diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
index d584c8d9..576fedba 100644
--- a/.github/actionlint.yaml
+++ b/.github/actionlint.yaml
@@ -9,4 +9,5 @@ self-hosted-runner:
     - macos-15 # should not be necessary
     - macos-15-intel # should not be necessary
     - windows-11-arm # GitHub-hosted arm64 Windows runner, newer than actionlint's built-in label list
-    - ubuntu-24.04-arm # GitHub-hosted arm64 Linux runner, newer than actionlint's built-in label list
\ No newline at end of file
+    - ubuntu-24.04-arm # GitHub-hosted arm64 Linux runner, newer than actionlint's built-in label list
+    - ubuntu-24.04 # GitHub-hosted Linux runner, newer than actionlint's built-in label list
\ No newline at end of file
diff --git a/.github/workflows/build-expt.yaml b/.github/workflows/build-expt.yaml
index 5fc18dbc..fa8a3221 100644
--- a/.github/workflows/build-expt.yaml
+++ b/.github/workflows/build-expt.yaml
@@ -10,7 +10,7 @@ env:
 
 jobs:
   build-linux-binary:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 38bf25c1..1d5631a2 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -17,7 +17,7 @@ jobs:
       (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
       (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
       (github.event_name == 'issues' && contains(github.event.issue.body, '@claude'))
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index 33ca718d..230a5f2a 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -26,7 +26,7 @@ env:
 
 jobs:
   contributors:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 1ef3bf43..e06afafc 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   goreleaser:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 39d8bfde..1428dcc0 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -17,7 +17,7 @@ env:
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
         uses: actions/checkout@v4.1.1
diff --git a/.github/workflows/mcp-packaging.yml b/.github/workflows/mcp-packaging.yml
index 8675af3c..d42b2fb2 100644
--- a/.github/workflows/mcp-packaging.yml
+++ b/.github/workflows/mcp-packaging.yml
@@ -37,7 +37,7 @@ defaults:
 jobs:
   version:
     name: resolve version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       version: ${{ steps.resolve.outputs.version }}
       is_publish: ${{ steps.resolve.outputs.is_publish }}
@@ -65,7 +65,7 @@ jobs:
       matrix:
         include:
           - target: linux-x64
-            runner: ubuntu-latest
+            runner: ubuntu-24.04
           - target: linux-arm64
             runner: ubuntu-24.04-arm
           - target: darwin-universal
@@ -90,7 +90,7 @@ jobs:
   bundle-windows:
     name: windows-x64 (build)
     needs: version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Build bundle
@@ -121,7 +121,7 @@ jobs:
   oci:
     name: oci (build + smoke)
     needs: version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Build image
@@ -135,7 +135,7 @@ jobs:
   combined:
     name: multiplatform (combined build + byte verification)
     needs: [version, bundle, bundle-windows]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Gather per-platform bundle artifacts
@@ -165,7 +165,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - runner: ubuntu-latest
+          - runner: ubuntu-24.04
             py: python3
           - runner: ubuntu-24.04-arm
             py: python3
@@ -188,7 +188,7 @@ jobs:
     name: upload bundles to release
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, bundle, bundle-windows, smoke-windows, oci, combined, combined-smoke]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write
     steps:
@@ -219,7 +219,7 @@ jobs:
     name: push OCI image
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, oci]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Push multi-arch image
@@ -252,12 +252,12 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { vector: cargo,  runner: ubuntu-latest,  target: linux-x64,        py: python3 }
+          - { vector: cargo,  runner: ubuntu-24.04,  target: linux-x64,        py: python3 }
           - { vector: cargo,  runner: windows-latest, target: windows-x64,      py: python }
           - { vector: cargo,  runner: macos-latest,   target: darwin-universal, py: python3 }
-          - { vector: go,     runner: ubuntu-latest,  target: linux-x64,        py: python3 }
+          - { vector: go,     runner: ubuntu-24.04,  target: linux-x64,        py: python3 }
           - { vector: go,     runner: windows-latest, target: windows-x64,      py: python }
-          - { vector: dotnet, runner: ubuntu-latest,  target: linux-x64,        py: python3 }
+          - { vector: dotnet, runner: ubuntu-24.04,  target: linux-x64,        py: python3 }
           - { vector: dotnet, runner: windows-latest, target: windows-x64,      py: python }
     runs-on: ${{ matrix.runner }}
     env:
@@ -317,7 +317,7 @@ jobs:
     name: publish cargo (crates.io)
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, sdk]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
@@ -332,7 +332,7 @@ jobs:
     name: publish dotnet (NuGet)
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, sdk]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
       id-token: write
@@ -356,7 +356,7 @@ jobs:
     name: publish go (mirror stackql-mcp-go, tag)
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, sdk]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - env:
diff --git a/.github/workflows/mcp-registry-publish.yml b/.github/workflows/mcp-registry-publish.yml
index b0b249ee..3a88fa8e 100644
--- a/.github/workflows/mcp-registry-publish.yml
+++ b/.github/workflows/mcp-registry-publish.yml
@@ -29,7 +29,7 @@ defaults:
 jobs:
   registry-publish:
     name: publish to MCP registry
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       id-token: write
       contents: read
diff --git a/.github/workflows/openai-plugin.yml b/.github/workflows/openai-plugin.yml
index 71be2d2b..43b7b221 100644
--- a/.github/workflows/openai-plugin.yml
+++ b/.github/workflows/openai-plugin.yml
@@ -18,7 +18,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             python: python3
             binary: stackql-plugin-smoke
           - os: macos-latest
diff --git a/.github/workflows/scenario.yaml b/.github/workflows/scenario.yaml
index 5c4b4b8c..12950877 100644
--- a/.github/workflows/scenario.yaml
+++ b/.github/workflows/scenario.yaml
@@ -14,7 +14,7 @@ env:
 
