feat: complete 001-web-interface implementation

Implement full web interface for Bluesky Personal Archive Tool with:

Phase 1-2: Setup & Foundation
- Go module initialization with all dependencies
- SQLite database with FTS5 full-text search
- Configuration loading and session management

Phase 3: Authentication & Landing (US1)
- OAuth 2.0 with DPoP via bskyoauth
- Session management with 7-day expiration
- Landing page with login/dashboard routing
- Authentication middleware

Phase 4: Archive Management (US2)
- Background worker with rate limiting
- AT Protocol integration for post fetching
- Media download with SHA-256 content-addressable storage
- Archive operations with progress tracking
- Browse interface with search and pagination
- Support for viewing posts from all users in archive

Phase 5: About Page (US3)
- About page with project information
- Dynamic version from git tags (no ldflags needed)
- Navigation partial with consistent header
- Author links (GitHub, Bluesky)

Phase 6: Polish & Testing
- Error pages (401, 404, 500) with proper templates
- HTMX redirect support for expired sessions
- Minimal JavaScript for confirmations
- Storage layer tests (5 tests, all passing)
- 404 NotFound handler with session context

Additional Features:
- QuoteCount tracking for posts (schema v2 migration)
- Incremental database migrations system
- Reply parent links (internal/external routing)
- AT URI direct search support
- Image validation for media display
- Profile handle display for multi-user posts

Technical Stack:
- Go 1.21+ with chi router
- SQLite with WAL mode and FTS5
- HTMX for dynamic interactions
- Pico CSS with dark theme
- bskyoauth for OAuth + DPoP
- indigo SDK for AT Protocol

All MVP tasks complete. CSRF protection and additional tests
deferred for future release.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[e-mail]>

CLAUDE.md

···
 
 ## Recent Changes
 - 001-web-interface: Added Go 1.21+
-- 001-web-interface: Added Go 1.21+
-
-- 001-web-interface: Added Go 1.21+
 
 <!-- MANUAL ADDITIONS START -->
+Kill Go process when finished with work.
+Do not kill ngrok processes!
 <!-- MANUAL ADDITIONS END -->

