Untitled

• New Features
  • Web Apps, Sites & the Browser
  • Communities (Concord)
  • Git Collaboration (NIP-34)
  • Location Channels
  • Groups (NIP-29)
  • Buzz (Agent Workspaces)
  • Chat & Messages
  • Notifications
  • Remote Signer & Security
  • Web of Trust (GrapeRank)
  • Publishing & Sync
  • Podcasts
  • BOLT12 Payments & Zaps (NIP-B1)
  • Wallet & Payments
  • Battery, Data & Background Service
  • Look, Media & Navigation
• Performance
• Improvements and Bug fixes
• Desktop
• Cli
• Quartz
• Geode (standalone relay)
• Build & Documentation
• Contributors
• Translations

#Amethyst v1.13.0: Web Apps, Concord, Buzz, Log in with Amethyst, Git, Bolt12 and lots more.

Highlights:

• Adds an in-app Browser for Nostr WebApps
• Adds support for napplets (NIP-5D) and nsites (NIP-5A)
• Adds Concord Support (Armada).
• Adds NIP-29 Groups (Flotilla).
• Adds Buzz workspaces, with agents.
• Adds a Remote Signer (NIP-46).
• Adds Git Clone Support (NIP-34).
• Adds Relay Auth permissions (NIP-42).
• Adds BitChat Geo-channels.
• Adds Blossom file display and sync.
• Adds Podcasting 2.0.
• Adds BOLT12 payments and zaps (NIP-B1).
• Adds proof-of-work (NIP-13) publishing.
• Redesigns chat messages.
• Redesigns accent colors.
• Redesigns push notifications

§New Features

§Web Apps, Sites & the Browser

• Opens Nostr web apps (NIP-5D napplets) and static websites (NIP-5A nSites)
  directly inside Amethyst, rendered in an isolated, keyless sandbox process that
  cannot reach your private key, storage, or data.
• Adds an in-app Browser — a drawer entry and pinnable bottom-bar tab — with an
  omnibox address bar, autocomplete, history, favorites, recents, and captured
  favicons. The address bar is drawn by Amethyst, never by the page, so its URL
  cannot be spoofed.
• Adds “Log in with Amethyst”: nSites open with a NIP-07 window.nostr
  provider, so standard Nostr web apps can sign in and request signatures as your
  active account — consent-gated, sign-only, and scoped per site.
• Lets web apps, with your permission, pay through your wallet (NWC), run live
  relay subscriptions and queries, and read your identity (profile, lists, zaps,
  badges) — every capability brokered and permission-gated (once / this session /
  always). Payments always prompt with the amount shown.
• Pins favorite web apps to the bottom bar as embedded, swap-in-place tabs that
  stay warm between visits.
• Discovers web apps: the empty browser suggests a curated list plus nSites and
  napplets published by people you follow, and profiles gain an “Apps & Sites”
  tab.
• Adds a Connected Apps / permissions screen to review and revoke what each app
  can do.
• Routes nSite web traffic through Tor by default when Tor is active, with a
  per-site onion/globe toggle.
• Gives each account its own web storage — cookies, logins, and site data no
  longer leak between the accounts on your device. Sites you were already signed
  into are signed out once; signing back in stores the session under the account
  you are using, and switching away and back keeps it.
• Scopes granted permissions per account too, so each app asks once more under
  each account you use it with. A grant by one account no longer applies to the
  others.

