# v1.13.0: Web Apps, Concord, Buzz, Log in with Amethyst, Git Highlights: - Adds an **in-app Browser** for Nostr WebApps - Adds support for **napplets (NIP-5D)** and **nsites (NIP-5A)** - Adds **Concord Support (Armada)**. - Adds **NIP-29 Groups (Flotilla)**. - Adds **Buzz workspaces, with agents**. - Adds a **Remote Signer (NIP-46)**. - Adds **Git Clone Support (NIP-34)**. - Adds **Relay Auth permissions (NIP-42)**. - Adds **BitChat Geo-channels**. - Adds **Blossom file display and sync**. - Adds **Podcasting 2.0**. - Adds **BOLT12 payments and zaps (NIP-B1)**. - Adds **proof-of-work (NIP-13)** publishing. - Redesigns **chat messages**. - Redesigns **accent colors**. - Redesigns **push notifications** ## New Features ### Web Apps, Sites & the Browser - Opens Nostr web apps (NIP-5D napplets) and static websites (NIP-5A nSites) directly inside Amethyst, rendered in an isolated, keyless sandbox process that cannot reach your private key, storage, or data. - Adds an in-app Browser — a drawer entry and pinnable bottom-bar tab — with an omnibox address bar, autocomplete, history, favorites, recents, and captured favicons. The address bar is drawn by Amethyst, never by the page, so its URL cannot be spoofed. - Adds "Log in with Amethyst": nSites open with a NIP-07 `window.nostr` provider, so standard Nostr web apps can sign in and request signatures as your active account — consent-gated, sign-only, and scoped per site. - Lets web apps, with your permission, pay through your wallet (NWC), run live relay subscriptions and queries, and read your identity (profile, lists, zaps, badges) — every capability brokered and permission-gated (once / this session / always). Payments always prompt with the amount shown. - Pins favorite web apps to the bottom bar as embedded, swap-in-place tabs that stay warm between visits. - Discovers web apps: the empty browser suggests a curated list plus nSites and napplets published by people you follow, and profiles gain an "Apps & Sites" tab. - Adds a Connected Apps / permissions screen to review and revoke what each app can do. - Routes nSite web traffic through Tor by default when Tor is active, with a per-site onion/globe toggle. - Gives each account its own web storage — cookies, logins, and site data no longer leak between the accounts on your device. Sites you were already signed into are signed out once; signing back in stores the session under the account you are using, and switching away and back keeps it. - Scopes granted permissions per account too, so each app asks once more under each account you use it with. A grant by one account no longer applies to the others. ### Communities (Concord) - Adds Concord: an end-to-end-encrypted communities protocol with channels, membership, invites, roles, moderation, and history — reachable from a hub in the drawer and pinnable to the bottom nav. - Creates and edits communities with encrypted icon/banner, relay editing, and channel management. - Invites and joins via minted invites with QR codes, tappable invite links, paste-to-redeem from Search, deep links, and direct member invites. - Chats in channels with a rich composer (@mentions, custom-emoji autocomplete, reply preview), encrypted image messages, reactions, replies, and typing indicators. - Adds threaded replies (inline or minichat modes) and delivery ticks for your own messages. - Groups channels by community in Messages with last-message previews, unread dots, facepiles, live typing, and per-type load toggles. - Adds moderation: ban/unban with read-time enforcement, role grants, a "Make admin" toggle, and a full member roster. A ban hides a member's posts for everyone else; removing their access to the community's keys takes a Refounding. - Backfills channel history across epochs, paging back to the true start of a channel. - Surfaces Concord replies and reactions on the Notifications tab with a community pill. - Lets authors edit their own channel messages (kind 3302). Latest edit wins, and it is non-destructive, so reactions and replies stay attached. Only the original author's edits take effect. ### Git Collaboration (NIP-34) - Browses Nostr git repositories in-app: a Git Repositories feed and a per-repo screen with README and Code tabs. - Reads code with branch/tag switching, file search, image preview, commit history, syntax highlighting, and word-level diff highlighting. - Reviews patches and pull requests with computed diffs and status actions; PR updates surface on the repo screen. The code browser needs a repository with an