@misterhuydo/sentinel 1.0.51 → 1.0.53

package/.cairn/.hint-lock

@@ -1 +1 @@
-2026-03-22T10:41:20.633Z
+2026-03-22T11:21:17.183Z

package/.cairn/session.json

@@ -1,6 +1,6 @@
 {
-  "message": "Auto-checkpoint at 2026-03-22T10:09:55.962Z",
-  "checkpoint_at": "2026-03-22T10:09:55.963Z",
+  "message": "Auto-checkpoint at 2026-03-22T11:32:35.191Z",
+  "checkpoint_at": "2026-03-22T11:32:35.192Z",
   "active_files": [],
   "notes": [],
   "mtime_snapshot": {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.0.51",
+  "version": "1.0.53",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/config_loader.py

@@ -60,6 +60,7 @@ class SentinelConfig:
     slack_bot_token: str = ""        # xoxb-...
     slack_app_token: str = ""        # xapp-... (Socket Mode)
     slack_channel: str = ""          # optional: restrict to one channel ID or name
+    slack_watch_bot_ids: list[str] = field(default_factory=list)   # pre-configured bot IDs to watch passively
     project_name: str = ""           # optional: friendly name used by Sentinel Boss (e.g. "1881")
 
 
@@ -153,6 +154,7 @@ class ConfigLoader:
         c.slack_bot_token = d.get("SLACK_BOT_TOKEN", "")
         c.slack_app_token = d.get("SLACK_APP_TOKEN", "")
         c.slack_channel = d.get("SLACK_CHANNEL", "")
+        c.slack_watch_bot_ids = _csv(d.get("SLACK_WATCH_BOT_IDS", ""))
         c.project_name = d.get("PROJECT_NAME", "")
         self.sentinel = c
 

package/python/sentinel/issue_watcher.py

@@ -89,8 +89,16 @@ def scan_issues(project_dir: Path) -> list[IssueEvent]:
     issues_dir = project_dir / "issues"
     issues_dir.mkdir(exist_ok=True)
 
+    def _priority(p: Path) -> tuple:
+        # slack-* (human) first, bot-* (bot) last, everything else in between
+        if p.name.startswith("slack-"):
+            return (0, p.name)
+        if p.name.startswith("bot-"):
+            return (2, p.name)
+        return (1, p.name)
+
     events = []
-    for f in sorted(issues_dir.iterdir()):
+    for f in sorted(issues_dir.iterdir(), key=_priority):
         if not f.is_file() or f.name.startswith("."):
             continue
         if f.suffix.lower() in _BINARY_EXTENSIONS:

package/python/sentinel/sentinel_boss.py

@@ -83,6 +83,18 @@ What you can do (tools available):
                        e.g. "fetch logs", "try fetch_log.sh for SSOLWA", "fetch logs with debug",
                             "grab latest logs from STS", "fetch logs without filter"
 
+15. watch_bot        — Register a Slack bot for passive monitoring. Every message it posts is
+                       auto-queued as an issue in the bot's registered project.
+                       ALWAYS requires a project — infer from context or ask the user first.
+                       e.g. "listen to @alertbot", "watch @bot1 @bot2 for project 1881", "monitor @errorbot"
+
+16. unwatch_bot      — Remove a Slack bot from the passive watch list.
+                       e.g. "stop watching @alertbot", "unwatch @errorbot"
+
+17. list_watched_bots — Show all Slack bots currently being passively monitored and which projects
+                        they are delivering to.
+                        e.g. "which bots are you watching?", "list monitored bots"
+
 When someone asks what you can do, what you support, what your capabilities are, or how you can help,
 reply with a short summary grouped by category:
 
@@ -109,6 +121,11 @@ reply with a short summary grouped by category:
 • `pull_repo` — git pull on managed application repos — "pull latest code"
 • `pull_config` — git pull on Sentinel config dirs — "pull config for elprint"
 
