Recon v0.2.9

Recon 0.2.9 brings the new app icon, Markdown text evidence, a Knowledge base for resources and one consistent look across lists, panels and menus.

Available for macOS Apple Silicon. Windows and Linux 0.2.9 packages are pending. Use Recon 0.2.5 for those platforms; it remains the default cross-platform release.

Changes

• The application icon is the flat-style headset portrait; the 0.2.8 download still carried the older artwork.
• Resources have a Knowledge base: a free-text product or team tag chosen from a third filter beside Type and State, separate from the workspace Project.
• Text evidence is Markdown, rendered on the evidence card and edited in place like a finding's description. The evidence kind (HTTP or Text) is a dropdown.
• The selected sidebar row is a raised white pill, hovering only tints a row, and a mouse click no longer draws a blue ring.
• Language, the MCP tool category and the knowledge base are dropdowns; MCP Activity filters use the search pill; the Evidence strip scrolls inside a rounded track.
• Lists and panels share one look: one panel radius and edge, one selected-row grey kept inside its card, Name / Type / Status headings on the wide Resources list, and counts that read "2 of 2,209".
• Context menus show the platform's own shortcut keys, History's Delete is red, a guide or a variable is deleted at once with Undo, and a credential, which is never kept for Undo, asks first.
• Hovering a column title in the history tables draws that column's edges; data tables use the smaller text size; a cleartext HTTP/2 request is no longer sent twice when the server is slow; the Repeater's baseline comparison panel is removed.
• Fixes from a project-wide audit: a compressed WebSocket message that ends its deflate stream no longer freezes the proxy, deleting one history row no longer erases older rows on disk, and several guardrail, credential and project-switch races are closed.

Full list in CHANGELOG.md.

Downloads

• Recon 0.2.9 for macOS Apple Silicon.
• Verify archives with SHA256SUMS.txt or SHA256SUMS-macos.txt.
• Windows and experimental Linux packages: Recon 0.2.5.

Validation

• Source: 5295314d27f993624014a3e0c1faa30deb552162 (v0.2.9).
• cargo test --locked: 379 passed, 0 failed, 2 ignored.
• macOS archive verified for version 0.2.9, arm64 architecture, the 0.2.9 icon and a valid ad-hoc signature; ZIP checksums match.
• The native-window launch step of the macOS install test did not complete in the build session.
• Windows and Linux builds are not included in this release.

Recon v0.2.8

Recon 0.2.8 adds a native, full-width window toolbar and calibrates the theme against the exported macOS Kit design tokens.

Available for macOS Apple Silicon. Windows and Linux 0.2.8 packages are pending. Use Recon 0.2.5 for those platforms; it remains the default cross-platform release.

Changes

• One full-width toolbar spans the top of the window, like Finder or Mail. The sidebar toggle keeps a fixed position at the leading edge whether the sidebar is shown, collapsed to an icon rail, or hidden, and the sidebar now sits below the toolbar instead of running full height.
• Accent, surfaces, primary label and the corner-radius scale are calibrated to match the exported macOS Kit tokens exactly, pinned by tests, with documented divergences kept for dense technical content.
• With "Show desktop through window" on, macOS 26+ shows system Liquid Glass behind the window instead of a blur; older systems keep the blur.
• Every draggable divider now shares one centred grip that turns accent on hover or drag, across the sidebar, master/detail panes and the message area.
• Findings, Resources, Projects, MCP, Proxy and Logger share one consistent empty, carded and divider state.
• Guide and finding Markdown fills the width of its detail pane; view switches (Pretty / Raw / Headers / Body, Request | Response) return to underlined tabs; built-in MCP tools toggle from their detail header.
• Panics are recorded to crash.log in the state folder (~/.local/state/recon on macOS), with message, source location and a named backtrace.
• GPUI Kit is updated to 0.8.0. A deterministic design lint (scripts/check_design.py) now enforces theme-token rules on feature views.
• Repeater tab marks, status-bar response facts, a colour-scheme picker (System/Light/Dark), and pointing-hand cursors on enabled controls.

