docguard-cli 0.9.7__tar.gz → 0.9.9__tar.gz

{docguard_cli-0.9.7/extensions/spec-kit-docguard → docguard_cli-0.9.9/.agent}/skills/docguard-fix/SKILL.md

@@ -6,9 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.9.5
+  version: 0.9.9
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
+<!-- docguard:version: 0.9.9 -->
 
 # DocGuard Fix Skill
 

{docguard_cli-0.9.7/extensions/spec-kit-docguard → docguard_cli-0.9.9/.agent}/skills/docguard-guard/SKILL.md

@@ -7,9 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.9.5
+  version: 0.9.9
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
+<!-- docguard:version: 0.9.9 -->
 
 # DocGuard Guard Skill
 
@@ -155,12 +156,16 @@ Present the user with options:
 - **Track progress** — if user runs guard multiple times, compare before/after
 - If user provides `$ARGUMENTS` like "just structure" or "only security", filter report to those validators
 
-## Integration with Spec Kit
+## Integration with Spec Kit (Extension-First)
 
-If this project has `.specify/` directory (spec-kit enabled):
+DocGuard is a spec-kit extension. When this project has a `.specify/` directory:
+- Read `.specify/memory/constitution.md` for project principles that constrain documentation
 - Include Spec-Kit validator results in the triage
 - Cross-reference spec quality issues with `specs/*/spec.md` file paths
-- Suggest `/speckit.analyze` if spec-related findings exceed 3
+- When specification issues found → suggest `/speckit.specify` or `/speckit.clarify`
+- When architecture gaps found → suggest `/speckit.plan`
+- When cross-artifact inconsistencies exceed 3 → suggest `/speckit.analyze`
+- When no constitution exists → suggest `/speckit.constitution` as first step
 
 ## Context
 

{docguard_cli-0.9.7/extensions/spec-kit-docguard → docguard_cli-0.9.9/.agent}/skills/docguard-review/SKILL.md

@@ -6,9 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.9.5
+  version: 0.9.9
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
+<!-- docguard:version: 0.9.9 -->
 
 # DocGuard Review Skill
 
@@ -163,7 +164,10 @@ Output a structured markdown report (do NOT write to disk):
 
 Based on findings:
 - **If CRITICAL issues**: "Run `/docguard.fix --doc [name]` to resolve blocking issues"
+- **If spec-related gaps**: "Run `/speckit.specify` to update specifications" or "/speckit.clarify to resolve ambiguities"
+- **If architecture drift**: "Run `/speckit.plan` to realign implementation plan with codebase"
 - **If only LOW/MEDIUM**: "Documentation is healthy. Consider `/docguard.fix` for polish"
+- **If constitution missing**: "Run `/speckit.constitution` to establish project principles"
 - **If all clean**: "Documentation is excellent. No action needed."
 
 Ask: "Would you like me to fix the top N issues? (I'll show you what I plan to change before applying)"

{docguard_cli-0.9.7 → docguard_cli-0.9.9}/.agent/skills/docguard-score/SKILL.md

@@ -6,9 +6,10 @@ description: CDD maturity assessment with category-aware improvement roadmap. Ru
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.9.5
+  version: 0.9.9
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
+<!-- docguard:version: 0.9.9 -->
 
 # DocGuard Score Skill
 

docguard_cli-0.9.9/.github/workflows/release.yml

@@ -0,0 +1,78 @@
+name: Publish to npm + PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  # ── Run tests first ──
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18, 20, 22]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Run Tests
+        run: npm test
+      - name: Guard (self-check)
+        run: node cli/docguard.mjs guard || [ $? -eq 2 ]
+
+  # ── Publish to npm ──
+  publish-npm:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Sync version from tag
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          npm version "$VERSION" --no-git-tag-version --allow-same-version
+          echo "Publishing version $VERSION"
+
+      - name: Publish
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+  # ── Publish to PyPI ──
+  publish-pypi:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Sync version from tag
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          sed -i "s/^version = \".*\"/version = \"$VERSION\"/" pyproject.toml
+          echo "Publishing version $VERSION"
+          grep 'version' pyproject.toml
+
+      - name: Install build tools
+        run: pip install build twine
+
+      - name: Build
+        run: python -m build
+
+      - name: Publish
+        run: python -m twine upload dist/*
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}

