Nautelle v0.18.0

This release finishes the 2026-10-25 core plan: speed, daily flow, fleet scale and team. The Board loads fast and updates live. Everything that waits on you sits on one Inbox page. The fleet queues cards at its worker limit and pauses at a hard budget instead of failing. Teams get email and Slack notifications, personal API tokens and account recovery without the command line.

Upgrade:

• Update every runner to 0.18.0. Card demo videos need it: their scenarios now sign in off camera, which the DemoFlow version bundled with runner 0.17 rejects.
• Thirteen database migrations run on deploy (listed in the release pull request).
• Email is optional: set SMTP_URL and SMTP_FROM in the API environment to send notification emails and to offer Forgot password on the sign-in page. Without them, the sign-in page tells people to ask an admin.

What changed

New

• An admin can give a locked-out person a one-time link to reset their password or two-factor sign-in, and with email set up people reset their own password from the sign-in page.
• Notifications can go out by email, at once or gathered into a digest, and to a Slack channel through an incoming webhook.
• Personal API tokens act with your rights or read-only, can be limited to some projects, expire and can be revoked at any time.
• An Inbox page gathers everything that waits on you across projects with its action at hand, and Away mode can allow similar requests for a whole session or project.
• At the worker limit cards wait and start in To Do order, a hard budget pauses running rounds until you resume them in one click, and a project can move to another runner.

Improved

• The Board loads fast, updates live, moves merged cards to Completed by itself, and the command palette finds cards and runs actions from the keyboard.
• Onboarding walks you to your first card with a repository picker, a quick card turns one line of text into a To Do card, and project settings can be searched.

Fixed

• Questions with several tabs reach you in full, and card demo videos open already signed in without leaving stray changes in the pull request.

Install

curl -fsSL https://raw.githubusercontent.com/AndreyBegma/Nautelle/main/deploy/compose/install.sh | sh -s -- --version 0.18.0

To upgrade an install, set NAUTELLE_VERSION=0.18.0 in nautelle/.env (or leave it at latest), then run docker compose pull && docker compose up -d in nautelle/. See the install guide and the upgrade policy.

To try it in one container (a demo database inside, not for production):

docker run -p 8000:8000 -v nautelle:/data docker.io/abegma/nautelle:0.18.0

Images

Platforms: linux/amd64, linux/arm64. Tags: 0.18.0, 0.18, 0, latest.

Image	Docker Hub	Digest
ghcr.io/andreybegma/nautelle-api:0.18.0	docker.io/abegma/nautelle-api:0.18.0	sha256:bdd428f800f84ab120b24821a00b78436c921cd8feff70b7a3f350bf9b20b4b3
ghcr.io/andreybegma/nautelle-web:0.18.0	docker.io/abegma/nautelle-web:0.18.0	sha256:e5ec56f95ff6e787c465fdc1df731d2ee77e2b1c73eb91657cd9303d5fec78c6
ghcr.io/andreybegma/nautelle:0.18.0	docker.io/abegma/nautelle:0.18.0	sha256:f6eef1c3b657713f68f1c54a0909b9810f78238f360f1cbb56fe5b1c5fa9336d

Docker Hub holds the same index, so the same digest. Each image is signed in both registries with the key in deploy/images/cosign.pub and carries an SBOM and build provenance:

curl -fsSLO https://raw.githubusercontent.com/AndreyBegma/Nautelle/v0.18.0/deploy/images/cosign.pub
cosign verify --key cosign.pub ghcr.io/andreybegma/nautelle-api@sha256:bdd428f800f84ab120b24821a00b78436c921cd8feff70b7a3f350bf9b20b4b3
docker buildx imagetools inspect ghcr.io/andreybegma/nautelle-api@sha256:bdd428f800f84ab120b24821a00b78436c921cd8feff70b7a3f350bf9b20b4b3 --format '{{ json .SBOM }}'

Runner

This release ships with runner 0.18.0: brew install andreybegma/tap/nautelle-runner or npm i -g nautelle-runner@0.18.0 (runner-v0.18.0).

