From 2fa43ad5a69d2360fe557fbc5fea8a4c5b57cef3 Mon Sep 17 00:00:00 2001
From: maatheusgois-dd <matheus.gois@doordash.com>
Date: Wed, 22 Jul 2026 02:44:56 -0300
Subject: [PATCH] Omit additionalDirectories for isolated (worktree) task runs

Isolated tasks clone only cwd into the worktree. Forwarding the
parent's additional directories would let the subagent edit absolute
paths under the original extra roots, bypassing isolation. Now
additionalDirectories is undefined when worktree is set.

Co-authored-by: oh-my-pi <https://omp.sh>
---
 packages/coding-agent/src/task/executor.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/coding-agent/src/task/executor.ts b/packages/coding-agent/src/task/executor.ts
index 20e3f9ed3..c526cf1c4 100644
--- a/packages/coding-agent/src/task/executor.ts
+++ b/packages/coding-agent/src/task/executor.ts
@@ -2541,7 +2541,7 @@ export async function runSubprocess(options: ExecutorOptions): Promise<SingleRes
 			// artifacts dir) — only the SessionManager differs.
 			const buildSubagentSessionOptions = (sessionManagerForRun: SessionManager): CreateAgentSessionOptions => ({
 				cwd: worktree ?? cwd,
-				additionalDirectories: options.additionalDirectories,
+				additionalDirectories: worktree !== undefined ? undefined : options.additionalDirectories,
 				authStorage,
 				modelRegistry,
 				settings: subagentSettings,