@crewhaus/cloud-adapter-railway 0.1.4 → 0.1.5

package/dist/index.d.ts

@@ -0,0 +1,71 @@
+import { type TargetShape } from "@crewhaus/docker-images";
+import { CrewhausError } from "@crewhaus/errors";
+/**
+ * Section 44 — `@crewhaus/cloud-adapter-railway`
+ *
+ * One-click deploy adapter for [Railway](https://railway.com). Three surfaces:
+ *
+ *   - `railwayConfigFor({target, …})` — emits a deterministic
+ *     `railway.json` config: builder = DOCKERFILE, healthcheckPath
+ *     for web shapes, restart policy. Railway reads this at repo root.
+ *
+ *   - `railwayDockerfileFor({target, baseImage})` — wraps the §32
+ *     docker-images base with a Railway-tuned final stage. Railway
+ *     injects `$PORT` at runtime; web shapes EXPOSE 8080 for clarity.
+ *
+ *   - `deployToRailway({apiToken, …})` — sends a GraphQL `serviceCreate`
+ *     mutation against `https://backboard.railway.com/graphql/v2`.
+ *     Live calls gated on `RAILWAY_API_TOKEN` env (or explicit
+ *     `apiToken`) plus injectable `fetchImpl` test seam.
+ *
+ * SECURITY (T8 credential-leak guard): `scrubApiToken()` runs every
+ * error path. Same approach as `cloud-adapter-render` / `-flyio`.
+ *
+ * Targets: daemon shapes (channel, managed, batch, voice, browser).
+ */
+export declare class RailwayAdapterError extends CrewhausError {
+    readonly name = "RailwayAdapterError";
+    constructor(message: string, cause?: unknown);
+}
+export declare const RAILWAY_TARGET_SHAPES: readonly ["channel", "managed", "batch", "voice", "browser"];
+export type RailwayTargetShape = (typeof RAILWAY_TARGET_SHAPES)[number];
+export declare function isRailwayTargetShape(value: unknown): value is RailwayTargetShape;
+export type RailwayRestartPolicy = "NEVER" | "ON_FAILURE" | "ALWAYS";
+export type RailwayConfigOptions = {
+    readonly target: TargetShape;
+    readonly dockerfilePath?: string;
+    readonly healthcheckPath?: string;
+    readonly healthcheckTimeoutSec?: number;
+    readonly restartPolicy?: RailwayRestartPolicy;
+    readonly restartPolicyMaxRetries?: number;
+};
+/**
+ * Stable JSON for the railway.json file. Keys are emitted in a fixed
+ * order so two equivalent inputs produce byte-identical output.
+ */
+export declare function railwayConfigFor(opts: RailwayConfigOptions): string;
+export type RailwayDockerfileOptions = {
+    readonly target: TargetShape;
+    readonly baseImage: string;
+};
+export declare function railwayDockerfileFor(opts: RailwayDockerfileOptions): string;
+export type RailwayDeployRecord = {
+    readonly serviceId: string;
+    readonly serviceName: string;
+    readonly projectId: string;
+};
+export type DeployToRailwayOptions = {
+    readonly projectId: string;
+    readonly serviceName: string;
+    readonly apiToken?: string;
+    readonly apiBaseUrl?: string;
+    readonly fetchImpl?: typeof fetch;
+};
+export declare const RAILWAY_DEFAULT_API_BASE = "https://backboard.railway.com/graphql/v2";
+export declare function scrubApiToken(message: string, apiToken: string | undefined): string;
+/**
+ * Issue a `serviceCreate` GraphQL mutation against the Railway public
+ * API. Returns the created service id. All errors run through
+ * `scrubApiToken()` before surfacing.
+ */
+export declare function deployToRailway(opts: DeployToRailwayOptions): Promise<RailwayDeployRecord>;

package/dist/index.js

@@ -0,0 +1,183 @@
+import { isTargetShape } from "@crewhaus/docker-images";
+import { CrewhausError } from "@crewhaus/errors";
+/**
+ * Section 44 — `@crewhaus/cloud-adapter-railway`
+ *
+ * One-click deploy adapter for [Railway](https://railway.com). Three surfaces:
+ *
+ *   - `railwayConfigFor({target, …})` — emits a deterministic
+ *     `railway.json` config: builder = DOCKERFILE, healthcheckPath
+ *     for web shapes, restart policy. Railway reads this at repo root.
