@leadbay/mcp 0.19.3 → 0.20.0

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog — @leadbay/mcp
 
+## 0.20.0 — 2026-06-15
+
+- **Proactive update proposal on a fresh session** (product#3742): the auto-update check already ran at boot, but the resulting proposal only reached the user if the agent happened to call `leadbay_account_status` — which a fresh session rarely does, so the "newer version available" prompt was effectively invisible. The cached `update_available` block now also rides along on `_meta.update_available` of the **first ordinary tool result** of a session while an upgrade is pending, gated once-per-version so it surfaces exactly once. `leadbay_account_status` keeps carrying it as a top-level field. The server-instruction paragraph now tells the agent to surface the `ask_user_input_v0` prompt whenever it sees the field on *any* response.
+- **Installer asset is now `.dxt`, not `.mcpb`**: the release-asset picker prefers the `.dxt` bundle (falling back to `.mcpb` only when a release ships no `.dxt`). The field is renamed `mcpb_url` → `install_url` across `update_available`, the `leadbay_acknowledge_update` result, and the persisted update-state — with forward-migration of the legacy `latest_known_mcpb_url` key so existing users don't lose their cache.
+
 ## 0.19.3 — 2026-06-15
 
 - **New tool `leadbay_send_feedback`**: delivers a user-authored message to the same destination as the web app's "Send feedback" form — the team's Sentry feedback inbox (the website form calls `Sentry.captureFeedback`; there is no Leadbay API endpoint, so the MCP reuses its already-initialized `@sentry/node`). User-initiated ("send feedback / report a bug / tell Leadbay…"), or offered on a tool error and sent only on explicit yes. Distinct from the silent, agent-detected, PostHog-only `leadbay_report_friction`: feedback is explicit, user-authored, and reaches the team's inbox. Honest delivery — if the Sentry transport isn't available it returns `sent:false`, never a false success; Sentry is flushed after capture so the event actually ships; identity is attached when it resolves (anonymous fallback rather than dropping the message). Write-gated (`LEADBAY_MCP_WRITE=1`) since it sends data outward.

package/dist/bin.js

@@ -16524,16 +16524,16 @@ var init_account_status = __esm({
             properties: {
               current_version: { type: "string" },
               latest_version: { type: "string" },
-              mcpb_url: {
+              install_url: {
                 type: "string",
-                description: "Direct download URL for the .mcpb installer asset."
+                description: "Direct download URL for the installer asset (.dxt, falling back to .mcpb)."
               },
               release_url: {
                 type: "string",
                 description: "GitHub release page (changelog)."
               }
             },
-            required: ["current_version", "latest_version", "mcpb_url", "release_url"]
+            required: ["current_version", "latest_version", "install_url", "release_url"]
           }
         },
         required: ["user", "organization"]
@@ -23584,10 +23584,13 @@ function initTelemetry(opts) {
 
