rudel 0.2.1 → 0.2.2

package/dist/cli.js

@@ -1887,7 +1887,7 @@ async function run(app, inputs, context) {
 // package.json
 var package_default = {
   name: "rudel",
-  version: "0.2.1",
+  version: "0.2.2",
   type: "module",
   description: "CLI for the Coding Agent Analytics Platform rudel.ai",
   license: "MIT",
@@ -11021,7 +11021,6 @@ var SessionAnalyticsSchema = exports_external.object({
   skills: exports_external.array(exports_external.string()),
   slash_commands: exports_external.array(exports_external.string()),
   has_commit: exports_external.boolean(),
-  session_archetype: exports_external.string(),
   model_used: exports_external.string(),
   used_plan_mode: exports_external.boolean(),
   source: SourceSchema.optional()
@@ -11044,6 +11043,8 @@ var SessionAnalyticsSummaryComparisonSchema = exports_external.object({
   })
 });
 var SessionListInputSchema = DaysInputSchema.extend({
+  startDate: exports_external.string().date().optional(),
+  endDate: exports_external.string().date().optional(),
   userId: exports_external.string().max(MAX_ID_FILTER_LENGTH).optional(),
   projectPath: exports_external.string().max(MAX_PATH_FILTER_LENGTH).optional(),
   repository: exports_external.string().max(MAX_PATH_FILTER_LENGTH).optional(),
@@ -11057,7 +11058,6 @@ var VALID_DIMENSIONS = [
   "user_id",
   "project_path",
   "repository",
-  "session_archetype",
   "model_used",
   "has_commit",
   "used_plan_mode",
@@ -11111,7 +11111,6 @@ var SessionDetailSchema = exports_external.object({
   success_score: exports_external.number().optional(),
   duration_min: exports_external.number().optional(),
   total_interactions: exports_external.number().optional(),
-  session_archetype: exports_external.string().optional(),
   model_used: exports_external.string().optional(),
   source: SourceSchema.optional()
 });
@@ -11848,43 +11847,77 @@ var contract = {
 };
 
 // src/lib/credentials.ts
+import { randomUUID } from "node:crypto";
 import {
+  chmodSync,
   existsSync as existsSync6,
   mkdirSync as mkdirSync2,
   readFileSync as readFileSync5,
+  renameSync,
   rmSync,
+  statSync,
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
 import { join as join9 } from "node:path";
+var PRIVATE_DIRECTORY_MODE2 = 448;
+var PRIVATE_FILE_MODE2 = 384;
 function getConfigDir() {
   return process.env.RUDEL_CONFIG_DIR ?? join9(homedir7(), ".rudel");
 }
-function getCredentialsPath() {
-  return join9(getConfigDir(), "credentials.json");
-}
 function saveCredentials(credentials) {
   const dir = getConfigDir();
-  if (!existsSync6(dir)) {
-    mkdirSync2(dir, { recursive: true, mode: 448 });
+  const path = getCredentialsPath(dir);
+  const content = JSON.stringify(credentials, null, 2);
+  mkdirSync2(dir, { recursive: true, mode: PRIVATE_DIRECTORY_MODE2 });
+  enforcePrivateMode(dir, PRIVATE_DIRECTORY_MODE2);
+  if (existsSync6(path)) {
+    enforcePrivateMode(path, PRIVATE_FILE_MODE2);
   }
-  writeFileSync3(getCredentialsPath(), JSON.stringify(credentials, null, 2), {
-    mode: 384
-  });
+  replaceCredentialsFile(path, content);
 }
 function loadCredentials() {
-  const path = getCredentialsPath();
+  const dir = getConfigDir();
+  const path = getCredentialsPath(dir);
   if (!existsSync6(path))
     return null;
+  enforcePrivateMode(dir, PRIVATE_DIRECTORY_MODE2);
+  enforcePrivateMode(path, PRIVATE_FILE_MODE2);
   const content = readFileSync5(path, "utf-8");
   return JSON.parse(content);
 }
 function clearCredentials() {
-  const path = getCredentialsPath();
+  const path = getCredentialsPath(getConfigDir());
   if (existsSync6(path)) {
     rmSync(path);
   }
 }
+function getCredentialsPath(configDir) {
+  return join9(configDir, "credentials.json");
+}
+function replaceCredentialsFile(path, content) {
+  const temporaryPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  try {
+    writeFileSync3(temporaryPath, content, {
+      encoding: "utf8",
+      flag: "wx",
+      mode: PRIVATE_FILE_MODE2
+    });
+    enforcePrivateMode(temporaryPath, PRIVATE_FILE_MODE2);
+    renameSync(temporaryPath, path);
+    enforcePrivateMode(path, PRIVATE_FILE_MODE2);
+  } finally {
+    rmSync(temporaryPath, { force: true });
+  }
+}
+function enforcePrivateMode(path, mode) {
+  if (process.platform === "win32")
+    return;
+  chmodSync(path, mode);
+  if ((statSync(path).mode & 511) !== mode) {
+    throw new Error("Unable to establish private credential permissions");
+  }
+}
 
 // src/lib/insecure-url-opt-in.ts
 var TRUTHY_ENV_VALUES = ["1", "true", "yes", "on"];
@@ -14416,7 +14449,7 @@ function renderBatchSummary(summary, options) {
 }
 
 // src/lib/product-analytics.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { join as join11 } from "node:path";
@@ -18938,7 +18971,7 @@ function getOrCreateCliInstallationId() {
   if (typeof state.cli_installation_id === "string") {
     return state.cli_installation_id;
   }
-  const cliInstallationId = randomUUID();
+  const cliInstallationId = randomUUID2();
   writeAnalyticsState({
     ...state,
     cli_installation_id: cliInstallationId
@@ -19048,7 +19081,7 @@ var CliProductAnalyticsEvents = PRODUCT_ANALYTICS_EVENTS;
 
 // src/lib/project-config.ts
 import {
-  chmodSync,
+  chmodSync as chmodSync2,
   existsSync as existsSync9,
   mkdirSync as mkdirSync4,
   readFileSync as readFileSync8,
@@ -19066,18 +19099,18 @@ function loadProjectsConfig() {
   const path = getProjectsConfigPath();
   if (!existsSync9(path))
     return { projects: {} };
-  chmodSync(getConfigDir3(), 448);
-  chmodSync(path, 384);
+  chmodSync2(getConfigDir3(), 448);
+  chmodSync2(path, 384);
   const content = readFileSync8(path, "utf-8");
   return JSON.parse(content);
 }
 function saveProjectsConfig(config) {
   const dir = getConfigDir3();
   mkdirSync4(dir, { recursive: true, mode: 448 });
-  chmodSync(dir, 448);
+  chmodSync2(dir, 448);
   const path = getProjectsConfigPath();
   writeFileSync5(path, JSON.stringify(config, null, 2), { mode: 384 });
-  chmodSync(path, 384);
+  chmodSync2(path, 384);
 }
 async function getProjectKey(cwd) {
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "rudel",
-	"version": "0.2.1",
+	"version": "0.2.2",
 	"type": "module",
 	"description": "CLI for the Coding Agent Analytics Platform rudel.ai",
 	"license": "MIT",