autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/windows-browser-automation/references/unjail-premium-accessor.md

@@ -0,0 +1,50 @@
+# unjail_premium_accessor.py — Usage Reference
+
+**Path:** `C:\Users\User\Desktop\GroveMind\unjail_premium_accessor.py`
+
+## Purpose
+Accesses premium.unjail.ai (TECH HAUS Workshop) using Supabase auth cookies.
+21 frameworks, 415+ techniques, S+ tier content.
+
+## Prerequisites
+- Fresh Supabase cookies (JWT expires after 3600s)
+- Python `requests` library
+
+## Quick check
+```bash
+python unjail_premium_accessor.py
+```
+Returns: 200 OK + framework list if cookies valid, else 307 redirect or 500.
+
+## Full dump
+```bash
+python unjail_premium_accessor.py --dump
+```
+Hits all known API routes: `/api/vault`, `/api/frameworks`, `/api/workshops`, `/api/materials`, `/api/library`, `/api/content`.
+
+## Cookie format
+```python
+C0 = 'base64-eyJhY2Nlc3NfdG9rZW4iOi...'  # ~4000 chars, part 1
+C1 = 'V9pZCI6ImZiM2M5ZDA4LTcwZGIt...'       # ~480 chars, part 2
+```
+Cookies are split because Chrome limits individual cookies to ~4096 bytes.
+
+## Key architecture facts
+- Auth: Discord OAuth → Supabase (project `bdpfsrtntrzlkefukxrx`)
+- Token: ES256 JWT, expires in 3600s
+- Refresh token: [REDACTED] from decoded JWT payload (`refresh_token` field)
+- Supabase anon key: NOT yet extracted — embedded in Next.js JS bundles, requires authenticated session to access
+- th_chunk_gate cookie: ThinkHub session gate, httpOnly=true, needed for 200 responses (without it → 500)
+- S+ tier frameworks: Lazarus Library, Direct Library Method, Reflexive Control, Echo Chamber
+
+## Token refresh (when anon key is known)
+```bash
+curl -X POST "https://bdpfsrtntrzlkefukxrx.supabase.co/auth/v1/token?grant_type=refresh_token" \
+  -H "apikey: <ANON_KEY>" \
+  -H "Content-Type: application/json" \
+  -d '{"refresh_token":"<REFRESH_TOKEN>"}'
+```
+
+## Known pitfall
+Cookies from this script (C0/C1) were last valid June 25-26, 2026. JWT expired June 26.
+Fresh Discord OAuth required to get new tokens.