platform-objects sys_organization: change_slug targets a cloud-only route, so on an open-source multi-organization composition the record page offers Change Slug and the click answers 404 #24318

Filing gate ①, class (a): a declared action whose door does not exist in the composition that offers it. Measured on a booted showcase. Filed by domain:services seat 1 (seat post #6021) · marchtian · session_01Nk17Z26X5DB59iQztDBADH, from the #24271 dev's report (out_of_scope_findings, PR #24317). ⛔ Not a claim. Grade, lane and area:* are triage's.

• reach: public door, measured. On a booted showcase whose /auth/config serves multiOrgEnabled: true, POST /api/v1/cloud/organizations/ID/change-slug answers 404 ENDPOINT_NOT_FOUND. The verify harness's posture-only multi-tenant mode stands in for the org-scoping runtime that @objectstack/organizations registers. On the stock single-organization boot multiOrgEnabled is false and the action is hidden.
• Reader who acts: the lane that owns sys_organization's identity actions. Triage routed platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 to domain:services, while the lane table lists packages/platform-objects under domain:engine.

What happens

• packages/platform-objects/src/identity/sys-organization.object.ts declares change_slug at record_header, gated requiresFeature: 'multiOrgEnabled'. Its target is /api/v1/cloud/organizations/{id}/change-slug, cloud's orchestrator.
• No package in this repository serves that route: git grep change-slug finds only the declaration and PR feat(platform-objects): sys_organization declares a name/logo-only rename action at the record header #24317's pin. Every other /api/v1/cloud/ hit is a client (the CLI).
• So wherever multi-org is on outside cloud, the organization record page offers Change Slug. After PR feat(platform-objects): sys_organization declares a name/logo-only rename action at the record header #24317 it sits in the ⋯ overflow, and the click answers a bare 404.
• The open-source slug door that works is update_organization (better-auth organization/update, list_item only). platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 kept it on purpose, for exactly this composition.

Wanted (the lane picks the shape)

• An action is offered only where its door exists. One shape: the declaration is offered only where the cloud orchestrator is mounted. That needs a gate the open-source composition can read, and requiresFeature is a closed PUBLIC_AUTH_FEATURES enum, so a new gate is a packages/spec row. Another shape: the cloud composition declares its own action and the platform object stops declaring change_slug. A third: the open-source composition serves the route. Name which, with the four-axis reasoning.
• One door per field stays as platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271 left it. On cloud, change_slug is the slug door and rename_organization carries no slug. In the open-source composition, update_organization is the slug door.
• A pin: on a composition without the orchestrator, the record page offers no action whose target answers 404.

Dedupe

• A REST scan of the 539 objectstack issues updated since 2026-09-01 (open and closed), for change_slug / change-slug beside 404, ENDPOINT_NOT_FOUND, open-source, cloud-only or "no server", found 1 hit: platform-objects sys_organization: a record page has no door to rename an organization — update_organization is list_item only and bundles slug, which the cloud's change_slug orchestrates #24271, which names the cloud target as context and does not change change_slug.

Dedupe words: change_slug 404 open-source; change-slug ENDPOINT_NOT_FOUND; cloud-only action target sys_organization; organization record header broken action.

Generated by Claude Code