fix: require explicit workdir command cwd

crates/worker/src/feature/builtin/manage_workdir.rs

@@ -1357,7 +1357,7 @@ mod tests {
                 command: "true".to_string(),
                 timeout_secs: 120,
                 output_limit: 1024,
-                cwd: None,
+                cwd: workdir::WorkdirPath::root(),
                 spill_dir: Some("/worker-local/bash-output".into()),
                 tool_call_id: Some("call-1".to_string()),
             })
@@ -1370,6 +1370,7 @@ mod tests {
             serde_json::from_str(requests[0].body.as_deref().unwrap()).unwrap();
         assert_eq!(body["operation"]["operation"], "command_start");
         assert_eq!(body["operation"]["request"]["command"], "true");
+        assert_eq!(body["operation"]["request"]["cwd"], "");
         assert!(body["operation"]["request"]["spill_dir"].is_null());
         assert_eq!(body["operation"]["request"]["tool_call_id"], "call-1");
         assert!(
@@ -1638,7 +1639,7 @@ mod tests {
                 command: "printf done".to_string(),
                 timeout_secs: 5,
                 output_limit: 1024,
-                cwd: None,
+                cwd: workdir::WorkdirPath::root(),
                 spill_dir: None,
                 tool_call_id: None,
             })

crates/worker/tests/controller_test.rs

@@ -345,7 +345,7 @@ async fn shutdown_closes_bound_workdir_session() {
             command: "sleep 30".to_owned(),
             timeout_secs: 60,
             output_limit: 1024,
-            cwd: None,
+            cwd: workdir::WorkdirPath::root(),
             spill_dir: None,
             tool_call_id: None,
         })
@@ -395,7 +395,7 @@ async fn controller_projects_workdir_command_events_and_snapshot_state() {
             command: "printf ready; sleep 0.3; printf done".to_owned(),
             timeout_secs: 5,
             output_limit: 1024,
-            cwd: None,
+            cwd: workdir::WorkdirPath::root(),
             spill_dir: None,
             tool_call_id: Some("tool-command-1".into()),
         })
@@ -509,7 +509,7 @@ async fn controller_refreshes_command_snapshot_after_high_output_provider_lag()
                 .to_owned(),
             timeout_secs: 10,
             output_limit: 1024,
-            cwd: None,
+            cwd: workdir::WorkdirPath::root(),
             spill_dir: None,
             tool_call_id: Some("tool-high-output".into()),
         })
@@ -591,7 +591,7 @@ async fn controller_startup_failure_closes_bound_workdir_session() {
                 command: "printf unreachable".to_owned(),
                 timeout_secs: 5,
                 output_limit: 1024,
-                cwd: None,
+                cwd: workdir::WorkdirPath::root(),
                 spill_dir: None,
                 tool_call_id: None,
             })