pnote 0.2.1 → 0.4.0

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command8 } from "commander";
+import { Command as Command10 } from "commander";
 
 // src/lib/errors.ts
 import pc from "picocolors";
@@ -311,6 +311,16 @@ async function search(params, options = {}) {
   if (params.limit) query.set("limit", String(params.limit));
   return callRestApi("GET", `/search?${query.toString()}`, void 0, options);
 }
+async function checkPinStatus(options = {}) {
+  return callRestApi("GET", "/pin/status", void 0, options);
+}
+async function listProtectedNotes(params = {}, options = {}) {
+  const query = new URLSearchParams();
+  if (params.limit) query.set("limit", String(params.limit));
+  if (params.offset) query.set("offset", String(params.offset));
+  const queryString = query.toString();
+  return callRestApi("GET", `/pin/notes${queryString ? `?${queryString}` : ""}`, void 0, options);
+}
 async function listSharedTags(options = {}) {
   return callRestApi("GET", "/share/tags", void 0, options);
 }
@@ -455,7 +465,7 @@ authCommand.command("logout").description("Remove stored credentials").action(lo
 authCommand.command("whoami").description("Show current authenticated user").action(whoamiAction);
 
 // src/commands/notes/index.ts
-import { Command as Command2 } from "commander";
+import { Command as Command3 } from "commander";
 
 // src/lib/output.ts
 import pc6 from "picocolors";
@@ -554,9 +564,10 @@ function outputNotes(notes, ctx) {
     }
   }
 }
-function outputNote(note, snippet, ctx) {
+function outputNote(note, snippets, ctx) {
+  const latestSnippet = snippets.length > 0 ? snippets[snippets.length - 1] : null;
   if (ctx.json) {
-    outputJson({ ...note, latest_snippet: snippet });
+    outputJson({ ...note, snippets, latest_snippet: latestSnippet });
     return;
   }
   const c = getColors(ctx);
@@ -573,21 +584,24 @@ function outputNote(note, snippet, ctx) {
     if (status.length > 0) {
       console.log(c.dim("Status: ") + status.join(", "));
     }
-    if (snippet) {
-      console.log("");
-      console.log(c.dim(`--- Snippet v${snippet.version} ---`));
-      console.log(snippet.content);
-    } else {
+    if (snippets.length === 0) {
       console.log("");
       console.log(c.dim("(no content)"));
+    } else {
+      for (const snippet of snippets) {
+        const header = `v${snippet.version}` + (snippet.favorite ? c.yellow(" \u2605") : "") + c.dim(` (${formatRelativeTime(snippet.created_at)})`);
+        console.log("");
+        console.log(c.dim("--- Snippet ") + c.bold(header) + c.dim(" ---"));
+        console.log(snippet.content);
+      }
     }
   } else {
     console.log(`Title: ${note.title}`);
     console.log(`ID: ${note.id}`);
     console.log(`Tags: ${note.tags.join(", ")}`);
-    if (snippet) {
+    for (const snippet of snippets) {
       console.log("");
-      console.log(snippet.content);
+      console.log(`v${snippet.version}	${snippet.content}`);
     }
   }
 }
@@ -828,6 +842,7 @@ async function listNotesAction(options, ctx) {
         archived: options.archived ?? false,
         pinned: options.pinned,
         deleted: options.deleted ?? false,
+        protected: options.protected,
         search: options.search,
         limit: options.limit ? parseInt(options.limit, 10) : 50
       },
@@ -844,13 +859,14 @@ async function listNotesAction(options, ctx) {
 }
 
 // src/commands/notes/get.ts
-async function getNoteAction(id, ctx) {
+async function getNoteAction(id, options, ctx) {
   try {
     const result = await getNote(id, { pin: ctx.pin });
     if (!result) {
       throw new NotFoundError("Note", id);
     }
-    outputNote(result, result.latest_snippet, ctx);
+    const snippets = options.latest ? result.latest_snippet ? [result.latest_snippet] : [] : result.snippets || [];
+    outputNote(result, snippets, ctx);
     if (result.protection_status?.error && !ctx.json) {
       console.error("");
       console.error("Warning: " + result.protection_status.error);
@@ -1001,224 +1017,8 @@ async function updateNoteAction(id, options, ctx) {
   }
 }
 
