@leadbay/mcp 0.32.0 → 0.32.4

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog — @leadbay/mcp
 
+## 0.32.4 — 2026-09-01
+
+`leadbay_account_status.notifications` was permanently `[]` on the hosted server
+(product#4009). Same shape as product#4005: `buildServerFromClient` builds every
+hosted server without a `notificationsInbox`, `BuildServerOptions` makes it
+optional, so it compiled and failed silently.
+
+**Not fixed by wiring the inbox, because the inbox cannot exist there.** It is
+fed by a WS listener whose ticket (`GET /auth/ws`) is per-account, which is
+meaningless on a multi-tenant process, and the streamable transport builds a
+fresh `Server` per request so nothing would survive to be cached. Porting it
+would be the same mistake in a third place.
+
+`GET /notifications` is already per-account and already durable. On hosted the
+ledger IS the inbox, so `account_status` reads it on demand when no inbox is
+wired. Stdio is unchanged and still free — the WS listener already has the
+answer, and the ledger is not called.
+
+- `fetchTerminalNotifications(client)` in `notifications/catch-up.ts` returns
+  terminal, unseen entries directly. `isTerminalUnseen` is extracted so inbox
+  seeding and the inbox-less read cannot disagree about what counts.
+- A notifications failure resolves to `[]` rather than throwing. `account_status`
+  is the daily entry point; a ledger hiccup must not take the check-in down.
+- **Deliberately not done: `_meta.notifications` still does not ride hosted tool
+  responses.** Reviving it would mean a `GET /notifications` per tool call to
+  decorate every response. The cost lands on the check-in entry point only,
+  which is where the daily-rhythm channel is actually read.
+
 ## 0.32.0 — 2026-09-01
 
 A poll-budget timeout stops being an error (product#4007). The import wizard's

package/README.md

@@ -634,7 +634,7 @@ Use `dry_run: true` to validate domain formatting and wizard reachability withou
 | `LEADBAY_MOCK` | no | unset | `"1"` serves all reads from on-disk fixtures (dev only) |
 | `LEADBAY_MOCK_DIR` | no | `./.context/leadbay-live-shapes/` | Fixture dir for mock mode |
 | `LEADBAY_LOG_LEVEL` | no | `error` | `debug` \| `info` \| `error`, logs to stderr |
-| `LEADBAY_TIMEOUT_MS` | no | (client default) | Per-request timeout override |
+| `LEADBAY_TIMEOUT_MS` | no | `600000` | Backstop deadline for a single outbound Leadbay request, for the case where nothing cancels it. Not a latency budget: long work (enrichment, bulk qualify, import) is launched and polled, and a cancelled tool call already closes its own requests. On expiry the socket is closed and the tool returns a `TIMEOUT` error. Set `0` to disable the backstop. |
 
 > ⚠️ **Set `LEADBAY_REGION` explicitly.** If you don't, the server probes BOTH `api-us.leadbay.app` and `api-fr.leadbay.app` in parallel with your bearer token attached, sending the token to a backend that doesn't own your account. The `install` and `login` subcommands enforce `--region` for exactly this reason; the runtime auto-probe is a backwards-compat fallback, not a recommended setting.
 
@@ -657,6 +657,7 @@ Use `dry_run: true` to validate domain formatting and wizard reachability withou
 | `mcp tool called` | Every tool invocation | `tool`, `ok`, `duration_ms`, `format`, `bytes`, `error_code` (if failed) |
 | `mcp quota hit` | When the API returns `QUOTA_EXCEEDED` (HTTP 429/402) | `tool`, `retry_after_s`, `endpoint` |
 | `mcp topup link created` | When `leadbay_create_topup_link` returns a checkout URL | `tool` (the URL itself is **never** captured) |
+| `mcp tool timeout` | When an outbound Leadbay request exceeds `LEADBAY_TIMEOUT_MS` | `tool`, `timeout_ms`, `endpoint`, `region` |
 
 After your first authenticated call, your PostHog `distinctId` is set to your Leadbay account email so MCP events consolidate with web-app events for the same person. Events also carry `$groups.organization` so org-level rollups work.
 

