September 4, 2026
Rush CLI 0.2.44
Install
macOS / Linux
curl -fsSL https://cdn.getrush.ai/install.sh | bashWindows
irm https://cdn.getrush.ai/install.ps1 | iexHomebrew
brew install phnx-labs/tap/rushDebian / Ubuntu
sudo apt install rush-cliAlready installed?
rush upgradeFixed
- macOS: stop the "A keychain cannot be found to store
session-encryption-salt-v1" modal on every agent run (PHNX-3957). Same bug class as PHNX-3954 (shipped in 0.2.43), in the harness keychain writer (harness/secrets) that backs the memory-encryption salt (written on every agent-run finalize) and BYOK provider keys:security add-generic-passwordran with no keychain argument, so from a launchd/daemon or detached session the default-keychain resolution failed and macOS popped the interactive modal instead of erroring — flooding users on every finalize. The write now names the login keychain explicitly (stat-validated sosecuritycan't silently fall back to default resolution when the path is missing) and runs throughsecurity -iso the secret stays offps; values are base64-encoded so that command's non-POSIX tokenizer can't corrupt a BYOK key or salt containing a backslash/quote. If no login keychain exists it errors and callers degrade to their file/plaintext fallback rather than prompting.
Downloads
| Platform | Binary | SHA-256 |
|---|---|---|
| macOS · Apple Silicon | download | — |
| macOS · Intel | download | — |
| Linux · x64 | download | — |
| Linux · arm64 | download | — |
| Windows · x64 | download | — |
| Windows · arm64 | download | — |
Checksums are published for the current latest release. Verify older binaries against rush --version after install.