+*Slack bot watching*
+• `watch_bot` — register a Slack bot for passive monitoring; its messages are auto-queued as issues — "listen to @alertbot"
+• `unwatch_bot` — stop monitoring a bot — "stop watching @errorbot"
+• `list_watched_bots` — show all bots currently being monitored — "which bots are you watching?"
+
 Tone: direct, professional, like a senior engineer who owns the system.
 Don't pad responses. Don't say "Great question!" or "Certainly!".
 If you don't know something, use a tool to find out before saying you don't know.
@@ -338,6 +355,60 @@ _TOOLS = [
             },
         },
     },
+    {
+        "name": "watch_bot",
+        "description": (
+            "Tell Sentinel to passively monitor a Slack bot — queuing its messages as issues. "
+            "Extract all <@UXXXXXX> user IDs from the message and pass them here. "
+            "Sentinel verifies each is actually a bot (not a human) before adding to the watch list. "
+            "IMPORTANT: a bot watcher is only useful if its issues can be delivered to a project. "
+            "Try to infer the project from context (bot name, prior messages, available projects). "
+            "If it cannot be determined, do NOT call this tool — instead ask the user which project "
+            "the bot's alerts belong to, then call this tool with the project filled in. "
+            "Use for: 'listen to @alertbot', 'watch @bot1 @bot2', 'monitor @errorbot'."
+        ),
+        "input_schema": {
+            "type": "object",
+            "properties": {
+                "user_ids": {
+                    "type": "array",
+                    "items": {"type": "string"},
+                    "description": "Slack user IDs to watch — extract from <@UXXXXXX> patterns in the message",
+                },
+                "project": {
+                    "type": "string",
+                    "description": "Project short name this bot's issues should be routed to (e.g. '1881', 'elprint'). Infer from context or ask user before calling.",
+                },
+            },
+            "required": ["user_ids"],
+        },
+    },
+    {
+        "name": "unwatch_bot",
+        "description": (
+            "Stop Sentinel from monitoring a Slack bot. "
+            "Use for: 'stop watching @alertbot', 'unwatch @bot', 'remove @errorbot from watchers'."
+        ),
+        "input_schema": {
+            "type": "object",
+            "properties": {
+                "user_ids": {
+                    "type": "array",
+                    "items": {"type": "string"},
+                    "description": "Slack user IDs to remove from the watch list",
+                },
+            },
+            "required": ["user_ids"],
+        },
+    },
+    {
+        "name": "list_watched_bots",
+        "description": (
+            "List all Slack bots Sentinel is currently monitoring passively. "
+            "Use for: 'who are you watching?', 'which bots are you monitoring?', 'list watched bots'."
+        ),
+        "input_schema": {"type": "object", "properties": {}},
+    },
 ]
 
 
@@ -404,7 +475,7 @@ def _git_pull(path: Path) -> dict:
 
 # ── Tool execution ────────────────────────────────────────────────────────────
 
-def _run_tool(name: str, inputs: dict, cfg_loader, store) -> str:
+async def _run_tool(name: str, inputs: dict, cfg_loader, store, slack_client=None) -> str:
     if name == "get_status":
         hours = int(inputs.get("hours", 24))
         errors = store.get_recent_errors(hours)
@@ -700,6 +771,89 @@ def _run_tool(name: str, inputs: dict, cfg_loader, store) -> str:
 
         return json.dumps({"fetched": len(results), "results": results})
 
+    if name == "watch_bot":
+        user_ids    = inputs.get("user_ids", [])
+        project_arg = inputs.get("project", "").strip()
+        if not user_ids:
+            return json.dumps({"error": "No user_ids provided"})
+
+        # Resolve + validate project — required for bot issue routing
+        resolved_project = ""
+        if project_arg:
+            project_dirs = _find_project_dirs(project_arg)
+            if not project_dirs:
+                all_names = [_read_project_name(d) for d in _find_project_dirs()]
+                return json.dumps({
+                    "error": f"No project found matching '{project_arg}'",
+                    "available_projects": all_names,
+                    "action_needed": "Ask the user which project these bot alerts belong to.",
+                })
+            if len(project_dirs) > 1:
+                matches = [_read_project_name(d) for d in project_dirs]
+                return json.dumps({
+                    "error": f"Ambiguous project name '{project_arg}' — matches: {matches}",
+                    "action_needed": "Ask the user to clarify which project.",
+                })
+            resolved_project = _read_project_name(project_dirs[0])
+        else:
+            all_projects = _find_project_dirs()
+            if len(all_projects) == 1:
+                # Single project in workspace — auto-assign
+                resolved_project = _read_project_name(all_projects[0])
+            elif all_projects:
+                all_names = [_read_project_name(d) for d in all_projects]
+                return json.dumps({
+                    "error": "Cannot determine which project these bot alerts belong to.",
+                    "available_projects": all_names,
+                    "action_needed": "Ask the user to specify the project, then retry with project filled in.",
+                })
+
+        results = []
+        for uid in user_ids:
+            if not slack_client:
+                results.append({"user_id": uid, "status": "error", "reason": "no Slack client available"})
+                continue
+            try:
+                info = await slack_client.users_info(user=uid)
+                user = info.get("user", {})
+                if not user.get("is_bot", False):
+                    results.append({"user_id": uid, "status": "skipped", "reason": "not a bot — only bots can be watched passively"})
+                    continue
+                bot_name = user.get("real_name") or user.get("name") or uid
+                store.add_watched_bot(uid, bot_name, added_by="boss", project_name=resolved_project)
+                logger.info("Boss: now watching bot %s (%s) → project '%s'", bot_name, uid, resolved_project or "unset")
+                results.append({"user_id": uid, "bot_name": bot_name, "project": resolved_project, "status": "watching"})
+            except Exception as e:
+                results.append({"user_id": uid, "status": "error", "reason": str(e)})
+        return json.dumps({"results": results})
+
+    if name == "unwatch_bot":
+        user_ids = inputs.get("user_ids", [])
+        if not user_ids:
+            return json.dumps({"error": "No user_ids provided"})
+        results = []
+        for uid in user_ids:
+            removed = store.remove_watched_bot(uid)
+            logger.info("Boss: unwatch bot %s → %s", uid, "removed" if removed else "not found")
+            results.append({"user_id": uid, "status": "removed" if removed else "not found"})
+        return json.dumps({"results": results})
+
+    if name == "list_watched_bots":
+        bots = store.get_watched_bots()
+        return json.dumps({
+            "count": len(bots),
+            "bots": [
+                {
+                    "bot_id":   b["bot_id"],
+                    "bot_name": b["bot_name"],
+                    "project":  b.get("project_name") or "",
+                    "added_by": b["added_by"],
+                    "added_at": b["added_at"],
+                }
+                for b in bots
+            ],
+        })
+
     return json.dumps({"error": f"unknown tool: {name}"})
 
 
@@ -713,10 +867,11 @@ async def _handle_with_cli(
     history: list,
     cfg_loader,
     store,
+    slack_client=None,
 ) -> tuple[str, bool]:
     """Fallback: use `claude --print` for users without an Anthropic API key."""
-    status_json = _run_tool("get_status", {"hours": 24}, cfg_loader, store)
-    prs_json    = _run_tool("list_pending_prs", {}, cfg_loader, store)
+    status_json = await _run_tool("get_status", {"hours": 24}, cfg_loader, store)
+    prs_json    = await _run_tool("list_pending_prs", {}, cfg_loader, store)
 
     # Pre-fetch log search if the message is a search request.
     # Use quoted strings as the query, or fall back to the full message.
@@ -726,7 +881,7 @@ async def _handle_with_cli(
     if any(kw in message.lower() for kw in _search_kws):
         quoted = re.findall(r'"([^"]+)"', message)
         query  = quoted[0] if quoted else message
-        search_json = _run_tool("search_logs", {"query": query}, cfg_loader, store)
+        search_json = await _run_tool("search_logs", {"query": query}, cfg_loader, store)
 
     paused = Path("SENTINEL_PAUSE").exists()
     repos  = list(cfg_loader.repos.keys())
@@ -784,7 +939,7 @@ async def _handle_with_cli(
             action = json.loads(m.group(1))
             name   = action.pop("action", "")
             if name:
-                result_str = _run_tool(name, action, cfg_loader, store)
+                result_str = await _run_tool(name, action, cfg_loader, store)
                 logger.info("Boss CLI action: %s → %s", name, result_str[:80])
         except Exception as e:
             logger.warning("Boss action parse error: %s", e)
@@ -805,6 +960,7 @@ async def handle_message(
     history: list,
     cfg_loader,
     store,
+    slack_client=None,
 ) -> tuple[str, bool]:
     """
     Process one user message through the Sentinel Boss (Claude with tool use).
@@ -830,7 +986,7 @@ async def handle_message(
 
