v0.1.3

Added

• aid-cisco-cli install — download and verify release binaries from GitHub
  Releases (--version, --check, --prefix).
• aid-cisco-cli onboard and aid-cisco-cli config — interactive TUI wizard
  (Charm huh) for core credentials plus optional capability modules (private
  HuggingFace repos, local AIBOM LLM settings).
• Onboarding draft saves — config written after each field; [onboard].step
  tracks progress for resume.
• config show — TUI section browser on a terminal; --plain for redacted TOML.
• config edit — section menu to change core API or capabilities (configure / remove).
• Home config directory — ~/.ai-defense/config.toml (like ~/.aws); wizard always writes here unless AI_DEFENSE_CONFIG_PATH is set. Legacy XDG and project .config.toml paths still read for migration.
• Config profiles — named profiles in ~/.ai-defense/profiles/<name>.toml; config profile commands and global --profile / AI_DEFENSE_PROFILE; onboard opens a profile picker (active profile pre-selected) unless --profile is set.
• AIBOM LLM from TOML — [default.aibom] fields resolve after flags and env vars.
• Spec-driven integrations — internal/config/spec/config.spec.yaml (embedded schema;
  user config remains config.toml) declares env/TOML/wizard fields; capabilities, CLI
  flags, redaction, and resolution share the same schema.
• CI enforces minimum Go test coverage (make test-cover-check, default floor 75%).
  scripts/check-coverage.sh and make test-cover for local runs. Tooling under
  scripts/, main.go, and TUI/onboarding packages (install, onboard, config,
  internal/tui, internal/selfupdate, internal/config/spec) are excluded from
  the gate until they have unit tests. Command-layer HTTP tests use
  internal/testutil/apitest (httptest + *.cisco.com base URL rewrite).
• PR CI enforces diff coverage on changed production Go lines (make test-diff-cover-check,
  default floor 75% vs merge base). Overall repo coverage gate unchanged; diff gate skips when
  no coverable production lines changed in scoped packages.

Changed

• CLI --help/usage now renders as titled panels with a color scheme matching
  the embedded AI BOM (cisco-aibom) CLI — faint borders/titles, bold-yellow
  Usage:, bold-cyan option names, bold-green short flags, bold-yellow type
  metavars — so native and aibom-backed help look consistent. Color is gated to
  the destination stream being a TTY and honors NO_COLOR / FORCE_COLOR.
• make bundle — skips rebuild when Python bundle inputs are unchanged; use
  make bundle-force or BUNDLE_FORCE=1 to rebuild. Caches PBS tarball and pip
  wheels under .build/.
• Onboard/config TUI — interactive wizard and config browse/edit use the same
  Typer/Rich-style colors as --help (honors NO_COLOR / FORCE_COLOR).