# Kavor 2.0.1

## Highlights

- **Let the result come to you.** Ask the CodingAgent, including from its desktop session, to send a summary or
  result to an enabled conversation in its Workspace. The agent selects an explicit destination; no earlier WhatsApp
  message is required. Replies to incoming requests keep returning to the original conversation, unaffected by
  later changes to the Workspace or default agent. This does not mirror the whole terminal or automatically publish
  to every group.
- **Send audio to your agents.** Kavor automatically prepares a transcript before delivering the request to the
  recipient CodingAgents, preserving the original recording, caption, and agent selection. The text is labeled as
  generated from audio and may contain errors. All recipients of the same request use the same result. If preparation
  fails, the original conversation receives guidance and waiting agents do not receive that request.
- **More compact Channel status.** Short notices keep their context and text on the same line, with natural screen
  wrapping. Full responses, questions, and long content retain their own formatting.

## Fixes

- Preserves Canvas edits accepted while Undo or Redo is running, without replacing new history when the earlier
  operation completes. An intervening edit also invalidates the old Redo path.
- Makes update preparation visible after **Restart**, keeping the app open during that stage and respecting file
  save, discard, and cancel decisions. Canceling closure or failing preparation returns control to the app;
  ordinary quit does not start an installation.
- Improves WhatsApp Workspace group recovery: **Check group** checks availability for the linked account, and
  **Remove group link** removes only the confirmed association. The group, phone pairing, accepted history, and other
  Workspaces are preserved. Temporary failures do not automatically erase the association.
- Fixes typography, marker alignment, and line wrapping in Sticky Note lists.

## Installation

Download Kavor from <https://download.agentkavor.com>. Existing direct installations can check for this version in
Software Update settings. Workspace database upgrades use Kavor's migration flow with a backup.

- **Windows x64:** Microsoft Store or the user-assisted NSIS installer. Microsoft signs and updates Store installations.
  The direct installer still has no publisher signature, so SmartScreen may require explicit confirmation.
- **macOS 13+:** separate, signed and notarized DMGs for Apple Silicon and Intel. Automatic updates use the ZIP for the
  matching architecture; the DMG remains available for manual installation.
- **Linux x64:** AppImage and DEB. AppImage supports Kavor-managed updates with an explicit coordinated restart;
  DEB updates are installed manually from the download page.

## Known limitations

- WhatsApp requires a linked account, network access, and an authenticated Kavor desktop running on an awake computer.
  This uses linked devices, not Meta's hosted WhatsApp Business API. Pending desktop approvals still require you.
- Audio transcription uses an authenticated cloud service; it is not fully offline. The limit is **25 MB per audio
  file (25,000,000 bytes)**, separate from attachment storage limits. Transcription does not turn speech into Kavor
  control commands, replace the original, or renew its seven-day access period after upload.
- Images depend on harness and model support. Videos are delivered as original files on a best-effort basis, without
  automatic conversion or frame extraction; this does not guarantee interpretation by every CodingAgent.
- An OSC 8 Terminal hyperlink printed on a line already under the pointer may require moving the pointer to another
  line and back before opening, because of xterm's hover cache.
- Upstream denial-of-service advisories remain for
  [braces](https://github.com/advisories/GHSA-vfj7-8cjw-p6xm) and
  [sprintf-js](https://github.com/advisories/GHSA-hp3w-g68c-fv3c). Recursive Workspace watching disables glob expansion
  on the path using braces; this mitigation does not mean the dependency is fixed.
- The dedicated shared Browser Profile accepts any server certificate for local development. A hostile network can
  impersonate sites opened in that profile. The app session keeps normal certificate validation. WebBrowser Nodes do
  not reuse an external Chrome profile or extensions, and deleting a Node does not clear shared site data; use the
  explicit cleanup in settings. Cross-site frames isolated in another process are reported as omitted and cannot be
  controlled across the guest security boundary.
- Windows ARM64 and Linux ARM64 packages are not included. Microsoft Store availability may follow direct publication
  because of Microsoft's independent certification.