amethyst/docs/changelog/v1.09.00.md

Release v1.09.0: We are going crazy - 2026-05-14

What's New?

• Go live on audio spaces (Nests)
• Marmot Group chats (WhiteNoise)
• Voice and Video calls (Noscall)
• PDF reader
• Favorite algo feeds
• HLS Video Uploads
• Schedule posts for later
• Cast videos to your TV (Chromecast)
• Multiple accounts on Desktop
• Mute a whole conversation thread
• Tap any timestamp to see the exact date and time
• Pull Notification (internal Pokey)
• Local LLM helpers (Pixel 9+, Samsung 25+, Xiaomi 15+)
• amy, a command-line Nostr client

Features

• Voice and Video Calls (NIP-AC) — one-on-one and group WebRTC calls.
  • Full-screen incoming-call UI over the lock screen.
  • PiP, ringtone and vibration.
  • Proximity sensor support.
  • Bluetooth headset routing.
  • Camera switch.
  • Network resilience and default TURN servers.
  • Mid-call peer invites with a 30s timeout and per-peer status.
  • Settings toggle to disable calls.
• Audio Rooms / Nests (NIP-53) — a full revamp.
  • Live chat panel.
  • Reactions overlay and picker.
  • Listener counter.
  • Presence with publishing/onstage tags.
  • Hand-raise queue.
  • Host actions: kick, promote, demote, edit, close room.
  • Per-participant context sheet.
  • Scheduled rooms with a TimePicker and SCHEDULED badge.
  • "Listen to recording" CTA for closed rooms.
  • Share a room as naddr1.
  • Custom room themes and fonts (kind 30312).
  • Home live-bubble row showing follows broadcasting.
  • Host-leave confirmation and default-server prompt.
  • In-app lobby with a chat composer, gating room re-entry.
  • PiP that focuses active speakers.
  • Feed bucketed into Live / Scheduled / Recently ended, with live status verified by current presence.
  • Live audio-level speaker ring.
  • Keeps the screen on while connected.
  • Audio plays through the media volume stream.
• Marmot Encrypted Group Chats (MLS over Nostr / NIP-EE)
  • Create, join and leave groups.
  • Inline group rendering in Messages.
  • Member management with user search.
  • Admin grant/revoke.
  • Group info screen with picture, member list and per-relay freshness.
  • Auto-publish KeyPackage.
  • Reset Marmot State safety valve in Settings.
  • Full RFC 9420 compliance pass (P0/P1/P2).
  • External Commit flow.
  • Retained-epoch decryption for offline catch-up.
  • Required-capabilities advertised on groups; interop fixes for other Marmot clients.
  • Popup notifications for group messages (kind:445).
• Multi-account on Desktop
  • Account switcher dropdown in the sidebar and single-pane layout.
  • Add Account dialog and per-account logout.
  • View-only (npub-only) accounts.
  • Account removal switches to another account or logs out cleanly.
  • Encrypted local account storage (AES-256-GCM).
  • Display names and middle-truncated npubs.
• Schedule posts for later
  • Date/time picker and toolbar toggle in the post composer.
  • Dedicated screen and drawer entry to view, push or delete scheduled posts.
  • Background worker that publishes at the scheduled time.
  • Warning when scheduling without always-on notifications.
• Cast videos to your TV
  • Chromecast casting (Google Play build only).
  • Stop-from-phone button; the local player pauses while casting.
  • Cast button backfilled for accounts that already had video settings.
• Mute a whole thread
  • Mute thread entry in the long-press dropdown and quick-action sheet.
  • Muted threads listed in Security Filters with an unmute action.
  • Muted threads dropped from feeds, notifications and push delivery.
• Configurable home tabs
  • Choose between New Threads, Conversations and Everything.
  • Visibility toggles persist across restarts.
• Configurable bottom navigation bar
  • Pick which screens appear in the bottom bar.
  • Restore-default button in settings.
• Reply and Mention notifications (NIP-10 / NIP-22)
  • Dedicated Mentions channel.
  • Per-thread grouping.
  • Inline reply.
  • All content-event citations routed to Mentions.
  • Opt-in Following / Everyone tab split.
• Filter the home feed in place by hashtag, community, geohash and relay (no navigation away)