package/dist/bin.js

@@ -11,20 +11,47 @@ var __export = (target, all) => {
 
 // ../core/dist/client.js
 import https from "https";
+import { AsyncLocalStorage } from "async_hooks";
 import { readdirSync, readFileSync, existsSync } from "fs";
 import { join } from "path";
-function httpsRequest(method, url, headers, body, timeoutMs) {
+function defaultTimeoutMs() {
+  const raw = process.env.LEADBAY_TIMEOUT_MS;
+  if (raw === void 0 || raw.trim() === "")
+    return DEFAULT_REQUEST_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) ? n : DEFAULT_REQUEST_TIMEOUT_MS;
+}
+function runWithRequestSignal(signal, fn) {
+  return requestSignalStore.run(signal, fn);
+}
+function makeCancelledError(method, url) {
+  const err = new Error(`Request cancelled: ${method} ${url}`);
+  err.name = "AbortError";
+  err.code = "CANCELLED";
+  return err;
+}
+function httpsRequest(method, url, headers, body, timeoutMs, signal) {
+  const deadlineMs = timeoutMs ?? defaultTimeoutMs();
+  const abortSignal = signal ?? requestSignalStore.getStore();
+  const abortSafe = method.toUpperCase() === "GET";
   return new Promise((resolve, reject) => {
     const start = Date.now();
+    if (abortSignal?.aborted) {
+      reject(makeCancelledError(method, url));
+      return;
+    }
     const parsed = new URL(url);
     const reqHeaders = { ...headers };
     if (body !== void 0) {
       reqHeaders["Content-Length"] = Buffer.byteLength(body);
     }
     let deadline;
+    let onAbort;
     const clearDeadline = () => {
       if (deadline !== void 0)
         clearTimeout(deadline);
+      if (onAbort)
+        abortSignal?.removeEventListener("abort", onAbort);
     };
     const req = https.request({
       hostname: parsed.hostname,
@@ -45,15 +72,24 @@ function httpsRequest(method, url, headers, body, timeoutMs) {
         });
       });
     });
-    if (timeoutMs !== void 0 && timeoutMs > 0) {
+    if (deadlineMs > 0) {
       deadline = setTimeout(() => {
         req.destroy?.();
-        const err = new Error(`Request timed out after ${timeoutMs}ms: ${method} ${url}`);
+        const err = new Error(`Request timed out after ${deadlineMs}ms: ${method} ${url}`);
         err.code = "TIMEOUT";
+        err.timeout_ms = deadlineMs;
         reject(err);
-      }, timeoutMs);
+      }, deadlineMs);
       deadline.unref?.();
     }
+    if (abortSignal && abortSafe) {
+      onAbort = () => {
+        req.destroy?.();
+        clearDeadline();
+        reject(makeCancelledError(method, url));
+      };
+      abortSignal.addEventListener("abort", onAbort, { once: true });
+    }
     req.on("error", (e) => {
       clearDeadline();
       reject(e);
@@ -177,7 +213,7 @@ function parseRetryAfter(value) {
   }
   return null;
 }
-var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
+var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, DEFAULT_REQUEST_TIMEOUT_MS, requestSignalStore, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
 var init_client = __esm({
   "../core/dist/client.js"() {
     "use strict";
@@ -185,6 +221,8 @@ var init_client = __esm({
     TASTE_CACHE_TTL_MS = 10 * 60 * 1e3;
     ME_CACHE_TTL_MS = 60 * 1e3;
     MAX_CONCURRENT = 5;
+    DEFAULT_REQUEST_TIMEOUT_MS = 6e5;
+    requestSignalStore = new AsyncLocalStorage();
     REGIONS = {
       us: "https://api-us.leadbay.app",
       fr: "https://api-fr.leadbay.app"
@@ -408,6 +446,8 @@ var init_client = __esm({
             throw this.mapErrorResponse(res.status, res.body, path, res.headers);
           }
           return JSON.parse(res.body);
+        } catch (e) {
+          throw this.mapTransportError(e, `${method} ${path}`);
         } finally {
           this.releaseSemaphore();
         }
@@ -439,6 +479,8 @@ var init_client = __esm({
           if (res.status < 200 || res.status >= 300) {
             throw this.mapErrorResponse(res.status, res.body, path, res.headers);
           }
+        } catch (e) {
+          throw this.mapTransportError(e, `${method} ${path}`);
         } finally {
           this.releaseSemaphore();
         }
@@ -476,6 +518,8 @@ var init_client = __esm({
             throw this.mapErrorResponse(res.status, res.body, path, res.headers);
           }
           return JSON.parse(res.body);
+        } catch (e) {
+          throw this.mapTransportError(e, `${method} ${path}`);
         } finally {
           this.releaseSemaphore();
         }
@@ -536,6 +580,29 @@ var init_client = __esm({
           would_call: { method, path: fullPath, body: journalBody }
         };
       }
+      /**
+       * Turn httpsRequest's raw TIMEOUT rejection into the `{error:true, code, …}`
+       * envelope every other failure already speaks, so the agent gets something it
+       * can read out to the user and act on rather than a bare Error string. Any
+       * other rejection (ECONNRESET, DNS, a mapped 4xx/5xx) passes through untouched
+       * — this is a translation, not a catch-all.
+       *
+       * The code stays "TIMEOUT" so the hosted auth probe's existing branch
+       * (auth-http.ts) keeps classifying it as a transient fault and moves to the
+       * sibling region instead of declaring a live token expired.
+       */
+      mapTransportError(e, endpoint) {
+        const err = e;
+        if (err?.code !== "TIMEOUT")
+          return e;
+        const ms = err.timeout_ms ?? defaultTimeoutMs();
+        const envelope = this.makeError("TIMEOUT", `Leadbay did not respond within ${ms}ms \u2014 the request was cancelled`, "The connection was accepted but no response came back, so this is a Leadbay-side stall, not a bad request. It is transient: retry the same call once. If it times out again, tell the user Leadbay is not responding right now and offer to report it with leadbay_report_friction.", endpoint);
+        if (envelope._meta) {
+          envelope._meta.timeout_ms = ms;
+          envelope._meta.latency_ms = ms;
+        }
+        return envelope;
+      }
       mapErrorResponse(status, rawBody, endpoint, headers) {
         let parsed;
         try {
@@ -657,6 +724,8 @@ var init_client = __esm({
             this.telemetryEnabledFromStamp = false;
           }
           return observed;
+        } catch (e) {
+          throw this.mapTransportError(e, "GET /users/me");
         } finally {
           this.releaseSemaphore();
         }
@@ -5499,6 +5568,28 @@ var init_inbox = __esm({
 });
 
