@misterhuydo/sentinel 1.5.1 → 1.5.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/sentinel_boss.py

@@ -2929,23 +2929,30 @@ async def _run_tool(name: str, inputs: dict, cfg_loader, store, slack_client=Non
                 f"Question / Task: {question}"
             )
             from .fix_engine import _is_auth_error
-            cmd = (
+            skip_perms = os.getuid() != 0
+            # OAuth attempt: no --bare so the stored OAuth session is used naturally
+            oauth_cmd = (
+                [cfg.claude_code_bin, "--dangerously-skip-permissions", "--print", prompt]
+                if skip_perms else
+                [cfg.claude_code_bin, "--print", prompt]
+            )
+            # API key fallback: --bare forces API-key-only auth (no OAuth/hooks)
+            api_cmd = (
                 [cfg.claude_code_bin, "--dangerously-skip-permissions", "--bare", "--print", prompt]
-                if os.getuid() != 0 else
+                if skip_perms else
                 [cfg.claude_code_bin, "--bare", "--print", prompt]
             )
             run_kwargs = dict(capture_output=True, text=True, timeout=300,
                               cwd=str(local_path), stdin=subprocess.DEVNULL)
             try:
-                # Try OAuth first (or API key if claude_pro_for_tasks=False)
-                r = subprocess.run(cmd, env=env, **run_kwargs)
+                r = subprocess.run(oauth_cmd, env=env, **run_kwargs)
                 output = (r.stdout or "").strip()
                 auth_failed = _is_auth_error(output) or _is_auth_error(r.stderr or "")
 
-                # Silent fallback: retry with API key if OAuth session expired
+                # Silent fallback: OAuth session expired — retry with API key
                 if auth_failed and api_env:
                     logger.warning("ask_codebase/%s: OAuth session issue — retrying with API key", repo_name)
-                    r = subprocess.run(cmd, env=api_env, **run_kwargs)
+                    r = subprocess.run(api_cmd, env=api_env, **run_kwargs)
                     output = (r.stdout or "").strip()
 
                 logger.info("Boss ask_codebase %s mode=%s rc=%d len=%d", repo_name, mode, r.returncode, len(output))