hevy-mcp 6.1.3 → 6.1.4

package/README.md

@@ -67,8 +67,8 @@ Try asking:
 
 ### 1. Get your Hevy API key
 
-Create an API key in Hevy, then keep it somewhere secure. API access currently
-requires a Hevy PRO subscription.
+Create an API key in [Hevy's API settings](https://www.hevyapp.com/api), then
+keep it somewhere secure. API access currently requires a Hevy PRO subscription.
 
 ### 2. Connect `hevy-mcp` to your client
 
@@ -557,8 +557,11 @@ metadata, and unnormalized endpoint paths remain prohibited.
   `npx -y hevy-mcp --version` in a terminal.
 - **Codex cannot see the server:** run `codex mcp list`, then start a new Codex
   session after confirming the `hevy` entry exists.
-- **Hosted authentication fails:** confirm the key is active, belongs to a Hevy
-  PRO account, and is sent as `Authorization: Bearer <HEVY_API_KEY>`.
+- **Hevy API returns 401:** the key is invalid, expired, revoked, or
+  misconfigured. Verify or create an active key at
+  [Hevy's API settings](https://www.hevyapp.com/api), then restart the client.
+- **Hosted authentication fails:** confirm the key belongs to a Hevy PRO
+  account and is sent as `Authorization: Bearer <HEVY_API_KEY>`.
 - **Local authentication fails:** confirm the key is active and available to the
   MCP child process as `HEVY_API_KEY`.
 - **Need diagnostics:** set `HEVY_MCP_DEBUG=1`. Diagnostic output goes to stderr

package/dist/cli.mjs

@@ -8,8 +8,8 @@
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "d805d34c-9cce-4622-8b67-728aa0cacb5d", e._sentryDebugIdIdentifier = "sentry-dbid-d805d34c-9cce-4622-8b67-728aa0cacb5d");
 	} catch (e) {}
 })();
-import { i as flushTelemetry, r as MissingHevyApiKeyError, t as runServer } from "./runtime-BefToK0H.mjs";
-import { a as createSafeErrorDiagnostic } from "./src-Cb_gblD1.mjs";
+import { i as flushTelemetry, r as MissingHevyApiKeyError, t as runServer } from "./runtime-CokZbz-j.mjs";
+import { a as createSafeErrorDiagnostic } from "./src-DCTiE-_b.mjs";
 //#region src/cli.ts
 runServer().catch(async (error) => {
 	if (error instanceof MissingHevyApiKeyError) console.error(error.message);

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // Generated with tsdown
 // https://tsdown.dev
-import { o as createHevyClient, t as createHevyMcpServer } from "./src-Cb_gblD1.mjs";
+import { o as createHevyClient, t as createHevyMcpServer } from "./src-DCTiE-_b.mjs";
 import { z } from "zod";
 //#region src/index.ts
 const serverConfigSchema = z.object({ apiKey: z.string().min(1, "Hevy API key is required").describe("Your Hevy API key (available in the Hevy app settings).") });
@@ -32,7 +32,7 @@ function createNodeMcpServer({ apiKey }, _transport = "stdio", lifecycleSignal)
 * does not evaluate the runtime bootstrap; it is loaded only when invoked.
 */
 async function runStdioServer() {
-	const { runStdioServer: run } = await import("./runtime-BefToK0H.mjs").then((n) => n.n);
+	const { runStdioServer: run } = await import("./runtime-CokZbz-j.mjs").then((n) => n.n);
 	return run();
 }
 /**
@@ -40,7 +40,7 @@ async function runStdioServer() {
 * does not evaluate the runtime bootstrap; it is loaded only when invoked.
 */
 async function runServer() {
-	const { runServer: run } = await import("./runtime-BefToK0H.mjs").then((n) => n.n);
+	const { runServer: run } = await import("./runtime-CokZbz-j.mjs").then((n) => n.n);
 	return run();
 }
 //#endregion

