@leadbay/mcp 0.32.5 → 0.32.6

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog — @leadbay/mcp
 
+## 0.32.6 — 2026-09-01
+
+The 401 auto-retry is GET-only — replaying a write could double-execute a
+mutation that already committed — but `mapErrorResponse` wrote its hint as if
+`request()` had always retried. On `leadbay_create_topup_link` (a POST) the
+agent was told the call had already been retried when it had been attempted
+exactly once. Covers acceptance criteria 4 and 5 of product#3998; the 401 itself
+is a backend bug fixed in leadbay/backend#1989.
+
+- The GET-only rule is extracted into `retriesOn401` so the retry path and the
+  error mapper read one source of truth, and the actual outcome is threaded into
+  `mapErrorResponse` rather than assumed.
+- The not-retried hint states only the fact and never the reason. A GET with
+  `retryOn401:false` (the startup auth probe) is not a write, and the earlier
+  text told it that it was. Why the retry didn't run is not actionable for the
+  agent — only that this was attempt one — so the flag stays a boolean.
+- `readOnlyHint: false` on both Stripe tools. Each mints a Stripe session, and
+  for an org with no customer yet the shared `getStripeCustomer` path creates
+  the customer and persists `organizations.stripe_customer_id`.
+- The two Stripe tools stay in `granularReadTools`. `readOnlyHint` (a client
+  confirmation hint) and `includeWrite` (a capability gate over the user's
+  Leadbay data) are different axes, and this repo already treats them that way
+  — `leadbay_preview_bulk_enrichment` sits in `granularWriteTools` with
+  `readOnlyHint: true`. Moving them would leave a `--no-write` user who hits
+  quota with no top-up link at all, which is the exact failure product#3998 was
+  filed for.
+
 ## 0.32.5 — 2026-09-01
 
