44 KiB
NIP: Custom Event Kinds
Event Kinds Overview
Ditto Kinds
| Kind | Name | Description |
|---|---|---|
| 16769 | Profile Tabs | The user's custom profile page tabs (one per user) |
Agora Kinds
| Kind | Name | Description |
|---|---|---|
| 20000 | Ephemeral Geo Chat (public) | Geo-anchored ephemeral chat message (kind 20000, public) |
| 20001 | Ephemeral Geo Heartbeat | Geo-anchored ephemeral presence heartbeat (kind 20001) |
| 30385 | Community Stats Snapshot | Pre-computed per-country / global community leaderboards |
| 36639 | Activist Action | Country-scoped activist challenge with a sats bounty |
Agora Protocols
| Protocol | Composed Kinds | Description |
|---|---|---|
| Hierarchical Communities | 34550, 30009, 8, 1111, 1984, 5 | Ranked community membership via badge award chains (NIP-72 ext) |
Community Kinds
These event kinds were created by community contributors and are supported by Ditto. Full specifications are maintained by their respective authors.
| Kind | Name | Description | Spec |
|---|---|---|---|
| 3367 | Color Moment | Color palette post expressing a mood | NIP |
| 4223 | Weather Reading | Sensor readings from a weather station | Draft NIP |
| 7516 | Found Log | Log entry recording a user finding a geocache | NIP-GC |
| 8211 | Encrypted Letter | Encrypted personal letter with visual stationery | NIP |
| 11125 | Blobbonaut Profile | Owner profile with coins, achievements, and inventory | NIP-BB |
| 14919 | Blobbi Interaction | Individual pet interaction (feed, play, clean, etc.) | NIP-BB |
| 14920 | Blobbi Breeding | Breeding event between two adult Blobbis | NIP-BB |
| 14921 | Blobbi Record | Immutable lifecycle record (birth, evolution, adoption) | NIP-BB |
| 16158 | Weather Station | Weather station metadata (location, sensors, connectivity) | Draft NIP |
| 31124 | Blobbi Pet State | Current state of a virtual Blobbi pet (addressable) | NIP-BB |
| 37516 | Geocache | Geocache listing for real-world treasure hunting | NIP-GC |
Standard NIPs: Direct Messaging
This application implements encrypted direct messaging using two standard Nostr protocols:
NIP-04 (Legacy Encrypted DMs)
| Field | Value |
|---|---|
| Kind | 4 |
| Spec | NIP-04 |
Legacy encrypted direct messages. Content is encrypted with AES-256-CBC using a shared secret derived from the sender's private key and recipient's public key. The recipient is identified by a p tag.
Used for backward compatibility with older Nostr clients that do not support NIP-17.
NIP-17 (Private Direct Messages)
| Field | Value |
|---|---|
| Kinds | 1059 (Gift Wrap), 1060 (Seal) |
| Spec | NIP-17 |
Modern private direct messages using the Gift Wrap protocol. Messages are triple-layered:
- Rumor (kind 14) — unsigned plaintext message
- Seal (kind 13) — rumor encrypted to the recipient, signed by the sender
- Gift Wrap (kind 1059) — seal encrypted to the recipient, signed by a random ephemeral key
This provides metadata protection: relays and observers cannot determine the sender, recipient, or content. The application uses NIP-17 as the default send protocol, with optional NIP-04 compatibility for older clients.
Protocol Configuration
Users can configure their preferred send protocol via Settings > Messages:
- NIP-17 only (default) — maximum privacy, only modern clients can read
- NIP-04 + NIP-17 — sends via both protocols for compatibility with legacy clients
Kind 16769: Profile Tabs
Summary
Replaceable event kind for publishing a user's custom profile page tabs. Exactly one event per user (no d tag). Each tab defines a Nostr filter (NIP-01) that clients execute to populate the tab's content.
Visitors who load a profile fetch this event to display the custom tabs alongside the standard Posts / Media / Likes / Wall tabs.
Event Structure
{
"kind": 16769,
"content": "",
"tags": [
["var", "$follows", "p", "a:3:$me:"],
["tab", "Bitcoin Posts", "{\"kinds\":[1],\"authors\":[\"$me\"],\"search\":\"bitcoin\"}"],
["tab", "Feed", "{\"kinds\":[1,6],\"authors\":[\"$follows\"],\"limit\":40}"],
["alt", "Custom profile tabs"]
]
}
Content
The content field is unused and MUST be an empty string ("").
