Skip to content
DevAgentRadarDevAgentRadar
Sign in
Proposals/Spawn named Crush subagents and pin Yolo with pe
proposaldeveloperP4High impactCCrush

Spawn named Crush subagents and pin Yolo with permissions safe/block

Crush v0.100.0 runs named background subagents you can follow up, stop, or move to another model; adds Sysadmin mode (ctrl+p or shift+tab); lets you mark Yolo commands with permissions safe/block/unblock; and handles SSH passwords and GPG pinentry inside Crush.

Why this loop

v0.100.0 changes parallel work and shell trust in Crush. Subagents now run as a named background team in the transcript, sidebar, and header; address one by name for mid-run follow-ups, stop it, or move it to a different model. Split implementation, tests, and review across named workers instead of one serial session. Yolo still blocks dangerous commands, but the list is yours: permissions safe marks commands auto-approved, permissions block forbids them, permissions unblock restores restricted ones—e.g. permissions safe "go build" "cargo check", permissions block kubectl terraform, permissions unblock curl. Put those in the project so daily builds are unattended and infra CLIs stay gated. Sysadmin mode (ctrl+p palette, or shift+tab through modes) can run any system command; leave it off unless you need unrestricted shell. Use Crush SSH password handling and pinentry so GPG/SSH secrets never land in the transcript. Ignore the 28 omitted changelog lines; adopt these surfaces first.

Proposed actions

  1. In this Crush project run: permissions safe "go build" "cargo check" then permissions block kubectl terraform then permissions unblock curl
  2. Crush: spawn a named background subagent team for this change (implementation, tests, review). Watch them in the transcript, sidebar, and header. Refer to each by name for mid-run follow-ups; stop any that drift; move a stuck subagent to a different model.
  3. Keep Sysadmin mode off. Only when Crush must run unrestricted system commands, open the command palette with ctrl+p and choose Sysadmin, or cycle modes with shift+tab, then switch back immediately. Yolo still blocks dangerous commands unless you marked them safe.
  4. Authenticate SSH and GPG inside Crush using its SSH password handling and pinentry. Do not paste SSH passwords, Yubikey PINs, or GPG passphrases into the agent transcript.

Agent prompt

Paste into your agent or query via MCP (get_agent_prompt) — free, no extra AI cost

AGENTS.md / CLAUDE.md / GEMINI.md rule update

DevAgentRadar → Repo Harness Rule Patch

Goal: update our repository's permanent harness instructions based on this release.

Update the file that tool actually reads. Do not dump everything into one file.

  • Claude Code → CLAUDE.md plus .claude/ (skills, hooks, settings, agents, commands). It does not read AGENTS.md natively; start CLAUDE.md with @AGENTS.md.
  • Codex, Copilot, Cursor, Factory Droid, Grok Build, Roo Code, Goose, OpenCode, Amp, Zed, Aider → AGENTS.md.
  • Gemini CLI / Antigravity → GEMINI.md. AGENTS.md only if context.fileName is set.
  • Cursor glob-scoped rules → .cursor/rules/*.mdc (plain .md is ignored), not a second constitution.
  • Codex MCP → .codex/config.toml, not .mcp.json.
  • Copilot extra instructions → .github/copilot-instructions.md; custom agents → .github/agents/.
  • Windsurf → .windsurf/rules (do not assume AGENTS.md).
  • Cline → .clinerules.
  • Procedures → a skill (SKILL.md). Enforcement the model must not skip → a hook. Isolated roles → subagents.
  • Do not fork the same rule into three tool files.

Context

Assistant: Crush Proposal: Spawn named Crush subagents and pin Yolo with permissions safe/block Summary: Crush v0.100.0 runs named background subagents you can follow up, stop, or move to another model; adds Sysadmin mode (ctrl+p or shift+tab); lets you mark Yolo commands with permissions safe/block/unblock; and handles SSH passwords and GPG pinentry inside Crush. Primary source: https://github.com/charmbracelet/crush/releases/tag/v0.100.0

