@misterhuydo/sentinel 1.0.6 → 1.0.9

package/bin/sentinel.js

@@ -1,39 +1,42 @@
-#!/usr/bin/env node
-'use strict';
-
-const chalk = require('chalk');
-const [,, command = 'help', ...args] = process.argv;
-
-const BANNER = `
-${chalk.cyan('███████╗███████╗███╗   ██╗████████╗██╗███╗   ██╗███████╗██╗')}
-${chalk.cyan('██╔════╝██╔════╝████╗  ██║╚══██╔══╝██║████╗  ██║██╔════╝██║')}
-${chalk.cyan('███████╗█████╗  ██╔██╗ ██║   ██║   ██║██╔██╗ ██║█████╗  ██║')}
-${chalk.cyan('╚════██║██╔══╝  ██║╚██╗██║   ██║   ██║██║╚██╗██║██╔══╝  ██║')}
-${chalk.cyan('███████║███████╗██║ ╚████║   ██║   ██║██║ ╚████║███████╗███████╗')}
-${chalk.cyan('╚══════╝╚══════╝╚═╝  ╚═══╝   ╚═╝   ╚═╝╚═╝  ╚═══╝╚══════╝╚══════╝')}
-${chalk.gray('  Autonomous DevOps Agent')}
-`;
-
-async function main() {
-  console.log(BANNER);
-
-  switch (command) {
-    case 'init':
-      await require('../lib/init')();
-      break;
-    case 'add':
-      await require('../lib/add')(args[0]);
-      break;
-    case 'help':
-    default:
-      console.log(`${chalk.bold('Usage:')}
-  sentinel init          Interactive setup — install everything and create workspace
-  sentinel add <name>    Add a new project instance to an existing workspace
-`);
-  }
-}
-
-main().catch(err => {
-  console.error(chalk.red('Error:'), err.message);
-  process.exit(1);
-});
+#!/usr/bin/env node
+'use strict';
+
+const chalk = require('chalk');
+const [,, command = 'help', ...args] = process.argv;
+
+const BANNER = `
+${chalk.cyan('███████╗███████╗███╗   ██╗████████╗██╗███╗   ██╗███████╗██╗')}
+${chalk.cyan('██╔════╝██╔════╝████╗  ██║╚══██╔══╝██║████╗  ██║██╔════╝██║')}
+${chalk.cyan('███████╗█████╗  ██╔██╗ ██║   ██║   ██║██╔██╗ ██║█████╗  ██║')}
+${chalk.cyan('╚════██║██╔══╝  ██║╚██╗██║   ██║   ██║██║╚██╗██║██╔══╝  ██║')}
+${chalk.cyan('███████║███████╗██║ ╚████║   ██║   ██║██║ ╚████║███████╗███████╗')}
+${chalk.cyan('╚══════╝╚══════╝╚═╝  ╚═══╝   ╚═╝   ╚═╝╚═╝  ╚═══╝╚══════╝╚══════╝')}
+${chalk.gray('  Autonomous DevOps Agent')}
+`;
+
+async function main() {
+  console.log(BANNER);
+
+  switch (command) {
+    case 'init':
+      await require('../lib/init')();
+      break;
+    case 'add':
+      await require('../lib/add')(args[0]);
+      break;
+    case 'help':
+    default:
+      console.log(`${chalk.bold('Usage:')}
+  sentinel init                        Interactive setup — install everything and create workspace
+  sentinel add <name>                  Add a blank project (fill config manually)
+  sentinel add <git-url>               Add a project pre-configured for a GitHub repo
+  sentinel add <project.json>          Add a project from a local JSON config file
+  sentinel add <https://host/cfg.json> Add a project from a remote JSON config URL
+`);
+  }
+}
+
+main().catch(err => {
+  console.error(chalk.red('Error:'), err.message);
+  process.exit(1);
+});

package/lib/add.js

@@ -3,48 +3,395 @@
 const fs = require('fs-extra');
 const path = require('path');
 const os = require('os');
+const { execSync, spawnSync } = require('child_process');
 const prompts = require('prompts');
 const chalk = require('chalk');
-const { writeExampleProject, generateWorkspaceScripts } = require('./generate');
-
-module.exports = async function add(nameArg) {
-  const answers = await prompts([
-    {
-      type: 'text',
-      name: 'workspace',
-      message: 'Workspace directory',
-      initial: path.join(os.homedir(), 'sentinel'),
-      format: v => v.replace(/^~/, os.homedir()),
-    },
-    {
-      type: 'text',
-      name: 'name',
-      message: 'Project name',
-      initial: nameArg || 'my-project',
-      validate: v => /^[a-z0-9_-]+$/i.test(v) || 'Use letters, numbers, hyphens only',
-    },
-  ], { onCancel: () => process.exit(0) });
-
-  const { workspace, name } = answers;
-  const codeDir = path.join(workspace, 'code');
-  const pythonBin = path.join(codeDir, '.venv', 'bin', 'python3');
-  const projectDir = path.join(workspace, name);
+const { writeExampleProject, generateWorkspaceScripts, generateProjectScripts } = require('./generate');
+
+const ok   = msg => console.log(chalk.green('  ✔'), msg);
+const info = msg => console.log(chalk.cyan('  →'), msg);
+const warn = msg => console.log(chalk.yellow('  ⚠'), msg);
+const step = msg => console.log('\n' + chalk.bold.white(msg));
+
+// ── Input type detection ───────────────────────────────────────────────────
+
+function detectInputType(arg) {
+  if (!arg) return 'name';
+  if (/^git@/.test(arg) || (/^https?:\/\/github\.com\//.test(arg) && arg.endsWith('.git'))) return 'git';
+  if (/^https?:\/\//.test(arg)) return 'url';
+  if (arg.toLowerCase().endsWith('.json') || arg.includes('/') || arg.includes('\\')) return 'json';
+  return 'name';
+}
+
+// ── Workspace resolver ─────────────────────────────────────────────────────
+
+async function resolveWorkspace(initial) {
+  const ans = await prompts([{
+    type: 'text',
+    name: 'workspace',
+    message: 'Workspace directory',
+    initial: initial || path.join(os.homedir(), 'sentinel'),
+    format: v => v.replace(/^~/, os.homedir()),
+  }], { onCancel: () => process.exit(0) });
+  return ans.workspace;
+}
 
