githits - npm Package Compare versions

Comparing version 0.7.0 to 0.8.0

dist/shared/chunk-5z3dzm7x.js

+import{clearAutoLoginAuthSessionMetadata,createAuthCommandDependencies,createAuthStatusDependencies,createContainer,loadAutoLoginAuthSessionMetadata,recordAuthFingerprint}from"./chunk-4dy65qws.js";import"./chunk-r6qmrkbn.js";export{recordAuthFingerprint,loadAutoLoginAuthSessionMetadata,createContainer,createAuthStatusDependencies,createAuthCommandDependencies,clearAutoLoginAuthSessionMetadata};

dist/shared/chunk-r6qmrkbn.js

+import{createRequire}from"node:module";var __require=createRequire(import.meta.url);var description="The code context layer for AI coding agents";var version="0.8.0";
+export{__require,description,version};

mcp.json

+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "githits": {
+      "type": "streamable-http",
+      "url": "https://mcp.githits.com"
+    }
+  }
+}

.claude-plugin/marketplace.json

@@ -9,3 +9,3 @@ {
     "description": "The code context layer for AI coding agents",
-    "version": "0.7.0"
+    "version": "0.8.0"
   },
@@ -15,3 +15,3 @@ "plugins": [
       "name": "githits",
-      "version": "0.7.0",
+      "version": "0.8.0",
       "description": "The code context layer for AI coding agents",
@@ -18,0 +18,0 @@ "author": {

.claude-plugin/plugin.json

 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "The code context layer for AI coding agents",
@@ -5,0 +5,0 @@ "author": {

.codex-plugin/plugin.json

 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "The code context layer for AI coding agents",
@@ -5,0 +5,0 @@ "author": {

.cursor-plugin/plugin.json

 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "The code context layer for AI coding agents",
@@ -5,0 +5,0 @@ "author": {

.plugin/plugin.json

 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "The code context layer for AI coding agents",
@@ -5,0 +5,0 @@ "author": {

dist/index.js

@@ -1,1 +0,1 @@
-import{version}from"./shared/chunk-ncsgqtj1.js";export{version};
+import{version}from"./shared/chunk-r6qmrkbn.js";export{version};

gemini-extension.json

 {
   "name": "githits",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "The code context layer for AI coding agents",
@@ -5,0 +5,0 @@ "mcpServers": {

package.json

 {
   "name": "githits",
   "description": "The code context layer for AI coding agents",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "mcpName": "com.githits/githits",
@@ -18,2 +18,3 @@ "type": "module",
     ".mcp.json",
+    "mcp.json",
     "server.json",
@@ -20,0 +21,0 @@ "gemini-extension.json",

plugin.json

 {
-  "name": "githits"
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "githits",
+  "version": "0.8.0",
+  "description": "The code context layer for AI coding agents",
+  "author": {
+    "name": "GitHits"
+  },
+  "homepage": "https://githits.com",
+  "repository": "https://github.com/githits-com/githits-cli",
+  "license": "Apache-2.0",
+  "keywords": [
+    "githits",
+    "context layer",
+    "public open-source",
+    "open-source code",
+    "code search",
+    "package documentation",
+    "documentation search",
+    "package metadata",
+    "vulnerabilities",
+    "changelogs",
+    "dependency graphs",
+    "upgrade evidence",
+    "implementation examples"
+  ]
 }

README.md

@@ -21,2 +21,3 @@ <p align="center">
   <a href="https://glama.ai/mcp/servers/githits-com/githits-cli"><img alt="githits-cli MCP server" src="https://glama.ai/mcp/servers/githits-com/githits-cli/badges/score.svg"></a>
+  <a href="https://lobehub.com/mcp/githits-com-githits-cli"><img alt="MCP Badge" src="https://lobehub.com/badge/mcp/githits-com-githits-cli?style=plastic"></a>
 </p>
@@ -195,2 +196,47 @@
 
+### Keychain Prompts and File Storage
+
+GitHits uses the system keychain by default because OAuth credentials include a
+refresh token. On macOS this means Keychain Access; on Windows it means
+Credential Manager; on Linux it means the available Secret Service or keyring
+backend.
+
+If macOS shows a prompt such as "githits wants to access ... in your keychain",
+choose **Always Allow** when you trust the installed `githits` CLI. GitHits
+cannot customize that operating-system prompt; it is generated by macOS.
+
+GitHits also writes a small non-secret metadata file so recent startup checks do
+not need to read the keychain. The keychain is only read when GitHits needs the
+token, for example during a tool call, token refresh, `githits auth status`, or a
+login check after metadata is stale or expired.
+
+If your agent keeps showing keychain prompts even after **Always Allow**, switch
+OAuth storage to file mode:
+
+```toml
+# macOS/Linux: ~/.config/githits/config.toml, or $XDG_CONFIG_HOME/githits/config.toml
+# Windows: %APPDATA%\githits\config.toml
+[auth]
+storage = "file"
+```
+
+The config directory may be empty until you create `config.toml` or GitHits
+writes auth metadata. Older macOS installs may have used
+`~/Library/Application Support/githits`; GitHits still reads that location for
+migration, but new auth config and file storage use `~/.config/githits`.
+
+You can also opt in for one process:
+
+```sh
+GITHITS_AUTH_STORAGE=file githits login --force
+```
+
+File mode stores OAuth credentials as JSON files under the GitHits config
+directory. The files are written with private permissions where the platform
+supports it, but they are not encrypted. Any process that can read files as your
+operating-system user may be able to read the tokens.
+
+Use file mode only on machines where you trust local user-account access. For CI
+and automation, prefer `GITHITS_API_TOKEN` instead of browser OAuth.
+
 Inspect auth and runtime state with:
@@ -197,0 +243,0 @@

server.json

@@ -19,3 +19,3 @@ {
   },
-  "version": "0.7.0",
+  "version": "0.8.0",
   "remotes": [
@@ -32,3 +32,3 @@ {
       "identifier": "githits",
-      "version": "0.7.0",
+      "version": "0.8.0",
       "runtimeHint": "npx",
@@ -35,0 +35,0 @@ "transport": {

dist/shared/chunk-ncsgqtj1.js

-import{createRequire}from"node:module";var __require=createRequire(import.meta.url);var description="The code context layer for AI coding agents";var version="0.7.0";
-export{__require,description,version};

dist/shared/chunk-p8dg49ey.js

-import{clearAutoLoginAuthSessionMetadata,createAuthCommandDependencies,createAuthStatusDependencies,createContainer,loadAutoLoginAuthSessionMetadata,recordAuthFingerprint}from"./chunk-mysf4hjt.js";import"./chunk-ncsgqtj1.js";export{recordAuthFingerprint,loadAutoLoginAuthSessionMetadata,createContainer,createAuthStatusDependencies,createAuthCommandDependencies,clearAutoLoginAuthSessionMetadata};

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

891155

0.41%

Number of package files

28

3.7%

Lines of code

5040

0.72%

Number of lines in readme file

436

11.79%

No dependency changes