zidane 5.10.2 → 5.10.3

package/dist/{tools-Bk9TqmCV.js → tools-0IqJRRj8.js}

@@ -1,16 +1,16 @@
 import { r as utf8ByteLength } from "./utils-ngQzYzZD.js";
 import { t as buildContextBreakdown } from "./context-breakdown-kO-pDsay.js";
 import { a as formatTaskStatus, i as formatDuration, o as formatTaskSummary, s as previewLine } from "./format-BNOXpl-1.js";
-import { a as createCursorOAuthProvider, c as arcee, f as ANTHROPIC_EXTRA_MODELS, l as anthropic, n as openai, o as generatePkce, p as FAST_MODE_OPTIONS, r as local, s as cerebras, t as openrouter } from "./providers-BxHepM_P.js";
+import { a as createCursorOAuthProvider, c as baseten, d as anthropic, h as FAST_MODE_OPTIONS, m as ANTHROPIC_EXTRA_MODELS, n as openai, o as generatePkce, r as local, s as cerebras, t as openrouter, u as arcee } from "./providers-B6M0Oer3.js";
 import { i as AgentProviderError, l as errorMessage, n as AgentBudgetExceededError, o as AgentToolPairingError, p as toTypedError, t as AgentAbortedError } from "./errors-B-GeaKTX.js";
-import { E as appendStaticSection, a as detectTurnInterruption, c as filterUnresolvedToolUses, k as renderSystemForWire, n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER, o as ensureEndsWithUserMessage, s as ensureToolResultPairing } from "./messages-DdfOKKx_.js";
+import { A as renderSystemForWire, D as appendStaticSection, a as detectTurnInterruption, c as filterUnresolvedToolUses, d as remintDuplicateToolCallIds, n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER, o as ensureEndsWithUserMessage, s as ensureToolResultPairing } from "./messages-_E1RxSxV.js";
 import { a as toolResultToText, i as toolOutputByteLength, n as documentBlockMarker, r as toolOutputBudgetByteLength, t as DEFAULT_AGENT_CLOCK } from "./types-BiobHM1D.js";
 import { t as reconcileImageMediaType } from "./image-sniff-B7uFSNO1.js";
 import { r as createProcessContext, t as resolveDetachedTasksCapability } from "./contexts-GKAWYq07.js";
 import { i as styleReplacementForVia, n as resolveOldString, r as stripLineNumberPrefixes, t as describeVia } from "./edit-utils-EGosADZq.js";
 import { a as invalidateReadStatePath, n as getToolDedupState, o as readStateKey, r as hashContent, s as resolveReadStateMap } from "./read-state-CDVYj7q-.js";
 import { S as escapeXml, d as buildCatalog, n as stripShellInterpolations, p as installAllowedToolsGate, r as resolveSkills, t as interpolateShellCommands, v as validateResourcePathReal, x as createSkillActivationState } from "./interpolate-DwVIJpB3.js";
-import { n as connectMcpServers } from "./mcp-BdN9UjTO.js";
+import { n as connectMcpServers } from "./mcp-BVuDO44W.js";
 import { n as flattenTurns, r as formatTokenUsage, t as effectiveInputFromTurn } from "./stats-DAKBEKjc.js";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { createHooks } from "hookable";
@@ -857,6 +857,113 @@ const arceeDescriptor = {
 		}
 	]
 };
+const basetenDescriptor = {
+	key: "baseten",
+	label: "Baseten",
+	factory: baseten,
+	defaultModel: "zai-org/GLM-5.1",
+	envKey: "BASETEN_API_KEY",
+	apiKeyPlaceholder: "baseten-api-key…",
+	models: [
+		{
+			id: "zai-org/GLM-5.1",
+			name: "GLM 5.1",
+			contextWindow: 202e3,
+			reasoning: true,
+			input: ["text"]
+		},
+		{
+			id: "zai-org/GLM-5",
