v1.4.0

Added

aidc update updates the CLI itself, the way brew upgrade or apt upgrade would. It detects how this copy was installed and runs the matching step:

• release installer under ~/.local/share/aidc/: re-runs the latest release's install.sh, which installs alongside the old version and flips the symlink
• Homebrew: brew upgrade on the installed formula (aidc or aidc@X.Y)
• git checkout: git pull --ff-only

aidc update --check reports the installed and latest versions and changes nothing. The CLI and the images are separate, so follow an update with aidc rebuild, then aidc upgrade <session> per running session.

This exists because the failure is quiet: a stale installed copy rebuilds images from its own old tree, and nothing tells you the checkout you just pulled is not the aidc on your PATH.

The Homebrew tap updates itself on every release, with no token to rotate. The workflow now pushes the tap over SSH with a write deploy key that never expires and can reach nothing else. release/tap-deploy-key.sh creates or rotates it and prints only the fingerprint. Dry-run dispatches now prove push authorization, not just clone access.

Upgrading

Once on 1.4.0, future upgrades are one command:

aidc update && aidc rebuild

To get onto 1.4.0 from an earlier release, run the installer one-liner from the README (or brew upgrade aidc, or git pull), then aidc rebuild. Then aidc upgrade <session> per session, or aidc kill + aidc create to start from the new bake.

Full changelog: v1.3.1...v1.4.0