@jini-ai/daemon 0.6.7 → 0.6.8

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.6.8 — 2026-10-16
+
+- An unknown tool on the read-only gateway points to discovery, never a mutation 409 (75d37c32).
+
 ## 0.6.7 — 2026-10-15
 
 - An unknown tool id is a `400 BAD_REQUEST`, not a redacted `500 INTERNAL_ERROR` (b4a3abad): `ToolExecutor` throws `ToolInputError` naming up to eight registered ids the unknown id prefixes (e.g. `content_read` → `content_read.menu`), and the delegated-tools route returns that message.

package/dist/core/read-only-tools.d.ts

@@ -25,8 +25,8 @@ export interface ReadOnlyConstrainedPrincipal extends Principal {
     readonly toolAccess: 'read-only';
 }
 /**
- * Default daemon refusal wording, replaceable by the host. Unknown registrations and writes share
- * one refusal: neither corroborates a safe read, and catalog discovery already reveals existence.
+ * Default daemon refusal wording, replaceable by the host. Unknown registrations and writes both
+ * refuse unsafe dispatch; unknown ids direct discovery because an unrestricted retry cannot run them.
  * Missing verification metadata always refuses, naming the missing wiring so the host can fix it.
  */
 export declare const defaultDaemonMessages: {
@@ -35,6 +35,10 @@ export declare const defaultDaemonMessages: {
         toolRefusalMessage: ({ toolId }: {
             toolId: string;
         }) => string;
+        unknownToolMessage: ({ toolId, candidates }: {
+            toolId: string;
+            candidates: readonly string[];
+        }) => string;
     };
 };
 /** Required host wording; absent metadata is always a refusal. */
@@ -43,6 +47,10 @@ export interface ReadOnlyToolMessages {
     toolRefusalMessage(required: {
         toolId: string;
     }): string;
+    unknownToolMessage(required: {
+        toolId: string;
+        candidates: readonly string[];
+    }): string;
 }
 export interface ReadOnlyToolCheckRequired {
     readonly toolId: string;
@@ -63,7 +71,7 @@ export declare function constrainPrincipalToReadOnlyTools({ principal }: {
 export declare function principalIsReadOnlyConstrained({ principal }: {
     principal: Principal;
 }, _optional?: Record<string, never>): boolean;
-/** @returns Required host wording for an unknown or non-read-only tool. */
+/** @returns Required host wording for a registered non-read-only tool. */
 export declare function readOnlyToolRefusalMessage({ toolId, messages }: {
     toolId: string;
     messages: ReadOnlyToolMessages;

package/dist/core/read-only-tools.js

@@ -1,13 +1,15 @@
 import { isReadOnlyTool } from '@jini-ai/core';
+import { toolCandidates } from './tool-candidates.js';
 /**
- * Default daemon refusal wording, replaceable by the host. Unknown registrations and writes share
- * one refusal: neither corroborates a safe read, and catalog discovery already reveals existence.
+ * Default daemon refusal wording, replaceable by the host. Unknown registrations and writes both
+ * refuse unsafe dispatch; unknown ids direct discovery because an unrestricted retry cannot run them.
  * Missing verification metadata always refuses, naming the missing wiring so the host can fix it.
  */
 export const defaultDaemonMessages = {
     readOnly: {
         unverifiableMessage: 'this host cannot verify read-only tools — POST /api/delegated-tool-calls was mounted without DelegatedToolsHttpDeps.toolRegistry, so a requireReadOnly call cannot be checked and is refused',
         toolRefusalMessage: ({ toolId }) => `tool "${toolId}" is not registered as read-only — this gateway executes only tools whose registration declares readOnly; call it through execute_delegated_tool instead`,
+        unknownToolMessage: ({ toolId, candidates }) => `no tool "${toolId}" is registered; use search_tools${candidates.length > 0 ? ` — did you mean ${candidates.join(', ')}?` : ''}`,
     },
 };
 /** @returns A copied, attenuated principal; its roles are unchanged. */
@@ -20,7 +22,7 @@ export function constrainPrincipalToReadOnlyTools({ principal }, _optional = {})
 export function principalIsReadOnlyConstrained({ principal }, _optional = {}) {
     return 'toolAccess' in principal && principal.toolAccess === 'read-only';
 }
-/** @returns Required host wording for an unknown or non-read-only tool. */
+/** @returns Required host wording for a registered non-read-only tool. */
 export function readOnlyToolRefusalMessage({ toolId, messages }, _optional = {}) {
     return messages.toolRefusalMessage({ toolId });
 }
@@ -34,7 +36,10 @@ export function readOnlyToolRefusalMessage({ toolId, messages }, _optional = {})
 export function checkReadOnlyTool({ toolId, registry, messages }, _optional = {}) {
     if (registry === undefined)
         return messages.unverifiableMessage;
-    const descriptor = registry.list({}).find((candidate) => candidate.id === toolId);
+    const tools = registry.list({});
+    const descriptor = tools.find((candidate) => candidate.id === toolId);
+    if (!descriptor)
+        return messages.unknownToolMessage({ toolId, candidates: toolCandidates({ toolId, tools }) });
     if (isReadOnlyTool({ descriptor }))
         return null;
     return readOnlyToolRefusalMessage({ toolId, messages });

