Where does the bug appear (feature/product)?
Cursor IDE
Describe the Bug
When agent is put in ‘Ask’ mode Cursor IDE imperatively changes agent workspace to /home/user/.cursor/ without notifying.
proved by looking into code and ia agent confirms it (see attachment)
WHY ‘CRITICAL’: once the agent is in another workspace (has been instructed by cursor to work there) does not switch back to the ‘correct’ workspace when re-put in Agent mode: Cursor seems not to give further instructions: hence the agent writes from that moment onward in /home/user/.cursor/ instead in the opened (in the ide) workspace that has been used for hours.
Steps to Reproduce
Open a workspace, ask agent to draft a plan then make it execute it in agent mode. this goes fine and the paths in the plan being relative cause no issues.
Then switch to Ask mode and ask info about possible fixes: switch to agent mode and confirm the suggestions made in Ask mode should be now implemented by the agent (in the prompts/discussions no absolute paths specified neither by me nor by agent but only referred to known current tree relative path as usual)
Expected Behavior
classes modified in current project.
Screenshots / Screen Recordings
Operating System
Linux
Version Information
Version: 2.4.21
VSCode Version: 1.105.1
Commit: dc8361355d709f306d5159635a677a571b277bc0
Date: 2026-01-22T16:57:59.675Z
Build Type: Stable
Release Track: Default
Electron: 39.2.7
Chromium: 142.0.7444.235
Node.js: 22.21.1
V8: 14.2.231.21-electron.0
OS: Linux x64 5.15.0-139-generic
For AI issues: which model did you use?
GPT5.2-codex
Additional Information
have I ever left current workspace or opened others? no
one time issue? no, recurrent
impacts development and code consistency.
cursor changing imperatively workspace for the agent is a major/critical issue.
POSSIBLE CAUSE (inferring, can not reliably prove):
is there a real reason cursor must put agent in a different worktree? no: cursor probably do this to avoid code modifications but this is a contradiction: ‘use read only tools’ does not mean ‘I will now move you to workspace copy without need tonotifying you’: I don’t know why cursor does this: gpt5.2 is smart enough to use read only tools in ask mode.
does perhaps cursor do this for less smart agents? it’s wrong anyway, defies modes. if an agent is not smart enough to stay in ask mode it’s the dev responsibility to chose a smarter one, there are of them plenty available.
Does this stop you from using Cursor
No - Cursor works, but with this issue



