githits 0.1.8 → 0.1.10

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "GitHits plugins for Claude Code - code examples from global open source",
-    "version": "0.1.8"
+    "version": "0.1.10"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/README.md

@@ -82,11 +82,13 @@ For plugin-based hosts, install from npm/GitHub using your agent's plugin workfl
 - **GitHub Copilot**: supports Open Plugin components
 - **Gemini CLI**: supports `gemini-extension.json` and `GEMINI.md`
 
-That's it. Your assistant now has a `search` tool it will use automatically when it needs code examples.
+That's it. Your assistant now has GitHits search tools, and on accounts with package/source access enabled it also gets dependency inspection tools.
 
 ## How It Works
 
-GitHits runs as an [MCP server](https://modelcontextprotocol.io/) that your AI assistant connects to over stdio. The assistant gets three tools:
+GitHits runs as an [MCP server](https://modelcontextprotocol.io/) that your AI assistant connects to over stdio.
+
+Core tools available in every authenticated session:
 
 | Tool | Purpose |
 |---|---|
@@ -96,6 +98,21 @@ GitHits runs as an [MCP server](https://modelcontextprotocol.io/) that your AI a
 
 The assistant decides when to call these tools on its own — typically when it's stuck, needs a working example for an unfamiliar API, or encounters an error it can't resolve from its training data alone.
 
+When package/source access is enabled for the current token, GitHits also exposes these capability-gated tools:
+
+| Tool | Purpose |
+|---|---|
+| `package_summary` | Quick package overview: version, license, downloads, quickstart, advisories |
+| `package_vulnerabilities` | CVE / OSV advisories for a package or specific version |
+| `package_dependencies` | Direct dependencies, dependency groups, and optional transitive graph |
+| `package_changelog` | Release notes / changelog entries for a package or GitHub repo |
+| `search_symbols` | Exact-token search inside indexed dependency source |
+| `list_files` | Discover what files a dependency or repo contains |
+| `read_file` | Read a dependency file by path |
+| `grep_file` | Search for a case-insensitive substring within one file |
+
+These advanced tools remain feature-gated. The MCP server advertises them only when the authenticated token is entitled to package/source access.
+
 ### License Filtering
 
 Search results respect license filtering by default, excluding copyleft-licensed code. Three modes are available:
@@ -141,6 +158,13 @@ githits mcp start      Always start MCP server (for use in MCP config files)
 githits auth status    Show current authentication status
 ```
 
+When package/source access is enabled for the current token, two extra command groups are also available:
+
+```
+githits pkg ...        Package metadata: overview, advisories, deps, changelog
+githits code ...       Dependency source inspection: search, files, read, grep
+```
+
 ## Environment Variables
 
 | Variable | Purpose | Default |
@@ -148,11 +172,16 @@ githits auth status    Show current authentication status
 | `GITHITS_API_TOKEN` | API token for authentication | — |
 | `GITHITS_MCP_URL` | Override MCP server URL | `https://mcp.githits.com` |
 | `GITHITS_API_URL` | Override REST API URL | `https://api.githits.com` |
+| `GITHITS_CODE_NAV_URL` | Override package/source service URL | environment-specific |
+| `GITHITS_CODE_NAVIGATION` | Expose hidden `pkg` / `code` command groups locally | — |
+| `GITHITS_TELEMETRY` | Emit end-of-run timing spans to stderr for local profiling | — |
 
 ## Manual Setup
 
 If your tool is not in the supported `githits init` list, configure GitHits manually.
 
+The same MCP server command exposes both the core search tools and, when your token is entitled, the package/source inspection tools. No separate install is required.
+
 Use this MCP server command in your tool's MCP config (the host/agent runs this command):
 
 ```sh