Claude 3279c2463a fix(mls): use filtered direct path in UpdatePath per RFC 9420 §7.9
Interop Test 06 (wn removes a member from a group Amethyst is in) was
failing with:

  GroupEventHandler.add: ERROR Failed to apply commit:
    UpdatePath node count (1) doesn't match direct path length (2)

Repro scenario: 3-member group [B=leaf 0, C=leaf 1, A=leaf 2]; B (admin,
committer) removes C. After the Remove proposal applies, leaf 1 is
blank but leaf 2 (A) is still occupied — so leaf_count stays at 3 per
RFC 9420 §7.8 and the sender's direct path has length 2 ([node 1,
root]).

Per RFC 9420 §4.1.2 and §7.9 the **filtered direct path** drops any
parent node whose child on the copath has an empty resolution:
encrypting to such a parent is equivalent to encrypting to its only
non-blank child, which is already on the direct path. In our scenario
the parent at level 1 (parent of leaves 0, 1) has a blank leaf 1 on
the copath — empty resolution — so it's filtered out. Filtered
direct path length is 1, and that's what openmls / whitenoise-rs emit
in `UpdatePath.nodes<V>`.

Quartz was always using the unfiltered direct path on both sides
(send + receive + parent-hash chain + path-secret decrypt). That
worked for quartz↔quartz (both sides agreed), but broke the moment a
spec-correct sender (wn) sent a filtered UpdatePath into a quartz
receiver. Parent-hash chain is further affected because §7.9.2 walks
the filtered path — even if the size check passed, the hashes would
not match.

Fix it throughout:

- RatchetTree.filteredDirectPath: new helper returning parallel
  (filteredDirectPath, filteredCopath) with the empty-resolution
  entries dropped. Uses the existing `resolution()` helper, which
  already handles unmerged_leaves per §4.1.2.

- RatchetTree.applyUpdatePath: size-check + target the FILTERED path.

- MlsGroup.commit (sender): emit one staged path node per filtered
  level; encrypt path secrets using the filtered copath; patch parent
  hashes into the filtered positions only.

- MlsGroup.processCommitInner (receiver): the UpdatePath node index
  aligns to the filtered direct path, so the common-ancestor lookup
  must find the filtered index to pick the right ciphertext + copath
  resolution. Use the unfiltered index only for counting KDF steps
  to the root (path_secret chain advances one step per unfiltered
  level regardless of filtering — the chain is continuous; filtering
  only decides which levels emit a UpdatePathNode, not how many KDF
  steps separate them).

- MlsGroup.computeSenderParentHashes: walk the filtered direct path.
  Map each filtered node back to its unfiltered level so the
  preUpdateSiblingHashes lookup (indexed by unfiltered level) still
  resolves. This makes the parent_hash chain agree with §7.9.2 and
  with what openmls computes on the other side.

- MlsGroup.verifyParentHash: short-circuit on empty filtered path
  rather than empty unfiltered path.

New regression test: testRemoveMiddleLeaf_ReceiverAcceptsCommit
reproduces the 3-member remove-middle scenario end-to-end within
quartz. It passed before this patch (because both sides were
unfiltered and agreed with each other), and it passes after this
patch (because both sides are now filtered and still agree) — the
compatibility win is that quartz now also agrees with
openmls/wn-produced commits of the same shape.

Also fix an unrelated script bug in marmot-interop.sh: the
discover_a_relays SQL probe was falsely reporting "wn has NO cached
relay entries for A" even when welcome delivery was working, because
the query assumed users.pubkey stored as BLOB but wn stores it as
TEXT (hex) in the current schema. Accept either encoding.
2026-04-22 22:58:21 +00:00
2026-03-23 10:28:33 -04:00
2026-04-01 15:45:46 -04:00
2026-03-23 12:41:30 -04:00

Amethyst Logo

Amethyst

Nostr Client for Android

Join the social network you control.

GitHub downloads PlayStore downloads

Last Version JitPack version CI License: Apache-2.0 Ask DeepWiki

Download and Install

Android

Get it on Zap Store Get it on Obtaininum Get it on GitHub Get it on Google Play

Desktop

OS CLI install Direct download
macOS (Apple Silicon) brew install --cask amethyst-nostr .dmg arm64
macOS (Intel) brew install --cask amethyst-nostr .dmg x64
Windows 10/11 winget install VitorPamplona.Amethyst .msi · .zip portable
Debian/Ubuntu .deb
Fedora/RHEL/openSUSE .rpm
Any Linux AppImage · .tar.gz

Coming soon (separate PR): Scoop (Windows), AUR (Arch Linux).

Build from source: see BUILDING.md.

Install troubleshooting (Gatekeeper / SmartScreen / AppImage): see BUILDING.md § Troubleshooting installs.

