Kavor 1.1.0

Highlights

Replaces operating-system private-protocol sign-in in new packages with a short-lived, attempt-bound
127.0.0.1 callback. Google, GitHub, and passwordless email Authentication now return directly to Kavor through
the system browser, with PKCE for provider flows and an explicit clipboard fallback.
Adds first-use legal consent to Authentication and keeps account lifecycle synchronization behind Kavor's
versioned public API.
Lets CodingAgents propose File and Specification Nodes through the same atomic Canvas proposal catalog used by
other reviewed changes. Connection Skills now lead with applicable rules and Git-aware context.
Improves Terminal and CodingAgent session presentation, Workspace switching, startup, and recovery under
concurrent PTY activity.
Simplifies Specification navigation and actions while retaining direct access to File-backed work from the
Workspace.

Corrected Google Desktop authorization-code exchange and GitHub's server-side confidential exchange so both
providers complete direct loopback Authentication without shipping GitHub credentials in the application.
Removed private-protocol registration from new desktop packages, avoiding Linux desktop-handler failures while
preserving hosted compatibility paths for older supported versions.
Hardened loopback callbacks against stale, repeated, malformed, or mismatched attempts and kept provider
credentials and callback responses out of persistent storage and logs.
Corrected PTY hydration and presentation ownership during Workspace changes, including recovery from delayed or
interrupted host handshakes without fabricating process exits.
Reduced unnecessary Canvas and panel work around Terminal, CodingAgent, File, and Specification Nodes and
clarified Specification panel actions.
Routed release discovery through Kavor's stable download API instead of coupling the desktop client directly to
the release host.

Download Kavor from https://download.agentkavor.com. The page detects the current platform and also exposes all
available packages.

Windows x64 uses the assisted per-User NSIS installer. The installer is currently unsigned, so Microsoft
SmartScreen may require explicit confirmation.
macOS 13+ provides separate arm64 and x64 DMGs. Builds are ad-hoc signed but not notarized; follow the download
page's Gatekeeper instructions. Kavor-managed updates use the matching architecture-specific ZIP and expose an
explicit coordinated restart after the cached artifact is revalidated. The manual download remains available
at all times.
Linux x64 provides AppImage and DEB packages. AppImage supports Kavor-managed updates with an explicit
coordinated restart; DEB updates are installed manually from the download page.

Released versions through 1.0.6 can no longer initiate a new GitHub sign-in because their legacy GitHub OAuth
App was retired after the provider-direct cutover. Existing authenticated sessions remain valid; install Kavor
1.1.0 to sign in with GitHub again.
Windows ARM64 and Linux ARM64 packages are not included until their native PTY, SQLite, process-containment,
and packaged-runtime gates can run on matching CI environments.
Windows direct downloads do not yet have an Authenticode publisher certificate.
macOS packages do not yet have Developer ID signing or notarization. Gatekeeper may require manual confirmation,
and replacing an ad-hoc build may cause macOS to request access to Kavor Safe Storage in Keychain again.
Microsoft Store distribution is not part of this release.