docs+deprecate(bridges): preemptive landing shape for OGAR consumer migration

Adds `#[deprecated(note = "...")]` to every consumer-facing tenant bridge,
pointing each at its OGAR PortSpec replacement. Symbols still compile;
nothing removed. Companion to AdaWorldAPI/OGAR#95 (APP‖class codebook
layout + per-app migration plan).

Deprecated:
- lance-graph-ogar::bridges — 6 per-port aliases:
  OpenProjectBridge, RedmineBridge, MedcareBridge, WoaBridge, SmbBridge,
  OdooBridge → pull via the corresponding `ogar_vocab::ports::*Port::class_id(name)`
- lance-graph-ontology::bridges — 4 legacy structs:
  OgitBridge, WoaBridge, SpearBridge, SharePointBridge → pull via the
  relevant PortSpec (Spear/SharePoint require authoring a port first)

NOT deprecated: the `UnifiedBridge<P>` harness (impl mechanism), the
`*Port` types (the replacement), the OPENPROJECT_CODEBOOK / REDMINE_CODEBOOK
constants (already deprecated in PR #570).

Existing call sites (tests + the consumer-conformance harness) carry
`#[allow(deprecated)]` so the build stays clean. cargo check green on
both crates; pre-existing dead-code warnings on the `NAMESPACE` constants
are unrelated.

Scope this PR does NOT cover (explicitly flagged in
docs/CONSUMER-BRIDGE-DEPRECATION.md, surfaced by parallel sessions):
  - lance-graph-rbac has no `authorize(actor, classid, op)` keystone yet.
    The keystone is `[H]` and gated on PROBE-OGAR-RBAC-AUTHORIZE (OGAR
    spec). It lands as its own PR after the probe runs green. Until
    then, consumers migrate the classid pull only and keep existing
    auth — do NOT reintroduce a bridge as an auth stopgap.
  - `Membership` / `Op` types not yet defined.

Consumer status snapshot (`git grep` 2026-06-22):
  MedCare-rs: 33 files · woa-rs: 6 · smb-office-rs: 4 · odoo-rs: 0 ✓ ·
  openproject-nexgen-rs: 0 ✓

Terminal `bridges/` deletion PR opens only after the three remaining
consumers ship their migrations. No removal window announced.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EYvNjD8M8LMNYbRy3gq2FP

Author: claude

crates/lance-graph-consumer-conformance/src/lib.rs

@@ -1,3 +1,8 @@
+// Exercises the deprecated `MedcareBridge` / `OgitBridge` / `WoaBridge`
+// symbols on purpose — this harness IS the conformance gate for them.
+// See `docs/CONSUMER-BRIDGE-DEPRECATION.md`.
+#![allow(deprecated)]
+
 //! `lance-graph-consumer-conformance` — cross-crate registry conformance harness.
 //!
 //! This crate is the CI gate that prevents a consumer crate from shipping a

crates/lance-graph-ogar/src/bridges/medcare_bridge.rs

@@ -33,6 +33,13 @@ use ogar_vocab::ports::PortSpec;
 
 /// MedCare `NamespaceBridge` — alias over the generic harness, locked to
 /// the `Healthcare` namespace via [`HealthcarePort`].
+///
+/// **Deprecated:** pull the classid via the OGAR PortSpec instead —
+/// `ogar_vocab::ports::HealthcarePort::class_id(name)`. See
+/// `docs/CONSUMER-BRIDGE-DEPRECATION.md` + AdaWorldAPI/OGAR#95.
+#[deprecated(
+    note = "pull the classid via `HealthcarePort::class_id(name)` — see AdaWorldAPI/OGAR#95 + docs/CONSUMER-BRIDGE-DEPRECATION.md"
+)]
 pub type MedcareBridge = UnifiedBridge<HealthcarePort>;
 
 /// Canonical namespace name for MedCare / Healthcare. Mirrors
@@ -41,6 +48,7 @@ pub type MedcareBridge = UnifiedBridge<HealthcarePort>;
 pub const NAMESPACE: &str = HealthcarePort::NAMESPACE;
 
 #[cfg(test)]
+#[allow(deprecated)] // exercises the deprecated bridge alias on purpose
 mod tests {
     //! Co-located unit tests for the migrated alias — constructor
     //! success/failure, contract methods, codebook resolution, fallback

crates/lance-graph-ogar/src/bridges/odoo_bridge.rs

@@ -25,12 +25,20 @@ use ogar_vocab::ports::PortSpec;
 
