autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/github-oauth-automation/references/conol-ai-registration.md

@@ -0,0 +1,45 @@
+# conol.ai Registration Notes
+
+## Service Overview
+- URL: https://conol.ai
+- Type: AI agent platform (knowledge base + agents)
+- Auth: Email/password + GitHub OAuth + Google OAuth
+
+## Registration Methods
+
+### Email/Password
+- Requires email verification
+- Verification emails go to Gmail SPAM folder
+- AnyMessage/temp-email services CANNOT read spam
+- Outlook/Hotmail/Rambler/Yandex — emails don't arrive at all
+- Gmail aliases (user+tag@gmail.com) — emails arrive but in spam
+- **Conclusion:** Email registration is NOT viable for automation
+
+### GitHub OAuth (RECOMMENDED)
+- Uses `https://github.com/login/oauth/authorize` with:
+  - client_id: `Ov23liVn4YyXEiW61yqL`
+  - redirect_uri: `https://conol.ai/api/auth/callback/github`
+  - scope: `read:user user:email`
+  - PKCE with S256
+  - state parameter (32 chars, base64url)
+- **Critical:** State is generated client-side by conol.ai's Next.js app and stored server-side. You CANNOT generate your own state — it must come from the browser-initiated OAuth flow.
+- Callback: `https://conol.ai/api/auth/callback/github?code=...&state=...`
+- After successful callback, user is redirected to conol.ai dashboard
+
+### Google OAuth
+- Blocked in cloud browsers (Google detects "insecure browser")
+
+## Account Structure
+- Each account gets: Chats, Notes, Skills & Memory, Connectors & Secrets
+- 8 quests on signup: earn +2400 credits total
+- Agent sandbox for code execution
+- Model: Claude Sonnet 5 (configurable)
+
+## API Access
+- No traditional API keys found
+- Agent sandbox can create HTTP servers (tested: "Build POST /chat API server on port 8080")
+- Sandbox is isolated cloud environment
+
+## Session Persistence
+- Browser sessions are NOT persistent across cloud browser restarts
+- Need to save cookies/tokens for reuse