githits 0.4.0 → 0.4.2

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "GitHits plugins for Claude Code - code examples from global open source",
-    "version": "0.4.0"
+    "version": "0.4.2"
   },
   "plugins": [
     {

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/dist/cli.js

@@ -49,11 +49,11 @@ import {
   shouldRunUpdateCheck,
   startTelemetrySpan,
   withTelemetrySpan
-} from "./shared/chunk-1cyka46a.js";
+} from "./shared/chunk-v8sths32.js";
 import {
   __require,
   version
-} from "./shared/chunk-fqzth5mv.js";
+} from "./shared/chunk-jdygt0ra.js";
 
 // src/cli.ts
 import { Command } from "commander";
@@ -411,6 +411,19 @@ function dim(text, useColors) {
 }
 
 // src/shared/pkgseer-registry.ts
+var PKGSEER_REGISTRY_ARGS = [
+  "npm",
+  "pypi",
+  "hex",
+  "crates",
+  "nuget",
+  "maven",
+  "zig",
+  "vcpkg",
+  "packagist",
+  "rubygems",
+  "go"
+];
 var registryMap = {
   npm: "NPM",
   pypi: "PYPI",
@@ -420,8 +433,11 @@ var registryMap = {
   maven: "MAVEN",
   zig: "ZIG",
   vcpkg: "VCPKG",
-  packagist: "PACKAGIST"
+  packagist: "PACKAGIST",
+  rubygems: "RUBYGEMS",
+  go: "GO"
 };
+var PKGSEER_REGISTRY_LIST = PKGSEER_REGISTRY_ARGS.join(", ");
 function toPkgseerRegistry(registry) {
   return registryMap[registry];
 }
@@ -688,22 +704,12 @@ function isInvalidArgumentError(error2) {
   return error2.name.startsWith("Invalid") || error2.name.startsWith("Unsupported");
 }
 // src/shared/package-spec.ts
-var KNOWN_REGISTRIES = [
-  "npm",
-  "pypi",
-  "hex",
-  "crates",
-  "nuget",
-  "maven",
-  "zig",
-  "vcpkg",
-  "packagist"
-];
+var KNOWN_REGISTRIES = PKGSEER_REGISTRY_ARGS;
 
