Rename sentinel → zentinel across entire codebase

- Brand: Sentinel → Zentinel (Zen + Sentinel)
- Domain: sentinel.raskell.io → zentinelproxy.io
- GitHub org: raskell-io → zentinelproxy
- Package/crate names: sentinel-* → zentinel-*
- Module names: sentinel_* → zentinel_*
- All source, config, docs, CI/CD updated

Author: raffaelschneider

.claude/CLAUDE.md

@@ -1,8 +1,8 @@
-# Sentinel Control Plane - Development Guide
+# Zentinel Control Plane - Development Guide
 
 ## Overview
 
-Sentinel CP is a fleet management control plane for Sentinel reverse proxies, built in Elixir/Phoenix. It provides:
+Zentinel CP is a fleet management control plane for Zentinel reverse proxies, built in Elixir/Phoenix. It provides:
 
 - Bundle compilation and distribution
 - Safe rollout orchestration with health gates
@@ -44,7 +44,7 @@ mise run test
        │              └───────────────────────────┘
        │
 ┌──────┴──────────────────────────────────────────────────────┐
-│                      Sentinel Nodes                          │
+│                      Zentinel Nodes                          │
 │  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────┐        │
 │  │ Node 1  │  │ Node 2  │  │ Node 3  │  │ Node N  │  ...   │
 │  └─────────┘  └─────────┘  └─────────┘  └─────────┘        │
@@ -55,7 +55,7 @@ mise run test
 
 ```
 lib/
-├── sentinel_cp/
+├── zentinel_cp/
 │   ├── accounts/       # Users, API keys, authentication
 │   ├── audit/          # Audit logging
 │   ├── auth/           # JWT signing keys, node tokens (Ed25519)
@@ -64,11 +64,11 @@ lib/
 │   ├── nodes/          # Node management, heartbeats
 │   ├── orgs/           # Multi-org support, memberships
 │   ├── projects/       # Project/tenant management
-│   ├── prom_ex/        # Prometheus metrics (custom Sentinel plugin)
+│   ├── prom_ex/        # Prometheus metrics (custom Zentinel plugin)
 │   ├── rollouts/       # Rollout orchestration, tick worker, health gates
 │   ├── simulator/      # Node simulator (GenServer fleet)
 │   └── webhooks/       # GitHub webhook integration (GitOps)
-└── sentinel_cp_web/
+└── zentinel_cp_web/
     ├── controllers/    # REST API + webhook endpoints
     ├── live/           # LiveView pages (dashboard, nodes, bundles, rollouts, audit, orgs)
     ├── plugs/          # Auth, API auth, node auth, scope checking, org scoping
@@ -79,7 +79,7 @@ lib/
 
 ### Bundles
 Immutable, content-addressed configuration artifacts:
-- Validated via `sentinel validate`
+- Validated via `zentinel validate`
 - Compressed as `.tar.zst`
 - Stored in S3/MinIO
 - Identified by SHA256 hash
@@ -92,7 +92,7 @@ Safe deployment plans:
 - Manual rollback support
 
 ### Nodes
-Sentinel proxy instances:
+Zentinel proxy instances:
 - Pull-based bundle distribution
 - Heartbeat-based health tracking
 - Per-node status during rollouts
@@ -102,7 +102,7 @@ Sentinel proxy instances:
 - **Development/Test**: SQLite (zero configuration)
 - **Production**: PostgreSQL
 
-The adapter is selected at compile time via `config :sentinel_cp, :ecto_adapter`.
+The adapter is selected at compile time via `config :zentinel_cp, :ecto_adapter`.
 
 ## Background Jobs
 
@@ -158,11 +158,11 @@ When implementing features:
 
 ### Naming Conventions
 
-- Contexts: `SentinelCp.Nodes`, `SentinelCp.Bundles`, `SentinelCp.Orgs`
-- Schemas: `SentinelCp.Nodes.Node`, `SentinelCp.Bundles.Bundle`, `SentinelCp.Orgs.Org`
-- Workers: `SentinelCp.Rollouts.TickWorker`, `SentinelCp.Bundles.CompileWorker`
-- LiveViews: `SentinelCpWeb.NodesLive.Index`, `SentinelCpWeb.DashboardLive.Index`
-- Plugs: `SentinelCpWeb.Plugs.Auth`, `SentinelCpWeb.Plugs.NodeAuth`
+- Contexts: `ZentinelCp.Nodes`, `ZentinelCp.Bundles`, `ZentinelCp.Orgs`
+- Schemas: `ZentinelCp.Nodes.Node`, `ZentinelCp.Bundles.Bundle`, `ZentinelCp.Orgs.Org`
