@@ -30,9 +30,8 @@ def _resolve_local_path(path: str, settings: GCSToolSettings | None) -> str:
   """Resolves a model-supplied local file path under the configured root.
 
   Raises:
-      ValueError: If no root is configured, if the path is absolute, if it names
-        the root itself, or if it resolves outside the root once symlinks are
-        followed.
+      ValueError: If no root is configured, if it names the root itself, or if
+        it resolves outside the root once symlinks are followed.
   """
   root = settings.local_file_root if settings else None
   if not root:
@@ -41,10 +40,16 @@ def _resolve_local_path(path: str, settings: GCSToolSettings | None) -> str:
         " settings to let these tools read from or write to the local"
         " filesystem."
     )
-  if Path(path).is_absolute():
-    raise ValueError(f"Local file path must be relative: {path}")
   resolved_root = Path(root).resolve()
-  resolved = (resolved_root / path).resolve()
+  # An absolute path is judged by where it lands, like a relative one: the
+  # containment check below is what confines either, and it runs after symlinks
+  # are followed.
+  candidate = Path(path)
+  if not candidate.is_absolute():
+    candidate = resolved_root / candidate
+  resolved = candidate.resolve()
+  # The root itself stays out of the message: it reaches the model, and the
+  # deployment's filesystem layout is not the model's business.
   if not resolved.is_relative_to(resolved_root):
     raise ValueError(f"Local file path escapes the configured root: {path}")
   if resolved == resolved_root:
@@ -188,8 +193,9 @@ def create_object(
       credentials (Credentials): The credentials to use for the request.
       data (str, optional): The content to write to the object.
       source_file_path (str, optional): The path of a local file to upload,
-        relative to the directory the tools are configured to use. Rejected
-        when no such directory is configured.
+        either absolute or relative to the directory the tools are configured
+        to use. Must name a file inside that directory. Rejected when no such
+        directory is configured.
 
   Returns:
       dict: Dictionary indicating success or error.
@@ -242,9 +248,10 @@ def get_object_data(
       generation (int, optional): If present, selects a specific generation of
         this object.
       destination_file_path (str, optional): The path to save the downloaded
-        file to, relative to the directory the tools are configured to use.
-        Rejected when no such directory is configured. Missing parent
-        directories are created.
+        file to, either absolute or relative to the directory the tools are
+        configured to use. Must name a file inside that directory. Rejected
+        when no such directory is configured. Missing parent directories are
+        created.
 
   Returns:
       dict: Dictionary containing the object data as a string or confirming file
 
@@ -42,7 +42,9 @@ def test_resolve_local_path_without_local_file_root():
 @pytest.mark.parametrize(
     "path, expected_error",
     [
-        pytest.param("/etc/passwd", "must be relative", id="absolute"),
+        pytest.param(
+            "/etc/passwd", "escapes the configured root", id="absolute-outside"
+        ),
         pytest.param(
             "../outside.txt", "escapes the configured root", id="dotdot"
         ),
@@ -68,6 +70,31 @@ def test_resolve_local_path_rejects(tmp_path, path, expected_error):
     )
 
 
+def test_resolve_local_path_accepts_an_absolute_path_inside_the_root(tmp_path):
+  """Test _resolve_local_path accepts an absolute path that lands in the root."""
+  root = tmp_path / "root"
+  root.mkdir()
+
+  resolved = storage_tool._resolve_local_path(
+      str(root / "report.csv"), GCSToolSettings(local_file_root=str(root))
+  )
+
+  assert resolved == str(root.resolve() / "report.csv")
+
+
+def test_resolve_local_path_keeps_the_root_out_of_the_message(tmp_path):
+  """Test the rejection does not disclose the configured root, which the model reads."""
+  root = tmp_path / "root"
+  root.mkdir()
+
+  with pytest.raises(ValueError) as excinfo:
+    storage_tool._resolve_local_path(
+        "/etc/passwd", GCSToolSettings(local_file_root=str(root))
+    )
+
+  assert str(root.resolve()) not in str(excinfo.value)
+
+
 def test_list_objects():
   """Test list_objects function."""
   with mock.patch.object(
@@ -259,8 +286,10 @@ def test_create_object_from_file_without_local_file_root():
     mock_blob.upload_from_filename.assert_not_called()
 
 
-def test_create_object_from_file_rejects_absolute_path(tmp_path):
-  """Test create_object refuses an absolute source_file_path."""
+def test_create_object_from_file_rejects_absolute_path_outside_the_root(
+    tmp_path,
+):
+  """Test create_object refuses a source_file_path outside the configured root."""
   with mock.patch.object(
       client, "get_gcs_client", autospec=True
   ) as mock_get_client:
@@ -271,19 +300,53 @@ def test_create_object_from_file_rejects_absolute_path(tmp_path):
     mock_blob = mock.MagicMock()
     mock_bucket.blob.return_value = mock_blob
 
+    root = tmp_path / "root"
+    root.mkdir()
+
     creds = mock.create_autospec(Credentials, instance=True)
     result = storage_tool.create_object(
         bucket_name="test-bucket",
         object_name="test-object",
         source_file_path=str(tmp_path / "secrets.json"),
         credentials=creds,
-        settings=GCSToolSettings(local_file_root=str(tmp_path)),
+        settings=GCSToolSettings(local_file_root=str(root)),
     )
     assert result["status"] == "ERROR"
-    assert "must be relative" in result["error_details"]
+    assert "escapes the configured root" in result["error_details"]
     mock_blob.upload_from_filename.assert_not_called()
 
 
+def test_create_object_from_file_accepts_absolute_path_inside_the_root(
+    tmp_path,
+):
+  """Test create_object uploads from an absolute path under the configured root."""
+  with mock.patch.object(
+      client, "get_gcs_client", autospec=True
+  ) as mock_get_client:
+    mock_client = mock.MagicMock()
+    mock_get_client.return_value = mock_client
+    mock_bucket = mock.MagicMock()
+    mock_client.get_bucket.return_value = mock_bucket
+    mock_blob = mock.MagicMock()
+    mock_bucket.blob.return_value = mock_blob
+
+    source = tmp_path / "report.csv"
+    source.write_text("a,b\n1,2\n")
+
+    creds = mock.create_autospec(Credentials, instance=True)
+    result = storage_tool.create_object(
+        bucket_name="test-bucket",
+        object_name="test-object",
+        source_file_path=str(source),
+        credentials=creds,
+        settings=GCSToolSettings(local_file_root=str(tmp_path)),
+    )
+    assert result["status"] == "SUCCESS"
+    mock_blob.upload_from_filename.assert_called_once_with(
+        str(source.resolve())
+    )
+
+
 def test_create_object_no_data():
   """Test create_object function when neither data nor source_file_path is provided."""
   with mock.patch.object(