dejared-mcp 0.2.0 → 1.0.1

package/.claude-plugin/marketplace.json

@@ -1,8 +1,8 @@
 {
   "name": "dejared-mcp-marketplace",
   "owner": {
-    "name": "HuynhKhanh1402",
-    "email": "huynhkhanh14022004@gmail.com"
+    "name": "hqkh4nh",
+    "email": "khanh@duck.com"
   },
   "metadata": {
     "description": "MCP server and Claude Code plugin for exploring, analyzing, and decompiling Java JAR files"
@@ -12,9 +12,9 @@
       "name": "dejared",
       "source": "./",
       "description": "Explore, analyze, and decompile Java JAR files with structured workflows.",
-      "version": "0.2.0",
+      "version": "1.0.1",
       "author": {
-        "name": "HuynhKhanh1402"
+        "name": "hqkh4nh"
       },
       "license": "MIT",
       "keywords": ["java", "jar", "decompiler", "bytecode", "reverse-engineering", "mcp"],

package/.claude-plugin/plugin.json

@@ -1,11 +1,11 @@
 {
   "name": "dejared",
   "description": "Explore, analyze, and decompile Java JAR files with structured workflows.",
-  "version": "0.2.0",
+  "version": "1.0.1",
   "author": {
-    "name": "HuynhKhanh1402"
+    "name": "hqkh4nh"
   },
-  "repository": "https://github.com/HuynhKhanh1402/dejared-mcp",
+  "repository": "https://github.com/hqkh4nh/dejared-mcp",
   "license": "MIT",
   "keywords": ["java", "jar", "decompiler", "bytecode", "reverse-engineering", "mcp"],
   "mcpServers": {

package/README.md

@@ -174,7 +174,7 @@ Or add it to your project's `.mcp.json` using the standard config above.
 **Plugin (Marketplace)** installs both the MCP server and the `/jar-analysis` skill:
 
 ```bash
-claude plugin marketplace add HuynhKhanh1402/dejared-mcp
+claude plugin marketplace add hqkh4nh/dejared-mcp
 claude plugin install dejared@dejared-mcp-marketplace
 ```
 
@@ -354,7 +354,7 @@ Open Windsurf settings, navigate to MCP servers, and add a new server using the
 
 If you prefer to run the server JAR directly without Node.js:
 
-1. Download the latest JAR from [GitHub Releases](https://github.com/HuynhKhanh1402/dejared-mcp/releases).
+1. Download the latest JAR from [GitHub Releases](https://github.com/hqkh4nh/dejared-mcp/releases).
 
 2. Run it:
    ```bash
@@ -477,7 +477,7 @@ cd java-mcp
 
 ### Reporting Issues
 
-Open an issue on [GitHub Issues](https://github.com/HuynhKhanh1402/dejared-mcp/issues)
+Open an issue on [GitHub Issues](https://github.com/hqkh4nh/dejared-mcp/issues)
 with steps to reproduce the problem, your Java version, and your
 Node.js version.
 

package/lib/jar-runner.js

@@ -42,7 +42,7 @@ function getCacheDir() {
 
 const CACHE_DIR = getCacheDir();
 const JAR_PATH = path.join(CACHE_DIR, JAR_NAME);
-const DOWNLOAD_URL = `https://github.com/HuynhKhanh1402/dejared-mcp/releases/download/v${JAR_VERSION}/${JAR_NAME}`;
+const DOWNLOAD_URL = `https://github.com/hqkh4nh/dejared-mcp/releases/download/v${JAR_VERSION}/${JAR_NAME}`;
 
 function log(msg) {
   process.stderr.write(`[dejared-mcp] ${msg}\n`);
@@ -138,9 +138,20 @@ async function run() {
   const javaPath = resolveJava();
   await ensureJar();
 
