hevy-mcp 6.1.4 → 6.1.5

package/README.md

@@ -320,30 +320,30 @@ These server-provided MCP prompts coordinate common multi-step workflows:
 and update tools are exposed with MCP mutation annotations so compatible clients
 can request confirmation.
 
-| Category           | Tool                        | Description                                                                       |
-| ------------------ | --------------------------- | --------------------------------------------------------------------------------- |
-| Training analysis  | `get-training-summary`      | Summarize 1-12 weeks of workout activity and body-measurement trends in one call. |
-| Workouts           | `get-workouts`              | List workouts from newest to oldest with exercise and timing details.             |
-| Workouts           | `get-workout`               | Get complete details for one workout by ID.                                       |
-| Workouts           | `get-workout-events`        | List workout update and delete events since a timestamp.                          |
-| Workouts           | `create-workout`            | Create a completed workout in Hevy.                                               |
-| Workouts           | `update-workout`            | Patch workout metadata by ID; omitted fields and all exercises remain unchanged.  |
-| Workouts           | `replace-workout-exercises` | Replace all exercises and sets while preserving workout metadata.                 |
-| Routines           | `search-routines`           | Search routine titles and return compact metadata for discovery.                  |
-| Routines           | `get-routines`              | List custom and default workout routines.                                         |
-| Routines           | `get-routine`               | Get one routine and its exercise configuration by ID.                             |
-| Routines           | `create-routine`            | Create a reusable workout routine.                                                |
-| Routines           | `update-routine`            | Replace an existing routine's content.                                            |
-| Routine folders    | `get-routine-folder`        | Get one routine folder's metadata by ID.                                          |
-| Routine folders    | `create-routine-folder`     | Create a routine folder.                                                          |
-| Exercise templates | `get-exercise-template`     | Get complete metadata for one exercise template by ID.                            |
-| Exercise templates | `search-exercise-templates` | Search the full exercise catalog by title substring.                              |
-| Exercise templates | `create-exercise-template`  | Create a custom exercise template.                                                |
-| Exercise history   | `get-exercise-history`      | Get past performed sets for one exercise template.                                |
-| Body measurements  | `get-body-measurements`     | List dated body measurements.                                                     |
-| Body measurements  | `get-body-measurement`      | Get the body measurement entry for one date.                                      |
-| Body measurements  | `create-body-measurement`   | Create a dated body measurement.                                                  |
-| Body measurements  | `update-body-measurement`   | Update the body measurement for an existing date.                                 |
+| Category           | Tool                        | Description                                                                                                            |
+| ------------------ | --------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
+| Training analysis  | `get-training-summary`      | Summarize 1-12 weeks of workout activity and body-measurement trends in one call.                                      |
+| Workouts           | `get-workouts`              | List workouts from newest to oldest with exercise and timing details.                                                  |
+| Workouts           | `get-workout`               | Get complete details for one workout by ID.                                                                            |
+| Workouts           | `get-workout-events`        | List workout update and delete events since a timestamp.                                                               |
+| Workouts           | `create-workout`            | Create a completed workout in Hevy.                                                                                    |
+| Workouts           | `update-workout`            | Patch workout metadata by ID; `is_private` is required, while other omitted fields and all exercises remain unchanged. |
+| Workouts           | `replace-workout-exercises` | Replace all exercises and sets; `is_private` is required and updated, while other workout metadata remains unchanged.  |
+| Routines           | `search-routines`           | Search routine titles and return compact metadata for discovery.                                                       |
+| Routines           | `get-routines`              | List custom and default workout routines.                                                                              |
+| Routines           | `get-routine`               | Get one routine and its exercise configuration by ID.                                                                  |
+| Routines           | `create-routine`            | Create a reusable workout routine.                                                                                     |
+| Routines           | `update-routine`            | Replace an existing routine's content.                                                                                 |
+| Routine folders    | `get-routine-folder`        | Get one routine folder's metadata by ID.                                                                               |
+| Routine folders    | `create-routine-folder`     | Create a routine folder.                                                                                               |
+| Exercise templates | `get-exercise-template`     | Get complete metadata for one exercise template by ID.                                                                 |
+| Exercise templates | `search-exercise-templates` | Search the full exercise catalog by title substring.                                                                   |
+| Exercise templates | `create-exercise-template`  | Create a custom exercise template.                                                                                     |
+| Exercise history   | `get-exercise-history`      | Get past performed sets for one exercise template.                                                                     |
+| Body measurements  | `get-body-measurements`     | List dated body measurements.                                                                                          |
+| Body measurements  | `get-body-measurement`      | Get the body measurement entry for one date.                                                                           |
+| Body measurements  | `create-body-measurement`   | Create a dated body measurement.                                                                                       |
+| Body measurements  | `update-body-measurement`   | Update the body measurement for an existing date.                                                                      |
 
