@leadbay/mcp 0.23.7 → 0.23.9

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog — @leadbay/mcp
 
+## 0.23.9 — 2026-06-27
+
+MCP data plane now targets backend **/1.6** (was /1.5).
+
+- **`client`** — every request path is built from a single `API_VERSION = "1.6"` constant (exported as `API_PREFIX`). `LeadbayClient` (request / requestVoid / requestRawBinary + mock-mode paths) and `bin.ts`'s login probe all reference it, so future backend version bumps are a one-line change. Verified live on `api-us` before shipping: `/1.6` mirrors `/1.5` across the full route surface probed (monitor, lenses, auth/login, kpi, geo) — identical status on every call. Tool-description prose and route-doc comments updated to /1.6 to match.
+
+## 0.23.8 — 2026-06-26
+
+Installer no longer hangs in Claude Cowork / headless terminals (product#3805).
+
+- **`installer`** — the guided installer awaited a detached browser-opener that resolved only on the child's `close` event, which a detached process often never emits; with no overall timeout the process dangled until the host (Claude Cowork) killed it ("running… then timeout", intermittently). It now reuses the hardened `openInBrowser` (resolves on `spawn`, not `close`), no longer blocks GUI startup on the browser open, and bounds the run with a watchdog that exits cleanly with hosted-MCP instructions instead of hanging. The installer always tries to open the browser — it never guesses "headless" and refuses to start.
+- **Docs** — README documents adding Leadbay on **Claude web / Cowork web** as a custom Connector (`Customize → Connectors → Add custom connector`, URL `https://leadbay-mcp-prod.fly.dev/mcp`; OAuth runs in-app), and the `claude mcp add --transport http` equivalent. Stale `@0.16` install snippets corrected to `@latest`.
+
 ## 0.23.7 — 2026-06-25
 
 Field-sales tour always renders the map (product#3779).

package/README.md

@@ -59,6 +59,28 @@ On Linux, use the terminal-only path instead (no desktop installer window):
 npx -y @leadbay/mcp@latest install --oauth
 ```
 
+### Claude web / Cowork on the web (no terminal)
+
+On the web there's no terminal, so `npx … installer` doesn't apply — add
+Leadbay as a **custom Connector** instead. Claude connects to the hosted MCP
+from Anthropic's cloud and runs the OAuth sign-in in-app (no localhost
+callback, no client id/secret to fill in):
+
+1. **Customize → Connectors → "+" → Add custom connector**
+2. **Name:** `Leadbay`  ·  **URL:** `https://leadbay-mcp-prod.fly.dev/mcp`
+3. **Add**, then complete the Leadbay sign-in prompt.
+
+The same hosted URL works from a terminal that has the Claude Code CLI:
+
+```bash
+claude mcp add --transport http leadbay https://leadbay-mcp-prod.fly.dev/mcp
+```
+
+In **Claude Cowork with a terminal**, the guided `installer` works as usual —
+it opens your browser for sign-in and configures the detected clients. If the
+browser never opens, the installer no longer hangs: it exits after a short
+watchdog with the Connector / `claude mcp add` instructions above.
+
 From a repo checkout, run the same native installer with:
 
 ```bash
@@ -139,7 +161,7 @@ You can verify the skills installed by running `/skill list` after install. To u
 
 ### Claude Desktop
 
-The guided installer writes the local `mcpServers.leadbay` entry in `claude_desktop_config.json` with `npx -y @leadbay/mcp@0.16`, like the Linux flow. Restart Claude Desktop after install.
+The guided installer writes the local `mcpServers.leadbay` entry in `claude_desktop_config.json` with `npx -y @leadbay/mcp@latest`, like the Linux flow. Restart Claude Desktop after install.
 
 The `.dxt` / `.mcpb` bundle from [Releases](https://github.com/leadbay/leadclaw/releases/latest) remains available as an alternative install path.
 
@@ -147,14 +169,14 @@ The `.dxt` / `.mcpb` bundle from [Releases](https://github.com/leadbay/leadclaw/
 
 If you installed Node from the official [nodejs.org](https://nodejs.org) `.pkg`, `/usr/local/lib/node_modules` is root-owned. Any of these works:
 
-- **Use `npx` (recommended, no global install):** all examples above use `npx -y @leadbay/mcp@0.16 ...` — no global install needed.
+- **Use `npx` (recommended, no global install):** all examples above use `npx -y @leadbay/mcp@latest ...` — no global install needed.
 - **`sudo npm install -g @leadbay/mcp`** (enter your macOS password).
 - **Use a Node version manager** — [nvm](https://github.com/nvm-sh/nvm), [volta](https://volta.sh), [fnm](https://github.com/Schniz/fnm). They install Node under your home directory, so `npm install -g` works without sudo.
 
 ### If you'd rather authenticate without auto-install
 
 ```bash
-npx -y @leadbay/mcp@0.16 login --oauth
+npx -y @leadbay/mcp@latest login --oauth
 ```
 
 Default writes a `0600`-mode JSON file at the platform-correct credentials path (`$XDG_CONFIG_HOME/leadbay/credentials.json` on Linux, `~/Library/Application Support/leadbay/credentials.json` on macOS, `%APPDATA%\leadbay\credentials.json` on Windows). Pass `--write-config /some/path.json` to override the path. Pass `--force` to overwrite an existing file from a different account. The legacy email/password path still exists for scripts that cannot use a browser.
@@ -220,7 +242,7 @@ That is convenient for quick tests, but less safe for production because the dep
 ## 3. Quickstart
 
 Prefer the installer in [§1](#1-install). If you need to hand-write config,
-first authenticate with `npx -y @leadbay/mcp@0.16 login --oauth`, then copy the
+first authenticate with `npx -y @leadbay/mcp@latest login --oauth`, then copy the
 `LEADBAY_TOKEN` and `LEADBAY_REGION` values from the credentials file it writes.
 
 ### Claude Desktop
@@ -232,7 +254,7 @@ Edit `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) o
   "mcpServers": {
     "leadbay": {
       "command": "npx",
-      "args": ["-y", "@leadbay/mcp@0.16"],
+      "args": ["-y", "@leadbay/mcp@latest"],
       "env": {
         "LEADBAY_TOKEN": "<paste-oauth-token>",
         "LEADBAY_REGION": "us"
@@ -253,7 +275,7 @@ In Cursor settings, add the MCP server:
   "mcp.servers": {
     "leadbay": {
       "command": "npx",
-      "args": ["-y", "@leadbay/mcp@0.16"],
+      "args": ["-y", "@leadbay/mcp@latest"],
       "env": { "LEADBAY_TOKEN": "<paste-oauth-token>", "LEADBAY_REGION": "us" }
     }
   }
@@ -266,7 +288,7 @@ In Cursor settings, add the MCP server:
 claude mcp add leadbay --scope user \
   --env LEADBAY_TOKEN=<paste-oauth-token> \
   --env LEADBAY_REGION=us \
-  -- npx -y @leadbay/mcp@0.16
+  -- npx -y @leadbay/mcp@latest
 ```
 
 > **`--scope user`** registers Leadbay globally for your account (visible from any project). Without it, `claude mcp add` defaults to project-local scope and the server only appears in conversations opened from the directory where you ran the command.
@@ -278,7 +300,7 @@ claude mcp add leadbay --scope user \
 Before starting Claude, run:
 
