OSHI: Offline Messenger

Security — two issues found by an independent researcher, both fixed: • A single corrupted or forged packet could poison an encrypted conversation and leave every later message unreadable until the session was reset. Encryption state is now committed only after a message is proven authentic. • Bot conversation history was kept in app preferences, which device and iCloud backups copy as-is. It now lives in the Keychain, on this device only. Reported privately by Turáni Gergely — thank you. Messaging • Delivery is far more reliable: messages no longer get stuck when an encrypted session drifts, and group messages are no longer dropped for a group you have not joined yet. • Replies quote the right message and take the colour of the bubble they answer, and a message from yesterday shows a time you can find again. • Photos and videos send faster and use less data — quality is now chosen by measuring the link instead of guessing. Calls • Minimise a call to go read your messages, then tap to come back. • Contacts show their name instead of their public key, and Start Chat works from the call screen. Nearby and bots • The Nearby "Disconnect" button now actually disconnects. • Bots: a manifest that states what a bot may do, permissions enforced in one place, a directory where a listing cannot lie, and local bots that leave nothing on the server.