amethyst/docs/changelog/v1.09.00.md

# [Release v1.09.0: We are going crazy](https://github.com/vitorpamplona/amethyst/releases/tag/v1.09.0) - 2026-05-14

What's New?
- Go live on audio spaces (Nests)
- Marmot Group chats (WhiteNoise)
- Voice and Video calls (Noscall)
- PDF reader
- Favorite algo feeds
- HLS Video Uploads
- Schedule posts for later
- Cast videos to your TV (Chromecast)
- Multiple accounts on Desktop
- Mute a whole conversation thread
- Tap any timestamp to see the exact date and time
- Pull Notification (internal Pokey)
- Local LLM helpers (Pixel 9+, Samsung 25+, Xiaomi 15+)
- `amy`, a command-line Nostr client

## Features

- Voice and Video Calls (NIP-AC) — one-on-one and group WebRTC calls.
  - Full-screen incoming-call UI over the lock screen.
  - PiP, ringtone and vibration.
  - Proximity sensor support.
  - Bluetooth headset routing.
  - Camera switch.
  - Network resilience and default TURN servers.
  - Mid-call peer invites with a 30s timeout and per-peer status.
  - Settings toggle to disable calls.
- Audio Rooms / Nests (NIP-53) — a full revamp.
  - Live chat panel.
  - Reactions overlay and picker.
  - Listener counter.
  - Presence with publishing/onstage tags.
  - Hand-raise queue.
  - Host actions: kick, promote, demote, edit, close room.
  - Per-participant context sheet.
  - Scheduled rooms with a TimePicker and SCHEDULED badge.
  - "Listen to recording" CTA for closed rooms.
  - Share a room as `naddr1`.
  - Custom room themes and fonts (kind 30312).
  - Home live-bubble row showing follows broadcasting.
  - Host-leave confirmation and default-server prompt.
  - In-app lobby with a chat composer, gating room re-entry.
  - PiP that focuses active speakers.
  - Feed bucketed into Live / Scheduled / Recently ended, with live status verified by current presence.
  - Live audio-level speaker ring.
  - Keeps the screen on while connected.
  - Audio plays through the media volume stream.
- Marmot Encrypted Group Chats (MLS over Nostr / NIP-EE)
  - Create, join and leave groups.
  - Inline group rendering in Messages.
  - Member management with user search.
  - Admin grant/revoke.
  - Group info screen with picture, member list and per-relay freshness.
  - Auto-publish KeyPackage.
  - Reset Marmot State safety valve in Settings.
  - Full RFC 9420 compliance pass (P0/P1/P2).
  - External Commit flow.
  - Retained-epoch decryption for offline catch-up.
  - Required-capabilities advertised on groups; interop fixes for other Marmot clients.
  - Popup notifications for group messages (kind:445).
- Multi-account on Desktop
  - Account switcher dropdown in the sidebar and single-pane layout.
  - Add Account dialog and per-account logout.
  - View-only (npub-only) accounts.
  - Account removal switches to another account or logs out cleanly.
  - Encrypted local account storage (AES-256-GCM).
  - Display names and middle-truncated npubs.
- Schedule posts for later
  - Date/time picker and toolbar toggle in the post composer.
  - Dedicated screen and drawer entry to view, push or delete scheduled posts.
  - Background worker that publishes at the scheduled time.
  - Warning when scheduling without always-on notifications.
- Cast videos to your TV
  - Chromecast casting (Google Play build only).
  - Stop-from-phone button; the local player pauses while casting.
  - Cast button backfilled for accounts that already had video settings.
- Mute a whole thread
  - Mute thread entry in the long-press dropdown and quick-action sheet.
  - Muted threads listed in Security Filters with an unmute action.
  - Muted threads dropped from feeds, notifications and push delivery.
- Configurable home tabs
  - Choose between New Threads, Conversations and Everything.
  - Visibility toggles persist across restarts.
- Configurable bottom navigation bar
  - Pick which screens appear in the bottom bar.
  - Restore-default button in settings.
- Reply and Mention notifications (NIP-10 / NIP-22)
  - Dedicated Mentions channel.
  - Per-thread grouping.
  - Inline reply.
  - All content-event citations routed to Mentions.
  - Opt-in Following / Everyone tab split.
- Filter the home feed in place by hashtag, community, geohash and relay (no navigation away)
