chore(deploy): remove railway deployment artifacts

This commit is contained in:
Saravana Achu Mac 2026-04-03 17:05:15 -07:00
parent 5048bd7e65
commit 705f58c5c5
5 changed files with 10 additions and 630 deletions

View File

@ -1,129 +0,0 @@
# Railway Deployment Runbook (Common Platform)
Last updated: 2026-02-16
This runbook covers repeatable deploys for shared services in `learning_ai_common_plat`.
## Scope
Deployable Railway services from this repo:
1. `platform-service`
2. `extraction-service`
There are currently **2 Railway backend services** in this repo. Monitoring (`loki`, `grafana`, `gateway`) is local Docker Compose infra, not deployed by Railway scripts.
## Deploy Scripts Inventory
| Script | Purpose | Services Affected |
| --- | --- | --- |
| `scripts/railway-deploy.sh` | Deploy code to Railway via `railway up` | `platform-service`, `extraction-service`, or both |
| `scripts/railway-sync-env.sh` | Sync selected vars from local `.env` into Railway service variables | `platform-service`, `extraction-service`, or both |
| `scripts/docker-prep.sh` | Build shared packages for local Docker builds | No Railway deploy; local prep only |
## One-Time Setup
1. Install Railway CLI:
```bash
npm i -g @railway/cli
```
2. Login:
```bash
railway login
```
3. Optional shell defaults:
```bash
export RAILWAY_PROJECT_ID="a6bc4ea7-e89c-42da-819a-8879fb022a0d"
export RAILWAY_ENVIRONMENT="production"
```
## First Deploy (or Env Changes)
1. Update local `.env` at repo root.
2. Sync env vars to Railway (no deploy per var):
```bash
scripts/railway-sync-env.sh all --env-file .env
```
3. Deploy both services:
```bash
scripts/railway-deploy.sh all
```
## Repeat Deploy for New Code
If only code changed:
```bash
scripts/railway-deploy.sh all
```
Single-service deploys:
```bash
scripts/railway-deploy.sh platform
scripts/railway-deploy.sh extraction
```
If env vars changed too:
```bash
scripts/railway-sync-env.sh all --env-file .env
scripts/railway-deploy.sh all
```
## Useful Flags
### `scripts/railway-deploy.sh`
```bash
# Sync env before deploy, then deploy extraction
scripts/railway-deploy.sh extraction --sync-env --env-file .env
# Custom message + attach to logs
scripts/railway-deploy.sh platform --message "hotfix: auth token handling" --attach
# Dry run
scripts/railway-deploy.sh all --sync-env --dry-run
```
### `scripts/railway-sync-env.sh`
```bash
# Sync only platform-service
scripts/railway-sync-env.sh platform --env-file .env
# Trigger deploys while setting vars (normally skipped)
scripts/railway-sync-env.sh extraction --trigger-deploys
# Dry run
scripts/railway-sync-env.sh all --dry-run
```
## Verification
After deploy:
```bash
railway link --project "$RAILWAY_PROJECT_ID" --environment "$RAILWAY_ENVIRONMENT"
railway service status -a -e "$RAILWAY_ENVIRONMENT"
```
Service logs:
```bash
railway logs --service platform-service --environment "$RAILWAY_ENVIRONMENT" --deployment --lines 200
railway logs --service extraction-service --environment "$RAILWAY_ENVIRONMENT" --deployment --lines 200
```
## Troubleshooting
1. `Railway CLI is not authenticated`:
```bash
railway login
```
2. `Unable to access Railway service ...`:
- Confirm project ID and environment.
- Confirm service names: `platform-service`, `extraction-service`.
3. Missing required vars during sync:
- Provide `COSMOS_ENDPOINT`, `COSMOS_KEY`, `JWT_SECRET` in `.env`, or
- Set `AZURE_KEYVAULT_URL` and ensure runtime identity can fetch secrets.
4. Deploy command succeeds but app is unhealthy:
- Check deployment logs using `railway logs --deployment`.
- Validate env vars synced for the affected service.

