docs(changelog): add v1.14.0 release notes

Assembled from everything in v1.13.1..main: 158 PR merges (124 substantive,
34 Crowdin syncs), 5 ngit proposals merged outside the GitHub PR flow, and
15 direct-to-main commits.

Coverage was verified in both directions rather than assumed — every PR
resolves to a bullet that literally appears in the file, and every bullet is
claimed by some commit. That audit caught five defects in the first draft:

- A bullet crediting BUD-01 Blossom read-auth, which is PR #3789 and shipped
  in v1.13.1 — the GitHub search window overlapped the tag date.
- #3819's Concord fix (entities pinned across a Refounding) missing; only the
  log-quieting half of that PR had been written up.
- #3855's per-host strike-out / unreachability tracking missing.
- #3818's re-probe on the local Blossom toggle missing.
- The mention notification icon reshape (6fac964d), which has no PR at all and
  so was invisible to a PR-only sweep.

Six PRs are deliberately omitted, each for a stated reason: #3801/#3802/#3805
sync packaging to v1.13.1 and belong to the previous release, #3845 is
test-only, #3878 is behavior-preserving renames, #3956 is a CI lint fix.

Also records npubs for nrobi144, dmnyc, dskvr, alexgleason and mstrofnone in
github.json, and corrects mstrofnone's key in TEMPLATE.md. The five already
published changelogs keep the key they shipped with.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Gs2gi3sZfQ7SHrVm2njLMw

docs/changelog/README.md

@@ -2,6 +2,7 @@
 
 Release notes for Amethyst, one file per version. Files are named with zero-padded version numbers so they sort correctly in any file browser. Use [`TEMPLATE.md`](TEMPLATE.md) as the starting point for the next release.
 
+- [v1.14.0 — Highlights, Relay Login, and a Much Faster Start](v1.14.00.md)
 - [v1.13.1 — Follow-up Fixes for Buzz, Concord and the Keyboard](v1.13.01.md)
 - [v1.13.0 — Web Apps, Communities & Git](v1.13.00.md)
 - [v1.12.6 — Napplets, Static Sites & Cashu Multi-Mint](v1.12.06.md)

docs/changelog/TEMPLATE.md

@@ -48,7 +48,7 @@ comment and fill in the sections below; drop any section that doesn't apply.
 - @npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c
 - @npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5
 - @npub1a3tx8wcrt789skl6gg7rqwj4wey0j53eesr4z6asd4h4jwrd62jq0wkq4k
-- @npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp
+- @npub1gvv9ahktvavf9qjtrgm62le7gplmmchd5usp5wpfhr85hf79kncqj8xchs
 - @npub1ncff8m25y0c058xdljmxhpr4lxetzjpea6uq9733qmp4slfts43qawj87x
 
 ## Translations

docs/changelog/github.json

@@ -5,7 +5,10 @@
     "nrobi144": "npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c",
     "greenart7c3": "npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5",
     "KotlinGeekDev": "npub1a3tx8wcrt789skl6gg7rqwj4wey0j53eesr4z6asd4h4jwrd62jq0wkq4k",
-    "mstrofnone": "npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp",
+    "mstrofnone": "npub1gvv9ahktvavf9qjtrgm62le7gplmmchd5usp5wpfhr85hf79kncqj8xchs",
+    "dmnyc": "npub1aeh2zw4elewy5682lxc6xnlqzjnxksq303gwu2npfaxd49vmde6qcq4nwx",
+    "dskvr": "npub1uac67zc9er54ln0kl6e4qp2y6ta3enfcg7ywnayshvlw9r5w6ehsqq99rx",
+    "alexgleason": "npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26p",
     "believethehype": "npub1nxa4tywfz9nqp7z9zp7nr7d4nchhclsf58lcqt5y782rmf2hefjquaa6q8",
     "dergigi": "npub1dergggklka99wwrs92yz8wdjs952h2ux2ha2ed598ngwu9w7a6fsh9xzpc"
   }

