fix(adapters): treat adapterConfig.cwd as remote-only for ssh/sandbox targets (FLO-542)

[Fl0p]

Summary

Fixes the fork bug where every adapter execute path did an unconditional local mkdir of the configured cwd even when the execution target is a remote ssh/sandbox env — the root cause of the EACCES: mkdir '/Users' crash that killed all of Robert's remote runs (FLO-535 / FLO-537).

Two coupled defects, both fixed:

1. Local mkdir of a remote path. buildRuntimeConfig/execute called ensureAbsoluteDirectory(cwd, { createIfMissing }) before any remote branch. With a remote-only adapterConfig.cwd (Robert: /Users/rob/aignite) this ran mkdir -p /Users/rob/aignite on the Pi → EACCES → run died before any ssh.
2. Remote path used as the local staging dir. Even with the mkdir skipped, cwd (the remote-only path) was passed as workspaceLocalDir to the remote runtime, which reads it locally — a real agent_home remote agent would sync an empty/wrong workspace up to the remote.

Change

Make every adapter execute path target-aware:

• Only run the local directory ensure for local targets. For remote targets the working dir is ensured on the target by the remote runtime (mkdir -p over ssh/sandbox inside prepareRemoteManagedRuntime), so no explicit extra round-trip is added.
• Gate useConfiguredInsteadOfAgentHome on !executionTargetIsRemote, so for remote targets adapterConfig.cwd no longer hijacks the LOCAL staging dir; the local workspace/agent-home is the sync source and the remote working dir keeps coming from environment.remoteWorkspacePath.

Applied to claude-local, codex-local, cursor-local, gemini-local, grok-local, opencode-local, pi-local and the shared acpx-engine execute path. hermes is local-only (no remote target) and left unchanged.

Decision (documented in docs/adapters/overview.md): for remote targets adapterConfig.cwd is not a local filesystem path; the remote dir is environment.remoteWorkspacePath. A remote-only cwd is ignored for local-FS purposes.

Tests / verification

• New claude-local regression test: a remote-only adapterConfig.cwd is never local-mkdir-ed and is not used as the sync source (the local agent-home is). Passes.
• typecheck green on all 8 changed packages (adapter-utils + 7 adapters).
• Pre-existing unrelated red: execute.remote.test.ts > "prepares the workspace…" fails identically on baseline fork-patches (stale syncDirectoryToSsh call-count assertion, 1 vs 2) — not touched here.

Scope / governance

• Fixes FLO-542; consolidates duplicate FLO-541 (cancelled).
• paperclip is board-owned — do not merge to fork-patches without board owner approval. Requesting review + merge sign-off.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: d98c660c-6a53-4b05-bf23-180b61268488

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Fl0p]

Rebased merged