@tachyon-gg/railway-deploy 0.2.4 → 0.2.6

package/README.md

@@ -60,7 +60,7 @@ environment: production      # Railway environment name
 
 shared_variables:            # Variables shared across all services
   APP_ENV: production
-  DATABASE_URL: ${{Postgres.DATABASE_URL}}
+  API_PORT: "8080"
 
 services:                    # Map of service name -> config
   web: { ... }
@@ -212,6 +212,8 @@ variables:
 | `%{service_name}` | At config load time | Built-in: the service's config key |
 | `null` | N/A | Marks a variable for deletion |
 
+**Important:** Shared variables (`shared_variables`) cannot contain `${{service.VAR}}` references — Railway resolves shared variables without a service context, so cross-service references will resolve to empty strings. Use `${{service.VAR}}` references directly in service variables instead, and use shared variables only for plain values or `${{shared.OTHER_VAR}}` self-references.
+
 `%{param}` is expanded first, so it can be used inside `${{}}` Railway references. This is useful for templates that need to reference their own or other services' variables:
 
 ```yaml

package/dist/index.js

@@ -38449,8 +38449,8 @@ var EgressGatewayAssociationCreateDocument = { kind: "Document", definitions: [{
 var EgressGatewayAssociationsClearDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "mutation", name: { kind: "Name", value: "EgressGatewayAssociationsClear" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "input" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "EgressGatewayServiceTargetInput" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "egressGatewayAssociationsClear" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "input" }, value: { kind: "Variable", name: { kind: "Name", value: "input" } } }] }] } }] };
 var ListProjectsDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "ListProjects" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "projects" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "name" } }] } }] } }] } }] } }] };
 var GetProjectDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetProject" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "id" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "project" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "id" }, value: { kind: "Variable", name: { kind: "Name", value: "id" } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "name" } }, { kind: "Field", name: { kind: "Name", value: "environments" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "name" } }, { kind: "Field", name: { kind: "Name", value: "deploymentTriggers" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "branch" } }, { kind: "Field", name: { kind: "Name", value: "checkSuites" } }, { kind: "Field", name: { kind: "Name", value: "serviceId" } }, { kind: "Field", name: { kind: "Name", value: "repository" } }] } }] } }] } }] } }] } }] } }, { kind: "Field", name: { kind: "Name", value: "services" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "name" } }, { kind: "Field", name: { kind: "Name", value: "serviceInstances" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "environmentId" } }, { kind: "Field", name: { kind: "Name", value: "source" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "image" } }, { kind: "Field", name: { kind: "Name", value: "repo" } }] } }, { kind: "Field", name: { kind: "Name", value: "domains" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "customDomains" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "domain" } }, { kind: "Field", name: { kind: "Name", value: "targetPort" } }] } }, { kind: "Field", name: { kind: "Name", value: "serviceDomains" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "domain" } }, { kind: "Field", name: { kind: "Name", value: "targetPort" } }] } }] } }, { kind: "Field", name: { kind: "Name", value: "region" } }, { kind: "Field", name: { kind: "Name", value: "numReplicas" } }, { kind: "Field", name: { kind: "Name", value: "restartPolicyType" } }, { kind: "Field", name: { kind: "Name", value: "restartPolicyMaxRetries" } }, { kind: "Field", name: { kind: "Name", value: "healthcheckPath" } }, { kind: "Field", name: { kind: "Name", value: "healthcheckTimeout" } }, { kind: "Field", name: { kind: "Name", value: "cronSchedule" } }, { kind: "Field", name: { kind: "Name", value: "startCommand" } }, { kind: "Field", name: { kind: "Name", value: "buildCommand" } }, { kind: "Field", name: { kind: "Name", value: "rootDirectory" } }, { kind: "Field", name: { kind: "Name", value: "dockerfilePath" } }, { kind: "Field", name: { kind: "Name", value: "preDeployCommand" } }, { kind: "Field", name: { kind: "Name", value: "sleepApplication" } }, { kind: "Field", name: { kind: "Name", value: "builder" } }, { kind: "Field", name: { kind: "Name", value: "watchPatterns" } }, { kind: "Field", name: { kind: "Name", value: "drainingSeconds" } }, { kind: "Field", name: { kind: "Name", value: "overlapSeconds" } }, { kind: "Field", name: { kind: "Name", value: "ipv6EgressEnabled" } }, { kind: "Field", name: { kind: "Name", value: "railwayConfigFile" } }] } }] } }] } }] } }] } }] } }, { kind: "Field", name: { kind: "Name", value: "buckets" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "name" } }] } }] } }] } }, { kind: "Field", name: { kind: "Name", value: "volumes" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "name" } }, { kind: "Field", name: { kind: "Name", value: "volumeInstances" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "edges" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "node" }, selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "mountPath" } }, { kind: "Field", name: { kind: "Name", value: "environmentId" } }, { kind: "Field", name: { kind: "Name", value: "serviceId" } }] } }] } }] } }] } }] } }] } }] } }] } }] };
-var GetVariablesDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetVariables" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "projectId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "serviceId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "variables" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "projectId" }, value: { kind: "Variable", name: { kind: "Name", value: "projectId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }, { kind: "Argument", name: { kind: "Name", value: "serviceId" }, value: { kind: "Variable", name: { kind: "Name", value: "serviceId" } } }] }] } }] };
-var GetSharedVariablesDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetSharedVariables" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "projectId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "variables" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "projectId" }, value: { kind: "Variable", name: { kind: "Name", value: "projectId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }] }] } }] };
+var GetVariablesDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetVariables" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "projectId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "serviceId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "variables" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "projectId" }, value: { kind: "Variable", name: { kind: "Name", value: "projectId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }, { kind: "Argument", name: { kind: "Name", value: "serviceId" }, value: { kind: "Variable", name: { kind: "Name", value: "serviceId" } } }, { kind: "Argument", name: { kind: "Name", value: "unrendered" }, value: { kind: "BooleanValue", value: true } }] }] } }] };
+var GetSharedVariablesDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetSharedVariables" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "projectId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "variables" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "projectId" }, value: { kind: "Variable", name: { kind: "Name", value: "projectId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }, { kind: "Argument", name: { kind: "Name", value: "unrendered" }, value: { kind: "BooleanValue", value: true } }] }] } }] };
 var GetTcpProxiesDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetTcpProxies" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "serviceId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "tcpProxies" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "serviceId" }, value: { kind: "Variable", name: { kind: "Name", value: "serviceId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "id" } }, { kind: "Field", name: { kind: "Name", value: "applicationPort" } }, { kind: "Field", name: { kind: "Name", value: "proxyPort" } }, { kind: "Field", name: { kind: "Name", value: "domain" } }] } }] } }] };
 var GetServiceInstanceLimitsDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetServiceInstanceLimits" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "serviceId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "serviceInstanceLimits" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "serviceId" }, value: { kind: "Variable", name: { kind: "Name", value: "serviceId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }] }] } }] };
