hevy-mcp 1.26.4 → 1.26.6

package/dist/cli.mjs

@@ -4,12 +4,12 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@1.26.4" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@1.26.6" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "03cf150f-6466-4ca3-9cf1-e423cc0e3cd2", e._sentryDebugIdIdentifier = "sentry-dbid-03cf150f-6466-4ca3-9cf1-e423cc0e3cd2");
 	} catch (e) {}
 })();
-import { r as runServer } from "./src-DSiZLCgu.mjs";
+import { r as runServer } from "./src-B9KZiN70.mjs";
 //#region src/cli.ts
 runServer().catch((error) => {
 	console.error("Fatal error in main():", error);

package/dist/index.mjs

@@ -4,10 +4,10 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@1.26.4" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@1.26.6" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "5b077b94-9ef8-4f24-a0b0-8dcfbf491be1", e._sentryDebugIdIdentifier = "sentry-dbid-5b077b94-9ef8-4f24-a0b0-8dcfbf491be1");
 	} catch (e) {}
 })();
-import { n as createServer, r as runServer, t as configSchema } from "./src-DSiZLCgu.mjs";
+import { n as createServer, r as runServer, t as configSchema } from "./src-B9KZiN70.mjs";
 export { configSchema, createServer, createServer as default, runServer };

package/dist/{src-DSiZLCgu.mjs → src-B9KZiN70.mjs}

@@ -4,9 +4,9 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@1.26.4" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@1.26.6" };
 		var n = new e.Error().stack;
-		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "38ab92ce-2e6e-45ef-bcda-d9cbe2100f4a", e._sentryDebugIdIdentifier = "sentry-dbid-38ab92ce-2e6e-45ef-bcda-d9cbe2100f4a");
+		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "523f4f6a-5f55-463e-ace9-ee2022739238", e._sentryDebugIdIdentifier = "sentry-dbid-523f4f6a-5f55-463e-ace9-ee2022739238");
 	} catch (e) {}
 })();
 import * as Sentry from "@sentry/node";
@@ -36,10 +36,10 @@ import { deserializeMessage } from "@modelcontextprotocol/sdk/shared/stdio.js";
 * OTel Collector → Honeycomb: performance traces, metrics
 */
 const name$1 = "hevy-mcp";
-const version$1 = "1.26.4";
-const collectorToken = process.env.OTEL_COLLECTOR_TOKEN ?? "";
+const version$1 = "1.26.6";
+const collectorToken = "NH9vOela-HYreQxAbJa68cjEmORoEKM57EvneUDVcOo";
 const COLLECTOR_ENDPOINT = "https://otel.chrisdoc.dev/v1";
-const sentryRelease = process.env.SENTRY_RELEASE ?? `hevy-mcp@1.26.4`;
+const sentryRelease = process.env.SENTRY_RELEASE ?? `hevy-mcp@1.26.6`;
 const resource = resourceFromAttributes({
 	"service.name": name$1,
 	"service.version": version$1
@@ -56,7 +56,7 @@ const sentryClient = Sentry.init({
 	ignoreErrors: ["EPIPE", "broken pipe"]
 });
 const spanProcessors = [new SentrySpanProcessor()];
-if (collectorToken) spanProcessors.push(new BatchSpanProcessor(new OTLPTraceExporter({
+spanProcessors.push(new BatchSpanProcessor(new OTLPTraceExporter({
 	url: `${COLLECTOR_ENDPOINT}/traces`,
 	headers: { Authorization: `Bearer ${collectorToken}` }
 })));
@@ -69,7 +69,7 @@ tracerProvider.register({
 	propagator: new SentryPropagator(),
 	contextManager: new Sentry.SentryContextManager()
 });
-if (collectorToken) {
+{
 	const meterProvider = new MeterProvider({
 		resource,
 		readers: [new PeriodicExportingMetricReader({
@@ -258,6 +258,40 @@ function determineErrorType(error, message) {
 	if (nameLower.includes("api") || messageLower.includes("api") || messageLower.includes("server error") || messageLower.includes("500")) return "API_ERROR";
 	return "UNKNOWN_ERROR";
 }
+/** Whitelist of safe argument keys that can be logged as span attributes without exposing PII. */
+const ARGUMENT_WHITELIST = /* @__PURE__ */ new Set([
+	"page",
+	"pageSize",
+	"since",
+	"workoutId",
+	"routineId",
+	"folderId",
+	"exerciseTemplateId",
+	"date",
+	"startDate",
+	"endDate",
+	"updatedSince",
+	"includeCustom",
+	"limit",
+	"offset",
+	"refresh",
+	"query",
+	"primaryMuscleGroup"
+]);
+/**
+* Extract safe (non-PII) parameters from the tool arguments to include as span attributes.