 class UnsupportedRegistryError extends Error {
   attempted;
   constructor(attempted) {
-    super(`Unsupported registry "${attempted}". Supported: ${KNOWN_REGISTRIES.join(", ")}.`);
+    super(`Unsupported registry "${attempted}". Supported: ${PKGSEER_REGISTRY_LIST}.`);
     this.attempted = attempted;
     this.name = "UnsupportedRegistryError";
   }
@@ -1764,7 +1770,7 @@ function buildListPackageDocsParams(input) {
   }
   const registry = input.registry?.trim().toLowerCase() ?? "";
   if (!isKnownPkgseerRegistryArg(registry)) {
-    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist.`);
+    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: ${PKGSEER_REGISTRY_LIST}.`);
   }
   const params = {
     registry: toPkgseerRegistry(registry),
@@ -2012,9 +2018,11 @@ var SUPPORTED_DEPS_REGISTRIES = new Set([
   "HEX",
   "CRATES",
   "VCPKG",
-  "ZIG"
+  "ZIG",
+  "RUBYGEMS",
+  "GO"
 ]);
-var SUPPORTED_DEPS_REGISTRIES_HUMAN = "npm, pypi, hex, crates, vcpkg, and zig";
+var SUPPORTED_DEPS_REGISTRIES_HUMAN = "npm, pypi, hex, crates, vcpkg, zig, rubygems, and go";
 function supportsDependenciesRegistry(registry) {
   return SUPPORTED_DEPS_REGISTRIES.has(registry);
 }
@@ -2025,7 +2033,7 @@ function buildPackageDependenciesParams(input) {
   }
   const normalisedRegistryArg = input.registry?.trim().toLowerCase() ?? "";
   if (!isKnownPkgseerRegistryArg(normalisedRegistryArg)) {
-    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist.`);
+    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: ${PKGSEER_REGISTRY_LIST}.`);
   }
   const registry = toPkgseerRegistry(normalisedRegistryArg);
   if (!supportsDependenciesRegistry(registry)) {
@@ -2831,7 +2839,7 @@ function buildPackageSummaryParams(input) {
   }
   const normalisedRegistry = input.registry?.trim().toLowerCase() ?? "";
   if (!isKnownPkgseerRegistryArg(normalisedRegistry)) {
-    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist.`);
+    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: ${PKGSEER_REGISTRY_LIST}.`);
   }
   return {
     params: {
@@ -3233,7 +3241,7 @@ function buildPackageVulnerabilitiesParams(input) {
   }
   const normalisedRegistryArg = input.registry?.trim().toLowerCase() ?? "";
   if (!isKnownPkgseerRegistryArg(normalisedRegistryArg)) {
-    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist.`);
+    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: ${PKGSEER_REGISTRY_LIST}.`);
   }
   const registry = toPkgseerRegistry(normalisedRegistryArg);
   if (!supportsVulnerabilitiesRegistry(registry)) {
@@ -4168,150 +4176,437 @@ function buildRange2(envelope) {
     return `${envelope.totalLines} lines`;
   return;
 }
-// src/shared/auto-login.ts
-var AUTO_LOGIN_ELIGIBLE_COMMANDS = new Set([
-  "example",
-  "languages",
-  "feedback",
-  "search",
-  "search-status",
-  "code files",
-  "code read",
-  "code grep",
-  "docs list",
-  "docs read",
-  "pkg info",
-  "pkg vulns",
-  "pkg deps",
-  "pkg changelog"
-]);
-function getCommandPath(command) {
-  const names = [];
-  let current = command;
-  while (current) {
-    const name = current.name();
-    if (name && name !== "githits") {
-      names.unshift(name);
-    }
-    current = current.parent ?? null;
+// src/commands/login.ts
+var stdoutLoginOutput = {
+  write: (message) => {
+    console.log(message);
   }
-  return names;
-}
-function isAutoLoginEligibleCommand(command, runtime = {
-  stdinIsTTY: Boolean(process.stdin.isTTY),
-  stdoutIsTTY: Boolean(process.stdout.isTTY)
-}) {
-  const commandPath = getCommandPath(command).join(" ");
-  if (!AUTO_LOGIN_ELIGIBLE_COMMANDS.has(commandPath)) {
-    return false;
+};
+var stderrLoginOutput = {
+  write: (message) => {
+    console.error(message);
   }
-  if (!runtime.stdinIsTTY || !runtime.stdoutIsTTY) {
-    return false;
+};
+var TIMEOUT_MS = 5 * 60 * 1000;
+var AUTH_TIMEOUT_MESSAGE = "Authentication timed out after 5 minutes. The browser link has expired, so it will not work anymore. Run the same command again to try signing in again.";
+function randomPort() {
+  return Math.floor(Math.random() * 2000) + 8000;
+}
+async function preflightAuthPersistence(authStorage, mcpUrl) {
+  const probeUrl = `${mcpUrl.replace(/\/+$/, "")}/__githits_storage_probe__`;
+  const probeClient = {
+    clientId: "__githits_storage_probe__",
+    clientSecret: "__githits_storage_probe__",
+    redirectUri: "http://127.0.0.1:1/callback",
+    registeredAt: new Date(0).toISOString()
+  };
+  const probeTokens = {
+    accessToken: "__githits_storage_probe__",
+    refreshToken: "__githits_storage_probe__",
+    expiresAt: new Date(0).toISOString(),
+    createdAt: new Date(0).toISOString()
+  };
+  try {
+    await authStorage.saveAuthSession(probeUrl, probeClient, probeTokens);
+    await authStorage.clearAuthSession(probeUrl);
+    return null;
+  } catch (error2) {
+    await authStorage.clearAuthSession(probeUrl).catch(() => {});
+    const message = error2 instanceof Error ? error2.message : String(error2);
+    return {
+      status: "failed",
+      message: `Cannot persist OAuth credentials: ${message}`
+    };
   }
-  return true;
 }
-async function maybeAutoLoginBeforeCommand(command, deps) {
-  if (!isAutoLoginEligibleCommand(command, {
-    stdinIsTTY: deps.stdinIsTTY ?? Boolean(process.stdin.isTTY),
-    stdoutIsTTY: deps.stdoutIsTTY ?? Boolean(process.stdout.isTTY)
-  })) {
-    return { status: "skipped" };
+async function loginFlow(options, deps, output = stdoutLoginOutput) {
+  const { authService, authStorage, browserService, mcpUrl } = deps;
+  const existing = await authStorage.loadTokens(mcpUrl);
+  if (options.port !== undefined && (Number.isNaN(options.port) || options.port < 1 || options.port > 65535)) {
+    return {
+      status: "failed",
+      message: "Invalid port number. Must be between 1 and 65535."
+    };
   }
-  const container = await deps.createContainer();
-  if (container.hasValidToken) {
-    return { status: "already-authenticated" };
+  if (existing && !options.force) {
+    const isExpired = existing.expiresAt && new Date(existing.expiresAt) < new Date;
+    if (!isExpired) {
+      return { status: "already_authenticated", message: "Already logged in." };
+    }
+    output.write(`Token expired. Starting new login...
+`);
+  } else if (existing && options.force) {
+    output.write(`Re-authenticating (--force flag)...
+`);
   }
-  const result = await deps.loginFlow({}, container);
-  switch (result.status) {
-    case "success":
-      return { status: "authenticated", message: result.message };
-    case "already_authenticated":
-      return { status: "already-authenticated", message: result.message };
-    case "failed":
-      return { status: "failed", message: result.message };
+  if (!existing) {
+    await authStorage.clearClient(mcpUrl);
   }
-}
-
-// src/shared/root-cli-pre-action.ts
-function createRootCliPreAction(deps) {
-  return async (thisCommand, actionCommand) => {
-    if (thisCommand.opts().color === false) {
-      process.env.NO_COLOR = "1";
-    }
-    const command = actionCommand ?? thisCommand;
-    const authResult = await maybeAutoLoginBeforeCommand(command, {
-      ...deps,
-      stdinIsTTY: deps.stdinIsTTY,
-      stdoutIsTTY: deps.stdoutIsTTY
-    });
-    if (authResult.status === "authenticated") {
-      const continuationMessage = getPostLoginContinuationMessage(command);
-      if (continuationMessage) {
-        console.error(continuationMessage);
+  const persistenceError = await preflightAuthPersistence(authStorage, mcpUrl);
+  if (persistenceError)
+    return persistenceError;
+  output.write("Discovering OAuth endpoints...");
