hevy-mcp 2.0.0 → 3.0.0

package/README.md

@@ -103,6 +103,12 @@ The server uses stdio, so `-i` keeps standard input open for the MCP client.
 form forwards the variable from the host environment without putting the key
 in the command arguments.
 
+The image uses the official Node.js LTS Alpine base, runs as the non-root
+`node` user, and ships the application and its third-party runtime dependencies
+as a standalone bundle. It does not include an application `/app/node_modules`
+directory; the official Node base image may still contain its own globally
+packaged npm or Corepack files.
+
 Use `latest` to follow the newest stable release. For reproducible deployments,
 pin the exact version shown on the release, using a tag such as
 `ghcr.io/chrisdoc/hevy-mcp:X.Y.Z`. Major (`:X`) and major.minor (`:X.Y`) tags
@@ -230,10 +236,6 @@ This bootstraps the `hevy-mcp` entry in your client config without manual JSON e
 Supply your Hevy API key via the `HEVY_API_KEY` environment variable (in
 `.env` or system environment).
 
-> ⚠️ CLI API key arguments (`--hevy-api-key=...`, `--hevyApiKey=...`,
-> `hevy-api-key=...`) are still accepted for backward compatibility, but are
-> deprecated and insecure. Use `HEVY_API_KEY` instead.
-
 Set `HEVY_MCP_API_TIMEOUT` to override the default 30-second Hevy API request
 timeout. Its value is in milliseconds.
 
@@ -337,9 +339,11 @@ Compatibility note: with MCP SDK v1.29.0, clients using the default must send
 - **Build**: `npm run build`
 - **Lint/Format**: `npm run check` (uses oxlint/oxfmt)
 - **Type Check**: `npm run check:types`
-- **Unit Tests**: `npx vitest run --exclude 'tests/integration/**'`
-- **Full Test Suite**: `npm test` (requires `HEVY_API_KEY`)
+- **Unit Tests**: `npm run test:unit`
+- **Full Vitest Discovery**: `npm test` (builds first; live tests skip when
+  `HEVY_API_KEY` is absent)
 - **Changeset Check**: `npm run check:changeset`
+- **Tool Token Cost**: `npm run measure:tokens` ([measurement guide](./docs/token-cost-tracking.md))
 
 For a detailed senior engineer guide, please refer to [AGENTS.md](./AGENTS.md).
 

package/dist/cli.mjs

@@ -4,12 +4,12 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@2.0.0" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@3.0.0" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "03cf150f-6466-4ca3-9cf1-e423cc0e3cd2", e._sentryDebugIdIdentifier = "sentry-dbid-03cf150f-6466-4ca3-9cf1-e423cc0e3cd2");
 	} catch (e) {}
 })();
-import { r as runServer } from "./src-c3mB-R0m.mjs";
+import { r as runServer } from "./src-BBzEvkOX.mjs";
 //#region src/cli.ts
 runServer().catch((error) => {
 	console.error("Fatal error in main():", error);

package/dist/index.mjs

@@ -4,10 +4,10 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@2.0.0" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@3.0.0" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "5b077b94-9ef8-4f24-a0b0-8dcfbf491be1", e._sentryDebugIdIdentifier = "sentry-dbid-5b077b94-9ef8-4f24-a0b0-8dcfbf491be1");
 	} catch (e) {}
 })();
-import { n as createServer, r as runServer, t as configSchema } from "./src-c3mB-R0m.mjs";
+import { n as createServer, r as runServer, t as configSchema } from "./src-BBzEvkOX.mjs";
 export { configSchema, createServer, createServer as default, runServer };