 // ../core/dist/notifications/catch-up.js
+function isTerminalUnseen(n) {
+  if (!n.bulk_progress)
+    return false;
+  if (n.in_progress)
+    return false;
+  if (n.first_seen_at)
+    return false;
+  return true;
+}
+async function fetchTerminalNotifications(client, opts = {}) {
+  try {
+    const page = await client.listNotifications({
+      archived: false,
+      page: 0,
+      count: opts.count ?? DEFAULT_COUNT
+    });
+    return page.items.filter(isTerminalUnseen).map(toInboxEntry);
+  } catch (err) {
+    opts.logger?.warn?.(`notifications.fetch_terminal failed: ${err?.message ?? err?.code ?? err}`);
+    return [];
+  }
+}
 async function catchUpNotifications(client, inbox, opts = {}) {
   const count = opts.count ?? DEFAULT_COUNT;
   let added = 0;
@@ -5509,11 +5600,7 @@ async function catchUpNotifications(client, inbox, opts = {}) {
       count
     });
     for (const n of page.items) {
-      if (!n.bulk_progress)
-        continue;
-      if (n.in_progress)
-        continue;
-      if (n.first_seen_at)
+      if (!isTerminalUnseen(n))
         continue;
       const sizeBefore = inbox.size();
       inbox.record(n);
@@ -5530,6 +5617,7 @@ var DEFAULT_COUNT;
 var init_catch_up = __esm({
   "../core/dist/notifications/catch-up.js"() {
     "use strict";
+    init_revise_hint();
     DEFAULT_COUNT = 50;
   }
 });
@@ -20649,6 +20737,7 @@ var init_account_status = __esm({
   "../core/dist/composite/account-status.js"() {
     "use strict";
     init_agent_memory();
+    init_catch_up();
     init_credits_helpers();
     init_tool_descriptions_generated();
     accountStatus = {
@@ -20770,6 +20859,8 @@ var init_account_status = __esm({
             ctx?.logger?.warn?.(`account_status: quota_status failed: ${err?.message ?? err?.code ?? err}`);
           }
         }
+        const inbox = ctx?.notificationsInbox;
+        const notifications = inbox ? inbox.list() : await fetchTerminalNotifications(client, { logger: ctx?.logger });
         const lensId = me.last_requested_lens ?? null;
         const lensAsked = typeof ctx?.triggered_by === "string" && /\b(lens|lenses|audience|targeting|segment|filter)\b/i.test(ctx.triggered_by);
         let last_requested_lens_name = null;
@@ -20810,13 +20901,12 @@ var init_account_status = __esm({
           // on /me are intentionally NOT surfaced — they're defunct (see
           // SHAPE-DRIFT.md probe round 4).
           quota,
-          // Inbox of terminal bulk-progress notifications. Same shape the MCP
-          // server attaches to `_meta.notifications` on every tool response —
-          // duplicated here as a top-level field so the agent's daily-rhythm
-          // check-in (this composite) sees them without having to read _meta.
-          // Empty array when the WS listener isn't wired (OpenClaw, tests) OR
-          // when nothing has completed since the last ack.
-          notifications: ctx?.notificationsInbox?.list() ?? [],
+          // Terminal bulk-progress notifications. Same shape the MCP server
+          // attaches to `_meta.notifications` on every tool response — carried
+          // here as a top-level field so the agent's daily-rhythm check-in (this
+          // composite) sees them without reading _meta. See the read above for
+          // why hosted takes a different path to the same list.
+          notifications,
           // Non-null ONLY when the quota_status call failed. The agent must treat
           // this as "could not read quota" — NOT as zero usage, and NOT as a broken
           // login (the token just authenticated /users/me above). product#3761.
@@ -26464,6 +26554,7 @@ __export(dist_exports, {
   AgentMemorySourceSchema: () => AgentMemorySourceSchema,
   AgentMemoryTombstoneSchema: () => AgentMemoryTombstoneSchema,
   COMPOSITE_FILE_TOOL_NAMES: () => COMPOSITE_FILE_TOOL_NAMES,
+  DEFAULT_REQUEST_TIMEOUT_MS: () => DEFAULT_REQUEST_TIMEOUT_MS,
   GETTING_STARTED_MANIFEST: () => GETTING_STARTED_MANIFEST,
   InMemoryBulkStore: () => InMemoryBulkStore,
   LeadbayClient: () => LeadbayClient,
@@ -26587,6 +26678,7 @@ __export(dist_exports, {
   resolveImportRows: () => resolveImportRows,
   resolveRegion: () => resolveRegion,
   reviseHintFor: () => reviseHintFor,
+  runWithRequestSignal: () => runWithRequestSignal,
   scanPortfolioSignals: () => scanPortfolioSignals,
   seedCandidates: () => seedCandidates,
   selectLeads: () => selectLeads,
@@ -29837,6 +29929,7 @@ var BUILTIN_WIDGETS_PARAGRAPH = 'Prefer host-native widgets over inline markdown
 
