§“Some days posting here feels like nobody’s listening. You write something you actually care about and it gets two reactions and a 21 sat zap from the few people who zaps everything.
§That’s what early looks like, though. The people who kept stacking through 2022 weren’t getting applause either, and most of their friends figured they’d lost it. The devs building clients here are shipping updates to a few thousand users and doing it anyway, because they think this matters. It does.
§No algorithm is paying anybody here to keep posting. If you’re still showing up, it’s because you believe in it. I’d rather build with a few thousand people like that than perform for a million who’d leave the day the feed changes.
§So keep posting, and zap accounts when they say something good. That’s how most of us got found in the first place.”
Nostr’s Value4Value (V4V) model is all about plebs directly rewarding creators for the value they receive, no middlemen fees, no ads, just pure community-driven support using sats via the Bitcoin Lightning Network.
Opens Nostr web apps (NIP-5D napplets) and static websites (NIP-5A nSites)
directly inside Amethyst, rendered in an isolated, keyless sandbox process that
cannot reach your private key, storage, or data.
Adds an in-app Browser — a drawer entry and pinnable bottom-bar tab — with an
omnibox address bar, autocomplete, history, favorites, recents, and captured
favicons. The address bar is drawn by Amethyst, never by the page, so its URL
cannot be spoofed.
Adds “Log in with Amethyst”: nSites open with a NIP-07 window.nostr
provider, so standard Nostr web apps can sign in and request signatures as your
active account — consent-gated, sign-only, and scoped per site.
Lets web apps, with your permission, pay through your wallet (NWC), run live
relay subscriptions and queries, and read your identity (profile, lists, zaps,
badges) — every capability brokered and permission-gated (once / this session /
always). Payments always prompt with the amount shown.
Pins favorite web apps to the bottom bar as embedded, swap-in-place tabs that
stay warm between visits.
Discovers web apps: the empty browser suggests a curated list plus nSites and
napplets published by people you follow, and profiles gain an “Apps & Sites”
tab.
Adds a Connected Apps / permissions screen to review and revoke what each app
can do.
Routes nSite web traffic through Tor by default when Tor is active, with a
per-site onion/globe toggle.
Gives each account its own web storage — cookies, logins, and site data no
longer leak between the accounts on your device. Sites you were already signed
into are signed out once; signing back in stores the session under the account
you are using, and switching away and back keeps it.
Scopes granted permissions per account too, so each app asks once more under
each account you use it with. A grant by one account no longer applies to the
others.
Adds Concord: an end-to-end-encrypted communities protocol with channels,
membership, invites, roles, moderation, and history — reachable from a hub in
the drawer and pinnable to the bottom nav.
Creates and edits communities with encrypted icon/banner, relay editing, and
channel management.
Invites and joins via minted invites with QR codes, tappable invite links,
paste-to-redeem from Search, deep links, and direct member invites.
Chats in channels with a rich composer (@mentions, custom-emoji autocomplete,
reply preview), encrypted image messages, reactions, replies, and typing
indicators.
Adds threaded replies (inline or minichat modes) and delivery ticks for your
own messages.
Groups channels by community in Messages with last-message previews, unread
dots, facepiles, live typing, and per-type load toggles.
Adds moderation: ban/unban with read-time enforcement, role grants, a “Make
admin” toggle, and a full member roster. A ban hides a member’s posts for
everyone else; removing their access to the community’s keys takes a
Refounding.
Backfills channel history across epochs, paging back to the true start of a
channel.
Surfaces Concord replies and reactions on the Notifications tab with a
community pill.
Lets authors edit their own channel messages (kind 3302). Latest edit wins,
and it is non-destructive, so reactions and replies stay attached. Only the
original author’s edits take effect.
Browses Nostr git repositories in-app: a Git Repositories feed and a per-repo
screen with README and Code tabs.
Reads code with branch/tag switching, file search, image preview, commit
history, syntax highlighting, and word-level diff highlighting.
Reviews patches and pull requests with computed diffs and status actions; PR
updates surface on the repo screen. The code browser needs a repository with an
http(s) clone URL.
Manages issues: Issues and Patches & PRs tabs split by open/closed, issue
labels with filtering, and a full-screen New Issue composer.
Edits a repository announcement from the repo screen, bookmarks repositories,
and filters the feed to your own repos.
Adds a project-home dashboard with stats, languages, recent activity, and
last-commit rows.
Adds Location Channels: geohash-based public rooms that interoperate with
BitChat, browsable from a dedicated drawer list and pinnable to the bottom nav.
Posts under an unlinkable per-area anonymous identity, or opt in to post as
your real account. An optional nickname survives restarts, but it is a single
handle reused in every area — setting one links your posts across areas.
Teleports to any place from a map picker or the feed-filter dialog to read and
post to distant rooms, and follows a teleported place to keep its feed.
Reacts, zaps, and replies on location messages, with a “live near you” bubble
on Home surfacing nearby rooms.
Adds a “pick on map” location picker to the short-note and all other composers.
Adds Buzz: a self-hosted workspace where humans and AI agents build together on
a relay you own, built on the NIP-29 relay-group family with plaintext content
so the relay can run search, audit, and workflows. Reachable from a “Buzz
Workspaces” bottom-nav tab and the drawer Feeds list.
Renders workspace channels natively and composes messages; sections a community
into Channels, Forums, inline DMs, and an Agent Console; and renders forum posts
as Concord-style threads with the full chat composer.
Adds an agent-owner console with cost and personas tabs, an agent-fleet cost
aggregator, live observer telemetry, persona create/edit, and NIP-OA attestation
issuance.
Adds live typing indicators, presence dots, collapsible sections with unread and
stars, a workspace canvas viewer and edit composer, and a bot “Working…”
indicator.
