@zackbart/connecta 0.24.0 → 0.24.1

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to this package are documented here.
 
+## 0.24.1 — 2026-09-08
+
+### Added
+
+- `execute.maxHostCalls` and `execute.hostCallTimeoutMs` configure the
+  `execute_code` host-call budget and per-call deadline, previously fixed at
+  20 calls and 15 seconds. The tool description advertises the configured
+  values. Analytics providers such as Mixpanel routinely need 15 to 35 seconds
+  for funnel and experiment queries.
+- A `warn` log line for every failed connector call, carrying the connector,
+  tool, source, error code, attempts, duration, and a bounded downstream
+  message. Activity rows remain payload-free; the log is where the reason goes.
+
 ## 0.24.0 — 2026-09-07
 
 Deployments now select UI, encrypted credentials, activity history, and inbound

package/dist/execute.d.ts

@@ -117,6 +117,8 @@ export declare function createExecuteTool(registry: RegistryView, baseUrl: strin
     probeTimeoutMs?: number | undefined;
     maxEmittedBytes?: number | undefined;
     maxEmittedBlocks?: number | undefined;
+    maxHostCalls?: number | undefined;
+    hostCallTimeoutMs?: number | undefined;
     defer?: DeferredWork | undefined;
 }): ({ code, diagnostics: diagnosticsRequested }: {
     code: string;
@@ -143,6 +145,10 @@ export declare function registerExecuteTool(server: McpServer, registry: Registr
     maxEmittedBytes?: number | undefined;
     /** Block-count budget for connecta.emit. Default 32. */
     maxEmittedBlocks?: number | undefined;
+    /** Host calls one program may make. Default 20. */
+    maxHostCalls?: number | undefined;
+    /** Deadline per host call in milliseconds. Default 15_000. */
+    hostCallTimeoutMs?: number | undefined;
     defer?: DeferredWork | undefined;
 }): void;
 export {};

package/dist/execute.js

@@ -141,8 +141,8 @@ export class EmitCollector {
         this.diagnostics?.recordEmitted(this.blocks.length, this.bytes);
     }
 }
-/** A configured emit budget must be a finite number >= 1; anything else falls back. */
-function resolveEmitBudget(value, fallback) {
+/** A positive whole-number budget, or the default when the value is unusable. */
+function resolveBudget(value, fallback) {
     return typeof value === "number" && Number.isFinite(value) && value >= 1
         ? Math.trunc(value)
         : fallback;
@@ -349,7 +349,7 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
         let lease;
         let outcome;
         const diagnostics = diagnosticsRequested ? new ExecuteDiagnostics() : undefined;
-        const emitted = new EmitCollector(resolveEmitBudget(config.maxEmittedBytes, EXECUTE_MAX_EMITTED_BYTES), resolveEmitBudget(config.maxEmittedBlocks, EXECUTE_MAX_EMITTED_BLOCKS), diagnostics);
+        const emitted = new EmitCollector(resolveBudget(config.maxEmittedBytes, EXECUTE_MAX_EMITTED_BYTES), resolveBudget(config.maxEmittedBlocks, EXECUTE_MAX_EMITTED_BLOCKS), diagnostics);
         const invocationFailures = [];
         try {
             // Admission comes before provider construction: queued calls retain no
@@ -382,6 +382,8 @@ export function createExecuteTool(registry, baseUrl, executor, logger, activity,
                     ...(diagnostics ? { diagnostics } : {}),
                     discoveryConcurrency: config.discoveryConcurrency,
                     probeTimeoutMs: config.probeTimeoutMs,
+                    maxHostCalls: config.maxHostCalls,
+                    hostCallTimeoutMs: config.hostCallTimeoutMs,
                     defer: config.defer,
                 });
             }
@@ -585,7 +587,7 @@ function connectorInventory(connectors) {
         return `${prefix}${shown.join(", ")}.`;
     return `${prefix}${shown.join(", ")}${shown.length > 0 ? "; " : ""}+${omitted} more.`;
 }
-const executeDescription = (emitBudgets, connectorGuides, connectors) => `Use the configured services below to answer the task. A known address uses call_tool. Unknown-address and wider read-only work uses one execute_code program for discovery, calls, and reduction. Do not return catalog matches alone. Only readOnlyHint: true tools are available. Limits: ${EXECUTE_MAX_HOST_CALLS} host calls, ${EXECUTE_HOST_CALL_TIMEOUT_MS / 1_000}s/host call.
+const executeDescription = (emitBudgets, hostLimits, connectorGuides, connectors) => `Use the configured services below to answer the task. A known address uses call_tool. Unknown-address and wider read-only work uses one execute_code program for discovery, calls, and reduction. Do not return catalog matches alone. Only readOnlyHint: true tools are available. Limits: ${hostLimits.maxHostCalls} host calls, ${hostLimits.hostCallTimeoutMs / 1_000}s/host call.
 
