- Fixed the unstoppable "zombie" desktop session (#550, #551, thanks sugerpersion — the screen recording made this findable). A Custom-command desktop whose command died at startup kept a green "running" row that Stop couldn't clear, while the actual failure vanished without a word. Four layered causes, all fixed: the dead command no longer leaves the VNC server holding the session open; the container now tears down every process when the session script ends (previously a leaked dbus-daemon kept it alive invisibly — one leaked per desktop start, forever); the orphan cleanup on Stop had never actually matched container-hosted processes; and a command that dies moments after the port check now reports as a startup failure carrying its own error output instead of silently disappearing.
- Stop is now unconditional: whatever happens during cleanup, the session entry always clears — force-killing Haven is never the way out again.
- Agents can now set the Custom (X11) desktop command via MCP (
custom_desktop_command), which is how these fixes were verified end-to-end on a real device.
🧟 A session that can't die is worse than one that can't start. Every one of the four bugs was invisible alone; stacked, they made a corpse with a green light. The fix that matters most is the boring one: when the thing you started ends — however it ends — say so, and let go of everything it held.
Which APK?
haven-<version>-<abi>-release.apk — the full app, and what F-Droid
carries. If in doubt, take this one.
haven-<version>-<abi>-terminal-release.apk — the same app with the
desktop and media parts left out, for people who only use Haven for SSH,
terminals, files and storage. Less than half the size on arm64. It drops
RDP and SPICE remote desktop, the native Wayland desktop, and ffmpeg — so
no media conversion, and no video previews or streaming in the file
browser. VNC is kept, so a Linux desktop running inside Haven's guest
still works.
Both are signed with the same key and carry the same version number, so
you can install either over the other without losing connections, keys or
your Linux guest. The shared version number does mean an updater will not
offer to move you between them — switching is a deliberate download.
<abi> is your device's CPU: arm64 for essentially every modern phone,
armv7 for older 32-bit devices, x64 for emulators.
Full Changelog: v5.87.28...v5.87.29