@misterhuydo/sentinel 1.0.16 → 1.0.18

package/.cairn/.hint-lock

@@ -1 +1 @@
-2026-03-21T18:10:35.571Z
+2026-03-21T18:43:03.656Z

package/.cairn/session.json

@@ -1,6 +1,6 @@
 {
-  "message": "Auto-checkpoint at 2026-03-21T17:52:09.310Z",
-  "checkpoint_at": "2026-03-21T17:52:09.311Z",
+  "message": "Auto-checkpoint at 2026-03-21T18:38:32.740Z",
+  "checkpoint_at": "2026-03-21T18:38:32.741Z",
   "active_files": [],
   "notes": [],
   "mtime_snapshot": {}

package/lib/generate.js

@@ -120,6 +120,7 @@ for project_dir in "$WORKSPACE"/*/; do
   valid_repo=false
   for props in "$project_dir/config/repo-configs/"*.properties; do
     [[ -f "$props" ]] || continue
+    [[ "$(basename "$props")" == _* ]] && continue
     if grep -qE "^REPO_URL[[:space:]]*=[[:space:]]*(git@github\.com:|https://github\.com/)" "$props"; then
       valid_repo=true
       break

package/lib/init.js

@@ -14,6 +14,13 @@ const warn = msg => console.log(chalk.yellow('  ⚠'), msg);
 const step = msg => console.log('\n' + chalk.bold.white(msg));
 
 module.exports = async function init() {
+  // Pre-read existing workspace config so prompts can show current values
+  const defaultWorkspace = path.join(os.homedir(), 'sentinel');
+  const existing = readExistingConfig(defaultWorkspace);
+  if (Object.keys(existing).length) {
+    console.log(chalk.cyan('\n  → Existing workspace config found — showing current values as defaults\n'));
+  }
+
   // ── Prompts ─────────────────────────────────────────────────────────────────
   const answers = await prompts([
     {
@@ -54,25 +61,25 @@ module.exports = async function init() {
     {
       type: 'text',
       name: 'smtpUser',
-      message: 'SMTP sender address (e.g. sentinel@yourdomain.com)',
-      initial: '',
+      message: 'SMTP sender address',
+      initial: existing.SMTP_USER || 'sentinel@yourdomain.com',
     },
     {
       type: prev => prev ? 'password' : null,
       name: 'smtpPassword',
-      message: 'SMTP password / app password',
+      message: existing.SMTP_PASSWORD ? 'SMTP password / app password  (press Enter to keep current)' : 'SMTP password / app password',
     },
     {
       type: prev => prev ? 'text' : null,
       name: 'smtpHost',
       message: 'SMTP host',
-      initial: 'smtp.gmail.com',
+      initial: existing.SMTP_HOST || 'smtp.gmail.com',
     },
     {
       type: 'confirm',
       name: 'setupSlack',
       message: 'Set up Slack Bot (Sentinel Boss — conversational AI interface)?',
-      initial: false,
+      initial: !!(existing.SLACK_BOT_TOKEN),
     },
     {
       type: prev => prev ? 'password' : null,
@@ -165,7 +172,9 @@ module.exports = async function init() {
 
   // ── Workspace start/stop scripts ─────────────────────────────────────────────
   step('Generating scripts…');
-  generateWorkspaceScripts(workspace, { host: smtpHost, user: smtpUser, password: smtpPassword });
+  // If user left password blank (pressed Enter to keep), fall back to existing
+  const effectiveSmtpPassword = smtpPassword || existing.SMTP_PASSWORD || '';
+  generateWorkspaceScripts(workspace, { host: smtpHost, user: smtpUser, password: effectiveSmtpPassword });
   ok(`${workspace}/startAll.sh`);
   ok(`${workspace}/stopAll.sh`);
 