package/dist/{runtime-BefToK0H.mjs → runtime-CokZbz-j.mjs}

@@ -5,12 +5,13 @@
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
 		var n = new e.Error().stack;
-		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "24c53fab-f96f-4e0b-bd15-3e11b3118c86", e._sentryDebugIdIdentifier = "sentry-dbid-24c53fab-f96f-4e0b-bd15-3e11b3118c86");
+		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "baee8222-0612-498c-a1f8-cf149a59a78b", e._sentryDebugIdIdentifier = "sentry-dbid-baee8222-0612-498c-a1f8-cf149a59a78b");
 	} catch (e) {}
 })();
-import { a as createSafeErrorDiagnostic, c as diagnosticEndpointIdentity, i as bucketCount, l as metricEndpointIdentity, n as createExecutionProjection, o as createHevyClient, r as mergeAbortSignals, s as SAFE_OBSERVATION_CODES, t as createHevyMcpServer, u as isHevyHttpError } from "./src-Cb_gblD1.mjs";
+import { a as createSafeErrorDiagnostic, c as diagnosticEndpointIdentity, i as bucketCount, l as metricEndpointIdentity, n as createExecutionProjection, o as createHevyClient, r as mergeAbortSignals, s as SAFE_OBSERVATION_CODES, t as createHevyMcpServer, u as isHevyHttpError } from "./src-DCTiE-_b.mjs";
 import { ZodError, z } from "zod";
 import { deserializeMessage } from "@modelcontextprotocol/server";
+import * as crypto from "node:crypto";
 import { createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import * as Sentry from "@sentry/node";
 import { SpanStatusCode, context, metrics, trace } from "@opentelemetry/api";
@@ -393,18 +394,24 @@ function parseBuildString(value, fallback) {
 	return z.string().parse(value ?? fallback);
 }
 const name$1 = parseBuildString(readBuildGlobal(() => "hevy-mcp"), "hevy-mcp");
-const version$1 = parseBuildString(readBuildGlobal(() => "6.1.3"), "dev");
+const version$1 = parseBuildString(readBuildGlobal(() => "6.1.4"), "dev");
 const telemetryEnabled = process.env.HEVY_MCP_TELEMETRY !== "0";
 const collectorToken = z.string().safeParse(readBuildGlobal(() => "NH9vOela-HYreQxAbJa68cjEmORoEKM57EvneUDVcOo")).data ?? process.env.OTEL_COLLECTOR_TOKEN ?? "";
 const COLLECTOR_ENDPOINT = "https://otel.chrisdoc.dev/v1";
 const DEFAULT_SENTRY_DSN = "https://ce696d8333b507acbf5203eb877bce0f@o4508975499575296.ingest.de.sentry.io/4509049671647312";
 const sentryRelease = process.env.SENTRY_RELEASE ?? `${name$1}@${version$1}`;
+/** Hex-encode bytes without relying on Buffer typings that vary across @types/node releases. */
+function toHex$1(bytes) {
+	let hex = "";
+	for (const byte of bytes) hex += byte.toString(16).padStart(2, "0");
+	return hex;
+}
 function createServiceInstanceId(generate = randomUUID) {
 	try {
 		const generated = generate();
 		if (generated.length > 0 && generated.length <= 128) return generated;
 	} catch {}
-	return randomBytes(16).toString("hex");
+	return toHex$1(randomBytes(16));
 }
 const resource = resourceFromAttributes({
 	"service.name": name$1,
@@ -609,6 +616,19 @@ const UNKNOWN_METADATA = "unknown";
 const MAX_METADATA_LENGTH = 64;
 const SAFE_METADATA_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._+:/@-]{0,63}$/u;
 const contextStorage = new AsyncLocalStorage();
+/** Hex-encode bytes without relying on Buffer typings that vary across @types/node releases. */
+function toHex(bytes) {
+	let hex = "";
+	for (const byte of bytes) hex += byte.toString(16).padStart(2, "0");
+	return hex;
+}
+function generateFallbackTelemetrySessionId() {
+	return `${Date.now().toString(36)}-${toHex(crypto.randomBytes(16))}`;
+}
+const parsedRandomUUID = z.function().output(z.string()).safeParse(crypto.randomUUID);
+function generateTelemetrySessionId() {
+	return parsedRandomUUID.success ? parsedRandomUUID.data() : generateFallbackTelemetrySessionId();
+}
 let activeStdioSession;
 function isObject$3(value) {
 	return z.object({}).passthrough().safeParse(value).success;
@@ -655,7 +675,7 @@ function createMcpSessionContext(message, transport = "stdio", options = {}) {
 		toolCalls: 0,
 		hadToolFailure: false,
 		transport,
-		telemetrySessionId: normalizedOptions.telemetrySessionId ?? (normalizedOptions.generateTelemetrySessionId ?? randomUUID)()
+		telemetrySessionId: normalizedOptions.telemetrySessionId ?? (normalizedOptions.generateTelemetrySessionId ?? generateTelemetrySessionId)()
 	};
 }
 function runWithMcpSessionContext(context, callback) {
@@ -958,7 +978,7 @@ async function startStreamableHttpServer(options, apiKey, createMcpServer, confi
 	const wildcard = options.host === "0.0.0.0" || options.host === "::" || options.host === "[::]";
 	const loopback = isLoopbackHost(options.host);
 	const bearerToken = process.env[HTTP_BEARER_TOKEN];
-	if (!loopback && !bearerToken) throw new Error(`Non-loopback HTTP mode requires ${HTTP_BEARER_TOKEN} to protect the shared Hevy account.`);
+	if (!loopback && !bearerToken) throw new Error(`Non-loopback HTTP mode requires ${HTTP_BEARER_TOKEN} to protect the shared Hevy account. Set ${HTTP_BEARER_TOKEN} to a secure random value, then retry.`);
 	const sessions = /* @__PURE__ */ new Map();
 	const pendingSessions = /* @__PURE__ */ new Set();
 	const initializationControllers = /* @__PURE__ */ new Set();
@@ -2679,4 +2699,4 @@ async function runServer() {
 //#endregion
 export { flushTelemetry as i, runtime_exports as n, MissingHevyApiKeyError as r, runServer as t };
 
