@leadbay/mcp 0.19.2 → 0.20.0

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog — @leadbay/mcp
 
+## 0.20.0 — 2026-06-15
+
+- **Proactive update proposal on a fresh session** (product#3742): the auto-update check already ran at boot, but the resulting proposal only reached the user if the agent happened to call `leadbay_account_status` — which a fresh session rarely does, so the "newer version available" prompt was effectively invisible. The cached `update_available` block now also rides along on `_meta.update_available` of the **first ordinary tool result** of a session while an upgrade is pending, gated once-per-version so it surfaces exactly once. `leadbay_account_status` keeps carrying it as a top-level field. The server-instruction paragraph now tells the agent to surface the `ask_user_input_v0` prompt whenever it sees the field on *any* response.
+- **Installer asset is now `.dxt`, not `.mcpb`**: the release-asset picker prefers the `.dxt` bundle (falling back to `.mcpb` only when a release ships no `.dxt`). The field is renamed `mcpb_url` → `install_url` across `update_available`, the `leadbay_acknowledge_update` result, and the persisted update-state — with forward-migration of the legacy `latest_known_mcpb_url` key so existing users don't lose their cache.
+
+## 0.19.3 — 2026-06-15
+
+- **New tool `leadbay_send_feedback`**: delivers a user-authored message to the same destination as the web app's "Send feedback" form — the team's Sentry feedback inbox (the website form calls `Sentry.captureFeedback`; there is no Leadbay API endpoint, so the MCP reuses its already-initialized `@sentry/node`). User-initiated ("send feedback / report a bug / tell Leadbay…"), or offered on a tool error and sent only on explicit yes. Distinct from the silent, agent-detected, PostHog-only `leadbay_report_friction`: feedback is explicit, user-authored, and reaches the team's inbox. Honest delivery — if the Sentry transport isn't available it returns `sent:false`, never a false success; Sentry is flushed after capture so the event actually ships; identity is attached when it resolves (anonymous fallback rather than dropping the message). Write-gated (`LEADBAY_MCP_WRITE=1`) since it sends data outward.
+
 ## 0.19.2 — 2026-06-10
 
 - **Stop paging Sentry on a missing `_triggered_by`**: a composite tool called without `_triggered_by` is a recoverable agent mistake — the host just re-calls with the field set. The guard used to `throw` an `{error:true, code:"LAST_PROMPT_REQUIRED"}` envelope into the shared catch, where `isLeadbayBusinessError` matched it and fired `captureException`, auto-opening a top-priority Sentry/GitHub bug (product#3718) on every dropped field. The guard now returns the `isError` envelope directly. Behavior toward the LLM is unchanged (same text, same `isError`, same recovery hint), and PostHog visibility is preserved (`captureToolCall` + `captureCompositeCall` still fire `ok:false` / `LAST_PROMPT_REQUIRED`, so the mandate-ignore rate stays observable); only `captureException` is dropped.

package/dist/bin.js

@@ -277,13 +277,40 @@ var init_client = __esm({
         if (next)
           next();
       }
-      async request(method, path, body) {
+      // Leadbay tokens don't expire, so a 401 is almost always a transient
+      // server-side blip. Retry the request ONCE before surfacing it — a single
+      // retry clears the vast majority of these without the agent ever seeing an
+      // error. If the retry also 401s, it's a real Leadbay-side problem and the
+      // error envelope says so.
+      //
+      // Arrow-function field so `this` stays bound even when the method is passed
+      // as a bare reference (see request()'s ternary). Retries are GET-ONLY: a 401
+      // on a write (POST/PUT/DELETE) may arrive AFTER the mutation already committed
+      // server-side, so blindly re-sending it would double-execute the write. Reads
+      // are idempotent, so retrying them is safe. The 250ms backoff releases the
+      // concurrency slot first (release → sleep → re-acquire) so a wave of 401s
+      // doesn't pin all MAX_CONCURRENT slots in setTimeout and stall the queue.
+      httpsRequestWithRetry = async (method, url, headers, body) => {
+        const res = await httpsRequest(method, url, headers, body);
+        if (res.status === 401 && method.toUpperCase() === "GET") {
+          this.releaseSemaphore();
+          try {
+            await new Promise((r) => setTimeout(r, 250));
+          } finally {
+            await this.acquireSemaphore();
+          }
+          return httpsRequest(method, url, headers, body);
+        }
+        return res;
+      };
+      async request(method, path, body, opts) {
         if (process.env.LEADBAY_MOCK === "1") {
           return this.mockRequest(method, path, body);
         }
         if (!this.token) {
           throw this.makeError("NOT_AUTHENTICATED", "Not logged in to Leadbay", "Set LEADBAY_TOKEN in your MCP client config, or run: npx -y @leadbay/mcp install --email <you> --region <us|fr>", path);
         }
+        const retryOn401 = opts?.retryOn401 !== false;
         await this.acquireSemaphore();
         try {
           const url = `${this._baseUrl}/1.5${path}`;
@@ -293,7 +320,7 @@ var init_client = __esm({
           if (body) {
             headers["Content-Type"] = "application/json";
           }
-          const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+          const res = await (retryOn401 ? this.httpsRequestWithRetry : httpsRequest)(method, url, headers, body ? JSON.stringify(body) : void 0);
           this._lastMeta = {
             region: this._region,
             endpoint: `${method} ${path}`,
@@ -328,7 +355,7 @@ var init_client = __esm({
           if (body) {
             headers["Content-Type"] = "application/json";
           }
-          const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+          const res = await this.httpsRequestWithRetry(method, url, headers, body ? JSON.stringify(body) : void 0);
           this._lastMeta = {
             region: this._region,
             endpoint: `${method} ${path}`,
@@ -361,7 +388,7 @@ var init_client = __esm({
             Authorization: `Bearer ${this.token}`,
             "Content-Type": contentType
           };
-          const res = await httpsRequest(method, url, headers, body);
+          const res = await this.httpsRequestWithRetry(method, url, headers, body);
           this._lastMeta = {
             region: this._region,
             endpoint: `${method} ${path}`,
@@ -444,7 +471,7 @@ var init_client = __esm({
         }
         const retryAfter = parseRetryAfter(headers["retry-after"]);
         if (status === 401) {
-          return this.makeError("AUTH_EXPIRED", "Authentication token expired or invalid", "Your LEADBAY_TOKEN is no longer valid. Regenerate it: npx -y @leadbay/mcp login --email <you> --region <us|fr>, then restart your MCP client.", endpoint, null, status);
+          return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", "Leadbay tokens don't expire on a timer, so this isn't a stale token. A 401 here is usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly; if it persists, offer to report it to the team.", endpoint, null, status);
         }
         if (status === 429 || status === 402 || parsed?.error === "quota_exceeded" || parsed?.error?.code === "quota_exceeded") {
           const hintBase = retryAfter ? `Wait ${retryAfter}s before retrying` : "Wait, then retry";
@@ -5440,7 +5467,7 @@ var init_notifications = __esm({
 });
 
