PatchWarden v1.7.2

PatchWarden v1.7.2

This release fixes Control Center cold-start false timeouts and Glama MCP metadata drift.

Highlights

• Reuse one Watcher snapshot across /api/lineages projections.
• Load live dashboard status before historical panels and reuse its health score.
• Use a 30-second desktop GET budget with one retry only for immediate connection failure.
• Classify Control Center failures as control_center_timeout or control_center_unavailable.
• Align Glama with Node 24, npm build steps, node dist/index.js, and no required environment variables.

Verification

• npm.cmd test: 1,078 passed, 7 skipped, 0 failed
• Control Center smoke: 38/38
• MCP: 15/15
• HTTP MCP: 18/18
• Desktop tests: 103/103
• Windows packaged smoke: 3 viewports, single-instance exit 0
• Glama Build & Release: success

PatchWarden v1.7.1

What's Changed

• feat: prepare v1.7.1 model management and Direct review by @jiezeng2004-design in #61

Full Changelog: v1.7.0...v1.7.1

PatchWarden v1.7.0

What's Changed

• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #52
• build(deps-dev): bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in #39
• docs: refresh bilingual beginner tutorial by @jiezeng2004-design in #58
• docs: fix README release and language links by @jiezeng2004-design in #59
• release: prepare v1.7.0 metadata by @jiezeng2004-design in #60

Full Changelog: v1.6.7...v1.7.0

PatchWarden v1.6.7

PatchWarden v1.6.7 fixes task-lineage verification and audit aggregation, syncs audit outcomes into lineage evidence, narrows remote-write risk detection, and improves Desktop cold-start reliability and startup-log redaction. npm patchwarden@1.6.7 has been independently verified against the final main package.

PatchWarden v1.6.6

PatchWarden v1.6.6

PatchWarden v1.6.6 closes the follow-up correctness, safety, and everyday Control Center usability gaps identified after v1.6.5.

Highlights

• Makes archived-task cleanup fail closed before any linked, unreadable, or out-of-workspace ancestor can receive cleanup output.
• Limits Desktop shutdown cleanup to services owned by its current instance; manually started Core, Direct, Watcher, and Tunnel processes remain untouched.
• Makes audit and Direct-session read failures explicit, preserves complete Control Center task filtering beyond the MCP 100-item cap, and keeps stale log responses out of the active category.
• Uses Core's canonical Agent configuration revision and verifies the selected effective model reaches the final shell-free invocation.
• Clarifies acceptance evidence and next actions, completes bilingual labels and accessible names, and prevents ordinary detail views from exposing internal codes.
• Adds responsive Control Center layouts and release-retention tooling.

Windows downloads

• PatchWarden-Setup-1.6.6-x64.exe
• PatchWarden-Portable-1.6.6-x64.zip
• PatchWarden-Desktop-SHA256SUMS.txt

The Windows assets are not Authenticode-signed, so Windows SmartScreen may show an unknown-publisher warning. Verify downloads with the attached SHA-256 manifests.

Validation

• GitHub CI passed: Node 18, Ubuntu Node 20, Windows Node 20, Secret scan, Windows Desktop installer, and CI gate.
• Local full test suite passed: 962 tests passed, 3 skipped; Control Center smoke: 38/38.
• Release preflight, clean package, package manifest verification, and Windows installer/portable package generation passed from the final merge commit.

npm publication remains a separate manual step and was not performed by this GitHub Release workflow.

Assisted-by: ChatGPT (OpenAI Codex)

PatchWarden v1.6.4

PatchWarden v1.6.4

PatchWarden v1.6.4 adds auditable per-task Agent model selection and hardens model-aware execution, evidence, idempotency, and Windows Desktop packaging.

Highlights

• Adds task-level requested_model selection with explicit Agent routing, repository defaults, bounded model evidence, and frozen Agent configuration revisions.
• Keeps exactly one effective --model argument for the built-in Agent adapters while preserving prompt option/value adjacency and custom Agent static model arguments.
• Preserves Claude relay configuration in inherit mode, provides isolated settings mode, and restores owned OpenCode XDG overrides safely.
• Carries source-repository Agent defaults into generated worktrees and preserves requested models through assessment and repair rounds.
• Hardens request idempotency, failure/verification evidence, Assessment configuration concurrency, and Direct zero-diff handling for expected_changes:false.
• Avoids command-audit false positives from npm fixture text and refreshes the developer-mode Desktop shortcut only through the explicit project packaging workflow.

