@timekast/factory 2.0.0 → 2.0.1

package/dist/commands/env.js

@@ -127,6 +127,8 @@ export function readVaultVercelSyncStatus(rootDir) {
     }
     if (!state)
         return 'unknown';
+    if (state.target === 'railway')
+        return 'railway';
     const syncs = state.syncs;
     const recorded = VERCEL_SYNC_ROLES.every((role) => Boolean(syncs?.ids?.[role]));
     const pending = VERCEL_SYNC_ROLES.some((role) => syncs?.pending?.includes(role));
@@ -141,6 +143,12 @@ export function readVaultVercelSyncStatus(rootDir) {
  * says they are not confirmed and points at `factory provision --resume`, which creates them.
  */
 export function vaultPushCessionMessage(link, syncs = 'active') {
+    if (syncs === 'railway') {
+        return ('Este repo usa la bóveda y despliega en Railway: sus variables llegan ahí por los syncs de la ' +
+            'bóveda y env push no escribe en ningún destino. Cambia el valor en la bóveda ' +
+            `(proyecto ${link.projectId}, entorno ${link.envs.main} → Railway \`main\`, ` +
+            `${link.envs.develop} → Railway \`develop\`); el sync lo lleva a Railway. No se envió nada.`);
+    }
     const where = `(proyecto ${link.projectId}, entorno ${link.envs.main} → production, ` +
         `${link.envs.develop} → preview)`;
     const delivery = syncs === 'active'

package/dist/commands/provision.js

@@ -301,8 +301,15 @@ function buildPlan(services, state, opts = {}) {
     }));
 }
 /** Print the plain-text plan (the `--dry-run` and pre-run narration). */
-function printPlan(result) {
-    console.log(`Plan de provision para \`${result.projectName}\` (lifecycle: ${result.lifecycle}):`);
+/**
+ * `plan` — before anything runs (`--dry-run`): what WOULD be created. `summary` — the closing
+ * report of a real run, after every step already narrated itself: what this run DID, worded so it
+ * never reads as pending work.
+ */
+function printPlan(result, mode = 'plan') {
+    console.log(mode === 'plan'
+        ? `Plan de provision para \`${result.projectName}\` (lifecycle: ${result.lifecycle}):`
+        : `\nResumen de esta corrida para \`${result.projectName}\` (lifecycle: ${result.lifecycle}):`);
     // BOOT-001: print the RESOLVED repo (--repo → origin → FACTORY_ORG/name), so a
     // `--dry-run` shows the exact repo the github step / E2E secrets will target.
     if (result.repo) {
@@ -315,7 +322,13 @@ function printPlan(result) {
         console.log(`  ${TARGET_UNRESOLVED_DRY_RUN}`);
     }
     for (const step of result.steps) {
-        const mark = step.action === 'skip' ? '⏭  (ya completado)' : '＋ crear';
+        const mark = step.action === 'skip'
+            ? mode === 'plan'
+                ? '⏭  (ya completado)'
+                : '⏭  ya estaba'
+            : mode === 'plan'
+                ? '＋ crear'
+                : '✔ hecho';
         const label = step.service === 'github' && result.target === 'railway'
             ? 'GitHub (sustrato git main + develop + E2E — nada en Vercel)'
             : SERVICE_LABEL[step.service];
@@ -9097,13 +9110,15 @@ export async function runProvision(flags, deps = {}) {
     else {
         warnNeonctl(preflight.neonctl);
         if (steps.length > 0)
-            printPlan(result);
+            printPlan(result, 'summary');
         printCustomizedScripts(result.wrapperWiring);
         if (hasDomain) {
             console.log(`\n✔ Dominio del cliente listo: ${flags.domain} (ruta ${flags.dns}).`);
         }
         else {
-            console.log(`\n✔ Scaffold de provision listo (lifecycle: ${lifecycle}). ` +
+            console.log(
+            // The EFFECTIVE lifecycle: a `--resume` does not repeat `--ephemeral`, and the state keeps it.
+            `\n✔ Scaffold de provision listo (lifecycle: ${result.lifecycle}). ` +
                 'Estado en `.timekast/provision.json`.');
         }
     }

package/dist/lib/vault-api.js

@@ -953,6 +953,11 @@ export function createVaultClient(deps = {}) {
             const connectionApp = asString(connection?.app);
             if (!connection || !id || connectionApp !== app)
                 return [];
+            // A connection scoped to ONE vault project (a client with infrastructure of its own)
+            // is not the organization's: the instance lets only that project use it. It never
+            // counts toward — or breaks — the choice of the org-wide connection.
+            if (asString(connection.projectId))
+                return [];
             return [
                 {
                     id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timekast/factory",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Public, thin CLI to bootstrap and maintain TimeKast Factory derived projects.",
   "type": "module",
   "license": "UNLICENSED",