Deepmarks

Releases

• Sep 11, 2026 2.2.14
  # Deepmarks Android 2.2.14 The mobile-signer security rework from the 2026-09-09 multi-model review, plus collection search. - **Pairing always asks.** A nostrconnect link (pasted, scanned, or opened from another app) now opens a review card showing the app, its relays, and the permissions it requests. Nothing is paired until you tap. New pairings start at low trust: no standing permissions, every signing or decryption request is asked.

  More…

  - **Per-request approval that holds.** Low and unset trust never auto-approve. A `connect` grants nothing. Malformed signing requests are rejected before they can reach a prompt or a grant. Permissions granted before this release are cleared until you re-approve them. - **Grants stay with the account that approved them.** Every paired connection is bound to the signer account that approved it, so a key swap can never let another account use it. Approval decisions carry a sequence that survives restarts and clock changes, so a later "low" choice always wins over an older grant, and the foreground service and the in-app signer can no longer overwrite each other's decisions. - **Approval card can't get stuck.** Removing a connection while its prompt is up now declines cleanly instead of leaving a card that ignores taps. - **Search inside collections.** Public collection pages have a search bar over the collection's bookmarks, and the collections list can be filtered by name. Everything runs on the phone; nothing is sent to a server, so private collections stay private. - **iOS parity:** `2.2.14` / build `44` to match the Android `2.2.14` / `versionCode 44` bump.
• Aug 23, 2026 2.2.13
  # Deepmarks Android 2.2.13 Security and reliability hardening from the 2026-08-23 full-codebase review, plus the nsec sign-in fixes that shipped to web/extension after 2.2.12 was cut. - **Logout fully logs out.** A session restore that was still in flight when you tapped Logout could resume afterward, silently re-mirroring the key into the iOS shared Keychain and signing the session back in. Logout now invalidates any in-flight restore.

  More…

  - **Paired apps can't self-upgrade their permissions.** A NIP-46 app you approved for one capability could previously request more on any reconnect and have them granted silently. Requested-but-unapproved permissions are now ignored and surfaced in the signer status. - **Your follow / friends / mute lists are protected.** A relay hiccup during a follow or mute could replace your whole list with a near-empty one. Mutations now refuse to publish unless the current list definitively loaded. - **nsec sign-in hardening.** A mistyped nsec no longer echoes the pasted secret into the page; ALL-UPPERCASE (QR-scanned) nsecs are accepted; invalid keys get clear errors. - **Smaller fixes:** read-later toggle failures now revert cleanly; profile-picture uploads verify the server stored exactly the bytes sent; zaps on bookmarks carry the addressable coordinate so receipts survive edits; importer edge cases (HTML entities, malformed Pinboard rows) and YouTube video-id casing corrected. - **iOS parity:** `2.2.13` / build `43` to match the Android `2.2.13` / `versionCode 43` bump.
• Aug 21, 2026 2.2.12
  # Deepmarks Android 2.2.12 Archive retry backoff plus the web-bundle fixes shipped since 2.2.11. - **Failed archives now back off instead of retrying forever.** The lifetime-archive backfill keeps a per-URL failure ledger synced with the server's cooldown: a URL that failed to archive waits 6 hours before its next attempt, doubling per consecutive failure up to 30 days, and resets when it finally archives. This ends the retry loop that re-submitted dead URLs every pass (2026-08-21 incident) and the

