@setluca/mcp 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -10,6 +10,21 @@ input schema, or changing what a tool does to a workspace.
 
 ## [Unreleased]
 
+## [0.3.1] - 2026-10-06
+
+### Fixed
+
+- Restore authenticated remote MCP discovery and tool calls on Cloudflare.
+  Token checks and tool requests now use a direct service binding to Luca's API,
+  avoiding the public API's WAF challenge. Both paths use Cloudflare's supported
+  manual redirect mode and still reject redirected responses without forwarding
+  credentials.
+
+### Changed
+
+- The remote tool catalog includes explicit safety annotations for directory
+  review. The protocol suite checks the published `tools/list` shape.
+
 ## [0.3.0] - 2026-10-05
 
 This is the first Luca MCP release from its own repository. The package and

package/dist/http.js

@@ -136,17 +136,18 @@ function errorBody(text) {
  */
 const describeUrl = (url) => `${url.origin}${url.pathname}`;
 /** One trip to the API, with no retry and no timeout of its own. */
-function sendOnce(config, input, requestIdempotencyKey) {
+function sendOnce(config, input, requestIdempotencyKey, fetchImpl) {
     return Effect.gen(function* () {
         const url = yield* buildUrl(config, input);
         const init = buildRequestInit(config, input, requestIdempotencyKey);
         const response = yield* Effect.tryPromise({
             try: (signal) => 
             // fallow-ignore-next-line security-sink -- the origin is the configured Luca api base url and the path comes from the generated operation manifest with its params encoded, so a tool argument can never move the destination host
-            fetch(url, {
+            fetchImpl(url, {
                 ...init,
-                // A redirect would carry the API key to a host we never named.
-                redirect: "error",
+                // Cloudflare supports manual redirects, not `error`. A 3xx response
+                // falls through as an HTTP error without forwarding the API key.
+                redirect: "manual",
                 signal,
             }),
             catch: (cause) => new LucaNetworkError({
@@ -190,12 +191,12 @@ function sendOnce(config, input, requestIdempotencyKey) {
         }));
     });
 }
-export function createLucaApi(config) {
+export function createLucaApi(config, fetchImpl = fetch) {
     const timeoutMs = config.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
     return {
         // The key each attempt carries is minted by `resilient`, which also decides
         // whether a failure may be replayed under it.
-        request: (input) => resilient(input, timeoutMs, (key) => sendOnce(config, input, key)),
+        request: (input) => resilient(input, timeoutMs, (key) => sendOnce(config, input, key, fetchImpl)),
     };
 }
 export const LucaApiLive = Layer.effect(LucaApi, Effect.gen(function* () {

package/dist/remote.js

@@ -168,7 +168,7 @@ export function createRemoteResponder(options) {
             return yield* Effect.fail(invalidToken(options.resourceMetadataUrl));
         }
         const handler = createMcpHandler(() => createLucaServer({
-            lucaLayer: Layer.succeed(LucaApi, createLucaApi(config.value)),
+            lucaLayer: Layer.succeed(LucaApi, createLucaApi(config.value, options.apiFetch)),
             ...optionalField("toolset", options.toolset),
             ...optionalField("resourceMetadataUrl", options.resourceMetadataUrl),
         }), { ...optionalField("onerror", options.onError) });

package/dist/token-verification.js

@@ -16,8 +16,9 @@ export const sha256Hex = (value) => Effect.tryPromise(() => crypto.subtle.digest
  * One bounded call to the Luca API that carries a token, with `read` turning
  * the response into the verdict. Timeout but no retry: this is on the auth
  * path of every request, and the client retries a 503 on its own schedule. A
- * redirect is an error, because it would carry the token to a host we never
- * named.
+ * redirect is refused, because it would carry the token to a host we never
+ * named. Cloudflare Workers does not support `redirect: "error"`, so fetch
+ * uses `manual` and we reject 3xx responses before the resolver reads them.
  */
 export function callApi(settings, fetchImpl, request, read) {
     const controller = new AbortController();
@@ -25,11 +26,15 @@ export function callApi(settings, fetchImpl, request, read) {
     return Effect.tryPromise({
         try: () => fetchImpl(`${settings.apiBaseUrl}${request.path}`, {
             ...request.init,
-            redirect: "error",
+            redirect: "manual",
             signal: controller.signal,
         }),
         catch: unavailable("Could not reach token verification"),
-    }).pipe(Effect.flatMap(read), Effect.timeoutOrElse({
+    }).pipe(Effect.flatMap((response) => response.status >= 300 && response.status < 400
+        ? Effect.fail(new TokenVerificationUnavailable({
+            message: "Token verification redirected",
+        }))
+        : read(response)), Effect.timeoutOrElse({
         duration: Duration.millis(timeoutMs),
         orElse: () => Effect.fail(new TokenVerificationUnavailable({
             message: `Token verification did not answer within ${timeoutMs}ms`,

package/dist/version.js

@@ -9,6 +9,6 @@
  *
  * Bump this in the same commit as package.json and server.json.
  */
-export const LUCA_MCP_VERSION = "0.3.0";
+export const LUCA_MCP_VERSION = "0.3.1";
 /** The user-agent every outbound Luca API call identifies itself with. */
 export const LUCA_MCP_USER_AGENT = `luca-mcp/${LUCA_MCP_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@setluca/mcp",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "private": false,
   "description": "Let your AI assistant help with Luca conversations, leads, replies, campaigns, and bookings.",
   "keywords": [