§Communities (Concord)

• Adds Concord: an end-to-end-encrypted communities protocol with channels,
  membership, invites, roles, moderation, and history — reachable from a hub in
  the drawer and pinnable to the bottom nav.
• Creates and edits communities with encrypted icon/banner, relay editing, and
  channel management.
• Invites and joins via minted invites with QR codes, tappable invite links,
  paste-to-redeem from Search, deep links, and direct member invites.
• Chats in channels with a rich composer (@mentions, custom-emoji autocomplete,
  reply preview), encrypted image messages, reactions, replies, and typing
  indicators.
• Adds threaded replies (inline or minichat modes) and delivery ticks for your
  own messages.
• Groups channels by community in Messages with last-message previews, unread
  dots, facepiles, live typing, and per-type load toggles.
• Adds moderation: ban/unban with read-time enforcement, role grants, a “Make
  admin” toggle, and a full member roster. A ban hides a member’s posts for
  everyone else; removing their access to the community’s keys takes a
  Refounding.
• Backfills channel history across epochs, paging back to the true start of a
  channel.
• Surfaces Concord replies and reactions on the Notifications tab with a
  community pill.
• Lets authors edit their own channel messages (kind 3302). Latest edit wins,
  and it is non-destructive, so reactions and replies stay attached. Only the
  original author’s edits take effect.

§Git Collaboration (NIP-34)

• Browses Nostr git repositories in-app: a Git Repositories feed and a per-repo
  screen with README and Code tabs.
• Reads code with branch/tag switching, file search, image preview, commit
  history, syntax highlighting, and word-level diff highlighting.
• Reviews patches and pull requests with computed diffs and status actions; PR
  updates surface on the repo screen. The code browser needs a repository with an
  http(s) clone URL.
• Manages issues: Issues and Patches & PRs tabs split by open/closed, issue
  labels with filtering, and a full-screen New Issue composer.
• Edits a repository announcement from the repo screen, bookmarks repositories,
  and filters the feed to your own repos.
• Adds a project-home dashboard with stats, languages, recent activity, and
  last-commit rows.

§Location Channels

• Adds Location Channels: geohash-based public rooms that interoperate with
  BitChat, browsable from a dedicated drawer list and pinnable to the bottom nav.
• Posts under an unlinkable per-area anonymous identity, or opt in to post as
  your real account. An optional nickname survives restarts, but it is a single
  handle reused in every area — setting one links your posts across areas.
• Teleports to any place from a map picker or the feed-filter dialog to read and
  post to distant rooms, and follows a teleported place to keep its feed.
• Reacts, zaps, and replies on location messages, with a “live near you” bubble
  on Home surfacing nearby rooms.
• Adds a “pick on map” location picker to the short-note and all other composers.

§Groups (NIP-29)

• Adds relay groups: group chat, a discovery feed with a top-bar filter and
  favorites, and join / leave / create / invite actions.
• Adds subgroups (parent/child hierarchy), custom roles (kind 39003), threads,
  and message pinning.
• Shares groups via naddr and invite links with one-tap join; inline group
  links render as self-loading cards.
• Adds a map-based location picker when creating a group, and lets pinned group
  tabs act as bottom-nav roots.

§Buzz (Agent Workspaces)

• Adds Buzz: a self-hosted workspace where humans and AI agents build together on
  a relay you own, built on the NIP-29 relay-group family with plaintext content
  so the relay can run search, audit, and workflows. Reachable from a “Buzz
  Workspaces” bottom-nav tab and the drawer Feeds list.
• Renders workspace channels natively and composes messages; sections a community
  into Channels, Forums, inline DMs, and an Agent Console; and renders forum posts
  as Concord-style threads with the full chat composer.
• Adds an agent-owner console with cost and personas tabs, an agent-fleet cost
  aggregator, live observer telemetry, persona create/edit, and NIP-OA attestation
  issuance.
• Adds live typing indicators, presence dots, collapsible sections with unread and
  stars, a workspace canvas viewer and edit composer, and a bot “Working…”
  indicator.
• Invites people to a channel or community and mints invite links; redeems invite
  links (intercepted into the in-app browser) and auto-invites mentioned
  non-members.
• Wires Buzz direct messages end to end, titles a DM by its participant, and
  surfaces Buzz DMs in the Notification feed rendered as messages.
• Discovers workspaces and DMs via the relay’s own kinds, imports workspace
  channels from a relay in “Find groups”, and routes Tor workspaces to clearnet
  when needed.
• Adds a shared Agent Work board. Any channel member files a task, upvotes
  to reprioritize it, and watches the workspace’s agent carry it to a pull
  request. Jobs that ship directly and gated workflow runs fold into one board,
  grouped by Needs approval / Working / Up next / Shipped.
• Approves or denies a gated run in place. The “Approve & open PR” step
  authorizes a push and PR, but never merges or deploys. Adds a confirm step, an
  approver and workflow-definition picker, and Buzz Agent Persona editors for
  model, provider, and runtime.
• Asks before adding you to a channel someone else put you in (Accept / Ignore /
  Leave). Narrates channel changes as plain-language system lines: “Bob added
  Alice”, topic, visibility, and TTL changes, and more.
• Notifies the requester when their agent job finishes or fails. Lets a
  self-hosted geode relay be the private Buzz workspace via a member-and-agent
  membership policy.

