@leadbay/mcp 0.19.2 → 0.19.3

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog — @leadbay/mcp
 
+## 0.19.3 — 2026-06-15
+
+- **New tool `leadbay_send_feedback`**: delivers a user-authored message to the same destination as the web app's "Send feedback" form — the team's Sentry feedback inbox (the website form calls `Sentry.captureFeedback`; there is no Leadbay API endpoint, so the MCP reuses its already-initialized `@sentry/node`). User-initiated ("send feedback / report a bug / tell Leadbay…"), or offered on a tool error and sent only on explicit yes. Distinct from the silent, agent-detected, PostHog-only `leadbay_report_friction`: feedback is explicit, user-authored, and reaches the team's inbox. Honest delivery — if the Sentry transport isn't available it returns `sent:false`, never a false success; Sentry is flushed after capture so the event actually ships; identity is attached when it resolves (anonymous fallback rather than dropping the message). Write-gated (`LEADBAY_MCP_WRITE=1`) since it sends data outward.
+
 ## 0.19.2 — 2026-06-10
 
 - **Stop paging Sentry on a missing `_triggered_by`**: a composite tool called without `_triggered_by` is a recoverable agent mistake — the host just re-calls with the field set. The guard used to `throw` an `{error:true, code:"LAST_PROMPT_REQUIRED"}` envelope into the shared catch, where `isLeadbayBusinessError` matched it and fired `captureException`, auto-opening a top-priority Sentry/GitHub bug (product#3718) on every dropped field. The guard now returns the `isError` envelope directly. Behavior toward the LLM is unchanged (same text, same `isError`, same recovery hint), and PostHog visibility is preserved (`captureToolCall` + `captureCompositeCall` still fire `ok:false` / `LAST_PROMPT_REQUIRED`, so the mandate-ignore rate stays observable); only `captureException` is dropped.

package/dist/bin.js

@@ -277,13 +277,40 @@ var init_client = __esm({
         if (next)
           next();
       }
-      async request(method, path, body) {
+      // Leadbay tokens don't expire, so a 401 is almost always a transient
+      // server-side blip. Retry the request ONCE before surfacing it — a single
+      // retry clears the vast majority of these without the agent ever seeing an
+      // error. If the retry also 401s, it's a real Leadbay-side problem and the
+      // error envelope says so.
+      //
+      // Arrow-function field so `this` stays bound even when the method is passed
+      // as a bare reference (see request()'s ternary). Retries are GET-ONLY: a 401
+      // on a write (POST/PUT/DELETE) may arrive AFTER the mutation already committed
+      // server-side, so blindly re-sending it would double-execute the write. Reads
+      // are idempotent, so retrying them is safe. The 250ms backoff releases the
+      // concurrency slot first (release → sleep → re-acquire) so a wave of 401s
+      // doesn't pin all MAX_CONCURRENT slots in setTimeout and stall the queue.
+      httpsRequestWithRetry = async (method, url, headers, body) => {
+        const res = await httpsRequest(method, url, headers, body);
+        if (res.status === 401 && method.toUpperCase() === "GET") {
+          this.releaseSemaphore();
+          try {
+            await new Promise((r) => setTimeout(r, 250));
+          } finally {
+            await this.acquireSemaphore();
+          }
+          return httpsRequest(method, url, headers, body);
+        }
+        return res;
+      };
+      async request(method, path, body, opts) {
         if (process.env.LEADBAY_MOCK === "1") {
           return this.mockRequest(method, path, body);
         }
         if (!this.token) {
           throw this.makeError("NOT_AUTHENTICATED", "Not logged in to Leadbay", "Set LEADBAY_TOKEN in your MCP client config, or run: npx -y @leadbay/mcp install --email <you> --region <us|fr>", path);
         }
+        const retryOn401 = opts?.retryOn401 !== false;
         await this.acquireSemaphore();
         try {
           const url = `${this._baseUrl}/1.5${path}`;
@@ -293,7 +320,7 @@ var init_client = __esm({
           if (body) {
             headers["Content-Type"] = "application/json";
           }
-          const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+          const res = await (retryOn401 ? this.httpsRequestWithRetry : httpsRequest)(method, url, headers, body ? JSON.stringify(body) : void 0);
           this._lastMeta = {
             region: this._region,
             endpoint: `${method} ${path}`,
@@ -328,7 +355,7 @@ var init_client = __esm({
           if (body) {
             headers["Content-Type"] = "application/json";
           }
-          const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+          const res = await this.httpsRequestWithRetry(method, url, headers, body ? JSON.stringify(body) : void 0);
           this._lastMeta = {
             region: this._region,
             endpoint: `${method} ${path}`,
@@ -361,7 +388,7 @@ var init_client = __esm({
             Authorization: `Bearer ${this.token}`,
             "Content-Type": contentType
           };
-          const res = await httpsRequest(method, url, headers, body);
+          const res = await this.httpsRequestWithRetry(method, url, headers, body);
           this._lastMeta = {
             region: this._region,
             endpoint: `${method} ${path}`,
@@ -444,7 +471,7 @@ var init_client = __esm({
         }
         const retryAfter = parseRetryAfter(headers["retry-after"]);
         if (status === 401) {
-          return this.makeError("AUTH_EXPIRED", "Authentication token expired or invalid", "Your LEADBAY_TOKEN is no longer valid. Regenerate it: npx -y @leadbay/mcp login --email <you> --region <us|fr>, then restart your MCP client.", endpoint, null, status);
+          return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", "Leadbay tokens don't expire on a timer, so this isn't a stale token. A 401 here is usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly; if it persists, offer to report it to the team.", endpoint, null, status);
         }
         if (status === 429 || status === 402 || parsed?.error === "quota_exceeded" || parsed?.error?.code === "quota_exceeded") {
           const hintBase = retryAfter ? `Wait ${retryAfter}s before retrying` : "Wait, then retry";
@@ -5440,7 +5467,7 @@ var init_notifications = __esm({
 });
 