+*/
+function extractSafeArgs(args) {
+	const attributes = {};
+	for (const [key, value] of Object.entries(args)) if (ARGUMENT_WHITELIST.has(key)) {
+		const type = typeof value;
+		if (type === "string" || type === "number" || type === "boolean") if (key === "query" && type === "string") {
+			const strVal = value;
+			attributes[`mcp.tool.args.${key}`] = strVal.length > 100 ? `${strVal.slice(0, 100)}...` : strVal;
+		} else attributes[`mcp.tool.args.${key}`] = value;
+	}
+	return attributes;
+}
 /**
 * Wrap an async function with standardized error handling
 *
@@ -270,25 +304,41 @@ function determineErrorType(error, message) {
 * @returns A function that catches errors and returns standardized error responses
 */
 function withErrorHandling(fn, context) {
-	return async (args) => {
+	return async (rawArgs) => {
+		const args = rawArgs ?? {};
 		const argumentKeyCount = Object.keys(args).length;
 		const startTime = Date.now();
 		toolInvocations.add(1, { tool_name: context });
+		const userId = getCurrentUserId();
+		const safeArgs = extractSafeArgs(args);
+		const whitelistedKeys = Object.keys(safeArgs).map((k) => k.replace("mcp.tool.args.", ""));
 		return tracer.startActiveSpan(`mcp.tool.${context}`, { attributes: {
 			"mcp.tool.name": context,
 			"mcp.tool.args.key_count": argumentKeyCount,
-			...getCurrentUserId() ? { "user.id": getCurrentUserId() } : {}
+			"mcp.tool.args.keys": whitelistedKeys.join(","),
+			...userId ? { "user.id": userId } : {},
+			...safeArgs
 		} }, async (span) => {
+			let isError = false;
 			try {
 				const result = await fn(args);
-				span.setStatus({ code: SpanStatusCode.OK });
-				span.setAttribute("mcp.tool.result.is_error", Boolean(result.isError));
+				isError = Boolean(result.isError);
+				span.setStatus({ code: isError ? SpanStatusCode.ERROR : SpanStatusCode.OK });
+				span.setAttribute("mcp.tool.result.is_error", isError);
+				if (result.content) {
+					span.setAttribute("mcp.tool.result.content_count", result.content.length);
+					const textLength = result.content.reduce((sum, item) => sum + (item.text?.length ?? 0), 0);
+					span.setAttribute("mcp.tool.result.text_length", textLength);
+				}
 				return result;
 			} catch (error) {
+				isError = true;
 				span.setStatus({ code: SpanStatusCode.ERROR });
 				span.recordException(error);
 				const errorType = determineErrorType(error, error instanceof Error ? error.message : String(error));
 				span.setAttribute("error.type", errorType);
+				const rawCode = error instanceof Error && "code" in error ? error.code : void 0;
+				if (rawCode !== void 0 && rawCode !== null) span.setAttribute("error.code", String(rawCode));
 				toolErrors.add(1, {
 					tool_name: context,
 					error_type: errorType
@@ -303,7 +353,10 @@ function withErrorHandling(fn, context) {
 				});
 				return createErrorResponse(error, context);
 			} finally {
-				toolDuration.record(Date.now() - startTime, { tool_name: context });
+				toolDuration.record(Date.now() - startTime, {
+					tool_name: context,
+					is_error: String(isError)
+				});
 				span.end();
 			}
 		});
@@ -2371,7 +2424,7 @@ function getCliAction(args) {
 const HEVY_API_BASEURL = "https://api.hevyapp.com";
 const SENTRY_USER_ID_CONTEXT = "hevy-mcp:sentry-user-id:v1";
 function fingerprintApiKey(apiKey) {
-	return createHmac("sha256", apiKey).update(SENTRY_USER_ID_CONTEXT).digest("hex");
+	return createHmac("sha256", apiKey).update(SENTRY_USER_ID_CONTEXT).digest("hex").slice(0, 10);
 }
 const serverConfigSchema = z.object({ apiKey: z.string().min(1, "Hevy API key is required").describe("Your Hevy API key (available in the Hevy app settings).") });
 const configSchema = serverConfigSchema;
@@ -2467,4 +2520,4 @@ async function runServer() {
 //#endregion
 export { createServer as n, runServer as r, configSchema as t };
 
-//# sourceMappingURL=src-DSiZLCgu.mjs.map
+//# sourceMappingURL=src-B9KZiN70.mjs.map