@siteoshq/cli 1.1.0 → 1.2.0

package/README.md

@@ -1,7 +1,7 @@
 # SiteOS CLI
 
 `@siteoshq/cli` exposes one `siteos` binary for Auth, common Projects, Pulse, Cookie, Forms,
-Search, Trace and Integrations. This source prepares version 1.1.0; publishing is a separate release.
+Search, Trace and Integrations. This source prepares version 1.2.0; publishing is a separate release.
 Node.js 22 or newer is required.
 
 ## Install and authenticate
@@ -20,6 +20,24 @@ The one-time token is secret. Only `auth complete` receives it. The durable sess
 privately in `~/.siteos/auth.json`. Product commands exchange it for short-lived, audience-bound
 grants; the durable session never reaches a product endpoint.
 
+## Hosted origins
+
+CLI 1.2.0 defaults to `https://app.siteos.sh` for Auth and every service. Existing credentials
+and repository bindings retain their selected origin; sign in again when moving installations.
+Never copy private state between production and staging.
+
+For the separate SiteOS staging installation, set all four overrides before authentication:
+
+```sh
+export SITEOS_AUTH_BASE_URL=https://siteosapp.xui.se
+export SITEOS_PULSE_API_URL=https://siteosapp.xui.se
+export SITEOS_FORMS_PUBLIC_URL=https://siteosapp.xui.se
+export SITEOS_SEARCH_PUBLIC_URL=https://siteosapp.xui.se
+```
+
+These select the SiteOS installation. A Project's Production or Staging Environment is a separate,
+project-level selection inside that installation.
+
 ## Select one Project
 
 From the website repository:
@@ -141,7 +159,7 @@ Organization and tracked Pulse slug agree. It leaves the original file untouched
 ## Origins and errors
 
 `SITEOS_AUTH_BASE_URL` selects the shared application origin for common Projects and all service
-commands using that context (default `https://siteoapp.xui.se`). The legacy service flows retain
+commands using that context (default `https://app.siteos.sh`). The legacy service flows retain
 `SITEOS_PULSE_API_URL`, `SITEOS_FORMS_PUBLIC_URL` and `SITEOS_SEARCH_PUBLIC_URL` overrides. Runtime
 integration uses its service's configured public URL and scoped credential.
 
@@ -165,3 +183,22 @@ pnpm --dir packages/cli pack:check
 ```
 
 `pack:check` creates the publishable tarball locally. It does not publish the package.
+
+## Cookie verification
+
+CLI 1.2.0 adds `cookie schema`, `cookie validate --input draft.json`,
+`cookie regions resolve --country GB --source published` and `cookie restore --input restore.json`.
+Restore changes the draft only. Validation makes no write and reports a stale draft version.
+
+From the selected website repository, run `siteos cookie verify --json` or
+`siteos cookie verify --url /pricing --browser webkit --json`. Install the matching local browser
+when requested with `npx playwright@1.61.1 install chromium` or `npx playwright@1.61.1 install webkit`.
+The check opens fresh contexts, exercises the public consent API and reports request origins and
+storage names without values, query strings, request bodies or authenticated sessions. These are
+real visits; normal installation/aggregate signals may be recorded. Reports remain local.
+
+A report records the revision, runtime, observed Edge location, scenario scope and 24-hour expiry.
+`passed` exits 0; `needs-review` and `failed` exit 1. Unknown origins/storage require classification.
+The check covers one route and a bounded observation window, not hidden first-party/server-side
+tracking, every delayed interaction, visual accessibility or legal compliance. Repeat after
+website/publication changes and preserve a separate GTM Tag Assistant check where applicable.