beginnings of moderation support, show labels in ui, update profile page to support labelers"

__generated__/index.ts

···
   DefsClickthroughReposter: 'app.bsky.feed.defs#clickthroughReposter',
   DefsContentModeUnspecified: 'app.bsky.feed.defs#contentModeUnspecified',
 }
+export const COM_ATPROTO_MODERATION = {
+  DefsReasonRude: 'com.atproto.moderation.defs#reasonRude',
+  DefsReasonSpam: 'com.atproto.moderation.defs#reasonSpam',
+  DefsReasonOther: 'com.atproto.moderation.defs#reasonOther',
+  DefsReasonAppeal: 'com.atproto.moderation.defs#reasonAppeal',
+  DefsReasonSexual: 'com.atproto.moderation.defs#reasonSexual',
+  DefsReasonViolation: 'com.atproto.moderation.defs#reasonViolation',
+  DefsReasonMisleading: 'com.atproto.moderation.defs#reasonMisleading',
+}
 
 export function createServer(options?: XrpcOptions): Server {
   return new Server(options)
···
   _server: Server
   gallery: SocialGrainGalleryNS
   graph: SocialGrainGraphNS
+  labeler: SocialGrainLabelerNS
   actor: SocialGrainActorNS
 
   constructor(server: Server) {
     this._server = server
     this.gallery = new SocialGrainGalleryNS(server)
     this.graph = new SocialGrainGraphNS(server)
+    this.labeler = new SocialGrainLabelerNS(server)
     this.actor = new SocialGrainActorNS(server)
   }
 }
···
 }
 
 export class SocialGrainGraphNS {
+  _server: Server
+
+  constructor(server: Server) {
+    this._server = server
+  }
+}
+
+export class SocialGrainLabelerNS {
   _server: Server
 
   constructor(server: Server) {

__generated__/lexicons.ts

···
               refs: ['lex:social.grain.photo.defs#photoView'],
             },
           },
+          labels: {
+            type: 'array',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.label.defs#label',
+            },
+          },
           indexedAt: {
             type: 'string',
             format: 'datetime',
···
               type: 'string',
               maxLength: 1000,
             },
+            labels: {
+              type: 'union',
+              description:
+                'Self-label values for this post. Effectively content warnings.',
+              refs: ['lex:com.atproto.label.defs#selfLabels'],
+            },
             createdAt: {
               type: 'string',
               format: 'datetime',
···
       },
     },
   },
+  SocialGrainLabelerDefs: {
+    lexicon: 1,
+    id: 'social.grain.labeler.defs',
+    defs: {
+      labelerView: {
+        type: 'object',
+        required: ['uri', 'cid', 'creator', 'indexedAt'],
+        properties: {
+          uri: {
+            type: 'string',
+            format: 'at-uri',
+          },
+          cid: {
+            type: 'string',
+            format: 'cid',
+          },
+          creator: {
+            type: 'ref',
+            ref: 'lex:social.grain.actor.defs#profileView',
+          },
+          favoriteCount: {
+            type: 'integer',
+            minimum: 0,
+          },
+          viewer: {
+            type: 'ref',
+            ref: 'lex:social.grain.labeler.defs#labelerViewerState',
+          },
+          indexedAt: {
+            type: 'string',
+            format: 'datetime',
+          },
+          labels: {
+            type: 'array',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.label.defs#label',
+            },
+          },
+        },
+      },
+      labelerViewDetailed: {
+        type: 'object',
+        required: ['uri', 'cid', 'creator', 'policies', 'indexedAt'],
+        properties: {
+          uri: {
+            type: 'string',
+            format: 'at-uri',
+          },
+          cid: {
+            type: 'string',
+            format: 'cid',
+          },
+          creator: {
+            type: 'ref',
+            ref: 'lex:app.bsky.actor.defs#profileView',
+          },
+          policies: {
+            type: 'ref',
+            ref: 'lex:social.grain.actor.defs#labelerPolicies',
+          },
+          favoriteCount: {
+            type: 'integer',
+            minimum: 0,
+          },
+          viewer: {
+            type: 'ref',
+            ref: 'lex:social.grain.labeler.defs#labelerViewerState',
+          },
+          indexedAt: {
+            type: 'string',
+            format: 'datetime',
+          },
+          labels: {
+            type: 'array',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.label.defs#label',
+            },
+          },
+          reasonTypes: {
+            description:
+              "The set of report reason 'codes' which are in-scope for this service to review and action. These usually align to policy categories. If not defined (distinct from empty array), all reason types are allowed.",
+            type: 'array',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.moderation.defs#reasonType',
+            },
+          },
+          subjectTypes: {
+            description:
+              'The set of subject types (account, record, etc) this service accepts reports on.',
+            type: 'array',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.moderation.defs#subjectType',
+            },
+          },
+          subjectCollections: {
+            type: 'array',
+            description:
+              'Set of record types (collection NSIDs) which can be reported to this service. If not defined (distinct from empty array), default is any record type.',
+            items: {
+              type: 'string',
+              format: 'nsid',
+            },
+          },
+        },
+      },
+      labelerViewerState: {
+        type: 'object',
+        properties: {
+          like: {
+            type: 'string',
+            format: 'at-uri',
+          },
+        },
+      },
+      labelerPolicies: {
+        type: 'object',
+        required: ['labelValues'],
+        properties: {
+          labelValues: {
+            type: 'array',
+            description:
+              'The label values which this labeler publishes. May include global or custom labels.',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.label.defs#labelValue',
+            },
+          },
+          labelValueDefinitions: {
+            type: 'array',
+            description:
+              'Label values created by this labeler and scoped exclusively to it. Labels defined here will override global label definitions for this labeler.',
+            items: {
+              type: 'ref',
+              ref: 'lex:com.atproto.label.defs#labelValueDefinition',
+            },
+          },
+        },
+      },
+    },
+  },
+  SocialGrainLabelerService: {
+    lexicon: 1,
+    id: 'social.grain.labeler.service',
+    defs: {
+      main: {
+        type: 'record',
+        description: 'A declaration of the existence of labeler service.',
+        key: 'literal:self',
+        record: {
+          type: 'object',
+          required: ['policies', 'createdAt'],
+          properties: {
+            policies: {
+              type: 'ref',
+              ref: 'lex:app.bsky.labeler.defs#labelerPolicies',
+            },
+            labels: {
+              type: 'union',
+              refs: ['lex:com.atproto.label.defs#selfLabels'],
+            },
+            createdAt: {
+              type: 'string',
+              format: 'datetime',
+            },
+            reasonTypes: {
+              description:
+                "The set of report reason 'codes' which are in-scope for this service to review and action. These usually align to policy categories. If not defined (distinct from empty array), all reason types are allowed.",
+              type: 'array',
+              items: {
+                type: 'ref',
+                ref: 'lex:com.atproto.moderation.defs#reasonType',
+              },
+            },
+            subjectTypes: {
+              description:
+                'The set of subject types (account, record, etc) this service accepts reports on.',
+              type: 'array',
+              items: {
+                type: 'ref',
+                ref: 'lex:com.atproto.moderation.defs#subjectType',
+              },
+            },
+            subjectCollections: {
+              type: 'array',
+              description:
+                'Set of record types (collection NSIDs) which can be reported to this service. If not defined (distinct from empty array), default is any record type.',
+              items: {
+                type: 'string',
+                format: 'nsid',
+              },
+            },
+          },
+        },
+      },
+    },
+  },
   SocialGrainFavorite: {
     lexicon: 1,
     id: 'social.grain.favorite',
···
             type: 'string',
             maxLength: 2560,
             maxGraphemes: 256,
+          },
+          labels: {
+            type: 'array',
+            items: {
+              ref: 'lex:com.atproto.label.defs#label',
+              type: 'ref',
+            },
           },
           avatar: {
             type: 'string',
···
       },
     },
   },
+  ComAtprotoModerationDefs: {
+    lexicon: 1,
+    id: 'com.atproto.moderation.defs',
+    defs: {
+      reasonRude: {
+        type: 'token',
+        description:
+          'Rude, harassing, explicit, or otherwise unwelcoming behavior',
+      },
+      reasonSpam: {
+        type: 'token',
+        description: 'Spam: frequent unwanted promotion, replies, mentions',
+      },
+      reasonType: {
+        type: 'string',
+        knownValues: [
+          'com.atproto.moderation.defs#reasonSpam',
+          'com.atproto.moderation.defs#reasonViolation',
+          'com.atproto.moderation.defs#reasonMisleading',
+          'com.atproto.moderation.defs#reasonSexual',
+          'com.atproto.moderation.defs#reasonRude',
+          'com.atproto.moderation.defs#reasonOther',
+          'com.atproto.moderation.defs#reasonAppeal',
+        ],
+      },
+      reasonOther: {
+        type: 'token',
+        description: 'Other: reports not falling under another report category',
+      },
+      subjectType: {
+        type: 'string',
+        description: 'Tag describing a type of subject that might be reported.',
+        knownValues: ['account', 'record', 'chat'],
+      },
+      reasonAppeal: {
+        type: 'token',
+        description: 'Appeal: appeal a previously taken moderation action',
+      },
+      reasonSexual: {
+        type: 'token',
+        description: 'Unwanted or mislabeled sexual content',
+      },
+      reasonViolation: {
+        type: 'token',
+        description: 'Direct violation of server rules, laws, terms of service',
+      },
+      reasonMisleading: {
+        type: 'token',
+        description: 'Misleading identity, affiliation, or content',
+      },
+    },
+  },
 } as const satisfies Record<string, LexiconDoc>
 export const schemas = Object.values(schemaDict) satisfies LexiconDoc[]
 export const lexicons: Lexicons = new Lexicons(schemas)
···
   SocialGrainGalleryDefs: 'social.grain.gallery.defs',
   SocialGrainGallery: 'social.grain.gallery',
   SocialGrainGraphFollow: 'social.grain.graph.follow',
+  SocialGrainLabelerDefs: 'social.grain.labeler.defs',
+  SocialGrainLabelerService: 'social.grain.labeler.service',
   SocialGrainFavorite: 'social.grain.favorite',
   SocialGrainActorDefs: 'social.grain.actor.defs',
   SocialGrainActorProfile: 'social.grain.actor.profile',
···
   SocialGrainPhoto: 'social.grain.photo',
   ComAtprotoLabelDefs: 'com.atproto.label.defs',
   ComAtprotoRepoStrongRef: 'com.atproto.repo.strongRef',
+  ComAtprotoModerationDefs: 'com.atproto.moderation.defs',
 } as const

__generated__/types/com/atproto/moderation/defs.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import { type ValidationResult, BlobRef } from "npm:@atproto/lexicon"
+import { CID } from "npm:multiformats/cid"
+import { validate as _validate } from '../../../../lexicons.ts'
+import {
+  type $Typed,
+  is$typed as _is$typed,
+  type OmitKey,
+} from '../../../../util.ts'
+
+const is$typed = _is$typed,
+  validate = _validate
+const id = 'com.atproto.moderation.defs'
+/** Rude, harassing, explicit, or otherwise unwelcoming behavior */
+export const REASONRUDE = `${id}#reasonRude`
+/** Spam: frequent unwanted promotion, replies, mentions */
+export const REASONSPAM = `${id}#reasonSpam`
+
+export type ReasonType =
+  | 'com.atproto.moderation.defs#reasonSpam'
+  | 'com.atproto.moderation.defs#reasonViolation'
+  | 'com.atproto.moderation.defs#reasonMisleading'
+  | 'com.atproto.moderation.defs#reasonSexual'
+  | 'com.atproto.moderation.defs#reasonRude'
+  | 'com.atproto.moderation.defs#reasonOther'
+  | 'com.atproto.moderation.defs#reasonAppeal'
+  | (string & {})
+
+/** Other: reports not falling under another report category */
+export const REASONOTHER = `${id}#reasonOther`
+
+/** Tag describing a type of subject that might be reported. */
+export type SubjectType = 'account' | 'record' | 'chat' | (string & {})
+
+/** Appeal: appeal a previously taken moderation action */
+export const REASONAPPEAL = `${id}#reasonAppeal`
+/** Unwanted or mislabeled sexual content */
+export const REASONSEXUAL = `${id}#reasonSexual`
+/** Direct violation of server rules, laws, terms of service */
+export const REASONVIOLATION = `${id}#reasonViolation`
+/** Misleading identity, affiliation, or content */
+export const REASONMISLEADING = `${id}#reasonMisleading`

__generated__/types/social/grain/actor/defs.ts

···
   is$typed as _is$typed,
   type OmitKey,
 } from '../../../../util.ts'
+import type * as ComAtprotoLabelDefs from '../../../com/atproto/label/defs.ts'
 
 const is$typed = _is$typed,
   validate = _validate
···
   handle: string
   displayName?: string
   description?: string
+  labels?: ComAtprotoLabelDefs.Label[]
   avatar?: string
   createdAt?: string
 }

__generated__/types/social/grain/gallery.ts

···
 import { CID } from "npm:multiformats/cid"
 import { validate as _validate } from '../../../lexicons.ts'
 import { type $Typed, is$typed as _is$typed, type OmitKey } from '../../../util.ts'
+import type * as ComAtprotoLabelDefs from '../../com/atproto/label/defs.ts'
 
 const is$typed = _is$typed,
   validate = _validate
···
   $type: 'social.grain.gallery'
   title: string
   description?: string
+  labels?: $Typed<ComAtprotoLabelDefs.SelfLabels> | { $type: string }
   createdAt: string
   [k: string]: unknown
 }

__generated__/types/social/grain/gallery/defs.ts

···
 } from '../../../../util.ts'
 import type * as SocialGrainActorDefs from '../actor/defs.ts'
 import type * as SocialGrainPhotoDefs from '../photo/defs.ts'
+import type * as ComAtprotoLabelDefs from '../../../com/atproto/label/defs.ts'
 
 const is$typed = _is$typed,
   validate = _validate
···
   creator: SocialGrainActorDefs.ProfileView
   record: { [_ in string]: unknown }
   items?: ($Typed<SocialGrainPhotoDefs.PhotoView> | { $type: string })[]
+  labels?: ComAtprotoLabelDefs.Label[]
   indexedAt: string
 }
 

__generated__/types/social/grain/labeler/defs.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import { type ValidationResult, BlobRef } from "npm:@atproto/lexicon"
+import { CID } from "npm:multiformats/cid"
+import { validate as _validate } from '../../../../lexicons.ts'
+import {
+  type $Typed,
+  is$typed as _is$typed,
+  type OmitKey,
+} from '../../../../util.ts'
+import type * as SocialGrainActorDefs from '../actor/defs.ts'
+import type * as ComAtprotoLabelDefs from '../../../com/atproto/label/defs.ts'
+import type * as AppBskyActorDefs from '../../../app/bsky/actor/defs.ts'
+import type * as ComAtprotoModerationDefs from '../../../com/atproto/moderation/defs.ts'
+
+const is$typed = _is$typed,
+  validate = _validate
+const id = 'social.grain.labeler.defs'
+
+export interface LabelerView {
+  $type?: 'social.grain.labeler.defs#labelerView'
+  uri: string
+  cid: string
+  creator: SocialGrainActorDefs.ProfileView
+  favoriteCount?: number
+  viewer?: LabelerViewerState
+  indexedAt: string
+  labels?: ComAtprotoLabelDefs.Label[]
+}
+
+const hashLabelerView = 'labelerView'
+
+export function isLabelerView<V>(v: V) {
+  return is$typed(v, id, hashLabelerView)
+}
+
+export function validateLabelerView<V>(v: V) {
+  return validate<LabelerView & V>(v, id, hashLabelerView)
+}
+
+export interface LabelerViewDetailed {
+  $type?: 'social.grain.labeler.defs#labelerViewDetailed'
+  uri: string
+  cid: string
+  creator: AppBskyActorDefs.ProfileView
+  policies: SocialGrainActorDefs.LabelerPolicies
+  favoriteCount?: number
+  viewer?: LabelerViewerState
+  indexedAt: string
+  labels?: ComAtprotoLabelDefs.Label[]
+  /** The set of report reason 'codes' which are in-scope for this service to review and action. These usually align to policy categories. If not defined (distinct from empty array), all reason types are allowed. */
+  reasonTypes?: ComAtprotoModerationDefs.ReasonType[]
+  /** The set of subject types (account, record, etc) this service accepts reports on. */
+  subjectTypes?: ComAtprotoModerationDefs.SubjectType[]
+  /** Set of record types (collection NSIDs) which can be reported to this service. If not defined (distinct from empty array), default is any record type. */
+  subjectCollections?: string[]
+}
+
+const hashLabelerViewDetailed = 'labelerViewDetailed'
+
+export function isLabelerViewDetailed<V>(v: V) {
+  return is$typed(v, id, hashLabelerViewDetailed)
+}
+
+export function validateLabelerViewDetailed<V>(v: V) {
+  return validate<LabelerViewDetailed & V>(v, id, hashLabelerViewDetailed)
+}
+
+export interface LabelerViewerState {
+  $type?: 'social.grain.labeler.defs#labelerViewerState'
+  like?: string
+}
+
+const hashLabelerViewerState = 'labelerViewerState'
+
+export function isLabelerViewerState<V>(v: V) {
+  return is$typed(v, id, hashLabelerViewerState)
+}
+
+export function validateLabelerViewerState<V>(v: V) {
+  return validate<LabelerViewerState & V>(v, id, hashLabelerViewerState)
+}
+
+export interface LabelerPolicies {
+  $type?: 'social.grain.labeler.defs#labelerPolicies'
+  /** The label values which this labeler publishes. May include global or custom labels. */
+  labelValues: ComAtprotoLabelDefs.LabelValue[]
+  /** Label values created by this labeler and scoped exclusively to it. Labels defined here will override global label definitions for this labeler. */
+  labelValueDefinitions?: ComAtprotoLabelDefs.LabelValueDefinition[]
+}
+
+const hashLabelerPolicies = 'labelerPolicies'
+
+export function isLabelerPolicies<V>(v: V) {
+  return is$typed(v, id, hashLabelerPolicies)
+}
+
+export function validateLabelerPolicies<V>(v: V) {
+  return validate<LabelerPolicies & V>(v, id, hashLabelerPolicies)
+}

__generated__/types/social/grain/labeler/service.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import { type ValidationResult, BlobRef } from "npm:@atproto/lexicon"
+import { CID } from "npm:multiformats/cid"
+import { validate as _validate } from '../../../../lexicons.ts'
+import {
+  type $Typed,
+  is$typed as _is$typed,
+  type OmitKey,
+} from '../../../../util.ts'
+import type * as AppBskyLabelerDefs from '../../../app/bsky/labeler/defs.ts'
+import type * as ComAtprotoLabelDefs from '../../../com/atproto/label/defs.ts'
+import type * as ComAtprotoModerationDefs from '../../../com/atproto/moderation/defs.ts'
+
+const is$typed = _is$typed,
+  validate = _validate
+const id = 'social.grain.labeler.service'
+
+export interface Record {
+  $type: 'social.grain.labeler.service'
+  policies: AppBskyLabelerDefs.LabelerPolicies
+  labels?: $Typed<ComAtprotoLabelDefs.SelfLabels> | { $type: string }
+  createdAt: string
+  /** The set of report reason 'codes' which are in-scope for this service to review and action. These usually align to policy categories. If not defined (distinct from empty array), all reason types are allowed. */
+  reasonTypes?: ComAtprotoModerationDefs.ReasonType[]
+  /** The set of subject types (account, record, etc) this service accepts reports on. */
+  subjectTypes?: ComAtprotoModerationDefs.SubjectType[]
+  /** Set of record types (collection NSIDs) which can be reported to this service. If not defined (distinct from empty array), default is any record type. */
+  subjectCollections?: string[]
+  [k: string]: unknown
+}
+
+const hashRecord = 'main'
+
+export function isRecord<V>(v: V) {
+  return is$typed(v, id, hashRecord)
+}
+
+export function validateRecord<V>(v: V) {
+  return validate<Record & V>(v, id, hashRecord, true)
+}

deno.json

···
   "imports": {
     "$lexicon/": "./__generated__/",
     "@atproto/syntax": "npm:@atproto/syntax@^0.4.0",
-    "@bigmoves/bff": "jsr:@bigmoves/bff@0.3.0-beta.32",
+    "@bigmoves/bff": "jsr:@bigmoves/bff@0.3.0-beta.33",
     "@luca/esbuild-deno-loader": "jsr:@luca/esbuild-deno-loader@^0.11.1",
     "@std/http": "jsr:@std/http@^1.0.17",
     "@std/path": "jsr:@std/path@^1.0.9",

