Haps v0.1.14

Haps 0.1.14 asks you to confirm the publisher before installing a package by its bare name.

The prompt shows the package version, full publisher key, social relationship, and attestations. Enter cancels by default, before any audit, build, or installation starts. Explicit publisher/package installs and updates to an installed package do not add this prompt. Selecting a publisher from the existing chooser needs no second confirmation.

Automation change: non-interactive and JSON installs now require an explicit publisher even when only one matches. A bare name returns publisher_confirmation_required with the candidate release details. The --allow-unaudited flag does not skip publisher confirmation.

Native bundles are provided for Linux x86-64 and ARM64, macOS Intel and Apple silicon, and Windows x64, with checksum-pinned Hashtree helpers. SHA256SUMS covers every archive.

Install or update: https://haps.hashtree.cc/#install

Haps v0.1.13

Haps now requires an audit of the exact release by default. When an audit is missing, the interactive installer offers to review pinned source with your installed agent, rebuild it, and compare the complete payload before installing. Omarchy’s supported default agent is offered first.

• Use haps install PACKAGE --allow-unaudited to bypass the audit threshold for one operation. The flag also works with update and rollback; it preserves the threshold for later operations and does not create an audit.
• Prepare and finish a manual source review with haps audit prepare and haps audit finish. Choose whether to keep signed audits private or publish them, and configure your preferred agent and model.
• Preserve signature, payload integrity, social trust, and warning checks when bypassing audits.
• Fix Windows command stack usage and require public relay delivery when publishing release announcements.

Verified with the native test suites on Linux, macOS, and Windows; the audit flow was also exercised in Arch Docker with actual Omarchy launchers and a real Codex review, matching rebuild, installation, and successful program run. This was not a full graphical Omarchy desktop test. Audits describe the checks performed and are not a guarantee of safety.

The five native bundles include checksum-pinned htree and git-remote-htree helpers. SHA256SUMS covers every archive.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.12

Haps 0.1.12

• Install and update show immediate status, elapsed waits, and verified download progress.
• Linux menu names use ordinary spaces; reinstalling repairs older Haps launchers while preserving user edits.
• The installer detects existing Haps copies and safely updates script-managed installations.
• Release imports reuse verified Hashtree assets and publish signed Haps packages; managed command links support self-updates.
• Windows managed command launchers handle paths containing spaces.
• Optional local source scans can gate builds and publish signed scan evidence. Binary installs are unaffected.

Includes checksum-pinned htree and git-remote-htree helpers. All five binary bundles are installed and smoke-tested on their target platforms.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.11

Haps 0.1.11 fixes fresh Iris package discovery and adds native Nostr event catalogs.

• Fresh installs use a signed immutable bootstrap index. Upgrades replace the retired automatic preset while preserving custom sources and publisher pins.
• Publishers can maintain their own catalogs with haps add and haps catalog publish, including other publishers’ signed packages. Package heads and ordinary Hashtree Nostr indexes work alongside relay discovery.
• Search and bare-name installs require a publisher or release voucher from your social graph, excluding muted and overmuted people. Explicit npub/package installs warn outside that graph; trusted warnings still block installation.
• Publication accepts the current Hashtree helper output format. Concurrent cache writes use the shared filesystem fix.

Bundles for macOS, Linux, and Windows include checksum-pinned Hashtree helpers. The current Iris example packages cover macOS Apple silicon and Linux x86-64.

Install or update: https://haps.hashtree.cc/#install

Cargo users: cargo install haps --locked --force, then haps install iris-chat.

Built from 7219702d55e3c31a6cde4e1895762481f445ea48. All three source-platform checks passed, including fresh public Iris Chat, Iris Drive, and Nostr VPN installs on macOS and Linux.

Haps v0.1.10

Haps bundles for macOS, Linux, and Windows, including checksum-pinned htree and git-remote-htree helpers.

Built from commit e060660 and tested on each target platform. SHA256SUMS covers all binary archives.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.9

Haps bundles for macOS, Linux, and Windows, including checksum-pinned htree and git-remote-htree helpers.

Built from commit 5e4bfbd and tested on each target platform. SHA256SUMS covers all binary archives.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.7

Prebuilt Haps binaries for macOS, Linux, and Windows.

Built from commit 28aa1e2 and tested on each target platform. SHA256SUMS covers all binary archives.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.6

Prebuilt Haps binaries for macOS, Linux, and Windows.

Built from commit 76de182 and tested on each target platform. SHA256SUMS covers all binary archives.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.5

Prebuilt Haps binaries for macOS, Linux, and Windows.

Built from commit cc646ad and tested on each target platform. SHA256SUMS covers all binary archives.

Installation: https://haps.hashtree.cc/#install

Haps v0.1.4

Haps 0.1.4 adds an arrow-key publisher chooser, agent-friendly JSON output, and a shortcut for signing claims about specific releases.

• Choose among socially ranked publishers with arrow keys and Enter; Escape cancels. Selection still enforces trust policies.
• Use --non-interactive to suppress prompts, or --json for structured search, info, install, update, list, and attestation output. Ambiguous package names return ranked candidates for explicit selection.
• Sign a claim with haps attest publisher/package --version VERSION --note "What you checked". It binds the exact signed release for one platform; --target selects another platform. Exported events are saved locally, without automatic relay publishing.
• See trusted attesters and their signed notes during installation. Revoked claims and claims about another release do not count.

Built from cd8f98c. Source tests passed on macOS, Linux, and Windows; terminal chooser tests passed on macOS and Linux. All five native archives passed signed-package installation and execution tests on their target platforms. SHA256SUMS covers the binary archives.

Installation and examples: https://haps.hashtree.cc/