#Amethyst v1.09.0: We are going crazy
- Go live on audio spaces (Nests)
- Marmot Group chats (WhiteNoise)
- Voice and Video calls (Noscall)
- PDF reader
- Favorite algo feeds
- HLS Video Uploads
- Schedule posts for later
- Cast videos to your TV (Chromecast)
- Mute a whole conversation thread
- Pull Notification (internal Pokey)
- Local LLMs (Pixel 9+, Samsung 25+, Xiaomi 15+)
- `amy`, a command-line Nostr client
## Features
- Voice and Video Calls (NIP-AC) — one-on-one and group WebRTC calls.
- Full-screen incoming-call UI over the lock screen.
- PiP, ringtone and vibration.
- Proximity sensor support.
- Bluetooth headset routing.
- Camera switch.
- Network resilience and default TURN servers.
- Mid-call peer invites with a 30s timeout and per-peer status.
- Settings toggle to disable calls.
- Audio Rooms / Nests (NIP-53) — a full revamp.
- Live chat panel.
- Reactions overlay and picker.
- Listener counter.
- Presence with publishing/onstage tags.
- Hand-raise queue.
- Host actions: kick, promote, demote, edit, close room.
- Per-participant context sheet.
- Scheduled rooms with a TimePicker and SCHEDULED badge.
- "Listen to recording" CTA for closed rooms.
- Share a room as `naddr1`.
- Custom room themes and fonts (kind 30312).
- Home live-bubble row showing follows broadcasting.
- Host-leave confirmation and default-server prompt.
- In-app lobby with a chat composer, gating room re-entry.
- PiP that focuses active speakers.
- Feed bucketed into Live / Scheduled / Recently ended, with live status verified by current presence.
- Live audio-level speaker ring.
- Keeps the screen on while connected.
- Audio plays through the media volume stream.
- Marmot Encrypted Group Chats (MLS over Nostr / NIP-EE)
- Create, join and leave groups.
- Inline group rendering in Messages.
- Member management with user search.
- Admin grant/revoke.
- Group info screen with picture, member list and per-relay freshness.
- Auto-publish KeyPackage.
- Reset Marmot State safety valve in Settings.
- Full RFC 9420 compliance pass (P0/P1/P2).
- External Commit flow.
- Retained-epoch decryption for offline catch-up.
- Required-capabilities advertised on groups; interop fixes for other Marmot clients.
- Popup notifications for group messages (kind:445).
- Multi-account on Desktop
- Account switcher dropdown in the sidebar and single-pane layout.
- Add Account dialog and per-account logout.
- View-only (npub-only) accounts.
- Account removal switches to another account or logs out cleanly.
- Encrypted local account storage (AES-256-GCM).
- Display names and middle-truncated npubs.
- Schedule posts for later
- Date/time picker and toolbar toggle in the post composer.
- Dedicated screen and drawer entry to view, push or delete scheduled posts.
- Background worker that publishes at the scheduled time.
- Warning when scheduling without always-on notifications.
- Cast videos to your TV
- Chromecast casting (Google Play build only).
- Stop-from-phone button; the local player pauses while casting.
- Cast button backfilled for accounts that already had video settings.
- Mute a whole thread
- Mute thread entry in the long-press dropdown and quick-action sheet.
- Muted threads listed in Security Filters with an unmute action.
- Muted threads dropped from feeds, notifications and push delivery.
- Configurable home tabs
- Choose between New Threads, Conversations and Everything.
- Visibility toggles persist across restarts.
- Configurable bottom navigation bar
- Pick which screens appear in the bottom bar.
- Restore-default button in settings.
- Reply and Mention notifications (NIP-10 / NIP-22)
- Dedicated Mentions channel.
- Per-thread grouping.
- Inline reply.
- All content-event citations routed to Mentions.
- Opt-in Following / Everyone tab split.
- Filter the home feed in place by hashtag, community, geohash and relay (no navigation away)
- Hashtag and geohash top-nav filters on Pictures, Shorts, Articles, Polls and Products
- NIP-22 comments on external content (hashtags, geohashes, URLs) render a typed reply-context chip and land in the conversations feed
- Interest Sets (NIP-51, kind 30015)
- List, create, rename, delete and clone interest sets.
- Public/private hashtag toggle.
- TopNav filter chips.
- NIP-9A Community Rules
- Structured rules editor in the new-community flow.
- Post validation against community rules in the composer.
- Opt-in moderation feed filter.
- PDF reader
- Inline PDF previews in feeds.
- Double-tap to toggle zoom.