Invites people to a channel or community and mints invite links; redeems invite
links (intercepted into the in-app browser) and auto-invites mentioned
non-members.
Wires Buzz direct messages end to end, titles a DM by its participant, and
surfaces Buzz DMs in the Notification feed rendered as messages.
Discovers workspaces and DMs via the relay’s own kinds, imports workspace
channels from a relay in “Find groups”, and routes Tor workspaces to clearnet
when needed.
Adds a shared Agent Work board. Any channel member files a task, upvotes
to reprioritize it, and watches the workspace’s agent carry it to a pull
request. Jobs that ship directly and gated workflow runs fold into one board,
grouped by Needs approval / Working / Up next / Shipped.
Approves or denies a gated run in place. The “Approve & open PR” step
authorizes a push and PR, but never merges or deploys. Adds a confirm step, an
approver and workflow-definition picker, and Buzz Agent Persona editors for
model, provider, and runtime.
Asks before adding you to a channel someone else put you in (Accept / Ignore /
Leave). Narrates channel changes as plain-language system lines: “Bob added
Alice”, topic, visibility, and TTL changes, and more.
Notifies the requester when their agent job finishes or fails. Lets a
self-hosted geode relay be the private Buzz workspace via a member-and-agent
membership policy.
Redesigns message rendering across every chat — DMs, public chats, groups, and
communities — with modern bubbles, swipe-to-reply, send motion and press
feedback, per-author name colors, jumbo emoji, day headers drawn above the
messages they introduce, and a timestamp on the last message of each author
run.
Replaces the message 3-dot menu with a compact two-stage long-press sheet that
unpacks wrapping reactions and zap-amount presets in place.
Renders channel admin events as centered system messages, and hides a reply
quote when it targets the message directly above.
Replaces the Messages FAB speed-dial with a full-screen, color-coded
new-conversation chooser, and adds a Messages settings screen with a
grouped-by-relay view and per-type load toggles.
Warns about DMs from senders reported by people you follow: flags a reported
counterpart on the chat-list row and inside the room, with a per-user
report-warning flow.
Redesigns push notifications into per-kind, observable, richly-rendered
notifications that resolve inline @npub mentions to display names, render an
inline image link as the big picture, and attribute a reply’s parent to its real
author.
Adds push notifications for Buzz DMs and for bare reactions and reposts to your
notes, with repost-mute parity. Auto-dismisses a tray notification once its
event is read in-app.
Rebuilds the in-app Notifications tab with infinite-scroll paging via a
look-ahead buffer, time-based history paging with in-feed load markers, and
auto-retry of stalled or faulty relays with an actionable relay detail.
Lets other apps and websites sign through Amethyst for the first time
(NIP-46): connect by scanning or pasting a nostrconnect:// code, and keep
signing in the background — whether your key is stored directly in Amethyst or
delegated to an external signer like Amber (NIP-55).
Asks for informed consent before authorizing an app — showing its name and
icon, which account will sign, the exact permissions, and an event preview —
with per-account sheets and one-tap batched approval.
Manages connected apps from a dedicated screen with per-app relay list, live
health, time-bound grants, and instant “forget this app”.
Adds interactive relay login prompts (NIP-42): choose Once / Always / Never
per relay, with venue-aware prompts for public chats, communities, and live
streams, and one-tap rules to trust relays used by people you follow. Apps
connected through the remote signer now ask before signing a relay login,
instead of approving it automatically under “Let’s be reasonable”.
Discovers Web-of-Trust score providers via NIP-85 and shows hop distance and
follower count on trust cards. Computing the scores — crawling the social graph,
reverse-follower crawling, and publishing NIP-85 cards — is done by the amy
command-line tool, not the app; see the Cli section.
Adds proof-of-work (NIP-13) publishing: a fire-and-forget mining queue with
per-account difficulty and per-category settings, scheduled-post mining, and
per-post overrides, shielded by a foreground service and mined across half the
device’s cores.
Adds NIP-77 negentropy sync as a first-class capability, with deletion
(NIP-09/62) propagation so scoped syncs no longer strand deletions.
Shows PoW mining progress, and surfaces PoW, OpenTimestamps, and location
markers as tap-to-explain pills in the note header.
Adds Podcasting 2.0: renders shows in detail and thread views, surfaces
episodes in the merged podcast feed, and plays trailers.
Shows person credits as real Nostr profiles, soundbites, in-app chapters, a
transcript viewer, and a Top Supporters leaderboard.
Adds per-episode reactions and NIP-22 comments, a Podcast Bookmarks screen, and
value-for-value Lightning splits paid per-minute during real playback.
Adds in-app podcast authoring: create and edit shows, episodes, and trailers
from an authoring hub, with a value-for-value split editor that adds Nostr
recipients by search. Verifies NIP-F4 podcast authors against their kind-10064
counter-claims.
Adds BOLT12 zaps: self-verifying kind-9736 events that prove a real BOLT12
Lightning payment. They carry a settlement proof instead of relying on an
LNURL receipt. They fold into the same zap total and reactions row as Lightning
zaps, with anonymous and receiptless (pay-only) variants. Only cryptographically
verified proofs count toward the total.
Publishes and edits your own BOLT12 offer list (kind 10058) from an in-app
editor. The list is cached, kept live, and restored across restarts.
Pays a recipient’s published offer. Hand it to an external wallet as a bitcoin:?lno= (BIP21) intent, or pay in-app over a NWC wallet that supports
it.
Sends zaps over NWC, using the new pay/receive methods
(nostr-wallet-connect/nwc#2). Prefers BOLT12 over Lightning when the recipient
offers it and the wallet supports it, and falls back to a Lightning zap
otherwise.
Verifies payer proofs cryptographically: payment-hash preimage, invoice and
proof signatures, and BOLT12 merkle reconstruction of selectively disclosed
fields. Dims and does not count a proof that can’t be bound to the offer.