docguard_cli-0.9.9/.specify/memory/constitution.md

@@ -0,0 +1,76 @@
+<!-- Sync Impact Report
+  Version change: 0.0.0 → 1.0.0
+  Modified principles: N/A (initial creation)
+  Added sections: Core Principles (7), Technology Constraints, Extension & Spec Kit Compliance, Governance
+  Removed sections: N/A
+  Templates requiring updates: ✅ constitution-template.md (reference only, not modified)
+  Follow-up TODOs: None
+-->
+
+# DocGuard Constitution
+
+## Core Principles
+
+### I. LLM-First, CLI-Second
+
+DocGuard is built for AI coding agents. Every feature MUST be designed for LLM consumption first, with CLI as a secondary interface. Skills (behavior protocols) take priority over CLI commands (step-lists). When DocGuard detects an AI agent environment, it MUST surface skill-based instructions. CLI output MUST be machine-parseable (JSON mode) alongside human-readable text.
+
+### II. Zero NPM Runtime Dependencies (NON-NEGOTIABLE)
+
+DocGuard has zero `node_modules` at runtime. All Node.js functionality uses built-in modules only (`node:fs`, `node:path`, `node:child_process`, `node:test`, `node:url`, `node:readline`, `node:os`, `node:assert`). This maximizes portability, eliminates supply chain risk, and ensures instant `npx` usage. Dev dependencies are also zero — tests use `node:test`. DocGuard depends on spec-kit as a **framework convention** (`.specify/` directory structure, skill architecture, constitution pattern). This is an integration, not a code dependency. When the `specify` CLI is available, DocGuard MUST leverage it for initialization and skill management.
+
+### III. Documentation as Source of Truth
+
+Canonical-Driven Development means documentation drives code, not the other way around. DocGuard enforces this by validating code against `docs-canonical/` and detecting drift. Any deviation from canonical docs MUST be logged in `DRIFT-LOG.md` with `// DRIFT: reason` inline comments. The `docguard guard` command is the enforcement gate.
+
+### IV. Validator Isolation
+
+Each of the 19 validators is a pure, self-contained function. Validators receive `projectDir` and `config`, then return results. No validator may import another validator or depend on command-level logic. This ensures adding or modifying validators never breaks existing ones.
+
+### V. AI as Author, CLI as Orchestrator
+
+The CLI detects problems and generates structured prompts. The AI agent writes the actual documentation. DocGuard MUST NOT generate final documentation content itself — it provides research instructions, templates, and validation. The `fix`, `diagnose`, and `generate` commands produce AI-actionable output, not finished documents.
+
+### VI. Safe Writes
+
+All file write operations MUST use defensive patterns. Before overwriting any file, DocGuard creates backups. The `--force` flag is required to overwrite existing files. Init and setup commands skip files that already exist unless explicitly forced.
+
+### VII. Spec Kit Extension Compliance
+
+DocGuard is a community extension of GitHub Spec Kit. It MUST follow spec-kit conventions: `extension.yml` schema, skill architecture (`SKILL.md` files with YAML frontmatter), workflow hooks (`after_implement`, `before_tasks`, `after_tasks`), and the `.specify/` directory structure. DocGuard MUST always install spec-kit core skills alongside its own skills so users get the complete spec-driven development workflow.
+
+## Technology Constraints
+
+- **Language**: JavaScript (ES Modules only, no CommonJS)
+- **Runtime**: Node.js ≥ 18 (for native `node:test` and ES module support)
+- **Dependencies**: None. Zero. Ever. This is a hard constraint.
+- **Distribution**: npm (`docguard-cli`) + PyPI (`docguard`)
+- **Testing**: `node:test` + `node:assert` (built-in, no framework)
+- **Extension**: VS Code Extension API for editor integration
+- **Config**: `.docguard.json` for project-level customization
+- **Profiles**: starter, standard, enterprise compliance levels
+- **Output**: Text (human) + JSON (machine) dual output for all commands
+
+## Extension & Spec Kit Compliance
+
+- DocGuard MUST declare all skills, scripts, hooks, and commands in `extension.yml`
+- DocGuard MUST bundle spec-kit core skills so users don't need a separate install
+- All 4 DocGuard skills (`docguard-guard`, `docguard-fix`, `docguard-review`, `docguard-score`) MUST follow spec-kit skill architecture: YAML frontmatter with `name`, `description`, `compatibility`, `metadata`
+- Workflow hooks MUST be optional (never force execution)
+- The `ensureSkills()` function MUST auto-detect and install both DocGuard skills AND spec-kit core skills
+- DocGuard MUST detect agent environment (LLM vs CLI) and adapt its output accordingly
+
+## Governance
+
+This constitution supersedes all ad-hoc practices. Amendments require:
+1. Documentation of the change in `DRIFT-LOG.md` if deviating
+2. Update this constitution with a version bump
+3. Update `CHANGELOG.md` with the change
+4. All PRs MUST pass `docguard guard` before merge
+
+Versioning follows semantic versioning:
+- **MAJOR**: Principle removal or backward-incompatible redefinition
+- **MINOR**: New principle added or materially expanded guidance
+- **PATCH**: Clarification, wording, typo fix
+
+**Version**: 1.0.0 | **Ratified**: 2026-03-17 | **Last Amended**: 2026-03-17

