@wordbricks/velen 0.2.39 → 0.2.40

package/README.md

@@ -18,14 +18,39 @@ Runtime config:
 - The current persisted keys are `active_org` and `request_timeout_sec`; the
   built-in request timeout defaults to 180 seconds.
 - Runtime config is resolved in this order: built-in defaults -> user config file -> internal typed runtime overrides.
-- `velen org use <org>` persists `active_org`. Passing `--org <org>` for a command takes precedence over the stored `active_org` value for that invocation.
+- Org selection is resolved in this order: `--org <slug>` -> `VELEN_ORG` -> the
+  nearest workspace `.velen.config.json` -> the selected profile's stored
+  `active_org`. Org-scoped commands fail explicitly when none of those sources
+  selects an org.
+- Workspace discovery starts in the current directory, walks upward, uses the
+  nearest `.velen.config.json`, and stops after checking the Git root. A nested
+  workspace config can therefore override the repository-root config.
+- Workspace config is versioned JSON:
+
+  ```json
+  {
+    "version": 1,
+    "org": "acme"
+  }
+  ```
+
+- `velen org use <org>` persists the user default in `config.toml`.
+  `velen org use <org> --workspace` writes `.velen.config.json` at the current
+  Git workspace root. `velen org current` reports the selected source and the
+  workspace config path when applicable.
+- A malformed workspace config is reported with its path instead of being
+  ignored. Explicit `--org` and `VELEN_ORG` candidates short-circuit workspace
+  loading, and commands that do not use org context (for example `auth login`)
+  do not inspect workspace config.
 - The CLI generates an invocation-scoped request ID when `--request-id` is not
   provided, attaches it to outbound HTTP requests, and can report it on
   transport errors even when no response body is received.
 - Prefer the built-in request timeout for normal commands. Use `--timeout <sec>`
   only when an invocation intentionally needs a shorter or longer request
   window.
-- `velen auth logout` clears both the stored auth session and the stored `active_org` for the selected profile, so later org-scoped commands fail explicitly until a new org is selected.
+- `velen auth logout` clears both the stored auth session and the user-default
+  `active_org` for the selected profile. Workspace config is repository state
+  and is not removed by logout.
 
 Credential storage:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wordbricks/velen",
-  "version": "0.2.39",
+  "version": "0.2.40",
   "description": "Velen CLI",
   "license": "Apache-2.0",
   "repository": {
@@ -23,6 +23,6 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "velen-darwin-arm64": "npm:@wordbricks/velen@0.2.39-darwin-arm64"
+    "velen-darwin-arm64": "npm:@wordbricks/velen@0.2.40-darwin-arm64"
   }
 }