 // src/update-check.ts
 var cachedInfo = null;
-var checkInFlight = false;
+var inFlightCheck = null;
 function getCachedUpdateInfo() {
   return cachedInfo;
 }
+function getInFlightCheck() {
+  return inFlightCheck;
+}
 var RELEASES_LATEST_URL = "https://api.github.com/repos/leadbay/leadclaw/releases/latest";
 var CHECK_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
@@ -23632,25 +23635,24 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function pickMcpbAsset(rel) {
+function pickInstallAsset(rel) {
   if (!Array.isArray(rel.assets)) return void 0;
-  const mcpb = rel.assets.find(
-    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
-  );
-  if (mcpb?.browser_download_url) return mcpb.browser_download_url;
   const dxt = rel.assets.find(
     (a) => typeof a.name === "string" && a.name.endsWith(".dxt")
   );
-  return dxt?.browser_download_url;
+  if (dxt?.browser_download_url) return dxt.browser_download_url;
+  const mcpb = rel.assets.find(
+    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
+  );
+  return mcpb?.browser_download_url;
 }
-async function checkForUpdate(opts) {
-  if (checkInFlight) return cachedInfo;
-  checkInFlight = true;
-  try {
-    return await doCheck(opts);
-  } finally {
-    checkInFlight = false;
-  }
+function checkForUpdate(opts) {
+  if (inFlightCheck) return inFlightCheck;
+  const p = doCheck(opts).finally(() => {
+    if (inFlightCheck === p) inFlightCheck = null;
+  });
+  inFlightCheck = p;
+  return p;
 }
 async function doCheck(opts) {
   const now = opts.now ?? Date.now;
@@ -23659,11 +23661,11 @@ async function doCheck(opts) {
   const currentVersion = opts.currentVersion;
   const state = await opts.stateStore.read();
   const within = now() - state.last_check_time < CHECK_THROTTLE_MS;
-  if (!opts.force && within && state.latest_known_version && state.latest_known_mcpb_url && state.latest_known_release_url) {
+  if (!opts.force && within && state.latest_known_version && state.latest_known_install_url && state.latest_known_release_url) {
     const cached = buildInfoIfUpgrade(
       currentVersion,
       state.latest_known_version,
-      state.latest_known_mcpb_url,
+      state.latest_known_install_url,
       state.latest_known_release_url,
       state.suppressed_versions,
       state.remind_until,
@@ -23717,18 +23719,18 @@ async function doCheck(opts) {
     return null;
   }
   let latestVersion;
-  let mcpbUrl;
+  let installUrl;
   let releaseUrl;
   if (status === 200 && body) {
     const parsed = body.tag_name ? parseTagName(body.tag_name) : null;
     if (parsed) {
       latestVersion = parsed;
-      mcpbUrl = pickMcpbAsset(body);
+      installUrl = pickInstallAsset(body);
       releaseUrl = body.html_url;
     }
   } else {
     latestVersion = state.latest_known_version;
-    mcpbUrl = state.latest_known_mcpb_url;
+    installUrl = state.latest_known_install_url;
     releaseUrl = state.latest_known_release_url;
   }
   const persisted = await opts.stateStore.update((cur) => ({
@@ -23736,7 +23738,7 @@ async function doCheck(opts) {
     last_check_time: now(),
     etag: nextEtag,
     latest_known_version: latestVersion ?? cur.latest_known_version,
-    latest_known_mcpb_url: mcpbUrl ?? cur.latest_known_mcpb_url,
+    latest_known_install_url: installUrl ?? cur.latest_known_install_url,
     latest_known_release_url: releaseUrl ?? cur.latest_known_release_url
   }));
   opts.telemetry.captureUpdateCheck?.({
@@ -23746,7 +23748,7 @@ async function doCheck(opts) {
   const info = buildInfoIfUpgrade(
     currentVersion,
     persisted.latest_known_version,
-    persisted.latest_known_mcpb_url,
+    persisted.latest_known_install_url,
     persisted.latest_known_release_url,
     persisted.suppressed_versions,
     persisted.remind_until,
@@ -23755,15 +23757,15 @@ async function doCheck(opts) {
   cachedInfo = info;
   return info;
 }
-function buildInfoIfUpgrade(currentVersion, latestVersion, mcpbUrl, releaseUrl, suppressed, remindUntil, nowMs) {
-  if (!latestVersion || !mcpbUrl || !releaseUrl) return null;
+function buildInfoIfUpgrade(currentVersion, latestVersion, installUrl, releaseUrl, suppressed, remindUntil, nowMs) {
+  if (!latestVersion || !installUrl || !releaseUrl) return null;
   if (compareSemver(latestVersion, currentVersion) <= 0) return null;
   if (suppressed.includes(latestVersion)) return null;
   if (remindUntil && remindUntil > nowMs) return null;
   return {
     current_version: currentVersion,
     latest_version: latestVersion,
-    mcpb_url: mcpbUrl,
+    install_url: installUrl,
     release_url: releaseUrl
   };
 }
@@ -23792,7 +23794,7 @@ async function recordRunningVersion(currentVersion, stateStore, telemetry) {
 
