@misterhuydo/sentinel 1.4.8 → 1.4.10

package/.cairn/session.json

@@ -1,6 +1,6 @@
 {
-  "message": "Auto-checkpoint at 2026-03-24T15:14:13.070Z",
-  "checkpoint_at": "2026-03-24T15:14:13.071Z",
+  "message": "Auto-checkpoint at 2026-03-24T15:25:10.578Z",
+  "checkpoint_at": "2026-03-24T15:25:10.579Z",
   "active_files": [],
   "notes": [],
   "mtime_snapshot": {}

package/.cairn/views/fb78ac_upgrade.js

@@ -0,0 +1,100 @@
+function ensureClaudePermissions() {
+  const settingsPath = require('path').join(require('os').homedir(), '.claude', 'settings.json');
+  const required = ['Read(**)', 'Write(**)', 'Edit(**)', 'Bash(**)'];
+  let settings = {};
+  try {
+    if (fs.existsSync(settingsPath)) {
+      settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
+    }
+  } catch (e) {
+    warn('Could not read ' + settingsPath + ': ' + e.message);
+    return;
+  }
+  if (!settings.permissions) settings.permissions = {};
+  if (!Array.isArray(settings.permissions.allow)) settings.permissions.allow = [];
+  const existing = new Set(settings.permissions.allow);
+  const added = [];
+  for (const perm of required) {
+    if (!existing.has(perm)) {
+      settings.permissions.allow.push(perm);
+      added.push(perm);
+    }
+  }
+  if (added.length === 0) {
+    ok('Claude Code permissions already configured');
+    return;
+  }
+  try {
+    const path = require('path');
+    fs.ensureDirSync(path.dirname(settingsPath));
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+    ok('Claude Code permissions patched: ' + added.join(', '));
+  } catch (e) {
+    warn('Could not write ' + settingsPath + ': ' + e.message);
+  }
+}
+'use strict';
+const fs = require('fs-extra');
+const path = require('path');
+const os = require('os');
+const { execSync, spawnSync } = require('child_process');
+const chalk = require('chalk');
+const ok   = msg => console.log(chalk.green('  ✔'), msg);
+const info = msg => console.log(chalk.cyan('  →'), msg);
+const warn = msg => console.log(chalk.yellow('  ⚠'), msg);
+module.exports = async function upgrade() {
+  const { version: current } = require('../package.json');
+  const defaultWorkspace = path.join(os.homedir(), 'sentinel');
+  const codeDir = path.join(defaultWorkspace, 'code');
+  if (!fs.existsSync(codeDir)) {
+    console.error(chalk.red('  ✖ Sentinel code directory not found at ' + codeDir));
+    console.error('    Run: sentinel init');
+    process.exit(1);
+  }
+  info(`Current version: ${current}`);
+  info('Installing latest @misterhuydo/sentinel...');
+  const install = spawnSync('npm', ['install', '-g', '@misterhuydo/sentinel@latest', '--prefer-online'], { stdio: 'inherit' });
+  if (install.status !== 0) {
+    console.error(chalk.red('  ✖ npm install failed'));
+    process.exit(1);
+  }
+  info('Upgrading @misterhuydo/cairn-mcp...');
+  spawnSync('npm', ['install', '-g', '@misterhuydo/cairn-mcp@latest', '--prefer-online'], { stdio: 'inherit' });
+  ok('@misterhuydo/cairn-mcp upgraded');
+  info('Upgrading @anthropic-ai/claude-code...');
+  spawnSync('npm', ['install', '-g', '@anthropic-ai/claude-code@latest', '--prefer-online'], { stdio: 'inherit' });
+  ok('@anthropic-ai/claude-code upgraded');
+  const npmRoot = execSync('npm root -g', { encoding: 'utf8' }).trim();
+  const pkgDir  = path.join(npmRoot, '@misterhuydo', 'sentinel');
+  const src     = path.join(pkgDir, 'python');
+  if (!fs.existsSync(src)) {
+    console.error(chalk.red('  ✖ Bundled Python source not found in installed package'));
+    process.exit(1);
+  }
+  info('Deploying Python source...');
+  fs.copySync(src, codeDir, { overwrite: true });
+  const { execSync: _exec } = require('child_process');
+  try { _exec(`find "${codeDir}" -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true`); } catch (_) {}
+  const scriptsDir = path.join(codeDir, 'scripts');
+  if (fs.existsSync(scriptsDir)) {
+    const shFiles = fs.readdirSync(scriptsDir)
+      .filter(f => f.endsWith('.sh'))
+      .map(f => path.join(scriptsDir, f));
+    if (shFiles.length) spawnSync('chmod', ['+x', ...shFiles], { stdio: 'inherit' });
+  }
+  ok('Python source updated');
+  info('Patching Claude Code permissions…');
+  ensureClaudePermissions();
+  const { version: latest } = require(path.join(pkgDir, 'package.json'));
+  ok(`Upgraded: ${current} → ${latest}`);
+  const startAll = path.join(defaultWorkspace, 'startAll.sh');
+  const stopAll  = path.join(defaultWorkspace, 'stopAll.sh');
+  if (fs.existsSync(stopAll) && fs.existsSync(startAll)) {
+    info('Restarting Sentinel...');
+    spawnSync('bash', [stopAll], { stdio: 'inherit' });
+    spawnSync('bash', [startAll], { stdio: 'inherit' });
+    ok('Sentinel restarted');
+  } else {
+    warn('No startAll.sh found — restart manually');
+  }
+};

package/lib/generate.js

@@ -49,21 +49,30 @@ fi
 pkill -f "sentinel.main --config $DIR/config" 2>/dev/null || true
 rm -f "$PID_FILE"
 