http(s) clone URL. - Manages issues: Issues and Patches & PRs tabs split by open/closed, issue labels with filtering, and a full-screen New Issue composer. - Edits a repository announcement from the repo screen, bookmarks repositories, and filters the feed to your own repos. - Adds a project-home dashboard with stats, languages, recent activity, and last-commit rows. ### Location Channels - Adds Location Channels: geohash-based public rooms that interoperate with BitChat, browsable from a dedicated drawer list and pinnable to the bottom nav. - Posts under an unlinkable per-area anonymous identity, or opt in to post as your real account. An optional nickname survives restarts, but it is a single handle reused in every area — setting one links your posts across areas. - Teleports to any place from a map picker or the feed-filter dialog to read and post to distant rooms, and follows a teleported place to keep its feed. - Reacts, zaps, and replies on location messages, with a "live near you" bubble on Home surfacing nearby rooms. - Adds a "pick on map" location picker to the short-note and all other composers. ### Groups (NIP-29) - Adds relay groups: group chat, a discovery feed with a top-bar filter and favorites, and join / leave / create / invite actions. - Adds subgroups (parent/child hierarchy), custom roles (kind 39003), threads, and message pinning. - Shares groups via `naddr` and invite links with one-tap join; inline group links render as self-loading cards. - Adds a map-based location picker when creating a group, and lets pinned group tabs act as bottom-nav roots. ### Buzz (Agent Workspaces) - Adds Buzz: a self-hosted workspace where humans and AI agents build together on a relay you own, built on the NIP-29 relay-group family with plaintext content so the relay can run search, audit, and workflows. Reachable from a "Buzz Workspaces" bottom-nav tab and the drawer Feeds list. - Renders workspace channels natively and composes messages; sections a community into Channels, Forums, inline DMs, and an Agent Console; and renders forum posts as Concord-style threads with the full chat composer. - Adds an agent-owner console with cost and personas tabs, an agent-fleet cost aggregator, live observer telemetry, persona create/edit, and NIP-OA attestation issuance. - Adds live typing indicators, presence dots, collapsible sections with unread and stars, a workspace canvas viewer and edit composer, and a bot "Working…" indicator. - Invites people to a channel or community and mints invite links; redeems invite links (intercepted into the in-app browser) and auto-invites mentioned non-members. - Wires Buzz direct messages end to end, titles a DM by its participant, and surfaces Buzz DMs in the Notification feed rendered as messages. - Discovers workspaces and DMs via the relay's own kinds, imports workspace channels from a relay in "Find groups", and routes Tor workspaces to clearnet when needed. - Adds a shared **Agent Work board**. Any channel member files a task, upvotes to reprioritize it, and watches the workspace's agent carry it to a pull request. Jobs that ship directly and gated workflow runs fold into one board, grouped by Needs approval / Working / Up next / Shipped. - Approves or denies a gated run in place. The "Approve & open PR" step authorizes a push and PR, but never merges or deploys. Adds a confirm step, an approver and workflow-definition picker, and Buzz Agent Persona editors for model, provider, and runtime. - Asks before adding you to a channel someone else put you in (Accept / Ignore / Leave). Narrates channel changes as plain-language system lines: "Bob added Alice", topic, visibility, and TTL changes, and more. - Notifies the requester when their agent job finishes or fails. Lets a self-hosted geode relay be the private Buzz workspace via a member-and-agent membership policy. ### Chat & Messages - Redesigns message rendering across every chat — DMs, public chats, groups, and communities — with modern bubbles, swipe-to-reply, send motion and press feedback, per-author name colors, jumbo emoji, day headers drawn above the messages they introduce, and a timestamp on the last message of each author run. - Replaces the message 3-dot menu with a compact two-stage long-press sheet that unpacks wrapping reactions and zap-amount presets in place. - Renders channel admin events as centered system messages, and hides a reply quote when it targets the message directly above. - Replaces the Messages FAB speed-dial with a full-screen, color-coded new-conversation