merge main (resolve conflicts with quickslice rewrite)

.dockerignore

···
+target/
+.git/
+.gitignore
+*.db
+.env
+.cargo/
+Dockerfile
+.dockerignore
+fly.toml
+README.md
+.github/

.env.template

···
+# Environment Configuration
+PORT="8080"            # The port your server will listen on
+HOST="127.0.0.1"       # Hostname for the server
+PUBLIC_URL=""          # Set when deployed publicly, e.g. "https://mysite.com". Informs OAuth client id.
+# DB_PATH="./statusphere.sqlite3"     # The SQLite database path. Leave commented out to use a temporary in-memory database.
+
+# Dev Mode Configuration
+DEV_MODE="false"       # Enable dev mode for testing with dummy data. Access via ?dev=true query parameter when enabled.
+
+# Custom Emojis
+# Directory to read/write custom emoji image files at runtime.
+# For local dev, keep under the repo:
+EMOJI_DIR="static/emojis"

.github/workflows/ci.yml

···
+name: CI
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@v2
+      
+      - name: Check formatting
+        run: cargo fmt -- --check
+        
+      - name: Build
+        run: cargo build --verbose
+        
+      - name: Run clippy
+        run: cargo clippy -- -D warnings
+        
+      - name: Run tests
+        run: cargo test --verbose

.github/workflows/claude-code-review.yml

···
+name: Claude Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+    # Optional: Only run on specific file changes
+    # paths:
+    #   - "src/**/*.ts"
+    #   - "src/**/*.tsx"
+    #   - "src/**/*.js"
+    #   - "src/**/*.jsx"
+
+jobs:
+  claude-review:
+    # Optional: Filter by PR author
+    # if: |
+    #   github.event.pull_request.user.login == 'external-contributor' ||
+    #   github.event.pull_request.user.login == 'new-developer' ||
+    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
+    
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+    
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code Review
+        id: claude-review
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          prompt: |
+            Please review this pull request and provide feedback on:
+            - Code quality and best practices
+            - Potential bugs or issues
+            - Performance considerations
+            - Security concerns
+            - Test coverage
+            
+            Use the repository's CLAUDE.md for guidance on style and conventions. Be constructive and helpful in your feedback.
+
+            Use `gh pr comment` with your Bash tool to leave your review as a comment on the PR.
+          
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
+          claude_args: '--allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
+

.github/workflows/claude.yml

···
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+      actions: read # Required for Claude to read CI results on PRs
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read
+
+          # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
+          # prompt: 'Update the pull request description to include a summary of changes.'
+
+          # Optional: Add claude_args to customize behavior and configuration
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
+          # claude_args: '--model claude-opus-4-1-20250805 --allowed-tools Bash(gh pr:*)'
+

.github/workflows/fly-review.yml

···
+name: Deploy Review App
+on:
+  # Run this workflow on every PR event. Existing review apps will be updated when the PR is updated.
+  pull_request:
+    types: [opened, reopened, synchronize, closed]
+    paths:
+      - 'src/**'
+      - 'templates/**'
+      - 'static/**'
+      - 'Cargo.toml'
+      - 'Cargo.lock'
+      - 'Dockerfile'
+      - 'fly.toml'
+      - 'fly.review.toml'
+      - 'build.rs'
+      - 'sqlx-data.json'
+env:
+  FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
+  # Set these to your Fly.io organization and preferred region.
+  FLY_REGION: ewr
+  FLY_ORG: personal
+
+jobs:
+  review_app:
+    runs-on: ubuntu-latest
+    outputs:
+      url: ${{ steps.deploy.outputs.url }}
+    # Only run one deployment at a time per PR.
+    concurrency:
+      group: pr-${{ github.event.number }}
+
+    # Deploying apps with this "review" environment allows the URL for the app to be displayed in the PR UI.
+    environment:
+      name: review
+      # The script in the `deploy` sets the URL output for each review app.
+      url: ${{ steps.deploy.outputs.url }}
+    steps:
+      - name: Get code
+        uses: actions/checkout@v4
+
+      - name: Deploy PR app to Fly.io
+        id: deploy
+        uses: superfly/fly-pr-review-apps@1.2.1
+        with:
+          name: zzstoatzz-status-pr-${{ github.event.number }}
+          config: fly.review.toml
+          # Use smaller resources for review apps
+          vmsize: shared-cpu-1x
+          memory: 256
+          # Set OAUTH_REDIRECT_BASE dynamically for OAuth redirects
+          secrets: |
+            OAUTH_REDIRECT_BASE=https://zzstoatzz-status-pr-${{ github.event.number }}.fly.dev

.github/workflows/fly.yml

···
+name: Fly Deploy
+on:
+  push:
+    branches:
+      - main
+jobs:
+  deploy:
+    name: Deploy app
+    runs-on: ubuntu-latest
+    concurrency: deploy-group    # ensure only one action runs at a time
+    steps:
+      - uses: actions/checkout@v4
+      - uses: superfly/flyctl-actions/setup-flyctl@master
+      - run: flyctl deploy --remote-only
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

.pre-commit-config.yaml

···
+repos:
+  - repo: local
+    hooks:
+      - id: cargo-check
+        name: Cargo check
+        entry: cargo check
+        language: system
+        types: [rust]
+        pass_filenames: false
+      - id: cargo-fmt-check
+        name: Cargo fmt check
+        entry: cargo fmt -- --check
+        language: system
+        types: [rust]
+        pass_filenames: false
+      - id: cargo-clippy
+        name: Cargo clippy
+        entry: cargo clippy -- -D warnings
+        language: system
+        types: [rust]
+        pass_filenames: false
+      - id: check-html-syntax
+        name: Check HTML syntax
+        entry: bash -c 'for file in "$@"; do if ! xmllint --html --noout "$file" 2>/dev/null; then echo "HTML syntax error in $file"; exit 1; fi; done' --
+        language: system
+        files: \.html$
+      - id: check-js-syntax
+        name: Check JavaScript syntax
+        entry: bash -c 'for file in "$@"; do if ! node -c "$file" 2>/dev/null; then echo "JavaScript syntax error in $file"; exit 1; fi; done' --
+        language: system
+        files: \.js$
+      - id: check-json
+        name: Check JSON
+        entry: bash -c 'for file in "$@"; do if ! python3 -m json.tool "$file" > /dev/null 2>&1; then echo "JSON syntax error in $file"; exit 1; fi; done' --
+        language: system
+        files: \.json$

CLAUDE.md

···
+- fly logs is a blocking command, you need to run it in the background

Cargo.lock

···
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "actix-codec"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f7b0a21988c1bf877cf4759ef5ddaac04c1c9fe808c9142ecb78ba97d97a28a"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "memchr",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "actix-files"
+version = "0.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0773d59061dedb49a8aed04c67291b9d8cf2fe0b60130a381aab53c6dd86e9be"
+dependencies = [
+ "actix-http",
+ "actix-service",
+ "actix-utils",
+ "actix-web",
+ "bitflags",
+ "bytes",
+ "derive_more 0.99.19",
+ "futures-core",
+ "http-range",
+ "log",
+ "mime",
+ "mime_guess",
+ "percent-encoding",
+ "pin-project-lite",
+ "v_htmlescape",
+]
+
+[[package]]
+name = "actix-http"
+version = "3.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fa882656b67966045e4152c634051e70346939fced7117d5f0b52146a7c74c9"
+dependencies = [
+ "actix-codec",
+ "actix-rt",
+ "actix-service",
+ "actix-utils",
+ "base64 0.22.1",
+ "bitflags",
+ "brotli",
+ "bytes",
+ "bytestring",
+ "derive_more 2.0.1",
+ "encoding_rs",
+ "flate2",
+ "foldhash",
+ "futures-core",
+ "h2 0.3.26",
+ "http 0.2.12",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "language-tags",
+ "local-channel",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "rand 0.9.0",
+ "sha1",
+ "smallvec",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "zstd",
+]
+
+[[package]]
+name = "actix-macros"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01ed3140b2f8d422c68afa1ed2e85d996ea619c988ac834d255db32138655cb"
+dependencies = [
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "actix-multipart"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d974dd6c4f78d102d057c672dcf6faa618fafa9df91d44f9c466688fc1275a3a"
+dependencies = [
+ "actix-multipart-derive",
+ "actix-utils",
+ "actix-web",
+ "bytes",
+ "derive_more 0.99.19",
+ "futures-core",
+ "futures-util",
+ "httparse",
+ "local-waker",
+ "log",
+ "memchr",
+ "mime",
+ "rand 0.8.5",
+ "serde",
+ "serde_json",
+ "serde_plain",
+ "tempfile",
+ "tokio",
+]
+
+[[package]]
+name = "actix-multipart-derive"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0a0a77f836d869f700e5b47ac7c3c8b9c8bc82e4aec861954c6198abee3ebd4d"
+dependencies = [
+ "darling",
+ "parse-size",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "actix-router"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13d324164c51f63867b57e73ba5936ea151b8a41a1d23d1031eeb9f70d0236f8"
+dependencies = [
+ "bytestring",
+ "cfg-if",
+ "http 0.2.12",
+ "regex",
+ "regex-lite",
+ "serde",
+ "tracing",
+]
+
+[[package]]
+name = "actix-rt"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24eda4e2a6e042aa4e55ac438a2ae052d3b5da0ecf83d7411e1a368946925208"
+dependencies = [
+ "futures-core",
+ "tokio",
+]
+
+[[package]]
+name = "actix-server"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ca2549781d8dd6d75c40cf6b6051260a2cc2f3c62343d761a969a0640646894"
+dependencies = [
+ "actix-rt",
+ "actix-service",
+ "actix-utils",
+ "futures-core",
+ "futures-util",
+ "mio",
+ "socket2",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "actix-service"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b894941f818cfdc7ccc4b9e60fa7e53b5042a2e8567270f9147d5591893373a"
+dependencies = [
+ "futures-core",
+ "paste",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "actix-session"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "efe6976a74f34f1b6d07a6c05aadc0ed0359304a7781c367fa5b4029418db08f"
+dependencies = [
+ "actix-service",
+ "actix-utils",
+ "actix-web",
+ "anyhow",
+ "derive_more 1.0.0",
+ "rand 0.8.5",
+ "serde",
+ "serde_json",
+ "tracing",
+]
+
+[[package]]
+name = "actix-utils"
+version = "3.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88a1dcdff1466e3c2488e1cb5c36a71822750ad43839937f85d2f4d9f8b705d8"
+dependencies = [
+ "local-waker",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "actix-web"
+version = "4.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2e3b15b3dc6c6ed996e4032389e9849d4ab002b1e92fbfe85b5f307d1479b4d"
+dependencies = [
+ "actix-codec",
+ "actix-http",
+ "actix-macros",
+ "actix-router",
+ "actix-rt",
+ "actix-server",
+ "actix-service",
+ "actix-utils",
+ "actix-web-codegen",
+ "bytes",
+ "bytestring",
+ "cfg-if",
+ "cookie",
+ "derive_more 2.0.1",
+ "encoding_rs",
+ "foldhash",
+ "futures-core",
+ "futures-util",
+ "impl-more",
+ "itoa",
+ "language-tags",
+ "log",
+ "mime",
+ "once_cell",
+ "pin-project-lite",
+ "regex",
+ "regex-lite",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "smallvec",
+ "socket2",
+ "time",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "actix-web-codegen"
+version = "4.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f591380e2e68490b5dfaf1dd1aa0ebe78d84ba7067078512b4ea6e4492d622b8"
+dependencies = [
+ "actix-router",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "addr2line"
+version = "0.24.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1"
+dependencies = [
+ "gimli",
+]
+
+[[package]]
+name = "adler2"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627"
+
+[[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common",
+ "generic-array",
+]
+
+[[package]]
+name = "aes"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1"
+dependencies = [
+ "aead",
+ "aes",
+ "cipher",
+ "ctr",
+ "ghash",
+ "subtle",
+]
+
+[[package]]
+name = "ahash"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e89da841a80418a9b391ebaea17f5c112ffaaa96f621d2c285b5174da76b9011"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "version_check",
+ "zerocopy 0.7.35",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "alloc-no-stdlib"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94fb8275041c72129eb51b7d0322c29b8387a0386127718b096429201a5d6ece"
+dependencies = [
+ "alloc-no-stdlib",
+]
+
+[[package]]
+name = "allocator-api2"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
+
+[[package]]
+name = "android-tzdata"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e999941b234f3131b00bc13c22d06e8c5ff726d1b6318ac7eb276997bbb4fef0"
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anstream"
+version = "0.6.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9"
+
+[[package]]
+name = "anstyle-parse"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b2d16507662817a6a20a9ea92df6652ee4f94f914589377d69f3b21bc5798a9"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "79947af37f4177cfead1110013d678905c37501914fba0efea834c3fe9a8d60c"
+dependencies = [
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e"
+dependencies = [
+ "anstyle",
+ "once_cell",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.97"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dcfed56ad506cb2c684a14971b8861fdc3baaaae314b9e5f9bb532cbe3ba7a4f"
+
+[[package]]
+name = "askama"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a4e46abb203e00ef226442d452769233142bbfdd79c3941e84c8e61c4112543"
+dependencies = [
+ "askama_derive",
+ "itoa",
+ "percent-encoding",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "askama_derive"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54398906821fd32c728135f7b351f0c7494ab95ae421d41b6f5a020e158f28a6"
+dependencies = [
+ "askama_parser",
+ "basic-toml",
+ "memchr",
+ "proc-macro2",
+ "quote",
+ "rustc-hash",
+ "serde",
+ "serde_derive",
+ "syn",
+]
+
+[[package]]
+name = "askama_parser"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf315ce6524c857bb129ff794935cf6d42c82a6cff60526fe2a63593de4d0d4f"
+dependencies = [
+ "memchr",
+ "serde",
+ "serde_derive",
+ "winnow",
+]
+
+[[package]]
+name = "async-compression"
+version = "0.4.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "310c9bcae737a48ef5cdee3174184e6d548b292739ede61a1f955ef76a738861"
+dependencies = [
+ "flate2",
+ "futures-core",
+ "memchr",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "async-lock"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff6e472cdea888a4bd64f342f09b3f50e1886d32afe8df3d663c01140b811b18"
+dependencies = [
+ "event-listener",
+ "event-listener-strategy",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-sqlite"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60659f08ccb3a20c15af150ae736cde366fa0657246be9d194affb0149be188f"
+dependencies = [
+ "crossbeam-channel",
+ "futures-channel",
+ "futures-util",
+ "rusqlite",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.88"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e539d3fca749fcee5236ab05e93a52867dd549cc157c8cb7f99595f3cedffdb5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "atrium-api"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d4eb9b4787aba546015c8ccda1d3924c157cee13d67848997fba74ac8144a07"
+dependencies = [
+ "atrium-common",
+ "atrium-xrpc",
+ "chrono",
+ "http 1.2.0",
+ "ipld-core",
+ "langtag",
+ "regex",
+ "serde",
+ "serde_bytes",
+ "serde_json",
+ "thiserror",
+ "tokio",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-common"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba30d2f9e1a8b3db8fc97d0a5f91ee5a28f8acdddb771ad74c1b08eda357ca3d"
+dependencies = [
+ "dashmap",
+ "lru",
+ "moka",
+ "thiserror",
+ "tokio",
+ "trait-variant",
+ "web-time",
+]
+
+[[package]]
+name = "atrium-identity"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "007c7fdb0e026c7d01697b78263b2d85742b5113fbc5263f8885280cacceca05"
+dependencies = [
+ "atrium-api",
+ "atrium-common",
+ "atrium-xrpc",
+ "serde",
+ "serde_html_form",
+ "serde_json",
+ "thiserror",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-oauth"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24e59e30ae1aa9bbb99ebf2fa5ca40a8ca6665b6b7e4d1de322d99544045e91e"
+dependencies = [
+ "atrium-api",
+ "atrium-common",
+ "atrium-identity",
+ "atrium-xrpc",
+ "base64 0.22.1",
+ "chrono",
+ "dashmap",
+ "ecdsa",
+ "elliptic-curve",
+ "jose-jwa",
+ "jose-jwk",
+ "p256",
+ "rand 0.8.5",
+ "reqwest",
+ "serde",
+ "serde_html_form",
+ "serde_json",
+ "sha2",
+ "thiserror",
+ "tokio",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-xrpc"
+version = "0.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18a9e526cb2ed3e0a2ca78c3ce2a943d9041a68e067dadf42923b523771e07df"
+dependencies = [
+ "http 1.2.0",
+ "serde",
+ "serde_html_form",
+ "serde_json",
+ "thiserror",
+ "trait-variant",
+]
+
+[[package]]
+name = "autocfg"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26"
+
+[[package]]
+name = "backtrace"
+version = "0.3.74"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8d82cb332cdfaed17ae235a638438ac4d4839913cc2af585c3c6746e8f8bee1a"
+dependencies = [
+ "addr2line",
+ "cfg-if",
+ "libc",
+ "miniz_oxide",
+ "object",
+ "rustc-demangle",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "base-x"
+version = "0.2.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cbbc9d0964165b47557570cce6c952866c2678457aca742aafc9fb771d30270"
+
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
+[[package]]
+name = "base64"
+version = "0.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ea22880d78093b0cbe17c89f64a7d457941e65759157ec6cb31a31d652b05e5"
+
+[[package]]
+name = "base64"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89e25b6adfb930f02d1981565a6e5d9c547ac15a96606256d3b59040e5cd4ca3"
+
+[[package]]
+name = "basic-toml"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba62675e8242a4c4e806d12f11d136e626e6c8361d6b829310732241652a178a"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "bitflags"
+version = "2.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "bon"
+version = "3.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65268237be94042665b92034f979c42d431d2fd998b49809543afe3e66abad1c"
+dependencies = [
+ "bon-macros",
+ "rustversion",
+]
+
+[[package]]
+name = "bon-macros"
+version = "3.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "803c95b2ecf650eb10b5f87dda6b9f6a1b758cee53245e2b7b825c9b3803a443"
+dependencies = [
+ "darling",
+ "ident_case",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "rustversion",
+ "syn",
+]
+
+[[package]]
+name = "brotli"
+version = "7.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc97b8f16f944bba54f0433f07e30be199b6dc2bd25937444bbad560bcea29bd"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+ "brotli-decompressor",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "4.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74fa05ad7d803d413eb8380983b092cbbaf9a85f151b871360e7b00cd7060b37"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+
+[[package]]
+name = "bytestring"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e465647ae23b2823b0753f50decb2d5a86d2bb2cac04788fafd1f80e45378e5f"
+dependencies = [
+ "bytes",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be714c154be609ec7f5dad223a33bf1482fff90472de28f7362806e6d4832b8c"
+dependencies = [
+ "jobserver",
+ "libc",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
+
+[[package]]
+name = "chrono"
+version = "0.4.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a7964611d71df112cb1730f2ee67324fcf4d0fc6606acbbe9bfe06df124637c"
+dependencies = [
+ "android-tzdata",
+ "iana-time-zone",
+ "js-sys",
+ "num-traits",
+ "serde",
+ "wasm-bindgen",
+ "windows-link",
+]
+
+[[package]]
+name = "cid"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3147d8272e8fa0ccd29ce51194dd98f79ddfb8191ba9e3409884e751798acf3a"
+dependencies = [
+ "core2",
+ "multibase",
+ "multihash",
+ "serde",
+ "serde_bytes",
+ "unsigned-varint",
+]
+
+[[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common",
+ "inout",
+]
+
+[[package]]
+name = "colorchoice"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990"
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "convert_case"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6245d59a3e82a7fc217c5828a6692dbc6dfb63a0c8c90495621f7b9d79704a0e"
+
+[[package]]
+name = "cookie"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e859cd57d0710d9e06c381b550c06e76992472a8c6d527aecd2fc673dcc231fb"
+dependencies = [
+ "aes-gcm",
+ "base64 0.20.0",
+ "hkdf",
+ "hmac",
+ "percent-encoding",
+ "rand 0.8.5",
+ "sha2",
+ "subtle",
+ "time",
+ "version_check",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core2"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b49ba7ef1ad6107f8824dbe97de947cbaac53c44e7f9756a1fba0d37c1eec505"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a97769d94ddab943e4510d138150169a2758b5ef3eb191a9ee688de3e23ef7b3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06ba6d68e24814cb8de6bb986db8222d3a027d15872cabc0d18817bc3c0e4471"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-epoch"
+version = "0.9.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "typenum",
+]
+
+[[package]]
+name = "ctr"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0369ee1ad671834580515889b80f2ea915f23b8be8d0daa4bbaf2ac5c7590835"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "darling"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dashmap"
+version = "6.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5041cc499144891f3790297212f32a74fb938e5136a14943f338ef9e0ae276cf"
+dependencies = [
+ "cfg-if",
+ "crossbeam-utils",
+ "hashbrown 0.14.5",
+ "lock_api",
+ "once_cell",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "575f75dfd25738df5b91b8e43e14d44bda14637a58fae779fd2b064f8bf3e010"
+
+[[package]]
+name = "data-encoding-macro"
+version = "0.1.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f9724adfcf41f45bf652b3995837669d73c4d49a1b5ac1ff82905ac7d9b5558"
+dependencies = [
+ "data-encoding",
+ "data-encoding-macro-internal",
+]
+
+[[package]]
+name = "data-encoding-macro-internal"
+version = "0.1.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18e4fdb82bd54a12e42fb58a800dcae6b9e13982238ce2296dc3570b92148e1f"
+dependencies = [
+ "data-encoding",
+ "syn",
+]
+
+[[package]]
+name = "der"
+version = "0.7.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f55bf8e7b65898637379c1b74eb1551107c8294ed26d855ceb9fd1a09cfc9bc0"
+dependencies = [
+ "const-oid",
+ "zeroize",
+]
+
+[[package]]
+name = "deranged"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b42b6fa04a440b495c8b04d0e71b707c585f83cb9cb28cf8cd0d976c315e31b4"
+dependencies = [
+ "powerfmt",
+]
+
+[[package]]
+name = "derive_builder"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "507dfb09ea8b7fa618fcf76e953f4f5e192547945816d5358edffe39f6f94947"
+dependencies = [
+ "derive_builder_macro",
+]
+
+[[package]]
+name = "derive_builder_core"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d5bcf7b024d6835cfb3d473887cd966994907effbe9227e8c8219824d06c4e8"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "derive_builder_macro"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab63b0e2bf4d5928aff72e83a7dace85d7bba5fe12dcc3c5a572d78caffd3f3c"
+dependencies = [
+ "derive_builder_core",
+ "syn",
+]
+
+[[package]]
+name = "derive_more"
+version = "0.99.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3da29a38df43d6f156149c9b43ded5e018ddff2a855cf2cfd62e8cd7d079c69f"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn",
+]
+
+[[package]]
+name = "derive_more"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a9b99b9cbbe49445b21764dc0625032a89b145a2642e67603e1c936f5458d05"
+dependencies = [
+ "derive_more-impl 1.0.0",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "093242cf7570c207c83073cf82f79706fe7b8317e98620a47d5be7c3d8497678"
+dependencies = [
+ "derive_more-impl 2.0.1",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7330aeadfbe296029522e6c40f315320aba36fc43a5b3632f3795348f3bd22"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "unicode-xid",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bda628edc44c4bb645fbe0f758797143e4e07926f7ebf4e9bdfbd3d2ce621df3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "unicode-xid",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "const-oid",
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dotenv"
+version = "0.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77c90badedccf4105eca100756a0b1289e191f6fcbdadd3cee1d2f614f97da8f"
+
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "der",
+ "digest",
+ "elliptic-curve",
+ "rfc6979",
+ "signature",
+]
+
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "digest",
+ "ff",
+ "generic-array",
+ "group",
+ "rand_core 0.6.4",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "encoding_rs"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "enum-as-inner"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "env_filter"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "186e05a59d4c50738528153b83b0b0194d3a29507dfec16eccd4b342903397d0"
+dependencies = [
+ "log",
+ "regex",
+]
+
+[[package]]
+name = "env_logger"
+version = "0.11.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3716d7a920fb4fac5d84e9d4bce8ceb321e9414b4409da61b07b75c1e3d0697"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "env_filter",
+ "jiff",
+ "log",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33d852cb9b869c2a9b3df2f71a3074817f01e1844f839a144f5fcef059a4eb5d"
+dependencies = [
+ "libc",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "event-listener"
+version = "5.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3492acde4c3fc54c845eaab3eed8bd00c7a7d881f78bfc801e43a93dec1331ae"
+dependencies = [
+ "concurrent-queue",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "event-listener-strategy"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c3e4e0dd3673c1139bf041f3008816d9cf2946bbfac2945c09e523b8d7b05b2"
+dependencies = [
+ "event-listener",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "fallible-iterator"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"
+
+[[package]]
+name = "fallible-streaming-iterator"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7360491ce676a36bf9bb3c56c1aa791658183a54d2744120f27285738d90465a"
+
+[[package]]
+name = "fastrand"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
+
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core 0.6.4",
+ "subtle",
+]
+
+[[package]]
+name = "flate2"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11faaf5a5236997af9848be0bef4db95824b1d534ebc64d0f0c6cf3e67bd38dc"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "flume"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da0e4dd2a88388a1f4ccc7c9ce104604dab68d9f408dc34cd45823d5a9069095"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "nanorand",
+ "spin",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0d2fde1f7b3d48b8395d5f2de76c18a528bd6a9cdde438df747bfcba3e05d6f"
+
+[[package]]
+name = "foreign-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1"
+dependencies = [
+ "foreign-types-shared",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-core",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
+name = "generator"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc6bd114ceda131d3b1d665eba35788690ad37f5916457286b32ab6fd3c438dd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "log",
+ "rustversion",
+ "windows 0.58.0",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+ "zeroize",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4567c8db10ae91089c99af84c68c38da3ec2f087c3f82960bcdbf3656b6f4d7"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi 0.11.0+wasi-snapshot-preview1",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43a49c392881ce6d5c3b8cb70f98717b7c07aabbdff06687b9030dbfbe2725f8"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi 0.13.3+wasi-0.2.2",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "ghash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0d8a4362ccb29cb0b265253fb0a2728f592895ee6854fd9bc13f2ffda266ff1"
+dependencies = [
+ "opaque-debug",
+ "polyval",
+]
+
+[[package]]
+name = "gimli"
+version = "0.31.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
+
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff",
+ "rand_core 0.6.4",
+ "subtle",
+]
+
+[[package]]
+name = "h2"
+version = "0.3.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "81fe527a889e1532da5c525686d96d4c2e74cdd345badf8dfef9f6b39dd5f5e8"
+dependencies = [
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "futures-util",
+ "http 0.2.12",
+ "indexmap",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3c0b69cfcb4e1b9f1bf2f53f95f766e4661169728ec61cd3fe5a0166f2d1386"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http 1.2.0",
+ "indexmap",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+
+[[package]]
+name = "hashbrown"
+version = "0.15.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash",
+]
+
+[[package]]
+name = "hashlink"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7382cf6263419f2d8df38c55d7da83da5c18aef87fc7a7fc1fb1e344edfe14c1"
+dependencies = [
+ "hashbrown 0.15.2",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hickory-proto"
+version = "0.24.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92652067c9ce6f66ce53cc38d1169daa36e6e7eb7dd3b63b5103bd9d97117248"
+dependencies = [
+ "async-trait",
+ "cfg-if",
+ "data-encoding",
+ "enum-as-inner",
+ "futures-channel",
+ "futures-io",
+ "futures-util",
+ "idna",
+ "ipnet",
+ "once_cell",
+ "rand 0.8.5",
+ "thiserror",
+ "tinyvec",
+ "tokio",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "hickory-resolver"
+version = "0.24.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cbb117a1ca520e111743ab2f6688eddee69db4e0ea242545a604dce8a66fd22e"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "hickory-proto",
+ "ipconfig",
+ "lru-cache",
+ "once_cell",
+ "parking_lot",
+ "rand 0.8.5",
+ "resolv-conf",
+ "smallvec",
+ "thiserror",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "hkdf"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+dependencies = [
+ "hmac",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest",
+]
+
+[[package]]
+name = "hostname"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9c7c7c8ac16c798734b8a24560c1362120597c40d5e1459f09498f8f6c8f2ba"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "windows 0.52.0",
+]
+
+[[package]]
+name = "http"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "601cbb57e577e2f5ef5be8e7b83f0f63994f25aa94d673e54a92d5c516d101f1"
+dependencies = [
+ "bytes",
+ "fnv",
+ "itoa",
+]
+
+[[package]]
+name = "http"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f16ca2af56261c99fba8bac40a10251ce8188205a4c448fbb745a2e4daa76fea"
+dependencies = [
+ "bytes",
+ "fnv",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http 1.2.0",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "793429d76616a256bcb62c2a2ec2bed781c8307e797e2598c50010f2bee2544f"
+dependencies = [
+ "bytes",
+ "futures-util",
+ "http 1.2.0",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "http-range"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21dec9db110f5f872ed9699c3ecf50cf16f423502706ba5c72462e28d3157573"
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hyper"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc2b571658e38e0c01b1fdca3bbbe93c00d3d71693ff2770043f8c29bc7d6f80"
+dependencies = [
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "h2 0.4.12",
+ "http 1.2.0",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
+dependencies = [
+ "http 1.2.0",
+ "hyper",
+ "hyper-util",
+ "rustls 0.23.28",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls 0.26.2",
+ "tower-service",
+]
+
+[[package]]
+name = "hyper-tls"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70206fc6890eaca9fde8a0bf71caa2ddfc9fe045ac9e5c70df101a7dbde866e0"
+dependencies = [
+ "bytes",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "native-tls",
+ "tokio",
+ "tokio-native-tls",
+ "tower-service",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df2dcfbe0677734ab2f3ffa7fa7bfd4706bfdc1ef393f2ee30184aed67e631b4"
+dependencies = [
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http 1.2.0",
+ "http-body",
+ "hyper",
+ "pin-project-lite",
+ "socket2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.61"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "235e081f3925a06703c2d0117ea8b91f042756fd6e7a6e5d901e8ca1a996b220"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "wasm-bindgen",
+ "windows-core 0.52.0",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "icu_collections"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db2fa452206ebee18c4b5c2274dbf1de17008e874b4dc4f0aea9d01ca79e4526"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locid"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13acbb8371917fc971be86fc8057c41a64b521c184808a698c02acc242dbf637"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locid_transform"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "01d11ac35de8e40fdeda00d9e1e9d92525f3f9d887cdd7aa81d727596788b54e"
+dependencies = [
+ "displaydoc",
+ "icu_locid",
+ "icu_locid_transform_data",
+ "icu_provider",
+ "tinystr",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locid_transform_data"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdc8ff3388f852bede6b579ad4e978ab004f139284d7b28715f773507b946f6e"
+
+[[package]]
+name = "icu_normalizer"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19ce3e0da2ec68599d193c93d088142efd7f9c5d6fc9b803774855747dc6a84f"
+dependencies = [
+ "displaydoc",
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "utf16_iter",
+ "utf8_iter",
+ "write16",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8cafbf7aa791e9b22bec55a167906f9e1215fd475cd22adfcf660e03e989516"
+
+[[package]]
+name = "icu_properties"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93d6020766cfc6302c15dbbc9c8778c37e62c14427cb7f6e601d849e092aeef5"
+dependencies = [
+ "displaydoc",
+ "icu_collections",
+ "icu_locid_transform",
+ "icu_properties_data",
+ "icu_provider",
+ "tinystr",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67a8effbc3dd3e4ba1afa8ad918d5684b8868b3b26500753effea8d2eed19569"
+
+[[package]]
+name = "icu_provider"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ed421c8a8ef78d3e2dbc98a973be2f3770cb42b606e3ab18d6237c4dfde68d9"
+dependencies = [
+ "displaydoc",
+ "icu_locid",
+ "icu_provider_macros",
+ "stable_deref_trait",
+ "tinystr",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_provider_macros"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "daca1df1c957320b2cf139ac61e7bd64fed304c5040df000a745aa1de3b4ef71"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "impl-more"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8a5a9a0ff0086c7a148acb942baaabeadf9504d10400b5a05645853729b9cd2"
+
+[[package]]
+name = "indexmap"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c9c992b02b5b4c94ea26e32fe5bccb7aa7d9f390ab5c1221ff895bc7ea8b652"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.15.2",
+]
+
+[[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "ipconfig"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f"
+dependencies = [
+ "socket2",
+ "widestring",
+ "windows-sys 0.48.0",
+ "winreg",
+]
+
+[[package]]
+name = "ipld-core"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "104718b1cc124d92a6d01ca9c9258a7df311405debb3408c445a36452f9bf8db"
+dependencies = [
+ "cid",
+ "serde",
+ "serde_bytes",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
+
+[[package]]
+name = "itoa"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
+
+[[package]]
+name = "jiff"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c102670231191d07d37a35af3eb77f1f0dbf7a71be51a962dcd57ea607be7260"
+dependencies = [
+ "jiff-static",
+ "log",
+ "portable-atomic",
+ "portable-atomic-util",
+ "serde",
+]
+
+[[package]]
+name = "jiff-static"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cdde31a9d349f1b1f51a0b3714a5940ac022976f4b49485fc04be052b183b4c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "jobserver"
+version = "0.1.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48d1dbcbbeb6a7fec7e059840aa538bd62aaccf972c7346c4d9d2059312853d0"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "jose-b64"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bec69375368709666b21c76965ce67549f2d2db7605f1f8707d17c9656801b56"
+dependencies = [
+ "base64ct",
+ "serde",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "jose-jwa"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ab78e053fe886a351d67cf0d194c000f9d0dcb92906eb34d853d7e758a4b3a7"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "jose-jwk"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "280fa263807fe0782ecb6f2baadc28dffc04e00558a58e33bfdb801d11fd58e7"
+dependencies = [
+ "jose-b64",
+ "jose-jwa",
+ "p256",
+ "serde",
+ "zeroize",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.77"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "langtag"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed60c85f254d6ae8450cec15eedd921efbc4d1bdf6fcf6202b9a58b403f6f805"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "language-tags"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4345964bb142484797b161f473a503a434de77149dd8c7427788c6e13379388"
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.170"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "875b3680cb2f8f71bdcf9a30f38d48282f5d3c95cbf9b3fa57269bb5d5c06828"
+
+[[package]]
+name = "libsqlite3-sys"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8935b44e7c13394a179a438e0cebba0fe08fe01b54f152e29a93b5cf993fd4"
+dependencies = [
+ "cc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "linked-hash-map"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0717cef1bc8b636c6e1c1bbdefc09e6322da8a9321966e8928ef80d20f7f770f"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db9c683daf087dc577b7506e9695b3d556a9f3849903fa28186283afd6809e9"
+
+[[package]]
+name = "litemap"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23fb14cb19457329c82206317a5663005a4d404783dc74f4252769b0d5f42856"
+
+[[package]]
+name = "local-channel"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6cbc85e69b8df4b8bb8b89ec634e7189099cea8927a276b7384ce5488e53ec8"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "local-waker",
+]
+
+[[package]]
+name = "local-waker"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4d873d7c67ce09b42110d801813efbc9364414e356be9935700d368351657487"
+
+[[package]]
+name = "lock_api"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07af8b9cdd281b7915f413fa73f29ebd5d55d0d3f0155584dade1ff18cea1b17"
+dependencies = [
+ "autocfg",
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94"
+
+[[package]]
+name = "loom"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca"
+dependencies = [
+ "cfg-if",
+ "generator",
+ "scoped-tls",
+ "tracing",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "lru"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "234cf4f4a04dc1f57e24b96cc0cd600cf2af460d4161ac5ecdd0af8e1f3b2a38"
+dependencies = [
+ "hashbrown 0.15.2",
+]
+
+[[package]]
+name = "lru-cache"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "31e24f1ad8321ca0e8a1e0ac13f23cb668e6f5466c2c57319f6a5cf1cc8e3b1c"
+dependencies = [
+ "linked-hash-map",
+]
+
+[[package]]
+name = "matchers"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8263075bb86c5a1b1427b5ae862e8889656f126e9f77c484496e8b47cf5c5558"
+dependencies = [
+ "regex-automata 0.1.10",
+]
+
+[[package]]
+name = "memchr"
+version = "2.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3"
+
+[[package]]
+name = "metrics"
+version = "0.24.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a7deb012b3b2767169ff203fadb4c6b0b82b947512e5eb9e0b78c2e186ad9e3"
+dependencies = [
+ "ahash",
+ "portable-atomic",
+]
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "mime_guess"
+version = "2.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f7c44f8e672c00fe5308fa235f821cb4198414e1c77935c1ab6948d3fd78550e"
+dependencies = [
+ "mime",
+ "unicase",
+]
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e3e04debbb59698c15bacbb6d93584a8c0ca9cc3213cb423d31f760d8843ce5"
+dependencies = [
+ "adler2",
+]
+
+[[package]]
+name = "mio"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2886843bf800fba2e3377cff24abf6379b4c4d5c6681eaf9ea5b0d15090450bd"
+dependencies = [
+ "libc",
+ "log",
+ "wasi 0.11.0+wasi-snapshot-preview1",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "moka"
+version = "0.12.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9321642ca94a4282428e6ea4af8cc2ca4eac48ac7a6a4ea8f33f76d0ce70926"
+dependencies = [
+ "async-lock",
+ "crossbeam-channel",
+ "crossbeam-epoch",
+ "crossbeam-utils",
+ "event-listener",
+ "futures-util",
+ "loom",
+ "parking_lot",
+ "portable-atomic",
+ "rustc_version",
+ "smallvec",
+ "tagptr",
+ "thiserror",
+ "uuid",
+]
+
+[[package]]
+name = "multibase"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b3539ec3c1f04ac9748a260728e855f261b4977f5c3406612c884564f329404"
+dependencies = [
+ "base-x",
+ "data-encoding",
+ "data-encoding-macro",
+]
+
+[[package]]
+name = "multihash"
+version = "0.19.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b430e7953c29dd6a09afc29ff0bb69c6e306329ee6794700aee27b76a1aea8d"
+dependencies = [
+ "core2",
+ "serde",
+ "unsigned-varint",
+]
+
+[[package]]
+name = "nanorand"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a51313c5820b0b02bd422f4b44776fbf47961755c74ce64afc73bfad10226c3"
+dependencies = [
+ "getrandom 0.2.15",
+]
+
+[[package]]
+name = "nate-status"
+version = "0.1.0"
+dependencies = [
+ "actix-files",
+ "actix-multipart",
+ "actix-session",
+ "actix-web",
+ "anyhow",
+ "askama",
+ "async-sqlite",
+ "async-trait",
+ "atrium-api",
+ "atrium-common",
+ "atrium-identity",
+ "atrium-oauth",
+ "chrono",
+ "dotenv",
+ "env_logger",
+ "futures-util",
+ "hex",
+ "hickory-resolver",
+ "hmac",
+ "log",
+ "once_cell",
+ "rand 0.8.5",
+ "reqwest",
+ "rocketman",
+ "serde",
+ "serde_json",
+ "sha2",
+ "thiserror",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "native-tls"
+version = "0.2.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87de3442987e9dbec73158d5c715e7ad9072fda936bb03d19d7fa10e00520f0e"
+dependencies = [
+ "libc",
+ "log",
+ "openssl",
+ "openssl-probe",
+ "openssl-sys",
+ "schannel",
+ "security-framework",
+ "security-framework-sys",
+ "tempfile",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.46.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77a8165726e8236064dbb45459242600304b42a5ea24ee2948e18e023bf7ba84"
+dependencies = [
+ "overload",
+ "winapi",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "object"
+version = "0.36.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "945462a4b81e43c4e3ba96bd7b49d834c6f61198356aa858733bc4acf3cbe62e"
+
+[[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
+[[package]]
+name = "openssl"
+version = "0.10.71"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e14130c6a98cd258fdcb0fb6d744152343ff729cbfcb28c656a9d12b999fbcd"
+dependencies = [
+ "bitflags",
+ "cfg-if",
+ "foreign-types",
+ "libc",
+ "once_cell",
+ "openssl-macros",
+ "openssl-sys",
+]
+
+[[package]]
+name = "openssl-macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "openssl-probe"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e"
+
+[[package]]
+name = "openssl-sys"
+version = "0.9.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8bb61ea9811cc39e3c2069f40b8b8e2e70d8569b361f879786cc7ed48b777cdd"
+dependencies = [
+ "cc",
+ "libc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "overload"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b15813163c1d831bf4a13c3610c05c0d03b39feb07f7e09fa234dac9b15aaf39"
+
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1bf18183cf54e8d6059647fc3063646a1801cf30896933ec2311622cc4b9a27"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e401f977ab385c9e4e3ab30627d6f26d00e2c73eef317493c4ec6d468726cf8"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "parse-size"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "487f2ccd1e17ce8c1bfab3a65c89525af41cfad4c8659021a1e9a2aacd73b89b"
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "pkg-config"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c"
+
+[[package]]
+name = "polyval"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "350e9b48cbc6b0e028b0473b114454c6316e57336ee184ceab6e53f72c178b3e"
+
+[[package]]
+name = "portable-atomic-util"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8a2f0d8d040d7848a709caf78912debcc3f33ee4b3cac47d73d1e1069e83507"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77957b295656769bb8ad2b6a6b09d897d94f05c41b069aede1fcdaa675eaea04"
+dependencies = [
+ "zerocopy 0.7.35",
+]
+
+[[package]]
+name = "prettyplease"
+version = "0.2.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5316f57387668042f561aae71480de936257848f9c43ce528e311d89a07cadeb"
+dependencies = [
+ "proc-macro2",
+ "syn",
+]
+
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.94"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a31971752e70b8b2686d7e46ec17fb38dad4051d94024c88df49b667caea9c84"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.39"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1f1914ce909e1658d9907913b4b91947430c7d9be598b15a1912935b8c04801"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3779b94aeb87e8bd4e834cee3650289ee9e0d5677f976ecdb6d219e5f4f6cd94"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.3",
+ "zerocopy 0.8.24",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.3",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.15",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38"
+dependencies = [
+ "getrandom 0.3.1",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b8c0c260b63a8219631167be35e6a988e9554dbd323f8bd08439c8ed1302bd1"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "regex"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata 0.4.9",
+ "regex-syntax 0.8.5",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c230d73fb8d8c1b9c0b3135c5142a8acee3a0558fb8db5cf1cb65f8d7862132"
+dependencies = [
+ "regex-syntax 0.6.29",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax 0.8.5",
+]
+
+[[package]]
+name = "regex-lite"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53a49587ad06b26609c52e423de037e7f57f20d53535d66e08c695f347df952a"
+
+[[package]]
+name = "regex-syntax"
+version = "0.6.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f162c6dd7b008981e4d40210aca20b4bd0f9b60ca9271061b07f78537722f2e1"
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
+
+[[package]]
+name = "reqwest"
+version = "0.12.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43e734407157c3c2034e0258f5e4473ddb361b1e85f95a66690d67264d7cd1da"
+dependencies = [
+ "async-compression",
+ "base64 0.22.1",
+ "bytes",
+ "encoding_rs",
+ "futures-core",
+ "futures-util",
+ "h2 0.4.12",
+ "http 1.2.0",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-tls",
+ "hyper-util",
+ "ipnet",
+ "js-sys",
+ "log",
+ "mime",
+ "native-tls",
+ "once_cell",
+ "percent-encoding",
+ "pin-project-lite",
+ "rustls-pemfile 2.2.0",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "system-configuration",
+ "tokio",
+ "tokio-native-tls",
+ "tokio-util",
+ "tower",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows-registry",
+]
+
+[[package]]
+name = "resolv-conf"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48375394603e3dd4b2d64371f7148fd8c7baa2680e28741f2cb8d23b59e3d4c4"
+dependencies = [
+ "hostname",
+]
+
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac",
+ "subtle",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.15",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rocketman"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a3aae946adbfdcf80cad8793e02d8eb94be06c925331aa56aeb446795893361"
+dependencies = [
+ "anyhow",
+ "async-trait",
+ "bon",
+ "derive_builder",
+ "flume",
+ "futures-util",
+ "metrics",
+ "rand 0.8.5",
+ "serde",
+ "serde_json",
+ "tokio",
+ "tokio-tungstenite",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+ "zstd",
+]
+
+[[package]]
+name = "rusqlite"
+version = "0.33.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c6d5e5acb6f6129fe3f7ba0a7fc77bca1942cb568535e18e7bc40262baf3110"
+dependencies = [
+ "bitflags",
+ "fallible-iterator",
+ "fallible-streaming-iterator",
+ "hashlink",
+ "libsqlite3-sys",
+ "smallvec",
+]
+
+[[package]]
+name = "rustc-demangle"
+version = "0.1.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "719b953e2095829ee67db738b3bfa9fa368c94900df327b3f07fe6e794d2fe1f"
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustix"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dade4812df5c384711475be5fcd8c162555352945401aed22a35bffeab61f657"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustls"
+version = "0.21.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f56a14d1f48b391359b22f731fd4bd7e43c97f3c50eee276f3aa09c94784d3e"
+dependencies = [
+ "log",
+ "ring",
+ "rustls-webpki 0.101.7",
+ "sct",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7160e3e10bf4535308537f3c4e1641468cd0e485175d6163087c0393c7d46643"
+dependencies = [
+ "once_cell",
+ "rustls-pki-types",
+ "rustls-webpki 0.103.3",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9aace74cb666635c918e9c12bc0d348266037aa8eb599b5cba565709a8dff00"
+dependencies = [
+ "openssl-probe",
+ "rustls-pemfile 1.0.4",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pemfile"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c74cae0a4cf6ccbbf5f359f08efdf8ee7e1dc532573bf0db71968cb56b1448c"
+dependencies = [
+ "base64 0.21.7",
+]
+
+[[package]]
+name = "rustls-pemfile"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "917ce264624a4b4db1c364dcc35bfca9ded014d0a958cd47ad3e960e988ea51c"
+
+[[package]]
+name = "rustls-webpki"
+version = "0.101.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b6275d1ee7a1cd780b64aca7726599a1dbc893b1e64144529e55c3c2f745765"
+dependencies = [
+ "ring",
+ "untrusted",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4a72fe2bcf7a6ac6fd7d0b9e5cb68aeb7d4c0a0271730218b3e92d43b4eb435"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eded382c5f5f786b989652c49544c4877d9f015cc22e145a5ea8ea66c2921cd2"
+
+[[package]]
+name = "ryu"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f"
+
+[[package]]
+name = "schannel"
+version = "0.1.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f29ebaa345f945cec9fbbc532eb307f0fdad8161f281b6369539c8d84876b3d"
+dependencies = [
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "sct"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da046153aa2352493d6cb7da4b6e5c0c057d8a1d0a9aa8560baffdd945acd414"
+dependencies = [
+ "ring",
+ "untrusted",
+]
+
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct",
+ "der",
+ "generic-array",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "security-framework"
+version = "2.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "897b2245f0b511c87893af39b033e5ca9cce68824c4d7e7630b5a1d339658d02"
+dependencies = [
+ "bitflags",
+ "core-foundation",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49db231d56a190491cb4aeda9527f1ad45345af50b0851622a7adb8c03b01c32"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56e6fa9c48d24d85fb3de5ad847117517440f6beceb7798af16b4a87d616b8d0"
+
+[[package]]
+name = "serde"
+version = "1.0.219"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "364fec0df39c49a083c9a8a18a23a6bcfd9af130fe9fe321d18520a0d113e09e"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.219"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_html_form"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d2de91cf02bbc07cde38891769ccd5d4f073d22a40683aa4bc7a95781aaa2c4"
+dependencies = [
+ "form_urlencoded",
+ "indexmap",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.140"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373"
+dependencies = [
+ "itoa",
+ "memchr",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_plain"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ce1fc6db65a611022b23a0dec6975d63fb80a302cb3388835ff02c097258d50"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9e9e0b4211b72e7b8b6e85c807d36c212bdb33ea8587f7569562a84df5465b1"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "digest",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f92a496fb766b417c996b9c5e57daf2f7ad3b0bebe1ccfca4856390e3d3bb67"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "smallvec"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7fcf8323ef1faaee30a44a340193b1ac6814fd9b7b4e88e9d4519a3e4abe1cfd"
+
+[[package]]
+name = "socket2"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c970269d99b64e60ec3bd6ad27270092a5394c4e309314b18ae3fe575695fbe8"
+dependencies = [
+ "libc",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "2.0.99"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e02e925281e18ffd9d640e234264753c43edc62d64b2d4cf898f1bc5e75f3fc2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "system-configuration"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c879d448e9d986b661742763247d3693ed13609438cf3d006f51f5368a5ba6b"
+dependencies = [
+ "bitflags",
+ "core-foundation",
+ "system-configuration-sys",
+]
+
+[[package]]
+name = "system-configuration-sys"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "tagptr"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417"
+
+[[package]]
+name = "tempfile"
+version = "3.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c317e0a526ee6120d8dabad239c8dadca62b24b6f168914bbbc8e2fb1f0e567"
+dependencies = [
+ "cfg-if",
+ "fastrand",
+ "getrandom 0.3.1",
+ "once_cell",
+ "rustix",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b9ef9bad013ada3808854ceac7b46812a6465ba368859a37e2100283d2d719c"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+]
+
+[[package]]
+name = "time"
+version = "0.3.39"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dad298b01a40a23aac4580b67e3dbedb7cc8402f3592d7f49469de2ea4aecdd8"
+dependencies = [
+ "deranged",
+ "itoa",
+ "num-conv",
+ "powerfmt",
+ "serde",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "765c97a5b985b7c11d7bc27fa927dc4fe6af3a6dfb021d28deb60d3bf51e76ef"
+
+[[package]]
+name = "time-macros"
+version = "0.2.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8093bc3e81c3bc5f7879de09619d06c9a5a5e45ca44dfeeb7225bae38005c5c"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9117f5d4db391c1cf6927e7bea3db74b9a1c1add8f7eda9ffd5364f40f57b82f"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09b3661f17e86524eccd4371ab0429194e0d7c008abb45f7a7495b1719463c71"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.44.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f382da615b842244d4b8738c82ed1275e6c5dd90c459a30941cd07080b06c91a"
+dependencies = [
+ "backtrace",
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio-native-tls"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbae76ab933c85776efabc971569dd6119c580d8f5d448769dec1764bf796ef2"
+dependencies = [
+ "native-tls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.24.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c28327cf380ac148141087fbfb9de9d7bd4e84ab5d2c28fbc911d753de8a7081"
+dependencies = [
+ "rustls 0.21.12",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e727b36a1a0e8b74c376ac2211e40c2c8af09fb4013c60d910495810f008e9b"
+dependencies = [
+ "rustls 0.23.28",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "212d5dcb2a1ce06d81107c3d0ffa3121fe974b73f068c8282cb1c32328113b6c"
+dependencies = [
+ "futures-util",
+ "log",
+ "rustls 0.21.12",
+ "rustls-native-certs",
+ "tokio",
+ "tokio-rustls 0.24.1",
+ "tungstenite",
+ "webpki-roots",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b9590b93e6fcc1739458317cccd391ad3955e2bde8913edf6f95f9e65a8f034"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tower"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.41"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "784e0ac535deb450455cbfa28a6f0df145ea1bb7ae51b821cf5e7927fdcfbdd0"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "395ae124c09f9e6918a2310af6038fba074bcf474ac352496d5910dd59a2226d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e672c95779cf947c5311f83787af4fa8fffd12fb27e4993211a84bdfd9610f9c"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8189decb5ac0fa7bc8b96b7cb9b2701d60d48805aca84a238004d665fcc4008"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "trait-variant"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70977707304198400eb4835a78f6a9f928bf41bba420deb8fdb175cd965d77a7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "tungstenite"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e3dac10fd62eaf6617d3a904ae222845979aec67c615d1c842b4002c7666fb9"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http 0.2.12",
+ "httparse",
+ "log",
+ "rand 0.8.5",
+ "rustls 0.21.12",
+ "sha1",
+ "thiserror",
+ "url",
+ "utf-8",
+]
+
+[[package]]
+name = "typenum"
+version = "1.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1dccffe3ce07af9386bfd29e80c0ab1a8205a2fc34e4bcd40364df902cfa8f3f"
+
+[[package]]
+name = "unicase"
+version = "2.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75b844d17643ee918803943289730bec8aac480150456169e647ed0b576ba539"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "unsigned-varint"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb066959b24b5196ae73cb057f45598450d2c5f71460e98c49b738086eff9c06"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf16_iter"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0f540e3240398cce6128b64ba83fdbdd86129c16a3aa1a3a252efd66eb3d587"
+dependencies = [
+ "getrandom 0.3.1",
+]
+
+[[package]]
+name = "v_htmlescape"
+version = "0.15.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e8257fbc510f0a46eb602c10215901938b5c2a7d5e70fc11483b1d3c9b5b18c"
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.0+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
+
+[[package]]
+name = "wasi"
+version = "0.13.3+wasi-0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26816d2e1a4a36a2940b96c5296ce403917633dff8f3440e9b236ed6f6bacad2"
+dependencies = [
+ "wit-bindgen-rt",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+]
+
+[[package]]
+name = "wasm-bindgen-backend"
+version = "0.2.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6"
+dependencies = [
+ "bumpalo",
+ "log",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.50"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-backend",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.77"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "0.25.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f20c57d8d7db6d3b86154206ae5d8fba62dd39573114de97c2cb0578251f8e1"
+
+[[package]]
+name = "widestring"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd7cf3379ca1aac9eea11fba24fd7e315d621f8dfe35c8d7d2be8b793726e07d"
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e48a53791691ab099e5e2ad123536d0fff50652600abaf43bbf952894110d0be"
+dependencies = [
+ "windows-core 0.52.0",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
+dependencies = [
+ "windows-core 0.58.0",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ab640c8d7e35bf8ba19b884ba838ceb4fba93a4e8c65a9059d08afcfc683d9"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-result",
+ "windows-strings",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dccfd733ce2b1753b03b6d3c65edf020262ea35e20ccdf3e288043e6dd620e3"
+
+[[package]]
+name = "windows-registry"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e400001bb720a623c1c69032f8e3e4cf09984deec740f007dd2b03ec864804b0"
+dependencies = [
+ "windows-result",
+ "windows-strings",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10"
+dependencies = [
+ "windows-result",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "winnow"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e97b544156e9bebe1a0ffbc03484fc1ffe3100cbce3ffb17eac35f7cdd7ab36"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.48.0",
+]
+
+[[package]]
+name = "wit-bindgen-rt"
+version = "0.33.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3268f3d866458b787f390cf61f4bbb563b922d091359f9608842999eaee3943c"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "write16"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936"
+
+[[package]]
+name = "writeable"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51"
+
+[[package]]
+name = "yoke"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "120e6aef9aa629e3d4f52dc8cc43a015c7724194c97dfaf45180d2daf2b77f40"
+dependencies = [
+ "serde",
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.7.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b9b4fd18abc82b8136838da5d50bae7bdea537c574d8dc1a34ed098d6c166f0"
+dependencies = [
+ "byteorder",
+ "zerocopy-derive 0.7.35",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2586fea28e186957ef732a5f8b3be2da217d65c5969d4b1e17f973ebbe876879"
+dependencies = [
+ "zerocopy-derive 0.8.24",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.7.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a996a8f63c5c4448cd959ac1bab0aaa3306ccfd060472f85943ee0750f0169be"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa2b893d79df23bfb12d5461018d408ea19dfafe76c2c7ef6d4eba614f8ff079"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zstd"
+version = "0.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a"
+dependencies = [
+ "zstd-safe",
+]
+
+[[package]]
+name = "zstd-safe"
+version = "7.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3051792fbdc2e1e143244dc28c60f73d8470e93f3f9cbd0ead44da5ed802722"
+dependencies = [
+ "zstd-sys",
+]
+
+[[package]]
+name = "zstd-sys"
+version = "2.0.14+zstd.1.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fb060d4926e4ac3a3ad15d864e99ceb5f343c6b34f5bd6d81ae6ed417311be5"
+dependencies = [
+ "cc",
+ "pkg-config",
+]