View File

@ -417,8 +417,6 @@ Workflow scripts for AI agents and developers:
| `prep-consumer.sh` | Prepare consumer builds |
| `prototype-self-test.sh` | Host-side prototype smoke test |
| `prototype-up.sh` | Start prototype Docker stack |
| `railway-deploy.sh` | Deploy to Railway |
| `railway-sync-env.sh` | Sync env vars to Railway |
| `secret-scan-repo.sh` | Scan repo for secrets |
| `secret-scan-staged.sh` | Scan staged files |
| `seed-keyvault.sh` | Seed Key Vault with required secrets |
@ -513,7 +511,7 @@ Each product has a `product.json` manifest:
| `audits/` | Security audit, auth analysis, Fastify-core audit, FlowMonk audit |
| `design/` | Agent prompts sync, client telemetry design, cross-product dashboard |
| `design-system/` | Design system documentation |
| `devops/` | Azure portal/resource/KV setup, Railway runbook, env audit, diagnostics |
| `devops/` | Azure portal/resource/KV setup, single-VM deployment docs, env audit, diagnostics |
| `guides/` | Migration guide, platform playbook, workflow sync, anti-patterns |
| `MCP+A2A/` | MCP server framework, A2A orchestration, domain docs, execution checklist, use-case catalog |
| `roadmaps/` | 16 completed, 6 active, 10 scaffolded, 1 not-started |

View File

@ -1,178 +0,0 @@
#!/usr/bin/env bash
set -euo pipefail
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "$ROOT"
PROJECT_ID="${RAILWAY_PROJECT_ID:-a6bc4ea7-e89c-42da-819a-8879fb022a0d}"
ENVIRONMENT="${RAILWAY_ENVIRONMENT:-production}"
ENV_FILE="${RAILWAY_ENV_FILE:-$ROOT/.env}"
SERVICE_SELECTOR="all"
MESSAGE=""
SYNC_ENV=false
DRY_RUN=false
DETACH=true
usage() {
cat <<'USAGE'
Deploy Railway services from this monorepo.
Usage:
scripts/railway-deploy.sh [all|platform|extraction] [options]
Options:
--project <id> Railway project ID (default: $RAILWAY_PROJECT_ID or script default)
--env <name> Railway environment name (default: $RAILWAY_ENVIRONMENT or production)
--message <msg> Deployment message
--sync-env Sync variables from .env before deploying (uses railway-sync-env.sh)
--env-file <path> Env file path used when --sync-env is set (default: ./.env)
--attach Attach to deployment logs instead of detached mode
--dry-run Print what would run without deploying
-h, --help Show help
Examples:
scripts/railway-deploy.sh all
scripts/railway-deploy.sh extraction --message "hotfix: parser"
scripts/railway-deploy.sh platform --sync-env --env-file .env
USAGE
}
if [[ $# -gt 0 && "${1#-}" == "$1" ]]; then
