@leadbay/mcp 0.32.0 → 0.32.1

package/README.md

@@ -634,7 +634,7 @@ Use `dry_run: true` to validate domain formatting and wizard reachability withou
 | `LEADBAY_MOCK` | no | unset | `"1"` serves all reads from on-disk fixtures (dev only) |
 | `LEADBAY_MOCK_DIR` | no | `./.context/leadbay-live-shapes/` | Fixture dir for mock mode |
 | `LEADBAY_LOG_LEVEL` | no | `error` | `debug` \| `info` \| `error`, logs to stderr |
-| `LEADBAY_TIMEOUT_MS` | no | (client default) | Per-request timeout override |
+| `LEADBAY_TIMEOUT_MS` | no | `600000` | Backstop deadline for a single outbound Leadbay request, for the case where nothing cancels it. Not a latency budget: long work (enrichment, bulk qualify, import) is launched and polled, and a cancelled tool call already closes its own requests. On expiry the socket is closed and the tool returns a `TIMEOUT` error. Set `0` to disable the backstop. |
 
 > ⚠️ **Set `LEADBAY_REGION` explicitly.** If you don't, the server probes BOTH `api-us.leadbay.app` and `api-fr.leadbay.app` in parallel with your bearer token attached, sending the token to a backend that doesn't own your account. The `install` and `login` subcommands enforce `--region` for exactly this reason; the runtime auto-probe is a backwards-compat fallback, not a recommended setting.
 
@@ -657,6 +657,7 @@ Use `dry_run: true` to validate domain formatting and wizard reachability withou
 | `mcp tool called` | Every tool invocation | `tool`, `ok`, `duration_ms`, `format`, `bytes`, `error_code` (if failed) |
 | `mcp quota hit` | When the API returns `QUOTA_EXCEEDED` (HTTP 429/402) | `tool`, `retry_after_s`, `endpoint` |
 | `mcp topup link created` | When `leadbay_create_topup_link` returns a checkout URL | `tool` (the URL itself is **never** captured) |
+| `mcp tool timeout` | When an outbound Leadbay request exceeds `LEADBAY_TIMEOUT_MS` | `tool`, `timeout_ms`, `endpoint`, `region` |
 
 After your first authenticated call, your PostHog `distinctId` is set to your Leadbay account email so MCP events consolidate with web-app events for the same person. Events also carry `$groups.organization` so org-level rollups work.
 

