githits 0.4.2 → 0.4.4

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   version
-} from "./shared/chunk-jdygt0ra.js";
+} from "./shared/chunk-96tjsv6y.js";
 export {
   version
 };

package/dist/shared/{chunk-jdygt0ra.js → chunk-96tjsv6y.js}

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 // package.json
-var version = "0.4.2";
+var version = "0.4.4";
 
 export { __require, version };

package/dist/shared/chunk-k35egwwf.js

@@ -0,0 +1,15 @@
+import {
+  clearAutoLoginAuthSessionMetadata,
+  createAuthCommandDependencies,
+  createAuthStatusDependencies,
+  createContainer,
+  loadAutoLoginAuthSessionMetadata
+} from "./chunk-tfqxat16.js";
+import"./chunk-96tjsv6y.js";
+export {
+  loadAutoLoginAuthSessionMetadata,
+  createContainer,
+  createAuthStatusDependencies,
+  createAuthCommandDependencies,
+  clearAutoLoginAuthSessionMetadata
+};

package/dist/shared/{chunk-v8sths32.js → chunk-tfqxat16.js}

@@ -1,20 +1,16 @@
 import {
   __require,
   version
-} from "./chunk-jdygt0ra.js";
+} from "./chunk-96tjsv6y.js";
 
 // src/services/app-config-paths.ts
 var APP_DIR = "githits";
 function getAppConfigDir(fs) {
   const home = fs.getHomeDir();
-  switch (process.platform) {
-    case "win32":
-      return fs.joinPath(process.env.APPDATA ?? fs.joinPath(home, "AppData", "Roaming"), APP_DIR);
-    case "darwin":
-      return fs.joinPath(home, "Library", "Application Support", APP_DIR);
-    default:
-      return fs.joinPath(process.env.XDG_CONFIG_HOME ?? fs.joinPath(home, ".config"), APP_DIR);
+  if (process.platform === "win32") {
+    return fs.joinPath(process.env.APPDATA ?? fs.joinPath(home, "AppData", "Roaming"), APP_DIR);
   }
+  return fs.joinPath(process.env.XDG_CONFIG_HOME ?? fs.joinPath(home, ".config"), APP_DIR);
 }
 function getAuthConfigPath(fs) {
   return fs.joinPath(getAppConfigDir(fs), "config.toml");
@@ -25,6 +21,15 @@ function getAuthFileStorageDir(fs) {
 function getLegacyAuthStorageDir(fs) {
   return fs.joinPath(fs.getHomeDir(), ".githits");
 }
+function getLegacyMacAppConfigDir(fs) {
+  return fs.joinPath(fs.getHomeDir(), "Library", "Application Support", APP_DIR);
+}
+function getLegacyMacAuthConfigPath(fs) {
+  return fs.joinPath(getLegacyMacAppConfigDir(fs), "config.toml");
+}
+function getLegacyMacAuthFileStorageDir(fs) {
+  return fs.joinPath(getLegacyMacAppConfigDir(fs), "auth");
+}
 // src/services/auth-config.ts
 import { parse as parseToml } from "smol-toml";
 import { z } from "zod";
@@ -50,7 +55,7 @@ function parseAuthStorageMode(value) {
   throw new AuthConfigError(`Invalid auth storage mode "${value}". Use "keychain" or "file". File mode stores OAuth credentials unencrypted on disk.`);
 }
 async function loadAuthConfig(fs) {
-  const configPath = getAuthConfigPath(fs);
+  let configPath = getAuthConfigPath(fs);
   const envMode = process.env.GITHITS_AUTH_STORAGE;
   if (envMode !== undefined && envMode.trim() !== "") {
     try {
@@ -63,7 +68,12 @@ async function loadAuthConfig(fs) {
     }
   }
   if (!await fs.exists(configPath)) {
-    return { storage: "keychain", configPath };
+    const legacyMacConfigPath = getLegacyMacAuthConfigPath(fs);
+    if (process.platform === "darwin" && await fs.exists(legacyMacConfigPath)) {
+      configPath = legacyMacConfigPath;
+    } else {
+      return { storage: "keychain", configPath };
+    }
   }
   let rawConfig;
   try {
@@ -732,6 +742,70 @@ async function clearAuthSessionBestEffort(clearTokens, clearClient) {
   if (firstError)
     throw firstError;
 }
+
+// src/services/auth-session-metadata-storage.ts
+var METADATA_FILE = "metadata.json";
+var DIR_MODE2 = 448;
+
+class AuthSessionMetadataStorage {
+  fs;
+  configDir;
+  metadataPath;
+  constructor(fs, configDir) {
+    this.fs = fs;
+    this.configDir = configDir ?? getAuthFileStorageDir(fs);
+    this.metadataPath = fs.joinPath(this.configDir, METADATA_FILE);
+  }
+  async load(baseUrl) {
+    const stored = await this.loadFile();
+    if (!stored)
+      return null;
+    const metadata = stored.sessions[normalizeBaseUrl(baseUrl)] ?? null;
+    return isAuthSessionMetadata(metadata) ? metadata : null;
+  }
+  async saveFromTokens(baseUrl, tokens) {
+    const stored = await this.loadFile() ?? {
+      version: 1,
+      sessions: {}
+    };
+    stored.sessions[normalizeBaseUrl(baseUrl)] = {
+      createdAt: tokens.createdAt,
+      expiresAt: tokens.expiresAt,
+      updatedAt: new Date().toISOString()
+    };
+    await this.fs.ensureDir(this.configDir, DIR_MODE2);
+    await this.fs.atomicWriteFile(this.metadataPath, JSON.stringify(stored, null, 2));
+  }
+  async clear(baseUrl) {
+    const stored = await this.loadFile();
+    if (!stored)
+      return;
+    delete stored.sessions[normalizeBaseUrl(baseUrl)];
+    if (Object.keys(stored.sessions).length === 0) {
+      await this.fs.deleteFile(this.metadataPath);
+      return;
+    }
+    await this.fs.atomicWriteFile(this.metadataPath, JSON.stringify(stored, null, 2));
+  }
+  async loadFile() {
+    if (!await this.fs.exists(this.metadataPath))
+      return null;
+    try {
+      const content = await this.fs.readFile(this.metadataPath);
+      const data = JSON.parse(content);
+      if (data.version !== 1 || !data.sessions)
+        return null;
+      return data;
+    } catch {
+      return null;
+    }
+  }
+}
+function isAuthSessionMetadata(value) {
+  if (value === null || typeof value !== "object")
+    return false;
+  return typeof value.createdAt === "string" && value.createdAt.length > 0 && typeof value.updatedAt === "string" && value.updatedAt.length > 0 && (value.expiresAt === null || typeof value.expiresAt === "string" && value.expiresAt.length > 0);
+}
 // src/services/browser-service.ts
 import open from "open";
 