-//# sourceMappingURL=runtime-BefToK0H.mjs.map
+//# sourceMappingURL=runtime-CokZbz-j.mjs.map

package/dist/{src-Cb_gblD1.mjs → src-DCTiE-_b.mjs}

@@ -4,6 +4,100 @@
 import { z } from "zod";
 import { z as z$1 } from "zod/v4";
 import { McpServer } from "@modelcontextprotocol/server";
+//#region ../core/src/utils/type-predicates.ts
+const stringSchema$2 = z.string();
+const numberSchema$1 = z.number();
+const booleanSchema = z.boolean();
+const objectSchema$2 = z.object({}).passthrough();
+const functionSchema = z.function();
+function isString$2(value) {
+	return stringSchema$2.safeParse(value).success;
+}
+function isFiniteNumber(value) {
+	return numberSchema$1.safeParse(value).success && Number.isFinite(value);
+}
+function isBoolean(value) {
+	return booleanSchema.safeParse(value).success;
+}
+function isObject$2(value) {
+	return value !== null && objectSchema$2.safeParse(value).success;
+}
+function isFunction(value) {
+	return functionSchema.safeParse(value).success;
+}
+//#endregion
+//#region ../core/src/utils/compact-json-schema.ts
+function isRecord(value) {
+	return isObject$2(value) && !Array.isArray(value);
+}
+function isNullSchema(value) {
+	return isRecord(value) && value.type === "null" && Object.keys(value).length === 1;
+}
+let conversionCount = 0;
+function compactNullableSchema(value) {
+	if (Array.isArray(value)) return value.map(compactNullableSchema);
+	if (!isRecord(value)) return value;
+	const anyOf = value.anyOf;
+	if (Array.isArray(anyOf) && anyOf.length === 2) {
+		const nullableBranch = anyOf.find(isNullSchema);
+		const valueBranch = anyOf.find((branch) => !isNullSchema(branch));
+		if (nullableBranch !== void 0 && isRecord(valueBranch) && isString$2(valueBranch.type)) {
+			const { anyOf: _anyOf, ...metadata } = value;
+			return compactNullableSchema({
+				...valueBranch,
+				...metadata,
+				type: [valueBranch.type, "null"]
+			});
+		}
+	}
+	return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, compactNullableSchema(nested)]));
+}
+function omitOutputObjectRestrictions(value) {
+	if (Array.isArray(value)) return value.map(omitOutputObjectRestrictions);
+	if (!isRecord(value)) return value;
+	return Object.fromEntries(Object.entries(value).filter(([key, nested]) => key !== "additionalProperties" || nested !== false).map(([key, nested]) => [key, omitOutputObjectRestrictions(nested)]));
+}
+function convertSchema(schema, io) {
+	conversionCount += 1;
+	const converted = z.toJSONSchema(schema, {
+		target: "draft-2020-12",
+		io
+	});
+	if (!isRecord(converted)) throw new Error("Zod emitted a non-object root schema");
+	const compacted = compactNullableSchema(converted);
+	if (!isRecord(compacted)) throw new Error("Nullable schema compaction changed the root schema");
+	const output = io === "output" ? omitOutputObjectRestrictions(compacted) : compacted;
+	if (!isRecord(output)) throw new Error("Output schema compaction changed the root schema");
+	delete output.$schema;
+	return output;
+}
+/**
+* Keep Zod validation while advertising a compact JSON Schema.
+*
+* Zod emits nullable values as `anyOf`; draft 2020-12 also permits a type
+* array. The MCP wire envelope does not need a repeated `$schema` marker, and
+* structured output is validated by the original Zod schema before sending.
+*/
+function compactJsonSchema(schema) {
+	let inputSchema;
+	let outputSchema;
+	Object.defineProperty(schema["~standard"], "jsonSchema", {
+		configurable: true,
+		value: {
+			input: () => {
+				inputSchema ??= convertSchema(schema, "input");
+				return inputSchema;
+			},
+			output: () => {
+				outputSchema ??= convertSchema(schema, "output");
+				return outputSchema;
+			}
+		},
+		writable: true
+	});
+	return schema;
+}
+//#endregion
 //#region ../hevy-client/src/generated/client/schemas/userInfoSchema.ts
 /**
 * Generated by Kubb (https://kubb.dev/).
@@ -292,13 +386,13 @@ z$1.any();
 z$1.lazy(() => getV1WorkoutsWorkoutid200Schema);
 //#endregion
 //#region ../hevy-client/src/response-error.ts
-const objectSchema$2 = z.object({}).passthrough();
-const stringSchema$2 = z.string();
-function isObject$2(value) {
-	return objectSchema$2.safeParse(value).success;
+const objectSchema$1 = z.object({}).passthrough();
+const stringSchema$1 = z.string();
+function isObject$1(value) {
+	return objectSchema$1.safeParse(value).success;
 }
-function isString$2(value) {
-	return stringSchema$2.safeParse(value).success;
+function isString$1(value) {
+	return stringSchema$1.safeParse(value).success;
 }
 const MAX_RESPONSE_ERROR_INPUT_LENGTH = 4096;
 const MAX_RESPONSE_ERROR_LENGTH = 256;
@@ -316,7 +410,7 @@ const HTTP_URL = /\bhttps?:\/\/[^\s<>"']+/gi;
 const EMAIL = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
 const UUID = /\b[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\b/gi;
