@wrongstack/tools 0.319.1 → 1.0.0

package/dist/chunk-37QKUQ2Z.js

@@ -0,0 +1,171 @@
+// src/auto-proceed-loop-guard.ts
+function normalizeForRepetition(prompt) {
+  return prompt.replace(/\s+/g, " ").trim().toLowerCase();
+}
+var GROUNDED_NO_PROGRESS_STEER = [
+  "NOTE: The todo board has not changed since the previous automatic continuation \u2014 this exact instruction is being repeated.",
+  "Before anything else, bring the board up to date so the loop stays grounded:",
+  "- mark work that is actually finished as completed,",
+  "- split the current item into smaller concrete sub-items if it needs more than one turn,",
+  "- remove or reword items that no longer apply.",
+  "Then continue the work. If you are blocked, state exactly what is blocking you instead of repeating the same turn."
+].join("\n");
+function createContinuationAttemptTracker() {
+  const attempts = /* @__PURE__ */ new Map();
+  const skipped = /* @__PURE__ */ new Set();
+  return {
+    recordAttempt(todoId) {
+      const count = (attempts.get(todoId) ?? 0) + 1;
+      attempts.set(todoId, count);
+      return count;
+    },
+    getAttempts(todoId) {
+      return attempts.get(todoId) ?? 0;
+    },
+    markSkipped(todoId) {
+      skipped.add(todoId);
+    },
+    isSkipped(todoId) {
+      return skipped.has(todoId);
+    },
+    reset() {
+      attempts.clear();
+      skipped.clear();
+    },
+    snapshot() {
+      const result = {};
+      const allIds = /* @__PURE__ */ new Set([...attempts.keys(), ...skipped]);
+      for (const id of allIds) {
+        result[id] = { attempts: attempts.get(id) ?? 0, skipped: skipped.has(id) };
+      }
+      return result;
+    }
+  };
+}
+var ADVANCE_PREAMBLES = [
+  "Pivoting to the next open item \u2014 previous todo still pending after {attempts} attempt(s).",
+  "Shifting focus to a different task while the previous item ({label}) remains open after {attempts} attempt(s).",
+  "No board progress on the current item after {attempts} attempt(s). Continuing with the next todo.",
+  "The previous item is still unresolved after {attempts} try(ies). Moving on down the list.",
+  "Advancing to the next piece of work after {attempts} unproductive attempt(s) on the prior one.",
+  "Taking a different angle \u2014 the stalled item ({label}) stays open after {attempts} attempt(s). Pressing ahead.",
+  "The todo board shows no movement on the current task after {attempts} attempt(s). Switching gears.",
+  "No change on the board from the last {attempts} continuation(s). Proceeding to the next open item."
+];
+function generateAdvancementPrompt(stalledTodo, nextTodo, attemptCount, todos) {
+  const idx = Math.max(0, Math.min(attemptCount - 1, ADVANCE_PREAMBLES.length - 1));
+  const preamble = ADVANCE_PREAMBLES[idx].replace(
+    /\{attempts\}/g,
+    () => String(attemptCount)
+  ).replace(/\{label\}/g, () => stalledTodo.content.slice(0, 72));
+  if (!nextTodo) {
+    return [
+      preamble,
+      "",
+      "No more open items remain on the todo list. What has been accomplished and what should I do next?"
+    ].join("\n");
+  }
+  const itemLabel = nextTodo.status === "in_progress" && nextTodo.activeForm ? nextTodo.activeForm : nextTodo.content;
+  const done = todos.filter((t) => t.status === "completed").length;
+  const total = todos.length;
+  const lines = [preamble, "", `Proceed with: ${itemLabel}`];
+  if (total > 0) {
+    lines.push("", `Todo board (${done}/${total} done):`);
+    lines.push(
+      ...todos.slice(0, 20).map((t) => {
+        const mark = t.status === "completed" ? "[x]" : t.status === "in_progress" ? "[~]" : "[ ]";
+        const flat = t.content.replace(/\n|\r/g, " ");
+        return `  ${mark} ${flat}`;
+      })
+    );
+  }
+  lines.push(
+    "",
+    "If this item is already done, mark it complete and move to the next open todo. Keep the board honest as you work."
+  );
+  return lines.join("\n");
+}
+function matchTodoIdFromPrompt(todos, prompt) {
+  if (todos.length === 0 || !prompt) return null;
+  const lowerPrompt = prompt.toLowerCase();
+  const inProgress = todos.find((t) => t.status === "in_progress");
+  if (inProgress) {
+    const label = (inProgress.activeForm ?? inProgress.content).toLowerCase();
+    if (label.length > 5 && lowerPrompt.includes(label)) {
+      return { id: inProgress.id, content: inProgress.activeForm ?? inProgress.content };
+    }
+  }
+  for (const t of todos) {
+    if (t.status === "completed") continue;
+    if (inProgress && t.id === inProgress.id) continue;
+    const label = (t.activeForm ?? t.content).toLowerCase();
+    if (label.length > 5 && lowerPrompt.includes(label)) {
+      return { id: t.id, content: t.activeForm ?? t.content };
+    }
+  }
+  const firstOpen = todos.find((t) => t.status !== "completed");
+  return firstOpen ? { id: firstOpen.id, content: firstOpen.activeForm ?? firstOpen.content } : null;
+}
+var MAX_ADVANCEMENT_ATTEMPTS = 9;
+function createAutoProceedLoopGuard(options = {}) {
+  const safeIntegerOption = (value, fallback) => {
+    if (value === void 0) return fallback;
+    if (!Number.isFinite(value)) return fallback;
+    return Math.floor(value);
+  };
+  const repeatThreshold = Math.max(2, safeIntegerOption(options.repeatThreshold, 2));
+  const windowSize = Math.max(repeatThreshold, safeIntegerOption(options.windowSize, 3));
+  let buffer = [];
+  let steeredFor = null;
+  function record(prompt) {
+    const normalized = normalizeForRepetition(prompt);
+    buffer.push(normalized);
+    if (buffer.length > windowSize) {
+      buffer = buffer.slice(buffer.length - windowSize);
+    }
+    let runLength = 0;
+    for (let i = buffer.length - 1; i >= 0; i--) {
+      if (buffer[i] === normalized) runLength++;
+      else break;
+    }
+    return {
+      normalized,
+      runLength,
+      shouldHalt: runLength >= repeatThreshold
+    };
+  }
+  function recordGrounded(prompt) {
+    const signal = record(prompt);
+    if (!signal.shouldHalt) {
+      steeredFor = null;
+      return { ...signal, shouldHalt: false, action: "feed" };
+    }
+    if (steeredFor === signal.normalized) {
+      return { ...signal, action: "halt" };
+    }
+    steeredFor = signal.normalized;
+    return { ...signal, shouldHalt: false, action: "steer" };
+  }
+  function reset() {
+    buffer = [];
+    steeredFor = null;
+  }
+  function history() {
+    return buffer.slice();
+  }
+  function size() {
+    return buffer.length;
+  }
+  return { record, recordGrounded, reset, history, size };
+}
+
+export {
+  normalizeForRepetition,
+  GROUNDED_NO_PROGRESS_STEER,
+  createContinuationAttemptTracker,
+  generateAdvancementPrompt,
+  matchTodoIdFromPrompt,
+  MAX_ADVANCEMENT_ATTEMPTS,
+  createAutoProceedLoopGuard
+};
+//# sourceMappingURL=chunk-37QKUQ2Z.js.map