 `create-routine` requires a top-level `routine` envelope with a required `exercises` array; fields use snake_case at every level:
 
@@ -452,7 +452,7 @@ self-hosted Streamable HTTP.
 | Setting                          | Default                          | Scope                         | Notes                                                                                                                                                                                                              |
 | -------------------------------- | -------------------------------- | ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | `HEVY_API_KEY`                   | None; required                   | Local stdio or HTTP           | Hevy API key from the Hevy app. Never pass it in a URL.                                                                                                                                                            |
-| `HEVY_MCP_API_TIMEOUT`           | `30000` ms                       | Local stdio                   | Positive Hevy API timeout in milliseconds. Invalid values fall back to 30 seconds.                                                                                                                                 |
+| `HEVY_MCP_API_TIMEOUT`           | `60000` ms                       | Local stdio                   | Positive Hevy API timeout in milliseconds. Invalid values fall back to 60 seconds.                                                                                                                                 |
 | `HEVY_MCP_DEBUG`                 | Disabled                         | Local Node                    | Set to exactly `1` for privacy-bounded diagnostics on stderr. Stdout remains reserved for MCP JSON-RPC.                                                                                                            |
 | `HEVY_MCP_HTTP_BEARER_TOKEN`     | None                             | Non-loopback HTTP             | Required when `--host` is not loopback; use a separate token, never the Hevy API key.                                                                                                                              |
 | `HEVY_MCP_HTTP_MAX_SESSIONS`     | `100`                            | Local HTTP                    | Maximum established sessions (including sessions currently initializing); excess requests receive `429` and DELETE, disconnect, or idle eviction frees capacity. Invalid values use the default; capped at 10,000. |

package/dist/cli.mjs

@@ -8,8 +8,8 @@
 		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "d805d34c-9cce-4622-8b67-728aa0cacb5d", e._sentryDebugIdIdentifier = "sentry-dbid-d805d34c-9cce-4622-8b67-728aa0cacb5d");
 	} catch (e) {}
 })();
-import { i as flushTelemetry, r as MissingHevyApiKeyError, t as runServer } from "./runtime-CokZbz-j.mjs";
-import { a as createSafeErrorDiagnostic } from "./src-DCTiE-_b.mjs";
+import { i as flushTelemetry, r as MissingHevyApiKeyError, t as runServer } from "./runtime-hmSQY75_.mjs";
+import { a as createSafeErrorDiagnostic } from "./src-CrDSsc2t.mjs";
 //#region src/cli.ts
 runServer().catch(async (error) => {
 	if (error instanceof MissingHevyApiKeyError) console.error(error.message);

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // Generated with tsdown
 // https://tsdown.dev
-import { o as createHevyClient, t as createHevyMcpServer } from "./src-DCTiE-_b.mjs";
+import { o as createHevyClient, t as createHevyMcpServer } from "./src-CrDSsc2t.mjs";
 import { z } from "zod";
 //#region src/index.ts
 const serverConfigSchema = z.object({ apiKey: z.string().min(1, "Hevy API key is required").describe("Your Hevy API key (available in the Hevy app settings).") });
@@ -32,7 +32,7 @@ function createNodeMcpServer({ apiKey }, _transport = "stdio", lifecycleSignal)
 * does not evaluate the runtime bootstrap; it is loaded only when invoked.
 */
 async function runStdioServer() {
-	const { runStdioServer: run } = await import("./runtime-CokZbz-j.mjs").then((n) => n.n);
+	const { runStdioServer: run } = await import("./runtime-hmSQY75_.mjs").then((n) => n.n);
 	return run();
 }
 /**
@@ -40,7 +40,7 @@ async function runStdioServer() {
 * does not evaluate the runtime bootstrap; it is loaded only when invoked.
 */
 async function runServer() {
-	const { runServer: run } = await import("./runtime-CokZbz-j.mjs").then((n) => n.n);
+	const { runServer: run } = await import("./runtime-hmSQY75_.mjs").then((n) => n.n);
 	return run();
 }
 //#endregion

