rudel 0.2.1 → 0.2.3

package/dist/cli.js

@@ -1887,7 +1887,7 @@ async function run(app, inputs, context) {
 // package.json
 var package_default = {
   name: "rudel",
-  version: "0.2.1",
+  version: "0.2.3",
   type: "module",
   description: "CLI for the Coding Agent Analytics Platform rudel.ai",
   license: "MIT",
@@ -1951,9 +1951,9 @@ var package_default = {
 };
 
 // ../../packages/agent-adapters/src/adapters/claude-code/index.ts
-import { readdir as readdir2, readFile as readFile2, stat } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile2, realpath, stat } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname2, join as join3 } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join3, relative, sep } from "node:path";
 
 // ../../node_modules/zod/v3/external.js
 var exports_external = {};
@@ -6070,12 +6070,31 @@ async function ingestRudelCodexSessions(ingestor, rows, options) {
   const data = options?.validate ? rows.map((row) => RudelCodexSessionsRowSchema.parse(row)) : rows;
   await ingestor.insert({ table: "rudel.codex_sessions", values: data });
 }
+// ../../packages/agent-adapters/src/errors.ts
+var SOURCE_DISPLAY_NAMES = {
+  claude_code: "Claude Code",
+  codex: "Codex"
+};
+function getMissingTranscriptTimestampMessage(source) {
+  return `${SOURCE_DISPLAY_NAMES[source]} transcript contains no valid timestamp`;
+}
+function isMissingTranscriptTimestampMessage(source, message) {
+  return message === getMissingTranscriptTimestampMessage(source);
+}
+
+class MissingTranscriptTimestampError extends Error {
+  constructor(source) {
+    super(getMissingTranscriptTimestampMessage(source));
+    this.name = "MissingTranscriptTimestampError";
+  }
+}
+
 // ../../packages/agent-adapters/src/utils.ts
 import { readdir, readFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 function toClickHouseDateTime(isoString) {
-  return isoString.replace("T", " ").replace("Z", "").replace(/\+.*$/, "");
+  return new Date(isoString).toISOString().replace("T", " ").replace("Z", "");
 }
 async function readFileWithRetry(filePath, maxRetries = 5) {
   const delayMs = 500;
@@ -6210,6 +6229,7 @@ function removeHook() {
 
 // ../../packages/agent-adapters/src/adapters/claude-code/index.ts
 var SESSIONS_BASE_DIR = join3(homedir2(), ".claude", "projects");
+var SAFE_BASENAME_PATTERN = /^[A-Za-z0-9_-]{1,200}$/;
 function encodeProjectPath(projectPath) {
   return projectPath.replace(/\//g, "-");
 }
@@ -6254,8 +6274,11 @@ function extractAgentIds(sessionContent) {
       continue;
     try {
       const entry = JSON.parse(line);
-      if (entry.toolUseResult?.agentId) {
-        agentIds.add(entry.toolUseResult.agentId);
+      if (!isRecord(entry) || !isRecord(entry.toolUseResult))
+        continue;
+      const agentId = entry.toolUseResult.agentId;
+      if (isSafeBasename(agentId)) {
+        agentIds.add(agentId);
       }
     } catch {}
   }
@@ -6263,12 +6286,19 @@ function extractAgentIds(sessionContent) {
 }
 async function readSubagentFiles(sessionDir, agentIds, sessionId) {
   const subagents = [];
+  const subagentDirs = await resolveSubagentDirectories(sessionDir, sessionId);
   for (const agentId of agentIds) {
-    const possiblePaths = [
-      join3(sessionDir, `agent-${agentId}.jsonl`),
-      ...sessionId ? [join3(sessionDir, sessionId, "subagents", `agent-${agentId}.jsonl`)] : []
-    ];
-    for (const agentPath of possiblePaths) {
+    if (!isSafeBasename(agentId))
+      continue;
+    for (const subagentDir of subagentDirs) {
+      let agentPath;
+      try {
+        agentPath = await realpath(join3(subagentDir, `agent-${agentId}.jsonl`));
+      } catch {
+        continue;
+      }
+      if (!isContainedPath(subagentDir, agentPath))
+        continue;
       try {
         const content = await readFile2(agentPath, "utf-8");
         subagents.push({ agentId, content });
@@ -6343,6 +6373,9 @@ class ClaudeCodeAdapter {
   }
   async buildUploadRequest(session, context) {
     const content = await readFileWithRetry(session.transcriptPath);
+    if (!this.extractTimestamps(content)) {
+      throw new MissingTranscriptTimestampError(this.source);
+    }
     const agentIds = extractAgentIds(content);
     const sessionDir = dirname2(session.transcriptPath);
     const subagents = agentIds.length > 0 ? await readSubagentFiles(sessionDir, agentIds, session.sessionId) : [];
@@ -6365,6 +6398,8 @@ class ClaudeCodeAdapter {
   extractTimestamps(content) {
     let min = null;
     let max = null;
+    let minTime = Number.POSITIVE_INFINITY;
+    let maxTime = Number.NEGATIVE_INFINITY;
     for (const line of content.split(`
 `)) {
       if (!line)
