deepspace 0.28.1 → 0.28.2

package/dist/worker.js

@@ -2600,7 +2600,12 @@ async function executeTool(ctx, toolName, params, userId, userRole, skipUserRbac
     case "user.current": {
       if (!userId) return { success: false, error: "No userId provided" };
       const user = getUser(ctx.sql, userId, ctx.schemaRegistry);
-      if (!user) return { success: false, error: "User not found" };
+      if (!user) {
+        return {
+          success: false,
+          error: "No users row for this identity yet \u2014 it is created by signing in to the app in a browser. Tool access does not require one, so other tools keep working."
+        };
+      }
       return { success: true, data: { user } };
     }
     // The same roster the socket's `user.list` returns, for the same caller.
@@ -10262,10 +10267,12 @@ function rawJsonResponse(body, status = 200) {
     }
   });
 }
-function errorResponse(status, code) {
+function errorResponse(status, code, detail) {
   const errors = {
     unauthenticated: "Authentication is required.",
-    forbidden: "You are not allowed to use assistant tools.",
+    // The remedy is documented and single-step (local-agent-tools.md): a
+    // signed-in app visit creates or refreshes the caller's user row.
+    forbidden: "You are not allowed to use assistant tools. Sign in to the app once in a browser (a signed-in visit creates your user row), or ask the app owner for access.",
     access_check_unavailable: "Access could not be verified. Try again.",
     tool_not_found: "The requested tool is not available.",
     invalid_json: "The request body must be valid JSON.",
@@ -10276,7 +10283,35 @@ function errorResponse(status, code) {
     invalid_tool_result: "The tool returned an invalid result.",
     tool_result_too_large: "The tool returned a result that is too large."
   };
-  return jsonResponse3({ ok: false, code, error: errors[code] }, status);
+  const error = detail ? `${errors[code]} ${detail}` : errors[code];
+  return jsonResponse3({ ok: false, code, error }, status);
+}
+function validationDetail(error) {
+  const issues = error.issues;
+  if (Array.isArray(issues) && issues.length > 0) {
+    const shown = issues.slice(0, 5).map((issue) => {
+      const { path, message } = issue ?? {};
+      const at = Array.isArray(path) && path.length > 0 ? `${path.join(".")}: ` : "";
+      return `${at}${typeof message === "string" ? message : "invalid"}`;
+    });
+    const more = issues.length - shown.length;
+    return `${shown.join("; ")}${more > 0 ? ` (+${more} more)` : ""}`;
+  }
+  if (!(error instanceof Error) || !error.message) return void 0;
+  const line = error.message.replace(/\s+/g, " ").trim();
+  return line.length > 400 ? `${line.slice(0, 400)}\u2026` : line;
+}
+function droppedTopLevelKeys(schema, input, validated) {
+  if (input === null || typeof input !== "object" || Array.isArray(input) || validated === null || typeof validated !== "object" || Array.isArray(validated)) {
+    return [];
+  }
+  try {
+    const jsonSchema2 = schema.jsonSchema;
+    if (jsonSchema2?.type !== "object" || jsonSchema2.additionalProperties !== false) return [];
+  } catch {
+    return [];
+  }
+  return Object.keys(input).filter((key) => !Object.hasOwn(validated, key));
 }
 function parseToolRequestBody(text) {
   let parsed;
@@ -10382,7 +10417,15 @@ function registerAgentToolRoutes(app, options) {
     } catch {
       return errorResponse(500, "tool_configuration_error");
     }
-    if (!tool3) return errorResponse(404, "tool_not_found");
+    if (!tool3) {
+      const names = Object.keys(tools).filter((name) => typeof tools[name]?.execute === "function").sort();
+      const listed = names.slice(0, 20).join(", ");
+      return errorResponse(
+        404,
+        "tool_not_found",
+        names.length > 0 ? `Available tools: ${listed}${names.length > 20 ? ", \u2026" : ""}.` : void 0
+      );
+    }
     let text;
     try {
       text = await readBoundedBodyText(c.req.raw, AGENT_TOOL_REQUEST_BODY_CAP);
@@ -10393,15 +10436,26 @@ function registerAgentToolRoutes(app, options) {
     if (body === void 0) return errorResponse(400, "invalid_json");
     if (body === null) return errorResponse(400, "invalid_tool_input");
     let input = body.input;
+    const schema = asSchema(tool3.inputSchema);
     try {
-      const validation = asSchema(tool3.inputSchema).validate;
+      const validation = schema.validate;
       if (validation) {
         const result = await validation(input);
-        if (!result.success) return errorResponse(400, "invalid_tool_input");
+        if (!result.success) {
+          return errorResponse(400, "invalid_tool_input", validationDetail(result.error));
+        }
+        const dropped = droppedTopLevelKeys(schema, input, result.value);
+        if (dropped.length > 0) {
+          return errorResponse(
+            400,
+            "invalid_tool_input",
+            `Unknown input field(s): ${dropped.join(", ")} \u2014 the tool's inputSchema lists the accepted fields.`
+          );
+        }
         input = result.value;
       }
-    } catch {
-      return errorResponse(400, "invalid_tool_input");
+    } catch (error) {
+      return errorResponse(400, "invalid_tool_input", validationDetail(error));
     }
     let output;
     try {