 // ../core/dist/tool-descriptions.generated.js
-var leadbay_account_history, leadbay_account_status, leadbay_acknowledge_notification, leadbay_add_contact, leadbay_add_leads_to_campaign, leadbay_add_note, leadbay_adjust_audience, leadbay_agent_memory_capture, leadbay_agent_memory_recall, leadbay_agent_memory_review, leadbay_answer_clarification, leadbay_bulk_enrich_status, leadbay_bulk_qualify_leads, leadbay_campaign_call_sheet, leadbay_campaign_progression, leadbay_clear_selection, leadbay_clear_user_prompt, leadbay_create_campaign, leadbay_create_custom_field, leadbay_create_lens, leadbay_create_lens_draft, leadbay_create_topup_link, leadbay_deselect_leads, leadbay_discover_leads, leadbay_dislike_lead, leadbay_dismiss_clarification, leadbay_enrich_contacts, leadbay_enrich_titles, leadbay_extend_lens, leadbay_followups_map, leadbay_get_clarification, leadbay_get_contacts, leadbay_get_enrichment_job_titles, leadbay_get_epilogue_responses, leadbay_get_lead_activities, leadbay_get_lead_notes, leadbay_get_lead_profile, leadbay_get_lens_filter, leadbay_get_lens_scoring, leadbay_get_prospecting_actions, leadbay_get_quota, leadbay_get_selection_ids, leadbay_get_taste_profile, leadbay_get_user_prompt, leadbay_get_web_fetch, leadbay_import_and_qualify, leadbay_import_leads, leadbay_import_status, leadbay_launch_bulk_enrichment, leadbay_like_lead, leadbay_list_campaigns, leadbay_list_lenses, leadbay_list_locations, leadbay_list_mappable_fields, leadbay_list_sectors, leadbay_login, leadbay_my_lenses, leadbay_new_lens, leadbay_open_billing_portal, leadbay_pick_clarification, leadbay_pin_contact, leadbay_prepare_outreach, leadbay_preview_bulk_enrichment, leadbay_promote_lens, leadbay_pull_followups, leadbay_pull_leads, leadbay_qualify_lead, leadbay_qualify_status, leadbay_recall_ordered_titles, leadbay_refine_prompt, leadbay_remove_contact, leadbay_remove_epilogue, leadbay_remove_leads_from_campaign, leadbay_remove_pushback, leadbay_report_friction, leadbay_report_outreach, leadbay_research_lead_by_id, leadbay_research_lead_by_name_fuzzy, leadbay_resolve_import_rows, leadbay_scan_portfolio_signals, leadbay_seed_candidates, leadbay_select_leads, leadbay_set_active_lens, leadbay_set_epilogue_status, leadbay_set_pushback, leadbay_set_user_prompt, leadbay_tour_plan, leadbay_unpin_contact, leadbay_update_contact, leadbay_update_lens, leadbay_update_lens_filter;
+var leadbay_account_history, leadbay_account_status, leadbay_acknowledge_notification, leadbay_add_contact, leadbay_add_leads_to_campaign, leadbay_add_note, leadbay_adjust_audience, leadbay_agent_memory_capture, leadbay_agent_memory_recall, leadbay_agent_memory_review, leadbay_answer_clarification, leadbay_bulk_enrich_status, leadbay_bulk_qualify_leads, leadbay_campaign_call_sheet, leadbay_campaign_progression, leadbay_clear_selection, leadbay_clear_user_prompt, leadbay_create_campaign, leadbay_create_custom_field, leadbay_create_lens, leadbay_create_lens_draft, leadbay_create_topup_link, leadbay_deselect_leads, leadbay_discover_leads, leadbay_dislike_lead, leadbay_dismiss_clarification, leadbay_enrich_contacts, leadbay_enrich_titles, leadbay_extend_lens, leadbay_followups_map, leadbay_get_clarification, leadbay_get_contacts, leadbay_get_enrichment_job_titles, leadbay_get_epilogue_responses, leadbay_get_lead_activities, leadbay_get_lead_notes, leadbay_get_lead_profile, leadbay_get_lens_filter, leadbay_get_lens_scoring, leadbay_get_prospecting_actions, leadbay_get_quota, leadbay_get_selection_ids, leadbay_get_taste_profile, leadbay_get_user_prompt, leadbay_get_web_fetch, leadbay_import_and_qualify, leadbay_import_leads, leadbay_import_status, leadbay_launch_bulk_enrichment, leadbay_like_lead, leadbay_list_campaigns, leadbay_list_lenses, leadbay_list_locations, leadbay_list_mappable_fields, leadbay_list_sectors, leadbay_login, leadbay_my_lenses, leadbay_new_lens, leadbay_open_billing_portal, leadbay_pick_clarification, leadbay_pin_contact, leadbay_prepare_outreach, leadbay_preview_bulk_enrichment, leadbay_promote_lens, leadbay_pull_followups, leadbay_pull_leads, leadbay_qualify_lead, leadbay_qualify_status, leadbay_recall_ordered_titles, leadbay_refine_prompt, leadbay_remove_contact, leadbay_remove_epilogue, leadbay_remove_leads_from_campaign, leadbay_remove_pushback, leadbay_report_friction, leadbay_report_outreach, leadbay_research_lead_by_id, leadbay_research_lead_by_name_fuzzy, leadbay_resolve_import_rows, leadbay_scan_portfolio_signals, leadbay_seed_candidates, leadbay_select_leads, leadbay_send_feedback, leadbay_set_active_lens, leadbay_set_epilogue_status, leadbay_set_pushback, leadbay_set_user_prompt, leadbay_tour_plan, leadbay_unpin_contact, leadbay_update_contact, leadbay_update_lens, leadbay_update_lens_filter;
 var init_tool_descriptions_generated = __esm({
   "../core/dist/tool-descriptions.generated.js"() {
     "use strict";
@@ -8722,6 +8749,88 @@ WHEN TO USE: low-level. The user's selection is a per-token global state \u2014
 WHEN NOT TO USE: in normal flow \u2014 leadbay_enrich_titles wraps select \u2192 action \u2192 clear in one call with proper Mutex protection. Calling this directly without acquiring the selection lock can clobber concurrent composite calls.
 
 This tool MUTATES state. The caller (agent or human-in-the-loop) is responsible for confirming intent before invocation; the MCP server does not soft-prompt for confirmation. See \`annotations.destructiveHint\`.
+`;
+    leadbay_send_feedback = `## WHEN TO USE
+
+Trigger phrases: "send feedback", "I want to report a bug", "tell the Leadbay team", "let Leadbay know", "give feedback", "report this to support", "I have a feature request".
+
+**Memory:** recall + capture via \`leadbay_agent_memory_*\` tools.
+
+Do NOT use for: "no, I meant / still nothing / ugh" \u2192 \`leadbay_report_friction\`; "log the email I sent" \u2192 \`leadbay_report_outreach\`.
+
+Prefer when: the user explicitly wants the Leadbay TEAM to receive a message they authored \u2014 or accepts your offer to report an error. For silent, agent-detected friction signals use leadbay_report_friction instead.
+
+Examples that SHOULD invoke this tool:
+- "Send feedback to the team: the lead scores feel off this week."
+- "Can you report a bug? Pulling leads in Lyon returns nothing."
+- "Tell Leadbay I'd love a way to schedule my morning check-in."
+
+Examples that should NOT invoke this tool (sound similar, route elsewhere):
+- "No, I meant Wisconsin not Wyoming."
+- "I emailed Acme \u2014 log that outreach."
+- "Thumbs down on this lead."
+
+## RENDER (quick)
+
+Confirm the exact wording with the user BEFORE calling (this is sent to
+the team). After sending, show a one-line confirmation from the result's
+\`message\` (e.g. "\u2713 Sent to the Leadbay team"). If \`sent\` is false, tell
+the user it could NOT be delivered \u2014 never imply it was sent.
+
+---
+
+Deliver a user-authored message to the Leadbay team's feedback inbox \u2014 the same
+destination as the web app's feedback form. **You do not write the feedback;
+the user does.** Capture their words, confirm the phrasing, then send.
+
+## Parameters
+- \`message\` (required) \u2014 the user's feedback, in their own words. Confirm it
+  with the user before sending. Cap 4000 chars.
+- \`associated_error_id\` (optional) \u2014 a Sentry event id to attach the feedback
+  to (e.g. the id surfaced by an error the user just hit), so the team sees the
+  feedback on that exact issue.
+
+## When a tool errors \u2014 OFFER, don't auto-send
+When a Leadbay tool returns an error and the user might want the team to know,
+you may OFFER: *"Want me to send feedback about this to the Leadbay team?"*
+- Send ONLY if the user says yes AND gives (or approves) a message.
+- Never send feedback the user didn't author or approve.
+- If an error event id is available, pass it as \`associated_error_id\`.
+
+## Result
+- \`sent: true\` \u2192 it reached the team. Show the confirmation from \`message\`.
+- \`sent: false\` \u2192 delivery wasn't possible (feedback not available on this
+  client). Tell the user it was NOT sent. Do not claim success.
+
+This is the only "talk to the Leadbay team" tool. It does not mutate any
+Leadbay data. For silent friction signals you detect yourself, use
+\`leadbay_report_friction\` instead.
+
+## NEXT STEPS \u2014 after sending feedback
+
+**ALWAYS render NEXT STEPS via your host's next-step widget.** Use whichever is in your tool set \u2014 the NAME and SCHEMA differ: **\`ask_user_input_v0\`** (Claude chat / ChatGPT) takes plain-string options with \`type:"single_select"\`; **\`AskUserQuestion\`** (Claude cowork / Claude Code) takes object options \`{label, description}\` plus a required short \`header\` (\u226412 chars) and \`multiSelect\`, NO \`type\` field, and never add an "Other" option (the host adds it). Match the schema to the tool you actually have \u2014 the wrong schema fails silently and you fall back to prose. Prose bullets are the fallback ONLY when NEITHER widget exists. Any turn that would end with a choice must be the widget \u2014 the widget IS the question.
+
+**If the tool result carries a \`next_steps\` object, that is the source of truth \u2014 use it directly.** Each option has a short \`.label\` (\u22645 words) and a full \`.description\`. Map \`next_steps.options[]\` into your host widget VERBATIM and in order: for \`AskUserQuestion\` (cowork / Claude Code) pass each as \`{label, description}\`; for \`ask_user_input_v0\` (Claude chat / ChatGPT, string options only) pass each option's \`.description\` as the string (it's the full sentence). Do NOT reword, reorder, drop, or prose-ify them \u2014 they're built deterministically by the server so the offer (incl. the artifact option at position 0) fires every time. Fall back to the table below only when there is NO \`next_steps\` field.
+
+**One exception \u2014 skip the widget** when the user's original message contained a complete sequential instruction chain ("show me X and then do Y") AND all stated steps have been completed. In that case, end with STOP directly \u2014 the user stated their full plan and does not need a "what next?" prompt.
+- Skip example: "Show me today's leads and then research the top one for me." \u2192 after research completes, emit STOP without the widget.
+- Do NOT skip for: plain requests ("show me today's leads", "run my check-in"), recurring-language requests ("I do this every day"), or requests where only one action was stated.
+
+Pick 2\u20134 rows from the (Observation, Suggest, Calls) table below most relevant to the response, then call your host's widget with ITS schema (per the schema rules above \u2014 wrong schema fails silently):
+- \`ask_user_input_v0\`: \`{questions:[{question,type:"single_select",options:["<Suggest 1>","<Suggest 2>"]}]}\`
+- \`AskUserQuestion\`: \`{questions:[{question,header:"Next step",multiSelect:false,options:[{label:"<\u22645 words>",description:"<Suggest 1>"}]}]}\`
+
+User picks \u2192 call the matching \`Calls\` tool. Constraints: 2\u20134 mutually-exclusive options, AskUserQuestion labels \u22645 words (full text in \`description\`), max 3 questions. Table stays internal; never recite it.
+
+---
+
+
+
+| Observation                                  | Suggest                                              | Calls                                   |
+|----------------------------------------------|------------------------------------------------------|-----------------------------------------|
+| \`sent == true\`                               | "Anything else you'd like to flag to the team?"      | leadbay_send_feedback(message)          |
+| \`sent == false\`                              | "It didn't go through \u2014 want to try sending again?"  | leadbay_send_feedback(message)          |
+| Feedback was about an error the user hit      | "Want me to retry the action that failed?"           | (re-call the tool that errored)         |
 `;
     leadbay_set_active_lens = `Mark a lens as last-used. Subsequent \`/me\` reads return it as \`last_requested_lens\`, so all composite tools default to it.
 