-// src/lib/pin.ts
-import { createInterface as createInterface2 } from "readline";
-import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, statSync } from "fs";
-import { tmpdir } from "os";
-import { join as join2 } from "path";
-import pc8 from "picocolors";
-var PIN_CACHE_TTL_MS = 5 * 60 * 1e3;
-var PIN_MAX_ATTEMPTS = 3;
-function getPinCachePath() {
-  const uid = process.getuid?.() ?? "unknown";
-  return join2(tmpdir(), `pnote-pin-${uid}`);
-}
-function getCachedPin() {
-  const cachePath = getPinCachePath();
-  if (!existsSync2(cachePath)) {
-    return null;
-  }
-  try {
-    const stat = statSync(cachePath);
-    const age = Date.now() - stat.mtimeMs;
-    if (age > PIN_CACHE_TTL_MS) {
-      unlinkSync2(cachePath);
-      return null;
-    }
-    const content = readFileSync2(cachePath, "utf-8").trim();
-    return content || null;
-  } catch {
-    return null;
-  }
-}
-function setCachedPin(pin) {
-  const cachePath = getPinCachePath();
-  try {
-    writeFileSync2(cachePath, pin, { mode: 384 });
-  } catch {
-  }
-}
-async function readPinFromStdin() {
-  const chunks = [];
-  for await (const chunk of process.stdin) {
-    chunks.push(chunk);
-    const content2 = Buffer.concat(chunks).toString("utf-8");
-    if (content2.includes("\n")) {
-      break;
-    }
-  }
-  const content = Buffer.concat(chunks).toString("utf-8");
-  const firstLine = content.split("\n")[0]?.trim() || "";
-  if (!firstLine) {
-    throw new Error("No PIN provided via stdin");
-  }
-  return firstLine;
-}
-async function promptForPin(noteTitle, hint, maxAttempts = PIN_MAX_ATTEMPTS) {
-  if (!process.stdin.isTTY) {
-    return null;
-  }
-  if (noteTitle) {
-    console.error(pc8.yellow("\u{1F512}") + ` Note "${noteTitle}" is PIN-protected.`);
-  } else {
-    console.error(pc8.yellow("\u{1F512}") + " This action requires your PIN.");
-  }
-  if (hint) {
-    console.error(pc8.dim(`Hint: ${hint}`));
-  }
-  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-    const pin = await readPinHidden(
-      attempt > 1 ? `Enter PIN (${attempt}/${maxAttempts}): ` : "Enter PIN: "
-    );
-    if (pin) {
-      return pin;
-    }
-    if (attempt < maxAttempts) {
-      console.error(pc8.red("Invalid or empty PIN. Try again."));
-    }
-  }
-  console.error(pc8.red("Too many attempts."));
-  return null;
-}
-async function readPinHidden(prompt) {
-  return new Promise((resolve2) => {
-    const rl = createInterface2({
-      input: process.stdin,
-      output: process.stderr,
-      terminal: true
-    });
-    if (process.stdin.isTTY) {
-      process.stdin.setRawMode?.(true);
-    }
-    process.stderr.write(prompt);
-    let pin = "";
-    const onKeypress = (key) => {
-      const char = key.toString();
-      if (char === "\r" || char === "\n") {
-        process.stderr.write("\n");
-        cleanup();
-        resolve2(pin);
-      } else if (char === "") {
-        process.stderr.write("\n");
-        cleanup();
-        process.exit(130);
-      } else if (char === "\x7F" || char === "\b") {
-        if (pin.length > 0) {
-          pin = pin.slice(0, -1);
-          process.stderr.write("\b \b");
-        }
-      } else if (char.length === 1 && char >= " ") {
-        pin += char;
-        process.stderr.write("*");
-      }
-    };
-    const cleanup = () => {
-      process.stdin.removeListener("data", onKeypress);
-      if (process.stdin.isTTY) {
-        process.stdin.setRawMode?.(false);
-      }
-      rl.close();
-    };
-    process.stdin.on("data", onKeypress);
-  });
-}
-async function resolvePin(options) {
-  const { pinArg, pinFromStdin, noteTitle, hint, skipCache, skipPrompt } = options;
-  if (pinArg) {
-    return pinArg;
-  }
-  if (pinFromStdin) {
-    try {
-      return await readPinFromStdin();
-    } catch {
-      return null;
-    }
-  }
-  const envPin = process.env.PNOTE_PIN;
-  if (envPin) {
-    return envPin;
-  }
-  if (!skipCache) {
-    const cached = getCachedPin();
-    if (cached) {
-      return cached;
-    }
-  }
-  if (!skipPrompt && process.stdin.isTTY) {
-    const pin = await promptForPin(noteTitle, hint);
-    if (pin) {
-      setCachedPin(pin);
-      return pin;
-    }
-  }
-  return null;
-}
-
-// src/commands/notes/index.ts
-async function buildContext(globalOpts) {
-  const pin = await resolvePin({
-    pinArg: globalOpts.pin,
-    pinFromStdin: globalOpts.pinStdin,
-    skipPrompt: true
-    // Don't prompt interactively for list/search operations
-  });
-  return {
-    json: globalOpts.json ?? false,
-    noColor: globalOpts.noColor ?? false,
-    plain: globalOpts.plain ?? false,
-    pin: pin ?? void 0
-  };
-}
-var notesCommand = new Command2("notes").description("List and manage notes").option("--tag <tag>", 'Filter by tag (e.g., "AI/art")').option("--archived", "Show archived notes").option("--pinned", "Show only pinned notes").option("--deleted", "Show deleted notes").option("--search <query>", "Search notes by title").option("--limit <n>", "Limit number of results", "50").action(async (options, cmd) => {
-  const globalOpts = cmd.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await listNotesAction(options, ctx);
-}).addHelpText(
-  "after",
-  `
-Examples:
-  $ pnote notes                    List all active notes
-  $ pnote notes --tag "AI/art"     Filter by tag
-  $ pnote notes --archived         Show archived notes
-  $ pnote notes --pinned           Show only pinned notes
-  $ pnote notes get abc123         Get note details
-  $ pnote notes create "My Note"   Create a new note
-  $ pnote notes update abc123 --title "New Title"
-`
-);
-notesCommand.command("get").description("Get a note with its latest snippet").argument("<id>", "Note ID").action(async (id, _options, cmd) => {
-  const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await getNoteAction(id, ctx);
-});
-notesCommand.command("create").description("Create a new note").argument("<title>", "Note title").option("--tags <tags...>", "Tags for the note").option("--content <content>", "Initial snippet content").action(async (title, options, cmd) => {
-  const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await createNoteAction(title, options, ctx);
-});
-notesCommand.command("archive").description("Archive or unarchive a note").argument("<id>", "Note ID").option("--undo", "Unarchive the note").action(async (id, options, cmd) => {
-  const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await archiveNoteAction(id, options, ctx);
-});
-notesCommand.command("pin").description("Pin or unpin a note").argument("<id>", "Note ID").action(async (id, _options, cmd) => {
-  const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await pinNoteAction(id, ctx);
-});
-notesCommand.command("update").description("Update a note title or tags").argument("<id>", "Note ID").option("--title <title>", "New title").option("--tags <tags...>", "New tags (replaces existing)").action(async (id, options, cmd) => {
-  const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await updateNoteAction(id, options, ctx);
-});
-notesCommand.command("delete").description("Delete a note (soft delete)").argument("<id>", "Note ID").option("--force", "Skip confirmation").action(async (id, options, cmd) => {
-  const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext(globalOpts);
-  await deleteNoteAction(id, options, ctx);
-});
-
-// src/commands/snippet/index.ts
-import { Command as Command3 } from "commander";
+// src/commands/notes/snippetCmd.ts
+import { Command as Command2 } from "commander";
 