package/dist/bin.js

@@ -11,20 +11,47 @@ var __export = (target, all) => {
 
 // ../core/dist/client.js
 import https from "https";
+import { AsyncLocalStorage } from "async_hooks";
 import { readdirSync, readFileSync, existsSync } from "fs";
 import { join } from "path";
-function httpsRequest(method, url, headers, body, timeoutMs) {
+function defaultTimeoutMs() {
+  const raw = process.env.LEADBAY_TIMEOUT_MS;
+  if (raw === void 0 || raw.trim() === "")
+    return DEFAULT_REQUEST_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) ? n : DEFAULT_REQUEST_TIMEOUT_MS;
+}
+function runWithRequestSignal(signal, fn) {
+  return requestSignalStore.run(signal, fn);
+}
+function makeCancelledError(method, url) {
+  const err = new Error(`Request cancelled: ${method} ${url}`);
+  err.name = "AbortError";
+  err.code = "CANCELLED";
+  return err;
+}
+function httpsRequest(method, url, headers, body, timeoutMs, signal) {
+  const deadlineMs = timeoutMs ?? defaultTimeoutMs();
+  const abortSignal = signal ?? requestSignalStore.getStore();
+  const abortSafe = method.toUpperCase() === "GET";
   return new Promise((resolve, reject) => {
     const start = Date.now();
+    if (abortSignal?.aborted) {
+      reject(makeCancelledError(method, url));
+      return;
+    }
     const parsed = new URL(url);
     const reqHeaders = { ...headers };
     if (body !== void 0) {
       reqHeaders["Content-Length"] = Buffer.byteLength(body);
     }
     let deadline;
+    let onAbort;
     const clearDeadline = () => {
       if (deadline !== void 0)
         clearTimeout(deadline);
+      if (onAbort)
+        abortSignal?.removeEventListener("abort", onAbort);
     };
     const req = https.request({
       hostname: parsed.hostname,
@@ -45,15 +72,24 @@ function httpsRequest(method, url, headers, body, timeoutMs) {
         });
       });
     });
-    if (timeoutMs !== void 0 && timeoutMs > 0) {
+    if (deadlineMs > 0) {
       deadline = setTimeout(() => {
         req.destroy?.();
-        const err = new Error(`Request timed out after ${timeoutMs}ms: ${method} ${url}`);
+        const err = new Error(`Request timed out after ${deadlineMs}ms: ${method} ${url}`);
         err.code = "TIMEOUT";
+        err.timeout_ms = deadlineMs;
         reject(err);
-      }, timeoutMs);
+      }, deadlineMs);
       deadline.unref?.();
     }
+    if (abortSignal && abortSafe) {
+      onAbort = () => {
+        req.destroy?.();
+        clearDeadline();
+        reject(makeCancelledError(method, url));
+      };
+      abortSignal.addEventListener("abort", onAbort, { once: true });
+    }
     req.on("error", (e) => {
       clearDeadline();
       reject(e);
@@ -177,7 +213,7 @@ function parseRetryAfter(value) {
   }
   return null;
 }
-var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
+var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, DEFAULT_REQUEST_TIMEOUT_MS, requestSignalStore, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
 var init_client = __esm({
   "../core/dist/client.js"() {
     "use strict";
@@ -185,6 +221,8 @@ var init_client = __esm({
     TASTE_CACHE_TTL_MS = 10 * 60 * 1e3;
     ME_CACHE_TTL_MS = 60 * 1e3;
     MAX_CONCURRENT = 5;
+    DEFAULT_REQUEST_TIMEOUT_MS = 6e5;
+    requestSignalStore = new AsyncLocalStorage();
     REGIONS = {
       us: "https://api-us.leadbay.app",
       fr: "https://api-fr.leadbay.app"
@@ -408,6 +446,8 @@ var init_client = __esm({
             throw this.mapErrorResponse(res.status, res.body, path, res.headers);
           }
           return JSON.parse(res.body);
+        } catch (e) {
+          throw this.mapTransportError(e, `${method} ${path}`);
