Skip to content

vinkius-labs/mcp-fusion

v3.15.1 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Summary

AI summary

Fixed latent architectural fragilities in tool response detection across @vurb/core and @vurb/oauth.

Full changelog

Fixed

@vurb/core — Unified Brand-Based ToolResponse Detection

Five fixes eliminating latent architectural fragilities discovered during a deep audit of the core framework.

  • PostProcessor.isToolResponse() — shape-based heuristic replaced with TOOL_RESPONSE_BRAND symbol detection, eliminating false positives from domain objects coincidentally matching the ToolResponse shape
  • ResponseBuilder.build() — now stamps TOOL_RESPONSE_BRAND (was missing, causing MVA layer corruption when using response().uiBlock().build())
  • GroupedToolBuilder.invalidateCache() — encapsulated cache reset replaces fragile duck-type private field mutation in ToolRegistry
  • TOOL_RESPONSE_BRAND barrel export — symbol was not re-exported from @vurb/core's public barrel, causing satellite package imports to resolve to undefined

@vurb/oauth — Branded Response Alignment

  • createAuthTool ok()/fail() helpers — aligned with brand-based detection; ok() now delegates to success(), fail() stamps the brand explicitly

Changed

  • ToolBuilder interface — added optional mergeActions() and invalidateCache() methods

Full test suite: 315 files, 6,379 tests — 0 failures.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

Sign up free

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Earlier breaking changes

  • v4.0.0 All packages now published under the `@mcpfusion` npm scope.
  • v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
  • v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.

Beta — feedback welcome: [email protected]