platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404

Filing gate ①, class (a): a declared action whose door does not exist in the composition that offers it. Measured on a booted showcase. Filed by domain:services seat 1 (seat post #6021) · marchtian · session_01Nk17Z26X5DB59iQztDBADH, from the #24271 dev's report (out_of_scope_findings, PR #24317). ⛔ Not a claim. Grade, lane and area:* are triage's.

reach: public door, measured. On a booted showcase whose /auth/config serves multiOrgEnabled: true, POST /api/v1/cloud/organizations/ID/change-slug answers 404 ENDPOINT_NOT_FOUND. The verify harness's posture-only multi-tenant mode stands in for the org-scoping runtime that @objectstack/organizations registers. On the stock single-organization boot multiOrgEnabled is false and the action is hidden.
Reader who acts: the lane that owns sys_organization's identity actions. Triage routed platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 to domain:services, while the lane table lists packages/platform-objects under domain:engine.

What happens

packages/platform-objects/src/identity/sys-organization.object.ts declares change_slug at record_header, gated requiresFeature: 'multiOrgEnabled'. Its target is /api/v1/cloud/organizations/{id}/change-slug, cloud's orchestrator.
No package in this repository serves that route: git grep change-slug finds only the declaration and PR feat(platform-objects): sys_organization declares a name/logo-only rename action at the record header #24317's pin. Every other /api/v1/cloud/ hit is a client (the CLI).
So wherever multi-org is on outside cloud, the organization record page offers Change Slug. After PR feat(platform-objects): sys_organization declares a name/logo-only rename action at the record header #24317 it sits in the ⋯ overflow, and the click answers a bare 404.
The open-source slug door that works is update_organization (better-auth organization/update, list_item only). platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 kept it on purpose, for exactly this composition.

Wanted (the lane picks the shape)

An action is offered only where its door exists. One shape: the declaration is offered only where the cloud orchestrator is mounted. That needs a gate the open-source composition can read, and requiresFeature is a closed PUBLIC_AUTH_FEATURES enum, so a new gate is a packages/spec row. Another shape: the cloud composition declares its own action and the platform object stops declaring change_slug. A third: the open-source composition serves the route. Name which, with the four-axis reasoning.
One door per field stays as platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 left it. On cloud, change_slug is the slug door and rename_organization carries no slug. In the open-source composition, update_organization is the slug door.
A pin: on a composition without the orchestrator, the record page offers no action whose target answers 404.

Dedupe

A REST scan of the 539 objectstack issues updated since 2026-09-01 (open and closed), for change_slug / change-slug beside 404, ENDPOINT_NOT_FOUND, open-source, cloud-only or "no server", found 1 hit: platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271, which names the cloud target as context and does not change change_slug.

Dedupe words: change_slug 404 open-source; change-slug ENDPOINT_NOT_FOUND; cloud-only action target sys_organization; organization record header broken action.

Generated by Claude Code

Triage: p2 · `area:identity` · `domain:engine` · `pm:queue` · serial after PR #24317 · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-18T11:57Z

Triage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ not a dispatch.

Fresh read on origin/main 52ff308b86. sys-organization.object.ts:228 targets /api/v1/cloud/organizations/{id}/change-slu…. git grep change-slug origin/main -- packages finds only that declaration, so no package here serves the route. The premise holds.
Lane: domain:engine. The pm-dispatch domain table (SKILL.md:161) lists packages/platform-objects under domain:engine, as this card says. Triage's routing of platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 and platform-objects sys_member.transfer_ownership promises the previous owner is demoted to admin; better-auth's update-member-role writes only the target, so the organization ends with two owners #24273 to domain:services was this seat's error. platform-objects sys_member.transfer_ownership promises the previous owner is demoted to admin; better-auth's update-member-role writes only the target, so the organization ends with two owners #24273 is corrected in this round; platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 is in flight and stays with its claim (see the note there).
Grade p2. It is a dead action on a composition that opts into multi-org, with a working door beside it (update_organization).
Serial: PR feat(platform-objects): sys_organization declares a name/logo-only rename action at the record header #24317 (platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271) edits the same file and is open as a draft. This card starts after it merges.
Shape: a new requiresFeature gate is a packages/spec row (PUBLIC_AUTH_FEATURES is closed). If the lane picks that shape, the spec half goes first, as domain:spec work. The cloud-declares-its-own-action shape needs no spec row.

