patchwarden 0.6.1 → 0.6.4

package/docs/release-v0.6.4.md

@@ -0,0 +1,45 @@
+# PatchWarden v0.6.4 Release Notes
+
+**Release Date**: 2026-06-26
+
+## Overview
+
+PatchWarden v0.6.4 is a desktop experience release. It keeps the existing CLI and script surface, but makes the normal Windows workflow feel like a lightweight local application: start one desktop entry, control Core/Direct from the tray or Web dashboard, and shut everything down from one stop command.
+
+## Desktop Entry
+
+- Added `PatchWarden-Desktop.cmd` as the recommended daily entry point.
+- The desktop entry starts the tray in a hidden PowerShell host and ensures the local Control Center is available.
+- It does not automatically open a browser window. Use **Open Dashboard** from the tray or `PatchWarden-Control.cmd` when you want the full Web console.
+- `PatchWarden-Control-Tray.cmd --foreground` remains available for tray debugging.
+
+## Tray Improvements
+
+- Added single-instance protection for the tray process.
+- Replaced the generic system icon path with a small PatchWarden-styled shield icon drawn through WinForms/System.Drawing.
+- Kept the tray as a lightweight switch layer: Open Dashboard, Status, Start All, Stop All, Restart All, Open Logs, and Quit Tray.
+- Added clearer balloon/status feedback for startup and lifecycle actions.
+- Clarified action semantics: **Stop All** stops Core/Direct and leaves tray/dashboard available; **Quit Tray** exits only the tray; `Stop-PatchWarden.cmd` performs full shutdown.
+
+## Background Lifecycle
+
+- Control Center now invokes `manage-patchwarden.ps1` with `-Background` and `windowsHide: true` for lifecycle API calls.
+- The manager starts Core/Direct supervisors hidden for desktop/Web flows, while preserving visible launcher windows for explicit CLI/debug usage.
+- Added `-NoTunnelWebUi` to `start-patchwarden-tunnel.ps1` so background starts do not open tunnel-client Web UI tabs.
+
+## Verification
+
+- TypeScript build: PASS
+- Control smoke: PASS
+- Control Center smoke: PASS (23 passed, 0 failed)
+- Package manifest check: PASS
+- PowerShell control script parse check: PASS
+- Manual desktop-flow evidence: desktop entry starts only tray + Control Center; Start/Restart uses hidden supervisors; Stop-PatchWarden closes Core/Direct, Control Center, and tray.
+
+## Migration
+
+No breaking changes. Existing CLI commands and compatibility launchers remain available. For daily Windows use, prefer:
+
+```powershell
+.\PatchWarden-Desktop.cmd
+```

package/examples/openai-tunnel/README.md

@@ -15,7 +15,7 @@ or local private paths.
 
 1. Configure `patchwarden.config.json`.
 2. Run `npm.cmd run build`.
-3. Use `scripts/patchwarden-mcp-stdio.cmd` as the tunnel MCP command.
+3. Use `scripts/mcp/patchwarden-mcp-stdio.cmd` as the tunnel MCP command.
 4. Start `npm.cmd run watch` in a separate terminal.
 5. Start `tunnel-client run` or use `PatchWarden.cmd start core`.
 6. Create a ChatGPT Connector using the tunnel channel.
@@ -25,10 +25,10 @@ or local private paths.
 
 For ChatGPT Direct editing, set `enableDirectProfile: true` in the trusted
 local config and run `PatchWarden.cmd start direct`. It uses
-`scripts/patchwarden-mcp-direct.cmd`, the separate `patchwarden-direct` Tunnel
+`scripts/mcp/patchwarden-mcp-direct.cmd`, the separate `patchwarden-direct` Tunnel
 Client profile, no Watcher, and an isolated `runtime-direct` status directory.
-Use a separate Direct Connector/Tunnel ID so the fixed 16-tool Core catalog and
-the 9-tool Direct catalog never overwrite each other's cached schema.
+Use a separate Direct Connector/Tunnel ID so the fixed 17-tool Core catalog and
+the 10-tool Direct catalog never overwrite each other's cached schema.
 