{docguard_cli-0.9.7 → docguard_cli-0.9.9}/CHANGELOG.md

@@ -7,6 +7,44 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.9] - 2026-03-17
+
+### Added — Extension-First Architecture & Spec-Kit Integration Gate
+
+#### Spec-Kit Integration Gate
+- **`ensureSpecKit()`** — Runs on every command. Auto-initializes spec-kit when `specify` CLI is available. Shows a prominent yellow-box reminder every time when spec-kit is not installed (persistent, no dismiss).
+- **`detectAIAgent(projectDir)`** — Maps 12 filesystem signals to spec-kit `--ai` flag values: `.cursor/` → `cursor-agent`, `.claude/` or `CLAUDE.md` → `claude`, `.gemini/` → `gemini`, `.agents/` → `agy` (Antigravity), `.github/copilot-instructions.md` → `copilot`, `.windsurf/` → `windsurf`, `.codex/` → `codex`, `.roo/` → `roo`, `.amp/` → `amp`, `.kiro/` → `kiro-cli`, `.tabnine/` → `tabnine`. Falls back to `--ai generic` when no agent detected.
+- **Strong init push** — `docguard init` now shows a prominent red-bordered box when spec-kit is missing, listing exactly what users miss: 9 AI skills, constitution, SDD workflow, agent detection. Provides both `uv` and `pip` install commands.
+- **Guard footer reminder** — `docguard guard` shows a 1-line spec-kit install nudge after results when not initialized.
+- **Skill auto-update** — `ensureSkills()` now compares installed SKILL.md `docguard:version` against package version. Automatically overwrites stale skills on DocGuard update.
+
+#### LLM-First Output
+- **`detectAgentMode(projectDir)`** — Returns `'llm'` or `'cli'` based on filesystem signals and `.specify/init-options.json`. All adaptive commands check this.
+- **`diagnose.mjs`** — All `FIX_INSTRUCTIONS` now include `llmCommand` fields (e.g., `/docguard.fix --doc architecture`). Issue collection propagates `llmCommand` to output. Remediation plan, verification checklist, and debate prompts all adapt to agent mode.
+- **`guard.mjs`** — "Next step" hint now shows `/docguard.diagnose` in LLM mode.
+- **`init.mjs`** — Next steps show skill commands (`/docguard.guard`, `/docguard.fix`) in LLM mode, CLI commands (`docguard diagnose`) in CLI mode.
+- **`setup.mjs`** — Next steps adapt to agent mode.
+
+#### Spec-Kit Skill Chaining
+- **`docguard-guard` SKILL.md** — Now chains to `/speckit.specify`, `/speckit.plan`, `/speckit.clarify`, and checks `constitution.md`.
+- **`docguard-review` SKILL.md** — Offers spec-kit skills for specification-level issues.
+- **`extension.yml`** — Declares `framework: spec-kit` and `specify` as optional tool.
+
+### Fixed
+- **`npx docguard guard`** → `npx docguard-cli guard` — The npm package name is `docguard-cli`, not `docguard`. Fixed in `hooks.mjs`, `setup.mjs`, `fix.mjs`, `docguard.mjs` (pre-existing bug).
+- **Hardcoded `--ai agy`** → Dynamic `detectAIAgent()` — `init.mjs` and `setup.mjs` no longer hardcode Antigravity as the agent.
+- **`llmCommand` never propagated** — `collectIssues()` in `diagnose.mjs` was not copying `llmCommand` from `FIX_INSTRUCTIONS` to issue objects, so LLM-first fix hints silently fell back to CLI commands.
+- **Debate prompt not LLM-aware** — `outputDebatePrompt()` now receives `agentMode` and adapts verification commands.
+- **Basic-tier checklist hardcoded** — Verification checklist for basic-tier agents now adapts to LLM/CLI mode.
+- **Stale "Zero dependencies" doc comments** — Updated 6 files to "Zero NPM runtime dependencies" matching the constitution.
+- **Platform-aware `--script`** — `specify init` now uses `--script ps` on Windows, `--script sh` on Unix.
+
+### Changed
+- **Constitution** — Principle II amended from "Zero Dependencies" to "Zero NPM Runtime Dependencies" (spec-kit is a framework convention, not a code dependency).
+- **SKILL.md metadata** — All 4 skills updated from `0.9.5`/`0.9.8` to `0.9.9`. Added `docguard:version` comment for auto-update mechanism.
+- **`ensure-skills.mjs`** — Full rewrite: 6 exports (`ensureSkills`, `ensureSpecKit`, `detectAgentMode`, `detectAIAgent`, `getDetectedAgent`, `isSpecKitAvailable`, `isSpecKitInitialized`).
+- **22 files changed**, +567/−203 lines.
+
 ## [0.9.6] - 2026-03-14
 