+ *
+ *   - `railwayDockerfileFor({target, baseImage})` — wraps the §32
+ *     docker-images base with a Railway-tuned final stage. Railway
+ *     injects `$PORT` at runtime; web shapes EXPOSE 8080 for clarity.
+ *
+ *   - `deployToRailway({apiToken, …})` — sends a GraphQL `serviceCreate`
+ *     mutation against `https://backboard.railway.com/graphql/v2`.
+ *     Live calls gated on `RAILWAY_API_TOKEN` env (or explicit
+ *     `apiToken`) plus injectable `fetchImpl` test seam.
+ *
+ * SECURITY (T8 credential-leak guard): `scrubApiToken()` runs every
+ * error path. Same approach as `cloud-adapter-render` / `-flyio`.
+ *
+ * Targets: daemon shapes (channel, managed, batch, voice, browser).
+ */
+export class RailwayAdapterError extends CrewhausError {
+    name = "RailwayAdapterError";
+    constructor(message, cause) {
+        super("config", message, cause);
+    }
+}
+export const RAILWAY_TARGET_SHAPES = [
+    "channel",
+    "managed",
+    "batch",
+    "voice",
+    "browser",
+];
+export function isRailwayTargetShape(value) {
+    return typeof value === "string" && RAILWAY_TARGET_SHAPES.includes(value);
+}
+const SERVICE_TYPE_FOR_TARGET = {
+    channel: "web",
+    managed: "web",
+    voice: "web",
+    browser: "web",
+    batch: "worker",
+};
+const SERVICE_NAME_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+function assertRailwayTarget(target) {
+    if (!isRailwayTargetShape(target)) {
+        throw new RailwayAdapterError(`target shape "${target}" is not supported by Railway. Supported daemon shapes: ${RAILWAY_TARGET_SHAPES.join(", ")}.`);
+    }
+}
+function assertServiceName(name) {
+    if (!SERVICE_NAME_PATTERN.test(name)) {
+        throw new RailwayAdapterError(`service name "${name}" is invalid. Must be lowercase alphanumerics + hyphens, 1-63 chars, no leading/trailing hyphen.`);
+    }
+}
+/**
+ * Stable JSON for the railway.json file. Keys are emitted in a fixed
+ * order so two equivalent inputs produce byte-identical output.
+ */
+export function railwayConfigFor(opts) {
+    if (!isTargetShape(opts.target)) {
+        throw new RailwayAdapterError(`unknown target shape "${opts.target}"`);
+    }
+    assertRailwayTarget(opts.target);
+    const isWeb = SERVICE_TYPE_FOR_TARGET[opts.target] === "web";
+    const build = {
+        builder: "DOCKERFILE",
+        dockerfilePath: opts.dockerfilePath ?? "Dockerfile.railway",
+    };
+    const deploy = {
+        restartPolicyType: opts.restartPolicy ?? "ON_FAILURE",
+        restartPolicyMaxRetries: opts.restartPolicyMaxRetries ?? 10,
+    };
+    if (isWeb) {
+        deploy["healthcheckPath"] = opts.healthcheckPath ?? "/healthz";
+        deploy["healthcheckTimeout"] = opts.healthcheckTimeoutSec ?? 300;
+    }
+    const config = {
+        $schema: "https://railway.app/railway.schema.json",
+        build,
+        deploy,
+    };
+    return `${JSON.stringify(config, null, 2)}\n`;
+}
+export function railwayDockerfileFor(opts) {
+    if (!isTargetShape(opts.target)) {
+        throw new RailwayAdapterError(`unknown target shape "${opts.target}"`);
+    }
+    assertRailwayTarget(opts.target);
+    const isWeb = SERVICE_TYPE_FOR_TARGET[opts.target] === "web";
+    const lines = [
+        `# Railway-tuned wrapper around ${opts.baseImage}`,
+        `FROM ${opts.baseImage}`,
+        "ENV PORT=8080",
+    ];
+    if (isWeb) {
+        lines.push("EXPOSE 8080");
+    }
+    return `${lines.join("\n")}\n`;
+}
+export const RAILWAY_DEFAULT_API_BASE = "https://backboard.railway.com/graphql/v2";
+const SERVICE_CREATE_MUTATION = `
+mutation serviceCreate($input: ServiceCreateInput!) {
+  serviceCreate(input: $input) {
+    id
+    name
+  }
+}
+`.trim();
+function resolveApiToken(provided) {
+    const token = provided ?? process.env["RAILWAY_API_TOKEN"];
+    if (token === undefined || token.length === 0) {
+        throw new RailwayAdapterError("RAILWAY_API_TOKEN is required. Pass `apiToken` explicitly or set the env var.");
+    }
+    return token;
+}
+export function scrubApiToken(message, apiToken) {
+    if (apiToken === undefined || apiToken.length < 8)
+        return message;
+    return message.split(apiToken).join("[REDACTED:RAILWAY_API_TOKEN]");
+}
+/**
+ * Issue a `serviceCreate` GraphQL mutation against the Railway public
+ * API. Returns the created service id. All errors run through
+ * `scrubApiToken()` before surfacing.
