@xopcai/xopc 0.0.313 → 0.0.314

package/dist/src/agent/commands/approved-verification.js

@@ -0,0 +1,48 @@
+import { runProcess } from "../../process/run-process.js";
+import { isolatedCommand, removeCommandContainer } from "./command-isolation.js";
+import { randomUUID } from "node:crypto";
+//#region src/agent/commands/approved-verification.ts
+var VerificationTerminationUnknownError = class extends Error {};
+/** Tests are executable repository content: always sandboxed, no host fallback. */
+async function verifyTaskWorkspace(input) {
+	input.guard();
+	input.signal.throwIfAborted();
+	const command = await isolatedCommand({
+		id: input.executionId ?? randomUUID(),
+		command: input.command,
+		cwd: input.workspace,
+		workspace: input.workspace,
+		isolation: {
+			mode: "docker",
+			image: input.image,
+			network: false,
+			workspaceAccess: "read-only"
+		}
+	});
+	try {
+		const processResult = await runProcess({
+			program: command.executable,
+			args: command.args,
+			cwd: input.workspace,
+			env: { PATH: process.env.PATH },
+			signal: input.signal,
+			timeoutMs: 12e4,
+			maxOutputBytes: 32e3,
+			terminationPolicy: "tree"
+		});
+		input.signal.throwIfAborted();
+		input.guard();
+		return {
+			passed: processResult.exitCode === 0 && !processResult.timedOut && !processResult.aborted,
+			output: `${processResult.stdout}\n${processResult.stderr}`.slice(-32e3)
+		};
+	} finally {
+		if (command.containerName) try {
+			await removeCommandContainer(command.containerName);
+		} catch (cause) {
+			throw new VerificationTerminationUnknownError("Verification container termination is unknown; reconcile before resuming", { cause });
+		}
+	}
+}
+//#endregion
+export { VerificationTerminationUnknownError, verifyTaskWorkspace };

package/dist/src/agent/context/coordinator.js

@@ -1,8 +1,8 @@
 import { extractProfileAgentId } from "../../config/agent-profile.js";
+import { assembleTaskContext } from "../../tasks/task-context-assembler.js";
 import { recordExecutionContext } from "./audit.js";
-import { buildExecutionContext, fitExecutionContextToChars } from "./execution-context.js";
 import { extractAgentUserPlainText } from "../memory/user-message-text.js";
-import { assembleTaskContext } from "../../tasks/task-context-assembler.js";
+import { buildExecutionContext, fitExecutionContextToChars } from "./execution-context.js";
 //#region src/agent/context/coordinator.ts
 var ExecutionContextCoordinator = class {
 	currentBySession = /* @__PURE__ */ new Map();

package/dist/src/agent/context/execution-context.js

@@ -1,13 +1,13 @@
 import { getSqliteDatabase, init_transaction } from "../../storage/sqlite/transaction.js";
 import { listCollaborationRules } from "../../storage/sqlite/collaboration-rule-repository.js";
-import { calculateExecutionValue } from "../../user-model/importance.js";
-import { listUserAssertions } from "../../user-model/repository.js";
-import { canUseAssertion } from "../../user-model/usage-policy.js";
 import { searchKnowledgeItems } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
 import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
-import { buildUserContextBlock } from "../memory/context-fence.js";
+import { calculateExecutionValue } from "../../user-model/importance.js";
+import { listUserAssertions } from "../../user-model/repository.js";
+import { canUseAssertion } from "../../user-model/usage-policy.js";
 import { getExecutionContextFeedbackScores } from "./audit.js";
+import { buildUserContextBlock } from "../memory/context-fence.js";
 import { randomUUID } from "node:crypto";
 //#region src/agent/context/execution-context.ts
 init_transaction();