 // src/commands/snippet/show.ts
 async function showSnippetAction(noteId, options, ctx) {
@@ -1246,7 +1046,7 @@ async function showSnippetAction(noteId, options, ctx) {
 }
 
 // src/commands/snippet/copy.ts
-import pc9 from "picocolors";
+import pc8 from "picocolors";
 
 // src/lib/clipboard.ts
 import { default as clipboardy } from "clipboardy";
@@ -1297,7 +1097,7 @@ async function copySnippetAction(noteId, options, ctx) {
       }
     } catch (clipboardError) {
       if (!ctx.json) {
-        console.error(pc9.yellow("Clipboard not available, printing to stdout:"));
+        console.error(pc8.yellow("Clipboard not available, printing to stdout:"));
         console.error("");
       }
       console.log(snippet.content);
@@ -1404,27 +1204,314 @@ async function favoriteSnippetAction(snippetId, ctx) {
   }
 }
 
-// src/commands/snippet/index.ts
-async function buildContext2(globalOpts) {
-  const pin = await resolvePin({
-    pinArg: globalOpts.pin,
-    pinFromStdin: globalOpts.pinStdin,
-    skipPrompt: true
-  });
-  return {
-    json: globalOpts.json ?? false,
-    noColor: globalOpts.noColor ?? false,
-    plain: globalOpts.plain ?? false,
-    pin: pin ?? void 0
-  };
+// src/lib/pin.ts
+import { createInterface as createInterface2 } from "readline";
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, statSync } from "fs";
+import { tmpdir } from "os";
+import { join as join2 } from "path";
+import pc9 from "picocolors";
+var PIN_CACHE_TTL_MS = 5 * 60 * 1e3;
+var PIN_MAX_ATTEMPTS = 3;
+function getPinCachePath() {
+  const uid = process.getuid?.() ?? "unknown";
+  return join2(tmpdir(), `pnote-pin-${uid}`);
 }
-var snippetCommand = new Command3("snippet").description("Read and manage snippets (note versions)").argument("[note-id]", "Note ID to show snippet for").option("--all", "Show all snippet versions").action(async (noteId, options, cmd) => {
-  const globalOpts = cmd.parent?.opts() || {};
-  const ctx = await buildContext2(globalOpts);
-  if (noteId) {
-    await showSnippetAction(noteId, options, ctx);
-  } else {
-    cmd.help();
+function getCachedPin() {
+  const cachePath = getPinCachePath();
+  if (!existsSync2(cachePath)) {
+    return null;
+  }
+  try {
+    const stat = statSync(cachePath);
+    const age = Date.now() - stat.mtimeMs;
+    if (age > PIN_CACHE_TTL_MS) {
+      unlinkSync2(cachePath);
+      return null;
+    }
+    const content = readFileSync2(cachePath, "utf-8").trim();
+    return content || null;
+  } catch {
+    return null;
+  }
+}
+function setCachedPin(pin) {
+  const cachePath = getPinCachePath();
+  try {
+    writeFileSync2(cachePath, pin, { mode: 384 });
+  } catch {
+  }
+}
+async function readPinFromStdin() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(chunk);
+    const content2 = Buffer.concat(chunks).toString("utf-8");
+    if (content2.includes("\n")) {
+      break;
+    }
+  }
+  const content = Buffer.concat(chunks).toString("utf-8");
+  const firstLine = content.split("\n")[0]?.trim() || "";
+  if (!firstLine) {
+    throw new Error("No PIN provided via stdin");
+  }
+  return firstLine;
+}
+async function promptForPin(noteTitle, hint, maxAttempts = PIN_MAX_ATTEMPTS) {
+  if (!process.stdin.isTTY) {
+    return null;
+  }
+  if (noteTitle) {
+    console.error(pc9.yellow("\u{1F512}") + ` Note "${noteTitle}" is PIN-protected.`);
+  } else {
+    console.error(pc9.yellow("\u{1F512}") + " This action requires your PIN.");
+  }
+  if (hint) {
+    console.error(pc9.dim(`Hint: ${hint}`));
+  }
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    const pin = await readPinHidden(
+      attempt > 1 ? `Enter PIN (${attempt}/${maxAttempts}): ` : "Enter PIN: "
+    );
+    if (pin) {
+      return pin;
+    }
+    if (attempt < maxAttempts) {
+      console.error(pc9.red("Invalid or empty PIN. Try again."));
+    }
+  }
+  console.error(pc9.red("Too many attempts."));
+  return null;
+}
+async function readPinHidden(prompt) {
+  return new Promise((resolve2) => {
+    const rl = createInterface2({
+      input: process.stdin,
+      output: process.stderr,
+      terminal: true
+    });
+    if (process.stdin.isTTY) {
+      process.stdin.setRawMode?.(true);
+    }
+    process.stderr.write(prompt);
+    let pin = "";
+    const onKeypress = (key) => {
+      const char = key.toString();
+      if (char === "\r" || char === "\n") {
+        process.stderr.write("\n");
+        cleanup();
+        resolve2(pin);
+      } else if (char === "") {
+        process.stderr.write("\n");
+        cleanup();
+        process.exit(130);
+      } else if (char === "\x7F" || char === "\b") {
+        if (pin.length > 0) {
+          pin = pin.slice(0, -1);
+          process.stderr.write("\b \b");
+        }
+      } else if (char.length === 1 && char >= " ") {
+        pin += char;
+        process.stderr.write("*");
+      }
+    };
+    const cleanup = () => {
+      process.stdin.removeListener("data", onKeypress);
+      if (process.stdin.isTTY) {
+        process.stdin.setRawMode?.(false);
+      }
+      rl.close();
+    };
+    process.stdin.on("data", onKeypress);
+  });
+}
+async function resolvePin(options) {
+  const { pinArg, pinFromStdin, noteTitle, hint, skipCache, skipPrompt } = options;
+  if (pinArg) {
+    return pinArg;
+  }
+  if (pinFromStdin) {
+    try {
+      return await readPinFromStdin();
+    } catch {
+      return null;
+    }
+  }
+  const envPin = process.env.PNOTE_PIN;
+  if (envPin) {
+    return envPin;
+  }
+  if (!skipCache) {
+    const cached = getCachedPin();
+    if (cached) {
+      return cached;
+    }
+  }
+  if (!skipPrompt && process.stdin.isTTY) {
+    const pin = await promptForPin(noteTitle, hint);
+    if (pin) {
+      setCachedPin(pin);
+      return pin;
+    }
+  }
+  return null;
+}
+
+// src/commands/notes/snippetCmd.ts
+async function buildContext(globalOpts) {
+  const pin = await resolvePin({
+    pinArg: globalOpts.pin,
+    pinFromStdin: globalOpts.pinStdin,
+    skipPrompt: true
+  });
+  return {
+    json: globalOpts.json ?? false,
+    noColor: globalOpts.noColor ?? false,
+    plain: globalOpts.plain ?? false,
+    pin: pin ?? void 0
+  };
+}
+var notesSnippetCommand = new Command2("snippet").description("Read and manage snippets for a note").argument("[note-id]", "Note ID to show latest snippet for").action(async (noteId, _options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext(globalOpts);
+  if (noteId) {
+    await showSnippetAction(noteId, {}, ctx);
+  } else {
+    cmd.help();
+  }
+}).addHelpText(
+  "after",
+  `
+Examples:
+  $ pnote notes snippet abc123              Show latest snippet (pipe-friendly)
+  $ pnote notes snippet list abc123         Show all versions
+  $ pnote notes snippet copy abc123         Copy to clipboard
+  $ cat file.txt | pnote notes snippet add abc123
+`
+);
+notesSnippetCommand.command("list").description("List all snippet versions for a note").argument("<note-id>", "Note ID").action(async (noteId, _options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.parent?.opts() || {};
+  const ctx = await buildContext(globalOpts);
+  try {
+    const result = await getNote(noteId, { pin: ctx.pin });
+    outputSnippets(result.snippets || [], ctx);
+  } catch (error) {
+    handleError(error, ctx.noColor);
+  }
+});