 ### Added — Enterprise AI Skills Architecture

{docguard_cli-0.9.7 → docguard_cli-0.9.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: docguard-cli
-Version: 0.9.7
+Version: 0.9.9
 Summary: The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your project documentation. Zero dependencies.
 Project-URL: Homepage, https://github.com/raccioly/docguard
 Project-URL: Documentation, https://github.com/raccioly/docguard#readme
@@ -46,6 +46,8 @@ Description-Content-Type: text/markdown
 - [Templates](#-templates)
 - [AI Agent Support](#-ai-agent-support)
 - [Slash Commands](#-slash-commands)
+- [Examples](#-examples)
+- [Testing](#-testing)
 - [CI/CD Integration](#%EF%B8%8F-cicd-integration)
 - [File Structure](#-file-structure)
 - [Configuration](#%EF%B8%8F-configuration)
@@ -68,6 +70,39 @@ DocGuard is an official [GitHub Spec Kit](https://github.com/github/spec-kit) co
 
 📖 **[Philosophy](PHILOSOPHY.md)** · 📋 **[CDD Standard](STANDARD.md)** · ⚖️ **[Comparisons](COMPARISONS.md)** · 🗺️ **[Roadmap](ROADMAP.md)**
 
+### Architecture
+
+```mermaid
+graph TD
+    CLI["CLI Entry<br/>docguard.mjs"] --> Commands["Commands (15)"]
+    Commands --> guard["guard"]
+    Commands --> generate["generate"]
+    Commands --> score["score"]
+    Commands --> diagnose["diagnose"]
+    Commands --> setup["setup wizard"]
+    Commands --> other["diff · init · fix · trace<br/>agents · hooks · badge · ci · watch"]
+
+    guard --> Validators["Validators (19)"]
+    generate --> Scanners["Scanners (4)<br/>routes · schemas · doc-tools · speckit"]
+    score --> Scoring["Weighted Scoring<br/>8 categories"]
+    diagnose --> Validators
+    diagnose --> AIPrompts["AI-Ready<br/>Fix Prompts"]
+
+    Validators --> Output["Output"]
+    Scanners --> Output
+    Scoring --> Output
+    Output --> Terminal["Terminal"]
+    Output --> JSON["JSON"]
+    Output --> Badge["Badge"]
+
+    style CLI fill:#2d5016,color:#fff
+    style Validators fill:#1a3a5c,color:#fff
+    style Scanners fill:#1a3a5c,color:#fff
+    style Output fill:#5c3a1a,color:#fff
+```
+
+> **Distribution**: Node.js core (npm) · Python wrapper (PyPI) · GitHub Action (`action.yml`) · Spec Kit Extension (ZIP)
+
 ---
 
 ## ⚡ Quick Start
@@ -359,6 +394,44 @@ For advanced users and CI/CD pipelines, DocGuard includes bash scripts with `--j
 
 ---
 
+## 📁 Examples
+
+Three real-world projects to see DocGuard in action:
+
+| Example | Scenario | What You'll See |
+|---------|----------|----------------|
+| [01-express-api](examples/01-express-api/) | Node.js API with **zero docs** | Cold-start: `generate` → instant coverage |
+| [02-python-flask](examples/02-python-flask/) | Python app with **drifted docs** | Drift detection: catch when docs lie |
+| [03-spec-kit-project](examples/03-spec-kit-project/) | Full CDD + Spec Kit | Gold standard: what maturity looks like |
+
+See [examples/README.md](examples/README.md) for step-by-step instructions.
+
+---
+
+## 🧪 Testing
+
+### Test Suite
+
+```bash
+npm test    # 33 tests across 18 describe blocks
+```
+
+Covers all 15 CLI commands, project type detection, compliance profiles, JSON output format, and help completeness.
+
+### CI Matrix
+
+| Node.js | OS | Status |
+|---------|-----|--------|
+| 18 | ubuntu-latest | ✅ |
+| 20 | ubuntu-latest | ✅ |
+| 22 | ubuntu-latest | ✅ |
+
+### Self-Validation (Dogfooding)
+
+DocGuard runs its own `guard`, `score`, `diff`, `diagnose`, and `badge` commands against itself in CI — ensuring the tool passes its own checks.
+
+---
+
 ## ⚙️ CI/CD Integration
 