package/dist/src/agent/context/execution-scope.js

@@ -1,12 +1,13 @@
 import { isXopcDatabaseOpen } from "../../storage/sqlite/connection.js";
+import { TaskRepository, init_task_repository } from "../../tasks/task-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import "../../storage/sqlite/index.js";
-import { TaskRepository } from "../../tasks/task-repository.js";
-import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
-import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { sanitizeForPromptLiteral } from "../prompt/sanitize-for-prompt.js";
+import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { buildActiveProjectContextForPrompt } from "./project-context.js";
 //#region src/agent/context/execution-scope.ts
+init_task_repository();
 const MAX_OBJECTIVE_TEXT = 1200;
 const MAX_CRITERIA = 12;
 function bounded(value, max = MAX_OBJECTIVE_TEXT) {

package/dist/src/agent/context/project-context.js

@@ -1,12 +1,13 @@
+import { TaskRepository, init_task_repository } from "../../tasks/task-repository.js";
+import { sanitizeForPromptLiteral } from "../prompt/sanitize-for-prompt.js";
+import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
+import { LocalAppStore } from "../../local-apps/store.js";
 import { ProjectStore } from "../../projects/project-store.js";
 import { getProjectForSession, getProjectWorkspacePathForSession } from "../../projects/workspace.js";
 import { knowledgeItemAllowed, listKnowledgeItems, searchKnowledgeItems } from "../../knowledge-memory/repository.js";
 import "../../knowledge-memory/index.js";
-import { TaskRepository } from "../../tasks/task-repository.js";
-import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
-import { sanitizeForPromptLiteral } from "../prompt/sanitize-for-prompt.js";
-import { LocalAppStore } from "../../local-apps/store.js";
 //#region src/agent/context/project-context.ts
+init_task_repository();
 const MAX_TEXT = 1200;
 const MAX_TASKS = 5;
 const MAX_SESSIONS = 5;

package/dist/src/agent/data-acquisition/service.js

@@ -1,7 +1,7 @@
 import { executeWithTimeout } from "../lifecycle/timeout-wrapper.js";
 import { checkedFilePath, readWorkspaceFileAsync } from "../sandbox/fileAccess.js";
-import { checkFileSafety } from "../prompt/safety.js";
 import { dataScheduler } from "./scheduler.js";
+import { checkFileSafety } from "../prompt/safety.js";
 import { parseRepositoryMatch, repositorySearch } from "../tools/repository-search.js";
 import { DATA_OPERATION_TOOLS, nativeDataArgs, validateDataBatch } from "./schema.js";
 import { readGitData } from "./git.js";

package/dist/src/agent/embedded/index.js

@@ -1,11 +1,11 @@
-import { DEFAULT_MAX_LIVE_TOOL_RESULT_CHARS, resolveLiveToolResultMaxChars, truncateToolResultMessage } from "./tool-result-truncation.js";
+import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession, runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { abortEmbeddedRun, getEmbeddedRunByConversationId, queueEmbeddedSteer } from "./runs.js";
+import { DEFAULT_MAX_LIVE_TOOL_RESULT_CHARS, resolveLiveToolResultMaxChars, truncateToolResultMessage } from "./tool-result-truncation.js";
 import { getRawSessionAppendMessage, guardSessionManager, installSessionToolResultGuard } from "./session-tool-result-guard.js";
 import { acquireEmbeddedSessionRunner, buildEmbeddedRunnerFingerprint, evictAllEmbeddedSessionRunners, evictEmbeddedSessionRunner, getEmbeddedSessionRunnerIdleTtlMs, getEmbeddedSessionRunnerStats, isEmbeddedSessionRunnerEnabled, resetEmbeddedSessionRunnerForTest } from "./session-runner.js";
 import { repairAssistantUsageInSessionManager } from "./session-manager-init.js";
 import { openSqliteHydratingSessionManager } from "./sqlite-hydrating-session-manager.js";
 import { InMemoryTranscriptRuntime, createSqliteTranscriptRuntime } from "./transcript-runtime.js";
-import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession, runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { runXopcEmbeddedTurn } from "./run-turn.js";
 import { runEmbeddedTurnForSession } from "./run-for-session.js";
 import { CURRENT_SESSION_VERSION, PiTranscriptManager } from "./pi-transcript.js";

