Rush 0.1.0-alpha.48 — Encrypted tokens, and a session that stays put

Connected-account tokens used to be kept as readable text in a file on disk. They're now encrypted in the OS keychain and handled in one guarded place in the app's main process. You don't have to do anything — existing connections keep working.

The most-felt change in this build is quiet: Rush now holds onto your session the way you'd expect. Logging in no longer wipes the session you already had, a network blip no longer bounces you to a re-authentication screen, and the login loop some builds could fall into is gone. When a session really has expired, Rush says so plainly and offers to reconnect — instead of looking logged in while silently failing in the background.

Opening a past session now shows the whole thing, start to finish — the complete back-and-forth that the detail view used to only partly decrypt. Sub-agent steps show up inline in the timeline now too, and so do the images and diagrams a run produces, so you can follow exactly what happened without hunting through tabs.

Rush now hashes the downloaded update and refuses it if the hash doesn't match the signed manifest — not just the signature, but the exact bytes it covers. Updates still install quietly on your next quit.

Remote debugging is off in stable builds. Agent-defined UI is limited to the tools that agent is explicitly allowed to use. Crash reports no longer include your email. PDF export stays inside your Downloads folder. Disconnecting Google purges its tokens.

Open an agent's card and use + Add integration to switch on any provider Rush supports — including ones the agent didn't ship with. Your choice sticks per agent across restarts. To be clear about what this does today: it enables and remembers the integration. Having the agent automatically reach for those tools as it works comes in a later build.

When a connected account needs to be reconnected, Rush now shows it plainly — the card says Reconnect (not a misleading "Connect"), hides stale account details until it's back, and surfaces an inline error when a Google or Microsoft 365 reconnect doesn't take, instead of failing silently.

When you dispatch a cloud run, you can now point it at a Linear issue and its details come along as context — the description and the surrounding notes, without you copying them into the prompt by hand. The run starts already knowing what it's for.

The home screen now updates live as sessions run and sorts by what you touched most recently, so the thing you were just working on is where you expect it. Each agent's page shows today's newest runs with an accurate count, and recently-run sessions no longer hide themselves when you open an agent.

Rush now extracts native macOS icons and ships a crisper app icon, so the home grid and the dock look right at every size. The navigation rail was tidied up too — Terminal and Browser keep their place, and duplicate nav icons are gone.

Your Wallet now owns its card vault natively — the cards you save live and stay inside Rush.

Report images render in a clean frame instead of floating loose, and a click opens any image in a lightbox to see it up close.

Pre-release builds are opt-in. Under Settings → Updates there's a switch for early builds — leave it off to stay on stable, turn it on when you want the newest thing first.

• Download as PDF now saves the file when you choose it.
• One-time schedules work in timezones west of UTC.
• The Linux build boots again.
• The agent list no longer goes blank after a transient failure loading it — it recovers instead of leaving an empty screen.
• Artifacts produced partway through a run now surface on their own, without waiting for the run to finish.
• Image search returns real results again, and those results are saved with the session so they show up in the Artifacts tab and the timeline.