diff --git a/cli/CHANGELOG.md b/cli/CHANGELOG.md
index 520c7d2..3c5554b 100644
--- a/cli/CHANGELOG.md
+++ b/cli/CHANGELOG.md
@@ -1,5 +1,8 @@
 # arcrun CLI Changelog
 
+## 1.3.14 — 2026-07-08
+- 補發：npm 1.3.13 落後 main 近一個月（含已移除的 exposure-warning 閘、舊版 creds push）——已造成兩次 AI 誤判（creds push encryption_key、acr push 假人類閘），本版對齊 main（credential 遷移後行為、閘移除、Gitea archive 下載源等）
+
 ## 1.3.13 — 2026-06-24
 - Merge: fix self-hosted KBDB_BASE_URL injection (issue #2)
 
diff --git a/cli/package.json b/cli/package.json
index 682c800..365cd62 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "arcrun",
-  "version": "1.3.13",
+  "version": "1.3.14",
   "description": "AI Workflow CLI for arcrun — self-host WASM-based AI workflows on your own Cloudflare",
   "bin": {
     "acr": "dist/index.js"