 // ../core/dist/tool-descriptions.generated.js
-var leadbay_account_history, leadbay_account_status, leadbay_acknowledge_notification, leadbay_add_contact, leadbay_add_leads_to_campaign, leadbay_add_note, leadbay_adjust_audience, leadbay_agent_memory_capture, leadbay_agent_memory_recall, leadbay_agent_memory_review, leadbay_answer_clarification, leadbay_bulk_enrich_status, leadbay_bulk_qualify_leads, leadbay_campaign_call_sheet, leadbay_campaign_progression, leadbay_clear_selection, leadbay_clear_user_prompt, leadbay_create_campaign, leadbay_create_custom_field, leadbay_create_lens, leadbay_create_lens_draft, leadbay_create_topup_link, leadbay_deselect_leads, leadbay_discover_leads, leadbay_dislike_lead, leadbay_dismiss_clarification, leadbay_enrich_contacts, leadbay_enrich_titles, leadbay_extend_lens, leadbay_followups_map, leadbay_get_clarification, leadbay_get_contacts, leadbay_get_enrichment_job_titles, leadbay_get_epilogue_responses, leadbay_get_lead_activities, leadbay_get_lead_notes, leadbay_get_lead_profile, leadbay_get_lens_filter, leadbay_get_lens_scoring, leadbay_get_prospecting_actions, leadbay_get_quota, leadbay_get_selection_ids, leadbay_get_taste_profile, leadbay_get_user_prompt, leadbay_get_web_fetch, leadbay_import_and_qualify, leadbay_import_leads, leadbay_import_status, leadbay_launch_bulk_enrichment, leadbay_like_lead, leadbay_list_campaigns, leadbay_list_lenses, leadbay_list_locations, leadbay_list_mappable_fields, leadbay_list_sectors, leadbay_login, leadbay_my_lenses, leadbay_new_lens, leadbay_open_billing_portal, leadbay_pick_clarification, leadbay_pin_contact, leadbay_prepare_outreach, leadbay_preview_bulk_enrichment, leadbay_promote_lens, leadbay_pull_followups, leadbay_pull_leads, leadbay_qualify_lead, leadbay_qualify_status, leadbay_recall_ordered_titles, leadbay_refine_prompt, leadbay_remove_contact, leadbay_remove_epilogue, leadbay_remove_leads_from_campaign, leadbay_remove_pushback, leadbay_report_friction, leadbay_report_outreach, leadbay_research_lead_by_id, leadbay_research_lead_by_name_fuzzy, leadbay_resolve_import_rows, leadbay_scan_portfolio_signals, leadbay_seed_candidates, leadbay_select_leads, leadbay_set_active_lens, leadbay_set_epilogue_status, leadbay_set_pushback, leadbay_set_user_prompt, leadbay_tour_plan, leadbay_unpin_contact, leadbay_update_contact, leadbay_update_lens, leadbay_update_lens_filter;
+var leadbay_account_history, leadbay_account_status, leadbay_acknowledge_notification, leadbay_add_contact, leadbay_add_leads_to_campaign, leadbay_add_note, leadbay_adjust_audience, leadbay_agent_memory_capture, leadbay_agent_memory_recall, leadbay_agent_memory_review, leadbay_answer_clarification, leadbay_bulk_enrich_status, leadbay_bulk_qualify_leads, leadbay_campaign_call_sheet, leadbay_campaign_progression, leadbay_clear_selection, leadbay_clear_user_prompt, leadbay_create_campaign, leadbay_create_custom_field, leadbay_create_lens, leadbay_create_lens_draft, leadbay_create_topup_link, leadbay_deselect_leads, leadbay_discover_leads, leadbay_dislike_lead, leadbay_dismiss_clarification, leadbay_enrich_contacts, leadbay_enrich_titles, leadbay_extend_lens, leadbay_followups_map, leadbay_get_clarification, leadbay_get_contacts, leadbay_get_enrichment_job_titles, leadbay_get_epilogue_responses, leadbay_get_lead_activities, leadbay_get_lead_notes, leadbay_get_lead_profile, leadbay_get_lens_filter, leadbay_get_lens_scoring, leadbay_get_prospecting_actions, leadbay_get_quota, leadbay_get_selection_ids, leadbay_get_taste_profile, leadbay_get_user_prompt, leadbay_get_web_fetch, leadbay_import_and_qualify, leadbay_import_leads, leadbay_import_status, leadbay_launch_bulk_enrichment, leadbay_like_lead, leadbay_list_campaigns, leadbay_list_lenses, leadbay_list_locations, leadbay_list_mappable_fields, leadbay_list_sectors, leadbay_login, leadbay_my_lenses, leadbay_new_lens, leadbay_open_billing_portal, leadbay_pick_clarification, leadbay_pin_contact, leadbay_prepare_outreach, leadbay_preview_bulk_enrichment, leadbay_promote_lens, leadbay_pull_followups, leadbay_pull_leads, leadbay_qualify_lead, leadbay_qualify_status, leadbay_recall_ordered_titles, leadbay_refine_prompt, leadbay_remove_contact, leadbay_remove_epilogue, leadbay_remove_leads_from_campaign, leadbay_remove_pushback, leadbay_report_friction, leadbay_report_outreach, leadbay_research_lead_by_id, leadbay_research_lead_by_name_fuzzy, leadbay_resolve_import_rows, leadbay_scan_portfolio_signals, leadbay_seed_candidates, leadbay_select_leads, leadbay_send_feedback, leadbay_set_active_lens, leadbay_set_epilogue_status, leadbay_set_pushback, leadbay_set_user_prompt, leadbay_tour_plan, leadbay_unpin_contact, leadbay_update_contact, leadbay_update_lens, leadbay_update_lens_filter;
 var init_tool_descriptions_generated = __esm({
   "../core/dist/tool-descriptions.generated.js"() {
     "use strict";
@@ -8722,6 +8749,88 @@ WHEN TO USE: low-level. The user's selection is a per-token global state \u2014
 WHEN NOT TO USE: in normal flow \u2014 leadbay_enrich_titles wraps select \u2192 action \u2192 clear in one call with proper Mutex protection. Calling this directly without acquiring the selection lock can clobber concurrent composite calls.
 
