diff --git a/.gitignore b/.gitignore
index e15caba..7d2a880 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,6 @@ yarn-error.log*
 
 # temporary placeholder assets (deployed to wisp.place, not used in app)
 public/Under construction.json
+
+# synced from web_themes (build-time pull, do not commit)
+/src/styles/theme
diff --git a/AGENTS.md b/AGENTS.md
index 3536770..36cb0ef 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,3 +1,5 @@
 # AGENTS.md — altifier
 
+Conventions: AGENTS.md is the primary agent instructions file; .hermes.md (if present) is secondary.
+
 For any frontend/UI design, redesign, critique, audit, polish, or visual work, load the `impeccable` skill first (skill_view name='impeccable') and follow it.
diff --git a/agent/PATCH-altifier.md b/agent/PATCH-altifier.md
new file mode 100644
index 0000000..030fc70
--- /dev/null
+++ b/agent/PATCH-altifier.md
@@ -0,0 +1,86 @@
+# PATCH-altifier.md
+Repo: tangled.org/psingletary.com/altifier
+Role: you are a code-modification agent. Apply the patches below to the
+existing codebase. Do not redesign, do not add features beyond this
+file, do not touch files not named here. Work top to bottom. When all
+patches are applied and `npm run build` passes, print "DONE".
+
+## P1 — Replace delete-and-recreate with in-place putRecord  [CRITICAL]
+Where: the "apply alt text" mutation path (search for calls to
+`deleteRecord` followed by `createRecord`, or `post.delete`).
+Change:
+- Fetch the current record with `com.atproto.repo.getRecord`
+  ({ repo: did, collection: 'app.bsky.feed.post', rkey }) and keep the
+  returned `cid`.
+- Mutate ONLY the `alt` fields inside `record.embed.images[]` (and
+  `record.embed.media.images[]` for recordWithMedia; `record.embed.alt`
+  for video — see P3). Do not touch any other field, including createdAt.
+- Write back with `com.atproto.repo.putRecord`
+  ({ repo, collection, rkey, record, swapRecord: cid }).
+- On swap failure (record changed concurrently): re-fetch once, re-apply
+  the alt edits, retry once; if it fails again surface an error toast.
+- Delete all delete+recreate code. Update any UI copy claiming the post
+  is "reposted"/"recreated": it is now edited in place; URI, likes and
+  replies are preserved.
+
+## P2 — Scan the PDS, not the AppView  [HIGH]
+Where: the scanning routine that enumerates the user's posts.
+Change:
+- Enumerate via `com.atproto.repo.listRecords`
+  ({ repo: did, collection: 'app.bsky.feed.post', limit: 100, cursor })
+  against the user's own PDS endpoint (from their DID doc / session),
+  looping until cursor is absent.
+- Detection operates on the raw record value, which is also exactly the
+  object P1 writes back.
+- Remove AppView feed-pagination scanning (`getAuthorFeed` or similar).
+
+## P3 — Widen embed coverage  [HIGH]
+Where: the "has image without alt" predicate.
+Change: flag a record when ANY of:
+- `embed.$type == 'app.bsky.embed.images'` and any `images[i].alt` is
+  empty/missing;
+- `embed.$type == 'app.bsky.embed.recordWithMedia'` and its `media` is
+  an images embed with any empty alt;
+- `embed.$type == 'app.bsky.embed.video'` and `embed.alt` is
+  empty/missing (render one textarea for the video; thumbnail may be
+  omitted).
+The editor UI must render/edit alt for all three shapes.
+
+## P4 — Make AI strictly BYO-key  [HIGH]
+Where: Gemini integration.
+Change:
+- Remove any bundled/committed API key and any build-time env key.
+- Add a settings field "Gemini API key (optional)" stored ONLY in
+  localStorage under `altifier.geminiKey`, with a note that it never
+  leaves the browser except in direct calls to Google.
+- If no key is set: hide all "Generate" buttons; manual textareas remain
+  fully functional. No other behavior change.
+
+## P5 — Single source of truth for OAuth client metadata  [MEDIUM]
+Where: `public/client-metadata.json` and the in-code `clientMetadata`
+object.
+Change: delete the in-code object; at startup `fetch('/client-metadata.json')`
+and pass the parsed JSON to the OAuth client. One file to edit on deploy.
+
+## P6 — Resumable scans  [MEDIUM]
+Where: the P2 scan loop.
+Change: after each page, persist `{ cursor, hits }` to localStorage key
+`altifier.scan.<did>`. On page load, if present, offer "Resume scan
+(N found so far)" vs "Restart". Clear the key when the scan completes.
+
+## P7 — Pre-write diff  [LOW]
+Where: the apply flow from P1.
