Method Execute

tools/builtin.go:875–886

(_ context.Context, execCtx ExecutionContext, input any)

				return "<tool_use_error>\nWSL sandbox is not available and local fallback is disabled.\nConfigure the WSL sandbox image or set wsl_sandbox_allow_local_fallback=true.\n</tool_use_error>", nil
			}
			resultPrefix = "[sandbox] WSL sandbox unavailable; command executed locally because local fallback was selected."
			localFallback = true
		default:
			return "<tool_use_error>\nWSL sandbox is required for this command but the sandbox distro is not installed. Approve WSL sandbox setup or explicitly choose local fallback.\n</tool_use_error>", nil
		}
	}
	if !yolo && !localFallback && (t.sandboxManager == nil || !t.sandboxManager.IsSandboxingEnabled()) {
		return "<tool_use_error>\nOS sandbox backend is unavailable. The command was not executed. Enable YOLO mode explicitly to run without sandbox isolation.\n</tool_use_error>", nil
	}
	argv := bashpkg.ShellArgv(in.Command, "")
	if bashpkg.ShouldUseSandbox(in.Command, t.sandboxManager, yolo || localFallback, nil) {
		if runtimeDir := projectRuntimeDirFromContext(execCtx, cwd); strings.TrimSpace(runtimeDir) != "" {
			_ = os.MkdirAll(runtimeDir, 0o755)
		}
		readRoots := append([]string{cwd}, rootsFromAny(execCtx["allowed_read_roots"])...)