# @lssm-tech/integration.job-application-effects-dependencies-railway

Railway S3 and candidate-vault dependencies for managed job application effects.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.1.4`
- Package path: `packages/integrations/job-application-effects-dependencies-railway`
- Manifest path: `packages/integrations/job-application-effects-dependencies-railway/package.json`
- Manifest Git blob: `54ad32c124c8020b9270261f66f75b4cf6e4cec0`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/integration.job-application-effects-dependencies-railway](https://lssm.co/docs/packages/integration.job-application-effects-dependencies-railway/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.job-application-effects-dependencies-railway.txt)

## Package metadata

```json
{
  "layer": "integrations",
  "physicalArea": null,
  "primaryArea": "intelligence-and-research",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "integrations",
    "catalogKind": "integration",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Intelligence, research and applications](https://lssm.co/docs/areas/intelligence-and-research/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/integrations/job-application-effects-dependencies-railway/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/README.md",
  "blobSha": "31caefd0d673c9696e2229133eb84539c695fd77",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# Railway job-application effect dependencies

Production dependency package for isolated candidate application workers on Railway. It connects the managed effects composition to private Railway S3-compatible buckets and the candidate-scoped encrypted Postgres vault.

Railway buckets use virtual-hosted–style S3 URLs by default. The adapter requires an HTTPS endpoint, explicit bucket and region, static allowlisted environment reads, bounded object sizes, authenticated AES-GCM envelopes, and exact candidate key prefixes. Legacy path-style access is opt-in.

Objects are never exposed as public or presigned URLs to the browser executor. The worker reads the authorized document revision under FORCE RLS, downloads the exact encrypted object, validates and decrypts it transiently, and returns bytes only to Playwright upload handling.

Configure the allowlisted composition module as `@lssm-tech/integration.job-application-effects-dependencies-railway`. Required variables are `JOB_APPLICATION_DATABASE_URL`, `JOB_APPLICATION_DATABASE_ROLE`, `JOB_APPLICATION_MATERIAL_KEY_BASE64`, `JOB_APPLICATION_DOCUMENT_KEY_BASE64`, `JOB_APPLICATION_S3_ENDPOINT`, `JOB_APPLICATION_S3_REGION`, `JOB_APPLICATION_S3_BUCKET`, `JOB_APPLICATION_S3_ACCESS_KEY_ID`, and `JOB_APPLICATION_S3_SECRET_ACCESS_KEY`. `JOB_APPLICATION_S3_FORCE_PATH_STYLE` defaults to `false`; set it only for a legacy Railway bucket. `JOB_APPLICATION_S3_PREFIX` defaults to `candidate-documents/` and is extended with the exact candidate-scope fingerprint.

Deletion additionally supports `JOB_APPLICATION_INBOX_S3_PREFIX` and
`JOB_APPLICATION_EXPORT_S3_PREFIX`, defaulting to `candidate-inbox/` and
`candidate-exports/`. Every object reference must match the configured bucket
and exact candidate-scoped prefix. S3 deletion is idempotent; already-deleted
candidate vault or browser-handle secrets are also accepted as completed.

The material and document keys must be distinct deployment-owned 32-byte values encoded as canonical base64. Candidate secrets, browser connection values, workflow signatures, and verification keys are resolved from the candidate FORCE-RLS vault. Document metadata must be active, explicitly mandated by the application, allowed for the destination hostname, and bound to the exact encrypted object envelope before any S3 read is returned to Playwright.


## Declared capabilities

### Integration Job Application Effects Dependencies Railway

Capability ID: `package.lssm.tech.integration.job.application.effects.dependencies.railway`

Railway S3 and candidate-vault dependencies for managed job application effects.