@@ -6375,12 +6410,23 @@ class ClaudeCodeAdapter {
       } catch {
         continue;
       }
-      if ((parsed.type === "user" || parsed.type === "assistant") && parsed.timestamp) {
-        const ts = parsed.timestamp;
-        if (!min || ts < min)
-          min = ts;
-        if (!max || ts > max)
-          max = ts;
+      if (!isRecord(parsed))
+        continue;
+      if (parsed.type !== "user" && parsed.type !== "assistant")
+        continue;
+      if (typeof parsed.timestamp !== "string")
+        continue;
+      const timestampTime = Date.parse(parsed.timestamp);
+      if (!Number.isFinite(timestampTime))
+        continue;
+      const timestamp = new Date(timestampTime).toISOString();
+      if (timestampTime < minTime) {
+        min = timestamp;
+        minTime = timestampTime;
+      }
+      if (timestampTime > maxTime) {
+        max = timestamp;
+        maxTime = timestampTime;
       }
     }
     if (!min || !max)
@@ -6399,10 +6445,13 @@ class ClaudeCodeAdapter {
         subagents[sub.agentId] = sub.content;
       }
     }
-    const timestamps = this.extractTimestamps(input.content);
+    const timestamps = context.timestamps ?? this.extractTimestamps(input.content);
+    if (!timestamps) {
+      throw new MissingTranscriptTimestampError(this.source);
+    }
     return {
-      session_date: timestamps ? toClickHouseDateTime(timestamps.sessionDate) : now,
-      last_interaction_date: timestamps ? toClickHouseDateTime(timestamps.lastInteractionDate) : now,
+      session_date: toClickHouseDateTime(timestamps.sessionDate),
+      last_interaction_date: toClickHouseDateTime(timestamps.lastInteractionDate),
       session_id: input.sessionId,
       organization_id: context.organizationId,
       project_path: input.projectPath,
@@ -6451,6 +6500,35 @@ class ClaudeCodeAdapter {
   }
 }
 var claudeCodeAdapter = new ClaudeCodeAdapter;
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function isSafeBasename(value) {
+  return typeof value === "string" && SAFE_BASENAME_PATTERN.test(value);
+}
+async function resolveSubagentDirectories(sessionDir, sessionId) {
+  let canonicalSessionDir;
+  try {
+    canonicalSessionDir = await realpath(sessionDir);
+  } catch {
+    return [];
+  }
+  const directories = [canonicalSessionDir];
+  if (!isSafeBasename(sessionId)) {
+    return directories;
+  }
+  try {
+    const nestedDir = await realpath(join3(canonicalSessionDir, sessionId, "subagents"));
+    if (isContainedPath(canonicalSessionDir, nestedDir)) {
+      directories.push(nestedDir);
+    }
+  } catch {}
+  return directories;
+}
+function isContainedPath(parentPath, candidatePath) {
+  const pathFromParent = relative(parentPath, candidatePath);
+  return pathFromParent !== "" && pathFromParent !== ".." && !pathFromParent.startsWith(`..${sep}`) && !isAbsolute(pathFromParent);
+}
 // ../../packages/agent-adapters/src/adapters/codex/index.ts
 import { readFile as readFile3 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
@@ -6598,7 +6676,7 @@ function skipVoid(str, ptr, banNewLines, banComments) {
     ptr++;
   return banComments || c !== "#" ? ptr : skipVoid(str, skipComment(str, ptr), banNewLines);
 }
-function skipUntil(str, ptr, sep, end, banNewLines = false) {
+function skipUntil(str, ptr, sep2, end, banNewLines = false) {
   if (!end) {
     ptr = indexOfNewline(str, ptr);
     return ptr < 0 ? str.length : ptr;
@@ -6607,7 +6685,7 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
     let c = str[i];
     if (c === "#") {
       i = indexOfNewline(str, i);
-    } else if (c === sep) {
+    } else if (c === sep2) {
       return i + 1;
     } else if (c === end || banNewLines && (c === `
 ` || c === "\r" && str[i + 1] === `
@@ -7680,6 +7758,9 @@ class CodexAdapter {
   }
   async buildUploadRequest(session, context) {
     const content = await readFile3(session.transcriptPath, "utf-8");
+    if (!this.extractTimestamps(content)) {
+      throw new MissingTranscriptTimestampError(this.source);
+    }
     return {
       source: this.source,
       sessionId: session.sessionId,
@@ -7698,6 +7779,8 @@ class CodexAdapter {
   extractTimestamps(content) {
     let min = null;
     let max = null;
+    let minTime = Number.POSITIVE_INFINITY;
+    let maxTime = Number.NEGATIVE_INFINITY;
     for (const line of content.split(`
 `)) {
       if (!line)
@@ -7708,12 +7791,19 @@ class CodexAdapter {
       } catch {
         continue;
       }
-      if (parsed.timestamp) {
-        const ts = parsed.timestamp;
-        if (!min || ts < min)
-          min = ts;
-        if (!max || ts > max)
-          max = ts;
+      if (!isRecord2(parsed) || typeof parsed.timestamp !== "string")