README.md

···
   scopes:
     - "atproto"
     - "transition:generic"
+    - "transition:chat.bsky"
   session_max_age: 604800  # 7 days
 ```
 
···
 
 This tool uses Bluesky's OAuth 2.0 with PKCE flow via the [bskyoauth](https://github.com/shindakun/bskyoauth) library.
 
-**No client ID or client secret is required** - the OAuth flow uses your application's base URL (`http://localhost:8080`) as the client identifier. This is a simpler, more secure approach than traditional OAuth.
+**No client ID or client secret is required** - the OAuth flow uses your application's base URL (`https://{{ngrok.url}}`) as the client identifier. This is a simpler, more secure approach than traditional OAuth.
 
 ## Architecture
 

cmd/bskyarchive/main.go

···
 
 	"github.com/go-chi/chi/v5"
 	"github.com/go-chi/chi/v5/middleware"
+	"github.com/shindakun/bskyarchive/internal/archiver"
 	"github.com/shindakun/bskyarchive/internal/auth"
 	"github.com/shindakun/bskyarchive/internal/config"
 	"github.com/shindakun/bskyarchive/internal/storage"
···
 	baseURL := cfg.GetBaseURL()
 	oauthManager := auth.InitOAuth(baseURL, cfg.OAuth.Scopes, sessionManager)
 	logger.Printf("OAuth manager initialized with base URL: %s", baseURL)
+	logger.Printf("OAuth scopes: %v", cfg.OAuth.Scopes)
 
 	// Initialize router
 	r := chi.NewRouter()
···
 	r.Use(webmiddleware.LoggingMiddleware(logger))
 	r.Use(middleware.Recoverer)
 	r.Use(middleware.Timeout(60 * time.Second))
+
+	// Initialize archiver worker with OAuth manager for bskyoauth session access
+	worker := archiver.NewWorker(db, cfg.Archive.MediaPath, 300, 5*time.Minute, oauthManager)
 
 	// Initialize handlers
-	h := handlers.New(db, sessionManager, oauthManager, logger)
+	h := handlers.New(db, sessionManager, oauthManager, worker, logger)
 
 	// Public routes
 	r.Get("/", h.Landing)
···
 
 	// Static files
 	r.Get("/static/*", h.ServeStatic)
+
+	// 404 handler (must be last)
+	r.NotFound(h.NotFound)
 
 	// HTTP server configuration
 	srv := &http.Server{

config.yaml

···
   scopes:
     - "atproto"
     - "transition:generic"
+    - "transition:chat.bsky"
   session_secret: "${SESSION_SECRET}"
   session_max_age: 604800  # 7 days in seconds
 

go.mod

···
 	github.com/hashicorp/golang-lru v1.0.2 // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
 	github.com/ipfs/bbloom v0.0.4 // indirect
-	github.com/ipfs/boxo v0.35.0 // indirect
+	github.com/ipfs/boxo v0.35.1 // indirect
 	github.com/ipfs/go-block-format v0.2.3 // indirect
 	github.com/ipfs/go-cid v0.6.0 // indirect
 	github.com/ipfs/go-datastore v0.9.0 // indirect
···
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/ncruces/go-strftime v0.1.9 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
-	github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f // indirect
+	github.com/polydawn/refmt v0.89.1-0.20231129105047-37766d95467a // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.67.2 // indirect
-	github.com/prometheus/procfs v0.19.1 // indirect
+	github.com/prometheus/procfs v0.19.2 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
-	github.com/shindakun/bskyoauth v1.3.1 // indirect
+	github.com/shindakun/bskyoauth v1.3.2 // indirect
 	github.com/spaolacci/murmur3 v1.1.0 // indirect
 	github.com/whyrusleeping/cbor-gen v0.3.1 // indirect
 	gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b // indirect
···
 	go.uber.org/zap v1.27.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/exp v0.0.0-20250911091902-df9299821621 // indirect
+	golang.org/x/exp v0.0.0-20251009144603-d2f985daa21b // indirect
 	golang.org/x/sys v0.37.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect

go.sum

···
+cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU=
+cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU=
+cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY=
+cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc=
+cloud.google.com/go v0.46.3/go.mod h1:a6bKKbmY7er1mI7TEI4lsAkts/mkhTSZK8w33B4RAg0=
+cloud.google.com/go v0.50.0/go.mod h1:r9sluTvynVuxRIOHXQEHMFffphuXHOMZMycpNR5e6To=
+cloud.google.com/go v0.52.0/go.mod h1:pXajvRH/6o3+F9jDHZWQ5PbGhn+o8w9qiu/CffaVdO4=
+cloud.google.com/go v0.53.0/go.mod h1:fp/UouUEsRkN6ryDKNW/Upv/JBKnv6WDthjR6+vze6M=
+cloud.google.com/go v0.54.0/go.mod h1:1rq2OEkV3YMf6n/9ZvGWI3GWw0VoqH/1x2nd8Is/bPc=
+cloud.google.com/go v0.56.0/go.mod h1:jr7tqZxxKOVYizybht9+26Z/gUq7tiRzu+ACVAMbKVk=
+cloud.google.com/go v0.57.0/go.mod h1:oXiQ6Rzq3RAkkY7N6t3TcE6jE+CIBBbA36lwQ1JyzZs=
+cloud.google.com/go v0.62.0/go.mod h1:jmCYTdRCQuc1PHIIJ/maLInMho30T/Y0M4hTdTShOYc=
+cloud.google.com/go v0.65.0/go.mod h1:O5N8zS7uWy9vkA9vayVHs65eM1ubvY4h553ofrNHObY=
+cloud.google.com/go v0.72.0/go.mod h1:M+5Vjvlc2wnp6tjzE102Dw08nGShTscUx2nZMufOKPI=
+cloud.google.com/go v0.74.0/go.mod h1:VV1xSbzvo+9QJOxLDaJfTjx5e+MePCpCWwvftOeQmWk=
+cloud.google.com/go v0.78.0/go.mod h1:QjdrLG0uq+YwhjoVOLsS1t7TW8fs36kLs4XO5R5ECHg=
+cloud.google.com/go v0.79.0/go.mod h1:3bzgcEeQlzbuEAYu4mrWhKqWjmpprinYgKJLgKHnbb8=
+cloud.google.com/go v0.81.0/go.mod h1:mk/AM35KwGk/Nm2YSeZbxXdrNK3KZOYHmLkOqC2V6E0=
+cloud.google.com/go/bigquery v1.0.1/go.mod h1:i/xbL2UlR5RvWAURpBYZTtm/cXjCha9lbfbpx4poX+o=
+cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE=
+cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc=
+cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg=
+cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc=
+cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ=
+cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE=
+cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk=
+cloud.google.com/go/firestore v1.1.0/go.mod h1:ulACoGHTpvq5r8rxGJ4ddJZBZqakUQqClKRT5SZwBmk=
+cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I=
+cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw=
+cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA=
+cloud.google.com/go/pubsub v1.3.1/go.mod h1:i+ucay31+CNRpDW4Lu78I4xXG+O1r/MAHgjpRVR+TSU=
+cloud.google.com/go/storage v1.0.0/go.mod h1:IhtSnM/ZTZV8YYJWCY8RULGVqBDmpoyjwiyrjsg+URw=
+cloud.google.com/go/storage v1.5.0/go.mod h1:tpKbwo567HUNpVclU5sGELwQWBDZ8gh0ZeosJ0Rtdos=
+cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohlUTyfDhBk=
+cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs=
+cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0=
+dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
+github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
+github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o=
+github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod h1:Q73ZrmVTwzkszR9V5SSuryQ31EELlFMUz1kKyl939pY=
+github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
+github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
+github.com/bketelsen/crypt v0.0.4/go.mod h1:aI6NrJ0pMGgvZKL1iVgXLnfIFJtfV+bKCoqOes/6LfM=
 github.com/bluesky-social/indigo v0.0.0-20251029223103-f7e7c0069ad1 h1:CEDoeXUp+lSICenkdgSoemcKSN3UV3ES6woSesauc7I=
 github.com/bluesky-social/indigo v0.0.0-20251029223103-f7e7c0069ad1/go.mod h1:GuGAU33qKulpZCZNPcUeIQ4RW6KzNvOy7s8MSUXbAng=
+github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
+github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
+github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
+github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
+github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
+github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
+github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
+github.com/coreos/go-semver v0.3.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
+github.com/coreos/go-systemd/v22 v22.3.2/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
 github.com/earthboundkid/versioninfo/v2 v2.24.1 h1:SJTMHaoUx3GzjjnUO1QzP3ZXK6Ee/nbWyCm58eY3oUg=
 github.com/earthboundkid/versioninfo/v2 v2.24.1/go.mod h1:VcWEooDEuyUJnMfbdTh0uFN4cfEIg+kHMuWB2CDCLjw=
+github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
+github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
+github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
+github.com/envoyproxy/go-control-plane v0.9.7/go.mod h1:cwu0lG7PUMfa9snN8LXBig5ynNVH9qI8YYLbd1fK2po=
+github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
+github.com/envoyproxy/go-control-plane v0.9.9-0.20210217033140-668b12f5399d/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
+github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
+github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
 github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
+github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
+github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
 github.com/go-chi/chi/v5 v5.2.3 h1:WQIt9uxdsAbgIYgid+BpYc+liqQZGMHRaUwp0JUcvdE=
 github.com/go-chi/chi/v5 v5.2.3/go.mod h1:L2yAIGWB3H+phAw1NxKwWM+7eUH/lU8pOMm5hHcoops=
+github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
+github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
+github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
 github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
 github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-yaml/yaml v2.1.0+incompatible/go.mod h1:w2MrLa16VYP0jy6N7M5kHaCkaLENm+P+Tv+MfurjSw0=
+github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
 github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
 github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
+github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
+github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
+github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
+github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/mock v1.3.1/go.mod h1:sBzyDLLjw3U8JLTeZvSv8jJB+tU5PVekmnlKIyFUx0Y=
+github.com/golang/mock v1.4.0/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
+github.com/golang/mock v1.4.1/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
+github.com/golang/mock v1.4.3/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
+github.com/golang/mock v1.4.4/go.mod h1:l3mdAwkq5BuhzHwde/uurv3sEJeZMXNpwsxVWU71h+4=
+github.com/golang/mock v1.5.0/go.mod h1:CWnOUgYIOo4TcNZ0wHX3YZCqsaM1I1Jvs6v3mP3KVu8=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
+github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
+github.com/golang/protobuf v1.3.5/go.mod h1:6O5/vntMXwX2lRkT1hjjk0nAC1IDOTvTlVgjlRvqsdk=
+github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
+github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
+github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
+github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
+github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
+github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8=
+github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
+github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
+github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.1/go.mod h1:DopwsBzvsk0Fs44TXzsVbJyPhcCPeIwnvohx4u74HPM=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
+github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
+github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.4.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/martian v2.1.0+incompatible/go.mod h1:9I4somxYTbIHy5NJKHRl3wXiIaQGbYVAs8BPL6v8lEs=
+github.com/google/martian/v3 v3.0.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0=
+github.com/google/martian/v3 v3.1.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0=
+github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
+github.com/google/pprof v0.0.0-20190515194954-54271f7e092f/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
+github.com/google/pprof v0.0.0-20191218002539-d4f498aebedc/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
+github.com/google/pprof v0.0.0-20200212024743-f11f1df84d12/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
+github.com/google/pprof v0.0.0-20200229191704-1ebb73c60ed3/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
+github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
+github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
+github.com/google/pprof v0.0.0-20201023163331-3e6fc7fc9c4c/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/pprof v0.0.0-20201203190320-1bf35d6f28c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/pprof v0.0.0-20210122040257-d980be63207e/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/pprof v0.0.0-20210226084205-cbba55b83ad5/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
+github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
+github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk=
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
+github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k=
 github.com/gorilla/csrf v1.7.3 h1:BHWt6FTLZAb2HtWT5KDBf6qgpZzvtbp9QWDRKZMXJC0=
 github.com/gorilla/csrf v1.7.3/go.mod h1:F1Fj3KG23WYHE6gozCmBAezKookxbIvUJT+121wTuLk=
 github.com/gorilla/securecookie v1.1.2 h1:YCIWL56dvtr73r6715mJs5ZvhtnY73hBvEF8kXD8ePA=
 github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pwzwo4h3eOamfo=
 github.com/gorilla/sessions v1.4.0 h1:kpIYOp/oi6MG/p5PgxApU8srsSw9tuFbt46Lt7auzqQ=
 github.com/gorilla/sessions v1.4.0/go.mod h1:FLWm50oby91+hl7p/wRxDth9bWSuk0qVL2emc7lT5ik=
+github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
+github.com/hashicorp/consul/api v1.1.0/go.mod h1:VmuI/Lkw1nC05EYQWNKwWGbkg+FbDBtguAZLlVdkD9Q=
+github.com/hashicorp/consul/sdk v0.1.1/go.mod h1:VKf9jXwCTEY1QZP2MOLRhb5i/I/ssyNV1vwHyQBF0x8=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-cleanhttp v0.5.1/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
 github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
+github.com/hashicorp/go-immutable-radix v1.0.0/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
+github.com/hashicorp/go-msgpack v0.5.3/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
+github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
 github.com/hashicorp/go-retryablehttp v0.7.8 h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48=
 github.com/hashicorp/go-retryablehttp v0.7.8/go.mod h1:rjiScheydd+CxvumBsIrFKlx3iS0jrZ7LvzFGFmuKbw=
+github.com/hashicorp/go-rootcerts v1.0.0/go.mod h1:K6zTfqpRlCUIjkwsN4Z+hiSfzSTQa6eBIzfwKfwNnHU=
+github.com/hashicorp/go-sockaddr v1.0.0/go.mod h1:7Xibr9yA9JjQq1JpNB2Vw7kxv8xerXegt+ozgdvDeDU=
+github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
+github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
+github.com/hashicorp/go-uuid v1.0.1/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
+github.com/hashicorp/go.net v0.0.1/go.mod h1:hjKkEWcCURg++eb33jQU7oqQcI9XDCnUzHA0oac0k90=
+github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
+github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/golang-lru v1.0.2 h1:dV3g9Z/unq5DpblPpw+Oqcv4dU/1omnb4Ok8iPY6p1c=
 github.com/hashicorp/golang-lru v1.0.2/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
 github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
 github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
+github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
+github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64=
+github.com/hashicorp/mdns v1.0.0/go.mod h1:tL+uN++7HEJ6SQLQ2/p+z2pH24WQKWjBPkE0mNTz8vQ=
+github.com/hashicorp/memberlist v0.1.3/go.mod h1:ajVTdAv/9Im8oMAAj5G31PhhMCZJV2pPBoIllUwCN7I=
+github.com/hashicorp/serf v0.8.2/go.mod h1:6hOLApaqBFA1NXqRQAsxw9QxuDEvNxSQRwA/JwenrHc=
+github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
+github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
+github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
 github.com/ipfs/bbloom v0.0.4 h1:Gi+8EGJ2y5qiD5FbsbpX/TMNcJw8gSqr7eyjHa4Fhvs=
 github.com/ipfs/bbloom v0.0.4/go.mod h1:cS9YprKXpoZ9lT0n/Mw/a6/aFV6DTjTLYHeA+gyqMG0=
 github.com/ipfs/boxo v0.35.0 h1:3Mku5arSbAZz0dvb4goXRsQuZkFkPrGr5yYdu0YM1pY=
 github.com/ipfs/boxo v0.35.0/go.mod h1:uhaF0DGnbgEiXDTmD249jCGbxVkMm6+Ew85q6Uub7lo=
+github.com/ipfs/boxo v0.35.1 h1:MGL3aaaxnu/h9KKq+X/6FxapI/qlDmnRNk33U7tz/fQ=
+github.com/ipfs/boxo v0.35.1/go.mod h1:/p1XZVp+Yzv78RuKjb3BESBYEQglRgDrWvmN5mFrsus=
 github.com/ipfs/go-block-format v0.2.3 h1:mpCuDaNXJ4wrBJLrtEaGFGXkferrw5eqVvzaHhtFKQk=
 github.com/ipfs/go-block-format v0.2.3/go.mod h1:WJaQmPAKhD3LspLixqlqNFxiZ3BZ3xgqxxoSR/76pnA=
 github.com/ipfs/go-cid v0.6.0 h1:DlOReBV1xhHBhhfy/gBNNTSyfOM6rLiIx9J7A4DGf30=
···
 github.com/ipfs/go-log/v2 v2.8.2/go.mod h1:UhIYAwMV7Nb4ZmihUxfIRM2Istw/y9cAk3xaK+4Zs2c=
 github.com/ipfs/go-metrics-interface v0.3.0 h1:YwG7/Cy4R94mYDUuwsBfeziJCVm9pBMJ6q/JR9V40TU=
 github.com/ipfs/go-metrics-interface v0.3.0/go.mod h1:OxxQjZDGocXVdyTPocns6cOLwHieqej/jos7H4POwoY=
+github.com/json-iterator/go v1.1.11/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
+github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU=
+github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk=
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=
 github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
+github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/magiconair/properties v1.8.5/go.mod h1:y3VJvCyxH9uVvJTWEGAELF3aiYNyPKd5NZ3oSwXrF60=
+github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
+github.com/mattn/go-isatty v0.0.3/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
 github.com/minio/sha256-simd v1.0.1 h1:6kaan5IFmwTNynnKKpDHe6FWHohJOHhCPchzK49dzMM=
 github.com/minio/sha256-simd v1.0.1/go.mod h1:Pz6AKMiUdngCLpeTL/RJY1M9rUuPMYujV5xJjtbRSN8=
+github.com/mitchellh/cli v1.0.0/go.mod h1:hNIlj7HEI86fIcpObd7a0FcrxTWetlwJDGcceTlRvqc=
+github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
+github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
+github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=
+github.com/mitchellh/iochan v1.0.0/go.mod h1:JwYml1nuB7xOzsp52dPpHFffvOCDupsG0QubkSMEySY=
+github.com/mitchellh/mapstructure v0.0.0-20160808181253-ca63d7c062ee/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
+github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
+github.com/mitchellh/mapstructure v1.4.1/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
+github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/mr-tron/base58 v1.2.0 h1:T/HDJBh4ZCPbU39/+c3rRvE0uKBQlU27+QI8LJ4t64o=
 github.com/mr-tron/base58 v1.2.0/go.mod h1:BinMc/sQntlIE1frQmRFPUoPA1Zkr8VRgBdjWI2mNwc=
 github.com/multiformats/go-base32 v0.1.0 h1:pVx9xoSPqEIQG8o+UbAe7DNi51oej1NtK+aGkbLYxPE=
···
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/ncruces/go-strftime v0.1.9 h1:bY0MQC28UADQmHmaF5dgpLmImcShSi2kHU9XLdhx/f4=
 github.com/ncruces/go-strftime v0.1.9/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
+github.com/neelance/astrewrite v0.0.0-20160511093645-99348263ae86/go.mod h1:kHJEU3ofeGjhHklVoIGuVj85JJwZ6kWPaJwCIxgnFmo=
+github.com/neelance/sourcemap v0.0.0-20200213170602-2833bce08e4c/go.mod h1:Qr6/a/Q4r9LP1IltGz7tA7iOK1WonHEYhu1HRBA7ZiM=
 github.com/opentracing/opentracing-go v1.2.0 h1:uEJPy/1a5RIPAJ0Ov+OIO8OxWu77jEv+1B0VhjKrZUs=
 github.com/opentracing/opentracing-go v1.2.0/go.mod h1:GxEUsuufX4nBwe+T+Wl9TAgYrxe9dPLANfrWvHYVTgc=
+github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
+github.com/pelletier/go-toml v1.9.3/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pkg/sftp v1.10.1/go.mod h1:lYOWFsE0bwd1+KfKJaKeuokY15vzFx25BLbzYYoAxZI=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f h1:VXTQfuJj9vKR4TCkEuWIckKvdHFeJH/huIFJ9/cXOB0=
 github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f/go.mod h1:/zvteZs/GwLtCgZ4BL6CBsk9IKIlexP43ObX9AxTqTw=
+github.com/polydawn/refmt v0.89.1-0.20231129105047-37766d95467a h1:cgqrm0F3zwf9IPzca7xN4w+Zy6MC9ZkPvAC8QEWa/iQ=
+github.com/polydawn/refmt v0.89.1-0.20231129105047-37766d95467a/go.mod h1:ocZfO/tLSHqfScRDNTJbAJR1by4D1lewauX9OwTaPuY=
+github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o=
 github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
+github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
 github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
 github.com/prometheus/common v0.67.2 h1:PcBAckGFTIHt2+L3I33uNRTlKTplNzFctXcWhPyAEN8=
 github.com/prometheus/common v0.67.2/go.mod h1:63W3KZb1JOKgcjlIr64WW/LvFGAqKPj0atm+knVGEko=
 github.com/prometheus/procfs v0.19.1 h1:QVtROpTkphuXuNlnCv3m1ut3JytkXHtQ3xvck/YmzMM=
 github.com/prometheus/procfs v0.19.1/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
+github.com/prometheus/procfs v0.19.2 h1:zUMhqEW66Ex7OXIiDkll3tl9a1ZdilUOd/F6ZXw4Vws=
+github.com/prometheus/procfs v0.19.2/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
+github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
+github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc=
 github.com/shindakun/bskyoauth v1.3.1 h1:5PYlQ6kfMhhju2kYdwojL8i24/uOtZ7fOzpLzrJ+VPU=
 github.com/shindakun/bskyoauth v1.3.1/go.mod h1:OBeyXPUQL+3R3vWrLS6c44XnI0jQZ+H0/djvyOVwqdQ=
+github.com/shindakun/bskyoauth v1.3.2 h1:WRa1xeqtCYsQXwAtVc2ClRk1p3ZCOnJQ8tPkM+F9kx0=
+github.com/shindakun/bskyoauth v1.3.2/go.mod h1:OBeyXPUQL+3R3vWrLS6c44XnI0jQZ+H0/djvyOVwqdQ=
+github.com/shurcooL/go v0.0.0-20200502201357-93f07166e636/go.mod h1:TDJrrUr11Vxrven61rcy3hJMUqaf/CLWYhHNPmT14Lk=
+github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749/go.mod h1:ZY1cvUeJuFPAdZ/B6v7RHavJWZn2YPVFQ1OSXhCGOkg=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
+github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546/go.mod h1:TrYk7fJVaAttu97ZZKrO9UbRa8izdowaMIZcxYMbVaw=
+github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
+github.com/smarty/assertions v1.15.0/go.mod h1:yABtdzeQs6l1brC900WlRNwj6ZR55d7B+E8C6HtKdec=
+github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
 github.com/smartystreets/assertions v1.2.0/go.mod h1:tcbTF8ujkAEcZ8TElKY+i30BzYlVhC/LOxJk7iOWnoo=
+github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/smartystreets/goconvey v1.7.2/go.mod h1:Vw0tHAZW6lzCRk3xgdin6fKYcG+G3Pg9vgXWeJpQFMM=
+github.com/smartystreets/goconvey v1.8.1/go.mod h1:+/u4qLyY6x1jReYOp7GOM2FSt8aP9CzCZL03bI28W60=
 github.com/spaolacci/murmur3 v1.1.0 h1:7c1g84S4BPRrfL5Xrdp6fOJ206sU9y293DDHaoy0bLI=
 github.com/spaolacci/murmur3 v1.1.0/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
+github.com/spf13/afero v1.6.0/go.mod h1:Ai8FlHk4v/PARR026UzYexafAt9roJ7LcLMAmO6Z93I=
+github.com/spf13/cast v1.3.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
+github.com/spf13/cobra v1.2.1/go.mod h1:ExllRjgxM/piMAM+3tAZvg8fsklGAf3tPfi+i8t68Nk=
+github.com/spf13/jwalterweatherman v1.1.0/go.mod h1:aNWZUN0dPAAO/Ljvb5BEdw96iTZ0EXowPYD95IqWIGo=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/viper v1.8.1/go.mod h1:o0Pch8wJ9BVSWGQMbra6iw0oQ5oktSIBaujf1rJH9Ns=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/subosito/gotenv v1.2.0/go.mod h1:N0PQaV/YGNqwC0u51sEeR/aUtSLEXKX9iv69rRypqCw=
 github.com/urfave/cli v1.22.10/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
 github.com/warpfork/go-wish v0.0.0-20220906213052-39a1cc7a02d0/go.mod h1:x6AKhvSSexNrVSrViXSHUEbICjmGXhtgABaHIySUSGw=
 github.com/whyrusleeping/cbor-gen v0.3.1 h1:82ioxmhEYut7LBVGhGq8xoRkXPLElVuh5mV67AFfdv0=
 github.com/whyrusleeping/cbor-gen v0.3.1/go.mod h1:pM99HXyEbSQHcosHc0iW7YFmwnscr+t9Te4ibko05so=
+github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
+github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b h1:CzigHMRySiX3drau9C6Q5CAbNIApmLdat5jPMqChvDA=
 gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b/go.mod h1:/y/V339mxv2sZmYYR64O07VuCpdNZqCTwO8ZcouTMI8=
 gitlab.com/yawning/tuplehash v0.0.0-20230713102510-df83abbf9a02 h1:qwDnMxjkyLmAFgcfgTnfJrmYKWhHnci3GjDqcZp1M3Q=
 gitlab.com/yawning/tuplehash v0.0.0-20230713102510-df83abbf9a02/go.mod h1:JTnUj0mpYiAsuZLmKjTx/ex3AtMowcCgnE7YNyCEP0I=
+go.etcd.io/etcd/api/v3 v3.5.0/go.mod h1:cbVKeC6lCfl7j/8jBhAK6aIYO9XOjdptoxU/nLQcPvs=
+go.etcd.io/etcd/client/pkg/v3 v3.5.0/go.mod h1:IJHfcCEKxYu1Os13ZdwCwIUTUVGYTSAM3YSwc9/Ac1g=
+go.etcd.io/etcd/client/v2 v2.305.0/go.mod h1:h9puh54ZTgAKtEbut2oe9P4L/oqKCVB6xsXlzd7alYQ=
+go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU=
+go.opencensus.io v0.22.0/go.mod h1:+kGneAE2xo2IficOXnaByMWTGM9T73dGwxeWcUqIpI8=
+go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
+go.opencensus.io v0.22.3/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
+go.opencensus.io v0.22.4/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
+go.opencensus.io v0.22.5/go.mod h1:5pWMHQbX5EPX2/62yrJeAkowc+lfs/XD7Uxpq3pI6kk=
+go.opencensus.io v0.23.0/go.mod h1:XItmlyltB5F7CS4xOC1DcqMoFqwtC6OG2xF7mCv7P7E=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18=
···
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee/go.mod h1:vJERXedbb3MVM5f9Ejo0C68/HhF8uaILCdgjnY+goOA=
 go.uber.org/zap v1.16.0/go.mod h1:MA8QOfq0BHJwdXa996Y4dYkAqRKB8/1K1QMMZVaNZjQ=
+go.uber.org/zap v1.17.0/go.mod h1:MXVU+bhUf/A7Xi2HNOnopQOrmycQ5Ih87HtOu4q5SSo=
 go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
 go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
