@yeaft/webchat-agent 0.1.892 → 0.1.894

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "0.1.892",
+  "version": "0.1.894",
   "description": "Remote agent for Yeaft WebChat — connects worker machines to the central server",
   "main": "index.js",
   "type": "module",

package/yeaft/engine.js

@@ -18,6 +18,7 @@
  */
 
 import { randomUUID } from 'crypto';
+import { resolve as resolvePath } from 'path';
 import { buildSystemPrompt, buildWorkerPrompt } from './prompts.js';
 import { LLMContextError, LLMAbortError } from './llm/adapter.js';
 import { runMemoryPreflow, buildRelevantScopes } from './sessions/pre-flow.js';
@@ -877,7 +878,17 @@ export class Engine {
     return {
       signal,
       yeaftDir: this.#yeaftDir,
-      cwd: process.cwd(),
+      // Group-scoped working directory. Threaded from #runQuery({ workDir })
+      // → set by web-bridge runVpTurn from sessionMeta.workDir. Tools read
+      // `ctx.cwd` and resolve relative paths against it. Always absolute
+      // (path.resolve normalizes relative inputs + trailing slashes) so
+      // tools that string-concatenate don't accidentally walk from
+      // process.cwd(). Falls back to process.cwd() in non-group / test
+      // contexts.
+      cwd: (() => {
+        const raw = typeof vpCtx?.workDir === 'string' ? vpCtx.workDir.trim() : '';
+        return raw ? resolvePath(raw) : process.cwd();
+      })(),
       mcpManager: this.#mcpManager,
       skillManager: this.#skillManager,
       conversationStore: this.#conversationStore,
@@ -2266,6 +2277,7 @@ export class Engine {
         contextWindow: currentContextWindow,
         getCurrentTodos,
         setCurrentTodos,
+        workDir,
         requestEndTurn: (reason) => {
           // First call wins — preserve the kind/reason of the first tool
           // that asked to end the turn. Late callers (a second
@@ -2344,7 +2356,14 @@ export class Engine {
               output = await this.#toolRegistry.execute(tc.name, tc.input, toolCtx);
             } else {
               const tool = this.#tools.get(tc.name);
-              const rawOutput = await tool.execute(tc.input, { signal });
+              // Pass the full toolCtx (cwd, workDir, signal, …) — not just
+              // `{ signal }`. Legacy registerTool() callers historically got
+              // a 1-field ctx, but that means tools like bash/file-read run
+              // in the agent process cwd instead of the group's workDir.
+              // Real production goes through #toolRegistry; the legacy path
+              // is exercised by tests and a few standalone tools. Aligning
+              // both paths keeps `ctx.cwd` semantics consistent.
+              const rawOutput = await tool.execute(tc.input, toolCtx);
               // Legacy #tools branch must apply the same per-tool cap as
               // ToolRegistry.execute. Otherwise a deployment using the legacy
               // registration path bypasses the defense entirely.

package/yeaft/session.js

@@ -323,11 +323,15 @@ export async function loadSession(options = {}) {
     } catch (err) {
       console.warn(`[Yeaft] topUpDefaultVps failed: ${err?.message || err}`);
     }
-    try {
-      ensureDefaultSessionIfEmpty(yeaftDir, { memoryRoot: join(yeaftDir, 'memory') });
-    } catch (err) {
-      console.warn(`[Yeaft] ensureDefaultSessionIfEmpty failed: ${err?.message || err}`);
-    }
+    // fix-yeaft-session-server-persistence: stop auto-seeding a
+    // `grp_default` per agent. Previously every agent that booted with
+    // zero sessions would manufacture an empty default group, which on
+    // the unified sidebar shows up as a phantom row distinct from the
+    // user's real session — and on agent switch it stole the active-
+    // session slot. With server-side persistence the user's actual
+    // yeaft sessions are now hydrated from the DB; if they have none,
+    // the sidebar shows the empty state + "create session" CTA, which
+    // is the explicit behaviour the user asked for.
 
     // task-fix-memory-load: backfill summary.md for VPs / groups created
     // before the create-time seed was added. Without this, an existing

package/yeaft/web-bridge.js

@@ -2223,15 +2223,13 @@ export async function handleYeaftSessionSend(msg) {
     const dir = join(sessionRoot, sessionId);
     if (existsSync(dir) && loadSessionMeta(dir)) {
       sessionHandle = openSession(sessionRoot, sessionId);
-    } else if (sessionId === 'grp_default') {
-      try {
-        const seeded = seedDefaultSession(groupYeaftDir, { memoryRoot: join(groupYeaftDir, 'memory') });
-        sessionHandle = seeded.group;
-      } catch (seedErr) {
-        seedFailed = true;
-        console.warn('[Yeaft] yeaft_group_chat: seedDefaultSession failed', seedErr?.message || seedErr);
-      }
     } else {
+      // fix-yeaft-session-server-persistence: the `grp_default` on-the-
+      // fly seed used to manufacture a missing session here. That
+      // hid the "session not found" error and re-created the phantom
+      // default-group row across agents. Now we surface the not-found
+      // case so the web can show an "agent offline / session missing"
+      // hint instead of silently creating a different session.
       console.warn('[Yeaft] yeaft_group_chat: sessionId %s not found', sessionId);
     }
   } catch (err) {