June 10, 2026

Rush CLI 0.2.14

Name: Rush
Author: Phoenix Horizon, Inc.

Install

macOS / Linux

curl -fsSL https://cdn.getrush.ai/install.sh | bash

Windows

irm https://cdn.getrush.ai/install.ps1 | iex

Homebrew

brew install phnx-labs/tap/rush

Debian / Ubuntu

sudo apt install rush-cli

Already installed?

rush upgrade

rush upgrade self-update: manifest fetch, SHA256-verified download, atomic binary swap (Windows move-aside dance, macOS quarantine clear), plus a 24-hour-cached update banner on rush --version.
Plugin system: rush plugin {install,add,search,uninstall} with marketplace registries, github:owner/repo / npm:pkg sources, and central storage at ~/.rush/{skills,plugins,mcp}/.
Capability system: rush capability {validate,install,list,uninstall}, rush skill {install,list,uninstall}, rush connection {...}.
rush agents {info,search,outdated} with catalog parity (covers, gallery, FAQ, use cases).
Remote MCP connectors over SSE and Streamable HTTP with OAuth bearer injection; SSE buffer raised to 1 MB for large tool listings.
Lark/Feishu OAuth accounts and rush http --oauth lark.
rush cloud {computers,agents,warmup} subcommands; durable logs for terminal cloud runs.
Hourly schedule pattern for daemon-scheduled agents.
--log-level global flag (trace/debug/info/warn/error) for the structured logger; --verbose now also lowers the log level to debug.
Windows arm64 builds and a Windows smoke-test bundle.

Internal debug traces ([finalize], [sync]) no longer print to user terminals on every run — they are structured log events, hidden by default and visible with --verbose or --log-level debug.
Daemon log at ~/.rush/logs/daemon.log now rotates (50 MB, 7 backups) instead of growing without bound.
MCP tool permissions moved from user.yaml to consent.yaml with automatic migration; Files & Folders consent enforced on the bridged MCP permission flow.
Browser-open logic unified across login, connect, and all interactive pickers (one platform-aware implementation).

Agent memory (memory.db) was unusable on Linux and Windows release binaries: cross-compiled builds disable cgo, and the cgo-only sqlite driver errors at runtime. Non-cgo builds now use the pure-Go driver; reactive ui_apps change notifications remain available on native (cgo) builds.
Cross-compilation for Linux/Windows was broken by cgo-only sqlite constants introduced with reactive ui_apps; release builds compile again and CI now vets all release platforms.
Daemon crash before any output now sends an error reply to the channel instead of leaving the user in silence.
Scheduler clock-skew races: 60s firing-window tolerance applied to hourly, daily, weekly, and monthly schedules; scheduled executions always run non-interactive; only completed assistant messages route to channels.
Keychain service name unified across CLI and app (DEKs written by one are visible to the other).
install.sh daemon restart actually restarts via launchctl kickstart.
Plugin skip reasons surfaced; metadata errors fail closed.

Production macOS binaries must be signed and notarized (release gate).
WebSocket auth header injection fixed; channels fail closed; RUSH_API_URL override stripped from production builds.

Checksums are published for the current latest release. Verify older binaries against rush --version after install.