ci: complete the Railway cutover cleanup - #28
Merged
Merged
Conversation
Bumps the npm_and_yarn group with 1 update in the /services/frontend directory: [next](https://github.com/vercel/next.js). Updates `next` from 16.2.3 to 16.2.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.3...v16.2.6) --- updated-dependencies: - dependency-name: next dependency-version: 16.2.6 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Prepare go-live hardening
Fix Bun lockfile CI pin
…ecks Refresh custom domain checks after verification
…rn/services/frontend/npm_and_yarn-152f59e559 # Conflicts: # apps/web/package.json
…ces/frontend/npm_and_yarn-152f59e559 chore(deps): bump next from 16.2.3 to 16.2.6 in /services/frontend in the npm_and_yarn group across 1 directory
Ensure default and environment-provided Fly API base URLs include the /v1 path segment. Update env.example and unit tests to expect and accept the /v1 suffix.
Prefer the verification-specific TXT name when verifying custom domains and return verification_record_name in the API. Server now checks the dedicated record first and falls back to the hostname; error messages updated accordingly. Frontend: group DNS rows into verification/address/CNAME, add copy-to-clipboard formatting and lock routing choice after copy. Update tests to cover the copy and routing flows.
- Add repository LICENSE (MIT) and link it from README files - Add license fields to package.json files and bump Bun to 1.3.7 - Document custom-domain endpoints and CustomDomainStatus in backend API - Clarify tenant DNS/TLS workflow in services/mcp-gateway README
Add MIT license and custom domain docs
…ening Harden production security for the MCP gateway
…ening Fixing TLS connection to Supabase
Replaces the retired Fly certificate integration with scoped Railway custom-domain provisioning and preserves compatibility response fields during the cutover.
Adds private Web-to-Gateway routing, service build configuration, migration tooling, and removes retired Fly and Vercel deployment artifacts.
Keeps CI as the release gate while routing production service deploys through Railway after successful main-branch checks.
Updates architecture, environment, migration, and operational guidance to reflect the verified Railway stack and retired providers.
…discovery-activation-capability-resolution-and
…-discovery-activation-capability-resolution-and # Conflicts: # .github/workflows/ci.yml # README.md # apps/web/lib/projects-api.ts # apps/web/vercel.json # scripts/ci-detect-changes.sh # scripts/fly-deploy-mcp-gateway.sh # services/mcp-gateway/README.md # services/mcp-gateway/Resources/env.example # services/mcp-gateway/Sources/App/Controllers/ProjectController.swift # services/mcp-gateway/Sources/App/DTOs/APIResponses.swift # services/mcp-gateway/Sources/App/Services/FlyCertificateService.swift # services/mcp-gateway/Sources/App/Sync/SkillParser.swift # services/mcp-gateway/Tests/AppTests/ProcessEnvSecurityTests.swift # services/mcp-gateway/Tests/AppTests/SecurityFindingMitigationTests.swift # services/mcp-gateway/Tests/AppTests/SkillParserTests.swift # services/mcp-gateway/deploy.sh # services/mcp-gateway/fly.toml
Deploys Development automatically from tested dev commits and restricts Production to a protected manual main workflow while validating branch, remote tip, clean state, project, environment, and service order.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
Why
Development and Production already run on Railway, but the cutover patch and deployment workflows were unpublished. MCP-8 makes the effective hosting state reviewable before the agent-native runtime is merged.
Verification
Risk and rollback
Deployment remains exact-SHA and environment-scoped. Gateway deploys before Web. Application rollback restores the prior Railway snapshots; additive database schema work is not part of this PR.
Linear: MCP-8