+function requireCodeDir(workspace) {
+  const codeDir = path.join(workspace, 'code');
   if (!fs.existsSync(codeDir)) {
     console.error(chalk.red(`Sentinel code not found at ${codeDir}`));
     console.error(chalk.red('Run "sentinel init" first.'));
     process.exit(1);
   }
+  return codeDir;
+}
+
+// ── Validation ─────────────────────────────────────────────────────────────
+
+const VALID_NAME = /^[a-z0-9_-]+$/i;
+const GITHUB_URL = /^(git@github\.com:|https:\/\/github\.com\/).+\.git$/;
+
+function validateProjectJson(obj) {
+  const errors = [];
+  if (!obj.name || !VALID_NAME.test(obj.name)) {
+    errors.push('name must be letters, numbers, hyphens only');
+  }
+  if (!Array.isArray(obj.repos) || obj.repos.length === 0) {
+    errors.push('repos array is required and must be non-empty');
+  } else {
+    obj.repos.forEach((r, i) => {
+      if (!r.REPO_URL || !GITHUB_URL.test(r.REPO_URL)) {
+        errors.push(`repos[${i}].REPO_URL must be a valid GitHub URL`);
+      }
+      if (!r.name) errors.push(`repos[${i}].name is required`);
+    });
+  }
+  return errors;
+}
+
+// ── Properties file writer ─────────────────────────────────────────────────
+
+function writePropertiesFile(filePath, obj) {
+  const lines = Object.entries(obj).map(([k, v]) => `${k}=${v}`);
+  fs.writeFileSync(filePath, lines.join('\n') + '\n');
+}
+
+// ── Apply JSON config to a project directory ───────────────────────────────
+
+function applyJsonToProject(projectDir, obj) {
+  const configDir  = path.join(projectDir, 'config');
+  const repoDir    = path.join(projectDir, 'config', 'repo-configs');
+  const logDir     = path.join(projectDir, 'config', 'log-configs');
+  fs.ensureDirSync(repoDir);
+  fs.ensureDirSync(logDir);
+
+  // sentinel.properties overrides
+  if (obj.sentinel) {
+    const propsPath = path.join(configDir, 'sentinel.properties');
+    const existing = fs.existsSync(propsPath) ? fs.readFileSync(propsPath, 'utf8') : '';
+    let updated = existing;
+    Object.entries(obj.sentinel).forEach(([k, v]) => {
+      const re = new RegExp(`^#?\\s*${k}\\s*=.*$`, 'm');
+      if (re.test(updated)) {
+        updated = updated.replace(re, `${k}=${v}`);
+      } else {
+        updated += `\n${k}=${v}`;
+      }
+    });
+    fs.writeFileSync(propsPath, updated);
+    ok('Updated sentinel.properties');
+  }
+
+  // repo-configs
+  if (Array.isArray(obj.repos)) {
+    obj.repos.forEach(repo => {
+      const { name, ...props } = repo;
+      writePropertiesFile(path.join(repoDir, `${name}.properties`), props);
+      ok(`Created repo-configs/${name}.properties`);
+    });
+  }
+
+  // log-configs (optional)
+  if (Array.isArray(obj.log_sources)) {
+    obj.log_sources.forEach(src => {
+      const { name, ...props } = src;
+      writePropertiesFile(path.join(logDir, `${name}.properties`), props);
+      ok(`Created log-configs/${name}.properties`);
+    });
+  }
+}
+
+// ── URL fetcher ────────────────────────────────────────────────────────────
+
+function fetchUrl(url) {
+  try {
+    const result = spawnSync('curl', ['-fsSL', '--max-time', '10', url], { encoding: 'utf8' });
+    if (result.status !== 0) throw new Error(result.stderr || 'curl failed');
+    return result.stdout;
+  } catch (_) {
+    // fallback: node https
+    const https = require('https');
+    const http  = require('http');
+    const lib   = url.startsWith('https') ? https : http;
+    return new Promise((resolve, reject) => {
+      lib.get(url, res => {