 This tool MUTATES state. The caller (agent or human-in-the-loop) is responsible for confirming intent before invocation; the MCP server does not soft-prompt for confirmation. See \`annotations.destructiveHint\`.
+`;
+    leadbay_send_feedback = `## WHEN TO USE
+
+Trigger phrases: "send feedback", "I want to report a bug", "tell the Leadbay team", "let Leadbay know", "give feedback", "report this to support", "I have a feature request".
+
+**Memory:** recall + capture via \`leadbay_agent_memory_*\` tools.
+
+Do NOT use for: "no, I meant / still nothing / ugh" \u2192 \`leadbay_report_friction\`; "log the email I sent" \u2192 \`leadbay_report_outreach\`.
+
+Prefer when: the user explicitly wants the Leadbay TEAM to receive a message they authored \u2014 or accepts your offer to report an error. For silent, agent-detected friction signals use leadbay_report_friction instead.
+
+Examples that SHOULD invoke this tool:
+- "Send feedback to the team: the lead scores feel off this week."
+- "Can you report a bug? Pulling leads in Lyon returns nothing."
+- "Tell Leadbay I'd love a way to schedule my morning check-in."
+
+Examples that should NOT invoke this tool (sound similar, route elsewhere):
+- "No, I meant Wisconsin not Wyoming."
+- "I emailed Acme \u2014 log that outreach."
+- "Thumbs down on this lead."
+
+## RENDER (quick)
+
+Confirm the exact wording with the user BEFORE calling (this is sent to
+the team). After sending, show a one-line confirmation from the result's
+\`message\` (e.g. "\u2713 Sent to the Leadbay team"). If \`sent\` is false, tell
+the user it could NOT be delivered \u2014 never imply it was sent.
+
+---
+
+Deliver a user-authored message to the Leadbay team's feedback inbox \u2014 the same
+destination as the web app's feedback form. **You do not write the feedback;
+the user does.** Capture their words, confirm the phrasing, then send.
+
+## Parameters
+- \`message\` (required) \u2014 the user's feedback, in their own words. Confirm it
+  with the user before sending. Cap 4000 chars.
+- \`associated_error_id\` (optional) \u2014 a Sentry event id to attach the feedback
+  to (e.g. the id surfaced by an error the user just hit), so the team sees the
+  feedback on that exact issue.
+
+## When a tool errors \u2014 OFFER, don't auto-send
+When a Leadbay tool returns an error and the user might want the team to know,
+you may OFFER: *"Want me to send feedback about this to the Leadbay team?"*
+- Send ONLY if the user says yes AND gives (or approves) a message.
+- Never send feedback the user didn't author or approve.
+- If an error event id is available, pass it as \`associated_error_id\`.
+
+## Result
+- \`sent: true\` \u2192 it reached the team. Show the confirmation from \`message\`.
+- \`sent: false\` \u2192 delivery wasn't possible (feedback not available on this
+  client). Tell the user it was NOT sent. Do not claim success.
+
+This is the only "talk to the Leadbay team" tool. It does not mutate any
+Leadbay data. For silent friction signals you detect yourself, use
+\`leadbay_report_friction\` instead.
+
+## NEXT STEPS \u2014 after sending feedback
+
+**ALWAYS render NEXT STEPS via your host's next-step widget.** Use whichever is in your tool set \u2014 the NAME and SCHEMA differ: **\`ask_user_input_v0\`** (Claude chat / ChatGPT) takes plain-string options with \`type:"single_select"\`; **\`AskUserQuestion\`** (Claude cowork / Claude Code) takes object options \`{label, description}\` plus a required short \`header\` (\u226412 chars) and \`multiSelect\`, NO \`type\` field, and never add an "Other" option (the host adds it). Match the schema to the tool you actually have \u2014 the wrong schema fails silently and you fall back to prose. Prose bullets are the fallback ONLY when NEITHER widget exists. Any turn that would end with a choice must be the widget \u2014 the widget IS the question.
+
+**If the tool result carries a \`next_steps\` object, that is the source of truth \u2014 use it directly.** Each option has a short \`.label\` (\u22645 words) and a full \`.description\`. Map \`next_steps.options[]\` into your host widget VERBATIM and in order: for \`AskUserQuestion\` (cowork / Claude Code) pass each as \`{label, description}\`; for \`ask_user_input_v0\` (Claude chat / ChatGPT, string options only) pass each option's \`.description\` as the string (it's the full sentence). Do NOT reword, reorder, drop, or prose-ify them \u2014 they're built deterministically by the server so the offer (incl. the artifact option at position 0) fires every time. Fall back to the table below only when there is NO \`next_steps\` field.
+
+**One exception \u2014 skip the widget** when the user's original message contained a complete sequential instruction chain ("show me X and then do Y") AND all stated steps have been completed. In that case, end with STOP directly \u2014 the user stated their full plan and does not need a "what next?" prompt.
+- Skip example: "Show me today's leads and then research the top one for me." \u2192 after research completes, emit STOP without the widget.
+- Do NOT skip for: plain requests ("show me today's leads", "run my check-in"), recurring-language requests ("I do this every day"), or requests where only one action was stated.
+
+Pick 2\u20134 rows from the (Observation, Suggest, Calls) table below most relevant to the response, then call your host's widget with ITS schema (per the schema rules above \u2014 wrong schema fails silently):
+- \`ask_user_input_v0\`: \`{questions:[{question,type:"single_select",options:["<Suggest 1>","<Suggest 2>"]}]}\`
+- \`AskUserQuestion\`: \`{questions:[{question,header:"Next step",multiSelect:false,options:[{label:"<\u22645 words>",description:"<Suggest 1>"}]}]}\`
+
+User picks \u2192 call the matching \`Calls\` tool. Constraints: 2\u20134 mutually-exclusive options, AskUserQuestion labels \u22645 words (full text in \`description\`), max 3 questions. Table stays internal; never recite it.
+
+---
+
+
+
+| Observation                                  | Suggest                                              | Calls                                   |
+|----------------------------------------------|------------------------------------------------------|-----------------------------------------|
+| \`sent == true\`                               | "Anything else you'd like to flag to the team?"      | leadbay_send_feedback(message)          |
+| \`sent == false\`                              | "It didn't go through \u2014 want to try sending again?"  | leadbay_send_feedback(message)          |
+| Feedback was about an error the user hit      | "Want me to retry the action that failed?"           | (re-call the tool that errored)         |
 `;
     leadbay_set_active_lens = `Mark a lens as last-used. Subsequent \`/me\` reads return it as \`last_requested_lens\`, so all composite tools default to it.
 
@@ -16415,16 +16524,16 @@ var init_account_status = __esm({
             properties: {
               current_version: { type: "string" },
               latest_version: { type: "string" },
-              mcpb_url: {
+              install_url: {
                 type: "string",
-                description: "Direct download URL for the .mcpb installer asset."
+                description: "Direct download URL for the installer asset (.dxt, falling back to .mcpb)."
               },
               release_url: {
                 type: "string",
                 description: "GitHub release page (changelog)."
               }
             },
-            required: ["current_version", "latest_version", "mcpb_url", "release_url"]
+            required: ["current_version", "latest_version", "install_url", "release_url"]
           }
         },
         required: ["user", "organization"]
@@ -21240,6 +21349,90 @@ var init_report_friction = __esm({
   }
 });
 
+// ../core/dist/tools/send-feedback.js
+var MESSAGE_MAX, sendFeedback;
+var init_send_feedback = __esm({
+  "../core/dist/tools/send-feedback.js"() {
+    "use strict";
+    init_tool_descriptions_generated();
+    MESSAGE_MAX = 4e3;
+    sendFeedback = {
+      name: "leadbay_send_feedback",
+      annotations: {
+        title: "Send feedback to the Leadbay team",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true
+      },
+      description: leadbay_send_feedback,
+      // Write-gated: it sends data outward to the Leadbay team. Registered in
+      // compositeWriteTools (default-on since 0.3.0).
+      write: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          message: {
+            type: "string",
+            description: "The user's feedback, in their own words. Confirm the wording with the user BEFORE calling \u2014 this is sent to the Leadbay team. Cap 4000 chars."
+          },
+          associated_error_id: {
+            type: "string",
+            description: "Optional: a Sentry event id to attach this feedback to (e.g. the id from an error the user just hit), so the team sees the feedback on that exact issue."
+          }
+        },
+        required: ["message"],
+        additionalProperties: false
+      },
+      outputSchema: {
+        type: "object",
+        description: "Whether the feedback reached the Leadbay team. `sent: true` means it landed in the team's inbox.",
+        properties: {
+          sent: { type: "boolean" },
+          message: { type: "string" },
+          _meta: {
+            type: "object",
+            properties: { region: { type: "string" } }
+          }
+        }
+      },
+      execute: async (client, params, ctx) => {
+        const text = typeof params.message === "string" ? params.message.trim() : "";
+        if (!text) {
+          return {
+            error: true,
+            code: "BAD_INPUT",
+            message: "message is required \u2014 pass the user's feedback text.",
+            hint: "Ask the user what they'd like to tell the Leadbay team, then call again with their words in `message`."
+          };
+        }
+        const message = text.length > MESSAGE_MAX ? `${text.slice(0, MESSAGE_MAX - 1)}\u2026` : text;
+        if (!ctx?.sendFeedback) {
+          return {
+            sent: false,
+            message: "Feedback could not be sent from this client (feedback delivery isn't available here). Let the user know it wasn't delivered.",
+            _meta: { region: client.region }
+          };
+        }
+        const errorId = typeof params.associated_error_id === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(params.associated_error_id) ? params.associated_error_id : void 0;
+        const sent = await ctx.sendFeedback(message, {
+          ...errorId ? { associatedEventId: errorId } : {}
+        });
+        return {
+          sent,
+          message: sent ? "Sent to the Leadbay team \u2014 thanks for the feedback." : (
+            // `sent:false` means the bounded flush didn't confirm within the
+            // window — the envelope may still drain on shutdown. Don't assert it
+            // failed (that trains users to re-send and spam the inbox).
+            "Delivery not confirmed \u2014 it may still reach the Leadbay team. Avoid re-sending unless the user wants to."
+          ),
+          _meta: { region: client.region }
+        };
+      }
+    };
+  }
+});
+
 // ../core/dist/index.js
 var dist_exports = {};
 __export(dist_exports, {
@@ -21370,6 +21563,7 @@ __export(dist_exports, {
   scanPortfolioSignals: () => scanPortfolioSignals,
   seedCandidates: () => seedCandidates,
   selectLeads: () => selectLeads,
+  sendFeedback: () => sendFeedback,
   setActiveLens: () => setActiveLens,
   setEpilogueStatus: () => setEpilogueStatus,
   setPushback: () => setPushback,
@@ -21481,6 +21675,7 @@ var init_dist = __esm({
     init_answer_clarification();
     init_report_outreach();
     init_report_friction();
+    init_send_feedback();
     init_bulk_store();
     agentMemoryTools = [
       agentMemoryRecall,
@@ -21612,6 +21807,13 @@ var init_dist = __esm({
       refinePrompt,
       answerClarification,
       reportOutreach,
+      // sendFeedback is granular-shaped (a single call to the telemetry seam →
+      // Sentry.captureFeedback, same inbox as the web app's feedback form), so it
+      // lives in tools/, NOT composite/. Registered here (not advanced-gated) so
+      // users can send feedback in-conversation without LEADBAY_MCP_ADVANCED.
+      // Write-gated since it sends data outward. Not in COMPOSITE_FILE_TOOL_NAMES,
+      // so _triggered_by is optional (no orchestration / mandatory-intent-trace).
+      sendFeedback,
       importLeads,
       importAndQualify,
       // Contact management (product#3703) — each is a single-call relay, so
@@ -23081,6 +23283,7 @@ var NOOP_TELEMETRY = {
   },
   captureException: () => {
   },
+  captureFeedback: async () => false,
   captureUpdateCheck: () => {
   },
   captureUpdatePrompted: () => {
@@ -23335,6 +23538,41 @@ function initTelemetry(opts) {
         logger?.warn?.(`sentry captureException failed: ${e?.message ?? e}`);
       }
     },
+    async captureFeedback(message, opts2) {
+      if (!sentryReady) return false;
+      const trimmed = (message ?? "").trim();
+      if (!trimmed) return false;
+      if (identityPromise) {
+        let waitTimer;
+        try {
+          await Promise.race([
+            identityPromise,
+            new Promise((resolve) => {
+              waitTimer = setTimeout(resolve, 2e3);
+            })
+          ]);
+        } catch {
+        } finally {
+          if (waitTimer) clearTimeout(waitTimer);
+        }
+      }
+      try {
+        Sentry.captureFeedback({
+          message: trimmed,
+          ...me?.name ? { name: me.name } : {},
+          ...me?.email ? { email: me.email } : {},
+          ...opts2?.associatedEventId ? { associatedEventId: opts2.associatedEventId } : {}
+        });
+        const flushed = await Sentry.flush(4e3);
+        if (!flushed) {
+          logger?.warn?.("sentry feedback flush timed out (event may be buffered)");
+        }
+        return flushed;
+      } catch (e) {
+        logger?.warn?.(`sentry captureFeedback failed: ${e?.message ?? e}`);
+        return false;
+      }
+    },
     async shutdown() {
       const tasks = [];
       if (posthog) tasks.push(posthog.shutdown(2e3).catch(() => void 0));
@@ -23346,10 +23584,13 @@ function initTelemetry(opts) {
 
