trackly-cli 0.21.1 → 0.21.2

package/README.md

@@ -353,7 +353,9 @@ a missing capability. Run `trackly mcp` or use
 
 MCP usage analytics are on by default and relay through Trackly so the free
 service can be debugged and improved. They exclude résumé text, profile answers,
-demographic or work-authorization answers, and application notes. Turn off future
+demographic or work-authorization answers, and application notes. Client attribution
+uses a fixed family label; errors use categories, and search text is retained only
+as length. Raw queries and conversation text are excluded. Turn off future
 collection with **Share usage analytics** in Account Settings. Operators may also
 disable local MCP instrumentation with `TRACKLY_MCP_ANALYTICS_DISABLED=1` (or
 `TRACKLY_MCP_ANALYTICS_ENABLED=0`); the account setting remains authoritative

package/docs/solutions/integration-issues/analytics-must-preserve-strict-mcp-schemas.md

@@ -37,3 +37,17 @@ Verification: `node --test test/mcp-analytics.test.js test/mcp-schema.test.js`
 and `npm test`. The real transport regression failed with the old instrumentation
 and passed after the fix. Keyword telemetry continues to retain length only;
 this change does not permit raw query or context storage.
+
+Error and client attribution also need real SDK coverage. The SDK's error type
+may be a JavaScript constructor name, and its vendor field comes from HTTP
+headers that stdio does not have. Normalize both at the privacy boundary:
+derive a closed error category from the failure and a closed client family from
+available metadata, with explicit `none`, `other` and `unknown` states.
+
+The HTTP client rejects response records containing numeric status and an
+`error` field. Capturing only `message` loses that status and substitutes a
+generic fallback. Preserve the status in the telemetry-only exception and give
+it precedence over endpoint words such as "network brief". Verify job detail
+and brief calls through a local HTTP fixture with 404, 429 and 500 responses;
+assert unchanged tool results and classified, content-free telemetry. Sanitize
+the result twice because the SDK hook and backend relay both project events.

package/mcp/analytics.js

@@ -118,6 +118,28 @@ const SAFE_ENUM_KEYS = new Set([
   'region', 'regiontag', 'locationfilter', 'sort', 'sponsorship',
 ]);
 const SDK_FAILURE_WARNING = /Warning: (?:Failed to instrument server|Failed to setup tool call instrumentation|No PostHog client passed)/i;
+const ERROR_CATEGORIES = new Set([
+  'authentication', 'authorization', 'rate_limit', 'timeout', 'not_found',
+  'validation', 'conflict', 'network', 'server', 'unknown',
+]);
+const HTTP_ERROR_CATEGORIES = {
+  400: 'validation', 401: 'authentication', 403: 'authorization',
+  404: 'not_found', 408: 'timeout', 409: 'conflict', 410: 'not_found',
+  413: 'validation', 422: 'validation', 429: 'rate_limit',
+};
+const CLIENT_FAMILIES = [
+  ['chatgpt', /\bchatgpt\b/],
+  ['claude', /\bclaude(?: desktop)?\b/],
+  ['codex', /\bcodex\b/],
+  ['cursor', /\bcursor\b/],
+  ['windsurf', /\bwindsurf\b/],
+  ['vscode', /\b(?:vscode|visual studio code)\b/],
+  ['continue', /\bcontinue\b/],
+  ['cline', /\bcline\b/],
+  ['roo', /\broo(?: code)?\b/],
+  ['zed', /\bzed\b/],
+  ['mcp-inspector', /\bmcp inspector\b/],
+];
 
 const ALLOWED_EVENT_PROPERTY_KEYS = new Set([
   '$exception_list', '$lib', '$lib_version', '$mcp_client_name',
@@ -250,6 +272,13 @@ function classifyIntent(toolName, value) {
 
 function classifyError(value) {
   const text = typeof value === 'string' ? value.toLowerCase() : '';
+  if (ERROR_CATEGORIES.has(text)) return text;
+  // HTTP status is authoritative; endpoint words such as "network brief"
+  // must not turn an upstream 500 into a transport/network classification.
+  const status = /\bhttp\s+([45]\d\d)\b/.exec(text)?.[1];
+  if (status && HTTP_ERROR_CATEGORIES[status]) return HTTP_ERROR_CATEGORIES[status];
+  if (status?.startsWith('5')) return 'server';
+  if (status) return 'unknown';
   if (/\b(?:401|unauthenticated|authentication|invalid token|expired token)\b/.test(text)) {
     return 'authentication';
   }
@@ -264,6 +293,38 @@ function classifyError(value) {
   return 'unknown';
 }
 