- Zoom-aware hi-res re-render for crisp pinch-zoom.
- Download and save PDFs to Downloads/Amethyst.
- Multi-wallet NWC
- Multiple wallets with a balance view.
- Default picker, rename and reorder.
- Dedicated Add Wallet screen with Connect Wallet / paste / QR scan.
- Favorite Algo Feeds filter in the Top Nav Bar
- Custom Post creation on Polls / Pictures / Shorts / Longs
- Custom Emoji Packs (NIP-30)
- Browse Emoji Sets screen for discovering kind 30030 packs.
- My Emoji List screen for managing your kind 10030 selection.
- Modernized pack metadata screen with hero image and inline emoji/cover upload.
- Public/private toggle when adding emoji.
- Decrypted private emojis surfaced end-to-end.
- Dedicated drawer screens for more content types.
- Standalone Articles, Products, Public Chats, Communities (NIP-72), Live Streams and Follow Packs screens.
- Products screen defaults to "Around Me".
- Richer live stream chat.
- Inline clips (kind 1313) and raids (kind 1312).
- Inline zap receipts.
- NIP-75 zap goal pinned at the top.
- Top zappers leaderboard.
- Stream clips surfaced in the profile gallery tab.
- Content warnings on media.
- Grid-level content warnings with distinct reasons.
- Warning overlaid on the blurhash at media size.
- YouTube-style video quality picker.
- Feed and PiP default to the lowest HLS resolution.
- Fullscreen defaults to auto.
- HLS Video uploads (NIP-71)
- Pick which renditions to upload.
- See which file is currently uploading.
- Optional cross-post as a kind-1 note.
- Generated poster JPEG.
- Blurhash and thumbhash on every video imeta.
- ThumbHash support alongside BlurHash
- Used across events, uploads and the UI.
- Forwarded when adding media to the gallery.
- Upload failures to generate a blurhash/thumbhash are now surfaced.
- NIP-A3 Payment Targets (kind 10133)
- Pay action on the note reactions row.
- Payment-targets button on the profile.
- Lightning address moved to the wallet setup screen.
- Alt-text on payment-target events.
- Search power tools
- Scope, source, follows and sort toggles.
- Paste an `npub1…`, `nprofile1…`, `nevent1…`, `naddr1…` or `note1…` to jump straight to it.
- Markdown renderer — improved typography, blockquote gutter, table styling
- Polls
- Single-screen creation with a poll-type selector.
- Open/Closed tabs.
- "View results" option (prevents voting after viewing).
- Dismiss button on active-poll cards.
- Badge support Redesigned — You can now create, grant, manage and add/remove badges from your profile.
- Settings revamp
- Modernized Settings screen.
- Dedicated Profile UI settings page.
- Compose Settings screen (auto-draft toggle).
- Security Filters split into a hub with per-category screens.
- Tap a timestamp to toggle between relative ("2h ago") and absolute date/time, driven by a single shared ticker
- Copy raw JSON of a note from the dropdown menu
- Stale-relay hint on replaceable events, using the NIP-66 relay cache
- Two-stage zap progress on the zap action
- Bulk-remove for blocked users and hidden words
- Jump-to-parent icon on replies in Full UI mode
- Configurable report-warning threshold
- `.f4a` audio playback
## In AI-Ready phones (Pixel 9+, Samsung 25+, Xiaomi 15+):
- AI Writing Help — assistant in the new-post screen.
- Tone suggestions, precomputed in parallel.
- Auto language detection.
- On-device option in Application Preferences.
- AI Alt-Text for images — on-device image description / labeling.
- Suggestions appear in the upload sheet (Google Play build).
## Desktop
- Tor Support — full Tor support on the desktop app.
- kmp-tor daemon and settings UI.
- Per-relay routing.
- `.onion` badge.
- Restart-on-toggle.
- Image loading via Tor.
- Multi-account
- Sidebar account switcher.
- Add Account dialog and per-account logout.
- Encrypted account storage.
- Embedded local relay — an in-process relay with SQLite event persistence
- Custom feeds system
- Create, pin and inline-switch between custom feeds.
- Author search in the feed builder (relay NIP-50 + avatars).
- App Drawer with a categorized screen launcher
- Workspace management
- Save, switch and restore workspaces.
- Tabs, an editor and unified search.
- Pin/unpin syncs to the active workspace.
- Namecoin name resolution
- Namecoin lookups now resolve and surface in search.
- Follows the `import` field of name objects (ifa-0001).
- Added `relay.testls.bit` ElectrumX endpoints (clearnet TLS, Tor, bare IP).