 // src/server.ts
 init_dist();
+init_dist();
 
 // src/telemetry.ts
 import { PostHog } from "posthog-node";
@@ -29850,6 +29943,7 @@ var EMBEDDED_SENTRY_DSN = "https://301f1c433433b76132956ed5415bea19@o45058744368
 // src/telemetry-events.ts
 var EV_TOOL_CALL = "mcp tool called";
 var EV_QUOTA_HIT = "mcp quota hit";
+var EV_TOOL_TIMEOUT = "mcp tool timeout";
 var EV_TOPUP_LINK = "mcp topup link created";
 var EV_STARTUP = "mcp startup";
 var EV_MCP_UPDATE_CHECK = "mcp update check";
@@ -29860,6 +29954,7 @@ var EV_MCP_VERSION_UPDATED = "mcp version updated";
 var EV_AGENT_MEMORY_CAPTURED = "agent_memory_captured";
 var EV_AGENT_MEMORY_RECALLED = "agent_memory_recalled";
 var EV_AGENT_MEMORY_PRUNED = "agent_memory_pruned";
+var DURATION_PLAUSIBILITY_CEILING_MS = 6e5;
 var EV_FRICTION_REPORTED = "mcp friction reported";
 var EV_COMPOSITE_CALL = "mcp composite call";
 
@@ -29873,6 +29968,8 @@ var NOOP_TELEMETRY = {
   },
   captureQuotaHit: (_props, _identity) => {
   },
+  captureToolTimeout: (_props, _identity) => {
+  },
   captureTopupLink: (_props, _identity) => {
   },
   captureStartup: (_props, _identity) => {
@@ -29907,6 +30004,13 @@ function parseTelemetryEnv(raw) {
   if (v === "false" || v === "0" || v === "no" || v === "off") return false;
   return true;
 }
+function withPlausibleDuration(props) {
+  const { duration_ms, ...rest } = props;
+  if (Number.isFinite(duration_ms) && duration_ms >= 0 && duration_ms <= DURATION_PLAUSIBILITY_CEILING_MS) {
+    return { ...rest, duration_ms };
+  }
+  return { ...rest, duration_ms_raw: duration_ms, duration_implausible: true };
+}
 function initTelemetry(opts) {
   if (!parseTelemetryEnv(process.env.LEADBAY_TELEMETRY_ENABLED)) return NOOP_TELEMETRY;
   if (process.env.NODE_ENV === "test") return NOOP_TELEMETRY;
@@ -30075,14 +30179,17 @@ function initTelemetry(opts) {
       return identityPromise;
     },
     captureToolCall(props, identity) {
-      emit(EV_TOOL_CALL, { ...props }, identity);
+      emit(EV_TOOL_CALL, withPlausibleDuration(props), identity);
     },
     captureCompositeCall(props, identity) {
-      emit(EV_COMPOSITE_CALL, { ...props }, identity);
+      emit(EV_COMPOSITE_CALL, withPlausibleDuration(props), identity);
     },
     captureQuotaHit(props, identity) {
       emit(EV_QUOTA_HIT, { ...props }, identity);
     },
+    captureToolTimeout(props, identity) {
+      emit(EV_TOOL_TIMEOUT, { ...props }, identity);
+    },
     captureTopupLink(props, identity) {
       emit(EV_TOPUP_LINK, { ...props }, identity);
     },
@@ -30992,6 +31099,16 @@ function buildServer(client, opts = {}) {
       source: "business"
     };
   };
+  const captureTimeoutAlert = (toolName, envelope, triggeredBy) => {
+    const ms = envelope._meta?.timeout_ms;
+    telemetry.captureToolTimeout({
+      tool: toolName,
+      ...typeof ms === "number" ? { timeout_ms: ms } : {},
+      ...envelope._meta?.endpoint ? { endpoint: envelope._meta.endpoint } : {},
+      ...envelope._meta?.region ? { region: envelope._meta.region } : {},
+      ...triggeredBy !== void 0 ? { triggered_by: triggeredBy } : {}
+    });
+  };
   const captureAgentMemoryTelemetry = (toolName, result) => {
     if (!result || typeof result !== "object") return;
     const meta = result._meta ?? {};
@@ -31156,7 +31273,7 @@ ${url}
           isError: true
         };
       }
-      const result = await tool.execute(client, args, {
+      const result = await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
         logger: opts.logger,
         bulkTracker: opts.bulkTracker,
         notificationsInbox: opts.notificationsInbox,
@@ -31189,7 +31306,7 @@ ${url}
           ...report.tool_called ? { tool_called: report.tool_called } : {},
           ...report.severity ? { severity: report.severity } : {}
         }) === true
-      });
+      }));
       await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
@@ -31205,6 +31322,9 @@ ${url}
               endpoint: result._meta?.endpoint
             });
           }
+          if (envCode === "TIMEOUT") {
+            captureTimeoutAlert(name, result, triggered_by);
+          }
           telemetry.captureToolCall({
             tool: name,
             ok: false,
@@ -31335,6 +31455,9 @@ ${url}
             endpoint: err._meta?.endpoint
           });
         }
+        if (!skipAnalytics && err.code === "TIMEOUT") {
+          captureTimeoutAlert(name, err, triggered_by);
+        }
         const httpStatus2 = err._meta?.http_status;
         if (!skipAnalytics) {
           telemetry.captureToolCall({
@@ -32838,7 +32961,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.32.0";
+var VERSION = "0.32.4";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 

