v0.2.1

What's Changed

• Fix WEB_PORT and let two stacks coexist (#368) (98b413c)

Container Image

docker pull ghcr.io/sleuth-io/hetchy:v0.2.1

Pin a self-hosted deployment to this release by setting HETCHY_VERSION=v0.2.1
in .env, then running docker compose up -d --pull always.

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• Document where agent skills come from (#366) (0e86264)
• Upgrade sx to v2.3.0 (#367) (f8e28ab)

Container Image

docker pull ghcr.io/sleuth-io/hetchy:v0.2.0

Pin a self-hosted deployment to this release by setting HETCHY_VERSION=v0.2.0
in .env, then running docker compose up -d --pull always.

Full Changelog: v0.1.1...v0.2.0

v0.1.1

What's Changed

• Open-source hardening: image labels, license, and security advisories (#365) (54ad104)

Container Image

docker pull ghcr.io/sleuth-io/hetchy:v0.1.1

Pin a self-hosted deployment to this release by setting HETCHY_VERSION=v0.1.1
in .env, then running docker compose up -d --pull always.

Full Changelog: v0.1.0...v0.1.1

v0.1.0

The first public release of Hetchy.

Hetchy runs coding agents in isolated sandboxes, streams their work, and opens
reviewable pull requests with attached evidence. This release makes it
self-hostable end to end: local auth, your own GitHub token, your own AI
credentials, and a bundled Postgres, all from a single Docker Compose file.

Quick Start

git clone https://github.com/sleuth-io/hetchy.git
cd hetchy
cp .env.example .env      # set SECRETS_ENCRYPTION_KEY and DAYTONA_API_KEY
make push-snapshot        # build the Daytona sandbox snapshot
docker compose up --build

Open http://localhost:8080, sign up, and create your first organization. To
run this release instead of building from the checkout, set
HETCHY_VERSION=v0.1.0 in .env and start with
docker compose up -d --pull always.

The README has the full
walkthrough.

What's In It

Self-hosting without a vendor account. HETCHY_AUTH_MODE=local gives you
username/password signup, multiple organizations, memberships and roles, invite
links, org switching, and password changes. WorkOS remains supported for hosted
deployments but is no longer required.

Bring your own credentials. Connect GitHub with a per-organization personal
access token — no GitHub App required. Hetchy validates the token, syncs the
repositories you can push to, and stores it encrypted alongside your Anthropic,
Claude Code, OpenAI, or Codex credentials. A GitHub App is still supported for
webhook-driven deployments.

Requests from where your team already works. The web UI, Slack, Linear, and
scheduled jobs all feed the same run pipeline. Scheduled jobs dispatch from the
main web process, so a self-hosted install needs no external cron or second
service.

Reviewable output. Runs commit to a branch, open a pull request, and
validate it before presenting the result. Screenshots and recordings are
uploaded as proof artifacts and linked in the PR body. Follow-up instructions
continue against the same branch and pull request instead of starting over.

Agent skills. Runs can install skills from the public SX vault, a fork of
it, or nothing at all.

Local artifact storage. Compose defaults to filesystem-backed proof
artifacts on a named volume. S3 remains available for instances that need it.

Requirements

• Docker and Docker Compose
• A Daytona account and API key — Daytona executes every agent run
• An AI provider credential (Anthropic, Claude Code, OpenAI, or Codex)
• A GitHub personal access token with push access to the repositories you want
  Hetchy to work on

Known Limitations

• Daytona is required. There is no local Docker executor yet. It is planned
  and is the largest outstanding piece of work.
• Filesystem artifacts need a public origin. Daytona sandboxes upload
  screenshots and recordings back to Hetchy, so HETCHY_PUBLIC_BASE_URL must be
  reachable from the sandbox. Private or local-only instances should use S3.
• You build your own sandbox snapshot. make push-snapshot builds and
  registers it against your Daytona account; there is no prebuilt public image.
• PAT mode has no GitHub webhooks. Hetchy refreshes pull request state on
  demand and polls stale open PRs instead.
• S3-compatible endpoints are not configurable. MinIO and similar services
  are not supported yet.
• Pre-1.0. Configuration and database schema may change between minor
  versions. Read the release notes before upgrading.

Billing is optional and disabled unless Stripe environment variables are set.

Feedback

Bug reports and pull requests are welcome — see
CONTRIBUTING.md.
Security issues should follow
SECURITY.md.

Hetchy is licensed under the Apache License 2.0.

What's Changed

Initial release.

Container Image

docker pull ghcr.io/sleuth-io/hetchy:v0.1.0

Pin a self-hosted deployment to this release by setting HETCHY_VERSION=v0.1.0
in .env, then running docker compose up -d --pull always.