- Native theming for macOS, GNOME, KDE and Windows (matches platform look and accent colors)
- Relay power tools
- Dashboard and config editors.
- Per-screen relay picker.
- Persistent configuration.
- Correct counts.
- Messages
- Draggable divider.
- Alignment polish and centered empty states.
- Typography hierarchy and refined dividers.
- macOS polish
- Dock / Cmd+Tab icon via the Taskbar API.
- Apple-HIG squircle margins.
- Transparent window icon.
- Light-mode primary contrast.
- Content extends correctly under the title bar.
- Reading layout — width-capped reading column with comfortable side margins for wide windows
- Compact UI
- Search/Chat/Profile inputs.
- Settings hierarchy normalized.
- Tabs-first headers across Home / Reads / Notifications.
- Whole-card hover on notes.
- Per-OS theming preview flag for testing macOS/GNOME/KDE/Windows looks locally
- Selectable error messages.
- Scrollable single-pane navigation rail.
- Fixes feed loading, repost rendering and Profile back-navigation visibility.
## Amy (CLI)
- New `amy`, a non-interactive CLI Nostr client.
- Drives the same Quartz + Commons engine as the apps.
- Available on macOS and Linux from the GitHub Release.
- Subcommands:
- `account` / `use`, `profile`, `post`, `feed`, `notes`.
- `dm send | list | await | send-file` (NIP-17, kind:14 + kind:15).
- `marmot …`.
- `store stat | sweep-expired | scrub | compact`.
- Cache-first reads from a local file-backed event store.
- `relays.json` is gone — `kind:10002 / 10050 / 10051` events in the store *are* the config.
- Secure key storage.
- Private keys move out of `identity.json` into the OS keychain or a NIP-49 encrypted file.
- On-disk data restricted to owner-only.
- Color, human-readable output by default; `--json` opts in.
## Quartz
- Adds NIP-AC — WebRTC call signaling events (offer / answer / ICE / hangup / reject / renegotiate) over EphemeralGiftWrap, multi-device, group calls
- Adds EphemeralGiftWrapEvent (kind 21059) — replaces 20s expiration GiftWraps for call signaling
- Adds NIP-A3 Payment Targets (kind 10133)
- Adds NIP-82 Software Applications (experimental)
- Adds the AdminCommandEvent for audio-room kick (kind 4312)
- Adds the NIP-9A community rules parser + validator (kind:34551)
- Expands NIP-34 git collaboration coverage.
- Repository State (kind 30618).
- Pull Requests and PR updates (kinds 1618 / 1619).
- Git Status events (open / closed / draft / applied).
- Adds the rest of NIP-51 list event kinds and full NIP-53 live-activity rendering
- Adds MLS / Marmot event types and a pure-Kotlin MLS engine with IETF RFC 9420 interop test vectors (no native deps)
- Adds an async SQLite event persistence layer.
- NIP-09 / NIP-50 / NIP-62 compliance.
- Room-style connection pool.
- Adds a file-backed event store.
- flock + transactions.
- scrub/compact.
- NIP-50 full-text search.
- NIP-62 Right-to-Vanish.
- NIP-01 tiebreaker.
- NIP-09 created_at window.
- Deletion-author check.
- Adds a reactive `ObservableEventStore` layer.
- A façade that wraps any event store — SQLite-backed, file-backed, or in-memory.
- Publishes a `StoreChange` on every accepted insert, delete and expiration sweep.
- Projections stay in sync without re-querying the store.
- Ephemeral events (kinds 20000-29999) emit without being persisted.
- `EventStoreProjection` turns the change stream into a cold `Flow` of sealed `ProjectionState`.
- Per-filter limits and per-projection NIP-62 vanish scoping.
- Promotes the relay toolkit into the new `geode` module — a real Nostr relay.
- Implements NIP-01 and NIP-45.
- NIP-77 negentropy reconciliation (strfry parity).
- NIP-86 management API.
- TOML config and graceful drain.
- Adaptive connection pooling for 10k+ connections.
- Adds an EventInterner so deserialized events share canonical instances, with an interning event store that interns on insert
- Adds Ktor KMP HTTP implementations alongside OkHttp
- Adds macOS (Apple Silicon), iOS and Linux native targets.
- Pure-Kotlin Ed25519 and X25519 for the MLS crypto on those platforms.
- `commonMain` now compiles for Kotlin/Native.
## Crypto and Performance
- Custom secp256k1 implementation, starting to replace `fr.acinq.secp256k1`
- Pure-Kotlin core for KMP native targets (macOS / iOS / Linux).
