@sweny-ai/core 0.1.54 → 0.1.56

package/dist/__tests__/executor.test.js

@@ -89,8 +89,9 @@ describe("executor", () => {
         expect(results.get("c")?.status).toBe("success");
         // Verify file was written
         expect(existsSync(path.join(outputDir, "out.json"))).toBe(true);
-        // Events
+        // Events — workflow:start fires first, then sources:resolved (per spec)
         expect(events[0]).toEqual({ type: "workflow:start", workflow: "linear" });
+        expect(events[1].type).toBe("sources:resolved");
         expect(events.filter((e) => e.type === "node:enter")).toHaveLength(3);
         expect(events[events.length - 1].type).toBe("workflow:end");
     });

package/dist/__tests__/integration/sources.integration.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/integration/sources.integration.test.js

@@ -0,0 +1,123 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import * as path from "node:path";
+import { randomBytes } from "node:crypto";
+import { execute } from "../../executor.js";
+import { MockClaude } from "../../testing.js";
+import { createSkillMap } from "../../skills/index.js";
+function freshDir(name) {
+    const dir = path.join(tmpdir(), `sweny-sources-int-${name}-${Date.now()}-${randomBytes(4).toString("hex")}`);
+    rmSync(dir, { recursive: true, force: true });
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+describe("integration: Source resolution across a workflow", () => {
+    beforeEach(() => {
+        vi.restoreAllMocks();
+    });
+    it("resolves inline, file, and url instructions across three nodes", async () => {
+        const dir = freshDir("three-kinds");
+        writeFileSync(path.join(dir, "b.md"), "Step B instruction from file.");
+        vi.spyOn(globalThis, "fetch").mockImplementation(async () => new Response("Step C instruction from URL.", { status: 200 }));
+        const workflow = {
+            id: "three-kinds",
+            name: "Three Kinds",
+            description: "",
+            entry: "a",
+            nodes: {
+                a: { name: "A", instruction: "Step A inline", skills: [] },
+                b: { name: "B", instruction: { file: path.join(dir, "b.md") }, skills: [] },
+                c: { name: "C", instruction: { url: "https://example.com/c.md" }, skills: [] },
+            },
+            edges: [
+                { from: "a", to: "b" },
+                { from: "b", to: "c" },
+            ],
+        };
+        const skills = createSkillMap([]);
+        const result = await execute(workflow, {}, {
+            skills,
+            claude: new MockClaude({
+                responses: {
+                    a: { data: {} },
+                    b: { data: {} },
+                    c: { data: {} },
+                },
+            }),
+            cwd: dir,
+        });
+        // All three nodes should have executed
+        expect(result.results.size).toBe(3);
+        // Trace should have all sources
+        expect(result.trace.sources["nodes.a.instruction"].kind).toBe("inline");
+        expect(result.trace.sources["nodes.a.instruction"].content).toBe("Step A inline");
+        expect(result.trace.sources["nodes.b.instruction"].kind).toBe("file");
+        expect(result.trace.sources["nodes.b.instruction"].content).toBe("Step B instruction from file.");
+        expect(result.trace.sources["nodes.c.instruction"].kind).toBe("url");
+        expect(result.trace.sources["nodes.c.instruction"].content).toBe("Step C instruction from URL.");
+        expect(result.trace.sources["nodes.c.instruction"].fetchedAt).toBeDefined();
+        // Every source has a hash
+        for (const rs of Object.values(result.trace.sources)) {
+            expect(rs.hash).toMatch(/^[0-9a-f]{16}$/);
+        }
+    });
+    it("fails fast with SOURCE_OFFLINE_REQUIRES_FETCH when offline and URL present", async () => {
+        const workflow = {
+            id: "offline-fail",
+            name: "Offline fail",
+            description: "",
+            entry: "a",
+            nodes: {
+                a: { name: "A", instruction: { url: "https://example.com/x" }, skills: [] },
+            },
+            edges: [],
+        };
+        await expect(execute(workflow, {}, {
+            skills: createSkillMap([]),
+            claude: new MockClaude({ responses: { a: { data: {} } } }),
+            offline: true,
+        })).rejects.toThrow(/SOURCE_OFFLINE_REQUIRES_FETCH/);
+    });
+    it("fails fast with SOURCE_FILE_NOT_FOUND and includes field path", async () => {
+        const dir = freshDir("missing");
+        const workflow = {
+            id: "file-missing",
+            name: "File missing",
+            description: "",
+            entry: "bad",
+            nodes: {
+                bad: { name: "Bad", instruction: { file: "./does-not-exist.md" }, skills: [] },
+            },
+            edges: [],
+        };
+        await expect(execute(workflow, {}, {
+            skills: createSkillMap([]),
+            claude: new MockClaude({ responses: { bad: { data: {} } } }),
+            cwd: dir,
+        })).rejects.toThrow(/SOURCE_FILE_NOT_FOUND.*nodes\.bad\.instruction/);
+    });
+    it("emits workflow:start before sources:resolved (per spec)", async () => {
+        const events = [];
+        const workflow = {
+            id: "evt-test",
+            name: "Event test",
+            description: "",
+            entry: "only",
+            nodes: { only: { name: "Only", instruction: "Go.", skills: [] } },
+            edges: [],
+        };
+        await execute(workflow, {}, {
+            skills: createSkillMap([]),
+            claude: new MockClaude({ responses: { only: { data: {} } } }),
+            observer: (e) => events.push(e),
+        });
+        const srcEvt = events.find((e) => e.type === "sources:resolved");
+        expect(srcEvt).toBeDefined();
+        expect(srcEvt.sources["nodes.only.instruction"].content).toBe("Go.");
+        // workflow:start should come before sources:resolved (per spec)
+        const startIdx = events.findIndex((e) => e.type === "workflow:start");
+        const srcIdx = events.findIndex((e) => e.type === "sources:resolved");
+        expect(startIdx).toBeLessThan(srcIdx);
+    });
+});

