Changelog
Every release, tracked.
From the latest features to critical security patches, here is everything new in Jiro.
v0.4.02026-10-22LatestGraphEvidenceMCP
Cited Answers
A query graph that plans research, executes it, and returns every claim with the source behind it — plus agent-to-agent handoff
- 🚀Query graph: a planner turns one query into a validated graph, executes the nodes, and returns an evidence packet where each claim carries the source ids it rests on
- 🚀Dry-run planning via /v1/graph/plan: validate the graph and get a cost estimate without touching the network, so a run can be sized before it is paid for
- 🚀Explicit gap reporting: a branch that timed out or ran dry records the node, the query and the reason instead of silently returning less evidence
- 🚀session_handoff MCP tool: packages a finished run into a brief another agent can act on — resolvable evidence ids, open questions, contradictions, remaining budget, and the next suggested node
- 🚀Unknown values are never invented: a budget remainder the engine cannot derive is null rather than a plausible-looking number
- 🚀Cloud API now proxies the graph at /v1/graph/plan (1 credit) and /v1/graph/search (10 credits), refunded in full when the engine is unreachable
- 🚀Python, JavaScript and Go SDKs expose the graph as plan_search/search_graph, planSearch/searchGraph, and PlanSearch/GraphSearch
- 🐛selectolax 1.0 removed the modest backend, which made `import jiro` fail on any fresh install; all parsers now use lexbor
- 🐛The POST retry path computed a retry deadline from its configured budget and never checked it, leaving the retry sequence unbounded
- ⚡Pagination now walks successive result pages on Google, Bing and Baidu until num is met or the page budget is spent, instead of silently returning one page
pip install jirosearch==0.4.0Release notes v0.3.32026-10-02BillingMCPObservability
Truth, Metering, Reach
Spend-before-serve credit enforcement, 16 real MCP tools, structured observability, and a status page that proves something
- 🚀Credit enforcement on proxy, batch, stream, social, and MCP: spend before serve, automatic refunds, real 402 INSUFFICIENT_CREDITS
- 🚀MCP parity 5 to 16 tools: batch search, social search, agent, usage, history, engines, status, account, webhooks, monitors, plus docs resources and task prompts
- 🚀Structured JSON logs with request IDs, Sentry wiring, Firestore-persisted engine health, and real backend probes
- 🚀Incident history with RSS feed and email subscriptions on the public status page
- 🚀Docs full-text search, OpenAPI 3.1 generated from validators, and a live API reference with copy-paste snippets
- 🔒License signing and dev-login fail closed; CSRF enforced on webhooks, social, alerts, engines, and all auth routes; Prisma removed
- 🐛Removed unshipped marketing claims (Stealth, WebSocket, Smart Search, SOC 2, fictional testimonials); engine catalog matches the backend
- ⚡Shared playground endpoint module, release gates (Playwright e2e, axe a11y, audit, bundle budget) green in CI
pip install jirosearch==0.3.3Release notes v0.3.12026-09-25LatestCLISecuritySDKs
The Complete Platform Release
Production CLI auth, realtime Firebase sessions, unified packages, and a faster search intelligence platform
- 🚀RFC 8628 device-code authentication with a premium browser handoff and secure CLI key exchange
- 🚀Realtime Firebase session sync with token refresh, resilient loading states, and emulator support
- 🚀Unified 0.3.1 packages for the CLI, JavaScript SDK, Python SDK, and Cloud API
- 🚀Nine search engines, twelve social platforms, sixteen MCP tools, streaming, batch, and agent APIs
- 🚀Credit pricing endpoint with synchronized search, scrape, AI, agent, MCP, and AEO costs
- 🔒Hardened WAF normalization, internal API authentication, API-key ownership, and circuit-breaker handling
- 🐛Device authorization now issues keys against the correct Firestore user record
- 🐛Unified favicon, CLI logo, dashboard navigation, and responsive public documentation
pip install jirosearch==0.3.1Release notes v0.3.02026-09-15MajorLicensingSecurityPricing
Self-Hosted Licensing + Device Auth
RFC 8628 Device Code Flow, Encrypted Credentials, 3-Tier Pricing, HMAC License Validation
- 🚀RFC 8628 Device Code Flow — CLI authenticates via browser, works over SSH/Docker/headless
