chore(deploy): remove railway deployment artifacts

docs/devops/RAILWAY_DEPLOYMENT_RUNBOOK.md

@@ -1,129 +0,0 @@
-# Railway Deployment Runbook (Common Platform)
-
-Last updated: 2026-02-16
-
-This runbook covers repeatable deploys for shared services in `learning_ai_common_plat`.
-
-## Scope
-
-Deployable Railway services from this repo:
-
-1. `platform-service`
-2. `extraction-service`
-
-There are currently **2 Railway backend services** in this repo. Monitoring (`loki`, `grafana`, `gateway`) is local Docker Compose infra, not deployed by Railway scripts.
-
-## Deploy Scripts Inventory
-
-| Script | Purpose | Services Affected |
-| --- | --- | --- |
-| `scripts/railway-deploy.sh` | Deploy code to Railway via `railway up` | `platform-service`, `extraction-service`, or both |
-| `scripts/railway-sync-env.sh` | Sync selected vars from local `.env` into Railway service variables | `platform-service`, `extraction-service`, or both |
-| `scripts/docker-prep.sh` | Build shared packages for local Docker builds | No Railway deploy; local prep only |
-
-## One-Time Setup
-
-1. Install Railway CLI:
-```bash
-npm i -g @railway/cli
-```
-2. Login:
-```bash
-railway login
-```
-3. Optional shell defaults:
-```bash
-export RAILWAY_PROJECT_ID="a6bc4ea7-e89c-42da-819a-8879fb022a0d"
-export RAILWAY_ENVIRONMENT="production"
-```
-
-## First Deploy (or Env Changes)
-
-1. Update local `.env` at repo root.
-2. Sync env vars to Railway (no deploy per var):
-```bash
-scripts/railway-sync-env.sh all --env-file .env
-```
-3. Deploy both services:
-```bash
-scripts/railway-deploy.sh all
-```
-
-## Repeat Deploy for New Code
-
-If only code changed:
-```bash
-scripts/railway-deploy.sh all
-```
-
-Single-service deploys:
-```bash
-scripts/railway-deploy.sh platform
-scripts/railway-deploy.sh extraction
-```
-
-If env vars changed too:
-```bash
-scripts/railway-sync-env.sh all --env-file .env
-scripts/railway-deploy.sh all
-```
-
-## Useful Flags
-
-### `scripts/railway-deploy.sh`
-
-```bash
-# Sync env before deploy, then deploy extraction
-scripts/railway-deploy.sh extraction --sync-env --env-file .env
-
-# Custom message + attach to logs
-scripts/railway-deploy.sh platform --message "hotfix: auth token handling" --attach
-
-# Dry run
-scripts/railway-deploy.sh all --sync-env --dry-run
-```
-
-### `scripts/railway-sync-env.sh`
-
-```bash
-# Sync only platform-service
-scripts/railway-sync-env.sh platform --env-file .env
-
-# Trigger deploys while setting vars (normally skipped)
-scripts/railway-sync-env.sh extraction --trigger-deploys
-
-# Dry run
-scripts/railway-sync-env.sh all --dry-run
-```
-
-## Verification
-
-After deploy:
-
-```bash
-railway link --project "$RAILWAY_PROJECT_ID" --environment "$RAILWAY_ENVIRONMENT"
-railway service status -a -e "$RAILWAY_ENVIRONMENT"
-```
-
-Service logs:
-
-```bash
-railway logs --service platform-service --environment "$RAILWAY_ENVIRONMENT" --deployment --lines 200
-railway logs --service extraction-service --environment "$RAILWAY_ENVIRONMENT" --deployment --lines 200
-```
-
-## Troubleshooting
-
-1. `Railway CLI is not authenticated`:
-```bash
-railway login
-```
-2. `Unable to access Railway service ...`:
-   - Confirm project ID and environment.
-   - Confirm service names: `platform-service`, `extraction-service`.
-3. Missing required vars during sync:
-   - Provide `COSMOS_ENDPOINT`, `COSMOS_KEY`, `JWT_SECRET` in `.env`, or
-   - Set `AZURE_KEYVAULT_URL` and ensure runtime identity can fetch secrets.
-4. Deploy command succeeds but app is unhealthy:
-   - Check deployment logs using `railway logs --deployment`.
-   - Validate env vars synced for the affected service.

