@zackbart/connecta 0.10.5 → 0.10.6

package/dist/errors.d.ts

@@ -15,6 +15,22 @@ export interface ArgumentValidationDetails {
     truncated?: true;
 }
 export declare const MAX_ARGUMENT_VALIDATION_ISSUES = 3;
+/**
+ * Clamp a string to a UTF-8 byte budget, appending `…` when it clipped.
+ * Short strings — the common case, and the one that has to stay exact — are
+ * returned unchanged and untagged.
+ */
+export declare function boundedEchoText(value: string, maxBytes?: number): string;
+/**
+ * `{ args }` when the caller's arguments fit {@link MAX_ECHOED_ARGS_BYTES},
+ * `{}` when they do not. All or nothing: a clipped echo would be a *different*
+ * call than the one that was refused, and the routes this feeds end at a human
+ * approving one. Unserializable arguments are treated the same way as oversized
+ * ones — there is nothing honest to put in the field.
+ */
+export declare function echoedCallArgs(args: unknown): {
+    args?: unknown;
+};
 /** Agent-visible recovery class attached only to `auth_required` failures. */
 export type AuthRecoveryMode = "oauth" | "operator_config" | "unavailable";
 /**
@@ -80,10 +96,41 @@ export interface CallErrorDetails {
         tool: "search_tools";
         arguments: {
             query: string;
-            connector: string;
+            connector?: string;
             includeSchemas: "compact";
         };
         purpose: string;
+    } | {
+        tool: "call_destructive_tool";
+        arguments: {
+            address: string;
+            /**
+             * The caller's own arguments, echoed only when they fit
+             * {@link MAX_ECHOED_ARGS_BYTES} — and then whole, never clipped. Absent
+             * means "re-send exactly what you sent": a half-copied argument object
+             * routed into a human approval prompt would describe a call nobody made.
+             */
+            args?: unknown;
+        };
+        purpose: string;
+    } | {
+        /**
+         * The same scoped discovery as the `search_tools` route above, addressed to
+         * a caller inside `execute_code`, which cannot call a tool. Which of the two
+         * a routing failure emits follows the route the caller took, not the
+         * deployment's advertised surface.
+         */
+        function: "connecta.search";
+        arguments: {
+            query: string;
+            connector?: string;
+            includeSchemas: "compact";
+        };
+        purpose: string;
+    } | {
+        function: "connecta.call";
+        addresses: string[];
+        purpose: string;
     };
     /** Explicit retry guidance; recovery never retries or mutates by itself. */
     retry?: string;

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAGA,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,eAAe,GACf,cAAc,GACd,aAAa,GACb,cAAc,GACd,4BAA4B,GAC5B,uBAAuB,CAAC;AAE5B,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAClC,wEAAwE;IACxE,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAmDhD,8EAA8E;AAC9E,MAAM,MAAM,gBAAgB,GACxB,OAAO,GACP,iBAAiB,GACjB,aAAa,CAAC;AAmBlB;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,yBAAyB,GAAG,SAAS,CAAC;gBAGzD,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QACJ,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,yBAAyB,CAAC;KACnC;CAaT;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,qBAAqB,CAAC;QAC5B,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG;QACF,IAAI,EAAE,cAAc,CAAC;QACrB,SAAS,EAAE;YACT,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,EAAE,MAAM,CAAC;YAClB,cAAc,EAAE,SAAS,CAAC;SAC3B,CAAC;QACF,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAQ5E;AAMD,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,YAAY,SAA0B,GACrC,gBAAgB,CA2BlB"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAGA,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,eAAe,GACf,cAAc,GACd,aAAa,GACb,cAAc,GACd,4BAA4B,GAC5B,uBAAuB,CAAC;AAE5B,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAClC,wEAAwE;IACxE,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,eAAO,MAAM,8BAA8B,IAAI,CAAC;AA+ChD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,MAA8B,GACvC,MAAM,CAQR;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAYhE;AAqCD,8EAA8E;AAC9E,MAAM,MAAM,gBAAgB,GACxB,OAAO,GACP,iBAAiB,GACjB,aAAa,CAAC;AAmBlB;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,yBAAyB,GAAG,SAAS,CAAC;gBAGzD,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QACJ,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,yBAAyB,CAAC;KACnC;CAaT;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,qBAAqB,CAAC;QAC5B,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG;QACF,IAAI,EAAE,cAAc,CAAC;QACrB,SAAS,EAAE;YACT,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,EAAE,SAAS,CAAC;SAC3B,CAAC;QACF,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG;QACF,IAAI,EAAE,uBAAuB,CAAC;QAC9B,SAAS,EAAE;YACT,OAAO,EAAE,MAAM,CAAC;YAChB;;;;;eAKG;YACH,IAAI,CAAC,EAAE,OAAO,CAAC;SAChB,CAAC;QACF,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG;QACF;;;;;WAKG;QACH,QAAQ,EAAE,iBAAiB,CAAC;QAC5B,SAAS,EAAE;YACT,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,cAAc,EAAE,SAAS,CAAC;SAC3B,CAAC;QACF,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG;QACF,QAAQ,EAAE,eAAe,CAAC;QAC1B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAQ5E;AAMD,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,YAAY,SAA0B,GACrC,gBAAgB,CA2BlB"}

package/dist/errors.js

@@ -12,6 +12,73 @@ function boundedIssueText(value, maxChars) {
         truncated: true,
     };
 }
+/**
+ * How many bytes of the caller's own arguments an error envelope will echo
+ * back to it. Small on purpose: an error result is not size-guarded the way a
+ * *result* is, so an unbounded echo turns a 50 KB argument object into a 100 KB
+ * refusal against a deployment that capped results at 1 KB — twice over, since
+ * the payload lands in both the text content and `structuredContent`. The agent
+ * already holds what it sent; the echo is a convenience, never the record.