 `leadbay_update_contact` returned `NOT_FOUND` / 404 on 100% of the calls ever

package/dist/bin.js

@@ -213,12 +213,13 @@ function parseRetryAfter(value) {
   }
   return null;
 }
-var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, ME_CACHE_TTL_MS, MAX_CONCURRENT, DEFAULT_REQUEST_TIMEOUT_MS, requestSignalStore, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
+var LENS_CACHE_TTL_MS, TASTE_CACHE_TTL_MS, retriesOn401, ME_CACHE_TTL_MS, MAX_CONCURRENT, DEFAULT_REQUEST_TIMEOUT_MS, requestSignalStore, REGIONS, API_VERSION, API_PREFIX, _mockFixtures, _mockJournal, LeadbayClient;
 var init_client = __esm({
   "../core/dist/client.js"() {
     "use strict";
     LENS_CACHE_TTL_MS = 5 * 60 * 1e3;
     TASTE_CACHE_TTL_MS = 10 * 60 * 1e3;
+    retriesOn401 = (method) => method.toUpperCase() === "GET";
     ME_CACHE_TTL_MS = 60 * 1e3;
     MAX_CONCURRENT = 5;
     DEFAULT_REQUEST_TIMEOUT_MS = 6e5;
@@ -396,15 +397,16 @@ var init_client = __esm({
       // error envelope says so.
       //
       // Arrow-function field so `this` stays bound even when the method is passed
-      // as a bare reference (see request()'s ternary). Retries are GET-ONLY: a 401
-      // on a write (POST/PUT/DELETE) may arrive AFTER the mutation already committed
-      // server-side, so blindly re-sending it would double-execute the write. Reads
-      // are idempotent, so retrying them is safe. The 250ms backoff releases the
-      // concurrency slot first (release → sleep → re-acquire) so a wave of 401s
-      // doesn't pin all MAX_CONCURRENT slots in setTimeout and stall the queue.
+      // as a bare reference (see request()'s ternary). Retries are GET-ONLY (see
+      // retriesOn401): a 401 on a write (POST/PUT/DELETE) may arrive AFTER the
+      // mutation already committed server-side, so blindly re-sending it would
+      // double-execute the write. Reads are idempotent, so retrying them is safe.
+      // The 250ms backoff releases the concurrency slot first (release → sleep →
+      // re-acquire) so a wave of 401s doesn't pin all MAX_CONCURRENT slots in
+      // setTimeout and stall the queue.
       httpsRequestWithRetry = async (method, url, headers, body, timeoutMs) => {
         const res = await httpsRequest(method, url, headers, body, timeoutMs);
-        if (res.status === 401 && method.toUpperCase() === "GET") {
+        if (res.status === 401 && retriesOn401(method)) {
           this.releaseSemaphore();
           try {
             await new Promise((r) => setTimeout(r, 250));
@@ -423,6 +425,7 @@ var init_client = __esm({
           throw this.makeError("NOT_AUTHENTICATED", "Not logged in to Leadbay", "Set LEADBAY_TOKEN in your MCP client config, or run: npx -y -p @leadbay/mcp@latest installer", path);
         }
         const retryOn401 = opts?.retryOn401 !== false;
+        const retriedOn401 = retryOn401 && retriesOn401(method);
         await this.acquireSemaphore();
         try {
           const url = `${this._baseUrl}${API_PREFIX}${path}`;
@@ -443,7 +446,7 @@ var init_client = __esm({
             return null;
           }
           if (res.status < 200 || res.status >= 300) {
-            throw this.mapErrorResponse(res.status, res.body, path, res.headers);
+            throw this.mapErrorResponse(res.status, res.body, path, res.headers, retriedOn401);
           }
           return JSON.parse(res.body);
         } catch (e) {
@@ -453,6 +456,7 @@ var init_client = __esm({
         }
       }
       async requestVoid(method, path, body) {
+        const retriedOn401 = retriesOn401(method);
         if (process.env.LEADBAY_MOCK === "1") {
           await this.mockRequest(method, path, body);
           return;
@@ -477,7 +481,7 @@ var init_client = __esm({
             retry_after: parseRetryAfter(res.headers["retry-after"])
           };
           if (res.status < 200 || res.status >= 300) {
-            throw this.mapErrorResponse(res.status, res.body, path, res.headers);
+            throw this.mapErrorResponse(res.status, res.body, path, res.headers, retriedOn401);
           }
         } catch (e) {
           throw this.mapTransportError(e, `${method} ${path}`);
@@ -491,6 +495,7 @@ var init_client = __esm({
       // mirror request() exactly. Used by leadbay_import_leads to upload CSVs to