+  const metadata = await authService.discoverEndpoints(mcpUrl);
+  let client = await authStorage.loadClient(mcpUrl);
+  const hadStoredClient = client !== null;
+  let shouldClearClientOnFailedAttempt = false;
+  let port;
+  let redirectUri;
+  if (client) {
+    if (options.port) {
+      redirectUri = `http://127.0.0.1:${options.port}/callback`;
+      if (redirectUri !== client.redirectUri) {
+        output.write("Registering CLI client with new port...");
+        const registration = await authService.registerClient({
+          registrationEndpoint: metadata.registrationEndpoint,
+          redirectUri
+        });
+        client = {
+          clientId: registration.clientId,
+          clientSecret: registration.clientSecret,
+          redirectUri,
+          registeredAt: new Date().toISOString()
+        };
+        shouldClearClientOnFailedAttempt = !hadStoredClient;
       }
+      port = options.port;
+    } else {
+      redirectUri = client.redirectUri;
+      const storedUrl = new URL(redirectUri);
+      port = Number(storedUrl.port) || randomPort();
     }
-    if (authResult.status !== "failed") {
-      return;
-    }
-    console.error(`${authResult.message}
-`);
-    console.error("Run `githits login` to try again.");
-    (deps.exit ?? process.exit)(1);
-  };
-}
-function getPostLoginContinuationMessage(command) {
-  switch (getCommandPath(command).join(" ")) {
-    case "example":
-      return "Authentication complete. Running example search...";
-    case "languages":
-      return "Authentication complete. Loading supported languages...";
-    case "feedback":
-      return "Authentication complete. Submitting feedback...";
-    case "search":
-    case "search-status":
-    case "code files":
-    case "code read":
-    case "code grep":
-    case "docs list":
-    case "docs read":
-    case "pkg info":
-    case "pkg vulns":
-    case "pkg deps":
-    case "pkg changelog":
-      return "Authentication complete. Running command...";
-    default:
-      return;
+  } else {
+    port = options.port ?? randomPort();
+    redirectUri = `http://127.0.0.1:${port}/callback`;
+    output.write("Registering CLI client...");
+    const registration = await authService.registerClient({
+      registrationEndpoint: metadata.registrationEndpoint,
+      redirectUri
+    });
+    client = {
+      clientId: registration.clientId,
+      clientSecret: registration.clientSecret,
+      redirectUri,
+      registeredAt: new Date().toISOString()
+    };
+    shouldClearClientOnFailedAttempt = !hadStoredClient;
   }
-}
-// src/shared/unified-search-request.ts
-var DEFAULT_UNIFIED_SEARCH_LIMIT = 10;
-function buildUnifiedSearchParams(input) {
-  const targets = resolveTargets(input.target, input.targets);
-  const rawQuery = normaliseRequiredQuery(input.query);
-  const limit = input.limit ?? DEFAULT_UNIFIED_SEARCH_LIMIT;
-  const offset = input.offset ?? 0;
-  const waitTimeoutMs = input.waitTimeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
-  const qualifierClauses = buildQualifierClauses({
-    name: input.name,
-    language: input.language
-  });
-  const compiledQuery = compileQuery(rawQuery, qualifierClauses);
-  const filters = buildFilters({
-    kind: input.kind,
-    category: input.category,
-    pathPrefix: input.pathPrefix,
-    fileIntent: input.fileIntent,
-    publicOnly: input.publicOnly
+  const { verifier, challenge, state } = authService.generatePkceParams();
+  const authUrl = authService.buildAuthUrl({
+    authorizationEndpoint: metadata.authorizationEndpoint,
+    clientId: client.clientId,
+    redirectUri,
+    state,
+    codeChallenge: challenge
   });
-  return {
-    params: {
-      targets,
-      query: compiledQuery,
-      sources: input.sources,
-      filters,
-      allowPartialResults: input.allowPartialResults,
-      limit,
-      offset,
+  let callbackServer;
+  try {
+    callbackServer = await authService.startCallbackServer(port, state);
+  } catch (error2) {
+    const msg = error2 instanceof Error ? error2.message : String(error2);
+    return { status: "failed", message: msg };
+  }
+  if (options.browser === false) {
+    output.write(`Open this URL in your browser:
+`);
+    output.write(`  ${authUrl}
+`);
+  } else {
+    output.write("Opening browser...");
+    try {
+      await browserService.open(authUrl);
+    } catch (error2) {
+      const msg = error2 instanceof Error ? error2.message : String(error2);
+      output.write(`Could not open browser automatically: ${msg}
+`);
+      output.write(`Open this URL in your browser:
+`);
+      output.write(`  ${authUrl}
+`);
+    }
+  }
+  output.write(`Waiting for authentication...
+`);
+  let timeoutId;
+  const timeoutPromise = new Promise((_, reject) => {
+    timeoutId = setTimeout(() => reject(new Error(AUTH_TIMEOUT_MESSAGE)), TIMEOUT_MS);
+  });
+  let callback;
+  try {
+    callback = await Promise.race([callbackServer.result, timeoutPromise]);
+    if (timeoutId)
+      clearTimeout(timeoutId);
+    await callbackServer.close().catch(() => {});
+  } catch (error2) {
+    if (timeoutId)
+      clearTimeout(timeoutId);
+    await callbackServer.close().catch(() => {});
+    if (shouldClearClientOnFailedAttempt) {
+      await authStorage.clearClient(mcpUrl).catch(() => {});
+    }
+    const msg = error2 instanceof Error ? error2.message : "Authentication failed";
+    return { status: "failed", message: ensureTerminalPeriod(msg) };
+  }
+  if (callback.type !== "success") {
+    await new Promise((r) => setTimeout(r, 2000));
+    if (shouldClearClientOnFailedAttempt) {
+      await authStorage.clearClient(mcpUrl).catch(() => {});
+    }
+    return {
+      status: "failed",
+      message: callback.message ?? "Authentication callback failed."
+    };
+  }
+  let tokenResponse;
+  try {
+    tokenResponse = await authService.exchangeCodeForTokens({
+      tokenEndpoint: metadata.tokenEndpoint,
+      clientId: client.clientId,
+      clientSecret: client.clientSecret,
+      code: callback.code,
+      codeVerifier: verifier,
+      redirectUri
+    });
+  } catch (error2) {
+    try {
+      await authStorage.clearClient(mcpUrl);
+    } catch {}
+    const msg = error2 instanceof Error ? error2.message : String(error2);
+    return {
+      status: "failed",
+      message: `Failed to complete authentication: ${msg}`
+    };
+  }
+  const expiresAt = new Date(Date.now() + tokenResponse.expiresIn * 1000).toISOString();
+  await authStorage.saveAuthSession(mcpUrl, client, {
+    accessToken: tokenResponse.accessToken,
+    refreshToken: tokenResponse.refreshToken,
+    expiresAt,
+    createdAt: new Date().toISOString()
+  });
+  const hours = Math.round(tokenResponse.expiresIn / 3600);
+  return {
+    status: "success",
+    message: `Logged in successfully. Token expires in ${hours} hour${hours !== 1 ? "s" : ""}.`
+  };
+}
+async function loginAction(options, deps) {
+  const result = await loginFlow(options, deps, stdoutLoginOutput);
+  if (result.status === "already_authenticated") {
+    console.log(`Already logged in.
+`);
+    console.log(`  Environment: ${deps.mcpUrl}
+`);
+    console.log("To re-authenticate, use `githits login --force`.");
+    return;
+  }
+  if (result.status === "failed") {
+    console.error(`${result.message}
+`);
+    printLoginRecoveryHint(result.message);
+    process.exit(1);
+  }
+  console.log(`Logged in successfully.
+`);
+  console.log(`  Environment: ${deps.mcpUrl}`);
+  console.log(result.message.replace("Logged in successfully. ", "  "));
+  console.log(`
+You're ready to use githits with your AI assistant.`);
+}
+function printLoginRecoveryHint(message) {
