Nostr Compass Podcast

Nostr Compass Podcast #19


Listen Later

### News
- **00:00 Intro**
This episode follows Nostr Compass #19 across top stories, shipping releases, in-development work, new projects, NIP updates, and two deep dives.
- **02:48 Amethyst ships Marmot MIP compliance, NIP-72 communities, zap goals, and MoQ audio rooms**
Amethyst merged 57 PRs focused on Marmot compliance, NIP-72 communities, and audio rooms over Media over QUIC. Highlights include MIP and MLS work in PR #2462, PR #2466, and PR #2493, plus NIP-72 support in PR #2468, zap goals in PR #2469, and MoQ audio rooms in PR #2494.
- **19:16 TollGate v0.1.0 stabilizes pay-per-use internet over Nostr and Cashu**
TollGate shipped v0.1.0 with a layered spec for prepaid connectivity using Cashu. The release pins protocol and transport definitions in TIP-01, TIP-02, HTTP-01..03, NOSTR-01, and WIFI-01.
- **46:28 nostream merges 53 PRs for NIP-45, NIP-62, compression, and query hardening**
nostream merged 53 PRs adding NIP-45 COUNT support in PR #522, NIP-62 advertisement in PR #544, import/export compression in PR #514, and filter/schema/query correctness in PR #534. It also reached full NIP-11 parity in PR #557.
### Releases
- **00:20 Nostria v3.1.26 through v3.1.28 add background music playback on Android**
Nostria shipped v3.1.22 through v3.1.28, with Android background music playback landing in v3.1.26. Follow-up releases v3.1.27 and v3.1.28 hardened media service behavior.
- **48:41 Primal Android ships Explore tab, NIP-05 verification, and audio player**
Primal Android merged 11 PRs including an Explore tab in PR #1021, feed editor in PR #1015, NIP-05 verification in PR #994, and inline audio playback in PR #997. It also adds wallet-QR driven NIP-46 pairing in PR #1018.
- **50:01 strfry adds Prometheus write-path metrics and fixes NIP-42 AUTH envelope**
strfry added write-path metrics in PR #194, per-connection traffic logging in PR #197, and configurable filter tag limits in PR #192. Protocol behavior for NIP-42 AUTH failures was corrected to use the proper OK envelope in PR #201.
- **51:41 Shopstr hardens storefront security across 13 PRs**
Shopstr merged 13 security-heavy PRs, including XSS and script-injection fixes in PR #434 and PR #417, auth fixes in PR #418, PR #433, and PR #419, plus SSRF remediations in PR #435 and PR #414. Functional issues were also addressed in PR #421, PR #425, and PR #392.
- **53:24 Wisp v0.18.0-beta adds Normie Mode, For You feed, and NIP-29 group config**
Wisp shipped v0.18.0-beta with fiat-centric Normie Mode in PR #462, onboarding updates in PR #464, and a For You feed in PR #469. It also adds NIP-29 group configuration in PR #471, AUTH sequencing fixes in PR #478, and NIP-65 inbox relay broadcast behavior in PR #481.
- **58:16 NoorNote v0.8.4 adds Scheduled Posts and live stream zapping**
NoorNote shipped v0.8.4 and v0.8.5, adding scheduled signed-event publishing through a NoorNote relay and live-stream zapping tied to NIP-53. The v0.8.5 follow-up fixes timeline deduplication on long Android scrolls.
- **01:00:11 topaz v0.0.2 ships a Nostr relay for Android**
topaz shipped v0.0.2 as a Kotlin-first Android relay package, focusing on a working personal relay running directly on a phone.
- **01:01:28 StableKraft v1.0.0 ships the first stable music-and-podcast PWA release**
StableKraft reached v1.0.0, a Next.js PWA for podcast-based music discovery with Nostr auth and Lightning flows. The same week added feed-ingestion fixes including OPML cache and XML stripping and a reparse window reduction.
- **01:02:29 NipLock ships a NIP-17-based password manager**
NipLock stores credentials as self-addressed NIP-17 gift-wrapped DMs so entries replicate across user devices. It supports raw keys, nos2x, and Amber via NIP-46.
- **01:07:37 flotilla-budabit polishes its NIP-34 repo surface**
flotilla-budabit, a fork of Flotilla, shipped NIP-34 workflow polish including discussion controls, sticky tabs, saved relay announcement loading, and patch status sync.
