Method execute

src/tools/shell/code-run.ts:144–277

(args: z.infer<typeof CodeRunArgs>, _ctx: ToolContext)

  argsSchema = CodeRunArgs;

  async execute(args: z.infer<typeof CodeRunArgs>, _ctx: ToolContext): Promise<ToolResult> {
    const timeoutMs = args.timeout_ms ?? 30_000;
    const allowNetwork = args.network !== false; // default true

    // Pick interpreter
    let interp: InterpreterInfo;
    try {
      interp = pickInterpreter(args.language);
    } catch (e: any) {
      return { content: `[CODE_RUN_ERROR] ${e.message}`, isError: true };
    }

    // For TS, prefer tsx if available
    if (args.language === 'typescript' || args.language === 'ts') {
      const tsxPath = await which('tsx');
      if (tsxPath) {
        interp = { cmd: 'tsx', args: f => [f], extension: 'ts' };
      }
    }

    // Verify interpreter is installed
    const interpPath = await which(interp.cmd);
    if (!interpPath) {
      return {
        content: `[CODE_RUN_ERROR] Interpreter '${interp.cmd}' not found on PATH. Install it or pick a different language.`,
        isError: true,
      };
    }

    // Create per-call temp dir
    const tempDir = args.cwd ?? path.join(os.tmpdir(), `qodex-run-${Date.now()}-${randomBytes(4).toString('hex')}`);
    if (!args.cwd) await fs.mkdir(tempDir, { recursive: true });
    const sourceFile = path.join(tempDir, `code.${interp.extension}`);
    await fs.writeFile(sourceFile, args.code, 'utf-8');

    // Decide whether to wrap in sandbox-exec (macOS) or run directly
    const isMacos = os.platform() === 'darwin';
    let spawnCmd: string;
    let spawnArgs: string[];
    let sandboxProfileFile: string | null = null;

    if (isMacos) {
      const profile = macosSandboxProfile(tempDir, allowNetwork);
      sandboxProfileFile = path.join(tempDir, '.sandbox.sb');
      await fs.writeFile(sandboxProfileFile, profile);
      spawnCmd = 'sandbox-exec';
      spawnArgs = ['-f', sandboxProfileFile, interp.cmd, ...interp.args(sourceFile)];
    } else {
      // Linux/Windows: no sandbox layer, just rely on cwd isolation + timeout
      spawnCmd = interp.cmd;
      spawnArgs = interp.args(sourceFile);
    }

    return new Promise<ToolResult>((resolve) => {
      let stdout = '';
      let stderr = '';
      let truncated = false;
      const MAX_OUT = 50_000;