Cargo.toml

···
+[package]
+name = "nate-status"
+version = "0.1.0"
+edition = "2024"
+# Based on Bailey Townsend's Rusty Statusphere example app
+# https://github.com/fatfingers23/rusty_statusphere_example_app
+
+[dependencies]
+actix-files = "0.6.6"
+actix-session = { version = "0.10", features = ["cookie-session"] }
+actix-web = "4.10.2"
+actix-multipart = "0.6"
+anyhow = "1.0.97"
+askama = "0.13"
+atrium-common = "0.1.1"
+atrium-api = "0.25.0"
+atrium-identity = "0.1.3"
+atrium-oauth = "0.1.0"
+chrono = "0.4.40"
+env_logger = "0.11.7"
+hickory-resolver = "0.24.1"
+log = "0.4.27"
+serde = { version = "1.0.219", features = ["derive"] }
+serde_json = "1.0.140"
+rocketman = "0.2.0"
+tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
+futures-util = "0.3"
+dotenv = "0.15.0"
+thiserror = "1.0.69"
+async-sqlite = "0.5.0"
+async-trait = "0.1.88"
+rand = "0.8"
+reqwest = { version = "0.12", features = ["json"] }
+once_cell = "1.19"
+hmac = "0.12"
+sha2 = "0.10"
+hex = "0.4"
+url = "2.5"
+
+[build-dependencies]
+askama = "0.13"
+
+
+[profile.dev.package.askama_derive]
+opt-level = 3

LICENSE

···
+MIT License
+
+Copyright (c) 2025 Bailey Townsend
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

fly.review.toml

···
+app = "zzstoatzz-status"
+primary_region = "ewr"
+
+[build]
+  dockerfile = "Dockerfile"
+
+[env]
+  SERVER_PORT = "8080"
+  SERVER_HOST = "0.0.0.0"
+  DATABASE_URL = "sqlite:///data/status.db"
+  ENABLE_FIREHOSE = "true"
+  DEV_MODE = "true"
+  # OAUTH_REDIRECT_BASE will be set dynamically by the workflow
+
+[http_service]
+  internal_port = 8080
+  force_https = true
+  auto_stop_machines = true
+  auto_start_machines = true
+  min_machines_running = 1
+  
+  [http_service.concurrency]
+    type = "requests"
+    hard_limit = 250
+    soft_limit = 200
+
+[[mounts]]
+  source = "status_data"
+  destination = "/data"
+
+[[vm]]
+  cpu_kind = "shared"
+  cpus = 1
+  memory_mb = 256

justfile

···
+watch:
+    cargo watch -x run -w src -w templates
+
+dev:
+    SERVER_PORT=3000 cargo watch -x run -w src -w templates
+
+deploy:
+    fly deploy
+
+lint:
+    cargo clippy -- -D warnings
+
+fmt:
+    cargo fmt
+
+clean:
+    cargo clean
+    rm -f status.db
+
+test:
+    cargo test

progress.md

···
+# Status App Progress
+
+## Completed ✅
+
+### Core Functionality
+- Forked from Bailey Townsend's Rusty Statusphere
+- Multi-user support with BlueSky OAuth authentication
+- Custom lexicon: `io.zzstoatzz.status.record` with emoji + optional text
+- Status expiration times (30min to 1 week)
+- Real-time updates via Jetstream firehose
+- Public profiles at status.zzstoatzz.io/@handle
+- Global feed showing all statuses
+- Database persistence on Fly.io
+
+### OAuth Implementation
+- Fixed OAuth callback error handling (missing 'code' field)
+- Reverted to working state with `transition:generic` scope
+- Research complete: No granular permissions available yet in AT Protocol
+- Must use broad permissions until Auth Scopes feature ships
+
+### UI/UX
+- One-time walkthrough for new users (stored in localStorage)
+- Fixed double @ symbol in feed username links
+- Fixed feed ordering (newest first by startedAt)
+- Emoji picker with visual selection
+- Status expiration display with relative times
+
+## Current State 🚧
+- App deployed and functional at status.zzstoatzz.io
+- OAuth works but requires broad permissions (AT Protocol limitation)
+- All core features operational
+
+## Today's Progress (Sept 1, 2025)
+- Forked from Bailey's emoji-only statusphere
+- Created custom lexicon with text + expiration support
+- Added multi-user OAuth authentication
+- Implemented emoji picker with keyword search
+- Fixed mobile responsiveness
+- Added status expiration (30min to 1 week)
+- Set up CI/CD with GitHub Actions
+- Renamed repo to "status"
+- Improved delete UX (removed confusing clear button)
+- Made feed handles visually distinct
+- Updated link previews to be lowercase and include actual status
+- Cleaned up dead code from original fork
+- Posted thread about the launch
+
+## Progress Update (Sept 2, 2025)
+
+### Major Features Added
+- **Custom Emoji Support**: Integrated 1600+ animated emojis from bufo.zone
+  - Scraped and stored in `/static/emojis/`
+  - Searchable in emoji picker
+  - Supports GIF animation
+  - No database needed - served directly from filesystem
+- **Infinite Scrolling**: Global feed now loads forever
+  - Added `/api/feed` endpoint with pagination
+  - Smooth loading with "beginning of time" indicator
+  - Handles large datasets efficiently
+- **Theme Consistency**: Added theme toggle indicator across all pages
+- **Performance Optimization**: Added database indexes on critical columns
+  - `idx_status_startedAt` for feed queries
+  - `idx_status_authorDid_startedAt` for user queries
+
+### Bug Fixes
+- Fixed favicon not loading in production
+- Fixed custom emoji layout issues in picker
+- Fixed theme toggle icons being invisible
+- Removed unused CSS file and public directory
+- Suppressed dead_code warning for auto-generated lexicons
+
+### Code Quality Improvements
+- Created 5 GitHub issues for technical debt:
+  - ✅ #1: Database indexes (COMPLETED)
+  - #2: Excessive unwrap() usage (57 instances)
+  - #3: Duplicated handle resolution code
+  - #4: Hardcoded configuration values
+  - #5: No rate limiting on API endpoints
+- Cleaned up unused `public/css` directory
+- Removed hardcoded OWNER_DID references
+
+## Next Steps 📋
+
+### Immediate
+1. **Persistent Session Storage**: Users currently must re-login each visit
+2. **UI Polish**: Small visual improvements needed
+
+### Location Feature (Proposed)
+- Add optional location to statuses
+- Browser geolocation API integration
+- Privacy controls (location blurring)
+- Future: Integrate with SmokeSignal's location standards
+- Vision: Global map of statuses
+
+### Future Considerations
+- Migrate to granular OAuth scopes when available
+- H3 hexagon location support
+- SmokeSignal event integration
+- Location-based discovery
+
+## Progress Update (Sept 2, 2025 - Evening)
+
+### Testing Infrastructure & Resilience
+- **Test Framework Setup**: Established comprehensive testing with `just test` command
+  - 9 tests covering rate limiting, error handling, and API endpoints
+  - All tests passing
+- **Rate Limiting**: Implemented token bucket algorithm
+  - 30 requests per minute per IP address on `/status` endpoint
+  - Prevents spam and abuse
+  - Closes GitHub issue #5
+- **Error Handling**: Centralized error handling with `AppError` enum
+  - Consistent error responses across the application
+  - Better debugging and user feedback
+
+### Admin Moderation System
+- **Soft Hide Capability**: Added ability to hide inappropriate content
+  - Posts remain in database but excluded from global feed
+  - Admin DID hardcoded: `did:plc:xbtmt2zjwlrfegqvch7fboei` (zzstoatzz.io)
+  - `/admin/hide-status` endpoint for toggling visibility
+  - Hide button in UI visible only to admin
+  - Confirmation dialog before hiding
+
+### UI Improvements
+- **Fixed Emoji Alignment**: Resolved custom emoji sizing issues in status history
+  - Standardized container dimensions (1.5rem x 1.5rem for history items)
+  - Consistent layout regardless of emoji type
+
+### DevOps & CI/CD
+- **Review Apps**: Set up automatic preview deployments for PRs
+  - Uses GitHub Actions with `superfly/fly-pr-review-apps@1.2.1`
+  - Deploys to `pr-<number>-zzstoatzz-status.fly.dev`
+  - Smaller resources for review apps (256MB RAM)
+  - Updated FLY_API_TOKEN to org-level token for app creation
+
+### Code Quality
+- **Refactoring**: Cleaned up parameter passing
+  - Replaced verbose `&dyn rusqlite::ToSql` with `rusqlite::params!` macro
+  - More idiomatic Rust code
+
+## Technical Debt
+- ✅ ~~No rate limiting on API endpoints~~ (RESOLVED with issue #5)
+- OAuth scopes too broad (waiting on AT Protocol)
+- Session persistence needed
+- Location feature architecture planned but not implemented
+- #2: Excessive unwrap() usage (57 instances)
+- #3: Duplicated handle resolution code
+- #4: Hardcoded configuration values
+
+## Resources
+- OAuth research: `/tmp/atproto-oauth-research/`
+- Location proposal: `/tmp/atproto-oauth-research/location_integration_proposal.md`
+- PR #7: Testing, rate limiting, and moderation features

rust-toolchain.toml

···
+[toolchain]
+channel = "stable"
+version = "1.85.1"

scripts/add_custom_emoji.py

···
+#!/usr/bin/env python3
+"""
+Script to add custom emojis to the database
+"""
+import sqlite3
+import sys
+import time
+from pathlib import Path
+
+def add_custom_emoji(db_path, name, filename, alt_text=None, category="custom"):
+    """Add a custom emoji to the database"""
+    conn = sqlite3.connect(db_path)
+    cursor = conn.cursor()
+    
+    # Check if emoji already exists
+    cursor.execute("SELECT COUNT(*) FROM custom_emojis WHERE name = ?", (name,))
+    if cursor.fetchone()[0] > 0:
+        print(f"Emoji '{name}' already exists, skipping...")
+        conn.close()
+        return False
+    
+    # Add the emoji
+    added_at = int(time.time())
+    cursor.execute(
+        "INSERT INTO custom_emojis (name, filename, alt_text, category, addedAt) VALUES (?, ?, ?, ?, ?)",
+        (name, filename, alt_text, category, added_at)
+    )
+    
+    conn.commit()
+    conn.close()
+    print(f"Added emoji '{name}' -> {filename}")
+    return True
+
+def main():
+    # Default database path
+    db_path = "status.db"
+    
+    # Example custom emojis to add
+    emojis = [
+        ("partyparrot", "partyparrot.gif", "Party Parrot", "custom"),
+        ("shipit", "shipit.png", "Ship It Squirrel", "custom"),
+        ("blobheart", "blobheart.png", "Blob Heart", "custom"),
+        ("rustacean", "rustacean.png", "Rust Crab", "custom"),
+        ("dumpsterfire", "dumpsterfire.gif", "Dumpster Fire", "custom"),
+    ]
+    
+    print(f"Adding custom emojis to {db_path}...")
+    
+    for name, filename, alt_text, category in emojis:
+        add_custom_emoji(db_path, name, filename, alt_text, category)
+    
+    print("Done!")
+
+if __name__ == "__main__":
+    main()

scripts/register_emojis.py

···
+#!/usr/bin/env python3
+# /// script
+# requires-python = ">=3.11"
+# dependencies = []
+# ///
+"""
+Register all downloaded emoji images in the database
+"""
+
+import sqlite3
+import time
+from pathlib import Path
+
+
+def main():
+    # Setup paths
+    script_dir = Path(__file__).parent
+    project_root = script_dir.parent
+    emojis_dir = project_root / "static" / "emojis"
+    db_path = project_root / "statusphere.sqlite3"
+    
+    if not db_path.exists():
+        print(f"Error: Database not found at {db_path}")
+        return
+    
+    # Get all image files
+    image_files = []
+    for ext in ['*.png', '*.gif', '*.jpg', '*.jpeg', '*.webp']:
+        image_files.extend(emojis_dir.glob(ext))
+    
+    print(f"Found {len(image_files)} image files")
+    
+    # Connect to database
+    conn = sqlite3.connect(db_path)
+    cursor = conn.cursor()
+    
+    # Check what already exists
+    cursor.execute("SELECT name FROM custom_emojis")
+    existing = {row[0] for row in cursor.fetchall()}
+    print(f"Already registered: {len(existing)} emojis")
+    
+    # Register new emojis
+    added = 0
+    skipped = 0
+    timestamp = int(time.time())
+    
+    for image_path in image_files:
+        filename = image_path.name
+        # Create a short name from filename
+        name = filename.rsplit('.', 1)[0]
+        # Truncate super long names
+        if len(name) > 50:
+            name = name[:47] + "..."
+        
+        if name in existing:
+            skipped += 1
+            continue
+        
+        # Determine mime type
+        ext = filename.rsplit('.', 1)[-1].lower()
+        mime_map = {
+            'png': 'image/png',
+            'gif': 'image/gif',
+            'jpg': 'image/jpeg',
+            'jpeg': 'image/jpeg',
+            'webp': 'image/webp'
+        }
+        mime_type = mime_map.get(ext, 'image/png')
+        
+        # Create alt text from name
+        alt_text = name.replace('-', ' ').replace('_', ' ')
+        
+        cursor.execute(
+            "INSERT INTO custom_emojis (name, filename, alt_text, category, addedAt) VALUES (?, ?, ?, ?, ?)",
+            (name, filename, alt_text, 'bufo', timestamp)
+        )
+        added += 1
+    
+    conn.commit()
+    conn.close()
+    
+    print(f"✓ Added {added} new emojis")
+    if skipped:
+        print(f"  Skipped {skipped} existing emojis")
+    
+    print(f"\nTotal emojis in database now: {len(existing) + added}")
+
+
+if __name__ == "__main__":
+    main()

scripts/scrape_bufo_emojis.py

···
+#!/usr/bin/env python3
+# /// script
+# requires-python = ">=3.11"
+# dependencies = [
+#     "httpx",
+#     "beautifulsoup4",
+#     "rich",
+# ]
+# ///
+"""
+Scrape all custom emoji images from bufo.zone and download them to static/emojis.
+"""
+
+import asyncio
+import re
+from pathlib import Path
+
+import httpx
+from bs4 import BeautifulSoup
+from rich.console import Console
+from rich.progress import Progress, SpinnerColumn, TextColumn
+
+console = Console()
+
+
+async def fetch_emoji_urls() -> set[str]:
+    """Fetch all unique emoji URLs from bufo.zone"""
+    console.print("[cyan]Fetching emoji list from bufo.zone...[/cyan]")
+    
+    async with httpx.AsyncClient() as client:
+        response = await client.get("https://bufo.zone")
+        response.raise_for_status()
+        
+    # Parse HTML
+    soup = BeautifulSoup(response.text, 'html.parser')
+    
+    # Find all image URLs from all-the.bufo.zone
+    urls = set()
+    for img in soup.find_all('img'):
+        src = img.get('src', '')
+        if 'all-the.bufo.zone' in src:
+            urls.add(src)
+    
+    # Also find URLs in inline styles or other attributes
+    pattern = re.compile(r'https://all-the\.bufo\.zone/[^"\'>\s]+\.(png|gif|jpg|jpeg|webp)')
+    for match in pattern.finditer(response.text):
+        urls.add(match.group(0))
+    
+    console.print(f"[green]Found {len(urls)} unique emoji images[/green]")
+    return urls
+
+
+async def download_emoji(client: httpx.AsyncClient, url: str, output_dir: Path) -> str:
+    """Download a single emoji and return filename"""
+    filename = url.split('/')[-1]
+    output_path = output_dir / filename
+    
+    if output_path.exists():
+        return filename
+    
+    response = await client.get(url)
+    response.raise_for_status()
+    
+    output_path.write_bytes(response.content)
+    return filename
+
+
+async def download_all_emojis(urls: set[str], output_dir: Path) -> int:
+    """Download all emojis concurrently with rate limiting"""
+    output_dir.mkdir(parents=True, exist_ok=True)
+    
+    downloaded = 0
+    skipped = 0
+    
+    async with httpx.AsyncClient(timeout=30.0) as client:
+        with Progress(
+            SpinnerColumn(),
+            TextColumn("[progress.description]{task.description}"),
+            console=console,
+        ) as progress:
+            task = progress.add_task(f"[cyan]Downloading {len(urls)} emojis...", total=len(urls))
+            
+            # Download in batches to avoid overwhelming the server
+            batch_size = 10
+            urls_list = list(urls)
+            
+            for i in range(0, len(urls_list), batch_size):
+                batch = urls_list[i:i+batch_size]
+                tasks = [download_emoji(client, url, output_dir) for url in batch]
+                results = await asyncio.gather(*tasks, return_exceptions=True)
+                
+                for url, result in zip(batch, results):
+                    if isinstance(result, Exception):
+                        console.print(f"[red]Error downloading {url}: {result}[/red]")
+                    else:
+                        if (output_dir / result).stat().st_size > 0:
+                            downloaded += 1
+                        else:
+                            skipped += 1
+                
+                progress.update(task, advance=len(batch))
+                
+                # Small delay between batches
+                if i + batch_size < len(urls_list):
+                    await asyncio.sleep(0.5)
+    
+    return downloaded
+
+
+async def main():
+    """Main function"""
+    console.print("[bold cyan]Bufo Emoji Scraper[/bold cyan]\n")
+    
+    # Setup paths
+    script_dir = Path(__file__).parent
+    project_root = script_dir.parent
+    output_dir = project_root / "static" / "emojis"
+    
+    # Fetch emoji URLs
+    urls = await fetch_emoji_urls()
+    
+    if not urls:
+        console.print("[red]No emojis found![/red]")
+        return
+    
+    # Download emojis
+    downloaded = await download_all_emojis(urls, output_dir)
+    
+    console.print(f"\n[bold green]✨ Done! Downloaded {downloaded} images to {output_dir}[/bold green]")
+    
+    # List what we got
+    files = list(output_dir.glob("*"))
+    console.print(f"[cyan]Total files in directory: {len(files)}[/cyan]")
+
+
+if __name__ == "__main__":
+    asyncio.run(main())

src/api/auth.rs

···
+use crate::resolver::HickoryDnsTxtResolver;
+use crate::{
+    config,
+    storage::{SqliteSessionStore, SqliteStateStore},
+    templates::{ErrorTemplate, LoginTemplate},
+};
+use actix_session::Session;
+use actix_web::{
+    HttpRequest, HttpResponse, Responder, Result, get, post,
+    web::{self, Redirect},
+};
+use askama::Template;
+use atrium_api::agent::Agent;
+use atrium_identity::{did::CommonDidResolver, handle::AtprotoHandleResolver};
+use atrium_oauth::{
+    AuthorizeOptions, CallbackParams, DefaultHttpClient, KnownScope, OAuthClient, Scope,
+};
+use serde::{Deserialize, Serialize};
+use std::sync::Arc;
+
+#[derive(Deserialize)]
+pub struct OAuthCallbackParams {
+    pub state: Option<String>,
+    pub iss: Option<String>,
+    pub code: Option<String>,
+    pub error: Option<String>,
+    pub error_description: Option<String>,
+}
+
+pub type OAuthClientType = Arc<
+    OAuthClient<
+        SqliteStateStore,
+        SqliteSessionStore,
+        CommonDidResolver<DefaultHttpClient>,
+        AtprotoHandleResolver<HickoryDnsTxtResolver, DefaultHttpClient>,
+    >,
+>;
+
+/// OAuth client metadata endpoint for production
+#[get("/oauth-client-metadata.json")]
+pub async fn client_metadata(config: web::Data<config::Config>) -> Result<HttpResponse> {
+    let public_url = config.oauth_redirect_base.clone();
+
+    let metadata = serde_json::json!({
+        "client_id": format!("{}/oauth-client-metadata.json", public_url),
+        "client_name": "Status Sphere",
+        "client_uri": public_url.clone(),
+        "redirect_uris": [format!("{}/oauth/callback", public_url)],
+        "scope": "atproto repo:io.zzstoatzz.status.record rpc:app.bsky.actor.getProfile?aud=did:web:api.bsky.app#bsky_appview rpc:app.bsky.graph.getFollows?aud=did:web:api.bsky.app",
+        "grant_types": ["authorization_code", "refresh_token"],
+        "response_types": ["code"],
+        "token_endpoint_auth_method": "none",
+        "dpop_bound_access_tokens": true
+    });
+
+    Ok(HttpResponse::Ok()
+        .content_type("application/json")
+        .body(metadata.to_string()))
+}
+
+/// OAuth callback endpoint to complete session creation
+#[get("/oauth/callback")]
+pub async fn oauth_callback(
+    request: HttpRequest,
+    params: web::Query<OAuthCallbackParams>,
+    oauth_client: web::Data<OAuthClientType>,
+    session: Session,
+) -> HttpResponse {
+    // Check if there's an OAuth error from BlueSky
+    if let Some(error) = &params.error {
+        let error_msg = params
+            .error_description
+            .as_deref()
+            .unwrap_or("An error occurred during authentication");
+        log::error!("OAuth error from BlueSky: {} - {}", error, error_msg);
+
+        let html = ErrorTemplate {
+            title: "Authentication Error",
+            error: error_msg,
+        };
+        return HttpResponse::BadRequest().body(html.render().expect("template should be valid"));
+    }
+
+    // Check if we have the required code field for a successful callback
+    let code = match &params.code {
+        Some(code) => code.clone(),
+        None => {
+            log::error!("OAuth callback missing required code parameter");
+            let html = ErrorTemplate {
+                title: "Error",
+                error: "Missing required OAuth code. Please try logging in again.",
+            };
+            return HttpResponse::BadRequest()
+                .body(html.render().expect("template should be valid"));
+        }
+    };
+
+    // Create CallbackParams for the OAuth client
+    let callback_params = CallbackParams {
+        code,
+        state: params.state.clone(),
+        iss: params.iss.clone(),
+    };
+
+    //Processes the call back and parses out a session if found and valid
+    match oauth_client.callback(callback_params).await {
+        Ok((bsky_session, _)) => {
+            let agent = Agent::new(bsky_session);
+            match agent.did().await {
+                Some(did) => {
+                    session.insert("did", did).unwrap();
+                    Redirect::to("/")
+                        .see_other()
+                        .respond_to(&request)
+                        .map_into_boxed_body()
+                }
+                None => {
+                    let html = ErrorTemplate {
+                        title: "Error",
+                        error: "The OAuth agent did not return a DID. May try re-logging in.",
+                    };
+                    HttpResponse::Ok().body(html.render().expect("template should be valid"))
+                }
+            }
+        }
+        Err(err) => {
+            log::error!("Error: {err}");
+            let html = ErrorTemplate {
+                title: "Error",
+                error: "OAuth error, check the logs",
+            };
+            HttpResponse::Ok().body(html.render().expect("template should be valid"))
+        }
+    }
+}
+
+/// Takes you to the login page
+#[get("/login")]
+pub async fn login() -> Result<impl Responder> {
+    let html = LoginTemplate {
+        title: "Log in",
+        error: None,
+    };
+    Ok(web::Html::new(
+        html.render().expect("template should be valid"),
+    ))
+}
+
+/// Logs you out by destroying your cookie on the server and web browser
+#[get("/logout")]
+pub async fn logout(request: HttpRequest, session: Session) -> HttpResponse {
+    session.purge();
+    Redirect::to("/")
+        .see_other()
+        .respond_to(&request)
+        .map_into_boxed_body()
+}
+
+/// The post body for logging in
+#[derive(Serialize, Deserialize, Clone)]
+pub struct LoginForm {
+    pub handle: String,
+}
+
+/// Login endpoint
+#[post("/login")]
+pub async fn login_post(
+    request: HttpRequest,
+    params: web::Form<LoginForm>,
+    oauth_client: web::Data<OAuthClientType>,
+) -> HttpResponse {
+    // This will act the same as the js method isValidHandle to make sure it is valid
+    match atrium_api::types::string::Handle::new(params.handle.clone()) {
+        Ok(handle) => {
+            //Creates the oauth url to redirect to for the user to log in with their credentials
+            let oauth_url = oauth_client
+                .authorize(
+                    &handle,
+                    AuthorizeOptions {
+                        scopes: vec![
+                            Scope::Known(KnownScope::Atproto),
+                            // Using granular scope for status records only
+                            // This replaces TransitionGeneric with specific permissions
+                            Scope::Unknown("repo:io.zzstoatzz.status.record".to_string()),
+                            // Need to read profiles for the feed page
+                            Scope::Unknown("rpc:app.bsky.actor.getProfile?aud=did:web:api.bsky.app#bsky_appview".to_string()),
+                            // Need to read following list for following feed
+                            Scope::Unknown("rpc:app.bsky.graph.getFollows?aud=did:web:api.bsky.app".to_string()),
+                        ],
+                        ..Default::default()
+                    },
+                )
+                .await;
+            match oauth_url {
+                Ok(url) => Redirect::to(url)
+                    .see_other()
+                    .respond_to(&request)
+                    .map_into_boxed_body(),
+                Err(err) => {
+                    log::error!("Error: {err}");
+                    let html = LoginTemplate {
+                        title: "Log in",
+                        error: Some("OAuth error"),
+                    };
+                    HttpResponse::Ok().body(html.render().expect("template should be valid"))
+                }
+            }
+        }
+        Err(err) => {
+            let html: LoginTemplate<'_> = LoginTemplate {
+                title: "Log in",
+                error: Some(err),
+            };
+            HttpResponse::Ok().body(html.render().expect("template should be valid"))
+        }
+    }
+}

src/api/mod.rs

···
+pub mod auth;
+pub mod preferences;
+pub mod status_read;
+pub mod status_util;
+pub mod status_write;
+pub mod webhooks;
+
+pub use crate::api::status_util::HandleResolver;
+pub use auth::OAuthClientType;
+
+use actix_web::web;
+
+/// Configure all API routes
+pub fn configure_routes(cfg: &mut web::ServiceConfig) {
+    cfg
+        // Auth routes
+        .service(auth::client_metadata)
+        .service(auth::oauth_callback)
+        .service(auth::login)
+        .service(auth::logout)
+        .service(auth::login_post)
+        // Status page routes (read)
+        .service(status_read::home)
+        .service(status_read::user_status_page)
+        .service(status_read::feed)
+        // Status JSON API routes (read)
+        .service(status_read::owner_status_json)
+        .service(status_read::user_status_json)
+        .service(status_read::status_json)
+        .service(status_read::api_feed)
+        // Emoji + following routes
+        .service(status_read::get_frequent_emojis)
+        .service(status_read::get_custom_emojis)
+        .service(status_write::upload_emoji)
+        .service(status_read::get_following)
+        // Status management routes (write)
+        .service(status_write::status)
+        .service(status_write::clear_status)
+        .service(status_write::delete_status)
+        .service(status_write::hide_status)
+        // Preferences routes
+        .service(preferences::get_preferences)
+        .service(preferences::save_preferences)
+        // Webhook routes
+        .service(webhooks::list_webhooks)
+        .service(webhooks::create_webhook)
+        .service(webhooks::update_webhook)
+        .service(webhooks::rotate_secret)
+        .service(webhooks::delete_webhook);
+}

src/api/preferences.rs

···
+use crate::{db, error_handler::AppError};
+use actix_session::Session;
+use actix_web::{Responder, Result, get, post, web};
+use async_sqlite::Pool;
+use atrium_api::types::string::Did;
+use serde::Deserialize;
+use std::sync::Arc;
+
+#[derive(Deserialize)]
+pub struct PreferencesUpdate {
+    pub font_family: Option<String>,
+    pub accent_color: Option<String>,
+}
+
+/// Get user preferences
+#[get("/api/preferences")]
+pub async fn get_preferences(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+) -> Result<impl Responder> {
+    let did = session.get::<Did>("did")?;
+
+    if let Some(did) = did {
+        let prefs = db::get_user_preferences(&db_pool, did.as_str())
+            .await
+            .map_err(|e| AppError::DatabaseError(e.to_string()))?;
+        Ok(web::Json(serde_json::json!({
+            "font_family": prefs.font_family,
+            "accent_color": prefs.accent_color
+        })))
+    } else {
+        Ok(web::Json(serde_json::json!({
+            "error": "Not authenticated"
+        })))
+    }
+}
+
+/// Save user preferences
+#[post("/api/preferences")]
+pub async fn save_preferences(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    payload: web::Json<PreferencesUpdate>,
+) -> Result<impl Responder> {
+    let did = session.get::<Did>("did")?;
+
+    if let Some(did) = did {
+        let mut prefs = db::get_user_preferences(&db_pool, did.as_str())
+            .await
+            .map_err(|e| AppError::DatabaseError(e.to_string()))?;
+
+        if let Some(font) = &payload.font_family {
+            prefs.font_family = font.clone();
+        }
+        if let Some(color) = &payload.accent_color {
+            prefs.accent_color = color.clone();
+        }
+        prefs.updated_at = std::time::SystemTime::now()
+            .duration_since(std::time::UNIX_EPOCH)
+            .unwrap()
+            .as_secs() as i64;
+
+        db::save_user_preferences(&db_pool, &prefs)
+            .await
+            .map_err(|e| AppError::DatabaseError(e.to_string()))?;
+
+        Ok(web::Json(serde_json::json!({
+            "success": true
+        })))
+    } else {
+        Ok(web::Json(serde_json::json!({
+            "error": "Not authenticated"
+        })))
+    }
+}

