{"record":{"id":"c6ffa3699ff7fe8e","repo":"paperclipai/paperclip","slug":"approved-execution-unsupported","errorCode":"approved_execution_unsupported","errorMessage":"Plugin actions cannot execute outside their originating run","messagePattern":"Plugin actions cannot execute outside their originating run","errorType":"http","errorClass":"ToolGatewayHttpError","httpStatus":409,"severity":"error","filePath":"server/src/services/tool-gateway.ts","lineNumber":7868,"sourceCode":"                invocation.id,\n              )\n            ).result\n          : tool.providerType === \"mcp_local_stdio\"\n            ? (\n                await executeLocalStdioTool(\n                  session,\n                  tool,\n                  parameters,\n                  executionTimeoutMs,\n                )\n              ).result\n            : tool.providerType !== \"paperclip_plugin\"\n              ? await runWithTimeout(\n                  executeBuiltinTool(session, tool, parameters),\n                  executionTimeoutMs,\n                )\n              : (() => {\n                  throw new ToolGatewayHttpError(\n                    409,\n                    \"Plugin actions cannot execute outside their originating run\",\n                    \"approved_execution_unsupported\",\n                  );\n                })();\n      const resultRecord = asRecord(result);\n      if (resultRecord?.error)\n        throw new ToolGatewayHttpError(\n          502,\n          String(resultRecord.content || resultRecord.error),\n          \"tool_execution_failed\",\n        );\n      const resultValidation = validateToolContent({\n        value: result,\n        direction: \"result\",\n        sensitiveMode: \"redact\",\n        promptInjectionMode: \"block\",\n      });","sourceCodeStart":7850,"sourceCodeEnd":7886,"githubUrl":"https://github.com/paperclipai/paperclip/blob/3f1d897a7c018d76563a21c6e39c3c9b03933622/server/src/services/tool-gateway.ts#L7850-L7886","documentation":"Plugin tool safety guard during approved execution: the invocation's originating run context does not match the run now executing, and plugin actions are pinned to their originating run for isolation and audit integrity. Execution is refused rather than run under a different run's credentials/workspace.","triggerScenarios":"Thrown at server/src/services/tool-gateway.ts:4286 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Plugin tool actions must run within their originating run context; do not carry the action into a different run."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"3f1d897a7c018d76563a21c6e39c3c9b03933622","analyzedAt":"2026-09-18T08:03:59.046Z","contentChangedAt":"2026-09-18T08:03:59.046Z","schemaVersion":2},"datasetVersion":"2026-09-23T08:17:48.524Z"}