envseed 0.2.0 → 0.2.1

package/lib/log-incident.mjs

@@ -195,12 +195,31 @@ async function main() {
   const cwd = process.argv[3] || process.cwd();
   const userNotes = process.argv.slice(4).join(' ') || '';
 
+  const log = (msg) => process.stdout.write(msg + '\n');
+
+  // Check upload credentials before doing any work
+  let config = {};
+  try {
+    config = JSON.parse(fs.readFileSync(path.join(INSTALL_DIR, 'config.json'), 'utf8'));
+  } catch {}
+
+  const hasDirectS3 = config.s3Bucket && config.s3Profile;
+  const hasApiKey = !!config.apiKey;
+
+  if (!hasDirectS3 && !hasApiKey) {
+    log('');
+    log('\x1b[31mError: No upload credentials configured.\x1b[0m');
+    log('');
+    log('Run \x1b[1menvseed login\x1b[0m to authenticate via GitHub and get an API key.');
+    log('');
+    log('Or set s3Profile in ~/.envseed/config.json for direct S3 upload.');
+    process.exit(1);
+  }
+
   const incidentId = generateId();
   const incidentDir = path.join(INCIDENTS_DIR, incidentId);
   ensureDir(incidentDir);
 
-  const log = (msg) => process.stdout.write(msg + '\n');
-
   log(`Incident ID: ${incidentId}`);
   log(`Session: ${sessionId}`);
   log(`CWD: ${cwd}`);

package/lib/redaction-review.mjs

@@ -193,13 +193,17 @@ function openTerminalWithClaude(stagingDir, log) {
   fs.writeFileSync(promptFilePath, initialPrompt);
 
   fs.writeFileSync(launcherPath, `#!/bin/bash
+# Mark review complete on exit (normal, SIGHUP from terminal close, or SIGTERM)
+mark_complete() {
+  touch "${stagingDir}/.redaction-complete"
+}
+trap mark_complete EXIT
 cd "${stagingDir}" || exit 1
 PROMPT=$(cat "${promptFilePath}")
 claude \\
   --allowedTools ${allowedTools} \\
   --append-system-prompt "${APPEND_SYSTEM_PROMPT.replace(/"/g, '\\"')}" \\
   "$PROMPT"
-touch "${stagingDir}/.redaction-complete"
 echo ""
 echo "Redaction complete. You can close this tab."
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "envseed",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Cultivate AI safety evals from real Claude Code sessions",
   "type": "module",
   "bin": {

package/postinstall.mjs

@@ -22,10 +22,10 @@ const DEFAULT_CONFIG = {
   alertThreshold: 3,
   logAllEvents: true,
   maxLogSizeMB: 500,
-  s3Bucket: 'metr-envseed',
-  s3Region: 'us-east-1',
+  s3Bucket: 'envseed-harvests',
+  s3Region: 'us-west-2',
   s3Profile: '',
-  uploadEndpoint: 'https://envseed-api.sydv793.workers.dev',
+  uploadEndpoint: 'https://w218r55zt6.execute-api.us-west-2.amazonaws.com',
   githubClientId: 'Ov23lid2fKxyN7lOd9qv',
   apiKey: '',
   simulationCount: 2,
@@ -157,20 +157,30 @@ try {
 
   // Auto-launch login if not already logged in and running interactively
   if (!config.apiKey && process.stdout.isTTY) {
-    console.log('  Launching login...');
+    console.log('  \x1b[33mOne more step:\x1b[0m Sign in to enable incident uploads.');
+    console.log('  This uses GitHub Device Flow — a code will appear that you');
+    console.log('  paste into GitHub to authorize envseed.');
     console.log('');
     try {
       const binPath = path.join(INSTALL_DIR, 'bin', 'envseed.mjs');
-      spawnSync('node', [binPath, 'login'], { stdio: 'inherit' });
+      const result = spawnSync('node', [binPath, 'login'], { stdio: 'inherit' });
+      if (result.status === 0) {
+        console.log('');
+        console.log('  \x1b[32mAll set!\x1b[0m Restart Claude Code to activate monitoring.');
+      } else {
+        console.log('');
+        console.log('  Login skipped. Run \x1b[1menvseed login\x1b[0m later to enable uploads.');
+        console.log('  Monitoring will still run locally without login.');
+      }
     } catch {
-      console.log('  Run "envseed login" to sign in.');
+      console.log('  Run \x1b[1menvseed login\x1b[0m to sign in.');
     }
   } else if (config.apiKey) {
-    console.log(`  ${'\x1b[32m'}Already logged in.${'\x1b[0m'}`);
+    console.log(`  \x1b[32mAlready logged in.\x1b[0m`);
     console.log('  Restart Claude Code to activate monitoring.');
   } else {
-    console.log('  Next: run "envseed login" to sign in.');
-    console.log('  Then restart Claude Code.');
+    console.log('  Next: run \x1b[1menvseed login\x1b[0m to sign in.');
+    console.log('  Monitoring runs locally without login, but uploads require it.');
   }
 
 } catch (err) {