package/dist/{chunk-LOBRWKCR.js → chunk-3D5DJWOE.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-ATSKPZUK.js";
+} from "./chunk-T3SMFF5Q.js";
 import {
   spawnStream
-} from "./chunk-ZHH3BEWU.js";
+} from "./chunk-DRRY6SCM.js";
 import {
   normalizeCommandOutput,
   safeResolveReal
@@ -181,4 +181,4 @@ async function detectLinter(cwd) {
 export {
   lintTool
 };
-//# sourceMappingURL=chunk-LOBRWKCR.js.map
+//# sourceMappingURL=chunk-3D5DJWOE.js.map

package/dist/{chunk-YOKD4GWJ.js → chunk-4ERMPDHV.js}

@@ -1,13 +1,13 @@
 import {
   capSubject,
   compileUserRegex
-} from "./chunk-Q5JPPCZC.js";
+} from "./chunk-YJTXRH5Y.js";
 import {
   mapWithConcurrency
-} from "./chunk-NWZ6XGBJ.js";
+} from "./chunk-ZBMANLYH.js";
 import {
   loadGitignoreMatcher
-} from "./chunk-DTQ75VBC.js";
+} from "./chunk-2CTZW6JQ.js";
 import {
   isBinaryBuffer,
   safeResolveReal
@@ -99,7 +99,8 @@ var grepTool = {
     }
     const base = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
     const mode = input.output_mode ?? "content";
-    const limit = Math.max(1, Math.min(input.limit ?? 200, 2e3));
+    const rawLimit = typeof input.limit === "number" && Number.isFinite(input.limit) ? input.limit : 200;
+    const limit = Math.max(1, Math.min(Math.floor(rawLimit), 2e3));
     const validation = compileUserRegex(input.pattern, input.case_insensitive ? "i" : "");
     if (!validation.ok) {
       throw new ToolValidationError({
@@ -373,6 +374,7 @@ async function runNative(input, base, mode, limit, signal) {
   const maxBytes = NATIVE_MAX_FILE_BYTES;
   let total = 0;
   let stopped = false;
+  let countTruncated = false;
   const scanFile = async (full, name, rel) => {
     if (stopped || signal.aborted) return;
     if (globRe) {
@@ -448,8 +450,12 @@ async function runNative(input, base, mode, limit, signal) {
           }
         }
         if (fileHits > 0) {
-          if (mode === "count" && matches.length < limit) {
-            matches.push(`${full}:${fileHits}`);
+          if (mode === "count") {
+            if (matches.length < limit) {
+              matches.push(`${full}:${fileHits}`);
+            } else {
+              countTruncated = true;
+            }
           }
           if (mode === "files_with_matches" && matches.length >= limit) stopped = true;
         }
@@ -506,7 +512,7 @@ async function runNative(input, base, mode, limit, signal) {
   return {
     matches,
     count: total,
-    truncated: stopped,
+    truncated: stopped || countTruncated,
     used: "native"
   };
 }
@@ -516,4 +522,4 @@ export {
   __resetRgDetectionForTests,
   __setRgAvailableForTests
 };
-//# sourceMappingURL=chunk-YOKD4GWJ.js.map
+//# sourceMappingURL=chunk-4ERMPDHV.js.map

package/dist/{chunk-5EUJF3WC.js → chunk-4WPBS45A.js}

@@ -1,9 +1,9 @@
 import {
   tryLegacyCodeOperation
-} from "./chunk-ATSKPZUK.js";
+} from "./chunk-T3SMFF5Q.js";
 import {
   spawnStream
-} from "./chunk-ZHH3BEWU.js";
+} from "./chunk-DRRY6SCM.js";
 import {
   detectPackageManager,
   normalizeCommandOutput,
@@ -118,8 +118,7 @@ var typecheckTool = {
       signal,
       maxBytes: 2e5
     });
-    const combined = `${result.stdout}
-${result.stderr}`;
+    const combined = [result.stdout, result.stderr, result.error].filter(Boolean).join("\n");
     let errors = [...combined.matchAll(/^.*\berror TS\d+:/gmi)].length;
     const warnings = [...combined.matchAll(/^.*\bwarning TS\d+:/gmi)].length;
     if (errors === 0 && result.exitCode !== 0) {
@@ -163,4 +162,4 @@ async function findTsConfig(cwd) {
 export {
   typecheckTool
 };
-//# sourceMappingURL=chunk-5EUJF3WC.js.map
+//# sourceMappingURL=chunk-4WPBS45A.js.map

package/dist/{chunk-42BHI7TN.js → chunk-5ITQPCLC.js}

@@ -1,6 +1,6 @@
 import {
   getPersistentProcessRegistry
-} from "./chunk-NKNOBUBU.js";
+} from "./chunk-PVCB7RUZ.js";
 
