@rulemetric/cli 0.1.1 → 0.2.1

package/dist/lib/active-org-refresh.js

@@ -0,0 +1,108 @@
+import { apiGet } from './api-client.js';
+import { readActiveOrg, writeActiveOrg, clearActiveOrg, isStale, } from './active-org.js';
+/**
+ * Module-level guard so we only refresh once per CLI invocation, even if
+ * `BaseCommand.init` runs multiple times across nested commands or tests.
+ */
+let attempted = false;
+/**
+ * Opportunistically reconcile the local active-org cache with the server.
+ *
+ * Runs in three cases:
+ *   1. Cache file is ABSENT (bootstrap) — populate from `/api/profile`. This
+ *      branch is load-bearing: without it, a user who never explicitly ran
+ *      `rulemetric org switch` would have hook captures with `org_id=NULL`
+ *      forever, even when the server already has `profiles.active_org_id`
+ *      set (e.g. switched via the web UI, or auto-set by the handle_new_user
+ *      trigger from migration 00067). Caught 2026-05-25 after an audit found
+ *      244 hook sessions over 14 days all missing org_id.
+ *   2. Cache file exists but is stale (>5min) — re-sync from the server.
+ *   3. Env override is set OR cache is fresh — no-op, zero network.
+ *
+ * Failures are intentionally swallowed: this is a background nicety, not a
+ * gating step. The next API call the user actually invoked will surface
+ * any auth/network errors with clearer messaging than a refresh failure
+ * could. Capture-time fallback to `profiles.active_org_id` at
+ * `apps/api/src/routes/sessions.ts:48` is the final safety net.
+ */
+/**
+ * Internal: fetch profile + (if needed) orgs, then write/clear the cache.
+ * Shared body for both `maybeRefreshActiveOrg` (guarded, used by every CLI
+ * command via BaseCommand) and `bootstrapActiveOrg` (unguarded, used by
+ * lifecycle commands that just wrote auth/install state and want the cache
+ * to reflect it before they exit).
+ */
+async function syncActiveOrgFromServer() {
+    // Env override: caller has explicitly chosen the org. Don't write the
+    // file — env should be ephemeral.
+    if (process.env.RULEMETRIC_ORG_ID)
+        return;
+    const cached = readActiveOrg();
+    // Only skip when we have a fresh cache. Missing cache (cached === null)
+    // and stale cache both fall through to the refresh path below.
+    if (cached && !isStale(cached))
+        return;
+    try {
+        const profile = await apiGet('/api/profile');
+        if (!profile.activeOrgId) {
+            // Server has no active org — drop the local cache (if any).
+            clearActiveOrg();
+            return;
+        }
+        if (cached && profile.activeOrgId === cached.orgId) {
+            // Same id — just bump syncedAt so we don't re-fetch every command.
+            writeActiveOrg({
+                orgId: cached.orgId,
+                orgSlug: cached.orgSlug,
+                syncedAt: Date.now(),
+            });
+            return;
+        }
+        // Either bootstrapping fresh (no cache) OR the server changed the active
+        // org out from under us (e.g. via web UI). Look up the slug for the id
+        // and (re)write the cache.
+        const orgs = await apiGet('/api/orgs');
+        const match = orgs.find((o) => o.id === profile.activeOrgId);
+        writeActiveOrg({
+            orgId: profile.activeOrgId,
+            orgSlug: match?.slug,
+            syncedAt: Date.now(),
+        });
+    }
+    catch {
+        // Swallow — leave the old cache intact. The user's actual command will
+        // surface the real error if any.
+    }
+}
+export async function maybeRefreshActiveOrg() {
+    if (attempted)
+        return;
+    attempted = true;
+    await syncActiveOrgFromServer();
+}
+/**
+ * Explicit, guard-bypassing version of the refresh. Use ONLY from commands
+ * where the user just took an action that changes auth/install state and we
+ * want the cache to reflect it before the command exits:
+ *
+ *   - After `auth login`: BaseCommand.init fired the guarded refresh BEFORE
+ *     credentials existed and got a 401; we need to retry post-login.
+ *   - After `hooks install` / `service install`: belt-and-suspenders so the
+ *     first Claude Code session after install has a populated cache, even
+ *     if BaseCommand's earlier refresh hit a transient error.
+ *
+ * Marks `attempted = true` after running so a redundant `maybeRefreshActiveOrg`
+ * call later in the same process is a no-op.
+ */
+export async function bootstrapActiveOrg() {
+    attempted = true;
+    await syncActiveOrgFromServer();
+}
+/**
+ * Test hook — reset the once-per-process guard so each test can exercise
+ * the refresh logic.
+ */
+export function _resetRefreshAttempt() {
+    attempted = false;
+}
+//# sourceMappingURL=active-org-refresh.js.map

