security-harness-kit 0.3.18 → 0.4.0

package/README.md

@@ -28,11 +28,11 @@ With `shk`, you can:
 - Mask sensitive content from stdin, text files, and Office documents (`.docx`, `.xlsx`, `.pptx`).
 - Encrypt `.env` files, store private keys in the OS credential store, and run commands with decrypted values injected only at runtime.
 - Install Git pre-commit hooks.
-- Install managed hooks for Claude Code, Cursor, and Codex.
+- Install managed hooks for Claude Code, Cursor, Codex, and Google Antigravity.
 - Preview metadata-only audit logs to understand blocked hook activity without storing detected values.
 - Generate a GitHub Actions workflow that runs `shk scan` on every pull request.
 - Diagnose ignore file and `.env` safety coverage.
-- Deploy AI agent skills to Claude Code, Codex, and Cursor project directories.
+- Deploy AI agent skills to Claude Code, Codex, Cursor, and Antigravity project directories.
 
 ## Installation
 
@@ -125,7 +125,7 @@ Generate a GitHub Actions workflow that scans every pull request:
 shk ci init github
 ```
 
-Install the shk agent skill for Claude Code and Codex/Cursor:
+Install the shk agent skill for Claude Code, Codex/Cursor, and Antigravity:
 
 ```bash
 shk skills install
@@ -190,11 +190,12 @@ shk hooks install
 shk hooks install-ai --dry-run
 shk hooks install-ai --audit
 shk hooks install-ai --log-blocked
+shk hooks install-ai --tool antigravity
 
 shk ci init github
 shk ci init github --dry-run
 shk ci init github --mode audit
-shk ci init github --shk-version v0.3.18
+shk ci init github --shk-version v0.4.0
 
 shk skills install
 shk skills install --tool claude-code --global
@@ -203,7 +204,7 @@ shk skills status
 
 ## Configuration
 
-`shk` reads policy from `shk.toml` in the current working directory. Read-only commands can use built-in defaults. Commands that write files or tool configuration require a project policy file.
+`shk` reads policy from `shk.toml` in the current working directory. Read-only commands can use built-in defaults. Commands that write files or tool configuration require a project policy file. When running from outside the project, pass the global `--project-root <DIR>` flag to resolve the policy and project-relative paths from that directory.
 
 Create the default policy:
 

package/npm-shrinkwrap.json

@@ -23,7 +23,7 @@
       "hasInstallScript": true,
       "license": "MIT",
       "name": "security-harness-kit",
-      "version": "0.3.18"
+      "version": "0.4.0"
     },
     "node_modules/@isaacs/cliui": {
       "engines": {
@@ -542,5 +542,5 @@
     }
   },
   "requires": true,
-  "version": "0.3.18"
+  "version": "0.4.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/Kazuki-tam/security-harness-kit/releases/download/v0.3.18"
+    "https://github.com/Kazuki-tam/security-harness-kit/releases/download/v0.4.0"
   ],
   "bin": {
     "shk": "run-shk.js"
@@ -85,7 +85,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "0.3.18",
+  "version": "0.4.0",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"