Method executeOne

agent/tools_executor.go:378–469

(ctx context.Context, tcID string, isSafe bool)

	e.mu.Lock()
	slot := e.slots[tcID]
	if slot == nil || slot.State != ToolStateQueued {
		e.mu.Unlock()
		return
	}
	isSafe := e.isSafeLocked(slot.TC)
	slot.State = ToolStateExecuting
	ctx, cancel := context.WithCancel(e.cancelCtx)
	slot.cancel = cancel
	if !isSafe {
		e.nonSafeRunning++
	}
	e.mu.Unlock()
	go e.executeOne(ctx, tcID, isSafe)
}

func (e *StreamingToolExecutor) executeOne(ctx context.Context, tcID string, isSafe bool) {
	defer func() {
		if recovered := recover(); recovered != nil {
			e.finishResult(
				tcID,
				fmt.Sprintf("<tool_use_error>\nTool execution panic: %v\n</tool_use_error>", recovered),
				fmt.Sprintf("<tool_use_error>\nTool execution panic: %v\n%s\n</tool_use_error>", recovered, string(debug.Stack())),
				true,
			)
		}
		e.mu.Lock()
		slot := e.slots[tcID]
		if slot != nil {
			if slot.State != ToolStateAborted {
				slot.State = ToolStateCompleted
			}
			close(slot.done)
		}
		if !isSafe {
			e.nonSafeRunning--
		}
		e.mu.Unlock()
		e.maybeDrain()
		e.signalActivity()
	}()

	e.mu.Lock()
	slot := e.slots[tcID]
	if slot == nil {
		e.mu.Unlock()
		return
	}
	tc := slot.TC
	abort := slot.abort
	e.mu.Unlock()

	if e.Cancelled() || abortSignalled(abort) {
		e.finishCancelled(tcID, "Execution cancelled — a prior write tool failed.")
		return
	}
	execCtx := e.executionContextForSlot(abort)

	if e.State != nil {