@wordbricks/velen 0.2.13-darwin-arm64 → 0.2.14-darwin-arm64

package/README.md

@@ -12,18 +12,22 @@ Runtime config:
 
 - On Unix-like systems, the user config file is `${XDG_CONFIG_HOME:-~/.config}/velen/config.toml`.
 - On Windows, the user config file is `%APPDATA%\\velen\\config.toml`.
+- Named profiles use `${XDG_CONFIG_HOME:-~/.config}/velen/profiles/<profile>/config.toml` on Unix-like systems and `%APPDATA%\\velen\\profiles\\<profile>\\config.toml` on Windows.
+- Select a profile with `--profile <profile>` or `VELEN_PROFILE`; `--profile` takes precedence. The default profile keeps using the legacy flat paths above.
 - The current persisted keys are `active_org` and `request_timeout_sec`.
 - Runtime config is resolved in this order: built-in defaults -> user config file -> internal typed runtime overrides.
 - `velen org use <org>` persists `active_org`. Passing `--org <org>` for a command takes precedence over the stored `active_org` value for that invocation.
-- `velen auth logout` clears both the stored auth session and the stored `active_org`, so later org-scoped commands fail explicitly until a new org is selected.
+- `velen auth logout` clears both the stored auth session and the stored `active_org` for the selected profile, so later org-scoped commands fail explicitly until a new org is selected.
 
 Credential storage:
 
 - On Unix-like systems, the CLI persists the full auth session blob to `${XDG_CONFIG_HOME:-~/.config}/velen/auth.json`.
 - On Windows, the CLI persists the full auth session blob to `%APPDATA%\\velen\\auth.json`.
+- Named profiles use `${XDG_CONFIG_HOME:-~/.config}/velen/profiles/<profile>/auth.json` on Unix-like systems and `%APPDATA%\\velen\\profiles\\<profile>\\auth.json` on Windows.
 - `auth.json` stores the user identity, bearer token, session timing metadata, and the last refresh timestamp.
 - Authenticated commands now run an explicit auth-session lifecycle before building an authenticated API client:
   load `auth.json` on startup -> call the CLI session refresh contract -> persist the returned token and timing metadata.
+- `VELEN_ACCESS_TOKEN` remains invocation-only and takes precedence over the selected profile's stored auth session without implicitly writing to it.
 
 Version cache:
 

package/package.json

@@ -20,7 +20,7 @@
     "url": "git+https://github.com/wordbricks/velen.git",
     "directory": "apps/cli"
   },
-  "version": "0.2.13-darwin-arm64",
+  "version": "0.2.14-darwin-arm64",
   "engines": {
     "node": ">=18"
   }