+notesSnippetCommand.command("copy").description("Copy snippet content to clipboard").argument("<note-id>", "Note ID").option("--version <n>", "Specific version number").action(async (noteId, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.parent?.opts() || {};
+  const ctx = await buildContext(globalOpts);
+  await copySnippetAction(noteId, options, ctx);
+});
+notesSnippetCommand.command("add").description("Add a new snippet version (from stdin)").argument("<note-id>", "Note ID").option("--title <title>", "Snippet title").action(async (noteId, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.parent?.opts() || {};
+  const ctx = await buildContext(globalOpts);
+  await addSnippetAction(noteId, options, ctx);
+});
+notesSnippetCommand.command("update").description("Update an existing snippet (from stdin)").argument("<snippet-id>", "Snippet ID").option("--title <title>", "New snippet title").action(async (snippetId, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.parent?.opts() || {};
+  const ctx = await buildContext(globalOpts);
+  await updateSnippetAction(snippetId, options, ctx);
+});
+notesSnippetCommand.command("favorite").description("Toggle favorite status on a snippet").argument("<snippet-id>", "Snippet ID").action(async (snippetId, _options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.parent?.opts() || {};
+  const ctx = await buildContext(globalOpts);
+  await favoriteSnippetAction(snippetId, ctx);
+});
+
+// src/commands/notes/index.ts
+async function buildContext2(globalOpts) {
+  const pin = await resolvePin({
+    pinArg: globalOpts.pin,
+    pinFromStdin: globalOpts.pinStdin,
+    skipPrompt: true
+    // Don't prompt interactively for list/search operations
+  });
+  return {
+    json: globalOpts.json ?? false,
+    noColor: globalOpts.noColor ?? false,
+    plain: globalOpts.plain ?? false,
+    pin: pin ?? void 0
+  };
+}
+var notesCommand = new Command3("notes").description("List and manage notes").option("--tag <tag>", 'Filter by tag (e.g., "AI/art")').option("--archived", "Show archived notes").option("--pinned", "Show only pinned notes").option("--deleted", "Show deleted notes").option("--protected", "Show only PIN-protected notes").option("--search <query>", "Search notes by title").option("--limit <n>", "Limit number of results", "50").action(async (options, cmd) => {
+  const globalOpts = cmd.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await listNotesAction(options, ctx);
+}).addHelpText(
+  "after",
+  `
+Examples:
+  $ pnote notes                              List all active notes
+  $ pnote notes --tag "AI/art"              Filter by tag
+  $ pnote notes --archived                   Show archived notes
+  $ pnote notes --pinned                     Show only pinned notes
+  $ pnote notes get abc123                   Get note with all snippet versions
+  $ pnote notes get abc123 --latest          Get note with only latest snippet
+  $ pnote notes create "My Note"             Create a new note
+  $ pnote notes snippet abc123              Show latest snippet (pipe-friendly)
+  $ pnote notes snippet list abc123         Show all snippet versions
+  $ cat file.txt | pnote notes snippet add abc123
+`
+);
+notesCommand.command("get").description("Get a note with all its snippet versions").argument("<id>", "Note ID").option("--latest", "Show only the latest snippet version").action(async (id, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await getNoteAction(id, options, ctx);
+});
+notesCommand.command("create").description("Create a new note").argument("<title>", "Note title").option("--tags <tags...>", "Tags for the note").option("--content <content>", "Initial snippet content").action(async (title, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await createNoteAction(title, options, ctx);
+});
+notesCommand.command("archive").description("Archive or unarchive a note").argument("<id>", "Note ID").option("--undo", "Unarchive the note").action(async (id, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await archiveNoteAction(id, options, ctx);
+});
+notesCommand.command("pin").description("Pin or unpin a note").argument("<id>", "Note ID").action(async (id, _options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await pinNoteAction(id, ctx);
+});
+notesCommand.command("update").description("Update a note title or tags").argument("<id>", "Note ID").option("--title <title>", "New title").option("--tags <tags...>", "New tags (replaces existing)").action(async (id, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await updateNoteAction(id, options, ctx);
+});
+notesCommand.command("delete").description("Delete a note (soft delete)").argument("<id>", "Note ID").option("--force", "Skip confirmation").action(async (id, options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext2(globalOpts);
+  await deleteNoteAction(id, options, ctx);
+});
+notesCommand.addCommand(notesSnippetCommand);
+
+// src/commands/snippet/index.ts
+import { Command as Command4 } from "commander";
+async function buildContext3(globalOpts) {
+  const pin = await resolvePin({
+    pinArg: globalOpts.pin,
+    pinFromStdin: globalOpts.pinStdin,
+    skipPrompt: true
+  });
+  return {
+    json: globalOpts.json ?? false,
+    noColor: globalOpts.noColor ?? false,
+    plain: globalOpts.plain ?? false,
+    pin: pin ?? void 0
+  };
+}
+var DEPRECATION_NOTICE = '\nDeprecated: "pnote snippet" is deprecated. Use "pnote notes snippet" instead.\n\n';
+var snippetCommand = new Command4("snippet").description('Read and manage snippets (note versions) [deprecated: use "notes snippet"]').argument("[note-id]", "Note ID to show snippet for").option("--all", "Show all snippet versions").hook("preAction", () => {
+  process.stderr.write(DEPRECATION_NOTICE);
+}).action(async (noteId, options, cmd) => {
+  const globalOpts = cmd.parent?.opts() || {};
+  const ctx = await buildContext3(globalOpts);
+  if (noteId) {
+    await showSnippetAction(noteId, options, ctx);
+  } else {
+    cmd.help();
   }
 }).addHelpText(
   "after",
@@ -1438,27 +1525,27 @@ Examples:
 );
 snippetCommand.command("copy").description("Copy snippet content to clipboard").argument("<note-id>", "Note ID").option("--version <n>", "Specific version number").action(async (noteId, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext2(globalOpts);
+  const ctx = await buildContext3(globalOpts);
   await copySnippetAction(noteId, options, ctx);
 });
 snippetCommand.command("add").description("Add a new snippet version (from stdin)").argument("<note-id>", "Note ID").option("--title <title>", "Snippet title").action(async (noteId, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext2(globalOpts);
+  const ctx = await buildContext3(globalOpts);
   await addSnippetAction(noteId, options, ctx);
 });
 snippetCommand.command("update").description("Update an existing snippet (from stdin)").argument("<snippet-id>", "Snippet ID").option("--title <title>", "New snippet title").action(async (snippetId, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext2(globalOpts);
+  const ctx = await buildContext3(globalOpts);
   await updateSnippetAction(snippetId, options, ctx);
 });
 snippetCommand.command("favorite").description("Toggle favorite status on a snippet").argument("<snippet-id>", "Snippet ID").action(async (snippetId, _options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext2(globalOpts);
+  const ctx = await buildContext3(globalOpts);
   await favoriteSnippetAction(snippetId, ctx);
 });
 
