Method execute

pkg/tools/builtin/shell/script_shell.go:209–285

(ctx context.Context, toolConfig *latest.ScriptShellToolConfig, toolCall tools.ToolCall)

}

func (t *ScriptToolSet) execute(ctx context.Context, toolConfig *latest.ScriptShellToolConfig, toolCall tools.ToolCall) (*tools.ToolCallResult, error) {
	var params map[string]any
	if toolCall.Function.Arguments != "" {
		if err := json.Unmarshal([]byte(toolCall.Function.Arguments), &params); err != nil {
			return nil, fmt.Errorf("invalid arguments: %w", err)
		}
	}

	// working_dir accepts ~, $VAR, ${VAR} and ${env.VAR} like every other
	// working_dir field (issue #2615).
	workingDir := path.ExpandWorkingDir("script shell working_dir", toolConfig.WorkingDir)

	// Stamp the script_shell call shape onto the active span. Cmd
	// ships unconditionally for the same reason as shell.RunShell —
	// see that comment for the redact-at-collector guidance.
	if span := trace.SpanFromContext(ctx); span.IsRecording() {
		span.SetAttributes(
			attribute.String("cagent.tool.script_shell.tool_name", toolCall.Function.Name),
			attribute.String("cagent.tool.script_shell.cmd", toolConfig.Cmd),
			attribute.String("cagent.tool.script_shell.cwd", cmp.Or(workingDir, ".")),
		)
	}

	shell, argsPrefix := shellpath.DetectShell()

	cmd := exec.CommandContext(ctx, shell, append(argsPrefix, toolConfig.Cmd)...)
	cmd.Dir = workingDir
	// Per-call clone: appending onto t.env would mutate the shared
	// backing array under concurrent calls. Expand nil to os.Environ()
	// so a nil t.env still inherits the parent env (a non-nil empty
	// slice would strip it).
	base := t.env
	if base == nil {
		base = os.Environ()
	}
	envCopy := make([]string, len(base), len(base)+len(toolConfig.Env)+len(toolConfig.Args))
	copy(envCopy, base)
	// Per-tool env overrides the toolset-level env (exec.Cmd dedupes with
	// last-wins). Only the plain ${env.X} form is expanded; $X and ${X}
	// stay literal because env values may legitimately contain $ (issue
	// #2615).
	for _, key := range slices.Sorted(maps.Keys(toolConfig.Env)) {
		envCopy = append(envCopy, key+"="+path.ExpandEnvRefs(toolConfig.Env[key]))
	}
	for key, value := range params {
		if value == nil {
			continue
		}
		// Only forward arguments declared in the tool's schema. The
		// LLM may hallucinate extra keys (e.g. LD_PRELOAD, PATH);
		// without this filter they would land verbatim in the
		// spawned process's environment.
		if _, declared := toolConfig.Args[key]; !declared {
			continue
		}
		valueStr := fmt.Sprintf("%v", value)
		// A NUL byte mid-string silently truncates env entries at the
		// execve boundary; refuse rather than spawn a process with a