- Hashtag and geohash top-nav filters on Pictures, Shorts, Articles, Polls and Products
- NIP-22 comments on external content (hashtags, geohashes, URLs) render a typed reply-context chip and land in the conversations feed
- Interest Sets (NIP-51, kind 30015)
  - List, create, rename, delete and clone interest sets.
  - Public/private hashtag toggle.
  - TopNav filter chips.
- NIP-9A Community Rules
  - Structured rules editor in the new-community flow.
  - Post validation against community rules in the composer.
  - Opt-in moderation feed filter.
- PDF reader
  - Inline PDF previews in feeds.
  - Double-tap to toggle zoom.
  - Zoom-aware hi-res re-render for crisp pinch-zoom.
  - Download and save PDFs to Downloads/Amethyst.
- Multi-wallet NWC
  - Multiple wallets with a balance view.
  - Default picker, rename and reorder.
  - Dedicated Add Wallet screen with Connect Wallet / paste / QR scan.
- Favorite Algo Feeds filter in the Top Nav Bar
- Custom Post creation on Polls / Pictures / Shorts / Longs
- Custom Emoji Packs (NIP-30)
  - Browse Emoji Sets screen for discovering kind 30030 packs.
  - My Emoji List screen for managing your kind 10030 selection.
  - Modernized pack metadata screen with hero image and inline emoji/cover upload.
  - Public/private toggle when adding emoji.
  - Decrypted private emojis surfaced end-to-end.
- Dedicated drawer screens for more content types.
  - Standalone Articles, Products, Public Chats, Communities (NIP-72), Live Streams and Follow Packs screens.
  - Products screen defaults to "Around Me".
- Richer live stream chat.
  - Inline clips (kind 1313) and raids (kind 1312).
  - Inline zap receipts.
  - NIP-75 zap goal pinned at the top.
  - Top zappers leaderboard.
  - Stream clips surfaced in the profile gallery tab.
- Content warnings on media.
  - Grid-level content warnings with distinct reasons.
  - Warning overlaid on the blurhash at media size.
- YouTube-style video quality picker.
  - Feed and PiP default to the lowest HLS resolution.
  - Fullscreen defaults to auto.
- HLS Video uploads (NIP-71)
  - Pick which renditions to upload.
  - See which file is currently uploading.
  - Optional cross-post as a kind-1 note.
  - Generated poster JPEG.
  - Blurhash and thumbhash on every video imeta.
- ThumbHash support alongside BlurHash
  - Used across events, uploads and the UI.
  - Forwarded when adding media to the gallery.
  - Upload failures to generate a blurhash/thumbhash are now surfaced.
- NIP-A3 Payment Targets (kind 10133)
  - Pay action on the note reactions row.
  - Payment-targets button on the profile.
  - Lightning address moved to the wallet setup screen.
  - Alt-text on payment-target events.
- Search power tools
  - Scope, source, follows and sort toggles.
  - Paste an `npub1…`, `nprofile1…`, `nevent1…`, `naddr1…` or `note1…` to jump straight to it.
- Markdown renderer — improved typography, blockquote gutter, table styling
- Polls
  - Single-screen creation with a poll-type selector.
  - Open/Closed tabs.
  - "View results" option (prevents voting after viewing).
  - Dismiss button on active-poll cards.
- Badge support Redesigned — You can now create, grant, manage and add/remove badges from your profile.
- Settings revamp
  - Modernized Settings screen.
  - Dedicated Profile UI settings page.
  - Compose Settings screen (auto-draft toggle).
  - Security Filters split into a hub with per-category screens.
- Tap a timestamp to toggle between relative ("2h ago") and absolute date/time, driven by a single shared ticker
- Copy raw JSON of a note from the dropdown menu
- Stale-relay hint on replaceable events, using the NIP-66 relay cache
- Two-stage zap progress on the zap action
- Bulk-remove for blocked users and hidden words
- Jump-to-parent icon on replies in Full UI mode
- Configurable report-warning threshold
- `.f4a` audio playback

## In AI-Ready phones (Pixel 9+, Samsung 25+, Xiaomi 15+):
- AI Writing Help — assistant in the new-post screen.
  - Tone suggestions, precomputed in parallel.
  - Auto language detection.
  - On-device option in Application Preferences.
- AI Alt-Text for images — on-device image description / labeling.
  - Suggestions appear in the upload sheet (Google Play build).

