hzrd149

JavaScript developer working on some nostr stuff
- noStrudel https://nostrudel.ninja
- Blossom https://github.com/hzrd149/blossom
- Applesauce https://hzrd149.github.io/applesauce

Public Key

npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr

NIP-05 Address

hzrd149.com

Profile Code

nprofile1qqszv6q4uryjzr06xfxxew34wwc5hmjfmfpqn229d72gfegsdn2q3fgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsxx2q3a

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr

Show more details

Last Notes

2026-04-16 17:35:22 UTC

- reply

Do you have the source for this? and is it compatible with https://github.com/hzrd149/blossom/blob/master/implementations/hls-video-formatting.md

2026-04-16 17:06:14 UTC

Testing, please ignore. and yes I'm sharing a localhost URL, your client should know how to deal with it
http://localhost:3000/8e6fa6cfdf5cc1c265b74e03eb96737adf80b4e53e85ab486cdad6b5c9502503.jpg
blossom:a94b7005b2f6256e0335b0de05dd6a9ce771c1ac27018a9de2d169538710962d.jpg?xs=blossom.nogood.studio&as=55f04590674f3648f4cdc9dc8ce32da2a282074cd0b020596ee033d12d385185

2026-04-15 16:21:13 UTC

- reply

Its not connected to my local network, so its talking to my PC over Bluetooth

2026-04-15 15:34:30 UTC

And now I managed to make an HTTP request that goes from: my laptop -> LAN -> my PC -> UDP -> FIPS test gateway -> other nostrich's server.
Its not a direct connection, the HTTP request is getting routed through two other computers. This is crazy... 🤯
Unfortunately the BLE was too slow to support more than pings so
#nevent1q…9huc

2026-04-15 15:23:19 UTC

@npub1y0g…00ly blowing my mind right now. I'm pinging my offline laptop over BLE
https://cdn.hzrd149.com/9f4ddf98651dbec0feeaed88dfd2c5aece2d9100a424d6143b42a697a2205891.webp

2026-04-13 15:01:05 UTC

ffs where is the merge request button on gitlab... I cant make a contribution to ditto because gitlabs UI has more drop down menus than excel

2026-04-13 14:19:59 UTC

I like that when I login to ditto it only asks to decrypt 3 nostr events and not my whole DM history :)
Its another client that's usable without auto-approve

2026-04-11 16:35:06 UTC

Also the /upload endpoint should really be a POST and not a PUT... I should have read the HTTP spec first I guess
#nevent1q…pytq

2026-04-11 16:30:04 UTC

Reading over section 9.6 of RFC 2616 I'm not sure why I didn't make the upload endpoint on blossom servers a `PUT /<sha256>` instead of a `PUT /upload`. it would make a lot more sense... 🤔
https://www.rfc-editor.org/rfc/rfc2616#section-9.6

2026-04-11 16:07:36 UTC

- reply

For these gateways we need some kind of fun way to visualize the sites, or some way for users to explore a little. when you open then its kind of a dead end and you leave

2026-04-09 23:09:18 UTC

Great episode, and I love to hear what @npub1g53…drvk is working on. the hashtree stuff sounds like the second phase of blossom I've been waiting for, real chunked files and folders on blossom...
Although now I have a lot of homework to do before I can be sure.
#nevent1q…ez5y

2026-04-09 12:06:30 UTC

- reply

Now that it only takes a single event to publish a new static site. I think we are going to see a lot less monolithic Nostr apps :)

2026-04-08 18:28:24 UTC

- reply

That makes sense, and the gateways for nsite are just mainly for launching the idea and making it easily accessible. The end goal is native support and or native browser integration.
But just claiming names on a blockchain isn't going to fix the naming issue, because like we have seen with btc.us and the many ENS clones. Someone will just invent to next naming system.
Also all naming systems introduce another issue of an oracle that can lie (or require KYC) in a similar way that DNS does.
Anyways, I'm not convinced it will work. But I'm willing to be proven wrong

2026-04-08 17:35:50 UTC

- reply

What makes it functionally different than btc.us and ENS? From what I read it looks like its just names on a blockchain