 jobs:
   scenario-testing:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: ${{ vars.DEFAULT_JOB_TIMEOUT_MIN == '' && 120 || vars.DEFAULT_JOB_TIMEOUT_MIN }}
     steps:
       - name: Install Package dependencies
diff --git a/packaging/mcpb/.gitignore b/packaging/mcpb/.gitignore
index 2d9da4d1..3a322355 100644
--- a/packaging/mcpb/.gitignore
+++ b/packaging/mcpb/.gitignore
@@ -6,7 +6,6 @@ tmp/
 /.tools
 /.oci-stage
 npm/platforms.json
-npm/package-lock.json
 npm/*.tgz
 pypi/dist/
 pypi/src/stackql_mcp_server/platforms.json
diff --git a/packaging/mcpb/npm/package-lock.json b/packaging/mcpb/npm/package-lock.json
new file mode 100644
index 00000000..b40639f2
--- /dev/null
+++ b/packaging/mcpb/npm/package-lock.json
@@ -0,0 +1,31 @@
+{
+  "name": "@stackql/mcp-server",
+  "version": "0.11.669",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@stackql/mcp-server",
+      "version": "0.11.669",
+      "license": "MIT",
+      "dependencies": {
+        "adm-zip": "^0.6.1"
+      },
+      "bin": {
+        "stackql-mcp": "bin/stackql-mcp.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/adm-zip": {
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.6.1.tgz",
+      "integrity": "sha512-Xwrja8nx9e5o2N1my4DsKCeKpdrnACyr1wtbPxBDgGzKzKyE9kRtBFA8mWldI+RVlD7CBZNWY/wQ2+ydwOR6kQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.0"
+      }
+    }
+  }
+}
diff --git a/packaging/mcpb/npm/package.json b/packaging/mcpb/npm/package.json
index f37959ca..f7a136ac 100644
--- a/packaging/mcpb/npm/package.json
+++ b/packaging/mcpb/npm/package.json
@@ -31,6 +31,6 @@
     "multicloud"
   ],
   "dependencies": {
-    "adm-zip": "^0.5.16"
+    "adm-zip": "^0.6.1"
   }
 }