chooser, and adds a Messages settings screen with a grouped-by-relay view and per-type load toggles. - Warns about DMs from senders reported by people you follow: flags a reported counterpart on the chat-list row and inside the room, with a per-user report-warning flow. ### Notifications - Redesigns push notifications into per-kind, observable, richly-rendered notifications that resolve inline @npub mentions to display names, render an inline image link as the big picture, and attribute a reply's parent to its real author. - Adds push notifications for Buzz DMs and for bare reactions and reposts to your notes, with repost-mute parity. Auto-dismisses a tray notification once its event is read in-app. - Rebuilds the in-app Notifications tab with infinite-scroll paging via a look-ahead buffer, time-based history paging with in-feed load markers, and auto-retry of stalled or faulty relays with an actionable relay detail. ### Remote Signer & Security - Lets other apps and websites sign through Amethyst for the first time (NIP-46): connect by scanning or pasting a `nostrconnect://` code, and keep signing in the background — whether your key is stored directly in Amethyst or delegated to an external signer like Amber (NIP-55). - Asks for informed consent before authorizing an app — showing its name and icon, which account will sign, the exact permissions, and an event preview — with per-account sheets and one-tap batched approval. - Manages connected apps from a dedicated screen with per-app relay list, live health, time-bound grants, and instant "forget this app". - Adds interactive relay login prompts (NIP-42): choose Once / Always / Never per relay, with venue-aware prompts for public chats, communities, and live streams, and one-tap rules to trust relays used by people you follow. Apps connected through the remote signer now ask before signing a relay login, instead of approving it automatically under "Let's be reasonable". ### Web of Trust (GrapeRank) - Discovers Web-of-Trust score providers via NIP-85 and shows hop distance and follower count on trust cards. Computing the scores — crawling the social graph, reverse-follower crawling, and publishing NIP-85 cards — is done by the `amy` command-line tool, not the app; see the Cli section. ### Publishing & Sync - Adds proof-of-work (NIP-13) publishing: a fire-and-forget mining queue with per-account difficulty and per-category settings, scheduled-post mining, and per-post overrides, shielded by a foreground service and mined across half the device's cores. - Adds NIP-77 negentropy sync as a first-class capability, with deletion (NIP-09/62) propagation so scoped syncs no longer strand deletions. - Shows PoW mining progress, and surfaces PoW, OpenTimestamps, and location markers as tap-to-explain pills in the note header. ### Podcasts - Adds Podcasting 2.0: renders shows in detail and thread views, surfaces episodes in the merged podcast feed, and plays trailers. - Shows person credits as real Nostr profiles, soundbites, in-app chapters, a transcript viewer, and a Top Supporters leaderboard. - Adds per-episode reactions and NIP-22 comments, a Podcast Bookmarks screen, and value-for-value Lightning splits paid per-minute during real playback. - Adds in-app podcast authoring: create and edit shows, episodes, and trailers from an authoring hub, with a value-for-value split editor that adds Nostr recipients by search. Verifies NIP-F4 podcast authors against their kind-10064 counter-claims. ### BOLT12 Payments & Zaps (NIP-B1) - Adds BOLT12 zaps: self-verifying kind-9736 events that prove a real BOLT12 Lightning payment. They carry a settlement proof instead of relying on an LNURL receipt. They fold into the same zap total and reactions row as Lightning zaps, with anonymous and receiptless (pay-only) variants. Only cryptographically verified proofs count toward the total. - Publishes and edits your own BOLT12 offer list (kind 10058) from an in-app editor. The list is cached, kept live, and restored across restarts. - Pays a recipient's published offer. Hand it to an external wallet as a `bitcoin:?lno=` (BIP21) intent, or pay in-app over a NWC wallet that supports it. - Sends zaps over NWC, using the new `pay`/`receive` methods (nostr-wallet-connect/nwc#2). Prefers BOLT12 over Lightning when the recipient offers it and the wallet supports it, and falls back to a Lightning zap otherwise. - Verifies payer proofs cryptographically: payment-hash preimage, invoice and proof signatures, and BOLT12 merkle reconstruction of selectively disclosed