 ```bash
-LEADBAY_TOKEN=<paste-oauth-token> npx -y @leadbay/mcp@0.16 doctor
+LEADBAY_TOKEN=<paste-oauth-token> npx -y @leadbay/mcp@latest doctor
 ```
 
 Expected output:
@@ -524,14 +546,14 @@ The user's literal text replaces `verification.ref` in the outreach record, and
 | `No enrichment credits remaining` | Out of quota | Contact Leadbay support to extend quota |
 | Claude Desktop "loading forever" on first use | `npx` cold-start fetching the package | First run takes ~10s. Prefer `npm install -g @leadbay/mcp` for faster startup. |
 | Claude Desktop doesn't show Leadbay tools | Server crashed at startup | Check `~/Library/Logs/Claude/mcp*.log` (macOS) or `%APPDATA%\Claude\logs\mcp*.log` (Windows). |
-| Claude Code can't find Leadbay in a new conversation | MCP server installed at project scope (default before 0.3.0) | Re-run with `--scope user`: `claude mcp remove leadbay && claude mcp add leadbay --scope user --env LEADBAY_TOKEN=… --env LEADBAY_REGION=us -- npx -y @leadbay/mcp@0.16` |
+| Claude Code can't find Leadbay in a new conversation | MCP server installed at project scope (default before 0.3.0) | Re-run with `--scope user`: `claude mcp remove leadbay && claude mcp add leadbay --scope user --env LEADBAY_TOKEN=… --env LEADBAY_REGION=us -- npx -y @leadbay/mcp@latest` |
 | Agent reports "tool not found" for `refine_prompt` / `adjust_audience` etc. | Pre-0.3.0 install with `LEADBAY_MCP_WRITE` unset (writes were off) | Either re-run `npx @leadbay/mcp install` or remove `LEADBAY_MCP_WRITE=0` from your client config (writes are on by default in 0.3.0+) |
 
 ## 7. Upgrade & rotation
 
-**Upgrade**: change the pinned minor in your config, e.g. `"@leadbay/mcp@0.2"` → `"@leadbay/mcp@0.16"`, then restart the client. **0.3.0 enables composite write tools by default** — see [MIGRATION.md](./MIGRATION.md). See also the [changelog](https://github.com/leadbay/leadclaw/releases).
+**Upgrade**: the guided installer pins `@leadbay/mcp@latest`, so each MCP session already picks up the newest published version — just restart the client. (If you hand-pinned a specific version in your config, change it to `@latest` or the version you want, then restart.) **0.3.0 enables composite write tools by default** — see [MIGRATION.md](./MIGRATION.md). See also the [changelog](https://github.com/leadbay/leadclaw/releases).
 
-**Rotate local credential**: re-run `npx -y @leadbay/mcp@0.16 install --oauth` (or `login --oauth`) — the new credential replaces the old one in your MCP client config.
+**Rotate local credential**: re-run `npx -y @leadbay/mcp@latest install --oauth` (or `login --oauth`) — the new credential replaces the old one in your MCP client config.
 
 ## 8. Advanced
 
@@ -684,7 +706,7 @@ After your first authenticated call, your PostHog `distinctId` is set to your Le
   "mcpServers": {
     "leadbay": {
       "command": "npx",
-      "args": ["-y", "@leadbay/mcp@0.16"],
+      "args": ["-y", "@leadbay/mcp@latest"],
       "env": {
         "LEADBAY_TOKEN": "u.…",
         "LEADBAY_REGION": "us",

package/dist/bin.js

@@ -68,7 +68,7 @@ async function resolveRegion(email, password, startWith = "us") {
     const baseUrl = REGIONS[region];
     const body = JSON.stringify({ email, password });
     try {
-      const res = await httpsRequest("POST", `${baseUrl}/1.5/auth/login`, { "Content-Type": "application/json" }, body);
+      const res = await httpsRequest("POST", `${baseUrl}${API_PREFIX}/auth/login`, { "Content-Type": "application/json" }, body);
       if (res.status === 200) {
         const parsed = JSON.parse(res.body);
         if (parsed?.token) {
@@ -159,7 +159,7 @@ function parseRetryAfter(value) {
   }
   return null;
 }
-var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, REGIONS, _mockFixtures, _mockJournal, LeadbayClient;
+var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
 var init_client = __esm({
   "../core/dist/client.js"() {
     "use strict";
@@ -171,6 +171,8 @@ var init_client = __esm({
       us: "https://api-us.leadbay.app",
       fr: "https://api-fr.leadbay.app"
     };
+    API_VERSION = "1.6";
+    API_PREFIX = `/${API_VERSION}`;
     _mockFixtures = null;
     _mockJournal = [];
     LeadbayClient = class {
@@ -313,7 +315,7 @@ var init_client = __esm({
         const retryOn401 = opts?.retryOn401 !== false;
         await this.acquireSemaphore();
         try {
-          const url = `${this._baseUrl}/1.5${path}`;
+          const url = `${this._baseUrl}${API_PREFIX}${path}`;
           const headers = {
             Authorization: `Bearer ${this.token}`
           };
@@ -348,7 +350,7 @@ var init_client = __esm({
         }
         await this.acquireSemaphore();
         try {
-          const url = `${this._baseUrl}/1.5${path}`;
+          const url = `${this._baseUrl}${API_PREFIX}${path}`;
           const headers = {
             Authorization: `Bearer ${this.token}`
           };
@@ -373,7 +375,7 @@ var init_client = __esm({
       // serialized body (string for text payloads such as CSV; Buffer for binary
       // uploads). Auth, semaphore, error mapping, _lastMeta, and mock-mode all
       // mirror request() exactly. Used by leadbay_import_leads to upload CSVs to
-      // the wizard at POST /1.5/imports.
+      // the wizard at POST /1.6/imports.
       async requestRawBinary(method, path, contentType, body) {
         if (process.env.LEADBAY_MOCK === "1") {
           return this.mockRequestBinary(method, path, contentType, body);
@@ -383,7 +385,7 @@ var init_client = __esm({
         }
         await this.acquireSemaphore();
         try {
-          const url = `${this._baseUrl}/1.5${path}`;
+          const url = `${this._baseUrl}${API_PREFIX}${path}`;
           const headers = {
             Authorization: `Bearer ${this.token}`,
             "Content-Type": contentType
@@ -407,7 +409,7 @@ var init_client = __esm({
         }
       }
       mockRequest(method, path, body) {
-        const fullPath = `/1.5${path}`;
+        const fullPath = `${API_PREFIX}${path}`;
         this._lastMeta = {
           region: this._region,
           endpoint: `${method} ${path}`,
@@ -430,7 +432,7 @@ var init_client = __esm({
         };
       }
       mockRequestBinary(method, path, contentType, body) {
-        const fullPath = `/1.5${path}`;
+        const fullPath = `${API_PREFIX}${path}`;
         this._lastMeta = {
           region: this._region,
           endpoint: `${method} ${path}`,
@@ -5695,7 +5697,7 @@ WHEN TO USE: at the start of a session to know what the agent can/can't do, afte
 
 WHEN NOT TO USE: as a pre-flight gate before bulk ops \u2014 operations themselves return 429; this tool is for context, not gating. And: a recent quota snapshot showing "exhausted" is NOT a reason to refuse a write call when the user has just topped up \u2014 re-call this tool first, then proceed.
