plugin.toml

schema = "animus.plugin.v1"
name = "animus-environment-railway"
version = "0.4.0"
plugin_kind = "environment"
description = "Railway ephemeral-container execution-environment plugin for Animus (v0.7). Creates a Railway service from the base image via the Railway GraphQL API, relays harness commands over an outbound WebSocket the container dials home (animus-env-transport), and deletes the service on teardown."

[capabilities]
streaming = true
progress = false
cancellation = false
# The `environment` role's three-call contract plus the streaming exec variant.
methods = [
  "environment/prepare",
  "environment/exec",
  "environment/exec_stream",
  "environment/teardown",
  "health/check",
]

[binary]
default = "animus-environment-railway"

[[env]]
key = "RAILWAY_TOKEN"
description = "Railway API token used to create/delete run services (backboard GraphQL v2)."
required = true

[[env]]
key = "RAILWAY_PROJECT_ID"
description = "Railway project run services are created in. Overridable per-run via spec.metadata.railway_project_id."
required = false

[[env]]
key = "RAILWAY_ENVIRONMENT_ID"
description = "Railway environment within the project. Overridable per-run via spec.metadata.railway_environment_id."
required = false

[[env]]
key = "ANIMUS_ENV_RELAY_PUBLIC_URL"
description = "Public WSS URL run containers dial home to (e.g. wss://<daemon-domain>). TLS is terminated at the Railway edge; local/dev runs may omit it and dial the bound port directly."
required = false

[[env]]
key = "ANIMUS_ENV_RELAY_PORT"
description = "Port the in-plugin relay listener binds (default: ephemeral). Set a fixed port when the daemon's service exposes it publicly."
required = false

[[env]]
key = "ANIMUS_ENV_RAILWAY_IMAGE"
description = "Default base image for prepared containers when EnvironmentSpec.image is unset (default: ghcr.io/launchapp-dev/animus:v0.7.0-rc.2)."
required = false

[[env]]
key = "ANIMUS_ENV_BRIDGE_COMMAND"
description = "In-container start command (default: animus-env-bridge). Override while the base image does not ship the bridge entrypoint."
required = false

[[env]]
key = "ANIMUS_ENV_DIAL_TIMEOUT_SECS"
description = "Bound on how long prepare waits for the container to dial home (default: 300)."
required = false

[[env]]
key = "BASE_DB_URL"
description = "When set on the daemon host, passed through into every run container (shared cloud database endpoint)."
required = false

[[env]]
key = "CLAUDE_CONFIG_DIR"
description = "Daemon-side dir with the Claude subscription .credentials.json; base64-injected into each node so the claude harness runs on the subscription."
required = false

[[env]]
key = "CODEX_OAUTH_HOME"
description = "Daemon-side dir with the Codex ChatGPT-subscription auth.json; base64-injected into each node so the codex harness runs on the subscription."
required = false

[[env]]
key = "GITHUB_TOKEN"
description = "GitHub token injected into each node for git push + PR creation from the harness (fallback when no GitHub App is configured)."
required = false
sensitive = true

[[env]]
key = "GITHUB_APP_ID"
description = "GitHub App id; with GITHUB_APP_PRIVATE_KEY, prepare mints a repo-scoped installation token so the node pushes + opens PRs as the app."
required = false

[[env]]
key = "GITHUB_APP_PRIVATE_KEY"
description = "GitHub App private key (PEM) used to sign the app JWT that mints the per-run installation token."
required = false
sensitive = true

[[env]]
key = "GITHUB_APP_SLUG"
description = "GitHub App slug; sets the bot commit identity (<slug>[bot]) so commits are attributed to the app."
required = false