Changelog

• Skip the watcher_delete integration tests on macOS to keep the CI matrix green; the underlying watcher fix from v0.2.3 is unchanged.

• MCP tool fixes across recon-parser, recon-server, and recon-search.
• Fixed a macOS pipeline hang in CI.

• Watcher overhaul — file save → queryable in < 1 s, with a Phase 0 cascade that propagates deletes and renames immediately.
• Tier-1 token diet in tool responses: skips None and empty fields so the wire payload stays lean.
• code_search hybrid mode is now deterministic.
• Audit cleanups across the workspace.

• recon init --mcp <ide> now smoke-tests recon serve after writing the IDE config — you find out at install time, not when the agent first calls a tool.

• Server-side max_repos: recon init now registers each repo's canonical-path SHA-256 fingerprint with the worker via atomic POST /v1/account/repos.
• recon repos list / recon repos remove for managing slots.
• recon doctor [--json] — health check across binary, license, credentials, worker reachability, index, MCP wiring, and agent rules.
• recon purge --mcp <ide> now also frees the server-side slot.

• Aligned the licence HMAC secret between the CLI and the worker — fixes intermittent licence-validation failures from v0.1.0.

The first public cut. Twelve MCP tools, nine languages, one signed 24 MB Rust binary.

• Local-first index with tantivy + tree-sitter.
• MCP server with the code_* tool family.
• Cosign-signed release artefacts.