package/dist/__tests__/workflow-yaml.test.js

@@ -70,7 +70,14 @@ describe("loaded workflow objects", () => {
             });
             it("every node has a non-empty instruction", () => {
                 for (const [nodeId, node] of Object.entries(workflow.nodes)) {
-                    expect(node.instruction.length, `node "${nodeId}" has empty instruction`).toBeGreaterThan(0);
+                    const instr = node.instruction;
+                    if (typeof instr === "string") {
+                        expect(instr.length, `node "${nodeId}" has empty instruction`).toBeGreaterThan(0);
+                    }
+                    else {
+                        // Object-form Source — always truthy if it exists
+                        expect(instr, `node "${nodeId}" has falsy instruction`).toBeTruthy();
+                    }
                 }
             });
             it("every node has a name", () => {
@@ -110,11 +117,11 @@ describe("loaded workflow objects", () => {
 });
 // ─── Triage workflow specifics ──────────────────────────────────
 describe("triage workflow specifics", () => {
-    it("has 8 nodes", () => {
-        expect(Object.keys(triageWorkflow.nodes).length).toBe(8);
+    it("has 7 nodes", () => {
+        expect(Object.keys(triageWorkflow.nodes).length).toBe(7);
     });
-    it("starts at prepare", () => {
-        expect(triageWorkflow.entry).toBe("prepare");
+    it("starts at gather", () => {
+        expect(triageWorkflow.entry).toBe("gather");
     });
     it("has conditional edges from investigate", () => {
         const investigateEdges = triageWorkflow.edges.filter((e) => e.from === "investigate");

package/dist/cli/__tests__/report-cloud.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli/__tests__/report-cloud.test.js