Full release note, with every merged pull request: docs/releases/v0.18.0.md.

nautelle-runner 0.18.0

Install: brew install andreybegma/tap/nautelle-runner, or npm i -g nautelle-runner. Checksums: SHA256SUMS, signed by apps/runner/release-key.pub (SHA256SUMS.sig, Ed25519): openssl pkeyutl -verify -pubin -inkey release-key.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig, then sha256sum -c --ignore-missing SHA256SUMS. Release and upgrade notes: https://github.com/AndreyBegma/Nautelle/blob/runner-v0.18.0/apps/runner/CHANGELOG.md

Nautelle v0.17.1

A patch release with no product changes. The v0.17.0 release images were not all mirrored to Docker Hub: only the API image reached it. v0.17.1 publishes the api, web and all-in-one images on Docker Hub and ghcr.io, the Helm chart and the GitHub Release.

Upgrade: none beyond pulling 0.17.1.

What changed

Fixed

• Every image of the release, including the all-in-one abegma/nautelle, is now available on Docker Hub as well as on ghcr.io.

Install

curl -fsSL https://raw.githubusercontent.com/AndreyBegma/Nautelle/main/deploy/compose/install.sh | sh -s -- --version 0.17.1

To upgrade an install, set NAUTELLE_VERSION=0.17.1 in nautelle/.env (or leave it at latest), then run docker compose pull && docker compose up -d in nautelle/. See the install guide and the upgrade policy.

To try it in one container (a demo database inside, not for production):

docker run -p 8000:8000 -v nautelle:/data docker.io/abegma/nautelle:0.17.1

Images

Platforms: linux/amd64, linux/arm64. Tags: 0.17.1, 0.17, 0, latest.

Image	Docker Hub	Digest
ghcr.io/andreybegma/nautelle-api:0.17.1	docker.io/abegma/nautelle-api:0.17.1	sha256:9414b3e4afb293b257a800bf1c467a325afdfff3a8eafec18c05dfd33522d6f5
ghcr.io/andreybegma/nautelle-web:0.17.1	docker.io/abegma/nautelle-web:0.17.1	sha256:11ae95414f2f35771bf3e0a6f3bf3697c64d61bea533f30d60c911e4e8c8c95b
ghcr.io/andreybegma/nautelle:0.17.1	docker.io/abegma/nautelle:0.17.1	sha256:345d0cb238e4c3e25b3556b2ec207e06c353f3d918f462a6630bb67d126fcf6e

Docker Hub holds the same index, so the same digest. Each image is signed in both registries with the key in deploy/images/cosign.pub and carries an SBOM and build provenance:

curl -fsSLO https://raw.githubusercontent.com/AndreyBegma/Nautelle/v0.17.1/deploy/images/cosign.pub
cosign verify --key cosign.pub ghcr.io/andreybegma/nautelle-api@sha256:9414b3e4afb293b257a800bf1c467a325afdfff3a8eafec18c05dfd33522d6f5
docker buildx imagetools inspect ghcr.io/andreybegma/nautelle-api@sha256:9414b3e4afb293b257a800bf1c467a325afdfff3a8eafec18c05dfd33522d6f5 --format '{{ json .SBOM }}'

Runner

This release ships with runner 0.17.0: brew install andreybegma/tap/nautelle-runner or npm i -g nautelle-runner@0.17.0 (runner-v0.17.0).

Full release note, with every merged pull request: docs/releases/v0.17.1.md.

Nautelle v0.16.0

Nautelle now installs like a mature self-hosted product. One command pulls the published images and starts it on localhost, behind a Cloudflare tunnel or on your own domain with HTTPS. The keys are generated on first boot, and you create the first admin in the browser. A Helm chart and a documentation site come with it.

A finished card that changes the UI can now carry a demo video. The runner records it with DemoFlow, and you watch it on the card or in Telegram before you merge. Projects can also run review steps before a card counts as Finished.

Upgrade:

• Update every runner to 0.16.0 (nautelle-runner update, or npm i -g nautelle-runner@0.16.0). Demo videos need Node.js 22 or later on the runner's machine.
• To record demos in a project, turn on Settings → Automation → Demo videos and add a demoflow.config.json to the repository.
• Back up the API's /data volume together with the database. It now holds the generated keys.

What changed

New

• Nautelle installs with one command from published images, on localhost, behind a Cloudflare tunnel or on your own domain with HTTPS, and you create the first admin in the browser.
• A finished card that changes the UI can come with a demo video recorded on the runner, which you watch on the card or in Telegram before you merge.
• A project can run review steps, a peer review and its own review skills, on every green pull request before a card counts as Finished.
• Your own Claude Code session can also group cards into stacks, set their dependencies and drive their designs.