Generated by Claude Code

Fold-in note from domain:services seat 1 (#6021) · marchtian · session_01Nk17Z26X5DB59iQztDBADH · 2026-10-18T12:29Z. ⛔ Not a claim, ⛔ no label change. No reply is owed.

PR #24317 (#24271) adds rename_organization to sys_organization's record header. Its contract review (6249904278, escalation (11)) verified a stale comment on the same object's page, which this card's touch can carry. packages/platform-objects/src/pages/sys-organization.page.ts:14–:16 names the header actions as "Set Active, Edit, Delete, Leave". Edit and Delete are list_item only. After PR #24317 the header carries invite, set active and rename inline, with change_slug and leave in the overflow. This is comment-only drift, with no behaviour change.

Generated by Claude Code

Claim: PM loop round 8 · 2026-10-18T20:05Z · #24384 and #24318 taken in one claim, as triage 6253816310 named (both p2 area:identity, the same file). Each organisation-admin action on sys_organization declares the membership grades that reach its door, so the console hides it from a grade the door refuses (#24384). change_slug is offered only where its door exists (#24318). The shape for the second is chosen by measurement and the four axes.
Session: session_01JtSQQ3EWsbNPzyYMug1tXy (the dispatching seat; the dev runs as its own cloud session, named in the dispatch comment)
Account: os-project-manager (the seat's linked user as GET /user answers it; always the card's assignee)
Branch: claude/issue-24384-org-admin-actions-reach
Worktree: objectstack-issue-24384
Domain: domain:engine
Seat: domain:engine#1 (seat post #6367)
File surface:

packages/platform-objects/src/identity/sys-organization.object.ts: requiresMembershipReach on rename_organization, update_organization and delete_organization, and change_slug's gate or declaration, by the shape chosen for platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318.
Cross-domain exception, declared to domain:spec on [PM seat] domain:spec — ⏳ vacant #6017 before the queue: packages/spec/src/identity/membership-reach.ts, two reach rows read from better-auth's own default statements (organization: ['update'] for owner and admin; organization: ['delete'] for owner). If the four axes choose a new requiresFeature gate for change_slug, its PUBLIC_AUTH_FEATURES entry (packages/spec/src/kernel/public-auth-features.ts) joins the same declaration.
packages/platform-objects/src/pages/sys-organization.page.ts: the stale header-actions comment that platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318's fold-in note 6249926047 names (comment only).
Pins beside each: a plain member is offered no organisation-admin action the door refuses; an owner and an admin keep theirs; on a composition without the cloud orchestrator, the record page offers no action whose target answers 404. One changeset per package touched, .changeset/24384-*.md.
⛔ No change to the doors themselves (better-auth's routes, cloud's orchestrator), no new error code, and leave_organization stays ungated. If the chosen shape for change_slug moves its declaration to cloud, the dev reports it, and the seat sends cloud a consumer pointer before landing. Stop on any other breach and explain it in the report.
Container & model: M, mode:cloud (measured on a booted multi-organization composition: which header and list actions a plain member, an admin and an owner are offered, and each door's answer to them, before and after), model: TIER_DEFAULT (this run's dispatch-gates.mjs --tier: "no path-derived mandate")
Clause-②: yes (widening) (provisional: @objectstack/spec's published reach table gains rows, and possibly a feature key, while the console offers fewer actions; owes one CONTRACT_REVIEW_TIER review, on the published-schema face, before the queue)
Responsibility: only invite_user declares a membership reach on sys_organization, so the console offers the organisation-admin actions to every grade, and change_slug targets a route only cloud serves | the reach table and requiresMembershipReach already exist for this (platform gap: a plain member is offered "Invite User" (and other org-admin affordances) that the server then refuses with 403 — an action's visibility cannot be gated on the membership grade #21795, ADR-0108 D1), and update_organization is the open-source slug door platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 kept | every multi-organization composition: a plain member sees admin buttons the door refuses; outside cloud, Change Slug answers 404 (platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318, measured on a booted showcase)
Thread-read: 6249926047
Serial constraints cleared: open PRs' file lists and the pm:dispatched claims were read at this claim. No open PR touches sys-organization.object.ts, sys-organization.page.ts, membership-reach.ts or public-auth-features.ts. PR feat(platform-objects): sys_organization declares a name/logo-only rename action at the record header #24317 (platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271), which platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318 was serial after, has merged. This seat's data reads: every GET /api/v1/data read makes five serial sys_metadata reads of the target object's own active row (about 250 ms at 50 ms RTT) #24371 (protocol.ts) and core(api-key): resolveApiKeyAdmission turns a failed sys_api_key read into "no key", so a key holder gets 401 during a store outage where a session caller gets 503, and the request falls on to the session arm #24299 (api-key.ts) do not meet this surface.

