@leadbay/mcp 0.19.3 → 0.20.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog — @leadbay/mcp
 
+## 0.20.1 — 2026-06-15
+
+- **Triage board stays the first next-step option on a poor-fit batch** (`leadbay_daily_check_in`): when today's batch is an ICP mismatch (every lead AI-scored off-profile), the agent was demoting the interactive triage board below "refine audience" in the NEXT STEPS widget — the plain ordering rule kept losing to the agent's own leverage judgment ("the whole batch is junk, so lead with fixing the lens"). The workflow contract requires the named artifact to be the FIRST option. The ordering rule now holds the triage board at position 1 even on a mismatched batch; the mismatch is surfaced in the prose nudge and offered as a *later* "refine the lens" option, never by displacing the artifact. Verified 5/5/5/5 across 3 consecutive eval runs on an all-off-ICP batch (the exact case that defeated the weaker rule).
+
+## 0.20.0 — 2026-06-15
+
+- **Proactive update proposal on a fresh session** (product#3742): the auto-update check already ran at boot, but the resulting proposal only reached the user if the agent happened to call `leadbay_account_status` — which a fresh session rarely does, so the "newer version available" prompt was effectively invisible. The cached `update_available` block now also rides along on `_meta.update_available` of the **first ordinary tool result** of a session while an upgrade is pending, gated once-per-version so it surfaces exactly once. `leadbay_account_status` keeps carrying it as a top-level field. The server-instruction paragraph now tells the agent to surface the `ask_user_input_v0` prompt whenever it sees the field on *any* response.
+- **Installer asset is now `.dxt`, not `.mcpb`**: the release-asset picker prefers the `.dxt` bundle (falling back to `.mcpb` only when a release ships no `.dxt`). The field is renamed `mcpb_url` → `install_url` across `update_available`, the `leadbay_acknowledge_update` result, and the persisted update-state — with forward-migration of the legacy `latest_known_mcpb_url` key so existing users don't lose their cache.
+
 ## 0.19.3 — 2026-06-15
 
 - **New tool `leadbay_send_feedback`**: delivers a user-authored message to the same destination as the web app's "Send feedback" form — the team's Sentry feedback inbox (the website form calls `Sentry.captureFeedback`; there is no Leadbay API endpoint, so the MCP reuses its already-initialized `@sentry/node`). User-initiated ("send feedback / report a bug / tell Leadbay…"), or offered on a tool error and sent only on explicit yes. Distinct from the silent, agent-detected, PostHog-only `leadbay_report_friction`: feedback is explicit, user-authored, and reaches the team's inbox. Honest delivery — if the Sentry transport isn't available it returns `sent:false`, never a false success; Sentry is flushed after capture so the event actually ships; identity is attached when it resolves (anonymous fallback rather than dropping the message). Write-gated (`LEADBAY_MCP_WRITE=1`) since it sends data outward.

package/dist/bin.js

@@ -16524,16 +16524,16 @@ var init_account_status = __esm({
             properties: {
               current_version: { type: "string" },
               latest_version: { type: "string" },
-              mcpb_url: {
+              install_url: {
                 type: "string",
-                description: "Direct download URL for the .mcpb installer asset."
+                description: "Direct download URL for the installer asset (.dxt, falling back to .mcpb)."
               },
               release_url: {
                 type: "string",
                 description: "GitHub release page (changelog)."
               }
             },
-            required: ["current_version", "latest_version", "mcpb_url", "release_url"]
+            required: ["current_version", "latest_version", "install_url", "release_url"]
           }
         },
         required: ["user", "organization"]
@@ -22038,7 +22038,7 @@ Contact enrichment is offered in the NEXT STEPS widget below \u2014 do NOT emit
 
 **REQUIRED OPTIONS \u2014 triggers and position rules:**
 - **Recurring language** ("every day", "every morning", "I do this every", "remind me", "automate this", "recurring"): add "Schedule 'Daily prospecting check-in' as a recurring task" and place it **first**.
-- **\u22655 leads returned**: add "Build an interactive lead triage board for this batch" and place it **first** (or second if the scheduling offer above also applies).
+- **\u22655 leads returned**: add "Build an interactive lead triage board for this batch" and place it **first** (or second if the scheduling offer above also applies). This holds **even when the batch is a poor fit** (e.g. every lead AI-scored as off-ICP / a vertical mismatch): the triage board is still the first artifact option because the user asked to see and act on *this batch*. When the batch is a mismatch, ALSO offer "Refine the audience / lens so future batches fit better" \u2014 but as a *later* option, never displacing the triage board from first. Leading with audience-refinement instead of the artifact is a contract violation: surface the mismatch in your prose nudge, not by demoting the triage board.
 