 // src/update-tool.ts
 var TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1e3;
-var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ mcpb_url, release_url }` \u2014 show the user a clickable link to mcpb_url so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
+var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ install_url, release_url }` \u2014 show the user a clickable link to install_url (a `.dxt` bundle) so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
 function buildAcknowledgeUpdateTool(opts) {
   const now = opts.now ?? Date.now;
   return {
@@ -23828,7 +23830,7 @@ function buildAcknowledgeUpdateTool(opts) {
         action: { type: "string" },
         version: { type: "string" },
         message: { type: "string" },
-        mcpb_url: { type: ["string", "null"] },
+        install_url: { type: ["string", "null"] },
         release_url: { type: ["string", "null"] }
       },
       required: ["ok", "action", "version", "message"]
@@ -23862,9 +23864,9 @@ function buildAcknowledgeUpdateTool(opts) {
           ok: true,
           action,
           version,
-          mcpb_url: state.latest_known_mcpb_url ?? null,
+          install_url: state.latest_known_install_url ?? null,
           release_url: state.latest_known_release_url ?? null,
-          message: state.latest_known_mcpb_url ? "Show the user the mcpb_url as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No .mcpb URL is cached. Direct the user to the release_url to download manually."
+          message: state.latest_known_install_url ? "Show the user the install_url (a .dxt bundle) as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No installer URL is cached. Direct the user to the release_url to download manually."
         };
       }
       if (action === "remind_tomorrow") {
@@ -23967,7 +23969,7 @@ function buildStartHereParagraph(has) {
 }
 function buildUpdateAvailableParagraph(has) {
   if (!has("leadbay_acknowledge_update")) return null;
-  return "MCP auto-update: when `leadbay_account_status` returns an `update_available` field (`{ current_version, latest_version, mcpb_url, release_url }`), a newer MCP server release is published and the user has NOT suppressed it. Surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `mcpb_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .mcpb extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
+  return "MCP auto-update: an `update_available` field (`{ current_version, latest_version, install_url, release_url }`) means a newer MCP server release is published and the user has NOT suppressed it. It appears in TWO places: as a top-level field on `leadbay_account_status`, AND on `_meta.update_available` of the FIRST other tool result in a session while an update is pending (so a fresh session surfaces the proposal even without an account_status call). Whenever you see it on ANY response, surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `install_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .dxt extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
 }
 function buildRhythmParagraph(has) {
   if (has("leadbay_report_outreach")) {
@@ -24262,16 +24264,47 @@ function buildServer(client, opts = {}) {
       );
     });
   };
-  const maybeAttachUpdate = (toolName, result) => {
-    if (toolName !== "leadbay_account_status") return;
+  const UPDATE_SURFACE_WAIT_MS = 1500;
+  const maybeAttachUpdate = async (toolName, result) => {
     if (!opts.updateStateStore) return;
     if (result === null || typeof result !== "object" || Array.isArray(result)) {
       return;
     }
-    const info = getCachedUpdateInfo();
+    if (result.error === true) {
+      return;
+    }
+    let info = getCachedUpdateInfo();
+    if (!info) {
+      const inflight = getInFlightCheck();
+      if (inflight) {
+        const settled = inflight.catch((err) => {
+          opts.logger?.warn?.(
+            `update_check.surface_await_failed ${err?.message ?? err}`
+          );
+          return null;
+        });
+        info = await Promise.race([
+          settled,
+          new Promise(
+            (resolve) => setTimeout(() => resolve(null), UPDATE_SURFACE_WAIT_MS)
+          )
+        ]);
+        info = getCachedUpdateInfo() ?? info;
+      }
+    }
     if (!info) return;
-    result.update_available = info;
-    if (!promptedVersionsThisSession.has(info.latest_version)) {
+    const isAccountStatus = toolName === "leadbay_account_status";
+    const alreadyPrompted = promptedVersionsThisSession.has(info.latest_version);
+    if (!isAccountStatus && alreadyPrompted) return;
+    if (isAccountStatus) {
+      result.update_available = info;
+    } else {
+      const envelope = result;
+      const target = envelope.__markdown_envelope === true && envelope.structured !== null && typeof envelope.structured === "object" && !Array.isArray(envelope.structured) ? envelope.structured : envelope;
+      const existingMeta = target._meta && typeof target._meta === "object" && !Array.isArray(target._meta) ? target._meta : {};
+      target._meta = { ...existingMeta, update_available: info };
+    }
+    if (!alreadyPrompted) {
       promptedVersionsThisSession.add(info.latest_version);
       telemetry.captureUpdatePrompted?.({
         current_version: serverVersion,
@@ -24451,7 +24484,7 @@ function buildServer(client, opts = {}) {
         // tool reports honestly when telemetry is off.
         sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
-      maybeAttachUpdate(name, result);
+      await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
         const envText = formatErrorForLLM(result);
@@ -25461,8 +25494,10 @@ var UpdateStateStore = class {
     if (typeof r.latest_known_version === "string") {
       out.latest_known_version = r.latest_known_version;
     }
-    if (typeof r.latest_known_mcpb_url === "string") {
-      out.latest_known_mcpb_url = r.latest_known_mcpb_url;
+    if (typeof r.latest_known_install_url === "string") {
+      out.latest_known_install_url = r.latest_known_install_url;
+    } else if (typeof r.latest_known_mcpb_url === "string") {
+      out.latest_known_install_url = r.latest_known_mcpb_url;
     }
     if (typeof r.latest_known_release_url === "string") {
       out.latest_known_release_url = r.latest_known_release_url;
@@ -25890,7 +25925,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.19.3";
+var VERSION = "0.20.0";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 

