PatchWarden v1.6.1

PatchWarden v1.6.1

PatchWarden v1.6.1 hardens cross-process state mutation, Windows process execution, release packaging, and the Desktop experience.

Highlights

• Serializes Goal, Worktree, Direct, task-status, assessment, and bounded-log mutations with auditable file locks and atomic replacement.
• Tightens workspace and sensitive-path validation, child-process environments, executable resolution, and output redaction.
• Improves Control Center task navigation, diagnostics, logs, desktop guidance, and agent/model management.
• Makes clean release packaging deterministic on Windows Node.js 20 and rejects incomplete or forbidden package contents.
• Pins patched transitive dependencies; clean Core and Desktop installs report zero npm audit vulnerabilities.

Verification

• GitHub Actions: Node.js 18, Ubuntu Node.js 20, Windows Node.js 20, secret scan, Windows desktop installer, and final CI gate passed.
• Core security smoke: 141/141.
• Core unit tests: 855 passed, 3 skipped.
• Lifecycle: 22/22; HTTP MCP: 17/17; MCP smoke and Doctor passed.
• Desktop tests: 54/54; clean-source Desktop preflight and packaged UI smoke passed.
• Clean package: 532 release files; npm package manifest: 531 files.

Downloads

• PatchWarden-Setup-1.6.1-x64.exe: Windows x64 installer.
• PatchWarden-Portable-1.6.1-x64.zip: Windows x64 portable build.
• PatchWarden-v1.6.1.zip and .tar.gz: clean Core source/runtime packages.
• Verify downloads with PatchWarden-SHA256SUMS.txt or the Desktop-specific checksum file.

The Windows installer is not code-signed. Windows SmartScreen may show a warning; verify the SHA-256 checksum before continuing.