Comment on pkg/cmd/ls/ls.go:88

If feels like we could benefit from having a centralized "CLIAuth" construct:

type CLIAuth struct {
	apiKey bool
	user   *entity.User
}
func (a CLIAuth) IsAPIKey() bool { return a.apiKey }
func (a CLIAuth) User() *entity.User { return a.user }

type currentUserStore interface {
	APIKeyAuthStore
	GetCurrentUser() (*entity.User, error)
}

func ResolveCLIAuth(store currentUserStore) (CLIAuth, error) {
	if IsAPIKeyAuthStore(store) {
		return CLIAuth{apiKey: true}, nil
	}
	user, err := store.GetCurrentUser()
	if err != nil {
		return CLIAuth{}, breverrors.WrapAndTrace(err)
	}
	return CLIAuth{user: user}, nil
}

if we had that our "Run" and "RunE" commands could routinely just start with that at the very top:

...
    RunE: func(cmd *cobra.Command, args []string) error {
	    cliAuth, err := ResolveCLIAuth(loginLsStore)
		if err != nil {
		    return breverrors.WrapAndTrace(err)
        }
...

and commands like this one could start taking the auth object and threading it down:

func RunLs(t *terminal.Terminal, cliAuth CLIAuth, lsStore LsStore, args []string, orgflag string, showAll bool, jsonOutput bool) error {
	ls := NewLs(lsStore, t, jsonOutput)

	org, err := getOrgForRunLs(cliAuth, lsStore, orgflag) // use the cliAuth object here
	if err != nil {
		return breverrors.WrapAndTrace(err)
	}
...

func handleLsArg(ls *Ls, cliAuth CLIAuth, arg string, org *entity.Organization, showAll bool) error {
	switch classifyLsArg(arg) {
	case lsArgOrgs:
		if cliAuth.IsAPIKey() {
			return breverrors.NewValidationError("api key auth cannot list organizations")
		}
		return wrapLsRun(ls.RunOrgs())
	case lsArgWorkspaces:
		return wrapLsRun(ls.RunWorkspaces(cliAuth, org, showAll))


...
func (ls Ls) RunWorkspaces(cliAuth CLIAuth, org *entity.Organization, showAll bool) error {
...
	// Determine which workspaces to show
	var workspacesToShow []entity.Workspace
	switch {
	case showAll:
		workspacesToShow = allWorkspaces
	case cliAuth.IsAPIKey(): // changed from "case user == nil:"
		workspacesToShow = allWorkspaces
	default:
        // changed from "workspacesToShow = store.FilterForUserWorkspaces(allWorkspaces, cliAuth.ID)"
		workspacesToShow = store.FilterForUserWorkspaces(allWorkspaces, cliAuth.User().ID)
	}

mainly in an effort to cut down on bools and "sometimes the user is nil" driving this logic.