 // src/ps-slash.ts
 import * as os from "node:os";
@@ -334,4 +334,4 @@ export {
   formatInstanceSummary,
   createGlobalPsSlashCommand
 };
-//# sourceMappingURL=chunk-42BHI7TN.js.map
+//# sourceMappingURL=chunk-5ITQPCLC.js.map

package/dist/{chunk-B4HTSV6Z.js → chunk-5KS24LTS.js}

@@ -1,6 +1,6 @@
 import {
   todoTool
-} from "./chunk-BK732J7I.js";
+} from "./chunk-FBUP524S.js";
 import {
   projectSessionPlanToKanban
 } from "./chunk-X6KXNHUO.js";
@@ -308,17 +308,17 @@ var planTool = {
               );
               return p;
             }
-            let itemIdx = -1;
-            const asNum = Number.parseInt(input.target, 10);
-            if (!Number.isNaN(asNum) && asNum >= 1 && asNum <= p.items.length) {
-              itemIdx = asNum - 1;
-            } else {
-              itemIdx = p.items.findIndex((it) => it.id === input.target);
-              if (itemIdx === -1) {
-                const lower = input.target.toLowerCase();
-                itemIdx = p.items.findIndex((it) => it.title.toLowerCase().includes(lower));
+            let itemIdx = p.items.findIndex((it) => it.id === input.target);
+            if (itemIdx === -1 && /^[1-9]\d*$/.test(input.target)) {
+              const asNum = Number.parseInt(input.target, 10) - 1;
+              if (asNum >= 0 && asNum < p.items.length) {
+                itemIdx = asNum;
               }
             }
+            if (itemIdx === -1) {
+              const lower = input.target.toLowerCase();
+              itemIdx = p.items.findIndex((it) => it.title.toLowerCase().includes(lower));
+            }
             if (itemIdx === -1 || !p.items[itemIdx]) {
               early = mkResult(p, false, `No plan item matched "${input.target}".`);
               return p;
@@ -414,4 +414,4 @@ function mkResult(plan, ok, message, todos) {
 export {
   planTool
 };
-//# sourceMappingURL=chunk-B4HTSV6Z.js.map
+//# sourceMappingURL=chunk-5KS24LTS.js.map

package/dist/{chunk-QPNYDH5B.js → chunk-62OAECEQ.js}

@@ -63,8 +63,21 @@ var searchTool = {
       });
     }
     const signal = opts?.signal ?? ctx?.signal ?? new AbortController().signal;
+    if (input.num_results !== void 0 && (typeof input.num_results !== "number" || !Number.isFinite(input.num_results) || input.num_results <= 0)) {
+      throw new ToolValidationError({
+        message: "search: num_results must be a positive integer",
+        field: "num_results"
+      });
+    }
     const rawNum = typeof input.num_results === "number" && !Number.isNaN(input.num_results) ? input.num_results : DEFAULT_NUM;
     const num = Math.max(1, Math.min(Math.floor(rawNum), MAX_RESULTS));
+    const VALID_SOURCES = /* @__PURE__ */ new Set(["duckduckgo", "google", "bing"]);
+    if (input.source !== void 0 && !VALID_SOURCES.has(input.source)) {
+      throw new ToolValidationError({
+        message: `search: unknown source "${input.source}"`,
+        field: "source"
+      });
+    }
     const source = input.source ?? "duckduckgo";
     const skipCache = input.skip_cache ?? false;
     const normalizedQuery = input.query.trim().toLowerCase().replace(/\s+/g, " ");
@@ -77,21 +90,22 @@ var searchTool = {
           url: r.url,
           snippet: r.snippet
         }));
+        const finalResults2 = results.slice(0, num);
         yield {
           type: "log",
-          text: `Cache hit for "${input.query}" (${source})`,
-          data: { source, query: input.query, cached: true }
+          text: `Cache hit for "${input.query}" (${entry.source})`,
+          data: { source: entry.source, query: input.query, cached: true }
         };
         yield {
           type: "partial_output",
-          text: `${results.length} cached results from ${entry.source}`,
-          data: { count: results.length, cached: true, source: entry.source }
+          text: `${finalResults2.length} cached results from ${entry.source}`,
+          data: { count: finalResults2.length, cached: true, source: entry.source }
         };
         yield {
           type: "final",
           output: {
             query: input.query,
-            results: results.slice(0, num),
+            results: finalResults2,
             source: entry.source,
             truncated: results.length > num,
             cached: true
@@ -181,6 +195,12 @@ function pruneCacheEntries() {
 function __clearSearchCache() {
   cache.clear();
 }
+function __setSearchCacheForTest(key, entry) {
+  cache.set(key, entry);
+}
+function __getSearchCacheSizeForTest() {
+  return cache.size;
+}
 function rankSearchResults(results, query) {
   const seenUrls = /* @__PURE__ */ new Set();
   const deduped = [];
@@ -445,6 +465,8 @@ function decodeHtmlEntities(text) {
 