- C + inline-ASM accelerated path on Android via a JNI bridge.
- Hardware SHA-256 (SHA-NI on x86_64, ARMv8 CE on ARM64).
- Comb method for G multiplication → 3× faster sign/keygen.
- Same-pubkey batch Schnorr verify (5–6× throughput).
- `verifySchnorrFast` for Nostr (skips y-parity inversion).
- 4×64-bit limb representation with lazy field ops and ARM64 assembly.
- Standalone `libsecp256k1-nostr` / `libschnorr256k1` C project, with Android benchmarks.
- Concurrent caching DNS resolver (SurgeDns)
- Lock-free DNS cache.
- 24h positive TTL.
- Stale-while-revalidate.
- Persisted across process restarts.
- Smoother video playback
- Warm ExoPlayer pool and retained warm players.
- Tuned LoadControl.
- VideoCache warmup 10s → 1.5s.
- Stable controller-overlay tree.
- Faster icons — shared FontFamily and TextMeasurer across all Material Symbols
- Faster chat lists — stable list keys and reduced recomposition
- Faster note rendering — cached event-derived values, fewer per-item allocations during feed scroll
- Faster Quartz queries
- Direct-slot driver for replaceable + addressable lookups.
- Streaming k-way merge.
- Smallest-first FTS intersect.
- Parallel Schnorr verify in the ingest queue.
- Index-driven fan-out for cache observers.
- Faster rich-text translation
- Thumbnail disk cache for profile pictures; Coil disk-cache eviction moved off the write path to prevent scroll stalls
- Paginated GiftWrap loading for the DM chat list
- Bookmark events preloaded for faster access
- Lifecycle-aware screen subscriptions
- Feed/screen relay subscriptions pause on background and resume on foreground.
- 30s grace delay so brief app switches don't churn subscriptions.
- Adaptive video disk cache — sized to 20% of free disk (256 MB–4 GB) instead of a fixed 1 GB, with on-demand HLS videos cached in SimpleCache
- Tuned image/video OkHttp dispatcher and connection pool (16 in-flight per host) to de-serialize feed loading
- Streaming image hashing — computes image hashes without loading the whole file into memory; SHA-256 hasher moved off the thread pool
- GeoHash library rewritten from scratch for performance, dropping an external dependency
## QUIC + nestsClient (foundation)
- New pure-Kotlin QUIC v1 + HTTP/3 + WebTransport client (no JNI, no native deps).
- Powers the NIP-53 audio-rooms over MoQ-transport path.
- Full RFC coverage and stabilization:
- RFC 9002 loss recovery and retransmission.
- 0-RTT early data.
- 1-RTT key update.
- TLS 1.3 session resumption (PSK).
- ECN.
- Connection migration with path validation.
- Retry and Version Negotiation packet handling.
- Stateless-reset detection.
- Broad DoS-hardening / RFC-compliance stabilization sweep.
- Passes the quic-interop-runner test matrix against picoquic and quic-go.
- Covers handshake, transfer, multiplexing, retry, 0-RTT, key-update, ECN, http3.
- Includes qlog diagnostics.
- Multiple security and correctness audits.
- RFC 9001 test vectors.
- Live interop against aioquic and picoquic.
- `nestsClient` module
- MoQ-transport (IETF) reference implementation.
- Production moq-lite Lite-03/04 codec with version-aware ALPN negotiation.
- `catalog.json` publishing aligned with kixelated/hang.
- Opus + AudioRecord/AudioTrack.
- Reconnection policy with proactive JWT refresh.
- Cross-stack (Amethyst ↔ Rust ↔ browser) interop harness in CI.
## Improvements and Fixes
- WakeUp Push Notification events — Starting to migrate to a better Push/Loading system
- Pinned notes moved to their own screen
- Left drawer reorganized into collapsible You / Feeds / Create / System sections, with clearer names
- Article writing redesign — banner, tags, slug
- Redesigned long-form article cards
- GIF support
- Playback controls and autoplay.
- GIF→MP4 upload conversion option in the upload screen.
- GIF / image keyboard support in the short post screen and in Marmot, DM and public-channel chat fields.
- Configurable video player buttons in Account Settings
- Autoplay Videos setting (Always / Never), separate from the video-loading toggle
- Drag-and-drop reordering for some relay list settings
- 3-dot options menu on video / picture / file feed cards
- Zoomable media grows from its source bounds, and loads the full-resolution source in the image dialog
- Favorite relays can now be added to the Global Feed
- Configurable max-hashtag spam filter
- Account setting to forward kind 0 events to a local relay
- Relay Sync UI replaced with visual indicators
- Account Settings
- Split broadcast tracker visibility from Complete UI mode.
