feat(actor.profile): add app.yoten.actor.profile lexicon and logic to parse and save from db and jetstream

api/yoten/actorprofile.go

···
+// Code generated by cmd/lexgen (see Makefile's lexgen); DO NOT EDIT.
+
+package yoten
+
+// schema: app.yoten.actor.profile
+
+import (
+    "github.com/bluesky-social/indigo/lex/util"
+)
+
+func init() {
+    util.RegisterType("app.yoten.actor.profile", &ActorProfile{})
+} //
+// RECORDTYPE: ActorProfile
+type ActorProfile struct {
+	LexiconTypeID string `json:"$type,const=app.yoten.actor.profile" cborgen:"$type,const=app.yoten.actor.profile"`
+	CreatedAt     string `json:"createdAt" cborgen:"createdAt"`
+	// description: Free-form profile description text.
+	Description *string  `json:"description,omitempty" cborgen:"description,omitempty"`
+	DisplayName string   `json:"displayName" cborgen:"displayName"`
+	Languages   []string `json:"languages,omitempty" cborgen:"languages,omitempty"`
+	// location: Free-form location text.
+	Location *string `json:"location,omitempty" cborgen:"location,omitempty"`
+}

api/yoten/cbor_gen.go

···
+// Code generated by github.com/whyrusleeping/cbor-gen. DO NOT EDIT.
+
+package yoten
+
+import (
+	"fmt"
+	"io"
+	"math"
+	"sort"
+
+	cid "github.com/ipfs/go-cid"
+	cbg "github.com/whyrusleeping/cbor-gen"
+	xerrors "golang.org/x/xerrors"
+)
+
+var _ = xerrors.Errorf
+var _ = cid.Undef
+var _ = math.E
+var _ = sort.Sort
+
+func (t *ActorProfile) MarshalCBOR(w io.Writer) error {
+	if t == nil {
+		_, err := w.Write(cbg.CborNull)
+		return err
+	}
+
+	cw := cbg.NewCborWriter(w)
+	fieldCount := 6
+
+	if t.Description == nil {
+		fieldCount--
+	}
+
+	if t.Languages == nil {
+		fieldCount--
+	}
+
+	if t.Location == nil {
+		fieldCount--
+	}
+
+	if _, err := cw.Write(cbg.CborEncodeMajorType(cbg.MajMap, uint64(fieldCount))); err != nil {
+		return err
+	}
+
+	// t.LexiconTypeID (string) (string)
+	if len("$type") > 1000000 {
+		return xerrors.Errorf("Value in field \"$type\" was too long")
+	}
+
+	if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("$type"))); err != nil {
+		return err
+	}
+	if _, err := cw.WriteString(string("$type")); err != nil {
+		return err
+	}
+
+	if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("app.yoten.actor.profile"))); err != nil {
+		return err
+	}
+	if _, err := cw.WriteString(string("app.yoten.actor.profile")); err != nil {
+		return err
+	}
+
+	// t.Location (string) (string)
+	if t.Location != nil {
+
+		if len("location") > 1000000 {
+			return xerrors.Errorf("Value in field \"location\" was too long")
+		}
+
+		if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("location"))); err != nil {
+			return err
+		}
+		if _, err := cw.WriteString(string("location")); err != nil {
+			return err
+		}
+
+		if t.Location == nil {
+			if _, err := cw.Write(cbg.CborNull); err != nil {
+				return err
+			}
+		} else {
+			if len(*t.Location) > 1000000 {
+				return xerrors.Errorf("Value in field t.Location was too long")
+			}
+
+			if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len(*t.Location))); err != nil {
+				return err
+			}
+			if _, err := cw.WriteString(string(*t.Location)); err != nil {
+				return err
+			}
+		}
+	}
+
+	// t.CreatedAt (string) (string)
+	if len("createdAt") > 1000000 {
+		return xerrors.Errorf("Value in field \"createdAt\" was too long")
+	}
+
+	if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("createdAt"))); err != nil {
+		return err
+	}
+	if _, err := cw.WriteString(string("createdAt")); err != nil {
+		return err
+	}
+
+	if len(t.CreatedAt) > 1000000 {
+		return xerrors.Errorf("Value in field t.CreatedAt was too long")
+	}
+
+	if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len(t.CreatedAt))); err != nil {
+		return err
+	}
+	if _, err := cw.WriteString(string(t.CreatedAt)); err != nil {
+		return err
+	}
+
+	// t.Languages ([]string) (slice)
+	if t.Languages != nil {
+
+		if len("languages") > 1000000 {
+			return xerrors.Errorf("Value in field \"languages\" was too long")
+		}
+
+		if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("languages"))); err != nil {
+			return err
+		}
+		if _, err := cw.WriteString(string("languages")); err != nil {
+			return err
+		}
+
+		if len(t.Languages) > 8192 {
+			return xerrors.Errorf("Slice value in field t.Languages was too long")
+		}
+
+		if err := cw.WriteMajorTypeHeader(cbg.MajArray, uint64(len(t.Languages))); err != nil {
+			return err
+		}
+		for _, v := range t.Languages {
+			if len(v) > 1000000 {
+				return xerrors.Errorf("Value in field v was too long")
+			}
+
+			if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len(v))); err != nil {
+				return err
+			}
+			if _, err := cw.WriteString(string(v)); err != nil {
+				return err
+			}
+
+		}
+	}
+
+	// t.Description (string) (string)
+	if t.Description != nil {
+
+		if len("description") > 1000000 {
+			return xerrors.Errorf("Value in field \"description\" was too long")
+		}
+
+		if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("description"))); err != nil {
+			return err
+		}
+		if _, err := cw.WriteString(string("description")); err != nil {
+			return err
+		}
+
+		if t.Description == nil {
+			if _, err := cw.Write(cbg.CborNull); err != nil {
+				return err
+			}
+		} else {
+			if len(*t.Description) > 1000000 {
+				return xerrors.Errorf("Value in field t.Description was too long")
+			}
+
+			if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len(*t.Description))); err != nil {
+				return err
+			}
+			if _, err := cw.WriteString(string(*t.Description)); err != nil {
+				return err
+			}
+		}
+	}
+
+	// t.DisplayName (string) (string)
+	if len("displayName") > 1000000 {
+		return xerrors.Errorf("Value in field \"displayName\" was too long")
+	}
+
+	if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len("displayName"))); err != nil {
+		return err
+	}
+	if _, err := cw.WriteString(string("displayName")); err != nil {
+		return err
+	}
+
+	if len(t.DisplayName) > 1000000 {
+		return xerrors.Errorf("Value in field t.DisplayName was too long")
+	}
+
+	if err := cw.WriteMajorTypeHeader(cbg.MajTextString, uint64(len(t.DisplayName))); err != nil {
+		return err
+	}
+	if _, err := cw.WriteString(string(t.DisplayName)); err != nil {
+		return err
+	}
+	return nil
+}
+
+func (t *ActorProfile) UnmarshalCBOR(r io.Reader) (err error) {
+	*t = ActorProfile{}
+
+	cr := cbg.NewCborReader(r)
+
+	maj, extra, err := cr.ReadHeader()
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err == io.EOF {
+			err = io.ErrUnexpectedEOF
+		}
+	}()
+
+	if maj != cbg.MajMap {
+		return fmt.Errorf("cbor input should be of type map")
+	}
+
+	if extra > cbg.MaxLength {
+		return fmt.Errorf("ActorProfile: map struct too large (%d)", extra)
+	}
+
+	n := extra
+
+	nameBuf := make([]byte, 11)
+	for i := uint64(0); i < n; i++ {
+		nameLen, ok, err := cbg.ReadFullStringIntoBuf(cr, nameBuf, 1000000)
+		if err != nil {
+			return err
+		}
+
+		if !ok {
+			// Field doesn't exist on this type, so ignore it
+			if err := cbg.ScanForLinks(cr, func(cid.Cid) {}); err != nil {
+				return err
+			}
+			continue
+		}
+
+		switch string(nameBuf[:nameLen]) {
+		// t.LexiconTypeID (string) (string)
+		case "$type":
+
+			{
+				sval, err := cbg.ReadStringWithMax(cr, 1000000)
+				if err != nil {
+					return err
+				}
+
+				t.LexiconTypeID = string(sval)
+			}
+			// t.Location (string) (string)
+		case "location":
+
+			{
+				b, err := cr.ReadByte()
+				if err != nil {
+					return err
+				}
+				if b != cbg.CborNull[0] {
+					if err := cr.UnreadByte(); err != nil {
+						return err
+					}
+
+					sval, err := cbg.ReadStringWithMax(cr, 1000000)
+					if err != nil {
+						return err
+					}
+
+					t.Location = (*string)(&sval)
+				}
+			}
+			// t.CreatedAt (string) (string)
+		case "createdAt":
+
+			{
+				sval, err := cbg.ReadStringWithMax(cr, 1000000)
+				if err != nil {
+					return err
+				}
+
+				t.CreatedAt = string(sval)
+			}
+			// t.Languages ([]string) (slice)
+		case "languages":
+
+			maj, extra, err = cr.ReadHeader()
+			if err != nil {
+				return err
+			}
+
+			if extra > 8192 {
+				return fmt.Errorf("t.Languages: array too large (%d)", extra)
+			}
+
+			if maj != cbg.MajArray {
+				return fmt.Errorf("expected cbor array")
+			}
+
+			if extra > 0 {
+				t.Languages = make([]string, extra)
+			}
+
+			for i := 0; i < int(extra); i++ {
+				{
+					var maj byte
+					var extra uint64
+					var err error
+					_ = maj
+					_ = extra
+					_ = err
+
+					{
+						sval, err := cbg.ReadStringWithMax(cr, 1000000)
+						if err != nil {
+							return err
+						}
+
+						t.Languages[i] = string(sval)
+					}
+
+				}
+			}
+			// t.Description (string) (string)
+		case "description":
+
+			{
+				b, err := cr.ReadByte()
+				if err != nil {
+					return err
+				}
+				if b != cbg.CborNull[0] {
+					if err := cr.UnreadByte(); err != nil {
+						return err
+					}
+
+					sval, err := cbg.ReadStringWithMax(cr, 1000000)
+					if err != nil {
+						return err
+					}
+
+					t.Description = (*string)(&sval)
+				}
+			}
+			// t.DisplayName (string) (string)
+		case "displayName":
+
+			{
+				sval, err := cbg.ReadStringWithMax(cr, 1000000)
+				if err != nil {
+					return err
+				}
+
+				t.DisplayName = string(sval)
+			}
+
+		default:
+			// Field doesn't exist on this type, so ignore it
+			if err := cbg.ScanForLinks(r, func(cid.Cid) {}); err != nil {
+				return err
+			}
+		}
+	}
+
+	return nil
+}