- **01:08:55 rx-nostr 3.7.2 through 3.7.4 add default verifier and optional constructor args**
rx-nostr shipped 3.7.2, 3.7.3, and 3.7.4. PR #192 adds a default signature verifier, [email protected] fixes verification failures, and PR #195 makes createRxNostr() args optional.
- **01:09:46 Keep Android v1.0.0 ships with reproducible builds and zero trackers**
Keep shipped v1.0.0 with reproducible builds in PR #241, ZXing migration in PR #248, and a zero-trackers Exodus Privacy report in PR #252. Distribution support for zapstore lands in PR #256.
- **01:10:53 Flotilla 1.7.3 and 1.7.4 add kind-9 wrapping for richer NIP-29 rooms**
Flotilla shipped 1.7.3 and 1.7.4, introducing kind-9 wrapping for non-chat payloads in NIP-29 rooms, linked to NIP PR #2310. The release line also includes polls, NIP-46 Aegis URL support, invite sharing, and feed pagination improvements.
- **01:12:12 WoT Relay v0.2.1 migrates eventstore to LMDB**
WoT Relay shipped v0.2.1 with LMDB eventstore migration in PR #97, security dependency updates in PR #99, and NIP-11 metadata updates in PR #100.
- **01:15:09 Formstr suite: Pollerama security pass, Forms i18n, Calendar RRULE support**
The Formstr suite merged 26 PRs across Pollerama, Formstr, and Nostr Calendar with security and product updates. Pollerama hardened key and DM handling in PR #182, PR #175, and PR #171, while Formstr added media/i18n/import support in PR #475, PR #439, and PR #466, plus privacy fixes in PR #463. Nostr Calendar shipped v1.3.0 and v1.4.0 with RRULE support in PR #107 and UTC recurrence fixes in PR #101.
- **01:19:12 Also shipped: notedeck, nostr.blue, cliprelay, Captain's Log**
notedeck shipped v0.10.0-beta.4, nostr.blue shipped v0.8.6 with Dioxus 0.7.5 and Android audio bridge work, and cliprelay shipped desktop v0.0.3 and android v0.0.4. Captain's Log published alpha builds with sync relay liveness detection.
### Project Updates
- **01:20:27 whitenoise-rs refactors to session-scoped account views**
whitenoise-rs merged 15 PRs shifting from global singletons to per-account AccountSession and AccountManager surfaces, starting with PR #743 and scoped relay handles in PR #753. Session-owned dispatch closes in PR #770.
- **01:26:19 White Noise app adds block/unblock UI, leave-group, and offline notices**
White Noise shipped group lifecycle and moderation UX updates including block/unblock in PR #578 on top of PR #573, group leave/delete wiring in PR #571 and PR #572, and offline notices in PR #569 and PR #576. PR #585 narrows key package deletion to legacy keys.
- **01:32:04 MDK adds mixed-version invite support and SelfUpdate convergence**
MDK merged invite and state-rotation compatibility work, led by mixed-version invite capability negotiation in PR #261 and SelfUpdate convergence in PR #264. Additional robustness changes include PR #262, PR #256, PR #259, and proposal introspection in PR #265.
- **01:35:02 nostter adds NIP-44 encryption across people lists, bookmarks, and mutes**
nostter added NIP-44 encryption to mute lists, bookmarks, and people lists via PR #2088, PR #2089, and PR #2090. It also removes a legacy migration path in PR #2087.
- **01:35:39 zap.cooking ships Nourish scoring and a reusable comment thread**
zap.cooking merged 20 PRs, adding Nourish recipe scoring in PR #317 and PR #319. It also extracted a reusable CommentThread from PR #299 through PR #302, with further recipe and profile polish in PR #309, PR #307, and PR #310.
- **01:36:18 ridestr extracts shared rider coordinator**
ridestr merged 10 PRs that modularize Compose UI and move rider and driver protocol logic into a shared coordinator in PR #70. It also adds kind 3189 driver ping receiving in PR #60.
- **01:37:20 Blossom drafts a BUD-01 Sunset header for blob expiration**
Blossom opened PR #99 to add a Sunset header to BUD-01 so servers can advertise blob expiration timing before clients hit missing-content errors. The draft uses RFC 8594 semantics as advisory metadata.
- **01:38:14 Forgesworn publishes a 29-repo cryptographic toolkit for Nostr**
Forgesworn published 29 repositories spanning signing, identity, attestations, trust, and paid API discovery, including nsec-tree, Heartwood, Signet v1.6.0, and nostr-attestations. The stack also includes toll-booth, toll-booth-dvm, 402-announce, 402-indexer, nip-drafts, and anvil.