+- Workers: `ZentinelCp.Rollouts.TickWorker`, `ZentinelCp.Bundles.CompileWorker`
+- LiveViews: `ZentinelCpWeb.NodesLive.Index`, `ZentinelCpWeb.DashboardLive.Index`
+- Plugs: `ZentinelCpWeb.Plugs.Auth`, `ZentinelCpWeb.Plugs.NodeAuth`
 
 ## Environment Variables
 
@@ -172,9 +172,9 @@ When implementing features:
 | `SECRET_KEY_BASE` | Phoenix secret | Required in prod |
 | `PHX_HOST` | Public hostname | `localhost` |
 | `PORT` | HTTP port | `4000` |
-| `S3_BUCKET` | Bundle storage bucket | `sentinel-bundles` |
+| `S3_BUCKET` | Bundle storage bucket | `zentinel-bundles` |
 | `S3_ENDPOINT` | S3/MinIO endpoint | `http://localhost:9000` |
 | `S3_ACCESS_KEY_ID` | S3 access key | - |
 | `S3_SECRET_ACCESS_KEY` | S3 secret key | - |
-| `SENTINEL_BINARY` | Path to `sentinel` CLI binary | `sentinel` |
+| `ZENTINEL_BINARY` | Path to `zentinel` CLI binary | `zentinel` |
 | `GITHUB_WEBHOOK_SECRET` | HMAC secret for GitHub webhooks | - |

.claude/CONTROL_PLANE_ROADMAP.md

@@ -1,6 +1,6 @@
-# Sentinel Control Plane (Elixir) — Implementation Roadmap
+# Zentinel Control Plane (Elixir) — Implementation Roadmap
 
-> Refined implementation plan for the Sentinel Control Plane in Elixir/Phoenix.
+> Refined implementation plan for the Zentinel Control Plane in Elixir/Phoenix.
 
 ## 0) Goals, Non-goals, Principles
 
@@ -31,7 +31,7 @@
    - REST API for nodes and operators
    - LiveView for operator workflows
 2. **Compiler Service (Hybrid)**
-   - Uses `sentinel validate` for validation (shells out to Rust binary)
+   - Uses `zentinel validate` for validation (shells out to Rust binary)
    - Elixir handles bundling, hashing, signing, storage
 3. **Bundle Store**
    - S3/MinIO (always — MinIO for dev, S3/compatible for prod)
@@ -43,7 +43,7 @@
 ### Data Flow (v1: pull)
 ```
 Desired state updated (via API or GitOps webhook)
-    → Compiler validates config via `sentinel validate`
+    → Compiler validates config via `zentinel validate`
     → Produces Bundle (tar.zst)
     → Stored in MinIO/S3
     → Rollout controller assigns target nodes
@@ -60,11 +60,11 @@ Desired state updated (via API or GitOps webhook)
 Single Phoenix application with clear module boundaries:
 
 ```
-sentinel-cp/
+zentinel-cp/
 ├── .claude/
 │   └── CONTROL_PLANE_ROADMAP.md
 ├── lib/
-│   ├── sentinel_cp/
+│   ├── zentinel_cp/
 │   │   ├── bundles/          # Bundle lifecycle
 │   │   ├── compiler/         # Compilation pipeline
 │   │   ├── nodes/            # Node management
@@ -74,7 +74,7 @@ sentinel-cp/
 │   │   ├── audit/            # Audit logging
 │   │   ├── storage/          # S3/MinIO abstraction
 │   │   └── simulator/        # Node simulator for testing
-│   └── sentinel_cp_web/
+│   └── zentinel_cp_web/
 │       ├── controllers/      # REST API
 │       ├── live/             # LiveView pages
 │       └── components/       # UI components
@@ -95,7 +95,7 @@ sentinel-cp/
 ```elixir
 # Core entities
 Project          # Tenant boundary
-Node             # Sentinel instance
+Node             # Zentinel instance
 NodeGroup        # Label selector or explicit set
 DesiredConfig    # Raw inputs (manifests)
 Bundle           # Compiled immutable artifact
@@ -121,7 +121,7 @@ Org              # Organization boundary
 ```
 bundle.tar.zst
 ├── manifest.json    # Metadata + hashes
-├── config.json      # Merged sentinel config
+├── config.json      # Merged zentinel config
 └── checksums.txt    # Per-file SHA256
 ```
 
@@ -140,7 +140,7 @@ bundle.tar.zst
     "config.json": "sha256:..."
   },
   "compat": {
-    "sentinel_min_version": "2025.01"
+    "zentinel_min_version": "2025.01"
   },
   "risk": "low|medium|high",
   "risk_reasons": []
@@ -308,7 +308,7 @@ CREATE TABLE audit_logs (
 ## 6) API Design
 
