What's new in Cenvero Fleet

Release notes for Cenvero Fleet, the open-source, self-hosted server fleet manager, newest first. The latest stable release is v2.6.0, released on 7 October 2026. Every release is signed; upgrade with fleet update apply, brew upgrade cenvero-fleet or winget upgrade --id Cenvero.Fleet. The complete, line-by-line history lives in the changelog.

v2.6.0

Latest stable

Agents now keep themselves on the controller's version without anyone running a command, agent installs move far less over SSH, and Fleet is in the Windows Package Manager catalog.

Highlights

  • Automatic agent sync, on by default: any fleet command whose last agent sync started more than an hour ago runs fleet sync-agent in the background — the command never waits for it — and a running daemon (fleet start) syncs hourly and updates an agent as soon as it connects with an older version. Only agents known to be older than the controller are touched, and runs never overlap. fleet sync-agent auto shows the last run and the next; fleet sync-agent auto off turns it off. Docs
  • Lighter agent installs: the server keeps the release archive it downloads and verifies it with the controller checking the signature, instead of sending the archive back and the binary up again — about 12 MB less over SSH per Linux server.
  • Windows Package Manager: install with winget install --id Cenvero.Fleet --exact --source winget; WinGet then owns upgrades and removal of the controller.
  • An agent install's download steps no longer stall until the five-minute deadline on a busy server, and fleet sync-agent rejects a stray server name instead of syncing every server (use --server).

v2.5.0

Safe in-place file editing for people and AI agents, a large performance pass, rebuilt terminal and web interfaces, and a round of safety, security and correctness fixes found by an end-to-end review of every command.

Highlights

  • Edit files in place: fleet file view and fleet file edit change a file on the server with an exact-text replace, an insert or new content — no download and re-upload. The file keeps its owner, mode, ACLs and SELinux label, is replaced atomically (a dropped connection never leaves half a file), is only changed if it is still the version you read, and can be undone. A file that can't be replaced by a new copy, such as one bind-mounted into a container, can be written in place with --in-place. Fleet saves the current version first, so an interrupted write can always be undone. Built to be safe for AI agents. Docs
  • Much faster at scale: fleet-wide exec, metrics polling, health, top and agent updates run servers concurrently; CLI calls reuse a running daemon's warm connection (about 550 → 90 ms per command at 50 ms latency); transfers and fleet sync are several times faster over latency.
  • Terminal dashboard rebuilt as a live operations console with sparklines, filters and actions; the terminal file manager gains a transfer queue, previews, bookmarks and go-to.
  • Redesigned web UI with light and dark themes, a phone layout, a command palette, previews, streaming downloads and a read-only Fleet overview.
  • fleet start / fleet stop run and stop the daemon in the background, and fleet status shows whether it is running.
  • fleet approve now shows the staged request, asks for confirmation and runs it with its original options.
  • --secret values reach the whole remote command through its environment; the audit log records commands, approvals and token and secret changes.
  • The daemon's local control socket is mutually authenticated, and paths containing .. are refused everywhere before any file operation.

v2.4.3

Restores SSH-first Linux agent onboarding while keeping fail-closed release verification, and fixes onboarding, port, version-display and updater regressions from the v2.4 line.

Highlights

  • Auto-install opens the host-key-pinned SSH connection first, detects the target with uname, and has the server fetch only its own agent archive and signature — verified on the controller before anything is installed.
  • Onboarding refuses duplicate names early, keeps configured login and agent ports, and records clear installing / failed / managed states.
  • Retrying, cancellation-aware updater and manifest downloads that never leak signed URL parameters.
  • Agent versions and server states read the same across list, inventory, dashboard and notifications.

v2.3.0

Shell completion overhaul, configurable job-log retention and session reconnect grace, and a safe re-pin path when a server's host key changes.

Highlights

  • Host-key re-pin prompt when a reinstalled server presents a new key (defaults to No; --accept-new-host-key for automation).
  • Server-name tab completion everywhere, installed as a cached completion file with fleet autocomplete install.
  • fleet config set for job-log-retention (default 7 days) and session-grace (default 10 minutes).

v2.2

A new automation and access-control surface alongside a full-codebase security audit and four re-audit rounds.

Highlights

  • Automation: exec --json/--timeout/--retry, tags and inventory, journal, top, cp, notifications, cron, drift detection, playbooks, jobs, doctor, health, SSH tunnels, approvals, idempotency keys and a dead-man's switch.
  • RBAC scoped tokens enforced controller-side and fail-closed, and named secrets encrypted at rest (AES-256-GCM) with output redaction.
  • Signed, anti-rollback updates bound to the version in the signature, a hash-chained audit log, and pinned SSH algorithms.
  • v2.2.1: on Homebrew installs, agent updates run through fleet sync-agent and Homebrew owns the controller binary.

v2.1.0

A major file-manager release across the CLI, the terminal UI and the web UI.

Highlights

  • A built-in editor with syntax highlighting in both file managers.
  • Compress and extract zip, tar.gz, tar.bz2, tar.xz and tar with fleet file compress / extract.
  • Permissions, checksums, duplicate, new file, filters, sortable columns — and up to six panes in the web UI.
  • fleet file move between servers and parallel directory transfers.

v2.0

Major release

Fleet becomes a file-moving, AI-driven control plane — all over the same authenticated, host-key-pinned SSH channel.

Highlights

  • Secure file manager on three surfaces: the fleet file CLI, the dual-pane fleet files terminal UI and the localhost fleet file ui — chunked, parallel, SHA-256-checksummed and resumable.
  • Live directory sync with fleet sync, choosing the writer side with --from.
  • Agentic control: fleet context, fleet ai and fleet skill claude|codex|agents.
  • Server-to-server copies, mouse support in the terminal UIs, and an agent --file-root sandbox.

Upgrade in seconds.

The controller verifies every release before it replaces itself, and rolls the same version out to your agents.

fleet update apply            # self-managed installs
brew upgrade cenvero-fleet    # Homebrew, then: fleet sync-agent