deno.lock

···
   "version": "5",
   "specifiers": {
     "jsr:@bigmoves/atproto-oauth-client@0.2": "0.2.0",
-    "jsr:@bigmoves/bff@0.3.0-beta.32": "0.3.0-beta.32",
+    "jsr:@bigmoves/bff@0.3.0-beta.33": "0.3.0-beta.33",
     "jsr:@luca/esbuild-deno-loader@~0.11.1": "0.11.1",
     "jsr:@std/assert@^1.0.13": "1.0.13",
     "jsr:@std/bytes@^1.0.2": "1.0.6",
+    "jsr:@std/cache@0.2": "0.2.0",
     "jsr:@std/cli@^1.0.18": "1.0.19",
     "jsr:@std/encoding@^1.0.10": "1.0.10",
     "jsr:@std/encoding@^1.0.5": "1.0.10",
···
     "jsr:@std/path@^1.0.9": "1.1.0",
     "jsr:@std/path@^1.1.0": "1.1.0",
     "jsr:@std/streams@^1.0.9": "1.0.9",
-    "npm:@atproto-labs/handle-resolver-node@~0.1.14": "0.1.15",
+    "npm:@atproto-labs/handle-resolver-node@~0.1.14": "0.1.16",
     "npm:@atproto-labs/simple-store@~0.1.2": "0.1.2",
-    "npm:@atproto/api@~0.15.7": "0.15.7",
+    "npm:@atproto/api@~0.15.7": "0.15.12",
     "npm:@atproto/common@~0.4.10": "0.4.11",
     "npm:@atproto/identity@~0.4.7": "0.4.8",
     "npm:@atproto/jwk@0.1.4": "0.1.4",
-    "npm:@atproto/lex-cli@*": "0.8.1",
     "npm:@atproto/lexicon@*": "0.4.11",
+    "npm:@atproto/lexicon@0.4.11": "0.4.11",
     "npm:@atproto/lexicon@~0.4.11": "0.4.11",
-    "npm:@atproto/oauth-client@~0.3.13": "0.3.16",
-    "npm:@atproto/oauth-types@~0.2.4": "0.2.7",
+    "npm:@atproto/oauth-client@~0.3.13": "0.3.20",
+    "npm:@atproto/oauth-types@~0.2.4": "0.2.8",
     "npm:@atproto/syntax@0.4": "0.4.0",
-    "npm:@atproto/xrpc-server@*": "0.7.18",
-    "npm:@tailwindcss/cli@*": "4.1.7",
-    "npm:@tailwindcss/cli@^4.1.4": "4.1.7",
+    "npm:@atproto/xrpc-server@*": "0.7.19",
+    "npm:@atproto/xrpc-server@0.7.18": "0.7.18",
+    "npm:@tailwindcss/cli@*": "4.1.8",
+    "npm:@tailwindcss/cli@^4.1.4": "4.1.8",
     "npm:@types/node@*": "22.15.15",
     "npm:clsx@^2.1.1": "2.1.1",
     "npm:date-fns@^4.1.0": "4.1.0",
···
     "npm:htmx.org@^1.9.12": "1.9.12",
     "npm:hyperscript.org@~0.9.14": "0.9.14",
     "npm:jose@5.9.6": "5.9.6",
-    "npm:multiformats@*": "13.3.4",
-    "npm:multiformats@^13.3.2": "13.3.4",
+    "npm:multiformats@*": "13.3.6",
+    "npm:multiformats@^13.3.2": "13.3.6",
     "npm:popmotion@^11.0.5": "11.0.5",
-    "npm:preact-render-to-string@^6.5.13": "6.5.13_preact@10.26.6",
-    "npm:preact@^10.26.5": "10.26.6",
+    "npm:preact-render-to-string@^6.5.13": "6.5.13_preact@10.26.8",
+    "npm:preact@^10.26.5": "10.26.8",
     "npm:sortablejs@^1.15.6": "1.15.6",
     "npm:tailwind-merge@^3.2.0": "3.3.0",
-    "npm:tailwindcss@^4.1.4": "4.1.7",
+    "npm:tailwindcss@^4.1.4": "4.1.8",
     "npm:typed-htmx@~0.3.1": "0.3.1"
   },
   "jsr": {
···
         "npm:tailwind-merge"
       ]
     },
-    "@bigmoves/bff@0.3.0-beta.32": {
-      "integrity": "d33581157c6d52bd9ecccdbcb090559377de71d28137ce7fdf3882740390a389",
+    "@bigmoves/bff@0.3.0-beta.33": {
+      "integrity": "6e1f7ca871be05270e45742a7a6576dc1bf3247de7fa1ec966a30a93d2a79556",
       "dependencies": [
         "jsr:@bigmoves/atproto-oauth-client",
         "jsr:@std/assert",
+        "jsr:@std/cache",
         "jsr:@std/fmt",
         "jsr:@std/http@^1.0.13",
         "jsr:@std/path@^1.0.8",
         "npm:@atproto/api",
         "npm:@atproto/common",
         "npm:@atproto/identity",
+        "npm:@atproto/lexicon@0.4.11",
         "npm:@atproto/lexicon@~0.4.11",
         "npm:@atproto/oauth-client",
         "npm:@atproto/syntax",
+        "npm:@atproto/xrpc-server@0.7.18",
         "npm:clsx",
         "npm:multiformats@^13.3.2",
         "npm:preact",
···
     "@std/bytes@1.0.6": {
       "integrity": "f6ac6adbd8ccd99314045f5703e23af0a68d7f7e58364b47d2c7f408aeb5820a"
     },
+    "@std/cache@0.2.0": {
+      "integrity": "63a2ccd5a9e7c03e430f7d34dfcfd0d0cfc90731a1eaf8208f4c66e418fc3035"
+    },
     "@std/cli@1.0.19": {
       "integrity": "b3601a54891f89f3f738023af11960c4e6f7a45dc76cde39a6861124cba79e88"
     },
···
         "@jridgewell/trace-mapping"
       ]
     },
-    "@atproto-labs/did-resolver@0.1.12": {
-      "integrity": "sha512-criWN7o21C5TFsauB+bGTlkqqerOU6gT2TbxdQVgZUWqNcfazUmUjT4gJAY02i+O4d3QmZa27fv9CcaRKWkSug==",
+    "@atproto-labs/did-resolver@0.1.13": {
+      "integrity": "sha512-DG3YNaCKc6PAIv1Gsz3E1Kufw2t14OBxe4LdKK7KKLCNoex51hm+A5yMevShe3BSll+QosqWYIEgkPSc5xBoGQ==",
       "dependencies": [
         "@atproto-labs/fetch",
         "@atproto-labs/pipe",
···
         "zod"
       ]
     },
-    "@atproto-labs/fetch-node@0.1.8": {
-      "integrity": "sha512-OOTIhZNPEDDm7kaYU8iYRgzM+D5n3mP2iiBSyKuLakKTaZBL5WwYlUsJVsqX26SnUXtGEroOJEVJ6f66OcG80w==",
+    "@atproto-labs/fetch-node@0.1.9": {
+      "integrity": "sha512-8sHDDXZEzQptLu8ddUU/8U+THS6dumgPynVX0/1PjUYd4S/FWyPcz6yMIiVChTfzKnZvYRRz47+qvOKhydrHQw==",
       "dependencies": [
         "@atproto-labs/fetch",
         "@atproto-labs/pipe",
         "ipaddr.js@2.2.0",
-        "psl",
         "undici"
       ]
     },
-    "@atproto-labs/fetch@0.2.2": {
-      "integrity": "sha512-QyafkedbFeVaN20DYUpnY2hcArYxjdThPXbYMqOSoZhcvkrUqaw4xDND4wZB5TBD9cq2yqe9V6mcw9P4XQKQuQ==",
+    "@atproto-labs/fetch@0.2.3": {
+      "integrity": "sha512-NZtbJOCbxKUFRFKMpamT38PUQMY0hX0p7TG5AEYOPhZKZEP7dHZ1K2s1aB8MdVH0qxmqX7nQleNrrvLf09Zfdw==",
       "dependencies": [
         "@atproto-labs/pipe"
       ]
     },
-    "@atproto-labs/handle-resolver-node@0.1.15": {
-      "integrity": "sha512-krl9KqfCCrGID35VAAHKBIiXOxe3gYxAtOJLYpZc5cOPFwnvPlAdhTYZLIc1dJRKDayi8gh6Q4XZRDv7i8dryg==",
+    "@atproto-labs/handle-resolver-node@0.1.16": {
+      "integrity": "sha512-i2F989zjyC7b/odrV3/tOpIT1IDIxR3F0khPG4REfOWcmJ89QcP8BiejJ6KFJk3hbTJHq6X9/pTG1vesCvyIKA==",
       "dependencies": [
         "@atproto-labs/fetch-node",
         "@atproto-labs/handle-resolver",
···
         "zod"
       ]
     },
-    "@atproto-labs/identity-resolver@0.1.16": {
-      "integrity": "sha512-pFrtKT49cYBhCDd2U1t/CcUBiMmQzaNQxh8oSkDUlGs/K3P8rJFTAGAMm8UjokfGEKwF4hX9oo7O8Kn+GkyExw==",
+    "@atproto-labs/identity-resolver@0.1.17": {
+      "integrity": "sha512-EaH9Lm8M85IKRx+oWZ4tppYRVH8u+MYpEz1kjzYeM3ttZ2xcqKVmYHiOIgd5YPCVV2EIfXKnlM4soHQ+rZ1c6A==",
       "dependencies": [
         "@atproto-labs/did-resolver",
         "@atproto-labs/handle-resolver",
         "@atproto/syntax"
       ]
     },
-    "@atproto-labs/pipe@0.1.0": {
-      "integrity": "sha512-ghOqHFyJlQVFPESzlVHjKroP0tPzbmG5Jms0dNI9yLDEfL8xp4OFPWLX4f6T8mRq69wWs4nIDM3sSsFbFqLa1w=="
+    "@atproto-labs/pipe@0.1.1": {
+      "integrity": "sha512-hdNw2oUs2B6BN1lp+32pF7cp8EMKuIN5Qok2Vvv/aOpG/3tNSJ9YkvfI0k6Zd188LeDDYRUpYpxcoFIcGH/FNg=="
     },
     "@atproto-labs/simple-store-memory@0.1.3": {
       "integrity": "sha512-jkitT9+AtU+0b28DoN92iURLaCt/q/q4yX8q6V+9LSwYlUTqKoj/5NFKvF7x6EBuG+gpUdlcycbH7e60gjOhRQ==",
···
     "@atproto-labs/simple-store@0.2.0": {
       "integrity": "sha512-0bRbAlI8Ayh03wRwncAMEAyUKtZ+AuTS1jgPrfym1WVOAOiottI/ZmgccqLl6w5MbxVcClNQF7WYGKvGwGoIhA=="
     },
-    "@atproto/api@0.15.7": {
-      "integrity": "sha512-YRETLcOwDCYfGs7Sl9ObqPwhOlVWrPkw4f1AYGIrXLQS58WHe/vz1lZbqOqMsC6gvCnyZnOuKlhsRHZ14rBLzg==",
+    "@atproto/api@0.15.12": {
+      "integrity": "sha512-51IHenZMA+Ekfe2OlZL/mTFqvZQU93jI4xsLvTFhGc4tSQYCHV9r/AJTANPZLFrhm9GfWZ0n90r/9IQl9eicjg==",
       "dependencies": [
         "@atproto/common-web",
         "@atproto/lexicon",
···
         "zod"
       ]
     },
-    "@atproto/jwk@0.1.5": {
-      "integrity": "sha512-OzZFLhX41TOcMeanP3aZlL5bLeaUIZT15MI4aU5cwflNq/rwpGOpz3uwDjZc8ytgUjuTQ8LabSz5jMmwoTSWFg==",
+    "@atproto/jwk@0.2.0": {
+      "integrity": "sha512-foOxExbw04XCaoLaGdv9BQj0Ac7snZsk6IpQjOsjYatf+i62Pi9bUkZ0MAoA75HPk8ZmKoDnbA60uBMmiOPPHQ==",
       "dependencies": [
         "multiformats@9.9.0",
         "zod"
       ]
     },
-    "@atproto/lex-cli@0.8.1": {
-      "integrity": "sha512-0Ns6kX46gum2jU8bpvWCSVqoYhjmJrOGR/NLfLHgPbJtBlyxMGQAxqpy1x6zOi6SkkRGWYhHvRfr5J8lTHbxjA==",
-      "dependencies": [
-        "@atproto/lexicon",
-        "@atproto/syntax",
-        "chalk",
-        "commander@9.5.0",
-        "prettier",
-        "ts-morph",
-        "yesno",
-        "zod"
-      ],
-      "bin": true
-    },
     "@atproto/lexicon@0.4.11": {
       "integrity": "sha512-btefdnvNz2Ao2I+qbmj0F06HC8IlrM/IBz6qOBS50r0S6uDf5tOO+Mv2tSVdimFkdzyDdLtBI1sV36ONxz2cOw==",
       "dependencies": [
···
         "zod"
       ]
     },
-    "@atproto/oauth-client@0.3.16": {
-      "integrity": "sha512-AEtGLOXRJzBcBa8LyUXwFf/M7cZc+CcOBjLsiqmVQriSwccfyTkALgiyM0UcRHJqlwtLPuf9RYtgKPc8rW5F/w==",
+    "@atproto/oauth-client@0.3.20": {
+      "integrity": "sha512-aclxN2vD5ldc9YiQtX6z4S5g5lU12sz297gzuTxBFUYiS3bh7dxU8j/cbD/BDvXIiVRzzzc5kOgE1CgT9XZ2mg==",
       "dependencies": [
         "@atproto-labs/did-resolver",
         "@atproto-labs/fetch",
···
         "@atproto-labs/simple-store@0.2.0",
         "@atproto-labs/simple-store-memory",
         "@atproto/did",
-        "@atproto/jwk@0.1.5",
+        "@atproto/jwk@0.2.0",
         "@atproto/oauth-types",
         "@atproto/xrpc",
         "multiformats@9.9.0",
         "zod"
       ]
     },
-    "@atproto/oauth-types@0.2.7": {
-      "integrity": "sha512-2SlDveiSI0oowC+sfuNd/npV8jw/FhokSS26qyUyldTg1g9ZlhxXUfMP4IZOPeZcVn9EszzQRHs1H9ZJqVQIew==",
+    "@atproto/oauth-types@0.2.8": {
+      "integrity": "sha512-xcYI2JmhrWwscePDoaKeDawVCCZkcvBqrBFMpMk4gf/OujH0pNSKBD/aWsayc6WvujVbTqwrG2hwPLfRqzJbwg==",
       "dependencies": [
-        "@atproto/jwk@0.1.5",
+        "@atproto/jwk@0.2.0",
         "zod"
       ]
     },
···
     },
     "@atproto/xrpc-server@0.7.18": {
       "integrity": "sha512-kjlAsI+UNbbm6AK3Y5Hb4BJ7VQHNKiYYu2kX5vhZJZHO8qfO40GPYYb/2TknZV8IG6fDPBQhUpcDRolI86sgag==",
+      "dependencies": [
+        "@atproto/common",
+        "@atproto/crypto",
+        "@atproto/lexicon",
+        "@atproto/xrpc",
+        "cbor-x",
+        "express",
+        "http-errors",
+        "mime-types",
+        "rate-limiter-flexible",
+        "uint8arrays",
+        "ws",
+        "zod"
+      ]
+    },
+    "@atproto/xrpc-server@0.7.19": {
+      "integrity": "sha512-YSCl/tU2NDykgDYslFSOYCr96esUgDwncFiADKL59/fyIFPLoT0qY8Uq/budpxUh0qPzjow4HHgVWESOaOpUmA==",
       "dependencies": [
         "@atproto/common",
         "@atproto/crypto",
···
       "dependencies": [
         "tslib@2.8.1"
       ]
-    },
-    "@esbuild/aix-ppc64@0.25.4": {
-      "integrity": "sha512-1VCICWypeQKhVbE9oW/sJaAmjLxhVqacdkvPLEjwlttjfwENRSClS8EjBz0KzRyFSCPDIkuXW34Je/vk7zdB7Q==",
-      "os": ["aix"],
-      "cpu": ["ppc64"]
     },
     "@esbuild/aix-ppc64@0.25.5": {
       "integrity": "sha512-9o3TMmpmftaCMepOdA5k/yDw8SfInyzWWTjYTFCX3kPSDJMROQTb8jg+h9Cnwnmm1vOzvxN7gIfB5V2ewpjtGA==",
       "os": ["aix"],
       "cpu": ["ppc64"]
     },
-    "@esbuild/android-arm64@0.25.4": {
-      "integrity": "sha512-bBy69pgfhMGtCnwpC/x5QhfxAz/cBgQ9enbtwjf6V9lnPI/hMyT9iWpR1arm0l3kttTr4L0KSLpKmLp/ilKS9A==",
-      "os": ["android"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/android-arm64@0.25.5": {
       "integrity": "sha512-VGzGhj4lJO+TVGV1v8ntCZWJktV7SGCs3Pn1GRWI1SBFtRALoomm8k5E9Pmwg3HOAal2VDc2F9+PM/rEY6oIDg==",
       "os": ["android"],
       "cpu": ["arm64"]
     },
-    "@esbuild/android-arm@0.25.4": {
-      "integrity": "sha512-QNdQEps7DfFwE3hXiU4BZeOV68HHzYwGd0Nthhd3uCkkEKK7/R6MTgM0P7H7FAs5pU/DIWsviMmEGxEoxIZ+ZQ==",
-      "os": ["android"],
-      "cpu": ["arm"]
-    },
     "@esbuild/android-arm@0.25.5": {
       "integrity": "sha512-AdJKSPeEHgi7/ZhuIPtcQKr5RQdo6OO2IL87JkianiMYMPbCtot9fxPbrMiBADOWWm3T2si9stAiVsGbTQFkbA==",
       "os": ["android"],
       "cpu": ["arm"]
     },
-    "@esbuild/android-x64@0.25.4": {
-      "integrity": "sha512-TVhdVtQIFuVpIIR282btcGC2oGQoSfZfmBdTip2anCaVYcqWlZXGcdcKIUklfX2wj0JklNYgz39OBqh2cqXvcQ==",
-      "os": ["android"],
-      "cpu": ["x64"]
-    },
     "@esbuild/android-x64@0.25.5": {
       "integrity": "sha512-D2GyJT1kjvO//drbRT3Hib9XPwQeWd9vZoBJn+bu/lVsOZ13cqNdDeqIF/xQ5/VmWvMduP6AmXvylO/PIc2isw==",
       "os": ["android"],
       "cpu": ["x64"]
     },
-    "@esbuild/darwin-arm64@0.25.4": {
-      "integrity": "sha512-Y1giCfM4nlHDWEfSckMzeWNdQS31BQGs9/rouw6Ub91tkK79aIMTH3q9xHvzH8d0wDru5Ci0kWB8b3up/nl16g==",
-      "os": ["darwin"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/darwin-arm64@0.25.5": {
       "integrity": "sha512-GtaBgammVvdF7aPIgH2jxMDdivezgFu6iKpmT+48+F8Hhg5J/sfnDieg0aeG/jfSvkYQU2/pceFPDKlqZzwnfQ==",
       "os": ["darwin"],
       "cpu": ["arm64"]
     },
-    "@esbuild/darwin-x64@0.25.4": {
-      "integrity": "sha512-CJsry8ZGM5VFVeyUYB3cdKpd/H69PYez4eJh1W/t38vzutdjEjtP7hB6eLKBoOdxcAlCtEYHzQ/PJ/oU9I4u0A==",
-      "os": ["darwin"],
-      "cpu": ["x64"]
-    },
     "@esbuild/darwin-x64@0.25.5": {
       "integrity": "sha512-1iT4FVL0dJ76/q1wd7XDsXrSW+oLoquptvh4CLR4kITDtqi2e/xwXwdCVH8hVHU43wgJdsq7Gxuzcs6Iq/7bxQ==",
       "os": ["darwin"],
       "cpu": ["x64"]
     },
-    "@esbuild/freebsd-arm64@0.25.4": {
-      "integrity": "sha512-yYq+39NlTRzU2XmoPW4l5Ifpl9fqSk0nAJYM/V/WUGPEFfek1epLHJIkTQM6bBs1swApjO5nWgvr843g6TjxuQ==",
-      "os": ["freebsd"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/freebsd-arm64@0.25.5": {
       "integrity": "sha512-nk4tGP3JThz4La38Uy/gzyXtpkPW8zSAmoUhK9xKKXdBCzKODMc2adkB2+8om9BDYugz+uGV7sLmpTYzvmz6Sw==",
       "os": ["freebsd"],
       "cpu": ["arm64"]
     },
-    "@esbuild/freebsd-x64@0.25.4": {
-      "integrity": "sha512-0FgvOJ6UUMflsHSPLzdfDnnBBVoCDtBTVyn/MrWloUNvq/5SFmh13l3dvgRPkDihRxb77Y17MbqbCAa2strMQQ==",
-      "os": ["freebsd"],
-      "cpu": ["x64"]
-    },
     "@esbuild/freebsd-x64@0.25.5": {
       "integrity": "sha512-PrikaNjiXdR2laW6OIjlbeuCPrPaAl0IwPIaRv+SMV8CiM8i2LqVUHFC1+8eORgWyY7yhQY+2U2fA55mBzReaw==",
       "os": ["freebsd"],
       "cpu": ["x64"]
     },
-    "@esbuild/linux-arm64@0.25.4": {
-      "integrity": "sha512-+89UsQTfXdmjIvZS6nUnOOLoXnkUTB9hR5QAeLrQdzOSWZvNSAXAtcRDHWtqAUtAmv7ZM1WPOOeSxDzzzMogiQ==",
-      "os": ["linux"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/linux-arm64@0.25.5": {
       "integrity": "sha512-Z9kfb1v6ZlGbWj8EJk9T6czVEjjq2ntSYLY2cw6pAZl4oKtfgQuS4HOq41M/BcoLPzrUbNd+R4BXFyH//nHxVg==",
       "os": ["linux"],
       "cpu": ["arm64"]
     },
-    "@esbuild/linux-arm@0.25.4": {
-      "integrity": "sha512-kro4c0P85GMfFYqW4TWOpvmF8rFShbWGnrLqlzp4X1TNWjRY3JMYUfDCtOxPKOIY8B0WC8HN51hGP4I4hz4AaQ==",
-      "os": ["linux"],
-      "cpu": ["arm"]
-    },
     "@esbuild/linux-arm@0.25.5": {
       "integrity": "sha512-cPzojwW2okgh7ZlRpcBEtsX7WBuqbLrNXqLU89GxWbNt6uIg78ET82qifUy3W6OVww6ZWobWub5oqZOVtwolfw==",
       "os": ["linux"],
       "cpu": ["arm"]
     },
-    "@esbuild/linux-ia32@0.25.4": {
-      "integrity": "sha512-yTEjoapy8UP3rv8dB0ip3AfMpRbyhSN3+hY8mo/i4QXFeDxmiYbEKp3ZRjBKcOP862Ua4b1PDfwlvbuwY7hIGQ==",
-      "os": ["linux"],
-      "cpu": ["ia32"]
-    },
     "@esbuild/linux-ia32@0.25.5": {
       "integrity": "sha512-sQ7l00M8bSv36GLV95BVAdhJ2QsIbCuCjh/uYrWiMQSUuV+LpXwIqhgJDcvMTj+VsQmqAHL2yYaasENvJ7CDKA==",
       "os": ["linux"],
       "cpu": ["ia32"]
     },
-    "@esbuild/linux-loong64@0.25.4": {
-      "integrity": "sha512-NeqqYkrcGzFwi6CGRGNMOjWGGSYOpqwCjS9fvaUlX5s3zwOtn1qwg1s2iE2svBe4Q/YOG1q6875lcAoQK/F4VA==",
-      "os": ["linux"],
-      "cpu": ["loong64"]
-    },
     "@esbuild/linux-loong64@0.25.5": {
       "integrity": "sha512-0ur7ae16hDUC4OL5iEnDb0tZHDxYmuQyhKhsPBV8f99f6Z9KQM02g33f93rNH5A30agMS46u2HP6qTdEt6Q1kg==",
       "os": ["linux"],
       "cpu": ["loong64"]
     },
-    "@esbuild/linux-mips64el@0.25.4": {
-      "integrity": "sha512-IcvTlF9dtLrfL/M8WgNI/qJYBENP3ekgsHbYUIzEzq5XJzzVEV/fXY9WFPfEEXmu3ck2qJP8LG/p3Q8f7Zc2Xg==",
-      "os": ["linux"],
-      "cpu": ["mips64el"]
-    },
     "@esbuild/linux-mips64el@0.25.5": {
       "integrity": "sha512-kB/66P1OsHO5zLz0i6X0RxlQ+3cu0mkxS3TKFvkb5lin6uwZ/ttOkP3Z8lfR9mJOBk14ZwZ9182SIIWFGNmqmg==",
       "os": ["linux"],
       "cpu": ["mips64el"]
     },
-    "@esbuild/linux-ppc64@0.25.4": {
-      "integrity": "sha512-HOy0aLTJTVtoTeGZh4HSXaO6M95qu4k5lJcH4gxv56iaycfz1S8GO/5Jh6X4Y1YiI0h7cRyLi+HixMR+88swag==",
-      "os": ["linux"],
-      "cpu": ["ppc64"]
-    },
     "@esbuild/linux-ppc64@0.25.5": {
       "integrity": "sha512-UZCmJ7r9X2fe2D6jBmkLBMQetXPXIsZjQJCjgwpVDz+YMcS6oFR27alkgGv3Oqkv07bxdvw7fyB71/olceJhkQ==",
       "os": ["linux"],
       "cpu": ["ppc64"]
     },
-    "@esbuild/linux-riscv64@0.25.4": {
-      "integrity": "sha512-i8JUDAufpz9jOzo4yIShCTcXzS07vEgWzyX3NH2G7LEFVgrLEhjwL3ajFE4fZI3I4ZgiM7JH3GQ7ReObROvSUA==",
-      "os": ["linux"],
-      "cpu": ["riscv64"]
-    },
     "@esbuild/linux-riscv64@0.25.5": {
       "integrity": "sha512-kTxwu4mLyeOlsVIFPfQo+fQJAV9mh24xL+y+Bm6ej067sYANjyEw1dNHmvoqxJUCMnkBdKpvOn0Ahql6+4VyeA==",
       "os": ["linux"],
       "cpu": ["riscv64"]
     },
-    "@esbuild/linux-s390x@0.25.4": {
-      "integrity": "sha512-jFnu+6UbLlzIjPQpWCNh5QtrcNfMLjgIavnwPQAfoGx4q17ocOU9MsQ2QVvFxwQoWpZT8DvTLooTvmOQXkO51g==",
-      "os": ["linux"],
-      "cpu": ["s390x"]
-    },
     "@esbuild/linux-s390x@0.25.5": {
       "integrity": "sha512-K2dSKTKfmdh78uJ3NcWFiqyRrimfdinS5ErLSn3vluHNeHVnBAFWC8a4X5N+7FgVE1EjXS1QDZbpqZBjfrqMTQ==",
       "os": ["linux"],
       "cpu": ["s390x"]
     },
-    "@esbuild/linux-x64@0.25.4": {
-      "integrity": "sha512-6e0cvXwzOnVWJHq+mskP8DNSrKBr1bULBvnFLpc1KY+d+irZSgZ02TGse5FsafKS5jg2e4pbvK6TPXaF/A6+CA==",
-      "os": ["linux"],
-      "cpu": ["x64"]
-    },
     "@esbuild/linux-x64@0.25.5": {
       "integrity": "sha512-uhj8N2obKTE6pSZ+aMUbqq+1nXxNjZIIjCjGLfsWvVpy7gKCOL6rsY1MhRh9zLtUtAI7vpgLMK6DxjO8Qm9lJw==",
       "os": ["linux"],
       "cpu": ["x64"]
     },
-    "@esbuild/netbsd-arm64@0.25.4": {
-      "integrity": "sha512-vUnkBYxZW4hL/ie91hSqaSNjulOnYXE1VSLusnvHg2u3jewJBz3YzB9+oCw8DABeVqZGg94t9tyZFoHma8gWZQ==",
-      "os": ["netbsd"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/netbsd-arm64@0.25.5": {
       "integrity": "sha512-pwHtMP9viAy1oHPvgxtOv+OkduK5ugofNTVDilIzBLpoWAM16r7b/mxBvfpuQDpRQFMfuVr5aLcn4yveGvBZvw==",
       "os": ["netbsd"],
       "cpu": ["arm64"]
     },
-    "@esbuild/netbsd-x64@0.25.4": {
-      "integrity": "sha512-XAg8pIQn5CzhOB8odIcAm42QsOfa98SBeKUdo4xa8OvX8LbMZqEtgeWE9P/Wxt7MlG2QqvjGths+nq48TrUiKw==",
-      "os": ["netbsd"],
-      "cpu": ["x64"]
-    },
     "@esbuild/netbsd-x64@0.25.5": {
       "integrity": "sha512-WOb5fKrvVTRMfWFNCroYWWklbnXH0Q5rZppjq0vQIdlsQKuw6mdSihwSo4RV/YdQ5UCKKvBy7/0ZZYLBZKIbwQ==",
       "os": ["netbsd"],
       "cpu": ["x64"]
     },
-    "@esbuild/openbsd-arm64@0.25.4": {
-      "integrity": "sha512-Ct2WcFEANlFDtp1nVAXSNBPDxyU+j7+tId//iHXU2f/lN5AmO4zLyhDcpR5Cz1r08mVxzt3Jpyt4PmXQ1O6+7A==",
-      "os": ["openbsd"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/openbsd-arm64@0.25.5": {
       "integrity": "sha512-7A208+uQKgTxHd0G0uqZO8UjK2R0DDb4fDmERtARjSHWxqMTye4Erz4zZafx7Di9Cv+lNHYuncAkiGFySoD+Mw==",
       "os": ["openbsd"],
       "cpu": ["arm64"]
     },
-    "@esbuild/openbsd-x64@0.25.4": {
-      "integrity": "sha512-xAGGhyOQ9Otm1Xu8NT1ifGLnA6M3sJxZ6ixylb+vIUVzvvd6GOALpwQrYrtlPouMqd/vSbgehz6HaVk4+7Afhw==",
-      "os": ["openbsd"],
-      "cpu": ["x64"]
-    },
     "@esbuild/openbsd-x64@0.25.5": {
       "integrity": "sha512-G4hE405ErTWraiZ8UiSoesH8DaCsMm0Cay4fsFWOOUcz8b8rC6uCvnagr+gnioEjWn0wC+o1/TAHt+It+MpIMg==",
       "os": ["openbsd"],
       "cpu": ["x64"]
     },
-    "@esbuild/sunos-x64@0.25.4": {
-      "integrity": "sha512-Mw+tzy4pp6wZEK0+Lwr76pWLjrtjmJyUB23tHKqEDP74R3q95luY/bXqXZeYl4NYlvwOqoRKlInQialgCKy67Q==",
-      "os": ["sunos"],
-      "cpu": ["x64"]
-    },
     "@esbuild/sunos-x64@0.25.5": {
       "integrity": "sha512-l+azKShMy7FxzY0Rj4RCt5VD/q8mG/e+mDivgspo+yL8zW7qEwctQ6YqKX34DTEleFAvCIUviCFX1SDZRSyMQA==",
       "os": ["sunos"],
       "cpu": ["x64"]
     },
-    "@esbuild/win32-arm64@0.25.4": {
-      "integrity": "sha512-AVUP428VQTSddguz9dO9ngb+E5aScyg7nOeJDrF1HPYu555gmza3bDGMPhmVXL8svDSoqPCsCPjb265yG/kLKQ==",
-      "os": ["win32"],
-      "cpu": ["arm64"]
-    },
     "@esbuild/win32-arm64@0.25.5": {
       "integrity": "sha512-O2S7SNZzdcFG7eFKgvwUEZ2VG9D/sn/eIiz8XRZ1Q/DO5a3s76Xv0mdBzVM5j5R639lXQmPmSo0iRpHqUUrsxw==",
       "os": ["win32"],
       "cpu": ["arm64"]
     },
-    "@esbuild/win32-ia32@0.25.4": {
-      "integrity": "sha512-i1sW+1i+oWvQzSgfRcxxG2k4I9n3O9NRqy8U+uugaT2Dy7kLO9Y7wI72haOahxceMX8hZAzgGou1FhndRldxRg==",
-      "os": ["win32"],
-      "cpu": ["ia32"]
-    },
     "@esbuild/win32-ia32@0.25.5": {
       "integrity": "sha512-onOJ02pqs9h1iMJ1PQphR+VZv8qBMQ77Klcsqv9CNW2w6yLqoURLcgERAIurY6QE63bbLuqgP9ATqajFLK5AMQ==",
       "os": ["win32"],
       "cpu": ["ia32"]
-    },
-    "@esbuild/win32-x64@0.25.4": {
-      "integrity": "sha512-nOT2vZNw6hJ+z43oP1SPea/G/6AbN6X+bGNhNuq8NtRHy4wsMhw765IKLNmnjek7GvjWBYQ8Q5VBoYTFg9y1UQ==",
-      "os": ["win32"],
-      "cpu": ["x64"]
     },
     "@esbuild/win32-x64@0.25.5": {
       "integrity": "sha512-TXv6YnJ8ZMVdX+SXWVBo/0p8LTcrUYngpWjvm91TMjjBQii7Oz11Lw5lbDV5Y0TzuhSJHwiH4hEtC1I42mMS0g==",
···
         "@tybys/wasm-util"
       ]
     },
-    "@noble/curves@1.9.1": {
-      "integrity": "sha512-k11yZxZg+t+gWvBbIswW0yoJlu8cHOC7dhunwOzoWH/mXGBiYyR4YY6hAEK/3EUs4UpB8la1RfdRpeGsFHkWsA==",
+    "@noble/curves@1.9.2": {
+      "integrity": "sha512-HxngEd2XUcg9xi20JkwlLCtYwfoFw4JGkuZpT+WlsPD4gB/cxkvTD8fSsoAnphGZhFdZYKeQIPCuFlWPm1uE0g==",
       "dependencies": [
         "@noble/hashes"
       ]
···
       ],
       "scripts": true
     },
-    "@tailwindcss/cli@4.1.7": {
-      "integrity": "sha512-hJNjpov/UiJc9ZWH4j/eEQxqklADrD/71s+t8Y0wbyQVAwtLkSp+MeC/sHTb03X+28rfbe0fRXkiBsf73/IwPg==",
+    "@tailwindcss/cli@4.1.8": {
+      "integrity": "sha512-+6lkjXSr/68zWiabK3mVYVHmOq/SAHjJ13mR8spyB4LgUWZbWzU9kCSErlAUo+gK5aVfgqe8kY6Ltz9+nz5XYA==",
       "dependencies": [
         "@parcel/watcher",
         "@tailwindcss/node",
···
       ],
       "bin": true
     },
-    "@tailwindcss/node@4.1.7": {
-      "integrity": "sha512-9rsOpdY9idRI2NH6CL4wORFY0+Q6fnx9XP9Ju+iq/0wJwGD5IByIgFmwVbyy4ymuyprj8Qh4ErxMKTUL4uNh3g==",
+    "@tailwindcss/node@4.1.8": {
+      "integrity": "sha512-OWwBsbC9BFAJelmnNcrKuf+bka2ZxCE2A4Ft53Tkg4uoiE67r/PMEYwCsourC26E+kmxfwE0hVzMdxqeW+xu7Q==",
       "dependencies": [
         "@ampproject/remapping",
         "enhanced-resolve",
···
         "tailwindcss"
       ]
     },
-    "@tailwindcss/oxide-android-arm64@4.1.7": {
-      "integrity": "sha512-IWA410JZ8fF7kACus6BrUwY2Z1t1hm0+ZWNEzykKmMNM09wQooOcN/VXr0p/WJdtHZ90PvJf2AIBS/Ceqx1emg==",
+    "@tailwindcss/oxide-android-arm64@4.1.8": {
+      "integrity": "sha512-Fbz7qni62uKYceWYvUjRqhGfZKwhZDQhlrJKGtnZfuNtHFqa8wmr+Wn74CTWERiW2hn3mN5gTpOoxWKk0jRxjg==",
       "os": ["android"],
       "cpu": ["arm64"]
     },
-    "@tailwindcss/oxide-darwin-arm64@4.1.7": {
-      "integrity": "sha512-81jUw9To7fimGGkuJ2W5h3/oGonTOZKZ8C2ghm/TTxbwvfSiFSDPd6/A/KE2N7Jp4mv3Ps9OFqg2fEKgZFfsvg==",
+    "@tailwindcss/oxide-darwin-arm64@4.1.8": {
+      "integrity": "sha512-RdRvedGsT0vwVVDztvyXhKpsU2ark/BjgG0huo4+2BluxdXo8NDgzl77qh0T1nUxmM11eXwR8jA39ibvSTbi7A==",
       "os": ["darwin"],
       "cpu": ["arm64"]
     },
-    "@tailwindcss/oxide-darwin-x64@4.1.7": {
-      "integrity": "sha512-q77rWjEyGHV4PdDBtrzO0tgBBPlQWKY7wZK0cUok/HaGgbNKecegNxCGikuPJn5wFAlIywC3v+WMBt0PEBtwGw==",
+    "@tailwindcss/oxide-darwin-x64@4.1.8": {
+      "integrity": "sha512-t6PgxjEMLp5Ovf7uMb2OFmb3kqzVTPPakWpBIFzppk4JE4ix0yEtbtSjPbU8+PZETpaYMtXvss2Sdkx8Vs4XRw==",
       "os": ["darwin"],
       "cpu": ["x64"]
     },
-    "@tailwindcss/oxide-freebsd-x64@4.1.7": {
-      "integrity": "sha512-RfmdbbK6G6ptgF4qqbzoxmH+PKfP4KSVs7SRlTwcbRgBwezJkAO3Qta/7gDy10Q2DcUVkKxFLXUQO6J3CRvBGw==",
+    "@tailwindcss/oxide-freebsd-x64@4.1.8": {
+      "integrity": "sha512-g8C8eGEyhHTqwPStSwZNSrOlyx0bhK/V/+zX0Y+n7DoRUzyS8eMbVshVOLJTDDC+Qn9IJnilYbIKzpB9n4aBsg==",
       "os": ["freebsd"],
       "cpu": ["x64"]
     },
-    "@tailwindcss/oxide-linux-arm-gnueabihf@4.1.7": {
-      "integrity": "sha512-OZqsGvpwOa13lVd1z6JVwQXadEobmesxQ4AxhrwRiPuE04quvZHWn/LnihMg7/XkN+dTioXp/VMu/p6A5eZP3g==",
+    "@tailwindcss/oxide-linux-arm-gnueabihf@4.1.8": {
+      "integrity": "sha512-Jmzr3FA4S2tHhaC6yCjac3rGf7hG9R6Gf2z9i9JFcuyy0u79HfQsh/thifbYTF2ic82KJovKKkIB6Z9TdNhCXQ==",
       "os": ["linux"],
       "cpu": ["arm"]
     },
-    "@tailwindcss/oxide-linux-arm64-gnu@4.1.7": {
-      "integrity": "sha512-voMvBTnJSfKecJxGkoeAyW/2XRToLZ227LxswLAwKY7YslG/Xkw9/tJNH+3IVh5bdYzYE7DfiaPbRkSHFxY1xA==",
+    "@tailwindcss/oxide-linux-arm64-gnu@4.1.8": {
+      "integrity": "sha512-qq7jXtO1+UEtCmCeBBIRDrPFIVI4ilEQ97qgBGdwXAARrUqSn/L9fUrkb1XP/mvVtoVeR2bt/0L77xx53bPZ/Q==",
       "os": ["linux"],
       "cpu": ["arm64"]
     },
-    "@tailwindcss/oxide-linux-arm64-musl@4.1.7": {
-      "integrity": "sha512-PjGuNNmJeKHnP58M7XyjJyla8LPo+RmwHQpBI+W/OxqrwojyuCQ+GUtygu7jUqTEexejZHr/z3nBc/gTiXBj4A==",
+    "@tailwindcss/oxide-linux-arm64-musl@4.1.8": {
+      "integrity": "sha512-O6b8QesPbJCRshsNApsOIpzKt3ztG35gfX9tEf4arD7mwNinsoCKxkj8TgEE0YRjmjtO3r9FlJnT/ENd9EVefQ==",
       "os": ["linux"],
       "cpu": ["arm64"]
     },
-    "@tailwindcss/oxide-linux-x64-gnu@4.1.7": {
-      "integrity": "sha512-HMs+Va+ZR3gC3mLZE00gXxtBo3JoSQxtu9lobbZd+DmfkIxR54NO7Z+UQNPsa0P/ITn1TevtFxXTpsRU7qEvWg==",
+    "@tailwindcss/oxide-linux-x64-gnu@4.1.8": {
+      "integrity": "sha512-32iEXX/pXwikshNOGnERAFwFSfiltmijMIAbUhnNyjFr3tmWmMJWQKU2vNcFX0DACSXJ3ZWcSkzNbaKTdngH6g==",
       "os": ["linux"],
       "cpu": ["x64"]
     },
-    "@tailwindcss/oxide-linux-x64-musl@4.1.7": {
-      "integrity": "sha512-MHZ6jyNlutdHH8rd+YTdr3QbXrHXqwIhHw9e7yXEBcQdluGwhpQY2Eku8UZK6ReLaWtQ4gijIv5QoM5eE+qlsA==",
+    "@tailwindcss/oxide-linux-x64-musl@4.1.8": {
+      "integrity": "sha512-s+VSSD+TfZeMEsCaFaHTaY5YNj3Dri8rST09gMvYQKwPphacRG7wbuQ5ZJMIJXN/puxPcg/nU+ucvWguPpvBDg==",
       "os": ["linux"],
       "cpu": ["x64"]
     },
-    "@tailwindcss/oxide-wasm32-wasi@4.1.7": {
-      "integrity": "sha512-ANaSKt74ZRzE2TvJmUcbFQ8zS201cIPxUDm5qez5rLEwWkie2SkGtA4P+GPTj+u8N6JbPrC8MtY8RmJA35Oo+A==",
+    "@tailwindcss/oxide-wasm32-wasi@4.1.8": {
+      "integrity": "sha512-CXBPVFkpDjM67sS1psWohZ6g/2/cd+cq56vPxK4JeawelxwK4YECgl9Y9TjkE2qfF+9/s1tHHJqrC4SS6cVvSg==",
       "dependencies": [
         "@emnapi/core",
         "@emnapi/runtime",
···
       ],
       "cpu": ["wasm32"]
     },
-    "@tailwindcss/oxide-win32-arm64-msvc@4.1.7": {
-      "integrity": "sha512-HUiSiXQ9gLJBAPCMVRk2RT1ZrBjto7WvqsPBwUrNK2BcdSxMnk19h4pjZjI7zgPhDxlAbJSumTC4ljeA9y0tEw==",
+    "@tailwindcss/oxide-win32-arm64-msvc@4.1.8": {
+      "integrity": "sha512-7GmYk1n28teDHUjPlIx4Z6Z4hHEgvP5ZW2QS9ygnDAdI/myh3HTHjDqtSqgu1BpRoI4OiLx+fThAyA1JePoENA==",
       "os": ["win32"],
       "cpu": ["arm64"]
     },
-    "@tailwindcss/oxide-win32-x64-msvc@4.1.7": {
-      "integrity": "sha512-rYHGmvoHiLJ8hWucSfSOEmdCBIGZIq7SpkPRSqLsH2Ab2YUNgKeAPT1Fi2cx3+hnYOrAb0jp9cRyode3bBW4mQ==",
+    "@tailwindcss/oxide-win32-x64-msvc@4.1.8": {
+      "integrity": "sha512-fou+U20j+Jl0EHwK92spoWISON2OBnCazIc038Xj2TdweYV33ZRkS9nwqiUi2d/Wba5xg5UoHfvynnb/UB49cQ==",
       "os": ["win32"],
       "cpu": ["x64"]
     },
-    "@tailwindcss/oxide@4.1.7": {
-      "integrity": "sha512-5SF95Ctm9DFiUyjUPnDGkoKItPX/k+xifcQhcqX5RA85m50jw1pT/KzjdvlqxRja45Y52nR4MR9fD1JYd7f8NQ==",
+    "@tailwindcss/oxide@4.1.8": {
+      "integrity": "sha512-d7qvv9PsM5N3VNKhwVUhpK6r4h9wtLkJ6lz9ZY9aeZgrUWk1Z8VPyqyDT9MZlem7GTGseRQHkeB1j3tC7W1P+A==",
       "dependencies": [
         "detect-libc@2.0.4",
         "tar"
···
       ],
       "scripts": true
     },
-    "@ts-morph/common@0.25.0": {
-      "integrity": "sha512-kMnZz+vGGHi4GoHnLmMhGNjm44kGtKUXGnOvrKmMwAuvNjM/PgKVGfUnL7IDvK7Jb2QQ82jq3Zmp04Gy+r3Dkg==",
-      "dependencies": [
-        "minimatch",
-        "path-browserify",
-        "tinyglobby"
-      ]
-    },
     "@tybys/wasm-util@0.9.0": {
       "integrity": "sha512-6+7nlbMVX/PVDCwaIQ8nTOPveOcFLSt8GcXdx8hD0bt39uWxYT88uXzqTd4fTvqta7oeUJqudepapKNt2DYJFw==",
       "dependencies": [
···
       "integrity": "sha512-OvQ/2pUDKmgfCg++xsTX1wGxfTaszcHVcTctW4UJB4hibJx2HXxxO5UmVgyjMa+ZDsiaf5wWLXYpRWMmBI0QHg==",
       "bin": true
     },
-    "ansi-styles@4.3.0": {
-      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
-      "dependencies": [
-        "color-convert"
-      ]
-    },
     "array-flatten@1.1.1": {
       "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg=="
     },
···
     },
     "await-lock@2.2.2": {
       "integrity": "sha512-aDczADvlvTGajTDjcjpJMqRkOF6Qdz3YbPZm/PyW6tKPkx2hlYBzxMhEywM/tU72HrVZjgl5VCdRuMlA7pZ8Gw=="
-    },
-    "balanced-match@1.0.2": {
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="
     },
     "base64-js@1.5.1": {
       "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA=="
···
         "raw-body",
         "type-is",
         "unpipe"
-      ]
-    },
-    "brace-expansion@2.0.1": {
-      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
-      "dependencies": [
-        "balanced-match"
       ]
     },
     "braces@3.0.3": {
···
       "integrity": "sha512-b3tFPA9pUr2zCUiCfRd2+wok2/LBSNUMKOuRRok+WlvvAgEt/PlbgPTsZUcwCOs53IJvLgTp0eotwtosE6njug==",
       "bin": true
     },
-    "chalk@4.1.2": {
-      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
-      "dependencies": [
-        "ansi-styles",
-        "supports-color"
-      ]
-    },
     "chownr@3.0.0": {
       "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g=="
     },
     "clsx@2.1.1": {
       "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA=="
     },
-    "code-block-writer@13.0.3": {
-      "integrity": "sha512-Oofo0pq3IKnsFtuHqSF7TqBfr71aeyZDVJ0HpmqB7FBM2qEigL0iPONSCZSO9pE9dZTAxANe5XHG9Uy0YMv8cg=="
-    },
-    "color-convert@2.0.1": {
-      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
-      "dependencies": [
-        "color-name"
-      ]
-    },
-    "color-name@1.1.4": {
-      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
-    },
     "commander@2.20.3": {
       "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="
-    },
-    "commander@9.5.0": {
-      "integrity": "sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ=="
     },
     "content-disposition@0.5.4": {
       "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
···
     "esbuild@0.25.5": {
       "integrity": "sha512-P8OtKZRv/5J5hhz0cUAdu/cLuPIKXpQl1R9pZtvmHWQvrAUVd0UNIPT4IB4W3rNOqVO0rlqHmCIbSwxh/c9yUQ==",
       "optionalDependencies": [
-        "@esbuild/aix-ppc64@0.25.5",
-        "@esbuild/android-arm@0.25.5",
-        "@esbuild/android-arm64@0.25.5",
-        "@esbuild/android-x64@0.25.5",
-        "@esbuild/darwin-arm64@0.25.5",
-        "@esbuild/darwin-x64@0.25.5",
-        "@esbuild/freebsd-arm64@0.25.5",
-        "@esbuild/freebsd-x64@0.25.5",
-        "@esbuild/linux-arm@0.25.5",
-        "@esbuild/linux-arm64@0.25.5",
-        "@esbuild/linux-ia32@0.25.5",
-        "@esbuild/linux-loong64@0.25.5",
-        "@esbuild/linux-mips64el@0.25.5",
-        "@esbuild/linux-ppc64@0.25.5",
-        "@esbuild/linux-riscv64@0.25.5",
-        "@esbuild/linux-s390x@0.25.5",
-        "@esbuild/linux-x64@0.25.5",
-        "@esbuild/netbsd-arm64@0.25.5",
-        "@esbuild/netbsd-x64@0.25.5",
-        "@esbuild/openbsd-arm64@0.25.5",
-        "@esbuild/openbsd-x64@0.25.5",
-        "@esbuild/sunos-x64@0.25.5",
-        "@esbuild/win32-arm64@0.25.5",
-        "@esbuild/win32-ia32@0.25.5",
-        "@esbuild/win32-x64@0.25.5"
+        "@esbuild/aix-ppc64",
+        "@esbuild/android-arm",
+        "@esbuild/android-arm64",
+        "@esbuild/android-x64",
+        "@esbuild/darwin-arm64",
+        "@esbuild/darwin-x64",
+        "@esbuild/freebsd-arm64",
+        "@esbuild/freebsd-x64",
+        "@esbuild/linux-arm",
+        "@esbuild/linux-arm64",
+        "@esbuild/linux-ia32",
+        "@esbuild/linux-loong64",
+        "@esbuild/linux-mips64el",
+        "@esbuild/linux-ppc64",
+        "@esbuild/linux-riscv64",
+        "@esbuild/linux-s390x",
+        "@esbuild/linux-x64",
+        "@esbuild/netbsd-arm64",
+        "@esbuild/netbsd-x64",
+        "@esbuild/openbsd-arm64",
+        "@esbuild/openbsd-x64",
+        "@esbuild/sunos-x64",
+        "@esbuild/win32-arm64",
+        "@esbuild/win32-ia32",
+        "@esbuild/win32-x64"
       ],
       "scripts": true,
       "bin": true
···
     },
     "fast-redact@3.5.0": {
       "integrity": "sha512-dwsoQlS7h9hMeYUq1W++23NDcBLV4KqONnITDV9DjfS3q1SgDGVrBdvvTLUotWtPSD7asWDV9/CmsZPy8Hf70A=="
-    },
-    "fdir@6.4.4_picomatch@4.0.2": {
-      "integrity": "sha512-1NZP+GK4GfuAv3PqKvxQRDMjdSRZjnkq7KfhlNrCNNlZ0ygQFpebfrnfnq/W7fpUnAv9aGWmY1zKx7FYL3gwhg==",
-      "dependencies": [
-        "picomatch@4.0.2"
-      ],
-      "optionalPeers": [
-        "picomatch@4.0.2"
-      ]
     },
     "fill-range@7.1.1": {
       "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==",
···
     "graphemer@1.4.0": {
       "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag=="
     },
-    "has-flag@4.0.0": {
-      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="
-    },
     "has-symbols@1.1.0": {
       "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ=="
     },
···
       "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==",
       "dependencies": [
         "braces",
-        "picomatch@2.3.1"
+        "picomatch"
       ]
     },
     "mime-db@1.52.0": {
···
     "mime@1.6.0": {
       "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
       "bin": true
-    },
-    "minimatch@9.0.5": {
-      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
-      "dependencies": [
-        "brace-expansion"
-      ]
     },
     "minipass@7.1.2": {
       "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw=="
···
     "ms@2.1.3": {
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
-    "multiformats@13.3.4": {
-      "integrity": "sha512-JXpM5p9TpJ/BHsUtmLaWuRN0ft0gJPGa6BhkX2KXjFHvkFQOQkDManoar3gx0JsTLNrOojBE2Mj4hFxohGnXZA=="
+    "multiformats@13.3.6": {
+      "integrity": "sha512-yakbt9cPYj8d3vi/8o/XWm61MrOILo7fsTL0qxNx6zS0Nso6K5JqqS2WV7vK/KSuDBvrW3KfCwAdAgarAgOmww=="
     },
     "multiformats@9.9.0": {
       "integrity": "sha512-HoMUjhH9T8DDBNT+6xzkrd9ga/XiBI4xLr58LJACwK6G3HTOPeMz4nB4KJs33L2BelrIJa7P0VuNaVF3hMYfjg=="
···
     "parseurl@1.3.3": {
       "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="
     },
-    "path-browserify@1.0.1": {
-      "integrity": "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g=="
-    },
     "path-to-regexp@0.1.12": {
       "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ=="
     },
···
     },
     "picomatch@2.3.1": {
       "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA=="
-    },
-    "picomatch@4.0.2": {
-      "integrity": "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="
     },
     "pino-abstract-transport@1.2.0": {
       "integrity": "sha512-Guhh8EZfPCfH+PMXAb6rKOjGQEoy0xlAIn+irODG5kgfYV+BQ0rGYYWTIel3P5mmyXqkYkPmdIkywsn6QKUR1Q==",
···
         "tslib@2.4.0"
       ]
     },
-    "preact-render-to-string@6.5.13_preact@10.26.6": {
+    "preact-render-to-string@6.5.13_preact@10.26.8": {
       "integrity": "sha512-iGPd+hKPMFKsfpR2vL4kJ6ZPcFIoWZEcBf0Dpm3zOpdVvj77aY8RlLiQji5OMrngEyaxGogeakTb54uS2FvA6w==",
       "dependencies": [
         "preact"
       ]
     },
-    "preact@10.26.6": {
-      "integrity": "sha512-5SRRBinwpwkaD+OqlBDeITlRgvd8I8QlxHJw9AxSdMNV6O+LodN9nUyYGpSF7sadHjs6RzeFShMexC6DbtWr9g=="
-    },
-    "prettier@3.5.3": {
-      "integrity": "sha512-QQtaxnoDJeAkDvDKWCLiwIXkTgRhwYDEQCghU9Z6q03iyek/rxRh/2lC3HB7P8sWT2xC/y5JDctPLBIGzHKbhw==",
-      "bin": true
+    "preact@10.26.8": {
+      "integrity": "sha512-1nMfdFjucm5hKvq0IClqZwK4FJkGXhRrQstOQ3P4vp8HxKrJEMFcY6RdBRVTdfQS/UlnX6gfbPuTvaqx/bDoeQ=="
     },
     "process-warning@3.0.0": {
       "integrity": "sha512-mqn0kFRl0EoqhnL0GQ0veqFHyIN1yig9RHh/InzORTUiZHFRAur+aMtRkELNwGs9aNwKS6tg/An4NYBPGwvtzQ=="
···
         "forwarded",
         "ipaddr.js@1.9.1"
       ]
-    },
-    "psl@1.15.0": {
-      "integrity": "sha512-JZd3gMVBAVQkSs6HdNZo9Sdo0LNcQeMNP3CozBJb3JYC/QUYZTnKxP+f8oWRX4rHP5EurWxqAHTSwUCjlNKa1w==",
-      "dependencies": [
-        "punycode"
-      ]
-    },
-    "punycode@2.3.1": {
-      "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg=="
     },
     "qs@6.13.0": {
       "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
···
         "tslib@2.4.0"
       ]
     },
-    "supports-color@7.2.0": {
-      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
-      "dependencies": [
-        "has-flag"
-      ]
-    },
     "tailwind-merge@3.3.0": {
       "integrity": "sha512-fyW/pEfcQSiigd5SNn0nApUOxx0zB/dm6UDU/rEwc2c3sX2smWUNbapHv+QRqLGVp9GWX3THIa7MUGPo+YkDzQ=="
     },
-    "tailwindcss@4.1.7": {
-      "integrity": "sha512-kr1o/ErIdNhTz8uzAYL7TpaUuzKIE6QPQ4qmSdxnoX/lo+5wmUHQA6h3L5yIqEImSRnAAURDirLu/BgiXGPAhg=="
+    "tailwindcss@4.1.8": {
+      "integrity": "sha512-kjeW8gjdxasbmFKpVGrGd5T4i40mV5J2Rasw48QARfYeQ8YS9x02ON9SFWax3Qf616rt4Cp3nVNIj6Hd1mP3og=="
     },
     "tapable@2.2.2": {
       "integrity": "sha512-Re10+NauLTMCudc7T5WLFLAwDhQ0JWdrMK+9B2M8zR5hRExKmsRDCBA7/aV/pNJFltmBFO5BAMlQFi/vq3nKOg=="
···
       "dependencies": [
         "@jridgewell/source-map",
         "acorn",
-        "commander@2.20.3",
+        "commander",
         "source-map-support"
       ],
       "bin": true
···
         "real-require"
       ]
     },
-    "tinyglobby@0.2.13_picomatch@4.0.2": {
-      "integrity": "sha512-mEwzpUgrLySlveBwEVDMKk5B57bhLPYovRfPAXD5gA/98Opn0rCDj3GtLwFvCvH5RK9uPCExUROW5NjDwvqkxw==",
-      "dependencies": [
-        "fdir",
-        "picomatch@4.0.2"
-      ]
-    },
     "tlds@1.259.0": {
       "integrity": "sha512-AldGGlDP0PNgwppe2quAvuBl18UcjuNtOnDuUkqhd6ipPqrYYBt3aTxK1QTsBVknk97lS2JcafWMghjGWFtunw==",
       "bin": true
···
     "toidentifier@1.0.1": {
       "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA=="
     },
-    "ts-morph@24.0.0": {
-      "integrity": "sha512-2OAOg/Ob5yx9Et7ZX4CvTCc0UFoZHwLEJ+dpDPSUi5TgwwlTlX47w+iFRrEwzUZwYACjq83cgjS/Da50Ga37uw==",
-      "dependencies": [
-        "@ts-morph/common",
-        "code-block-writer"
-      ]
-    },
     "tslib@2.4.0": {
       "integrity": "sha512-d6xOpEDfsi2CZVlPQzGeux8XMwLT9hssAsaPYExaQMuYskwb+x1x7J371tWlbBdWHroy99KnVB6qIkUbs5X3UQ=="
     },
···
     "yallist@5.0.0": {
       "integrity": "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw=="
     },
-    "yesno@0.4.0": {
-      "integrity": "sha512-tdBxmHvbXPBKYIg81bMCB7bVeDmHkRzk5rVJyYYXurwKkHq/MCd8rz4HSJUP7hW0H2NlXiq8IFiWvYKEHhlotA=="
-    },
-    "zod@3.25.7": {
-      "integrity": "sha512-YGdT1cVRmKkOg6Sq7vY7IkxdphySKnXhaUmFI4r4FcuFVNgpCb9tZfNwXbT6BPjD5oz0nubFsoo9pIqKrDcCvg=="
+    "zod@3.25.51": {
+      "integrity": "sha512-TQSnBldh+XSGL+opiSIq0575wvDPqu09AqWe1F7JhUMKY+M91/aGlK4MhpVNO7MgYfHcVCB1ffwAUTJzllKJqg=="
     }
   },
   "workspace": {
     "dependencies": [
-      "jsr:@bigmoves/bff@0.3.0-beta.32",
+      "jsr:@bigmoves/bff@0.3.0-beta.33",
       "jsr:@luca/esbuild-deno-loader@~0.11.1",
       "jsr:@std/http@^1.0.17",
       "jsr:@std/path@^1.0.9",

