@huaweidevtools/aishell-dsh-e2b 0.0.11 → 0.0.12

package/lib/index.js

@@ -1610,6 +1610,37 @@ function sessionOf(exec) {
 	return exec.agent?.session?.id;
 }
 /**
+* Path-resolution options for a call, anchored at the session's directory.
+*
+* Without this a relative path resolves against the filesystem backend's own
+* default — `process.cwd()`, the directory the host was launched from — which
+* has nothing to do with the working directory the person picked for this
+* session. Every other filesystem tool in the product anchors at the session,
+* so a relative `localPath` means the same thing here as it does in a shell
+* running in that session.
+*
+* `ensure` rather than `get`: it returns an absolute directory and validates
+* that it still exists, restoring the original project when it has been
+* removed. `get` is cheaper but is a pure read, so a deleted directory would be
+* handed back and every write under it would fail.
+*
+* Both the service and the agent are optional, and their absence is not an
+* error: a call outside an agent, or a deployment without the service, falls
+* back to the backend's own default rather than refusing to write.
+*
+* @param deps - the tool dependencies, for the working-directory service.
+* @param exec - the call, for its owning agent and cancellation.
+*/
+async function sessionResolveOptions(deps, exec) {
+	const service = deps.resolveWorkingDirectory();
+	const agent = exec.agent;
+	const cwd = service === void 0 || agent === void 0 ? void 0 : await service.ensure(agent, exec.signal);
+	return {
+		...cwd === void 0 ? {} : { cwd },
+		signal: exec.signal
+	};
+}
+/**
 * Register every sandbox tool.
 *
 * @param ctx - the plugin context, providing the tool registry.
@@ -2212,7 +2243,7 @@ function downloadFileTool(deps, ctx) {
 			localPath: {
 				type: "string",
 				required: true,
-				description: "Destination path in the local workspace. Ignored for a binary file, which cannot be written there."
+				description: "Destination in the local workspace. A relative path resolves against the session's working directory, and missing parent directories are created. Ignored for a binary file, which cannot be written there."
 			}
 		},
 		output: {
@@ -2265,7 +2296,7 @@ function downloadFileTool(deps, ctx) {
 					content: Buffer.from(bytes).toString("base64")
 				};
 				const text = Buffer.from(bytes).toString("utf8");
-				const target = await fs.resolve(input.localPath, { signal: exec.signal });
+				const target = await fs.resolve(input.localPath, await sessionResolveOptions(deps, exec));
 				await fs.writeText(target, text, void 0, exec.signal);
 				return {
 					path: input.path,
@@ -2533,7 +2564,8 @@ function apply(ctx, config) {
 	const disposers = registerSandboxTools(ctx, {
 		client,
 		registry,
-		resolveFs: () => ctx.get("fs")
+		resolveFs: () => ctx.get("fs"),
+		resolveWorkingDirectory: () => ctx.get("workingDirectory")
 	});
 	ctx.effect(() => () => {
 		for (const dispose of disposers) dispose();

package/lib/types/tools.d.ts

@@ -34,6 +34,33 @@ export interface ToolDeps {
     readonly registry: SandboxRegistry;
     /** The filesystem the local workspace is reached through, when one is mounted. */
     readonly resolveFs: () => Context['fs'] | undefined;
+    /**
+     * The session working-directory service, when one is mounted.
+     *
+     * A thunk like {@link resolveFs}, and optional for the same reason: a
+     * deployment without it loses one behaviour (where a relative destination
+     * lands) rather than failing to mount.
+     */
+    readonly resolveWorkingDirectory: () => SessionDirectories | undefined;
+}
+/**
+ * The working-directory service, as this plugin needs it.
+ *
+ * Structural rather than imported, for the same reason {@link sessionOf} is:
+ * importing `@deepseek-ai/dsh-working-directory` for the type would add a
+ * framework dependency whose own `schemastery` pin differs from this package's,
+ * and the resulting duplicate copy leaks into the emitted `.d.ts` through a
+ * `.pnpm/…` path nobody installing this package has. One method is all that is
+ * used, so one method is all that is declared.
+ */
+export interface SessionDirectories {
+    /**
+     * The session's effective absolute directory, validated.
+     *
+     * @param agent - the agent owning the session.
+     * @param signal - cancellation for the filesystem inspection.
+     */
+    readonly ensure: (agent: object, signal?: AbortSignal) => Promise<string>;
 }
 /**
  * Register every sandbox tool.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@huaweidevtools/aishell-dsh-e2b",
   "description": "Runs throwaway and preview deployments in E2B sandboxes on DSH — sandbox lifecycle, commands, and files as tools",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "publishConfig": {
     "access": "public"
   },
@@ -27,7 +27,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "e2b": "2.59.0",
-    "@huaweidevtools/aishell-dsh-credentials-store": "0.0.11"
+    "@huaweidevtools/aishell-dsh-credentials-store": "0.0.12"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",