 The Windows launcher prompts for the runtime API key once and stores only a
 Windows DPAPI-encrypted value under `%APPDATA%\patchwarden`. Use
@@ -38,7 +38,7 @@ Before the launcher starts the tunnel it performs a real MCP stdio handshake
 and requires the exact `chatgpt_core` manifest. Run
 `PatchWarden.cmd health` to see the version, profile, tool names, schema
 hash, process sources, and any mixed-version warnings. The check is read-only.
-The v0.4.1 core manifest contains 16 tools. A different count or schema hash
+The v0.6.1 core manifest contains 17 tools. A different count or schema hash
 requires a Connector refresh and validation from a new ChatGPT conversation.
 
 ## Architecture

package/examples/openai-tunnel/tunnel-client.example.yaml

@@ -12,7 +12,7 @@
 #   --sample sample_mcp_stdio_local \
 #   --profile patchwarden \
 #   --tunnel-id tunnel_xxx \
-#   --mcp-command "C:/path/to/patchwarden/scripts/patchwarden-mcp-stdio.cmd"
+#   --mcp-command "C:/path/to/patchwarden/scripts/mcp/patchwarden-mcp-stdio.cmd"
 
 # Direct mode uses a separate profile and command:
 #
@@ -20,12 +20,12 @@
 #   --sample sample_mcp_stdio_local \
 #   --profile patchwarden-direct \
 #   --tunnel-id tunnel_xxx \
-#   --mcp-command "C:/path/to/patchwarden/scripts/patchwarden-mcp-direct.cmd"
+#   --mcp-command "C:/path/to/patchwarden/scripts/mcp/patchwarden-mcp-direct.cmd"
 
 mcp:
   commands:
     - channel: main
-      command: "C:/path/to/patchwarden/scripts/patchwarden-mcp-stdio.cmd"
+      command: "C:/path/to/patchwarden/scripts/mcp/patchwarden-mcp-stdio.cmd"
 
 # Mode B: HTTP
 #

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwarden",
-  "version": "0.6.1",
+  "version": "0.6.4",
   "description": "A secure local MCP bridge: clients save plans, local agents execute tasks, and results are returned through workspace-scoped files.",
   "type": "module",
   "main": "dist/index.js",
@@ -17,9 +17,16 @@
     "src/",
     "examples/",
     "scripts/",
-    "!scripts/kill-patchwarden.ps1",
+    "!scripts/control/kill-patchwarden.ps1",
     "!scripts/launchers/Kill-PatchWarden.cmd",
+    "!.local/",
+    "ui/",
     "PatchWarden.cmd",
+    "PatchWarden-Control.cmd",
+    "PatchWarden-Control-Tray.cmd",
+    "PatchWarden-Desktop.cmd",
+    "Restart-PatchWarden-Control.cmd",
+    "Stop-PatchWarden.cmd",
     "README.md",
     "README.en.md",
     "LICENSE",
@@ -29,25 +36,26 @@
     "build": "node ./node_modules/typescript/bin/tsc",
     "start": "node dist/index.js",
     "start:http": "node dist/httpServer.js",
+    "start:control": "node dist/controlCenter.js",
     "dev": "npm run build && node dist/index.js",
     "runner": "node dist/runner/cli.js",
     "watch": "node dist/runner/watch.js",
     "doctor": "node dist/doctor.js",
     "doctor:ci": "node dist/doctor.js --allow-default-config",
-    "test:unit": "node scripts/unit-tests.js",
-    "test": "node dist/smoke-test.js && node scripts/unit-tests.js && node scripts/lifecycle-smoke.js && node scripts/doctor-smoke.js && node scripts/tunnel-supervisor-smoke.js && node scripts/watcher-supervisor-smoke.js && node scripts/control-smoke.js && node scripts/mcp-manifest-check.js && node scripts/brand-check.js",
-    "test:lifecycle": "npm run build && node scripts/lifecycle-smoke.js",
-    "test:doctor": "npm run build && node scripts/doctor-smoke.js",
-    "test:tunnel-supervisor": "npm run build && node scripts/tunnel-supervisor-smoke.js",
-    "test:watcher-supervisor": "npm run build && node scripts/watcher-supervisor-smoke.js",
-    "check:tool-manifest": "npm run build && node scripts/mcp-manifest-check.js",
-    "check:direct-tool-manifest": "npm run build && node scripts/mcp-manifest-check.js --profile chatgpt_direct",
-    "check:brand": "node scripts/brand-check.js",
-    "test:mcp": "npm run build && node scripts/mcp-smoke.js",
-    "test:http-mcp": "npm run build && node scripts/http-mcp-smoke.js",
+    "test:unit": "node scripts/checks/unit-tests.js",
+    "test": "node dist/smoke-test.js && node scripts/checks/unit-tests.js && node scripts/checks/lifecycle-smoke.js && node scripts/checks/doctor-smoke.js && node scripts/checks/tunnel-supervisor-smoke.js && node scripts/checks/watcher-supervisor-smoke.js && node scripts/checks/control-smoke.js && node scripts/checks/mcp-manifest-check.js && node scripts/checks/brand-check.js && node scripts/checks/control-center-smoke.js",
+    "test:lifecycle": "npm run build && node scripts/checks/lifecycle-smoke.js",
+    "test:doctor": "npm run build && node scripts/checks/doctor-smoke.js",
+    "test:tunnel-supervisor": "npm run build && node scripts/checks/tunnel-supervisor-smoke.js",
+    "test:watcher-supervisor": "npm run build && node scripts/checks/watcher-supervisor-smoke.js",
+    "check:tool-manifest": "npm run build && node scripts/checks/mcp-manifest-check.js",
+    "check:direct-tool-manifest": "npm run build && node scripts/checks/mcp-manifest-check.js --profile chatgpt_direct",
+    "check:brand": "node scripts/checks/brand-check.js",
+    "test:mcp": "npm run build && node scripts/checks/mcp-smoke.js",
+    "test:http-mcp": "npm run build && node scripts/checks/http-mcp-smoke.js",
     "pretest": "npm run build",
-    "pack:clean": "npm run build && node scripts/pack-clean.js",
-    "verify:package": "npm run build && node scripts/package-manifest-check.js"
+    "pack:clean": "npm run build && node scripts/release/pack-clean.js",
+    "verify:package": "npm run build && node scripts/checks/package-manifest-check.js"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0"

