# Kavor 1.0.4

## Highlights

- Adds Kavor-managed updates to macOS arm64 and x64 through architecture-specific ZIP packages, differential
  blockmaps, and one consolidated stable update channel.
- Keeps the architecture-specific DMG as the human download while the updater selects the matching ZIP,
  downloads it in the background, and offers an explicit restart through Kavor's coordinated shutdown path.
- Preserves https://download.agentkavor.com as the permanent fallback on every platform and for every updater
  failure.

## Fixes

- Corrected the macOS release contract that enabled the automatic updater in packaged applications without
  publishing the ZIP and `latest-mac.yml` files required by Electron Updater.
- Prevented one macOS architecture job from replacing the other architecture's update metadata by validating each
  native ZIP and consolidating both entries during publication.
- Added immutable SHA-256 coverage for both macOS updater ZIPs and blockmaps, exact asset verification before
  promotion, and native package gates for the generated metadata.
- Renamed the obsolete initial-release package configuration to the direct-distribution contract used by current
  releases.

## Installation

Download Kavor from <https://download.agentkavor.com>. The page detects the current platform and also exposes all
available packages.

- Windows x64 uses the assisted per-User NSIS installer. The installer is currently unsigned, so Microsoft
  SmartScreen may require explicit confirmation.
- macOS 13+ provides separate arm64 and x64 DMGs. Builds are ad-hoc signed but not notarized; follow the download
  page's Gatekeeper instructions. After this version is installed, later accepted releases can download and
  expose an explicit coordinated restart after the cached artifact is revalidated. The manual download remains
  available at all times.
- Linux x64 provides AppImage and DEB packages. AppImage supports Kavor-managed updates; DEB updates are installed
  manually from the download page.

## Known limitations

- Windows ARM64 and Linux ARM64 packages are not included until their native PTY, SQLite, process-containment,
  and packaged-runtime gates can run on matching CI environments.
- Windows direct downloads do not yet have an Authenticode publisher certificate.
- macOS packages do not yet have Developer ID signing or notarization. Gatekeeper may require manual confirmation,
  and replacing an ad-hoc build may cause macOS to request access to `Kavor Safe Storage` in Keychain again.
- Microsoft Store distribution is not part of this release.