@siteoshq/cli 1.8.0 → 1.9.0

package/README.md

@@ -1,7 +1,7 @@
 # SiteOS CLI
 
 `@siteoshq/cli` exposes one `siteos` binary for Auth, common Projects, Pulse, Cookie, Forms,
-Search, Trace, SEO and Integrations. This source prepares version 1.8.0; publishing is a separate release.
+Search, Trace, SEO and Integrations. This source prepares version 1.9.0; publishing is a separate release.
 Node.js 22 or newer is required.
 
 ## Install and authenticate
@@ -231,6 +231,12 @@ pnpm --dir packages/cli pack:check
 
 ## Cookie verification
 
+Before a new Cookie connection, `cookie terms show --json` returns the current service terms and
+the selected Organization's acceptance. After the owner or admin explicitly agrees to that
+document, use `cookie terms accept --version <reviewed-version> --confirm --json`, then read the
+status again. Setup and publication requests alone do not constitute agreement. These commands
+are available in CLI 1.9.0 and require the matching application release.
+
 CLI 1.2.0 adds `cookie schema`, `cookie validate --input draft.json`,
 `cookie regions resolve --country GB --source published` and `cookie restore --input restore.json`.
 Restore changes the draft only. Validation makes no write and reports a stale draft version.
@@ -298,7 +304,6 @@ A changed field requires a normal build/release, not a second hand-edited valida
 `forms deployment-key list|revoke` manages release keys; submission keys cannot publish.
 See the SiteOS Forms skill for the portable generator and version serialization contract.
 
-
 ## Website Analytics
 
 The source CLI includes `siteos analytics` for an explicitly connected Project environment. Check

package/dist/cli.js

@@ -9588,6 +9588,8 @@ var SERVICE_HELP = {
   cookie: `Manage Cookie for the selected SiteOS Project.
 
 Usage:
+  siteos cookie terms show [--json]
+  siteos cookie terms accept --version <reviewed-version> --confirm [--json]
   siteos cookie status [--json]
   siteos cookie installation [--json]
   siteos cookie schema [--json]
@@ -9600,7 +9602,8 @@ Usage:
   siteos cookie publish --input <publication.json> [--json]
   siteos cookie analytics [--range-days <7|30|90>] [--json]
 
-Start with siteos project use, then siteos project connect cookie.
+Start with siteos project use, then read and explicitly accept Cookie service terms before siteos project connect cookie.
+Accept only after an organization owner or admin has reviewed and authorized that exact version.
 Draft get returns the complete save payload including expectedDraftVersion.
 Publish input: {"expectedDraftVersion":1,"idempotencyKey":"a-unique-request-key"}.
 Saving a draft has no public effect. Publish activates the reviewed banner at Cookie Edge.`,
@@ -9653,6 +9656,8 @@ async function runServiceCommand(service, options) {
       strict: true,
       options: {
         json: { type: "boolean" },
+        confirm: { type: "boolean" },
+        version: { type: "string" },
         input: { type: "string" },
         environment: { type: "string" },
         "range-days": { type: "string" },
@@ -9683,6 +9688,8 @@ async function runServiceCommand(service, options) {
     const route = positionals.join(" ");
     const allowed = {
       cookie: {
+        "terms show": [],
+        "terms accept": ["version", "confirm"],
         status: [],
         installation: [],
         schema: [],
@@ -9736,8 +9743,15 @@ async function runServiceCommand(service, options) {
     const expectedDraftVersion = tracePublicationVersion(
       values["expected-draft-version"]
     );
+    const isCookieTerms = service === "cookie" && action === "terms";
+    if (isCookieTerms && subaction === "accept" && (!values.version || !values.confirm))
+      throw new Error(
+        "Read siteos cookie terms show, then explicitly pass --version <reviewed-version> --confirm."
+      );
     const runtime = commonProjectRuntime(options);
-    const common = service === "integrations" ? null : await commonServiceContext(
+    const common = service === "integrations" ? null : isCookieTerms ? await readCommonProject(options).then(
+      (context) => context ? { ...context, resourceId: "" } : null
+    ) : await commonServiceContext(
       options,
       service,
       values.environment
@@ -9798,7 +9812,12 @@ async function runServiceCommand(service, options) {
     const site = common ? `/sites/${encodeURIComponent(common.resourceId)}` : "";
     let result;
     if (service === "cookie") {
-      if (action === "status" && positionals.length === 1)
+      if (isCookieTerms)
+        result = subaction === "show" ? await request("/terms") : await request("/terms", "POST", {
+          version: values.version,
+          accepted: true
+        });
+      else if (action === "status" && positionals.length === 1)
         result = await request(site);
       else if (action === "schema") result = await request(`${site}/schema`);
       else if (action === "validate") {