@debugg-ai/debugg-ai-mcp 2.3.1 → 2.4.0

package/dist/config/index.js

@@ -22,6 +22,29 @@ function findPackageVersion() {
     }
 }
 const _version = findPackageVersion();
+/**
+ * Public PostHog project key (write-only). Embedded so every MCP install
+ * sends telemetry by default — lets the team observe cache hit rates,
+ * poll cadence, tunnel reliability, etc. across the whole install base
+ * without requiring users to configure anything.
+ *
+ * Safe to embed: this is a `phc_*` project key (PostHog's client-side
+ * convention), not a personal API key. It can only write events, not
+ * read them.
+ *
+ * Override with POSTHOG_API_KEY (e.g. for a private fork pointing at a
+ * different PostHog project). Disable with DEBUGGAI_TELEMETRY_DISABLED=1.
+ */
+const DEBUGGAI_DEFAULT_POSTHOG_KEY = 'phc_4h2Yov2P0Vc9UMqfKf3dYKSQ6THOs7N6LZR0VKYopZN';
+function isTelemetryDisabled() {
+    const v = (process.env.DEBUGGAI_TELEMETRY_DISABLED || '').toLowerCase();
+    return v === '1' || v === 'true' || v === 'yes' || v === 'on';
+}
+function resolvePosthogKey() {
+    if (isTelemetryDisabled())
+        return undefined;
+    return process.env.POSTHOG_API_KEY || DEBUGGAI_DEFAULT_POSTHOG_KEY;
+}
 const configSchema = z.object({
     server: z.object({
         name: z.string().default('DebuggAI MCP Server'),
@@ -63,7 +86,7 @@ export function loadConfig() {
             format: process.env.LOG_FORMAT || 'simple',
         },
         telemetry: {
-            posthogApiKey: process.env.POSTHOG_API_KEY || undefined,
+            posthogApiKey: resolvePosthogKey(),
             posthogHost: process.env.POSTHOG_HOST || undefined,
         },
     };

package/dist/index.js

@@ -158,14 +158,23 @@ async function main() {
         if (!config.api.key) {
             logger.warn('DEBUGGAI_API_KEY is not set. Server will boot but every tool call will return a ConfigurationError until the env var is configured.');
         }
-        // Initialize telemetry (PostHog when key is set, Noop otherwise)
+        // Initialize telemetry: PostHog by default (public project key embedded
+        // in config so the team can observe cache hit rates, poll cadence, etc.
+        // across all installs). Falls back to Noop when DEBUGGAI_TELEMETRY_DISABLED
+        // is set. Distinct ID is SHA-256(apiKey) — never the raw key.
         Telemetry.setDistinctId(config.api.key);
         if (config.telemetry.posthogApiKey) {
             const { PostHogProvider } = await import('./services/posthogProvider.js');
             Telemetry.configure(new PostHogProvider(config.telemetry.posthogApiKey, {
                 host: config.telemetry.posthogHost,
             }));
-            logger.info('Telemetry enabled (PostHog)');
+            const usingDefault = !process.env.POSTHOG_API_KEY;
+            logger.info(usingDefault
+                ? 'Telemetry enabled (PostHog, DebuggAI default project). Set DEBUGGAI_TELEMETRY_DISABLED=1 to opt out.'
+                : 'Telemetry enabled (PostHog, custom POSTHOG_API_KEY)');
+        }
+        else {
+            logger.info('Telemetry disabled (DEBUGGAI_TELEMETRY_DISABLED is set)');
         }
         // No API calls at boot. Project context is resolved lazily on first tool
         // invocation (list_environments / list_credentials / check_app_in_browser).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@debugg-ai/debugg-ai-mcp",
-  "version": "2.3.1",
+  "version": "2.4.0",
   "description": "Zero-Config, Fully AI-Managed End-to-End Testing for all code gen platforms.",
   "type": "module",
   "bin": {