[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_126":127},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":21,"_24":25,"_26":27,"_28":29,"_30":31,"_32":33,"_34":25,"_35":36,"_37":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_56":48,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":11,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":-5,"_78":-5,"_79":48,"_80":-5,"_81":82,"_83":84,"_85":86,"_87":88,"_89":90,"_91":92},"apiUrl","https://odel.app/api","creator","imgrund","moduleId","hybridlog","@imgrund/hybridlog","displayName","tagline","Reads your own Garmin mirror: readiness, training load, muscle freshness, and read-only SQL.","iconKey","https://avatars.githubusercontent.com/u/4200727?v=4","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://{hybridlog_host}/mcp/garmin\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1786854287000,"updatedAt",1788496225000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.Imgrund%2Fhybridlog","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",1,"upstreamUpdatedAt",1788418723000,"detectedTransport","detectedAuthType","probeStatus","lastProbedAt",1788328661000,"githubRepoUrl","https://github.com/Imgrund/hybridlog","githubRepoFullName","Imgrund/hybridlog","releaseId","ext-imgrund-hybridlog","version","0.1.13","descriptionMarkdown","# hybridlog\n\n[![Tests](https://github.com/Imgrund/hybridlog/actions/workflows/tests.yml/badge.svg)](https://github.com/Imgrund/hybridlog/actions/workflows/tests.yml)\n[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)\n[![Release](https://img.shields.io/github/v/release/Imgrund/hybridlog?display_name=tag&label=release)](https://github.com/Imgrund/hybridlog/releases)\n[![MCP registry](https://img.shields.io/badge/MCP%20registry-io.github.Imgrund%2Fhybridlog-0a7ea4)](https://registry.modelcontextprotocol.io/v0/servers?search=io.github.Imgrund/hybridlog)\n\nSelf-hosted MCP server on your own Garmin data. It mirrors everything\nGarmin answers into a database you control, computes the models the watch\ndoes not (training load, muscle freshness, readiness in context), and\nhands all of it to a language model over stdio or HTTP, so the things\nGarmin cannot measure can be dictated into the chat instead of typed into\na form. A dashboard comes with it: the body map, the training load, and\nthe login the connector authenticates against. There is no hosted\ninstance, and that is the point: it is a health record, and the model\nreads it through a role that can only read.\n\nRunning, lifting or both on the same day: the models do not care which.\nSessions that alternate running with station work get a lap-by-lap\nbreakdown of their own, which is the shape of a HYROX race.\n\nThere is a [demo](https://hybridlog-demo-production.up.railway.app) to\nwalk through before installing anything: sign in as `demo@example.com`\nwith the password `demo-demo-demo`. It runs on generated data and puts\nitself back every night.\n\n![A muscle map with per-zone load and its findings beside it, one tab away from the training-load view](https://raw.githubusercontent.com/Imgrund/hybridlog/main/docs/images/dashboard-dark.png)\n\n\n\n\n\n\n

\n\n![The same page in light mode](https://raw.githubusercontent.com/Imgrund/hybridlog/main/docs/images/dashboard-light.png)\n\n

\n\n![The same page on a phone](https://raw.githubusercontent.com/Imgrund/hybridlog/main/docs/images/dashboard-mobile.png)\n\n

\n\n_{Every number in these three is generated by `fetcher/seed_demo.py`.\nThe interface is English and ships a German translation; it follows the\nbrowser language unless the profile says otherwise.}\n\n> **Read this before you rely on it.** The fetcher talks to Garmin\n> Connect's *unofficial* web API. Garmin can change or close it without\n> notice. This project is not affiliated with or endorsed by Garmin.\n> Nothing it computes is a medical statement: readiness, HRV bands, load\n> ratios and the coach texts are training aids, not diagnoses. It is a\n> personal project published in the hope it is useful, with no promise of\n> support or a stable interface.