- 🚀Encrypted Credential Storage — AES-256-GCM with machine-derived PBKDF2 key
- 🚀Self-Hosted 3-Tier Pricing — Free (₹0), Pro (₹4,999 one-time), Enterprise (₹14,999 one-time)
- 🚀HMAC-SHA256 License Validation — Offline-first, hardware-bound, no server needed after activation
- 🚀Admin License Key Generation — POST /api/admin/license with tier features and limits
- 🚀CLI License Commands — jiro license activate/info/deactivate/validate
- 🚀Cloud Credit Enforcement — CLI checks credits before API calls, blocks if exhausted
- 🚀Pricing Page Redesign — Cloud and Self-Hosted tiers shown separately with comparison table
- 🐛Fixed jose importJwk breaking middleware auth on every request
- 🐛Fixed admin pages using snake_case instead of camelCase for payment properties
- 🐛Fixed device auth token route creating API keys in Prisma instead of Firestore
- 🐛Fixed pricing data YAML files out of sync with actual pricing
- 🐛Fixed settings page null type mismatch for device name
- 🐛Fixed unsafe window type cast in bluetick-protected component
- 🔒Device code polling rate-limited with slow_down backoff per RFC 8628
- 🔒License keys hardware-bound to CPU serial + machine-id, max 3 devices
- 🔒24-hour grace period for license renewal after expiry
pip install jirosearch==0.3.0Release notes v0.2.152026-09-10MajorSDKsFeatures
The Complete Release
Official SDKs, WebSocket Streaming, Batch Operations
- 🚀Official Python SDK — pip install jiro-sdk with sync/async clients, type hints, WebSocket support
- 🚀Official JavaScript/TypeScript SDK — npm install jiro-sdk with browser & Node.js support
- 🚀Official Go SDK — go get github.com/DevAnimecx/jiro/sdk/go with idiomatic Go
- 🚀WebSocket Streaming — Real-time search results via /ws/search endpoint
- 🚀Batch Operations — Execute multiple searches/scrapes concurrently
- 🚀Stealth Engine — TLS/JA3 fingerprint rotation with 20+ browser profiles
- 🚀Monitoring & Observability — Prometheus metrics, health checks, request tracing
- 🚀Rate Limiting — Sliding window with tier-based quotas
- 🚀Advanced Caching — LRU/LFU with analytics
- 🚀Search History & Analytics
- 🚀Export/Import — JSON, CSV, Markdown, YAML
- 🐛Fixed Unicode crash on Windows (cp1252 encoding)
- 🐛Fixed auto-HTTPS for bare domains
pip install jirosearch==0.2.15Release notes v0.2.142026-09-09FeaturesPerformance
Rate Limiting, Advanced Caching, Multi-Language SDKs
Enterprise-grade features for production deployments
- 🚀Sliding Window Rate Limiter — Per-second, per-minute, per-hour, per-day limits
- 🚀Usage Quotas — Monthly limits for searches, scrapes, and AI queries
- 🚀Advanced Caching — LRU/LFU with analytics and TTL support
- 🚀Plugin System — Custom engines, scrapers, and search providers
- 🚀Multi-Language SDKs — Python, JavaScript/TypeScript, Go
- ⚡3x faster parallel search with concurrent engine queries
- ⚡50% reduction in memory usage with optimized caching
pip install jirosearch==0.2.14Release notes v0.2.132026-09-08FeaturesSecurity
Stealth Engine, WebSocket Streaming, Interactive CLI
Anti-bot bypass and real-time capabilities
- 🚀Stealth Engine — TLS/JA3 fingerprint rotation with 20+ browser profiles
- 🚀WebSocket Streaming — Real-time search results via /ws/search
- 🚀Interactive Mode — jiro search -i for continuous search loop
- 🚀Benchmark Command — jiro bench for performance testing
- 🚀Search Query Auto-Scrape — jiro scrape 'query' searches then scrapes top result
- 🐛Fixed Unicode crash on Windows (cp1252 encoding)
- 🐛Fixed auto-HTTPS for bare domains
pip install jirosearch==0.2.13Release notes v0.2.122026-09-07FeaturesSecurity
Universal Integration, Deep Enterprise Lock
MCP Setup Wizard and license encryption
- 🚀MCP Setup Wizard — One-command setup for Claude Desktop, Cursor, OpenCode, Codex CLI, OpenClaw, Continue.dev, and Zed
- 🚀AES-256-GCM License Encryption — Enterprise license tokens encrypted at rest
- 🚀CapabilityToken HMAC Tokens — Cryptographic license validation with scoped capabilities
- 🚀jiro doctor — Built-in diagnostics command for quick health checks
- 🔒require_tier('enterprise') enforced on all 18 /enterprise/* endpoints
- 🔒Authorization: License <token> header validation via HMAC-SHA256
- 🐛Fixed Tuple import error in feature_flags.py
- 🐛Fixed SQLite parameter binding in pro.py
pip install jirosearch==0.2.12Release notes