Merge pull request #3753 from vitorpamplona/claude/changelog-1.13-audit

docs(changelog): tighten v1.13.0 highlights and audit against commits since v1.12.6

docs/changelog/github.json

@@ -6,6 +6,7 @@
     "greenart7c3": "npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5",
     "KotlinGeekDev": "npub1a3tx8wcrt789skl6gg7rqwj4wey0j53eesr4z6asd4h4jwrd62jq0wkq4k",
     "mstrofnone": "npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp",
-    "believethehype": "npub1nxa4tywfz9nqp7z9zp7nr7d4nchhclsf58lcqt5y782rmf2hefjquaa6q8"
+    "believethehype": "npub1nxa4tywfz9nqp7z9zp7nr7d4nchhclsf58lcqt5y782rmf2hefjquaa6q8",
+    "dergigi": "npub1dergggklka99wwrs92yz8wdjs952h2ux2ha2ed598ngwu9w7a6fsh9xzpc"
   }
 }

docs/changelog/v1.13.00.md

@@ -1,61 +1,23 @@
-# v1.13.0: Web Apps, Communities & Git
+# v1.13.0: Web Apps, Concord, Buzz, Log in with Amethyst, Git
 
 Highlights:
 
-- Adds an **in-app Browser for Nostr web clients**, with support for **Nostr Web
-  Apps (NIP-5D napplets)** and **static websites (NIP-5A nSites)**. They run in a
-  keyless sandbox that can never touch your private key. Payments always prompt
-  with the amount shown; signing and data access are permission-gated, with the
-  scope you choose when you connect. "Log in with Amethyst" lets Nostr web apps
-  sign in as you.
-- Adds **Communities (Concord)**: a new end-to-end-encrypted communities
-  protocol with channels, invites, roles, moderation, and full history —
-  browsable and chattable from Messages.
-- Adds **Git collaboration (NIP-34)**: browse Nostr git repositories with a
-  full code browser (branches, diffs, syntax highlighting, commit history),
-  review patches and pull requests, and open and label issues — all in-app.
-- Adds a **Remote Signer (NIP-46)**: for the first time, other apps and websites
-  can sign through Amethyst — with informed, per-account consent — whether your
-  key lives in Amethyst or on an external signer like Amber. Also adds a
-  **Privacy Lock** on Desktop that gates the Messages and Wallet columns behind
-  a password.
-- Adds **relay login permissions (NIP-42)**: when a relay asks you to
-  authenticate, choose Once / Always / Never per relay, with one-tap rules to
-  trust relays used by people you follow.
-- Adds **NIP-29 Groups**: relay-hosted group chat with subgroups, custom roles,
-  invite links, threads, and pinned messages.
-- Adds **Buzz workspaces**: a self-hosted space where people and AI agents build
-  together on a relay you own — with native channels, forums, direct messages,
-  live typing and presence, and an agent-owner console for personas, costs, and
-  attestations.
-- Redesigns the **Messages inbox**: groups community and group channels with
-  last-message previews, unread dots, facepiles, live typing, and per-type load
-  toggles.
-- Adds **Blossom file sync**: a media file manager to browse your stored blobs,
-  mirror them across servers, and "Sync all" with progress — including
-  confirm-then-pay for paid servers.
-- Adds **Podcasting 2.0**: shows, episodes, chapters, transcripts, person
-  credits, and per-minute value-for-value Lightning splits.
-- Adds **BOLT12 payments and zaps (NIP-B1)**. Pay a profile's published BOLT12
-  offer. Send self-verifying zaps through a compatible NWC wallet, counted and
-  shown alongside Lightning zaps.
-- Repaints the app around **your chosen accent color**, with font and size
-  options that flow through buttons, badges, and highlights.
-- Adds **proof-of-work (NIP-13)** publishing and **negentropy (NIP-77)** sync.
-
-## Upgrading
-
-- Web apps, napplets and nSites now get **separate storage per account** —
-  cookies, logins and site data no longer leak between the accounts on your
-  device. Existing sites are signed out once as a result; signing back in stores
-  the session under the account you are using, and switching away and back keeps
-  it.
-- Permissions you granted to web apps are likewise **per account** now, so each
-  app asks once more under each account you use it with. A permission granted by
-  one account no longer applies to the others.
-- Apps connected through the remote signer (NIP-46) now **ask before signing a
-  relay login** (NIP-42) instead of approving it automatically under the
-  "Let's be reasonable" trust level.
+- Adds an **in-app Browser** for Nostr WebApps
+- Adds support for **napplets (NIP-5D)** and **nsites (NIP-5A)**
+- Adds **Concord Support (Armada)**.
+- Adds **NIP-29 Groups (Flotilla)**.
+- Adds **Buzz workspaces, with agents**.
+- Adds a **Remote Signer (NIP-46)**.
+- Adds **Git Clone Support (NIP-34)**.
+- Adds **Relay Auth permissions (NIP-42)**.
+- Adds **BitChat Geo-channels**.
+- Adds **Blossom file display and sync**.
+- Adds **Podcasting 2.0**.
+- Adds **BOLT12 payments and zaps (NIP-B1)**.
+- Adds **proof-of-work (NIP-13)** publishing.
+- Redesigns **chat messages**.
+- Redesigns **accent colors**.
+- Redesigns **push notifications**
 