         } finally {
           this.releaseSemaphore();
         }
@@ -439,6 +479,8 @@ var init_client = __esm({
           if (res.status < 200 || res.status >= 300) {
             throw this.mapErrorResponse(res.status, res.body, path, res.headers);
           }
+        } catch (e) {
+          throw this.mapTransportError(e, `${method} ${path}`);
         } finally {
           this.releaseSemaphore();
         }
@@ -476,6 +518,8 @@ var init_client = __esm({
             throw this.mapErrorResponse(res.status, res.body, path, res.headers);
           }
           return JSON.parse(res.body);
+        } catch (e) {
+          throw this.mapTransportError(e, `${method} ${path}`);
         } finally {
           this.releaseSemaphore();
         }
@@ -536,6 +580,29 @@ var init_client = __esm({
           would_call: { method, path: fullPath, body: journalBody }
         };
       }
+      /**
+       * Turn httpsRequest's raw TIMEOUT rejection into the `{error:true, code, …}`
+       * envelope every other failure already speaks, so the agent gets something it
+       * can read out to the user and act on rather than a bare Error string. Any
+       * other rejection (ECONNRESET, DNS, a mapped 4xx/5xx) passes through untouched
+       * — this is a translation, not a catch-all.
+       *
+       * The code stays "TIMEOUT" so the hosted auth probe's existing branch
+       * (auth-http.ts) keeps classifying it as a transient fault and moves to the
+       * sibling region instead of declaring a live token expired.
+       */
+      mapTransportError(e, endpoint) {
+        const err = e;
+        if (err?.code !== "TIMEOUT")
+          return e;
+        const ms = err.timeout_ms ?? defaultTimeoutMs();
+        const envelope = this.makeError("TIMEOUT", `Leadbay did not respond within ${ms}ms \u2014 the request was cancelled`, "The connection was accepted but no response came back, so this is a Leadbay-side stall, not a bad request. It is transient: retry the same call once. If it times out again, tell the user Leadbay is not responding right now and offer to report it with leadbay_report_friction.", endpoint);
+        if (envelope._meta) {
+          envelope._meta.timeout_ms = ms;
+          envelope._meta.latency_ms = ms;
+        }
+        return envelope;
+      }
       mapErrorResponse(status, rawBody, endpoint, headers) {
         let parsed;
         try {
@@ -657,6 +724,8 @@ var init_client = __esm({
             this.telemetryEnabledFromStamp = false;
           }
           return observed;
+        } catch (e) {
+          throw this.mapTransportError(e, "GET /users/me");
         } finally {
           this.releaseSemaphore();
         }
@@ -26464,6 +26533,7 @@ __export(dist_exports, {
   AgentMemorySourceSchema: () => AgentMemorySourceSchema,
   AgentMemoryTombstoneSchema: () => AgentMemoryTombstoneSchema,
   COMPOSITE_FILE_TOOL_NAMES: () => COMPOSITE_FILE_TOOL_NAMES,
+  DEFAULT_REQUEST_TIMEOUT_MS: () => DEFAULT_REQUEST_TIMEOUT_MS,
   GETTING_STARTED_MANIFEST: () => GETTING_STARTED_MANIFEST,
   InMemoryBulkStore: () => InMemoryBulkStore,
   LeadbayClient: () => LeadbayClient,
@@ -26587,6 +26657,7 @@ __export(dist_exports, {
   resolveImportRows: () => resolveImportRows,
   resolveRegion: () => resolveRegion,
   reviseHintFor: () => reviseHintFor,
+  runWithRequestSignal: () => runWithRequestSignal,
   scanPortfolioSignals: () => scanPortfolioSignals,
   seedCandidates: () => seedCandidates,
   selectLeads: () => selectLeads,
@@ -29837,6 +29908,7 @@ var BUILTIN_WIDGETS_PARAGRAPH = 'Prefer host-native widgets over inline markdown
 