@@ -1326,7 +1400,9 @@ class GitHitsServiceImpl {
         method: "POST",
         headers: this.headers(),
         body: JSON.stringify({
-          solution_id: params.solutionId,
+          ...params.solutionId !== undefined && {
+            solution_id: params.solutionId
+          },
           accepted: params.accepted,
           feedback_text: params.feedbackText ?? null
         })
@@ -3531,15 +3607,19 @@ class MigratingAuthStorage {
   mode;
   configPath;
   onWarning;
+  metadata;
+  additionalLegacyStores;
   warnedFileModeKeychainExport = false;
   warnedAmbiguousPlaintext = false;
-  constructor(primary, file, legacy, mode, configPath = "your GitHits config.toml", onWarning = () => {}) {
+  constructor(primary, file, legacy, mode, configPath = "your GitHits config.toml", onWarning = () => {}, metadata, additionalLegacyStores = []) {
     this.primary = primary;
     this.file = file;
     this.legacy = legacy;
     this.mode = mode;
     this.configPath = configPath;
     this.onWarning = onWarning;
+    this.metadata = metadata;
+    this.additionalLegacyStores = additionalLegacyStores;
   }
   async loadTokens(baseUrl2) {
     if (this.mode === "file") {
@@ -3550,10 +3630,12 @@ class MigratingAuthStorage {
   async saveTokens(baseUrl2, data) {
     if (this.mode === "file") {
       await this.file.saveTokens(baseUrl2, data);
+      await this.saveMetadataBestEffort(baseUrl2, data);
       return;
     }
     try {
       await this.primary.saveTokens(baseUrl2, data);
+      await this.saveMetadataBestEffort(baseUrl2, data);
     } catch (error) {
       throw this.toPolicyError(error);
     }
@@ -3569,6 +3651,10 @@ class MigratingAuthStorage {
     const primaryError = await this.clearBestEffort(() => this.primary.clearTokens(baseUrl2));
     await this.clearBestEffort(() => this.file.clearTokens(baseUrl2));
     await this.clearBestEffort(() => this.legacy.clearTokens(baseUrl2));
+    for (const legacy of this.additionalLegacyStores) {
+      await this.clearBestEffort(() => legacy.clearTokens(baseUrl2));
+    }
+    await this.clearBestEffort(() => this.metadata?.clear(baseUrl2) ?? Promise.resolve());
     if (primaryError && !(primaryError instanceof KeychainUnavailableError)) {
       throw primaryError;
     }
@@ -3601,6 +3687,9 @@ class MigratingAuthStorage {
     const primaryError = await this.clearBestEffort(() => this.primary.clearClient(baseUrl2));
     await this.clearBestEffort(() => this.file.clearClient(baseUrl2));
     await this.clearBestEffort(() => this.legacy.clearClient(baseUrl2));
+    for (const legacy of this.additionalLegacyStores) {
+      await this.clearBestEffort(() => legacy.clearClient(baseUrl2));
+    }
     if (primaryError && !(primaryError instanceof KeychainUnavailableError)) {
       throw primaryError;
     }
@@ -3608,10 +3697,12 @@ class MigratingAuthStorage {
   async saveAuthSession(baseUrl2, client, tokens) {
     if (this.mode === "file") {
       await this.file.saveAuthSession(baseUrl2, client, tokens);
+      await this.saveMetadataBestEffort(baseUrl2, tokens);
       return;
     }
     try {
       await this.primary.saveAuthSession(baseUrl2, client, tokens);
+      await this.saveMetadataBestEffort(baseUrl2, tokens);
     } catch (error) {
       throw this.toPolicyError(error);
     }
@@ -3620,6 +3711,10 @@ class MigratingAuthStorage {
     const primaryError = await this.clearBestEffort(() => this.primary.clearAuthSession(baseUrl2));
     await this.clearBestEffort(() => this.file.clearAuthSession(baseUrl2));
     await this.clearBestEffort(() => this.legacy.clearAuthSession(baseUrl2));
+    for (const legacy of this.additionalLegacyStores) {
+      await this.clearBestEffort(() => legacy.clearAuthSession(baseUrl2));
+    }
+    await this.clearBestEffort(() => this.metadata?.clear(baseUrl2) ?? Promise.resolve());
     if (primaryError && !(primaryError instanceof KeychainUnavailableError)) {
       throw primaryError;
     }
@@ -3630,8 +3725,10 @@ class MigratingAuthStorage {
   async loadTokensKeychainMode(baseUrl2) {
     try {
       const primaryTokens = await this.primary.loadTokens(baseUrl2);
-      if (primaryTokens)
+      if (primaryTokens) {
+        await this.saveMetadataBestEffort(baseUrl2, primaryTokens);
         return primaryTokens;
+      }
     } catch (error) {
       if (!(error instanceof KeychainUnavailableError))
         throw error;
@@ -3646,7 +3743,8 @@ class MigratingAuthStorage {
         return candidate.data;
       throw error;
     }
-    await this.clearMigratedPlaintext(baseUrl2, "tokens", candidate.source, candidate.ambiguous);
