githits 0.2.3 → 0.3.1

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "GitHits plugins for Claude Code - code examples from global open source",
-    "version": "0.2.3"
+    "version": "0.3.1"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.2.3",
+  "version": "0.3.1",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.2.3",
+  "version": "0.3.1",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/GEMINI.md

@@ -66,13 +66,11 @@ Do not use `get_example` for:
 - Keep queries focused: 3-4 technical terms maximum
 - Submit `feedback` after every search result you use or discard
 
-## Feature-Gated Tools
+## Indexed Package/Source Tools
 
-When the authenticated token carries the `code_navigation` feature flag, GitHits
-also exposes indexed dependency/package tools such as `search`,
-`search_status`, `package_summary`, `package_vulnerabilities`,
-`package_dependencies`, `package_changelog`, `list_files`, `read_file`, and
-`grep_repo`.
+GitHits also exposes indexed dependency/package tools such as `search`,
+`search_status`, `docs_list`, `docs_read`, `pkg_info`, `pkg_vulns`,
+`pkg_deps`, `pkg_changelog`, `code_files`, `code_read`, and `code_grep`.
 
 ## License Filtering
 

package/README.md

@@ -12,7 +12,7 @@ npx githits init
 
 `init` authenticates with your [GitHits](https://githits.com) account, then auto-detects your installed coding tools and configures each one with GitHits MCP.
 
-Supported tools: Claude Code, Cursor, Windsurf, VS Code / Copilot, Cline, Claude Desktop, Codex CLI, Gemini CLI, and Google Antigravity.
+Supported tools: Claude Code, Cursor, Windsurf, VS Code / Copilot, Cline, Claude Desktop, Codex CLI, Gemini CLI, Google Antigravity, and OpenCode.
 
 If you are using a tool that is not listed above, use the manual MCP setup instructions near the end of this README.
 
@@ -82,7 +82,7 @@ For plugin-based hosts, install from npm/GitHub using your agent's plugin workfl
 - **GitHub Copilot**: supports Open Plugin components
 - **Gemini CLI**: supports `gemini-extension.json` and `GEMINI.md`
 
-That's it. Your assistant now has GitHits example-search tools, and on accounts with package/source access enabled it also gets indexed dependency/package inspection tools.
+That's it. Your assistant now has GitHits example-search tools and indexed dependency/package inspection tools.
 
 ## How It Works
 
@@ -98,21 +98,21 @@ Core tools available in every authenticated session:
 
 The assistant decides when to call these tools on its own — typically when it's stuck, needs a working example for an unfamiliar API, or encounters an error it can't resolve from its training data alone.
 
-When package/source access is enabled for the current token, GitHits also exposes these capability-gated tools:
+GitHits also exposes indexed package/source tools:
 
 | Tool | Purpose |
 |---|---|
 | `search` | Unified indexed search across dependency/repository code, docs, and symbols |
 | `search_status` | Follow up a prior indexed `search` by `searchRef` |
-| `package_summary` | Quick package overview: version, license, downloads, quickstart, advisories |
-| `package_vulnerabilities` | CVE / OSV advisories for a package or specific version |
-| `package_dependencies` | Direct dependencies, dependency groups, and optional transitive graph |
-| `package_changelog` | Release notes / changelog entries for a package or GitHub repo |
-| `list_files` | Discover what files a dependency or repo contains |
-| `read_file` | Read a dependency file by path |
-| `grep_repo` | Deterministic text grep across indexed dependency or repo files |
-
-These advanced tools remain feature-gated. The MCP server advertises them only when the authenticated token explicitly carries the `code_navigation` feature flag.
+| `docs_list` | Browse mixed package documentation pages |
+| `docs_read` | Read a documentation page by page ID |
+| `pkg_info` | Quick package overview: version, license, downloads, quickstart, advisories |
+| `pkg_vulns` | CVE / OSV advisories for a package or specific version |
+| `pkg_deps` | Direct dependencies, dependency groups, and optional transitive graph |
+| `pkg_changelog` | Release notes / changelog entries for a package or GitHub repo |
+| `code_files` | Discover what files a dependency or repo contains |
+| `code_read` | Read a dependency file by path |
+| `code_grep` | Deterministic text grep across indexed dependency or repo files |
 
