CB-112: workers inherit the primary's working directory (not $HOME)

A worker now opens the same directory the primary is in, unless told otherwise.
Resolution: explicit spawn cwd → per-profile config cwd → the primary's cwd
(auto-detected from the bridge_spawn caller's PID via lsof -d cwd) → the daemon's
cwd. Never $HOME.

Mechanism (found by live probe, corrects the earlier assumption): an agent.start
pane does NOT inherit its tab's or workspace's cwd — it starts in $HOME. herdr's
agent.start honours an (undocumented) cwd param, so the resolved cwd is threaded
onto agent.start {cwd} (both tab and pane placement), not tab.create.

Surfaces: bridge_spawn {cwd?} + auto-detect via ConnectionIdentity.resolve (peer
PID) + ProcessCwdLookup (lsof); REST POST /workers ?cwd= / body cwd; per-profile
'cwd:' config. Validated live: explicit cwd → worker rooted there; no cwd over
REST → daemon cwd, not $HOME. Also clears the ccs folder-trust prompt when the
project dir is already trusted (see docs/Worker-Startup-and-Trust.md).

bridged/src/test/java/dev/ltms/bridged/mcp/BridgeMcpTest.java

@@ -38,7 +38,7 @@ class BridgeMcpTest {
     private static WorkerService workerService(FakeHerdr h, String baseUrl, Set<String> allow) {
         BridgedConfig.Worker cfg = new BridgedConfig.Worker(
                 "ltms-local", baseUrl, "coder", null, "BRIDGED_WORKER_TOKEN", null,
-                "tab", "bridged-workers", "worker: {profile} #{n}", null);
+                "tab", "bridged-workers", "worker: {profile} #{n}", null, null);
         return new WorkerService(new AgentControl(h), new WorkspaceControl(h),
                 new SubscriptionGuard(allow), Map.of(cfg.profile(), cfg), cfg.profile(), _ -> "tok");
     }
@@ -149,6 +149,17 @@ class BridgeMcpTest {
         assertTrue(textOf(res).contains("unknown worker profile"), textOf(res));
     }
 
+    @Test
+    void spawnPassesTheRequestedCwdToTheWorker() {
+        FakeHerdr h = new FakeHerdr();
+        McpSchema.CallToolResult res = BridgeMcp.spawn(
+                workerService(h, "http://gx00.gw:8000", Set.of("gx00.gw")), null, "/req/dir", null);
+        assertNotEquals(Boolean.TRUE, res.isError());
+        @SuppressWarnings("unchecked")
+        Map<String, Object> start = (Map<String, Object>) h.lastCall("agent.start").params();
+        assertEquals("/req/dir", start.get("cwd"));
+    }
+
     @Test
     void profilesListsConfiguredProfilesAndDefault() {
         FakeHerdr h = new FakeHerdr();

bridged/src/test/java/dev/ltms/bridged/mcp/ConnectionIdentityTest.java

@@ -31,4 +31,16 @@ class ConnectionIdentityTest {
         // e.g. the primary — its PID maps to no worker pane.
         assertNull(with(_ -> 999_999).callerTerminal("127.0.0.1", 55555));
     }
+
+    @Test
+    void resolvesTheCallersPidAndCwd() {
+        // CB-112: the primary maps to no pane, but its PID and cwd are still readable.
+        ConnectionIdentity id = new ConnectionIdentity(
+                new PaneLocator(herdr), _ -> 999_999, pid -> pid == 999_999 ? "/main/project" : null);
+        ConnectionIdentity.Caller c = id.resolve("127.0.0.1", 55555);
+        assertNull(c.terminal(), "the primary owns no worker pane");
+        assertEquals(999_999, c.pid());
+        assertEquals("/main/project", id.cwdForPid(c.pid()), "the primary's cwd is resolvable from its PID");
+        assertNull(id.cwdForPid(-1), "no cwd for an unresolved PID");
+    }
 }

bridged/src/test/java/dev/ltms/bridged/rest/BridgedAppTest.java

@@ -52,7 +52,7 @@ class BridgedAppTest {
     private int start(FakeHerdr herdr, String workerBaseUrl, Set<String> allow, String placement) {
         BridgedConfig.Worker wcfg = new BridgedConfig.Worker(
                 "ltms-local", workerBaseUrl, "coder", null, "BRIDGED_WORKER_TOKEN", null,
-                placement, "bridged-workers", "worker: {profile} #{n}", null);
+                placement, "bridged-workers", "worker: {profile} #{n}", null, null);
         AgentControl agents = new AgentControl(herdr);
         WorkerService workers = new WorkerService(
                 agents, new WorkspaceControl(herdr), new SubscriptionGuard(allow),
@@ -171,6 +171,14 @@ class BridgedAppTest {
         assertEquals("ltms-local", body.get("profiles").get(0).asText());
     }
 