+        let data = '';
+        res.on('data', c => (data += c));
+        res.on('end', () => resolve(data));
+      }).on('error', reject);
+    });
+  }
+}
+
+// ── Mode: name (template) ──────────────────────────────────────────────────
+
+async function addFromName(nameArg, workspace) {
+  const answers = await prompts([{
+    type: 'text',
+    name: 'name',
+    message: 'Project name',
+    initial: nameArg || 'my-project',
+    validate: v => VALID_NAME.test(v) || 'Use letters, numbers, hyphens only',
+  }], { onCancel: () => process.exit(0) });
+
+  const { name } = answers;
+  const projectDir = path.join(workspace, name);
+
+  step('Dry-run preview');
+  info(`Will create: ${projectDir}/`);
+  info('  config/sentinel.properties');
+  info('  config/repo-configs/_example.properties');
+  info('  config/log-configs/_example.properties');
+  info('  init.sh, start.sh, stop.sh');
+
+  const { confirm } = await prompts({
+    type: 'confirm', name: 'confirm',
+    message: `Create project "${name}"?`, initial: true,
+  }, { onCancel: () => process.exit(0) });
+  if (!confirm) { info('Aborted.'); return; }
+
+  if (fs.existsSync(projectDir)) {
+    console.error(chalk.yellow(`Project "${name}" already exists at ${projectDir}`));
+    process.exit(1);
+  }
+
+  const codeDir  = requireCodeDir(workspace);
+  const pythonBin = path.join(codeDir, '.venv', 'bin', 'python3');
+  writeExampleProject(projectDir, codeDir, pythonBin);
+  generateWorkspaceScripts(workspace);
+
+  ok(`Project "${name}" created at ${projectDir}`);
+  printNextSteps(projectDir);
+}
+
+// ── Mode: git URL ──────────────────────────────────────────────────────────
+
+async function addFromGit(gitUrl, workspace) {
+  // Derive project name from repo name
+  const repoSlug  = gitUrl.replace(/\.git$/, '').split(/[:/]/).pop();
+  const answers = await prompts([{
+    type: 'text',
+    name: 'name',
+    message: 'Project name',
+    initial: repoSlug,
+    validate: v => VALID_NAME.test(v) || 'Use letters, numbers, hyphens only',
+  }], { onCancel: () => process.exit(0) });
+
+  const { name } = answers;
+  const projectDir = path.join(workspace, name);
+  const localPath  = path.join(workspace, 'repos', repoSlug);
+
+  step('Dry-run: validating git URL');
+  info(`Running: git ls-remote ${gitUrl}`);
+  const result = spawnSync('git', ['ls-remote', '--heads', gitUrl], { encoding: 'utf8', timeout: 15000 });
+  if (result.status !== 0) {
+    console.error(chalk.red(`  ✖ Cannot reach repository: ${gitUrl}`));
+    console.error(chalk.red(`    ${result.stderr || 'git ls-remote failed'}`));
+    process.exit(1);
+  }
+  ok('Repository is reachable');
+
+  const branches = (result.stdout || '').split('\n')
+    .filter(Boolean).map(l => l.split('\t')[1].replace('refs/heads/', ''));
+  const defaultBranch = branches.includes('main') ? 'main' : (branches[0] || 'main');
+  info(`Detected default branch: ${defaultBranch}`);
+
+  step('Dry-run preview');
+  info(`Will create: ${projectDir}/`);
+  info(`  config/repo-configs/${repoSlug}.properties`);
+  info(`    REPO_URL=${gitUrl}`);
+  info(`    LOCAL_PATH=${localPath}`);
+  info(`    BRANCH=${defaultBranch}`);
+  info('  init.sh, start.sh, stop.sh');
+
+  const { confirm } = await prompts({
+    type: 'confirm', name: 'confirm',
+    message: `Create project "${name}" for ${gitUrl}?`, initial: true,
+  }, { onCancel: () => process.exit(0) });
+  if (!confirm) { info('Aborted.'); return; }
 