## Desktop

- Tor Support — full Tor support on the desktop app.
  - kmp-tor daemon and settings UI.
  - Per-relay routing.
  - `.onion` badge.
  - Restart-on-toggle.
  - Image loading via Tor.
- Multi-account
  - Sidebar account switcher.
  - Add Account dialog and per-account logout.
  - Encrypted account storage.
- Embedded local relay — an in-process relay with SQLite event persistence
- Custom feeds system
  - Create, pin and inline-switch between custom feeds.
  - Author search in the feed builder (relay NIP-50 + avatars).
- App Drawer with a categorized screen launcher
- Workspace management
  - Save, switch and restore workspaces.
  - Tabs, an editor and unified search.
  - Pin/unpin syncs to the active workspace.
- Namecoin name resolution
  - Namecoin lookups now resolve and surface in search.
  - Follows the `import` field of name objects (ifa-0001).
  - Added `relay.testls.bit` ElectrumX endpoints (clearnet TLS, Tor, bare IP).
- Native theming for macOS, GNOME, KDE and Windows (matches platform look and accent colors)
- Relay power tools
  - Dashboard and config editors.
  - Per-screen relay picker.
  - Persistent configuration.
  - Correct counts.
- Messages
  - Draggable divider.
  - Alignment polish and centered empty states.
  - Typography hierarchy and refined dividers.
- macOS polish
  - Dock / Cmd+Tab icon via the Taskbar API.
  - Apple-HIG squircle margins.
  - Transparent window icon.
  - Light-mode primary contrast.
  - Content extends correctly under the title bar.
- Reading layout — width-capped reading column with comfortable side margins for wide windows
- Compact UI
  - Search/Chat/Profile inputs.
  - Settings hierarchy normalized.
  - Tabs-first headers across Home / Reads / Notifications.
  - Whole-card hover on notes.
- Per-OS theming preview flag for testing macOS/GNOME/KDE/Windows looks locally
- Selectable error messages.
- Scrollable single-pane navigation rail.
- Fixes feed loading, repost rendering and Profile back-navigation visibility.

## Amy (CLI)

- New `amy`, a non-interactive CLI Nostr client.
  - Drives the same Quartz + Commons engine as the apps.
  - Available on macOS and Linux from the GitHub Release.
- Subcommands:
  - `account` / `use`, `profile`, `post`, `feed`, `notes`.
  - `dm send | list | await | send-file` (NIP-17, kind:14 + kind:15).
  - `marmot …`.
  - `store stat | sweep-expired | scrub | compact`.
- Cache-first reads from a local file-backed event store.
  - `relays.json` is gone — `kind:10002 / 10050 / 10051` events in the store *are* the config.
- Secure key storage.
  - Private keys move out of `identity.json` into the OS keychain or a NIP-49 encrypted file.
  - On-disk data restricted to owner-only.
- Color, human-readable output by default; `--json` opts in.