+    @Test
+    void spawnWithACwdParamRootsTheWorkerThere() throws Exception {
+        FakeHerdr herdr = new FakeHerdr();
+        int port = start(herdr, "http://gx00.gw:8000", Set.of("gx00.gw"));
+        assertEquals(201, req(port, "POST", "/workers?cwd=/tmp/proj").statusCode());
+        assertEquals("/tmp/proj", params(herdr, "agent.start").get("cwd"), "the worker starts in cwd");
+    }
+
     @Test
     void spawnWithAnUnknownProfileIs400() throws Exception {
         FakeHerdr herdr = new FakeHerdr();

bridged/src/test/java/dev/ltms/bridged/worker/WorkerServiceTest.java

@@ -19,7 +19,7 @@ class WorkerServiceTest {
     private WorkerService service(FakeHerdr herdr, List<String> argv, String mcpUrl) {
         BridgedConfig.Worker cfg = new BridgedConfig.Worker(
                 "ltms-local", "http://gx00.gw:8000", "coder", null, "BRIDGED_WORKER_TOKEN",
-                argv, "tab", "bridged-workers", "worker: {profile} #{n}", mcpUrl);
+                argv, "tab", "bridged-workers", "worker: {profile} #{n}", mcpUrl, null);
         return new WorkerService(new AgentControl(herdr), new WorkspaceControl(herdr),
                 new SubscriptionGuard(Set.of("gx00.gw")), Map.of(cfg.profile(), cfg), cfg.profile(), _ -> null);
     }
@@ -52,9 +52,9 @@ class WorkerServiceTest {
 
     private WorkerService multiProfile(FakeHerdr herdr) {
         BridgedConfig.Worker gx10 = new BridgedConfig.Worker("gx10", "http://gx10.gw:8000", "coder",
-                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "gx10"), "tab", "bridged-workers", "w #{n}", null);
+                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "gx10"), "tab", "bridged-workers", "w #{n}", null, null);
         BridgedConfig.Worker ollama = new BridgedConfig.Worker("ollama", "http://ollama.ltms.dev", null,
-                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "ollama"), "tab", "bridged-workers", "w #{n}", null);
+                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "ollama"), "tab", "bridged-workers", "w #{n}", null, null);
         return new WorkerService(new AgentControl(herdr), new WorkspaceControl(herdr),
                 new SubscriptionGuard(Set.of("gx10.gw", "ollama.ltms.dev")),
                 Map.of("gx10", gx10, "ollama", ollama), "gx10", _ -> "tok");
@@ -77,4 +77,37 @@ class WorkerServiceTest {
         FakeHerdr herdr = new FakeHerdr();
         assertThrows(IllegalArgumentException.class, () -> multiProfile(herdr).spawn("nope"));
     }
+
+    @SuppressWarnings("unchecked")
+    private static String startCwd(FakeHerdr herdr) {
+        // The worker's cwd is set on agent.start (an agent pane does not inherit the tab's cwd).
+        Object v = ((Map<String, Object>) herdr.lastCall("agent.start").params()).get("cwd");
+        return v == null ? null : v.toString();
+    }
+
+    @Test
+    void requestedCwdRootsTheWorker() {
+        FakeHerdr herdr = new FakeHerdr();
+        service(herdr, List.of("ccs", "ltms-local"), null).spawn("ltms-local", "/work/proj", "/caller/home");
+        assertEquals("/work/proj", startCwd(herdr), "an explicit spawn cwd wins over everything");
+    }
+
+    @Test
+    void profileConfigCwdBeatsTheCallerCwd() {
+        FakeHerdr herdr = new FakeHerdr();
+        BridgedConfig.Worker cfg = new BridgedConfig.Worker("ltms-local", "http://gx00.gw:8000", "coder",
+                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "ltms-local"), "tab", "bridged-workers",
+                "w #{n}", null, "/pinned/dir");
+        WorkerService svc = new WorkerService(new AgentControl(herdr), new WorkspaceControl(herdr),
+                new SubscriptionGuard(Set.of("gx00.gw")), Map.of("ltms-local", cfg), "ltms-local", _ -> null);
+        svc.spawn("ltms-local", null, "/caller/home");
+        assertEquals("/pinned/dir", startCwd(herdr), "a profile-pinned cwd overrides the caller's");
+    }
+
+    @Test
+    void inheritsTheCallerCwdWhenNothingElseIsSet() {
+        FakeHerdr herdr = new FakeHerdr();
+        service(herdr, List.of("ccs", "ltms-local"), null).spawn("ltms-local", null, "/primary/project");
+        assertEquals("/primary/project", startCwd(herdr), "no explicit/config cwd → inherit the primary's");
+    }
 }