Windows downloads

• PatchWarden-Setup-1.6.4-x64.exe
• PatchWarden-Portable-1.6.4-x64.zip
• PatchWarden-Desktop-SHA256SUMS.txt

The Windows assets are not Authenticode-signed, so Windows SmartScreen may show an unknown-publisher warning. Verify downloads with the attached SHA-256 manifests.

Validation

• GitHub CI passed: Node 18, Ubuntu Node 20, Windows Node 20, Secret scan, Windows Desktop installer, and CI gate.
• Security smoke: 141/141.
• Unit tests: 939 passed, 3 skipped.
• Lifecycle smoke: 22/22.
• MCP and HTTP MCP smoke passed; HTTP MCP: 17/17.
• Control Center: 35/35.
• Doctor: 83 OK, 0 WARN, 0 FAIL.
• Desktop tests: 67/67.
• Release preflight passed the isolated 26-tool packaged Core manifest, three viewport checks, and the second-instance gate.
• Core and Desktop production dependency audits reported 0 vulnerabilities.

npm publication remains a separate manual step and was not performed by this GitHub release workflow.

Assisted-by: ChatGPT (OpenAI Codex)

PatchWarden v1.6.3

PatchWarden v1.6.3

PatchWarden v1.6.3 fixes model enforcement, task-history cleanup, Goal orchestration state, and Windows Desktop lifecycle reliability.

Highlights

• Hot-reloads trusted Agent-only model configuration and fails closed when model metadata and CLI arguments disagree.
• Records bounded effective-model, adapter, argument-presence, and configuration-revision evidence.
• Adds recoverable task-history archive/restore and repairs missing legacy evidence without inventing success.
• Adds queued Subgoal state and synchronizes watcher claim and terminal task transitions.
• Makes run_task_loop asynchronous and idempotent, including fail-closed recovery after a Core restart without duplicate tasks.
• Fixes packaged Desktop restart actions and waits for owned services to stop on exit.
• Prevents Desktop shutdown from stopping foreign, mismatched-config, or outdated PatchWarden instances.
• Adds ChatGPT (OpenAI Codex) to the project contributor acknowledgements.

Windows downloads

• PatchWarden-Setup-1.6.3-x64.exe
• PatchWarden-Portable-1.6.3-x64.zip
• PatchWarden-Desktop-SHA256SUMS.txt

The installer is not code-signed, so Windows SmartScreen may show an unknown-publisher warning. Verify downloads with the attached SHA-256 manifests.

Validation

• GitHub CI: Node 18, Ubuntu Node 20, Windows Node 20, Secret Scan, Windows Desktop installer, and CI Gate passed.
• Security smoke: 141/141.
• Unit tests: 913 passed, 3 skipped.
• Lifecycle smoke: 22/22.
• HTTP MCP: 17/17.
• Control Center: 35/35.
• Desktop tests: 65/65.
• Doctor: 80 OK, 1 expected default-config warning, 0 FAIL.
• CodeGraph: no cross-owner boundary violations and no new dependency-edge cycles.

Dependency note

Core production dependencies audit clean. Desktop runtime dependencies are separate from its build-only Electron packaging toolchain; npm may report advisories in development dependencies that are not shipped as runtime Node packages.

PatchWarden v1.6.2

PatchWarden v1.6.2

PatchWarden v1.6.2 stabilizes the Windows Desktop demo runtime and the two-stage Assessment workflow.

Highlights

• Keeps Watcher heartbeat updates independent from long-running Agent tasks, preventing healthy Watchers from being restarted mid-task.
• Adds restart-safe task reconciliation for cancellation, timeout, artifact collection, and Watcher ownership transitions.
• Adds versioned Assessment security snapshots, cross-process canonical tool manifests, material configuration fingerprints, and value-free stale diagnostics.
• Keeps Assessments valid across Watcher restarts while failing closed on policy, command, scope, timeout, and schema changes.
• Aligns Desktop, Core, Direct, Watcher, and Tunnel launch paths on the active runtime configuration.
• Improves bounded Agent adapter/model diagnostics, Audit evidence, Direct verification, and packaged E2E coverage.
• Normalizes Windows drive paths independently of the CI host platform.