@@ -207,6 +216,23 @@ module.exports = async function init() {
 
 // ── Helpers ──────────────────────────────────────────────────────────────────
 
+function readExistingConfig(workspace) {
+  const propsPath = path.join(workspace, 'sentinel.properties');
+  if (!fs.existsSync(propsPath)) return {};
+  const result = {};
+  try {
+    fs.readFileSync(propsPath, 'utf8').split('
+').forEach(line => {
+      line = line.trim();
+      if (!line || line.startsWith('#')) return;
+      const idx = line.indexOf('=');
+      if (idx === -1) return;
+      result[line.slice(0, idx).trim()] = line.slice(idx + 1).trim();
+    });
+  } catch (_) {}
+  return result;
+}
+
 function findPython() {
   for (const bin of ['python3', 'python']) {
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/sentinel_boss.py

@@ -1,297 +1,356 @@
-"""
-sentinel_boss.py — Claude-backed Sentinel Boss.
-
-Claude acts as the boss: reads project state, decides on actions,
-executes them via tool use, and responds naturally. One agentic loop
-per turn — Claude may call multiple tools before replying.
-"""
-
-import json
-import logging
-import os
-import uuid
-from datetime import datetime, timezone
-from pathlib import Path
-from typing import Optional
-
-logger = logging.getLogger(__name__)
-
-# ── System prompt ────────────────────────────────────────────────────────────
-
-_SYSTEM = """\
-You are Sentinel Boss — the AI interface for Sentinel, a 24/7 autonomous DevOps agent.
-
-Sentinel watches production logs, detects errors, generates code fixes via Claude Code,
-and opens GitHub PRs for admin review (or pushes directly if AUTO_PUBLISH=true).
-
-Your job:
-- Understand what the DevOps engineer needs in natural language
-- Query Sentinel's live state (errors, fixes, open PRs) on their behalf
-- Create issue reports when asked to investigate or fix something
-- Control Sentinel (pause/resume) when asked
-- Give honest, concise answers — you know this system inside out
-
-Tone: direct, professional, like a senior engineer who owns the system.
-Don't pad responses. Don't say "Great question!" or "Certainly!".
-If you don't know something, use a tool to find out before saying you don't know.
-
-When the engineer's request is fully handled, end your LAST message with the token: [DONE]
-If you need a follow-up from them, do NOT include [DONE] — wait for their next message.
-"""
-
-# ── Tool definitions ─────────────────────────────────────────────────────────
-
-_TOOLS = [
-    {
-        "name": "get_status",
-        "description": (
-            "Get recent errors, fixes applied, fixes pending review, and open PRs. "
-            "Use for: 'what happened today?', 'any issues?', 'how are things?', "
-            "'what are the open PRs?', 'did sentinel fix anything?'"
-        ),
-        "input_schema": {
-            "type": "object",
-            "properties": {
-                "hours": {
-                    "type": "integer",
-                    "description": "Look-back window in hours (default 24)",
-                    "default": 24,
-                },
-            },
-        },
-    },
-    {
-        "name": "create_issue",
-        "description": (
-            "Queue a fix request for Sentinel to investigate on the next poll cycle. "
-            "Use whenever the engineer reports a bug, customer complaint, or asks you "
-            "to look into something specific. Include every detail they gave you."
-        ),
-        "input_schema": {
-            "type": "object",
-            "properties": {
-                "description": {
-                    "type": "string",
-                    "description": "Full problem description — everything the engineer told you",
-                },
-                "target_repo": {
-                    "type": "string",
-                    "description": "Repo name to assign to (omit to let Sentinel auto-route)",
-                },
-            },
-            "required": ["description"],
-        },
-    },
-    {
-        "name": "get_fix_details",
-        "description": "Get full details of a specific fix by fingerprint (8+ hex chars).",
-        "input_schema": {
-            "type": "object",