-  const child = spawn(javaPath, ["-jar", JAR_PATH], {
-    stdio: "inherit",
-  });
+  const logDir = process.env.DEJARED_LOG_DIR || path.join(CACHE_DIR, "logs");
+  fs.mkdirSync(logDir, { recursive: true });
+
+  const jvmArgs = [`-Ddejared.log.dir=${logDir}`];
+
+  if (process.env.DEJARED_LOG_LEVEL) {
+    jvmArgs.push(`-Ddejared.log.level=${process.env.DEJARED_LOG_LEVEL}`);
+  }
+
+  const child = spawn(
+    javaPath,
+    [...jvmArgs, "-jar", JAR_PATH, "--spring.profiles.active=file-logging"],
+    { stdio: "inherit" },
+  );
 
   child.on("error", (err) => {
     log(`Failed to start Java: ${err.message}`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dejared-mcp",
-  "version": "0.2.0",
-  "mcpName": "io.github.HuynhKhanh1402/dejared",
+  "version": "1.0.1",
+  "mcpName": "io.github.hqkh4nh/dejared",
   "description": "Explore, analyze, and decompile Java JAR files via MCP",
   "bin": {
     "dejared-mcp": "bin/dejared-mcp.js"
@@ -16,10 +16,10 @@
     "LICENSE"
   ],
   "license": "MIT",
-  "author": "HuynhKhanh1402",
+  "author": "hqkh4nh",
   "repository": {
     "type": "git",
-    "url": "https://github.com/HuynhKhanh1402/dejared-mcp"
+    "url": "https://github.com/hqkh4nh/dejared-mcp"
   },
   "keywords": [
     "mcp",

package/skills/jar-analysis/SKILL.md

@@ -1,13 +1,40 @@
 ---
 name: jar-analysis
 description: >
-  Explore, search, and decompile Java JAR files. Quick use cases for
-  common tasks (lookup, read config, get signatures) and workflows for
-  deeper analysis (Explore, Hunt, Deep Analysis).
+  Explore, search, read, and decompile Java JAR, WAR, EAR, AAR, and
+  Spring Boot fat-jar files via the dejared MCP server. Use this skill
+  whenever the user references a `.jar` file path, asks what a
+  third-party Java library does, wants to read a config embedded in a
+  JAR (application.yml, spring.factories, MANIFEST.MF), needs class
+  metadata (superclass, annotations, method signatures), is chasing a
+  stack trace into a dependency without source, or is reverse-engineering
+  a plugin/mod/obfuscated artifact. Applies to artifacts in
+  `~/.m2/repository`, `~/.gradle/caches`, `build/libs/`, `target/`,
+  `lib/`, and `libs/`. Prefer the dejared MCP tools over `jar tf`,
+  `jar xf`, `unzip`, `javap -p`, `javap -c`, `javap -v`, or running a
+  decompiler manually — even if the user doesn't explicitly ask for
+  "the dejared tools" or "decompilation".
 ---
 
 # JAR Analysis
 
+## When This Skill Applies
+
+Reach for these tools — never the shell — whenever the task touches the **inside** of a Java artifact:
+
+| You would reach for...                       | Use this instead                                       |
+|----------------------------------------------|--------------------------------------------------------|
+| `jar tf some.jar`                            | `dejared_list_packages` / `dejared_list_classes`       |
+| `jar tf some.jar \| grep -v .class`          | `dejared_list_resources`                               |
+| `unzip -p some.jar application.yml`          | `dejared_read_resource`                                |
+| `jar tf some.jar \| grep -i FooBar`          | `dejared_search_class`                                 |
+| `strings some.jar \| grep http`              | `dejared_search_string`                                |
+| `javap -p com.foo.Bar`                       | `dejared_get_metadata`                                 |
+| `javap -p` across a package                  | `dejared_dump_package_metadata`                        |
+| Running CFR / Vineflower / Procyon manually  | `dejared_decompile_class`                              |
+
+Applies to `.jar`, `.war`, `.ear`, `.aar` and any artifact under `~/.m2/repository`, `~/.gradle/caches`, `build/libs/`, `target/`, `lib/`, or `libs/`. All calls need an **absolute path** to the archive.
+
 ## Available Tools
 