src/api/status_read.rs

···
+use crate::config::Config;
+use crate::db;
+use crate::resolver::HickoryDnsTxtResolver;
+use crate::{
+    api::auth::OAuthClientType,
+    db::StatusFromDb,
+    templates::{ErrorTemplate, FeedTemplate, StatusTemplate},
+};
+use actix_session::Session;
+use actix_web::{Responder, Result, get, web};
+use askama::Template;
+use async_sqlite::Pool;
+use atrium_api::types::string::Did;
+use atrium_common::resolver::Resolver;
+use atrium_identity::handle::{AtprotoHandleResolver, AtprotoHandleResolverConfig};
+use atrium_oauth::DefaultHttpClient;
+use serde_json::json;
+use std::sync::Arc;
+
+use crate::api::status_util::{HandleResolver, is_admin};
+
+/// Homepage - shows logged-in user's status, or owner's status if not logged in
+#[get("/")]
+pub async fn home(
+    session: Session,
+    _oauth_client: web::Data<OAuthClientType>,
+    db_pool: web::Data<Arc<Pool>>,
+    handle_resolver: web::Data<HandleResolver>,
+) -> Result<impl Responder> {
+    // Default owner of the domain
+    const OWNER_HANDLE: &str = "zzstoatzz.io";
+
+    match session.get::<String>("did").unwrap_or(None) {
+        Some(did_string) => {
+            let did = Did::new(did_string.clone()).expect("failed to parse did");
+            let handle = match handle_resolver.resolve(&did).await {
+                Ok(did_doc) => did_doc
+                    .also_known_as
+                    .and_then(|aka| aka.first().map(|h| h.replace("at://", "")))
+                    .unwrap_or_else(|| did_string.clone()),
+                Err(_) => did_string.clone(),
+            };
+            let current_status = StatusFromDb::my_status(&db_pool, &did)
+                .await
+                .unwrap_or(None)
+                .and_then(|s| {
+                    if let Some(expires_at) = s.expires_at {
+                        if chrono::Utc::now() > expires_at {
+                            return None;
+                        }
+                    }
+                    Some(s)
+                });
+            let history = StatusFromDb::load_user_statuses(&db_pool, &did, 10)
+                .await
+                .unwrap_or_else(|err| {
+                    log::error!("Error loading status history: {err}");
+                    vec![]
+                });
+            let is_admin_flag = is_admin(did.as_str());
+            let html = StatusTemplate {
+                title: "your status",
+                handle,
+                current_status,
+                history,
+                is_owner: true,
+                is_admin: is_admin_flag,
+            }
+            .render()
+            .expect("template should be valid");
+            Ok(web::Html::new(html))
+        }
+        None => {
+            let atproto_handle_resolver = AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+                dns_txt_resolver: HickoryDnsTxtResolver::default(),
+                http_client: Arc::new(DefaultHttpClient::default()),
+            });
+            let owner_handle =
+                atrium_api::types::string::Handle::new(OWNER_HANDLE.to_string()).ok();
+            let owner_did = if let Some(handle) = owner_handle {
+                atproto_handle_resolver.resolve(&handle).await.ok()
+            } else {
+                None
+            };
+            let current_status = if let Some(ref did) = owner_did {
+                StatusFromDb::my_status(&db_pool, did)
+                    .await
+                    .unwrap_or(None)
+                    .and_then(|s| {
+                        if let Some(expires_at) = s.expires_at {
+                            if chrono::Utc::now() > expires_at {
+                                return None;
+                            }
+                        }
+                        Some(s)
+                    })
+            } else {
+                None
+            };
+            let history = if let Some(ref did) = owner_did {
+                StatusFromDb::load_user_statuses(&db_pool, did, 10)
+                    .await
+                    .unwrap_or_else(|err| {
+                        log::error!("Error loading status history: {err}");
+                        vec![]
+                    })
+            } else {
+                vec![]
+            };
+            let html = StatusTemplate {
+                title: "nate's status",
+                handle: OWNER_HANDLE.to_string(),
+                current_status,
+                history,
+                is_owner: false,
+                is_admin: false,
+            }
+            .render()
+            .expect("template should be valid");
+            Ok(web::Html::new(html))
+        }
+    }
+}
+
+/// View a specific user's status page by handle
+#[get("/@{handle}")]
+pub async fn user_status_page(
+    handle: web::Path<String>,
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    _handle_resolver: web::Data<HandleResolver>,
+) -> Result<impl Responder> {
+    let handle = handle.into_inner();
+    let atproto_handle_resolver = AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+        dns_txt_resolver: HickoryDnsTxtResolver::default(),
+        http_client: Arc::new(DefaultHttpClient::default()),
+    });
+    let handle_obj = atrium_api::types::string::Handle::new(handle.clone()).ok();
+    let did = match handle_obj {
+        Some(h) => match atproto_handle_resolver.resolve(&h).await {
+            Ok(did) => did,
+            Err(_) => {
+                let html = ErrorTemplate {
+                    title: "User not found",
+                    error: &format!("Could not find user @{}.", handle),
+                }
+                .render()
+                .expect("template should be valid");
+                return Ok(web::Html::new(html));
+            }
+        },
+        None => {
+            let html = ErrorTemplate {
+                title: "Invalid handle",
+                error: &format!("'{}' is not a valid handle format.", handle),
+            }
+            .render()
+            .expect("template should be valid");
+            return Ok(web::Html::new(html));
+        }
+    };
+    let is_owner = match session.get::<String>("did").unwrap_or(None) {
+        Some(session_did) => session_did == did.to_string(),
+        None => false,
+    };
+    let current_status = StatusFromDb::my_status(&db_pool, &did)
+        .await
+        .unwrap_or(None)
+        .and_then(|s| {
+            if let Some(expires_at) = s.expires_at {
+                if chrono::Utc::now() > expires_at {
+                    return None;
+                }
+            }
+            Some(s)
+        });
+    let history = StatusFromDb::load_user_statuses(&db_pool, &did, 10)
+        .await
+        .unwrap_or_else(|err| {
+            log::error!("Error loading status history: {err}");
+            vec![]
+        });
+    let html = StatusTemplate {
+        title: &format!("@{} status", handle),
+        handle,
+        current_status,
+        history,
+        is_owner,
+        is_admin: false,
+    }
+    .render()
+    .expect("template should be valid");
+    Ok(web::Html::new(html))
+}
+
+#[get("/json")]
+pub async fn owner_status_json(
+    _session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    _handle_resolver: web::Data<HandleResolver>,
+) -> Result<impl Responder> {
+    // Resolve owner handle to DID (zzstoatzz.io)
+    let owner_handle = atrium_api::types::string::Handle::new("zzstoatzz.io".to_string()).ok();
+    let atproto_handle_resolver = AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+        dns_txt_resolver: HickoryDnsTxtResolver::default(),
+        http_client: Arc::new(DefaultHttpClient::default()),
+    });
+    let did = if let Some(handle) = owner_handle {
+        atproto_handle_resolver.resolve(&handle).await.ok()
+    } else {
+        None
+    };
+    let current_status = if let Some(did) = did {
+        StatusFromDb::my_status(&db_pool, &did)
+            .await
+            .unwrap_or(None)
+            .and_then(|s| {
+                if let Some(expires_at) = s.expires_at {
+                    if chrono::Utc::now() > expires_at {
+                        return None;
+                    }
+                }
+                Some(s)
+            })
+    } else {
+        None
+    };
+    let response = if let Some(status_data) = current_status {
+        json!({ "status": "known", "emoji": status_data.status, "text": status_data.text, "since": status_data.started_at.to_rfc3339(), "expires": status_data.expires_at.map(|e| e.to_rfc3339()) })
+    } else {
+        json!({ "status": "unknown", "message": "No current status is known" })
+    };
+    Ok(web::Json(response))
+}
+
+#[get("/@{handle}/json")]
+pub async fn user_status_json(
+    handle: web::Path<String>,
+    _session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+) -> Result<impl Responder> {
+    let handle = handle.into_inner();
+    let atproto_handle_resolver = AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+        dns_txt_resolver: HickoryDnsTxtResolver::default(),
+        http_client: Arc::new(DefaultHttpClient::default()),
+    });
+    let handle_obj = atrium_api::types::string::Handle::new(handle.clone()).ok();
+    let did = if let Some(h) = handle_obj {
+        atproto_handle_resolver.resolve(&h).await.ok()
+    } else {
+        None
+    };
+    if let Some(did) = did {
+        let current_status = StatusFromDb::my_status(&db_pool, &did)
+            .await
+            .unwrap_or(None)
+            .and_then(|s| {
+                if let Some(expires_at) = s.expires_at {
+                    if chrono::Utc::now() > expires_at {
+                        return None;
+                    }
+                }
+                Some(s)
+            });
+        let response = if let Some(status_data) = current_status {
+            json!({ "status": "known", "emoji": status_data.status, "text": status_data.text, "since": status_data.started_at.to_rfc3339(), "expires": status_data.expires_at.map(|e| e.to_rfc3339()) })
+        } else {
+            json!({ "status": "unknown", "message": format!("No current status is known for @{}", handle) })
+        };
+        Ok(web::Json(response))
+    } else {
+        Ok(web::Json(
+            json!({ "status": "unknown", "message": format!("Unknown user @{}", handle) }),
+        ))
+    }
+}
+
+#[get("/api/status")]
+pub async fn status_json(db_pool: web::Data<Arc<Pool>>) -> Result<impl Responder> {
+    // Owner: zzstoatzz.io
+    let atproto_handle_resolver = AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+        dns_txt_resolver: HickoryDnsTxtResolver::default(),
+        http_client: Arc::new(DefaultHttpClient::default()),
+    });
+    let owner_handle = atrium_api::types::string::Handle::new("zzstoatzz.io".to_string()).ok();
+    let did = if let Some(h) = owner_handle {
+        atproto_handle_resolver.resolve(&h).await.ok()
+    } else {
+        None
+    };
+    let current_status = if let Some(ref did) = did {
+        StatusFromDb::my_status(&db_pool, did)
+            .await
+            .unwrap_or(None)
+            .and_then(|s| {
+                if let Some(expires_at) = s.expires_at {
+                    if chrono::Utc::now() > expires_at {
+                        return None;
+                    }
+                }
+                Some(s)
+            })
+    } else {
+        None
+    };
+    let response = if let Some(status_data) = current_status {
+        json!({ "status": "known", "emoji": status_data.status, "text": status_data.text, "since": status_data.started_at.to_rfc3339(), "expires": status_data.expires_at.map(|e| e.to_rfc3339()) })
+    } else {
+        json!({ "status": "unknown", "message": "No current status is known" })
+    };
+    Ok(web::Json(response))
+}
+
+#[get("/feed")]
+pub async fn feed(
+    session: Session,
+    _db_pool: web::Data<Arc<Pool>>,
+    handle_resolver: web::Data<HandleResolver>,
+    app_config: web::Data<Config>,
+) -> Result<impl Responder> {
+    let did_opt = session.get::<String>("did").unwrap_or(None);
+    let is_admin_flag = did_opt.as_deref().map(is_admin).unwrap_or(false);
+
+    let mut profile: Option<crate::templates::Profile> = None;
+    if let Some(did_str) = did_opt.clone() {
+        let mut handle_opt: Option<String> = None;
+        if let Ok(doc) = handle_resolver
+            .resolve(&atrium_api::types::string::Did::new(did_str.clone()).expect("did"))
+            .await
+        {
+            if let Some(h) = doc.also_known_as.and_then(|aka| aka.first().cloned()) {
+                handle_opt = Some(h.replace("at://", ""));
+            }
+        }
+        profile = Some(crate::templates::Profile {
+            did: did_str,
+            display_name: None,
+            handle: handle_opt,
+        });
+    }
+
+    let html = FeedTemplate {
+        title: "feed",
+        profile,
+        statuses: vec![],
+        is_admin: is_admin_flag,
+        dev_mode: app_config.dev_mode,
+    }
+    .render()
+    .expect("template should be valid");
+    Ok(web::Html::new(html))
+}
+
+#[get("/api/feed")]
+pub async fn api_feed(
+    db_pool: web::Data<Arc<Pool>>,
+    handle_resolver: web::Data<HandleResolver>,
+    query: web::Query<std::collections::HashMap<String, String>>,
+) -> Result<impl Responder> {
+    // Paginated feed
+    let offset = query
+        .get("offset")
+        .and_then(|s| s.parse::<i32>().ok())
+        .unwrap_or(0);
+    let limit = query
+        .get("limit")
+        .and_then(|s| s.parse::<i32>().ok())
+        .unwrap_or(20)
+        .clamp(5, 50);
+
+    let statuses = StatusFromDb::load_statuses_paginated(&db_pool, offset, limit)
+        .await
+        .unwrap_or_default();
+    let mut enriched = Vec::with_capacity(statuses.len());
+    for mut s in statuses {
+        // Resolve handle lazily
+        let did = Did::new(s.author_did.clone()).expect("did");
+        if let Ok(doc) = handle_resolver.resolve(&did).await {
+            if let Some(h) = doc.also_known_as.and_then(|aka| aka.first().cloned()) {
+                s.handle = Some(h.replace("at://", ""));
+            }
+        }
+        enriched.push(s);
+    }
+    let has_more = (enriched.len() as i32) == limit;
+    Ok(web::Json(
+        json!({ "statuses": enriched, "has_more": has_more, "next_offset": offset + (enriched.len() as i32) }),
+    ))
+}
+
+#[get("/api/frequent-emojis")]
+pub async fn get_frequent_emojis(db_pool: web::Data<Arc<Pool>>) -> Result<impl Responder> {
+    let emojis = db::get_frequent_emojis(&db_pool, 20)
+        .await
+        .unwrap_or_default();
+    // Legacy response shape: raw array, not wrapped
+    Ok(web::Json(emojis))
+}
+
+#[get("/api/custom-emojis")]
+pub async fn get_custom_emojis(app_config: web::Data<Config>) -> Result<impl Responder> {
+    // Response shape expected by UI:
+    // [ { "name": "sparkle", "filename": "sparkle.png" }, ... ]
+    let dir = app_config.emoji_dir.clone();
+    let fs_dir = std::path::Path::new(&dir);
+    let fallback = std::path::Path::new("static/emojis");
+
+    let mut map: std::collections::BTreeMap<String, String> = std::collections::BTreeMap::new();
+    let read_dirs = [fs_dir, fallback];
+    for d in read_dirs.iter() {
+        if let Ok(entries) = std::fs::read_dir(d) {
+            for entry in entries.flatten() {
+                let p = entry.path();
+                if let (Some(stem), Some(ext)) = (p.file_stem(), p.extension()) {
+                    let name = stem.to_string_lossy().to_string();
+                    let ext = ext.to_string_lossy().to_ascii_lowercase();
+                    if ext == "png" || ext == "gif" {
+                        // prefer png over gif if duplicates
+                        let filename = format!("{}.{ext}", name);
+                        map.entry(name)
+                            .and_modify(|v| {
+                                if v.ends_with(".gif") && ext == "png" {
+                                    *v = filename.clone();
+                                }
+                            })
+                            .or_insert(filename);
+                    }
+                }
+            }
+        }
+    }
+
+    let custom: Vec<serde_json::Value> = map
+        .into_iter()
+        .map(|(name, filename)| json!({ "name": name, "filename": filename }))
+        .collect();
+    Ok(web::Json(custom))
+}
+
+#[get("/api/following")]
+pub async fn get_following(
+    _session: Session,
+    _oauth_client: web::Data<OAuthClientType>,
+    _db_pool: web::Data<Arc<Pool>>,
+) -> Result<impl Responder> {
+    // Placeholder: follow list disabled here to keep module slim
+    Ok(web::Json(json!({ "follows": [] })))
+}

src/api/status_util.rs

···
+use atrium_identity::did::CommonDidResolver;
+use atrium_oauth::DefaultHttpClient;
+use serde::{Deserialize, Serialize};
+use std::sync::Arc;
+
+/// HandleResolver to make it easier to access the OAuthClient in web requests
+pub type HandleResolver = Arc<CommonDidResolver<DefaultHttpClient>>;
+
+/// Admin DID for moderation
+pub const ADMIN_DID: &str = "did:plc:xbtmt2zjwlrfegqvch7fboei"; // zzstoatzz.io
+
+/// Check if a DID is the admin
+pub fn is_admin(did: &str) -> bool {
+    did == ADMIN_DID
+}
+
+/// The post body for changing your status
+#[derive(Serialize, Deserialize, Clone)]
+pub struct StatusForm {
+    pub status: String,
+    pub text: Option<String>,
+    pub expires_in: Option<String>, // e.g., "1h", "30m", "1d", etc.
+}
+
+/// The post body for deleting a specific status
+#[derive(Serialize, Deserialize)]
+pub struct DeleteRequest {
+    pub uri: String,
+}
+
+/// Hide/unhide a status (admin only)
+#[derive(Deserialize)]
+pub struct HideStatusRequest {
+    pub uri: String,
+    pub hidden: bool,
+}
+
+/// Parse duration string like "1h", "30m", "1d" into chrono::Duration
+pub fn parse_duration(duration_str: &str) -> Option<chrono::Duration> {
+    if duration_str.is_empty() {
+        return None;
+    }
+
+    let (num_str, unit) = duration_str.split_at(duration_str.len() - 1);
+    let num: i64 = num_str.parse().ok()?;
+
+    match unit {
+        "m" => Some(chrono::Duration::minutes(num)),
+        "h" => Some(chrono::Duration::hours(num)),
+        "d" => Some(chrono::Duration::days(num)),
+        "w" => Some(chrono::Duration::weeks(num)),
+        _ => None,
+    }
+}

src/api/status_write.rs

···
+use crate::config::Config;
+use crate::{
+    api::auth::OAuthClientType, db::StatusFromDb, error_handler::AppError,
+    lexicons::record::KnownRecord, rate_limiter::RateLimiter,
+};
+use actix_multipart::Multipart;
+use actix_session::Session;
+use actix_web::{HttpRequest, HttpResponse, Responder, post, web};
+use async_sqlite::{Pool, rusqlite};
+use atrium_api::{
+    agent::Agent,
+    types::string::{Datetime, Did},
+};
+use futures_util::TryStreamExt as _;
+use std::sync::Arc;
+
+use crate::api::status_util::{HideStatusRequest, StatusForm, parse_duration};
+
+#[post("/admin/upload-emoji")]
+pub async fn upload_emoji(
+    session: Session,
+    mut payload: Multipart,
+    app_config: web::Data<Config>,
+) -> Result<impl Responder, AppError> {
+    if session.get::<String>("did").unwrap_or(None).is_none() {
+        return Ok(HttpResponse::Unauthorized().body("Not authenticated"));
+    }
+    let mut name: Option<String> = None;
+    let mut file_bytes: Option<Vec<u8>> = None;
+    while let Some(item) = payload
+        .try_next()
+        .await
+        .map_err(|e| AppError::ValidationError(e.to_string()))?
+    {
+        let mut field = item;
+        let disp = field.content_disposition().clone();
+        let field_name = disp.get_name().unwrap_or("");
+        if field_name == "name" {
+            let mut buf = Vec::new();
+            while let Some(chunk) = field
+                .try_next()
+                .await
+                .map_err(|e| AppError::ValidationError(e.to_string()))?
+            {
+                buf.extend_from_slice(&chunk);
+            }
+            name = Some(String::from_utf8_lossy(&buf).trim().to_string());
+        } else if field_name == "file" {
+            let mut buf = Vec::new();
+            while let Some(chunk) = field
+                .try_next()
+                .await
+                .map_err(|e| AppError::ValidationError(e.to_string()))?
+            {
+                buf.extend_from_slice(&chunk);
+            }
+            file_bytes = Some(buf);
+        }
+    }
+    let file_bytes = file_bytes.ok_or_else(|| AppError::ValidationError("No file".into()))?;
+    // Basic validation omitted for brevity
+    let emoji_dir = app_config.emoji_dir.clone();
+    let filename = name
+        .filter(|s| !s.is_empty())
+        .unwrap_or_else(|| format!("emoji_{}", chrono::Utc::now().timestamp()));
+    let path_png = format!("{}/{}.png", emoji_dir, filename);
+    std::fs::write(&path_png, &file_bytes).map_err(|e| AppError::ValidationError(e.to_string()))?;
+    Ok(HttpResponse::Ok().json(serde_json::json!({"ok": true, "name": filename})))
+}
+
+/// Clear the user's status by deleting the ATProto record
+#[post("/status/clear")]
+pub async fn clear_status(
+    request: HttpRequest,
+    session: Session,
+    oauth_client: web::Data<OAuthClientType>,
+    db_pool: web::Data<Arc<Pool>>,
+) -> HttpResponse {
+    match session.get::<String>("did").unwrap_or(None) {
+        Some(did_string) => {
+            let did = Did::new(did_string.clone()).expect("failed to parse did");
+            match StatusFromDb::my_status(&db_pool, &did).await {
+                Ok(Some(current_status)) => {
+                    let parts: Vec<&str> = current_status.uri.split('/').collect();
+                    if let Some(rkey) = parts.last() {
+                        match oauth_client.restore(&did).await {
+                            Ok(session) => {
+                                let agent = Agent::new(session);
+                                let delete_request =
+                                    atrium_api::com::atproto::repo::delete_record::InputData {
+                                        collection: atrium_api::types::string::Nsid::new(
+                                            "io.zzstoatzz.status.record".to_string(),
+                                        )
+                                        .expect("valid nsid"),
+                                        repo: did.clone().into(),
+                                        rkey: atrium_api::types::string::RecordKey::new(
+                                            rkey.to_string(),
+                                        )
+                                        .expect("valid rkey"),
+                                        swap_commit: None,
+                                        swap_record: None,
+                                    };
+                                match agent
+                                    .api
+                                    .com
+                                    .atproto
+                                    .repo
+                                    .delete_record(delete_request.into())
+                                    .await
+                                {
+                                    Ok(_) => {
+                                        let _ = StatusFromDb::delete_by_uri(
+                                            &db_pool,
+                                            current_status.uri.clone(),
+                                        )
+                                        .await;
+                                        let pool = db_pool.get_ref().clone();
+                                        let did_for_event = did_string.clone();
+                                        let uri = current_status.uri.clone();
+                                        tokio::spawn(async move {
+                                            crate::webhooks::emit_deleted(
+                                                pool,
+                                                &did_for_event,
+                                                &uri,
+                                            )
+                                            .await;
+                                        });
+                                        web::Redirect::to("/")
+                                            .see_other()
+                                            .respond_to(&request)
+                                            .map_into_boxed_body()
+                                    }
+                                    Err(e) => {
+                                        log::error!("Failed to delete status from ATProto: {e}");
+                                        HttpResponse::InternalServerError()
+                                            .body("Failed to clear status")
+                                    }
+                                }
+                            }
+                            Err(e) => {
+                                log::error!("Failed to restore OAuth session: {e}");
+                                HttpResponse::InternalServerError().body("Session error")
+                            }
+                        }
+                    } else {
+                        HttpResponse::BadRequest().body("Invalid status URI")
+                    }
+                }
+                Ok(None) => web::Redirect::to("/")
+                    .see_other()
+                    .respond_to(&request)
+                    .map_into_boxed_body(),
+                Err(e) => {
+                    log::error!("Database error: {e}");
+                    HttpResponse::InternalServerError().body("Database error")
+                }
+            }
+        }
+        None => web::Redirect::to("/login")
+            .see_other()
+            .respond_to(&request)
+            .map_into_boxed_body(),
+    }
+}
+
+/// Delete a specific status by URI (JSON endpoint)
+#[post("/status/delete")]
+pub async fn delete_status(
+    session: Session,
+    oauth_client: web::Data<OAuthClientType>,
+    db_pool: web::Data<Arc<Pool>>,
+    req: web::Json<crate::api::status_util::DeleteRequest>,
+) -> HttpResponse {
+    match session.get::<String>("did").unwrap_or(None) {
+        Some(did_string) => {
+            let did = Did::new(did_string.clone()).expect("failed to parse did");
+            let uri_parts: Vec<&str> = req.uri.split('/').collect();
+            if uri_parts.len() < 5 {
+                return HttpResponse::BadRequest()
+                    .json(serde_json::json!({"error":"Invalid status URI format"}));
+            }
+            let uri_did_part = uri_parts[2];
+            if uri_did_part != did_string {
+                return HttpResponse::Forbidden()
+                    .json(serde_json::json!({"error":"You can only delete your own statuses"}));
+            }
+            if let Some(rkey) = uri_parts.last() {
+                match oauth_client.restore(&did).await {
+                    Ok(session) => {
+                        let agent = Agent::new(session);
+                        let delete_request =
+                            atrium_api::com::atproto::repo::delete_record::InputData {
+                                collection: atrium_api::types::string::Nsid::new(
+                                    "io.zzstoatzz.status.record".to_string(),
+                                )
+                                .expect("valid nsid"),
+                                repo: did.clone().into(),
+                                rkey: atrium_api::types::string::RecordKey::new(rkey.to_string())
+                                    .expect("valid rkey"),
+                                swap_commit: None,
+                                swap_record: None,
+                            };
+                        match agent
+                            .api
+                            .com
+                            .atproto
+                            .repo
+                            .delete_record(delete_request.into())
+                            .await
+                        {
+                            Ok(_) => {
+                                let _ =
+                                    StatusFromDb::delete_by_uri(&db_pool, req.uri.clone()).await;
+                                let pool = db_pool.get_ref().clone();
+                                let did_for_event = did_string.clone();
+                                let uri = req.uri.clone();
+                                tokio::spawn(async move {
+                                    crate::webhooks::emit_deleted(pool, &did_for_event, &uri).await;
+                                });
+                                HttpResponse::Ok().json(serde_json::json!({"success":true}))
+                            }
+                            Err(e) => {
+                                log::error!("Failed to delete status from ATProto: {e}");
+                                HttpResponse::InternalServerError()
+                                    .json(serde_json::json!({"error":"Failed to delete status"}))
+                            }
+                        }
+                    }
+                    Err(e) => {
+                        log::error!("Failed to restore OAuth session: {e}");
+                        HttpResponse::InternalServerError()
+                            .json(serde_json::json!({"error":"Session error"}))
+                    }
+                }
+            } else {
+                HttpResponse::BadRequest().json(serde_json::json!({"error":"Invalid status URI"}))
+            }
+        }
+        None => HttpResponse::Unauthorized().json(serde_json::json!({"error":"Not authenticated"})),
+    }
+}
+
+/// Hide/unhide a status (admin only)
+#[post("/admin/hide-status")]
+pub async fn hide_status(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    req: web::Json<HideStatusRequest>,
+) -> HttpResponse {
+    match session.get::<String>("did").unwrap_or(None) {
+        Some(did_string) => {
+            if did_string != crate::api::status_util::ADMIN_DID {
+                return HttpResponse::Forbidden()
+                    .json(serde_json::json!({"error":"Admin access required"}));
+            }
+            let uri = req.uri.clone();
+            let hidden = req.hidden;
+            let result = db_pool
+                .conn(move |conn| {
+                    conn.execute(
+                        "UPDATE status SET hidden = ?1 WHERE uri = ?2",
+                        rusqlite::params![hidden, uri],
+                    )
+                })
+                .await;
+            match result {
+                Ok(rows_affected) if rows_affected > 0 => HttpResponse::Ok().json(serde_json::json!({"success":true,"message": if hidden {"Status hidden"} else {"Status unhidden"}})),
+                Ok(_) => HttpResponse::NotFound().json(serde_json::json!({"error":"Status not found"})),
+                Err(err) => { log::error!("Error updating hidden status: {}", err); HttpResponse::InternalServerError().json(serde_json::json!({"error":"Database error"})) }
+            }
+        }
+        None => HttpResponse::Unauthorized().json(serde_json::json!({"error":"Not authenticated"})),
+    }
+}
+
+/// Creates a new status
+#[post("/status")]
+pub async fn status(
+    request: HttpRequest,
+    session: Session,
+    oauth_client: web::Data<OAuthClientType>,
+    db_pool: web::Data<Arc<Pool>>,
+    form: web::Form<StatusForm>,
+    rate_limiter: web::Data<RateLimiter>,
+) -> Result<HttpResponse, AppError> {
+    let client_key = RateLimiter::get_client_key(&request);
+    if !rate_limiter.check_rate_limit(&client_key) {
+        return Err(AppError::RateLimitExceeded);
+    }
+    match session.get::<String>("did").unwrap_or(None) {
+        Some(did_string) => {
+            let did = Did::new(did_string.clone()).expect("failed to parse did");
+            match oauth_client.restore(&did).await {
+                Ok(session) => {
+                    let agent = Agent::new(session);
+                    let expires = form
+                        .expires_in
+                        .as_ref()
+                        .and_then(|exp| parse_duration(exp))
+                        .and_then(|duration| {
+                            let expiry_time = chrono::Utc::now() + duration;
+                            Some(Datetime::new(expiry_time.to_rfc3339().parse().ok()?))
+                        });
+                    let status: KnownRecord =
+                        crate::lexicons::io::zzstoatzz::status::record::RecordData {
+                            created_at: Datetime::now(),
+                            emoji: form.status.clone(),
+                            text: form.text.clone(),
+                            expires,
+                        }
+                        .into();
+                    let create_result = agent
+                        .api
+                        .com
+                        .atproto
+                        .repo
+                        .create_record(
+                            atrium_api::com::atproto::repo::create_record::InputData {
+                                collection: "io.zzstoatzz.status.record".parse().unwrap(),
+                                repo: did.into(),
+                                rkey: None,
+                                record: status.into(),
+                                swap_commit: None,
+                                validate: None,
+                            }
+                            .into(),
+                        )
+                        .await;
+                    match create_result {
+                        Ok(record) => {
+                            let mut status = StatusFromDb::new(
+                                record.uri.clone(),
+                                did_string,
+                                form.status.clone(),
+                            );
+                            status.text = form.text.clone();
+                            if let Some(exp_str) = &form.expires_in {
+                                if let Some(duration) = parse_duration(exp_str) {
+                                    status.expires_at = Some(chrono::Utc::now() + duration);
+                                }
+                            }
+                            let _ = status.save(db_pool.clone()).await;
+                            {
+                                let pool = db_pool.get_ref().clone();
+                                let s = status.clone();
+                                tokio::spawn(async move {
+                                    crate::webhooks::emit_created(pool, &s).await;
+                                });
+                            }
+                            Ok(web::Redirect::to("/")
+                                .see_other()
+                                .respond_to(&request)
+                                .map_into_boxed_body())
+                        }
+                        Err(err) => {
+                            log::error!("Error creating status: {err}");
+                            Ok(HttpResponse::Ok()
+                                .body("Was an error creating the status, please check the logs."))
+                        }
+                    }
+                }
+                Err(err) => {
+                    session.purge();
+                    log::error!("Error restoring session: {err}");
+                    Err(AppError::AuthenticationError("Session error".to_string()))
+                }
+            }
+        }
+        None => Err(AppError::AuthenticationError(
+            "You must be logged in to create a status.".to_string(),
+        )),
+    }
+}

src/api/webhooks.rs

···
+use crate::{config::Config, db, error_handler::AppError};
+use actix_session::Session;
+use actix_web::{HttpResponse, Responder, Result, delete, get, post, put, web};
+use async_sqlite::Pool;
+use atrium_api::types::string::Did;
+use serde::Deserialize;
+use std::sync::Arc;
+use url::Url;
+
+#[derive(Deserialize)]
+pub struct CreateWebhookRequest {
+    pub url: String,
+    pub secret: Option<String>,
+    pub events: Option<String>,
+}
+
+#[derive(Deserialize)]
+pub struct UpdateWebhookRequest {
+    pub url: Option<String>,
+    pub events: Option<String>,
+    pub active: Option<bool>,
+}
+
+#[get("/api/webhooks")]
+pub async fn list_webhooks(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+) -> Result<impl Responder> {
+    let did = session.get::<Did>("did")?;
+    if let Some(did) = did {
+        let hooks = db::get_user_webhooks(&db_pool, did.as_str())
+            .await
+            .map_err(|e| AppError::DatabaseError(e.to_string()))?;
+        let response: Vec<serde_json::Value> = hooks
+            .into_iter()
+            .map(|h| {
+                serde_json::json!({
+                    "id": h.id,
+                    "url": h.url,
+                    "events": h.events,
+                    "active": h.active,
+                    "created_at": h.created_at,
+                    "updated_at": h.updated_at,
+                    "secret_masked": h.masked_secret()
+                })
+            })
+            .collect();
+        Ok(web::Json(serde_json::json!({ "webhooks": response })))
+    } else {
+        Ok(web::Json(
+            serde_json::json!({ "error": "Not authenticated" }),
+        ))
+    }
+}
+
+#[post("/api/webhooks")]
+pub async fn create_webhook(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    app_config: web::Data<Config>,
+    payload: web::Json<CreateWebhookRequest>,
+) -> Result<impl Responder> {
+    let did = session.get::<Did>("did")?;
+    if let Some(did) = did {
+        // Robust URL + SSRF validation
+        if let Err(msg) = validate_url(&payload.url, &app_config) {
+            return Ok(web::Json(serde_json::json!({ "error": msg })));
+        }
+        // Events validation
+        if let Some(events_str) = &payload.events {
+            if let Err(msg) = validate_events(events_str) {
+                return Ok(web::Json(serde_json::json!({ "error": msg })));
+            }
+        }
+        let (id, secret) = db::create_webhook(
+            &db_pool,
+            did.as_str(),
+            &payload.url,
+            payload.secret.as_deref(),
+            payload.events.as_deref(),
+        )
+        .await
+        .map_err(|e| AppError::DatabaseError(e.to_string()))?;
+
+        Ok(web::Json(serde_json::json!({
+            "id": id,
+            "secret": secret, // Only returned once on creation
+        })))
+    } else {
+        Ok(web::Json(
+            serde_json::json!({ "error": "Not authenticated" }),
+        ))
+    }
+}
+
+#[put("/api/webhooks/{id}")]
+pub async fn update_webhook(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    path: web::Path<i64>,
+    payload: web::Json<UpdateWebhookRequest>,
+    app_config: web::Data<Config>,
+) -> impl Responder {
+    match session.get::<Did>("did").unwrap_or(None) {
+        Some(did) => {
+            let id = path.into_inner();
+            if let Some(url) = &payload.url {
+                if let Err(msg) = validate_url(url, &app_config) {
+                    return HttpResponse::BadRequest().json(serde_json::json!({ "error": msg }));
+                }
+            }
+            if let Some(events_str) = &payload.events {
+                if let Err(msg) = validate_events(events_str) {
+                    return HttpResponse::BadRequest().json(serde_json::json!({ "error": msg }));
+                }
+            }
+            let res = db::update_webhook(
+                &db_pool,
+                did.as_str(),
+                id,
+                payload.url.as_deref(),
+                payload.events.as_deref(),
+                payload.active,
+            )
+            .await;
+            match res {
+                Ok(_) => HttpResponse::Ok().json(serde_json::json!({ "success": true })),
+                Err(e) => HttpResponse::InternalServerError()
+                    .json(serde_json::json!({ "error": e.to_string() })),
+            }
+        }
+        None => {
+            HttpResponse::Unauthorized().json(serde_json::json!({ "error": "Not authenticated" }))
+        }
+    }
+}
+
+fn validate_events(s: &str) -> Result<(), &'static str> {
+    if s.trim().is_empty() {
+        return Ok(());
+    }
+    const ALLOWED: &[&str] = &["status.created", "status.deleted"];
+    for ev in s.split(',').map(|e| e.trim()) {
+        if !ALLOWED.contains(&ev) {
+            return Err("Unsupported event type");
+        }
+    }
+    Ok(())
+}
+
+fn validate_url(raw: &str, cfg: &Config) -> Result<(), &'static str> {
+    let url = Url::parse(raw).map_err(|_| "Invalid URL")?;
+    let scheme = url.scheme();
+    let host = url.host_str().ok_or("Missing host")?.to_ascii_lowercase();
+
+    // Treat localhost explicitly
+    let host_is_localname = host == "localhost";
+
+    // If host is an IP literal, apply standard library checks
+    let ip_check_blocks = if let Ok(ip) = host.parse::<std::net::IpAddr>() {
+        match ip {
+            std::net::IpAddr::V4(v4) => {
+                v4.is_private()
+                    || v4.is_loopback()
+                    || v4.is_link_local()
+                    || v4.is_multicast()
+                    || v4.is_unspecified()
+            }
+            std::net::IpAddr::V6(v6) => {
+                v6.is_unique_local() || v6.is_loopback() || v6.is_multicast() || v6.is_unspecified()
+            }
+        }
+    } else {
+        false
+    };
+
+    // Enforce HTTPS in production
+    let is_production = !cfg.oauth_redirect_base.starts_with("http://localhost")
+        && !cfg.oauth_redirect_base.starts_with("http://127.0.0.1");
+    if is_production && scheme != "https" {
+        return Err("HTTPS required in production");
+    }
+
+    // Basic SSRF protection in production
+    if (host_is_localname || ip_check_blocks) && is_production {
+        return Err("Private/local hosts not allowed");
+    }
+
+    Ok(())
+}
+
+#[post("/api/webhooks/{id}/rotate")]
+pub async fn rotate_secret(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    path: web::Path<i64>,
+) -> impl Responder {
+    match session.get::<Did>("did").unwrap_or(None) {
+        Some(did) => {
+            let id = path.into_inner();
+            match db::rotate_webhook_secret(&db_pool, did.as_str(), id).await {
+                Ok(new_secret) => {
+                    HttpResponse::Ok().json(serde_json::json!({ "secret": new_secret }))
+                }
+                Err(e) => HttpResponse::InternalServerError()
+                    .json(serde_json::json!({ "error": e.to_string() })),
+            }
+        }
+        None => {
+            HttpResponse::Unauthorized().json(serde_json::json!({ "error": "Not authenticated" }))
+        }
+    }
+}
+
+#[delete("/api/webhooks/{id}")]
+pub async fn delete_webhook(
+    session: Session,
+    db_pool: web::Data<Arc<Pool>>,
+    path: web::Path<i64>,
+) -> impl Responder {
+    match session.get::<Did>("did").unwrap_or(None) {
+        Some(did) => {
+            let id = path.into_inner();
+            match db::delete_webhook(&db_pool, did.as_str(), id).await {
+                Ok(_) => HttpResponse::Ok().json(serde_json::json!({ "success": true })),
+                Err(e) => HttpResponse::InternalServerError()
+                    .json(serde_json::json!({ "error": e.to_string() })),
+            }
+        }
+        None => {
+            HttpResponse::Unauthorized().json(serde_json::json!({ "error": "Not authenticated" }))
+        }
+    }
+}

src/config.rs

···
+use serde::Deserialize;
+use std::env;
+
+/// Application configuration loaded from environment variables
+#[derive(Debug, Clone, Deserialize)]
+#[allow(dead_code)]
+pub struct Config {
+    /// The admin DID for moderation (intentionally hardcoded for security)
+    pub admin_did: String,
+
+    /// Owner handle for the default status page
+    pub owner_handle: String,
+
+    /// Database URL (defaults to local SQLite)
+    pub database_url: String,
+
+    /// OAuth redirect base URL
+    pub oauth_redirect_base: String,
+
+    /// Server host
+    pub server_host: String,
+
+    /// Server port
+    pub server_port: u16,
+
+    /// Enable firehose ingester
+    pub enable_firehose: bool,
+
+    /// Log level
+    pub log_level: String,
+
+    /// Dev mode for testing with dummy data
+    pub dev_mode: bool,
+
+    /// Directory to serve and manage custom emojis from
+    pub emoji_dir: String,
+}
+
+impl Config {
+    /// Load configuration from environment variables with sensible defaults
+    pub fn from_env() -> Result<Self, env::VarError> {
+        // Admin DID is intentionally hardcoded as discussed
+        let admin_did = "did:plc:xbtmt2zjwlrfegqvch7fboei".to_string();
+
+        Ok(Config {
+            admin_did,
+            owner_handle: env::var("OWNER_HANDLE").unwrap_or_else(|_| "zzstoatzz.io".to_string()),
+            database_url: env::var("DATABASE_URL")
+                .unwrap_or_else(|_| "sqlite://./statusphere.sqlite3".to_string()),
+            oauth_redirect_base: env::var("OAUTH_REDIRECT_BASE")
+                .unwrap_or_else(|_| "http://localhost:8080".to_string()),
+            server_host: env::var("SERVER_HOST").unwrap_or_else(|_| "127.0.0.1".to_string()),
+            server_port: env::var("SERVER_PORT")
+                .unwrap_or_else(|_| "8080".to_string())
+                .parse()
+                .unwrap_or(8080),
+            enable_firehose: env::var("ENABLE_FIREHOSE")
+                .unwrap_or_else(|_| "false".to_string())
+                .parse()
+                .unwrap_or(false),
+            log_level: env::var("RUST_LOG").unwrap_or_else(|_| "info".to_string()),
+            dev_mode: env::var("DEV_MODE")
+                .unwrap_or_else(|_| "false".to_string())
+                .parse()
+                .unwrap_or(false),
+            // Default to static/emojis for local dev; override in prod to /data/emojis
+            emoji_dir: env::var("EMOJI_DIR").unwrap_or_else(|_| "static/emojis".to_string()),
+        })
+    }
+}

src/db/mod.rs

···
+pub mod models;
+pub mod queries;
+pub mod webhooks;
+
+pub use models::{AuthSession, AuthState, StatusFromDb};
+pub use queries::{get_frequent_emojis, get_user_preferences, save_user_preferences};
+pub use webhooks::{
+    Webhook, create_webhook, delete_webhook, get_user_webhooks, rotate_webhook_secret,
+    update_webhook,
+};
+
+use async_sqlite::Pool;
+
+/// Creates the tables in the db.
+pub async fn create_tables_in_database(pool: &Pool) -> Result<(), async_sqlite::Error> {
+    pool.conn(move |conn| {
+        conn.execute("PRAGMA foreign_keys = ON", []).unwrap();
+
+        // status
+        conn.execute(
+            "CREATE TABLE IF NOT EXISTS status (
+            uri TEXT PRIMARY KEY,
+            authorDid TEXT NOT NULL,
+            emoji TEXT NOT NULL,
+            text TEXT,
+            startedAt INTEGER NOT NULL,
+            expiresAt INTEGER,
+            indexedAt INTEGER NOT NULL
+        )",
+            [],
+        )
+        .unwrap();
+
+        // auth_session
+        conn.execute(
+            "CREATE TABLE IF NOT EXISTS auth_session (
+            key TEXT PRIMARY KEY,
+            session TEXT NOT NULL
+        )",
+            [],
+        )
+        .unwrap();
+
+        // auth_state
+        conn.execute(
+            "CREATE TABLE IF NOT EXISTS auth_state (
+            key TEXT PRIMARY KEY,
+            state TEXT NOT NULL
+        )",
+            [],
+        )
+        .unwrap();
+
+        // user_preferences
+        conn.execute(
+            "CREATE TABLE IF NOT EXISTS user_preferences (
+            did TEXT PRIMARY KEY,
+            font_family TEXT DEFAULT 'mono',
+            accent_color TEXT DEFAULT '#1DA1F2',
+            updated_at INTEGER NOT NULL
+        )",
+            [],
+        )
+        .unwrap();
+
+        // webhooks
+        conn.execute(
+            "CREATE TABLE IF NOT EXISTS webhooks (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            did TEXT NOT NULL,
+            url TEXT NOT NULL,
+            secret TEXT NOT NULL,
+            events TEXT DEFAULT '*',
+            active BOOLEAN DEFAULT TRUE,
+            created_at INTEGER NOT NULL,
+            updated_at INTEGER NOT NULL
+        )",
+            [],
+        )
+        .unwrap();
+
+        // index for fast lookups by did
+        conn.execute(
+            "CREATE INDEX IF NOT EXISTS idx_webhooks_did ON webhooks(did)",
+            [],
+        )
+        .unwrap();
+
+        // Note: custom_emojis table removed - we serve emojis directly from static/emojis/ directory
+
+        // Add indexes for performance optimization
+        // Index on startedAt for feed queries (ORDER BY startedAt DESC)
+        conn.execute(
+            "CREATE INDEX IF NOT EXISTS idx_status_startedAt ON status(startedAt DESC)",
+            [],
+        )
+        .unwrap();
+
+        // Composite index for user status queries (WHERE authorDid = ? ORDER BY startedAt DESC)
+        conn.execute(
+            "CREATE INDEX IF NOT EXISTS idx_status_authorDid_startedAt ON status(authorDid, startedAt DESC)",
+            [],
+        )
+        .unwrap();
+
+        // Add hidden column for moderation (won't error if already exists)
+        let _ = conn.execute(
+            "ALTER TABLE status ADD COLUMN hidden BOOLEAN DEFAULT FALSE",
+            [],
+        );
+
+        Ok(())
+    })
+    .await?;
+    Ok(())
+}