 function isResponseErrorBody(value) {
-	return isObject$2(value);
+	return isObject$1(value);
 }
 function ownValue(value, key) {
 	const descriptor = Object.getOwnPropertyDescriptor(value, key);
@@ -326,12 +420,12 @@ function responseErrorText(value) {
 	if (!isResponseErrorBody(value)) return void 0;
 	for (const key of RESPONSE_ERROR_KEYS) {
 		const candidate = ownValue(value, key);
-		if (isString$2(candidate)) return candidate;
+		if (isString$1(candidate)) return candidate;
 		if (!isResponseErrorBody(candidate)) continue;
 		const nestedMessage = ownValue(candidate, "message");
-		if (isString$2(nestedMessage)) return nestedMessage;
+		if (isString$1(nestedMessage)) return nestedMessage;
 		const nestedDetail = ownValue(candidate, "detail");
-		if (isString$2(nestedDetail)) return nestedDetail;
+		if (isString$1(nestedDetail)) return nestedDetail;
 	}
 }
 function removeControlCharacters(value) {
@@ -1280,13 +1374,13 @@ function isAbortLike(error) {
 }
 //#endregion
 //#region ../hevy-client/src/hevy-client-kubb.ts
-const objectSchema$1 = z.object({}).passthrough();
-const numberSchema$1 = z.number();
-const stringSchema$1 = z.string();
-const isObject$1 = (value) => objectSchema$1.safeParse(value).success;
-const isNumber = (value) => numberSchema$1.safeParse(value).success;
-const isString$1 = (value) => stringSchema$1.safeParse(value).success;
-const DEFAULT_API_TIMEOUT_MS = 3e4;
+const objectSchema = z.object({}).passthrough();
+const numberSchema = z.number();
+const stringSchema = z.string();
+const isObject = (value) => objectSchema.safeParse(value).success;
+const isNumber = (value) => numberSchema.safeParse(value).success;
+const isString = (value) => stringSchema.safeParse(value).success;
+const DEFAULT_API_TIMEOUT_MS = 6e4;
 const RETRY_BACKOFF_MAX_MS = 5e3;
 const SAFE_OBSERVATION_CODES = /* @__PURE__ */ new Set([
 	"EAI_AGAIN",
@@ -1373,7 +1467,7 @@ function getRequestContext(config) {
 	return {
 		method: (config.method ?? "GET").toUpperCase(),
 		endpoint: canonicalEndpointIdentity(config.url ?? ""),
-		page: config.params !== null && isObject$1(config.params) && "page" in config.params && isNumber(config.params.page) ? config.params.page : void 0
+		page: config.params !== null && isObject(config.params) && "page" in config.params && isNumber(config.params.page) ? config.params.page : void 0
 	};
 }
 function emitClientLog(logger, message) {
@@ -1447,7 +1541,7 @@ function buildUrl(baseUrl, config) {
 		code: "HEVY_INVALID_ENDPOINT"
 	});
 	const url = new URL(config.url, baseUrl);
-	if (config.params && isObject$1(config.params)) {
+	if (config.params && isObject(config.params)) {
 		for (const [key, value] of Object.entries(config.params)) if (value !== void 0) url.searchParams.append(key, value === null ? "null" : String(value));
 	}
 	return url;
@@ -1691,7 +1785,7 @@ function createFailureObservation(options, failure, error, commitState, safeToRe
 		safeToRetry: safeToRetry && !retryExhausted,
 		error: {
 			status: error.status,
-			code: isString$1(error.code) && SAFE_OBSERVATION_CODES.has(error.code) ? error.code : void 0,
+			code: isString(error.code) && SAFE_OBSERVATION_CODES.has(error.code) ? error.code : void 0,
 			category: error.status === void 0 ? "NetworkError" : "HevyHttpError"
 		}
 	};
@@ -1922,7 +2016,10 @@ function createClient(apiKey, baseUrl = "https://api.hevyapp.com", options = {})
 		getWorkoutEvents: (params, options) => getV1WorkoutsEvents(headers, params, requestOptions(options, client)),
 		getRoutines: (params, options) => getV1Routines(headers, params, requestOptions(options, client)),
 		getRoutineById: (routineId, options) => getV1RoutinesRoutineid(routineId, headers, requestOptions(options, client)),
-		createRoutine: (data, options) => postV1Routines(data, headers, requestOptions(options, client)),
+		createRoutine: async (data, options) => {
+			const response = await postV1Routines(data, headers, requestOptions(options, client));
+			return Object.keys(response).length === 0 ? void 0 : response;
+		},
 		updateRoutine: (routineId, data, options) => putV1RoutinesRoutineid(routineId, data, headers, requestOptions(options, client)),
 		getExerciseTemplates: (params, options) => getV1ExerciseTemplates(headers, params, requestOptions(options, client)),
 		getExerciseTemplate: (templateId, options) => getV1ExerciseTemplatesExercisetemplateid(templateId, headers, requestOptions(options, client)),
@@ -1944,28 +2041,6 @@ function createHevyClient({ apiKey, baseUrl, ...options }) {
 	return createClient(apiKey, baseUrl, options);
 }
 //#endregion
-//#region ../core/src/utils/type-predicates.ts
-const stringSchema = z.string();
-const numberSchema = z.number();
-const booleanSchema = z.boolean();
-const objectSchema = z.object({}).passthrough();
-const functionSchema = z.function();
