hevy-mcp 5.0.5 → 5.0.6

package/README.md

@@ -423,7 +423,7 @@ self-hosted Streamable HTTP.
 | `HEVY_MCP_HTTP_BEARER_TOKEN` | None                           | Non-loopback HTTP             | Required when `--host` is not loopback; use a separate token, never the Hevy API key.                                                                                            |
 | `HEVY_MCP_TELEMETRY`         | Enabled                        | Local Node                    | Set to exactly `0` before startup/import to disable Sentry errors/traces and OTLP traces/metrics. Takes precedence over `SENTRY_DSN` and packaged/runtime collector credentials. |
 | `XDG_CACHE_HOME`             | `~/.cache`                     | Local stdio                   | Changes the root for the npm update-check cache at `hevy-mcp/update-check.json`.                                                                                                 |
-| `SENTRY_DSN`                 | Packaged project DSN           | Optional local Node telemetry | Sentry-only override for the destination. An empty value disables Sentry export. The Worker does not import Node telemetry.                                                      |
+| `SENTRY_DSN`                 | Packaged GlitchTip project DSN | Optional local Node telemetry | Sentry-compatible override for the destination. An empty value disables Sentry export. The Worker does not import Node telemetry.                                                |
 | `SENTRY_RELEASE`             | `hevy-mcp@<installed-version>` | Optional local Node telemetry | Overrides the release label attached to local Sentry events and traces.                                                                                                          |
 | `-h`, `--help`               | N/A                            | Local stdio CLI               | Print supported options and exit.                                                                                                                                                |
 | `-v`, `--version`            | N/A                            | Local stdio CLI               | Print the installed version and exit.                                                                                                                                            |
@@ -474,9 +474,9 @@ metric readers and makes no telemetry network requests. `SENTRY_DSN` remains a
 Sentry-only setting; when telemetry is enabled, an empty value disables only
 Sentry export.
 
-When enabled, errors and traces are sent to the packaged Sentry project at
-<https://o4508975499575296.ingest.de.sentry.io/4509049671647312>. Traces and
-metrics are sent to the collector at
+When enabled, errors are sent to the self-hosted GlitchTip project at
+<https://glitchtip.chrisdoc.dev>; Sentry performance tracing is disabled.
+Traces and metrics continue to be sent to the collector at
 <https://otel.chrisdoc.dev/v1/traces> and
 <https://otel.chrisdoc.dev/v1/metrics>, which forward to Honeycomb. Metrics
 export every 10 seconds.

package/dist/cli.mjs

@@ -4,12 +4,12 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.5" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.6" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "625c4c9c-e20d-40b3-96b1-4e799ef130f3", e._sentryDebugIdIdentifier = "sentry-dbid-625c4c9c-e20d-40b3-96b1-4e799ef130f3");
 	} catch (e) {}
 })();
-import { a as createSafeErrorDiagnostic, i as MissingHevyApiKeyError, n as runServer, o as flushTelemetry } from "./src-TBD9ENR3.mjs";
+import { a as createSafeErrorDiagnostic, i as MissingHevyApiKeyError, n as runServer, o as flushTelemetry } from "./src-CT0BzqOm.mjs";
 //#region src/cli.ts
 runServer().catch(async (error) => {
 	if (error instanceof MissingHevyApiKeyError) console.error(error.message);

package/dist/index.mjs

@@ -4,10 +4,10 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.5" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.6" };
 		var n = new e.Error().stack;
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "e9496b31-626b-4ad1-9416-47ba4ffd2995", e._sentryDebugIdIdentifier = "sentry-dbid-e9496b31-626b-4ad1-9416-47ba4ffd2995");
 	} catch (e) {}
 })();
-import { n as runServer, r as runStdioServer, t as createNodeMcpServer } from "./src-TBD9ENR3.mjs";
+import { n as runServer, r as runStdioServer, t as createNodeMcpServer } from "./src-CT0BzqOm.mjs";
 export { createNodeMcpServer, runServer, runStdioServer };