 var GetEgressGatewaysDocument = { kind: "Document", definitions: [{ kind: "OperationDefinition", operation: "query", name: { kind: "Name", value: "GetEgressGateways" }, variableDefinitions: [{ kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "serviceId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }, { kind: "VariableDefinition", variable: { kind: "Variable", name: { kind: "Name", value: "environmentId" } }, type: { kind: "NonNullType", type: { kind: "NamedType", name: { kind: "Name", value: "String" } } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "egressGateways" }, arguments: [{ kind: "Argument", name: { kind: "Name", value: "serviceId" }, value: { kind: "Variable", name: { kind: "Name", value: "serviceId" } } }, { kind: "Argument", name: { kind: "Name", value: "environmentId" }, value: { kind: "Variable", name: { kind: "Name", value: "environmentId" } } }], selectionSet: { kind: "SelectionSet", selections: [{ kind: "Field", name: { kind: "Name", value: "ipv4" } }, { kind: "Field", name: { kind: "Name", value: "region" } }] } }] } }] };
@@ -38893,7 +38893,19 @@ function yellow(text, noColor) {
 function dim(text, noColor) {
   return noColor ? text : `\x1B[2m${text}\x1B[0m`;
 }
-var SENSITIVE_PATTERNS = ["PASSWORD", "SECRET", "TOKEN", "KEY", "PRIVATE", "CREDENTIAL"];
+var SENSITIVE_PATTERNS = [
+  "PASSWORD",
+  "PASSPHRASE",
+  "SECRET",
+  "TOKEN",
+  "KEY",
+  "PRIVATE",
+  "CREDENTIAL",
+  "JWT",
+  "CERT",
+  "SIGNING",
+  "ENCRYPTION"
+];
 function isSensitive(key) {
   const upper = key.toUpperCase();
   return SENSITIVE_PATTERNS.some((p) => upper.includes(p));
@@ -38913,22 +38925,25 @@ function describeChange(change) {
       if (change.cronSchedule)
         details.push(`cron: ${change.cronSchedule}`);
       return {
-        category: "Services",
+        category: "Service",
         action: "create",
-        summary: `${change.name} (${details.join(", ")})`
+        serviceName: change.name,
+        summary: `create (${details.join(", ")})`
       };
     }
     case "delete-service":
       return {
-        category: "Services",
+        category: "Service",
         action: "delete",
-        summary: `${change.name} (${change.serviceId})`
+        serviceName: change.name,
+        summary: `delete (${change.serviceId})`
       };
     case "update-service-settings":
       return {
-        category: "Service settings",
+        category: "Settings",
         action: "update",
-        summary: `${change.serviceName}: ${Object.keys(change.settings).join(", ")}`
+        serviceName: change.serviceName,
+        summary: `settings: ${Object.keys(change.settings).join(", ")}`
       };
     case "update-deployment-trigger": {
       const parts = [];
@@ -38937,82 +38952,99 @@ function describeChange(change) {
       if (change.checkSuites !== undefined)
         parts.push(`checkSuites → ${change.checkSuites}`);
       return {
-        category: "Deployment triggers",
+        category: "Trigger",
         action: "update",
-        summary: `${change.serviceName}: ${parts.join(", ")}`
+        serviceName: change.serviceName,
+        summary: `trigger: ${parts.join(", ")}`
       };
     }
     case "upsert-variables":
       return {
-        category: "Service variables",
+        category: "Variables",
         action: "update",
-        summary: `${change.serviceName}: set ${Object.keys(change.variables).length} var(s) — ${Object.keys(change.variables).join(", ")}`
+        serviceName: change.serviceName,
+        summary: `set ${Object.keys(change.variables).length} var(s) — ${Object.keys(change.variables).join(", ")}`
       };
     case "delete-variables":
       return {
-        category: "Service variables",
+        category: "Variables",
         action: "delete",
-        summary: `${change.serviceName}: delete ${change.variableNames.length} var(s) — ${change.variableNames.join(", ")}`
+        serviceName: change.serviceName,
+        summary: `delete ${change.variableNames.length} var(s) — ${change.variableNames.join(", ")}`
       };
     case "upsert-shared-variables":
       return {
         category: "Shared variables",
         action: "update",
+        serviceName: null,
         summary: `set ${Object.keys(change.variables).length} var(s) — ${Object.keys(change.variables).join(", ")}`
       };
     case "delete-shared-variables":
       return {
         category: "Shared variables",
         action: "delete",
+        serviceName: null,
         summary: `delete ${change.variableNames.length} var(s) — ${change.variableNames.join(", ")}`
       };
     case "create-domain": {
       const port = change.targetPort ? ` (port ${change.targetPort})` : "";
       return {
-        category: "Domains",
+        category: "Domain",