-            "properties": {
-                "fingerprint": {"type": "string"},
-            },
-            "required": ["fingerprint"],
-        },
-    },
-    {
-        "name": "list_pending_prs",
-        "description": "List all open Sentinel PRs awaiting admin review.",
-        "input_schema": {"type": "object", "properties": {}},
-    },
-    {
-        "name": "pause_sentinel",
-        "description": (
-            "Pause ALL Sentinel fix activity immediately. "
-            "Use when the engineer says 'pause', 'stop', 'freeze', or 'hold off'."
-        ),
-        "input_schema": {"type": "object", "properties": {}},
-    },
-    {
-        "name": "resume_sentinel",
-        "description": "Resume Sentinel fix activity after a pause.",
-        "input_schema": {"type": "object", "properties": {}},
-    },
-]
-
-
-# ── Tool execution ────────────────────────────────────────────────────────────
-
-def _run_tool(name: str, inputs: dict, cfg_loader, store) -> str:
-    if name == "get_status":
-        hours = int(inputs.get("hours", 24))
-        errors = store.get_recent_errors(hours)
-        fixes  = store.get_recent_fixes(hours)
-        prs    = store.get_open_prs()
-        top_errors = [
-            {
-                "message": e["message"][:120],
-                "count":   e["count"],
-                "source":  e["source"],
-                "last_seen": e["last_seen"],
-            }
-            for e in errors[:8]
-        ]
-        return json.dumps({
-            "window_hours":    hours,
-            "errors_detected": len(errors),
-            "top_errors":      top_errors,
-            "fixes_applied":   sum(1 for f in fixes if f["status"] == "applied"),
-            "fixes_pending":   sum(1 for f in fixes if f["status"] == "pending"),
-            "fixes_failed":    sum(1 for f in fixes if f["status"] == "failed"),
-            "open_prs":        [
-                {
-                    "repo":   p["repo_name"],
-                    "branch": p["branch"],
-                    "pr_url": p["pr_url"],
-                    "age":    p.get("timestamp", ""),
-                }
-                for p in prs
-            ],
-            "sentinel_paused": Path("SENTINEL_PAUSE").exists(),
-        })
-
-    if name == "create_issue":
-        description = inputs["description"]
-        target_repo = inputs.get("target_repo", "")
-        issues_dir  = Path("issues")
-        issues_dir.mkdir(exist_ok=True)
-        fname   = f"slack-{uuid.uuid4().hex[:8]}.txt"
-        content = (f"TARGET_REPO: {target_repo}\n\n" if target_repo else "") + description
-        (issues_dir / fname).write_text(content, encoding="utf-8")
-        logger.info("Boss created issue: %s", fname)
-        return json.dumps({
-            "status": "queued",
-            "file":   fname,
-            "note":   "Sentinel will pick this up on the next poll cycle.",
-        })
-
-    if name == "get_fix_details":
-        fp  = inputs["fingerprint"]
-        fix = store.get_confirmed_fix(fp) or store.get_marker_seen_fix(fp)
-        if not fix:
-            # Fallback: search recent fixes by prefix
-            recent = store.get_recent_fixes(hours=72)
-            fix    = next((f for f in recent if f.get("fingerprint", "").startswith(fp)), None)
-        return json.dumps(fix or {"error": "not found"})
-
-    if name == "list_pending_prs":
-        prs = store.get_open_prs()
-        return json.dumps({
-            "count":    len(prs),
-            "open_prs": [
-                {
-                    "repo":      p["repo_name"],
-                    "branch":    p["branch"],
-                    "pr_url":    p["pr_url"],
-                    "timestamp": p.get("timestamp", ""),
-                }
-                for p in prs
-            ],
-        })
-
-    if name == "pause_sentinel":
-        Path("SENTINEL_PAUSE").touch()
-        logger.info("Boss: SENTINEL_PAUSE created")
-        return json.dumps({"status": "paused"})
-
-    if name == "resume_sentinel":
-        p = Path("SENTINEL_PAUSE")
-        if p.exists():
-            p.unlink()
-        logger.info("Boss: SENTINEL_PAUSE removed")