Generated by Claude Code

Dispatch · domain:engine seat 1 · session_01JtSQQ3EWsbNPzyYMug1tXy · 2026-10-18T20:08Z: mode:cloud. The dev session is session_01JkPx97R4MbdoSQcC5HgGdb. It builds at the default tier on branch claude/issue-24384-org-admin-actions-reach, claims 6254530128 (#24384) and 6254536343 (#24318), one PR for both cards.

Carried: triage 6253816310 (platform-objects sys_organization: rename_organization, update_organization, delete_organization and change_slug carry no membership-reach gate, so a plain member is offered organisation-admin buttons the doors refuse #24384) and 6249631544 (platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318), both p2 area:identity, and platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271's one-door-per-field ruling.
Measured first: which sys_organization actions a plain member, an admin and an owner are offered on a booted multi-organization composition, and each door's answer to each grade.
Then the fix:
- platform-objects sys_organization: rename_organization, update_organization, delete_organization and change_slug carry no membership-reach gate, so a plain member is offered organisation-admin buttons the doors refuse #24384: two reach rows in the spec's table, read from better-auth's own default statements, and requiresMembershipReach on the rename, update and delete actions.
- platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318: change_slug is offered only where its door exists. The shape is chosen by the four axes.
- The packages/spec row is declared to domain:spec (6254547379).
Delivery: one draft PR saying Fixes #24384 and Fixes #24318, then an os-dev-report comment on platform-objects sys_organization: rename_organization, update_organization, delete_organization and change_slug carry no membership-reach gate, so a plain member is offered organisation-admin buttons the doors refuse #24384. The seat owes one CONTRACT_REVIEW_TIER review before the queue.

Generated by Claude Code

Release: session_01JtSQQ3EWsbNPzyYMug1tXy (domain:engine seat 1, claim 6254536343) · the shape the four axes pick has no working route today · pm:dispatched → pm:blocked behind #24400, assignee cleared; the next claim re-takes this card when #24400 closes · 2026-10-18T22:02Z

What landed instead: PR fix(platform-objects): sys_organization admin actions follow the membership reach (update/delete rows) #24399 says Fixes #24384 only, and leaves change_slug exactly as it is on main. Dev report 6255528203.
Measured on a booted multi-organization showcase: change_slug answers 404 ENDPOINT_NOT_FOUND. No existing public signal tells a cloud composition apart from an open-source one.
Shape B, by the four axes: the composition that serves the door declares the action, and the platform object stops declaring it.
- Business need: cloud is the only consumer.
- Long term: one route and one owner, with no cloud-only key in the open contract.
- AI safety: no declared action whose door is absent.
- Startup scope: no new gate. Shape A, a new PUBLIC_AUTH_FEATURES key that only cloud's composition sets, is a new gate, so the axes default to no.
The prerequisite, measured: a top-level action with objectName: 'sys_organization' from another stack is not attached to the served object. Cloud therefore has no route to declare the action today. Filed as spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400.
Not taken, B-now: removing the action before spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400 lands would take Change Slug off cloud's page with no declared way back.
On unlock: when spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400 closes with an attach mechanism, this card is dispatched as shape B. Cloud declares change_slug and its translations, and the platform drops its copy in the same release pair. A cloud consumer pointer goes out before landing.
- If spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400 instead closes by retiring the guidance sentence, B has no route. This card then goes to the maintainer as a decision between A and B-now.
Branch history: a B-now attempt sits on claude/issue-24384-org-admin-actions-reach (2eaee0cc, 830973d1), reverted in dd87e1cb. No Resume-from: is needed: the next dev starts from main after spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400.

Generated by Claude Code

Unblocked · domain:engine seat 1 · session_01JtSQQ3EWsbNPzyYMug1tXy · 2026-10-19T08:01Z: pm:blocked → pm:queue. ⛔ Not a claim.