 ${connectorInventory(connectors)}
 
@@ -603,8 +605,14 @@ export function registerExecuteTool(server, registry, ctx) {
     // Resolved once so the description and the collector cannot disagree about
     // the budgets this deployment actually enforces.
     const emitBudgets = {
-        maxBytes: resolveEmitBudget(ctx.maxEmittedBytes, EXECUTE_MAX_EMITTED_BYTES),
-        maxBlocks: resolveEmitBudget(ctx.maxEmittedBlocks, EXECUTE_MAX_EMITTED_BLOCKS),
+        maxBytes: resolveBudget(ctx.maxEmittedBytes, EXECUTE_MAX_EMITTED_BYTES),
+        maxBlocks: resolveBudget(ctx.maxEmittedBlocks, EXECUTE_MAX_EMITTED_BLOCKS),
+    };
+    // Same rule for host-call limits: the description advertises exactly what
+    // the sandbox enforces, so a raised deadline is visible to the model.
+    const hostLimits = {
+        maxHostCalls: resolveBudget(ctx.maxHostCalls, EXECUTE_MAX_HOST_CALLS),
+        hostCallTimeoutMs: resolveBudget(ctx.hostCallTimeoutMs, EXECUTE_HOST_CALL_TIMEOUT_MS),
     };
     const connectors = registry.listConnectors();
     const handler = createExecuteTool(registry, ctx.baseUrl, ctx.executor, ctx.logger, ctx.activity, {
@@ -612,10 +620,12 @@ export function registerExecuteTool(server, registry, ctx) {
         probeTimeoutMs: ctx.probeTimeoutMs,
         maxEmittedBytes: emitBudgets.maxBytes,
         maxEmittedBlocks: emitBudgets.maxBlocks,
+        maxHostCalls: hostLimits.maxHostCalls,
+        hostCallTimeoutMs: hostLimits.hostCallTimeoutMs,
         defer: ctx.defer,
     });
     server.registerTool("execute_code", {
-        description: executeDescription(emitBudgets, hasConnectorGuides(connectors), connectors),
+        description: executeDescription(emitBudgets, hostLimits, hasConnectorGuides(connectors), connectors),
         inputSchema: z.object({
             code: z
                 .string()

package/dist/index.d.ts

@@ -51,7 +51,7 @@ export interface ConnectaCallsConfig {
      */
     maxResultBytes?: number;
 }
-/** Budgets for rich output emitted by execute_code programs (`connecta.emit`). */
+/** Budgets for execute_code programs: host calls and rich output (`connecta.emit`). */
 export interface ConnectaExecuteConfig {
     /**
      * Aggregate serialized bytes `connecta.emit` accepts per run. Default
@@ -62,6 +62,18 @@ export interface ConnectaExecuteConfig {
     maxEmittedBytes?: number;
     /** Content blocks `connecta.emit` accepts per run. Default 32. */
     maxEmittedBlocks?: number;
+    /**
+     * Host calls one program may make. Default 20. Invalid values fall back to
+     * the default.
+     */
+    maxHostCalls?: number;
+    /**
+     * Deadline for each host call a program makes, in milliseconds. Default
+     * 15_000. Raise it for providers whose legitimate calls run longer, such as
+     * analytics queries; `call_tool`'s own `timeoutMs` is unaffected. Invalid
+     * values fall back to the default.
+     */
+    hostCallTimeoutMs?: number;
 }
 export interface AdmissionPoolConfig {
     /** Simultaneous work admitted to this pool. */

package/dist/index.js

@@ -75,6 +75,8 @@ const CONFIG_SCHEMA = {
     execute: {
         maxEmittedBytes: null,
         maxEmittedBlocks: null,
+        maxHostCalls: null,
+        hostCallTimeoutMs: null,
     },
     admission: {
         requests: admissionPoolSchema,
@@ -303,6 +305,8 @@ export function createConnecta(config) {
         discoveryConcurrency: config.discovery?.concurrency,
         maxEmittedBytes: config.execute?.maxEmittedBytes,
         maxEmittedBlocks: config.execute?.maxEmittedBlocks,
+        maxHostCalls: config.execute?.maxHostCalls,
+        hostCallTimeoutMs: config.execute?.hostCallTimeoutMs,
         credentialVault,
         ui: config.ui,
         deploymentInfo: config.deploymentInfo,