Supported Features

  • Basic protocol flow (NIP-01)
  • Follow List (NIP-02)
  • OpenTimestamps Attestations (NIP-03)
  • Encrypted Direct Message (NIP-04)
  • DNS-based Identifiers (NIP-05)
  • Key Derivation from Mnemonic (NIP-06)
  • window.nostr for Web Browsers (NIP-07, Not applicable)
  • Handling Mentions (NIP-08)
  • Event Deletion Request (NIP-09)
  • Text Notes and Threads (NIP-10)
  • Relay Information Document (NIP-11)
  • Proof of Work (NIP-13)
  • Subject Tag in Text Events (NIP-14)
  • Nostr Marketplace (NIP-15)
  • Private Direct Messages (NIP-17)
  • Reposts (NIP-18)
  • bech32-encoded Entities (NIP-19)
  • nostr: URI Scheme (NIP-21)
  • Comment (NIP-22)
  • Long-form Content (NIP-23)
  • Extra Metadata Fields and Tags (NIP-24)
  • Reactions (NIP-25)
  • Delegated Event Signing (NIP-26)
  • Text Note References (NIP-27)
  • Public Chat (NIP-28)
  • Relay-based Groups (NIP-29)
  • Custom Emoji (NIP-30)
  • Dealing with Unknown Events (NIP-31)
  • Labeling (NIP-32)
  • git stuff (NIP-34)
  • Torrents (NIP-35)
  • Sensitive Content (NIP-36)
  • Draft Events (NIP-37)
  • User Statuses (NIP-38)
  • External Identities in Profiles (NIP-39)
  • Expiration Timestamp (NIP-40)
  • Authentication of Clients to Relays (NIP-42)
  • Relay Access Metadata and Requests (NIP-43)
  • Encrypted Payloads / Versioned (NIP-44)
  • Counting Results (NIP-45)
  • Nostr Remote Signing (NIP-46)
  • Nostr Wallet Connect (NIP-47)
  • Proxy Tags (NIP-48)
  • Private Key Encryption (NIP-49)
  • Search Capability (NIP-50)
  • Lists (NIP-51)
  • Calendar Events (NIP-52)
  • Live Activities (NIP-53)
  • Wiki (NIP-54)
  • Android Signer Application (NIP-55)
  • Reporting (NIP-56)
  • Lightning Zaps (NIP-57)
  • Zap Splits (NIP-57)
  • Private Zaps (NIP-57)
  • Zapraiser (NIP-57)
  • Badges (NIP-58)
  • Gift Wrap (NIP-59)
  • Pubkey Static Websites (NIP-5A)
  • Cashu Wallet (NIP-60)
  • Nutzaps (NIP-61)
  • Request to Vanish (NIP-62)
  • Chess / PGN (NIP-64)
  • Relay List Metadata (NIP-65)
  • Relay Discovery and Liveness Monitoring (NIP-66)
  • Picture-first Feeds (NIP-68)
  • Peer-to-peer Order Events (NIP-69)
  • Protected Events (NIP-70)
  • Video Events (NIP-71)
  • Moderated Communities (NIP-72)
  • External Content IDs (NIP-73)
  • Zap Goals (NIP-75)
  • Negentropy Syncing (NIP-77)
  • Application-specific Data (NIP-78)
  • Threads (NIP-7D)
  • Highlights (NIP-84)
  • Trusted Assertions (NIP-85)
  • Relay Management API (NIP-86)
  • Ecash Mint Discoverability (NIP-87)
  • Polls (NIP-88)
  • Recommended Application Handlers (NIP-89)
  • Data Vending Machines (NIP-90)
  • Media Attachments (NIP-92)
  • File Metadata (NIP-94)
  • Binary Blobs (NIP-95/Draft)
  • HTTP File Storage Integration (NIP-96)
  • HTTP Auth (NIP-98)
  • Classified Listings (NIP-99)
  • Voice Messages (NIP-A0)
  • Public Messages (NIP-A4)
  • Web Bookmarks (NIP-B0)
  • Blossom (NIP-B7)
  • Nostr BLE Communications Protocol (NIP-BE)
  • Code Snippets (NIP-C0)
  • Chats (NIP-C7)
  • MLS Protocol (NIP-EE)
  • Audio Tracks (zapstr.live) (kind:31337)
  • Lightning Tips
  • Image/Video/Url/LnInvoice/Cashu Previews
  • Push Notifications (Google and Unified Push)
  • In-Device Automatic Translations
  • Hashtag Following and Custom Hashtags
  • Login with QR
  • Bounty support (nostrbounties.com)
  • De-googled F-Droid flavor
  • Multiple Accounts
  • Markdown Support
  • Medical Data (NIP-xx/Draft)
  • Embed events (NIP-xx/Draft)
  • Edit Short Notes (NIP-xx/Draft)
  • NIP Events (NIP-xx/Draft)
  • Relationship Status (NIP-xx/Draft)
  • Signed Filters (NIP-xx/Draft)
  • Key Migration (NIP-xx/Draft)
  • Image Capture in the app
  • Video Capture in the app
  • Local Database
  • Workspaces

Privacy and Information Permanence

Relays know your IP address, your name, your location (guessed from IP), your pub key, all your contacts, and other relays, and can read every action you do (post, like, boost, quote, report, etc) except for Private Zaps and Private DMs. While the content of direct messages (DMs) is only visible to you and your DM counterparty, everyone can see when you and your counterparty DM each other.