package/dist/src/agent/embedded/model-runtime.js

@@ -1,6 +1,6 @@
 import { init_paths, resolveModelsJsonPath } from "../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
+import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { XopcModelCredentialStore, init_model_credential_store } from "../../auth/model-credential-store.js";
 import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "../../providers/register-bundled-oauth-flows.js";
 import { init_register_runtime_providers, registerRuntimeProviders } from "../../providers/register-runtime-providers.js";

package/dist/src/agent/embedded/run-for-session.js

@@ -2,16 +2,16 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { init_providers, resolveModel } from "../../providers/index.js";
 import { appendDynamicPromptSection } from "../prompt/cache-boundary.js";
-import { resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
-import { resolveCompactionPolicy } from "../memory/compaction-policy.js";
-import { projectTurnOutcome } from "../../session/turn-outcome-projector.js";
+import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { resolveAgentTurnTimeoutMs } from "../orchestration/run-agent-turn-with-timeout.js";
 import { resolvePromptCachePolicy } from "../../providers/prompt-cache-plan.js";
 import { recoverContext } from "../memory/context-recovery.js";
-import { runWithEmbeddedExecutionSession } from "./execution-context.js";
+import { resolveCompactionPolicy } from "../memory/compaction-policy.js";
 import { runXopcEmbeddedTurn } from "./run-turn.js";
+import { projectTurnOutcome } from "../../session/turn-outcome-projector.js";
 import { voicePresentationPrompt } from "../prompt/voice-presentation.js";
 import { applyStartupContextToUserMessage } from "../reply/apply-turn-user-enrichment.js";
 import { AgentRunSupervisor } from "../orchestration/agent-run-supervisor.js";

package/dist/src/agent/embedded/run-turn.js

@@ -2,10 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { getClarification, getClarificationResumeInput, isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
 import { getConnectionResumeInput, init_connection_wait_repository, isConnectionSuspended } from "../../storage/sqlite/connection-wait-repository.js";
+import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 import { isComputerControlActive, isComputerLeaseTool, stopComputerControl } from "../../computer/control-guard.js";
-import { projectContextForModel } from "../memory/context-budget.js";
-import { resolveCompactionPolicy } from "../memory/compaction-policy.js";
-import { markTurnToolResult } from "../memory/turn-provenance.js";
 import { EmbeddedRunConflictError, abortEmbeddedRun, acquireEmbeddedRunLease, queueEmbeddedSteer } from "./runs.js";
 import { lastAssistantPlainText, subscribeEmbeddedSessionEvents } from "./subscribe-session.js";
 import { isContextOverflowError } from "../orchestration/context-overflow.js";
@@ -16,14 +14,16 @@ import { tryApplySessionTranscriptHygiene } from "../transcript/transcript-hygie
 import { resolvePromptCachePolicy } from "../../providers/prompt-cache-plan.js";
 import { wrapStreamFnForXopcExtensions } from "./xopc-stream-bridge.js";
 import { acquireEmbeddedSessionRunner, evictEmbeddedSessionRunner } from "./session-runner.js";
+import { projectContextForModel } from "../memory/context-budget.js";
 import { createSqliteTranscriptRuntime } from "./transcript-runtime.js";
 import { ContextRecoveryError, assessContext, recoverContext } from "../memory/context-recovery.js";
+import { resolveCompactionPolicy } from "../memory/compaction-policy.js";
 import { buildPromptCacheSnapshot, observePromptCacheSnapshot } from "../../providers/prompt-cache-observability.js";
 import { isPromptCacheExpired, recordPromptCacheTouch } from "../../providers/prompt-cache-lifecycle.js";
+import { markTurnToolResult } from "../memory/turn-provenance.js";
 import { RepositoryInstructions } from "../coding/repository-instructions.js";
 import { RunVerification } from "../coding/run-verification.js";
 import { withDelegationScope } from "../orchestration/delegation-scope.js";
-import { runWithEmbeddedExecutionSession } from "./execution-context.js";
 //#region src/agent/embedded/run-turn.ts
 init_connection_wait_repository();
 init_logger();