 ## NEXT STEPS \u2014 after rendering the pull_leads table
 
@@ -22079,7 +22079,7 @@ Pick 2\u20133 items below based on what was actually observed in the response. T
 If nothing in the menu applies cleanly, suggest only "pull next page" and "research a specific lead in depth" \u2014 never invent a tool that doesn't exist.
 
 
-**Final ordering check (do this before rendering):** Recurring offer \u2192 option 1; triage board \u2192 option 1 (or 2 if scheduling is also required). Swap if needed.
+**Final ordering check (do this before rendering):** Recurring offer \u2192 option 1; triage board \u2192 option 1 (or 2 if scheduling is also required). A poor-fit / mismatched batch does NOT change this \u2014 triage board stays first, refine-audience goes later in the list. Swap if needed.
 
 # GATE \u2014 STOP
 
@@ -23584,10 +23584,13 @@ function initTelemetry(opts) {
 
 // src/update-check.ts
 var cachedInfo = null;
-var checkInFlight = false;
+var inFlightCheck = null;
 function getCachedUpdateInfo() {
   return cachedInfo;
 }
+function getInFlightCheck() {
+  return inFlightCheck;
+}
 var RELEASES_LATEST_URL = "https://api.github.com/repos/leadbay/leadclaw/releases/latest";
 var CHECK_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
@@ -23632,25 +23635,24 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function pickMcpbAsset(rel) {
+function pickInstallAsset(rel) {
   if (!Array.isArray(rel.assets)) return void 0;
-  const mcpb = rel.assets.find(
-    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
-  );
-  if (mcpb?.browser_download_url) return mcpb.browser_download_url;
   const dxt = rel.assets.find(
     (a) => typeof a.name === "string" && a.name.endsWith(".dxt")
   );
-  return dxt?.browser_download_url;
+  if (dxt?.browser_download_url) return dxt.browser_download_url;
+  const mcpb = rel.assets.find(
+    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
+  );
+  return mcpb?.browser_download_url;
 }
-async function checkForUpdate(opts) {
-  if (checkInFlight) return cachedInfo;
-  checkInFlight = true;
-  try {
-    return await doCheck(opts);
-  } finally {
-    checkInFlight = false;
-  }
+function checkForUpdate(opts) {
+  if (inFlightCheck) return inFlightCheck;
+  const p = doCheck(opts).finally(() => {
+    if (inFlightCheck === p) inFlightCheck = null;
+  });
+  inFlightCheck = p;
+  return p;
 }
 async function doCheck(opts) {
   const now = opts.now ?? Date.now;
@@ -23659,11 +23661,11 @@ async function doCheck(opts) {
   const currentVersion = opts.currentVersion;
   const state = await opts.stateStore.read();
   const within = now() - state.last_check_time < CHECK_THROTTLE_MS;
-  if (!opts.force && within && state.latest_known_version && state.latest_known_mcpb_url && state.latest_known_release_url) {
+  if (!opts.force && within && state.latest_known_version && state.latest_known_install_url && state.latest_known_release_url) {
     const cached = buildInfoIfUpgrade(
       currentVersion,
       state.latest_known_version,
-      state.latest_known_mcpb_url,
+      state.latest_known_install_url,
       state.latest_known_release_url,
       state.suppressed_versions,
       state.remind_until,
@@ -23717,18 +23719,18 @@ async function doCheck(opts) {
     return null;
   }
   let latestVersion;
-  let mcpbUrl;
+  let installUrl;
   let releaseUrl;
   if (status === 200 && body) {
     const parsed = body.tag_name ? parseTagName(body.tag_name) : null;
     if (parsed) {
       latestVersion = parsed;
-      mcpbUrl = pickMcpbAsset(body);
+      installUrl = pickInstallAsset(body);
       releaseUrl = body.html_url;
     }
   } else {
     latestVersion = state.latest_known_version;
-    mcpbUrl = state.latest_known_mcpb_url;
+    installUrl = state.latest_known_install_url;
     releaseUrl = state.latest_known_release_url;
   }
   const persisted = await opts.stateStore.update((cur) => ({
@@ -23736,7 +23738,7 @@ async function doCheck(opts) {
     last_check_time: now(),
     etag: nextEtag,
     latest_known_version: latestVersion ?? cur.latest_known_version,
-    latest_known_mcpb_url: mcpbUrl ?? cur.latest_known_mcpb_url,
+    latest_known_install_url: installUrl ?? cur.latest_known_install_url,
     latest_known_release_url: releaseUrl ?? cur.latest_known_release_url
   }));
   opts.telemetry.captureUpdateCheck?.({
@@ -23746,7 +23748,7 @@ async function doCheck(opts) {
   const info = buildInfoIfUpgrade(
     currentVersion,
     persisted.latest_known_version,
-    persisted.latest_known_mcpb_url,
+    persisted.latest_known_install_url,
     persisted.latest_known_release_url,
     persisted.suppressed_versions,
     persisted.remind_until,
@@ -23755,15 +23757,15 @@ async function doCheck(opts) {
   cachedInfo = info;
   return info;
 }
-function buildInfoIfUpgrade(currentVersion, latestVersion, mcpbUrl, releaseUrl, suppressed, remindUntil, nowMs) {
-  if (!latestVersion || !mcpbUrl || !releaseUrl) return null;
+function buildInfoIfUpgrade(currentVersion, latestVersion, installUrl, releaseUrl, suppressed, remindUntil, nowMs) {
+  if (!latestVersion || !installUrl || !releaseUrl) return null;
   if (compareSemver(latestVersion, currentVersion) <= 0) return null;
   if (suppressed.includes(latestVersion)) return null;
   if (remindUntil && remindUntil > nowMs) return null;
   return {
     current_version: currentVersion,
     latest_version: latestVersion,
-    mcpb_url: mcpbUrl,
+    install_url: installUrl,
     release_url: releaseUrl
   };
 }
@@ -23792,7 +23794,7 @@ async function recordRunningVersion(currentVersion, stateStore, telemetry) {
 