package/dist/lib/active-org-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org-refresh.js","sourceRoot":"","sources":["../../src/lib/active-org-refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EACL,aAAa,EACb,cAAc,EACd,cAAc,EACd,OAAO,GACR,MAAM,iBAAiB,CAAC;AAgBzB;;;GAGG;AACH,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;;;;;;;;;;;;;;;;GAmBG;AACH;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB;IACpC,sEAAsE;IACtE,kCAAkC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO;IAE1C,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,wEAAwE;IACxE,+DAA+D;IAC/D,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAkB,cAAc,CAAC,CAAC;QAE9D,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,4DAA4D;YAC5D,cAAc,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,MAAM,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACnD,mEAAmE;YACnE,cAAc,CAAC;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAgB,WAAW,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7D,cAAc,CAAC;YACb,KAAK,EAAE,OAAO,CAAC,WAAW;YAC1B,OAAO,EAAE,KAAK,EAAE,IAAI;YACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,iCAAiC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IACjB,MAAM,uBAAuB,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,SAAS,GAAG,IAAI,CAAC;IACjB,MAAM,uBAAuB,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC"}

package/dist/lib/active-org-refresh.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=active-org-refresh.test.d.ts.map

package/dist/lib/active-org-refresh.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org-refresh.test.d.ts","sourceRoot":"","sources":["../../src/lib/active-org-refresh.test.ts"],"names":[],"mappings":""}