Full list in CHANGELOG.md.

Downloads

• Recon 0.2.8 for macOS Apple Silicon.
• Verify archives with SHA256SUMS.txt or SHA256SUMS-macos.txt.
• Windows and experimental Linux packages: Recon 0.2.5.

Validation

• Source: 44a7eedecc0b12cadd1a52f522152002aae4f404 (v0.2.8).
• cargo test --locked: 351 passed, 0 failed, 2 ignored.
• macOS archive verified for version 0.2.8, arm64 architecture, and a valid ad-hoc signature.
• Windows and Linux builds are not included in this release.

macOS packages are ad-hoc signed and not notarized. Downloads and installation help: https://recon.vozen.io

Recon v0.2.7

Recon 0.2.7 adds clearer colour cues while preserving the native desktop workspace and keyboard focus behaviour.

Available for macOS Apple Silicon. Windows and Linux 0.2.7 packages are pending. Use Recon 0.2.5 for those platforms; it remains the default cross-platform release.

Changes

• Tool icons use consistent category colours: teal for network tools, indigo for requests, purple for analysis, green for resources, amber for finding records and berry for Agent connections.
• Resource lists and detail metadata distinguish guides, variables and credentials with book, braces and key icons.
• Light appearance uses a subtle blue-grey chrome; dark appearance has clearer blue-grey surface levels.
• HTTP and Markdown code highlights use clearer blue keys, green strings, amber numbers and purple keywords.
• Category colours remain separate from keyboard focus, selection, service status and severity. Contrast checks cover selected, hovered and inactive surfaces.
• Includes the workspace, document editing and deletion undo improvements from 0.2.6.

Downloads

• Recon 0.2.7 for macOS Apple Silicon.
• Verify archives with SHA256SUMS.txt or SHA256SUMS-macos.txt.
• Windows and experimental Linux packages: Recon 0.2.5.

Validation

• Source: 47e86e18c63dda36fe7cd53dd0bb5969a3e6b958 (v0.2.7).
• cargo check --locked --all-targets --features snapshot passed.
• cargo test --locked: 1,302 passed, 0 failed, 8 ignored.
• Light and dark snapshots reviewed; category and syntax contrast checks passed.
• macOS archives verified for version 0.2.7, arm64 architecture, matching SHA-256 checksums and valid ad-hoc signatures.
• Windows and Linux hosted jobs were blocked before any build steps by GitHub account billing restrictions; their 0.2.7 binaries are not included.

macOS packages are ad-hoc signed and not notarized. Downloads and installation help: https://recon.vozen.io

Recon v0.2.6

Recon 0.2.6 brings a more native desktop workspace, clearer keyboard focus and more room for documents.

Available now for macOS Apple Silicon. Windows and Linux packages for 0.2.6 are pending. Use Recon 0.2.5 for Windows and Linux; the default cross-platform download remains on 0.2.5 until the remaining packages are verified.

Workspace and reading

• Repeater, Resources and Findings fill the workspace and share thin list/detail dividers.
• Collection selection follows keyboard focus and window activation. Ordinary New and Add actions use quieter toolbar styling.
• Short Findings windows show the full detail pane; closing it returns to the retained list selection and scroll position. Taller and wider windows retain split views.
• Finding status and severity share a compact property bar, with record information collapsed by default.
• Findings and resource instructions use a bounded reading column, preserve Markdown spacing during block editing and avoid repeating the finding title in the document.
• Settings keeps a comfortable content width and aligned controls on wide windows.

Commands and editing

• Resources and Findings expose New in the File menu, command palette and contextual Command-N shortcut (Ctrl-N on Windows and Linux).
• Instruction metadata uses Edit info while the document remains directly editable with automatic saving.
• Instructions and request variables support undoing the last deletion from the status bar, list shortcut and native Edit menu. Undo preserves order and metadata, avoids replacing newer resources, and remains available after a failed write.
• Undo menu labels identify the deleted object; focused text fields retain their own text undo behavior.
• Saved credentials can be copied directly from the masked detail view without first revealing them. Agent-facing copy actions retain references and instructions.

