@timekast/factory 2.3.0 → 2.3.1

package/dist/commands/provision.js

@@ -1376,7 +1376,7 @@ const VAULT_PER_ENV_MINTED = ['AUTH_SECRET'];
  * Which keys each destination gets depends on the services the run includes: `neon` writes the
  * connection strings and the CI keys, `vercel` the runtime values, `backlog` its local creds.
  */
-export function buildVaultPlan(projectName, services) {
+export function buildVaultPlan(projectName, services, target) {
     const keys = {};
     const references = {};
     const add = (loc, names, asRef = false) => {
@@ -1416,7 +1416,9 @@ export function buildVaultPlan(projectName, services) {
     if (services.includes('backlog')) {
         add(VAULT_LOCAL_ROOT, ['BACKLOG_API_KEY', 'BACKLOG_PROJECT_ID']);
     }
-    const railway = services.includes('railway');
+    // The syncs follow the DESTINATION, not this run's steps: a run with `vault` but without the
+    // `railway` step still deploys to Railway, and never gets the Vercel syncs.
+    const railway = services.includes('railway') || target === 'railway';
     return {
         project: projectName,
         environments: VAULT_LAYOUT_ENVIRONMENTS.map((env) => env.slug),
@@ -5436,12 +5438,17 @@ function goLiveRetryHint(mailDomain) {
     const client = mailDomain.startsWith(prefix) ? mailDomain.slice(prefix.length) : '<tu dominio>';
     return `repite el go-live (\`factory provision --domain=${client}\`)`;
 }
+/** Whether the state records a kit domain in that Railway environment (created, or found by adopt). */
+function hasRailwayKitDomain(state, role) {
+    const rw = state?.railway;
+    return Boolean(rw?.customDomains?.[role] || rw?.adoptedDomains?.some((d) => d.role === role));
+}
 /**
  * Print the resolved client-domain operation tree for `--domain --dry-run`
  * (PROV-006 §8): the exact domain, the DNS route, whether the CNAME is created or
  * printed, the interim-retire intent, and the env updates — mutating NOTHING.
  */
-function printClientDomainPlan(domain, interim, route, confirm, target, clientMail = false) {
+function printClientDomainPlan(domain, hosts, route, confirm, target, clientMail = false) {
     console.log(`\nPlan de \`--domain=${domain}\` (ruta DNS: ${route}):`);
     if (target === 'railway') {
         // RWAY-005: the CNAME's destination and the TXT are what Railway returns for the domain.
@@ -5466,8 +5473,11 @@ function printClientDomainPlan(domain, interim, route, confirm, target, clientMa
         }
         console.log(`  … sondea GET /v9/projects/.../domains/${domain} hasta verified:true (o timeout)`);
     }
-    console.log(`  ${confirm ? '－' : '? (requiere --confirm o prompt)'} retira el interino ${interim} ` +
-        `(el dev ${domain}-dev se conserva)`);
+    const { interim, dev } = hosts;
+    console.log(interim
+        ? `  ${confirm ? '－' : '? (requiere --confirm o prompt)'} retira el interino ${interim}` +
+            (dev ? ` (el dev ${dev} se conserva)` : '')
+        : '  · sin dominio interino registrado: no hay nada que retirar');
     console.log(clientMail
         ? `  ↻ EMAIL_FROM=noreply@${mailDomainFor(domain)} · NEXT_PUBLIC_APP_URL=https://${domain}`
         : `  ↻ NEXT_PUBLIC_APP_URL=https://${domain}`);
@@ -8923,7 +8933,7 @@ export async function runProvision(flags, deps = {}) {
         };
     }
     if (flags.services.includes('vault')) {
-        result.vault = buildVaultPlan(projectName, flags.services);
+        result.vault = buildVaultPlan(projectName, flags.services, target);
     }
     if (vaultDecision.skipped) {
         result.vaultSkipped = vaultDecision.skipped;
@@ -8956,8 +8966,12 @@ export async function runProvision(flags, deps = {}) {
             if (hasDomain) {
                 // Same rule as the real retire (DOM-001): the plan must print the interim the
                 // project ACTUALLY has, not one re-derived in the current org zone.
-                const interim = existingProvisionDomains(projectName, state?.dns).prod;
-                printClientDomainPlan(flags.domain, interim, flags.dns, flags.confirm, target, flags.clientMail === true);
+                const hosts = existingProvisionDomains(projectName, state?.dns);
+                // Railway records its kit domains by environment: without one there is nothing to retire.
+                const onRailway = target === 'railway';
+                const interim = onRailway && !hasRailwayKitDomain(state, 'main') ? undefined : hosts.prod;
+                const dev = onRailway && !hasRailwayKitDomain(state, 'develop') ? undefined : hosts.dev;
+                printClientDomainPlan(flags.domain, { interim, dev }, flags.dns, flags.confirm, target, flags.clientMail === true);
             }
         }
         return result;
@@ -8968,7 +8982,9 @@ export async function runProvision(flags, deps = {}) {
     const preflight = await runProvisionPreflight({
         services: preflightServices,
         teamId: flags.team,
-        repoSlug: `${FACTORY_ORG}/${projectName}`,
+        // The repo the steps target (state → `--repo` → `origin` → default), never one re-derived
+        // from the slug: a repo named apart from its slug would fail a check the run would pass.
+        ...(repoSlug ? { repoSlug } : {}),
         rootDir,
         ...(target ? { target } : {}),
     }, { rail });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timekast/factory",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Public, thin CLI to bootstrap and maintain TimeKast Factory derived projects.",
   "type": "module",
   "license": "UNLICENSED",