fields. Dims and does not count a proof that can't be bound to the offer. ### Wallet & Payments - Adds a Cashu wallet setup wizard: find-or-create with cross-relay discovery, mint suggestions, and a CashuMints screen; the wallet auto-publishes on mint add/remove. - Claims P2PK-locked Cashu tokens (NUT-11). Matches the lock against your wallet or identity key, and redeems all-or-nothing. Gives a clear error when a token is locked to a key this wallet can't sign for. - Adds a setting to hide the on-chain (Bitcoin) wallet, including from zap buttons. - Prefers NIP-44 encryption for NWC when the wallet advertises it. Adds a NWC-07 deep-link pairing helper. Posts a tray notification for incoming non-zap Lightning payments. ### Battery, Data & Background Service - Adds a resource-usage ledger: on-device battery and data accounting across relay connections, media, HTTP, proof-of-work, Tor, calls, decrypts, and remote signs, with per-screen foreground time and reconnect-churn tracking. Optional NIP-17 reports mail the summary to yourself. - Presents it on a usage screen with stat tiles, a trend chart, proportion bars, cellular-first bars, a Tor card, actionable insights, and a live memory card. - Adds a master switch for the always-on background notification service with per-account participation, a cost card that links to notification settings, and a distinct status-bar icon. - Scales `LocalCache` pruning to the OS memory-pressure level, and trims feed lists, rich-text/robohash/relay-info caches, the image cache, and the player warm pool under pressure. ### Look, Media & Navigation - Adds theme customization: pick an accent color (with a swatch picker), font, and font size. The accent now drives Material 3 containers, buttons, FABs, switches, unread dots, selected-reaction highlights, verified NIP-05 / image marks, and the Following badge. - Redesigns UI Preferences into grouped in-screen options with live font previews, and adds a settings search filter in the app bar. - Adds a Blossom media file manager: browse and manage stored blobs with per-file controls, mirror and `/media` toggles, an app-level "Sync all" with progress, and BUD-07 confirm-then-pay mirroring for paid servers. - Extends the Blossom manager with a gallery grid (video thumbnails and a full-screen zoomable viewer) and a per-file detail sheet. Adds an importer that copies blobs from other Blossom servers into yours. Falls back to a verified download-and-reupload when a target has no `/mirror`. - Redesigns the Media Servers screen as a single auto-saving canvas with a reorderable priority list and cached health probes. - Redesigns the bottom-bar setup with a live preview, drag-to-reorder, and real favicons; the default bar becomes Home, Messages, Wallet, Browser, Notifications. - Adapts the app shell to large screens: tier-scaled navigation transitions, a reading-column width cap on wide panes, and a two-pane Messages layout. - Nicknames people with NIP-85 contact cards (kind 30382) signed by your account key. The nickname shows above their real display name on the profile and supports custom emoji. - Adds fitness support: renders POWR strength workouts (kind 1301) and exercise templates (kind 33401) as cards, and merges close-by Health Connect sessions of the same type. - Renders Birdstar bird detections (kind 2473) with common-name titles and Wikidata links, surfaces Birdex life lists on home and profile, and renders PS1 memory-card saves (kind 38192) with an animated BIOS icon. - Adds a compose signature pre-filled in text-based post screens, and an optional subject/title field in the short-note composer. - Renders NIP-30 custom-emoji reactions as an avatar badge, a lone zap/nutzap as a large activity card, and NIP-84 highlights from web highlighter clients. - Supports NIP-51 mute-list hashtag entries and public-chat reply notifications. - Modernizes the Privacy, Profile UI, Home Tabs, and Calendar Reminder settings screens into grouped in-screen options. - Adds "Share as QR" for a note, with a choice of `note` or `naddr` payload and an image thumbnail for image-only notes. - Resolves NIP-05 identifiers (including Namecoin `.bit`) in the @-mention popover, wiring them to `nostr:` mentions. ## Performance - Speeds up napplet/nSite opens by overlapping WebView init, prefetching blobs in parallel, and fast-serving content-addressed blobs from cache. - Substantially faster GrapeRank crawls (background IO, mass pre-connect with cached DNS, batched contact reads, parallel outbox fetches, early dead-relay