Skip to content

StepWind 1.0.1

Choose a tag to compare

@github-actions github-actions released this 25 Jul 08:09

StepWind 1.0.1

Recommended for everyone on 1.0.0. Two fixes worth shipping on their own, plus the installer wearing the product's own face.

Fixed

  • stepwind_list_protected_folders failed on every call, for every AI agent. The tool asks the service for settings, and the MCP gateway's command allow-list did not include that command, so every invocation returned "not permitted to call 'GetSettings'" — one of twelve advertised tools was dead on arrival. The reason it shipped is fixed too: the CI smoke test only checked that tools were advertised, never that any could be called. It now calls every tool it finds, so a future tool wired to a blocked command fails the build instead of you.
  • Settings leaked other accounts' protected folder paths. The settings response returned every protected folder on the machine, while the equivalent status response correctly filtered to the caller. On a shared PC that told any local user — or their AI agent — where another user's protected folders live. Both filter identically now.
  • The uninstaller never asked what to do with your saved history, though the docs said it did; it silently kept everything. It now asks — keep it, so a reinstall picks it back up, or erase it — and positively identifies a real history store before deleting anything, including a store you relocated. Silent and scripted uninstalls always keep it.

Changed

  • The installer looks like the app it installs: StepWind's own dark surface and title bar, brand artwork, and a progress bar in the product's indigo→cyan accent. One screen instead of four, and no license click-through (MIT grants its rights without acceptance; LICENSE still ships in the install folder). The upgrade engine is unchanged — it still stops the service, backs up your install, health-checks the new one, and rolls back if it won't start.
  • No install-location prompt, deliberately. StepWind runs as a SYSTEM service, and a service binary in a folder standard users can write to is a local privilege-escalation path, so it installs under Program Files. Administrators can still redirect with /DIR=, and the installer then locks that folder down to SYSTEM/Administrators full control.
  • The release toolchain is pinned and verified (fixed Inno Setup version, checked against a SHA-256 pin and its Authenticode publisher before use).

Your version history is untouched by this update, and existing protected folders keep working exactly as before.

Update

If StepWind is already installed with automatic updates on, it will offer 1.0.1 itself — the service downloads and verifies it, then asks you to confirm the install. Or download below and run it over your current install.

Install

Download StepWind-1.0.1-setup.exe (x64) or StepWind-1.0.1-arm64-setup.exe (Windows on ARM) and run it. Windows 10 (1809+) or 11.

"Windows protected your PC"? Expected for a new, unsigned installer — click More info → Run anyway. Verify first:

(Get-FileHash .\StepWind-1.0.1-setup.exe -Algorithm SHA256).Hash

Compare against SHA256SUMS.txt below. Full trust story: SECURITY.md. Enterprise: enterprise/README.md.

Website: https://stepwind.app