+  console.log("Recovery steps:");
+  if (message.includes("Authentication timed out")) {
+    console.log("  Run the same command again to open a fresh sign-in link.");
+    console.log("  githits login --no-browser  # if the browser did not open or you are on SSH");
+    console.log("  githits logout && githits login  # if sign-in keeps failing after a retry");
+    return;
+  }
+  console.log("  githits auth status");
+  console.log("  githits login --force");
+  if (message.includes("Cannot persist OAuth credentials")) {
+    console.log("If your system keychain is locked or unavailable, unlock it and retry.");
+    console.log("For CI/automation, set GITHITS_API_TOKEN.");
+    console.log("As a last resort, set GITHITS_AUTH_STORAGE=file to use plaintext file storage.");
+  }
+}
+function printAutoLoginRecoveryHint(message) {
+  if (message.includes("Authentication timed out")) {
+    console.error("Run the same command again to open a fresh sign-in link.");
+    console.error("If the browser did not open, run `githits login --no-browser` and follow the printed link.");
+    console.error("If sign-in keeps failing after a retry, run `githits logout` and then run your command again.");
+    return;
+  }
+  console.error("Run the same command again to try signing in again.");
+  console.error("Run `githits auth status` to check whether you are signed in.");
+  if (message.includes("Cannot persist OAuth credentials")) {
+    console.error("If your system keychain is locked or unavailable, unlock it and try again.");
+    console.error("For CI/automation, set GITHITS_API_TOKEN.");
+  }
+}
+function ensureTerminalPeriod(message) {
+  return /[.!?]$/.test(message) ? message : `${message}.`;
+}
+var LOGIN_DESCRIPTION = `Authenticate with your GitHits account via browser.
+
+Opens your browser to complete authentication securely using OAuth.
+OAuth credentials are stored in the system keychain by default. If your
+machine has no usable keychain, use GITHITS_API_TOKEN or explicitly configure
+auth.storage = "file". File storage is plaintext on disk.
+
+Use --no-browser in environments without a display (CI, SSH sessions)
+to get a URL you can open on another device.`;
+function registerLoginCommand(program) {
+  program.command("login").summary("Authenticate with your GitHits account").description(LOGIN_DESCRIPTION).option("--no-browser", "Print URL instead of opening browser").option("--port <port>", "Port for local callback server", parseInt).option("--force", "Re-authenticate even if already logged in").action(async (options) => {
+    const deps = await createAuthCommandDependencies();
+    await loginAction(options, deps);
+  });
+}
+
+// src/shared/auto-login.ts
+var AUTO_LOGIN_ELIGIBLE_COMMANDS = new Set([
+  "example",
+  "languages",
+  "feedback",
+  "search",
+  "search-status",
+  "code files",
+  "code read",
+  "code grep",
+  "docs list",
+  "docs read",
+  "pkg info",
+  "pkg vulns",
+  "pkg deps",
+  "pkg changelog"
+]);
+function getCommandPath(command) {
+  const names = [];
+  let current = command;
+  while (current) {
+    const name = current.name();
+    if (name && name !== "githits") {
+      names.unshift(name);
+    }
+    current = current.parent ?? null;
+  }
+  return names;
+}
+function isAutoLoginEligibleCommand(command, runtime = {
+  stdinIsTTY: Boolean(process.stdin.isTTY),
+  stdoutIsTTY: Boolean(process.stdout.isTTY)
+}) {
+  const commandPath = getCommandPath(command).join(" ");
+  if (!AUTO_LOGIN_ELIGIBLE_COMMANDS.has(commandPath)) {
+    return false;
+  }
+  if (!runtime.stdinIsTTY || !runtime.stdoutIsTTY) {
+    return false;
+  }
+  return true;
+}
+async function maybeAutoLoginBeforeCommand(command, deps) {
+  if (!isAutoLoginEligibleCommand(command, {
+    stdinIsTTY: deps.stdinIsTTY ?? Boolean(process.stdin.isTTY),
+    stdoutIsTTY: deps.stdoutIsTTY ?? Boolean(process.stdout.isTTY)
+  })) {
+    return { status: "skipped" };
+  }
+  const container = await deps.createContainer();
+  if (container.hasValidToken) {
+    return { status: "already-authenticated" };
+  }
+  const result = await deps.loginFlow({}, container);
+  switch (result.status) {
+    case "success":
+      return { status: "authenticated", message: result.message };
+    case "already_authenticated":
+      return { status: "already-authenticated", message: result.message };
+    case "failed":
+      return { status: "failed", message: result.message };
+  }
+}
+
+// src/shared/root-cli-pre-action.ts
+function createRootCliPreAction(deps) {
+  return async (thisCommand, actionCommand) => {
+    if (thisCommand.opts().color === false) {
+      process.env.NO_COLOR = "1";
+    }
+    const command = actionCommand ?? thisCommand;
+    const authResult = await maybeAutoLoginBeforeCommand(command, {
+      ...deps,
+      stdinIsTTY: deps.stdinIsTTY,
+      stdoutIsTTY: deps.stdoutIsTTY
+    });
+    if (authResult.status === "authenticated") {
+      const continuationMessage = getPostLoginContinuationMessage(command);
+      if (continuationMessage) {
+        console.error(continuationMessage);
+      }
+    }
+    if (authResult.status !== "failed") {
+      return;
+    }
+    const failureMessage = authResult.message ?? "Authentication failed.";
+    console.error(`${failureMessage}
+`);
+    printAutoLoginRecoveryHint(failureMessage);
+    (deps.exit ?? process.exit)(1);
+  };
+}
+function getPostLoginContinuationMessage(command) {
+  switch (getCommandPath(command).join(" ")) {
+    case "example":
+      return "Authentication complete. Running example search...";
+    case "languages":
+      return "Authentication complete. Loading supported languages...";
+    case "feedback":
+      return "Authentication complete. Submitting feedback...";
+    case "search":
+    case "search-status":
+    case "code files":
+    case "code read":
+    case "code grep":
+    case "docs list":
+    case "docs read":
+    case "pkg info":
+    case "pkg vulns":
+    case "pkg deps":
+    case "pkg changelog":
+      return "Authentication complete. Running command...";
+    default:
+      return;
+  }
+}
+// src/shared/unified-search-request.ts
+var DEFAULT_UNIFIED_SEARCH_LIMIT = 10;
+function buildUnifiedSearchParams(input) {
+  const targets = resolveTargets(input.target, input.targets);
+  const rawQuery = normaliseRequiredQuery(input.query);
+  const limit = input.limit ?? DEFAULT_UNIFIED_SEARCH_LIMIT;
+  const offset = input.offset ?? 0;
+  const waitTimeoutMs = input.waitTimeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
+  const qualifierClauses = buildQualifierClauses({
+    name: input.name,
+    language: input.language
+  });
+  const compiledQuery = compileQuery(rawQuery, qualifierClauses);
+  const filters = buildFilters({
+    kind: input.kind,
+    category: input.category,
+    pathPrefix: input.pathPrefix,
+    fileIntent: input.fileIntent,
+    publicOnly: input.publicOnly
+  });
+  return {
+    params: {
+      targets,
+      query: compiledQuery,
+      sources: input.sources,
+      filters,
+      allowPartialResults: input.allowPartialResults,
+      limit,
+      offset,
       waitTimeoutMs
     },
     rawQuery,
@@ -5798,7 +6093,7 @@ function buildCliListFilesParams(input) {
     throw new InvalidPackageSpecError(rewritten);
   }
 }
-var REGISTRY_SPEC_HINT = /^(npm|pypi|hex|crates|nuget|maven|zig|vcpkg|packagist):/i;
+var REGISTRY_SPEC_HINT = new RegExp(`^(${PKGSEER_REGISTRY_ARGS.join("|")}):`, "i");
 function resolvePositionals(firstArg, secondArg, hasRepoUrl) {
   if (hasRepoUrl) {
     if (secondArg !== undefined) {
@@ -5824,8 +6119,7 @@ and \`githits code grep\`.
 filters intersect on top.
 
