@run402/sdk 4.26.0 → 4.27.0

package/core-dist/profile-state.d.ts

@@ -11,11 +11,19 @@ export interface ActiveProjectState {
     profile: string;
     updated_at: string;
 }
+export interface ActiveOrgState {
+    org_id: string;
+    api_base: string;
+    principal?: string | null;
+    profile: string;
+    updated_at: string;
+}
 export interface ProfileState {
     version?: 1;
     active_project_id?: string;
     previous_active_project_id?: string;
     active_projects?: Record<string, ActiveProjectState>;
+    active_orgs?: Record<string, ActiveOrgState>;
     migrations?: Record<string, unknown>;
 }
 export declare function loadProfileState(path?: string): ProfileState;
@@ -25,5 +33,8 @@ export declare function activeProjectScopeKey(scope?: ActiveProjectScope): strin
 export declare function getActiveProjectId(path?: string, scope?: ActiveProjectScope): string | undefined;
 export declare function setActiveProjectId(projectId: string, path?: string, scope?: ActiveProjectScope): void;
 export declare function clearActiveProjectId(projectId: string, path?: string, scope?: ActiveProjectScope): void;
+export declare function getActiveOrgId(path?: string, scope?: ActiveProjectScope): string | undefined;
+export declare function setActiveOrgId(orgId: string, path?: string, scope?: ActiveProjectScope): void;
+export declare function clearActiveOrgId(path?: string, scope?: ActiveProjectScope): void;
 export declare function recordMigration(marker: string, value: unknown, path?: string): void;
 //# sourceMappingURL=profile-state.d.ts.map

package/core-dist/profile-state.js

@@ -126,6 +126,52 @@ export function clearActiveProjectId(projectId, path, scope = {}) {
         saveProfileState(state, p);
     });
 }
+// ---------------------------------------------------------------------------
+// Selected organization (add-cli-current-org, design D3).
+//
+// Scoped exactly like the active project id — by api_base, profile, and
+// principal — and stored in the SAME per-profile state.json, never in the
+// base-level config.json beside `active_wallet`. The chain is
+// wallet -> principal -> memberships, so a globally-selected org survives
+// `wallets use other` and then either 403s or, worse, silently resolves to a
+// valid-but-wrong org when both principals are members. Per-profile makes the
+// failure mode "this profile has no current org", which the ORG_REQUIRED
+// envelope already knows how to explain.
+//
+// There is deliberately no top-level `active_org_id` mirror: the project one
+// exists only to carry pre-scoping installs forward, and this key is new.
+// ---------------------------------------------------------------------------
+export function getActiveOrgId(path, scope = {}) {
+    const state = loadProfileState(path);
+    return state.active_orgs?.[activeProjectScopeKey(scope)]?.org_id;
+}
+export function setActiveOrgId(orgId, path, scope = {}) {
+    const p = path ?? getProfileStatePath();
+    withFileLock(p, () => {
+        const state = loadProfileState(p);
+        const key = activeProjectScopeKey(scope);
+        const resolved = defaultActiveProjectScope(scope);
+        state.active_orgs = state.active_orgs ?? {};
+        state.active_orgs[key] = {
+            org_id: orgId,
+            api_base: resolved.api_base,
+            principal: resolved.principal ?? null,
+            profile: resolved.profile,
+            updated_at: new Date().toISOString(),
+        };
+        saveProfileState(state, p);
+    });
+}
+export function clearActiveOrgId(path, scope = {}) {
+    const p = path ?? getProfileStatePath();
+    withFileLock(p, () => {
+        const state = loadProfileState(p);
+        const key = activeProjectScopeKey(scope);
+        if (state.active_orgs?.[key])
+            delete state.active_orgs[key];
+        saveProfileState(state, p);
+    });
+}
 export function recordMigration(marker, value, path) {
     const p = path ?? getProfileStatePath();
     withFileLock(p, () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@run402/sdk",
-  "version": "4.26.0",
+  "version": "4.27.0",
   "description": "Typed TypeScript client for the Run402 API. Kernel shared by the run402-mcp server, the run402 CLI, and user-deployed run402 functions.",
   "type": "module",
   "main": "dist/index.js",