• Hashtag and geohash top-nav filters on Pictures, Shorts, Articles, Polls and Products
• NIP-22 comments on external content (hashtags, geohashes, URLs) render a typed reply-context chip and land in the conversations feed
• Interest Sets (NIP-51, kind 30015)
  • List, create, rename, delete and clone interest sets.
  • Public/private hashtag toggle.
  • TopNav filter chips.
• NIP-9A Community Rules
  • Structured rules editor in the new-community flow.
  • Post validation against community rules in the composer.
  • Opt-in moderation feed filter.
• PDF reader
  • Inline PDF previews in feeds.
  • Double-tap to toggle zoom.
  • Zoom-aware hi-res re-render for crisp pinch-zoom.
  • Download and save PDFs to Downloads/Amethyst.
• Multi-wallet NWC
  • Multiple wallets with a balance view.
  • Default picker, rename and reorder.
  • Dedicated Add Wallet screen with Connect Wallet / paste / QR scan.
• Favorite Algo Feeds filter in the Top Nav Bar
• Custom Post creation on Polls / Pictures / Shorts / Longs
• Custom Emoji Packs (NIP-30)
  • Browse Emoji Sets screen for discovering kind 30030 packs.
  • My Emoji List screen for managing your kind 10030 selection.
  • Modernized pack metadata screen with hero image and inline emoji/cover upload.
  • Public/private toggle when adding emoji.
  • Decrypted private emojis surfaced end-to-end.
• Dedicated drawer screens for more content types.
  • Standalone Articles, Products, Public Chats, Communities (NIP-72), Live Streams and Follow Packs screens.
  • Products screen defaults to "Around Me".
• Richer live stream chat.
  • Inline clips (kind 1313) and raids (kind 1312).
  • Inline zap receipts.
  • NIP-75 zap goal pinned at the top.
  • Top zappers leaderboard.
  • Stream clips surfaced in the profile gallery tab.
• Content warnings on media.
  • Grid-level content warnings with distinct reasons.
  • Warning overlaid on the blurhash at media size.
• YouTube-style video quality picker.
  • Feed and PiP default to the lowest HLS resolution.
  • Fullscreen defaults to auto.
• HLS Video uploads (NIP-71)
  • Pick which renditions to upload.
  • See which file is currently uploading.
  • Optional cross-post as a kind-1 note.
  • Generated poster JPEG.
  • Blurhash and thumbhash on every video imeta.
• ThumbHash support alongside BlurHash
  • Used across events, uploads and the UI.
  • Forwarded when adding media to the gallery.
  • Upload failures to generate a blurhash/thumbhash are now surfaced.
• NIP-A3 Payment Targets (kind 10133)
  • Pay action on the note reactions row.
  • Payment-targets button on the profile.
  • Lightning address moved to the wallet setup screen.
  • Alt-text on payment-target events.
• Search power tools
  • Scope, source, follows and sort toggles.
  • Paste an npub1…, nprofile1…, nevent1…, naddr1… or note1… to jump straight to it.
• Markdown renderer — improved typography, blockquote gutter, table styling
• Polls
  • Single-screen creation with a poll-type selector.
  • Open/Closed tabs.
  • "View results" option (prevents voting after viewing).
  • Dismiss button on active-poll cards.
• Badge support Redesigned — You can now create, grant, manage and add/remove badges from your profile.
• Settings revamp
  • Modernized Settings screen.
  • Dedicated Profile UI settings page.
  • Compose Settings screen (auto-draft toggle).
  • Security Filters split into a hub with per-category screens.
• Tap a timestamp to toggle between relative ("2h ago") and absolute date/time, driven by a single shared ticker
• Copy raw JSON of a note from the dropdown menu
• Stale-relay hint on replaceable events, using the NIP-66 relay cache
• Two-stage zap progress on the zap action
• Bulk-remove for blocked users and hidden words
• Jump-to-parent icon on replies in Full UI mode
• Configurable report-warning threshold
• .f4a audio playback

In AI-Ready phones (Pixel 9+, Samsung 25+, Xiaomi 15+):

• AI Writing Help — assistant in the new-post screen.
  • Tone suggestions, precomputed in parallel.
  • Auto language detection.
  • On-device option in Application Preferences.
• AI Alt-Text for images — on-device image description / labeling.
  • Suggestions appear in the upload sheet (Google Play build).