+ */
+export async function deployToRailway(opts) {
+    assertServiceName(opts.serviceName);
+    const apiToken = resolveApiToken(opts.apiToken);
+    const url = opts.apiBaseUrl ?? RAILWAY_DEFAULT_API_BASE;
+    const fetchFn = opts.fetchImpl ?? fetch;
+    const body = JSON.stringify({
+        query: SERVICE_CREATE_MUTATION,
+        variables: {
+            input: { projectId: opts.projectId, name: opts.serviceName },
+        },
+    });
+    let response;
+    try {
+        response = await fetchFn(url, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${apiToken}`,
+                "Content-Type": "application/json",
+                Accept: "application/json",
+            },
+            body,
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new RailwayAdapterError(`Railway GraphQL request failed: ${scrubApiToken(msg, apiToken)}`, err);
+    }
+    const text = await response.text();
+    const scrubbed = scrubApiToken(text, apiToken);
+    if (!response.ok) {
+        throw new RailwayAdapterError(`Railway GraphQL returned ${response.status} ${response.statusText}: ${scrubbed}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        throw new RailwayAdapterError(`Railway GraphQL returned non-JSON body: ${scrubbed}`, err);
+    }
+    if (parsed.errors && parsed.errors.length > 0) {
+        const firstErr = parsed.errors[0]?.message ?? "(no message)";
+        throw new RailwayAdapterError(`Railway GraphQL responded with errors: ${scrubApiToken(firstErr, apiToken)}`);
+    }
+    const created = parsed.data?.serviceCreate;
+    if (!created?.id) {
+        throw new RailwayAdapterError(`Railway GraphQL response missing serviceCreate.id: ${scrubbed}`);
+    }
+    return {
+        serviceId: created.id,
+        serviceName: created.name ?? opts.serviceName,
+        projectId: opts.projectId,
+    };
+}

package/package.json

@@ -1,19 +1,22 @@
 {
   "name": "@crewhaus/cloud-adapter-railway",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "type": "module",
   "description": "One-click deploy adapter for Railway — generates a railway.json + Dockerfile and wraps the Railway GraphQL API for daemon target shapes (Section 44)",
-  "main": "src/index.ts",
-  "types": "src/index.ts",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
   },
   "scripts": {
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/docker-images": "0.1.4",
-    "@crewhaus/errors": "0.1.4"
+    "@crewhaus/docker-images": "0.1.5",
+    "@crewhaus/errors": "0.1.5"
   },
   "license": "Apache-2.0",
   "author": {
@@ -33,5 +36,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "files": ["src", "README.md", "LICENSE", "NOTICE"]
+  "files": ["dist", "README.md", "LICENSE", "NOTICE"]
 }

package/src/index.test.ts

@@ -1,444 +0,0 @@
-import { afterEach, describe, expect, test } from "bun:test";
-import {
-  RAILWAY_DEFAULT_API_BASE,
-  RAILWAY_TARGET_SHAPES,
-  RailwayAdapterError,
-  deployToRailway,
-  isRailwayTargetShape,
-  railwayConfigFor,
-  railwayDockerfileFor,
-  scrubApiToken,
-} from "./index";
-
-const API_TOKEN_ENV = "RAILWAY_API_TOKEN";
-
-describe("isRailwayTargetShape", () => {
-  test("accepts daemon shapes", () => {
-    for (const shape of RAILWAY_TARGET_SHAPES) {
-      expect(isRailwayTargetShape(shape)).toBe(true);
-    }
-  });
-  test("rejects one-shot shapes", () => {
-    for (const shape of ["cli", "workflow", "eval", "graph", "pipeline", "crew", "research"]) {
-      expect(isRailwayTargetShape(shape)).toBe(false);
-    }
-  });
-});
-
-describe("railwayConfigFor", () => {
-  test("web shape gets healthcheck path", () => {
-    const json = railwayConfigFor({ target: "channel" });
-    const parsed = JSON.parse(json);
-    expect(parsed.build.builder).toBe("DOCKERFILE");
-    expect(parsed.build.dockerfilePath).toBe("Dockerfile.railway");
-    expect(parsed.deploy.healthcheckPath).toBe("/healthz");
-    expect(parsed.deploy.healthcheckTimeout).toBe(300);
-    expect(parsed.deploy.restartPolicyType).toBe("ON_FAILURE");
-  });
-
-  test("worker shape omits healthcheck", () => {
-    const json = railwayConfigFor({ target: "batch" });
-    const parsed = JSON.parse(json);