 go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
 go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
+golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
+golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
 golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
+golang.org/x/exp v0.0.0-20190829153037-c13cbed26979/go.mod h1:86+5VVa7VpoJ4kLfm080zCjGlMRFzhUhsZKEZO7MGek=
+golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY=
+golang.org/x/exp v0.0.0-20191129062945-2f5052295587/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
+golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
+golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
+golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM=
+golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU=
 golang.org/x/exp v0.0.0-20250911091902-df9299821621 h1:2id6c1/gto0kaHYyrixvknJ8tUK/Qs5IsmBtrc+FtgU=
 golang.org/x/exp v0.0.0-20250911091902-df9299821621/go.mod h1:TwQYMMnGpvZyc+JpB/UAuTNIsVJifOlSkrZkhcvpVUk=
+golang.org/x/exp v0.0.0-20251009144603-d2f985daa21b h1:18qgiDvlvH7kk8Ioa8Ov+K6xCi0GMvmGfGW0sgd/SYA=
+golang.org/x/exp v0.0.0-20251009144603-d2f985daa21b/go.mod h1:j/pmGrbnkbPtQfxEe5D0VQhZC6qKbfKifgD0oM7sR70=
+golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
+golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
+golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
+golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/lint v0.0.0-20190909230951-414d861bb4ac/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
 golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/lint v0.0.0-20191125180803-fdd1cda4f05f/go.mod h1:5qLYkcX4OjUUV8bRuDixDT3tpyyb+LUpUlRWLxfhWrs=
+golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
+golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
+golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
+golang.org/x/lint v0.0.0-20210508222113-6edffad5e616/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
+golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
+golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
+golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY=
+golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
+golang.org/x/mod v0.1.1-0.20191107180719-034126e5016b/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/mod v0.9.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20181201002055-351d144fa1fc/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190501004415-9ce7a6920f09/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190503192946-f4e77d36d62c/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20190724013045-ca1201d0de80/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200114155413-6afb5195e5aa/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200202094626-16171245cfb2/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200222125558-5a598a2470a0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200301022130-244492dfa37a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200501053045-e0ff5e5a1de5/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200513185701-a91f0712d120/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200520182314-0ba52f642ac2/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
+golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20210119194325-5f4716e94777/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20210316092652-d523dce5a7f4/go.mod h1:RBQZq4jEuRlivfhVLdyRGr576XBO4/greRjx4P4O3yc=
+golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
+golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
+golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
+golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
+golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
+golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
+golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
+golang.org/x/oauth2 v0.0.0-20200902213428-5d25da1a8d43/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20201109201403-9fd604954f58/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20201208152858-08078c50e5b5/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20210218202405-ba52d332ba99/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20210220000619-9bb904979d93/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20210313182246-cd4f82c27b84/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/oauth2 v0.0.0-20210402161424-2e8d93401602/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20181026203630-95b1ffbd15a5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190502145724-3ef323f4f1fd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190507160741-ecd444e8653b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190606165138-5da285871e9c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191228213918-04cbcbbfeed8/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200113162924-86b910548bc1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200122134326-e047566fdf82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200212091648-12a6c2dcc1e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200302150141-5c8b2ff67527/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200331124033-c3d80250170d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200501052902-10377860bb8e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200511232937-7e40ca221e25/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200515095857-1151b9dac4a9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200523222454-059865788121/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200803210538-64077c9b5642/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200905004654-be1d3432aa8f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201201145000-ef89a241ccb3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210104204734-6f8348627aad/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210220050731-9a76102bfb43/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210305230114-8fe3ee5dd75b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210315160823-c6e025ad8005/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210403161142-5e06dd20ab57/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
 golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
+golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
+golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
+golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
+golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
 golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
 golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190425150028-36563e24a262/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20190506145303-2d16b83fe98c/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20190606124116-d0a3d012864b/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
+golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
+golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191029041327-9cc4af7d6b2c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191112195655-aa38f8e97acc/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191113191852-77e3bb0ad9e7/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191115202509-3a792d9c32b2/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191125144606-a911d9008d1f/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191130070609-6e064ea0cf2d/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191216173652-a0e659d51361/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20191227053925-7b8e75db28f4/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200117161641-43d50277825c/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200122220014-bf1340f18c4a/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200204074204-1cc6d1ef6c74/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200207183749-b753a1ba74fa/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200212150539-ea181f53ac56/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200224181240-023911ca70b2/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200227222343-706bc42d1f0d/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200304193943-95d2e580d8eb/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw=
+golang.org/x/tools v0.0.0-20200312045724-11d5b4c81c7d/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw=
+golang.org/x/tools v0.0.0-20200331025713-a30bf2db82d4/go.mod h1:Sl4aGygMT6LrqrWclx+PTx3U+LnKx/seiNR+3G19Ar8=
+golang.org/x/tools v0.0.0-20200501065659-ab2804fb9c9d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20200512131952-2bc93b1c0c88/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20200515010526-7d3b6ebf133d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20200618134242-20370b0cb4b2/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20200729194436-6467de6f59a7/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
+golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
+golang.org/x/tools v0.0.0-20200825202427-b303f430e36d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
+golang.org/x/tools v0.0.0-20200904185747-39188db58858/go.mod h1:Cj7w3i3Rnn0Xh82ur9kSqwfTHTeVxaDqrfMjpcNT6bE=
+golang.org/x/tools v0.0.0-20201110124207-079ba7bd75cd/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.0.0-20201201161351-ac6f37ff4c2a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.0.0-20201208233053-a543418bbed2/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.0.0-20210105154028-b0ab187a4818/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0=
+golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
+golang.org/x/tools v0.7.0/go.mod h1:4pg6aUX35JBAogB10C9AtvVL+qowtN4pT3CGSQex14s=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da h1:noIWHXmPHxILtqtCOPIhSt0ABwskkZKjD3bXGnZGpNY=
 golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
+google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE=
+google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M=
+google.golang.org/api v0.8.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg=
+google.golang.org/api v0.9.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg=
+google.golang.org/api v0.13.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI=
+google.golang.org/api v0.14.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI=
+google.golang.org/api v0.15.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI=
+google.golang.org/api v0.17.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
+google.golang.org/api v0.18.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
+google.golang.org/api v0.19.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
+google.golang.org/api v0.20.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
+google.golang.org/api v0.22.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
+google.golang.org/api v0.24.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE=
+google.golang.org/api v0.28.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE=
+google.golang.org/api v0.29.0/go.mod h1:Lcubydp8VUV7KeIHD9z2Bys/sm/vGKnG1UHuDBSrHWM=
+google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz5138Fc=
+google.golang.org/api v0.35.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg=
+google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE=
+google.golang.org/api v0.40.0/go.mod h1:fYKFpnQN0DsDSKRVRcQSDQNtqWPfM9i+zNPxepjRCQ8=
+google.golang.org/api v0.41.0/go.mod h1:RkxM5lITDfTzmyKFPt+wGrCJbVfniCr2ool8kTBzRTU=
+google.golang.org/api v0.43.0/go.mod h1:nQsDGjRXMo4lvh5hP0TKqF244gqhGcr/YSIykhUk/94=
+google.golang.org/api v0.44.0/go.mod h1:EBOGZqzyhtvMDoxwS97ctnh0zUmYY6CxqXsc1AvkYD8=
+google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
+google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
+google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
+google.golang.org/appengine v1.6.1/go.mod h1:i06prIuMbXzDqacNJfV5OdTW448YApPu5ww/cMBSeb0=
+google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
+google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
+google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
+google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
+google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
+google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
+google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod h1:IbNlFCBrqXvoKpeg0TB2l7cyZUmoaFKYIwrEpbDKLA8=
+google.golang.org/genproto v0.0.0-20191108220845-16a3f7862a1a/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
+google.golang.org/genproto v0.0.0-20191115194625-c23dd37a84c9/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
+google.golang.org/genproto v0.0.0-20191216164720-4f79533eabd1/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
+google.golang.org/genproto v0.0.0-20191230161307-f3c370f40bfb/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
+google.golang.org/genproto v0.0.0-20200115191322-ca5a22157cba/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
+google.golang.org/genproto v0.0.0-20200122232147-0452cf42e150/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc=
+google.golang.org/genproto v0.0.0-20200204135345-fa8e72b47b90/go.mod h1:GmwEX6Z4W5gMy59cAlVYjN9JhxgbQH6Gn+gFDQe2lzA=
+google.golang.org/genproto v0.0.0-20200212174721-66ed5ce911ce/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200228133532-8c2c7df3a383/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200305110556-506484158171/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200312145019-da6875a35672/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200331122359-1ee6d9798940/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200430143042-b979b6f78d84/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200511104702-f5ebc3bea380/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200513103714-09dca8ec2884/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200515170657-fc4c6c6a6587/go.mod h1:YsZOwe1myG/8QRHRsmBRE1LrgQY60beZKjly0O1fX9U=
+google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
+google.golang.org/genproto v0.0.0-20200618031413-b414f8b61790/go.mod h1:jDfRM7FcilCzHH/e9qn6dsT145K34l5v+OpcnNgKAAA=
+google.golang.org/genproto v0.0.0-20200729003335-053ba62fc06f/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20200804131852-c06518451d9c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20200825200019-8632dd797987/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20200904004341-0bd0a958aa1d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20201109203340-2640f1f9cdfb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20201201144952-b05cb90ed32e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20201210142538-e3217bee35cc/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20201214200347-8c77b98c765d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20210222152913-aa3ee6e6a81c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20210303154014-9728d6b83eeb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20210310155132-4ce2db91004e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20210319143718-93e7006c17a6/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/genproto v0.0.0-20210402141018-6c239bbf2bb1/go.mod h1:9lPAdzaEmUacj36I+k7YKbEc5CXzPIeORRgDAUOu28A=
+google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c/go.mod h1:UODoCrxHCcBojKKwX1terBiRUaqAsFqJiF615XL43r0=
+google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
+google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
+google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
+google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
+google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
+google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
+google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
+google.golang.org/grpc v1.27.1/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
+google.golang.org/grpc v1.28.0/go.mod h1:rpkK4SK4GF4Ach/+MFLZUBavHOvF2JJB5uozKKal+60=
+google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk=
+google.golang.org/grpc v1.30.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
+google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
+google.golang.org/grpc v1.31.1/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
+google.golang.org/grpc v1.33.1/go.mod h1:fr5YgcSWrqhRRxogOsw7RzIpsmvOZ6IcH4kBYTpR3n0=
+google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
+google.golang.org/grpc v1.34.0/go.mod h1:WotjhfgOW/POjDeRt8vscBtXq+2VjORFy659qA51WJ8=
+google.golang.org/grpc v1.35.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
+google.golang.org/grpc v1.36.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
+google.golang.org/grpc v1.36.1/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
+google.golang.org/grpc v1.38.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM=
+google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
+google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
+google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
+google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
+google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
+google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4=
+google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
+google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
 google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE=
 google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
+gopkg.in/ini.v1 v1.62.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
+honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
+honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 lukechampine.com/blake3 v1.4.1 h1:I3Smz7gso8w4/TunLKec6K2fn+kyKtDxr/xcQEN84Wg=
 lukechampine.com/blake3 v1.4.1/go.mod h1:QFosUxmjB8mnrWFSNwKmvxHpfY72bmD2tQ0kBMM3kwo=
 modernc.org/libc v1.66.10 h1:yZkb3YeLx4oynyR+iUsXsybsX4Ubx7MQlSYEw4yj59A=
···
 modernc.org/memory v1.11.0/go.mod h1:/JP4VbVC+K5sU2wZi9bHoq2MAkCnrt2r98UGeSK7Mjw=
 modernc.org/sqlite v1.39.1 h1:H+/wGFzuSCIEVCvXYVHX5RQglwhMOvtHSv+VtidL2r4=
 modernc.org/sqlite v1.39.1/go.mod h1:9fjQZ0mB1LLP0GYrp39oOJXx/I2sxEnZtzCmEQIKvGE=
+rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
+rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
+rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=

internal/archiver/client.go

···
+package archiver
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+
+	"github.com/bluesky-social/indigo/atproto/identity"
+	"github.com/bluesky-social/indigo/atproto/syntax"
+	"github.com/bluesky-social/indigo/xrpc"
+	"github.com/shindakun/bskyoauth"
+)
+
+// ATProtoClient wraps the indigo XRPC client with DPoP authentication
+type ATProtoClient struct {
+	session *bskyoauth.Session
+	client  *xrpc.Client
+}
+
+// NewATProtoClientFromSession creates a new AT Protocol client from a bskyoauth session
+// This properly sets up DPoP transport for secure token usage
+func NewATProtoClientFromSession(ctx context.Context, session *bskyoauth.Session) (*ATProtoClient, error) {
+	// Resolve PDS endpoint for the user
+	dir := identity.DefaultDirectory()
+	atid, err := syntax.ParseAtIdentifier(session.DID)
+	if err != nil {
+		return nil, fmt.Errorf("failed to parse DID: %w", err)
+	}
+
+	ident, err := dir.Lookup(ctx, *atid)
+	if err != nil {
+		return nil, fmt.Errorf("failed to lookup identity: %w", err)
+	}
+
+	pdsHost := ident.PDSEndpoint()
+
+	// Create DPoP transport - this is critical for DPoP-bound tokens!
+	transport := bskyoauth.NewDPoPTransport(
+		http.DefaultTransport,
+		session.DPoPKey,      // Private key for signing requests
+		session.AccessToken,
+		session.DPoPNonce,    // Nonce from server
+	)
+
+	httpClient := &http.Client{
+		Transport: transport,
+	}
+
+	xrpcClient := &xrpc.Client{
+		Host:   pdsHost,
+		Client: httpClient,
+	}
+
+	return &ATProtoClient{
+		session: session,
+		client:  xrpcClient,
+	}, nil
+}
+
+// GetClient returns the underlying XRPC client for direct use
+func (c *ATProtoClient) GetClient() *xrpc.Client {
+	return c.client
+}
+
+// GetSession returns the bskyoauth session
+func (c *ATProtoClient) GetSession() *bskyoauth.Session {
+	return c.session
+}
+
+// UpdateSession updates the session (e.g., after token refresh) and recreates the client
+func (c *ATProtoClient) UpdateSession(ctx context.Context, newSession *bskyoauth.Session) error {
+	// Recreate client with new session
+	newClient, err := NewATProtoClientFromSession(ctx, newSession)
+	if err != nil {
+		return err
+	}
+
+	c.session = newClient.session
+	c.client = newClient.client
+	return nil
+}
+
+// Ping checks if the client can reach the server
+func (c *ATProtoClient) Ping(ctx context.Context) error {
+	// Simple health check
+	req, err := http.NewRequestWithContext(ctx, "GET", fmt.Sprintf("https://%s/xrpc/_health", c.client.Host), nil)
+	if err != nil {
+		return fmt.Errorf("failed to create health check request: %w", err)
+	}
+
+	resp, err := c.client.Client.Do(req)
+	if err != nil {
+		return fmt.Errorf("failed to ping server: %w", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode >= 400 {
+		return fmt.Errorf("server returned error: %d", resp.StatusCode)
+	}
+
+	return nil
+}

internal/archiver/collector.go

···
+package archiver
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"time"
+
+	"github.com/bluesky-social/indigo/api/bsky"
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// PostsResult represents a batch of fetched posts with pagination info
+type PostsResult struct {
+	Posts  []models.Post
+	Cursor string
+	Total  int
+}
+
+// ProfileResult represents a fetched profile
+type ProfileResult struct {
+	Profile models.Profile
+}
+
+// FetchPosts retrieves posts from an author's feed with pagination
+func FetchPosts(ctx context.Context, client *ATProtoClient, actor, cursor string, limit int64) (*PostsResult, error) {
+	if limit <= 0 || limit > 100 {
+		limit = 50 // Default batch size
+	}
+
+	// Call app.bsky.feed.getAuthorFeed using DPoP-authenticated client
+	output, err := bsky.FeedGetAuthorFeed(ctx, client.GetClient(), actor, cursor, "", false, limit)
+	if err != nil {
+		return nil, fmt.Errorf("failed to fetch author feed: %w", err)
+	}
+
+	// Convert feed view posts to our Post model
+	var posts []models.Post
+	for _, feedPost := range output.Feed {
+		post, err := convertFeedViewPostToPost(feedPost)
+		if err != nil {
+			// Log error but continue processing other posts
+			fmt.Printf("Warning: failed to convert post: %v\n", err)
+			continue
+		}
+		posts = append(posts, *post)
+	}
+
+	// Handle cursor (may be nil)
+	cursorStr := ""
+	if output.Cursor != nil {
+		cursorStr = *output.Cursor
+	}
+
+	return &PostsResult{
+		Posts:  posts,
+		Cursor: cursorStr,
+		Total:  len(posts),
+	}, nil
+}
+
+// convertFeedViewPostToPost converts a bsky.FeedDefs_FeedViewPost to our models.Post
+func convertFeedViewPostToPost(feedPost *bsky.FeedDefs_FeedViewPost) (*models.Post, error) {
+	if feedPost == nil || feedPost.Post == nil {
+		return nil, fmt.Errorf("invalid feed post")
+	}
+
+	p := feedPost.Post
+	post := &models.Post{
+		URI:        p.Uri,
+		CID:        p.Cid,
+		DID:        p.Author.Did,
+		IndexedAt:  time.Now(), // Use current time for indexed_at
+		ArchivedAt: time.Now(),
+	}
+
+	// Handle pointer fields (may be nil)
+	if p.LikeCount != nil {
+		post.LikeCount = int(*p.LikeCount)
+	}
+	if p.RepostCount != nil {
+		post.RepostCount = int(*p.RepostCount)
+	}
+	if p.ReplyCount != nil {
+		post.ReplyCount = int(*p.ReplyCount)
+	}
+
+	// Parse record to get text and created_at
+	// Record is CBOR-encoded, marshal to JSON first
+	if p.Record != nil {
+		recordJSON, err := json.Marshal(p.Record.Val)
+		if err == nil {
+			var recMap map[string]interface{}
+			if err := json.Unmarshal(recordJSON, &recMap); err == nil {
+				if text, ok := recMap["text"].(string); ok {
+					post.Text = text
+				}
+				if createdAt, ok := recMap["createdAt"].(string); ok {
+					t, err := time.Parse(time.RFC3339, createdAt)
+					if err == nil {
+						post.CreatedAt = t
+					}
+				}
+				// Check if it's a reply
+				if reply, ok := recMap["reply"].(map[string]interface{}); ok {
+					post.IsReply = true
+					if parent, ok := reply["parent"].(map[string]interface{}); ok {
+						if uri, ok := parent["uri"].(string); ok {
+							post.ReplyParent = uri
+						}
+					}
+				}
+			}
+		}
+	}
+
+	// Check for media embeds
+	if p.Embed != nil && p.Embed.EmbedImages_View != nil && len(p.Embed.EmbedImages_View.Images) > 0 {
+		post.HasMedia = true
+		post.EmbedType = "images"
+
+		// Serialize embed data
+		embedData, err := json.Marshal(p.Embed)
+		if err == nil {
+			post.EmbedData = embedData
+		}
+	} else if p.Embed != nil && p.Embed.EmbedExternal_View != nil {
+		post.EmbedType = "external"
+		embedData, err := json.Marshal(p.Embed)
+		if err == nil {
+			post.EmbedData = embedData
+		}
+		// Mark as having media if external embed has a thumbnail