 // src/update-check.ts
 var cachedInfo = null;
-var checkInFlight = false;
+var inFlightCheck = null;
 function getCachedUpdateInfo() {
   return cachedInfo;
 }
+function getInFlightCheck() {
+  return inFlightCheck;
+}
 var RELEASES_LATEST_URL = "https://api.github.com/repos/leadbay/leadclaw/releases/latest";
 var CHECK_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
@@ -23394,25 +23635,24 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function pickMcpbAsset(rel) {
+function pickInstallAsset(rel) {
   if (!Array.isArray(rel.assets)) return void 0;
-  const mcpb = rel.assets.find(
-    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
-  );
-  if (mcpb?.browser_download_url) return mcpb.browser_download_url;
   const dxt = rel.assets.find(
     (a) => typeof a.name === "string" && a.name.endsWith(".dxt")
   );
-  return dxt?.browser_download_url;
+  if (dxt?.browser_download_url) return dxt.browser_download_url;
+  const mcpb = rel.assets.find(
+    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
+  );
+  return mcpb?.browser_download_url;
 }
-async function checkForUpdate(opts) {
-  if (checkInFlight) return cachedInfo;
-  checkInFlight = true;
-  try {
-    return await doCheck(opts);
-  } finally {
-    checkInFlight = false;
-  }
+function checkForUpdate(opts) {
+  if (inFlightCheck) return inFlightCheck;
+  const p = doCheck(opts).finally(() => {
+    if (inFlightCheck === p) inFlightCheck = null;
+  });
+  inFlightCheck = p;
+  return p;
 }
 async function doCheck(opts) {
   const now = opts.now ?? Date.now;
@@ -23421,11 +23661,11 @@ async function doCheck(opts) {
   const currentVersion = opts.currentVersion;
   const state = await opts.stateStore.read();
   const within = now() - state.last_check_time < CHECK_THROTTLE_MS;
-  if (!opts.force && within && state.latest_known_version && state.latest_known_mcpb_url && state.latest_known_release_url) {
+  if (!opts.force && within && state.latest_known_version && state.latest_known_install_url && state.latest_known_release_url) {
     const cached = buildInfoIfUpgrade(
       currentVersion,
       state.latest_known_version,
-      state.latest_known_mcpb_url,
+      state.latest_known_install_url,
       state.latest_known_release_url,
       state.suppressed_versions,
       state.remind_until,
@@ -23479,18 +23719,18 @@ async function doCheck(opts) {
     return null;
   }
   let latestVersion;
-  let mcpbUrl;
+  let installUrl;
   let releaseUrl;
   if (status === 200 && body) {
     const parsed = body.tag_name ? parseTagName(body.tag_name) : null;
     if (parsed) {
       latestVersion = parsed;
-      mcpbUrl = pickMcpbAsset(body);
+      installUrl = pickInstallAsset(body);
       releaseUrl = body.html_url;
     }
   } else {
     latestVersion = state.latest_known_version;
-    mcpbUrl = state.latest_known_mcpb_url;
+    installUrl = state.latest_known_install_url;
     releaseUrl = state.latest_known_release_url;
   }
   const persisted = await opts.stateStore.update((cur) => ({
@@ -23498,7 +23738,7 @@ async function doCheck(opts) {
     last_check_time: now(),
     etag: nextEtag,
     latest_known_version: latestVersion ?? cur.latest_known_version,
-    latest_known_mcpb_url: mcpbUrl ?? cur.latest_known_mcpb_url,
+    latest_known_install_url: installUrl ?? cur.latest_known_install_url,
     latest_known_release_url: releaseUrl ?? cur.latest_known_release_url
   }));
   opts.telemetry.captureUpdateCheck?.({
@@ -23508,7 +23748,7 @@ async function doCheck(opts) {
   const info = buildInfoIfUpgrade(
     currentVersion,
     persisted.latest_known_version,
-    persisted.latest_known_mcpb_url,
+    persisted.latest_known_install_url,
     persisted.latest_known_release_url,
     persisted.suppressed_versions,
     persisted.remind_until,
@@ -23517,15 +23757,15 @@ async function doCheck(opts) {
   cachedInfo = info;
   return info;
 }
-function buildInfoIfUpgrade(currentVersion, latestVersion, mcpbUrl, releaseUrl, suppressed, remindUntil, nowMs) {
-  if (!latestVersion || !mcpbUrl || !releaseUrl) return null;
+function buildInfoIfUpgrade(currentVersion, latestVersion, installUrl, releaseUrl, suppressed, remindUntil, nowMs) {
+  if (!latestVersion || !installUrl || !releaseUrl) return null;
   if (compareSemver(latestVersion, currentVersion) <= 0) return null;
   if (suppressed.includes(latestVersion)) return null;
   if (remindUntil && remindUntil > nowMs) return null;
   return {
     current_version: currentVersion,
     latest_version: latestVersion,
-    mcpb_url: mcpbUrl,
+    install_url: installUrl,
     release_url: releaseUrl
   };
 }
@@ -23554,7 +23794,7 @@ async function recordRunningVersion(currentVersion, stateStore, telemetry) {
 