   if (fs.existsSync(projectDir)) {
     console.error(chalk.yellow(`Project "${name}" already exists at ${projectDir}`));
     process.exit(1);
   }
 
+  const codeDir   = requireCodeDir(workspace);
+  const pythonBin = path.join(codeDir, '.venv', 'bin', 'python3');
+
   writeExampleProject(projectDir, codeDir, pythonBin);
+
+  // Write the actual repo config (overwrite the example)
+  const repoDir = path.join(projectDir, 'config', 'repo-configs');
+  writePropertiesFile(path.join(repoDir, `${repoSlug}.properties`), {
+    REPO_NAME: repoSlug,
+    REPO_URL: gitUrl,
+    LOCAL_PATH: localPath,
+    BRANCH: defaultBranch,
+    AUTO_PUBLISH: 'false',
+    CAIRN_MCP_ENABLED: 'true',
+  });
+  // Remove the _example placeholder
+  const example = path.join(repoDir, '_example.properties');
+  if (fs.existsSync(example)) fs.removeSync(example);
+
   generateWorkspaceScripts(workspace);
+  ok(`Project "${name}" created at ${projectDir}`);
+  printNextSteps(projectDir);
+}
 
-  console.log('\n' + chalk.green('✔'), `Project "${name}" created at ${projectDir}`);
+// ── Mode: local JSON ───────────────────────────────────────────────────────
+
+async function addFromJson(jsonPath, workspace) {
+  step(`Reading ${jsonPath}`);
+  let obj;
+  try {
+    obj = JSON.parse(fs.readFileSync(jsonPath, 'utf8'));
+  } catch (e) {
+    console.error(chalk.red(`  ✖ Cannot parse ${jsonPath}: ${e.message}`));
+    process.exit(1);
+  }
+
+  const errors = validateProjectJson(obj);
+  if (errors.length) {
+    console.error(chalk.red('  ✖ Invalid project JSON:'));
+    errors.forEach(e => console.error(chalk.red(`    - ${e}`)));
+    process.exit(1);
+  }
+  ok('JSON is valid');
+
+  const { name } = obj;
+  const projectDir = path.join(workspace, name);
+
+  step('Dry-run preview');
+  info(`Will create: ${projectDir}/`);
+  (obj.repos || []).forEach(r => info(`  config/repo-configs/${r.name}.properties  (${r.REPO_URL})`));
+  (obj.log_sources || []).forEach(s => info(`  config/log-configs/${s.name}.properties  (${s.SOURCE_TYPE})`));
+  if (obj.sentinel) {
+    Object.entries(obj.sentinel).forEach(([k, v]) => info(`  sentinel.properties: ${k}=${v}`));
+  }
+
+  const { confirm } = await prompts({
+    type: 'confirm', name: 'confirm',
+    message: `Create project "${name}" from ${path.basename(jsonPath)}?`, initial: true,
+  }, { onCancel: () => process.exit(0) });
+  if (!confirm) { info('Aborted.'); return; }
+
+  if (fs.existsSync(projectDir)) {
+    console.error(chalk.yellow(`Project "${name}" already exists at ${projectDir}`));
+    process.exit(1);
+  }
+
+  const codeDir   = requireCodeDir(workspace);
+  const pythonBin = path.join(codeDir, '.venv', 'bin', 'python3');
+
+  writeExampleProject(projectDir, codeDir, pythonBin);
+
+  // Remove example placeholders before writing real configs
+  const repoDir = path.join(projectDir, 'config', 'repo-configs');
+  const logDir  = path.join(projectDir, 'config', 'log-configs');
+  const exampleRepo = path.join(repoDir, '_example.properties');
+  const exampleLog  = path.join(logDir,  '_example.properties');
+  if (fs.existsSync(exampleRepo)) fs.removeSync(exampleRepo);
+  if (fs.existsSync(exampleLog))  fs.removeSync(exampleLog);
+
+  applyJsonToProject(projectDir, obj);
+  generateWorkspaceScripts(workspace);
+  ok(`Project "${name}" created at ${projectDir}`);
+  printNextSteps(projectDir);
+}
+
+// ── Mode: remote URL ───────────────────────────────────────────────────────
+
+async function addFromUrl(url, workspace) {
+  step(`Fetching ${url}`);
+  let raw;
+  try {
+    raw = fetchUrl(url);
+    if (raw && typeof raw.then === 'function') raw = await raw;
+  } catch (e) {
+    console.error(chalk.red(`  ✖ Cannot fetch ${url}: ${e.message}`));
+    process.exit(1);
+  }
+
+  let obj;
+  try {
+    obj = JSON.parse(raw);
+  } catch (e) {
+    console.error(chalk.red(`  ✖ Response is not valid JSON: ${e.message}`));
+    process.exit(1);
+  }
+
+  const errors = validateProjectJson(obj);
+  if (errors.length) {
+    console.error(chalk.red('  ✖ Invalid project JSON at URL:'));
+    errors.forEach(e => console.error(chalk.red(`    - ${e}`)));
+    process.exit(1);
+  }
+  ok('JSON is valid');
+
+  const { name } = obj;
+  const projectDir = path.join(workspace, name);
+
+  step('Dry-run preview');
+  info(`Will create: ${projectDir}/`);
+  (obj.repos || []).forEach(r => info(`  config/repo-configs/${r.name}.properties  (${r.REPO_URL})`));
+  (obj.log_sources || []).forEach(s => info(`  config/log-configs/${s.name}.properties  (${s.SOURCE_TYPE})`));
+  if (obj.sentinel) {
+    Object.entries(obj.sentinel).forEach(([k, v]) => info(`  sentinel.properties: ${k}=${v}`));
+  }
+
+  const { confirm } = await prompts({
+    type: 'confirm', name: 'confirm',
+    message: `Create project "${name}" from ${url}?`, initial: true,
+  }, { onCancel: () => process.exit(0) });
+  if (!confirm) { info('Aborted.'); return; }
+
+  if (fs.existsSync(projectDir)) {
+    console.error(chalk.yellow(`Project "${name}" already exists at ${projectDir}`));
+    process.exit(1);
+  }
+
+  const codeDir   = requireCodeDir(workspace);
+  const pythonBin = path.join(codeDir, '.venv', 'bin', 'python3');
+
+  writeExampleProject(projectDir, codeDir, pythonBin);
+
+  const repoDir = path.join(projectDir, 'config', 'repo-configs');
+  const logDir  = path.join(projectDir, 'config', 'log-configs');
+  const exampleRepo = path.join(repoDir, '_example.properties');
+  const exampleLog  = path.join(logDir,  '_example.properties');
+  if (fs.existsSync(exampleRepo)) fs.removeSync(exampleRepo);
+  if (fs.existsSync(exampleLog))  fs.removeSync(exampleLog);
+
+  applyJsonToProject(projectDir, obj);
+  generateWorkspaceScripts(workspace);
+  ok(`Project "${name}" created at ${projectDir}`);
+  printNextSteps(projectDir);
+}
+
+// ── Helper ─────────────────────────────────────────────────────────────────
+
+function printNextSteps(projectDir) {
   console.log(`
   Next steps:
     1. Edit config files in:
@@ -54,4 +401,17 @@ module.exports = async function add(nameArg) {
     3. Start this project:
        ${chalk.cyan(`${projectDir}/start.sh`)}
 `);
+}
+
+// ── Entry point ────────────────────────────────────────────────────────────
+
+module.exports = async function add(arg) {
+  const type = detectInputType(arg);
+
+  const workspace = await resolveWorkspace();
+
+  if (type === 'git')  return addFromGit(arg, workspace);
+  if (type === 'url')  return addFromUrl(arg, workspace);
+  if (type === 'json') return addFromJson(arg, workspace);
+  return addFromName(arg, workspace);
 };

