@togglhq/cli 1.11.82 → 1.11.83

package/README.md

@@ -282,7 +282,7 @@ Disable product analytics:
 TOGGL_PRODUCT_ANALYTICS=off
 ```
 
-Optional error reporting via Sentry is off unless you set `TOGGL_SENTRY=1` and `SENTRY_DSN`.
+Error reporting is on by default. It sends a redacted error category, the stack trace with package-relative file paths, the CLI, Node and OS versions, and sampled request timings without query strings. It never sends command arguments, output, exception text, your hostname, local paths, or your project's dependency list. Disable it with `TOGGL_SENTRY=off`, or send it to your own Sentry project with `TOGGL_SENTRY_DSN`.
 
 ## License
 

package/build/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as CommanderError, i as shutdownCliTelemetry, n as captureCliException, r as initCliTelemetry, t as createProgram } from "./program-DZlKCm-L.js";
+import { a as CommanderError, i as shutdownCliTelemetry, n as captureCliException, r as initCliTelemetry, t as createProgram } from "./program-CZaDiFSf.js";
 import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";

package/build/index.js

@@ -1,2 +1,2 @@
-import { t as createProgram } from "./program-DZlKCm-L.js";
+import { t as createProgram } from "./program-CZaDiFSf.js";
 export { createProgram };

package/build/{program-DZlKCm-L.js → program-CZaDiFSf.js}

@@ -12672,6 +12672,120 @@ function redactUnsafeSentryMessages(event) {
 	for (const value of event.exception?.values ?? []) if (!isSafeSentryMessage(value.value)) value.value = REDACTED_SENTRY_MESSAGE;
 	return event;
 }
+/**
+* Shared Sentry setup for the public CLI and MCP packages. Reporting is on by
+* default there, so everything the SDK attaches on its own has to be safe to
+* send from any user's machine, not only the exception message. Both packages
+* build their `Sentry.init` options from here so the two cannot drift.
+*/
+function normalized(raw) {
+	const value = raw?.trim();
+	return value ? value.toLowerCase() : void 0;
+}
+function isOff(raw) {
+	const value = normalized(raw);
+	return value === "0" || value === "false" || value === "off" || value === "no";
+}
+function isOn(raw) {
+	const value = normalized(raw);
+	return value === "1" || value === "true" || value === "on" || value === "yes";
+}
+/**
+* Picks the DSN the public build reports to, or `undefined` when reporting is
+* off.
+*
+* `TOGGL_SENTRY_DSN` is the override. The generic `SENTRY_DSN` is what most Node
+* apps set, and the MCP loads the working directory's `.env`, so on its own it
+* must not redirect Toggl's errors into the user's project. It is still honoured
+* with an explicit `TOGGL_SENTRY=1`, the old opt-in, and `SENTRY_DSN=off` still
+* switches reporting off.
+*/
+function resolvePublicSentryDsn(builtIn, env = process.env) {
+	if (isOff(env.TOGGL_SENTRY) || normalized(env.SENTRY_DSN) === "off") return void 0;
+	const override = env.TOGGL_SENTRY_DSN?.trim();
+	if (override) return override.toLowerCase() === "off" ? void 0 : override;
+	const legacy = env.SENTRY_DSN?.trim();
+	if (legacy && isOn(env.TOGGL_SENTRY)) return legacy;
+	return builtIn;
+}
+/**
+* `/Users/jane/.npm/_npx/…/node_modules/@togglhq/mcp/build/cli.js` becomes
+* `@togglhq/mcp/build/cli.js`. A path outside `node_modules` keeps only its file
+* name, so no home directory or login leaves the machine.
+*/
+function toPackageRelativePath(path) {
+	const unified = path.replace(/^file:\/\//, "").replaceAll("\\", "/");
+	const at = unified.lastIndexOf("/node_modules/");
+	if (at !== -1) return unified.slice(at + 14);
+	if (!unified.includes("/")) return unified;
+	return unified.slice(unified.lastIndexOf("/") + 1);
+}
+function scrubStacktrace(stacktrace) {
+	for (const frame of stacktrace?.frames ?? []) {
+		if (typeof frame.filename === "string") frame.filename = toPackageRelativePath(frame.filename);
+		if (typeof frame.abs_path === "string") frame.abs_path = toPackageRelativePath(frame.abs_path);
+	}
+}
+const QUERY_ATTRIBUTES = [
+	"http.query",
+	"url.query",
+	"http.fragment",
+	"url.fragment"
+];
+const URL_ATTRIBUTES = [
+	"url.full",
+	"http.url",
+	"http.target",
+	"url"
+];
+function stripQuery(value) {
+	return value.replace(/[?#]\S*/, "");
+}
+function scrubSpan(span) {
+	if (!span) return;
+	if (typeof span.description === "string") span.description = stripQuery(span.description);
+	const data = span.data;
+	if (!data) return;
+	for (const key of QUERY_ATTRIBUTES) delete data[key];
+	for (const key of URL_ATTRIBUTES) {
+		const value = data[key];
+		if (typeof value === "string") data[key] = stripQuery(value);
+	}
+}
+/**
+* Last word on every event the public build sends: messages reduced to fixed
+* categories, no hostname, no breadcrumbs, no dependency list, no request data,
+* package-relative stack paths, and no query strings on spans.
