@objectstack/plugin-auth 7.3.0 → 7.4.1

package/dist/index.d.mts

@@ -280,6 +280,19 @@ declare class AuthManager {
     setEmailService(email: IEmailService | undefined): void;
     /** @internal Used by callback closures. */
     private getEmailService;
+    /**
+     * Override the brand name surfaced in built-in auth emails (`{{appName}}`),
+     * sourced from the live `branding.workspace_name` setting.
+     *
+     * AuthPlugin calls this on `kernel:ready` (and again whenever the setting
+     * changes) once the `settings` service resolves. Passing `undefined` clears
+     * the override so resolution falls back to the configured `appName`. The
+     * value only reflects an *explicitly set* setting — when the operator has
+     * not customised it, AuthPlugin passes `undefined` so a deployment's
+     * configured `appName` (e.g. `OS_APP_NAME`) keeps precedence.
+     */
+    setAppName(name: string | undefined): void;
+    private appNameOverride?;
     /** @internal `{{appName}}` placeholder value for built-in templates. */
     private getAppName;
     /**

package/dist/index.d.ts

@@ -280,6 +280,19 @@ declare class AuthManager {
     setEmailService(email: IEmailService | undefined): void;
     /** @internal Used by callback closures. */
     private getEmailService;
+    /**
+     * Override the brand name surfaced in built-in auth emails (`{{appName}}`),
+     * sourced from the live `branding.workspace_name` setting.
+     *
+     * AuthPlugin calls this on `kernel:ready` (and again whenever the setting
+     * changes) once the `settings` service resolves. Passing `undefined` clears
+     * the override so resolution falls back to the configured `appName`. The
+     * value only reflects an *explicitly set* setting — when the operator has
+     * not customised it, AuthPlugin passes `undefined` so a deployment's
+     * configured `appName` (e.g. `OS_APP_NAME`) keeps precedence.
+     */
+    setAppName(name: string | undefined): void;
+    private appNameOverride?;
     /** @internal `{{appName}}` placeholder value for built-in templates. */
     private getAppName;
     /**

package/dist/index.js

@@ -1234,9 +1234,23 @@ var AuthManager = class {
   getEmailService() {
     return this.config.emailService;
   }
+  /**
+   * Override the brand name surfaced in built-in auth emails (`{{appName}}`),
+   * sourced from the live `branding.workspace_name` setting.
+   *
+   * AuthPlugin calls this on `kernel:ready` (and again whenever the setting
+   * changes) once the `settings` service resolves. Passing `undefined` clears
+   * the override so resolution falls back to the configured `appName`. The
+   * value only reflects an *explicitly set* setting — when the operator has
+   * not customised it, AuthPlugin passes `undefined` so a deployment's
+   * configured `appName` (e.g. `OS_APP_NAME`) keeps precedence.
+   */
+  setAppName(name) {
+    this.appNameOverride = name?.trim() || void 0;
+  }
   /** @internal `{{appName}}` placeholder value for built-in templates. */
   getAppName() {
-    return this.config.appName ?? "ObjectStack";
+    return this.appNameOverride ?? this.config.appName ?? "ObjectStack";
   }
   /**
    * Get the underlying better-auth instance
@@ -1461,6 +1475,10 @@ var AuthPlugin = class {
       // owner of its registration since it loads first among the trio
       // (auth + security + audit) that supplies the underlying objects.
       apps: [import_apps.SETUP_APP, import_apps.STUDIO_APP, import_apps.ACCOUNT_APP],
+      // ADR-0029 D7 — the Setup App is a shell of group anchors; its entries
+      // for platform-objects-owned objects are contributed here. Capability
+      // plugins (e.g. plugin-webhooks) contribute their own slots' entries.
+      navigationContributions: import_apps.SETUP_NAV_CONTRIBUTIONS,
       // Slotted record-detail pages for system objects — currently
       // sys_organization gets a Members / Invitations / Teams tab strip
       // (see SysOrganizationDetailPage for the rationale and the
@@ -1496,6 +1514,32 @@ var AuthPlugin = class {
           } catch {
             ctx.logger.info("Auth: no email service registered \u2014 auth callbacks will log instead of sending");
           }
+          try {
+            const settings = ctx.getService("settings");
+            if (settings && typeof settings.get === "function") {
+              const applyBrand = async () => {
+                try {
+                  const resolved = await settings.get("branding", "workspace_name", {});
+                  const explicit = resolved && resolved.source !== "default" ? resolved.value : void 0;
+                  this.authManager?.setAppName(
+                    typeof explicit === "string" ? explicit : void 0
+                  );
+                } catch (err) {
+                  ctx.logger.warn(
+                    "Auth: failed to apply branding.workspace_name: " + (err?.message ?? err)
+                  );
+                }
+              };
+              await applyBrand();
+              if (typeof settings.subscribe === "function") {
+                settings.subscribe("branding", () => {
+                  void applyBrand();
+                });
+                ctx.logger.info("Auth: bound appName to settings namespace=branding");
+              }
+            }
+          } catch {
+          }
         }
         let httpServer = null;
         try {