+Change: before putRecord, show a modal with old vs new `alt` values per
+image ("(empty)" → new text) and Confirm/Cancel. Apply proceeds only on
+confirm.
+
+## Out of scope
+Do NOT migrate off React in this patch. Do NOT change OAuth scopes,
+routing, or styling beyond what the above requires.
+
+## Acceptance
+- Applying alt text preserves the post's at:// URI and rkey (verify:
+  getRecord before/after shows same uri, new cid).
+- Scan output includes recordWithMedia and video posts.
+- Build contains no Gemini key (grep for "AIza" must be empty).
+- Only one client-metadata definition exists in the source tree.
diff --git a/agent/PROMPT-ui-changes.md b/agent/PROMPT-ui-changes.md
new file mode 100644
index 0000000..208e254
--- /dev/null
+++ b/agent/PROMPT-ui-changes.md
@@ -0,0 +1,113 @@
+# PROMPT — Apply Altifier-style UI changes (embed + login flow)
+
+Use this prompt to direct the agent of another website (an app that lets a user
+log in with Bluesky and displays their posts) to make the same UI changes
+applied to Altifier. There are two independent parts: (A) replace a plain
+"View on Bluesky" external link with a live inline post embed via Bluesky's
+official oEmbed endpoint and display the post's at:// URI, and (B) clean up the
+login/navigation flow so the user reaches the tool directly with correct
+branding and return URLs.
+
+Apply both parts unless told otherwise. Do not redesign beyond what is
+described. Follow the site's existing component/style conventions and keep all
+existing functionality.
+
+---
+
+## Part A — oEmbed post embed + at:// URI
+
+For each post the app displays, do the following instead of (or in addition to)
+a plain "View on Bluesky" outbound link:
+
+1. **Embed the post inline** using Bluesky's official oEmbed endpoint
+   (`https://embed.bsky.app/oembed`), rendering the live post widget in place.
+2. **Show the post's at:// URI** in a small, muted, monospace line so the
+   post's immutable identity is visible.
+
+### How the embed works (required implementation detail)
+
+- Endpoint: `GET https://embed.bsky.app/oembed?url=<encoded>&format=json`
+  - `url` must be a post URL in the form
+    `https://bsky.app/profile/<did-or-handle>/post/<rkey>` (or an at:// URI).
+  - CORS is open (`Access-Control-Allow-Origin: *`), so fetch it directly from
+    the browser — no server proxy needed.
+- The JSON response contains an `html` string of roughly:
+  ```html
+  <blockquote class="bluesky-embed" data-bluesky-uri="at://..." data-bluesky-cid="..." data-aspect-ratio="...">
+    <p lang="en">post text</p>
+    <p><a href="https://bsky.app/profile/.../post/...">author</a></p>
+  </blockquote>
+  <script async src="https://embed.bsky.app/static/embed.js" charset="utf-8"></script>
+  ```
+- **Critical:** `<script>` tags injected via `dangerouslySetInnerHTML` /
+  `innerHTML` do NOT execute. So the `embed.js` script inside the snippet will
+  not run by itself. You must:
+  1. Inject the `html` into a container element.
+  2. Load `https://embed.bsky.app/static/embed.js` yourself (append a
+     `<script>` element once; cache the load promise).
+  3. Call `window.bluesky.scan(containerNode)` after the blockquote is in the
+     DOM to convert it into the live embed `<iframe>`.
+- `embed.js` exposes `window.bluesky.scan(node)` and there is NO MutationObserver
+  — you must call `scan()` explicitly after injecting. It is idempotent, so
+  calling it again after a render is safe.
+- The widget iframe self-sizes via `postMessage` handled by `embed.js`; no manual
+  height management needed.
+
+### Fallback
+
+If the oEmbed fetch fails or returns no `html` (e.g. the post is deleted or
+redacted, or a network error), render a plain "View on Bluesky" link to
+`https://bsky.app/profile/<did>/post/<rkey>` instead of the embed, so the post
+is still reachable.
+
+### AT-URI display
+
+Render the post's `at://` URI (e.g.
+`at://did:plc:abc123/app.bsky.feed.post/<rkey>`) in small muted text, styled as
+monospace, with `word-break: break-all` so long URIs wrap. It should already be
+available on the post object; if the app only stores a web URL or rkey, derive
+it from the post's record URI.
+
+---
+
+## Part B — Login/navigation flow cleanup
+
+Make the login flow reach the actual tool directly and correctly branded. Common
+leftovers to fix:
+
+1. **Root goes straight to the tool.** The site root (`/`) and any unknown route
+   should land on the main tool page (the scanner), not on a separate landing or