@@ -0,0 +1,165 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+describe("reportToCloud", () => {
+    let reportToCloud;
+    const fetchMock = vi.fn();
+    beforeEach(async () => {
+        fetchMock.mockReset();
+        fetchMock.mockResolvedValue(new Response(JSON.stringify({ run_url: "https://cloud.sweny.ai/runs/abc" }), { status: 200 }));
+        vi.spyOn(globalThis, "fetch").mockImplementation(fetchMock);
+        // Dynamic import to handle any module-level side effects
+        const mod = await import("../cloud-report.js");
+        reportToCloud = mod.reportToCloud;
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    function makeConfig(overrides = {}) {
+        return {
+            cloudToken: "",
+            githubToken: "",
+            repository: "acme/widget",
+            codingAgentProvider: "claude",
+            anthropicApiKey: "",
+            claudeOauthToken: "",
+            openaiApiKey: "",
+            geminiApiKey: "",
+            observabilityProvider: "",
+            observabilityCredentials: {},
+            issueTrackerProvider: "",
+            linearApiKey: "",
+            linearTeamId: "",
+            linearBugLabelId: "",
+            linearTriageLabelId: "",
+            linearStateBacklog: "",
+            linearStateInProgress: "",
+            linearStatePeerReview: "",
+            timeRange: "",
+            severityFocus: "",
+            serviceFilter: "",
+            investigationDepth: "",
+            maxInvestigateTurns: 50,
+            maxImplementTurns: 40,
+            baseBranch: "main",
+            prLabels: [],
+            issueLabels: [],
+            dryRun: false,
+            reviewMode: "review",
+            noveltyMode: false,
+            issueOverride: "",
+            additionalInstructions: "",
+            serviceMapPath: "",
+            botToken: "",
+            sourceControlProvider: "",
+            jiraBaseUrl: "",
+            jiraEmail: "",
+            jiraApiToken: "",
+            gitlabToken: "",
+            gitlabProjectId: "",
+            gitlabBaseUrl: "",
+            notificationProvider: "",
+            notificationWebhookUrl: "",
+            sendgridApiKey: "",
+            emailFrom: "",
+            emailTo: "",
+            webhookSigningSecret: "",
+            repositoryOwner: "",
+            json: false,
+            stream: false,
+            bell: false,
+            cacheDir: "",
+            cacheTtl: 0,
+            noCache: false,
+            outputDir: "",
+            mcpServers: {},
+            workspaceTools: [],
+            rules: [],
+            context: [],
+            offline: false,
+            fetchAuth: {},
+            ...overrides,
+        };
+    }
+    function makeResults() {
+        return new Map([
+            [
+                "investigate",
+                {
+                    status: "success",
+                    data: { findings: [{ id: "F1" }], recommendation: "implement" },
+                    toolCalls: [],
+                },
+            ],
+            [
+                "create_pr",
+                {
+                    status: "success",
+                    data: { prUrl: "https://github.com/acme/widget/pull/7", prNumber: 7 },
+                    toolCalls: [],
+                },
+            ],
+        ]);
+    }
+    it("does NOT call fetch when cloudToken is empty", async () => {
+        await reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "" }), "triage");
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it("does NOT call fetch when repository is missing", async () => {
+        const orig = process.env.GITHUB_REPOSITORY;
+        delete process.env.GITHUB_REPOSITORY;
+        try {
+            await reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "sweny_pk_x", repository: "" }), "triage");
+            expect(fetchMock).not.toHaveBeenCalled();
+        }
+        finally {
+            if (orig !== undefined)
+                process.env.GITHUB_REPOSITORY = orig;
+        }
+    });
+    it("calls fetch with Bearer cloudToken when token is set", async () => {
+        await reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "sweny_pk_abc" }), "triage");
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const [, init] = fetchMock.mock.calls[0];
+        expect(init.headers.Authorization).toBe("Bearer sweny_pk_abc");
+    });
+    it("does NOT send GITHUB_TOKEN in Authorization header", async () => {
+        await reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "sweny_pk_abc", githubToken: "ghs_evil" }), "triage");
+        const [, init] = fetchMock.mock.calls[0];
+        expect(init.headers.Authorization).not.toContain("ghs_evil");
+        expect(init.headers.Authorization).not.toMatch(/^token /);
+    });
+    it("posts to SWENY_CLOUD_URL override when set", async () => {
+        process.env.SWENY_CLOUD_URL = "https://cloud.example.test";
+        try {
+            await reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "sweny_pk_abc" }), "triage");
+            const [url] = fetchMock.mock.calls[0];
+            expect(url).toBe("https://cloud.example.test/api/report");
+        }
+        finally {
+            delete process.env.SWENY_CLOUD_URL;
+        }
+    });
+    it("silently swallows network failures", async () => {
+        fetchMock.mockRejectedValue(new Error("ECONNREFUSED"));
+        await expect(reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "sweny_pk_abc" }), "triage")).resolves.toBeUndefined();
+    });
+    it("prints the run URL when response includes one", async () => {
+        const logSpy = vi.spyOn(console, "log").mockImplementation(() => { });
+        await reportToCloud(makeResults(), 1000, makeConfig({ cloudToken: "sweny_pk_abc" }), "triage");
+        const output = logSpy.mock.calls.flat().join(" ");
+        expect(output).toContain("cloud.sweny.ai/runs/abc");
+        logSpy.mockRestore();
+    });
+    it("payload contains owner, repo, workflow, duration_ms, findings, nodes", async () => {
+        await reportToCloud(makeResults(), 1234, makeConfig({ cloudToken: "sweny_pk_abc" }), "triage");
+        const [, init] = fetchMock.mock.calls[0];
+        const body = JSON.parse(init.body);
+        expect(body).toMatchObject({
+            owner: "acme",
+            repo: "widget",
+            workflow: "triage",
+            duration_ms: 1234,
+        });
+        expect(Array.isArray(body.findings)).toBe(true);
+        expect(Array.isArray(body.nodes)).toBe(true);
+    });
+});