package/dist/lib/active-org-refresh.test.js

@@ -0,0 +1,190 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+const { apiGet } = vi.hoisted(() => ({ apiGet: vi.fn() }));
+vi.mock('./api-client.js', () => ({
+    apiGet,
+    apiPost: vi.fn(),
+    api: vi.fn(),
+    ApiError: class ApiError extends Error {
+    },
+}));
+// Import after the mock is hoisted.
+import { maybeRefreshActiveOrg, _resetRefreshAttempt } from './active-org-refresh.js';
+import { _internals, writeActiveOrg, readActiveOrg } from './active-org.js';
+let tmpDir;
+let savedConfigDir;
+let savedOrgId;
+beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'rulemetric-refresh-'));
+    savedConfigDir = process.env.RULEMETRIC_CONFIG_DIR;
+    savedOrgId = process.env.RULEMETRIC_ORG_ID;
+    process.env.RULEMETRIC_CONFIG_DIR = tmpDir;
+    delete process.env.RULEMETRIC_ORG_ID;
+    apiGet.mockReset();
+    _resetRefreshAttempt();
+});
+afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+    if (savedConfigDir === undefined) {
+        delete process.env.RULEMETRIC_CONFIG_DIR;
+    }
+    else {
+        process.env.RULEMETRIC_CONFIG_DIR = savedConfigDir;
+    }
+    if (savedOrgId === undefined) {
+        delete process.env.RULEMETRIC_ORG_ID;
+    }
+    else {
+        process.env.RULEMETRIC_ORG_ID = savedOrgId;
+    }
+});
+describe('maybeRefreshActiveOrg — bootstrap path (regression for 2026-05-25 audit)', () => {
+    it('writes the cache file when none exists and server has an active org', async () => {
+        // Setup: no local cache file. Server reports an activeOrgId.
+        expect(readActiveOrg()).toBeNull();
+        apiGet
+            .mockResolvedValueOnce({
+            id: 'user-1',
+            email: 'nick@example.com',
+            displayName: null,
+            activeOrgId: 'bd37b027-f79b-4aea-8ccc-a27fa35ddf64',
+        })
+            .mockResolvedValueOnce([
+            { id: 'bd37b027-f79b-4aea-8ccc-a27fa35ddf64', name: 'Nick Personal', slug: 'nick-personal', role: 'owner' },
+        ]);
+        await maybeRefreshActiveOrg();
+        expect(apiGet).toHaveBeenNthCalledWith(1, '/api/profile');
+        expect(apiGet).toHaveBeenNthCalledWith(2, '/api/orgs');
+        const cached = readActiveOrg();
+        expect(cached?.orgId).toBe('bd37b027-f79b-4aea-8ccc-a27fa35ddf64');
+        expect(cached?.orgSlug).toBe('nick-personal');
+        expect(typeof cached?.syncedAt).toBe('number');
+    });
+    it('writes only orgId when /api/orgs has no matching entry (defensive)', async () => {
+        apiGet
+            .mockResolvedValueOnce({
+            id: 'user-1',
+            email: null,
+            displayName: null,
+            activeOrgId: 'bd37b027-f79b-4aea-8ccc-a27fa35ddf64',
+        })
+            .mockResolvedValueOnce([]); // orgs list empty — slug unknown
+        await maybeRefreshActiveOrg();
+        const cached = readActiveOrg();
+        expect(cached?.orgId).toBe('bd37b027-f79b-4aea-8ccc-a27fa35ddf64');
+        expect(cached?.orgSlug).toBeUndefined();
+    });
+    it('does NOT write a file when the server has no active org', async () => {
+        apiGet.mockResolvedValueOnce({
+            id: 'user-1',
+            email: null,
+            displayName: null,
+            activeOrgId: null,
+        });
+        await maybeRefreshActiveOrg();
+        expect(readActiveOrg()).toBeNull();
+        expect(fs.existsSync(_internals.getActiveOrgFile())).toBe(false);
+        // Only /api/profile was called — no follow-up /api/orgs.
+        expect(apiGet).toHaveBeenCalledTimes(1);
+    });
+    it('swallows API errors and leaves cache absent', async () => {
+        apiGet.mockRejectedValueOnce(new Error('network down'));
+        await expect(maybeRefreshActiveOrg()).resolves.toBeUndefined();
+        expect(readActiveOrg()).toBeNull();
+    });
+});
+describe('maybeRefreshActiveOrg — env override', () => {
+    it('does nothing when RULEMETRIC_ORG_ID is set, even if no cache exists', async () => {
+        process.env.RULEMETRIC_ORG_ID = '11111111-1111-1111-1111-111111111111';
+        await maybeRefreshActiveOrg();
+        expect(apiGet).not.toHaveBeenCalled();
+        // No file should be written for an env-driven session.
+        expect(fs.existsSync(_internals.getActiveOrgFile())).toBe(false);
+    });
+});
+describe('maybeRefreshActiveOrg — existing cache paths', () => {
+    it('skips refresh when cache is fresh', async () => {
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: Date.now(),
+        });
+        await maybeRefreshActiveOrg();
+        expect(apiGet).not.toHaveBeenCalled();
+    });
+    it('bumps syncedAt when server agrees with cached orgId', async () => {
+        const oldSynced = Date.now() - 10 * 60 * 1000; // 10 min ago — stale
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: oldSynced,
+        });
+        apiGet.mockResolvedValueOnce({
+            id: 'user-1',
+            email: null,
+            displayName: null,
+            activeOrgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+        });
+        await maybeRefreshActiveOrg();
+        const cached = readActiveOrg();
+        expect(cached?.orgId).toBe('aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa');
+        expect(cached?.orgSlug).toBe('acme'); // slug preserved from cache
+        expect(cached?.syncedAt).toBeGreaterThan(oldSynced);
+        // Only /api/profile was needed — no slug lookup since id didn't change.
+        expect(apiGet).toHaveBeenCalledTimes(1);
+    });
+    it('rewrites cache when server changed the active org', async () => {
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'old',
+            syncedAt: Date.now() - 10 * 60 * 1000,
+        });
+        apiGet
+            .mockResolvedValueOnce({
+            id: 'user-1',
+            email: null,
+            displayName: null,
+            activeOrgId: 'bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb',
+        })
+            .mockResolvedValueOnce([
+            { id: 'bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb', name: 'New Org', slug: 'new-org', role: 'admin' },
+        ]);
+        await maybeRefreshActiveOrg();
+        const cached = readActiveOrg();
+        expect(cached?.orgId).toBe('bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb');
+        expect(cached?.orgSlug).toBe('new-org');
+    });
+    it('clears cache when server has no active org', async () => {
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: Date.now() - 10 * 60 * 1000,
+        });
+        apiGet.mockResolvedValueOnce({
+            id: 'user-1',
+            email: null,
+            displayName: null,
+            activeOrgId: null,
+        });
+        await maybeRefreshActiveOrg();
+        expect(readActiveOrg()).toBeNull();
+        expect(fs.existsSync(_internals.getActiveOrgFile())).toBe(false);
+    });
+});
+describe('maybeRefreshActiveOrg — once-per-process guard', () => {
+    it('only fires once even across multiple calls', async () => {
+        apiGet.mockResolvedValueOnce({
+            id: 'user-1',
+            email: null,
+            displayName: null,
+            activeOrgId: null,
+        });
+        await maybeRefreshActiveOrg();
+        await maybeRefreshActiveOrg();
+        await maybeRefreshActiveOrg();
+        expect(apiGet).toHaveBeenCalledTimes(1);
+    });
+});
+//# sourceMappingURL=active-org-refresh.test.js.map