 `;
-    leadbay_acknowledge_notification = `Acknowledge a Leadbay notification \u2014 i.e. tell the MCP and the backend "I've seen this and acted on it." Wraps \`POST /1.5/notifications/{id}/seen\` (default) or \`/archive\` (when \`archive:true\`) and drops the entry from the local inbox so subsequent \`_meta.notifications\` payloads stop carrying it.
+    leadbay_acknowledge_notification = `Acknowledge a Leadbay notification \u2014 i.e. tell the MCP and the backend "I've seen this and acted on it." Wraps \`POST /1.6/notifications/{id}/seen\` (default) or \`/archive\` (when \`archive:true\`) and drops the entry from the local inbox so subsequent \`_meta.notifications\` payloads stop carrying it.
 
 **When to call.** After you read an entry from \`_meta.notifications\` or \`account_status.notifications\` and have revised whatever prior output the just-finished background work might have made stale (outreach drafts, lead lists, "available leads" claims, followup plans). Mark-seen tells the human team's pipeline you handled this and prevents the notification from re-surfacing on every subsequent tool response.
 
@@ -6305,7 +6307,7 @@ WHEN NOT TO USE: from agent flow \u2014 leadbay_adjust_audience handles the draf
 
 This tool MUTATES state. The caller (agent or human-in-the-loop) is responsible for confirming intent before invocation; the MCP server does not soft-prompt for confirmation. See \`annotations.destructiveHint\`.
 `;
-    leadbay_create_topup_link = `Generate a one-shot Stripe checkout session for an AI-credits top-up. Wraps \`POST /1.5/stripe/topup_checkout\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL (~1 hour TTL); creating one does NOT charge the user \u2014 payment happens only after the user opens the URL and completes checkout in their browser.
+    leadbay_create_topup_link = `Generate a one-shot Stripe checkout session for an AI-credits top-up. Wraps \`POST /1.6/stripe/topup_checkout\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL (~1 hour TTL); creating one does NOT charge the user \u2014 payment happens only after the user opens the URL and completes checkout in their browser.
 
 **When a quota window is hit, offer top-up as the FIRST option.** A top-up clears the throttle immediately (no need to wait for the daily/weekly/monthly window reset). The flow:
 
@@ -7489,7 +7491,7 @@ follow-ups. On \`ambiguous_sectors\`, the only move is to pick a sector and re-c
 If nothing fits, default to "switch to the new lens and pull leads" \u2014 never
 invent a tool that doesn't exist.
 `;
-    leadbay_open_billing_portal = `Generate a one-shot Stripe customer-portal URL. Wraps \`GET /1.5/stripe/portal\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL the user can open to manage their existing Leadbay subscription: change plan tier, swap payment method, view invoices. The agent does NOT make subscription changes itself \u2014 it surfaces the URL and lets the user act.
+    leadbay_open_billing_portal = `Generate a one-shot Stripe customer-portal URL. Wraps \`GET /1.6/stripe/portal\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL the user can open to manage their existing Leadbay subscription: change plan tier, swap payment method, view invoices. The agent does NOT make subscription changes itself \u2014 it surfaces the URL and lets the user act.
 
 Sibling of \`leadbay_create_topup_link\`. Use cases differ:
 
@@ -7767,7 +7769,7 @@ table. Detail + status priority below.
 
 Pull KNOWN leads from the user's Monitor view \u2014 the re-engagement entry point. Use when the user asks "what should I follow up on", "leads I haven't contacted", "leads in [city]", "before my trip", or any phrasing implying pre-existing pipeline context. For NEW leads from Discover, use \`leadbay_pull_leads\`.
 
-Backend: wraps \`GET /1.5/monitor?personal=&liked=&filtered=&count=&page=\` plus, when \`set_filter\` is supplied, a preceding \`POST /1.5/monitor/filter\`. The Monitor filter is a single \`FilterItem\` per user \u2014 refreshing restores it.
+Backend: wraps \`GET /1.6/monitor?personal=&liked=&filtered=&count=&page=\` plus, when \`set_filter\` is supplied, a preceding \`POST /1.6/monitor/filter\`. The Monitor filter is a single \`FilterItem\` per user \u2014 refreshing restores it.
 
 **Filter mechanism \u2014 store-then-apply.** Pass \`set_filter: { criteria: FilterCriterion[] }\` to overwrite the server-stored filter, then the composite re-fetches with \`filtered:true\`. \`FilterCriterion\` is the backend's \`anyOf\` over 10 typed criteria: \`size\`, \`keywords\`, \`sector_ids\`, \`location_ids\`, \`custom_field\`(\`_comparison\`), \`yc\`, \`liked\`, \`last_action\` (MonitorActionType enum), \`last_action_date\` (with \`last_days\`).
 
@@ -22669,6 +22671,8 @@ var init_artifact_kit = __esm({
 // ../core/dist/index.js
 var dist_exports = {};
 __export(dist_exports, {
+  API_PREFIX: () => API_PREFIX,
+  API_VERSION: () => API_VERSION,
   AgentMemoryCaptureInputSchema: () => AgentMemoryCaptureInputSchema,
   AgentMemoryEntrySchema: () => AgentMemoryEntrySchema,
   AgentMemoryInjectionError: () => AgentMemoryInjectionError,
@@ -27717,7 +27721,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.23.7";
+var VERSION = "0.23.9";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 
@@ -28518,7 +28522,7 @@ async function loginAt(baseUrl, email, password) {
   const https2 = await import("https");
   return await new Promise((resolve, reject) => {
     const body = JSON.stringify({ email, password });
-    const u = new URL(baseUrl + "/1.5/auth/login");
+    const u = new URL(baseUrl + `${API_PREFIX}/auth/login`);
     const r = https2.request(
       {
         hostname: u.hostname,

package/dist/http-server.js

@@ -1592,6 +1592,8 @@ var REGIONS = {
   us: "https://api-us.leadbay.app",
   fr: "https://api-fr.leadbay.app"
 };
+var API_VERSION = "1.6";
+var API_PREFIX = `/${API_VERSION}`;
 function httpsRequest(method, url, headers, body) {
   return new Promise((resolve, reject) => {
     const start = Date.now();
@@ -1647,7 +1649,7 @@ async function resolveRegion(email, password, startWith = "us") {
     const baseUrl = REGIONS[region];
     const body = JSON.stringify({ email, password });
     try {
-      const res = await httpsRequest("POST", `${baseUrl}/1.5/auth/login`, { "Content-Type": "application/json" }, body);
+      const res = await httpsRequest("POST", `${baseUrl}${API_PREFIX}/auth/login`, { "Content-Type": "application/json" }, body);
       if (res.status === 200) {
         const parsed = JSON.parse(res.body);
         if (parsed?.token) {
@@ -1861,7 +1863,7 @@ var LeadbayClient = class {
     const retryOn401 = opts?.retryOn401 !== false;
