Releases

What changed in Haven's client packages, and whether you need to update. The same data is machine-readable in /.well-known/haven.json, under packages.

Do I need to update?

Only when Haven says so.

If a Haven response carries client_update with required: true, your client is below the minimum and payments are refused until you update it. Without required, updating is recommended but nothing stops working.

@haven_ai/connect

0.10.0-alpha.0
Minimum accepted
None — every version accepted
Recommended
None

Run this, then any repair line it prints.

Update command
bash
npx -y @haven_ai/connect@alpha --doctor

0.10.0-alpha.0 · 2026-10-14

After a --replace whose install completed, the connector tells Haven which agents the run retired on this machine, using the NEW agent's key. Only the retired directories are reported — never the coexisting agents superseded_agent_ids lists. (+5 more in the changelog)

0.9.0-alpha.0 · 2026-10-09

A rebind or --replace now warns that an open session keeps acting as the previous agent. The connector re-points the MCP server name on disk, but a client that is already running keeps the entries it loaded at start-up, and Connect revokes nothing in Haven. (+7 more in the changelog)

@haven_ai/signer

0.10.0-alpha.0
Minimum accepted
0.6.0-alpha.0
Recommended
None

Installed by the connector: run this, then any repair line it prints.

Update command
bash
npx -y @haven_ai/connect@alpha --doctor

0.10.0-alpha.0 · 2026-10-14

The EIP-3009 merchant header the signer builds now carries an EIP-3009 nonce derived from the Haven payment id inside the verified binding — keccak256(utf8("haven-x402-payment-nonce:") || utf8(payment_id)), the shared deriveX402PaymentNonce from @haven_ai/sdk/edge — instead of the x402 library's random draw.

0.9.0-alpha.0 · 2026-10-09

The initialize instructions state the signer's identity and the several-pairs rule. (+5 more in the changelog)

@haven_ai/mcp

0.10.0-alpha.0
Minimum accepted
None — every version accepted
Recommended
None

Installed by the connector: run this, then any repair line it prints.

Update command
bash
npx -y @haven_ai/connect@alpha --doctor

0.10.0-alpha.0 · 2026-10-14

haven_get_agent and haven_get_allowances warn a replaced agent. When a Connect --replace retired this agent on its machine, both outputs carry supersededBy with a warning to restart the session and have the user remove the old agent; otherwise supersededBy is null. (+2 more in the changelog)

0.9.0-alpha.0 · 2026-10-09

The local x402 tools report the merchant's EIP-3009 settlement hash. (+3 more in the changelog)

@haven_ai/cli

0.10.0-alpha.0
Minimum accepted
None — every version accepted
Recommended
None
Update command
bash
npx -y @haven_ai/cli@alpha

0.10.0-alpha.0 · 2026-10-14

Agent runbook text: the revoke hash is read from haven budget show <agentId> --hashes, and a connector upgrade_command may name the pair with --name <slug>. Text only; no update needed.

0.9.0-alpha.0 · 2026-10-09

agents pause, resume and revoke say what they do not do. The help said pause would "Stop the agent spending" and revoke would "Permanently revoke an agent"; all three are backend-only status changes, and the budget stays live on-chain. (+2 more in the changelog)

@haven_ai/sdk

0.10.0-alpha.0
Minimum accepted
None — every version accepted
Recommended
None
Update command
bash
npm install @haven_ai/sdk@alpha

0.10.0-alpha.0 · 2026-10-14

EIP-3009 merchant headers minted by the SDK now carry an EIP-3009 nonce derived from the Haven payment id — keccak256(utf8("haven-x402-payment-nonce:") || utf8(payment_id)), the shared deriveX402PaymentNonce on the edge surface — instead of the x402 library's random draw. (+6 more in the changelog)

0.9.0-alpha.0 · 2026-10-09

The SDK reports the merchant's EIP-3009 settlement hash it already holds. (+11 more in the changelog)