lexicons.json

···
     "app.bsky.feed.post",
     "app.bsky.actor.profile",
     "app.bsky.actor.defs",
-    "app.bsky.graph.follow"
+    "app.bsky.graph.follow",
+    "com.atproto.label.defs",
+    "com.atproto.moderation.defs"
   ]
 }

lexicons/com/atproto/moderation/defs.json

···
+{
+  "lexicon": 1,
+  "id": "com.atproto.moderation.defs",
+  "defs": {
+    "reasonRude": {
+      "type": "token",
+      "description": "Rude, harassing, explicit, or otherwise unwelcoming behavior"
+    },
+    "reasonSpam": {
+      "type": "token",
+      "description": "Spam: frequent unwanted promotion, replies, mentions"
+    },
+    "reasonType": {
+      "type": "string",
+      "knownValues": [
+        "com.atproto.moderation.defs#reasonSpam",
+        "com.atproto.moderation.defs#reasonViolation",
+        "com.atproto.moderation.defs#reasonMisleading",
+        "com.atproto.moderation.defs#reasonSexual",
+        "com.atproto.moderation.defs#reasonRude",
+        "com.atproto.moderation.defs#reasonOther",
+        "com.atproto.moderation.defs#reasonAppeal"
+      ]
+    },
+    "reasonOther": {
+      "type": "token",
+      "description": "Other: reports not falling under another report category"
+    },
+    "subjectType": {
+      "type": "string",
+      "description": "Tag describing a type of subject that might be reported.",
+      "knownValues": [
+        "account",
+        "record",
+        "chat"
+      ]
+    },
+    "reasonAppeal": {
+      "type": "token",
+      "description": "Appeal: appeal a previously taken moderation action"
+    },
+    "reasonSexual": {
+      "type": "token",
+      "description": "Unwanted or mislabeled sexual content"
+    },
+    "reasonViolation": {
+      "type": "token",
+      "description": "Direct violation of server rules, laws, terms of service"
+    },
+    "reasonMisleading": {
+      "type": "token",
+      "description": "Misleading identity, affiliation, or content"
+    }
+  }
+}

lexicons/social/grain/actor/defs.json

···
           "maxLength": 2560,
           "maxGraphemes": 256
         },
+        "labels": {
+          "type": "array",
+          "items": {
+            "ref": "com.atproto.label.defs#label",
+            "type": "ref"
+          }
+        },
         "avatar": { "type": "string", "format": "uri" },
         "createdAt": { "type": "string", "format": "datetime" }
       }

lexicons/social/grain/gallery/defs.json

···
             ]
           }
         },
+        "labels": {
+          "type": "array",
+          "items": { "type": "ref", "ref": "com.atproto.label.defs#label" }
+        },
         "indexedAt": { "type": "string", "format": "datetime" }
       }
     }