Desktop

• Tor Support — full Tor support on the desktop app.
  • kmp-tor daemon and settings UI.
  • Per-relay routing.
  • .onion badge.
  • Restart-on-toggle.
  • Image loading via Tor.
• Multi-account
  • Sidebar account switcher.
  • Add Account dialog and per-account logout.
  • Encrypted account storage.
• Embedded local relay — an in-process relay with SQLite event persistence
• Custom feeds system
  • Create, pin and inline-switch between custom feeds.
  • Author search in the feed builder (relay NIP-50 + avatars).
• App Drawer with a categorized screen launcher
• Workspace management
  • Save, switch and restore workspaces.
  • Tabs, an editor and unified search.
  • Pin/unpin syncs to the active workspace.
• Namecoin name resolution
  • Namecoin lookups now resolve and surface in search.
  • Follows the import field of name objects (ifa-0001).
  • Added relay.testls.bit ElectrumX endpoints (clearnet TLS, Tor, bare IP).
• Native theming for macOS, GNOME, KDE and Windows (matches platform look and accent colors)
• Relay power tools
  • Dashboard and config editors.
  • Per-screen relay picker.
  • Persistent configuration.
  • Correct counts.
• Messages
  • Draggable divider.
  • Alignment polish and centered empty states.
  • Typography hierarchy and refined dividers.
• macOS polish
  • Dock / Cmd+Tab icon via the Taskbar API.
  • Apple-HIG squircle margins.
  • Transparent window icon.
  • Light-mode primary contrast.
  • Content extends correctly under the title bar.
• Reading layout — width-capped reading column with comfortable side margins for wide windows
• Compact UI
  • Search/Chat/Profile inputs.
  • Settings hierarchy normalized.
  • Tabs-first headers across Home / Reads / Notifications.
  • Whole-card hover on notes.
• Per-OS theming preview flag for testing macOS/GNOME/KDE/Windows looks locally
• Selectable error messages.
• Scrollable single-pane navigation rail.
• Fixes feed loading, repost rendering and Profile back-navigation visibility.

Amy (CLI)

• New amy, a non-interactive CLI Nostr client.
  • Drives the same Quartz + Commons engine as the apps.
  • Available on macOS and Linux from the GitHub Release.
• Subcommands:
  • account / use, profile, post, feed, notes.
  • dm send | list | await | send-file (NIP-17, kind:14 + kind:15).
  • marmot ….
  • store stat | sweep-expired | scrub | compact.
• Cache-first reads from a local file-backed event store.
  • relays.json is gone — kind:10002 / 10050 / 10051 events in the store are the config.
• Secure key storage.
  • Private keys move out of identity.json into the OS keychain or a NIP-49 encrypted file.
  • On-disk data restricted to owner-only.
• Color, human-readable output by default; --json opts in.