package/lib/generate.js

@@ -12,12 +12,10 @@ function writeExampleProject(projectDir, codeDir, pythonBin, anthropicKey = '')
   fs.ensureDirSync(repoDir);
 
   const tplDir = path.join(__dirname, '..', 'templates');
-  // Inject API key into sentinel.properties if provided
+  // Per-project sentinel.properties: MAILS, GITHUB_TOKEN, optional API key
   let sentinelProps = fs.readFileSync(path.join(tplDir, 'sentinel.properties'), 'utf8');
   if (anthropicKey) {
-    sentinelProps += `\n# Anthropic API key for Claude Code (headless server auth)\nANTHROPIC_API_KEY=${anthropicKey}\n`;
-  } else {
-    sentinelProps += `\n# Anthropic API key — set this if using API key auth, or leave blank for OAuth\n# ANTHROPIC_API_KEY=sk-ant-...\n`;
+    sentinelProps = sentinelProps.replace(/^# ANTHROPIC_API_KEY=.*/m, `ANTHROPIC_API_KEY=${anthropicKey}`);
   }
   fs.writeFileSync(path.join(projectDir, 'config', 'sentinel.properties'), sentinelProps);
   fs.copySync(path.join(tplDir, 'log-configs', '_example.properties'), path.join(configDir, '_example.properties'));
@@ -106,7 +104,18 @@ rm -f "$PID_FILE"
 
 // ── Workspace-level startAll / stopAll ────────────────────────────────────────
 
-function generateWorkspaceScripts(workspace) {
+function generateWorkspaceScripts(workspace, smtpConfig = {}) {
+  // Write shared sentinel.properties once (never overwrite existing)
+  const workspaceProps = path.join(workspace, 'sentinel.properties');
+  if (!fs.existsSync(workspaceProps)) {
+    const tplDir = path.join(__dirname, '..', 'templates');
+    let tpl = fs.readFileSync(path.join(tplDir, 'workspace-sentinel.properties'), 'utf8');
+    if (smtpConfig.host)     tpl = tpl.replace('SMTP_HOST=smtp.gmail.com',          'SMTP_HOST=' + smtpConfig.host);
+    if (smtpConfig.port)     tpl = tpl.replace('SMTP_PORT=587',                     'SMTP_PORT=' + smtpConfig.port);
+    if (smtpConfig.user)     tpl = tpl.replace('SMTP_USER=sentinel@yourdomain.com', 'SMTP_USER=' + smtpConfig.user);
+    if (smtpConfig.password) tpl = tpl.replace('SMTP_PASSWORD=<app-password>',      'SMTP_PASSWORD=' + smtpConfig.password);
+    fs.writeFileSync(workspaceProps, tpl);
+  }
   // startAll.sh
   fs.writeFileSync(path.join(workspace, 'startAll.sh'), `#!/usr/bin/env bash
 # Start all valid Sentinel project instances.