package/dist/cli/cloud-report.d.ts

@@ -0,0 +1,12 @@
+import type { NodeResult } from "../types.js";
+import type { CliConfig } from "./config.js";
+/**
+ * Opt-in run reporting to SWEny Cloud.
+ *
+ * Fires only when `config.cloudToken` (from SWENY_CLOUD_TOKEN or .sweny.yml)
+ * is set. Authenticates using the user's cloud token — the user's GITHUB_TOKEN
+ * is never forwarded to sweny.ai.
+ *
+ * Failure is silent; reporting never blocks a workflow run.
+ */
+export declare function reportToCloud(results: Map<string, NodeResult>, durationMs: number, config: CliConfig, workflow: string): Promise<void>;

package/dist/cli/cloud-report.js

@@ -0,0 +1,79 @@
+import { createRequire } from "node:module";
+import { c } from "./output.js";
+const _require = createRequire(import.meta.url);
+const { version } = _require("../../package.json");
+// ── Cloud reporting ────────────────────────────────────────────────
+const CLOUD_URL_DEFAULT = "https://cloud.sweny.ai";
+/**
+ * Opt-in run reporting to SWEny Cloud.
+ *
+ * Fires only when `config.cloudToken` (from SWENY_CLOUD_TOKEN or .sweny.yml)
+ * is set. Authenticates using the user's cloud token — the user's GITHUB_TOKEN
+ * is never forwarded to sweny.ai.
+ *
+ * Failure is silent; reporting never blocks a workflow run.
+ */
+export async function reportToCloud(results, durationMs, config, workflow) {
+    const cloudToken = config.cloudToken;
+    if (!cloudToken)
+        return;
+    const repo = config.repository || process.env.GITHUB_REPOSITORY || "";
+    const [owner, name] = repo.split("/");
+    if (!owner || !name)
+        return;
+    const investigateData = results.get("investigate")?.data;
+    const createPrData = results.get("create_pr")?.data;
+    const createIssueData = results.get("create_issue")?.data ?? results.get("create-issue")?.data;
+    const findings = investigateData?.findings ?? [];
+    const hasFailed = [...results.values()].some((r) => r.status === "failed");
+    const nodes = [...results.entries()].map(([id, r]) => ({
+        id,
+        name: id,
+        status: r.status === "success"
+            ? "success"
+            : r.status === "failed"
+                ? "failed"
+                : "skipped",
+        durationMs: undefined,
+    }));
+    const body = {
+        owner,
+        repo: name,
+        status: hasFailed ? "failed" : "completed",
+        workflow,
+        duration_ms: durationMs,
+        recommendation: investigateData?.recommendation,
+        findings,
+        highest_severity: investigateData?.highest_severity,
+        novel_count: investigateData?.novel_count,
+        pr_url: createPrData?.prUrl,
+        pr_number: createPrData?.prNumber,
+        issue_url: (createIssueData?.issueUrl ?? createPrData?.issueUrl),
+        issue_identifier: (createIssueData?.issueIdentifier ?? createPrData?.issueIdentifier),
+        issues_found: findings.length > 0,
+        nodes,
+        action_version: version,
+        runner_os: process.env.RUNNER_OS,
+    };
+    const cloudUrl = process.env.SWENY_CLOUD_URL || CLOUD_URL_DEFAULT;
+    try {
+        const res = await fetch(`${cloudUrl}/api/report`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${cloudToken}`,
+            },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (res.ok) {
+            const data = (await res.json().catch(() => ({})));
+            if (data.run_url) {
+                console.log(c.subtle(`  cloud: ${data.run_url}`));
+            }
+        }
+    }
+    catch {
+        // Never block the workflow on a reporting failure.
+    }
+}