+ */
+const MAX_ECHOED_ARGS_BYTES = 512;
+/**
+ * The same budget spent on caller-authored *text* — the address it mistyped,
+ * the discovery query derived from it — rather than on its arguments.
+ *
+ * Text is clamped where {@link echoedCallArgs} drops: an address is the thing
+ * the refusal exists to correct, so a refusal that named nothing would be
+ * useless, while a clipped one still carries the prefix that identifies the
+ * mistake. The marker says it was clipped, so nothing reads a clamped address
+ * as the address that was sent. Arguments get the opposite rule because they
+ * end at a human approving one specific call.
+ *
+ * The number is not cosmetic. An error result is not size-guarded the way a
+ * result is, and every echoed byte lands twice (text content *and*
+ * `structuredContent`), so an unbounded address turned a 50 KB typo into a
+ * 200 KB refusal against a deployment that capped results at 1 KB.
+ */
+const MAX_ECHOED_TEXT_BYTES = 512;
+const echoEncoder = new TextEncoder();
+const echoDecoder = new TextDecoder();
+/**
+ * Clamp a string to a UTF-8 byte budget, appending `…` when it clipped.
+ * Short strings — the common case, and the one that has to stay exact — are
+ * returned unchanged and untagged.
+ */
+export function boundedEchoText(value, maxBytes = MAX_ECHOED_TEXT_BYTES) {
+    const bytes = echoEncoder.encode(value);
+    if (bytes.length <= maxBytes)
+        return value;
+    // Never split a codepoint: walk back off UTF-8 continuation bytes (10xxxxxx)
+    // so the clamp cannot manufacture a replacement character.
+    let end = Math.max(0, maxBytes);
+    while (end > 0 && ((bytes[end] ?? 0) & 0xc0) === 0x80)
+        end--;
+    return `${echoDecoder.decode(bytes.slice(0, end))}…`;
+}
+/**
+ * `{ args }` when the caller's arguments fit {@link MAX_ECHOED_ARGS_BYTES},
+ * `{}` when they do not. All or nothing: a clipped echo would be a *different*
+ * call than the one that was refused, and the routes this feeds end at a human
+ * approving one. Unserializable arguments are treated the same way as oversized
+ * ones — there is nothing honest to put in the field.
+ */
+export function echoedCallArgs(args) {
+    if (args === undefined)
+        return {};
+    let text;
+    try {
+        text = JSON.stringify(args);
+    }
+    catch {
+        return {};
+    }
+    if (text === undefined)
+        return {};
+    return echoEncoder.encode(text).length <= MAX_ECHOED_ARGS_BYTES
+        ? { args }
+        : {};
+}
 function boundedValidation(details) {
     if (!details)
         return undefined;

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gBAAgB;AA4BhB,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAChD,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAE9C,SAAS,gBAAgB,CACvB,KAAa,EACb,QAAgB;IAEhB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjE,OAAO;QACL,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG;QACtD,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA8C;IAE9C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,SAAS,GACX,OAAO,CAAC,SAAS,KAAK,IAAI;QAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,8BAA8B,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;SAC1B,KAAK,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,gBAAgB,CAC3B,KAAK,CAAC,IAAI,EACV,6BAA6B,CAC9B,CAAC;QACF,MAAM,IAAI,GAAG,gBAAgB,CAC3B,KAAK,CAAC,IAAI,EACV,6BAA6B,CAC9B,CAAC;QACF,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,KAAK,CAAC,QAAQ,EACd,iCAAiC,CAClC,CAAC;QACF,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,QAAQ,EAAE,QAAQ,CAAC,KAAK;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,OAAO;QACL,MAAM;QACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAQD,MAAM,iBAAiB,GAA4C;IACjE,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;IACnB,0BAA0B,EAAE,KAAK;IACjC,qBAAqB,EAAE,KAAK;CAC7B,CAAC;AAEF,yEAAyE;AACzE,SAAS,qBAAqB,CAAC,KAAyB;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAyB;IAC7B,SAAS,CAAU;IAC5B;;;;;;OAMG;IACM,YAAY,CAAqB;IAC1C,0EAA0E;IACjE,UAAU,CAAwC;IAE3D,YACE,IAA4B,EAC5B,OAAe,EACf,OAKI,EAAE;QAEN,KAAK,CACH,OAAO,EACP,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU;YACb,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;CACF;AAuCD;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,iBAAiB;IACjB,cAAc;IACd,sBAAsB;IACtB,oCAAoC;CACrC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,OAAO;QACL,IAAI;QACJ,OAAO;QACP,SAAS,EAAE,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB,GACxB,sHAAsH,CAAC;AACzH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,YAAY,GAAG,uBAAuB;IAEtC,