+			name: "GLM 5",
+			contextWindow: 202e3,
+			reasoning: true,
+			input: ["text"],
+			cost: {
+				input: .95,
+				output: 3.15,
+				cacheRead: .2
+			}
+		},
+		{
+			id: "zai-org/GLM-4.7",
+			name: "GLM 4.7",
+			contextWindow: 2e5,
+			reasoning: true,
+			input: ["text"],
+			cost: {
+				input: .6,
+				output: 2.2,
+				cacheRead: .12
+			}
+		},
+		{
+			id: "moonshotai/Kimi-K2.6",
+			name: "Kimi K2.6",
+			contextWindow: 262e3,
+			reasoning: true,
+			input: ["text", "image"],
+			cost: {
+				input: 1,
+				output: 3.9,
+				cacheRead: .2
+			}
+		},
+		{
+			id: "moonshotai/Kimi-K2.5",
+			name: "Kimi K2.5",
+			contextWindow: 262e3,
+			reasoning: true,
+			input: ["text", "image"],
+			cost: {
+				input: .6,
+				output: 3,
+				cacheRead: .12
+			}
+		},
+		{
+			id: "deepseek-ai/DeepSeek-V4-Pro",
+			name: "DeepSeek V4 Pro",
+			contextWindow: 131e3,
+			reasoning: true,
+			input: ["text"],
+			cost: {
+				input: 1.74,
+				output: 3.48,
+				cacheRead: .145
+			}
+		},
+		{
+			id: "nvidia/Nemotron-120B-A12B",
+			name: "Nemotron Super",
+			contextWindow: 202e3,
+			reasoning: true,
+			input: ["text"],
+			cost: {
+				input: .3,
+				output: .75,
+				cacheRead: .06
+			}
+		},
+		{
+			id: "nvidia/NVIDIA-Nemotron-3-Ultra-550B-A55B",
+			name: "Nemotron Ultra",
+			contextWindow: 202e3,
+			reasoning: true,
+			input: ["text"]
+		},
+		{
+			id: "openai/gpt-oss-120b",
+			name: "GPT-OSS 120B",
+			contextWindow: 128e3,
+			reasoning: true,
+			input: ["text"],
+			cost: {
+				input: .1,
+				output: .5
+			}
+		}
+	]
+};
 /**
 * Conservative context-window assumption for a user-configured local model.
 * Local runtimes expose no reliable per-model metadata over the OpenAI-compat
@@ -958,6 +1065,7 @@ const BUILTIN_PROVIDERS = {
 	openrouter: openrouterDescriptor,
 	cerebras: cerebrasDescriptor,
 	arcee: arceeDescriptor,
+	baseten: basetenDescriptor,
 	local: localDescriptor
 };
 /**
@@ -1641,9 +1749,49 @@ const FALSE_STRINGS = new Set([
 	"No",
 	"NO"
 ]);
+/**
+* Longest path most filesystems accept (Linux PATH_MAX). Anything beyond
+* this would fail at the syscall with ENAMETOOLONG anyway — rejecting here
+* produces an actionable message instead of a raw errno.
+*/
+const MAX_PATH_LENGTH = 4096;
+/** Longest single path segment (Linux/APFS NAME_MAX, in bytes ≈ chars here). */
+const MAX_PATH_SEGMENT_LENGTH = 255;
+/**
+* Sanity-check a model-supplied filesystem path argument.
+*
+* Returns an actionable error string when the value cannot be a real path,
+* `undefined` when it looks plausible. This is NOT path *security*
+* validation (traversal etc. is the execution context's job) — it's a
+* steering backstop for a failure mode observed in production: reasoning
+* models leaking chain-of-thought into path arguments
+* (`src/components/Trust<think>The user wants me to build…`), which
+* otherwise surfaces as a raw `ENAMETOOLONG` the model rarely recovers
+* from.
+*
+* Checks, all objective:
+*  - control characters (newlines, tabs, NUL, …) — never legal in a path
+*    the model should be writing;
+*  - `<think` / `</think` fragments — thinking-tag leakage;
+*  - a segment over 255 chars or total length over 4096 — exceeds
+*    filesystem limits (the ENAMETOOLONG shape).