src/db/models.rs

···
+use actix_web::web::Data;
+use async_sqlite::{
+    Pool,
+    rusqlite::{Error, Row, types::Type},
+};
+use atrium_api::types::string::Did;
+use chrono::{DateTime, Utc};
+use serde::{Deserialize, Serialize};
+use std::{
+    sync::Arc,
+    time::{SystemTime, UNIX_EPOCH},
+};
+
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct StatusFromDb {
+    pub uri: String,
+    pub author_did: String,
+    pub status: String, // Keep for backwards compat, but this is the emoji
+    pub text: Option<String>,
+    pub started_at: DateTime<Utc>,
+    pub expires_at: Option<DateTime<Utc>>,
+    pub indexed_at: DateTime<Utc>,
+    pub handle: Option<String>,
+}
+
+impl StatusFromDb {
+    /// Creates a new [StatusFromDb]
+    pub fn new(uri: String, author_did: String, status: String) -> Self {
+        let now = chrono::Utc::now();
+        Self {
+            uri,
+            author_did,
+            status,
+            text: None,
+            started_at: now,
+            expires_at: None,
+            indexed_at: now,
+            handle: None,
+        }
+    }
+
+    /// Helper to map from [Row] to [StatusDb]
+    fn map_from_row(row: &Row) -> Result<Self, async_sqlite::rusqlite::Error> {
+        Ok(Self {
+            uri: row.get(0)?,
+            author_did: row.get(1)?,
+            status: row.get(2)?, // emoji
+            text: row.get(3)?,
+            //DateTimes are stored as INTEGERS then parsed into a DateTime<UTC>
+            started_at: {
+                let timestamp: i64 = row.get(4)?;
+                DateTime::from_timestamp(timestamp, 0).ok_or_else(|| {
+                    Error::InvalidColumnType(4, "Invalid timestamp".parse().unwrap(), Type::Text)
+                })?
+            },
+            expires_at: {
+                let timestamp: Option<i64> = row.get(5)?;
+                timestamp.and_then(|ts| DateTime::from_timestamp(ts, 0))
+            },
+            //DateTimes are stored as INTEGERS then parsed into a DateTime<UTC>
+            indexed_at: {
+                let timestamp: i64 = row.get(6)?;
+                DateTime::from_timestamp(timestamp, 0).ok_or_else(|| {
+                    Error::InvalidColumnType(6, "Invalid timestamp".parse().unwrap(), Type::Text)
+                })?
+            },
+            handle: None,
+        })
+    }
+
+    /// Check if status is expired
+    pub fn is_expired(&self) -> bool {
+        if let Some(expires_at) = self.expires_at {
+            Utc::now() > expires_at
+        } else {
+            false
+        }
+    }
+
+    /// Saves the [StatusDb]
+    pub async fn save(&self, pool: Data<Arc<Pool>>) -> Result<(), async_sqlite::Error> {
+        let cloned_self = self.clone();
+        pool.conn(move |conn| {
+            conn.execute(
+                "INSERT INTO status (uri, authorDid, emoji, text, startedAt, expiresAt, indexedAt) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7)",
+                async_sqlite::rusqlite::params![
+                    &cloned_self.uri,
+                    &cloned_self.author_did,
+                    &cloned_self.status,  // emoji value
+                    &cloned_self.text,
+                    &cloned_self.started_at.timestamp().to_string(),
+                    &cloned_self.expires_at.map(|e| e.timestamp().to_string()),
+                    &cloned_self.indexed_at.timestamp().to_string(),
+                ],
+            )
+        })
+            .await?;
+        Ok(())
+    }
+
+    /// Saves or updates a status by its did(uri)
+    pub async fn save_or_update(&self, pool: &Pool) -> Result<(), async_sqlite::Error> {
+        let cloned_self = self.clone();
+        pool.conn(move |conn| {
+            //We check to see if the session already exists, if so we need to update not insert
+            let mut stmt = conn.prepare("SELECT COUNT(*) FROM status WHERE uri = ?1")?;
+            let count: i64 = stmt.query_row([&cloned_self.uri], |row| row.get(0))?;
+            match count > 0 {
+                true => {
+                    let mut update_stmt =
+                        conn.prepare("UPDATE status SET emoji = ?2, text = ?3, startedAt = ?4, expiresAt = ?5, indexedAt = ?6 WHERE uri = ?1")?;
+                    update_stmt.execute(async_sqlite::rusqlite::params![
+                        &cloned_self.uri,
+                        &cloned_self.status,
+                        &cloned_self.text,
+                        &cloned_self.started_at.timestamp().to_string(),
+                        &cloned_self.expires_at.map(|e| e.timestamp().to_string()),
+                        &cloned_self.indexed_at.timestamp().to_string()
+                    ])?;
+                    Ok(())
+                }
+                false => {
+                    conn.execute(
+                        "INSERT INTO status (uri, authorDid, emoji, text, startedAt, expiresAt, indexedAt) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7)",
+                        async_sqlite::rusqlite::params![
+                            &cloned_self.uri,
+                            &cloned_self.author_did,
+                            &cloned_self.status,  // emoji value
+                            &cloned_self.text,
+                            &cloned_self.started_at.timestamp().to_string(),
+                            &cloned_self.expires_at.map(|e| e.timestamp().to_string()),
+                            &cloned_self.indexed_at.timestamp().to_string(),
+                        ],
+                    )?;
+                    Ok(())
+                }
+            }
+        })
+        .await?;
+        Ok(())
+    }
+
+    pub async fn delete_by_uri(pool: &Pool, uri: String) -> Result<(), async_sqlite::Error> {
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("DELETE FROM status WHERE uri = ?1")?;
+            stmt.execute([&uri])
+        })
+        .await?;
+        Ok(())
+    }
+
+    /// Loads the last 10 statuses we have saved
+    #[allow(dead_code)]
+    pub async fn load_latest_statuses(
+        pool: &Data<Arc<Pool>>,
+    ) -> Result<Vec<Self>, async_sqlite::Error> {
+        pool
+            .conn(move |conn| {
+                let mut stmt =
+                    conn.prepare("SELECT * FROM status WHERE (hidden IS NULL OR hidden = FALSE) ORDER BY startedAt DESC LIMIT 10")?;
+                let status_iter = stmt
+                    .query_map([], |row| Ok(Self::map_from_row(row).unwrap()))
+                    .unwrap();
+
+                let mut statuses = Vec::new();
+                for status in status_iter {
+                    statuses.push(status?);
+                }
+                Ok(statuses)
+            })
+            .await
+    }
+
+    /// Loads paginated statuses for infinite scrolling
+    #[allow(dead_code)]
+    pub async fn load_statuses_paginated(
+        pool: &Data<Arc<Pool>>,
+        offset: i32,
+        limit: i32,
+    ) -> Result<Vec<Self>, async_sqlite::Error> {
+        pool
+            .conn(move |conn| {
+                let mut stmt = conn.prepare(
+                    "SELECT * FROM status WHERE (hidden IS NULL OR hidden = FALSE) ORDER BY startedAt DESC LIMIT ?1 OFFSET ?2"
+                )?;
+                let status_iter = stmt
+                    .query_map(async_sqlite::rusqlite::params![limit, offset], |row| {
+                        Ok(Self::map_from_row(row).unwrap())
+                    })
+                    .unwrap();
+
+                let mut statuses = Vec::new();
+                for status in status_iter {
+                    statuses.push(status?);
+                }
+                Ok(statuses)
+            })
+            .await
+    }
+
+    /// Loads the logged-in users current status
+    pub async fn my_status(
+        pool: &Data<Arc<Pool>>,
+        did: &Did,
+    ) -> Result<Option<Self>, async_sqlite::Error> {
+        let did = did.to_string();
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare(
+                "SELECT * FROM status WHERE authorDid = ?1 ORDER BY startedAt DESC LIMIT 1",
+            )?;
+            stmt.query_row([did.as_str()], Self::map_from_row)
+                .map(Some)
+                .or_else(|err| {
+                    if err == async_sqlite::rusqlite::Error::QueryReturnedNoRows {
+                        Ok(None)
+                    } else {
+                        Err(err)
+                    }
+                })
+        })
+        .await
+    }
+
+    /// Loads user's status history
+    pub async fn load_user_statuses(
+        pool: &Data<Arc<Pool>>,
+        did: &Did,
+        limit: usize,
+    ) -> Result<Vec<Self>, async_sqlite::Error> {
+        let did = did.to_string();
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare(
+                "SELECT * FROM status WHERE authorDid = ?1 ORDER BY startedAt DESC LIMIT ?2",
+            )?;
+            let status_iter = stmt.query_map([did.as_str(), &limit.to_string()], |row| {
+                Self::map_from_row(row)
+            })?;
+            let mut statuses = vec![];
+            for status in status_iter {
+                statuses.push(status?);
+            }
+            Ok(statuses)
+        })
+        .await
+    }
+
+    /// ui helper to show a handle or did if the handle cannot be found
+    pub fn author_display_name(&self) -> String {
+        match self.handle.as_ref() {
+            Some(handle) => handle.to_string(),
+            None => self.author_did.to_string(),
+        }
+    }
+}
+
+/// AuthSession table data type
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct AuthSession {
+    pub key: String,
+    pub session: String,
+}
+
+impl AuthSession {
+    /// Creates a new [AuthSession]
+    pub fn new<V>(key: String, session: V) -> Self
+    where
+        V: Serialize,
+    {
+        let session = serde_json::to_string(&session).unwrap();
+        Self {
+            key: key.to_string(),
+            session,
+        }
+    }
+
+    /// Helper to map from [Row] to [AuthSession]
+    fn map_from_row(row: &Row) -> Result<Self, Error> {
+        let key: String = row.get(0)?;
+        let session: String = row.get(1)?;
+        Ok(Self { key, session })
+    }
+
+    /// Gets a session by the users did(key)
+    pub async fn get_by_did(pool: &Pool, did: String) -> Result<Option<Self>, async_sqlite::Error> {
+        let did = Did::new(did).unwrap();
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("SELECT * FROM auth_session WHERE key = ?1")?;
+            stmt.query_row([did.as_str()], Self::map_from_row)
+                .map(Some)
+                .or_else(|err| {
+                    if err == Error::QueryReturnedNoRows {
+                        Ok(None)
+                    } else {
+                        Err(err)
+                    }
+                })
+        })
+        .await
+    }
+
+    /// Saves or updates the session by its did(key)
+    pub async fn save_or_update(&self, pool: &Pool) -> Result<(), async_sqlite::Error> {
+        let cloned_self = self.clone();
+        pool.conn(move |conn| {
+            //We check to see if the session already exists, if so we need to update not insert
+            let mut stmt = conn.prepare("SELECT COUNT(*) FROM auth_session WHERE key = ?1")?;
+            let count: i64 = stmt.query_row([&cloned_self.key], |row| row.get(0))?;
+            match count > 0 {
+                true => {
+                    let mut update_stmt =
+                        conn.prepare("UPDATE auth_session SET session = ?2 WHERE key = ?1")?;
+                    update_stmt.execute([&cloned_self.key, &cloned_self.session])?;
+                    Ok(())
+                }
+                false => {
+                    conn.execute(
+                        "INSERT INTO auth_session (key, session) VALUES (?1, ?2)",
+                        [&cloned_self.key, &cloned_self.session],
+                    )?;
+                    Ok(())
+                }
+            }
+        })
+        .await?;
+        Ok(())
+    }
+
+    /// Deletes the session by did
+    pub async fn delete_by_did(pool: &Pool, did: String) -> Result<(), async_sqlite::Error> {
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("DELETE FROM auth_session WHERE key = ?1")?;
+            stmt.execute([&did])
+        })
+        .await?;
+        Ok(())
+    }
+
+    /// Deletes all the sessions
+    pub async fn delete_all(pool: &Pool) -> Result<(), async_sqlite::Error> {
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("DELETE FROM auth_session")?;
+            stmt.execute([])
+        })
+        .await?;
+        Ok(())
+    }
+}
+
+/// AuthState table datatype
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct AuthState {
+    pub key: String,
+    pub state: String,
+}
+
+impl AuthState {
+    /// Creates a new [AuthState]
+    pub fn new<V>(key: String, state: V) -> Self
+    where
+        V: Serialize,
+    {
+        let state = serde_json::to_string(&state).unwrap();
+        Self {
+            key: key.to_string(),
+            state,
+        }
+    }
+
+    /// Helper to map from [Row] to [AuthState]
+    fn map_from_row(row: &Row) -> Result<Self, Error> {
+        let key: String = row.get(0)?;
+        let state: String = row.get(1)?;
+        Ok(Self { key, state })
+    }
+
+    /// Gets a state by the users key
+    pub async fn get_by_key(pool: &Pool, key: String) -> Result<Option<Self>, async_sqlite::Error> {
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("SELECT * FROM auth_state WHERE key = ?1")?;
+            stmt.query_row([key.as_str()], Self::map_from_row)
+                .map(Some)
+                .or_else(|err| {
+                    if err == Error::QueryReturnedNoRows {
+                        Ok(None)
+                    } else {
+                        Err(err)
+                    }
+                })
+        })
+        .await
+    }
+
+    /// Saves or updates the state by its key
+    pub async fn save_or_update(&self, pool: &Pool) -> Result<(), async_sqlite::Error> {
+        let cloned_self = self.clone();
+        pool.conn(move |conn| {
+            //We check to see if the state already exists, if so we need to update
+            let mut stmt = conn.prepare("SELECT COUNT(*) FROM auth_state WHERE key = ?1")?;
+            let count: i64 = stmt.query_row([&cloned_self.key], |row| row.get(0))?;
+            match count > 0 {
+                true => {
+                    let mut update_stmt =
+                        conn.prepare("UPDATE auth_state SET state = ?2 WHERE key = ?1")?;
+                    update_stmt.execute([&cloned_self.key, &cloned_self.state])?;
+                    Ok(())
+                }
+                false => {
+                    conn.execute(
+                        "INSERT INTO auth_state (key, state) VALUES (?1, ?2)",
+                        [&cloned_self.key, &cloned_self.state],
+                    )?;
+                    Ok(())
+                }
+            }
+        })
+        .await?;
+        Ok(())
+    }
+
+    pub async fn delete_by_key(pool: &Pool, key: String) -> Result<(), async_sqlite::Error> {
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("DELETE FROM auth_state WHERE key = ?1")?;
+            stmt.execute([&key])
+        })
+        .await?;
+        Ok(())
+    }
+
+    pub async fn delete_all(pool: &Pool) -> Result<(), async_sqlite::Error> {
+        pool.conn(move |conn| {
+            let mut stmt = conn.prepare("DELETE FROM auth_state")?;
+            stmt.execute([])
+        })
+        .await?;
+        Ok(())
+    }
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct UserPreferences {
+    pub did: String,
+    pub font_family: String,
+    pub accent_color: String,
+    pub updated_at: i64,
+}
+
+impl Default for UserPreferences {
+    fn default() -> Self {
+        Self {
+            did: String::new(),
+            font_family: "mono".to_string(),
+            accent_color: "#1DA1F2".to_string(),
+            updated_at: SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap()
+                .as_secs() as i64,
+        }
+    }
+}

src/db/queries.rs

···
+use async_sqlite::Pool;
+
+use super::models::UserPreferences;
+
+/// Get the most frequently used emojis from all statuses
+pub async fn get_frequent_emojis(
+    pool: &Pool,
+    limit: usize,
+) -> Result<Vec<String>, async_sqlite::Error> {
+    pool.conn(move |conn| {
+        let mut stmt = conn.prepare(
+            "SELECT emoji, COUNT(*) as count 
+             FROM status 
+             GROUP BY emoji 
+             ORDER BY count DESC 
+             LIMIT ?1",
+        )?;
+
+        let emoji_iter = stmt.query_map([limit], |row| row.get::<_, String>(0))?;
+
+        let mut emojis = Vec::new();
+        for emoji in emoji_iter {
+            emojis.push(emoji?);
+        }
+
+        Ok(emojis)
+    })
+    .await
+}
+
+/// Get user preferences for a given DID
+pub async fn get_user_preferences(
+    pool: &Pool,
+    did: &str,
+) -> Result<UserPreferences, async_sqlite::Error> {
+    let did = did.to_string();
+    pool.conn(move |conn| {
+        let mut stmt = conn.prepare(
+            "SELECT did, font_family, accent_color, updated_at 
+             FROM user_preferences 
+             WHERE did = ?1",
+        )?;
+
+        let result = stmt.query_row([&did], |row| {
+            Ok(UserPreferences {
+                did: row.get(0)?,
+                font_family: row.get(1)?,
+                accent_color: row.get(2)?,
+                updated_at: row.get(3)?,
+            })
+        });
+
+        match result {
+            Ok(prefs) => Ok(prefs),
+            Err(async_sqlite::rusqlite::Error::QueryReturnedNoRows) => {
+                // Return default preferences for new users
+                Ok(UserPreferences {
+                    did: did.clone(),
+                    ..Default::default()
+                })
+            }
+            Err(e) => Err(e),
+        }
+    })
+    .await
+}
+
+/// Save user preferences
+pub async fn save_user_preferences(
+    pool: &Pool,
+    prefs: &UserPreferences,
+) -> Result<(), async_sqlite::Error> {
+    let prefs = prefs.clone();
+    pool.conn(move |conn| {
+        conn.execute(
+            "INSERT OR REPLACE INTO user_preferences (did, font_family, accent_color, updated_at) 
+             VALUES (?1, ?2, ?3, ?4)",
+            (
+                &prefs.did,
+                &prefs.font_family,
+                &prefs.accent_color,
+                &prefs.updated_at,
+            ),
+        )?;
+        Ok(())
+    })
+    .await
+}

src/db/webhooks.rs

···
+use async_sqlite::Pool;
+use rand::{Rng, distributions::Alphanumeric};
+use serde::{Deserialize, Serialize};
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Webhook {
+    pub id: i64,
+    pub did: String,
+    pub url: String,
+    pub secret: String,
+    pub events: String, // comma-separated or "*"
+    pub active: bool,
+    pub created_at: i64,
+    pub updated_at: i64,
+}
+
+impl Webhook {
+    fn now() -> i64 {
+        std::time::SystemTime::now()
+            .duration_since(std::time::UNIX_EPOCH)
+            .unwrap()
+            .as_secs() as i64
+    }
+
+    pub fn masked_secret(&self) -> String {
+        let len = self.secret.len();
+        if len <= 4 {
+            return "****".to_string();
+        }
+        let suffix = &self.secret[len - 4..];
+        format!("****{}", suffix)
+    }
+}
+
+pub fn generate_secret() -> String {
+    rand::thread_rng()
+        .sample_iter(&Alphanumeric)
+        .take(40)
+        .map(char::from)
+        .collect()
+}
+
+pub async fn get_user_webhooks(
+    pool: &Pool,
+    did: &str,
+) -> Result<Vec<Webhook>, async_sqlite::Error> {
+    let did = did.to_string();
+    pool.conn(move |conn| {
+        let mut stmt = conn.prepare(
+            "SELECT id, did, url, secret, events, COALESCE(active, 1), created_at, updated_at FROM webhooks WHERE did = ?1 ORDER BY id DESC",
+        )?;
+        let iter = stmt.query_map([&did], |row| {
+            Ok(Webhook {
+                id: row.get(0)?,
+                did: row.get(1)?,
+                url: row.get(2)?,
+                secret: row.get(3)?,
+                events: row.get(4)?,
+                active: row.get::<_, Option<bool>>(5)?.unwrap_or(true),
+                created_at: row.get(6)?,
+                updated_at: row.get(7)?,
+            })
+        })?;
+        let mut v = Vec::new();
+        for item in iter {
+            v.push(item?);
+        }
+        Ok(v)
+    })
+    .await
+}
+
+pub async fn create_webhook(
+    pool: &Pool,
+    did: &str,
+    url: &str,
+    secret_opt: Option<&str>,
+    events: Option<&str>,
+) -> Result<(i64, String), async_sqlite::Error> {
+    let secret = secret_opt.unwrap_or(&generate_secret()).to_string();
+    let now = Webhook::now();
+    let did_owned = did.to_string();
+    let url_owned = url.to_string();
+    let events_owned = events.unwrap_or("*").to_string();
+    let secret_for_insert = secret.clone();
+
+    let id = pool
+        .conn(move |conn| {
+            conn.execute(
+                "INSERT INTO webhooks (did, url, secret, events, active, created_at, updated_at) VALUES (?1, ?2, ?3, ?4, 1, ?5, ?6)",
+                (&did_owned, &url_owned, &secret_for_insert, &events_owned, now, now),
+            )?;
+            Ok(conn.last_insert_rowid())
+        })
+        .await?;
+    Ok((id, secret))
+}
+
+pub async fn update_webhook(
+    pool: &Pool,
+    did: &str,
+    id: i64,
+    url: Option<&str>,
+    events: Option<&str>,
+    active: Option<bool>,
+) -> Result<(), async_sqlite::Error> {
+    let now = Webhook::now();
+    let did_owned = did.to_string();
+    let url_owned = url.map(|s| s.to_string());
+    let events_owned = events.map(|s| s.to_string());
+    pool.conn(move |conn| {
+        // Ensure ownership
+        let mut check = conn.prepare("SELECT COUNT(*) FROM webhooks WHERE id = ?1 AND did = ?2")?;
+        let count: i64 = check.query_row((id, &did_owned), |row| row.get(0))?;
+        if count == 0 {
+            return Ok(0);
+        }
+
+        // Build dynamic update
+        let mut fields = Vec::new();
+        if url_owned.is_some() {
+            fields.push("url = ?");
+        }
+        if events_owned.is_some() {
+            fields.push("events = ?");
+        }
+        if active.is_some() {
+            fields.push("active = ?");
+        }
+        fields.push("updated_at = ?");
+        let sql = format!(
+            "UPDATE webhooks SET {} WHERE id = ? AND did = ?",
+            fields.join(", ")
+        );
+
+        let mut stmt = conn.prepare(&sql)?;
+        let mut params: Vec<Box<dyn async_sqlite::rusqlite::ToSql>> = Vec::new();
+        if let Some(u) = url_owned {
+            params.push(Box::new(u));
+        }
+        if let Some(e) = events_owned {
+            params.push(Box::new(e));
+        }
+        if let Some(a) = active {
+            params.push(Box::new(a));
+        }
+        params.push(Box::new(now));
+        params.push(Box::new(id));
+        params.push(Box::new(did_owned));
+
+        let params_ref: Vec<&dyn async_sqlite::rusqlite::ToSql> =
+            params.iter().map(|b| &**b).collect();
+        let _ = stmt.execute(params_ref.as_slice())?;
+        Ok(1)
+    })
+    .await?;
+    Ok(())
+}
+
+pub async fn rotate_webhook_secret(
+    pool: &Pool,
+    did: &str,
+    id: i64,
+) -> Result<String, async_sqlite::Error> {
+    let new_secret = generate_secret();
+    let now = Webhook::now();
+    let did_owned = did.to_string();
+    let new_for_update = new_secret.clone();
+    pool.conn(move |conn| {
+        let mut stmt = conn.prepare(
+            "UPDATE webhooks SET secret = ?1, updated_at = ?2 WHERE id = ?3 AND did = ?4",
+        )?;
+        let _ = stmt.execute((&new_for_update, now, id, &did_owned))?;
+        Ok(())
+    })
+    .await?;
+    Ok(new_secret)
+}
+
+pub async fn delete_webhook(pool: &Pool, did: &str, id: i64) -> Result<(), async_sqlite::Error> {
+    let did_owned = did.to_string();
+    pool.conn(move |conn| {
+        let mut stmt = conn.prepare("DELETE FROM webhooks WHERE id = ?1 AND did = ?2")?;
+        let _ = stmt.execute((id, &did_owned))?;
+        Ok(())
+    })
+    .await?;
+    Ok(())
+}

src/emoji.rs

···
+use once_cell::sync::OnceCell;
+use std::{collections::HashSet, fs, path::Path, sync::Arc};
+
+use crate::config::Config;
+
+/// Ensure the runtime emoji directory exists, and sync new emojis from the bundled
+/// `static/emojis` directory. Only copies files that don't already exist in the runtime dir,
+/// preserving manual uploads and deletions.
+pub fn init_runtime_dir(config: &Config) {
+    let runtime_emoji_dir = &config.emoji_dir;
+    let bundled_emoji_dir = "static/emojis";
+
+    if let Err(e) = fs::create_dir_all(runtime_emoji_dir) {
+        log::warn!(
+            "Failed to ensure emoji directory exists at {}: {}",
+            runtime_emoji_dir,
+            e
+        );
+        return;
+    }
+
+    // Skip sync if runtime dir is the same as bundled (local dev)
+    if runtime_emoji_dir == bundled_emoji_dir {
+        return;
+    }
+
+    if !Path::new(bundled_emoji_dir).exists() {
+        return;
+    }
+
+    match fs::read_dir(bundled_emoji_dir) {
+        Ok(entries) => {
+            let mut copied = 0;
+            for entry in entries.flatten() {
+                let path = entry.path();
+                if let Some(name) = path.file_name() {
+                    let dest = Path::new(runtime_emoji_dir).join(name);
+                    // Only copy if destination doesn't exist (preserves manual changes)
+                    if path.is_file() && !dest.exists() {
+                        match fs::copy(&path, &dest) {
+                            Ok(_) => copied += 1,
+                            Err(err) => {
+                                log::warn!("Failed to sync emoji {:?} -> {:?}: {}", path, dest, err)
+                            }
+                        }
+                    }
+                }
+            }
+            if copied > 0 {
+                log::info!(
+                    "Synced {} new emoji(s) from {} to {}",
+                    copied,
+                    bundled_emoji_dir,
+                    runtime_emoji_dir
+                );
+            }
+        }
+        Err(err) => log::warn!(
+            "Failed to read bundled emoji directory {}: {}",
+            bundled_emoji_dir,
+            err
+        ),
+    }
+}
+
+#[allow(dead_code)]
+static BUILTIN_SLUGS: OnceCell<Arc<HashSet<String>>> = OnceCell::new();
+
+#[allow(dead_code)]
+async fn load_builtin_slugs_inner() -> Arc<HashSet<String>> {
+    // Fetch emoji data and collect first short_name as slug
+    let url = "https://cdn.jsdelivr.net/npm/emoji-datasource@15.1.0/emoji.json";
+    let client = reqwest::Client::new();
+    let mut set = HashSet::new();
+    if let Ok(resp) = client.get(url).send().await {
+        if let Ok(json) = resp.json::<serde_json::Value>().await {
+            if let Some(arr) = json.as_array() {
+                for item in arr {
+                    if let Some(shorts) = item.get("short_names").and_then(|v| v.as_array()) {
+                        if let Some(first) = shorts.first().and_then(|v| v.as_str()) {
+                            set.insert(first.to_lowercase());
+                        }
+                    } else if let Some(name) = item.get("name").and_then(|v| v.as_str()) {
+                        // Fallback: slugify the name
+                        let slug: String = name
+                            .chars()
+                            .map(|c| {
+                                if c.is_ascii_alphanumeric() {
+                                    c.to_ascii_lowercase()
+                                } else {
+                                    '-'
+                                }
+                            })
+                            .collect::<String>()
+                            .trim_matches('-')
+                            .to_string();
+                        if !slug.is_empty() {
+                            set.insert(slug);
+                        }
+                    }
+                }
+            }
+        }
+    }
+    Arc::new(set)
+}
+
+#[allow(dead_code)]
+pub async fn is_builtin_slug(name: &str) -> bool {
+    let name = name.to_lowercase();
+    if let Some(cache) = BUILTIN_SLUGS.get() {
+        return cache.contains(&name);
+    }
+    let set = load_builtin_slugs_inner().await;
+    let contains = set.contains(&name);
+    let _ = BUILTIN_SLUGS.set(set);
+    contains
+}

src/error_handler.rs

···
+use actix_web::{HttpResponse, error::ResponseError, http::StatusCode};
+use std::fmt;
+
+#[derive(Debug)]
+pub enum AppError {
+    InternalError(String),
+    DatabaseError(String),
+    AuthenticationError(String),
+    #[allow(dead_code)] // Keep for potential future use
+    ValidationError(String),
+    #[allow(dead_code)] // Keep for potential future use
+    NotFound(String),
+    RateLimitExceeded,
+}
+
+impl fmt::Display for AppError {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            AppError::InternalError(msg) => write!(f, "Internal server error: {}", msg),
+            AppError::DatabaseError(msg) => write!(f, "Database error: {}", msg),
+            AppError::AuthenticationError(msg) => write!(f, "Authentication error: {}", msg),
+            AppError::ValidationError(msg) => write!(f, "Validation error: {}", msg),
+            AppError::NotFound(msg) => write!(f, "Not found: {}", msg),
+            AppError::RateLimitExceeded => write!(f, "Rate limit exceeded"),
+        }
+    }
+}
+
+impl ResponseError for AppError {
+    fn error_response(&self) -> HttpResponse {
+        let (status_code, error_message) = match self {
+            AppError::InternalError(msg) => (StatusCode::INTERNAL_SERVER_ERROR, msg.clone()),
+            AppError::DatabaseError(_) => (
+                StatusCode::INTERNAL_SERVER_ERROR,
+                "Database error occurred".to_string(),
+            ),
+            AppError::AuthenticationError(msg) => (StatusCode::UNAUTHORIZED, msg.clone()),
+            AppError::ValidationError(msg) => (StatusCode::BAD_REQUEST, msg.clone()),
+            AppError::NotFound(msg) => (StatusCode::NOT_FOUND, msg.clone()),
+            AppError::RateLimitExceeded => (
+                StatusCode::TOO_MANY_REQUESTS,
+                "Rate limit exceeded. Please try again later.".to_string(),
+            ),
+        };
+
+        HttpResponse::build(status_code).body(format!(
+            "Error {}: {}",
+            status_code.as_u16(),
+            error_message
+        ))
+    }
+
+    fn status_code(&self) -> StatusCode {
+        match self {
+            AppError::InternalError(_) | AppError::DatabaseError(_) => {
+                StatusCode::INTERNAL_SERVER_ERROR
+            }
+            AppError::AuthenticationError(_) => StatusCode::UNAUTHORIZED,
+            AppError::ValidationError(_) => StatusCode::BAD_REQUEST,
+            AppError::NotFound(_) => StatusCode::NOT_FOUND,
+            AppError::RateLimitExceeded => StatusCode::TOO_MANY_REQUESTS,
+        }
+    }
+}
+
+// Conversion helpers
+impl From<async_sqlite::Error> for AppError {
+    fn from(err: async_sqlite::Error) -> Self {
+        AppError::DatabaseError(err.to_string())
+    }
+}
+
+impl From<serde_json::Error> for AppError {
+    fn from(err: serde_json::Error) -> Self {
+        AppError::InternalError(err.to_string())
+    }
+}
+
+// Helper function to wrap results - removed as unused
+// If needed in the future, use: result.map_err(|e| ErrorInternalServerError(e))
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_error_display() {
+        let err = AppError::ValidationError("Invalid input".to_string());
+        assert_eq!(err.to_string(), "Validation error: Invalid input");
+
+        let err = AppError::RateLimitExceeded;
+        assert_eq!(err.to_string(), "Rate limit exceeded");
+    }
+
+    #[test]
+    fn test_error_status_codes() {
+        assert_eq!(
+            AppError::InternalError("test".to_string()).status_code(),
+            StatusCode::INTERNAL_SERVER_ERROR
+        );
+        assert_eq!(
+            AppError::ValidationError("test".to_string()).status_code(),
+            StatusCode::BAD_REQUEST
+        );
+        assert_eq!(
+            AppError::AuthenticationError("test".to_string()).status_code(),
+            StatusCode::UNAUTHORIZED
+        );
+        assert_eq!(
+            AppError::NotFound("test".to_string()).status_code(),
+            StatusCode::NOT_FOUND
+        );
+        assert_eq!(
+            AppError::RateLimitExceeded.status_code(),
+            StatusCode::TOO_MANY_REQUESTS
+        );
+    }
+}

src/ingester.rs

···
+use crate::db::StatusFromDb;
+use crate::lexicons;
+use anyhow::anyhow;
+use async_sqlite::Pool;
+use async_trait::async_trait;
+use log::error;
+use rocketman::{
+    connection::JetstreamConnection,
+    handler,
+    ingestion::LexiconIngestor,
+    options::JetstreamOptions,
+    types::event::{Event, Operation},
+};
+use serde_json::Value;
+use std::{
+    collections::HashMap,
+    sync::{Arc, Mutex},
+};
+
+#[async_trait]
+impl LexiconIngestor for StatusSphereIngester {
+    async fn ingest(&self, message: Event<Value>) -> anyhow::Result<()> {
+        if let Some(commit) = &message.commit {
+            //We manually construct the uri since Jetstream does not provide it
+            //at://{users did}/{collection: xyz.statusphere.status}{records key}
+            let record_uri = format!("at://{}/{}/{}", message.did, commit.collection, commit.rkey);
+            match commit.operation {
+                Operation::Create | Operation::Update => {
+                    if let Some(record) = &commit.record {
+                        let status_at_proto_record = serde_json::from_value::<
+                            lexicons::io::zzstoatzz::status::record::RecordData,
+                        >(record.clone())?;
+
+                        if let Some(ref _cid) = commit.cid {
+                            // Although esquema does not have full validation yet,
+                            // if you get to this point,
+                            // You know the data structure is the same
+                            let created = status_at_proto_record.created_at.as_ref();
+                            let right_now = chrono::Utc::now();
+                            // We save or update the record in the db
+                            StatusFromDb {
+                                uri: record_uri,
+                                author_did: message.did.clone(),
+                                status: status_at_proto_record.emoji.clone(),
+                                text: status_at_proto_record.text.clone(),
+                                expires_at: status_at_proto_record.expires.as_ref().map(|e| {
+                                    // Convert ATProto Datetime to chrono DateTime
+                                    chrono::DateTime::parse_from_rfc3339(e.as_str())
+                                        .ok()
+                                        .map(|dt| dt.with_timezone(&chrono::Utc))
+                                        .unwrap_or_else(chrono::Utc::now)
+                                }),
+                                started_at: created.to_utc(),
+                                indexed_at: right_now,
+                                handle: None,
+                            }
+                            .save_or_update(&self.db_pool)
+                            .await?;
+                        }
+                    }
+                }
+                Operation::Delete => StatusFromDb::delete_by_uri(&self.db_pool, record_uri).await?,
+            }
+        } else {
+            return Err(anyhow!("Message has no commit"));
+        }
+        Ok(())
+    }
+}
+pub struct StatusSphereIngester {
+    db_pool: Arc<Pool>,
+}
+
+pub async fn start_ingester(db_pool: Arc<Pool>) {
+    // init the builder
+    let opts = JetstreamOptions::builder()
+        // listen for our status record collection
+        .wanted_collections(vec!["io.zzstoatzz.status.record".parse().unwrap()])
+        .build();
+    // create the jetstream connector
+    let jetstream = JetstreamConnection::new(opts);
+
+    // create your ingesters
+    let mut ingesters: HashMap<String, Box<dyn LexiconIngestor + Send + Sync>> = HashMap::new();
+    ingesters.insert(
+        // your EXACT nsid
+        "io.zzstoatzz.status.record".parse().unwrap(),
+        Box::new(StatusSphereIngester { db_pool }),
+    );
+
+    // tracks the last message we've processed
+    let cursor: Arc<Mutex<Option<u64>>> = Arc::new(Mutex::new(None));
+
+    // get channels
+    let msg_rx = jetstream.get_msg_rx();
+    let reconnect_tx = jetstream.get_reconnect_tx();
+
+    // spawn a task to process messages from the queue.
+    // this is a simple implementation, you can use a more complex one based on needs.
+    let c_cursor = cursor.clone();
+    tokio::spawn(async move {
+        while let Ok(message) = msg_rx.recv_async().await {
+            if let Err(e) =
+                handler::handle_message(message, &ingesters, reconnect_tx.clone(), c_cursor.clone())
+                    .await
+            {
+                error!("Error processing message: {}", e);
+            };
+        }
+    });
+
+    // connect to jetstream
+    // retries internally, but may fail if there is an extreme error.
+    if let Err(e) = jetstream.connect(cursor.clone()).await {
+        error!("Failed to connect to Jetstream: {}", e);
+        std::process::exit(1);
+    }
+}

src/lexicons/app.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!Definitions for the `app` namespace.
+pub mod status;

src/lexicons/io.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!Definitions for the `io` namespace.
+pub mod zzstoatzz;

src/lexicons/io/zzstoatzz.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!Definitions for the `io.zzstoatzz` namespace.
+pub mod status;

src/lexicons/io/zzstoatzz/status.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!Definitions for the `io.zzstoatzz.status` namespace.
+pub mod record;
+#[derive(Debug)]
+pub struct Record;
+impl atrium_api::types::Collection for Record {
+    const NSID: &'static str = "io.zzstoatzz.status.record";
+    type Record = record::Record;
+}

src/lexicons/io/zzstoatzz/status/record.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!Definitions for the `io.zzstoatzz.status.record` namespace.
+use atrium_api::types::TryFromUnknown;
+#[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct RecordData {
+    ///When this status was created
+    pub created_at: atrium_api::types::string::Datetime,
+    ///Status emoji
+    pub emoji: String,
+    ///Optional expiration timestamp for this status
+    #[serde(skip_serializing_if = "core::option::Option::is_none")]
+    pub expires: core::option::Option<atrium_api::types::string::Datetime>,
+    ///Optional status text description
+    #[serde(skip_serializing_if = "core::option::Option::is_none")]
+    pub text: core::option::Option<String>,
+}
+pub type Record = atrium_api::types::Object<RecordData>;
+impl From<atrium_api::types::Unknown> for RecordData {
+    fn from(value: atrium_api::types::Unknown) -> Self {
+        Self::try_from_unknown(value).unwrap()
+    }
+}

src/lexicons/mod.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+pub mod io;
+pub mod record;

src/lexicons/record.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!A collection of known record types.
+#[derive(serde::Serialize, serde::Deserialize, Debug, Clone, PartialEq, Eq)]
+#[serde(tag = "$type")]
+pub enum KnownRecord {
+    #[serde(rename = "io.zzstoatzz.status.record")]
+    LexiconsIoZzstoatzzStatusRecord(Box<crate::lexicons::io::zzstoatzz::status::record::Record>),
+}
+impl From<crate::lexicons::io::zzstoatzz::status::record::Record> for KnownRecord {
+    fn from(record: crate::lexicons::io::zzstoatzz::status::record::Record) -> Self {
+        KnownRecord::LexiconsIoZzstoatzzStatusRecord(Box::new(record))
+    }
+}
+impl From<crate::lexicons::io::zzstoatzz::status::record::RecordData> for KnownRecord {
+    fn from(record_data: crate::lexicons::io::zzstoatzz::status::record::RecordData) -> Self {
+        KnownRecord::LexiconsIoZzstoatzzStatusRecord(Box::new(record_data.into()))
+    }
+}
+impl From<KnownRecord> for atrium_api::types::Unknown {
+    fn from(val: KnownRecord) -> Self {
+        atrium_api::types::TryIntoUnknown::try_into_unknown(&val).unwrap()
+    }
+}

src/lexicons/xyz.rs

···
+// @generated - This file is generated by esquema-codegen (forked from atrium-codegen). DO NOT EDIT.
+//!Definitions for the `xyz` namespace.
+pub mod statusphere;

src/main.rs

···
+#![allow(clippy::collapsible_if)]
+
+use crate::resolver::HickoryDnsTxtResolver;
+use crate::{
+    api::{HandleResolver, OAuthClientType},
+    db::create_tables_in_database,
+    ingester::start_ingester,
+    rate_limiter::RateLimiter,
+    storage::{SqliteSessionStore, SqliteStateStore},
+};
+use actix_files::Files;
+use actix_session::{SessionMiddleware, config::PersistentSession, storage::CookieSessionStore};
+use actix_web::{
+    App, HttpServer,
+    cookie::{self, Key},
+    middleware, web,
+};
+use async_sqlite::PoolBuilder;
+use atrium_identity::{
+    did::{CommonDidResolver, CommonDidResolverConfig, DEFAULT_PLC_DIRECTORY_URL},
+    handle::{AtprotoHandleResolver, AtprotoHandleResolverConfig},
+};
+use atrium_oauth::{
+    AtprotoClientMetadata, AtprotoLocalhostClientMetadata, AuthMethod, DefaultHttpClient,
+    GrantType, KnownScope, OAuthClient, OAuthClientConfig, OAuthResolverConfig, Scope,
+};
+use dotenv::dotenv;
+use std::{io::Error, sync::Arc, time::Duration};
+
+mod api;
+mod config;
+mod db;
+mod emoji;
+mod error_handler;
+mod ingester;
+#[allow(dead_code)]
+mod lexicons;
+mod rate_limiter;
+mod resolver;
+mod storage;
+mod templates;
+mod webhooks;
+
+#[actix_web::main]
+async fn main() -> std::io::Result<()> {
+    dotenv().ok();
+
+    // Load configuration
+    let config = config::Config::from_env().expect("Failed to load configuration");
+    let app_config = config.clone();
+
+    env_logger::init_from_env(env_logger::Env::new().default_filter_or(&config.log_level));
+    let host = config.server_host.clone();
+    let port = config.server_port;
+
+    // Use database URL from config
+    let db_connection_string = if config.database_url.starts_with("sqlite://") {
+        config
+            .database_url
+            .strip_prefix("sqlite://")
+            .unwrap_or(&config.database_url)
+            .to_string()
+    } else {
+        config.database_url.clone()
+    };
+
+    //Crates a db pool to share resources to the db
+    let pool = match PoolBuilder::new().path(db_connection_string).open().await {
+        Ok(pool) => pool,
+        Err(err) => {
+            log::error!("Error creating the sqlite pool: {}", err);
+            return Err(Error::other("sqlite pool could not be created."));
+        }
+    };
+
+    //Creates the DB and tables
+    create_tables_in_database(&pool)
+        .await
+        .expect("Could not create the database");
+
+    //Create a new handle resolver for the home page
+    let http_client = Arc::new(DefaultHttpClient::default());
+
+    let handle_resolver = CommonDidResolver::new(CommonDidResolverConfig {
+        plc_directory_url: DEFAULT_PLC_DIRECTORY_URL.to_string(),
+        http_client: http_client.clone(),
+    });
+    let handle_resolver: HandleResolver = Arc::new(handle_resolver);
+
+    // Create a new OAuth client
+    let http_client = Arc::new(DefaultHttpClient::default());
+
+    // Check if we're running in production (non-localhost) or locally
+    let is_production = !config.oauth_redirect_base.starts_with("http://localhost")
+        && !config.oauth_redirect_base.starts_with("http://127.0.0.1");
+
+    let client: OAuthClientType = if is_production {
+        // Production configuration with AtprotoClientMetadata
+        log::debug!(
+            "Configuring OAuth for production with URL: {}",
+            config.oauth_redirect_base
+        );
+
+        let oauth_config = OAuthClientConfig {
+            client_metadata: AtprotoClientMetadata {
+                client_id: format!("{}/oauth-client-metadata.json", config.oauth_redirect_base),
+                client_uri: Some(config.oauth_redirect_base.clone()),
+                redirect_uris: vec![format!("{}/oauth/callback", config.oauth_redirect_base)],
+                token_endpoint_auth_method: AuthMethod::None,
+                grant_types: vec![GrantType::AuthorizationCode, GrantType::RefreshToken],
+                scopes: vec![
+                    Scope::Known(KnownScope::Atproto),
+                    // Using granular scope for status records only
+                    // This replaces TransitionGeneric with specific permissions
+                    Scope::Unknown("repo:io.zzstoatzz.status.record".to_string()),
+                    // Need to read profiles for the feed page
+                    Scope::Unknown("rpc:app.bsky.actor.getProfile".to_string()),
+                ],
+                jwks_uri: None,
+                token_endpoint_auth_signing_alg: None,
+            },
+            keys: None,
+            resolver: OAuthResolverConfig {
+                did_resolver: CommonDidResolver::new(CommonDidResolverConfig {
+                    plc_directory_url: DEFAULT_PLC_DIRECTORY_URL.to_string(),
+                    http_client: http_client.clone(),
+                }),
+                handle_resolver: AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+                    dns_txt_resolver: HickoryDnsTxtResolver::default(),
+                    http_client: http_client.clone(),
+                }),
+                authorization_server_metadata: Default::default(),
+                protected_resource_metadata: Default::default(),
+            },
+            state_store: SqliteStateStore::new(pool.clone()),
+            session_store: SqliteSessionStore::new(pool.clone()),
+        };
+        Arc::new(OAuthClient::new(oauth_config).expect("failed to create OAuth client"))
+    } else {
+        // Local development configuration with AtprotoLocalhostClientMetadata
+        log::debug!(
+            "Configuring OAuth for local development at {}:{}",
+            host,
+            port
+        );
+
+        let oauth_config = OAuthClientConfig {
+            client_metadata: AtprotoLocalhostClientMetadata {
+                redirect_uris: Some(vec![format!(
+                    //This must match the endpoint you use the callback function
+                    "http://{host}:{port}/oauth/callback"
+                )]),
+                scopes: Some(vec![
+                    Scope::Known(KnownScope::Atproto),
+                    // Using granular scope for status records only
+                    // This replaces TransitionGeneric with specific permissions
+                    Scope::Unknown("repo:io.zzstoatzz.status.record".to_string()),
+                    // Need to read profiles for the feed page
+                    Scope::Unknown(
+                        "rpc:app.bsky.actor.getProfile?aud=did:web:api.bsky.app#bsky_appview"
+                            .to_string(),
+                    ),
+                    // Need to read following list for following feed
+                    Scope::Unknown(
+                        "rpc:app.bsky.graph.getFollows?aud=did:web:api.bsky.app".to_string(),
+                    ),
+                ]),
+            },
+            keys: None,
+            resolver: OAuthResolverConfig {
+                did_resolver: CommonDidResolver::new(CommonDidResolverConfig {
+                    plc_directory_url: DEFAULT_PLC_DIRECTORY_URL.to_string(),
+                    http_client: http_client.clone(),
+                }),
+                handle_resolver: AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+                    dns_txt_resolver: HickoryDnsTxtResolver::default(),
+                    http_client: http_client.clone(),
+                }),
+                authorization_server_metadata: Default::default(),
+                protected_resource_metadata: Default::default(),
+            },
+            state_store: SqliteStateStore::new(pool.clone()),
+            session_store: SqliteSessionStore::new(pool.clone()),
+        };
+        Arc::new(OAuthClient::new(oauth_config).expect("failed to create OAuth client"))
+    };
+    // Only start the firehose ingester if enabled (from config)
+    if app_config.enable_firehose {
+        let arc_pool = Arc::new(pool.clone());
+        log::debug!("Starting Jetstream firehose ingester");
+        //Spawns the ingester that listens for other's Statusphere updates
+        tokio::spawn(async move {
+            start_ingester(arc_pool).await;
+        });
+    } else {
+        log::debug!("Jetstream firehose disabled (set ENABLE_FIREHOSE=true to enable)");
+    }
+    let arc_pool = Arc::new(pool.clone());
+
+    // Create rate limiter - 30 requests per minute per IP
+    let rate_limiter = web::Data::new(RateLimiter::new(30, Duration::from_secs(60)));
+
+    // Initialize runtime emoji directory (kept out of main for clarity)
+    emoji::init_runtime_dir(&config);
+
+    log::debug!("starting HTTP server at http://{host}:{port}");
+    HttpServer::new(move || {
+        App::new()
+            .wrap(middleware::Logger::default())
+            .app_data(web::Data::new(client.clone()))
+            .app_data(web::Data::new(arc_pool.clone()))
+            .app_data(web::Data::new(handle_resolver.clone()))
+            .app_data(web::Data::new(app_config.clone()))
+            .app_data(rate_limiter.clone())
+            .wrap(
+                SessionMiddleware::builder(CookieSessionStore::default(), Key::from(&[0; 64]))
+                    //TODO will need to set to true in production
+                    .cookie_secure(false)
+                    // customize session and cookie expiration
+                    .session_lifecycle(
+                        PersistentSession::default().session_ttl(cookie::time::Duration::days(14)),
+                    )
+                    .build(),
+            )
+            .service(Files::new("/static", "static").show_files_listing())
+            .service(
+                Files::new("/emojis", app_config.emoji_dir.clone())
+                    .use_last_modified(true)
+                    .use_etag(true)
+                    .show_files_listing(),
+            )
+            .configure(api::configure_routes)
+    })
+    .bind((host.as_str(), port))?
+    .run()
+    .await
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::api::status_read::{api_feed, feed, get_custom_emojis};
+    use actix_web::{App, test};
+
+    #[actix_web::test]
+    async fn test_health_check() {
+        // Simple test to verify our test infrastructure works
+        assert_eq!(2 + 2, 4);
+    }
+
+    #[actix_web::test]
+    async fn test_custom_emojis_endpoint() {
+        // Test that the custom emojis endpoint returns JSON
+        let cfg = crate::config::Config::from_env().expect("load config");
+        let app = test::init_service(
+            App::new()
+                .app_data(web::Data::new(cfg))
+                .service(get_custom_emojis),
+        )
+        .await;
+
+        let req = test::TestRequest::get()
+            .uri("/api/custom-emojis")
+            .to_request();
+
+        let resp = test::call_service(&app, req).await;
+        assert!(resp.status().is_success());
+    }
+
+    #[actix_web::test]
+    async fn test_feed_html_has_status_list_container() {
+        use async_sqlite::PoolBuilder;
+        use atrium_identity::did::{
+            CommonDidResolver, CommonDidResolverConfig, DEFAULT_PLC_DIRECTORY_URL,
+        };
+        use atrium_oauth::DefaultHttpClient;
+
+        let cfg = crate::config::Config::from_env().expect("load config");
+        let pool = PoolBuilder::new()
+            .path(":memory:")
+            .open()
+            .await
+            .expect("pool");
+        let arc_pool = std::sync::Arc::new(pool);
+
+        let resolver = CommonDidResolver::new(CommonDidResolverConfig {
+            plc_directory_url: DEFAULT_PLC_DIRECTORY_URL.to_string(),
+            http_client: std::sync::Arc::new(DefaultHttpClient::default()),
+        });
+        let handle_resolver = std::sync::Arc::new(resolver);
+
+        let app = test::init_service(
+            App::new()
+                .app_data(web::Data::new(cfg))
+                .app_data(web::Data::new(arc_pool))
+                .app_data(web::Data::new(handle_resolver))
+                .service(feed),
+        )
+        .await;
+
+        let req = test::TestRequest::get().uri("/feed").to_request();
+        let resp = test::call_service(&app, req).await;
+        assert!(resp.status().is_success());
+        let body = test::read_body(resp).await;
+        let html = String::from_utf8(body.to_vec()).expect("utf8");
+        assert!(
+            html.contains("class=\"status-list\""),
+            "feed HTML must include an empty .status-list container for client-side population"
+        );
+    }
+
+    #[actix_web::test]
+    async fn test_api_feed_shape() {
+        use async_sqlite::PoolBuilder;
+        use atrium_identity::did::{
+            CommonDidResolver, CommonDidResolverConfig, DEFAULT_PLC_DIRECTORY_URL,
+        };
+        use atrium_oauth::DefaultHttpClient;
+        use serde_json::Value;
+
+        let pool = PoolBuilder::new()
+            .path(":memory:")
+            .open()
+            .await
+            .expect("pool");
+        let arc_pool = std::sync::Arc::new(pool);
+        let resolver = CommonDidResolver::new(CommonDidResolverConfig {
+            plc_directory_url: DEFAULT_PLC_DIRECTORY_URL.to_string(),
+            http_client: std::sync::Arc::new(DefaultHttpClient::default()),
+        });
+        let handle_resolver = std::sync::Arc::new(resolver);
+
+        let app = test::init_service(
+            App::new()
+                .app_data(web::Data::new(arc_pool))
+                .app_data(web::Data::new(handle_resolver))
+                .service(api_feed),
+        )
+        .await;
+
+        let req = test::TestRequest::get()
+            .uri("/api/feed?offset=0&limit=20")
+            .to_request();
+        let resp = test::call_service(&app, req).await;
+        assert!(resp.status().is_success());
+        let body = test::read_body(resp).await;
+        let v: Value = serde_json::from_slice(&body).expect("json");
+        assert!(
+            v.get("statuses").map(|s| s.is_array()).unwrap_or(false),
+            "statuses must be an array"
+        );
+        assert!(v.get("has_more").is_some(), "has_more present");
+        assert!(v.get("next_offset").is_some(), "next_offset present");
+    }
+
+    #[actix_web::test]
+    async fn test_rate_limiting() {
+        // Simple test of the rate limiter directly
+        let rate_limiter = RateLimiter::new(3, Duration::from_secs(60));
+
+        // Should allow first 3 requests from same IP
+        for i in 0..3 {
+            assert!(
+                rate_limiter.check_rate_limit("test_ip"),
+                "Request {} should be allowed",
+                i + 1
+            );
+        }
+
+        // 4th request should be blocked
+        assert!(
+            !rate_limiter.check_rate_limit("test_ip"),
+            "4th request should be blocked"
+        );
+
+        // Different IP should have its own limit
+        assert!(
+            rate_limiter.check_rate_limit("different_ip"),
+            "Different IP should have its own rate limit"
+        );
+    }
+
+    #[actix_web::test]
+    async fn test_error_handling() {
+        use crate::error_handler::AppError;
+        use actix_web::{ResponseError, http::StatusCode};
+
+        // Test that our error types return correct status codes
+        let err = AppError::ValidationError("test".to_string());
+        assert_eq!(err.status_code(), StatusCode::BAD_REQUEST);
+
+        let err = AppError::RateLimitExceeded;
+        assert_eq!(err.status_code(), StatusCode::TOO_MANY_REQUESTS);
+
+        let err = AppError::AuthenticationError("test".to_string());
+        assert_eq!(err.status_code(), StatusCode::UNAUTHORIZED);
+    }
+}