-function isString(value) {
-	return stringSchema.safeParse(value).success;
-}
-function isFiniteNumber(value) {
-	return numberSchema.safeParse(value).success && Number.isFinite(value);
-}
-function isBoolean(value) {
-	return booleanSchema.safeParse(value).success;
-}
-function isObject(value) {
-	return value !== null && objectSchema.safeParse(value).success;
-}
-function isFunction(value) {
-	return functionSchema.safeParse(value).success;
-}
-//#endregion
 //#region ../core/src/utils/error-policy.ts
 const ABORT_TIMEOUT_METADATA = {
 	AbortError: {
@@ -2025,7 +2100,7 @@ const SAFE_SOURCE_SUFFIXES = [
 const PROJECT_PATH_MARKER = "/hevy-mcp/";
 const MAX_STACK_POSITION = 1e6;
 function normalizeHeaderValue(value) {
-	if (isString(value)) {
+	if (isString$2(value)) {
 		const trimmed = value.trim();
 		return trimmed.length > 0 ? trimmed : void 0;
 	}
@@ -2034,7 +2109,7 @@ function normalizeHeaderValue(value) {
 }
 function getHeaderValue(headers, key) {
 	try {
-		if (!isObject(headers)) return void 0;
+		if (!isObject$2(headers)) return void 0;
 		if ("get" in headers && isFunction(headers.get)) return normalizeHeaderValue(headers.get(key));
 		const headerRecord = headers;
 		return normalizeHeaderValue(headerRecord[key] ?? headerRecord[key.toLowerCase()] ?? headerRecord[key.toUpperCase()]);
@@ -2054,7 +2129,7 @@ function extractErrorStatus(error) {
 /** Return whether the client exhausted its bounded transient retry policy. */
 function isRetryExhausted(error) {
 	try {
-		return !!error && isObject(error) && error.hevyRetryExhausted === true;
+		return !!error && isObject$2(error) && error.hevyRetryExhausted === true;
 	} catch {
 		return false;
 	}
@@ -2075,11 +2150,12 @@ function getRetryAfterSeconds(error, now = Date.now()) {
 	}
 }
 /** Map bounded Hevy HTTP statuses to stable user-facing messages. */
-function getStatusErrorMessage(status) {
+function getStatusErrorMessage(status, method, endpoint) {
+	if (status === 404 && method?.toUpperCase() === "PUT" && endpoint === "/v1/routines/:routineId") return "The requested routine was not found in Hevy. It may have been deleted or the routine ID is incorrect.";
+	if (status === 400 || status === 422) return "The request failed Hevy validation. Check the field values and try again.";
 	if (status === 401 || status === 403) return "The Hevy API key is invalid or has expired. Check HEVY_API_KEY.";
 	if (status === 404) return "The requested resource was not found in Hevy.";
-	if (status === 409) return "A conflict occurred (e.g., a body measurement already exists for this date). Use the update tool instead.";
-	if (status === 422) return "The request failed Hevy validation. Check the field values and try again.";
+	if (status === 409) return "A conflict occurred because the resource already exists or conflicts with the current server state. Check whether it already exists and use the update tool when appropriate.";
 	if (status === 429) return "Rate limited by Hevy. Please wait and retry.";
 	if (status !== void 0 && status >= 500 && status <= 599) return "Hevy API experienced an error. Please retry later.";
 	return null;
@@ -2096,7 +2172,7 @@ function getRateLimitMessage(error) {
 function getRetryExhaustedMessage(error) {
 	let retryCount;
 	try {
-		retryCount = isObject(error) ? error.hevyRetryCount : void 0;
+		retryCount = isObject$2(error) ? error.hevyRetryCount : void 0;
 	} catch {
 		retryCount = void 0;
 	}
@@ -2142,9 +2218,9 @@ function classifyError(error) {
 function getSafeCode(error) {
 	const abortTimeout = getAbortTimeoutErrorMetadata(error);
 	if (abortTimeout) return abortTimeout.code;
-	if (!isObject(error) || !("code" in error)) return;
+	if (!isObject$2(error) || !("code" in error)) return;
 	const code = error.code;
-	return isString(code) && SAFE_ERROR_CODES.has(code) ? code : void 0;
+	return isString$2(code) && SAFE_ERROR_CODES.has(code) ? code : void 0;
 }
 function getSafeMethod(error) {
 	if (!isHevyHttpError(error)) return void 0;
@@ -2174,7 +2250,7 @@ function getExecutionFields(error) {
 	return fields;
 }
 function parseSafeStackFrames(error) {
-	if (!(error instanceof Error) || !isString(error.stack)) return;
+	if (!(error instanceof Error) || !isString$2(error.stack)) return;
 	const frames = [];
 	for (const frameLine of error.stack.split(/\r?\n/).slice(1)) {
 		const match = /^\s{4}at (?:[^()\r\n]+ \()?([^()\s\r\n]+):(\d+):(\d+)\)?$/.exec(frameLine);
@@ -2219,7 +2295,7 @@ function createSafeErrorDiagnostic(error) {
 /** Resolve all bounded policy outputs used by MCP, telemetry, and reporting adapters. */
 function resolveErrorPolicy(error, defaultMessage, notInitializedMessage) {
 	const diagnostic = createSafeErrorDiagnostic(error);
-	let message = getStatusErrorMessage(diagnostic.status) ?? (diagnostic.status !== void 0 ? `Hevy API request failed (HTTP ${diagnostic.status}).` : defaultMessage);
