# Kavor 1.1.0

## Highlights

- Replaces operating-system private-protocol sign-in in new packages with a short-lived, attempt-bound
  `127.0.0.1` callback. Google, GitHub, and passwordless email Authentication now return directly to Kavor through
  the system browser, with PKCE for provider flows and an explicit clipboard fallback.
- Adds first-use legal consent to Authentication and keeps account lifecycle synchronization behind Kavor's
  versioned public API.
- Lets CodingAgents propose File and Specification Nodes through the same atomic Canvas proposal catalog used by
  other reviewed changes. Connection Skills now lead with applicable rules and Git-aware context.
- Improves Terminal and CodingAgent session presentation, Workspace switching, startup, and recovery under
  concurrent PTY activity.
- Simplifies Specification navigation and actions while retaining direct access to File-backed work from the
  Workspace.

## Fixes

- Corrected Google Desktop authorization-code exchange and GitHub's server-side confidential exchange so both
  providers complete direct loopback Authentication without shipping GitHub credentials in the application.
- Removed private-protocol registration from new desktop packages, avoiding Linux desktop-handler failures while
  preserving hosted compatibility paths for older supported versions.
- Hardened loopback callbacks against stale, repeated, malformed, or mismatched attempts and kept provider
  credentials and callback responses out of persistent storage and logs.
- Corrected PTY hydration and presentation ownership during Workspace changes, including recovery from delayed or
  interrupted host handshakes without fabricating process exits.
- Reduced unnecessary Canvas and panel work around Terminal, CodingAgent, File, and Specification Nodes and
  clarified Specification panel actions.
- Routed release discovery through Kavor's stable download API instead of coupling the desktop client directly to
  the release host.

## Installation

Download Kavor from <https://download.agentkavor.com>. The page detects the current platform and also exposes all
available packages.

- Windows x64 uses the assisted per-User NSIS installer. The installer is currently unsigned, so Microsoft
  SmartScreen may require explicit confirmation.
- macOS 13+ provides separate arm64 and x64 DMGs. Builds are ad-hoc signed but not notarized; follow the download
  page's Gatekeeper instructions. Kavor-managed updates use the matching architecture-specific ZIP and expose an
  explicit coordinated restart after the cached artifact is revalidated. The manual download remains available
  at all times.
- Linux x64 provides AppImage and DEB packages. AppImage supports Kavor-managed updates with an explicit
  coordinated restart; DEB updates are installed manually from the download page.

## Known limitations

- Released versions through 1.0.6 can no longer initiate a new GitHub sign-in because their legacy GitHub OAuth
  App was retired after the provider-direct cutover. Existing authenticated sessions remain valid; install Kavor
  1.1.0 to sign in with GitHub again.
- Windows ARM64 and Linux ARM64 packages are not included until their native PTY, SQLite, process-containment,
  and packaged-runtime gates can run on matching CI environments.
- Windows direct downloads do not yet have an Authenticode publisher certificate.
- macOS packages do not yet have Developer ID signing or notarization. Gatekeeper may require manual confirmation,
  and replacing an ad-hoc build may cause macOS to request access to `Kavor Safe Storage` in Keychain again.
- Microsoft Store distribution is not part of this release.