Adds a Cashu wallet setup wizard: find-or-create with cross-relay discovery,
mint suggestions, and a CashuMints screen; the wallet auto-publishes on mint
add/remove.
Claims P2PK-locked Cashu tokens (NUT-11). Matches the lock against your wallet
or identity key, and redeems all-or-nothing. Gives a clear error when a token
is locked to a key this wallet can’t sign for.
Adds a setting to hide the on-chain (Bitcoin) wallet, including from zap
buttons.
Prefers NIP-44 encryption for NWC when the wallet advertises it. Adds a NWC-07
deep-link pairing helper. Posts a tray notification for incoming non-zap
Lightning payments.
Adds a resource-usage ledger: on-device battery and data accounting across
relay connections, media, HTTP, proof-of-work, Tor, calls, decrypts, and
remote signs, with per-screen foreground time and reconnect-churn tracking.
Optional NIP-17 reports mail the summary to yourself.
Presents it on a usage screen with stat tiles, a trend chart, proportion bars,
cellular-first bars, a Tor card, actionable insights, and a live memory card.
Adds a master switch for the always-on background notification service with
per-account participation, a cost card that links to notification settings,
and a distinct status-bar icon.
Scales LocalCache pruning to the OS memory-pressure level, and trims feed
lists, rich-text/robohash/relay-info caches, the image cache, and the player
warm pool under pressure.
Adds theme customization: pick an accent color (with a swatch picker), font,
and font size. The accent now drives Material 3 containers, buttons, FABs,
switches, unread dots, selected-reaction highlights, verified NIP-05 / image
marks, and the Following badge.
Redesigns UI Preferences into grouped in-screen options with live font
previews, and adds a settings search filter in the app bar.
Adds a Blossom media file manager: browse and manage stored blobs with per-file
controls, mirror and /media toggles, an app-level “Sync all” with progress,
and BUD-07 confirm-then-pay mirroring for paid servers.
Extends the Blossom manager with a gallery grid (video thumbnails and a
full-screen zoomable viewer) and a per-file detail sheet. Adds an importer that
copies blobs from other Blossom servers into yours. Falls back to a verified
download-and-reupload when a target has no /mirror.
Redesigns the Media Servers screen as a single auto-saving canvas with a
reorderable priority list and cached health probes.
Redesigns the bottom-bar setup with a live preview, drag-to-reorder, and real
favicons; the default bar becomes Home, Messages, Wallet, Browser,
Notifications.
Adapts the app shell to large screens: tier-scaled navigation transitions, a
reading-column width cap on wide panes, and a two-pane Messages layout.
Nicknames people with NIP-85 contact cards (kind 30382) signed by your account
key. The nickname shows above their real display name on the profile and
supports custom emoji.
Adds fitness support: renders POWR strength workouts (kind 1301) and exercise
templates (kind 33401) as cards, and merges close-by Health Connect sessions of
the same type.
Renders Birdstar bird detections (kind 2473) with common-name titles and
Wikidata links, surfaces Birdex life lists on home and profile, and renders PS1
memory-card saves (kind 38192) with an animated BIOS icon.
Adds a compose signature pre-filled in text-based post screens, and an optional
subject/title field in the short-note composer.
Renders NIP-30 custom-emoji reactions as an avatar badge, a lone zap/nutzap as
a large activity card, and NIP-84 highlights from web highlighter clients.
Supports NIP-51 mute-list hashtag entries and public-chat reply notifications.
Modernizes the Privacy, Profile UI, Home Tabs, and Calendar Reminder settings
screens into grouped in-screen options.
Adds “Share as QR” for a note, with a choice of note or naddr payload and an
image thumbnail for image-only notes.
Resolves NIP-05 identifiers (including Namecoin .bit) in the @-mention
popover, wiring them to nostr: mentions.
Speeds up napplet/nSite opens by overlapping WebView init, prefetching blobs in
parallel, and fast-serving content-addressed blobs from cache.
Substantially faster GrapeRank crawls (background IO, mass pre-connect with
cached DNS, batched contact reads, parallel outbox fetches, early dead-relay
pruning) and faster scoring via Gauss-Seidel sweeps over a compact integer
graph.
Speeds up NIP-77 reconcile with direct-built wire frames (~2.5x), O(1) range
fingerprints, a live negentropy index, and an allocation-free idle watchdog.
Prefetches media and pre-parses note text ahead of the viewport, adds a k-way
merge for the home feed, and pins indexes for multi-author queries.
Adopts a caching event decoder across Android/Desktop/CLI, batches Schnorr
verification off the receive path, and keeps light/dark resolution O(1) after
an accent change.
Parallelizes Blossom “Sync all”, prefetches a joined group’s history, and mines
proof-of-work on half the device’s cores.
Orders NIP-50 relay search by bm25 relevance and scales search and tag-watcher
queries with corpus size, picking the SQLite filesystem driver by cost and
materializing indexes at runtime.
Removes live-path allocations in LiveEventStore and FilterIndex (and on the
frame/search paths), and snapshots FilterIndex with a persistent map.
Normalizes accent theming: contrast-picks onPrimary so filled buttons/FABs stop
washing out, bases light/dark on background luminance, and fixes accent
regressions.
Keeps live HLS streams playing and caches only proven on-demand HLS; shows a
browser-fallback overlay when a decoder stalls and pauses looping videos after
5 plays.
Adds an HTTP/2 keepalive ping to stop stale-connection image stalls.
Hardens the relay client: enforces blocked relays on every REQ/COUNT/publish,
backs off from REQs relays repeatedly refuse, drops relays that fail hard
during crawls, caches each relay’s advertised LIMITS, and fixes reconnect
backoff on network/transport changes.
Shows and edits Marmot (MLS) group icons in the feed and in group metadata,
interoperable with other Marmot clients.
