Function cleanSchemaParseMessage

src/daemon/server/http-server.ts:381–387

(message: string)

// (e.g. `$.positionals: Expected an array`). Strip the `$` sigil so the wire message
// stays user-facing without leaking the schema's internal path representation.
function cleanSchemaParseMessage(message: string): string {
  const separator = message.indexOf(': ');
  if (separator === -1 || !message.startsWith('$')) return message;
  const field = message.slice(0, separator).replace(/^\$\.?/, '');
  const detail = message.slice(separator + 2);
  return field ? `${field}: ${detail}` : detail;
}

// Validate the command params at the boundary so malformed client input is rejected as
// INVALID_ARGS (-> JSON-RPC -32602 / HTTP 400) instead of leaking as an internal 500.