 /// Odoo `NamespaceBridge` — alias over the generic harness, locked to
 /// the `Odoo` namespace via [`OdooPort`].
+///
+/// **Deprecated:** pull the classid via the OGAR PortSpec instead —
+/// `ogar_vocab::ports::OdooPort::class_id(name)`. See
+/// `docs/CONSUMER-BRIDGE-DEPRECATION.md` + AdaWorldAPI/OGAR#95.
+#[deprecated(
+    note = "pull the classid via `OdooPort::class_id(name)` — see AdaWorldAPI/OGAR#95 + docs/CONSUMER-BRIDGE-DEPRECATION.md"
+)]
 pub type OdooBridge = UnifiedBridge<OdooPort>;
 
 /// Canonical namespace name for Odoo. Mirrors `OdooPort::NAMESPACE`.
 pub const NAMESPACE: &str = OdooPort::NAMESPACE;
 
 #[cfg(test)]
+#[allow(deprecated)] // exercises the deprecated bridge alias on purpose
 mod tests {
     use super::*;
     use lance_graph_ontology::bridge::{BridgeError, NamespaceBridge};

crates/lance-graph-ogar/src/bridges/openproject_bridge.rs

@@ -22,6 +22,14 @@ pub use ogar_vocab::ports::OpenProjectPort;
 use ogar_vocab::ports::PortSpec;
 
 /// OpenProject `NamespaceBridge` — alias over the generic harness.
+///
+/// **Deprecated:** pull the classid via the OGAR PortSpec instead —
+/// `ogar_vocab::ports::OpenProjectPort::class_id(name)`. The bridge will
+/// be removed once all consumers migrate. See
+/// `docs/CONSUMER-BRIDGE-DEPRECATION.md` + AdaWorldAPI/OGAR#95.
+#[deprecated(
+    note = "pull the classid via `OpenProjectPort::class_id(name)` — see AdaWorldAPI/OGAR#95 + docs/CONSUMER-BRIDGE-DEPRECATION.md"
+)]
 pub type OpenProjectBridge = UnifiedBridge<OpenProjectPort>;
 
 /// Canonical namespace name for OpenProject. Mirrors
@@ -41,6 +49,7 @@ pub const NAMESPACE: &str = OpenProjectPort::NAMESPACE;
 pub const OPENPROJECT_CODEBOOK: &[(&str, u16)] = ogar_vocab::ports::OPENPROJECT_ALIASES;
 
 #[cfg(test)]
+#[allow(deprecated)] // exercises the deprecated bridge alias on purpose
 mod tests {
     //! Co-located unit tests retained from the pre-migration shape —
     //! constructor success/failure, contract methods, codebook

crates/lance-graph-ogar/src/bridges/redmine_bridge.rs

@@ -17,6 +17,13 @@ use ogar_vocab::ports::PortSpec;
 pub use ogar_vocab::ports::RedminePort;
 
 /// Redmine `NamespaceBridge` — alias over the generic harness.
+///
+/// **Deprecated:** pull the classid via the OGAR PortSpec instead —
+/// `ogar_vocab::ports::RedminePort::class_id(name)`. See
+/// `docs/CONSUMER-BRIDGE-DEPRECATION.md` + AdaWorldAPI/OGAR#95.
+#[deprecated(
+    note = "pull the classid via `RedminePort::class_id(name)` — see AdaWorldAPI/OGAR#95 + docs/CONSUMER-BRIDGE-DEPRECATION.md"
+)]
 pub type RedmineBridge = UnifiedBridge<RedminePort>;
 
 /// Canonical namespace name for Redmine. Mirrors `RedminePort::NAMESPACE`
@@ -33,6 +40,7 @@ pub const NAMESPACE: &str = RedminePort::NAMESPACE;
 pub const REDMINE_CODEBOOK: &[(&str, u16)] = ogar_vocab::ports::REDMINE_ALIASES;
 
 #[cfg(test)]
+#[allow(deprecated)] // exercises the deprecated bridge alias on purpose
 mod tests {
     use super::*;
     use lance_graph_ontology::bridge::{BridgeError, NamespaceBridge};

crates/lance-graph-ogar/src/bridges/smb_bridge.rs

@@ -24,12 +24,20 @@ pub use ogar_vocab::ports::SmbPort;
 