Opens zaps and reactions in their own thread view, turns Notify chips into bell
mute-toggles that list every thread member, and replies with kind 1111 to
Amethyst’s own kind-1 thread roots.
Adds search, a local filter, and a top-nav feed filter to the App
Recommendations screen, and shows a website’s favicon and domain across every
browser-connected app view.
Fixes nutzap relay routing to receive/advertise on inbox/DM (kind 10019)
relays instead of outbox.
Fixes Concord invite handling (revocation, keyless CORD-05, clearer failure
copy, no hang on bad links, skip re-join) and channel rows stuck on “No
messages yet”.
Persists the Concord community list and loads pinned communities from their own
relays so cold boot no longer refetches, shows channels on Messages as soon as
the control plane folds, warms channel previews so the list fills without opening
each channel, and rank-gates the Ban/Remove affordances (CORD-04).
Sizes the video player box so live streams stop rendering black bars, and
enforces the decoder budget when acquiring players.
Stops stamping our client tag on someone else’s event template so external
signers sign it unchanged.
Keeps calendar RSVP buttons on a single line, drops dead top padding on Home
when there are no live bubbles, and modernizes the Zap the Devs donation card.
Rejects NIP-29 group state not signed by the relay, opens group posts in the
group chat, and fixes subgroup edit safety and pinned-message jump.
Makes tapping a message timestamp open delivery info instead of toggling the
time format, and right-aligns your own messages.
Recovers a media file’s type from its extension when the imeta MIME is
malformed, and moves several disk reads (boot receiver, signer policy) off the
main thread.
Serializes account construction so concurrent loaders can’t build duplicate
accounts.
Routes Onion-Location through the Android app’s HTTP clients and maps Tor/Arti
errors to accurate SOCKS reply codes.
Extracts the rich-text renderer and many event cards (calendar/RSVP, podcast
atoms/splits, relay discovery, code snippet, ecash mint, activity, Git
diff/status, and more) into shared commons so Desktop and Android render
identically.
Sends pictures in minichat thread replies (encrypted in Concord, plaintext in
public chats). Resolves @-mentions in the minichat composer and tray
quick-replies. Adds p tags for people cited in kind 9/11/1111 and Buzz stream
messages, so mentions notify and resolve.
Stops the inline audio player from painting over the note below it. Marks
every room type read from the Messages “mark as read” action.
Fixes numeric HTML entities in link-preview meta tags. Routes kind-39005 by tag
shape, so Buzz thread summaries no longer parse as NIP-29 pin lists.
Shortens over-long translated strings across 23 locales and fixes duplicate
and CDATA translation issues.
Redesigns notifications with a reworked inbox and native OS toast
notifications.
Adds NIP-42 relay AUTH with an inline Once / Always / Never approval banner and
persisted grants.
Makes NIP-17 private DMs reliable: resolves recipient inbox relays, fetches DM
relay lists and account/Blossom config from outbox relays, and stops falling
back to connected relays.
Adds Web-of-Trust score badges, Follow Packs (NIP-51) discovery with one-tap
follow, note scheduling, opt-in NIP-37 draft sync, and a hashtag-spam filter.
Adds a Privacy Lock: gate the Messages and Wallet columns behind a password,
with an auto-lock timeout. It is a screen gate, not encryption at rest —
messages continue to sync while it is locked.
Renders rich text through the shared core (removes the desktop-only fork) and
ships as a Flatpak bundle.
Adds moderation & safety: mute/block and NIP-56 report actions in the note menu
with feed, thread, and profile enforcement (previously a silent no-op), NIP-36
content-warning blur with tap-to-reveal, a sensitive-content toggle, and
management screens — with snackbar feedback and zero-relay send warnings.
Adds NIP-88 polls (render, vote, create) with a “Polls” search facet, and
unifies the note ⋮ overflow and right-click menus.
Fixes a desktop-cache race that could wipe the follow list, and makes sidebar
navigation replace the detail overlay instead of hiding behind it.
Adds query verbs: amy fetch (one-shot with code-mode outbox resolution), subscribe (live NDJSON), count (NIP-45), and outbox USER (NIP-65).
Adds amy sync — NIP-77 negentropy reconcile with deletion propagation — and amy event / amy publish for raw and pre-signed events.
Adds amy encrypt/decrypt (NIP-44/04) and amy gift wrap/unwrap (NIP-59).
Adds amy blossom (upload/download/list/delete/check/mirror, NIP-B7) with a
live interop smoke test.
Adds amy git (NIP-34), amy podcast and amy podcast20 (Podcasting 2.0 with
V4V splits).
Rounds out amy git to full NIP-34 parity: browse/cat/log over
smart-HTTP, init from a local checkout, label (NIP-32), apply a patch to
the working tree, and grasp list/set (GRASP server list, kind 10317).
Adds amy buzz for block/buzz workspaces (channels, DMs, invite-link
redemption), verified against a live Buzz relay.
Turns amy into the Buzz workflow/agent runner. buzz agent serve/up/ doctor run gated or parallel-backlog agents in isolated git worktrees that
open PRs. buzz workflow trigger/run/approve/deny drive the human
approval gate.
Adds amy bolt12 (NIP-B1): decode offers and payer proofs, verify a zap,
get/set a kind-10058 offer list, and a two-step intent → zap send.
Adds the amy cashu wallet (NIP-60/61): wallet lifecycle, balance, mint,
receive/send (LN / token / nutzap), and maintenance.
Adds amy admin (NIP-86 relay moderation) and amy serve (run a relay by
embedding geode).
Adds NIP-46 remote signing: amy bunker server, amy login bunker://…, and amy login --nostrconnect, gated with --perms and interactive approval.
Adds the amy graperank suite (crawl/score/publish/followers/rank/…),
account-less crawl/score, and NIP-85 card publishing.