lexicons/social/grain/gallery/gallery.json

···
         "properties": {
           "title": { "type": "string", "maxLength": 100 },
           "description": { "type": "string", "maxLength": 1000 },
+          "labels": {
+            "type": "union",
+            "description": "Self-label values for this post. Effectively content warnings.",
+            "refs": ["com.atproto.label.defs#selfLabels"]
+          },
           "createdAt": { "type": "string", "format": "datetime" }
         }
       }

lexicons/social/grain/labelers/defs.json

···
+{
+  "lexicon": 1,
+  "id": "social.grain.labeler.defs",
+  "defs": {
+    "labelerView": {
+      "type": "object",
+      "required": ["uri", "cid", "creator", "indexedAt"],
+      "properties": {
+        "uri": { "type": "string", "format": "at-uri" },
+        "cid": { "type": "string", "format": "cid" },
+        "creator": {
+          "type": "ref",
+          "ref": "social.grain.actor.defs#profileView"
+        },
+        "favoriteCount": { "type": "integer", "minimum": 0 },
+        "viewer": { "type": "ref", "ref": "#labelerViewerState" },
+        "indexedAt": { "type": "string", "format": "datetime" },
+        "labels": {
+          "type": "array",
+          "items": { "type": "ref", "ref": "com.atproto.label.defs#label" }
+        }
+      }
+    },
+    "labelerViewDetailed": {
+      "type": "object",
+      "required": ["uri", "cid", "creator", "policies", "indexedAt"],
+      "properties": {
+        "uri": { "type": "string", "format": "at-uri" },
+        "cid": { "type": "string", "format": "cid" },
+        "creator": { "type": "ref", "ref": "app.bsky.actor.defs#profileView" },
+        "policies": {
+          "type": "ref",
+          "ref": "social.grain.actor.defs#labelerPolicies"
+        },
+        "favoriteCount": { "type": "integer", "minimum": 0 },
+        "viewer": { "type": "ref", "ref": "#labelerViewerState" },
+        "indexedAt": { "type": "string", "format": "datetime" },
+        "labels": {
+          "type": "array",
+          "items": { "type": "ref", "ref": "com.atproto.label.defs#label" }
+        },
+        "reasonTypes": {
+          "description": "The set of report reason 'codes' which are in-scope for this service to review and action. These usually align to policy categories. If not defined (distinct from empty array), all reason types are allowed.",
+          "type": "array",
+          "items": {
+            "type": "ref",
+            "ref": "com.atproto.moderation.defs#reasonType"
+          }
+        },
+        "subjectTypes": {
+          "description": "The set of subject types (account, record, etc) this service accepts reports on.",
+          "type": "array",
+          "items": {
+            "type": "ref",
+            "ref": "com.atproto.moderation.defs#subjectType"
+          }
+        },
+        "subjectCollections": {
+          "type": "array",
+          "description": "Set of record types (collection NSIDs) which can be reported to this service. If not defined (distinct from empty array), default is any record type.",
+          "items": { "type": "string", "format": "nsid" }
+        }
+      }
+    },
+    "labelerViewerState": {
+      "type": "object",
+      "properties": {
+        "like": { "type": "string", "format": "at-uri" }
+      }
+    },
+    "labelerPolicies": {
+      "type": "object",
+      "required": ["labelValues"],
+      "properties": {
+        "labelValues": {
+          "type": "array",
+          "description": "The label values which this labeler publishes. May include global or custom labels.",
+          "items": {
+            "type": "ref",
+            "ref": "com.atproto.label.defs#labelValue"
+          }
+        },
+        "labelValueDefinitions": {
+          "type": "array",
+          "description": "Label values created by this labeler and scoped exclusively to it. Labels defined here will override global label definitions for this labeler.",
+          "items": {
+            "type": "ref",
+            "ref": "com.atproto.label.defs#labelValueDefinition"
+          }
+        }
+      }
+    }
+  }
+}

lexicons/social/grain/labelers/service.json

···
+{
+  "lexicon": 1,
+  "id": "social.grain.labeler.service",
+  "defs": {
+    "main": {
+      "type": "record",
+      "description": "A declaration of the existence of labeler service.",
+      "key": "literal:self",
+      "record": {
+        "type": "object",
+        "required": ["policies", "createdAt"],
+        "properties": {
+          "policies": {
+            "type": "ref",
+            "ref": "app.bsky.labeler.defs#labelerPolicies"
+          },
+          "labels": {
+            "type": "union",
+            "refs": ["com.atproto.label.defs#selfLabels"]
+          },
+          "createdAt": { "type": "string", "format": "datetime" },
+          "reasonTypes": {
+            "description": "The set of report reason 'codes' which are in-scope for this service to review and action. These usually align to policy categories. If not defined (distinct from empty array), all reason types are allowed.",
+            "type": "array",
+            "items": {
+              "type": "ref",
+              "ref": "com.atproto.moderation.defs#reasonType"
+            }
+          },
+          "subjectTypes": {
+            "description": "The set of subject types (account, record, etc) this service accepts reports on.",
+            "type": "array",
+            "items": {
+              "type": "ref",
+              "ref": "com.atproto.moderation.defs#subjectType"
+            }
+          },
+          "subjectCollections": {
+            "type": "array",
+            "description": "Set of record types (collection NSIDs) which can be reported to this service. If not defined (distinct from empty array), default is any record type.",
+            "items": { "type": "string", "format": "nsid" }
+          }
+        }
+      }
+    }
+  }
+}

services/mod/.dockerignore

···
+**/node_modules
+**/*.db
+*.toml
+.env

services/mod/.env.example

···
+MOD_SERVICE_PORT=8080
+MOD_SERVICE_DATABASE_URL=sqlite.db
+MOD_SERVICE_SIGNING_KEY=your-signing-key

services/mod/Dockerfile

···
+FROM denoland/deno:2.3.3
+
+WORKDIR /app
+
+COPY . .
+
+RUN deno cache main.ts
+
+EXPOSE 8080
+
+CMD ["run", "-A", "main.ts"]

services/mod/__generated__/index.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import {
+  createServer as createXrpcServer,
+  Server as XrpcServer,
+  type Options as XrpcOptions,
+  type AuthVerifier,
+  type StreamAuthVerifier,
+} from "npm:@atproto/xrpc-server"
+import { schemas } from './lexicons.ts'
+import * as ComAtprotoLabelSubscribeLabels from './types/com/atproto/label/subscribeLabels.ts'
+import * as ComAtprotoLabelQueryLabels from './types/com/atproto/label/queryLabels.ts'
+
+export function createServer(options?: XrpcOptions): Server {
+  return new Server(options)
+}
+
+export class Server {
+  xrpc: XrpcServer
+  com: ComNS
+
+  constructor(options?: XrpcOptions) {
+    this.xrpc = createXrpcServer(schemas, options)
+    this.com = new ComNS(this)
+  }
+}
+
+export class ComNS {
+  _server: Server
+  atproto: ComAtprotoNS
+
+  constructor(server: Server) {
+    this._server = server
+    this.atproto = new ComAtprotoNS(server)
+  }
+}
+
+export class ComAtprotoNS {
+  _server: Server
+  label: ComAtprotoLabelNS
+
+  constructor(server: Server) {
+    this._server = server
+    this.label = new ComAtprotoLabelNS(server)
+  }
+}
+
+export class ComAtprotoLabelNS {
+  _server: Server
+
+  constructor(server: Server) {
+    this._server = server
+  }
+
+  subscribeLabels<AV extends StreamAuthVerifier>(
+    cfg: ConfigOf<
+      AV,
+      ComAtprotoLabelSubscribeLabels.Handler<ExtractAuth<AV>>,
+      ComAtprotoLabelSubscribeLabels.HandlerReqCtx<ExtractAuth<AV>>
+    >,
+  ) {
+    const nsid = 'com.atproto.label.subscribeLabels' // @ts-ignore
+    return this._server.xrpc.streamMethod(nsid, cfg)
+  }
+
+  queryLabels<AV extends AuthVerifier>(
+    cfg: ConfigOf<
+      AV,
+      ComAtprotoLabelQueryLabels.Handler<ExtractAuth<AV>>,
+      ComAtprotoLabelQueryLabels.HandlerReqCtx<ExtractAuth<AV>>
+    >,
+  ) {
+    const nsid = 'com.atproto.label.queryLabels' // @ts-ignore
+    return this._server.xrpc.method(nsid, cfg)
+  }
+}
+
+type SharedRateLimitOpts<T> = {
+  name: string
+  calcKey?: (ctx: T) => string | null
+  calcPoints?: (ctx: T) => number
+}
+type RouteRateLimitOpts<T> = {
+  durationMs: number
+  points: number
+  calcKey?: (ctx: T) => string | null
+  calcPoints?: (ctx: T) => number
+}
+type HandlerOpts = { blobLimit?: number }
+type HandlerRateLimitOpts<T> = SharedRateLimitOpts<T> | RouteRateLimitOpts<T>
+type ConfigOf<Auth, Handler, ReqCtx> =
+  | Handler
+  | {
+      auth?: Auth
+      opts?: HandlerOpts
+      rateLimit?: HandlerRateLimitOpts<ReqCtx> | HandlerRateLimitOpts<ReqCtx>[]
+      handler: Handler
+    }
+type ExtractAuth<AV extends AuthVerifier | StreamAuthVerifier> = Extract<
+  Awaited<ReturnType<AV>>,
+  { credentials: unknown }
+>

services/mod/__generated__/lexicons.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import {
+  type LexiconDoc,
+  Lexicons,
+  ValidationError,
+  type ValidationResult,
+} from "npm:@atproto/lexicon"
+import { type $Typed, is$typed, maybe$typed } from './util.ts'
+
+export const schemaDict = {
+  ComAtprotoLabelSubscribeLabels: {
+    lexicon: 1,
+    id: 'com.atproto.label.subscribeLabels',
+    defs: {
+      info: {
+        type: 'object',
+        required: ['name'],
+        properties: {
+          name: {
+            type: 'string',
+            knownValues: ['OutdatedCursor'],
+          },
+          message: {
+            type: 'string',
+          },
+        },
+      },
+      main: {
+        type: 'subscription',
+        errors: [
+          {
+            name: 'FutureCursor',
+          },
+        ],
+        message: {
+          schema: {
+            refs: [
+              'lex:com.atproto.label.subscribeLabels#labels',
+              'lex:com.atproto.label.subscribeLabels#info',
+            ],
+            type: 'union',
+          },
+        },
+        parameters: {
+          type: 'params',
+          properties: {
+            cursor: {
+              type: 'integer',
+              description: 'The last known event seq number to backfill from.',
+            },
+          },
+        },
+        description:
+          'Subscribe to stream of labels (and negations). Public endpoint implemented by mod services. Uses same sequencing scheme as repo event stream.',
+      },
+      labels: {
+        type: 'object',
+        required: ['seq', 'labels'],
+        properties: {
+          seq: {
+            type: 'integer',
+          },
+          labels: {
+            type: 'array',
+            items: {
+              ref: 'lex:com.atproto.label.defs#label',
+              type: 'ref',
+            },
+          },
+        },
+      },
+    },
+  },
+  ComAtprotoLabelDefs: {
+    lexicon: 1,
+    id: 'com.atproto.label.defs',
+    defs: {
+      label: {
+        type: 'object',
+        required: ['src', 'uri', 'val', 'cts'],
+        properties: {
+          cid: {
+            type: 'string',
+            format: 'cid',
+            description:
+              "Optionally, CID specifying the specific version of 'uri' resource this label applies to.",
+          },
+          cts: {
+            type: 'string',
+            format: 'datetime',
+            description: 'Timestamp when this label was created.',
+          },
+          exp: {
+            type: 'string',
+            format: 'datetime',
+            description:
+              'Timestamp at which this label expires (no longer applies).',
+          },
+          neg: {
+            type: 'boolean',
+            description:
+              'If true, this is a negation label, overwriting a previous label.',
+          },
+          sig: {
+            type: 'bytes',
+            description: 'Signature of dag-cbor encoded label.',
+          },
+          src: {
+            type: 'string',
+            format: 'did',
+            description: 'DID of the actor who created this label.',
+          },
+          uri: {
+            type: 'string',
+            format: 'uri',
+            description:
+              'AT URI of the record, repository (account), or other resource that this label applies to.',
+          },
+          val: {
+            type: 'string',
+            maxLength: 128,
+            description:
+              'The short string name of the value or type of this label.',
+          },
+          ver: {
+            type: 'integer',
+            description: 'The AT Protocol version of the label object.',
+          },
+        },
+        description:
+          'Metadata tag on an atproto resource (eg, repo or record).',
+      },
+      selfLabel: {
+        type: 'object',
+        required: ['val'],
+        properties: {
+          val: {
+            type: 'string',
+            maxLength: 128,
+            description:
+              'The short string name of the value or type of this label.',
+          },
+        },
+        description:
+          'Metadata tag on an atproto record, published by the author within the record. Note that schemas should use #selfLabels, not #selfLabel.',
+      },
+      labelValue: {
+        type: 'string',
+        knownValues: [
+          '!hide',
+          '!no-promote',
+          '!warn',
+          '!no-unauthenticated',
+          'dmca-violation',
+          'doxxing',
+          'porn',
+          'sexual',
+          'nudity',
+          'nsfl',
+          'gore',
+        ],
+      },
+      selfLabels: {
+        type: 'object',
+        required: ['values'],
+        properties: {
+          values: {
+            type: 'array',
+            items: {
+              ref: 'lex:com.atproto.label.defs#selfLabel',
+              type: 'ref',
+            },
+            maxLength: 10,
+          },
+        },
+        description:
+          'Metadata tags on an atproto record, published by the author within the record.',
+      },
+      labelValueDefinition: {
+        type: 'object',
+        required: ['identifier', 'severity', 'blurs', 'locales'],
+        properties: {
+          blurs: {
+            type: 'string',
+            description:
+              "What should this label hide in the UI, if applied? 'content' hides all of the target; 'media' hides the images/video/audio; 'none' hides nothing.",
+            knownValues: ['content', 'media', 'none'],
+          },
+          locales: {
+            type: 'array',
+            items: {
+              ref: 'lex:com.atproto.label.defs#labelValueDefinitionStrings',
+              type: 'ref',
+            },
+          },
+          severity: {
+            type: 'string',
+            description:
+              "How should a client visually convey this label? 'inform' means neutral and informational; 'alert' means negative and warning; 'none' means show nothing.",
+            knownValues: ['inform', 'alert', 'none'],
+          },
+          adultOnly: {
+            type: 'boolean',
+            description:
+              'Does the user need to have adult content enabled in order to configure this label?',
+          },
+          identifier: {
+            type: 'string',
+            maxLength: 100,
+            description:
+              "The value of the label being defined. Must only include lowercase ascii and the '-' character ([a-z-]+).",
+            maxGraphemes: 100,
+          },
+          defaultSetting: {
+            type: 'string',
+            default: 'warn',
+            description: 'The default setting for this label.',
+            knownValues: ['ignore', 'warn', 'hide'],
+          },
+        },
+        description:
+          'Declares a label value and its expected interpretations and behaviors.',
+      },
+      labelValueDefinitionStrings: {
+        type: 'object',
+        required: ['lang', 'name', 'description'],
+        properties: {
+          lang: {
+            type: 'string',
+            format: 'language',
+            description:
+              'The code of the language these strings are written in.',
+          },
+          name: {
+            type: 'string',
+            maxLength: 640,
+            description: 'A short human-readable name for the label.',
+            maxGraphemes: 64,
+          },
+          description: {
+            type: 'string',
+            maxLength: 100000,
+            description:
+              'A longer description of what the label means and why it might be applied.',
+            maxGraphemes: 10000,
+          },
+        },
+        description:
+          'Strings which describe the label in the UI, localized into a specific language.',
+      },
+    },
+  },
+  ComAtprotoLabelQueryLabels: {
+    lexicon: 1,
+    id: 'com.atproto.label.queryLabels',
+    defs: {
+      main: {
+        type: 'query',
+        output: {
+          schema: {
+            type: 'object',
+            required: ['labels'],
+            properties: {
+              cursor: {
+                type: 'string',
+              },
+              labels: {
+                type: 'array',
+                items: {
+                  ref: 'lex:com.atproto.label.defs#label',
+                  type: 'ref',
+                },
+              },
+            },
+          },
+          encoding: 'application/json',
+        },
+        parameters: {
+          type: 'params',
+          required: ['uriPatterns'],
+          properties: {
+            limit: {
+              type: 'integer',
+              default: 50,
+              maximum: 250,
+              minimum: 1,
+            },
+            cursor: {
+              type: 'string',
+            },
+            sources: {
+              type: 'array',
+              items: {
+                type: 'string',
+                format: 'did',
+              },
+              description:
+                'Optional list of label sources (DIDs) to filter on.',
+            },
+            uriPatterns: {
+              type: 'array',
+              items: {
+                type: 'string',
+              },
+              description:
+                "List of AT URI patterns to match (boolean 'OR'). Each may be a prefix (ending with '*'; will match inclusive of the string leading to '*'), or a full URI.",
+            },
+          },
+        },
+        description:
+          'Find labels relevant to the provided AT-URI patterns. Public endpoint for moderation services, though may return different or additional results with auth.',
+      },
+    },
+  },
+} as const satisfies Record<string, LexiconDoc>
+export const schemas = Object.values(schemaDict) satisfies LexiconDoc[]
+export const lexicons: Lexicons = new Lexicons(schemas)
+
+export function validate<T extends { $type: string }>(
+  v: unknown,
+  id: string,
+  hash: string,
+  requiredType: true,
+): ValidationResult<T>
+export function validate<T extends { $type?: string }>(
+  v: unknown,
+  id: string,
+  hash: string,
+  requiredType?: false,
+): ValidationResult<T>
+export function validate(
+  v: unknown,
+  id: string,
+  hash: string,
+  requiredType?: boolean,
+): ValidationResult {
+  return (requiredType ? is$typed : maybe$typed)(v, id, hash)
+    ? lexicons.validate(`${id}#${hash}`, v)
+    : {
+        success: false,
+        error: new ValidationError(
+          `Must be an object with "${hash === 'main' ? id : `${id}#${hash}`}" $type property`,
+        ),
+      }
+}
+
+export const ids = {
+  ComAtprotoLabelSubscribeLabels: 'com.atproto.label.subscribeLabels',
+  ComAtprotoLabelDefs: 'com.atproto.label.defs',
+  ComAtprotoLabelQueryLabels: 'com.atproto.label.queryLabels',
+} as const

services/mod/__generated__/types/com/atproto/label/defs.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import { type ValidationResult, BlobRef } from "npm:@atproto/lexicon"
+import { CID } from "npm:multiformats/cid"
+import { validate as _validate } from '../../../../lexicons.ts'
+import {
+  type $Typed,
+  is$typed as _is$typed,
+  type OmitKey,
+} from '../../../../util.ts'
+
+const is$typed = _is$typed,
+  validate = _validate
+const id = 'com.atproto.label.defs'
+
+/** Metadata tag on an atproto resource (eg, repo or record). */
+export interface Label {
+  $type?: 'com.atproto.label.defs#label'
+  /** Optionally, CID specifying the specific version of 'uri' resource this label applies to. */
+  cid?: string
+  /** Timestamp when this label was created. */
+  cts: string
+  /** Timestamp at which this label expires (no longer applies). */
+  exp?: string
+  /** If true, this is a negation label, overwriting a previous label. */
+  neg?: boolean
+  /** Signature of dag-cbor encoded label. */
+  sig?: Uint8Array
+  /** DID of the actor who created this label. */
+  src: string
+  /** AT URI of the record, repository (account), or other resource that this label applies to. */
+  uri: string
+  /** The short string name of the value or type of this label. */
+  val: string
+  /** The AT Protocol version of the label object. */
+  ver?: number
+}
+
+const hashLabel = 'label'
+
+export function isLabel<V>(v: V) {
+  return is$typed(v, id, hashLabel)
+}
+
+export function validateLabel<V>(v: V) {
+  return validate<Label & V>(v, id, hashLabel)
+}
+
+/** Metadata tag on an atproto record, published by the author within the record. Note that schemas should use #selfLabels, not #selfLabel. */
+export interface SelfLabel {
+  $type?: 'com.atproto.label.defs#selfLabel'
+  /** The short string name of the value or type of this label. */
+  val: string
+}
+
+const hashSelfLabel = 'selfLabel'
+
+export function isSelfLabel<V>(v: V) {
+  return is$typed(v, id, hashSelfLabel)
+}
+
+export function validateSelfLabel<V>(v: V) {
+  return validate<SelfLabel & V>(v, id, hashSelfLabel)
+}
+
+export type LabelValue =
+  | '!hide'
+  | '!no-promote'
+  | '!warn'
+  | '!no-unauthenticated'
+  | 'dmca-violation'
+  | 'doxxing'
+  | 'porn'
+  | 'sexual'
+  | 'nudity'
+  | 'nsfl'
+  | 'gore'
+  | (string & {})
+
+/** Metadata tags on an atproto record, published by the author within the record. */
+export interface SelfLabels {
+  $type?: 'com.atproto.label.defs#selfLabels'
+  values: SelfLabel[]
+}
+
+const hashSelfLabels = 'selfLabels'
+
+export function isSelfLabels<V>(v: V) {
+  return is$typed(v, id, hashSelfLabels)
+}
+
+export function validateSelfLabels<V>(v: V) {
+  return validate<SelfLabels & V>(v, id, hashSelfLabels)
+}
+
+/** Declares a label value and its expected interpretations and behaviors. */
+export interface LabelValueDefinition {
+  $type?: 'com.atproto.label.defs#labelValueDefinition'
+  /** What should this label hide in the UI, if applied? 'content' hides all of the target; 'media' hides the images/video/audio; 'none' hides nothing. */
+  blurs: 'content' | 'media' | 'none' | (string & {})
+  locales: LabelValueDefinitionStrings[]
+  /** How should a client visually convey this label? 'inform' means neutral and informational; 'alert' means negative and warning; 'none' means show nothing. */
+  severity: 'inform' | 'alert' | 'none' | (string & {})
+  /** Does the user need to have adult content enabled in order to configure this label? */
+  adultOnly?: boolean
+  /** The value of the label being defined. Must only include lowercase ascii and the '-' character ([a-z-]+). */
+  identifier: string
+  /** The default setting for this label. */
+  defaultSetting: 'ignore' | 'warn' | 'hide' | (string & {})
+}
+
+const hashLabelValueDefinition = 'labelValueDefinition'
+
+export function isLabelValueDefinition<V>(v: V) {
+  return is$typed(v, id, hashLabelValueDefinition)
+}
+
+export function validateLabelValueDefinition<V>(v: V) {
+  return validate<LabelValueDefinition & V>(v, id, hashLabelValueDefinition)
+}
+
+/** Strings which describe the label in the UI, localized into a specific language. */
+export interface LabelValueDefinitionStrings {
+  $type?: 'com.atproto.label.defs#labelValueDefinitionStrings'
+  /** The code of the language these strings are written in. */
+  lang: string
+  /** A short human-readable name for the label. */
+  name: string
+  /** A longer description of what the label means and why it might be applied. */
+  description: string
+}
+
+const hashLabelValueDefinitionStrings = 'labelValueDefinitionStrings'
+
+export function isLabelValueDefinitionStrings<V>(v: V) {
+  return is$typed(v, id, hashLabelValueDefinitionStrings)
+}
+
+export function validateLabelValueDefinitionStrings<V>(v: V) {
+  return validate<LabelValueDefinitionStrings & V>(
+    v,
+    id,
+    hashLabelValueDefinitionStrings,
+  )
+}

services/mod/__generated__/types/com/atproto/label/queryLabels.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import { HandlerAuth, HandlerPipeThrough } from "npm:@atproto/xrpc-server";
+import express from "npm:express";
+import { validate as _validate } from "../../../../lexicons.ts";
+import { is$typed as _is$typed } from "../../../../util.ts";
+import type * as ComAtprotoLabelDefs from "./defs.ts";
+
+const is$typed = _is$typed,
+  validate = _validate;
+const id = "com.atproto.label.queryLabels";
+
+export interface QueryParams {
+  limit: number;
+  cursor?: string;
+  /** Optional list of label sources (DIDs) to filter on. */
+  sources?: string[];
+  /** List of AT URI patterns to match (boolean 'OR'). Each may be a prefix (ending with '*'; will match inclusive of the string leading to '*'), or a full URI. */
+  uriPatterns: string[];
+}
+
+export type InputSchema = undefined;
+
+export interface OutputSchema {
+  cursor?: string;
+  labels: ComAtprotoLabelDefs.Label[];
+}
+
+export type HandlerInput = undefined;
+
+export interface HandlerSuccess {
+  encoding: "application/json";
+  body: OutputSchema;
+  headers?: { [key: string]: string };
+}
+
+export interface HandlerError {
+  status: number;
+  message?: string;
+}
+
+export type HandlerOutput = HandlerError | HandlerSuccess | HandlerPipeThrough;
+export type HandlerReqCtx<HA extends HandlerAuth = never> = {
+  auth: HA;
+  params: QueryParams;
+  input: HandlerInput;
+  req: express.Request;
+  res: express.Response;
+  resetRouteRateLimits: () => Promise<void>;
+};
+export type Handler<HA extends HandlerAuth = never> = (
+  ctx: HandlerReqCtx<HA>,
+) => Promise<HandlerOutput> | HandlerOutput;

services/mod/__generated__/types/com/atproto/label/subscribeLabels.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+import { type ValidationResult, BlobRef } from "npm:@atproto/lexicon"
+import { CID } from "npm:multiformats/cid"
+import { validate as _validate } from '../../../../lexicons.ts'
+import {
+  type $Typed,
+  is$typed as _is$typed,
+  type OmitKey,
+} from '../../../../util.ts'
+import { HandlerAuth, ErrorFrame } from "npm:@atproto/xrpc-server"
+import { IncomingMessage } from 'node:http'
+import type * as ComAtprotoLabelDefs from './defs.ts'
+
+const is$typed = _is$typed,
+  validate = _validate
+const id = 'com.atproto.label.subscribeLabels'
+
+export interface Info {
+  $type?: 'com.atproto.label.subscribeLabels#info'
+  name: 'OutdatedCursor' | (string & {})
+  message?: string
+}
+
+const hashInfo = 'info'
+
+export function isInfo<V>(v: V) {
+  return is$typed(v, id, hashInfo)
+}
+
+export function validateInfo<V>(v: V) {
+  return validate<Info & V>(v, id, hashInfo)
+}
+
+export interface QueryParams {
+  /** The last known event seq number to backfill from. */
+  cursor?: number
+}
+
+export type OutputSchema = $Typed<Labels> | $Typed<Info> | { $type: string }
+export type HandlerError = ErrorFrame<'FutureCursor'>
+export type HandlerOutput = HandlerError | OutputSchema
+export type HandlerReqCtx<HA extends HandlerAuth = never> = {
+  auth: HA
+  params: QueryParams
+  req: IncomingMessage
+  signal: AbortSignal
+}
+export type Handler<HA extends HandlerAuth = never> = (
+  ctx: HandlerReqCtx<HA>,
+) => AsyncIterable<HandlerOutput>
+
+export interface Labels {
+  $type?: 'com.atproto.label.subscribeLabels#labels'
+  seq: number
+  labels: ComAtprotoLabelDefs.Label[]
+}
+
+const hashLabels = 'labels'
+
+export function isLabels<V>(v: V) {
+  return is$typed(v, id, hashLabels)
+}
+
+export function validateLabels<V>(v: V) {
+  return validate<Labels & V>(v, id, hashLabels)
+}