 // src/update-tool.ts
 var TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1e3;
-var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ mcpb_url, release_url }` \u2014 show the user a clickable link to mcpb_url so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
+var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ install_url, release_url }` \u2014 show the user a clickable link to install_url (a `.dxt` bundle) so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
 function buildAcknowledgeUpdateTool(opts) {
   const now = opts.now ?? Date.now;
   return {
@@ -23828,7 +23830,7 @@ function buildAcknowledgeUpdateTool(opts) {
         action: { type: "string" },
         version: { type: "string" },
         message: { type: "string" },
-        mcpb_url: { type: ["string", "null"] },
+        install_url: { type: ["string", "null"] },
         release_url: { type: ["string", "null"] }
       },
       required: ["ok", "action", "version", "message"]
@@ -23862,9 +23864,9 @@ function buildAcknowledgeUpdateTool(opts) {
           ok: true,
           action,
           version,
-          mcpb_url: state.latest_known_mcpb_url ?? null,
+          install_url: state.latest_known_install_url ?? null,
           release_url: state.latest_known_release_url ?? null,
-          message: state.latest_known_mcpb_url ? "Show the user the mcpb_url as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No .mcpb URL is cached. Direct the user to the release_url to download manually."
+          message: state.latest_known_install_url ? "Show the user the install_url (a .dxt bundle) as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No installer URL is cached. Direct the user to the release_url to download manually."
         };
       }
       if (action === "remind_tomorrow") {
@@ -23967,7 +23969,7 @@ function buildStartHereParagraph(has) {
 }
 function buildUpdateAvailableParagraph(has) {
   if (!has("leadbay_acknowledge_update")) return null;
-  return "MCP auto-update: when `leadbay_account_status` returns an `update_available` field (`{ current_version, latest_version, mcpb_url, release_url }`), a newer MCP server release is published and the user has NOT suppressed it. Surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `mcpb_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .mcpb extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
+  return "MCP auto-update: an `update_available` field (`{ current_version, latest_version, install_url, release_url }`) means a newer MCP server release is published and the user has NOT suppressed it. It appears in TWO places: as a top-level field on `leadbay_account_status`, AND on `_meta.update_available` of the FIRST other tool result in a session while an update is pending (so a fresh session surfaces the proposal even without an account_status call). Whenever you see it on ANY response, surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `install_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .dxt extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
 }
 function buildRhythmParagraph(has) {
   if (has("leadbay_report_outreach")) {
@@ -24262,16 +24264,47 @@ function buildServer(client, opts = {}) {
       );
     });
   };
-  const maybeAttachUpdate = (toolName, result) => {
-    if (toolName !== "leadbay_account_status") return;
+  const UPDATE_SURFACE_WAIT_MS = 1500;
+  const maybeAttachUpdate = async (toolName, result) => {
     if (!opts.updateStateStore) return;
     if (result === null || typeof result !== "object" || Array.isArray(result)) {
       return;
     }
-    const info = getCachedUpdateInfo();
+    if (result.error === true) {
+      return;
+    }
+    let info = getCachedUpdateInfo();
+    if (!info) {
