I am stuck on a problem where cowork is sending response like this for deleted file

{
"hook_event_name": "PreToolUse",
"tool_name": "mcp__workspace__bash",
"tool_input": {
"command": "rm \"/sessions/busy-eloquent-goodall/mnt/opt/homebrew/demo.txt\" && echo deleted"
}

if we look at command it is rm \"/sessions/busy-eloquent-goodall/mnt/opt/homebrew/demo.txt\
this is a sandboxed path which deletes demo.txt from /opt/homebrew/demo.txt

and rm \"/sessions/epic-dazzling-allen/mnt/Documents/demo.txt\" && echo deleted"
which deletes file from /Users/user1/Documents/demo.txt

For claud code we receive absolute paths but for cowork specifically in case of bash(mcp__workspace__bash) we receive such abrupt
sandbox paths which I can't easily resolve to real path on OS