     await this.acquireSemaphore();
     try {
-      const url = `${this._baseUrl}/1.5${path}`;
+      const url = `${this._baseUrl}${API_PREFIX}${path}`;
       const headers = {
         Authorization: `Bearer ${this.token}`
       };
@@ -1896,7 +1898,7 @@ var LeadbayClient = class {
     }
     await this.acquireSemaphore();
     try {
-      const url = `${this._baseUrl}/1.5${path}`;
+      const url = `${this._baseUrl}${API_PREFIX}${path}`;
       const headers = {
         Authorization: `Bearer ${this.token}`
       };
@@ -1921,7 +1923,7 @@ var LeadbayClient = class {
   // serialized body (string for text payloads such as CSV; Buffer for binary
   // uploads). Auth, semaphore, error mapping, _lastMeta, and mock-mode all
   // mirror request() exactly. Used by leadbay_import_leads to upload CSVs to
-  // the wizard at POST /1.5/imports.
+  // the wizard at POST /1.6/imports.
   async requestRawBinary(method, path, contentType, body) {
     if (process.env.LEADBAY_MOCK === "1") {
       return this.mockRequestBinary(method, path, contentType, body);
@@ -1931,7 +1933,7 @@ var LeadbayClient = class {
     }
     await this.acquireSemaphore();
     try {
-      const url = `${this._baseUrl}/1.5${path}`;
+      const url = `${this._baseUrl}${API_PREFIX}${path}`;
       const headers = {
         Authorization: `Bearer ${this.token}`,
         "Content-Type": contentType
@@ -1955,7 +1957,7 @@ var LeadbayClient = class {
     }
   }
   mockRequest(method, path, body) {
-    const fullPath = `/1.5${path}`;
+    const fullPath = `${API_PREFIX}${path}`;
     this._lastMeta = {
       region: this._region,
       endpoint: `${method} ${path}`,
@@ -1978,7 +1980,7 @@ var LeadbayClient = class {
     };
   }
   mockRequestBinary(method, path, contentType, body) {
-    const fullPath = `/1.5${path}`;
+    const fullPath = `${API_PREFIX}${path}`;
     this._lastMeta = {
       region: this._region,
       endpoint: `${method} ${path}`,
@@ -6824,7 +6826,7 @@ WHEN TO USE: at the start of a session to know what the agent can/can't do, afte
 
 WHEN NOT TO USE: as a pre-flight gate before bulk ops \u2014 operations themselves return 429; this tool is for context, not gating. And: a recent quota snapshot showing "exhausted" is NOT a reason to refuse a write call when the user has just topped up \u2014 re-call this tool first, then proceed.
 `;
-var leadbay_acknowledge_notification = `Acknowledge a Leadbay notification \u2014 i.e. tell the MCP and the backend "I've seen this and acted on it." Wraps \`POST /1.5/notifications/{id}/seen\` (default) or \`/archive\` (when \`archive:true\`) and drops the entry from the local inbox so subsequent \`_meta.notifications\` payloads stop carrying it.
+var leadbay_acknowledge_notification = `Acknowledge a Leadbay notification \u2014 i.e. tell the MCP and the backend "I've seen this and acted on it." Wraps \`POST /1.6/notifications/{id}/seen\` (default) or \`/archive\` (when \`archive:true\`) and drops the entry from the local inbox so subsequent \`_meta.notifications\` payloads stop carrying it.
 
 **When to call.** After you read an entry from \`_meta.notifications\` or \`account_status.notifications\` and have revised whatever prior output the just-finished background work might have made stale (outreach drafts, lead lists, "available leads" claims, followup plans). Mark-seen tells the human team's pipeline you handled this and prevents the notification from re-surfacing on every subsequent tool response.
 
@@ -7434,7 +7436,7 @@ WHEN NOT TO USE: from agent flow \u2014 leadbay_adjust_audience handles the draf
 
 This tool MUTATES state. The caller (agent or human-in-the-loop) is responsible for confirming intent before invocation; the MCP server does not soft-prompt for confirmation. See \`annotations.destructiveHint\`.
 `;
-var leadbay_create_topup_link = `Generate a one-shot Stripe checkout session for an AI-credits top-up. Wraps \`POST /1.5/stripe/topup_checkout\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL (~1 hour TTL); creating one does NOT charge the user \u2014 payment happens only after the user opens the URL and completes checkout in their browser.
+var leadbay_create_topup_link = `Generate a one-shot Stripe checkout session for an AI-credits top-up. Wraps \`POST /1.6/stripe/topup_checkout\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL (~1 hour TTL); creating one does NOT charge the user \u2014 payment happens only after the user opens the URL and completes checkout in their browser.
 
 **When a quota window is hit, offer top-up as the FIRST option.** A top-up clears the throttle immediately (no need to wait for the daily/weekly/monthly window reset). The flow:
 
@@ -8618,7 +8620,7 @@ follow-ups. On \`ambiguous_sectors\`, the only move is to pick a sector and re-c
 If nothing fits, default to "switch to the new lens and pull leads" \u2014 never
 invent a tool that doesn't exist.
 `;
-var leadbay_open_billing_portal = `Generate a one-shot Stripe customer-portal URL. Wraps \`GET /1.5/stripe/portal\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL the user can open to manage their existing Leadbay subscription: change plan tier, swap payment method, view invoices. The agent does NOT make subscription changes itself \u2014 it surfaces the URL and lets the user act.
+var leadbay_open_billing_portal = `Generate a one-shot Stripe customer-portal URL. Wraps \`GET /1.6/stripe/portal\` \u2192 \`{url}\`. Returns a fresh Stripe-hosted URL the user can open to manage their existing Leadbay subscription: change plan tier, swap payment method, view invoices. The agent does NOT make subscription changes itself \u2014 it surfaces the URL and lets the user act.
 
 Sibling of \`leadbay_create_topup_link\`. Use cases differ:
 
@@ -8896,7 +8898,7 @@ table. Detail + status priority below.
 
 Pull KNOWN leads from the user's Monitor view \u2014 the re-engagement entry point. Use when the user asks "what should I follow up on", "leads I haven't contacted", "leads in [city]", "before my trip", or any phrasing implying pre-existing pipeline context. For NEW leads from Discover, use \`leadbay_pull_leads\`.
 
-Backend: wraps \`GET /1.5/monitor?personal=&liked=&filtered=&count=&page=\` plus, when \`set_filter\` is supplied, a preceding \`POST /1.5/monitor/filter\`. The Monitor filter is a single \`FilterItem\` per user \u2014 refreshing restores it.
+Backend: wraps \`GET /1.6/monitor?personal=&liked=&filtered=&count=&page=\` plus, when \`set_filter\` is supplied, a preceding \`POST /1.6/monitor/filter\`. The Monitor filter is a single \`FilterItem\` per user \u2014 refreshing restores it.
 