package/dist/cli/config-file.d.ts

@@ -3,8 +3,8 @@
  * Sets `process.env[KEY]` only if not already defined (real env vars win).
  */
 export declare function loadDotenv(cwd?: string): void;
-/** Parsed config file — flat strings for scalar fields, arrays for list fields. */
-export type FileConfig = Record<string, string | string[]>;
+/** Parsed config file — flat strings for scalar fields, arrays for list fields, objects for nested blocks. */
+export type FileConfig = Record<string, string | string[] | Record<string, unknown>>;
 /**
  * Search upward from `cwd` for `.sweny.yml` and parse it.
  * Scalar values are strings, list values (rules, context) are string arrays.
@@ -12,4 +12,4 @@ export type FileConfig = Record<string, string | string[]>;
  */
 export declare function loadConfigFile(cwd?: string): FileConfig;
 /** Starter config written by `sweny new`. */
-export declare const STARTER_CONFIG = "# .sweny.yml \u2014 SWEny project configuration\n# Commit this file. Secrets (API keys, tokens) go in .env (gitignored).\n#\n# Every key matches a CLI flag: \"time-range: 4h\" is the same as \"--time-range 4h\".\n# CLI flags override this file; env vars override this file; this file overrides defaults.\n\n# \u2500\u2500 Providers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# observability-provider: datadog        # datadog | sentry | cloudwatch | splunk | elastic | newrelic | loki | prometheus | pagerduty | heroku | opsgenie | vercel | supabase | netlify | fly | render | file\n# issue-tracker-provider: github-issues  # github-issues | linear | jira\n# source-control-provider: github        # github | gitlab\n# coding-agent-provider: claude          # claude | codex | gemini\n# notification-provider: console         # console | slack | teams | discord | email | webhook\n\n# \u2500\u2500 Investigation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# time-range: 24h\n# severity-focus: errors\n# service-filter: \"*\"\n# investigation-depth: standard          # quick | standard | thorough\n\n# \u2500\u2500 PR / branch \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# base-branch: main\n# pr-labels: agent,triage,needs-review\n\n# \u2500\u2500 Paths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# service-map-path: .github/service-map.yml\n# log-file: ./logs/errors.json           # required when observability-provider is \"file\"\n\n# \u2500\u2500 Cache \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# cache-dir: .sweny/cache\n# cache-ttl: 86400\n\n# \u2500\u2500 MCP servers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Extend the coding agent with additional tools via MCP.\n# Value is a JSON object \u2014 each key is a server name you choose.\n# See docs/mcp-servers.md for a full catalog with copy-paste configs.\n#\n# Example: GitHub MCP server (query PRs, issues, CI run logs)\n# mcp-servers-json: '{\"github\":{\"type\":\"stdio\",\"command\":\"npx\",\"args\":[\"-y\",\"@modelcontextprotocol/server-github@latest\"],\"env\":{\"GITHUB_PERSONAL_ACCESS_TOKEN\":\"ghp_...\"}}}'\n\n# \u2500\u2500 Local-only quick start \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Uncomment to run without any external services (just an LLM API key):\n# observability-provider: file\n# log-file: ./sample-errors.json\n# issue-tracker-provider: file\n# source-control-provider: file\n# notification-provider: file\n# output-dir: .sweny/output\n\n# \u2500\u2500 Credentials (.env) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Copy the relevant block into your .env file and fill in the values.\n#\n# Claude (coding agent) \u2014 https://console.anthropic.com/settings/api-keys\n#   ANTHROPIC_API_KEY=sk-ant-...\n#\n# GitHub (source control + issue tracker)\n#   GITHUB_TOKEN=ghp_...        # https://github.com/settings/tokens (repo + issues scopes)\n#\n# Datadog (observability) \u2014 https://app.datadoghq.com/organization-settings\n#   DD_API_KEY=...              # Organization Settings > API Keys\n#   DD_APP_KEY=...              # Organization Settings > Application Keys\n#   DD_SITE=datadoghq.com       # or datadoghq.eu, us3.datadoghq.com, etc.\n#\n# Sentry (observability) \u2014 https://sentry.io/settings/auth-tokens/\n#   SENTRY_AUTH_TOKEN=sntrys_...\n#   SENTRY_ORG=your-org-slug    # from sentry.io/organizations/<slug>/\n#   SENTRY_PROJECT=your-project # Project Settings > General > Project Slug\n#\n# Linear (issue tracker) \u2014 https://linear.app/settings/api\n#   LINEAR_API_KEY=lin_api_...