autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/atxp-autoreg/references/jwt-token-format.md

@@ -0,0 +1,51 @@
+# ATXP Web Registration — JWT Token Format
+
+Web-регистрация через accounts.atxp.ai (Privy + HuskMail) даёт JWT токены.
+
+## JWT Structure
+
+```
+Header:  {"alg":"RS256","typ":"JWT","kid":"R2Gfh6KKf8-8wgJcuG8FyDbbj2KXTK71rymu8y0mP1I"}
+Payload: {"iss":"https://auth.atxp.ai","sub":"atxp_acct_XXX","aud":"abundance_consumer",
+          "exp":...,"iat":...,"email":"...@huskmail.xyz","email_verified":true,
+          "atxp_connection_token":"K72U7WT8ndH3oLWCnVlm1",
+          "org":{"id":"personal_atxp_acct_XXX","name":"Personal","role":"owner"}}
+```
+
+## Decoding (Python)
+
+```python
+import base64, json
+
+parts = token.split('.')
+payload = parts[1] + '=='
+data = json.loads(base64.urlsafe_b64decode(payload))
+
+account_id = data['sub']                    # atxp_acct_XXX
+connection_token = data['atxp_connection_token']  # The actual token
+email = data['email']                       # dasdas@huskmail.xyz
+org = data.get('org', {})                   # org info (main accounts only)
+```
+
+## Key Fields
+
+| Field | Agent (CLI) | Main (Web) |
+|-------|-------------|------------|
+| `aud` | `abundance_consumer` | `abundance_consumer` |
+| `org` | absent | `{id, name, role}` |
+| `email_verified` | true | true |
+| `exp` | 1h from iat | 1h from iat |
+| Balance | $0 IOU | $10.55-$10.75 |
+
+## Connection String
+
+```
+https://accounts.atxp.ai?connection_token={atxp_connection_token}&account_id={sub}
+```
+
+## Usage
+
+- `npx atxp login --token "CONNECTION_STRING"` — CLI login
+- `Authorization: Bearer CONNECTION_STRING` — MCP/LLM API
+- JWT itself NOT accepted by LLM Gateway (401)
+- Connection string works for MCP, LLM Gateway (restricted), CLI