-# Check Claude Code authentication
-AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
-if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
-  echo ""
-  echo "[sentinel] Claude Code is not authenticated."
-  echo "  1. Open a new terminal and run: claude"
-  echo "  2. Type /login at the prompt"
-  echo "  3. Open the URL in any browser and log in"
-  echo "  4. Type /exit when done"
-  echo "  5. Re-run this script"
-  echo ""
-  exit 1
-fi
-
 WORKSPACE="$(dirname "$DIR")"
+
+# Check Claude Code authentication — skip if CLAUDE_PRO_FOR_TASKS=false in either config
+_claude_pro=true
+for _conf in "$WORKSPACE/sentinel.properties" "$DIR/config/sentinel.properties"; do
+  if [[ -f "$_conf" ]]; then
+    _val=$(grep -iE "^CLAUDE_PRO_FOR_TASKS[[:space:]]*=" "$_conf" 2>/dev/null | tail -1 | cut -d= -f2- | tr -d ' ' | tr '[:upper:]' '[:lower:]')
+    [[ -n "$_val" ]] && _claude_pro="$_val"
+  fi
+done
+if [[ "$_claude_pro" != "false" ]]; then
+  AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
+  if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
+    echo ""
+    echo "[sentinel] Claude Code is not authenticated."
+    echo "  1. Open a new terminal and run: claude"
+    echo "  2. Type /login at the prompt"
+    echo "  3. Open the URL in any browser and log in"
+    echo "  4. Type /exit when done"
+    echo "  5. Re-run this script"
+    echo ""
+    exit 1
+  fi
+fi
 mkdir -p "$DIR/logs" "$WORKSPACE/logs" "$DIR/workspace/fetched" "$DIR/workspace/patches" "$DIR/issues"
 cd "$DIR"
 PYTHONPATH="${codeDir}" "${pythonBin}" -m sentinel.main --config ./config \\
@@ -182,12 +191,21 @@ if [[ -f "$PID_FILE" ]] && kill -0 "$(cat "$PID_FILE")" 2>/dev/null; then
 fi
 pkill -f "sentinel.main --config $DIR/config" 2>/dev/null || true
 rm -f "$PID_FILE"
-AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
-if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
-  echo "[sentinel] Claude Code is not authenticated. Run: claude then /login"
-  exit 1
-fi
 WORKSPACE="$(dirname "$DIR")"
+_claude_pro=true
+for _conf in "$WORKSPACE/sentinel.properties" "$DIR/config/sentinel.properties"; do
+  if [[ -f "$_conf" ]]; then
+    _val=$(grep -iE "^CLAUDE_PRO_FOR_TASKS[[:space:]]*=" "$_conf" 2>/dev/null | tail -1 | cut -d= -f2- | tr -d ' ' | tr '[:upper:]' '[:lower:]')
+    [[ -n "$_val" ]] && _claude_pro="$_val"
+  fi
+done
+if [[ "$_claude_pro" != "false" ]]; then
+  AUTH_OUT=$(claude --print \"hi\" 2>&1 || true)
+  if echo "$AUTH_OUT" | grep -Eqi "not logged in|/login"; then
+    echo "[sentinel] Claude Code is not authenticated. Run: claude then /login"
+    exit 1
+  fi
+fi
 mkdir -p "$DIR/logs" "$WORKSPACE/logs" "$DIR/workspace/fetched" "$DIR/workspace/patches" "$DIR/issues"
 cd "$DIR"
 PYTHONPATH="__CODE_DIR__" "__PYTHON_BIN__" -m sentinel.main --config ./config \

package/lib/upgrade.js

@@ -97,6 +97,25 @@ module.exports = async function upgrade() {
   const { version: latest } = require(path.join(pkgDir, 'package.json'));
   ok(`Upgraded: ${current} → ${latest}`);
 
+  // Regenerate start.sh / stop.sh for all existing projects so they pick up template changes
+  info('Regenerating project scripts...');
+  const { generateProjectScripts } = require('./generate');
+  const pythonBin = fs.existsSync('/usr/bin/python3') ? '/usr/bin/python3' : 'python3';
+  let regenerated = 0;
+  try {
+    const entries = fs.readdirSync(defaultWorkspace, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      const projectDir = path.join(defaultWorkspace, entry.name);
+      if (!fs.existsSync(path.join(projectDir, 'config', 'sentinel.properties'))) continue;
+      generateProjectScripts(projectDir, codeDir, pythonBin);
+      regenerated++;
+    }
+    ok(`Project scripts regenerated (${regenerated} project(s))`);
+  } catch (e) {
+    warn('Could not regenerate project scripts: ' + e.message);
+  }
+
   const startAll = path.join(defaultWorkspace, 'startAll.sh');
   const stopAll  = path.join(defaultWorkspace, 'stopAll.sh');
   if (fs.existsSync(stopAll) && fs.existsSync(startAll)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.4.8",
+  "version": "1.4.10",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"