@@ -21240,6 +21349,90 @@ var init_report_friction = __esm({
   }
 });
 
+// ../core/dist/tools/send-feedback.js
+var MESSAGE_MAX, sendFeedback;
+var init_send_feedback = __esm({
+  "../core/dist/tools/send-feedback.js"() {
+    "use strict";
+    init_tool_descriptions_generated();
+    MESSAGE_MAX = 4e3;
+    sendFeedback = {
+      name: "leadbay_send_feedback",
+      annotations: {
+        title: "Send feedback to the Leadbay team",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true
+      },
+      description: leadbay_send_feedback,
+      // Write-gated: it sends data outward to the Leadbay team. Registered in
+      // compositeWriteTools (default-on since 0.3.0).
+      write: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          message: {
+            type: "string",
+            description: "The user's feedback, in their own words. Confirm the wording with the user BEFORE calling \u2014 this is sent to the Leadbay team. Cap 4000 chars."
+          },
+          associated_error_id: {
+            type: "string",
+            description: "Optional: a Sentry event id to attach this feedback to (e.g. the id from an error the user just hit), so the team sees the feedback on that exact issue."
+          }
+        },
+        required: ["message"],
+        additionalProperties: false
+      },
+      outputSchema: {
+        type: "object",
+        description: "Whether the feedback reached the Leadbay team. `sent: true` means it landed in the team's inbox.",
+        properties: {
+          sent: { type: "boolean" },
+          message: { type: "string" },
+          _meta: {
+            type: "object",
+            properties: { region: { type: "string" } }
+          }
+        }
+      },
+      execute: async (client, params, ctx) => {
+        const text = typeof params.message === "string" ? params.message.trim() : "";
+        if (!text) {
+          return {
+            error: true,
+            code: "BAD_INPUT",
+            message: "message is required \u2014 pass the user's feedback text.",
+            hint: "Ask the user what they'd like to tell the Leadbay team, then call again with their words in `message`."
+          };
+        }
+        const message = text.length > MESSAGE_MAX ? `${text.slice(0, MESSAGE_MAX - 1)}\u2026` : text;
+        if (!ctx?.sendFeedback) {
+          return {
+            sent: false,
+            message: "Feedback could not be sent from this client (feedback delivery isn't available here). Let the user know it wasn't delivered.",
+            _meta: { region: client.region }
+          };
+        }
+        const errorId = typeof params.associated_error_id === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(params.associated_error_id) ? params.associated_error_id : void 0;
+        const sent = await ctx.sendFeedback(message, {
+          ...errorId ? { associatedEventId: errorId } : {}
+        });
+        return {
+          sent,
+          message: sent ? "Sent to the Leadbay team \u2014 thanks for the feedback." : (
+            // `sent:false` means the bounded flush didn't confirm within the
+            // window — the envelope may still drain on shutdown. Don't assert it
+            // failed (that trains users to re-send and spam the inbox).
+            "Delivery not confirmed \u2014 it may still reach the Leadbay team. Avoid re-sending unless the user wants to."
+          ),
+          _meta: { region: client.region }
+        };
+      }
+    };
+  }
+});
+
 // ../core/dist/index.js
 var dist_exports = {};
 __export(dist_exports, {
@@ -21370,6 +21563,7 @@ __export(dist_exports, {
   scanPortfolioSignals: () => scanPortfolioSignals,
   seedCandidates: () => seedCandidates,
   selectLeads: () => selectLeads,
+  sendFeedback: () => sendFeedback,