-    expect(parsed.deploy.healthcheckPath).toBeUndefined();
-    expect(parsed.deploy.healthcheckTimeout).toBeUndefined();
-  });
-
-  test("is deterministic for the same input", () => {
-    const a = railwayConfigFor({ target: "channel" });
-    const b = railwayConfigFor({ target: "channel" });
-    expect(a).toBe(b);
-  });
-
-  test("respects restart policy + dockerfile path overrides", () => {
-    const parsed = JSON.parse(
-      railwayConfigFor({
-        target: "managed",
-        restartPolicy: "ALWAYS",
-        restartPolicyMaxRetries: 25,
-        dockerfilePath: "Dockerfile.prod",
-      }),
-    );
-    expect(parsed.deploy.restartPolicyType).toBe("ALWAYS");
-    expect(parsed.deploy.restartPolicyMaxRetries).toBe(25);
-    expect(parsed.build.dockerfilePath).toBe("Dockerfile.prod");
-  });
-
-  test("rejects unsupported shapes", () => {
-    expect(() => railwayConfigFor({ target: "cli" })).toThrow(RailwayAdapterError);
-    expect(() => railwayConfigFor({ target: "eval" })).toThrow(RailwayAdapterError);
-  });
-
-  test("rejects unknown shapes", () => {
-    expect(() => railwayConfigFor({ target: "mystery" as never })).toThrow(RailwayAdapterError);
-  });
-
-  test("honors healthcheck overrides on web shapes", () => {
-    const parsed = JSON.parse(
-      railwayConfigFor({
-        target: "voice",
-        healthcheckPath: "/ready",
-        healthcheckTimeoutSec: 42,
-      }),
-    );
-    expect(parsed.deploy.healthcheckPath).toBe("/ready");
-    expect(parsed.deploy.healthcheckTimeout).toBe(42);
-  });
-
-  test("worker shape still carries restart defaults", () => {
-    const parsed = JSON.parse(railwayConfigFor({ target: "batch" }));
-    expect(parsed.deploy.restartPolicyType).toBe("ON_FAILURE");
-    expect(parsed.deploy.restartPolicyMaxRetries).toBe(10);
-    expect(parsed.build.dockerfilePath).toBe("Dockerfile.railway");
-  });
-
-  test("emits a stable schema url and trailing newline", () => {
-    const json = railwayConfigFor({ target: "channel" });
-    expect(json.endsWith("\n")).toBe(true);
-    expect(JSON.parse(json).$schema).toBe("https://railway.app/railway.schema.json");
-  });
-});
-
-describe("railwayDockerfileFor", () => {
-  test("web shape EXPOSEs 8080", () => {
-    const df = railwayDockerfileFor({ target: "channel", baseImage: "crewhaus/channel:0.1.0" });
-    expect(df).toContain("FROM crewhaus/channel:0.1.0");
-    expect(df).toContain("EXPOSE 8080");
-  });
-
-  test("worker shape does not EXPOSE", () => {
-    const df = railwayDockerfileFor({ target: "batch", baseImage: "crewhaus/batch:0.1.0" });
-    expect(df).not.toContain("EXPOSE");
-  });
-
-  test("rejects unsupported shapes", () => {
-    expect(() => railwayDockerfileFor({ target: "cli", baseImage: "x" })).toThrow(
-      RailwayAdapterError,
-    );
-  });
-
-  test("rejects unknown shapes", () => {
-    expect(() => railwayDockerfileFor({ target: "mystery" as never, baseImage: "x" })).toThrow(
-      RailwayAdapterError,
-    );
-  });
-
-  test("pins PORT and a trailing newline for every shape", () => {
-    const df = railwayDockerfileFor({ target: "batch", baseImage: "crewhaus/batch:0.1.0" });
-    expect(df).toContain("ENV PORT=8080");
-    expect(df.endsWith("\n")).toBe(true);
-    expect(df).toContain("# Railway-tuned wrapper around crewhaus/batch:0.1.0");
-  });
-});
-
-describe("RailwayAdapterError", () => {
-  test("carries the config error code", () => {
-    const err = new RailwayAdapterError("boom");
-    expect(err.name).toBe("RailwayAdapterError");
-    expect(err.code).toBe("config");
-    expect(err).toBeInstanceOf(Error);
-  });
-});
-
-describe("scrubApiToken", () => {
-  test("redacts", () => {
-    expect(scrubApiToken("token rw_abcdef1234567890 leaked", "rw_abcdef1234567890")).toBe(
-      "token [REDACTED:RAILWAY_API_TOKEN] leaked",
-    );
-  });
-  test("ignores short tokens", () => {
-    expect(scrubApiToken("untouched", "abc")).toBe("untouched");
-  });
-});
-
-describe("deployToRailway", () => {
-  const ORIGINAL_TOKEN = process.env[API_TOKEN_ENV];
-  afterEach(() => {
-    if (ORIGINAL_TOKEN === undefined) delete process.env[API_TOKEN_ENV];
