@notis_ai/cli 0.2.0-beta.118.1 → 0.2.0-beta.121.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@notis_ai/cli",
-  "version": "0.2.0-beta.118.1",
+  "version": "0.2.0-beta.121.1",
   "description": "Agent-first Notis CLI for apps and generic tool execution",
   "type": "module",
   "bin": {

package/src/command-specs/apps.js

@@ -561,6 +561,14 @@ export async function ensureDevInstall({
   const skills = resolveConfiguredAppSkills(appConfig, projectDir);
   let linkedState = readLinkedState(projectDir);
   let linkedApp = null;
+  if (linkedState?.dev_app_id) {
+    const devApp = await getAccessibleApp(ctx.runtime, linkedState.dev_app_id, runTool);
+    if (!devApp || devApp.manifest?.is_dev !== true) {
+      const { dev_app_id: _devAppId, dev_linked_at: _devLinkedAt, ...rest } = linkedState;
+      linkedState = rest;
+      writeLinkedState(projectDir, linkedState);
+    }
+  }
   if (linkedState?.app_id) {
     linkedApp = await getAccessibleApp(ctx.runtime, linkedState.app_id, runTool);
     if (linkedApp?.manifest?.is_dev === true) {
@@ -631,7 +639,7 @@ async function getAccessibleApp(runtime, appId, runTool = runToolCommand) {
   const result = await runTool({
     runtime,
     toolName: GET_APP_TOOL,
-    arguments_: { app_id: appId },
+    arguments_: { app_id: appId, include_documents: false },
   });
   if (result.payload?.app) {
     return {
@@ -640,7 +648,11 @@ async function getAccessibleApp(runtime, appId, runTool = runToolCommand) {
     };
   }
   const message = typeof result.payload?.message === 'string' ? result.payload.message : '';
-  if (result.payload?.status === 'error' && /PGRST116|0 rows|no rows|not found/i.test(message)) {
+  const errorCode = result.payload?.code || result.payload?.error?.code;
+  if (
+    result.payload?.status === 'error'
+    && (errorCode === 'app_not_found' || /^App not found\.?$/i.test(message.trim()))
+  ) {
     return null;
   }
   throw usageError(`Could not verify access to app ${appId}${message ? `: ${message}` : '.'}`);

package/src/command-specs/diagnostics.js

@@ -1,4 +1,4 @@
-import { createHash } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { usageError } from '../runtime/errors.js';
 import {
@@ -178,6 +178,11 @@ async function executeReadOnlySql(ctx, query, phase) {
       tools: [{ tool_slug: toolName, arguments: { query } }],
     },
     mutating: false,
+    // Always a fresh key, never the operator's --idempotency-key: a diagnostic
+    // must observe current state rather than replay a cached response, and two
+    // different queries under one reused key would collide on the request hash.
+    idempotencyKey: randomUUID(),
+    sendIdempotencyKeyWhenReading: true,
   });
   if (result.payload?.successful === false || result.payload?.error) {
     throw usageError(

package/src/command-specs/helpers.js

@@ -56,12 +56,18 @@ export async function runToolCommand({
   mutating = false,
   idempotencyKey,
   fileBindings = [],
+  sendIdempotencyKeyWhenReading = false,
 }) {
+  // The server owns effect classification and requires a key whenever *its*
+  // metadata says write or unknown — a client-side `mutating: false` hint does
+  // not exempt the call. Callers that knowingly dispatch through an
+  // unknown-classified wrapper (e.g. COMPOSIO_MULTI_EXECUTE_TOOL) opt in so the
+  // request carries a key instead of being rejected as idempotency_key_required.
   const result = await callTool({
     runtime: { ...runtime, mutating },
     toolName,
     arguments_,
-    idempotencyKey: mutating ? idempotencyKey : null,
+    idempotencyKey: mutating || sendIdempotencyKeyWhenReading ? idempotencyKey : null,
     fileBindings,
   });
   return result;