sandbox + cite: guard sort precondition; require rag in cite fallback

haiku_rag_slim/haiku/rag/sandbox/sandbox.py

@@ -62,6 +62,10 @@ def _build_toc(
     flat sibling list (see docling-project/docling#2121 for an upstream case
     where every PDF section_header is emitted at level=1).
     """
+    # Defensive: every consumer is supposed to pass items in position order,
+    # but the end_exclusive lookahead below silently miscomputes section
+    # boundaries if it's not — better to sort once than trust the caller.
+    items = sorted(items, key=lambda i: i.position)
     headers: list[DocumentItem] = [
         i for i in items if i.label == "section_header" and i.heading_level > 0
     ]

haiku_rag_slim/haiku/rag/skills/_tools.py

@@ -324,8 +324,8 @@ def create_skill_tools(
                 if cid.strip("[]") not in resolved_ids
             ]
 
-            rag = ctx.deps.rag if ctx.deps else None
+            if missing:
-            if missing and rag is not None:
+                rag = _require_rag(ctx)
                 synthetic: list[SearchResult] = []
                 doc_cache: dict[str, Any] = {}
                 for cid in missing:

tests/skills/test_rag.py

@@ -346,9 +346,11 @@ class TestCiteTool:
         assert "verbatim" in message
         assert "372c9ddf-not-a-real-id" in message
 
-    async def test_cite_raises_modelretry_when_no_searches_recorded(self, rag_db):
+    async def test_cite_raises_modelretry_when_chunk_id_does_not_exist(
-        """If cite is called before any search has populated state.searches,
+        self, rag_db, rag_client
-        the retry message tells the model to call search first."""
+    ):
+        """With no prior search() and a chunk_id that doesn't exist in the DB,
+        cite raises ModelRetry — the DB-fallback path tried and found nothing."""
         from pydantic_ai import ModelRetry
 
         from haiku.rag.skills.rag import RAGState, create_skill
@@ -356,11 +358,14 @@ class TestCiteTool:
         skill = create_skill(db_path=rag_db)
         cite = _get_tool(skill, "cite")
         state = RAGState()
-        ctx = _make_ctx(state)
+        ctx = _make_ctx(state, rag=rag_client)
+        assert not state.searches
 
         with pytest.raises(ModelRetry) as exc_info:
-            await cite(ctx, chunk_ids=["any-id"])
+            await cite(ctx, chunk_ids=["nonexistent-chunk-id"])
-        assert "search" in str(exc_info.value).lower()
+        message = str(exc_info.value)
+        assert "verbatim" in message
+        assert "nonexistent-chunk-id" in message
 
     async def test_cite_returns_message_when_chunk_ids_empty(self, rag_db):
         """An empty chunk_ids list is a no-op, not a retry trigger."""