+		if p.Embed.EmbedExternal_View.External != nil && p.Embed.EmbedExternal_View.External.Thumb != nil {
+			post.HasMedia = true
+		}
+	} else if p.Embed != nil && p.Embed.EmbedRecord_View != nil {
+		post.EmbedType = "record"
+		embedData, err := json.Marshal(p.Embed)
+		if err == nil {
+			post.EmbedData = embedData
+		}
+	} else if p.Embed != nil && p.Embed.EmbedRecordWithMedia_View != nil {
+		post.HasMedia = true
+		post.EmbedType = "record_with_media"
+		embedData, err := json.Marshal(p.Embed)
+		if err == nil {
+			post.EmbedData = embedData
+		}
+	}
+
+	// Serialize labels if present
+	if len(p.Labels) > 0 {
+		labels, err := json.Marshal(p.Labels)
+		if err == nil {
+			post.Labels = labels
+		}
+	}
+
+	return post, nil
+}
+
+// FetchProfile retrieves an actor's profile
+func FetchProfile(ctx context.Context, client *ATProtoClient, actor string) (*ProfileResult, error) {
+	// Call app.bsky.actor.getProfile using DPoP-authenticated client
+	output, err := bsky.ActorGetProfile(ctx, client.GetClient(), actor)
+	if err != nil {
+		return nil, fmt.Errorf("failed to fetch profile: %w", err)
+	}
+
+	profile := models.Profile{
+		DID:        output.Did,
+		Handle:     output.Handle,
+		SnapshotAt: time.Now(),
+	}
+
+	// Handle optional pointer fields
+	if output.DisplayName != nil {
+		profile.DisplayName = *output.DisplayName
+	}
+	if output.Description != nil {
+		profile.Description = *output.Description
+	}
+	if output.FollowersCount != nil {
+		profile.FollowersCount = int(*output.FollowersCount)
+	}
+	if output.FollowsCount != nil {
+		profile.FollowsCount = int(*output.FollowsCount)
+	}
+	if output.PostsCount != nil {
+		profile.PostsCount = int(*output.PostsCount)
+	}
+
+	// Avatar and banner URLs (if present)
+	if output.Avatar != nil {
+		profile.AvatarURL = *output.Avatar
+	}
+	if output.Banner != nil {
+		profile.BannerURL = *output.Banner
+	}
+
+	return &ProfileResult{
+		Profile: profile,
+	}, nil
+}

internal/archiver/media.go

···
+package archiver
+
+import (
+	"crypto/sha256"
+	"encoding/hex"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// DownloadMediaResult represents the result of a media download
+type DownloadMediaResult struct {
+	Media    models.Media
+	Skipped  bool   // True if file already exists
+	FilePath string // Local file path
+}
+
+// DownloadMedia downloads media from a URL and stores it with SHA-256 hash-based path
+func DownloadMedia(mediaPath, url, postURI, mimeType, altText string, width, height int) (*DownloadMediaResult, error) {
+	// Create HTTP request with User-Agent to avoid bot detection
+	req, err := http.NewRequest("GET", url, nil)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create request: %w", err)
+	}
+	req.Header.Set("User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36")
+
+	// Download the media
+	client := &http.Client{}
+	resp, err := client.Do(req)
+	if err != nil {
+		return nil, fmt.Errorf("failed to download media: %w", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("failed to download media: status %d", resp.StatusCode)
+	}
+
+	// Get MIME type from response header if not provided
+	if mimeType == "" {
+		mimeType = resp.Header.Get("Content-Type")
+	}
+
+	// Read the content and calculate hash
+	content, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return nil, fmt.Errorf("failed to read media content: %w", err)
+	}
+
+	// Detect actual content type from magic bytes if we got HTML (anti-bot page)
+	if len(content) > 0 && (mimeType == "" || strings.Contains(mimeType, "text/html")) {
+		mimeType = http.DetectContentType(content)
+	}
+
+	// Calculate SHA-256 hash
+	hash := sha256.Sum256(content)
+	hashStr := hex.EncodeToString(hash[:])
+
+	// Determine file extension from MIME type or URL
+	ext := getFileExtension(mimeType, url)
+
+	// Create content-addressable path: media/<hash[:2]>/<hash[2:4]>/<hash>.<ext>
+	// This distributes files across directories to avoid too many files in one dir
+	dir1 := hashStr[:2]
+	dir2 := hashStr[2:4]
+	dirPath := filepath.Join(mediaPath, dir1, dir2)
+
+	// Create directories if they don't exist
+	if err := os.MkdirAll(dirPath, 0755); err != nil {
+		return nil, fmt.Errorf("failed to create media directory: %w", err)
+	}
+
+	// Full file path
+	filePath := filepath.Join(dirPath, hashStr+ext)
+
+	// Check if file already exists (dedupe via content-addressable storage)
+	if _, err := os.Stat(filePath); err == nil {
+		// File exists, skip download
+		media := models.Media{
+			Hash:      hashStr,
+			PostURI:   postURI,
+			MimeType:  mimeType,
+			FilePath:  filePath,
+			SizeBytes: int64(len(content)),
+			Width:     width,
+			Height:    height,
+			AltText:   altText,
+			CreatedAt: time.Now(),
+		}
+		return &DownloadMediaResult{
+			Media:    media,
+			Skipped:  true,
+			FilePath: filePath,
+		}, nil
+	}
+
+	// Write content to file
+	if err := os.WriteFile(filePath, content, 0644); err != nil {
+		return nil, fmt.Errorf("failed to write media file: %w", err)
+	}
+
+	// Create media record
+	media := models.Media{
+		Hash:      hashStr,
+		PostURI:   postURI,
+		MimeType:  mimeType,
+		FilePath:  filePath,
+		SizeBytes: int64(len(content)),
+		Width:     width,
+		Height:    height,
+		AltText:   altText,
+		CreatedAt: time.Now(),
+	}
+
+	return &DownloadMediaResult{
+		Media:    media,
+		Skipped:  false,
+		FilePath: filePath,
+	}, nil
+}
+
+// getFileExtension determines the file extension from MIME type or URL
+func getFileExtension(mimeType, url string) string {
+	// Try to get extension from MIME type first
+	switch {
+	case strings.HasPrefix(mimeType, "image/jpeg"), strings.HasPrefix(mimeType, "image/jpg"):
+		return ".jpg"
+	case strings.HasPrefix(mimeType, "image/png"):
+		return ".png"
+	case strings.HasPrefix(mimeType, "image/gif"):
+		return ".gif"
+	case strings.HasPrefix(mimeType, "image/webp"):
+		return ".webp"
+	case strings.HasPrefix(mimeType, "video/mp4"):
+		return ".mp4"
+	case strings.HasPrefix(mimeType, "video/webm"):
+		return ".webm"
+	}
+
+	// Fall back to URL extension
+	if idx := strings.LastIndex(url, "."); idx != -1 {
+		ext := url[idx:]
+		// Only return if it looks like a valid extension (< 6 chars, no slashes)
+		if len(ext) < 6 && !strings.Contains(ext, "/") {
+			return ext
+		}
+	}
+
+	// Default to .bin if we can't determine
+	return ".bin"
+}

internal/archiver/ratelimit.go

···
+package archiver
+
+import (
+	"context"
+	"fmt"
+	"sync"
+	"time"
+)
+
+// RateLimiter implements a token bucket rate limiter
+type RateLimiter struct {
+	requestsPerWindow int           // Maximum requests allowed per window
+	windowDuration    time.Duration // Duration of the rate limit window
+	burst             int           // Maximum burst size
+
+	mu         sync.Mutex
+	tokens     int       // Current available tokens
+	lastRefill time.Time // Last time tokens were refilled
+}
+
+// NewRateLimiter creates a new token bucket rate limiter
+func NewRateLimiter(requestsPerWindow int, windowDuration time.Duration, burst int) *RateLimiter {
+	if burst <= 0 {
+		burst = requestsPerWindow / 10 // Default burst to 10% of window
+		if burst < 1 {
+			burst = 1
+		}
+	}
+
+	return &RateLimiter{
+		requestsPerWindow: requestsPerWindow,
+		windowDuration:    windowDuration,
+		burst:             burst,
+		tokens:            burst, // Start with full burst capacity
+		lastRefill:        time.Now(),
+	}
+}
+
+// Wait blocks until a token is available or context is cancelled
+func (rl *RateLimiter) Wait(ctx context.Context) error {
+	for {
+		// Try to acquire a token
+		if rl.tryAcquire() {
+			return nil
+		}
+
+		// Calculate how long to wait before next refill
+		rl.mu.Lock()
+		waitTime := rl.timeUntilNextToken()
+		rl.mu.Unlock()
+
+		// Wait for either the context to be done or the wait time to elapse
+		select {
+		case <-ctx.Done():
+			return ctx.Err()
+		case <-time.After(waitTime):
+			// Continue loop to try again
+		}
+	}
+}
+
+// tryAcquire attempts to acquire a token without blocking
+func (rl *RateLimiter) tryAcquire() bool {
+	rl.mu.Lock()
+	defer rl.mu.Unlock()
+
+	rl.refillTokens()
+
+	if rl.tokens > 0 {
+		rl.tokens--
+		return true
+	}
+
+	return false
+}
+
+// refillTokens adds tokens based on time elapsed since last refill
+func (rl *RateLimiter) refillTokens() {
+	now := time.Now()
+	elapsed := now.Sub(rl.lastRefill)
+
+	// Calculate how many tokens should be added based on elapsed time
+	tokensToAdd := int(elapsed.Seconds() / rl.windowDuration.Seconds() * float64(rl.requestsPerWindow))
+
+	if tokensToAdd > 0 {
+		rl.tokens += tokensToAdd
+		// Cap at burst size
+		if rl.tokens > rl.burst {
+			rl.tokens = rl.burst
+		}
+		rl.lastRefill = now
+	}
+}
+
+// timeUntilNextToken calculates how long until the next token will be available
+func (rl *RateLimiter) timeUntilNextToken() time.Duration {
+	// If we have tokens, no wait needed
+	if rl.tokens > 0 {
+		return 0
+	}
+
+	// Calculate time per token
+	timePerToken := rl.windowDuration / time.Duration(rl.requestsPerWindow)
+
+	// Time since last refill
+	elapsed := time.Since(rl.lastRefill)
+
+	// Time until next token
+	timeUntilNext := timePerToken - elapsed
+	if timeUntilNext < 0 {
+		timeUntilNext = 0
+	}
+
+	return timeUntilNext
+}
+
+// Stats returns current rate limiter statistics
+func (rl *RateLimiter) Stats() map[string]interface{} {
+	rl.mu.Lock()
+	defer rl.mu.Unlock()
+
+	rl.refillTokens() // Update tokens before reporting
+
+	return map[string]interface{}{
+		"tokens":              rl.tokens,
+		"burst":               rl.burst,
+		"requests_per_window": rl.requestsPerWindow,
+		"window_duration":     rl.windowDuration.String(),
+		"last_refill":         rl.lastRefill.Format(time.RFC3339),
+	}
+}
+
+// String returns a human-readable representation of the rate limiter
+func (rl *RateLimiter) String() string {
+	rl.mu.Lock()
+	defer rl.mu.Unlock()
+
+	rl.refillTokens()
+
+	return fmt.Sprintf("RateLimiter(%d/%d tokens, %d req/%s)",
+		rl.tokens, rl.burst, rl.requestsPerWindow, rl.windowDuration)
+}

internal/archiver/worker.go

···
+package archiver
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"fmt"
+	"log"
+	"time"
+
+	"github.com/google/uuid"
+	"github.com/shindakun/bskyarchive/internal/models"
+	"github.com/shindakun/bskyarchive/internal/storage"
+	"github.com/shindakun/bskyoauth"
+)
+
+// BskySessionGetter defines the interface for getting bskyoauth sessions
+type BskySessionGetter interface {
+	GetBskySession(sessionID string) (*bskyoauth.Session, error)
+}
+
+// Worker manages background archive operations
+type Worker struct {
+	db                *sql.DB
+	mediaPath         string
+	rateLimiter       *RateLimiter
+	bskySessionGetter BskySessionGetter
+}
+
+// NewWorker creates a new archive worker
+func NewWorker(db *sql.DB, mediaPath string, requestsPerWindow int, windowDuration time.Duration, bskySessionGetter BskySessionGetter) *Worker {
+	return &Worker{
+		db:                db,
+		mediaPath:         mediaPath,
+		rateLimiter:       NewRateLimiter(requestsPerWindow, windowDuration, 10),
+		bskySessionGetter: bskySessionGetter,
+	}
+}
+
+// StartArchive initiates a new archive operation for a user
+// bskyoauthSessionID is the session ID from bskyoauth library
+func (w *Worker) StartArchive(ctx context.Context, did, bskyoauthSessionID string, operationType models.OperationType) (string, error) {
+	// Check if there's already an active operation
+	activeOp, err := storage.GetActiveOperation(w.db, did)
+	if err != nil {
+		return "", fmt.Errorf("failed to check active operations: %w", err)
+	}
+
+	if activeOp != nil {
+		return "", fmt.Errorf("archive operation already in progress: %s", activeOp.ID)
+	}
+
+	// Create new operation
+	operationID := uuid.New().String()
+	operation := &models.ArchiveOperation{
+		ID:              operationID,
+		DID:             did,
+		Type:            operationType,
+		Status:          models.OperationStatusPending,
+		ProgressCurrent: 0,
+		ProgressTotal:   0, // Will be set once we know total posts
+		StartedAt:       time.Now(),
+	}
+
+	if err := storage.CreateOperation(w.db, operation); err != nil {
+		return "", fmt.Errorf("failed to create operation: %w", err)
+	}
+
+	// Launch worker goroutine
+	go w.archiveWorker(context.Background(), operationID, did, bskyoauthSessionID)
+
+	return operationID, nil
+}
+
+// archiveWorker runs the actual archive process in the background
+func (w *Worker) archiveWorker(ctx context.Context, operationID, did, bskyoauthSessionID string) {
+	log.Printf("Starting archive operation %s for DID %s", operationID, did)
+
+	// Update operation status to running
+	operation, err := storage.GetOperation(w.db, operationID)
+	if err != nil {
+		log.Printf("Failed to get operation: %v", err)
+		return
+	}
+
+	operation.Status = models.OperationStatusRunning
+	if err := storage.UpdateOperation(w.db, operation); err != nil {
+		log.Printf("Failed to update operation status: %v", err)
+		return
+	}
+
+	// Get the bskyoauth session with DPoP key
+	bskySession, err := w.bskySessionGetter.GetBskySession(bskyoauthSessionID)
+	if err != nil {
+		log.Printf("Failed to get bskyoauth session: %v", err)
+		operation.Status = models.OperationStatusFailed
+		operation.ErrorMessage = fmt.Sprintf("failed to get session: %v", err)
+		now := time.Now()
+		operation.CompletedAt = &now
+		_ = storage.UpdateOperation(w.db, operation)
+		return
+	}
+
+	// Create AT Protocol client with DPoP authentication
+	client, err := NewATProtoClientFromSession(ctx, bskySession)
+	if err != nil {
+		log.Printf("Failed to create AT Protocol client: %v", err)
+		operation.Status = models.OperationStatusFailed
+		operation.ErrorMessage = fmt.Sprintf("failed to create client: %v", err)
+		now := time.Now()
+		operation.CompletedAt = &now
+		_ = storage.UpdateOperation(w.db, operation)
+		return
+	}
+
+	// Fetch and save profile first
+	if err := w.fetchProfile(ctx, client, did); err != nil {
+		log.Printf("Warning: failed to fetch profile: %v", err)
+		// Continue anyway - profile is not critical
+	}
+
+	// Fetch posts with pagination
+	var cursor string
+	totalPosts := 0
+	batchSize := int64(50)
+
+	for {
+		// Check for context cancellation
+		select {
+		case <-ctx.Done():
+			operation.Status = models.OperationStatusCancelled
+			operation.ErrorMessage = "cancelled by user"
+			now := time.Now()
+			operation.CompletedAt = &now
+			_ = storage.UpdateOperation(w.db, operation)
+			return
+		default:
+		}
+
+		// Rate limit
+		if err := w.rateLimiter.Wait(ctx); err != nil {
+			log.Printf("Rate limiter cancelled: %v", err)
+			break
+		}
+
+		// Fetch batch of posts
+		result, err := FetchPosts(ctx, client, did, cursor, batchSize)
+		if err != nil {
+			log.Printf("Failed to fetch posts: %v", err)
+			operation.Status = models.OperationStatusFailed
+			operation.ErrorMessage = fmt.Sprintf("failed to fetch posts: %v", err)
+			now := time.Now()
+			operation.CompletedAt = &now
+			_ = storage.UpdateOperation(w.db, operation)
+			return
+		}
+
+		// Process each post
+		for _, post := range result.Posts {
+			// Save post
+			if err := storage.SavePost(w.db, &post); err != nil {
+				log.Printf("Warning: failed to save post %s: %v", post.URI, err)
+				continue
+			}
+
+			// Download media if present
+			if post.HasMedia && post.EmbedData != nil {
+				if err := w.downloadPostMedia(ctx, &post); err != nil {
+					log.Printf("Warning: failed to download media for post %s: %v", post.URI, err)
+				}
+			}
+
+			totalPosts++
+		}
+
+		// Update progress
+		operation.ProgressCurrent = int64(totalPosts)
+		if err := storage.UpdateOperation(w.db, operation); err != nil {
+			log.Printf("Warning: failed to update progress: %v", err)
+		}
+
+		// Check if we have more pages
+		if result.Cursor == "" || len(result.Posts) == 0 {
+			break
+		}
+
+		cursor = result.Cursor
+	}
+
+	// Mark operation as completed
+	operation.Status = models.OperationStatusCompleted
+	operation.ProgressCurrent = int64(totalPosts)
+	operation.ProgressTotal = int64(totalPosts)
+	now := time.Now()
+	operation.CompletedAt = &now
+
+	if err := storage.UpdateOperation(w.db, operation); err != nil {
+		log.Printf("Failed to mark operation as completed: %v", err)
+	}
+
+	log.Printf("Archive operation %s completed: %d posts archived", operationID, totalPosts)
+}
+
+// fetchProfile fetches and saves the user's profile
+func (w *Worker) fetchProfile(ctx context.Context, client *ATProtoClient, did string) error {
+	result, err := FetchProfile(ctx, client, did)
+	if err != nil {
+		return err
+	}
+
+	return storage.SaveProfile(w.db, &result.Profile)
+}
+
+// downloadPostMedia downloads all media from a post's embed data
+func (w *Worker) downloadPostMedia(ctx context.Context, post *models.Post) error {
+	// Parse embed data
+	var embedData map[string]interface{}
+	if err := json.Unmarshal(post.EmbedData, &embedData); err != nil {
+		return fmt.Errorf("failed to parse embed data: %w", err)
+	}
+
+	// Handle different embed types
+	if post.EmbedType == "images" || post.EmbedType == "record_with_media" {
+		images, err := extractImages(embedData)
+		if err != nil {
+			return err
+		}
+
+		for _, img := range images {
+			// Rate limit
+			if err := w.rateLimiter.Wait(ctx); err != nil {
+				return err
+			}
+
+			// Download image
+			result, err := DownloadMedia(
+				w.mediaPath,
+				img.URL,
+				post.URI,
+				img.MimeType,
+				img.AltText,
+				img.Width,
+				img.Height,
+			)
+			if err != nil {
+				log.Printf("Warning: failed to download image: %v", err)
+				continue
+			}
+
+			// Save media metadata
+			if err := storage.SaveMedia(w.db, &result.Media); err != nil {
+				log.Printf("Warning: failed to save media metadata: %v", err)
+			}
+		}
+	} else if post.EmbedType == "external" {
+		// Download thumbnail from external link embed
+		thumbnail, err := extractExternalThumbnail(embedData)
+		if err == nil && thumbnail.URL != "" {
+			// Rate limit
+			if err := w.rateLimiter.Wait(ctx); err != nil {
+				return err
+			}
+
+			// Download thumbnail
+			result, err := DownloadMedia(
+				w.mediaPath,
+				thumbnail.URL,
+				post.URI,
+				thumbnail.MimeType,
+				thumbnail.AltText,
+				thumbnail.Width,
+				thumbnail.Height,
+			)
+			if err != nil {
+				log.Printf("Warning: failed to download external thumbnail: %v", err)
+			} else {
+				// Save media metadata
+				if err := storage.SaveMedia(w.db, &result.Media); err != nil {
+					log.Printf("Warning: failed to save media metadata: %v", err)
+				}
+			}
+		}
+
+		// Also download the main external resource (GIF, video, etc.)
+		resource, err := extractExternalResource(embedData)
+		if err == nil && resource.URL != "" {
+			// Rate limit
+			if err := w.rateLimiter.Wait(ctx); err != nil {
+				return err
+			}
+
+			// Download main resource
+			result, err := DownloadMedia(
+				w.mediaPath,
+				resource.URL,
+				post.URI,
+				resource.MimeType,
+				resource.AltText,
+				resource.Width,
+				resource.Height,
+			)
+			if err != nil {
+				log.Printf("Warning: failed to download external resource: %v", err)
+			} else {
+				// Save media metadata
+				if err := storage.SaveMedia(w.db, &result.Media); err != nil {
+					log.Printf("Warning: failed to save media metadata: %v", err)
+				}
+			}
+		}
+	}
+
+	return nil
+}
+
+// ImageInfo represents image metadata from embed data
+type ImageInfo struct {
+	URL      string
+	MimeType string
+	AltText  string
+	Width    int
+	Height   int
+}
+
+// extractImages extracts image information from embed data
+func extractImages(embedData map[string]interface{}) ([]ImageInfo, error) {
+	var images []ImageInfo
+
+	// Look for images in EmbedImages_View
+	if view, ok := embedData["EmbedImages_View"].(map[string]interface{}); ok {
+		if imagesArray, ok := view["images"].([]interface{}); ok {
+			for _, imgInterface := range imagesArray {
+				if img, ok := imgInterface.(map[string]interface{}); ok {
+					info := ImageInfo{}
+
+					if fullsize, ok := img["fullsize"].(string); ok {
+						info.URL = fullsize
+					}
+					if alt, ok := img["alt"].(string); ok {
+						info.AltText = alt
+					}
+
+					// Try to get dimensions from aspectRatio if available
+					if aspectRatio, ok := img["aspectRatio"].(map[string]interface{}); ok {
+						if width, ok := aspectRatio["width"].(float64); ok {
+							info.Width = int(width)
+						}
+						if height, ok := aspectRatio["height"].(float64); ok {
+							info.Height = int(height)
+						}
+					}
+
+					// Default MIME type for images
+					info.MimeType = "image/jpeg"
+
+					if info.URL != "" {
+						images = append(images, info)
+					}
+				}
+			}
+		}
+	}
+
+	// Look for images in EmbedRecordWithMedia_View
+	if media, ok := embedData["media"].(map[string]interface{}); ok {
+		if mediaImages, ok := media["EmbedImages_View"].(map[string]interface{}); ok {
+			if imagesArray, ok := mediaImages["images"].([]interface{}); ok {
+				for _, imgInterface := range imagesArray {
+					if img, ok := imgInterface.(map[string]interface{}); ok {
+						info := ImageInfo{}
+
+						if fullsize, ok := img["fullsize"].(string); ok {
+							info.URL = fullsize
+						}
+						if alt, ok := img["alt"].(string); ok {
+							info.AltText = alt
+						}
+
+						info.MimeType = "image/jpeg"
+
+						if info.URL != "" {
+							images = append(images, info)
+						}
+					}
+				}
+			}
+		}
+	}
+
+	return images, nil
+}
+
+// extractExternalThumbnail extracts thumbnail information from external embed data
+func extractExternalThumbnail(embedData map[string]interface{}) (ImageInfo, error) {
+	var thumbnail ImageInfo
+
+	// Look for external embed thumbnail - the structure is flat with "external" at top level
+	if external, ok := embedData["external"].(map[string]interface{}); ok {
+		// Get thumbnail URL
+		if thumb, ok := external["thumb"].(string); ok {
+			thumbnail.URL = thumb
+		}
+
+		// Get alt text from description
+		if desc, ok := external["description"].(string); ok {
+			thumbnail.AltText = desc
+		}
+
+		// Default MIME type for thumbnails (usually JPEG)
+		thumbnail.MimeType = "image/jpeg"
+	}
+
+	return thumbnail, nil
+}
+
+// extractExternalResource extracts the main external resource (image/GIF/video URL)
+func extractExternalResource(embedData map[string]interface{}) (ImageInfo, error) {
+	var resource ImageInfo
+
+	// Look for external embed main resource - the structure is flat with "external" at top level
+	if external, ok := embedData["external"].(map[string]interface{}); ok {
+		// Get the main resource URL
+		if uri, ok := external["uri"].(string); ok {
+			resource.URL = uri
+		}
+
+		// Get alt text from description
+		if desc, ok := external["description"].(string); ok {
+			resource.AltText = desc
+		}
+
+		// Try to determine MIME type from URL
+		// Most external embeds are GIFs, images, or videos
+		resource.MimeType = "" // Will be determined from URL extension
+	}
+
+	return resource, nil
+}

internal/auth/oauth.go

···
 package auth
 
 import (
+	"context"
 	"fmt"
 	"net/http"
 
···
 	http.Redirect(w, r, flowState.AuthURL, http.StatusSeeOther)
 }
 
-// HandleOAuthCallback completes the OAuth flow
+// HandleOAuthCallback completes the OAuth flow using bskyoauth's built-in handler
 func (om *OAuthManager) HandleOAuthCallback(w http.ResponseWriter, r *http.Request) {
-	// Check for OAuth errors
-	if errMsg := r.URL.Query().Get("error"); errMsg != "" {
-		errDesc := r.URL.Query().Get("error_description")
-		http.Error(w, fmt.Sprintf("OAuth error: %s - %s", errMsg, errDesc), http.StatusBadRequest)
-		return
-	}
+	// Use bskyoauth's callback handler which stores the session with DPoP key/nonce
+	handler := om.client.CallbackHandler(func(w http.ResponseWriter, r *http.Request, sessionID string) {
+		// bskyoauth has stored the full session (including DPoP key/nonce)
+		// Now we just need to link it to our app session
 
-	// Get authorization code, state, and issuer
-	code := r.URL.Query().Get("code")
-	if code == "" {
-		http.Error(w, "Missing authorization code", http.StatusBadRequest)
-		return
-	}
+		// Get the bskyoauth session to extract user info
+		bskySession, err := om.client.GetSession(sessionID)
+		if err != nil {
+			http.Error(w, fmt.Sprintf("Failed to get session: %v", err), http.StatusInternalServerError)
+			return
+		}
 
-	state := r.URL.Query().Get("state")
-	if state == "" {
-		http.Error(w, "Missing state parameter", http.StatusBadRequest)
-		return
-	}
+		// Save session ID and user info to our database
+		err = om.sessionManager.SaveSession(
+			w, r,
+			bskySession.DID,
+			bskySession.DID, // Use DID as handle for now
+			bskySession.DID, // Use DID as display name for now
+			sessionID,        // Store the bskyoauth session ID
+			"",              // No longer store tokens directly
+		)
+		if err != nil {