If you want to improve your privacy, consider utilizing a service that masks your IP address (e.g. a VPN or Tor) from trackers online.

The relay also learns which public keys you are requesting, meaning your public key will be tied to your IP address.

Information shared on Nostr can be re-broadcasted to other servers and should be assumed permanent for privacy purposes. There is no way to guarantee the deletion of any content once posted.

Development Overview

This repository is split between Amethyst, Quartz, Commons, and DesktopApp:

  • Amethyst - Native Android app with Kotlin and Jetpack Compose
  • Quartz - Nostr-commons KMP library for protocol classes shared across platforms
  • Commons - Kotlin Multiplatform module with shared UI components (icons, robohash, blurhash, composables)
  • DesktopApp - Compose Multiplatform Desktop application reusing commons and quartz

The app architecture consists of the UI, which uses the usual State/ViewModel/Composition, the service layer that connects with Nostr relays, and the model/repository layer, which keeps all Nostr objects in memory, in a full OO graph.

The repository layer stores Nostr Events as Notes and Users separately. Those classes use LiveData and Flow objects to allow the UI and other parts of the app to subscribe to each Note/User and receive updates when they happen. They are also responsible for updating viewModels when needed. As the user scrolls through Events, the Datasource classes are updated to receive more information about those particular Events.

Most of the UI is reactive to changes in the repository classes. The service layer assembles Nostr filters for each need of the app, receives the data from the Relay, and sends it to the repository. Connection with relays is never closed during the use of the app. The UI receives a notification that objects have been updated. Instances of User and Notes are mutable directly. There will never be two Notes with the same ID or two User instances with the same pubkey.

Lastly, the user's account information (private key/pub key) is stored in the Android KeyStore for security.

Setup

Make sure to have the following pre-requisites installed:

  1. Java 21+
  2. Android Studio
  3. Android 8.0+ Phone or Emulation setup

Fork and clone this repository and import it into Android Studio

git clone https://github.com/vitorpamplona/amethyst.git

Use an Android Studio build action to install and run the app on your device or a simulator.

Building

Build the Android app:

./gradlew assembleDebug

Build and run the Desktop app (requires Java 21+):

./gradlew :desktopApp:run

Full build (including tests)

./gradlew build

Requirements:

  • Xcode and iOS simulator
  • libsodium installed (e.g. via brew: brew install libsodium

Testing

./gradlew test
./gradlew connectedAndroidTest

Linting

./gradlew spotlessCheck
./gradlew spotlessApply

Installing on device

For the F-Droid build:

./gradlew installFdroidDebug

For the Play build:

./gradlew installPlayDebug

Deploying

Full release + bootstrap runbooks (Android AAB upload, desktop packaging, Homebrew cask, Winget manifest, Apple Developer signing budget time-box) live in BUILDING.md § Release runbook and BUILDING.md § Bootstrap runbook (one-time).

TL;DR for cutting a release:

  1. Bump app in gradle/libs.versions.toml (e.g. "1.08.1")
  2. Bump versionCode in amethyst/build.gradle
  3. git commit -am "chore(release): 1.08.1" && git tag -s v1.08.1 && git push --tags
  4. Wait for Create Release Assets workflow — 20 Android assets + 8 desktop assets go live on GH Release; Homebrew + Winget auto-bump on stable tags
  5. Upload AAB to Play Store manually (existing step)

Using the Quartz library

Installing

Add Maven Central and Google Maven to your repositories:

repositories {
    mavenCentral()
    google()
}

Add the following line to your commonMain dependencies:

implementation('com.vitorpamplona.quartz:quartz:1:05.0')

Variations to each platform are also available:

implementation('com.vitorpamplona.quartz:quartz-android:1:05.0')
implementation('com.vitorpamplona.quartz:quartz-jvm:1:05.0')
implementation('com.vitorpamplona.quartz:quartz-iosarm64:1:05.0')
implementation('com.vitorpamplona.quartz:quartz-iossimulatorarm64:1:05.0')

Check versions on MavenCentral

How to use

Manage logged in users with the KeyPair class

val keyPair = KeyPair() // creates a random key
val keyPair = KeyPair("hex...".hexToByteArray())
val keyPair = KeyPair("nsec1...".bechToBytes())
val keyPair = KeyPair(Nip06().privateKeyFromMnemonic("<mnemonic>"))
val readOnly = KeyPair(pubKey = "hex...".hexToByteArray())
val readOnly = KeyPair(pubKey = "npub1...".bechToBytes())

Create signers that can be Internal, when you have the private key or a read-only public key, or External, when it is controlled by Amber in NIP-55.