Quartz

• Adds NIP-AC — WebRTC call signaling events (offer / answer / ICE / hangup / reject / renegotiate) over EphemeralGiftWrap, multi-device, group calls
• Adds EphemeralGiftWrapEvent (kind 21059) — replaces 20s expiration GiftWraps for call signaling
• Adds NIP-A3 Payment Targets (kind 10133)
• Adds NIP-82 Software Applications (experimental)
• Adds the AdminCommandEvent for audio-room kick (kind 4312)
• Adds the NIP-9A community rules parser + validator (kind:34551)
• Expands NIP-34 git collaboration coverage.
  • Repository State (kind 30618).
  • Pull Requests and PR updates (kinds 1618 / 1619).
  • Git Status events (open / closed / draft / applied).
• Adds the rest of NIP-51 list event kinds and full NIP-53 live-activity rendering
• Adds MLS / Marmot event types and a pure-Kotlin MLS engine with IETF RFC 9420 interop test vectors (no native deps)
• Adds an async SQLite event persistence layer.
  • NIP-09 / NIP-50 / NIP-62 compliance.
  • Room-style connection pool.
• Adds a file-backed event store.
  • flock + transactions.
  • scrub/compact.
  • NIP-50 full-text search.
  • NIP-62 Right-to-Vanish.
  • NIP-01 tiebreaker.
  • NIP-09 created_at window.
  • Deletion-author check.
• Adds a reactive ObservableEventStore layer.
  • A façade that wraps any event store — SQLite-backed, file-backed, or in-memory.
  • Publishes a StoreChange on every accepted insert, delete and expiration sweep.
  • Projections stay in sync without re-querying the store.
  • Ephemeral events (kinds 20000-29999) emit without being persisted.
  • EventStoreProjection turns the change stream into a cold Flow of sealed ProjectionState.
  • Per-filter limits and per-projection NIP-62 vanish scoping.
• Promotes the relay toolkit into the new geode module — a real Nostr relay.
  • Implements NIP-01 and NIP-45.
  • NIP-77 negentropy reconciliation (strfry parity).
  • NIP-86 management API.
  • TOML config and graceful drain.
  • Adaptive connection pooling for 10k+ connections.
• Adds an EventInterner so deserialized events share canonical instances, with an interning event store that interns on insert
• Adds Ktor KMP HTTP implementations alongside OkHttp
• Adds macOS (Apple Silicon), iOS and Linux native targets.
  • Pure-Kotlin Ed25519 and X25519 for the MLS crypto on those platforms.
  • commonMain now compiles for Kotlin/Native.

Crypto and Performance

• Custom secp256k1 implementation, starting to replace fr.acinq.secp256k1
  • Pure-Kotlin core for KMP native targets (macOS / iOS / Linux).
  • C + inline-ASM accelerated path on Android via a JNI bridge.
  • Hardware SHA-256 (SHA-NI on x86_64, ARMv8 CE on ARM64).
  • Comb method for G multiplication → 3× faster sign/keygen.
  • Same-pubkey batch Schnorr verify (5–6× throughput).
  • verifySchnorrFast for Nostr (skips y-parity inversion).
  • 4×64-bit limb representation with lazy field ops and ARM64 assembly.
  • Standalone libsecp256k1-nostr / libschnorr256k1 C project, with Android benchmarks.
• Concurrent caching DNS resolver (SurgeDns)
  • Lock-free DNS cache.
  • 24h positive TTL.
  • Stale-while-revalidate.
  • Persisted across process restarts.
• Smoother video playback
  • Warm ExoPlayer pool and retained warm players.
  • Tuned LoadControl.
  • VideoCache warmup 10s → 1.5s.
  • Stable controller-overlay tree.
• Faster icons — shared FontFamily and TextMeasurer across all Material Symbols
• Faster chat lists — stable list keys and reduced recomposition
• Faster note rendering — cached event-derived values, fewer per-item allocations during feed scroll
• Faster Quartz queries
  • Direct-slot driver for replaceable + addressable lookups.
  • Streaming k-way merge.
  • Smallest-first FTS intersect.
  • Parallel Schnorr verify in the ingest queue.
  • Index-driven fan-out for cache observers.
• Faster rich-text translation
• Thumbnail disk cache for profile pictures; Coil disk-cache eviction moved off the write path to prevent scroll stalls
• Paginated GiftWrap loading for the DM chat list
• Bookmark events preloaded for faster access
• Lifecycle-aware screen subscriptions
  • Feed/screen relay subscriptions pause on background and resume on foreground.
  • 30s grace delay so brief app switches don't churn subscriptions.
• Adaptive video disk cache — sized to 20% of free disk (256 MB–4 GB) instead of a fixed 1 GB, with on-demand HLS videos cached in SimpleCache
• Tuned image/video OkHttp dispatcher and connection pool (16 in-flight per host) to de-serialize feed loading
• Streaming image hashing — computes image hashes without loading the whole file into memory; SHA-256 hasher moved off the thread pool
• GeoHash library rewritten from scratch for performance, dropping an external dependency