+			http.Error(w, fmt.Sprintf("Failed to save session: %v", err), http.StatusInternalServerError)
+			return
+		}
 
-	issuer := r.URL.Query().Get("iss")
+		// Redirect to dashboard
+		http.Redirect(w, r, "/dashboard", http.StatusSeeOther)
+	})
 
-	// Complete OAuth flow
-	ctx := r.Context()
-	bskySession, err := om.client.CompleteAuthFlow(ctx, code, state, issuer)
-	if err != nil {
-		http.Error(w, fmt.Sprintf("Failed to complete OAuth flow: %v", err), http.StatusInternalServerError)
-		return
-	}
-
-	// Extract handle from form or use DID as fallback
-	// TODO: Fetch actual handle from Bluesky API in future iteration
-	handle := r.FormValue("handle")
-	if handle == "" {
-		handle = bskySession.DID // Use DID as fallback
-	}
-
-	// Save authenticated session to our database
-	err = om.sessionManager.SaveSession(
-		w, r,
-		bskySession.DID,
-		handle,
-		handle, // Use handle as display name initially
-		bskySession.AccessToken,
-		bskySession.RefreshToken,
-	)
-	if err != nil {
-		http.Error(w, fmt.Sprintf("Failed to save session: %v", err), http.StatusInternalServerError)
-		return
-	}
-
-	// Redirect to dashboard
-	http.Redirect(w, r, "/dashboard", http.StatusSeeOther)
+	handler(w, r)
 }
 
 // HandleLogout clears session and redirects to landing page
···
 func (om *OAuthManager) ClientMetadataHandler() http.HandlerFunc {
 	return om.client.ClientMetadataHandler()
 }
+
+// RefreshAccessToken refreshes an expired access token using the refresh token
+func (om *OAuthManager) RefreshAccessToken(did, refreshToken string) (string, string, error) {
+	ctx := context.Background()
+
+	// Create a session object for the refresh call
+	// Note: We only need DID and RefreshToken for the refresh operation
+	session := &bskyoauth.Session{
+		DID:          did,
+		RefreshToken: refreshToken,
+	}
+
+	// Call the bskyoauth RefreshToken method
+	newSession, err := om.client.RefreshToken(ctx, session)
+	if err != nil {
+		return "", "", fmt.Errorf("failed to refresh token: %w", err)
+	}
+
+	// Return the new tokens
+	return newSession.AccessToken, newSession.RefreshToken, nil
+}
+
+// GetBskySession retrieves the bskyoauth session by session ID
+func (om *OAuthManager) GetBskySession(sessionID string) (*bskyoauth.Session, error) {
+	return om.client.GetSession(sessionID)
+}

internal/auth/session.go

···
 }
 
 // SaveSession stores a new session in the database and cookie
-func (sm *SessionManager) SaveSession(w http.ResponseWriter, r *http.Request, did, handle, displayName, accessToken, refreshToken string) error {
+// accessToken parameter now stores the bskyoauth session ID
+// refreshToken parameter is ignored (kept for compatibility)
+func (sm *SessionManager) SaveSession(w http.ResponseWriter, r *http.Request, did, handle, displayName, bskyoauthSessionID, _ string) error {
 	// Create session model
 	session := &models.Session{
 		ID:           uuid.New().String(),
 		DID:          did,
 		Handle:       handle,
 		DisplayName:  displayName,
-		AccessToken:  accessToken,
-		RefreshToken: refreshToken,
-		ExpiresAt:    time.Now().Add(7 * 24 * time.Hour),
+		AccessToken:  bskyoauthSessionID, // Store bskyoauth session ID
+		RefreshToken: "",                  // Not used anymore
+		ExpiresAt:    time.Now().Add(30 * 24 * time.Hour), // 30 days like example
 		CreatedAt:    time.Now(),
 	}
 
-	// Validate session
-	if err := session.Validate(); err != nil {
-		return fmt.Errorf("session validation failed: %w", err)
+	// Validate session (skip AccessToken check since it's now a session ID)
+	if session.ID == "" {
+		return fmt.Errorf("session id is required")
+	}
+	if session.DID == "" {
+		return fmt.Errorf("did is required")
 	}
 
 	// Save to database
···
 		session.DID,
 		session.Handle,
 		session.DisplayName,
-		session.AccessToken,
+		session.AccessToken, // bskyoauth session ID
 		session.RefreshToken,
 		session.ExpiresAt,
 		session.CreatedAt,
···
 func SetSessionInContext(ctx context.Context, session *models.Session) context.Context {
 	return context.WithValue(ctx, "session", session)
 }
+
+// UpdateAccessToken updates the access and refresh tokens for a session
+func (sm *SessionManager) UpdateAccessToken(did, accessToken, refreshToken string) error {
+	query := `
+		UPDATE sessions
+		SET access_token = ?, refresh_token = ?, expires_at = ?
+		WHERE did = ?
+	`
+
+	// Extend expiration by 7 days when refreshing token
+	newExpiry := time.Now().Add(7 * 24 * time.Hour)
+
+	result, err := sm.db.Exec(query, accessToken, refreshToken, newExpiry, did)
+	if err != nil {
+		return fmt.Errorf("failed to update session tokens: %w", err)
+	}
+
+	rowsAffected, err := result.RowsAffected()
+	if err != nil {
+		return fmt.Errorf("failed to get rows affected: %w", err)
+	}
+
+	if rowsAffected == 0 {
+		return fmt.Errorf("no session found for DID: %s", did)
+	}
+
+	return nil
+}

internal/models/media.go

···
+package models
+
+import (
+	"fmt"
+	"time"
+)
+
+// Media represents media (images, videos) embedded in posts, with local storage information
+type Media struct {
+	Hash      string    `json:"hash" db:"hash"`             // SHA-256 hash (content-addressable)
+	PostURI   string    `json:"post_uri" db:"post_uri"`     // FK to posts table
+	MimeType  string    `json:"mime_type" db:"mime_type"`   // e.g., "image/jpeg"
+	FilePath  string    `json:"file_path" db:"file_path"`   // Local file path
+	SizeBytes int64     `json:"size_bytes" db:"size_bytes"` // File size in bytes
+	Width     int       `json:"width" db:"width"`           // Image/video width
+	Height    int       `json:"height" db:"height"`         // Image/video height
+	AltText   string    `json:"alt_text" db:"alt_text"`     // Accessibility alt text
+	CreatedAt time.Time `json:"created_at" db:"created_at"` // When archived
+}
+
+// Validate checks if the media fields are valid
+func (m *Media) Validate() error {
+	if m.Hash == "" {
+		return fmt.Errorf("hash is required")
+	}
+
+	if len(m.Hash) != 64 {
+		return fmt.Errorf("hash must be 64 characters (SHA-256)")
+	}
+
+	if m.PostURI == "" {
+		return fmt.Errorf("post_uri is required")
+	}
+
+	if m.MimeType == "" {
+		return fmt.Errorf("mime_type is required")
+	}
+
+	if m.FilePath == "" {
+		return fmt.Errorf("file_path is required")
+	}
+
+	if m.SizeBytes < 0 {
+		return fmt.Errorf("size_bytes must be non-negative")
+	}
+
+	if m.Width < 0 {
+		return fmt.Errorf("width must be non-negative")
+	}
+
+	if m.Height < 0 {
+		return fmt.Errorf("height must be non-negative")
+	}
+
+	return nil
+}

internal/models/operation.go

···
+package models
+
+import (
+	"fmt"
+	"time"
+)
+
+// OperationType represents the type of archive operation
+type OperationType string
+
+const (
+	OperationTypeInitial     OperationType = "initial"
+	OperationTypeIncremental OperationType = "incremental"
+	OperationTypeRefresh     OperationType = "refresh"
+)
+
+// OperationStatus represents the status of an archive operation
+type OperationStatus string
+
+const (
+	OperationStatusPending   OperationStatus = "pending"
+	OperationStatusRunning   OperationStatus = "running"
+	OperationStatusCompleted OperationStatus = "completed"
+	OperationStatusFailed    OperationStatus = "failed"
+	OperationStatusCancelled OperationStatus = "cancelled"
+)
+
+// ArchiveOperation represents a background archive operation
+type ArchiveOperation struct {
+	ID              string          `json:"id" db:"id"`
+	DID             string          `json:"did" db:"did"`
+	Type            OperationType   `json:"type" db:"type"`
+	Status          OperationStatus `json:"status" db:"status"`
+	ProgressCurrent int64           `json:"progress_current" db:"progress"`
+	ProgressTotal   int64           `json:"progress_total" db:"total"`
+	ErrorMessage    string          `json:"error_message,omitempty" db:"error"`
+	StartedAt       time.Time       `json:"started_at" db:"started_at"`
+	CompletedAt     *time.Time      `json:"completed_at,omitempty" db:"completed_at"`
+}
+
+// Validate checks if the operation fields are valid
+func (o *ArchiveOperation) Validate() error {
+	if o.ID == "" {
+		return fmt.Errorf("id is required")
+	}
+
+	if o.DID == "" {
+		return fmt.Errorf("did is required")
+	}
+
+	if o.Type != OperationTypeInitial && o.Type != OperationTypeIncremental && o.Type != OperationTypeRefresh {
+		return fmt.Errorf("invalid operation type: %s", o.Type)
+	}
+
+	if o.Status != OperationStatusPending && o.Status != OperationStatusRunning &&
+		o.Status != OperationStatusCompleted && o.Status != OperationStatusFailed &&
+		o.Status != OperationStatusCancelled {
+		return fmt.Errorf("invalid operation status: %s", o.Status)
+	}
+
+	if o.ProgressCurrent < 0 {
+		return fmt.Errorf("progress_current must be non-negative")
+	}
+
+	if o.ProgressTotal < 0 {
+		return fmt.Errorf("progress_total must be non-negative")
+	}
+
+	if o.ProgressTotal > 0 && o.ProgressCurrent > o.ProgressTotal {
+		return fmt.Errorf("progress_current cannot exceed progress_total")
+	}
+
+	return nil
+}
+
+// ProgressPercentage calculates the completion percentage (0-100)
+func (o *ArchiveOperation) ProgressPercentage() float64 {
+	if o.ProgressTotal == 0 {
+		return 0.0
+	}
+	return (float64(o.ProgressCurrent) / float64(o.ProgressTotal)) * 100.0
+}
+
+// IsComplete checks if the operation has finished (regardless of success/failure)
+func (o *ArchiveOperation) IsComplete() bool {
+	return o.Status == OperationStatusCompleted ||
+		o.Status == OperationStatusFailed ||
+		o.Status == OperationStatusCancelled
+}
+
+// IsActive checks if the operation is currently running
+func (o *ArchiveOperation) IsActive() bool {
+	return o.Status == OperationStatusRunning
+}

internal/models/post.go

···
+package models
+
+import (
+	"encoding/json"
+	"fmt"
+	"strings"
+	"time"
+)
+
+// Post represents a single Bluesky post with all metadata, engagement metrics, and relationships
+type Post struct {
+	URI         string          `json:"uri" db:"uri"`
+	CID         string          `json:"cid" db:"cid"`
+	DID         string          `json:"did" db:"did"`
+	Text        string          `json:"text" db:"text"`
+	CreatedAt   time.Time       `json:"created_at" db:"created_at"`
+	IndexedAt   time.Time       `json:"indexed_at" db:"indexed_at"`
+	HasMedia    bool            `json:"has_media" db:"has_media"`
+	LikeCount   int             `json:"like_count" db:"like_count"`
+	RepostCount int             `json:"repost_count" db:"repost_count"`
+	ReplyCount  int             `json:"reply_count" db:"reply_count"`
+	QuoteCount  int             `json:"quote_count" db:"quote_count"`
+	IsReply     bool            `json:"is_reply" db:"is_reply"`
+	ReplyParent string          `json:"reply_parent,omitempty" db:"reply_parent"`
+	EmbedType   string          `json:"embed_type,omitempty" db:"embed_type"`
+	EmbedData   json.RawMessage `json:"embed_data,omitempty" db:"embed_data"`
+	Labels      json.RawMessage `json:"labels,omitempty" db:"labels"`
+	ArchivedAt  time.Time       `json:"archived_at" db:"archived_at"`
+}
+
+// Validate checks if the post fields are valid
+func (p *Post) Validate() error {
+	if p.URI == "" {
+		return fmt.Errorf("uri is required")
+	}
+
+	if !strings.HasPrefix(p.URI, "at://") {
+		return fmt.Errorf("uri must start with 'at://'")
+	}
+
+	if p.CID == "" {
+		return fmt.Errorf("cid is required")
+	}
+
+	if p.DID == "" {
+		return fmt.Errorf("did is required")
+	}
+
+	// Bluesky posts can be up to 300 graphemes, but we're archiving existing posts
+	// so we shouldn't validate the length - just store what we receive
+	// The actual limit is enforced by Bluesky when creating posts, not when archiving
+
+	if p.CreatedAt.IsZero() {
+		return fmt.Errorf("created_at is required")
+	}
+
+	if p.IndexedAt.IsZero() {
+		return fmt.Errorf("indexed_at is required")
+	}
+
+	validEmbedTypes := []string{"images", "external", "record", "record_with_media", ""}
+	if p.EmbedType != "" {
+		found := false
+		for _, et := range validEmbedTypes {
+			if p.EmbedType == et {
+				found = true
+				break
+			}
+		}
+		if !found {
+			return fmt.Errorf("embed_type must be one of: images, external, record, record_with_media")
+		}
+	}
+
+	return nil
+}
+
+// PagedPostsResponse represents a paginated list of posts
+type PagedPostsResponse struct {
+	Posts      []Post `json:"posts"`
+	Total      int    `json:"total"`
+	Page       int    `json:"page"`
+	PageSize   int    `json:"page_size"`
+	TotalPages int    `json:"total_pages"`
+}
+
+// SearchPostsResponse represents search results with highlighting
+type SearchPostsResponse struct {
+	Posts   []Post `json:"posts"`
+	Total   int    `json:"total"`
+	Query   string `json:"query"`
+	Elapsed string `json:"elapsed"` // Search duration
+}

internal/models/status.go

···
+package models
+
+import (
+	"time"
+)
+
+// ArchiveStatus represents the current state of a user's archive
+// This is derived data aggregated from posts, media, and operations tables
+type ArchiveStatus struct {
+	DID                 string                `json:"did"`
+	TotalPosts          int64                 `json:"total_posts"`
+	TotalMedia          int64                 `json:"total_media"`
+	OldestPost          *time.Time            `json:"oldest_post,omitempty"`
+	NewestPost          *time.Time            `json:"newest_post,omitempty"`
+	LastArchiveAt       *time.Time            `json:"last_archive_at,omitempty"`
+	LastSuccessfulAt    *time.Time            `json:"last_successful_at,omitempty"`
+	TotalArchiveSize    int64                 `json:"total_archive_size_bytes"` // Total size in bytes
+	ActiveOperation     *ArchiveOperation     `json:"active_operation,omitempty"`
+	RecentOperations    []ArchiveOperation    `json:"recent_operations,omitempty"` // Last 5 operations
+	PostsWithMedia      int64                 `json:"posts_with_media"`
+	RepliesCount        int64                 `json:"replies_count"`
+	MediaBreakdown      *MediaBreakdown       `json:"media_breakdown,omitempty"`
+	EngagementSummary   *EngagementSummary    `json:"engagement_summary,omitempty"`
+}
+
+// MediaBreakdown provides statistics about media types
+type MediaBreakdown struct {
+	Images int64 `json:"images"`
+	Videos int64 `json:"videos"`
+	Other  int64 `json:"other"`
+}
+
+// EngagementSummary provides aggregate engagement statistics
+type EngagementSummary struct {
+	TotalLikes   int64 `json:"total_likes"`
+	TotalReposts int64 `json:"total_reposts"`
+	TotalReplies int64 `json:"total_replies"`
+	AvgLikes     float64 `json:"avg_likes"`
+	AvgReposts   float64 `json:"avg_reposts"`
+	AvgReplies   float64 `json:"avg_replies"`
+}
+
+// HasActiveOperation checks if there is currently an active archive operation
+func (s *ArchiveStatus) HasActiveOperation() bool {
+	return s.ActiveOperation != nil && s.ActiveOperation.IsActive()
+}
+
+// IsEmpty checks if the archive has no content
+func (s *ArchiveStatus) IsEmpty() bool {
+	return s.TotalPosts == 0 && s.TotalMedia == 0
+}
+
+// ArchiveSizeGB returns the archive size in gigabytes
+func (s *ArchiveStatus) ArchiveSizeGB() float64 {
+	return float64(s.TotalArchiveSize) / (1024 * 1024 * 1024)
+}
+
+// ArchiveSizeMB returns the archive size in megabytes
+func (s *ArchiveStatus) ArchiveSizeMB() float64 {
+	return float64(s.TotalArchiveSize) / (1024 * 1024)
+}

internal/storage/db.go

···
 			like_count INTEGER DEFAULT 0,
 			repost_count INTEGER DEFAULT 0,
 			reply_count INTEGER DEFAULT 0,
+			quote_count INTEGER DEFAULT 0,
 			is_reply BOOLEAN DEFAULT 0,
 			reply_parent TEXT,
 			embed_type TEXT,
 			embed_data JSON,
 			labels JSON,
-			archived_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-			FOREIGN KEY (did) REFERENCES sessions(did) ON DELETE CASCADE
+			archived_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 		)`,
 
 		// Create FTS5 virtual table for full-text search
···
 
 	if err := tx.Commit(); err != nil {
 		return fmt.Errorf("failed to commit migrations: %w", err)
+	}
+
+	// Run incremental migrations
+	if err := runIncrementalMigrations(db); err != nil {
+		return fmt.Errorf("failed to run incremental migrations: %w", err)
+	}
+
+	return nil
+}
+
+// runIncrementalMigrations runs schema updates for existing databases
+func runIncrementalMigrations(db *sql.DB) error {
+	// Get current schema version
+	var currentVersion int
+	err := db.QueryRow("SELECT version FROM schema_version ORDER BY version DESC LIMIT 1").Scan(&currentVersion)
+	if err != nil {
+		return fmt.Errorf("failed to get current schema version: %w", err)
+	}
+
+	// Migration 2: Add quote_count column to posts table
+	if currentVersion < 2 {
+		tx, err := db.Begin()
+		if err != nil {
+			return fmt.Errorf("failed to begin transaction for migration 2: %w", err)
+		}
+		defer tx.Rollback()
+
+		// Check if column already exists (in case of partial migration)
+		var columnExists bool
+		err = tx.QueryRow(`
+			SELECT COUNT(*) > 0
+			FROM pragma_table_info('posts')
+			WHERE name = 'quote_count'
+		`).Scan(&columnExists)
+		if err != nil {
+			return fmt.Errorf("failed to check if quote_count exists: %w", err)
+		}
+
+		if !columnExists {
+			if _, err := tx.Exec("ALTER TABLE posts ADD COLUMN quote_count INTEGER DEFAULT 0"); err != nil {
+				return fmt.Errorf("failed to add quote_count column: %w", err)
+			}
+		}
+
+		// Update schema version
+		if _, err := tx.Exec("INSERT OR REPLACE INTO schema_version (version) VALUES (2)"); err != nil {
+			return fmt.Errorf("failed to update schema version to 2: %w", err)
+		}
+
+		if err := tx.Commit(); err != nil {
+			return fmt.Errorf("failed to commit migration 2: %w", err)
+		}
 	}
 
 	return nil

internal/storage/media.go

···
+package storage
+
+import (
+	"database/sql"
+	"fmt"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// SaveMedia saves media metadata to the database with content-addressable path
+func SaveMedia(db *sql.DB, media *models.Media) error {
+	if err := media.Validate(); err != nil {
+		return fmt.Errorf("invalid media: %w", err)
+	}
+
+	query := `
+		INSERT INTO media (
+			hash, post_uri, mime_type, file_path, size_bytes,
+			width, height, alt_text, created_at
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+		ON CONFLICT(hash) DO UPDATE SET
+			post_uri = excluded.post_uri,
+			mime_type = excluded.mime_type,
+			file_path = excluded.file_path,
+			size_bytes = excluded.size_bytes,
+			width = excluded.width,
+			height = excluded.height,
+			alt_text = excluded.alt_text
+	`
+
+	_, err := db.Exec(query,
+		media.Hash, media.PostURI, media.MimeType, media.FilePath, media.SizeBytes,
+		media.Width, media.Height, media.AltText, media.CreatedAt,
+	)
+
+	if err != nil {
+		return fmt.Errorf("failed to save media: %w", err)
+	}
+
+	return nil
+}
+
+// ListMediaForPost retrieves all media associated with a post
+func ListMediaForPost(db *sql.DB, postURI string) ([]models.Media, error) {
+	query := `
+		SELECT hash, post_uri, mime_type, file_path, size_bytes,
+			   width, height, alt_text, created_at
+		FROM media
+		WHERE post_uri = ?
+		ORDER BY created_at ASC
+	`
+
+	rows, err := db.Query(query, postURI)
+	if err != nil {
+		return nil, fmt.Errorf("failed to list media: %w", err)
+	}
+	defer rows.Close()
+
+	var mediaList []models.Media
+	for rows.Next() {
+		var media models.Media
+		err := rows.Scan(
+			&media.Hash, &media.PostURI, &media.MimeType, &media.FilePath,
+			&media.SizeBytes, &media.Width, &media.Height, &media.AltText, &media.CreatedAt,
+		)
+		if err != nil {
+			return nil, fmt.Errorf("failed to scan media: %w", err)
+		}
+		mediaList = append(mediaList, media)
+	}
+
+	if err = rows.Err(); err != nil {
+		return nil, fmt.Errorf("error iterating media: %w", err)
+	}
+
+	return mediaList, nil
+}
+
+// GetMediaByHash retrieves media by its content hash
+func GetMediaByHash(db *sql.DB, hash string) (*models.Media, error) {
+	query := `
+		SELECT hash, post_uri, mime_type, file_path, size_bytes,
+			   width, height, alt_text, created_at
+		FROM media
+		WHERE hash = ?
+	`
+
+	var media models.Media
+	err := db.QueryRow(query, hash).Scan(
+		&media.Hash, &media.PostURI, &media.MimeType, &media.FilePath,
+		&media.SizeBytes, &media.Width, &media.Height, &media.AltText, &media.CreatedAt,
+	)
+
+	if err == sql.ErrNoRows {
+		return nil, fmt.Errorf("media not found: %s", hash)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to get media: %w", err)
+	}
+
+	return &media, nil
+}

internal/storage/operations.go

···
+package storage
+
+import (
+	"database/sql"
+	"fmt"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// CreateOperation creates a new archive operation
+func CreateOperation(db *sql.DB, op *models.ArchiveOperation) error {
+	if err := op.Validate(); err != nil {
+		return fmt.Errorf("invalid operation: %w", err)
+	}
+
+	query := `
+		INSERT INTO operations (
+			id, did, type, status, progress, total, error, started_at, completed_at
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+	`
+
+	_, err := db.Exec(query,
+		op.ID, op.DID, op.Type, op.Status, op.ProgressCurrent, op.ProgressTotal,
+		op.ErrorMessage, op.StartedAt, op.CompletedAt,
+	)
+
+	if err != nil {
+		return fmt.Errorf("failed to create operation: %w", err)
+	}
+
+	return nil
+}
+
+// UpdateOperation updates an existing archive operation
+func UpdateOperation(db *sql.DB, op *models.ArchiveOperation) error {
+	if err := op.Validate(); err != nil {
+		return fmt.Errorf("invalid operation: %w", err)
+	}
+
+	query := `
+		UPDATE operations
+		SET status = ?, progress = ?, total = ?, error = ?, completed_at = ?
+		WHERE id = ?
+	`
+
+	result, err := db.Exec(query,
+		op.Status, op.ProgressCurrent, op.ProgressTotal, op.ErrorMessage, op.CompletedAt, op.ID,
+	)
+
+	if err != nil {
+		return fmt.Errorf("failed to update operation: %w", err)
+	}
+
+	rowsAffected, err := result.RowsAffected()
+	if err != nil {
+		return fmt.Errorf("failed to check rows affected: %w", err)
+	}
+
+	if rowsAffected == 0 {
+		return fmt.Errorf("operation not found: %s", op.ID)
+	}
+
+	return nil
+}
+
+// GetActiveOperation retrieves the currently active operation for a user
+func GetActiveOperation(db *sql.DB, did string) (*models.ArchiveOperation, error) {
+	query := `
+		SELECT id, did, type, status, progress, total, error, started_at, completed_at
+		FROM operations
+		WHERE did = ? AND status IN ('pending', 'running')
+		ORDER BY started_at DESC
+		LIMIT 1
+	`
+
+	var op models.ArchiveOperation
+	var completedAt sql.NullTime
+
+	err := db.QueryRow(query, did).Scan(
+		&op.ID, &op.DID, &op.Type, &op.Status, &op.ProgressCurrent, &op.ProgressTotal,
+		&op.ErrorMessage, &op.StartedAt, &completedAt,
+	)
+
+	if err == sql.ErrNoRows {
+		return nil, nil // No active operation
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to get active operation: %w", err)
+	}
+
+	if completedAt.Valid {
+		op.CompletedAt = &completedAt.Time
+	}
+
+	return &op, nil
+}
+
+// GetOperation retrieves an operation by ID
+func GetOperation(db *sql.DB, id string) (*models.ArchiveOperation, error) {
+	query := `
+		SELECT id, did, type, status, progress, total, error, started_at, completed_at
+		FROM operations
+		WHERE id = ?
+	`
+
+	var op models.ArchiveOperation
+	var completedAt sql.NullTime
+
+	err := db.QueryRow(query, id).Scan(
+		&op.ID, &op.DID, &op.Type, &op.Status, &op.ProgressCurrent, &op.ProgressTotal,
+		&op.ErrorMessage, &op.StartedAt, &completedAt,
+	)
+
+	if err == sql.ErrNoRows {
+		return nil, fmt.Errorf("operation not found: %s", id)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to get operation: %w", err)
+	}
+
+	if completedAt.Valid {
+		op.CompletedAt = &completedAt.Time
+	}
+
+	return &op, nil
+}
+
+// ListRecentOperations retrieves the most recent operations for a user
+func ListRecentOperations(db *sql.DB, did string, limit int) ([]models.ArchiveOperation, error) {
+	if limit <= 0 {
+		limit = 5 // Default to 5 recent operations
+	}
+
+	query := `
+		SELECT id, did, type, status, progress, total, error, started_at, completed_at
+		FROM operations
+		WHERE did = ?
+		ORDER BY started_at DESC
+		LIMIT ?
+	`
+
+	rows, err := db.Query(query, did, limit)
+	if err != nil {
+		return nil, fmt.Errorf("failed to list operations: %w", err)
+	}
+	defer rows.Close()
+
+	var operations []models.ArchiveOperation
+	for rows.Next() {
+		var op models.ArchiveOperation
+		var completedAt sql.NullTime
+
+		err := rows.Scan(
+			&op.ID, &op.DID, &op.Type, &op.Status, &op.ProgressCurrent, &op.ProgressTotal,
+			&op.ErrorMessage, &op.StartedAt, &completedAt,
+		)
+		if err != nil {
+			return nil, fmt.Errorf("failed to scan operation: %w", err)
+		}
+
+		if completedAt.Valid {
+			op.CompletedAt = &completedAt.Time
+		}
+
+		operations = append(operations, op)
+	}
+
+	if err = rows.Err(); err != nil {
+		return nil, fmt.Errorf("error iterating operations: %w", err)
+	}
+
+	return operations, nil
+}

internal/storage/posts.go

···
+package storage
+
+import (
+	"database/sql"
+	"encoding/json"