  More…

  status line now reports "N failed archives waiting out retry backoff". - **Live results in the per-list search overlay.** Searching inside a list shows matches as you type instead of after submit. - **Security: non-http(s) bookmark URLs are rejected** at render sinks and ingest, so a crafted `javascript:`/`data:` bookmark can neither be saved nor rendered as a link. - **Native shell: subheader icons stay on the sort row** instead of wrapping below it. - **BTCPay checkout: radio and checkbox switches display correctly** (the theme no longer restyles them). - **iOS parity:** `2.2.12` / build `42` to match the Android `2.2.12` / `versionCode 42` bump.
• Jun 28, 2026 2.2.11
  # Deepmarks Android 2.2.10 Launcher icon fix (for real this time). - **Home-screen icon is now centered.** 2.2.9 centered the *adaptive* icon, but many launchers draw the older pre-rendered `ic_launcher` / `ic_launcher_round` PNGs, which still had the pennant baked in off-center (upper-left). Those legacy icons are now regenerated from the canonical app icon so the pennant is centered in the circle on every launcher.
• Jun 28, 2026 2.2.10
  # Deepmarks Android 2.2.10 Launcher icon fix (for real this time). - **Home-screen icon is now centered.** 2.2.9 centered the *adaptive* icon, but many launchers draw the older pre-rendered `ic_launcher` / `ic_launcher_round` PNGs, which still had the pennant baked in off-center (upper-left). Those legacy icons are now regenerated from the canonical app icon so the pennant is centered in the circle on every launcher.
• Jun 28, 2026 2.2.9
  # Deepmarks Android 2.2.9 Fixes for the launcher icon, an external-signer interruption, and YouTube archiving. - **App icon fixed.** The pennant in the round/adaptive launcher icon was oversized and off-center; it's now properly sized and centered within the icon circle. - **No more interruptions from other signer apps.** If you open another Nostr app (for example Amethyst) that has Deepmarks selected as its

  More…

  external signer, Deepmarks no longer pops to the foreground asking you to sign in. Deepmarks now only acts as a signer for other apps when you have explicitly turned that feature on; otherwise it stays out of the way. - **YouTube archives no longer capture the "not a bot" page.** When YouTube serves a "sign in to confirm you're not a bot" wall (or a consent/login redirect) instead of the real page, Deepmarks now records the archive as blocked rather than saving and showing that wall as your archive.
• Jun 27, 2026 2.2.8
  # Deepmarks Android 2.2.8 Share-to-save reliability and faster autofill. - **Share without opening the app.** Saving a link from the system share sheet now signs and posts it to Deepmarks in the background, so the bookmark appears on the web and your other devices without you having to open the app afterward. (Applies to local-key sign-ins — nsec, passkey, or recovery key. Remote-signer sign-ins still open the app to finish, since the key isn't on the device.)

  More…

  - **Faster metadata autofill.** The share sheet and the in-app "add a bookmark" form now populate title, description, and suggested tags as fast as possible; richer AI tags are still added to the saved bookmark in the background.
• Jun 25, 2026 2.2.7
  # Deepmarks Android 2.2.7 Archive clarity and reliability release. - **Blocked archives are visible.** If a supported media or page archive fails because the source site blocks archiving, Deepmarks now shows a clear failed-archive marker instead of leaving the bookmark ambiguous. - **Archive status is easier to trust.** Archive failures that are caused by site blocks are recorded for the user without creating unnecessary operator alerts.
• Jun 10, 2026 2.2.5
  # Deepmarks Android 2.2.5 Playback and polish release (no earlier 2.2.x shipped to stores — 2.2.5 supersedes them all). - **Archived videos start playing immediately.** Newly archived media streams as it decrypts instead of downloading the whole file first — tap play, watch right away. Older archives keep the download-then-play behavior. - **Exports are complete.** "Export my bookmarks" now includes

  More…

  bookmarks imported from other Nostr clients, including bookmarked posts. - **Every device picks the same winner.** When the same bookmark was edited on two devices at once, web, app, and extension now resolve the conflict identically (matching what the relay itself keeps).
• Jun 10, 2026 2.2.4
  # Deepmarks Android 2.2.4 Quality-of-life follow-up to the 2.2.3 structural release (no earlier 2.2.x shipped to stores — 2.2.4 supersedes them all). - **Share a Nostr post straight into Deepmarks.** Sharing a `nostr:`/`note1…`/`nevent1…` reference from Damus, Amethyst, Primal, or any Nostr client now saves the post — no web URL needed. - **Bookmarked posts show up everywhere.** Notes bookmarked in other Nostr clients now appear in your main bookmarks list and its search,

  More…

  not just the posts tab, and post lookups use the relay hints your lists carry, so they resolve faster. - **Safer re-sync.** The "push to relay" recovery tool now checks what the relay already has and publishes only what's missing — it can no longer re-assert an old device's stale state or resurrect deleted bookmarks. - **Less wasted work.** Media archives that failed permanently (deleted videos) are remembered and skipped instead of retried endlessly.
• Jun 9, 2026 2.2.3
  # Deepmarks Android 2.2.3 Structural release: the four long-running reliability projects land (no earlier 2.2.x shipped to stores — 2.2.3 supersedes them all and carries every fix since 2.1.1). - **Private bookmarks are now conflict-free.** Saving, editing, or deleting a private bookmark writes one small encrypted record for that bookmark alone, instead of re-encrypting and republishing your entire private library. Two devices editing at the same time can no