Downloads

• macOS Apple Silicon — Recon 0.2.6.
• Verify the macOS archives with SHA256SUMS.txt or SHA256SUMS-macos.txt.
• Windows and Linux: download the verified packages from Recon 0.2.5.

Validation status

• macOS source checks and 1,302 tests passed, with 8 opt-in checks ignored; native snapshots were reviewed in light and dark appearances, including 820×520 at the largest supported interface text size.
• The macOS arm64 bundle passed archive integrity, version and strict signature checks after extraction; versioned and stable archives have matching SHA-256 checksums.
• Source commit: 176687474a7978b9be4278528e528ad266748e79.
• The macOS package was built and validated locally. Windows and Linux 0.2.6 packages have not been built or validated: GitHub Actions rejected the platform jobs before any build steps started because of an account billing restriction. No paid Actions overage is enabled as part of this release.

macOS packages are ad-hoc signed and not notarized. Downloads and help: https://recon.vozen.io

Recon v0.2.5

Recon 0.2.5 makes compact workspaces easier to scan and strengthens request, persistence and navigation behavior across the application.

Interface and interaction

• Compact windows use the full workspace. The sidebar opens as an overlay, closes after navigation or dismissal, and leaves the saved desktop sidebar preference unchanged.
• HTTP request and response views switch to one readable pane at compact widths, then restore the preferred column or row layout on larger windows.
• Proxy and Logger tables keep request identity ahead of timing, size and content-type metadata. Findings names severity as well as using colour, including compact markers and accessible labels.
• Dashboard project status, pending findings, recent work, running tasks and event history share one quieter continuous surface.

Reliability and consistency

• Repeater, MCP and Intruder use one request-preparation path while preserving raw HTTP headers and bodies, target overrides and Content-Length behavior.
• Findings and Resources share document, navigation and persistence rules; finding history and evidence provenance remain intact.
• Saved-message collection checks session, recovery, history and archive references before reclaiming data. Bounded JSON saves do not replace valid data when a limit is exceeded.
• Search, scope matching, header parsing, UTF-8 paging, hashes and Copy as curl use shared implementations with focused regression coverage.

Downloads

• macOS Apple Silicon: Recon-macos.zip or Recon-0.2.5-macos.zip.
• Windows x64 installer: Recon-windows-x64-setup.exe.
• Windows x64 portable: Recon-windows-x64.zip.
• Linux x86_64 portable: Recon-linux-x86_64.tar.gz; extract and run ./Recon/recon in a graphical Wayland or X11 session.
• Verify packages with SHA256SUMS.txt or the platform-specific checksum files.

Linux support remains experimental. The archive is built on Ubuntu 24.04 and requires a working Vulkan driver and the native libraries in runtime-libraries.txt; older distributions and ARM64 are not verified. Automatic updates and desktop integration are unavailable on Linux. macOS packages are ad-hoc signed and not notarized; Windows packages are unsigned.

Validation

• Complete test suites passed on macOS arm64, Windows x64 and Linux x64 from one source-tag workflow. Native snapshot harnesses rendered the release interface on macOS and Windows.
• macOS bundle signing and checksums, the Windows installer and portable installation, and the Linux portable package and runtime library manifest were verified by their platform jobs.
• All release assets were downloaded from the successful workflow and checked against the combined SHA-256 manifest before publication.
• Source commit: ad0bda170b5c367b8e800e3a237fbb938e1fcbe7.

Downloads and help: https://recon.vozen.io

Recon v0.2.4

Recon 0.2.4 improves readability and keyboard interaction across the desktop workspace. Existing project data and resource references are preserved.

