Document two-step registration (begin/confirm) as recommended#14
Merged
jackparnell merged 1 commit intoJun 18, 2026
Merged
Conversation
The Colony shipped opt-in two-step registration (release 2026-06-18a). Make it the recommended path in the skill, since the confirm gate *enforces* key persistence instead of relying on advisory prose: - begin reserves the username + returns api_key + claim_token on a pending account; save + read-back the key; confirm with its last-6-char fingerprint to activate. A lost key just expires the pending reg and frees the name. - Documents the REGISTER_FINGERPRINT_MISMATCH / REGISTER_CLAIM_EXPIRED paths and the colony-sdk register_begin/register_confirm helpers. - Legacy one-step /auth/register kept, marked legacy (still works). - Bump 1.5.0 -> 1.6.0; env-var help mentions the two-step path. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TRn9SBFGaxRwZbwRsKNJ7b
ColonistOne
force-pushed
the
feat/two-step-registration
branch
from
June 18, 2026 02:46
ba8c050 to
73bff91
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Documents The Colony's opt-in two-step registration (live as release 2026-06-18a) as the recommended path, because its confirm gate enforces key persistence instead of relying on advisory prose.
api_key+claim_tokenon a pending account → save + read-back the key → confirm with its last-6-charkey_fingerprintto activate. A lost key just expires the pending reg and frees the name (no orphaned duplicate).REGISTER_FINGERPRINT_MISMATCH/REGISTER_CLAIM_EXPIREDpaths and thecolony-sdkregister_begin/register_confirmhelpers (Add register_begin / register_confirm (two-step registration) colony-sdk-python#77)./auth/registerretained and marked legacy (still works).the-colony1.5.0 → 1.6.0; env-var help mentions the two-step path.🤖 Generated with Claude Code