\n#   LINEAR_TEAM_ID=...          # Settings > Workspace > Teams > [team] > copy ID from URL\n#   LINEAR_BUG_LABEL_ID=...     # Settings > Labels > [label] > copy ID from URL\n#\n# Jira (issue tracker) \u2014 https://your-org.atlassian.net\n#   JIRA_BASE_URL=https://your-org.atlassian.net\n#   JIRA_EMAIL=you@company.com  # your Atlassian account email\n#   JIRA_API_TOKEN=...          # https://id.atlassian.com/manage-profile/security/api-tokens\n#\n# Vercel (observability) \u2014 https://vercel.com/account/tokens\n#   VERCEL_TOKEN=...\n#   VERCEL_PROJECT_ID=prj_...      # Project Settings > General > Project ID\n#   VERCEL_TEAM_ID=team_...        # optional, for team-owned projects\n#\n# Supabase (observability) \u2014 https://supabase.com/dashboard/account/tokens\n#   SUPABASE_MANAGEMENT_KEY=...\n#   SUPABASE_PROJECT_REF=...       # Project Settings > General > Reference ID\n#\n# Netlify (observability) \u2014 https://app.netlify.com/user/applications#personal-access-tokens\n#   NETLIFY_TOKEN=...\n#   NETLIFY_SITE_ID=...         # Site Settings > General > Site ID\n#\n# Fly.io (observability) \u2014 https://fly.io/user/personal_access_tokens\n#   FLY_TOKEN=...\n#   FLY_APP_NAME=...             # the name of your Fly.io application\n#\n# Render (observability) \u2014 https://dashboard.render.com/u/settings\n#   RENDER_API_KEY=...\n#   RENDER_SERVICE_ID=srv-...    # from your service's Settings page\n#\n# Prometheus (observability) \u2014 self-hosted or Grafana Cloud\n#   PROMETHEUS_URL=http://prometheus.internal:9090\n#   PROMETHEUS_TOKEN=...         # optional, for secured instances\n#\n# PagerDuty (observability) \u2014 https://your-account.pagerduty.com/api_keys\n#   PAGERDUTY_API_KEY=...\n#\n# Honeycomb (observability) \u2014 https://docs.honeycomb.io/api/\n#   HONEYCOMB_API_KEY=...\n#   HONEYCOMB_DATASET=...        # dataset name (e.g. production)\n#\n# Heroku (observability) \u2014 https://devcenter.heroku.com/articles/platform-api-reference\n#   HEROKU_API_KEY=...           # https://dashboard.heroku.com/account\n#   HEROKU_APP_NAME=...          # the name of your Heroku application\n#\n# OpsGenie (observability) \u2014 https://support.atlassian.com/opsgenie/docs/api-key-management/\n#   OPSGENIE_API_KEY=...\n#   OPSGENIE_REGION=us           # or eu for EU-hosted accounts\n#\n# Slack (notifications) \u2014 https://api.slack.com/apps\n#   NOTIFICATION_WEBHOOK_URL=https://hooks.slack.com/services/...\n#   # or use a bot token: SLACK_BOT_TOKEN=xoxb-...\n";
+export declare const STARTER_CONFIG = "# .sweny.yml \u2014 SWEny project configuration\n# Commit this file. Secrets (API keys, tokens) go in .env (gitignored).\n#\n# Every key matches a CLI flag: \"time-range: 4h\" is the same as \"--time-range 4h\".\n# CLI flags override this file; env vars override this file; this file overrides defaults.\n\n# \u2500\u2500 Providers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# observability-provider: datadog        # datadog | sentry | cloudwatch | splunk | elastic | newrelic | loki | prometheus | pagerduty | heroku | opsgenie | vercel | supabase | netlify | fly | render | file\n# issue-tracker-provider: github-issues  # github-issues | linear | jira\n# source-control-provider: github        # github | gitlab\n# coding-agent-provider: claude          # claude | codex | gemini\n# notification-provider: console         # console | slack | teams | discord | email | webhook\n\n# \u2500\u2500 Investigation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# time-range: 24h\n# severity-focus: errors\n# service-filter: \"*\"\n# investigation-depth: standard          # quick | standard | thorough\n\n# \u2500\u2500 PR / branch \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# base-branch: main\n# pr-labels: agent,triage,needs-review\n\n# \u2500\u2500 Paths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# service-map-path: .github/service-map.yml\n# log-file: ./logs/errors.json           # required when observability-provider is \"file\"\n\n# \u2500\u2500 Cache \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# cache-dir: .sweny/cache\n# cache-ttl: 86400\n\n# \u2500\u2500 Cloud reporting \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Opt-in: paste your project token from cloud.sweny.ai to enable run reporting.\n# cloud-token: sweny_pk_...\n# Or set SWENY_CLOUD_TOKEN in your environment.