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;gBACpC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QACjE,OAAO;QACP,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;KAC9C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gBAAgB;AA4BhB,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAChD,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAE9C,SAAS,gBAAgB,CACvB,KAAa,EACb,QAAgB;IAEhB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjE,OAAO;QACL,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG;QACtD,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,WAAmB,qBAAqB;IAExC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,6EAA6E;IAC7E,2DAA2D;IAC3D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,GAAG,EAAE,CAAC;IAC7D,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,qBAAqB;QAC7D,CAAC,CAAC,EAAE,IAAI,EAAE;QACV,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA8C;IAE9C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,SAAS,GACX,OAAO,CAAC,SAAS,KAAK,IAAI;QAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,8BAA8B,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;SAC1B,KAAK,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,gBAAgB,CAC3B,KAAK,CAAC,IAAI,EACV,6BAA6B,CAC9B,CAAC;QACF,MAAM,IAAI,GAAG,gBAAgB,CAC3B,KAAK,CAAC,IAAI,EACV,6BAA6B,CAC9B,CAAC;QACF,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,KAAK,CAAC,QAAQ,EACd,iCAAiC,CAClC,CAAC;QACF,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,QAAQ,EAAE,QAAQ,CAAC,KAAK;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,OAAO;QACL,MAAM;QACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAQD,MAAM,iBAAiB,GAA4C;IACjE,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;IACnB,0BAA0B,EAAE,KAAK;IACjC,qBAAqB,EAAE,KAAK;CAC7B,CAAC;AAEF,yEAAyE;AACzE,SAAS,qBAAqB,CAAC,KAAyB;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAyB;IAC7B,SAAS,CAAU;IAC5B;;;;;;OAMG;IACM,YAAY,CAAqB;IAC1C,0EAA0E;IACjE,UAAU,CAAwC;IAE3D,YACE,IAA4B,EAC5B,OAAe,EACf,OAKI,EAAE;QAEN,KAAK,CACH,OAAO,EACP,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU;YACb,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;CACF;AAsED;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,iBAAiB;IACjB,cAAc;IACd,sBAAsB;IACtB,oCAAoC;CACrC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,OAAO;QACL,IAAI;QACJ,OAAO;QACP,SAAS,EAAE,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB,GACxB,sHAAsH,CAAC;AACzH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,YAAY,GAAG,uBAAuB;IAEtC,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;gBACpC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QACjE,OAAO;QACP,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/execute.d.ts

@@ -5,6 +5,15 @@ import { InvocationFailure } from "./invocation.js";
 import type { RegistryView } from "./registry.js";
 import type { ConnectaSurface, Executor, ExecutorProvider, Logger } from "./types.js";
 export declare const EXECUTE_MAX_BATCH_CALLS = 10;
+/**
+ * Default budgets for `connecta.emit`. The byte budget is a transport bound,
+ * not a context bound — emitted image/audio blocks reach the model as media,
+ * not base64 text — so it sits far above the 24k return-value guard: room for
+ * two or three real screenshots after base64's 4/3 inflation, well short of a
+ * file-hosting ambition (design record M5).
+ */
+export declare const EXECUTE_MAX_EMITTED_BYTES = 4000000;
+export declare const EXECUTE_MAX_EMITTED_BLOCKS = 32;
 type ExecuteDiagnosticOperation = "search" | "describe" | "call" | "batch";
 interface ExecuteOperationDiagnostics {
     operation: ExecuteDiagnosticOperation;
@@ -22,6 +31,10 @@ declare class ExecuteDiagnostics {
     admissionMs: number;
     setupMs: number;
     executorWallMs: number;
+    private emitted?;
+    /** Numbers only, per R8 — and only once something was emitted, so a
+     * non-emitting run's diagnostics stay byte-for-byte what they were. */
+    recordEmitted(count: number, bytes: number): void;
     private stats;
     recordCatalog(operation: "search" | "describe", durationMs: number, ok: boolean, result?: unknown): void;
     recordCall(operation: "call" | "batch", outcome: {
@@ -44,8 +57,45 @@ declare class ExecuteDiagnostics {
             connectorMs: number;
         };
         operations: ExecuteOperationDiagnostics[];
+        emitted?: {
+            count: number;
+            bytes: number;
+        };
     };
 }
+/**
+ * One MCP content block a program may emit. The complete set, by design:
+ * `resource` and `resource_link` are refused in ethos.md — pointers get
+ * followed, and connecta serves no resources for them to point at.