services/mod/__generated__/util.ts

···
+/**
+ * GENERATED CODE - DO NOT MODIFY
+ */
+
+import { type ValidationResult } from "npm:@atproto/lexicon"
+
+export type OmitKey<T, K extends keyof T> = {
+  [K2 in keyof T as K2 extends K ? never : K2]: T[K2]
+}
+
+export type $Typed<V, T extends string = string> = V & { $type: T }
+export type Un$Typed<V extends { $type?: string }> = OmitKey<V, '$type'>
+
+export type $Type<Id extends string, Hash extends string> = Hash extends 'main'
+  ? Id
+  : `${Id}#${Hash}`
+
+function isObject<V>(v: V): v is V & object {
+  return v != null && typeof v === 'object'
+}
+
+function is$type<Id extends string, Hash extends string>(
+  $type: unknown,
+  id: Id,
+  hash: Hash,
+): $type is $Type<Id, Hash> {
+  return hash === 'main'
+    ? $type === id
+    : // $type === `${id}#${hash}`
+      typeof $type === 'string' &&
+        $type.length === id.length + 1 + hash.length &&
+        $type.charCodeAt(id.length) === 35 /* '#' */ &&
+        $type.startsWith(id) &&
+        $type.endsWith(hash)
+}
+
+export type $TypedObject<
+  V,
+  Id extends string,
+  Hash extends string,
+> = V extends {
+  $type: $Type<Id, Hash>
+}
+  ? V
+  : V extends { $type?: string }
+    ? V extends { $type?: infer T extends $Type<Id, Hash> }
+      ? V & { $type: T }
+      : never
+    : V & { $type: $Type<Id, Hash> }
+
+export function is$typed<V, Id extends string, Hash extends string>(
+  v: V,
+  id: Id,
+  hash: Hash,
+): v is $TypedObject<V, Id, Hash> {
+  return isObject(v) && '$type' in v && is$type(v.$type, id, hash)
+}
+
+export function maybe$typed<V, Id extends string, Hash extends string>(
+  v: V,
+  id: Id,
+  hash: Hash,
+): v is V & object & { $type?: $Type<Id, Hash> } {
+  return (
+    isObject(v) &&
+    ('$type' in v ? v.$type === undefined || is$type(v.$type, id, hash) : true)
+  )
+}
+
+export type Validator<R = unknown> = (v: unknown) => ValidationResult<R>
+export type ValidatorParam<V extends Validator> =
+  V extends Validator<infer R> ? R : never
+
+/**
+ * Utility function that allows to convert a "validate*" utility function into a
+ * type predicate.
+ */
+export function asPredicate<V extends Validator>(validate: V) {
+  return function <T>(v: T): v is T & ValidatorParam<V> {
+    return validate(v).success
+  }
+}

services/mod/bin.ts

···
+import { stringifyLex } from "npm:@atproto/lexicon";
+import type { LabelRow } from "./main.ts";
+import {
+  createConfig,
+  createDb,
+  createLabel,
+  createModService,
+  ModService,
+} from "./main.ts";
+
+async function handleCreate(
+  args: string[],
+  cfg: Awaited<ReturnType<typeof createConfig>>,
+  modService: ModService,
+) {
+  const [src, uri, val, negArg] = args;
+  if (!src || !uri || !val) {
+    console.error("Usage: deno run -A bin.ts create <src> <uri> <val> [neg]");
+    Deno.exit(1);
+  }
+  const neg = negArg === "true" || negArg === "1";
+  const doCreateLabel = createLabel(cfg, modService);
+  await doCreateLabel({
+    src,
+    uri,
+    val,
+    neg,
+    cts: new Date().toISOString(),
+  });
+  console.log(
+    `Label created for src: ${src}, uri: ${uri}, val: ${val}, neg: ${neg}`,
+  );
+}
+
+function parseQueryArgs(args: string[]) {
+  let src = "";
+  let val = "";
+  let limit = 50;
+  let cursor = 0;
+  const patterns: string[] = [];
+  let i = 0;
+  while (i < args.length) {
+    if (args[i] === "--src" && args[i + 1]) {
+      src = args[i + 1];
+      i += 2;
+      continue;
+    }
+    if (args[i] === "--val" && args[i + 1]) {
+      val = args[i + 1];
+      i += 2;
+      continue;
+    }
+    if (args[i] === "--limit" && args[i + 1]) {
+      limit = parseInt(args[i + 1], 10);
+      i += 2;
+      continue;
+    }
+    if (args[i] === "--cursor" && args[i + 1]) {
+      cursor = parseInt(args[i + 1], 10);
+      i += 2;
+      continue;
+    }
+    i++;
+  }
+  return { src, val, limit, cursor, patterns };
+}
+
+function handleQuery(args: string[], modService: ModService) {
+  // Usage: deno run -A bin.ts query [--src <src>] [--val <val>] [--limit <n>] [--cursor <id>]
+  const { src, val, limit, cursor, patterns } = parseQueryArgs(args);
+  const sources = src ? [src] : [];
+  // If val is set, filter in JS after query
+  const { rows } = modService.getLabels({ patterns, sources, limit, cursor });
+  const filtered = val ? rows.filter((r: LabelRow) => r.val === val) : rows;
+  for (const row of filtered) {
+    console.log(stringifyLex(row));
+  }
+}
+
+async function main() {
+  const [cmd, ...args] = Deno.args;
+  if (!cmd || ["create", "query"].indexOf(cmd) === -1) {
+    console.error("Usage: deno run -A bin.ts <create|query> [...args]");
+    Deno.exit(1);
+  }
+  const cfg = await createConfig();
+  const db = createDb(cfg);
+  const modService = createModService(db);
+
+  if (cmd === "create") {
+    await handleCreate(args, cfg, modService);
+  } else if (cmd === "query") {
+    handleQuery(args, modService);
+  }
+}
+
+if (import.meta.main) {
+  main();
+}

services/mod/deno.json

···
+{
+  "imports": {
+    "$lexicon/": "./__generated__/",
+    "@atproto/common": "npm:@atproto/common@^0.4.11",
+    "@atproto/crypto": "npm:@atproto/crypto@^0.4.4",
+    "@atproto/lexicon": "npm:@atproto/lexicon@^0.4.11",
+    "@std/assert": "jsr:@std/assert@^1.0.13",
+    "uint8arrays": "npm:uint8arrays@^5.1.0"
+  },
+  "tasks": {
+    "start": "deno run -A ./main.ts",
+    "dev": "deno run -A --watch --env=.env ./main.ts",
+    "test": "deno test -A  main.ts",
+    "codegen": "deno run -A jsr:@bigmoves/bff-cli@0.3.0-beta.30 lexgen"
+  },
+  "nodeModulesDir": "auto"
+}

services/mod/deno.lock

···
+{
+  "version": "5",
+  "specifiers": {
+    "jsr:@std/assert@^1.0.13": "1.0.13",
+    "jsr:@std/internal@^1.0.6": "1.0.8",
+    "npm:@atproto/common@~0.4.11": "0.4.11",
+    "npm:@atproto/crypto@~0.4.4": "0.4.4",
+    "npm:@atproto/lex-cli@*": "0.8.2",
+    "npm:@atproto/lexicon@*": "0.4.11",
+    "npm:@atproto/lexicon@~0.4.11": "0.4.11",
+    "npm:@atproto/xrpc-server@*": "0.7.19",
+    "npm:@types/node@*": "22.15.15",
+    "npm:multiformats@*": "9.9.0",
+    "npm:uint8arrays@^5.1.0": "5.1.0"
+  },
+  "jsr": {
+    "@std/assert@1.0.13": {
+      "integrity": "ae0d31e41919b12c656c742b22522c32fb26ed0cba32975cb0de2a273cb68b29",
+      "dependencies": [
+        "jsr:@std/internal"
+      ]
+    },
+    "@std/internal@1.0.8": {
+      "integrity": "fc66e846d8d38a47cffd274d80d2ca3f0de71040f855783724bb6b87f60891f5"
+    }
+  },
+  "npm": {
+    "@atproto/common-web@0.4.2": {
+      "integrity": "sha512-vrXwGNoFGogodjQvJDxAeP3QbGtawgZute2ed1XdRO0wMixLk3qewtikZm06H259QDJVu6voKC5mubml+WgQUw==",
+      "dependencies": [
+        "graphemer",
+        "multiformats@9.9.0",
+        "uint8arrays@3.0.0",
+        "zod"
+      ]
+    },
+    "@atproto/common@0.4.11": {
+      "integrity": "sha512-Knv0viYXNMfCdIE7jLUiWJKnnMfEwg+vz2epJQi8WOjqtqCFb3W/3Jn72ZiuovIfpdm13MaOiny6w2NErUQC6g==",
+      "dependencies": [
+        "@atproto/common-web",
+        "@ipld/dag-cbor",
+        "cbor-x",
+        "iso-datestring-validator",
+        "multiformats@9.9.0",
+        "pino"
+      ]
+    },
+    "@atproto/crypto@0.4.4": {
+      "integrity": "sha512-Yq9+crJ7WQl7sxStVpHgie5Z51R05etaK9DLWYG/7bR5T4bhdcIgF6IfklLShtZwLYdVVj+K15s0BqW9a8PSDA==",
+      "dependencies": [
+        "@noble/curves",
+        "@noble/hashes",
+        "uint8arrays@3.0.0"
+      ]
+    },
+    "@atproto/lex-cli@0.8.2": {
+      "integrity": "sha512-yNQFYBV3tBBLnVrRUtUBlx/WIF4ypMFsvOsCLjA7pHL1SyW9JbczSEAoiNtoDmPc4UXCjMtXggz0ovBG8lynNA==",
+      "dependencies": [
+        "@atproto/lexicon",
+        "@atproto/syntax",
+        "chalk",
+        "commander",
+        "prettier",
+        "ts-morph",
+        "yesno",
+        "zod"
+      ],
+      "bin": true
+    },
+    "@atproto/lexicon@0.4.11": {
+      "integrity": "sha512-btefdnvNz2Ao2I+qbmj0F06HC8IlrM/IBz6qOBS50r0S6uDf5tOO+Mv2tSVdimFkdzyDdLtBI1sV36ONxz2cOw==",
+      "dependencies": [
+        "@atproto/common-web",
+        "@atproto/syntax",
+        "iso-datestring-validator",
+        "multiformats@9.9.0",
+        "zod"
+      ]
+    },
+    "@atproto/syntax@0.4.0": {
+      "integrity": "sha512-b9y5ceHS8YKOfP3mdKmwAx5yVj9294UN7FG2XzP6V5aKUdFazEYRnR9m5n5ZQFKa3GNvz7de9guZCJ/sUTcOAA=="
+    },
+    "@atproto/xrpc-server@0.7.19": {
+      "integrity": "sha512-YSCl/tU2NDykgDYslFSOYCr96esUgDwncFiADKL59/fyIFPLoT0qY8Uq/budpxUh0qPzjow4HHgVWESOaOpUmA==",
+      "dependencies": [
+        "@atproto/common",
+        "@atproto/crypto",
+        "@atproto/lexicon",
+        "@atproto/xrpc",
+        "cbor-x",
+        "express",
+        "http-errors",
+        "mime-types",
+        "rate-limiter-flexible",
+        "uint8arrays@3.0.0",
+        "ws",
+        "zod"
+      ]
+    },
+    "@atproto/xrpc@0.7.0": {
+      "integrity": "sha512-SfhP9dGx2qclaScFDb58Jnrmim5nk4geZXCqg6sB0I/KZhZEkr9iIx1hLCp+sxkIfEsmEJjeWO4B0rjUIJW5cw==",
+      "dependencies": [
+        "@atproto/lexicon",
+        "zod"
+      ]
+    },
+    "@cbor-extract/cbor-extract-darwin-arm64@2.2.0": {
+      "integrity": "sha512-P7swiOAdF7aSi0H+tHtHtr6zrpF3aAq/W9FXx5HektRvLTM2O89xCyXF3pk7pLc7QpaY7AoaE8UowVf9QBdh3w==",
+      "os": ["darwin"],
+      "cpu": ["arm64"]
+    },
+    "@cbor-extract/cbor-extract-darwin-x64@2.2.0": {
+      "integrity": "sha512-1liF6fgowph0JxBbYnAS7ZlqNYLf000Qnj4KjqPNW4GViKrEql2MgZnAsExhY9LSy8dnvA4C0qHEBgPrll0z0w==",
+      "os": ["darwin"],
+      "cpu": ["x64"]
+    },
+    "@cbor-extract/cbor-extract-linux-arm64@2.2.0": {
+      "integrity": "sha512-rQvhNmDuhjTVXSPFLolmQ47/ydGOFXtbR7+wgkSY0bdOxCFept1hvg59uiLPT2fVDuJFuEy16EImo5tE2x3RsQ==",
+      "os": ["linux"],
+      "cpu": ["arm64"]
+    },
+    "@cbor-extract/cbor-extract-linux-arm@2.2.0": {
+      "integrity": "sha512-QeBcBXk964zOytiedMPQNZr7sg0TNavZeuUCD6ON4vEOU/25+pLhNN6EDIKJ9VLTKaZ7K7EaAriyYQ1NQ05s/Q==",
+      "os": ["linux"],
+      "cpu": ["arm"]
+    },
+    "@cbor-extract/cbor-extract-linux-x64@2.2.0": {
+      "integrity": "sha512-cWLAWtT3kNLHSvP4RKDzSTX9o0wvQEEAj4SKvhWuOVZxiDAeQazr9A+PSiRILK1VYMLeDml89ohxCnUNQNQNCw==",
+      "os": ["linux"],
+      "cpu": ["x64"]
+    },
+    "@cbor-extract/cbor-extract-win32-x64@2.2.0": {
+      "integrity": "sha512-l2M+Z8DO2vbvADOBNLbbh9y5ST1RY5sqkWOg/58GkUPBYou/cuNZ68SGQ644f1CvZ8kcOxyZtw06+dxWHIoN/w==",
+      "os": ["win32"],
+      "cpu": ["x64"]
+    },
+    "@ipld/dag-cbor@7.0.3": {
+      "integrity": "sha512-1VVh2huHsuohdXC1bGJNE8WR72slZ9XE2T3wbBBq31dm7ZBatmKLLxrB+XAqafxfRFjv08RZmj/W/ZqaM13AuA==",
+      "dependencies": [
+        "cborg",
+        "multiformats@9.9.0"
+      ]
+    },
+    "@noble/curves@1.9.2": {
+      "integrity": "sha512-HxngEd2XUcg9xi20JkwlLCtYwfoFw4JGkuZpT+WlsPD4gB/cxkvTD8fSsoAnphGZhFdZYKeQIPCuFlWPm1uE0g==",
+      "dependencies": [
+        "@noble/hashes"
+      ]
+    },
+    "@noble/hashes@1.8.0": {
+      "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A=="
+    },
+    "@ts-morph/common@0.25.0": {
+      "integrity": "sha512-kMnZz+vGGHi4GoHnLmMhGNjm44kGtKUXGnOvrKmMwAuvNjM/PgKVGfUnL7IDvK7Jb2QQ82jq3Zmp04Gy+r3Dkg==",
+      "dependencies": [
+        "minimatch",
+        "path-browserify",
+        "tinyglobby"
+      ]
+    },
+    "@types/node@22.15.15": {
+      "integrity": "sha512-R5muMcZob3/Jjchn5LcO8jdKwSCbzqmPB6ruBxMcf9kbxtniZHP327s6C37iOfuw8mbKK3cAQa7sEl7afLrQ8A==",
+      "dependencies": [
+        "undici-types"
+      ]
+    },
+    "abort-controller@3.0.0": {
+      "integrity": "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==",
+      "dependencies": [
+        "event-target-shim"
+      ]
+    },
+    "accepts@1.3.8": {
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "dependencies": [
+        "mime-types",
+        "negotiator"
+      ]
+    },
+    "ansi-styles@4.3.0": {
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "dependencies": [
+        "color-convert"
+      ]
+    },
+    "array-flatten@1.1.1": {
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg=="
+    },
+    "atomic-sleep@1.0.0": {
+      "integrity": "sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ=="
+    },
+    "balanced-match@1.0.2": {
+      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="
+    },
+    "base64-js@1.5.1": {
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA=="
+    },
+    "body-parser@1.20.3": {
+      "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==",
+      "dependencies": [
+        "bytes",
+        "content-type",
+        "debug",
+        "depd",
+        "destroy",
+        "http-errors",
+        "iconv-lite",
+        "on-finished",
+        "qs",
+        "raw-body",
+        "type-is",
+        "unpipe"
+      ]
+    },
+    "brace-expansion@2.0.1": {
+      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
+      "dependencies": [
+        "balanced-match"
+      ]
+    },
+    "buffer@6.0.3": {
+      "integrity": "sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==",
+      "dependencies": [
+        "base64-js",
+        "ieee754"
+      ]
+    },
+    "bytes@3.1.2": {
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg=="
+    },
+    "call-bind-apply-helpers@1.0.2": {
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "dependencies": [
+        "es-errors",
+        "function-bind"
+      ]
+    },
+    "call-bound@1.0.4": {
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "dependencies": [
+        "call-bind-apply-helpers",
+        "get-intrinsic"
+      ]
+    },
+    "cbor-extract@2.2.0": {
+      "integrity": "sha512-Ig1zM66BjLfTXpNgKpvBePq271BPOvu8MR0Jl080yG7Jsl+wAZunfrwiwA+9ruzm/WEdIV5QF/bjDZTqyAIVHA==",
+      "dependencies": [
+        "node-gyp-build-optional-packages"
+      ],
+      "optionalDependencies": [
+        "@cbor-extract/cbor-extract-darwin-arm64",
+        "@cbor-extract/cbor-extract-darwin-x64",
+        "@cbor-extract/cbor-extract-linux-arm",
+        "@cbor-extract/cbor-extract-linux-arm64",
+        "@cbor-extract/cbor-extract-linux-x64",
+        "@cbor-extract/cbor-extract-win32-x64"
+      ],
+      "scripts": true,
+      "bin": true
+    },
+    "cbor-x@1.6.0": {
+      "integrity": "sha512-0kareyRwHSkL6ws5VXHEf8uY1liitysCVJjlmhaLG+IXLqhSaOO+t63coaso7yjwEzWZzLy8fJo06gZDVQM9Qg==",
+      "optionalDependencies": [
+        "cbor-extract"
+      ]
+    },
+    "cborg@1.10.2": {
+      "integrity": "sha512-b3tFPA9pUr2zCUiCfRd2+wok2/LBSNUMKOuRRok+WlvvAgEt/PlbgPTsZUcwCOs53IJvLgTp0eotwtosE6njug==",
+      "bin": true
+    },
+    "chalk@4.1.2": {
+      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
+      "dependencies": [
+        "ansi-styles",
+        "supports-color"
+      ]
+    },
+    "code-block-writer@13.0.3": {
+      "integrity": "sha512-Oofo0pq3IKnsFtuHqSF7TqBfr71aeyZDVJ0HpmqB7FBM2qEigL0iPONSCZSO9pE9dZTAxANe5XHG9Uy0YMv8cg=="
+    },
+    "color-convert@2.0.1": {
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dependencies": [
+        "color-name"
+      ]
+    },
+    "color-name@1.1.4": {
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
+    },
+    "commander@9.5.0": {
+      "integrity": "sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ=="
+    },
+    "content-disposition@0.5.4": {
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+      "dependencies": [
+        "safe-buffer"
+      ]
+    },
+    "content-type@1.0.5": {
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA=="
+    },
+    "cookie-signature@1.0.6": {
+      "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ=="
+    },
+    "cookie@0.7.1": {
+      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w=="
+    },
+    "debug@2.6.9": {
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "dependencies": [
+        "ms@2.0.0"
+      ]
+    },
+    "depd@2.0.0": {
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="
+    },
+    "destroy@1.2.0": {
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg=="
+    },
+    "detect-libc@2.0.4": {
+      "integrity": "sha512-3UDv+G9CsCKO1WKMGw9fwq/SWJYbI0c5Y7LU1AXYoDdbhE2AHQ6N6Nb34sG8Fj7T5APy8qXDCKuuIHd1BR0tVA=="
+    },
+    "dunder-proto@1.0.1": {
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "dependencies": [
+        "call-bind-apply-helpers",
+        "es-errors",
+        "gopd"
+      ]
+    },
+    "ee-first@1.1.1": {
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow=="
+    },
+    "encodeurl@1.0.2": {
+      "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w=="
+    },
+    "encodeurl@2.0.0": {
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg=="
+    },
+    "es-define-property@1.0.1": {
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g=="
+    },
+    "es-errors@1.3.0": {
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw=="
+    },
+    "es-object-atoms@1.1.1": {
+      "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
+      "dependencies": [
+        "es-errors"
+      ]
+    },
+    "escape-html@1.0.3": {
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow=="
+    },
+    "etag@1.8.1": {
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg=="
+    },
+    "event-target-shim@5.0.1": {
+      "integrity": "sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ=="
+    },
+    "events@3.3.0": {
+      "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q=="
+    },
+    "express@4.21.2": {
+      "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
+      "dependencies": [
+        "accepts",
+        "array-flatten",
+        "body-parser",
+        "content-disposition",
+        "content-type",
+        "cookie",
+        "cookie-signature",
+        "debug",
+        "depd",
+        "encodeurl@2.0.0",
+        "escape-html",
+        "etag",
+        "finalhandler",
+        "fresh",
+        "http-errors",
+        "merge-descriptors",
+        "methods",
+        "on-finished",
+        "parseurl",
+        "path-to-regexp",
+        "proxy-addr",
+        "qs",
+        "range-parser",
+        "safe-buffer",
+        "send",
+        "serve-static",
+        "setprototypeof",
+        "statuses",
+        "type-is",
+        "utils-merge",
+        "vary"
+      ]
+    },
+    "fast-redact@3.5.0": {
+      "integrity": "sha512-dwsoQlS7h9hMeYUq1W++23NDcBLV4KqONnITDV9DjfS3q1SgDGVrBdvvTLUotWtPSD7asWDV9/CmsZPy8Hf70A=="
+    },
+    "fdir@6.4.5_picomatch@4.0.2": {
+      "integrity": "sha512-4BG7puHpVsIYxZUbiUE3RqGloLaSSwzYie5jvasC4LWuBWzZawynvYouhjbQKw2JuIGYdm0DzIxl8iVidKlUEw==",
+      "dependencies": [
+        "picomatch"
+      ],
+      "optionalPeers": [
+        "picomatch"
+      ]
+    },
+    "finalhandler@1.3.1": {
+      "integrity": "sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==",
+      "dependencies": [
+        "debug",
+        "encodeurl@2.0.0",
+        "escape-html",
+        "on-finished",
+        "parseurl",
+        "statuses",
+        "unpipe"
+      ]
+    },
+    "forwarded@0.2.0": {
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow=="
+    },
+    "fresh@0.5.2": {
+      "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q=="
+    },
+    "function-bind@1.1.2": {
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA=="
+    },
+    "get-intrinsic@1.3.0": {
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "dependencies": [
+        "call-bind-apply-helpers",
+        "es-define-property",
+        "es-errors",
+        "es-object-atoms",
+        "function-bind",
+        "get-proto",
+        "gopd",
+        "has-symbols",
+        "hasown",
+        "math-intrinsics"
+      ]
+    },
+    "get-proto@1.0.1": {
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "dependencies": [
+        "dunder-proto",
+        "es-object-atoms"
+      ]
+    },
+    "gopd@1.2.0": {
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg=="
+    },
+    "graphemer@1.4.0": {
+      "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag=="
+    },
+    "has-flag@4.0.0": {
+      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="
+    },
+    "has-symbols@1.1.0": {
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ=="
+    },
+    "hasown@2.0.2": {
+      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "dependencies": [
+        "function-bind"
+      ]
+    },
+    "http-errors@2.0.0": {
+      "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
+      "dependencies": [
+        "depd",
+        "inherits",
+        "setprototypeof",
+        "statuses",
+        "toidentifier"
+      ]
+    },
+    "iconv-lite@0.4.24": {
+      "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+      "dependencies": [
+        "safer-buffer"
+      ]
+    },
+    "ieee754@1.2.1": {
+      "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA=="
+    },
+    "inherits@2.0.4": {
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="
+    },
+    "ipaddr.js@1.9.1": {
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g=="
+    },
+    "iso-datestring-validator@2.2.2": {
+      "integrity": "sha512-yLEMkBbLZTlVQqOnQ4FiMujR6T4DEcCb1xizmvXS+OxuhwcbtynoosRzdMA69zZCShCNAbi+gJ71FxZBBXx1SA=="
+    },
+    "math-intrinsics@1.1.0": {
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g=="
+    },
+    "media-typer@0.3.0": {
+      "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ=="
+    },
+    "merge-descriptors@1.0.3": {
+      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ=="
+    },
+    "methods@1.1.2": {
+      "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w=="
+    },
+    "mime-db@1.52.0": {
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg=="
+    },
+    "mime-types@2.1.35": {
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "dependencies": [
+        "mime-db"
+      ]
+    },
+    "mime@1.6.0": {
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "bin": true
+    },
+    "minimatch@9.0.5": {
+      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
+      "dependencies": [
+        "brace-expansion"
+      ]
+    },
+    "ms@2.0.0": {
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A=="
+    },
+    "ms@2.1.3": {
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    },
+    "multiformats@13.3.6": {
+      "integrity": "sha512-yakbt9cPYj8d3vi/8o/XWm61MrOILo7fsTL0qxNx6zS0Nso6K5JqqS2WV7vK/KSuDBvrW3KfCwAdAgarAgOmww=="
+    },
+    "multiformats@9.9.0": {
+      "integrity": "sha512-HoMUjhH9T8DDBNT+6xzkrd9ga/XiBI4xLr58LJACwK6G3HTOPeMz4nB4KJs33L2BelrIJa7P0VuNaVF3hMYfjg=="
+    },
+    "negotiator@0.6.3": {
+      "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg=="
+    },
+    "node-gyp-build-optional-packages@5.1.1": {
+      "integrity": "sha512-+P72GAjVAbTxjjwUmwjVrqrdZROD4nf8KgpBoDxqXXTiYZZt/ud60dE5yvCSr9lRO8e8yv6kgJIC0K0PfZFVQw==",
+      "dependencies": [
+        "detect-libc"
+      ],
+      "bin": true
+    },
+    "object-inspect@1.13.4": {
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew=="
+    },
+    "on-exit-leak-free@2.1.2": {
+      "integrity": "sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA=="
+    },
+    "on-finished@2.4.1": {
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "dependencies": [
+        "ee-first"
+      ]
+    },
+    "parseurl@1.3.3": {
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="
+    },
+    "path-browserify@1.0.1": {
+      "integrity": "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g=="
+    },
+    "path-to-regexp@0.1.12": {
+      "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ=="
+    },
+    "picomatch@4.0.2": {
+      "integrity": "sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg=="
+    },
+    "pino-abstract-transport@1.2.0": {
+      "integrity": "sha512-Guhh8EZfPCfH+PMXAb6rKOjGQEoy0xlAIn+irODG5kgfYV+BQ0rGYYWTIel3P5mmyXqkYkPmdIkywsn6QKUR1Q==",
+      "dependencies": [
+        "readable-stream",
+        "split2"
+      ]
+    },
+    "pino-std-serializers@6.2.2": {
+      "integrity": "sha512-cHjPPsE+vhj/tnhCy/wiMh3M3z3h/j15zHQX+S9GkTBgqJuTuJzYJ4gUyACLhDaJ7kk9ba9iRDmbH2tJU03OiA=="
+    },
+    "pino@8.21.0": {
+      "integrity": "sha512-ip4qdzjkAyDDZklUaZkcRFb2iA118H9SgRh8yzTkSQK8HilsOJF7rSY8HoW5+I0M46AZgX/pxbprf2vvzQCE0Q==",
+      "dependencies": [
+        "atomic-sleep",
+        "fast-redact",
+        "on-exit-leak-free",
+        "pino-abstract-transport",
+        "pino-std-serializers",
+        "process-warning",
+        "quick-format-unescaped",
+        "real-require",
+        "safe-stable-stringify",
+        "sonic-boom",
+        "thread-stream"
+      ],
+      "bin": true
+    },
+    "prettier@3.5.3": {
+      "integrity": "sha512-QQtaxnoDJeAkDvDKWCLiwIXkTgRhwYDEQCghU9Z6q03iyek/rxRh/2lC3HB7P8sWT2xC/y5JDctPLBIGzHKbhw==",
+      "bin": true
+    },
+    "process-warning@3.0.0": {
+      "integrity": "sha512-mqn0kFRl0EoqhnL0GQ0veqFHyIN1yig9RHh/InzORTUiZHFRAur+aMtRkELNwGs9aNwKS6tg/An4NYBPGwvtzQ=="
+    },
+    "process@0.11.10": {
+      "integrity": "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A=="
+    },
+    "proxy-addr@2.0.7": {
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "dependencies": [
+        "forwarded",
+        "ipaddr.js"
+      ]
+    },
+    "qs@6.13.0": {
+      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "dependencies": [
+        "side-channel"
+      ]
+    },
+    "quick-format-unescaped@4.0.4": {
+      "integrity": "sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg=="
+    },
+    "range-parser@1.2.1": {
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg=="
+    },
+    "rate-limiter-flexible@2.4.2": {
+      "integrity": "sha512-rMATGGOdO1suFyf/mI5LYhts71g1sbdhmd6YvdiXO2gJnd42Tt6QS4JUKJKSWVVkMtBacm6l40FR7Trjo6Iruw=="
+    },
+    "raw-body@2.5.2": {
+      "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
+      "dependencies": [
+        "bytes",
+        "http-errors",
+        "iconv-lite",
+        "unpipe"
+      ]
+    },
+    "readable-stream@4.7.0": {
+      "integrity": "sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==",
+      "dependencies": [
+        "abort-controller",
+        "buffer",
+        "events",
+        "process",
+        "string_decoder"
+      ]
+    },
+    "real-require@0.2.0": {
+      "integrity": "sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg=="
+    },
+    "safe-buffer@5.2.1": {
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="
+    },
+    "safe-stable-stringify@2.5.0": {
+      "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA=="
+    },
+    "safer-buffer@2.1.2": {
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
+    },
+    "send@0.19.0": {
+      "integrity": "sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==",
+      "dependencies": [
+        "debug",
+        "depd",
+        "destroy",
+        "encodeurl@1.0.2",
+        "escape-html",
+        "etag",
+        "fresh",
+        "http-errors",
+        "mime",
+        "ms@2.1.3",
+        "on-finished",
+        "range-parser",
+        "statuses"
+      ]
+    },
+    "serve-static@1.16.2": {
+      "integrity": "sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==",
+      "dependencies": [
+        "encodeurl@2.0.0",
+        "escape-html",
+        "parseurl",
+        "send"
+      ]
+    },
+    "setprototypeof@1.2.0": {
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw=="
+    },
+    "side-channel-list@1.0.0": {
+      "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
+      "dependencies": [
+        "es-errors",
+        "object-inspect"
+      ]
+    },
+    "side-channel-map@1.0.1": {
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "dependencies": [
+        "call-bound",
+        "es-errors",
+        "get-intrinsic",
+        "object-inspect"
+      ]
+    },
+    "side-channel-weakmap@1.0.2": {
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "dependencies": [
+        "call-bound",
+        "es-errors",
+        "get-intrinsic",
+        "object-inspect",
+        "side-channel-map"
+      ]
+    },
+    "side-channel@1.1.0": {
+      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "dependencies": [
+        "es-errors",
+        "object-inspect",
+        "side-channel-list",
+        "side-channel-map",
+        "side-channel-weakmap"
+      ]
+    },
+    "sonic-boom@3.8.1": {
+      "integrity": "sha512-y4Z8LCDBuum+PBP3lSV7RHrXscqksve/bi0as7mhwVnBW+/wUqKT/2Kb7um8yqcFy0duYbbPxzt89Zy2nOCaxg==",
+      "dependencies": [
+        "atomic-sleep"
+      ]
+    },
+    "split2@4.2.0": {
+      "integrity": "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg=="
+    },
+    "statuses@2.0.1": {
+      "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ=="
+    },
+    "string_decoder@1.3.0": {
+      "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
+      "dependencies": [
+        "safe-buffer"
+      ]
+    },
+    "supports-color@7.2.0": {
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "dependencies": [
+        "has-flag"
+      ]
+    },
+    "thread-stream@2.7.0": {
+      "integrity": "sha512-qQiRWsU/wvNolI6tbbCKd9iKaTnCXsTwVxhhKM6nctPdujTyztjlbUkUTUymidWcMnZ5pWR0ej4a0tjsW021vw==",
+      "dependencies": [
+        "real-require"
+      ]
+    },
+    "tinyglobby@0.2.14_picomatch@4.0.2": {
+      "integrity": "sha512-tX5e7OM1HnYr2+a2C/4V0htOcSQcoSTH9KgJnVvNm5zm/cyEWKJ7j7YutsH9CxMdtOkkLFy2AHrMci9IM8IPZQ==",
+      "dependencies": [
+        "fdir",
+        "picomatch"
+      ]
+    },
+    "toidentifier@1.0.1": {
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA=="
+    },
+    "ts-morph@24.0.0": {
+      "integrity": "sha512-2OAOg/Ob5yx9Et7ZX4CvTCc0UFoZHwLEJ+dpDPSUi5TgwwlTlX47w+iFRrEwzUZwYACjq83cgjS/Da50Ga37uw==",
+      "dependencies": [
+        "@ts-morph/common",
+        "code-block-writer"
+      ]
+    },
+    "type-is@1.6.18": {
+      "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+      "dependencies": [
+        "media-typer",
+        "mime-types"
+      ]
+    },
+    "uint8arrays@3.0.0": {
+      "integrity": "sha512-HRCx0q6O9Bfbp+HHSfQQKD7wU70+lydKVt4EghkdOvlK/NlrF90z+eXV34mUd48rNvVJXwkrMSPpCATkct8fJA==",
+      "dependencies": [
+        "multiformats@9.9.0"
+      ]
+    },
+    "uint8arrays@5.1.0": {
+      "integrity": "sha512-vA6nFepEmlSKkMBnLBaUMVvAC4G3CTmO58C12y4sq6WPDOR7mOFYOi7GlrQ4djeSbP6JG9Pv9tJDM97PedRSww==",
+      "dependencies": [
+        "multiformats@13.3.6"
+      ]
+    },
+    "undici-types@6.21.0": {
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="
+    },
+    "unpipe@1.0.0": {
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ=="
+    },
+    "utils-merge@1.0.1": {
+      "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA=="
+    },
+    "vary@1.1.2": {
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg=="
+    },
+    "ws@8.18.2": {
+      "integrity": "sha512-DMricUmwGZUVr++AEAe2uiVM7UoO9MAVZMDu05UQOaUII0lp+zOzLLU4Xqh/JvTqklB1T4uELaaPBKyjE1r4fQ=="
+    },
+    "yesno@0.4.0": {
+      "integrity": "sha512-tdBxmHvbXPBKYIg81bMCB7bVeDmHkRzk5rVJyYYXurwKkHq/MCd8rz4HSJUP7hW0H2NlXiq8IFiWvYKEHhlotA=="
+    },
+    "zod@3.25.51": {
+      "integrity": "sha512-TQSnBldh+XSGL+opiSIq0575wvDPqu09AqWe1F7JhUMKY+M91/aGlK4MhpVNO7MgYfHcVCB1ffwAUTJzllKJqg=="
+    }
+  },
+  "workspace": {
+    "dependencies": [
+      "jsr:@std/assert@^1.0.13",
+      "npm:@atproto/common@~0.4.11",
+      "npm:@atproto/crypto@~0.4.4",
+      "npm:@atproto/lexicon@~0.4.11",
+      "npm:uint8arrays@^5.1.0"
+    ]
+  }
+}