package/dist/{src-TBD9ENR3.mjs → src-CT0BzqOm.mjs}

@@ -4,19 +4,18 @@
 (function() {
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
-		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.5" };
+		e.SENTRY_RELEASE = { id: "hevy-mcp@5.0.6" };
 		var n = new e.Error().stack;
-		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "f5270278-73ea-40fd-92e2-2ae5127e6780", e._sentryDebugIdIdentifier = "sentry-dbid-f5270278-73ea-40fd-92e2-2ae5127e6780");
+		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "8b83767c-bc1c-4e67-8601-3cf4da13a8f9", e._sentryDebugIdIdentifier = "sentry-dbid-8b83767c-bc1c-4e67-8601-3cf4da13a8f9");
 	} catch (e) {}
 })();
 import { createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import * as Sentry from "@sentry/node";
-import { SentryPropagator, SentrySampler, SentrySpanProcessor } from "@sentry/opentelemetry";
 import { SpanStatusCode, context, metrics, trace } from "@opentelemetry/api";
 import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
 import { AggregationTemporalityPreference, OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-http";
 import { resourceFromAttributes } from "@opentelemetry/resources";
-import { BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
+import { AlwaysOnSampler, BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
 import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
 import { MeterProvider, PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
 import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
@@ -31,52 +30,15 @@ import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import semver from "semver";
-//#region src/utils/sentry-privacy.ts
-const SENTRY_PROHIBITED_MCP_ATTRIBUTES = /* @__PURE__ */ new Set([
-	"mcp.request.id",
-	"mcp.session.id",
-	"mcp.cancelled.request_id",
-	"mcp.cancelled.reason",
-	"mcp.progress.token",
-	"mcp.progress.message",
-	"mcp.resource.uri",
-	"mcp.method.name",
-	"mcp.resource.protocol",
-	"mcp.prompt.name",
-	"mcp.protocol.version",
-	"mcp.logging.message",
-	"mcp.prompt.result.description",
-	"mcp.request.argument",
-	"mcp.logging.logger",
-	"mcp.logging.level",
-	"mcp.client.name",
-	"mcp.client.title",
-	"mcp.client.version"
-]);
-/** Remove MCP correlation and unbounded client fields before Sentry export. */
-function sanitizeSentryMcpSpan(span) {
-	if (!span.data) return span;
-	let sanitizedData;
-	for (const key of SENTRY_PROHIBITED_MCP_ATTRIBUTES) {
-		if (!(key in span.data)) continue;
-		sanitizedData ??= { ...span.data };
-		delete sanitizedData[key];
-	}
-	return sanitizedData ? {
-		...span,
-		data: sanitizedData
-	} : span;
-}
-//#endregion
 //#region src/utils/telemetry.ts
 /**
 * Centralized telemetry initialization.
 *
 * This module MUST be imported before any other application code.
-* It sets up OpenTelemetry with dual export: Sentry (error events +
-* traces) and an OTel Collector (traces + metrics to Honeycomb).
+* It sets up independent telemetry paths: Sentry error events and an OTel
+* Collector (traces + metrics to Honeycomb).
 *
-* Sentry SDK: error events, performance traces, release tracking
+* Sentry SDK: error monitoring, release tracking
 * OTel Collector → Honeycomb: performance traces, metrics
 */