Adds NIP-13 proof of work (amy pow, --pow on posts), amy kind, amy nip, amy namecoin, amy status, and amy logoff.
Expands amy nsite/napplet with publish, serve, and list.
Switches the default event store to SQLite and hardens the output contract:
single-line --json, exit codes 0/1/2/124, publish results carry each relay’s
rejection reason, and read-only verbs run without an account.
Adds NIP-77 negentropy sync (pipelined worker pool, multi-connection fan-out,
bounded-memory streaming, LiveNegentropyIndex) and NIP-09/62 deletion
propagation.
Adds NIP-13 proof-of-work publishing: a cooperative-cancellation miner and a PoWNostrSigner decorator that composes with any signer, plus NIP-59
gift-wrap mining on the outer wrap only.
Adds NIP-66 RelayReachabilityStore — a durable, shareable dead-relay cache
backed by kind:30166 events.
Adds the Concord/CORD protocol foundation (key derivation, envelope layer,
authority resolver, roles/moderation, CORD-05/06/07) and the NIP-5D/5A
trust-boundary core (capability model, permission ledger, broker, wire
protocol).
Implements Marmot (MLS-over-Nostr) group icons byte-for-byte with the
mdk/whitenoise scheme, and fixes SecretTree ratchet preservation across
restore.
Adds an OutboxDispatcher to fetch profile/contact events via each author’s
outbox relays, and richer NIP-89 app-handler parsing.
Adds the Buzz protocol surface (~78 event kinds spanning NIP-OA owner
attestation, NIP-AM agent turn metrics, personas/teams/managed agents, streams,
DMs, forums, presence, and moderation), verified against vectors generated by
Buzz’s own Rust reference.
Adds the BOLT12 zaps protocol layer (NIP-B1): kind-9736 zaps, kind-9737 zap
intents, kind-10058 offer lists, full spec validation, and a payer-proof
verifier with BOLT12 merkle reconstruction. NWC gains pay/receive methods.
Widens NIP-50 search indexing to more event kinds and tag-borne text. Indexes
only the public petname and summary on contact cards (kind 30382), never the
encrypted fields.
Adds relay-to-relay mirroring with strfry-router parity: a two-phase model
(NIP-77 negentropy sync catch-up plus a live REQ tail), down / up / both
directions, per-upstream mirror filters, and relay-to-relay trust.
Keeps mirrors alive across upstream restarts with a retry pump and ping
keepalive, and advances the since-watermark correctly on reconnect.
Adds import / export NDJSON verbs and an optional no-full-text-search mode
(--no-search) for lighter deployments.
Adds [database] tuning knobs with periodic PRAGMA optimize, and validates
config knobs and mirror filters at boot.
Runs embedded in the CLI via amy serve.
Serves full-set negentropy NEG-OPENs from a live index and streams mirror
catch-up IDs instead of materializing them.
Adds relayBench, a head-to-head benchmark harness (geode vs strfry vs any
relay) measuring ingest, query, and NIP-77 sync over a shared corpus.
Enables a combined tag+kind+pubkey index, a cost-based filesystem-driver pick,
and runtime index materialization, with new tag∩author and driver-selection
relayBench shapes.
Ships a release pipeline: a GHCR Docker image, .deb/.rpm packages with a
bundled JRE and systemd unit, a portable jlink’d tarball, and a Homebrew
formula. Adds --version/--help and a boot smoke test in CI.
Lets operators pick any Quartz IEventStore backend via [database].backend:
SQLite (default), filesystem, or a custom store loaded by class name.
Rebuilds the Tor/Arti native library for the SOCKS reply-code fix, ships a
Homebrew formula for amy, and seeds the Gradle distribution from a verified
mirror in the web sandbox.
Adds NIP-29 group-chat test coverage across every assembler, filter shape, and
relay integration.
Targets JVM 17 for Quartz, upgrades AGP, and replaces the abandoned
android-test-report action with mikepenz/action-junit-report.
Adds a coding standard banning raw invisible/bidirectional Unicode in source
(Trojan-Source, CVE-2021-42574) and replaces existing occurrences with \u
escapes.
Adds four home feed content types: Pictures (NIP-68), Videos and Shorts
(NIP-71), and Torrents (NIP-35), each with its own toggle.
Adds “New Picture”, “New Short” and “New Video” share targets, so media shared
into Amethyst opens the matching composer instead of a text note with a link.
Adds a bulk audience picker to the short-note composer: search people lists and
follow packs, review the members, then add them all at once.
Adds a poll results page with per-option vote counts and a filterable voter
list, replacing the feed card’s four-avatar preview.
Shows rich previews for comments scoped to external content (NIP-73), both in
the “replying to” line and as the thread’s title.
Offers a “Copy Original / Copy Translated” chooser when copying a note that has
been translated.
Opens the edit screen when a draft reply is tapped in a thread.
Redesigns the relay login permissions screen. Explicit exceptions, relays
blocked by your block list, and recent logins are now three separate sections.
Starts new accounts on “always log in” instead of deciding per relay.
Remembers a login for the rest of the session when you answer without ticking
“remember”, so a reconnect stops asking again.
Honors “always log in” for relays your own account does not publish to.
Makes the “reading someone I follow” toggle reachable — it sat behind a
first-party gate that could never be true.
Counts NIP-29 groups and Concord communities as rooms you joined, so their
host relays authenticate under “my relays and venues”.
Waits for an auth challenge to resolve rather than letting the fetch time out.
Mutes a public chat from a long press in Messages or from the channel menu.
Deletes (kind 9008) and archives NIP-29 channels, with the Buzz community UI to
match.
Keeps a channel invite’s replies, reactions and zaps inside the relay that sent
the invite, instead of broadcasting them to your outbox.
Derives Buzz channel invites from cached membership notices, so they stop
appearing and disappearing.
