@setluca/mcp 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -10,6 +10,30 @@ input schema, or changing what a tool does to a workspace.
 
 ## [Unreleased]
 
+## [0.3.2] - 2026-10-06
+
+### Fixed
+
+- Correct MCP safety hints for CRM schema and health probes, knowledge-source
+  syncs, and the settings read that creates defaults on first use.
+- Clarify the display names and descriptions of the ghosted-lead analytics and
+  weekly business report tools without changing their stable tool names.
+
+## [0.3.1] - 2026-10-06
+
+### Fixed
+
+- Restore authenticated remote MCP discovery and tool calls on Cloudflare.
+  Token checks and tool requests now use a direct service binding to Luca's API,
+  avoiding the public API's WAF challenge. Both paths use Cloudflare's supported
+  manual redirect mode and still reject redirected responses without forwarding
+  credentials.
+
+### Changed
+
+- The remote tool catalog includes explicit safety annotations for directory
+  review. The protocol suite checks the published `tools/list` shape.
+
 ## [0.3.0] - 2026-10-05
 
 This is the first Luca MCP release from its own repository. The package and

package/dist/annotations.js

@@ -8,7 +8,7 @@ import { optionalField } from "./optional-field.js";
 export function operationAnnotationSource(operation) {
     return {
         title: operation.title,
-        readOnly: operation.method === "GET",
+        readOnly: operation.readOnly,
         mutatesExisting: operation.mutatesExisting,
         ...optionalField("confirm", operation.confirm),
         openWorld: operation.openWorld,

package/dist/http.js

@@ -136,17 +136,18 @@ function errorBody(text) {
  */
 const describeUrl = (url) => `${url.origin}${url.pathname}`;
 /** One trip to the API, with no retry and no timeout of its own. */
-function sendOnce(config, input, requestIdempotencyKey) {
+function sendOnce(config, input, requestIdempotencyKey, fetchImpl) {
     return Effect.gen(function* () {
         const url = yield* buildUrl(config, input);
         const init = buildRequestInit(config, input, requestIdempotencyKey);
         const response = yield* Effect.tryPromise({
             try: (signal) => 
             // fallow-ignore-next-line security-sink -- the origin is the configured Luca api base url and the path comes from the generated operation manifest with its params encoded, so a tool argument can never move the destination host
-            fetch(url, {
+            fetchImpl(url, {
                 ...init,
-                // A redirect would carry the API key to a host we never named.
-                redirect: "error",
+                // Cloudflare supports manual redirects, not `error`. A 3xx response
+                // falls through as an HTTP error without forwarding the API key.
+                redirect: "manual",
                 signal,
             }),
             catch: (cause) => new LucaNetworkError({
@@ -190,12 +191,12 @@ function sendOnce(config, input, requestIdempotencyKey) {
         }));
     });
 }
-export function createLucaApi(config) {
+export function createLucaApi(config, fetchImpl = fetch) {
     const timeoutMs = config.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
     return {
         // The key each attempt carries is minted by `resilient`, which also decides
         // whether a failure may be replayed under it.
-        request: (input) => resilient(input, timeoutMs, (key) => sendOnce(config, input, key)),
+        request: (input) => resilient(input, timeoutMs, (key) => sendOnce(config, input, key, fetchImpl)),
     };
 }
 export const LucaApiLive = Layer.effect(LucaApi, Effect.gen(function* () {

package/dist/operations/groups/analytics.js

@@ -36,8 +36,8 @@ export const analyticsOperations = [
     }),
     op({
         id: "analytics.ghostedLeads",
-        title: "List ghosted leads",
-        description: "Ghosted-lead counts, rescue-recovery rate, lost-revenue estimate, and top conversation-killer clusters for a period.",
+        title: "Analyze leads who stopped replying",
+        description: "Summarize leads who stopped replying during a period, including their count, follow-up recovery rate, estimated lost revenue, and common reasons conversations stalled. This is an aggregate report, not a list of individual leads.",
         // Each top-killer cluster label is free text drawn from lead messages.
         untrustedContent: true,
     }),

package/dist/operations/groups/insights.js

@@ -26,6 +26,7 @@ export const insightsOperations = [
     op({
         id: "insights.settings.get",
         title: "Read alert delivery settings",
+        readOnly: false,
         description: "Read which insight alerts reach the coach and how. The row is created with defaults on the first read, so this never 404s. Check it before concluding a quiet feed means nothing is happening \u2014 it may just be muted.",
     }),
     op({

package/dist/operations/groups/integrations.js

@@ -24,6 +24,7 @@ export const integrationsOperations = [
     op({
         id: "integrations.crm.connections.schema",
         title: "Read a CRM's field schema",
+        openWorld: true,
         // sampleRecords are literal contact and deal rows from the coach's CRM, which leads and other people filled in.
         untrustedContent: true,
         description: "Discover CRM provider schema.",
@@ -31,6 +32,7 @@ export const integrationsOperations = [
     op({
         id: "integrations.crm.connections.health",
         title: "Check a CRM connection's health",
+        openWorld: true,
         description: "Probe CRM provider health.",
     }),
     op({

