@descix/cli 1.0.20 → 1.0.21

package/bin/descix.js

@@ -14,6 +14,7 @@ import { requireAuth } from '../lib/auth-guard.js';
 import { WorkspaceConfig, unmappedAppMessage, resolveWorkspacePath } from '../lib/workspace-config.js';
 import { CLI_VERSION } from '../lib/cli-version.js';
 import { recordInvocationOrigin } from '../lib/origin.js';
+import { verifyDeployOutcome } from '../lib/deploy-outcome.js';
 // Chat session pointer + the ONE rule for when a dead pointer may be self-healed.
 import {
   getSessionInteractionId,
@@ -2589,6 +2590,28 @@ siteCommand
           branch: gitStatus.branch
         } : null,
         preview: options.preview || false
+      }).catch(async (confirmErr) => {
+        // ws-prune-504: a lost confirm RESPONSE is not a failed DEPLOY. Re-read the served
+        // manifest keyed on THIS upload's token and say which it actually is — never "failed"
+        // when the truth is knowable.
+        console.log(chalk.yellow(`\n  Confirm response lost (${confirmErr.message}) — reading the deploy record back...`));
+        const verdict = await verifyDeployOutcome(apiClient, {
+          communityId, appId, tokenId: token_id, preview: options.preview || false
+        });
+        if (verdict.outcome === 'confirmed') {
+          console.log(chalk.green(`\n  Deploy CONFIRMED — ${verdict.detail}.`));
+          console.log(chalk.gray(`  The server may still be finishing the stale-file prune; ` +
+            `'descix site status -c ${communityId} -a ${appId}' shows the deploy, 'descix site list' what is served.`));
+          process.exit(0);
+        }
+        if (verdict.outcome === 'unconfirmed') {
+          console.error(chalk.red(`\n  Deploy UNCONFIRMED — ${verdict.detail}.`));
+          console.error(chalk.red(`  Nothing was removed from the server. Re-run the upload.`));
+          process.exit(1);
+        }
+        console.error(chalk.red(`\n  Deploy outcome UNKNOWN — ${verdict.detail}.`));
+        console.error(chalk.red(`  Check 'descix site status -c ${communityId} -a ${appId}' before re-running.`));
+        process.exit(1);
       });
 
       const result = confirmResponse.message;
@@ -2602,6 +2625,10 @@ siteCommand
       }
       console.log(chalk.gray(`  Removed from the server: ${pruned.length}`));
       pruned.forEach(f => console.log(chalk.gray(`    - ${f}`)));
+      if (result.prune_status === 'partial') {
+        console.log(chalk.yellow(`  Prune PARTIAL: ${result.prune_remaining_count} stale file(s) not yet removed (soft budget).`));
+        console.log(chalk.yellow(`  ${result.prune_remedy}`));
+      }
       console.log(chalk.gray(`  Deployed: ${result.deployed_at}`));
       if (result.preview) {
         console.log(chalk.yellow(`  Mode: PREVIEW`));

package/lib/deploy-outcome.js

@@ -0,0 +1,45 @@
+/**
+ * verifyDeployOutcome — the honest answer when a confirm_site_deploy response is LOST.
+ *
+ * ws-prune-504 (measured on prod 2026-10-10): a large prune held the confirm past the
+ * gateway's patience; the client saw "Upload failed: HTTP 504" while the deploy had in fact
+ * confirmed and the prune was finishing server-side. A lost RESPONSE is not a failed DEPLOY —
+ * and a tool that says "failed" when it does not know is lying in one direction.
+ *
+ * The read-back is keyed on the deploy TOKEN: get_site_deploy_token minted token_id for THIS
+ * upload, and confirm_site_deploy stamps it into the served manifest's deploy.token_id. If the
+ * served manifest carries our token, OUR deploy confirmed — no weaker signal (git sha, file
+ * count) can be forged by a concurrent deploy into a false positive the token cannot.
+ *
+ * @param {{invoke: (cmd: string, params: object) => Promise<any>}} apiClient
+ * @param {{communityId: string, appId: string, tokenId: string, preview?: boolean}} sent
+ * @returns {Promise<{outcome: 'confirmed'|'unconfirmed'|'unknown', detail: string, deploy?: object}>}
+ */
+export async function verifyDeployOutcome(apiClient, { communityId, appId, tokenId, preview = false }) {
+    if (!tokenId) {
+        return { outcome: 'unknown', detail: 'no token_id in hand — cannot key the read-back' };
+    }
+    let response;
+    try {
+        response = await apiClient.invoke('get_site_manifest', {
+            community_id: communityId,
+            app_id: appId,
+            preview,
+        });
+    } catch (err) {
+        return { outcome: 'unknown', detail: `read-back failed too: ${err.message}` };
+    }
+    const payload = response?.message ?? response;
+    const deploy = payload?.manifest?.deploy;
+    if (!payload?.exists || !deploy) {
+        return { outcome: 'unconfirmed', detail: 'no deploy manifest is served for this app' };
+    }
+    if (deploy.token_id === tokenId) {
+        return { outcome: 'confirmed', detail: `served manifest carries this upload's token (deployed_at ${deploy.deployed_at})`, deploy };
+    }
+    return {
+        outcome: 'unconfirmed',
+        detail: `served manifest is a DIFFERENT deploy (token ${deploy.token_id || 'none'}, deployed_at ${deploy.deployed_at || 'unknown'})`,
+        deploy,
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descix/cli",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "description": "DeSciX CLI and MCP Server - Unified command-line interface for DeSciX platform",
   "repository": {
     "type": "git",