@@ -0,0 +1,26 @@
+---
+'@object-ui/app-shell': patch
+---
+
+fix(app-shell): console actions supply the spec-declared `${ctx.org.*}` scope (objectui#10918)
+
+`@objectstack/spec` declares `${ctx.org.id}` in an action's `target`, and lists the
+interpolation scope as `ctx.user.*`, `ctx.org.*`, `ctx.recordId` and `ctx.selection`.
+The console's action contexts never carried `org`, so the `org` the action runner
+interpolates from was empty. A target such as
+`/apps/cloud_control/sys_organization/record/${ctx.org.id}` navigated to
+`/apps/cloud_control/sys_organization/record/` with the id blanked out.
+
+Two providers were missing it:
+
+- `useConsoleActionRuntime`, the shared runtime behind the console's root action
+  provider, object views, SDUI pages and declared action bars. It published the active
+  organization only under the undeclared key `activeOrganization`.
+- The record page's own action provider in `RecordDetailView`, which carried only
+  `record`, `objectName` and `user`.
+
+Both now publish the active organization under `org`, with the fields `id`, `slug` and
+`name`, through one shared projection. `${ctx.org.id}` in a console action target
+resolves to the active organization's id. With no active organization it still resolves
+to an empty string. The existing `activeOrganization` key on the shared runtime is
+unchanged, and the record page gains no key besides `org`.
@@ -0,0 +1,118 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/**
+ * objectui#10918 regression pin — the console action runtime supplies the
+ * spec-declared `${ctx.org.*}` interpolation scope.
+ *
+ * `ActionSchema.target` in `@objectstack/spec` (`ui/action.zod.ts`) declares
+ * `${ctx.org.id}` as a member of the action context, and the `onSuccess`
+ * contract lists the same scope as "`ctx.user.*`, `ctx.org.*`, `ctx.recordId`,
+ * `ctx.selection`". The runtime used to publish the active organization only
+ * under the undeclared key `activeOrganization`, so `ActionRunner`'s
+ * interpolation scope carried an empty `org` and a declared target such as
+ * `/apps/cloud_control/sys_organization/record/${ctx.org.id}` navigated to a
+ * path with the id blanked out.
+ *
+ * Driven end-to-end: the REAL `ConsoleActionRuntimeProvider` (and so the real
+ * `<ActionProvider>` and `ActionRunner` target interpolation) runs a
+ * `type: 'url'` action from a `useAction()` consumer, and the navigation the
+ * runtime hands to the router is what is asserted.
+ */
+
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { render, screen, fireEvent, waitFor } from '@testing-library/react';
+import React from 'react';
+
+const navigateSpy = vi.fn();
+vi.mock('react-router-dom', () => ({ useNavigate: () => navigateSpy }));
+
+// `activeOrganization` is what `useAuth()` answers — the auth layer's own
+// `AuthOrganization` shape. Each test sets it before rendering.
+let activeOrganization: Record<string, unknown> | null = null;
+vi.mock('@object-ui/auth', async (importOriginal) => ({
+  ...(await importOriginal<Record<string, unknown>>()),
+  useAuth: () => ({ user: { id: 'u1', name: 'User', image: null }, activeOrganization }),
+  createAuthenticatedFetch: () => vi.fn(),
+}));
+
+vi.mock('@object-ui/i18n', async (importOriginal) => ({
+  ...(await importOriginal<Record<string, unknown>>()),
+  useObjectLabel: () => ({
+    fieldLabel: (_o: any, _n: any, l: any) => l,
+    fieldOptionLabel: (_o: any, _f: any, _v: any, l: any) => l,
+    actionParamText: (_o: any, _a: any, _p: any, _attr: any, fallback: any) => fallback,
+    actionParamOptionLabel: (_o: any, _a: any, _p: any, _v: any, fallback: any) => fallback,
+    actionDescription: (_o: any, _a: any, fallback: any) => fallback,
+  }),
+  useObjectTranslation: () => ({
+    t: (key: string, options?: any) => String(options?.defaultValue ?? key),
+  }),
+}));
+
+// The client modal transport and the dialogs are not exercised here — inert
+// stubs keep the hook module's import graph cheap.
+vi.mock('../useActionModal', () => ({
+  useActionModal: () => ({
+    modalHandler: vi.fn(async () => ({ success: true })),
+    modalElement: null,
+    closeModal: () => {},
+    resolveModalTarget: vi.fn(async () => null),
+  }),
+}));
+vi.mock('../../views/ActionConfirmDialog', () => ({ ActionConfirmDialog: () => null }));
+vi.mock('../../views/ActionParamDialog', () => ({ ActionParamDialog: () => null }));
+vi.mock('../../views/ActionResultDialog', () => ({ ActionResultDialog: () => null }));
+vi.mock('../../views/FlowRunner', () => ({ FlowRunner: () => null }));
+
+import { ConsoleActionRuntimeProvider } from '../useConsoleActionRuntime';
+import { useAction } from '@object-ui/react';
+
+// The shape cloud's welcome-page "invite members" CTA declares (objectui#10918).
