Railway

Move variables to and from a Railway environment.

Connection

What	This provider
Vendor	Railway
Key	`railway-vars`
Availability	`available`. You can connect it today.
Credential we hold	`railway-token`
Values read back	yes
Activation	`on-request`

Direction	What it does
`import`	We read names and values out of the store into your environment.
`export`	We write names and values from your environment into the store.

on-request. A new value waits there. We can deploy to activate it, and the sync form asks you first.

Direction	Policies you can pick
`import`	`skip_existing`, `new_version`, `fail`
`export`	`create_only`, `overwrite`, `overwrite_and_prune`

How syncs work says what each one does.

Paste a credential from the vendor. We seal it and never show it again.

Field	Label	Kind	Required	What it is
`token`	Token	secret; we mask it here and seal it	yes

You answer these once per environment you map.

Field	Label	Kind	Required	Advanced	What it is
`projectId`	Project	text	yes	no	The project's id, from its URL in the Railway dashboard.
`environmentId`	Environment	text	yes	no	Railway's own environment id. Production and staging are different ids.
`serviceId`	Service	text	no	yes	Leave empty to write the environment's shared variables instead of one service's.
`deployAfterSync`	Redeploy after each sync	yes or no	yes	yes	Off, values wait for your next deploy. On, Railway redeploys this service immediately. Starts at `false`.

We probe for these when we verify the connection.

Permission	Directions	Blocking	Without it
`me:read`	every direction	yes	We cannot confirm which Railway account this token belongs to.
`variables:read`	`import`	yes	Import cannot read variable values.
`variables:write`	`export`	yes	Export cannot write anything.