Redesigns channel invite cards as feed rows, with the person who added you as
the row’s author.
Shows the hosting relay’s name chip on relay group message headers.
Splits the Concord Control Plane’s stream key so a staff-held control_root
write-gates it (CORD-02 §2).
Closes the Concord CORD-05/06 invite lifecycle: an Invite List, a re-mint on
Refounding, and revocation.
Stops pinning Concord entities whose chain crosses a Refounding, which was
discarding their newer state on every refold.
Closes seven Concord soft-ban holes — a banned member kept control_root, half
the Control Plane never read the banlist, and the invite button still worked.
Scans NIP-19 entities, hashtags and legacy #[n] references without ICU. On
Android, Regex.matchAt copied the whole note content into native memory per
candidate, which grew a cold start to ~1.9 GB and got the app killed.
Scans note content by literal instead of restarting the regex engine at every
position in every note.
AOT-compiles the relay ingest path with a baseline profile. Release cold-start
ingest was spending 36× more CPU interpreting bytecode than verifying
signatures.
Demotes the ~650 relay and ingest worker threads below the UI thread, so the
connect storm cannot starve the first frames (~40% faster first paint).
Reclaims memory under heap pressure and stops leaking sandboxed WebView
Activities.
Bounds the duplicate-frame decoder cache in both size and age.
Stops blocking coroutine workers on synchronous OkHttp calls, which released
their CPU permits and starved the dispatcher.
Stops the outbox getting slower with every publish — it rebuilt an immutable map
per send, copying every pending entry.
Stripes the subscription-state lock per relay, ending the ANR convoy that had
37 of 52 workers spinning on one lock.
Memoizes Concord guestbook envelope opens, so the fold stops re-decrypting the
whole buffer on every arrival.
Caches the painter on its first miss in painterRes.
Optimizes the proof-of-work mining hot loop for the Android runtime.
Skips the ~220 ms system call when the app locale has not actually changed.
Confines the Blossom cache probe and server resolver to the IO dispatcher, and
re-probes it when the toggle flips.
Releases dead subscription rows, so connect and disconnect stop scanning every
subscription ever created.
Prefetches NIP-73 external-content preview URLs so those cards stop popping in
mid-scroll.
Adds fixed-size hex codecs for 32- and 64-byte values.
Settles the keyboard inside navigation, so leaving a screen mid-animation stops
stranding imePadding across the whole app.
Routes the draft-saving editors through KeyboardAwareBackHandler, so a
predictive back gesture no longer races the IME close.
Raises the keyboard again when you tap a field in an embedded tab that was
already focused.
Pads for the soft keyboard in full-screen napplet hosts on Android 15+.
Fixes the crash when switching between two pinned web-app tabs.
Stops drawing a blank parent card above a top-level community post.
Fixes Cashu wallet balances reading low: proofs are now backfilled past the
relay’s page cap and history is paged.
Keeps PDF previews stable — the page ratio is cached, so scrolling back no
longer collapses the card and replays the grow-in animation.
Stops rendering non-media NIP-94 files as video.
Repairs imeta MIME types written as a bare subtype, so those images can be
shared again.
Works around a fatal media3 crash on Low-Latency HLS streams.
Drives the “Can’t reach this relay over Tor” banner from live socket state
instead of a bare six-second timer.
Stops a lone repost from being bundled into the always-on service notification,
where it inherited the ongoing flag and refused to swipe away.
Fails push registration loudly on an HTTP error, instead of caching a token for
a device that will never receive anything.
Listens for location only while foregrounded, and fixes the meter that reported
7 hours of listening against 9 seconds of foreground.
Excludes quote characters from parsed URLs.
Fixes the OpenGraph meta parser losing every tag after an apostrophe inside a
comment or script, which broke link previews on some sites.
Requests the follower-count provider’s kind 30382 cards, so the count stops
rendering as --.
Gives the invite roster line’s member count its unit, so a bare number no longer
reads as counting the avatars beside it.
Removes the recent-poster facepile from Concord and Buzz channel rows.
Renders every NIP-71 video subtype through the shared interface.
Reworks the chat bubble reply swipe on lower-level pointer APIs, so it only
claims the gesture once the motion is clearly horizontal.
Turns the default log into a boot narrative instead of a firehose.
Converts the drawer’s hidden-count to a plural, fills the untranslated backlog
for Czech, German, Swedish and Brazilian Portuguese, restores placeholders
dropped from German and Polish plurals, and drops an unused plural.
Enriches the DM composer and message list: emoji picker with custom emoji,
@mentions, reply-quoting with jump-to-original, Nostr-native GIF search, rich
message rendering, per-message image quality, and encrypted file uploads.
Redesigns Settings as a searchable accordion of labeled cards, with
expand/collapse-all and a filter over titles and keywords.
Brings the profile screen to parity: banner, rich-text bio, a CLINK offer field,
six new tabs (Followers, Following, Relays, Bookmarks, Yours, Zaps received) and
header actions.
Adds a guided “save your keys” step on first run and a key backup in Settings.
Android gets a soft nudge after signup.
Loads metadata and reactions only for what is on screen, through the shared
finders in commons, and unsubscribes when it leaves.
Enables the master notification switch when the OS permission is already
granted.
Publishes Windows arm64 and Linux arm64 desktop builds.
Adds Trusted Lists (kinds 30392–30395), the aggregate counterpart to NIP-85
Trusted Assertions, and indexes their labels for NIP-50 search.
Fixes a SharedKeyCache collision that could return one peer’s shared secret
for another peer’s message, and compares MACs in constant time.
Measures NIP-66 relay health from traffic the client already makes, streams
probe verdicts as relays answer, checks read and write separately, lets a
monitor publish what it learned without dialling, and merges verdicts into the
record they replace instead of overwriting it.