docs/learning_ai_common_plat_INVENTORY.md

@@ -417,8 +417,6 @@ Workflow scripts for AI agents and developers:
 | `prep-consumer.sh`            | Prepare consumer builds                      |
 | `prototype-self-test.sh`      | Host-side prototype smoke test               |
 | `prototype-up.sh`             | Start prototype Docker stack                 |
-| `railway-deploy.sh`           | Deploy to Railway                            |
-| `railway-sync-env.sh`         | Sync env vars to Railway                     |
 | `secret-scan-repo.sh`         | Scan repo for secrets                        |
 | `secret-scan-staged.sh`       | Scan staged files                            |
 | `seed-keyvault.sh`            | Seed Key Vault with required secrets         |
@@ -513,7 +511,7 @@ Each product has a `product.json` manifest:
 | `audits/`                              | Security audit, auth analysis, Fastify-core audit, FlowMonk audit                           |
 | `design/`                              | Agent prompts sync, client telemetry design, cross-product dashboard                        |
 | `design-system/`                       | Design system documentation                                                                 |
-| `devops/`                              | Azure portal/resource/KV setup, Railway runbook, env audit, diagnostics                     |
+| `devops/`                              | Azure portal/resource/KV setup, single-VM deployment docs, env audit, diagnostics           |
 | `guides/`                              | Migration guide, platform playbook, workflow sync, anti-patterns                            |
 | `MCP+A2A/`                             | MCP server framework, A2A orchestration, domain docs, execution checklist, use-case catalog |
 | `roadmaps/`                            | 16 completed, 6 active, 10 scaffolded, 1 not-started                                        |

scripts/railway-deploy.sh

@@ -1,178 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-cd "$ROOT"
-
-PROJECT_ID="${RAILWAY_PROJECT_ID:-a6bc4ea7-e89c-42da-819a-8879fb022a0d}"
-ENVIRONMENT="${RAILWAY_ENVIRONMENT:-production}"
-ENV_FILE="${RAILWAY_ENV_FILE:-$ROOT/.env}"
-
-SERVICE_SELECTOR="all"
-MESSAGE=""
-SYNC_ENV=false
-DRY_RUN=false
-DETACH=true
-
-usage() {
-  cat <<'USAGE'
-Deploy Railway services from this monorepo.
-
-Usage:
-  scripts/railway-deploy.sh [all|platform|extraction] [options]
-
-Options:
-  --project <id>       Railway project ID (default: $RAILWAY_PROJECT_ID or script default)
-  --env <name>         Railway environment name (default: $RAILWAY_ENVIRONMENT or production)
-  --message <msg>      Deployment message
-  --sync-env           Sync variables from .env before deploying (uses railway-sync-env.sh)
-  --env-file <path>    Env file path used when --sync-env is set (default: ./.env)
-  --attach             Attach to deployment logs instead of detached mode
-  --dry-run            Print what would run without deploying
-  -h, --help           Show help
-
-Examples:
-  scripts/railway-deploy.sh all
-  scripts/railway-deploy.sh extraction --message "hotfix: parser"