  More…

  longer overwrite each other's changes, and the failure modes that could erase a private library are structurally gone. - **Large media archives finally play on iOS.** Media archives use a new chunked encryption format the app decrypts piece-by-piece with bounded memory — a 1 GB+ video plays instead of crashing the app. Old archives keep working; uploads of big files no longer time out and retry-download endlessly. - **The relay now has a live second copy.** Every bookmark event is replicated to a standby within seconds, so a server disk failure can no longer lose up to a day of saves. - Shared, drift-proof sync core: the bookmark-merging logic is now one audited implementation across web and the browser extension, locked together by the test suite.
• Jun 9, 2026 2.2.2
  # Deepmarks Android 2.2.2 Rounds three and four of the June 2026 reliability work, on top of 2.2.1 (no earlier 2.2.x shipped to stores — 2.2.2 supersedes them and carries everything). - **Deleting a bookmark finally deletes it everywhere.** Public deletes made on one device now propagate to your other devices instead of the bookmark quietly reappearing from a stale cache, and a deleted bookmark can no longer resurrect when its old copy arrives from a

  More…

  slow relay. - **Offline saves are safer.** Edits queued while offline are re-stamped when they finally send (so the relay doesn't discard them as outdated), offline retries no longer burn the retry budget, and the bookmarks page shows "N saves waiting to sync". - **Private and media archives can't lose their keys anymore.** The app refuses to queue an encrypted archive if your signer can't publish the key (with a clear explanation), retries unpublished keys automatically, keeps unpublished keys for 90 days instead of deleting them after 14, shows archives whose key is unrecoverable on this device instead of hiding them, and re-archives them — including media — with a fresh key. - **The archive service heals itself.** Archives that completed but never appeared in your list are now re-delivered automatically; failed public page archives attempt a Wayback rescue; lost encrypted jobs are marked failed so the app can retry them, instead of leaving you waiting forever. - Server-side: operator alerting for undeliverable saves, a relay write-health probe, and database-capacity monitoring.
• Jun 9, 2026 2.2.1
  # Deepmarks Android 2.2.1 Round two of the June 2026 reliability work, on top of 2.2.0 (which has not shipped to stores — 2.2.1 supersedes it and carries both rounds). - **Remote signers can't freeze the app.** If your NIP-46 bunker or Amber phone is asleep, private-bookmark decryption now times out and tells you, instead of silently hanging the private list forever. - **Decryption problems are explained.** When part of your private set can't be decrypted, the bookmarks page shows what happened — signer

  More…

  not responding, signer without nip-44 support, or corrupt data — with a retry button, instead of a silently smaller list. Read-only sessions get a "unlock your signer to view private bookmarks" hint. - **Bookmarked Nostr posts stop disappearing.** A post whose event isn't reachable shows a placeholder with a link to open it on primal (your bookmark stays saved) instead of rendering nothing, and pasting a `note1…` / `nevent1…` / `nostr:` reference into the save box now saves the note instead of failing with "Invalid URL". - **Big imports stop losing bookmarks.** Bookmark writes get their own relay budget (1000/hour instead of the shared 200/hour bucket), rejected events no longer count against the budget, and rate-limited events are retried for hours instead of being dropped — so a multi-thousand-bookmark import fully lands on the relay. - Includes everything from 2.2.0: private-set wipe protection, cross-device delete propagation, NIP-01-consistent conflict resolution, safer offline edits, archive mirror fallback, and relay-side dead-lettering.
• Jun 9, 2026 2.2.0
  # Deepmarks Android 2.2.0 Reliability release: every finding from the June 2026 sync/durability review is fixed and locked in by a regression test suite (see `tests/README.md` in the source repo). - **Private bookmarks can no longer be erased by a bad sync.** Saving, editing, or deleting a private bookmark refuses to rewrite the encrypted set when any chunk failed to decrypt (sleepy remote signer, denied prompt, corrupt payload) instead of silently republishing the