 // src/update-tool.ts
 var TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1e3;
-var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ mcpb_url, release_url }` \u2014 show the user a clickable link to mcpb_url so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
+var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ install_url, release_url }` \u2014 show the user a clickable link to install_url (a `.dxt` bundle) so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
 function buildAcknowledgeUpdateTool(opts) {
   const now = opts.now ?? Date.now;
   return {
@@ -23590,7 +23830,7 @@ function buildAcknowledgeUpdateTool(opts) {
         action: { type: "string" },
         version: { type: "string" },
         message: { type: "string" },
-        mcpb_url: { type: ["string", "null"] },
+        install_url: { type: ["string", "null"] },
         release_url: { type: ["string", "null"] }
       },
       required: ["ok", "action", "version", "message"]
@@ -23624,9 +23864,9 @@ function buildAcknowledgeUpdateTool(opts) {
           ok: true,
           action,
           version,
-          mcpb_url: state.latest_known_mcpb_url ?? null,
+          install_url: state.latest_known_install_url ?? null,
           release_url: state.latest_known_release_url ?? null,
-          message: state.latest_known_mcpb_url ? "Show the user the mcpb_url as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No .mcpb URL is cached. Direct the user to the release_url to download manually."
+          message: state.latest_known_install_url ? "Show the user the install_url (a .dxt bundle) as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No installer URL is cached. Direct the user to the release_url to download manually."
         };
       }
       if (action === "remind_tomorrow") {
@@ -23729,7 +23969,7 @@ function buildStartHereParagraph(has) {
 }
 function buildUpdateAvailableParagraph(has) {
   if (!has("leadbay_acknowledge_update")) return null;
-  return "MCP auto-update: when `leadbay_account_status` returns an `update_available` field (`{ current_version, latest_version, mcpb_url, release_url }`), a newer MCP server release is published and the user has NOT suppressed it. Surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `mcpb_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .mcpb extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
+  return "MCP auto-update: an `update_available` field (`{ current_version, latest_version, install_url, release_url }`) means a newer MCP server release is published and the user has NOT suppressed it. It appears in TWO places: as a top-level field on `leadbay_account_status`, AND on `_meta.update_available` of the FIRST other tool result in a session while an update is pending (so a fresh session surfaces the proposal even without an account_status call). Whenever you see it on ANY response, surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `install_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .dxt extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
 }
 function buildRhythmParagraph(has) {
   if (has("leadbay_report_outreach")) {
@@ -24024,16 +24264,47 @@ function buildServer(client, opts = {}) {
       );
     });
   };
-  const maybeAttachUpdate = (toolName, result) => {
-    if (toolName !== "leadbay_account_status") return;
+  const UPDATE_SURFACE_WAIT_MS = 1500;
+  const maybeAttachUpdate = async (toolName, result) => {
     if (!opts.updateStateStore) return;
     if (result === null || typeof result !== "object" || Array.isArray(result)) {
       return;
     }
-    const info = getCachedUpdateInfo();
+    if (result.error === true) {
+      return;
+    }
+    let info = getCachedUpdateInfo();
+    if (!info) {
+      const inflight = getInFlightCheck();
+      if (inflight) {
+        const settled = inflight.catch((err) => {
+          opts.logger?.warn?.(
+            `update_check.surface_await_failed ${err?.message ?? err}`
+          );
+          return null;
+        });
+        info = await Promise.race([
+          settled,
+          new Promise(
+            (resolve) => setTimeout(() => resolve(null), UPDATE_SURFACE_WAIT_MS)
+          )
+        ]);
+        info = getCachedUpdateInfo() ?? info;
+      }
+    }
     if (!info) return;
-    result.update_available = info;
-    if (!promptedVersionsThisSession.has(info.latest_version)) {
+    const isAccountStatus = toolName === "leadbay_account_status";
+    const alreadyPrompted = promptedVersionsThisSession.has(info.latest_version);
+    if (!isAccountStatus && alreadyPrompted) return;
+    if (isAccountStatus) {
+      result.update_available = info;
+    } else {
+      const envelope = result;
+      const target = envelope.__markdown_envelope === true && envelope.structured !== null && typeof envelope.structured === "object" && !Array.isArray(envelope.structured) ? envelope.structured : envelope;
+      const existingMeta = target._meta && typeof target._meta === "object" && !Array.isArray(target._meta) ? target._meta : {};
+      target._meta = { ...existingMeta, update_available: info };
+    }
+    if (!alreadyPrompted) {
       promptedVersionsThisSession.add(info.latest_version);
       telemetry.captureUpdatePrompted?.({
         current_version: serverVersion,
@@ -24207,9 +24478,13 @@ function buildServer(client, opts = {}) {
         notificationsInbox: opts.notificationsInbox,
         signal: extra.signal,
         progress,
-        elicit
+        elicit,
+        // Route leadbay_send_feedback to Sentry's feedback inbox (same place
+        // the web app's form lands). NOOP_TELEMETRY returns false, so the
+        // tool reports honestly when telemetry is off.
+        sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
-      maybeAttachUpdate(name, result);
+      await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
         const envText = formatErrorForLLM(result);
@@ -25219,8 +25494,10 @@ var UpdateStateStore = class {
     if (typeof r.latest_known_version === "string") {
       out.latest_known_version = r.latest_known_version;
     }
-    if (typeof r.latest_known_mcpb_url === "string") {
-      out.latest_known_mcpb_url = r.latest_known_mcpb_url;
+    if (typeof r.latest_known_install_url === "string") {
+      out.latest_known_install_url = r.latest_known_install_url;
+    } else if (typeof r.latest_known_mcpb_url === "string") {
+      out.latest_known_install_url = r.latest_known_mcpb_url;
     }
     if (typeof r.latest_known_release_url === "string") {
       out.latest_known_release_url = r.latest_known_release_url;
@@ -25648,7 +25925,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.19.2";
+var VERSION = "0.20.0";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 
@@ -25923,7 +26200,7 @@ async function resolveClientFromEnv(logger) {
   logger.info?.("Auto-detecting region via /users/me on us and fr...");
   const probe = async (region) => {
     const c = createClient({ token, region });
-    await c.request("GET", "/users/me");
+    await c.request("GET", "/users/me", void 0, { retryOn401: false });
     return c;
   };
   try {

package/dist/http-server.js

@@ -1519,13 +1519,40 @@ var LeadbayClient = class {
     if (next)
       next();
   }
-  async request(method, path, body) {
+  // Leadbay tokens don't expire, so a 401 is almost always a transient
+  // server-side blip. Retry the request ONCE before surfacing it — a single
+  // retry clears the vast majority of these without the agent ever seeing an
+  // error. If the retry also 401s, it's a real Leadbay-side problem and the
+  // error envelope says so.
+  //
+  // Arrow-function field so `this` stays bound even when the method is passed
+  // as a bare reference (see request()'s ternary). Retries are GET-ONLY: a 401
+  // on a write (POST/PUT/DELETE) may arrive AFTER the mutation already committed
+  // server-side, so blindly re-sending it would double-execute the write. Reads
+  // are idempotent, so retrying them is safe. The 250ms backoff releases the
+  // concurrency slot first (release → sleep → re-acquire) so a wave of 401s
+  // doesn't pin all MAX_CONCURRENT slots in setTimeout and stall the queue.
+  httpsRequestWithRetry = async (method, url, headers, body) => {
+    const res = await httpsRequest(method, url, headers, body);
+    if (res.status === 401 && method.toUpperCase() === "GET") {
+      this.releaseSemaphore();
+      try {
+        await new Promise((r) => setTimeout(r, 250));
+      } finally {
+        await this.acquireSemaphore();
+      }
+      return httpsRequest(method, url, headers, body);
+    }
+    return res;
+  };
+  async request(method, path, body, opts) {
     if (process.env.LEADBAY_MOCK === "1") {
       return this.mockRequest(method, path, body);
     }
     if (!this.token) {
       throw this.makeError("NOT_AUTHENTICATED", "Not logged in to Leadbay", "Set LEADBAY_TOKEN in your MCP client config, or run: npx -y @leadbay/mcp install --email <you> --region <us|fr>", path);
     }
+    const retryOn401 = opts?.retryOn401 !== false;
     await this.acquireSemaphore();
     try {
       const url = `${this._baseUrl}/1.5${path}`;
@@ -1535,7 +1562,7 @@ var LeadbayClient = class {
       if (body) {
         headers["Content-Type"] = "application/json";
       }
-      const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+      const res = await (retryOn401 ? this.httpsRequestWithRetry : httpsRequest)(method, url, headers, body ? JSON.stringify(body) : void 0);
       this._lastMeta = {
         region: this._region,
         endpoint: `${method} ${path}`,
@@ -1570,7 +1597,7 @@ var LeadbayClient = class {
       if (body) {
         headers["Content-Type"] = "application/json";
       }
-      const res = await httpsRequest(method, url, headers, body ? JSON.stringify(body) : void 0);
+      const res = await this.httpsRequestWithRetry(method, url, headers, body ? JSON.stringify(body) : void 0);
       this._lastMeta = {
         region: this._region,
         endpoint: `${method} ${path}`,
@@ -1603,7 +1630,7 @@ var LeadbayClient = class {
         Authorization: `Bearer ${this.token}`,
         "Content-Type": contentType
       };
-      const res = await httpsRequest(method, url, headers, body);
+      const res = await this.httpsRequestWithRetry(method, url, headers, body);
       this._lastMeta = {
         region: this._region,
         endpoint: `${method} ${path}`,
@@ -1686,7 +1713,7 @@ var LeadbayClient = class {
     }
     const retryAfter = parseRetryAfter(headers["retry-after"]);
     if (status === 401) {
-      return this.makeError("AUTH_EXPIRED", "Authentication token expired or invalid", "Your LEADBAY_TOKEN is no longer valid. Regenerate it: npx -y @leadbay/mcp login --email <you> --region <us|fr>, then restart your MCP client.", endpoint, null, status);
+      return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", "Leadbay tokens don't expire on a timer, so this isn't a stale token. A 401 here is usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly; if it persists, offer to report it to the team.", endpoint, null, status);
     }
     if (status === 429 || status === 402 || parsed?.error === "quota_exceeded" || parsed?.error?.code === "quota_exceeded") {
       const hintBase = retryAfter ? `Wait ${retryAfter}s before retrying` : "Wait, then retry";
@@ -9546,6 +9573,88 @@ WHEN NOT TO USE: in normal flow \u2014 leadbay_enrich_titles wraps select \u2192
 