SERVICE_SELECTOR="$1"
shift
fi
while [[ $# -gt 0 ]]; do
case "$1" in
--project)
PROJECT_ID="${2:-}"
shift 2
;;
--env)
ENVIRONMENT="${2:-}"
shift 2
;;
--message)
MESSAGE="${2:-}"
shift 2
;;
--sync-env)
SYNC_ENV=true
shift
;;
--env-file)
ENV_FILE="${2:-}"
shift 2
;;
--attach)
DETACH=false
shift
;;
--dry-run)
DRY_RUN=true
shift
;;
-h|--help)
usage
exit 0
;;
*)
echo "Unknown arg: $1" >&2
usage
exit 2
;;
esac
done
SERVICES=()
case "$SERVICE_SELECTOR" in
all)
SERVICES=("platform-service" "extraction-service")
;;
platform|platform-service)
SERVICES=("platform-service")
;;
extraction|extraction-service)
SERVICES=("extraction-service")
;;
*)
echo "Unknown service selector: $SERVICE_SELECTOR" >&2
usage
exit 2
;;
esac
if [[ -z "$PROJECT_ID" ]]; then
echo "Missing Railway project ID. Use --project or set RAILWAY_PROJECT_ID." >&2
exit 2
fi
if [[ -z "$ENVIRONMENT" ]]; then
echo "Missing Railway environment. Use --env or set RAILWAY_ENVIRONMENT." >&2
exit 2
fi
if [[ -z "$MESSAGE" ]]; then
if command -v git >/dev/null 2>&1 && git rev-parse --git-dir >/dev/null 2>&1; then
sha="$(git rev-parse --short HEAD 2>/dev/null || true)"
dirty=""
if [[ -n "$(git status --porcelain 2>/dev/null || true)" ]]; then
dirty=" (dirty)"
fi
MESSAGE="deploy ${sha}${dirty}"
else
MESSAGE="deploy $(date -u +%Y-%m-%dT%H:%M:%SZ)"
fi
fi
if ! command -v railway >/dev/null 2>&1; then
echo "railway CLI not found. Install with: npm i -g @railway/cli" >&2
exit 1
fi
if [[ "$DRY_RUN" == false ]]; then
if ! railway whoami >/dev/null 2>&1; then
echo "Railway CLI is not authenticated. Run: railway login" >&2
exit 1
fi
fi
if [[ "$SYNC_ENV" == true ]]; then
sync_cmd=(
"scripts/railway-sync-env.sh"
"$SERVICE_SELECTOR"
"--project" "$PROJECT_ID"
"--env" "$ENVIRONMENT"
"--env-file" "$ENV_FILE"
)
if [[ "$DRY_RUN" == true ]]; then
sync_cmd+=("--dry-run")
fi
echo "Syncing variables before deployment..."
"${sync_cmd[@]}"
fi
for svc in "${SERVICES[@]}"; do
cmd=(railway up -p "$PROJECT_ID" -e "$ENVIRONMENT" -s "$svc" -m "$MESSAGE")
if [[ "$DETACH" == true ]]; then
cmd+=(-d)
fi
if [[ "$DRY_RUN" == true ]]; then
printf 'DRY RUN:'
printf ' %q' "${cmd[@]}"
printf '\n'
continue
fi
echo "Deploying $svc (project=$PROJECT_ID, env=$ENVIRONMENT)..."
"${cmd[@]}"
done
echo "Deployment command(s) submitted."
echo "To verify status quickly:"
echo " railway link --project $PROJECT_ID --environment $ENVIRONMENT"
echo " railway service status -a -e $ENVIRONMENT"