+*/
+function pathArgError(value, field = "path") {
+	for (let i = 0; i < value.length; i++) {
+		const c = value.charCodeAt(i);
+		if (c < 32 || c === 127) return `invalid \`${field}\`: contains a control character (e.g. a newline) — this usually means reasoning text leaked into the argument. Re-issue the call with a clean file path.`;
+	}
+	if (/<\/?think/i.test(value)) return `invalid \`${field}\`: contains a thinking tag — reasoning text leaked into the argument. Re-issue the call with a clean file path.`;
+	if (value.length > MAX_PATH_LENGTH) return `invalid \`${field}\`: ${value.length} characters exceeds the filesystem limit of ${MAX_PATH_LENGTH} — this usually means non-path text leaked into the argument. Re-issue the call with a clean file path.`;
+	for (const segment of value.split(/[/\\]/)) if (segment.length > MAX_PATH_SEGMENT_LENGTH) return `invalid \`${field}\`: segment "${segment.slice(0, 40)}…" is ${segment.length} characters (filesystem limit: ${MAX_PATH_SEGMENT_LENGTH} per segment) — this usually means non-path text leaked into the argument. Re-issue the call with a clean file path.`;
+}
 function validateToolArgs(input, schema) {
 	const required = schema.required ?? [];
 	const properties = schema.properties ?? {};
+	if (required.length > 0 && Object.keys(input).length === 0) return {
+		valid: false,
+		error: `Missing required field: ${required[0]} (no arguments received — they may have been lost or truncated in streaming; re-issue the call with all required fields: ${required.join(", ")})`
+	};
 	for (const field of required) if (!(field in input) || input[field] === void 0 || input[field] === null) return {
 		valid: false,
 		error: `Missing required field: ${field}`
@@ -2315,6 +2463,13 @@ function applyPairingRepair(ctx, messages, turnId) {
 		...ctx.providerName ? { provider: ctx.providerName } : {},
 		repairs
 	});
+	const rawLimit = ctx.maxPairingRepairsPerTurn;
+	const limit = typeof rawLimit === "number" && Number.isFinite(rawLimit) && rawLimit > 0 ? rawLimit : Number.POSITIVE_INFINITY;
+	if (repairs.length > limit) throw new AgentToolPairingError({
+		message: `Pairing-repair storm: ${repairs.length} repairs in a single turn (limit ${limit}). The transcript is systematically corrupt (likely duplicate tool_use ids from the provider); continuing would loop without forward progress.`,
+		...ctx.providerName ? { provider: ctx.providerName } : {},
+		repairs
+	});
 	for (const repair of repairs) ctx.hooks.callHook("pairing:repair", {
 		...repair,
 		turnId
@@ -2365,6 +2520,7 @@ async function runLoop(ctx) {
 	let turnsCompleted = 0;
 	const pauseCap = ctx.maxConsecutivePauseTurns ?? 5;
 	let consecutiveEmptyPauseTurns = 0;
+	const maxTurnsWarnAt = Number.isFinite(maxTurns) && typeof ctx.maxTurnsWarning === "number" && Number.isFinite(ctx.maxTurnsWarning) && ctx.maxTurnsWarning > 0 && ctx.maxTurnsWarning < maxTurns ? Math.floor(ctx.maxTurnsWarning) : void 0;
 	const ttft = { mark: void 0 };
 	const markTtft = () => {
 		if (ttft.mark === void 0) ttft.mark = Date.now() - ctx.runStartMs;
@@ -2449,6 +2605,18 @@ async function runLoop(ctx) {
 					createdAt: await ctx.clock.now()
 				});
 			}
+			if (!result.ended && maxTurnsWarnAt !== void 0 && maxTurns - (turn + 1) === maxTurnsWarnAt) {
+				const warning = `[Turn limit approaching: ${maxTurnsWarnAt} of ${maxTurns} turns remaining. Stop exploring, finish the most important remaining change, and summarize what you did and what is left.]`;