+ */
+export type EmittedBlock = {
+    type: "text";
+    text: string;
+} | {
+    type: "image";
+    data: string;
+    mimeType: string;
+} | {
+    type: "audio";
+    data: string;
+    mimeType: string;
+};
+/**
+ * Request-local collection for `connecta.emit`. Budgets fail loudly at the
+ * crossing call — the block is not partially accepted and prior blocks are
+ * unaffected — so a program learns it is over budget while it can still
+ * choose differently (M5). Accepted blocks never ride `ExecuteResult`; the
+ * handler that owns this collector appends them to the final tool result.
+ */
+export declare class EmitCollector {
+    private readonly maxBytes;
+    private readonly maxBlocks;
+    private readonly diagnostics?;
+    readonly blocks: EmittedBlock[];
+    bytes: number;
+    constructor(maxBytes: number, maxBlocks: number, diagnostics?: ExecuteDiagnostics | undefined);
+    accept(raw: unknown): void;
+}
 /** Convert a connector/tool name into a valid JS identifier. */
 export declare function sanitizeIdentifier(name: string): string;
 /**
@@ -58,12 +108,23 @@ export declare function buildSandboxProviders(registry: RegistryView, baseUrl: s
     maxHostCalls?: number;
     hostCallTimeoutMs?: number;
     discoveryConcurrency?: number;
+    /** Per-connector deadline for in-program catalog probes. Default 30_000. */
+    probeTimeoutMs?: number;
     onInvocationFailure?: (failure: InvocationFailure) => void;
     diagnostics?: ExecuteDiagnostics;
+    /**
+     * Where `connecta.emit` collects. The handler that will deliver the
+     * blocks owns it; without one, emit fails loudly rather than accept
+     * blocks nobody will ever return.
+     */
+    emitCollector?: EmitCollector;
 }): Promise<ExecutorProvider[]>;
 /** The execute_code handler. Exported for direct testing. */
 export declare function createExecuteTool(registry: RegistryView, baseUrl: string, executor: Executor, logger: Logger, activity?: ActivityRequestContext, config?: {
     discoveryConcurrency?: number;
+    probeTimeoutMs?: number;
+    maxEmittedBytes?: number;
+    maxEmittedBlocks?: number;
 }): ({ code, diagnostics: diagnosticsRequested }: {
     code: string;
     diagnostics?: boolean;
@@ -78,6 +139,17 @@ export declare function registerExecuteTool(server: McpServer, registry: Registr
     activity?: ActivityRequestContext;
     requestSignal?: AbortSignal;
     discoveryConcurrency?: number;
+    /**
+     * The deployment's configured per-connector probe deadline. Programs probe
+     * the same downstream catalogs the top-level tools do, so an operator who
+     * tightened `discovery.probeTimeoutMs` gets it honored inside the sandbox
+     * too rather than silently falling back to the 30s default.
+     */
+    probeTimeoutMs?: number;
+    /** Aggregate serialized-byte budget for connecta.emit. Default 4_000_000. */
+    maxEmittedBytes?: number;
+    /** Block-count budget for connecta.emit. Default 32. */
+    maxEmittedBlocks?: number;
     /** The advertised surface, which decides this tool's routing copy. */
     surface?: ConnectaSurface;
 }): void;

package/dist/execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAO5D,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAW3E,OAAO,EACL,iBAAiB,EAElB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,gBAAgB,EAChB,MAAM,EACP,MAAM,YAAY,CAAC;AAIpB,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAI1C,KAAK,0BAA0B,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3E,UAAU,2BAA2B;IACnC,SAAS,EAAE,0BAA0B,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,cAAM,kBAAkB;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAGvB;IACJ,WAAW,SAAK;IAChB,OAAO,SAAK;IACZ,cAAc,SAAK;IAEnB,OAAO,CAAC,KAAK;IAiBb,aAAa,CACX,SAAS,EAAE,QAAQ,GAAG,UAAU,EAChC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE,OAAO,GACf,IAAI;IASP,UAAU,CACR,SAAS,EAAE,MAAM,GAAG,OAAO,EAC3B,OAAO,EAAE;QACP,EAAE,EAAE,OAAO,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACnD,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,IAAI;IAgBP,WAAW,CACT,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,OAAO,EACX,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,OAAO,GACf,IAAI;IAWP,MAAM,IAAI;QACR,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC;YAChB,cAAc,EAAE,MAAM,CAAC;YACvB,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,UAAU,EAAE,2BAA2B,EAAE,CAAC;KAC3C;CAiBF;AA4DD,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAoDD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,sBAAsB,EACjC,MAAM,GAAE;IACN,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC3D,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAC7B,GACL,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAsQ7B;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,sBAAsB,EACjC,MAAM,GAAE;IAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAAO,IAG5C,6CAA6C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,EACD,UAAS;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,KACrC,OAAO,CAAC,UAAU,CAAC,CAqMvB;AAqCD,uFAAuF;AACvF,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sEAAsE;IACtE,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B,GACA,IAAI,CAwDN"}
