@tokenoftrust/cli 3.7.3 → 3.7.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/cli",
-  "version": "3.7.3",
+  "version": "3.7.4",
   "description": "Token of Trust developer CLI — clone a tenant store, run it locally with save→reload, and submit it for preview. Installs the `tot` command.",
   "license": "Apache-2.0",
   "author": "Token of Trust",

package/src/commands/ship.mjs

@@ -291,6 +291,8 @@ export function normalizeShipResult(data) {
     artifactDigest: typeof o.artifactDigest === "string" ? o.artifactDigest : null,
     receiptId: typeof o.receiptId === "string" ? o.receiptId : null,
     rollbackTarget: o.rollbackTarget && typeof o.rollbackTarget === "object" ? o.rollbackTarget : null,
+    retriable: o.retriable === false ? false : o.retriable === true ? true : null,
+    pointerWritten: o.pointerWritten === true,
   };
 }
 
@@ -699,20 +701,34 @@ function reportShipResult(result, { tenant, liveUrl, noOpen, openUrl }) {
     return 1;
   }
   if (result.state === "promote_failed" || result.state === "record_failed") {
+    // A deterministic refusal (the live flip's compare-and-set, or any outcome that says a retry
+    // cannot change it) must not be offered as safe to retry.
+    const deterministic = result.retriable === false || result.reason === "live_moved";
     console.error(
       fail(
         result.message || `ship ${result.state.replace("_", " ")}`,
-        "re-run `tot ship` — the ship is idempotent and safe to retry",
+        deterministic
+          ? "do not re-run `tot ship` — this refusal is deterministic and will not change"
+          : "re-run `tot ship` — the ship is idempotent and safe to retry",
       ),
     );
     return 1;
   }
   if (result.state === "publishing") {
-    console.log(`\n  ⏳ ${tenant} is publishing — the live pointer moved, CDN delivery is still confirming.`);
+    // Dispatched is not written. Say the pointer moved only once this result says it was.
+    console.log(
+      result.pointerWritten
+        ? `\n  ⏳ ${tenant} is publishing — the live pointer moved, CDN delivery is still confirming.`
+        : `\n  ⏳ ${tenant} is publishing — dispatched; the live pointer is not written yet.`,
+    );
     if (result.pinnedSha) console.log(`  pinned:  ${result.pinnedSha}`);
     if (result.receiptId) console.log(`  receipt: ${result.receiptId}`);
     if (result.message) console.log(`  ${result.message}`);
-    console.log("  re-run `tot ship` in a bit to confirm — it dedupes onto this same dispatch, safe to retry.");
+    console.log(
+      result.pointerWritten
+        ? "  re-run `tot ship` in a bit to confirm — it dedupes onto this same dispatch, safe to retry."
+        : "  re-run `tot ship` in a bit to confirm — it dedupes onto this same dispatch.",
+    );
     return 1;
   }
   console.error(