@xopcai/xopc 0.0.332 → 0.0.334

package/dist/src/agent/tools/xopc-use-tool.js

@@ -2,16 +2,16 @@ import { runWithActivityContext } from "../../activity/context.js";
 import { TaskCommandSchema, TaskContextInputSchema } from "../../../packages/gateway-contract/src/tasks.js";
 import { ChatPreviewCreateInputSchema, ChatPreviewReviseInputSchema } from "../../../packages/gateway-contract/src/chat-previews.js";
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
-import { AutomationCancelOutputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRunMutationOutputSchema, CapabilityCallSchema, CapabilityResourceInputSchema, NoteDeleteOutputSchema, NoteGetOutputSchema, ProjectCreateInputSchema, ProjectDeleteInputSchema, ProjectDeleteOutputSchema, ProjectEditInputSchema, ProjectMilestoneCreateInputSchema, ProjectMilestoneDeleteInputSchema, ProjectMilestoneDeleteOutputSchema, ProjectMilestoneOutputSchema, ProjectMilestoneUpdateInputSchema, ProjectMutationOutputSchema, ProjectResolveWorkspaceInputSchema, ProjectResolveWorkspaceOutputSchema, ProjectSetPinnedInputSchema, ProjectUpdateCreateInputSchema, ProjectUpdateOutputSchema, SceneWriteContracts, TaskRunCancelInputSchema, TaskRunCancelOutputSchema, TaskRunFeedbackInputSchema, TaskRunFeedbackOutputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
+import { AutomationCancelOutputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRecoveryOutputSchema, AutomationRunMutationOutputSchema, CapabilityCallSchema, CapabilityResourceInputSchema, NoteDeleteOutputSchema, NoteGetOutputSchema, ProjectCreateInputSchema, ProjectDeleteInputSchema, ProjectDeleteOutputSchema, ProjectEditInputSchema, ProjectMilestoneCreateInputSchema, ProjectMilestoneDeleteInputSchema, ProjectMilestoneDeleteOutputSchema, ProjectMilestoneOutputSchema, ProjectMilestoneUpdateInputSchema, ProjectMutationOutputSchema, ProjectResolveWorkspaceInputSchema, ProjectResolveWorkspaceOutputSchema, ProjectSetPinnedInputSchema, ProjectUpdateCreateInputSchema, ProjectUpdateOutputSchema, SceneWriteContracts, TaskRunCancelInputSchema, TaskRunCancelOutputSchema, TaskRunFeedbackInputSchema, TaskRunFeedbackOutputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository } from "../../tasks/task-repository.js";
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
 import "../../activity/index.js";
-import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import "../../capabilities/runtime/dispatcher.js";
+import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
 import { TaskDeletionService } from "../../tasks/task-deletion-service.js";
@@ -42,7 +42,7 @@ const XopcUseToolSchema = Type.Object({
 		Type.Literal("agent"),
 		Type.Literal("settings")
 	]),
-	command: Type.String({ description: "Context resolve takes an explicit AppContextEnvelope; never guess a current page. Automation draft/repair_draft accept prompt/id, agentId?, language?, idempotencyKey?; simulate explains an automation without running it. Local_app record_acceptance records supplied checks and sourceHash, not proof that checks were executed. Agent commands: list, get {id}, create {id, profile, workspace?, models?, skills?, tools?, workflows?, runtime?, idempotencyKey?}, update {id, expectedRevision, patch, idempotencyKey?}, set_default {id, expectedRevision, idempotencyKey?}, disable/delete/purge {id, expectedRevision, idempotencyKey?}. Purge also removes on-disk data. Project create accepts idempotencyKey; update/pin/unpin/delete accepts {projectId, expectedVersion?, idempotencyKey?}; stable retries require the original expectedVersion. Delete preserves workspace files and does not confirm external execution stopped. Project milestone writes support idempotencyKey; update_milestone/delete_milestone require original expectedRevision for stable retries, and create_update requires original expectedVersion. TaskRun cancel accepts idempotencyKey and expectedVersion, and does not confirm external execution stopped. Automation diagnostics: get_run/run_events {runId}, metrics {}, product_events {eventType, source?, payloadKey?, payloadValue?, limit?}; payload filters require both key and value. Automation also supports cancel/read {runId, idempotencyKey?} and read_all {projectId?, idempotencyKey?