From cf83ce683b97f4c443acdd57db9f1edec2621104 Mon Sep 17 00:00:00 2001
From: Bryan Helmkamp <bryan@brynary.com>
Date: Sat, 25 Apr 2026 12:33:03 -0400
Subject: [PATCH] chore: remove legacy FABRO_JWT_* key generation script

SESSION_SECRET is the sole auth root; the JWT keypair env vars are no
longer part of the runtime auth model.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .env.example                 |  3 ---
 bin/ops/generate-jwt-keys.sh | 15 ---------------
 2 files changed, 18 deletions(-)
 delete mode 100755 bin/ops/generate-jwt-keys.sh

diff --git a/.env.example b/.env.example
index 59127f810..5645f195f 100644
--- a/.env.example
+++ b/.env.example
@@ -8,9 +8,6 @@ MINIMAX_API_KEY=
 OPENAI_API_KEY=
 ZAI_API_KEY=
 
-FABRO_JWT_PRIVATE_KEY=
-FABRO_JWT_PUBLIC_KEY=
-
 SESSION_SECRET=
 GITHUB_APP_CLIENT_SECRET=
 GITHUB_APP_WEBHOOK_SECRET=
diff --git a/bin/ops/generate-jwt-keys.sh b/bin/ops/generate-jwt-keys.sh
deleted file mode 100755
index d31210f8c..000000000
--- a/bin/ops/generate-jwt-keys.sh
+++ /dev/null
@@ -1,15 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-openssl genpkey -algorithm Ed25519 -out fabro-jwt-private.pem
-openssl pkey -in fabro-jwt-private.pem -pubout -out fabro-jwt-public.pem
-
-echo ""
-echo "Generated:"
-echo "  fabro-jwt-private.pem  (private key — for fabro-web / FABRO_JWT_PRIVATE_KEY)"
-echo "  fabro-jwt-public.pem   (public key  — for fabro-workflow / FABRO_JWT_PUBLIC_KEY)"
-echo ""
-echo "Set env vars with the PEM contents (including header/footer lines):"
-echo ""
-echo '  export FABRO_JWT_PRIVATE_KEY="$(cat fabro-jwt-private.pem)"'
-echo '  export FABRO_JWT_PUBLIC_KEY="$(cat fabro-jwt-public.pem)"'