cmd/gen.go

···
+package main
+
+import (
+	"reflect"
+	"strings"
+
+	"github.com/bluesky-social/indigo/mst"
+	cbg "github.com/whyrusleeping/cbor-gen"
+	"yoten.app/api/yoten"
+)
+
+func main() {
+	var typVals []any
+	for _, typ := range mst.CBORTypes() {
+		typVals = append(typVals, reflect.New(typ).Elem().Interface())
+	}
+
+	genCfg := cbg.Gen{
+		MaxStringLength: 1_000_000,
+	}
+
+	yotenTypes := []any{
+		yoten.ActorProfile{},
+	}
+
+	for name, rt := range AllLexTypes() {
+		if strings.HasPrefix(name, "app.yoten.") {
+			yotenTypes = append(yotenTypes, reflect.New(rt).Interface())
+		}
+	}
+	yotenGenCfg := genCfg
+	yotenGenCfg.SortTypeNames = true
+
+	if err := yotenGenCfg.WriteMapEncodersToFile("api/yoten/cbor_gen.go", "yoten", yotenTypes...); err != nil {
+		panic(err)
+	}
+}
+
+var lexTypesMap map[string]reflect.Type
+
+func AllLexTypes() map[string]reflect.Type {
+	out := make(map[string]reflect.Type, len(lexTypesMap))
+	for k, v := range lexTypesMap {
+		out[k] = v
+	}
+	return out
+}

go.mod

···
 require (
 	github.com/a-h/templ v0.3.898
 	github.com/bluesky-social/indigo v0.0.0-20250520232546-236dd575c91e
+	github.com/bluesky-social/jetstream v0.0.0-20250414024304-d17bd81a945e
 	github.com/carlmjohnson/versioninfo v0.22.5
 	github.com/go-chi/chi/v5 v5.2.1
 	github.com/gorilla/sessions v1.4.0
+	github.com/ipfs/go-cid v0.4.1
 	github.com/mattn/go-sqlite3 v1.14.22
 	github.com/sethvargo/go-envconfig v1.3.0
+	github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e
+	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028
 	tangled.sh/icyphox.sh/atproto-oauth v0.0.0-20250526154904-3906c5336421
 )
 
···
 	github.com/andybalholm/brotli v1.1.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
-	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/cli/browser v1.3.0 // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 // indirect
 	github.com/fatih/color v1.16.0 // indirect
···
 	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/securecookie v1.1.2 // indirect
+	github.com/gorilla/websocket v1.5.1 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/hashicorp/go-retryablehttp v0.7.5 // indirect
 	github.com/hashicorp/golang-lru v1.0.2 // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
 	github.com/ipfs/bbloom v0.0.4 // indirect
 	github.com/ipfs/go-block-format v0.2.0 // indirect
-	github.com/ipfs/go-cid v0.4.1 // indirect
 	github.com/ipfs/go-datastore v0.6.0 // indirect
 	github.com/ipfs/go-ipfs-blockstore v1.3.1 // indirect
 	github.com/ipfs/go-ipfs-ds-help v1.1.1 // indirect
···
 	github.com/ipfs/go-log/v2 v2.5.1 // indirect
 	github.com/ipfs/go-metrics-interface v0.0.1 // indirect
 	github.com/jbenet/goprocess v0.1.4 // indirect
+	github.com/klauspost/compress v1.17.9 // indirect
 	github.com/klauspost/cpuid/v2 v2.2.7 // indirect
 	github.com/lestrrat-go/blackmagic v1.0.2 // indirect
 	github.com/lestrrat-go/httpcc v1.0.1 // indirect
···
 	github.com/lestrrat-go/option v1.0.1 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
-	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
 	github.com/minio/sha256-simd v1.0.1 // indirect
 	github.com/mr-tron/base58 v1.2.0 // indirect
 	github.com/multiformats/go-base32 v0.1.0 // indirect
···
 	github.com/natefinch/atomic v1.0.1 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
 	github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f // indirect
-	github.com/prometheus/client_golang v1.17.0 // indirect
-	github.com/prometheus/client_model v0.5.0 // indirect
-	github.com/prometheus/common v0.45.0 // indirect
-	github.com/prometheus/procfs v0.12.0 // indirect
+	github.com/prometheus/client_golang v1.19.1 // indirect
+	github.com/prometheus/client_model v0.6.1 // indirect
+	github.com/prometheus/common v0.54.0 // indirect
+	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/segmentio/asm v1.2.0 // indirect
 	github.com/spaolacci/murmur3 v1.1.0 // indirect
-	github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e // indirect
 	gitlab.com/yawning/secp256k1-voi v0.0.0-20230925100816-f2616030848b // indirect
 	gitlab.com/yawning/tuplehash v0.0.0-20230713102510-df83abbf9a02 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 // indirect
···
 	golang.org/x/sys v0.32.0 // indirect
 	golang.org/x/time v0.8.0 // indirect
 	golang.org/x/tools v0.32.0 // indirect
-	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
-	google.golang.org/protobuf v1.33.0 // indirect
+	google.golang.org/protobuf v1.34.2 // indirect
 	lukechampine.com/blake3 v1.2.1 // indirect
 )
 

go.sum

···
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
 github.com/bluesky-social/indigo v0.0.0-20250520232546-236dd575c91e h1:DVD+HxQsDCVJtAkjfIKZVaBNc3kayHaU+A2TJZkFdp4=
 github.com/bluesky-social/indigo v0.0.0-20250520232546-236dd575c91e/go.mod h1:ovyxp8AMO1Hoe838vMJUbqHTZaAR8ABM3g3TXu+A5Ng=
+github.com/bluesky-social/jetstream v0.0.0-20250414024304-d17bd81a945e h1:P/O6TDHs53gwgV845uDHI+Nri889ixksRrh4bCkCdxo=
+github.com/bluesky-social/jetstream v0.0.0-20250414024304-d17bd81a945e/go.mod h1:WiYEeyJSdUwqoaZ71KJSpTblemUCpwJfh5oVXplK6T4=
 github.com/carlmjohnson/versioninfo v0.22.5 h1:O00sjOLUAFxYQjlN/bzYTuZiS0y6fWDQjMRvwtKgwwc=
 github.com/carlmjohnson/versioninfo v0.22.5/go.mod h1:QT9mph3wcVfISUKd0i9sZfVrPviHuSF+cUtLjm2WSf8=
 github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8=
 github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
-github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
-github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
+github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
+github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cli/browser v1.3.0 h1:LejqCrpWr+1pRqmEPDGnTZOjsMe7sehifLynZJuqJpo=
 github.com/cli/browser v1.3.0/go.mod h1:HH8s+fOAxjhQoBUAsKuPCbqUuxZDhQ2/aD+SzsEfBTk=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
···
 github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pwzwo4h3eOamfo=
 github.com/gorilla/sessions v1.4.0 h1:kpIYOp/oi6MG/p5PgxApU8srsSw9tuFbt46Lt7auzqQ=
 github.com/gorilla/sessions v1.4.0/go.mod h1:FLWm50oby91+hl7p/wRxDth9bWSuk0qVL2emc7lT5ik=
+github.com/gorilla/websocket v1.5.1 h1:gmztn0JnHVt9JZquRuzLw3g4wouNVzKL15iLr/zn/QY=
+github.com/gorilla/websocket v1.5.1/go.mod h1:x3kM2JMyaluk02fnUJpQuwD2dCS5NDG2ZHL0uE0tcaY=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
 github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
 github.com/hashicorp/go-hclog v0.9.2 h1:CG6TE5H9/JXsFWJCfoIVpKFIkFe6ysEuHirp4DxCsHI=
···
 github.com/ipfs/go-log/v2 v2.5.1/go.mod h1:prSpmC1Gpllc9UYWxDiZDreBYw7zp4Iqp1kOLU9U5UI=
 github.com/ipfs/go-metrics-interface v0.0.1 h1:j+cpbjYvu4R8zbleSs36gvB7jR+wsL2fGD6n0jO4kdg=
 github.com/ipfs/go-metrics-interface v0.0.1/go.mod h1:6s6euYU4zowdslK0GKHmqaIZ3j/b/tL7HTWtJ4VPgWY=
+github.com/ipld/go-car v0.6.2 h1:Hlnl3Awgnq8icK+ze3iRghk805lu8YNq3wlREDTF2qc=
+github.com/ipld/go-car/v2 v2.13.1 h1:KnlrKvEPEzr5IZHKTXLAEub+tPrzeAFQVRlSQvuxBO4=
+github.com/ipld/go-car/v2 v2.13.1/go.mod h1:QkdjjFNGit2GIkpQ953KBwowuoukoM75nP/JI1iDJdo=
+github.com/ipld/go-ipld-prime v0.21.0 h1:n4JmcpOlPDIxBcY037SVfpd1G+Sj1nKZah0m6QH9C2E=
+github.com/ipld/go-ipld-prime v0.21.0/go.mod h1:3RLqy//ERg/y5oShXXdx5YIp50cFGOanyMctpPjsvxQ=
 github.com/jbenet/go-cienv v0.1.0/go.mod h1:TqNnHUmJgXau0nCzC7kXWeotg3J9W34CUv5Djy1+FlA=
 github.com/jbenet/goprocess v0.1.4 h1:DRGOFReOMqqDNXwW70QkacFW0YN9QnwLV0Vqk+3oU0o=
 github.com/jbenet/goprocess v0.1.4/go.mod h1:5yspPrukOVuOLORacaBi858NqyClJPQxYZlqdZVfqY4=
···
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA=
+github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
 github.com/klauspost/cpuid/v2 v2.2.7 h1:ZWSB3igEs+d0qvnxR/ZBzXVmxkgt8DdzP6m9pfuVLDM=
 github.com/klauspost/cpuid/v2 v2.2.7/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
···
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=
 github.com/mattn/go-sqlite3 v1.14.22/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
-github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=
-github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0/go.mod h1:QUyp042oQthUoa9bqDv0ER0wrtXnBruoNd7aNjkbP+k=
 github.com/minio/sha256-simd v1.0.1 h1:6kaan5IFmwTNynnKKpDHe6FWHohJOHhCPchzK49dzMM=
 github.com/minio/sha256-simd v1.0.1/go.mod h1:Pz6AKMiUdngCLpeTL/RJY1M9rUuPMYujV5xJjtbRSN8=
 github.com/mr-tron/base58 v1.2.0 h1:T/HDJBh4ZCPbU39/+c3rRvE0uKBQlU27+QI8LJ4t64o=
···
 github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
 github.com/multiformats/go-multibase v0.2.0 h1:isdYCVLvksgWlMW9OZRYJEa9pZETFivncJHmHnnd87g=
 github.com/multiformats/go-multibase v0.2.0/go.mod h1:bFBZX4lKCA/2lyOFSAoKH5SS6oPyjtnzK/XTFDPkNuk=
+github.com/multiformats/go-multicodec v0.9.0 h1:pb/dlPnzee/Sxv/j4PmkDRxCOi3hXTz3IbPKOXWJkmg=
+github.com/multiformats/go-multicodec v0.9.0/go.mod h1:L3QTQvMIaVBkXOXXtVmYE+LI16i14xuaojr/H7Ai54k=
 github.com/multiformats/go-multihash v0.2.3 h1:7Lyc8XfX/IY2jWb/gI7JP+o7JEq9hOa7BFvVU9RSh+U=
 github.com/multiformats/go-multihash v0.2.3/go.mod h1:dXgKXCXjBzdscBLk9JkjINiEsCKRVch90MdaGiKsvSM=
 github.com/multiformats/go-varint v0.0.7 h1:sWSGR+f/eu5ABZA2ZpYKBILXTTs9JWpdEM/nEGOHFS8=
···
 github.com/natefinch/atomic v1.0.1/go.mod h1:N/D/ELrljoqDyT3rZrsUmtsuzvHkeB/wWjHV22AZRbM=
 github.com/opentracing/opentracing-go v1.2.0 h1:uEJPy/1a5RIPAJ0Ov+OIO8OxWu77jEv+1B0VhjKrZUs=
 github.com/opentracing/opentracing-go v1.2.0/go.mod h1:GxEUsuufX4nBwe+T+Wl9TAgYrxe9dPLANfrWvHYVTgc=
+github.com/petar/GoLLRB v0.0.0-20210522233825-ae3b015fd3e9 h1:1/WtZae0yGtPq+TI6+Tv1WTxkukpXeMlviSxvL7SRgk=
+github.com/petar/GoLLRB v0.0.0-20210522233825-ae3b015fd3e9/go.mod h1:x3N5drFsm2uilKKuuYo6LdyD8vZAW55sH/9w+pbo1sw=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f h1:VXTQfuJj9vKR4TCkEuWIckKvdHFeJH/huIFJ9/cXOB0=
 github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f/go.mod h1:/zvteZs/GwLtCgZ4BL6CBsk9IKIlexP43ObX9AxTqTw=
-github.com/prometheus/client_golang v1.17.0 h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=
-github.com/prometheus/client_golang v1.17.0/go.mod h1:VeL+gMmOAxkS2IqfCq0ZmHSL+LjWfWDUmp1mBz9JgUY=
-github.com/prometheus/client_model v0.5.0 h1:VQw1hfvPvk3Uv6Qf29VrPF32JB6rtbgI6cYPYQjL0Qw=
-github.com/prometheus/client_model v0.5.0/go.mod h1:dTiFglRmd66nLR9Pv9f0mZi7B7fk5Pm3gvsjB5tr+kI=
-github.com/prometheus/common v0.45.0 h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=
-github.com/prometheus/common v0.45.0/go.mod h1:YJmSTw9BoKxJplESWWxlbyttQR4uaEcGyv9MZjVOJsY=
-github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
-github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
+github.com/prometheus/client_golang v1.19.1 h1:wZWJDwK+NameRJuPGDhlnFgx8e8HN3XHQeLaYJFJBOE=
+github.com/prometheus/client_golang v1.19.1/go.mod h1:mP78NwGzrVks5S2H6ab8+ZZGJLZUq1hoULYBAYBw1Ho=
+github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
+github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
+github.com/prometheus/common v0.54.0 h1:ZlZy0BgJhTwVZUn7dLOkwCZHUkrAqd3WYtcFCWnM1D8=
+github.com/prometheus/common v0.54.0/go.mod h1:/TQgMJP5CuVYveyT7n/0Ix8yLNNXy9yRSkhnLTHPDIQ=
+github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
+github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII=
 github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o=
···
 github.com/urfave/cli v1.22.10/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
 github.com/warpfork/go-wish v0.0.0-20220906213052-39a1cc7a02d0 h1:GDDkbFiaK8jsSDJfjId/PEGEShv6ugrt4kYsC5UIDaQ=
 github.com/warpfork/go-wish v0.0.0-20220906213052-39a1cc7a02d0/go.mod h1:x6AKhvSSexNrVSrViXSHUEbICjmGXhtgABaHIySUSGw=
+github.com/whyrusleeping/cbor v0.0.0-20171005072247-63513f603b11 h1:5HZfQkwe0mIfyDmc1Em5GqlNRzcdtlv4HTNmdpt7XH0=
+github.com/whyrusleeping/cbor v0.0.0-20171005072247-63513f603b11/go.mod h1:Wlo/SzPmxVp6vXpGt/zaXhHH0fn4IxgqZc82aKg6bpQ=
 github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e h1:28X54ciEwwUxyHn9yrZfl5ojgF4CBNLWX7LR0rvBkf4=
 github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e/go.mod h1:pM99HXyEbSQHcosHc0iW7YFmwnscr+t9Te4ibko05so=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
···
 golang.org/x/crypto v0.12.0/go.mod h1:NF0Gs7EO5K4qLn+Ylc+fih8BSTeIjAP05siRnAh98yw=
 golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
 golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
+golang.org/x/exp v0.0.0-20240604190554-fc45aab8b7f8 h1:LoYXNGAShUG3m/ehNk4iFctuhGX/+R1ZpfJ4/ia80JM=
+golang.org/x/exp v0.0.0-20240604190554-fc45aab8b7f8/go.mod h1:jj3sYF3dwk5D+ghuXyeI3r5MFf+NT2An6/9dOA95KSI=
 golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
···
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=
 golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
-google.golang.org/protobuf v1.33.0 h1:uNO2rsAINq/JlFpSdYEKIZ0uKD/R9cpdv0T+yoGwGmI=
-google.golang.org/protobuf v1.33.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
+google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg=
+google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=