 /// SMB `NamespaceBridge` — alias over the generic harness, locked to
 /// the `SMB` namespace via [`SmbPort`].
+///
+/// **Deprecated:** pull the classid via the OGAR PortSpec instead —
+/// `ogar_vocab::ports::SmbPort::class_id(name)`. See
+/// `docs/CONSUMER-BRIDGE-DEPRECATION.md` + AdaWorldAPI/OGAR#95.
+#[deprecated(
+    note = "pull the classid via `SmbPort::class_id(name)` — see AdaWorldAPI/OGAR#95 + docs/CONSUMER-BRIDGE-DEPRECATION.md"
+)]
 pub type SmbBridge = UnifiedBridge<SmbPort>;
 
 /// Canonical namespace name for SMB. Mirrors `SmbPort::NAMESPACE`.
 pub const NAMESPACE: &str = SmbPort::NAMESPACE;
 
 #[cfg(test)]
+#[allow(deprecated)] // exercises the deprecated bridge alias on purpose
 mod tests {
     use super::*;
     use lance_graph_ontology::bridge::{BridgeError, NamespaceBridge};

crates/lance-graph-ogar/src/bridges/woa_bridge.rs

@@ -31,12 +31,20 @@ pub use ogar_vocab::ports::WoaPort;
 
 /// WoA `NamespaceBridge` — alias over the generic harness, locked to
 /// the `WorkOrder` namespace via [`WoaPort`].
+///
+/// **Deprecated:** pull the classid via the OGAR PortSpec instead —
+/// `ogar_vocab::ports::WoaPort::class_id(name)`. See
+/// `docs/CONSUMER-BRIDGE-DEPRECATION.md` + AdaWorldAPI/OGAR#95.
+#[deprecated(
+    note = "pull the classid via `WoaPort::class_id(name)` — see AdaWorldAPI/OGAR#95 + docs/CONSUMER-BRIDGE-DEPRECATION.md"
+)]
 pub type WoaBridge = UnifiedBridge<WoaPort>;
 
 /// Canonical namespace name for WoA. Mirrors `WoaPort::NAMESPACE`.
 pub const NAMESPACE: &str = WoaPort::NAMESPACE;
 
 #[cfg(test)]
+#[allow(deprecated)] // exercises the deprecated bridge alias on purpose
 mod tests {
     use super::*;
     use lance_graph_ontology::bridge::{BridgeError, NamespaceBridge};

crates/lance-graph-ogar/src/lib.rs

@@ -82,9 +82,18 @@ pub use ogar_vocab::Class;
 //    which is OGIT and must not depend on ogar-vocab) ──
 pub mod bridges;
 
+// Per-port bridge aliases (`MedcareBridge` / `OpenProjectBridge` /
+// `RedmineBridge` / `OdooBridge` / `SmbBridge` / `WoaBridge`) are
+// `#[deprecated]` (2026-06-22) — pull the classid via the corresponding
+// PortSpec instead. The `Port` types and `UnifiedBridge` harness are
+// NOT deprecated. See `docs/CONSUMER-BRIDGE-DEPRECATION.md` +
+// AdaWorldAPI/OGAR#95.
 pub use bridges::{
-    HealthcarePort, MedcareBridge, OpenProjectBridge, OpenProjectPort, RedmineBridge, RedminePort,
-    UnifiedBridge,
+    HealthcarePort, OdooPort, OpenProjectPort, RedminePort, SmbPort, UnifiedBridge, WoaPort,
+};
+#[allow(deprecated)]
+pub use bridges::{
+    MedcareBridge, OdooBridge, OpenProjectBridge, RedmineBridge, SmbBridge, WoaBridge,
 };
 
 /// Codebook parity-guard — the drift fuse between OGAR's authoritative codebook

crates/lance-graph-ogar/tests/bridge_codebook_convergence.rs

@@ -1,6 +1,10 @@
 // Skip under Miri — TTL fixtures use `tempfile::tempdir()` +
 // `std::fs::create_dir_all/write`, both blocked by Miri's isolation.
 #![cfg(not(miri))]
+// Exercises the deprecated `OpenProjectBridge` / `RedmineBridge` aliases on
+// purpose — the convergence pin is what we're testing. See
+// `docs/CONSUMER-BRIDGE-DEPRECATION.md`.
+#![allow(deprecated)]
 
 //! Bridge codebook convergence test — codex P1 on PR #559.
 //!

crates/lance-graph-ogar/tests/bridge_scope_lock.rs

@@ -3,6 +3,9 @@
 // isolation blocks `mkdir`/`open`. Stable and nightly without Miri run it
 // normally.
 #![cfg(not(miri))]
+// Exercises the deprecated bridge aliases on purpose — see
+// `docs/CONSUMER-BRIDGE-DEPRECATION.md`.
+#![allow(deprecated)]
 
 //! Bridge scope-lock test.
 //!