       // the wizard at POST /1.6/imports.
       async requestRawBinary(method, path, contentType, body) {
+        const retriedOn401 = retriesOn401(method);
         if (process.env.LEADBAY_MOCK === "1") {
           return this.mockRequestBinary(method, path, contentType, body);
         }
@@ -515,7 +520,7 @@ var init_client = __esm({
             return null;
           }
           if (res.status < 200 || res.status >= 300) {
-            throw this.mapErrorResponse(res.status, res.body, path, res.headers);
+            throw this.mapErrorResponse(res.status, res.body, path, res.headers, retriedOn401);
           }
           return JSON.parse(res.body);
         } catch (e) {
@@ -603,7 +608,7 @@ var init_client = __esm({
         }
         return envelope;
       }
-      mapErrorResponse(status, rawBody, endpoint, headers) {
+      mapErrorResponse(status, rawBody, endpoint, headers, retried) {
         let parsed;
         try {
           parsed = JSON.parse(rawBody);
@@ -612,7 +617,7 @@ var init_client = __esm({
         }
         const retryAfter = parseRetryAfter(headers["retry-after"]);
         if (status === 401) {
-          return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", "Leadbay tokens don't expire on a timer, so this isn't a stale token. A 401 here is usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly; if it persists, offer to report it to the team.", endpoint, null, status);
+          return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", retried ? "Tokens don't expire on a timer, so this isn't stale. Already auto-retried once and it 401'd again \u2014 usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly, else report it." : "Tokens don't expire on a timer, so this isn't stale. This call wasn't auto-retried, so it's the first attempt \u2014 a Leadbay-side hiccup, or the user logged out. Try again once, else report it.", endpoint, null, status);
         }
         if (status === 429 || status === 402 || parsed?.error === "quota_exceeded" || parsed?.error?.code === "quota_exceeded") {
           const hintBase = retryAfter ? `Wait ${retryAfter}s before retrying` : "Wait, then retry";
@@ -715,7 +720,7 @@ var init_client = __esm({
         try {
           const res = await this.httpsRequestWithRetry("GET", `${this._baseUrl}${API_PREFIX}/users/me`, { Authorization: `Bearer ${this.token}` }, void 0, opts?.timeoutMs);
           if (res.status < 200 || res.status >= 300) {
-            throw this.mapErrorResponse(res.status, res.body, "/users/me", res.headers);
+            throw this.mapErrorResponse(res.status, res.body, "/users/me", res.headers, retriesOn401("GET"));
           }
           const me = JSON.parse(res.body);
           const observed = me.telemetry_enabled;
@@ -14661,8 +14666,10 @@ var init_create_topup_link = __esm({
     createTopupLink = {
       name: "leadbay_create_topup_link",
       annotations: {
+        // Not read-only: this POSTs a new Stripe Checkout Session into existence.
+        // Clients read readOnlyHint to decide whether to ask the user to confirm.
         title: "Generate Stripe checkout URL for AI-credits top-up",
-        readOnlyHint: true,
+        readOnlyHint: false,
         destructiveHint: false,
         idempotentHint: false,
         openWorldHint: true
@@ -14695,8 +14702,12 @@ var init_open_billing_portal = __esm({
     openBillingPortal = {
       name: "leadbay_open_billing_portal",
       annotations: {
+        // Not read-only, despite being a GET: the backend mints a Stripe portal
+        // session, and for an org with no customer yet it also creates the Stripe
+        // customer and persists organizations.stripe_customer_id. Same
+        // getStripeCustomer path as leadbay_create_topup_link.
         title: "Generate Stripe customer-portal URL for subscription management",
-        readOnlyHint: true,
+        readOnlyHint: false,
         destructiveHint: false,
         idempotentHint: false,
         openWorldHint: true
@@ -32972,7 +32983,7 @@ var OAUTH_BASE_URLS = {
     fr: "https://staging.api.leadbay.app"
   }
 };
-var VERSION = "0.32.5";
+var VERSION = "0.32.6";
 var HELP = `
 leadbay-mcp ${VERSION} \u2014 Leadbay Model Context Protocol server
 