+        continue;
+      const timestampTime = Date.parse(parsed.timestamp);
+      if (!Number.isFinite(timestampTime))
+        continue;
+      const timestamp = new Date(timestampTime).toISOString();
+      if (timestampTime < minTime) {
+        min = timestamp;
+        minTime = timestampTime;
+      }
+      if (timestampTime > maxTime) {
+        max = timestamp;
+        maxTime = timestampTime;
       }
     }
     if (!min || !max)
@@ -7726,10 +7816,13 @@ class CodexAdapter {
   }
   buildRow(input, context) {
     const now = context.ingestedAt.toISOString().replace("Z", "");
-    const timestamps = this.extractTimestamps(input.content);
+    const timestamps = context.timestamps ?? this.extractTimestamps(input.content);
+    if (!timestamps) {
+      throw new MissingTranscriptTimestampError(this.source);
+    }
     return {
-      session_date: timestamps ? toClickHouseDateTime(timestamps.sessionDate) : now,
-      last_interaction_date: timestamps ? toClickHouseDateTime(timestamps.lastInteractionDate) : now,
+      session_date: toClickHouseDateTime(timestamps.sessionDate),
+      last_interaction_date: toClickHouseDateTime(timestamps.lastInteractionDate),
       session_id: input.sessionId,
       organization_id: context.organizationId,
       project_path: input.projectPath,
@@ -7747,6 +7840,9 @@ class CodexAdapter {
   }
 }
 var codexAdapter = new CodexAdapter;
+function isRecord2(value) {
+  return typeof value === "object" && value !== null;
+}
 // ../../packages/agent-adapters/src/registry.ts
 import { existsSync as existsSync3 } from "node:fs";
 var adapters = new Map;
@@ -11021,7 +11117,6 @@ var SessionAnalyticsSchema = exports_external.object({
   skills: exports_external.array(exports_external.string()),
   slash_commands: exports_external.array(exports_external.string()),
   has_commit: exports_external.boolean(),
-  session_archetype: exports_external.string(),
   model_used: exports_external.string(),
   used_plan_mode: exports_external.boolean(),
   source: SourceSchema.optional()
@@ -11044,6 +11139,8 @@ var SessionAnalyticsSummaryComparisonSchema = exports_external.object({
   })
 });
 var SessionListInputSchema = DaysInputSchema.extend({
+  startDate: exports_external.string().date().optional(),
+  endDate: exports_external.string().date().optional(),
   userId: exports_external.string().max(MAX_ID_FILTER_LENGTH).optional(),
   projectPath: exports_external.string().max(MAX_PATH_FILTER_LENGTH).optional(),
   repository: exports_external.string().max(MAX_PATH_FILTER_LENGTH).optional(),
@@ -11057,7 +11154,6 @@ var VALID_DIMENSIONS = [
   "user_id",
   "project_path",
   "repository",
-  "session_archetype",
   "model_used",
   "has_commit",
   "used_plan_mode",
@@ -11111,7 +11207,6 @@ var SessionDetailSchema = exports_external.object({
   success_score: exports_external.number().optional(),
   duration_min: exports_external.number().optional(),
   total_interactions: exports_external.number().optional(),
-  session_archetype: exports_external.string().optional(),
   model_used: exports_external.string().optional(),
   source: SourceSchema.optional()
 });
@@ -11367,74 +11462,90 @@ var WrappedDecimalClaimEntitlementSchema = exports_external.object({
 });
 
 // ../../packages/api-routes/src/schemas/wrapped-share.ts
+var WRAPPED_SHARE_RESOURCE_LIMITS = {
+  backMetricCount: 20,
+  classNameLength: 512,
+  imageUrlLength: 2048,
+  snapshotBytes: 64 * 1024,
+  socialImageBytes: 1024 * 1024,
+  statItemCount: 8,
+  textLength: 256
+};
+var WRAPPED_SHARE_SOCIAL_IMAGE_DATA_URL_PREFIX = "data:image/png;base64,";
+var WRAPPED_SHARE_SOCIAL_IMAGE_DATA_URL_MAX_LENGTH = WRAPPED_SHARE_SOCIAL_IMAGE_DATA_URL_PREFIX.length + Math.ceil(WRAPPED_SHARE_RESOURCE_LIMITS.socialImageBytes / 3) * 4;
+var WrappedShareTextSchema = exports_external.string().max(WRAPPED_SHARE_RESOURCE_LIMITS.textLength);
+var WrappedShareRequiredTextSchema = WrappedShareTextSchema.min(1);
 var WrappedShareThemeSchema = exports_external.enum(["dark", "light", "muted"]);
 var WrappedShareVariantSchema = exports_external.enum(["normal", "decimal"]);
 var WrappedShareLayoutModeSchema = exports_external.enum(["front", "front_back"]);
 var WrappedShareIdSchema = exports_external.string().trim().min(1).max(128).regex(/^[A-Za-z0-9_-]+$/u);
 var WrappedShareHeaderMetricSchema = exports_external.object({
-  label: exports_external.string().optional(),
-  title: exports_external.string().optional(),
-  value: exports_external.string().min(1)
-});
+  label: WrappedShareTextSchema.optional(),
+  title: WrappedShareTextSchema.optional(),
+  value: WrappedShareRequiredTextSchema
+}).strict();