Interface and interaction

• Readable filled buttons, search highlights, JSON differences and status labels in both light and dark themes. Findings shows severity names as well as colour.
• Projects, Findings, Comparer and WebSocket lists support keyboard navigation. Menus and cancelled delete confirmations restore useful focus.
• Request commands apply to the visible Repeater. Command/Ctrl+S saves the current resource form. Opening a new tab waits for unsaved tool changes, and open tool confirmations keep focus until resolved.
• HTTPQL and certificate help scroll inside small windows. Resource instructions retain their document and save actions while metadata scrolls separately; usage fields show three complete lines.
• Target prioritizes request paths in narrow layouts. Appearance removes repeated grouping, and an empty Dashboard offers Open Repeater while retaining drafts.
• Linux certificate instructions and shortcut hints match the platform. Empty TLS passthrough clearly means no hosts bypass decryption. Chinese help retains certificate trust and deletion effects.

Downloads

• macOS Apple Silicon: Recon-macos.zip or Recon-0.2.4-macos.zip.
• Windows x64 installer: Recon-windows-x64-setup.exe.
• Windows x64 portable: Recon-windows-x64.zip.
• Linux x86_64 portable: Recon-linux-x86_64.tar.gz; extract and run ./Recon/recon in a graphical Wayland or X11 session.
• Verify packages with SHA256SUMS.txt or the platform-specific checksum files.

Linux support remains experimental. The archive is built on Ubuntu 24.04 and requires a working Vulkan driver and the native libraries in runtime-libraries.txt; older distributions and ARM64 are not verified. Automatic updates and desktop integration are unavailable on Linux. macOS packages are ad-hoc signed and not notarized; Windows packages are unsigned.

Validation

• macOS: 1246 tests passed, 0 failed, 8 opt-in tests ignored. Native English/Chinese, light/dark and minimum-window screenshots reviewed; ten actual text/background combinations exceed 4.5:1 contrast. Local bundle signature and checksums verified.
• Windows: 1243 tests passed, 0 failed, 8 ignored; native UI snapshots reviewed and installer checks passed. Linux: 1246 tests passed, 0 failed, 8 ignored; portable package and runtime library manifest verified.
• All 12 release assets and their remote digests verified. Packages come from the successful macOS, Windows and Linux jobs of one source-tag workflow.
• Source commit: 492eb20ec55a7b260bc6c3a0aef2dc0fbe4413ab.

Downloads and help: https://recon.vozen.io

Recon 0.2.3 — Resources, navigation fixes and Linux

Recon 0.2.3 adds reusable project resources and in-app updates, improves Workspace navigation, and fixes incomplete forwarding of large HTTP responses. Packages were refreshed on October 14, 2026 from source commit 9dd4f621b0c6ae7c21c06c3559903c59f99edc4b, including the new Linux build.

October 14 package refresh

• Settings opens inside the existing workspace. The sidebar uses a continuous tool list, with a brief highlight on click and correctly aligned feedback when sending a request to Repeater.
• Resource editors stay in their category. Agent instructions, Request variables and Secrets replace the previous category names; creating a resource follows the selected category, and secret values remain masked.
• Linux uses native Ctrl shortcuts, Alt+1–9 for Repeater tabs and installed system fonts. Windows compact MCP layouts retain enough room for their content.

Capabilities and fixes

• Project Resources: reusable Markdown instructions, request variables and secret references, available to agents through MCP. Recon resolves references when sending supported HTTP requests.
• In-app updates from About: download and verify a release, save work, then restart to replace the application. Failed startup restores the previous app.
• Projects and Resources remember search, filters, selection and scroll position. Search shortcuts focus the current page.
• Proxy forwards complete large responses while retaining a bounded history preview. Fixed-length, chunked, compressed and HTTP/2 responses have regression coverage; interrupted forwarding reports an error.
• Findings keeps its list beside details, with severity filtering, adjustable layout and preserved return position.
• Resources includes type/status filters, expiry presets, exact expiry times, inline validation and saved-state feedback. Projects and Resources use resizable dividers.