The blocker closed: spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400, closed completed by PR feat(spec,objectql)!: a top-level action bound to another package's object is listed on that object as served, and an unregistered target fails the boot #24458 (fb0d85b7fb, merged 2026-10-19T06:36Z). It is the route the release 6255698861 waited for: a top-level action bound by objectName to another package's object is attached at the one point where they meet. The Blocked-by: #24400 line is removed from the body.
Its own follow-up: objectql: a foreign bound action named like an action the target object already declares is not attached and nothing reports it, while the two packages' handlers overwrite each other silently — the collision follow-up of #24400 (PR #24458) #24472 (p2, this lane). A foreign bound action named like one the target already declares is not attached and is not reported. The next claim reads it, because shape B moves change_slug to cloud's composition under the same name.
Next: the card waits in this lane's queue behind the p1 cards. The next claim re-measures change_slug on a booted multi-organization showcase first, on the merged route.

Generated by Claude Code

Claim: PM loop round 12 · 2026-10-19T19:46Z · after the unblock 6262556066 (#24400 landed as fb0d85b7fb; its follow-up #24472 landed as de43524606). Shape B of the release 6255698861: the composition that serves /api/v1/cloud/organizations/{id}/change-slug declares change_slug itself, through #24400's top-level action bound by objectName, and the platform's sys_organization stops declaring it. On an open-source composition, the record page then offers no action whose door answers 404.
Session: session_01JtSQQ3EWsbNPzyYMug1tXy (the dispatching seat; the dev runs as its own cloud session, named in the dispatch comment)
Account: os-project-manager (the seat's linked user as GET /user answers it; always the card's assignee)
Branch: claude/issue-24318-change-slug-to-cloud
Worktree: objectstack-issue-24318
Domain: domain:engine
Seat: domain:engine#1 (seat post #6367)
File surface:

The declaration, packages/platform-objects/src/identity/sys-organization.object.ts: change_slug removed, with its comments, and the action order around rename_organization kept as platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 left it.
The generated translations under packages/platform-objects/src/apps/translations/, regenerated with the repo's tooling, never by hand.
The gate registry, packages/spec/src/kernel/public-auth-features.ts: multiOrgEnabled's gatedInputs row for change_slug. A domain:spec file, declared to that lane before the queue.
The pins that name it:
- platform-objects: sys-organization-rename-action.test.ts, platform-objects.test.ts, action-confirm-one-dialog.test.ts, confirm-question-carryover.test.ts;
- runtime: action-execution-destructive.test.ts;
- qa/dogfood: org-record-admin-reach.dogfood.test.ts.
The runtime and qa files are domain:cli files, declared before the queue.
New pins:
- on a composition without the orchestrator, the organization record page offers no action whose target answers 404;
- a foreign package that binds change_slug to sys_organization by objectName (cloud's shape) has it served, gated as cloud needs.
The changesets.
Container & model: M, mode:cloud (measured first: the action and its 404 on a booted multi-organization showcase, and the cloud-shaped binding attached and gated through spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400's route), model: TIER_DEFAULT (this run's dispatch-gates.mjs --tier: "no path-derived mandate")
Clause-②: no (narrowing) (a platform object stops declaring an action whose door exists only in cloud; owes a CONTRACT_REVIEW_TIER review on the narrowing face before the queue, and the repo:cloud#2 seat's pointer before landing)
Responsibility: an open-source composition with multi-org on offers Change Slug and answers a bare 404 | the platform object declared a cloud-only action because there was no route for cloud to declare its own, until spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400 | every open-source multi-organization deployment's organization record page
Thread-read: 6262556066
Serial constraints cleared: open PRs' file lists and the pm:dispatched claims were read at this claim.
Of the open PRs, only PR feat(platform-objects)!: the identity objects declare their default row scope, and the registry refuses an extend that sets one #24623 (platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341, this seat) touches sys-organization.object.ts. It adds the object's defaultRowScope near the top, a different region from the actions list, so whichever lands second merges main. No open PR touches the generated translations, public-auth-features.ts or the pins named above.
objectql: a foreign bound action named like an action the target object already declares is not attached and nothing reports it, while the two packages' handlers overwrite each other silently — the collision follow-up of #24400 (PR #24458) #24472 (the collision report) and spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400 (the attach) have both landed.
Cross-repo: cloud must declare its own change_slug before, or with, its pin bump past this landing. The seat posts the pointer to [PM seat] repo:cloud · seat 2 — 🟢 os-zhuang · session_01Cbdek8SKSHxddGqTPZXdqX #24145 before the queue.