 export {
   searchTool,
-  __clearSearchCache
+  __clearSearchCache,
+  __setSearchCacheForTest,
+  __getSearchCacheSizeForTest
 };
-//# sourceMappingURL=chunk-QPNYDH5B.js.map
+//# sourceMappingURL=chunk-62OAECEQ.js.map

package/dist/{chunk-IYKXK356.js → chunk-6GOZTS6F.js}

@@ -1,11 +1,11 @@
 import {
   getProcessRegistry,
   redactCommand
-} from "./chunk-3PVYQFRQ.js";
+} from "./chunk-HDYUBRMF.js";
 import {
   buildWin32CmdShimInvocation,
   resolveWin32Command
-} from "./chunk-V43EQ6VR.js";
+} from "./chunk-KE7A76VC.js";
 import {
   COMMAND_OUTPUT_MAX_BYTES,
   detectPackageManager,
@@ -66,7 +66,7 @@ var outdatedTool = {
     const manager = await detectPackageManager(cwd, ctx.projectRoot);
     if (manager === "npm") {
       try {
-        const { detectNonJsEcosystem } = await import("./legacy-bridge-3T7SR4SK.js");
+        const { detectNonJsEcosystem } = await import("./legacy-bridge-YXANP5QB.js");
         const nonJs = await detectNonJsEcosystem(cwd, ctx.projectRoot);
         if (nonJs) {
           const { planLanguageOperation, executePackagePlan } = await import("./languages/index.js");
@@ -282,4 +282,4 @@ Note: exit code 1 from \`outdated\` means outdated packages were found (expected
 export {
   outdatedTool
 };
-//# sourceMappingURL=chunk-IYKXK356.js.map
+//# sourceMappingURL=chunk-6GOZTS6F.js.map