+   "home" page that only re-links to the tool. Remove the redundant
+   landing/home hop and any now-unused home page component/styles.
+2. **Login page branding.** The login page heading should say the site's own
+   name (e.g. "Login to Altifier"), not another project's name that was
+   copy-pasted in (a common leftover is "Login to Verifier"). Update the heading
+   and any stray copy.
+3. **Correct return URL after login.** After OAuth sign-in the user must land
+   back on the tool page, never on a wrong or nonexistent path. Check BOTH
+   places that compute the post-login destination:
+   - the login page's default `returnUrl` (fallback when no query param is
+     present), and
+   - the OAuth callback handler's default `returnUrl`.
+   Both should default to the tool route (e.g. `/altifier`), not a stale path
+   from another project (e.g. `/verifier`).
+4. **Unauthenticated access redirects to login with a return URL.** When a
+   logged-out user opens the tool route, redirect them to the login page with a
+   `returnUrl` query param pointing back to the tool (e.g.
+   `/login?returnUrl=/altifier`), so login returns them where they wanted to go.
+5. **Minor polish.** Capitalize login/logout button labels consistently.
+
+---
+
+## Acceptance criteria
+
+- A real, non-deleted public post renders as a live embedded iframe from
+  `embed.bsky.app/embed/...` (not just a static blockquote) — verify in a
+  browser that the blockquote is replaced by an iframe after `scan()`.
+- The embed falls back to a "View on Bluesky" link for a deleted/redacted post
+  rather than showing an error or nothing.
+- The at:// URI is visible on the card.
+- Visiting the site root (logged out) redirects to login and, after signing in,
+  lands back on the tool page — no 404, no wrong destination.
+- The login page shows the site's own name, not another project's.
+- Build/lint/tests pass; no unrelated changes.
diff --git a/package.json b/package.json
index 8431601..c3d4fbc 100644
--- a/package.json
+++ b/package.json
@@ -12,10 +12,11 @@
     "react-scripts": "^5.0.1"
   },
   "scripts": {
-    "start": "react-scripts start",
-    "build": "react-scripts build",
+    "start": "npm run sync:theme && react-scripts start",
+    "build": "npm run sync:theme && react-scripts build",
     "test": "react-scripts test --watchAll=false --passWithNoTests",
-    "eject": "react-scripts eject"
+    "eject": "react-scripts eject",
+    "sync:theme": "bash scripts/sync-theme.sh"
   },
   "eslintConfig": {
     "extends": [
@@ -38,4 +39,4 @@
   "devDependencies": {
     "cross-env": "^7.0.3"
   }
-}
\ No newline at end of file
+}
diff --git a/scripts/sync-theme.sh b/scripts/sync-theme.sh
new file mode 100755
index 0000000..86a64c6
--- /dev/null
+++ b/scripts/sync-theme.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# sync-theme.sh — pull a theme from the web_themes repo into this consumer.
+#
+# Usage:
+#   bash scripts/sync-theme.sh [theme-name]
+#
+# Environment overrides:
+#   WEB_THEMES_REPO   git URL of the web_themes repo (default: Tangled handle URL)
+#   THEME_DEST        destination dir relative to repo root (default: src/styles/theme)
+#
+# Strategy (build-time pull): shallow-clone the themes repo into a per-user
+# cache (~/.cache/web_themes), then copy the requested theme's files into the
+# consumer's src tree. Consumers wire this as a prebuild step:
+#
+#   "build": "npm run sync:theme && react-scripts build"
+#
+# Requires SSH access to Tangled at build time (Apple Keychain on this Mac).
+
+set -euo pipefail
+
+THEME_NAME="${1:-witchsky-cyan}"
+REPO="${WEB_THEMES_REPO:-git@tangled.org:psingletary.com/web_themes}"
+DEST="${THEME_DEST:-src/styles/theme}"
+CACHE_DIR="${HOME}/.cache/web_themes"
+
+if [ -d "${CACHE_DIR}/.git" ]; then
+  # Cache must track the requested repo even if it was cloned from
+  # a different URL before (e.g. a local path during testing).
+  if [ "$(git -C "${CACHE_DIR}" config --get remote.origin.url)" != "${REPO}" ]; then
+    git -C "${CACHE_DIR}" remote set-url origin "${REPO}"
+  fi
+  git -C "${CACHE_DIR}" fetch --quiet --depth 1 origin main
+  git -C "${CACHE_DIR}" reset --quiet --hard origin/main
+else
+  git clone --quiet --depth 1 --branch main "${REPO}" "${CACHE_DIR}"
+fi
+
+mkdir -p "${DEST}"
+cp "${CACHE_DIR}/themes/${THEME_NAME}/theme.css" "${DEST}/theme.css"
+cp "${CACHE_DIR}/themes/${THEME_NAME}/index.css" "${DEST}/index.css"