QUIC + nestsClient (foundation)

• New pure-Kotlin QUIC v1 + HTTP/3 + WebTransport client (no JNI, no native deps).
  • Powers the NIP-53 audio-rooms over MoQ-transport path.
• Full RFC coverage and stabilization:
  • RFC 9002 loss recovery and retransmission.
  • 0-RTT early data.
  • 1-RTT key update.
  • TLS 1.3 session resumption (PSK).
  • ECN.
  • Connection migration with path validation.
  • Retry and Version Negotiation packet handling.
  • Stateless-reset detection.
  • Broad DoS-hardening / RFC-compliance stabilization sweep.
• Passes the quic-interop-runner test matrix against picoquic and quic-go.
  • Covers handshake, transfer, multiplexing, retry, 0-RTT, key-update, ECN, http3.
  • Includes qlog diagnostics.
• Multiple security and correctness audits.
  • RFC 9001 test vectors.
  • Live interop against aioquic and picoquic.
• nestsClient module
  • MoQ-transport (IETF) reference implementation.
  • Production moq-lite Lite-03/04 codec with version-aware ALPN negotiation.
  • catalog.json publishing aligned with kixelated/hang.
  • Opus + AudioRecord/AudioTrack.
  • Reconnection policy with proactive JWT refresh.
  • Cross-stack (Amethyst ↔ Rust ↔ browser) interop harness in CI.

Improvements and Fixes

• WakeUp Push Notification events — Starting to migrate to a better Push/Loading system
• Pinned notes moved to their own screen
• Left drawer reorganized into collapsible You / Feeds / Create / System sections, with clearer names
• Article writing redesign — banner, tags, slug
• Redesigned long-form article cards
• GIF support
  • Playback controls and autoplay.
  • GIF→MP4 upload conversion option in the upload screen.
  • GIF / image keyboard support in the short post screen and in Marmot, DM and public-channel chat fields.
• Configurable video player buttons in Account Settings
• Autoplay Videos setting (Always / Never), separate from the video-loading toggle
• Drag-and-drop reordering for some relay list settings
• 3-dot options menu on video / picture / file feed cards
• Zoomable media grows from its source bounds, and loads the full-resolution source in the image dialog
• Favorite relays can now be added to the Global Feed
• Configurable max-hashtag spam filter
• Account setting to forward kind 0 events to a local relay
• Relay Sync UI replaced with visual indicators
• Account Settings
  • Split broadcast tracker visibility from Complete UI mode.
  • Hide payment-targets icon by default and place it after Zap.
  • Float the broadcast banner as a rounded card.
• Danger Zone section in settings
• NIP-89 client tag
  • Per-account toggle to disable it, synced via NIP-78 security settings.
  • On by default and moved into Compose settings.
• Local Blossom cache — image and profile-picture fetches route through a local Blossom cache
• Mention preservation in compose:
  • Survives keyboard auto-correction.
  • Partial-overlap edits delete the whole mention.
  • Cursor snaps to mention boundaries.
• Chat cursor jumping fixed
• Avatar zoom-in keeps aspect ratio during the animation
• Profile pictures center-cropped to prevent squashing
• HLS video fixes:
  • Playback routed to the right MediaSource.
  • Multi-rendition videos collapse to a single gallery tile.
  • Render with artwork and a graceful fallback.
• Broken "Pause" action removed from the always-on background notification
• Hand-raise button in audio rooms now has a visible toggled state
• GiftWrap unwrapping for all writable accounts when always-on is enabled
• Search bar bech32 paste navigates instead of running a search
• Top and bottom bars stay visible on non-scrollable lists
• Rich-text translation:
  • Bug, performance and jitter overhaul.
  • {N} placeholders so URLs survive CJK translation.
• Swipe-to-dismiss containers fixed on newer Compose
• Right-to-Vanish settings observe toggles reactively, preserve prior behavior on upgrade
• Relay reconnection:
  • Auto-reconnect after a server-initiated disconnect.
  • Periodic keep-alive to revive relays stuck in long backoff.
• Account settings (profile, follow list, mutes, relay lists, KeyPackages) are republished to newly-selected relays so accounts aren't lost on fresh relays
• Broadcasting relays:
  • Kept out of personal & channel sends.
  • Always included in non-private sends.
  • Fixed an infinite loop in the broadcast-relay computation.
• Tor now falls back to clearnet when bootstrap is stuck
• Android Arti reliability: stale Arti cache cleared on init with retry, SOCKS proxy default port moved with busy-port retry, relay-over-Tor connectivity fixes
• Chess game challenges filtered out of the home feed (ended games only); chess cards show user picture and name instead of hex pubkeys
• Expired polls re-evaluated and removed from notification cards
• NIP-39 external identity claims without a platform separator are rejected
• Dismissible cleanup banner across Pinned Notes, Bookmarks and Bookmark Sets, flagging author-deleted items with a "Remove from list" action
• Bogus Content-Type rejected when saving downloaded media, with URL-extension fallback validation
• NIP-46 bunker decrypt/encrypt response parsing fixed, with a longer timeout
• Hidden DMs no longer counted toward the unread message badge
• Profile header hides the _@ prefix on NIP-05 names
• Foreground-service-not-allowed exception from the background handled gracefully
• Fixes Samsung crash on outgoing call
• Foreground service starts earlier to prevent call death on Android 14+
• Stop ringtone and call notification when rejecting consecutive calls