package/dist/{src-c3mB-R0m.mjs → src-BBzEvkOX.mjs}

@@ -4,9 +4,9 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@2.0.0" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@3.0.0" };
 		var n = new e.Error().stack;
-		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "17d5086b-9850-447d-9372-27bb2ce5dcc5", e._sentryDebugIdIdentifier = "sentry-dbid-17d5086b-9850-447d-9372-27bb2ce5dcc5");
+		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "06533ca8-0b74-40dd-a418-fc98c764276c", e._sentryDebugIdIdentifier = "sentry-dbid-06533ca8-0b74-40dd-a418-fc98c764276c");
 	} catch (e) {}
 })();
 import * as Sentry from "@sentry/node";
@@ -41,10 +41,10 @@ import semver from "semver";
 * OTel Collector → Honeycomb: performance traces, metrics
 */
 const name$1 = "hevy-mcp";
-const version$1 = "2.0.0";
+const version$1 = "3.0.0";
 const collectorToken = "NH9vOela-HYreQxAbJa68cjEmORoEKM57EvneUDVcOo";
 const COLLECTOR_ENDPOINT = "https://otel.chrisdoc.dev/v1";
-const sentryRelease = process.env.SENTRY_RELEASE ?? `hevy-mcp@2.0.0`;
+const sentryRelease = process.env.SENTRY_RELEASE ?? `hevy-mcp@3.0.0`;
 const resource = resourceFromAttributes({
 	"service.name": name$1,
 	"service.version": version$1
@@ -2110,43 +2110,20 @@ function registerWorkoutTools(server, hevyClient) {
 	}, "update-workout-operation"));
 }
 //#endregion
+//#region src/tools/register.ts
+/** Register every Hevy tool in its production ordering. */
+function registerHevyTools(server, hevyClient, options = {}) {
+	registerWorkoutTools(server, hevyClient);
+	registerRoutineTools(server, hevyClient);
+	registerTemplateTools(server, hevyClient, { logger: options.logger });
+	registerFolderTools(server, hevyClient);
+	registerBodyMeasurementTools(server, hevyClient);
+	registerUserTools(server, hevyClient);
+}
+//#endregion
 //#region src/utils/config.ts
-const DEPRECATED_CLI_ARGUMENT_WARNING = [
-	"DEPRECATION WARNING: Passing the Hevy API key via CLI arguments",
-	"(--hevy-api-key=..., --hevyApiKey=..., hevy-api-key=...) is",
-	"deprecated and insecure. Use the HEVY_API_KEY environment",
-	"variable instead."
-].join(" ");
-/**
-* Parse CLI arguments and environment to derive configuration.
-* Priority order for API key: deprecated CLI flag forms > environment variable.
-* Supported deprecated CLI arg forms:
-*   --hevy-api-key=KEY
-*   --hevyApiKey=KEY
-*   hevy-api-key=KEY (bare, e.g. when passed after npm start -- )
-*/
-function parseConfig(argv, env) {
-	let apiKey = "";
-	let usedDeprecatedApiKeyArg = false;
-	const apiKeyArgPatterns = [
-		/^--hevy-api-key=(.+)$/i,
-		/^--hevyApiKey=(.+)$/i,
-		/^hevy-api-key=(.+)$/i
-	];
-	for (const raw of argv) {
-		for (const pattern of apiKeyArgPatterns) {
-			const m = raw.match(pattern);
-			if (m) {
-				apiKey = m[1];
-				usedDeprecatedApiKeyArg = true;
-				break;
-			}
-		}
-		if (apiKey) break;
-	}
-	if (usedDeprecatedApiKeyArg) console.error(DEPRECATED_CLI_ARGUMENT_WARNING);
-	if (!apiKey) apiKey = env.HEVY_API_KEY || "";
-	return { apiKey };
+function parseConfig(env) {
+	return { apiKey: env.HEVY_API_KEY || "" };
 }
 function assertApiKey(apiKey) {
 	if (!apiKey) {
@@ -3555,16 +3532,13 @@ const HELP_TEXT = [
 	"Options:",
 	"  -h, --help                 Show this help message and exit",
 	"  -v, --version              Show version and exit",
-	"  --hevy-api-key=<api-key>   (deprecated, use HEVY_API_KEY env var)",
 	"",
 	"Environment:",
 	"  HEVY_API_KEY=<api-key>     Hevy API key from Hevy app settings",
 	"  HEVY_MCP_DEBUG=1           Enable verbose diagnostics on stderr",
 	"",
 	"Examples:",
-	"  HEVY_API_KEY=your-key npx hevy-mcp",
-	"  npx hevy-mcp --hevy-api-key=your-key",
-	"  npm start -- --hevy-api-key=your-key"
+	"  HEVY_API_KEY=your-key npx hevy-mcp"
 ].join("\n");
 function getCliAction(args) {
 	for (const arg of args) {
@@ -3675,12 +3649,7 @@ function buildServer(apiKey) {
 			tracer.startActiveSpan("mcp.tools.register", (toolsSpan) => {
 				try {
 					const counting = createToolCountingServer(server);
-					registerWorkoutTools(counting.server, hevyClient);
-					registerRoutineTools(counting.server, hevyClient);
-					registerTemplateTools(counting.server, hevyClient, { logger: clientLogger });
-					registerFolderTools(counting.server, hevyClient);
-					registerBodyMeasurementTools(counting.server, hevyClient);
-					registerUserTools(counting.server, hevyClient);
+					registerHevyTools(counting.server, hevyClient, { logger: clientLogger });
 					toolsSpan.setAttribute("mcp.tools.count", counting.getCount());
 				} finally {
 					toolsSpan.end();
@@ -3710,8 +3679,7 @@ async function createServer({ config }) {
 	return buildServer(apiKey);
 }
 async function runServer() {
-	const args = process.argv.slice(2);
-	const cliAction = getCliAction(args);
+	const cliAction = getCliAction(process.argv.slice(2));
 	if (cliAction === "version") {
 		console.error(`${name} v${version}`);
 		return;
@@ -3723,7 +3691,7 @@ async function runServer() {
 	serverStartups.add(1, { version });
 	await tracer.startActiveSpan("mcp.server.run", { attributes: { "mcp.transport": "stdio" } }, async (span) => {
 		try {
-			const apiKey = parseConfig(args, process.env).apiKey;
+			const apiKey = parseConfig(process.env).apiKey;
 			assertApiKey(apiKey);
 			const server = await createServer({ config: { apiKey } });
 			console.error("Starting MCP server in stdio mode");
@@ -3756,4 +3724,4 @@ async function runServer() {
 //#endregion
 export { createServer as n, runServer as r, configSchema as t };
 
-//# sourceMappingURL=src-c3mB-R0m.mjs.map
+//# sourceMappingURL=src-BBzEvkOX.mjs.map