@notis_ai/cli 0.2.0-beta.120.1 → 0.2.0-beta.121.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@notis_ai/cli",
-  "version": "0.2.0-beta.120.1",
+  "version": "0.2.0-beta.121.1",
   "description": "Agent-first Notis CLI for apps and generic tool execution",
   "type": "module",
   "bin": {

package/src/command-specs/diagnostics.js

@@ -1,4 +1,4 @@
-import { createHash } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { usageError } from '../runtime/errors.js';
 import {
@@ -178,6 +178,11 @@ async function executeReadOnlySql(ctx, query, phase) {
       tools: [{ tool_slug: toolName, arguments: { query } }],
     },
     mutating: false,
+    // Always a fresh key, never the operator's --idempotency-key: a diagnostic
+    // must observe current state rather than replay a cached response, and two
+    // different queries under one reused key would collide on the request hash.
+    idempotencyKey: randomUUID(),
+    sendIdempotencyKeyWhenReading: true,
   });
   if (result.payload?.successful === false || result.payload?.error) {
     throw usageError(

package/src/command-specs/helpers.js

@@ -56,12 +56,18 @@ export async function runToolCommand({
   mutating = false,
   idempotencyKey,
   fileBindings = [],
+  sendIdempotencyKeyWhenReading = false,
 }) {
+  // The server owns effect classification and requires a key whenever *its*
+  // metadata says write or unknown — a client-side `mutating: false` hint does
+  // not exempt the call. Callers that knowingly dispatch through an
+  // unknown-classified wrapper (e.g. COMPOSIO_MULTI_EXECUTE_TOOL) opt in so the
+  // request carries a key instead of being rejected as idempotency_key_required.
   const result = await callTool({
     runtime: { ...runtime, mutating },
     toolName,
     arguments_,
-    idempotencyKey: mutating ? idempotencyKey : null,
+    idempotencyKey: mutating || sendIdempotencyKeyWhenReading ? idempotencyKey : null,
     fileBindings,
   });
   return result;