package/dist/http-server.js

@@ -16779,16 +16779,16 @@ var accountStatus = {
         properties: {
           current_version: { type: "string" },
           latest_version: { type: "string" },
-          mcpb_url: {
+          install_url: {
             type: "string",
-            description: "Direct download URL for the .mcpb installer asset."
+            description: "Direct download URL for the installer asset (.dxt, falling back to .mcpb)."
           },
           release_url: {
             type: "string",
             description: "GitHub release page (changelog)."
           }
         },
-        required: ["current_version", "latest_version", "mcpb_url", "release_url"]
+        required: ["current_version", "latest_version", "install_url", "release_url"]
       }
     },
     required: ["user", "organization"]
@@ -21262,10 +21262,13 @@ var NOOP_TELEMETRY = {
 
 // src/update-check.ts
 var cachedInfo = null;
-var checkInFlight = false;
+var inFlightCheck = null;
 function getCachedUpdateInfo() {
   return cachedInfo;
 }
+function getInFlightCheck() {
+  return inFlightCheck;
+}
 var RELEASES_LATEST_URL = "https://api.github.com/repos/leadbay/leadclaw/releases/latest";
 var CHECK_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
@@ -21310,25 +21313,24 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function pickMcpbAsset(rel) {
+function pickInstallAsset(rel) {
   if (!Array.isArray(rel.assets)) return void 0;
-  const mcpb = rel.assets.find(
-    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
-  );
-  if (mcpb?.browser_download_url) return mcpb.browser_download_url;
   const dxt = rel.assets.find(
     (a) => typeof a.name === "string" && a.name.endsWith(".dxt")
   );
-  return dxt?.browser_download_url;
+  if (dxt?.browser_download_url) return dxt.browser_download_url;
+  const mcpb = rel.assets.find(
+    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
+  );
+  return mcpb?.browser_download_url;
 }
-async function checkForUpdate(opts) {
-  if (checkInFlight) return cachedInfo;
-  checkInFlight = true;
-  try {
-    return await doCheck(opts);
-  } finally {
-    checkInFlight = false;
-  }
+function checkForUpdate(opts) {
+  if (inFlightCheck) return inFlightCheck;
+  const p = doCheck(opts).finally(() => {
+    if (inFlightCheck === p) inFlightCheck = null;
+  });
+  inFlightCheck = p;
+  return p;
 }
 async function doCheck(opts) {
   const now = opts.now ?? Date.now;
@@ -21337,11 +21339,11 @@ async function doCheck(opts) {
   const currentVersion = opts.currentVersion;
   const state = await opts.stateStore.read();
   const within = now() - state.last_check_time < CHECK_THROTTLE_MS;
-  if (!opts.force && within && state.latest_known_version && state.latest_known_mcpb_url && state.latest_known_release_url) {