 const PROCESS_FAILURE_TAXONOMY = {
@@ -169,11 +131,12 @@ function installProcessExceptionTracking(processLike = process) {
 	};
 }
 const name$1 = "hevy-mcp";
-const version$1 = "5.0.5";
+const version$1 = "5.0.6";
 const telemetryEnabled = process.env.HEVY_MCP_TELEMETRY !== "0";
 const collectorToken = "NH9vOela-HYreQxAbJa68cjEmORoEKM57EvneUDVcOo";
 const COLLECTOR_ENDPOINT = "https://otel.chrisdoc.dev/v1";
 const sentryRelease = process.env.SENTRY_RELEASE ?? `${name$1}@${version$1}`;
+const DEFAULT_SENTRY_DSN = "https://7c08d2c880ff4560a333dff4833594cd@glitchtip.chrisdoc.dev/1";
 function createServiceInstanceId(generate = randomUUID) {
 	try {
 		const generated = generate();
@@ -200,32 +163,28 @@ var UserHashSpanProcessor = class {
 let tracerProvider;
 let meterProvider;
 if (telemetryEnabled) {
-	const rawDsn = process.env.SENTRY_DSN ?? "https://ce696d8333b507acbf5203eb877bce0f@o4508975499575296.ingest.de.sentry.io/4509049671647312";
+	const rawDsn = process.env.SENTRY_DSN ?? DEFAULT_SENTRY_DSN;
 	const isValidDsn = typeof rawDsn === "string" && rawDsn.length > 0 && !rawDsn.startsWith("*");
-	const sentryClient = Sentry.init({
+	Sentry.init({
 		dsn: isValidDsn ? rawDsn : void 0,
-		beforeSendSpan: sanitizeSentryMcpSpan,
 		release: sentryRelease,
-		tracesSampleRate: 1,
+		tracesSampleRate: 0,
 		sendDefaultPii: false,
 		skipOpenTelemetrySetup: true,
 		registerEsmLoaderHooks: false,
 		ignoreErrors: ["EPIPE", "broken pipe"]
 	});
-	const spanProcessors = [new UserHashSpanProcessor(), new SentrySpanProcessor()];
+	const spanProcessors = [new UserHashSpanProcessor()];
 	spanProcessors.push(new BatchSpanProcessor(new OTLPTraceExporter({
 		url: `${COLLECTOR_ENDPOINT}/traces`,
 		headers: { Authorization: `Bearer ${collectorToken}` }
 	})));
 	tracerProvider = new NodeTracerProvider({
 		resource,
-		sampler: sentryClient ? new SentrySampler(sentryClient) : void 0,
+		sampler: new AlwaysOnSampler(),
 		spanProcessors
 	});
-	tracerProvider.register({
-		propagator: new SentryPropagator(),
-		contextManager: new Sentry.SentryContextManager()
-	});
+	tracerProvider.register();
 	meterProvider = new MeterProvider({
 		resource,
 		readers: [new PeriodicExportingMetricReader({
@@ -234,12 +193,11 @@ if (telemetryEnabled) {
 				headers: { Authorization: `Bearer ${collectorToken}` },
 				temporalityPreference: AggregationTemporalityPreference.DELTA
 			}),
-			exportIntervalMillis: 1e4
+			exportIntervalMillis: 3e4
 		})]
 	});
 	metrics.setGlobalMeterProvider(meterProvider);
 	trace.setGlobalTracerProvider(tracerProvider);
-	Sentry.validateOpenTelemetrySetup();
 }
 async function flushTelemetry(timeoutMs = 1e3) {
 	if (!telemetryEnabled) return;
@@ -1060,7 +1018,7 @@ function isHevyHttpError(error) {
 const DEFAULT_API_TIMEOUT_MS = 3e4;
 const RETRY_BACKOFF_MAX_MS = 5e3;
 const RETRYABLE_STATUS_CODES = /* @__PURE__ */ new Set([408, 429]);
-const SAFE_STATIC_ENDPOINTS = /* @__PURE__ */ new Set([
+const SAFE_STATIC_ENDPOINTS$1 = /* @__PURE__ */ new Set([
 	"/v1/body_measurements",
 	"/v1/exercise_templates",
 	"/v1/routine_folders",
@@ -1099,7 +1057,7 @@ const SAFE_OBSERVATION_CODES = /* @__PURE__ */ new Set([
 	HEVY_REQUEST_ABORTED_ERROR_CODE,
 	HEVY_RETRY_EXHAUSTED_ERROR_CODE
