refactor: stop uipath_cli tool from creating workspace directories

The runtime (deepagents' filesystem backend / Workspace.create) already owns
workspace creation, so the tool's mkdir calls were redundant. Remove the
workspace-root and subdir mkdir; the tool now only consumes the directory the
caller provisions. Keeps the binary allowlist, destructive-command denylist,
and subdir traversal guard.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mariadhakalUipath

src/uipath_langchain/agent/tools/internal_tools/uipath_cli_tool.py

@@ -84,13 +84,12 @@ class UiPathCliArgs(BaseModel):
 
 
 def _resolve_run_dir(workspace_path: Path, subdir: str) -> Path | str:
-    """Resolve ``subdir`` under the workspace (creating it), or an ERROR string if it escapes."""
+    """Resolve ``subdir`` under the workspace"""
     if not subdir:
         return workspace_path
     candidate = (workspace_path / subdir).resolve()
     if not candidate.is_relative_to(workspace_path):
         return f"ERROR: subdir '{subdir}' escapes the workspace directory."
-    candidate.mkdir(parents=True, exist_ok=True)
     return candidate
 
 
@@ -184,13 +183,8 @@ def create_uipath_cli_tool(
     timeout_sec: int = 120,
     denied_subcommands: Iterable[str] | None = None,
 ) -> BaseTool:
-    """Build a ``uipath_cli`` tool jailed to ``workspace`` for advanced agents with skills.
-
-    The tool runs CLI commands with ``cwd`` under ``workspace.path``. The workspace
-    lifecycle (creation, cleanup) stays owned by the runtime.
-    """
+    """Build a ``uipath_cli`` tool jailed to ``workspace`` for advanced agents with skills."""
     workspace_path = Path(workspace.path).expanduser().resolve()
-    workspace_path.mkdir(parents=True, exist_ok=True)
     denied = frozenset(
         s.lower()
         for s in (

tests/agent/tools/internal_tools/test_uipath_cli_tool.py

@@ -20,10 +20,11 @@ def _invoke(tool: Any, **kwargs: Any) -> str:
 
 
 class TestCreateUipathCliTool:
-    def test_creates_workspace_when_absent(self, tmp_path: Path) -> None:
+    def test_does_not_create_workspace(self, tmp_path: Path) -> None:
+        # The runtime owns workspace creation; the tool must not create directories.
         target = tmp_path / "does" / "not" / "exist"
         create_uipath_cli_tool(_workspace(target))
-        assert target.is_dir()
+        assert not target.exists()
 
     def test_marks_tool_as_internal(self, tmp_path: Path) -> None:
         tool = create_uipath_cli_tool(_workspace(tmp_path))