 var WrappedShareStatItemIconSchema = exports_external.enum(["claude", "codex"]);
 var WrappedShareStatItemSchema = exports_external.object({
   icon: WrappedShareStatItemIconSchema.optional(),
-  key: exports_external.string().min(1),
-  label: exports_external.string().optional(),
-  title: exports_external.string().optional(),
-  value: exports_external.string().min(1)
-});
+  key: WrappedShareRequiredTextSchema.regex(/^[A-Za-z0-9][A-Za-z0-9_-]*$/u),
+  label: WrappedShareTextSchema.optional(),
+  title: WrappedShareTextSchema.optional(),
+  value: WrappedShareRequiredTextSchema
+}).strict();
 var WrappedShareBackMetricSchema = exports_external.object({
-  label: exports_external.string(),
+  label: WrappedShareTextSchema,
   slot: exports_external.enum(["body", "footer"]).optional(),
-  value: exports_external.string().min(1)
-});
+  value: WrappedShareRequiredTextSchema
+}).strict();
 var WrappedShareRevealMetricsSchema = exports_external.object({
   avgSessionMin: exports_external.number().nonnegative().nullable(),
   commitRate: exports_external.number().min(0).max(100).nullable(),
   daysSinceFirst: exports_external.number().nonnegative(),
   distinctProjectCount: exports_external.number().nonnegative(),
   longestSessionMin: exports_external.number().nonnegative().nullable()
-});
+}).strict();
 var WrappedShareAppearanceSchema = exports_external.object({
   layoutMode: WrappedShareLayoutModeSchema,
   showArchetypeLabel: exports_external.boolean()
+}).strict();
+var WrappedShareSocialImageDataUrlSchema = exports_external.string().max(WRAPPED_SHARE_SOCIAL_IMAGE_DATA_URL_MAX_LENGTH).regex(/^data:image\/png;base64,[A-Za-z0-9+/]+={0,2}$/u).refine(isWrappedShareSocialImageWithinByteLimit, {
+  message: `Wrapped share social image must be at most ${WRAPPED_SHARE_RESOURCE_LIMITS.socialImageBytes} bytes`
 });
-var WrappedShareSocialImageDataUrlSchema = exports_external.string().max(7000000).regex(/^data:image\/png;base64,[A-Za-z0-9+/]+={0,2}$/u);
 var WrappedShareRowSchema = exports_external.object({
   activeDays: exports_external.number().nonnegative(),
   cost: exports_external.number().nonnegative(),
-  displayName: exports_external.string().min(1),
-  favoriteModel: exports_external.string().nullable(),
+  displayName: WrappedShareRequiredTextSchema,
+  favoriteModel: WrappedShareTextSchema.nullable(),
   hasActivity: exports_external.boolean(),
-  imageUrl: exports_external.string().nullable(),
+  imageUrl: exports_external.string().max(WRAPPED_SHARE_RESOURCE_LIMITS.imageUrlLength).nullable(),
   inputTokens: exports_external.number().nonnegative(),
-  lastActiveDate: exports_external.string().nullable(),
+  lastActiveDate: WrappedShareTextSchema.nullable(),
   outputTokens: exports_external.number().nonnegative(),
-  role: exports_external.string().min(1),
+  role: WrappedShareRequiredTextSchema,
   totalSessions: exports_external.number().nonnegative(),
   totalTokens: exports_external.number().nonnegative()
-});
-var WrappedShareSnapshotSchema = exports_external.object({
+}).strict();
+var WrappedShareSnapshotObjectSchema = exports_external.object({
   appearance: WrappedShareAppearanceSchema.optional(),
-  archetypeLabel: exports_external.string().min(1),
-  backMetrics: exports_external.array(WrappedShareBackMetricSchema).optional(),
+  archetypeLabel: WrappedShareRequiredTextSchema,
+  backMetrics: exports_external.array(WrappedShareBackMetricSchema).max(WRAPPED_SHARE_RESOURCE_LIMITS.backMetricCount).optional(),
   headerLeftMetric: WrappedShareHeaderMetricSchema.optional(),
   headerRightMetric: WrappedShareHeaderMetricSchema.optional(),
   revealMetrics: WrappedShareRevealMetricsSchema.optional(),
   row: WrappedShareRowSchema,
-  shellClassName: exports_external.string().min(1),
-  socialImageDataUrl: WrappedShareSocialImageDataUrlSchema.optional(),
-  statItems: exports_external.array(WrappedShareStatItemSchema),
+  shellClassName: exports_external.string().min(1).max(WRAPPED_SHARE_RESOURCE_LIMITS.classNameLength),
+  statItems: exports_external.array(WrappedShareStatItemSchema).max(WRAPPED_SHARE_RESOURCE_LIMITS.statItemCount),
   theme: WrappedShareThemeSchema
+}).strict();
+var WrappedShareSnapshotSchema = WrappedShareSnapshotObjectSchema.refine(isWrappedShareSnapshotWithinByteLimit, {
+  message: `Wrapped share snapshot must be at most ${WRAPPED_SHARE_RESOURCE_LIMITS.snapshotBytes} bytes`
 });
-var PublicWrappedShareSnapshotSchema = WrappedShareSnapshotSchema.omit({
-  socialImageDataUrl: true
-});
+var PublicWrappedShareSnapshotSchema = WrappedShareSnapshotSchema;
 var CreateWrappedShareInputSchema = exports_external.object({
+  socialImageDataUrl: WrappedShareSocialImageDataUrlSchema.optional(),