Tags
| Tag | Format | Description |
|---|---|---|
tab |
["tab", "<label>", "<filterJSON>"] |
One tag per custom tab. Order defines display order. |
var |
["var", "<$name>", "<tag>", "<pointer>"] |
Variable definition. See Variable Tags. |
alt |
["alt", "Custom profile tabs"] |
NIP-31 human-readable fallback. Required. |
Tab Filter JSON
The third element of each tab tag is a JSON-encoded NIP-01 filter object, optionally extended with the NIP-50 search field. Variable placeholders (strings starting with $) may appear wherever a string value is expected.
{
"kinds": [1],
"authors": ["$me"],
"search": "bitcoin",
"limit": 20
}
Supported filter fields: ids, authors, kinds, #<tag> (e.g. #t, #e, #p), since, until, limit, search.
Variable Tags
Variable tags define named placeholders that are resolved before the filter is executed. Each var tag extracts tag values from a referenced Nostr event.
Format: ["var", "$name", "<tag-to-extract>", "<event-pointer>"]
| Index | Description |
|---|---|
| 0 | Tag name: "var" |
| 1 | Variable name, starting with $ (e.g. "$follows") |
| 2 | Tag name to extract values from in the referenced event (e.g. "p") |
| 3 | Event pointer: e:<event-id> for a specific event, or a:<kind>:<pubkey>:<d-tag> for an addressable/replaceable event coordinate. Variables like $me may appear in the pubkey position. |
Example — extract follow list pubkeys:
["var", "$follows", "p", "a:3:$me:"]
This means: fetch the kind 3 event authored by $me, extract all p tag values, and bind them to $follows.
Reserved Variable: $me
The $me variable is the only runtime-provided variable. It resolves to the profile owner's pubkey (the author of the kind 16769 event). It does not require a var tag definition.
Variable Resolution
When a variable appears in a filter field that expects an array (e.g. authors, ids, #p), the variable is expanded in-place (spliced into the array). Literal values may be mixed with variables.
["tab", "Mixed", "{\"authors\":[\"$follows\",\"abc123...\"],\"kinds\":[1]}"]
After resolution (assuming $follows = ["pk1", "pk2"]):
{"authors": ["pk1", "pk2", "abc123..."], "kinds": [1]}
Behavior
- To add or update tabs: publish a new kind 16769 event with all current
tabandvartags. - To clear all tabs: publish a kind 16769 event with no
tabtags (onlyalt). - Clients MUST filter by
authors: [pubkey]when querying to prevent spoofing. vartags are shared across alltabtags in the same event.
Kind 36639: Activist Action
Summary
Addressable event kind for publishing activist actions (called "challenges" internally for backwards compatibility). An action is a country-scoped task — take a photo, make art, gather information, or take direct action — with an optional sats bounty paid out via NIP-57 zaps to the best submissions.
Submissions are NIP-22 comments (kind 1111) authored under the action's coordinate, ranked by zap totals. There is no separate submission kind; an earlier draft (kind 36640) was deprecated in favor of NIP-22 reuse.
Trust model
Anyone can publish a kind 36639 event, but clients SHOULD only display actions whose author is either:
- A platform-level admin (see
src/lib/admins.ts), or - An organizer for the action's country (see kind 30078
agora-organizers).
This authorization model is identical to the per-country pin model — see Kind 30078 in this document for the storage shape.
Event Structure
{
"kind": 36639,
"content": "<long-form description, freeform markdown-ish text>",
"tags": [
["d", "plant-a-tree-1729000000000"],
["title", "Plant a tree in your neighborhood"],
["challenge-type", "photo"],
["bounty", "10000"],
["i", "iso3166:US"],
["t", "agora-action"],
["image", "https://example.com/cover.jpg"],
["start", "1729000000"],
["deadline", "1729604800"],
["alt", "Agora activist action: Plant a tree in your neighborhood"]
]
}
Tags
| Tag | Required | Description |
|---|---|---|
d |
Yes | Unique identifier (typically slug + timestamp). Forms the addressable coordinate 36639:<pubkey>:<d>. |
title |
Yes | Short title shown on cards. |
challenge-type |
Yes | One of photo, art, info, action. Drives the display icon and submission expectations. |
bounty |
Yes | Bounty in sats, as an unsigned integer string. Paid out via zaps to the chosen submission(s). |
i |
Yes | NIP-73 country identifier: iso3166:XX (preferred). Legacy geo:XX (length 6, country code only) is accepted as a read alias. Optionally combined with a location tag fallback. |
t |
Yes | Discovery tag. Canonical write value is agora-action. Read aliases: pathos-challenge, agora-challenge. |
image |
No | Cover image URL. |
start |
No | Unix timestamp when the action becomes active. Defaults to created_at. |
deadline |
No | Unix timestamp when the action expires. Defaults to start + 48h. |
alt |
Yes | NIP-31 human-readable fallback. Convention: "Agora activist action: <title>". |
Content
Long-form description of the action. Plain text or light markdown. Clients render this as the action's body on the detail page.