+  if (!opts.force && within && state.latest_known_version && state.latest_known_install_url && state.latest_known_release_url) {
     const cached = buildInfoIfUpgrade(
       currentVersion,
       state.latest_known_version,
-      state.latest_known_mcpb_url,
+      state.latest_known_install_url,
       state.latest_known_release_url,
       state.suppressed_versions,
       state.remind_until,
@@ -21395,18 +21397,18 @@ async function doCheck(opts) {
     return null;
   }
   let latestVersion;
-  let mcpbUrl;
+  let installUrl;
   let releaseUrl;
   if (status === 200 && body) {
     const parsed = body.tag_name ? parseTagName(body.tag_name) : null;
     if (parsed) {
       latestVersion = parsed;
-      mcpbUrl = pickMcpbAsset(body);
+      installUrl = pickInstallAsset(body);
       releaseUrl = body.html_url;
     }
   } else {
     latestVersion = state.latest_known_version;
-    mcpbUrl = state.latest_known_mcpb_url;
+    installUrl = state.latest_known_install_url;
     releaseUrl = state.latest_known_release_url;
   }
   const persisted = await opts.stateStore.update((cur) => ({
@@ -21414,7 +21416,7 @@ async function doCheck(opts) {
     last_check_time: now(),
     etag: nextEtag,
     latest_known_version: latestVersion ?? cur.latest_known_version,
-    latest_known_mcpb_url: mcpbUrl ?? cur.latest_known_mcpb_url,
+    latest_known_install_url: installUrl ?? cur.latest_known_install_url,
     latest_known_release_url: releaseUrl ?? cur.latest_known_release_url
   }));
   opts.telemetry.captureUpdateCheck?.({
@@ -21424,7 +21426,7 @@ async function doCheck(opts) {
   const info = buildInfoIfUpgrade(
     currentVersion,
     persisted.latest_known_version,
-    persisted.latest_known_mcpb_url,
+    persisted.latest_known_install_url,
     persisted.latest_known_release_url,
     persisted.suppressed_versions,
     persisted.remind_until,
@@ -21433,22 +21435,22 @@ async function doCheck(opts) {
   cachedInfo = info;
   return info;
 }
-function buildInfoIfUpgrade(currentVersion, latestVersion, mcpbUrl, releaseUrl, suppressed, remindUntil, nowMs) {
-  if (!latestVersion || !mcpbUrl || !releaseUrl) return null;
+function buildInfoIfUpgrade(currentVersion, latestVersion, installUrl, releaseUrl, suppressed, remindUntil, nowMs) {
+  if (!latestVersion || !installUrl || !releaseUrl) return null;
   if (compareSemver(latestVersion, currentVersion) <= 0) return null;
   if (suppressed.includes(latestVersion)) return null;
   if (remindUntil && remindUntil > nowMs) return null;
   return {
     current_version: currentVersion,
     latest_version: latestVersion,
-    mcpb_url: mcpbUrl,
+    install_url: installUrl,
     release_url: releaseUrl
   };
 }
 
