@misterhuydo/sentinel 1.5.14 → 1.5.15

package/.cairn/.hint-lock

@@ -1 +1 @@
-2026-04-08T14:01:40.656Z
+2026-04-08T14:32:32.252Z

package/.cairn/session.json

@@ -1,6 +1,6 @@
 {
-  "message": "Auto-checkpoint at 2026-04-08T14:04:10.640Z",
-  "checkpoint_at": "2026-04-08T14:04:10.719Z",
+  "message": "Auto-checkpoint at 2026-04-08T14:30:49.032Z",
+  "checkpoint_at": "2026-04-08T14:30:49.109Z",
   "active_files": [
     "J:\\Projects\\Sentinel\\cli\\bin\\sentinel.js",
     "J:\\Projects\\Sentinel\\cli\\lib\\test.js",
@@ -17,7 +17,10 @@
     "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  26 +++-\n cli/.cairn/views/62a614_bundle.js      |   5 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 309 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py",
     "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  27 ++++-\n cli/.cairn/views/62a614_bundle.js      |   5 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 310 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py",
     "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  28 ++++-\n cli/.cairn/views/62a614_bundle.js      |   5 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 311 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py",
-    "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  29 ++++-\n cli/.cairn/views/62a614_bundle.js      |   6 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 313 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py"
+    "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  29 ++++-\n cli/.cairn/views/62a614_bundle.js      |   6 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 313 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py",
+    "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  30 ++++-\n cli/.cairn/views/62a614_bundle.js      |   6 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 314 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py",
+    "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  31 ++++-\n cli/.cairn/views/62a614_bundle.js      |   6 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 315 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py",
+    "[2026-04-08] git-snapshot: .cairn/session.json                    |  29 ++++-\n .claude/settings.local.json            |  47 ++++++-\n cli/.cairn/.hint-lock                  |   2 +-\n cli/.cairn/minify-map.json             |   8 +-\n cli/.cairn/session.json                |  32 ++++-\n cli/.cairn/views/62a614_bundle.js      |   6 +-\n cli/lib/.cairn/minify-map.json         |   6 +\n cli/lib/.cairn/views/fb78ac_upgrade.js |  37 +++++-\n cli/lib/.cairn/views/fc4a1a_add.js     | 215 +++++++++++++++++++++++++--------\n 9 files changed, 316 insertions(+), 66 deletions(-) | status: M ../.cairn/session.json\n M ../.claude/settings.local.json\n M .cairn/.hint-lock\n M .cairn/minify-map.json\n M .cairn/session.json\n M .cairn/views/62a614_bundle.js\n M lib/.cairn/minify-map.json\n M lib/.cairn/views/fb78ac_upgrade.js\n M lib/.cairn/views/fc4a1a_add.js\n?? ../.cairn/.cairn-project\n?? ../.cairn/memory/\n?? ../.cairn/minify-map.json\n?? ../.cairn/views/\n?? .cairn/views/23edf4_sentinel_boss.py\n?? .cairn/views/7802b9_cicd_trigger.py\n?? .cairn/views/ac3df4_repo_task_engine.py\n?? lib/.cairn/views/2a85cc_init.js\n?? lib/.cairn/views/e26996_slack-setup.js\n?? ../scripts/fix_ask_codebase_context.py\n?? ../scripts/fix_ask_codebase_stdin.py\n?? ../scripts/fix_chain_slack.py\n?? ../scripts/fix_fstring.py\n?? ../scripts/fix_knowledge_cache.py\n?? ../scripts/fix_knowledge_cache_staleness.py\n?? ../scripts/fix_merge_confirm.py\n?? ../scripts/fix_permission_messages.py\n?? ../scripts/fix_pr_check_head_detect.py\n?? ../scripts/fix_pr_msg_newlines.py\n?? ../scripts/fix_pr_tracking_boss.py\n?? ../scripts/fix_pr_tracking_db.py\n?? ../scripts/fix_pr_tracking_main.py\n?? ../scripts/fix_project_isolation.py\n?? ../scripts/fix_system_prompt.py\n?? ../scripts/fix_two_bugs.py\n?? ../scripts/patch_chain_release.py"
   ],
   "mtime_snapshot": {
     "J:\\Projects\\Sentinel\\cli\\bin\\sentinel.js": 1774252515044.4768,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.5.14",
+  "version": "1.5.15",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/__init__.py