package/dist/{chunk-OG2BEUBY.js → chunk-7HL23T3T.js}

@@ -1,6 +1,6 @@
 import {
   mapWithConcurrency
-} from "./chunk-NWZ6XGBJ.js";
+} from "./chunk-ZBMANLYH.js";
 import {
   safeResolveReal
 } from "./chunk-ZUFHAHTE.js";
@@ -18,7 +18,7 @@ var diffTool = {
   name: "diff",
   category: "Filesystem",
   description: "Show file content with line numbers, staged/working-tree diffs via git, or commit/branch diffs. A safer and more structured alternative to raw `git diff` via shell.",
-  usageHint: 'USE FOR CODE REVIEW AND CHANGE INSPECTION:\n\n- `files` + no `a`/`b` \u2192 show file content with line numbers (NOT a unified diff; no +/- prefixes). Result `mode` is "dump".\n- `a` and/or `b` \u2192 git-style commit/branch diff (unified format, real +/- prefixes).\n- `staged: true` \u2192 only show staged changes.\n- `mode` only affects the git-diff path: "stat" runs `git diff --stat`; "side-by-side" is not supported and falls back to unified (result `mode` reports what was produced).\n- `context` sets the unified-diff context line count on the git path (`-U<n>`); the dump path has no context notion.\n\nNOTE: For a true file-vs-file unified diff, supply `a` and `b` so the tool delegates to `git diff`. The `files`-only path is a line-numbered dump, not a diff.\n\nThis tool has important safety guards against flag injection (see previous security findings).',
+  usageHint: 'USE FOR CODE REVIEW AND CHANGE INSPECTION:\n\n- `files` + no `a`/`b` \u2192 show file content with line numbers (NOT a unified diff; no +/- prefixes). Result `mode` is "dump".\n- `a` and/or `b` \u2192 git-style commit/branch diff (unified format, real +/- prefixes).\n- `staged: true` \u2192 only show staged changes.\n- `mode` only affects the git-diff path: "stat" runs `git diff --stat`; "side-by-side" is unimplemented and falls back to unified (result `mode` reports what was produced).\n- `context` sets the unified-diff context line count on the git path (`-U<n>`); the dump path has no context notion.\n\nNOTE: For a true file-vs-file unified diff, supply `a` and `b` so the tool delegates to `git diff`. The `files`-only path is a line-numbered dump, not a diff.\n\nThis tool has important safety guards against flag injection (see previous security findings).',
   permission: "auto",
   mutating: false,
   maxOutputBytes: 262144,
@@ -63,32 +63,54 @@ var diffTool = {
   async execute(input, ctx, opts) {
     const signal = opts?.signal ?? ctx.signal ?? new AbortController().signal;
     signal.throwIfAborted();
-    if (input.a !== void 0 || input.b !== void 0) {
+    if (input.path !== void 0) {
+      if (typeof input.path !== "string" || !input.path.trim()) {
+        throw new ToolValidationError({
+          message: "diff: 'path' must be a non-empty string when provided",
+          field: "path"
+        });
+      }
+      try {
+        await safeResolveReal(input.path, ctx);
+      } catch (err) {
+        throw new ToolValidationError({
+          message: `diff: ${err.message}`,
+          field: "path"
+        });
+      }
+    }
+    if (input.context !== void 0 && (typeof input.context !== "number" || !Number.isInteger(input.context) || input.context < 0 || input.context > 100)) {
+      throw new ToolValidationError({
+        message: "diff: context must be an integer between 0 and 100",
+        field: "context"
+      });
+    }
+    if (input.staged || input.a !== void 0 || input.b !== void 0) {
       return await gitDiff(input, ctx, signal);
     }
     return await fileDiff(input, ctx, signal);
   }
 };
 async function gitDiff(input, ctx, signal) {
-  if (input.a !== void 0 && (!input.a || !input.a.trim())) {
+  if (input.a !== void 0 && (typeof input.a !== "string" || !input.a.trim())) {
     throw new ToolValidationError({
       message: "diff: ref 'a' cannot be empty or whitespace-only",
       field: "a"
     });
   }
-  if (input.b !== void 0 && (!input.b || !input.b.trim())) {
+  if (input.b !== void 0 && (typeof input.b !== "string" || !input.b.trim())) {
     throw new ToolValidationError({
       message: "diff: ref 'b' cannot be empty or whitespace-only",
       field: "b"
     });
   }
-  if (input.a?.trim().startsWith("-")) {
+  if (typeof input.a === "string" && input.a.trim().startsWith("-")) {
     throw new ToolValidationError({