Improved

• The Overview shows live agent sessions, projects with their live state, recent activity and a seven-day spend trend.
• The card page is the full detail view, with each round’s pull request, commits, checks and run facts.
• Designs open on a device canvas with a tab per frame, for the devices you choose.

Fixed

• A card that finishes before its checks turn green is merged once they do.

Install

curl -fsSL https://raw.githubusercontent.com/AndreyBegma/Nautelle/main/deploy/compose/install.sh | sh -s -- --version 0.16.0

To upgrade an install, set NAUTELLE_VERSION=0.16.0 in nautelle/.env (or leave it at latest), then run docker compose pull && docker compose up -d in nautelle/. See the install guide and the upgrade policy.

Images

Platforms: linux/amd64, linux/arm64. Tags: 0.16.0, 0.16, 0, latest.

Image	Digest
ghcr.io/andreybegma/nautelle-api:0.16.0	sha256:8f9e449b8004068cce73bd5f08544e4ebce4de50b8e82fba7f03a7dd924f426e
ghcr.io/andreybegma/nautelle-web:0.16.0	sha256:9af98aacea32e5ef05e06ba1043219da302630358575a8a818216941e06c9bf5

Each image is signed with the key in deploy/images/cosign.pub and carries an SBOM and build provenance:

curl -fsSLO https://raw.githubusercontent.com/AndreyBegma/Nautelle/v0.16.0/deploy/images/cosign.pub
cosign verify --key cosign.pub ghcr.io/andreybegma/nautelle-api@sha256:8f9e449b8004068cce73bd5f08544e4ebce4de50b8e82fba7f03a7dd924f426e
docker buildx imagetools inspect ghcr.io/andreybegma/nautelle-api@sha256:8f9e449b8004068cce73bd5f08544e4ebce4de50b8e82fba7f03a7dd924f426e --format '{{ json .SBOM }}'

Runner

This release ships with runner 0.16.0: brew install andreybegma/tap/nautelle-runner or npm i -g nautelle-runner@0.16.0 (runner-v0.16.0).

Full release note, with every merged pull request: docs/releases/v0.16.0.md.

nautelle-runner 0.17.0

Install: brew install andreybegma/tap/nautelle-runner, or npm i -g nautelle-runner. Checksums: SHA256SUMS, signed by apps/runner/release-key.pub (SHA256SUMS.sig, Ed25519): openssl pkeyutl -verify -pubin -inkey release-key.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig, then sha256sum -c --ignore-missing SHA256SUMS. Release and upgrade notes: https://github.com/AndreyBegma/Nautelle/blob/runner-v0.17.0/apps/runner/CHANGELOG.md

nautelle-runner 0.16.0

Install: brew install andreybegma/tap/nautelle-runner, or npm i -g nautelle-runner. Checksums: SHA256SUMS, signed by apps/runner/release-key.pub (SHA256SUMS.sig, Ed25519): openssl pkeyutl -verify -pubin -inkey release-key.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig, then sha256sum -c --ignore-missing SHA256SUMS. Release and upgrade notes: https://github.com/AndreyBegma/Nautelle/blob/runner-v0.16.0/apps/runner/CHANGELOG.md

Nautelle v0.15.0

Nautelle v0.15.0

Released 2026-10-23 · Runner: 0.15.0, released with this version (runner-v0.15.0, cut from the same main commit) ·
Changelog entry: packages/shared/src/changelog.ts

Summary

A person's own Claude Code session can now drive the Board through the nautelle plugin, designs follow editable frame templates, sign-in can require a second factor, and the token-saving techniques are measured per successful card. This release needs runner 0.15.0 for the Board tools; on each machine, upgrade the runner and run nautelle-runner setup claude once (the local telemetry receiver now needs a token), and update the nautelle plugin to 0.6.0.

What changed

New

• Your own Claude Code session can work the Board: it lists, creates, runs and moves cards, answers their questions, takes one to do itself, and asks you to accept a finished card.
• A design follows a frame template for a page, a component or a flow, which a project can edit and each card, plan task and stack can choose.
• You can turn on two-factor sign-in with an authenticator app and recovery codes.
• Usage shows what each token-saving technique saves per successful card, and cards can try a technique side by side with a control group.
• A card’s model and effort follow the kind of work it is, and a round on Sonnet can hand itself over to Opus once.