         action: "create",
-        summary: `${change.serviceName}: ${change.domain}${port}`
+        serviceName: change.serviceName,
+        summary: `domain: ${change.domain}${port}`
       };
     }
     case "delete-domain":
       return {
-        category: "Domains",
+        category: "Domain",
         action: "delete",
-        summary: `${change.serviceName}: ${change.domain}`
+        serviceName: change.serviceName,
+        summary: `domain: ${change.domain}`
       };
     case "create-service-domain": {
       const port = change.targetPort ? ` (port ${change.targetPort})` : "";
       return {
-        category: "Railway domains",
+        category: "Railway domain",
         action: "create",
-        summary: `${change.serviceName}${port}`
+        serviceName: change.serviceName,
+        summary: `railway domain${port}`
       };
     }
     case "delete-service-domain":
-      return { category: "Railway domains", action: "delete", summary: change.serviceName };
+      return {
+        category: "Railway domain",
+        action: "delete",
+        serviceName: change.serviceName,
+        summary: "railway domain"
+      };
     case "create-volume":
       return {
-        category: "Volumes",
+        category: "Volume",
         action: "create",
-        summary: `${change.serviceName}: ${change.mount}`
+        serviceName: change.serviceName,
+        summary: `volume: ${change.mount}`
       };
     case "delete-volume":
       return {
-        category: "Volumes",
+        category: "Volume",
         action: "delete",
-        summary: `${change.serviceName} (${change.volumeId})`
+        serviceName: change.serviceName,
+        summary: `volume (${change.volumeId})`
       };
     case "create-tcp-proxy":
       return {
-        category: "TCP proxies",
+        category: "TCP proxy",
         action: "create",
-        summary: `${change.serviceName}: port ${change.applicationPort}`
+        serviceName: change.serviceName,
+        summary: `tcp proxy: port ${change.applicationPort}`
       };
     case "delete-tcp-proxy":
       return {
-        category: "TCP proxies",
+        category: "TCP proxy",
         action: "delete",
-        summary: `${change.serviceName}: proxy ${change.proxyId}`
+        serviceName: change.serviceName,
+        summary: `tcp proxy: ${change.proxyId}`
       };
     case "update-service-limits": {
       const parts = [];
@@ -39021,36 +39053,50 @@ function describeChange(change) {
       if (change.limits.vCPUs !== undefined)
         parts.push(`vCPUs: ${change.limits.vCPUs ?? "unset"}`);
       return {
-        category: "Resource limits",
+        category: "Limits",
         action: "update",
-        summary: `${change.serviceName}: ${parts.join(", ")}`
+        serviceName: change.serviceName,
+        summary: `limits: ${parts.join(", ")}`
       };
     }
     case "enable-static-ips":
       return {
-        category: "Static outbound IPs",
+        category: "Static IPs",
         action: "create",
-        summary: `${change.serviceName}: enable`
+        serviceName: change.serviceName,
+        summary: "static outbound IPs: enable"
       };
     case "disable-static-ips":
       return {
-        category: "Static outbound IPs",
+        category: "Static IPs",
         action: "delete",
-        summary: `${change.serviceName}: disable`
+        serviceName: change.serviceName,
+        summary: "static outbound IPs: disable"
       };
     case "create-bucket":
-      return { category: "Buckets", action: "create", summary: change.bucketName };
+      return {
+        category: "Buckets",
+        action: "create",
+        serviceName: null,
+        summary: change.bucketName
+      };
     case "delete-bucket":
-      return { category: "Buckets", action: "delete", summary: change.name };
+      return { category: "Buckets", action: "delete", serviceName: null, summary: change.name };
     default: {
       const _exhaustive = change;
-      return { category: "Unknown", action: "update", summary: _exhaustive.type };
+      return {
+        category: "Unknown",
+        action: "update",
+        serviceName: null,
+        summary: _exhaustive.type
+      };
     }
   }
 }
 function changeLabel(change) {
   const desc = describeChange(change);
-  return `${change.type}: ${desc.summary}`;
+  const prefix = desc.serviceName ? `${desc.serviceName}: ` : "";
+  return `${prefix}${desc.summary}`;
 }
 var ACTION_ICON = {
   create: (nc) => green("+", nc),
@@ -39069,44 +39115,60 @@ ${green("No changes needed", noColor)} — Railway matches desired state.