 // src/update-tool.ts
 var TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1e3;
-var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ mcpb_url, release_url }` \u2014 show the user a clickable link to mcpb_url so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
+var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ install_url, release_url }` \u2014 show the user a clickable link to install_url (a `.dxt` bundle) so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
 function buildAcknowledgeUpdateTool(opts) {
   const now = opts.now ?? Date.now;
   return {
@@ -21484,7 +21486,7 @@ function buildAcknowledgeUpdateTool(opts) {
         action: { type: "string" },
         version: { type: "string" },
         message: { type: "string" },
-        mcpb_url: { type: ["string", "null"] },
+        install_url: { type: ["string", "null"] },
         release_url: { type: ["string", "null"] }
       },
       required: ["ok", "action", "version", "message"]
@@ -21518,9 +21520,9 @@ function buildAcknowledgeUpdateTool(opts) {
           ok: true,
           action,
           version,
-          mcpb_url: state.latest_known_mcpb_url ?? null,
+          install_url: state.latest_known_install_url ?? null,
           release_url: state.latest_known_release_url ?? null,
-          message: state.latest_known_mcpb_url ? "Show the user the mcpb_url as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No .mcpb URL is cached. Direct the user to the release_url to download manually."
+          message: state.latest_known_install_url ? "Show the user the install_url (a .dxt bundle) as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No installer URL is cached. Direct the user to the release_url to download manually."
         };
       }
       if (action === "remind_tomorrow") {
@@ -21623,7 +21625,7 @@ function buildStartHereParagraph(has) {
 }
 function buildUpdateAvailableParagraph(has) {
   if (!has("leadbay_acknowledge_update")) return null;
-  return "MCP auto-update: when `leadbay_account_status` returns an `update_available` field (`{ current_version, latest_version, mcpb_url, release_url }`), a newer MCP server release is published and the user has NOT suppressed it. Surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `mcpb_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .mcpb extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
+  return "MCP auto-update: an `update_available` field (`{ current_version, latest_version, install_url, release_url }`) means a newer MCP server release is published and the user has NOT suppressed it. It appears in TWO places: as a top-level field on `leadbay_account_status`, AND on `_meta.update_available` of the FIRST other tool result in a session while an update is pending (so a fresh session surfaces the proposal even without an account_status call). Whenever you see it on ANY response, surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `install_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .dxt extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
 }
 function buildRhythmParagraph(has) {
   if (has("leadbay_report_outreach")) {
@@ -21918,16 +21920,47 @@ function buildServer(client, opts = {}) {
       );
     });
   };
-  const maybeAttachUpdate = (toolName, result) => {
-    if (toolName !== "leadbay_account_status") return;
+  const UPDATE_SURFACE_WAIT_MS = 1500;
+  const maybeAttachUpdate = async (toolName, result) => {
     if (!opts.updateStateStore) return;
     if (result === null || typeof result !== "object" || Array.isArray(result)) {
       return;
     }
-    const info = getCachedUpdateInfo();
+    if (result.error === true) {
+      return;
+    }
+    let info = getCachedUpdateInfo();
+    if (!info) {
+      const inflight = getInFlightCheck();
+      if (inflight) {
+        const settled = inflight.catch((err) => {
+          opts.logger?.warn?.(
+            `update_check.surface_await_failed ${err?.message ?? err}`
+          );
+          return null;
+        });
+        info = await Promise.race([
+          settled,
+          new Promise(
+            (resolve) => setTimeout(() => resolve(null), UPDATE_SURFACE_WAIT_MS)
+          )
+        ]);
+        info = getCachedUpdateInfo() ?? info;
+      }
+    }
     if (!info) return;
-    result.update_available = info;
-    if (!promptedVersionsThisSession.has(info.latest_version)) {
+    const isAccountStatus = toolName === "leadbay_account_status";
+    const alreadyPrompted = promptedVersionsThisSession.has(info.latest_version);
+    if (!isAccountStatus && alreadyPrompted) return;
+    if (isAccountStatus) {
+      result.update_available = info;
+    } else {
+      const envelope = result;
+      const target = envelope.__markdown_envelope === true && envelope.structured !== null && typeof envelope.structured === "object" && !Array.isArray(envelope.structured) ? envelope.structured : envelope;
+      const existingMeta = target._meta && typeof target._meta === "object" && !Array.isArray(target._meta) ? target._meta : {};
+      target._meta = { ...existingMeta, update_available: info };
+    }
+    if (!alreadyPrompted) {
       promptedVersionsThisSession.add(info.latest_version);
       telemetry.captureUpdatePrompted?.({
         current_version: serverVersion,
@@ -22107,7 +22140,7 @@ function buildServer(client, opts = {}) {
         // tool reports honestly when telemetry is off.
         sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
-      maybeAttachUpdate(name, result);
+      await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
         const envText = formatErrorForLLM(result);
@@ -22403,7 +22436,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.19.3" : "0.0.0-dev";
+var VERSION = true ? "0.20.0" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var sseSessions = /* @__PURE__ */ new Map();

package/dist/installer-electron.js

@@ -1466,7 +1466,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = "0.19.3";
+    VERSION = "0.20.0";
     PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
     sessions = /* @__PURE__ */ new Map();
     OAUTH_BASE_URLS = {

package/dist/installer-gui.js

@@ -873,7 +873,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = "0.19.3";
+var VERSION = "0.20.0";
 var PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
 var sessions = /* @__PURE__ */ new Map();
 var OAUTH_BASE_URLS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.19.3",
+  "version": "0.20.0",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",