@togglhq/mcp 1.11.82 → 1.11.83

package/README.md

@@ -104,7 +104,7 @@ Disable product analytics:
 TOGGL_PRODUCT_ANALYTICS=off
 ```
 
-Optional error reporting via Sentry is off unless you set `TOGGL_SENTRY=1` and `SENTRY_DSN`.
+Error reporting is on by default. It sends the tool name, a redacted error category, the stack trace with package-relative file paths, the MCP, Node and OS versions, and sampled request timings without query strings. It never sends tool arguments, results, exception text, console output, your hostname, local paths, or your project's dependency list. Disable it with `TOGGL_SENTRY=off`, or send it to your own Sentry project with `TOGGL_SENTRY_DSN`.
 
 ## License
 

package/build/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as initProductAnalytics, c as shutdownProductAnalytics, i as getProductAnalyticsDistinctId, n as runMcpCli, o as redactUnsafeSentryMessages, r as captureToolInvocation, s as resolveProductAnalyticsDistinctId } from "./src-CuNUrEWK.js";
+import { a as getProductAnalyticsDistinctId, c as resolvePublicSentryDsn, i as captureToolInvocation, l as shutdownProductAnalytics, n as runMcpCli, o as initProductAnalytics, r as PUBLIC_SENTRY_PRIVACY_OPTIONS, s as resolveProductAnalyticsDistinctId } from "./src-LMB5VU2N.js";
 import * as Sentry from "@sentry/node";
 //#region src/analytics-tool-metadata.ts
 /**
@@ -66,25 +66,22 @@ function classifyToolResult(result) {
 }
 //#endregion
 //#region src/public-analytics.ts
-function envEnabled(raw) {
-	if (raw === void 0) return false;
-	const normalized = raw.trim().toLowerCase();
-	return normalized === "1" || normalized === "true" || normalized === "on" || normalized === "yes";
-}
-function initPublicSentry(environment) {
-	if (!envEnabled(process.env.TOGGL_SENTRY)) return false;
-	const dsn = process.env.SENTRY_DSN;
-	if (!dsn || dsn === "off") {
-		console.error("[Analytics] TOGGL_SENTRY is set but SENTRY_DSN is missing; Sentry left disabled");
-		return false;
-	}
+/**
+* Public client DSN for the `toggl-mcp` Sentry project. Safe to ship: it only
+* accepts events. The pack audit allowlists this exact value and still rejects
+* any other `ingest.sentry.io` DSN.
+*/
+const PUBLIC_SENTRY_DSN = "https://c37820699688a7c0393aa257dbe7a99e@o43910.ingest.us.sentry.io/4512156592046081";
+function initPublicSentry(environment, release) {
+	const dsn = resolvePublicSentryDsn(PUBLIC_SENTRY_DSN);
+	if (!dsn) return false;
 	Sentry.init({
 		dsn,
 		environment: environment ?? "production",
+		release: release ? `@togglhq/mcp@${release}` : void 0,
 		tracesSampleRate: .2,
 		enableLogs: false,
-		sendDefaultPii: false,
-		beforeSend: (event) => redactUnsafeSentryMessages(event)
+		...PUBLIC_SENTRY_PRIVACY_OPTIONS
 	});
 	return true;
 }
@@ -165,13 +162,13 @@ function wrapServerWithProductAnalytics(server) {
 }
 //#endregion
 //#region src/cli.ts
-const packageVersion = "1.11.82";
+const packageVersion = "1.11.83";
 let sentryEnabled = false;
 let productAnalyticsEnabled = false;
 runMcpCli({
 	beforeRegister(server) {
 		productAnalyticsEnabled = initMcpProductAnalytics({ packageVersion });
-		sentryEnabled = initPublicSentry(process.env.NODE_ENV);
+		sentryEnabled = initPublicSentry(process.env.NODE_ENV, packageVersion);
 		let next = server;
 		if (sentryEnabled) next = wrapPublicServerWithSentry(next);
 		if (productAnalyticsEnabled) wrapServerWithProductAnalytics(next);

package/build/index.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { n as runMcpCli, t as bootstrapServer } from "./src-CuNUrEWK.js";
+import { n as runMcpCli, t as bootstrapServer } from "./src-LMB5VU2N.js";
 export { bootstrapServer, runMcpCli };

package/build/{src-CuNUrEWK.js → src-LMB5VU2N.js}

@@ -40012,6 +40012,120 @@ function redactUnsafeSentryMessages(event) {
 	for (const value of event.exception?.values ?? []) if (!isSafeSentryMessage(value.value)) value.value = REDACTED_SENTRY_MESSAGE;
 	return event;
 }
+/**
+* Shared Sentry setup for the public CLI and MCP packages. Reporting is on by
+* default there, so everything the SDK attaches on its own has to be safe to
+* send from any user's machine, not only the exception message. Both packages
+* build their `Sentry.init` options from here so the two cannot drift.