Use either the NostrSignerInternal or NostrSignerExternal class:

val signer = NostrSignerInternal(keyPair)
val amberSigner = NostrSignerExternal(
    pubKey = keyPair.pubKey.toHexKey(),
    packageName = signerPackageName, // Amber package name
    contentResolver = appContext.contentResolver,
)

Create a single NostrClient for the entire application and control which relays it will access by registering subscriptions and sending events. The pool will automatically change based on filters + outbox events.

You will need a coroutine scope to process events and if you are using OKHttp, we offer a basic wrapper to create the socket connections themselves.

val appScope = CoroutineScope(Dispatchers.Default + SupervisorJob())
val rootClient = OkHttpClient.Builder().build()
val socketBuilder = BasicOkHttpWebSocket.Builder { url -> rootClient }

val client = NostrClient(socketBuilder, appScope)

If you want to auth, given a logged-in signer:

val authCoordinator = RelayAuthenticator(client, appScope) { authTemplate ->
    listOf(
        // for each signed-in user, return an event
        signer.sign(authTemplate)
    )
}

To make a request subscription simply do:

val metadataSub = client.req(
    relay = "wss://nos.lol",
    filter = Filter(
        kinds = listOf(MetadataEvent.KIND),
        authors = listOf(signer.pubkey)
    )
) { event ->
    /* consume event */
}

The client will add the relay to the pool, connect to it and start receiving events. The metadataSub will be active until you call metadataSub.close(). If the client disconnects and reconnects, the sub will be active again.

To manage subscriptions that change over time, the simplest approach is to build mutable subscriptions with a filters lambda that you can change at will.

val metadataSub = client.req(
    filters = {
        // Let's say you have a list of users that need to be rendered
        val users = pubkeysSeeingInTheScreen()
        // And a cache repository with their outbox relays
        val outboxRelays = outboxRelays(users)

        val filters = listOf(
            Filter(
                kinds = listOf(MetadataEvent.KIND),
                authors = users
            )
        )

        outboxRelays.associateWith { filters }
    }
) { event ->
    /* consume event */
}

In that way, you can simply call metadataSub.updateFilter() when you need to update subscriptions to all relays. Or call metadataSub.close() to stop the sub without deleting it.

When your app goes to the background, you can use NostrClient's connect and disconnect methods to stop all communication to relays. Add the connect to your onResume and disconnect to onPause methods.

Feature Parity Table

Feature Category Feature / Component Android / JVM Support iOS Support Notes
Cryptography Secp256k1 (Schnorr, Keys) Full Full
LibSodium (ChaCha20, Poly1305) Full Full
AES Encryption (CBC & GCM) Full Full
Hashing (SHA-256, etc.) Full Full
MAC (HmacSHA256, etc.) Full Full
Data & Serialization JSON Mapping (Optimized) Full Full A fully custom implementation exists in commonMain.
GZip Compression Full Full
BitSet Full Full
LargeCache Full Full
NIP Support NIP-96 (File Storage Info) Full Full
NIP-46 (Remote Signer) Full ⚠️ Partial Some methods in NostrSignerRemote are unimplemented in commonMain.
NIP-03 (OTS / Timestamps) Full No BitcoinExplorer and RemoteCalendar have stubs in commonMain.
Utilities URL Encoding / Decoding Full Full
Unicode Normalization Full Full
Platform Logging Full Full iOS uses NSLog, Android uses standard Log.
Current Time Full Full Implemented using NSDate on iOS.

Contributing

Issues can be logged on: https://gitworkshop.dev/repo/amethyst

GitHub issues and pull requests here are also welcome. Translations can be provided via Crowdin

You can also send patches through Nostr using GitStr to this nostr address

By contributing to this repository, you agree to license your work under the MIT license. Any work contributed where you are not the original author must contain its license header with the original author(s) and source.

Screenshots

FollowFeeds ChatsGroup LiveStreams Notifications
Home Feed Messages Live Streams Notifications

Contributors

MIT License

Copyright (c) 2023 Vitor Pamplona

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
S
Description
Monero-tipped fork of Amethyst, ported from Garnet
Readme 512 MiB
v0.1.0-monero Latest
2026-05-23 19:19:14 +00:00
Languages
Kotlin 92.8%
HTML 5.4%
Shell 1%
C++ 0.4%
Rust 0.2%
Other 0.1%