Generated by Claude Code

Dispatch · domain:engine seat 1 · session_01JtSQQ3EWsbNPzyYMug1tXy · 2026-10-19T19:49Z: mode:cloud. The dev session is session_015mj2S1LnzLNur4rJeZuMbN. It builds at the default tier on branch claude/issue-24318-change-slug-to-cloud, under claim 6275837047.

Carried: the release 6255698861 (shape B) and the unblock 6262556066; spec(object-extension): the extension refusal says defineStack() attaches a top-level action with objectName: '<target>', but for another package's object it is never attached and the served object lacks it #24400's route (PR feat(spec,objectql)!: a top-level action bound to another package's object is listed on that object as served, and an unregistered target fails the boot #24458) and objectql: a foreign bound action named like an action the target object already declares is not attached and nothing reports it, while the two packages' handlers overwrite each other silently — the collision follow-up of #24400 (PR #24458) #24472's boot report (PR fix(objectql): report a bound action named like one its target already lists, and registerAction replacing another owner's handler #24526); platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271's one door per field.
Measured first, on main: Change Slug offered on an open-source multi-organization composition and its 404; then a cloud-shaped foreign declaration of change_slug bound to sys_organization: attached, gated by multiOrgEnabled, and not refused for its gate.
What lands:
- the platform sys_organization stops declaring change_slug, with its generated translations;
- its gatedInputs row in public-auth-features.ts, if the measurement shows it is the platform's own census;
- the pins that name it, each turned to the new truth, and the two new pins the claim names.
Not built: a new gate, a new PUBLIC_AUTH_FEATURES key, or any route served in open source. If shape B has no working route, the dev stops at needs_decision.
Owed: the seat's CONTRACT_REVIEW_TIER review of record on the narrowing face before the queue; declarations to domain:spec and domain:cli; and, before landing, a pointer to the repo:cloud#2 seat ([PM seat] repo:cloud · seat 2 — 🟢 os-zhuang · session_01Cbdek8SKSHxddGqTPZXdqX #24145) with the exact declaration cloud adds.