+				await ctx.hooks.callHook("steer:inject", { message: warning });
+				const warnMsg = ctx.provider.userMessage(warning);
+				ctx.turns.push({
+					id: await ctx.generateTurnId(),
+					runId: ctx.runId,
+					role: warnMsg.role,
+					content: warnMsg.content,
+					createdAt: await ctx.clock.now()
+				});
+			}
 			if (result.ended) {
 				if (ctx.followUpQueue.length > 0) {
 					const followUp = ctx.followUpQueue.shift();
@@ -2907,11 +3075,26 @@ async function executeTurn(ctx, turn, priorUsage) {
 		turnId
 	});
 	if (turnTtftMs === void 0 && result.toolCalls.length > 0) turnTtftMs = Date.now() - streamStartedAt;
-	const canonicalToolCalls = result.toolCalls.map((tc) => ({
+	let canonicalToolCalls = result.toolCalls.map((tc) => ({
 		...tc,
 		name: toCanonicalName(tc.name, ctx.aliasMaps)
 	}));
-	const canonicalContent = rewriteContentToCanonical(result.assistantMessage?.content ?? [], ctx.aliasMaps);
+	let canonicalContent = rewriteContentToCanonical(result.assistantMessage?.content ?? [], ctx.aliasMaps);
+	if (canonicalToolCalls.length > 0 && !ctx.strictToolPairing) {
+		const priorIds = /* @__PURE__ */ new Set();
+		for (const t of ctx.turns) for (const block of t.content) if (block.type === "tool_call") priorIds.add(block.id);
+		const reminted = remintDuplicateToolCallIds(canonicalToolCalls, canonicalContent, priorIds);
+		if (reminted.reminted.length > 0) {
+			canonicalToolCalls = reminted.toolCalls;
+			canonicalContent = reminted.content;
+			for (const r of reminted.reminted) ctx.hooks.callHook("pairing:repair", {
+				mode: "duplicate-tool-use-remint",
+				callId: r.oldId,
+				messageIndex: ctx.turns.length,
+				turnId
+			});
+		}
+	}
 	if (turnTtftMs !== void 0 && result.usage.timeToFirstTokenMs === void 0) result.usage.timeToFirstTokenMs = turnTtftMs;
 	const assistantTurn = {
 		id: turnId,
@@ -4265,6 +4448,7 @@ function formatBlockReason(reason, name, count) {
 */
 function installRepeatGuard(hooks, getConfig, abort) {
 	const streaks = /* @__PURE__ */ new Map();
+	const windows = /* @__PURE__ */ new Map();
 	function streakKey(runId, name) {
 		return `${runId ?? "-"}::${name}`;
 	}
@@ -4272,19 +4456,27 @@ function installRepeatGuard(hooks, getConfig, abort) {
 		const blockThreshold = Math.max(2, Math.floor(typeof config.blockThreshold === "number" && Number.isFinite(config.blockThreshold) ? config.blockThreshold : DEFAULT_BLOCK_THRESHOLD));
 		const rawAbort = typeof config.abortThreshold === "number" && Number.isFinite(config.abortThreshold) ? config.abortThreshold : DEFAULT_ABORT_THRESHOLD;
 		const abortThreshold = rawAbort > 0 ? Math.max(blockThreshold + 1, Math.floor(rawAbort)) : Infinity;
+		let windowSize;
+		if (typeof config.windowSize === "number" && Number.isFinite(config.windowSize) && config.windowSize >= 2) {
+			const reachable = Number.isFinite(abortThreshold) ? abortThreshold : blockThreshold;
+			windowSize = Math.max(Math.floor(config.windowSize), reachable);
+		}
 		return {
 			isTracked: compileMatchers(config.tools),
 			normalize: config.normalize ?? defaultRepeatGuardNormalize,
 			blockThreshold,
-			abortThreshold
+			abortThreshold,
+			countBlockedCalls: config.countBlockedCalls === true,
+			windowSize
 		};
 	}
 	async function gateHandler(ctx) {
-		if (ctx.block || ctx.result !== void 0) return;