View File

@ -1,316 +0,0 @@
#!/usr/bin/env bash
set -euo pipefail
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "$ROOT"
PROJECT_ID="${RAILWAY_PROJECT_ID:-a6bc4ea7-e89c-42da-819a-8879fb022a0d}"
ENVIRONMENT="${RAILWAY_ENVIRONMENT:-production}"
ENV_FILE="${RAILWAY_ENV_FILE:-$ROOT/.env}"
SERVICE_SELECTOR="all"
SKIP_DEPLOYS=true
DRY_RUN=false
usage() {
cat <<'USAGE'
Sync selected environment variables from a local .env file to Railway services.
Usage:
scripts/railway-sync-env.sh [all|platform|extraction] [options]
Options:
--project <id> Railway project ID (default: $RAILWAY_PROJECT_ID or script default)
--env <name> Railway environment name (default: $RAILWAY_ENVIRONMENT or production)
--env-file <path> Local env file to read (default: ./.env)
--trigger-deploys Trigger deploys while setting vars (default is --skip-deploys)
--dry-run Print variables that would be synced (no changes)
-h, --help Show help
Notes:
- Missing optional vars are skipped.
- Required vars (COSMOS_ENDPOINT, COSMOS_KEY, JWT_SECRET) must exist unless AZURE_KEYVAULT_URL is set.
USAGE
}
if [[ $# -gt 0 && "${1#-}" == "$1" ]]; then
SERVICE_SELECTOR="$1"
shift
fi
while [[ $# -gt 0 ]]; do
case "$1" in
--project)
PROJECT_ID="${2:-}"
shift 2
;;
--env)
ENVIRONMENT="${2:-}"
shift 2
;;
--env-file)
ENV_FILE="${2:-}"
shift 2
;;
--trigger-deploys)
SKIP_DEPLOYS=false
shift
;;
--dry-run)
DRY_RUN=true
shift
;;
-h|--help)
usage
exit 0
;;
*)
echo "Unknown arg: $1" >&2
usage
exit 2
;;
esac
done
SERVICES=()
case "$SERVICE_SELECTOR" in
all)
SERVICES=("platform-service" "extraction-service")
;;
platform|platform-service)
SERVICES=("platform-service")
;;
extraction|extraction-service)
SERVICES=("extraction-service")
;;
*)
echo "Unknown service selector: $SERVICE_SELECTOR" >&2
usage
exit 2
;;
esac
if [[ -z "$PROJECT_ID" ]]; then
echo "Missing Railway project ID. Use --project or set RAILWAY_PROJECT_ID." >&2
exit 2
fi
if [[ -z "$ENVIRONMENT" ]]; then
echo "Missing Railway environment. Use --env or set RAILWAY_ENVIRONMENT." >&2
exit 2
fi
if [[ ! -f "$ENV_FILE" ]]; then
echo "Env file not found: $ENV_FILE" >&2
exit 2
fi
if ! command -v railway >/dev/null 2>&1; then
echo "railway CLI not found. Install with: npm i -g @railway/cli" >&2
exit 1
fi
if [[ "$DRY_RUN" == false ]]; then
if ! railway whoami >/dev/null 2>&1; then
echo "Railway CLI is not authenticated. Run: railway login" >&2
exit 1
fi
fi
# Load .env values into current shell for lookup.
# shellcheck disable=SC1090
set -a
source "$ENV_FILE"
set +a
get_value() {
local key="$1"
printf '%s' "${!key-}"
}
has_value() {
local key="$1"
[[ -n "${!key-}" ]]
}
COMMON_REQUIRED=(
COSMOS_ENDPOINT
COSMOS_KEY
JWT_SECRET
)
COMMON_OPTIONAL=(
AZURE_KEYVAULT_URL
COSMOS_DATABASE
DEFAULT_PRODUCT_ID
CORS_ORIGIN
PRODUCT_ID
NODE_ENV
HOST
)
PLATFORM_OPTIONAL=(
AZURE_BLOB_CONNECTION_STRING
AZURE_BLOB_ACCOUNT_NAME
AZURE_BLOB_ACCOUNT_KEY
STRIPE_SECRET_KEY
STRIPE_WEBHOOK_SECRET
STRIPE_PRICE_PRO
STRIPE_PRICE_ENTERPRISE
BILLING_INTERNAL_KEY
WEBHOOK_INVITATION_REDEEMED_URL
WEBHOOK_REFERRAL_STATUS_URL
BACKEND_URL
PLAN_LIMITS_JSON
USAGE_WARN_THRESHOLD
RATE_LIMIT_CONFIG_JSON
LICENSE_ACTIVATE_LOCKOUT_WINDOW_MS
LICENSE_ACTIVATE_MAX_FAILED_ATTEMPTS
COSMOS_AUTO_INIT
)
EXTRACTION_OPTIONAL=(
GEMINI_API_KEY
DEFAULT_MODEL_ID
PYTHON_SIDECAR_URL
EXTRACTION_CACHE_TTL_MS
EXTRACTION_CACHE_MAX
EXTRACTION_CACHE_TTL
EXTRACTION_CACHE_MAX_SIZE
USE_MOCK_EXTRACTOR
SIDECAR_PORT
SIDECAR_HOST
AZURE_OPENAI_KEY
AZURE_OPENAI_ENDPOINT
)
missing_required=()