 ]);
-const SAFE_DYNAMIC_ENDPOINTS = [
+const SAFE_DYNAMIC_ENDPOINTS$1 = [
 	["/v1/body_measurements/", "/v1/body_measurements/:date"],
 	["/v1/exercise_history/", "/v1/exercise_history/:exerciseTemplateId"],
 	["/v1/exercise_templates/", "/v1/exercise_templates/:exerciseTemplateId"],
@@ -1142,8 +1100,8 @@ function getRequestContext(config) {
 	const method = (config.method ?? "GET").toUpperCase();
 	const rawEndpoint = (config.url ?? "").split("?")[0] ?? "";
 	let endpoint = "unknown";
-	if (SAFE_STATIC_ENDPOINTS.has(rawEndpoint)) endpoint = rawEndpoint;
-	else endpoint = SAFE_DYNAMIC_ENDPOINTS.find(([prefix]) => rawEndpoint.startsWith(prefix))?.[1] ?? "unknown";
+	if (SAFE_STATIC_ENDPOINTS$1.has(rawEndpoint)) endpoint = rawEndpoint;
+	else endpoint = SAFE_DYNAMIC_ENDPOINTS$1.find(([prefix]) => rawEndpoint.startsWith(prefix))?.[1] ?? "unknown";
 	const page = config.params !== null && typeof config.params === "object" && "page" in config.params && typeof config.params.page === "number" ? config.params.page : void 0;
 	return {
 		method,
@@ -2844,7 +2802,7 @@ function registerHevyResources(server, runtime) {
 //#endregion
 //#region ../core/src/server-metadata.ts
 const SERVER_NAME = "hevy-mcp";
-const SERVER_VERSION = "5.0.5";
+const SERVER_VERSION = "5.0.6";
 const SERVER_INSTRUCTIONS = [
 	"Hevy MCP connects clients to the authenticated user's Hevy workout-tracking data, including workouts, routines, exercise templates, routine folders, body measurements, and profile information. HEVY_API_KEY must contain a valid Hevy API key for local stdio use.",
 	"Safety: all get-* and search-* tools are read-only. create-* and update-* tools mutate Hevy data. Creates are additive and non-idempotent, so repeating one can create duplicates. Updates can overwrite existing data. Delete operations are not available.",
@@ -5195,6 +5153,29 @@ function debugLog(event, data) {
 }
 //#endregion
 //#region src/utils/hevy-client-observability.ts
+const SAFE_STATIC_ENDPOINTS = /* @__PURE__ */ new Set([
+	"/v1/body_measurements",
+	"/v1/exercise_templates",
+	"/v1/routine_folders",
+	"/v1/routines",
+	"/v1/user/info",
+	"/v1/workouts",
+	"/v1/workouts/count",
+	"/v1/workouts/events"
+]);
+const SAFE_DYNAMIC_ENDPOINTS = [
+	["/v1/body_measurements/", "/v1/body_measurements/:date"],
+	["/v1/exercise_history/", "/v1/exercise_history/:exerciseTemplateId"],
+	["/v1/exercise_templates/", "/v1/exercise_templates/:exerciseTemplateId"],
+	["/v1/routine_folders/", "/v1/routine_folders/:folderId"],
+	["/v1/routines/", "/v1/routines/:routineId"],
+	["/v1/workouts/", "/v1/workouts/:workoutId"]
+];
+function normalizeHevyMetricEndpoint(endpoint) {
+	const path = endpoint.split("?")[0] ?? "";
+	if (SAFE_STATIC_ENDPOINTS.has(path)) return path;
+	return SAFE_DYNAMIC_ENDPOINTS.find(([prefix]) => path.startsWith(prefix))?.[1] ?? "unknown";
+}
 function safeErrorAttributes(observation) {
 	if (!observation.error) return {};
 	const code = observation.error.code;
@@ -5248,9 +5229,10 @@ function createNodeHevyClientOptions() {
 		onRequestComplete(observation) {
 			const retryCountBucket = bucketCount(observation.retryCount);
 			const errorAttributes = safeErrorAttributes(observation);
