Patch Notes

• •Themed story text tags — styled text boxes in stories now match your app theme (Cyberpunk, Dusk Garden, Paper Scroll, Matrix, Phosphor and more).
• •Keyboard-aware story studio — the story canvas no longer squashes when the keyboard opens; the active text box rides above it.
• •Edge-to-edge avatars — avatars fill circular borders fully, while square borders keep crisp corners.
• •Icon-only bottom navigation — no more clipped labels on small screens or long translations.
• •Update checks per build flavor — Play builds only check the Play release, so no false “update available” while a release is in review.
• •Fullscreen update gate — required updates show as an unskippable screen with a one-tap update button.
• •New premium themes — Hearth (warm candlelight, dripping-wax gauges) and Manuscript (medieval Rovás runes, calligraphy scrubbers).

• •NEW: 24-Hour Wilting Stories — share photo, pixel art and text stories that vanish after 24 hours, with live updates and floating reactions.
• •Zero-knowledge story keys — every story is encrypted with a key only your mutual contacts can unwrap. The relay sees nothing, and stories cost no pad bytes.
• •Interactive story canvas — place styled text tags anywhere on a photo or pixel art; it all flattens into one crisp WebP.
• •Onboarding privacy modes — choose “WiltKey Social Account” (server-assisted stories) or “Zero Server Data Mode” (full anonymity, no registration).
• •NEW: In-chat pixel art — draw or pick a saved avatar template and send it straight into any chat.
• •NEW: Local message search — search a conversation with hit counts and next/previous navigation.
• •Private notes & nicknames — local-only notes and custom display names per contact.
• •Download placement & BLE stability — downloaded media slots into its original chronological position; BLE pairing handshake hardened.

• •NEW: QR Connect — connect remotely with a scan or short PIN (creates a 7-day Time Wilt chat). Pad recharging still requires meeting in person.
• •NEW: Media gallery — browse a chat's photos, voice notes and links in one place.
• •NEW: History retention — keep only the last 100–1000 messages per chat, or clear a chat's history on demand.
• •Integrity badges — official Play builds show a shield badge (golden for Plus); community builds show an open-source badge.
• •Modern emoji library — hundreds of newer emoji added to reactions and the editor.
• •FOSS builds now check GitHub Releases directly for updates.
• •Fixed voice-note duration in the media gallery and profile exchange on QR connect.

• •NEW: @Mentions — type “@” in group chats to autocomplete a member's shortcode; mentions are highlighted for everyone.
• •Granular notifications — per-chat modes (All / Mentions & replies / Mute) plus global category toggles, filtered on-device.
• •Events feed — mentions, replies and security events land in the Dashboard Events list with deep links.
• •Hands-free voice recording — slide up to lock the mic; recording length adapts to your remaining byte budget.
• •Smart 1:1 sync — missing message ranges are verified automatically, clearing false “sync problem” warnings.
• •Fixed false “out of budget” warnings when editing or deleting messages.

• •NEW: Contacts & profiles — add friends to a contact list; status messages, borders and theme backdrops sync instantly.
• •NEW: Emergency chats — an on-demand Time Wilt chat for reaching someone whose pad ran out.
• •Jump to replied message — tap a reply quote to scroll to the original.
• •Avatar templates — save up to 10 pixel art creations and switch between them.
• •Message editing & deletion — edit or delete sent messages without reusing pad material.
• •Markdown & link warnings — bold, italics, code and more, plus a prompt before opening links.
• •Group chats auto-detect missing messages across lanes on open.
• •Fixed voice notes failing to send in Time Wilt chats.

• •NEW: Time Wilt groups — temporary group chats with a countdown and no byte budget; great for events and meetups.
• •In-person countdown & renewal — your timer starts (and renews) by meeting the host over BLE; expired members go read-only until renewed.
• •Vote-to-nuke — destroying a group “for everyone” now needs a majority vote.
• •Single-upload group messages — the relay fans one upload out to every member: faster sends, less data.
• •Fixed re-joining an expired group and countdown/byte-info display mix-ups.

• •Lazy photo loading — image-packed chats open instantly; photos decode only as they scroll into view.
• •Steady layout — consistent thumbnails, no jumping; tap for the full-screen zoom view.
• •Reliable large-photo delivery — big photos show up on their own, no nudge message needed.
• •The image dialog now leads with the real charged size, so pad-budget surprises are gone.