+	"fmt"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// SavePost inserts or updates a post in the database
+func SavePost(db *sql.DB, post *models.Post) error {
+	if err := post.Validate(); err != nil {
+		return fmt.Errorf("invalid post: %w", err)
+	}
+
+	// Serialize JSON fields
+	embedData, err := json.Marshal(post.EmbedData)
+	if err != nil {
+		return fmt.Errorf("failed to marshal embed_data: %w", err)
+	}
+
+	labels, err := json.Marshal(post.Labels)
+	if err != nil {
+		return fmt.Errorf("failed to marshal labels: %w", err)
+	}
+
+	query := `
+		INSERT INTO posts (
+			uri, cid, did, text, created_at, indexed_at,
+			has_media, like_count, repost_count, reply_count, quote_count,
+			is_reply, reply_parent, embed_type, embed_data, labels, archived_at
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+		ON CONFLICT(uri) DO UPDATE SET
+			cid = excluded.cid,
+			text = excluded.text,
+			indexed_at = excluded.indexed_at,
+			has_media = excluded.has_media,
+			like_count = excluded.like_count,
+			repost_count = excluded.repost_count,
+			reply_count = excluded.reply_count,
+			quote_count = excluded.quote_count,
+			embed_type = excluded.embed_type,
+			embed_data = excluded.embed_data,
+			labels = excluded.labels
+	`
+
+	_, err = db.Exec(query,
+		post.URI, post.CID, post.DID, post.Text, post.CreatedAt, post.IndexedAt,
+		post.HasMedia, post.LikeCount, post.RepostCount, post.ReplyCount, post.QuoteCount,
+		post.IsReply, post.ReplyParent, post.EmbedType, embedData, labels, post.ArchivedAt,
+	)
+
+	if err != nil {
+		return fmt.Errorf("failed to save post: %w", err)
+	}
+
+	return nil
+}
+
+// GetPost retrieves a post by its URI
+func GetPost(db *sql.DB, uri string) (*models.Post, error) {
+	query := `
+		SELECT uri, cid, did, text, created_at, indexed_at,
+			   has_media, like_count, repost_count, reply_count, quote_count,
+			   is_reply, reply_parent, embed_type, embed_data, labels, archived_at
+		FROM posts
+		WHERE uri = ?
+	`
+
+	var post models.Post
+	var embedData, labels []byte
+
+	err := db.QueryRow(query, uri).Scan(
+		&post.URI, &post.CID, &post.DID, &post.Text, &post.CreatedAt, &post.IndexedAt,
+		&post.HasMedia, &post.LikeCount, &post.RepostCount, &post.ReplyCount, &post.QuoteCount,
+		&post.IsReply, &post.ReplyParent, &post.EmbedType, &embedData, &labels, &post.ArchivedAt,
+	)
+
+	if err == sql.ErrNoRows {
+		return nil, fmt.Errorf("post not found: %s", uri)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to get post: %w", err)
+	}
+
+	// Deserialize JSON fields
+	if len(embedData) > 0 {
+		post.EmbedData = json.RawMessage(embedData)
+	}
+	if len(labels) > 0 {
+		post.Labels = json.RawMessage(labels)
+	}
+
+	return &post, nil
+}
+
+// ListPosts retrieves posts with pagination
+func ListPosts(db *sql.DB, did string, limit, offset int) (*models.PagedPostsResponse, error) {
+	if limit <= 0 || limit > 100 {
+		limit = 20 // Default page size
+	}
+	if offset < 0 {
+		offset = 0
+	}
+
+	// Get total count - if did is empty, count all posts
+	var total int64
+	var countQuery string
+	var err error
+	if did == "" {
+		countQuery = `SELECT COUNT(*) FROM posts`
+		err = db.QueryRow(countQuery).Scan(&total)
+	} else {
+		countQuery = `SELECT COUNT(*) FROM posts WHERE did = ?`
+		err = db.QueryRow(countQuery, did).Scan(&total)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to count posts: %w", err)
+	}
+
+	// Get posts - if did is empty, get all posts
+	var query string
+	var rows *sql.Rows
+	if did == "" {
+		query = `
+			SELECT uri, cid, did, text, created_at, indexed_at,
+				   has_media, like_count, repost_count, reply_count, quote_count,
+				   is_reply, reply_parent, embed_type, embed_data, labels, archived_at
+			FROM posts
+			ORDER BY created_at DESC
+			LIMIT ? OFFSET ?
+		`
+		rows, err = db.Query(query, limit, offset)
+	} else {
+		query = `
+			SELECT uri, cid, did, text, created_at, indexed_at,
+				   has_media, like_count, repost_count, reply_count, quote_count,
+				   is_reply, reply_parent, embed_type, embed_data, labels, archived_at
+			FROM posts
+			WHERE did = ?
+			ORDER BY created_at DESC
+			LIMIT ? OFFSET ?
+		`
+		rows, err = db.Query(query, did, limit, offset)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to list posts: %w", err)
+	}
+	defer rows.Close()
+
+	var posts []models.Post
+	for rows.Next() {
+		var post models.Post
+		var embedData, labels []byte
+
+		err := rows.Scan(
+			&post.URI, &post.CID, &post.DID, &post.Text, &post.CreatedAt, &post.IndexedAt,
+			&post.HasMedia, &post.LikeCount, &post.RepostCount, &post.ReplyCount, &post.QuoteCount,
+			&post.IsReply, &post.ReplyParent, &post.EmbedType, &embedData, &labels, &post.ArchivedAt,
+		)
+		if err != nil {
+			return nil, fmt.Errorf("failed to scan post: %w", err)
+		}
+
+		// Deserialize JSON fields
+		if len(embedData) > 0 {
+			post.EmbedData = json.RawMessage(embedData)
+		}
+		if len(labels) > 0 {
+			post.Labels = json.RawMessage(labels)
+		}
+
+		posts = append(posts, post)
+	}
+
+	if err = rows.Err(); err != nil {
+		return nil, fmt.Errorf("error iterating posts: %w", err)
+	}
+
+	// Calculate pagination metadata
+	page := (offset / limit) + 1
+	totalPages := int((total + int64(limit) - 1) / int64(limit))
+
+	return &models.PagedPostsResponse{
+		Posts:      posts,
+		Total:      int(total),
+		Page:       page,
+		PageSize:   limit,
+		TotalPages: totalPages,
+	}, nil
+}

internal/storage/profiles.go

···
+package storage
+
+import (
+	"database/sql"
+	"fmt"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// SaveProfile saves a profile snapshot to the database
+func SaveProfile(db *sql.DB, profile *models.Profile) error {
+	if err := profile.Validate(); err != nil {
+		return fmt.Errorf("invalid profile: %w", err)
+	}
+
+	query := `
+		INSERT INTO profiles (
+			did, handle, display_name, description, avatar_url, banner_url,
+			followers_count, follows_count, posts_count, snapshot_at
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+	`
+
+	_, err := db.Exec(query,
+		profile.DID, profile.Handle, profile.DisplayName, profile.Description,
+		profile.AvatarURL, profile.BannerURL, profile.FollowersCount,
+		profile.FollowsCount, profile.PostsCount, profile.SnapshotAt,
+	)
+
+	if err != nil {
+		return fmt.Errorf("failed to save profile: %w", err)
+	}
+
+	return nil
+}
+
+// GetLatestProfile retrieves the most recent profile snapshot for a DID
+func GetLatestProfile(db *sql.DB, did string) (*models.Profile, error) {
+	query := `
+		SELECT did, handle, display_name, description, avatar_url, banner_url,
+			   followers_count, follows_count, posts_count, snapshot_at
+		FROM profiles
+		WHERE did = ?
+		ORDER BY snapshot_at DESC
+		LIMIT 1
+	`
+
+	var profile models.Profile
+	err := db.QueryRow(query, did).Scan(
+		&profile.DID, &profile.Handle, &profile.DisplayName, &profile.Description,
+		&profile.AvatarURL, &profile.BannerURL, &profile.FollowersCount,
+		&profile.FollowsCount, &profile.PostsCount, &profile.SnapshotAt,
+	)
+
+	if err == sql.ErrNoRows {
+		return nil, fmt.Errorf("profile not found for DID: %s", did)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("failed to get profile: %w", err)
+	}
+
+	return &profile, nil
+}

internal/storage/search.go

···
+package storage
+
+import (
+	"database/sql"
+	"encoding/json"
+	"fmt"
+	"strings"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// SearchPosts performs full-text search using FTS5, or direct URI lookup for AT protocol URIs
+func SearchPosts(db *sql.DB, did, query string, limit, offset int) (*models.SearchPostsResponse, error) {
+	if query == "" {
+		return nil, fmt.Errorf("search query is required")
+	}
+
+	if limit <= 0 || limit > 100 {
+		limit = 20 // Default page size
+	}
+	if offset < 0 {
+		offset = 0
+	}
+
+	// Check if query is an AT protocol URI
+	if strings.HasPrefix(query, "at://") {
+		// Direct URI lookup
+		post, err := GetPost(db, query)
+		if err != nil {
+			// Post not found, return empty results
+			return &models.SearchPostsResponse{
+				Posts:   []models.Post{},
+				Query:   query,
+				Total:   0,
+				Elapsed: "",
+			}, nil
+		}
+
+		// Return single post result
+		return &models.SearchPostsResponse{
+			Posts:   []models.Post{*post},
+			Query:   query,
+			Total:   1,
+			Elapsed: "",
+		}, nil
+	}
+
+	// Get total count of matching posts
+	countQuery := `
+		SELECT COUNT(*)
+		FROM posts_fts
+		WHERE posts_fts MATCH ?
+		AND uri IN (SELECT uri FROM posts WHERE did = ?)
+	`
+	var total int64
+	err := db.QueryRow(countQuery, query, did).Scan(&total)
+	if err != nil {
+		return nil, fmt.Errorf("failed to count search results: %w", err)
+	}
+
+	// Search posts using FTS5
+	searchQuery := `
+		SELECT p.uri, p.cid, p.did, p.text, p.created_at, p.indexed_at,
+			   p.has_media, p.like_count, p.repost_count, p.reply_count,
+			   p.is_reply, p.reply_parent, p.embed_type, p.embed_data, p.labels, p.archived_at
+		FROM posts_fts
+		JOIN posts p ON posts_fts.uri = p.uri
+		WHERE posts_fts MATCH ?
+		AND p.did = ?
+		ORDER BY p.created_at DESC
+		LIMIT ? OFFSET ?
+	`
+
+	rows, err := db.Query(searchQuery, query, did, limit, offset)
+	if err != nil {
+		return nil, fmt.Errorf("failed to search posts: %w", err)
+	}
+	defer rows.Close()
+
+	var posts []models.Post
+	for rows.Next() {
+		var post models.Post
+		var embedData, labels []byte
+
+		err := rows.Scan(
+			&post.URI, &post.CID, &post.DID, &post.Text, &post.CreatedAt, &post.IndexedAt,
+			&post.HasMedia, &post.LikeCount, &post.RepostCount, &post.ReplyCount,
+			&post.IsReply, &post.ReplyParent, &post.EmbedType, &embedData, &labels, &post.ArchivedAt,
+		)
+		if err != nil {
+			return nil, fmt.Errorf("failed to scan search result: %w", err)
+		}
+
+		// Deserialize JSON fields
+		if len(embedData) > 0 {
+			post.EmbedData = json.RawMessage(embedData)
+		}
+		if len(labels) > 0 {
+			post.Labels = json.RawMessage(labels)
+		}
+
+		posts = append(posts, post)
+	}
+
+	if err = rows.Err(); err != nil {
+		return nil, fmt.Errorf("error iterating search results: %w", err)
+	}
+
+	return &models.SearchPostsResponse{
+		Posts:   posts,
+		Query:   query,
+		Total:   int(total),
+		Elapsed: "", // Set by caller if needed
+	}, nil
+}

internal/storage/status.go

···
+package storage
+
+import (
+	"database/sql"
+	"fmt"
+	"strings"
+	"time"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+)
+
+// parseTimestamp parses SQLite timestamp strings
+func parseTimestamp(s string) (time.Time, error) {
+	// Try RFC3339 first (standard ISO 8601)
+	t, err := time.Parse(time.RFC3339, s)
+	if err == nil {
+		return t, nil
+	}
+
+	// Try SQLite default format
+	t, err = time.Parse("2006-01-02 15:04:05", s)
+	if err == nil {
+		return t, nil
+	}
+
+	// Try with timezone
+	t, err = time.Parse("2006-01-02 15:04:05-07:00", s)
+	if err == nil {
+		return t, nil
+	}
+
+	// Try Go's time.Time.String() format with timezone and monotonic clock
+	// Example: "2025-10-30 18:00:45.077092 -0700 PDT m=+23.090008635"
+	// We'll parse just the date/time part before the monotonic clock
+	if idx := strings.Index(s, " m="); idx != -1 {
+		s = s[:idx] // Remove monotonic clock part
+	}
+	// Now try parsing: "2025-10-30 18:00:45.077092 -0700 PDT"
+	t, err = time.Parse("2006-01-02 15:04:05.999999 -0700 MST", s)
+	if err == nil {
+		return t, nil
+	}
+
+	// Try without fractional seconds
+	t, err = time.Parse("2006-01-02 15:04:05 -0700 MST", s)
+	return t, err
+}
+
+// GetArchiveStatus retrieves aggregated archive status for a user
+func GetArchiveStatus(db *sql.DB, did string) (*models.ArchiveStatus, error) {
+	status := &models.ArchiveStatus{
+		DID: did,
+	}
+
+	// Get total posts count
+	err := db.QueryRow("SELECT COUNT(*) FROM posts WHERE did = ?", did).Scan(&status.TotalPosts)
+	if err != nil {
+		return nil, fmt.Errorf("failed to count posts: %w", err)
+	}
+
+	// Get total media count
+	err = db.QueryRow(`
+		SELECT COUNT(DISTINCT m.hash)
+		FROM media m
+		JOIN posts p ON m.post_uri = p.uri
+		WHERE p.did = ?
+	`, did).Scan(&status.TotalMedia)
+	if err != nil {
+		return nil, fmt.Errorf("failed to count media: %w", err)
+	}
+
+	// Get oldest and newest posts
+	var oldestPostStr, newestPostStr sql.NullString
+	err = db.QueryRow(`
+		SELECT MIN(created_at), MAX(created_at)
+		FROM posts
+		WHERE did = ?
+	`, did).Scan(&oldestPostStr, &newestPostStr)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get post date range: %w", err)
+	}
+	if oldestPostStr.Valid && oldestPostStr.String != "" {
+		if t, err := parseTimestamp(oldestPostStr.String); err == nil {
+			status.OldestPost = &t
+		}
+	}
+	if newestPostStr.Valid && newestPostStr.String != "" {
+		if t, err := parseTimestamp(newestPostStr.String); err == nil {
+			status.NewestPost = &t
+		}
+	}
+
+	// Get last archive timestamp (most recent operation start time)
+	var lastArchiveStr sql.NullString
+	err = db.QueryRow(`
+		SELECT MAX(started_at)
+		FROM operations
+		WHERE did = ?
+	`, did).Scan(&lastArchiveStr)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get last archive time: %w", err)
+	}
+	if lastArchiveStr.Valid && lastArchiveStr.String != "" {
+		if t, err := parseTimestamp(lastArchiveStr.String); err == nil {
+			status.LastArchiveAt = &t
+		}
+	}
+
+	// Get last successful archive
+	var lastSuccessfulStr sql.NullString
+	err = db.QueryRow(`
+		SELECT MAX(completed_at)
+		FROM operations
+		WHERE did = ? AND status = 'completed'
+	`, did).Scan(&lastSuccessfulStr)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get last successful archive: %w", err)
+	}
+	if lastSuccessfulStr.Valid && lastSuccessfulStr.String != "" {
+		if t, err := parseTimestamp(lastSuccessfulStr.String); err == nil {
+			status.LastSuccessfulAt = &t
+		}
+	}
+
+	// Get total archive size
+	err = db.QueryRow(`
+		SELECT COALESCE(SUM(DISTINCT m.size_bytes), 0)
+		FROM media m
+		JOIN posts p ON m.post_uri = p.uri
+		WHERE p.did = ?
+	`, did).Scan(&status.TotalArchiveSize)
+	if err != nil {
+		return nil, fmt.Errorf("failed to calculate archive size: %w", err)
+	}
+
+	// Get posts with media count
+	err = db.QueryRow(`
+		SELECT COUNT(*)
+		FROM posts
+		WHERE did = ? AND has_media = 1
+	`, did).Scan(&status.PostsWithMedia)
+	if err != nil {
+		return nil, fmt.Errorf("failed to count posts with media: %w", err)
+	}
+
+	// Get replies count
+	err = db.QueryRow(`
+		SELECT COUNT(*)
+		FROM posts
+		WHERE did = ? AND is_reply = 1
+	`, did).Scan(&status.RepliesCount)
+	if err != nil {
+		return nil, fmt.Errorf("failed to count replies: %w", err)
+	}
+
+	// Get media breakdown
+	status.MediaBreakdown = &models.MediaBreakdown{}
+	err = db.QueryRow(`
+		SELECT
+			COALESCE(SUM(CASE WHEN m.mime_type LIKE 'image/%' THEN 1 ELSE 0 END), 0) as images,
+			COALESCE(SUM(CASE WHEN m.mime_type LIKE 'video/%' THEN 1 ELSE 0 END), 0) as videos,
+			COALESCE(SUM(CASE WHEN m.mime_type NOT LIKE 'image/%' AND m.mime_type NOT LIKE 'video/%' THEN 1 ELSE 0 END), 0) as other
+		FROM media m
+		JOIN posts p ON m.post_uri = p.uri
+		WHERE p.did = ?
+	`, did).Scan(&status.MediaBreakdown.Images, &status.MediaBreakdown.Videos, &status.MediaBreakdown.Other)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get media breakdown: %w", err)
+	}
+
+	// Get engagement summary
+	status.EngagementSummary = &models.EngagementSummary{}
+	err = db.QueryRow(`
+		SELECT
+			COALESCE(SUM(like_count), 0) as total_likes,
+			COALESCE(SUM(repost_count), 0) as total_reposts,
+			COALESCE(SUM(reply_count), 0) as total_replies,
+			COALESCE(AVG(like_count), 0) as avg_likes,
+			COALESCE(AVG(repost_count), 0) as avg_reposts,
+			COALESCE(AVG(reply_count), 0) as avg_replies
+		FROM posts
+		WHERE did = ?
+	`, did).Scan(
+		&status.EngagementSummary.TotalLikes,
+		&status.EngagementSummary.TotalReposts,
+		&status.EngagementSummary.TotalReplies,
+		&status.EngagementSummary.AvgLikes,
+		&status.EngagementSummary.AvgReposts,
+		&status.EngagementSummary.AvgReplies,
+	)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get engagement summary: %w", err)
+	}
+
+	// Get active operation
+	activeOp, err := GetActiveOperation(db, did)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get active operation: %w", err)
+	}
+	status.ActiveOperation = activeOp
+
+	// Get recent operations
+	recentOps, err := ListRecentOperations(db, did, 5)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get recent operations: %w", err)
+	}
+	status.RecentOperations = recentOps
+
+	return status, nil
+}
+
+// GetArchiveStatusSimple retrieves a simplified archive status (faster query)
+func GetArchiveStatusSimple(db *sql.DB, did string) (*models.ArchiveStatus, error) {
+	status := &models.ArchiveStatus{
+		DID: did,
+	}
+
+	// Single query to get basic stats
+	var oldestPostStr, newestPostStr sql.NullString
+	err := db.QueryRow(`
+		SELECT
+			COUNT(*) as total_posts,
+			MIN(created_at) as oldest_post,
+			MAX(created_at) as newest_post,
+			COALESCE(SUM(CASE WHEN has_media = 1 THEN 1 ELSE 0 END), 0) as posts_with_media,
+			COALESCE(SUM(CASE WHEN is_reply = 1 THEN 1 ELSE 0 END), 0) as replies
+		FROM posts
+		WHERE did = ?
+	`, did).Scan(
+		&status.TotalPosts,
+		&oldestPostStr,
+		&newestPostStr,
+		&status.PostsWithMedia,
+		&status.RepliesCount,
+	)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get basic stats: %w", err)
+	}
+
+	// Parse timestamp strings
+	if oldestPostStr.Valid && oldestPostStr.String != "" {
+		if t, err := parseTimestamp(oldestPostStr.String); err == nil {
+			status.OldestPost = &t
+		}
+	}
+	if newestPostStr.Valid && newestPostStr.String != "" {
+		if t, err := parseTimestamp(newestPostStr.String); err == nil {
+			status.NewestPost = &t
+		}
+	}
+
+	// Get active operation
+	activeOp, err := GetActiveOperation(db, did)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get active operation: %w", err)
+	}
+	status.ActiveOperation = activeOp
+
+	return status, nil
+}

internal/version/version.go

···
+package version
+
+import (
+	"os/exec"
+	"strings"
+	"sync"
+)
+
+var (
+	version     string
+	gitCommit   string
+	versionOnce sync.Once
+)
+
+// getVersionInfo gets version from git tag and commit hash
+func getVersionInfo() (string, string) {
+	versionOnce.Do(func() {
+		// Try to get the latest git tag
+		cmd := exec.Command("git", "describe", "--tags", "--abbrev=0")
+		output, err := cmd.Output()
+		if err == nil && len(output) > 0 {
+			version = strings.TrimSpace(string(output))
+		} else {
+			version = "dev"
+		}
+
+		// Get the short commit hash
+		cmd = exec.Command("git", "rev-parse", "--short=7", "HEAD")
+		output, err = cmd.Output()
+		if err == nil {
+			gitCommit = strings.TrimSpace(string(output))
+		} else {
+			gitCommit = ""
+		}
+	})
+	return version, gitCommit
+}
+
+// GetVersion returns the version string with git commit if available
+func GetVersion() string {
+	ver, commit := getVersionInfo()
+	if commit != "" && ver != "dev" {
+		return ver + "-" + commit
+	}
+	return ver
+}
+
+// GetFullVersion returns version with commit info
+func GetFullVersion() string {
+	ver, commit := getVersionInfo()
+	if commit != "" && ver != "dev" {
+		return ver + " (commit: " + commit + ")"
+	}
+	return ver
+}

internal/web/handlers/handlers.go

···
 
 import (
 	"database/sql"
+	"encoding/json"
 	"log"
 	"net/http"
 	"path/filepath"
+	"strconv"
 	"strings"
 
+	"github.com/go-chi/chi/v5"
+	"github.com/shindakun/bskyarchive/internal/archiver"
 	"github.com/shindakun/bskyarchive/internal/auth"
+	"github.com/shindakun/bskyarchive/internal/models"
+	"github.com/shindakun/bskyarchive/internal/storage"
+	"github.com/shindakun/bskyarchive/internal/version"
 )
 
 // Handlers holds dependencies for HTTP handlers
···
 	db             *sql.DB
 	sessionManager *auth.SessionManager
 	oauthManager   *auth.OAuthManager
+	worker         *archiver.Worker
 	logger         *log.Logger
 }
 
 // New creates a new Handlers instance
-func New(db *sql.DB, sessionManager *auth.SessionManager, oauthManager *auth.OAuthManager, logger *log.Logger) *Handlers {
+func New(db *sql.DB, sessionManager *auth.SessionManager, oauthManager *auth.OAuthManager, worker *archiver.Worker, logger *log.Logger) *Handlers {
 	return &Handlers{
 		db:             db,
 		sessionManager: sessionManager,
 		oauthManager:   oauthManager,
+		worker:         worker,
 		logger:         logger,
 	}
 }
···
 
 	data := TemplateData{
 		Session: session,
+		Version: version.GetVersion(),
 	}
 
 	if err := h.renderTemplate(w, "about", data); err != nil {
···
 		return
 	}
 
+	// Fetch archive status
+	status, err := storage.GetArchiveStatus(h.db, session.DID)
+	if err != nil {
+		h.logger.Printf("Error fetching archive status: %v", err)
+		// Continue anyway, just don't show status
+		status = nil
+	}
+
 	data := TemplateData{
 		Session: session,
+		Status:  status,
 	}
 
 	if err := h.renderTemplate(w, "dashboard", data); err != nil {
···
 
 // Archive renders the archive management page
 func (h *Handlers) Archive(w http.ResponseWriter, r *http.Request) {
-	http.Error(w, "Not implemented", http.StatusNotImplemented)
+	session, ok := auth.GetSessionFromContext(r.Context())
+	if !ok || session == nil {
+		http.Redirect(w, r, "/auth/login", http.StatusSeeOther)
+		return
+	}
+
+	// Fetch archive status
+	status, err := storage.GetArchiveStatus(h.db, session.DID)
+	if err != nil {
+		h.logger.Printf("Error fetching archive status: %v", err)
+		status = nil
+	}
+
+	data := TemplateData{
+		Session:            session,
+		Status:             status,
+		HasActiveOperation: status != nil && status.HasActiveOperation(),
+	}
+
+	if err := h.renderTemplate(w, "archive", data); err != nil {
+		h.logger.Printf("Error rendering archive template: %v", err)
+		http.Error(w, "Internal server error", http.StatusInternalServerError)
+	}
 }
 
 // ArchiveStart initiates an archive operation
 func (h *Handlers) ArchiveStart(w http.ResponseWriter, r *http.Request) {
-	http.Error(w, "Not implemented", http.StatusNotImplemented)
+	if r.Method != http.MethodPost {
+		http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
+		return
+	}
+
+	session, ok := auth.GetSessionFromContext(r.Context())
+	if !ok || session == nil {
+		http.Error(w, "Unauthorized", http.StatusUnauthorized)
+		return
+	}
+
+	// Parse operation type from request - support both JSON and form data
+	var operationType string
+
+	contentType := r.Header.Get("Content-Type")
+	if strings.Contains(contentType, "application/json") {
+		var req struct {
+			Type string `json:"type"`
+		}
+		if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+			h.logger.Printf("Failed to decode JSON: %v", err)
+			http.Error(w, "Invalid request", http.StatusBadRequest)
+			return
+		}
+		operationType = req.Type
+	} else {
+		// Parse as form data
+		if err := r.ParseForm(); err != nil {
+			h.logger.Printf("Failed to parse form: %v", err)
+			http.Error(w, "Invalid request", http.StatusBadRequest)
+			return
+		}
+		operationType = r.FormValue("type")
+	}
+
+	if operationType == "" {
+		h.logger.Printf("Missing operation type")
+		http.Error(w, "Operation type is required", http.StatusBadRequest)
+		return
+	}
+
+	// Validate operation type
+	var opType models.OperationType
+	switch operationType {
+	case "initial":
+		opType = models.OperationTypeInitial
+	case "incremental":
+		opType = models.OperationTypeIncremental
+	case "refresh":
+		opType = models.OperationTypeRefresh
+	default:
+		h.logger.Printf("Invalid operation type: %s", operationType)
+		http.Error(w, "Invalid operation type", http.StatusBadRequest)
+		return
+	}
+
+	// Start archive operation
+	// session.AccessToken now contains the bskyoauth session ID
+	operationID, err := h.worker.StartArchive(r.Context(), session.DID, session.AccessToken, opType)
+	if err != nil {
+		h.logger.Printf("Failed to start archive: %v", err)
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	h.logger.Printf("Started archive operation %s for DID %s", operationID, session.DID)
+
+	// Return success response
+	w.Header().Set("Content-Type", "application/json")
+	json.NewEncoder(w).Encode(map[string]string{
+		"operation_id": operationID,
+		"status":       "started",
+	})
 }
 
-// ArchiveStatus returns the status of an archive operation
+// ArchiveStatus returns the status of an archive operation (for HTMX polling)
 func (h *Handlers) ArchiveStatus(w http.ResponseWriter, r *http.Request) {
-	http.Error(w, "Not implemented", http.StatusNotImplemented)
+	session, ok := auth.GetSessionFromContext(r.Context())
+	if !ok || session == nil {
+		http.Error(w, "Unauthorized", http.StatusUnauthorized)
+		return
+	}
+
+	// Fetch archive status
+	status, err := storage.GetArchiveStatus(h.db, session.DID)
+	if err != nil {
+		h.logger.Printf("Error fetching archive status: %v", err)
+		http.Error(w, "Internal server error", http.StatusInternalServerError)
+		return
+	}
+
+	data := TemplateData{
+		Session:            session,
+		Status:             status,