+      const inflight = getInFlightCheck();
+      if (inflight) {
+        const settled = inflight.catch((err) => {
+          opts.logger?.warn?.(
+            `update_check.surface_await_failed ${err?.message ?? err}`
+          );
+          return null;
+        });
+        info = await Promise.race([
+          settled,
+          new Promise(
+            (resolve) => setTimeout(() => resolve(null), UPDATE_SURFACE_WAIT_MS)
+          )
+        ]);
+        info = getCachedUpdateInfo() ?? info;
+      }
+    }
     if (!info) return;
-    result.update_available = info;
-    if (!promptedVersionsThisSession.has(info.latest_version)) {
+    const isAccountStatus = toolName === "leadbay_account_status";
+    const alreadyPrompted = promptedVersionsThisSession.has(info.latest_version);
+    if (!isAccountStatus && alreadyPrompted) return;
+    if (isAccountStatus) {
+      result.update_available = info;
+    } else {
+      const envelope = result;
+      const target = envelope.__markdown_envelope === true && envelope.structured !== null && typeof envelope.structured === "object" && !Array.isArray(envelope.structured) ? envelope.structured : envelope;
+      const existingMeta = target._meta && typeof target._meta === "object" && !Array.isArray(target._meta) ? target._meta : {};
+      target._meta = { ...existingMeta, update_available: info };
+    }
+    if (!alreadyPrompted) {
       promptedVersionsThisSession.add(info.latest_version);
       telemetry.captureUpdatePrompted?.({
         current_version: serverVersion,
@@ -24451,7 +24484,7 @@ function buildServer(client, opts = {}) {
         // tool reports honestly when telemetry is off.
         sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
-      maybeAttachUpdate(name, result);
+      await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
         const envText = formatErrorForLLM(result);
@@ -24590,6 +24623,7 @@ function buildServer(client, opts = {}) {
             endpoint: err._meta?.endpoint
           });
         }
+        const httpStatus2 = err._meta?.http_status;
         telemetry.captureToolCall({
           tool: name,
           ok: false,
@@ -24597,6 +24631,7 @@ function buildServer(client, opts = {}) {
           format: "error-envelope",
           bytes: errText.length,
           error_code: code,
+          ...typeof httpStatus2 === "number" ? { http_status: httpStatus2 } : {},
           triggered_by
         });
         if (COMPOSITE_FILE_TOOL_NAMES.has(name)) {
@@ -24605,7 +24640,8 @@ function buildServer(client, opts = {}) {
             last_prompt: triggered_by ?? "",
             ok: false,
             duration_ms: errDur,
-            error_code: code
+            error_code: code,
+            ...typeof httpStatus2 === "number" ? { http_status: httpStatus2 } : {}
           });
         }
         telemetry.captureException(err, buildBusinessCtx(name, err, triggered_by));
@@ -25461,8 +25497,10 @@ var UpdateStateStore = class {
     if (typeof r.latest_known_version === "string") {
       out.latest_known_version = r.latest_known_version;
     }
-    if (typeof r.latest_known_mcpb_url === "string") {
-      out.latest_known_mcpb_url = r.latest_known_mcpb_url;
+    if (typeof r.latest_known_install_url === "string") {
+      out.latest_known_install_url = r.latest_known_install_url;
+    } else if (typeof r.latest_known_mcpb_url === "string") {
+      out.latest_known_install_url = r.latest_known_mcpb_url;
     }
     if (typeof r.latest_known_release_url === "string") {
       out.latest_known_release_url = r.latest_known_release_url;
@@ -25890,7 +25928,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.19.3";
+var VERSION = "0.20.1";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 

