Back from two weeks sailing from Barcelona to Rome, and the team did not slow down. Here's everything Soapbox shipped while I was eating cannoli in Sicily. 👇🏻
THE NUMBERS
🔵 Ditto: 5 releases (v2.35.0 → v2.36.0)
🏴☠️ Armada: 6 releases in 14 days (v0.55 → v0.59.1)
⚡ Agora v2.11.0
🎭 Shakespeare v9.15.0
🔒 A security hardening sweep across 8 repos
DITTO: TAKE EVERYTHING WITH YOU
The big one. Ditto v2.36.0 ships full account Import & Export. Download your entire post history to a .jsonl file you own, then push it back to any relay you want. Per-relay progress, resume if the connection drops, and a full network scan for the deep archives.
No export buttons that rate-limit you. No "request your data" forms. No 30-day waits. You can leave anytime and take everything with you.
Also new: NIP-99 classified listings render as rich feed cards (price, photos, the works), and Ditto now strips tracking parameters from links in both directions. You share a story. Not a surveillance payload. 🔒
AGORA: FUNDRAISING ANYWHERE
v2.11.0 ships an embed builder. Pick a widget, choose light or dark, preview it live, and paste it onto any website. Two of the widgets take real Bitcoin donations right there on the page: BIP-21 QR, Taproot + Silent Payments, no custodian, no platform fees. 100% reaches the recipient.
Fundraising that can't be deplatformed, syndicated anywhere on the internet. ⚡
SHAKESPEARE: ONE-CLICK AI
v9.15.0 adds Meridian as a one-click AI provider preset. Build Nostr apps by talking to them, no API config required. Plus Optimize Repository and zap invoice verification. 🎭
ARMADA: THE SHIP KEPT SHIPPING
Six releases, nine contributors:
🎮 Mini App multiplayer with Vector, P2P over iroh gossip, in the browser
📦 DM-scoped WebXDC apps living inside conversations
🔔 Notification center + reliable cross-platform notifications
💻 Markdown in chat, syntax-highlighted
🛡️ Anti-spam defenses against future-dated message attacks
🚀 Releases published as kind-30622 Nostr events. The app auto-updates from relays. No app store, no update server.
The corporate release pipeline, replaced by Nostr events. Your apps should update the way your money moves: peer to peer.
Even our websites moved to nsite deploys. nostrhub, birdstar, ditto web, agora web: all served from Nostr, no origin servers. The company building Nostr now hosts its own front door on Nostr. 🌐
SECURITY: WE AUDIT OURSELVES
While I was gone,
@Alex Gleason ran a hardening sweep across basically everything we ship: zap and on-chain invoice verification, deep links handled as data, SafeZip, content-type allowlists, CSP tightening, repost impersonation fixes, HTTP signature enforcement. nostrify 0.55.0 shipped the validation primitives for the whole stack.