+echo "synced web_themes/${THEME_NAME} -> ${DEST}/"
diff --git a/src/App.css b/src/App.css
index 879ebf8..2c07fc5 100644
--- a/src/App.css
+++ b/src/App.css
@@ -1,297 +1,4 @@
-/* Verifier — witchsky cyan base theme */
-
-:root {
-  --text: #F9FAFB;
-  --text-muted: #A5B2C5;
-  --button-bg: hsl(174, 83%, 38%);
-  --button-text: #FFFFFF;
-  --button-hover-bg: hsl(174, 78%, 32%);
-  --card-bg: #1C2B35;
-  --card-border: #394A58;
-  --navbar-bg: #15232C;
-  --success-bg: rgba(45, 242, 143, 0.12);
-  --success-text: #2CF28F;
-  --success-border: rgba(45, 242, 143, 0.25);
-  --error-bg: rgba(246, 90, 127, 0.12);
-  --error-text: hsl(348, 92%, 64%);
-  --error-border: rgba(246, 90, 127, 0.25);
-}
-
-body {
-  margin: 0;
-  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-  font-size: 18px;
-  background: #111822;
-  color: var(--text);
-  min-height: 100vh;
-}
-
-h1, h2, h3 { color: var(--text); }
-h1 { font-size: 2em; margin: 0.5em 0; }
-h2 { font-size: 1.5em; margin: 1em 0 0.5em; }
-h3 { font-size: 1.2em; margin: 0.8em 0 0.4em; }
-p { line-height: 1.6; margin: 0.8em 0; }
-a { color: var(--button-bg); text-decoration: none; }
-a:hover { text-decoration: underline; }
-a:visited { color: var(--button-hover-bg); }
-
-.app-container { min-height: 100vh; display: flex; flex-direction: column; }
-.main-container { max-width: 800px; margin: 0 auto; padding: 20px; width: 100%; flex: 1; }
-
-form {
-  display: flex;
-  flex-direction: column;
-  gap: 12px;
-  background: var(--card-bg);
-  border: 1px solid var(--card-border);
-  border-radius: 8px;
-  padding: 20px;
-}
-
-input, select {
-  padding: 10px 14px;
-  border: 1px solid var(--card-border);
-  border-radius: 6px;
-  background: var(--card-bg);
-  color: var(--text);
-  font-size: 1em;
-  min-height: 48px;
-}
-
-input:focus, select:focus { border-color: var(--button-bg); outline: none; }
-
-button {
-  padding: 10px 20px;
-  border: none;
-  border-radius: 6px;
-  font-size: 1em;
-  font-weight: 600;
-  cursor: pointer;
-  min-height: 48px;
-  background: var(--button-bg);
-  color: var(--button-text);
-}
-
-button:hover { background: var(--button-hover-bg); }
-button:disabled { opacity: 0.6; cursor: not-allowed; }
-
-/* Navbar */
-.navbar {
-  background: var(--navbar-bg);
-  padding: 12px 24px;
-  border-bottom: 1px solid var(--card-border);
-  display: flex;
-  justify-content: space-between;
-  align-items: center;
-}
-
-.navbar-logo { font-size: 1.4em; font-weight: 700; }
-.navbar-logo a { color: var(--button-bg); text-decoration: none; }
-.navbar-logo a:hover { text-decoration: none; }
-.navbar-actions { display: flex; gap: 10px; align-items: center; }
-
-.navbar .login-button { background: var(--button-bg); color: var(--button-text); }
-.navbar .logout-button { background: transparent; border: 1px solid var(--card-border); color: var(--text); }
-
-/* Footer */
-.footer {
-  background: var(--navbar-bg);
-  padding: 14px 24px;
-  border-top: 1px solid var(--card-border);
-  text-align: center;
-  color: var(--text-muted);
-  font-size: 0.9em;
-}
-
-/* Home & Login */
-.home-page, .login-page {
-  display: flex;
-  justify-content: center;
-  align-items: center;
-  min-height: 60vh;
-  padding: 20px;
-  text-align: center;
-}
-
-.home-content, .login-content {
-  max-width: 500px;
-  width: 100%;
-  padding: 30px;
-  background: var(--card-bg);
-  border: 1px solid var(--card-border);
-  border-radius: 8px;
-}
-
-.home-content h1, .login-content h1 { margin-top: 0; }
-.home-content p, .login-content p { margin-bottom: 20px; }
-
-.home-button {
-  display: inline-block;
-  padding: 12px 30px;
-  background: var(--button-bg);
-  color: var(--button-text);
-  border-radius: 6px;
-  text-decoration: none;
-  font-weight: 600;
-  font-size: 1.1em;
-}
-
-.home-button:hover { background: var(--button-hover-bg); text-decoration: none; }
-
-/* Verifier */
-.verifier-container { max-width: 600px; margin: 30px auto; padding: 0 20px; }
-
-.verifier-section {
-  background: var(--card-bg);
-  border: 1px solid var(--card-border);
-  border-radius: 8px;
-  padding: 24px;
-  margin-bottom: 16px;
-}
-
-.verifier-section h2 { margin-top: 0; font-size: 1.3em; }
-
-.verifier-form-container {
-  display: flex;
-  gap: 10px;
-  flex-wrap: wrap;
-  align-items: stretch;
-  padding: 0;
-  border: 0;
-  background: none;
-  border-radius: 0;
-}
-
-.verifier-form-container input,