package/dist/http-server.js

@@ -2792,30 +2792,59 @@ function getPrompt(name, args = {}) {
 
 // ../core/dist/client.js
 import https from "https";
+import { AsyncLocalStorage } from "async_hooks";
 import { readdirSync, readFileSync, existsSync } from "fs";
 import { join } from "path";
 var LENS_CACHE_TTL_MS = 5 * 60 * 1e3;
 var TASTE_CACHE_TTL_MS = 10 * 60 * 1e3;
 var ME_CACHE_TTL_MS = 60 * 1e3;
 var MAX_CONCURRENT = 5;
+var DEFAULT_REQUEST_TIMEOUT_MS = 6e5;
+function defaultTimeoutMs() {
+  const raw = process.env.LEADBAY_TIMEOUT_MS;
+  if (raw === void 0 || raw.trim() === "")
+    return DEFAULT_REQUEST_TIMEOUT_MS;
+  const n = Number(raw);
+  return Number.isFinite(n) ? n : DEFAULT_REQUEST_TIMEOUT_MS;
+}
+var requestSignalStore = new AsyncLocalStorage();
+function runWithRequestSignal(signal, fn) {
+  return requestSignalStore.run(signal, fn);
+}
+function makeCancelledError(method, url) {
+  const err = new Error(`Request cancelled: ${method} ${url}`);
+  err.name = "AbortError";
+  err.code = "CANCELLED";
+  return err;
+}
 var REGIONS = {
   us: "https://api-us.leadbay.app",
   fr: "https://api-fr.leadbay.app"
 };
 var API_VERSION = "1.6";
 var API_PREFIX = `/${API_VERSION}`;
-function httpsRequest(method, url, headers, body, timeoutMs) {
+function httpsRequest(method, url, headers, body, timeoutMs, signal) {
+  const deadlineMs = timeoutMs ?? defaultTimeoutMs();
+  const abortSignal = signal ?? requestSignalStore.getStore();
+  const abortSafe = method.toUpperCase() === "GET";
   return new Promise((resolve, reject) => {
     const start = Date.now();
+    if (abortSignal?.aborted) {
+      reject(makeCancelledError(method, url));
+      return;
+    }
     const parsed = new URL(url);
     const reqHeaders = { ...headers };
     if (body !== void 0) {
       reqHeaders["Content-Length"] = Buffer.byteLength(body);
     }
     let deadline;
+    let onAbort;
     const clearDeadline = () => {
       if (deadline !== void 0)
         clearTimeout(deadline);
+      if (onAbort)
+        abortSignal?.removeEventListener("abort", onAbort);
     };
     const req = https.request({
       hostname: parsed.hostname,
@@ -2836,15 +2865,24 @@ function httpsRequest(method, url, headers, body, timeoutMs) {
         });
       });
     });
-    if (timeoutMs !== void 0 && timeoutMs > 0) {
+    if (deadlineMs > 0) {
       deadline = setTimeout(() => {
         req.destroy?.();
-        const err = new Error(`Request timed out after ${timeoutMs}ms: ${method} ${url}`);
+        const err = new Error(`Request timed out after ${deadlineMs}ms: ${method} ${url}`);
         err.code = "TIMEOUT";
+        err.timeout_ms = deadlineMs;
         reject(err);
-      }, timeoutMs);
+      }, deadlineMs);
       deadline.unref?.();
     }
+    if (abortSignal && abortSafe) {
+      onAbort = () => {
+        req.destroy?.();
+        clearDeadline();
+        reject(makeCancelledError(method, url));
+      };
+      abortSignal.addEventListener("abort", onAbort, { once: true });
+    }
     req.on("error", (e) => {
       clearDeadline();
       reject(e);
@@ -3166,6 +3204,8 @@ var LeadbayClient = class _LeadbayClient {
         throw this.mapErrorResponse(res.status, res.body, path, res.headers);
       }
       return JSON.parse(res.body);
+    } catch (e) {
+      throw this.mapTransportError(e, `${method} ${path}`);
     } finally {
       this.releaseSemaphore();
     }
@@ -3197,6 +3237,8 @@ var LeadbayClient = class _LeadbayClient {
       if (res.status < 200 || res.status >= 300) {
         throw this.mapErrorResponse(res.status, res.body, path, res.headers);
       }
+    } catch (e) {
+      throw this.mapTransportError(e, `${method} ${path}`);
     } finally {
       this.releaseSemaphore();
     }
@@ -3234,6 +3276,8 @@ var LeadbayClient = class _LeadbayClient {
         throw this.mapErrorResponse(res.status, res.body, path, res.headers);
       }
       return JSON.parse(res.body);
+    } catch (e) {
+      throw this.mapTransportError(e, `${method} ${path}`);
     } finally {
       this.releaseSemaphore();
     }
@@ -3294,6 +3338,29 @@ var LeadbayClient = class _LeadbayClient {
       would_call: { method, path: fullPath, body: journalBody }
     };
   }
+  /**
+   * Turn httpsRequest's raw TIMEOUT rejection into the `{error:true, code, …}`
+   * envelope every other failure already speaks, so the agent gets something it
+   * can read out to the user and act on rather than a bare Error string. Any
+   * other rejection (ECONNRESET, DNS, a mapped 4xx/5xx) passes through untouched
+   * — this is a translation, not a catch-all.
+   *
+   * The code stays "TIMEOUT" so the hosted auth probe's existing branch
+   * (auth-http.ts) keeps classifying it as a transient fault and moves to the
+   * sibling region instead of declaring a live token expired.
+   */
+  mapTransportError(e, endpoint) {
+    const err = e;
+    if (err?.code !== "TIMEOUT")
+      return e;
+    const ms = err.timeout_ms ?? defaultTimeoutMs();
+    const envelope = this.makeError("TIMEOUT", `Leadbay did not respond within ${ms}ms \u2014 the request was cancelled`, "The connection was accepted but no response came back, so this is a Leadbay-side stall, not a bad request. It is transient: retry the same call once. If it times out again, tell the user Leadbay is not responding right now and offer to report it with leadbay_report_friction.", endpoint);
+    if (envelope._meta) {
+      envelope._meta.timeout_ms = ms;
+      envelope._meta.latency_ms = ms;
+    }
+    return envelope;
+  }
   mapErrorResponse(status, rawBody, endpoint, headers) {
     let parsed;
     try {
@@ -3415,6 +3482,8 @@ var LeadbayClient = class _LeadbayClient {
         this.telemetryEnabledFromStamp = false;
       }
       return observed;
+    } catch (e) {
+      throw this.mapTransportError(e, "GET /users/me");
     } finally {
       this.releaseSemaphore();
     }
@@ -8032,9 +8101,82 @@ var COMPOSITE_FILE_TOOL_NAMES = /* @__PURE__ */ new Set([
   "leadbay_tour_plan"
 ]);
 