\n\n# \u2500\u2500 MCP servers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Extend the coding agent with additional tools via MCP.\n# Value is a JSON object \u2014 each key is a server name you choose.\n# See docs/mcp-servers.md for a full catalog with copy-paste configs.\n#\n# Example: GitHub MCP server (query PRs, issues, CI run logs)\n# mcp-servers-json: '{\"github\":{\"type\":\"stdio\",\"command\":\"npx\",\"args\":[\"-y\",\"@modelcontextprotocol/server-github@latest\"],\"env\":{\"GITHUB_PERSONAL_ACCESS_TOKEN\":\"ghp_...\"}}}'\n\n# \u2500\u2500 Local-only quick start \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Uncomment to run without any external services (just an LLM API key):\n# observability-provider: file\n# log-file: ./sample-errors.json\n# issue-tracker-provider: file\n# source-control-provider: file\n# notification-provider: file\n# output-dir: .sweny/output\n\n# \u2500\u2500 Credentials (.env) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Copy the relevant block into your .env file and fill in the values.\n#\n# Claude (coding agent) \u2014 https://console.anthropic.com/settings/api-keys\n#   ANTHROPIC_API_KEY=sk-ant-...\n#\n# GitHub (source control + issue tracker)\n#   GITHUB_TOKEN=ghp_...        # https://github.com/settings/tokens (repo + issues scopes)\n#\n# Datadog (observability) \u2014 https://app.datadoghq.com/organization-settings\n#   DD_API_KEY=...              # Organization Settings > API Keys\n#   DD_APP_KEY=...              # Organization Settings > Application Keys\n#   DD_SITE=datadoghq.com       # or datadoghq.eu, us3.datadoghq.com, etc.\n#\n# Sentry (observability) \u2014 https://sentry.io/settings/auth-tokens/\n#   SENTRY_AUTH_TOKEN=sntrys_...\n#   SENTRY_ORG=your-org-slug    # from sentry.io/organizations/<slug>/\n#   SENTRY_PROJECT=your-project # Project Settings > General > Project Slug\n#\n# Linear (issue tracker) \u2014 https://linear.app/settings/api\n#   LINEAR_API_KEY=lin_api_...\n#   LINEAR_TEAM_ID=...          # Settings > Workspace > Teams > [team] > copy ID from URL\n#   LINEAR_BUG_LABEL_ID=...     # Settings > Labels > [label] > copy ID from URL\n#\n# Jira (issue tracker) \u2014 https://your-org.atlassian.net\n#   JIRA_BASE_URL=https://your-org.atlassian.net\n#   JIRA_EMAIL=you@company.com  # your Atlassian account email\n#   JIRA_API_TOKEN=...          # https://id.atlassian.com/manage-profile/security/api-tokens\n#\n# Vercel (observability) \u2014 https://vercel.com/account/tokens\n#   VERCEL_TOKEN=...\n#   VERCEL_PROJECT_ID=prj_...      # Project Settings > General > Project ID\n#   VERCEL_TEAM_ID=team_...        # optional, for team-owned projects\n#\n# Supabase (observability) \u2014 https://supabase.com/dashboard/account/tokens\n#   SUPABASE_MANAGEMENT_KEY=...\n#   SUPABASE_PROJECT_REF=...       # Project Settings > General > Reference ID\n#\n# Netlify (observability) \u2014 https://app.netlify.com/user/applications#personal-access-tokens\n#   NETLIFY_TOKEN=...\n#   NETLIFY_SITE_ID=...         # Site Settings > General > Site ID\n#\n# Fly.io (observability) \u2014 https://fly.io/user/personal_access_tokens\n#   FLY_TOKEN=...\n#   FLY_APP_NAME=...             # the name of your Fly.io application\n#\n# Render (observability) \u2014 https://dashboard.render.com/u/settings\n#   RENDER_API_KEY=...\n#   RENDER_SERVICE_ID=srv-...    # from your service's Settings page\n#\n# Prometheus (observability) \u2014 self-hosted or Grafana Cloud\n#   PROMETHEUS_URL=http://prometheus.internal:9090\n#   PROMETHEUS_TOKEN=...         # optional, for secured instances\n#\n# PagerDuty (observability) \u2014 https://your-account.pagerduty.com/api_keys\n#   PAGERDUTY_API_KEY=...\n#\n# Honeycomb (observability) \u2014 https://docs.honeycomb.io/api/\n#   HONEYCOMB_API_KEY=...\n#   HONEYCOMB_DATASET=...        # dataset name (e.g. production)\n#\n# Heroku (observability) \u2014 https://devcenter.heroku.com/articles/platform-api-reference\n#   HEROKU_API_KEY=...           # https://dashboard.heroku.com/account\n#   HEROKU_APP_NAME=...          # the name of your Heroku application\n#\n# OpsGenie (observability) \u2014 https://support.atlassian.com/opsgenie/docs/api-key-management/\n#   OPSGENIE_API_KEY=...\n#   OPSGENIE_REGION=us           # or eu for EU-hosted accounts\n#\n# Slack (notifications) \u2014 https://api.slack.com/apps\n#   NOTIFICATION_WEBHOOK_URL=https://hooks.slack.com/services/...\n#   # or use a bot token: SLACK_BOT_TOKEN=xoxb-...\n";