Downloads

• macOS Apple Silicon: Recon-macos.zip or Recon-0.2.3-macos.zip.
• Windows x64 installer: Recon-windows-x64-setup.exe.
• Windows x64 portable: Recon-windows-x64.zip.
• Linux x86_64 portable archive: Recon-linux-x86_64.tar.gz. Extract it and run ./Recon/recon in a graphical Wayland or X11 session.
• SHA256SUMS.txt contains checksums for all packages; platform-specific checksum files are also included.

These refreshed packages still report version 0.2.3. Existing 0.2.3 installations must download them manually because the in-app updater only offers a higher version. Project data is stored outside the app installation folder. macOS builds are ad-hoc signed and not notarized; Windows packages are unsigned.

Linux support is experimental. The x86_64 archive is built on Ubuntu 24.04 and requires a working Vulkan driver and the native libraries listed in the archive's runtime-libraries.txt. Older distributions and ARM64 builds are not verified. This is a portable archive, not a DEB, RPM or AppImage; automatic updates and desktop integration are unavailable. Import proxy certificates using the distribution or browser's certificate tools.

Validation

• macOS: 1221 tests passed, 8 opt-in tests ignored; Chinese and English resource editor snapshots reviewed; package signature and checksums verified.
• Windows: GitHub-hosted tests, native UI snapshots, release build, per-user installation, application startup, graceful shutdown and uninstall checks passed.
• Linux: GitHub-hosted Ubuntu 24.04 compile checks, full tests, release build and portable package checks passed.
• All platform workflows passed for the source commit above. The update helper retains regression coverage for failed startup, timeout and interrupted replacement; physical multi-monitor positioning and a complete live Windows update between releases still need manual verification.

Downloads and help: https://recon.vozen.io

Recon 0.2.2 — Windows and macOS

Recon now runs natively on Windows, with an x64 installer and a portable ZIP. The macOS download remains available in the same release.

• Windows uses native window controls, Ctrl shortcuts, a GPUI Kit app menu and Windows fonts.
• Custom shell tools run through Windows PowerShell 5.1 with JSON input on stdin. MCP tells agents which operating system and shell they are using.
• Settings, certificates and project data use standard per-user Windows directories. Development builds remain isolated from installed Recon.
• The installer adds a Start menu shortcut and offers an optional desktop shortcut. Uninstall keeps project data.
• Runtime DLLs are included in both Windows packages; users do not need Rust, Node.js or Visual Studio.
• Windows has its own certificate import instructions. Recon does not automatically trust the proxy root.

Downloads:

Platform	Package
Windows x64	Recon-windows-x64-setup.exe — installer
Windows x64	Recon-windows-x64.zip — portable
macOS Apple Silicon	Recon-macos.zip — app bundle

Windows requires Windows 10 or later and a Direct3D 11 capable graphics driver. Windows packages are currently unsigned; a publisher or SmartScreen notice may appear. The macOS app is ad-hoc signed and not notarized.

SHA-256 checksums are included in SHA256SUMS.txt.

Validation: 991 Windows tests and 993 macOS tests passed; six opt-in checks were skipped on each platform. Eight native Windows screens were reviewed. The Windows installer was tested for per-user installation, native window startup, settings persistence, graceful exit and uninstall while preserving project data.

Windows screenshots

Click a screenshot to view it at full size.

Repeater

Dashboard

Findings

Shell tools

Recon 0.2.1

macOS · Apple Silicon (arm64) · English / 简体中文

Continue your work

• Recon restores the last page used in each project, with focus on the visible page. Repeater drafts survive restart, and reopened tabs keep their target, wrapping and response history.
• Dashboard now shows project status, prioritized pending findings and recent work that opens the original record. Running tasks appear only when active; event history is expandable.