 // src/server.ts
 init_dist();
+init_dist();
 
 // src/telemetry.ts
 import { PostHog } from "posthog-node";
@@ -29850,6 +29922,7 @@ var EMBEDDED_SENTRY_DSN = "https://301f1c433433b76132956ed5415bea19@o45058744368
 // src/telemetry-events.ts
 var EV_TOOL_CALL = "mcp tool called";
 var EV_QUOTA_HIT = "mcp quota hit";
+var EV_TOOL_TIMEOUT = "mcp tool timeout";
 var EV_TOPUP_LINK = "mcp topup link created";
 var EV_STARTUP = "mcp startup";
 var EV_MCP_UPDATE_CHECK = "mcp update check";
@@ -29860,6 +29933,7 @@ var EV_MCP_VERSION_UPDATED = "mcp version updated";
 var EV_AGENT_MEMORY_CAPTURED = "agent_memory_captured";
 var EV_AGENT_MEMORY_RECALLED = "agent_memory_recalled";
 var EV_AGENT_MEMORY_PRUNED = "agent_memory_pruned";
+var DURATION_PLAUSIBILITY_CEILING_MS = 6e5;
 var EV_FRICTION_REPORTED = "mcp friction reported";
 var EV_COMPOSITE_CALL = "mcp composite call";
 