-  scripts/railway-deploy.sh platform --sync-env --env-file .env
-USAGE
-}
-
-if [[ $# -gt 0 && "${1#-}" == "$1" ]]; then
-  SERVICE_SELECTOR="$1"
-  shift
-fi
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --project)
-      PROJECT_ID="${2:-}"
-      shift 2
-      ;;
-    --env)
-      ENVIRONMENT="${2:-}"
-      shift 2
-      ;;
-    --message)
-      MESSAGE="${2:-}"
-      shift 2
-      ;;
-    --sync-env)
-      SYNC_ENV=true
-      shift
-      ;;
-    --env-file)
-      ENV_FILE="${2:-}"
-      shift 2
-      ;;
-    --attach)
-      DETACH=false
-      shift
-      ;;
-    --dry-run)
-      DRY_RUN=true
-      shift
-      ;;
-    -h|--help)
-      usage
-      exit 0
-      ;;
-    *)
-      echo "Unknown arg: $1" >&2
-      usage
-      exit 2
-      ;;
-  esac
-done
-
-SERVICES=()
-case "$SERVICE_SELECTOR" in
-  all)
-    SERVICES=("platform-service" "extraction-service")
-    ;;
-  platform|platform-service)
-    SERVICES=("platform-service")
-    ;;
-  extraction|extraction-service)
-    SERVICES=("extraction-service")
-    ;;
-  *)
-    echo "Unknown service selector: $SERVICE_SELECTOR" >&2
-    usage
-    exit 2
-    ;;
-esac
-
-if [[ -z "$PROJECT_ID" ]]; then
-  echo "Missing Railway project ID. Use --project or set RAILWAY_PROJECT_ID." >&2
-  exit 2
-fi
-
-if [[ -z "$ENVIRONMENT" ]]; then
-  echo "Missing Railway environment. Use --env or set RAILWAY_ENVIRONMENT." >&2
-  exit 2
-fi
-
-if [[ -z "$MESSAGE" ]]; then
-  if command -v git >/dev/null 2>&1 && git rev-parse --git-dir >/dev/null 2>&1; then
-    sha="$(git rev-parse --short HEAD 2>/dev/null || true)"
-    dirty=""
-    if [[ -n "$(git status --porcelain 2>/dev/null || true)" ]]; then
-      dirty=" (dirty)"
-    fi
-    MESSAGE="deploy ${sha}${dirty}"
-  else
-    MESSAGE="deploy $(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  fi
-fi
-
-if ! command -v railway >/dev/null 2>&1; then
-  echo "railway CLI not found. Install with: npm i -g @railway/cli" >&2
-  exit 1
-fi
-
-if [[ "$DRY_RUN" == false ]]; then
-  if ! railway whoami >/dev/null 2>&1; then
-    echo "Railway CLI is not authenticated. Run: railway login" >&2
-    exit 1
-  fi
-fi
-
-if [[ "$SYNC_ENV" == true ]]; then
-  sync_cmd=(
-    "scripts/railway-sync-env.sh"
-    "$SERVICE_SELECTOR"
-    "--project" "$PROJECT_ID"
-    "--env" "$ENVIRONMENT"
-    "--env-file" "$ENV_FILE"
-  )
-
-  if [[ "$DRY_RUN" == true ]]; then
-    sync_cmd+=("--dry-run")
-  fi
-
-  echo "Syncing variables before deployment..."
-  "${sync_cmd[@]}"
-fi
-
-for svc in "${SERVICES[@]}"; do
-  cmd=(railway up -p "$PROJECT_ID" -e "$ENVIRONMENT" -s "$svc" -m "$MESSAGE")
-  if [[ "$DETACH" == true ]]; then
-    cmd+=(-d)
-  fi
-
-  if [[ "$DRY_RUN" == true ]]; then
-    printf 'DRY RUN:'
-    printf ' %q' "${cmd[@]}"
-    printf '\n'
-    continue
-  fi
-
-  echo "Deploying $svc (project=$PROJECT_ID, env=$ENVIRONMENT)..."
-  "${cmd[@]}"
-done
-
-echo "Deployment command(s) submitted."
-echo "To verify status quickly:"
-echo "  railway link --project $PROJECT_ID --environment $ENVIRONMENT"
-echo "  railway service status -a -e $ENVIRONMENT"