2026-04-08 17:19:46 UTC

Went back and compiled a bunch of the old #noStrudel versions and published them as nsite snapshots to test out my ideas in https://github.com/nostr-protocol/nips/pull/2287
So if you enjoyed old versions of noStrudel you can find them here for now. although be warned, most of them default to loading global which has a lot of spam...
https://nsite.lol/status/npub1wyuh3scfgzqmxn709a2fzuemps389rxnk7nfgege6s847zze3tuqfl87ez

2026-04-06 17:47:23 UTC

Still love the mini nsite list app that @npub1uac…99rx created that I stole. super easy to find all my nsites I've deployed
https://0ygl461f4ecz5thkn8eksa36nepjpij86s83ti8yzokopd3ag5nsites.nsite.lol/

2026-04-06 16:48:10 UTC

- reply

thanks for the links. and I was actually listing to that podcast now :)

2026-04-06 16:27:54 UTC

This will also help agents write clients and servers for blossom. The more I've been working with agents the more I'm realizing that trying to publish libraries and package to help them work with a spec or protocol is the wrong way.
Its better to make the protocol very explicit and detailed so they can just implement the part they need. hopefully with less code then pulling in a full library.
#nevent1q…wlt2

2026-04-06 16:25:52 UTC

Taking full advantage of HTTP status codes https://github.com/hzrd149/blossom/pull/98
The idea is to define all the common HTTP status codes and how they relate to blossom endpoints. This has kind of been an unspoken rule for too long that clients and servers should follow HTTP but its much better to actually define it in the blossom spec.
#asknostr I would appropriate lots of feedback on this since its a big change. although its not a breaking change

2026-04-06 15:11:47 UTC

@npub1equ…hkj6 you need to include some kind of git link or something is your profile. I cant find your source code anywhere....

2026-04-05 23:39:39 UTC

The password is "syncing". Enjoy
#nevent1q…knm7

2026-04-05 19:16:00 UTC

- reply

lol, its all black and white so its probably super easy to compress 😅

2026-04-05 18:54:03 UTC

- reply

yeah, the site itself is an encrypted site.7z file. the wrapper site just serves as a way to decrypt the file and then put it in local storage so it can be served

2026-04-05 18:35:13 UTC

A locked nsite... whatever could it be? 👀
https://0ygl461f4ecz5thkn8eksa36nepjpij86s83ti8yzokopd3ag5test.nsite.lol/

2026-04-05 18:02:39 UTC

- reply

what does this do?

2026-04-05 17:51:54 UTC

- reply

This is probably a better idea, having ctrl+c close the app isn't great for the world of TUI's

2026-04-05 17:50:50 UTC

- reply

They are saved, but its really annoying to start opencode again and try to remember what sessions where in the middle of work. then I have to tell the agent to "continue work"

2026-04-05 17:35:12 UTC

#asknostr how can I prevent ctrl+c closing my opencode editor? I've lost too many coding sessions by accidentally pressing it

2026-04-03 16:44:01 UTC

Shakespeare as an nsite? which you can use to vibe code more nsites??? 👀
https://2zrgjemvgxppn2jwgm61w6yrqqlcmm8njvhby68a9cj7ooo5phshakespeare.nsite.lol/

2026-04-03 16:21:24 UTC

@npub168h…9rgg archive https://npub168hzlrhxpeajf9shd937nacsefrkc3t0t7d79wlrknc7d33q2tls5u9rgg.nsite.lol/

2026-04-03 12:30:12 UTC

- reply

I remember watching all that dramma unfold. It was a single Dev with admin access to some important repos.
I remember thinking at the time how many years of bugs it was going to cause

2026-04-02 17:27:16 UTC

For those who are using the applesauce packages and want to see them be more useful for agents I need some help.
I want to build a large catalog of mini example apps that agents can read and understand how to implement certain nostr features. I've already built a decent amount of them in the repo but for this to really be useful I need more, and more crazy ideas.
I'm looking for PRs that add a single focused example for a specific other-stuff thing on nostr or example that show how to implement common nostr things like zap modals, login dialogs, feeds, etc
The example MUST be less than 500 lines and should use the event casting system to keep the code clean. its also best to tell the agent to avoid using too many tailwind classes to avoid bloating the example.
Ill probably have to do some cleanup work on all PRs since agents generally don't know now to write less code or write rxjs observables well, but that's fine.
Steps:
- git clone https://github.com/hzrd149/applesauce
- Open editor `claude`, `opencode`, `codex` etc
- Tell agent to build a new example demonstrating a simple nostr feature
- Open PR
Existing examples: https://github.com/hzrd149/applesauce/tree/next/apps/examples/src/examples

