@objectstack/plugin-auth 6.8.0 → 6.9.0

package/README.md

@@ -300,5 +300,4 @@ pnpm test
 
 ## License
 
-BUSL-1.1 with a four-year conversion to Apache-2.0. See
-[LICENSING.md](../../../LICENSING.md).
+Apache-2.0. See [LICENSING.md](../../../LICENSING.md).

package/dist/index.js

@@ -937,14 +937,18 @@ var AuthManager = class {
         // never seed `sys_environment`) keep working: any lookup error
         // is treated as "no envs to protect".
         organizationHooks: {
-          // Gate fresh organization creation behind `OS_MULTI_ORG_ENABLED`.
+          // Gate fresh organization creation behind the multi-org flag.
           // The plugin itself is always installed (so list/update/invite endpoints
           // keep responding); only the `create` operation is denied when the
-          // deployment is provisioned in single-org mode. Default is enabled
-          // to preserve historical behaviour.
+          // deployment is provisioned in single-org mode. Resolution order:
+          // 1. explicit `OS_MULTI_ORG_ENABLED` (wins for backwards compat),
+          // 2. else `OS_MULTI_TENANT` (multi-tenant deployments are always
+          //    multi-org), default `'false'` → single-org / per-env runtime.
           beforeCreateOrganization: async () => {
+            const env = globalThis?.process?.env ?? {};
+            const explicit = env.OS_MULTI_ORG_ENABLED;
             const flag = String(
-              globalThis?.process?.env?.OS_MULTI_ORG_ENABLED ?? "true"
+              explicit ?? env.OS_MULTI_TENANT ?? "false"
             ).toLowerCase();
             if (flag === "false") {
               const { APIError } = await import("better-auth/api");
@@ -1335,8 +1339,9 @@ var AuthManager = class {
       requireEmailVerification: emailPasswordConfig.requireEmailVerification ?? false
     };
     const pluginConfig = this.config.plugins ?? {};
+    const multiOrgEnv = globalThis?.process?.env ?? {};
     const multiOrgEnabled = String(
-      globalThis?.process?.env?.OS_MULTI_ORG_ENABLED ?? "true"
+      multiOrgEnv.OS_MULTI_ORG_ENABLED ?? multiOrgEnv.OS_MULTI_TENANT ?? "false"
     ).toLowerCase() !== "false";
     const DEFAULT_TERMS_URL = "https://objectstack.ai/terms";
     const DEFAULT_PRIVACY_URL = "https://objectstack.ai/privacy";