Conn v0.9.0 (preview)

Conn v0.9.0

Preview / prerelease. Conn gives a human and an agent one shared shell with
visible control handoff, command approval, and a combined collaboration timeline.
These binaries are built by CI; a green build is not a claim of full manual
validation on every operating system.

Source commit: 18ebf500540b3ea54c491653e519fed3a4c31b53

Download the desktop app

Your computer	Download
Mac — Apple Silicon (M1 or newer)	Conn for Apple Silicon
Windows — x64	Windows installer
Ubuntu — x64	Ubuntu .deb · Linux AppImage

Installers include the app and its Conn CLI sidecar; Rust and Node.js are not
required to use these binaries. Windows preview installers are unsigned, so a
SmartScreen or unknown-publisher prompt may appear. Native CLI startup is checked
in CI; full interactive GUI installation/collaboration checks remain pending.

Standalone local web host

Linux x64 web bundle includes the server, matching MCP CLI and common UI. Extract it and run ./conn-web serve; follow its README or the web guide. It binds to loopback and runs independently of desktop sessions. No remote hosting or multi-user access is enabled.

한국어: Linux x64 웹 패키지는 서버·MCP CLI·공통 UI를 함께 제공합니다. 압축을 풀고 ./conn-web serve로 실행하세요. 로컬 전용이며 데스크톱에서 이미 열린 셸과는 별도 인스턴스입니다.

New in this release

• Add Reduce environment checks, off by default. The local owner can explicitly reduce environment-only review for one exact connection in the current session for 15 minutes, with a visible target-unverified countdown and Stop control. The decision stays in memory and cannot be created or extended by an agent.
• Limit reduction to documented simple query commands; other commands and unsupported syntax keep review. Preserve risk confirmation, deny rules, Privacy, participation, collaboration modes, control leases and existing input recovery. Pending approval cards are never automatically approved. Existing category allowances do not turn this option into blanket command approval.
• Recheck queued commands before PTY input. Expiry, stop, disconnect/reconnect, sharing, profile/policy or observed transport changes and human takeover revoke the decision; ordinary lease expiry preserves the decision but still blocks input without a lease. Running processes are not killed.
• Final execution targets and internal transitions remain unverified. Nested remote host changes may be undetectable; this feature does not verify target identity.

한국어: 환경 확인 줄이기를 추가했습니다. 기본 OFF이며 로컬 소유자가 직접 동의하면 현재 세션·정확한 연결의 지원되는 단순 조회 명령에 한해 환경 확인만 15분 동안 줄입니다. 대상 미검증·남은 시간·종료 버튼을 표시하고 메모리에만 유지하며, 에이전트는 생성·연장할 수 없습니다. 위험 명령·명시 deny·해석 불가 문법·Privacy·참여 권한·기존 모드·제어 lease·입력 복구는 유지하고, 대기 승인 카드를 자동 승인하지 않습니다. 큐 명령을 실제 입력 직전에 재검증하며 만료·철회·문맥 변경·사용자 takeover 시 실행하지 않습니다. lease 자연 만료는 grant를 보존하지만 입력에는 유효 lease가 필요합니다. 중첩 원격 연결의 최종 호스트 전환을 감지하지 못할 수 있으며 대상 신원 검증을 보장하지 않습니다.

Validation and limits: automated core regressions cover fixed monotonic expiry, connection scope, nonrenewing reads, owner-only creation, command risk and syntax, pending approvals, retained input, queued-command revalidation, policy/profile/sharing changes, and lease expiry versus human takeover. Production Linux Chromium UI/PTY/MCP flows verify acknowledgement, countdown, stop, reload and reconnect in disposable sessions. Native packaging, signing and exact-release artifact checks are recorded separately. macOS/Windows interactive behavior and installed-app upgrades were not exercised locally. Local native compilation requires GTK development libraries that are unavailable in this execution environment; full-repository fmt and strict Clippy also report pre-existing formatting/lint issues.

한국어: 고정 단조시계 만료·연결 범위·조회 비갱신·소유자 전용 생성·위험/문법 확인·대기 승인·입력 잔존·큐 재검증·정책/프로필/공유 변경·lease 자연 만료와 인간 takeover 차이를 자동 검증했습니다. 격리된 Linux Chromium 실제 UI/PTY/MCP에서 동의·남은 시간·종료·재진입·재접속을 검증하며, 배포 산출물·서명 검증은 별도 기록합니다. Mac/Windows 대화형 검증·설치 앱 업그레이드는 로컬에서 수행하지 않았습니다. 실행 환경에 GTK 개발 라이브러리가 없어 로컬 네이티브 빌드는 제한되며, 전체 fmt·엄격 Clippy에는 기존 포맷/린트 문제가 남아 있습니다.

Updating

Update the app and its CLI/MCP adapter together, then restart your MCP clients.
Existing files, profiles and saved activity remain; running shell sessions close
during app restart and are not migrated.

Installations from v0.6.0 on can discover this preview through the signed updater. Older
clients need a manual install. Updates support Apple Silicon macOS, Windows x64
and Linux AppImage; Debian packages use package-manager/manual updates. Installation
and restart remain your choice. Full installed-app upgrade coverage on every target
is not claimed by artifact signature checks.

한국어: 앱·CLI를 함께 업데이트하고 MCP 클라이언트를 재시작하세요. 파일·설정·저장 기록은
유지하며 실행 중인 셸은 앱 재시작 시 종료됩니다. v0.6.0 이후 설치본은 서명 업데이트를 사용할
수 있고 그보다 이전 버전은 직접 설치하세요.

Native validation and remaining coverage

Validation coverage is recorded per version in the changelog and linked reports.
CI builds, scripting-dictionary checks, signing and notarization are separate from
interactive testing of an installed app. Previous development-app results do not
establish that every native interaction works in this build. Windows interactive
GUI and full installed-app upgrades remain unverified.