-        return json.dumps({"status": "resumed"})
-
-    return json.dumps({"error": f"unknown tool: {name}"})
-
-
-# ── Main entry point ──────────────────────────────────────────────────────────
-
-async def handle_message(
-    message: str,
-    history: list,
-    cfg_loader,
-    store,
-) -> tuple[str, bool]:
-    """
-    Process one user message through the Sentinel Boss (Claude with tool use).
-
-    Args:
-        message:     The user's Slack message text.
-        history:     Conversation history list — mutated in place (role/content dicts).
-        cfg_loader:  ConfigLoader for repo/sentinel config.
-        store:       StateStore for DB queries.
-
-    Returns:
-        (reply_text, is_done)
-        is_done=True  → session complete, release the Slack queue slot.
-        is_done=False → waiting for user follow-up, keep the slot.
-    """
-    try:
-        import anthropic
-    except ImportError:
-        return (
-            ":warning: `anthropic` package not installed. Run: `pip install anthropic`",
-            True,
-        )
-
-    api_key = cfg_loader.sentinel.anthropic_api_key or os.environ.get("ANTHROPIC_API_KEY", "")
-    if not api_key:
-        return (
-            ":warning: `ANTHROPIC_API_KEY` not configured in `sentinel.properties`.",
-            True,
-        )
-
-    client = anthropic.Anthropic(api_key=api_key)
-
-    # Build system context snapshot
-    paused    = Path("SENTINEL_PAUSE").exists()
-    repos     = list(cfg_loader.repos.keys())
-    ts        = datetime.now(timezone.utc).strftime("%Y-%m-%d %H:%M UTC")
-    system    = (
-        _SYSTEM
-        + f"\n\nCurrent time: {ts}"
-        + f"\nSentinel status: {'⏸ PAUSED' if paused else '▶ RUNNING'}"
-        + f"\nManaged repos: {', '.join(repos) if repos else '(none configured)'}"
-    )
-
-    history.append({"role": "user", "content": message})
-    messages = list(history)
-
-    # Agentic loop — Claude may call multiple tools before giving a final reply
-    while True:
-        response = client.messages.create(
-            model="claude-opus-4-6",
-            max_tokens=1024,
-            system=system,
-            tools=_TOOLS,
-            messages=messages,
-        )
-
-        text_parts  = []
-        tool_blocks = []
-        for block in response.content:
-            if block.type == "text":
-                text_parts.append(block.text)
-            elif block.type == "tool_use":
-                tool_blocks.append(block)
-
-        if not tool_blocks:
-            # Final response — no more tool calls
-            reply   = " ".join(text_parts).strip()
-            is_done = "[DONE]" in reply
-            reply   = reply.replace("[DONE]", "").strip()
-            history.append({"role": "assistant", "content": response.content})
-            return reply, is_done
-
-        # Execute tools and continue
-        messages.append({"role": "assistant", "content": response.content})
-        tool_results = []
-        for tc in tool_blocks:
-            result = _run_tool(tc.name, tc.input, cfg_loader, store)
-            logger.info("Boss tool: %s(%s) → %s", tc.name, tc.input, result[:120])
-            tool_results.append({
-                "type":        "tool_result",
-                "tool_use_id": tc.id,
-                "content":     result,
-            })
-        messages.append({"role": "user", "content": tool_results})
+"""
+sentinel_boss.py — Claude-backed Sentinel Boss.
+
+Claude acts as the boss: reads project state, decides on actions,
+executes them via tool use, and responds naturally. One agentic loop
+per turn — Claude may call multiple tools before replying.
+"""
+
+import json
+import logging
+import os
+import uuid
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Optional
+
+logger = logging.getLogger(__name__)
+
+# ── System prompt ────────────────────────────────────────────────────────────
+
+_SYSTEM = """\
+You are Sentinel Boss — the AI interface for Sentinel, a 24/7 autonomous DevOps agent.
+
+Sentinel watches production logs, detects errors, generates code fixes via Claude Code,
+and opens GitHub PRs for admin review (or pushes directly if AUTO_PUBLISH=true).
+
+Your job:
+- Understand what the DevOps engineer needs in natural language
+- Query Sentinel's live state (errors, fixes, open PRs) on their behalf
+- Create issue reports when asked to investigate or fix something
+- Control Sentinel (pause/resume) when asked
+- Give honest, concise answers — you know this system inside out
+
+Tone: direct, professional, like a senior engineer who owns the system.
+Don't pad responses. Don't say "Great question!" or "Certainly!".
+If you don't know something, use a tool to find out before saying you don't know.
+
+When the engineer's request is fully handled, end your LAST message with the token: [DONE]
+If you need a follow-up from them, do NOT include [DONE] — wait for their next message.
+"""
+
+# ── Tool definitions ─────────────────────────────────────────────────────────
+
+_TOOLS = [
+    {
+        "name": "get_status",
+        "description": (
+            "Get recent errors, fixes applied, fixes pending review, and open PRs. "
+            "Use for: 'what happened today?', 'any issues?', 'how are things?', "
+            "'what are the open PRs?', 'did sentinel fix anything?'"
+        ),
+        "input_schema": {
+            "type": "object",
+            "properties": {
+                "hours": {
+                    "type": "integer",
+                    "description": "Look-back window in hours (default 24)",
+                    "default": 24,
+                },
+            },
+        },
+    },
+    {
+        "name": "create_issue",
+        "description": (
+            "Queue a fix request for Sentinel to investigate on the next poll cycle. "
+            "Use whenever the engineer reports a bug, customer complaint, or asks you "
+            "to look into something specific. Include every detail they gave you."
+        ),
+        "input_schema": {
+            "type": "object",
+            "properties": {
+                "description": {
+                    "type": "string",
+                    "description": "Full problem description — everything the engineer told you",
+                },
+                "target_repo": {
+                    "type": "string",
+                    "description": "Repo name to assign to (omit to let Sentinel auto-route)",
+                },
+            },
+            "required": ["description"],
+        },
+    },
+    {
+        "name": "get_fix_details",
+        "description": "Get full details of a specific fix by fingerprint (8+ hex chars).",
+        "input_schema": {
+            "type": "object",
+            "properties": {
+                "fingerprint": {"type": "string"},
+            },
+            "required": ["fingerprint"],
+        },
+    },
+    {
+        "name": "list_pending_prs",
+        "description": "List all open Sentinel PRs awaiting admin review.",
+        "input_schema": {"type": "object", "properties": {}},
+    },
+    {
+        "name": "pause_sentinel",
+        "description": (
+            "Pause ALL Sentinel fix activity immediately. "
+            "Use when the engineer says 'pause', 'stop', 'freeze', or 'hold off'."
+        ),
+        "input_schema": {"type": "object", "properties": {}},
+    },
+    {
+        "name": "resume_sentinel",
+        "description": "Resume Sentinel fix activity after a pause.",
+        "input_schema": {"type": "object", "properties": {}},
+    },
+    {
+        "name": "list_projects",
+        "description": (
+            "List all projects (Sentinel instances) in this workspace and the repos "
+            "each one manages. Use for: 'what projects do you manage?', 'list projects', "
+            "'what repos are configured?', 'show me all projects'."
+        ),
+        "input_schema": {"type": "object", "properties": {}},
+    },
+]
+
+
+# ── Tool execution ────────────────────────────────────────────────────────────
+
+def _run_tool(name: str, inputs: dict, cfg_loader, store) -> str:
+    if name == "get_status":
+        hours = int(inputs.get("hours", 24))
+        errors = store.get_recent_errors(hours)
+        fixes  = store.get_recent_fixes(hours)
+        prs    = store.get_open_prs()
+        top_errors = [
+            {
+                "message": e["message"][:120],
