Fix sandbox denylist symlink regression

Author: lemon07r

internal/cli/eval.go

@@ -2780,14 +2780,19 @@ func resolveSandboxDenylistPaths(configured []string, outputDir string) []string
 	if err != nil {
 		return nil
 	}
+	repoRoot = canonicalizeExistingPath(repoRoot)
 
 	candidates := []string{
 		filepath.Join(repoRoot, "tasks"),
 		filepath.Join(repoRoot, "eval-results"),
 		filepath.Join(repoRoot, "sessions"),
 	}
 	if outputDir != "" {
-		candidates = append(candidates, outputDir)
+		if filepath.IsAbs(outputDir) {
+			candidates = append(candidates, outputDir)
+		} else {
+			candidates = append(candidates, filepath.Join(repoRoot, outputDir))
+		}
 	}
 	for _, path := range configured {
 		if path == "" {
@@ -2807,6 +2812,7 @@ func resolveSandboxDenylistPaths(configured []string, outputDir string) []string
 		if err != nil {
 			continue
 		}
+		absPath = canonicalizeExistingPath(absPath)
 		if _, exists := seen[absPath]; exists {
 			continue
 		}
@@ -2816,6 +2822,17 @@ func resolveSandboxDenylistPaths(configured []string, outputDir string) []string
 	return denylist
 }
 
+func canonicalizeExistingPath(path string) string {
+	if path == "" {
+		return path
+	}
+	resolved, err := filepath.EvalSymlinks(path)
+	if err != nil {
+		return path
+	}
+	return resolved
+}
+
 // detectQuotaError checks if agent log contains rate limit or quota errors.
 // Returns (hasError, isRecoverable) where hasError indicates if any quota/rate
 // limit pattern was found, and isRecoverable indicates if the error is transient.

internal/cli/eval_prompt_test.go

@@ -1115,8 +1115,6 @@ func TestResolveSandboxDenylistPaths(t *testing.T) {
 }
 
 func TestResolveSandboxDenylistPathsIncludesOutputDir(t *testing.T) {
-	t.Parallel()
-
 	origDir, _ := os.Getwd()
 	repoRoot := t.TempDir()
 	if err := os.Chdir(repoRoot); err != nil {
@@ -1139,6 +1137,42 @@ func TestResolveSandboxDenylistPathsIncludesOutputDir(t *testing.T) {
 	}
 }
 
+func TestResolveSandboxDenylistPathsCanonicalizesSymlinkRepoRoot(t *testing.T) {
+	origDir, _ := os.Getwd()
+	realRoot := t.TempDir()
+	aliasParent := t.TempDir()
+	aliasRoot := filepath.Join(aliasParent, "repo-alias")
+	if err := os.Symlink(realRoot, aliasRoot); err != nil {
+		t.Fatalf("create symlink: %v", err)
+	}
+	if err := os.Chdir(aliasRoot); err != nil {
+		t.Fatalf("chdir: %v", err)
+	}
+	t.Setenv("PWD", aliasRoot)
+	defer func() { _ = os.Chdir(origDir) }()
+
+	got := resolveSandboxDenylistPaths(nil, "")
+	want := filepath.Join(realRoot, "tasks")
+	unwanted := filepath.Join(aliasRoot, "tasks")
+
+	hasWant := false
+	hasUnwanted := false
+	for _, path := range got {
+		if path == want {
+			hasWant = true
+		}
+		if path == unwanted {
+			hasUnwanted = true
+		}
+	}
+	if !hasWant {
+		t.Fatalf("expected canonical denylist path %s, got %v", want, got)
+	}
+	if hasUnwanted {
+		t.Fatalf("unexpected symlink denylist path %s in %v", unwanted, got)
+	}
+}
+
 func TestParseAgentBehaviorMetrics(t *testing.T) {
 	t.Parallel()