fix(harness): strip Windows drive prefix in SANDBOXED resolveSandboxed

chickenlj · chickenlj · commit 660e1ede476c · 2026-06-03T00:07:46.000+08:00
LocalFilesystemModeTest expected SANDBOXED mode to silently re-root
absolute paths under the workspace (returning a "not found" error from
read), but Windows drive-letter paths like "C:\Users\...\secret.txt"
slipped past the leading-"/" peel and stayed absolute, so cwd.resolve()
returned the original absolute path and the !startsWith(cwd) check
threw SecurityException.

Strip the drive prefix ("C:\" / "C:/") in resolveSandboxed so the
remainder is a relative path that resolves under cwd the same way Unix
absolute inputs do. No-op on Unix; matches the test's documented
"absolute path becomes a non-existent relative under the root" intent.
diff --git a/agentscope-harness/src/main/java/io/agentscope/harness/agent/filesystem/local/LocalFilesystem.java b/agentscope-harness/src/main/java/io/agentscope/harness/agent/filesystem/local/LocalFilesystem.java
@@ -612,13 +612,25 @@ private Path resolveSandboxed(String effectiveKey) {
         if (vpath.contains("..") || vpath.startsWith("~")) {
             throw new SecurityException("Path traversal not allowed");
         }
-        Path full = cwd.resolve(vpath.substring(1)).normalize();
+        // Strip Windows drive prefix ("C:\" / "C:/") so absolute Windows paths get re-rooted
+        // under the sandbox the same way Unix absolute paths do; no-op on Unix input.
+        Path full = cwd.resolve(stripWindowsDrive(vpath.substring(1))).normalize();
         if (!full.startsWith(cwd)) {
             throw new SecurityException("Path " + full + " outside root directory: " + cwd);
         }
         return full;
     }
 
+    private static String stripWindowsDrive(String key) {
+        if (key.length() >= 3
+                && Character.isLetter(key.charAt(0))
+                && key.charAt(1) == ':'
+                && (key.charAt(2) == '\\' || key.charAt(2) == '/')) {
+            return key.substring(3);
+        }
+        return key;
+    }
+
     private Path resolveRooted(String effectiveKey) {
         Path target = Path.of(effectiveKey);
         if (target.isAbsolute()) {
