fix(copilot): log a withheld in-band result even when it withheld a success

The cause was written only on the failure branch, but a withheld success
keeps `projected.success` true — so the one case that leaves no other
trace, where the model reads a bare success and nothing says why, was also
the only one whose cause was never recorded. Report it on its own, as the
resume driver already does.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: icecrasher321

apps/sim/app/api/copilot/tools/execute/route.ts

@@ -173,14 +173,27 @@ export const POST = withRouteHandler((request: NextRequest) =>
         if (projection.safe && toolRegistry.isComplete()) {
           turnRegistry.mergeToolCallRegistry(toolRegistry)
         }
+        if (!projection.safe) {
+          /**
+           * Reported on its own rather than folded into the failure branch below: a withheld
+           * SUCCESS keeps `projected.success` true, so gating on failure meant the one case
+           * that leaves no other trace — the model reads a bare success — was also the one
+           * case whose cause was never written down.
+           */
+          logger.warn('In-band tool result withheld by egress projection', {
+            toolName,
+            toolCallId,
+            runtimeSucceeded: result.success,
+            ...describeWithholdingCause(projection.cause),
+          })
+        }
         if (!projected.success) {
           logger.warn('In-band tool execution failed', {
             toolName,
             toolCallId,
             error: projected.error,
             runtimeSucceeded: result.success,
             projectionSafe: projection.safe,
-            ...(projection.safe ? {} : describeWithholdingCause(projection.cause)),
           })
         }
         if (result.success && chatId) {