@trainheroic-unofficial/athlete-mcp 1.2.0 → 1.4.0

package/dist/server.mjs

@@ -453,7 +453,20 @@ async function confirmGate(server, requestId, message, confirmArg) {
 const SERVER_INSTRUCTIONS = "Speak to the user in plain, everyday language about their training. Describe what you are doing in the TrainHeroic app's own terms (for example, say you are creating a workout rather than naming a tool). Do not surface internal tool names (the snake_case identifiers such as athlete_session_create), raw parameter names, or numeric ids in your replies unless the user explicitly asks for them; they are implementation details. The tool descriptions cross-reference each other by name only so you can chain them correctly. Keep that wiring to yourself.";
 //#endregion
 //#region ../js/src/auth.ts
-const AUTH_URL = "https://apis.trainheroic.com/auth";
+const DEFAULT_AUTH_URL = "https://apis.trainheroic.com/auth";
+/**
+* The login endpoint, allowing an env override so a test harness can authenticate against a local
+* fake backend. Precedence: an explicit `TH_AUTH_URL`, else `${TH_APIS_BASE}/auth` (login lives on
+* the apis host, so it follows that base), else the real endpoint. Read via `globalThis.process`
+* (no `import process`) to keep this module workerd-safe, and per call so a child-env override wins.
+*/
+function authUrl() {
+	const env = globalThis.process?.env;
+	if (env?.TH_AUTH_URL && env.TH_AUTH_URL.length > 0) return env.TH_AUTH_URL;
+	const apis = env?.TH_APIS_BASE;
+	if (apis && apis.length > 0) return `${apis.replace(/\/$/, "")}/auth`;
+	return DEFAULT_AUTH_URL;
+}
 /**
 * Authenticate against TrainHeroic. Returns the session bundle, or null on bad
 * credentials. TrainHeroic returns only { id, scope, role, session_id } (verified in
@@ -461,7 +474,7 @@ const AUTH_URL = "https://apis.trainheroic.com/auth";
 * is sent as the `session-token` header and works against both API hosts.
 */
 async function loginTrainHeroic(email, password) {
-	const res = await fetch(AUTH_URL, {
+	const res = await fetch(authUrl(), {
 		method: "POST",
 		headers: {
 			"content-type": "application/x-www-form-urlencoded",
@@ -484,8 +497,19 @@ async function loginTrainHeroic(email, password) {
 }
 //#endregion
 //#region ../js/src/client.ts
-const COACH_BASE = "https://api.trainheroic.com";
-const APIS_BASE = "https://apis.trainheroic.com";
+const DEFAULT_COACH_BASE = "https://api.trainheroic.com";
+const DEFAULT_APIS_BASE = "https://apis.trainheroic.com";
+/**
+* Resolve an API host, allowing an env override. The override exists so a test harness can point
+* the client at a local fake backend (and it doubles as a staging knob); production leaves these
+* unset and gets the real hosts. Read through `globalThis.process?.env` — not an `import process`
+* — so the runtime-agnostic `.` entry stays free of `node:*` and runs unchanged on workerd, and
+* read per request (not at module load) so a value the harness sets in the child env always wins.
+*/
+function envBase(key, fallback) {
+	const v = (globalThis.process?.env)?.[key];
+	return v && v.length > 0 ? v : fallback;
+}
 var TrainHeroicAuthError = class extends Error {
 	name = "TrainHeroicAuthError";
 };
@@ -524,7 +548,7 @@ var TrainHeroicClient = class {
 		return this.#sessionId;
 	}
 	async request(method, path, options = {}) {
-		const url = `${options.base === "apis" ? APIS_BASE : COACH_BASE}/${path.replace(/^\//, "")}`;
+		const url = `${options.base === "apis" ? envBase("TH_APIS_BASE", DEFAULT_APIS_BASE) : envBase("TH_COACH_BASE", DEFAULT_COACH_BASE)}/${path.replace(/^\//, "")}`;
 		let session = await this.#ensureSession();
 		let res = await this.#send(method, url, session, options.body);
 		if (res.status === 401 || res.status === 403) {
@@ -1082,7 +1106,7 @@ async function writeSetResults(client, target, workouts, savedWorkoutSetId, resu
 			throw new Error(`savedWorkoutSetExerciseId ${result.savedWorkoutSetExerciseId} not found in saved workout set ${savedWorkoutSetId}. Exercises in this set: ${valid.join(", ") || "none"}.`);
 		}
 		const workoutSetExerciseId = coerceInt(ex.workout_set_exercise_id);
-		if (!workoutSetExerciseId) throw new Error(`Could not resolve workout_set_exercise_id for exercise ${result.savedWorkoutSetExerciseId}.`);
+		if (!workoutSetExerciseId) throw new Error(`savedWorkoutSetExercise ${result.savedWorkoutSetExerciseId} is missing its workout_set_exercise_id (the prescription-template pointer the write needs). This is the savedWorkoutSetExerciseId, not an exercise_id — re-read the ids from athlete_saved_workouts.`);
 		const body = {
 			...buildExerciseSetPayload(result.savedWorkoutSetExerciseId, savedWorkoutSetId, workoutSetExerciseId, result.sets, mode),
 			...extra
@@ -1261,6 +1285,7 @@ function presentExerciseHistory(detail) {
 			description: p.description ?? null,
 			reps: p.reps ?? null,
 			weight: p.weight ?? null,
+			units: p.units ?? null,
 			date: p.dateCompleted ?? null
 		})),
 		sessions: (detail.history ?? []).map((h) => ({
@@ -1295,6 +1320,7 @@ function historyInRange(presented, since, until) {
 		sessions
 	};
 }
+z.number().int().positive().max(36).optional();
 //#endregion
 //#region ../core/src/tools/athlete-training.ts
 /** Identity, profile, prefs, working maxes, leaderboard. */
@@ -1548,7 +1574,7 @@ function registerAthleteTrainingTools(server, ctx) {
 }
 //#endregion
 //#region package.json
-var version = "1.2.0";
+var version = "1.4.0";
 //#endregion
 //#region src/server.ts
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trainheroic-unofficial/athlete-mcp",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -21,8 +21,8 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.4.3",
-    "@trainheroic-unofficial/core": "1.2.0",
-    "@trainheroic-unofficial/js": "1.2.0"
+    "@trainheroic-unofficial/core": "1.4.0",
+    "@trainheroic-unofficial/js": "1.4.0"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",