     api_key = cfg_loader.sentinel.anthropic_api_key or os.environ.get("ANTHROPIC_API_KEY", "")
     if not api_key:
-        return await _handle_with_cli(message, history, cfg_loader, store)
+        return await _handle_with_cli(message, history, cfg_loader, store, slack_client=slack_client)
 
     client = anthropic.Anthropic(api_key=api_key)
 
@@ -880,7 +1036,7 @@ async def handle_message(
         messages.append({"role": "assistant", "content": response.content})
         tool_results = []
         for tc in tool_blocks:
-            result = _run_tool(tc.name, tc.input, cfg_loader, store)
+            result = await _run_tool(tc.name, tc.input, cfg_loader, store, slack_client=slack_client)
             logger.info("Boss tool: %s(%s) → %s", tc.name, tc.input, result[:120])
             tool_results.append({
                 "type":        "tool_result",

package/python/sentinel/slack_bot.py

@@ -164,19 +164,125 @@ async def run_slack_bot(cfg_loader, store) -> None:
         if _allowed(event.get("channel", "")):
             await _dispatch(event, client, cfg_loader, store)
 
+    # ── Passive bot watcher — seed DB from config on startup ─────────────────
+    for bot_id_cfg in cfg.slack_watch_bot_ids:
+        if bot_id_cfg and not store.is_watched_bot(bot_id_cfg):
+            store.add_watched_bot(bot_id_cfg, bot_id_cfg, added_by="config")
+            logger.info("Seeded watched bot from config: %s", bot_id_cfg)
+
     @app.event("message")
     async def on_message(event, client):
-        # DMs are always allowed regardless of SLACK_CHANNEL restriction
+        # DMs from humans → Boss conversation
         if event.get("channel_type") == "im" and not event.get("bot_id"):
             await _dispatch(event, client, cfg_loader, store)
+            return
+
+        # Passive bot watcher — bot messages from DB-registered bots
+        bot_id = event.get("bot_id", "")
+        if bot_id and event.get("channel") and store.is_watched_bot(bot_id):
+            await _handle_bot_message(event, client, cfg_loader, store)
 
     # ── Start ─────────────────────────────────────────────────────────────────
 
     handler = AsyncSocketModeHandler(app, cfg.slack_app_token)
     logger.info("Sentinel Boss connected to Slack (Socket Mode)")
+    watched = store.get_watched_bots()
+    if watched:
+        logger.info("Sentinel passively watching %d bot(s): %s",
+                    len(watched), [b["bot_name"] for b in watched])
     await handler.start_async()
 