 // src/commands/tags/index.ts
-import { Command as Command4 } from "commander";
+import { Command as Command5 } from "commander";
 
 // src/commands/tags/list.ts
 async function listTagsAction(options, ctx) {
@@ -1521,7 +1608,7 @@ async function mergeTagsAction(sourceTags, targetTag, ctx) {
 }
 
 // src/commands/tags/index.ts
-async function buildContext3(globalOpts) {
+async function buildContext4(globalOpts) {
   const pin = await resolvePin({
     pinArg: globalOpts.pin,
     pinFromStdin: globalOpts.pinStdin,
@@ -1534,9 +1621,9 @@ async function buildContext3(globalOpts) {
     pin: pin ?? void 0
   };
 }
-var tagsCommand = new Command4("tags").description("List and manage tags").option("--include-archived", "Include tags from archived notes").action(async (options, cmd) => {
+var tagsCommand = new Command5("tags").description("List and manage tags").option("--include-archived", "Include tags from archived notes").action(async (options, cmd) => {
   const globalOpts = cmd.parent?.opts() || {};
-  const ctx = await buildContext3(globalOpts);
+  const ctx = await buildContext4(globalOpts);
   await listTagsAction(options, ctx);
 }).addHelpText(
   "after",
@@ -1549,17 +1636,17 @@ Examples:
 );
 tagsCommand.command("rename").description("Rename a tag across all notes").argument("<old-tag>", "Current tag name").argument("<new-tag>", "New tag name").action(async (oldTag, newTag, _options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext3(globalOpts);
+  const ctx = await buildContext4(globalOpts);
   await renameTagAction(oldTag, newTag, ctx);
 });
 tagsCommand.command("merge").description("Merge multiple tags into one").argument("<source-tags...>", "Tags to merge (space-separated)").requiredOption("--into <target>", "Target tag to merge into").action(async (sourceTags, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext3(globalOpts);
+  const ctx = await buildContext4(globalOpts);
   await mergeTagsAction(sourceTags, options.into, ctx);
 });
 
 // src/commands/search.ts
-import { Command as Command5 } from "commander";
+import { Command as Command6 } from "commander";
 async function searchAction(query, options, ctx) {
   try {
     let search_notes = true;
@@ -1585,7 +1672,7 @@ async function searchAction(query, options, ctx) {
     handleError(error, ctx.noColor);
   }
 }
-var searchCommand = new Command5("search").description("Search notes and snippets").argument("<query>", "Search query").option("--notes-only", "Only search note titles and tags").option("--snippets-only", "Only search snippet content").option("--limit <n>", "Limit results", "20").action(async (query, options, cmd) => {
+var searchCommand = new Command6("search").description("Search notes and snippets").argument("<query>", "Search query").option("--notes-only", "Only search note titles and tags").option("--snippets-only", "Only search snippet content").option("--limit <n>", "Limit results", "20").action(async (query, options, cmd) => {
   const globalOpts = cmd.parent?.opts() || {};
   const pin = await resolvePin({
     pinArg: globalOpts.pin,
@@ -1610,7 +1697,7 @@ Examples:
 );
 
 // src/commands/share/index.ts
-import { Command as Command6 } from "commander";
+import { Command as Command7 } from "commander";
 
 // src/commands/share/tags.ts
 async function listSharedTagsAction(ctx) {
@@ -1648,7 +1735,7 @@ async function listSharedNotesAction(options, ctx) {
 }
 
 // src/commands/share/index.ts
-async function buildContext4(globalOpts) {
+async function buildContext5(globalOpts) {
   const pin = await resolvePin({
     pinArg: globalOpts.pin,
     pinFromStdin: globalOpts.pinStdin,
@@ -1661,7 +1748,7 @@ async function buildContext4(globalOpts) {
     pin: pin ?? void 0
   };
 }
-var shareCommand = new Command6("share").description("View shared tags and shared note links").addHelpText(
+var shareCommand = new Command7("share").description("View shared tags and shared note links").addHelpText(
   "after",
   `
 Examples:
@@ -1673,7 +1760,7 @@ Examples:
 );
 shareCommand.command("tags").description("List shared tags or view notes in a shared tag").argument("[id]", "Shared tag ID to view notes").option("--limit <n>", "Limit notes returned").action(async (id, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext4(globalOpts);
+  const ctx = await buildContext5(globalOpts);
   if (id) {
     await getSharedTagNotesAction(id, options, ctx);
   } else {
@@ -1682,12 +1769,12 @@ shareCommand.command("tags").description("List shared tags or view notes in a sh
 });
 shareCommand.command("notes").description("List public share links for your notes").option("--include-revoked", "Include revoked share links").action(async (options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext4(globalOpts);
+  const ctx = await buildContext5(globalOpts);
   await listSharedNotesAction(options, ctx);
 });
 
 // src/commands/skills/index.ts
-import { Command as Command7 } from "commander";
+import { Command as Command8 } from "commander";
 
 // src/commands/skills/list.ts
 import pc10 from "picocolors";
@@ -1886,7 +1973,7 @@ function collectFiles(baseDir, currentDir) {
 }
 
