@misterhuydo/sentinel 1.4.15 → 1.4.17

package/lib/add.js

@@ -125,7 +125,10 @@ function fetchUrl(url) {
 // ── SSH deploy key helpers ────────────────────────────────────────────────────
 
 function ensureKnownHosts() {
-  const knownHosts = path.join(os.homedir(), '.ssh', 'known_hosts');
+  const sshDir     = path.join(os.homedir(), '.ssh');
+  const knownHosts = path.join(sshDir, 'known_hosts');
+  fs.ensureDirSync(sshDir);
+  try { fs.chmodSync(sshDir, 0o700); } catch (_) {}
   const content = fs.existsSync(knownHosts) ? fs.readFileSync(knownHosts, 'utf8') : '';
   if (content.includes('github.com')) return;
   info('Adding GitHub to known_hosts…');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.4.15",
+  "version": "1.4.17",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/fix_engine.py

@@ -6,6 +6,7 @@ Invokes: claude --print "<prompt>" 2>&1
 Cairn MCP context is fetched automatically by Claude Code via its MCP tool
 connection — Sentinel does not need to query or inject it explicitly.
 """
+from __future__ import annotations
 
 import logging
 import re

package/python/sentinel/git_manager.py

@@ -5,6 +5,7 @@ Supports two modes (driven by repo.auto_publish):
   True  → apply fix directly to main branch and push
   False → push to sentinel/fix-<fp> branch and open a GitHub PR
 """
+from __future__ import annotations
 
 import logging
 import os

package/python/sentinel/log_parser.py

@@ -4,7 +4,8 @@ log_parser.py — Parse fetched log files into ErrorEvent objects.
 Handles Java-style logs (Spring Boot / Logback format):
   2024-01-15 12:34:56.789 ERROR [thread] class.ClassName - Message
   followed by optional stack trace lines (^\tat ...)
-"""
+"""
+from __future__ import annotations
 
 import hashlib
 import re

package/python/sentinel/log_syncer.py

@@ -6,6 +6,7 @@ Synced location: workspace/synced/<source-name>/<logname>-node<N>.log
 Uses rsync --append-verify (delta sync — only new bytes transferred).
 Full log history is preserved locally for instant grep without SSH.
 """
+from __future__ import annotations
 import logging
 import shutil
 import subprocess

package/python/sentinel/main.py

@@ -4,7 +4,8 @@ main.py — Sentinel entry point and watch loop.
 Usage:
   python -m sentinel.main           # run watch loop
   python -m sentinel.main --init    # first-time setup
-"""
+"""
+from __future__ import annotations
 
 import argparse
 import asyncio

package/python/sentinel/repo_router.py

@@ -5,6 +5,7 @@ Convention: log-configs/<name>.properties links to repo-configs/<name>.propertie
 If no repo-config exists for a given log-config stem, the error is unroutable
 and the fix is skipped.
 """
+from __future__ import annotations
 
 import logging
 from .log_parser import ErrorEvent

package/python/sentinel/sentinel_boss.py

@@ -4,7 +4,8 @@ sentinel_boss.py — Claude-backed Sentinel Boss.
 Claude acts as the boss: reads project state, decides on actions,
 executes them via tool use, and responds naturally. One agentic loop
 per turn — Claude may call multiple tools before replying.
-"""
+"""
+from __future__ import annotations
 
 import json
 import logging

package/python/sentinel/slack_bot.py

@@ -14,6 +14,7 @@ Setup (api.slack.com):
        SLACK_BOT_TOKEN=xoxb-...
        SLACK_APP_TOKEN=xapp-...
 """
+from __future__ import annotations
 
 import asyncio
 import base64

package/python/sentinel/state_store.py

@@ -1,6 +1,7 @@
 """
 state_store.py — SQLite-backed persistence for errors, fixes, and reports.
-"""
+"""
+from __future__ import annotations
 
 import json
 import sqlite3