 Addressing: <spec> (registry:name[@version]) OR --repo-url <url>
---git-ref <ref>. Supported registries: npm, pypi, hex, crates,
-vcpkg, zig, nuget, maven, packagist.
+--git-ref <ref>. Supported registries: ${PKGSEER_REGISTRY_LIST}.
 
 By default each result is a bare path for easy piping; pass
 --verbose to include language / file-type / size annotations.
@@ -5977,7 +6271,7 @@ grep run. --symbol-field hydrates enclosing symbol metadata (appears under each
 match in --verbose output; full payload in --json).`;
 function registerCodeGrepCommand(pkgCommand) {
   return pkgCommand.command("grep").summary("Deterministic text grep over indexed dependency source").description(PKG_GREP_DESCRIPTION).argument("[spec-or-pattern]", "Spec mode: package spec (e.g. npm:express). Repo mode (with --repo-url): the pattern.").argument("[pattern-or-prefix]", "Spec mode: the pattern. Repo mode: optional path-prefix.").argument("[path-prefix]", "Spec mode only: optional path-prefix. Ignored with --repo-url.").option("--repo-url <url>", "Repository URL addressing (requires --git-ref)").option("--git-ref <ref>", "Tag, commit, branch, or HEAD. Required with --repo-url.").option("--path <path>", "Exact file path to grep").option("--glob <glob>", "Glob scope (repeatable)", collectRepeatable2, []).option("--ext <ext>", "Extension filter without leading dot (repeatable)", collectRepeatable2, []).option("--regex", "Interpret the pattern as RE2 regex").option("--case-sensitive", "Enable ASCII case-sensitive matching").option("-C, --context <n>", "Context lines before and after each match (0-10)").option("-B, --before-context <n>", "Context lines before each match (0-10)").option("-A, --after-context <n>", "Context lines after each match (0-10)").option("--exclude-docs", "Skip files classified as documentation").option("--exclude-tests", "Skip files classified as tests").option("--limit <n>", "Max matches to return on this page (1-1000, default 50)").option("--per-file-limit <n>", "Cap matches per file within this page (0-1000, 0 = unlimited)").option("--cursor <cursor>", "Opaque nextCursor from a previous grep result").option("--symbol-field <field>", `Repeatable; surfaces in --json and under each --verbose match. ${GREP_REPO_SYMBOL_FIELDS_NOTE}`, collectRepeatable2, []).option("--wait <ms>", `Indexing wait timeout (0-${MAX_WAIT_TIMEOUT_MS}, default ${DEFAULT_WAIT_TIMEOUT_MS})`).option("-v, --verbose", "Render grouped output with file headers").option("--json", "Emit the JSON envelope").action(async (arg1, arg2, arg3, options) => {
-    const { createContainer: createContainer2 } = await import("./shared/chunk-1h7sanjw.js");
+    const { createContainer: createContainer2 } = await import("./shared/chunk-q2mre780.js");
     const deps = await createContainer2();
     await pkgGrepAction(arg1, arg2, arg3, options, {
       codeNavigationService: deps.codeNavigationService,
@@ -6511,7 +6805,7 @@ function registerExampleCommand(program) {
   });
 }
 async function loadContainer() {
-  const { createContainer: createContainer2 } = await import("./shared/chunk-1h7sanjw.js");
+  const { createContainer: createContainer2 } = await import("./shared/chunk-q2mre780.js");
   return createContainer2();
 }
 // src/commands/feedback.ts
@@ -7280,257 +7574,6 @@ async function scanAgents(definitions, fs, execService) {
 class ExitPromptError extends Error {
   name = "ExitPromptError";
 }
-// src/commands/login.ts
-var stdoutLoginOutput = {
-  write: (message) => {
-    console.log(message);
-  }
-};
-var stderrLoginOutput = {
-  write: (message) => {
-    console.error(message);
-  }
-};
-var TIMEOUT_MS = 5 * 60 * 1000;
-function randomPort() {
-  return Math.floor(Math.random() * 2000) + 8000;
-}
-async function preflightAuthPersistence(authStorage, mcpUrl) {
-  const probeUrl = `${mcpUrl.replace(/\/+$/, "")}/__githits_storage_probe__`;
-  const probeClient = {
-    clientId: "__githits_storage_probe__",
-    clientSecret: "__githits_storage_probe__",
-    redirectUri: "http://127.0.0.1:1/callback",
-    registeredAt: new Date(0).toISOString()
-  };
-  const probeTokens = {
-    accessToken: "__githits_storage_probe__",
-    refreshToken: "__githits_storage_probe__",
-    expiresAt: new Date(0).toISOString(),
-    createdAt: new Date(0).toISOString()
-  };
-  try {
-    await authStorage.saveAuthSession(probeUrl, probeClient, probeTokens);
-    await authStorage.clearAuthSession(probeUrl);
-    return null;
-  } catch (error2) {
-    await authStorage.clearAuthSession(probeUrl).catch(() => {});
-    const message = error2 instanceof Error ? error2.message : String(error2);
-    return {
-      status: "failed",
-      message: `Cannot persist OAuth credentials: ${message}`
-    };
-  }
-}
-async function loginFlow(options, deps, output = stdoutLoginOutput) {
-  const { authService, authStorage, browserService, mcpUrl } = deps;
-  if (options.port !== undefined && (Number.isNaN(options.port) || options.port < 1 || options.port > 65535)) {
-    return {
-      status: "failed",
-      message: "Invalid port number. Must be between 1 and 65535."
-    };
-  }
-  const existing = await authStorage.loadTokens(mcpUrl);
-  if (existing && !options.force) {
-    const isExpired = existing.expiresAt && new Date(existing.expiresAt) < new Date;
-    if (!isExpired) {
-      return { status: "already_authenticated", message: "Already logged in." };
-    }
-    output.write(`Token expired. Starting new login...
-`);
-  } else if (existing && options.force) {
-    output.write(`Re-authenticating (--force flag)...
-`);
-  }
-  if (!existing) {
-    await authStorage.clearClient(mcpUrl);
-  }
-  const persistenceError = await preflightAuthPersistence(authStorage, mcpUrl);
-  if (persistenceError)
-    return persistenceError;
-  output.write("Discovering OAuth endpoints...");
-  const metadata = await authService.discoverEndpoints(mcpUrl);
-  let client = await authStorage.loadClient(mcpUrl);
-  let port;
-  let redirectUri;
-  if (client) {
-    if (options.port) {
-      redirectUri = `http://127.0.0.1:${options.port}/callback`;
-      if (redirectUri !== client.redirectUri) {
-        output.write("Registering CLI client with new port...");
-        const registration = await authService.registerClient({
-          registrationEndpoint: metadata.registrationEndpoint,
-          redirectUri
-        });
-        client = {
-          clientId: registration.clientId,
-          clientSecret: registration.clientSecret,
-          redirectUri,
-          registeredAt: new Date().toISOString()
-        };
-      }
-      port = options.port;
-    } else {
-      redirectUri = client.redirectUri;
-      const storedUrl = new URL(redirectUri);
-      port = Number(storedUrl.port) || randomPort();
-    }
-  } else {
-    port = options.port ?? randomPort();
-    redirectUri = `http://127.0.0.1:${port}/callback`;
-    output.write("Registering CLI client...");
-    const registration = await authService.registerClient({
-      registrationEndpoint: metadata.registrationEndpoint,
-      redirectUri
-    });
-    client = {
-      clientId: registration.clientId,
-      clientSecret: registration.clientSecret,
-      redirectUri,
-      registeredAt: new Date().toISOString()
-    };
-  }
-  const { verifier, challenge, state } = authService.generatePkceParams();
-  const authUrl = authService.buildAuthUrl({
-    authorizationEndpoint: metadata.authorizationEndpoint,
-    clientId: client.clientId,
-    redirectUri,
-    state,
-    codeChallenge: challenge
-  });
-  let callbackServer;
-  try {
-    callbackServer = await authService.startCallbackServer(port, state);
-  } catch (error2) {
-    const msg = error2 instanceof Error ? error2.message : String(error2);
-    return { status: "failed", message: msg };
-  }
-  if (options.browser === false) {
-    output.write(`Open this URL in your browser:
-`);
-    output.write(`  ${authUrl}
-`);
-  } else {
-    output.write("Opening browser...");
-    try {
-      await browserService.open(authUrl);
-    } catch (error2) {
-      const msg = error2 instanceof Error ? error2.message : String(error2);
-      output.write(`Could not open browser automatically: ${msg}
-`);
-      output.write(`Open this URL in your browser:
-`);
-      output.write(`  ${authUrl}
-`);
-    }
-  }
-  output.write(`Waiting for authentication...
-`);
-  let timeoutId;
-  const timeoutPromise = new Promise((_, reject) => {
-    timeoutId = setTimeout(() => reject(new Error("Authentication timed out")), TIMEOUT_MS);
-  });
-  let callback;
-  try {
-    callback = await Promise.race([callbackServer.result, timeoutPromise]);
-    if (timeoutId)
-      clearTimeout(timeoutId);
-  } catch (error2) {
-    if (timeoutId)
-      clearTimeout(timeoutId);
-    await callbackServer.close().catch(() => {});
-    const msg = error2 instanceof Error ? error2.message : "Authentication failed";
-    return { status: "failed", message: `${msg}.` };
-  }
-  if (callback.type !== "success") {
-    await new Promise((r) => setTimeout(r, 2000));
-    return {
-      status: "failed",
-      message: callback.message ?? "Authentication callback failed."
-    };
-  }
-  let tokenResponse;
-  try {
-    tokenResponse = await authService.exchangeCodeForTokens({
-      tokenEndpoint: metadata.tokenEndpoint,
-      clientId: client.clientId,
-      clientSecret: client.clientSecret,
-      code: callback.code,
-      codeVerifier: verifier,
-      redirectUri
-    });
-  } catch (error2) {
-    try {
-      await authStorage.clearClient(mcpUrl);
-    } catch {}
-    const msg = error2 instanceof Error ? error2.message : String(error2);
-    return {
-      status: "failed",
-      message: `Failed to complete authentication: ${msg}`
-    };
-  }
-  const expiresAt = new Date(Date.now() + tokenResponse.expiresIn * 1000).toISOString();
-  await authStorage.saveAuthSession(mcpUrl, client, {
-    accessToken: tokenResponse.accessToken,
-    refreshToken: tokenResponse.refreshToken,
-    expiresAt,
-    createdAt: new Date().toISOString()
-  });
-  const hours = Math.round(tokenResponse.expiresIn / 3600);
-  return {
-    status: "success",
-    message: `Logged in successfully. Token expires in ${hours} hour${hours !== 1 ? "s" : ""}.`
-  };
-}
-async function loginAction(options, deps) {
-  const result = await loginFlow(options, deps, stdoutLoginOutput);
-  if (result.status === "already_authenticated") {
-    console.log(`Already logged in.
-`);
-    console.log(`  Environment: ${deps.mcpUrl}
-`);
-    console.log("To re-authenticate, use `githits login --force`.");
-    return;
-  }
-  if (result.status === "failed") {
-    console.error(`${result.message}
-`);
-    printLoginRecoveryHint(result.message);
-    process.exit(1);
-  }
-  console.log(`Logged in successfully.
-`);
-  console.log(`  Environment: ${deps.mcpUrl}`);
-  console.log(result.message.replace("Logged in successfully. ", "  "));
-  console.log(`
-You're ready to use githits with your AI assistant.`);
-}
-function printLoginRecoveryHint(message) {
-  console.log("Recovery steps:");
-  console.log("  githits auth status");
-  console.log("  githits login --force");
-  if (message.includes("Cannot persist OAuth credentials")) {
-    console.log("If your system keychain is locked or unavailable, unlock it and retry.");
-    console.log("For CI/automation, set GITHITS_API_TOKEN.");
-    console.log("As a last resort, set GITHITS_AUTH_STORAGE=file to use plaintext file storage.");
-  }
-}
-var LOGIN_DESCRIPTION = `Authenticate with your GitHits account via browser.
-
-Opens your browser to complete authentication securely using OAuth.
-OAuth credentials are stored in the system keychain by default. If your
-machine has no usable keychain, use GITHITS_API_TOKEN or explicitly configure
-auth.storage = "file". File storage is plaintext on disk.
-
-Use --no-browser in environments without a display (CI, SSH sessions)
-to get a URL you can open on another device.`;
-function registerLoginCommand(program) {
-  program.command("login").summary("Authenticate with your GitHits account").description(LOGIN_DESCRIPTION).option("--no-browser", "Print URL instead of opening browser").option("--port <port>", "Port for local callback server", parseInt).option("--force", "Re-authenticate even if already logged in").action(async (options) => {
-    const deps = await createAuthCommandDependencies();
-    await loginAction(options, deps);
-  });
-}
-
 // src/commands/init/init.ts
 async function verifyAgentConfigured(agent, fileSystemService, execService) {
   const postCheck = await scanAgents([agent], fileSystemService, execService);
@@ -7934,17 +7977,7 @@ import { z as z4 } from "zod";
 // src/tools/code-navigation-shared.ts
 import { z as z3 } from "zod";
 var structuredCodeTargetSchema = z3.object({
-  registry: z3.enum([
-    "npm",
-    "pypi",
-    "hex",
-    "crates",
-    "nuget",
-    "maven",
-    "zig",
-    "vcpkg",
-    "packagist"
-  ]).optional().describe("Package registry (npm, pypi, hex, etc.). Required for package scope."),
+  registry: z3.enum(PKGSEER_REGISTRY_ARGS).optional().describe(`Package registry (${PKGSEER_REGISTRY_LIST}). Required for package scope.`),
   package_name: z3.string().max(255).optional().describe("Package name. Required for package scope."),
   version: z3.string().max(100).optional().describe("Package version, e.g. '4.18.2' (defaults to latest). For package scope only."),
   repo_url: z3.string().optional().describe("Repository URL (GitHub). Required for repo scope. Example: https://github.com/expressjs/express"),
@@ -8197,7 +8230,7 @@ function isTextFormat3(format) {
 // src/tools/list-package-docs.ts
 import { z as z6 } from "zod";
 var schema5 = {
-  registry: z6.string().describe("Package registry. One of: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist."),
+  registry: z6.string().describe(`Package registry. One of: ${PKGSEER_REGISTRY_LIST}.`),
   package_name: z6.string().describe("Package name (scoped names ok: @types/node)."),
   version: z6.string().optional().describe("Optional package version."),
   limit: z6.number().optional().describe("Max pages to return (1-500, default 100)."),
@@ -8304,7 +8337,7 @@ function resolveAddressing(input) {
   }
   const normalisedRegistryArg = input.registry?.trim().toLowerCase() ?? "";
   if (!isKnownPkgseerRegistryArg(normalisedRegistryArg)) {
-    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist.`);
+    throw new UnsupportedRegistryError(`Unsupported registry '${input.registry}'. Supported: ${PKGSEER_REGISTRY_LIST}.`);
   }
   const registry = toPkgseerRegistry(normalisedRegistryArg);
   return { registry, packageName };
@@ -8511,7 +8544,7 @@ function stripAnsi(text) {
 