docs/changelog/v1.14.00.md

@@ -0,0 +1,275 @@
+# v1.14.0: Highlights, Relay Login, and a Much Faster Start
+
+Highlights:
+
+- Improves **NIP-84 Highlights** — composer, feed, and share intent.
+- Redesigns **relay login (NIP-42)** and ends the per-relay prompt storm.
+- Adds Share targets to **Pictures, Videos, Shorts and Torrents** feeds.
+- Adds a screen that explains **why every relay subscription exists**.
+- Fixes the cold-start **out-of-memory kill** and cuts time to first paint.
+- Brings **Desktop** to parity on profiles, DMs, settings and key backup.
+- Adds **Trusted Lists** (kinds 30392–30395) to Quartz.
+
+## New Features
+
+### Highlights (NIP-84)
+
+- Adds a Highlight composer, with an annotation field, a passage editor, and a
+  source reference that can be a Nostr event or a web URL.
+- Adds a Highlights feed, filterable by authors, follows, hashtags and geohashes.
+- Accepts shared text from any app as a new highlight.
+
+### Feeds and Composing
+
+- Adds four home feed content types: Pictures (NIP-68), Videos and Shorts
+  (NIP-71), and Torrents (NIP-35), each with its own toggle.
+- Adds "New Picture", "New Short" and "New Video" share targets, so media shared
+  into Amethyst opens the matching composer instead of a text note with a link.
+- Adds a bulk audience picker to the short-note composer: search people lists and
+  follow packs, review the members, then add them all at once.
+- Adds a poll results page with per-option vote counts and a filterable voter
+  list, replacing the feed card's four-avatar preview.
+- Shows rich previews for comments scoped to external content (NIP-73), both in
+  the "replying to" line and as the thread's title.
+- Offers a "Copy Original / Copy Translated" chooser when copying a note that has
+  been translated.
+- Opens the edit screen when a draft reply is tapped in a thread.
+
+### Relay Login (NIP-42)
+
+- Redesigns the relay login permissions screen. Explicit exceptions, relays
+  blocked by your block list, and recent logins are now three separate sections.
+- Starts new accounts on "always log in" instead of deciding per relay.
+- Remembers a login for the rest of the session when you answer without ticking
+  "remember", so a reconnect stops asking again.
+- Honors "always log in" for relays your own account does not publish to.
+- Makes the "reading someone I follow" toggle reachable — it sat behind a
+  first-party gate that could never be true.
+- Counts NIP-29 groups and Concord communities as rooms you joined, so their
+  host relays authenticate under "my relays and venues".
+- Waits for an auth challenge to resolve rather than letting the fetch time out.
+
+### Relay Traffic, Explained
+
+- Records why every relay-bound filter exists — its purpose, the entities it
+  serves and the account that asked — and renders that back on a new screen.
+- Fixes the multi-account subscriptions that screen exposed as never running.
+- Breaks the resource ledger down by cause, so it reports *why* relay data was
+  spent, not just how much.
+- Stops the automatic "High resource usage detected" dialog on app open. The
+  ledger keeps recording and Settings still shows the report.
+
+### Chats, Groups and Communities
+
+- Mutes a public chat from a long press in Messages or from the channel menu.
+- Deletes (kind 9008) and archives NIP-29 channels, with the Buzz community UI to
+  match.
+- Keeps a channel invite's replies, reactions and zaps inside the relay that sent
+  the invite, instead of broadcasting them to your outbox.
+- Derives Buzz channel invites from cached membership notices, so they stop
+  appearing and disappearing.
+- Redesigns channel invite cards as feed rows, with the person who added you as
+  the row's author.
+- Shows the hosting relay's name chip on relay group message headers.
+- Splits the Concord Control Plane's stream key so a staff-held `control_root`
+  write-gates it (CORD-02 §2).
+- Closes the Concord CORD-05/06 invite lifecycle: an Invite List, a re-mint on
+  Refounding, and revocation.
+- Stops pinning Concord entities whose chain crosses a Refounding, which was
+  discarding their newer state on every refold.
+- Closes seven Concord soft-ban holes — a banned member kept `control_root`, half
+  the Control Plane never read the banlist, and the invite button still worked.
+
+### Everything Else
+
+- Makes the left drawer configurable, so entries you don't use can be hidden.
+- Adds ngit-specific search to the Git Repositories screen.
+- Supports IPv6 overlay relays (Yggdrasil) with RFC 5952 canonical addresses,
+  fixing one relay counting as two and Tor-proxying an unreachable overlay.
+- Adds a Nostr badge watermark to the notification icons, reshapes the mention
+  icon, and adds dedicated reply and mark-as-read action icons.
+- Runs verified NIP-5D artifacts in an opaque `srcdoc` sandbox behind a first-head
+  CSP, and advertises only the NAP domains actually implemented.
+
+## Performance
+
+- Scans NIP-19 entities, hashtags and legacy `#[n]` references without ICU. On
+  Android, `Regex.matchAt` copied the whole note content into native memory per
+  candidate, which grew a cold start to ~1.9 GB and got the app killed.
+- Scans note content by literal instead of restarting the regex engine at every
