@sweny-ai/core 0.1.107 → 0.1.108

package/dist/mcp-catalog.js

@@ -47,7 +47,10 @@ const gitlab = {
         if (!creds.GITLAB_TOKEN)
             return undefined;
         const env = { GITLAB_PERSONAL_ACCESS_TOKEN: creds.GITLAB_TOKEN };
-        const baseUrl = creds.GITLAB_URL || "https://gitlab.com";
+        // Normalize trailing slash(es) so a pasted "https://gl.corp.com/" (or even
+        // the canonical "https://gitlab.com/") does not produce a double-slash
+        // "//api/v4". The /+$ also collapses accidental multi-trailing-slash input.
+        const baseUrl = (creds.GITLAB_URL || "https://gitlab.com").replace(/\/+$/, "");
         if (baseUrl !== "https://gitlab.com")
             env.GITLAB_API_URL = `${baseUrl}/api/v4`;
         return {

package/dist/source-resolver.d.ts

@@ -7,6 +7,13 @@
  * or `node:crypto` into bundlers that target the browser.
  */
 import type { ResolvedSource, Source, SourceResolutionContext, SourceResolutionMap } from "./sources.js";
+/**
+ * Error-message prefix used when a `url:` source cannot be fetched in
+ * `--offline` mode. Exported so callers that intentionally degrade to a default
+ * on this one failure (e.g. `templates.ts`) can detect it without coupling to
+ * the full message text.
+ */
+export declare const SOURCE_OFFLINE_REQUIRES_FETCH = "SOURCE_OFFLINE_REQUIRES_FETCH";
 /**
  * Produce a stable 16-hex-char hash of `content` for use as a cache key /
  * change-detection ID.

package/dist/source-resolver.js

@@ -12,6 +12,13 @@ import * as path from "node:path";
 import { normalizeSource } from "./sources.js";
 /** Schemes a `url:` source is allowed to use. Everything else is rejected. */
 const ALLOWED_URL_SCHEMES = new Set(["http:", "https:"]);
+/**
+ * Error-message prefix used when a `url:` source cannot be fetched in
+ * `--offline` mode. Exported so callers that intentionally degrade to a default
+ * on this one failure (e.g. `templates.ts`) can detect it without coupling to
+ * the full message text.
+ */
+export const SOURCE_OFFLINE_REQUIRES_FETCH = "SOURCE_OFFLINE_REQUIRES_FETCH";
 /** Default DNS resolver used when the context does not inject one. */
 const defaultDnsLookup = async (hostname) => {
     const records = await dns.lookup(hostname, { all: true });
@@ -80,7 +87,7 @@ export async function resolveSource(source, fieldPath, ctx) {
     }
     if (kind === "url") {
         if (ctx.offline) {
-            throw new Error(`SOURCE_OFFLINE_REQUIRES_FETCH: cannot fetch ${value} in --offline mode (referenced by ${fieldPath}).`);
+            throw new Error(`${SOURCE_OFFLINE_REQUIRES_FETCH}: cannot fetch ${value} in --offline mode (referenced by ${fieldPath}).`);
         }
         // Validate type field on tagged URL forms — v1 only accepts "fetch" (the default).
         if (typeof source === "object" && "url" in source && source.type && source.type !== "fetch") {

package/dist/templates.d.ts

@@ -34,7 +34,12 @@ export interface SourceLoadOptions {
 }
 /**
  * Load a template from a file path or URL.
- * Returns the default if source is empty or loading fails.
+ *
+ * Returns the default only when the source is empty/unset, or when a URL source
+ * is intentionally skipped under `--offline`. A CONFIGURED source that fails to
+ * resolve (404, 403, SSRF block, read error) now THROWS instead of silently
+ * degrading to the built-in default — a typo'd or unauthorized template URL is
+ * a misconfiguration, not a no-op. This matches the executor's Source handling.
  *
  * Accepts the legacy `cwd?: string` signature for backward compat.
  */
@@ -52,6 +57,9 @@ export declare function resolveTemplates(config: {
  * Returns { resolved, urls } — resolved text for all sources; urls is kept
  * for API compat but will be empty since URLs now resolve eagerly.
  *
+ * A configured source that fails to resolve THROWS (matching the executor and
+ * `loadTemplate`); only the intentional `--offline` URL skip is swallowed.
+ *
  * Accepts the legacy `cwd?: string` signature for backward compat.
  */
 export declare function loadAdditionalContext(sources: string[], options?: SourceLoadOptions | string): Promise<{

