diff --git a/.changeset/13449-retire-html-renderer.md b/.changeset/13449-retire-html-renderer.md
new file mode 100644
index 0000000000..d5cf2f6b1b
--- /dev/null
+++ b/.changeset/13449-retire-html-renderer.md
@@ -0,0 +1,19 @@
+---
+'@object-ui/components': minor
+'@object-ui/types': minor
+'@object-ui/core': minor
+'@object-ui/cli': minor
+---
+
+The raw-HTML `html` node type is retired (objectui#13449). Its renderer wrote the authored `html` string into the page through `dangerouslySetInnerHTML` with no sanitiser, so anyone who could write metadata could put script-bearing markup in front of every viewer — a `kind: 'html'` page included, which compiled an `html` tag carrying an `html` attribute with no diagnostic. `@objectstack/spec` declares no `html` component, so it is removed rather than sanitised, at once, with no deprecation alias. This is breaking for a page that still names it; it is marked `minor` under this repository's version policy.
+
+- **SDUI node `html`**, also registered as `ui:html`. FROM: `@object-ui/components` registered both keys. TO: neither is registered. A JSON node that still names it draws the unknown-component panel, a `kind: 'html'` page that writes the tag fails to compile with `forbidden-tag` and `unknown-component`, and `objectui check` no longer counts either key among the known component types.
+- **Public block `html`** in `PUBLIC_BLOCKS` (`@object-ui/core`). FROM: listed as the curated tier's escape hatch, so `getPublicConfigs()` and the published `sdui.manifest.json` carried it. TO: not listed, so neither names it.
+- **Schema `HtmlSchema`** in `@object-ui/types`: the TypeScript interface from the package entry, with its `DataDisplaySchema` member and its `SchemaRegistry` row (so `ComponentType` no longer offers `'html'`), and the zod arm from `@object-ui/types/zod`. FROM: exported, and a `type: "html"` node validated against the arm. TO: there is no such export, so importing it fails to compile. `DataDisplaySchema` keeps a refusal arm for the literal, which is not exported, so `objectui validate` refuses a `type: "html"` node BY NAME at `type`, and the message names the remedy.
+
+The `html` FIELD type (`HtmlFieldMetadata`, drawn by `field:html`) is a different layer and stays: its value displays through the sanitised fields path.
+
+Fix for a page that still names it: in place of `{ "type": "html", "html": "…" }`, declare rich text a user edits as an `html` or `richtext` field on the object, whose value renders sanitised, and write authored page copy as a `kind: 'html'` page.
+
+Clause-②: no (narrowing)
+Metadata-protocol: narrowed
diff --git a/apps/console/src/__tests__/html-node-retired-13449.test.tsx b/apps/console/src/__tests__/html-node-retired-13449.test.tsx
new file mode 100644
index 0000000000..1da604b79a
--- /dev/null
+++ b/apps/console/src/__tests__/html-node-retired-13449.test.tsx
@@ -0,0 +1,140 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ *
+ * objectui#13449 — the raw-HTML `html` node type is retired, and neither
+ * authoring surface can put unsanitised markup into the page any more.
+ *
+ * ## The defect
+ *
+ * `@object-ui/components` registered `html` (`ui:html` plus the bare key),
+ * whose renderer wrote the authored `html` string into a `div` through
+ * `dangerouslySetInnerHTML` with no sanitiser. `@objectstack/spec` declares no
+ * `html` component. Two doors reached it:
+ *
+ * 1. a JSON node `{ "type": "html", "html": "…" }`;
+ * 2. a `kind:'html'` page — the tier documented as parsed, never executed,
+ * and safe for untrusted authors. Its compile whitelists every registered
+ * type, so `` compiled with NO diagnostic and the
+ * renderer injected the string. Measured on the base before the fix: an
+ * `img` carrying an `onerror` attribute reached the DOM through both doors.
+ *
+ * ## What each suite holds
+ *
+ * 1. the `kind:'html'` page refuses the tag at compile time and renders no
+ * authored markup (red on the base: zero diagnostics, the `img` with its
+ * `onerror` attribute in the DOM);
+ * 2. the JSON node draws the unknown-component panel and no authored markup
+ * (red on the base: the markup was injected);
+ * 3. CONTROL — the same page without the retired tag renders its authored
+ * content, so suite 1's absence is not a page that renders nothing.
+ *
+ * It lives in `apps/console` because the claim is about the whole registration
+ * graph: `@object-ui/fields` registers a `field:html` editor that must not take
+ * over the bare key once the display renderer is gone.
+ */
+import { describe, it, expect } from 'vitest';
+import { render, waitFor } from '@testing-library/react';
+import { SchemaRenderer, SchemaRendererProvider } from '@object-ui/react';
+import { ComponentRegistry } from '@object-ui/core';
+import { compile, manifestFromConfigs } from '@object-ui/sdui-parser';
+
+// The full registration graph — the pair `dev/manifest-dump.tsx` builds the
+// published artifacts from, and the pair every live-path suite here reads.
+import '@object-ui/components';
+import '../register-plugins';
+
+const dataSource = {
+ find: async () => ({ data: [], total: 0, hasMore: false }),
+ findOne: async () => null,
+ create: async () => ({}),
+ update: async () => ({}),
+ delete: async () => ({}),
+ count: async () => 0,
+ getObjectSchema: async (name: string) => ({ name, label: name, fields: {} }),
+ getObjects: async () => [],
+ onMutation: () => () => {},
+} as any;
+
+/**
+ * The manifest an html-kind page validates against, built the way the renderer
+ * builds it — `ComponentRegistry.getKnownTypes()` + each type's declared
+ * `inputs`, mirroring `page.tsx`'s `getJsxManifest()`.
+ */
+const livePageManifest = () =>
+ manifestFromConfigs(
+ ComponentRegistry.getKnownTypes().map((t) => {
+ const meta = ComponentRegistry.getMeta(t);
+ return { type: t, namespace: meta?.namespace, isContainer: meta?.isContainer, inputs: meta?.inputs };
+ }) as unknown as Parameters