pruning) and faster scoring via Gauss-Seidel sweeps over a compact integer graph. - Speeds up NIP-77 reconcile with direct-built wire frames (~2.5x), O(1) range fingerprints, a live negentropy index, and an allocation-free idle watchdog. - Prefetches media and pre-parses note text ahead of the viewport, adds a k-way merge for the home feed, and pins indexes for multi-author queries. - Adopts a caching event decoder across Android/Desktop/CLI, batches Schnorr verification off the receive path, and keeps light/dark resolution O(1) after an accent change. - Parallelizes Blossom "Sync all", prefetches a joined group's history, and mines proof-of-work on half the device's cores. - Orders NIP-50 relay search by bm25 relevance and scales search and tag-watcher queries with corpus size, picking the SQLite filesystem driver by cost and materializing indexes at runtime. - Removes live-path allocations in `LiveEventStore` and `FilterIndex` (and on the frame/search paths), and snapshots `FilterIndex` with a persistent map. ## Improvements and Bug fixes - Normalizes accent theming: contrast-picks onPrimary so filled buttons/FABs stop washing out, bases light/dark on background luminance, and fixes accent regressions. - Keeps live HLS streams playing and caches only proven on-demand HLS; shows a browser-fallback overlay when a decoder stalls and pauses looping videos after 5 plays. - Adds an HTTP/2 keepalive ping to stop stale-connection image stalls. - Hardens the relay client: enforces blocked relays on every REQ/COUNT/publish, backs off from REQs relays repeatedly refuse, drops relays that fail hard during crawls, caches each relay's advertised LIMITS, and fixes reconnect backoff on network/transport changes. - Shows and edits Marmot (MLS) group icons in the feed and in group metadata, interoperable with other Marmot clients. - Opens zaps and reactions in their own thread view, turns Notify chips into bell mute-toggles that list every thread member, and replies with kind 1111 to Amethyst's own kind-1 thread roots. - Adds search, a local filter, and a top-nav feed filter to the App Recommendations screen, and shows a website's favicon and domain across every browser-connected app view. - Fixes nutzap relay routing to receive/advertise on inbox/DM (kind 10019) relays instead of outbox. - Fixes Concord invite handling (revocation, keyless CORD-05, clearer failure copy, no hang on bad links, skip re-join) and channel rows stuck on "No messages yet". - Persists the Concord community list and loads pinned communities from their own relays so cold boot no longer refetches, shows channels on Messages as soon as the control plane folds, warms channel previews so the list fills without opening each channel, and rank-gates the Ban/Remove affordances (CORD-04). - Sizes the video player box so live streams stop rendering black bars, and enforces the decoder budget when acquiring players. - Stops stamping our client tag on someone else's event template so external signers sign it unchanged. - Keeps calendar RSVP buttons on a single line, drops dead top padding on Home when there are no live bubbles, and modernizes the Zap the Devs donation card. - Rejects NIP-29 group state not signed by the relay, opens group posts in the group chat, and fixes subgroup edit safety and pinned-message jump. - Makes tapping a message timestamp open delivery info instead of toggling the time format, and right-aligns your own messages. - Recovers a media file's type from its extension when the imeta MIME is malformed, and moves several disk reads (boot receiver, signer policy) off the main thread. - Serializes account construction so concurrent loaders can't build duplicate accounts. - Routes Onion-Location through the Android app's HTTP clients and maps Tor/Arti errors to accurate SOCKS reply codes. - Extracts the rich-text renderer and many event cards (calendar/RSVP, podcast atoms/splits, relay discovery, code snippet, ecash mint, activity, Git diff/status, and more) into shared commons so Desktop and Android render identically. - Sends pictures in minichat thread replies (encrypted in Concord, plaintext in public chats). Resolves @-mentions in the minichat composer and tray quick-replies. Adds `p` tags for people cited in kind 9/11/1111 and Buzz stream messages, so mentions notify and resolve. - Stops the inline audio player from painting over the note below it. Marks every room type read from the Messages "mark as read" action. - Fixes numeric HTML entities in link-preview meta tags. Routes kind-39005 by tag shape, so