fix(security): resolve F-03 normalize cross-platform traversal paths

Author: Aitomates

maf_starter/tools.py

@@ -2,7 +2,7 @@
 
 import json
 import subprocess
-from pathlib import Path
+from pathlib import Path, PureWindowsPath
 
 from agent_framework import tool
 
@@ -18,7 +18,10 @@
 
 
 def _resolve_candidate(repo_root: Path, raw_path: str) -> Path:
-    candidate = Path(raw_path)
+    normalized_raw = raw_path.replace("\\", "/")
+    if PureWindowsPath(raw_path).is_absolute() and not Path(normalized_raw).is_absolute():
+        raise ValueError(f"Path escapes the configured repo root: {raw_path}")
+    candidate = Path(normalized_raw)
     if not candidate.is_absolute():
         candidate = (repo_root / candidate).resolve()
     else:

tests/test_maf_setup.py

@@ -112,8 +112,10 @@ def test_resolve_repo_path_blocks_escape(self) -> None:
         allowed = root / "notes.txt"
         allowed.write_text("ok", encoding="utf-8")
         self.assertEqual(resolve_repo_path(root, "notes.txt"), allowed)
-        with self.assertRaises(ValueError):
-            resolve_repo_path(root, "..\\outside.txt")
+        for unsafe_path in ("../outside.txt", "..\\outside.txt", "C:\\outside.txt"):
+            with self.subTest(path=unsafe_path):
+                with self.assertRaises(ValueError):
+                    resolve_repo_path(root, unsafe_path)
 
     def test_build_repo_tools_contains_expected_tool_names(self) -> None:
         tools = build_repo_tools(self.make_scratch_dir())