-    else process.env[API_TOKEN_ENV] = ORIGINAL_TOKEN;
-  });
-
-  test("posts a serviceCreate mutation", async () => {
-    let observed: { url: string; body: string } | undefined;
-    const fetchImpl = (async (url: string | URL, init?: RequestInit) => {
-      observed = { url: String(url), body: String(init?.body ?? "") };
-      return new Response(
-        JSON.stringify({ data: { serviceCreate: { id: "svc-123", name: "my-bot" } } }),
-        { status: 200 },
-      );
-    }) as unknown as typeof fetch;
-    const record = await deployToRailway({
-      projectId: "p-456",
-      serviceName: "my-bot",
-      apiToken: "rw_testtoken_abc",
-      fetchImpl,
-    });
-    expect(observed?.url).toBe(RAILWAY_DEFAULT_API_BASE);
-    expect(observed?.body).toContain("serviceCreate");
-    expect(observed?.body).toContain("p-456");
-    expect(record.serviceId).toBe("svc-123");
-    expect(record.serviceName).toBe("my-bot");
-    expect(record.projectId).toBe("p-456");
-  });
-
-  test("surfaces GraphQL errors", async () => {
-    const fetchImpl = (async () =>
-      new Response(JSON.stringify({ errors: [{ message: "project not found" }] }), {
-        status: 200,
-      })) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "missing",
-        serviceName: "my-bot",
-        apiToken: "rw_testtoken_abc",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("project not found");
-  });
-
-  test("scrubs token from HTTP error bodies", async () => {
-    const fetchImpl = (async () =>
-      new Response("unauthorized — token rw_leakingtoken_full denied", {
-        status: 401,
-        statusText: "Unauthorized",
-      })) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_leakingtoken_full",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught?.message).not.toContain("rw_leakingtoken_full");
-    expect(caught?.message).toContain("[REDACTED:RAILWAY_API_TOKEN]");
-  });
-
-  test("throws clearly when no token configured", async () => {
-    delete process.env[API_TOKEN_ENV];
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({ projectId: "p", serviceName: "my-bot" });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("RAILWAY_API_TOKEN is required");
-  });
-
-  test("validates service name before network", async () => {
-    let called = false;
-    const fetchImpl = (async () => {
-      called = true;
-      return new Response("", { status: 200 });
-    }) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "BadCaps",
-        apiToken: "rw_testtoken_abc",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(called).toBe(false);
-  });
-
-  test("wraps and scrubs network/transport failures", async () => {
-    const fetchImpl = (async () => {
-      throw new Error("connect ECONNREFUSED via proxy auth rw_leakingtoken_full");
-    }) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_leakingtoken_full",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("Railway GraphQL request failed");
-    expect(caught?.message).toContain("ECONNREFUSED");
-    expect(caught?.message).not.toContain("rw_leakingtoken_full");
-    expect(caught?.message).toContain("[REDACTED:RAILWAY_API_TOKEN]");
-    expect((caught as RailwayAdapterError).cause).toBeInstanceOf(Error);
-  });
-
-  test("stringifies non-Error transport rejections", async () => {
-    const fetchImpl = (async () => {
-      throw "boom-string-reject";
-    }) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_testtoken_abc",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("boom-string-reject");
-  });
-
-  test("rejects and scrubs a non-JSON 200 body", async () => {
-    const fetchImpl = (async () =>
-      new Response("<html>gateway error rw_leakingtoken_full</html>", {
-        status: 200,
-      })) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_leakingtoken_full",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("non-JSON body");
-    expect(caught?.message).not.toContain("rw_leakingtoken_full");
-    expect(caught?.message).toContain("[REDACTED:RAILWAY_API_TOKEN]");
-  });
-
-  test("rejects and scrubs when serviceCreate.id is missing", async () => {
-    const fetchImpl = (async () =>