package/dist/{runtime-CokZbz-j.mjs → runtime-hmSQY75_.mjs}

@@ -5,10 +5,10 @@
 	try {
 		var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {};
 		var n = new e.Error().stack;
-		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "baee8222-0612-498c-a1f8-cf149a59a78b", e._sentryDebugIdIdentifier = "sentry-dbid-baee8222-0612-498c-a1f8-cf149a59a78b");
+		n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "7cb09c0b-f923-483d-acbb-7eeebfbb1dcd", e._sentryDebugIdIdentifier = "sentry-dbid-7cb09c0b-f923-483d-acbb-7eeebfbb1dcd");
 	} catch (e) {}
 })();
-import { a as createSafeErrorDiagnostic, c as diagnosticEndpointIdentity, i as bucketCount, l as metricEndpointIdentity, n as createExecutionProjection, o as createHevyClient, r as mergeAbortSignals, s as SAFE_OBSERVATION_CODES, t as createHevyMcpServer, u as isHevyHttpError } from "./src-DCTiE-_b.mjs";
+import { a as createSafeErrorDiagnostic, c as diagnosticEndpointIdentity, i as bucketCount, l as metricEndpointIdentity, n as createExecutionProjection, o as createHevyClient, r as mergeAbortSignals, s as SAFE_OBSERVATION_CODES, t as createHevyMcpServer, u as isHevyHttpError } from "./src-CrDSsc2t.mjs";
 import { ZodError, z } from "zod";
 import { deserializeMessage } from "@modelcontextprotocol/server";
 import * as crypto from "node:crypto";
@@ -394,7 +394,7 @@ function parseBuildString(value, fallback) {
 	return z.string().parse(value ?? fallback);
 }
 const name$1 = parseBuildString(readBuildGlobal(() => "hevy-mcp"), "hevy-mcp");
-const version$1 = parseBuildString(readBuildGlobal(() => "6.1.4"), "dev");
+const version$1 = parseBuildString(readBuildGlobal(() => "6.1.5"), "dev");
 const telemetryEnabled = process.env.HEVY_MCP_TELEMETRY !== "0";
 const collectorToken = z.string().safeParse(readBuildGlobal(() => "NH9vOela-HYreQxAbJa68cjEmORoEKM57EvneUDVcOo")).data ?? process.env.OTEL_COLLECTOR_TOKEN ?? "";
 const COLLECTOR_ENDPOINT = "https://otel.chrisdoc.dev/v1";
@@ -2699,4 +2699,4 @@ async function runServer() {
 //#endregion
 export { flushTelemetry as i, runtime_exports as n, MissingHevyApiKeyError as r, runServer as t };
 
-//# sourceMappingURL=runtime-CokZbz-j.mjs.map
+//# sourceMappingURL=runtime-hmSQY75_.mjs.map