+*/
+function normalized(raw) {
+	const value = raw?.trim();
+	return value ? value.toLowerCase() : void 0;
+}
+function isOff(raw) {
+	const value = normalized(raw);
+	return value === "0" || value === "false" || value === "off" || value === "no";
+}
+function isOn(raw) {
+	const value = normalized(raw);
+	return value === "1" || value === "true" || value === "on" || value === "yes";
+}
+/**
+* Picks the DSN the public build reports to, or `undefined` when reporting is
+* off.
+*
+* `TOGGL_SENTRY_DSN` is the override. The generic `SENTRY_DSN` is what most Node
+* apps set, and the MCP loads the working directory's `.env`, so on its own it
+* must not redirect Toggl's errors into the user's project. It is still honoured
+* with an explicit `TOGGL_SENTRY=1`, the old opt-in, and `SENTRY_DSN=off` still
+* switches reporting off.
+*/
+function resolvePublicSentryDsn(builtIn, env = process.env) {
+	if (isOff(env.TOGGL_SENTRY) || normalized(env.SENTRY_DSN) === "off") return void 0;
+	const override = env.TOGGL_SENTRY_DSN?.trim();
+	if (override) return override.toLowerCase() === "off" ? void 0 : override;
+	const legacy = env.SENTRY_DSN?.trim();
+	if (legacy && isOn(env.TOGGL_SENTRY)) return legacy;
+	return builtIn;
+}
+/**
+* `/Users/jane/.npm/_npx/…/node_modules/@togglhq/mcp/build/cli.js` becomes
+* `@togglhq/mcp/build/cli.js`. A path outside `node_modules` keeps only its file
+* name, so no home directory or login leaves the machine.
+*/
+function toPackageRelativePath(path) {
+	const unified = path.replace(/^file:\/\//, "").replaceAll("\\", "/");
+	const at = unified.lastIndexOf("/node_modules/");
+	if (at !== -1) return unified.slice(at + 14);
+	if (!unified.includes("/")) return unified;
+	return unified.slice(unified.lastIndexOf("/") + 1);
+}
+function scrubStacktrace(stacktrace) {
+	for (const frame of stacktrace?.frames ?? []) {
+		if (typeof frame.filename === "string") frame.filename = toPackageRelativePath(frame.filename);
+		if (typeof frame.abs_path === "string") frame.abs_path = toPackageRelativePath(frame.abs_path);
+	}
+}
+const QUERY_ATTRIBUTES = [
+	"http.query",
+	"url.query",
+	"http.fragment",
+	"url.fragment"
+];
+const URL_ATTRIBUTES = [
+	"url.full",
+	"http.url",
+	"http.target",
+	"url"
+];
+function stripQuery(value) {
+	return value.replace(/[?#]\S*/, "");
+}
+function scrubSpan(span) {
+	if (!span) return;
+	if (typeof span.description === "string") span.description = stripQuery(span.description);
+	const data = span.data;
+	if (!data) return;
+	for (const key of QUERY_ATTRIBUTES) delete data[key];
+	for (const key of URL_ATTRIBUTES) {
+		const value = data[key];
+		if (typeof value === "string") data[key] = stripQuery(value);
+	}
+}
+/**
+* Last word on every event the public build sends: messages reduced to fixed
+* categories, no hostname, no breadcrumbs, no dependency list, no request data,
+* package-relative stack paths, and no query strings on spans.