+// ../core/dist/notifications/revise-hint.js
+var HINT_BULK_ENRICH = "Contact enrichment just finished. Revise any prior output that named these leads' contacts (outreach drafts, contact lists, recommended-lead lists with contact_count, NEXT STEPS asking the user to wait for emails / phones). Re-fetch contacts via leadbay_get_contacts for the affected leads.";
+var HINT_BULK_QUALIFY = "Lead qualification just finished. Revise any prior lead list / ranking / outreach shortlist that depended on ai_agent_lead_score for these leads \u2014 today's leads, top-of-inbox, followups maps, prepare-outreach shortlists. Re-pull qualification answers via leadbay_research_lead_by_id or re-rank via leadbay_pull_leads.";
+var HINT_IMPORT = "CSV / CRM import just finished. Revise any prior output that referenced 'leads available' before the import landed \u2014 lead lists pulled from the affected lens, 'what's new today', followup planning. Re-pull the affected lens via leadbay_pull_leads / leadbay_pull_followups.";
+var HINT_OTHER = "Background work just completed. If you referenced its subject in prior output, re-fetch the affected data and revise.";
+function reviseHintFor(kind) {
+  switch (kind) {
+    case "bulk_enrich":
+      return HINT_BULK_ENRICH;
+    case "bulk_qualify":
+      return HINT_BULK_QUALIFY;
+    case "import":
+      return HINT_IMPORT;
+    default:
+      return HINT_OTHER;
+  }
+}
+function inferKind(n) {
+  if (n.links.some((l) => l.type === "bulk_enrichment"))
+    return "bulk_enrich";
+  if (n.file_import_id)
+    return "import";
+  if (n.bulk_progress)
+    return "bulk_qualify";
+  return "other";
+}
+function anchorIdFor(n, kind) {
+  if (kind === "bulk_enrich") {
+    const link = n.links.find((l) => l.type === "bulk_enrichment");
+    return link ? String(link.id) : null;
+  }
+  if (kind === "import")
+    return n.file_import_id;
+  return null;
+}
+function toInboxEntry(n) {
+  const kind = inferKind(n);
+  return {
+    notification_id: n.id,
+    kind,
+    anchor_id: anchorIdFor(n, kind),
+    title: n.title,
+    bulk_progress: n.bulk_progress,
+    completed_at: n.updated_at,
+    revise_hint: reviseHintFor(kind)
+  };
+}
+
 // ../core/dist/notifications/inbox.js
 var DEFAULT_TTL_MS = 24 * 60 * 60 * 1e3;
 