src/rate_limiter.rs

···
+use actix_web::HttpRequest;
+use std::collections::HashMap;
+use std::sync::{Arc, Mutex};
+use std::time::{Duration, Instant};
+
+#[derive(Clone)]
+pub struct RateLimiter {
+    buckets: Arc<Mutex<HashMap<String, TokenBucket>>>,
+    max_tokens: u32,
+    refill_rate: Duration,
+}
+
+struct TokenBucket {
+    tokens: u32,
+    last_refill: Instant,
+}
+
+impl RateLimiter {
+    pub fn new(max_tokens: u32, refill_rate: Duration) -> Self {
+        Self {
+            buckets: Arc::new(Mutex::new(HashMap::new())),
+            max_tokens,
+            refill_rate,
+        }
+    }
+
+    pub fn check_rate_limit(&self, key: &str) -> bool {
+        let mut buckets = self.buckets.lock().unwrap();
+        let now = Instant::now();
+
+        let bucket = buckets.entry(key.to_string()).or_insert(TokenBucket {
+            tokens: self.max_tokens,
+            last_refill: now,
+        });
+
+        // Refill tokens based on elapsed time
+        let elapsed = now.duration_since(bucket.last_refill);
+        let tokens_to_add = (elapsed.as_secs_f64() / self.refill_rate.as_secs_f64()
+            * self.max_tokens as f64) as u32;
+
+        if tokens_to_add > 0 {
+            bucket.tokens = (bucket.tokens + tokens_to_add).min(self.max_tokens);
+            bucket.last_refill = now;
+        }
+
+        // Check if we have tokens available
+        if bucket.tokens > 0 {
+            bucket.tokens -= 1;
+            true
+        } else {
+            false
+        }
+    }
+
+    pub fn get_client_key(req: &HttpRequest) -> String {
+        // Use IP address as the key for rate limiting
+        req.connection_info()
+            .realip_remote_addr()
+            .unwrap_or("unknown")
+            .to_string()
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::thread;
+
+    #[test]
+    fn test_rate_limiter_basic() {
+        let limiter = RateLimiter::new(5, Duration::from_secs(1));
+
+        // Should allow first 5 requests
+        for _ in 0..5 {
+            assert!(limiter.check_rate_limit("test_client"));
+        }
+
+        // 6th request should be blocked
+        assert!(!limiter.check_rate_limit("test_client"));
+    }
+
+    #[test]
+    fn test_rate_limiter_refill() {
+        let limiter = RateLimiter::new(2, Duration::from_millis(100));
+
+        // Use up tokens
+        assert!(limiter.check_rate_limit("test_client"));
+        assert!(limiter.check_rate_limit("test_client"));
+        assert!(!limiter.check_rate_limit("test_client"));
+
+        // Wait for refill
+        thread::sleep(Duration::from_millis(150));
+
+        // Should have tokens again
+        assert!(limiter.check_rate_limit("test_client"));
+    }
+
+    #[test]
+    fn test_rate_limiter_different_clients() {
+        let limiter = RateLimiter::new(1, Duration::from_secs(1));
+
+        // Different clients should have separate buckets
+        assert!(limiter.check_rate_limit("client1"));
+        assert!(limiter.check_rate_limit("client2"));
+
+        // But same client should be limited
+        assert!(!limiter.check_rate_limit("client1"));
+        assert!(!limiter.check_rate_limit("client2"));
+    }
+}

src/resolver.rs

···
+use atrium_identity::handle::DnsTxtResolver;
+use hickory_resolver::TokioAsyncResolver;
+
+/// Setup for dns resolver for the handle resolver
+pub struct HickoryDnsTxtResolver {
+    resolver: hickory_resolver::TokioAsyncResolver,
+}
+
+impl Default for HickoryDnsTxtResolver {
+    fn default() -> Self {
+        Self {
+            resolver: TokioAsyncResolver::tokio_from_system_conf()
+                .expect("failed to create resolver"),
+        }
+    }
+}
+
+impl DnsTxtResolver for HickoryDnsTxtResolver {
+    async fn resolve(
+        &self,
+        query: &str,
+    ) -> core::result::Result<Vec<String>, Box<dyn std::error::Error + Send + Sync + 'static>> {
+        println!("Resolving TXT for: {}", query);
+        Ok(self
+            .resolver
+            .txt_lookup(query)
+            .await?
+            .iter()
+            .map(|txt| txt.to_string())
+            .collect())
+    }
+}

src/storage.rs

···
+/// Storage impls to persis OAuth sessions if you are not using the memory stores
+/// https://github.com/bluesky-social/statusphere-example-app/blob/main/src/auth/storage.ts
+use crate::db::{AuthSession, AuthState};
+use async_sqlite::Pool;
+use atrium_api::types::string::Did;
+use atrium_common::store::Store;
+use atrium_oauth::store::session::SessionStore;
+use atrium_oauth::store::state::StateStore;
+use serde::Serialize;
+use serde::de::DeserializeOwned;
+use std::fmt::Debug;
+use std::hash::Hash;
+use thiserror::Error;
+
+#[derive(Error, Debug)]
+pub enum SqliteStoreError {
+    #[error("Invalid session")]
+    InvalidSession,
+    #[error("Database error: {0}")]
+    DatabaseError(async_sqlite::Error),
+}
+
+///Persistent session store in sqlite
+impl SessionStore for SqliteSessionStore {}
+
+pub struct SqliteSessionStore {
+    db_pool: Pool,
+}
+
+impl SqliteSessionStore {
+    pub fn new(db: Pool) -> Self {
+        Self { db_pool: db }
+    }
+}
+
+impl<K, V> Store<K, V> for SqliteSessionStore
+where
+    K: Debug + Eq + Hash + Send + Sync + 'static + From<Did> + AsRef<str>,
+    V: Debug + Clone + Send + Sync + 'static + Serialize + DeserializeOwned,
+{
+    type Error = SqliteStoreError;
+    async fn get(&self, key: &K) -> Result<Option<V>, Self::Error> {
+        let did = key.as_ref().to_string();
+        match AuthSession::get_by_did(&self.db_pool, did).await {
+            Ok(Some(auth_session)) => {
+                let deserialized_session: V = serde_json::from_str(&auth_session.session)
+                    .map_err(|_| SqliteStoreError::InvalidSession)?;
+                Ok(Some(deserialized_session))
+            }
+            Ok(None) => Ok(None),
+            Err(db_error) => {
+                log::error!("Database error: {db_error}");
+                Err(SqliteStoreError::DatabaseError(db_error))
+            }
+        }
+    }
+
+    async fn set(&self, key: K, value: V) -> Result<(), Self::Error> {
+        let did = key.as_ref().to_string();
+        let auth_session = AuthSession::new(did, value);
+        auth_session
+            .save_or_update(&self.db_pool)
+            .await
+            .map_err(SqliteStoreError::DatabaseError)?;
+        Ok(())
+    }
+
+    async fn del(&self, _key: &K) -> Result<(), Self::Error> {
+        let did = _key.as_ref().to_string();
+        AuthSession::delete_by_did(&self.db_pool, did)
+            .await
+            .map_err(SqliteStoreError::DatabaseError)?;
+        Ok(())
+    }
+
+    async fn clear(&self) -> Result<(), Self::Error> {
+        AuthSession::delete_all(&self.db_pool)
+            .await
+            .map_err(SqliteStoreError::DatabaseError)?;
+        Ok(())
+    }
+}
+
+///Persistent session state in sqlite
+impl StateStore for SqliteStateStore {}
+
+pub struct SqliteStateStore {
+    db_pool: Pool,
+}
+
+impl SqliteStateStore {
+    pub fn new(db: Pool) -> Self {
+        Self { db_pool: db }
+    }
+}
+
+impl<K, V> Store<K, V> for SqliteStateStore
+where
+    K: Debug + Eq + Hash + Send + Sync + 'static + From<Did> + AsRef<str>,
+    V: Debug + Clone + Send + Sync + 'static + Serialize + DeserializeOwned,
+{
+    type Error = SqliteStoreError;
+    async fn get(&self, key: &K) -> Result<Option<V>, Self::Error> {
+        let key = key.as_ref().to_string();
+        match AuthState::get_by_key(&self.db_pool, key).await {
+            Ok(Some(auth_state)) => {
+                let deserialized_state: V = serde_json::from_str(&auth_state.state)
+                    .map_err(|_| SqliteStoreError::InvalidSession)?;
+                Ok(Some(deserialized_state))
+            }
+            Ok(None) => Ok(None),
+            Err(db_error) => {
+                log::error!("Database error: {db_error}");
+                Err(SqliteStoreError::DatabaseError(db_error))
+            }
+        }
+    }
+
+    async fn set(&self, key: K, value: V) -> Result<(), Self::Error> {
+        let did = key.as_ref().to_string();
+        let auth_state = AuthState::new(did, value);
+        auth_state
+            .save_or_update(&self.db_pool)
+            .await
+            .map_err(SqliteStoreError::DatabaseError)?;
+        Ok(())
+    }
+
+    async fn del(&self, _key: &K) -> Result<(), Self::Error> {
+        let key = _key.as_ref().to_string();
+        AuthState::delete_by_key(&self.db_pool, key)
+            .await
+            .map_err(SqliteStoreError::DatabaseError)?;
+        Ok(())
+    }
+
+    async fn clear(&self) -> Result<(), Self::Error> {
+        AuthState::delete_all(&self.db_pool)
+            .await
+            .map_err(SqliteStoreError::DatabaseError)?;
+        Ok(())
+    }
+}

src/templates.rs

···
+///The askama template types for HTML
+///
+use crate::db::StatusFromDb;
+use askama::Template;
+use serde::{Deserialize, Serialize};
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Profile {
+    pub did: String,
+    pub display_name: Option<String>,
+    pub handle: Option<String>,
+}
+
+#[derive(Template)]
+#[template(path = "login.html")]
+pub struct LoginTemplate<'a> {
+    #[allow(dead_code)]
+    pub title: &'a str,
+    pub error: Option<&'a str>,
+}
+
+#[derive(Template)]
+#[template(path = "error.html")]
+pub struct ErrorTemplate<'a> {
+    #[allow(dead_code)]
+    pub title: &'a str,
+    pub error: &'a str,
+}
+
+#[derive(Template)]
+#[template(path = "status.html")]
+pub struct StatusTemplate<'a> {
+    #[allow(dead_code)]
+    pub title: &'a str,
+    pub handle: String,
+    pub current_status: Option<StatusFromDb>,
+    pub history: Vec<StatusFromDb>,
+    pub is_owner: bool,
+    pub is_admin: bool,
+}
+
+#[derive(Template)]
+#[template(path = "feed.html")]
+pub struct FeedTemplate<'a> {
+    #[allow(dead_code)]
+    pub title: &'a str,
+    pub profile: Option<Profile>,
+    pub statuses: Vec<StatusFromDb>,
+    pub is_admin: bool,
+    pub dev_mode: bool,
+}

src/webhooks.rs

···
+use async_sqlite::Pool;
+use hmac::{Hmac, Mac};
+use once_cell::sync::Lazy;
+use reqwest::Client;
+use serde::Serialize;
+use sha2::Sha256;
+
+use crate::db::{StatusFromDb, Webhook, get_user_webhooks};
+use futures_util::future;
+
+#[derive(Serialize)]
+pub struct StatusEvent<'a> {
+    pub event: &'a str, // "status.created" | "status.deleted" | "status.cleared"
+    pub did: &'a str,
+    pub handle: Option<&'a str>,
+    pub status: Option<&'a str>,
+    pub text: Option<&'a str>,
+    pub uri: Option<&'a str>,
+    pub since: Option<&'a str>,
+    pub expires: Option<&'a str>,
+}
+
+fn should_send(h: &Webhook, event: &str) -> bool {
+    if !h.active {
+        return false;
+    }
+    let events = h.events.trim();
+    if events == "*" || events.is_empty() {
+        return true;
+    }
+    events
+        .split(',')
+        .map(|e| e.trim())
+        .any(|e| e.eq_ignore_ascii_case(event))
+}
+
+fn hmac_sig_hex(secret: &str, ts: &str, payload: &[u8]) -> String {
+    let mut mac =
+        Hmac::<Sha256>::new_from_slice(secret.as_bytes()).expect("HMAC can take key of any size");
+    mac.update(ts.as_bytes());
+    mac.update(b".");
+    mac.update(payload);
+    hex::encode(mac.finalize().into_bytes())
+}
+
+static HTTP: Lazy<Client> = Lazy::new(Client::new);
+
+pub async fn send_status_event(pool: std::sync::Arc<Pool>, did: &str, event: StatusEvent<'_>) {
+    let hooks = match get_user_webhooks(&pool, did).await {
+        Ok(h) => h,
+        Err(e) => {
+            log::error!("webhooks: failed to load webhooks for {}: {}", did, e);
+            return;
+        }
+    };
+    let payload = match serde_json::to_vec(&event) {
+        Ok(p) => p,
+        Err(e) => {
+            log::error!("webhooks: failed to serialize payload: {}", e);
+            return;
+        }
+    };
+    let ts = chrono::Utc::now().timestamp().to_string();
+
+    let futures = hooks
+        .into_iter()
+        .filter(|h| should_send(h, event.event))
+        .map(|h| {
+            let payload = payload.clone();
+            let ts = ts.clone();
+            let client = HTTP.clone();
+            async move {
+                let sig = hmac_sig_hex(&h.secret, &ts, &payload);
+                let res = client
+                    .post(&h.url)
+                    .header("User-Agent", "status-webhooks/1.0")
+                    .header("Content-Type", "application/json")
+                    .header("X-Status-Webhook-Timestamp", &ts)
+                    .header("X-Status-Webhook-Signature", format!("sha256={}", sig))
+                    .timeout(std::time::Duration::from_secs(5))
+                    .body(payload)
+                    .send()
+                    .await;
+
+                match res {
+                    Ok(resp) => {
+                        if !resp.status().is_success() {
+                            let status = resp.status();
+                            let body = resp.text().await.unwrap_or_default();
+                            log::warn!(
+                                "webhook delivery failed: {} -> {} body={}",
+                                &h.url,
+                                status,
+                                body
+                            );
+                        }
+                    }
+                    Err(e) => log::warn!("webhook delivery error to {}: {}", &h.url, e),
+                }
+            }
+        });
+
+    future::join_all(futures).await;
+}
+
+pub async fn emit_created(pool: std::sync::Arc<Pool>, s: &StatusFromDb) {
+    let did = s.author_did.clone();
+    let emoji = s.status.clone();
+    let text = s.text.clone();
+    let uri = s.uri.clone();
+    let since = s.started_at.to_rfc3339();
+    let expires = s.expires_at.map(|e| e.to_rfc3339());
+    let event = StatusEvent {
+        event: "status.created",
+        did: &did,
+        handle: None,
+        status: Some(&emoji),
+        text: text.as_deref(),
+        uri: Some(&uri),
+        since: Some(&since),
+        expires: expires.as_deref(),
+    };
+    send_status_event(pool, &did, event).await;
+}
+
+pub async fn emit_deleted(pool: std::sync::Arc<Pool>, did: &str, uri: &str) {
+    let did_owned = did.to_string();
+    let uri_owned = uri.to_string();
+    let event = StatusEvent {
+        event: "status.deleted",
+        did: &did_owned,
+        handle: None,
+        status: None,
+        text: None,
+        uri: Some(&uri_owned),
+        since: None,
+        expires: None,
+    };
+    send_status_event(pool, &did_owned, event).await;
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_should_send_wildcard() {
+        let h = Webhook {
+            id: 1,
+            did: "d".into(),
+            url: "u".into(),
+            secret: "s".into(),
+            events: "*".into(),
+            active: true,
+            created_at: 0,
+            updated_at: 0,
+        };
+        assert!(should_send(&h, "status.created"));
+    }
+
+    #[test]
+    fn test_should_send_specific() {
+        let h = Webhook {
+            id: 1,
+            did: "d".into(),
+            url: "u".into(),
+            secret: "s".into(),
+            events: "status.deleted".into(),
+            active: true,
+            created_at: 0,
+            updated_at: 0,
+        };
+        assert!(should_send(&h, "status.deleted"));
+        assert!(!should_send(&h, "status.created"));
+    }
+
+    #[test]
+    fn test_hmac_sig_hex() {
+        let sig = hmac_sig_hex("secret", "1234567890", b"{\"a\":1}");
+        // Deterministic expected if inputs fixed
+        assert_eq!(sig.len(), 64);
+    }
+}

static/emoji-data.js

···
+// Fetch emoji data from CDN
+// Using emoji-datasource which provides comprehensive emoji data with search keywords
+async function loadEmojiData() {
+    try {
+        console.log('Loading emoji data from CDN...');
+        // Using jsdelivr CDN for emoji-datasource-apple (or could use google/twitter/facebook)
+        const response = await fetch('https://cdn.jsdelivr.net/npm/emoji-datasource@15.1.0/emoji.json');
+        if (!response.ok) {
+            throw new Error(`Failed to fetch emoji data: ${response.status}`);
+        }
+        const emojiData = await response.json();
+        console.log(`Loaded ${emojiData.length} emojis from CDN`);
+        
+        // Transform into a simpler format for our needs
+        const emojis = {}; // char -> keywords[]
+        const slugs = {};  // char -> slug (first short_name fallback from name)
+        const reserved = new Set(); // all slugs
+        const categories = {
+            frequent: ['😊', '👍', '❤️', '😂', '🎉', '🔥', '✨', '💯', '🚀', '💪', '🙏', '👏'],
+            people: [],
+            nature: [],
+            food: [],
+            activity: [],
+            travel: [],
+            objects: [],
+            symbols: [],
+            flags: []
+        };
+        
+        emojiData.forEach(emoji => {
+            // Get the actual emoji character
+            const char = emoji.unified.split('-').map(u => String.fromCodePoint(parseInt(u, 16))).join('');
+            
+            // Build search keywords from short_names and text
+            const keywords = [
+                ...(emoji.short_names || []),
+                ...(emoji.name ? emoji.name.toLowerCase().split(' ') : [])
+            ].flat();
+            
+            // Add the name itself as keywords
+            if (emoji.name) {
+                keywords.push(...emoji.name.toLowerCase().split(/[\s_-]+/));
+            }
+            
+            // Add any additional search terms from the texts field
+            if (emoji.texts) {
+                keywords.push(...emoji.texts);
+            }
+            
+            emojis[char] = keywords;
+
+            // Pick a slug: prefer the first short_name
+            let slug = null;
+            if (emoji.short_names && emoji.short_names.length > 0) {
+                slug = emoji.short_names[0].toLowerCase();
+            } else if (emoji.name) {
+                slug = emoji.name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+            }
+            if (slug) {
+                slugs[char] = slug;
+                reserved.add(slug);
+            }
+            
+            // Add to category
+            const categoryMap = {
+                'Smileys & Emotion': 'people',
+                'People & Body': 'people', 
+                'Animals & Nature': 'nature',
+                'Food & Drink': 'food',
+                'Activities': 'activity',
+                'Travel & Places': 'travel',
+                'Objects': 'objects',
+                'Symbols': 'symbols',
+                'Flags': 'flags'
+            };
+            
+            const category = categoryMap[emoji.category];
+            if (category && categories[category]) {
+                categories[category].push(char);
+            }
+        });
+        
+        console.log(`Built emoji database with ${Object.keys(emojis).length} emojis`);
+        return { emojis, categories, slugs, reserved: Array.from(reserved) };
+    } catch (error) {
+        console.error('Failed to load emoji data:', error);
+        // Fallback to a minimal set if the CDN fails
+        return {
+            emojis: {
+                '😊': ['smile', 'happy'],
+                '👍': ['thumbs up', 'good'],
+                '❤️': ['heart', 'love'],
+                '😂': ['laugh', 'lol'],
+                '🎉': ['party', 'celebrate']
+            },
+            categories: {
+                frequent: ['😊', '👍', '❤️', '😂', '🎉'],
+                people: ['😊', '😂'],
+                nature: [],
+                food: [],
+                activity: [],
+                travel: [],
+                objects: [],
+                symbols: ['❤️'],
+                flags: []
+            },
+            slugs: {
+                '😊': 'smile',
+                '👍': 'thumbsup',
+                '❤️': 'heart',
+                '😂': 'joy',
+                '🎉': 'tada'
+            },
+            reserved: ['smile','thumbsup','heart','joy','tada']
+        };
+    }
+}
+
+// Export for use in the main page
+window.emojiDataLoader = { loadEmojiData };

static/emoji-resolver.js

···
+// Emoji Resolver Module - Handles mapping emoji names to correct filenames
+(function() {
+    'use strict';
+    
+    // Cache for emoji name -> filename mapping
+    let emojiMap = null;
+    let loadPromise = null;
+    
+    // Load emoji mapping from API
+    async function loadEmojiMap() {
+        if (emojiMap) return emojiMap;
+        if (loadPromise) return loadPromise;
+        
+        loadPromise = fetch('/api/custom-emojis')
+            .then(response => response.json())
+            .then(data => {
+                if (!Array.isArray(data)) {
+                    console.error('Invalid emoji data received');
+                    return new Map();
+                }
+                emojiMap = new Map(data.map(emoji => [emoji.name, emoji.filename]));
+                return emojiMap;
+            })
+            .catch(err => {
+                console.error('Failed to load emoji map:', err);
+                emojiMap = new Map();
+                return emojiMap;
+            });
+        
+        return loadPromise;
+    }
+    
+    // Get the correct emoji filename for a given name
+    function getEmojiFilename(emojiName) {
+        if (!emojiMap) return null;
+        return emojiMap.get(emojiName);
+    }
+    
+    // Update a single emoji image element
+    function updateEmojiImage(img) {
+        const emojiName = img.getAttribute('data-emoji-name');
+        if (!emojiName) return;
+        
+        const filename = getEmojiFilename(emojiName);
+        if (filename) {
+            // Found the correct filename, update src
+            img.src = `/emojis/${filename}`;
+            // Remove placeholder class if present
+            img.classList.remove('emoji-placeholder');
+            // Remove the error handler since we have the correct path
+            img.onerror = null;
+        } else {
+            // Emoji not found in map, try common extensions as fallback
+            // This handles newly added emojis that aren't in the cached map yet
+            img.src = `/emojis/${emojiName}.png`;
+            img.onerror = function() {
+                this.onerror = null;
+                this.src = `/emojis/${emojiName}.gif`;
+            };
+            img.classList.remove('emoji-placeholder');
+        }
+    }
+    
+    // Update all emoji images on the page
+    function updateAllEmojiImages() {
+        const images = document.querySelectorAll('img[data-emoji-name]');
+        images.forEach(updateEmojiImage);
+    }
+    
+    // Initialize on DOM ready
+    async function initialize() {
+        // Load the emoji map
+        await loadEmojiMap();
+        // Update all existing emoji images
+        updateAllEmojiImages();
+        
+        // Set up a MutationObserver to handle dynamically added content
+        const observer = new MutationObserver((mutations) => {
+            mutations.forEach((mutation) => {
+                mutation.addedNodes.forEach((node) => {
+                    if (node.nodeType === Node.ELEMENT_NODE) {
+                        // Check if the added node is an emoji image
+                        if (node.tagName === 'IMG' && node.getAttribute('data-emoji-name')) {
+                            updateEmojiImage(node);
+                        }
+                        // Also check descendants
+                        const images = node.querySelectorAll?.('img[data-emoji-name]');
+                        images?.forEach(updateEmojiImage);
+                    }
+                });
+            });
+        });
+        
+        // Start observing the document body for changes
+        observer.observe(document.body, {
+            childList: true,
+            subtree: true
+        });
+    }
+    
+    // Export to global scope
+    window.EmojiResolver = {
+        loadEmojiMap,
+        getEmojiFilename,
+        updateEmojiImage,
+        updateAllEmojiImages,
+        initialize
+    };
+    
+    // Auto-initialize when DOM is ready
+    if (document.readyState === 'loading') {
+        document.addEventListener('DOMContentLoaded', initialize);
+    } else {
+        // DOM is already ready
+        initialize();
+    }
+})();

static/favicon.svg

···
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
+  <!-- Outer ring -->
+  <circle cx="16" cy="16" r="14" fill="none" stroke="#4a9eff" stroke-width="2"/>
+  <!-- Inner status dot -->
+  <circle cx="16" cy="16" r="8" fill="#4a9eff"/>
+  <!-- Small highlight to give it depth -->
+  <circle cx="18" cy="14" r="3" fill="#6bb2ff" opacity="0.7"/>
+</svg>

static/markdown.js

···
+// Lightweight markdown link renderer for status text
+// Converts [text](url) into <a href> with basic sanitization
+(function () {
+  const MD_LINK_RE = /\[([^\]]+)\]\(([^)]+)\)/g;
+
+  function escapeHtml(str) {
+    return String(str)
+      .replace(/&/g, "&amp;")
+      .replace(/</g, "&lt;")
+      .replace(/>/g, "&gt;")
+      .replace(/"/g, "&quot;")
+      .replace(/'/g, "&#39;");
+  }
+
+  function normalizeUrl(url) {
+    let u = url.trim();
+    // If no scheme and looks like a domain, prefix with https://
+    if (!/^([a-z]+:)?\/\//i.test(u)) {
+      u = 'https://' + u;
+    }
+    try {
+      const parsed = new URL(u);
+      if (parsed.protocol === 'http:' || parsed.protocol === 'https:') {
+        return parsed.toString();
+      }
+      return null; // disallow other protocols
+    } catch (_) {
+      return null;
+    }
+  }
+
+  function linkifyMarkdown(text) {
+    return text.replace(MD_LINK_RE, (_m, label, url) => {
+      const safeUrl = normalizeUrl(url);
+      const safeLabel = escapeHtml(label);
+      if (!safeUrl) return `[${safeLabel}](${escapeHtml(url)})`;
+      return `<a href="${safeUrl}" target="_blank" rel="noopener noreferrer nofollow">${safeLabel}</a>`;
+    });
+  }
+
+  function renderMarkdownLinksIn(root) {
+    const scope = root || document;
+    const nodes = scope.querySelectorAll('.status-text:not([data-md-rendered]), .history-text:not([data-md-rendered])');
+    nodes.forEach((el) => {
+      const original = el.textContent || '';
+      const rendered = linkifyMarkdown(original);
+      if (rendered !== original) {
+        el.innerHTML = rendered;
+      }
+      el.setAttribute('data-md-rendered', 'true');
+    });
+  }
+
+  // Expose globally
+  window.renderMarkdownLinksIn = renderMarkdownLinksIn;
+})();
+

static/settings.js

···
+// Shared font map configuration
+const FONT_MAP = {
+    'system': '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
+    'mono': '"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',
+    'serif': 'ui-serif, Georgia, Cambria, serif',
+    'comic': '"Comic Sans MS", "Comic Sans", cursive'
+};
+
+// Check if user is authenticated by looking for auth-specific data
+function isAuthenticated() {
+    // Check for data attribute that indicates authentication status
+    return document.body.dataset.authenticated === 'true';
+}
+
+// Helper to save preferences to API
+async function savePreferencesToAPI(updates) {
+    if (!isAuthenticated()) return;
+    
+    try {
+        await fetch('/api/preferences', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(updates)
+        });
+    } catch (err) {
+        console.log('Failed to save preferences to server');
+    }
+}
+
+// Apply font to the document
+function applyFont(fontKey) {
+    const fontFamily = FONT_MAP[fontKey] || FONT_MAP.mono;
+    document.documentElement.style.setProperty('--font-family', fontFamily);
+}
+
+// Apply accent color to the document
+function applyAccentColor(color) {
+    document.documentElement.style.setProperty('--accent', color);
+}

static/timestamps.js

···
+// Beautiful timestamp formatting with hover tooltips
+// Provides minute-resolution display by default with full timestamp on hover
+
+const TimestampFormatter = {
+    // Format a timestamp with appropriate granularity
+    formatRelative(date, now = new Date()) {
+        const diffMs = now - date;
+        const diffSecs = Math.floor(diffMs / 1000);
+        const diffMins = Math.floor(diffMs / 60000);
+        const diffHours = Math.floor(diffMs / 3600000);
+        const diffDays = Math.floor(diffMs / 86400000);
+        
+        // For very recent times, show "just now"
+        if (diffSecs < 30) {
+            return 'just now';
+        }
+        
+        // Under 1 hour: show minutes
+        if (diffMins < 60) {
+            return `${diffMins}m ago`;
+        }
+        
+        // Under 24 hours: show hours and minutes
+        if (diffHours < 24) {
+            const remainingMins = diffMins % 60;
+            if (remainingMins === 0) {
+                return `${diffHours}h ago`;
+            }
+            return `${diffHours}h ${remainingMins}m ago`;
+        }
+        
+        // Under 7 days: show days and hours
+        if (diffDays < 7) {
+            const remainingHours = diffHours % 24;
+            if (remainingHours === 0) {
+                return `${diffDays}d ago`;
+            }
+            return `${diffDays}d ${remainingHours}h ago`;
+        }
+        
+        // Over a week: show date with time
+        const timeStr = date.toLocaleTimeString('en-US', {
+            hour: 'numeric',
+            minute: '2-digit',
+            hour12: true
+        }).toLowerCase();
+        
+        // If same year, don't show year
+        if (date.getFullYear() === now.getFullYear()) {
+            return date.toLocaleDateString('en-US', {
+                month: 'short',
+                day: 'numeric'
+            }) + ', ' + timeStr;
+        }
+        
+        // Different year: show full date
+        return date.toLocaleDateString('en-US', {
+            month: 'short',
+            day: 'numeric',
+            year: 'numeric'
+        }) + ', ' + timeStr;
+    },
+    
+    // Format future timestamps (for expiry times)
+    formatFuture(date, now = new Date()) {
+        const diffMs = date - now;
+        const diffSecs = Math.floor(diffMs / 1000);
+        const diffMins = Math.floor(diffMs / 60000);
+        const diffHours = Math.floor(diffMs / 3600000);
+        const diffDays = Math.floor(diffMs / 86400000);
+        
+        if (diffSecs < 60) {
+            return 'expires soon';
+        }
+        
+        if (diffMins < 60) {
+            return `expires in ${diffMins}m`;
+        }
+        
+        if (diffHours < 24) {
+            const remainingMins = diffMins % 60;
+            if (remainingMins === 0) {
+                return `expires in ${diffHours}h`;
+            }
+            return `expires in ${diffHours}h ${remainingMins}m`;
+        }
+        
+        if (diffDays < 7) {
+            const remainingHours = diffHours % 24;
+            if (remainingHours === 0) {
+                return `expires in ${diffDays}d`;
+            }
+            return `expires in ${diffDays}d ${remainingHours}h`;
+        }
+        
+        // Over a week: show date
+        return 'expires ' + date.toLocaleDateString('en-US', {
+            month: 'short',
+            day: 'numeric',
+            hour: 'numeric',
+            minute: '2-digit',
+            hour12: true
+        }).toLowerCase();
+    },
+    
+    // Format for history view (compact but informative)
+    formatCompact(date, now = new Date()) {
+        const diffMs = now - date;
+        const diffMins = Math.floor(diffMs / 60000);
+        const diffHours = Math.floor(diffMs / 3600000);
+        const diffDays = Math.floor(diffMs / 86400000);
+        
+        // Today: show time only
+        if (date.toDateString() === now.toDateString()) {
+            return date.toLocaleTimeString('en-US', {
+                hour: 'numeric',
+                minute: '2-digit',
+                hour12: true
+            }).toLowerCase();
+        }
+        
+        // Yesterday: show "yesterday" + time
+        const yesterday = new Date(now);
+        yesterday.setDate(yesterday.getDate() - 1);
+        if (date.toDateString() === yesterday.toDateString()) {
+            return 'yesterday, ' + date.toLocaleTimeString('en-US', {
+                hour: 'numeric',
+                minute: '2-digit',
+                hour12: true
+            }).toLowerCase();
+        }
+        
+        // Within 7 days: show day of week + time
+        if (diffDays < 7) {
+            const dayName = date.toLocaleDateString('en-US', { weekday: 'short' }).toLowerCase();
+            const time = date.toLocaleTimeString('en-US', {
+                hour: 'numeric',
+                minute: '2-digit',
+                hour12: true
+            }).toLowerCase();
+            return `${dayName}, ${time}`;
+        }
+        
+        // Same year: show month, day, time
+        if (date.getFullYear() === now.getFullYear()) {
+            return date.toLocaleDateString('en-US', {
+                month: 'short',
+                day: 'numeric',
+                hour: 'numeric',
+                minute: '2-digit',
+                hour12: true
+            }).toLowerCase();
+        }
+        
+        // Different year: show full date
+        return date.toLocaleDateString('en-US', {
+            month: 'short',
+            day: 'numeric',
+            year: 'numeric',
+            hour: 'numeric',
+            minute: '2-digit',
+            hour12: true
+        }).toLowerCase();
+    },
+    
+    // Get full timestamp for tooltip
+    getFullTimestamp(date) {
+        // Get day of week
+        const dayName = date.toLocaleDateString('en-US', { weekday: 'long' });
+        
+        // Get month and day
+        const monthDay = date.toLocaleDateString('en-US', {
+            month: 'long',
+            day: 'numeric',
+            year: 'numeric'
+        });
+        
+        // Get time with seconds
+        const time = date.toLocaleTimeString('en-US', {
+            hour: 'numeric',
+            minute: '2-digit',
+            second: '2-digit',
+            hour12: true
+        });
+        
+        // Get timezone
+        const timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+        const tzAbbr = date.toLocaleTimeString('en-US', {
+            timeZoneName: 'short'
+        }).split(' ').pop();
+        
+        return `${dayName}, ${monthDay} at ${time} ${tzAbbr}`;
+    },
+    
+    // Initialize all timestamps on the page
+    initialize() {
+        const updateTimestamps = () => {
+            const now = new Date();
+            
+            document.querySelectorAll('.local-time').forEach(el => {
+                const timestamp = el.getAttribute('data-timestamp');
+                if (!timestamp) return;
+                
+                const date = new Date(timestamp);
+                const format = el.getAttribute('data-format');
+                const prefix = el.getAttribute('data-prefix');
+                
+                let text = '';
+                
+                // Determine format type
+                if (prefix === 'expires' || prefix === 'clears') {
+                    text = this.formatFuture(date, now);
+                } else if (format === 'compact' || format === 'short') {
+                    text = this.formatCompact(date, now);
+                } else if (prefix === 'since') {
+                    const relativeText = this.formatRelative(date, now);
+                    text = `since ${relativeText}`.replace('since just now', 'just started');
+                } else {
+                    text = this.formatRelative(date, now);
+                }
+                
+                // Update text content
+                el.textContent = text;
+                
+                // Add tooltip with full timestamp
+                const fullTimestamp = this.getFullTimestamp(date);
+                el.setAttribute('title', fullTimestamp);
+                el.style.cursor = 'help';
+                el.style.display = 'inline-block';
+                el.style.lineHeight = '1.2';
+                el.style.alignSelf = 'flex-start';
+                el.style.width = 'auto';
+            });
+        };
+        
+        // Initial update
+        updateTimestamps();
+        
+        // Update every 30 seconds for better granularity
+        setInterval(updateTimestamps, 30000);
+    }
+};
+
+// Auto-initialize when DOM is ready
+if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', () => TimestampFormatter.initialize());
+} else {
+    TimestampFormatter.initialize();
+}

static/webhook_guide.css

···
+.wh-tabs { display: flex; gap: 8px; margin: 10px 0; }
+.wh-dynamic .wh-tabs { justify-content: flex-end; }
+.wh-tabs button { border: 1px solid var(--border-color, #2a2a2a); background: var(--bg-secondary, #0f0f0f); color: var(--text, #fff); padding: 6px 10px; border-radius: 8px; cursor: pointer; font-size: 12px; }
+.wh-tabs button.active { background: var(--accent, #1DA1F2); color: #000; border-color: var(--accent, #1DA1F2); }
+.wh-snippet { display: none; }
+.wh-snippet.active { display: block; }
+.wh-static h4 { margin: 0 0 6px 0; }
+.wh-static ul { margin: 0 0 8px 18px; padding: 0; }
+.wh-static pre { background: #0b0b0b; border: 1px solid var(--border-color); border-radius: 8px; padding: 12px; overflow: auto; font-size: 12px; }
+@media (max-width: 900px) {
+  .wh-dynamic .wh-tabs { justify-content: flex-start; }
+}

static/webhook_guide.js

···
+document.addEventListener('DOMContentLoaded', () => {
+  const tabs = document.querySelectorAll('#wh-lang-tabs [data-lang]');
+  const blocks = document.querySelectorAll('.wh-snippet[data-lang]');
+  if (!tabs.length || !blocks.length) return;
+  const activate = (lang) => {
+    tabs.forEach(t => t.classList.toggle('active', t.dataset.lang === lang));
+    blocks.forEach(b => b.classList.toggle('active', b.dataset.lang === lang));
+  };
+  tabs.forEach(btn => btn.addEventListener('click', () => activate(btn.dataset.lang)));
+  // default
+  activate('node');
+});
+

templates/base.html

···
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>{% block title %}status.zzstoatzz.io{% endblock %}</title>
+    
+    <!-- Favicon -->
+    <link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
+    <link rel="alternate icon" href="/static/favicon.png">
+    
+    <!-- Open Graph / Facebook -->
+    <meta property="og:type" content="website">
+    <meta property="og:url" content="https://status.zzstoatzz.io{% block og_url %}{% endblock %}">
+    <meta property="og:title" content="{% block og_title %}status{% endblock %}">
+    <meta property="og:description" content="{% block og_description %}like slack status, but decoupled from any platform{% endblock %}">
+    <meta property="og:image" content="{% block og_image %}https://status.zzstoatzz.io/og-image.png{% endblock %}">
+    
+    <!-- Twitter -->
+    <meta property="twitter:card" content="summary">
+    <meta property="twitter:url" content="https://status.zzstoatzz.io{% block twitter_url %}{% endblock %}">
+    <meta property="twitter:title" content="{% block twitter_title %}status{% endblock %}">
+    <meta property="twitter:description" content="{% block twitter_description %}like slack status, but decoupled from any platform{% endblock %}">
+    <meta property="twitter:image" content="{% block twitter_image %}https://status.zzstoatzz.io/og-image.png{% endblock %}">
+    
+    <!-- Shared Timestamp Formatter -->
+    <script src="/static/timestamps.js"></script>
+    
+    <!-- Shared Settings Module -->
+    <script src="/static/settings.js"></script>
+    <!-- Markdown link renderer for statuses -->
+    <script src="/static/markdown.js"></script>
+    
+    <!-- Emoji Resolver for correct file extensions -->
+    <script src="/static/emoji-resolver.js"></script>
+    
+    <!-- Apply User Settings -->
+    <script>
+        // Apply saved settings immediately to prevent flash
+        (function() {
+            const savedFont = localStorage.getItem('fontFamily') || 'mono';
+            const savedAccent = localStorage.getItem('accentColor') || '#1DA1F2';
+            
+            // Use shared FONT_MAP from settings.js (will be available after load)
+            // For immediate application, we still need local fontMap to prevent flash
+            const fontMap = {
+                'system': '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
+                'mono': '"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',
+                'serif': 'ui-serif, Georgia, Cambria, serif',
+                'comic': '"Comic Sans MS", "Comic Sans", cursive'
+            };
+            
+            document.documentElement.style.setProperty('--font-family', fontMap[savedFont] || fontMap.mono);
+            document.documentElement.style.setProperty('--accent', savedAccent);
+        })();
+    </script>
+    
+    <style>
+        /* Bug Report Button Styles */
+        .bug-report-button {
+            position: fixed;
+            bottom: 20px;
+            right: 20px;
+            width: 48px;
+            height: 48px;
+            background: var(--accent, #1DA1F2);
+            border: none;
+            border-radius: 50%;
+            cursor: pointer;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            box-shadow: 0 2px 8px rgba(0,0,0,0.2);
+            transition: all 0.3s ease;
+            z-index: 9999;
+        }
+        
+        .bug-report-button:hover {
+            transform: scale(1.1);
+            box-shadow: 0 4px 12px rgba(0,0,0,0.3);
+        }
+        
+        .bug-report-button svg {
+            width: 24px;
+            height: 24px;
+            fill: white;
+        }
+        
+        .bug-report-tooltip {
+            position: absolute;
+            bottom: 60px;
+            right: 0;
+            background: var(--bg-secondary, #1a1a1a);
+            color: var(--text-primary, #ffffff);
+            border: 1px solid var(--border-color, #2a2a2a);
+            border-radius: 8px;
+            padding: 8px 12px;
+            font-size: 14px;
+            white-space: nowrap;
+            opacity: 0;
+            pointer-events: none;
+            transition: opacity 0.3s ease;
+        }
+        
+        .bug-report-button:hover .bug-report-tooltip {
+            opacity: 1;
+        }
+        
+        @media (max-width: 640px) {
+            .bug-report-button {
+                width: 40px;
+                height: 40px;
+                bottom: 15px;
+                right: 15px;
+            }
+            
+            .bug-report-button svg {
+                width: 20px;
+                height: 20px;
+            }
+        }
+        /* GitHub Footer Styles */
+        .github-footer {
+            position: fixed;
+            bottom: 20px;
+            left: 20px;
+            display: flex;
+            align-items: center;
+            gap: 8px;
+            font-size: 14px;
+            color: var(--text-tertiary, #6c757d);
+            text-decoration: none;
+            transition: all 0.3s ease;
+            z-index: 9998;
+        }
+        
+        .github-footer:hover {
+            color: var(--accent, #1DA1F2);
+        }
+        
+        .github-footer svg {
+            width: 20px;
+            height: 20px;
+            fill: currentColor;
+            transition: transform 0.3s ease;
+        }
+        
+        .github-footer:hover svg {
+            transform: scale(1.1);
+        }
+        
+        @media (max-width: 640px) {
+            .github-footer {
+                bottom: 15px;
+                left: 15px;
+                font-size: 12px;
+            }
+            
+            .github-footer svg {
+                width: 18px;
+                height: 18px;
+            }
+            
+            .github-footer span {
+                display: none;
+            }
+        }
+    </style>
+</head>
+<body>
+    {% block content %}{% endblock %}
+    
+    <!-- GitHub Footer -->
+    <a href="https://github.com/zzstoatzz/status" class="github-footer" target="_blank" rel="noopener noreferrer" aria-label="View source on GitHub">
+        <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+            <path d="M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z"/>
+        </svg>
+        <span>zzstoatzz/status</span>
+    </a>
+    
+    <!-- Bug Report Button -->
+    <button class="bug-report-button" id="bug-report-button" aria-label="Report a bug">
+        <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+            <path d="M20 8h-2.81a5.985 5.985 0 0 0-1.82-1.96L17 4.41 15.59 3l-2.17 2.17C12.96 5.06 12.49 5 12 5c-.49 0-.96.06-1.41.17L8.41 3 7 4.41l1.62 1.63C7.88 6.55 7.26 7.22 6.81 8H4v2h2.09c-.05.33-.09.66-.09 1v1H4v2h2v1c0 .34.04.67.09 1H4v2h2.81c1.04 1.79 2.97 3 5.19 3s4.15-1.21 5.19-3H20v-2h-2.09c.05-.33.09-.66.09-1v-1h2v-2h-2v-1c0-.34-.04-.67-.09-1H20V8zm-6 8h-4v-2h4v2zm0-4h-4v-2h4v2z"/>
+        </svg>
+        <span class="bug-report-tooltip">report a bug</span>
+    </button>
+    
+    <script>
+        // Bug Report Button Handler
+        document.addEventListener('DOMContentLoaded', function() {
+            const bugButton = document.getElementById('bug-report-button');
+            if (bugButton) {
+                bugButton.addEventListener('click', function() {
+                    // Gather context information
+                    const context = {
+                        page: window.location.pathname,
+                        url: window.location.href,
+                        userAgent: navigator.userAgent,
+                        screenResolution: `${window.screen.width}x${window.screen.height}`,
+                        viewportSize: `${window.innerWidth}x${window.innerHeight}`,
+                        theme: document.documentElement.getAttribute('data-theme') || 'light',
+                        timestamp: new Date().toISOString()
+                    };
+                    
+                    // Build issue title and body
+                    const title = '[Bug Report] Issue on ' + context.page;
+                    const body = `## Bug Description
+<!-- Please describe the bug you encountered -->
+
+
+## Steps to Reproduce
+<!-- Please list the steps to reproduce the bug -->
+1. 
+2. 
+3. 
+
+## Expected Behavior
+<!-- What did you expect to happen? -->
+
+
+## Actual Behavior
+<!-- What actually happened? -->
+
+
+## Context Information
+- **Page**: ${context.page}
+- **URL**: ${context.url}
+- **Timestamp**: ${context.timestamp}
+- **Theme**: ${context.theme}
+- **Viewport**: ${context.viewportSize}
+- **Screen**: ${context.screenResolution}
+- **User Agent**: ${context.userAgent}
+
+## Additional Information
+<!-- Any additional information, screenshots, etc. -->
+`;
+                    
+                    // Create GitHub issue URL
+                    const githubRepo = 'https://github.com/zzstoatzz/status';
+                    const issueUrl = `${githubRepo}/issues/new?title=${encodeURIComponent(title)}&body=${encodeURIComponent(body)}`;
+                    
+                    // Open in new tab
+                    window.open(issueUrl, '_blank');
+                });
+            }
+        });
+    </script>
+    <script>
+        // Render markdown links in any status/history text on load
+        document.addEventListener('DOMContentLoaded', function () {
+            if (window.renderMarkdownLinksIn) {
+                window.renderMarkdownLinksIn(document);
+            }
+        });
+    </script>
+</body>
+</html>