   snapshot: WrappedShareSnapshotSchema,
   variant: WrappedShareVariantSchema.default("normal")
-});
+}).strict();
 var GetPublicWrappedShareInputSchema = exports_external.object({
   shareId: WrappedShareIdSchema
 });
@@ -11447,6 +11558,22 @@ var WrappedShareRecordSchema = exports_external.object({
 var PublicWrappedShareSchema = WrappedShareRecordSchema.extend({
   snapshot: PublicWrappedShareSnapshotSchema
 });
+function getWrappedShareSnapshotByteLength(snapshot) {
+  const snapshotJson = JSON.stringify(snapshot);
+  if (snapshotJson === undefined) {
+    return 0;
+  }
+  return new TextEncoder().encode(snapshotJson).byteLength;
+}
+function isWrappedShareSnapshotWithinByteLimit(snapshot) {
+  return getWrappedShareSnapshotByteLength(snapshot) <= WRAPPED_SHARE_RESOURCE_LIMITS.snapshotBytes;
+}
+function isWrappedShareSocialImageWithinByteLimit(dataUrl) {
+  const base64 = dataUrl.slice(WRAPPED_SHARE_SOCIAL_IMAGE_DATA_URL_PREFIX.length);
+  const paddingLength = base64.endsWith("==") ? 2 : base64.endsWith("=") ? 1 : 0;
+  const decodedBytes = base64.length * 3 / 4 - paddingLength;
+  return Number.isInteger(decodedBytes) && decodedBytes <= WRAPPED_SHARE_RESOURCE_LIMITS.socialImageBytes;
+}
 
 // ../../packages/api-routes/src/schemas/wrapped-resume.ts
 var CreateWrappedResumeInputSchema = exports_external.object({
@@ -11639,6 +11766,10 @@ var CliUserSchema = exports_external.object({
 var CliSetupStatusSchema = exports_external.object({
   hasCliLogin: exports_external.boolean()
 });
+var ChatwootIdentitySchema = exports_external.object({
+  identifier: exports_external.string(),
+  identifier_hash: exports_external.string().regex(/^[a-f0-9]{64}$/u)
+});
 var OrganizationSchema = exports_external.object({
   id: exports_external.string(),
   name: exports_external.string(),
@@ -11646,6 +11777,7 @@ var OrganizationSchema = exports_external.object({
   logo: exports_external.string().nullable()
 });
 var TeamInviteLinkSchema = exports_external.object({
+  expires_at: exports_external.string().datetime(),
   invite_url: exports_external.string().url(),
   organization_id: exports_external.string(),
   organization_name: exports_external.string()
@@ -11732,6 +11864,9 @@ var contract = {
     revokeToken: oc.output(exports_external.object({ success: exports_external.literal(true) })),
     setupStatus: oc.output(CliSetupStatusSchema)
   },
+  chatwoot: {
+    identity: oc.output(ChatwootIdentitySchema.nullable())
+  },
   listMyOrganizations: oc.output(exports_external.array(OrganizationSchema)),
   ingestSession: oc.input(IngestSessionInputSchema).output(IngestSessionOutputSchema).errors({
     [REDACTION_BUDGET_EXCEEDED_CODE]: {
@@ -11758,7 +11893,8 @@ var contract = {
   getOrganizationSessionCount: oc.input(exports_external.object({ organizationId: exports_external.string(), userId: exports_external.string().optional() })).output(exports_external.object({ count: exports_external.number() })),
   deleteOrganization: oc.input(exports_external.object({ organizationId: exports_external.string() })).output(exports_external.object({ success: exports_external.literal(true) })),
   teamInviteLink: {
-    get: oc.input(exports_external.object({ organizationId: exports_external.string() })).output(TeamInviteLinkSchema),
+    create: oc.input(exports_external.object({ organizationId: exports_external.string() })).output(TeamInviteLinkSchema),
+    revoke: oc.input(exports_external.object({ organizationId: exports_external.string() })).output(exports_external.object({ success: exports_external.literal(true) })),
     accept: oc.input(exports_external.object({ token: exports_external.string().min(1) })).output(TeamInviteAcceptResultSchema)
   },
   wrappedShare: {
@@ -11848,43 +11984,77 @@ var contract = {
 };
 
 // src/lib/credentials.ts
+import { randomUUID } from "node:crypto";
 import {
+  chmodSync,
   existsSync as existsSync6,
   mkdirSync as mkdirSync2,
   readFileSync as readFileSync5,
+  renameSync,
   rmSync,
+  statSync,
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
 import { join as join9 } from "node:path";
+var PRIVATE_DIRECTORY_MODE2 = 448;
+var PRIVATE_FILE_MODE2 = 384;
 function getConfigDir() {
   return process.env.RUDEL_CONFIG_DIR ?? join9(homedir7(), ".rudel");
 }
-function getCredentialsPath() {
-  return join9(getConfigDir(), "credentials.json");
-}
 function saveCredentials(credentials) {
   const dir = getConfigDir();
-  if (!existsSync6(dir)) {
-    mkdirSync2(dir, { recursive: true, mode: 448 });
+  const path = getCredentialsPath(dir);
+  const content = JSON.stringify(credentials, null, 2);