+const ORG_RECORD_TARGET = '/apps/cloud_control/sys_organization/record/${ctx.org.id}';
+
+function Probe() {
+  const { execute } = useAction();
+  return (
+    <button onClick={() => execute({ type: 'url', name: 'open_org', target: ORG_RECORD_TARGET } as any)}>
+      run
+    </button>
+  );
+}
+
+function runOrgTargetAction() {
+  render(
+    <ConsoleActionRuntimeProvider dataSource={{}} objects={[]}>
+      <Probe />
+    </ConsoleActionRuntimeProvider>,
+  );
+  fireEvent.click(screen.getByText('run'));
+}
+
+beforeEach(() => {
+  navigateSpy.mockReset();
+  activeOrganization = null;
+});
+
+describe('useConsoleActionRuntime — the spec-declared ctx.org scope (objectui#10918)', () => {
+  it('interpolates ${ctx.org.id} in an action target to the active organization id', async () => {
+    activeOrganization = { id: 'org_acme', slug: 'acme', name: 'Acme Inc.' };
+
+    runOrgTargetAction();
+
+    await waitFor(() => expect(navigateSpy).toHaveBeenCalledTimes(1));
+    expect(navigateSpy.mock.calls[0][0]).toBe('/apps/cloud_control/sys_organization/record/org_acme');
+  });
+
+  it('interpolates ${ctx.org.id} to an empty segment, never a literal null, when no organization is active', async () => {
+    runOrgTargetAction();
+
+    await waitFor(() => expect(navigateSpy).toHaveBeenCalledTimes(1));
+    expect(navigateSpy.mock.calls[0][0]).toBe('/apps/cloud_control/sys_organization/record/');
+  });
+});
@@ -53,6 +53,7 @@ import { resolvePageVarTokens } from '../utils/resolvePageVarTokens.js';
 import { interpretFlowResponse, judgeFlowLaunch } from '../utils/flowResponse.js';
 import { createConsoleServerActionHandler } from '../utils/consoleServerAction.js';
 import { modalTargetRefusalMessage } from '../utils/modalTargetDiagnostics.js';
+import { actionContextOrg } from '../utils/actionContextOrg.js';
 import type { ConsoleActionDispatch } from '../consoleActionDispatch.js';
 
 const FALLBACK_USER = { id: 'current-user', name: 'Demo User', isPlatformAdmin: false };
@@ -736,9 +737,13 @@ export function useConsoleActionRuntime(opts: ConsoleActionRuntimeOptions): Cons
       // Backend origin — lets `type: 'url'` actions issue full-page
       // navigations to API endpoints across origins in dev.
       apiBase: (import.meta as any).env?.VITE_SERVER_URL || '',
-      activeOrganization: activeOrganization
-        ? { id: activeOrganization.id, slug: activeOrganization.slug, name: activeOrganization.name }
-        : null,
+      // The spec-declared `${ctx.org.*}` scope (`ActionSchema.target` and
+      // `onSuccess.navigate` in `@objectstack/spec` `ui/action.zod.ts`).
+      // `ActionRunner.buildInterpolationContext` reads `org` from here, so
+      // without this key `${ctx.org.id}` interpolated to an empty string
+      // (objectui#10918).
+      org: actionContextOrg(activeOrganization),
+      activeOrganization: actionContextOrg(activeOrganization),
     },
     onConfirm: confirmHandler,
     onToast: toastHandler,
 
@@ -0,0 +1,33 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+import type { AuthOrganization } from '@object-ui/auth';
+
+/**
+ * The ONE projection of the active organization onto an action context's
+ * spec-declared `org` key (objectui#10918).
+ *
+ * `@objectstack/spec` (`ui/action.zod.ts`) declares `${ctx.org.id}` in an
+ * action `target` and lists the interpolation scope as `ctx.user.*`,
+ * `ctx.org.*`, `ctx.recordId` and `ctx.selection`.
+ * `ActionRunner.buildInterpolationContext` builds that `org` from the context
+ * it is handed, so every console surface that mounts its own `ActionProvider`
+ * has to put the organization there:
+ *
+ * - `hooks/useConsoleActionRuntime.tsx`, the shared runtime (the console's root
+ *   provider, object views, SDUI pages and declared action bars);
+ * - `views/RecordDetailView.tsx`, the record page's own provider.
+ *
+ * Both call this helper, so the two cannot drift into two shapes. It carries
+ * the identity fields the platform's `OrganizationSchema` names (`id`, `slug`,
+ * `name`), or `null` when no organization is active. `${ctx.org.id}` then
+ * interpolates to an empty string, never a literal `null`.
+ */
+export function actionContextOrg(org: AuthOrganization | null | undefined) {
+  return org ? { id: org.id, slug: org.slug, name: org.name } : null;
+}