+*/
+function scrubPublicSentryEvent(event) {
+	redactUnsafeSentryMessages(event);
+	delete event.server_name;
+	delete event.breadcrumbs;
+	delete event.modules;
+	delete event.request;
+	for (const value of event.exception?.values ?? []) scrubStacktrace(value.stacktrace);
+	for (const thread of event.threads?.values ?? []) scrubStacktrace(thread.stacktrace);
+	for (const span of event.spans ?? []) scrubSpan(span);
+	scrubSpan(event.contexts?.trace);
+	return event;
+}
+/**
+* Privacy options shared by `initCliTelemetry` and `initPublicSentry`.
+*
+* `sendDefaultPii: false` leaves the hostname (`server_name`), console and fetch
+* breadcrumbs, absolute stack paths, the working directory's package.json
+* dependencies (`Modules`) and incoming request data in place. Console
+* breadcrumbs in the MCP include the workspace name it logs at startup.
+*/
+const PUBLIC_SENTRY_PRIVACY_OPTIONS = {
+	sendDefaultPii: false,
+	includeServerName: false,
+	maxBreadcrumbs: 0,
+	integrations: (defaults) => defaults.filter((integration) => integration.name !== "Modules"),
+	beforeBreadcrumb: () => null,
+	beforeSend: (event) => scrubPublicSentryEvent(event),
+	beforeSendTransaction: (event) => scrubPublicSentryEvent(event)
+};
 const DEFAULT_POSTHOG_HOST = "https://eu.i.posthog.com";
 /**
 * The shared Toggl **production** PostHog project — the same token the Track
@@ -27151,11 +27265,12 @@ async function runValidatedOperation(operation, options, deps) {
 }
 //#endregion
 //#region src/telemetry.ts
-function envEnabled(raw) {
-	if (raw === void 0) return false;
-	const normalized = raw.trim().toLowerCase();
-	return normalized === "1" || normalized === "true" || normalized === "on" || normalized === "yes";
-}
+/**
+* Public client DSN for the `toggl-cli` Sentry project. Safe to ship: it only
+* accepts events. The pack audit allowlists this exact value and still rejects
+* any other `ingest.sentry.io` DSN.
+*/
+const PUBLIC_SENTRY_DSN = "https://499edd257e0c64778932e6b7c7a0f8e9@o43910.ingest.us.sentry.io/4512156592046080";
 let sentryEnabled = false;
 let productAnalyticsEnabled = false;
 let lastCommandError;
@@ -27165,23 +27280,18 @@ function initCliTelemetry(packageVersion) {
 		packageVersion,
 		distinctId: resolveProductAnalyticsDistinctId("cli")
 	});
-	if (!envEnabled(process.env.TOGGL_SENTRY)) {
-		sentryEnabled = false;
-		return;
-	}
-	const dsn = process.env.SENTRY_DSN;
-	if (!dsn || dsn === "off") {
-		console.error("[Telemetry] TOGGL_SENTRY is set but SENTRY_DSN is missing; Sentry left disabled");
+	const dsn = resolvePublicSentryDsn(PUBLIC_SENTRY_DSN);
+	if (!dsn) {
 		sentryEnabled = false;
 		return;
 	}
 	Sentry.init({
 		dsn,
+		release: `@togglhq/cli@${packageVersion}`,
 		environment: process.env.NODE_ENV ?? "production",
 		tracesSampleRate: .1,
-		sendDefaultPii: false,
 		enableLogs: false,
-		beforeSend: (event) => redactUnsafeSentryMessages(event)
+		...PUBLIC_SENTRY_PRIVACY_OPTIONS
 	});
 	Sentry.setTag("cli.session.id", crypto.randomUUID());
 	sentryEnabled = true;
@@ -27804,4 +27914,4 @@ Common commands:
 //#endregion
 export { CommanderError as a, shutdownCliTelemetry as i, captureCliException as n, initCliTelemetry as r, createProgram as t };
 
-//# sourceMappingURL=program-DZlKCm-L.js.map
+//# sourceMappingURL=program-CZaDiFSf.js.map

package/build/program.js

@@ -1,2 +1,2 @@
-import { t as createProgram } from "./program-DZlKCm-L.js";
+import { t as createProgram } from "./program-CZaDiFSf.js";
 export { createProgram };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@togglhq/cli",
-  "version": "1.11.82",
+  "version": "1.11.83",
   "description": "Toggl CLI for Toggl 2.0 API operations.",
   "license": "UNLICENSED",
   "type": "module",