Sentinel v0.8.1
Bug fixes
- daemon: stop Claude Code prompting for the retrieve MCP tool on every call
- Add a PreToolUse allow-hook for mcp__sentinel__retrieve so Claude Code auto-approves it without a prompt, in the main thread and subagents alike — working around Claude Code bug #28580, where persisted permissions.allow rules are ignored for lazily-discovered HTTP MCP tools
- Mark the retrieve tool alwaysLoad (tool _meta + server config) so it loads eagerly instead of deferring via ToolSearch, which removes the bug's trigger
- Annotate the retrieve tool readOnlyHint:true, since it only reads back content Sentinel already elided
- Self-heal the hook on daemon startup and upgrade pre-alwaysLoad installs in place so existing users recover on next launch with no action, and remove the hook when the last retrieve install is uninstalled
- Add ensureClaudeSettingsPreToolUseHook / removeClaudeSettingsPreToolUseHook writers that surgically touch only Sentinel's own hook entry and preserve all other settings
Full changelog: v0.8.0...v0.8.1