Submissions
Submissions are kind 1111 NIP-22 comments addressed to the action's coordinate (["A", "36639:<pubkey>:<d>"] and ["P", "<pubkey>"]). Clients SHOULD:
- Sort top-level submissions by total zap amount (sum of NIP-57 zap receipts on each submission), descending.
- Show the bounty as the prize pool that organizers can distribute to top submissions via zaps.
- Hide submissions with
created_atafter the action'sdeadlinefor "past" leaderboards (or surface them separately as "late submissions").
Discovery
Clients querying actions globally:
{ "kinds": [36639], "#t": ["agora-action", "pathos-challenge", "agora-challenge"], "limit": 50 }
Per country:
{
"kinds": [36639],
"#t": ["agora-action", "pathos-challenge", "agora-challenge"],
"#i": ["iso3166:US", "geo:US"],
"limit": 50
}
After fetching, clients MUST filter the results down to events whose author is either an admin or an organizer for the event's country.
Kind 30385: Community Stats Snapshot
Summary
Addressable event kind for pre-computed community statistics (per-country and global). A trusted off-app indexer (the "stats bot") publishes one event per scope:
- Per-country:
dtag isiso3166:XX(ISO 3166-1 alpha-2 country code). - Global:
dtag isiso3166:ZZ—ZZis the ISO 3166-1 user-assigned code Agora uses for the cross-country aggregate.
Each event contains aggregate counts (comments, authors, zaps, submissions) and ranked leaderboards (top posters, trending hashtags, top zapped authors, top donors, top actions) across multiple time windows (7d, 30d, 90d, all-time). Storing pre-computed leaderboards in a single event lets clients render community pages without scanning thousands of underlying events.
Trust model
Anyone can publish kind 30385, but clients MUST only consume events from trusted authors:
- Per-country events: trusted authors are platform admins (
src/lib/admins.ts) plus appointed organizers for that specific country (kind 30078agora-organizers). - Global event (
iso3166:ZZ): trusted authors are platform admins only.
When multiple trusted events exist for the same scope, clients pick the most recent by created_at.
Event Structure
{
"kind": 30385,
"content": "",
"tags": [
["d", "iso3166:US"],
["comment_cnt", "12345"],
["comment_cnt_7d", "789"],
["comment_cnt_30d", "3421"],
["comment_cnt_90d", "9876"],
["author_cnt", "543"],
["zap_amount", "123456789"],
["zap_cnt", "1234"],
["submission_cnt", "456"],
["top_poster", "<pubkey-hex>", "987"],
["top_poster_7d", "<pubkey-hex>", "42"],
["trending_hashtag", "climate", "321"],
["trending_hashtag_7d", "protest", "67"],
["top_zapped", "<pubkey-hex>", "<totalSats>", "<postCount>", "<avgSats>", "<zapCount>"],
["top_donor", "<pubkey-hex>", "<totalSats>", "<zapCount>"],
["top_action", "36639:<pubkey>:<d-tag>", "Plant a tree", "<submissions>", "<bounty>", "<zapAmountSats>"]
]
}
Tag families
All numeric values are unsigned integers serialised as base-10 strings.
Aggregate counts (one tag per metric per timeframe)
| Tag base name | Meaning |
|---|---|
comment_cnt |
Number of NIP-22 comments in scope |
author_cnt |
Distinct author pubkeys in scope |
zap_amount |
Total zap amount in sats |
zap_cnt |
Number of NIP-57 zap receipts |
submission_cnt |
Submissions to activist actions (kind 36639) |
Each is published as four tags: bare (<base>, all-time), <base>_7d, <base>_30d, <base>_90d.
Leaderboards (repeated; one tag per row, ordered by rank)
All-time variants use the bare tag name; windowed variants use the _7d, _30d, _90d suffixes.
| Tag base name | Positional fields |
|---|---|
top_poster |
[name, pubkeyHex, count] |
trending_hashtag |
[name, hashtag, count] |
top_zapped |
[name, pubkeyHex, totalSats, postCount, avgSats, zapCount] (zapCount optional, legacy) |
top_donor |
[name, pubkeyHex, totalSats, zapCount] |
top_action |
[name, "36639:<pubkey>:<d>", title, submissions, bounty, zapAmountSats] |
Clients SHOULD parse defensively — accept missing trailing fields as 0 or omitted to maintain backwards compatibility as the schema evolves.
