@wrongstack/tools 0.319.1 → 0.320.1

package/dist/audit.js

@@ -1,13 +1,13 @@
 import {
   auditTool
-} from "./chunk-64VIJPFV.js";
-import "./chunk-ATSKPZUK.js";
-import "./chunk-TTZOK6IY.js";
-import "./chunk-ZHH3BEWU.js";
-import "./chunk-2VSZC6QM.js";
-import "./chunk-3PVYQFRQ.js";
+} from "./chunk-UZFY3CKD.js";
+import "./chunk-I7FBZOEP.js";
+import "./chunk-NDIT3SBZ.js";
+import "./chunk-OYP27E3I.js";
+import "./chunk-SCMRM6NL.js";
+import "./chunk-ESLPBT5A.js";
 import "./chunk-HFXSNKCV.js";
-import "./chunk-V43EQ6VR.js";
+import "./chunk-KE7A76VC.js";
 import "./chunk-ZUFHAHTE.js";
 export {
   auditTool

package/dist/bash.js

@@ -1,12 +1,12 @@
 import {
   bashTool
-} from "./chunk-AKHYMB4V.js";
+} from "./chunk-5UFVCIUB.js";
 import "./chunk-BTSFTGIL.js";
-import "./chunk-NKNOBUBU.js";
-import "./chunk-2VSZC6QM.js";
-import "./chunk-3PVYQFRQ.js";
+import "./chunk-QGF2C7TF.js";
+import "./chunk-SCMRM6NL.js";
+import "./chunk-ESLPBT5A.js";
 import "./chunk-HFXSNKCV.js";
-import "./chunk-V43EQ6VR.js";
+import "./chunk-KE7A76VC.js";
 import "./chunk-ZUFHAHTE.js";
 export {
   bashTool

package/dist/browser/index.js

@@ -27,7 +27,7 @@ import {
   resolvePinnedBrowserTarget,
   safeBrowserUrl,
   shutdownBrowserTools
-} from "../chunk-45JPRMC2.js";
+} from "../chunk-QWKSKFKZ.js";
 export {
   BrowserArtifactStore,
   BrowserNetworkGuardProxy,