§Chat & Messages

• Redesigns message rendering across every chat — DMs, public chats, groups, and
  communities — with modern bubbles, swipe-to-reply, send motion and press
  feedback, per-author name colors, jumbo emoji, day headers drawn above the
  messages they introduce, and a timestamp on the last message of each author
  run.
• Replaces the message 3-dot menu with a compact two-stage long-press sheet that
  unpacks wrapping reactions and zap-amount presets in place.
• Renders channel admin events as centered system messages, and hides a reply
  quote when it targets the message directly above.
• Replaces the Messages FAB speed-dial with a full-screen, color-coded
  new-conversation chooser, and adds a Messages settings screen with a
  grouped-by-relay view and per-type load toggles.
• Warns about DMs from senders reported by people you follow: flags a reported
  counterpart on the chat-list row and inside the room, with a per-user
  report-warning flow.

§Notifications

• Redesigns push notifications into per-kind, observable, richly-rendered
  notifications that resolve inline @npub mentions to display names, render an
  inline image link as the big picture, and attribute a reply’s parent to its real
  author.
• Adds push notifications for Buzz DMs and for bare reactions and reposts to your
  notes, with repost-mute parity. Auto-dismisses a tray notification once its
  event is read in-app.
• Rebuilds the in-app Notifications tab with infinite-scroll paging via a
  look-ahead buffer, time-based history paging with in-feed load markers, and
  auto-retry of stalled or faulty relays with an actionable relay detail.

§Remote Signer & Security

• Lets other apps and websites sign through Amethyst for the first time
  (NIP-46): connect by scanning or pasting a nostrconnect:// code, and keep
  signing in the background — whether your key is stored directly in Amethyst or
  delegated to an external signer like Amber (NIP-55).
• Asks for informed consent before authorizing an app — showing its name and
  icon, which account will sign, the exact permissions, and an event preview —
  with per-account sheets and one-tap batched approval.
• Manages connected apps from a dedicated screen with per-app relay list, live
  health, time-bound grants, and instant “forget this app”.
• Adds interactive relay login prompts (NIP-42): choose Once / Always / Never
  per relay, with venue-aware prompts for public chats, communities, and live
  streams, and one-tap rules to trust relays used by people you follow. Apps
  connected through the remote signer now ask before signing a relay login,
  instead of approving it automatically under “Let’s be reasonable”.

§Web of Trust (GrapeRank)

• Discovers Web-of-Trust score providers via NIP-85 and shows hop distance and
  follower count on trust cards. Computing the scores — crawling the social graph,
  reverse-follower crawling, and publishing NIP-85 cards — is done by the amy
  command-line tool, not the app; see the Cli section.

§Publishing & Sync

• Adds proof-of-work (NIP-13) publishing: a fire-and-forget mining queue with
  per-account difficulty and per-category settings, scheduled-post mining, and
  per-post overrides, shielded by a foreground service and mined across half the
  device’s cores.
• Adds NIP-77 negentropy sync as a first-class capability, with deletion
  (NIP-09/62) propagation so scoped syncs no longer strand deletions.
• Shows PoW mining progress, and surfaces PoW, OpenTimestamps, and location
  markers as tap-to-explain pills in the note header.