+  position in every note.
+- AOT-compiles the relay ingest path with a baseline profile. Release cold-start
+  ingest was spending 36× more CPU interpreting bytecode than verifying
+  signatures.
+- Demotes the ~650 relay and ingest worker threads below the UI thread, so the
+  connect storm cannot starve the first frames (~40% faster first paint).
+- Reclaims memory under heap pressure and stops leaking sandboxed WebView
+  Activities.
+- Bounds the duplicate-frame decoder cache in both size and age.
+- Stops blocking coroutine workers on synchronous OkHttp calls, which released
+  their CPU permits and starved the dispatcher.
+- Stops the outbox getting slower with every publish — it rebuilt an immutable map
+  per send, copying every pending entry.
+- Stripes the subscription-state lock per relay, ending the ANR convoy that had
+  37 of 52 workers spinning on one lock.
+- Memoizes Concord guestbook envelope opens, so the fold stops re-decrypting the
+  whole buffer on every arrival.
+- Caches the painter on its first miss in `painterRes`.
+- Optimizes the proof-of-work mining hot loop for the Android runtime.
+- Skips the ~220 ms system call when the app locale has not actually changed.
+- Confines the Blossom cache probe and server resolver to the IO dispatcher, and
+  re-probes it when the toggle flips.
+- Releases dead subscription rows, so connect and disconnect stop scanning every
+  subscription ever created.
+- Prefetches NIP-73 external-content preview URLs so those cards stop popping in
+  mid-scroll.
+- Adds fixed-size hex codecs for 32- and 64-byte values.
+
+## Improvements and Bug fixes
+
+- Settles the keyboard inside navigation, so leaving a screen mid-animation stops
+  stranding `imePadding` across the whole app.
+- Routes the draft-saving editors through `KeyboardAwareBackHandler`, so a
+  predictive back gesture no longer races the IME close.
+- Raises the keyboard again when you tap a field in an embedded tab that was
+  already focused.
+- Pads for the soft keyboard in full-screen napplet hosts on Android 15+.
+- Fixes the crash when switching between two pinned web-app tabs.
+- Stops drawing a blank parent card above a top-level community post.
+- Fixes Cashu wallet balances reading low: proofs are now backfilled past the
+  relay's page cap and history is paged.
+- Keeps PDF previews stable — the page ratio is cached, so scrolling back no
+  longer collapses the card and replays the grow-in animation.
+- Stops rendering non-media NIP-94 files as video.
+- Repairs `imeta` MIME types written as a bare subtype, so those images can be
+  shared again.
+- Works around a fatal media3 crash on Low-Latency HLS streams.
+- Drives the "Can't reach this relay over Tor" banner from live socket state
+  instead of a bare six-second timer.
+- Stops a lone repost from being bundled into the always-on service notification,
+  where it inherited the ongoing flag and refused to swipe away.
+- Fails push registration loudly on an HTTP error, instead of caching a token for
+  a device that will never receive anything.
+- Listens for location only while foregrounded, and fixes the meter that reported
+  7 hours of listening against 9 seconds of foreground.
+- Excludes quote characters from parsed URLs.
+- Fixes the OpenGraph meta parser losing every tag after an apostrophe inside a
+  comment or script, which broke link previews on some sites.
+- Requests the follower-count provider's kind 30382 cards, so the count stops
+  rendering as `--`.
+- Gives the invite roster line's member count its unit, so a bare number no longer
+  reads as counting the avatars beside it.
+- Removes the recent-poster facepile from Concord and Buzz channel rows.
+- Renders every NIP-71 video subtype through the shared interface.
+- Reworks the chat bubble reply swipe on lower-level pointer APIs, so it only
+  claims the gesture once the motion is clearly horizontal.
+- Turns the default log into a boot narrative instead of a firehose.
+- Converts the drawer's hidden-count to a plural, fills the untranslated backlog
+  for Czech, German, Swedish and Brazilian Portuguese, restores placeholders
+  dropped from German and Polish plurals, and drops an unused plural.
+
+## Desktop
+
+- Enriches the DM composer and message list: emoji picker with custom emoji,
+  @mentions, reply-quoting with jump-to-original, Nostr-native GIF search, rich
+  message rendering, per-message image quality, and encrypted file uploads.
+- Redesigns Settings as a searchable accordion of labeled cards, with
+  expand/collapse-all and a filter over titles and keywords.
+- Brings the profile screen to parity: banner, rich-text bio, a CLINK offer field,
+  six new tabs (Followers, Following, Relays, Bookmarks, Yours, Zaps received) and
+  header actions.
+- Adds a guided "save your keys" step on first run and a key backup in Settings.
+  Android gets a soft nudge after signup.
+- Loads metadata and reactions only for what is on screen, through the shared
+  finders in `commons`, and unsubscribes when it leaves.
+- Enables the master notification switch when the OS permission is already
+  granted.
+- Publishes Windows arm64 and Linux arm64 desktop builds.
+
+## Cli
+