\n\n## What it is\n\n- **MCP server**: thirteen tools and one prompt over `laravel/mcp`, in two\n transports. Local (stdio) for Claude Code and Claude Desktop, hosted\n (streamable HTTP with OAuth 2.1, PKCE and dynamic client registration)\n for claude.ai, ChatGPT, Mistral's Le Chat (renamed Vibe), LM Studio and\n anything else that speaks it.\n- **Dashboard**: Laravel + Alpine + Chart.js. It draws the body map and\n the training load, and it is also the login the connector authenticates\n against and the place where you set what the chat may see.\n- **Fetcher**: Python (`fetcher/`), pulls daily metrics and activities via\n [python-garminconnect](https://github.com/cyberjunky/python-garminconnect)\n into one athlete's schema of a PostgreSQL database, which both of the\n above read through a connection that may only read it, and only that\n athlete's. Each answer is also kept whole beside the columns read out of\n it, so a field nobody has built a column for is still there to be asked\n about, and a day Garmin Connect no longer serves is still in the mirror.\n\nWhat *no hosted instance* means in practice: the Garmin session sits in\na schema of your own database that no reader role can reach, so the SQL\na model writes cannot ask for it, and no operator but you holds it. Past Garmin itself, two optional things\nreach out at all: the weather, which takes a pair of coordinates you fill\nin yourself, and notifications, where the push service is woken by an\nempty POST and never carries what it was about.\n\n## The tools\n\nThirteen tools and one prompt. The right-hand column is the switch at\n`/connect` that gates each one; everything is on by default.\n\n| Tool | What it answers | Needs |\n| --- | --- | --- |\n| `get-health-summary-tool` | the current picture in one call: readiness, sleep, load, data freshness | Read health data |\n| `get-insights-tool` | the app's own verdict per body system, with the recommendation and the early illness pattern | Read health data, Read body metrics |\n| `get-muscle-map-tool` | per-zone freshness, weekly volume per zone, what to train today | Read health data |\n| `get-training-load-tool` | CTL/ATL/TSB, the acute:chronic ratio, the weekly stimulus split | Read health data |\n| `get-strength-progress-tool` | week by week per exercise category: reps, tonnage where it was recorded, top weights, what has not moved | Read health data |\n| `get-race-splits-tool` | one session lap by lap: running vs. station work, pace per lap, how far the pace drifted | Read health data |\n| `get-activity-detail-tool` | one session in depth: zone minutes and shares against the athlete's zone floors, laps, sets, the heart-rate curve, and how it compares with earlier sessions of its kind | Read health data |\n| `describe-schema-tool` | the mirror's tables and columns, so the model can write its own query | Read health data, Read body metrics |\n| `query-health-data-tool` | everything else, as one read-only SELECT with a 500-row cap | Read health data, Read body metrics |\n| `refresh-data-tool` | syncs today and yesterday from Garmin (the header button's job, narrowed to two days) and waits for it | Start a fetch |\n| `log-symptom-tool` | a strain mentioned in passing, as a marker on the body map | Log how you feel |\n| `delete-symptom-tool` | takes one off again once it has healed | Log how you feel |\n| `give-feedback-tool` | a correction that becomes a standing guideline for the connector | Process feedback |\n| `weekly-report` (prompt) | drives the Sunday review; the report is the conversation's answer and is stored nowhere | Read health data |\n\nMost of them answer a question the app was built around. Two do not:\n`describe-schema` hands the model the mirror's own tables with the\ncomments that say what each column means, and `query-health-data` runs\nthe SELECT it writes from that. It is the difference between a set of\nreports and a database somebody can think in, and it is what makes\nkeeping the raw answers worth the disk: a field nobody has promoted to a\ncolumn is still one question away.\n\nReading is the whole of it, with one documented exception. Symptoms are\nthe only thing the chat may write, and they go to the app's own schema,\nnever into the Garmin mirror. Free-form SQL runs through\n`app/Garmin/ReadOnlyGarminQuery`: a single SELECT or WITH, a keyword\nblocklist, a read-only transaction, a row cap, on a connection switched\ninto a role that holds SELECT on one athlete's schema and nothing else.