 // src/commands/skills/index.ts
-async function buildContext5(globalOpts) {
+async function buildContext6(globalOpts) {
   const pin = await resolvePin({
     pinArg: globalOpts.pin,
     pinFromStdin: globalOpts.pinStdin,
@@ -1899,9 +1986,9 @@ async function buildContext5(globalOpts) {
     pin: pin ?? void 0
   };
 }
-var skillsCommand = new Command7("skills").description("Manage agent skills (sync between cloud and local)").action(async (_options, cmd) => {
+var skillsCommand = new Command8("skills").description("Manage agent skills (sync between cloud and local)").action(async (_options, cmd) => {
   const globalOpts = cmd.parent?.opts() || {};
-  const ctx = await buildContext5(globalOpts);
+  const ctx = await buildContext6(globalOpts);
   await listSkillsAction(ctx);
 }).addHelpText(
   "after",
@@ -1918,19 +2005,179 @@ They sync to ~/.claude/skills/<skill-name>/<filename> for use with Claude Code.
 );
 skillsCommand.command("pull").description("Download skills from cloud to local (~/.claude/skills/)").argument("[skill-name]", "Specific skill to pull (pulls all if omitted)").option("--dir <path>", "Custom output directory (default: ~/.claude/skills)").option("--dry-run", "Show what would be downloaded without writing files").action(async (skillName, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext5(globalOpts);
+  const ctx = await buildContext6(globalOpts);
   await pullSkillsAction(skillName, options, ctx);
 });
 skillsCommand.command("push").description("Upload a local skill directory to cloud").argument("<dir>", "Path to skill directory (must contain SKILL.md)").option("--name <name>", "Override skill name (default: directory name)").action(async (dir, options, cmd) => {
   const globalOpts = cmd.parent?.parent?.opts() || {};
-  const ctx = await buildContext5(globalOpts);
+  const ctx = await buildContext6(globalOpts);
   await pushSkillsAction(dir, options, ctx);
 });
 
+// src/commands/pin/index.ts
+import { Command as Command9 } from "commander";
+
+// src/commands/pin/statusAction.ts
+import pc13 from "picocolors";
+async function pinStatusAction(ctx) {
+  try {
+    const result = await checkPinStatus({ pin: ctx.pin });
+    if (ctx.json) {
+      outputJson({
+        ...result,
+        pnote_pin_env_set: !!process.env.PNOTE_PIN,
+        pin_cached: !!getCachedPin()
+      });
+      return;
+    }
+    const useColor = !ctx.noColor && process.stdout.isTTY;
+    const c = {
+      green: useColor ? pc13.green : (s) => s,
+      red: useColor ? pc13.red : (s) => s,
+      yellow: useColor ? pc13.yellow : (s) => s,
+      dim: useColor ? pc13.dim : (s) => s,
+      bold: useColor ? pc13.bold : (s) => s,
+      magenta: useColor ? pc13.magenta : (s) => s
+    };
+    const yes = c.green("\u2713");
+    const no = c.red("\u2717");
+    console.log(c.bold("PIN Status"));
+    console.log("");
+    const hasPin = result.user_has_pin_setup;
+    console.log(`  Account PIN set:       ${hasPin ? yes : no}`);
+    if (result.pin_hint) {
+      console.log(`  PIN hint:              ${c.dim(result.pin_hint)}`);
+    }
+    console.log(`  Protected notes:       ${c.magenta(String(result.protected_notes_count))}`);
+    console.log("");
+    console.log(c.bold("PIN Sources (CLI)"));
+    console.log("");
+    const envSet = !!process.env.PNOTE_PIN;
+    console.log(`  PNOTE_PIN env:         ${envSet ? yes : no}${envSet ? c.dim(" (recommended)") : ""}`);
+    const cached = !!getCachedPin();
+    console.log(`  Session cache:         ${cached ? yes + c.dim(" (active, <5min)") : no}`);
+    if (result.pin_provided) {
+      const valid = result.pin_valid;
+      console.log(`  Provided PIN valid:    ${valid ? yes : no}`);
+    } else {
+      console.log(`  Provided PIN:          ${c.dim("not provided")}`);
+    }
+    console.log("");
+    const canAccess = result.can_access_protected;
+    if (canAccess) {
+      console.log(yes + " " + c.green("Can access protected notes"));
+    } else if (!hasPin) {
+      console.log(c.dim("  No protected notes \u2014 PIN not configured on account"));
+    } else {
+      console.log(no + " " + c.red("Cannot access protected notes"));
+      console.log("");
+      console.log(c.dim("  Set PIN via: export PNOTE_PIN=<pin>"));
+      console.log(c.dim("  Or use:      pnote notes get <id> -p <pin>"));
+      console.log(c.dim("  Or use:      echo <pin> | pnote notes get <id> --pin-stdin"));
+    }
+  } catch (error) {
+    handleError(error, ctx.noColor);
+  }
+}
+
+// src/commands/pin/listAction.ts
+import pc14 from "picocolors";
+async function pinListAction(options, ctx) {