## Quartz

- Adds NIP-AC — WebRTC call signaling events (offer / answer / ICE / hangup / reject / renegotiate) over EphemeralGiftWrap, multi-device, group calls
- Adds EphemeralGiftWrapEvent (kind 21059) — replaces 20s expiration GiftWraps for call signaling
- Adds NIP-A3 Payment Targets (kind 10133)
- Adds NIP-82 Software Applications (experimental)
- Adds the AdminCommandEvent for audio-room kick (kind 4312)
- Adds the NIP-9A community rules parser + validator (kind:34551)
- Expands NIP-34 git collaboration coverage.
  - Repository State (kind 30618).
  - Pull Requests and PR updates (kinds 1618 / 1619).
  - Git Status events (open / closed / draft / applied).
- Adds the rest of NIP-51 list event kinds and full NIP-53 live-activity rendering
- Adds MLS / Marmot event types and a pure-Kotlin MLS engine with IETF RFC 9420 interop test vectors (no native deps)
- Adds an async SQLite event persistence layer.
  - NIP-09 / NIP-50 / NIP-62 compliance.
  - Room-style connection pool.
- Adds a file-backed event store.
  - flock + transactions.
  - scrub/compact.
  - NIP-50 full-text search.
  - NIP-62 Right-to-Vanish.
  - NIP-01 tiebreaker.
  - NIP-09 created_at window.
  - Deletion-author check.
- Adds a reactive `ObservableEventStore` layer.
  - A façade that wraps any event store — SQLite-backed, file-backed, or in-memory.
  - Publishes a `StoreChange` on every accepted insert, delete and expiration sweep.
  - Projections stay in sync without re-querying the store.
  - Ephemeral events (kinds 20000-29999) emit without being persisted.
  - `EventStoreProjection` turns the change stream into a cold `Flow` of sealed `ProjectionState`.
  - Per-filter limits and per-projection NIP-62 vanish scoping.
- Promotes the relay toolkit into the new `geode` module — a real Nostr relay.
  - Implements NIP-01 and NIP-45.
  - NIP-77 negentropy reconciliation (strfry parity).
  - NIP-86 management API.
  - TOML config and graceful drain.
  - Adaptive connection pooling for 10k+ connections.
- Adds an EventInterner so deserialized events share canonical instances, with an interning event store that interns on insert
- Adds Ktor KMP HTTP implementations alongside OkHttp
- Adds macOS (Apple Silicon), iOS and Linux native targets.
  - Pure-Kotlin Ed25519 and X25519 for the MLS crypto on those platforms.
  - `commonMain` now compiles for Kotlin/Native.

## Crypto and Performance

- Custom secp256k1 implementation, starting to replace `fr.acinq.secp256k1`
  - Pure-Kotlin core for KMP native targets (macOS / iOS / Linux).
  - C + inline-ASM accelerated path on Android via a JNI bridge.
  - Hardware SHA-256 (SHA-NI on x86_64, ARMv8 CE on ARM64).
  - Comb method for G multiplication → 3× faster sign/keygen.
  - Same-pubkey batch Schnorr verify (5–6× throughput).
  - `verifySchnorrFast` for Nostr (skips y-parity inversion).
  - 4×64-bit limb representation with lazy field ops and ARM64 assembly.
  - Standalone `libsecp256k1-nostr` / `libschnorr256k1` C project, with Android benchmarks.
- Concurrent caching DNS resolver (SurgeDns)
  - Lock-free DNS cache.
  - 24h positive TTL.
  - Stale-while-revalidate.
  - Persisted across process restarts.
- Smoother video playback
  - Warm ExoPlayer pool and retained warm players.
  - Tuned LoadControl.
  - VideoCache warmup 10s → 1.5s.
  - Stable controller-overlay tree.
- Faster icons — shared FontFamily and TextMeasurer across all Material Symbols
- Faster chat lists — stable list keys and reduced recomposition
- Faster note rendering — cached event-derived values, fewer per-item allocations during feed scroll
- Faster Quartz queries
  - Direct-slot driver for replaceable + addressable lookups.
  - Streaming k-way merge.
  - Smallest-first FTS intersect.
  - Parallel Schnorr verify in the ingest queue.
  - Index-driven fan-out for cache observers.
- Faster rich-text translation
- Thumbnail disk cache for profile pictures; Coil disk-cache eviction moved off the write path to prevent scroll stalls
- Paginated GiftWrap loading for the DM chat list
- Bookmark events preloaded for faster access
- Lifecycle-aware screen subscriptions
  - Feed/screen relay subscriptions pause on background and resume on foreground.
  - 30s grace delay so brief app switches don't churn subscriptions.
- Adaptive video disk cache — sized to 20% of free disk (256 MB–4 GB) instead of a fixed 1 GB, with on-demand HLS videos cached in SimpleCache
- Tuned image/video OkHttp dispatcher and connection pool (16 in-flight per host) to de-serialize feed loading
- Streaming image hashing — computes image hashes without loading the whole file into memory; SHA-256 hasher moved off the thread pool
- GeoHash library rewritten from scratch for performance, dropping an external dependency

