Function build_client_with_org

atomic-cli/src/commands/client.rs:117–158

Build a [`StorageClient`] and return the resolved org slug alongside it. Useful for commands that also need to resolve org-scoped state (e.g. per-org default workspace lookup). Avoids resolving the org twice.

(
    org_override: Option<&str>,
    server_override: Option<&str>,
)

/// Useful for commands that also need to resolve org-scoped state (e.g.
/// per-org default workspace lookup). Avoids resolving the org twice.
pub async fn build_client_with_org(
    org_override: Option<&str>,
    server_override: Option<&str>,
) -> CliResult<(StorageClient, String)> {
    let config = GlobalConfig::load()
        .map_err(|e| CliError::Internal(anyhow::anyhow!("Failed to load global config: {}", e)))?;

    // Resolve the server profile (named or legacy).
    let server = config
        .resolve_server(server_override)
        .map_err(|e| CliError::Internal(anyhow::anyhow!("{}", e)))?
        .0;

    let server_url = server.url.clone().ok_or_else(|| {
        let hint = if let Some(name) = server_override {
            format!("Server profile '{}' has no URL configured.", name)
        } else {
            "Server not configured. Run 'atomic identity register <server-url>' first.".to_string()
        };
        CliError::Internal(anyhow::anyhow!("{}", hint))
    })?;

    let org_slug = resolve_org_with_server(org_override, server)?;

    let base_url = server.org_base_url(&org_slug).ok_or_else(|| {
        CliError::Internal(anyhow::anyhow!(
            "Could not build org URL from server config"
        ))
    })?;

    // Resolve identity: per-server override → global default.
    let identity = resolve_identity_for_server(server)?;

    // Log in against the server apex for a JWT bearer token.
    let bearer_token = crate::commands::token::get_token(&server_url, &identity).await?;

    let client = StorageClient::new(&base_url, &org_slug, &bearer_token).map_err(|e| {
        CliError::Internal(anyhow::anyhow!("Failed to create storage client: {}", e))
    })?;

    Ok((client, org_slug))
}

/// Resolve the identity to authenticate as for a given server profile.
///