#NormalizeStackInputOptions (interface)",
-    "ObjectName": "src/shared/branded-types.zod.ts#ObjectName (type)",
-    "ObjectNameParsed": "src/shared/branded-types.zod.ts#ObjectNameParsed (type)",
-    "ObjectNameSchema": "src/shared/branded-types.zod.ts#ObjectNameSchema (const)",
     "ObjectStackRawIssue": "src/shared/error-map.zod.ts#ObjectStackRawIssue (type)",
     "P": "src/shared/expression.zod.ts#P (const)",
     "PLURAL_TO_SINGULAR": "src/meta-spelling/manifest-collection-spelling.ts#PLURAL_TO_SINGULAR (const)",
@@ -76,9 +64,6 @@
     "RateLimitConfigParsed": "src/shared/http.zod.ts#RateLimitConfigParsed (type)",
     "RateLimitConfigSchema": "src/shared/http.zod.ts#RateLimitConfigSchema (const)",
     "ResilientFetchOptions": "src/shared/resilient-fetch.ts#ResilientFetchOptions (interface)",
-    "RoleName": "src/shared/branded-types.zod.ts#RoleName (type)",
-    "RoleNameParsed": "src/shared/branded-types.zod.ts#RoleNameParsed (type)",
-    "RoleNameSchema": "src/shared/branded-types.zod.ts#RoleNameSchema (const)",
     "SINGULAR_TO_PLURAL": "src/meta-spelling/manifest-collection-spelling.ts#SINGULAR_TO_PLURAL (const)",
     "SchemaDiffEntry": "src/shared/external-errors.ts#SchemaDiffEntry (interface)",
     "SchemaDiffEntryKind": "src/shared/external-errors.ts#SchemaDiffEntryKind (type)",
@@ -97,9 +82,6 @@
     "TemplateExpressionInputSchema": "src/shared/expression.zod.ts#TemplateExpressionInputSchema (const)",
     "VISIBILITY_ALIAS_KEYS": "src/shared/visibility.ts#VISIBILITY_ALIAS_KEYS (const)",
     "VISIBILITY_STRICT_OPTIONS": "src/shared/visibility.ts#VISIBILITY_STRICT_OPTIONS (const)",
-    "ViewName": "src/shared/branded-types.zod.ts#ViewName (type)",
-    "ViewNameParsed": "src/shared/branded-types.zod.ts#ViewNameParsed (type)",
-    "ViewNameSchema": "src/shared/branded-types.zod.ts#ViewNameSchema (const)",
     "applyProtection": "src/shared/protection.zod.ts#applyProtection (function)",
     "canonicalMetaUrlType": "src/meta-spelling/metadata-url-spelling.ts#canonicalMetaUrlType (function)",
     "cel": "src/shared/expression.zod.ts#cel (function)",

packages/spec/export-origins/shared.json

@@ -2,7 +2,6 @@
   "description": "Ratchet manifest of every JSON Schema emitted by scripts/build-schemas.ts for one category. Sharded by category (#5837); the gate reads the whole json-schema.manifest/ directory as ONE set. Auto-appended when new schemas are added (commit the change). A listed schema that a build no longer emits fails gen:schema. DELETING a key is gated too (#4725): the removal is measured against this directory at the merge base with origin/main — which the commit under test cannot rewrite — and every def that leaves the published set must be declared in RETIRED_DEFS_BY_MAJOR (src/migrations/registry.ts), or in RENAMED_DEFS (scripts/lib/renamed-defs.ts) when it is a rename rather than a removal. See #2978, #4725.",
   "category": "shared",
   "schemas": [
-    "shared/AppName",
     "shared/BaseMetadataRecord",
     "shared/CorsConfig",
     "shared/CronExpressionInput",
@@ -12,27 +11,22 @@
     "shared/ExpressionInput",
     "shared/ExpressionMeta",
     "shared/FieldMapping",
-    "shared/FieldName",
-    "shared/FlowName",
     "shared/HttpMethod",
     "shared/HttpMethodSubset",
     "shared/HttpRequest",
     "shared/IsolationLevelEnum",
     "shared/MetadataFormat",
     "shared/MetadataItemName",
     "shared/MutationEventEnum",
-    "shared/ObjectName",
     "shared/Predicate",
     "shared/PredicateInput",
     "shared/Protection",
     "shared/RateLimitConfig",
-    "shared/RoleName",
     "shared/SnakeCaseIdentifier",
     "shared/SortDirectionEnum",
     "shared/SortItem",
     "shared/StaticMount",
     "shared/SystemIdentifier",
-    "shared/TemplateExpressionInput",
-    "shared/ViewName"
+    "shared/TemplateExpressionInput"
   ]
 }

packages/spec/json-schema.manifest/shared.json

@@ -562,7 +562,7 @@ export function renderSchemaSection(schemaName: string, schema: any, ctx: Sectio
     //
     // ONE LINE, and it is `formatType`'s rendering, not a second one. That is
     // what every property row on the page already prints for the same node, so
-    // `ObjectName`'s own section and a property typed `ObjectName` cannot
+    // `SystemIdentifier`'s own section and a property typed `SystemIdentifier` cannot
     // disagree about what it is. It is also why the line does NOT spell
     // `pattern` / `minLength` / `minimum`: this renderer has never printed a
     // constraint in any position, and inventing constraint prose here alone

packages/spec/scripts/lib/schema-section.ts

@@ -0,0 +1,12 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+// #13612 — ADR-0049 enforce-or-remove (maintainer ruling 2026-09-01, director
+// batch C: retire; binding was weighed and not adopted). One of the six
+// branded identifier schemas of `shared/branded-types.zod.ts`, removed whole
+// with the module. No schema in either repo ever composed `AppNameSchema`,
+// so the promised brand safety was unobtainable. The real app-name contract
+// is the bare `SnakeCaseIdentifierSchema` at `ui/app.zod.ts` — untouched by
+// this retirement. No tombstone and no D2 conversion (no authored document
+// ever embedded a branded value); this table plus the D3 semantic entry
+// `branded-identifier-schemas-retired` are the declaration.
+export const entry = 'shared/AppName';