+*/
+function scrubPublicSentryEvent(event) {
+	redactUnsafeSentryMessages(event);
+	delete event.server_name;
+	delete event.breadcrumbs;
+	delete event.modules;
+	delete event.request;
+	for (const value of event.exception?.values ?? []) scrubStacktrace(value.stacktrace);
+	for (const thread of event.threads?.values ?? []) scrubStacktrace(thread.stacktrace);
+	for (const span of event.spans ?? []) scrubSpan(span);
+	scrubSpan(event.contexts?.trace);
+	return event;
+}
+/**
+* Privacy options shared by `initCliTelemetry` and `initPublicSentry`.
+*
+* `sendDefaultPii: false` leaves the hostname (`server_name`), console and fetch
+* breadcrumbs, absolute stack paths, the working directory's package.json
+* dependencies (`Modules`) and incoming request data in place. Console
+* breadcrumbs in the MCP include the workspace name it logs at startup.
+*/
+const PUBLIC_SENTRY_PRIVACY_OPTIONS = {
+	sendDefaultPii: false,
+	includeServerName: false,
+	maxBreadcrumbs: 0,
+	integrations: (defaults) => defaults.filter((integration) => integration.name !== "Modules"),
+	beforeBreadcrumb: () => null,
+	beforeSend: (event) => scrubPublicSentryEvent(event),
+	beforeSendTransaction: (event) => scrubPublicSentryEvent(event)
+};
 const DEFAULT_POSTHOG_HOST = "https://eu.i.posthog.com";
 /**
 * The shared Toggl **production** PostHog project — the same token the Track
@@ -54723,7 +54837,7 @@ function registerWorkspaceTools(server) {
 //#region src/package-version.ts
 function mcpPackageVersion() {
 	try {
-		return "1.11.82";
+		return "1.11.83";
 	} catch {
 		return "unknown";
 	}
@@ -54898,7 +55012,7 @@ import_main.default.config({
 	quiet: true,
 	ignore: ["MISSING_ENV_FILE"]
 });
-const packageVersion = "1.11.82";
+const packageVersion = "1.11.83";
 function resolvePublicUrls() {
 	return {
 		focusApiUrl: process.env.TOGGL_FOCUS_API_URL ?? "https://focus.toggl.com",
@@ -54961,6 +55075,6 @@ function bootstrapServer(options = {}) {
 	if (options.beforeExit) process.on("beforeExit", async () => await options.beforeExit?.());
 }
 //#endregion
-export { initProductAnalytics as a, shutdownProductAnalytics as c, getProductAnalyticsDistinctId as i, runMcpCli as n, redactUnsafeSentryMessages as o, captureToolInvocation as r, resolveProductAnalyticsDistinctId as s, bootstrapServer as t };
+export { getProductAnalyticsDistinctId as a, resolvePublicSentryDsn as c, captureToolInvocation as i, shutdownProductAnalytics as l, runMcpCli as n, initProductAnalytics as o, PUBLIC_SENTRY_PRIVACY_OPTIONS as r, resolveProductAnalyticsDistinctId as s, bootstrapServer as t };
 
-//# sourceMappingURL=src-CuNUrEWK.js.map
+//# sourceMappingURL=src-LMB5VU2N.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@togglhq/mcp",
-  "version": "1.11.82",
+  "version": "1.11.83",
   "description": "Toggl 2.0 MCP server for Claude Code, Claude Desktop, and other MCP clients.",
   "license": "UNLICENSED",
   "type": "module",