NShroud v0.6.1

NShroud v0.6.1

Commit: 64628bc

NShroud v0.6.0

NShroud v0.6.0

Commit: f2befa4

NShroud v0.5.1

NShroud v0.5.1

Changed

• MLS layer refactored into MlsState struct methods — internal restructure with no behavior, wire-format, or on-disk format changes. Sets up follow-up work on persistence atomicity and welcome-acknowledgment handling.
• Residual "Cryptext" branding cleaned up in the release workflow (Windows installer publisher field, release notes, code-signing artifacts) and project documentation (README, LICENSE) to complete the 0.5.0 rebrand.

Commit: 79cc098

NShroud v0.5.0

NShroud v0.5.0

Changed

• Application rebranded from Cryptext to NShroud — product name, window titles, splash screen, sidebar icon, auth-page header, and profile-dialog copy all reflect the new name
• Bundle identifier changed from cryptex.app.com to com.nshroud.app — existing installs will treat the first NShroud build as a fresh install since the local vault, keyring entry, message database, and MLS state are all keyed off the bundle ID
• Deep link scheme changed from cryptex:// to nshroud://
• API server URL default changed from cryptext.duckdns.org to api.nshroud.com; the WebSocket URL derives from this and updates automatically
• Code-signing info URL on the Windows installer updated to nshroud.com

Commit: e249ef5

Cryptext v0.4.0

Cryptext v0.4.0

Added

• Microsoft Entra users get a fully silent onboarding — username and display name are auto-prefilled from the Cognito identity attributes and the profile is created in the background, so new enterprise users land directly on the home screen instead of going through the profile-setup page
• Username for Entra-federated profiles is locked and visually marked "Set by your organization" in both the create flow and the settings panel; nickname remains editable

Changed

• Session persistence rebuilt into a single SessionPersistence struct; all session lifecycle (save / restore / clear / wipe) flows through one type instead of free functions
• HTTP layer rebuilt around typed HttpClient (anonymous) and AuthorizedClient (bearer-authed) wrappers; the legacy free-function API is removed and every call site (auth, conversations, friends, profile, media, sync, MLS) now goes through the typed wrappers
• Filesystem path helpers consolidated into a single AppPaths struct keyed by user_id

Fixed

• Sign-out no longer destroys the local message vault — signing back in on the same device restores access to existing message history. The previous behavior wiped the device's encryption key on every sign-out, leaving the encrypted local DB permanently unrecoverable
• Transient session-restore failures (network blips, missing session file, identity mismatch on refresh) no longer wipe credentials — the user is routed back to the login screen and can retry without losing local state
• Sign-out button icon corrected — was using a shield (which read as "security"); now uses the standard log-out glyph

Commit: 744c406

Cryptext v0.3.8

Cryptext v0.3.8

Commit: 17c3049

Cryptext v0.3.7

Cryptext v0.3.7

Commit: 2f05ad2

Cryptext v0.3.6

Cryptext v0.3.6

Added

• Microsoft Entra (Azure AD) sign-in option on the auth page

Changed

• Google and Entra OAuth flows share one client-side helper for the browser-open and status-poll cycle

Security

• MLS state and metadata files at rest are now encrypted with the per-user DEK, matching the messages DB and session blob; existing plaintext files are migrated automatically on next launch
• OAuth callback transitions are now guarded so a stale ?error= callback cannot overwrite an already-completed sign-in
• OAuth callback now surfaces IdP-side failures (?error=, ?error_description=) instead of treating them as missing-state errors

Commit: bbfa88c

Cryptext v0.3.5

Cryptext v0.3.5

Commit: 45482ae

Cryptext v0.3.4

Cryptext v0.3.4

Commit: 9478ed6