Content
Empty string. All data lives in tags so relays can index/filter and clients don't need to parse JSON.
Discovery
Per-country snapshot:
{
"kinds": [30385],
"authors": [<admin and organizer pubkeys>],
"#d": ["iso3166:US"],
"limit": 10
}
Global snapshot:
{
"kinds": [30385],
"authors": [<admin pubkeys>],
"#d": ["iso3166:ZZ"],
"limit": 10
}
After fetching, take the event with the highest created_at and parse it. Cache for ~1–2 minutes; the producer typically refreshes on a similar cadence.
Kinds 20000 / 20001: Ephemeral Geo Chat
Summary
Ephemeral events used to power realtime location-anchored chat on the world map. Both kinds live in NIP-01's ephemeral range (20000 ≤ kind < 30000), so relays MUST NOT persist them — they are short-lived signals only.
- Kind 20000 — public chat message. The
contentfield carries the message text. - Kind 20001 — presence "heartbeat". Same tag schema, but
contentMAY be empty (the event simply broadcasts that someone is listening at the geohash).
This kind range is shared with the wider Bitchat / geo-chat ecosystem; Agora interoperates with Pathos and other clients producing the same shape.
Tags
| Tag | Required | Purpose |
|---|---|---|
g |
Yes | Geohash anchoring the message. Any precision is allowed; the dialog filters by exact-match g value, while the map clusters by full geohash. |
n |
No | Display nickname (≤ 16 chars after client-side truncation). Anonymous senders pick a random "ghost" handle; logged-in senders may use their account display name. |
Events without a g tag MUST be ignored — they cannot be plotted.
Identity
There are two valid signing paths:
- Real identity — a logged-in user signs with their existing Nostr key (typically via NIP-07 / NIP-46). Other clients can correlate the chat message with the author's public profile.
- Ephemeral "ghost" identity — the client generates a fresh in-memory keypair (never persisted) and signs locally. Only the chosen
nnickname is persisted (inlocalStorage) so the user keeps a stable handle even though the pubkey rotates per session.
Clients SHOULD let logged-in users toggle between modes per-session and SHOULD default to the ghost mode when no account is available.
Relay Routing
Because ephemeral events are not stored, latency dominates the experience. Clients SHOULD:
- Always include a baseline of widely-reachable relays (
wss://nos.lol,wss://relay.damus.io,wss://relay.primal.net). - Augment with geo-located relays drawn from the permissionlesstech/georelays CSV catalogue (
relayUrl,latitude,longitudeper line). - For a specific geohash conversation, prefer the relays nearest the decoded coordinates (Haversine distance, top-N).
- For the global map heatmap, take a rotating window (e.g. 8 relays, rotated every 5 minutes) so coverage spreads without saturating any single relay.
Time Window
Clients SHOULD only surface events from the last hour (since = now - 3600). Older ephemeral events are uninteresting for "what's happening right now" and most relays will have dropped them anyway.
Example
{
"kind": 20000,
"created_at": 1734567890,
"pubkey": "...",
"tags": [
["g", "u4pruydqqvj"],
["n", "stealthranger4242"]
],
"content": "anyone in berlin tonight?",
"sig": "..."
}
Hierarchical Communities
Hierarchical communities on Nostr, composed from existing event kinds. Communities have ranked membership where authority flows downward through a chain of badge awards.
This specification is intended to be a foundation for community-scoped features. A community is a kind 34550 root that other events can tag with uppercase A. Posts, events, polls, listings, and future content kinds can all participate in the same community model when they tag the community root and pass the membership and moderation rules below.
The initial implementation focuses on three foundation capabilities:
- Viewing communities a user owns or belongs to.
- Posting community-scoped discussion content.
- Moderating community-scoped content and members within communities the viewer has authority over.
No new event kinds are introduced. The system composes:
- Kind 34550 (NIP-72) -- Community Definition
- Kind 30009 (NIP-58) -- Badge Definition
- Kind 8 (NIP-58) -- Badge Award
- Kind 1111 (NIP-22) -- Community Posts
- Kind 1984 (NIP-56) -- Moderation
- Kind 5 (NIP-09) -- Badge Award Revocation / Moderation Rescinding
Overview
A hierarchical community consists of:
- Badge definitions (kind
30009), one per rank tier, published by the founder. - A community definition (kind
34550) referencing those badges with rank indices. - Badge awards (kind
8) forming a chain of trust -- each award grants a rank, validated by the awarder's rank. - Community-scoped content (initially kind
1111) tagged to the community root. - Reports and bans (kind
1984) scoped to the community for content warnings, content removal, and member bans. - Deletion requests (kind
5) for revoking badge awards or rescinding moderation events.