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAO5D,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAW3E,OAAO,EACL,iBAAiB,EAElB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,gBAAgB,EAChB,MAAM,EACP,MAAM,YAAY,CAAC;AAIpB,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,UAAY,CAAC;AACnD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAG7C,KAAK,0BAA0B,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3E,UAAU,2BAA2B;IACnC,SAAS,EAAE,0BAA0B,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,cAAM,kBAAkB;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAGvB;IACJ,WAAW,SAAK;IAChB,OAAO,SAAK;IACZ,cAAc,SAAK;IACnB,OAAO,CAAC,OAAO,CAAC,CAAmC;IAEnD;2EACuE;IACvE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIjD,OAAO,CAAC,KAAK;IAiBb,aAAa,CACX,SAAS,EAAE,QAAQ,GAAG,UAAU,EAChC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE,OAAO,GACf,IAAI;IASP,UAAU,CACR,SAAS,EAAE,MAAM,GAAG,OAAO,EAC3B,OAAO,EAAE;QACP,EAAE,EAAE,OAAO,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACnD,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,IAAI;IAgBP,WAAW,CACT,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,OAAO,EACX,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,OAAO,GACf,IAAI;IAWP,MAAM,IAAI;QACR,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC;YAChB,cAAc,EAAE,MAAM,CAAC;YACvB,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,UAAU,EAAE,2BAA2B,EAAE,CAAC;QAC1C,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5C;CAkBF;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AA6CtD;;;;;;GAMG;AACH,qBAAa,aAAa;IAItB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAL/B,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,CAAM;IACrC,KAAK,SAAK;gBAES,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,kBAAkB,YAAA;IAGnD,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;CAiB3B;AAsED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAoDD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,sBAAsB,EACjC,MAAM,GAAE;IACN,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC3D,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC1B,GACL,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA4R7B;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,sBAAsB,EACjC,MAAM,GAAE;IACN,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtB,IAGJ,6CAA6C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,EACD,UAAS;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,KACrC,OAAO,CAAC,UAAU,CAAC,CAsOvB;AAuDD,uFAAuF;AACvF,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,YAAY,EACtB,GAAG,EAAE;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B,GACA,IAAI,CAwEN"}

package/dist/execute.js

@@ -9,6 +9,15 @@ import { InvocationFailure, InvocationService, } from "./invocation.js";
 const EXECUTE_MAX_HOST_CALLS = 20;
 export const EXECUTE_MAX_BATCH_CALLS = 10;
 const EXECUTE_HOST_CALL_TIMEOUT_MS = 15_000;
+/**
+ * Default budgets for `connecta.emit`. The byte budget is a transport bound,
+ * not a context bound — emitted image/audio blocks reach the model as media,
+ * not base64 text — so it sits far above the 24k return-value guard: room for
+ * two or three real screenshots after base64's 4/3 inflation, well short of a
+ * file-hosting ambition (design record M5).
+ */
+export const EXECUTE_MAX_EMITTED_BYTES = 4_000_000;
+export const EXECUTE_MAX_EMITTED_BLOCKS = 32;
 const diagnosticsEncoder = new TextEncoder();
 class ExecuteDiagnostics {
     started = Date.now();
@@ -16,6 +25,13 @@ class ExecuteDiagnostics {
     admissionMs = 0;
     setupMs = 0;
     executorWallMs = 0;
+    emitted;
+    /** Numbers only, per R8 — and only once something was emitted, so a
+     * non-emitting run's diagnostics stay byte-for-byte what they were. */
+    recordEmitted(count, bytes) {
+        if (count > 0)
+            this.emitted = { count, bytes };
+    }
     stats(operation) {
         let stats = this.operations.get(operation);
         if (!stats) {
@@ -83,9 +99,79 @@ class ExecuteDiagnostics {
                 connectorMs: operations.reduce((sum, item) => sum + item.connectorMs, 0),
             },
             operations,
+            ...(this.emitted ? { emitted: this.emitted } : {}),
         };
     }
 }
+const EMIT_SHAPE_HINT = '{ type: "text", text } or { type: "image" | "audio", data (base64), mimeType }';
+/**
+ * Strict M1 validation: required fields present and string-valued, nothing
+ * else — no `annotations`, no `_meta`, no sugar forms. Rejected rather than
+ * stripped, because silently deleting fields would deliver something the
+ * program did not ask to emit.