Why it matters

v0.100.0 changes parallel work and shell trust in Crush. Subagents now run as a named background team in the transcript, sidebar, and header; address one by name for mid-run follow-ups, stop it, or move it to a different model. Split implementation, tests, and review across named workers instead of one serial session. Yolo still blocks dangerous commands, but the list is yours: permissions safe marks commands auto-approved, permissions block forbids them, permissions unblock restores restricted ones—e.g. permissions safe "go build" "cargo check", permissions block kubectl terraform, permissions unblock curl. Put those in the project so daily builds are unattended and infra CLIs stay gated. Sysadmin mode (ctrl+p palette, or shift+tab through modes) can run any system command; leave it off unless you need unrestricted shell. Use Crush SSH password handling and pinentry so GPG/SSH secrets never land in the transcript. Ignore the 28 omitted changelog lines; adopt these surfaces first.

Suggested actions

  1. In this Crush project run: permissions safe "go build" "cargo check" then permissions block kubectl terraform then permissions unblock curl
  2. Crush: spawn a named background subagent team for this change (implementation, tests, review). Watch them in the transcript, sidebar, and header. Refer to each by name for mid-run follow-ups; stop any that drift; move a stuck subagent to a different model.
  3. Keep Sysadmin mode off. Only when Crush must run unrestricted system commands, open the command palette with ctrl+p and choose Sysadmin, or cycle modes with shift+tab, then switch back immediately. Yolo still blocks dangerous commands unless you marked them safe.
  4. Authenticate SSH and GPG inside Crush using its SSH password handling and pinentry. Do not paste SSH passwords, Yubikey PINs, or GPG passphrases into the agent transcript.

Config surfaces this release may change

  • permission rules — check your repo before applying

After you finish

Do not report this as applied to DevAgentRadar. You cannot write the visitor's loop.

Tell the human: open https://devagentradar.com/proposals/crush-v0-100-0-spawn-named-crush-subagents-and-pin-yolo-with-permissions and mark Applied, Skipped, or Failed. Proposal id: 0b21e14f-510a-4b43-9a12-06466abd8798

Instructions:

  1. Read the existing context files and settings for the tools in this repo.
  2. Draft an explicit Git diff. Update ONLY agent harness rules or tool configuration.
  3. Call out deprecated flags, obsolete habits, or changed permission boundaries.
  4. Do not touch application logic.

Start with the proposed diff and say which layer and which tool's file it belongs in.

agentmcpmodelpricingsecurityRelease source ↗

Your loop

This browser · no sign-in · not shared as “you”

After you run the prompt

Only you can mark this. Agents cannot write your loop.

Your decision stays on this device. A public tally appears after a few votes.

Originating release signal

CCrushv0.100.0Nov 5, 2026

v0.100.0

This is a big one! Crush can now run a team of subagents, permissions are much more flexible, and you can now do GPG and SSH auth right inside Crush! Read on for more. · At last, subagents. · Crush can now spawn a little team of friendly subagents in the background, as well as check on them, send them mid-run follow-ups, stop them, or move them to a different model. · You can watch them work right in the transcript, sidebar and header. · Every subagent gets its own name, too, so you always know who's doing what. · +99 more changes
Verified excerpt — the source's own words

Subagents, Sysadmin Mode, and PGP/SSH Prompts

This is a big one! Crush can now run a team of subagents, permissions are much more flexible, and you can now do GPG and SSH auth right inside Crush! Read on for more.

👩🏼‍🐰‍👩🏽 Subagents

At last, subagents. Crush can now spawn a little team of friendly subagents in the background, as well as check on them, send them mid-run follow-ups, stop them, or move them to a different model.

<p><img width="600" alt="image" src="https://github.com/user-attachments/assets/a8f4f437-dd9a-46bb-ab31-65a14b84c07a" /></p>

You can watch them work right in the transcript, sidebar and header. Every subagent gets its own name, too, so you always know who's doing what. And, if you refer to them by name, Crush will know which of ’em you’re talking about!

🚨 Sysadmin Mode

Ever wish Crush could DROP SCHEMA public CASCADE;? Now it can, with Sysadmin mode! In fact, in Sysadmin mode, Crush can run any command on your system. Be careful.

<p><img width="600" alt="image" src="https://github.com/user-attachments/assets/c8ccbd1b-aba2-48cc-bef7-b15045b41241" /><p>

Excerpt ends here — this release continues at the source ↗.

Primary source ↗