  More…

  set without those entries. - **Deletes finally propagate across devices.** Deleting a private bookmark on one device now removes it everywhere: other devices honor the delete tombstone instead of resurrecting the bookmark from their local cache on the next save. - **Same-second edits render identically on every device.** Conflict tie-breaks now match what the relay itself retains (NIP-01 lowest event id), so two devices no longer show different versions of the same bookmark. - **Offline edits are safer.** A queued edit can no longer be dropped when an older save of the same URL is acknowledged first. - **Bookmarked Nostr posts appear once they're available.** A note whose event reaches the relay moments after you open the app now shows up without a restart. - **Archives open even if the primary store hiccups.** Opening an archive falls back to its recorded Blossom mirrors (with content-hash verification) instead of failing when one server is down. - Relay-side hardening: deterministic relay rejections are dead-lettered for operator review instead of being retried into silence, and bulk private deletes no longer trip the general rate limit.
• Jun 6, 2026 2.1.1
  # Deepmarks Android 2.1.1 Hotfix on top of 2.1.0. - **Privacy fix:** tagging, read-later, or archiving an imported *private* NIP-51 bookmark (a Nostr-URL bookmark whose privacy lives in its list `visibility`, not a `private:` marker) could republish it as a public `kind:39701`. Such bookmarks now correctly stay private — preserve-origin is enforced for imported bookmarks in both the posts view and the main bookmark list. The "private/public" chip also labels

  More…

  imported private bookmarks correctly. - Editing a not-yet-saved Nostr post no longer exposes delete / visibility-swap actions (there's no published event to act on); the first tag simply adopts the post. - Friends' legacy `kind:30001` bookmark sets are now mirrored to relay.deepmarks.org so they render in the friends feed (the importer already understood them).
• Jun 6, 2026 2.1.0
  # Deepmarks Android 2.1.0 This release restores private bookmark visibility, imports legacy bookmark sets, and brings full bookmark actions to saved Nostr posts. - Private NIP-51 bookmark lists now decrypt and show up. Users whose web bookmarks lived only in an encrypted `kind:10003`/`kind:30003` list (the default for Amethyst / Primal / Damus "private bookmarks") no longer see an empty library — the lists are decrypted on-device after sign-in. A late-attaching passkey/bunker signer re-runs the

  More…

  decrypt pass automatically. - Legacy `kind:30001` bookmark sets are imported. Older clients (2023–2024 Amethyst / Nostrudel) wrote bookmark sets under the deprecated `kind:30001`; those are now mirrored and rendered like `kind:30003`, so a user whose only set is a legacy one no longer sees nothing. - Saved Nostr posts get the same actions as web URL bookmarks: view / add / edit tags, read later, archive + download archive, zap, and share. The note content stays read-only — only your own tags and metadata are editable. Tagging or archiving an imported post adopts it as a Deepmarks bookmark, preserving its origin visibility (a privately bookmarked post stays private).
• Jun 3, 2026 2.0.7
  # Deepmarks Android 2.0.7 This release hardens private archive recovery across mobile, web, and browser-extension saves: - Private archive keys are synced as soon as the archive job is accepted, under a provisional `job:<jobId>` key, before final blob-hash reconciliation completes. - Private archive opening now checks final blob-hash keys, then provisional job keys, then the local pending-key stash.

  More…

  - Existing private archives with missing keys stay visible and can queue bounded replacement archives with fresh client-generated keys. - Missing-key repair runs even when archive-all is disabled, so private archive recovery is independent from automatic archiving preferences. - Browser extension archive saves use the same private-key sync path as the mobile app.
• Jun 3, 2026 2.0.6
  # Deepmarks Android 2.0.6 This Android release fixes archive icon reliability and archive recovery: - Completed archive records load incrementally, so large archive libraries no longer wait on one all-or-nothing `/account/archives` response before bookmark rows show archive icons. - Archive lookups now tolerate safe URL variants, including trailing slash differences and YouTube mobile/desktop watch URL variants. - Archive records stay visible even when private archive-key chunks are