\n\n## Quickstart (Docker, demo data, no Garmin account)\n\n```bash\ngit clone https://github.com/Imgrund/hybridlog.git\ncd hybridlog\ncp .env.example .env\ndocker compose up -d\n```\n\nThat brings up PostgreSQL, the dashboard, a queue worker and a scheduler.\nThe published image covers amd64 and arm64, so the first start downloads\nrather than compiles. After a `git pull`, plain `up -d` keeps running the\nimage it already has: the new code arrives only with `--build`.\n\nThen fill the mirror with 120 days of plausible data, create the account\nyou log in with, and open the dashboard:\n\n```bash\ndocker compose exec app /opt/fetcher/bin/python fetcher/seed_demo.py\ndocker compose exec app php artisan app:create-user you@example.com --admin\nopen http://localhost:8080\n```\n\nThere is no sign-up page, on purpose: a login nobody can register at has\nno surface to attack. For anybody but yourself, hand over a link instead\nof a password:\n\n```bash\ndocker compose exec app php artisan app:invite them@example.com --name=\"Them\"\n```\n\nIt prints a one-time link, good for seven days (`--days`), on which they\nset their own password. `--admin` marks the installation owner, who is\nthe account the local stdio transport acts for. Every account keeps its\nown profile, permissions, symptom log, Garmin sign-in, notifications and\nmirror, and sees none of anybody else's.\n\n`DEMO_MODE=true` turns an installation into a shop window instead: one\nshared account, everything that would reach out of it closed (the Garmin\nsign-in above all), and `php artisan demo:reset` putting it back nightly.\n\nA shop window is also the one place worth counting visitors in, and\n`UMAMI_SCRIPT_URL` plus `UMAMI_WEBSITE_ID` render the script tag of an\n[Umami](https://umami.is) instance you host yourself: page views without\na cookie and without an identifier that follows anyone off the site.\nBoth lines are needed, and with either empty, which is the default,\nnothing is rendered at all and no page requests a host but this one. It\nis not tied to `DEMO_MODE`, so a private installation stays free of\noutside scripts by simply leaving them alone.\n\n## Connect an AI\n\nThe server reads the same mirror the dashboard draws from, so a chat and\nthe page never disagree. What the page cannot do is answer a question it\nwas not built for: how this week stands against the one before, whether\ntoday is a rest day, what a niggle means for tomorrow.\n\n> [!IMPORTANT]\n> This hands a language model your health record. It reads through a role\n> that may only read, and only your own schema, but it reads all of it.\n> Which parts is yours to set at `/connect`, per switch, and the switches\n> take effect on the next tool call rather than the next reconnect.\n\nOne address, the same for every client:\n\n```\nhttps:///mcp/garmin\n```\n\nClaude, ChatGPT, Langdock, Le Chat and LM Studio all take it and run OAuth\nagainst the dashboard's own login, so no client ever sees a password and\n`/connect` can cut any of them off again. Claude Code and Claude Desktop\ncan skip the deployment entirely and talk to the repository over stdio.\n[docs/connect-ai.md](https://github.com/Imgrund/hybridlog/blob/main/docs/connect-ai.md) has the steps per client.\n\nWhichever way it connects, it gets [the same thirteen tools](#the-tools) and\nthe same switches.\n\nThings worth asking, once it is connected:\n\n> How did my training week compare with the one before?\n>\n> Am I ready for a hard session, or do I need a rest day?\n>\n> Which muscles are fresh, and what should I train today?\n>\n> Where did my pace go in Saturday's race, and how much of the clock was\n> station work?\n>\n> My left knee hurt on the box jumps.\n\n## Setup with your own Garmin account\n\nSign in under *Garmin* in the account menu, or at `/connect/garmin`:\nemail, password, and the MFA code if Garmin asks for one. What is stored\nis an OAuth token pair, never the password. The sign-in runs on a queue\nworker, so one has to be up.