Kavor 1.0.4

Highlights

• Adds Kavor-managed updates to macOS arm64 and x64 through architecture-specific ZIP packages, differential blockmaps, and one consolidated stable update channel.
• Keeps the architecture-specific DMG as the human download while the updater selects the matching ZIP, downloads it in the background, and offers an explicit restart through Kavor's coordinated shutdown path.
• Preserves https://download.agentkavor.com as the permanent fallback on every platform and for every updater failure.

Fixes

• Corrected the macOS release contract that enabled the automatic updater in packaged applications without publishing the ZIP and latest-mac.yml files required by Electron Updater.
• Prevented one macOS architecture job from replacing the other architecture's update metadata by validating each native ZIP and consolidating both entries during publication.
• Added immutable SHA-256 coverage for both macOS updater ZIPs and blockmaps, exact asset verification before promotion, and native package gates for the generated metadata.
• Renamed the obsolete initial-release package configuration to the direct-distribution contract used by current releases.

Installation

Download Kavor from https://download.agentkavor.com. The page detects the current platform and also exposes all available packages.

• Windows x64 uses the assisted per-User NSIS installer. The installer is currently unsigned, so Microsoft SmartScreen may require explicit confirmation.
• macOS 13+ provides separate arm64 and x64 DMGs. Builds are ad-hoc signed but not notarized; follow the download page's Gatekeeper instructions. After this version is installed, later accepted releases can download and expose an explicit coordinated restart after the cached artifact is revalidated. The manual download remains available at all times.
• Linux x64 provides AppImage and DEB packages. AppImage supports Kavor-managed updates; DEB updates are installed manually from the download page.

Known limitations

• Windows ARM64 and Linux ARM64 packages are not included until their native PTY, SQLite, process-containment, and packaged-runtime gates can run on matching CI environments.
• Windows direct downloads do not yet have an Authenticode publisher certificate.
• macOS packages do not yet have Developer ID signing or notarization. Gatekeeper may require manual confirmation, and replacing an ad-hoc build may cause macOS to request access to Kavor Safe Storage in Keychain again.
• Microsoft Store distribution is not part of this release.