+    await this.clearMigratedPlaintext(baseUrl2, "tokens", candidate.source, candidate.storage, candidate.ambiguous);
+    await this.saveMetadataBestEffort(baseUrl2, candidate.data);
     return candidate.data;
   }
   async loadTokensFileMode(baseUrl2) {
@@ -3654,8 +3752,9 @@ class MigratingAuthStorage {
     if (candidate) {
       if (candidate.source === "legacy") {
         await this.file.saveTokens(baseUrl2, candidate.data);
-        await this.clearBestEffort(() => this.legacy.clearTokens(baseUrl2));
+        await this.clearBestEffort(() => candidate.storage.clearTokens(baseUrl2));
       }
+      await this.saveMetadataBestEffort(baseUrl2, candidate.data);
       return candidate.data;
     }
     let primaryTokens = null;
@@ -3669,6 +3768,7 @@ class MigratingAuthStorage {
       return null;
     this.warnKeychainExport();
     await this.file.saveTokens(baseUrl2, primaryTokens);
+    await this.saveMetadataBestEffort(baseUrl2, primaryTokens);
     return primaryTokens;
   }
   async loadClientKeychainMode(baseUrl2) {
@@ -3690,7 +3790,7 @@ class MigratingAuthStorage {
         return candidate.data;
       throw error;
     }
-    await this.clearMigratedPlaintext(baseUrl2, "client", candidate.source, candidate.ambiguous);
+    await this.clearMigratedPlaintext(baseUrl2, "client", candidate.source, candidate.storage, candidate.ambiguous);
     return candidate.data;
   }
   async loadClientFileMode(baseUrl2) {
@@ -3698,7 +3798,7 @@ class MigratingAuthStorage {
     if (candidate) {
       if (candidate.source === "legacy") {
         await this.file.saveClient(baseUrl2, candidate.data);
-        await this.clearBestEffort(() => this.legacy.clearClient(baseUrl2));
+        await this.clearBestEffort(() => candidate.storage.clearClient(baseUrl2));
       }
       return candidate.data;
     }
@@ -3722,18 +3822,22 @@ class MigratingAuthStorage {
       candidates.push({
         data: fileTokens,
         source: "file",
+        storage: this.file,
         timestamp: fileTokens.createdAt,
         ambiguous: false
       });
     }
-    const legacyTokens = await this.legacy.loadTokens(baseUrl2);
-    if (legacyTokens) {
-      candidates.push({
-        data: legacyTokens,
-        source: "legacy",
-        timestamp: legacyTokens.createdAt,
-        ambiguous: false
-      });
+    for (const legacy of this.getLegacyStores()) {
+      const legacyTokens = await legacy.loadTokens(baseUrl2);
+      if (legacyTokens) {
+        candidates.push({
+          data: legacyTokens,
+          source: "legacy",
+          storage: legacy,
+          timestamp: legacyTokens.createdAt,
+          ambiguous: false
+        });
+      }
     }
     return this.selectNewestCandidate(candidates);
   }
@@ -3744,18 +3848,22 @@ class MigratingAuthStorage {
       candidates.push({
         data: fileClient,
         source: "file",
+        storage: this.file,
         timestamp: fileClient.registeredAt,
         ambiguous: false
       });
     }
-    const legacyClient = await this.legacy.loadClient(baseUrl2);
-    if (legacyClient) {
-      candidates.push({
-        data: legacyClient,
-        source: "legacy",
-        timestamp: legacyClient.registeredAt,
-        ambiguous: false
-      });
+    for (const legacy of this.getLegacyStores()) {
+      const legacyClient = await legacy.loadClient(baseUrl2);
+      if (legacyClient) {
+        candidates.push({
+          data: legacyClient,
+          source: "legacy",
+          storage: legacy,
+          timestamp: legacyClient.registeredAt,
+          ambiguous: false
+        });
+      }
     }
     return this.selectNewestCandidate(candidates);
   }
@@ -3770,7 +3878,7 @@ class MigratingAuthStorage {
     }));
     if (parsed.some((entry) => Number.isNaN(entry.timestampMs))) {
       this.warnAmbiguousPlaintext();
-      const selected = candidates.find((candidate) => candidate.source === "file") ?? candidates[0] ?? null;
+      const selected = candidates.find((candidate) => candidate.source === "file") ?? null;
       if (selected)
         selected.ambiguous = true;
       return selected;
@@ -3782,16 +3890,20 @@ class MigratingAuthStorage {
       return candidates[0] ?? null;
     if (second && first.timestampMs === second.timestampMs) {
       this.warnAmbiguousPlaintext();
-      const selected = candidates.find((candidate) => candidate.source === "file") ?? first.candidate;
+      const selected = candidates.find((candidate) => candidate.source === "file") ?? null;
+      if (!selected)
+        return null;
       selected.ambiguous = true;
       return selected;
     }
     return first.candidate;
   }
-  async clearMigratedPlaintext(baseUrl2, kind, source, ambiguous = false) {
+  async clearMigratedPlaintext(baseUrl2, kind, source, storage, ambiguous = false) {
     if (!ambiguous) {
       await this.clearPlaintextSource(this.file, baseUrl2, kind);
-      await this.clearPlaintextSource(this.legacy, baseUrl2, kind);
+      for (const legacy of this.getLegacyStores()) {
+        await this.clearPlaintextSource(legacy, baseUrl2, kind);
+      }
       return;
     }
     if (source === "file") {
@@ -3799,9 +3911,12 @@ class MigratingAuthStorage {
       return;
     }
     if (source === "legacy") {
-      await this.clearPlaintextSource(this.legacy, baseUrl2, kind);
+      await this.clearPlaintextSource(storage, baseUrl2, kind);
     }
   }
+  getLegacyStores() {
+    return [...this.additionalLegacyStores, this.legacy];
+  }
   async clearPlaintextSource(storage, baseUrl2, kind) {
     await this.clearBestEffort(() => kind === "tokens" ? storage.clearTokens(baseUrl2) : storage.clearClient(baseUrl2));
   }
@@ -3813,6 +3928,9 @@ class MigratingAuthStorage {
       return error;
     }
   }
+  async saveMetadataBestEffort(baseUrl2, tokens) {
+    await this.clearBestEffort(() => this.metadata?.saveFromTokens(baseUrl2, tokens) ?? Promise.resolve());
+  }
   toPolicyError(error) {
     if (!(error instanceof KeychainUnavailableError))
       return error;
@@ -3985,10 +4103,6 @@ var packageSecurityOverviewSchema = z3.object({
   hasCurrentVulnerabilities: z3.boolean().nullable().optional(),
   recentVulnerabilities: z3.array(vulnerabilityOverviewSchema).nullable().optional()
 }).nullable().optional();
-var quickstartInfoSchema = z3.object({
-  installCommand: z3.string().nullable().optional(),
-  usageExample: z3.string().nullable().optional()
-}).nullable().optional();
 var changelogEntrySchema = z3.object({
   version: z3.string().nullable().optional(),
   publishedAt: z3.string().nullable().optional(),
@@ -3997,7 +4111,6 @@ var changelogEntrySchema = z3.object({
 var packageSummaryResponseSchema = z3.object({
   package: packageIdentitySchema.nullable().optional(),
   security: packageSecurityOverviewSchema,
-  quickstart: quickstartInfoSchema,
   latestChangelogs: z3.array(changelogEntrySchema).nullable().optional()
 });
 var graphQLErrorSchema2 = z3.object({
@@ -4044,10 +4157,6 @@ query PackageSummary($registry: Registry!, $name: String!) {
         publishedAt
       }
     }
-    quickstart {
-      installCommand
-      usageExample
-    }
     latestChangelogs(limit: 3) {
       version
       publishedAt
@@ -4112,6 +4221,7 @@ query PackageVulnerabilities(
   $version: String
   $minSeverity: Float
   $includeWithdrawn: Boolean
+  $scope: VulnerabilityScope = AFFECTED
   $after: String
 ) {
   packageVulnerabilities(
@@ -4132,7 +4242,7 @@ query PackageVulnerabilities(
       allVulnerabilityCount
       currentVersionAffected
       upgradePaths
-      advisories(scope: AFFECTED, first: 100, after: $after) {
+      advisories(scope: $scope, first: 100, after: $after) {
         entries {
           osvId
           summary
@@ -4687,10 +4797,6 @@ class PackageIntelligenceServiceImpl {
         publishedAt: vuln.publishedAt ?? undefined
       })) ?? undefined
     } : undefined;
-    const quickstart = data.quickstart ? {
-      installCommand: data.quickstart.installCommand ?? undefined,
-      usageExample: data.quickstart.usageExample ?? undefined
-    } : undefined;
     const latestChangelogs = data.latestChangelogs?.map((entry) => ({
       version: entry.version ?? undefined,
       publishedAt: entry.publishedAt ?? undefined,
@@ -4699,7 +4805,6 @@ class PackageIntelligenceServiceImpl {
     return {
       package: identity,
       security,
-      quickstart,
       latestChangelogs
     };
   }
@@ -4774,6 +4879,7 @@ class PackageIntelligenceServiceImpl {
           version: params.version,
           minSeverity: params.minSeverity,
           includeWithdrawn: params.includeWithdrawn,
+          scope: params.advisoryScope,
           after
         },
         fetchFn: this.fetchFn
@@ -5433,7 +5539,7 @@ var NPM_DIST_TAGS_URL = "https://registry.npmjs.org/-/package/githits/dist-tags"
 var NPM_PACKAGE_VERSION_URL = "https://registry.npmjs.org/githits";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
 var FETCH_TIMEOUT_MS = 1000;
-var DIR_MODE2 = 448;
+var DIR_MODE3 = 448;
 var UPDATE_COMMAND = "npm i -g githits@latest";
 var MAX_DEPRECATION_REASON_LENGTH = 200;
 
@@ -5623,7 +5729,7 @@ class NpmRegistryUpdateCheckService {
   }
   async saveCache(cache) {
     try {
-      await this.fs.ensureDir(this.configDir, DIR_MODE2);
+      await this.fs.ensureDir(this.configDir, DIR_MODE3);
       if (typeof this.fs.atomicWriteFile === "function") {
         await this.fs.atomicWriteFile(this.cachePath, `${JSON.stringify(cache, null, 2)}
 `);
@@ -5760,10 +5866,29 @@ async function createAuthStorage(fileSystemService) {
 function createAuthStorageForMode(fileSystemService, mode, configPath = "your GitHits config.toml") {
   const fileStorage = new ModeAwareFileAuthStorage(new AuthStorageImpl(fileSystemService, getAuthFileStorageDir(fileSystemService)), mode, configPath);
   const legacyStorage = new AuthStorageImpl(fileSystemService, getLegacyAuthStorageDir(fileSystemService));
+  const additionalLegacyStores = process.platform === "darwin" ? [
+    new AuthStorageImpl(fileSystemService, getLegacyMacAuthFileStorageDir(fileSystemService))
+  ] : [];
   const rawKeyring = new KeyringServiceImpl;
   const keyring = process.platform === "win32" ? new ChunkingKeyringService(rawKeyring, WINDOWS_MAX_ENTRY_SIZE) : rawKeyring;
   const keychainStorage = new KeychainAuthStorage(keyring);
-  return new LockedAuthStorage(new MigratingAuthStorage(keychainStorage, fileStorage, legacyStorage, mode, configPath, (message) => console.error(message)), fileSystemService);
+  const metadataStorage = new AuthSessionMetadataStorage(fileSystemService);
+  return new LockedAuthStorage(new MigratingAuthStorage(keychainStorage, fileStorage, legacyStorage, mode, configPath, (message) => console.error(message), metadataStorage, additionalLegacyStores), fileSystemService);
+}
+async function loadAutoLoginAuthSessionMetadata() {
+  const envToken = getEnvApiToken();
+  if (envToken) {
+    const now = new Date().toISOString();
+    return { createdAt: now, expiresAt: null, updatedAt: now };
+  }
+  const fileSystemService = new FileSystemServiceImpl;
+  const metadataStorage = new AuthSessionMetadataStorage(fileSystemService);
+  return metadataStorage.load(getMcpUrl());
+}
+async function clearAutoLoginAuthSessionMetadata() {
+  const fileSystemService = new FileSystemServiceImpl;
+  const metadataStorage = new AuthSessionMetadataStorage(fileSystemService);
+  await metadataStorage.clear(getMcpUrl());
 }
 async function createAuthCommandDependencies() {
   return withTelemetrySpan("container.create-auth-command", async () => {
@@ -5802,8 +5927,9 @@ function createStaticTokenProvider(token) {
     }
   };
 }
-async function createContainer() {
+async function createContainer(options = {}) {
   return withTelemetrySpan("container.create", async () => {
+    const resolveStoredToken = options.resolveStoredToken ?? true;
     const mcpUrl = getMcpUrl();
     const apiUrl = getApiUrl();
     const codeNavigationUrl = getCodeNavigationUrl();
@@ -5834,7 +5960,10 @@ async function createContainer() {
     }
     const authStorage = await createAuthStorage(fileSystemService);
     const tokenManager = new TokenManager({ authService, authStorage, mcpUrl });
-    const apiToken = await withTelemetrySpan("container.token.get", () => tokenManager.getToken());
+    const apiToken = resolveStoredToken ? await withTelemetrySpan("container.token.get", () => tokenManager.getToken()) : undefined;
+    if (resolveStoredToken && apiToken === undefined) {
+      await new AuthSessionMetadataStorage(fileSystemService).clear(mcpUrl);
+    }
     const codeNavigationService = new CodeNavigationServiceImpl(codeNavigationUrl, tokenManager);
     const packageIntelligenceService = new PackageIntelligenceServiceImpl(codeNavigationUrl, tokenManager);
     return {
@@ -5855,4 +5984,4 @@ async function createContainer() {
   });
 }
 
-export { AuthConfigError, CLIENT_UPDATE_REQUIRED_REASON, ClientUpdateRequiredError, debugLog, setMcpClientVersionProvider, setClientMode, isTelemetryEnabled, withTelemetrySpan, startTelemetrySpan, endTelemetrySpan, flushTelemetry, AuthenticationError, CodeNavigationAccessError, CodeNavigationGraphQLError, CodeNavigationIndexingError, CodeNavigationUnresolvableError, MalformedCodeNavigationResponseError, CodeNavigationTargetNotFoundError, CodeNavigationFileNotFoundError, CodeNavigationVersionNotFoundError, CodeNavigationValidationError, CodeNavigationFeatureFlagRequiredError, CodeNavigationNetworkError, CodeNavigationBackendError, getCodeNavigationUrl, ExecServiceImpl, FileSystemServiceImpl, AuthStorageLockTimeoutError, AuthStoragePolicyError, PackageIntelligenceAccessError, PackageIntelligenceFeatureFlagRequiredError, PackageIntelligenceNetworkError, PackageIntelligenceBackendError, PackageIntelligenceGraphQLError, PackageIntelligenceTargetNotFoundError, PackageIntelligenceValidationError, PackageIntelligenceVersionNotFoundError, MalformedPackageIntelligenceResponseError, PackageIntelligenceChangelogSourceNotFoundError, PromptServiceImpl, refreshExpiredToken, NpmRegistryUpdateCheckService, shouldRunUpdateCheck, shouldRunRequiredUpdateEnforcement, formatUpdateNotice, formatRequiredUpdateNotice, createAuthCommandDependencies, createAuthStatusDependencies, createContainer };
+export { AuthConfigError, CLIENT_UPDATE_REQUIRED_REASON, ClientUpdateRequiredError, debugLog, setMcpClientVersionProvider, setClientMode, isTelemetryEnabled, withTelemetrySpan, startTelemetrySpan, endTelemetrySpan, flushTelemetry, AuthenticationError, CodeNavigationAccessError, CodeNavigationGraphQLError, CodeNavigationIndexingError, CodeNavigationUnresolvableError, MalformedCodeNavigationResponseError, CodeNavigationTargetNotFoundError, CodeNavigationFileNotFoundError, CodeNavigationVersionNotFoundError, CodeNavigationValidationError, CodeNavigationFeatureFlagRequiredError, CodeNavigationNetworkError, CodeNavigationBackendError, getCodeNavigationUrl, ExecServiceImpl, FileSystemServiceImpl, AuthStorageLockTimeoutError, AuthStoragePolicyError, PackageIntelligenceAccessError, PackageIntelligenceFeatureFlagRequiredError, PackageIntelligenceNetworkError, PackageIntelligenceBackendError, PackageIntelligenceGraphQLError, PackageIntelligenceTargetNotFoundError, PackageIntelligenceValidationError, PackageIntelligenceVersionNotFoundError, MalformedPackageIntelligenceResponseError, PackageIntelligenceChangelogSourceNotFoundError, PromptServiceImpl, refreshExpiredToken, NpmRegistryUpdateCheckService, shouldRunUpdateCheck, shouldRunRequiredUpdateEnforcement, formatUpdateNotice, formatRequiredUpdateNotice, loadAutoLoginAuthSessionMetadata, clearAutoLoginAuthSessionMetadata, createAuthCommandDependencies, createAuthStatusDependencies, createContainer };

