@theplato/tiro-cli 0.4.0 → 0.4.1

package/AGENTS.md

@@ -89,26 +89,15 @@ Two ways to authenticate:
 The CLI never prints tokens to stdout. `tiro auth status` shows only the
 first 4 characters of the access token.
 
-## Security regression suite (pre-deploy contract)
-
-Every release MUST keep `npm run test:security` green. The suite pins the
-following defenses; if any test breaks, the corresponding attack surface
-has reopened — do not publish.
-
-| ID | Surface | What the test guards |
-|---|---|---|
-| **C1** | `lib/config.ts` `validateHostname` | Rejects non-https/non-loopback hostnames so `TIRO_HOSTNAME` / `--hostname` cannot redirect OAuth + API traffic to an attacker. |
-| **H1** | `lib/auth/pkce.ts` `verifyState` | Constant-time OAuth state CSRF compare. |
-| **H2** | `lib/auth/loopback.ts` | OAuth redirect listener is GET-only, single-shot, `Connection: close` — local processes can't race or replay a callback. |
-| **H3** | `lib/api/client.ts` `buildApiUrl` | API path must be relative to the configured hostname — refuses absolute / protocol-relative input that would leak the bearer token. |
-| **H4** | `lib/config.ts` `getOauthClientId` | DCR `client_id` cache is bound to the hostname it was registered against; a swapped hostname misses the cache. |
-| **M1** | `lib/output/file.ts` `assertSafeOutputPath` | `--output` rejects `..` segments unless `--force`; an agent forwarding untrusted input cannot escape its scope. |
-| **M2** | `lib/auth/token.ts` `decodeJwtPayload` | Documented as display-only — claims must never gate auth, scope, identity, or expiry decisions. |
-
-Pre-deploy checklist:
-
-1. `npm run typecheck`
-2. `npm run test:security` (regression gate)
-3. `npm test` (full suite)
-4. `npm run build`
-5. Smoke: `node dist/bin/tiro.js auth status`
+## Security posture (summary)
+
+- OAuth uses Authorization Code + PKCE with a CSRF-checked loopback
+  redirect. Tokens are held in the OS keychain or `TIRO_TOKEN` only —
+  never written to stdout, stderr, or disk in any other form.
+- `TIRO_HOSTNAME` / `--hostname` are validated against an `https://` (or
+  loopback) allowlist before any OAuth or API request runs.
+- `--output` paths that escape the working tree require `--force`.
+- A dedicated regression suite (`npm run test:security`) pins these
+  surfaces and runs in `prepublishOnly` — a broken defense blocks publish.
+
+Always run on the latest released version; older versions are deprecated.

package/README.md

@@ -108,7 +108,7 @@ tiro notes list
 ```bash
 tiro notes list                                              # pretty table in TTY
 tiro notes list --json                                       # NDJSON for pipes
-tiro notes list --keyword "OKR" --since 30d                  # OpenSearch reorder by keyword
+tiro notes list --keyword "OKR" --since 30d                  # Reorder by keyword relevance
 tiro notes list --folder <id> --limit 100 --cursor <token>
 ```
 
@@ -287,7 +287,7 @@ The CLI sits on the public Tiro API alongside the MCP server, sharing the same O
 
 ```
                     ┌──────────────────────────────┐
-                    │ Tiro Backend (Kotlin)         │
+                    │ Tiro Backend                  │
                     │  /v1/external/* + /v1/mcp/*   │
                     └──────────────┬────────────────┘
                                    │

package/dist/bin/tiro.js

@@ -1198,17 +1198,18 @@ Examples:
   tiro notes list --folder <id> --limit 50
 
 Keyword matching:
-  --keyword reorders results by OpenSearch relevance (case-insensitive,
-  full-text against note title and paragraph content). When --keyword is
-  set, nextCursor is always null. Without --keyword, results are ordered
-  by createdAt desc.
+  --keyword reorders results by full-text relevance over title and
+  paragraph content (case-insensitive), with createdAt desc as tiebreaker
+  when scores are close. When --keyword is set, nextCursor is always null.
+  Without --keyword, results are ordered by recording time desc (falls back
+  to createdAt for memo-only notes).
 
 Note: placeholder notes (title='Untitled' or sourceType='onboarding') are
 filtered out by default. A page of N may return fewer than N visible notes \u2014
 keep paginating to fetch more, or pass --include-untitled to surface them.
 `;
 function registerNotesList(parent) {
-  parent.command("list").description("List notes (lightweight metadata).").option("--keyword <text>", 'Reorder by OpenSearch relevance for this keyword (e.g. "OKR")').option("--folder <id>", "Restrict to a folder and its descendants").option(
+  parent.command("list").description("List notes (lightweight metadata).").option("--keyword <text>", 'Reorder by full-text relevance for this keyword (e.g. "OKR")').option("--folder <id>", "Restrict to a folder and its descendants").option(
     "--since <date>",
     "Inclusive lower bound on createdAt (ISO-8601 or relative: 7d, 24h, 30m)"
   ).option("--until <date>", "Exclusive upper bound on createdAt").option(
@@ -1307,12 +1308,16 @@ Examples:
   tiro notes search "release" --since 2026-04-01 --until 2026-05-01
 
 Keyword matching:
-  Full-text against note title + paragraph content via OpenSearch.
-  Case-insensitive. Multi-word keywords are tokenized \u2014 "OKR planning"
-  matches notes containing both terms. The deep search variant (this
-  command) hydrates each result with its primary documents (one-pager,
-  custom) so an MCP/LLM client can read content alongside metadata in
-  one call.
+  Full-text search against note title + paragraph content. Case-insensitive.
+  Multi-word keywords are tokenized \u2014 "OKR planning" matches notes containing
+  both terms. The deep search variant (this command) hydrates each result
+  with its primary documents (one-pager, custom) so an MCP/LLM client can
+  read content alongside metadata in one call.
+
+Ordering:
+  Results are sorted by full-text relevance, then createdAt desc as
+  tiebreaker. Without --limit, the server returns 50 results (capped
+  at 200). Pass --limit to override.
 
 Note: placeholder notes (title='Untitled' or sourceType='onboarding') are
 filtered out by default. Pass --include-untitled to surface them.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theplato/tiro-cli",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Tiro AI notes & transcripts — agent-first command line",
   "type": "module",
   "bin": {