UI Refresh

• Migrates the icon set from Material Icons to Material Symbols (thin weight) for a more consistent, modern look across the app
• Drops unused legacy drawables
• Bottom-bar icon size bumped to compensate for Material Symbols padding

Build & Documentation

• CI restructure:
  • Splits Android into its own CI job.
  • Adds Android Lint as the first step.
  • Merges test+build to eliminate duplicate compilation.
  • Drops assembleDebug APK uploads.
• Adds a :nestsClient:test step to the desktop CI leg
• Adds a quic-interop-runner CI workflow and a browser-side cross-stack interop workflow
• Broadens libicu Depends so the .deb installs across Debian and Ubuntu
• Adds SECURITY.md with private vulnerability reporting policy
• Moves desktop packaging / AppImage tooling into the desktopApp module
• AGP and dependencies bumped

Contributors

• @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
• @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef
• @npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c
• @npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5
• @npub1a3tx8wcrt789skl6gg7rqwj4wey0j53eesr4z6asd4h4jwrd62jq0wkq4k
• @npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp

Translations

• Czech, German, Swedish, and Portuguese by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef
• Hungarian by @npub1dnvslq0vvrs8d603suykc4harv94yglcxwna9sl2xu8grt2afm3qgfh0tp
• French by @npub106efcyntxc5qwl3w8krrhyt626m59ya2nk9f40px5s968u5xdwhsjsr8fz
• Polish by @npub16gjyljum0ksrrm28zzvejydgxwfm7xse98zwc4hlgq8epxeuggushqwyrm
• Hindi by @npub1ww6huwu3xye6r05n3qkjeq62wds5pq0jswhl7uc59lchc0n0ns4sdtw5e6
• Slovenian by @npub1qqqqqqz7nhdqz3uuwmzlflxt46lyu7zkuqhcapddhgz66c4ddynswreecw
• Bengali by @npub13qtw3yu0uc9r4yj5x0rhgy8nj5q0uyeq0pavkgt9ly69uuzxgkfqwvx23t
• Spanish by @npub1luhyzgce7qtcs6r6v00ryjxza8av8u4dzh3avg0zks38tjktnmxspxq903
• Chinese by hypnotichemionus4 and @npub1gd8e0xfkylc7v8c5a6hkpj4gelwwcy99jt90lqjseqjj2t253s2s6ch58h
• Russian by Anton Zhao