package/scripts/README.md

@@ -0,0 +1,47 @@
+# PatchWarden Scripts
+
+This directory keeps implementation scripts out of the root folder. Normal
+desktop use should start from the root entrypoints:
+
+```powershell
+.\PatchWarden-Desktop.cmd
+.\PatchWarden-Control.cmd
+.\PatchWarden-Control-Tray.cmd --foreground
+.\Stop-PatchWarden.cmd
+.\PatchWarden.cmd status all
+```
+
+## Control Scripts
+
+- `control/manage-patchwarden.ps1`: backing implementation for `PatchWarden.cmd`.
+- `control/start-control-center.ps1`: starts the local Web dashboard.
+- `control/restart-control-center.ps1`: restarts the local Web dashboard.
+- `control/control-center-tray.ps1`: Windows tray quick controls.
+- `control/stop-patchwarden.ps1`: one-click shutdown for Core/Direct,
+  Control Center, and tray.
+- `control/start-patchwarden-tunnel.ps1`: starts Core or Direct tunnel supervision.
+- `control/restart-patchwarden.ps1`: compatibility restart helper.
+
+## MCP Entrypoints
+
+- `mcp/patchwarden-mcp-stdio.cmd`: Core stdio MCP launcher.
+- `mcp/patchwarden-mcp-direct.cmd`: Direct stdio MCP launcher.
+
+## Smoke Tests And Checks
+
+- `checks/*-smoke.js`: targeted smoke tests.
+- `checks/unit-tests.js`: Node unit test entry.
+- `checks/mcp-manifest-check.js`: validates MCP manifest expectations.
+- `brand-check.js`: checks public brand strings.
+- `checks/package-manifest-check.js`: verifies package contents.
+
+## Release Helpers
+
+- `release/pack-clean.js`: rebuilds `release/`, `patchwarden-release.tar.gz`, and the
+  versioned `PatchWarden-v*.zip` artifact.
+
+## Compatibility Launchers
+
+Compatibility `.cmd` files live under `scripts/launchers/`. User-private local
+launchers belong under `.local/` and must stay out of Git and release packages.
+

package/scripts/{brand-check.js → checks/brand-check.js}

@@ -12,8 +12,8 @@ const allowedLegacyFiles = new Set([
   "docs/release-v0.3.0.md",
   "docs/release-v0.4.0.md",
   "docs/release-v0.6.0.md",
-  "scripts/brand-check.js",
-  "scripts/pack-clean.js",
+  "scripts/checks/brand-check.js",
+  "scripts/release/pack-clean.js",
 ]);
 const legacyPattern = /safe-bifrost|Safe-Bifrost|SAFE_BIFROST|SafeBifrost|safe_bifrost/;