internal/web/config/config.go

···
 	Jwks string `env:"JWKS"`
 }
 
+type JetstreamConfig struct {
+	Endpoint string `env:"ENDPOINT, default=wss://jetstream1.us-east.bsky.network/subscribe"`
+}
+
 type Config struct {
-	Core  CoreConfig  `env:",prefix=YOTEN"`
-	OAuth OAuthConfig `env:",prefix=YOTEN_OAUTH_"`
+	Core      CoreConfig      `env:",prefix=YOTEN"`
+	Jetstream JetstreamConfig `env:",prefix=TANGLED_JETSTREAM_"`
+	OAuth     OAuthConfig     `env:",prefix=YOTEN_OAUTH_"`
 }
 
 func LoadConfig(ctx context.Context) (*Config, error) {

internal/web/db/artifact.go

···
+package db
+
+import (
+	"fmt"
+	"strings"
+)
+
+type filter struct {
+	key string
+	arg any
+	cmp string
+}
+
+func FilterEq(key string, arg any) filter {
+	return filter{
+		key: key,
+		arg: arg,
+		cmp: "=",
+	}
+}
+
+func FilterNotEq(key string, arg any) filter {
+	return filter{
+		key: key,
+		arg: arg,
+		cmp: "<>",
+	}
+}
+
+func (f filter) Condition() string {
+	return fmt.Sprintf("%s %s ?", f.key, f.cmp)
+}
+
+func DeleteArtifact(e Execer, filters ...filter) error {
+	var conditions []string
+	var args []any
+	for _, filter := range filters {
+		conditions = append(conditions, filter.Condition())
+		args = append(args, filter.arg)
+	}
+
+	whereClause := ""
+	if conditions != nil {
+		whereClause = " where " + strings.Join(conditions, " and ")
+	}
+
+	query := fmt.Sprintf(`delete from artifacts %s`, whereClause)
+
+	_, err := e.Exec(query, args...)
+	return err
+}

internal/web/db/db.go

···
 func Make(dbPath string) (*DB, error) {
 	db, err := sql.Open("sqlite3", dbPath)
 	if err != nil {
-		return nil, fmt.Errorf("failed to open db: %v", err)
+		return nil, fmt.Errorf("failed to open db: %w", err)
 	}
 	_, err = db.Exec(`
 		pragma journal_mode = WAL;
···
 		pragma auto_vacuum = incremental;
 		pragma busy_timeout = 5000;
 
-		create table if not exists oauth_requests (
-			id integer primary key autoincrement,
-			auth_server_iss text not null,
-			state text not null,
-			did text not null,
-			handle text not null,
-			pds_url text not null,
-			pkce_verifier text not null,
-			dpop_auth_server_nonce text not null,
-			dpop_private_jwk text not null
-		);
+        create table if not exists oauth_requests (
+            id integer primary key autoincrement,
+            auth_server_iss text not null,
+            state text not null,
+            did text not null,
+            handle text not null,
+            pds_url text not null,
+            pkce_verifier text not null,
+            dpop_auth_server_nonce text not null,
+            dpop_private_jwk text not null
+        );
+
+        create table if not exists oauth_sessions (
+            id integer primary key autoincrement,
+            did text not null,
+            handle text not null,
+            pds_url text not null,
+            auth_server_iss text not null,
+            access_jwt text not null,
+            refresh_jwt text not null,
+            dpop_pds_nonce text,
+            dpop_auth_server_nonce text not null,
+            dpop_private_jwk text not null,
+            expiry text not null
+        );
+
+        create table if not exists profile (
+            -- id
+            id integer primary key autoincrement,
+            did text not null,
+
+            -- data
+            display_name text not null,
+            description text,
+            location text,
+            created text not null default (strftime('%Y-%m-%dT%H:%M:%SZ', 'now')),
+
+            -- constraints
+            unique(did)
+        );
+
+        create table if not exists profile_languages (
+            -- id
+            did text not null,
+
+            -- data
+            language_code text not null,
 
-		create table if not exists oauth_sessions (
-			id integer primary key autoincrement,
-			did text not null,
-			handle text not null,
-			pds_url text not null,
-			auth_server_iss text not null,
-			access_jwt text not null,
-			refresh_jwt text not null,
-			dpop_pds_nonce text,
-			dpop_auth_server_nonce text not null,
-			dpop_private_jwk text not null,
-			expiry text not null
-		);
+            -- constraints
+            primary key (did, language_code),
+            check (length(language_code) = 2),
+            foreign key (did) references profile(did) on delete cascade
+        );
+
+        create table if not exists _jetstream (
+            id integer primary key autoincrement,
+            last_time_us integer not null
+        );
 