   setActiveLens: () => setActiveLens,
   setEpilogueStatus: () => setEpilogueStatus,
   setPushback: () => setPushback,
@@ -21481,6 +21675,7 @@ var init_dist = __esm({
     init_answer_clarification();
     init_report_outreach();
     init_report_friction();
+    init_send_feedback();
     init_bulk_store();
     agentMemoryTools = [
       agentMemoryRecall,
@@ -21612,6 +21807,13 @@ var init_dist = __esm({
       refinePrompt,
       answerClarification,
       reportOutreach,
+      // sendFeedback is granular-shaped (a single call to the telemetry seam →
+      // Sentry.captureFeedback, same inbox as the web app's feedback form), so it
+      // lives in tools/, NOT composite/. Registered here (not advanced-gated) so
+      // users can send feedback in-conversation without LEADBAY_MCP_ADVANCED.
+      // Write-gated since it sends data outward. Not in COMPOSITE_FILE_TOOL_NAMES,
+      // so _triggered_by is optional (no orchestration / mandatory-intent-trace).
+      sendFeedback,
       importLeads,
       importAndQualify,
       // Contact management (product#3703) — each is a single-call relay, so
@@ -23081,6 +23283,7 @@ var NOOP_TELEMETRY = {
   },
   captureException: () => {
   },
+  captureFeedback: async () => false,
   captureUpdateCheck: () => {
   },
   captureUpdatePrompted: () => {
@@ -23335,6 +23538,41 @@ function initTelemetry(opts) {
         logger?.warn?.(`sentry captureException failed: ${e?.message ?? e}`);
       }
     },
+    async captureFeedback(message, opts2) {
+      if (!sentryReady) return false;
+      const trimmed = (message ?? "").trim();
+      if (!trimmed) return false;
+      if (identityPromise) {
+        let waitTimer;
+        try {
+          await Promise.race([
+            identityPromise,
+            new Promise((resolve) => {
+              waitTimer = setTimeout(resolve, 2e3);
+            })
+          ]);
+        } catch {
+        } finally {
+          if (waitTimer) clearTimeout(waitTimer);
+        }
+      }
+      try {
+        Sentry.captureFeedback({
+          message: trimmed,
+          ...me?.name ? { name: me.name } : {},
+          ...me?.email ? { email: me.email } : {},
+          ...opts2?.associatedEventId ? { associatedEventId: opts2.associatedEventId } : {}
+        });
+        const flushed = await Sentry.flush(4e3);
+        if (!flushed) {
+          logger?.warn?.("sentry feedback flush timed out (event may be buffered)");
+        }
+        return flushed;
+      } catch (e) {
+        logger?.warn?.(`sentry captureFeedback failed: ${e?.message ?? e}`);
+        return false;
+      }
+    },
     async shutdown() {
       const tasks = [];
       if (posthog) tasks.push(posthog.shutdown(2e3).catch(() => void 0));
@@ -24207,7 +24445,11 @@ function buildServer(client, opts = {}) {
         notificationsInbox: opts.notificationsInbox,
         signal: extra.signal,
         progress,
-        elicit
+        elicit,
+        // Route leadbay_send_feedback to Sentry's feedback inbox (same place
+        // the web app's form lands). NOOP_TELEMETRY returns false, so the
+        // tool reports honestly when telemetry is off.
+        sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
       maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
@@ -25648,7 +25890,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.19.2";
+var VERSION = "0.19.3";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 
@@ -25923,7 +26165,7 @@ async function resolveClientFromEnv(logger) {
   logger.info?.("Auto-detecting region via /users/me on us and fr...");
   const probe = async (region) => {
     const c = createClient({ token, region });
-    await c.request("GET", "/users/me");
+    await c.request("GET", "/users/me", void 0, { retryOn401: false });
     return c;
   };
   try {