+	let message = getStatusErrorMessage(diagnostic.status, diagnostic.method, diagnostic.endpoint) ?? (diagnostic.status !== void 0 ? `Hevy API request failed (HTTP ${diagnostic.status}).` : defaultMessage);
 	let isNotInitialized = false;
 	try {
 		isNotInitialized = Boolean(notInitializedMessage) && error instanceof Error && error.message === notInitializedMessage;
@@ -2352,6 +2428,13 @@ const formattedRoutineSchema = z.object({
 	updated_at: z.string().optional(),
 	exercises: z.array(formattedRoutineExerciseSchema).optional()
 });
+const createRoutineOutputSchema = {
+	created: z.literal(true),
+	commit_state: z.literal("confirmed"),
+	routine: formattedRoutineSchema.nullable(),
+	routine_id: z.string().nullable(),
+	uses_rep_ranges: z.boolean()
+};
 const formattedRoutineFolderSchema = z.object({
 	id: z.number().optional(),
 	title: z.string().optional(),
@@ -2970,10 +3053,19 @@ const compactRoutinesResponse = defineStructuredResponseContract({
 const createWorkoutResponse = defineJsonResponseContract((workout) => workout ? { json: projectWorkout(workout) } : { text: "Failed to create workout: Server returned no data" }, (workout) => workoutResultTelemetry(workout));
 const updateWorkoutResponse = defineJsonResponseContract((data) => data.workout ? { json: projectWorkout(data.workout) } : { text: `Failed to update workout with ID ${data.workout_id}` }, (data) => workoutResultTelemetry(data.workout));
 const repRangeDisplayWarningText = "Note: Hevy's public API stores rep ranges (rep_range), but the Hevy apps may not display them because they rely on an internal-only exercise field (input_modifier). See https://github.com/chrisdoc/hevy-mcp/issues/261 for details/workarounds.";
-const createRoutineResponse = defineJsonResponseContract((data) => data.routine ? {
-	json: projectRoutine(data.routine),
-	additionalText: data.usesRepRanges ? [repRangeDisplayWarningText] : []
-} : { text: "Failed to create routine: Server returned no data" }, (data) => routineResultTelemetry(data.routine));
+const createRoutineResponse = defineStructuredResponseContract({
+	outputSchema: createRoutineOutputSchema,
+	normalize: (data) => ({
+		created: true,
+		commit_state: "confirmed",
+		routine: data.routine ? projectRoutine(data.routine) : null,
+		routine_id: data.routine?.id ?? null,
+		uses_rep_ranges: data.usesRepRanges
+	}),
+	legacyJson: (output) => output,
+	additionalText: (_data, output) => output.uses_rep_ranges ? [repRangeDisplayWarningText] : [],
+	telemetry: (data) => routineResultTelemetry(data.routine)
+});
 const updateRoutineResponse = defineJsonResponseContract((data) => data.routine ? {
 	json: projectRoutine(data.routine),
 	additionalText: data.usesRepRanges ? [repRangeDisplayWarningText] : []
@@ -2986,76 +3078,6 @@ const createRoutineFolderResponse = defineJsonResponseContract((folder) => folde
 const createBodyMeasurementResponse = defineJsonResponseContract((date) => ({ text: `Body measurement for ${date} created successfully.` }), () => ({ itemCountBucket: "1" }));
 const updateBodyMeasurementResponse = defineJsonResponseContract((date) => ({ text: `Body measurement for ${date} updated successfully.` }), () => ({ itemCountBucket: "1" }));
 //#endregion
-//#region ../core/src/utils/compact-json-schema.ts
-function isRecord(value) {
-	return isObject(value) && !Array.isArray(value);
-}
-function isNullSchema(value) {
-	return isRecord(value) && value.type === "null" && Object.keys(value).length === 1;
-}
-function compactNullableSchema(value) {
-	if (Array.isArray(value)) return value.map(compactNullableSchema);
-	if (!isRecord(value)) return value;
-	const anyOf = value.anyOf;
-	if (Array.isArray(anyOf) && anyOf.length === 2) {
-		const nullableBranch = anyOf.find(isNullSchema);
-		const valueBranch = anyOf.find((branch) => !isNullSchema(branch));
-		if (nullableBranch !== void 0 && isRecord(valueBranch) && isString(valueBranch.type)) {
-			const { anyOf: _anyOf, ...metadata } = value;
-			return compactNullableSchema({
-				...valueBranch,
-				...metadata,
-				type: [valueBranch.type, "null"]
-			});
-		}
-	}
-	return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, compactNullableSchema(nested)]));
-}
-function omitOutputObjectRestrictions(value) {
-	if (Array.isArray(value)) return value.map(omitOutputObjectRestrictions);
-	if (!isRecord(value)) return value;
-	return Object.fromEntries(Object.entries(value).filter(([key, nested]) => key !== "additionalProperties" || nested !== false).map(([key, nested]) => [key, omitOutputObjectRestrictions(nested)]));
-}
-function convertSchema(schema, io) {
-	const converted = z.toJSONSchema(schema, {
-		target: "draft-2020-12",
-		io
-	});
-	if (!isRecord(converted)) throw new Error("Zod emitted a non-object root schema");
