AeThex-OS/DEPLOYMENT_STATUS.md
Claude 776bd2c6d9
docs: Add comprehensive flow tracking and mark unfinished flows
- Create FLOWS.md with complete inventory of all 16 flows in codebase
- Mark 5 complete, 7 partial, and 4 not started flows
- Add [UNFINISHED FLOW] TODO markers to affected files:
  - wine-launcher.sh: VM launcher not implemented
  - execute.ts: Non-JS/TS language support missing
  - app-registry.ts: Stub implementation only
  - OAUTH_IMPLEMENTATION.md: Unlink endpoint needed
  - DEPLOYMENT_STATUS.md: Railway deployment pending
- Add FLOWS.md reference to PROJECT_RUNDOWN.md
2026-01-04 06:39:45 +00:00

3.9 KiB

AeThex Infrastructure Deployment Status

Current Architecture (Post-Railway Migration)

Auth Service: aethex.tech/api

Purpose: User authentication via Passport

  • Login/Register endpoints
  • Session management
  • OAuth flows (Discord, GitHub, Roblox)
  • Cookie-based auth

Status: Live (migrated from Replit → Railway)


Services Layer: aethex.cloud/api

Purpose: Application services (Sentinel, Bridge, etc.)

  • Sentinel monitoring
  • Bridge protocol
  • Legacy service endpoints

Status: Live (migrated from Replit → Railway)

  • Currently returns "AeThex Animus Protocol: ONLINE" / "Bridge V1"

OS Kernel: [To Be Deployed]

Purpose: Identity & Entitlement Management

  • Subject identity linking (/api/os/link/*)
  • Entitlement issuance/verification (/api/os/entitlements/*)
  • Issuer registry management
  • Cross-platform identity resolution

Status: 🚧 Ready for Railway Deployment

  • Code complete in this repo
  • Railway config created (railway.json, nixpacks.toml)
  • Database schema in shared/schema.ts
  • Capability guard enforced

Target Deployment URL Options:

  1. https://kernel.aethex.cloud (recommended - dedicated subdomain)
  2. https://aethex.cloud/kernel (path-based routing)
  3. https://os.aethex.tech (alternative domain)

Deployment Workflow

1. Deploy OS Kernel to Railway

# Option A: Railway CLI
railway login
railway init
railway link
railway up

# Option B: GitHub integration (auto-deploy on push)
# Connect repo in Railway dashboard

2. Configure Environment Variables

Required in Railway dashboard:

NODE_ENV=production
SESSION_SECRET=<generate-new-secret>
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_SERVICE_KEY=<service-role-key>
STRIPE_SECRET_KEY=<optional-for-payments>

3. Run Database Migrations

# Before first deploy
npm run db:push

4. Set Custom Domain

In Railway dashboard:

  • Add domain: kernel.aethex.cloud
  • Update DNS:
    CNAME kernel <railway-provided-url>
    

Integration Updates Required

Once deployed, update these services/bots:

Warden Bot (Discord/Studio Integration)

Update AETHEX_API_BASE:

# From: http://localhost:5173
# To:   https://kernel.aethex.cloud

Studio/Foundation Websites

OAuth callback redirect:

# Update link complete callback
https://kernel.aethex.cloud/api/os/link/complete

Entitlement Issuers

Register issuer credentials in aethex_issuers table:

INSERT INTO aethex_issuers (name, issuer_class, scopes, public_key, is_active)
VALUES ('AeThex Studio', 'platform', ARRAY['course', 'project'], '<public-key>', true);

Verification Checklist

After deployment:

  • Health check responds: curl https://kernel.aethex.cloud/health
  • Root endpoint shows OS Kernel info
  • Link start endpoint works (see curl tests in RAILWAY_DEPLOYMENT.md)
  • Entitlement resolve works with test data
  • Capability guard enforces realm restrictions
  • Supabase tables accessible (aethex_subjects, aethex_entitlements, etc.)
  • Audit logs writing to aethex_audit_log
  • WebSocket server running for real-time features

Next Steps (UNFINISHED DEPLOYMENT FLOW)

Note: These items are tracked in /FLOWS.md - update both documents when completing items.

  1. Railway config created
  2. [UNFINISHED] Deploy to Railway
  3. [UNFINISHED] Configure custom domain
  4. [UNFINISHED] Update Warden bot config
  5. [UNFINISHED] Test end-to-end flow
  6. [UNFINISHED] Monitor logs and metrics

Support & Documentation