Buzz thread summaries no longer parse as NIP-29 pin lists. - Shortens over-long translated strings across 23 locales and fixes duplicate and CDATA translation issues. ## Desktop - Redesigns notifications with a reworked inbox and native OS toast notifications. - Adds NIP-42 relay AUTH with an inline Once / Always / Never approval banner and persisted grants. - Makes NIP-17 private DMs reliable: resolves recipient inbox relays, fetches DM relay lists and account/Blossom config from outbox relays, and stops falling back to connected relays. - Adds Web-of-Trust score badges, Follow Packs (NIP-51) discovery with one-tap follow, note scheduling, opt-in NIP-37 draft sync, and a hashtag-spam filter. - Adds a Privacy Lock: gate the Messages and Wallet columns behind a password, with an auto-lock timeout. It is a screen gate, not encryption at rest — messages continue to sync while it is locked. - Renders rich text through the shared core (removes the desktop-only fork) and ships as a Flatpak bundle. - Adds moderation & safety: mute/block and NIP-56 report actions in the note menu with feed, thread, and profile enforcement (previously a silent no-op), NIP-36 content-warning blur with tap-to-reveal, a sensitive-content toggle, and management screens — with snackbar feedback and zero-relay send warnings. - Adds NIP-88 polls (render, vote, create) with a "Polls" search facet, and unifies the note ⋮ overflow and right-click menus. - Fixes a desktop-cache race that could wipe the follow list, and makes sidebar navigation replace the detail overlay instead of hiding behind it. ## Cli - Adds nak-style primitives: `amy decode`/`encode` (NIP-19/21), `verify`, `key` (generate/public/encrypt/decrypt/validate, NIP-49), and `filter`. - Adds query verbs: `amy fetch` (one-shot with code-mode outbox resolution), `subscribe` (live NDJSON), `count` (NIP-45), and `outbox USER` (NIP-65). - Adds `amy sync` — NIP-77 negentropy reconcile with deletion propagation — and `amy event` / `amy publish` for raw and pre-signed events. - Adds `amy encrypt`/`decrypt` (NIP-44/04) and `amy gift wrap`/`unwrap` (NIP-59). - Adds `amy blossom` (upload/download/list/delete/check/mirror, NIP-B7) with a live interop smoke test. - Adds `amy git` (NIP-34), `amy podcast` and `amy podcast20` (Podcasting 2.0 with V4V splits). - Rounds out `amy git` to full NIP-34 parity: `browse`/`cat`/`log` over smart-HTTP, `init` from a local checkout, `label` (NIP-32), `apply` a patch to the working tree, and `grasp list`/`set` (GRASP server list, kind 10317). - Adds `amy buzz` for block/buzz workspaces (channels, DMs, invite-link redemption), verified against a live Buzz relay. - Turns `amy` into the Buzz workflow/agent runner. `buzz agent serve`/`up`/ `doctor` run gated or parallel-backlog agents in isolated git worktrees that open PRs. `buzz workflow trigger`/`run`/`approve`/`deny` drive the human approval gate. - Adds `amy bolt12` (NIP-B1): decode offers and payer proofs, verify a zap, get/set a kind-10058 offer list, and a two-step intent → zap send. - Adds the `amy cashu` wallet (NIP-60/61): wallet lifecycle, balance, mint, receive/send (LN / token / nutzap), and maintenance. - Adds `amy admin` (NIP-86 relay moderation) and `amy serve` (run a relay by embedding geode). - Adds NIP-46 remote signing: `amy bunker` server, `amy login bunker://…`, and `amy login --nostrconnect`, gated with `--perms` and interactive approval. - Adds the `amy graperank` suite (crawl/score/publish/followers/rank/…), account-less crawl/score, and NIP-85 card publishing. - Adds `amy fof` (follows-of-follows, renamed from `amy wot`), `amy concord` (encrypted communities), `amy relaygroup` (NIP-29), and `amy geochat` (BitChat-interoperable geohash channels). - Adds NIP-13 proof of work (`amy pow`, `--pow` on posts), `amy kind`, `amy nip`, `amy namecoin`, `amy status`, and `amy logoff`. - Expands `amy nsite`/`napplet` with `publish`, `serve`, and `list`. - Switches the default event store to SQLite and hardens the output contract: single-line `--json`, exit codes 0/1/2/124, publish results carry each relay's rejection reason, and read-only verbs run without an account. ## Quartz - Adds NIP-77 negentropy sync (pipelined worker pool, multi-connection fan-out, bounded-memory streaming, `LiveNegentropyIndex`) and NIP-09/62 deletion propagation. - Adds NIP-13 proof-of-work publishing: a cooperative-cancellation miner and a `PoWNostrSigner` decorator that composes with any signer, plus NIP-59 gift-wrap mining on the outer wrap only. - Adds NIP-66 `RelayReachabilityStore` — a