docs(organizations): correct the enterprise/closed-source spellings the card's pattern could not see (#16718)

The card's measurement is a case-sensitive regex over
`enterprise (@objectstack/organizations|multi-org|organizations)` plus two
`closed-source`/`cloud-private` forms. Re-running it case-INSENSITIVELY, and
widening to the neighbouring `cloud-private` / `enterprise package` spellings
inside the two files the card names as its worst sites, turns up nine more
population-1 statements. All nine are in files the previous commit already
corrects; every one is a comment.

- `cli/src/commands/serve.ts` (×5)
  · the host-importer docblock used `@objectstack/organizations` as THE example
    of "a cloud-private package the framework cannot see" — the same reasoning
    #16539 already applied to the dogfood probe: it is no longer a name this
    repo can use as an example of something a host root does not have. The
    example is now framed on what actually decides resolution (the host app's
    declaration), with ADR-0132's two-packages fact named.
  · the cloud#1013 narrative said the load "never found the cloud-private
    package" — true of 2026-07, asserted in the present tense. Now
    "then-cloud-private": the history is kept, the present claim is dropped.
  · the live Stage-1 mount comment said "This package is cloud-private" in the
    boot path itself. Now APP-DECLARED, citing ADR-0132 D3 — which build of the
    name a deployment gets is the host manifest's call, not `serve`'s.
  · the ADR-0093 D5 fail-fast comment said "the enterprise package can't
    provide tenant isolation".
- `plugin-dev/src/dev-plugin.ts` — `ENTERPRISE @objectstack/organizations`, in
  capitals. The card's pattern is case-sensitive, so this hit was invisible to
  the 65-occurrence count while sitting two lines above one that was counted.
- `plugin-auth/src/auth-plugin.ts` — "so the enterprise package needs no change
  to light it up", on the `org-scoping` presence probe.
- `qa/dogfood/test/enterprise-organizations.ts` — the doc heading on
  `ORGANIZATIONS_PKG` still opened "The enterprise multi-org package", directly
  contradicted by the ⚠️ #16539 note two lines below it.
- `qa/dogfood/test/rls-multitenant.dogfood.test.ts` — "moved to the ENTERPRISE
  package ... not part of this open workspace". Both halves false since #16215.
  The skip is unchanged and its real reason is now stated: the gate needs the
  runtime resolvable FROM THE APP UNDER TEST, which is what
  `organizationsAvailable` probes.

⛔ No behaviour change: every hunk is a comment. Populations 2 and 3 are
untouched — see the PR body for the per-site accounting.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: hotlong

packages/cli/src/commands/serve.ts

@@ -790,10 +790,12 @@ function anchorServedApp(configArg: string): { configPath: string; configExists:
  * Node ESM resolves a bare `import(pkg)` against the IMPORTER's own realpath.
  * The CLI is reached through a workspace/`link:` dependency, so that realpath is
  * inside the FRAMEWORK workspace: a bare import can only see what the framework
- * itself installed. A package supplied by the app being served — a cloud-private
- * one such as `@objectstack/organizations`, a distribution one such as
- * `@objectstack/service-cluster`, or anything a customer installs into their own
- * project — is invisible to it no matter what the host app declares.
+ * itself installed. A package supplied by the app being served — an app-declared
+ * one such as `@objectstack/organizations` (open core since ADR-0132; a
+ * commercial deployment resolves that same name to its own private build), a
+ * distribution one such as `@objectstack/service-cluster`, or anything a customer
+ * installs into their own project — is invisible to it no matter what the host
+ * app declares.
  *
  * #4719: "resolve from the host root" means "resolve what the host root
  * DECLARES". The host lookup was a CJS require, CJS honours NODE_PATH, and the
@@ -815,7 +817,7 @@ function anchorServedApp(configArg: string): { configPath: string; configExists:
  *
  *   • cloud#1013 — the binding sat below the AUTH block, so the enterprise
  *     organizations load resolved in the framework workspace, never found the
- *     cloud-private package, and every walled-posture deployment hit the
+ *     then-cloud-private package, and every walled-posture deployment hit the
  *     ADR-0093 D5 fail-fast and exited 1.
  *   • #10645 — the binding sat below the CLUSTER block, so `serve` could not load
  *     an app-declared `@objectstack/service-cluster*` at all: on the published EE
@@ -3731,18 +3733,20 @@ export default class Serve extends Command {
               // ── Stage 1: import. Failure here = the package is ABSENT. ──
               try {
                 // Resolve from the HOST APP (cloud#1013). This package is
-                // cloud-private: it is installed in the served app's
-                // node_modules, never in the framework workspace the CLI's own
-                // realpath points at, so a bare import here could never find it
-                // — `objectstack serve` failed the fail-fast below on EVERY
-                // self-hosted walled-posture deployment, and the only way past
-                // it was OS_ALLOW_DEGRADED_TENANCY=1, i.e. exactly the unwalled
-                // state D5 exists to prevent. The host app declares the package;
-                // this resolves it from there.
+                // APP-DECLARED (ADR-0132 D3 — which build of the name a
+                // deployment gets is the host manifest's call, not `serve`'s):
+                // it is installed in the served app's node_modules, never in
+                // the framework workspace the CLI's own realpath points at, so a
+                // bare import here could never find it — `objectstack serve`
+                // failed the fail-fast below on EVERY self-hosted walled-posture
+                // deployment, and the only way past it was
+                // OS_ALLOW_DEGRADED_TENANCY=1, i.e. exactly the unwalled state D5
+                // exists to prevent. The host app declares the package; this
+                // resolves it from there.
                 orgMod = await importFromHost(organizationsPkg);
               } catch (orgErr) {
                 // ADR-0093 D5 — degraded tenancy fails fast. Multi-org was
-                // requested but the enterprise package can't provide tenant
+                // requested but the organizations package can't provide tenant
                 // isolation: `tenant_isolation` RLS would be stripped and every
                 // org boundary inert. A deployment that asked for isolation must
                 // NOT serve traffic pretending to have it (ADR-0049 at the

