Refactor base paths with centralized path management (#901)

* Initial plan

* refactor: centralize path management and improve memory storage configuration

* fix: update memory storage path in config.example.yaml for clarity

* Initial plan

* Address PR #901 review comments: security fixes and documentation improvements

Co-authored-by: foreleven <4785594+foreleven@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: foreleven <4785594+foreleven@users.noreply.github.com>

backend/src/community/aio_sandbox/aio_sandbox_provider.py

@@ -20,10 +20,9 @@ import signal
 import threading
 import time
 import uuid
-from pathlib import Path
 
 from src.config import get_app_config
-from src.sandbox.consts import THREAD_DATA_BASE_DIR, VIRTUAL_PATH_PREFIX
+from src.config.paths import VIRTUAL_PATH_PREFIX, get_paths
 from src.sandbox.sandbox import Sandbox
 from src.sandbox.sandbox_provider import SandboxProvider
 
@@ -135,7 +134,7 @@ class AioSandboxProvider(SandboxProvider):
         #       redis_url: redis://localhost:6379/0
         #   This would enable cross-host sandbox discovery (e.g., multiple K8s pods
         #   without shared PVC, or multi-node Docker Swarm).
-        return FileSandboxStateStore(base_dir=os.getcwd())
+        return FileSandboxStateStore(base_dir=str(get_paths().base_dir))
 
     # ── Configuration ────────────────────────────────────────────────────
 
@@ -203,18 +202,15 @@ class AioSandboxProvider(SandboxProvider):
 
         Creates directories if they don't exist (lazy initialization).
         """
-        base_dir = os.getcwd()
-        thread_dir = Path(base_dir) / THREAD_DATA_BASE_DIR / thread_id / "user-data"
+        paths = get_paths()
+        paths.ensure_thread_dirs(thread_id)
 
         mounts = [
-            (str(thread_dir / "workspace"), f"{VIRTUAL_PATH_PREFIX}/workspace", False),
-            (str(thread_dir / "uploads"), f"{VIRTUAL_PATH_PREFIX}/uploads", False),
-            (str(thread_dir / "outputs"), f"{VIRTUAL_PATH_PREFIX}/outputs", False),
+            (str(paths.sandbox_work_dir(thread_id)), f"{VIRTUAL_PATH_PREFIX}/workspace", False),
+            (str(paths.sandbox_uploads_dir(thread_id)), f"{VIRTUAL_PATH_PREFIX}/uploads", False),
+            (str(paths.sandbox_outputs_dir(thread_id)), f"{VIRTUAL_PATH_PREFIX}/outputs", False),
         ]
 
-        for host_path, _, _ in mounts:
-            os.makedirs(host_path, exist_ok=True)
-
         return mounts
 
     @staticmethod

backend/src/community/aio_sandbox/file_state_store.py

@@ -15,6 +15,8 @@ from collections.abc import Generator
 from contextlib import contextmanager
 from pathlib import Path
 
+from src.config.paths import Paths
+
 from .sandbox_info import SandboxInfo
 from .state_store import SandboxStateStore
 
@@ -27,26 +29,24 @@ SANDBOX_LOCK_FILE = "sandbox.lock"
 class FileSandboxStateStore(SandboxStateStore):
     """File-based state store using JSON files and fcntl file locking.
 
-    State is stored at: {base_dir}/{threads_subdir}/{thread_id}/sandbox.json
-    Lock files at:      {base_dir}/{threads_subdir}/{thread_id}/sandbox.lock
+    State is stored at: {base_dir}/threads/{thread_id}/sandbox.json
+    Lock files at:      {base_dir}/threads/{thread_id}/sandbox.lock
 
     This works across processes on the same machine sharing a filesystem.
     For K8s multi-pod scenarios, requires a shared PVC mount at base_dir.
     """
 
-    def __init__(self, base_dir: str, threads_subdir: str = ".deer-flow/threads"):
+    def __init__(self, base_dir: str):
         """Initialize the file-based state store.
 
         Args:
-            base_dir: Root directory for state files (typically the project root / cwd).
-            threads_subdir: Subdirectory path for thread state (default: ".deer-flow/threads").
+            base_dir: Root directory for state files (typically Paths.base_dir).
         """
-        self._base_dir = Path(base_dir)
-        self._threads_subdir = threads_subdir
+        self._paths = Paths(base_dir)
 
     def _thread_dir(self, thread_id: str) -> Path:
         """Get the directory for a thread's state files."""
-        return self._base_dir / self._threads_subdir / thread_id
+        return self._paths.thread_dir(thread_id)
 
     def save(self, thread_id: str, info: SandboxInfo) -> None:
         thread_dir = self._thread_dir(thread_id)