Rye supervision workbench
Install Rye
Install the Rye CLI and verify that the local daemon, proxy, and command-line tools are available.
Install command
Use the install script on a developer workstation:
Or install with Homebrew:
Platforms and installer options
The install script supports macOS and Linux on x86-64 and ARM64. Linux downloads use static musl builds. Windows is not supported by this installer. It installs both rye (the CLI) and ryed (the daemon), verifies download checksums, and sets up shell completions and PATH entries.
Pass installer arguments after sh -s --:
| Option | Behavior |
|---|---|
stable | Install the stable release; this is the default. |
latest | Install the release selected by the latest channel. |
A published version, such as 0.10.0 | Install that specific release. |
--prefix PATH | Install binaries into PATH/bin. |
--system | Install binaries into /usr/local/bin. |
--no-wrap-agents | Skip automatic Claude Code and Codex CLI shim installation. |
To pin a release and skip automatic agent wrapping:
curl -fsSL https://barn.rye.ai/install.sh | sh -s -- 0.10.0 --no-wrap-agents
For a predictable user-local location:
curl -fsSL https://barn.rye.ai/install.sh | sh -s -- --prefix "$HOME/.local"
For shared binaries:
curl -fsSL https://barn.rye.ai/install.sh | sh -s -- --system
Run the installer as your regular user. It uses sudo to copy binaries when needed; authentication, shims, and daemon services remain per user. Follow the installer's PATH instructions or open a new terminal before running rye. Scripts and CI should set PATH explicitly or use the full binary path.
The installer creates Claude Code and Codex CLI shims when those commands are already installed. See Wrap agents for PATH setup and opting out. It does not persist HTTP proxy variables in your shell startup file.
Daemon services
On Linux, the installer creates and enables a systemd user service when systemctl is available. It attempts to enable lingering so the service can continue after logout. On macOS, it creates a LaunchAgent that starts at login. When a service manager is unavailable, it starts the daemon directly.
Inspect or restart the daemon with:
rye daemon status
rye daemon logs
rye daemon restart
Starting the daemon is separate from enabling the proxy and installing CA trust. Complete the authentication and supervision steps below.
Verify the install
Check that the CLI is available:
rye --help
Check daemon, proxy, device, and workspace state:
rye status
rye status should show the local daemon, proxy state, device state, and workspace status. Before authentication, some fields may be empty or unauthenticated.
Authenticate
Run:
rye auth login
The login flow links the local device to a Rye user and workspace. That identity is used in audit records and policy decisions.
Start supervision
After authentication, start the local proxy and install the CA certificate used for HTTPS inspection:
rye up --install-ca --intercept-patterns openai.com,anthropic.com,claude.com,chatgpt.com,cursor.com,windsurf.com
Use rye doctor after startup to verify proxy, CA trust, DNS, and daemon state.
Update or stop
Use your package manager to update Rye if you installed through Homebrew. If you used the install script, rerun the installer for your selected channel or version and then verify with:
rye status
rye doctor
To stop supervision:
rye down