package/dist/http-server.js

@@ -180,7 +180,7 @@ Contact enrichment is offered in the NEXT STEPS widget below \u2014 do NOT emit
 
 **REQUIRED OPTIONS \u2014 triggers and position rules:**
 - **Recurring language** ("every day", "every morning", "I do this every", "remind me", "automate this", "recurring"): add "Schedule 'Daily prospecting check-in' as a recurring task" and place it **first**.
-- **\u22655 leads returned**: add "Build an interactive lead triage board for this batch" and place it **first** (or second if the scheduling offer above also applies).
+- **\u22655 leads returned**: add "Build an interactive lead triage board for this batch" and place it **first** (or second if the scheduling offer above also applies). This holds **even when the batch is a poor fit** (e.g. every lead AI-scored as off-ICP / a vertical mismatch): the triage board is still the first artifact option because the user asked to see and act on *this batch*. When the batch is a mismatch, ALSO offer "Refine the audience / lens so future batches fit better" \u2014 but as a *later* option, never displacing the triage board from first. Leading with audience-refinement instead of the artifact is a contract violation: surface the mismatch in your prose nudge, not by demoting the triage board.
 
 ## NEXT STEPS \u2014 after rendering the pull_leads table
 
@@ -221,7 +221,7 @@ Pick 2\u20133 items below based on what was actually observed in the response. T
 If nothing in the menu applies cleanly, suggest only "pull next page" and "research a specific lead in depth" \u2014 never invent a tool that doesn't exist.
 
 
-**Final ordering check (do this before rendering):** Recurring offer \u2192 option 1; triage board \u2192 option 1 (or 2 if scheduling is also required). Swap if needed.
+**Final ordering check (do this before rendering):** Recurring offer \u2192 option 1; triage board \u2192 option 1 (or 2 if scheduling is also required). A poor-fit / mismatched batch does NOT change this \u2014 triage board stays first, refine-audience goes later in the list. Swap if needed.
 
 # GATE \u2014 STOP
 
@@ -16779,16 +16779,16 @@ var accountStatus = {
         properties: {
           current_version: { type: "string" },
           latest_version: { type: "string" },
-          mcpb_url: {
+          install_url: {
             type: "string",
-            description: "Direct download URL for the .mcpb installer asset."
+            description: "Direct download URL for the installer asset (.dxt, falling back to .mcpb)."
           },
           release_url: {
             type: "string",
             description: "GitHub release page (changelog)."
           }
         },
-        required: ["current_version", "latest_version", "mcpb_url", "release_url"]
+        required: ["current_version", "latest_version", "install_url", "release_url"]
       }
     },
     required: ["user", "organization"]
@@ -21262,10 +21262,13 @@ var NOOP_TELEMETRY = {
 