}; omitted projectId means all projects. Cancel acceptance is not confirmation of stopping. Object command. Scene commands: templates, list, get {id}, mail_accounts, mail_search {accountId, query}, mail_sources, read_notes {id}, preflight/start {templateKey, templateVersion, goal, scope, permissions}, configure {id, expectedRevision, goal, scope, permissions}, transition {id, expectedRevision, status: paused|active|completed|archived}, check {id}, notes {id, expectedRevision, content, validUntil?}, work_item {id, subjectId, accountId, dueAt}, update_work_item {workItemId, expectedRevision, dueAt?, status?}, schedule {id, triggerKey, expectedRevision, schedule}, results {id?}, feedback {presentationId, expectedRevision, rating}, mark_read {presentationId, read}, diagnostics, get_preferences, set_preferences {expectedRevision, ...preferences}. Start and check accept a stable requestId for retries. Scenes prepare read-only suggestions and drafts; never send mail. Only create a scene for work explicitly delegated by the user; inspect existing scenes first. Supports project list/get/create/update/resolve_workspace/list_milestones/create_milestone/update_milestone/list_updates/create_update, automation list/get/create/update/delete/run/rerun/pause/resume/history (rerun takes runId; run/rerun accept idempotencyKey), note list/get/project_summaries/history {noteId}/snapshot {noteId, timestamp}/create/append/update/preview_edit/delete, task list/get/create/update_dependencies/add_context/remove_context/command/delete, task_run list/get/cancel, chat_preview create/revise/get, local_app list/get/create/validate, and settings open." }),
+	command: Type.String({ description: "Context resolve takes an explicit AppContextEnvelope; never guess a current page. Automation draft/repair_draft accept prompt/id, agentId?, language?, idempotencyKey?; simulate explains an automation without running it. Local_app record_acceptance records supplied checks and sourceHash, not proof that checks were executed. Agent commands: list, get {id}, create {id, profile, workspace?, models?, skills?, tools?, workflows?, runtime?, idempotencyKey?}, update {id, expectedRevision, patch, idempotencyKey?}, set_default {id, expectedRevision, idempotencyKey?}, disable/delete/purge {id, expectedRevision, idempotencyKey?}. Purge also removes on-disk data. Project create accepts idempotencyKey; update/pin/unpin/delete accepts {projectId, expectedVersion?, idempotencyKey?}; stable retries require the original expectedVersion. Delete preserves workspace files and does not confirm external execution stopped. Project milestone writes support idempotencyKey; update_milestone/delete_milestone require original expectedRevision for stable retries, and create_update requires original expectedVersion. TaskRun cancel accepts idempotencyKey and expectedVersion, and does not confirm external execution stopped. Automation diagnostics: get_run/run_events {runId}, metrics {}, events {eventType?, source?, limit?}, deliveries {runId?, limit?}, product_events {eventType, source?, payloadKey?, payloadValue?, limit?}; payload filters require both key and value. Recovery commands: replay_event {eventId, reason, idempotencyKey}, retry_delivery {runId, destinationKey, reason, idempotencyKey}. Automation also supports cancel/read {runId, idempotencyKey?} and read_all {projectId?, idempotencyKey?}; omitted projectId means all projects. Cancel acceptance is not confirmation of stopping. Object command. Scene commands: templates, list, get {id}, mail_accounts, mail_search {accountId, query}, mail_sources, read_notes {id}, preflight/start {templateKey, templateVersion, goal, scope, permissions}, configure {id, expectedRevision, goal, scope, permissions}, transition {id, expectedRevision, status: paused|active|completed|archived}, check {id}, notes {id, expectedRevision, content, validUntil?}, work_item {id, subjectId, accountId, dueAt}, update_work_item {workItemId, expectedRevision, dueAt?, status?}, schedule {id, triggerKey, expectedRevision, schedule}, results {id?}, feedback {presentationId, expectedRevision, rating}, mark_read {presentationId, read}, diagnostics, get_preferences, set_preferences {expectedRevision, ...preferences}. Start and check accept a stable requestId for retries. Scenes prepare read-only suggestions and drafts; never send mail. Only create a scene for work explicitly delegated by the user; inspect existing scenes first. Supports project list/get/create/update/resolve_workspace/list_milestones/create_milestone/update_milestone/list_updates/create_update, automation list/get/create/update/delete/run/rerun/pause/resume/history (rerun takes runId; run/rerun accept idempotencyKey), note list/get/project_summaries/history {noteId}/snapshot {noteId, timestamp}/create/append/update/preview_edit/delete, task list/get/create/update_dependencies/add_context/remove_context/command/delete, task_run list/get/cancel, chat_preview create/revise/get, local_app list/get/create/validate, and settings open." }),