templates/error.html

···
+{% extends "base.html" %}
+
+{% block content %}
+<div id="root">
+    <div class="container">
+        <!-- Header -->
+        <header class="header">
+            <h1>status.zzstoatzz.io</h1>
+            <button class="theme-toggle" id="theme-toggle" aria-label="Toggle theme">
+                <svg class="sun-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <circle cx="12" cy="12" r="5"></circle>
+                    <line x1="12" y1="1" x2="12" y2="3"></line>
+                    <line x1="12" y1="21" x2="12" y2="23"></line>
+                    <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line>
+                    <line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line>
+                    <line x1="1" y1="12" x2="3" y2="12"></line>
+                    <line x1="21" y1="12" x2="23" y2="12"></line>
+                    <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line>
+                    <line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line>
+                </svg>
+                <svg class="moon-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path>
+                </svg>
+            </button>
+        </header>
+
+        <!-- Error Card -->
+        <div class="error-card">
+            <div class="error-header">
+                <span class="error-emoji">⚠️</span>
+                <h2>something went wrong</h2>
+            </div>
+            
+            <div class="error-content">
+                <p class="error-message">{{error}}</p>
+            </div>
+            
+            <div class="error-actions">
+                <a href="/" class="button button-primary">go home</a>
+                <a href="/feed" class="button button-secondary">view feed</a>
+            </div>
+        </div>
+    </div>
+</div>
+
+<style>
+:root {
+    --bg-primary: #ffffff;
+    --bg-secondary: #f8f9fa;
+    --bg-tertiary: #ffffff;
+    --text-primary: #1a1a1a;
+    --text-secondary: #6c757d;
+    --text-tertiary: #adb5bd;
+    --border-color: #e9ecef;
+    --accent: #4a9eff;
+    --accent-hover: color-mix(in srgb, var(--accent) 85%, black);
+    --danger: #dc3545;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.05);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.07);
+    --radius: 12px;
+    --radius-sm: 8px;
+}
+
+[data-theme="dark"] {
+    --bg-primary: #0a0a0a;
+    --bg-secondary: #1a1a1a;
+    --bg-tertiary: #2a2a2a;
+    --text-primary: #ffffff;
+    --text-secondary: #adb5bd;
+    --text-tertiary: #6c757d;
+    --border-color: #2a2a2a;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.2);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.3);
+}
+
+* {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+}
+
+/* Force all elements to use monospace font */
+input, button, select, textarea {
+    font-family: inherit;
+}
+
+body {
+    font-family: var(--font-family);
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    line-height: 1.6;
+    transition: background 0.3s, color 0.3s;
+}
+
+#root {
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 2rem 1rem;
+}
+
+.container {
+    width: 100%;
+    max-width: 500px;
+}
+
+/* Header */
+.header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 2rem;
+}
+
+.header h1 {
+    font-size: 1.25rem;
+    font-weight: 600;
+    color: var(--text-secondary);
+}
+
+.theme-toggle {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s;
+}
+
+.theme-toggle:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.1);
+}
+
+.theme-toggle svg {
+    stroke: var(--text-secondary);
+    transition: stroke 0.2s;
+}
+
+.theme-toggle:hover svg {
+    stroke: var(--accent);
+}
+
+.sun-icon, .moon-icon {
+    display: none;
+}
+
+[data-theme="light"] .sun-icon {
+    display: block;
+}
+
+[data-theme="dark"] .moon-icon {
+    display: block;
+}
+
+/* Error Card */
+.error-card {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    padding: 2rem;
+    box-shadow: var(--shadow-sm);
+}
+
+.error-header {
+    text-align: center;
+    margin-bottom: 2rem;
+}
+
+.error-emoji {
+    font-size: 3rem;
+    display: block;
+    margin-bottom: 1rem;
+}
+
+.error-header h2 {
+    font-size: 1.25rem;
+    font-weight: 600;
+    color: var(--text-primary);
+}
+
+/* Error Content */
+.error-content {
+    background: rgba(220, 53, 69, 0.05);
+    border: 1px solid rgba(220, 53, 69, 0.2);
+    border-radius: var(--radius-sm);
+    padding: 1rem;
+    margin-bottom: 2rem;
+}
+
+.error-message {
+    color: var(--danger);
+    font-size: 0.875rem;
+    line-height: 1.5;
+    word-break: break-word;
+}
+
+/* Error Actions */
+.error-actions {
+    display: flex;
+    gap: 0.75rem;
+    justify-content: center;
+}
+
+/* Buttons */
+.button {
+    display: inline-block;
+    padding: 0.75rem 1.5rem;
+    border-radius: var(--radius-sm);
+    font-size: 0.875rem;
+    font-weight: 500;
+    text-decoration: none;
+    cursor: pointer;
+    border: none;
+    transition: all 0.2s;
+    font-family: inherit;
+    text-align: center;
+}
+
+.button-primary {
+    background: var(--accent);
+    color: white;
+}
+
+.button-primary:hover {
+    background: var(--accent-hover);
+}
+
+.button-secondary {
+    background: transparent;
+    color: var(--text-secondary);
+    border: 1px solid var(--border-color);
+}
+
+.button-secondary:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--text-secondary);
+}
+
+/* Mobile adjustments */
+@media (max-width: 640px) {
+    #root {
+        padding: 1rem;
+    }
+    
+    .error-card {
+        padding: 1.5rem;
+    }
+    
+    .error-actions {
+        flex-direction: column;
+    }
+    
+    .button {
+        width: 100%;
+    }
+}
+</style>
+
+<script>
+// Theme management
+const initTheme = () => {
+    const saved = localStorage.getItem('theme');
+    const theme = saved || 'system';
+    
+    if (theme === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', theme);
+    }
+};
+
+const toggleTheme = () => {
+    const saved = localStorage.getItem('theme') || 'system';
+    const themes = ['system', 'light', 'dark'];
+    const currentIndex = themes.indexOf(saved);
+    const next = themes[(currentIndex + 1) % themes.length];
+    
+    localStorage.setItem('theme', next);
+    
+    if (next === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', next);
+    }
+};
+
+// Initialize on page load
+document.addEventListener('DOMContentLoaded', () => {
+    initTheme();
+    
+    // Theme toggle
+    const themeToggle = document.getElementById('theme-toggle');
+    if (themeToggle) {
+        themeToggle.addEventListener('click', toggleTheme);
+    }
+});
+</script>
+{%endblock content%}

templates/feed.html

···
+{% extends "base.html" %}
+
+{% block content %}
+<div id="root">
+    <div class="container">
+        <!-- Header -->
+        <header class="header">
+            <div class="feed-title-wrapper">
+                <h1 id="feed-title">global feed</h1>
+                {% if let Some(p) = &profile %}
+                <label class="feed-toggle" for="feed-toggle-input">
+                    <input type="checkbox" id="feed-toggle-input" />
+                    <span class="toggle-slider"></span>
+                </label>
+                {% endif %}
+            </div>
+            <div class="header-actions">
+                <a href="/" class="nav-button" aria-label="Your status" title="Your status">
+                    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path>
+                        <polyline points="9 22 9 12 15 12 15 22"></polyline>
+                    </svg>
+                </a>
+                {% if let Some(p) = &profile %}
+                <button class="settings-toggle" id="settings-toggle" aria-label="Settings">
+                    <img src="https://api.iconify.design/lucide:settings.svg" width="20" height="20" alt="Settings" class="settings-icon">
+                </button>
+                {% endif %}
+                <button class="theme-toggle" id="theme-toggle" aria-label="Toggle theme">
+                <svg class="sun-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <circle cx="12" cy="12" r="5"></circle>
+                    <line x1="12" y1="1" x2="12" y2="3"></line>
+                    <line x1="12" y1="21" x2="12" y2="23"></line>
+                    <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line>
+                    <line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line>
+                    <line x1="1" y1="12" x2="3" y2="12"></line>
+                    <line x1="21" y1="12" x2="23" y2="12"></line>
+                    <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line>
+                    <line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line>
+                </svg>
+                <svg class="moon-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path>
+                </svg>
+                <span class="theme-indicator" id="theme-indicator"></span>
+            </button>
+            </div>
+        </header>
+
+        {% if is_admin %}
+        <!-- Admin Upload (fixed top-left) -->
+        <div class="admin-panel" id="admin-panel">
+            <button class="admin-toggle" id="admin-toggle" title="admin tools" aria-label="admin tools">⚙️</button>
+            <div class="admin-content" id="admin-content" style="display:none;">
+                <div class="admin-section">
+                    <div class="admin-title">upload emoji</div>
+                    <form id="emoji-upload-form">
+                        <input type="text" id="emoji-name" placeholder="name (optional)" maxlength="40" />
+                        <input type="file" id="emoji-file" accept="image/png,image/gif" required />
+                        <button type="submit">upload</button>
+                    </form>
+                    <div class="admin-msg" id="admin-msg" aria-live="polite"></div>
+                </div>
+            </div>
+        </div>
+        {% endif %}
+        
+        <!-- Simple Settings (logged in users only) -->
+        {% if let Some(p) = &profile %}
+        <div class="simple-settings hidden" id="simple-settings">
+            <div class="settings-row">
+                <label>font</label>
+                <div class="button-group">
+                    <button class="font-btn active" data-font="system">system</button>
+                    <button class="font-btn" data-font="mono">mono</button>
+                    <button class="font-btn" data-font="serif">serif</button>
+                    <button class="font-btn" data-font="comic">comic</button>
+                </div>
+            </div>
+            <div class="settings-row">
+                <label>accent</label>
+                <input type="color" id="accent-color" value="#1DA1F2">
+                <div class="preset-colors">
+                    <button class="color-preset" data-color="#1DA1F2" style="background: #1DA1F2"></button>
+                    <button class="color-preset" data-color="#FF6B6B" style="background: #FF6B6B"></button>
+                    <button class="color-preset" data-color="#4ECDC4" style="background: #4ECDC4"></button>
+                    <button class="color-preset" data-color="#FFEAA7" style="background: #FFEAA7"></button>
+                    <button class="color-preset" data-color="#A29BFE" style="background: #A29BFE"></button>
+                    <button class="color-preset" data-color="#FD79A8" style="background: #FD79A8"></button>
+                </div>
+            </div>
+        </div>
+        {% endif %}
+
+        <!-- Session Info -->
+        {% if let Some(p) = &profile %}
+        <div class="session-card">
+            <div class="session-info">
+                <span>logged in as <strong>{% if let Some(name) = &p.display_name %}{% if !name.is_empty() %}{{ name }}{% else %}{% if let Some(h) = &p.handle %}{{ h }}{% else %}{{ p.did }}{% endif %}{% endif %}{% else %}{% if let Some(h) = &p.handle %}{{ h }}{% else %}{{ p.did }}{% endif %}{% endif %}</strong></span>
+                <div class="session-actions">
+                    <a href="/" class="button button-primary">your status</a>
+                    <form action="/logout" method="get" style="display: inline;">
+                        <button type="submit" class="button button-secondary">log out</button>
+                    </form>
+                </div>
+            </div>
+        </div>
+        {% else %}
+        <div class="session-card">
+            <div class="session-info">
+                <span>viewing public feed</span>
+                <a href="/login" class="button button-primary">log in to set status</a>
+            </div>
+        </div>
+        {% endif %}
+
+        <!-- Feed -->
+        <div class="feed-container">
+            <div class="feed-header-with-indicator">
+                <h2>recent updates</h2>
+                {% if dev_mode %}
+                <div class="dev-indicator" title="dev mode: showing dummy data mixed with real posts">dev</div>
+                {% endif %}
+            </div>
+            
+            <div class="status-list">
+            {% if !statuses.is_empty() %}
+                {% for status in statuses %}
+                <div class="status-item" data-did="{{ status.author_did }}">
+                    <span class="status-emoji">
+                        {% if status.status.starts_with("custom:") %}
+                            {% let emoji_name = status.status.strip_prefix("custom:").unwrap() %}
+                            <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" 
+                                 alt="{{emoji_name}}" title="{{emoji_name}}" class="custom-emoji-display emoji-placeholder"
+                                 data-emoji-name="{{emoji_name}}">
+                        {% else %}
+                            <span title="{{status.status}}">{{status.status}}</span>
+                        {% endif %}
+                    </span>
+                    <div class="status-content">
+                        <div class="status-main">
+                            <a class="status-author" href="/@{{status.author_display_name()}}">@{{status.author_display_name()}}</a>
+                            {% if status.text.is_some() %}
+                            <span class="status-text">{{ status.text.as_ref().unwrap() }}</span>
+                            {% endif %}
+                        </div>
+                        <div class="status-meta">
+                            <span class="local-time" data-timestamp="{{ status.started_at.to_rfc3339() }}" data-format="relative"></span>
+                            {% if status.expires_at.is_some() %}
+                                {% if !status.is_expired() %}
+                                • <span class="local-time" data-timestamp="{{ status.expires_at.as_ref().unwrap().to_rfc3339() }}" data-prefix="expires"></span>
+                                {% else %}
+                                • expired
+                                {% endif %}
+                            {% endif %}
+                            {% if is_admin %}
+                            • <button class="hide-button" data-uri="{{ status.uri }}" style="color: var(--text-tertiary); background: none; border: none; cursor: pointer; text-decoration: underline;">hide</button>
+                            {% endif %}
+                        </div>
+                    </div>
+                </div>
+                {% endfor %}
+            {% else %}
+                <!-- empty at render; JS will populate via /api/feed -->
+            {% endif %}
+            </div>
+            
+            <!-- Loading indicator -->
+            <div id="loading-indicator" style="display: none; text-align: center; padding: 2rem;">
+                <span style="color: var(--text-tertiary);">Loading more...</span>
+            </div>
+            
+            <!-- End of feed indicator -->
+            <div id="end-of-feed" style="display: none; text-align: center; padding: 2rem;">
+                <span style="color: var(--text-tertiary);">you've reached the beginning of time ✨</span>
+            </div>
+        </div>
+
+        <!-- Bottom Navigation -->
+        <nav class="bottom-nav">
+            <a href="/" class="nav-button-bottom">
+                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path>
+                    <polyline points="9 22 9 12 15 12 15 22"></polyline>
+                </svg>
+                <span>your status</span>
+            </a>
+        </nav>
+    </div>
+</div>
+
+<style>
+:root {
+    --bg-primary: #ffffff;
+    --bg-secondary: #f8f9fa;
+    --bg-tertiary: #ffffff;
+    --text-primary: #1a1a1a;
+    --text-secondary: #6c757d;
+    --text-tertiary: #adb5bd;
+    --border-color: #e9ecef;
+    --accent: #4a9eff;
+    --accent-hover: color-mix(in srgb, var(--accent) 85%, black);
+    --danger: #dc3545;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.05);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.07);
+    --radius: 12px;
+    --radius-sm: 8px;
+}
+
+[data-theme="dark"] {
+    --bg-primary: #0a0a0a;
+    --bg-secondary: #1a1a1a;
+    --bg-tertiary: #2a2a2a;
+    --text-primary: #ffffff;
+    --text-secondary: #adb5bd;
+    --text-tertiary: #6c757d;
+    --border-color: #2a2a2a;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.2);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.3);
+}
+
+* {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+}
+
+/* Force all elements to use monospace font */
+input, button, select, textarea {
+    font-family: inherit;
+}
+
+body {
+    font-family: var(--font-family);
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    line-height: 1.6;
+    transition: background 0.3s, color 0.3s;
+}
+
+#root {
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 2rem 1rem;
+}
+
+.container {
+    width: 100%;
+    max-width: 700px;
+}
+
+/* Header */
+.header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 2rem;
+}
+
+.header h1 {
+    font-size: 1.5rem;
+    font-weight: 600;
+    color: var(--text-secondary);
+}
+
+.header-actions {
+    display: flex;
+    gap: 0.75rem;
+    align-items: center;
+}
+
+.nav-button {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    color: var(--text-secondary);
+    transition: all 0.2s;
+    text-decoration: none;
+}
+
+.nav-button:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    color: var(--accent);
+}
+
+.nav-button svg {
+    stroke: var(--accent);
+}
+
+/* Simple Settings */
+.simple-settings {
+    margin: 1rem 0;
+    padding: 1rem;
+    background: var(--bg-secondary);
+    border-radius: var(--radius);
+    display: flex;
+    flex-direction: column;
+    gap: 1rem;
+    transition: all 0.3s ease;
+    transform-origin: top;
+}
+
+.simple-settings.hidden {
+    display: none;
+}
+
+.settings-row {
+    display: flex;
+    align-items: center;
+    gap: 1rem;
+}
+
+.settings-row label {
+    min-width: 60px;
+    color: var(--text-secondary);
+    font-size: 0.9rem;
+}
+
+.button-group {
+    display: flex;
+    gap: 0.25rem;
+}
+
+.font-btn {
+    padding: 0.25rem 0.75rem;
+    background: transparent;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    color: var(--text-secondary);
+    cursor: pointer;
+    transition: all 0.2s;
+    font-size: 0.85rem;
+}
+
+.font-btn:hover {
+    border-color: var(--accent);
+    color: var(--text-primary);
+}
+
+.font-btn.active {
+    background: var(--accent);
+    border-color: var(--accent);
+    color: white;
+}
+
+#accent-color {
+    width: 50px;
+    height: 32px;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    cursor: pointer;
+}
+
+.preset-colors {
+    display: flex;
+    gap: 0.25rem;
+}
+
+.color-preset {
+    width: 24px;
+    height: 24px;
+    border: 2px solid transparent;
+    border-radius: var(--radius-sm);
+    cursor: pointer;
+    transition: all 0.2s;
+}
+
+.color-preset:hover {
+    transform: scale(1.2);
+    border-color: var(--text-primary);
+}
+
+/* Settings toggle button */
+.settings-toggle {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s;
+}
+
+.settings-toggle:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.1);
+}
+
+.settings-icon {
+    filter: invert(50%) sepia(0%) saturate(0%) hue-rotate(0deg) brightness(100%) contrast(100%);
+    transition: filter 0.2s;
+}
+
+.settings-toggle:hover .settings-icon {
+    filter: invert(50%) sepia(100%) saturate(500%) hue-rotate(190deg) brightness(100%) contrast(100%);
+}
+
+.theme-toggle {
+    position: relative;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s;
+}
+
+.theme-toggle:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.1);
+}
+
+.theme-toggle svg {
+    stroke: var(--accent);
+}
+
+.sun-icon, .moon-icon {
+    display: none;
+}
+
+[data-theme="light"] .sun-icon {
+    display: block;
+    stroke: #f39c12;
+}
+
+[data-theme="dark"] .moon-icon {
+    display: block;
+    stroke: #8e44ad;
+}
+
+.theme-indicator {
+    position: absolute;
+    top: calc(100% + 0.5rem);
+    right: 0;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.25rem 0.5rem;
+    font-size: 0.75rem;
+    color: var(--text-secondary);
+    white-space: nowrap;
+    opacity: 0;
+    pointer-events: none;
+    transition: opacity 0.2s;
+    z-index: 1000;
+}
+
+.theme-indicator.visible {
+    opacity: 1;
+}
+
+/* Session Card */
+.session-card {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    padding: 1rem;
+    margin-bottom: 1.5rem;
+}
+
+.session-info {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 1rem;
+}
+
+.session-info strong {
+    color: var(--text-primary);
+}
+
+.session-actions {
+    display: flex;
+    gap: 0.5rem;
+}
+
+/* Buttons */
+.button {
+    display: inline-block;
+    padding: 0.5rem 1rem;
+    border-radius: var(--radius-sm);
+    font-size: 0.875rem;
+    font-weight: 500;
+    text-decoration: none;
+    cursor: pointer;
+    border: none;
+    transition: all 0.2s;
+    font-family: inherit;
+}
+
+.button-primary {
+    background: var(--accent);
+    color: white;
+}
+
+.button-primary:hover {
+    background: var(--accent-hover);
+}
+
+.button-secondary {
+    background: transparent;
+    color: var(--text-secondary);
+    border: 1px solid var(--border-color);
+}
+
+.button-secondary:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--text-secondary);
+}
+
+/* Feed Container */
+.feed-container {
+    margin: 2rem 0;
+}
+
+.feed-title-wrapper {
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+}
+
+#feed-title {
+    transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.feed-toggle {
+    position: relative;
+    display: inline-block;
+    width: 40px;
+    height: 20px;
+    cursor: pointer;
+}
+
+.feed-toggle input {
+    opacity: 0;
+    width: 0;
+    height: 0;
+}
+
+.toggle-slider {
+    position: absolute;
+    inset: 0;
+    background: var(--border-color);
+    border-radius: 20px;
+    transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.toggle-slider::before {
+    position: absolute;
+    content: "";
+    height: 16px;
+    width: 16px;
+    left: 2px;
+    top: 2px;
+    background: white;
+    border-radius: 50%;
+    transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.feed-toggle input:checked + .toggle-slider {
+    background: var(--accent);
+}
+
+.feed-toggle input:checked + .toggle-slider::before {
+    transform: translateX(20px);
+}
+
+.feed-header-with-indicator {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 1.5rem;
+}
+
+.feed-container h2 {
+    font-size: 1rem;
+    font-weight: 500;
+    color: var(--text-secondary);
+    text-transform: uppercase;
+    letter-spacing: 0.05em;
+    margin: 0;
+}
+
+.dev-indicator {
+    font-size: 0.75rem;
+    color: var(--text-tertiary);
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.25rem 0.5rem;
+    opacity: 0.7;
+}
+
+/* Status List */
+.status-list {
+    display: flex;
+    flex-direction: column;
+    gap: 1rem;
+}
+
+.status-item {
+    display: flex;
+    gap: 1rem;
+    padding: 1rem;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    transition: all 0.2s;
+}
+
+.status-item:hover {
+    border-color: var(--accent);
+    box-shadow: var(--shadow-sm);
+}
+
+.status-emoji {
+    font-size: 2rem;
+    line-height: 1;
+}
+
+.custom-emoji-display {
+    width: 2rem;
+    height: 2rem;
+    object-fit: contain;
+    vertical-align: middle;
+    /* Ensure GIFs animate */
+    image-rendering: auto;
+}
+
+.status-content {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    gap: 0.25rem;
+    min-width: 0;
+}
+
+.status-main {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 0.5rem;
+    align-items: baseline;
+}
+
+.status-author {
+    color: var(--text-secondary);
+    font-weight: 600;
+    text-decoration: none;
+    transition: color 0.2s;
+}
+
+.status-author:link,
+.status-author:visited {
+    color: var(--text-secondary);
+}
+
+.status-author:hover,
+.status-author:active {
+    color: var(--accent);
+}
+
+.status-text {
+    color: var(--text-primary);
+}
+
+.status-text a {
+    color: var(--accent);
+    text-decoration: underline;
+    text-underline-offset: 2px;
+}
+
+.status-meta {
+    font-size: 0.875rem;
+    color: var(--text-tertiary);
+}
+
+/* Empty State */
+.empty-state {
+    text-align: center;
+    padding: 3rem;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+}
+
+.empty-emoji {
+    font-size: 3rem;
+    display: block;
+    margin-bottom: 1rem;
+}
+
+.empty-state p {
+    color: var(--text-tertiary);
+}
+
+/* Bottom Navigation */
+.bottom-nav {
+    display: flex;
+    justify-content: center;
+    gap: 1rem;
+    padding-top: 2rem;
+    margin-top: 2rem;
+    border-top: 1px solid var(--border-color);
+}
+
+.nav-button-bottom {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    padding: 0.75rem 1.25rem;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    color: var(--text-secondary);
+    text-decoration: none;
+    transition: all 0.2s;
+    font-size: 0.875rem;
+}
+
+.nav-button-bottom:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    color: var(--accent);
+}
+
+.nav-button-bottom svg {
+    stroke: currentColor;
+    flex-shrink: 0;
+}
+
+/* Mobile adjustments */
+@media (max-width: 640px) {
+    #root {
+        padding: 1rem;
+    }
+    
+    .header h1 {
+        font-size: 1.25rem;
+    }
+    
+    .status-item {
+        padding: 0.75rem;
+    }
+    
+    .status-emoji {
+        font-size: 1.5rem;
+    }
+}
+
+/* Admin panel (top-left) */
+.admin-panel {
+    position: fixed;
+    top: 12px;
+    left: 12px;
+    z-index: 9999;
+}
+.admin-toggle {
+    background: var(--bg-tertiary);
+    border: 1px solid var(--border-color);
+    border-radius: 10px;
+    padding: 6px 8px;
+    cursor: pointer;
+    color: var(--text-secondary);
+}
+.admin-content {
+    margin-top: 8px;
+    background: var(--bg-tertiary);
+    border: 1px solid var(--border-color);
+    border-radius: 12px;
+    padding: 10px;
+    width: 240px;
+    box-shadow: var(--shadow-md);
+}
+.admin-title {
+    font-size: 12px;
+    color: var(--text-secondary);
+    margin-bottom: 6px;
+}
+.admin-content input[type="text"],
+.admin-content input[type="file"] {
+    width: 100%;
+    margin-bottom: 8px;
+}
+.admin-content button[type="submit"] {
+    width: 100%;
+    background: var(--accent);
+    color: #fff;
+    border: none;
+    border-radius: 8px;
+    padding: 6px 8px;
+    cursor: pointer;
+}
+.admin-msg { font-size: 12px; color: var(--text-secondary); margin-top: 6px; }
+</style>
+
+<script>
+// Theme management
+const initTheme = () => {
+    const saved = localStorage.getItem('theme');
+    const theme = saved || 'system';
+    
+    if (theme === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', theme);
+    }
+};
+
+const toggleTheme = () => {
+    const saved = localStorage.getItem('theme') || 'system';
+    const themes = ['system', 'light', 'dark'];
+    const currentIndex = themes.indexOf(saved);
+    const next = themes[(currentIndex + 1) % themes.length];
+    
+    localStorage.setItem('theme', next);
+    
+    if (next === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', next);
+    }
+    
+    // Show theme indicator
+    const indicator = document.getElementById('theme-indicator');
+    if (indicator) {
+        indicator.textContent = next;
+        indicator.classList.add('visible');
+        setTimeout(() => {
+            indicator.classList.remove('visible');
+        }, 1500);
+    }
+};
+
+// Simple settings
+const initSettings = async () => {
+    // Try to load from API first, fall back to localStorage
+    let savedFont = localStorage.getItem('fontFamily') || 'mono';
+    let savedAccent = localStorage.getItem('accentColor') || '#1DA1F2';
+    
+    // If user is logged in, fetch from API
+    const isLoggedIn = document.querySelector('.settings-toggle');
+    if (isLoggedIn) {
+        try {
+            const response = await fetch('/api/preferences');
+            if (response.ok) {
+                const data = await response.json();
+                if (!data.error) {
+                    savedFont = data.font_family || savedFont;
+                    savedAccent = data.accent_color || savedAccent;
+                    // Sync to localStorage
+                    localStorage.setItem('fontFamily', savedFont);
+                    localStorage.setItem('accentColor', savedAccent);
+                }
+            }
+        } catch (err) {
+            console.log('Using localStorage preferences');
+        }
+    }
+    
+    // Apply font family
+    const fontMap = {
+        'system': '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
+        'mono': '"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',
+        'serif': 'ui-serif, Georgia, Cambria, serif',
+        'comic': '"Comic Sans MS", "Comic Sans", cursive'
+    };
+    document.documentElement.style.setProperty('--font-family', fontMap[savedFont] || fontMap.system);
+    
+    // Update buttons
+    document.querySelectorAll('.font-btn').forEach(btn => {
+        btn.classList.toggle('active', btn.dataset.font === savedFont);
+    });
+    
+    // Apply accent color
+    document.documentElement.style.setProperty('--accent', savedAccent);
+    const accentInput = document.getElementById('accent-color');
+    if (accentInput) {
+        accentInput.value = savedAccent;
+    }
+};
+
+// Timestamp formatting is handled by /static/timestamps.js
+
+// Fetch user's following list
+const fetchFollowing = async () => {
+    try {
+        const response = await fetch('/api/following');
+        if (!response.ok) {
+            console.error('Failed to fetch following list');
+            return null;
+        }
+        const data = await response.json();
+        return data.follows;
+    } catch (error) {
+        console.error('Error fetching following:', error);
+        return null;
+    }
+};
+
+// Check if we need to load more content after filtering
+const checkNeedMoreContent = () => {
+    // Check if filtered content fills the viewport
+    setTimeout(() => {
+        if (document.documentElement.scrollHeight <= window.innerHeight && hasMore && !isLoading) {
+            loadMoreStatuses();
+        }
+    }, 50); // Small delay to ensure layout is updated
+};
+
+// Apply following filter to existing statuses
+const applyFollowingFilter = (active) => {
+    const statusItems = document.querySelectorAll('.status-item');
+    
+    statusItems.forEach(item => {
+        if (!active || !followingDids) {
+            // Show all if filter is off or we don't have following data
+            item.style.display = '';
+        } else {
+            const authorDid = item.getAttribute('data-did');
+            // Check if this author is in our following list OR is the current user
+            if (followingDids.includes(authorDid) || authorDid === currentUserDid) {
+                item.style.display = '';
+            } else {
+                item.style.display = 'none';
+            }
+        }
+    });
+    
+    // After filtering, check if we need more content
+    if (active) {
+        checkNeedMoreContent();
+    }
+};
+
+// Infinite scroll variables
+let isLoading = false;
+let offset = {% if !statuses.is_empty() %}{{ statuses.len() }}{% else %}0{% endif %};
+let hasMore = true;
+
+// Following filter variables
+let followingDids = null;
+let filterActive = false;
+// Store current user's DID to include their own posts in following feed
+const currentUserDid = {% if let Some(p) = &profile %}"{{ p.did }}"{% else %}null{% endif %};
+
+// Load more statuses
+const loadMoreStatuses = async () => {
+    if (isLoading || !hasMore) return;
+    
+    isLoading = true;
+    const loadingIndicator = document.getElementById('loading-indicator');
+    loadingIndicator.style.display = 'block';
+    
+    try {
+        const response = await fetch(`/api/feed?offset=${offset}&limit=20`);
+        const data = await response.json();
+        const newStatuses = Array.isArray(data) ? data : (data.statuses || []);
+        
+        if (newStatuses.length === 0) {
+            hasMore = false;
+            loadingIndicator.style.display = 'none';
+            document.getElementById('end-of-feed').style.display = 'block';
+            return;
+        }
+        
+        const statusList = document.querySelector('.status-list');
+        
+        // Render new statuses
+        newStatuses.forEach(status => {
+            const statusItem = document.createElement('div');
+            statusItem.className = 'status-item';
+            statusItem.setAttribute('data-did', status.author_did);
+            
+            let emojiHtml = '';
+            if (status.status.startsWith('custom:')) {
+                const emojiName = status.status.substring(7);
+                emojiHtml = `<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" alt="${emojiName}" title="${emojiName}" class="custom-emoji-display emoji-placeholder" data-emoji-name="${emojiName}">`;
+            } else {
+                emojiHtml = `<span title="${status.status}">${status.status}</span>`;
+            }
+            
+            // Build expiry HTML if present
+            let expiryHtml = '';
+            if (status.expires_at) {
+                const expiryDate = new Date(status.expires_at);
+                const now = new Date();
+                if (expiryDate > now) {
+                    expiryHtml = ` • <span class="local-time" data-timestamp="${status.expires_at}" data-prefix="expires"></span>`;
+                } else {
+                    expiryHtml = ' • expired';
+                }
+            }
+            
+            const displayName = status.handle || status.author_did;
+            const profileUrl = status.handle ? `/@${status.handle}` : '#';
+            
+            statusItem.innerHTML = `
+                <span class="status-emoji">${emojiHtml}</span>
+                <div class="status-content">
+                    <div class="status-main">
+                        <a class="status-author" href="${profileUrl}">@${displayName}</a>
+                        ${status.text ? `<span class="status-text">${status.text}</span>` : ''}
+                    </div>
+                    <div class="status-meta">
+                        <span class="local-time" data-timestamp="${status.started_at}" data-format="relative"></span>${expiryHtml}
+                    </div>
+                </div>
+            `;
+            
+            statusList.appendChild(statusItem);
+            // Render markdown links in the newly added item
+            if (window.renderMarkdownLinksIn) {
+                window.renderMarkdownLinksIn(statusItem);
+            }
+        });
+        
+        // Re-initialize timestamps for newly added elements
+        if (typeof TimestampFormatter !== 'undefined') {
+            TimestampFormatter.initialize();
+        }
+        
+        // Apply filter to newly added items if active
+        if (filterActive && followingDids) {
+            applyFollowingFilter(true);
+        }
+        
+        offset += newStatuses.length;
+        if (!Array.isArray(data) && typeof data === 'object') {
+            if (typeof data.next_offset === 'number') offset = data.next_offset;
+            if (typeof data.has_more === 'boolean') hasMore = data.has_more;
+        }
+        loadingIndicator.style.display = 'none';
+    } catch (error) {
+        console.error('Error loading more statuses:', error);
+        loadingIndicator.style.display = 'none';
+    } finally {
+        isLoading = false;
+    }
+};
+
+// Check scroll position
+const checkScroll = () => {
+    const scrollHeight = document.documentElement.scrollHeight;
+    const scrollTop = window.scrollY;
+    const clientHeight = window.innerHeight;
+    
+    // Load more when user is 200px from the bottom
+    if (scrollTop + clientHeight >= scrollHeight - 200) {
+        loadMoreStatuses();
+    }
+};
+
+// Initialize on page load
+document.addEventListener('DOMContentLoaded', async () => {
+    initTheme();
+    await initSettings();
+    // Timestamps are auto-initialized by timestamps.js
+    // Always load initial page of statuses so feed is never empty on first render
+    try { await loadMoreStatuses(); } catch (e) { console.error('initial load failed', e); }
+    
+    // Settings toggle
+    const settingsToggle = document.getElementById('settings-toggle');
+    const settingsPanel = document.getElementById('simple-settings');
+    if (settingsToggle && settingsPanel) {
+        settingsToggle.addEventListener('click', () => {
+            settingsPanel.classList.toggle('hidden');
+        });
+    }
+    
+    // Helper to save preferences to API
+    const savePreferencesToAPI = async (updates) => {
+        try {
+            await fetch('/api/preferences', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(updates)
+            });
+        } catch (err) {
+            console.log('Failed to save preferences to server');
+        }
+    };
+    
+    // Font family buttons
+    document.querySelectorAll('.font-btn').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const font = btn.dataset.font;
+            localStorage.setItem('fontFamily', font);
+            
+            // Update UI
+            document.querySelectorAll('.font-btn').forEach(b => b.classList.remove('active'));
+            btn.classList.add('active');
+            
+            // Apply
+            const fontMap = {
+                'system': '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
+                'mono': '"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',
+                'serif': 'ui-serif, Georgia, Cambria, serif',
+                'comic': '"Comic Sans MS", "Comic Sans", cursive'
+            };
+            document.documentElement.style.setProperty('--font-family', fontMap[font] || fontMap.system);
+            
+            // Save to API if logged in
+            if (document.querySelector('.settings-toggle')) {
+                savePreferencesToAPI({ font_family: font });
+            }
+        });
+    });
+    
+    // Accent color
+    const accentInput = document.getElementById('accent-color');
+    if (accentInput) {
+        accentInput.addEventListener('input', () => {
+            const color = accentInput.value;
+            localStorage.setItem('accentColor', color);
+            document.documentElement.style.setProperty('--accent', color);
+            
+            // Save to API if logged in
+            if (document.querySelector('.settings-toggle')) {
+                savePreferencesToAPI({ accent_color: color });
+            }
+        });
+    }
+    
+    // Color presets
+    document.querySelectorAll('.color-preset').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const color = btn.dataset.color;
+            localStorage.setItem('accentColor', color);
+            document.documentElement.style.setProperty('--accent', color);
+            if (accentInput) {
+                accentInput.value = color;
+            }
+            
+            // Save to API if logged in
+            if (document.querySelector('.settings-toggle')) {
+                savePreferencesToAPI({ accent_color: color });
+            }
+        });
+    });
+    
+    // Theme toggle
+    const themeToggle = document.getElementById('theme-toggle');
+    if (themeToggle) {
+        themeToggle.addEventListener('click', toggleTheme);
+    }
+    
+    // Feed toggle
+    const feedToggle = document.getElementById('feed-toggle-input');
+    const feedTitle = document.getElementById('feed-title');
+    
+    if (feedToggle && feedTitle) {
+        // Restore preference from localStorage
+        const savedPreference = localStorage.getItem('followingFilterActive');
+        if (savedPreference === 'true') {
+            feedToggle.checked = true;
+            filterActive = true;
+            feedTitle.textContent = 'following feed';
+            
+            // Fetch following list and apply filter
+            fetchFollowing().then(follows => {
+                if (follows) {
+                    followingDids = follows;
+                    // Cache the following list with timestamp
+                    localStorage.setItem('followingDids', JSON.stringify(follows));
+                    localStorage.setItem('followingDidsTimestamp', Date.now().toString());
+                    applyFollowingFilter(true);
+                }
+            });
+        }
+        
+        feedToggle.addEventListener('change', async (e) => {
+            filterActive = e.target.checked;
+            localStorage.setItem('followingFilterActive', filterActive.toString());
+            
+            // Animate title change
+            feedTitle.style.opacity = '0';
+            
+            setTimeout(() => {
+                feedTitle.textContent = filterActive ? 'following feed' : 'global feed';
+                feedTitle.style.opacity = '1';
+            }, 150);
+            
+            if (filterActive) {
+                // Check if we have cached following list (valid for 1 hour)
+                const cachedFollows = localStorage.getItem('followingDids');
+                const cacheTimestamp = localStorage.getItem('followingDidsTimestamp');
+                const oneHour = 60 * 60 * 1000;
+                
+                if (cachedFollows && cacheTimestamp && 
+                    (Date.now() - parseInt(cacheTimestamp)) < oneHour) {
+                    // Use cached data
+                    followingDids = JSON.parse(cachedFollows);
+                } else {
+                    // Fetch fresh data
+                    const follows = await fetchFollowing();
+                    if (follows) {
+                        followingDids = follows;
+                        // Cache the following list
+                        localStorage.setItem('followingDids', JSON.stringify(follows));
+                        localStorage.setItem('followingDidsTimestamp', Date.now().toString());
+                    } else {
+                        // Failed to fetch, disable filter
+                        filterActive = false;
+                        e.target.checked = false;
+                        localStorage.setItem('followingFilterActive', 'false');
+                        feedTitle.textContent = 'global feed';
+                        alert('Failed to fetch following list');
+                        return;
+                    }
+                }
+            }
+            
+            applyFollowingFilter(filterActive);
+        });
+    }
+    
+    // Set up infinite scrolling
+    window.addEventListener('scroll', checkScroll);
+    
+    // Check if we need to load more on initial page load
+    // (in case the initial content doesn't fill the viewport)
+    setTimeout(() => {
+        if (document.documentElement.scrollHeight <= window.innerHeight) {
+            loadMoreStatuses();
+        }
+    }, 100);
+    
+    // Timestamps auto-update via timestamps.js
+    
+    // Admin hide button functionality
+    document.querySelectorAll('.hide-button').forEach(button => {
+        button.addEventListener('click', async (e) => {
+            const uri = e.target.dataset.uri;
+            if (!uri) return;
+            
+            if (!confirm('Hide this status from the global feed?')) {
+                return;
+            }
+            
+            try {
+                const response = await fetch('/admin/hide-status', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                    },
+                    body: JSON.stringify({ 
+                        uri: uri,
+                        hidden: true 
+                    })
+                });
+                
+                const result = await response.json();
+                
+                if (response.ok) {
+                    // Remove the status from the feed
+                    e.target.closest('.status-item').style.display = 'none';
+                } else {
+                    alert(result.error || 'Failed to hide status');
+                }
+            } catch (error) {
+                console.error('Error hiding status:', error);
+                alert('Failed to hide status');
+            }
+        });
+    });
+});
+    </script>
+    <script>
+        // Admin upload toggles and submit
+        document.addEventListener('DOMContentLoaded', function () {
+            const toggle = document.getElementById('admin-toggle');
+            const content = document.getElementById('admin-content');
+            const form = document.getElementById('emoji-upload-form');
+            const file = document.getElementById('emoji-file');
+            const name = document.getElementById('emoji-name');
+            const msg = document.getElementById('admin-msg');
+            if (!toggle || !content || !form) return;
+
+            toggle.addEventListener('click', () => {
+                content.style.display = content.style.display === 'none' ? 'block' : 'none';
+            });
+
+            form.addEventListener('submit', async (e) => {
+                e.preventDefault();
+                msg.textContent = '';
+                if (!file.files || file.files.length === 0) {
+                    msg.textContent = 'choose a PNG or GIF';
+                    return;
+                }
+                // Require a name; prefill from filename if empty
+                if (!name.value.trim().length) {
+                    const base = (file.files[0].name || '').replace(/\.[^.]+$/, '');
+                    const sanitized = base.toLowerCase().replace(/[^a-z0-9_-]+/g, '-').replace(/^-+|-+$/g, '');
+                    name.value = sanitized || '';
+                }
+                if (!name.value.trim().length) {
+                    msg.textContent = 'please choose a name';
+                    return;
+                }
+                // Client-side reserved check (best-effort)
+                if (window.__reservedEmojiNames && window.__reservedEmojiNames.has(name.value.trim().toLowerCase())) {
+                    msg.textContent = 'that name is reserved by a standard emoji';
+                    return;
+                }
+                const f = file.files[0];
+                if (!['image/png','image/gif'].includes(f.type)) {
+                    msg.textContent = 'only PNG or GIF';
+                    return;
+                }
+                const fd = new FormData();
+                fd.append('file', f);
+                if (name.value.trim().length) fd.append('name', name.value.trim());
+                try {
+                    const res = await fetch('/admin/upload-emoji', { method: 'POST', body: fd });
+                    const json = await res.json();
+                    if (!res.ok || !json.success) {
+                        if (json && json.code === 'name_exists') {
+                            msg.textContent = 'that name already exists — please pick another';
+                        } else {
+                            msg.textContent = (json && json.error) || 'upload failed';
+                        }
+                        return;
+                    }
+                    // Notify listeners (e.g., emoji picker) and close panel
+                    document.dispatchEvent(new CustomEvent('custom-emoji-uploaded', { detail: json }));
+                    content.style.display = 'none';
+                    form.reset();
+                    msg.textContent = '';
+                } catch (err) {
+                    msg.textContent = 'network error';
+                }
+            });
+        });
+    </script>
+{%endblock content%}