-		create table if not exists migrations (
-			id integer primary key autoincrement,
-			name text unique
-		)
+        create table if not exists migrations (
+            id integer primary key autoincrement,
+            name text unique
+        );
 	`)
 	if err != nil {
-		return nil, fmt.Errorf("failed to execute db create statement: %v", err)
+		return nil, fmt.Errorf("failed to execute db create statement: %w", err)
 	}
 
 	return &DB{db}, nil

internal/web/db/jetstream.go

···
+package db
+
+type DbWrapper struct {
+	Execer
+}
+
+func (db DbWrapper) SaveLastTimeUs(lastTimeUs int64) error {
+	_, err := db.Exec(`
+		insert into _jetstream (id, last_time_us)
+		values (1, ?)
+		on conflict(id) do update set last_time_us = excluded.last_time_us
+	`, lastTimeUs)
+	return err
+}
+
+func (db DbWrapper) GetLastTimeUs() (int64, error) {
+	var lastTimeUs int64
+	row := db.QueryRow(`select last_time_us from _jetstream where id = 1;`)
+	err := row.Scan(&lastTimeUs)
+	return lastTimeUs, err
+}

internal/web/db/oauth.go

···
   where did = ?`, did)
 	return err
 }
+
+func UpdateDpopPdsNonce(e Execer, did string, dpopPdsNonce string) error {
+	_, err := e.Exec(`
+  update oauth_sessions
+  set dpop_pds_nonce = ?
+  where did = ?`,
+		dpopPdsNonce,
+		did,
+	)
+	return err
+}

internal/web/db/profile.go

···
+package db
+
+import (
+	"database/sql"
+	"fmt"
+	"log"
+	"time"
+
+	"github.com/bluesky-social/indigo/atproto/syntax"
+)
+
+// An ISO 639-1 two-letter language code (e.g., 'en', 'es', 'ko')
+type LanguageCode string
+
+type Profile struct {
+	ID          int
+	Did         string
+	DisplayName string
+	Description string
+	Location    string
+	// Can only hold 10 languages at once.
+	Languages []Language
+	CreatedAt time.Time
+}
+
+type Language struct {
+	Code LanguageCode
+	// The common name, typically in English.
+	Name string
+	// The name in its own language (e.g., "日本語").
+	NativeName *string
+}
+
+var Languages = map[LanguageCode]Language{
+	"en": {Code: "en", Name: "English"},
+	"ko": {Code: "ko", Name: "Korean", NativeName: ToPtr("한국어")},
+	"jp": {Code: "jp", Name: "Japanese", NativeName: ToPtr("日本語")},
+}
+
+func (p *Profile) ProfileAt() syntax.ATURI {
+	return syntax.ATURI(fmt.Sprintf("at://%s/%s/%s", p.Did, "app.yoten.actor.profile", "self"))
+}
+
+func UpsertProfile(tx *sql.Tx, profile *Profile) error {
+	defer tx.Rollback()
+
+	_, err := tx.Exec(`delete from profile_languages where did = ?`, profile.Did)
+	if err != nil {
+		return err
+	}
+
+	_, err = tx.Exec(
+		`insert or replace into profile (
+			did,
+			display_name,
+			description,
+			location
+		)
+		values (?, ?, ?, ?)`,
+		profile.Did,
+		profile.DisplayName,
+		profile.Description,
+		profile.Location,
+	)
+	if err != nil {
+		log.Println("profile", "err", err)
+		return err
+	}
+
+	for _, language := range profile.Languages {
+		_, err := tx.Exec(
+			`insert into profile_languages (did, language_code) values (?, ?)`,
+			profile.Did,
+			language.Code,
+		)
+		if err != nil {
+			log.Println("profile_languages", "err", err)
+			return err
+		}
+	}
+
+	return tx.Commit()
+}
+
+func GetProfile(e Execer, did string) (*Profile, error) {
+	var profile Profile
+	profile.Did = did
+
+	err := e.QueryRow(
+		`select display_name, description, location from profile where did = ?`,
+		did,
+	).Scan(&profile.DisplayName, &profile.Description, &profile.Location)
+	if err != nil {
+		if err == sql.ErrNoRows {
+			return nil, fmt.Errorf("user does not exist")
+		}
+		return nil, err
+	}
+
+	rows, err := e.Query(`select language_code from profile_languages where did = ?`, did)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	i := 0
+	for rows.Next() {
+		var lang string
+		if err := rows.Scan(&lang); err != nil {
+			return nil, err
+		}
+		profile.Languages = append(profile.Languages, Languages[LanguageCode(lang)])
+		i++
+	}
+
+	return &profile, nil
+}
+
+func ValidateProfile(e Execer, profile *Profile) error {
+	if len(profile.Description) > 256 {
+		return fmt.Errorf("Entered bio is too long.")
+	}
+
+	if len(profile.Location) > 40 {
+		return fmt.Errorf("Entered location is too long.")
+	}
+
+	err := validateLanguageCodes(profile)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func validateLanguageCodes(profile *Profile) error {
+	for _, l := range profile.Languages {
+		if len(l.Code) != 2 {
+			return fmt.Errorf("Invalid language code '%s'.", l.Code)
+		}
+	}
+	return nil
+}

internal/web/db/utils.go

···
+package db
+
+func ToPtr[T any](v T) *T {
+	return &v
+}

internal/web/htmx/htmx.go

···
 	"net/http"
 )
 
-func Notice(w http.ResponseWriter, id, msg string) {
+func HxOobUpdate(w http.ResponseWriter, id, msg string) {
 	html := fmt.Sprintf(`<span id="%s" hx-swap-oob="innerHTML">%s</span>`, id, msg)
 
 	w.Header().Set("Content-Type", "text/html")
+	w.Header().Set("HX-Reswap", "none")
 	w.WriteHeader(http.StatusOK)
 	w.Write([]byte(html))
 }

internal/web/ingester/ingester.go

···
+package ingester
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"log"
+
+	"github.com/bluesky-social/jetstream/pkg/models"
+	"yoten.app/api/yoten"
+	"yoten.app/internal/web/db"
+)
+
+type Ingester func(ctx context.Context, e *models.Event) error
+
+func Ingest(d db.DbWrapper) Ingester {
+	return func(ctx context.Context, e *models.Event) error {
+		var err error
+		defer func() {
+			eventTime := e.TimeUS
+			lastTimeUs := eventTime + 1
+			if err := d.SaveLastTimeUs(lastTimeUs); err != nil {
+				err = fmt.Errorf("(deferred) failed to save last time us: %w", err)
+			}
+		}()
+
+		if e.Kind != models.EventKindCommit {
+			return nil
+		}
+
+		switch e.Commit.Collection {
+		case "app.yoten.actor.profile":
+			ingestProfile(&d, e)
+		}
+
+		return err
+	}
+}
+
+func ingestProfile(d *db.DbWrapper, e *models.Event) error {
+	did := e.Did
+	var err error
+
+	if e.Commit.RKey != "self" {
+		return fmt.Errorf("ingestProfile only ingests `self` record")
+	}
+
+	switch e.Commit.Operation {
+	case models.CommitOperationCreate, models.CommitOperationUpdate:
+		raw := json.RawMessage(e.Commit.Record)
+		record := yoten.ActorProfile{}
+		err = json.Unmarshal(raw, &record)
+		if err != nil {
+			log.Printf("invalid record: %s", err)
+			return err
+		}
+
+		displayName := *&record.DisplayName
+
+		description := ""
+		if record.Description != nil {
+			description = *record.Description
+		}
+
+		location := ""
+		if record.Location != nil {
+			location = *record.Location
+		}
+
+		var languages []db.Language
+		for i, l := range record.Languages {
+			if i < 10 {
+				languages = append(languages, db.Languages[db.LanguageCode(l)])
+			}
+		}
+
+		profile := db.Profile{
+			Did:         did,
+			DisplayName: displayName,
+			Description: description,
+			Location:    location,
+			Languages:   languages,
+		}
+
+		ddb, ok := d.Execer.(*db.DB)
+		if !ok {
+			return fmt.Errorf("failed to index profile record, invalid db cast")
+		}
+
+		tx, err := ddb.Begin()
+		if err != nil {
+			return fmt.Errorf("failed to start transaction")
+		}
+
+		err = db.ValidateProfile(tx, &profile)
+		if err != nil {
+			return fmt.Errorf("invalid profile record")
+		}
+
+		log.Println("Upserting profile:", profile.Did)
+		err = db.UpsertProfile(tx, &profile)
+	case models.CommitOperationDelete:
+		err = db.DeleteArtifact(d, db.FilterEq("did", did), db.FilterEq("rkey", e.Commit.RKey))
+	}
+	if err != nil {
+		return fmt.Errorf("failed to %s profile record: %w", e.Commit.Operation, err)
+	}
+
+	return nil
+}

internal/web/jetstream/jetstream.go

···
+package jetstream
+
+import (
+	"context"
+	"fmt"
+	"log/slog"
+	"os"
+	"os/signal"
+	"sync"
+	"syscall"
+	"time"
+
+	"github.com/bluesky-social/jetstream/pkg/client"
+	"github.com/bluesky-social/jetstream/pkg/client/schedulers/sequential"
+	"github.com/bluesky-social/jetstream/pkg/models"
+	"yoten.app/internal/web/log"
+)
+
+type DB interface {
+	GetLastTimeUs() (int64, error)
+	SaveLastTimeUs(int64) error
+}
+
+type Set[T comparable] map[T]struct{}
+
+type JetstreamClient struct {
+	cfg    *client.ClientConfig
+	client *client.Client
+	ident  string
+	l      *slog.Logger
+
+	wantedDids Set[string]
+	db         DB
+	waitForDid bool
+	mu         sync.RWMutex
+
+	cancel   context.CancelFunc
+	cancelMu sync.Mutex
+}
+
+func NewJetstreamClient(endpoint, ident string, collections []string, cfg *client.ClientConfig, logger *slog.Logger, db DB, waitForDid bool) (*JetstreamClient, error) {
+	if cfg == nil {
+		cfg = client.DefaultClientConfig()
+		cfg.WebsocketURL = endpoint
+		cfg.WantedCollections = collections
+	}
+
+	return &JetstreamClient{
+		cfg:        cfg,
+		ident:      ident,
+		db:         db,
+		l:          logger,
+		wantedDids: make(map[string]struct{}),
+
+		// This will make the goroutine in StartJetstream wait until
+		// j.wantedDids has been populated, typically using addDids.
+		waitForDid: waitForDid,
+	}, nil
+}
+
+// Starts the jetstream client and processes events using the provided
+// processFunc. The caller is responsible for saving the last time_us to the
+// database (just use your db.UpdateLastTimeUs).
+func (j *JetstreamClient) StartJetstream(ctx context.Context, processFunc func(context.Context, *models.Event) error) error {
+	logger := j.l
+
+	sched := sequential.NewScheduler(j.ident, logger, j.withDidFilter(processFunc))
+
+	client, err := client.NewClient(j.cfg, log.New("jetstream"), sched)
+	if err != nil {
+		return fmt.Errorf("failed to create jetstream client: %w", err)
+	}
+	j.client = client
+
+	go func() {
+		if j.waitForDid {
+			for len(j.wantedDids) == 0 {
+				time.Sleep(time.Second)
+			}
+		}
+		logger.Info("done waiting for did")
+
+		go j.periodicLastTimeSave(ctx)
+		j.saveIfKilled(ctx)
+
+		j.connectAndRead(ctx)
+	}()
+
+	return nil
+}
+
+type processor func(context.Context, *models.Event) error
+
+func (j *JetstreamClient) withDidFilter(processFunc processor) processor {
+	// Empty filter => all dids allowed.
+	if len(j.wantedDids) == 0 {
+		return processFunc
+	}
+	// Since this closure references j.WantedDids; it should auto-update
+	// existing instances of the closure when j.WantedDids is mutated.
+	return func(ctx context.Context, evt *models.Event) error {
+		if _, ok := j.wantedDids[evt.Did]; ok {
+			return processFunc(ctx, evt)
+		} else {
+			return nil
+		}
+	}
+}
+
+// save cursor periodically
+func (j *JetstreamClient) periodicLastTimeSave(ctx context.Context) {
+	ticker := time.NewTicker(time.Minute)
+	defer ticker.Stop()
+
+	for {
+		select {
+		case <-ctx.Done():
+			return
+		case <-ticker.C:
+			j.db.SaveLastTimeUs(time.Now().UnixMicro())
+		}
+	}
+}
+
+func (j *JetstreamClient) saveIfKilled(ctx context.Context) context.Context {
+	ctxWithCancel, cancel := context.WithCancel(ctx)
+
+	sigChan := make(chan os.Signal, 1)
+
+	signal.Notify(sigChan,
+		syscall.SIGINT,
+		syscall.SIGTERM,
+		syscall.SIGQUIT,
+		syscall.SIGHUP,
+		syscall.SIGKILL,
+		syscall.SIGSTOP,
+	)
+
+	go func() {
+		sig := <-sigChan
+		j.l.Info("Received signal, initiating graceful shutdown", "signal", sig)
+
+		lastTimeUs := time.Now().UnixMicro()
+		if err := j.db.SaveLastTimeUs(lastTimeUs); err != nil {
+			j.l.Error("failed to save last time during shutdown", "error", err)
+		}
+		j.l.Info("Saved lastTimeUs before shutdown", "lastTimeUs", lastTimeUs)
+
+		j.cancelMu.Lock()
+		if j.cancel != nil {
+			j.cancel()
+		}
+		j.cancelMu.Unlock()
+
+		cancel()
+
+		os.Exit(0)
+	}()
+
+	return ctxWithCancel
+}
+
+func (j *JetstreamClient) getLastTimeUs(ctx context.Context) *int64 {
+	l := log.FromContext(ctx)
+	lastTimeUs, err := j.db.GetLastTimeUs()
+	if err != nil {
+		l.Warn("couldn't get last time us, starting from now", "error", err)
+		lastTimeUs = time.Now().UnixMicro()
+		err = j.db.SaveLastTimeUs(lastTimeUs)
+		if err != nil {
+			l.Error("failed to save last time us", "error", err)
+		}
+	}
+
+	// If last time is older than 2 days, start from now
+	if time.Now().UnixMicro()-lastTimeUs > 2*24*60*60*1000*1000 {
+		lastTimeUs = time.Now().UnixMicro()
+		l.Warn("last time us is older than 2 days; discarding that and starting from now")
+		err = j.db.SaveLastTimeUs(lastTimeUs)
+		if err != nil {
+			l.Error("failed to save last time us", "error", err)
+		}
+	}
+
+	l.Info("found last time_us", "time_us", lastTimeUs)
+	return &lastTimeUs
+}
+
+func (j *JetstreamClient) connectAndRead(ctx context.Context) {
+	l := log.FromContext(ctx)
+	for {
+		cursor := j.getLastTimeUs(ctx)
+
+		connCtx, cancel := context.WithCancel(ctx)
+		j.cancelMu.Lock()
+		j.cancel = cancel
+		j.cancelMu.Unlock()
+
+		if err := j.client.ConnectAndRead(connCtx, cursor); err != nil {
+			l.Error("error reading jetstream", "error", err)
+			cancel()
+			continue
+		}
+
+		select {
+		case <-ctx.Done():
+			l.Info("context done, stopping jetstream")
+			return
+		case <-connCtx.Done():
+			l.Info("connection context done, reconnecting")
+			continue
+		}
+	}
+}