• •NEW: On-demand file downloads — photos and voice recordings are now downloaded on tap with a progress bar instead of auto-loading. The relay holds your file until your device confirms it saved, so interrupted downloads retry cleanly.
• •NEW: Uncompressed image option — send original full-resolution photo bytes untouched with the new top setting on the image compression slider.
• •NEW: Tier-aware file size caps — pre-send size validation enforces 5 MB for free accounts and 50 MB for WiltKey Plus subscribers with direct upgrade prompts.
• •Large-image stability fix — large message bodies now automatically store as local sidecar files, fixing chat loading issues on image-heavy histories.

• •NEW: Premium themes — added Phosphor (arcade CRT glow) and Tideline (calming water theme), complete with live previews across all builds.
• •NEW: Animated avatar borders — dynamic animated frames (orbit, aurora) alongside classic static borders.

• •PIN keypads now register input instantly on press-down for snappier unlocking.
• •Configurable fingerprint security idle slider in Security settings (1–24 hours, or off) replacing the fixed 4-hour window.

• •Fixed an issue where chat history appeared empty after nuking and re-pairing with a contact.
• •Corrected keystream borrowing accounting when lending keystream material to a peer.

• •NEW: Avatar borders — dress up your pixel avatar with a frame. The Tinfoil Hat is free for everyone (and the only one on the GitHub/website build); your border shows up for the people you chat with, in one-on-ones and group chats alike.
• •NEW: Shop — a tabbed store for optional extras: colour-palette packs for the pixel-art editor, avatar borders, larger pad sizes at pairing, and the WiltKey Plus subscription. Cosmetics are purely local and never touch your chats.
• •NEW: WiltKey Plus — an optional subscription that keeps your offline messages waiting on the relay for 72 hours instead of 24, and raises your file-transfer limit from 5 MB to 50 MB.
• •Larger pad options at pairing, and a heads-up if there isn't enough free space on your device before you generate a big pad.
• •The GitHub/website (FOSS) build stays completely purchase-free and Google-free — palettes and larger pads are simply unlocked there.

• •NEW: Swipe to reply — swipe any message to quote it, with the original shown above your response so threads stay easy to follow.
• •Group chats now derive their keystream on demand instead of storing a full pad on disk — the same security, a much smaller footprint, and room for bigger groups.
• •One-on-one chats now retire spent sections of their pad as you go, so used-up key material doesn't linger on the device.

• •NEW: Wilting messages — send text that quietly disappears. Hold the send button to choose how long it lives (1–60 seconds); it wilts away shortly after the other person opens it. The countdown even survives closing the app.
• •NEW: Wilting photos — the same disappearing option for images, right in the send dialog.
• •Screenshot requests now leave a record: when someone asks to capture the chat, you get an in-conversation Accept / Decline that expires on its own — so you'll see it even if you were offline when they asked.

• •NEW: Photo sharing with a tap-to-zoom viewer — pan and zoom any image full-screen. Senders can optionally allow saving, and you choose the file format when you download.
• •NEW: In-app camera — snap and send a photo without leaving the chat.
• •NEW: Message reactions — react to any message with an emoji, including your own custom ones.
• •NEW: Consensual screenshots — capture a chat only when the other side agrees (one-on-one, or a group majority), without ever weakening the screenshot block.
• •Richer pixel-art emojis — the editor now supports up to 256 colours and new palettes.
• •Extra privacy hardening: the screenshot & screen-recording block is back on, plus new protection against tap-hijacking overlays and a heads-up if an untrusted accessibility service is watching the screen.
• •Fixed the pre-send image size estimate, which used to wildly over-report how large a photo would be.

• •NEW: Voice messages — hold the mic to record, and tap it first to pick the quality, from crisp all the way down to charmingly crunchy lo-fi. Each theme even plays them back with its own style.
• •NEW: Optional real-time push on the Play Store build — get notified the instant a message arrives without keeping a constant background connection. The wake-up is content-free: no message data ever passes through Google. The GitHub/website build stays 100% Google-free and uses its own on-device methods.
• •NEW: When a message arrives while you're using the app but not in that chat, a tappable banner now slides in — so you won't miss messages across busy conversations.
• •Fixed a loading spinner that could get stuck on the dashboard after finishing onboarding.
• •Tapping a message notification now reliably opens the right chat, and the alert clears once you've seen it instead of lingering.