services/mod/fly.toml

···
+# fly.toml app configuration file generated for grain-mod on 2025-06-08T23:51:19-07:00
+#
+# See https://fly.io/docs/reference/configuration/ for information about how to use this file.
+#
+
+app = 'grain-mod'
+primary_region = 'sea'
+
+[build]
+  dockerfile = './Dockerfile'
+
+[env]
+  MOD_SERVICE_DATABASE_URL = '/data/sqlite.db'
+  MOD_SERVICE_PORT = '8080'
+
+[[mounts]]
+  source = 'data'
+  destination = '/data'
+
+[http_service]
+  internal_port = 8080
+  force_https = true
+  auto_stop_machines = 'stop'
+  auto_start_machines = true
+  min_machines_running = 0
+  processes = ['app']
+
+[[vm]]
+  size = 'shared-cpu-1x'

services/mod/lexicons.json

···
+{
+  "lexicons": [
+    "com.atproto.label.defs",
+    "com.atproto.label.queryLabels",
+    "com.atproto.label.subscribeLabels"
+  ]
+}

services/mod/lexicons/com/atproto/label/defs.json

···
+{
+  "lexicon": 1,
+  "id": "com.atproto.label.defs",
+  "defs": {
+    "label": {
+      "type": "object",
+      "required": [
+        "src",
+        "uri",
+        "val",
+        "cts"
+      ],
+      "properties": {
+        "cid": {
+          "type": "string",
+          "format": "cid",
+          "description": "Optionally, CID specifying the specific version of 'uri' resource this label applies to."
+        },
+        "cts": {
+          "type": "string",
+          "format": "datetime",
+          "description": "Timestamp when this label was created."
+        },
+        "exp": {
+          "type": "string",
+          "format": "datetime",
+          "description": "Timestamp at which this label expires (no longer applies)."
+        },
+        "neg": {
+          "type": "boolean",
+          "description": "If true, this is a negation label, overwriting a previous label."
+        },
+        "sig": {
+          "type": "bytes",
+          "description": "Signature of dag-cbor encoded label."
+        },
+        "src": {
+          "type": "string",
+          "format": "did",
+          "description": "DID of the actor who created this label."
+        },
+        "uri": {
+          "type": "string",
+          "format": "uri",
+          "description": "AT URI of the record, repository (account), or other resource that this label applies to."
+        },
+        "val": {
+          "type": "string",
+          "maxLength": 128,
+          "description": "The short string name of the value or type of this label."
+        },
+        "ver": {
+          "type": "integer",
+          "description": "The AT Protocol version of the label object."
+        }
+      },
+      "description": "Metadata tag on an atproto resource (eg, repo or record)."
+    },
+    "selfLabel": {
+      "type": "object",
+      "required": [
+        "val"
+      ],
+      "properties": {
+        "val": {
+          "type": "string",
+          "maxLength": 128,
+          "description": "The short string name of the value or type of this label."
+        }
+      },
+      "description": "Metadata tag on an atproto record, published by the author within the record. Note that schemas should use #selfLabels, not #selfLabel."
+    },
+    "labelValue": {
+      "type": "string",
+      "knownValues": [
+        "!hide",
+        "!no-promote",
+        "!warn",
+        "!no-unauthenticated",
+        "dmca-violation",
+        "doxxing",
+        "porn",
+        "sexual",
+        "nudity",
+        "nsfl",
+        "gore"
+      ]
+    },
+    "selfLabels": {
+      "type": "object",
+      "required": [
+        "values"
+      ],
+      "properties": {
+        "values": {
+          "type": "array",
+          "items": {
+            "ref": "#selfLabel",
+            "type": "ref"
+          },
+          "maxLength": 10
+        }
+      },
+      "description": "Metadata tags on an atproto record, published by the author within the record."
+    },
+    "labelValueDefinition": {
+      "type": "object",
+      "required": [
+        "identifier",
+        "severity",
+        "blurs",
+        "locales"
+      ],
+      "properties": {
+        "blurs": {
+          "type": "string",
+          "description": "What should this label hide in the UI, if applied? 'content' hides all of the target; 'media' hides the images/video/audio; 'none' hides nothing.",
+          "knownValues": [
+            "content",
+            "media",
+            "none"
+          ]
+        },
+        "locales": {
+          "type": "array",
+          "items": {
+            "ref": "#labelValueDefinitionStrings",
+            "type": "ref"
+          }
+        },
+        "severity": {
+          "type": "string",
+          "description": "How should a client visually convey this label? 'inform' means neutral and informational; 'alert' means negative and warning; 'none' means show nothing.",
+          "knownValues": [
+            "inform",
+            "alert",
+            "none"
+          ]
+        },
+        "adultOnly": {
+          "type": "boolean",
+          "description": "Does the user need to have adult content enabled in order to configure this label?"
+        },
+        "identifier": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "The value of the label being defined. Must only include lowercase ascii and the '-' character ([a-z-]+).",
+          "maxGraphemes": 100
+        },
+        "defaultSetting": {
+          "type": "string",
+          "default": "warn",
+          "description": "The default setting for this label.",
+          "knownValues": [
+            "ignore",
+            "warn",
+            "hide"
+          ]
+        }
+      },
+      "description": "Declares a label value and its expected interpretations and behaviors."
+    },
+    "labelValueDefinitionStrings": {
+      "type": "object",
+      "required": [
+        "lang",
+        "name",
+        "description"
+      ],
+      "properties": {
+        "lang": {
+          "type": "string",
+          "format": "language",
+          "description": "The code of the language these strings are written in."
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 640,
+          "description": "A short human-readable name for the label.",
+          "maxGraphemes": 64
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 100000,
+          "description": "A longer description of what the label means and why it might be applied.",
+          "maxGraphemes": 10000
+        }
+      },
+      "description": "Strings which describe the label in the UI, localized into a specific language."
+    }
+  }
+}

services/mod/lexicons/com/atproto/label/queryLabels.json

···
+{
+  "lexicon": 1,
+  "id": "com.atproto.label.queryLabels",
+  "defs": {
+    "main": {
+      "type": "query",
+      "output": {
+        "schema": {
+          "type": "object",
+          "required": [
+            "labels"
+          ],
+          "properties": {
+            "cursor": {
+              "type": "string"
+            },
+            "labels": {
+              "type": "array",
+              "items": {
+                "ref": "com.atproto.label.defs#label",
+                "type": "ref"
+              }
+            }
+          }
+        },
+        "encoding": "application/json"
+      },
+      "parameters": {
+        "type": "params",
+        "required": [
+          "uriPatterns"
+        ],
+        "properties": {
+          "limit": {
+            "type": "integer",
+            "default": 50,
+            "maximum": 250,
+            "minimum": 1
+          },
+          "cursor": {
+            "type": "string"
+          },
+          "sources": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "format": "did"
+            },
+            "description": "Optional list of label sources (DIDs) to filter on."
+          },
+          "uriPatterns": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "List of AT URI patterns to match (boolean 'OR'). Each may be a prefix (ending with '*'; will match inclusive of the string leading to '*'), or a full URI."
+          }
+        }
+      },
+      "description": "Find labels relevant to the provided AT-URI patterns. Public endpoint for moderation services, though may return different or additional results with auth."
+    }
+  }
+}

services/mod/lexicons/com/atproto/label/subscribeLabels.json

···
+{
+  "lexicon": 1,
+  "id": "com.atproto.label.subscribeLabels",
+  "defs": {
+    "info": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "type": "string",
+          "knownValues": [
+            "OutdatedCursor"
+          ]
+        },
+        "message": {
+          "type": "string"
+        }
+      }
+    },
+    "main": {
+      "type": "subscription",
+      "errors": [
+        {
+          "name": "FutureCursor"
+        }
+      ],
+      "message": {
+        "schema": {
+          "refs": [
+            "#labels",
+            "#info"
+          ],
+          "type": "union"
+        }
+      },
+      "parameters": {
+        "type": "params",
+        "properties": {
+          "cursor": {
+            "type": "integer",
+            "description": "The last known event seq number to backfill from."
+          }
+        }
+      },
+      "description": "Subscribe to stream of labels (and negations). Public endpoint implemented by mod services. Uses same sequencing scheme as repo event stream."
+    },
+    "labels": {
+      "type": "object",
+      "required": [
+        "seq",
+        "labels"
+      ],
+      "properties": {
+        "seq": {
+          "type": "integer"
+        },
+        "labels": {
+          "type": "array",
+          "items": {
+            "ref": "com.atproto.label.defs#label",
+            "type": "ref"
+          }
+        }
+      }
+    }
+  }
+}

services/mod/main.ts

···
+import type { Label } from "$lexicon/types/com/atproto/label/defs.ts";
+import type { Labels } from "$lexicon/types/com/atproto/label/subscribeLabels.ts";
+import { cborEncode, noUndefinedVals } from "@atproto/common";
+import { Keypair, Secp256k1Keypair } from "@atproto/crypto";
+import { stringifyLex } from "@atproto/lexicon";
+import { assertEquals, assertExists } from "@std/assert";
+import { DatabaseSync } from "node:sqlite";
+import * as ui8 from "uint8arrays";
+
+if (import.meta.main) {
+  const cfg = await createConfig();
+  const db = createDb(cfg);
+  const modService = createModService(db);
+  const handler = createHandler(modService);
+
+  Deno.serve({
+    port: cfg.port,
+    onListen() {
+      console.log(`Listening on http://localhost:${cfg.port}`);
+    },
+    onError(err) {
+      console.error("Error occurred:", err);
+      return new Response("Internal Server Error", {
+        status: 500,
+      });
+    },
+  }, handler);
+
+  Deno.addSignalListener("SIGINT", () => {
+    console.log("Shutting down server...");
+    Deno.exit(0);
+  });
+}
+
+type Config = {
+  port: number;
+  databaseUrl: string;
+  signingKey: string;
+};
+
+export async function createConfig(): Promise<Config> {
+  return {
+    port: Number(Deno.env.get("MOD_SERVICE_PORT")) || 8080,
+    databaseUrl: Deno.env.get("MOD_SERVICE_DATABASE_URL") ?? ":memory:",
+    signingKey: Deno.env.get("MOD_SERVICE_SIGNING_KEY") ??
+      await createSigningKey(),
+  };
+}
+
+async function createSigningKey() {
+  const serviceKeypair = await Secp256k1Keypair.create({ exportable: true });
+  return ui8.toString(await serviceKeypair.export(), "hex");
+}
+
+// Track all connected WebSocket clients for label subscriptions
+const labelSubscribers = new Set<WebSocket>();
+
+export function broadcastLabel(label: LabelRow) {
+  // Only broadcast if this label is active (not negated, not expired, and latest)
+  // Gather all labels for this (src, uri, val) and check if this is the latest and not negated/expired
+  // For simplicity, assume label is already the latest for this key
+  if (label.exp && new Date(label.exp).getTime() < Date.now()) return;
+  if (label.neg) return;
+  const msg = stringifyLex({
+    seq: label.id,
+    labels: [formatLabel(label)],
+  } as Labels);
+  for (const ws of labelSubscribers) {
+    try {
+      ws.send(msg);
+    } catch (e) {
+      console.error("Error sending label to subscriber:", e);
+      labelSubscribers.delete(ws);
+    }
+  }
+}
+
+export async function handleSubscribeLabels(
+  req: Request,
+  modService: ReturnType<typeof createModService>,
+): Promise<Response> {
+  const { searchParams } = new URL(req.url);
+  const cursorParam = searchParams.get("cursor");
+  const cursor = cursorParam ? parseInt(cursorParam, 10) : 0;
+  if (cursorParam && Number.isNaN(cursor)) {
+    return new Response(
+      JSON.stringify({ error: "Cursor must be an integer" }),
+      { status: 400 },
+    );
+  }
+  const { response, socket } = Deno.upgradeWebSocket(req);
+  // On open, send all labels after the cursor (including negations and expired)
+  socket.onopen = () => {
+    try {
+      const { rows } = modService.getLabels({
+        patterns: [],
+        sources: [],
+        limit: 1000,
+        cursor,
+      });
+      // Send ALL rows, not just active (per ATProto spec)
+      for (const row of rows) {
+        const msg = stringifyLex({
+          seq: row.id,
+          labels: [formatLabel(row)],
+        } as Labels);
+        socket.send(msg);
+      }
+      labelSubscribers.add(socket);
+      const userAgent = req.headers.get("user-agent");
+      const origin = req.headers.get("origin");
+      console.log(
+        `New subscriber connected, total: ${labelSubscribers.size}, user-agent: ${userAgent}, origin: ${origin}, time: ${
+          new Date().toISOString()
+        }`,
+      );
+    } catch (e) {
+      console.error("Error sending initial labels:", e);
+      socket.close();
+    }
+  };
+  socket.onclose = () => {
+    labelSubscribers.delete(socket);
+  };
+  return response;
+}
+
+// Filter for active (non-negated, non-expired) labels
+// Used for API hydration only. For the WebSocket stream, send all labels (including negations and expired).
+function filterActiveLabels(labels: LabelRow[]): LabelRow[] {
+  const now = Date.now();
+  const latest: Record<string, LabelRow> = {};
+  for (const label of labels) {
+    if (label.exp && new Date(label.exp).getTime() < now) continue;
+    const key = `${label.src}|${label.uri}|${label.val}`;
+    if (!latest[key] || new Date(label.cts) > new Date(latest[key].cts)) {
+      latest[key] = label;
+    }
+  }
+  return Object.values(latest).filter((label) => !label.neg);
+}
+
+function createHandler(
+  modService: ReturnType<typeof createModService>,
+) {
+  return async (req: Request): Promise<Response> => {
+    const url = new URL(req.url);
+    const pathname = url.pathname;
+
+    if (
+      pathname === "/xrpc/com.atproto.label.subscribeLabels" &&
+      req.headers.get("upgrade")?.toLowerCase() === "websocket"
+    ) {
+      return await handleSubscribeLabels(req, modService);
+    } else if (
+      req.method === "GET" && pathname === "/xrpc/com.atproto.label.queryLabels"
+    ) {
+      // Parse query params
+      const uriPatternsParam = url.searchParams.getAll("uriPatterns");
+      const sourcesParam = url.searchParams.getAll("sources");
+      const cursorParam = url.searchParams.get("cursor");
+      const limitParam = url.searchParams.get("limit");
+
+      const uriPatterns: string[] = uriPatternsParam.length
+        ? uriPatternsParam
+        : [];
+      const sources: string[] = sourcesParam.length ? sourcesParam : [];
+      const cursor = cursorParam ? parseInt(cursorParam, 10) : 0;
+      if (cursorParam && Number.isNaN(cursor)) {
+        return new Response(
+          JSON.stringify({
+            error: "Cursor must be an integer",
+          }),
+          { status: 400 },
+        );
+      }
+      const limit = limitParam ? parseInt(limitParam, 10) : 50;
+      if (Number.isNaN(limit) || limit < 1 || limit > 250) {
+        return new Response(
+          JSON.stringify({
+            error: "Limit must be an integer between 1 and 250",
+          }),
+          { status: 400 },
+        );
+      }
+
+      // Handle wildcards and SQL LIKE
+      const patterns = uriPatterns.includes("*")
+        ? []
+        : uriPatterns.map((pattern) => {
+          pattern = pattern.replace(/%/g, "").replace(/_/g, "\\_");
+          const starIndex = pattern.indexOf("*");
+          if (starIndex === -1) return pattern;
+          if (starIndex !== pattern.length - 1) {
+            return undefined; // Only trailing wildcards supported
+          }
+          return pattern.slice(0, -1) + "%";
+        }).filter(Boolean) as string[];
+
+      const { rows: labelRows, nextCursor } = modService.getLabels({
+        patterns,
+        sources,
+        limit,
+        cursor,
+      });
+      const activeLabels = filterActiveLabels(labelRows);
+      const formattedRows = activeLabels.map(formatLabel);
+      return new Response(
+        stringifyLex({ cursor: nextCursor, labels: formattedRows }),
+        {
+          headers: { "content-type": "application/json" },
+        },
+      );
+    } else if (req.method === "GET" && pathname === "/health") {
+      // Use the modService's DB to check health
+      modService.getLabels({
+        patterns: [],
+        sources: [],
+        limit: 1,
+        cursor: 0,
+      });
+      return new Response(JSON.stringify({ version: "0.1.0" }), {
+        headers: { "content-type": "application/json" },
+      });
+    } else if (pathname.startsWith("/xrpc/")) {
+      return new Response("Method Not Implemented", { status: 501 });
+    }
+
+    return new Response("Not Found", { status: 404 });
+  };
+}
+
+export function createDb(cfg: Config) {
+  const db = new DatabaseSync(cfg.databaseUrl);
+
+  db.exec(`
+    PRAGMA journal_mode = WAL;
+
+    CREATE TABLE IF NOT EXISTS labels (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      src TEXT NOT NULL,
+      uri TEXT NOT NULL,
+      cid TEXT,
+      val TEXT NOT NULL,
+      neg BOOLEAN DEFAULT FALSE,
+      cts DATETIME NOT NULL,
+      exp DATETIME,
+      sig BLOB
+    );
+  `);
+
+  return db;
+}
+
+export type LabelRow = {
+  id: number;
+  src: string;
+  uri: string;
+  cid: string | null;
+  val: string;
+  neg: boolean;
+  cts: string;
+  exp: string | null;
+  sig: Uint8Array;
+};
+
+type UnsignedLabel = Omit<Label, "sig">;
+type SignedLabel = Label & { sig: Uint8Array };
+
+export function createModService(db: DatabaseSync) {
+  return {
+    insertLabel: (label: SignedLabel) => {
+      const result = db.prepare(
+        `INSERT INTO labels (src, uri, cid, val, neg, cts, exp, sig)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
+      ).run(
+        label.src,
+        label.uri,
+        label.cid ?? null,
+        label.val,
+        label.neg ? 1 : 0,
+        label.cts,
+        label.exp ?? null,
+        label.sig,
+      );
+      return result.lastInsertRowid as number;
+    },
+    getLabels: (opts: {
+      patterns: string[];
+      sources: string[];
+      limit: number;
+      cursor: number;
+    }): { rows: LabelRow[]; nextCursor: string } => {
+      const { patterns, sources, limit, cursor } = opts;
+      const conditions: string[] = [];
+      const params: (string | number | Uint8Array | null)[] = [];
+      if (patterns.length) {
+        conditions.push(
+          "(" + patterns.map(() => "uri LIKE ?").join(" OR ") + ")",
+        );
+        params.push(...patterns);
+      }
+      if (sources.length) {
+        conditions.push(`src IN (${sources.map(() => "?").join(", ")})`);
+        params.push(...sources);
+      }
+      if (cursor) {
+        conditions.push("id > ?");
+        params.push(cursor);
+      }
+      params.push(limit);
+      const whereClause = conditions.length
+        ? `WHERE ${conditions.join(" AND ")}`
+        : "";
+      const sql = `SELECT * FROM labels ${whereClause} ORDER BY id ASC LIMIT ?`;
+      const stmt = db.prepare(sql);
+      const rows = stmt.all(...params) as unknown[];
+      function rowToLabelRow(row: unknown): LabelRow {
+        if (typeof row !== "object" || row === null) {
+          throw new Error("Invalid row");
+        }
+        const r = row as Record<string, unknown>;
+        const src = typeof r.src === "string" ? r.src : "";
+        const uri = typeof r.uri === "string" ? r.uri : "";
+        let cid: string | null = null;
+        if (typeof r.cid === "string") cid = r.cid;
+        const val = typeof r.val === "string" ? r.val : "";
+        const cts = typeof r.cts === "string" ? r.cts : "";
+        let exp: string | null = null;
+        if (typeof r.exp === "string") exp = r.exp;
+        const neg = typeof r.neg === "boolean" ? r.neg : Number(r.neg) === 1;
+        let sig: Uint8Array;
+        if (r.sig instanceof Uint8Array) sig = r.sig;
+        else if (Array.isArray(r.sig)) sig = new Uint8Array(r.sig);
+        else sig = new Uint8Array();
+        const id = typeof r.id === "number" ? r.id : Number(r.id);
+        return { id, src, uri, cid, val, neg, cts, exp, sig };
+      }
+      const labelRows = rows.map(rowToLabelRow);
+      let nextCursor = "0";
+      if (rows.length > 0) {
+        const lastId = (rows[rows.length - 1] as Record<string, unknown>).id;
+        nextCursor = typeof lastId === "string" || typeof lastId === "number"
+          ? String(lastId)
+          : "0";
+      }
+      return { rows: labelRows, nextCursor };
+    },
+  };
+}
+
+export function createLabel(
+  cfg: Config,
+  modService: ReturnType<typeof createModService>,
+) {
+  return async (
+    label: UnsignedLabel,
+  ) => {
+    const serviceSigningKey = cfg.signingKey;
+    if (!serviceSigningKey) {
+      throw new Error("MOD_SERVICE_SIGNING_KEY is not set");
+    }
+    const signingKey = await Secp256k1Keypair.import(serviceSigningKey);
+
+    const signed = await signLabel(label, signingKey);
+
+    const id = modService.insertLabel(signed);
+    // Broadcast the label to all subscribers after insert
+    const labelRow: LabelRow = {
+      id: Number(id),
+      src: signed.src,
+      uri: signed.uri,
+      cid: signed.cid ?? null,
+      val: signed.val,
+      neg: signed.neg === true, // ensure boolean
+      cts: signed.cts,
+      exp: signed.exp ?? null,
+      sig: signed.sig,
+    };
+    broadcastLabel(labelRow);
+  };
+}
+
+const formatLabel = (row: LabelRow): Label => {
+  return noUndefinedVals(
+    {
+      ver: 1,
+      src: row.src,
+      uri: row.uri,
+      cid: row.cid === "" || row.cid === null ? undefined : row.cid,
+      val: row.val,
+      neg: row.neg === true ? true : undefined,
+      cts: row.cts,
+      exp: row.exp ?? undefined,
+      sig: row.sig ? new Uint8Array(row.sig) : undefined,
+    } satisfies Label,
+  ) as unknown as Label;
+};
+
+const signLabel = async (
+  label: Label,
+  signingKey: Keypair,
+): Promise<SignedLabel> => {
+  const { ver, src, uri, cid, val, neg, cts, exp } = label;
+  const reformatted = noUndefinedVals(
+    {
+      ver: ver ?? 1,
+      src,
+      uri,
+      cid,
+      val,
+      neg: neg === true ? true : undefined,
+      cts,
+      exp,
+    } satisfies Label,
+  ) as unknown as Label;
+
+  const bytes = cborEncode(reformatted);
+  const sig = await signingKey.sign(bytes);
+  return {
+    ...reformatted,
+    sig,
+  };
+};
+
+Deno.test("insertLabel inserts a signed label and returns an id", async () => {
+  const cfg = await createConfig();
+  const db = createDb(cfg);
+  const modService = createModService(db);
+
+  const label = {
+    src: "did:example:alice",
+    uri: "at://did:example:bob/app.bsky.feed.post/123",
+    val: "spam",
+    neg: false,
+    cts: new Date().toISOString(),
+    sig: new Uint8Array([1, 2, 3]),
+  };
+
+  const id = modService.insertLabel(label);
+  assertExists(id);
+
+  // Check that the label is in the database
+  const row = db.prepare("SELECT * FROM labels WHERE id = ?").get(id);
+  assertExists(row);
+  assertEquals(row.src, label.src);
+  assertEquals(row.uri, label.uri);
+  assertEquals(row.val, label.val);
+  assertEquals(row.neg, 0);
+  assertEquals(row.sig, label.sig);
+});
+
+Deno.test("signLabel produces a valid signature", async () => {
+  const cfg = await createConfig();
+  const keyHex = cfg.signingKey;
+  const signingKey = await Secp256k1Keypair.import(keyHex);
+
+  const label: Label = {
+    ver: 1,
+    src: "did:example:alice",
+    uri: "at://did:example:bob/app.bsky.feed.post/123",
+    val: "spam",
+    cts: new Date().toISOString(),
+  };
+
+  const signed = await signLabel(label, signingKey);
+
+  assertExists(signed.sig);
+  assertEquals(signed.src, label.src);
+  assertEquals(signed.uri, label.uri);
+  assertEquals(signed.val, label.val);
+});
+
+Deno.test("getLabels retrieves labels with filtering and pagination", async () => {
+  const cfg = await createConfig();
+  const db = createDb(cfg);
+  const modService = createModService(db);
+
+  // Insert some test labels
+  for (let i = 1; i <= 10; i++) {
+    modService.insertLabel({
+      src: "did:example:alice",
+      uri: `at://did:example:bob/app.bsky.feed.post/${i}`,
+      val: i % 2 === 0 ? "spam" : "scam",
+      neg: false,
+      cts: new Date().toISOString(),
+      sig: new Uint8Array([1, 2, 3]),
+    });
+  }
+
+  // Retrieve labels with limit and cursor
+  const { rows, nextCursor } = modService.getLabels({
+    patterns: ["at://did:example:bob/app.bsky.feed.post/%"],
+    sources: ["did:example:alice"],
+    limit: 5,
+    cursor: 0,
+  });
+
+  assertEquals(rows.length, 5);
+  assertEquals(nextCursor, "5");
+
+  // Retrieve next page
+  const { rows: nextRows } = modService.getLabels({
+    patterns: ["at://did:example:bob/app.bsky.feed.post/%"],
+    sources: ["did:example:alice"],
+    limit: 5,
+    cursor: parseInt(nextCursor, 10),
+  });
+
+  assertEquals(nextRows.length, 5);
+});
+
+export type ModService = ReturnType<typeof createModService>;