internal/web/log/log.go

···
+package log
+
+import (
+	"context"
+	"log/slog"
+	"os"
+)
+
+// NewHandler sets up a new slog.Handler with the service name as an attribute
+func NewHandler(name string) slog.Handler {
+	handler := slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{})
+
+	var attrs []slog.Attr
+	attrs = append(attrs, slog.Attr{Key: "service", Value: slog.StringValue(name)})
+	handler.WithAttrs(attrs)
+	return handler
+}
+
+func New(name string) *slog.Logger {
+	return slog.New(NewHandler(name))
+}
+
+func NewContext(ctx context.Context, name string) context.Context {
+	return IntoContext(ctx, New(name))
+}
+
+type ctxKey struct{}
+
+// IntoContext adds a logger to a context. Use FromContext to pull the logger
+// out.
+func IntoContext(ctx context.Context, l *slog.Logger) context.Context {
+	return context.WithValue(ctx, ctxKey{}, l)
+}
+
+// FromContext returns a logger from a context.Context; if the passed context
+// is nil, return the default slog logger.
+func FromContext(ctx context.Context) *slog.Logger {
+	if ctx != nil {
+		v := ctx.Value(ctxKey{})
+		if v == nil {
+			return slog.Default()
+		}
+		return v.(*slog.Logger)
+	}
+
+	return slog.Default()
+}

internal/web/middleware/middleware.go

···
 package middleware
 
 import (
+	"context"
 	"log"
 	"net/http"
+	"slices"
+	"strings"
 
+	"github.com/go-chi/chi/v5"
 	"yoten.app/internal/web/db"
 	"yoten.app/internal/web/oauth"
+	"yoten.app/internal/web/resolver"
 )
 
 type Middleware struct {
-	oauth *oauth.OAuth
-	db    *db.DB
+	oauth      *oauth.OAuth
+	db         *db.DB
+	idResolver *resolver.Resolver
 }
 
-func New(oauth *oauth.OAuth, db *db.DB) Middleware {
+func New(oauth *oauth.OAuth, db *db.DB, idResolver *resolver.Resolver) Middleware {
 	return Middleware{
-		oauth: oauth,
-		db:    db,
+		oauth:      oauth,
+		db:         db,
+		idResolver: idResolver,
 	}
 }
 
···
 		})
 	}
 }
+
+func (mw Middleware) ResolveIdent() middlewareFunc {
+	excluded := []string{"favicon.ico"}
+
+	return func(next http.Handler) http.Handler {
+		return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
+			didOrHandle := chi.URLParam(req, "user")
+			if slices.Contains(excluded, didOrHandle) {
+				next.ServeHTTP(w, req)
+				return
+			}
+
+			id, err := mw.idResolver.ResolveIdent(req.Context(), didOrHandle)
+			if err != nil {
+				log.Println("failed to resolve did/handle:", err)
+				w.WriteHeader(http.StatusNotFound)
+				return
+			}
+
+			ctx := context.WithValue(req.Context(), "resolvedId", *id)
+
+			next.ServeHTTP(w, req.WithContext(ctx))
+		})
+	}
+}
+
+func StripLeadingAt(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
+		path := req.URL.EscapedPath()
+		if strings.HasPrefix(path, "/@") {
+			req.URL.RawPath = "/" + strings.TrimPrefix(path, "/@")
+		}
+		next.ServeHTTP(w, req)
+	})
+}

internal/web/oauth/handler/handler.go

···
 	"net/http"
 	"net/url"
 	"strings"
+	"time"
 
+	comatproto "github.com/bluesky-social/indigo/api/atproto"
+	lexutil "github.com/bluesky-social/indigo/lex/util"
 	"github.com/go-chi/chi/v5"
+	"github.com/gorilla/sessions"
 	"tangled.sh/icyphox.sh/atproto-oauth/helpers"
 
-	"github.com/gorilla/sessions"
+	"yoten.app/api/yoten"
 	"yoten.app/internal/web/config"
 	"yoten.app/internal/web/db"
 	"yoten.app/internal/web/htmx"
···
 		resolved, err := idResolver.ResolveIdent(r.Context(), handle)
 		if err != nil {
 			log.Println("failed to resolve handle:", err)
-			htmx.Notice(w, "login-msg", fmt.Sprintf("'%s' is an invalid handle.", handle))
+			htmx.HxOobUpdate(w, "login-msg", fmt.Sprintf("'%s' is an invalid handle.", handle))
 			return
 		}
 
···
 		)
 		if err != nil {
 			log.Println("failed to create oauth client:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
 		authServer, err := oauthClient.ResolvePdsAuthServer(r.Context(), resolved.PDSEndpoint())
 		if err != nil {
 			log.Println("failed to resolve auth server:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
 		authMeta, err := oauthClient.FetchAuthServerMetadata(r.Context(), authServer)
 		if err != nil {
 			log.Println("failed to fetch auth server metadata:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
 		dpopKey, err := helpers.GenerateKey(nil)
 		if err != nil {
 			log.Println("failed to generate dpop key:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
 		dpopKeyJson, err := json.Marshal(dpopKey)
 		if err != nil {
 			log.Println("failed to marshal dpop key:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
 		parResp, err := oauthClient.SendParAuthRequest(r.Context(), authServer, authMeta, handle, oauthScope, dpopKey)
 		if err != nil {
 			log.Println("failed to send par auth request:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
···
 		})
 		if err != nil {
 			log.Println("failed to save oauth request:", err)
-			htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+			htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 			return
 		}
 
···
 	oauthRequest, err := db.GetOAuthRequestByState(o.db, state)
 	if err != nil {
 		log.Println("failed to get oauth request:", err)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
···
 	errorDescription := r.FormValue("error_description")
 	if error != "" || errorDescription != "" {
 		log.Printf("oauth callback error: %s, %s", error, errorDescription)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
 	iss := r.FormValue("iss")
 	if iss == "" {
 		log.Println("missing iss for state: ", state)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
 	code := r.FormValue("code")
 	if code == "" {
 		log.Println("missing code for state: ", state)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
···
 	)
 	if err != nil {
 		log.Println("failed to create oauth client:", err)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
 	jwk, err := helpers.ParseJWKFromBytes([]byte(oauthRequest.DpopPrivateJwk))
 	if err != nil {
 		log.Println("failed to parse jwk:", err)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
···
 	)
 	if err != nil {
 		log.Println("failed to get token:", err)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
 	if tokenResp.Scope != oauthScope {
 		log.Println("oauth scope doesn't match:", tokenResp.Scope)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
 
-	err = o.oauth.SaveSession(w, r, oauthRequest, tokenResp)
+	userSession, err := o.oauth.SaveSession(w, r, oauthRequest, tokenResp)
 	if err != nil {
 		log.Println("failed to save session:", err)
-		htmx.Notice(w, "login-msg", "Failed to authenticate. Try again later.")
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
 		return
 	}
+	log.Println("successfully saved session")
 