-.verifier-form-container select { flex: 1; min-width: 150px; }
-
-.verifier-submit-button { white-space: nowrap; }
-
-/* Suggestions */
-.verifier-suggestions-list {
-  list-style: none;
-  padding: 0;
-  margin: 10px 0 0 0;
-  border: 1px solid var(--card-border);
-  border-radius: 6px;
-  max-height: 250px;
-  overflow-y: auto;
-  background: var(--card-bg);
-}
-
-.verifier-suggestion-item {
-  padding: 10px 14px;
-  cursor: pointer;
-  border-bottom: 1px solid var(--card-border);
-  display: flex;
-  align-items: center;
-  gap: 10px;
-  min-height: 44px;
-}
-
-.verifier-suggestion-item:last-child { border-bottom: none; }
-.verifier-suggestion-item:hover { background: var(--button-bg); color: var(--button-text); }
-.verifier-suggestion-item.loading, .verifier-suggestion-item.none { color: var(--text-muted); font-style: italic; }
-.verifier-suggestion-item:hover.loading, .verifier-suggestion-item:hover.none { background: none; color: var(--text-muted); }
-
-.verifier-suggestion-avatar { width: 32px; height: 32px; border-radius: 50%; flex-shrink: 0; }
-.verifier-suggestion-text { display: flex; flex-direction: column; overflow: hidden; }
-.verifier-suggestion-name { font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.verifier-suggestion-handle { font-size: 0.9em; color: var(--text-muted); }
-
-/* Duplicate note */
-.verifier-duplicate-note {
-  margin: 10px 0 0 0;
-  padding: 10px 14px;
-  background: var(--success-bg);
-  color: var(--success-text);
-  border: 1px solid var(--success-border);
-  border-radius: 6px;
-  font-style: italic;
-}
-
-/* Status Box */
-.verifier-status-box {
-  padding: 14px;
-  border-radius: 6px;
-  margin: 14px 0;
-}
-
-.verifier-status-box-success { background: var(--success-bg); color: var(--success-text); border: 1px solid var(--success-border); }
-.verifier-status-box-error { background: var(--error-bg); color: var(--error-text); border: 1px solid var(--error-border); }
-.verifier-status-box p { margin: 0; }
-.verifier-status-box a { color: var(--success-text); font-weight: 600; text-decoration: underline; }
-
-/* Verifier list */
-.verifier-list { list-style: none; padding: 0; margin: 0; }
-
-.verifier-list-item {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  padding: 14px;
-  border: 1px solid var(--card-border);
-  border-radius: 6px;
-  margin-bottom: 8px;
-  background: var(--card-bg);
-  gap: 10px;
-  flex-wrap: wrap;
-}
-
-.verifier-list-item-content { flex: 1; min-width: 200px; }
-
-.verifier-display-name { font-weight: 600; display: block; }
-.verifier-display-name a { color: var(--text); text-decoration: none; }
-.verifier-display-name a:hover { color: var(--button-bg); }
-
-.verifier-list-item-handle { font-size: 0.9em; color: var(--text-muted); }
-.verifier-list-item-date { font-size: 0.85em; color: var(--text-muted); margin-top: 4px; }
-
-.verifier-list-item-actions { flex-shrink: 0; }
-
-/* Revoke button — only flash animation kept */
-@keyframes flash-red-warning {
-  0%, 100% { background-color: var(--error-bg); color: var(--error-text); box-shadow: 0 0 0 0 rgba(246, 90, 127, 0.4); }
-  50% { background-color: var(--error-text); color: var(--button-text); box-shadow: 0 0 0 8px rgba(246, 90, 127, 0); }
-}
-
-.verifier-revoke-button {
-  background: transparent;
-  border: 1px solid var(--error-text);
-  color: var(--error-text);
-  font-weight: 600;
-  border-radius: 6px;
-  padding: 8px 16px;
-  cursor: pointer;
-  min-height: 44px;
-  font-size: 0.95em;
-}
-
-.verifier-revoke-button:hover { animation: flash-red-warning 2.5s ease-in-out infinite; border-color: var(--error-text); }
-.verifier-revoke-button:disabled { animation: none; opacity: 0.6; cursor: not-allowed; }
-
-/* Load more */
-.verifier-load-more-container { margin-top: 14px; text-align: center; }
-
-.verifier-action-button {
-  background: var(--button-bg);
-  color: var(--button-text);
-  border: none;
-  border-radius: 6px;
-  padding: 10px 24px;
-  font-weight: 600;
-  cursor: pointer;
-}
-
-.verifier-action-button:hover { background: var(--button-hover-bg); }
-.verifier-action-button:disabled { opacity: 0.6; cursor: not-allowed; }
-
-/* Mobile */
-@media (max-width: 480px) {
-  .verifier-list-item { flex-direction: column; align-items: flex-start; }
-  .verifier-list-item-actions { align-self: flex-end; }
-  .verifier-form-container { flex-direction: column; }
-}
+/* Altifier — app-specific styles. Base theme: web_themes (witchsky-cyan). */
 