 This tool MUTATES state. The caller (agent or human-in-the-loop) is responsible for confirming intent before invocation; the MCP server does not soft-prompt for confirmation. See \`annotations.destructiveHint\`.
 `;
+var leadbay_send_feedback = `## WHEN TO USE
+
+Trigger phrases: "send feedback", "I want to report a bug", "tell the Leadbay team", "let Leadbay know", "give feedback", "report this to support", "I have a feature request".
+
+**Memory:** recall + capture via \`leadbay_agent_memory_*\` tools.
+
+Do NOT use for: "no, I meant / still nothing / ugh" \u2192 \`leadbay_report_friction\`; "log the email I sent" \u2192 \`leadbay_report_outreach\`.
+
+Prefer when: the user explicitly wants the Leadbay TEAM to receive a message they authored \u2014 or accepts your offer to report an error. For silent, agent-detected friction signals use leadbay_report_friction instead.
+
+Examples that SHOULD invoke this tool:
+- "Send feedback to the team: the lead scores feel off this week."
+- "Can you report a bug? Pulling leads in Lyon returns nothing."
+- "Tell Leadbay I'd love a way to schedule my morning check-in."
+
+Examples that should NOT invoke this tool (sound similar, route elsewhere):
+- "No, I meant Wisconsin not Wyoming."
+- "I emailed Acme \u2014 log that outreach."
+- "Thumbs down on this lead."
+
+## RENDER (quick)
+
+Confirm the exact wording with the user BEFORE calling (this is sent to
+the team). After sending, show a one-line confirmation from the result's
+\`message\` (e.g. "\u2713 Sent to the Leadbay team"). If \`sent\` is false, tell
+the user it could NOT be delivered \u2014 never imply it was sent.
+
+---
+
+Deliver a user-authored message to the Leadbay team's feedback inbox \u2014 the same
+destination as the web app's feedback form. **You do not write the feedback;
+the user does.** Capture their words, confirm the phrasing, then send.
+
+## Parameters
+- \`message\` (required) \u2014 the user's feedback, in their own words. Confirm it
+  with the user before sending. Cap 4000 chars.
+- \`associated_error_id\` (optional) \u2014 a Sentry event id to attach the feedback
+  to (e.g. the id surfaced by an error the user just hit), so the team sees the
+  feedback on that exact issue.
+
+## When a tool errors \u2014 OFFER, don't auto-send
+When a Leadbay tool returns an error and the user might want the team to know,
+you may OFFER: *"Want me to send feedback about this to the Leadbay team?"*
+- Send ONLY if the user says yes AND gives (or approves) a message.
+- Never send feedback the user didn't author or approve.
+- If an error event id is available, pass it as \`associated_error_id\`.
+
+## Result
+- \`sent: true\` \u2192 it reached the team. Show the confirmation from \`message\`.
+- \`sent: false\` \u2192 delivery wasn't possible (feedback not available on this
+  client). Tell the user it was NOT sent. Do not claim success.
+
+This is the only "talk to the Leadbay team" tool. It does not mutate any
+Leadbay data. For silent friction signals you detect yourself, use
+\`leadbay_report_friction\` instead.
+
+## NEXT STEPS \u2014 after sending feedback
+
+**ALWAYS render NEXT STEPS via your host's next-step widget.** Use whichever is in your tool set \u2014 the NAME and SCHEMA differ: **\`ask_user_input_v0\`** (Claude chat / ChatGPT) takes plain-string options with \`type:"single_select"\`; **\`AskUserQuestion\`** (Claude cowork / Claude Code) takes object options \`{label, description}\` plus a required short \`header\` (\u226412 chars) and \`multiSelect\`, NO \`type\` field, and never add an "Other" option (the host adds it). Match the schema to the tool you actually have \u2014 the wrong schema fails silently and you fall back to prose. Prose bullets are the fallback ONLY when NEITHER widget exists. Any turn that would end with a choice must be the widget \u2014 the widget IS the question.
+
+**If the tool result carries a \`next_steps\` object, that is the source of truth \u2014 use it directly.** Each option has a short \`.label\` (\u22645 words) and a full \`.description\`. Map \`next_steps.options[]\` into your host widget VERBATIM and in order: for \`AskUserQuestion\` (cowork / Claude Code) pass each as \`{label, description}\`; for \`ask_user_input_v0\` (Claude chat / ChatGPT, string options only) pass each option's \`.description\` as the string (it's the full sentence). Do NOT reword, reorder, drop, or prose-ify them \u2014 they're built deterministically by the server so the offer (incl. the artifact option at position 0) fires every time. Fall back to the table below only when there is NO \`next_steps\` field.
+
+**One exception \u2014 skip the widget** when the user's original message contained a complete sequential instruction chain ("show me X and then do Y") AND all stated steps have been completed. In that case, end with STOP directly \u2014 the user stated their full plan and does not need a "what next?" prompt.
+- Skip example: "Show me today's leads and then research the top one for me." \u2192 after research completes, emit STOP without the widget.
+- Do NOT skip for: plain requests ("show me today's leads", "run my check-in"), recurring-language requests ("I do this every day"), or requests where only one action was stated.
+
+Pick 2\u20134 rows from the (Observation, Suggest, Calls) table below most relevant to the response, then call your host's widget with ITS schema (per the schema rules above \u2014 wrong schema fails silently):
+- \`ask_user_input_v0\`: \`{questions:[{question,type:"single_select",options:["<Suggest 1>","<Suggest 2>"]}]}\`
+- \`AskUserQuestion\`: \`{questions:[{question,header:"Next step",multiSelect:false,options:[{label:"<\u22645 words>",description:"<Suggest 1>"}]}]}\`
+
+User picks \u2192 call the matching \`Calls\` tool. Constraints: 2\u20134 mutually-exclusive options, AskUserQuestion labels \u22645 words (full text in \`description\`), max 3 questions. Table stays internal; never recite it.
+
+---
+
+
+
+| Observation                                  | Suggest                                              | Calls                                   |
+|----------------------------------------------|------------------------------------------------------|-----------------------------------------|
+| \`sent == true\`                               | "Anything else you'd like to flag to the team?"      | leadbay_send_feedback(message)          |
+| \`sent == false\`                              | "It didn't go through \u2014 want to try sending again?"  | leadbay_send_feedback(message)          |
+| Feedback was about an error the user hit      | "Want me to retry the action that failed?"           | (re-call the tool that errored)         |
+`;
 var leadbay_set_active_lens = `Mark a lens as last-used. Subsequent \`/me\` reads return it as \`last_requested_lens\`, so all composite tools default to it.
 