 **Filter mechanism \u2014 store-then-apply.** Pass \`set_filter: { criteria: FilterCriterion[] }\` to overwrite the server-stored filter, then the composite re-fetches with \`filtered:true\`. \`FilterCriterion\` is the backend's \`anyOf\` over 10 typed criteria: \`size\`, \`keywords\`, \`sector_ids\`, \`location_ids\`, \`custom_field\`(\`_comparison\`), \`yc\`, \`liked\`, \`last_action\` (MonitorActionType enum), \`last_action_date\` (with \`last_days\`).
 
@@ -24014,7 +24016,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.23.7" : "0.0.0-dev";
+var VERSION = true ? "0.23.9" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var sseSessions = /* @__PURE__ */ new Map();

package/dist/installer-electron.js

@@ -9,8 +9,188 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// installer/install-claude-code.ts
+// installer/install-shared.ts
 import { spawn } from "child_process";
+import { existsSync, readFileSync, readdirSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+function printHostedMcpHelp(write = (s) => process.stderr.write(s)) {
+  write(
+    `
+The guided installer couldn't complete (no browser opened in time).
+You can add Leadbay's hosted MCP directly \u2014 Claude signs in in-app,
+no localhost callback needed:
+
+  \u2022 Claude web / Cowork web:
+      Customize \u2192 Connectors \u2192 "+" \u2192 Add custom connector
+      Name: Leadbay   URL: ${HOSTED_MCP_URL}
+
+  \u2022 A terminal with the Claude Code CLI:
+      claude mcp add --transport http leadbay ${HOSTED_MCP_URL}
+
+  \u2022 Or re-run the terminal install flow:
+      npx -y @leadbay/mcp@latest install --oauth
+
+`
+  );
+}
+function formatInstallOsLabel(platform = process.platform, arch = process.arch) {
+  const name = platform === "darwin" ? "macOS" : platform === "win32" ? "Windows" : platform === "linux" ? "Linux" : platform;
+  return `${name} (${arch})`;
+}
+function detectClaudeDesktopMode(claudeSupportDir) {
+  const markers = [];
+  const legacy = existsSync(join(claudeSupportDir, "claude_desktop_config.json"));
+  if (existsSync(join(claudeSupportDir, "Claude Extensions"))) {
+    markers.push("Claude Extensions/");
+  }
+  if (existsSync(join(claudeSupportDir, "extensions-installations.json"))) {
+    markers.push("extensions-installations.json");
+  }
+  const cfgPath = join(claudeSupportDir, "config.json");
+  if (existsSync(cfgPath)) {
+    try {
+      const raw = readFileSync(cfgPath, "utf8");
+      const parsed = JSON.parse(raw);
+      if (parsed && typeof parsed === "object") {
+        const hasDxtKey = Object.keys(parsed).some((key) => key.startsWith("dxt:"));
+        if (hasDxtKey) markers.push("config.json (dxt:* keys)");
+      }
+    } catch {
+    }
+  }
+  return { legacy, dxt: markers.length > 0, markers };
+}
+async function findOnPath(bin) {
+  return await new Promise((resolve) => {
+    const cmd = process.platform === "win32" ? "where" : "which";
+    const child = spawn(cmd, [bin], { stdio: ["ignore", "pipe", "ignore"] });
+    let buf = "";
+    child.stdout.on("data", (chunk) => buf += chunk.toString());
+    child.on("close", (code) => resolve(code === 0 ? buf.split(/\r?\n/)[0] : null));
+    child.on("error", () => resolve(null));
+  });
+}
+async function windowsStoreAppInstalled(packageName, appName) {
+  if (process.platform !== "win32") return false;
+  return await new Promise((resolve) => {
+    const script = [
+      `$pkg = Get-AppxPackage -Name '${packageName}' -ErrorAction SilentlyContinue`,
+      `$app = Get-StartApps | Where-Object { $_.AppID -like '${packageName}_*!${appName}' } | Select-Object -First 1`,
+      "if ($pkg -or $app) { exit 0 } else { exit 1 }"
+    ].join("; ");
+    const child = spawn("powershell.exe", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script], {
+      stdio: "ignore",
+      windowsHide: true
+    });
+    child.on("close", (code) => resolve(code === 0));
+    child.on("error", () => resolve(false));
+  });
+}
+function isClaudeStorePackagePresent(localAppData) {
+  const packagesDir = join(localAppData, "Packages");
+  if (!existsSync(packagesDir)) return false;
+  try {
+    return readdirSync(packagesDir).some((name) => /^Claude_/i.test(name));
+  } catch {
+    return false;
+  }
+}
+async function isClaudeDesktopInstalled(home) {
+  if (process.platform === "darwin") {
+    return existsSync("/Applications/Claude.app") || existsSync(home + "/Applications/Claude.app");
+  }
+  if (process.platform === "win32") {
+    const local = process.env.LOCALAPPDATA ?? home + "/AppData/Local";
+    const programFiles = process.env.ProgramFiles;
+    const programFilesX86 = process.env["ProgramFiles(x86)"];
+    const exeInstalled = [
+      local + "/Programs/Claude/Claude.exe",
+      local + "/Claude/Claude.exe",
+      programFiles ? programFiles + "/Claude/Claude.exe" : null,
+      programFilesX86 ? programFilesX86 + "/Claude/Claude.exe" : null
+    ].some((candidate) => candidate !== null && existsSync(candidate));
+    if (exeInstalled) return true;
+    if (isClaudeStorePackagePresent(local)) return true;
+    return await windowsStoreAppInstalled("AnthropicPBC.Claude", "Claude");
+  }
+  const desktopBin = await findOnPath("claude-desktop");
+  if (desktopBin) return true;
+  return existsSync(home + "/.local/share/applications/claude-desktop.desktop") || existsSync("/usr/share/applications/claude-desktop.desktop") || existsSync("/opt/Claude/Claude") || existsSync("/opt/Claude/claude") || existsSync("/opt/claude/claude");
+}
+async function isChatGptDesktopInstalled(home) {
+  if (process.platform === "darwin") {
+    return existsSync("/Applications/ChatGPT.app") || existsSync(home + "/Applications/ChatGPT.app");
+  }
+  if (process.platform === "win32") {
+    const local = process.env.LOCALAPPDATA ?? home + "/AppData/Local";
+    const programFiles = process.env.ProgramFiles;
+    const programFilesX86 = process.env["ProgramFiles(x86)"];
+    const exeInstalled = [
+      local + "/Programs/ChatGPT/ChatGPT.exe",
+      local + "/ChatGPT/ChatGPT.exe",
+      programFiles ? programFiles + "/OpenAI/ChatGPT/ChatGPT.exe" : null,
+      programFiles ? programFiles + "/ChatGPT/ChatGPT.exe" : null,
+      programFilesX86 ? programFilesX86 + "/OpenAI/ChatGPT/ChatGPT.exe" : null,
+      programFilesX86 ? programFilesX86 + "/ChatGPT/ChatGPT.exe" : null
+    ].some((candidate) => candidate !== null && existsSync(candidate));
+    return exeInstalled || await windowsStoreAppInstalled("OpenAI.ChatGPT-Desktop", "ChatGPT");
+  }
+  return false;
+}
+async function isCursorInstalled(home) {
+  const cursorBin = await findOnPath("cursor");
+  if (cursorBin) return true;
+  if (process.platform === "darwin") return existsSync("/Applications/Cursor.app");
+  if (process.platform === "win32") {
+    const local = process.env.LOCALAPPDATA ?? `${home}\\AppData\\Local`;