+  mkdirSync2(dir, { recursive: true, mode: PRIVATE_DIRECTORY_MODE2 });
+  enforcePrivateMode(dir, PRIVATE_DIRECTORY_MODE2);
+  if (existsSync6(path)) {
+    enforcePrivateMode(path, PRIVATE_FILE_MODE2);
   }
-  writeFileSync3(getCredentialsPath(), JSON.stringify(credentials, null, 2), {
-    mode: 384
-  });
+  replaceCredentialsFile(path, content);
 }
 function loadCredentials() {
-  const path = getCredentialsPath();
+  const dir = getConfigDir();
+  const path = getCredentialsPath(dir);
   if (!existsSync6(path))
     return null;
+  enforcePrivateMode(dir, PRIVATE_DIRECTORY_MODE2);
+  enforcePrivateMode(path, PRIVATE_FILE_MODE2);
   const content = readFileSync5(path, "utf-8");
   return JSON.parse(content);
 }
 function clearCredentials() {
-  const path = getCredentialsPath();
+  const path = getCredentialsPath(getConfigDir());
   if (existsSync6(path)) {
     rmSync(path);
   }
 }
+function getCredentialsPath(configDir) {
+  return join9(configDir, "credentials.json");
+}
+function replaceCredentialsFile(path, content) {
+  const temporaryPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  try {
+    writeFileSync3(temporaryPath, content, {
+      encoding: "utf8",
+      flag: "wx",
+      mode: PRIVATE_FILE_MODE2
+    });
+    enforcePrivateMode(temporaryPath, PRIVATE_FILE_MODE2);
+    renameSync(temporaryPath, path);
+    enforcePrivateMode(path, PRIVATE_FILE_MODE2);
+  } finally {
+    rmSync(temporaryPath, { force: true });
+  }
+}
+function enforcePrivateMode(path, mode) {
+  if (process.platform === "win32")
+    return;
+  chmodSync(path, mode);
+  if ((statSync(path).mode & 511) !== mode) {
+    throw new Error("Unable to establish private credential permissions");
+  }
+}
 
 // src/lib/insecure-url-opt-in.ts
 var TRUTHY_ENV_VALUES = ["1", "true", "yes", "on"];
@@ -13966,14 +14136,17 @@ async function batchUpload(options) {
   let succeeded = 0;
   let failed = 0;
   let skipped = 0;
+  let deferred = 0;
   let completed = 0;
   let rateLimited = false;
   const errors2 = [];
+  const skippedItems = [];
+  const skippedSessionIds = new Set;
   let redacted = {};
   let redactedBytes = 0;
   await pMap(items, async (item) => {
     if (rateLimited) {
-      skipped++;
+      deferred++;
       const error = "Skipped — rate limit reached. Run `rudel upload --retry` to upload remaining sessions.";
       await recordFailedUpload({
         sessionId: item.sessionId,
@@ -13997,6 +14170,13 @@ async function batchUpload(options) {
         redacted = mergeRedactionCounts(redacted, result.redacted ?? {});
         redactedBytes += result.redactedBytes ?? 0;
         await removeFailedUpload(item.sessionId);
+      } else if (result.retryable === false) {
+        skipped++;
+        skippedItems.push({
+          label: item.label,
+          reason: result.error ?? "Upload cannot be retried"
+        });
+        skippedSessionIds.add(item.sessionId);
       } else {
         failed++;
         const error = result.error ?? "Unknown error";
@@ -14014,30 +14194,48 @@ async function batchUpload(options) {
         });
       }
     } catch (err) {
-      failed++;
       const error = err instanceof Error ? err.message : String(err);
-      errors2.push({ label: item.label, error });
-      await recordFailedUpload({
-        sessionId: item.sessionId,
-        transcriptPath: item.transcriptPath,
-        projectPath: item.projectPath,
-        source: item.source,
-        organizationId: item.organizationId,
-        error
-      });
+      if (err instanceof MissingTranscriptTimestampError) {
+        skipped++;
+        skippedItems.push({ label: item.label, reason: error });
+        skippedSessionIds.add(item.sessionId);
+      } else {
+        failed++;
+        errors2.push({ label: item.label, error });
+        await recordFailedUpload({
+          sessionId: item.sessionId,
+          transcriptPath: item.transcriptPath,
+          projectPath: item.projectPath,
+          source: item.source,
+          organizationId: item.organizationId,
+          error
+        });
+      }
     } finally {
       completed++;
       onItemComplete?.(completed, total);
     }
   }, { concurrency, stopOnError: false });
-  if (rateLimited && skipped > 0) {
+  for (const sessionId of skippedSessionIds) {
+    await removeFailedUpload(sessionId);
+  }
+  if (rateLimited && deferred > 0) {
     errors2.push({
       label: "Rate limit",
-      error: `${skipped} session(s) skipped. Run \`rudel upload --retry\` later to upload them.`
+      error: `${deferred} session(s) skipped. Run \`rudel upload --retry\` later to upload them.`
     });
-    failed += skipped;
+    failed += deferred;
   }