package/dist/lib/active-org-refresh.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org-refresh.test.js","sourceRoot":"","sources":["../../src/lib/active-org-refresh.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,MAAM;IACN,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;IAChB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;IACZ,QAAQ,EAAE,MAAM,QAAS,SAAQ,KAAK;KAAG;CAC1C,CAAC,CAAC,CAAC;AAEJ,oCAAoC;AACpC,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE5E,IAAI,MAAc,CAAC;AACnB,IAAI,cAAkC,CAAC;AACvC,IAAI,UAA8B,CAAC;AAEnC,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC;IAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACrC,MAAM,CAAC,SAAS,EAAE,CAAC;IACnB,oBAAoB,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,cAAc,CAAC;IACrD,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,UAAU,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACxF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,6DAA6D;QAC7D,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM;aACH,qBAAqB,CAAC;YACrB,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,sCAAsC;SACpD,CAAC;aACD,qBAAqB,CAAC;YACrB,EAAE,EAAE,EAAE,sCAAsC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;SAC5G,CAAC,CAAC;QAEL,MAAM,qBAAqB,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM;aACH,qBAAqB,CAAC;YACrB,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,sCAAsC;SACpD,CAAC;aACD,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,iCAAiC;QAE/D,MAAM,qBAAqB,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,CAAC,qBAAqB,CAAC;YAC3B,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,qBAAqB,EAAE,CAAC;QAE9B,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,yDAAyD;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAsC,CAAC;QACvE,MAAM,qBAAqB,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtC,uDAAuD;QACvD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,qBAAqB,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,qBAAqB;QACpE,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC;YAC3B,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,sCAAsC;SACpD,CAAC,CAAC;QACH,MAAM,qBAAqB,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B;QAClE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACpD,wEAAwE;QACxE,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;SACtC,CAAC,CAAC;QACH,MAAM;aACH,qBAAqB,CAAC;YACrB,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,sCAAsC;SACpD,CAAC;aACD,qBAAqB,CAAC;YACrB,EAAE,EAAE,EAAE,sCAAsC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;SAChG,CAAC,CAAC;QAEL,MAAM,qBAAqB,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC;YAC3B,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,qBAAqB,EAAE,CAAC;QAC9B,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,CAAC,qBAAqB,CAAC;YAC3B,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,qBAAqB,EAAE,CAAC;QAC9B,MAAM,qBAAqB,EAAE,CAAC;QAC9B,MAAM,qBAAqB,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/active-org.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Local cache of the user's currently selected org. Lives at
+ * `~/.config/rulemetric/active-org` (overridable via
+ * `RULEMETRIC_CONFIG_DIR`). The runtime contract is intentionally small —
+ * env beats file, and a missing file means "no active org".
+ */
+export interface ActiveOrg {
+    orgId: string;
+    orgSlug?: string;
+    /** Unix milliseconds of last refresh from the API. Absent for env overrides. */
+    syncedAt?: number;
+}
+declare function getConfigDir(): string;
+declare function getActiveOrgFile(): string;
+/**
+ * Resolve the active org for the current process.
+ *
+ * Priority: env var (`RULEMETRIC_ORG_ID`) > local file > null. The env path
+ * always wins — it's the "I know what I want" override for CI and ad-hoc
+ * multi-tenant runs, even if the local file looks fresher.
+ */
+export declare function readActiveOrg(): ActiveOrg | null;
+/**
+ * Persist the active org to the local file. Atomic via tmp+rename so a
+ * mid-write crash never leaves a partial JSON file.
+ */
+export declare function writeActiveOrg(active: ActiveOrg): void;
+/**
+ * Remove the local active-org file. No-op if absent.
+ */
+export declare function clearActiveOrg(): void;
+/**
+ * Returns true when the cache is older than `maxAgeMs`. Cache entries
+ * without `syncedAt` (e.g. from env overrides) are never considered stale —
+ * the caller decided the value, not us.
+ */
+export declare function isStale(active: ActiveOrg, maxAgeMs?: number): boolean;
+export declare const _internals: {
+    getActiveOrgFile: typeof getActiveOrgFile;
+    getConfigDir: typeof getConfigDir;
+};
+export {};
+//# sourceMappingURL=active-org.d.ts.map