Membership Derivation
Community membership is derived from three distinct sources, each resolved differently:
- Founder -- the
pubkeyfield on the kind34550event. One per community, immutable. Controls the community definition since only they can republish the addressable event. - Moderators -- the
ptags on the kind34550event (matching NIP-72). Mutable (the founder can add/remove by republishing). Share rank 0 with the founder. - Members -- derived from kind
8badge awards forming the authority chain. A member's rank is determined by the badge they were awarded (rank 1 and below).
The founder and moderators have no badge. Their rank 0 status comes from the community definition itself. Rank 0 cannot be awarded via kind 8 -- there is no rank 0 badge definition. Clients determine founder/moderator display from the community event directly.
Authority is rank-based, not badge-specific. A member at rank N can award any badge at rank M where M > N.
Community Definition
A kind 34550 event defines the community, extending NIP-72 with badge a tags that encode rank indices.
Tags
| Tag | Required | Description |
|---|---|---|
d |
Yes | Unique community identifier (UUID recommended). |
name |
Yes | Human-readable name. |
description |
No | Community description. |
image |
No | Image URL. |
a |
Yes (1+) | Badge definition reference with rank index (see format below). |
p |
Yes (1+) | Moderator pubkeys. Implicitly rank 0. The 4th element SHOULD be "moderator". |
relay |
No | Recommended relay URL for community content (per NIP-72). |
alt |
No | NIP-31 description. |
Badge a Tag Format
["a", "30009:<pubkey>:<badge-d-tag>", "<relay-hint>", "<rank-index>"]
Rank 0 is reserved for the founder and moderators (derived from the community definition, not from badges). Badge a tags define awardable ranks starting from 1. Higher numbers = lower authority. Indices MUST be contiguous starting from 1.
Example
{
"kind": 34550,
"pubkey": "<founder-pubkey>",
"content": "",
"tags": [
["d", "a1b2c3d4-e5f6-7890-abcd-ef1234567890"],
["name", "The Arbiter's Guard"],
["description", "Elite Halo 2 clan"],
["image", "https://example.com/clan-banner.jpg"],
["a", "30009:<founder-pubkey>:a1b2c3d4-...-staff", "", "1"],
["a", "30009:<founder-pubkey>:a1b2c3d4-...-member", "", "2"],
["a", "30009:<founder-pubkey>:a1b2c3d4-...-peon", "", "3"],
["p", "<founder-pubkey>", "", "moderator"],
["p", "<co-moderator-pubkey>", "", "moderator"],
["relay", "wss://relay.example.com"],
["alt", "Community: The Arbiter's Guard"]
]
}
Badge Definitions
Each rank tier is a standard NIP-58 kind 30009 badge definition published by the founder. Badge definitions MUST be published before the community definition that references them.
The d tag SHOULD use the format <community-d-tag>-<rank-name> for global uniqueness.
{
"kind": 30009,
"pubkey": "<founder-pubkey>",
"content": "",
"tags": [
["d", "a1b2c3d4-...-staff"],
["name", "Staff"],
["description", "Trusted officers who manage clan operations."],
["image", "https://example.com/staff-badge.png"],
["alt", "Badge definition: Staff"]
]
}
Badge Awards
Membership is established through kind 8 badge awards (NIP-58). Each award forms a chain link.
A badge award is valid if and only if:
- The
atag references a badge definition listed in the community definition. - The awarder is a validated member at a rank strictly less than the badge's rank index.
- The awarder's chain can be walked upward to a founder or moderator.
// Moderator (rank 0) awarding Staff (rank 1)
{
"kind": 8,
"pubkey": "<founder-pubkey>",
"content": "",
"tags": [
["a", "30009:<founder-pubkey>:a1b2c3d4-...-staff"],
["p", "<recipient-pubkey>"],
["alt", "Badge award: Staff in The Arbiter's Guard"]
]
}
Chain Validation
Membership is derived state. Clients compute effective membership by resolving the authority graph from badge awards, then applying moderation overlays.
Algorithm
- Seed rank 0: The event publisher (founder) and all
ptags (moderators) in the community definition are rank 0 members. - Query awards:
{ kinds: [8], #a: [<all badge coordinates>] } - Iteratively validate: For each award, check if the awarder is a validated member with rank strictly less than the awarded rank. If valid, add the recipient. Repeat until no new members are discovered.