 WHEN TO USE: after the user explicitly switched contexts (e.g. created a new lens via leadbay_create_lens).
@@ -16670,16 +16779,16 @@ var accountStatus = {
         properties: {
           current_version: { type: "string" },
           latest_version: { type: "string" },
-          mcpb_url: {
+          install_url: {
             type: "string",
-            description: "Direct download URL for the .mcpb installer asset."
+            description: "Direct download URL for the installer asset (.dxt, falling back to .mcpb)."
           },
           release_url: {
             type: "string",
             description: "GitHub release page (changelog)."
           }
         },
-        required: ["current_version", "latest_version", "mcpb_url", "release_url"]
+        required: ["current_version", "latest_version", "install_url", "release_url"]
       }
     },
     required: ["user", "organization"]
@@ -20749,6 +20858,83 @@ var reportFriction = {
   }
 };
 
+// ../core/dist/tools/send-feedback.js
+var MESSAGE_MAX = 4e3;
+var sendFeedback = {
+  name: "leadbay_send_feedback",
+  annotations: {
+    title: "Send feedback to the Leadbay team",
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: false,
+    openWorldHint: true
+  },
+  description: leadbay_send_feedback,
+  // Write-gated: it sends data outward to the Leadbay team. Registered in
+  // compositeWriteTools (default-on since 0.3.0).
+  write: true,
+  inputSchema: {
+    type: "object",
+    properties: {
+      message: {
+        type: "string",
+        description: "The user's feedback, in their own words. Confirm the wording with the user BEFORE calling \u2014 this is sent to the Leadbay team. Cap 4000 chars."
+      },
+      associated_error_id: {
+        type: "string",
+        description: "Optional: a Sentry event id to attach this feedback to (e.g. the id from an error the user just hit), so the team sees the feedback on that exact issue."
+      }
+    },
+    required: ["message"],
+    additionalProperties: false
+  },
+  outputSchema: {
+    type: "object",
+    description: "Whether the feedback reached the Leadbay team. `sent: true` means it landed in the team's inbox.",
+    properties: {
+      sent: { type: "boolean" },
+      message: { type: "string" },
+      _meta: {
+        type: "object",
+        properties: { region: { type: "string" } }
+      }
+    }
+  },
+  execute: async (client, params, ctx) => {
+    const text = typeof params.message === "string" ? params.message.trim() : "";
+    if (!text) {
+      return {
+        error: true,
+        code: "BAD_INPUT",
+        message: "message is required \u2014 pass the user's feedback text.",
+        hint: "Ask the user what they'd like to tell the Leadbay team, then call again with their words in `message`."
+      };
+    }
+    const message = text.length > MESSAGE_MAX ? `${text.slice(0, MESSAGE_MAX - 1)}\u2026` : text;
+    if (!ctx?.sendFeedback) {
+      return {
+        sent: false,
+        message: "Feedback could not be sent from this client (feedback delivery isn't available here). Let the user know it wasn't delivered.",
+        _meta: { region: client.region }
+      };
+    }
+    const errorId = typeof params.associated_error_id === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(params.associated_error_id) ? params.associated_error_id : void 0;
+    const sent = await ctx.sendFeedback(message, {
+      ...errorId ? { associatedEventId: errorId } : {}
+    });
+    return {
+      sent,
+      message: sent ? "Sent to the Leadbay team \u2014 thanks for the feedback." : (
+        // `sent:false` means the bounded flush didn't confirm within the
+        // window — the envelope may still drain on shutdown. Don't assert it
+        // failed (that trains users to re-send and spam the inbox).
+        "Delivery not confirmed \u2014 it may still reach the Leadbay team. Avoid re-sending unless the user wants to."
+      ),
+      _meta: { region: client.region }
+    };
+  }
+};
+
 // ../core/dist/index.js
 var agentMemoryTools = [
   agentMemoryRecall,
@@ -20880,6 +21066,13 @@ var compositeWriteTools = [
   refinePrompt,
   answerClarification,
   reportOutreach,
+  // sendFeedback is granular-shaped (a single call to the telemetry seam →
+  // Sentry.captureFeedback, same inbox as the web app's feedback form), so it
+  // lives in tools/, NOT composite/. Registered here (not advanced-gated) so
+  // users can send feedback in-conversation without LEADBAY_MCP_ADVANCED.
+  // Write-gated since it sends data outward. Not in COMPOSITE_FILE_TOOL_NAMES,
+  // so _triggered_by is optional (no orchestration / mandatory-intent-trace).
+  sendFeedback,
   importLeads,
   importAndQualify,
   // Contact management (product#3703) — each is a single-call relay, so
@@ -21052,6 +21245,7 @@ var NOOP_TELEMETRY = {
   },
   captureException: () => {
   },
+  captureFeedback: async () => false,
   captureUpdateCheck: () => {
   },
   captureUpdatePrompted: () => {
@@ -21068,10 +21262,13 @@ var NOOP_TELEMETRY = {
 
 // src/update-check.ts
 var cachedInfo = null;
-var checkInFlight = false;
+var inFlightCheck = null;
 function getCachedUpdateInfo() {
   return cachedInfo;
 }
+function getInFlightCheck() {
+  return inFlightCheck;
+}
 var RELEASES_LATEST_URL = "https://api.github.com/repos/leadbay/leadclaw/releases/latest";
 var CHECK_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
@@ -21116,25 +21313,24 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function pickMcpbAsset(rel) {
+function pickInstallAsset(rel) {
   if (!Array.isArray(rel.assets)) return void 0;
-  const mcpb = rel.assets.find(
-    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
-  );
-  if (mcpb?.browser_download_url) return mcpb.browser_download_url;
   const dxt = rel.assets.find(
     (a) => typeof a.name === "string" && a.name.endsWith(".dxt")
   );
-  return dxt?.browser_download_url;
+  if (dxt?.browser_download_url) return dxt.browser_download_url;
+  const mcpb = rel.assets.find(
+    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
+  );
+  return mcpb?.browser_download_url;
 }
-async function checkForUpdate(opts) {
-  if (checkInFlight) return cachedInfo;
-  checkInFlight = true;
-  try {
-    return await doCheck(opts);
-  } finally {
-    checkInFlight = false;
-  }
+function checkForUpdate(opts) {
+  if (inFlightCheck) return inFlightCheck;
+  const p = doCheck(opts).finally(() => {
+    if (inFlightCheck === p) inFlightCheck = null;
+  });
+  inFlightCheck = p;
+  return p;
 }
 async function doCheck(opts) {
   const now = opts.now ?? Date.now;
@@ -21143,11 +21339,11 @@ async function doCheck(opts) {
   const currentVersion = opts.currentVersion;
   const state = await opts.stateStore.read();
   const within = now() - state.last_check_time < CHECK_THROTTLE_MS;
-  if (!opts.force && within && state.latest_known_version && state.latest_known_mcpb_url && state.latest_known_release_url) {
+  if (!opts.force && within && state.latest_known_version && state.latest_known_install_url && state.latest_known_release_url) {
     const cached = buildInfoIfUpgrade(
       currentVersion,
       state.latest_known_version,
-      state.latest_known_mcpb_url,
+      state.latest_known_install_url,
       state.latest_known_release_url,
       state.suppressed_versions,
       state.remind_until,
@@ -21201,18 +21397,18 @@ async function doCheck(opts) {
     return null;
   }
   let latestVersion;
-  let mcpbUrl;
+  let installUrl;
   let releaseUrl;
   if (status === 200 && body) {
     const parsed = body.tag_name ? parseTagName(body.tag_name) : null;
     if (parsed) {
       latestVersion = parsed;
-      mcpbUrl = pickMcpbAsset(body);
+      installUrl = pickInstallAsset(body);
       releaseUrl = body.html_url;
     }
   } else {
     latestVersion = state.latest_known_version;
-    mcpbUrl = state.latest_known_mcpb_url;
+    installUrl = state.latest_known_install_url;
     releaseUrl = state.latest_known_release_url;
   }
   const persisted = await opts.stateStore.update((cur) => ({
@@ -21220,7 +21416,7 @@ async function doCheck(opts) {
     last_check_time: now(),
     etag: nextEtag,
     latest_known_version: latestVersion ?? cur.latest_known_version,
-    latest_known_mcpb_url: mcpbUrl ?? cur.latest_known_mcpb_url,
+    latest_known_install_url: installUrl ?? cur.latest_known_install_url,
     latest_known_release_url: releaseUrl ?? cur.latest_known_release_url
   }));
   opts.telemetry.captureUpdateCheck?.({
@@ -21230,7 +21426,7 @@ async function doCheck(opts) {
   const info = buildInfoIfUpgrade(
     currentVersion,
     persisted.latest_known_version,
-    persisted.latest_known_mcpb_url,
+    persisted.latest_known_install_url,
     persisted.latest_known_release_url,
     persisted.suppressed_versions,
     persisted.remind_until,
@@ -21239,22 +21435,22 @@ async function doCheck(opts) {
   cachedInfo = info;
   return info;
 }
-function buildInfoIfUpgrade(currentVersion, latestVersion, mcpbUrl, releaseUrl, suppressed, remindUntil, nowMs) {
-  if (!latestVersion || !mcpbUrl || !releaseUrl) return null;
+function buildInfoIfUpgrade(currentVersion, latestVersion, installUrl, releaseUrl, suppressed, remindUntil, nowMs) {
+  if (!latestVersion || !installUrl || !releaseUrl) return null;
   if (compareSemver(latestVersion, currentVersion) <= 0) return null;
   if (suppressed.includes(latestVersion)) return null;
   if (remindUntil && remindUntil > nowMs) return null;
   return {
     current_version: currentVersion,
     latest_version: latestVersion,
-    mcpb_url: mcpbUrl,
+    install_url: installUrl,
     release_url: releaseUrl
   };
 }
 