+ */
+function requireEmittedBlock(raw) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error(`connecta.emit accepts exactly one content block: ${EMIT_SHAPE_HINT}`);
+    }
+    const block = raw;
+    const fields = block.type === "text"
+        ? ["type", "text"]
+        : block.type === "image" || block.type === "audio"
+            ? ["type", "data", "mimeType"]
+            : undefined;
+    if (!fields) {
+        throw new Error(`connecta.emit supports content types "text", "image", and "audio"; got ${JSON.stringify(block.type)}`);
+    }
+    for (const field of fields) {
+        if (typeof block[field] !== "string") {
+            throw new Error(`connecta.emit block field "${field}" must be a string: ${EMIT_SHAPE_HINT}`);
+        }
+    }
+    const extra = Object.keys(block).filter((key) => !fields.includes(key));
+    if (extra.length > 0) {
+        throw new Error(`connecta.emit block carries unsupported field(s) ${extra.map((key) => JSON.stringify(key)).join(", ")}; a "${String(block.type)}" block is exactly { ${fields.join(", ")} }`);
+    }
+    return raw;
+}
+/**
+ * Request-local collection for `connecta.emit`. Budgets fail loudly at the
+ * crossing call — the block is not partially accepted and prior blocks are
+ * unaffected — so a program learns it is over budget while it can still
+ * choose differently (M5). Accepted blocks never ride `ExecuteResult`; the
+ * handler that owns this collector appends them to the final tool result.
+ */
+export class EmitCollector {
+    maxBytes;
+    maxBlocks;
+    diagnostics;
+    blocks = [];
+    bytes = 0;
+    constructor(maxBytes, maxBlocks, diagnostics) {
+        this.maxBytes = maxBytes;
+        this.maxBlocks = maxBlocks;
+        this.diagnostics = diagnostics;
+    }
+    accept(raw) {
+        const block = requireEmittedBlock(raw);
+        if (this.blocks.length >= this.maxBlocks) {
+            throw new Error(`connecta.emit block-count budget exceeded: ${this.maxBlocks} block(s) maximum, 0 remaining`);
+        }
+        const size = diagnosticsEncoder.encode(JSON.stringify(block)).byteLength;
+        if (this.bytes + size > this.maxBytes) {
+            throw new Error(`connecta.emit byte budget exceeded: block is ${size} serialized bytes with ${this.maxBytes - this.bytes} of ${this.maxBytes} remaining`);
+        }
+        this.blocks.push(block);
+        this.bytes += size;
+        this.diagnostics?.recordEmitted(this.blocks.length, this.bytes);
+    }
+}
+/** A configured emit budget must be a finite number >= 1; anything else falls back. */
+function resolveEmitBudget(value, fallback) {
+    return typeof value === "number" && Number.isFinite(value) && value >= 1
+        ? Math.trunc(value)
+        : fallback;
+}
 function serializedDiagnosticBytes(value) {
     try {
         const text = JSON.stringify(value);
@@ -205,9 +291,19 @@ export async function buildSandboxProviders(registry, baseUrl, logger, activity,
     const requestScope = {};
     const catalog = new CatalogService(registry, baseUrl, {
         requestScope,
+        // Every describe reaching this catalog came from inside a program, on a
+        // code-first and a classic-with-executor deployment alike, so the retry
+        // advice names connecta.describe regardless of what this server advertises.
+        describeRoute: "connecta.describe",
+        // Same reasoning for the discovery route a routing failure hands back: the
+        // program that just missed an address cannot call search_tools.
+        searchRoute: "connecta.search",
         ...(limits.discoveryConcurrency !== undefined
             ? { concurrency: limits.discoveryConcurrency }
             : {}),
+        ...(limits.probeTimeoutMs !== undefined
+            ? { probeTimeoutMs: limits.probeTimeoutMs }
+            : {}),
     });
     const invocation = new InvocationService(registry, catalog, activity);
     const maxHostCalls = Math.max(1, Math.trunc(limits.maxHostCalls ?? EXECUTE_MAX_HOST_CALLS));
@@ -292,6 +388,16 @@ export async function buildSandboxProviders(registry, baseUrl, logger, activity,
             fns: {
                 __callNamespace: callNamespace,
                 call: (address, args) => callAddress(address, args),
+                // Emission is a provider function, never an ExecuteResult field —
+                // that is what keeps the Executor contract untouched and parity
+                // structural (M8). It spends no host-call budget (M7); its own
+                // budgets live in the collector.