- Resolve moderation: Query
{ kinds: [1984], #A: [<community-a-tag>] }. Classify kind1984events into bans and reports (see Moderation). Kind1984events from non-members and banned members are ignored. Ban attempts from insufficiently ranked members are ignored, such as a rank 2 member trying to ban a rank 0 founder or moderator. - Apply moderation: Remove banned members from effective membership. Omit content from banned authors, omit verified content bans, and attach report data to reported content for content-warning display.
Clients MUST NOT trust kind 8 events at face value. An attacker can publish awards for themselves, but these fail chain validation without a path to a founder or moderator.
Community-Scoped Content
Community-scoped content is any event that tags the community definition with uppercase A. The foundation implementation starts with kind 1111 (NIP-22) posts, but the same moderation overlay applies to future community content kinds such as calendar events, polls, listings, or other domain-specific events.
Clients SHOULD treat valid community members as the canonical authors for community views. Content from non-members MAY be shown in future review surfaces, but canonical community feeds SHOULD discard non-member content by default.
Community Post
Community discussion uses kind 1111 scoped to the community definition as the root event.
Top-Level Post
{
"kind": 1111,
"content": "Hello clan!",
"tags": [
["A", "34550:<founder-pubkey>:<community-d-tag>", "<relay-hint>"],
["K", "34550"],
["P", "<founder-pubkey>", "<relay-hint>"],
["a", "34550:<founder-pubkey>:<community-d-tag>", "<relay-hint>"],
["k", "34550"],
["p", "<founder-pubkey>", "<relay-hint>"]
]
}
Reply
Replies keep the community as root scope and point to the parent comment:
{
"kind": 1111,
"content": "Great point!",
"tags": [
["A", "34550:<founder-pubkey>:<community-d-tag>", "<relay-hint>"],
["K", "34550"],
["P", "<founder-pubkey>", "<relay-hint>"],
["e", "<parent-comment-id>", "<relay-hint>", "<parent-author-pubkey>"],
["k", "1111"],
["p", "<parent-author-pubkey>", "<relay-hint>"]
]
}
Querying
Fetch community-scoped content and moderation data together when relay limits permit. The kinds list can expand as the application adds supported community content kinds.
{
"kinds": [1111, 1984],
"#A": ["34550:<founder-pubkey>:<community-d-tag>"]
}
Clients then filter client-side: discard unsupported kinds, discard non-member content from canonical community views, and process kind 1984 events per the moderation rules below. The moderation overlay is content-kind agnostic: a valid content ban or warning applies to the targeted event regardless of whether that event is a post, calendar event, poll, listing, or future supported kind.
Moderation
Moderation uses kind 1984 (NIP-56) scoped to the community via the uppercase A tag. Moderation is derived state: clients first resolve trusted moderation actions from kind 1984, then apply those actions to concrete community-scoped events.
There are two tiers of moderation events:
- Bans -- authoritative actions from higher-ranked members that remove content or ban users. Identified by the presence of NIP-32 label tags
["L", "moderation"]and["l", "ban", "moderation"]. - Reports -- soft flags from any valid community member using standard NIP-56 report types (
nudity,spam,profanity,illegal,malware,impersonation,other). NoL/ltags. Clients display a content warning that users must click through to reveal.
Kind 1984 events from non-members are ignored entirely within community context. Kind 1984 events from members who are themselves banned are also ignored after ban resolution; banned members cannot retain moderation or reporting authority.
Bans (Authoritative Moderation)
A ban is authoritative if and only if:
- The event contains
["l", "ban", "moderation"]and["L", "moderation"]tags. - The publisher is a validated community member.
- The publisher is not themselves banned after ban resolution.
- The publisher's rank is strictly less than the target's rank (or the target is a non-member).
Bans that fail any of these conditions MUST be ignored.
Content Ban
Ban a specific post by publishing kind 1984 with e, p, and A tags plus the ban label. The e and p tags use "other" as the NIP-56 report type since the action is administrative rather than categorical.
{
"kind": 1984,
"pubkey": "<moderator-pubkey>",
"content": "Reason for removal",
"tags": [
["e", "<offending-event-id>", "other"],
["p", "<offending-author-pubkey>", "other"],
["A", "34550:<founder-pubkey>:<community-d-tag>"],
["L", "moderation"],
["l", "ban", "moderation"]
]
}
Clients MUST omit the banned event from canonical community feeds entirely. The event is not displayed, blurred, or indicated in any way -- it is treated as if it does not exist.
The e and p tags are untrusted until matched against the actual target event. A content ban MUST only apply when the targeted event's id matches the ban's e tag and the targeted event's pubkey matches the ban's p tag. This prevents a malicious or mistaken report from hiding an event by pairing its event ID with a lower-ranked or non-member pubkey.