 // src/tools/package-changelog.ts
 var schema6 = {
-  registry: z7.string().optional().describe("Package registry (with `package_name`). Mutually exclusive with `repo_url`. Supported: npm, pypi, hex, crates, vcpkg, zig, nuget, maven, packagist."),
+  registry: z7.string().optional().describe(`Package registry (with \`package_name\`). Mutually exclusive with \`repo_url\`. Supported: ${PKGSEER_REGISTRY_LIST}.`),
   package_name: z7.string().optional().describe("Package name (with `registry`). Scoped names ok (`@types/node`). Mutually exclusive with `repo_url`."),
   repo_url: z7.string().optional().describe("GitHub repository URL (https://…). Mutually exclusive with `registry` + `package_name`. Use when agents have a repo URL without a registry mapping."),
   from_version: z7.string().optional().describe("Start of version range. When set, the response returns every entry between `from_version` and `to_version` (or latest) with no count cap — range mode. Mutually exclusive with `limit`. Tag-style `v`-prefixed inputs are rejected."),
@@ -8521,7 +8554,7 @@ var schema6 = {
   include_bodies: z7.boolean().optional().describe("When false, each entry in `entries.items[]` omits its `body` field. Default true. Set false when you only need the version / date / URL timeline — drops 10 KB+ per entry on large release notes."),
   format: z7.enum(["json", "text", "text-v1"]).optional().describe("Response format. Default `text-v1` is compact for agents. Pass `json` for the structured envelope.")
 };
-var DESCRIPTION6 = "Release notes for a package or GitHub repo, newest-first. Default " + "latest mode returns the ten most recent entries (`limit` 1–50). " + "With `from_version`, returns every entry in the " + "`[from_version, to_version]` range (range mode, no count cap). " + "Address via `registry` + `package_name` or `repo_url` (mutually " + 'exclusive). Response includes optional `source` (`"releases"` / ' + '`"changelog_file"` / `"hexdocs"`) when a concrete changelog source ' + 'exists, `mode` (`"latest"` or `"range"`), ' + 'and entries with markdown body previews. Pass `format: "json"` ' + "for the structured envelope with full markdown bodies. Set " + "`include_bodies: false` for a version / date / URL timeline only. " + "Package-version entries without changelog text succeed with `source` " + "omitted; no-source plus no entries returns `NOT_FOUND`. Supports npm, " + "PyPI, Hex, Crates, vcpkg, Zig, NuGet, Maven, Packagist.";
+var DESCRIPTION6 = "Release notes for a package or GitHub repo, newest-first. Default " + "latest mode returns the ten most recent entries (`limit` 1–50). " + "With `from_version`, returns every entry in the " + "`[from_version, to_version]` range (range mode, no count cap). " + "Address via `registry` + `package_name` or `repo_url` (mutually " + 'exclusive). Response includes optional `source` (`"releases"` / ' + '`"changelog_file"` / `"hexdocs"`) when a concrete changelog source ' + 'exists, `mode` (`"latest"` or `"range"`), ' + 'and entries with markdown body previews. Pass `format: "json"` ' + "for the structured envelope with full markdown bodies. Set " + "`include_bodies: false` for a version / date / URL timeline only. " + "Package-version entries without changelog text succeed with `source` " + "omitted; no-source plus no entries returns `NOT_FOUND`. Supports npm, " + "PyPI, Hex, Crates, vcpkg, Zig, NuGet, Maven, Packagist, RubyGems, Go.";
 function createPackageChangelogTool(service) {
   return {
     name: "pkg_changelog",
@@ -8586,7 +8619,7 @@ function isTextFormat5(format) {
 // src/tools/package-dependencies.ts
 import { z as z8 } from "zod";
 var schema7 = {
-  registry: z8.string().describe("Package registry. Dependency data is available on npm, pypi, hex, crates, vcpkg, and zig."),
+  registry: z8.string().describe(`Package registry. Dependency data is available on ${SUPPORTED_DEPS_REGISTRIES_HUMAN}.`),
   package_name: z8.string().describe("Package name (scoped names ok: @types/node)."),
   version: z8.string().optional().describe("Specific version to inspect. Defaults to latest when omitted. Tag-style inputs with a leading `v` (for example `v4.18.0`) are rejected — pass the canonical version (`4.18.0`)."),
   lifecycle: z8.union([z8.string(), z8.array(z8.string())]).optional().describe("Lifecycle breadth. Omit for runtime-only. Use `runtime` for explicit runtime-only, a concrete non-runtime lifecycle (`development`, `build`, `peer`, `optional`) for runtime plus matching groups, or `all` for runtime plus all available groups. Accepts a single value, a comma-separated string, or an array; `all` cannot be combined with other values. Uppercase is tolerated."),
@@ -8595,7 +8628,7 @@ var schema7 = {
   max_depth: z8.number().int().min(1).max(10).optional().describe("Cap the transitive traversal at this depth (1–10). Omit to get the backend's full graph. Requires `include_transitive: true` — passing `max_depth` without the transitive flag is rejected with `INVALID_ARGUMENT`."),
   format: z8.enum(["json", "text", "text-v1"]).optional().describe("Response format. Default `text-v1` is compact for agents. Pass `json` for the structured envelope.")
 };
-var DESCRIPTION7 = "Analyze a package's dependency graph. Default output is compact " + "text listing direct runtime dependencies with resolved versions; " + 'pass `format: "json"` for the structured envelope. Non-runtime ' + "groups are omitted by default for token efficiency. Use `lifecycle` " + "with a concrete value for runtime plus matching groups, or `all` " + "for runtime plus all available groups. Set " + "`include_transitive: true` to add a `transitive` block with the " + "full install footprint, conflict detection, and circular-" + "dependency flags; layer `include_importers: true` on top when you " + "also need per-package provenance. Supports npm, PyPI, Hex, Crates, " + "vcpkg, and Zig.";
+var DESCRIPTION7 = "Analyze a package's dependency graph. Default output is compact " + "text listing direct runtime dependencies with resolved versions; " + 'pass `format: "json"` for the structured envelope. Non-runtime ' + "groups are omitted by default for token efficiency. Use `lifecycle` " + "with a concrete value for runtime plus matching groups, or `all` " + "for runtime plus all available groups. Set " + "`include_transitive: true` to add a `transitive` block with the " + "full install footprint, conflict detection, and circular-" + "dependency flags; layer `include_importers: true` on top when you " + "also need per-package provenance. Supports npm, PyPI, Hex, Crates, " + "RubyGems, Go, vcpkg, and Zig.";
 function createPackageDependenciesTool(service) {
   return {
     name: "pkg_deps",
@@ -8666,11 +8699,11 @@ function isTextFormat6(format) {
 // src/tools/package-summary.ts
 import { z as z9 } from "zod";
 var schema8 = {
-  registry: z9.string().describe("Package registry. One of: npm, pypi, hex, crates, nuget, maven, zig, vcpkg, packagist."),
+  registry: z9.string().describe(`Package registry. One of: ${PKGSEER_REGISTRY_LIST}.`),
   package_name: z9.string().describe("Package name (scoped names ok: @types/node)."),
   format: z9.enum(["json", "text", "text-v1"]).optional().describe("Response format. Default `text-v1` is compact for agents. Pass `json` for the structured envelope.")
 };
-var DESCRIPTION8 = "Get a package overview — latest version, license, description, " + "repository, downloads, GitHub stars, install command, recent " + "changes, and a count of known vulnerabilities. Use before " + "recommending a package or to orient on what a dependency is. " + 'Default output is compact text; pass `format: "json"` for the ' + "structured envelope. " + "Works across npm, PyPI, Hex, Crates, NuGet, Maven, Packagist, " + "vcpkg, and Zig. Always returns data for the latest published " + "version.";
+var DESCRIPTION8 = "Get a package overview — latest version, license, description, " + "repository, downloads, GitHub stars, install command, recent " + "changes, and a count of known vulnerabilities. Use before " + "recommending a package or to orient on what a dependency is. " + 'Default output is compact text; pass `format: "json"` for the ' + "structured envelope. " + "Works across npm, PyPI, Hex, Crates, NuGet, Maven, Packagist, " + "RubyGems, Go, vcpkg, and Zig. Always returns data for the latest published " + "version.";
 function createPackageSummaryTool(service) {
   return {
     name: "pkg_info",
@@ -9426,8 +9459,7 @@ Addressing: <spec> (registry:name) OR --repo-url <url>. Source
 (GitHub Releases, CHANGELOG.md, or HexDocs) is shown on the summary
 line.
 