§Podcasts

• Adds Podcasting 2.0: renders shows in detail and thread views, surfaces
  episodes in the merged podcast feed, and plays trailers.
• Shows person credits as real Nostr profiles, soundbites, in-app chapters, a
  transcript viewer, and a Top Supporters leaderboard.
• Adds per-episode reactions and NIP-22 comments, a Podcast Bookmarks screen, and
  value-for-value Lightning splits paid per-minute during real playback.
• Adds in-app podcast authoring: create and edit shows, episodes, and trailers
  from an authoring hub, with a value-for-value split editor that adds Nostr
  recipients by search. Verifies NIP-F4 podcast authors against their kind-10064
  counter-claims.

§BOLT12 Payments & Zaps (NIP-B1)

• Adds BOLT12 zaps: self-verifying kind-9736 events that prove a real BOLT12
  Lightning payment. They carry a settlement proof instead of relying on an
  LNURL receipt. They fold into the same zap total and reactions row as Lightning
  zaps, with anonymous and receiptless (pay-only) variants. Only cryptographically
  verified proofs count toward the total.
• Publishes and edits your own BOLT12 offer list (kind 10058) from an in-app
  editor. The list is cached, kept live, and restored across restarts.
• Pays a recipient’s published offer. Hand it to an external wallet as a
  bitcoin:?lno= (BIP21) intent, or pay in-app over a NWC wallet that supports
  it.
• Sends zaps over NWC, using the new pay/receive methods
  (nostr-wallet-connect/nwc#2). Prefers BOLT12 over Lightning when the recipient
  offers it and the wallet supports it, and falls back to a Lightning zap
  otherwise.
• Verifies payer proofs cryptographically: payment-hash preimage, invoice and
  proof signatures, and BOLT12 merkle reconstruction of selectively disclosed
  fields. Dims and does not count a proof that can’t be bound to the offer.

§Wallet & Payments

• Adds a Cashu wallet setup wizard: find-or-create with cross-relay discovery,
  mint suggestions, and a CashuMints screen; the wallet auto-publishes on mint
  add/remove.
• Claims P2PK-locked Cashu tokens (NUT-11). Matches the lock against your wallet
  or identity key, and redeems all-or-nothing. Gives a clear error when a token
  is locked to a key this wallet can’t sign for.
• Adds a setting to hide the on-chain (Bitcoin) wallet, including from zap
  buttons.
• Prefers NIP-44 encryption for NWC when the wallet advertises it. Adds a NWC-07
  deep-link pairing helper. Posts a tray notification for incoming non-zap
  Lightning payments.

§Battery, Data & Background Service

• Adds a resource-usage ledger: on-device battery and data accounting across
  relay connections, media, HTTP, proof-of-work, Tor, calls, decrypts, and
  remote signs, with per-screen foreground time and reconnect-churn tracking.
  Optional NIP-17 reports mail the summary to yourself.
• Presents it on a usage screen with stat tiles, a trend chart, proportion bars,
  cellular-first bars, a Tor card, actionable insights, and a live memory card.
• Adds a master switch for the always-on background notification service with
  per-account participation, a cost card that links to notification settings,
  and a distinct status-bar icon.
• Scales LocalCache pruning to the OS memory-pressure level, and trims feed
  lists, rich-text/robohash/relay-info caches, the image cache, and the player
  warm pool under pressure.