package/dist/cli/config-file.js

@@ -62,6 +62,19 @@ export function loadConfigFile(cwd = process.cwd()) {
         if (Array.isArray(value)) {
             config[key] = value.map(String);
         }
+        else if (value && typeof value === "object") {
+            for (const [subKey, subVal] of Object.entries(value)) {
+                if (subVal && typeof subVal === "object" && !Array.isArray(subVal)) {
+                    config[`${key}.${subKey}`] = subVal;
+                }
+                else if (Array.isArray(subVal)) {
+                    config[`${key}.${subKey}`] = subVal.map(String);
+                }
+                else if (subVal != null && subVal !== "") {
+                    config[`${key}.${subKey}`] = String(subVal);
+                }
+            }
+        }
         else if (value != null && value !== "") {
             config[key] = String(value);
         }
@@ -118,6 +131,11 @@ export const STARTER_CONFIG = `# .sweny.yml — SWEny project configuration
 # cache-dir: .sweny/cache
 # cache-ttl: 86400
 
+# ── Cloud reporting ───────────────────────────────────────────────────
+# Opt-in: paste your project token from cloud.sweny.ai to enable run reporting.
+# cloud-token: sweny_pk_...
+# Or set SWENY_CLOUD_TOKEN in your environment.
+
 # ── MCP servers ───────────────────────────────────────────────────────
 # Extend the coding agent with additional tools via MCP.
 # Value is a JSON object — each key is a server name you choose.

package/dist/cli/config.d.ts

@@ -34,6 +34,7 @@ export interface CliConfig {
     serviceMapPath: string;
     githubToken: string;
     botToken: string;
+    cloudToken: string;
     sourceControlProvider: string;
     jiraBaseUrl: string;
     jiraEmail: string;
@@ -60,6 +61,8 @@ export interface CliConfig {
     workspaceTools: string[];
     rules: string[];
     context: string[];
+    offline: boolean;
+    fetchAuth: Record<string, string>;
 }
 export declare function registerTriageCommand(program: Command): Command;
 export declare function parseCliInputs(options: Record<string, unknown>, fileConfig?: FileConfig): CliConfig;

package/dist/cli/config.js

@@ -61,7 +61,8 @@ export function registerTriageCommand(program) {
         .option("--cache-ttl <seconds>", "Cache TTL in seconds, 0 = infinite (default: 86400)")
         .option("--no-cache", "Disable step cache")
         .option("--output-dir <path>", "Output directory for file providers (default: .sweny/output)")
-        .option("--workspace-tools <tools>", "Comma-separated workspace tool integrations to enable (slack, notion, pagerduty, monday)");
+        .option("--workspace-tools <tools>", "Comma-separated workspace tool integrations to enable (slack, notion, pagerduty, monday)")
+        .option("--offline", "Skip URL Sources and fail fast if any are referenced", false);
 }
 export function parseCliInputs(options, fileConfig = {}) {
     const env = process.env;
@@ -126,6 +127,14 @@ export function parseCliInputs(options, fileConfig = {}) {
         serviceMapPath: options.serviceMapPath || f("service-map-path") || ".github/service-map.yml",
         githubToken: env.GITHUB_TOKEN || "",
         botToken: env.BOT_TOKEN || "",
+        cloudToken: (() => {
+            const fromEnv = env.SWENY_CLOUD_TOKEN || "";
+            const fromFile = f("cloud-token") || "";
+            if (!fromEnv && fromFile) {
+                console.warn("\x1b[33m⚠ cloud-token is set in .sweny.yml — consider using SWENY_CLOUD_TOKEN env var instead to avoid accidental commits.\x1b[0m");
+            }
+            return fromEnv || fromFile;
+        })(),
         sourceControlProvider: options.sourceControlProvider || f("source-control-provider") || "github",
         // Secrets: env only
         jiraBaseUrl: env.JIRA_BASE_URL || "",
@@ -158,8 +167,21 @@ export function parseCliInputs(options, fileConfig = {}) {
             .filter(Boolean),
         rules: fa("rules"),
         context: fa("context"),
+        offline: Boolean(options.offline),
+        fetchAuth: parseFetchAuth(fileConfig),
     };
 }
+function parseFetchAuth(fileConfig) {
+    const raw = fileConfig["fetch.auth"];
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return {};
+    const out = {};
+    for (const [host, envVar] of Object.entries(raw)) {
+        if (typeof envVar === "string" && envVar)
+            out[host] = envVar;
+    }
+    return out;
+}
 /**
  * All recognized workspace tool names. Update here when adding a new Category B MCP server.
  *
@@ -557,7 +579,8 @@ export function registerImplementCommand(program) {
         .option("--workspace-tools <tools>", "Comma-separated workspace tool integrations to enable (slack, notion, pagerduty, monday)")
         .option("--review-mode <mode>", "PR merge behavior: auto (GitHub auto-merge when CI passes) | review (human approval, default)", "review")
         .option("--additional-instructions <text>", "Extra instructions for the coding agent")
-        .option("--stream", "Stream NDJSON events to stdout (for Studio / automation)", false);
+        .option("--stream", "Stream NDJSON events to stdout (for Studio / automation)", false)
+        .option("--offline", "Skip URL Sources and fail fast if any are referenced", false);
 }
 /**
  * Parse a JSON string into MCP server configs.