package/dist/http-server.js

@@ -1519,13 +1519,40 @@ var LeadbayClient = class {
     if (next)
       next();
   }
-  async request(method, path, body) {
+  // Leadbay tokens don't expire, so a 401 is almost always a transient
+  // server-side blip. Retry the request ONCE before surfacing it — a single
+  // retry clears the vast majority of these without the agent ever seeing an
+  // error. If the retry also 401s, it's a real Leadbay-side problem and the
+  // error envelope says so.
+  //
+  // Arrow-function field so `this` stays bound even when the method is passed
+  // as a bare reference (see request()'s ternary). Retries are GET-ONLY: a 401
+  // on a write (POST/PUT/DELETE) may arrive AFTER the mutation already committed
+  // server-side, so blindly re-sending it would double-execute the write. Reads
+  // are idempotent, so retrying them is safe. The 250ms backoff releases the
+  // concurrency slot first (release → sleep → re-acquire) so a wave of 401s
+  // doesn't pin all MAX_CONCURRENT slots in setTimeout and stall the queue.
+  httpsRequestWithRetry = async (method, url, headers, body) => {
+    const res = await httpsRequest(method, url, headers, body);
+    if (res.status === 401 && method.toUpperCase() === "GET") {
+      this.releaseSemaphore();
+      try {
+        await new Promise((r) => setTimeout(r, 250));
+      } finally {
+        await this.acquireSemaphore();
+      }
+      return httpsRequest(method, url, headers, body);
+    }
+    return res;
+  };
+  async request(method, path, body, opts) {
     if (process.env.LEADBAY_MOCK === "1") {
       return this.mockRequest(method, path, body);
     }
     if (!this.token) {
       throw this.makeError("NOT_AUTHENTICATED", "Not logged in to Leadbay", "Set LEADBAY_TOKEN in your MCP client config, or run: npx -y @leadbay/mcp install --email <you> --region <us|fr>", path);
     }
+    const retryOn401 = opts?.retryOn401 !== false;
     await this.acquireSemaphore();
     try {
       const url = `${this._baseUrl}/1.5${path}`;
@@ -1535,7 +1562,7 @@ var LeadbayClient = class {
       if (body) {
         headers["Content-Type"] = "application/json";
       }
-      const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+      const res = await (retryOn401 ? this.httpsRequestWithRetry : httpsRequest)(method, url, headers, body ? JSON.stringify(body) : void 0);
       this._lastMeta = {
         region: this._region,
         endpoint: `${method} ${path}`,
@@ -1570,7 +1597,7 @@ var LeadbayClient = class {
       if (body) {
         headers["Content-Type"] = "application/json";
       }
-      const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+      const res = await this.httpsRequestWithRetry(method, url, headers, body ? JSON.stringify(body) : void 0);
       this._lastMeta = {
         region: this._region,
         endpoint: `${method} ${path}`,
@@ -1603,7 +1630,7 @@ var LeadbayClient = class {
         Authorization: `Bearer ${this.token}`,
         "Content-Type": contentType
       };
-      const res = await httpsRequest(method, url, headers, body);
+      const res = await this.httpsRequestWithRetry(method, url, headers, body);
       this._lastMeta = {
         region: this._region,
         endpoint: `${method} ${path}`,
@@ -1686,7 +1713,7 @@ var LeadbayClient = class {
     }
     const retryAfter = parseRetryAfter(headers["retry-after"]);
     if (status === 401) {
-      return this.makeError("AUTH_EXPIRED", "Authentication token expired or invalid", "Your LEADBAY_TOKEN is no longer valid. Regenerate it: npx -y @leadbay/mcp login --email <you> --region <us|fr>, then restart your MCP client.", endpoint, null, status);
+      return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", "Leadbay tokens don't expire on a timer, so this isn't a stale token. A 401 here is usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly; if it persists, offer to report it to the team.", endpoint, null, status);
     }
     if (status === 429 || status === 402 || parsed?.error === "quota_exceeded" || parsed?.error?.code === "quota_exceeded") {
       const hintBase = retryAfter ? `Wait ${retryAfter}s before retrying` : "Wait, then retry";
@@ -9546,6 +9573,88 @@ WHEN NOT TO USE: in normal flow \u2014 leadbay_enrich_titles wraps select \u2192
 