 	args: Type.Optional(Type.Record(Type.String(), Type.Any())),
 	dryRun: Type.Optional(Type.Boolean({ description: "Validate and preview the action without mutating xopc state." }))
 });
@@ -738,7 +738,7 @@ async function handleAutomation(command, args, deps, dryRun, capabilities) {
 			authorize: deps.authorizeCapability ?? (() => true)
 		};
 		try {
-			return (operation === "xopc.automations.delete" ? AutomationDeleteOutputSchema : operation === "xopc.automations.cancel" ? AutomationCancelOutputSchema : operation === "xopc.automations.read" ? AutomationReadOutputSchema : operation === "xopc.automations.read_all" ? AutomationReadAllOutputSchema : operation === "xopc.automations.run" || operation === "xopc.automations.rerun" ? AutomationRunMutationOutputSchema : AutomationMutationOutputSchema).parse(await capabilities.call(operation, input, caller, {
+			return (operation === "xopc.automations.delete" ? AutomationDeleteOutputSchema : operation === "xopc.automations.cancel" ? AutomationCancelOutputSchema : operation === "xopc.automations.read" ? AutomationReadOutputSchema : operation === "xopc.automations.read_all" ? AutomationReadAllOutputSchema : operation === "xopc.automations.replay_event" || operation === "xopc.automations.retry_delivery" ? AutomationRecoveryOutputSchema : operation === "xopc.automations.run" || operation === "xopc.automations.rerun" ? AutomationRunMutationOutputSchema : AutomationMutationOutputSchema).parse(await capabilities.call(operation, input, caller, {
 				...capabilities.describe(operation, caller),
 				idempotencyKey: trimString(args.idempotencyKey) ?? randomUUID()
 			}));
@@ -761,6 +761,40 @@ async function handleAutomation(command, args, deps, dryRun, capabilities) {
 		};
 		return invoke(`xopc.automations.${command}`, input);
 	}
+	if (command === "replay_event" || command === "retry_delivery") {
+		const reason = trimString(args.reason);
+		if (!reason) return {
+			ok: false,
+			error: "reason is required"
+		};
+		const input = command === "replay_event" ? {
+			id: trimString(args.eventId) ?? trimString(args.id),
+			reason
+		} : {
+			runId: trimString(args.runId) ?? trimString(args.id),
+			destinationKey: trimString(args.destinationKey),
+			reason
+		};
+		if (command === "replay_event" && !input.id) return {
+			ok: false,
+			error: "eventId is required"
+		};
+		if (command === "retry_delivery" && !input.runId) return {
+			ok: false,
+			error: "runId is required"
+		};
+		if (command === "retry_delivery" && !input.destinationKey) return {
+			ok: false,
+			error: "destinationKey is required"
+		};
+		if (dryRun) return {
+			ok: true,
+			dryRun: true,
+			action: command,
+			input
+		};
+		return invoke(`xopc.automations.${command}`, input);
+	}
 	if (command === "create") {
 		const source = automationPayload(args, "automation");
 		const projectId = trimString(args.projectId) ?? trimString(source.projectId) ?? currentProjectId({}, deps);
@@ -781,8 +815,7 @@ async function handleAutomation(command, args, deps, dryRun, capabilities) {
 				"action",
 				"safety",
 				"conversationMode",
-				"notificationPolicy",
-				"completionWebhookUrl",
+				"delivery",
 				"reliability",
 				"state"
 			]),
@@ -817,8 +850,7 @@ async function handleAutomation(command, args, deps, dryRun, capabilities) {
 			"action",
 			"safety",
 			"conversationMode",
-			"notificationPolicy",
-			"completionWebhookUrl",
+			"delivery",
 			"reliability",
 			"state"
 		]));
@@ -1958,9 +1990,18 @@ function createXopcUseTool(deps) {
 				"get_run",
 				"run_events",
 				"metrics",
+				"events",
+				"deliveries",
 				"product_events"
 			].includes(command)) {
-				const projectedInput = command === "metrics" ? {} : command === "product_events" ? {
+				const projectedInput = command === "metrics" ? {} : command === "events" ? {
+					type: args.eventType,
+					source: args.source,
+					limit: args.limit
+				} : command === "deliveries" ? {
+					runId: args.runId,
+					limit: args.limit
+				} : command === "product_events" ? {
 					eventType: args.eventType,
 					source: args.source,
 					payloadKey: args.payloadKey,