-  return { succeeded, failed, total, errors: errors2, redacted, redactedBytes };
+  return {
+    succeeded,
+    failed,
+    skipped,
+    total,
+    errors: errors2,
+    skippedItems,
+    redacted,
+    redactedBytes
+  };
 }
 
 // src/lib/upload-endpoint.ts
@@ -14156,13 +14354,13 @@ function formatServerUploadError(error) {
   return `Rudel server error (${status}). This is not an auth problem. Retry later with: rudel upload --retry; if it repeats, share this status with the Rudel team.`;
 }
 function getPayloadTooLargeDetail(error) {
-  const data = isRecord(error.data) ? error.data : null;
+  const data = isRecord3(error.data) ? error.data : null;
   const bodyValue = data?.body;
-  const body = isRecord(bodyValue) ? bodyValue : null;
+  const body = isRecord3(bodyValue) ? bodyValue : null;
   return getStringField(body, "error") ?? getStringField(data, "error");
 }
 function getErrorData(error) {
-  const data = isRecord(error.data) ? error.data : null;
+  const data = isRecord3(error.data) ? error.data : null;
   return {
     authMessage: getStringField(data, "authMessage"),
     actualBytes: getNumberField(data, "actualBytes"),
@@ -14175,7 +14373,7 @@ function getErrorData(error) {
   };
 }
 function getRedactionBudgetErrorData(error) {
-  const data = isRecord(error.data) ? error.data : null;
+  const data = isRecord3(error.data) ? error.data : null;
   const inputBytes = getNumberField(data, "inputBytes");
   const redactedBytes = getNumberField(data, "redactedBytes");
   const ruleIdsValue = data?.ruleIds;
@@ -14192,7 +14390,7 @@ function getNumberField(record, key) {
   const value3 = record?.[key];
   return typeof value3 === "number" && Number.isFinite(value3) ? value3 : null;
 }
-function isRecord(value3) {
+function isRecord3(value3) {
   return typeof value3 === "object" && value3 !== null;
 }
 function formatWait(milliseconds) {
@@ -14280,6 +14478,14 @@ async function uploadSession(request, config) {
         redactedBytes: filteredText.redactedBytes + (response.redactedBytes ?? 0)
       };
     } catch (error) {
+      if (error instanceof ORPCError2 && error.status === 400 && isMissingTranscriptTimestampMessage(request.source, error.message)) {
+        return {
+          success: false,
+          error: error.message,
+          attempts: attempt,
+          retryable: false
+        };
+      }
       const errorMessage = formatUploadError(error);
       if (isRateLimited(error) || isApiKeyRateLimited(error)) {
         return {
@@ -14328,13 +14534,13 @@ function formatRedactionBudgetError(anomaly) {
   return `Redaction safety check stopped upload: known-pattern redaction would replace ${formatBytes(anomaly.redactedBytes)} of ${formatBytes(anomaly.inputBytes)} (${ratio}%), above the 20% transcript budget (${rules}). The unfiltered transcript was not uploaded.`;
 }
 function isIngestSessionResponse(value3) {
-  if (!isRecord(value3) || value3.success !== true) {
+  if (!isRecord3(value3) || value3.success !== true) {
     return false;
   }
   if (typeof value3.sessionId !== "string") {
     return false;
   }
-  if (value3.redacted !== undefined && !isRecord(value3.redacted)) {
+  if (value3.redacted !== undefined && !isRecord3(value3.redacted)) {
     return false;
   }
   return value3.redactedBytes === undefined || typeof value3.redactedBytes === "number";
@@ -14382,7 +14588,7 @@ async function runBatchUpload(options) {
       bar.message(`Retrying ${itemLabel} (${attempt}/${maxAttempts}) after ${error}`);
     }
   });
-  bar.stop(summary.failed > 0 ? `Completed with ${summary.failed} error(s)` : "Upload complete");
+  bar.stop(summary.failed > 0 ? `Completed with ${summary.failed} error(s)` : summary.skipped > 0 ? `Completed with ${summary.skipped} skipped` : "Upload complete");
   return summary;
 }
 function renderBatchSummary(summary, options) {
@@ -14405,6 +14611,15 @@ function renderBatchSummary(summary, options) {
       lines.push(`  ...and ${summary.errors.length - maxErrors} more`);
     }
   }
+  if (summary.skipped > 0) {
+    lines.push(`${prefix}${summary.skipped} session(s) skipped`);
+    for (const item of summary.skippedItems.slice(0, maxErrors)) {
+      lines.push(`  ${item.label}: ${item.reason}`);
+    }
+    if (summary.skippedItems.length > maxErrors) {
+      lines.push(`  ...and ${summary.skippedItems.length - maxErrors} more`);
+    }
+  }
   if (showRetryHint && summary.failed > 0) {
     lines.push("");
     lines.push("Run `rudel upload --retry` to retry failed uploads.");
@@ -14416,13 +14631,13 @@ function renderBatchSummary(summary, options) {
 }
 
 // src/lib/product-analytics.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { join as join11 } from "node:path";
 