-	log.Println("successfully saved session")
+	xrpcClient, err := o.oauth.AuthorizedClientFromSession(*userSession, r)
+	if err != nil {
+		log.Println("failed to retrieve authorized client:", err)
+		htmx.HxOobUpdate(w, "login-msg", "Failed to authenticate. Try again later.")
+		return
+	}
+
+	ex, _ := xrpcClient.RepoGetRecord(r.Context(), "", "app.yoten.actor.profile", oauthRequest.Did, "self")
+	var cid *string
+	if ex != nil {
+		cid = ex.Cid
+	}
+
+	// This should only occur once per account
+	if ex == nil {
+		createdAt := time.Now().Format(time.RFC3339)
+		atresp, err := xrpcClient.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
+			Collection: "app.yoten.actor.profile",
+			Repo:       oauthRequest.Did,
+			Rkey:       "self",
+			Record: &lexutil.LexiconTypeDecoder{
+				Val: &yoten.ActorProfile{
+					DisplayName: oauthRequest.Handle,
+					Description: db.ToPtr(""),
+					Languages:   make([]string, 0),
+					Location:    db.ToPtr(""),
+					CreatedAt:   createdAt,
+				}},
+			SwapRecord: cid,
+		})
+		if err != nil {
+			log.Println("failed to create record:", err)
+			htmx.HxOobUpdate(w, "login-msg", "Failed to announce profile creation.")
+			return
+		}
+		log.Println("created profile record: ", atresp.Uri)
+	}
 
 	http.Redirect(w, r, "/", http.StatusFound)
 }

internal/web/oauth/oauth.go

···
 
 import (
 	"fmt"
+	"log"
 	"net/http"
 	"net/url"
 	"time"
···
 	"yoten.app/internal/web/config"
 	"yoten.app/internal/web/db"
 	"yoten.app/internal/web/oauth/client"
+	xrpc "yoten.app/internal/web/xrpcclient"
 )
 
 type OAuth struct {
···
 	}
 }
 
-func (o *OAuth) SaveSession(w http.ResponseWriter, r *http.Request, oreq db.OAuthRequest, oresp *oauth.TokenResponse) error {
+func (o *OAuth) SaveSession(w http.ResponseWriter, r *http.Request, oreq db.OAuthRequest, oresp *oauth.TokenResponse) (*sessions.Session, error) {
 	// Save did in user session.
 	userSession, err := o.Store.Get(r, SessionName)
 	if err != nil {
-		return err
+		return nil, err
 	}
 
 	userSession.Values[SessionDid] = oreq.Did
···
 	userSession.Values[SessionAuthenticated] = true
 	err = userSession.Save(r, w)
 	if err != nil {
-		return fmt.Errorf("error saving user session: %v", err)
+		return nil, fmt.Errorf("failed to save user session: %w", err)
 	}
 
 	// Save the whole thing in the db.
···
 		Expiry:              time.Now().Add(time.Duration(oresp.ExpiresIn) * time.Second).Format(time.RFC3339),
 	}
 
-	return db.SaveOAuthSession(o.Db, session)
+	return userSession, db.SaveOAuthSession(o.Db, session)
 }
 
 func (o *OAuth) ClearSession(r *http.Request, w http.ResponseWriter) error {
 	userSession, err := o.Store.Get(r, SessionName)
-	if err != nil || userSession.IsNew {
-		return fmt.Errorf("error getting user session (or new session?): %w", err)
+	if err != nil {
+		return fmt.Errorf("failed to get user session: %w", err)
+	}
+	if userSession.IsNew {
+		return fmt.Errorf("user session is new")
 	}
 
 	did := userSession.Values[SessionDid].(string)
 
 	err = db.DeleteOAuthSessionByDid(o.Db, did)
 	if err != nil {
-		return fmt.Errorf("error deleting oauth session: %w", err)
+		return fmt.Errorf("failed to delete oauth session: %w", err)
 	}
 
 	userSession.Options.MaxAge = -1
···
 	return userSession.Save(r, w)
 }
 
-func (o *OAuth) GetSession(r *http.Request) (*db.OAuthSession, bool, error) {
-	userSession, err := o.Store.Get(r, SessionName)
-	if err != nil || userSession.IsNew {
-		return nil, false, fmt.Errorf("error getting user session: %v", err)
-	}
-
+func (o *OAuth) CheckSessionAuth(userSession sessions.Session, r *http.Request) (*db.OAuthSession, bool, error) {
 	did := userSession.Values[SessionDid].(string)
 	auth := userSession.Values[SessionAuthenticated].(bool)
 
 	session, err := db.GetOAuthSessionByDid(o.Db, did)
 	if err != nil {
-		return nil, false, fmt.Errorf("error getting oauth session: %v", err)
+		return nil, false, fmt.Errorf("failed to get oauth session: %w", err)
 	}
 
 	expiry, err := time.Parse(time.RFC3339, session.Expiry)
 	if err != nil {
-		return nil, false, fmt.Errorf("error parsing expiry time: %v", err)
+		return nil, false, fmt.Errorf("failed to parse expiry time: %w", err)
 	}
 
 	if expiry.Sub(time.Now()) <= 5*time.Minute {
···
 		newExpiry := time.Now().Add(time.Duration(resp.ExpiresIn) * time.Second).Format(time.RFC3339)
 		err = db.RefreshOAuthSession(o.Db, did, resp.AccessToken, resp.RefreshToken, newExpiry)
 		if err != nil {
-			return nil, false, fmt.Errorf("error refreshing oauth session: %w", err)
+			return nil, false, fmt.Errorf("failed to refresh oauth session: %w", err)
 		}
 
 		// Update the current session.
···
 	return session, auth, nil
 }
 
+func (o *OAuth) GetSession(r *http.Request) (*db.OAuthSession, bool, error) {
+	userSession, err := o.Store.Get(r, SessionName)
+	if err != nil {
+		return nil, false, fmt.Errorf("failed to get user session: %w", err)
+	}
+	if userSession.IsNew {
+		return nil, false, fmt.Errorf("user session is new")
+	}
+
+	session, auth, err := o.CheckSessionAuth(*userSession, r)
+	if err != nil {
+		return nil, false, fmt.Errorf("failed to check user session auth: %w", err)
+	}
+
+	return session, auth, nil
+}
+
 type User struct {
 	Handle string
 	Did    string
···
 
 func (a *OAuth) GetUser(r *http.Request) *User {
 	clientSession, err := a.Store.Get(r, SessionName)
-
 	if err != nil || clientSession.IsNew {
 		return nil
 	}
···
 		Did:    clientSession.Values[SessionDid].(string),
 		Pds:    clientSession.Values[SessionPds].(string),
 	}
+}
+
+func (a *OAuth) GetDid(r *http.Request) string {
+	clientSession, err := a.Store.Get(r, SessionName)
+	if err != nil || clientSession.IsNew {
+		return ""
+	}
+
+	return clientSession.Values[SessionDid].(string)
+}
+
+func (o *OAuth) AuthorizedClientFromSession(userSession sessions.Session, r *http.Request) (*xrpc.Client, error) {
+	session, auth, err := o.CheckSessionAuth(userSession, r)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get session: %w", err)
+	}
+	if !auth {
+		return nil, fmt.Errorf("not authorized")
+	}
+
+	client := &oauth.XrpcClient{
+		OnDpopPdsNonceChanged: func(did, newNonce string) {
+			err := db.UpdateDpopPdsNonce(o.Db, did, newNonce)
+			if err != nil {
+				log.Printf("failed to update dpop pds nonce: %v", err)
+			}
+		},
+	}
+
+	privateJwk, err := helpers.ParseJWKFromBytes([]byte(session.DpopPrivateJwk))
+	if err != nil {
+		return nil, fmt.Errorf("failed to parse private jwk: %w", err)
+	}
+
+	xrpcClient := xrpc.NewClient(client, &oauth.XrpcAuthedRequestArgs{
+		Did:            session.Did,
+		PdsUrl:         session.PdsUrl,
+		DpopPdsNonce:   session.PdsUrl,
+		AccessToken:    session.AccessJwt,
+		Issuer:         session.AuthServerIss,
+		DpopPrivateJwk: privateJwk,
+	})
+
+	return xrpcClient, nil
+}
+
+func (o *OAuth) AuthorizedClient(r *http.Request) (*xrpc.Client, error) {
+	session, auth, err := o.GetSession(r)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get session: %w", err)
+	}
+	if !auth {
+		return nil, fmt.Errorf("not authorized")
+	}
+
+	client := &oauth.XrpcClient{
+		OnDpopPdsNonceChanged: func(did, newNonce string) {
+			err := db.UpdateDpopPdsNonce(o.Db, did, newNonce)
+			if err != nil {
+				log.Printf("failed to update dpop pds nonce: %v", err)
+			}
+		},
+	}
+
+	privateJwk, err := helpers.ParseJWKFromBytes([]byte(session.DpopPrivateJwk))
+	if err != nil {
+		return nil, fmt.Errorf("failed to parse private jwk: %w", err)
+	}
+
+	xrpcClient := xrpc.NewClient(client, &oauth.XrpcAuthedRequestArgs{
+		Did:            session.Did,
+		PdsUrl:         session.PdsUrl,
+		DpopPdsNonce:   session.PdsUrl,
+		AccessToken:    session.AccessJwt,
+		Issuer:         session.AuthServerIss,
+		DpopPrivateJwk: privateJwk,
+	})
+
+	return xrpcClient, nil
 }
 
 type ClientMetadata struct {

internal/web/pages/404.templ

···
+package pages
+
+import "yoten.app/internal/web/pages/templates"
+
+templ NotFound() {
+	@templates.BaseLayout("404") {
+		<span>
+			404
+		</span>
+	}
+}

internal/web/pages/index.templ

···
 import "yoten.app/internal/web/pages/templates"
 
 templ Index(params IndexParams) {
-    {{ user := params.User }}
-    @templates.BaseLayout("home") {
-        <span>
-            Hello,
-            if user != nil {
-                { user.Handle }
-            } else {
-                world
-            }
-        </span>
-        if user != nil {
-            <button type="button" hx-post="/logout" hx-swap="none">logout</button>
-        } else {
-            <a href="/login">login</a>
-        }
-    }
+	{{ user := params.User }}
+	@templates.BaseLayout("home") {
+		<span>
+			Hello,
+			if user != nil {
+				{ user.Handle }
+			} else {
+				world
+			}
+		</span>
+		if user != nil {
+			<button type="button" hx-post="/logout" hx-swap="none">logout</button>
+		} else {
+			<a href="/login">login</a>
+		}
+	}
 }

internal/web/pages/login.templ

···
 import "yoten.app/internal/web/pages/templates"
 
 templ Login(params LoginParams) {
-    @templates.BaseLayout("login") {
-        <h2>Login Page</h2>
-        <p>Please enter your credentials.</p>
-        <form hx-post="/login" hx-swap="none" hx-disabled-elt="#login-button">
-            <div>
-                <label for="handle">Handle</label>
-                <input type="text" id="handle" name="handle" />
-                <p>
-                    Use your
-                    <a href="https://bsky.app/">Bluesky</a>
-                    handle to log in. You will then be redirected to your PDS to complete authentication.
-                </p>
-            </div>
-            <button type="submit" id="login-button">Log In</button>
-        </form>
-        <p id="login-msg"></p>
-    }
+	@templates.BaseLayout("login") {
+		<h2>Login Page</h2>
+		<p>Please enter your credentials.</p>
+		<form hx-post="/login" hx-swap="none" hx-disabled-elt="#login-button">
+			<div>
+				<label for="handle">Handle</label>
+				<input type="text" id="handle" name="handle"/>
+				<p>
+					Use your
+					<a href="https://bsky.app/">Bluesky</a>
+					handle to log in. You will then be redirected to your PDS to complete authentication.
+				</p>
+			</div>
+			<button type="submit" id="login-button">Log In</button>
+		</form>
+		<p id="login-msg"></p>
+	}
 }

internal/web/pages/pages.go

···
 
 import (
 	"github.com/a-h/templ"
+
+	"yoten.app/internal/web/db"
 	"yoten.app/internal/web/oauth"
 )
 