+		HasActiveOperation: status != nil && status.HasActiveOperation(),
+	}
+
+	// Render partial template for HTMX
+	if err := h.renderPartial(w, "archive-status", data); err != nil {
+		h.logger.Printf("Error rendering archive status partial: %v", err)
+		http.Error(w, "Internal server error", http.StatusInternalServerError)
+	}
 }
 
 // Browse renders the post browsing page
 func (h *Handlers) Browse(w http.ResponseWriter, r *http.Request) {
-	http.Error(w, "Not implemented", http.StatusNotImplemented)
+	session, ok := auth.GetSessionFromContext(r.Context())
+	if !ok || session == nil {
+		http.Redirect(w, r, "/auth/login", http.StatusSeeOther)
+		return
+	}
+
+	// Get query parameters
+	query := r.URL.Query().Get("q")
+	pageStr := r.URL.Query().Get("page")
+	showAll := r.URL.Query().Get("all") == "true"
+
+	page := 1
+	if pageStr != "" {
+		if p, err := strconv.Atoi(pageStr); err == nil && p > 0 {
+			page = p
+		}
+	}
+
+	pageSize := 20
+	offset := (page - 1) * pageSize
+
+	var posts []models.Post
+	var total int
+	var totalPages int
+
+	// Determine which DID to filter by
+	filterDID := session.DID
+	if showAll {
+		filterDID = "" // Empty string means show all posts
+	}
+
+	// Fetch posts (search or list)
+	if query != "" {
+		// Search posts
+		result, err := storage.SearchPosts(h.db, filterDID, query, pageSize, offset)
+		if err != nil {
+			h.logger.Printf("Error searching posts: %v", err)
+			posts = []models.Post{}
+		} else {
+			posts = result.Posts
+			total = result.Total
+		}
+	} else {
+		// List all posts
+		result, err := storage.ListPosts(h.db, filterDID, pageSize, offset)
+		if err != nil {
+			h.logger.Printf("Error listing posts: %v", err)
+			posts = []models.Post{}
+		} else {
+			posts = result.Posts
+			total = result.Total
+			totalPages = result.TotalPages
+		}
+	}
+
+	// Calculate total pages if not already set
+	if totalPages == 0 && total > 0 {
+		totalPages = (total + pageSize - 1) / pageSize
+	}
+
+	// Fetch media for all posts
+	mediaMap := make(map[string][]models.Media)
+	for _, post := range posts {
+		media, err := storage.ListMediaForPost(h.db, post.URI)
+		if err != nil {
+			h.logger.Printf("Warning: failed to fetch media for post %s: %v", post.URI, err)
+			continue
+		}
+		if len(media) > 0 {
+			mediaMap[post.URI] = media
+		}
+	}
+
+	// Check which parent posts exist in the archive
+	parentPostsInArchive := make(map[string]bool)
+	for _, post := range posts {
+		if post.IsReply && post.ReplyParent != "" {
+			_, err := storage.GetPost(h.db, post.ReplyParent)
+			if err == nil {
+				// Parent post exists in archive
+				parentPostsInArchive[post.ReplyParent] = true
+			}
+		}
+	}
+
+	// Fetch profiles for all DIDs in posts (for handle display)
+	profilesMap := make(map[string]string)
+	rows, err := h.db.Query("SELECT did, handle FROM profiles")
+	if err == nil {
+		defer rows.Close()
+		for rows.Next() {
+			var did, handle string
+			if err := rows.Scan(&did, &handle); err == nil {
+				profilesMap[did] = handle
+			}
+		}
+	}
+
+	data := TemplateData{
+		Session:              session,
+		Posts:                posts,
+		Media:                mediaMap,
+		ParentPostsInArchive: parentPostsInArchive,
+		Profiles:             profilesMap,
+		Query:                query,
+		Page:                 page,
+		Total:                total,
+		PageSize:             pageSize,
+		TotalPages:           totalPages,
+		ShowAll:              showAll,
+	}
+
+	if err := h.renderTemplate(w, "browse", data); err != nil {
+		h.logger.Printf("Error rendering browse template: %v", err)
+		http.Error(w, "Internal server error", http.StatusInternalServerError)
+	}
 }
 
 // ServeMedia serves archived media files
 func (h *Handlers) ServeMedia(w http.ResponseWriter, r *http.Request) {
-	http.Error(w, "Not implemented", http.StatusNotImplemented)
+	session, ok := auth.GetSessionFromContext(r.Context())
+	if !ok || session == nil {
+		http.Error(w, "Unauthorized", http.StatusUnauthorized)
+		return
+	}
+
+	// Extract hash from chi URL parameter
+	hash := chi.URLParam(r, "hash")
+	if hash == "" {
+		http.Error(w, "Invalid media hash", http.StatusBadRequest)
+		return
+	}
+
+	// Get media metadata from database
+	media, err := storage.GetMediaByHash(h.db, hash)
+	if err != nil {
+		http.Error(w, "Media not found", http.StatusNotFound)
+		return
+	}
+
+	// Open and serve the file
+	http.ServeFile(w, r, media.FilePath)
 }
 
 // ServeStatic serves static files
···
 	fullPath := filepath.Join("internal", "web", "static", filepath.Clean(path))
 	http.ServeFile(w, r, fullPath)
 }
+
+// NotFound renders the 404 error page
+func (h *Handlers) NotFound(w http.ResponseWriter, r *http.Request) {
+	session, _ := h.sessionManager.GetSession(r)
+
+	data := TemplateData{
+		Session: session,
+	}
+
+	w.WriteHeader(http.StatusNotFound)
+	if err := h.renderTemplate(w, "404", data); err != nil {
+		h.logger.Printf("Error rendering 404 template: %v", err)
+		http.Error(w, "Not Found", http.StatusNotFound)
+	}
+}

internal/web/handlers/template.go

···
 	"html/template"
 	"net/http"
 	"path/filepath"
+	"strings"
+
+	"github.com/shindakun/bskyarchive/internal/models"
 )
 
 // TemplateData holds common data passed to templates
···
 	Error   string
 	Message string
 	Session interface{}
+	Status  *models.ArchiveStatus
+	Posts   []models.Post
+	Media   map[string][]models.Media // Map of post URI to media items
+	ParentPostsInArchive map[string]bool // Map of parent URIs that exist in local archive
+	Profiles map[string]string // Map of DID to handle
+	Query   string
+	Page    int
+	Total   int
+	PageSize int
+	TotalPages int
+	HasActiveOperation bool
+	ShowAll bool // Show all posts from all users
+	Version string // Application version
+}
+
+// templateFuncs returns custom template functions
+func templateFuncs() template.FuncMap {
+	return template.FuncMap{
+		"inc": func(i int) int {
+			return i + 1
+		},
+		"dec": func(i int) int {
+			return i - 1
+		},
+		"extractPostID": func(uri string) string {
+			// Extract post ID from AT URI
+			// Format: at://did:plc:xxx/app.bsky.feed.post/xxxxx
+			parts := strings.Split(uri, "/")
+			if len(parts) > 0 {
+				return parts[len(parts)-1]
+			}
+			return ""
+		},
+		"extractDID": func(uri string) string {
+			// Extract DID from AT URI
+			// Format: at://did:plc:xxx/app.bsky.feed.post/xxxxx
+			if strings.HasPrefix(uri, "at://") {
+				uri = strings.TrimPrefix(uri, "at://")
+				parts := strings.Split(uri, "/")
+				if len(parts) > 0 {
+					return parts[0]
+				}
+			}
+			return ""
+		},
+		"isValidImage": func(filePath string) bool {
+			// Check if file has a valid image extension
+			ext := strings.ToLower(filepath.Ext(filePath))
+			validExts := []string{".jpg", ".jpeg", ".png", ".gif", ".webp"}
+			for _, validExt := range validExts {
+				if ext == validExt {
+					return true
+				}
+			}
+			return false
+		},
+	}
 }
 
 // renderTemplate renders a template with the base layout
 func (h *Handlers) renderTemplate(w http.ResponseWriter, templateName string, data TemplateData) error {
-	// Parse templates
-	tmpl, err := template.ParseFiles(
+	// Parse templates with functions - include partials for templates that need them
+	files := []string{
 		filepath.Join("internal", "web", "templates", "layouts", "base.html"),
 		filepath.Join("internal", "web", "templates", "pages", templateName+".html"),
+	}
+
+	// Add partials directory for templates that use them
+	partialsGlob := filepath.Join("internal", "web", "templates", "partials", "*.html")
+	partials, _ := filepath.Glob(partialsGlob)
+	files = append(files, partials...)
+
+	tmpl, err := template.New("").Funcs(templateFuncs()).ParseFiles(files...)
+	if err != nil {
+		return err
+	}
+
+	// Execute template
+	return tmpl.ExecuteTemplate(w, "base", data)
+}
+
+// renderPartial renders a partial template (for HTMX)
+func (h *Handlers) renderPartial(w http.ResponseWriter, partialName string, data TemplateData) error {
+	// Parse partial template with functions
+	tmpl, err := template.New("").Funcs(templateFuncs()).ParseFiles(
+		filepath.Join("internal", "web", "templates", "partials", partialName+".html"),
 	)
 	if err != nil {
 		return err
 	}
 
 	// Execute template
-	return tmpl.Execute(w, data)
+	return tmpl.ExecuteTemplate(w, partialName, data)
 }

internal/web/middleware/auth.go

···
 			session, err := sessionManager.GetSession(r)
 			if err != nil || session == nil {
 				// No valid session, redirect to login
+				// Check if this is an HTMX request
+				if r.Header.Get("HX-Request") == "true" {
+					// For HTMX requests, use HX-Redirect header for client-side redirect
+					w.Header().Set("HX-Redirect", "/auth/login")
+					w.WriteHeader(http.StatusUnauthorized)
+					return
+				}
+				// For regular requests, use standard redirect
 				http.Redirect(w, r, "/auth/login", http.StatusSeeOther)
 				return
 			}

internal/web/middleware/errors.go

···
+package middleware
+
+import (
+	"html/template"
+	"log"
+	"net/http"
+	"runtime/debug"
+
+	"github.com/shindakun/bskyarchive/internal/auth"
+)
+
+// ErrorHandler wraps an http.Handler and recovers from panics, rendering error pages
+func ErrorHandler(next http.Handler, templates *template.Template, sessionManager *auth.SessionManager) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		defer func() {
+			if err := recover(); err != nil {
+				log.Printf("[ERROR] Panic recovered: %v\n%s", err, debug.Stack())
+
+				// Get session for error page context
+				session, _ := sessionManager.GetSession(r)
+
+				data := map[string]interface{}{
+					"Session": session,
+					"Error":   err,
+				}
+
+				w.WriteHeader(http.StatusInternalServerError)
+				if renderErr := templates.ExecuteTemplate(w, "base.html", data); renderErr != nil {
+					log.Printf("[ERROR] Failed to render 500 page: %v", renderErr)
+					http.Error(w, "Internal Server Error", http.StatusInternalServerError)
+				}
+			}
+		}()
+
+		next.ServeHTTP(w, r)
+	})
+}
+
+// NotFoundHandler returns a handler for 404 errors
+func NotFoundHandler(templates *template.Template, sessionManager *auth.SessionManager) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		session, _ := sessionManager.GetSession(r)
+
+		data := map[string]interface{}{
+			"Session": session,
+		}
+
+		w.WriteHeader(http.StatusNotFound)
+		if err := templates.ExecuteTemplate(w, "base.html", data); err != nil {
+			log.Printf("[ERROR] Failed to render 404 page: %v", err)
+			http.Error(w, "Not Found", http.StatusNotFound)
+		}
+	}
+}
+
+// UnauthorizedHandler returns a handler for 401 errors
+func UnauthorizedHandler(templates *template.Template) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		data := map[string]interface{}{
+			"Session": nil,
+		}
+
+		w.WriteHeader(http.StatusUnauthorized)
+		if err := templates.ExecuteTemplate(w, "base.html", data); err != nil {
+			log.Printf("[ERROR] Failed to render 401 page: %v", err)
+			http.Error(w, "Unauthorized", http.StatusUnauthorized)
+		}
+	}
+}

internal/web/static/js/app.js

···
+// Minimal JavaScript for confirmation dialogs
+document.addEventListener('DOMContentLoaded', function() {
+    // Add confirmation to archive start button
+    const archiveStartBtn = document.querySelector('button[hx-post="/archive/start"]');
+    if (archiveStartBtn) {
+        archiveStartBtn.addEventListener('htmx:confirm', function(e) {
+            e.preventDefault();
+            if (confirm('Start archiving your posts? This may take several minutes.')) {
+                e.detail.issueRequest(true);
+            }
+        });
+    }
+
+    // Add confirmation to any future destructive actions
+    document.querySelectorAll('[data-confirm]').forEach(function(el) {
+        el.addEventListener('htmx:confirm', function(e) {
+            e.preventDefault();
+            const message = el.getAttribute('data-confirm');
+            if (confirm(message)) {
+                e.detail.issueRequest(true);
+            }
+        });
+    });
+});

internal/web/templates/layouts/base.html

···
+{{define "base"}}
 <!DOCTYPE html>
 <html lang="en" data-theme="dark">
 <head>
···
     <footer class="container">
         <p><small>Bluesky Personal Archive Tool - Local-first archival solution</small></p>
     </footer>
+
+    <script src="/static/js/app.js"></script>
 </body>
 </html>
+{{end}}

internal/web/templates/pages/401.html

···
+{{define "title"}}Unauthorized{{end}}
+
+{{define "content"}}
+<main class="container">
+    <hgroup>
+        <h1>401</h1>
+        <h2>Unauthorized</h2>
+    </hgroup>
+
+    <p>You need to be logged in to access this page.</p>
+
+    <p>
+        <a href="/auth/login" role="button">Log in with Bluesky</a>
+        <a href="/" role="button" class="secondary">Return to Home</a>
+    </p>
+</main>
+{{end}}

internal/web/templates/pages/404.html

···
+{{define "title"}}Not Found{{end}}
+
+{{define "content"}}
+<main class="container">
+    <hgroup>
+        <h1>404</h1>
+        <h2>Page Not Found</h2>
+    </hgroup>
+
+    <p>The page you're looking for doesn't exist.</p>
+
+    <p>
+        <a href="/" role="button">Return to Home</a>
+        {{if .Session}}
+        <a href="/dashboard" role="button" class="secondary">Go to Dashboard</a>
+        {{end}}
+    </p>
+</main>
+{{end}}

internal/web/templates/pages/500.html

···
+{{define "title"}}Internal Server Error{{end}}
+
+{{define "content"}}
+<main class="container">
+    <hgroup>
+        <h1>500</h1>
+        <h2>Internal Server Error</h2>
+    </hgroup>
+
+    <p>Something went wrong on our end. Please try again later.</p>
+
+    {{if .Error}}
+    <details>
+        <summary>Error Details</summary>
+        <pre><code>{{.Error}}</code></pre>
+    </details>
+    {{end}}
+
+    <p>
+        <a href="/" role="button">Return to Home</a>
+        {{if .Session}}
+        <a href="/dashboard" role="button" class="secondary">Go to Dashboard</a>
+        {{end}}
+    </p>
+</main>
+{{end}}

internal/web/templates/pages/about.html

···
     <hgroup>
         <h1>About</h1>
         <h2>Bluesky Personal Archive Tool</h2>
+        <p><small>Version {{.Version}}</small></p>
     </hgroup>
 
     <p>

internal/web/templates/pages/archive.html

···
+{{define "title"}}Archive Management - Bluesky Archive{{end}}
+
+{{define "nav"}}
+<nav class="container">
+    <ul>
+        <li><strong>Bluesky Archive</strong></li>
+    </ul>
+    <ul>
+        <li><a href="/dashboard">Dashboard</a></li>
+        <li><a href="/archive">Archive</a></li>
+        <li><a href="/browse">Browse</a></li>
+        <li><a href="/about">About</a></li>
+        <li><a href="/auth/logout">Logout</a></li>
+    </ul>
+</nav>
+{{end}}
+
+{{define "content"}}
+<section>
+    <hgroup>
+        <h1>Archive Management</h1>
+        <h2>Manage your Bluesky archive operations</h2>
+    </hgroup>
+
+    <!-- Status Section with HTMX polling -->
+    <div id="archive-status" hx-get="/archive/status" hx-trigger="every 3s" hx-swap="innerHTML">
+        {{template "archive-status" .}}
+    </div>
+
+    <!-- Archive Actions -->
+    {{if not .HasActiveOperation}}
+    <article>
+        <header><strong>Start Archive Operation</strong></header>
+        <p>Choose an archive operation to begin:</p>
+
+        <div class="grid">
+            <div>
+                <h3>Initial Archive</h3>
+                <p>Fetch all your posts from Bluesky. This may take a while depending on how many posts you have.</p>
+                <button hx-post="/archive/start"
+                        hx-vals='{"type": "initial"}'
+                        hx-headers='{"Content-Type": "application/json"}'
+                        hx-swap="none">
+                    Start Initial Archive
+                </button>
+            </div>
+
+            {{if .Status}}
+            {{if gt .Status.TotalPosts 0}}
+            <div>
+                <h3>Incremental Update</h3>
+                <p>Fetch only new posts since your last archive.</p>
+                <button hx-post="/archive/start"
+                        hx-vals='{"type": "incremental"}'
+                        hx-headers='{"Content-Type": "application/json"}'
+                        hx-swap="none"
+                        class="secondary">
+                    Update Archive
+                </button>
+            </div>
+            {{end}}
+            {{end}}
+        </div>
+    </article>
+    {{end}}
+
+    <!-- Recent Operations -->
+    {{if .Status}}
+    {{if .Status.RecentOperations}}
+    <article>
+        <header><strong>Recent Operations</strong></header>
+        <figure>
+            <table role="grid">
+                <thead>
+                    <tr>
+                        <th>Type</th>
+                        <th>Status</th>
+                        <th>Started</th>
+                        <th>Completed</th>
+                        <th>Progress</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    {{range .Status.RecentOperations}}
+                    <tr>
+                        <td>{{.Type}}</td>
+                        <td>{{.Status}}</td>
+                        <td>{{.StartedAt.Format "Jan 2 15:04"}}</td>
+                        <td>
+                            {{if .CompletedAt}}
+                            {{.CompletedAt.Format "Jan 2 15:04"}}
+                            {{else}}
+                            -
+                            {{end}}
+                        </td>
+                        <td>
+                            {{if .IsComplete}}
+                            {{.ProgressCurrent}} posts
+                            {{else if gt .ProgressTotal 0}}
+                            {{.ProgressCurrent}} / {{.ProgressTotal}} ({{printf "%.0f" .ProgressPercentage}}%)
+                            {{else}}
+                            Starting...
+                            {{end}}
+                        </td>
+                    </tr>
+                    {{end}}
+                </tbody>
+            </table>
+        </figure>
+    </article>
+    {{end}}
+    {{end}}
+</section>
+
+<script>
+    // Handle archive start responses
+    document.body.addEventListener('htmx:afterRequest', function(evt) {
+        if (evt.detail.pathInfo.requestPath === '/archive/start') {
+            if (evt.detail.successful) {
+                // Reload the page to show the new operation
+                window.location.reload();
+            } else {
+                alert('Failed to start archive operation. Please try again.');
+            }
+        }
+    });
+</script>
+{{end}}

internal/web/templates/pages/browse.html

···
+{{define "title"}}Browse Posts - Bluesky Archive{{end}}
+
+{{define "nav"}}
+<nav class="container">
+    <ul>
+        <li><strong>Bluesky Archive</strong></li>
+    </ul>
+    <ul>
+        <li><a href="/dashboard">Dashboard</a></li>
+        <li><a href="/archive">Archive</a></li>
+        <li><a href="/browse">Browse</a></li>
+        <li><a href="/about">About</a></li>
+        <li><a href="/auth/logout">Logout</a></li>
+    </ul>
+</nav>
+{{end}}
+
+{{define "content"}}
+<section>
+    <hgroup>
+        <h1>Browse Posts</h1>
+        <h2>Search and explore your archived posts</h2>
+    </hgroup>
+
+    <!-- Search Form -->
+    <article>
+        <form method="GET" action="/browse">
+            <div class="grid">
+                <input type="search" name="q" placeholder="Search posts..." value="{{.Query}}" />
+                <button type="submit">Search</button>
+            </div>
+        </form>
+        <div style="margin-top: 1rem;">
+            {{if .ShowAll}}
+            <p><small>Showing all archived posts (including from other users) | <a href="/browse">Show only my posts</a></small></p>
+            {{else}}
+            <p><small>Showing only your posts | <a href="/browse?all=true">Show all archived posts</a></small></p>
+            {{end}}
+        </div>
+        {{if .Query}}
+        <p><small>Showing results for: <strong>{{.Query}}</strong></small></p>
+        {{end}}
+    </article>
+
+    <!-- Posts List -->
+    {{if .Posts}}
+    {{range .Posts}}
+    <article>
+        <header>
+            {{if $.ShowAll}}
+            {{$handle := index $.Profiles .DID}}
+            {{if $handle}}
+            <small><strong>@{{$handle}}</strong> • </small>
+            {{else}}
+            <small><strong>{{.DID}}</strong> • </small>
+            {{end}}
+            {{end}}
+            <small>{{.CreatedAt.Format "Jan 2, 2006 15:04"}}</small>
+            {{if .IsReply}}
+            <small> • <mark>Reply</mark></small>
+            {{end}}
+            {{if .HasMedia}}
+            <small> • 📷 Media</small>
+            {{end}}
+        </header>
+
+        {{if .IsReply}}
+        {{if .ReplyParent}}
+        {{$parentInArchive := index $.ParentPostsInArchive .ReplyParent}}
+        {{if $parentInArchive}}
+        <p><small>↩️ Replying to: <a href="/browse?q={{.ReplyParent}}">parent post (in archive)</a></small></p>
+        {{else}}
+        <p><small>↩️ Replying to: <a href="https://bsky.app/profile/{{.ReplyParent | extractDID}}/post/{{.ReplyParent | extractPostID}}" target="_blank">parent post (on Bluesky)</a></small></p>
+        {{end}}
+        {{end}}
+        {{end}}
+
+        <p>{{.Text}}</p>
+
+        {{$media := index $.Media .URI}}
+        {{if $media}}
+        <div class="grid" style="margin-top: 1rem;">
+            {{range $media}}
+            {{if isValidImage .FilePath}}
+            <a href="/media/{{.Hash}}" target="_blank" title="{{.AltText}}">
+                <img src="/media/{{.Hash}}" alt="{{.AltText}}" style="max-width: 150px; max-height: 150px; object-fit: cover; border-radius: 4px;" />
+            </a>
+            {{end}}
+            {{end}}
+        </div>
+        {{end}}
+
+        <footer>
+            <div class="grid">
+                <small>
+                    ❤️ {{.LikeCount}} • 🔁 {{.RepostCount}} • 💬 {{.ReplyCount}} • 💭 {{.QuoteCount}}
+                </small>
+                <small style="text-align: right;">
+                    <a href="https://bsky.app/profile/{{.DID}}/post/{{.URI | extractPostID}}" target="_blank">View on Bluesky</a>
+                </small>
+            </div>
+        </footer>
+    </article>
+    {{end}}
+
+    <!-- Pagination -->
+    {{if or (gt .Page 1) (lt .Page .TotalPages)}}
+    <nav>
+        <ul>
+            {{if gt .Page 1}}
+            <li>
+                <a href="?page={{.Page | dec}}{{if .Query}}&q={{.Query}}{{end}}{{if .ShowAll}}&all=true{{end}}">← Previous</a>
+            </li>
+            {{end}}
+
+            <li style="text-align: center;">
+                Page {{.Page}} of {{.TotalPages}} ({{.Total}} total)
+            </li>
+
+            {{if lt .Page .TotalPages}}
+            <li style="text-align: right;">
+                <a href="?page={{.Page | inc}}{{if .Query}}&q={{.Query}}{{end}}{{if .ShowAll}}&all=true{{end}}">Next →</a>
+            </li>
+            {{end}}
+        </ul>
+    </nav>
+    {{end}}
+
+    {{else}}
+    <article>
+        <p>
+            {{if .Query}}
+            No posts found matching your search.
+            {{else}}
+            No posts archived yet. Visit the <a href="/archive">Archive</a> page to get started.
+            {{end}}
+        </p>
+    </article>
+    {{end}}
+</section>
+{{end}}

internal/web/templates/pages/dashboard.html

···
         <h2>Dashboard</h2>
     </hgroup>
 
+    {{if .Status}}
     <div class="grid">
         <article>
-            <header><strong>Archive Status</strong></header>
-            <p>No archive operations yet. Visit the Archive page to get started.</p>
-            <footer>
-                <a href="/archive" role="button">Manage Archive</a>
-            </footer>
+            <header><strong>Archive Statistics</strong></header>
+            <p>Posts: <strong>{{.Status.TotalPosts}}</strong></p>
+            <p>Media files: <strong>{{.Status.TotalMedia}}</strong></p>
+            <p>Posts with media: <strong>{{.Status.PostsWithMedia}}</strong></p>
+            <p>Replies: <strong>{{.Status.RepliesCount}}</strong></p>
+            {{if .Status.TotalArchiveSize}}
+            <p>Total size: <strong>{{printf "%.2f" .Status.ArchiveSizeMB}} MB</strong></p>
+            {{end}}
         </article>
 
         <article>
-            <header><strong>Quick Stats</strong></header>
-            <p>Posts: <strong>0</strong></p>
-            <p>Media files: <strong>0</strong></p>
+            <header><strong>Timeline</strong></header>
+            {{if .Status.OldestPost}}
+            <p>Oldest post: {{.Status.OldestPost.Format "Jan 2, 2006"}}</p>
+            {{end}}
+            {{if .Status.NewestPost}}
+            <p>Newest post: {{.Status.NewestPost.Format "Jan 2, 2006"}}</p>
+            {{end}}
+            {{if .Status.LastSuccessfulAt}}