       message: `diff: unsafe ref "${input.a}" \u2014 refs may not begin with '-' (flag injection)`,
       field: "a"
     });
   }
-  if (input.b?.trim().startsWith("-")) {
+  if (typeof input.b === "string" && input.b.trim().startsWith("-")) {
     throw new ToolValidationError({
       message: `diff: unsafe ref "${input.b}" \u2014 refs may not begin with '-' (flag injection)`,
       field: "b"
@@ -98,7 +120,15 @@ async function gitDiff(input, ctx, signal) {
   const statMode = requestedMode === "stat";
   const effectiveMode = statMode ? "stat" : "unified";
   const sideBySideNote = requestedMode === "side-by-side" ? "side-by-side output is not supported; a unified diff was produced instead." : void 0;
-  const basePath = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
+  let basePath;
+  try {
+    basePath = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
+  } catch (err) {
+    throw new ToolValidationError({
+      message: `diff: ${err.message}`,
+      field: "path"
+    });
+  }
   const gitDir = findGitDir(basePath);
   if (!gitDir) {
     return {
@@ -118,9 +148,18 @@ async function gitDiff(input, ctx, signal) {
   if (input.staged) args.push("--staged");
   if (input.a) args.push(input.a.trim());
   if (input.b) args.push(input.b.trim());
+  let effectiveFiles = [];
   if (input.files) {
-    const files = Array.isArray(input.files) ? input.files : input.files.split(",");
-    args.push("--", ...files.map((f) => f.trim().replace(/\\/g, "/")));
+    const rawFiles = Array.isArray(input.files) ? input.files : typeof input.files === "string" ? input.files.split(",") : [];
+    const files = [
+      ...new Set(
+        rawFiles.filter((f) => typeof f === "string").map((f) => f.trim().replace(/\\/g, "/")).filter(Boolean)
+      )
+    ];
+    if (files.length > 0) {
+      effectiveFiles = files;
+      args.push("--", ...files);
+    }
   }
   const result = await runGit(args, gitDir, signal);
   let diff = result.stdout;
@@ -137,7 +176,7 @@ async function gitDiff(input, ctx, signal) {
   const combinedNote = [sideBySideNote, exitNote].filter(Boolean).join("\n") || void 0;
   return {
     diff,
-    files: [],
+    files: effectiveFiles,
     truncated,
     mode: effectiveMode,
     note: combinedNote
@@ -148,7 +187,7 @@ function findGitDir(cwd) {
   for (let i = 0; i < 20; i++) {
     try {
       const stat2 = statSync(path.join(dir, ".git"));
-      if (stat2.isDirectory()) return dir;
+      if (stat2.isDirectory() || stat2.isFile()) return dir;
     } catch {
     }
     const parent = path.dirname(dir);
@@ -184,7 +223,12 @@ function runGit(args, cwd, signal) {
 async function fileDiff(input, ctx, signal) {
   signal.throwIfAborted();
   void input.context;
-  const files = input.files ? (Array.isArray(input.files) ? input.files : input.files.split(",")).map((f) => f.trim()).filter(Boolean) : [];
+  const rawFiles = Array.isArray(input.files) ? input.files : typeof input.files === "string" ? input.files.split(",") : [];
+  const files = [
+    ...new Set(
+      rawFiles.filter((f) => typeof f === "string").map((f) => f.trim()).filter(Boolean)
+    )
+  ];
   if (files.length === 0) {
     return {
       diff: "No files specified",
@@ -193,11 +237,24 @@ async function fileDiff(input, ctx, signal) {
       mode: "dump"
     };
   }
-  const basePath = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
+  let basePath;
+  try {
+    basePath = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
+  } catch (err) {
+    throw new ToolValidationError({
+      message: `diff: ${err.message}`,
+      field: "path"
+    });
+  }
   const fileEntries = await mapWithConcurrency(files, 16, async (file) => {
     signal.throwIfAborted();
     const fileToResolve = path.isAbsolute(file) ? file : path.resolve(basePath, file);
-    const absPath = await safeResolveReal(fileToResolve, ctx);
+    let absPath;
+    try {
+      absPath = await safeResolveReal(fileToResolve, ctx);
+    } catch {
+      return null;
+    }
     const stat2 = await fs.stat(absPath).catch(() => null);
     if (!stat2?.isFile()) return null;
     if (stat2.size > MAX_FILE_DUMP_BYTES) {
@@ -245,4 +302,4 @@ ${parts.join("\n")}`;
 export {
   diffTool
 };
-//# sourceMappingURL=chunk-OG2BEUBY.js.map
+//# sourceMappingURL=chunk-7HL23T3T.js.map