package/dist/{src-DCTiE-_b.mjs → src-CrDSsc2t.mjs}

@@ -2041,6 +2041,16 @@ function createHevyClient({ apiKey, baseUrl, ...options }) {
 	return createClient(apiKey, baseUrl, options);
 }
 //#endregion
+//#region ../core/src/utils/safe-user-error.ts
+const WORKOUT_METADATA_PRIVACY_REQUIRED_ERROR = "is_private is required when updating workout metadata. The Hevy API does not return the current privacy setting on GET, so it must be explicitly provided on PUT. Set to true to make the workout private, or false to make it public.";
+var SafeUserError = class extends Error {
+	safeForUser = true;
+	constructor(message) {
+		super(message);
+		this.name = "SafeUserError";
+	}
+};
+//#endregion
 //#region ../core/src/utils/error-policy.ts
 const ABORT_TIMEOUT_METADATA = {
 	AbortError: {
@@ -2180,6 +2190,7 @@ function getRetryExhaustedMessage(error) {
 	if (attemptCount) return `Unable to complete the request after ${attemptCount} attempts to the Hevy API due to transient failures. Please try again shortly.`;
 	return "Unable to complete the request after multiple attempts to the Hevy API due to transient failures. Please try again shortly.";
 }
+const MAX_SAFE_USER_ERROR_LENGTH = 512;
 /** Classify an error using bounded status, names, and supplied text. */
 function determineErrorType(error, message) {
 	if (isRetryExhausted(error)) return "NETWORK_ERROR";
@@ -2305,6 +2316,7 @@ function resolveErrorPolicy(error, defaultMessage, notInitializedMessage) {
 	if (isNotInitialized) message = notInitializedMessage ?? defaultMessage;
 	else if (isRetryExhausted(error)) message = getRetryExhaustedMessage(error);
 	else if (diagnostic.status === 429) message = getRateLimitMessage(error);
+	else if (diagnostic.status === void 0 && error instanceof SafeUserError && error.message && error.message !== notInitializedMessage) message = error.message.slice(0, MAX_SAFE_USER_ERROR_LENGTH);
 	return {
 		type: determineErrorType(error, message),
 		message,
@@ -3368,7 +3380,7 @@ const workoutMetadataPatchSchema = z.strictObject({
 	description: z.string().nullable().optional(),
 	start_time: utcSecondTimestamp.optional(),
 	end_time: utcSecondTimestamp.optional(),
-	is_private: z.boolean().optional()
+	is_private: z.boolean()
 }).refine((patch) => Object.values(patch).some((value) => value !== void 0), "Include at least one workout metadata field").meta({ minProperties: 1 });
 const updateWorkoutInputFields = z.strictObject({
 	workout_id: nonEmptyId,
@@ -3376,7 +3388,10 @@ const updateWorkoutInputFields = z.strictObject({
 }).shape;
 const replaceWorkoutExercisesInputFields = z.strictObject({
 	workout_id: nonEmptyId,
-	workout: z.strictObject({ exercises: workoutExercisesSchema })
+	workout: z.strictObject({
+		is_private: z.boolean(),
+		exercises: workoutExercisesSchema
+	})
 }).shape;
 const routineSetFields = {
 	type: setTypeEnum,
@@ -3575,6 +3590,7 @@ function preserveWorkoutExercises(current) {
 	})) ?? [];
 }
 function buildWorkoutUpdatePayload(current, patch, replacementExercises) {
+	if (replacementExercises === void 0 && patch.is_private === void 0) throw new SafeUserError(WORKOUT_METADATA_PRIVACY_REQUIRED_ERROR);
 	const payload = {
 		...workoutUpdateMetadataSchema.parse({
 			title: patch.title !== void 0 ? patch.title : current.title,
@@ -4282,7 +4298,7 @@ const hevyToolDefinitions = [
 			name: "update-workout",
 			feature: "workouts",
 			operation: "update",
-			description: "Mutates workout metadata by ID. Omitted fields and all exercises remain unchanged.",
+			description: "Mutates workout metadata by ID. is_private must be supplied explicitly because the Hevy API requires it on PUT; omitted fields and all exercises otherwise remain unchanged.",
 			inputSchema: updateWorkoutSchema,
 			annotations: updateAnnotations("Update Workout"),
 			kind: "write",
@@ -4300,14 +4316,14 @@ const hevyToolDefinitions = [
 			name: "replace-workout-exercises",
 			feature: "workouts",
 			operation: "update",
-			description: "Mutates a workout by replacing all exercises and sets. Workout metadata remains unchanged.",
+			description: "Mutates a workout by replacing all exercises and sets. is_private must be supplied explicitly and is updated with the request; other workout metadata remains unchanged.",
 			inputSchema: replaceWorkoutExercisesSchema,
 			annotations: updateAnnotations("Replace Workout Exercises"),
 			kind: "write",
 			responseContract: updateWorkoutResponse,
 			execute: async (runtime, args) => {
 				const client = runtime.getClient();
-				const payload = buildWorkoutUpdatePayload(await client.getWorkout(args.workout_id), {}, args.workout.exercises);
+				const payload = buildWorkoutUpdatePayload(await client.getWorkout(args.workout_id), { is_private: args.workout.is_private }, args.workout.exercises);
 				return {
 					workout: await client.updateWorkout(args.workout_id, { workout: payload }),
 					workout_id: args.workout_id
@@ -4706,7 +4722,7 @@ function readBuildGlobal(value) {
 	}
 }
 const buildName = readBuildGlobal(() => "hevy-mcp");
-const buildVersion = readBuildGlobal(() => "6.1.4");
+const buildVersion = readBuildGlobal(() => "6.1.5");
 const SERVER_NAME = readBuildString(buildName, "hevy-mcp");
 const SERVER_VERSION = readBuildString(buildVersion, "dev");
 const SERVER_INSTRUCTIONS = [
@@ -5290,4 +5306,4 @@ function createHevyMcpServer(options) {
 //#endregion
 export { createSafeErrorDiagnostic as a, diagnosticEndpointIdentity as c, bucketCount as i, metricEndpointIdentity as l, createExecutionProjection as n, createHevyClient as o, mergeAbortSignals as r, SAFE_OBSERVATION_CODES as s, createHevyMcpServer as t, isHevyHttpError as u };
 
-//# sourceMappingURL=src-DCTiE-_b.mjs.map
+//# sourceMappingURL=src-CrDSsc2t.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "hevy-mcp",
-	"version": "6.1.4",
+	"version": "6.1.5",
 	"private": false,
 	"description": "A Model Context Protocol (MCP) server implementation that interfaces with the Hevy fitness tracking app and its API.",
 	"repository": {

package/server.json

@@ -7,12 +7,12 @@
 		"url": "https://github.com/chrisdoc/hevy-mcp",
 		"source": "github"
 	},
-	"version": "6.1.4",
+	"version": "6.1.5",
 	"packages": [
 		{
 			"registryType": "npm",
 			"identifier": "hevy-mcp",
-			"version": "6.1.4",
+			"version": "6.1.5",
 			"transport": {
 				"type": "stdio"
 			},