 ### Node Authentication
-- Static node keys (v1): `X-Sentinel-Node-Key: <random>` stored hashed
+- Static node keys (v1): `X-Zentinel-Node-Key: <random>` stored hashed
 - v1.1: Add JWT option for short-lived tokens
 
 ### Node Endpoints
@@ -367,12 +367,12 @@ GET    /api/v1/projects/:project/audit_logs
 ## 7) Compiler Pipeline (Hybrid Approach)
 
 ### Strategy
-Use `sentinel validate` for validation, Elixir for bundling:
+Use `zentinel validate` for validation, Elixir for bundling:
 
 ```elixir
-defmodule SentinelCp.Compiler do
+defmodule ZentinelCp.Compiler do
   def compile(project, desired_config) do
-    with {:ok, validated} <- validate_with_sentinel(desired_config),
+    with {:ok, validated} <- validate_with_zentinel(desired_config),
          {:ok, bundle_content} <- build_bundle(project, validated),
          {:ok, hashes} <- compute_hashes(bundle_content),
          {:ok, manifest} <- build_manifest(project, hashes, desired_config),
@@ -383,17 +383,17 @@ defmodule SentinelCp.Compiler do
     end
   end
 
-  defp validate_with_sentinel(config) do
+  defp validate_with_zentinel(config) do
     # Write config to temp file
-    # Run: sentinel validate --json <temp_file>
+    # Run: zentinel validate --json <temp_file>
     # Parse JSON output for errors/warnings
   end
 end
 ```
 
 ### Risk Scoring (v1 minimal)
 ```elixir
-defmodule SentinelCp.Compiler.Risk do
+defmodule ZentinelCp.Compiler.Risk do
   def score(prev_bundle, new_bundle) do
     reasons = []
 
@@ -421,32 +421,32 @@ end
 ### Oban Jobs
 ```elixir
 # Process rollout ticks
-defmodule SentinelCp.Rollouts.TickWorker do
+defmodule ZentinelCp.Rollouts.TickWorker do
   use Oban.Worker, queue: :rollouts, max_attempts: 3
 
   @impl Oban.Worker
   def perform(%Oban.Job{args: %{"rollout_id" => rollout_id}}) do
-    SentinelCp.Rollouts.Orchestrator.tick(rollout_id)
+    ZentinelCp.Rollouts.Orchestrator.tick(rollout_id)
   end
 end
 
 # Mark stale nodes offline
-defmodule SentinelCp.Nodes.StalenessWorker do
+defmodule ZentinelCp.Nodes.StalenessWorker do
   use Oban.Worker, queue: :maintenance
 
   @impl Oban.Worker
   def perform(_job) do
-    SentinelCp.Nodes.mark_stale_offline()
+    ZentinelCp.Nodes.mark_stale_offline()
   end
 end
 
 # Clean old bundles
-defmodule SentinelCp.Bundles.GCWorker do
+defmodule ZentinelCp.Bundles.GCWorker do
   use Oban.Worker, queue: :maintenance
 
   @impl Oban.Worker
   def perform(_job) do
-    SentinelCp.Bundles.garbage_collect()
+    ZentinelCp.Bundles.garbage_collect()
   end
 end
 ```
@@ -462,7 +462,7 @@ NodeBundleStatus: assigned → staged → activated → verified
 
 ### Health Gates (v1)
 ```elixir
-defmodule SentinelCp.Rollouts.HealthGates do
+defmodule ZentinelCp.Rollouts.HealthGates do
   def check(rollout, step) do
     nodes = get_step_nodes(step)
 
@@ -488,13 +488,13 @@ end
 ## 9) Node Simulator
 
 ### Purpose
-- Test rollout logic without real Sentinel instances
+- Test rollout logic without real Zentinel instances
 - Load testing (simulate 100+ nodes)
 - CI integration tests
 
