diff --git a/package.json b/package.json
index 6bc0b0a..e680f1b 100644
--- a/package.json
+++ b/package.json
@@ -59,6 +59,7 @@
 		"@foxui/text": "^0.8.2",
 		"@foxui/time": "^0.8.2",
 		"@lucide/svelte": "^1.7.0",
+		"@tailwindcss/typography": "^0.5.19",
 		"@use-gesture/vanilla": "^10.3.1",
 		"dexie": "^4.3.0",
 		"emoji-picker-element": "^1.29.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b491bb8..7727db5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -32,6 +32,9 @@ importers:
       '@lucide/svelte':
         specifier: ^1.7.0
         version: 1.7.0(svelte@5.55.0)
+      '@tailwindcss/typography':
+        specifier: ^0.5.19
+        version: 0.5.19(tailwindcss@4.2.2)
       '@use-gesture/vanilla':
         specifier: ^10.3.1
         version: 10.3.1
@@ -1109,6 +1112,11 @@ packages:
     resolution: {integrity: sha512-qEUA07+E5kehxYp9BVMpq9E8vnJuBHfJEC0vPC5e7iL/hw7HR61aDKoVoKzrG+QKp56vhNZe4qwkRmMC0zDLvg==, tarball: https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.2.2.tgz}
     engines: {node: '>= 20'}
 
+  '@tailwindcss/typography@0.5.19':
+    resolution: {integrity: sha512-w31dd8HOx3k9vPtcQh5QHP9GwKcgbMp87j58qi6xgiBnFFtKEAgCWnDw4qUT8aHwkCp8bKvb/KGKWWHedP0AAg==, tarball: https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.19.tgz}
+    peerDependencies:
+      tailwindcss: '>=3.0.0 || insiders || >=4.0.0-alpha.20 || >=4.0.0-beta.1'
+
   '@tailwindcss/vite@4.2.2':
     resolution: {integrity: sha512-mEiF5HO1QqCLXoNEfXVA1Tzo+cYsrqV7w9Juj2wdUFyW07JRenqMG225MvPwr3ZD9N1bFQj46X7r33iHxLUW0w==, tarball: https://registry.npmjs.org/@tailwindcss/vite/-/vite-4.2.2.tgz}
     peerDependencies:
@@ -1970,6 +1978,10 @@ packages:
     peerDependencies:
       postcss: ^8.4.29
 
+  postcss-selector-parser@6.0.10:
+    resolution: {integrity: sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==, tarball: https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.10.tgz}
+    engines: {node: '>=4'}
+
   postcss-selector-parser@7.1.1:
     resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==, tarball: https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz}
     engines: {node: '>=4'}
@@ -3285,6 +3297,11 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.2.2
       '@tailwindcss/oxide-win32-x64-msvc': 4.2.2
 
+  '@tailwindcss/typography@0.5.19(tailwindcss@4.2.2)':
+    dependencies:
+      postcss-selector-parser: 6.0.10
+      tailwindcss: 4.2.2
+
   '@tailwindcss/vite@4.2.2(vite@8.0.2(@types/node@25.0.10)(esbuild@0.27.4)(jiti@2.6.1)(tsx@4.21.0))':
     dependencies:
       '@tailwindcss/node': 4.2.2
@@ -4168,6 +4185,11 @@ snapshots:
     dependencies:
       postcss: 8.5.8
 
+  postcss-selector-parser@6.0.10:
+    dependencies:
+      cssesc: 3.0.0
+      util-deprecate: 1.0.2
+
   postcss-selector-parser@7.1.1:
     dependencies:
       cssesc: 3.0.0
diff --git a/src/app.css b/src/app.css
index 0198d41..c0b3346 100644
--- a/src/app.css
+++ b/src/app.css
@@ -1,6 +1,7 @@
 @import 'tailwindcss';
 
 @plugin '@tailwindcss/forms';
+@plugin '@tailwindcss/typography';
 @source "../node_modules/@foxui";
 
 @custom-variant dark (&:is(.dark *));
diff --git a/src/lib/atproto/port.ts b/src/lib/atproto/port.ts
index e2f4d85..5c6c675 100644
--- a/src/lib/atproto/port.ts
+++ b/src/lib/atproto/port.ts
@@ -1,3 +1,3 @@
 // Dev server port — generated by setup-dev, shared by vite, oauth, and tunnel.
 // Each project gets a unique random port (5200–7200) so multiple projects can run simultaneously.
-export const DEV_PORT = 5183;
+export const DEV_PORT = 5433;
diff --git a/src/lib/components/embed/special/IframeEmbed.svelte b/src/lib/components/embed/special/IframeEmbed.svelte
index 2ee7485..4ce8754 100644
--- a/src/lib/components/embed/special/IframeEmbed.svelte
+++ b/src/lib/components/embed/special/IframeEmbed.svelte
@@ -37,7 +37,13 @@
 		return embedUrl.toString();
 	}
 
-	let embedSrc = $derived(buildEmbedUrl());
+	import { browser } from '$app/environment';
+	let embedSrc = $derived.by(() => {
+		if (!browser) return '';
+		const src = buildEmbedUrl();
+		console.log('[embed] src:', src, 'did:', user.did);
+		return src;
+	});
 
 	// Handle postMessage from the iframe
 	async function handleMessage(event: MessageEvent) {
@@ -112,7 +118,7 @@
 		src={embedSrc}
 		title="Embedded content from {config.domain}"
 		class="h-full w-full border-0"
-		sandbox="allow-scripts allow-same-origin"
+		sandbox="allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox"
 		loading="lazy"
 	></iframe>
 </div>