package/lib/init.js

@@ -51,9 +51,26 @@ module.exports = async function init() {
       message: 'Set up systemd service for auto-start on reboot?',
       initial: process.platform === 'linux',
     },
+    {
+      type: 'text',
+      name: 'smtpUser',
+      message: 'SMTP sender address (e.g. sentinel@yourdomain.com)',
+      initial: '',
+    },
+    {
+      type: prev => prev ? 'password' : null,
+      name: 'smtpPassword',
+      message: 'SMTP password / app password',
+    },
+    {
+      type: prev => prev ? 'text' : null,
+      name: 'smtpHost',
+      message: 'SMTP host',
+      initial: 'smtp.gmail.com',
+    },
   ], { onCancel: () => process.exit(0) });
 
-  const { workspace, authMode, anthropicKey, example, systemd } = answers;
+  const { workspace, authMode, anthropicKey, example, systemd, smtpUser, smtpPassword, smtpHost } = answers;
   const codeDir = path.join(workspace, 'code');
 
   // ── Python ──────────────────────────────────────────────────────────────────
@@ -121,7 +138,7 @@ module.exports = async function init() {
 
   // ── Workspace start/stop scripts ─────────────────────────────────────────────
   step('Generating scripts…');
-  generateWorkspaceScripts(workspace);
+  generateWorkspaceScripts(workspace, { host: smtpHost, user: smtpUser, password: smtpPassword });
   ok(`${workspace}/startAll.sh`);
   ok(`${workspace}/stopAll.sh`);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.0.6",
+  "version": "1.0.9",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/config_loader.py

@@ -51,6 +51,7 @@ class SentinelConfig:
     fix_confidence_threshold: float = 0.7
     log_retention_hours: int = 48
     anthropic_api_key: str = ""
+    marker_confirm_hours: int = 24  # quiet period before confirming a fix
 
 
 @dataclass
@@ -104,11 +105,21 @@ class ConfigLoader:
         )
 
     def _load_sentinel(self):
+        # Load workspace-level config first (~/sentinel/sentinel.properties),
+        # then overlay per-project config so project values win.
+        d: dict[str, str] = {}
+        workspace_props = self.config_dir.parent.parent / "sentinel.properties"
+        if workspace_props.exists():
+            d.update(_parse_properties(str(workspace_props)))
+            logger.debug("Loaded workspace config from %s", workspace_props)
+
         path = self.config_dir / "sentinel.properties"
         if not path.exists():
-            logger.warning("sentinel.properties not found at %s", path)
-            return
-        d = _parse_properties(str(path))
+            if not d:
+                logger.warning("sentinel.properties not found at %s", path)
+        else:
+            d.update(_parse_properties(str(path)))
+
         c = SentinelConfig()
         c.poll_interval_seconds = int(d.get("POLL_INTERVAL_SECONDS", 120))
         c.smtp_host = d.get("SMTP_HOST", "")
@@ -125,6 +136,7 @@ class ConfigLoader:
         c.fix_confidence_threshold = float(d.get("FIX_CONFIDENCE_THRESHOLD", 0.7))
         c.log_retention_hours = int(d.get("LOG_RETENTION_HOURS", 48))
         c.anthropic_api_key = d.get("ANTHROPIC_API_KEY", "")
+        c.marker_confirm_hours = int(d.get("MARKER_CONFIRM_HOURS", 24))
         self.sentinel = c
 
     def _load_log_sources(self):