+                emit: async (block) => {
+                    if (!limits.emitCollector) {
+                        throw new Error("connecta.emit is unavailable: no emission collector was configured for this execution");
+                    }
+                    limits.emitCollector.accept(block);
+                },
                 batch: async (calls) => {
                     const started = Date.now();
                     const callCount = Array.isArray(calls) ? calls.length : 0;
@@ -392,6 +498,7 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
         let lease;
         let outcome;
         const diagnostics = diagnosticsRequested ? new ExecuteDiagnostics() : undefined;
+        const emitted = new EmitCollector(resolveEmitBudget(config.maxEmittedBytes, EXECUTE_MAX_EMITTED_BYTES), resolveEmitBudget(config.maxEmittedBlocks, EXECUTE_MAX_EMITTED_BLOCKS), diagnostics);
         const invocationFailures = [];
         try {
             // Admission comes before provider construction: queued calls retain no
@@ -420,10 +527,14 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
                     onInvocationFailure: (failure) => {
                         invocationFailures.push(failure);
                     },
+                    emitCollector: emitted,
                     ...(diagnostics ? { diagnostics } : {}),
                     ...(config.discoveryConcurrency !== undefined
                         ? { discoveryConcurrency: config.discoveryConcurrency }
                         : {}),
+                    ...(config.probeTimeoutMs !== undefined
+                        ? { probeTimeoutMs: config.probeTimeoutMs }
+                        : {}),
                 });
             }
             finally {
@@ -474,12 +585,13 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
                         message: `Executor failed: ${msg(err)}`,
                         retryable: false,
                     },
+                    ...discardedEmits(emitted),
                     diagnostics: diagnostics.finish(),
                 });
                 result.isError = true;
                 return result;
             }
-            return errorResult(`Executor failed: ${msg(err)}`);
+            return errorResult(`Executor failed: ${msg(err)}${discardedEmitsText(emitted)}`);
         }
         finally {
             // A sandbox timeout or early return must also release any outstanding
@@ -519,9 +631,14 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
                     break;
             }
             if (invocationFailure) {
+                // Handed back whole, with no size guard of its own — the failure was
+                // framed with bounded caller text (`boundedEchoText`) precisely so
+                // this path never needs one. Adding a cap here instead would leave the
+                // top-level surfaces, which have the same amplification, uncovered.
                 const result = jsonResult({
                     error: invocationFailure.details,
                     ...(logs ? { logs } : {}),
+                    ...discardedEmits(emitted),
                     ...(diagnostics ? { diagnostics: diagnostics.finish() } : {}),
                 });
                 result.isError = true;
@@ -536,12 +653,13 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
                         retryable: false,
                     },
                     ...(logs ? { logs } : {}),
+                    ...discardedEmits(emitted),
                     diagnostics: diagnostics.finish(),
                 });
                 result.isError = true;
                 return result;
             }
-            return errorResult(`${message}${logs ? `\n\nLogs:\n${logs}` : ""}`);
+            return errorResult(`${message}${logs ? `\n\nLogs:\n${logs}` : ""}${discardedEmitsText(emitted)}`);
         }
         // A result crossing back as a host BigInt (or otherwise unserializable
         // value) makes JSON.stringify throw — keep that inside the structured
@@ -560,20 +678,41 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
                         retryable: false,
                     },
                     ...(logs ? { logs } : {}),
+                    ...discardedEmits(emitted),
                     diagnostics: diagnostics.finish(),
                 });
                 response.isError = true;
                 return response;
             }
-            return errorResult(`${message}${logs ? `\n\nLogs:\n${logs}` : ""}`);
+            return errorResult(`${message}${logs ? `\n\nLogs:\n${logs}` : ""}${discardedEmitsText(emitted)}`);
         }
-        return jsonResult({
+        const response = jsonResult({
             result,
+            ...(emitted.blocks.length > 0 ? { emitted: emitted.blocks.length } : {}),
             ...(logs ? { logs } : {}),
             ...(diagnostics ? { diagnostics: diagnostics.finish() } : {}),
         });
+        if (emitted.blocks.length > 0) {
+            // Emitted image/audio blocks are valid MCP content that ToolResult's
+            // text-only typing does not model — the same acknowledged gap
+            // guardContent lives with for downstream block passthrough.
+            response.content.push(...emitted.blocks);
+        }
+        return response;
     };
 }
+/** M4: a failed program delivers no blocks, but the discard is visible. */
+function discardedEmits(emitted) {
+    return emitted.blocks.length > 0
+        ? { emittedDiscarded: emitted.blocks.length }
+        : {};
+}
+/** The same visibility for the plain-text error paths. */
+function discardedEmitsText(emitted) {
+    return emitted.blocks.length > 0
+        ? `\n\nemittedDiscarded: ${emitted.blocks.length}`
+        : "";
+}
 /**
  * How the tool opens, and where a program's argument schemas come from. Both
  * differ by surface: on the classic surface `execute_code` is the tool of last
@@ -590,12 +729,13 @@ const EXECUTE_SCHEMA_SOURCE = {
     classic: "describe_tools",
     "code-first": "connecta.describe",
 };
-const executeDescription = (surface) => `${EXECUTE_ROUTING[surface]} Only tools explicitly annotated readOnlyHint: true are available. Each run is limited to ${EXECUTE_MAX_HOST_CALLS} host calls; connecta.batch accepts at most ${EXECUTE_MAX_BATCH_CALLS}; each host call has a ${EXECUTE_HOST_CALL_TIMEOUT_MS / 1_000}-second deadline.