templates/login.html

···
+{% extends "base.html" %}
+
+{% block content %}
+<div id="root">
+    <div class="container">
+        <!-- Header -->
+        <header class="header">
+            <h1>status.zzstoatzz.io</h1>
+            <div class="header-actions">
+                <a href="/" class="nav-button" aria-label="Home" title="Home">
+                    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path>
+                        <polyline points="9 22 9 12 15 12 15 22"></polyline>
+                    </svg>
+                </a>
+                <button class="theme-toggle" id="theme-toggle" aria-label="Toggle theme">
+                <svg class="sun-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <circle cx="12" cy="12" r="5"></circle>
+                    <line x1="12" y1="1" x2="12" y2="3"></line>
+                    <line x1="12" y1="21" x2="12" y2="23"></line>
+                    <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line>
+                    <line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line>
+                    <line x1="1" y1="12" x2="3" y2="12"></line>
+                    <line x1="21" y1="12" x2="23" y2="12"></line>
+                    <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line>
+                    <line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line>
+                </svg>
+                <svg class="moon-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path>
+                </svg>
+            </button>
+            </div>
+        </header>
+
+        <!-- Login Card -->
+        <div class="login-card">
+            <div class="login-header">
+                <span class="login-emoji">🔐</span>
+                <h2>log in with bluesky</h2>
+                <p>enter your handle to set your status</p>
+            </div>
+            
+            <form action="/login" method="post" class="login-form">
+                <div class="input-group">
+                    <label for="handle">handle</label>
+                    <input 
+                        type="text" 
+                        id="handle"
+                        name="handle" 
+                        placeholder="alice.bsky.social" 
+                        required
+                        autocomplete="username"
+                        autofocus
+                    />
+                </div>
+                
+                {% if let Some(error) = self.error %}
+                <div class="error-message">
+                    <span>⚠️</span> {{error}}
+                </div>
+                {% endif %}
+                
+                <button type="submit" class="submit-button">log in</button>
+            </form>
+            
+            <div class="signup-cta">
+                <p>don't have a bluesky account?</p>
+                <a href="https://bsky.app" target="_blank" rel="noopener">sign up for bluesky →</a>
+            </div>
+        </div>
+
+        <!-- Navigation -->
+        <nav class="nav-links">
+            <a href="/feed">view global feed</a>
+        </nav>
+    </div>
+</div>
+
+<style>
+:root {
+    --bg-primary: #ffffff;
+    --bg-secondary: #f8f9fa;
+    --bg-tertiary: #ffffff;
+    --text-primary: #1a1a1a;
+    --text-secondary: #6c757d;
+    --text-tertiary: #adb5bd;
+    --border-color: #e9ecef;
+    --accent: #4a9eff;
+    --accent-hover: color-mix(in srgb, var(--accent) 85%, black);
+    --danger: #dc3545;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.05);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.07);
+    --radius: 12px;
+    --radius-sm: 8px;
+}
+
+[data-theme="dark"] {
+    --bg-primary: #0a0a0a;
+    --bg-secondary: #1a1a1a;
+    --bg-tertiary: #2a2a2a;
+    --text-primary: #ffffff;
+    --text-secondary: #adb5bd;
+    --text-tertiary: #6c757d;
+    --border-color: #2a2a2a;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.2);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.3);
+}
+
+* {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+}
+
+/* Force all elements to use monospace font */
+input, button, select, textarea {
+    font-family: inherit;
+}
+
+body {
+    font-family: var(--font-family);
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    line-height: 1.6;
+    transition: background 0.3s, color 0.3s;
+}
+
+#root {
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 2rem 1rem;
+}
+
+.container {
+    width: 100%;
+    max-width: 500px;
+}
+
+/* Header */
+.header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 2rem;
+}
+
+.header h1 {
+    font-size: 1.25rem;
+    font-weight: 600;
+    color: var(--text-secondary);
+}
+
+.theme-toggle {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s;
+}
+
+.theme-toggle:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.1);
+}
+
+.theme-toggle svg {
+    stroke: var(--text-secondary);
+    transition: stroke 0.2s;
+}
+
+.theme-toggle:hover svg {
+    stroke: var(--accent);
+}
+
+.sun-icon, .moon-icon {
+    display: none;
+}
+
+[data-theme="light"] .sun-icon {
+    display: block;
+}
+
+[data-theme="dark"] .moon-icon {
+    display: block;
+}
+
+.header-actions {
+    display: flex;
+    gap: 0.75rem;
+    align-items: center;
+}
+
+.nav-button {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    color: var(--text-secondary);
+    transition: all 0.2s;
+    text-decoration: none;
+}
+
+.nav-button:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    color: var(--accent);
+}
+
+.nav-button svg {
+    stroke: currentColor;
+}
+
+/* Login Card */
+.login-card {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    padding: 2rem;
+    box-shadow: var(--shadow-sm);
+}
+
+.login-header {
+    text-align: center;
+    margin-bottom: 2rem;
+}
+
+.login-emoji {
+    font-size: 3rem;
+    display: block;
+    margin-bottom: 1rem;
+}
+
+.login-header h2 {
+    font-size: 1.25rem;
+    font-weight: 600;
+    color: var(--text-primary);
+    margin-bottom: 0.5rem;
+}
+
+.login-header p {
+    color: var(--text-secondary);
+    font-size: 0.875rem;
+}
+
+/* Form */
+.login-form {
+    display: flex;
+    flex-direction: column;
+    gap: 1.5rem;
+}
+
+.input-group {
+    display: flex;
+    flex-direction: column;
+    gap: 0.5rem;
+}
+
+.input-group label {
+    font-size: 0.875rem;
+    color: var(--text-secondary);
+    font-weight: 500;
+}
+
+.input-group input {
+    padding: 0.75rem;
+    background: var(--bg-primary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    font-size: 1rem;
+    color: var(--text-primary);
+    transition: border-color 0.2s;
+}
+
+.input-group input:focus {
+    outline: none;
+    border-color: var(--accent);
+    box-shadow: 0 0 0 3px rgba(74, 158, 255, 0.1);
+}
+
+.input-group input::placeholder {
+    color: var(--text-tertiary);
+}
+
+/* Error Message */
+.error-message {
+    background: rgba(220, 53, 69, 0.1);
+    border: 1px solid rgba(220, 53, 69, 0.3);
+    border-radius: var(--radius-sm);
+    padding: 0.75rem;
+    color: var(--danger);
+    font-size: 0.875rem;
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+}
+
+/* Submit Button */
+.submit-button {
+    background: var(--accent);
+    color: white;
+    border: none;
+    padding: 0.75rem 1.5rem;
+    border-radius: var(--radius-sm);
+    font-size: 1rem;
+    font-weight: 500;
+    cursor: pointer;
+    transition: background 0.2s;
+}
+
+.submit-button:hover {
+    background: var(--accent-hover);
+}
+
+.submit-button:active {
+    transform: translateY(1px);
+}
+
+/* Signup CTA */
+.signup-cta {
+    text-align: center;
+    margin-top: 2rem;
+    padding-top: 2rem;
+    border-top: 1px solid var(--border-color);
+}
+
+.signup-cta p {
+    color: var(--text-secondary);
+    font-size: 0.875rem;
+    margin-bottom: 0.5rem;
+}
+
+.signup-cta a {
+    color: var(--accent);
+    text-decoration: none;
+    font-size: 0.875rem;
+    font-weight: 500;
+    transition: color 0.2s;
+}
+
+.signup-cta a:hover {
+    color: var(--accent-hover);
+    text-decoration: underline;
+}
+
+/* Navigation */
+.nav-links {
+    display: flex;
+    justify-content: center;
+    gap: 2rem;
+    margin-top: 2rem;
+    padding-top: 2rem;
+    border-top: 1px solid var(--border-color);
+}
+
+.nav-links a {
+    color: var(--accent);
+    text-decoration: none;
+    font-size: 0.875rem;
+    transition: color 0.2s;
+}
+
+.nav-links a:hover {
+    color: var(--accent-hover);
+}
+
+/* Mobile adjustments */
+@media (max-width: 640px) {
+    #root {
+        padding: 1rem;
+    }
+    
+    .login-card {
+        padding: 1.5rem;
+    }
+}
+</style>
+
+<script>
+// Theme management
+const initTheme = () => {
+    const saved = localStorage.getItem('theme');
+    const theme = saved || 'system';
+    
+    if (theme === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', theme);
+    }
+};
+
+const toggleTheme = () => {
+    const saved = localStorage.getItem('theme') || 'system';
+    const themes = ['system', 'light', 'dark'];
+    const currentIndex = themes.indexOf(saved);
+    const next = themes[(currentIndex + 1) % themes.length];
+    
+    localStorage.setItem('theme', next);
+    
+    if (next === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', next);
+    }
+};
+
+// Initialize on page load
+document.addEventListener('DOMContentLoaded', () => {
+    initTheme();
+    
+    // Theme toggle
+    const themeToggle = document.getElementById('theme-toggle');
+    if (themeToggle) {
+        themeToggle.addEventListener('click', toggleTheme);
+    }
+});
+</script>
+{%endblock content%}