Use cases:

- Adopt railway s3 and candidate-vault dependencies for managed job application effects

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/integration.job-application-effects-dependencies-railway package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "integration",
    "job",
    "application",
    "effects",
    "dependencies",
    "railway"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/document-store",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/environment",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/s3-client",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/vault-resolvers",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/workflow-stores",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "integrations",
  "kind": "integration",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    ".",
    "./document-store",
    "./environment",
    "./s3-client",
    "./vault-resolvers",
    "./workflow-stores"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.integration.job.application.effects.dependencies.railway",
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.effects.dependencies.railway",
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/document-store",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.effects.dependencies.railway",
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/environment",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.effects.dependencies.railway",
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/s3-client",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.effects.dependencies.railway",
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/vault-resolvers",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.effects.dependencies.railway",
    "from": "@lssm-tech/integration.job-application-effects-dependencies-railway/workflow-stores",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/integration.job-application-effects-dependencies-railway` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/index.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/default` — subpath `./default`
  - `unconditional`: `./src/default.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/default.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/deletion` — subpath `./deletion`
  - `unconditional`: `./src/deletion.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/deletion.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/document-store` — subpath `./document-store`
  - `unconditional`: `./src/document-store.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/document-store.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/environment` — subpath `./environment`
  - `unconditional`: `./src/environment.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/environment.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/s3-client` — subpath `./s3-client`
  - `unconditional`: `./src/s3-client.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/s3-client.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/vault-resolvers` — subpath `./vault-resolvers`
  - `unconditional`: `./src/vault-resolvers.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/vault-resolvers.ts); verified source file.

- `@lssm-tech/integration.job-application-effects-dependencies-railway/workflow-stores` — subpath `./workflow-stores`
  - `unconditional`: `./src/workflow-stores.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-effects-dependencies-railway/src/workflow-stores.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./default": {
      "types": "./dist/default.d.ts",
      "bun": "./dist/default.js",
      "node": "./dist/node/default.js",
      "default": "./dist/default.js"
    },
    "./deletion": {
      "types": "./dist/deletion.d.ts",
      "bun": "./dist/deletion.js",
      "node": "./dist/node/deletion.js",
      "default": "./dist/deletion.js"
    },
    "./document-store": {
      "types": "./dist/document-store.d.ts",
      "bun": "./dist/document-store.js",
      "node": "./dist/node/document-store.js",
      "default": "./dist/document-store.js"
    },
    "./environment": {
      "types": "./dist/environment.d.ts",
      "bun": "./dist/environment.js",
      "node": "./dist/node/environment.js",
      "default": "./dist/environment.js"
    },
    "./s3-client": {
      "types": "./dist/s3-client.d.ts",
      "bun": "./dist/s3-client.js",
      "node": "./dist/node/s3-client.js",
      "default": "./dist/s3-client.js"
    },
    "./vault-resolvers": {
      "types": "./dist/vault-resolvers.d.ts",
      "bun": "./dist/vault-resolvers.js",
      "node": "./dist/node/vault-resolvers.js",
      "default": "./dist/vault-resolvers.js"
    },
    "./workflow-stores": {
      "types": "./dist/workflow-stores.d.ts",
      "bun": "./dist/workflow-stores.js",
      "node": "./dist/node/workflow-stores.js",
      "default": "./dist/workflow-stores.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- `@aws-sdk/client-s3`: `^3.1135.0`
- [@lssm-tech/integration.job-application-browser](https://lssm.co/docs/packages/integration.job-application-browser/): `workspace:^`
- [@lssm-tech/integration.job-application-effects-managed](https://lssm.co/docs/packages/integration.job-application-effects-managed/): `workspace:^`
- [@lssm-tech/integration.job-application-managed-runtime](https://lssm.co/docs/packages/integration.job-application-managed-runtime/): `workspace:^`
- [@lssm-tech/integration.job-application-store](https://lssm.co/docs/packages/integration.job-application-store/): `workspace:^`
- [@lssm-tech/integration.provider-web-access](https://lssm.co/docs/packages/integration.provider-web-access/): `workspace:^`
- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.job-application-runtime](https://lssm.co/docs/packages/lib.job-application-runtime/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@types/bun`: `catalog:types`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "clean": "rimraf dist .turbo",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "test": "bun test",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Integration Job Application Effects Dependencies Railway documentation](https://www.npmjs.com/package/%40lssm-tech%2Fintegration.job-application-effects-dependencies-railway) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fintegration.job-application-effects-dependencies-railway",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/integration.job-application-effects-dependencies-railway.txt",
  "route": "/llms/integration.job-application-effects-dependencies-railway",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.job-application-effects-dependencies-railway.txt",
  "blobSha": "31caefd0d673c9696e2229133eb84539c695fd77",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```