package/dist/builtin.js

@@ -6,46 +6,46 @@ import {
   TIER2_TOOLS,
   TIER3_TOOLS,
   builtinTools
-} from "./chunk-OTINMOKK.js";
+} from "./chunk-4BABEJC2.js";
 import "./chunk-VPALDFYM.js";
-import "./chunk-RTZWBNTY.js";
+import "./chunk-LRDIRJJL.js";
 import "./chunk-XRNN44QY.js";
 import "./chunk-B4HTSV6Z.js";
 import "./chunk-3M7LLN7W.js";
-import "./chunk-RJZQWEMS.js";
+import "./chunk-T77XOX7E.js";
 import "./chunk-FRN7TIAA.js";
 import "./chunk-WXJY3BKV.js";
 import "./chunk-QBV725YG.js";
 import "./chunk-ELRRTWNP.js";
-import "./chunk-UQQS3VNT.js";
-import "./chunk-RLMX75EM.js";
-import "./chunk-64VIJPFV.js";
-import "./chunk-IYKXK356.js";
+import "./chunk-YTKSNTT4.js";
+import "./chunk-WAQASTXB.js";
+import "./chunk-UZFY3CKD.js";
+import "./chunk-DFQDJT22.js";
 import "./chunk-FQNXYA6W.js";
 import "./chunk-IU4DV2PA.js";
 import "./chunk-2OXHS3KZ.js";
 import "./chunk-6AAOT4PW.js";
-import "./chunk-IWS56OY7.js";
+import "./chunk-JLYA4X7K.js";
 import "./chunk-VD2LV5WO.js";
-import "./chunk-OG2BEUBY.js";
-import "./chunk-MNP3GE7H.js";
-import "./chunk-LOBRWKCR.js";
-import "./chunk-EADULOZV.js";
-import "./chunk-5EUJF3WC.js";
-import "./chunk-ATSKPZUK.js";
-import "./chunk-TTZOK6IY.js";
-import "./chunk-ZHH3BEWU.js";
-import "./chunk-X5FOFGXX.js";
-import "./chunk-JDPQOR7C.js";
-import "./chunk-YOKD4GWJ.js";
+import "./chunk-34VLZ35Z.js";
+import "./chunk-W232EFEM.js";
+import "./chunk-KWXIKGE3.js";
+import "./chunk-J74TMK4M.js";
+import "./chunk-QSNVDHOZ.js";
+import "./chunk-I7FBZOEP.js";
+import "./chunk-NDIT3SBZ.js";
+import "./chunk-OYP27E3I.js";
+import "./chunk-HR67OWEP.js";
+import "./chunk-ZMW6WJFT.js";
+import "./chunk-XSSFBS5I.js";
 import "./chunk-Q5JPPCZC.js";
-import "./chunk-NWZ6XGBJ.js";
-import "./chunk-AKHYMB4V.js";
-import "./chunk-BSJSNVGA.js";
+import "./chunk-ZBMANLYH.js";
+import "./chunk-5UFVCIUB.js";
+import "./chunk-OTPTQBYE.js";
 import "./chunk-BTSFTGIL.js";
-import "./chunk-NKNOBUBU.js";
-import "./chunk-2VSZC6QM.js";
-import "./chunk-3PVYQFRQ.js";
+import "./chunk-QGF2C7TF.js";
+import "./chunk-SCMRM6NL.js";
+import "./chunk-ESLPBT5A.js";
 import "./chunk-HFXSNKCV.js";
 import "./chunk-C2DQKVLO.js";
 import "./chunk-QPNYDH5B.js";
@@ -53,21 +53,21 @@ import "./chunk-NBDZMMG2.js";
 import "./chunk-BK732J7I.js";
 import "./chunk-W2CECGTG.js";
 import "./chunk-X6KXNHUO.js";
-import "./chunk-45JPRMC2.js";
-import "./chunk-RNWUCZ2U.js";
-import "./chunk-O44IMQCN.js";
-import "./chunk-CFLJFDYV.js";
-import "./chunk-FQZOHLG3.js";
-import "./chunk-DP6CXMJZ.js";
-import "./chunk-UDVKRX5R.js";
-import "./chunk-KY4PXYSO.js";
-import "./chunk-CMOUCKGC.js";
-import "./chunk-IIF5HIVF.js";
+import "./chunk-QWKSKFKZ.js";
+import "./chunk-NSPNFOJ7.js";
+import "./chunk-3GIKYHLA.js";
+import "./chunk-Z6IHMJMC.js";
+import "./chunk-JSNSMG5R.js";
+import "./chunk-Z5Q3TXRY.js";
+import "./chunk-PV6HIZQD.js";
+import "./chunk-J43O3BOX.js";
+import "./chunk-NU2IZ72J.js";
+import "./chunk-VVZPQPTY.js";
 import "./chunk-6IEBD27U.js";
 import "./chunk-UCYQTZ7F.js";
 import "./chunk-YOHO4DVT.js";
 import "./chunk-DTQ75VBC.js";
-import "./chunk-V43EQ6VR.js";
+import "./chunk-KE7A76VC.js";
 import "./chunk-ZUFHAHTE.js";
 export {
   BUILTIN_TOOL_DESCRIPTIONS,

package/dist/{chunk-GMZYW52L.js → chunk-23EX5WDO.js}

@@ -1,10 +1,10 @@
 import {
   builtinToolsPack
-} from "./chunk-DC4KMPJO.js";
+} from "./chunk-JVRLTEO7.js";
 import {
   TIER1_TOOLS,
   TIER2_TOOLS
-} from "./chunk-OTINMOKK.js";
+} from "./chunk-4BABEJC2.js";
 