-	const compacted = compactNullableSchema(converted);
-	if (!isRecord(compacted)) throw new Error("Nullable schema compaction changed the root schema");
-	const output = io === "output" ? omitOutputObjectRestrictions(compacted) : compacted;
-	if (!isRecord(output)) throw new Error("Output schema compaction changed the root schema");
-	delete output.$schema;
-	return output;
-}
-/**
-* Keep Zod validation while advertising a compact JSON Schema.
-*
-* Zod emits nullable values as `anyOf`; draft 2020-12 also permits a type
-* array. The MCP wire envelope does not need a repeated `$schema` marker, and
-* structured output is validated by the original Zod schema before sending.
-*/
-function compactJsonSchema(schema) {
-	let inputSchema;
-	let outputSchema;
-	Object.defineProperty(schema["~standard"], "jsonSchema", {
-		configurable: true,
-		value: {
-			input: () => {
-				inputSchema ??= convertSchema(schema, "input");
-				return inputSchema;
-			},
-			output: () => {
-				outputSchema ??= convertSchema(schema, "output");
-				return outputSchema;
-			}
-		},
-		writable: true
-	});
-	return schema;
-}
-//#endregion
 //#region ../core/src/utils/tool-helpers.ts
 /**
 * Type-safe utilities for MCP tool handlers
@@ -3100,21 +3122,43 @@ function createTypedToolHandler(schema, handler) {
 }
 //#endregion
 //#region ../core/src/tools/define-tool.ts
+/**
+* One-time-per-isolate registration metadata for each tool definition.
+*
+* Building a tool's compact JSON Schema (and the SDK's eager wire conversion
+* of the `compactJsonSchema`-wrapped schema on registration) is the dominant
+* CPU cost when constructing an MCP server. Tool definitions are module-level
+* constants, so this metadata can be computed once and shared by every server
+* a single isolate builds. The SDK's `registerTool` reads the schema strictly
+* through the Standard Schema interface and never mutates it, so sharing the
+* memoized config across concurrent servers is safe.
+*
+* Keep the memo lazy: CLI and test processes that never build a Hevy server
+* pay nothing. Isolate-based edge runtimes that want the one-time conversion
+* moved into module-scope (outside request CPU) call `preloadHevyToolSchemas`.
+*/
+const registeredToolConfigCache = /* @__PURE__ */ new WeakMap();
+function getRegisteredToolConfig(definition) {
+	const cached = registeredToolConfigCache.get(definition);
+	if (cached) return cached;
+	const config = {
+		description: definition.description,
+		inputSchema: compactJsonSchema(z.strictObject(definition.inputSchema)),
+		annotations: definition.annotations
+	};
+	if (definition.outputSchema) config.outputSchema = compactJsonSchema(z.object(definition.outputSchema));
+	registeredToolConfigCache.set(definition, config);
+	return config;
+}
 function registerToolDefinition(server, runtime, definition) {
 	const directHandler = createTypedToolHandler(definition.inputSchema, async (args, requestContext) => respond(definition.responseContract, await definition.execute(requestContext ? runtime.forExecution(requestContext) : runtime, args)));
-	const callback = runtime.createHandler(directHandler, definition.name, {
+	const handler = runtime.createHandler(directHandler, definition.name, {
 		feature: definition.feature,
 		kind: definition.kind,
 		operation: definition.operation
 	});
-	const inputSchema = compactJsonSchema(z.strictObject(definition.inputSchema));
-	const config = {
-		description: definition.description,
-		inputSchema,
-		annotations: definition.annotations
-	};
-	if (definition.kind === "read") config.outputSchema = compactJsonSchema(z.object(definition.outputSchema));
-	server.registerTool(definition.name, config, (args, context) => callback(z.strictObject(definition.inputSchema).parse(args), context ? {
+	const config = getRegisteredToolConfig(definition);
+	server.registerTool(definition.name, config, (args, context) => handler(z.strictObject(definition.inputSchema).parse(args), context ? {
 		signal: context.mcpReq.signal,
 		requestId: String(context.mcpReq.id)
 	} : void 0));
@@ -3165,7 +3209,7 @@ function updateAnnotations(title) {
 * @returns The parsed array if val is a valid JSON string, otherwise returns val unchanged
 */
 function parseJsonArray(val) {
-	if (isString(val)) try {
+	if (isString$2(val)) try {
 		return JSON.parse(val);
 	} catch {
 		return val;
@@ -3176,7 +3220,7 @@ function parseJsonArray(val) {
 //#region ../core/src/utils/schemas.ts
 function coerceNullishNumberInput(value) {
 	if (value === null || value === void 0) return value;
-	if (!isString(value)) return value;
+	if (!isString$2(value)) return value;
 	const trimmed = value.trim();
 	if (trimmed === "") return;
 	const lowered = trimmed.toLowerCase();
@@ -3488,7 +3532,7 @@ const FETCHED_ISO_TIMESTAMP = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(