 This tool MUTATES state. The caller (agent or human-in-the-loop) is responsible for confirming intent before invocation; the MCP server does not soft-prompt for confirmation. See \`annotations.destructiveHint\`.
 `;
+var leadbay_send_feedback = `## WHEN TO USE
+
+Trigger phrases: "send feedback", "I want to report a bug", "tell the Leadbay team", "let Leadbay know", "give feedback", "report this to support", "I have a feature request".
+
+**Memory:** recall + capture via \`leadbay_agent_memory_*\` tools.
+
+Do NOT use for: "no, I meant / still nothing / ugh" \u2192 \`leadbay_report_friction\`; "log the email I sent" \u2192 \`leadbay_report_outreach\`.
+
+Prefer when: the user explicitly wants the Leadbay TEAM to receive a message they authored \u2014 or accepts your offer to report an error. For silent, agent-detected friction signals use leadbay_report_friction instead.
+
+Examples that SHOULD invoke this tool:
+- "Send feedback to the team: the lead scores feel off this week."
+- "Can you report a bug? Pulling leads in Lyon returns nothing."
+- "Tell Leadbay I'd love a way to schedule my morning check-in."
+
+Examples that should NOT invoke this tool (sound similar, route elsewhere):
+- "No, I meant Wisconsin not Wyoming."
+- "I emailed Acme \u2014 log that outreach."
+- "Thumbs down on this lead."
+
+## RENDER (quick)
+
+Confirm the exact wording with the user BEFORE calling (this is sent to
+the team). After sending, show a one-line confirmation from the result's
+\`message\` (e.g. "\u2713 Sent to the Leadbay team"). If \`sent\` is false, tell
+the user it could NOT be delivered \u2014 never imply it was sent.
+
+---
+
+Deliver a user-authored message to the Leadbay team's feedback inbox \u2014 the same
+destination as the web app's feedback form. **You do not write the feedback;
+the user does.** Capture their words, confirm the phrasing, then send.
+
+## Parameters
+- \`message\` (required) \u2014 the user's feedback, in their own words. Confirm it
+  with the user before sending. Cap 4000 chars.
+- \`associated_error_id\` (optional) \u2014 a Sentry event id to attach the feedback
+  to (e.g. the id surfaced by an error the user just hit), so the team sees the
+  feedback on that exact issue.
+
+## When a tool errors \u2014 OFFER, don't auto-send
+When a Leadbay tool returns an error and the user might want the team to know,
+you may OFFER: *"Want me to send feedback about this to the Leadbay team?"*
+- Send ONLY if the user says yes AND gives (or approves) a message.
+- Never send feedback the user didn't author or approve.
+- If an error event id is available, pass it as \`associated_error_id\`.
+
+## Result
+- \`sent: true\` \u2192 it reached the team. Show the confirmation from \`message\`.
+- \`sent: false\` \u2192 delivery wasn't possible (feedback not available on this
+  client). Tell the user it was NOT sent. Do not claim success.
+
+This is the only "talk to the Leadbay team" tool. It does not mutate any
+Leadbay data. For silent friction signals you detect yourself, use
+\`leadbay_report_friction\` instead.
+
+## NEXT STEPS \u2014 after sending feedback
+
+**ALWAYS render NEXT STEPS via your host's next-step widget.** Use whichever is in your tool set \u2014 the NAME and SCHEMA differ: **\`ask_user_input_v0\`** (Claude chat / ChatGPT) takes plain-string options with \`type:"single_select"\`; **\`AskUserQuestion\`** (Claude cowork / Claude Code) takes object options \`{label, description}\` plus a required short \`header\` (\u226412 chars) and \`multiSelect\`, NO \`type\` field, and never add an "Other" option (the host adds it). Match the schema to the tool you actually have \u2014 the wrong schema fails silently and you fall back to prose. Prose bullets are the fallback ONLY when NEITHER widget exists. Any turn that would end with a choice must be the widget \u2014 the widget IS the question.
+
+**If the tool result carries a \`next_steps\` object, that is the source of truth \u2014 use it directly.** Each option has a short \`.label\` (\u22645 words) and a full \`.description\`. Map \`next_steps.options[]\` into your host widget VERBATIM and in order: for \`AskUserQuestion\` (cowork / Claude Code) pass each as \`{label, description}\`; for \`ask_user_input_v0\` (Claude chat / ChatGPT, string options only) pass each option's \`.description\` as the string (it's the full sentence). Do NOT reword, reorder, drop, or prose-ify them \u2014 they're built deterministically by the server so the offer (incl. the artifact option at position 0) fires every time. Fall back to the table below only when there is NO \`next_steps\` field.
+
+**One exception \u2014 skip the widget** when the user's original message contained a complete sequential instruction chain ("show me X and then do Y") AND all stated steps have been completed. In that case, end with STOP directly \u2014 the user stated their full plan and does not need a "what next?" prompt.
+- Skip example: "Show me today's leads and then research the top one for me." \u2192 after research completes, emit STOP without the widget.
+- Do NOT skip for: plain requests ("show me today's leads", "run my check-in"), recurring-language requests ("I do this every day"), or requests where only one action was stated.
+
+Pick 2\u20134 rows from the (Observation, Suggest, Calls) table below most relevant to the response, then call your host's widget with ITS schema (per the schema rules above \u2014 wrong schema fails silently):
+- \`ask_user_input_v0\`: \`{questions:[{question,type:"single_select",options:["<Suggest 1>","<Suggest 2>"]}]}\`
+- \`AskUserQuestion\`: \`{questions:[{question,header:"Next step",multiSelect:false,options:[{label:"<\u22645 words>",description:"<Suggest 1>"}]}]}\`
+
+User picks \u2192 call the matching \`Calls\` tool. Constraints: 2\u20134 mutually-exclusive options, AskUserQuestion labels \u22645 words (full text in \`description\`), max 3 questions. Table stays internal; never recite it.
+
+---
+
+
+
+| Observation                                  | Suggest                                              | Calls                                   |
+|----------------------------------------------|------------------------------------------------------|-----------------------------------------|
+| \`sent == true\`                               | "Anything else you'd like to flag to the team?"      | leadbay_send_feedback(message)          |
+| \`sent == false\`                              | "It didn't go through \u2014 want to try sending again?"  | leadbay_send_feedback(message)          |
+| Feedback was about an error the user hit      | "Want me to retry the action that failed?"           | (re-call the tool that errored)         |
+`;
 var leadbay_set_active_lens = `Mark a lens as last-used. Subsequent \`/me\` reads return it as \`last_requested_lens\`, so all composite tools default to it.
 