 // src/update-check.ts
 var cachedInfo = null;
-var checkInFlight = false;
+var inFlightCheck = null;
 function getCachedUpdateInfo() {
   return cachedInfo;
 }
+function getInFlightCheck() {
+  return inFlightCheck;
+}
 var RELEASES_LATEST_URL = "https://api.github.com/repos/leadbay/leadclaw/releases/latest";
 var CHECK_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
@@ -21310,25 +21313,24 @@ function compareSemver(a, b) {
   }
   return 0;
 }
-function pickMcpbAsset(rel) {
+function pickInstallAsset(rel) {
   if (!Array.isArray(rel.assets)) return void 0;
-  const mcpb = rel.assets.find(
-    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
-  );
-  if (mcpb?.browser_download_url) return mcpb.browser_download_url;
   const dxt = rel.assets.find(
     (a) => typeof a.name === "string" && a.name.endsWith(".dxt")
   );
-  return dxt?.browser_download_url;
+  if (dxt?.browser_download_url) return dxt.browser_download_url;
+  const mcpb = rel.assets.find(
+    (a) => typeof a.name === "string" && a.name.endsWith(".mcpb")
+  );
+  return mcpb?.browser_download_url;
 }
-async function checkForUpdate(opts) {
-  if (checkInFlight) return cachedInfo;
-  checkInFlight = true;
-  try {
-    return await doCheck(opts);
-  } finally {
-    checkInFlight = false;
-  }
+function checkForUpdate(opts) {
+  if (inFlightCheck) return inFlightCheck;
+  const p = doCheck(opts).finally(() => {
+    if (inFlightCheck === p) inFlightCheck = null;
+  });
+  inFlightCheck = p;
+  return p;
 }
 async function doCheck(opts) {
   const now = opts.now ?? Date.now;
@@ -21337,11 +21339,11 @@ async function doCheck(opts) {
   const currentVersion = opts.currentVersion;
   const state = await opts.stateStore.read();
   const within = now() - state.last_check_time < CHECK_THROTTLE_MS;
-  if (!opts.force && within && state.latest_known_version && state.latest_known_mcpb_url && state.latest_known_release_url) {
+  if (!opts.force && within && state.latest_known_version && state.latest_known_install_url && state.latest_known_release_url) {
     const cached = buildInfoIfUpgrade(
       currentVersion,
       state.latest_known_version,
-      state.latest_known_mcpb_url,
+      state.latest_known_install_url,
       state.latest_known_release_url,
       state.suppressed_versions,
       state.remind_until,
@@ -21395,18 +21397,18 @@ async function doCheck(opts) {
     return null;
   }
   let latestVersion;
-  let mcpbUrl;
+  let installUrl;
   let releaseUrl;
   if (status === 200 && body) {
     const parsed = body.tag_name ? parseTagName(body.tag_name) : null;
     if (parsed) {
       latestVersion = parsed;
-      mcpbUrl = pickMcpbAsset(body);
+      installUrl = pickInstallAsset(body);
       releaseUrl = body.html_url;
     }
   } else {
     latestVersion = state.latest_known_version;
-    mcpbUrl = state.latest_known_mcpb_url;
+    installUrl = state.latest_known_install_url;
     releaseUrl = state.latest_known_release_url;
   }
   const persisted = await opts.stateStore.update((cur) => ({
@@ -21414,7 +21416,7 @@ async function doCheck(opts) {
     last_check_time: now(),
     etag: nextEtag,
     latest_known_version: latestVersion ?? cur.latest_known_version,
-    latest_known_mcpb_url: mcpbUrl ?? cur.latest_known_mcpb_url,
+    latest_known_install_url: installUrl ?? cur.latest_known_install_url,
     latest_known_release_url: releaseUrl ?? cur.latest_known_release_url
   }));
   opts.telemetry.captureUpdateCheck?.({
@@ -21424,7 +21426,7 @@ async function doCheck(opts) {
   const info = buildInfoIfUpgrade(
     currentVersion,
     persisted.latest_known_version,
-    persisted.latest_known_mcpb_url,
+    persisted.latest_known_install_url,
     persisted.latest_known_release_url,
     persisted.suppressed_versions,
     persisted.remind_until,
@@ -21433,22 +21435,22 @@ async function doCheck(opts) {
   cachedInfo = info;
   return info;
 }
-function buildInfoIfUpgrade(currentVersion, latestVersion, mcpbUrl, releaseUrl, suppressed, remindUntil, nowMs) {
-  if (!latestVersion || !mcpbUrl || !releaseUrl) return null;
+function buildInfoIfUpgrade(currentVersion, latestVersion, installUrl, releaseUrl, suppressed, remindUntil, nowMs) {
+  if (!latestVersion || !installUrl || !releaseUrl) return null;
   if (compareSemver(latestVersion, currentVersion) <= 0) return null;
   if (suppressed.includes(latestVersion)) return null;
   if (remindUntil && remindUntil > nowMs) return null;
   return {
     current_version: currentVersion,
     latest_version: latestVersion,
-    mcpb_url: mcpbUrl,
+    install_url: installUrl,
     release_url: releaseUrl
   };
 }
 