package/dist/lib/active-org.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org.d.ts","sourceRoot":"","sources":["../../src/lib/active-org.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,iBAAS,YAAY,IAAI,MAAM,CAK9B;AAED,iBAAS,gBAAgB,IAAI,MAAM,CAElC;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,SAAS,GAAG,IAAI,CAuChD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAWtD;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAMrC;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,SAAkB,GAAG,OAAO,CAG9E;AAGD,eAAO,MAAM,UAAU;;;CAGtB,CAAC"}

package/dist/lib/active-org.js

@@ -0,0 +1,96 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+const FIVE_MINUTES_MS = 5 * 60 * 1000;
+function getConfigDir() {
+    return (process.env.RULEMETRIC_CONFIG_DIR ||
+        path.join(os.homedir(), '.config', 'rulemetric'));
+}
+function getActiveOrgFile() {
+    return path.join(getConfigDir(), 'active-org');
+}
+/**
+ * Resolve the active org for the current process.
+ *
+ * Priority: env var (`RULEMETRIC_ORG_ID`) > local file > null. The env path
+ * always wins — it's the "I know what I want" override for CI and ad-hoc
+ * multi-tenant runs, even if the local file looks fresher.
+ */
+export function readActiveOrg() {
+    const envOrgId = process.env.RULEMETRIC_ORG_ID;
+    if (envOrgId && envOrgId.trim()) {
+        return { orgId: envOrgId.trim() };
+    }
+    const file = getActiveOrgFile();
+    let raw;
+    try {
+        raw = fs.readFileSync(file, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed ||
+        typeof parsed !== 'object' ||
+        !('orgId' in parsed) ||
+        typeof parsed.orgId !== 'string') {
+        return null;
+    }
+    const obj = parsed;
+    const result = { orgId: obj.orgId };
+    if (typeof obj.orgSlug === 'string') {
+        result.orgSlug = obj.orgSlug;
+    }
+    if (typeof obj.syncedAt === 'number') {
+        result.syncedAt = obj.syncedAt;
+    }
+    return result;
+}
+/**
+ * Persist the active org to the local file. Atomic via tmp+rename so a
+ * mid-write crash never leaves a partial JSON file.
+ */
+export function writeActiveOrg(active) {
+    const dir = getConfigDir();
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = getActiveOrgFile();
+    const tmpFile = `${file}.tmp`;
+    fs.writeFileSync(tmpFile, JSON.stringify(active, null, 2), {
+        encoding: 'utf-8',
+        mode: 0o600,
+    });
+    fs.renameSync(tmpFile, file);
+}
+/**
+ * Remove the local active-org file. No-op if absent.
+ */
+export function clearActiveOrg() {
+    try {
+        fs.unlinkSync(getActiveOrgFile());
+    }
+    catch {
+        // file already gone
+    }
+}
+/**
+ * Returns true when the cache is older than `maxAgeMs`. Cache entries
+ * without `syncedAt` (e.g. from env overrides) are never considered stale —
+ * the caller decided the value, not us.
+ */
+export function isStale(active, maxAgeMs = FIVE_MINUTES_MS) {
+    if (typeof active.syncedAt !== 'number')
+        return false;
+    return Date.now() - active.syncedAt > maxAgeMs;
+}
+// Exported for tests that need to know where the file lives.
+export const _internals = {
+    getActiveOrgFile,
+    getConfigDir,
+};
+//# sourceMappingURL=active-org.js.map