 ## New Features
 
@@ -74,7 +36,7 @@ Highlights:
 - Lets web apps, with your permission, pay through your wallet (NWC), run live
   relay subscriptions and queries, and read your identity (profile, lists, zaps,
   badges) — every capability brokered and permission-gated (once / this session /
-  always).
+  always). Payments always prompt with the amount shown.
 - Pins favorite web apps to the bottom bar as embedded, swap-in-place tabs that
   stay warm between visits.
 - Discovers web apps: the empty browser suggests a curated list plus nSites and
@@ -84,6 +46,13 @@ Highlights:
   can do.
 - Routes nSite web traffic through Tor by default when Tor is active, with a
   per-site onion/globe toggle.
+- Gives each account its own web storage — cookies, logins, and site data no
+  longer leak between the accounts on your device. Sites you were already signed
+  into are signed out once; signing back in stores the session under the account
+  you are using, and switching away and back keeps it.
+- Scopes granted permissions per account too, so each app asks once more under
+  each account you use it with. A grant by one account no longer applies to the
+  others.
 
 ### Communities (Concord)
 
@@ -99,8 +68,8 @@ Highlights:
   indicators.
 - Adds threaded replies (inline or minichat modes) and delivery ticks for your
   own messages.
-- Groups channels by community in Messages with last-message, unread counts,
-  facepiles, and live typing.
+- Groups channels by community in Messages with last-message previews, unread
+  dots, facepiles, live typing, and per-type load toggles.
 - Adds moderation: ban/unban with read-time enforcement, role grants, a "Make
   admin" toggle, and a full member roster. A ban hides a member's posts for
   everyone else; removing their access to the community's keys takes a
@@ -191,6 +160,24 @@ Highlights:
   self-hosted geode relay be the private Buzz workspace via a member-and-agent
   membership policy.
 
+### Chat & Messages
+
+- Redesigns message rendering across every chat — DMs, public chats, groups, and
+  communities — with modern bubbles, swipe-to-reply, send motion and press
+  feedback, per-author name colors, jumbo emoji, day headers drawn above the
+  messages they introduce, and a timestamp on the last message of each author
+  run.
+- Replaces the message 3-dot menu with a compact two-stage long-press sheet that
+  unpacks wrapping reactions and zap-amount presets in place.
+- Renders channel admin events as centered system messages, and hides a reply
+  quote when it targets the message directly above.
+- Replaces the Messages FAB speed-dial with a full-screen, color-coded
+  new-conversation chooser, and adds a Messages settings screen with a
+  grouped-by-relay view and per-type load toggles.
+- Warns about DMs from senders reported by people you follow: flags a reported
+  counterpart on the chat-list row and inside the room, with a per-user
+  report-warning flow.
+
 ### Notifications
 