## QUIC + nestsClient (foundation)

- New pure-Kotlin QUIC v1 + HTTP/3 + WebTransport client (no JNI, no native deps).
  - Powers the NIP-53 audio-rooms over MoQ-transport path.
- Full RFC coverage and stabilization:
  - RFC 9002 loss recovery and retransmission.
  - 0-RTT early data.
  - 1-RTT key update.
  - TLS 1.3 session resumption (PSK).
  - ECN.
  - Connection migration with path validation.
  - Retry and Version Negotiation packet handling.
  - Stateless-reset detection.
  - Broad DoS-hardening / RFC-compliance stabilization sweep.
- Passes the quic-interop-runner test matrix against picoquic and quic-go.
  - Covers handshake, transfer, multiplexing, retry, 0-RTT, key-update, ECN, http3.
  - Includes qlog diagnostics.
- Multiple security and correctness audits.
  - RFC 9001 test vectors.
  - Live interop against aioquic and picoquic.
- `nestsClient` module
  - MoQ-transport (IETF) reference implementation.
  - Production moq-lite Lite-03/04 codec with version-aware ALPN negotiation.
  - `catalog.json` publishing aligned with kixelated/hang.
  - Opus + AudioRecord/AudioTrack.
  - Reconnection policy with proactive JWT refresh.
  - Cross-stack (Amethyst ↔ Rust ↔ browser) interop harness in CI.

## Improvements and Fixes
- WakeUp Push Notification events — Starting to migrate to a better Push/Loading system
- Pinned notes moved to their own screen
- Left drawer reorganized into collapsible You / Feeds / Create / System sections, with clearer names
- Article writing redesign — banner, tags, slug
- Redesigned long-form article cards
- GIF support
  - Playback controls and autoplay.
  - GIF→MP4 upload conversion option in the upload screen.
  - GIF / image keyboard support in the short post screen and in Marmot, DM and public-channel chat fields.
- Configurable video player buttons in Account Settings
- Autoplay Videos setting (Always / Never), separate from the video-loading toggle
- Drag-and-drop reordering for some relay list settings
- 3-dot options menu on video / picture / file feed cards
- Zoomable media grows from its source bounds, and loads the full-resolution source in the image dialog
- Favorite relays can now be added to the Global Feed
- Configurable max-hashtag spam filter
- Account setting to forward kind 0 events to a local relay
- Relay Sync UI replaced with visual indicators
- Account Settings
  - Split broadcast tracker visibility from Complete UI mode.
  - Hide payment-targets icon by default and place it after Zap.
  - Float the broadcast banner as a rounded card.
- Danger Zone section in settings
- NIP-89 client tag
  - Per-account toggle to disable it, synced via NIP-78 security settings.
  - On by default and moved into Compose settings.
- Local Blossom cache — image and profile-picture fetches route through a local Blossom cache
- Mention preservation in compose:
  - Survives keyboard auto-correction.
  - Partial-overlap edits delete the whole mention.
  - Cursor snaps to mention boundaries.
- Chat cursor jumping fixed
- Avatar zoom-in keeps aspect ratio during the animation
- Profile pictures center-cropped to prevent squashing
- HLS video fixes:
  - Playback routed to the right MediaSource.
  - Multi-rendition videos collapse to a single gallery tile.
  - Render with artwork and a graceful fallback.
- Broken "Pause" action removed from the always-on background notification
- Hand-raise button in audio rooms now has a visible toggled state
- GiftWrap unwrapping for all writable accounts when always-on is enabled
- Search bar bech32 paste navigates instead of running a search
- Top and bottom bars stay visible on non-scrollable lists
- Rich-text translation:
  - Bug, performance and jitter overhaul.
  - `{N}` placeholders so URLs survive CJK translation.
- Swipe-to-dismiss containers fixed on newer Compose
- Right-to-Vanish settings observe toggles reactively, preserve prior behavior on upgrade
- Relay reconnection:
  - Auto-reconnect after a server-initiated disconnect.
  - Periodic keep-alive to revive relays stuck in long backoff.
- Account settings (profile, follow list, mutes, relay lists, KeyPackages) are republished to newly-selected relays so accounts aren't lost on fresh relays
- Broadcasting relays:
  - Kept out of personal & channel sends.
  - Always included in non-private sends.
  - Fixed an infinite loop in the broadcast-relay computation.
- Tor now falls back to clearnet when bootstrap is stuck
- Android Arti reliability: stale Arti cache cleared on init with retry, SOCKS proxy default port moved with busy-port retry, relay-over-Tor connectivity fixes
- Chess game challenges filtered out of the home feed (ended games only); chess cards show user picture and name instead of hex pubkeys
- Expired polls re-evaluated and removed from notification cards
- NIP-39 external identity claims without a platform separator are rejected
- Dismissible cleanup banner across Pinned Notes, Bookmarks and Bookmark Sets, flagging author-deleted items with a "Remove from list" action
- Bogus Content-Type rejected when saving downloaded media, with URL-extension fallback validation
- NIP-46 bunker decrypt/encrypt response parsing fixed, with a longer timeout
- Hidden DMs no longer counted toward the unread message badge
- Profile header hides the `_@` prefix on NIP-05 names
- Foreground-service-not-allowed exception from the background handled gracefully
- Fixes Samsung crash on outgoing call
- Foreground service starts earlier to prevent call death on Android 14+
- Stop ringtone and call notification when rejecting consecutive calls