§Look, Media & Navigation

• Adds theme customization: pick an accent color (with a swatch picker), font,
  and font size. The accent now drives Material 3 containers, buttons, FABs,
  switches, unread dots, selected-reaction highlights, verified NIP-05 / image
  marks, and the Following badge.
• Redesigns UI Preferences into grouped in-screen options with live font
  previews, and adds a settings search filter in the app bar.
• Adds a Blossom media file manager: browse and manage stored blobs with per-file
  controls, mirror and /media toggles, an app-level “Sync all” with progress,
  and BUD-07 confirm-then-pay mirroring for paid servers.
• Extends the Blossom manager with a gallery grid (video thumbnails and a
  full-screen zoomable viewer) and a per-file detail sheet. Adds an importer that
  copies blobs from other Blossom servers into yours. Falls back to a verified
  download-and-reupload when a target has no /mirror.
• Redesigns the Media Servers screen as a single auto-saving canvas with a
  reorderable priority list and cached health probes.
• Redesigns the bottom-bar setup with a live preview, drag-to-reorder, and real
  favicons; the default bar becomes Home, Messages, Wallet, Browser,
  Notifications.
• Adapts the app shell to large screens: tier-scaled navigation transitions, a
  reading-column width cap on wide panes, and a two-pane Messages layout.
• Nicknames people with NIP-85 contact cards (kind 30382) signed by your account
  key. The nickname shows above their real display name on the profile and
  supports custom emoji.
• Adds fitness support: renders POWR strength workouts (kind 1301) and exercise
  templates (kind 33401) as cards, and merges close-by Health Connect sessions of
  the same type.
• Renders Birdstar bird detections (kind 2473) with common-name titles and
  Wikidata links, surfaces Birdex life lists on home and profile, and renders PS1
  memory-card saves (kind 38192) with an animated BIOS icon.
• Adds a compose signature pre-filled in text-based post screens, and an optional
  subject/title field in the short-note composer.
• Renders NIP-30 custom-emoji reactions as an avatar badge, a lone zap/nutzap as
  a large activity card, and NIP-84 highlights from web highlighter clients.
• Supports NIP-51 mute-list hashtag entries and public-chat reply notifications.
• Modernizes the Privacy, Profile UI, Home Tabs, and Calendar Reminder settings
  screens into grouped in-screen options.
• Adds “Share as QR” for a note, with a choice of note or naddr payload and an
  image thumbnail for image-only notes.
• Resolves NIP-05 identifiers (including Namecoin .bit) in the @-mention
  popover, wiring them to nostr: mentions.

§Performance

• Speeds up napplet/nSite opens by overlapping WebView init, prefetching blobs in
  parallel, and fast-serving content-addressed blobs from cache.
• Substantially faster GrapeRank crawls (background IO, mass pre-connect with
  cached DNS, batched contact reads, parallel outbox fetches, early dead-relay
  pruning) and faster scoring via Gauss-Seidel sweeps over a compact integer
  graph.
• Speeds up NIP-77 reconcile with direct-built wire frames (~2.5x), O(1) range
  fingerprints, a live negentropy index, and an allocation-free idle watchdog.
• Prefetches media and pre-parses note text ahead of the viewport, adds a k-way
  merge for the home feed, and pins indexes for multi-author queries.
• Adopts a caching event decoder across Android/Desktop/CLI, batches Schnorr
  verification off the receive path, and keeps light/dark resolution O(1) after
  an accent change.
• Parallelizes Blossom “Sync all”, prefetches a joined group’s history, and mines
  proof-of-work on half the device’s cores.
• Orders NIP-50 relay search by bm25 relevance and scales search and tag-watcher
  queries with corpus size, picking the SQLite filesystem driver by cost and
  materializing indexes at runtime.
• Removes live-path allocations in LiveEventStore and FilterIndex (and on the
  frame/search paths), and snapshots FilterIndex with a persistent map.