package/dist/src/agent/embedded/session-tool-result-guard.js

@@ -1,10 +1,10 @@
 import { init_string_coerce, normalizeOptionalString } from "../../utils/string-coerce.js";
-import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
-import { resolveLiveToolResultMaxChars, truncateToolResultMessage } from "./tool-result-truncation.js";
-import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
 import { extractToolCallsFromAssistant, extractToolResultId } from "../transcript/tool-call-id.js";
 import { makeMissingToolResult, sanitizeToolCallInputs } from "../transcript/session-transcript-repair.js";
 import { boundedJsonUtf8Bytes, firstEnumerableOwnKeys, jsonUtf8BytesOrInfinity } from "../../infra/json-utf8-bytes.js";
+import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
+import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
+import { resolveLiveToolResultMaxChars, truncateToolResultMessage } from "./tool-result-truncation.js";
 //#region src/agent/embedded/session-tool-result-guard.ts
 init_string_coerce();
 /**

package/dist/src/agent/embedded/tool-result-truncation.js

@@ -1,6 +1,6 @@
 import { init_string_coerce, normalizeLowercaseStringOrEmpty } from "../../utils/string-coerce.js";
-import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
 import { isDataBatchResult, renderDataBatch } from "../data-acquisition/render.js";
+import { formatContextLimitTruncationNotice } from "./tool-result-context-guard.js";
 //#region src/agent/embedded/tool-result-truncation.ts
 init_string_coerce();
 const MAX_TOOL_RESULT_CONTEXT_SHARE = .3;