+			const metricEndpoint = normalizeHevyMetricEndpoint(observation.endpoint);
 			apiCalls.add(1, {
 				method: observation.method,
-				endpoint: observation.endpoint,
+				endpoint: metricEndpoint,
 				status_code: observation.status,
 				retry_count_bucket: retryCountBucket,
 				outcome: observation.outcome,
@@ -5260,7 +5242,7 @@ function createNodeHevyClientOptions() {
 			});
 			apiDuration.record(observation.durationMs, {
 				method: observation.method,
-				endpoint: observation.endpoint,
+				endpoint: metricEndpoint,
 				retry_count_bucket: retryCountBucket,
 				outcome: observation.outcome,
 				transport: getCurrentMcpTransport(),
@@ -5370,19 +5352,6 @@ function setResultAttributes(span, completion) {
 		for (const [resource, pageCount] of Object.entries(summary.workflow.pagination)) if (WORKFLOW_PAGINATION_RESOURCES.has(resource) && Number.isSafeInteger(pageCount) && pageCount >= 0) span.setAttribute(`workflow.pagination.${resource}.pages`, pageCount);
 	}
 }
-function resultMetricAttributes(completion) {
-	const result = completion.result;
-	if (!result) return {};
-	const attributes = {
-		"mcp.tool.result.has_structured_content": result.hasStructuredContent,
-		"mcp.tool.result.content_count_bucket": result.contentCountBucket
-	};
-	const summary = result.summary;
-	if (summary?.itemCountBucket) attributes["mcp.tool.result.item_count_bucket"] = summary.itemCountBucket;
-	if (summary?.exerciseCountBucket) attributes["mcp.tool.result.exercise_count_bucket"] = summary.exerciseCountBucket;
-	if (summary?.setCountBucket) attributes["mcp.tool.result.set_count_bucket"] = summary.setCountBucket;
-	return attributes;
-}
 function setSafeErrorAttributes(span, invocation, completion) {
 	const diagnostic = completion.error;
 	const errorType = completion.errorType ?? "UNKNOWN_ERROR";
@@ -5504,7 +5473,6 @@ function createNodeToolObserver() {
 					}
 					bestEffort(() => toolDuration.record(durationMs, {
 						...metrics,
-						...resultMetricAttributes(nextCompletion),
 						is_error: String(isError),
 						outcome: nextCompletion.outcome
 					}));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "hevy-mcp",
-	"version": "5.0.5",
+	"version": "5.0.6",
 	"private": false,
 	"description": "A Model Context Protocol (MCP) server implementation that interfaces with the Hevy fitness tracking app and its API.",
 	"repository": {
@@ -43,7 +43,7 @@
 		"@opentelemetry/sdk-metrics": "^2.10.0",
 		"@opentelemetry/sdk-trace-base": "^2.10.0",
 		"@opentelemetry/sdk-trace-node": "^2.10.0",
-		"@sentry/node": "^10.68.0",
+		"@sentry/node": "^10.69.0",
 		"@sentry/opentelemetry": "^10.68.0",
 		"semver": "^7.8.5",
 		"zod": "^4.4.3"
@@ -51,7 +51,7 @@
 	"devDependencies": {
 		"@hevy-mcp/core": "*",
 		"@hevy-mcp/hevy-client": "*",
-		"@types/node": "^26.1.1",
+		"@types/node": "^26.1.2",
 		"cross-env": "^10.1.0",
 		"tsdown": "^0.22.14",
 		"typescript": "^7.0.2"

package/server.json

@@ -7,12 +7,12 @@
 		"url": "https://github.com/chrisdoc/hevy-mcp",
 		"source": "github"
 	},
-	"version": "5.0.5",
+	"version": "5.0.6",
 	"packages": [
 		{
 			"registryType": "npm",
 			"identifier": "hevy-mcp",
-			"version": "5.0.5",
+			"version": "5.0.6",
 			"transport": {
 				"type": "stdio"
 			},