hevy-mcp 5.0.0 → 5.0.2

package/dist/cli.mjs

@@ -4,12 +4,12 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.0" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.2" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "625c4c9c-e20d-40b3-96b1-4e799ef130f3", e._sentryDebugIdIdentifier = "sentry-dbid-625c4c9c-e20d-40b3-96b1-4e799ef130f3");
 	} catch (e) {}
 })();
-import { a as createSafeErrorDiagnostic, i as MissingHevyApiKeyError, n as runServer, o as flushTelemetry } from "./src-BUmpaxmH.mjs";
+import { a as createSafeErrorDiagnostic, i as MissingHevyApiKeyError, n as runServer, o as flushTelemetry } from "./src-DBkGttYB.mjs";
 //#region src/cli.ts
 runServer().catch(async (error) => {
 	if (error instanceof MissingHevyApiKeyError) console.error(error.message);

package/dist/index.mjs

@@ -4,10 +4,10 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.0" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.2" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "e9496b31-626b-4ad1-9416-47ba4ffd2995", e._sentryDebugIdIdentifier = "sentry-dbid-e9496b31-626b-4ad1-9416-47ba4ffd2995");
 	} catch (e) {}
 })();
-import { n as runServer, r as runStdioServer, t as createNodeMcpServer } from "./src-BUmpaxmH.mjs";
+import { n as runServer, r as runStdioServer, t as createNodeMcpServer } from "./src-DBkGttYB.mjs";
 export { createNodeMcpServer, runServer, runStdioServer };

