autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/ai-freebie-scanner/references/nodeloc-cookie-format.md

@@ -0,0 +1,48 @@
+# NodeLoc Cookie Format
+
+## Required cookies
+
+| Cookie | Type | Domain | HttpOnly | Secure | Session | Purpose |
+|--------|------|--------|----------|--------|---------|---------|
+| _forum_session | session | www.nodeloc.com | yes | yes | yes | Main auth session |
+| _t | persistent | www.nodeloc.com | yes | yes | no | Long-lived token (~1 year) |
+| __stripe_mid | persistent | .www.nodeloc.com | no | yes | no | Stripe tracking |
+| __stripe_sid | persistent | .www.nodeloc.com | no | yes | no | Stripe session |
+| _bypass_cache | session | www.nodeloc.com | no | no | yes | Cache bypass flag |
+
+## Extraction from browser
+
+Export cookies from browser (EditThisCookie extension or similar JSON format), then map to Python dict:
+
+```python
+NODELOC_COOKIES = {
+    "_forum_session": "<value>",
+    "_t": "<value>",
+    "__stripe_mid": "<value>",
+    "__stripe_sid": "<value>",
+    "_bypass_cache": "true",
+}
+```
+
+Values are URL-encoded (e.g. `%2B` for `+`, `%2F` for `/`). Do NOT decode — pass as-is.
+
+## Expiration
+
+- `_forum_session` — session cookie, dies when browser closes
+- `_t` — expires ~1 year from issue (check `expirationDate` in JSON)
+- `__stripe_mid` — ~1 year
+- `__stripe_sid` — ~30 days
+
+## Format in scanner.py
+
+```python
+NODELOC_COOKIES = {
+    "__stripe_mid": "2f6ae8f0-...",
+    "__stripe_sid": "dc820df4-...",
+    "_bypass_cache": "true",
+    "_forum_session": "UFIeORa2dELV...",
+    "_t": "fBq98ACHkgbd...",
+}
+```
+
+Then used as: `session.get(url, cookies=NODELOC_COOKIES, ...)`