Prune private deployment scripts

scripts/README.md

@@ -47,43 +47,6 @@ CRANK_STAGING_ADMIN_PASSWORD=secret \
 CRANK_PRODUCT_SMOKE_KEEP_ASSETS=1 ./scripts/authenticated-product-smoke.sh https://crank.example.com
 ```
 
-## `staging-note-block.sh`
-
-Генерирует markdown-блок для `docs/staging-regression-notes.md` после реального
-staging pass.
-
-```bash
-./scripts/staging-note-block.sh crank.example.com abc1234 "operator" partial
-```
-
-## `load-openbao-env.sh`
-
-Логинится в OpenBao через AppRole и выгружает deploy/runtime secrets в локальный
-shell env file.
-
-Обязательные переменные:
-
-- `BAO_ADDR`
-- `BAO_ROLE_ID`
-- `BAO_SECRET_ID`
-- `OPENBAO_APP`
-
-Опционально:
-
-- `OPENBAO_ENV_FILE`, default `.openbao-env`
-
-Скрипт читает KV v2 secrets из mount `ci`:
-
-- `shared/registry`
-- `shared/deploy-ssh`
-- `projects/${OPENBAO_APP}/deploy`
-- `projects/${OPENBAO_APP}/runtime`
-
-Также он создает workflow-compatible aliases:
-
-- `REGISTRY_USERNAME -> DEPLOY_REGISTRY_USER`
-- `REGISTRY_PASSWORD -> DEPLOY_REGISTRY_TOKEN`
-
 ## `check-rust-code-health.sh`
 
 Проверяет базовые правила сопровождаемости Rust-кода:

scripts/load-openbao-env.sh

@@ -1,86 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-: "${BAO_ADDR:?BAO_ADDR is required}"
-: "${BAO_ROLE_ID:?BAO_ROLE_ID is required}"
-: "${BAO_SECRET_ID:?BAO_SECRET_ID is required}"
-: "${OPENBAO_APP:?OPENBAO_APP is required}"
-
-output="${OPENBAO_ENV_FILE:-.openbao-env}"
-payload="$(mktemp)"
-merged="$(mktemp)"
-trap 'rm -f "$payload" "$merged"' EXIT
-
-export BAO_ADDR
-BAO_TOKEN="$(bao write -field=token auth/approle/login role_id="$BAO_ROLE_ID" secret_id="$BAO_SECRET_ID")"
-export BAO_TOKEN
-
-printf '{}\n' > "$merged"
-
-merge_secret() {
-  local path="$1"
-
-  bao kv get -mount=ci -format=json "$path" > "$payload"
-
-  python3 - "$payload" "$merged" <<'PY'
-import json
-import sys
-from pathlib import Path
-
-payload = json.loads(Path(sys.argv[1]).read_text(encoding="utf-8"))
-merged_path = Path(sys.argv[2])
-merged = json.loads(merged_path.read_text(encoding="utf-8"))
-
-data = payload.get("data", {})
-if isinstance(data, dict) and isinstance(data.get("data"), dict):
-    data = data["data"]
-
-if not isinstance(data, dict):
-    raise SystemExit("OpenBao response does not contain an object secret payload")
-
-merged.update({key: value for key, value in data.items() if value is not None})
-merged_path.write_text(json.dumps(merged), encoding="utf-8")
-PY
-}
-
-merge_secret "shared/registry"
-merge_secret "shared/deploy-ssh"
-merge_secret "projects/${OPENBAO_APP}/deploy"
-merge_secret "projects/${OPENBAO_APP}/runtime"
-
-python3 - "$merged" "$output" <<'PY'
-import json
-import re
-import shlex
-import sys
-from pathlib import Path
-
-data = json.loads(Path(sys.argv[1]).read_text(encoding="utf-8"))
-output_path = Path(sys.argv[2])
-
-if "REGISTRY_USERNAME" in data and "DEPLOY_REGISTRY_USER" not in data:
-    data["DEPLOY_REGISTRY_USER"] = data["REGISTRY_USERNAME"]
-
-if "REGISTRY_PASSWORD" in data and "DEPLOY_REGISTRY_TOKEN" not in data:
-    data["DEPLOY_REGISTRY_TOKEN"] = data["REGISTRY_PASSWORD"]
-
-name_re = re.compile(r"^[A-Za-z_][A-Za-z0-9_]*$")
-lines = [
-    "# Generated by scripts/load-openbao-env.sh",
-    "# Do not commit this file.",
-]
-
-for key in sorted(data):
-    if not name_re.match(key):
-        raise SystemExit(f"Unsupported environment variable name from OpenBao: {key}")
-    value = data[key]
-    if isinstance(value, bool):
-        value = "true" if value else "false"
-    elif not isinstance(value, str):
-        value = str(value)
-    lines.append(f"export {key}={shlex.quote(value)}")
-
-output_path.write_text("\n".join(lines) + "\n", encoding="utf-8")
-output_path.chmod(0o600)
-print(f"Loaded {len(lines) - 2} OpenBao values into {output_path}", file=sys.stderr)
-PY

scripts/staging-note-block.sh

@@ -1,55 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-
-if [[ $# -lt 3 ]]; then
-  echo "usage: $0 <environment> <deploy-commit> <checked-by> [smoke-status]" >&2
-  echo "example: $0 rmcp.itexp.me abc1234 \"codex + operator\" partial" >&2
-  exit 64
-fi
-
-ENVIRONMENT="$1"
-DEPLOY_COMMIT="$2"
-CHECKED_BY="$3"
-SMOKE_STATUS="${4:-partial}"
-STAMP="$(TZ="${TZ:-Europe/Moscow}" date '+%Y-%m-%d %H:%M %Z')"
-
-cat <<EOF
-## ${STAMP} — ${ENVIRONMENT} (authenticated pass)
-
-- deploy commit: \`${DEPLOY_COMMIT}\`
-- checked by: \`${CHECKED_BY}\`
-- smoke status: \`${SMOKE_STATUS}\`
-- scope:
-  - auth
-  - ui shell
-  - operations
-  - wizard
-  - agents
-  - api keys
-  - secrets
-  - logs
-  - usage
-  - rest smoke
-  - mcp smoke
-
-### Passed
-
-- login/logout completed
-- shell pages open after auth
-- secrets/auth profile flow status: \`<passed|partial|failed>\`
-- REST smoke: \`<passed|partial|failed>\`
-- MCP smoke: \`<passed|partial|failed>\`
-
-### Findings
-
-- none
-
-### Infra notes
-
-- ...
-
-### Follow-up
-
-- ...
-EOF