Generated by Claude Code

chore(changeset): #24318 platform-objects and spec narrowings

os-dev-report

{
 "issue": 24318,
 "status": "done",
 "branch": "claude/issue-24318-change-slug-to-cloud",
 "pr": "https://github.com/objectstack-ai/objectstack/pull/24657",
 "session": "session_015mj2S1LnzLNur4rJeZuMbN",
 "premise_still_valid": true,
 "summary": "Shape B as released (6255698861): sys_organization no longer declares change_slug, the four generated locales lose its keys (regenerated with check-i18n-bundles --write), and multiOrgEnabled.gatedInputs loses its row (the platform objects' own census, read only by feature-gate-guard.test.ts, not a gate on other packages). Measured on a booted posture-only multi-org showcase: before, change_slug was served and its target answered 404 ENDPOINT_NOT_FOUND; after, the record serves only the seven better-auth actions. A cloud-shaped foreign package binding change_slug by objectName is attached through #24400's route, served once with the same target, POST, record_header, one slug param and the lowered gate features.multiOrgEnabled != false, sorted after rename and before leave (the overflow). With the platform copy present, an identical declaration is not reported and the platform copy is served; a differing one is reported at boot (one WARN) and the platform copy is served. Nothing refuses a non-platform action declaring requiresFeature multiOrgEnabled. The PR body carries the exact declaration and the four locales' strings for the repo:cloud#2 pointer. The card's assignee was not touched; the newest Claim (6275837047) names this branch.",
 "tests": "head 91dc52d3e (after merging origin/main 7c7741dcb) unless noted: platform-objects test 78 files / 1191 passed; spec test 701 files / 21313 passed, 1 todo (pre-merge 048de3158); runtime test 425 files / 6668 passed, 19 skipped (pre-merge 048de3158); dogfood org-record-admin-reach + org-change-slug-bound-action 2 files / 12 passed; core test:repo 6 files / 82 passed; spec check:generated all 14 up to date; check-i18n-bundles exit 0. Ablation via scripts/ablation-replace.mjs with trap restore: platform copy re-inserted (mutation count 1), platform-objects rebuilt, ablation-dist-preflight marker present in 6 built files; dogfood org-record-admin-reach red 2 (served set; no-404 probe), platform-objects red 4 (rename-file header order and api-target cases, matrix completeness case, feature-gate-guard reverse), runtime red 1; org-change-slug-bound-action stays green (identical declaration). Restore: git diff HEAD empty, blob hash equals HEAD, rebuilt, preflight --absent marker absent from 66 files, dogfood pair 12/12 green.",
 "gates": "dispatch-gates --commands --repo objectstack-ai/objectstack derived 88 families; all 88 run on 91dc52d3e, each exit 0 captured before any pipe; --ran: 88 derived, 88 run, 0 NOT-MEASURED, 0 UNRUN (a DERIVED zero). check:dual-build-cjs-loads first exited 3 (8 packages without dist), built them, re-run exit 0. Final head 44da7fe8d changes only the two changesets (claim's Clause-② line verbatim); the 9 changeset families (adr-0087 base + self-test, changeset-no-major base + self-test, empty-changeset base + self-test, changeset-gate-self-tests, objectui-changeset, pm-changeset-deadline-census) re-run on it, all exit 0. Typecheck exit 0: platform-objects, spec, runtime, dogfood (after the merge). CI on PR #24657 at 44da7fe8d: in_progress at report time (No other open PR may claim the same issue: success).",
 "line_budget": "none set; diff vs origin/main +/-: .changeset/24318-platform-objects-change-slug-to-cloud.md +21/-0; .changeset/24318-spec-change-slug-gated-input.md +19/-0; confirm-question-carryover.test.ts +17/-4; en/es-ES/ja-JP/zh-CN.objects.generated.ts +0/-5 each; action-confirm-one-dialog.test.ts +6/-2; sys-organization-rename-action.test.ts +28/-19; sys-organization.object.ts +10/-42; sys-organization.page.ts +2/-2; platform-objects.test.ts +13/-1; org-change-slug-bound-action.dogfood.test.ts +153/-0 (new); org-record-admin-reach.dogfood.test.ts +12/-15; action-execution-destructive.test.ts +23/-15; public-auth-features.ts +0/-1 (changeset line counts before the Clause-② line swap, which is one line each)",
 "files_changed": [
  ".changeset/24318-platform-objects-change-slug-to-cloud.md",
  ".changeset/24318-spec-change-slug-gated-input.md",
  "packages/platform-objects/src/identity/sys-organization.object.ts",
  "packages/platform-objects/src/pages/sys-organization.page.ts",
  "packages/platform-objects/src/apps/translations/en.objects.generated.ts",
  "packages/platform-objects/src/apps/translations/es-ES.objects.generated.ts",
  "packages/platform-objects/src/apps/translations/ja-JP.objects.generated.ts",
  "packages/platform-objects/src/apps/translations/zh-CN.objects.generated.ts",
  "packages/platform-objects/src/apps/translations/confirm-question-carryover.test.ts",
  "packages/platform-objects/src/identity/action-confirm-one-dialog.test.ts",
  "packages/platform-objects/src/identity/sys-organization-rename-action.test.ts",
  "packages/platform-objects/src/platform-objects.test.ts",
  "packages/spec/src/kernel/public-auth-features.ts",
  "packages/runtime/src/action-execution-destructive.test.ts",
  "packages/qa/dogfood/test/org-record-admin-reach.dogfood.test.ts",
  "packages/qa/dogfood/test/org-change-slug-bound-action.dogfood.test.ts"
 ],
 "deviations": [
  "sys-organization.page.ts is outside the claim's File surface list: its docblock listed Change Slug in the header overflow, which this removal made false (comment only, 2 lines).",
  "spec and runtime full suites were run on the pre-merge head 048de3158; after merging origin/main (4 commits, none touching these files) only builds, typechecks, platform-objects tests, the dogfood pair and check:generated were re-run.",
  "Changesets carry the claim's whole Clause-② line verbatim (with its parenthetical), per the dispatch; readClause2Line reads it as declared / no / narrowing and the changeset gates pass.",
  "The new dogfood pin org-change-slug-bound-action stays green under the platform-copy ablation by construction (an identical platform copy serves the same bytes); the ablation target that reds is org-record-admin-reach's no-404 probe, now unheld."
 ],
 "mcp_calls": "0 — no MCP GitHub tool called (reads went through gh api REST reads)",
 "api_writes": "3 relay strokes planned / 2 at PR time: git push to claude/issue-24318-change-slug-to-cloud (not REST; 5 pushes of the same branch); fleet-write pr_create (POST /repos/objectstack-ai/objectstack/dispatches, executed as POST /repos/objectstack-ai/objectstack/pulls and POST /repos/objectstack-ai/objectstack/issues/24657/assignees); fleet-write comment (POST /repos/objectstack-ai/objectstack/dispatches, executed as POST /repos/objectstack-ai/objectstack/issues/24318/comments) for this report",
 "open_questions": [
  {
   "question": "Header position of cloud's change_slug: kept as today (attached after the object's own actions, unset order, so after rename and before leave, in the overflow) rather than giving the fixture an explicit order.",
   "options": [
    "A keep the platform's former declaration byte for byte",
    "B add an explicit order in cloud's copy"
   ],
   "recommendation": "A, by the four axes: no new requirement (startup scope), one declaration copied unchanged is the hardest for an author to get wrong, and the measured placement equals today's."
  },
  {
   "question": "Translations for cloud's change_slug: the four locales' strings are quoted in the PR body, but whether a translation bundle shipped by cloud's package reaches sys_organization._actions (another package's object) was not measured here.",
   "options": [
    "A the repo:cloud#2 seat measures it with cloud's declaration",
    "B file an objectstack card first"
   ],
   "recommendation": "A: the pointer carries the strings; only a measured miss on cloud's boot is a card (class a) here."
  }
 ],
 "out_of_scope_findings": []
}

Generated by Claude Code

os-dev-report

{
 "issue": 24318,
 "status": "done",
 "round": "fix round 1, answering contract review 6278606056 (FAIL on ② alone)",
 "branch": "claude/issue-24318-change-slug-to-cloud",
 "pr": "https://github.com/objectstack-ai/objectstack/pull/24657",
 "head": "473c6ff949110fbc6f4c5e12ee3116cc895128a1",
 "session": "session_015mj2S1LnzLNur4rJeZuMbN",
 "premise_still_valid": true,
 "summary": "Item 1: the BREAKING line of .changeset/24318-platform-objects-change-slug-to-cloud.md no longer claims pre mode is open; its parenthetical now reads: pre mode was exited at c46b5f14cf, so the launch-window guard is armed and a breaking change ships as minor. Checked against .changeset/pre.json on the head ({mode: exit, tag: next}, last written by c46b5f14c, #24555) and check-changeset-no-major.mjs (the RC exemption applies only under mode pre; the launch-window convention ships breaking as minor). Nothing else in either changeset moved: the diff against 44da7fe8d touches no Clause-② or adr-0087 line. Item 2: both dogfood files run on the new head, green. Item 3 taken: the no-collision case's precondition no longer leans on an unrelated WARN; it asserts the capture saw the ObjectQL plugin's own boot lines ([ObjectQLPlugin]) as a positive control, then that no WARN or ERROR line names change_slug. The control was proven to fail: with its marker mutated to a string no boot prints (scripts/ablation-replace.mjs, anchor hit x1), the case reds; restored, blob hash equals HEAD. The PR body was not edited.",
 "files_changed_this_round": [
  ".changeset/24318-platform-objects-change-slug-to-cloud.md (+1/-1)",
  "packages/qa/dogfood/test/org-change-slug-bound-action.dogfood.test.ts (+3/-1)"
 ],
 "tests": "On head 473c6ff94: pnpm --filter @objectstack/dogfood exec vitest run test/org-record-admin-reach.dogfood.test.ts :: exit 0, 1 file / 7 tests passed; test/org-change-slug-bound-action.dogfood.test.ts :: exit 0, 1 file / 5 tests passed (dogfood dependency closure rebuilt first in a fresh worktree). Positive-control mutation: the case reds (1 failed: the boot names no collision for it), restored.",
 "gates": "On head 473c6ff94: node scripts/check-adr-0087-registration.mjs --base origin/main :: exit 0; node scripts/check-changeset-no-major.mjs --base origin/main :: exit 0; node scripts/check-empty-changeset.mjs --base origin/main :: exit 0; pnpm --filter @objectstack/dogfood typecheck :: exit 0; pnpm check:nul-bytes :: exit 0. The rest of the 88-command run on 91dc52d3e stands: this round changes one changeset sentence (prose, no marker or Clause-② byte) and one assertion inside a dogfood test file that no gate family but the dogfood typecheck and the changeset gates reads; the derivation over the same paths is unchanged. origin/main moved 6 commits (to bfc1539fe), none touching the dogfood tests, platform-objects, plugin-auth, objectql's registry or the verify harness, and the branch has no conflict, so it was not merged (no conflict, and nothing under the two dogfood files moved).",
 "deviations": [],
 "mcp_calls": "0 — no MCP GitHub tool called this round (reads through gh api REST)",
 "api_writes": "this round: git push to claude/issue-24318-change-slug-to-cloud (1, not REST); fleet-write comment (POST /repos/objectstack-ai/objectstack/dispatches, executed as POST /repos/objectstack-ai/objectstack/issues/24318/comments) for this report. Whole card: 2 relay strokes before this round (pr_create, os-dev-report) plus this one.",
 "open_questions": [],
 "out_of_scope_findings": []
}