package/dist/templates.js

@@ -13,7 +13,7 @@
  */
 import * as path from "node:path";
 import { classifySource } from "./sources.js";
-import { resolveSource } from "./source-resolver.js";
+import { resolveSource, SOURCE_OFFLINE_REQUIRES_FETCH } from "./source-resolver.js";
 import { consoleLogger } from "./types.js";
 export const DEFAULT_ISSUE_TEMPLATE = `## Summary
 <!-- One-line description of the issue -->
@@ -61,9 +61,26 @@ function buildCtx(options) {
         logger: consoleLogger,
     };
 }
+/**
+ * True when a resolution error is the intentional `--offline` skip of a URL
+ * source. Offline mode is the one failure we deliberately swallow into the
+ * fallback: the operator explicitly asked to skip URL Sources. Every other
+ * failure (404/403/SSRF block/read error/unreachable) is a real
+ * misconfiguration and must surface, matching the executor's per-node Source
+ * resolution which hard-throws on all of these.
+ */
+function isOfflineSkip(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return msg.startsWith(SOURCE_OFFLINE_REQUIRES_FETCH);
+}
 /**
  * Load a template from a file path or URL.
- * Returns the default if source is empty or loading fails.
+ *
+ * Returns the default only when the source is empty/unset, or when a URL source
+ * is intentionally skipped under `--offline`. A CONFIGURED source that fails to
+ * resolve (404, 403, SSRF block, read error) now THROWS instead of silently
+ * degrading to the built-in default — a typo'd or unauthorized template URL is
+ * a misconfiguration, not a no-op. This matches the executor's Source handling.
  *
  * Accepts the legacy `cwd?: string` signature for backward compat.
  */
@@ -76,9 +93,12 @@ export async function loadTemplate(source, fallback, options = {}) {
         return resolved.content;
     }
     catch (err) {
+        if (isOfflineSkip(err)) {
+            console.warn(`[templates] Skipping URL template in --offline mode, using default.`);
+            return fallback;
+        }
         const msg = err instanceof Error ? err.message : String(err);
-        console.warn(`[templates] Failed to load template: ${msg}, using default`);
-        return fallback;
+        throw new Error(`Failed to load configured template "${source.trim()}": ${msg}`);
     }
 }
 /**
@@ -98,6 +118,9 @@ export async function resolveTemplates(config, options = {}) {
  * Returns { resolved, urls } — resolved text for all sources; urls is kept
  * for API compat but will be empty since URLs now resolve eagerly.
  *
+ * A configured source that fails to resolve THROWS (matching the executor and
+ * `loadTemplate`); only the intentional `--offline` URL skip is swallowed.
+ *
  * Accepts the legacy `cwd?: string` signature for backward compat.
  */
 export async function loadAdditionalContext(sources, options = {}) {
@@ -123,8 +146,15 @@ export async function loadAdditionalContext(sources, options = {}) {
                 }
             }
             catch (err) {
+                // Offline skip of a URL source is intentional; everything else (404,
+                // 403, SSRF block, read error) is a misconfiguration and must surface
+                // rather than silently dropping the configured context document.
+                if (isOfflineSkip(err)) {
+                    console.warn(`[templates] Skipping URL context source "${trimmed}" in --offline mode.`);
+                    continue;
+                }
                 const msg = err instanceof Error ? err.message : String(err);
-                console.warn(`[templates] Failed to load context source: ${msg}`);
+                throw new Error(`Failed to load configured context source "${trimmed}": ${msg}`);
             }
         }
     }

package/package.json

@@ -1,12 +1,15 @@
 {
   "name": "@sweny-ai/core",
-  "version": "0.1.107",
+  "version": "0.1.108",
   "type": "module",
   "bin": {
     "sweny": "./dist/cli/main.js"
   },
   "description": "Skill library, DAG workflow orchestration, and E2E browser testing powered by Claude",
   "license": "MIT",
+  "engines": {
+    "node": ">=20"
+  },
   "exports": {
     ".": "./dist/index.js",
     "./browser": "./dist/browser.js",
@@ -15,7 +18,8 @@
     "./workflows": "./dist/workflows/index.js",
     "./testing": "./dist/testing.js",
     "./schema": "./dist/schema.js",
-    "./new": "./dist/cli/new.js"
+    "./new": "./dist/cli/new.js",
+    "./package.json": "./package.json"
   },
   "typesVersions": {
     "*": {