scripts/railway-sync-env.sh

@@ -1,316 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-cd "$ROOT"
-
-PROJECT_ID="${RAILWAY_PROJECT_ID:-a6bc4ea7-e89c-42da-819a-8879fb022a0d}"
-ENVIRONMENT="${RAILWAY_ENVIRONMENT:-production}"
-ENV_FILE="${RAILWAY_ENV_FILE:-$ROOT/.env}"
-
-SERVICE_SELECTOR="all"
-SKIP_DEPLOYS=true
-DRY_RUN=false
-
-usage() {
-  cat <<'USAGE'
-Sync selected environment variables from a local .env file to Railway services.
-
-Usage:
-  scripts/railway-sync-env.sh [all|platform|extraction] [options]
-
-Options:
-  --project <id>         Railway project ID (default: $RAILWAY_PROJECT_ID or script default)
-  --env <name>           Railway environment name (default: $RAILWAY_ENVIRONMENT or production)
-  --env-file <path>      Local env file to read (default: ./.env)
-  --trigger-deploys      Trigger deploys while setting vars (default is --skip-deploys)
-  --dry-run              Print variables that would be synced (no changes)
-  -h, --help             Show help
-
-Notes:
-  - Missing optional vars are skipped.
-  - Required vars (COSMOS_ENDPOINT, COSMOS_KEY, JWT_SECRET) must exist unless AZURE_KEYVAULT_URL is set.
-USAGE
-}
-
-if [[ $# -gt 0 && "${1#-}" == "$1" ]]; then
-  SERVICE_SELECTOR="$1"
-  shift
-fi
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --project)
-      PROJECT_ID="${2:-}"
-      shift 2
-      ;;
-    --env)
-      ENVIRONMENT="${2:-}"
-      shift 2
-      ;;
-    --env-file)
-      ENV_FILE="${2:-}"
-      shift 2
-      ;;
-    --trigger-deploys)
-      SKIP_DEPLOYS=false
-      shift
-      ;;
-    --dry-run)
-      DRY_RUN=true
-      shift
-      ;;
-    -h|--help)
-      usage
-      exit 0
-      ;;
-    *)
-      echo "Unknown arg: $1" >&2
-      usage
-      exit 2
-      ;;
-  esac
-done
-
-SERVICES=()
-case "$SERVICE_SELECTOR" in
-  all)
-    SERVICES=("platform-service" "extraction-service")
-    ;;
-  platform|platform-service)
-    SERVICES=("platform-service")
-    ;;
-  extraction|extraction-service)
-    SERVICES=("extraction-service")
-    ;;
-  *)
-    echo "Unknown service selector: $SERVICE_SELECTOR" >&2
-    usage
-    exit 2
-    ;;
-esac
-
-if [[ -z "$PROJECT_ID" ]]; then
-  echo "Missing Railway project ID. Use --project or set RAILWAY_PROJECT_ID." >&2
-  exit 2
-fi
-
-if [[ -z "$ENVIRONMENT" ]]; then
-  echo "Missing Railway environment. Use --env or set RAILWAY_ENVIRONMENT." >&2
-  exit 2
-fi
-
-if [[ ! -f "$ENV_FILE" ]]; then
-  echo "Env file not found: $ENV_FILE" >&2
-  exit 2
-fi
-
-if ! command -v railway >/dev/null 2>&1; then
-  echo "railway CLI not found. Install with: npm i -g @railway/cli" >&2
-  exit 1
-fi
-
-if [[ "$DRY_RUN" == false ]]; then
-  if ! railway whoami >/dev/null 2>&1; then
-    echo "Railway CLI is not authenticated. Run: railway login" >&2
-    exit 1
-  fi
-fi
-
-# Load .env values into current shell for lookup.
-# shellcheck disable=SC1090
-set -a
-source "$ENV_FILE"
-set +a
-
-get_value() {
-  local key="$1"
-  printf '%s' "${!key-}"
-}
-
-has_value() {
-  local key="$1"
-  [[ -n "${!key-}" ]]
-}
-
-COMMON_REQUIRED=(
-  COSMOS_ENDPOINT
-  COSMOS_KEY
-  JWT_SECRET
-)
-
-COMMON_OPTIONAL=(
-  AZURE_KEYVAULT_URL
-  COSMOS_DATABASE
-  DEFAULT_PRODUCT_ID
-  CORS_ORIGIN
-  PRODUCT_ID
-  NODE_ENV
-  HOST
-)
-
-PLATFORM_OPTIONAL=(
-  AZURE_BLOB_CONNECTION_STRING
-  AZURE_BLOB_ACCOUNT_NAME
-  AZURE_BLOB_ACCOUNT_KEY
-  STRIPE_SECRET_KEY
-  STRIPE_WEBHOOK_SECRET
-  STRIPE_PRICE_PRO
-  STRIPE_PRICE_ENTERPRISE
-  BILLING_INTERNAL_KEY
-  WEBHOOK_INVITATION_REDEEMED_URL
-  WEBHOOK_REFERRAL_STATUS_URL
-  BACKEND_URL
-  PLAN_LIMITS_JSON
-  USAGE_WARN_THRESHOLD
-  RATE_LIMIT_CONFIG_JSON
-  LICENSE_ACTIVATE_LOCKOUT_WINDOW_MS
-  LICENSE_ACTIVATE_MAX_FAILED_ATTEMPTS
-  COSMOS_AUTO_INIT
-)
-
-EXTRACTION_OPTIONAL=(
-  GEMINI_API_KEY
-  DEFAULT_MODEL_ID
-  PYTHON_SIDECAR_URL
-  EXTRACTION_CACHE_TTL_MS
-  EXTRACTION_CACHE_MAX
-  EXTRACTION_CACHE_TTL
-  EXTRACTION_CACHE_MAX_SIZE
-  USE_MOCK_EXTRACTOR
-  SIDECAR_PORT
-  SIDECAR_HOST
-  AZURE_OPENAI_KEY
-  AZURE_OPENAI_ENDPOINT