 WHEN TO USE: after the user explicitly switched contexts (e.g. created a new lens via leadbay_create_lens).
@@ -20749,6 +20858,83 @@ var reportFriction = {
   }
 };
 
+// ../core/dist/tools/send-feedback.js
+var MESSAGE_MAX = 4e3;
+var sendFeedback = {
+  name: "leadbay_send_feedback",
+  annotations: {
+    title: "Send feedback to the Leadbay team",
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: false,
+    openWorldHint: true
+  },
+  description: leadbay_send_feedback,
+  // Write-gated: it sends data outward to the Leadbay team. Registered in
+  // compositeWriteTools (default-on since 0.3.0).
+  write: true,
+  inputSchema: {
+    type: "object",
+    properties: {
+      message: {
+        type: "string",
+        description: "The user's feedback, in their own words. Confirm the wording with the user BEFORE calling \u2014 this is sent to the Leadbay team. Cap 4000 chars."
+      },
+      associated_error_id: {
+        type: "string",
+        description: "Optional: a Sentry event id to attach this feedback to (e.g. the id from an error the user just hit), so the team sees the feedback on that exact issue."
+      }
+    },
+    required: ["message"],
+    additionalProperties: false
+  },
+  outputSchema: {
+    type: "object",
+    description: "Whether the feedback reached the Leadbay team. `sent: true` means it landed in the team's inbox.",
+    properties: {
+      sent: { type: "boolean" },
+      message: { type: "string" },
+      _meta: {
+        type: "object",
+        properties: { region: { type: "string" } }
+      }
+    }
+  },
+  execute: async (client, params, ctx) => {
+    const text = typeof params.message === "string" ? params.message.trim() : "";
+    if (!text) {
+      return {
+        error: true,
+        code: "BAD_INPUT",
+        message: "message is required \u2014 pass the user's feedback text.",
+        hint: "Ask the user what they'd like to tell the Leadbay team, then call again with their words in `message`."
+      };
+    }
+    const message = text.length > MESSAGE_MAX ? `${text.slice(0, MESSAGE_MAX - 1)}\u2026` : text;
+    if (!ctx?.sendFeedback) {
+      return {
+        sent: false,
+        message: "Feedback could not be sent from this client (feedback delivery isn't available here). Let the user know it wasn't delivered.",
+        _meta: { region: client.region }
+      };
+    }
+    const errorId = typeof params.associated_error_id === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(params.associated_error_id) ? params.associated_error_id : void 0;
+    const sent = await ctx.sendFeedback(message, {
+      ...errorId ? { associatedEventId: errorId } : {}
+    });
+    return {
+      sent,
+      message: sent ? "Sent to the Leadbay team \u2014 thanks for the feedback." : (
+        // `sent:false` means the bounded flush didn't confirm within the
+        // window — the envelope may still drain on shutdown. Don't assert it
+        // failed (that trains users to re-send and spam the inbox).
+        "Delivery not confirmed \u2014 it may still reach the Leadbay team. Avoid re-sending unless the user wants to."
+      ),
+      _meta: { region: client.region }
+    };
+  }
+};
+
 // ../core/dist/index.js
 var agentMemoryTools = [
   agentMemoryRecall,
@@ -20880,6 +21066,13 @@ var compositeWriteTools = [
   refinePrompt,
   answerClarification,
   reportOutreach,
+  // sendFeedback is granular-shaped (a single call to the telemetry seam →
+  // Sentry.captureFeedback, same inbox as the web app's feedback form), so it
+  // lives in tools/, NOT composite/. Registered here (not advanced-gated) so
+  // users can send feedback in-conversation without LEADBAY_MCP_ADVANCED.
+  // Write-gated since it sends data outward. Not in COMPOSITE_FILE_TOOL_NAMES,
+  // so _triggered_by is optional (no orchestration / mandatory-intent-trace).
+  sendFeedback,
   importLeads,
   importAndQualify,
   // Contact management (product#3703) — each is a single-call relay, so
@@ -21052,6 +21245,7 @@ var NOOP_TELEMETRY = {
   },
   captureException: () => {
   },
+  captureFeedback: async () => false,
   captureUpdateCheck: () => {
   },
   captureUpdatePrompted: () => {
@@ -21907,7 +22101,11 @@ function buildServer(client, opts = {}) {
         notificationsInbox: opts.notificationsInbox,
         signal: extra.signal,
         progress,
-        elicit
+        elicit,
+        // Route leadbay_send_feedback to Sentry's feedback inbox (same place
+        // the web app's form lands). NOOP_TELEMETRY returns false, so the
+        // tool reports honestly when telemetry is off.
+        sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
       maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
@@ -22205,7 +22403,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.19.2" : "0.0.0-dev";
+var VERSION = true ? "0.19.3" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var sseSessions = /* @__PURE__ */ new Map();

package/dist/installer-electron.js

@@ -1466,7 +1466,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = "0.19.2";
+    VERSION = "0.19.3";
     PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
     sessions = /* @__PURE__ */ new Map();
     OAUTH_BASE_URLS = {

package/dist/installer-gui.js

@@ -873,7 +873,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = "0.19.2";
+var VERSION = "0.19.3";
 var PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
 var sessions = /* @__PURE__ */ new Map();
 var OAUTH_BASE_URLS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.19.2",
+  "version": "0.19.3",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",