@misterhuydo/sentinel 1.4.7 → 1.4.9

package/.cairn/session.json

@@ -1,6 +1,6 @@
 {
-  "message": "Auto-checkpoint at 2026-03-24T15:11:03.239Z",
-  "checkpoint_at": "2026-03-24T15:11:03.240Z",
+  "message": "Auto-checkpoint at 2026-03-24T15:25:10.578Z",
+  "checkpoint_at": "2026-03-24T15:25:10.579Z",
   "active_files": [],
   "notes": [],
   "mtime_snapshot": {}

package/lib/generate.js

@@ -49,21 +49,30 @@ fi
 pkill -f "sentinel.main --config $DIR/config" 2>/dev/null || true
 rm -f "$PID_FILE"
 
-# Check Claude Code authentication
-AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
-if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
-  echo ""
-  echo "[sentinel] Claude Code is not authenticated."
-  echo "  1. Open a new terminal and run: claude"
-  echo "  2. Type /login at the prompt"
-  echo "  3. Open the URL in any browser and log in"
-  echo "  4. Type /exit when done"
-  echo "  5. Re-run this script"
-  echo ""
-  exit 1
-fi
-
 WORKSPACE="$(dirname "$DIR")"
+
+# Check Claude Code authentication — skip if CLAUDE_PRO_FOR_TASKS=false in either config
+_claude_pro=true
+for _conf in "$WORKSPACE/sentinel.properties" "$DIR/config/sentinel.properties"; do
+  if [[ -f "$_conf" ]]; then
+    _val=$(grep -iE "^CLAUDE_PRO_FOR_TASKS[[:space:]]*=" "$_conf" 2>/dev/null | tail -1 | cut -d= -f2- | tr -d ' ' | tr '[:upper:]' '[:lower:]')
+    [[ -n "$_val" ]] && _claude_pro="$_val"
+  fi
+done
+if [[ "$_claude_pro" != "false" ]]; then
+  AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
+  if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
+    echo ""
+    echo "[sentinel] Claude Code is not authenticated."
+    echo "  1. Open a new terminal and run: claude"
+    echo "  2. Type /login at the prompt"
+    echo "  3. Open the URL in any browser and log in"
+    echo "  4. Type /exit when done"
+    echo "  5. Re-run this script"
+    echo ""
+    exit 1
+  fi
+fi
 mkdir -p "$DIR/logs" "$WORKSPACE/logs" "$DIR/workspace/fetched" "$DIR/workspace/patches" "$DIR/issues"
 cd "$DIR"
 PYTHONPATH="${codeDir}" "${pythonBin}" -m sentinel.main --config ./config \\
@@ -182,12 +191,21 @@ if [[ -f "$PID_FILE" ]] && kill -0 "$(cat "$PID_FILE")" 2>/dev/null; then
 fi
 pkill -f "sentinel.main --config $DIR/config" 2>/dev/null || true
 rm -f "$PID_FILE"
-AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
-if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
-  echo "[sentinel] Claude Code is not authenticated. Run: claude then /login"
-  exit 1
-fi
 WORKSPACE="$(dirname "$DIR")"
+_claude_pro=true
+for _conf in "$WORKSPACE/sentinel.properties" "$DIR/config/sentinel.properties"; do
+  if [[ -f "$_conf" ]]; then
+    _val=$(grep -iE "^CLAUDE_PRO_FOR_TASKS[[:space:]]*=" "$_conf" 2>/dev/null | tail -1 | cut -d= -f2- | tr -d ' ' | tr '[:upper:]' '[:lower:]')
+    [[ -n "$_val" ]] && _claude_pro="$_val"
+  fi
+done
+if [[ "$_claude_pro" != "false" ]]; then
+  AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
+  if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
+    echo "[sentinel] Claude Code is not authenticated. Run: claude then /login"
+    exit 1
+  fi
+fi
 mkdir -p "$DIR/logs" "$WORKSPACE/logs" "$DIR/workspace/fetched" "$DIR/workspace/patches" "$DIR/issues"
 cd "$DIR"
 PYTHONPATH="__CODE_DIR__" "__PYTHON_BIN__" -m sentinel.main --config ./config \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.4.7",
+  "version": "1.4.9",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/config_loader.py

@@ -138,12 +138,14 @@ class ConfigLoader:
             d.update(_parse_properties(str(workspace_props)))
             logger.debug("Loaded workspace config from %s", workspace_props)
 
+        project_d: dict[str, str] = {}
         path = self.config_dir / "sentinel.properties"
         if not path.exists():
             if not d:
                 logger.warning("sentinel.properties not found at %s", path)
         else:
-            d.update(_parse_properties(str(path)))
+            project_d = _parse_properties(str(path))
+            d.update(project_d)
 
         c = SentinelConfig()
         c.poll_interval_seconds = int(d.get("POLL_INTERVAL_SECONDS", 120))
@@ -173,7 +175,15 @@ class ConfigLoader:
         c.slack_allowed_users = _csv(d.get("SLACK_ALLOWED_USERS", ""))
         c.slack_admin_users = _csv(d.get("SLACK_ADMIN_USERS", ""))
         c.project_name = d.get("PROJECT_NAME", "") or Path(self.config_dir).resolve().parent.name
-        c.claude_pro_for_tasks = d.get("CLAUDE_PRO_FOR_TASKS", "true").lower() != "false"
+        # If CLAUDE_PRO_FOR_TASKS is explicitly set anywhere, respect it.
+        # Otherwise: if the project supplies its own ANTHROPIC_API_KEY, default to False
+        # (bill against their key, not the Claude Pro subscription).
+        if "CLAUDE_PRO_FOR_TASKS" in d:
+            c.claude_pro_for_tasks = d["CLAUDE_PRO_FOR_TASKS"].lower() != "false"
+        elif project_d.get("ANTHROPIC_API_KEY", "").strip():
+            c.claude_pro_for_tasks = False
+        else:
+            c.claude_pro_for_tasks = True
         c.sync_enabled = d.get("SYNC_ENABLED", "true").lower() != "false"
         c.sync_interval_seconds = int(d.get("SYNC_INTERVAL_SECONDS", 300))
         c.sync_retention_days = int(d.get("SYNC_RETENTION_DAYS", 30))

package/templates/sentinel.properties

@@ -26,10 +26,11 @@ MAILS=you@yourdomain.com
 STATE_DB=./sentinel.db
 WORKSPACE_DIR=./workspace
 
-# Claude authentication — see workspace sentinel.properties for full documentation.
-# Override here only if this project needs different credentials than the workspace default.
+# Anthropic API key — override workspace default to bill this project separately.
+# Use case: the project owner (e.g. a client) provides their own key so fix costs
+# are charged to their account. When set here, the Fix Engine automatically uses
+# this key instead of the shared Claude Pro subscription.
 # ANTHROPIC_API_KEY=sk-ant-...
-# CLAUDE_PRO_FOR_TASKS=true
 
 # Slack Bot (optional) — Sentinel Boss conversational interface
 # Create a Slack App at api.slack.com, enable Socket Mode, add scopes: