Local vs hosted

Sutraya runs in two auth modes:

Mode	Behavior
local (default for laptop/Docker)	Single implicit Local Reader — no login UI
hosted	Multi-user email/password via Better Auth

Personal data always scopes to a user id — in local mode that id is the Local Reader.

Hosted checklist (operators)

Set AUTH_MODE=hosted and BETTER_AUTH_SECRET.
Set SUTRAYA_ADMIN_EMAILS before first deploy so someone can open Settings.
Optionally claim Local Reader content into a new signed-in account after flipping modes.
Configure Usage (require login for AI, quotas) and Accounts as needed.