package/dist/invocation.js

@@ -184,7 +184,23 @@ export class InvocationService {
         };
         const failed = (error) => {
             const diagnostics = timing();
-            const details = enrich(error, resolved ?? activityTarget);
+            const target = resolved ?? activityTarget;
+            const details = enrich(error, target);
+            // Activity rows stay payload-free by construction; the operator's log is
+            // where the downstream reason goes, bounded and without arguments.
+            if (target && details.code !== "destructive_tool_requires_approval") {
+                this.registry
+                    .contextFor(target.connector.id, this.catalog.baseUrl, this.catalog.requestScope)
+                    .logger.warn("[connecta] call failed", {
+                    connector: target.connector.id,
+                    tool: target.toolName,
+                    source: context.source,
+                    code: details.code,
+                    attempts,
+                    durationMs: Date.now() - started,
+                    message: String(details.message ?? "").slice(0, 300),
+                });
+            }
             record(details.code === "timeout"
                 ? "timeout"
                 : details.code === "cancelled"

package/dist/routes/mcp.js

@@ -215,6 +215,12 @@ async function serveMcp(request, opts, baseUrl, actor, registry, canManageAuth,
             ...(opts.maxEmittedBlocks !== undefined
                 ? { maxEmittedBlocks: opts.maxEmittedBlocks }
                 : {}),
+            ...(opts.maxHostCalls !== undefined
+                ? { maxHostCalls: opts.maxHostCalls }
+                : {}),
+            ...(opts.hostCallTimeoutMs !== undefined
+                ? { hostCallTimeoutMs: opts.hostCallTimeoutMs }
+                : {}),
         });
         return server;
     };

package/dist/routes/shared.d.ts

@@ -29,6 +29,10 @@ export interface ServerOptions {
     maxEmittedBytes?: number | undefined;
     /** Block-count budget for connecta.emit per run. Default 32. */
     maxEmittedBlocks?: number | undefined;
+    /** Host calls one execute_code program may make. Default 20. */
+    maxHostCalls?: number | undefined;
+    /** Deadline per execute_code host call. Default 15_000. */
+    hostCallTimeoutMs?: number | undefined;
     /** Required sandbox backing the execute_code meta-tool. */
     executor: Executor;
     /** Sanitized identity of the configured sandbox, when it has one. */

package/dist/version.d.ts

@@ -4,4 +4,4 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export declare const CONNECTA_VERSION = "0.24.0";
+export declare const CONNECTA_VERSION = "0.24.1";

package/dist/version.js

@@ -4,4 +4,4 @@
  * a bump that forgets this file fails the build rather than shipping a stale
  * version to `/health` and to downstream MCP handshakes.
  */
-export const CONNECTA_VERSION = "0.24.0";
+export const CONNECTA_VERSION = "0.24.1";

package/documentation/code-mode.md

@@ -302,7 +302,7 @@ Program-authored errors stay untyped, and code must never parse error prose.
 | `input_required_unsupported` | a downstream asked for mid-call input | false |
 | `rate_limited` | the downstream reported a rate limit | true |
 | `unavailable` | the downstream is down or unreachable | true |
-| `timeout` | the per-call 15-second deadline expired | true |
+| `timeout` | the per-call deadline (`execute.hostCallTimeoutMs`, default 15 s) expired | true |
 | `cancelled` | the run ended while this call was in flight (`E5`) | false |
 | `connector_call_failed` | anything else the connector threw | per message |
 | `catalog_lookup_failed` | the connector's catalog could not be loaded | per cause |
@@ -492,7 +492,7 @@ because connecta enforces them above the sandbox:
 | Bound | Value |
 | --- | --- |
 | Host calls per execution | 20 |
-| Deadline per host call | 15 s |
+| Deadline per host call | 15 s, `execute.hostCallTimeoutMs` |
 | Discovery page | ≤ 100 tools, ≤ 256,000 serialized bytes |
 | `describe` addresses | ≤ 100 |
 | `describe` nearby suggestions | ≤ 3 canonical addresses per failed entry |