+		if (ctx.result !== void 0) return;
 		const config = getConfig();
 		if (!config) return;
-		const { isTracked, normalize, blockThreshold, abortThreshold } = resolve(config);
+		const { isTracked, normalize, blockThreshold, abortThreshold, countBlockedCalls, windowSize } = resolve(config);
 		if (!isTracked(ctx.name)) return;
+		if (ctx.block && !countBlockedCalls) return;
 		let key;
 		try {
 			key = normalize(ctx.name, ctx.input);
@@ -4292,17 +4484,30 @@ function installRepeatGuard(hooks, getConfig, abort) {
 			return;
 		}
 		if (typeof key !== "string" || key.length === 0) return;
+		const blockedByPriorGate = ctx.block;
 		const slot = streakKey(ctx.runId, ctx.name);
-		const prior = streaks.get(slot);
-		const count = prior && prior.key === key ? prior.count + 1 : 1;
-		streaks.set(slot, {
-			key,
-			count
-		});
+		let count;
+		if (windowSize !== void 0) {
+			const recent = windows.get(slot) ?? [];
+			recent.push(key);
+			if (recent.length > windowSize) recent.shift();
+			windows.set(slot, recent);
+			count = 0;
+			for (const k of recent) if (k === key) count++;
+		} else {
+			const prior = streaks.get(slot);
+			count = prior && prior.key === key ? prior.count + 1 : 1;
+			streaks.set(slot, {
+				key,
+				count
+			});
+		}
 		if (count < blockThreshold) return;
 		if (count >= abortThreshold) {
-			ctx.block = true;
-			ctx.reason = formatBlockReason(config.blockReason, ctx.name, count);
+			if (!blockedByPriorGate) {
+				ctx.block = true;
+				ctx.reason = formatBlockReason(config.blockReason, ctx.name, count);
+			}
 			await hooks.callHook("repeat-guard:exceeded", {
 				tool: ctx.name,
 				count,
@@ -4313,6 +4518,7 @@ function installRepeatGuard(hooks, getConfig, abort) {
 			abort();
 			return;
 		}
+		if (blockedByPriorGate) return;
 		ctx.block = true;
 		ctx.reason = formatBlockReason(config.blockReason, ctx.name, count);
 		await hooks.callHook("repeat-guard:exceeded", {
@@ -4327,6 +4533,7 @@ function installRepeatGuard(hooks, getConfig, abort) {
 	return function uninstall() {
 		unregister();
 		streaks.clear();
+		windows.clear();
 	};
 }
 //#endregion
@@ -4383,6 +4590,11 @@ function installToolBudgetsGate(hooks, getToolBudgets, enqueueSteer) {
 			mode = "steer";
 			message = defaultSteerMessage(ctx.name, count, max);
 		}
+		const hardMax = budget.hardMax;
+		if (mode === "steer" && typeof hardMax === "number" && Number.isFinite(hardMax) && hardMax > 0 && count >= hardMax) {
+			mode = "block";
+			message = defaultHardBlockMessage(ctx.name, count, hardMax);
+		} else if (mode === "steer") approvedCounts[ctx.name] = count + 1;
 		if (mode === "block") {
 			ctx.block = true;
 			ctx.reason = message;
@@ -4419,6 +4631,9 @@ function defaultSteerMessage(tool, count, max) {
 function defaultBlockMessage(tool, max) {
 	return `Tool '${tool}' has reached its per-run budget of ${max} calls; further invocations are refused.`;
 }
+function defaultHardBlockMessage(tool, count, hardMax) {
+	return `Tool '${tool}' has been called ${count} times this run, past its hard ceiling of ${hardMax} — the earlier budget warning was not heeded. Further invocations are refused; finish the task with the information you already have.`;
+}
 //#endregion
 //#region src/tools/shell-semantics.ts
 const DEFAULT_SEMANTIC = (exitCode) => ({
@@ -5724,6 +5939,7 @@ function resolveBehavior(agentBehavior, runBehavior) {
