Module Signing & Chat Fixes v1.4.1

Module Signing & Verification

CanvasUI now supports signed module packages (.cumod format) with a full Ed25519 certificate chain. This lets module developers prove authorship and lets users verify modules haven't been tampered with.

• Verified badges — signed modules show a green checkmark with the developer's name
• Certificate popup — hover over the badge to see developer details, organisation, website, and certificate dates
• Revocation support — compromised certificates can be revoked, fully disabling affected modules
• Version tracking — modules show an outdated badge when built for an older app version

Signing Your Modules

1. Open Settings → Modules → Generate Key & Signing Request
2. Submit your CSR via the GitHub issue template
3. Receive your signed certificate from the CA
4. Export modules with Sign with Key File to produce verified `.cumod` packages

Hardware security keys (YubiKey) are supported via the External Signature mode.

See the Developer Guide for full documentation.

---

Bug Fixes

Kick Emotes

• Fixed emotes not rendering when Streamer.bot sends duplicate position indices for repeated emotes
• Fixed concatenated emotes (no spaces between them) showing as plain text instead of images

Emote Aspect Ratio

• Emotes now render at their correct aspect ratio instead of being forced to a square
• Height is configurable via `EmoteHeight` in Chat settings — width scales automatically