+                "count":   e["count"],
+                "source":  e["source"],
+                "last_seen": e["last_seen"],
+            }
+            for e in errors[:8]
+        ]
+        return json.dumps({
+            "window_hours":    hours,
+            "errors_detected": len(errors),
+            "top_errors":      top_errors,
+            "fixes_applied":   sum(1 for f in fixes if f["status"] == "applied"),
+            "fixes_pending":   sum(1 for f in fixes if f["status"] == "pending"),
+            "fixes_failed":    sum(1 for f in fixes if f["status"] == "failed"),
+            "open_prs":        [
+                {
+                    "repo":   p["repo_name"],
+                    "branch": p["branch"],
+                    "pr_url": p["pr_url"],
+                    "age":    p.get("timestamp", ""),
+                }
+                for p in prs
+            ],
+            "sentinel_paused": Path("SENTINEL_PAUSE").exists(),
+        })
+
+    if name == "create_issue":
+        description = inputs["description"]
+        target_repo = inputs.get("target_repo", "")
+        issues_dir  = Path("issues")
+        issues_dir.mkdir(exist_ok=True)
+        fname   = f"slack-{uuid.uuid4().hex[:8]}.txt"
+        content = (f"TARGET_REPO: {target_repo}\n\n" if target_repo else "") + description
+        (issues_dir / fname).write_text(content, encoding="utf-8")
+        logger.info("Boss created issue: %s", fname)
+        return json.dumps({
+            "status": "queued",
+            "file":   fname,
+            "note":   "Sentinel will pick this up on the next poll cycle.",
+        })
+
+    if name == "get_fix_details":
+        fp  = inputs["fingerprint"]
+        fix = store.get_confirmed_fix(fp) or store.get_marker_seen_fix(fp)
+        if not fix:
+            # Fallback: search recent fixes by prefix
+            recent = store.get_recent_fixes(hours=72)
+            fix    = next((f for f in recent if f.get("fingerprint", "").startswith(fp)), None)
+        return json.dumps(fix or {"error": "not found"})
+
+    if name == "list_pending_prs":
+        prs = store.get_open_prs()
+        return json.dumps({
+            "count":    len(prs),
+            "open_prs": [
+                {
+                    "repo":      p["repo_name"],
+                    "branch":    p["branch"],
+                    "pr_url":    p["pr_url"],
+                    "timestamp": p.get("timestamp", ""),
+                }
+                for p in prs
+            ],
+        })
+
+    if name == "pause_sentinel":
+        Path("SENTINEL_PAUSE").touch()
+        logger.info("Boss: SENTINEL_PAUSE created")
+        return json.dumps({"status": "paused"})
+
+    if name == "resume_sentinel":
+        p = Path("SENTINEL_PAUSE")
+        if p.exists():
+            p.unlink()
+        logger.info("Boss: SENTINEL_PAUSE removed")
+        return json.dumps({"status": "resumed"})
+
+    if name == "list_projects":
+        # Repos this instance manages
+        my_repos = [
+            {
+                "repo":         r.repo_name,
+                "url":          r.repo_url,
+                "branch":       r.branch,
+                "auto_publish": r.auto_publish,
+            }
+            for r in cfg_loader.repos.values()
+        ]
+        # Scan workspace for sibling project instances
+        workspace = Path(".").resolve().parent
+        other_projects = []
+        try:
+            for d in sorted(workspace.iterdir()):
+                if not d.is_dir() or d.name in ("code", ".git"):
+                    continue
+                repo_cfg_dir = d / "config" / "repo-configs"
+                if not repo_cfg_dir.exists():
+                    continue
+                repos_in_project = []
+                for p in sorted(repo_cfg_dir.glob("*.properties")):
+                    if p.name.startswith("_"):
+                        continue
+                    repo_url = ""
+                    for line in p.read_text(encoding="utf-8", errors="ignore").splitlines():
+                        if line.startswith("REPO_URL"):
+                            repo_url = line.split("=", 1)[-1].strip()