package/documentation/operations.md

@@ -101,6 +101,8 @@ optional.
 | `calls.maxResultBytes?` | 50_000 | inline result cap before truncation and `get_result` paging; a connector may override it. Invalid values warn and fall back |
 | `execute.maxEmittedBytes?` | 4_000_000 | aggregate `connecta.emit` bytes per run — a transport bound, not a context bound |
 | `execute.maxEmittedBlocks?` | 32 | content blocks `connecta.emit` accepts per run |
+| `execute.maxHostCalls?` | 20 | connector calls one `execute_code` program may make |
+| `execute.hostCallTimeoutMs?` | 15_000 | deadline per `execute_code` host call; raise it for providers whose legitimate calls run longer. `call_tool`'s `timeoutMs` is separate |
 | `admission.requests?` | 16 active / 32 queued / 5 s / 1 s | global FIFO `/mcp` capacity, taken before auth ([request admission](./request-admission.md)) |
 | `admission.code?` | 2 active / 8 queued / 5 s / 1 s | fallback pool for an executor that owns no `acquire()`; ignored with a warning when it does |
 

package/documentation/upgrading.md

@@ -117,7 +117,7 @@ exist so far:
 | --- | --- | --- |
 | **pre-template** | before 0.10.2 | no `connecta init` existed; hand-written, or copied from the retired `examples/node` |
 | **A** | 0.10.2 – 0.15.1 | `.env.example`, `.gitignore`, `AGENTS.md`, `CLAUDE.md`, `README.md`, `package.json`, `src/index.ts`, `tsconfig.json` |
-| **B** | 0.16.0 – 0.24.0 | adds `.dockerignore`, `Dockerfile`, `docker-compose.yml`, and `src/file-activity.ts`; `src/index.ts` grows the four commented operator blocks; `.env.example` ships `CONNECTA_TOKEN=` empty |
+| **B** | 0.16.0 – 0.24.1 | adds `.dockerignore`, `Dockerfile`, `docker-compose.yml`, and `src/file-activity.ts`; `src/index.ts` grows the four commented operator blocks; `.env.example` ships `CONNECTA_TOKEN=` empty |
 
 Generation A is a decade in template years and identifying it precisely does
 not matter, because you are about to reconstruct it exactly rather than guess
@@ -190,7 +190,7 @@ Generate the *current* template beside the base you already made, into the same
 `$SCRATCH`:
 
 ```sh
-(cd "$SCRATCH" && npx @zackbart/connecta@0.24.0 init current)
+(cd "$SCRATCH" && npx @zackbart/connecta@0.24.1 init current)
 ```
 
 You now have a three-way merge with a real base: `$SCRATCH/base` is what this
@@ -246,7 +246,7 @@ A deployment older than 0.10.2 has no base to diff against. Do not try to
 manufacture one. Instead:
 
 1. `SCRATCH=$(mktemp -d)`, then
-   `(cd "$SCRATCH" && npx @zackbart/connecta@0.24.0 init current)` — there is no
+   `(cd "$SCRATCH" && npx @zackbart/connecta@0.24.1 init current)` — there is no
    `base` leg here, only the current template to read from.
 2. Copy `$SCRATCH/current` into the deployment file by file, **skipping
    `src/index.ts`**.
@@ -267,11 +267,15 @@ first, so cross them bottom-up: start at the oldest one still above this
 deployment's pin and work back up the page, because each boundary assumes the
 older ones are already done.
 
-### 0.23.0 → 0.24.0
+### 0.23.0 → 0.24.1
 
 Use the [optional-module migration](./optional-modules-upgrade.md) to select
 modules, grant auth-management permissions, and migrate issued-token clients.
-Preserve storage, encryption keys, and identity namespaces.
+Preserve storage, encryption keys, and identity namespaces. 0.24.1 adds two
+optional settings, `execute.maxHostCalls` and `execute.hostCallTimeoutMs`, for
+deployments whose providers legitimately run past the 20-call and 15-second
+`execute_code` defaults, and one bounded `warn` log line per failed connector
+call; neither needs migration.
 
 ### 0.22.3 → 0.23.0
 

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@zackbart/connecta",
-  "version": "0.24.0",
+  "version": "0.24.1",
   "type": "module",
   "sideEffects": false,
-  "description": "One MCP to rule them all \u2014 a single MCP endpoint aggregating many downstream connectors behind a code-first surface of seven meta-tools.",
+  "description": "One MCP to rule them all — a single MCP endpoint aggregating many downstream connectors behind a code-first surface of seven meta-tools.",
   "license": "MIT",
   "engines": {
     "node": ">=22.0.0"

package/templates/node/package.json

@@ -15,7 +15,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@zackbart/connecta": "0.24.0",
+    "@zackbart/connecta": "0.24.1",
     "quickjs-emscripten": "0.32.0"
   },
   "devDependencies": {