@settlemint/dalp-cli 3.1.19-main.35200539037 → 3.1.19-main.35210702637

package/README.md

@@ -67,12 +67,12 @@ dalp get monitoring api request-logs stream
 
 ## Architecture
 
-| Concern   | Implementation                                                     |
-| --------- | ------------------------------------------------------------------ |
-| Framework | Incur + Zod                                                        |
-| HTTP      | `createDalpClient` + route ids from `@settlemint/dalp-sdk/routes`  |
-| Docs      | Compile-time OpenAPI surface                                       |
-| Auth      | Device login → API key; `X-Organization-Id` from stored active org |
+| Concern   | Implementation                                                                  |
+| --------- | ------------------------------------------------------------------------------- |
+| Framework | Incur + Zod                                                                     |
+| HTTP      | `createDalpClient` + route ids from `@settlemint/dalp-sdk/routes`               |
+| Docs      | Compile-time OpenAPI surface                                                    |
+| Auth      | Device login → API key for one organization; `org switch` accepts only that org |
 
 ## License
 

package/dist/dalp.js

@@ -41909,7 +41909,7 @@ var WEBHOOK_MANIFEST_VERSION = Webhook.MANIFEST_VERSION;
 // ../sdk/package.json
 var package_default = {
   name: "@settlemint/dalp-sdk",
-  version: "3.1.19-main.35200539037",
+  version: "3.1.19-main.35210702637",
   private: false,
   description: "Fully typed SDK for the DALP tokenization platform API",
   homepage: "https://settlemint.com",
@@ -107673,7 +107673,7 @@ function commandsFromErrorHints(input) {
   }
   const org = category === "permission" || code.includes("ORGANIZATION") || code.includes("ACTIVE_ORG") || fix.includes("organization") || fix.includes("org ");
   if (org) {
-    commands.push({ command: "org switch", description: "Select an active organization" });
+    commands.push({ command: "org switch", description: "Save the key's organization as active" });
     commands.push({ command: "whoami", description: "Show current user and organization" });
   }
   if (commands.length === 0 && (category === "client" || category === "config")) {
@@ -107933,7 +107933,7 @@ async function runCommand(context, operation, errorContext = UNKNOWN_COMMAND_ERR
 // package.json
 var package_default2 = {
   name: "@settlemint/dalp-cli",
-  version: "3.1.19-main.35200539037",
+  version: "3.1.19-main.35210702637",
   private: false,
   description: "CLI for the Digital Asset Lifecycle Platform \u2014 manage tokens, identities, compliance, and more from the command line.",
   homepage: "https://settlemint.com",
@@ -108493,7 +108493,7 @@ Open this URL in your browser:
           description: "You're logged in. Try:",
           commands: [
             { command: "whoami", description: "View current user" },
-            { command: "org switch", description: "Select an organization" },
+            { command: "org switch", description: "Save the key's organization as active" },
             { command: "tokens list", description: "List tokens" }
           ]
         }
@@ -108547,6 +108547,9 @@ async function authRequest(apiUrl, credentials, route, init) {
 }
 
 // src/commands/org.ts
+var ApiKeyOrganizationSchema = object({
+  metadata: object({ organizationId: string2().min(1).optional() }).nullish()
+});
 var orgCommand = create("org", {
   description: "Active organization for organization-scoped requests",
   vars: cliVars
@@ -108572,7 +108575,7 @@ orgCommand.command("list", {
   }
 });
 orgCommand.command("switch", {
-  description: "Set the active organization persisted for subsequent CLI requests",
+  description: "Save the organization of the stored API key as the active organization",
   args: object({
     organizationId: string2().describe("Organization id to activate")
   }),
@@ -108586,10 +108589,22 @@ orgCommand.command("switch", {
       });
     }
     return runCommand(c, (async () => {
-      await authRequest(credentials.apiUrl, credentials, "/organization/set-active", {
-        method: "POST",
-        body: { organizationId: c.args.organizationId }
-      });
+      const key = ApiKeyOrganizationSchema.safeParse(await authRequest(credentials.apiUrl, credentials, `/api-key/get?id=${encodeURIComponent(credentials.apiKeyId)}`));
+      const keyOrganizationId = key.data?.metadata?.organizationId;
+      if (keyOrganizationId === undefined) {
+        return c.error({
+          code: "KEY_HAS_NO_ORGANIZATION",
+          message: "The stored API key names no organization. Run 'dalp login' to get a key for one.",
+          retryable: false
+        });
+      }
+      if (keyOrganizationId !== c.args.organizationId) {
+        return c.error({
+          code: "ORGANIZATION_NOT_ON_KEY",
+          message: `The stored API key belongs to \`${keyOrganizationId}\`, not \`${c.args.organizationId}\`. Run 'dalp login' with \`${c.args.organizationId}\` as the active organization to get a key for it.`,
+          retryable: false
+        });
+      }
       const latest = await loadCredentials() ?? credentials;
       await saveCredentials({
         ...latest,
@@ -108598,13 +108613,13 @@ orgCommand.command("switch", {
       await saveGlobalConfig({ defaultOrg: c.args.organizationId });
       return {
         activeOrgId: c.args.organizationId,
-        message: "Active organization saved. Subsequent requests send X-Organization-Id."
+        message: "Active organization saved. It matches the organization of the stored API key."
       };
     })());
   }
 });
 orgCommand.command("current", {
-  description: "Show the active organization id used for X-Organization-Id",
+  description: "Show the active organization id saved with the stored credentials",
   run(c) {
     return {
       activeOrgId: c.var.credentials?.activeOrgId ?? null,
@@ -109268,4 +109283,4 @@ if (false) {}
 // src/bin.ts
 await cli.serve();
 
-//# debugId=262F96FDC3FFFE8164756E2164756E21
+//# debugId=8F7A30A4856BC86264756E2164756E21