-)
-
-missing_required=()
-for key in "${COMMON_REQUIRED[@]}"; do
-  if ! has_value "$key"; then
-    missing_required+=("$key")
-  fi
-done
-
-if [[ ${#missing_required[@]} -gt 0 && -z "$(get_value AZURE_KEYVAULT_URL)" ]]; then
-  echo "Missing required variables in $ENV_FILE: ${missing_required[*]}" >&2
-  echo "Either set them in the env file, or set AZURE_KEYVAULT_URL and ensure Railway can access Key Vault." >&2
-  exit 2
-fi
-
-if [[ ${#missing_required[@]} -gt 0 ]]; then
-  echo "Warning: missing ${missing_required[*]} in $ENV_FILE; relying on Key Vault resolution at runtime."
-fi
-
-LINK_DIR=""
-cleanup() {
-  if [[ -n "$LINK_DIR" && -d "$LINK_DIR" ]]; then
-    rm -rf "$LINK_DIR"
-  fi
-}
-trap cleanup EXIT
-
-run_railway() {
-  if [[ "$DRY_RUN" == true ]]; then
-    return 0
-  fi
-  (
-    cd "$LINK_DIR"
-    railway "$@"
-  )
-}
-
-if [[ "$DRY_RUN" == false ]]; then
-  LINK_DIR="$(mktemp -d)"
-  (
-    cd "$LINK_DIR"
-    railway link --project "$PROJECT_ID" --environment "$ENVIRONMENT" >/dev/null
-  )
-fi
-
-ensure_service_exists() {
-  local svc="$1"
-  if [[ "$DRY_RUN" == true ]]; then
-    return 0
-  fi
-
-  if ! run_railway variable list --service "$svc" --environment "$ENVIRONMENT" --json >/dev/null 2>&1; then
-    echo "Unable to access Railway service '$svc' in env '$ENVIRONMENT' (project '$PROJECT_ID')." >&2
-    echo "Check project/environment IDs and service names." >&2
-    exit 1
-  fi
-}
-
-set_variable() {
-  local svc="$1"
-  local key="$2"
-  local value="$3"
-  local -a cmd
-
-  if [[ "$DRY_RUN" == true ]]; then
-    echo "  - would set $key"
-    return 0
-  fi
-
-  cmd=(variable set --service "$svc" --environment "$ENVIRONMENT")
-  if [[ "$SKIP_DEPLOYS" == true ]]; then
-    cmd+=(--skip-deploys)
-  fi
-  cmd+=("${key}=${value}")
-
-  run_railway "${cmd[@]}" >/dev/null
-  echo "  - set $key"
-}
-
-sync_service() {
-  local svc="$1"
-  shift
-  local keys=("$@")
-  local value
-
-  local seen="|"
-  local synced=0
-  local skipped=0
-
-  echo "Syncing variables for $svc..."
-
-  for key in "${keys[@]}"; do
-    if [[ "$seen" == *"|$key|"* ]]; then
-      continue
-    fi
-    seen+="$key|"
-
-    value="$(get_value "$key")"
-    if [[ -z "$value" ]]; then
-      skipped=$((skipped + 1))
-      continue
-    fi
-
-    set_variable "$svc" "$key" "$value"
-    synced=$((synced + 1))
-  done
-
-  echo "Synced $synced variables to $svc (skipped $skipped unset keys)."
-}
-
-for svc in "${SERVICES[@]}"; do
-  ensure_service_exists "$svc"
-
-  if [[ "$svc" == "platform-service" ]]; then
-    sync_service "$svc" \
-      "${COMMON_REQUIRED[@]}" \
-      "${COMMON_OPTIONAL[@]}" \
-      "${PLATFORM_OPTIONAL[@]}"
-  else
-    sync_service "$svc" \
-      "${COMMON_REQUIRED[@]}" \
-      "${COMMON_OPTIONAL[@]}" \
-      "${EXTRACTION_OPTIONAL[@]}"
-  fi
-done
-
-if [[ "$SKIP_DEPLOYS" == true ]]; then
-  echo "Variable sync complete (deploys were skipped)."
-  echo "Run scripts/railway-deploy.sh to publish new code/config."
-else
-  echo "Variable sync complete (deploys were triggered while setting vars)."
-fi

services/platform-service/src/modules/delivery/channels/email.ts

@@ -107,16 +107,21 @@ async function sendViaConsole(
   return { success: true, messageId };
 }
 
-// ── ByteLyst Provider (Railway FastAPI) ──────────────────────
+// ── ByteLyst Provider (custom email bridge) ───────────────────
 
-const BYTELYST_EMAIL_URL =
+const BYTELYST_EMAIL_URL = process.env.BYTELYST_EMAIL_URL;
-  process.env.BYTELYST_EMAIL_URL ||
-  'https://bytelyst-notification-fastapi-production.up.railway.app/api/send-email';
 
 async function sendViaBytelyst(
   message: EmailMessage,
   log: { info: (...a: unknown[]) => void; error: (...a: unknown[]) => void }
 ): Promise<SendResult> {
+  if (!BYTELYST_EMAIL_URL) {
+    return {
+      success: false,
+      error: 'BYTELYST_EMAIL_URL is not configured for the bytelyst email provider',
+    };
+  }
+
   try {
     const response = await fetch(BYTELYST_EMAIL_URL, {
       method: 'POST',