 | Tool | Cost | Purpose |
@@ -15,7 +42,7 @@ description: >
 | `dejared_list_packages` | Cheap | List all packages with class counts |
 | `dejared_list_classes` | Cheap | List classes in a package (`recursive=true` for sub-packages) |
 | `dejared_list_resources` | Cheap | List all non-class resource files with sizes |
-| `dejared_read_resource` | Cheap | Read a resource file (yml, properties, xml, json, txt, sql, conf) |
+| `dejared_read_resource` | Cheap | Read a text resource file from inside a JAR (content-based detection, no extension restrictions) |
 | `dejared_dump_package_metadata` | Cheap | Batch metadata for multiple packages at once (annotations, fields, methods via ASM) |
 | `dejared_get_metadata` | Cheap | Single class metadata (ASM-based, no decompilation) |
 | `dejared_search_class` | Cheap | Find classes by name keyword (case-insensitive) |
@@ -25,7 +52,8 @@ description: >
 ## Shared Rules
 
 - All tool calls require the **absolute path** to the JAR file.
-- NEVER decompile a class without checking its metadata first.
+- Prefer these MCP tools over shelling out to jar/javap/unzip/strings or asking the user to decompile manually — structured output is faster and safer for the agent to consume.
+- Check metadata before decompiling — it often provides enough information without the cost of full decompilation.
 - Default decompiler: CFR. If output is broken, try `vineflower` or `procyon`.
 - Report results in structured format.
 
@@ -33,21 +61,21 @@ description: >
 
 ## Quick Use Cases
 
-**Quick Lookup** - find a class by name (`dejared_search_class`) or find a string in bytecode (`dejared_search_string`). One call, done.
+**Quick Lookup** — find a class by name (`dejared_search_class`) or find a string in bytecode (`dejared_search_string`). One call, done.
 
-**Read Config** - `dejared_list_resources` to see what's in the JAR, then `dejared_read_resource` to read it (application.yml, pom.xml, logback.xml, etc.)
+**Read Config** — `dejared_list_resources` to see what's in the JAR, then `dejared_read_resource` to read it (application.yml, pom.xml, logback.xml, etc.).
 
-**Get Signatures** - `dejared_get_metadata` for a single class, or `dejared_dump_package_metadata` for an entire package (accepts a list). Returns class hierarchy, annotations, fields, and method signatures without decompiling.
+**Get Signatures** — `dejared_get_metadata` for a single class, or `dejared_dump_package_metadata` for an entire package (accepts a list). Returns class hierarchy, annotations, fields, and method signatures without decompiling.
 
 ---
 
 ## Workflows
 
-**Explore** - top-down JAR mapping:
-`dejared_list_packages` → `dejared_list_classes` (use `recursive=true`) → `dejared_list_resources` → `dejared_read_resource` for configs → `dejared_dump_package_metadata` (batch all important packages in one call) → selective `dejared_decompile_class` only where method body logic is needed.
+**Explore** — top-down JAR mapping:
+`dejared_list_packages` → `dejared_list_classes` (use `recursive=true`) → `dejared_list_resources` → `dejared_read_resource` for configs → `dejared_dump_package_metadata` (batch all important packages in one call) → selective `dejared_decompile_class` only where method body logic is needed. If CFR output has issues, retry with `vineflower` or `procyon`.
 
-**Hunt** - search-driven investigation:
-Pick search tool (`dejared_search_class` or `dejared_search_string`) → triage results → `dejared_get_metadata` on promising matches → `dejared_decompile_class` only if needed. Never skip the metadata step.
+**Hunt** — search-driven investigation:
+Pick search tool (`dejared_search_class` or `dejared_search_string`) → triage results → `dejared_get_metadata` on promising matches → `dejared_decompile_class` only if needed.
 
-**Deep Analysis** - single class investigation:
+**Deep Analysis** — single class investigation:
 `dejared_get_metadata` first → `dejared_decompile_class` (CFR default) → cross-reference with `dejared_search_class` or `dejared_dump_package_metadata` if needed. If CFR output has issues (broken lambdas, `goto` statements, missing method bodies), retry with `vineflower` (best for modern Java features like records, sealed classes, pattern matching) or `procyon` (handles some obfuscated/edge-case bytecode better).