[fclairamb]

What changed

• When auth.auto_personal_org is on (the SaaS default), a sign-in that would end on /no-org now creates a personal org first (order: pending invitation, email pattern, pending membership request, then auto-create; the user is OWNER). Applies to password/LDAP/passkey login, registration confirmation and provider logins; a second login never creates a second org. Deleting your last org still lands on /no-org.
• With the same setting on, /no-org hides "I'd rather join an existing organization" unless there is a join reason (?join=<slug>, a pending/rejected request).
• A pending OAuth/MCP authorization is resumed after an org-less user creates their first org.
• Confirming a registration now refreshes the user before navigating.

Decided by autopilot

• The spec was trimmed mid-run (colleague banner, cleanup job and instance setting dropped); the work was redone to the trimmed spec. Its open questions about those features are moot.

Notes for review

• Gated by the auth.auto_personal_org server setting (SP_AUTH_AUTO_PERSONAL_ORG, also a system parameter applied at startup): on by default in SaaS mode, off otherwise. Off, self-hosted keeps today's /no-org page, join card included. GET /api/v1/config exposes it as autoPersonalOrg. The e2e servers (CI, global-setup.ts, make dev-test) turn it on.
• Test mode: POST /test/users seeds a soft-deleted personal-org row so seeded users stay org-less; personalOrg: true gives real behaviour.
• The unreleased migration 031 comment for auto_personal_owner_uid still mentions the removed cleanup/banner.
• The spec's "an invite that failed" join reason has no /no-org signal today; only ?join=<slug> carries it.

Closes fclairamb/solidping-business#35

[codecov]

Codecov Report

❌ Patch coverage is 96.69967% with 10 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.79%. Comparing base (8344a9d) to head (797134a).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
.../internal/analytics/analyticstest/analyticstest.go	78.57%	3 Missing ⚠️
server/internal/scrub/scrub.go	86.36%	3 Missing ⚠️
server/internal/analytics/analytics.go	93.54%	2 Missing ⚠️
server/internal/errorreport/errorreport.go	96.55%	1 Missing ⚠️
server/internal/middleware/auth.go	75.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #716      +/-   ##
==========================================
+ Coverage   89.74%   89.79%   +0.04%     
==========================================
  Files        1297     1302       +5     
  Lines      132288   132534     +246     
==========================================
+ Hits       118728   119005     +277     
+ Misses      13551    13520      -31     
  Partials        9        9              

Files with missing lines	Coverage Δ
server/internal/app/sentry_scrub.go	100.00% <100.00%> (+9.09%)	⬆️
server/internal/app/server.go	92.02% <100.00%> (+<0.01%)	⬆️
server/internal/config/config.go	94.09% <100.00%> (+0.03%)	⬆️
server/internal/config/envvars.go	100.00% <100.00%> (ø)
server/internal/db/models/organization.go	100.00% <ø> (ø)
server/internal/db/postgres/personal_orgs.go	100.00% <100.00%> (ø)
server/internal/db/sqlite/personal_orgs.go	100.00% <100.00%> (ø)
server/internal/handlers/auth/join_policy.go	88.08% <100.00%> (+0.70%)	⬆️
server/internal/handlers/auth/personal_org.go	100.00% <100.00%> (ø)
server/internal/handlers/auth/service.go	90.01% <100.00%> (+0.19%)	⬆️
... and 10 more

... and 20 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.