Measures rtt-open as the transport handshake, not the time the call spent
queued in the dispatcher.
Records sync coverage per kind rather than one interval per filter, keys its
persistence with a typed band, closes a drained leg, and terminates a paged walk
against a relay that ignores until.
Strikes a host out and tracks its unreachability with publish-safe semantics,
so a dead host stops being retried at the same rate as a live one.
Sizes negentropy reconcile windows from the caller’s own index, states the
relay’s cap, and lets a caller decline an id before its body crosses the wire.
Normalizes every accessory timeout to an idle window, drops the maxTotalMs
ceiling that cut healthy fetches, and stops fetchAllPages cropping a streaming
page.
Stops COUNT inheriting the REQ page size, which capped a count at 500.
Suspends the incoming-message chain down to SubscriptionListener.onEvent, so a
consumer that cannot keep up no longer blocks every shared worker.
Compares every filter in FiltersChanged, not just the first.
Fixes an InProcessWebSocket race that delivered a connect-time AUTH challenge
before onOpen.
Adds StoreQueryContext, carrying the NIP-42-authenticated caller identity into
observer-relative stores.
Adds a NIP-50 search grammar (quoted phrases, negation) with weighted field
extraction, and shares the store-semantics rules across implementations.
Parses metadata leniently everywhere, and recovers blank, single-element and
malformed kind-0 content instead of dropping the profile.
Parses ServiceType without splitting on a separator that may not be there.
Declares pointer hints on Report, ChatMessage, Classifieds and ChannelCreate.
Refreshes created_at while mining, so a post that takes minutes to mine does
not publish stale.
Decouples the LocalCache and Account god classes into single-purpose
collaborators, 3,800 lines lighter, with no behavior change.
Adds a :baselineprofile module that records a real startup journey, replacing
the hand-authored profile’s wildcards.
Notarizes the macOS DMG and verifies it, adds libegl1 to the arm64 .deb
dependencies, and moves the Homebrew and Winget bumps onto a maintainer machine.
Shrinks the mirror-sync throughput corpus on CI, which had been timing out the test-geode job for weeks.
Confines the QUIC stream drainer to the producer’s event loop, deflaking it
under parallel test load.
Hardens workflow-ship.sh and pins it with a regression harness.
Adds three store-implementer skills: event store semantics, NIP-85 trusted
assertions and searchable events.
Bumps 30+ dependencies plus Gradle, Compose, Firebase, Media3, Ktor and OkHttp.
After your feedback, we’re opening the door wider.
You shouldn’t need 250k sats just to show that you believe in what we’re building. Some can contribute more, some less: but every contribution moves the mission forward.
PsstPsst is a decentralized, end-to-end encrypted messaging app. This release adds swipe-to-reply, faster message composing on desktop, optional unread-message counts, and a more adaptive media gallery. It also improves scrolling and reply stability, updates conversation times while the app is open, and fixes occasional message ordering issues. While this was the latest, there was also the release of v0.2.1 last week.
nReadr is a KOReader plugin that publishes book highlights to Nostr using NIP-84. The release v0.1.4 updates the release-publishing tooling to match the current NIP-82 draft specification, improving how software releases and assets are tagged and discovered by NIP-82-aware Nostr clients. This was the latest, and there were also the releases of v0.1.0, v0.1.1, v0.1.2 & v0.1.3 last week.
§3. Amethyst - v1.16.0 - My Fitness, BOLT12 Payments, and a Leaner Core
Amethyst is a Nostr client for Android. This release adds BOLT12 offers to profile payments and the zap picker with BOLT11 fallback, introduces the My Fitness personal training dashboard through Health Connect, improves Blossom authentication and media handling, fixes relay connection counting and wallet history behavior, and significantly cleans up the core by splitting commons modules and resolving dozens of bugs and warnings.
Amber is a Nostr event signer for Android. This release improves Tor privacy and reliability by preventing clearnet leaks during startup, reducing background battery usage, recovering relay connections after Tor restarts, and ensuring relay WebSocket connections close properly. It also adds sign-event labels for Armada event kinds, including presence, typing indicators, NIP-29 group management, Buzz forums, and webxdc app data.
Alby Lightning Browser Extension is a Bitcoin Lightning and Nostr browser extension that brings WebLN payments, LNURL, and Nostr signing to the web. The release v3.15.0 is a security-focused release that hardens LNURL requests, adds stricter LNURL-auth and Schnorr-signing confirmations, fixes allowance-budget handling, removes webln.request(), and updates several security-sensitive dependencies.
YakiHonne Mobile App is a decentralized social platform mobile app built on Nostr for sharing posts, articles, and media. This release adds a video editor and compressor before publishing, improves the engagement chart, and fixes GrapheneOS feed loading, scrollable note previews, paid-note payments, notification handling, and replies not appearing under some notes.
Wisp is a minimal Android Nostr client. This release adds stricter inbox-only routing for threads and notifications, improves onboarding and account sign-in, adds full-balance on-chain wallet withdrawals, fixes token amount display, and treats NIP-22 kind 1111 comments as replies across threads, notifications, and counts.
Nostr WoT Extension is a browser extension that provides Nostr identity management, NIP-07 signing, and Lightning payments directly in the browser. This release improves Nostr Connect account presentation by showing profile names and images, adds a remote-signer badge, and keeps the account selector and top bar consistent with support for display_name. There was also the release of v0.7.1 last week.
Dark Wisp is a minimal Android Nostr client. This release adds full-balance on-chain withdrawals, improves NIP-22 comment and reply handling, lets quoted notes open directly, improves poll results and safety filtering, and updates onboarding and the compose interface.
Nostr Mail Client is a Flutter-based encrypted email client built on Nostr. This release adds multi-account support, web push notifications, account-specific notification controls, account deletion, richer contact/profile handling, and improved relay discovery. It also reorganizes settings, improves mailbox syncing and reconnection, adds customizable animated/image backgrounds, and includes numerous accessibility, macOS, Android, and attachment fixes.