Improved

• The card detail opens with a compact header and tabs, and a card on the Board shows only what you act on.
• The app and the runner tell you when a newer runner is available.

Fixed

• A card that hits a usage limit resumes by itself when the limit resets.

Merged pull requests

PR	Title	Classified as
#736	fix(ci): wait for npm before deprecating the agentdock-runner shim	excluded (CI, deploy, dependencies)
#737	C-175: Security [Info]: Bound numeric route params and refuse leading dashes in branch DTOs	excluded (security hardening, no visible change)
#739	C-304: Keep the token-saver badge inside the card header on narrow columns	improved (card detail and card face)
#742	docs: specs for #740 and #741 (runner bugs)	excluded (documentation)
#744	C-305: Restore the author contacts in the account menu and add the email	excluded (small account-menu polish, below the line)
#753	docs: token economy specs (#745–#752) and ADR-0074–0076	excluded (documentation)
#755	fix(runner): one quota detector for every limit banner, and resume a session when its limit resets	fixed (resume after a usage limit)
#756	fix(runner): command results survive a reconnect, a timeout aborts, a repeat runs once	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#757	feat(token-economy): per-run cache metrics, per-card A/B flags and cost per successful card	new (token economy report)
#758	feat(design): the UI profile remembers approved screens, comment decisions and new snippets	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#759	feat(runner): accept card technique flags, advertise tokenEconomy	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#760	feat(web): token economy report, test arm share and a tokens-first saved badge	new (token economy report)
#761	docs: technique keys are kebab-case (#749, #750, epic, ADR-0074/0076)	excluded (documentation)
#762	feat(token-saver): attribute /cs-eco rows to their session and its card (#748)	new (token economy report)
#763	feat(runner): technique flags for the runner savers, tool-hook wiring, terse register behind its flag (#747)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#764	feat(web): show the priced manual-session saving on Usage (#748)	new (token economy report)
#765	feat(runner): send the /cs-eco session id with its filter.stats batch	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#766	feat(runner): 400-line read guard with a file outline (#747)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#768	feat(runner): tool-hook cuts large MCP, Grep and WebFetch results (#747)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#769	feat(runner): put the 1h prompt-cache TTL behind technique cache-ttl-1h (#749)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#770	feat(runner): a long card session starts fresh from its handoff by size (#749)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#771	feat(board): contract for model and effort by card class (#750)	new (model and effort by card class)
#772	feat(board): escalate_card, the effort that takes effect, and fresh starts on a changed model (#750)	new (model and effort by card class)
#773	feat(board): model and effort by card class, session lock, escalation to Opus (#750)	new (model and effort by card class)
#774	feat(token-saver): launch prefix core — schema, contracts, API prefix module, card launch prefix (#751)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#775	feat(token-saver): prefix section, overlay review, selection matrix (web) (#751)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#777	feat(runner): measure the launch prefix, apply card prefix overlays, serve rules.compress and prefix.propose (#751)	excluded (token saver and design-memory internals behind technique flags; the visible part is the Usage report)
#779	C-315: Declutter the Board card header: keep only selection, label, Bug and menu	improved (card detail and card face)
#780	C-139: Security [Low]: Harden path schemas and the in-repo docs-source check	excluded (security hardening, no visible change)
#781	C-140: Security [Low]: Make auth cookies Secure by default and tolerate malformed cookies	excluded (security hardening, no visible change)
#782	C-141: Security [Low]: Stop registration revealing existing emails	excluded (security hardening; the visible prompts are small)
#783	C-142: Security [Low]: Validate TRUST_PROXY at boot and document it per topology	excluded (security hardening, no visible change)
#784	C-143: Security [Low]: Re-check the approval row's status inside the decision lock	excluded (security hardening, no visible change)
#785	C-144: Security [Low]: Fence untrusted text in SessionStart context and MCP results	excluded (security hardening, no visible change)
#786	C-145: Security [Low]: Dedupe GitHub deliveries on the body hash, and scope the App's token	excluded (security hardening, no visible change)
#787	C-146: Security [Low]: Forward schedule.* events to outbound webhooks only when the API emitted them	excluded (security hardening, no visible change)
#788	C-147: Security [Low]: Confirm a Telegram link in the app before it becomes active	excluded (security hardening; the visible prompts are small)
#789	C-148: Security [Low]: Enforce a branch policy for runner pushes and keep CI, deploy and plugin changes out of auto-merge	excluded (security hardening; the visible prompts are small)
#790	C-149: Security [Low]: Hide notifications and mutes of projects the user can no longer see	excluded (security hardening, no visible change)
#791	C-327: feat(runner): check ...

