Crush vs Prime Agent

Crush

Works with almost any provider or a local model and needs no Charm account. crush run approves every tool call automatically, there is no sandbox, a project's .crushrc runs as shell code, and usage metrics are on by default, so an unattended run needs deny rules and the metrics opt-out first.

Prime Agent

Budgets for turns, tokens and time bound an autonomous run, and sessions survive a closed terminal through a supervising daemon. Model-written Python and shell commands run with the user's rights, with no approval step and no sandbox, and the Rust build on the main branch ships only as nightly betas.

Crush

1. Add permissions deny rules or a PreToolUse hook before crush run. It approves every permission request in its session
2. Read .crushrc, crushrc and crush.json in a cloned repository before running Crush there. They execute as shell code at startup
3. Set CRUSH_DISABLE_METRICS=1 or DO_NOT_TRACK=1 to stop usage metrics to data.charm.land
4. Wrap crush run in your own timeout. It has no turn, time or cost limit flag
5. Configure a provider by environment variable or crushrc first. With none, crush run exits with an error asking for interactive setup

Prime Agent

1. Run it in a disposable clone, container or VM. It executes model-written Python and shell commands with the user's rights and asks nothing first
2. Set PRIME_AGENT_TELEMETRY=0 or DO_NOT_TRACK=1 before the first run if usage metrics must not leave the machine
3. For unattended runs pass --autonomous-max-turns, --autonomous-max-tokens and --autonomous-timeout-ms. Reaching a limit does not mean the task succeeded
4. Headless use is -p with --mode json per the argument parser. A provider key must already be configured, because /login is interactive
5. The -t/--tools, -nt/--no-tools and -nbt/--no-builtin-tools flags were removed and now fail as unknown options