- **01:44:46 ShockWallet ships Nostr-native Lightning wallet sync and multi-node connections**
ShockWallet shipped wallet and node-pairing improvements including channels dashboard updates in PR #608, admin invite QR flow in PR #606, and metrics readability in PR #607. Its sync model uses NIP-78 for multi-device app state and complements NIP-47 wallet connect flows.
- **01:46:32 Nostrability issues migrate to git over Nostr after GitHub censorship**
Nostrability moved issue tracking to git over Nostr after its GitHub organization was removed, preserving ongoing interoperability reports on Nostr-native infrastructure.
- **01:47:57 nowhere encodes full websites into URL fragments and routes orders through Nostr**
nowhere serializes complete sites into URL fragments with compression and base64url encoding so hosts never receive content-bearing data. Live features use ephemeral-key Nostr messaging with NIP-44 encryption, and the project ships a companion reader at nowhr.xyz.
- **01:52:28 Small new surfaces: relayk.it and Brainstorm Search**
relayk.it is a browser relay discovery client built with Shakespeare, and Brainstorm Search ships as a single-page Nostr search UI.
### NIP Updates
- **01:53:26 NIP-67: EOSE Completeness Hint (PR #2317) — Open**
NIP-67 PR #2317 proposes an optional third EOSE element to signal whether a relay returned all matching stored events. The extension is backward compatible and helps clients stop pagination when completeness is explicit.
- **01:55:01 NIP-5D: Nostr Applets (PR #2303) — Open**
PR #2303 proposes NIP-5D applets as sandboxed interactive front-end payloads, positioned between static NIP-5A sites and executable NIP-5C scrolls.
- **01:56:05 NIP-29: Subgroups spec (PR #2319) — Open**
PR #2319 extends NIP-29 with subgroup hierarchy and moderation scoping while keeping compatibility for plain single-h tag messages.
- **01:57:05 NIP-29: Explicit role permissions on kind 39003 (PR #2316) — Open**
PR #2316 defines explicit operation grants and optional expiries on kind 39003 role events so relay and client permission semantics are machine-readable and consistent.
- **01:57:56 NIP-11: access_control field for gated-relay discovery (PR #2318) — Open**
PR #2318 adds optional access_control metadata to NIP-11 relay documents so clients can surface gating mode and access request endpoints.
- **01:58:35 NIP-63a: Minimal Payment Gateway Descriptor (PR #2315) — Open**
PR #2315, previously covered in Newsletter #18, continues iterating on kind 10164 descriptor structure and subscription-tier field layout.
- **01:59:09 NIP-XX: Agent Reputation Attestations (Kind 30085) (PR #2320) — Open**
PR #2320 proposes kind 30085 attestations for service and agent reputation, including bounded scores, evidence references, and signed target attribution for market filtering.
- **01:59:58 NIP-TPLD: Transient Private Location Data (PR #2309) — Open**
PR #2309 continues work on kind 20411 transient location data, with ongoing tuning around NIP-44 per-recipient encryption and ttl retention semantics.
- **02:00:43 marmot-ts 0.5.0 release PR (PR #70) — Open**
PR #70 prepares @internet-privacy/[email protected] with breaking API and storage changes, including dual key package event support and invite/group management moved onto MarmotClient.
### NIP Deep Dives
- **02:01:10 NIP Deep Dive: NIP-72 (Moderated Communities)**
NIP-72 defines communities as kind 34550 addressable events with metadata and moderator sets, where submissions carry community `a` tags and moderator approvals are published as kind 4550 events. The design keeps moderation transparent and portable across relays because approvals are signed, auditable Nostr events and community identity is replaceable but stable via `d` tag coordinates. It trades strict gatekeeping for broad compatibility: submissions are publicly writable, while curation happens at the client read layer through approved views.
- **02:07:06 NIP Deep Dive: NIP-57 (Zaps)**
NIP-57 standardizes Lightning-linked zap requests (kind 9734) and receipts (kind 9735) with verifiable linkage between request intent, invoice amount, and settlement preimage. It relies on LNURL callback coordination and requires clients to validate wallet-server signatures, invoice description hash commitments, and payment proof before counting receipts as real zaps. The model also supports private and anonymous zap variants, split payouts, and higher-level goal tracking as used by NIP-75 and Amethyst’s PR #2469.
...more
View all episodesView all episodes
Download on the App Store

Nostr Compass PodcastBy Nostr Compass