Work with agents

• MCP calls show arguments, progress, duration and full results directly in MCP. HTTP details use the same Request / Response components as Repeater and history.
• Select an HTTP exchange to save project context with notes. Agents can read the selected context through MCP tools and resources.
• Register shell tools with usage instructions and typed parameters; enablement and defaults belong to each project. manage_tool provides list, add, update and disable.
• MCP now exposes 35 built-in tools. Encoding and decoding use encode_text / decode_text with a format; list tools support pagination. Resources and prompts are available to clients.

Interface and reliability

• Chinese and English interface options, consistent GPUI Kit controls, improved Chinese input and caret positioning, compact context menus and clearer action buttons.
• Readable Markdown previews, severity text labels and separate list/detail navigation in narrow Findings and MCP windows.
• Scope is managed in Target; Settings opens on the main window's display. Intruder is hidden from navigation. New blank tabs no longer report an invalid URL before a target is entered.
• Copy actions live in context menus. Tool editing has a visible Close action and Save / Discard / Cancel for drafts.
• Failed saves preserve work for retry; damaged sessions keep recovery copies. History refreshes are throttled under traffic.

Connection and approval changes

• Sending and proxy control default to Allow; Scope enforcement and request limits are optional. Existing configured preferences are preserved.
• Under Ask, new or changed shell commands require review; metadata, defaults and availability changes do not prompt again. Exact approved commands can run again in that project.
• MCP remains bound to loopback with bearer-token authentication and Origin checks. Proxy remains local by default; LAN access is an explicit setting.
• Debug builds use separate data directories and default ports 18080 / 19877. The release app retains Proxy 8080 / MCP 9877.

Install

Download Recon-macos.zip, unzip it and move Recon.app to /Applications. The app is ad-hoc signed and not notarized. First launch: Right-click → Open → Open; if macOS still blocks it, run xattr -dr com.apple.quarantine /Applications/Recon.app.

Validation

992 tests passed; six optional network/real-clock checks were not run. The arm64 app passed code-signature verification. Interface snapshots use synthetic sample data.

SHA-256 for both ZIP files: b7efc3cdf98eec1aa3d986d12367e1a85a89a93166b898b40a009e2e383c8df3. SHA256SUMS.txt is included for verification.

Recon 0.2.0

macOS · Apple Silicon (arm64)

New

• Findings, rebuilt. A grouped list and a detail card with Details, Evidence and History tabs. The Evidence tab uses the same request and response panes as the Repeater. Descriptions preview as Markdown (images and links stay inert), the description and reproduction boxes can be dragged to size, and rows, text fields and evidence panes have right-click menus.
• Findings keep a history of who changed what and when. Findings added by an agent or the passive scan are filed as Open; there is no review step.
• MCP page, redone. One connection bar (enable, port, endpoint, token) with an Add client popover, a larger Activity table, and Guardrails, Agents and Tools beside it.
• Agents can read and edit findings: new get_finding and update_finding tools (36 tools in all); update_finding can also set the status.
• Projects page, redone: a list with a detail pane showing request count, hosts, findings by severity and the busiest hosts. Right-click a project for rename, duplicate, archive and delete.
• Command palette with recent commands, highlighted matches and a command count, and a keyboard shortcuts sheet on Cmd-/.
• Recon opens on the Dashboard.

Improved

• The Repeater request and response panes start even and follow the window until you drag the divider; Reset Split puts them back.
• The height of the request and response area under the Logger and Proxy tables is remembered.
• The request history no longer grows without limit: past 200,000 rows or 256 MiB the oldest half moves to a compressed archive and the five newest archives are kept. Startup reads only the recent tail.

Fixed

• Findings saved in a project are loaded when Recon starts. Before, they were on disk but the page started empty, and the next save replaced the file.

Install

Unzip and move Recon.app to /Applications. First launch: right-click > Open > Open, or run xattr -dr com.apple.quarantine /Applications/Recon.app.

Existing projects open as they are (the old Proposed status reads as Open). SHA-256 of Recon-0.2.0-macos.zip: 8662ad58b29e6e0439d48f9fd8439ff61dcf590112e52eb562c387a29576432b