package/dist/core/tool-candidates.d.ts

@@ -0,0 +1,8 @@
+import type { ToolDescriptor } from '@jini-ai/core';
+/** Registered prefix matches for unknown-tool diagnostics, in catalog order, capped at eight.
+ * @complexity O(n) time and space over n registered tools. */
+export declare function toolCandidates({ toolId, tools }: {
+    toolId: string;
+    tools: readonly Pick<ToolDescriptor, 'id'>[];
+}, _optional?: Record<string, never>): string[];
+//# sourceMappingURL=tool-candidates.d.ts.map

package/dist/core/tool-candidates.js

@@ -0,0 +1,6 @@
+/** Registered prefix matches for unknown-tool diagnostics, in catalog order, capped at eight.
+ * @complexity O(n) time and space over n registered tools. */
+export function toolCandidates({ toolId, tools }, _optional = {}) {
+    return tools.map((tool) => tool.id).filter((id) => id.startsWith(toolId)).slice(0, 8);
+}
+//# sourceMappingURL=tool-candidates.js.map

package/dist/tool-executor.js

@@ -48,6 +48,7 @@
 import { randomUUID } from 'node:crypto';
 import { ToolInputError, } from '@jini-ai/core';
 import { authorizeToolInvocation } from '@jini-ai/core/composition';
+import { toolCandidates } from './core/tool-candidates.js';
 /**
  * Enforces `maxOutputBytes` in BYTES, which is what the option is named for.
  *
@@ -182,7 +183,7 @@ export function createToolExecutor(requiredArgs, optionalArgs = {}) {
         // existence, never returns a handler, so this doesn't reopen the leak authorizeToolInvocation
         // closed — that gate still runs, still unconditionally, inside the call below.
         if (!registry.has({ toolId })) {
-            const candidates = registry.list({}).map((tool) => tool.id).filter((id) => id.startsWith(toolId)).slice(0, 8);
+            const candidates = toolCandidates({ toolId, tools: registry.list({}) });
             const hint = candidates.length > 0 ? `; did you mean ${candidates.join(', ')}?` : '';
             throw new ToolInputError({ message: `ToolExecutor: unknown tool "${toolId}"${hint}` });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/daemon",
-  "version": "0.6.7",
+  "version": "0.6.8",
   "description": "The stateful agent daemon runtime: run lifecycle, durable event-log port, the tool-execution boundary, agent executor, terminal sessions, and routines.",
   "license": "Apache-2.0",
   "repository": {
@@ -139,17 +139,17 @@
     "@types/pg": "8.23.1",
     "express": "^4.21.0",
     "@types/express": "^4.17.21",
-    "@jini-ai/agent-runtime": "^0.4.11",
-    "@jini-ai/chat": "0.6.5",
-    "@jini-ai/protocol": "^0.4.4",
-    "@jini-ai/core": "^0.4.6",
-    "@jini-ai/platform": "^0.5.8",
+    "@jini-ai/db": "0.3.5",
     "@jini-ai/http-kit": "0.4.2",
-    "@jini-ai/db": "0.3.4"
+    "@jini-ai/agent-runtime": "^0.4.11",
+    "@jini-ai/chat": "0.6.6",
+    "@jini-ai/platform": "^0.5.9",
+    "@jini-ai/core": "^0.4.7",
+    "@jini-ai/protocol": "^0.4.4"
   },
   "dependencies": {
-    "@jini-ai/protocol": "^0.4.4",
-    "@jini-ai/core": "^0.4.6"
+    "@jini-ai/core": "^0.4.7",
+    "@jini-ai/protocol": "^0.4.4"
   },
   "peerDependencies": {
     "node-pty": "^1.1.0",