fix: do not persist the workspace when ory use workspace only prints it

`ory use workspace` without an argument is documented as printing the
current default, but it called SelectWorkspace unconditionally. With
ORY_WORKSPACE (or a workspace API key) set, the resolved value was
written to the config file, silently replacing the stored default.
Persist only when an id argument is actually given.

Also accept the `workspaces` alias, matching `get`/`list`/`create
workspace`, and drop the unused selectedWorkspace.String method
(cmdx.PrintRow only uses Header/Columns/Interface).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JYzGVwAKQ4ormxRHZg1eDu

Author: alnr

cmd/cloudx/workspace/output.go

@@ -63,10 +63,6 @@ type selectedWorkspace struct {
 
 var _ cmdx.TableRow = (*selectedWorkspace)(nil)
 
-func (i selectedWorkspace) String() string {
-	return i.ID
-}
-
 func (*selectedWorkspace) Header() []string {
 	return []string{"ID"}
 }

cmd/cloudx/workspace/use.go

@@ -13,7 +13,7 @@ import (
 func NewUseWorkspaceCmd() *cobra.Command {
 	cmd := &cobra.Command{
 		Use:     "workspace [id]",
-		Aliases: []string{"ws"},
+		Aliases: []string{"workspaces", "ws"},
 		Args:    cobra.MaximumNArgs(1),
 		Short:   "Set the workspace as the default. When no id is provided, prints the currently used default workspace.",
 		Example: `$ ory use workspace ecaaa3cb-0730-4ee8-a6df-9553cdfeef89
@@ -36,15 +36,20 @@ $ ory use workspace ecaaa3cb-0730-4ee8-a6df-9553cdfeef89 --format json
 			}
 
 			// The helper resolves a (partial) name or ID to the workspace ID,
-			// and falls back to the one already stored in the config when no
-			// argument is given.
+			// and falls back to the environment or the one already stored in
+			// the config when no argument is given.
 			id := h.WorkspaceID()
 			if id == nil {
 				return client.ErrWorkspaceNotSet
 			}
 
-			if err := h.SelectWorkspace(*id); err != nil {
-				return cmdx.PrintOpenAPIError(cmd, err)
+			// Only persist when the user asked to change the default. Without
+			// an argument this command just reports the current one, which must
+			// not overwrite the stored default with e.g. an ORY_WORKSPACE value.
+			if len(args) == 1 {
+				if err := h.SelectWorkspace(*id); err != nil {
+					return cmdx.PrintOpenAPIError(cmd, err)
+				}
 			}
 
 			cmdx.PrintRow(cmd, &selectedWorkspace{ID: *id})

cmd/cloudx/workspace/use_test.go

@@ -24,9 +24,10 @@ func TestUseWorkspace(t *testing.T) {
 	t.Parallel()
 
 	const (
-		initial = "11111111-1111-1111-1111-111111111111"
-		other   = "33333333-3333-3333-3333-333333333333"
-		project = "22222222-2222-2222-2222-222222222222"
+		initial     = "11111111-1111-1111-1111-111111111111"
+		other       = "33333333-3333-3333-3333-333333333333"
+		project     = "22222222-2222-2222-2222-222222222222"
+		accessToken = "the-access-token"
 	)
 
 	newContext := func(t *testing.T, workspace string) (context.Context, string) {
@@ -35,6 +36,7 @@ func TestUseWorkspace(t *testing.T) {
 		conf := map[string]any{
 			"version":          client.ConfigVersion,
 			"selected_project": project,
+			"access_token":     map[string]any{"access_token": accessToken, "token_type": "bearer"},
 		}
 		if workspace != "" {
 			conf["selected_workspace"] = workspace
@@ -58,6 +60,32 @@ func TestUseWorkspace(t *testing.T) {
 		assert.Equal(t, initial, strings.TrimSpace(stdout))
 	})
 
+	t.Run("case=prints the default workspace as JSON", func(t *testing.T) {
+		t.Parallel()
+
+		ctx, _ := newContext(t, initial)
+
+		stdout, _, err := testhelpers.Cmd(ctx).Exec(nil, "use", "workspace", "--format", "json")
+		require.NoError(t, err)
+		assert.JSONEq(t, `{"id":"`+initial+`"}`, stdout)
+	})
+
+	t.Run("case=does not persist an overridden workspace when no id is given", func(t *testing.T) {
+		t.Parallel()
+
+		ctx, location := newContext(t, initial)
+		// Simulates ORY_WORKSPACE (or a workspace API key) pointing somewhere
+		// else: printing the default must not rewrite it.
+		ctx = client.ContextWithOptions(ctx, client.WithWorkspaceOverride(other))
+
+		stdout, _, err := testhelpers.Cmd(ctx).Exec(nil, "use", "workspace", "--quiet")
+		require.NoError(t, err)
+		assert.Equal(t, other, strings.TrimSpace(stdout))
+
+		conf := testhelpers.ReadConfig(t, location)
+		assert.Equal(t, initial, conf.SelectedWorkspace.String())
+	})
+
 	t.Run("case=sets the default workspace and persists it", func(t *testing.T) {
 		t.Parallel()
 
@@ -70,6 +98,8 @@ func TestUseWorkspace(t *testing.T) {
 		conf := testhelpers.ReadConfig(t, location)
 		assert.Equal(t, other, conf.SelectedWorkspace.String())
 		assert.Equal(t, project, conf.SelectedProject.String(), "selecting a workspace must not clear the project")
+		require.NotNil(t, conf.AccessToken, "selecting a workspace must not log the user out")
+		assert.Equal(t, accessToken, conf.AccessToken.AccessToken)
 	})
 
 	t.Run("case=errors when no workspace is set", func(t *testing.T) {