package/dist/src/agent-catalog/capabilities.js

@@ -1,10 +1,10 @@
 import { AgentEntrySchema, EffectiveAgentConfigSchema } from "../agent-config/schema.js";
 import { resolveEffectiveAgentConfig } from "../agent-config/resolver.js";
 import { init_agent_config } from "../agent-config/index.js";
-import { AgentCatalogRepository, init_repository } from "./repository.js";
-import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { defineAtomicCapability, defineReadCapability } from "../capabilities/runtime/dispatcher.js";
+import { AgentCatalogRepository, init_repository } from "./repository.js";
+import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { AgentCatalogService } from "./service.js";
 import { z } from "zod";
 //#region src/agent-catalog/capabilities.ts

package/dist/src/ai-assist/text-assist.js

@@ -1,9 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../providers/index.js";
 import { createExtensionAwareStreamFn } from "../providers/extension-stream-bridge.js";
+import { trackAiUsageStream } from "../usage/recorder.js";
 import { isLocalModelBaseUrl, resolveModelCallApiKey, resolveModelCallOptions } from "../providers/model-call.js";
-import { getAssistantMessageErrorReason, stripCodeFences } from "../providers/model-response.js";
 import { normalizeContext } from "@earendil-works/pi-ai";
 //#region src/ai-assist/text-assist.ts
 init_providers();
@@ -245,7 +246,10 @@ async function* streamTextAssist(request, config, signal) {
 		modelId: model.id,
 		scenario: scenario.id
 	};
-	const stream = await createExtensionAwareStreamFn()(model, normalizeContext(prompt), modelCallOptions);
+	const stream = await trackAiUsageStream(model, {
+		operation: "text_assist.generate",
+		trigger: "user"
+	}, () => createExtensionAwareStreamFn()(model, normalizeContext(prompt), modelCallOptions));
 	let streamedText = "";
 	for await (const event of stream) {
 		const streamEvent = event;