@@ -29873,6 +29947,8 @@ var NOOP_TELEMETRY = {
   },
   captureQuotaHit: (_props, _identity) => {
   },
+  captureToolTimeout: (_props, _identity) => {
+  },
   captureTopupLink: (_props, _identity) => {
   },
   captureStartup: (_props, _identity) => {
@@ -29907,6 +29983,13 @@ function parseTelemetryEnv(raw) {
   if (v === "false" || v === "0" || v === "no" || v === "off") return false;
   return true;
 }
+function withPlausibleDuration(props) {
+  const { duration_ms, ...rest } = props;
+  if (Number.isFinite(duration_ms) && duration_ms >= 0 && duration_ms <= DURATION_PLAUSIBILITY_CEILING_MS) {
+    return { ...rest, duration_ms };
+  }
+  return { ...rest, duration_ms_raw: duration_ms, duration_implausible: true };
+}
 function initTelemetry(opts) {
   if (!parseTelemetryEnv(process.env.LEADBAY_TELEMETRY_ENABLED)) return NOOP_TELEMETRY;
   if (process.env.NODE_ENV === "test") return NOOP_TELEMETRY;
@@ -30075,14 +30158,17 @@ function initTelemetry(opts) {
       return identityPromise;
     },
     captureToolCall(props, identity) {
-      emit(EV_TOOL_CALL, { ...props }, identity);
+      emit(EV_TOOL_CALL, withPlausibleDuration(props), identity);
     },
     captureCompositeCall(props, identity) {
-      emit(EV_COMPOSITE_CALL, { ...props }, identity);
+      emit(EV_COMPOSITE_CALL, withPlausibleDuration(props), identity);
     },
     captureQuotaHit(props, identity) {
       emit(EV_QUOTA_HIT, { ...props }, identity);
     },
+    captureToolTimeout(props, identity) {
+      emit(EV_TOOL_TIMEOUT, { ...props }, identity);
+    },
     captureTopupLink(props, identity) {
       emit(EV_TOPUP_LINK, { ...props }, identity);
     },
@@ -30992,6 +31078,16 @@ function buildServer(client, opts = {}) {
       source: "business"
     };
   };
+  const captureTimeoutAlert = (toolName, envelope, triggeredBy) => {
+    const ms = envelope._meta?.timeout_ms;
+    telemetry.captureToolTimeout({
+      tool: toolName,
+      ...typeof ms === "number" ? { timeout_ms: ms } : {},
+      ...envelope._meta?.endpoint ? { endpoint: envelope._meta.endpoint } : {},
+      ...envelope._meta?.region ? { region: envelope._meta.region } : {},
+      ...triggeredBy !== void 0 ? { triggered_by: triggeredBy } : {}
+    });
+  };
   const captureAgentMemoryTelemetry = (toolName, result) => {
     if (!result || typeof result !== "object") return;
     const meta = result._meta ?? {};
@@ -31156,7 +31252,7 @@ ${url}
           isError: true
         };
       }
-      const result = await tool.execute(client, args, {
+      const result = await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
         logger: opts.logger,
         bulkTracker: opts.bulkTracker,
         notificationsInbox: opts.notificationsInbox,
@@ -31189,7 +31285,7 @@ ${url}
           ...report.tool_called ? { tool_called: report.tool_called } : {},
           ...report.severity ? { severity: report.severity } : {}
         }) === true
-      });
+      }));
       await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
@@ -31205,6 +31301,9 @@ ${url}
               endpoint: result._meta?.endpoint
             });
           }
+          if (envCode === "TIMEOUT") {
+            captureTimeoutAlert(name, result, triggered_by);
+          }
           telemetry.captureToolCall({
             tool: name,
             ok: false,
@@ -31335,6 +31434,9 @@ ${url}
             endpoint: err._meta?.endpoint
           });
         }
+        if (!skipAnalytics && err.code === "TIMEOUT") {
+          captureTimeoutAlert(name, err, triggered_by);
+        }
         const httpStatus2 = err._meta?.http_status;
         if (!skipAnalytics) {
           telemetry.captureToolCall({
@@ -32838,7 +32940,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.32.0";
+var VERSION = "0.32.1";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 