   console.log(`
 Changeset (${changeset.changes.length} changes):
 `);
-  const groups = new Map;
-  for (const change of changeset.changes) {
-    const desc = describeChange(change);
-    let group = groups.get(desc.category);
+  const described = changeset.changes.map((change) => ({ change, desc: describeChange(change) }));
+  const serviceGroups = new Map;
+  for (const entry of described) {
+    const key = entry.desc.serviceName;
+    let group = serviceGroups.get(key);
     if (!group) {
       group = [];
-      groups.set(desc.category, group);
+      serviceGroups.set(key, group);
     }
-    group.push({ change, desc });
+    group.push(entry);
   }
-  for (const [category, entries] of groups) {
-    const actions = new Set(entries.map((e) => e.desc.action));
-    const headerAction = actions.size === 1 ? [...actions][0] : "update";
+  const projectChanges = serviceGroups.get(null);
+  if (projectChanges) {
+    for (const { change, desc } of projectChanges) {
+      const icon = ACTION_ICON[desc.action](noColor);
+      if (verbose && change.type === "upsert-shared-variables") {
+        console.log(`  ${yellow("~", noColor)} Shared variables:`);
+        for (const [key, value] of Object.entries(change.variables)) {
+          const oldVal = options?.currentState?.sharedVariables[key];
+          const oldStr = oldVal !== undefined ? maskValue(key, oldVal) : "(unset)";
+          console.log(`    ${icon} ${key}: ${dim(`"${oldStr}"`, noColor)} → ${dim(`"${maskValue(key, value)}"`, noColor)}`);
+        }
+      } else {
+        console.log(`  ${icon} ${desc.category}: ${desc.summary}`);
+      }
+    }
+    console.log();
+    serviceGroups.delete(null);
+  }
+  for (const [serviceName, entries] of serviceGroups) {
+    const hasCreate = entries.some((e) => e.desc.action === "create" && e.desc.category === "Service");
+    const hasDelete = entries.some((e) => e.desc.action === "delete" && e.desc.category === "Service");
+    const headerAction = hasCreate ? "create" : hasDelete ? "delete" : "update";
     const headerIcon = ACTION_ICON[headerAction](noColor);
-    console.log(`  ${headerIcon} ${category.toUpperCase()}:`);
+    console.log(`  ${headerIcon} ${serviceName}:`);
     for (const { change, desc } of entries) {
       const icon = ACTION_ICON[desc.action](noColor);
       if (verbose && change.type === "update-service-settings") {
-        console.log(`    ${icon} ${change.serviceName}:`);
         for (const [key, value] of Object.entries(change.settings)) {
+          if (isSensitive(key)) {
+            console.log(`    ${icon} ${key}: ***`);
+            continue;
+          }
           const currentSvc = options?.currentState?.services[change.serviceName];
           const oldVal = currentSvc ? currentSvc[key] : undefined;
           const oldStr = oldVal !== undefined ? JSON.stringify(oldVal) : "(unset)";
           const newStr = value === null ? "(unset)" : JSON.stringify(value);
-          console.log(`      ${key}: ${oldStr} → ${newStr}`);
+          console.log(`    ${icon} ${key}: ${oldStr} → ${newStr}`);
         }
       } else if (verbose && change.type === "upsert-variables") {
-        console.log(`    ${change.serviceName}:`);
         for (const [key, value] of Object.entries(change.variables)) {
           const currentSvc = options?.currentState?.services[change.serviceName];
           const oldVal = currentSvc?.variables[key];
           const oldStr = oldVal !== undefined ? maskValue(key, oldVal) : "(unset)";
-          console.log(`      ${icon} ${key}: ${dim(`"${oldStr}"`, noColor)} → ${dim(`"${maskValue(key, value)}"`, noColor)}`);
-        }
-      } else if (verbose && change.type === "upsert-shared-variables") {