package/dist/lib/active-org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org.js","sourceRoot":"","sources":["../../src/lib/active-org.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAelC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,SAAS,YAAY;IACnB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC;QACpB,OAAQ,MAA6B,CAAC,KAAK,KAAK,QAAQ,EACxD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAc,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC9C,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;IAC9B,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACzD,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,MAAiB,EAAE,QAAQ,GAAG,eAAe;IACnE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;AACjD,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,gBAAgB;IAChB,YAAY;CACb,CAAC"}

package/dist/lib/active-org.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=active-org.test.d.ts.map

package/dist/lib/active-org.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org.test.d.ts","sourceRoot":"","sources":["../../src/lib/active-org.test.ts"],"names":[],"mappings":""}

package/dist/lib/active-org.test.js

@@ -0,0 +1,147 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { readActiveOrg, writeActiveOrg, clearActiveOrg, isStale, _internals, } from './active-org.js';
+let tmpDir;
+let savedConfigDir;
+let savedOrgId;
+beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'rulemetric-active-org-'));
+    savedConfigDir = process.env.RULEMETRIC_CONFIG_DIR;
+    savedOrgId = process.env.RULEMETRIC_ORG_ID;
+    process.env.RULEMETRIC_CONFIG_DIR = tmpDir;
+    delete process.env.RULEMETRIC_ORG_ID;
+});
+afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+    if (savedConfigDir === undefined) {
+        delete process.env.RULEMETRIC_CONFIG_DIR;
+    }
+    else {
+        process.env.RULEMETRIC_CONFIG_DIR = savedConfigDir;
+    }
+    if (savedOrgId === undefined) {
+        delete process.env.RULEMETRIC_ORG_ID;
+    }
+    else {
+        process.env.RULEMETRIC_ORG_ID = savedOrgId;
+    }
+});
+describe('readActiveOrg', () => {
+    it('returns null when no file exists and env is unset', () => {
+        expect(readActiveOrg()).toBeNull();
+    });
+    it('returns env-sourced ActiveOrg when RULEMETRIC_ORG_ID is set', () => {
+        process.env.RULEMETRIC_ORG_ID = '11111111-1111-1111-1111-111111111111';
+        const active = readActiveOrg();
+        expect(active).toEqual({ orgId: '11111111-1111-1111-1111-111111111111' });
+    });
+    it('treats empty/whitespace env var as unset', () => {
+        process.env.RULEMETRIC_ORG_ID = '   ';
+        expect(readActiveOrg()).toBeNull();
+    });
+    it('returns file contents when file exists and env is unset', () => {
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: 1_700_000_000_000,
+        });
+        expect(readActiveOrg()).toEqual({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: 1_700_000_000_000,
+        });
+    });
+    it('env wins over file (env is authoritative even if file looks fresher)', () => {
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: Date.now(),
+        });
+        process.env.RULEMETRIC_ORG_ID = 'bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb';
+        const active = readActiveOrg();
+        expect(active?.orgId).toBe('bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb');
+        expect(active?.orgSlug).toBeUndefined();
+        expect(active?.syncedAt).toBeUndefined();
+    });
+    it('returns null when file is corrupt JSON', () => {
+        fs.mkdirSync(tmpDir, { recursive: true });
+        fs.writeFileSync(_internals.getActiveOrgFile(), 'not json', 'utf-8');
+        expect(readActiveOrg()).toBeNull();
+    });
+    it('returns null when JSON lacks orgId', () => {
+        fs.mkdirSync(tmpDir, { recursive: true });
+        fs.writeFileSync(_internals.getActiveOrgFile(), JSON.stringify({ orgSlug: 'acme' }), 'utf-8');
+        expect(readActiveOrg()).toBeNull();
+    });
+});
+describe('writeActiveOrg', () => {
+    it('creates the parent directory if absent', () => {
+        const nested = path.join(tmpDir, 'nested', 'config');
+        process.env.RULEMETRIC_CONFIG_DIR = nested;
+        writeActiveOrg({
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: 1,
+        });