 type IndexParams struct {
+	// The current logged in user.
 	User *oauth.User
 }
 
···
 func LoginComponent(params LoginParams) templ.Component {
 	return Login(params)
 }
+
+type ProfileParams struct {
+	// The current logged in user.
+	User      *oauth.User
+	Profile   *db.Profile
+	AvatarUri string
+}
+
+func ProfileComponent(params ProfileParams) templ.Component {
+	return Profile(params)
+}
+
+func NotFoundComponent() templ.Component {
+	return NotFound()
+}

internal/web/pages/partials/edit-bio.templ

···
+package partials
+
+import "fmt"
+
+templ EditBio(params EditBioParams) {
+	<form hx-post="/profile/edit-bio" hx-swap="none" hx-disabled-elt="#save-button,#cancel-button">
+		<div>
+			<label for="display-name">Display name</label>
+			<input type="text" name="display-name" value={ params.Profile.DisplayName }/>
+		</div>
+		<div>
+			<label for="description">Description</label>
+			<textarea type="text" name="description" rows="3" placeholder="write a bio">
+				{ params.Profile.Description }
+			</textarea>
+		</div>
+		<div>
+			<label for="location">location</label>
+			<input type="text" name="location" value={ params.Profile.Location }/>
+		</div>
+		<div>
+			<button id="save-button" type="submit">
+				save
+			</button>
+			<a href={ templ.URL(fmt.Sprintf("/%s", params.Profile.Did)) }>
+				<button id="cancel-button" type="button">
+					cancel
+				</button>
+			</a>
+		</div>
+		@SelectedLanguages(SelectedLanguagesParams{Languages: params.Profile.Languages})
+	</form>
+}

internal/web/pages/partials/partials.go

···
+package partials
+
+import (
+	"github.com/a-h/templ"
+
+	"yoten.app/internal/web/db"
+	"yoten.app/internal/web/oauth"
+)
+
+type EditBioParams struct {
+	// The current logged in user.
+	User    *oauth.User
+	Profile *db.Profile
+}
+
+func EditBioPartial(params EditBioParams) templ.Component {
+	return EditBio(params)
+}
+
+type SelectedLanguagesParams struct {
+	Languages []db.Language
+}
+
+func SelectedLanguagesPartial(params SelectedLanguagesParams) templ.Component {
+	return SelectedLanguages(params)
+}

internal/web/pages/partials/selected-languages.templ

···
+package partials
+
+import (
+	"fmt"
+	"slices"
+
+	"yoten.app/internal/web/db"
+)
+
+templ SelectedLanguages(params SelectedLanguagesParams) {
+	<div id="language-list">
+		<select
+			name="language_code"
+			hx-post="/profile/add-language"
+			hx-trigger="change"
+			hx-target="#language-list"
+			hx-swap="innerHTML"
+		>
+			<option disabled selected>Add a language...</option>
+			for c, l := range db.Languages {
+				{{
+	if slices.ContainsFunc(params.Languages, func(userLang db.Language) bool {
+		return userLang.Code == l.Code
+	}) {
+		continue
+	}
+				}}
+				<option value={ string(c) }>
+					{ l.Name }
+					if l.NativeName != nil {
+						({ *l.NativeName })
+					}
+				</option>
+			}
+		</select>
+		<p>Selected Languages:</p>
+		<ul>
+			for _, l := range params.Languages {
+				<li>
+					<small>
+						{ l.Name }
+						if l.NativeName != nil {
+							({ *l.NativeName })
+						}
+					</small>
+					<button
+						id="remove-language-button"
+						hx-disabled-elt="#remove-language-button,#save-button,#cancel-button"
+						hx-post="/profile/remove-language"
+						hx-target="#language-list"
+						hx-swap="innerHTML"
+						hx-vals={ fmt.Sprintf("{\"language_code\": \"%s\"}", string(l.Code)) }
+					>
+						x
+					</button>
+				</li>
+			}
+		</ul>
+	</div>
+}

internal/web/pages/profile.templ

···
+package pages
+
+import "yoten.app/internal/web/pages/templates"
+
+templ Profile(params ProfileParams) {
+	@templates.BaseLayout("profile") {
+		<img src={ params.AvatarUri } width="200"/>
+		<p><b>{ params.Profile.DisplayName }</b></p>
+		<div id="profile-bio">
+			<p>{ params.Profile.Description }</p>
+			<small>Location: { params.Profile.Location }</small>
+			<br/>
+			<small>Languages:</small>
+			<ul>
+				for _, l := range params.Profile.Languages {
+					<li>
+						<small>
+							{ l.Name }
+							if l.NativeName != nil {
+								({ *l.NativeName })
+							}
+						</small>
+					</li>
+				}
+			</ul>
+			if params.User != nil && params.User.Did == params.Profile.Did {
+				<button hx-get="/profile/edit-bio" hx-swap="innerHTML" hx-target="#profile-bio">
+					edit
+				</button>
+			}
+		</div>
+		<p id="update-profile-msg"></p>
+	}
+}

internal/web/pages/templates/base.templ

···
 package templates
 
 templ BaseLayout(title string) {
-    <!DOCTYPE html>
-    <html lang="en">
-
-    <head>
-        <meta charset="UTF-8" />
-        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-        <title>{ title }</title>
-    </head>
-
-    <body>
-        <main>
-            { children... }
-        </main>
-    </body>
-    <script src="https://unpkg.com/htmx.org@2.0.4"></script>
-
-    </html>
+	<!DOCTYPE html>
+	<html lang="en">
+		<head>
+			<meta charset="UTF-8"/>
+			<meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+			<title>{ title }</title>
+		</head>
+		<body>
+			<main>
+				{ children... }
+			</main>
+		</body>
+		<script src="https://unpkg.com/htmx.org@2.0.4"></script>
+	</html>
 }

internal/web/state/profile.go

···
+package state
+
+import (
+	"encoding/json"
+	"fmt"
+	"log"
+	"net/http"
+	"slices"
+	"time"
+
+	comatproto "github.com/bluesky-social/indigo/api/atproto"
+	"github.com/bluesky-social/indigo/atproto/identity"
+	lexutil "github.com/bluesky-social/indigo/lex/util"
+	"github.com/go-chi/chi/v5"
+
+	"yoten.app/api/yoten"
+	"yoten.app/internal/web/db"
+	"yoten.app/internal/web/htmx"
+	"yoten.app/internal/web/pages"
+	"yoten.app/internal/web/pages/partials"
+)
+
+type ProfileResponse struct {
+	Avatar string `json:"avatar"`
+}
+
+func (s *State) HandleProfile(w http.ResponseWriter, r *http.Request) {
+	didOrHandle := chi.URLParam(r, "user")
+	if didOrHandle == "" {
+		http.Error(w, "Bad request", http.StatusBadRequest)
+		return
+	}
+
+	ident, ok := r.Context().Value("resolvedId").(identity.Identity)
+	if !ok {
+		pages.NotFoundComponent().Render(r.Context(), w)
+		return
+	}
+
+	profileAvatarUri, err := s.GetAvatarUri(ident.Handle.String())
+	if err != nil {
+		log.Printf("failed to get profile avatar for %s: %s", ident.DID.String(), err)
+	}
+
+	profile, err := db.GetProfile(s.db, ident.DID.String())
+	if err != nil || profile == nil {
+		log.Printf("failed to find %s in db: %s", ident.DID.String(), err)
+		pages.NotFound().Render(r.Context(), w)
+		return
+	}
+
+	user := s.oauth.GetUser(r)
+
+	pages.ProfileComponent(pages.ProfileParams{
+		Profile:   profile,
+		AvatarUri: profileAvatarUri,
+		User:      user,
+	}).Render(r.Context(), w)
+}
+
+func (s *State) HandleAddLanguage(w http.ResponseWriter, r *http.Request) {
+	if err := r.ParseForm(); err != nil {
+		htmx.HxOobUpdate(w, "update-profile-msg", "Failed to parse form.")
+		return
+	}
+
+	langCodeStr := r.PostFormValue("language_code")
+	if langCodeStr == "" {
+		htmx.HxOobUpdate(w, "update-profile-msg", "Language code is missing.")
+		return
+	}
+
+	newLangCode := db.LanguageCode(langCodeStr)
+
+	user := s.oauth.GetUser(r)
+	profile, err := db.GetProfile(s.db, user.Did)
+	if err != nil || profile == nil {
+		log.Printf("failed to find %s in db: %s", user.Did, err)
+		pages.NotFound().Render(r.Context(), w)
+		return
+	}
+
+	contains := slices.ContainsFunc(profile.Languages, func(l db.Language) bool {
+		return l.Code == newLangCode
+	})
+	if contains {
+		htmx.HxOobUpdate(w, "update-profile-msg", "Language already selected.")
+		return
+	}
+	profile.Languages = append(profile.Languages, db.Languages[newLangCode])
+
+	if err := db.ValidateProfile(s.db, profile); err != nil {
+		log.Println("invalid profile", err)
+		htmx.HxOobUpdate(w, "update-profile-msg", err.Error())
+		return
+	}
+
+	s.updateProfile(profile, w, r)
+
+	partials.SelectedLanguagesPartial(partials.SelectedLanguagesParams{
+		Languages: profile.Languages,
+	}).Render(r.Context(), w)
+}
+
+func (s *State) HandleRemoveLanguage(w http.ResponseWriter, r *http.Request) {
+	if err := r.ParseForm(); err != nil {
+		htmx.HxOobUpdate(w, "update-profile-msg", "Failed to parse form.")
+		return
+	}
+
+	langCodeStr := r.PostFormValue("language_code")
+	if langCodeStr == "" {
+		htmx.HxOobUpdate(w, "update-profile-msg", "Language code is missing.")
+		return
+	}
+
+	newLangCode := db.LanguageCode(langCodeStr)
+
+	user := s.oauth.GetUser(r)
+	profile, err := db.GetProfile(s.db, user.Did)
+	if err != nil || profile == nil {
+		log.Printf("failed to find %s in db: %s", user.Did, err)
+		pages.NotFound().Render(r.Context(), w)
+		return
+	}
+
+	for i, l := range profile.Languages {
+		if l.Code == newLangCode {
+			profile.Languages = append(profile.Languages[:i], profile.Languages[i+1:]...)
+		}
+	}
+
+	if err := db.ValidateProfile(s.db, profile); err != nil {
+		log.Println("invalid profile", err)
+		htmx.HxOobUpdate(w, "update-profile-msg", err.Error())
+		return
+	}
+
+	s.updateProfile(profile, w, r)
+
+	partials.SelectedLanguagesPartial(partials.SelectedLanguagesParams{
+		Languages: profile.Languages,
+	}).Render(r.Context(), w)
+}
+
+func (s *State) HandleEditBio(w http.ResponseWriter, r *http.Request) {
+	user := s.oauth.GetUser(r)
+	profile, err := db.GetProfile(s.db, user.Did)
+	if err != nil || profile == nil {
+		log.Printf("failed to find %s in db: %s", user.Did, err)
+		pages.NotFound().Render(r.Context(), w)
+		return
+	}
+
+	switch r.Method {
+	case http.MethodGet:
+		partials.EditBioPartial(partials.EditBioParams{
+			Profile: profile,
+			User:    user,
+		}).Render(r.Context(), w)
+	case http.MethodPost:
+		err := r.ParseForm()
+		if err != nil {
+			log.Println("invalid profile update form", err)
+			htmx.HxOobUpdate(w, "update-profile-msg", "Invalid form.")
+			return
+		}
+
+		profile.DisplayName = r.FormValue("display-name")
+		profile.Description = r.FormValue("description")
+		profile.Location = r.FormValue("location")
+
+		var languages []db.Language
+		for i := range 10 {
+			l := r.FormValue(fmt.Sprintf("language%d", i))
+			if l == "" {
+				break
+			}
+			languages = append(languages, db.Languages[db.LanguageCode(l)])
+		}
+		profile.Languages = languages
+
+		if err := db.ValidateProfile(s.db, profile); err != nil {
+			log.Println("invalid profile", err)
+			htmx.HxOobUpdate(w, "update-profile-msg", err.Error())
+			return
+		}
+
+		s.updateProfile(profile, w, r)
+		htmx.HxRedirect(w, "/"+user.Did)
+	}
+}
+
+func (s *State) GetAvatarUri(actor string) (string, error) {
+	profileURL := fmt.Sprintf("https://public.api.bsky.app/xrpc/app.bsky.actor.getProfile?actor=%s", actor)
+
+	profileResp, err := http.Get(profileURL)
+	if err != nil {
+		return "", fmt.Errorf("failed to fetch profile: %w", err)
+	}
+	defer profileResp.Body.Close()
+
+	if profileResp.StatusCode != http.StatusOK {
+		return "", fmt.Errorf("failed to get profile, status: %s", profileResp.Status)
+	}
+
+	var profile ProfileResponse
+	if err := json.NewDecoder(profileResp.Body).Decode(&profile); err != nil {
+		return "", fmt.Errorf("failed to decode profile JSON: %w", err)
+	}
+
+	if profile.Avatar == "" {
+		return "", fmt.Errorf("failed to find avatar for actor %s.", actor)
+	}
+
+	return profile.Avatar, nil
+}
+
+func (s *State) updateProfile(profile *db.Profile, w http.ResponseWriter, r *http.Request) {
+	user := s.oauth.GetUser(r)
+	tx, err := s.db.BeginTx(r.Context(), nil)
+	if err != nil {
+		log.Println("failed to start transaction", err)
+		htmx.HxOobUpdate(w, "update-profile-msg", "Failed to update profile, try again later.")
+		return
+	}
+
+	client, err := s.oauth.AuthorizedClient(r)
+	if err != nil {
+		log.Println("failed to get authorized client", err)
+		htmx.HxOobUpdate(w, "update-profile-msg", "Failed to update profile, try again later.")
+		return
+	}
+
+	ex, _ := client.RepoGetRecord(r.Context(), "", "app.yoten.actor.profile", user.Did, "self")
+	var cid *string
+	if ex != nil {
+		cid = ex.Cid
+	}
+
+	languages := make([]string, 0, len(profile.Languages))
+	for _, lc := range profile.Languages {
+		languages = append(languages, string(lc.Code))
+	}
+
+	_, err = client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
+		Collection: "app.yoten.actor.profile",
+		Repo:       user.Did,
+		Rkey:       "self",
+		Record: &lexutil.LexiconTypeDecoder{
+			Val: &yoten.ActorProfile{
+				DisplayName: profile.DisplayName,
+				Description: &profile.Description,
+				Location:    &profile.Location,
+				Languages:   languages,
+				CreatedAt:   profile.CreatedAt.Format(time.RFC3339),
+			}},
+		SwapRecord: cid,
+	})
+	if err != nil {
+		log.Println("failed to put profile record", err)
+		htmx.HxOobUpdate(w, "update-profile-msg", "Failed to update PDS, try again later.")
+		return
+	}
+
+	err = db.UpsertProfile(tx, profile)
+	if err != nil {
+		log.Println("failed to upsert profile", err)
+		htmx.HxOobUpdate(w, "update-profile-msg", "Failed to update profile, try again later.")
+		return
+	}
+}