-        for (const [key, value] of Object.entries(change.variables)) {
-          const oldVal = options?.currentState?.sharedVariables[key];
-          const oldStr = oldVal !== undefined ? maskValue(key, oldVal) : "(unset)";
           console.log(`    ${icon} ${key}: ${dim(`"${oldStr}"`, noColor)} → ${dim(`"${maskValue(key, value)}"`, noColor)}`);
         }
       } else {
@@ -39118,15 +39180,13 @@ Changeset (${changeset.changes.length} changes):
   let createCount = 0;
   let updateCount = 0;
   let deleteCount = 0;
-  for (const entries of groups.values()) {
-    for (const { desc } of entries) {
-      if (desc.action === "create")
-        createCount++;
-      else if (desc.action === "update")
-        updateCount++;
-      else
-        deleteCount++;
-    }
+  for (const { desc } of described) {
+    if (desc.action === "create")
+      createCount++;
+    else if (desc.action === "update")
+      updateCount++;
+    else
+      deleteCount++;
   }
   const parts = [];
   if (createCount > 0)
@@ -39165,11 +39225,19 @@ async function applyChangeset(client, changeset, projectId, environmentId, optio
   const failed = [];
   const noColor = options?.noColor ?? false;
   const createdServiceIds = new Map;
-  const varChangeIndices = changeset.changes.map((c, i) => c.type === "upsert-variables" || c.type === "upsert-shared-variables" ? i : -1).filter((i) => i >= 0);
-  const lastVarChangeIdx = varChangeIndices.length > 0 ? varChangeIndices[varChangeIndices.length - 1] : -1;
+  const lastVarChangeByService = new Map;
+  for (let i = 0;i < changeset.changes.length; i++) {
+    const c = changeset.changes[i];
+    if (c.type === "upsert-variables") {
+      lastVarChangeByService.set(c.serviceName, i);
+    }
+  }
   for (let i = 0;i < changeset.changes.length; i++) {
     const change = changeset.changes[i];
-    const skipDeploys = (change.type === "upsert-variables" || change.type === "upsert-shared-variables") && i < lastVarChangeIdx;
+    let skipDeploys = false;
+    if (change.type === "upsert-variables") {
+      skipDeploys = i < (lastVarChangeByService.get(change.serviceName) ?? -1);
+    }
     try {
       await applyChange(client, change, projectId, environmentId, createdServiceIds, skipDeploys);
       applied.push(change);
@@ -39633,12 +39701,12 @@ function diffServiceSettings(desired, current, changes) {
   if (desired.ipv6EgressEnabled !== current.ipv6EgressEnabled) {
     settings.ipv6EgressEnabled = desired.ipv6EgressEnabled ?? null;
   }
-  if (desired.registryCredentials) {
-    settings.registryCredentials = desired.registryCredentials;
-  }
   if (desired.railwayConfigFile !== current.railwayConfigFile) {
     settings.railwayConfigFile = desired.railwayConfigFile ?? null;
   }
+  if (desired.registryCredentials) {
+    settings.registryCredentials = desired.registryCredentials;
+  }
   if (Object.keys(settings).length > 0) {
     changes.push({
       type: "update-service-settings",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tachyon-gg/railway-deploy",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "type": "module",
   "repository": {
     "type": "git",
@@ -29,7 +29,8 @@
     "test:all": "bun test --bail --timeout 30000 --env-file .env.test test/",
     "lint": "biome check .",
     "lint:fix": "biome check --write .",
-    "format": "biome format --write ."
+    "format": "biome format --write .",
+    "prepare": "husky"
   },
   "dependencies": {
     "@graphql-typed-document-node/core": "^3.2.0",
@@ -48,6 +49,7 @@
     "@graphql-codegen/typescript": "^4.1.2",
     "@graphql-codegen/typescript-operations": "^4.4.0",
     "@types/bun": "latest",
+    "husky": "^9.1.7",
     "typescript": "^5.7.0"
   }
 }