@@ -1 +1 @@
-__version__ = "1.5.14"
+__version__ = "1.5.15"

package/python/sentinel/config_loader.py

@@ -80,6 +80,7 @@ class SentinelConfig:
     sentinel_dev_repo_path: str = "" # path to Sentinel source repo for Dev Claude
     sentinel_dev_soak_minutes: int = 30  # minutes to monitor after a Patch restart before publishing
     sentinel_dev_auto_publish: bool = False  # if True, auto-publish to npm after clean soak
+    auto_publish: bool = False       # project-level default; repos inherit this if AUTO_PUBLISH not set in their config
 
 
 @dataclass
@@ -108,7 +109,7 @@ class RepoConfig:
     repo_url: str = ""
     local_path: str = ""
     branch: str = "main"
-    auto_publish: bool = False
+    auto_publish: bool | None = None  # None = inherit from SentinelConfig.auto_publish; explicit True/False overrides
     cicd_type: str = ""
     cicd_job_url: str = ""
     cicd_user: str = ""      # Jenkins username for Basic auth (defaults to "sentinel")
@@ -237,6 +238,8 @@ class ConfigLoader:
         c.sentinel_dev_repo_path = d.get("SENTINEL_DEV_REPO_PATH", "")
         c.sentinel_dev_soak_minutes = int(d.get("SENTINEL_DEV_SOAK_MINUTES", 30))
         c.sentinel_dev_auto_publish = d.get("SENTINEL_DEV_AUTO_PUBLISH", "false").lower() == "true"
+        if "AUTO_PUBLISH" in d:
+            c.auto_publish = d["AUTO_PUBLISH"].lower() == "true"
         self.sentinel = c
 
     def _load_log_sources(self):
@@ -286,7 +289,7 @@ class ConfigLoader:
             r.repo_url = d.get("REPO_URL", "")
             r.local_path = str(Path(self.config_dir).parent / "repos" / r.repo_name)
             r.branch = d.get("BRANCH", "main")
-            r.auto_publish = d.get("AUTO_PUBLISH", "false").lower() == "true"
+            r.auto_publish = bool(d["AUTO_PUBLISH"].lower() == "true") if "AUTO_PUBLISH" in d else None
             r.cicd_type = d.get("CICD_TYPE", "")
             r.cicd_job_url = d.get("CICD_JOB_URL", "")
             r.cicd_user = d.get("CICD_USER", "")
@@ -312,3 +315,17 @@ class ConfigLoader:
     def _on_sighup(self, *_):
         logger.info("SIGHUP received — reloading config")
         self.load()
+
+
+def resolve_auto_publish(repo: "RepoConfig", sentinel: "SentinelConfig") -> bool:
+    """
+    Three-level AUTO_PUBLISH resolution:
+      1. Repo-level explicit value (if AUTO_PUBLISH is set in the repo .properties file)
+      2. Project-level default  (AUTO_PUBLISH in sentinel.properties)
+      3. System default: False
+
+    None on repo.auto_publish means "not explicitly set — inherit from project".
+    """
+    if repo.auto_publish is not None:
+        return repo.auto_publish
+    return sentinel.auto_publish

package/python/sentinel/dependency_manager.py

@@ -275,8 +275,8 @@ def plan_cascade(
             {
                 "repo": r.repo_name,
                 "current_version": v,
-                "auto_publish": r.auto_publish,
-                "action": "push to main" if r.auto_publish else "open PR",
+                "auto_publish": bool(r.auto_publish),
+                "action": "push to main" if r.auto_publish else "open PR (AUTO_PUBLISH not set — inherits project default)",
             }
             for r, v in all_dependents
         ],

package/python/sentinel/git_manager.py

@@ -15,7 +15,7 @@ from pathlib import Path
 
 import requests
 
-from .config_loader import RepoConfig, SentinelConfig
+from .config_loader import RepoConfig, SentinelConfig, resolve_auto_publish
 from .log_parser import ErrorEvent
 
 logger = logging.getLogger(__name__)
@@ -258,8 +258,9 @@ def push_dep_update(
     """
     env = _git_env(repo)
     local_path = repo.local_path
+    auto_publish = resolve_auto_publish(repo, cfg)
 