 - Redesigns push notifications into per-kind, observable, richly-rendered
@@ -198,7 +185,8 @@ Highlights:
   inline image link as the big picture, and attribute a reply's parent to its real
   author.
 - Adds push notifications for Buzz DMs and for bare reactions and reposts to your
-  notes, with repost-mute parity.
+  notes, with repost-mute parity. Auto-dismisses a tray notification once its
+  event is read in-app.
 - Rebuilds the in-app Notifications tab with infinite-scroll paging via a
   look-ahead buffer, time-based history paging with in-feed load markers, and
   auto-retry of stalled or faulty relays with an actionable relay detail.
@@ -214,12 +202,11 @@ Highlights:
   with per-account sheets and one-tap batched approval.
 - Manages connected apps from a dedicated screen with per-app relay list, live
   health, time-bound grants, and instant "forget this app".
-- Adds a Privacy Lock on Desktop: gate the Messages and Wallet columns behind a
-  password, with an auto-lock timeout. It is a screen gate, not encryption at
-  rest — messages continue to sync while it is locked.
 - Adds interactive relay login prompts (NIP-42): choose Once / Always / Never
   per relay, with venue-aware prompts for public chats, communities, and live
-  streams, and one-tap rules to trust relays used by people you follow.
+  streams, and one-tap rules to trust relays used by people you follow. Apps
+  connected through the remote signer now ask before signing a relay login,
+  instead of approving it automatically under "Let's be reasonable".
 
 ### Web of Trust (GrapeRank)
 
@@ -247,6 +234,10 @@ Highlights:
   transcript viewer, and a Top Supporters leaderboard.
 - Adds per-episode reactions and NIP-22 comments, a Podcast Bookmarks screen, and
   value-for-value Lightning splits paid per-minute during real playback.
+- Adds in-app podcast authoring: create and edit shows, episodes, and trailers
+  from an authoring hub, with a value-for-value split editor that adds Nostr
+  recipients by search. Verifies NIP-F4 podcast authors against their kind-10064
+  counter-claims.
 
 ### BOLT12 Payments & Zaps (NIP-B1)
 
@@ -281,8 +272,21 @@ Highlights:
 - Prefers NIP-44 encryption for NWC when the wallet advertises it. Adds a NWC-07
   deep-link pairing helper. Posts a tray notification for incoming non-zap
   Lightning payments.
-- Adds a data-usage screen with stat tiles, a trend chart, proportion bars, and a
-  live memory card.
+
+### Battery, Data & Background Service
+
+- Adds a resource-usage ledger: on-device battery and data accounting across
+  relay connections, media, HTTP, proof-of-work, Tor, calls, decrypts, and
+  remote signs, with per-screen foreground time and reconnect-churn tracking.
+  Optional NIP-17 reports mail the summary to yourself.
+- Presents it on a usage screen with stat tiles, a trend chart, proportion bars,
+  cellular-first bars, a Tor card, actionable insights, and a live memory card.
+- Adds a master switch for the always-on background notification service with
+  per-account participation, a cost card that links to notification settings,
+  and a distinct status-bar icon.
+- Scales `LocalCache` pruning to the OS memory-pressure level, and trims feed
+  lists, rich-text/robohash/relay-info caches, the image cache, and the player
+  warm pool under pressure.
 