2026-04-02 15:10:27 UTC

Forgot to mention yesterday but next release of #applesauce will have support for NIP-58 badges and some examples for AI agents to look at to understand how to implement them
https://cdn.hzrd149.com/d3d89772df46cde246db7f12f16aa54ddb062b733c87bb23962c18d78204a3bf.webp
https://cdn.hzrd149.com/b70fb6f365ec8ab43c414ffea6aa32eb5713ebfe9e00e8c4a9134af5334b244c.webp
https://cdn.hzrd149.com/faf62ff83ba1dba65692047a7056a89b855884522f627cf5805d65711da0652d.webp

2026-04-02 12:55:05 UTC

- reply

Do you have the link to the Nostr skill your using? I'd like to see how it works

2026-04-01 22:32:55 UTC

Just deployed the biggest nsite yet, the applesauce docs has 3116 files. pretty unrealistic for an nsite but its cool to see that it still works. although the blossom upload took about 5 minutes.
Mainly testing this because I'm working on adding a llms.txt to the applesauce docs site so agents can read the docs and examples easier without needing to always use the MCP server
https://0ezln4n89g9nrxxmz3vog9kzp191new5n74h09vot03fxxci8cnext.nsite.lol/
https://nsite.lol/status/naddr1qvzqqqyf8qpzqy95s79zx5d6quntdtegn4sppqhs7qvt0ydvmgn7dm6ypzaxvlzvqqzxuetcwsj4rzpw

2026-04-01 18:20:50 UTC

- reply

noStrudel supports it, but its pretty slow and it would be best to enable manual decryption mode. it does cache the decrypted events locally with a password so at least it does not need to decrypt 100s of events every time it loads

2026-04-01 18:04:48 UTC

- reply

I hope it remembered to add a password to the web UI. otherwise anyone can code from anywhere :p

2026-04-01 14:51:33 UTC

- reply

noStrudel technically has an android app. although I doubt you want to steal anything from its great UX 😁

2026-03-31 13:07:54 UTC

- reply

Do it

2026-03-29 16:33:23 UTC

- reply

Awesome. If you have an agent tell it to look over now these projects do publishing. It should save you some time having to figure it out.
https://github.com/sandwichfarm/nsite.run
https://github.com/sandwichfarm/nsyte
Specifically look at the "get" and "put" commands in nsyte since I think that will be the most useful for updating an RSS feed

2026-03-29 16:11:36 UTC

- reply

This is the way, next we need to get music side project updated to support nsite deployments :D

2026-03-27 12:14:59 UTC

- reply

The gateway now shows the full list of files on the 404 page.
So it looks like something is broken about that site and its looking for files it never deployed :/

2026-03-26 23:01:54 UTC

- reply

I've been watching for new nsites 😁

2026-03-26 23:01:27 UTC

If there was a btn-xxs class then claude would use it all the time... annoying that I have to keep reminding it to stop making all the button small

2026-03-26 22:39:07 UTC

The best game on nostr, now has mouse and keyboard support!
https://5jsjq2jytkqh7mc1l5ylux3bsmzhkxpbq82ocsv8v74sir3b6wneongrid.nsite.lol/
Created by @npub1m64…uaks

2026-03-26 14:37:16 UTC

@npub1l3c…6vs2 the @npub1t29…vsrw apps are missing "server" hints. the event shows up on my gateway but it cant find the blossom servers for serving the blobs
https://nsite.lol/status/naddr1qvzqqqyf8qpzqk5teptffk8mknesyzrynsw9y5ykxmg7dld37r6vsj3lzruns0kfqqyxwunfd4hkjun936my6q

2026-03-26 12:39:03 UTC

- reply

Thats the goal

2026-03-26 12:36:33 UTC

Great read
#nevent1q…cqv8

2026-03-25 22:53:37 UTC

- reply

Is there any way to get a feed of only deployments?