 ### License Filtering
 
@@ -132,7 +132,7 @@ GitHits requires authentication. There are two options:
 npx githits login
 ```
 
-Opens your browser for secure OAuth authentication. Tokens are stored locally and refreshed automatically on next use. If a refresh fails (e.g., after an extended idle period), run `githits login` again.
+Opens your browser for secure OAuth authentication. Tokens are stored in the system keychain by default and refreshed automatically on next use. If a refresh fails (e.g., after an extended idle period), run `githits login` again.
 
 Useful flags:
 
@@ -148,6 +148,18 @@ For CI or environments where browser login isn't practical, set an environment v
 export GITHITS_API_TOKEN=ghi-your-token-here
 ```
 
+For machines without a usable keychain, OAuth file storage must be explicit:
+
+```toml
+# ~/.config/githits/config.toml on Linux
+[auth]
+storage = "file"
+```
+
+File storage is plaintext on disk. Prefer `GITHITS_API_TOKEN` for CI and automation.
+
+You can also opt in for one process with `GITHITS_AUTH_STORAGE=file`. Use file storage only on machines where local file access is trusted.
+
 ## Commands
 
 ```
@@ -162,12 +174,13 @@ githits languages      List or filter supported language names
 githits feedback       Send feedback on a returned example
 ```
 
-When the current token explicitly carries `code_navigation`, these extra commands are also available:
+These indexed package/source commands are also available:
 
 ```
 githits search ...     Unified indexed dependency/repository search
 githits search-status  Follow up a prior indexed search
 githits pkg ...        Package metadata: overview, advisories, deps, changelog
+githits docs ...       Package documentation: browse pages and read content
 githits code ...       Dependency source inspection: search, files, read, grep
 ```
 
@@ -176,17 +189,18 @@ githits code ...       Dependency source inspection: search, files, read, grep
 | Variable | Purpose | Default |
 |---|---|---|
 | `GITHITS_API_TOKEN` | API token for authentication | — |
+| `GITHITS_AUTH_STORAGE` | Override OAuth storage mode (`keychain` or `file`) | `keychain` |
 | `GITHITS_MCP_URL` | Override MCP server URL | `https://mcp.githits.com` |
 | `GITHITS_API_URL` | Override REST API URL | `https://api.githits.com` |
-| `GITHITS_CODE_NAV_URL` | Override package/source service URL | environment-specific |
-| `GITHITS_CODE_NAVIGATION` | Expose hidden `search` / `pkg` / `code` CLI surfaces locally for development | — |
+| `GITHITS_CODE_NAV_URL` | Override package/source service URL | `https://pkgseer.dev` |
 | `GITHITS_TELEMETRY` | Emit end-of-run timing spans to stderr for local profiling | — |
+| `GITHITS_DISABLE_UPDATE_CHECK` | Disable npm latest-version update notices | — |
 
 ## Manual Setup
 
 If your tool is not in the supported `githits init` list, configure GitHits manually.
 
-The same MCP server command exposes both the core example-search tools and, when your token carries `code_navigation`, the indexed package/source inspection tools. No separate install is required.
+The same MCP server command exposes both the core example-search tools and the indexed package/source inspection tools. No separate install is required.
 
 Use this MCP server command in your tool's MCP config (the host/agent runs this command):
 

package/commands/help.md

@@ -25,7 +25,7 @@ context summary:
 
 ## MCP Tools
 
-This plugin connects to the GitHits MCP server and always exposes three core tools:
+This plugin connects to the GitHits MCP server and always exposes these core tools:
 
 - **get_example** — Find code examples by describing what you need in natural
   language. Requires `query`; `language` is optional and inferred when omitted.
@@ -33,9 +33,9 @@ This plugin connects to the GitHits MCP server and always exposes three core too
   need to force a specific language.
 - **feedback** — Rate a search result to improve future quality.
 
-Additional indexed dependency/package tools such as `search`, `package_summary`,
-`list_files`, and `grep_repo` stay hidden unless the authenticated token carries
-the `code_navigation` feature flag.
+Additional indexed dependency/package tools are available by default:
+`search`, `search_status`, `docs_list`, `docs_read`, `pkg_info`, `pkg_vulns`,
+`pkg_deps`, `pkg_changelog`, `code_files`, `code_read`, and `code_grep`.
 
 ## Authentication