resolve_safe_path now detects when the LLM passes the workspace root as a relative path (e.g. "home/user/project/file.py") and strips the prefix before joining. Also updated the system prompt to explicitly instruct the model to use relative paths for all tool arguments. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>