## UI Refresh

- Migrates the icon set from Material Icons to Material Symbols (thin weight) for a more consistent, modern look across the app
- Drops unused legacy drawables
- Bottom-bar icon size bumped to compensate for Material Symbols padding

## Build & Documentation

- CI restructure:
  - Splits Android into its own CI job.
  - Adds Android Lint as the first step.
  - Merges test+build to eliminate duplicate compilation.
  - Drops `assembleDebug` APK uploads.
- Adds a `:nestsClient:test` step to the desktop CI leg
- Adds a quic-interop-runner CI workflow and a browser-side cross-stack interop workflow
- Broadens `libicu` Depends so the `.deb` installs across Debian and Ubuntu
- Adds `SECURITY.md` with private vulnerability reporting policy
- Moves desktop packaging / AppImage tooling into the `desktopApp` module
- AGP and dependencies bumped

## Contributors

- @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z
- @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef
- @npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c
- @npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5
- @npub1a3tx8wcrt789skl6gg7rqwj4wey0j53eesr4z6asd4h4jwrd62jq0wkq4k
- @npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp

## Translations

- Czech, German, Swedish, and Portuguese by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef
- Hungarian by @npub1dnvslq0vvrs8d603suykc4harv94yglcxwna9sl2xu8grt2afm3qgfh0tp
- French by @npub106efcyntxc5qwl3w8krrhyt626m59ya2nk9f40px5s968u5xdwhsjsr8fz
- Polish by @npub16gjyljum0ksrrm28zzvejydgxwfm7xse98zwc4hlgq8epxeuggushqwyrm
- Hindi by @npub1ww6huwu3xye6r05n3qkjeq62wds5pq0jswhl7uc59lchc0n0ns4sdtw5e6
- Slovenian by @npub1qqqqqqz7nhdqz3uuwmzlflxt46lyu7zkuqhcapddhgz66c4ddynswreecw
- Bengali by @npub13qtw3yu0uc9r4yj5x0rhgy8nj5q0uyeq0pavkgt9ly69uuzxgkfqwvx23t
- Spanish by @npub1luhyzgce7qtcs6r6v00ryjxza8av8u4dzh3avg0zks38tjktnmxspxq903
- Chinese by hypnotichemionus4 and @npub1gd8e0xfkylc7v8c5a6hkpj4gelwwcy99jt90lqjseqjj2t253s2s6ch58h
- Russian by Anton Zhao