 
+# ── Bot-message watcher ───────────────────────────────────────────────────────
+
+import uuid as _uuid
+from pathlib import Path as _Path
+
+
+async def _handle_bot_message(event: dict, client, cfg_loader, store) -> None:
+    """
+    Called when a watched bot posts a message.
+    Queues the message as an issue in the bot's registered project directory.
+    All messages from watched bots are queued — no error pre-filtering.
+    """
+    bot_id  = event.get("bot_id", "")
+    channel = event.get("channel", "")
+    ts      = event.get("ts", "")
+
+    # Avoid duplicate issues
+    dedup_key = f"slack-watch:{channel}:{ts}"
+    if store.is_seen_dedup(dedup_key):
+        return
+    store.mark_seen_dedup(dedup_key)
+
+    # Flatten text (handle block-kit attachments too)
+    text = event.get("text", "")
+    for att in event.get("attachments", []):
+        text += "\n" + att.get("text", "") + "\n" + att.get("fallback", "")
+    text = text.strip()
+    if not text:
+        return
+
+    # Find the project this bot is registered to
+    bots = store.get_watched_bots()
+    bot_info = next((b for b in bots if b["bot_id"] == bot_id), None)
+    project_name = (bot_info or {}).get("project_name") or ""
+
+    # Resolve the project issues directory
+    workspace = _Path(cfg_loader.sentinel.workspace_dir).parent
+    if project_name:
+        # workspace_dir is <sentinel_root>/workspace, project dirs are siblings
+        project_dirs = [
+            d for d in workspace.iterdir()
+            if d.is_dir() and d.name != "workspace"
+            and (d / "config" / "sentinel.properties").exists()
+        ]
+        matched = next(
+            (d for d in project_dirs
+             if d.name == project_name or
+             _read_project_name_from_dir(d) == project_name),
+            None,
+        )
+        issues_dir = (matched / "issues") if matched else (_Path(".") / "issues")
+    else:
+        issues_dir = _Path(".") / "issues"
+
+    issues_dir.mkdir(parents=True, exist_ok=True)
+
+    uid = _uuid.uuid4().hex[:8]
+    fname = f"bot-{project_name or 'unknown'}-{uid}.txt"
+    content = (
+        f"SOURCE: Slack bot {bot_id} in channel {channel}\n"
+        f"SLACK_TS: {ts}\n\n"
+        f"{text}"
+    )
+    (issues_dir / fname).write_text(content, encoding="utf-8")
+    _Path("SENTINEL_POLL_NOW").touch()
+    logger.info("Bot watcher queued issue from %s → %s/%s", bot_id, issues_dir, fname)
+
+    # React with 👀 so the team knows Sentinel noticed it
+    if ts:
+        try:
+            await client.reactions_add(channel=channel, timestamp=ts, name="eyes")
+        except Exception:
+            pass  # reactions:write scope may not be granted — non-fatal
+
+
+def _read_project_name_from_dir(project_dir: _Path) -> str:
+    """Read PROJECT_NAME from a project's sentinel.properties, or return dir name."""
+    props = project_dir / "config" / "sentinel.properties"
+    if not props.exists():
+        return project_dir.name
+    try:
+        for line in props.read_text(encoding="utf-8").splitlines():
+            line = line.strip()
+            if line.upper().startswith("PROJECT_NAME="):
+                return line.split("=", 1)[1].partition("#")[0].strip()
+    except OSError:
+        pass
+    return project_dir.name
+
+
 # ── Dispatcher ────────────────────────────────────────────────────────────────
 
 async def _dispatch(event: dict, client, cfg_loader, store) -> None:
@@ -214,7 +320,8 @@ async def _run_turn(session: _Session, message: str, client, cfg_loader, store)
 
     try:
         reply, is_done = await handle_message(
-            message, session.history, cfg_loader, store
+            message, session.history, cfg_loader, store,
+            slack_client=client,
         )
     except Exception as e:
         logger.exception("Sentinel Boss error: %s", e)