-      new Response(
-        JSON.stringify({
-          data: { serviceCreate: { name: "my-bot" } },
-          meta: "trace rw_leakingtoken_full",
-        }),
-        { status: 200 },
-      )) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_leakingtoken_full",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("missing serviceCreate.id");
-    expect(caught?.message).not.toContain("rw_leakingtoken_full");
-    expect(caught?.message).toContain("[REDACTED:RAILWAY_API_TOKEN]");
-  });
-
-  test("surfaces HTTP status errors with status line", async () => {
-    const fetchImpl = (async () =>
-      new Response("internal error", {
-        status: 500,
-        statusText: "Internal Server Error",
-      })) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_testtoken_abc",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("500");
-    expect(caught?.message).toContain("Internal Server Error");
-  });
-
-  test("falls back to the requested service name when the API omits it", async () => {
-    const fetchImpl = (async () =>
-      new Response(JSON.stringify({ data: { serviceCreate: { id: "svc-xyz" } } }), {
-        status: 200,
-      })) as unknown as typeof fetch;
-    const record = await deployToRailway({
-      projectId: "p-789",
-      serviceName: "named-bot",
-      apiToken: "rw_testtoken_abc",
-      fetchImpl,
-    });
-    expect(record.serviceId).toBe("svc-xyz");
-    expect(record.serviceName).toBe("named-bot");
-    expect(record.projectId).toBe("p-789");
-  });
-
-  test("reads RAILWAY_API_TOKEN from the environment when apiToken is omitted", async () => {
-    process.env[API_TOKEN_ENV] = "rw_env_token_value";
-    let observedAuth: string | undefined;
-    const fetchImpl = (async (_url: string | URL, init?: RequestInit) => {
-      const headers = new Headers(init?.headers);
-      observedAuth = headers.get("Authorization") ?? undefined;
-      return new Response(
-        JSON.stringify({ data: { serviceCreate: { id: "svc-env", name: "n" } } }),
-        {
-          status: 200,
-        },
-      );
-    }) as unknown as typeof fetch;
-    const record = await deployToRailway({
-      projectId: "p",
-      serviceName: "my-bot",
-      fetchImpl,
-    });
-    expect(record.serviceId).toBe("svc-env");
-    expect(observedAuth).toBe("Bearer rw_env_token_value");
-  });
-
-  test("honors an explicit apiBaseUrl override", async () => {
-    let observedUrl: string | undefined;
-    const fetchImpl = (async (url: string | URL) => {
-      observedUrl = String(url);
-      return new Response(JSON.stringify({ data: { serviceCreate: { id: "svc-1", name: "n" } } }), {
-        status: 200,
-      });
-    }) as unknown as typeof fetch;
-    await deployToRailway({
-      projectId: "p",
-      serviceName: "my-bot",
-      apiToken: "rw_testtoken_abc",
-      apiBaseUrl: "https://example.test/graphql",
-      fetchImpl,
-    });
-    expect(observedUrl).toBe("https://example.test/graphql");
-  });
-
-  test("surfaces a generic message when a GraphQL error lacks a message field", async () => {
-    const fetchImpl = (async () =>
-      new Response(JSON.stringify({ errors: [{}] }), {
-        status: 200,
-      })) as unknown as typeof fetch;
-    let caught: Error | undefined;
-    try {
-      await deployToRailway({
-        projectId: "p",
-        serviceName: "my-bot",
-        apiToken: "rw_testtoken_abc",
-        fetchImpl,
-      });
-    } catch (err) {
-      caught = err as Error;
-    }
-    expect(caught).toBeInstanceOf(RailwayAdapterError);
-    expect(caught?.message).toContain("(no message)");
-  });
-});

package/src/index.ts

@@ -1,247 +0,0 @@
-import { type TargetShape, isTargetShape } from "@crewhaus/docker-images";
-import { CrewhausError } from "@crewhaus/errors";
-
-/**
- * Section 44 — `@crewhaus/cloud-adapter-railway`
- *
- * One-click deploy adapter for [Railway](https://railway.com). Three surfaces:
- *
- *   - `railwayConfigFor({target, …})` — emits a deterministic
- *     `railway.json` config: builder = DOCKERFILE, healthcheckPath
- *     for web shapes, restart policy. Railway reads this at repo root.