AppleScript is disabled by default. Enable it for selected local profiles in Settings
and consult the automation guide.

Getting started

• English guide
• 한국어 사용법
• What changed

For a separate MCP connector, download the matching CLI for
Apple Silicon,
Windows x64 or
Linux x64.
Linux x64 assets are built on Ubuntu 24.04 and target
Ubuntu 24.04/26.04; runtime coverage of these exact assets is separate from CI.
Windows targets x64 and is intentionally unsigned for this preview; a certificate
is not a release prerequisite. SmartScreen or unknown-publisher prompts may appear.
macOS apps, their embedded CLI sidecars, and standalone CLIs are Developer ID
signed with hardened runtime and secure timestamps. Apple notarization is
Accepted for the final DMGs and standalone CLI submissions; app and DMG tickets
are stapled and verified. Apple does not support stapling a standalone CLI or
its archive, so its notarization ticket is retrieved online when needed.
The Apple Silicon -signing.json asset records native runner checks and final asset hashes;
it is evidence of this build, not an independent cryptographic attestation.
Intel Mac packages are paused for new releases; previously published assets remain available.
Native interactive installation and collaboration coverage remains limited for this preview.
See the platform policy.
Follow the installation guide for platform trust prompts; never disable system
protection globally.

Verify the download

Download SHA256SUMS with your selected asset. On Linux, run
sha256sum --ignore-missing -c SHA256SUMS from that directory. On macOS, compare
shasum -a 256 <asset> to the matching line; on Windows use
Get-FileHash <asset> -Algorithm SHA256. SHA-256 detects download corruption;
the checksum file is not a code-signing signature.

Before giving an agent control

Commands use your account's permissions. Conn's policy and approval UI are not
an operating-system sandbox. An “executed” record means input reached the shell,
not that the command completed successfully. Start with a disposable project.
Read the security model and
report security issues privately.

한국어: AppleScript는 기본적으로 꺼져 있습니다. 버전별 검증 범위는 변경 기록과 연결된 보고서를 확인하세요. CI 빌드·스크립팅 사전·서명·공증 검증은 설치된 앱의 대화형 검증과 별개이며, 이전 개발 앱의 결과가 이번 배포판의 모든 동작을 보장하지 않습니다.
이 릴리스는 프리뷰입니다. 명령은 사용자 계정 권한으로 실행되며, 승인 기능은
운영체제 샌드박스가 아닙니다. 실행 기록은 입력 전달을 뜻하며 명령의 성공을 보장하지
않습니다. macOS 앱·내장 CLI·별도 CLI는 Developer ID로 서명하며 hardened runtime과
보안 타임스탬프를 검증합니다. DMG와 별도 CLI의 Apple 공증이 승인되었고 앱·DMG에는
티켓을 첨부했습니다. 별도 CLI와 아카이브에는 티켓을 첨부할 수 없어 필요 시 온라인으로
조회합니다. Apple Silicon 서명 보고서는 해당 빌드의 검증 기록이며 독립적인 암호학적 증명은 아닙니다.
새 릴리스의 Intel Mac 배포는 중단하며 기존 공개 파일은 유지합니다.
Windows 프리뷰는 무서명으로 배포하며 인증서가 필수 조건은 아닙니다. Linux는
Ubuntu 24.04 빌드를 24.04·26.04 대상으로 제공합니다. CI에서 각 운영체제의 별도 CLI
시작을 확인하며, 네이티브 GUI 설치·협업의 전체 대화형 검증은 아직 완료되지 않았습니다.

Verification of these published files

Product source: 18ebf500540b3ea54c491653e519fed3a4c31b53. Release workflow revision: a4b2e2eb91ab96608c4bc423ccf1a2b16926a01e. Complete release checks and native builds passed. The macOS builder used the standard ARM64 macOS 26 image; Developer ID, hardened runtime, secure timestamps, Accepted notarization, app/DMG tickets, contained-app Gatekeeper checks, updater signatures and packaged CLI startup passed. Windows native build/CLI and updater-signature checks passed; the Windows preview installer remains unsigned.

All 14 SHA256SUMS entries matched the downloaded files; all 15 assets, including the checksum file, matched available repository asset digests. The signing report matched the exact source and file hashes. On Ubuntu 26.04.1, the final AppImage entry (--appimage-extract-and-run) and extracted Debian payload opened their own GUI, PTY and IPC socket on isolated X11/DBus/config/runtime directories with system-only PATH. The final packaged web server, matching CLI and UI passed 10 collaboration and 5 environment-controls scenarios. These checks used disposable local fixtures; no existing installation, terminal or live user grant was changed.

Limitations: native macOS/Windows GUI interaction, full installed-app upgrades, Wayland and a clean-OS Debian installation were not exercised. Linux GUI startup and packaged web flows are distinct from those checks. The real SSH-authentication lab test was not run. Repository-wide fmt and strict Clippy retain independently reproduced baseline findings; portable Rust tests passed (316), and release-tool tests passed (82).

한국어: 최종 15개 파일의 체크섬·소스·서명 보고서를 대조했습니다. macOS 26 표준 ARM64 CI에서 서명·공증·티켓·Gatekeeper·업데이터 서명·패키지 CLI 실행을 검증했습니다. Ubuntu 26.04.1의 격리된 X11 환경에서 최종 AppImage·Debian 실행과 패키지 웹 15개 흐름을 확인했습니다. Mac/Windows GUI 대화형 사용·전체 설치본 업그레이드·Wayland·깨끗한 OS의 Debian 설치는 검증하지 않았습니다. 사용자 설치본·실행 중 터미널·실제 사용자 grant는 변경하지 않았습니다.