 // src/update-tool.ts
 var TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1e3;
-var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ mcpb_url, release_url }` \u2014 show the user a clickable link to mcpb_url so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
+var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ install_url, release_url }` \u2014 show the user a clickable link to install_url (a `.dxt` bundle) so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
 function buildAcknowledgeUpdateTool(opts) {
   const now = opts.now ?? Date.now;
   return {
@@ -21290,7 +21486,7 @@ function buildAcknowledgeUpdateTool(opts) {
         action: { type: "string" },
         version: { type: "string" },
         message: { type: "string" },
-        mcpb_url: { type: ["string", "null"] },
+        install_url: { type: ["string", "null"] },
         release_url: { type: ["string", "null"] }
       },
       required: ["ok", "action", "version", "message"]
@@ -21324,9 +21520,9 @@ function buildAcknowledgeUpdateTool(opts) {
           ok: true,
           action,
           version,
-          mcpb_url: state.latest_known_mcpb_url ?? null,
+          install_url: state.latest_known_install_url ?? null,
           release_url: state.latest_known_release_url ?? null,
-          message: state.latest_known_mcpb_url ? "Show the user the mcpb_url as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No .mcpb URL is cached. Direct the user to the release_url to download manually."
+          message: state.latest_known_install_url ? "Show the user the install_url (a .dxt bundle) as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No installer URL is cached. Direct the user to the release_url to download manually."
         };
       }
       if (action === "remind_tomorrow") {
@@ -21429,7 +21625,7 @@ function buildStartHereParagraph(has) {
 }
 function buildUpdateAvailableParagraph(has) {
   if (!has("leadbay_acknowledge_update")) return null;
-  return "MCP auto-update: when `leadbay_account_status` returns an `update_available` field (`{ current_version, latest_version, mcpb_url, release_url }`), a newer MCP server release is published and the user has NOT suppressed it. Surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `mcpb_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .mcpb extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
+  return "MCP auto-update: an `update_available` field (`{ current_version, latest_version, install_url, release_url }`) means a newer MCP server release is published and the user has NOT suppressed it. It appears in TWO places: as a top-level field on `leadbay_account_status`, AND on `_meta.update_available` of the FIRST other tool result in a session while an update is pending (so a fresh session surfaces the proposal even without an account_status call). Whenever you see it on ANY response, surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `install_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .dxt extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
 }
 function buildRhythmParagraph(has) {
   if (has("leadbay_report_outreach")) {
@@ -21724,16 +21920,47 @@ function buildServer(client, opts = {}) {
       );
     });
   };
-  const maybeAttachUpdate = (toolName, result) => {
-    if (toolName !== "leadbay_account_status") return;
+  const UPDATE_SURFACE_WAIT_MS = 1500;
+  const maybeAttachUpdate = async (toolName, result) => {
     if (!opts.updateStateStore) return;
     if (result === null || typeof result !== "object" || Array.isArray(result)) {
       return;
     }
-    const info = getCachedUpdateInfo();
+    if (result.error === true) {
+      return;
+    }
+    let info = getCachedUpdateInfo();
+    if (!info) {
+      const inflight = getInFlightCheck();
+      if (inflight) {
+        const settled = inflight.catch((err) => {
+          opts.logger?.warn?.(
+            `update_check.surface_await_failed ${err?.message ?? err}`
+          );
+          return null;
+        });
+        info = await Promise.race([
+          settled,
+          new Promise(
+            (resolve) => setTimeout(() => resolve(null), UPDATE_SURFACE_WAIT_MS)
+          )
+        ]);
+        info = getCachedUpdateInfo() ?? info;
+      }
+    }
     if (!info) return;
-    result.update_available = info;
-    if (!promptedVersionsThisSession.has(info.latest_version)) {
+    const isAccountStatus = toolName === "leadbay_account_status";
+    const alreadyPrompted = promptedVersionsThisSession.has(info.latest_version);
+    if (!isAccountStatus && alreadyPrompted) return;
+    if (isAccountStatus) {
+      result.update_available = info;
+    } else {
+      const envelope = result;
+      const target = envelope.__markdown_envelope === true && envelope.structured !== null && typeof envelope.structured === "object" && !Array.isArray(envelope.structured) ? envelope.structured : envelope;
+      const existingMeta = target._meta && typeof target._meta === "object" && !Array.isArray(target._meta) ? target._meta : {};
+      target._meta = { ...existingMeta, update_available: info };
+    }
+    if (!alreadyPrompted) {
       promptedVersionsThisSession.add(info.latest_version);
       telemetry.captureUpdatePrompted?.({
         current_version: serverVersion,
@@ -21907,9 +22134,13 @@ function buildServer(client, opts = {}) {
         notificationsInbox: opts.notificationsInbox,
         signal: extra.signal,
         progress,
-        elicit
+        elicit,
+        // Route leadbay_send_feedback to Sentry's feedback inbox (same place
+        // the web app's form lands). NOOP_TELEMETRY returns false, so the
+        // tool reports honestly when telemetry is off.
+        sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
-      maybeAttachUpdate(name, result);
+      await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
         const envText = formatErrorForLLM(result);
@@ -22205,7 +22436,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.19.2" : "0.0.0-dev";
+var VERSION = true ? "0.20.0" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var sseSessions = /* @__PURE__ */ new Map();

package/dist/installer-electron.js

@@ -1466,7 +1466,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = "0.19.2";
+    VERSION = "0.20.0";
     PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
     sessions = /* @__PURE__ */ new Map();
     OAUTH_BASE_URLS = {

package/dist/installer-gui.js

@@ -873,7 +873,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = "0.19.2";
+var VERSION = "0.20.0";
 var PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
 var sessions = /* @__PURE__ */ new Map();
 var OAUTH_BASE_URLS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.19.2",
+  "version": "0.20.0",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",