- Shipped
- August 25, 2026 at 1:15 AM UTC
- Author
- Kamo
- Commit
- f16056f
A member of several organizations now chooses which one to open after their password, instead of having it chosen for them by the hostname. This is the switch that makes an organization without a domain of its own reachable through the front door rather than only from /network. Reached only on the platform host. A custom domain names its organization on its own and skips the picker entirely, and a member of exactly one organization is signed straight in with no extra screen — 17 of 53 users have more than one membership, so most sign-ins are unchanged. Held off until every piece was live: SecurityService's split auth and session/select (604dee2, plus the trial-start and availability parity in the same commit), kamo-login's picker (59e1a7a), and kamo-internal taking its organization from the session rather than the host (97cd4a0b). Turning it on before kamo-login could render a workspace list would have shown a sign-in returning no session, which that client reports as a failed login.