\n\nA first sign-in fills the mirror by itself: a ninety-day backfill on the\nqueue, roughly a quarter of an hour, with the page filling in as the\nhistory lands. Ninety days is about the minimum for the models to say\nanything, since the HRV baseline needs three weeks of nights and the load\nratios a rolling six weeks. From then on the scheduler fetches three\ntimes a day and the *Fetch from Garmin* button fetches on demand.\n\nEvery command works on one athlete (`--tenant `, the owner where\nleft out). Details, backfills and the manual login are in\n[docs/install.md](https://github.com/Imgrund/hybridlog/blob/main/docs/install.md); how to record so the data is worth\nreading is in [docs/recording.md](https://github.com/Imgrund/hybridlog/blob/main/docs/recording.md).\n\n## Documentation\n\n- [docs/install.md](https://github.com/Imgrund/hybridlog/blob/main/docs/install.md): installing without Docker,\n deploying to a platform, backup.\n- [docs/connect-ai.md](https://github.com/Imgrund/hybridlog/blob/main/docs/connect-ai.md): every client's steps, OAuth\n and discovery, running the MCP server on a public host.\n- [docs/recording.md](https://github.com/Imgrund/hybridlog/blob/main/docs/recording.md): recording rules, weather,\n notifications.\n\n## Architecture notes\n\n- Derived metrics (CTL/ATL/TSB, ACWR fallback, muscle freshness with a\n ~28 h half-life self-calibrated against 90-day history) are computed on\n the fly in `app/Garmin/`.\n- The `garmin` connection is separate from Laravel's default one. It\n points at the same database, but is aimed at one athlete's schema per\n query: `App\\Garmin\\Mirror` sets `search_path` to `garmin_t{id}` and\n switches into that tenant's read-only role before the first statement.\n- The interface language is the one thing the athlete still enters, on\n `/profile`, stored in the database rather than in `.env`: it belongs to\n the athlete rather than to the deployment.\n- Colors follow a validated dataviz palette (light + dark via\n `prefers-color-scheme`), roles defined in `resources/css/app.css`.\n\n## Contributing\n\nReleases are tagged, and [CHANGELOG.md](https://github.com/Imgrund/hybridlog/blob/main/CHANGELOG.md) says what changed in\neach one. [CONTRIBUTING.md](https://github.com/Imgrund/hybridlog/blob/main/CONTRIBUTING.md) says how to run the suite,\nwhat the tests will hold you to, and which changes are deliberately out of\nscope. Conduct is covered in [CODE_OF_CONDUCT.md](https://github.com/Imgrund/hybridlog/blob/main/CODE_OF_CONDUCT.md).\nSecurity problems do not belong in an issue: [SECURITY.md](https://github.com/Imgrund/hybridlog/blob/main/SECURITY.md)\nhas the private path.\n\n## License\n\nMIT, see [LICENSE](https://github.com/Imgrund/hybridlog/blob/main/LICENSE). The muscle polygons in\n`resources/data/body-polygons.json` come from the\n[body-highlighter](https://github.com/lahaxearnaud/body-highlighter)\nproject family and are MIT-licensed as well.\n\nTwo bundled assets carry their own terms. The 3D figure\n`resources/models/body-zones.glb` is an adaptation of BodyParts3D\n(© The Database Center for Life Science) and stays under\nCC Attribution-Share Alike 2.1 Japan;\n[resources/models/CREDITS.md](https://github.com/Imgrund/hybridlog/blob/main/resources/models/CREDITS.md) carries the\nfull credit and what the license binds. The Mulish and Oswald fonts in\n`resources/fonts/` are under the SIL Open Font License 1.1, whose texts\nship next to them.\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"upstream",{"_106":107,"_108":109,"_110":111,"_112":113,"_114":115,"_116":117},"requiredSecrets",[],"tags",[95,96,97,98,99,100,101,102,103,104,105],"assets",[],"stats",{"_93":82,"_94":82},"ratingAvg","reviewCount","claude","garmin","garmin-connect","health-data","laravel","oauth2","php","postgresql","quantified-self","self-hosted","training-load","topics",[95,96,97,98,99,123,124,125,100,101,102,103,104,105],"license","MIT","language","PHP","registryName","io.github.Imgrund/hybridlog","homepage","https://github.com/Imgrund/hybridlog#connect-an-ai","packages",[118],{"_119":120,"_121":122,"_72":-5},"registryType","oci","identifier","ghcr.io/imgrund/hybridlog:0.1.13","mcp","mcp-server","model-context-protocol","ENV",{"_128":129,"_130":131,"_132":133},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]