+        expect(fs.existsSync(path.join(nested, 'active-org'))).toBe(true);
+    });
+    it('round-trips through readActiveOrg', () => {
+        const value = {
+            orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',
+            orgSlug: 'acme',
+            syncedAt: 1_700_000_000_000,
+        };
+        writeActiveOrg(value);
+        expect(readActiveOrg()).toEqual(value);
+    });
+    it('writes file with restricted permissions (0o600)', () => {
+        writeActiveOrg({ orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' });
+        const stat = fs.statSync(_internals.getActiveOrgFile());
+        expect(stat.mode & 0o777).toBe(0o600);
+    });
+    it('does not leave a tmp file on disk after success', () => {
+        writeActiveOrg({ orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' });
+        const tmp = `${_internals.getActiveOrgFile()}.tmp`;
+        expect(fs.existsSync(tmp)).toBe(false);
+    });
+    it('overwrites existing file', () => {
+        writeActiveOrg({ orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa', orgSlug: 'acme' });
+        writeActiveOrg({ orgId: 'bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb', orgSlug: 'beta' });
+        expect(readActiveOrg()).toEqual({
+            orgId: 'bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb',
+            orgSlug: 'beta',
+        });
+    });
+});
+describe('clearActiveOrg', () => {
+    it('removes the file', () => {
+        writeActiveOrg({ orgId: 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' });
+        expect(fs.existsSync(_internals.getActiveOrgFile())).toBe(true);
+        clearActiveOrg();
+        expect(fs.existsSync(_internals.getActiveOrgFile())).toBe(false);
+    });
+    it('is a no-op when file is absent', () => {
+        expect(() => clearActiveOrg()).not.toThrow();
+    });
+});
+describe('isStale', () => {
+    it('returns true when syncedAt is older than maxAge', () => {
+        const stale = { orgId: 'x', syncedAt: Date.now() - 10 * 60 * 1000 };
+        expect(isStale(stale)).toBe(true);
+    });
+    it('returns false when syncedAt is recent', () => {
+        const fresh = { orgId: 'x', syncedAt: Date.now() - 30 * 1000 };
+        expect(isStale(fresh)).toBe(false);
+    });
+    it('returns false when syncedAt is missing (env override)', () => {
+        expect(isStale({ orgId: 'x' })).toBe(false);
+    });
+    it('respects custom maxAgeMs', () => {
+        const value = { orgId: 'x', syncedAt: Date.now() - 1000 };
+        expect(isStale(value, 500)).toBe(true);
+        expect(isStale(value, 2000)).toBe(false);
+    });
+});
+//# sourceMappingURL=active-org.test.js.map

package/dist/lib/active-org.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-org.test.js","sourceRoot":"","sources":["../../src/lib/active-org.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,aAAa,EACb,cAAc,EACd,cAAc,EACd,OAAO,EACP,UAAU,GACX,MAAM,iBAAiB,CAAC;AAEzB,IAAI,MAAc,CAAC;AACnB,IAAI,cAAkC,CAAC;AACvC,IAAI,UAA8B,CAAC;AAEnC,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC1E,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC;IAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;AACvC,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,cAAc,CAAC;IACrD,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,UAAU,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAsC,CAAC;QACvE,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACtC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC;YAC9B,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAsC,CAAC;QACvE,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CACd,UAAU,CAAC,gBAAgB,EAAE,EAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EACnC,OAAO,CACR,CAAC;QACF,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC;QAC3C,cAAc,CAAC;YACb,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,iBAAiB;SAC5B,CAAC;QACF,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,cAAc,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,cAAc,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,cAAc,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,cAAc,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC;YAC9B,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC1B,cAAc,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,cAAc,EAAE,CAAC;QACjB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}