services/pds/pdsadmin-command.sh

···
 #     --header "Content-Type: application/json" \
 #     --user "admin:${PDS_ADMIN_PASSWORD}" \
 #     --data '{"useCount": 1}' \
-#     "https://${PDS_HOST}/xrpc/com.atproto.server.createInviteCode"
+#     "https://${PDS_HOSTNAME}/xrpc/com.atproto.server.createInviteCode"
 
 # delete an account
 # curl \
···
 #     --header "Content-Type: application/json" \
 #     --user "admin:${PDS_ADMIN_PASSWORD}" \
 #     --data "{\"did\": \"${DID}\"}" \
-#     "https://${PDS_HOST}/xrpc/com.atproto.admin.deleteAccount"
+#     "https://${PDS_HOSTNAME}/xrpc/com.atproto.admin.deleteAccount"

src/components/DefaultLabelerAvatar.tsx

···
+type DefaultLabelerAvatarProps = Readonly<{
+  size?: number;
+  backgroundColor?: string;
+  foregroundColor?: string;
+  class?: string;
+}>;
+
+export function DefaultLabelerAvatar({
+  size = 28,
+  backgroundColor = "rgb(139 92 246)", // Tailwind purple-500
+  foregroundColor = "#fff",
+  class: classProp,
+}: DefaultLabelerAvatarProps) {
+  return (
+    <svg
+      width={size}
+      height={size}
+      viewBox="0 0 512 512"
+      class={classProp}
+      aria-hidden="true"
+    >
+      {/* Square background */}
+      <rect
+        x="0"
+        y="0"
+        width="512"
+        height="512"
+        rx="64"
+        fill={backgroundColor}
+      />
+
+      {/* Shield icon (perfectly centered) */}
+      <g transform="translate(256, 280) scale(0.7) translate(-256, -256)">
+        <path
+          fill={foregroundColor}
+          d="M466.5 83.7 263.1 5.1c-5.9-2.2-12.3-2.2-18.2 0L45.5 83.7C36.6 87 30 95.7 30 105.3c0 198.6 114.6 289.7 221.2 325.7 4.5 1.5 9.3 1.5 13.8 0C367.4 395 482 303.9 482 105.3c0-9.6-6.6-18.3-15.5-21.6z"
+        />
+      </g>
+    </svg>
+  );
+}

src/components/GalleryPage.tsx

···
 import { AtUri } from "@atproto/syntax";
 import { WithBffMeta } from "@bigmoves/bff";
 import { Button } from "@bigmoves/bff/components";
+import { ModerationDecsion } from "../lib/moderation.ts";
 import { ActorInfo } from "./ActorInfo.tsx";
 import { FavoriteButton } from "./FavoriteButton.tsx";
 import { GalleryLayout } from "./GalleryLayout.tsx";
+import { ModerationWrapper } from "./ModerationWrapper.tsx";
 import { ShareGalleryButton } from "./ShareGalleryButton.tsx";
 
 export function GalleryPage({
   gallery,
   favs = [],
   currentUserDid,
+  modDecision,
 }: Readonly<{
   gallery: GalleryView;
   favs: WithBffMeta<Favorite>[];
   currentUserDid?: string;
+  modDecision?: ModerationDecsion;
 }>) {
   const isCreator = currentUserDid === gallery.creator.did;
   const isLoggedIn = !!currentUserDid;
···
           )
           : null}
       </div>
-      <GalleryLayout
-        layoutButtons={
-          <>
-            <GalleryLayout.ModeButton mode="justified" />
-            <GalleryLayout.ModeButton mode="masonry" />
-          </>
-        }
-      >
-        <GalleryLayout.Container>
-          {galleryItems?.length
-            ? galleryItems.map((photo) => (
-              <GalleryLayout.Item
-                key={photo.cid}
-                photo={photo}
-                gallery={gallery}
-              />
-            ))
-            : null}
-        </GalleryLayout.Container>
-      </GalleryLayout>
+      {
+        <ModerationWrapper moderationDecision={modDecision} class="mb-2">
+          <GalleryLayout
+            layoutButtons={
+              <>
+                <GalleryLayout.ModeButton mode="justified" />
+                <GalleryLayout.ModeButton mode="masonry" />
+              </>
+            }
+          >
+            <GalleryLayout.Container>
+              {galleryItems?.length
+                ? galleryItems.map((photo) => (
+                  <GalleryLayout.Item
+                    key={photo.cid}
+                    photo={photo}
+                    gallery={gallery}
+                  />
+                ))
+                : null}
+            </GalleryLayout.Container>
+          </GalleryLayout>
+        </ModerationWrapper>
+      }
     </div>
   );
 }

src/components/GalleryPreviewLink.tsx

···
         gallery.creator.handle,
         new AtUri(gallery.uri).rkey,
       )}
-      class={cn("flex w-full max-w-md aspect-[3/2] overflow-hidden", gap)}
+      class={cn("flex w-full aspect-[3/2] overflow-hidden", gap)}
     >
       <div class="w-2/3 h-full">
         <img

src/components/LabelDefinitionButton.tsx

···
+export function LabelDefinitionButton(
+  { src, val }: Readonly<{ src: string; val: string }>,
+) {
+  return (
+    <button
+      type="button"
+      class="text-sky-500 hover:underline cursor-pointer"
+      hx-get={`/dialogs/label/${src}/${val}`}
+      hx-trigger="click"
+      hx-target="#layout"
+      hx-swap="afterbegin"
+      _="on click halt"
+    >
+      Learn more
+    </button>
+  );
+}

src/components/LabelDefinitionDialog.tsx

···
+import { LabelValueDefinition } from "$lexicon/types/com/atproto/label/defs.ts";
+import { Dialog } from "@bigmoves/bff/components";
+import { profileLink } from "../utils.ts";
+
+export function LabelDefinitionDialog({
+  labelValueDefinition,
+  labelByHandle,
+}: Readonly<{
+  labelValueDefinition: LabelValueDefinition;
+  labelByHandle: string;
+}>) {
+  const enLocale = labelValueDefinition.locales?.find(
+    (locale) => locale.lang === "en",
+  );
+  return (
+    <Dialog id="mod-decision-dialog" class="z-100">
+      <Dialog.Content class="dark:bg-zinc-950 relative gap-2">
+        <Dialog.X class="fill-zinc-950 dark:fill-zinc-50" />
+        <Dialog.Title>{enLocale?.name}</Dialog.Title>
+        <p>{enLocale?.description}</p>
+        <p>
+          Source:{" "}
+          <a
+            href={profileLink(labelByHandle)}
+            class="text-sky-500 hover:underline"
+          >
+            @{labelByHandle}
+          </a>
+        </p>
+      </Dialog.Content>
+    </Dialog>
+  );
+}

src/components/LabelerAvatar.tsx

···
+import { ProfileView } from "$lexicon/types/social/grain/actor/defs.ts";
+import { Un$Typed } from "$lexicon/util.ts";
+import { cn } from "@bigmoves/bff/components";
+import { DefaultLabelerAvatar } from "./DefaultLabelerAvatar.tsx";
+
+export function LabelerAvatar({
+  profile,
+  size,
+  class: classProp,
+}: Readonly<
+  { profile: Un$Typed<ProfileView>; size?: number; class?: string }
+>) {
+  return (
+    profile.avatar
+      ? (
+        <img
+          src={profile.avatar}
+          alt={profile.handle}
+          title={profile.handle}
+          class={cn("rounded-full object-cover", classProp)}
+          style={size ? { width: size, height: size } : undefined}
+        />
+      )
+      : <DefaultLabelerAvatar size={size} class={classProp} />
+  );
+}

src/components/ModerationWrapper.tsx

···
+import { ComponentChildren } from "preact";
+import { ModerationDecsion } from "../lib/moderation.ts";
+import { LabelDefinitionButton } from "./LabelDefinitionButton.tsx";
+
+type ModerationWrapperProps = Readonly<{
+  class?: string;
+  moderationDecision?: ModerationDecsion;
+  children: ComponentChildren;
+}>;
+
+export function ModerationWrapper({
+  class: classProp,
+  moderationDecision,
+  children,
+}: ModerationWrapperProps) {
+  const id = crypto.randomUUID();
+  return (
+    moderationDecision
+      ? (
+        moderationDecision.isMe
+          ? (
+            <div>
+              <button
+                type="button"
+                hx-get={`/dialogs/label/${moderationDecision.src}/${moderationDecision.val}`}
+                hx-trigger="click"
+                hx-target="#layout"
+                hx-swap="afterbegin"
+                _="on click halt"
+                class="flex items-center gap-2 bg-zinc-200 dark:bg-zinc-800 p-2 text-sm mb-2"
+              >
+                <i class="fa fa-circle-info text-zinc-500" />
+                A label has been placed on this gallery
+              </button>
+              {children}
+            </div>
+          )
+          : (
+            <div
+              id={`moderation-wrapper-${id}`}
+              data-state="closed"
+              class={classProp}
+            >
+              <div class="bg-zinc-200 dark:bg-zinc-800 p-4 w-full">
+                <div class="flex items-center justify-between gap-2 w-full">
+                  <div class="flex items-center gap-2">
+                    <i class="fa fa-circle-info text-zinc-500"></i>
+                    <span class="text-sm">{moderationDecision?.name}</span>
+                  </div>
+                  <button
+                    type="button"
+                    class="text-sm font-semibold cursor-pointer"
+                    _={`
+          on click
+            toggle .hidden on #mod-content-${id}
+            if my innerText is 'Show'
+              put 'Hide' into me
+              then put 'open' into @data-state of #moderation-wrapper-${id}
+            else
+              put 'Show' into me
+              then put 'closed' into @data-state of #moderation-wrapper-${id}`}
+                  >
+                    Show
+                  </button>
+                </div>
+              </div>
+              <div class="text-sm my-2">
+                Labeled by @{moderationDecision?.labeledBy || "unknown"}.{" "}
+                <LabelDefinitionButton
+                  src={moderationDecision.src}
+                  val={moderationDecision.val}
+                />
+              </div>
+              <div id={`mod-content-${id}`} class="hidden">
+                {children}
+              </div>
+            </div>
+          )
+      )
+      : children
+  );
+}

src/components/ProfilePage.tsx

···
+import { LabelValueDefinition } from "$lexicon/types/com/atproto/label/defs.ts";
 import { ProfileView } from "$lexicon/types/social/grain/actor/defs.ts";
 import { Record as Gallery } from "$lexicon/types/social/grain/gallery.ts";
 import { GalleryView } from "$lexicon/types/social/grain/gallery/defs.ts";
 import { isPhotoView } from "$lexicon/types/social/grain/photo/defs.ts";
 import { Un$Typed } from "$lexicon/util.ts";
 import { AtUri } from "@atproto/syntax";
+import { LabelerPolicies } from "@bigmoves/bff";
 import { Button, cn } from "@bigmoves/bff/components";
+import {
+  atprotoLabelValueDefinitions,
+  ModerationDecsion,
+} from "../lib/moderation.ts";
 import type { SocialNetwork } from "../lib/timeline.ts";
 import {
   bskyProfileLink,
···
 import { ActorAvatar } from "./ActorAvatar.tsx";
 import { AvatarButton } from "./AvatarButton.tsx";
 import { FollowButton } from "./FollowButton.tsx";
+import { LabelDefinitionButton } from "./LabelDefinitionButton.tsx";
+import { LabelerAvatar } from "./LabelerAvatar.tsx";
 
-export type ProfileTabs = "favs" | "galleries";
+export type ProfileTabs = "favs" | "galleries" | "labels";
 
 export function ProfilePage({
   followUri,
···
   selectedTab,
   galleries,
   galleryFavs,
+  galleryModDecisionsMap = new Map(),
+  isLabeler,
+  labelerDefinitions,
 }: Readonly<{
   followUri?: string;
   followersCount?: number;
···
   selectedTab?: ProfileTabs;
   galleries?: GalleryView[];
   galleryFavs?: GalleryView[];
+  galleryModDecisionsMap?: Map<string, ModerationDecsion>;
+  isLabeler?: boolean;
+  labelerDefinitions?: LabelerPolicies;
 }>) {
   const isCreator = loggedInUserDid === profile.did;
   const displayName = profile.displayName || profile.handle;
···
     <div class="px-4 mb-4" id="profile-page">
       <div class="flex flex-col sm:flex-row sm:items-center sm:justify-between my-4">
         <div class="flex flex-col mb-4">
-          <AvatarButton profile={profile} />
+          {isLabeler
+            ? <LabelerAvatar profile={profile} size={64} />
+            : <AvatarButton profile={profile} />}
           <p class="text-2xl font-bold">{displayName}</p>
           <p class="text-zinc-600 dark:text-zinc-500">@{profile.handle}</p>
-          <p class="space-x-1">
-            <a href={followersLink(profile.handle)}>
-              <span class="font-semibold" id="followers-count">
-                {followersCount ?? 0}
-              </span>{" "}
-              <span class="text-zinc-600 dark:text-zinc-500">followers</span>
-            </a>{" "}
-            <a href={followingLink(profile.handle)}>
-              <span class="font-semibold" id="following-count">
-                {followingCount ?? 0}
-              </span>{" "}
-              <span class="text-zinc-600 dark:text-zinc-500">following</span>
-            </a>{" "}
-            <span class="font-semibold">{galleries?.length ?? 0}</span>
-            <span class="text-zinc-600 dark:text-zinc-500">galleries</span>
-          </p>
+          {!isLabeler && (
+            <p class="space-x-1">
+              <a href={followersLink(profile.handle)}>
+                <span class="font-semibold" id="followers-count">
+                  {followersCount ?? 0}
+                </span>{" "}
+                <span class="text-zinc-600 dark:text-zinc-500">followers</span>
+              </a>{" "}
+              <a href={followingLink(profile.handle)}>
+                <span class="font-semibold" id="following-count">
+                  {followingCount ?? 0}
+                </span>{" "}
+                <span class="text-zinc-600 dark:text-zinc-500">following</span>
+              </a>{" "}
+              <span class="font-semibold">{galleries?.length ?? 0}</span>
+              <span class="text-zinc-600 dark:text-zinc-500">galleries</span>
+            </p>
+          )}
           {profile.description
             ? <p class="mt-2 sm:max-w-[500px]">{profile.description}</p>
             : null}
···
             )}
           </p>
         </div>
-        {!isCreator && loggedInUserDid
+        {!isCreator && !isLabeler && loggedInUserDid
           ? (
             <div class="flex self-start gap-2 w-full sm:w-fit flex-col sm:flex-row">
               <FollowButton
···
         role="tablist"
         style={{ WebkitOverflowScrolling: "touch" }}
       >
-        <button
-          type="button"
-          name="tab"
-          value="galleries"
-          hx-get={profileLink(profile.handle)}
-          hx-target="#profile-page"
-          hx-swap="outerHTML"
-          class={cn(
-            "flex-1 min-w-[120px] py-2 px-4 cursor-pointer font-semibold",
-            selectedTab === "galleries" && "bg-zinc-100 dark:bg-zinc-800",
+        {isLabeler
+          ? (
+            <button
+              type="button"
+              name="tab"
+              value="favs"
+              hx-get={profileLink(profile.handle)}
+              hx-target="#profile-page"
+              hx-swap="outerHTML"
+              class={cn(
+                "flex-1 min-w-[120px] py-2 px-4 cursor-pointer font-semibold",
+                selectedTab === "labels" && "bg-zinc-100 dark:bg-zinc-800",
+              )}
+              role="tab"
+              aria-selected={selectedTab === "labels"}
+              aria-controls="tab-content"
+            >
+              Labels
+            </button>
+          )
+          : (
+            <button
+              type="button"
+              name="tab"
+              value="galleries"
+              hx-get={profileLink(profile.handle)}
+              hx-target="#profile-page"
+              hx-swap="outerHTML"
+              class={cn(
+                "flex-1 min-w-[120px] py-2 px-4 cursor-pointer font-semibold",
+                selectedTab === "galleries" && "bg-zinc-100 dark:bg-zinc-800",
+              )}
+              role="tab"
+              aria-selected={selectedTab === "galleries"}
+              aria-controls="tab-content"
+            >
+              Galleries
+            </button>
           )}
-          role="tab"
-          aria-selected={selectedTab === "galleries"}
-          aria-controls="tab-content"
-        >
-          Galleries
-        </button>
+
         {isCreator && (
           <button
             type="button"
···
             Favs
           </button>
         )}
-        {
-          /* <button
-          type="button"
-          hx-get={profileLink(profile.handle)}
-          hx-target="body"
-          hx-swap="outerHTML"
-          class={cn(
-            "flex-1 min-w-[120px] py-2 px-4 cursor-pointer font-semibold",
-            !selectedTab && "bg-zinc-100 dark:bg-zinc-800 font-semibold",
-          )}
-          role="tab"
-          aria-selected={!selectedTab}
-          aria-controls="tab-content"
-          hx-push-url="true"
-        >
-          Activity
-        </button> */
-        }
       </div>
-      <div id="tab-content" role="tabpanel">
-        {selectedTab === "galleries"
-          ? (
-            <div class="grid grid-cols-1 sm:grid-cols-3 gap-2 mb-4">
-              {galleries?.length
-                ? (
-                  galleries.map((gallery) => (
-                    <a
-                      href={galleryLink(
-                        gallery.creator.handle,
-                        new AtUri(gallery.uri).rkey,
-                      )}
-                      class="cursor-pointer relative aspect-square"
-                    >
-                      {gallery.items?.length
-                        ? (
-                          <img
-                            src={gallery.items?.filter(isPhotoView)?.[0]
-                              ?.fullsize}
-                            alt={gallery.items?.filter(isPhotoView)?.[0]?.alt}
-                            class="w-full h-full object-cover"
-                          />
-                        )
-                        : (
-                          <div class="w-full h-full bg-zinc-200 dark:bg-zinc-900" />
-                        )}
-                      <div class="absolute bottom-0 left-0 bg-black/80 text-white p-2">
-                        {(gallery.record as Gallery).title}
-                      </div>
-                    </a>
-                  ))
-                )
-                : <p>No galleries yet.</p>}
-            </div>
-          )
-          : null}
-        {selectedTab === "favs"
-          ? (
-            <div class="grid grid-cols-1 sm:grid-cols-3 gap-2 mb-4">
-              {galleryFavs?.length
-                ? (
-                  galleryFavs.map((gallery) => (
-                    <a
-                      href={galleryLink(
-                        gallery.creator.handle,
-                        new AtUri(gallery.uri).rkey,
-                      )}
-                      class="cursor-pointer relative aspect-square"
-                    >
-                      {gallery.items?.length
-                        ? (
-                          <img
-                            src={gallery.items?.filter(isPhotoView)?.[0]
-                              ?.fullsize}
-                            alt={gallery.items?.filter(isPhotoView)?.[0]?.alt}
-                            class="w-full h-full object-cover"
-                          />
-                        )
-                        : (
-                          <div class="w-full h-full bg-zinc-200 dark:bg-zinc-900" />
-                        )}
-                      <div class="absolute bottom-0 left-0 bg-black/80 text-white p-2 flex items-center gap-2">
-                        <ActorAvatar profile={gallery.creator} size={20} />{" "}
-                        {(gallery.record as Gallery).title}
-                      </div>
-                    </a>
-                  ))
-                )
-                : <p>No favs yet.</p>}
+      {selectedTab === "labels" && labelerDefinitions
+        ? <LabelerPoliciesList defs={labelerDefinitions} />
+        : null}
+      {selectedTab === "galleries"
+        ? (
+          <div class="grid grid-cols-1 sm:grid-cols-3 gap-2 mb-4">
+            {galleries?.length
+              ? (
+                galleries.map((gallery) => (
+                  <GalleryItem
+                    key={gallery.uri}
+                    gallery={gallery}
+                    galleryModDecisionsMap={galleryModDecisionsMap}
+                  />
+                ))
+              )
+              : <p>No galleries yet.</p>}
+          </div>
+        )
+        : null}
+      {selectedTab === "favs"
+        ? (
+          <div class="grid grid-cols-1 sm:grid-cols-3 gap-2 mb-4">
+            {galleryFavs?.length
+              ? (
+                galleryFavs.map((gallery) => (
+                  <GalleryFavItem
+                    key={gallery.uri}
+                    gallery={gallery}
+                    galleryModDecisionsMap={galleryModDecisionsMap}
+                  />
+                ))
+              )
+              : <p>No favs yet.</p>}
+          </div>
+        )
+        : null}
+    </div>
+  );
+}
+
+function LabelerPoliciesList({ defs }: Readonly<{ defs: LabelerPolicies }>) {
+  if (!defs?.labelValues?.length) return <p>No labels yet.</p>;
+  return (
+    <ul class="space-y-4 relative divide-zinc-200 dark:divide-zinc-800 divide-y">
+      {defs?.labelValues?.map((val) => {
+        let def = defs?.labelValueDefinitions?.find((def) =>
+          def.identifier === val
+        );
+        // Fallback to atproto definitions if not found
+        def ??= atprotoLabelValueDefinitions[val];
+        if (!def) return null;
+        return <LabelValueDefinitionListItem key={def.identifier} def={def} />;
+      })}
+    </ul>
+  );
+}
+
+function LabelValueDefinitionListItem({
+  def,
+}: Readonly<{ def: LabelValueDefinition }>) {
+  const enLocale = def.locales.find((v) => v.lang === "en");
+  return (
+    <li class="flex flex-col pb-4 gap-2">
+      <div class="font-semibold">{enLocale?.name}</div>
+      <div>{enLocale?.description}</div>
+      {def.adultOnly
+        ? (
+          <div class="flex items-center gap-2 text-sm">
+            <i class="fa fa-info-circle" />{" "}
+            <span>Adult content is disabled.</span>
+          </div>
+        )
+        : null}
+      <div class="text-sm">
+        Default setting:{" "}
+        <span class="font-semibold">
+          {def.defaultSetting || "No default value set"}
+        </span>
+      </div>
+    </li>
+  );
+}
+
+function GalleryItem({
+  gallery,
+  galleryModDecisionsMap,
+}: Readonly<{
+  gallery: GalleryView;
+  galleryModDecisionsMap: Map<string, ModerationDecsion>;
+}>) {
+  const modDecision = galleryModDecisionsMap.get(gallery.uri);
+  return (
+    <a
+      href={galleryLink(
+        gallery.creator.handle,
+        new AtUri(gallery.uri).rkey,
+      )}
+      class="cursor-pointer relative aspect-square"
+    >
+      {modDecision && !modDecision.isMe
+        ? (
+          <div class="w-full h-full bg-zinc-200 dark:bg-zinc-900 p-2 text-sm">
+            <i class="fa fa-circle-info text-zinc-500"></i> {modDecision.name}
+            <div class="text-sm">
+              Labeled by @{modDecision?.labeledBy || "unknown"}.{" "}
+              <LabelDefinitionButton
+                src={modDecision.src}
+                val={modDecision.val}
+              />
             </div>
-          )
-          : null}
-        {
-          /* {!selectedTab
-          ? (
-            <ul class="space-y-4 relative divide-zinc-200 dark:divide-zinc-800 divide-y w-fit">
-              {timelineItems.length
-                ? (
-                  timelineItems.map((item) => (
-                    <Item item={item} key={item.itemUri} />
-                  ))
-                )
-                : <li>No activity yet.</li>}
-            </ul>
-          )
-          : null} */
-        }
+          </div>
+        )
+        : gallery.items?.length
+        ? (
+          <img
+            src={gallery.items?.filter(isPhotoView)?.[0]?.fullsize}
+            alt={gallery.items?.filter(isPhotoView)?.[0]?.alt}
+            class="w-full h-full object-cover"
+          />
+        )
+        : <div class="w-full h-full bg-zinc-200 dark:bg-zinc-900" />}
+      <div class="absolute bottom-0 left-0 bg-black/80 text-white p-2 flex items-center gap-2">
+        {(gallery.record as Gallery).title}
+      </div>
+    </a>
+  );
+}
+
+function GalleryFavItem({
+  gallery,
+  galleryModDecisionsMap,
+}: Readonly<{
+  gallery: GalleryView;
+  galleryModDecisionsMap: Map<string, ModerationDecsion>;
+}>) {
+  return (
+    <a
+      href={galleryLink(
+        gallery.creator.handle,
+        new AtUri(gallery.uri).rkey,
+      )}
+      class="cursor-pointer relative aspect-square"
+    >
+      {gallery.items?.length
+        ? (
+          <img
+            src={gallery.items?.filter(isPhotoView)?.[0]?.fullsize}
+            alt={gallery.items?.filter(isPhotoView)?.[0]?.alt}
+            class="w-full h-full object-cover"
+          />
+        )
+        : <div class="w-full h-full bg-zinc-200 dark:bg-zinc-900" />}
+      <div class="absolute bottom-0 left-0 bg-black/80 text-white p-2 flex items-center gap-2">
+        <ActorAvatar profile={gallery.creator} size={20} />{" "}
+        {(gallery.record as Gallery).title}
       </div>
-    </div>
+    </a>
   );
 }