 /* Altifier */
 .altifier-container { max-width: 700px; margin: 30px auto; padding: 0 20px; }
@@ -604,7 +311,7 @@ button:disabled { opacity: 0.6; cursor: not-allowed; }
 }
 
 .altifier-modal-confirm {
-  background: var(--error-text);
+  background: var(--button-bg);
   color: var(--button-text);
   border: none;
   border-radius: 6px;
@@ -628,3 +335,138 @@ button:disabled { opacity: 0.6; cursor: not-allowed; }
 }
 
 .altifier-modal-cancel:hover { border-color: var(--text-muted); color: var(--text); }
+
+/* Pre-write diff list (P7) */
+.altifier-modal-diff {
+  list-style: none;
+  padding: 0;
+  margin: 8px 0 0 0;
+  max-height: 220px;
+  overflow-y: auto;
+}
+.altifier-modal-diff li {
+  padding: 8px 0;
+  border-bottom: 1px solid var(--card-border);
+  font-size: 0.9em;
+  color: var(--text);
+  word-break: break-word;
+}
+.altifier-modal-diff li:last-child { border-bottom: none; }
+.altifier-diff-old { color: var(--text-muted); text-decoration: line-through; }
+.altifier-diff-new { color: var(--success-text); }
+
+/* Video placeholder (no thumbnail) */
+.altifier-video-placeholder {
+  width: 100%;
+  height: 120px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: var(--navbar-bg);
+  color: var(--text-muted);
+  font-weight: 600;
+  font-size: 0.95em;
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+}
+
+/* Resume scan box (P6) */
+.altifier-resume-box p { margin: 0 0 12px 0; }
+.altifier-resume-buttons {
+  display: flex;
+  gap: 10px;
+  flex-wrap: wrap;
+}
+.altifier-resume-restart {
+  background: transparent;
+  border: 1px solid var(--card-border);
+  color: var(--text-muted);
+  border-radius: 6px;
+  padding: 12px 24px;
+  font-size: 1em;
+  cursor: pointer;
+  min-height: 48px;
+}
+.altifier-resume-restart:hover { border-color: var(--error-text); color: var(--error-text); }
+
+/* AI settings (P4) */
+.altifier-settings { max-width: 520px; }
+.altifier-settings-label {
+  display: block;
+  margin-bottom: 6px;
+  font-size: 0.9em;
+  color: var(--text-muted);
+  font-weight: 600;
+}
+.altifier-settings-input {
+  width: 100%;
+  padding: 10px 12px;
+  border: 1px solid var(--card-border);
+  border-radius: 6px;
+  background: var(--navbar-bg);
+  color: var(--text);
+  font-size: 0.95em;
+  box-sizing: border-box;
+}
+.altifier-settings-input:focus { border-color: var(--button-bg); outline: none; }
+.altifier-settings-note { font-size: 0.85em; color: var(--text-muted); }
+.altifier-settings-buttons {
+  display: flex;
+  gap: 10px;
+}
+.altifier-settings-save {
+  background: var(--button-bg);
+  color: var(--button-text);
+  border: none;
+  border-radius: 6px;
+  padding: 10px 20px;
+  font-size: 0.95em;
+  font-weight: 700;
+  cursor: pointer;
+  min-height: 48px;
+}
+.altifier-settings-save:hover { background: var(--button-hover-bg); }
+.altifier-settings-save:disabled { opacity: 0.6; cursor: not-allowed; }
+.altifier-settings-clear {
+  background: transparent;
+  border: 1px solid var(--card-border);
+  color: var(--text-muted);
+  border-radius: 6px;
+  padding: 10px 20px;
+  font-size: 0.95em;
+  cursor: pointer;
+  min-height: 48px;
+}
+.altifier-settings-clear:hover { border-color: var(--error-text); color: var(--error-text); }
+.altifier-settings-clear:disabled { opacity: 0.6; cursor: not-allowed; }
+
+/* Bluesky oEmbed post embed */
+.altifier-post-embed { margin: 10px 0 4px 0; }
+
+.altifier-post-aturi {
+  margin-top: 8px;
+  font-size: 0.8em;
+  color: var(--text-muted);
+  word-break: break-all;
+}
+.altifier-post-aturi code {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+  background: var(--navbar-bg);
+  padding: 3px 6px;
+  border-radius: 4px;
+}
+
+.altifier-post-embed-loading {
+  padding: 10px;
+  font-size: 0.85em;
+  color: var(--text-muted);
+  background: var(--navbar-bg);
+  border-radius: 6px;
+}
+.altifier-post-embed-link {
+  color: var(--button-bg);
+  font-size: 0.9em;
+  font-weight: 600;
+  text-decoration: underline;
+}
+
diff --git a/src/App.jsx b/src/App.jsx
index 71200e8..e757735 100644
--- a/src/App.jsx
+++ b/src/App.jsx
@@ -2,7 +2,6 @@ import React from 'react';
 import { BrowserRouter as Router, Routes, Route, Navigate } from 'react-router-dom';
 import Navbar from './components/Navbar/Navbar';
 import Footer from './components/Footer/Footer';
-import Home from './components/Home/Home';
 import Login from './components/Login/Login';
 import LoginCallback from './components/Login/LoginCallback';
 import Altifier from './components/Altifier/Altifier';
@@ -20,7 +19,6 @@ const App = () => {
             <Routes>
               <Route path="/login" element={<Login />} />
               <Route path="/login/callback" element={<LoginCallback />} />
-              <Route path="/home" element={<Home />} />
 