templates/status.html

···
+{% extends "base.html" %}
+
+{% block title %}@{{ handle }} - status.zzstoatzz.io{% endblock %}
+{% block og_url %}/@{{ handle }}{% endblock %}
+{% block og_title %}@{{ handle }}'s status{% endblock %}
+{% block og_description %}{% if let Some(current) = current_status %}{{ current.status }} {% if current.text.is_some() %}{{ current.text.as_ref().unwrap() }}{% endif %}{% else %}no status currently set{% endif %}{% endblock %}
+{% block twitter_url %}/@{{ handle }}{% endblock %}
+{% block twitter_title %}@{{ handle }}'s status{% endblock %}
+{% block twitter_description %}{% if let Some(current) = current_status %}{{ current.status }} {% if current.text.is_some() %}{{ current.text.as_ref().unwrap() }}{% endif %}{% else %}no status currently set{% endif %}{% endblock %}
+
+{% block content %}
+<div id="root">
+    <div class="container">
+        <!-- Header -->
+        <header class="header">
+            <h1><a href="https://bsky.app/profile/{{ handle }}" target="_blank" rel="noopener" class="handle-link">@{{ handle }}</a></h1>
+            <div class="header-actions">
+                <a href="/feed" class="nav-button" aria-label="Global feed" title="Global feed">
+                    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <circle cx="12" cy="12" r="10"></circle>
+                        <line x1="2" y1="12" x2="22" y2="12"></line>
+                        <path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"></path>
+                    </svg>
+                </a>
+                {% if is_owner %}
+                <button class="settings-toggle" id="settings-toggle" aria-label="Settings">
+                    <img src="https://api.iconify.design/lucide:settings.svg" width="20" height="20" alt="Settings" class="settings-icon">
+                </button>
+                <button class="theme-toggle" id="theme-toggle" aria-label="Toggle theme">
+                <svg class="sun-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <circle cx="12" cy="12" r="5"></circle>
+                    <line x1="12" y1="1" x2="12" y2="3"></line>
+                    <line x1="12" y1="21" x2="12" y2="23"></line>
+                    <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line>
+                    <line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line>
+                    <line x1="1" y1="12" x2="3" y2="12"></line>
+                    <line x1="21" y1="12" x2="23" y2="12"></line>
+                    <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line>
+                    <line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line>
+                </svg>
+                <svg class="moon-icon" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path>
+                </svg>
+                <span class="theme-indicator" id="theme-indicator"></span>
+            </button>
+            {% endif %}
+            </div>
+        </header>
+
+        {% if is_admin %}
+        <!-- Admin Upload (fixed top-left) -->
+        <div class="admin-panel" id="admin-panel">
+            <button class="admin-toggle" id="admin-toggle" title="admin tools" aria-label="admin tools">⚙️</button>
+            <div class="admin-content" id="admin-content" style="display:none;">
+                <div class="admin-section">
+                    <div class="admin-title">upload emoji</div>
+                    <form id="emoji-upload-form">
+                        <input type="text" id="emoji-name" placeholder="name (optional)" maxlength="40" />
+                        <input type="file" id="emoji-file" accept="image/png,image/gif" required />
+                        <button type="submit">upload</button>
+                    </form>
+                    <div class="admin-msg" id="admin-msg" aria-live="polite"></div>
+                </div>
+            </div>
+        </div>
+        {% endif %}
+        
+        <!-- Simple Settings (owner only) -->
+        {% if is_owner %}
+        <div class="simple-settings hidden" id="simple-settings">
+            <div class="settings-row">
+                <label>font</label>
+                <div class="button-group">
+                    <button class="font-btn active" data-font="system">system</button>
+                    <button class="font-btn" data-font="mono">mono</button>
+                    <button class="font-btn" data-font="serif">serif</button>
+                    <button class="font-btn" data-font="comic">comic</button>
+                </div>
+            </div>
+            <div class="settings-row">
+                <label>accent</label>
+                <input type="color" id="accent-color" value="#1DA1F2">
+                <div class="preset-colors">
+                    <button class="color-preset" data-color="#1DA1F2" style="background: #1DA1F2"></button>
+                    <button class="color-preset" data-color="#FF6B6B" style="background: #FF6B6B"></button>
+                    <button class="color-preset" data-color="#4ECDC4" style="background: #4ECDC4"></button>
+                    <button class="color-preset" data-color="#FFEAA7" style="background: #FFEAA7"></button>
+                    <button class="color-preset" data-color="#A29BFE" style="background: #A29BFE"></button>
+                    <button class="color-preset" data-color="#FD79A8" style="background: #FD79A8"></button>
+                </div>
+            </div>
+            <div class="settings-row">
+                <label>integrations</label>
+                <button id="open-webhook-config" class="nav-button">configure webhooks</button>
+            </div>
+        </div>
+        {% endif %}
+
+        <!-- Current Status Display -->
+        <div class="status-display">
+            {% if let Some(current) = current_status %}
+            <div class="current-status">
+                <span class="status-emoji">
+                    {% if current.status.starts_with("custom:") %}
+                        {% let emoji_name = current.status.strip_prefix("custom:").unwrap() %}
+                        <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" 
+                             alt="{{emoji_name}}" title="{{emoji_name}}" class="custom-emoji-display emoji-placeholder"
+                             data-emoji-name="{{emoji_name}}">
+                    {% else %}
+                        <span title="{{ current.status }}">{{ current.status }}</span>
+                    {% endif %}
+                </span>
+                <div class="status-content">
+                    {% if current.text.is_some() %}
+                    <p class="status-text">{{ current.text.as_ref().unwrap() }}</p>
+                    {% endif %}
+                    <p class="status-meta">
+                        <span class="local-time" data-timestamp="{{ current.started_at.to_rfc3339() }}" data-prefix="since"></span>
+                        {% if current.expires_at.is_some() && !current.is_expired() %}
+                        • <span class="expires-indicator"><span class="local-time" data-timestamp="{{ current.expires_at.as_ref().unwrap().to_rfc3339() }}" data-prefix="clears"></span></span>
+                        {% endif %}
+                    </p>
+                </div>
+            </div>
+            {% else %}
+            <div class="no-status">
+                <span class="status-emoji">💭</span>
+                <p class="status-text">no status set</p>
+            </div>
+            {% endif %}
+        </div>
+
+        {% if is_owner %}
+        <!-- Status Editor -->
+        <div class="status-editor">
+            <form action="/status" method="post" id="status-form">
+                <div class="input-group">
+                    <div class="status-text-row">
+                        <button type="button" class="emoji-trigger" id="emoji-trigger">
+                            <span id="selected-emoji">
+                                {% if let Some(current) = current_status.as_ref() %}
+                                    {% if current.status.starts_with("custom:") %}
+                                        {% let emoji_name = current.status.strip_prefix("custom:").unwrap() %}
+                                        <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" 
+                                             alt="{{emoji_name}}" title="{{emoji_name}}" class="emoji-placeholder"
+                                             data-emoji-name="{{emoji_name}}">
+                                    {% else %}
+                                        <span title="{{ current.status }}">{{ current.status }}</span>
+                                    {% endif %}
+                                {% else %}
+                                    <span title="happy">😊</span>
+                                {% endif %}
+                            </span>
+                        </button>
+                        <input type="hidden" name="status" id="status-input" value="{% if let Some(current) = current_status.as_ref() %}{{ current.status }}{% else %}😊{% endif %}" required>
+                        
+                        <input 
+                            type="text" 
+                            name="text" 
+                            id="status-text"
+                            placeholder="what's your status?"
+                            maxlength="100"
+                            value=""
+                            autocomplete="off"
+                        >
+                    </div>
+                    
+                    <div class="input-actions">
+                        <button type="button" class="clear-after-btn" id="clear-after-btn">
+                            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                                <circle cx="12" cy="12" r="10"></circle>
+                                <polyline points="12 6 12 12 16 14"></polyline>
+                            </svg>
+                            <span id="clear-text">don't clear</span>
+                        </button>
+                        
+                        <button type="submit" class="save-btn">set</button>
+                    </div>
+                </div>
+                
+                <!-- Hidden expiration select -->
+                <select name="expires_in" id="expires_in" hidden>
+                    <option value="" selected>Never</option>
+                    <option value="30m">30 minutes</option>
+                    <option value="1h">1 hour</option>
+                    <option value="2h">2 hours</option>
+                    <option value="4h">4 hours</option>
+                    <option value="8h">8 hours</option>
+                    <option value="1d">1 day</option>
+                    <option value="1w">1 week</option>
+                </select>
+            </form>
+        </div>
+
+        <!-- Emoji Picker Modal -->
+        <div class="emoji-picker-overlay hidden" id="emoji-picker-overlay" aria-hidden="true">
+            <div class="emoji-picker" id="emoji-picker" role="dialog" aria-modal="true" aria-labelledby="emoji-picker-title">
+                <div class="emoji-picker-header">
+                    <div>
+                        <h2 id="emoji-picker-title">pick an emoji</h2>
+                        <p class="emoji-picker-subtitle">custom and unicode options side by side</p>
+                    </div>
+                    <button type="button" class="emoji-picker-close" id="emoji-picker-close" aria-label="close emoji picker">✕</button>
+                </div>
+                <div class="emoji-search-container">
+                    <input type="text" 
+                           id="emoji-search" 
+                           class="emoji-search" 
+                           placeholder="Search emojis..." 
+                           autocomplete="off">
+                </div>
+                <div class="emoji-picker-body">
+                    <div class="emoji-categories" id="emoji-categories">
+                        <button type="button" class="category-btn active" data-category="frequent">Frequent</button>
+                        <button type="button" class="category-btn" data-category="custom">Custom</button>
+                        <button type="button" class="category-btn" data-category="people">People</button>
+                        <button type="button" class="category-btn" data-category="nature">Nature</button>
+                        <button type="button" class="category-btn" data-category="food">Food</button>
+                        <button type="button" class="category-btn" data-category="activity">Activity</button>
+                        <button type="button" class="category-btn" data-category="travel">Travel</button>
+                        <button type="button" class="category-btn" data-category="objects">Objects</button>
+                        <button type="button" class="category-btn" data-category="symbols">Symbols</button>
+                        <button type="button" class="category-btn" data-category="flags">Flags</button>
+                    </div>
+                    <div class="emoji-grid" id="emoji-grid">
+                        <!-- Will be populated by JavaScript -->
+                    </div>
+                    <div class="bufo-helper" id="bufo-helper" style="display: none;">
+                        <a href="https://find-bufo.fly.dev/" target="_blank" rel="noopener noreferrer">
+                            need help finding a bufo?
+                        </a>
+                    </div>
+                </div>
+            </div>
+        </div>
+
+        <!-- Clear Time Picker (hidden by default) -->
+        <div class="clear-picker" id="clear-picker" style="display: none;">
+            <button class="clear-option active" data-value="">don't clear</button>
+            <button class="clear-option" data-value="30m">30 minutes</button>
+            <button class="clear-option" data-value="1h">1 hour</button>
+            <button class="clear-option" data-value="2h">2 hours</button>
+            <button class="clear-option" data-value="4h">4 hours</button>
+            <button class="clear-option" data-value="8h">8 hours</button>
+            <button class="clear-option" data-value="1d">Today</button>
+            <button class="clear-option" data-value="1w">This week</button>
+            <button class="clear-option" data-value="custom">Custom...</button>
+            <div class="custom-datetime" id="custom-datetime" style="display: none;">
+                <input type="datetime-local" id="custom-datetime-input" />
+                <button type="button" class="custom-datetime-set" id="custom-datetime-set">set</button>
+            </div>
+        </div>
+
+        <!-- Session Info -->
+        <div class="session-info">
+            <a href="/logout" class="logout-link">log out</a>
+        </div>
+        {% endif %}
+
+        <!-- Webhook Full-Page Modal -->
+        <div id="webhook-modal" class="webhook-modal hidden" aria-hidden="true">
+            <div class="webhook-modal-content">
+                <div class="webhook-modal-header">
+                    <h2>webhooks</h2>
+                    <button id="close-webhook-modal" aria-label="Close">✕</button>
+                </div>
+                <div class="webhook-modal-body">
+                    <div class="webhook-intro" style="margin-bottom:10px;">
+                        <p>Send signed events when your status changes. Configure a URL that accepts JSON POSTs. We include an HMAC-SHA256 signature in <code>X-Status-Webhook-Signature</code> and a UNIX timestamp in <code>X-Status-Webhook-Timestamp</code>.</p>
+                    </div>
+                    <form id="create-webhook-form" class="webhook-form" aria-label="create webhook">
+                        <div style="display:flex; flex-direction:column; gap:4px;">
+                            <input type="url" id="wh-url" placeholder="Webhook URL (https://example.com/webhook)" required />
+                            <div class="field-help">HTTPS required in production. Local/private hosts allowed only in local dev.</div>
+                        </div>
+                        <div style="display:flex; flex-direction:column; gap:4px;">
+                            <input type="text" id="wh-secret" placeholder="Secret (optional – autogenerated)" />
+                            <div class="field-help">Used to sign requests with HMAC-SHA256. Reveal only on creation/rotation.</div>
+                        </div>
+                        <div style="display:flex; flex-direction:column; gap:4px;">
+                            <input type="text" id="wh-events" placeholder="Events (optional, default *) e.g. status.created,status.deleted" />
+                            <div class="field-help">Comma-separated. Supported: <code>status.created</code>, <code>status.deleted</code> or <code>*</code>.</div>
+                        </div>
+                        <button type="submit" aria-label="add webhook">add webhook</button>
+                        <div class="field-help">You can add multiple webhooks. Toggle active, rotate secrets, or delete below.</div>
+                    </form>
+                    <div id="webhook-list" class="webhook-list" aria-live="polite"></div>
+
+                    <details class="wh-guide" id="webhook-guide">
+                        <summary>Integration guide</summary>
+                        <div class="content">
+                            <div class="wh-grid">
+                                <div class="wh-static">
+                                    <h4>Request</h4>
+                                    <ul>
+                                        <li>Method: POST</li>
+                                        <li>Content-Type: application/json</li>
+                                        <li>Header <code>X-Status-Webhook-Timestamp</code>: UNIX seconds</li>
+                                        <li>Header <code>X-Status-Webhook-Signature</code>: <code>sha256=&lt;hex&gt;</code></li>
+                                    </ul>
+                                    <h4>Payload</h4>
+<pre><code>{
+  "event": "status.created", // or "status.deleted"
+  "did": "did:plc:...",
+  "handle": null,
+  "status": "🙂",           // created only
+  "text": "in a meeting",   // optional
+  "uri": "at://...",       // record URI
+  "since": "2025-09-10T16:00:00Z", // created only
+  "expires": null            // created only
+}</code></pre>
+                                </div>
+                                <div class="wh-dynamic">
+                                    <div id="wh-lang-tabs" class="wh-tabs" role="tablist" aria-label="language selector">
+                                        <button type="button" data-lang="node" role="tab" aria-selected="true">Node</button>
+                                        <button type="button" data-lang="rust" role="tab">Rust</button>
+                                        <button type="button" data-lang="python" role="tab">Python</button>
+                                        <button type="button" data-lang="go" role="tab">Go</button>
+                                    </div>
+                                    <div class="wh-snippet" data-lang="node">
+                                    <h4>Verify signature</h4>
+                                    <p>Compute HMAC-SHA256 over <code>timestamp + "." + rawBody</code> using your secret. Compare to header (without the <code>sha256=</code> prefix) with constant-time equality, and reject if timestamp is too old (e.g., &gt; 5 minutes).</p>
+<pre><code>// Node (TypeScript)
+import crypto from 'node:crypto';
+
+function verify(req: any, rawBody: Buffer, secret: string): boolean {
+  const ts = req.headers['x-status-webhook-timestamp'];
+  const sig = String(req.headers['x-status-webhook-signature'] || '').replace(/^sha256=/, '');
+  if (!ts || !sig) return false;
+  const now = Math.floor(Date.now()/1000);
+  if (Math.abs(now - Number(ts)) > 300) return false; // 5m
+  const mac = crypto.createHmac('sha256', secret).update(String(ts)).update('.').update(rawBody).digest('hex');
+  return crypto.timingSafeEqual(Buffer.from(mac, 'hex'), Buffer.from(sig, 'hex'));
+}
+</code></pre>
+                                </div>
+                                <div class="wh-snippet" data-lang="rust">
+<pre><code>// Rust (axum-ish)
+use hmac::{Hmac, Mac};
+use sha2::Sha256;
+
+fn verify(ts: &str, sig_hdr: &str, body: &[u8], secret: &str) -> bool {
+    let sig = sig_hdr.strip_prefix("sha256=").unwrap_or(sig_hdr);
+    if let Ok(ts_int) = ts.parse::<i64>() {
+        if (chrono::Utc::now().timestamp() - ts_int).abs() > 300 { return false; }
+    } else { return false; }
+    let mut mac = Hmac::<Sha256>::new_from_slice(secret.as_bytes()).unwrap();
+    mac.update(ts.as_bytes());
+    mac.update(b".");
+    mac.update(body);
+    let calc = hex::encode(mac.finalize().into_bytes());
+    subtle::ConstantTimeEq::ct_eq(calc.as_bytes(), sig.as_bytes()).into()
+}
+</code></pre>
+                                </div>
+                                <div class="wh-snippet" data-lang="python">
+<pre><code># Python (Flask example)
+import hmac, hashlib, time
+from flask import request
+
+def verify(secret: str, raw_body: bytes) -> bool:
+    ts = request.headers.get('X-Status-Webhook-Timestamp')
+    sig_hdr = request.headers.get('X-Status-Webhook-Signature', '')
+    if not ts or not sig_hdr.startswith('sha256='):
+        return False
+    if abs(int(time.time()) - int(ts)) > 300:
+        return False
+    expected = hmac.new(secret.encode(), (ts + '.').encode() + raw_body, hashlib.sha256).hexdigest()
+    actual = sig_hdr[len('sha256='):]
+    return hmac.compare_digest(expected, actual)
+</code></pre>
+                                </div>
+                                <div class="wh-snippet" data-lang="go">
+<pre><code>// Go (net/http)
+package main
+
+import (
+  "crypto/hmac"
+  "crypto/sha256"
+  "encoding/hex"
+  "net/http"
+  "strconv"
+  "time"
+)
+
+func verify(r *http.Request, body []byte, secret string) bool {
+  ts := r.Header.Get("X-Status-Webhook-Timestamp")
+  sig := r.Header.Get("X-Status-Webhook-Signature")
+  if ts == "" || sig == "" { return false }
+  if len(sig) > 7 && sig[:7] == "sha256=" { sig = sig[7:] }
+  tsv, err := strconv.ParseInt(ts, 10, 64)
+  if err != nil || time.Now().Unix()-tsv > 300 || tsv-time.Now().Unix() > 300 { return false }
+  mac := hmac.New(sha256.New, []byte(secret))
+  mac.Write([]byte(ts))
+  mac.Write([]byte("."))
+  mac.Write(body)
+  expected := hex.EncodeToString(mac.Sum(nil))
+  return hmac.Equal([]byte(expected), []byte(sig))
+}
+</code></pre>
+                                </div>
+                                </div>
+                            </div>
+                        </div>
+                    </details>
+                    <link rel="stylesheet" href="/static/webhook_guide.css">
+                    <script src="/static/webhook_guide.js"></script>
+                </div>
+            </div>
+        </div>
+
+        <!-- History -->
+        {% if !history.is_empty() %}
+        <div class="history">
+            <h3>recent</h3>
+            {% for status in history %}
+            {% if loop.index0 < 5 %}
+            <div class="history-item">
+                <span class="history-emoji">
+                    {% if status.status.starts_with("custom:") %}
+                        {% let emoji_name = status.status.strip_prefix("custom:").unwrap() %}
+                        <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" 
+                             alt="{{emoji_name}}" title="{{emoji_name}}" class="custom-emoji-display emoji-placeholder"
+                             data-emoji-name="{{emoji_name}}">
+                    {% else %}
+                        <span title="{{ status.status }}">{{ status.status }}</span>
+                    {% endif %}
+                </span>
+                <div class="history-content">
+                    {% if status.text.is_some() %}
+                    <span class="history-text">{{ status.text.as_ref().unwrap() }}</span>
+                    {% endif %}
+                    <span class="history-time local-time" data-timestamp="{{ status.started_at.to_rfc3339() }}" data-format="compact"></span>
+                </div>
+                {% if is_owner %}
+                <button type="button" class="history-delete" data-uri="{{ status.uri }}" title="Delete this status">
+                    <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <line x1="18" y1="6" x2="6" y2="18"></line>
+                        <line x1="6" y1="6" x2="18" y2="18"></line>
+                    </svg>
+                </button>
+                {% endif %}
+            </div>
+            {% endif %}
+            {% endfor %}
+        </div>
+        {% endif %}
+
+        <!-- Bottom Navigation -->
+        <nav class="bottom-nav">
+            <a href="/feed" class="nav-button-bottom">
+                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <circle cx="12" cy="12" r="10"></circle>
+                    <line x1="2" y1="12" x2="22" y2="12"></line>
+                    <path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"></path>
+                </svg>
+                <span>global feed</span>
+            </a>
+            {% if !is_owner %}
+            <a href="/login" class="nav-button-bottom">
+                <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                    <path d="M15 3h4a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-4"></path>
+                    <polyline points="10 17 15 12 10 7"></polyline>
+                    <line x1="15" y1="12" x2="3" y2="12"></line>
+                </svg>
+                <span>set your status</span>
+            </a>
+            {% endif %}
+        </nav>
+    </div>
+</div>
+
+<script src="/static/emoji-data.js"></script>
+<style>
+body {
+    font-family: var(--font-family) !important;
+}
+
+body.modal-open {
+    overflow: hidden;
+    position: fixed;
+    width: 100%;
+}
+
+:root {
+    --bg-primary: #ffffff;
+    --bg-secondary: #f8f9fa;
+    --bg-tertiary: #ffffff;
+    --text-primary: #1a1a1a;
+    --text-secondary: #6c757d;
+    --text-tertiary: #adb5bd;
+    --border-color: #e9ecef;
+    --accent: #4a9eff;
+    --accent-hover: color-mix(in srgb, var(--accent) 85%, black);
+    --danger: #dc3545;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.05);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.07);
+    --radius: 12px;
+    --radius-sm: 8px;
+}
+
+[data-theme="dark"] {
+    --bg-primary: #0a0a0a;
+    --bg-secondary: #1a1a1a;
+    --bg-tertiary: #2a2a2a;
+    --text-primary: #ffffff;
+    --text-secondary: #adb5bd;
+    --text-tertiary: #6c757d;
+    --border-color: #2a2a2a;
+    --shadow-sm: 0 1px 2px rgba(0,0,0,0.2);
+    --shadow-md: 0 4px 6px rgba(0,0,0,0.3);
+}
+
+* {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+}
+
+/* Force all elements to use monospace font */
+input, button, select, textarea {
+    font-family: inherit;
+}
+
+body {
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    line-height: 1.6;
+    transition: background 0.3s, color 0.3s;
+}
+
+#root {
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 2rem 1rem;
+}
+
+.container {
+    width: 100%;
+    max-width: 600px;
+}
+
+/* Header */
+.header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 2rem;
+}
+
+/* Admin panel (top-left) */
+.admin-panel {
+    position: fixed;
+    top: 12px;
+    left: 12px;
+    z-index: 9999;
+}
+.admin-toggle {
+    background: var(--bg-tertiary);
+    border: 1px solid var(--border-color);
+    border-radius: 10px;
+    padding: 6px 8px;
+    cursor: pointer;
+    color: var(--text-secondary);
+}
+.admin-content {
+    margin-top: 8px;
+    background: var(--bg-tertiary);
+    border: 1px solid var(--border-color);
+    border-radius: 12px;
+    padding: 10px;
+    width: 240px;
+    box-shadow: var(--shadow-md);
+}
+.admin-title {
+    font-size: 12px;
+    color: var(--text-secondary);
+    margin-bottom: 6px;
+}
+.admin-content input[type="text"],
+.admin-content input[type="file"] {
+    width: 100%;
+    margin-bottom: 8px;
+}
+.admin-content button[type="submit"] {
+    width: 100%;
+    background: var(--accent);
+    color: #fff;
+    border: none;
+    border-radius: 8px;
+    padding: 6px 8px;
+    cursor: pointer;
+}
+.admin-msg { font-size: 12px; color: var(--text-secondary); margin-top: 6px; }
+
+.header-actions {
+    display: flex;
+    gap: 0.75rem;
+    align-items: center;
+}
+
+.header h1 {
+    font-size: 1.5rem;
+    font-weight: 600;
+    max-width: calc(100% - 60px);
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+}
+
+.handle-link {
+    color: var(--text-secondary);
+    text-decoration: none;
+    transition: all 0.3s ease;
+    display: inline-block;
+    max-width: 100%;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    position: relative;
+    padding: 0.25rem 0.5rem;
+    border-radius: var(--radius-sm);
+}
+
+.handle-link:link,
+.handle-link:visited {
+    color: var(--text-secondary);
+}
+
+.handle-link::before {
+    content: '';
+    position: absolute;
+    top: -2px;
+    right: -2px;
+    bottom: -2px;
+    left: -2px;
+    inset: -2px;
+    border-radius: var(--radius-sm);
+    background: linear-gradient(45deg, var(--accent), transparent);
+    opacity: 0;
+    transition: opacity 0.3s ease;
+    z-index: -1;
+    filter: blur(8px);
+}
+
+.handle-link:hover,
+.handle-link:active {
+    color: var(--accent);
+    text-shadow: 0 0 12px var(--accent);
+}
+
+.handle-link:hover::before {
+    opacity: 0;
+}
+
+.nav-button {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    color: var(--text-secondary);
+    transition: all 0.2s;
+    text-decoration: none;
+}
+
+.nav-button:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    color: var(--accent);
+}
+
+.nav-button svg {
+    stroke: var(--accent);
+}
+
+/* Simple Settings */
+.simple-settings {
+    margin: 1rem 0;
+    padding: 1rem;
+    background: var(--bg-secondary);
+    border-radius: var(--radius);
+    display: flex;
+    flex-direction: column;
+    gap: 1rem;
+    transition: all 0.3s ease;
+    transform-origin: top;
+}
+
+.simple-settings.hidden {
+    display: none;
+}
+
+.settings-row {
+    display: flex;
+    align-items: center;
+    gap: 1rem;
+}
+
+.settings-row label {
+    min-width: 60px;
+    color: var(--text-secondary);
+    font-size: 0.9rem;
+}
+
+.button-group {
+    display: flex;
+    gap: 0.25rem;
+}
+
+.font-btn {
+    padding: 0.25rem 0.75rem;
+    background: transparent;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    color: var(--text-secondary);
+    cursor: pointer;
+    transition: all 0.2s;
+    font-size: 0.85rem;
+}
+
+.font-btn:hover {
+    border-color: var(--accent);
+    color: var(--text-primary);
+}
+
+.font-btn.active {
+    background: var(--accent);
+    border-color: var(--accent);
+    color: white;
+}
+
+#accent-color {
+    width: 50px;
+    height: 32px;
+    border: 2px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    cursor: pointer;
+    transition: border-color 0.2s, box-shadow 0.2s;
+}
+
+#accent-color:hover {
+    border-color: var(--accent);
+}
+
+#accent-color:focus {
+    outline: none;
+    border-color: var(--accent);
+    box-shadow: 0 0 0 3px rgba(74, 158, 255, 0.1);
+}
+
+.preset-colors {
+    display: flex;
+    gap: 0.25rem;
+}
+
+.color-preset {
+    width: 24px;
+    height: 24px;
+    border: 2px solid transparent;
+    border-radius: var(--radius-sm);
+    cursor: pointer;
+    transition: all 0.2s;
+}
+
+.color-preset:hover {
+    transform: scale(1.2);
+    border-color: var(--text-primary);
+    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.15);
+}
+
+.color-preset.active {
+    border-color: var(--accent);
+    box-shadow: 0 0 0 3px rgba(74, 158, 255, 0.2);
+}
+
+/* Settings toggle button */
+.settings-toggle {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s;
+}
+
+.settings-toggle:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.1);
+}
+
+.settings-icon {
+    filter: invert(50%) sepia(0%) saturate(0%) hue-rotate(0deg) brightness(100%) contrast(100%);
+    transition: filter 0.2s;
+}
+
+.settings-toggle:hover .settings-icon {
+    filter: invert(50%) sepia(100%) saturate(500%) hue-rotate(190deg) brightness(100%) contrast(100%);
+}
+
+.theme-toggle {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: all 0.2s;
+}
+
+.theme-toggle:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.1);
+}
+
+.theme-toggle {
+    position: relative;
+}
+
+.theme-toggle svg {
+    stroke: var(--accent);
+}
+
+.theme-indicator {
+    position: absolute;
+    top: calc(100% + 0.5rem);
+    right: 0;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.25rem 0.5rem;
+    font-size: 0.75rem;
+    color: var(--text-secondary);
+    white-space: nowrap;
+    opacity: 0;
+    pointer-events: none;
+    transition: opacity 0.2s;
+    z-index: 1000;
+}
+
+.theme-indicator.visible {
+    opacity: 1;
+}
+
+.sun-icon, .moon-icon {
+    display: none;
+}
+
+[data-theme="light"] .sun-icon {
+    display: block;
+    stroke: #f39c12;
+}
+
+[data-theme="dark"] .moon-icon {
+    display: block;
+    stroke: #8e44ad;
+}
+
+/* Status Display */
+.status-display {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    padding: 2rem;
+    margin-bottom: 1.5rem;
+    text-align: center;
+}
+
+.current-status, .no-status {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    gap: 1rem;
+}
+
+@keyframes subtle-pulse {
+    0%, 100% {
+        transform: scale(1);
+        filter: drop-shadow(0 0 0 transparent);
+    }
+    50% {
+        transform: scale(1.01);
+        filter: drop-shadow(0 0 6px var(--accent));
+    }
+}
+
+.status-emoji {
+    width: 3.5rem;
+    height: 3.5rem;
+    font-size: 3.5rem;
+    line-height: 1;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    position: relative;
+}
+
+.current-status .status-emoji {
+    animation: subtle-pulse 4s ease-in-out infinite;
+}
+
+.custom-emoji-display {
+    width: 100%;
+    height: 100%;
+    object-fit: contain;
+    /* Ensure GIFs animate */
+    image-rendering: auto;
+}
+
+.status-content {
+    display: flex;
+    flex-direction: column;
+    gap: 0.25rem;
+}
+
+.status-text {
+    font-size: 1.25rem;
+    color: var(--text-primary);
+    margin: 0;
+}
+
+.status-text a {
+    color: var(--accent);
+    text-decoration: underline;
+    text-underline-offset: 2px;
+}
+
+.no-status .status-text {
+    color: var(--text-tertiary);
+}
+
+.status-meta {
+    font-size: 0.875rem;
+    color: var(--text-secondary);
+    margin: 0;
+}
+
+.expires-indicator {
+    color: var(--accent);
+    font-weight: 500;
+    position: relative;
+}
+
+.expires-indicator::before {
+    content: '⏱';
+    margin-right: 0.25rem;
+    opacity: 0.7;
+}
+
+/* Status Editor */
+.status-editor {
+    margin-bottom: 1.5rem;
+}
+
+.input-group {
+    display: flex;
+    gap: 0.5rem;
+    align-items: center;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    padding: 0.5rem;
+    transition: border-color 0.2s;
+}
+
+/* Status text row - keeps emoji and input together */
+.status-text-row {
+    display: flex;
+    gap: 0.5rem;
+    align-items: center;
+    flex: 1;
+}
+
+.input-group:focus-within {
+    border-color: var(--accent);
+    box-shadow: 0 0 0 3px rgba(74, 158, 255, 0.1);
+}
+
+.emoji-trigger {
+    background: transparent;
+    border: none;
+    font-size: 1.75rem;
+    cursor: pointer;
+    padding: 0.25rem;
+    border-radius: var(--radius-sm);
+    transition: background 0.2s;
+    flex-shrink: 0;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    width: 3rem;
+    height: 3rem;
+    overflow: hidden;
+}
+
+.emoji-trigger img {
+    max-width: 100%;
+    max-height: 100%;
+    object-fit: contain;
+}
+
+.emoji-trigger:hover {
+    background: var(--bg-tertiary);
+}
+
+#status-text {
+    flex: 1;
+    background: transparent;
+    border: none;
+    font-size: 1rem;
+    color: var(--text-primary);
+    outline: none;
+}
+
+#status-text::placeholder {
+    color: var(--text-tertiary);
+}
+
+.input-actions {
+    display: flex;
+    gap: 0.5rem;
+    align-items: center;
+}
+
+.clear-after-btn {
+    display: flex;
+    align-items: center;
+    gap: 0.25rem;
+    background: transparent;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    padding: 0.5rem 0.75rem;
+    font-size: 0.875rem;
+    color: var(--text-secondary);
+    cursor: pointer;
+    transition: all 0.2s;
+}
+
+.clear-after-btn:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    color: var(--accent);
+}
+
+.save-btn {
+    background: var(--accent);
+    color: white;
+    border: none;
+    border-radius: var(--radius-sm);
+    padding: 0.5rem 1.25rem;
+    font-size: 0.875rem;
+    font-weight: 500;
+    cursor: pointer;
+    transition: all 0.2s;
+    box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
+}
+
+.save-btn:hover {
+    background: var(--accent-hover);
+    transform: translateY(-1px);
+    box-shadow: 0 4px 8px rgba(0, 0, 0, 0.15);
+}
+
+.save-btn:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+}
+
+/* Emoji Picker */
+.emoji-picker-overlay {
+    position: fixed;
+    top: 0;
+    right: 0;
+    bottom: 0;
+    left: 0;
+    inset: 0; /* Modern browsers */
+    background: rgba(6, 6, 8, 0.75);
+    backdrop-filter: blur(6px);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: clamp(1rem, 6vw, 2.5rem);
+    z-index: 1400;
+}
+
+.emoji-picker-overlay.hidden {
+    display: none;
+}
+
+.emoji-picker {
+    position: relative;
+    z-index: 1;
+    width: min(960px, 94vw);
+    height: min(90vh, 820px);
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: clamp(var(--radius), 2vw, 24px);
+    box-shadow: 0 32px 80px rgba(0, 0, 0, 0.45);
+    display: flex;
+    flex-direction: column;
+    gap: 1.25rem;
+    padding: clamp(1.25rem, 5vw, 2.5rem);
+    overflow: hidden;
+}
+
+
+.emoji-picker-header {
+    display: flex;
+    align-items: flex-start;
+    justify-content: space-between;
+    gap: 1rem;
+}
+
+.emoji-picker-header h2 {
+    margin: 0;
+    font-size: 1.5rem;
+    color: var(--text-primary);
+}
+
+.emoji-picker-subtitle {
+    margin: 0.25rem 0 0;
+    font-size: 0.875rem;
+    color: var(--text-tertiary);
+}
+
+.emoji-picker-close {
+    border: 1px solid var(--border-color);
+    background: var(--bg-tertiary);
+    color: var(--text-secondary);
+    border-radius: 999px;
+    width: 2.25rem;
+    height: 2.25rem;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    cursor: pointer;
+    transition: all 0.2s ease;
+}
+
+.emoji-picker-close:hover,
+.emoji-picker-close:focus-visible {
+    color: white;
+    background: var(--accent);
+    border-color: transparent;
+    outline: none;
+}
+
+.emoji-search-container {
+    margin: 0;
+}
+
+.emoji-search {
+    width: 100%;
+    padding: 0.75rem 1rem;
+    background: var(--bg-primary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    color: var(--text-primary);
+    font-size: 0.95rem;
+    outline: none;
+    transition: border-color 0.2s ease, box-shadow 0.2s ease;
+}
+
+.emoji-search:focus {
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px rgba(74, 158, 255, 0.12);
+}
+
+.emoji-search::placeholder {
+    color: var(--text-tertiary);
+}
+
+.emoji-picker-body {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    gap: 0.75rem;
+    min-height: 0;
+}
+
+.emoji-categories {
+    display: flex;
+    gap: 0.75rem;
+    overflow-x: auto;
+    padding-bottom: 0.5rem;
+    border-bottom: 1px solid rgba(255, 255, 255, 0.06);
+    scrollbar-width: none;
+}
+
+.emoji-categories.hidden {
+    display: none;
+}
+
+.emoji-categories::-webkit-scrollbar {
+    display: none;
+}
+
+.category-btn {
+    background: transparent;
+    border: 1px solid transparent;
+    color: var(--text-secondary);
+    font-size: 0.8rem;
+    padding: 0.4rem 0.75rem;
+    cursor: pointer;
+    white-space: nowrap;
+    border-radius: 999px;
+    transition: all 0.2s ease;
+}
+
+.category-btn:hover,
+.category-btn:focus-visible {
+    border-color: var(--accent);
+    color: var(--accent);
+    outline: none;
+}
+
+.category-btn.active {
+    background: var(--accent);
+    color: white;
+    border-color: transparent;
+}
+
+.emoji-grid {
+    flex: 1;
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(min(84px, 18vw), 1fr));
+    gap: 0.75rem;
+    padding-right: 0.25rem;
+    overflow-y: auto;
+    scrollbar-width: none;
+}
+
+.emoji-grid::-webkit-scrollbar {
+    display: none;
+}
+
+.emoji-option {
+    background: transparent;
+    border: none;
+    font-size: 2.4rem;
+    cursor: pointer;
+    transition: transform 0.15s ease;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    width: 100%;
+    aspect-ratio: 1;
+}
+
+.emoji-option:hover {
+    transform: translateY(-3px) scale(1.05);
+}
+
+.emoji-option:focus-visible {
+    outline: 2px solid var(--accent);
+    outline-offset: 6px;
+    border-radius: 16px;
+}
+
+.emoji-option.custom-emoji img {
+    width: 75%;
+    height: 75%;
+    object-fit: contain;
+}
+
+.emoji-grid-placeholder,
+.emoji-loading-message {
+    text-align: center;
+    color: var(--text-tertiary);
+    padding: 2rem 1rem;
+    font-size: 0.95rem;
+}
+
+.bufo-helper {
+    text-align: center;
+    padding: 1rem;
+    border-top: 1px solid var(--border);
+}
+
+.bufo-helper a {
+    color: var(--text-secondary);
+    text-decoration: none;
+    font-size: 0.9rem;
+    transition: color 0.2s ease;
+}
+
+.bufo-helper a:hover {
+    color: var(--accent);
+    text-decoration: underline;
+}
+
+.emoji-picker-overlay::before {
+    content: '';
+    position: fixed;
+    top: 0;
+    right: 0;
+    bottom: 0;
+    left: 0;
+}
+
+@media (max-width: 640px) {
+    .emoji-picker-overlay {
+        padding: 0;
+        align-items: stretch;
+    }
+
+    .emoji-picker {
+        width: 100%;
+        height: 100%;
+        max-height: none;
+        border-radius: 0;
+        padding: 1.5rem 1rem;
+        gap: 1rem;
+    }
+
+    .emoji-grid {
+        grid-template-columns: repeat(auto-fill, minmax(72px, 1fr));
+        gap: 0.5rem;
+    }
+}
+
+@media (prefers-reduced-motion: reduce) {
+    .emoji-picker-overlay {
+        backdrop-filter: none;
+        background: rgba(6, 6, 8, 0.85);
+    }
+
+    .emoji-picker,
+    .emoji-option {
+        transition: none;
+    }
+}
+
+/* Clear Picker */
+.clear-picker {
+    position: absolute;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius);
+    padding: 0.75rem;
+    box-shadow: var(--shadow-md);
+    z-index: 1000;
+    display: flex;
+    flex-direction: column;
+    gap: 0.375rem;
+    min-width: 180px;
+}
+
+.clear-option {
+    background: transparent;
+    border: none;
+    color: var(--text-primary);
+    font-size: 0.875rem;
+    padding: 0.75rem 1.25rem;
+    text-align: left;
+    cursor: pointer;
+    border-radius: var(--radius-sm);
+    transition: background 0.2s;
+    white-space: nowrap;
+}
+
+.clear-option:hover {
+    background: var(--bg-tertiary);
+    color: var(--accent);
+}
+
+.clear-option.active {
+    background: var(--accent);
+    color: white;
+}
+
+/* Custom datetime input */
+.custom-datetime {
+    padding: 0.75rem;
+    border-top: 1px solid var(--border-color);
+    display: flex;
+    gap: 0.5rem;
+    align-items: center;
+}
+
+.custom-datetime input {
+    flex: 1;
+    padding: 0.5rem;
+    background: var(--bg-primary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    color: var(--text-primary);
+    font-size: 0.875rem;
+    font-family: inherit;
+}
+
+.custom-datetime-set {
+    padding: 0.5rem 1rem;
+    background: var(--accent);
+    color: white;
+    border: none;
+    border-radius: var(--radius-sm);
+    font-size: 0.875rem;
+    cursor: pointer;
+    transition: background 0.2s;
+    font-family: inherit;
+}
+
+.custom-datetime-set:hover {
+    background: var(--accent-hover);
+}
+
+/* Session Info */
+.session-info {
+    text-align: center;
+    margin: 2rem 0;
+}
+
+.logout-link {
+    color: var(--text-tertiary);
+    text-decoration: none;
+    font-size: 0.875rem;
+    transition: color 0.2s;
+}
+
+.logout-link:hover {
+    color: var(--accent);
+}
+
+/* History */
+.history {
+    margin: 2rem 0;
+    padding-top: 2rem;
+    border-top: 1px solid var(--border-color);
+}
+
+.history h3 {
+    font-size: 0.875rem;
+    font-weight: 500;
+    color: var(--text-secondary);
+    margin-bottom: 1rem;
+    text-transform: uppercase;
+    letter-spacing: 0.05em;
+}
+
+.history-item {
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+    padding: 0.5rem 0;
+    position: relative;
+}
+
+.history-emoji {
+    width: 1.5rem;
+    height: 1.5rem;
+    font-size: 1.25rem;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    flex-shrink: 0;
+}
+
+.history-emoji .custom-emoji-display {
+    width: 100%;
+    height: 100%;
+}
+
+.history-content {
+    display: flex;
+    flex-direction: column;
+    gap: 0.25rem;
+    flex: 1;
+    min-width: 0;
+}
+
+.history-text {
+    color: var(--text-primary);
+    font-size: 0.875rem;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+}
+
+.history-text a {
+    color: var(--accent);
+    text-decoration: underline;
+    text-underline-offset: 2px;
+}
+
+.history-time {
+    color: var(--text-tertiary);
+    font-size: 0.75rem;
+}
+
+.history-delete {
+    background: transparent;
+    border: none;
+    color: var(--text-tertiary);
+    cursor: pointer;
+    padding: 0.25rem;
+    border-radius: var(--radius-sm);
+    opacity: 0;
+    transition: all 0.2s;
+}
+
+.history-item:hover .history-delete {
+    opacity: 1;
+}
+
+.history-delete:hover {
+    background: var(--bg-tertiary);
+    color: var(--danger);
+}
+
+/* Bottom Navigation */
+.bottom-nav {
+    display: flex;
+    justify-content: center;
+    gap: 1rem;
+    padding-top: 2rem;
+    margin-top: 2rem;
+    border-top: 1px solid var(--border-color);
+}
+
+.nav-button-bottom {
+    display: flex;
+    align-items: center;
+    gap: 0.5rem;
+    padding: 0.75rem 1.25rem;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-sm);
+    color: var(--text-secondary);
+    text-decoration: none;
+    transition: all 0.2s;
+    font-size: 0.875rem;
+}
+
+.nav-button-bottom:hover {
+    background: var(--bg-tertiary);
+    border-color: var(--accent);
+    color: var(--accent);
+}
+
+.nav-button-bottom svg {
+    stroke: currentColor;
+    flex-shrink: 0;
+}
+
+/* Mobile adjustments */
+@media (max-width: 640px) {
+    #root {
+        padding: 1rem;
+    }
+    
+    .container {
+        max-width: 100%;
+    }
+    
+    .header h1 {
+        font-size: 1.25rem;
+    }
+    
+    .status-emoji {
+        font-size: 3rem;
+    }
+    
+    /* Better mobile layout for status input */
+    .input-group {
+        flex-direction: column;
+        gap: 0.75rem;
+        padding: 0.75rem;
+    }
+    
+    /* Status text row - keep emoji and input on same line */
+    .status-text-row {
+        display: flex;
+        gap: 0.5rem;
+        align-items: center;
+        width: 100%;
+    }
+    
+    .emoji-trigger {
+        font-size: 1.5rem;
+        width: 2.5rem;
+        height: 2.5rem;
+        flex-shrink: 0;
+    }
+    
+    #status-text {
+        flex: 1;
+        min-width: 0;
+        padding: 0.5rem;
+        font-size: 1rem;
+    }
+    
+    .input-actions {
+        width: 100%;
+        justify-content: space-between;
+        gap: 0.5rem;
+    }
+    
+    .clear-after-btn {
+        flex: 1;
+        justify-content: center;
+    }
+    
+    .clear-after-btn span {
+        display: inline-block;
+        max-width: 100%;
+        overflow: hidden;
+        text-overflow: ellipsis;
+        white-space: nowrap;
+    }
+    
+    .save-btn {
+        min-width: 80px;
+    }
+    
+    .emoji-picker {
+        width: calc(100vw - 2rem);
+        left: 1rem;
+        right: 1rem;
+        max-width: none;
+    }
+    
+    .clear-picker {
+        width: calc(100vw - 2rem);
+        left: 1rem !important;
+        right: 1rem;
+        max-width: none;
+    }
+    
+    /* History section improvements */
+    .history {
+        padding: 1.5rem 0;
+    }
+    
+    .history h3 {
+        font-size: 0.75rem;
+        text-align: center;
+        margin-bottom: 1.25rem;
+    }
+    
+    .history-item {
+        padding: 0.75rem 0;
+        border-bottom: 1px solid var(--border-color);
+    }
+    
+    .history-item:last-child {
+        border-bottom: none;
+    }
+}
+/* Webhook Modal */
+.webhook-modal.hidden { display: none; }
+.webhook-modal {
+    position: fixed;
+    top: 0;
+    right: 0;
+    bottom: 0;
+    left: 0;
+    inset: 0; /* Modern browsers */
+    background: rgba(0,0,0,0.6);
+    z-index: 1000;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+        .webhook-modal-content {
+            width: 96vw;
+            height: 92vh;
+            max-width: 1400px;
+            max-height: 92vh;
+            background: var(--bg, #111);
+            color: var(--text, #fff);
+            border: 1px solid var(--border-color, #2a2a2a);
+            border-radius: 12px;
+            display: flex;
+            flex-direction: column;
+        }
+        .webhook-modal-header {
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            padding: 16px 20px;
+            border-bottom: 1px solid var(--border-color, #2a2a2a);
+        }
+        .webhook-modal-header h2 { margin: 0; font-size: 20px; }
+        .webhook-modal-header button {
+            background: transparent;
+            color: inherit;
+            border: 1px solid var(--border-color, #2a2a2a);
+            border-radius: 8px;
+            padding: 6px 10px;
+            cursor: pointer;
+        }
+        .webhook-modal-body {
+            padding: 16px 20px;
+            overflow: auto;
+            height: calc(92vh - 60px);
+        }
+        .webhook-form {
+            display: grid;
+            grid-template-columns: 1.2fr 0.8fr 1fr auto;
+            gap: 8px;
+            margin-bottom: 16px;
+        }
+        .webhook-form input { 
+            background: var(--bg-secondary, #0d0d0d);
+            color: var(--text, #fff);
+            border: 1px solid var(--border-color, #2a2a2a);
+            border-radius: 8px;
+            padding: 10px 12px;
+        }
+        .webhook-form button {
+            background: var(--accent, #1DA1F2);
+            color: #000;
+            border: none;
+            border-radius: 8px;
+            padding: 10px 12px;
+            cursor: pointer;
+        }
+        .field-help { font-size: 12px; opacity: 0.8; margin-top: 2px; grid-column: 1 / -1; }
+        .webhook-list .item {
+            border: 1px solid var(--border-color, #2a2a2a);
+            border-radius: 8px;
+            padding: 12px;
+            margin-bottom: 10px;
+            display: grid;
+            grid-template-columns: 1fr auto;
+            gap: 8px;
+        }
+.webhook-list .meta { font-size: 12px; opacity: 0.8; }
+.webhook-actions { display: flex; gap: 8px; align-items: center; }
+.webhook-actions button {
+    background: transparent;
+    color: inherit;
+    border: 1px solid var(--border-color, #2a2a2a);
+    border-radius: 8px;
+    padding: 6px 10px;
+    cursor: pointer;
+}
+        .webhook-actions .danger { border-color: #803; color: #f77; }
+        .webhook-active { display: inline-flex; align-items: center; gap: 6px; font-size: 12px; }
+        .webhook-active input { transform: translateY(1px); }
+
+        /* Collapsible guide */
+        .wh-guide {
+            margin-top: 20px;
+            border: 1px solid var(--border-color, #2a2a2a);
+            border-radius: 10px;
+            overflow: hidden;
+        }
+        .wh-guide summary {
+            padding: 12px 14px;
+            cursor: pointer;
+            background: var(--bg-secondary, #0f0f0f);
+            font-weight: 600;
+            outline: none;
+        }
+        .wh-guide .content { padding: 14px; }
+        .wh-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; }
+        .wh-grid pre { background: #0b0b0b; border: 1px solid var(--border-color); border-radius: 8px; padding: 12px; overflow: auto; font-size: 12px; }
+        @media (max-width: 900px) { .wh-grid { grid-template-columns: 1fr; } }
+</style>
+
+<script>
+// Theme management
+const initTheme = () => {
+    const saved = localStorage.getItem('theme');
+    const theme = saved || 'system';
+    
+    if (theme === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', theme);
+    }
+};
+
+const toggleTheme = () => {
+    const saved = localStorage.getItem('theme') || 'system';
+    const themes = ['system', 'light', 'dark'];
+    const currentIndex = themes.indexOf(saved);
+    const next = themes[(currentIndex + 1) % themes.length];
+    
+    localStorage.setItem('theme', next);
+    
+    if (next === 'system') {
+        const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+        document.body.setAttribute('data-theme', prefersDark ? 'dark' : 'light');
+    } else {
+        document.body.setAttribute('data-theme', next);
+    }
+    
+    // Show theme indicator
+    const indicator = document.getElementById('theme-indicator');
+    if (indicator) {
+        indicator.textContent = next;
+        indicator.classList.add('visible');
+        setTimeout(() => {
+            indicator.classList.remove('visible');
+        }, 1500);
+    }
+};
+
+// Dynamic emoji data - will be loaded from CDN
+let emojiKeywords = {};
+let emojiData = {
+    frequent: [],
+    people: [],
+    nature: [],
+    food: [],
+    activity: [],
+    travel: [],
+    objects: [],
+    symbols: [],
+    custom: []
+};
+// Initialize on page load
+// Timestamp formatting is handled by /static/timestamps.js
+
+    document.addEventListener('DOMContentLoaded', async () => {
+    initTheme();
+    // Timestamps are auto-initialized by timestamps.js
+    
+    // Simple settings
+    const initSettings = async () => {
+        // Try to load from API first, fall back to localStorage
+        let savedFont = localStorage.getItem('fontFamily') || 'mono';
+        let savedAccent = localStorage.getItem('accentColor') || '#1DA1F2';
+        
+        // If user is logged in, fetch from API
+        const isOwner = document.querySelector('.settings-toggle');
+        if (isOwner) {
+            try {
+                const response = await fetch('/api/preferences');
+                if (response.ok) {
+                    const data = await response.json();
+                    if (!data.error) {
+                        savedFont = data.font_family || savedFont;
+                        savedAccent = data.accent_color || savedAccent;
+                        // Sync to localStorage
+                        localStorage.setItem('fontFamily', savedFont);
+                        localStorage.setItem('accentColor', savedAccent);
+                    }
+                }
+            } catch (err) {
+                console.log('Using localStorage preferences');
+            }
+        }
+        
+        // Apply font family
+        const fontMap = {
+            'system': '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
+            'mono': '"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',
+            'serif': 'ui-serif, Georgia, Cambria, serif',
+            'comic': '"Comic Sans MS", "Comic Sans", cursive'
+        };
+        document.documentElement.style.setProperty('--font-family', fontMap[savedFont] || fontMap.system);
+        
+        // Update buttons
+        document.querySelectorAll('.font-btn').forEach(btn => {
+            btn.classList.toggle('active', btn.dataset.font === savedFont);
+        });
+        
+        // Apply accent color
+        document.documentElement.style.setProperty('--accent', savedAccent);
+        const accentInput = document.getElementById('accent-color');
+        if (accentInput) {
+            accentInput.value = savedAccent;
+        }
+        
+        // Return the loaded values for use elsewhere
+        return { savedFont, savedAccent };
+    };
+    
+    // Settings toggle
+    const settingsToggle = document.getElementById('settings-toggle');
+    const settingsPanel = document.getElementById('simple-settings');
+    if (settingsToggle && settingsPanel) {
+        settingsToggle.addEventListener('click', () => {
+            settingsPanel.classList.toggle('hidden');
+        });
+    }
+    
+    // Helper to save preferences to API
+    const savePreferencesToAPI = async (updates) => {
+        try {
+            await fetch('/api/preferences', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(updates)
+            });
+        } catch (err) {
+            console.log('Failed to save preferences to server');
+        }
+    };
+    
+    // Font family buttons
+    document.querySelectorAll('.font-btn').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const font = btn.dataset.font;
+            localStorage.setItem('fontFamily', font);
+            
+            // Update UI
+            document.querySelectorAll('.font-btn').forEach(b => b.classList.remove('active'));
+            btn.classList.add('active');
+            
+            // Apply
+            const fontMap = {
+                'system': '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif',
+                'mono': '"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',
+                'serif': 'ui-serif, Georgia, Cambria, serif',
+                'comic': '"Comic Sans MS", "Comic Sans", cursive'
+            };
+            document.documentElement.style.setProperty('--font-family', fontMap[font] || fontMap.system);
+            
+            // Save to API if logged in
+            if (document.querySelector('.settings-toggle')) {
+                savePreferencesToAPI({ font_family: font });
+            }
+        });
+    });
+    
+    // Accent color
+    const accentInput = document.getElementById('accent-color');
+    if (accentInput) {
+        accentInput.addEventListener('input', () => {
+            const color = accentInput.value;
+            localStorage.setItem('accentColor', color);
+            document.documentElement.style.setProperty('--accent', color);
+            updateActivePreset(color);
+            
+            // Save to API if logged in
+            if (document.querySelector('.settings-toggle')) {
+                savePreferencesToAPI({ accent_color: color });
+            }
+        });
+    }
+    
+    // Function to update active preset
+    const updateActivePreset = (currentColor) => {
+        document.querySelectorAll('.color-preset').forEach(preset => {
+            preset.classList.toggle('active', preset.dataset.color.toLowerCase() === currentColor.toLowerCase());
+        });
+    };
+
+    // Color presets
+    document.querySelectorAll('.color-preset').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const color = btn.dataset.color;
+            localStorage.setItem('accentColor', color);
+            document.documentElement.style.setProperty('--accent', color);
+            if (accentInput) {
+                accentInput.value = color;
+            }
+            
+            updateActivePreset(color);
+            
+            // Save to API if logged in
+            if (document.querySelector('.settings-toggle')) {
+                savePreferencesToAPI({ accent_color: color });
+            }
+        });
+    });
+    
+    // Initialize settings first, then set active preset
+    const { savedFont, savedAccent } = await initSettings();
+    
+    // Set initial active preset after settings are loaded with the actual loaded accent
+    updateActivePreset(savedAccent);
+    
+    // Load emoji data
+    if (window.emojiDataLoader) {
+        const data = await window.emojiDataLoader.loadEmojiData();
+        emojiKeywords = data.emojis;
+        window.__emojiSlugs = data.slugs || {};
+        window.__reservedEmojiNames = new Set(data.reserved || []);
+
+        // Webhook modal handlers (owner only)
+        const openWebhookBtn = document.getElementById('open-webhook-config');
+        const modal = document.getElementById('webhook-modal');
+        const closeModalBtn = document.getElementById('close-webhook-modal');
+        const listEl = document.getElementById('webhook-list');
+        const formEl = document.getElementById('create-webhook-form');
+
+        if (openWebhookBtn && modal && closeModalBtn && listEl && formEl) {
+            const fetchWebhooks = async () => {
+                const res = await fetch('/api/webhooks');
+                if (!res.ok) return [];
+                const data = await res.json();
+                return data.webhooks || [];
+            };
+
+            const renderWebhooks = (hooks) => {
+                if (!hooks.length) {
+                    listEl.innerHTML = '<p class="meta">no webhooks configured yet</p>';
+                    return;
+                }
+                listEl.innerHTML = '';
+                hooks.forEach(h => {
+                    const item = document.createElement('div');
+                    item.className = 'item';
+                    item.innerHTML = `
+                        <div>
+                            <div><strong>${h.url}</strong></div>
+                            <div class="meta">
+                                events: ${h.events || '*'} • secret: ${h.secret_masked} • ${h.active ? 'active' : 'inactive'}
+                            </div>
+                        </div>
+                        <div class="webhook-actions">
+                            <label class="webhook-active"><input type="checkbox" ${h.active ? 'checked' : ''} data-action="toggle" data-id="${h.id}"> active</label>
+                            <button data-action="rotate" data-id="${h.id}">rotate secret</button>
+                            <button class="danger" data-action="delete" data-id="${h.id}">delete</button>
+                        </div>
+                    `;
+                    listEl.appendChild(item);
+                });
+            };
+
+            const openModal = async () => {
+                modal.classList.remove('hidden');
+                modal.setAttribute('aria-hidden', 'false');
+                const hooks = await fetchWebhooks();
+                renderWebhooks(hooks);
+            };
+
+            const closeModal = () => {
+                modal.classList.add('hidden');
+                modal.setAttribute('aria-hidden', 'true');
+            };
+
+            openWebhookBtn.addEventListener('click', openModal);
+            closeModalBtn.addEventListener('click', closeModal);
+            modal.addEventListener('click', (e) => { if (e.target === modal) closeModal(); });
+
+            formEl.addEventListener('submit', async (e) => {
+                e.preventDefault();
+                const url = document.getElementById('wh-url').value.trim();
+                const secret = document.getElementById('wh-secret').value.trim();
+                const events = document.getElementById('wh-events').value.trim();
+                const res = await fetch('/api/webhooks', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ url, secret: secret || null, events: events || null })
+                });
+                if (res.ok) {
+                    const hooks = await fetchWebhooks();
+                    renderWebhooks(hooks);
+                    formEl.reset();
+                    try { const data = await res.json(); if (data.secret) alert('Webhook created. Save this secret now: ' + data.secret); } catch {}
+                } else {
+                    alert('Failed to create webhook');
+                }
+            });
+
+            listEl.addEventListener('click', async (e) => {
+                const btn = e.target.closest('button');
+                if (!btn) return;
+                const id = btn.dataset.id;
+                const action = btn.dataset.action;
+                if (action === 'delete') {
+                    if (!confirm('Delete this webhook?')) return;
+                    const res = await fetch(`/api/webhooks/${id}`, { method: 'DELETE' });
+                    if (res.ok) {
+                        const hooks = await fetchWebhooks();
+                        renderWebhooks(hooks);
+                    }
+                } else if (action === 'rotate') {
+                    const res = await fetch(`/api/webhooks/${id}/rotate`, { method: 'POST' });
+                    if (res.ok) {
+                        const data = await res.json();
+                        alert('New secret: ' + data.secret + '\nSave it now.');
+                        const hooks = await fetchWebhooks();
+                        renderWebhooks(hooks);
+                    }
+                }
+            });
+
+            listEl.addEventListener('change', async (e) => {
+                const input = e.target.closest('input[type="checkbox"][data-action="toggle"]');
+                if (!input) return;
+                const id = input.dataset.id;
+                const active = !!input.checked;
+                await fetch(`/api/webhooks/${id}`, {
+                    method: 'PUT', headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ active })
+                });
+            });
+        }
+
+        // Load frequent emojis from API
+        let frequentEmojis = ['😊', '👍', '❤️', '😂', '🎉', '🔥', '✨', '💯', '🚀', '💪', '🙏', '👏']; // defaults
+        try {
+            const response = await fetch('/api/frequent-emojis');
+            if (response.ok) {
+                frequentEmojis = await response.json();
+            }
+        } catch (e) {
+            console.log('Using default frequent emojis');
+        }
+        
+        emojiData = {
+            ...data.categories,
+            frequent: frequentEmojis,
+            custom: [] // Will be filled with custom emojis
+        };
+    }
+    
+    // Theme toggle
+    const themeToggle = document.getElementById('theme-toggle');
+    if (themeToggle) {
+        themeToggle.addEventListener('click', toggleTheme);
+    }
+    
+    // Only initialize interactive elements if user is owner
+    {% if is_owner %}
+    
+    // Emoji picker
+    const emojiTrigger = document.getElementById('emoji-trigger');
+    const emojiPickerOverlay = document.getElementById('emoji-picker-overlay');
+    const emojiPicker = document.getElementById('emoji-picker');
+    const emojiPickerClose = document.getElementById('emoji-picker-close');
+    const emojiGrid = document.getElementById('emoji-grid');
+    const selectedEmoji = document.getElementById('selected-emoji');
+    const statusInput = document.getElementById('status-input');
+    const emojiSearch = document.getElementById('emoji-search');
+    const emojiCategories = document.getElementById('emoji-categories');
+    let lastFocusBeforeEmojiPicker = null;
+    let scrollPosition = 0;
+    let isScrollLocked = false;
+    let keydownBound = false;
+
+    // Clear time picker
+    const clearAfterBtn = document.getElementById('clear-after-btn');
+    const clearPicker = document.getElementById('clear-picker');
+    const clearText = document.getElementById('clear-text');
+    const expiresSelect = document.getElementById('expires_in');
+
+    const isEmojiPickerOpen = () => emojiPickerOverlay && !emojiPickerOverlay.classList.contains('hidden');
+
+    const handleKeydown = (e) => {
+        if (e.key === 'Escape' && isEmojiPickerOpen()) {
+            closeEmojiPicker();
+        }
+    };
+    
+    // Clean up event listener on page unload
+    window.addEventListener('beforeunload', () => {
+        if (keydownBound) {
+            document.removeEventListener('keydown', handleKeydown);
+            keydownBound = false;
+        }
+    });
+
+    const openEmojiPicker = () => {
+        if (!emojiPickerOverlay || !emojiPicker) return;
+
+        lastFocusBeforeEmojiPicker = document.activeElement;
+        scrollPosition = window.scrollY || document.documentElement.scrollTop || 0;
+
+        emojiPickerOverlay.classList.remove('hidden');
+        emojiPickerOverlay.setAttribute('aria-hidden', 'false');
+        document.body.classList.add('modal-open');
+        document.body.style.top = `-${scrollPosition}px`;
+        isScrollLocked = true;
+        if (clearPicker) clearPicker.style.display = 'none';
+
+        if (emojiSearch) {
+            emojiSearch.value = '';
+            if (emojiCategories) emojiCategories.classList.remove('hidden');
+            requestAnimationFrame(() => {
+                try { emojiSearch.focus(); } catch (_) {}
+            });
+        }
+
+        ensureCustomEmojis({ showLoading: false, showErrors: false }).then(() => {
+            loadEmojiCategory('frequent');
+        });
+
+        if (!keydownBound) {
+            document.addEventListener('keydown', handleKeydown);
+            keydownBound = true;
+        }
+    };
+
+    const closeEmojiPicker = () => {
+        if (!emojiPickerOverlay) return;
+        emojiPickerOverlay.classList.add('hidden');
+        emojiPickerOverlay.setAttribute('aria-hidden', 'true');
+        document.body.classList.remove('modal-open');
+        document.body.style.top = '';
+        if (isScrollLocked) {
+            window.scrollTo(0, scrollPosition);
+        }
+        scrollPosition = 0;
+        isScrollLocked = false;
+        if (lastFocusBeforeEmojiPicker && typeof lastFocusBeforeEmojiPicker.focus === 'function') {
+            const focusTarget = lastFocusBeforeEmojiPicker;
+            requestAnimationFrame(() => {
+                try { focusTarget.focus(); } catch (_) {}
+            });
+        }
+        lastFocusBeforeEmojiPicker = null;
+
+        if (keydownBound) {
+            document.removeEventListener('keydown', handleKeydown);
+            keydownBound = false;
+        }
+    };
+
+    // Show emoji picker
+    if (emojiTrigger && emojiPickerOverlay) {
+        emojiTrigger.addEventListener('click', (e) => {
+            e.preventDefault();
+            e.stopPropagation();
+            if (isEmojiPickerOpen()) {
+                closeEmojiPicker();
+            } else {
+                openEmojiPicker();
+            }
+        });
+    }
+
+    if (emojiPickerClose) {
+        emojiPickerClose.addEventListener('click', (e) => {
+            e.preventDefault();
+            closeEmojiPicker();
+        });
+    }
+
+    if (emojiPickerOverlay) {
+        emojiPickerOverlay.addEventListener('click', (e) => {
+            // Only close if clicking the overlay itself, not the picker content
+            if (e.target === emojiPickerOverlay) {
+                closeEmojiPicker();
+            }
+        });
+    }
+    
+    // Emoji data caches
+    let customEmojis = [];
+    let customEmojiMap = new Map();
+    let customEmojiFetchPromise = null;
+    let searchDebounce;
+    const SEARCH_DEBOUNCE_MS = 120;
+
+    const showGridMessage = (message, className = 'emoji-grid-placeholder') => {
+        if (!emojiGrid) return;
+        const placeholder = document.createElement('div');
+        placeholder.className = className;
+        placeholder.textContent = message;
+        emojiGrid.replaceChildren(placeholder);
+    };
+
+    const createCustomEmojiButton = (emoji) => {
+        const button = document.createElement('button');
+        button.type = 'button';
+        button.className = 'emoji-option custom-emoji';
+        button.dataset.emoji = `custom:${emoji.name}`;
+        button.dataset.name = emoji.name;
+
+        const img = document.createElement('img');
+        // Use placeholder initially to avoid 404s
+        img.src = 'data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7';
+        img.dataset.emojiName = emoji.name;
+        img.dataset.emojiFilename = emoji.filename;
+        img.alt = emoji.name;
+        img.title = emoji.name;
+        button.appendChild(img);
+        
+        // Load the actual image after a brief delay to let resolver initialize
+        requestAnimationFrame(() => {
+            img.src = `/emojis/${emoji.filename}`;
+        });
+        
+        return button;
+    };
+
+    const createStandardEmojiButton = (emoji, title = '') => {
+        const button = document.createElement('button');
+        button.type = 'button';
+        button.className = 'emoji-option';
+        button.dataset.emoji = emoji;
+        if (title) {
+            button.dataset.name = title;
+            button.title = title;
+        }
+        button.textContent = emoji;
+        return button;
+    };
+
+    const renderEmojiButtons = (buttons) => {
+        if (!emojiGrid) return;
+        const fragment = document.createDocumentFragment();
+        buttons.forEach(btn => fragment.appendChild(btn));
+        emojiGrid.replaceChildren(fragment);
+    };
+
+    const fetchCustomEmojis = async () => {
+        const response = await fetch('/api/custom-emojis');
+        const data = await response.json();
+        if (!Array.isArray(data)) {
+            throw new Error('Invalid custom emoji payload');
+        }
+        customEmojis = data;
+        customEmojiMap = new Map(data.map(emoji => [emoji.name, emoji]));
+        return customEmojis;
+    };
+
+    const ensureCustomEmojis = async ({ showLoading = false, showErrors = true } = {}) => {
+        if (customEmojis.length) return customEmojis;
+        if (showLoading) {
+            showGridMessage('loading custom emojis…', 'emoji-loading-message');
+        }
+        if (!customEmojiFetchPromise) {
+            customEmojiFetchPromise = fetchCustomEmojis()
+                .catch(err => {
+                    console.error('Failed to load custom emojis:', err);
+                    customEmojis = [];
+                    customEmojiMap = new Map();
+                    if (showErrors) {
+                        showGridMessage('failed to load custom emojis');
+                    }
+                    throw err;
+                })
+                .finally(() => {
+                    customEmojiFetchPromise = null;
+                });
+        }
+        try {
+            await customEmojiFetchPromise;
+        } catch (_) {
+            return [];
+        }
+        return customEmojis;
+    };
+
+    // Quietly preload custom emojis so the custom tab feels instant
+    ensureCustomEmojis({ showLoading: false, showErrors: false }).catch(() => {});
+
+    const updateActiveCategory = (category) => {
+        document.querySelectorAll('.category-btn').forEach(btn => {
+            btn.classList.toggle('active', btn.getAttribute('data-category') === category);
+        });
+    };
+
+    const loadEmojiCategory = async (category) => {
+        if (!emojiGrid) return;
+
+        const buttons = [];
+        const emojis = emojiData[category] || [];
+
+        if (category === 'frequent') {
+            if (emojis.some(emoji => emoji.startsWith('custom:'))) {
+                await ensureCustomEmojis({ showLoading: false, showErrors: false });
+            }
+            for (const emoji of emojis) {
+                if (emoji.startsWith('custom:')) {
+                    const name = emoji.replace('custom:', '');
+                    const custom = customEmojiMap.get(name);
+                    if (custom) {
+                        buttons.push(createCustomEmojiButton(custom));
+                    }
+                } else {
+                    const slug = (window.__emojiSlugs && window.__emojiSlugs[emoji]) || '';
+                    buttons.push(createStandardEmojiButton(emoji, slug));
+                }
+            }
+        } else if (category === 'custom') {
+            const data = await ensureCustomEmojis({ showLoading: true });
+            if (!data.length) {
+                showGridMessage('no custom emojis yet');
+                updateActiveCategory(category);
+                return;
+            }
+            for (const emoji of data) {
+                buttons.push(createCustomEmojiButton(emoji));
+            }
+        } else {
+            for (const emoji of emojis) {
+                const slug = (window.__emojiSlugs && window.__emojiSlugs[emoji]) || '';
+                buttons.push(createStandardEmojiButton(emoji, slug));
+            }
+        }
+
+        if (buttons.length) {
+            renderEmojiButtons(buttons);
+        } else if (category === 'custom') {
+            showGridMessage('no custom emojis yet');
+        } else {
+            showGridMessage('no emojis in this category');
+        }
+
+        updateActiveCategory(category);
+
+        // Show/hide bufo helper based on category
+        const bufoHelper = document.getElementById('bufo-helper');
+        if (bufoHelper) {
+            bufoHelper.style.display = category === 'custom' ? 'block' : 'none';
+        }
+    };
+
+    const applyEmojiSelection = (button) => {
+        if (!button || !selectedEmoji || !statusInput) return;
+        const emojiValue = button.getAttribute('data-emoji');
+        if (!emojiValue) return;
+
+        selectedEmoji.innerHTML = '';
+        if (button.classList.contains('custom-emoji')) {
+            const img = button.querySelector('img');
+            if (img) {
+                const previewImg = document.createElement('img');
+                previewImg.src = img.src;
+                previewImg.alt = img.alt;
+                previewImg.title = img.title || img.alt || '';
+                previewImg.style.width = '100%';
+                previewImg.style.height = '100%';
+                previewImg.style.objectFit = 'contain';
+                selectedEmoji.appendChild(previewImg);
+            }
+        } else {
+            selectedEmoji.textContent = emojiValue;
+        }
+
+        statusInput.value = emojiValue;
+        if (emojiSearch) {
+            emojiSearch.value = '';
+        }
+        if (emojiCategories) {
+            emojiCategories.classList.remove('hidden');
+        }
+        closeEmojiPicker();
+        checkForChanges();
+    };
+
+    if (emojiGrid) {
+        emojiGrid.addEventListener('click', (e) => {
+            const button = e.target.closest('.emoji-option');
+            if (!button || !emojiGrid.contains(button)) return;
+            e.preventDefault();
+            applyEmojiSelection(button);
+        });
+    }
+
+    // Category buttons
+    document.querySelectorAll('.category-btn').forEach(btn => {
+        btn.addEventListener('click', async (event) => {
+            event.preventDefault();
+            event.stopPropagation(); // Prevent event bubbling that might close the modal
+            const category = btn.getAttribute('data-category');
+            await loadEmojiCategory(category);
+        });
+    });
+    
+    // Show clear picker
+    if (clearAfterBtn && clearPicker) {
+        clearAfterBtn.addEventListener('click', (e) => {
+            e.stopPropagation();
+            clearPicker.style.display = clearPicker.style.display === 'none' ? 'block' : 'none';
+            closeEmojiPicker();
+            
+            // Position picker
+            const rect = clearAfterBtn.getBoundingClientRect();
+            clearPicker.style.top = rect.bottom + 'px';
+            clearPicker.style.left = rect.left + 'px';
+        });
+    }
+    
+    // Custom datetime elements
+    const customDatetime = document.getElementById('custom-datetime');
+    const customDatetimeInput = document.getElementById('custom-datetime-input');
+    const customDatetimeSet = document.getElementById('custom-datetime-set');
+    
+    // Set default value for custom datetime to 1 hour from now
+    const defaultCustomTime = new Date();
+    defaultCustomTime.setHours(defaultCustomTime.getHours() + 1);
+    customDatetimeInput.value = defaultCustomTime.toISOString().slice(0, 16);
+    
+    // Clear options
+    document.querySelectorAll('.clear-option').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const value = btn.getAttribute('data-value');
+            
+            if (value === 'custom') {
+                // Show custom datetime input
+                customDatetime.style.display = customDatetime.style.display === 'none' ? 'flex' : 'none';
+                // Update active state
+                document.querySelectorAll('.clear-option').forEach(opt => {
+                    opt.classList.toggle('active', opt === btn);
+                });
+            } else {
+                // Hide custom datetime input
+                customDatetime.style.display = 'none';
+                
+                expiresSelect.value = value;
+                
+                // Update button text
+                const labels = {
+                    '': "don't clear",
+                    '30m': '30m',
+                    '1h': '1h',
+                    '2h': '2h',
+                    '4h': '4h',
+                    '8h': '8h',
+                    '1d': 'Today',
+                    '1w': 'This week'
+                };
+                clearText.textContent = labels[value] || value;
+                
+                // Update active state
+                document.querySelectorAll('.clear-option').forEach(opt => {
+                    opt.classList.toggle('active', opt === btn);
+                });
+                
+                clearPicker.style.display = 'none';
+            }
+        });
+    });
+    
+    // Handle custom datetime set
+    if (customDatetimeSet) {
+        customDatetimeSet.addEventListener('click', () => {
+            const selectedDate = new Date(customDatetimeInput.value);
+            const now = new Date();
+            
+            if (selectedDate <= now) {
+                alert('Please select a future time');
+                return;
+            }
+            
+            // Calculate duration from now
+            const diffMs = selectedDate - now;
+            const diffMins = Math.floor(diffMs / 60000);
+            const diffHours = Math.floor(diffMs / 3600000);
+            const diffDays = Math.floor(diffMs / 86400000);
+            
+            let durationStr;
+            if (diffMins < 60) {
+                durationStr = `${diffMins}m`;
+            } else if (diffHours < 24) {
+                durationStr = `${diffHours}h`;
+            } else if (diffDays < 7) {
+                durationStr = `${diffDays}d`;
+            } else {
+                durationStr = `${Math.floor(diffDays / 7)}w`;
+            }
+            
+            // Set the hidden select value
+            expiresSelect.value = durationStr;
+            
+            // Update button text to show the selected date/time
+            const dateStr = selectedDate.toLocaleDateString('en-US', { 
+                month: 'short', 
+                day: 'numeric',
+                hour: 'numeric',
+                minute: '2-digit',
+                hour12: true
+            }).toLowerCase();
+            clearText.textContent = dateStr;
+            
+            // Hide the picker
+            clearPicker.style.display = 'none';
+            customDatetime.style.display = 'none';
+        });
+    }
+    
+    // Close pickers on outside click
+    document.addEventListener('click', (e) => {
+        if (clearPicker && !clearPicker.contains(e.target) && e.target !== clearAfterBtn) {
+            clearPicker.style.display = 'none';
+        }
+    });
+    
+    // Search emoji function
+    const searchEmojis = async (rawQuery) => {
+        if (!emojiGrid) return;
+        const query = (rawQuery || '').trim();
+
+        if (!query) {
+            if (emojiCategories) emojiCategories.classList.remove('hidden');
+            await loadEmojiCategory('frequent');
+            return;
+        }
+
+        if (emojiCategories) emojiCategories.classList.add('hidden');
+
+        const lowerQuery = query.toLowerCase();
+        const buttons = [];
+        const seen = new Set();
+
+        await ensureCustomEmojis({ showLoading: false, showErrors: false });
+
+        for (const emoji of customEmojis) {
+            if (emoji.name.toLowerCase().includes(lowerQuery)) {
+                buttons.push(createCustomEmojiButton(emoji));
+                seen.add(`custom:${emoji.name}`);
+                if (buttons.length >= 80) break;
+            }
+        }
+
+        if (buttons.length < 80) {
+            for (const [emoji, keywords] of Object.entries(emojiKeywords)) {
+                if (seen.has(emoji)) continue;
+                if (emoji.includes(query) || keywords.some(keyword => keyword.includes(lowerQuery))) {
+                    buttons.push(createStandardEmojiButton(emoji));
+                    seen.add(emoji);
+                    if (buttons.length >= 80) break;
+                }
+            }
+        }
+
+        if (buttons.length < 80) {
+            outer: for (const categoryEmojis of Object.values(emojiData)) {
+                for (const emoji of categoryEmojis) {
+                    if (seen.has(emoji)) continue;
+                    if (emoji.includes(query)) {
+                        buttons.push(createStandardEmojiButton(emoji));
+                        seen.add(emoji);
+                        if (buttons.length >= 80) break outer;
+                    }
+                }
+            }
+        }
+
+        if (buttons.length) {
+            renderEmojiButtons(buttons);
+        } else {
+            showGridMessage('No emojis found');
+        }
+
+        // Hide bufo helper during search
+        const bufoHelper = document.getElementById('bufo-helper');
+        if (bufoHelper) {
+            bufoHelper.style.display = 'none';
+        }
+    };
+
+    // Emoji search input handler
+    if (emojiSearch) {
+        emojiSearch.addEventListener('input', (e) => {
+            const value = e.target.value;
+            if (searchDebounce) clearTimeout(searchDebounce);
+            searchDebounce = setTimeout(() => {
+                searchEmojis(value);
+            }, SEARCH_DEBOUNCE_MS);
+        });
+
+        // Focus search when picker opens
+        emojiSearch.addEventListener('focus', () => {
+            if (!emojiSearch.value) {
+                loadEmojiCategory('frequent');
+            }
+        });
+    }
+    
+    // Form validation
+    const form = document.getElementById('status-form');
+    const statusText = document.getElementById('status-text');
+    const saveBtn = form.querySelector('.save-btn');
+    
+    // Current status for comparison
+    const currentStatus = {
+        emoji: {% if let Some(current) = current_status.as_ref() %}"{{current.status}}"{% else %}null{% endif %},
+        text: {% if let Some(current) = current_status.as_ref() %}{% if current.text.is_some() %}"{{ current.text.as_ref().unwrap() }}"{% else %}""{% endif %}{% else %}""{% endif %}
+    };
+    
+    const checkForChanges = () => {
+        const newEmoji = statusInput.value;
+        const newText = statusText.value.trim();
+        
+        // Check if this is identical to current status
+        // If there's no current status (emoji is null), allow any emoji selection as a change
+        const hasCurrentStatus = currentStatus.emoji !== null;
+        const isIdentical = hasCurrentStatus && 
+                           currentStatus.emoji === newEmoji && 
+                           currentStatus.text === newText;
+        
+        if (isIdentical) {
+            saveBtn.disabled = true;
+            saveBtn.textContent = 'No changes';
+        } else {
+            saveBtn.disabled = false;
+            saveBtn.textContent = 'set';
+        }
+    };
+    
+    statusText.addEventListener('input', checkForChanges);
+    statusInput.addEventListener('change', checkForChanges);
+    
+    // Initial check
+    checkForChanges();
+    
+    {% endif %}
+    
+    // Handle delete buttons for history items
+    document.querySelectorAll('.history-delete').forEach(btn => {
+        btn.addEventListener('click', async (e) => {
+            const uri = btn.getAttribute('data-uri');
+            
+            if (confirm('Delete this status? This cannot be undone.')) {
+                try {
+                    const response = await fetch('/status/delete', {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json',
+                        },
+                        body: JSON.stringify({ uri })
+                    });
+                    
+                    if (response.ok) {
+                        // Remove the history item from the DOM
+                        btn.closest('.history-item').remove();
+                        
+                        // If no more history items, remove the entire history section
+                        const historyItems = document.querySelectorAll('.history-item');
+                        if (historyItems.length === 0) {
+                            const historySection = document.querySelector('.history');
+                            if (historySection) {
+                                historySection.remove();
+                            }
+                        }
+                    } else {
+                        alert('Failed to delete status');
+                    }
+                } catch (error) {
+                    console.error('Error deleting status:', error);
+                    alert('Failed to delete status');
+                }
+            }
+        });
+    });
+});
+</script>
+<script>
+    // Admin upload toggles and submit
+    document.addEventListener('DOMContentLoaded', function () {
+        const toggle = document.getElementById('admin-toggle');
+        const content = document.getElementById('admin-content');
+        const form = document.getElementById('emoji-upload-form');
+        const file = document.getElementById('emoji-file');
+        const name = document.getElementById('emoji-name');
+        const msg = document.getElementById('admin-msg');
+        if (!toggle || !content || !form) return;
+
+        toggle.addEventListener('click', () => {
+            content.style.display = content.style.display === 'none' ? 'block' : 'none';
+        });
+
+        form.addEventListener('submit', async (e) => {
+            e.preventDefault();
+            msg.textContent = '';
+            if (!file.files || file.files.length === 0) {
+                msg.textContent = 'choose a PNG or GIF';
+                return;
+            }
+            // Require a name; prefill from filename if empty
+            if (!name.value.trim().length) {
+                const base = (file.files[0].name || '').replace(/\.[^.]+$/, '');
+                const sanitized = base.toLowerCase().replace(/[^a-z0-9_-]+/g, '-').replace(/^-+|-+$/g, '');
+                name.value = sanitized || '';
+            }
+            if (!name.value.trim().length) {
+                msg.textContent = 'please choose a name';
+                return;
+            }
+            // Client-side reserved check (best-effort)
+            if (window.__reservedEmojiNames && window.__reservedEmojiNames.has(name.value.trim().toLowerCase())) {
+                msg.textContent = 'that name is reserved by a standard emoji';
+                return;
+            }
+            const f = file.files[0];
+            if (!['image/png','image/gif'].includes(f.type)) {
+                msg.textContent = 'only PNG or GIF';
+                return;
+            }
+            const fd = new FormData();
+            fd.append('file', f);
+            if (name.value.trim().length) fd.append('name', name.value.trim());
+            try {
+                const res = await fetch('/admin/upload-emoji', { method: 'POST', body: fd });
+                const json = await res.json();
+                if (!res.ok || !json.success) {
+                    if (json && json.code === 'name_exists') {
+                        msg.textContent = 'that name already exists — please pick another';
+                    } else {
+                        msg.textContent = (json && json.error) || 'upload failed';
+                    }
+                    return;
+                }
+                // Notify listeners (e.g., emoji picker) and close panel
+                document.dispatchEvent(new CustomEvent('custom-emoji-uploaded', { detail: json }));
+                content.style.display = 'none';
+                form.reset();
+                msg.textContent = '';
+            } catch (err) {
+                msg.textContent = 'network error';
+            }
+        });
+    });
+</script>
+{%endblock content%}