 ### GitHub Actions
@@ -386,7 +459,7 @@ npx docguard-cli hooks --type pre-commit
 ### GitHub Marketplace
 
 ```yaml
-- uses: raccioly/docguard@v0.9.5
+- uses: raccioly/docguard@v0.9.7
   with:
     command: guard
     fail-on-warning: true

{docguard_cli-0.9.7 → docguard_cli-0.9.9}/README.md

@@ -22,6 +22,8 @@
 - [Templates](#-templates)
 - [AI Agent Support](#-ai-agent-support)
 - [Slash Commands](#-slash-commands)
+- [Examples](#-examples)
+- [Testing](#-testing)
 - [CI/CD Integration](#%EF%B8%8F-cicd-integration)
 - [File Structure](#-file-structure)
 - [Configuration](#%EF%B8%8F-configuration)
@@ -44,6 +46,39 @@ DocGuard is an official [GitHub Spec Kit](https://github.com/github/spec-kit) co
 
 📖 **[Philosophy](PHILOSOPHY.md)** · 📋 **[CDD Standard](STANDARD.md)** · ⚖️ **[Comparisons](COMPARISONS.md)** · 🗺️ **[Roadmap](ROADMAP.md)**
 
+### Architecture
+
+```mermaid
+graph TD
+    CLI["CLI Entry<br/>docguard.mjs"] --> Commands["Commands (15)"]
+    Commands --> guard["guard"]
+    Commands --> generate["generate"]
+    Commands --> score["score"]
+    Commands --> diagnose["diagnose"]
+    Commands --> setup["setup wizard"]
+    Commands --> other["diff · init · fix · trace<br/>agents · hooks · badge · ci · watch"]
+
+    guard --> Validators["Validators (19)"]
+    generate --> Scanners["Scanners (4)<br/>routes · schemas · doc-tools · speckit"]
+    score --> Scoring["Weighted Scoring<br/>8 categories"]
+    diagnose --> Validators
+    diagnose --> AIPrompts["AI-Ready<br/>Fix Prompts"]
+
+    Validators --> Output["Output"]
+    Scanners --> Output
+    Scoring --> Output
+    Output --> Terminal["Terminal"]
+    Output --> JSON["JSON"]
+    Output --> Badge["Badge"]
+
+    style CLI fill:#2d5016,color:#fff
+    style Validators fill:#1a3a5c,color:#fff
+    style Scanners fill:#1a3a5c,color:#fff
+    style Output fill:#5c3a1a,color:#fff
+```
+
+> **Distribution**: Node.js core (npm) · Python wrapper (PyPI) · GitHub Action (`action.yml`) · Spec Kit Extension (ZIP)
+
 ---
 
 ## ⚡ Quick Start
@@ -335,6 +370,44 @@ For advanced users and CI/CD pipelines, DocGuard includes bash scripts with `--j
 
 ---
 