§Improvements and Bug fixes

• Normalizes accent theming: contrast-picks onPrimary so filled buttons/FABs stop
  washing out, bases light/dark on background luminance, and fixes accent
  regressions.
• Keeps live HLS streams playing and caches only proven on-demand HLS; shows a
  browser-fallback overlay when a decoder stalls and pauses looping videos after
  5 plays.
• Adds an HTTP/2 keepalive ping to stop stale-connection image stalls.
• Hardens the relay client: enforces blocked relays on every REQ/COUNT/publish,
  backs off from REQs relays repeatedly refuse, drops relays that fail hard
  during crawls, caches each relay’s advertised LIMITS, and fixes reconnect
  backoff on network/transport changes.
• Shows and edits Marmot (MLS) group icons in the feed and in group metadata,
  interoperable with other Marmot clients.
• Opens zaps and reactions in their own thread view, turns Notify chips into bell
  mute-toggles that list every thread member, and replies with kind 1111 to
  Amethyst’s own kind-1 thread roots.
• Adds search, a local filter, and a top-nav feed filter to the App
  Recommendations screen, and shows a website’s favicon and domain across every
  browser-connected app view.
• Fixes nutzap relay routing to receive/advertise on inbox/DM (kind 10019)
  relays instead of outbox.
• Fixes Concord invite handling (revocation, keyless CORD-05, clearer failure
  copy, no hang on bad links, skip re-join) and channel rows stuck on “No
  messages yet”.
• Persists the Concord community list and loads pinned communities from their own
  relays so cold boot no longer refetches, shows channels on Messages as soon as
  the control plane folds, warms channel previews so the list fills without opening
  each channel, and rank-gates the Ban/Remove affordances (CORD-04).
• Sizes the video player box so live streams stop rendering black bars, and
  enforces the decoder budget when acquiring players.
• Stops stamping our client tag on someone else’s event template so external
  signers sign it unchanged.
• Keeps calendar RSVP buttons on a single line, drops dead top padding on Home
  when there are no live bubbles, and modernizes the Zap the Devs donation card.
• Rejects NIP-29 group state not signed by the relay, opens group posts in the
  group chat, and fixes subgroup edit safety and pinned-message jump.
• Makes tapping a message timestamp open delivery info instead of toggling the
  time format, and right-aligns your own messages.
• Recovers a media file’s type from its extension when the imeta MIME is
  malformed, and moves several disk reads (boot receiver, signer policy) off the
  main thread.
• Serializes account construction so concurrent loaders can’t build duplicate
  accounts.
• Routes Onion-Location through the Android app’s HTTP clients and maps Tor/Arti
  errors to accurate SOCKS reply codes.
• Extracts the rich-text renderer and many event cards (calendar/RSVP, podcast
  atoms/splits, relay discovery, code snippet, ecash mint, activity, Git
  diff/status, and more) into shared commons so Desktop and Android render
  identically.
• Sends pictures in minichat thread replies (encrypted in Concord, plaintext in
  public chats). Resolves @-mentions in the minichat composer and tray
  quick-replies. Adds p tags for people cited in kind 9/11/1111 and Buzz stream
  messages, so mentions notify and resolve.
• Stops the inline audio player from painting over the note below it. Marks
  every room type read from the Messages “mark as read” action.
• Fixes numeric HTML entities in link-preview meta tags. Routes kind-39005 by tag
  shape, so Buzz thread summaries no longer parse as NIP-29 pin lists.
• Shortens over-long translated strings across 23 locales and fixes duplicate
  and CDATA translation issues.

§Desktop

• Redesigns notifications with a reworked inbox and native OS toast
  notifications.
• Adds NIP-42 relay AUTH with an inline Once / Always / Never approval banner and
  persisted grants.
• Makes NIP-17 private DMs reliable: resolves recipient inbox relays, fetches DM
  relay lists and account/Blossom config from outbox relays, and stops falling
  back to connected relays.
• Adds Web-of-Trust score badges, Follow Packs (NIP-51) discovery with one-tap
  follow, note scheduling, opt-in NIP-37 draft sync, and a hashtag-spam filter.
• Adds a Privacy Lock: gate the Messages and Wallet columns behind a password,
  with an auto-lock timeout. It is a screen gate, not encryption at rest —
  messages continue to sync while it is locked.
• Renders rich text through the shared core (removes the desktop-only fork) and
  ships as a Flatpak bundle.
• Adds moderation & safety: mute/block and NIP-56 report actions in the note menu
  with feed, thread, and profile enforcement (previously a silent no-op), NIP-36
  content-warning blur with tap-to-reveal, a sensitive-content toggle, and
  management screens — with snackbar feedback and zero-relay send warnings.
• Adds NIP-88 polls (render, vote, create) with a “Polls” search facet, and
  unifies the note ⋮ overflow and right-click menus.
• Fixes a desktop-cache race that could wipe the follow list, and makes sidebar
  navigation replace the detail overlay instead of hiding behind it.