package/dist/{chunk-HFXSNKCV.js → chunk-7JJFC6CT.js}

@@ -193,4 +193,4 @@ var CircuitBreaker = class {
 export {
   CircuitBreaker
 };
-//# sourceMappingURL=chunk-HFXSNKCV.js.map
+//# sourceMappingURL=chunk-7JJFC6CT.js.map

package/dist/{chunk-TTZOK6IY.js → chunk-7N5U2RAU.js}

@@ -1,6 +1,6 @@
 import {
   spawnStream
-} from "./chunk-ZHH3BEWU.js";
+} from "./chunk-DRRY6SCM.js";
 import {
   normalizeCommandOutput,
   safeResolveReal
@@ -3515,4 +3515,4 @@ export {
   languagePackageTool,
   languageInfoTool
 };
-//# sourceMappingURL=chunk-TTZOK6IY.js.map
+//# sourceMappingURL=chunk-7N5U2RAU.js.map

package/dist/{chunk-QBV725YG.js → chunk-7ODZTPCU.js}

@@ -117,7 +117,7 @@ function formatAllToolsMarkdown(tools) {
   lines.push("| Tool | Description |");
   lines.push("|------|-------------|");
   for (const t of tools) {
-    lines.push(`| \`${t.name}\` | ${t.description} |`);
+    lines.push(`| \`${t.name}\` | ${t.description.replaceAll("|", "\\|")} |`);
   }
   return lines.join("\n");
 }
@@ -125,4 +125,4 @@ function formatAllToolsMarkdown(tools) {
 export {
   toolHelpTool
 };
-//# sourceMappingURL=chunk-QBV725YG.js.map
+//# sourceMappingURL=chunk-7ODZTPCU.js.map