+// ../core/dist/notifications/catch-up.js
+var DEFAULT_COUNT = 50;
+function isTerminalUnseen(n) {
+  if (!n.bulk_progress)
+    return false;
+  if (n.in_progress)
+    return false;
+  if (n.first_seen_at)
+    return false;
+  return true;
+}
+async function fetchTerminalNotifications(client, opts = {}) {
+  try {
+    const page = await client.listNotifications({
+      archived: false,
+      page: 0,
+      count: opts.count ?? DEFAULT_COUNT
+    });
+    return page.items.filter(isTerminalUnseen).map(toInboxEntry);
+  } catch (err) {
+    opts.logger?.warn?.(`notifications.fetch_terminal failed: ${err?.message ?? err?.code ?? err}`);
+    return [];
+  }
+}
+
 // ../core/dist/tool-descriptions.generated.js
 var leadbay_account_history = `## WHEN TO USE
 
@@ -22421,6 +22563,8 @@ var accountStatus = {
         ctx?.logger?.warn?.(`account_status: quota_status failed: ${err?.message ?? err?.code ?? err}`);
       }
     }
+    const inbox = ctx?.notificationsInbox;
+    const notifications = inbox ? inbox.list() : await fetchTerminalNotifications(client, { logger: ctx?.logger });
     const lensId = me.last_requested_lens ?? null;
     const lensAsked = typeof ctx?.triggered_by === "string" && /\b(lens|lenses|audience|targeting|segment|filter)\b/i.test(ctx.triggered_by);
     let last_requested_lens_name = null;
@@ -22461,13 +22605,12 @@ var accountStatus = {
       // on /me are intentionally NOT surfaced — they're defunct (see
       // SHAPE-DRIFT.md probe round 4).
       quota,
-      // Inbox of terminal bulk-progress notifications. Same shape the MCP
-      // server attaches to `_meta.notifications` on every tool response —
-      // duplicated here as a top-level field so the agent's daily-rhythm
-      // check-in (this composite) sees them without having to read _meta.
-      // Empty array when the WS listener isn't wired (OpenClaw, tests) OR
-      // when nothing has completed since the last ack.
-      notifications: ctx?.notificationsInbox?.list() ?? [],
+      // Terminal bulk-progress notifications. Same shape the MCP server
+      // attaches to `_meta.notifications` on every tool response — carried
+      // here as a top-level field so the agent's daily-rhythm check-in (this
+      // composite) sees them without reading _meta. See the read above for
+      // why hosted takes a different path to the same list.
+      notifications,
       // Non-null ONLY when the quota_status call failed. The agent must treat
       // this as "could not read quota" — NOT as zero usage, and NOT as a broken
       // login (the token just authenticated /users/me above). product#3761.
@@ -22481,7 +22624,7 @@ var accountStatus = {
 
 // ../core/dist/composite/bulk-qualify-leads.js
 var PAGE_SIZE = 50;
-var DEFAULT_COUNT = 10;
+var DEFAULT_COUNT2 = 10;
 var MAX_COUNT = 25;
 var DEFAULT_PER_LEAD_BUDGET_MS = 9e4;
 var DEFAULT_TOTAL_BUDGET_MS2 = 5 * 6e4;
@@ -22529,7 +22672,7 @@ var bulkQualifyLeads = {
     properties: {
       count: {
         type: "number",
-        description: `How many fresh leads to qualify (default ${DEFAULT_COUNT}, max ${MAX_COUNT})`
+        description: `How many fresh leads to qualify (default ${DEFAULT_COUNT2}, max ${MAX_COUNT})`
       },
       leadIds: {
         type: "array",
@@ -22620,7 +22763,7 @@ var bulkQualifyLeads = {
     ]
   },
   execute: async (client, params, ctx) => {
-    const wantCount = Math.min(params.count ?? DEFAULT_COUNT, MAX_COUNT);
+    const wantCount = Math.min(params.count ?? DEFAULT_COUNT2, MAX_COUNT);
     const perLeadBudget = params.per_lead_budget_ms ?? DEFAULT_PER_LEAD_BUDGET_MS;
     const totalBudget = params.total_budget_ms ?? DEFAULT_TOTAL_BUDGET_MS2;
     const totalDeadline = Date.now() + totalBudget;
@@ -27663,6 +27806,7 @@ var EMBEDDED_SENTRY_DSN = "https://301f1c433433b76132956ed5415bea19@o45058744368
 // src/telemetry-events.ts
 var EV_TOOL_CALL = "mcp tool called";
 var EV_QUOTA_HIT = "mcp quota hit";
+var EV_TOOL_TIMEOUT = "mcp tool timeout";
 var EV_TOPUP_LINK = "mcp topup link created";
 var EV_STARTUP = "mcp startup";
 var EV_MCP_UPDATE_CHECK = "mcp update check";
@@ -27673,6 +27817,7 @@ var EV_MCP_VERSION_UPDATED = "mcp version updated";
 var EV_AGENT_MEMORY_CAPTURED = "agent_memory_captured";
 var EV_AGENT_MEMORY_RECALLED = "agent_memory_recalled";
 var EV_AGENT_MEMORY_PRUNED = "agent_memory_pruned";
+var DURATION_PLAUSIBILITY_CEILING_MS = 6e5;
 var EV_FRICTION_REPORTED = "mcp friction reported";
 var EV_COMPOSITE_CALL = "mcp composite call";
 