- *
- *   - `railwayDockerfileFor({target, baseImage})` — wraps the §32
- *     docker-images base with a Railway-tuned final stage. Railway
- *     injects `$PORT` at runtime; web shapes EXPOSE 8080 for clarity.
- *
- *   - `deployToRailway({apiToken, …})` — sends a GraphQL `serviceCreate`
- *     mutation against `https://backboard.railway.com/graphql/v2`.
- *     Live calls gated on `RAILWAY_API_TOKEN` env (or explicit
- *     `apiToken`) plus injectable `fetchImpl` test seam.
- *
- * SECURITY (T8 credential-leak guard): `scrubApiToken()` runs every
- * error path. Same approach as `cloud-adapter-render` / `-flyio`.
- *
- * Targets: daemon shapes (channel, managed, batch, voice, browser).
- */
-
-export class RailwayAdapterError extends CrewhausError {
-  override readonly name = "RailwayAdapterError";
-  constructor(message: string, cause?: unknown) {
-    super("config", message, cause);
-  }
-}
-
-export const RAILWAY_TARGET_SHAPES = [
-  "channel",
-  "managed",
-  "batch",
-  "voice",
-  "browser",
-] as const satisfies readonly TargetShape[];
-
-export type RailwayTargetShape = (typeof RAILWAY_TARGET_SHAPES)[number];
-
-export function isRailwayTargetShape(value: unknown): value is RailwayTargetShape {
-  return typeof value === "string" && (RAILWAY_TARGET_SHAPES as readonly string[]).includes(value);
-}
-
-export type RailwayRestartPolicy = "NEVER" | "ON_FAILURE" | "ALWAYS";
-
-const SERVICE_TYPE_FOR_TARGET: Readonly<Record<RailwayTargetShape, "web" | "worker">> = {
-  channel: "web",
-  managed: "web",
-  voice: "web",
-  browser: "web",
-  batch: "worker",
-};
-
-const SERVICE_NAME_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
-
-function assertRailwayTarget(target: TargetShape): asserts target is RailwayTargetShape {
-  if (!isRailwayTargetShape(target)) {
-    throw new RailwayAdapterError(
-      `target shape "${target}" is not supported by Railway. Supported daemon shapes: ${RAILWAY_TARGET_SHAPES.join(", ")}.`,
-    );
-  }
-}
-
-function assertServiceName(name: string): void {
-  if (!SERVICE_NAME_PATTERN.test(name)) {
-    throw new RailwayAdapterError(
-      `service name "${name}" is invalid. Must be lowercase alphanumerics + hyphens, 1-63 chars, no leading/trailing hyphen.`,
-    );
-  }
-}
-
-export type RailwayConfigOptions = {
-  readonly target: TargetShape;
-  readonly dockerfilePath?: string;
-  readonly healthcheckPath?: string;
-  readonly healthcheckTimeoutSec?: number;
-  readonly restartPolicy?: RailwayRestartPolicy;
-  readonly restartPolicyMaxRetries?: number;
-};
-
-/**
- * Stable JSON for the railway.json file. Keys are emitted in a fixed
- * order so two equivalent inputs produce byte-identical output.