+                            break
+                    if repo_url:
+                        repos_in_project.append({"repo": p.stem, "url": repo_url})
+                if repos_in_project:
+                    pid_file = d / "sentinel.pid"
+                    running = pid_file.exists()
+                    other_projects.append({
+                        "project": d.name,
+                        "running": running,
+                        "repos":   repos_in_project,
+                    })
+        except Exception as e:
+            logger.warning("list_projects workspace scan failed: %s", e)
+        return json.dumps({
+            "this_instance": {
+                "project": Path(".").resolve().name,
+                "repos":   my_repos,
+            },
+            "workspace_projects": other_projects,
+        })
+
+    return json.dumps({"error": f"unknown tool: {name}"})
+
+
+# ── Main entry point ──────────────────────────────────────────────────────────
+
+async def handle_message(
+    message: str,
+    history: list,
+    cfg_loader,
+    store,
+) -> tuple[str, bool]:
+    """
+    Process one user message through the Sentinel Boss (Claude with tool use).
+
+    Args:
+        message:     The user's Slack message text.
+        history:     Conversation history list — mutated in place (role/content dicts).
+        cfg_loader:  ConfigLoader for repo/sentinel config.
+        store:       StateStore for DB queries.
+
+    Returns:
+        (reply_text, is_done)
+        is_done=True  → session complete, release the Slack queue slot.
+        is_done=False → waiting for user follow-up, keep the slot.
+    """
+    try:
+        import anthropic
+    except ImportError:
+        return (
+            ":warning: `anthropic` package not installed. Run: `pip install anthropic`",
+            True,
+        )
+
+    api_key = cfg_loader.sentinel.anthropic_api_key or os.environ.get("ANTHROPIC_API_KEY", "")
+    if not api_key:
+        return (
+            ":warning: `ANTHROPIC_API_KEY` not configured in `sentinel.properties`.",
+            True,
+        )
+
+    client = anthropic.Anthropic(api_key=api_key)
+
+    # Build system context snapshot
+    paused    = Path("SENTINEL_PAUSE").exists()
+    repos     = list(cfg_loader.repos.keys())
+    ts        = datetime.now(timezone.utc).strftime("%Y-%m-%d %H:%M UTC")
+    system    = (
+        _SYSTEM
+        + f"\n\nCurrent time: {ts}"
+        + f"\nSentinel status: {'⏸ PAUSED' if paused else '▶ RUNNING'}"
+        + f"\nManaged repos: {', '.join(repos) if repos else '(none configured)'}"
+    )
+
+    history.append({"role": "user", "content": message})
+    messages = list(history)
+
+    # Agentic loop — Claude may call multiple tools before giving a final reply
+    while True:
+        response = client.messages.create(
+            model="claude-opus-4-6",
+            max_tokens=1024,
+            system=system,
+            tools=_TOOLS,
+            messages=messages,
+        )
+
+        text_parts  = []
+        tool_blocks = []
+        for block in response.content:
+            if block.type == "text":
+                text_parts.append(block.text)
+            elif block.type == "tool_use":
+                tool_blocks.append(block)
+
+        if not tool_blocks:
+            # Final response — no more tool calls
+            reply   = " ".join(text_parts).strip()
+            is_done = "[DONE]" in reply
+            reply   = reply.replace("[DONE]", "").strip()
+            history.append({"role": "assistant", "content": response.content})
+            return reply, is_done
+
+        # Execute tools and continue
+        messages.append({"role": "assistant", "content": response.content})
+        tool_results = []
+        for tc in tool_blocks:
+            result = _run_tool(tc.name, tc.input, cfg_loader, store)
+            logger.info("Boss tool: %s(%s) → %s", tc.name, tc.input, result[:120])
+            tool_results.append({
+                "type":        "tool_result",
+                "tool_use_id": tc.id,
+                "content":     result,
+            })
+        messages.append({"role": "user", "content": tool_results})