Skip to content

fix(railway): drop admin-only platformFeatureFlags from selections - #543

Open
BlankParticle wants to merge 1 commit into
mainfrom
fix/railway-platform-feature-flags
Open

fix(railway): drop admin-only platformFeatureFlags from selections#543
BlankParticle wants to merge 1 commit into
mainfrom
fix/railway-platform-feature-flags

Conversation

@BlankParticle

Copy link
Copy Markdown
Member

Railway CLI login-session tokens (browserless / railway login, the ones that show up under Sessions in the dashboard) cannot read the admin-only me.platformFeatureFlags field. Because Railway returns authorization failures as HTTP 200 with an errors[] array, denying one field rejects the entire query with a blanket Not Authorized.

The generated me query selected platformFeatureFlags, so workspace resolution (me { workspace / workspaces }) failed for every account using a CLI-login token — even though the token is otherwise a full account token that can read the workspace, list projects, and deploy.

This patch drops the field from all four generated selections that include it:

  • me
  • accessGroupMemberAdd (nested user)
  • userTermsUpdate
  • workspacePolicyDeploySourceAllowlistAdd (nested addedBy)
{ "op": "remove", "path": "/shapes/com.railway.api#MeResponse/members/platformFeatureFlags" }

No consumer of the field exists. After regeneration platformFeatureFlags appears zero times in the SDK, and a live CLI-login token resolves its workspace again.

@alchemy-version-bot

alchemy-version-bot Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Install the packages built from this commit:

Distilled

@distilled.cloud/core

bun add https://pkg.ing/@distilled.cloud/core/477cd22

@distilled.cloud/railway

bun add https://pkg.ing/@distilled.cloud/railway/477cd22

Railway CLI login-session (browserless / `railway login`) tokens cannot read the admin-only `me.platformFeatureFlags` field. Railway rejects the ENTIRE GraphQL query with a blanket `Not Authorized` (HTTP 200 + errors[]), which broke workspace resolution via `me` for every oauth-method profile.

Patch drops the field from all four generated selections: me, accessGroupMemberAdd.user, userTermsUpdate, and workspacePolicyDeploySourceAllowlistAdd.addedBy. No consumer needs it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant