githits 0.7.0 → 0.9.0

package/.claude-plugin/marketplace.json

@@ -6,12 +6,12 @@
   },
   "metadata": {
     "description": "The code context layer for AI coding agents",
-    "version": "0.7.0"
+    "version": "0.9.0"
   },
   "plugins": [
     {
       "name": "githits",
-      "version": "0.7.0",
+      "version": "0.9.0",
       "description": "The code context layer for AI coding agents",
       "author": {
         "name": "GitHits"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "The code context layer for AI coding agents",
   "author": {
     "name": "GitHits"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "The code context layer for AI coding agents",
   "author": {
     "name": "GitHits"

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "The code context layer for AI coding agents",
   "author": {
     "name": "GitHits"

package/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "The code context layer for AI coding agents",
   "author": {
     "name": "GitHits"

package/README.md

@@ -18,6 +18,7 @@
   <a href="https://skills.sh/githits-com/githits-cli"><img alt="skills.sh" src="https://skills.sh/b/githits-com/githits-cli"></a>
   <a href="https://smithery.ai/servers/githits/GitHits"><img alt="smithery badge" src="https://smithery.ai/badge/githits/GitHits"></a>
   <a href="https://glama.ai/mcp/servers/githits-com/githits-cli"><img alt="githits-cli MCP server" src="https://glama.ai/mcp/servers/githits-com/githits-cli/badges/score.svg"></a>
+  <a href="https://lobehub.com/mcp/githits-com-githits-cli"><img alt="MCP Badge" src="https://lobehub.com/badge/mcp/githits-com-githits-cli?style=plastic"></a>
 </p>
 
 <p align="center">
@@ -191,6 +192,51 @@ work with `githits login` after setup.
 Browser OAuth is interactive. For CI and other unattended environments, supply
 `GITHITS_API_TOKEN` through the environment's secret manager.
 
+### Keychain Prompts and File Storage
+
+GitHits uses the system keychain by default because OAuth credentials include a
+refresh token. On macOS this means Keychain Access; on Windows it means
+Credential Manager; on Linux it means the available Secret Service or keyring
+backend.
+
+If macOS shows a prompt such as "githits wants to access ... in your keychain",
+choose **Always Allow** when you trust the installed `githits` CLI. GitHits
+cannot customize that operating-system prompt; it is generated by macOS.
+
+GitHits also writes a small non-secret metadata file so recent startup checks do
+not need to read the keychain. The keychain is only read when GitHits needs the
+token, for example during a tool call, token refresh, `githits auth status`, or a
+login check after metadata is stale or expired.
+
+If your agent keeps showing keychain prompts even after **Always Allow**, switch
+OAuth storage to file mode:
+
+```toml
+# macOS/Linux: ~/.config/githits/config.toml, or $XDG_CONFIG_HOME/githits/config.toml
+# Windows: %APPDATA%\githits\config.toml
+[auth]
+storage = "file"
+```
+
+The config directory may be empty until you create `config.toml` or GitHits
+writes auth metadata. Older macOS installs may have used
+`~/Library/Application Support/githits`; GitHits still reads that location for
+migration, but new auth config and file storage use `~/.config/githits`.
+
+You can also opt in for one process:
+
+```sh
+GITHITS_AUTH_STORAGE=file githits login --force
+```
+
+File mode stores OAuth credentials as JSON files under the GitHits config
+directory. The files are written with private permissions where the platform
+supports it, but they are not encrypted. Any process that can read files as your
+operating-system user may be able to read the tokens.
+
+Use file mode only on machines where you trust local user-account access. For CI
+and automation, prefer `GITHITS_API_TOKEN` instead of browser OAuth.
+
 Inspect auth and runtime state with:
 
 ```sh
@@ -304,6 +350,7 @@ githits example          Find real-world implementations from open source
 githits languages        List or filter supported programming languages
 githits feedback         Submit feedback about GitHits results
 githits doctor           Diagnose configuration and auth state
+githits settings         View and update preferences, privacy, and terms
 githits search           Explore repository code, dependencies, docs, and symbols
 githits search-status    Check the status of a previous indexed search
 githits code             List, read, and grep indexed dependency source