+- Gives `amy` the Concord key lifecycle it was missing: accept a promotion, follow
+  a Refounding, perform one, and recover when left out of it.
+- Publishes Windows and Linux arm64 assets for `amy` and `geode`.
+- Reports "no relays" only when there really were none, and pins the buzz wrapper
+  copies against the argument surface they call.
+
+## Quartz
+
+- Adds Trusted Lists (kinds 30392–30395), the aggregate counterpart to NIP-85
+  Trusted Assertions, and indexes their labels for NIP-50 search.
+- Fixes a `SharedKeyCache` collision that could return one peer's shared secret
+  for another peer's message, and compares MACs in constant time.
+- Measures NIP-66 relay health from traffic the client already makes, streams
+  probe verdicts as relays answer, checks read and write separately, lets a
+  monitor publish what it learned without dialling, and merges verdicts into the
+  record they replace instead of overwriting it.
+- Measures `rtt-open` as the transport handshake, not the time the call spent
+  queued in the dispatcher.
+- Records sync coverage per kind rather than one interval per filter, keys its
+  persistence with a typed band, closes a drained leg, and terminates a paged walk
+  against a relay that ignores `until`.
+- Strikes a host out and tracks its unreachability with publish-safe semantics,
+  so a dead host stops being retried at the same rate as a live one.
+- Sizes negentropy reconcile windows from the caller's own index, states the
+  relay's cap, and lets a caller decline an id before its body crosses the wire.
+- Normalizes every accessory timeout to an idle window, drops the `maxTotalMs`
+  ceiling that cut healthy fetches, and stops `fetchAllPages` cropping a streaming
+  page.
+- Stops COUNT inheriting the REQ page size, which capped a count at 500.
+- Suspends the incoming-message chain down to `SubscriptionListener.onEvent`, so a
+  consumer that cannot keep up no longer blocks every shared worker.
+- Compares every filter in `FiltersChanged`, not just the first.
+- Fixes an `InProcessWebSocket` race that delivered a connect-time AUTH challenge
+  before `onOpen`.
+- Adds `StoreQueryContext`, carrying the NIP-42-authenticated caller identity into
+  observer-relative stores.
+- Adds a NIP-50 search grammar (quoted phrases, negation) with weighted field
+  extraction, and shares the store-semantics rules across implementations.
+- Parses metadata leniently everywhere, and recovers blank, single-element and
+  malformed kind-0 content instead of dropping the profile.
+- Parses `ServiceType` without splitting on a separator that may not be there.
+- Declares pointer hints on Report, ChatMessage, Classifieds and ChannelCreate.
+- Refreshes `created_at` while mining, so a post that takes minutes to mine does
+  not publish stale.
+- Decouples the `LocalCache` and `Account` god classes into single-purpose
+  collaborators, 3,800 lines lighter, with no behavior change.
+
+## Build & Documentation
+
+- Adds a `:baselineprofile` module that records a real startup journey, replacing
+  the hand-authored profile's wildcards.
+- Notarizes the macOS DMG and verifies it, adds `libegl1` to the arm64 `.deb`
+  dependencies, and moves the Homebrew and Winget bumps onto a maintainer machine.
+- Shrinks the mirror-sync throughput corpus on CI, which had been timing out the
+  `test-geode` job for weeks.
+- Confines the QUIC stream drainer to the producer's event loop, deflaking it
+  under parallel test load.
+- Hardens `workflow-ship.sh` and pins it with a regression harness.
+- Adds three store-implementer skills: event store semantics, NIP-85 trusted
+  assertions and searchable events.
+- Bumps 30+ dependencies plus Gradle, Compose, Firebase, Media3, Ktor and OkHttp.
+
+## Contributors
+
+- @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef
+- @npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c
+- @npub1aeh2zw4elewy5682lxc6xnlqzjnxksq303gwu2npfaxd49vmde6qcq4nwx
+- @npub1uac67zc9er54ln0kl6e4qp2y6ta3enfcg7ywnayshvlw9r5w6ehsqq99rx
+- @npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26p
+- @npub1gvv9ahktvavf9qjtrgm62le7gplmmchd5usp5wpfhr85hf79kncqj8xchs
+
+## Translations
+
+- Chinese Simplified by @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Czech by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Dutch by @npub1w4la29u3zv09r6crx5u8yxax0ffxgekzdm2egzjkjckef7xc83fs0ftxcd and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- German by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Hindi by @npub1ww6huwu3xye6r05n3qkjeq62wds5pq0jswhl7uc59lchc0n0ns4sdtw5e6 and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Hungarian by @npub1dnvslq0vvrs8d603suykc4harv94yglcxwna9sl2xu8grt2afm3qgfh0tp and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Latvian by @npub1l60stxkwwmkts76kv02vdjppka9uy6y3paztck7paau7g64l687saaw6av
+- Polish by @npub16gjyljum0ksrrm28zzvejydgxwfm7xse98zwc4hlgq8epxeuggushqwyrm and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Brazilian Portuguese by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Slovenian by @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
+- Swedish by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef and @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z