               <Route
                 path="/altifier"
@@ -31,8 +29,8 @@ const App = () => {
                 }
               />
 
-              <Route path="/" element={<Navigate to="/home" replace />} />
-              <Route path="*" element={<Navigate to="/home" replace />} />
+              <Route path="/" element={<Navigate to="/altifier" replace />} />
+              <Route path="*" element={<Navigate to="/altifier" replace />} />
             </Routes>
           </div>
           <Footer />
diff --git a/src/components/Altifier/Altifier.js b/src/components/Altifier/Altifier.js
index 6310bdf..b7bda1e 100644
--- a/src/components/Altifier/Altifier.js
+++ b/src/components/Altifier/Altifier.js
@@ -3,8 +3,29 @@ import { useAuth } from '../../contexts/AuthContext';
 import { Agent } from '@atproto/api';
 import { scanImagePosts } from '../../utils/postScanner';
 import { applyAltText } from '../../utils/altApplier';
+import { getGeminiKey, isGeminiConfigured } from '../../utils/altGenerator';
 import AltifierPostCard from './AltifierPostCard';
 
+const GEMINI_KEY_STORAGE = 'altifier.geminiKey';
+const scanStorageKey = (did) => `altifier.scan.${did}`;
+
+function readSavedScan(did) {
+  try {
+    const raw = localStorage.getItem(scanStorageKey(did));
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+
+function clearSavedScan(did) {
+  try {
+    localStorage.removeItem(scanStorageKey(did));
+  } catch {
+    // ignore storage errors
+  }
+}
+
 export default function Altifier() {
   const { session, loading: isAuthLoading, error: authError } = useAuth();
   const [agent, setAgent] = useState(null);
@@ -15,36 +36,76 @@ export default function Altifier() {
   const [statusType, setStatusType] = useState('success');
   const [showMissingOnly, setShowMissingOnly] = useState(true);
 
+  // P4 — BYO Gemini key, stored only in localStorage.
+  const [geminiKey, setGeminiKey] = useState(() => getGeminiKey());
+
+  // P6 — saved scan progress for the current DID.
+  const [savedScan, setSavedScan] = useState(null);
+
   // --- Agent ---
   useEffect(() => {
     setAgent(session ? new Agent(session) : null);
   }, [session]);
 
-  // --- Scan ---
-  const handleScan = useCallback(async () => {
-    if (!agent || !session) return;
-    setIsScanning(true);
-    setStatusMessage('');
-    try {
-      const results = await scanImagePosts(agent, session.did);
-      setPosts(results);
+  // --- Load any saved scan for the current DID ---
+  useEffect(() => {
+    if (session?.did) {
+      setSavedScan(readSavedScan(session.did));
+    } else {
+      setSavedScan(null);
+    }
+  }, [session?.did]);
 
-      const totalImages = results.reduce((sum, p) => sum + p.images.length, 0);
-      const totalMissing = results.reduce((sum, p) => sum + p.missingAltCount, 0);
-      const postsWithMissing = results.filter((p) => p.missingAltCount > 0).length;
+  // --- Scan (optionally resuming from a saved cursor) ---
+  const handleScan = useCallback(
+    async (startCursor) => {
+      if (!agent || !session) return;
+      setIsScanning(true);
+      setStatusMessage('');
+      try {
+        const onPage = ({ cursor, hits }) => {
+          try {
+            localStorage.setItem(
+              scanStorageKey(session.did),
+              JSON.stringify({ cursor, hits })
+            );
+          } catch {
+            // ignore storage errors
+          }
+        };
 
-      setStatusMessage(
-        `Scanned ${results.length} image posts (${totalImages} images). ` +
-          `${postsWithMissing} post${postsWithMissing !== 1 ? 's' : ''} with ${totalMissing} missing alt text.`
-      );
-      setStatusType('success');
-    } catch (err) {
-      setStatusMessage(`Scan failed: ${err.message || 'Unknown error'}`);
-      setStatusType('error');
-    } finally {
-      setIsScanning(false);
-    }
-  }, [agent, session]);
+        const { posts: results } = await scanImagePosts(agent, session.did, {
+          startCursor,
+          onPage,
+        });
+        setPosts(results);
+        setSavedScan(null);
+        clearSavedScan(session.did);
+
+        const totalMedia = results.reduce((sum, p) => sum + p.images.length, 0);
+        const totalMissing = results.reduce((sum, p) => sum + p.missingAltCount, 0);
+        const postsWithMissing = results.filter((p) => p.missingAltCount > 0).length;
+
+        setStatusMessage(
+          `Scanned ${results.length} posts (${totalMedia} images/media). ` +
+            `${postsWithMissing} post${postsWithMissing !== 1 ? 's' : ''} with ${totalMissing} missing alt text.`
+        );
+        setStatusType('success');
+      } catch (err) {
+        setStatusMessage(`Scan failed: ${err.message || 'Unknown error'}`);
+        setStatusType('error');
+      } finally {
+        setIsScanning(false);
+      }
+    },
+    [agent, session]
+  );
+
+  const handleRestartScan = useCallback(() => {
+    clearSavedScan(session?.did);
+    setSavedScan(null);
+    handleScan(undefined);
+  }, [handleScan, session?.did]);
 
   // --- Apply ---
   const handleApply = useCallback(
@@ -55,7 +116,7 @@ export default function Altifier() {
       // Remove the post from the list after successful application
       setPosts((prev) => prev.filter((p) => p.uri !== post.uri));
       setStatusMessage(
-        `Post recreated with alt text. New URI: ${result.uri}`
+        `Alt text applied in place. Post URI preserved: ${result.uri}`
       );
       setStatusType('success');
 
@@ -64,14 +125,39 @@ export default function Altifier() {
     [agent, session]
   );
 
+  // --- Gemini key settings (P4) ---
+  const handleSaveGeminiKey = useCallback(() => {
+    try {
+      localStorage.setItem(GEMINI_KEY_STORAGE, geminiKey.trim());
+    } catch {
+      setStatusMessage('Could not save the Gemini API key to localStorage.');
+      setStatusType('error');
+      return;
+    }
+    setStatusMessage('Gemini API key saved. Generate buttons are now enabled.');
+    setStatusType('success');
+  }, [geminiKey]);
+
+  const handleClearGeminiKey = useCallback(() => {
+    try {
+      localStorage.removeItem(GEMINI_KEY_STORAGE);
+    } catch {
+      // ignore storage errors
+    }
+    setGeminiKey('');
+    setStatusMessage('Gemini API key cleared. Generate buttons are hidden.');
+    setStatusType('success');
+  }, []);
+
   // --- Derived ---
   const displayPosts = showMissingOnly
     ? posts.filter((p) => p.missingAltCount > 0)
     : posts;
 
