fix(bigquery): address second round of Cursor Bugbot findings

- create_table: validate parsed schema is a non-empty array of field objects with a name, not just syntactically valid JSON
- get_query_results: guard timeoutMs with Number.isFinite before appending to the query string, matching maxResults

Author: waleedlatif1

apps/sim/tools/google_bigquery/create_table.ts

@@ -77,7 +77,18 @@ export const googleBigQueryCreateTableTool: ToolConfig<
       try {
         fields = typeof params.schema === 'string' ? JSON.parse(params.schema) : params.schema
       } catch {
-        throw new Error('Schema must be valid JSON, e.g. [{"name":"id","type":"STRING"}]')
+        fields = null
+      }
+      if (
+        !Array.isArray(fields) ||
+        fields.length === 0 ||
+        !fields.every(
+          (f) => f && typeof f === 'object' && typeof (f as { name?: unknown }).name === 'string'
+        )
+      ) {
+        throw new Error(
+          'Schema must be a JSON array of column field definitions, e.g. [{"name":"id","type":"STRING"}]'
+        )
       }
 
       const body: Record<string, unknown> = {

apps/sim/tools/google_bigquery/get_query_results.ts

@@ -83,7 +83,10 @@ export const googleBigQueryGetQueryResultsTool: ToolConfig<
         }
       }
       if (params.timeoutMs !== undefined && params.timeoutMs !== null) {
-        url.searchParams.set('timeoutMs', String(Number(params.timeoutMs)))
+        const timeoutMs = Number(params.timeoutMs)
+        if (Number.isFinite(timeoutMs) && timeoutMs > 0) {
+          url.searchParams.set('timeoutMs', String(timeoutMs))
+        }
       }
       if (params.location) url.searchParams.set('location', params.location)
       if (params.startIndex) url.searchParams.set('startIndex', params.startIndex)