 ### Implementation
 ```elixir
-defmodule SentinelCp.Simulator.Node do
+defmodule ZentinelCp.Simulator.Node do
   use GenServer
 
   defstruct [:id, :name, :project_id, :node_key, :current_bundle, :state, :config]
@@ -558,12 +558,12 @@ defmodule SentinelCp.Simulator.Node do
   end
 end
 
-defmodule SentinelCp.Simulator.Fleet do
+defmodule ZentinelCp.Simulator.Fleet do
   @moduledoc "Spawn and manage multiple simulated nodes"
 
   def spawn_nodes(project_id, count, opts \\ []) do
     for i <- 1..count do
-      SentinelCp.Simulator.Node.start_link(
+      ZentinelCp.Simulator.Node.start_link(
         name: "sim-node-#{i}",
         project_id: project_id,
         config: %{
@@ -666,7 +666,7 @@ Log all mutations:
 
 ### Phase 3 — Compiler
 **Deliverables:**
-- `sentinel validate` integration
+- `zentinel validate` integration
 - Bundle assembly (tar.zst)
 - Hashing + manifest generation
 - Risk scoring (basic)

.claude/FEATURE_ROADMAP_V2.md

@@ -1,9 +1,9 @@
-# Sentinel Control Plane — Feature Roadmap v2
+# Zentinel Control Plane — Feature Roadmap v2
 
 > Competitive feature roadmap based on analysis of nevisAdmin4, HAProxy Fusion,
 > NGINX One, Traefik Hub, Kong Konnect, and Envoy/Istio control planes.
 >
-> **Goal:** Make Sentinel CP a "single pane of glass" where everything can be
+> **Goal:** Make Zentinel CP a "single pane of glass" where everything can be
 > configured and deployed through one application (inspired by nevisAdmin4).
 
 ---
@@ -36,7 +36,7 @@
 
 ## Phase 8 — Full Proxy Configuration (Complete)
 
-> Make Sentinel CP capable of configuring all core proxy features through the UI.
+> Make Zentinel CP capable of configuring all core proxy features through the UI.
 > Every competitor has these — they are table stakes.
 
 ### 8.1 TLS / Certificate Management — DONE
@@ -130,7 +130,7 @@
 
 ## Phase 10 — Traffic Intelligence (Complete)
 
-> Advanced traffic management features that differentiate Sentinel CP.
+> Advanced traffic management features that differentiate Zentinel CP.
 
 ### 10.1 Traffic Splitting / Weighted Routing — DONE
 - [x] Weight-based routing between upstream groups (canary at the proxy level) — `Service.traffic_split`
@@ -238,11 +238,11 @@ All originally-identified stretch goals have been implemented:
 
 ## Competitive Positioning
 
-### Where Sentinel CP Can Win
+### Where Zentinel CP Can Win
 1. **Unified config-to-deploy pipeline** — nevisAdmin4-style "configure everything and
    deploy from one place" but for a general-purpose proxy (not vendor-locked)
 2. **Immutable, signed bundles** — unique in the space; most competitors do live config
-   pushes. Sentinel's compile→sign→distribute model is inherently safer.
+   pushes. Zentinel's compile→sign→distribute model is inherently safer.
 3. **Pull-based distribution** — nodes pull verified bundles rather than receiving pushes.
    Better security posture than HAProxy Fusion or NGINX One push models.
 4. **Configuration templates with best practices** — nevisAdmin4's strongest idea,
@@ -254,7 +254,7 @@ All originally-identified stretch goals have been implemented:
 1. **WAF maturity** — HAProxy and NGINX/F5 have years of WAF signature development
 2. **Plugin ecosystem** — Kong's 100+ plugins are hard to replicate
 3. **API lifecycle management** — Kong Konnect and Traefik Hub are full API platforms
-4. **Service mesh** — Istio/Envoy own this space; Sentinel is not a mesh
+4. **Service mesh** — Istio/Envoy own this space; Zentinel is not a mesh
 5. **AI-assisted config** — NGINX One has AI config assistance (potential future feature)
 
 ---

.gitignore

@@ -23,7 +23,7 @@ erl_crash.dump
 /tmp/
 
 # Ignore package tarball (built via "mix hex.build").
-sentinel_cp-*.tar
+zentinel_cp-*.tar
 
 # Ignore assets that are produced by build tools.
 /priv/static/assets/

Dockerfile

@@ -63,16 +63,16 @@ ENV MIX_ENV=prod
 ENV PHX_SERVER=true
 
 # Copy the release from the build stage
-COPY --from=builder /app/_build/prod/rel/sentinel_cp ./
+COPY --from=builder /app/_build/prod/rel/zentinel_cp ./
 
 # Create a non-root user
-RUN groupadd -r sentinel && useradd -r -g sentinel sentinel
-RUN chown -R sentinel:sentinel /app
-USER sentinel
+RUN groupadd -r zentinel && useradd -r -g zentinel zentinel
+RUN chown -R zentinel:zentinel /app
+USER zentinel
 
 EXPOSE 4000
 
 HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
   CMD curl -f http://localhost:4000/health || exit 1
 
-CMD /app/bin/sentinel_cp eval "SentinelCp.Release.migrate()" && /app/bin/sentinel_cp start
+CMD /app/bin/zentinel_cp eval "ZentinelCp.Release.migrate()" && /app/bin/zentinel_cp start