Nautelle v0.14.0

AgentDock v0.14.0

Released 2026-10-20 · Runner: 0.13.0 (unchanged in this window) ·
Changelog entry: packages/shared/src/changelog.ts

Summary

The first release with a version. AgentDock now has a release process: a
changelog shown on a What's new page, with a dot in the account menu until a
person has read it. The version starts at 0.14.0, independent of the runner's
0.13.0. The rest of the release is the S-7 redesign: a project's navigation is
cut to five entries with the Board first, and most pages move to one calmer
layout that also fits a tablet and a phone.

This release has no earlier tag, so its window is everything merged into
develop since the last promotion to main
(#682, 2026-10-19), plus
the release process itself.

What changed

New

• AgentDock has versioned releases, and What’s new in the account menu shows what each one brought.

Improved

• A project has five places in its navigation, with the Board first and everything else one tap away.
• The project home, Fleet, Activity, settings, Planner, Schedules, Skills and Token saver pages share one calmer layout, and so do Overview, Projects and Work.
• History is now part of a project’s Activity, so everything that happened is in one place.
• Tablets get a layout of their own, and on a phone New work, the design viewer and the terminal close from one back bar at the bottom of the screen.

Fixed

• Design mockups with many frames are no longer refused for their size, and a frame whose script cannot run is turned away with a reason.

Merged pull requests

PR	Title	Classified as
#684	New work is a full-screen layer with the phone back bar below lg	improved
#683	Leave the design viewer through the phone back bar	improved
#685	Close the terminal sheet from the phone back bar	improved
#689	C-290: Pass the failure reason into a retried planner turn	excluded (no visible change)
#688	C-289: Lift the design size cap to 160 KiB per frame for multi-frame mockups	fixed
#693	C-292: Upgrading the runner to 0.13 silently stops watching every project	held for the next runner release
#695	C-281: Add tablet breakpoint and calm page primitives to glass-ui	improved
#692	C-291: Reject a design frame whose inline script cannot run	fixed
#706	C-282: Cut project navigation to five entries with the Board first	improved
#701	C-283: Redesign project home and Fleet in the calm layout	improved
#705	C-286: Regroup project settings into four sections with responsive layout	improved
#708	C-287: Redesign Planner, Schedules, Skills and Token saver project pages	improved
#703	C-285: Merge History into project Activity and redesign it	improved
#712	C-288: Redesign Workspace Overview, Projects and Work pages	improved
C-294	Versioned releases with generated release notes and a What's new page	new

Runner

No runner release shipped in this window. The current runner is
runner-v0.13.0
(2026-10-19). The policy notice of #693 needs the runner side that waits under
"Unreleased" in apps/runner/CHANGELOG.md,
so the product changelog names it with the runner release that ships it.

nautelle-runner 0.15.0

Install: brew install andreybegma/tap/nautelle-runner, or npm i -g nautelle-runner. Checksums: SHA256SUMS, signed by apps/runner/release-key.pub (SHA256SUMS.sig, Ed25519): openssl pkeyutl -verify -pubin -inkey release-key.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig, then sha256sum -c --ignore-missing SHA256SUMS. Release and upgrade notes: https://github.com/AndreyBegma/Nautelle/blob/runner-v0.15.0/apps/runner/CHANGELOG.md

nautelle-runner 0.14.0

Install: brew install andreybegma/tap/nautelle-runner, or npm i -g nautelle-runner. Checksums: SHA256SUMS, signed by apps/runner/release-key.pub (SHA256SUMS.sig, Ed25519): openssl pkeyutl -verify -pubin -inkey release-key.pub -rawin -in SHA256SUMS -sigfile SHA256SUMS.sig, then sha256sum -c --ignore-missing SHA256SUMS. Release and upgrade notes: https://github.com/AndreyBegma/Nautelle/blob/runner-v0.14.0/apps/runner/CHANGELOG.md