 // src/tool-tier.ts
 function toolNameSet(tools) {
@@ -18,6 +18,7 @@ var BUILTIN_TIER_COUNTS = {
   aggressive: TIER1_TOOLS.length
 };
 function selectBuiltinToolsForTier(tier, allTools) {
+  if (!Array.isArray(allTools)) return [];
   switch (tier) {
     case "off":
       return [...allTools];
@@ -35,6 +36,8 @@ function selectBuiltinToolsForTier(tier, allTools) {
       const tier1Names = toolNameSet(TIER1_TOOLS);
       return allTools.filter((tool) => tier1Names.has(tool.name));
     }
+    default:
+      return [...allTools];
   }
 }
 function registerBuiltinToolTier(options) {
@@ -51,4 +54,4 @@ export {
   selectBuiltinToolsForTier,
   registerBuiltinToolTier
 };
-//# sourceMappingURL=chunk-GMZYW52L.js.map
+//# sourceMappingURL=chunk-23EX5WDO.js.map

package/dist/{chunk-OG2BEUBY.js → chunk-34VLZ35Z.js}

@@ -1,6 +1,6 @@
 import {
   mapWithConcurrency
-} from "./chunk-NWZ6XGBJ.js";
+} from "./chunk-ZBMANLYH.js";
 import {
   safeResolveReal
 } from "./chunk-ZUFHAHTE.js";
@@ -70,25 +70,25 @@ var diffTool = {
   }
 };
 async function gitDiff(input, ctx, signal) {
-  if (input.a !== void 0 && (!input.a || !input.a.trim())) {
+  if (input.a !== void 0 && (typeof input.a !== "string" || !input.a.trim())) {
     throw new ToolValidationError({
       message: "diff: ref 'a' cannot be empty or whitespace-only",
       field: "a"
     });
   }
-  if (input.b !== void 0 && (!input.b || !input.b.trim())) {
+  if (input.b !== void 0 && (typeof input.b !== "string" || !input.b.trim())) {
     throw new ToolValidationError({
       message: "diff: ref 'b' cannot be empty or whitespace-only",
       field: "b"
     });
   }
-  if (input.a?.trim().startsWith("-")) {
+  if (typeof input.a === "string" && input.a.trim().startsWith("-")) {
     throw new ToolValidationError({
       message: `diff: unsafe ref "${input.a}" \u2014 refs may not begin with '-' (flag injection)`,
       field: "a"
     });
   }
-  if (input.b?.trim().startsWith("-")) {
+  if (typeof input.b === "string" && input.b.trim().startsWith("-")) {
     throw new ToolValidationError({
       message: `diff: unsafe ref "${input.b}" \u2014 refs may not begin with '-' (flag injection)`,
       field: "b"
@@ -119,8 +119,11 @@ async function gitDiff(input, ctx, signal) {
   if (input.a) args.push(input.a.trim());
   if (input.b) args.push(input.b.trim());
   if (input.files) {
-    const files = Array.isArray(input.files) ? input.files : input.files.split(",");
-    args.push("--", ...files.map((f) => f.trim().replace(/\\/g, "/")));
+    const rawFiles = Array.isArray(input.files) ? input.files : typeof input.files === "string" ? input.files.split(",") : [];
+    const files = rawFiles.filter((f) => typeof f === "string").map((f) => f.trim().replace(/\\/g, "/")).filter(Boolean);
+    if (files.length > 0) {
+      args.push("--", ...files);
+    }
   }
   const result = await runGit(args, gitDir, signal);
   let diff = result.stdout;
@@ -184,7 +187,8 @@ function runGit(args, cwd, signal) {
 async function fileDiff(input, ctx, signal) {
   signal.throwIfAborted();
   void input.context;
-  const files = input.files ? (Array.isArray(input.files) ? input.files : input.files.split(",")).map((f) => f.trim()).filter(Boolean) : [];
+  const rawFiles = Array.isArray(input.files) ? input.files : typeof input.files === "string" ? input.files.split(",") : [];
+  const files = rawFiles.filter((f) => typeof f === "string").map((f) => f.trim()).filter(Boolean);
   if (files.length === 0) {
     return {
       diff: "No files specified",
@@ -245,4 +249,4 @@ ${parts.join("\n")}`;
 export {
   diffTool
 };
-//# sourceMappingURL=chunk-OG2BEUBY.js.map
+//# sourceMappingURL=chunk-34VLZ35Z.js.map