 // ../../node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname4, posix, sep } from "path";
+import { dirname as dirname4, posix, sep as sep2 } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -14431,7 +14646,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname4(process.argv[1]) : process.cwd(), isWindows = sep === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname4(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -18938,7 +19153,7 @@ function getOrCreateCliInstallationId() {
   if (typeof state.cli_installation_id === "string") {
     return state.cli_installation_id;
   }
-  const cliInstallationId = randomUUID();
+  const cliInstallationId = randomUUID2();
   writeAnalyticsState({
     ...state,
     cli_installation_id: cliInstallationId
@@ -19048,7 +19263,7 @@ var CliProductAnalyticsEvents = PRODUCT_ANALYTICS_EVENTS;
 
 // src/lib/project-config.ts
 import {
-  chmodSync,
+  chmodSync as chmodSync2,
   existsSync as existsSync9,
   mkdirSync as mkdirSync4,
   readFileSync as readFileSync8,
@@ -19066,18 +19281,18 @@ function loadProjectsConfig() {
   const path = getProjectsConfigPath();
   if (!existsSync9(path))
     return { projects: {} };
-  chmodSync(getConfigDir3(), 448);
-  chmodSync(path, 384);
+  chmodSync2(getConfigDir3(), 448);
+  chmodSync2(path, 384);
   const content = readFileSync8(path, "utf-8");
   return JSON.parse(content);
 }
 function saveProjectsConfig(config) {
   const dir = getConfigDir3();
   mkdirSync4(dir, { recursive: true, mode: 448 });
-  chmodSync(dir, 448);
+  chmodSync2(dir, 448);
   const path = getProjectsConfigPath();
   writeFileSync5(path, JSON.stringify(config, null, 2), { mode: 384 });
-  chmodSync(path, 384);
+  chmodSync2(path, 384);
 }
 async function getProjectKey(cwd) {
   try {
@@ -19298,25 +19513,18 @@ async function runEnable() {
         if (!session) {
           return { success: false, error: "Session not found" };
         }
-        try {
-          const request = await adapter.buildUploadRequest(session, {
-            gitInfo,
-            organizationId: selectedOrgId,
-            uploadMode: "manual"
-          });
-          return uploadSession(request, {
-            endpoint,
-            token: credentials.token,
-            allowInsecureEndpoint: allowPlaintextEndpoint,
-            authType: credentials.authType,
-            onRetry
-          });
-        } catch (error) {
-          return {
-            success: false,
-            error: error instanceof Error ? error.message : String(error)
-          };
-        }
+        const request = await adapter.buildUploadRequest(session, {
+          gitInfo,
+          organizationId: selectedOrgId,
+          uploadMode: "manual"
+        });
+        return uploadSession(request, {
+          endpoint,
+          token: credentials.token,
+          allowInsecureEndpoint: allowPlaintextEndpoint,
+          authType: credentials.authType,
+          onRetry
+        });
       }
     });
     renderBatchSummary(summary, { context: adapter.name });
@@ -20940,6 +21148,10 @@ async function reportHookUploadFailure(logger2, result, failure) {
     sessionId: failure.sessionId,
     error: uploadError
   });
+  if (result.retryable === false) {
+    await removeFailedUpload(failure.sessionId);
+    return;
+  }
   if (result.endpointRejected) {
     process.stderr.write(`Rudel hook upload refused for session ${failure.sessionId}: ${uploadError}
 `);
@@ -22153,12 +22365,20 @@ async function runSingleUpload(flags, session, allowPlaintextEndpoint) {
     transcriptPath: sessionInfo.transcriptPath,
     projectPath: sessionInfo.projectPath
   };
-  const request = await claudeCodeAdapter.buildUploadRequest(sessionFile, {
-    tag: flags.tag,
-    gitInfo,
-    organizationId,
-    uploadMode: "manual"
-  });
+  let request;
+  try {
+    request = await claudeCodeAdapter.buildUploadRequest(sessionFile, {
+      tag: flags.tag,
+      gitInfo,
+      organizationId,
+      uploadMode: "manual"
+    });
+  } catch (error) {
+    if (error instanceof MissingTranscriptTimestampError) {
+      return new Error("This transcript has no timestamped user/assistant messages, so it cannot be uploaded.");
+    }
+    throw error;
+  }
   write(`Transcript: ${request.content.length} bytes`);
   if (request.subagents && request.subagents.length > 0) {
     write(`Subagents: ${request.subagents.length} file(s)`);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "rudel",
-	"version": "0.2.1",
+	"version": "0.2.3",
 	"type": "module",
 	"description": "CLI for the Coding Agent Analytics Platform rudel.ai",
 	"license": "MIT",