2026-03-25 22:41:33 UTC

Latest version of nsite github action is usable again. you can connect it with amber using the `nsyte ci` cli to create a `nbunksec1` token so that the CI always asks amber to sign events
https://github.com/sandwichfarm/nsite-action
If you want examples I updated a few of my nostr apps:
https://github.com/hzrd149/nostrudel/blob/master/.github/workflows/nsite.yml
https://github.com/hzrd149/cherry-tree/blob/master/.github/workflows/nsite.yml
https://github.com/hzrd149/hzrd149.com/blob/master/.github/workflows/pages.yml

2026-03-25 21:27:13 UTC

I've heard people complain about Githubs interface, but have you seen Gitlab in the last year? There are so many buttons and sidebars

2026-03-25 17:15:46 UTC

Someone deployed a small game as an nsite https://npub1rec2gsr5vaeqrz8lwp00elq927t724ad6af6wms6n0gxwhfkqxuq3e7xj8.nsite.lol/

2026-03-25 11:48:04 UTC

- reply

2026-03-25 03:23:38 UTC

I'm one of the cool kids now. I have a avatar shape 😁
https://0ygl461f4ecz5thkn8eksa36nepjpij86s83ti8yzokopd3ag5nsites.nsite.lol/

2026-03-25 02:50:08 UTC

- reply

I've thought about this a lot before and the main issue is context isolation and supporting other apps with service works.
generally service workers can do almost everything on a single domain, but once you start getting into sub-domains things get really complicated and or impossible

2026-03-25 02:48:12 UTC

- reply

Generally to do the same task. but when your working on something specific and it needs to be reliable and fast, less is better

2026-03-25 02:47:16 UTC

- reply

Which app or package are you seeing this on? I've tried to keep track of all the places I've hard-coded relays
I updated a bunch of code a while ago to remove that relay, but it also forced me to update applesauce to account for dead relays. so next version will be able to handle dead relays in requests

2026-03-24 18:01:06 UTC

Rewrote nsite-gateway again, this time half manually to make it more reliable and faster.
https://jsr.io/@hzrd149/nsite-gateway
Pushed the update to https://nsite.lol so it testable now. the homepage might not be as pretty but the gateway no longer hangs or times out as much when streaming files from blossom server.

2026-03-24 14:31:11 UTC

I can still write less code than any AI model.

2026-03-23 19:18:58 UTC

- reply

Looks like the plane just fell apart... what happened to it?

2026-03-22 15:21:45 UTC

- reply

Browsers need some server to request a static site from. and unfortunately they don't natively understand nostr (yet)

2026-03-21 19:43:30 UTC

Rebuilt my nsite gateway using deno and fixed a lot of bugs, seems to be actually stable now so lets see if it can stay running for more than a week https://nsite.lol
https://github.com/hzrd149/nsite-gateway
https://jsr.io/@hzrd149/nsite-gateway

2026-03-21 16:07:18 UTC

I'm having so much fun with deno and publishing to jsr, its so much easier than npm

2026-03-20 20:33:03 UTC

https://cdn.hzrd149.com is now running the latest deno version of my blossom server implementation https://jsr.io/@hzrd149/blossom-server
I don't think anyone besides myself uses it, but its faster now and does not crash when its hit with lots of uploads at once

2026-03-20 14:36:37 UTC

- reply

Did the cryptography change? Or just the endpoint / format?

2026-03-19 23:48:24 UTC

For anyone running my blossom server implementation https://github.com/hzrd149/blossom-server I just pushed a "next" version with a docker image.
Its a complete rewrite using deno and has dedicated upload workers. I've done a little testing and its way faster and much more stable than the old version.
https://github.com/hzrd149/blossom-server/pkgs/container/blossom-server/747019692?tag=next
It should also be a direct upgrade from the old version, but please don't be reckless and make backups

2026-03-18 21:06:14 UTC

I finally understand MoQ, its just RxJS over QUIC and with a relay in the middle...