Windows downloads

This release currently provides Windows x64 Desktop artifacts:

• PatchWarden-Setup-1.6.2-x64.exe
• PatchWarden-Portable-1.6.2-x64.zip
• PatchWarden-Desktop-SHA256SUMS.txt

The installer is not code-signed yet, so Windows SmartScreen may show an unknown-publisher warning. Verify downloads with the attached SHA256 manifests.

macOS/Linux and CLI users can continue using the existing npm package and its built-in local Dashboard. npm publication is manual and is not performed by this GitHub Release.

Validation

• GitHub CI: Node 18, Ubuntu Node 20, Windows Node 20, Secret Scan, Windows Desktop installer, and CI Gate passed.
• Security smoke: 141/141.
• Unit tests: 886 passed, 3 skipped.
• Lifecycle smoke: 22/22.
• HTTP MCP: 17/17.
• Doctor: 83 OK, 0 WARN, 0 FAIL.
• Desktop tests: 56/56.
• Clean package: 545 files; npm package surface: 544 files.
• Final packaged Core: v1.6.2, 26 tools.
• Final unpacked Desktop smoke: 3 viewports, single-instance check passed.

Dependency note

Core and Desktop production dependency audits report 0 vulnerabilities. The Desktop development dependency tree currently reports an upstream brace-expansion DoS advisory through electron-builder. The patched brace-expansion release requires Node 20 while PatchWarden supports Node 18, so this release does not apply an incompatible forced override or downgrade electron-builder. The affected build-only dependency is not shipped in the installed runtime.

PatchWarden v1.6.1

PatchWarden v1.6.1

PatchWarden v1.6.1 hardens cross-process state mutation, Windows process execution, release packaging, and the Desktop experience.

Highlights

• Serializes Goal, Worktree, Direct, task-status, assessment, and bounded-log mutations with auditable file locks and atomic replacement.
• Tightens workspace and sensitive-path validation, child-process environments, executable resolution, and output redaction.
• Improves Control Center task navigation, diagnostics, logs, desktop guidance, and agent/model management.
• Makes clean release packaging deterministic on Windows Node.js 20 and rejects incomplete or forbidden package contents.
• Pins patched transitive dependencies; clean Core and Desktop installs report zero npm audit vulnerabilities.

Verification

• GitHub Actions: Node.js 18, Ubuntu Node.js 20, Windows Node.js 20, secret scan, Windows desktop installer, and final CI gate passed.
• Core security smoke: 141/141.
• Core unit tests: 855 passed, 3 skipped.
• Lifecycle: 22/22; HTTP MCP: 17/17; MCP smoke and Doctor passed.
• Desktop tests: 54/54; clean-source Desktop preflight and packaged UI smoke passed.
• Clean package: 532 release files; npm package manifest: 531 files.

Downloads

• PatchWarden-Setup-1.6.1-x64.exe: Windows x64 installer.
• PatchWarden-Portable-1.6.1-x64.zip: Windows x64 portable build.
• PatchWarden-v1.6.1.zip and .tar.gz: clean Core source/runtime packages.
• Verify downloads with PatchWarden-SHA256SUMS.txt or the Desktop-specific checksum file.

The Windows installer is not code-signed. Windows SmartScreen may show a warning; verify the SHA-256 checksum before continuing.

PatchWarden v1.6.0

PatchWarden v1.6.0 adds safe local model management for Codex, OpenCode, Claude Code, Gemini CLI, GitHub Copilot CLI, Qwen Code, Kimi Code, and Aider; fixes Windows/UNC/POSIX CI path handling; and removes desktop page-switch flicker.

Assets:

• PatchWarden-Setup-1.6.0-x64.exe: Windows installer
• PatchWarden-Portable-1.6.0-x64.zip: portable build
• PatchWarden-Desktop-SHA256SUMS.txt: desktop checksums
• PatchWarden-v1.6.0.zip: clean source/runtime package

SHA256:

• Installer: 77d655545925ae283a0caed0fff12554debac15b54c5decf1ae8f3867703058e
• Portable: 071783f374c76a4ca6fba2e5a20144936a10556deb76a14eccf42d21df7332e1
• Clean package: 33b4b9bf1faa4db75679bce6f1c89f12860d7ce60e2d166d0f5d03e4bd25ac69

All Ubuntu, Windows, Secret scan, desktop installer, and CI gate checks passed. This release does not publish npm.