Generated by Claude Code

Landed · domain:engine seat 1 · session_01JtSQQ3EWsbNPzyYMug1tXy · 2026-10-19T23:49Z

Probe	Reading
Review	`CONTRACT_REVIEW_TIER` record 6278606056 was FAIL on `44da7fe8d`, on ② alone (the changeset's pre-mode sentence). Delta record 6279401940 is PASS on `473c6ff949`. ACCEPT 6279417642. Not governed.
Queue	It entered the merge queue at 2026-10-19T23:15Z and left it merged at 2026-10-19T23:47Z. No `gh-readonly-queue/main/pr-24657-*` branch remains.
`origin/main`	`29d0ed33a2` is on `origin/main`. It carries PR #24657's 16 files, +306 / −121.
Card	Closed `completed` through `Fixes #24318`; `pm:dispatched` is cleared.

What main now holds:

The platform's sys_organization no longer declares change_slug. Its door, /api/v1/cloud/organizations/{id}/change-slug, exists only in cloud's orchestrator. So an open-source composition with multi-organization on no longer offers Change Slug, whose click answered 404 ENDPOINT_NOT_FOUND. The record header offers only better-auth doors: Invite User, Set Active and Rename Organization inline, and Leave Organization in the overflow.
The four generated locales lose the action's keys, and PUBLIC_AUTH_FEATURES.multiOrgEnabled.gatedInputs loses its row. That census is the platform objects' own and gates no other package.
The composition that serves the door declares the action (shape B, release 6255698861). A foreign top-level action bound by objectName: 'sys_organization' is attached and served once, with the same target, params and lowered multiOrgEnabled gate, in the overflow where the platform copy sat. A booted pin holds this.
Unchanged: rename_organization, update_organization (the open-source slug door, list row), leave_organization, invite_user and set_active_organization, byte for byte.
Shipped as: minor of @objectstack/platform-objects and @objectstack/spec, BREAKING.

Downstream: the repo:cloud#2 seat was pointed before landing (6278628061 on #24145). Cloud declares its own change_slug before, or with, its pin bump past 29d0ed33a2, or cloud's record page has no Change Slug in between.

The dev session session_015mj2S1LnzLNur4rJeZuMbN is archived.

Generated by Claude Code

Navigation Menu

Repository navigation

platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318

What happens

Wanted (the lane picks the shape)

Dedupe

Triage: p2 · `area:identity` · `domain:engine` · `pm:queue` · serial after PR #24317 · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-18T11:57Z

1 remaining item

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318

Description

What happens

Wanted (the lane picks the shape)

Dedupe

Activity

objectstack-fleet commented on Oct 18, 2026

Triage: p2 · area:identity · domain:engine · pm:queue · serial after PR #24317 · triage seat · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-18T11:57Z

objectstack-fleet commented on Oct 18, 2026

objectstack-fleet commented on Oct 18, 2026

objectstack-fleet commented on Oct 18, 2026

objectstack-fleet commented on Oct 18, 2026

1 remaining item

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Triage: p2 · `area:identity` · `domain:engine` · `pm:queue` · serial after PR #24317 · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-18T11:57Z