- */
-export function railwayConfigFor(opts: RailwayConfigOptions): string {
-  if (!isTargetShape(opts.target)) {
-    throw new RailwayAdapterError(`unknown target shape "${opts.target}"`);
-  }
-  assertRailwayTarget(opts.target);
-  const isWeb = SERVICE_TYPE_FOR_TARGET[opts.target] === "web";
-
-  const build = {
-    builder: "DOCKERFILE",
-    dockerfilePath: opts.dockerfilePath ?? "Dockerfile.railway",
-  };
-  const deploy: Record<string, unknown> = {
-    restartPolicyType: opts.restartPolicy ?? "ON_FAILURE",
-    restartPolicyMaxRetries: opts.restartPolicyMaxRetries ?? 10,
-  };
-  if (isWeb) {
-    deploy["healthcheckPath"] = opts.healthcheckPath ?? "/healthz";
-    deploy["healthcheckTimeout"] = opts.healthcheckTimeoutSec ?? 300;
-  }
-  const config = {
-    $schema: "https://railway.app/railway.schema.json",
-    build,
-    deploy,
-  };
-  return `${JSON.stringify(config, null, 2)}\n`;
-}
-
-export type RailwayDockerfileOptions = {
-  readonly target: TargetShape;
-  readonly baseImage: string;
-};
-
-export function railwayDockerfileFor(opts: RailwayDockerfileOptions): string {
-  if (!isTargetShape(opts.target)) {
-    throw new RailwayAdapterError(`unknown target shape "${opts.target}"`);
-  }
-  assertRailwayTarget(opts.target);
-  const isWeb = SERVICE_TYPE_FOR_TARGET[opts.target] === "web";
-  const lines = [
-    `# Railway-tuned wrapper around ${opts.baseImage}`,
-    `FROM ${opts.baseImage}`,
-    "ENV PORT=8080",
-  ];
-  if (isWeb) {
-    lines.push("EXPOSE 8080");
-  }
-  return `${lines.join("\n")}\n`;
-}
-
-export type RailwayDeployRecord = {
-  readonly serviceId: string;
-  readonly serviceName: string;
-  readonly projectId: string;
-};
-
-export type DeployToRailwayOptions = {
-  readonly projectId: string;
-  readonly serviceName: string;
-  readonly apiToken?: string;
-  readonly apiBaseUrl?: string;
-  readonly fetchImpl?: typeof fetch;
-};
-
-export const RAILWAY_DEFAULT_API_BASE = "https://backboard.railway.com/graphql/v2";
-
-const SERVICE_CREATE_MUTATION = `
-mutation serviceCreate($input: ServiceCreateInput!) {
-  serviceCreate(input: $input) {
-    id
-    name
-  }
-}
-`.trim();
-
-function resolveApiToken(provided: string | undefined): string {
-  const token = provided ?? process.env["RAILWAY_API_TOKEN"];
-  if (token === undefined || token.length === 0) {
-    throw new RailwayAdapterError(
-      "RAILWAY_API_TOKEN is required. Pass `apiToken` explicitly or set the env var.",
-    );
-  }
-  return token;
-}
-
-export function scrubApiToken(message: string, apiToken: string | undefined): string {
-  if (apiToken === undefined || apiToken.length < 8) return message;
-  return message.split(apiToken).join("[REDACTED:RAILWAY_API_TOKEN]");
-}
-
-/**
- * Issue a `serviceCreate` GraphQL mutation against the Railway public
- * API. Returns the created service id. All errors run through
- * `scrubApiToken()` before surfacing.
- */
-export async function deployToRailway(opts: DeployToRailwayOptions): Promise<RailwayDeployRecord> {
-  assertServiceName(opts.serviceName);
-  const apiToken = resolveApiToken(opts.apiToken);
-  const url = opts.apiBaseUrl ?? RAILWAY_DEFAULT_API_BASE;
-  const fetchFn = opts.fetchImpl ?? fetch;
-
-  const body = JSON.stringify({
-    query: SERVICE_CREATE_MUTATION,
-    variables: {
-      input: { projectId: opts.projectId, name: opts.serviceName },
-    },
-  });
-
-  let response: Response;
-  try {
-    response = await fetchFn(url, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${apiToken}`,
-        "Content-Type": "application/json",
-        Accept: "application/json",
-      },
-      body,
-    });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    throw new RailwayAdapterError(
-      `Railway GraphQL request failed: ${scrubApiToken(msg, apiToken)}`,
-      err,
-    );
-  }
-
-  const text = await response.text();
-  const scrubbed = scrubApiToken(text, apiToken);
-  if (!response.ok) {
-    throw new RailwayAdapterError(
-      `Railway GraphQL returned ${response.status} ${response.statusText}: ${scrubbed}`,
-    );
-  }
-  let parsed: {
-    data?: { serviceCreate?: { id?: string; name?: string } };
-    errors?: ReadonlyArray<{ message?: string }>;
-  };
-  try {
-    parsed = JSON.parse(text);
-  } catch (err) {
-    throw new RailwayAdapterError(`Railway GraphQL returned non-JSON body: ${scrubbed}`, err);
-  }
-  if (parsed.errors && parsed.errors.length > 0) {
-    const firstErr = parsed.errors[0]?.message ?? "(no message)";
-    throw new RailwayAdapterError(
-      `Railway GraphQL responded with errors: ${scrubApiToken(firstErr, apiToken)}`,
-    );
-  }
-  const created = parsed.data?.serviceCreate;
-  if (!created?.id) {
-    throw new RailwayAdapterError(`Railway GraphQL response missing serviceCreate.id: ${scrubbed}`);
-  }
-  return {
-    serviceId: created.id,
-    serviceName: created.name ?? opts.serviceName,
-    projectId: opts.projectId,
-  };
-}