package/dist/src/auth/credentials.js

@@ -2,9 +2,9 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveCredentialsDir, resolveOAuthPath } from "../config/paths.js";
-import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { getApiKeyFromEnv, init_env_keys } from "../providers/env-keys.js";
+import { getOAuthProviderDefinition, init_registry } from "./oauth/registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "./oauth-provider-lock.js";
 import { dirname, join } from "path";
 import { mkdir, readFile, readdir, rm } from "fs/promises";

package/dist/src/auth/oauth-provider-lock.js

@@ -3,8 +3,8 @@ import { init_paths, resolveOAuthPath } from "../config/paths.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { dirname } from "node:path";
 import { randomUUID } from "node:crypto";
-import { setTimeout } from "node:timers/promises";
 import { mkdir, open, readFile, rm, stat } from "node:fs/promises";
+import { setTimeout } from "node:timers/promises";
 //#region src/auth/oauth-provider-lock.ts
 function lockPath(providerId) {
 	return `${resolveOAuthPath(providerId.toLowerCase())}.lock`;

package/dist/src/auth/sync-provider-auth.js

@@ -1,7 +1,7 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
 import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**

package/dist/src/automations/api/routes.js

@@ -101,6 +101,71 @@ function registerAutomationRoutes(authenticated, deps) {
 			return capabilityHttpError(c, error);
 		}
 	});
+	authenticated.get("/api/automation-events", async (c) => {
+		try {
+			const { items } = ProductReadContracts["xopc.automations.events"].output.parse(await capabilities.call("xopc.automations.events", {
+				type: c.req.query("type"),
+				source: c.req.query("source"),
+				limit: c.req.query("limit") === void 0 ? void 0 : Number(c.req.query("limit"))
+			}, capabilityHttpContext(c)));
+			return c.json({ items });
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
+	authenticated.get("/api/automation-deliveries", async (c) => {
+		try {
+			const { items } = ProductReadContracts["xopc.automations.deliveries"].output.parse(await capabilities.call("xopc.automations.deliveries", {
+				runId: c.req.query("runId"),
+				status: c.req.query("status"),
+				limit: c.req.query("limit") === void 0 ? void 0 : Number(c.req.query("limit"))
+			}, capabilityHttpContext(c)));
+			return c.json({ items });
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
+	authenticated.post("/api/automation-events/:eventId/replay", async (c) => {
+		try {
+			const idempotencyKey = c.req.header("idempotency-key")?.trim();
+			if (!idempotencyKey) throw new CapabilityError("INVALID_INPUT", "Idempotency-Key is required");
+			const body = await c.req.json().catch(() => {
+				throw new CapabilityError("INVALID_INPUT", "Invalid JSON body");
+			});
+			const caller = capabilityHttpContext(c);
+			const operation = "xopc.automations.replay_event";
+			return c.json(await capabilities.call(operation, {
+				...body,
+				id: c.req.param("eventId")
+			}, caller, {
+				...capabilities.describe(operation, caller),
+				idempotencyKey
+			}), 202);
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
+	authenticated.post("/api/automation-deliveries/:runId/:destinationKey/retry", async (c) => {
+		try {
+			const idempotencyKey = c.req.header("idempotency-key")?.trim();
+			if (!idempotencyKey) throw new CapabilityError("INVALID_INPUT", "Idempotency-Key is required");
+			const body = await c.req.json().catch(() => {
+				throw new CapabilityError("INVALID_INPUT", "Invalid JSON body");
+			});
+			const caller = capabilityHttpContext(c);
+			const operation = "xopc.automations.retry_delivery";
+			return c.json(await capabilities.call(operation, {
+				...body,
+				runId: c.req.param("runId"),
+				destinationKey: c.req.param("destinationKey")
+			}, caller, {
+				...capabilities.describe(operation, caller),
+				idempotencyKey
+			}), 202);
+		} catch (error) {
+			return capabilityHttpError(c, error);
+		}
+	});
 	authenticated.get("/api/automation-runs/product-events", async (c) => {
 		try {
 			const { items } = ProductReadContracts["xopc.automations.product_events"].output.parse(await capabilities.call("xopc.automations.product_events", {