+  try {
+    const result = await listProtectedNotes(
+      {
+        limit: options.limit ? parseInt(options.limit, 10) : 50,
+        offset: options.offset ? parseInt(options.offset, 10) : void 0
+      },
+      { pin: ctx.pin }
+    );
+    if (ctx.json) {
+      outputJson(result);
+      return;
+    }
+    const useColor = !ctx.noColor && process.stdout.isTTY;
+    const c = {
+      dim: useColor ? pc14.dim : (s) => s,
+      bold: useColor ? pc14.bold : (s) => s,
+      cyan: useColor ? pc14.cyan : (s) => s,
+      yellow: useColor ? pc14.yellow : (s) => s,
+      magenta: useColor ? pc14.magenta : (s) => s
+    };
+    const isHuman = !ctx.json && !ctx.plain && process.stdout.isTTY;
+    if (result.notes.length === 0) {
+      console.log(c.dim("No protected notes."));
+      return;
+    }
+    if (isHuman) {
+      console.log(c.bold(`Protected Notes (${result.count})`));
+      if (result.hint) {
+        console.log(c.dim(`PIN hint: ${result.hint}`));
+      }
+      if (!result.can_decrypt) {
+        console.log(c.dim("Note: Content not shown \u2014 set PNOTE_PIN to access content."));
+      }
+      console.log("");
+      const pad2 = (s, w) => s.length >= w ? s.slice(0, w) : s + " ".repeat(w - s.length);
+      const truncate2 = (s, w) => s.length <= w ? s : s.slice(0, w - 1) + "\u2026";
+      console.log(
+        "  " + c.dim(pad2("ID", 10)) + "  " + c.dim(pad2("TITLE", 30)) + "  " + c.dim(pad2("TAGS", 20)) + "  " + c.dim("PROTECTED")
+      );
+      for (const note of result.notes) {
+        const date = new Date(note.protected_at);
+        const updated = date.toLocaleDateString();
+        const pinned = note.pinned ? c.yellow("* ") : "  ";
+        console.log(
+          pinned + pad2(note.id.slice(0, 8), 10) + "  " + pad2(truncate2(note.title, 30), 30) + "  " + pad2(truncate2(note.tags.join(", ") || "-", 20), 20) + "  " + c.magenta(updated)
+        );
+      }
+    } else {
+      for (const note of result.notes) {
+        console.log([note.id, note.title, note.tags.join(","), note.protected_at].join("	"));
+      }
+    }
+  } catch (error) {
+    handleError(error, ctx.noColor);
+  }
+}
+
+// src/commands/pin/index.ts
+async function buildContext7(globalOpts) {
+  const pin = await resolvePin({
+    pinArg: globalOpts.pin,
+    pinFromStdin: globalOpts.pinStdin,
+    skipPrompt: true
+  });
+  return {
+    json: globalOpts.json ?? false,
+    noColor: globalOpts.noColor ?? false,
+    plain: globalOpts.plain ?? false,
+    pin: pin ?? void 0
+  };
+}
+var pinCommand = new Command9("pin").description("Manage PIN protection for notes").addHelpText(
+  "after",
+  `
+Examples:
+  $ pnote pin status                  Check PIN configuration and access
+  $ pnote pin list                    List all protected notes (metadata only)
+  $ PNOTE_PIN=1234 pnote pin status   Check with PIN provided via env
+`
+);
+pinCommand.command("status").description("Check PIN configuration status and access to protected notes").action(async (_options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext7(globalOpts);
+  await pinStatusAction(ctx);
+});
+pinCommand.command("list").description("List all PIN-protected notes (metadata only, no content)").option("--limit <n>", "Maximum number of results", "50").option("--offset <n>", "Skip N results (for pagination)").action(async (options, cmd) => {
+  const globalOpts = cmd.parent?.parent?.opts() || {};
+  const ctx = await buildContext7(globalOpts);
+  await pinListAction(options, ctx);
+});
+
 // src/lib/update-check.ts
 import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3 } from "fs";
 import { join as join5 } from "path";
-import pc13 from "picocolors";
+import pc15 from "picocolors";
 var CACHE_FILE = "update-check.json";
 var CHECK_INTERVAL = 60 * 60 * 1e3;
 var FETCH_TIMEOUT = 2e3;
@@ -1979,9 +2226,9 @@ function isOlderVersion(current, latest) {
 }
 function printNotice(current, latest, packageName) {
   const useColor = process.stderr.isTTY && !process.env.NO_COLOR && process.env.TERM !== "dumb";
-  const yellow = useColor ? pc13.yellow : (s) => s;
-  const bold = useColor ? pc13.bold : (s) => s;
-  const dim = useColor ? pc13.dim : (s) => s;
+  const yellow = useColor ? pc15.yellow : (s) => s;
+  const bold = useColor ? pc15.bold : (s) => s;
+  const dim = useColor ? pc15.dim : (s) => s;
   const msg = `Update available: ${dim(current)} \u2192 ${bold(latest)}`;
   const cmd = `Run ${bold(`npm i -g ${packageName}`)} to update`;
   const lines = [msg, cmd];
@@ -2027,8 +2274,8 @@ async function checkAndNotifyUpdate(currentVersion, packageName) {
 }
 