package/dist/http-server.js

@@ -2792,30 +2792,59 @@ function getPrompt(name, args = {}) {
 
 // ../core/dist/client.js
 import https from "https";
+import { AsyncLocalStorage } from "async_hooks";
 import { readdirSync, readFileSync, existsSync } from "fs";
 import { join } from "path";
 var LENS_CACHE_TTL_MS = 5 * 60 * 1e3;
 var TASTE_CACHE_TTL_MS = 10 * 60 * 1e3;
 var ME_CACHE_TTL_MS = 60 * 1e3;
 var MAX_CONCURRENT = 5;
+var DEFAULT_REQUEST_TIMEOUT_MS = 6e5;
+function defaultTimeoutMs() {
+  const raw = process.env.LEADBAY_TIMEOUT_MS;
+  if (raw === void 0 || raw.trim() === "")
+    return DEFAULT_REQUEST_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) ? n : DEFAULT_REQUEST_TIMEOUT_MS;
+}
+var requestSignalStore = new AsyncLocalStorage();
+function runWithRequestSignal(signal, fn) {
+  return requestSignalStore.run(signal, fn);
+}
+function makeCancelledError(method, url) {
+  const err = new Error(`Request cancelled: ${method} ${url}`);
+  err.name = "AbortError";
+  err.code = "CANCELLED";
+  return err;
+}
 var REGIONS = {
   us: "https://api-us.leadbay.app",
   fr: "https://api-fr.leadbay.app"
 };
 var API_VERSION = "1.6";
 var API_PREFIX = `/${API_VERSION}`;
-function httpsRequest(method, url, headers, body, timeoutMs) {
+function httpsRequest(method, url, headers, body, timeoutMs, signal) {
+  const deadlineMs = timeoutMs ?? defaultTimeoutMs();
+  const abortSignal = signal ?? requestSignalStore.getStore();
+  const abortSafe = method.toUpperCase() === "GET";
   return new Promise((resolve, reject) => {
     const start = Date.now();
+    if (abortSignal?.aborted) {
+      reject(makeCancelledError(method, url));
+      return;
+    }
     const parsed = new URL(url);
     const reqHeaders = { ...headers };
     if (body !== void 0) {
       reqHeaders["Content-Length"] = Buffer.byteLength(body);
     }
     let deadline;
+    let onAbort;
     const clearDeadline = () => {
       if (deadline !== void 0)
         clearTimeout(deadline);
+      if (onAbort)
+        abortSignal?.removeEventListener("abort", onAbort);
     };
     const req = https.request({
       hostname: parsed.hostname,
@@ -2836,15 +2865,24 @@ function httpsRequest(method, url, headers, body, timeoutMs) {
         });
       });
     });
-    if (timeoutMs !== void 0 && timeoutMs > 0) {
+    if (deadlineMs > 0) {
       deadline = setTimeout(() => {
         req.destroy?.();
-        const err = new Error(`Request timed out after ${timeoutMs}ms: ${method} ${url}`);
+        const err = new Error(`Request timed out after ${deadlineMs}ms: ${method} ${url}`);
         err.code = "TIMEOUT";
+        err.timeout_ms = deadlineMs;
         reject(err);
-      }, timeoutMs);
+      }, deadlineMs);
       deadline.unref?.();
     }
+    if (abortSignal && abortSafe) {
+      onAbort = () => {
+        req.destroy?.();
+        clearDeadline();
+        reject(makeCancelledError(method, url));
+      };
+      abortSignal.addEventListener("abort", onAbort, { once: true });
+    }
     req.on("error", (e) => {
       clearDeadline();
       reject(e);
@@ -3166,6 +3204,8 @@ var LeadbayClient = class _LeadbayClient {
         throw this.mapErrorResponse(res.status, res.body, path, res.headers);
       }
       return JSON.parse(res.body);
+    } catch (e) {
+      throw this.mapTransportError(e, `${method} ${path}`);
     } finally {
       this.releaseSemaphore();
     }
@@ -3197,6 +3237,8 @@ var LeadbayClient = class _LeadbayClient {
       if (res.status < 200 || res.status >= 300) {
         throw this.mapErrorResponse(res.status, res.body, path, res.headers);
       }
+    } catch (e) {
+      throw this.mapTransportError(e, `${method} ${path}`);
     } finally {
       this.releaseSemaphore();
     }
@@ -3234,6 +3276,8 @@ var LeadbayClient = class _LeadbayClient {
         throw this.mapErrorResponse(res.status, res.body, path, res.headers);
       }
       return JSON.parse(res.body);
+    } catch (e) {
+      throw this.mapTransportError(e, `${method} ${path}`);
     } finally {
       this.releaseSemaphore();
     }
@@ -3294,6 +3338,29 @@ var LeadbayClient = class _LeadbayClient {
       would_call: { method, path: fullPath, body: journalBody }
     };
   }
+  /**
+   * Turn httpsRequest's raw TIMEOUT rejection into the `{error:true, code, …}`
+   * envelope every other failure already speaks, so the agent gets something it
+   * can read out to the user and act on rather than a bare Error string. Any
+   * other rejection (ECONNRESET, DNS, a mapped 4xx/5xx) passes through untouched
+   * — this is a translation, not a catch-all.
+   *
+   * The code stays "TIMEOUT" so the hosted auth probe's existing branch
+   * (auth-http.ts) keeps classifying it as a transient fault and moves to the
+   * sibling region instead of declaring a live token expired.
+   */
+  mapTransportError(e, endpoint) {
+    const err = e;
+    if (err?.code !== "TIMEOUT")
+      return e;
+    const ms = err.timeout_ms ?? defaultTimeoutMs();
+    const envelope = this.makeError("TIMEOUT", `Leadbay did not respond within ${ms}ms \u2014 the request was cancelled`, "The connection was accepted but no response came back, so this is a Leadbay-side stall, not a bad request. It is transient: retry the same call once. If it times out again, tell the user Leadbay is not responding right now and offer to report it with leadbay_report_friction.", endpoint);
+    if (envelope._meta) {
+      envelope._meta.timeout_ms = ms;
+      envelope._meta.latency_ms = ms;
+    }
+    return envelope;
+  }
   mapErrorResponse(status, rawBody, endpoint, headers) {
     let parsed;
     try {
@@ -3415,6 +3482,8 @@ var LeadbayClient = class _LeadbayClient {
         this.telemetryEnabledFromStamp = false;
       }
       return observed;
+    } catch (e) {
+      throw this.mapTransportError(e, "GET /users/me");
     } finally {
       this.releaseSemaphore();
     }
@@ -27663,6 +27732,7 @@ var EMBEDDED_SENTRY_DSN = "https://301f1c433433b76132956ed5415bea19@o45058744368
 // src/telemetry-events.ts
 var EV_TOOL_CALL = "mcp tool called";
 var EV_QUOTA_HIT = "mcp quota hit";
+var EV_TOOL_TIMEOUT = "mcp tool timeout";
 var EV_TOPUP_LINK = "mcp topup link created";
 var EV_STARTUP = "mcp startup";
 var EV_MCP_UPDATE_CHECK = "mcp update check";
@@ -27673,6 +27743,7 @@ var EV_MCP_VERSION_UPDATED = "mcp version updated";
 var EV_AGENT_MEMORY_CAPTURED = "agent_memory_captured";
 var EV_AGENT_MEMORY_RECALLED = "agent_memory_recalled";
 var EV_AGENT_MEMORY_PRUNED = "agent_memory_pruned";
+var DURATION_PLAUSIBILITY_CEILING_MS = 6e5;
 var EV_FRICTION_REPORTED = "mcp friction reported";
 var EV_COMPOSITE_CALL = "mcp composite call";
 