2026-03-18 20:04:42 UTC

- reply

Its really difficult to test when a pubkey was last active, mostly because you have a make 1 request per pubkey to find their last event
Doable but it would be slow, although maybe it would be possible to use a trusted assertions provider or primals caching server to get a general idea of activity

2026-03-18 19:46:09 UTC

- reply

Just checked, its up and running 👍
Make sure you are using the URL https://mcp.applesauce.build/mcp
If its not working then you might try running it locally, although you need ollama installed. https://github.com/hzrd149/applesauce-mcp

2026-03-17 18:45:06 UTC

- reply

Its not a matter of privacy or paranoia. its that I cant reject signing requests. even when approve the request to sign NIP-42 events it still keeps asking for the same relays (seems like a bug)
My frustration is that this is the case for ALL nostr apps I've tried in the last year. every. single. one. of them expects me to click the "approve all" button and never look back, no concept of limiting the scope, no concept that are things I don't want to sign.
The offender is specifically NIP-42 and now every app I've tried eagerly authenticates me to the relay before it even needs to make a request for events.
Although WISP is probably the least offender here since its only asking me to sign auth events for relays on my list

2026-03-17 17:39:06 UTC

- reply

Not much, but I appreciate you using and testing the applesauce SDK. also I use the client sometimes to debug

2026-03-17 17:29:36 UTC

- reply

What happens when people find out your an hvac tech? do they start asking you to fix their A/C like they ask to fix their laptops when they find out your a software engineer?

2026-03-17 17:09:37 UTC

- reply

Its a hosted VM, so it casts me $5/mo
Running a public blossom server on personal hardware would require a decent reliable internet connection before even considering the hardware

2026-03-17 16:23:14 UTC

- reply

Yeah, smallest server I can buy. not doing it for performance reasons, but only because I'm cheap

2026-03-17 16:22:41 UTC

- reply

How would MoQ fit into this? for streaming uploads?
I'm thinking about adding multi-part uploads but thats after I get the server working https://github.com/hzrd149/blossom/pull/67

2026-03-17 16:16:33 UTC

50% success rate on uploading 6 RHR episodes to the new deno blossom-server that is running on a 1 CPU and 1Gb server. very slow but considering just one of these uploads would kill the old server I'm very happy with this.
https://cdn.hzrd149.com/b2095ad9a91a3edc02b4f354f527111b8993a6d15ae812c6ec82b97bc22bc46f.webp
Not sure what the authentication errors are from yet, technically the server handled all 6 uploads fine. but I guess there is a bug somewhere with long running uploads...
Source code:
https://github.com/hzrd149/blossom-server/tree/next

2026-03-17 14:18:10 UTC

- reply

what is mycelium-android? your nostr client?

2026-03-17 13:41:02 UTC

- reply

Do you know the percentage of relays that support it?

2026-03-17 13:25:51 UTC

Wake up, make coffee, get excited about new Nostr client...
Get completely blocked by NIP-42 authentication and decryption requests...
https://cdn.hzrd149.com/68f09230a0d9cf4588e96f7491f7727863c60d4e478900597f0cadff93927707.mp4
Guess I'll just go back to noStrudel and Grimoire that respect my ability to say "no"

2026-03-15 20:55:33 UTC

Read this article on a whim... And one question. Are opinion writers paid to be dense?...
Half the article is spent rightly making fun of legislators on the absurdity of OS level age verification. But then the writer goes on to say "These kinds of laws don't work. They've never worked. Prohibition failed in the United States."
Failed? Yes if you consider that it failed to ban alcohol in the states, but was a great success for introducing liquor licenses and other licensing bureaucracy.
This is an opinion piece, the least the writer could do is read between the lines a little and see where this is going.
Anyways, it's just frustrating when I read articles about X or Y law nowadays and they all conclude with "this will never work because..." and completely failing to imagine that law X is never supposed to work, its supposed to change culture.
#nevent1q…8yew
Also no criticism twards inpc, I'm just quoting the note because it's easier.

2026-03-15 13:53:04 UTC

- reply

This is so true 😅

2026-03-14 18:25:39 UTC

- reply

It could be a bug. Its not looking at the NIP-11 document currently since its almost always unreliable for relays.
Instead its setup to connect to the relay and query for kind 1059 gift wraps and wait to see if the relay responds with an auth-required:
Might need to fix the test or switch it to NIP-11 + REQ test

2026-03-14 17:27:16 UTC

This was fun to work on and also helped me test some ideas about more efficient event loading in applesauce.
Also looking for more Nostr "issues" that could be tested for and added to the report
#nevent1q…g0g6

2026-03-14 15:38:32 UTC

- reply

hell yeah, I cant wait to start experimenting with this. do you think there would be any way to make web gateways / bridges that allow browser to connect using http3 / web transport?