+    return existsSync(`${local}\\Programs\\Cursor\\Cursor.exe`);
+  }
+  return existsSync("/usr/share/applications/cursor.desktop") || existsSync("/opt/Cursor/cursor");
+}
+async function detectClients() {
+  const out = [];
+  const home = homedir();
+  const claudeBin = await findOnPath("claude");
+  if (claudeBin) {
+    out.push({ id: "claude-code", label: "Claude Code", detail: `${claudeBin} mcp add ...` });
+  }
+  const claudeSupportDir = process.platform === "win32" ? `${process.env.APPDATA ?? `${home}\\AppData\\Roaming`}\\Claude` : process.platform === "darwin" ? `${home}/Library/Application Support/Claude` : `${home}/.config/Claude`;
+  const claudeDesktopPath = process.platform === "win32" ? `${claudeSupportDir}\\claude_desktop_config.json` : `${claudeSupportDir}/claude_desktop_config.json`;
+  const mode = detectClaudeDesktopMode(claudeSupportDir);
+  if (await isClaudeDesktopInstalled(home)) {
+    out.push({ id: "claude-desktop", label: "Claude Desktop", detail: claudeDesktopPath, configPath: claudeDesktopPath, mode, supportDir: claudeSupportDir });
+  }
+  if (await isChatGptDesktopInstalled(home)) {
+    out.push({ id: "chatgpt-desktop", label: "ChatGPT Desktop", detail: HOSTED_MCP_URL });
+  }
+  const cursorPath = process.platform === "win32" ? `${home}\\.cursor\\mcp.json` : `${home}/.cursor/mcp.json`;
+  if (await isCursorInstalled(home)) {
+    out.push({
+      id: "cursor",
+      label: "Cursor",
+      detail: existsSync(cursorPath) ? cursorPath : `${cursorPath} (will be created)`,
+      configPath: cursorPath
+    });
+  }
+  const codexBin = await findOnPath("codex");
+  const codexDir = process.platform === "win32" ? `${process.env.USERPROFILE ?? home}\\.codex` : `${home}/.codex`;
+  if (codexBin) {
+    const codexConfigPath = process.platform === "win32" ? `${codexDir}\\config.toml` : `${codexDir}/config.toml`;
+    out.push({ id: "codex", label: "Codex", detail: codexConfigPath, configPath: codexConfigPath });
+  }
+  return out;
+}
+var HOSTED_MCP_URL;
+var init_install_shared = __esm({
+  "installer/install-shared.ts"() {
+    "use strict";
+    HOSTED_MCP_URL = "https://leadbay-mcp-prod.fly.dev/mcp";
+  }
+});
+
+// installer/install-claude-code.ts
+import { spawn as spawn2 } from "child_process";
 function buildClaudeCodeAddArgs(token, region, includeWrite, telemetryEnabled, localBinPath) {
   const args = [
     "mcp",
@@ -38,7 +218,7 @@ function buildClaudeCodeRemoveArgs() {
 }
 async function runClaudeMcp(args) {
   return await new Promise((resolve) => {
-    const child = spawn("claude", args, { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn2("claude", args, { stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (chunk) => stdout += chunk.toString());
@@ -397,166 +577,6 @@ var init_install_dxt = __esm({
   }
 });
 
-// installer/install-shared.ts
-import { spawn as spawn2 } from "child_process";
-import { existsSync, readFileSync, readdirSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-function formatInstallOsLabel(platform = process.platform, arch = process.arch) {
-  const name = platform === "darwin" ? "macOS" : platform === "win32" ? "Windows" : platform === "linux" ? "Linux" : platform;
-  return `${name} (${arch})`;
-}
-function detectClaudeDesktopMode(claudeSupportDir) {
-  const markers = [];
-  const legacy = existsSync(join(claudeSupportDir, "claude_desktop_config.json"));
-  if (existsSync(join(claudeSupportDir, "Claude Extensions"))) {
-    markers.push("Claude Extensions/");
-  }
-  if (existsSync(join(claudeSupportDir, "extensions-installations.json"))) {
-    markers.push("extensions-installations.json");
-  }
-  const cfgPath = join(claudeSupportDir, "config.json");
-  if (existsSync(cfgPath)) {
-    try {
-      const raw = readFileSync(cfgPath, "utf8");
-      const parsed = JSON.parse(raw);
-      if (parsed && typeof parsed === "object") {
-        const hasDxtKey = Object.keys(parsed).some((key) => key.startsWith("dxt:"));
-        if (hasDxtKey) markers.push("config.json (dxt:* keys)");
-      }
-    } catch {
-    }
-  }
-  return { legacy, dxt: markers.length > 0, markers };
-}
-async function findOnPath(bin) {
-  return await new Promise((resolve) => {
-    const cmd = process.platform === "win32" ? "where" : "which";
-    const child = spawn2(cmd, [bin], { stdio: ["ignore", "pipe", "ignore"] });
-    let buf = "";
-    child.stdout.on("data", (chunk) => buf += chunk.toString());
-    child.on("close", (code) => resolve(code === 0 ? buf.split(/\r?\n/)[0] : null));
-    child.on("error", () => resolve(null));
-  });
-}
-async function windowsStoreAppInstalled(packageName, appName) {
-  if (process.platform !== "win32") return false;
-  return await new Promise((resolve) => {
-    const script = [
-      `$pkg = Get-AppxPackage -Name '${packageName}' -ErrorAction SilentlyContinue`,
-      `$app = Get-StartApps | Where-Object { $_.AppID -like '${packageName}_*!${appName}' } | Select-Object -First 1`,
-      "if ($pkg -or $app) { exit 0 } else { exit 1 }"
-    ].join("; ");
-    const child = spawn2("powershell.exe", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script], {
-      stdio: "ignore",
-      windowsHide: true
-    });
-    child.on("close", (code) => resolve(code === 0));
-    child.on("error", () => resolve(false));
-  });
-}
-function isClaudeStorePackagePresent(localAppData) {
-  const packagesDir = join(localAppData, "Packages");
-  if (!existsSync(packagesDir)) return false;
-  try {
-    return readdirSync(packagesDir).some((name) => /^Claude_/i.test(name));
-  } catch {
-    return false;
-  }
-}
-async function isClaudeDesktopInstalled(home) {
-  if (process.platform === "darwin") {
-    return existsSync("/Applications/Claude.app") || existsSync(home + "/Applications/Claude.app");
-  }
-  if (process.platform === "win32") {
-    const local = process.env.LOCALAPPDATA ?? home + "/AppData/Local";
-    const programFiles = process.env.ProgramFiles;
-    const programFilesX86 = process.env["ProgramFiles(x86)"];
-    const exeInstalled = [
-      local + "/Programs/Claude/Claude.exe",
-      local + "/Claude/Claude.exe",
-      programFiles ? programFiles + "/Claude/Claude.exe" : null,
-      programFilesX86 ? programFilesX86 + "/Claude/Claude.exe" : null
-    ].some((candidate) => candidate !== null && existsSync(candidate));
-    if (exeInstalled) return true;
-    if (isClaudeStorePackagePresent(local)) return true;
-    return await windowsStoreAppInstalled("AnthropicPBC.Claude", "Claude");
-  }
-  const desktopBin = await findOnPath("claude-desktop");
-  if (desktopBin) return true;
-  return existsSync(home + "/.local/share/applications/claude-desktop.desktop") || existsSync("/usr/share/applications/claude-desktop.desktop") || existsSync("/opt/Claude/Claude") || existsSync("/opt/Claude/claude") || existsSync("/opt/claude/claude");
