spec: retarget the four remaining "v11" datings of the #3290 session-alias removal to v16 (.describe() strings + migration rationale)

[os-zhuang]

Split out of #9872 (its delivering PR #9990 fixed the 20 comment-text sites; these four sit on spec runtime-data surfaces the ruling there forbade touching). Provenance: os-dev report on #9872, 2026-08-19; residue re-verified on origin/main b1457eeca at triage time 2026-08-20.

The #3290 removal of the ctx.session.tenantId alias shipped in v16 (the only release page citing #3290 is content/docs/releases/v16.mdx; its 16.0.0 upgrade checklist carries the rename step). Four spec-package sites still date it "v11":

• packages/spec/src/ui/action-params.zod.ts:376 — .describe() string: "on the v11 session-alias removal path (Unify the developer-facing org identifier: hooks expose session.tenantId while RLS/seed/columns use organizationId (add organizationId as the blessed name) #3280 deprecate → Remove the deprecated hook/action ctx.session.tenantId alias in the next major (converge on organizationId) #3290 remove …)"
• packages/spec/src/ui/action-params.zod.ts:409 — .describe() string: "removal follows the v11 session-alias removal path"
• packages/spec/src/migrations/registry.ts:1555 — migration rationale prose: "the v11 session-alias removal already walked (Unify the developer-facing org identifier: hooks expose session.tenantId while RLS/seed/columns use organizationId (add organizationId as the blessed name) #3280 deprecated → Remove the deprecated hook/action ctx.session.tenantId alias in the next major (converge on organizationId) #3290 removed)"
• packages/spec/src/migrations/entries/semantic/17.action-session-roles-to-positions.ts:23 — same sentence

Notes for the dispatching seat (spec lane):

• The .describe() strings are runtime data that regenerate content/docs/references/ui/action-params.mdx (marked AUTO-GENERATED — regenerate with the repo tooling, never hand-edit) and flow into spec-changes.json / docs/protocol-upgrade-guide.md:317. Regenerate wholesale, don't patch outputs.
• Text-only provenance correction: no schema shape, acceptance, or public-surface change is in scope — expected Clause-②: no. If implementation finds otherwise, stop and report a fork.
• Do NOT sweep other "v11" tokens: two sites date different removals to v11 correctly (content/docs/kernel/contracts/metadata-service.mdx:311, docs/audits/2026-07-security-props-liveness-recheck.md:26), objectui#3290 is a different repo's issue, and CHANGELOG entries are historical records — all verified out-of-population under [finding] ~10 comments date the #3290 session.tenantId removal to "v11", but it shipped in v16 — and there is no v11 release page at all #9872.
• content/docs/releases/** stays untouched (release notes are already correct and are never edited in a code PR).

[qq9340100]

Claim: PM loop round 2
Session: session_016gcKVsiywU9CcS96S5t9qD
Branch: claude/issue-10079-v11-to-v16-datings
Worktree: objectstack-issue-10079
Domain: domain:spec
File surface: packages/spec/src/ui/action-params.zod.ts (L376/L409) · packages/spec/src/migrations/registry.ts (L1555) · packages/spec/src/migrations/entries/semantic/17.action-session-roles-to-positions.ts (L23) · regenerated outputs via repo tooling (content/docs/references/ui/action-params.mdx, spec-changes.json flow) — all four v11 strings re-verified today on origin/main (stop on breach; explain in the report)
Container & model: S mechanical (4 named sites, exact strings, closed population — the card itself fences the out-of-population v11 tokens), mode:subagent, model: sonnet — dispatch-gates --tier: no path-derived mandate; clause-② suspect surface flagged (hint)
Clause-②: no
Serial constraints cleared: no in-flight claim or in-queue PR touches these files. ⚠️ migrations/registry.ts carries the #10030 eslint parser-stack flake (same-content red/green flip) — if the eslint job reds on it, rerun ONCE after the whole run completes. Landing note: shares the regen-artifact relay with #10053's PR at the queue (one at a time); dev-side no constraint. ⛔ content/docs/releases/** untouched per the card.

---

Generated by Claude Code

[qq9340100]

<!-- os-dev-report -->

{
 "issue": 10079,
 "status": "done",
 "branch": "claude/issue-10079-v11-to-v16-datings",
 "pr": "https://github.com/objectstack-ai/objectstack/pull/10252",
 "premise_still_valid": true,
 "summary": "Retargeted the four exact-lined 'v11' session-alias-removal datings to 'v16' in packages/spec/src/ui/action-params.zod.ts:376/409 and packages/spec/src/migrations/registry.ts:1555 + entries/semantic/17.action-session-roles-to-positions.ts:23 — all four re-verified byte-for-byte against the issue on origin/main before editing. Regenerated the three downstream artifacts wholesale via repo tooling (gen:docs, gen:spec-changes, gen:upgrade-guide) rather than hand-editing content/docs/references/ui/action-params.mdx / spec-changes.json / docs/protocol-upgrade-guide.md. content/docs/releases/** untouched; the two out-of-population v11 sites (metadata-service.mdx, the liveness recheck) were re-checked and confirmed to date a different removal, so left alone. Added an @objectstack/spec patch changeset per the #10173 precedent.",
 "tests": "pnpm --filter @objectstack/spec build (clean) -> pnpm --filter @objectstack/spec check:generated found exactly the 3 expected stale artifacts (spec-changes.json, docs/protocol-upgrade-guide.md, content/docs/references/**), fixed narrowly via check:generated --fix, re-run all-green (13/13). Full pnpm build: 71/71 tasks succeeded (needed to satisfy two local gates' workspace-built precondition). node scripts/pm/dispatch-gates.mjs (no paths, derived from the actual 6-file diff) named 22 local gate invocations; all 22 pass at HEAD cbf160d96: check:changeset-gate-self-tests, check:cross-package-test-inputs, check:doc-anchors, check:doc-formula-expressions (needed a full build for its @objectstack/formula dependency — ERR_MODULE_NOT_FOUND before), check:docs-audit-scope, check:docs-redirects, spec check:empty-state, check:error-code-casing, spec check:liveness, check:merge-driver, check:published-readme-links, check:quick-reference-counts, check:role-word, check:slot-lookup, check:spec-parsed-alias, spec check:strictness-ledger, check:type-source-resolution, spec check:variant-docs, check-adr-0087-registration.mjs, check-cross-package-test-inputs.mjs, check-dev-prereqs.mjs (needed the full build too — was reporting 66/67 packages missing dist/ before), check-affected-docs.mjs. Not an ablation task; no reverse-verification applicable to a pure text-provenance edit. Draft PR opened without waiting on remote CI, per the dispatch contract.",
 "open_questions": [],
 "out_of_scope_findings": []
}

---

Generated by Claude Code