§Cli

• Adds nak-style primitives: amy decode/encode (NIP-19/21), verify, key
  (generate/public/encrypt/decrypt/validate, NIP-49), and filter.
• Adds query verbs: amy fetch (one-shot with code-mode outbox resolution),
  subscribe (live NDJSON), count (NIP-45), and outbox USER (NIP-65).
• Adds amy sync — NIP-77 negentropy reconcile with deletion propagation — and
  amy event / amy publish for raw and pre-signed events.
• Adds amy encrypt/decrypt (NIP-44/04) and amy gift wrap/unwrap (NIP-59).
• Adds amy blossom (upload/download/list/delete/check/mirror, NIP-B7) with a
  live interop smoke test.
• Adds amy git (NIP-34), amy podcast and amy podcast20 (Podcasting 2.0 with
  V4V splits).
• Rounds out amy git to full NIP-34 parity: browse/cat/log over
  smart-HTTP, init from a local checkout, label (NIP-32), apply a patch to
  the working tree, and grasp list/set (GRASP server list, kind 10317).
• Adds amy buzz for block/buzz workspaces (channels, DMs, invite-link
  redemption), verified against a live Buzz relay.
• Turns amy into the Buzz workflow/agent runner. buzz agent serve/up/
  doctor run gated or parallel-backlog agents in isolated git worktrees that
  open PRs. buzz workflow trigger/run/approve/deny drive the human
  approval gate.
• Adds amy bolt12 (NIP-B1): decode offers and payer proofs, verify a zap,
  get/set a kind-10058 offer list, and a two-step intent → zap send.
• Adds the amy cashu wallet (NIP-60/61): wallet lifecycle, balance, mint,
  receive/send (LN / token / nutzap), and maintenance.
• Adds amy admin (NIP-86 relay moderation) and amy serve (run a relay by
  embedding geode).
• Adds NIP-46 remote signing: amy bunker server, amy login bunker://…, and
  amy login --nostrconnect, gated with --perms and interactive approval.
• Adds the amy graperank suite (crawl/score/publish/followers/rank/…),
  account-less crawl/score, and NIP-85 card publishing.
• Adds amy fof (follows-of-follows, renamed from amy wot), amy concord
  (encrypted communities), amy relaygroup (NIP-29), and amy geochat
  (BitChat-interoperable geohash channels).
• Adds NIP-13 proof of work (amy pow, --pow on posts), amy kind, amy nip,
  amy namecoin, amy status, and amy logoff.
• Expands amy nsite/napplet with publish, serve, and list.
• Switches the default event store to SQLite and hardens the output contract:
  single-line --json, exit codes 0/1/2/124, publish results carry each relay’s
  rejection reason, and read-only verbs run without an account.