-}
-async function isChatGptDesktopInstalled(home) {
-  if (process.platform === "darwin") {
-    return existsSync("/Applications/ChatGPT.app") || existsSync(home + "/Applications/ChatGPT.app");
-  }
-  if (process.platform === "win32") {
-    const local = process.env.LOCALAPPDATA ?? home + "/AppData/Local";
-    const programFiles = process.env.ProgramFiles;
-    const programFilesX86 = process.env["ProgramFiles(x86)"];
-    const exeInstalled = [
-      local + "/Programs/ChatGPT/ChatGPT.exe",
-      local + "/ChatGPT/ChatGPT.exe",
-      programFiles ? programFiles + "/OpenAI/ChatGPT/ChatGPT.exe" : null,
-      programFiles ? programFiles + "/ChatGPT/ChatGPT.exe" : null,
-      programFilesX86 ? programFilesX86 + "/OpenAI/ChatGPT/ChatGPT.exe" : null,
-      programFilesX86 ? programFilesX86 + "/ChatGPT/ChatGPT.exe" : null
-    ].some((candidate) => candidate !== null && existsSync(candidate));
-    return exeInstalled || await windowsStoreAppInstalled("OpenAI.ChatGPT-Desktop", "ChatGPT");
-  }
-  return false;
-}
-async function isCursorInstalled(home) {
-  const cursorBin = await findOnPath("cursor");
-  if (cursorBin) return true;
-  if (process.platform === "darwin") return existsSync("/Applications/Cursor.app");
-  if (process.platform === "win32") {
-    const local = process.env.LOCALAPPDATA ?? `${home}\\AppData\\Local`;
-    return existsSync(`${local}\\Programs\\Cursor\\Cursor.exe`);
-  }
-  return existsSync("/usr/share/applications/cursor.desktop") || existsSync("/opt/Cursor/cursor");
-}
-async function detectClients() {
-  const out = [];
-  const home = homedir();
-  const claudeBin = await findOnPath("claude");
-  if (claudeBin) {
-    out.push({ id: "claude-code", label: "Claude Code", detail: `${claudeBin} mcp add ...` });
-  }
-  const claudeSupportDir = process.platform === "win32" ? `${process.env.APPDATA ?? `${home}\\AppData\\Roaming`}\\Claude` : process.platform === "darwin" ? `${home}/Library/Application Support/Claude` : `${home}/.config/Claude`;
-  const claudeDesktopPath = process.platform === "win32" ? `${claudeSupportDir}\\claude_desktop_config.json` : `${claudeSupportDir}/claude_desktop_config.json`;
-  const mode = detectClaudeDesktopMode(claudeSupportDir);
-  if (await isClaudeDesktopInstalled(home)) {
-    out.push({ id: "claude-desktop", label: "Claude Desktop", detail: claudeDesktopPath, configPath: claudeDesktopPath, mode, supportDir: claudeSupportDir });
-  }
-  if (await isChatGptDesktopInstalled(home)) {
-    out.push({ id: "chatgpt-desktop", label: "ChatGPT Desktop", detail: HOSTED_MCP_URL });
-  }
-  const cursorPath = process.platform === "win32" ? `${home}\\.cursor\\mcp.json` : `${home}/.cursor/mcp.json`;
-  if (await isCursorInstalled(home)) {
-    out.push({
-      id: "cursor",
-      label: "Cursor",
-      detail: existsSync(cursorPath) ? cursorPath : `${cursorPath} (will be created)`,
-      configPath: cursorPath
-    });
-  }
-  const codexBin = await findOnPath("codex");
-  const codexDir = process.platform === "win32" ? `${process.env.USERPROFILE ?? home}\\.codex` : `${home}/.codex`;
-  if (codexBin) {
-    const codexConfigPath = process.platform === "win32" ? `${codexDir}\\config.toml` : `${codexDir}/config.toml`;
-    out.push({ id: "codex", label: "Codex", detail: codexConfigPath, configPath: codexConfigPath });
-  }
-  return out;
-}
-var HOSTED_MCP_URL;
-var init_install_shared = __esm({
-  "installer/install-shared.ts"() {
-    "use strict";
-    HOSTED_MCP_URL = "https://leadbay-mcp-prod.fly.dev/mcp";
-  }
-});
-
 // src/oauth.ts
 import { createHash, randomBytes } from "crypto";
 import { createServer } from "http";
@@ -1157,7 +1177,20 @@ async function loginWithOAuth() {
     const { accessToken } = await oauthLogin({
       authServerBaseUrl: OAUTH_BASE_URLS.prod[region],
       clientName: `Leadbay MCP installer @ ${hostname()}`,
-      log: () => void 0
+      log: () => void 0,
+      // Wrap the opener so a launch failure surfaces the (still-reachable) URL
+      // on stderr instead of silently dropping it, while the listener stays up.
+      openBrowser: async (u) => {
+        try {
+          await openInBrowser(u);
+        } catch {
+          process.stderr.write(`
+  Open this URL in your browser to sign in:
+  ${u}
+
+`);
+        }
+      }
     });
     const sessionId = randomUUID();
     const accountLabel = `Leadbay OAuth (${region.toUpperCase()})`;
@@ -1632,36 +1665,6 @@ function pageHtml(locale = "en") {
 </body>
 </html>`;
 }
-async function openBrowser(url) {
-  const { spawn: spawn4 } = await import("child_process");
-  const trySpawn = (command, args) => new Promise((resolve) => {
-    try {
-      const child = spawn4(command, args, { stdio: "ignore", detached: true });
-      child.unref();
-      child.on("error", () => resolve(false));
-      child.on("close", (code) => resolve(code === 0));
-    } catch {
-      resolve(false);
-    }
-  });
-  if (process.platform === "darwin") {
-    await trySpawn("open", [url]);
-    return;
-  }
-  if (process.platform === "win32") {
-    await trySpawn("cmd", ["/c", "start", "", url]);
-    return;
-  }
-  const candidates = ["xdg-open", "sensible-browser", "google-chrome", "chromium-browser", "firefox"];
-  for (const cmd of candidates) {
-    if (await trySpawn(cmd, [url])) return;
-  }
-  process.stderr.write(`
-  Open this URL in your browser to continue:
-  ${url}
-
-`);
-}
 function makeGuiServer(options, pageContent, extraRoutes, logLabel) {
   let expectedHost = `127.0.0.1:${(options.port ?? PORT) || 0}`;
   let resolveDone;
@@ -1671,11 +1674,16 @@ function makeGuiServer(options, pageContent, extraRoutes, logLabel) {
   const onDone = () => setTimeout(() => {
     resolveDone();
   }, 1500);
+  let resolveActivity;
+  const activity = new Promise((r) => {
+    resolveActivity = r;
+  });
   const server = createServer2(async (req, res) => {
     if (!isAllowedOrigin(req, expectedHost)) {
       sendJson(res, 403, { ok: false, error: "forbidden" });
       return;
     }
+    resolveActivity();
     try {
       if (req.method === "GET" && req.url === "/") {
         const raw = await pageContent();
@@ -1699,8 +1707,16 @@ function makeGuiServer(options, pageContent, extraRoutes, logLabel) {
       const url = `http://127.0.0.1:${port}/`;
       process.stderr.write(`Leadbay MCP ${logLabel} GUI: ${url}
 `);
-      if (options.openBrowser !== false) await openBrowser(url).catch(() => void 0);
-      resolve({ url, done, close: () => new Promise((res, rej) => server.close((e) => e ? rej(e) : res())) });
+      if (options.openBrowser !== false) {
+        openInBrowser(url).catch(() => {
+          process.stderr.write(`