@@ -27686,6 +27757,8 @@ var NOOP_TELEMETRY = {
   },
   captureQuotaHit: (_props, _identity) => {
   },
+  captureToolTimeout: (_props, _identity) => {
+  },
   captureTopupLink: (_props, _identity) => {
   },
   captureStartup: (_props, _identity) => {
@@ -27720,6 +27793,13 @@ function parseTelemetryEnv(raw) {
   if (v === "false" || v === "0" || v === "no" || v === "off") return false;
   return true;
 }
+function withPlausibleDuration(props) {
+  const { duration_ms, ...rest } = props;
+  if (Number.isFinite(duration_ms) && duration_ms >= 0 && duration_ms <= DURATION_PLAUSIBILITY_CEILING_MS) {
+    return { ...rest, duration_ms };
+  }
+  return { ...rest, duration_ms_raw: duration_ms, duration_implausible: true };
+}
 function initTelemetry(opts) {
   if (!parseTelemetryEnv(process.env.LEADBAY_TELEMETRY_ENABLED)) return NOOP_TELEMETRY;
   if (process.env.NODE_ENV === "test") return NOOP_TELEMETRY;
@@ -27888,14 +27968,17 @@ function initTelemetry(opts) {
       return identityPromise;
     },
     captureToolCall(props, identity) {
-      emit(EV_TOOL_CALL, { ...props }, identity);
+      emit(EV_TOOL_CALL, withPlausibleDuration(props), identity);
     },
     captureCompositeCall(props, identity) {
-      emit(EV_COMPOSITE_CALL, { ...props }, identity);
+      emit(EV_COMPOSITE_CALL, withPlausibleDuration(props), identity);
     },
     captureQuotaHit(props, identity) {
       emit(EV_QUOTA_HIT, { ...props }, identity);
     },
+    captureToolTimeout(props, identity) {
+      emit(EV_TOOL_TIMEOUT, { ...props }, identity);
+    },
     captureTopupLink(props, identity) {
       emit(EV_TOPUP_LINK, { ...props }, identity);
     },
@@ -28783,6 +28866,16 @@ function buildServer(client, opts = {}) {
       source: "business"
     };
   };
+  const captureTimeoutAlert = (toolName, envelope, triggeredBy) => {
+    const ms = envelope._meta?.timeout_ms;
+    telemetry2.captureToolTimeout({
+      tool: toolName,
+      ...typeof ms === "number" ? { timeout_ms: ms } : {},
+      ...envelope._meta?.endpoint ? { endpoint: envelope._meta.endpoint } : {},
+      ...envelope._meta?.region ? { region: envelope._meta.region } : {},
+      ...triggeredBy !== void 0 ? { triggered_by: triggeredBy } : {}
+    });
+  };
   const captureAgentMemoryTelemetry = (toolName, result) => {
     if (!result || typeof result !== "object") return;
     const meta = result._meta ?? {};
@@ -28947,7 +29040,7 @@ ${url}
           isError: true
         };
       }
-      const result = await tool.execute(client, args, {
+      const result = await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
         logger: opts.logger,
         bulkTracker: opts.bulkTracker,
         notificationsInbox: opts.notificationsInbox,
@@ -28980,7 +29073,7 @@ ${url}
           ...report.tool_called ? { tool_called: report.tool_called } : {},
           ...report.severity ? { severity: report.severity } : {}
         }) === true
-      });
+      }));
       await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
@@ -28996,6 +29089,9 @@ ${url}
               endpoint: result._meta?.endpoint
             });
           }
+          if (envCode === "TIMEOUT") {
+            captureTimeoutAlert(name, result, triggered_by);
+          }
           telemetry2.captureToolCall({
             tool: name,
             ok: false,
@@ -29126,6 +29222,9 @@ ${url}
             endpoint: err._meta?.endpoint
           });
         }
+        if (!skipAnalytics && err.code === "TIMEOUT") {
+          captureTimeoutAlert(name, err, triggered_by);
+        }
         const httpStatus2 = err._meta?.http_status;
         if (!skipAnalytics) {
           telemetry2.captureToolCall({
@@ -29374,7 +29473,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.32.0" : "0.0.0-dev";
+var VERSION = true ? "0.32.1" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var logger = {

package/dist/installer-electron.js

@@ -1804,7 +1804,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = true ? "0.32.0" : "0.0.0-dev";
+    VERSION = true ? "0.32.1" : "0.0.0-dev";
     MESSAGES = {
       en: {
         installer: {

package/dist/installer-gui.js

@@ -1067,7 +1067,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = true ? "0.32.0" : "0.0.0-dev";
+var VERSION = true ? "0.32.1" : "0.0.0-dev";
 var MESSAGES = {
   en: {
     installer: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.32.0",
+  "version": "0.32.1",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",