  More…

  temporarily incomplete; missing keys affect open/decrypt handling, not the archive existence indicator. - The server-side archive worker now requeues stale public archive jobs from persisted metadata and advances its audit scan through the whole stale backlog over bounded passes. - Bookmark publish retries and archive enqueue writes are more durable across mobile, desktop, and extension saves.
• Jun 2, 2026 2.0.5
  # Deepmarks Android 2.0.5 This Android release fixes bookmark sync durability across mobile, desktop, and extension saves: - Saves are treated as complete only after the signed bookmark has been written to a durable retry queue. - Temporary Deepmarks `/publish` or network failures retry in the background instead of surfacing sync errors to users. - Native share-sheet saves keep their original capture time and remain

  More…

  pending when the signed event cannot be durably queued. - Public, private, import, edit, archive-finalize, read-later, and delete bookmark mutations now use the same queued publish path. - Browser extension saves also queue signed events for retry, including direct-relay mode when no relay accepts the event.
• May 29, 2026 2.0.3
  # Deepmarks Android 2.0.3 This Android release aligns the mobile app with the latest Deepmarks 2.0.3 web bundle and relay-first archive behavior: - Adds richer scholarly metadata fallback through DOI and Crossref when publisher pages block ordinary metadata scraping. - Supports multi-file scholarly archives, so eligible article archives can expose both the captured HTML page and the full-text PDF. - Keeps private archive file keys reconciled across all files in a

  More…

  multi-file archive. - Uses the updated settings defaults: public bookmarks by default unless the user has chosen private, and read-later only when explicitly enabled. - Benefits from longer-lived profile cache records for faster identity display in friend and contact surfaces. - Includes the latest Android signer, NWC, QR import, friends feed, and archive fixes from the shared 2.0.x mobile release line.
• May 27, 2026 2.0.2
  # Deepmarks Android 2.0.2 This Android release promotes the app to the shared 2.0.2 version: - Improves the friends bookmark feed by hiding unresolved note targets until they are available from relay cache. - Renders Nostr profile and post references as readable links instead of exposing raw `nostr:` strings. - Uses the same cleaner metadata preview treatment as the bookmark tab. - Improves retry behavior for bookmarked Nostr posts that arrive after a

  More…

  relay-cache miss. - Benefits from server-side profile and bookmark warming for faster friend pickers and friends-feed loads. - Prioritizes friends-feed cache refreshes when active users publish bookmark-shaped events. - Keeps native WebViews out of service-worker caching and adds boot recovery if stale cache state ever leaves the app on the loading screen.
• May 26, 2026 1.10
  # Deepmarks Android 1.10 This Android release finishes the mobile wallet and friends-feed polish from the 1.9 signer release: - Adds QR scanning for Nostr Wallet Connect setup on mobile. - Saves NWC wallet connections in native secure storage, including sessions signed in through Android signers such as Primal or Amber. - Lets NWC zaps proceed when a provider returns a payable invoice that cannot produce a verifiable public NIP-57 receipt. - Updates friends-feed zap totals immediately after a successful in-app payment while relay receipts remain the durable source of truth. - Detects extensionless Blossom media URLs by HTTP content type so MP4 blobs from servers such as `blossom.primal.net` can show playable previews. - Warms preview metadata earlier and lazy-loads preview images to reduce visible loading lag while scrolling the friends feed.

  More…
• May 26, 2026 1.9
  # Deepmarks Android 1.9 This Android release makes Deepmarks a more complete Nostr signer: - Adds NIP-55 background signing for trusted apps so common requests can complete without repeated foreground bounces. - Adds app-level signer permissions: full trust, medium trust, and low trust. - Supports private zap signer requests, including `decrypt_zap_event`. - Keeps signed-in users out of the public welcome/sign-up screen during Android signer handoffs. - Keeps native bottom navigation aligned with iOS, including posts/read-later/search access from the tab system and no duplicated top section/search nav. - Simplifies mobile app chrome with compact sort controls and a gear-only friends manager action.