durable, shareable dead-relay cache backed by kind:30166 events. - Adds the Concord/CORD protocol foundation (key derivation, envelope layer, authority resolver, roles/moderation, CORD-05/06/07) and the NIP-5D/5A trust-boundary core (capability model, permission ledger, broker, wire protocol). - Implements Marmot (MLS-over-Nostr) group icons byte-for-byte with the mdk/whitenoise scheme, and fixes SecretTree ratchet preservation across restore. - Adds an OutboxDispatcher to fetch profile/contact events via each author's outbox relays, and richer NIP-89 app-handler parsing. - Adds the Buzz protocol surface (~78 event kinds spanning NIP-OA owner attestation, NIP-AM agent turn metrics, personas/teams/managed agents, streams, DMs, forums, presence, and moderation), verified against vectors generated by Buzz's own Rust reference. - Adds the BOLT12 zaps protocol layer (NIP-B1): kind-9736 zaps, kind-9737 zap intents, kind-10058 offer lists, full spec validation, and a payer-proof verifier with BOLT12 merkle reconstruction. NWC gains `pay`/`receive` methods. - Widens NIP-50 search indexing to more event kinds and tag-borne text. Indexes only the public petname and summary on contact cards (kind 30382), never the encrypted fields. ## Geode (standalone relay) - Adds relay-to-relay mirroring with strfry-router parity: a two-phase model (NIP-77 negentropy sync catch-up plus a live REQ tail), `down` / `up` / `both` directions, per-upstream mirror filters, and relay-to-relay trust. - Keeps mirrors alive across upstream restarts with a retry pump and ping keepalive, and advances the since-watermark correctly on reconnect. - Adds `import` / `export` NDJSON verbs and an optional no-full-text-search mode (`--no-search`) for lighter deployments. - Adds `[database]` tuning knobs with periodic `PRAGMA optimize`, and validates config knobs and mirror filters at boot. - Runs embedded in the CLI via `amy serve`. - Serves full-set negentropy NEG-OPENs from a live index and streams mirror catch-up IDs instead of materializing them. - Adds relayBench, a head-to-head benchmark harness (geode vs strfry vs any relay) measuring ingest, query, and NIP-77 sync over a shared corpus. - Enables a combined tag+kind+pubkey index, a cost-based filesystem-driver pick, and runtime index materialization, with new tag∩author and driver-selection relayBench shapes. - Ships a release pipeline: a GHCR Docker image, `.deb`/`.rpm` packages with a bundled JRE and systemd unit, a portable jlink'd tarball, and a Homebrew formula. Adds `--version`/`--help` and a boot smoke test in CI. - Lets operators pick any Quartz `IEventStore` backend via `[database].backend`: SQLite (default), filesystem, or a custom store loaded by class name. ## Build & Documentation - Rebuilds the Tor/Arti native library for the SOCKS reply-code fix, ships a Homebrew formula for `amy`, and seeds the Gradle distribution from a verified mirror in the web sandbox. - Adds NIP-29 group-chat test coverage across every assembler, filter shape, and relay integration. - Targets JVM 17 for Quartz, upgrades AGP, and replaces the abandoned android-test-report action with `mikepenz/action-junit-report`. - Adds a coding standard banning raw invisible/bidirectional Unicode in source (Trojan-Source, CVE-2021-42574) and replaces existing occurrences with `\u` escapes. ## Contributors - @npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z - @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef - @npub12cfje6nl2nuxplcqfvhg7ljt89fmpj0n0fd24zxsukja5qm9wmtqd7y76c - @npub1dn0tej4a5806qk9ts56j572sndvjk27l5qmsxf0z3mquknccve7s4k8tfp - @npub1w4uswmv6lu9yel005l3qgheysmr7tk9uvwluddznju3nuxalevvs2d0jr5 - @npub1dergggklka99wwrs92yz8wdjs952h2ux2ha2ed598ngwu9w7a6fsh9xzpc - roguehashrate - LubuSeb ## Translations - Czech, German, Brazilian Portuguese, and Swedish by @npub1e2yuky03caw4ke3zy68lg0fz3r4gkt94hx4fjmlelacyljgyk79svn3eef - Spanish (Spain, Mexico, and US) by @npub1luhyzgce7qtcs6r6v00ryjxza8av8u4dzh3avg0zks38tjktnmxspxq903 - French by @npub106efcyntxc5qwl3w8krrhyt626m59ya2nk9f40px5s968u5xdwhsjsr8fz - Hungarian by @npub1dnvslq0vvrs8d603suykc4harv94yglcxwna9sl2xu8grt2afm3qgfh0tp - Dutch by @npub1w4la29u3zv09r6crx5u8yxax0ffxgekzdm2egzjkjckef7xc83fs0ftxcd - Hindi by @npub1ww6huwu3xye6r05n3qkjeq62wds5pq0jswhl7uc59lchc0n0ns4sdtw5e6 - Polish by @npub16gjyljum0ksrrm28zzvejydgxwfm7xse98zwc4hlgq8epxeuggushqwyrm - Slovenian by @npub1qqqqqqz7nhdqz3uuwmzlflxt46lyu7zkuqhcapddhgz66c4ddynswreecw - Chinese Simplified by hypnotichemionus4 - German by crowdin.pretended462