internal/web/state/router.go

···
 
 import (
 	"net/http"
+	"strings"
 
 	"github.com/go-chi/chi/v5"
 	"github.com/gorilla/sessions"
 	"yoten.app/internal/web/middleware"
 	oauthhandler "yoten.app/internal/web/oauth/handler"
+	"yoten.app/internal/web/pages"
 )
 
 func (s *State) Router() http.Handler {
···
 	middleware := middleware.New(
 		s.oauth,
 		s.db,
+		s.idResolver,
 	)
 
 	router.HandleFunc("/*", func(w http.ResponseWriter, r *http.Request) {
-		s.StandardRouter(&middleware).ServeHTTP(w, r)
+		pat := chi.URLParam(r, "*")
+		if strings.HasPrefix(pat, "did:") || strings.HasPrefix(pat, "@") {
+			s.UserRouter(&middleware).ServeHTTP(w, r)
+		} else {
+			s.StandardRouter(&middleware).ServeHTTP(w, r)
+		}
 	})
 
 	return router
···
 	r := chi.NewRouter()
 
 	r.Get("/", s.HandleIndex)
-
 	r.Mount("/", s.OAuthRouter())
+
+	r.Route("/profile", func(r chi.Router) {
+		r.Use(middleware.AuthMiddleware(s.oauth))
+		r.Get("/edit-bio", s.HandleEditBio)
+		r.Post("/edit-bio", s.HandleEditBio)
+		r.Post("/add-language", s.HandleAddLanguage)
+		r.Post("/remove-language", s.HandleRemoveLanguage)
+	})
+
+	return r
+}
+
+func (s *State) UserRouter(mw *middleware.Middleware) http.Handler {
+	r := chi.NewRouter()
+
+	// Strip @ from user.
+	r.Use(middleware.StripLeadingAt)
+
+	r.With(mw.ResolveIdent()).Route("/{user}", func(r chi.Router) {
+		r.Get("/", s.HandleProfile)
+	})
+
+	r.NotFound(func(w http.ResponseWriter, r *http.Request) {
+		pages.NotFoundComponent().Render(r.Context(), w)
+	})
 
 	return r
 }

internal/web/state/state.go

···
 package state
 
 import (
+	"context"
+	"fmt"
+	"log/slog"
 	"net/http"
 
 	"yoten.app/internal/web/config"
 	"yoten.app/internal/web/db"
+	"yoten.app/internal/web/ingester"
+	"yoten.app/internal/web/jetstream"
 	"yoten.app/internal/web/oauth"
 	"yoten.app/internal/web/pages"
+	"yoten.app/internal/web/resolver"
 )
 
 type State struct {
-	db     *db.DB
-	oauth  *oauth.OAuth
-	config *config.Config
+	db         *db.DB
+	oauth      *oauth.OAuth
+	config     *config.Config
+	idResolver *resolver.Resolver
 }
 
 func Make(config *config.Config) (*State, error) {
···
 
 	oauth := oauth.NewOAuth(d, config)
 
+	idResolver := resolver.DefaultResolver()
+
+	wrapper := db.DbWrapper{d}
+	jc, err := jetstream.NewJetstreamClient(
+		config.Jetstream.Endpoint,
+		"appview",
+		[]string{
+			"app.yoten.actor.profile",
+		},
+		nil,
+		slog.Default(),
+		wrapper,
+		false,
+	)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create jetstream client: %w", err)
+	}
+	err = jc.StartJetstream(context.Background(), ingester.Ingest(wrapper))
+	if err != nil {
+		return nil, fmt.Errorf("failed to start jetstream watcher: %w", err)
+	}
+
 	state := &State{
-		db:     d,
-		oauth:  oauth,
-		config: config,
+		db:         d,
+		oauth:      oauth,
+		config:     config,
+		idResolver: idResolver,
 	}
 
 	return state, nil

internal/web/xrpcclient/xrpc.go

···
+package xrpcclient
+
+import (
+	"context"
+
+	"github.com/bluesky-social/indigo/api/atproto"
+	"github.com/bluesky-social/indigo/xrpc"
+	oauth "tangled.sh/icyphox.sh/atproto-oauth"
+)
+
+type Client struct {
+	*oauth.XrpcClient
+	authArgs *oauth.XrpcAuthedRequestArgs
+}
+
+func NewClient(client *oauth.XrpcClient, authArgs *oauth.XrpcAuthedRequestArgs) *Client {
+	return &Client{
+		XrpcClient: client,
+		authArgs:   authArgs,
+	}
+}
+
+func (c *Client) RepoPutRecord(ctx context.Context, input *atproto.RepoPutRecord_Input) (*atproto.RepoPutRecord_Output, error) {
+	var out atproto.RepoPutRecord_Output
+	if err := c.Do(ctx, c.authArgs, xrpc.Procedure, "application/json", "com.atproto.repo.putRecord", nil, input, &out); err != nil {
+		return nil, err
+	}
+
+	return &out, nil
+}
+
+func (c *Client) RepoGetRecord(ctx context.Context, cid string, collection string, repo string, rkey string) (*atproto.RepoGetRecord_Output, error) {
+	var out atproto.RepoGetRecord_Output
+
+	params := map[string]interface{}{
+		"cid":        cid,
+		"collection": collection,
+		"repo":       repo,
+		"rkey":       rkey,
+	}
+	if err := c.Do(ctx, c.authArgs, xrpc.Query, "", "com.atproto.repo.getRecord", params, nil, &out); err != nil {
+		return nil, err
+	}
+
+	return &out, nil
+}

lexicon-build-config.json

···
+[
+  {
+    "package": "yoten",
+    "prefix": "app.yoten",
+    "outdir": "api/yoten",
+    "import": "yoten.app/api/yoten",
+    "gen-server": true
+  }
+]
+

lexicons/actor/profile.json

···
+{
+  "lexicon": 1,
+  "id": "app.yoten.actor.profile",
+  "defs": {
+    "main": {
+      "type": "record",
+      "description": "A declaration of a Yōten account profile.",
+      "key": "literal:self",
+      "record": {
+        "type": "object",
+        "required": ["displayName", "createdAt"],
+        "properties": {
+          "displayName": {
+            "type": "string",
+            "maxGraphemes": 64,
+            "maxLength": 640
+          },
+          "description": {
+            "type": "string",
+            "description": "Free-form profile description text.",
+            "maxGraphemes": 256,
+            "maxLength": 2560
+          },
+          "location": {
+            "type": "string",
+            "description": "Free-form location text.",
+            "maxGraphemes": 40,
+            "maxLength": 400
+          },
+          "languages": {
+            "type": "array",
+            "minLength": 0,
+            "maxLength": 10,
+            "items": {
+              "type": "string",
+              "description": "An ISO 639-1 two-letter language code (e.g., 'en', 'es', 'ko').",
+              "minLength": 2,
+              "maxLength": 2
+            }
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "datetime"
+          }
+        }
+      }
+    }
+  }
+}
+