+const executeDescription = (surface, emitBudgets) => `${EXECUTE_ROUTING[surface]} Only tools explicitly annotated readOnlyHint: true are available. Each run is limited to ${EXECUTE_MAX_HOST_CALLS} host calls; connecta.batch accepts at most ${EXECUTE_MAX_BATCH_CALLS}; each host call has a ${EXECUTE_HOST_CALL_TIMEOUT_MS / 1_000}-second deadline.
 
 Write an async arrow function. It runs with NO network, filesystem, timers, or imports — the only capabilities are:
 - One global per connector: every address <connectorId>.<toolName> from search_tools is callable as <connectorId>.<toolName>(args) with a single args object matching the schema from ${EXECUTE_SCHEMA_SOURCE[surface]}. Names are sanitized to JS identifiers: characters outside [A-Za-z0-9_$] become "_" (e.g. my-service.get.thing → my_service.get_thing), leading digits get "_" prefixed, reserved words get "_" appended.
 - connecta.call(address, args) and connecta.batch(calls) — call raw addresses.
 - connecta.search(args), connecta.describe({ address: "<connectorId>.<toolName>" }), and connecta.describe({ addresses: [...] }) — load and inspect request-local catalogs on demand. Use safety: "readOnly" to avoid advertising calls this sandbox cannot execute; the filter changes results, not authority. Matches carrying schemas also list inputKeys, requiredInputKeys, and outputKeys — the same names the schema shows, ready to check against before building args. They are absent when a schema is not a plain object shape, so read the schema itself rather than assuming a missing list means no fields.
+- connecta.emit(block) — deliver rich MCP content alongside the JSON return: exactly { type: "text", text } or { type: "image" | "audio", data (base64), mimeType }, no other fields. Blocks are appended to the result on success only, spend no host calls, and are budgeted per run (${emitBudgets.maxBlocks} blocks, ${emitBudgets.maxBytes} serialized bytes); an over-budget or invalid emit throws catchably and accepts nothing.
 - console.log(...) — captured and returned alongside the result.
 
 Tool calls return plain values (MCP text content is JSON-parsed when possible) and throw on downstream errors — use try/catch to handle them. A thrown error carries only a message; connecta.batch reports each call as { address, ok: true, data } or { address, ok: false, error, errorDetails: { code, retryable } }, so use it when the program must tell a policy refusal from a transient failure. Never retry a failure whose retryable is false, and never retry a rate_limited one immediately — the sandbox has no timers. Return a JSON-serializable value; large results are truncated, so reduce data in code instead of returning raw payloads.
@@ -604,11 +744,24 @@ Plain JavaScript only — no TypeScript syntax. For unknown-address dependent wo
 Dependent example (only when the second call requires a value returned by the first): async () => { const { tools } = await connecta.search({ query: "pipeline run job logs", safety: "readOnly", includeSchemas: "compact" }); const pick = (suffix) => { const match = tools.find((tool) => tool.address.endsWith(suffix)); if (!match) throw new Error("no tool matching " + suffix); return match.address; }; const run = await connecta.call(pick(".get_run"), { runId: 42 }); const logs = await connecta.call(pick(".get_job_logs"), { jobId: run.failedJobId }); return [run, logs]; }`;
 /** Register the execute_code meta-tool. Only called when an executor is configured. */
 export function registerExecuteTool(server, registry, ctx) {
-    const handler = createExecuteTool(registry, ctx.baseUrl, ctx.executor, ctx.logger, ctx.activity, ctx.discoveryConcurrency !== undefined
-        ? { discoveryConcurrency: ctx.discoveryConcurrency }
-        : {});
+    // Resolved once so the description and the collector cannot disagree about
+    // the budgets this deployment actually enforces.
+    const emitBudgets = {
+        maxBytes: resolveEmitBudget(ctx.maxEmittedBytes, EXECUTE_MAX_EMITTED_BYTES),
+        maxBlocks: resolveEmitBudget(ctx.maxEmittedBlocks, EXECUTE_MAX_EMITTED_BLOCKS),
+    };
+    const handler = createExecuteTool(registry, ctx.baseUrl, ctx.executor, ctx.logger, ctx.activity, {
+        ...(ctx.discoveryConcurrency !== undefined
+            ? { discoveryConcurrency: ctx.discoveryConcurrency }
+            : {}),
+        ...(ctx.probeTimeoutMs !== undefined
+            ? { probeTimeoutMs: ctx.probeTimeoutMs }
+            : {}),
+        maxEmittedBytes: emitBudgets.maxBytes,
+        maxEmittedBlocks: emitBudgets.maxBlocks,
+    });
     server.registerTool("execute_code", {
-        description: executeDescription(ctx.surface ?? "classic"),
+        description: executeDescription(ctx.surface ?? "classic", emitBudgets),
         inputSchema: z.object({
             code: z
                 .string()