@@ -27686,6 +27831,8 @@ var NOOP_TELEMETRY = {
   },
   captureQuotaHit: (_props, _identity) => {
   },
+  captureToolTimeout: (_props, _identity) => {
+  },
   captureTopupLink: (_props, _identity) => {
   },
   captureStartup: (_props, _identity) => {
@@ -27720,6 +27867,13 @@ function parseTelemetryEnv(raw) {
   if (v === "false" || v === "0" || v === "no" || v === "off") return false;
   return true;
 }
+function withPlausibleDuration(props) {
+  const { duration_ms, ...rest } = props;
+  if (Number.isFinite(duration_ms) && duration_ms >= 0 && duration_ms <= DURATION_PLAUSIBILITY_CEILING_MS) {
+    return { ...rest, duration_ms };
+  }
+  return { ...rest, duration_ms_raw: duration_ms, duration_implausible: true };
+}
 function initTelemetry(opts) {
   if (!parseTelemetryEnv(process.env.LEADBAY_TELEMETRY_ENABLED)) return NOOP_TELEMETRY;
   if (process.env.NODE_ENV === "test") return NOOP_TELEMETRY;
@@ -27888,14 +28042,17 @@ function initTelemetry(opts) {
       return identityPromise;
     },
     captureToolCall(props, identity) {
-      emit(EV_TOOL_CALL, { ...props }, identity);
+      emit(EV_TOOL_CALL, withPlausibleDuration(props), identity);
     },
     captureCompositeCall(props, identity) {
-      emit(EV_COMPOSITE_CALL, { ...props }, identity);
+      emit(EV_COMPOSITE_CALL, withPlausibleDuration(props), identity);
     },
     captureQuotaHit(props, identity) {
       emit(EV_QUOTA_HIT, { ...props }, identity);
     },
+    captureToolTimeout(props, identity) {
+      emit(EV_TOOL_TIMEOUT, { ...props }, identity);
+    },
     captureTopupLink(props, identity) {
       emit(EV_TOPUP_LINK, { ...props }, identity);
     },
@@ -28783,6 +28940,16 @@ function buildServer(client, opts = {}) {
       source: "business"
     };
   };
+  const captureTimeoutAlert = (toolName, envelope, triggeredBy) => {
+    const ms = envelope._meta?.timeout_ms;
+    telemetry2.captureToolTimeout({
+      tool: toolName,
+      ...typeof ms === "number" ? { timeout_ms: ms } : {},
+      ...envelope._meta?.endpoint ? { endpoint: envelope._meta.endpoint } : {},
+      ...envelope._meta?.region ? { region: envelope._meta.region } : {},
+      ...triggeredBy !== void 0 ? { triggered_by: triggeredBy } : {}
+    });
+  };
   const captureAgentMemoryTelemetry = (toolName, result) => {
     if (!result || typeof result !== "object") return;
     const meta = result._meta ?? {};
@@ -28947,7 +29114,7 @@ ${url}
           isError: true
         };
       }
-      const result = await tool.execute(client, args, {
+      const result = await runWithRequestSignal(extra.signal, () => tool.execute(client, args, {
         logger: opts.logger,
         bulkTracker: opts.bulkTracker,
         notificationsInbox: opts.notificationsInbox,
@@ -28980,7 +29147,7 @@ ${url}
           ...report.tool_called ? { tool_called: report.tool_called } : {},
           ...report.severity ? { severity: report.severity } : {}
         }) === true
-      });
+      }));
       await maybeAttachUpdate(name, result);
       maybeAttachNotifications(result);
       if (result && typeof result === "object" && result.error === true) {
@@ -28996,6 +29163,9 @@ ${url}
               endpoint: result._meta?.endpoint
             });
           }
+          if (envCode === "TIMEOUT") {
+            captureTimeoutAlert(name, result, triggered_by);
+          }
           telemetry2.captureToolCall({
             tool: name,
             ok: false,
@@ -29126,6 +29296,9 @@ ${url}
             endpoint: err._meta?.endpoint
           });
         }
+        if (!skipAnalytics && err.code === "TIMEOUT") {
+          captureTimeoutAlert(name, err, triggered_by);
+        }
         const httpStatus2 = err._meta?.http_status;
         if (!skipAnalytics) {
           telemetry2.captureToolCall({
@@ -29374,7 +29547,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.32.0" : "0.0.0-dev";
+var VERSION = true ? "0.32.4" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var logger = {

package/dist/installer-electron.js

@@ -1804,7 +1804,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = true ? "0.32.0" : "0.0.0-dev";
+    VERSION = true ? "0.32.4" : "0.0.0-dev";
     MESSAGES = {
       en: {
         installer: {

package/dist/installer-gui.js

@@ -1067,7 +1067,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = true ? "0.32.0" : "0.0.0-dev";
+var VERSION = true ? "0.32.4" : "0.0.0-dev";
 var MESSAGES = {
   en: {
     installer: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.32.0",
+  "version": "0.32.4",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",