 // src/update-tool.ts
 var TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1e3;
-var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ mcpb_url, release_url }` \u2014 show the user a clickable link to mcpb_url so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
+var DESCRIPTION = "Record the user's choice on an update prompt surfaced via `update_available` on leadbay_account_status. Pass `action: 'install' | 'remind_tomorrow' | 'skip'` and `version` (the `latest_version` from the prompt). On 'install', the server returns `{ install_url, release_url }` \u2014 show the user a clickable link to install_url (a `.dxt` bundle) so Claude Desktop's native installer opens it. On 'remind_tomorrow' the server suppresses the prompt for 24 hours. On 'skip' the version is suppressed permanently. Call this tool EXACTLY ONCE per prompt \u2014 do not loop, and do not call it speculatively when no update_available block is present.";
 function buildAcknowledgeUpdateTool(opts) {
   const now = opts.now ?? Date.now;
   return {
@@ -21484,7 +21486,7 @@ function buildAcknowledgeUpdateTool(opts) {
         action: { type: "string" },
         version: { type: "string" },
         message: { type: "string" },
-        mcpb_url: { type: ["string", "null"] },
+        install_url: { type: ["string", "null"] },
         release_url: { type: ["string", "null"] }
       },
       required: ["ok", "action", "version", "message"]
@@ -21518,9 +21520,9 @@ function buildAcknowledgeUpdateTool(opts) {
           ok: true,
           action,
           version,
-          mcpb_url: state.latest_known_mcpb_url ?? null,
+          install_url: state.latest_known_install_url ?? null,
           release_url: state.latest_known_release_url ?? null,
-          message: state.latest_known_mcpb_url ? "Show the user the mcpb_url as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No .mcpb URL is cached. Direct the user to the release_url to download manually."
+          message: state.latest_known_install_url ? "Show the user the install_url (a .dxt bundle) as a clickable link \u2014 opening it in Claude Desktop runs the native installer." : "No installer URL is cached. Direct the user to the release_url to download manually."
         };
       }
       if (action === "remind_tomorrow") {
@@ -21623,7 +21625,7 @@ function buildStartHereParagraph(has) {
 }
 function buildUpdateAvailableParagraph(has) {
   if (!has("leadbay_acknowledge_update")) return null;
-  return "MCP auto-update: when `leadbay_account_status` returns an `update_available` field (`{ current_version, latest_version, mcpb_url, release_url }`), a newer MCP server release is published and the user has NOT suppressed it. Surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `mcpb_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .mcpb extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
+  return "MCP auto-update: an `update_available` field (`{ current_version, latest_version, install_url, release_url }`) means a newer MCP server release is published and the user has NOT suppressed it. It appears in TWO places: as a top-level field on `leadbay_account_status`, AND on `_meta.update_available` of the FIRST other tool result in a session while an update is pending (so a fresh session surfaces the proposal even without an account_status call). Whenever you see it on ANY response, surface a prompt via `ask_user_input_v0` with EXACTLY these three options: \"Install now\", \"Remind me tomorrow\", \"Skip this version\". Map the user's choice to `leadbay_acknowledge_update({ action: 'install' | 'remind_tomorrow' | 'skip', version: latest_version })`. On 'install', the tool returns `install_url` \u2014 render it as a clickable markdown link the user can open in Claude Desktop (the .dxt extension triggers the native installer). The user does NOT need to restart anything before clicking \u2014 the new server takes effect on the next MCP session. Prompt the user ONCE per session per version \u2014 don't re-prompt within the same chat after they've acknowledged.";
 }
 function buildRhythmParagraph(has) {
   if (has("leadbay_report_outreach")) {
@@ -21918,16 +21920,47 @@ function buildServer(client, opts = {}) {
       );
     });
   };
-  const maybeAttachUpdate = (toolName, result) => {