§Quartz

• Adds NIP-77 negentropy sync (pipelined worker pool, multi-connection fan-out,
  bounded-memory streaming, LiveNegentropyIndex) and NIP-09/62 deletion
  propagation.
• Adds NIP-13 proof-of-work publishing: a cooperative-cancellation miner and a
  PoWNostrSigner decorator that composes with any signer, plus NIP-59
  gift-wrap mining on the outer wrap only.
• Adds NIP-66 RelayReachabilityStore — a durable, shareable dead-relay cache
  backed by kind:30166 events.
• Adds the Concord/CORD protocol foundation (key derivation, envelope layer,
  authority resolver, roles/moderation, CORD-05/06/07) and the NIP-5D/5A
  trust-boundary core (capability model, permission ledger, broker, wire
  protocol).
• Implements Marmot (MLS-over-Nostr) group icons byte-for-byte with the
  mdk/whitenoise scheme, and fixes SecretTree ratchet preservation across
  restore.
• Adds an OutboxDispatcher to fetch profile/contact events via each author’s
  outbox relays, and richer NIP-89 app-handler parsing.
• Adds the Buzz protocol surface (~78 event kinds spanning NIP-OA owner
  attestation, NIP-AM agent turn metrics, personas/teams/managed agents, streams,
  DMs, forums, presence, and moderation), verified against vectors generated by
  Buzz’s own Rust reference.
• Adds the BOLT12 zaps protocol layer (NIP-B1): kind-9736 zaps, kind-9737 zap
  intents, kind-10058 offer lists, full spec validation, and a payer-proof
  verifier with BOLT12 merkle reconstruction. NWC gains pay/receive methods.
• Widens NIP-50 search indexing to more event kinds and tag-borne text. Indexes
  only the public petname and summary on contact cards (kind 30382), never the
  encrypted fields.

§Geode (standalone relay)

• Adds relay-to-relay mirroring with strfry-router parity: a two-phase model
  (NIP-77 negentropy sync catch-up plus a live REQ tail), down / up / both
  directions, per-upstream mirror filters, and relay-to-relay trust.
• Keeps mirrors alive across upstream restarts with a retry pump and ping
  keepalive, and advances the since-watermark correctly on reconnect.
• Adds import / export NDJSON verbs and an optional no-full-text-search mode
  (--no-search) for lighter deployments.
• Adds [database] tuning knobs with periodic PRAGMA optimize, and validates
  config knobs and mirror filters at boot.
• Runs embedded in the CLI via amy serve.
• Serves full-set negentropy NEG-OPENs from a live index and streams mirror
  catch-up IDs instead of materializing them.
• Adds relayBench, a head-to-head benchmark harness (geode vs strfry vs any
  relay) measuring ingest, query, and NIP-77 sync over a shared corpus.
• Enables a combined tag+kind+pubkey index, a cost-based filesystem-driver pick,
  and runtime index materialization, with new tag∩author and driver-selection
  relayBench shapes.
• Ships a release pipeline: a GHCR Docker image, .deb/.rpm packages with a
  bundled JRE and systemd unit, a portable jlink’d tarball, and a Homebrew
  formula. Adds --version/--help and a boot smoke test in CI.
• Lets operators pick any Quartz IEventStore backend via [database].backend:
  SQLite (default), filesystem, or a custom store loaded by class name.

§Build & Documentation

• Rebuilds the Tor/Arti native library for the SOCKS reply-code fix, ships a
  Homebrew formula for amy, and seeds the Gradle distribution from a verified
  mirror in the web sandbox.
• Adds NIP-29 group-chat test coverage across every assembler, filter shape, and
  relay integration.
• Targets JVM 17 for Quartz, upgrades AGP, and replaces the abandoned
  android-test-report action with mikepenz/action-junit-report.
• Adds a coding standard banning raw invisible/bidirectional Unicode in source
  (Trojan-Source, CVE-2021-42574) and replaces existing occurrences with \u
  escapes.

§Contributors

• @npub1...fnj5z
• @npub1...n3eef
• @npub1...7y76c
• @npub1...k8tfp
• @npub1...d0jr5
• @npub1...9xzpc
• roguehashrate
• LubuSeb

§Translations

• Czech, German, Brazilian Portuguese, and Swedish by @npub1...n3eef
• Spanish (Spain, Mexico, and US) by @npub1...xq903
• French by @npub1...sr8fz
• Hungarian by @npub1...fh0tp
• Dutch by @npub1...ftxcd
• Hindi by @npub1...tw5e6
• Polish by @npub1...qwyrm
• Slovenian by @npub1...reecw
• Chinese Simplified by hypnotichemionus4
• German by crowdin.pretended462