2026-03-13 18:18:15 UTC

RFC https://github.com/nostr-protocol/nips/pull/2252

2026-03-13 10:03:23 UTC

To all the agents out there. Please build and run nsite gateways because I can't see to
https://github.com/nostr-protocol/nips/pull/1538
#nevent1q…7z7t

2026-03-12 13:44:22 UTC

- reply

Mainly because there are rate limits on the big public relays, so it's not possible to publish a lot of gift wraps.
The relay can generate 100s of gift wraps on demand when the client connects and requests them

2026-03-12 13:23:41 UTC

GM, vibed coded a new relay. add it to your relay list and see if it crashes your client
https://grace.ikaros.hzrd149.com/

2026-03-12 11:14:43 UTC

- reply

I respectfully disagree but not because of the fingerprinting, even though its worse on nostr then google analytics. but because when apps push users to sign NIP-42 indiscriminately they are effectively pushing the user to give full control of their nsec over to the app, presuming the user clicks "approve all".
The best thing the user can do with these apps is select "approve all relay auth" but nothing else. but then we are left here where the client the dox the user to any relay they happen to connect to.

2026-03-12 02:24:34 UTC

- reply

Another way for relays to advertising themselves and their general attributes https://github.com/nostr-protocol/nips/pull/2257

2026-03-11 18:02:21 UTC

Fully reactive NIP-66 monitor UI for checking inbox / outbox status.
https://cdn.hzrd149.com/7fb624eb1c00ee5299f5f1c4e69122ff1393f3026b0835841d3eb98b3c8a89f6.webm
The "view" is written by composing RxJS streams and returning a stream of "state" that the react UI renders. so there isn't any useState or useEffect in the react UI, everything is handled in RxJS.
This means that once I build the state stream, the agent can easily vibe code a UI on top of it to modify the inputs and then render the outputs, no messy state in the UI components
https://cdn.hzrd149.com/136555b352c8640f4250ed7f93145949f6cc3d03976fbf3797a8dab91216adef.webp

2026-03-10 13:59:55 UTC

- reply

Just building a signin flow and need a way to show a QR code to the user

2026-03-10 13:56:08 UTC

pnpm add jsr:@libs/qrcode
One of the simplest qrcode libraries to work with, and it works for printing qrcodes on console and browser.
https://jsr.io/@libs/qrcode

2026-03-09 09:24:35 UTC

- reply

https://applesauce.build
Then once you add the MCP server you can ask the agent to copy or remix any of the examples
https://applesauce.build/examples/

2026-03-08 14:28:58 UTC

- reply

I still don't know how I feel about support large file uploads since I still think that people should be using torrents for that. but at least adding mutli-part upload support should help mobile clients retry uploads

2026-03-08 14:18:35 UTC

#blossom RFC https://github.com/hzrd149/blossom/pull/67

2026-03-07 17:47:08 UTC

- reply

I appreciate it. The agent seems to have done a decent job keeping the code minimal but I still have no idea how good it is

2026-03-07 15:27:00 UTC

Merged BUD-11 for #blossom which moves all the authorization logic and requirements into a single BUD
https://github.com/hzrd149/blossom/blob/master/buds/11.md
There isn't any breaking changes for clients or server, but it does add a new `server` tag to the kind 24242 event that allows clients to scope authorization events to specific relays
Thanks to @npub176p…vgup for all the help

2026-03-07 14:55:26 UTC

Looking for thoughts and feedback on this vibe coded library https://github.com/hzrd149/rust-applesauce
I'm probably going to use it as a way to learn rust, but the idea is to adapt the stateless relay connection pattern that applesauce-relay defined to rust. The goal is for the app to be able to open a REQ on a relay and not care if its connected, then when the REQ is closed / dropped the relay should be closed behind the scenes

2026-03-06 13:57:14 UTC

- reply

Somewhat works with marmot groups now, still a work in progress though :)