 * supplied values remain strict.
 */
 function normalizeFetchedWorkoutTimestamp(value) {
-	if (!isString(value)) return value;
+	if (!isString$2(value)) return value;
 	const match = FETCHED_ISO_TIMESTAMP.exec(value);
 	if (!match) return value;
 	const [, year, month, day, hour, minute, second, offset] = match;
@@ -3772,6 +3816,7 @@ const routineToolDefinitions = [
 		description: "Writes a reusable routine; use create-workout for completed sessions. Retries can create duplicates.",
 		inputSchema: createRoutineInputFields,
 		kind: "write",
+		outputSchema: createRoutineOutputSchema,
 		annotations: createAnnotations("Create Routine"),
 		responseContract: createRoutineResponse,
 		execute: async (runtime, args) => {
@@ -4403,7 +4448,7 @@ function withPromptObservation(name, observer, handler) {
 		let scope;
 		try {
 			const argumentKeys = Object.keys(args).filter((key) => key === "routine_id");
-			const routineId = "routine_id" in args && isString(args.routine_id) ? args.routine_id : void 0;
+			const routineId = "routine_id" in args && isString$2(args.routine_id) ? args.routine_id : void 0;
 			scope = memoizeObservationScope(observer?.start({
 				name,
 				kind: "prompt",
@@ -4661,13 +4706,14 @@ function readBuildGlobal(value) {
 	}
 }
 const buildName = readBuildGlobal(() => "hevy-mcp");
-const buildVersion = readBuildGlobal(() => "6.1.3");
+const buildVersion = readBuildGlobal(() => "6.1.4");
 const SERVER_NAME = readBuildString(buildName, "hevy-mcp");
 const SERVER_VERSION = readBuildString(buildVersion, "dev");
 const SERVER_INSTRUCTIONS = [
 	"Hevy MCP connects clients to the authenticated user's Hevy workout-tracking data, including workouts, routines, exercise templates, routine folders, body measurements, and profile information. HEVY_API_KEY must contain a valid Hevy API key for local stdio use.",
 	"Safety: all get-* and search-* tools are read-only. create-* and update-* tools mutate Hevy data. Creates are additive and non-idempotent, so repeating one can create duplicates. Updates can overwrite existing data. Delete operations are not available.",
 	"Workflow: search exercise templates first, then use the returned template IDs when creating workouts or routines. To create a completed workout from a routine, fetch the routine as a plan, then obtain the actual completed sets and end time from the user; never invent completion data.",
+	"Tool protocol: always call the exact tool name and pass inputs in the tools/call arguments object. Never append parameters to a tool name (for example, call get-workout with {\"workout_id\": \"<id>\"}, not get-workout-workoutId=<id>). The canonical discovery tools are get-workout, get-exercise-template, and get-routine-folder; get-workouts, search-exercise-templates, and the hevy://exercise-templates and hevy://routine-folders resources discover records. get-user-info is not an MCP tool; use the hevy://user resource.",
 	"Resources: use hevy://user, hevy://workout-count, hevy://exercise-templates, and hevy://routine-folders for complete cached datasets that do not require parameters. Use search-exercise-templates when you need title or muscle-group filtering.",
 	"Pagination: start at page 1 and fetch only the pages needed. List tools that remain available use bounded page sizes.",
 	"Rate limits and retries: minimize repeated calls. If Hevy returns HTTP 429, follow its retry guidance. Transient read requests retry automatically, but write requests do not; confirm uncertain write outcomes before trying again."
@@ -5244,4 +5290,4 @@ function createHevyMcpServer(options) {
 //#endregion
 export { createSafeErrorDiagnostic as a, diagnosticEndpointIdentity as c, bucketCount as i, metricEndpointIdentity as l, createExecutionProjection as n, createHevyClient as o, mergeAbortSignals as r, SAFE_OBSERVATION_CODES as s, createHevyMcpServer as t, isHevyHttpError as u };
 
-//# sourceMappingURL=src-Cb_gblD1.mjs.map
+//# sourceMappingURL=src-DCTiE-_b.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "hevy-mcp",
-	"version": "6.1.3",
+	"version": "6.1.4",
 	"private": false,
 	"description": "A Model Context Protocol (MCP) server implementation that interfaces with the Hevy fitness tracking app and its API.",
 	"repository": {
@@ -50,7 +50,7 @@
 	"devDependencies": {
 		"@hevy-mcp/core": "*",
 		"@hevy-mcp/hevy-client": "*",
-		"@types/node": "^26.1.2",
+		"@types/node": "^26.2.0",
 		"cross-env": "^10.1.0",
 		"tsdown": "^0.22.14",
 		"typescript": "^7.0.2"

package/server.json

@@ -7,12 +7,12 @@
 		"url": "https://github.com/chrisdoc/hevy-mcp",
 		"source": "github"
 	},
-	"version": "6.1.3",
+	"version": "6.1.4",
 	"packages": [
 		{
 			"registryType": "npm",
 			"identifier": "hevy-mcp",
-			"version": "6.1.3",
+			"version": "6.1.4",
 			"transport": {
 				"type": "stdio"
 			},