dejared-mcp 1.0.0 → 1.0.1

package/.claude-plugin/marketplace.json

@@ -1,8 +1,8 @@
 {
   "name": "dejared-mcp-marketplace",
   "owner": {
-    "name": "HuynhKhanh1402",
-    "email": "huynhkhanh14022004@gmail.com"
+    "name": "hqkh4nh",
+    "email": "khanh@duck.com"
   },
   "metadata": {
     "description": "MCP server and Claude Code plugin for exploring, analyzing, and decompiling Java JAR files"
@@ -12,9 +12,9 @@
       "name": "dejared",
       "source": "./",
       "description": "Explore, analyze, and decompile Java JAR files with structured workflows.",
-      "version": "1.0.0",
+      "version": "1.0.1",
       "author": {
-        "name": "HuynhKhanh1402"
+        "name": "hqkh4nh"
       },
       "license": "MIT",
       "keywords": ["java", "jar", "decompiler", "bytecode", "reverse-engineering", "mcp"],

package/.claude-plugin/plugin.json

@@ -1,11 +1,11 @@
 {
   "name": "dejared",
   "description": "Explore, analyze, and decompile Java JAR files with structured workflows.",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "author": {
-    "name": "HuynhKhanh1402"
+    "name": "hqkh4nh"
   },
-  "repository": "https://github.com/HuynhKhanh1402/dejared-mcp",
+  "repository": "https://github.com/hqkh4nh/dejared-mcp",
   "license": "MIT",
   "keywords": ["java", "jar", "decompiler", "bytecode", "reverse-engineering", "mcp"],
   "mcpServers": {

package/README.md

@@ -174,7 +174,7 @@ Or add it to your project's `.mcp.json` using the standard config above.
 **Plugin (Marketplace)** installs both the MCP server and the `/jar-analysis` skill:
 
 ```bash
-claude plugin marketplace add HuynhKhanh1402/dejared-mcp
+claude plugin marketplace add hqkh4nh/dejared-mcp
 claude plugin install dejared@dejared-mcp-marketplace
 ```
 
@@ -354,7 +354,7 @@ Open Windsurf settings, navigate to MCP servers, and add a new server using the
 
 If you prefer to run the server JAR directly without Node.js:
 
-1. Download the latest JAR from [GitHub Releases](https://github.com/HuynhKhanh1402/dejared-mcp/releases).
+1. Download the latest JAR from [GitHub Releases](https://github.com/hqkh4nh/dejared-mcp/releases).
 
 2. Run it:
    ```bash
@@ -477,7 +477,7 @@ cd java-mcp
 
 ### Reporting Issues
 
-Open an issue on [GitHub Issues](https://github.com/HuynhKhanh1402/dejared-mcp/issues)
+Open an issue on [GitHub Issues](https://github.com/hqkh4nh/dejared-mcp/issues)
 with steps to reproduce the problem, your Java version, and your
 Node.js version.
 

package/lib/jar-runner.js

@@ -42,7 +42,7 @@ function getCacheDir() {
 
 const CACHE_DIR = getCacheDir();
 const JAR_PATH = path.join(CACHE_DIR, JAR_NAME);
-const DOWNLOAD_URL = `https://github.com/HuynhKhanh1402/dejared-mcp/releases/download/v${JAR_VERSION}/${JAR_NAME}`;
+const DOWNLOAD_URL = `https://github.com/hqkh4nh/dejared-mcp/releases/download/v${JAR_VERSION}/${JAR_NAME}`;
 
 function log(msg) {
   process.stderr.write(`[dejared-mcp] ${msg}\n`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dejared-mcp",
-  "version": "1.0.0",
-  "mcpName": "io.github.HuynhKhanh1402/dejared",
+  "version": "1.0.1",
+  "mcpName": "io.github.hqkh4nh/dejared",
   "description": "Explore, analyze, and decompile Java JAR files via MCP",
   "bin": {
     "dejared-mcp": "bin/dejared-mcp.js"
@@ -16,10 +16,10 @@
     "LICENSE"
   ],
   "license": "MIT",
-  "author": "HuynhKhanh1402",
+  "author": "hqkh4nh",
   "repository": {
     "type": "git",
-    "url": "https://github.com/HuynhKhanh1402/dejared-mcp"
+    "url": "https://github.com/hqkh4nh/dejared-mcp"
   },
   "keywords": [
     "mcp",

package/skills/jar-analysis/SKILL.md

@@ -1,13 +1,40 @@
 ---
 name: jar-analysis
 description: >
-  Explore, search, and decompile Java JAR files. Quick use cases for
-  common tasks (lookup, read config, get signatures) and workflows for
-  deeper analysis (Explore, Hunt, Deep Analysis).
+  Explore, search, read, and decompile Java JAR, WAR, EAR, AAR, and
+  Spring Boot fat-jar files via the dejared MCP server. Use this skill
+  whenever the user references a `.jar` file path, asks what a
+  third-party Java library does, wants to read a config embedded in a
+  JAR (application.yml, spring.factories, MANIFEST.MF), needs class
+  metadata (superclass, annotations, method signatures), is chasing a
+  stack trace into a dependency without source, or is reverse-engineering
+  a plugin/mod/obfuscated artifact. Applies to artifacts in
+  `~/.m2/repository`, `~/.gradle/caches`, `build/libs/`, `target/`,
+  `lib/`, and `libs/`. Prefer the dejared MCP tools over `jar tf`,
+  `jar xf`, `unzip`, `javap -p`, `javap -c`, `javap -v`, or running a
+  decompiler manually — even if the user doesn't explicitly ask for
+  "the dejared tools" or "decompilation".
 ---
 
 # JAR Analysis
 
+## When This Skill Applies
+
+Reach for these tools — never the shell — whenever the task touches the **inside** of a Java artifact:
+
+| You would reach for...                       | Use this instead                                       |
+|----------------------------------------------|--------------------------------------------------------|
+| `jar tf some.jar`                            | `dejared_list_packages` / `dejared_list_classes`       |
+| `jar tf some.jar \| grep -v .class`          | `dejared_list_resources`                               |
+| `unzip -p some.jar application.yml`          | `dejared_read_resource`                                |
+| `jar tf some.jar \| grep -i FooBar`          | `dejared_search_class`                                 |
+| `strings some.jar \| grep http`              | `dejared_search_string`                                |
+| `javap -p com.foo.Bar`                       | `dejared_get_metadata`                                 |
+| `javap -p` across a package                  | `dejared_dump_package_metadata`                        |
+| Running CFR / Vineflower / Procyon manually  | `dejared_decompile_class`                              |
+
+Applies to `.jar`, `.war`, `.ear`, `.aar` and any artifact under `~/.m2/repository`, `~/.gradle/caches`, `build/libs/`, `target/`, `lib/`, or `libs/`. All calls need an **absolute path** to the archive.
+
 ## Available Tools
 
 | Tool | Cost | Purpose |
@@ -25,6 +52,7 @@ description: >
 ## Shared Rules
 
 - All tool calls require the **absolute path** to the JAR file.
+- Prefer these MCP tools over shelling out to jar/javap/unzip/strings or asking the user to decompile manually — structured output is faster and safer for the agent to consume.
 - Check metadata before decompiling — it often provides enough information without the cost of full decompilation.
 - Default decompiler: CFR. If output is broken, try `vineflower` or `procyon`.
 - Report results in structured format.