Member Ban
Ban a member by publishing kind 1984 with p and A tags only (no e tag) plus the ban label. This is non-cascading -- only the targeted member is banned. Their kind 8 awards remain on relays, so downstream members whose chain passes through the banned member are still valid. For cascading removal, use badge revocation (kind 5) instead.
{
"kind": 1984,
"pubkey": "<moderator-pubkey>",
"content": "Reason for ban",
"tags": [
["p", "<banned-member-pubkey>", "other"],
["A", "34550:<founder-pubkey>:<community-d-tag>"],
["L", "moderation"],
["l", "ban", "moderation"]
]
}
Clients distinguish content bans (e + p + A + ban label) from member bans (p + A + ban label, no e tag).
Reports (Content Warnings)
Any valid, non-banned community member (regardless of rank) may report content by publishing kind 1984 with a standard NIP-56 report type on the e and p tags. Reports do NOT use L/l label tags.
{
"kind": 1984,
"pubkey": "<member-pubkey>",
"content": "Additional context",
"tags": [
["e", "<event-id>", "nudity"],
["p", "<author-pubkey>", "nudity"],
["A", "34550:<founder-pubkey>:<community-d-tag>"]
]
}
Clients SHOULD display reported content behind a content warning overlay that requires user interaction to reveal. The report type (e.g. nudity, spam) MAY be shown in the warning. Multiple reports on the same event reinforce the warning but do not automatically escalate to a ban.
Reports from non-members and banned members are ignored.
As with content bans, report warnings MUST only attach to content when the target event's id matches the report's e tag and the target event's pubkey matches the report's p tag.
Classification Summary
l tag present? |
e tag present? |
Authority check | Result |
|---|---|---|---|
["l", "ban", "moderation"] |
Yes | Non-banned member; rank < target; e/p match target event |
Content ban (omit event) |
["l", "ban", "moderation"] |
No | Non-banned member; rank < target | Member ban |
| No | Yes | Non-banned member; e/p match target event |
Content warning |
| No | No | -- | Invalid (ignored) |
| Any | Any | Non-member | Ignored |
| Any | Any | Banned member | Ignored |
["l", "ban", "moderation"] |
Any | Rank >= target | Ignored |
Rescinding Moderation
A kind 1984 ban or report can be rescinded by deleting the kind 1984 event via kind 5 (NIP-09). Per NIP-09, only the original author of the kind 1984 event can delete it.
{
"kind": 5,
"tags": [["e", "<kind-1984-event-id>"], ["k", "1984"]]
}
Clients that implement moderation rescinding SHOULD discard any kind 1984 event whose matching kind 5 deletion exists before resolving bans and reports. This branch does not implement moderation rescinding yet; it is retained here as part of the protocol foundation for future moderation extensions.
Revocation
A badge awarder can revoke their own award via kind 5:
{
"kind": 5,
"tags": [["e", "<kind-8-event-id>"], ["k", "8"]]
}
This is cascading -- the chain link is destroyed, so the revoked member and all downstream members whose chain depended on it lose validated status. Per NIP-09, only the original publisher of the kind 8 event can delete it.
Ban vs revocation: Use kind 1984 to ban a single member without affecting their downstream recruits. Use kind 5 revocation to remove a member and cascade to their entire subtree.
Community Updates
Both kind 34550 and kind 30009 are addressable events. To add or remove ranks, republish the community definition with updated a tags. To update moderators, republish with updated p tags. Removing a moderator cascades to members they recruited (unless those members have another valid chain path). Only the founder (event publisher) can republish the community definition.
Discovery
Communities founded by a user:
{ "kinds": [34550], "authors": ["<user-pubkey>"] }
Communities a user belongs to:
{ "kinds": [8], "#p": ["<user-pubkey>"] }- Extract badge
atags from results. { "kinds": [34550], "#a": ["30009:...", "..."] }
Security Considerations
- Author filtering: Clients MUST filter community definitions by
authorsto prevent impersonation. - Chain validation is required: Never trust kind
8events without walking the authority chain. - Badge d-tag uniqueness: Use
<community-d-tag>-<rank-name>to prevent cross-community collisions. - Badge acceptance is cosmetic: NIP-58 kind
10008/30008events have no effect on chain validation.
Dependencies
- NIP-09 -- Event Deletion Request
- NIP-22 -- Comment
- NIP-31 -- Unknown Event Kinds (
alttag) - NIP-32 -- Labeling (moderation
banlabel) - NIP-56 -- Reporting
- NIP-58 -- Badges
- NIP-72 -- Moderated Communities
Kind 0 Extension: Avatar Shape
Summary
An optional shape property on kind 0 (profile metadata) that controls how the user's avatar is masked/clipped when displayed. The value is an emoji character whose silhouette is used as a mask over the avatar image. When absent, the avatar renders as the standard circle.
