Reported News
Crush v0.100.0 adds subagents, Sysadmin mode and in-app PGP/SSH prompts
On November 5, 2026 Charmbracelet released Crush v0.100.0. The release notes say Crush can now "run a team of subagents," add Sysadmin mode that can run any system command, make the dangerous-command list configurable, and handle GPG and SSH passwords inside the agent UI.
- Changes reported
- 6
- listed below, each from a source we read
- We tested
- Not tested yet
- reported from sources; we did not run it ourselves
- Gaps we flag
- 3
- things we could not verify
- Sources
- 1
- 1 primary, linked below
What changed
| # | What the source says | Status |
|---|---|---|
| 01 | Subagents: Crush can spawn detached background subagents, check on them, send mid-run follow-ups, stop them, or move a subagent to a different model; each subagent gets a real name used in the transcript, sidebar and header. | Reported |
| 02 | Sysadmin mode (command palette Ctrl+P, or Shift+Tab mode cycle) lets Crush run any command on the system, including previously blocked destructive ones. | Reported |
| 03 | Configurable safe/block lists for yolo: permissions safe, permissions block and permissions unblock mark commands as always-safe, always-blocked or unblocked (examples: safe "go build", block kubectl/terraform, unblock curl). | Reported |
| 04 | Custom SSH password handling and custom pinentry so GPG/YubiKey and SSH prompts can be answered inside Crush without leaving the agent session. | Reported |
| 05 | UI hardening around dangerous permission prompts (harder to approve by reflex) and calmer subagent status in the transcript, header and quit dialog. | Reported |
| 06 | Versioned as v0.100.0 on GitHub with signed checksums (cosign/sigstore) across Linux, macOS, Windows and other package formats. | Reported |
reported by the sourcemeasured or run by usnot verified
Primary source: GitHub: charmbracelet/crush v0.100.0. We are the fast, independent index; the vendor’s own page is the source of record for this release.
In the source’s words
“Crush can now run a team of subagents, permissions are much more flexible, and you can now do GPG and SSH auth right inside Crush!”
“This is one of our biggest releases, and we're so grateful for your support!”
What we have not verified
- We did not install Crush v0.100.0 or exercise subagents, Sysadmin mode or PGP/SSH pinentry ourselves.
- Permission-mode edge cases and shell-evasion fixes listed in the changelog were not re-tested here.
- Package artifact checksums were not verified with cosign on this box.
This brief is Reported: written from the sources below, not from running the release ourselves.
Sources
- GitHub: charmbracelet/crush v0.100.0primary source · fetched 2026-11-05
Related
Spotted an error? See our corrections policy or email the address on the contact page. Markdown version for agents: /news/crush-0-100-0-subagents-sysadmin.md
Want these briefs in your Google Top Stories? Add Agentic Weekly as a preferred source on Google.
Newsletter
The Weekly Verdict. Free, every Monday.
A free email every Monday: the week's few big AI releases, then 5 short use cases for the new models, each with a prompt you can paste.
Free. Double opt-in. One click to unsubscribe.