-    if repo.auto_publish:
+    if auto_publish:
         r = _git(["push", "origin", repo.branch], cwd=local_path, env=env)
         if r.returncode != 0:
             logger.warning(
@@ -354,8 +355,9 @@ def publish(
     """
     env = _git_env(repo)
     local_path = repo.local_path
+    auto_publish = resolve_auto_publish(repo, cfg)
 
-    if not repo.auto_publish:
+    if not auto_publish:
         if remote_fix_exists(repo, event.fingerprint, cfg):
             logger.info(
                 "Remote fix branch already exists for %s — skipping duplicate push",
@@ -363,7 +365,7 @@ def publish(
             )
             return "", ""
 
-    if repo.auto_publish:
+    if auto_publish:
         r = _git(["push", "origin", repo.branch], cwd=local_path, env=env)
         if r.returncode != 0:
             logger.error("git push failed:\n%s", r.stderr)

package/python/sentinel/main.py

@@ -21,7 +21,7 @@ from datetime import datetime, timezone
 from pathlib import Path
 
 from .cairn_client import ensure_installed as cairn_installed, index_repo
-from .config_loader import ConfigLoader, SentinelConfig
+from .config_loader import ConfigLoader, SentinelConfig, resolve_auto_publish
 from .fix_engine import generate_fix
 from .git_manager import apply_and_commit, publish, _git_env, MissingToolError, MavenAuthError, poll_open_prs
 from .cicd_trigger import trigger as cicd_trigger
@@ -183,6 +183,8 @@ async def _handle_error(event: ErrorEvent, cfg_loader: ConfigLoader, store: Stat
     if not repo:
         return
 
+    auto_publish = resolve_auto_publish(repo, sentinel)
+
     # ── Dismissed errors — skip silently (human explicitly said so) ───────────
     if store.is_dismissed(event.fingerprint):
         logger.debug("Error %s is dismissed — skipping", event.fingerprint)
@@ -193,8 +195,8 @@ async def _handle_error(event: ErrorEvent, cfg_loader: ConfigLoader, store: Stat
         return
 
     # ── Determine what we can do before alerting ──────────────────────────────
-    cannot_fix = event.is_infra_issue or (event.severity == "CRITICAL" and repo.auto_publish)
-    fix_status = "cannot_fix" if cannot_fix else ("will_fix_pr" if not repo.auto_publish else "attempting")
+    cannot_fix = event.is_infra_issue or (event.severity == "CRITICAL" and auto_publish)
+    fix_status = "cannot_fix" if cannot_fix else ("will_fix_pr" if not auto_publish else "attempting")
 
     stack_lines = getattr(event, "stack_trace", None)
     stack_preview = ""
@@ -227,7 +229,7 @@ async def _handle_error(event: ErrorEvent, cfg_loader: ConfigLoader, store: Stat
         store.record_fix(event.fingerprint, "skipped", repo_name=repo.repo_name)
         return
 
-    if event.severity == "CRITICAL" and repo.auto_publish:
+    if event.severity == "CRITICAL" and auto_publish:
         logger.warning("CRITICAL in auto-publish repo '%s' — alerted, human review needed", repo.repo_name)
         store.record_fix(event.fingerprint, "skipped", repo_name=repo.repo_name)
         return
@@ -303,7 +305,7 @@ async def _handle_error(event: ErrorEvent, cfg_loader: ConfigLoader, store: Stat
     branch, pr_url = publish(event, repo, sentinel, commit_hash)
     store.record_fix(
         event.fingerprint,
-        "applied" if repo.auto_publish else "pending",
+        "applied" if auto_publish else "pending",
         patch_path=str(patch_path),
         commit_hash=commit_hash,
         branch=branch,
@@ -328,11 +330,11 @@ async def _handle_error(event: ErrorEvent, cfg_loader: ConfigLoader, store: Stat
         "commit_hash":  commit_hash,
         "branch":       branch,
         "pr_url":       pr_url,
-        "auto_publish": repo.auto_publish,
+        "auto_publish": auto_publish,
         "files_changed": [],
     })
 
