fix errors

Author: seratch

src/agents/sandbox/workspace_paths.py

@@ -83,7 +83,7 @@ def __init__(
     ) -> None:
         self._root = Path(root)
         self._sandbox_root = coerce_posix_path(root)
-        self._root_is_existing_host_path = self._root.exists()
+        self._root_is_existing_host_path = self._path_exists(self._root)
         self._extra_path_grants = extra_path_grants
 
     def absolute_workspace_path(self, path: str | PurePath) -> Path:
@@ -237,6 +237,13 @@ def _absolute_posix_path(self, path: PurePosixPath) -> PurePosixPath:
     def _normalized_root(self) -> PurePosixPath:
         return PurePosixPath(posixpath.normpath(self._sandbox_root.as_posix()))
 
+    @staticmethod
+    def _path_exists(path: Path) -> bool:
+        try:
+            return path.exists()
+        except OSError:
+            return False
+
     def _path_result(self, path: PurePosixPath) -> Path:
         if self._root_is_existing_host_path:
             return Path(path.as_posix())

tests/sandbox/test_workspace_paths.py

@@ -251,6 +251,22 @@ def test_normalize_path_uses_posix_paths_for_windows_inputs() -> None:
     )
 
 
+def test_inaccessible_root_is_treated_as_remote_path(monkeypatch: pytest.MonkeyPatch) -> None:
+    root = PurePosixPath("/root/project")
+
+    def raise_for_root(path: Path) -> bool:
+        if path.as_posix() == root.as_posix():
+            raise PermissionError("permission denied")
+        return False
+
+    monkeypatch.setattr(Path, "exists", raise_for_root)
+
+    policy = WorkspacePathPolicy(root=root)
+
+    assert policy.root_is_existing_host_path() is False
+    assert policy.normalize_path("pkg/file.py").as_posix() == "/root/project/pkg/file.py"
+
+
 def test_absolute_workspace_path_rejects_windows_rooted_escape_as_absolute() -> None:
     policy = WorkspacePathPolicy(root="/workspace")