feat(cli): ask for the organization and project on trace init

app/cli/cmd/artifact.go

@@ -48,7 +48,7 @@ func wrappedArtifactConn(cpConn *grpc.ClientConn, role pb.CASCredentialsServiceG
 	}
 
 	if apiInsecure() {
-		logger.Warn().Msg("API contacted in insecure mode")
+		logger.Debug().Msg("API contacted in insecure mode")
 	}
 
 	var opts = []grpcconn.Option{

app/cli/cmd/root.go

@@ -53,6 +53,11 @@ var (
 	defaultCASAPI    = "api.cas.chainloop.dev:443"
 	apiToken         string
 	flagYes          bool
+	// authTokenIsUser records whether the credentials in use are a user session
+	// rather than an API token. Commands that behave differently for the two,
+	// such as `trace init` skipping organization selection for org-scoped API
+	// tokens, read it instead of parsing the token again.
+	authTokenIsUser bool
 )
 
 const (
@@ -120,13 +125,14 @@ func NewRootCmd(l zerolog.Logger) *cobra.Command {
 			}
 
 			if apiInsecure() {
-				logger.Warn().Msg("API contacted in insecure mode")
+				logger.Debug().Msg("API contacted in insecure mode")
 			}
 
 			authToken, isUserToken, err := loadAuthToken(cmd)
 			if err != nil {
 				return err
 			}
+			authTokenIsUser = isUserToken
 
 			// If the auth token is not set and the command supports federated auth, we try to discover the runner and use the federated token for the runner if available
 			if authToken == "" && cmdSupportsFederatedAuth(cmd) {

app/cli/cmd/trace.go

@@ -21,7 +21,7 @@ import (
 
 // traceContractFlagDesc documents the --contract flag `trace init` and
 // `trace run` share.
-const traceContractFlagDesc = `workflow contract to attach when creating the workflow; it must already exist (default: "chainloop-ai-coding-session" when the organization has it, an empty contract otherwise)`
+const traceContractFlagDesc = `workflow contract to attach when creating the workflow; it must already exist and be usable by the project (default: "chainloop-ai-coding-session" when the organization has it, an empty contract otherwise)`
 
 // newTraceCmd creates the trace parent command with all subcommands.
 func newTraceCmd() *cobra.Command {