Metadata Field
The shape field is added to the JSON content of a kind 0 event alongside standard fields like name, picture, etc. Its value is a single emoji character (including multi-codepoint emoji such as flags, ZWJ sequences, and skin-tone variants).
{
"kind": 0,
"content": "{\"name\":\"Luna\",\"picture\":\"https://example.com/luna.jpg\",\"shape\":\"🌙\"}"
}
Client Behavior
- When
shapeis absent, clients SHOULD render the avatar as a circle (the current universal default). - When
shapeis a valid emoji, clients SHOULD use the emoji's silhouette as an alpha mask over the avatar image. The specific rendering technique is platform-dependent (see below). - When
shapeis set to an unrecognized or invalid value, clients MUST fall back to a circle. This ensures forward compatibility. - The
shapefield is purely cosmetic and has no protocol-level significance. - Clients MAY choose not to support this extension, in which case avatars render as circles as usual.
Community NIP Specifications
The following specifications are maintained by their respective authors. Ditto implements these kinds but does not own the specs. See each link for the full event structure, tags, and client behavior.
Color Moments (Kind 3367)
Author: Chad Curtis Spec: https://gitlab.com/chad.curtis/espy/-/blob/main/NIP.md App: https://espy.you
Color palette posts capturing 3-6 colors from a beautiful moment, optionally accompanied by an emoji and layout preference. Supports horizontal, vertical, grid, star, checkerboard, and diagonal stripe layouts. A form of pre-verbal visual communication through color and emotion.
Geocaching (Kinds 37516, 7516)
Author: Chad Curtis Spec: https://gitlab.com/chad.curtis/treasures/-/blob/main/NIP-GC.md App: https://treasures.to
NIP-GC defines geocaching on Nostr. Kind 37516 (addressable) is a geocache listing with location (geohash), difficulty/terrain scores, size, and type. Kind 7516 is a found log recording a successful visit. The spec also covers comment logs (kind 1111 via NIP-22), verified finds with cryptographic proof (kind 7517), and cache retirement.
Personal Letters (Kind 8211)
Author: Chad Curtis Spec: https://gitlab.com/chad.curtis/lief/-/blob/main/NIP.md App: https://lief.to
NIP-44 encrypted personal letters with visual stationery, hand-drawn stickers, decorative frames, and custom fonts. Letters render as 5:4 landscape postcards. The privacy model is intentionally postcard-like: sender/recipient metadata is visible, content is encrypted.
Weather Station (Kinds 4223, 16158)
Author: Sam Thomson Spec: https://github.com/nostr-protocol/nips/pull/2163 App: https://weather.shakespeare.wtf Firmware: https://github.com/samthomson/weather-station
Kind 16158 (replaceable) describes a weather station's configuration: name, geohash location, elevation, power source, connectivity, and sensor inventory. Kind 4223 (regular) carries individual sensor readings as 3-parameter tags [sensor_type, value, model], enabling historical queries and cross-station comparison. Each station has its own keypair.
Blobbi Virtual Pet (Kinds 31124, 14919, 14920, 14921, 11125)
Author: Danifra Spec: https://github.com/Danidfra/nostr-pet/blob/production/NIP.md App: https://nostr-pet.vercel.app See also: Blobbi tag schema (Ditto-specific integration details)
NIP-BB defines a virtual pet lifecycle on Nostr. Kind 31124 (addressable) holds the current pet state across three stages (egg, baby, adult) with stats, appearance, and personality traits. Kind 14919 logs individual interactions, kind 14920 records breeding events, kind 14921 stores immutable lifecycle records, and kind 11125 (replaceable) holds the owner's profile with coins, achievements, and inventory.
Kind 11125 content JSON — missions field
The content of kind 11125 is a JSON object. Ditto extends it with a missions field that tracks daily and evolution mission progress:
{
"missions": {
"date": "2026-04-16", // ISO date string for the current daily mission set
"daily": [ /* Mission[] */ ],
"evolution": [ /* Mission[] — active hatch/evolve tasks, cleared on stage transition */ ],
"rerolls": 2 // remaining daily mission rerolls
}
// ...other profile fields (coins, achievements, inventory, etc.)
}
Each Mission is either a TallyMission ({ id, target, count }) or an EventMission ({ id, target, events: string[] }) where events contains Nostr event IDs that satisfy the mission. Evolution missions are populated when incubation or evolution begins and cleared when the stage transition completes or is cancelled.