diff --git a/bootstrap/app.php b/bootstrap/app.php
index 63f3d62..ec178c3 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -16,15 +16,16 @@ return Application::configure(basePath: dirname(__DIR__))
         $middleware->redirectGuestsTo(fn (Request $request) => route('sso.connect', [
             'redirect' => $request->fullUrl(),
         ]));
+        // NOTE: Middleware::alias() REPLACES the alias map (it is not additive), so every alias must be
+        // registered in a single call. Splitting these into two alias() calls drops 'auth.service' and
+        // breaks all service-to-service routes (auth.service:transfer) with "Target class does not exist".
         $middleware->alias([
             'auth.service' => \App\Http\Middleware\AuthenticateService::class,
+            'platform.session' => \App\Http\Middleware\EnsurePlatformSession::class,
         ]);
         $middleware->web(append: [
             \App\Http\Middleware\SetActingAccount::class,
         ]);
-        $middleware->alias([
-            'platform.session' => \App\Http\Middleware\EnsurePlatformSession::class,
-        ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         //