 // src/index.ts
-var program = new Command8();
-program.name("pnote").description("pnote - The PromptNote CLI").version("0.2.1", "-V, --version", "Show version number").option("--json", "Output as JSON (for scripting)").option("--no-color", "Disable colored output").option("--plain", "Force plain text output (no formatting)").option("-p, --pin <pin>", "PIN for accessing protected notes").option("--pin-stdin", "Read PIN from stdin (first line only)").configureHelp({
+var program = new Command10();
+program.name("pnote").description("pnote - The PromptNote CLI").version("0.4.0", "-V, --version", "Show version number").option("--json", "Output as JSON (for scripting)").option("--no-color", "Disable colored output").option("--plain", "Force plain text output (no formatting)").option("-p, --pin <pin>", "PIN for accessing protected notes").option("--pin-stdin", "Read PIN from stdin (first line only)").configureHelp({
   sortSubcommands: true,
   sortOptions: true
 }).addHelpText(
@@ -2058,9 +2305,10 @@ program.addCommand(snippetCommand);
 program.addCommand(tagsCommand);
 program.addCommand(searchCommand);
 program.addCommand(shareCommand);
+program.addCommand(pinCommand);
 program.addCommand(skillsCommand);
 program.hook("preAction", async () => {
-  await checkAndNotifyUpdate("0.2.1", "pnote");
+  await checkAndNotifyUpdate("0.4.0", "pnote");
 });
 process.on("SIGINT", () => {
   console.error("\nInterrupted");