package/dist/http-server.js

@@ -2797,6 +2797,7 @@ import { readdirSync, readFileSync, existsSync } from "fs";
 import { join } from "path";
 var LENS_CACHE_TTL_MS = 5 * 60 * 1e3;
 var TASTE_CACHE_TTL_MS = 10 * 60 * 1e3;
+var retriesOn401 = (method) => method.toUpperCase() === "GET";
 var ME_CACHE_TTL_MS = 60 * 1e3;
 var MAX_CONCURRENT = 5;
 var DEFAULT_REQUEST_TIMEOUT_MS = 6e5;
@@ -3154,15 +3155,16 @@ var LeadbayClient = class _LeadbayClient {
   // error envelope says so.
   //
   // Arrow-function field so `this` stays bound even when the method is passed
-  // as a bare reference (see request()'s ternary). Retries are GET-ONLY: a 401
-  // on a write (POST/PUT/DELETE) may arrive AFTER the mutation already committed
-  // server-side, so blindly re-sending it would double-execute the write. Reads
-  // are idempotent, so retrying them is safe. The 250ms backoff releases the
-  // concurrency slot first (release → sleep → re-acquire) so a wave of 401s
-  // doesn't pin all MAX_CONCURRENT slots in setTimeout and stall the queue.
+  // as a bare reference (see request()'s ternary). Retries are GET-ONLY (see
+  // retriesOn401): a 401 on a write (POST/PUT/DELETE) may arrive AFTER the
+  // mutation already committed server-side, so blindly re-sending it would
+  // double-execute the write. Reads are idempotent, so retrying them is safe.
+  // The 250ms backoff releases the concurrency slot first (release → sleep →
+  // re-acquire) so a wave of 401s doesn't pin all MAX_CONCURRENT slots in
+  // setTimeout and stall the queue.
   httpsRequestWithRetry = async (method, url, headers, body, timeoutMs) => {
     const res = await httpsRequest(method, url, headers, body, timeoutMs);
-    if (res.status === 401 && method.toUpperCase() === "GET") {
+    if (res.status === 401 && retriesOn401(method)) {
       this.releaseSemaphore();
       try {
         await new Promise((r) => setTimeout(r, 250));
@@ -3181,6 +3183,7 @@ var LeadbayClient = class _LeadbayClient {
       throw this.makeError("NOT_AUTHENTICATED", "Not logged in to Leadbay", "Set LEADBAY_TOKEN in your MCP client config, or run: npx -y -p @leadbay/mcp@latest installer", path);
     }
     const retryOn401 = opts?.retryOn401 !== false;
+    const retriedOn401 = retryOn401 && retriesOn401(method);
     await this.acquireSemaphore();
     try {
       const url = `${this._baseUrl}${API_PREFIX}${path}`;
@@ -3201,7 +3204,7 @@ var LeadbayClient = class _LeadbayClient {
         return null;
       }
       if (res.status < 200 || res.status >= 300) {
-        throw this.mapErrorResponse(res.status, res.body, path, res.headers);
+        throw this.mapErrorResponse(res.status, res.body, path, res.headers, retriedOn401);
       }
       return JSON.parse(res.body);
     } catch (e) {
@@ -3211,6 +3214,7 @@ var LeadbayClient = class _LeadbayClient {
     }
   }
   async requestVoid(method, path, body) {
+    const retriedOn401 = retriesOn401(method);
     if (process.env.LEADBAY_MOCK === "1") {
       await this.mockRequest(method, path, body);
       return;
@@ -3235,7 +3239,7 @@ var LeadbayClient = class _LeadbayClient {
         retry_after: parseRetryAfter(res.headers["retry-after"])
       };
       if (res.status < 200 || res.status >= 300) {
-        throw this.mapErrorResponse(res.status, res.body, path, res.headers);
+        throw this.mapErrorResponse(res.status, res.body, path, res.headers, retriedOn401);
       }
     } catch (e) {
       throw this.mapTransportError(e, `${method} ${path}`);
@@ -3249,6 +3253,7 @@ var LeadbayClient = class _LeadbayClient {
   // mirror request() exactly. Used by leadbay_import_leads to upload CSVs to
   // the wizard at POST /1.6/imports.
   async requestRawBinary(method, path, contentType, body) {
+    const retriedOn401 = retriesOn401(method);
     if (process.env.LEADBAY_MOCK === "1") {
       return this.mockRequestBinary(method, path, contentType, body);
     }
@@ -3273,7 +3278,7 @@ var LeadbayClient = class _LeadbayClient {
         return null;
       }
       if (res.status < 200 || res.status >= 300) {
-        throw this.mapErrorResponse(res.status, res.body, path, res.headers);
+        throw this.mapErrorResponse(res.status, res.body, path, res.headers, retriedOn401);
       }
       return JSON.parse(res.body);
     } catch (e) {
@@ -3361,7 +3366,7 @@ var LeadbayClient = class _LeadbayClient {
     }
     return envelope;
   }
-  mapErrorResponse(status, rawBody, endpoint, headers) {
+  mapErrorResponse(status, rawBody, endpoint, headers, retried) {
     let parsed;
     try {
       parsed = JSON.parse(rawBody);
@@ -3370,7 +3375,7 @@ var LeadbayClient = class _LeadbayClient {
     }
     const retryAfter = parseRetryAfter(headers["retry-after"]);
     if (status === 401) {
-      return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", "Leadbay tokens don't expire on a timer, so this isn't a stale token. A 401 here is usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly; if it persists, offer to report it to the team.", endpoint, null, status);
+      return this.makeError("AUTH_EXPIRED", "Leadbay rejected this request (401)", retried ? "Tokens don't expire on a timer, so this isn't stale. Already auto-retried once and it 401'd again \u2014 usually a Leadbay-side hiccup, but can also mean the user logged out. Try again shortly, else report it." : "Tokens don't expire on a timer, so this isn't stale. This call wasn't auto-retried, so it's the first attempt \u2014 a Leadbay-side hiccup, or the user logged out. Try again once, else report it.", endpoint, null, status);
     }
     if (status === 429 || status === 402 || parsed?.error === "quota_exceeded" || parsed?.error?.code === "quota_exceeded") {
       const hintBase = retryAfter ? `Wait ${retryAfter}s before retrying` : "Wait, then retry";
@@ -3473,7 +3478,7 @@ var LeadbayClient = class _LeadbayClient {
     try {
       const res = await this.httpsRequestWithRetry("GET", `${this._baseUrl}${API_PREFIX}/users/me`, { Authorization: `Bearer ${this.token}` }, void 0, opts?.timeoutMs);
       if (res.status < 200 || res.status >= 300) {
-        throw this.mapErrorResponse(res.status, res.body, "/users/me", res.headers);
+        throw this.mapErrorResponse(res.status, res.body, "/users/me", res.headers, retriesOn401("GET"));
       }
       const me = JSON.parse(res.body);
       const observed = me.telemetry_enabled;
@@ -16830,8 +16835,10 @@ function coerceCsvValue(v) {
 var createTopupLink = {
   name: "leadbay_create_topup_link",
   annotations: {
+    // Not read-only: this POSTs a new Stripe Checkout Session into existence.
+    // Clients read readOnlyHint to decide whether to ask the user to confirm.
     title: "Generate Stripe checkout URL for AI-credits top-up",
-    readOnlyHint: true,
+    readOnlyHint: false,
     destructiveHint: false,
     idempotentHint: false,
     openWorldHint: true
@@ -16857,8 +16864,12 @@ var createTopupLink = {
 var openBillingPortal = {
   name: "leadbay_open_billing_portal",
   annotations: {
+    // Not read-only, despite being a GET: the backend mints a Stripe portal
+    // session, and for an org with no customer yet it also creates the Stripe
+    // customer and persists organizations.stripe_customer_id. Same
+    // getStripeCustomer path as leadbay_create_topup_link.
     title: "Generate Stripe customer-portal URL for subscription management",
-    readOnlyHint: true,
+    readOnlyHint: false,
     destructiveHint: false,
     idempotentHint: false,
     openWorldHint: true
@@ -29558,7 +29569,7 @@ function parseWriteEnv(env = process.env) {
 }
 
