Skip to content

fix(sentry): Harden observability and privacy telemetry#221

Merged
cameroncooke merged 5 commits intomainfrom
codex/sentry-observability-hardening
Feb 16, 2026
Merged

fix(sentry): Harden observability and privacy telemetry#221
cameroncooke merged 5 commits intomainfrom
codex/sentry-observability-hardening

Conversation

@cameroncooke
Copy link
Collaborator

Improve Sentry instrumentation for XcodeBuildMCP so we keep actionable internal observability while reducing privacy risk and user-domain noise.

This updates runtime tagging, redaction, and metric coverage across CLI/MCP/daemon paths. It also adds Sentry-focused docs updates and an audit report, plus related simplifications and supporting workflow/script updates that were pending in this branch.

For telemetry behavior, the key direction is: keep infra/server diagnostics, avoid capturing user project/tool payloads, and make runtime/dependency context explicit for debugging.

Fixes #204

cameroncooke and others added 2 commits February 13, 2026 11:03
Limit Sentry capture to internal infrastructure signals while keeping\nuseful operational visibility for CLI and MCP runtimes.\n\nAdd runtime and dependency context tags, add daemon/bootstrap/tool metrics,\nand tighten redaction and logging behavior to avoid user-domain payloads.

Fixes #204

Co-Authored-By: Claude <noreply@anthropic.com>
Capture all remaining updates in the current worktree, including\nworkflow/config/script adjustments and code simplifications across\nCLI, daemon, runtime, server, and utility modules.
@cameroncooke cameroncooke marked this pull request as ready for review February 13, 2026 11:08
@pkg-pr-new
Copy link

pkg-pr-new bot commented Feb 13, 2026

Open in StackBlitz

npm i https://pkg.pr.new/getsentry/XcodeBuildMCP/xcodebuildmcp@221

commit: 78d6c4f

@cameroncooke cameroncooke force-pushed the codex/sentry-observability-hardening branch from 19fa0fc to 8359a69 Compare February 15, 2026 22:50
Copy link
Contributor

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

Move Xcode and AXe metadata collection out of pre-listen startup so\ndaemon readiness cannot be blocked by external command execution.\n\nKeep Sentry hardening behavior by setting fast runtime context early\nand enriching metadata asynchronously after the daemon is listening.\n\nCo-Authored-By: Claude <noreply@anthropic.com>
@cameroncooke cameroncooke merged commit d18fbec into main Feb 16, 2026
11 checks passed
@cameroncooke cameroncooke deleted the codex/sentry-observability-hardening branch February 16, 2026 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

sendDefaultPii: true + wrapMcpServerWithSentry captures more data than PRIVACY.md discloses

1 participant