src/components/Timeline.tsx

···
                   </form>
                 )
                 : null}
-              <ul class="space-y-4 relative divide-zinc-200 dark:divide-zinc-800 divide-y w-fit">
+              <ul class="space-y-4 relative divide-zinc-200 dark:divide-zinc-800 divide-y sm:w-fit">
                 {items.length > 0
                   ? items.map((item) => <Item item={item} key={item.itemUri} />)
                   : (

src/components/TimelineItem.tsx

···
 import { formatRelativeTime, galleryLink } from "../utils.ts";
 import { ActorInfo } from "./ActorInfo.tsx";
 import { GalleryPreviewLink } from "./GalleryPreviewLink.tsx";
+import { ModerationWrapper } from "./ModerationWrapper.tsx";
 
 export function TimelineItem({ item }: Readonly<{ item: TimelineItem }>) {
   return (
     <li>
-      <div class="w-fit flex flex-col gap-4 pb-4">
+      <div class="flex flex-col gap-4 pb-4 max-w-md">
         <div class="flex items-center justify-between gap-2 w-full">
           <ActorInfo profile={item.actor} />
           <span class="shrink-0">
···
         </div>
         {item.gallery.items?.filter(isPhotoView).length
           ? (
-            <GalleryPreviewLink
-              gallery={item.gallery}
-            />
+            <ModerationWrapper
+              moderationDecision={item.modDecision}
+              class="gap-2 sm:min-w-md"
+            >
+              <GalleryPreviewLink
+                gallery={item.gallery}
+              />
+            </ModerationWrapper>
           )
           : null}
         <p class="w-full flex items-baseline gap-1">
-          {item.itemType === "favorite" ? "Favorited" : "Created"}{" "}
+          Created{" "}
           <a
             href={galleryLink(
               item.gallery.creator.handle,

src/lib/actor.ts

···
 import { Record as BskyProfile } from "$lexicon/types/app/bsky/actor/profile.ts";
+import { Label } from "$lexicon/types/com/atproto/label/defs.ts";
 import { Record as TangledProfile } from "$lexicon/types/sh/tangled/actor/profile.ts";
 import { ProfileView } from "$lexicon/types/social/grain/actor/defs.ts";
 import { Record as GrainProfile } from "$lexicon/types/social/grain/actor/profile.ts";
···
 
   const galleryPhotosMap = getGalleryItemsAndPhotos(ctx, galleries);
   const creator = getActorProfile(did, ctx);
+  const labelMap = new Map<string, Label[]>();
+  for (const gallery of galleries) {
+    const labels = ctx.indexService.queryLabels({ subjects: [gallery.uri] });
+    labelMap.set(gallery.uri, labels);
+  }
 
   if (!creator) return [];
 
   return galleries.map((gallery) =>
-    galleryToView(gallery, creator, galleryPhotosMap.get(gallery.uri) ?? [])
+    galleryToView(
+      gallery,
+      creator,
+      galleryPhotosMap.get(gallery.uri) ?? [],
+      labelMap.get(gallery.uri) ?? [],
+    )
   );
 }
 
···
     new Set(galleries.map((gallery) => gallery.did)),
   );
 
+  const labelMap = new Map<string, Label[]>();
+  for (const gallery of galleries) {
+    const labels = ctx.indexService.queryLabels({ subjects: [gallery.uri] });
+    labelMap.set(gallery.uri, labels);
+  }
+
   const { items: profiles } = ctx.indexService.getRecords<
     WithBffMeta<GrainProfile>
   >(
···
         gallery,
         creator,
         galleryPhotosMap.get(gallery.uri) ?? [],
+        labelMap.get(gallery.uri) ?? [],
       );
     })
     .filter((g) => g !== null);

src/lib/gallery.ts

···
+import { Label } from "$lexicon/types/com/atproto/label/defs.ts";
 import { ProfileView } from "$lexicon/types/social/grain/actor/defs.ts";
 import { Record as Favorite } from "$lexicon/types/social/grain/favorite.ts";
 import { Record as Gallery } from "$lexicon/types/social/grain/gallery.ts";
···
   const galleryPhotosMap = getGalleryItemsAndPhotos(ctx, [gallery]);
   const profile = getActorProfile(did, ctx);
   if (!profile) return null;
+  const labels = ctx.indexService.queryLabels({
+    subjects: [gallery.uri],
+  });
   return galleryToView(
     gallery,
     profile,
     galleryPhotosMap.get(gallery.uri) ?? [],
+    labels,
   );
 }
 
···
   record: WithBffMeta<Gallery>,
   creator: Un$Typed<ProfileView>,
   items: Photo[],
+  labels: Label[] = [],
 ): Un$Typed<GalleryView> {
   return {
     uri: record.uri,
···
     items: items
       ?.map((item) => itemToView(record.did, item))
       .filter(isPhotoView),
+    labels,
     indexedAt: record.indexedAt,
   };
 }

src/lib/moderation.ts

···
+import {
+  Label,
+  LabelValueDefinition,
+} from "$lexicon/types/com/atproto/label/defs.ts";
+import { AtUri } from "@atproto/syntax";
+import { BffContext } from "@bigmoves/bff";
+import { State } from "../state.ts";
+
+export type ModerationDecsion = {
+  name: string;
+  description: string;
+  labeledBy: string;
+  blurs: string;
+  isMe: boolean;
+  src: string;
+  val: string;
+};
+
+export async function moderateGallery(labels: Label[], ctx: BffContext<State>) {
+  const did = ctx.currentUser?.did;
+  const labelDefinitions = await ctx.getLabelerDefinitions();
+
+  for (const label of labels ?? []) {
+    const labelSubject = new AtUri(label.uri).hostname;
+    const labelerAtpData = await ctx.didResolver.resolveAtprotoData(label.src);
+    // Try labelDefinitions first, then fallback to atprotoLabelValueDefinitions
+    let defs = labelDefinitions[label.src]?.labelValueDefinitions?.filter((
+      def,
+    ) => def.identifier === label.val);
+    if (
+      (!defs || defs.length === 0) && atprotoLabelValueDefinitions[label.val]
+    ) {
+      defs = [atprotoLabelValueDefinitions[label.val]];
+    }
+    if (defs && defs.length > 0) {
+      const enLocale = defs[0].locales?.find((locale) => locale.lang === "en");
+      if (enLocale) {
+        return {
+          name: enLocale.name,
+          description: enLocale.description,
+          labeledBy: labelerAtpData.handle ?? label.src,
+          blurs: defs[0].blurs ?? "",
+          isMe: labelSubject === did,
+          src: label.src,
+          val: label.val,
+        };
+      }
+    }
+  }
+  return undefined;
+}
+
+export async function isLabeler(did: string, ctx: BffContext<State>) {
+  const labelDefinitions = await ctx.getLabelerDefinitions();
+  return Object.keys(labelDefinitions).includes(did);
+}
+
+export const atprotoLabelValueDefinitions: Record<
+  string,
+  LabelValueDefinition
+> = {
+  porn: {
+    blurs: "media",
+    severity: "high",
+    identifier: "porn",
+    adultOnly: true,
+    defaultSetting: "hide",
+    locales: [
+      {
+        lang: "en",
+        name: "Adult Content",
+        description: "Explicit sexual images.",
+      },
+    ],
+  },
+  sexual: {
+    blurs: "media",
+    severity: "high",
+    identifier: "porn",
+    adultOnly: true,
+    defaultSetting: "hide",
+    locales: [
+      {
+        lang: "en",
+        name: "Sexually Suggestive",
+        description: "Does not include nudity.",
+      },
+    ],
+  },
+  nudity: {
+    blurs: "media",
+    severity: "high",
+    identifier: "porn",
+    adultOnly: true,
+    defaultSetting: "hide",
+    locales: [
+      {
+        lang: "en",
+        name: "Non-sexual Nudity",
+        description: "E.g. artistic nudes.",
+      },
+    ],
+  },
+};

src/lib/timeline.ts

···
 import { BffContext, QueryOptions, WithBffMeta } from "@bigmoves/bff";
 import { getActorProfile } from "./actor.ts";
 import { galleryToView, getGalleryItemsAndPhotos } from "./gallery.ts";
+import { moderateGallery, ModerationDecsion } from "./moderation.ts";
 
 export type TimelineItemType = "gallery";
 
···
   itemUri: string;
   actor: Un$Typed<ProfileView>;
   gallery: GalleryView;
+  modDecision?: ModerationDecsion;
 };
 
 type TimelineOptions = {
···
   followingDids?: Set<string>;
 };
 
-function processGalleries(
+async function processGalleries(
   ctx: BffContext,
   options?: TimelineOptions,
-): TimelineItem[] {
+): Promise<TimelineItem[]> {
   const items: TimelineItem[] = [];
 
   let whereClause: QueryOptions["where"] = options?.actorDid
···
       new AtUri(gallery.uri).rkey
     }`;
     const galleryPhotos = galleryPhotosMap.get(galleryUri) || [];
+    const labels = ctx.indexService.queryLabels({
+      subjects: [gallery.uri],
+    });
+    const galleryView = galleryToView(gallery, profile, galleryPhotos, labels);
+
+    let modDecision: ModerationDecsion | undefined = undefined;
+    if (galleryView.labels?.length) {
+      modDecision = await moderateGallery(labels, ctx);
+    }
 
-    const galleryView = galleryToView(gallery, profile, galleryPhotos);
     items.push({
       itemType: "gallery",
       createdAt: gallery.createdAt,
       itemUri: galleryView.uri,
       actor: galleryView.creator,
       gallery: galleryView,
+      modDecision,
     });
   }
 
   return items;
 }
 
-function getTimelineItems(
+async function getTimelineItems(
   ctx: BffContext,
   options?: TimelineOptions,
-): TimelineItem[] {
-  const galleryItems = processGalleries(ctx, options);
+): Promise<TimelineItem[]> {
+  const galleryItems = await processGalleries(ctx, options);
   return galleryItems.sort(
     (a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),
   );
···
   return new Set(follows.map((f) => f.subject).filter(Boolean));
 }
 
-export function getTimeline(
+export async function getTimeline(
   ctx: BffContext,
   type: "timeline" | "following",
   graph: SocialNetwork,
-): TimelineItem[] {
+): Promise<TimelineItem[]> {
   let followingDids: Set<string> | undefined = undefined;
   if (type === "following") {
     followingDids = getFollowingDids(graph, ctx);
   }
-  const galleryItems = processGalleries(ctx, { followingDids });
+  const galleryItems = await processGalleries(ctx, { followingDids });
   return galleryItems.sort(
     (a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),
   );

src/main.tsx

···
 import { PDS_HOST_URL } from "./env.ts";
 import { onError } from "./lib/errors.ts";
 import * as actionHandlers from "./routes/actions.tsx";
+import { handler as communityGuidelinesHandler } from "./routes/community_guidelines.tsx";
 import * as dialogHandlers from "./routes/dialogs.tsx";
 import { handler as exploreHandler } from "./routes/explore.tsx";
 import { handler as followersHandler } from "./routes/followers.tsx";
···
 
 bff({
   appName: "Grain Social",
+  appLabelers: ["did:plc:nd45zozo34cr4pvxqu4rtr7e"],
+  appLabelerCollection: "social.grain.labeler.service",
   collections: [
     "social.grain.gallery",
     "social.grain.actor.profile",
···
     route("/support/privacy", legalHandlers.privacyHandler),
     route("/support/terms", legalHandlers.termsHandler),
     route("/support/copyright", legalHandlers.copyrightHandler),
+    route("/support/community-guidelines", communityGuidelinesHandler),
     route("/dialogs/create-account", dialogHandlers.createAccount),
     route("/dialogs/gallery/new", dialogHandlers.createGallery),
     route("/dialogs/gallery/:rkey", dialogHandlers.editGallery),
     route("/dialogs/gallery/:rkey/sort", dialogHandlers.sortGallery),
+    route("/dialogs/label/:src/:val", dialogHandlers.labelValueDefinition),
     route("/dialogs/profile", dialogHandlers.editProfile),
     route("/dialogs/avatar/:handle", dialogHandlers.avatar),
     route("/dialogs/image", dialogHandlers.image),

src/routes/community_guidelines.tsx

···
+import { BffContext, RouteHandler } from "@bigmoves/bff";
+import { ComponentChildren } from "preact";
+import { Breadcrumb } from "../components/Breadcrumb.tsx";
+import { State } from "../state.ts";
+
+export const handler: RouteHandler = (
+  _req,
+  _params,
+  ctx: BffContext<State>,
+) => {
+  ctx.state.meta = [
+    { title: "Community Guidelines — Grain" },
+  ];
+  return ctx.render(
+    <div className="px-4 py-4">
+      <Breadcrumb
+        items={[{ label: "support", href: "/support" }, {
+          label: "community guidelines",
+        }]}
+      />
+      <h1 className="text-3xl font-bold mb-6 text-zinc-900 dark:text-white">
+        Community Guidelines
+      </h1>
+      <Section title="About Grain Social">
+        <p>
+          Grain Social is a photo-sharing service built on the AT Protocol.
+          These guidelines apply specifically to Grain Social. While the
+          protocol is decentralized and supports many independent services, our
+          focus is on fostering a respectful, creative, and safe experience
+          within our app.
+        </p>
+      </Section>
+
+      <Section title="Our Principles">
+        <ul className="list-disc pl-5 space-y-1">
+          <li>
+            <strong>User choice</strong>: We are committed to empowering users
+            with control over where their data is stored, how their content is
+            moderated, and which algorithms power their feeds (hopefully more
+            options soon!).
+          </li>
+          <li>
+            <strong>Welcoming space</strong>: We aim to build a friendly,
+            inclusive environment where people enjoy sharing and discovering
+            photos.
+          </li>
+          <li>
+            <strong>Evolving standards</strong>: Our policies will adapt over
+            time based on your feedback and the needs of the community.
+          </li>
+        </ul>
+      </Section>
+
+      <Section title="What’s Not Allowed">
+        <p>
+          Don't use Grain Social to break the law, harm others, or disrupt the
+          network. Specifically, do not:
+        </p>
+        <ul className="list-disc pl-5 space-y-1">
+          <li>Promote hate groups or terrorism</li>
+          <li>
+            Share child sexual abuse material or any sexual content involving
+            minors
+          </li>
+          <li>Engage in trafficking, exploitation, or predatory behavior</li>
+          <li>Trade illegal goods or substances</li>
+          <li>Share private personal info without consent</li>
+          <li>Hack, phish, scam, or impersonate others</li>
+          <li>Spam, abuse automation, or manipulate engagement</li>
+          <li>Violate copyrights or trademarks</li>
+          <li>Spread false or misleading election info</li>
+          <li>
+            Evade moderation actions (e.g., ban evasion) by creating new
+            accounts
+          </li>
+        </ul>
+      </Section>
+
+      <Section title="Respect Others">
+        <p>We expect respectful conduct. This includes avoiding:</p>
+        <ul className="list-disc pl-5 space-y-1">
+          <li>Harassment, bullying, or targeted abuse</li>
+          <li>Hate speech or extremist content</li>
+          <li>Threats of violence or glorification of harm</li>
+          <li>Promotion of self-harm or suicide</li>
+          <li>Graphic violence or non-consensual sexual content</li>
+          <li>Misleading impersonation of individuals or organizations</li>
+        </ul>
+      </Section>
+
+      <Section title="Reporting Violations">
+        <p>
+          Help us keep the community safe. You can report photos, galleries, or
+          accounts directly through the app (soon!) or by contacting us at{" "}
+          <a
+            href="mailto:[e-mail]"
+            className="text-sky-500 underline hover:underline"
+          >
+            [e-mail]
+          </a>
+          . Our moderation team will review and take action where needed.
+          Reports may consider off-platform context when relevant.
+        </p>
+      </Section>
+    </div>,
+  );
+};
+
+type SectionProps = {
+  title: string;
+  children: ComponentChildren;
+};
+
+const Section = ({ title, children }: SectionProps) => (
+  <section className="mb-8">
+    <h2 className="text-xl font-bold mb-2 text-zinc-800 dark:text-zinc-100">
+      {title}
+    </h2>
+    <div className="space-y-2 text-zinc-700 dark:text-zinc-300">
+      {children}
+    </div>
+  </section>
+);

src/routes/dialogs.tsx

···
 import { CreateAccountDialog } from "../components/CreateAccountDialog.tsx";
 import { GalleryCreateEditDialog } from "../components/GalleryCreateEditDialog.tsx";
 import { GallerySortDialog } from "../components/GallerySortDialog.tsx";
+import { LabelDefinitionDialog } from "../components/LabelDefinitionDialog.tsx";
 import { PhotoAltDialog } from "../components/PhotoAltDialog.tsx";
 import { PhotoDialog } from "../components/PhotoDialog.tsx";
 import { PhotoSelectDialog } from "../components/PhotoSelectDialog.tsx";
 import { ProfileDialog } from "../components/ProfileDialog.tsx";
 import { getActorPhotos, getActorProfile } from "../lib/actor.ts";
 import { getGallery, getGalleryItemsAndPhotos } from "../lib/gallery.ts";
+import { atprotoLabelValueDefinitions } from "../lib/moderation.ts";
 import { photoToView } from "../lib/photo.ts";
 import type { State } from "../state.ts";
 
···
 ) => {
   return ctx.html(<CreateAccountDialog />);
 };
+
+export const labelValueDefinition: RouteHandler = async (
+  _req,
+  params,
+  ctx: BffContext<State>,
+) => {
+  const src = params.src;
+  const val = params.val;
+  const labelerDeinitionsMap = await ctx.getLabelerDefinitions();
+  if (!labelerDeinitionsMap) return ctx.next();
+  const labelValueDefinitions = labelerDeinitionsMap[src]
+    ?.labelValueDefinitions;
+  if (!labelValueDefinitions) return ctx.next();
+
+  let valDef = labelValueDefinitions.find((def) => def.identifier === val);
+  if (!valDef && typeof val === "string") {
+    valDef = atprotoLabelValueDefinitions[val];
+  }
+
+  if (!valDef) return ctx.next();
+  const labelerAtpData = await ctx.didResolver.resolveAtprotoData(src);
+  return ctx.html(
+    <LabelDefinitionDialog
+      labelByHandle={labelerAtpData?.handle}
+      labelValueDefinition={valDef}
+    />,
+  );
+};

src/routes/explore.tsx

···
 import { Input } from "@bigmoves/bff/components";
 import { ComponentChildren } from "preact";
 import { ActorAvatar } from "../components/ActorAvatar.tsx";
+import { LabelerAvatar } from "../components/LabelerAvatar.tsx";
 import { profileToView } from "../lib/actor.ts";
 import { getPageMeta } from "../meta.ts";
 import type { State } from "../state.ts";
···
         {profileViews.map((profile) => (
           <li key={profile.did}>
             <a class="flex items-center" href={`/profile/${profile.handle}`}>
-              <ActorAvatar profile={profile} size={32} class="mr-2" />
+              {/* @TODO remove hard-coded handler */}
+              {profile.handle === "moderation.grain.social"
+                ? <LabelerAvatar profile={profile} size={32} class="mr-2" />
+                : <ActorAvatar profile={profile} size={32} class="mr-2" />}
               <div class="flex flex-col">
                 <div class="font-semibold">
                   {profile.displayName || profile.handle}

src/routes/gallery.tsx

···
 import { BffContext, RouteHandler, WithBffMeta } from "@bigmoves/bff";
 import { GalleryPage } from "../components/GalleryPage.tsx";
 import { getGallery, getGalleryFavs } from "../lib/gallery.ts";
+import { moderateGallery, ModerationDecsion } from "../lib/moderation.ts";
 import { getGalleryMeta, getPageMeta } from "../meta.ts";
 import type { State } from "../state.ts";
 import { galleryLink } from "../utils.ts";
 
-export const handler: RouteHandler = (
+export const handler: RouteHandler = async (
   _req,
   params,
   ctx: BffContext<State>,
···
 
   ctx.state.scripts = ["photo_dialog.js", "masonry.js", "sortable.js"];
 
+  let modDecision: ModerationDecsion | undefined = undefined;
+  if (gallery.labels?.length) {
+    modDecision = await moderateGallery(gallery.labels ?? [], ctx);
+  }
+
   return ctx.render(
-    <GalleryPage favs={favs} gallery={gallery} currentUserDid={did} />,
+    <GalleryPage
+      favs={favs}
+      gallery={gallery}
+      currentUserDid={did}
+      modDecision={modDecision}
+    />,
   );
 };

src/routes/profile.tsx

···
-import { BffContext, RouteHandler } from "@bigmoves/bff";
+import { BffContext, LabelerPolicies, RouteHandler } from "@bigmoves/bff";
 import { ProfilePage, ProfileTabs } from "../components/ProfilePage.tsx";
 import {
   getActorGalleries,
···
   getActorProfiles,
 } from "../lib/actor.ts";
 import { getFollow, getFollowers, getFollowing } from "../lib/follow.ts";
+import {
+  isLabeler as isLabelerFn,
+  moderateGallery,
+  ModerationDecsion,
+} from "../lib/moderation.ts";
 import { type SocialNetwork } from "../lib/timeline.ts";
 import { getPageMeta } from "../meta.ts";
 import type { State } from "../state.ts";
 import { profileLink } from "../utils.ts";
 
-export const handler: RouteHandler = (
+export const handler: RouteHandler = async (
   req,
   params,
   ctx: BffContext<State>,
···
   const followers = getFollowers(actor.did, ctx);
   const following = getFollowing(actor.did, ctx);
 
+  let labelerDefinitions: LabelerPolicies | undefined = undefined;
+  const isLabeler = await isLabelerFn(actor.did, ctx);
+  if (isLabeler) {
+    const labelerDefs = await ctx.getLabelerDefinitions();
+    labelerDefinitions = labelerDefs[actor.did] ?? [];
+  }
+
+  const galleryModDecisionsMap = new Map<string, ModerationDecsion>();
+  for (const gallery of galleries) {
+    if (!gallery.labels || gallery.labels.length === 0) {
+      continue;
+    }
+    const modDecision = await moderateGallery(
+      gallery.labels ?? [],
+      ctx,
+    );
+    if (!modDecision) {
+      continue;
+    }
+    galleryModDecisionsMap.set(gallery.uri, modDecision);
+  }
+
   if (!profile) return ctx.next();
 
   let followUri: string | undefined;
···
         selectedTab="favs"
         galleries={galleries}
         galleryFavs={galleryFavs}
+        galleryModDecisionsMap={galleryModDecisionsMap}
       />,
     );
   }
···
       followUri={followUri}
       loggedInUserDid={ctx.currentUser?.did}
       profile={profile}
-      selectedTab="galleries"
+      selectedTab={isLabeler ? "labels" : "galleries"}
       galleries={galleries}
+      galleryModDecisionsMap={galleryModDecisionsMap}
+      isLabeler={isLabeler}
+      labelerDefinitions={labelerDefinitions}
     />,
   );
 };

src/routes/timeline.tsx

···
 import { getPageMeta } from "../meta.ts";
 import type { State } from "../state.ts";
 
-export const handler: RouteHandler = (
+export const handler: RouteHandler = async (
   req,
   _params,
   ctx: BffContext<State>,
···
     graph = actorProfiles[0];
   }
 
-  const items = getTimeline(
+  const items = await getTimeline(
     ctx,
     tab === "following" ? "following" : "timeline",
     graph,

static/styles.css

···
-/*! tailwindcss v4.1.7 | MIT License | https://tailwindcss.com */
+/*! tailwindcss v4.1.8 | MIT License | https://tailwindcss.com */
 @layer properties;
 @layer theme, base, components, utilities;
 @layer theme {
···
   .resize {
     resize: both;
   }
+  .list-disc {
+    list-style-type: disc;
+  }
   .grid-cols-1 {
     grid-template-columns: repeat(1, minmax(0, 1fr));
   }
···
   }
   .gap-4 {
     gap: calc(var(--spacing) * 4);
+  }
+  .space-y-1 {
+    :where(& > :not(:last-child)) {
+      --tw-space-y-reverse: 0;
+      margin-block-start: calc(calc(var(--spacing) * 1) * var(--tw-space-y-reverse));
+      margin-block-end: calc(calc(var(--spacing) * 1) * calc(1 - var(--tw-space-y-reverse)));
+    }
   }
   .space-y-2 {
     :where(& > :not(:last-child)) {
···
   .pl-2 {
     padding-left: calc(var(--spacing) * 2);
   }
+  .pl-5 {
+    padding-left: calc(var(--spacing) * 5);
+  }
   .text-center {
     text-align: center;
   }
···
       min-width: 120px;
     }
   }
+  .sm\:min-w-md {
+    @media (width >= 40rem) {
+      min-width: var(--container-md);
+    }
+  }
   .sm\:grid-cols-3 {
     @media (width >= 40rem) {
       grid-template-columns: repeat(3, minmax(0, 1fr));
···
   .dark\:text-zinc-100 {
     @media (prefers-color-scheme: dark) {
       color: var(--color-zinc-100);
+    }
+  }
+  .dark\:text-zinc-200 {
+    @media (prefers-color-scheme: dark) {
+      color: var(--color-zinc-200);
     }
   }
   .dark\:text-zinc-300 {