-Package spec: <registry>:<name>. Supported registries: npm, pypi,
-hex, crates, vcpkg, zig, nuget, maven, packagist. \`<spec>@<version>\`
+Package spec: <registry>:<name>. Supported registries: ${PKGSEER_REGISTRY_LIST}. \`<spec>@<version>\`
 is NOT accepted here — use --to <version> for "entries up to this
 version".`;
 function registerPkgChangelogCommand(pkgCommand) {
@@ -9550,7 +9582,7 @@ groups). Concrete --lifecycle values include runtime plus matching groups.
 conflict detection, and circular-dependency flags.
 
 Package spec: <registry>:<name>[@<version>]. Supported registries:
-npm, pypi, hex, crates, vcpkg, zig. Omit @<version> for the latest
+npm, pypi, hex, crates, vcpkg, zig, rubygems, go. Omit @<version> for the latest
 release.`;
 function registerPkgDepsCommand(pkgCommand) {
   return pkgCommand.command("deps").summary("Analyze dependencies for a package").description(PKG_DEPS_DESCRIPTION).argument("<spec>", "Package spec, e.g. npm:express or npm:express@4.18.0").option("-l, --lifecycle <phases>", "Dependency lifecycle breadth (runtime, development, build, peer, optional, all; comma-separated for multi-select except all).").option("-t, --transitive", "Include aggregate transitive counts, conflicts, and circular dependencies").option("--depth <n>", "Cap transitive traversal depth (1-10). Omit for the full graph.").option("-v, --verbose", "Show conditionType / selectionMode / environmentConstraints metadata in the groups view").option("--json", "Emit the lean JSON envelope").action(async (spec, options) => {
@@ -9613,8 +9645,7 @@ repository, downloads, GitHub stars, install command, and known
 vulnerabilities. Use before picking a dependency or to orient on what
 a package is.
 