package/dist/{src-BUmpaxmH.mjs → src-DBkGttYB.mjs}

@@ -4,9 +4,9 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.0" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.2" };
 		var n = new e.Error().stack;
-		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "8ea46bdf-fa98-4e73-b4d5-a25044e016df", e._sentryDebugIdIdentifier = "sentry-dbid-8ea46bdf-fa98-4e73-b4d5-a25044e016df");
+		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "f7cbf1da-83d1-4da1-bb18-1c590afb9b11", e._sentryDebugIdIdentifier = "sentry-dbid-f7cbf1da-83d1-4da1-bb18-1c590afb9b11");
 	} catch (e) {}
 })();
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
@@ -20,7 +20,7 @@ import { BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
 import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
 import { MeterProvider, PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
-import { z } from "zod";
+import { ZodError, z } from "zod";
 import { McpServer, deserializeMessage } from "@modelcontextprotocol/server";
 import { z as z$1 } from "zod/v4";
 import { isIP } from "node:net";
@@ -80,11 +80,11 @@ function sanitizeSentryMcpSpan(span) {
 * OTel Collector → Honeycomb: performance traces, metrics
 */
 const name$1 = "hevy-mcp";
-const version$1 = "5.0.0";
+const version$1 = "5.0.2";
 const telemetryEnabled = process.env.HEVY_MCP_TELEMETRY !== "0";
 const collectorToken = "NH9vOela-HYreQxAbJa68cjEmORoEKM57EvneUDVcOo";
 const COLLECTOR_ENDPOINT = "https://otel.chrisdoc.dev/v1";
-const sentryRelease = process.env.SENTRY_RELEASE ?? `hevy-mcp@5.0.0`;
+const sentryRelease = process.env.SENTRY_RELEASE ?? `hevy-mcp@5.0.2`;
 const resource = resourceFromAttributes({
 	"service.name": name$1,
 	"service.version": version$1
@@ -985,6 +985,28 @@ function normalizeMaxGetRetries(value) {
 function defaultSleep(milliseconds) {
 	return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
+function withTimeout(operation, timeoutMs, onTimeout) {
+	return new Promise((resolve, reject) => {
+		let settled = false;
+		const timer = setTimeout(() => {
+			if (settled) return;
+			settled = true;
+			onTimeout();
+			reject(new DOMException("Operation timed out", "AbortError"));
+		}, Math.max(0, timeoutMs));
+		operation.then((value) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			resolve(value);
+		}, (error) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			reject(error);
+		});
+	});
+}
 function getRequestContext(config) {
 	const method = (config.method ?? "GET").toUpperCase();
 	const rawEndpoint = (config.url ?? "").split("?")[0] ?? "";
@@ -1081,14 +1103,15 @@ function createNativeClient(apiKey, baseUrl, options) {
 			try {
 				const headers = new Headers({ "api-key": apiKey });
 				if (normalized.data !== void 0 && !(normalized.data instanceof FormData)) headers.set("content-type", "application/json");
-				const response = await fetchImplementation(url, {
+				const attemptDeadline = Date.now() + timeoutMs;
+				const response = await withTimeout(fetchImplementation(url, {
 					method,
 					headers,
 					redirect: "manual",
 					body: normalized.data instanceof FormData ? normalized.data : normalized.data === void 0 ? void 0 : JSON.stringify(normalized.data),
 					signal: controller.signal
-				});
-				const data = await parseResponseData(response);
+				}), Math.max(0, attemptDeadline - Date.now()), () => controller.abort());
+				const data = await withTimeout(parseResponseData(response), Math.max(0, attemptDeadline - Date.now()), () => controller.abort());
 				if (!response.ok) throw new HevyHttpError(`Hevy API request failed (HTTP ${response.status})`, {
 					status: response.status,
 					statusText: response.statusText,
@@ -1691,7 +1714,7 @@ const routineSchema = z$1.object({
 	exercises: z$1.optional(z$1.array(z$1.object({
 		index: z$1.optional(z$1.number().describe("Index indicating the order of the exercise in the routine.")),
 		title: z$1.optional(z$1.string().describe("Title of the exercise")),
-		rest_seconds: z$1.optional(z$1.string().describe("The rest time in seconds between sets of the exercise")),
+		rest_seconds: z$1.optional(z$1.int().describe("The rest time in seconds between sets of the exercise")),
 		notes: z$1.optional(z$1.string().describe("Routine notes on the exercise")),
 		exercise_template_id: z$1.optional(z$1.string().describe("The id of the exercise template. This can be used to fetch the exercise template.")),
 		supersets_id: z$1.number().describe("The id of the superset that the exercise belongs to. A value of null indicates the exercise is not part of a superset.").nullish(),
@@ -1934,7 +1957,7 @@ const formattedRoutineExerciseSchema = z.object({
 	exercise_template_id: z.string().optional(),
 	notes: z.string().optional(),
 	supersets_id: optionalNumber,
-	rest_seconds: z.string().optional(),
+	rest_seconds: z.number().int().optional(),
 	sets: z.array(formattedRoutineSetSchema).optional()
 });
 const formattedRoutineSchema = z.object({
@@ -2621,7 +2644,7 @@ function registerHevyResources(server, runtime) {
 //#endregion
 //#region ../core/src/server-metadata.ts
 const SERVER_NAME = "hevy-mcp";
-const SERVER_VERSION = "5.0.0";
+const SERVER_VERSION = "5.0.2";
 const SERVER_INSTRUCTIONS = [
 	"Hevy MCP connects clients to the authenticated user's Hevy workout-tracking data, including workouts, routines, exercise templates, routine folders, body measurements, and profile information. HEVY_API_KEY must contain a valid Hevy API key for local stdio use.",
 	"Safety: all get-* and search-* tools are read-only. create-* and update-* tools mutate Hevy data. Creates are additive and non-idempotent, so repeating one can create duplicates. Updates can overwrite existing data. Delete operations are not available.",
@@ -5152,6 +5175,10 @@ const SAFE_MCP_METHODS = {
 	"prompts/list": true
 };
 const REDACTED_CONTENT_MARKER = "[REDACTED]";
+const MAX_MALFORMED_LINES_PER_READ = 100;
+function isMalformedMessageError(error) {
+	return error instanceof SyntaxError || error instanceof ZodError;
+}
 /**
 * Adapter boundary around MCP SDK stdio internals.
 *
@@ -5177,14 +5204,36 @@ function createSdkPrivateStdioAdapter(transport) {
 		installReadMessageHook(onReadLine) {
 			const readBuffer = mutableTransport._readBuffer;
 			if (!readBuffer || typeof readBuffer.readMessage !== "function") return false;
+			let deferredMessage = null;
 			readBuffer.readMessage = () => {
-				const buffer = readBuffer._buffer;
-				if (!buffer) return null;
-				const index = buffer.indexOf("\n");
-				if (index === -1) return null;
-				const lineBuffer = buffer.subarray(0, index);
-				readBuffer._buffer = buffer.subarray(index + 1);
-				return onReadLine(lineBuffer.toString("utf8").replace(/\r$/, ""));
+				if (deferredMessage) {
+					const message = deferredMessage;
+					deferredMessage = null;
+					return message;
+				}
+				let skippedMalformedLines = 0;
+				while (true) {
+					const buffer = readBuffer._buffer;
+					if (!buffer) return null;
+					const index = buffer.indexOf("\n");
+					if (index === -1) return null;
+					const lineBuffer = buffer.subarray(0, index);
+					readBuffer._buffer = buffer.subarray(index + 1);
+					const line = lineBuffer.toString("utf8").replace(/\r$/, "");
+					try {
+						return onReadLine(line);
+					} catch (error) {
+						if (!isMalformedMessageError(error)) throw error;
+						skippedMalformedLines += 1;
+						if (skippedMalformedLines >= MAX_MALFORMED_LINES_PER_READ) {
+							setImmediate(() => {
+								const message = readBuffer.readMessage();
+								if (message) deferredMessage = message;
+							});
+							return null;
+						}
+					}
+				}
 			};
 			return true;
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "hevy-mcp",
-	"version": "5.0.0",
+	"version": "5.0.2",
 	"private": false,
 	"description": "A Model Context Protocol (MCP) server implementation that interfaces with the Hevy fitness tracking app and its API.",
 	"repository": {

package/server.json

@@ -7,12 +7,12 @@
 		"url": "https://github.com/chrisdoc/hevy-mcp",
 		"source": "github"
 	},
-	"version": "5.0.0",
+	"version": "5.0.2",
 	"packages": [
 		{
 			"registryType": "npm",
 			"identifier": "hevy-mcp",
-			"version": "5.0.0",
+			"version": "5.0.2",
 			"transport": {
 				"type": "stdio"
 			},