 		toolBatchExecutor: runBehavior?.toolBatchExecutor ?? agentBehavior?.toolBatchExecutor,
 		shouldRethrowToolError: runBehavior?.shouldRethrowToolError ?? agentBehavior?.shouldRethrowToolError,
 		maxTurns: runBehavior?.maxTurns ?? agentBehavior?.maxTurns,
+		maxTurnsWarning: runBehavior?.maxTurnsWarning ?? agentBehavior?.maxTurnsWarning,
 		maxCostUsd: runBehavior?.maxCostUsd ?? agentBehavior?.maxCostUsd,
 		retry: runBehavior?.retry ?? agentBehavior?.retry,
 		maxTotalTokens: runBehavior?.maxTotalTokens ?? agentBehavior?.maxTotalTokens,
@@ -5762,6 +5978,7 @@ function resolveBehavior(agentBehavior, runBehavior) {
 			...runBehavior?.extensions
 		} : void 0,
 		strictToolPairing: runBehavior?.strictToolPairing ?? agentBehavior?.strictToolPairing ?? false,
+		maxPairingRepairsPerTurn: runBehavior?.maxPairingRepairsPerTurn ?? agentBehavior?.maxPairingRepairsPerTurn,
 		maxConsecutivePauseTurns: runBehavior?.maxConsecutivePauseTurns ?? agentBehavior?.maxConsecutivePauseTurns,
 		persistTurns: runBehavior?.persistTurns ?? agentBehavior?.persistTurns
 	};
@@ -6172,7 +6389,7 @@ function createAgent({ provider, name: agentName, system: agentSystem, tools: ag
 			const thinking = options.thinking ?? "off";
 			const model = options.model ?? provider.meta.defaultModel;
 			const resolvedBehavior = resolveBehavior(agentBehavior, options.behavior);
-			const { maxConcurrentTools, toolBatchExecutor, shouldRethrowToolError, maxTurns, maxCostUsd, maxTotalTokens, maxTokens, retry, thinkingBudget, modelOptions: behaviorModelOptions, schema, cache, toolOutputBudget, toolOutputBudgetExcludeTools, compactStrategy, compactThreshold, compactKeepTurns, thinkingDecay, dedupTools, toolBudgets, repeatGuard, elideStaleReads, toolDisclosure, mcpToolNameSeparator, toolSearch, surfaceMcpInstructions, persistThreshold, persistExcludeTools, persistDir, persistMaxBytes, strictToolPairing, maxConsecutivePauseTurns, persistTurns } = resolvedBehavior;
+			const { maxConcurrentTools, toolBatchExecutor, shouldRethrowToolError, maxTurns, maxTurnsWarning, maxCostUsd, maxTotalTokens, maxTokens, retry, thinkingBudget, modelOptions: behaviorModelOptions, schema, cache, toolOutputBudget, toolOutputBudgetExcludeTools, compactStrategy, compactThreshold, compactKeepTurns, thinkingDecay, dedupTools, toolBudgets, repeatGuard, elideStaleReads, toolDisclosure, mcpToolNameSeparator, toolSearch, surfaceMcpInstructions, persistThreshold, persistExcludeTools, persistDir, persistMaxBytes, strictToolPairing, maxPairingRepairsPerTurn, maxConsecutivePauseTurns, persistTurns } = resolvedBehavior;
 			const modelOptions = options.modelOptions ?? behaviorModelOptions;
 			let system = options.system || agentSystem || "You are a helpful assistant.";
 			const baseSystemForBreakdown = renderSystemForWire(system);
@@ -6507,6 +6724,7 @@ function createAgent({ provider, name: agentName, system: agentSystem, tools: ag
 					generateTurnId: mintTurnId,
 					clock,
 					maxTurns,
+					...maxTurnsWarning !== void 0 ? { maxTurnsWarning } : {},
 					...maxCostUsd !== void 0 ? { maxCostUsd } : {},
 					...maxTotalTokens !== void 0 ? { maxTotalTokens } : {},
 					...retry !== void 0 ? { retry } : {},
@@ -6531,6 +6749,7 @@ function createAgent({ provider, name: agentName, system: agentSystem, tools: ag
 					...persistDir !== void 0 ? { persistDir } : {},
 					...persistMaxBytes !== void 0 ? { persistMaxBytes } : {},
