@misterhuydo/sentinel 1.6.6 → 1.6.8

package/.cairn/.hint-lock

@@ -1 +1 @@
-2026-04-24T13:18:30.501Z
+2026-04-24T14:02:31.712Z

package/.cairn/session.json

@@ -1,6 +1,6 @@
 {
-  "message": "Auto-checkpoint at 2026-04-24T13:18:47.525Z",
-  "checkpoint_at": "2026-04-24T13:18:47.527Z",
+  "message": "Auto-checkpoint at 2026-04-24T13:58:01.367Z",
+  "checkpoint_at": "2026-04-24T13:58:01.369Z",
   "active_files": [
     "J:\\Projects\\Sentinel\\cli\\bin\\sentinel.js",
     "J:\\Projects\\Sentinel\\cli\\lib\\test.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@misterhuydo/sentinel",
-  "version": "1.6.6",
+  "version": "1.6.8",
   "description": "Sentinel — Autonomous DevOps Agent installer and manager",
   "bin": {
     "sentinel": "./bin/sentinel.js"

package/python/sentinel/__init__.py

@@ -1 +1 @@
-__version__ = "1.6.6"
+__version__ = "1.6.8"

package/python/sentinel/cicd_trigger.py

@@ -40,7 +40,12 @@ def trigger(repo: RepoConfig, store: StateStore, fingerprint: str, wait: bool =
 
 def _trigger_jenkins(repo: RepoConfig) -> bool:
     url = f"{repo.cicd_job_url.rstrip('/')}/build"
-    resp = requests.post(url, auth=("sentinel", repo.cicd_token), timeout=15)
+    # Use repo's CICD_USER if set; fall back to literal "sentinel". Hardcoding
+    # the user (as this previously did) caused 401s for every repo whose Jenkins
+    # API token was issued under a non-"sentinel" username.
+    resp = requests.post(
+        url, auth=(repo.cicd_user or "sentinel", repo.cicd_token), timeout=15,
+    )
     success = resp.status_code in (200, 201, 204)
     if success:
         logger.info("Jenkins build triggered: %s", repo.cicd_job_url)

package/python/sentinel/git_manager.py

@@ -10,6 +10,7 @@ from __future__ import annotations
 import logging
 import os
 import re
+import shutil
 import subprocess
 from pathlib import Path
 

package/python/sentinel/sentinel_boss.py

@@ -4910,15 +4910,35 @@ async def _run_tool(name: str, inputs: dict, cfg_loader, store, slack_client=Non
             return json.dumps({"status": "triggered" if success else "failed", "repo": source_repo, "job_url": repo.cicd_job_url})
 
         if operation in ("release", "release_and_cascade"):
-            success = _trigger_jenkins_release(repo)
-            logger.info("Boss manage_release: release triggered for %s by %s (success=%s)", source_repo, user_id, success)
+            from .config_loader import resolve_auto_commit as _resolve_auto_commit
+            # Will we cascade after the release? If yes, BLOCK on the Jenkins
+            # build so the artifact is actually in Nexus before the cascade
+            # tries to bump dependents. Without this, mvn hits a 404 and
+            # caches a negative result that blocks all retries for ~24h.
+            do_cascade = (operation == "release_and_cascade") or _resolve_auto_commit(repo, cfg_loader.sentinel)
+            wait_for_jenkins = do_cascade
+            if wait_for_jenkins and channel:
+                from .notify import slack_alert as _slack_alert
+                _slack_alert(
+                    cfg_loader.sentinel.slack_bot_token, channel,
+                    f":hourglass_flowing_sand: <@{user_id}> Jenkins release triggered for "
+                    f"`{source_repo}` — waiting for build to finish before cascading "
+                    f"(up to 15 min)…",
+                )
+            success = _trigger_jenkins_release(repo, wait=wait_for_jenkins)
+            logger.info(
+                "Boss manage_release: release for %s by %s (wait=%s, success=%s)",
+                source_repo, user_id, wait_for_jenkins, success,
+            )
             if not success:
-                return json.dumps({"status": "failed", "repo": source_repo, "error": "Jenkins release trigger failed — check logs"})
+                # When wait=True, success=False means trigger or build failed/timed out.
+                err = (
+                    "Jenkins build did not finish successfully (failed or timed out >15 min) — "
+                    "cascade skipped. Check Jenkins console."
+                ) if wait_for_jenkins else "Jenkins release trigger failed — check logs"
+                return json.dumps({"status": "failed", "repo": source_repo, "error": err})
             store.clear_pending_releases(source_repo)
 
-            # Cascade immediately if release_and_cascade, or if AUTO_COMMIT=true
-            from .config_loader import resolve_auto_commit as _resolve_auto_commit
-            do_cascade = (operation == "release_and_cascade") or _resolve_auto_commit(repo, cfg_loader.sentinel)
             if do_cascade:
                 artifact_id = get_artifact_id(repo.local_path)
                 new_version = get_release_version(repo.local_path)