 // src/http-server.ts
-var VERSION = true ? "0.32.5" : "0.0.0-dev";
+var VERSION = true ? "0.32.6" : "0.0.0-dev";
 var PORT = Number(process.env.PORT ?? 8080);
 var HOST = process.env.HOST ?? "0.0.0.0";
 var logger = {

package/dist/installer-electron.js

@@ -1804,7 +1804,7 @@ var init_installer_gui = __esm({
     init_install_dxt();
     init_install_shared();
     init_oauth();
-    VERSION = true ? "0.32.5" : "0.0.0-dev";
+    VERSION = true ? "0.32.6" : "0.0.0-dev";
     MESSAGES = {
       en: {
         installer: {

package/dist/installer-gui.js

@@ -1067,7 +1067,7 @@ async function oauthLogin(opts) {
 }
 
 // installer/installer-gui.ts
-var VERSION = true ? "0.32.5" : "0.0.0-dev";
+var VERSION = true ? "0.32.6" : "0.0.0-dev";
 var MESSAGES = {
   en: {
     installer: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leadbay/mcp",
-  "version": "0.32.5",
+  "version": "0.32.6",
   "mcpName": "io.github.leadbay/leadbay-mcp",
   "description": "Model Context Protocol (MCP) server for Leadbay — AI lead discovery, qualification, and enrichment for Claude Desktop, Cursor, and Claude Code.",
   "type": "module",