package/dist/src/agent/external-tools/cliProvider.js

@@ -5,14 +5,17 @@ import { getConnectorAccount, init_connector_account_repository } from "../../st
 import { appendConnectorExecutionAudit, consumeConnectorApproval, createConnectorApproval, getConnectorApproval, getConnectorConnection, getConnectorInstallation, init_connector_repository } from "../../storage/sqlite/connector-repository.js";
 import { connectorObjectiveScope, init_connection_wait_repository, publishConnectionWait, requireSessionConnection } from "../../storage/sqlite/connection-wait-repository.js";
 import "../../storage/sqlite/index.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import { ExternalEffectNotAppliedError, executeExternalOperation } from "../../capabilities/runtime/external-operations.js";
+import "../../capabilities/runtime/dispatcher.js";
+import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
+import { selectConnectorAccount } from "../../connectors/account-selection.js";
+import { cliContextPath } from "../../connectors/cli/process.js";
 import { validateActionInput } from "../../connectors/cli/protocol.js";
 import { getCliAdapter } from "../../connectors/cli/adapterRegistry.js";
 import { evaluateConnectorExecutionPolicy } from "../../connectors/policy.js";
 import { listConnectorInstances } from "../../connectors/instances.js";
-import { cliContextPath } from "../../connectors/cli/process.js";
 import { cliOwnerId, recoverCliExecutions } from "../../connectors/cli/store.js";
-import { selectConnectorAccount } from "../../connectors/account-selection.js";
-import { connectorArgumentsHash, connectorArgumentsPreview } from "../../connectors/approval.js";
 import { describeCliAction, executeCliAction } from "../../connectors/cli/runtime.js";
 import { connectorPrincipalForSession } from "../../connectors/principal.js";
 import { externalToolRef, parseExternalToolRef } from "./refs.js";
@@ -163,15 +166,18 @@ var CliToolProvider = class {
 		validateActionInput(action, input);
 		const scopes = Array.isArray(connection.metadata.scopes) ? connection.metadata.scopes : [];
 		if (action.requiredScopes.some((scope) => !scopes.includes(scope))) throw new Error("CLI account is missing required scopes. Reauthorize this account.");
+		const descriptorDigest = connectorArgumentsHash({
+			action,
+			adapterVersion: item.adapter.version,
+			binaryVersion: item.adapter.binaryVersion
+		});
 		const argumentsHash = () => connectorArgumentsHash({
 			args: input,
 			exportResult,
 			instanceId: item.instance.instanceId,
 			accountId: connection.accountId,
 			connectionId: connection.id,
-			actionRevision: action.revision,
-			binaryVersion: item.adapter.binaryVersion,
-			adapterVersion: item.adapter.version,
+			descriptorDigest,
 			principalId: item.principal.principalId,
 			agentId: item.agentId,
 			conversationId,
@@ -230,87 +236,129 @@ var CliToolProvider = class {
 				instruction: "Approve this exact action in xopc, then retry with unchanged arguments and approvalId."
 			});
 		}
-		const executionId = randomUUID();
-		let authorized = false;
-		const beforeExecute = () => {
-			runSqliteWriteTransaction((db) => {
-				const hash = argumentsHash();
-				const freshPolicy = getConnectorInstallation(item.policy.id);
-				const freshConnection = getConnectorConnection(connection.id);
-				if (!freshPolicy || freshConnection?.status !== "active" || getConnectorAccount(connection.accountId)?.currentConnectionId !== connection.id || !selectConnectorAccount({
-					installation: freshPolicy,
-					agentId: item.agentId,
-					conversationId,
-					requestedAccountId: connection.accountId
-				}).connection || evaluateConnectorExecutionPolicy({
-					installation: freshPolicy,
-					action: {
-						scope: action.scope,
-						curated: true
-					},
-					accountId: connection.accountId,
-					agentId: item.agentId,
-					confirmed: Boolean(approvalId)
-				}).decision !== "allowed") throw new Error("Connector permission changed.");
-				if (approvalId) {
-					const approval = getConnectorApproval(approvalId);
-					if (!approval || approval.argumentsHash !== hash || !consumeConnectorApproval(approvalId, hash)) throw new Error("Approval is invalid, expired or already consumed.");
+		if (approvalId) {
+			const approval = getConnectorApproval(approvalId);
+			if (!approval || approval.argumentsHash !== argumentsHash() || !["approved", "consumed"].includes(approval.status) || approval.status === "approved" && Date.parse(approval.expiresAt) <= Date.now()) return result({