package/dist/src/automations/capabilities/drafts.js

@@ -3,10 +3,10 @@ import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { init_trust_policy, resolveAutomationSafetyForTrust } from "../../user-context/trust-policy.js";
 import { getUserTrustPolicy } from "../../storage/sqlite/user-trust-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { ExternalEffectNotAppliedError } from "../../capabilities/runtime/external-operations.js";
 import { defineExternalCapability, defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
+import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { AutomationCreateCapabilityInputSchema } from "./write.js";
 import { simulateAutomation } from "../draft/automation-draft-validator.js";
 import { AutomationDraftService } from "../draft/automation-draft-service.js";

package/dist/src/automations/capabilities/read.js

@@ -57,6 +57,30 @@ function registerAutomationReadCapabilities(dispatcher, service, projects) {
 			};
 		}
 	}));
+	dispatcher.register(defineReadCapability({
+		...policy,
+		id: "xopc.automations.events",
+		description: "Inspect durable trigger events and per-automation delivery state.",
+		...ProductReadContracts["xopc.automations.events"],
+		execute(input) {
+			return {
+				ok: true,
+				items: service.listEventRecords(input)
+			};
+		}
+	}));
+	dispatcher.register(defineReadCapability({
+		...policy,
+		id: "xopc.automations.deliveries",
+		description: "Inspect durable automation result delivery state.",
+		...ProductReadContracts["xopc.automations.deliveries"],
+		execute(input) {
+			return {
+				ok: true,
+				items: service.listResultDeliveries(input)
+			};
+		}
+	}));
 	dispatcher.register(defineReadCapability({
 		...policy,
 		id: "xopc.automations.product_events",

package/dist/src/automations/capabilities/write.d.ts

@@ -157,6 +157,32 @@ export declare const AutomationCreateCapabilityInputSchema: z.ZodObject<{
         payloadMatch: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "kind">;
     description: z.ZodOptional<z.ZodString>;
+    delivery: z.ZodDefault<z.ZodObject<{
+        notificationPolicy: z.ZodDefault<z.ZodEnum<{
+            attention: "attention";
+            all: "all";
+            none: "none";
+        }>>;
+        destinations: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"gateway_event">;
+        }, z.core.$strict>, z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"webhook">;
+            endpoint: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            secretId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"file">;
+            targetId: z.ZodString;
+            pathTemplate: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"card">;
+            channelId: z.ZodString;
+            templateId: z.ZodString;
+        }, z.core.$strict>], "kind">>>;
+    }, z.core.$strict>>;
     safety: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             suggest_only: "suggest_only";
@@ -168,15 +194,8 @@ export declare const AutomationCreateCapabilityInputSchema: z.ZodObject<{
         new_session: "new_session";
         continuous: "continuous";
     }>>;
-    notificationPolicy: z.ZodDefault<z.ZodEnum<{
-        attention: "attention";
-        all: "all";
-        none: "none";
-    }>>;
-    completionWebhookUrl: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string, string>>;
     reliability: z.ZodOptional<z.ZodObject<{
         executionTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
-        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
         retryCount: z.ZodOptional<z.ZodNumber>;
         maxConcurrentRuns: z.ZodOptional<z.ZodNumber>;
         disableAfterConsecutiveFailures: z.ZodOptional<z.ZodNumber>;
@@ -343,10 +362,8 @@ export declare const AutomationUpdatePatchSchema: z.ZodObject<{
             auto_apply: "auto_apply";
         }>;
     }, z.core.$strict>>>;
-    completionWebhookUrl: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string, string>>>;
     reliability: z.ZodOptional<z.ZodOptional<z.ZodObject<{
         executionTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
-        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
         retryCount: z.ZodOptional<z.ZodNumber>;
         maxConcurrentRuns: z.ZodOptional<z.ZodNumber>;
         disableAfterConsecutiveFailures: z.ZodOptional<z.ZodNumber>;
@@ -355,11 +372,32 @@ export declare const AutomationUpdatePatchSchema: z.ZodObject<{
         new_session: "new_session";
         continuous: "continuous";
     }>>;
-    notificationPolicy: z.ZodOptional<z.ZodEnum<{
-        attention: "attention";
-        all: "all";
-        none: "none";
-    }>>;
+    delivery: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+        notificationPolicy: z.ZodDefault<z.ZodEnum<{
+            attention: "attention";
+            all: "all";
+            none: "none";
+        }>>;
+        destinations: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"gateway_event">;
+        }, z.core.$strict>, z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"webhook">;
+            endpoint: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            secretId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"file">;
+            targetId: z.ZodString;
+            pathTemplate: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodLiteral<"card">;
+            channelId: z.ZodString;
+            templateId: z.ZodString;
+        }, z.core.$strict>], "kind">>>;
+    }, z.core.$strict>>>;
     state: z.ZodOptional<z.ZodNever>;
     management: z.ZodOptional<z.ZodNever>;
 }, z.core.$strict>;

