@wordbricks/velen 0.2.39 → 0.2.40-darwin-arm64

package/README.md

@@ -18,14 +18,39 @@ Runtime config:
 - The current persisted keys are `active_org` and `request_timeout_sec`; the
   built-in request timeout defaults to 180 seconds.
 - Runtime config is resolved in this order: built-in defaults -> user config file -> internal typed runtime overrides.
-- `velen org use <org>` persists `active_org`. Passing `--org <org>` for a command takes precedence over the stored `active_org` value for that invocation.
+- Org selection is resolved in this order: `--org <slug>` -> `VELEN_ORG` -> the
+  nearest workspace `.velen.config.json` -> the selected profile's stored
+  `active_org`. Org-scoped commands fail explicitly when none of those sources
+  selects an org.
+- Workspace discovery starts in the current directory, walks upward, uses the
+  nearest `.velen.config.json`, and stops after checking the Git root. A nested
+  workspace config can therefore override the repository-root config.
+- Workspace config is versioned JSON:
+
+  ```json
+  {
+    "version": 1,
+    "org": "acme"
+  }
+  ```
+
+- `velen org use <org>` persists the user default in `config.toml`.
+  `velen org use <org> --workspace` writes `.velen.config.json` at the current
+  Git workspace root. `velen org current` reports the selected source and the
+  workspace config path when applicable.
+- A malformed workspace config is reported with its path instead of being
+  ignored. Explicit `--org` and `VELEN_ORG` candidates short-circuit workspace
+  loading, and commands that do not use org context (for example `auth login`)
+  do not inspect workspace config.
 - The CLI generates an invocation-scoped request ID when `--request-id` is not
   provided, attaches it to outbound HTTP requests, and can report it on
   transport errors even when no response body is received.
 - Prefer the built-in request timeout for normal commands. Use `--timeout <sec>`
   only when an invocation intentionally needs a shorter or longer request
   window.
-- `velen auth logout` clears both the stored auth session and the stored `active_org` for the selected profile, so later org-scoped commands fail explicitly until a new org is selected.
+- `velen auth logout` clears both the stored auth session and the user-default
+  `active_org` for the selected profile. Workspace config is repository state
+  and is not removed by logout.
 
 Credential storage:
 

package/package.json

@@ -1,28 +1,27 @@
 {
-  "name": "@wordbricks/velen",
-  "version": "0.2.39",
+  "cpu": [
+    "arm64"
+  ],
   "description": "Velen CLI",
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/wordbricks/velen.git",
-    "directory": "apps/cli"
-  },
-  "bin": {
-    "velen": "bin/velen.js"
-  },
   "files": [
-    "bin",
+    "vendor",
     "README.md"
   ],
-  "type": "module",
+  "license": "Apache-2.0",
+  "name": "@wordbricks/velen",
+  "os": [
+    "darwin"
+  ],
   "publishConfig": {
     "access": "public"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wordbricks/velen.git",
+    "directory": "apps/cli"
+  },
+  "version": "0.2.40-darwin-arm64",
   "engines": {
     "node": ">=18"
-  },
-  "optionalDependencies": {
-    "velen-darwin-arm64": "npm:@wordbricks/velen@0.2.39-darwin-arm64"
   }
 }

package/bin/velen.js

@@ -1,143 +0,0 @@
-#!/usr/bin/env node
-
-import { spawn } from "node:child_process";
-import { chmodSync, existsSync, statSync } from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const require = createRequire(import.meta.url);
-
-const CLI_PACKAGE_NAME = "@wordbricks/velen";
-const PLATFORM_PACKAGE_BY_TARGET = {
-  "aarch64-apple-darwin": "velen-darwin-arm64",
-};
-
-const { platform, arch } = process;
-let targetTriple = null;
-if (platform === "darwin" && arch === "arm64") {
-  targetTriple = "aarch64-apple-darwin";
-}
-
-if (!targetTriple) {
-  throw new Error(`Unsupported platform: ${platform} (${arch})`);
-}
-
-const platformPackage = PLATFORM_PACKAGE_BY_TARGET[targetTriple];
-if (!platformPackage) {
-  throw new Error(`Unsupported target triple: ${targetTriple}`);
-}
-
-// COMMENT: This target map is intentionally duplicated here so the published
-// Node launcher stays self-contained, while the typed helper lives in src/.
-
-// CONTEXT: platform packages are installed through npm alias names so the
-// launcher resolves the alias folder, not the underlying published package id.
-const binaryName = "velen";
-const localVendorRoot = path.join(__dirname, "..", "vendor");
-const localBinaryPath = path.join(
-  localVendorRoot,
-  targetTriple,
-  "velen",
-  binaryName
-);
-
-let vendorRoot;
-try {
-  const packageJsonPath = require.resolve(`${platformPackage}/package.json`);
-  vendorRoot = path.join(path.dirname(packageJsonPath), "vendor");
-} catch {
-  if (existsSync(localBinaryPath)) {
-    vendorRoot = localVendorRoot;
-  } else {
-    const packageManager = detectPackageManager();
-    const reinstallCommand =
-      packageManager === "bun"
-        ? `bun install -g ${CLI_PACKAGE_NAME}@latest`
-        : `npm install -g ${CLI_PACKAGE_NAME}@latest`;
-    throw new Error(
-      `Missing optional dependency ${platformPackage}. Reinstall Velen CLI: ${reinstallCommand}`
-    );
-  }
-}
-
-const binaryPath = path.join(vendorRoot, targetTriple, "velen", binaryName);
-
-ensureExecutable(binaryPath);
-
-const child = spawn(binaryPath, process.argv.slice(2), {
-  env: process.env,
-  stdio: "inherit",
-});
-
-child.on("error", (error) => {
-  console.error(error);
-  process.exit(1);
-});
-
-const forwardSignal = (signal) => {
-  if (child.killed) {
-    return;
-  }
-
-  try {
-    child.kill(signal);
-  } catch {
-    // Ignore forwarding failures if the child already exited.
-  }
-};
-
-["SIGINT", "SIGTERM", "SIGHUP"].forEach((signal) => {
-  process.on(signal, () => forwardSignal(signal));
-});
-
-const childResult = await new Promise((resolve) => {
-  child.on("exit", (code, signal) => {
-    if (signal) {
-      resolve({ signal, type: "signal" });
-      return;
-    }
-
-    resolve({ exitCode: code ?? 1, type: "code" });
-  });
-});
-
-if (childResult.type === "signal") {
-  process.kill(process.pid, childResult.signal);
-} else {
-  process.exit(childResult.exitCode);
-}
-
-function detectPackageManager() {
-  const userAgent = process.env.npm_config_user_agent ?? "";
-  if (/\bbun\//.test(userAgent)) {
-    return "bun";
-  }
-
-  const execPath = process.env.npm_execpath ?? "";
-  if (execPath.includes("bun")) {
-    return "bun";
-  }
-
-  if (
-    __dirname.includes(".bun/install/global") ||
-    __dirname.includes(".bun\\install\\global")
-  ) {
-    return "bun";
-  }
-
-  return userAgent ? "npm" : null;
-}
-
-function ensureExecutable(filePath) {
-  const currentMode = statSync(filePath).mode & 0o777;
-  if ((currentMode & 0o111) !== 0) {
-    return;
-  }
-
-  // CONTEXT: npm tarballs store vendored native binaries without execute bits,
-  // so restore the expected mode before spawning the packaged CLI binary.
-  chmodSync(filePath, currentMode | 0o755);
-}