# Scripts

## staging-smoke.sh

Post-deploy smoke helper for staging/production-like environments.

Usage:

```bash
./scripts/staging-smoke.sh https://rmcp.itexp.me
```

## authenticated-staging-smoke.sh

Browser-authenticated smoke helper for staging/production-like environments.

Required environment variables:

- `CRANK_STAGING_ADMIN_EMAIL`
- `CRANK_STAGING_ADMIN_PASSWORD`

Usage:

```bash
CRANK_STAGING_ADMIN_EMAIL=owner@example.com \
CRANK_STAGING_ADMIN_PASSWORD=secret \
./scripts/authenticated-staging-smoke.sh https://rmcp.itexp.me
```

## staging-note-block.sh

Helper that renders a ready-to-paste markdown block for
`docs/staging-regression-notes.md` after a real staging pass.

Usage:

```bash
./scripts/staging-note-block.sh rmcp.itexp.me abc1234 "codex + operator" partial
```

## load-openbao-env.sh

Logs in to OpenBao with AppRole and loads Community deploy/runtime secrets into a local shell env file.

Required environment variables:

- `BAO_ADDR`
- `BAO_ROLE_ID`
- `BAO_SECRET_ID`
- `OPENBAO_APP`

Optional environment variables:

- `OPENBAO_ENV_FILE`, defaults to `.openbao-env`

The script reads KV v2 secrets from mount `ci`:

- `shared/registry`
- `shared/deploy-ssh`
- `projects/${OPENBAO_APP}/deploy`
- `projects/${OPENBAO_APP}/runtime`

It also exposes `REGISTRY_USERNAME` and `REGISTRY_PASSWORD` as the workflow-compatible
aliases `DEPLOY_REGISTRY_USER` and `DEPLOY_REGISTRY_TOKEN`.