+function canonicalClientFamily(value) {
+  if (typeof value !== 'string' || !value.trim() || value.length > 240) return undefined;
+  const normalized = value.toLowerCase().replace(/[_-]/g, ' ');
+  return CLIENT_FAMILIES.find(([, pattern]) => pattern.test(normalized))?.[0];
+}
+
+function projectEventAttribution(properties, eventName) {
+  const clientValues = [
+    properties.$mcp_vendor_client,
+    properties.$mcp_client_name,
+    properties.$mcp_client_user_agent,
+  ];
+  const clientFamily = clientValues.map(canonicalClientFamily).find(Boolean)
+    || (clientValues.some((value) => (
+      typeof value === 'string' && value.trim() && value !== 'unknown'
+    )) ? 'other' : 'unknown');
+  properties.$mcp_vendor_client = clientFamily;
+  properties.$mcp_client_name = clientFamily;
+  if (properties.$mcp_client_user_agent !== undefined) {
+    properties.$mcp_client_user_agent = canonicalClientFamily(properties.$mcp_client_user_agent)
+      || 'other';
+  }
+
+  const errorMessage = properties.$mcp_error_message;
+  const exceptionMessage = properties.$exception_list?.[0]?.value;
+  const isError = eventName === '$exception' || properties.$mcp_is_error === true;
+  properties.$mcp_error_type = isError
+    ? classifyError(errorMessage ?? exceptionMessage ?? properties.$mcp_error_type)
+    : 'none';
+  return errorMessage;
+}
+
 function safeFrameName(value, maxLength = 120) {
   if (typeof value !== 'string' || value === '<local-path>') return undefined;
   const basename = value.replace(/\\/g, '/').split('/').pop() || '';
@@ -311,7 +372,7 @@ function projectExceptionList(value, errorValue) {
     }).filter((frame) => Object.keys(frame).length > 0);
     return {
       type: safeFrameName(exception.type, 80) || 'Error',
-      category: classifyError(exception.value ?? errorValue),
+      category: classifyError(exception.category ?? exception.value ?? errorValue),
       stacktrace: { frames: projectedFrames },
     };
   });
@@ -521,6 +582,7 @@ function sanitizeMcpAnalyticsEvent(event) {
   }
   const properties = sanitized.properties;
   if (!properties || typeof properties !== 'object') return sanitized;
+  const sourceErrorMessage = projectEventAttribution(properties, event.event);
 
   // Identity is backend-owned. The CLI may carry only its ephemeral anonymous
   // session identifier; verified user/person properties never cross this relay.
@@ -582,7 +644,6 @@ function sanitizeMcpAnalyticsEvent(event) {
     delete properties.$mcp_intent_source;
   }
 
-  const sourceErrorMessage = properties.$mcp_error_message;
   if (typeof sourceErrorMessage === 'string') {
     properties.$mcp_error_message = classifyError(sourceErrorMessage);
   }

package/mcp/server.js

@@ -232,9 +232,13 @@ function wrapTool(handler, fallbackMessage) {
       };
     } catch (error) {
       if (extra && typeof extra === 'object') {
+        const statusPrefix = Number.isInteger(error?.status) ? `HTTP ${error.status}: ` : '';
         extra.__mcp_analytics_error = error instanceof Error
           ? error
-          : new Error(error?.message || fallbackMessage, { cause: error });
+          : new Error(
+            `${statusPrefix}${error?.error || error?.message || fallbackMessage}`,
+            { cause: error },
+          );
       }
       return createErrorResult(
         error,

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "trackly-cli",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "trackly-cli",
-      "version": "0.21.1",
+      "version": "0.21.2",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "1.32.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trackly-cli",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "mcpName": "io.github.trackly-app/trackly",
   "description": "Search 250K+ jobs across 5,400+ companies with the Trackly CLI and MCP server for Claude, ChatGPT, Codex and Cursor. Filter by role, location, salary and sponsorship; track jobs and prepare applications.",
   "bin": {

package/server.json

@@ -17,12 +17,12 @@
       ]
     }
   ],
-  "version": "0.21.1",
+  "version": "0.21.2",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "trackly-cli",
-      "version": "0.21.1",
+      "version": "0.21.2",
       "runtimeHint": "npx",
       "runtimeArguments": [
         {