 					...strictToolPairing ? { strictToolPairing: true } : {},
+					...maxPairingRepairsPerTurn !== void 0 ? { maxPairingRepairsPerTurn } : {},
 					...maxConsecutivePauseTurns !== void 0 ? { maxConsecutivePauseTurns } : {},
 					providerName: provider.name,
 					runStartMs,
@@ -7122,6 +7341,11 @@ const edit = {
 		const find = old_string;
 		const replacement = new_string;
 		const replaceAll = replace_all === true;
+		const pathErr = pathArgError(target);
+		if (pathErr) {
+			ctx.reportOutcome?.("failed");
+			return `Edit error: ${pathErr}`;
+		}
 		if (find === replacement) return `Edit error: old_string and new_string are identical — nothing to change in ${target}.`;
 		if (find.length === 0) return `Edit error: old_string is empty. Use write_file to create or fully overwrite a file.`;
 		let original;
@@ -7640,6 +7864,11 @@ const multiEdit = {
 	async execute({ path, edits }, ctx) {
 		const target = path;
 		const steps = edits;
+		const pathErr = pathArgError(target);
+		if (pathErr) {
+			ctx.reportOutcome?.("failed");
+			return `multi_edit error: ${pathErr}`;
+		}
 		if (!Array.isArray(steps) || steps.length === 0) {
 			ctx.reportOutcome?.("failed");
 			return `multi_edit error: edits must be a non-empty array.`;
@@ -7866,6 +8095,8 @@ const readFile$1 = {
 		}
 	},
 	async execute({ path, offset, limit, maxBytes, lineNumbers }, ctx) {
+		const pathErr = pathArgError(path);
+		if (pathErr) return `Read error: ${pathErr}`;
 		const extMedia = imageMediaTypeFor(path);
 		if (extMedia) {
 			const sizeCap = maxBytes !== void 0 ? normalizeInteger(maxBytes, DEFAULT_ATTACHMENT_BYTE_CAP) : DEFAULT_ATTACHMENT_BYTE_CAP;
@@ -8560,6 +8791,11 @@ const writeFile$1 = {
 	async execute({ path, content }, ctx) {
 		const targetPath = path;
 		const targetContent = content;
+		const pathErr = pathArgError(targetPath);
+		if (pathErr) {
+			ctx.reportOutcome?.("failed");
+			return `Write error: ${pathErr}`;
+		}
 		let existing;
 		try {
 			existing = await ctx.execution.readFile(ctx.handle, targetPath);
@@ -8585,4 +8821,4 @@ const writeFile$1 = {
 //#endregion
 export { maybePersistToolResult as A, enabledModelOptions as B, TOOL_USE_CANCELLED_MESSAGE as C, PERSISTENCE_PREVIEW_BYTES as D, PERSISTED_STUB_PREFIX as E, OUTPUT_RESERVE_TOKENS as F, modelSupportsReasoning as G, getModelInfo as H, anthropicDescriptor as I, openrouterDescriptor as J, modelsForDescriptor as K, cerebrasDescriptor as L, resolvePersistDir as M, resolveTasksDir as N, buildPersistedStub as O, BUILTIN_PROVIDERS as P, credKeyOf as R, SHELL_CASCADE_CANCEL_MESSAGE as S, validateToolArgs as T, localDescriptor as U, getContextWindow as V, modelOptionsFor as W, restoreModelOptions as X, piIdOf as Y, alwaysQuote as _, multiEdit as a, shell as b, grep as c, createAgent as d, WAIT_TASK_TIMED_OUT_PREFIX as f, createSkillsRunScriptTool as g, createSkillsUseTool as h, readFile$1 as i, resolveMcpWarningsDir as j, cleanupPersistedSession as k, glob$1 as l, createToolSearchTool as m, createSpawnTool as n, listFiles as o, waitTask as p, openaiDescriptor as q, shellKill as r, createInteractionTool as s, writeFile$1 as t, edit as u, createSkillsReadTool as v, TOOL_USE_SKIPPED_MESSAGE as w, INTERRUPT_MESSAGE_FOR_TOOL_USE as x, createShellTool as y, effectiveContextWindow as z };
 
-//# sourceMappingURL=tools-Bk9TqmCV.js.map
+//# sourceMappingURL=tools-0IqJRRj8.js.map