package/dist/{chunk-O44IMQCN.js → chunk-3GIKYHLA.js}

@@ -1,9 +1,9 @@
 import {
   checkSyntax
-} from "./chunk-FQZOHLG3.js";
+} from "./chunk-JSNSMG5R.js";
 import {
   enqueueReindex
-} from "./chunk-DP6CXMJZ.js";
+} from "./chunk-Z5Q3TXRY.js";
 import {
   safeResolveReal,
   sha256hex,
@@ -179,4 +179,4 @@ async function finishWrite(input, ctx, prepared, signal) {
 export {
   writeTool
 };
-//# sourceMappingURL=chunk-O44IMQCN.js.map
+//# sourceMappingURL=chunk-3GIKYHLA.js.map

package/dist/{chunk-OTINMOKK.js → chunk-4BABEJC2.js}

@@ -14,7 +14,7 @@ import {
   codebaseStatsTool,
   codebaseTargetedTestTool,
   deadCodeScanTool
-} from "./chunk-RTZWBNTY.js";
+} from "./chunk-LRDIRJJL.js";
 import {
   planTool
 } from "./chunk-B4HTSV6Z.js";
@@ -23,7 +23,7 @@ import {
 } from "./chunk-3M7LLN7W.js";
 import {
   toolSearchTool
-} from "./chunk-RJZQWEMS.js";
+} from "./chunk-T77XOX7E.js";
 import {
   toolUseTool
 } from "./chunk-FRN7TIAA.js";
@@ -38,16 +38,16 @@ import {
 } from "./chunk-ELRRTWNP.js";
 import {
   testTool
-} from "./chunk-UQQS3VNT.js";
+} from "./chunk-YTKSNTT4.js";
 import {
   installTool
-} from "./chunk-RLMX75EM.js";
+} from "./chunk-WAQASTXB.js";
 import {
   auditTool
-} from "./chunk-64VIJPFV.js";
+} from "./chunk-UZFY3CKD.js";
 import {
   outdatedTool
-} from "./chunk-IYKXK356.js";
+} from "./chunk-DFQDJT22.js";
 import {
   logsTool
 } from "./chunk-FQNXYA6W.js";
@@ -62,60 +62,60 @@ import {
 } from "./chunk-6AAOT4PW.js";
 import {
   patchTool
-} from "./chunk-IWS56OY7.js";
+} from "./chunk-JLYA4X7K.js";
 import {
   jsonTool
 } from "./chunk-VD2LV5WO.js";
 import {
   diffTool
-} from "./chunk-OG2BEUBY.js";
+} from "./chunk-34VLZ35Z.js";
 import {
   treeTool
-} from "./chunk-MNP3GE7H.js";
+} from "./chunk-W232EFEM.js";
 import {
   lintTool
-} from "./chunk-LOBRWKCR.js";
+} from "./chunk-KWXIKGE3.js";
 import {
   formatTool
-} from "./chunk-EADULOZV.js";
+} from "./chunk-J74TMK4M.js";
 import {
   typecheckTool
-} from "./chunk-5EUJF3WC.js";
+} from "./chunk-QSNVDHOZ.js";
 import {
   languageInfoTool,
   languagePackageTool,
   languageTool
-} from "./chunk-TTZOK6IY.js";
+} from "./chunk-NDIT3SBZ.js";
 import {
   replaceTool
-} from "./chunk-X5FOFGXX.js";
+} from "./chunk-HR67OWEP.js";
 import {
   globTool
-} from "./chunk-JDPQOR7C.js";
+} from "./chunk-ZMW6WJFT.js";
 import {
   grepTool
-} from "./chunk-YOKD4GWJ.js";
+} from "./chunk-XSSFBS5I.js";
 import {
   bashTool,
   checkAndBlockKillCommand,
   diagnoseBashism,
   shellArgs
-} from "./chunk-AKHYMB4V.js";
+} from "./chunk-5UFVCIUB.js";
 import {
   detectDanger,
   execTool
-} from "./chunk-BSJSNVGA.js";
+} from "./chunk-OTPTQBYE.js";
 import {
   buildChildEnv
 } from "./chunk-BTSFTGIL.js";
 import {
   createOutputSpool,
   spoolNote
-} from "./chunk-2VSZC6QM.js";
+} from "./chunk-SCMRM6NL.js";
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-ESLPBT5A.js";
 import {
   fetchTool
 } from "./chunk-C2DQKVLO.js";
@@ -130,19 +130,19 @@ import {
 } from "./chunk-W2CECGTG.js";
 import {
   browserTools
-} from "./chunk-45JPRMC2.js";
+} from "./chunk-QWKSKFKZ.js";
 import {
   readTool
-} from "./chunk-RNWUCZ2U.js";
+} from "./chunk-NSPNFOJ7.js";
 import {
   writeTool
-} from "./chunk-O44IMQCN.js";
+} from "./chunk-3GIKYHLA.js";
 import {
   editTool
-} from "./chunk-CFLJFDYV.js";
+} from "./chunk-Z6IHMJMC.js";
 import {
   resolvePowerShell
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   normalizeCommandOutput,
   safeResolveProjectPath,
@@ -1277,4 +1277,4 @@ export {
   TIER3_TOOLS,
   builtinTools
 };
-//# sourceMappingURL=chunk-OTINMOKK.js.map
+//# sourceMappingURL=chunk-4BABEJC2.js.map