 ### Look, Media & Navigation
 
@@ -304,8 +308,19 @@ Highlights:
 - Redesigns the bottom-bar setup with a live preview, drag-to-reorder, and real
   favicons; the default bar becomes Home, Messages, Wallet, Browser,
   Notifications.
+- Adapts the app shell to large screens: tier-scaled navigation transitions, a
+  reading-column width cap on wide panes, and a two-pane Messages layout.
+- Nicknames people with NIP-85 contact cards (kind 30382) signed by your account
+  key. The nickname shows above their real display name on the profile and
+  supports custom emoji.
 - Adds fitness support: renders POWR strength workouts (kind 1301) and exercise
-  templates (kind 33401) as cards.
+  templates (kind 33401) as cards, and merges close-by Health Connect sessions of
+  the same type.
+- Renders Birdstar bird detections (kind 2473) with common-name titles and
+  Wikidata links, surfaces Birdex life lists on home and profile, and renders PS1
+  memory-card saves (kind 38192) with an animated BIOS icon.
+- Adds a compose signature pre-filled in text-based post screens, and an optional
+  subject/title field in the short-note composer.
 - Renders NIP-30 custom-emoji reactions as an avatar badge, a lone zap/nutzap as
   a large activity card, and NIP-84 highlights from web highlighter clients.
 - Supports NIP-51 mute-list hashtag entries and public-chat reply notifications.
@@ -328,8 +343,8 @@ Highlights:
   fingerprints, a live negentropy index, and an allocation-free idle watchdog.
 - Prefetches media and pre-parses note text ahead of the viewport, adds a k-way
   merge for the home feed, and pins indexes for multi-author queries.
-- Isolates WebSocket frame dispatch onto a dedicated pool, adopts a caching event
-  decoder across Android/Desktop/CLI, and keeps light/dark resolution O(1) after
+- Adopts a caching event decoder across Android/Desktop/CLI, batches Schnorr
+  verification off the receive path, and keeps light/dark resolution O(1) after
   an accent change.
 - Parallelizes Blossom "Sync all", prefetches a joined group's history, and mines
   proof-of-work on half the device's cores.
@@ -347,11 +362,19 @@ Highlights:
 - Keeps live HLS streams playing and caches only proven on-demand HLS; shows a
   browser-fallback overlay when a decoder stalls and pauses looping videos after
   5 plays.
-- Adds an HTTP/2 keepalive ping to stop stale-connection image stalls, and trims
-  the image cache and player warm pool under memory pressure.
+- Adds an HTTP/2 keepalive ping to stop stale-connection image stalls.
 - Hardens the relay client: enforces blocked relays on every REQ/COUNT/publish,
   backs off from REQs relays repeatedly refuse, drops relays that fail hard
-  during crawls, and fixes reconnect backoff on network/transport changes.
+  during crawls, caches each relay's advertised LIMITS, and fixes reconnect
+  backoff on network/transport changes.
+- Shows and edits Marmot (MLS) group icons in the feed and in group metadata,
+  interoperable with other Marmot clients.
+- Opens zaps and reactions in their own thread view, turns Notify chips into bell
+  mute-toggles that list every thread member, and replies with kind 1111 to
+  Amethyst's own kind-1 thread roots.
+- Adds search, a local filter, and a top-nav feed filter to the App
+  Recommendations screen, and shows a website's favicon and domain across every
+  browser-connected app view.
 - Fixes nutzap relay routing to receive/advertise on inbox/DM (kind 10019)
   relays instead of outbox.
 - Fixes Concord invite handling (revocation, keyless CORD-05, clearer failure
@@ -361,9 +384,6 @@ Highlights:
   relays so cold boot no longer refetches, shows channels on Messages as soon as
   the control plane folds, warms channel previews so the list fills without opening
   each channel, and rank-gates the Ban/Remove affordances (CORD-04).
-- Warns about DMs from senders reported by people you follow: flags a reported
-  counterpart on the chat-list row and inside the room, with a per-user
-  report-warning flow.
 - Sizes the video player box so live streams stop rendering black bars, and
   enforces the decoder budget when acquiring players.
 - Stops stamping our client tag on someone else's event template so external
@@ -406,8 +426,10 @@ Highlights:
   relay lists and account/Blossom config from outbox relays, and stops falling
   back to connected relays.
 - Adds Web-of-Trust score badges, Follow Packs (NIP-51) discovery with one-tap
-  follow, note scheduling, opt-in NIP-37 draft sync, a Privacy Lock for Messages
-  and the Wallet column, and a hashtag-spam filter.
+  follow, note scheduling, opt-in NIP-37 draft sync, and a hashtag-spam filter.
+- Adds a Privacy Lock: gate the Messages and Wallet columns behind a password,
+  with an auto-lock timeout. It is a screen gate, not encryption at rest —
+  messages continue to sync while it is locked.
 - Renders rich text through the shared core (removes the desktop-only fork) and
   ships as a Flatpak bundle.
 - Adds moderation & safety: mute/block and NIP-56 report actions in the note menu
@@ -536,9 +558,9 @@ Highlights:
 - @npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c
 - @npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp
 - @npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5
+- @npub1dergggklka99wwrs92yz8wdjs952h2ux2ha2ed598ngwu9w7a6fsh9xzpc
 - roguehashrate
 - LubuSeb
-- dergigi
 
 ## Translations
 

gradle/libs.versions.toml

@@ -46,7 +46,7 @@ languageId = "17.0.6"
 lifecycleRuntimeKtx = "2.11.0"
 lightcompressor-enhanced = "2.2.1"
 jlatexmath = "1.5"
-markdown = "f92ef49c9d"
+markdown = "4d3b3dd173"
 highlights = "1.1.0"
 material3 = "1.9.0"
 media3 = "1.10.1"
@@ -63,7 +63,7 @@ schnorr256k1Kmp = "1.0.5"
 securityCryptoKtx = "1.1.0"
 slf4j = "2.0.18"
 sonarqubeGradlePlugin = "7.3.1.8318"
-spotless = "8.8.0"
+spotless = "8.9.0"
 streamWebrtcAndroid = "1.3.10"
 translate = "17.0.3"
 jetbrainsCompose = "1.11.1"