- Hide payment-targets icon by default and place it after Zap.
- Float the broadcast banner as a rounded card.
- Danger Zone section in settings
- NIP-89 client tag
- Per-account toggle to disable it, synced via NIP-78 security settings.
- On by default and moved into Compose settings.
- Local Blossom cache — image and profile-picture fetches route through a local Blossom cache
- Mention preservation in compose:
- Survives keyboard auto-correction.
- Partial-overlap edits delete the whole mention.
- Cursor snaps to mention boundaries.
- Chat cursor jumping fixed
- Avatar zoom-in keeps aspect ratio during the animation
- Profile pictures center-cropped to prevent squashing
- HLS video fixes:
- Playback routed to the right MediaSource.
- Multi-rendition videos collapse to a single gallery tile.
- Render with artwork and a graceful fallback.
- Broken "Pause" action removed from the always-on background notification
- Hand-raise button in audio rooms now has a visible toggled state
- GiftWrap unwrapping for all writable accounts when always-on is enabled
- Search bar bech32 paste navigates instead of running a search
- Top and bottom bars stay visible on non-scrollable lists
- Rich-text translation:
- Bug, performance and jitter overhaul.
- `{N}` placeholders so URLs survive CJK translation.
- Swipe-to-dismiss containers fixed on newer Compose
- Right-to-Vanish settings observe toggles reactively, preserve prior behavior on upgrade
- Relay reconnection:
- Auto-reconnect after a server-initiated disconnect.
- Periodic keep-alive to revive relays stuck in long backoff.
- Account settings (profile, follow list, mutes, relay lists, KeyPackages) are republished to newly-selected relays so accounts aren't lost on fresh relays
- Broadcasting relays:
- Kept out of personal & channel sends.
- Always included in non-private sends.
- Fixed an infinite loop in the broadcast-relay computation.
- Tor now falls back to clearnet when bootstrap is stuck
- Android Arti reliability: stale Arti cache cleared on init with retry, SOCKS proxy default port moved with busy-port retry, relay-over-Tor connectivity fixes
- Chess game challenges filtered out of the home feed (ended games only); chess cards show user picture and name instead of hex pubkeys
- Expired polls re-evaluated and removed from notification cards
- NIP-39 external identity claims without a platform separator are rejected
- Dismissible cleanup banner across Pinned Notes, Bookmarks and Bookmark Sets, flagging author-deleted items with a "Remove from list" action
- Bogus Content-Type rejected when saving downloaded media, with URL-extension fallback validation
- NIP-46 bunker decrypt/encrypt response parsing fixed, with a longer timeout
- Hidden DMs no longer counted toward the unread message badge
- Profile header hides the `_@` prefix on NIP-05 names
- Foreground-service-not-allowed exception from the background handled gracefully
- Fixes Samsung crash on outgoing call
- Foreground service starts earlier to prevent call death on Android 14+
- Stop ringtone and call notification when rejecting consecutive calls
## UI Refresh
- Migrates the icon set from Material Icons to Material Symbols (thin weight) for a more consistent, modern look across the app
- Drops unused legacy drawables
- Bottom-bar icon size bumped to compensate for Material Symbols padding
## Build & Documentation
- CI restructure:
- Splits Android into its own CI job.
- Adds Android Lint as the first step.
- Merges test+build to eliminate duplicate compilation.
- Drops `assembleDebug` APK uploads.
- Adds a `:nestsClient:test` step to the desktop CI leg
- Adds a quic-interop-runner CI workflow and a browser-side cross-stack interop workflow
- Broadens `libicu` Depends so the `.deb` installs across Debian and Ubuntu
- Adds `SECURITY.md` with private vulnerability reporting policy
- Moves desktop packaging / AppImage tooling into the `desktopApp` module
- AGP and dependencies bumped
## Contributors
-
@Vitor Pamplona
-
@⚡ Dee Kay ⚡
-
@Minced Beef Energy
-
@greenart7c3
-
@KotlinGeek
-
@v
## Translations
- Czech, German, Swedish, and Portuguese by
@⚡ Dee Kay ⚡
- Hungarian by
@summoner
- French by
@Anthony 🇫🇷
- Polish by
@Polak
- Hindi by
@राज
- Slovenian by
@StellarStoic
- Bengali by
@Cats😺
- Spanish by
@⚡₿it₿y₿it⚡
- Chinese by hypnotichemionus4 and
@CXPLAY
- Russian by Anton Zhao
