fix(agents): distinguish explicit node workdirs

deepujain · deepujain · commit 512853bb348a · 2026-04-26T18:13:13.000-07:00
diff --git a/src/agents/bash-tools.exec-host-node-phases.ts b/src/agents/bash-tools.exec-host-node-phases.ts
@@ -51,13 +51,13 @@ export function shouldSkipNodeApprovalPrepare(params: {
   hostSecurity: ExecSecurity;
   hostAsk: ExecAsk;
   strictInlineEval?: boolean;
-  workdir?: string;
+  workdirExplicit?: boolean;
 }): boolean {
   return (
     params.hostSecurity === "full" &&
     params.hostAsk === "off" &&
     params.strictInlineEval !== true &&
-    params.workdir === undefined
+    params.workdirExplicit !== true
   );
 }
 
diff --git a/src/agents/bash-tools.exec-host-node.ts b/src/agents/bash-tools.exec-host-node.ts
@@ -44,7 +44,7 @@ export async function executeNodeHostCommand(
       hostSecurity,
       hostAsk,
       strictInlineEval: params.strictInlineEval,
-      workdir: params.workdir,
+      workdirExplicit: params.workdirExplicit,
     })
   ) {
     return await invokeNodeSystemRunDirect({ request: params, target });
diff --git a/src/agents/bash-tools.exec-host-node.types.ts b/src/agents/bash-tools.exec-host-node.types.ts
@@ -3,6 +3,7 @@ import type { ExecAsk, ExecSecurity } from "../infra/exec-approvals.js";
 export type ExecuteNodeHostCommandParams = {
   command: string;
   workdir: string | undefined;
+  workdirExplicit?: boolean;
   env: Record<string, string>;
   requestedEnv?: Record<string, string>;
   requestedNode?: string;
diff --git a/src/agents/bash-tools.exec.ts b/src/agents/bash-tools.exec.ts
@@ -1609,6 +1609,7 @@ export function createExecTool(
         return executeNodeHostCommand({
           command: params.command,
           workdir,
+          workdirExplicit: explicitWorkdir !== undefined,
           env,
           requestedEnv: params.env,
           requestedNode: params.node?.trim(),