+            <p>Last sync: {{.Status.LastSuccessfulAt.Format "Jan 2, 2006 15:04"}}</p>
+            {{else}}
             <p>Last sync: <em>Never</em></p>
+            {{end}}
         </article>
     </div>
 
+    {{if .Status.ActiveOperation}}
+    <article>
+        <header><strong>Active Operation</strong></header>
+        <p>Status: <strong>{{.Status.ActiveOperation.Status}}</strong></p>
+        <p>Type: {{.Status.ActiveOperation.Type}}</p>
+        {{if gt .Status.ActiveOperation.ProgressTotal 0}}
+        <progress value="{{.Status.ActiveOperation.ProgressCurrent}}" max="{{.Status.ActiveOperation.ProgressTotal}}"></progress>
+        <p>Progress: {{.Status.ActiveOperation.ProgressCurrent}} / {{.Status.ActiveOperation.ProgressTotal}} ({{printf "%.1f" .Status.ActiveOperation.ProgressPercentage}}%)</p>
+        {{else}}
+        <progress></progress>
+        <p>Starting...</p>
+        {{end}}
+        <footer>
+            <a href="/archive" role="button">View Details</a>
+        </footer>
+    </article>
+    {{end}}
+    {{else}}
     <article>
         <header><strong>Getting Started</strong></header>
+        <p>No archive data yet. Start your first archive operation to fetch your posts.</p>
         <ol>
             <li>Go to the <a href="/archive">Archive</a> page</li>
-            <li>Start your first archive operation to fetch your posts</li>
+            <li>Click "Start Archive" to fetch your posts</li>
             <li>Browse and search your archived content</li>
         </ol>
+        <footer>
+            <a href="/archive" role="button">Get Started</a>
+        </footer>
+    </article>
+    {{end}}
+
+    <article>
+        <header><strong>Quick Actions</strong></header>
+        <div class="grid">
+            <a href="/archive" role="button">Manage Archive</a>
+            <a href="/browse" role="button" class="secondary">Browse Posts</a>
+        </div>
     </article>
 </section>
 {{end}}

internal/web/templates/partials/archive-status.html

···
+{{define "archive-status"}}
+{{if .Status}}
+<article>
+    <header><strong>Archive Status</strong></header>
+
+    {{if .Status.ActiveOperation}}
+    <div>
+        <p><strong>Operation in Progress</strong></p>
+        <p>Type: {{.Status.ActiveOperation.Type}}</p>
+        <p>Status: <mark>{{.Status.ActiveOperation.Status}}</mark></p>
+
+        {{if gt .Status.ActiveOperation.ProgressTotal 0}}
+        <progress value="{{.Status.ActiveOperation.ProgressCurrent}}" max="{{.Status.ActiveOperation.ProgressTotal}}"></progress>
+        <p>Progress: {{.Status.ActiveOperation.ProgressCurrent}} / {{.Status.ActiveOperation.ProgressTotal}} posts ({{printf "%.1f" .Status.ActiveOperation.ProgressPercentage}}%)</p>
+        {{else}}
+        <progress></progress>
+        <p>Initializing...</p>
+        {{end}}
+
+        <p><small>Started: {{.Status.ActiveOperation.StartedAt.Format "Jan 2, 2006 15:04:05"}}</small></p>
+    </div>
+    {{else}}
+    <div>
+        <p><strong>No Active Operations</strong></p>
+
+        {{if gt .Status.TotalPosts 0}}
+        <div class="grid">
+            <div>
+                <p>Total Posts: <strong>{{.Status.TotalPosts}}</strong></p>
+                <p>Media Files: <strong>{{.Status.TotalMedia}}</strong></p>
+            </div>
+            <div>
+                {{if .Status.LastSuccessfulAt}}
+                <p>Last Sync: {{.Status.LastSuccessfulAt.Format "Jan 2, 2006 15:04"}}</p>
+                {{else}}
+                <p>Last Sync: <em>Never</em></p>
+                {{end}}
+            </div>
+        </div>
+        {{else}}
+        <p>No posts archived yet. Start an archive operation to begin.</p>
+        {{end}}
+    </div>
+    {{end}}
+</article>
+{{else}}
+<article>
+    <header><strong>Archive Status</strong></header>
+    <p>Loading...</p>
+</article>
+{{end}}
+{{end}}

internal/web/templates/partials/nav.html

···
+{{define "nav"}}
+<nav class="container">
+    <ul>
+        <li><strong>Bluesky Archive</strong></li>
+    </ul>
+    <ul>
+        {{if .Session}}
+        <li><a href="/dashboard">Dashboard</a></li>
+        <li><a href="/archive">Archive</a></li>
+        <li><a href="/browse">Browse</a></li>
+        {{end}}
+        <li><a href="/about">About</a></li>
+        {{if .Session}}
+        <li><a href="/auth/logout">Logout</a></li>
+        {{else}}
+        <li><a href="/auth/login">Login</a></li>
+        {{end}}
+    </ul>
+</nav>
+{{end}}

specs/001-web-interface/tasks.md

···
 
 ### 4.1: Data Models (US2)
 
-- [ ] T033 [P] [US2] Create Post model in internal/models/post.go with URI, CID, Text, CreatedAt, engagement metrics
-- [ ] T034 [P] [US2] Create Media model in internal/models/media.go with PostURI, LocalPath, MimeType
-- [ ] T035 [P] [US2] Create ArchiveOperation model in internal/models/operation.go with Status, ProgressCurrent, ProgressTotal
-- [ ] T036 [P] [US2] Create ArchiveStatus model in internal/models/status.go (derived data) with TotalPosts, TotalMedia, LastSyncAt
+- [x] T033 [P] [US2] Create Post model in internal/models/post.go with URI, CID, Text, CreatedAt, engagement metrics
+- [x] T034 [P] [US2] Create Media model in internal/models/media.go with PostURI, LocalPath, MimeType
+- [x] T035 [P] [US2] Create ArchiveOperation model in internal/models/operation.go with Status, ProgressCurrent, ProgressTotal
+- [x] T036 [P] [US2] Create ArchiveStatus model in internal/models/status.go (derived data) with TotalPosts, TotalMedia, LastSyncAt
 
 **Parallel Execution**: T033, T034, T035, T036 can all run concurrently (different files)
 
 ### 4.2: Database Migrations (US2)
 
-- [ ] T037 [US2] Create migration 002_posts.sql with posts table, indexes, and FTS5 virtual table with triggers per data-model.md
-- [ ] T038 [US2] Create migration 003_media.sql with media table and foreign key to posts
-- [ ] T039 [US2] Create migration 004_operations.sql with archive_operations table
+- [x] T037 [US2] Verify posts table migration in internal/storage/db.go (already exists)
+- [x] T038 [US2] Verify media table migration in internal/storage/db.go (already exists)
+- [x] T039 [US2] Verify operations table migration in internal/storage/db.go (already exists)
 
 ### 4.3: Storage Layer (US2)
 
-- [ ] T040 [US2] Implement SavePost in internal/storage/posts.go with upsert logic
-- [ ] T041 [US2] Implement GetPost in internal/storage/posts.go by URI
-- [ ] T042 [US2] Implement ListPosts in internal/storage/posts.go with pagination (PagedPostsResponse)
-- [ ] T043 [US2] Implement SearchPosts in internal/storage/search.go using FTS5 (SearchPostsResponse)
-- [ ] T044 [US2] Implement SaveProfile in internal/storage/profiles.go for profile snapshots
-- [ ] T045 [US2] Implement GetLatestProfile in internal/storage/profiles.go
-- [ ] T046 [US2] Implement SaveMedia in internal/storage/media.go with local path generation
-- [ ] T047 [US2] Implement ListMediaForPost in internal/storage/media.go
-- [ ] T048 [US2] Implement CreateOperation in internal/storage/operations.go
-- [ ] T049 [US2] Implement UpdateOperation in internal/storage/operations.go
-- [ ] T050 [US2] Implement GetActiveOperation in internal/storage/operations.go
-- [ ] T051 [US2] Implement GetArchiveStatus in internal/storage/status.go (aggregated query across posts, media, operations)
+- [x] T040 [US2] Implement SavePost in internal/storage/posts.go with upsert logic
+- [x] T041 [US2] Implement GetPost in internal/storage/posts.go by URI
+- [x] T042 [US2] Implement ListPosts in internal/storage/posts.go with pagination (PagedPostsResponse)
+- [x] T043 [US2] Implement SearchPosts in internal/storage/search.go using FTS5 (SearchPostsResponse)
+- [x] T044 [US2] Implement SaveProfile in internal/storage/profiles.go for profile snapshots
+- [x] T045 [US2] Implement GetLatestProfile in internal/storage/profiles.go
+- [x] T046 [US2] Implement SaveMedia in internal/storage/media.go with local path generation
+- [x] T047 [US2] Implement ListMediaForPost in internal/storage/media.go
+- [x] T048 [US2] Implement CreateOperation in internal/storage/operations.go
+- [x] T049 [US2] Implement UpdateOperation in internal/storage/operations.go
+- [x] T050 [US2] Implement GetActiveOperation in internal/storage/operations.go
+- [x] T051 [US2] Implement GetArchiveStatus in internal/storage/status.go (aggregated query across posts, media, operations)
 
 ### 4.4: AT Protocol Integration (US2)
 
-- [ ] T052 [US2] Implement AT Protocol client wrapper in internal/archiver/client.go (NewATProtoClient with auth)
-- [ ] T053 [US2] Implement FetchPosts in internal/archiver/collector.go (paginated getAuthorFeed)
-- [ ] T054 [US2] Implement FetchProfile in internal/archiver/collector.go (getProfile)
-- [ ] T055 [US2] Implement DownloadMedia in internal/archiver/media.go with SHA-256 hash-based paths
-- [ ] T056 [US2] Implement rate limiter in internal/archiver/ratelimit.go (token bucket, 300 req/5min)
+- [x] T052 [US2] Implement AT Protocol client wrapper in internal/archiver/client.go (NewATProtoClient with auth)
+- [x] T053 [US2] Implement FetchPosts in internal/archiver/collector.go (paginated getAuthorFeed)
+- [x] T054 [US2] Implement FetchProfile in internal/archiver/collector.go (getProfile)
+- [x] T055 [US2] Implement DownloadMedia in internal/archiver/media.go with SHA-256 hash-based paths
+- [x] T056 [US2] Implement rate limiter in internal/archiver/ratelimit.go (token bucket, 300 req/5min)
 
 ### 4.5: Background Worker (US2)
 
-- [ ] T057 [US2] Implement archiveWorker in internal/archiver/worker.go (goroutine with context cancellation, progress updates)
-- [ ] T058 [US2] Implement StartArchive in internal/archiver/worker.go (check for active op, create operation, launch worker)
+- [x] T057 [US2] Implement archiveWorker in internal/archiver/worker.go (goroutine with context cancellation, progress updates)
+- [x] T058 [US2] Implement StartArchive in internal/archiver/worker.go (check for active op, create operation, launch worker)
 
 ### 4.6: Templates (US2)
 
-- [ ] T059 [US2] Update dashboard template internal/web/templates/pages/dashboard.html with archive status display
-- [ ] T060 [US2] Create archive management template in internal/web/templates/pages/archive.html with start buttons and status polling
-- [ ] T061 [US2] Create browse template in internal/web/templates/pages/browse.html with post list, pagination, search form
-- [ ] T062 [US2] Create archive status partial in internal/web/templates/partials/archive-status.html for HTMX updates
+- [x] T059 [US2] Update dashboard template internal/web/templates/pages/dashboard.html with archive status display
+- [x] T060 [US2] Create archive management template in internal/web/templates/pages/archive.html with start buttons and status polling
+- [x] T061 [US2] Create browse template in internal/web/templates/pages/browse.html with post list, pagination, search form
+- [x] T062 [US2] Create archive status partial in internal/web/templates/partials/archive-status.html for HTMX updates
 
 ### 4.7: HTTP Handlers (US2)
 
-- [ ] T063 [US2] Update Dashboard handler in internal/web/handlers/dashboard.go to fetch and display ArchiveStatus
-- [ ] T064 [US2] Implement Archive handler in internal/web/handlers/archive.go (render archive page)
-- [ ] T065 [US2] Implement StartArchive handler in internal/web/handlers/archive.go (POST /archive/start, return HTML fragment or JSON)
-- [ ] T066 [US2] Implement ArchiveStatus handler in internal/web/handlers/archive.go (GET /archive/status, poll active operation)
-- [ ] T067 [US2] Implement Browse handler in internal/web/handlers/browse.go (paginated post list with search support)
-- [ ] T068 [US2] Add routes to router in internal/web/router.go for archive and browse handlers
+- [x] T063 [US2] Update Dashboard handler in internal/web/handlers/dashboard.go to fetch and display ArchiveStatus
+- [x] T064 [US2] Implement Archive handler in internal/web/handlers/archive.go (render archive page)
+- [x] T065 [US2] Implement StartArchive handler in internal/web/handlers/archive.go (POST /archive/start, return HTML fragment or JSON)
+- [x] T066 [US2] Implement ArchiveStatus handler in internal/web/handlers/archive.go (GET /archive/status, poll active operation)
+- [x] T067 [US2] Implement Browse handler in internal/web/handlers/browse.go (paginated post list with search support)
+- [x] T068 [US2] Add routes to router in internal/web/router.go for archive and browse handlers
 
 ---
 
···
 
 ### 5.1: Templates (US3)
 
-- [ ] T069 [US3] Create about page template in internal/web/templates/pages/about.html with project description, author Bluesky link, GitHub repo link
+- [x] T069 [US3] Create about page template in internal/web/templates/pages/about.html with project description, author Bluesky link, GitHub repo link
 
 ### 5.2: HTTP Handlers (US3)
 
-- [ ] T070 [US3] Implement About handler in internal/web/handlers/about.go (render about template with version, author, repo URL)
+- [x] T070 [US3] Implement About handler in internal/web/handlers/about.go (render about template with version, author, repo URL)
 
 ### 5.3: Configuration (US3)
 
-- [ ] T071 [US3] Add about section to config.yaml with version, author_bsky_handle, github_repo_url
+- [x] T071 [US3] Add about section to config.yaml with version, author_bsky_handle, github_repo_url (NOTE: Removed per user request - details are hardcoded in template, version is dynamic from git tags)
 
 ### 5.4: Router Integration (US3)
 
-- [ ] T072 [US3] Add /about route to router in internal/web/router.go (public route)
+- [x] T072 [US3] Add /about route to router in internal/web/router.go (public route)
 
 ### 5.5: Navigation (US3)
 
-- [ ] T073 [US3] Create nav partial in internal/web/templates/partials/nav.html with links to landing, dashboard, archive, browse, about
+- [x] T073 [US3] Create nav partial in internal/web/templates/partials/nav.html with links to landing, dashboard, archive, browse, about
 
 ---
 
···
 
 ### 6.1: Error Handling
 
-- [ ] T074 [P] Create error page templates in internal/web/templates/pages/: 401.html, 404.html, 500.html
-- [ ] T075 Implement error middleware in internal/web/middleware/errors.go (catch panics, render error pages)
+- [x] T074 [P] Create error page templates in internal/web/templates/pages/: 401.html, 404.html, 500.html
+- [x] T075 Implement error middleware in internal/web/middleware/errors.go (catch panics, render error pages) - NOTE: Using Chi's built-in Recoverer, added NotFound handler
 
 **Parallel Execution**: T074 can run while T075 is being implemented
 
 ### 6.2: CSRF Protection
 
-- [ ] T076 Implement CSRF middleware in internal/web/middleware/csrf.go (gorilla/csrf integration)
-- [ ] T077 Add CSRF token to all forms in templates (landing, archive, browse)
+- [ ] T076 Implement CSRF middleware in internal/web/middleware/csrf.go (gorilla/csrf integration) - SKIPPED for MVP
+- [ ] T077 Add CSRF token to all forms in templates (landing, archive, browse) - SKIPPED for MVP
 
 ### 6.3: Static Asset Serving
 
-- [ ] T078 Add static file handler to router in internal/web/router.go (serve /static/*)
-- [ ] T079 Add media file handler to router in internal/web/router.go (serve /media/*, auth required)
+- [x] T078 Add static file handler to router in internal/web/router.go (serve /static/*) - Already exists in main.go
+- [x] T079 Add media file handler to router in internal/web/router.go (serve /media/*, auth required) - Already exists in main.go
 
 ### 6.4: Minimal JavaScript
 
-- [ ] T080 [P] Create app.js in internal/web/static/js/app.js with confirmation dialogs for destructive actions
+- [x] T080 [P] Create app.js in internal/web/static/js/app.js with confirmation dialogs for destructive actions
 
 **Parallel Execution**: T080 can run concurrently with other polish tasks
 
 ### 6.5: Testing (Optional - only if TDD requested)
 
-- [ ] T081 Create setupTestDB helper in tests/unit/storage_test.go (in-memory SQLite)
-- [ ] T082 Write unit tests for storage layer in tests/unit/storage_test.go (SavePost, GetPost, ListPosts, SearchPosts)
-- [ ] T083 Write unit tests for session management in tests/unit/auth_test.go
-- [ ] T084 Write contract tests for HTTP handlers in tests/contract/handlers_test.go (landing, dashboard, archive, browse, about)
+- [x] T081 Create setupTestDB helper in tests/unit/storage_test.go (in-memory SQLite)
+- [x] T082 Write unit tests for storage layer in tests/unit/storage_test.go (SavePost, GetPost, ListPosts, SearchPosts) - All 5 tests passing
+- [ ] T083 Write unit tests for session management in tests/unit/auth_test.go - SKIPPED for MVP
+- [ ] T084 Write contract tests for HTTP handlers in tests/contract/handlers_test.go (landing, dashboard, archive, browse, about) - SKIPPED for MVP
 
 ### 6.6: Documentation
 
-- [ ] T085 [P] Create README.md with project description, installation, usage, development instructions
+- [x] T085 [P] Create README.md with project description, installation, usage, development instructions - Already exists
 
 **Parallel Execution**: T085 can run concurrently with other tasks
 

tests/unit/storage_test.go

···
+package unit
+
+import (
+	"database/sql"
+	"testing"
+	"time"
+
+	"github.com/shindakun/bskyarchive/internal/models"
+	"github.com/shindakun/bskyarchive/internal/storage"
+)
+
+// setupTestDB creates an in-memory SQLite database for testing
+func setupTestDB(t *testing.T) *sql.DB {
+	t.Helper()
+
+	// Use in-memory database
+	db, err := storage.InitDB(":memory:")
+	if err != nil {
+		t.Fatalf("Failed to initialize test database: %v", err)
+	}
+
+	return db
+}
+
+func TestSaveAndGetPost(t *testing.T) {
+	db := setupTestDB(t)
+	defer db.Close()
+
+	// Create test post
+	testPost := &models.Post{
+		URI:         "at://did:plc:test123/app.bsky.feed.post/abc123",
+		CID:         "bafytest123",
+		DID:         "did:plc:test123",
+		Text:        "This is a test post",
+		CreatedAt:   time.Now().UTC(),
+		IndexedAt:   time.Now().UTC(),
+		ReplyCount:  5,
+		LikeCount:   10,
+		RepostCount: 2,
+		QuoteCount:  1,
+	}
+
+	// Test SavePost
+	err := storage.SavePost(db, testPost)
+	if err != nil {
+		t.Fatalf("SavePost failed: %v", err)
+	}
+
+	// Test GetPost
+	retrieved, err := storage.GetPost(db, testPost.URI)
+	if err != nil {
+		t.Fatalf("GetPost failed: %v", err)
+	}
+
+	// Verify fields
+	if retrieved.URI != testPost.URI {
+		t.Errorf("URI mismatch: got %s, want %s", retrieved.URI, testPost.URI)
+	}
+	if retrieved.CID != testPost.CID {
+		t.Errorf("CID mismatch: got %s, want %s", retrieved.CID, testPost.CID)
+	}
+	if retrieved.Text != testPost.Text {
+		t.Errorf("Text mismatch: got %s, want %s", retrieved.Text, testPost.Text)
+	}
+	if retrieved.LikeCount != testPost.LikeCount {
+		t.Errorf("LikeCount mismatch: got %d, want %d", retrieved.LikeCount, testPost.LikeCount)
+	}
+	if retrieved.QuoteCount != testPost.QuoteCount {
+		t.Errorf("QuoteCount mismatch: got %d, want %d", retrieved.QuoteCount, testPost.QuoteCount)
+	}
+}
+
+func TestListPosts(t *testing.T) {
+	db := setupTestDB(t)
+	defer db.Close()
+
+	testDID := "did:plc:test123"
+
+	// Create multiple test posts
+	posts := []*models.Post{
+		{
+			URI:       "at://did:plc:test123/app.bsky.feed.post/post1",
+			CID:       "cid1",
+			DID:       testDID,
+			Text:      "First post",
+			CreatedAt: time.Now().UTC().Add(-2 * time.Hour),
+			IndexedAt: time.Now().UTC(),
+		},
+		{
+			URI:       "at://did:plc:test123/app.bsky.feed.post/post2",
+			CID:       "cid2",
+			DID:       testDID,
+			Text:      "Second post",
+			CreatedAt: time.Now().UTC().Add(-1 * time.Hour),
+			IndexedAt: time.Now().UTC(),
+		},
+		{
+			URI:       "at://did:plc:test123/app.bsky.feed.post/post3",
+			CID:       "cid3",
+			DID:       testDID,
+			Text:      "Third post",
+			CreatedAt: time.Now().UTC(),
+			IndexedAt: time.Now().UTC(),
+		},
+	}
+
+	// Save all posts
+	for _, post := range posts {
+		if err := storage.SavePost(db, post); err != nil {
+			t.Fatalf("Failed to save post: %v", err)
+		}
+	}
+
+	// Test ListPosts with pagination
+	resp, err := storage.ListPosts(db, testDID, 10, 0)
+	if err != nil {
+		t.Fatalf("ListPosts failed: %v", err)
+	}
+
+	if resp.Total != 3 {
+		t.Errorf("Expected 3 total posts, got %d", resp.Total)
+	}
+
+	if len(resp.Posts) != 3 {
+		t.Errorf("Expected 3 posts in response, got %d", len(resp.Posts))
+	}
+
+	// Verify posts are ordered by created_at DESC (newest first)
+	if resp.Posts[0].Text != "Third post" {
+		t.Errorf("Expected newest post first, got: %s", resp.Posts[0].Text)
+	}
+}
+
+func TestSearchPosts(t *testing.T) {
+	db := setupTestDB(t)
+	defer db.Close()
+
+	testDID := "did:plc:test123"
+
+	// Create test posts with searchable content
+	posts := []*models.Post{
+		{
+			URI:       "at://did:plc:test123/app.bsky.feed.post/search1",
+			CID:       "cid1",
+			DID:       testDID,
+			Text:      "I love programming in Go",
+			CreatedAt: time.Now().UTC(),
+			IndexedAt: time.Now().UTC(),
+		},
+		{
+			URI:       "at://did:plc:test123/app.bsky.feed.post/search2",
+			CID:       "cid2",
+			DID:       testDID,
+			Text:      "Python is great for data science",
+			CreatedAt: time.Now().UTC(),
+			IndexedAt: time.Now().UTC(),
+		},
+		{
+			URI:       "at://did:plc:test123/app.bsky.feed.post/search3",
+			CID:       "cid3",
+			DID:       testDID,
+			Text:      "Go has excellent concurrency support",
+			CreatedAt: time.Now().UTC(),
+			IndexedAt: time.Now().UTC(),
+		},
+	}
+
+	// Save all posts
+	for _, post := range posts {
+		if err := storage.SavePost(db, post); err != nil {
+			t.Fatalf("Failed to save post: %v", err)
+		}
+	}
+
+	// Test search for "Go"
+	resp, err := storage.SearchPosts(db, testDID, "Go", 10, 0)
+	if err != nil {
+		t.Fatalf("SearchPosts failed: %v", err)
+	}
+
+	if resp.Total != 2 {
+		t.Errorf("Expected 2 posts matching 'Go', got %d", resp.Total)
+	}
+
+	// Test search for "Python"
+	resp, err = storage.SearchPosts(db, testDID, "Python", 10, 0)
+	if err != nil {
+		t.Fatalf("SearchPosts failed: %v", err)
+	}
+
+	if resp.Total != 1 {
+		t.Errorf("Expected 1 post matching 'Python', got %d", resp.Total)
+	}
+
+	// Test search with no results
+	resp, err = storage.SearchPosts(db, testDID, "Rust", 10, 0)
+	if err != nil {
+		t.Fatalf("SearchPosts failed: %v", err)
+	}
+
+	if resp.Total != 0 {
+		t.Errorf("Expected 0 posts matching 'Rust', got %d", resp.Total)
+	}
+}
+
+func TestSearchPostsByATURI(t *testing.T) {
+	db := setupTestDB(t)
+	defer db.Close()
+
+	testDID := "did:plc:test123"
+	testURI := "at://did:plc:test123/app.bsky.feed.post/aturi123"
+
+	// Create test post
+	testPost := &models.Post{
+		URI:       testURI,
+		CID:       "cidtest",
+		DID:       testDID,
+		Text:      "Test post for AT URI search",
+		CreatedAt: time.Now().UTC(),
+		IndexedAt: time.Now().UTC(),
+	}
+
+	// Save post
+	if err := storage.SavePost(db, testPost); err != nil {
+		t.Fatalf("Failed to save post: %v", err)
+	}
+
+	// Test search by AT URI
+	resp, err := storage.SearchPosts(db, testDID, testURI, 10, 0)
+	if err != nil {
+		t.Fatalf("SearchPosts by AT URI failed: %v", err)
+	}
+
+	if resp.Total != 1 {
+		t.Errorf("Expected 1 post when searching by AT URI, got %d", resp.Total)
+	}
+
+	if len(resp.Posts) > 0 && resp.Posts[0].URI != testURI {
+		t.Errorf("Expected URI %s, got %s", testURI, resp.Posts[0].URI)
+	}
+}
+
+func TestPostUpsert(t *testing.T) {
+	db := setupTestDB(t)
+	defer db.Close()
+
+	testURI := "at://did:plc:test123/app.bsky.feed.post/upsert1"
+
+	// Create initial post
+	initialPost := &models.Post{
+		URI:       testURI,
+		CID:       "cid1",
+		DID:       "did:plc:test123",
+		Text:      "Original text",
+		LikeCount: 5,
+		CreatedAt: time.Now().UTC(),
+		IndexedAt: time.Now().UTC(),
+	}
+
+	// Save initial post
+	if err := storage.SavePost(db, initialPost); err != nil {
+		t.Fatalf("Failed to save initial post: %v", err)
+	}
+
+	// Update post with new like count
+	updatedPost := &models.Post{
+		URI:       testURI,
+		CID:       "cid1",
+		DID:       "did:plc:test123",
+		Text:      "Original text",
+		LikeCount: 10, // Updated
+		CreatedAt: initialPost.CreatedAt,
+		IndexedAt: time.Now().UTC(),
+	}
+
+	// Save updated post (should upsert)
+	if err := storage.SavePost(db, updatedPost); err != nil {
+		t.Fatalf("Failed to upsert post: %v", err)
+	}
+
+	// Retrieve and verify
+	retrieved, err := storage.GetPost(db, testURI)
+	if err != nil {
+		t.Fatalf("Failed to get updated post: %v", err)
+	}
+
+	if retrieved.LikeCount != 10 {
+		t.Errorf("Expected LikeCount to be updated to 10, got %d", retrieved.LikeCount)
+	}
+
+	// Verify we still only have one post (not duplicated)
+	resp, err := storage.ListPosts(db, "did:plc:test123", 10, 0)
+	if err != nil {
+		t.Fatalf("Failed to list posts: %v", err)
+	}
+
+	if resp.Total != 1 {
+		t.Errorf("Expected 1 post after upsert, got %d", resp.Total)
+	}
+}