NoorNote is a Nostr client for decentralized social networking. The release v1.6.1 redesigns the Addons overview with tile-based navigation, addon descriptions, active/inactive indicators, New/Updated badges, and customizable ordering. It also fixes broken rendering of URLs containing naddr references and prevents npub URLs from being incorrectly processed as mentions. Although this was the latest, there were also the releases of v1.6.0 & v1.5.5 last week.
Sidecar is a Nostr keystore and signer that runs in your browser sidebar. This release adds polls with detailed results, optional per-account proof-of-work mining, and improved visibility for replies sent as NIP-22 comments by other clients. It also improves Podcasting 2.0 boost confirmations and makes outgoing payments less intrusive with a background payment indicator.
Workstr Web is a static, local-first Nostr workout tracker PWA. This release adds nine-digit device-code protection for local accounts, keeping account keys inaccessible until the app is unlocked. The code is device-specific, never synced or exported, and failed attempts trigger a delay; account creation, recovery, and QR-based device pairing also require a code before saving. This was the latest, and there was also the release of v2.5.0 last week.
Napstr is a file-sharing application that uses Nostr for discovery and Tor for private file sharing, with the cross-platform Napstrfy phone companion. This release improves mobile use with read-only pairing and Iroh connections, resumable downloads, proper cancellation and cleanup, and file size and availability information. It also improves track browsing, podcast and audiobook views, and includes various Android, transfer, UI, reliability, and dependency fixes. This was the biggest release of the week, and the latest one was v0.2.2.
Roadstr is an open-source, decentralised navigation and road-event reporting app for Android built on the Nostr protocol. This release hardens security and privacy by making Favorites sync opt-in, preventing unnecessary profile-visibility events, correcting inaccurate store claims, and restricting cleartext GraphHopper connections to local addresses. It also improves relay reconnection handling, caps confirmation and pending-event tracking to prevent memory abuse, and adds total timeouts for voice-model downloads. This was the latest, and there was also the release of v0.5.8 last week.
§1. Dart Nostr Development Kit (NDK) - v0.10.0-dev.5 (Pre-release)
Dart Nostr Development Kit (NDK) is a Dart library for building Nostr applications, providing tools for relay connectivity, caching, and other Nostr functionality. This pre-release improves Cashu quote handling with deterministic keys, automatic recovery and resumption of pending transactions, safer mint counters, and streaming quote recovery, while also fixing broadcast authentication, relay connections, identity attribution, and quote-refresh behavior. There was also another pre-release (v0.10.0-dev.4) last week.
Originless is a multipurpose, self-hosted storage backend for apps, pastebins, screenshots, static sites, and Nostr clients, with IPFS-based content-addressed storage. This release redesigns the UI with Vercel-style stat cards and a frosted-glass look, moves the Agent Prompt to a standalone /agent page, adds Cmd/Ctrl+K and / search shortcuts, adds an Umbrel App Store badge, and updates the reported application version to 1.0.3.
GRAIN is a Nostr relay and Go client library for operators and developers. This pre-release adds a branded login flow with multiple signing methods, reorganizes settings into tabs, surfaces NIP-66 relay-monitor discovery and manual refresh controls, adds owner-only relay moderation, introduces GRAIN’s default visual theme, and improves event lookup speed.
Nostr-relay is a Nostr relay built on the Relayer framework. This release adds event propagation between multiple relay instances through Redis, allowing instances to share events across a distributed setup. This was the latest, and there was also the release of v0.0.265 last week.
Citrine is a Nostr relay for Android that lets Nostr clients send and receive events through a relay running directly on an Android device. The v3.2.0 release improves stability and memory usage by streaming relay aggregator queries in batches, bounding outbound relays and caches, and logging out-of-memory errors for easier diagnosis. It also adds an option to hide the event graph, updates dependencies including Quartz 1.15.2, and refreshes translations.
Mostro is a production-ready, censorship-resistant, non-custodial Lightning Network peer-to-peer exchange built on Nostr. This release fixes payout failure bookkeeping, ensures timeout bond slashes go to the correct maker, validates dispute initiators before escrow refunds, and handles terminal order statuses correctly. It also adds a design proposal for reputation portability and updates the fedimint-tonic-lnd dependency to v0.4.0.
Din is a social computer that uses your Nostr account as a universal identity across desktop applications, connecting you with friends across the network. It stores encrypted data on Nostr relays and Blossom servers, while also supporting self-hosted infrastructure or fully local operation.
Lightning.Pub is a Nostr-native Lightning node that lets users connect and share Lightning nodes through Nostr identities with compatible applications. In v0.0.41, liquidity-provider startup is more resilient with retries and polling, invoice routing now waits for a confirmed provider balance before becoming ready, and Nostr publish failures include more detailed relay and network diagnostics.
Nostr-VPN is a Tailscale-style private mesh VPN that uses Nostr for coordination and an independently evolved FIPS implementation for its data plane. The release v4.1.14 improves reliability on supported platforms by using trusted ratings to help select paid-exit providers and adding clearer provider-selection controls. Paid exits are not supported on iOS. This was the latest, and there was also the release of v4.1.12 last week.
§No Exploration Tools releases and updates for last week.
Nostr is built by plebs, for the plebs. If you found this Nostr recap helpful, consider supporting me, Nomishka, with a zap.
I’m committed to supporting Nostr, and I split a part of the zaps I receive for this note with the plebs mentioned in this recap for all their great effort. Thank you so much for being part of this journey. Let me know your thoughts about this Ninety-Fourth Nostr Recap & share your tips and suggestions for the next weekly #NostrRecap and let’s keep #GrowNostr together.
Write a comment