for key in "${COMMON_REQUIRED[@]}"; do
if ! has_value "$key"; then
missing_required+=("$key")
fi
done
if [[ ${#missing_required[@]} -gt 0 && -z "$(get_value AZURE_KEYVAULT_URL)" ]]; then
echo "Missing required variables in $ENV_FILE: ${missing_required[*]}" >&2
echo "Either set them in the env file, or set AZURE_KEYVAULT_URL and ensure Railway can access Key Vault." >&2
exit 2
fi
if [[ ${#missing_required[@]} -gt 0 ]]; then
echo "Warning: missing ${missing_required[*]} in $ENV_FILE; relying on Key Vault resolution at runtime."
fi
LINK_DIR=""
cleanup() {
if [[ -n "$LINK_DIR" && -d "$LINK_DIR" ]]; then
rm -rf "$LINK_DIR"
fi
}
trap cleanup EXIT
run_railway() {
if [[ "$DRY_RUN" == true ]]; then
return 0
fi
(
cd "$LINK_DIR"
railway "$@"
)
}
if [[ "$DRY_RUN" == false ]]; then
LINK_DIR="$(mktemp -d)"
(
cd "$LINK_DIR"
railway link --project "$PROJECT_ID" --environment "$ENVIRONMENT" >/dev/null
)
fi
ensure_service_exists() {
local svc="$1"
if [[ "$DRY_RUN" == true ]]; then
return 0
fi
if ! run_railway variable list --service "$svc" --environment "$ENVIRONMENT" --json >/dev/null 2>&1; then
echo "Unable to access Railway service '$svc' in env '$ENVIRONMENT' (project '$PROJECT_ID')." >&2
echo "Check project/environment IDs and service names." >&2
exit 1
fi
}
set_variable() {
local svc="$1"
local key="$2"
local value="$3"
local -a cmd
if [[ "$DRY_RUN" == true ]]; then
echo " - would set $key"
return 0
fi
cmd=(variable set --service "$svc" --environment "$ENVIRONMENT")
if [[ "$SKIP_DEPLOYS" == true ]]; then
cmd+=(--skip-deploys)
fi
cmd+=("${key}=${value}")
run_railway "${cmd[@]}" >/dev/null
echo " - set $key"
}
sync_service() {
local svc="$1"
shift
local keys=("$@")
local value
local seen="|"
local synced=0
local skipped=0
echo "Syncing variables for $svc..."
for key in "${keys[@]}"; do
if [[ "$seen" == *"|$key|"* ]]; then
continue
fi
seen+="$key|"
value="$(get_value "$key")"
if [[ -z "$value" ]]; then
skipped=$((skipped + 1))
continue
fi
set_variable "$svc" "$key" "$value"
synced=$((synced + 1))
done
echo "Synced $synced variables to $svc (skipped $skipped unset keys)."
}
for svc in "${SERVICES[@]}"; do
ensure_service_exists "$svc"
if [[ "$svc" == "platform-service" ]]; then
sync_service "$svc" \
"${COMMON_REQUIRED[@]}" \
"${COMMON_OPTIONAL[@]}" \
"${PLATFORM_OPTIONAL[@]}"
else
sync_service "$svc" \
"${COMMON_REQUIRED[@]}" \
"${COMMON_OPTIONAL[@]}" \
"${EXTRACTION_OPTIONAL[@]}"
fi
done
if [[ "$SKIP_DEPLOYS" == true ]]; then
echo "Variable sync complete (deploys were skipped)."
echo "Run scripts/railway-deploy.sh to publish new code/config."
else
echo "Variable sync complete (deploys were triggered while setting vars)."
fi

View File

@ -107,16 +107,21 @@ async function sendViaConsole(
return { success: true, messageId };
}
// ── ByteLyst Provider (Railway FastAPI) ──────────────────────
// ── ByteLyst Provider (custom email bridge) ───────────────────
const BYTELYST_EMAIL_URL =
process.env.BYTELYST_EMAIL_URL ||
'https://bytelyst-notification-fastapi-production.up.railway.app/api/send-email';
const BYTELYST_EMAIL_URL = process.env.BYTELYST_EMAIL_URL;
async function sendViaBytelyst(
message: EmailMessage,
log: { info: (...a: unknown[]) => void; error: (...a: unknown[]) => void }
): Promise<SendResult> {
if (!BYTELYST_EMAIL_URL) {
return {
success: false,
error: 'BYTELYST_EMAIL_URL is not configured for the bytelyst email provider',
};
}
try {
const response = await fetch(BYTELYST_EMAIL_URL, {
method: 'POST',