packages/plugins/plugin-auth/src/auth-plugin.ts

@@ -552,8 +552,8 @@ export class AuthPlugin implements Plugin {
     // the plugin's first service registration (consumers and tests rely on that
     // ordering). The `isolated` posture derives `isolationActive` from the
     // presence of the `org-scoping` service (registered by
-    // @objectstack/organizations when installed), so the enterprise package
-    // needs no change to light it up; `group` is enforced by the open engine and
+    // @objectstack/organizations when installed), so that package needs no
+    // change to light it up; `group` is enforced by the open engine and
     // never probes. `getService` is a cheap registry lookup and org-scoping
     // registers AFTER plugin-auth, so the probe is deferred to first read
     // (start()/request time).

packages/plugins/plugin-dev/src/dev-plugin.ts

@@ -685,8 +685,8 @@ export class DevPlugin implements Plugin {
     let organizationsPlugin: Plugin | undefined;
 
     // 5. Security Plugin (RBAC, RLS, field-level masking)
-    // OrganizationsPlugin (when multi-org; ENTERPRISE `@objectstack/organizations`,
-    // ADR-0105 D12) MUST register BEFORE SecurityPlugin because
+    // OrganizationsPlugin (when multi-org; `@objectstack/organizations`, ADR-0105
+    // D12 as amended by ADR-0132) MUST register BEFORE SecurityPlugin because
     // SecurityPlugin.start() probes the `org-scoping` service (the historical
     // name the organizations plugin keeps registering) and caches the result for
     // the lifetime of the plugin.

packages/qa/dogfood/test/enterprise-organizations.ts

@@ -96,7 +96,7 @@
 import { createHostImporter, hostImportFailureKind } from '@objectstack/types/node';
 
 /**
- * The enterprise multi-org package (ADR-0105 D12) these gates need.
+ * The multi-org package (ADR-0105 D12 as amended by ADR-0132) these gates need.
  *
  * ⚠️ #16539: no longer cloud-private — ADR-0132 / #16215 brought it back to open core as
  * `packages/plugins/organizations`. It stays the SUBJECT of this probe (the app

packages/qa/dogfood/test/rls-multitenant.dogfood.test.ts

@@ -53,9 +53,13 @@ import crmStack from '@objectstack/example-crm';
 import { bootStack, type VerifyStack } from '@objectstack/verify';
 import { runRlsProofs, formatRlsReport, type RlsReport } from '@objectstack/verify';
 
-// The multi-org runtime moved to the ENTERPRISE `@objectstack/organizations`
-// package (ADR-0105 D12) — not part of this open workspace. Skip (loudly) when
-// it isn't linked in; enterprise/cloud CI, which ships the package, runs this.
+// The multi-org runtime lives in `@objectstack/organizations` — ADR-0105 D12 as
+// amended by ADR-0132: open core since #16215 (Apache-2.0, no licence check of
+// any kind), while a commercial deployment resolves that same name to its own
+// private, licence-gated build. What this gate still needs is that runtime
+// RESOLVABLE FROM THE APP UNDER TEST, which is what `organizationsAvailable`
+// probes — skip (loudly) when it is not; cloud CI, which ships the package,
+// runs this.
 //
 // #4700: the probe used to be a bare `import()`, which Node ESM resolves against
 // this file's own realpath in the framework workspace — so it answered "not