-    if repo.auto_publish:
+    if auto_publish:
         ok = cicd_trigger(repo, store, event.fingerprint)
         if ok and repo.cicd_type.lower() in ("jenkins_release", "jenkins-release"):
             _run_cascade(repo, sentinel, cfg_loader)
@@ -373,6 +375,8 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
         )
         return  # Leave the file so admin can add the header
 
+    auto_publish = resolve_auto_publish(repo, sentinel)
+
     # Post "working on" to channel and capture thread_ts for progress replies
     from .notify import slack_alert as _slack_alert, slack_thread_reply as _slack_reply
     _submitter = getattr(event, "submitter_user_id", "")
@@ -434,7 +438,7 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
         branch, pr_url = publish(event, repo, sentinel, commit_hash)
         store.record_fix(
             event.fingerprint,
-            "applied" if repo.auto_publish else "pending",
+            "applied" if auto_publish else "pending",
             patch_path=str(patch_path),
             commit_hash=commit_hash,
             branch=branch,
@@ -453,7 +457,7 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
             "commit_hash":  commit_hash,
             "branch":       branch,
             "pr_url":       pr_url,
-            "auto_publish": repo.auto_publish,
+            "auto_publish": auto_publish,
             "files_changed": [],
         })
         if pr_url:
@@ -463,7 +467,7 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
                            submitter_user_id=submitter_uid, origin_channel=_origin_channel)
         mark_done(event.issue_file)
 
-        if repo.auto_publish:
+        if auto_publish:
             ok = cicd_trigger(repo, store, event.fingerprint)
             if ok:
                 _progress(f":rocket: Release triggered via {repo.cicd_type}")
@@ -525,7 +529,7 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
         branch, pr_url = publish(event, repo, sentinel, commit_hash)
         store.record_fix(
             event.fingerprint,
-            "applied" if repo.auto_publish else "pending",
+            "applied" if auto_publish else "pending",
             patch_path=str(patch_path), commit_hash=commit_hash,
             branch=branch, pr_url=pr_url, repo_name=repo.repo_name, sentinel_marker=marker,
         )
@@ -535,7 +539,7 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
             "message": event.message, "stack_trace": event.body,
             "repo_name": repo.repo_name, "commit_hash": commit_hash,
             "branch": branch, "pr_url": pr_url,
-            "auto_publish": repo.auto_publish, "files_changed": [],
+            "auto_publish": auto_publish, "files_changed": [],
         })
         if pr_url:
             _progress(f":arrow_right: <{pr_url}|PR opened> — awaiting review")
@@ -543,7 +547,7 @@ async def _handle_issue(event: IssueEvent, cfg_loader: ConfigLoader, store: Stat
                            repo_name=repo.repo_name, branch=branch, pr_url=pr_url,
                            submitter_user_id=submitter_uid, origin_channel=_origin_channel)
         mark_done(event.issue_file)
-        if repo.auto_publish:
+        if auto_publish:
             ok = cicd_trigger(repo, store, event.fingerprint)
             if ok:
                 _progress(f":rocket: Release triggered via {repo.cicd_type}")

package/python/sentinel/repo_task_engine.py

@@ -28,7 +28,7 @@ from dataclasses import dataclass, field
 from datetime import datetime, timezone
 from pathlib import Path
 
-from .config_loader import RepoConfig, SentinelConfig
+from .config_loader import RepoConfig, SentinelConfig, resolve_auto_publish
 from .fix_engine import _claude_cmd, _run_claude_attempt, _is_auth_error, _progress_from_line
 from .git_manager import _git_env
 
@@ -276,11 +276,12 @@ def run_repo_task(
             return "skip", "Claude completed but made no changes to the codebase."
 
     commit_hash = after_hash
+    auto_publish = resolve_auto_publish(repo, cfg)
 
     if on_progress:
         on_progress(f":arrow_up: Pushing to `{repo.repo_name}`...")
 
-    if repo.auto_publish:
+    if auto_publish:
         r = subprocess.run(
             ["git", "push", "origin", repo.branch],
             cwd=local_path, capture_output=True, text=True, env=env, timeout=60,