+				outcome: "failed",
+				error: {
+					kind: "approval",
+					message: "Approval is invalid, expired or belongs to a different operation."
 				}
-				db.prepare(`INSERT INTO connector_cli_executions (id,instance_id,account_id,connection_id,action_id,revision,arguments_hash,status,owner_id,started_at)
-          VALUES (?,?,?,?,?,?,?,'running',?,?)`).run(executionId, item.instance.instanceId, connection.accountId, connection.id, action.id, action.revision, hash, cliOwnerId, Date.now());
 			});
-			authorized = true;
+		}
+		const acceptedArgumentsHash = argumentsHash();
+		const authorizeCurrent = () => {
+			const freshPolicy = getConnectorInstallation(item.policy.id);
+			const freshConnection = getConnectorConnection(connection.id);
+			const currentConfig = this.deps.getConfig();
+			const enabled = currentConfig && listConnectorInstances(currentConfig).some((instance) => instance.instanceId === item.instance.instanceId && instance.enabled && instance.materialized.type === "cli");
+			const currentScopes = Array.isArray(freshConnection?.metadata.scopes) ? freshConnection.metadata.scopes : [];
+			if (!enabled || !freshPolicy || freshConnection?.status !== "active" || getConnectorAccount(connection.accountId)?.currentConnectionId !== connection.id || action.requiredScopes.some((scope) => !currentScopes.includes(scope)) || action.anyScopes?.length && !action.anyScopes.some((scope) => currentScopes.includes(scope)) || !selectConnectorAccount({
+				installation: freshPolicy,
+				agentId: item.agentId,
+				conversationId,
+				requestedAccountId: connection.accountId
+			}).connection || evaluateConnectorExecutionPolicy({
+				installation: freshPolicy,
+				action: {
+					scope: action.scope,
+					curated: true
+				},
+				accountId: connection.accountId,
+				agentId: item.agentId,
+				confirmed: Boolean(approvalId)
+			}).decision !== "allowed") throw new CapabilityError("FORBIDDEN", "Connector permission changed.");
+			if (argumentsHash() !== acceptedArgumentsHash) throw new CapabilityError("REVISION_CONFLICT", "Connector objective changed.");
 		};
-		const started = Date.now();
-		let output;
-		try {
-			output = await executeCliAction(item.config, item.instance.instanceId, connection, action, input, context.signal, beforeExecute);
-		} catch (error) {
-			output = {
-				outcome: authorized && action.scope !== "read" ? "unknown" : "failed",
-				error: {
-					kind: "runtime",
-					message: error instanceof Error ? error.message : "CLI failed."
-				}
+		const execute = async (executionId) => {
+			let authorized = false;
+			const beforeExecute = () => {
+				runSqliteWriteTransaction((db) => {
+					const hash = argumentsHash();
+					authorizeCurrent();
+					if (approvalId) {
+						const approval = getConnectorApproval(approvalId);
+						if (!approval || approval.argumentsHash !== hash || !consumeConnectorApproval(approvalId, hash)) throw new Error("Approval is invalid, expired or already consumed.");
+					}
+					db.prepare(`INSERT INTO connector_cli_executions (id,instance_id,account_id,connection_id,action_id,revision,arguments_hash,status,owner_id,started_at)
+            VALUES (?,?,?,?,?,?,?,'running',?,?)`).run(executionId, item.instance.instanceId, connection.accountId, connection.id, action.id, action.revision, hash, cliOwnerId, Date.now());
+				});
+				authorized = true;
 			};
-		}
-		getSqliteDatabase().prepare("UPDATE connector_cli_executions SET status = ?, error_kind = ?, finished_at = ? WHERE id = ?").run(output.outcome, output.error?.kind ?? null, Date.now(), executionId);
-		appendConnectorExecutionAudit({
-			installationId: item.policy.id,
-			connectionId: connection.id,
-			connectorId: item.instance.connectorId,
-			principalId: item.principal.principalId,
-			agentId: item.agentId,
-			conversationId,
-			actionId: action.id,
-			scope: action.scope,
-			decision: authorized ? "allowed" : "denied",
-			resultStatus: output.outcome === "success" ? "success" : "error",
-			errorCode: output.outcome === "unknown" ? "outcome_unknown" : output.error?.kind,
-			durationMs: Date.now() - started
-		});
-		let artifact;
-		if (exportResult && output.outcome === "success") try {
-			await writeFile(join(cliContextPath(String(connection.metadata.contextId)), "files", `${executionId}.json`), JSON.stringify(output.data ?? null, null, 2), {
-				mode: 384,
