Wherry v0.4.1

Wherry v0.4.1 — call fixes, and a few new things

Mostly fixes for calls in the desktop app, many of them on Windows, plus a
few things you can now do.

New

• Switch camera in a call, when you have more than one camera.
• A new recovery code from Settings. If you lost yours, or never wrote
  it down, Settings → Recovery code makes a new one after you type your
  password. The old code stops working at once; your messages are not
  affected.
• Call Details shows how the call is connected: directly, or through
  the relay, and over which protocol.
• If the app ever hits an error it cannot recover from, it now shows a
  screen with a Reload button instead of going blank.

Calls

• Switching your microphone during a call no longer cuts it off. In
  0.4.0 on Windows, changing the microphone in the middle of a call (or
  picking Default) left the others hearing nothing from you on every
  other switch, while everything still showed you unmuted. Every switch
  now keeps you audible.
• Stopping a screen share no longer cuts off your microphone. On
  Windows, if you shared with sound and then stopped, the others stopped
  hearing you for the rest of the call, while everything still showed you
  unmuted.
• The first call after starting the app uses your settings. On
  Windows it could ignore the speaker you chose and run Windows' own echo
  cancellation. Sound now also follows your default speaker if you change
  it or unplug your headset, and a call started with no speaker connected
  sends your voice from the start.
• Hanging up while a call is still connecting really hangs up.
• Joining a call that mutes newcomers keeps you muted from the start,
  with no moment of sound before the mute.
• Choosing Default as your microphone during a call now moves the
  call to it, on Windows too.
• When a moderator mutes you in a hub call, your mute button now shows it,
  and one press unmutes you. Pressing the camera button twice quickly, or
  stopping a screen share right after starting it, no longer leaves the
  camera or microphone in a broken state.
• Escape on the call screen closes only the call screen. A video tile no
  longer freezes after switching quickly between the call bar and the call
  screen. The caller's bar stops saying "Calling…" once the call is
  answered. A call recovers cleanly if the call server restarts.
• Ctrl/Cmd+Shift+S opens the screen picker rather than sharing straight
  away.

Everywhere else

• One malformed message from someone can no longer stop your messages
  arriving, and a malformed attachment can no longer blank the app.
• Someone you have blocked can no longer call you, or see you typing or
  online, in your conversation with them. If you both block each other,
  each block is your own: lifting yours leaves theirs in place.
• In a hub, a ban placed by the owner can no longer be lifted by a
  moderator, and mutes, disconnects and video changes now show in the
  hub's Recent activity.
• Signing out from Settings, and removing or blocking a contact, now ask
  first.
• A draft or an edit in one conversation no longer follows you into the
  next one, and a conversation is marked read only while you are looking
  at it.

The web app and the server already have everything above that is not
specific to the desktop app; this installer brings the rest.

Known, not yet fixed

• On Windows, sharing a single window still does not carry sound from a
  program that window's app started indirectly (a game from a launcher),
  or from a Microsoft Store app. Share the whole screen for those.

Installing

• Windows — Wherry_0.4.1_x64-setup.exe, unsigned (SmartScreen:
  More info → Run anyway).
• macOS — Wherry_0.4.1_aarch64.dmg, Apple Silicon only, unsigned
  (right-click → Open the first time).
• Linux — .deb, .rpm, .AppImage.

Nothing here auto-updates yet; the app points you back at this page.

Wherry v0.4.0

Wherry v0.4.0 — calls

The first release with voice and video in it.

Calls. Voice in direct messages, groups and hub voice channels. A call
rings every device you are signed in on, and you can join one that is
already running. Cameras and screen sharing work in the same places, and a
call stays with you as a bar across the top while you read anything else.

Encrypted like your messages. Every camera, screen and microphone track
is sealed frame by frame under a key derived from the conversation's own
encryption group. The relay server carrying the call cannot open any of it,
and nothing is recorded. The exception is the one you already know: a call
in a public or invite-only hub is relayed in the clear to whoever runs
the server, exactly as that hub's messages are, and it says so where you
start it.

The desktop app handles its own audio and video now rather than leaving
it to the built-in browser engine. That is what makes echo cancellation,
noise suppression and automatic gain real settings (Settings → Voice), and
what lets a shared window carry its own sound without sending the call back
to the people in it.

Also in this release: search your own conversations on this device
(Ctrl/Cmd+Shift+F), hub pictures, channel categories and drag-to-reorder,
profile cards with a status you set yourself, upload progress and retry for
attachments, and pasting or dragging photos straight into the composer.

Installing

• Windows — Wherry_0.4.0_x64-setup.exe. The installer fetches the
  WebView2 runtime if the machine lacks it. It is unsigned, so SmartScreen
  will warn: More info → Run anyway.
• macOS — Wherry_0.4.0_aarch64.dmg, Apple Silicon only, and
  unsigned: right-click the app → Open the first time.
• Linux — .deb, .rpm and .AppImage.

Nothing here auto-updates yet; the app points you back at this page.

Wherry v0.3.0 — the rebrand

The product is Wherry, at wherry.app. Same application, new name, new
domain, new store identifiers — landed before anything shipped outward,
which is the only window in which it was cheap.

• wherry.app is live and serving production. chat.cjtechsystems.com serves
  the same deployment through the transition, so nobody is cut off: emailed
  links and hub invite links in delivered messages still resolve, and
  installed builds keep working until their owners take this release.
• Store identifiers are app.wherry on both platforms, permanent from the
  first published listing. Both generated projects were regenerated for it.
• Mail moved to notify.wherry.app with a fresh DKIM key, SPF and DMARC.
• The client is now published as a source-available mirror at
  github.com/wherryapp/wherry under PolyForm Noncommercial 1.0.0, so the
  encryption claims can be checked against something.

Upgrading: web and PWA users sign in again at the new address — browser
storage is per origin, so this is a fresh device row and history refills
from the archive. Nothing is lost. Desktop and mobile need this build,
because the API base is baked in.

Installing

Nothing here is code-signed yet, so the OS will object on first run:

• Windows — SmartScreen shows "Windows protected your PC". More info → Run anyway.
• macOS — right-click the app → Open, rather than double-clicking. The .dmg is unsigned and unnotarised.
• Linux — .deb, .rpm and .AppImage; mark the AppImage executable.

Signing and notarisation are deliberate later work, not an oversight.