+## 📁 Examples
+
+Three real-world projects to see DocGuard in action:
+
+| Example | Scenario | What You'll See |
+|---------|----------|----------------|
+| [01-express-api](examples/01-express-api/) | Node.js API with **zero docs** | Cold-start: `generate` → instant coverage |
+| [02-python-flask](examples/02-python-flask/) | Python app with **drifted docs** | Drift detection: catch when docs lie |
+| [03-spec-kit-project](examples/03-spec-kit-project/) | Full CDD + Spec Kit | Gold standard: what maturity looks like |
+
+See [examples/README.md](examples/README.md) for step-by-step instructions.
+
+---
+
+## 🧪 Testing
+
+### Test Suite
+
+```bash
+npm test    # 33 tests across 18 describe blocks
+```
+
+Covers all 15 CLI commands, project type detection, compliance profiles, JSON output format, and help completeness.
+
+### CI Matrix
+
+| Node.js | OS | Status |
+|---------|-----|--------|
+| 18 | ubuntu-latest | ✅ |
+| 20 | ubuntu-latest | ✅ |
+| 22 | ubuntu-latest | ✅ |
+
+### Self-Validation (Dogfooding)
+
+DocGuard runs its own `guard`, `score`, `diff`, `diagnose`, and `badge` commands against itself in CI — ensuring the tool passes its own checks.
+
+---
+
 ## ⚙️ CI/CD Integration
 
 ### GitHub Actions
@@ -362,7 +435,7 @@ npx docguard-cli hooks --type pre-commit
 ### GitHub Marketplace
 
 ```yaml
-- uses: raccioly/docguard@v0.9.5
+- uses: raccioly/docguard@v0.9.7
   with:
     command: guard
     fail-on-warning: true

{docguard_cli-0.9.7 → docguard_cli-0.9.9}/SECURITY.md

@@ -4,15 +4,15 @@
 
 | Version | Supported |
 |---------|-----------|
-| 0.4.x   | ✅ Current |
-| < 0.4   | ❌ Not supported |
+| 0.9.x   | ✅ Current |
+| < 0.9   | ❌ Not supported |
 
 ## Reporting a Vulnerability
 
 If you discover a security vulnerability in DocGuard, please report it responsibly:
 
 1. **Do NOT** open a public GitHub issue for security vulnerabilities
-2. **Email** the maintainers directly (see repository contact info)
+2. **Report via** [GitHub Security Advisories](https://github.com/raccioly/docguard/security/advisories/new) (private, preferred)
 3. Include:
    - Description of the vulnerability
    - Steps to reproduce