  More…

  - Improves friends-feed preview loading while scrolling. - Centers and resizes the Android launcher pennant.
• May 26, 2026 1.8
  # Deepmarks Android 1.8 This release tightens the reading experience in the mobile app: - Keeps the section navigation and sort row visible while scrolling. - Shows lightweight direct media previews for image, video, and audio links without scraping those URLs. - Shows zap totals on friends-feed links using the original Nostr note event, so social zaps outside Deepmarks are reflected in the feed. - Keeps the friends-feed RSS/Atom UI web-only.
• May 26, 2026 1.7
  # Deepmarks Android 1.7 - Adds the Friends tab for selected NIP-02 contacts, including explicit Deepmarks bookmarks and links friends posted in kind:1 Nostr notes. - Adds efficient rich previews for friends links: direct image previews, click-to-play audio/video, YouTube thumbnails, and cached webpage snippets. - Keeps friends links shareable from the feed even before you save them, and zaps the friend or falls back through the normal Deepmarks zap path. - Keeps RSS/Atom feed icons web-only; native mobile apps do not show feed-subscription controls. - Includes synchronized web/mobile bundle fixes for friends search, sorting, and feed actions.
• May 24, 2026 1.6
  # Deepmarks Android 1.6 - Preserves bookmark save order across Android share extension, web, iOS, and server feeds using millisecond save timestamps. - Keeps direct Android share-extension publishing routed through the Deepmarks server publish path for relay fan-out and IP privacy. - Includes the latest mobile/web bundle fixes for bookmark sync, archive access, settings layout, and public/private defaults.
• May 23, 2026 1.5
  # Deepmarks Android 1.5 - Explore now opens as a stable result list instead of prompting to merge live relay updates. - Explore can filter newest, popular, tags, and custom tag views by all time, year, month, week, 24h, or a custom date range. - Pull-to-refresh returns the native app to the top of the refreshed list. - Adds planning documentation for the upcoming opt-in Android foreground NIP-46 signer service.
• May 23, 2026 1.4
  # Deepmarks Android 1.4 - Settings sections now have clearer visual separation with subtle accent bands. - Android share sheet header now reserves system-bar space so the Save action remains visible. - Native app versions are aligned at 1.4 build 5.
• May 23, 2026 1.3
  # Deepmarks Android 1.3 - Tags tab is now personal-only and no longer shows an include-global option. - Explore now owns global tag discovery, global tag clouds, and public tag-filtered bookmark browsing. - Shared saves resolve to Private or Public directly while honoring the user's read-later default.
• May 23, 2026 1.2
  # Deepmarks Android 1.2 - Existing lifetime members who sign in with a recovery key now skip the free/lifetime onboarding picker automatically. - Android still shows the free/lifetime choice for new or free accounts. - iOS continues to hide paid plan choices inside the app.
• May 22, 2026 1.1
  # Deepmarks 0.6.0 This release documents and ships the privacy-preserving publish model across the web app and browser extensions. ## Publish model - Clients sign Nostr events locally. - The web app, mobile-capable frontend, share extension, and browser extensions POST signed bookmark events to the Deepmarks API by

  More…

  default. - Deepmarks publishes accepted events to `relay.deepmarks.org`, then fans them out to the user's relay list. - Public relays see Deepmarks' server IP, not the user's browser or phone IP. - Browser extensions keep an advanced direct-publish mode for users who explicitly want to publish straight to their write relays. ## Browser extensions - Chrome and Firefox extension packages are included in the project. - Extension settings use the same synced account-settings model for relays, default tags, visibility, archive defaults, Blossom backups, and theme. - Device-local secrets stay local: nsec storage, NWC, and saved signer grants are not synced through account settings. ## Web and settings - Settings sections now share the same layout treatment across web, mobile web, and the Capacitor shell. - Nostr Wallet Connect is visible as a normal settings section rather than hidden under Advanced. - Mobile app push notifications are marked as coming soon; current push support remains web push. - iOS keyboard avoidance keeps focused text fields above the keyboard. ## Mobile source The iOS and Android Capacitor projects remain in the public source tree for audit and contributor work. Mobile app binaries are not part of the 0.6.0 public release, and the mobile apps should not be treated as store-ready yet. ## Documentation New and updated docs explain how to understand and run the project: - `docs/getting-started.md` - `docs/relay-policy.md` - `docs/extensions.md` - `docs/mobile.md` - `docs/release.md` ## Verification - `frontend`: typecheck and 314 tests - `payment-proxy`: typecheck and 309 tests - `archive-worker`: TypeScript build and 42 tests - `bunker`: typecheck and 50 tests - `browser-extension`: typecheck and 21 tests - Apple frontend build