package/dist/{chunk-42BHI7TN.js → chunk-4CQWNZ62.js}

@@ -1,6 +1,6 @@
 import {
   getPersistentProcessRegistry
-} from "./chunk-NKNOBUBU.js";
+} from "./chunk-QGF2C7TF.js";
 
 // src/ps-slash.ts
 import * as os from "node:os";
@@ -334,4 +334,4 @@ export {
   formatInstanceSummary,
   createGlobalPsSlashCommand
 };
-//# sourceMappingURL=chunk-42BHI7TN.js.map
+//# sourceMappingURL=chunk-4CQWNZ62.js.map

package/dist/{chunk-AKHYMB4V.js → chunk-5UFVCIUB.js}

@@ -3,18 +3,18 @@ import {
 } from "./chunk-BTSFTGIL.js";
 import {
   getPersistentProcessRegistry
-} from "./chunk-NKNOBUBU.js";
+} from "./chunk-QGF2C7TF.js";
 import {
   createOutputSpool,
   spoolNote
-} from "./chunk-2VSZC6QM.js";
+} from "./chunk-SCMRM6NL.js";
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-ESLPBT5A.js";
 import {
   resolvePowerShell
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   normalizeCommandOutput
 } from "./chunk-ZUFHAHTE.js";
@@ -977,4 +977,4 @@ export {
   checkAndBlockKillCommand,
   bashTool
 };
-//# sourceMappingURL=chunk-AKHYMB4V.js.map
+//# sourceMappingURL=chunk-5UFVCIUB.js.map

package/dist/{chunk-IYKXK356.js → chunk-DFQDJT22.js}

@@ -1,11 +1,11 @@
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-ESLPBT5A.js";
 import {
   buildWin32CmdShimInvocation,
   resolveWin32Command
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   COMMAND_OUTPUT_MAX_BYTES,
   detectPackageManager,
@@ -66,7 +66,7 @@ var outdatedTool = {
     const manager = await detectPackageManager(cwd, ctx.projectRoot);
     if (manager === "npm") {
       try {
-        const { detectNonJsEcosystem } = await import("./legacy-bridge-3T7SR4SK.js");
+        const { detectNonJsEcosystem } = await import("./legacy-bridge-FOV5ODDI.js");
         const nonJs = await detectNonJsEcosystem(cwd, ctx.projectRoot);
         if (nonJs) {
           const { planLanguageOperation, executePackagePlan } = await import("./languages/index.js");
@@ -282,4 +282,4 @@ Note: exit code 1 from \`outdated\` means outdated packages were found (expected
 export {
   outdatedTool
 };
-//# sourceMappingURL=chunk-IYKXK356.js.map
+//# sourceMappingURL=chunk-DFQDJT22.js.map