-				flag: "wx"
+			const started = Date.now();
+			let output;
+			try {
+				output = await executeCliAction(item.config, item.instance.instanceId, connection, action, input, context.signal, beforeExecute);
+			} catch (error) {
+				output = {
+					outcome: authorized && action.scope !== "read" ? "unknown" : "failed",
+					error: {
+						kind: "runtime",
+						message: error instanceof Error ? error.message : "CLI failed."
+					}
+				};
+			}
+			if (authorized && action.scope !== "read" && output.outcome === "failed" && output.error?.kind !== "startup") output = {
+				...output,
+				outcome: "unknown"
+			};
+			getSqliteDatabase().prepare("UPDATE connector_cli_executions SET status = ?, error_kind = ?, finished_at = ? WHERE id = ?").run(output.outcome, output.error?.kind ?? null, Date.now(), executionId);
+			appendConnectorExecutionAudit({
+				installationId: item.policy.id,
+				connectionId: connection.id,
+				connectorId: item.instance.connectorId,
+				principalId: item.principal.principalId,
+				agentId: item.agentId,
+				conversationId,
+				actionId: action.id,
+				scope: action.scope,
+				decision: authorized ? "allowed" : "denied",
+				resultStatus: output.outcome === "success" ? "success" : "error",
+				errorCode: output.outcome === "unknown" ? "outcome_unknown" : output.error?.kind,
+				durationMs: Date.now() - started
 			});
-			artifact = `/api/connectors/executions/${executionId}/artifact`;
-		} catch {
+			if (action.scope !== "read" && output.outcome !== "success") {
+				if (!authorized || output.error?.kind === "startup") throw new ExternalEffectNotAppliedError(output.error?.message ?? "CLI execution was rejected before spawning");
+				throw new Error(output.error?.message ?? "CLI write outcome could not be confirmed");
+			}
+			let artifact;
+			if (exportResult && output.outcome === "success") try {
+				await writeFile(join(cliContextPath(String(connection.metadata.contextId)), "files", `${executionId}.json`), JSON.stringify(output.data ?? null, null, 2), {
+					mode: 384,
+					flag: "wx"
+				});
+				artifact = `/api/connectors/executions/${executionId}/artifact`;
+			} catch {
+				return result({
+					executionId,
+					accountId: connection.accountId,
+					...output,
+					artifactError: "The action succeeded, but its JSON export could not be saved. Do not repeat the action to retry export."
+				});
+			}
 			return result({
-				executionId,
+				...authorized ? { executionId } : {},
+				artifact,
 				accountId: connection.accountId,
 				...output,
-				artifactError: "The action succeeded, but its JSON export could not be saved. Do not repeat the action to retry export."
+				...output.outcome === "unknown" ? { instruction: "The write may have succeeded. Inspect the provider using a read action; do not retry automatically." } : {}
 			});
-		}
-		return result({
-			...authorized ? { executionId } : {},
-			artifact,
-			accountId: connection.accountId,
-			...output,
-			...output.outcome === "unknown" ? { instruction: "The write may have succeeded. Inspect the provider using a read action; do not retry automatically." } : {}
-		});
+		};
+		context.signal?.throwIfAborted();
+		authorizeCurrent();
+		if (action.scope === "read") return execute(randomUUID());
+		return executeExternalOperation({
+			principalId: item.principal.principalId,
+			capabilityId: toolRef,
+			idempotencyKey: connectorArgumentsHash(approvalId ? { approvalId } : {
+				conversationId,
+				toolCallId: context.toolCallId
+			}),
+			requestDigest: acceptedArgumentsHash,
+			descriptorDigest,
+			surface: "agent",
+			recovery: "manual"
+		}, execute);
 	}
 };
 //#endregion

package/dist/src/agent/external-tools/composio-provider.d.ts

@@ -23,7 +23,7 @@ export declare class ComposioToolProvider implements ExternalToolProvider {
     constructor(deps: ComposioToolProviderDeps);
     search(query: string): Promise<ExternalToolSearchHit[]>;
     describe(toolRef: string): Promise<ExternalToolDescriptor | undefined>;
-    execute(toolRef: string, args: Record<string, unknown>, approvalId: string | undefined, _context: ExternalToolExecutionContext): Promise<AgentToolResult<Record<string, unknown>>>;
+    execute(toolRef: string, args: Record<string, unknown>, approvalId: string | undefined, context: ExternalToolExecutionContext): Promise<AgentToolResult<Record<string, unknown>>>;
     private availableInstallations;
     private resolve;
 }