-    if (toolName !== "leadbay_account_status") return;
+  const UPDATE_SURFACE_WAIT_MS = 1500;
+  const maybeAttachUpdate = async (toolName, result) => {
     if (!opts.updateStateStore) return;
     if (result === null || typeof result !== "object" || Array.isArray(result)) {
       return;
     }
-    const info = getCachedUpdateInfo();
+    if (result.error === true) {
+      return;
+    }
+    let info = getCachedUpdateInfo();
+    if (!info) {
+      const inflight = getInFlightCheck();
+      if (inflight) {
+        const settled = inflight.catch((err) => {
+          opts.logger?.warn?.(
+            `update_check.surface_await_failed ${err?.message ?? err}`
+          );
+          return null;
+        });
+        info = await Promise.race([
+          settled,
+          new Promise(
+            (resolve) => setTimeout(() => resolve(null), UPDATE_SURFACE_WAIT_MS)
+          )
+        ]);
+        info = getCachedUpdateInfo() ?? info;
+      }
+    }
     if (!info) return;
-    result.update_available = info;
-    if (!promptedVersionsThisSession.has(info.latest_version)) {
+    const isAccountStatus = toolName === "leadbay_account_status";
+    const alreadyPrompted = promptedVersionsThisSession.has(info.latest_version);
+    if (!isAccountStatus && alreadyPrompted) return;
+    if (isAccountStatus) {
+      result.update_available = info;
+    } else {
+      const envelope = result;
+      const target = envelope.__markdown_envelope === true && envelope.structured !== null && typeof envelope.structured === "object" && !Array.isArray(envelope.structured) ? envelope.structured : envelope;
+      const existingMeta = target._meta && typeof target._meta === "object" && !Array.isArray(target._meta) ? target._meta : {};
+      target._meta = { ...existingMeta, update_available: info };
+    }
+    if (!alreadyPrompted) {
       promptedVersionsThisSession.add(info.latest_version);
       telemetry.captureUpdatePrompted?.({
         current_version: serverVersion,
@@ -22107,7 +22140,7 @@ function buildServer(client, opts = {}) {
         // tool reports honestly when telemetry is off.
         sendFeedback: (message, fbOpts) => telemetry.captureFeedback(message, fbOpts)
       });
-      maybeAttachUpdate(name, result);
+      await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
         const envText = formatErrorForLLM(result);
@@ -22246,6 +22279,7 @@ function buildServer(client, opts = {}) {
             endpoint: err._meta?.endpoint
           });
         }
+        const httpStatus2 = err._meta?.http_status;
         telemetry.captureToolCall({
           tool: name,
           ok: false,
@@ -22253,6 +22287,7 @@ function buildServer(client, opts = {}) {
           format: "error-envelope",
           bytes: errText.length,
           error_code: code,
+          ...typeof httpStatus2 === "number" ? { http_status: httpStatus2 } : {},
           triggered_by
         });
         if (COMPOSITE_FILE_TOOL_NAMES.has(name)) {
@@ -22261,7 +22296,8 @@ function buildServer(client, opts = {}) {
             last_prompt: triggered_by ?? "",
             ok: false,
             duration_ms: errDur,
-            error_code: code
+            error_code: code,
+            ...typeof httpStatus2 === "number" ? { http_status: httpStatus2 } : {}
           });
         }
         telemetry.captureException(err, buildBusinessCtx(name, err, triggered_by));
@@ -22403,7 +22439,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.19.3" : "0.0.0-dev";
+var VERSION = true ? "0.20.1" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var sseSessions = /* @__PURE__ */ new Map();

package/dist/installer-electron.js

@@ -1466,7 +1466,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = "0.19.3";
+    VERSION = "0.20.1";
     PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
     sessions = /* @__PURE__ */ new Map();
     OAUTH_BASE_URLS = {

package/dist/installer-gui.js

@@ -873,7 +873,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = "0.19.3";
+var VERSION = "0.20.1";
 var PORT = Number(process.env.LEADBAY_INSTALLER_PORT ?? 0);
 var sessions = /* @__PURE__ */ new Map();
 var OAUTH_BASE_URLS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.19.3",
+  "version": "0.20.1",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",