-Package spec: <registry>:<name>. Supported registries: npm, pypi, hex,
-crates, nuget, maven, zig, vcpkg, packagist.
+Package spec: <registry>:<name>. Supported registries: ${PKGSEER_REGISTRY_LIST}.
 
 Always returns data for the latest published version.`;
 function registerPkgInfoCommand(pkgCommand) {
@@ -9732,7 +9763,7 @@ async function registerPkgCommandGroup(program, options = {}) {
   if (!registration.shouldRegister) {
     return;
   }
-  const pkgCommand = program.command("pkg").summary("Package metadata: info, vulnerabilities, dependencies, changelog").description("Inspect package metadata from npm, PyPI, Hex, Crates, NuGet, Maven, Packagist, vcpkg, and Zig: overviews, advisories, dependency graphs, and changelogs. For source-level operations inside a dependency, use `githits code`.");
+  const pkgCommand = program.command("pkg").summary("Package metadata: info, vulnerabilities, dependencies, changelog").description("Inspect package metadata from npm, PyPI, Hex, Crates, NuGet, Maven, Packagist, RubyGems, Go, vcpkg, and Zig: overviews, advisories, dependency graphs, and changelogs. For source-level operations inside a dependency, use `githits code`.");
   registerPkgInfoCommand(pkgCommand);
   registerPkgVulnsCommand(pkgCommand);
   registerPkgDepsCommand(pkgCommand);
@@ -9856,7 +9887,7 @@ function requireSearchService(deps) {
   return deps.codeNavigationService;
 }
 async function loadContainer2() {
-  const { createContainer: createContainer2 } = await import("./shared/chunk-1h7sanjw.js");
+  const { createContainer: createContainer2 } = await import("./shared/chunk-q2mre780.js");
   return createContainer2();
 }
 function parseTargetSpecs(specs) {

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   version
-} from "./shared/chunk-fqzth5mv.js";
+} from "./shared/chunk-jdygt0ra.js";
 export {
   version
 };

package/dist/shared/{chunk-fqzth5mv.js → chunk-jdygt0ra.js}

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 // package.json
-var version = "0.4.0";
+var version = "0.4.2";
 
 export { __require, version };

package/dist/shared/{chunk-1h7sanjw.js → chunk-q2mre780.js}

@@ -2,8 +2,8 @@ import {
   createAuthCommandDependencies,
   createAuthStatusDependencies,
   createContainer
-} from "./chunk-1cyka46a.js";
-import"./chunk-fqzth5mv.js";
+} from "./chunk-v8sths32.js";
+import"./chunk-jdygt0ra.js";
 export {
   createContainer,
   createAuthStatusDependencies,

package/dist/shared/{chunk-1cyka46a.js → chunk-v8sths32.js}

@@ -1,7 +1,7 @@
 import {
   __require,
   version
-} from "./chunk-fqzth5mv.js";
+} from "./chunk-jdygt0ra.js";
 
 // src/services/app-config-paths.ts
 var APP_DIR = "githits";

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Code examples from global open source for developers and AI assistants.",
   "mcpServers": {
     "githits": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "githits",
   "description": "CLI companion for GitHits - code examples from global open source for developers and AI assistants",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "type": "module",
   "files": [
     "dist",

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"