• •Smarter battery-saver notifications: checks quickly right after you close the app, eases off to save battery while it stays quiet, and speeds back up the moment a message arrives.
• •Instant mode is now more resilient — if Android or your phone's battery manager stops the background connection, the app automatically falls back to catching messages so your alerts keep coming through.
• •New setup step explains how alerts work — Wiltkey never uses Google or Apple push, so you choose up front whether to be notified in the background.
• •Settings now have a dedicated Security tab for your fingerprint unlock, PIN, and identity reset, keeping the Profile tab just for customization.
• •Changing your PIN is now a clear two-step screen, fixing the confirm field overlapping the button on smaller phones.

• •Pair screens now warn you (with a one-tap toggle) when Bluetooth is off, instead of silently hanging — fixes group creation freezing with Bluetooth disabled.
• •Smoother custom-emoji background erasing — strokes now follow your finger live instead of lagging, and the editor controls no longer overflow on small screens.
• •Fixed the send button disappearing in group chats when typing very long messages.

• •NEW: Stickers — hold down any emoji (including your custom ones) to send it big and on its own.
• •Delivery status now catches up when you reopen the app, even without unlocking — fixes confirmations that could stay stuck after the app was minimized.

• •NEW: Updated custom emoji editor: erase to transparent, rotate your image, and undo steps while creating emojis.
• •Fixed messages getting stuck on a single "sent" check — delivery status now reconciles reliably, even if the app was closed when the message arrived.
• •Messages no longer go missing after reopening the app. Added a sync button in the chat header to manually pull anything you might be missing.
• •The chat now scrolls with the keyboard, so the latest message stays visible while you type.
• •Back button / gesture now closes the emoji picker first instead of leaving the chat.
• •Smoother PIN entry during setup — keyboard "enter" jumps between fields and submits.

• •Navigation buttons now don't block the chat input anymore.
• •Fixed a chat disappearing from a device after a one-sided nuke signal and re-pairing.
• •Added a restart button on the pairing screen for a quick wipe.
• •Temporarily removed the screenshot block functionality for testing.
• •Added a copy debug button to help with bug reports.
• •Added a warning on the pairing sync screen to not close the app.

First build of Wiltkey released.

• •Play Integrity verification: official Play builds are verified server-side (with anti-replay nonces) and receive a signed attestation other devices can check offline.
• •Attestations are cached relay-side, so verification is instant and Google API calls stay rare.
• •Zero-knowledge & FOSS invariant: Google never sees contact graphs, chat content or metadata, and community builds lose nothing.

• •The relay now re-advertises any not-yet-downloaded file on request, so a download offer missed while connected is recovered immediately instead of waiting for a reconnect.

• •On-demand downloads: large files arrive as a lightweight offer; the body downloads only when you tap, with a progress bar.
• •Downloads use short-lived tokens over plain HTTPS and stream with progress tracking.
• •The stored file is only deleted after your device confirms the save — an interrupted download always retries cleanly.

• •Large messages now stream through object storage (with a database fallback under memory pressure) instead of sitting in relay RAM — bigger transfers stay smooth. Only encrypted payloads are ever held, deleted on delivery.
• •WiltKey Plus, server-enforced: offline messages held 72 hours (vs 24) and a 50 MB transfer ceiling instead of 5 MB.
• •Self-hosters stay Google-free: without an entitlement store, everything simply holds 24 hours and subscription checks are no-ops.

• •Added an optional wake-up path for the Play Store build: the relay can send a content-free push when a message is waiting for an offline device, so the app is notified without holding a background connection.
• •The relay stores only a device wake-up token (in Redis, auto-expiring) — never message content. The encrypted payload stays queued and is pulled by the client on its next connection, exactly as before.
• •Entirely opt-in for self-hosters: the sender is a no-op unless Firebase credentials are configured, so a self-hosted or GitHub-build relay behaves identically to before with zero Google dependency and no new libraries.

The Go blind relay went live: challenge-response Ed25519 auth, blind message routing, and Redis-backed offline queues that hold only opaque ciphertext and delete it on delivery. Fully self-hostable — see the setup & security guide.