package/dist/src/automations/capabilities/write.js

@@ -1,4 +1,4 @@
-import { AutomationCancelOutputSchema, AutomationDeleteInputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRunMutationOutputSchema, AutomationSetEnabledInputSchema, CapabilityResourceInputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
+import { AutomationCancelOutputSchema, AutomationDeleteInputSchema, AutomationDeleteOutputSchema, AutomationMutationOutputSchema, AutomationReadAllInputSchema, AutomationReadAllOutputSchema, AutomationReadOutputSchema, AutomationRecoveryOutputSchema, AutomationReplayEventInputSchema, AutomationRetryDeliveryInputSchema, AutomationRunMutationOutputSchema, AutomationSetEnabledInputSchema, CapabilityResourceInputSchema } from "../../../packages/gateway-contract/src/capabilities.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { defineAtomicCapability } from "../../capabilities/runtime/dispatcher.js";
@@ -6,6 +6,8 @@ import { CreateAutomationSchema, UpdateAutomationSchema } from "../domain/valida
 import { getAutomation } from "../storage/automation-repository.js";
 import { getAutomationRun, markAllAutomationRunsRead, markAutomationRunRead } from "../storage/automation-run-repository.js";
 import "../storage/index.js";
+import { getAutomationEventForRun } from "../events/event-repository.js";
+import "../events/index.js";
 import { AutomationAlreadyExistsError, AutomationAlreadyRunningError } from "../service/automation-service.js";
 import { z } from "zod";
 //#region src/automations/capabilities/write.ts
@@ -44,6 +46,36 @@ function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 	const requireProject = (id) => {
 		if (id && !projects?.get(id)) throw new CapabilityError("NOT_FOUND", "Project not found");
 	};
+	dispatcher.register(defineAtomicCapability({
+		...policy,
+		id: "xopc.automations.replay_event",
+		description: "Replay dead-letter projection and run-delivery work for one immutable event.",
+		input: AutomationReplayEventInputSchema,
+		output: AutomationRecoveryOutputSchema,
+		execute({ id }) {
+			if (!service.replayEventAtomically(id)) throw new CapabilityError("NOT_FOUND", "Dead-letter event work not found");
+			return {
+				ok: true,
+				accepted: true
+			};
+		},
+		afterCommit: () => service.dispatchRecoveryWork()
+	}));
+	dispatcher.register(defineAtomicCapability({
+		...policy,
+		id: "xopc.automations.retry_delivery",
+		description: "Retry one dead-letter result destination using its stable delivery identity.",
+		input: AutomationRetryDeliveryInputSchema,
+		output: AutomationRecoveryOutputSchema,
+		execute({ runId, destinationKey }) {
+			if (!service.retryResultDeliveryAtomically(runId, destinationKey)) throw new CapabilityError("NOT_FOUND", "Dead-letter result delivery not found");
+			return {
+				ok: true,
+				accepted: true
+			};
+		},
+		afterCommit: () => service.dispatchRecoveryWork()
+	}));
 	dispatcher.register(defineAtomicCapability({
 		...policy,
 		id: "xopc.automations.cancel",
@@ -91,13 +123,30 @@ function registerAutomationWriteCapabilities(dispatcher, service, projects) {
 		description: command === "run" ? "Queue a manual run with the currently accepted execution configuration." : "Queue a rerun with current configuration and the original trigger event.",
 		input: CapabilityResourceInputSchema,
 		output: AutomationRunMutationOutputSchema,
-		execute({ id }) {
+		execute({ id }, context) {
 			const automationId = command === "run" ? id : getAutomationRun(id)?.automationId;
 			const automation = automationId ? getAutomation(automationId) : null;
 			if (!automation) throw new CapabilityError("NOT_FOUND", "Automation or source run not found");
 			assertManagedOperation(automation, "run");
 			try {
-				const run = command === "run" ? service.queueRunAtomically(id) : service.queueRerunAtomically(id);
+				const request = {
+					id: `${command}:${context.operationId}`,
+					type: command === "run" ? "automation.manual.requested" : "automation.rerun.requested",
+					source: "user",
+					trust: "user",
+					subject: {
+						kind: "automation",
+						id: automation.id
+					},
+					correlationId: context.operationId,
+					dedupeKey: context.idempotencyKey,
+					payload: command === "run" ? { automationId: automation.id } : {
+						automationId: automation.id,
+						previousRunId: id
+					}
+				};
+				const executionEvent = command === "rerun" ? getAutomationEventForRun(id) ?? request : request;
+				const run = service.queueTriggerAtomically(automation.id, request, executionEvent);
 				return {
 					ok: true,
 					automation: { ...automation },

