Rush 0.1.0-alpha.47 — Tokens off disk, into the keychain
Your connected accounts used to be stored as readable text on disk. Now every one of those tokens lives encrypted in the system keychain, handled in one guarded place. A handful of other security fixes ride along — and then: enable any integration on any agent, and attach a Linear task to a cloud run.
- Connected-account tokens are now encrypted in the system keychain, not stored as plaintext on disk
- Updates only install if their contents match the signature, not just the manifest
- Remote debugging is off in stable builds
- Agent-defined UI can only call the tools it's allowed
- Turn on any integration for any agent, remembered per agent
- Attach a Linear task to a cloud run so its details come along as context
Your account tokens are now encrypted
Connected-account tokens used to be kept as readable text in a file on disk. They're now encrypted in the OS keychain and handled in one guarded place in the app's main process. You don't have to do anything — existing connections keep working.
Updates check the whole build, not just the manifest
Rush now hashes the downloaded update and refuses it if the hash doesn't match the signed manifest — not just the signature, but the exact bytes it covers. Updates still install quietly on your next quit.
A few more security fixes
Remote debugging is off in stable builds. Agent-defined UI is limited to the tools that agent is explicitly allowed to use. Crash reports no longer include your email. PDF export stays inside your Downloads folder. Disconnecting Google purges its tokens.
Turn on any integration for any agent
Open an agent's card and use + Add integration to switch on any provider Rush supports — including ones the agent didn't ship with. Your choice sticks per agent across restarts. To be clear about what this does today: it enables and remembers the integration. Having the agent automatically reach for those tools as it works comes in a later build.
Bring a Linear task into a cloud run
When you dispatch a cloud run, you can now point it at a Linear issue and its details come along as context — the description and the surrounding notes, without you copying them into the prompt by hand. The run starts already knowing what it's for.
Full session timelines
Opening a past session now shows the whole conversation. The session detail view had been decrypting only part of the timeline; it now renders the complete back-and-forth, start to finish.
Opening a past session shows the full conversation, decrypted end to end.
Sharper icons on macOS
Rush now extracts native macOS icons and ships a crisper app icon, so the home grid and the dock look right at every size.
The home grid on macOS, with sharper agent and app icons.
A few more things
Your Wallet now owns its card vault natively — the cards you save live and stay inside Rush.
Report images render in a clean frame instead of floating loose, and a click opens any image in a lightbox to see it up close.
Pre-release builds are opt-in. Under Settings → Updates there's a switch for early builds — leave it off to stay on stable, turn it on when you want the newest thing first.
Fixes
- Download as PDF now saves the file when you choose it.
- One-time schedules work in timezones west of UTC.
- The Linux build boots again.
- The agent list no longer goes blank after a transient failure loading it — it recovers instead of leaving an empty screen.
- Artifacts produced partway through a run now surface on their own, without waiting for the run to finish.
Platforms