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Code examples from global open source for developers and AI assistants.",
   "mcpServers": {
     "githits": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "githits",
   "description": "CLI companion for GitHits - code examples from global open source for developers and AI assistants",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "type": "module",
   "files": [
     "dist",
@@ -35,6 +35,9 @@
     "inspector": "npx @modelcontextprotocol/inspector bun run dev mcp",
     "smoke:cli": "bun run scripts/cli-smoke.ts",
     "smoke:mcp": "bun run scripts/mcp-smoke.ts",
+    "audit:pkg-ecosystems": "bun run scripts/pkg-ecosystem-audit.ts",
+    "agent:e2e": "bun run scripts/agent-eval.ts",
+    "agent:e2e:report": "bun run scripts/agent-eval-report.ts",
     "test": "bun test",
     "typecheck": "tsc",
     "format": "biome format --write .",

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Code examples from global open source for developers and AI assistants",
   "author": {
     "name": "GitHits"

package/dist/shared/chunk-q2mre780.js

@@ -1,11 +0,0 @@
-import {
-  createAuthCommandDependencies,
-  createAuthStatusDependencies,
-  createContainer
-} from "./chunk-v8sths32.js";
-import"./chunk-jdygt0ra.js";
-export {
-  createContainer,
-  createAuthStatusDependencies,
-  createAuthCommandDependencies
-};