package/dist/src/automations/delivery/delivery-router.d.ts

@@ -0,0 +1,50 @@
+import type { Automation, AutomationArtifact, AutomationResultDeliveryRecord, AutomationResultEnvelope, AutomationRun, AutomationRunDeliveryContext } from '../domain/types.js';
+type AutomationDeliveryHandler = (input: {
+    deliveryId: string;
+    attempt: number;
+    run: AutomationRun;
+    result: AutomationResultEnvelope;
+    config: Record<string, unknown>;
+    signal: AbortSignal;
+}) => void | Promise<void>;
+export declare function listAutomationResultDeliveries(input?: {
+    runId?: string;
+    status?: AutomationResultDeliveryRecord['status'];
+    limit?: number;
+}): AutomationResultDeliveryRecord[];
+export declare function retryAutomationResultDelivery(runId: string, destinationKey: string): boolean;
+export declare function getAutomationResultDeliveryMetrics(): {
+    pending: number;
+    deadLetters: number;
+    activeLeases: number;
+};
+export declare class AutomationDeliveryRouter {
+    private readonly options;
+    private active?;
+    private timer?;
+    private readonly handlers;
+    private readonly owner;
+    private readonly abortController;
+    constructor(options?: {
+        deliverGatewayEvent?: (run: AutomationRun, context: AutomationRunDeliveryContext) => void | Promise<void>;
+        onDeadLetter?: (input: {
+            phase: 'result_delivery';
+            runId: string;
+            destinationKey: string;
+            error: string;
+        }) => void;
+        fetch?: typeof fetch;
+    });
+    register(kind: string, handler: AutomationDeliveryHandler): void;
+    validateArtifacts(artifacts: AutomationArtifact[]): void;
+    enqueue(run: AutomationRun, automation: Automation, suppliedArtifacts?: AutomationArtifact[]): void;
+    start(): void;
+    stop(): Promise<void>;
+    dispatch(): Promise<number>;
+    private claim;
+    private runDispatch;
+    private release;
+    private fail;
+    private postWebhook;
+}
+export {};