package/python/sentinel/state_store.py

@@ -74,10 +74,11 @@ class StateStore:
     def _migrate(self):
         """Add new columns to existing DBs without breaking old installs."""
         migrations = [
-            ("add_sentinel_marker",  "ALTER TABLE fixes ADD COLUMN sentinel_marker TEXT"),
-            ("add_confirmed_at",     "ALTER TABLE fixes ADD COLUMN confirmed_at TEXT"),
-            ("add_fix_outcome",      "ALTER TABLE fixes ADD COLUMN fix_outcome TEXT"),
-            ("add_marker_seen_at",   "ALTER TABLE fixes ADD COLUMN marker_seen_at TEXT"),
+            ("add_sentinel_marker",       "ALTER TABLE fixes ADD COLUMN sentinel_marker TEXT"),
+            ("add_confirmed_at",          "ALTER TABLE fixes ADD COLUMN confirmed_at TEXT"),
+            ("add_fix_outcome",           "ALTER TABLE fixes ADD COLUMN fix_outcome TEXT"),
+            ("add_marker_seen_at",        "ALTER TABLE fixes ADD COLUMN marker_seen_at TEXT"),
+            ("add_watched_bots_project",  "ALTER TABLE watched_bots ADD COLUMN project_name TEXT"),
         ]
         with self._conn() as conn:
             done = {r[0] for r in conn.execute("SELECT name FROM _sentinel_migrations").fetchall()}
@@ -273,3 +274,68 @@ class StateStore:
             if row:
                 return datetime.fromisoformat(row["sent_at"])
             return None
+
+    # ── Dedup store (used by Slack bot watcher) ───────────────────────────────
+
+    def is_seen_dedup(self, key: str) -> bool:
+        """Return True if this dedup key has already been processed."""
+        with self._conn() as conn:
+            conn.execute(
+                "CREATE TABLE IF NOT EXISTS dedup "
+                "(key TEXT PRIMARY KEY, seen_at TEXT)"
+            )
+            row = conn.execute(
+                "SELECT key FROM dedup WHERE key = ?", (key,)
+            ).fetchone()
+            return row is not None
+
+    def mark_seen_dedup(self, key: str):
+        """Record a dedup key so it won't be processed again."""
+        with self._conn() as conn:
+            conn.execute(
+                "CREATE TABLE IF NOT EXISTS dedup "
+                "(key TEXT PRIMARY KEY, seen_at TEXT)"
+            )
+            conn.execute(
+                "INSERT OR IGNORE INTO dedup (key, seen_at) VALUES (?, ?)",
+                (key, _now()),
+            )
+
+    # ── Watched bots (Slack passive monitor) ─────────────────────────────────
+
+    def _ensure_watched_bots_table(self, conn):
+        conn.execute(
+            "CREATE TABLE IF NOT EXISTS watched_bots "
+            "(bot_id TEXT PRIMARY KEY, bot_name TEXT, added_by TEXT, added_at TEXT)"
+        )
+
+    def add_watched_bot(self, bot_id: str, bot_name: str, added_by: str = "config", project_name: str = ""):
+        with self._conn() as conn:
+            self._ensure_watched_bots_table(conn)
+            conn.execute(
+                "INSERT OR REPLACE INTO watched_bots (bot_id, bot_name, added_by, added_at, project_name) "
+                "VALUES (?, ?, ?, ?, ?)",
+                (bot_id, bot_name, added_by, _now(), project_name or None),
+            )
+
+    def remove_watched_bot(self, bot_id: str) -> bool:
+        """Returns True if a row was deleted."""
+        with self._conn() as conn:
+            self._ensure_watched_bots_table(conn)
+            cur = conn.execute("DELETE FROM watched_bots WHERE bot_id = ?", (bot_id,))
+            return cur.rowcount > 0
+
+    def is_watched_bot(self, bot_id: str) -> bool:
+        with self._conn() as conn:
+            self._ensure_watched_bots_table(conn)
+            return conn.execute(
+                "SELECT 1 FROM watched_bots WHERE bot_id = ?", (bot_id,)
+            ).fetchone() is not None
+
+    def get_watched_bots(self) -> list[dict]:
+        with self._conn() as conn:
+            self._ensure_watched_bots_table(conn)
+            rows = conn.execute(
+                "SELECT * FROM watched_bots ORDER BY added_at"
+            ).fetchall()
+            return [dict(r) for r in rows]

package/templates/sentinel.properties

@@ -27,7 +27,7 @@ WORKSPACE_DIR=./workspace
 
 # Slack Bot (optional) — Sentinel Boss conversational interface
 # Create a Slack App at api.slack.com, enable Socket Mode, add scopes:
-#   app_mentions:read, chat:write, im:history, channels:history, users:read
+#   app_mentions:read, chat:write, im:history, channels:history, users:read, reactions:write
 # Then install to workspace and paste both tokens here.
 # SLACK_BOT_TOKEN=xoxb-...
 # SLACK_APP_TOKEN=xapp-...
@@ -35,3 +35,10 @@ WORKSPACE_DIR=./workspace
 # Use the channel name (e.g. devops-sentinel) or the Slack channel ID (e.g. C01AB2CD3EF)
 # Note: requires conversations:read scope on the Slack App if using channel name
 # SLACK_CHANNEL=devops-sentinel
+
+# Passive bot watcher — seed the watch list on startup with known bot IDs.
+# Sentinel will passively queue every message from these bots as issues (no @mention needed).
+# You can also add bots at runtime: "@Sentinel listen to @alertbot for project 1881"
+# Use "@Sentinel list watched bots" to see the current list.
+# Comma-separated list of Slack bot IDs (starts with B, not U).
+# SLACK_WATCH_BOT_IDS=B12345678, B87654321