feat(scripts): submit public miner profile metadata signed with the coldkey#295
Merged
Conversation
…oldkey One-shot script for miner operators: sign a metadata payload (display name, avatar, social handles) with the coldkey and submit it to the miner dashboard API, which verifies the sr25519 signature as proof of ownership. Adds a miner-tutorial section documenting usage and field constraints. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Adds a miner-operator workflow for publishing public profile metadata (display name, avatar, social handles) by signing a canonical payload with the coldkey and submitting it to the dashboard API, plus documentation to guide miners through setup.
Changes:
- Introduces a one-shot Python script to sign and submit (or delete) miner profile metadata to the dashboard API.
- Extends the miner tutorial with a new section describing usage and field constraints.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| scripts/submit_miner_profile.py | New CLI script to sign coldkey-owned profile metadata and PUT it to the dashboard API. |
| docs/miner_tutorial.md | Adds tutorial section explaining how to run the new submission script and constraints. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sixth metadata field: an arbitrary https:// URL (any host). Requires the dashboard API deploy that accepts it; older deployments reject payloads containing it with 401 (the signed hash includes the field). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Miners can now attach public identity metadata to their coldkey — display name, avatar image, and twitter/discord/linkedin handles — shown on their miner profile page on the dashboard. Ownership is proven with an sr25519 signature made with the coldkey: no account or API key.
scripts/submit_miner_profile.py— one-shot submission script for miner operators. Run it on whatever machine holds the coldkey (the key never leaves the machine; only the signature is sent). It builds a canonical JSON of the fields, signssynth-profile-metadata|v1|{coldkey}|{unix_ts}|{sha256(payload)}withwallet.coldkey, and PUTs it to the miner dashboard API.WALLET_PASSis supported to skip the decrypt prompt. Every submission replaces all five fields (omitted = cleared);--deleteremoves the metadata entirely.docs/miner_tutorial.md— new section "5. Set up your public miner profile" with usage, field constraints, and the coldkey note.Field constraints (enforced server-side): display name ≤ 40 printable chars; twitter/discord bare handles ≤ 64 chars of
[A-Za-z0-9_.\-#]; avatar/linkedinhttps://URLs ≤ 300 chars, linkedin pinned tolinkedin.com.Verification
black --check/flake8clean.--delete→ 200 and it's gone; wrong wallet, unknown coldkey, stale timestamp, replayed timestamp, and invalid fields are all rejected with the documented status codes.🤖 Generated with Claude Code