package/dist/{chunk-3PVYQFRQ.js → chunk-ESLPBT5A.js}

@@ -30,6 +30,7 @@ var SENSITIVE_FLAG_PATTERNS = [
   /--\w*(?:token|key|secret|password|passwd|auth|credential)\w*[=\s,][A-Za-z0-9+/=]{32,}/g
 ];
 function redactCommand(cmd) {
+  if (typeof cmd !== "string") return "";
   let result = cmd;
   for (const pattern of SENSITIVE_FLAG_PATTERNS) {
     result = result.replace(pattern, (match) => {
@@ -469,4 +470,4 @@ export {
   getProcessRegistry,
   _resetProcessRegistry
 };
-//# sourceMappingURL=chunk-3PVYQFRQ.js.map
+//# sourceMappingURL=chunk-ESLPBT5A.js.map

package/dist/{chunk-X5FOFGXX.js → chunk-HR67OWEP.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-Q5JPPCZC.js";
 import {
   mapWithConcurrency
-} from "./chunk-NWZ6XGBJ.js";
+} from "./chunk-ZBMANLYH.js";
 import {
   enqueueReindex
-} from "./chunk-DP6CXMJZ.js";
+} from "./chunk-Z5Q3TXRY.js";
 import {
   isBinaryBuffer,
   safeResolveReal,
@@ -413,4 +413,4 @@ export {
   replaceTool,
   __resetRgDetectionForTests
 };
-//# sourceMappingURL=chunk-X5FOFGXX.js.map
+//# sourceMappingURL=chunk-HR67OWEP.js.map

package/dist/{chunk-ATSKPZUK.js → chunk-I7FBZOEP.js}

@@ -2,7 +2,7 @@ import {
   executeLanguagePlan,
   executePackagePlan,
   planLanguageOperation
-} from "./chunk-TTZOK6IY.js";
+} from "./chunk-NDIT3SBZ.js";
 
 // src/languages/legacy-bridge.ts
 import * as fs from "node:fs/promises";
@@ -98,4 +98,4 @@ export {
   tryLegacyCodeOperation,
   tryLegacyPackageOperation
 };
-//# sourceMappingURL=chunk-ATSKPZUK.js.map
+//# sourceMappingURL=chunk-I7FBZOEP.js.map

package/dist/{chunk-KY4PXYSO.js → chunk-J43O3BOX.js}

@@ -1,6 +1,6 @@
 import {
   parseFilesContent
-} from "./chunk-CMOUCKGC.js";
+} from "./chunk-NU2IZ72J.js";
 import {
   INDEXABLE_EXTENSIONS,
   LANG_FAMILY_ENTRIES,
@@ -3819,7 +3819,7 @@ var ParserWorkerPool = class {
    */
   async reparseInline(batch, orphaned, workerId) {
     try {
-      const { parseFileContent } = await import("./parser-dispatch-QGC4HSP5.js");
+      const { parseFileContent } = await import("./parser-dispatch-BDVCJXTV.js");
       for (const item of orphaned) {
         if (batch.settled) return;
         try {
@@ -4608,4 +4608,4 @@ export {
   incomingCallsService,
   outgoingCallsService
 };
-//# sourceMappingURL=chunk-KY4PXYSO.js.map
+//# sourceMappingURL=chunk-J43O3BOX.js.map

package/dist/{chunk-EADULOZV.js → chunk-J74TMK4M.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-ATSKPZUK.js";
+} from "./chunk-I7FBZOEP.js";
 import {
   spawnStream
-} from "./chunk-ZHH3BEWU.js";
+} from "./chunk-OYP27E3I.js";
 import {
   normalizeCommandOutput,
   safeResolveReal
@@ -200,4 +200,4 @@ async function detectFixer(cwd) {
 export {
   formatTool
 };
-//# sourceMappingURL=chunk-EADULOZV.js.map
+//# sourceMappingURL=chunk-J74TMK4M.js.map