package/dist/operations/groups/knowledge.js

@@ -27,6 +27,7 @@ export const knowledgeOperations = [
         id: "knowledge.sources.sync",
         title: "Re-sync a knowledge source",
         mutatesExisting: true,
+        openWorld: true,
         description: "Queue a re-read of one knowledge source now rather than waiting for its next scheduled sync. It returns as soon as the job is queued, so any new suggestions appear on a later read.",
     }),
     op({

package/dist/operations/registry.js

@@ -291,6 +291,7 @@ export function op(input) {
         path,
         scopes,
         mutatesExisting: mutatesExistingRoute,
+        readOnly: input.readOnly ?? method === "GET",
         idempotencyRequired,
         ...optionalField("confirm", input.confirm),
         openWorld: input.openWorld ?? false,

package/dist/remote.js

@@ -168,7 +168,7 @@ export function createRemoteResponder(options) {
             return yield* Effect.fail(invalidToken(options.resourceMetadataUrl));
         }
         const handler = createMcpHandler(() => createLucaServer({
-            lucaLayer: Layer.succeed(LucaApi, createLucaApi(config.value)),
+            lucaLayer: Layer.succeed(LucaApi, createLucaApi(config.value, options.apiFetch)),
             ...optionalField("toolset", options.toolset),
             ...optionalField("resourceMetadataUrl", options.resourceMetadataUrl),
         }), { ...optionalField("onerror", options.onError) });

package/dist/task-tools/analytics.js

@@ -177,8 +177,8 @@ const getAnalytics = taskTool({
 });
 const magicMonday = taskTool({
     name: "luca_analytics_magic_monday",
-    title: "Get the Magic Monday report",
-    description: "Return the coach's weekly business intelligence report: pipeline funnel, revenue and ROI, response-speed impact, a point-in-time revenue forecast, and call intelligence (show/close rates), all for the current week. Composes five analytics reads into a single call. Example: call with {} on Monday morning for the week's report.",
+    title: "Read the weekly business report",
+    description: "Return the current week's business report (called Magic Monday in Luca): pipeline funnel, revenue and ROI, response-speed impact, a point-in-time revenue forecast, and call intelligence (show/close rates). Composes five analytics reads into a single call. Example: call with {} for the weekly report.",
     inputSchema: {
         ...WORKSPACE_INPUT_FIELDS,
     },

package/dist/token-verification.js

@@ -16,8 +16,9 @@ export const sha256Hex = (value) => Effect.tryPromise(() => crypto.subtle.digest
  * One bounded call to the Luca API that carries a token, with `read` turning
  * the response into the verdict. Timeout but no retry: this is on the auth
  * path of every request, and the client retries a 503 on its own schedule. A
- * redirect is an error, because it would carry the token to a host we never
- * named.
+ * redirect is refused, because it would carry the token to a host we never
+ * named. Cloudflare Workers does not support `redirect: "error"`, so fetch
+ * uses `manual` and we reject 3xx responses before the resolver reads them.
  */
 export function callApi(settings, fetchImpl, request, read) {
     const controller = new AbortController();
@@ -25,11 +26,15 @@ export function callApi(settings, fetchImpl, request, read) {
     return Effect.tryPromise({
         try: () => fetchImpl(`${settings.apiBaseUrl}${request.path}`, {
             ...request.init,
-            redirect: "error",
+            redirect: "manual",
             signal: controller.signal,
         }),
         catch: unavailable("Could not reach token verification"),
-    }).pipe(Effect.flatMap(read), Effect.timeoutOrElse({
+    }).pipe(Effect.flatMap((response) => response.status >= 300 && response.status < 400
+        ? Effect.fail(new TokenVerificationUnavailable({
+            message: "Token verification redirected",
+        }))
+        : read(response)), Effect.timeoutOrElse({
         duration: Duration.millis(timeoutMs),
         orElse: () => Effect.fail(new TokenVerificationUnavailable({
             message: `Token verification did not answer within ${timeoutMs}ms`,

package/dist/tool.js

@@ -91,7 +91,7 @@ function buildFromTaskTool(tool) {
             ...openApiToolOutputFields({ body: null, untrustedContent }),
             result: tool.outputSchema,
         },
-        readOnly: composed.every((operation) => operation.method === "GET"),
+        readOnly: composed.every((operation) => operation.readOnly),
         // A task tool overwrites or removes existing state when any write it
         // composes does.
         mutatesExisting: composed.some((operation) => operation.mutatesExisting),

package/dist/version.js

@@ -9,6 +9,6 @@
  *
  * Bump this in the same commit as package.json and server.json.
  */
-export const LUCA_MCP_VERSION = "0.3.0";
+export const LUCA_MCP_VERSION = "0.3.2";
 /** The user-agent every outbound Luca API call identifies itself with. */
 export const LUCA_MCP_USER_AGENT = `luca-mcp/${LUCA_MCP_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@setluca/mcp",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "private": false,
   "description": "Let your AI assistant help with Luca conversations, leads, replies, campaigns, and bookings.",
   "keywords": [