+  Open this URL in your browser to continue:
+  ${url}
+
+`);
+        });
+      }
+      resolve({ url, done, activity, close: () => new Promise((res, rej) => server.close((e) => e ? rej(e) : res())) });
     });
   });
 }
@@ -1748,7 +1764,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = true ? "0.23.7" : "0.0.0-dev";
+    VERSION = true ? "0.23.9" : "0.0.0-dev";
     MESSAGES = {
       en: {
         installer: {
@@ -1911,25 +1927,55 @@ var init_installer_gui = __esm({
 });
 
 // installer/installer-electron.ts
+init_install_shared();
 import { realpathSync } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
+var WATCHDOG_MS = 12e4;
+function shouldArmWatchdog(args) {
+  return !args.includes("--uninstall") && !args.includes("--no-open");
+}
+async function runInstallerLoop(handle, watchdogMs = WATCHDOG_MS) {
+  let timer;
+  try {
+    const racers = [
+      handle.done.then(() => ({ outcome: "completed" })),
+      new Promise((resolve) => {
+        process.once("SIGINT", () => resolve({ outcome: "signal" }));
+        process.once("SIGTERM", () => resolve({ outcome: "signal" }));
+      })
+    ];
+    if (watchdogMs !== null) {
+      racers.push(
+        new Promise((resolve) => {
+          timer = setTimeout(() => resolve({ outcome: "timeout" }), watchdogMs);
+          handle.activity.then(() => {
+            if (timer) clearTimeout(timer);
+          }).catch(() => void 0);
+        })
+      );
+    }
+    return await Promise.race(racers);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
 async function main() {
   const args = process.argv.slice(2);
   const { startInstallerGui: startInstallerGui2, startUninstallerGui: startUninstallerGui2 } = await Promise.resolve().then(() => (init_installer_gui(), installer_gui_exports));
   const opts = { openBrowser: !args.includes("--no-open") };
-  const handle = args.includes("--uninstall") ? await startUninstallerGui2(opts) : await startInstallerGui2(opts);
-  let completed = false;
-  await Promise.race([
-    handle.done.then(() => {
-      completed = true;
-    }),
-    new Promise((resolve) => {
-      process.once("SIGINT", () => resolve());
-      process.once("SIGTERM", () => resolve());
-    })
-  ]);
+  const isUninstall = args.includes("--uninstall");
+  const handle = isUninstall ? await startUninstallerGui2(opts) : await startInstallerGui2(opts);
+  const { outcome } = await runInstallerLoop(handle, shouldArmWatchdog(args) ? WATCHDOG_MS : null);
   await handle.close().catch(() => void 0);
-  process.stderr.write(completed ? "\nInstallation complete. Exiting.\n" : "\nExiting.\n");
+  if (outcome === "timeout") {
+    process.stderr.write("\nInstaller timed out waiting for the browser flow.\n");
+    printHostedMcpHelp();
+    process.exit(1);
+  }
+  const verb = isUninstall ? "Uninstall" : "Installation";
+  process.stderr.write(outcome === "completed" ? `
+${verb} complete. Exiting.
+` : "\nExiting.\n");
 }
 var isEntrypoint = (() => {
   try {
@@ -1947,3 +1993,8 @@ if (isEntrypoint) {
     process.exit(1);
   });
 }
+export {
+  WATCHDOG_MS,
+  runInstallerLoop,
+  shouldArmWatchdog
+};

package/dist/installer-gui.js

@@ -1027,7 +1027,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = true ? "0.23.7" : "0.0.0-dev";
+var VERSION = true ? "0.23.9" : "0.0.0-dev";
 var MESSAGES = {
   en: {
     installer: {
@@ -1259,7 +1259,20 @@ async function loginWithOAuth() {
     const { accessToken } = await oauthLogin({
       authServerBaseUrl: OAUTH_BASE_URLS.prod[region],
       clientName: `Leadbay MCP installer @ ${hostname()}`,
-      log: () => void 0
+      log: () => void 0,
+      // Wrap the opener so a launch failure surfaces the (still-reachable) URL
+      // on stderr instead of silently dropping it, while the listener stays up.
+      openBrowser: async (u) => {
+        try {
+          await openInBrowser(u);
+        } catch {
+          process.stderr.write(`
+  Open this URL in your browser to sign in:
+  ${u}
+
+`);
+        }
+      }
     });
     const sessionId = randomUUID();
     const accountLabel = `Leadbay OAuth (${region.toUpperCase()})`;
@@ -1744,36 +1757,6 @@ function pageHtml(locale = "en") {
 </body>
 </html>`;
 }
-async function openBrowser(url) {
-  const { spawn: spawn4 } = await import("child_process");
-  const trySpawn = (command, args) => new Promise((resolve) => {
-    try {
-      const child = spawn4(command, args, { stdio: "ignore", detached: true });
-      child.unref();
-      child.on("error", () => resolve(false));
-      child.on("close", (code) => resolve(code === 0));
-    } catch {
-      resolve(false);
-    }
-  });
-  if (process.platform === "darwin") {
-    await trySpawn("open", [url]);
-    return;
-  }
-  if (process.platform === "win32") {
-    await trySpawn("cmd", ["/c", "start", "", url]);
-    return;
-  }
-  const candidates = ["xdg-open", "sensible-browser", "google-chrome", "chromium-browser", "firefox"];
-  for (const cmd of candidates) {
-    if (await trySpawn(cmd, [url])) return;
-  }
-  process.stderr.write(`
-  Open this URL in your browser to continue:
-  ${url}
-
-`);
-}
 function makeGuiServer(options, pageContent, extraRoutes, logLabel) {
   let expectedHost = `127.0.0.1:${(options.port ?? PORT) || 0}`;
   let resolveDone;
@@ -1783,11 +1766,16 @@ function makeGuiServer(options, pageContent, extraRoutes, logLabel) {
   const onDone = () => setTimeout(() => {
     resolveDone();
   }, 1500);
+  let resolveActivity;
+  const activity = new Promise((r) => {
+    resolveActivity = r;
+  });
   const server = createServer2(async (req, res) => {
     if (!isAllowedOrigin(req, expectedHost)) {
       sendJson(res, 403, { ok: false, error: "forbidden" });
       return;
     }
+    resolveActivity();
     try {
       if (req.method === "GET" && req.url === "/") {
         const raw = await pageContent();
@@ -1811,8 +1799,16 @@ function makeGuiServer(options, pageContent, extraRoutes, logLabel) {
       const url = `http://127.0.0.1:${port}/`;
       process.stderr.write(`Leadbay MCP ${logLabel} GUI: ${url}
 `);
-      if (options.openBrowser !== false) await openBrowser(url).catch(() => void 0);
-      resolve({ url, done, close: () => new Promise((res, rej) => server.close((e) => e ? rej(e) : res())) });
+      if (options.openBrowser !== false) {
+        openInBrowser(url).catch(() => {
+          process.stderr.write(`
+  Open this URL in your browser to continue:
+  ${url}
+
+`);
+        });
+      }
+      resolve({ url, done, activity, close: () => new Promise((res, rej) => server.close((e) => e ? rej(e) : res())) });
     });
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.23.7",
+  "version": "0.23.9",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",