package/dist/{chunk-IWS56OY7.js → chunk-JLYA4X7K.js}

@@ -1,6 +1,6 @@
 import {
   enqueueReindex
-} from "./chunk-DP6CXMJZ.js";
+} from "./chunk-Z5Q3TXRY.js";
 import {
   resolveRealInsideRoot,
   safeResolveReal,
@@ -42,6 +42,21 @@ var patchTool = {
     },
     required: ["patch"]
   },
+  // VULN-001 Phase 2: the permission layer's input-key heuristic cannot see
+  // destinations encoded in the diff body, so the confirm prompt keyed on
+  // `directory` (".") while the patch wrote elsewhere. Declares the stripped
+  // relative destinations; execute()'s realpath containment above remains
+  // the authority on whether they are allowed.
+  writeTargets(input) {
+    if (!input?.patch || typeof input.patch !== "string" || !input.patch.trim()) return [];
+    const strip = typeof input.strip === "number" && Number.isFinite(input.strip) && input.strip >= 0 ? Math.floor(input.strip) : 1;
+    const out = [];
+    for (const target of extractDiffTargets(input.patch)) {
+      const stripped = stripPathComponents(target.raw, strip);
+      if (stripped) out.push(stripped);
+    }
+    return out;
+  },
   async execute(input, ctx, opts) {
     if (!input?.patch || typeof input.patch !== "string" || !input.patch.trim()) {
       throw new ToolValidationError({
@@ -68,6 +83,11 @@ var patchTool = {
     }
     const realRoot = await fs.realpath(ctx.projectRoot).catch(() => path.resolve(ctx.projectRoot));
     const targets = extractDiffTargets(input.patch);
+    if (targets.length === 0) {
+      return refuse(
+        "patch refused: no file target could be parsed from the patch (fail-closed containment \u2014 refusing an unparseable diff)"
+      );
+    }
     const resolvedTargets = [];
     for (const t of targets) {
       const stripped = stripPathComponents(t.raw, strip);
@@ -233,6 +253,31 @@ function extractDiffTargets(patch) {
       if (oldLinesLeft <= 0 && newLinesLeft <= 0) inHunk = false;
       continue;
     }
+    if (line.startsWith("diff --git ")) {
+      const rest = line.slice("diff --git ".length);
+      if (rest.startsWith('"')) {
+        const quoted = /^"((?:[^"\\]|\\.)*)"\s+"((?:[^"\\]|\\.)*)"$/.exec(rest);
+        if (quoted) {
+          for (const half of [quoted[1], quoted[2]]) {
+            const p = clean(half);
+            if (p) out.push({ raw: p, deleted: false });
+          }
+        }
+      } else {
+        const bIdx = rest.lastIndexOf(" b/");
+        if (rest.startsWith("a/") && bIdx !== -1) {
+          out.push({ raw: rest.slice(0, bIdx), deleted: false });
+          out.push({ raw: rest.slice(bIdx + 1), deleted: false });
+        }
+      }
+      continue;
+    }
+    const extended = /^(?:rename|copy) (?:from|to) (.+)$/.exec(line);
+    if (extended) {
+      const p = clean(extended[1]);
+      if (p && p !== "/dev/null") out.push({ raw: p, deleted: false });
+      continue;
+    }
     const oldMatch = /^---\s+([^\t\r\n]+)/.exec(line);
     if (oldMatch) {
       lastOld = clean(oldMatch[1]);
@@ -269,7 +314,6 @@ function runPatch(args, cwd, signal, fallback) {
     if (!result.unavailable) return { ...result, engine: "patch" };
     const gitArgs = [
       "apply",
-      "--unsafe-paths",
       `-p${fallback.strip}`,
       "--verbose",
       ...fallback.dryRun ? ["--check"] : [],
@@ -336,4 +380,4 @@ function extractPatchedFiles(output) {
 export {
   patchTool
 };
-//# sourceMappingURL=chunk-IWS56OY7.js.map
+//# sourceMappingURL=chunk-JLYA4X7K.js.map