-  const totalImages = posts.reduce((sum, p) => sum + p.images.length, 0);
+  const totalMedia = posts.reduce((sum, p) => sum + p.images.length, 0);
   const totalMissing = posts.reduce((sum, p) => sum + p.missingAltCount, 0);
   const postsWithMissing = posts.filter((p) => p.missingAltCount > 0).length;
+  const geminiEnabled = isGeminiConfigured();
 
   // --- Render ---
   if (isAuthLoading) return <p>Loading authentication...</p>;
@@ -87,19 +173,21 @@ export default function Altifier() {
       <div className="altifier-section">
         <h2>Alt Text Scanner</h2>
         <p>
-          Scan your Bluesky posts and replies for images that are missing alt
-          text. Generated alt text follows{' '}
+          Scan your Bluesky posts and replies for images and videos that are
+          missing alt text. Generated alt text follows{' '}
           <a
             href="https://www.section508.gov/create/alternative-text/"
             target="_blank"
             rel="noopener noreferrer"
           >
             Section 508 guidelines
-          </a>.
+          </a>
+          . Applying alt text edits the post in place, so its URI, likes, and
+          replies are preserved.
         </p>
 
         <button
-          onClick={handleScan}
+          onClick={() => handleScan(undefined)}
           disabled={isScanning}
           className="altifier-scan-button"
         >
@@ -107,6 +195,31 @@ export default function Altifier() {
         </button>
       </div>
 
+      {savedScan && posts.length === 0 && !isScanning && (
+        <div className="altifier-section altifier-resume-box">
+          <p>
+            A previous scan found {savedScan.hits} item
+            {savedScan.hits !== 1 ? 's' : ''} so far.
+          </p>
+          <div className="altifier-resume-buttons">
+            <button
+              onClick={() => handleScan(savedScan.cursor)}
+              disabled={isScanning}
+              className="altifier-scan-button"
+            >
+              Resume scan ({savedScan.hits} found so far)
+            </button>
+            <button
+              onClick={handleRestartScan}
+              disabled={isScanning}
+              className="altifier-resume-restart"
+            >
+              Restart
+            </button>
+          </div>
+        </div>
+      )}
+
       {isScanning && (
         <div className="altifier-status-box altifier-status-box-success">
           <p>Scanning your posts for images...</p>
@@ -119,15 +232,51 @@ export default function Altifier() {
         </div>
       )}
 
+      <div className="altifier-section altifier-settings">
+        <h3>AI Settings</h3>
+        <label className="altifier-settings-label" htmlFor="gemini-key">
+          Gemini API key (optional)
+        </label>
+        <input
+          id="gemini-key"
+          type="password"
+          value={geminiKey}
+          onChange={(e) => setGeminiKey(e.target.value)}
+          placeholder="Paste your Gemini API key..."
+          className="altifier-settings-input"
+        />
+        <p className="altifier-settings-note">
+          Stored only in your browser (localStorage) and never leaves this
+          device except in direct calls to Google. If no key is set, Generate
+          buttons are hidden and you can still type alt text manually.
+        </p>
+        <div className="altifier-settings-buttons">
+          <button
+            onClick={handleSaveGeminiKey}
+            disabled={!geminiKey.trim()}
+            className="altifier-settings-save"
+          >
+            Save Key
+          </button>
+          <button
+            onClick={handleClearGeminiKey}
+            disabled={!geminiEnabled && !geminiKey}
+            className="altifier-settings-clear"
+          >
+            Clear Key
+          </button>
+        </div>
+      </div>
+
       {posts.length > 0 && (
         <div className="altifier-section">
           <div className="altifier-summary">
             <h3>Summary</h3>
             <ul>
-              <li>{posts.length} image posts found ({totalImages} images)</li>
+              <li>{posts.length} posts found ({totalMedia} images/media)</li>
               <li>{postsWithMissing} post{postsWithMissing !== 1 ? 's' : ''} with missing alt text</li>
               <li>{totalMissing} image{totalMissing !== 1 ? 's' : ''} missing alt text</li>
-              <li>{posts.length - postsWithMissing} post{(posts.length - postsWithMissing) !== 1 ? 's' : ''} already have alt text on all images</li>
+              <li>{posts.length - postsWithMissing} post{(posts.length - postsWithMissing) !== 1 ? 's' : ''} already have alt text on all media</li>
             </ul>
           </div>
 
@@ -145,7 +294,7 @@ export default function Altifier() {
           <h3>
             {showMissingOnly
               ? `Posts Missing Alt Text (${postsWithMissing})`
-              : `All Image Posts (${posts.length})`}
+              : `All Posts (${posts.length})`}
           </h3>
 
           <div className="altifier-post-list">
@@ -155,6 +304,7 @@ export default function Altifier() {
                 post={post}
                 sessionDid={session?.did}
                 onApply={handleApply}
+                geminiEnabled={geminiEnabled}
               />
             ))}
           </div>
@@ -162,4 +312,4 @@ export default function Altifier() {
       )}
     </div>
   );
-}
\ No newline at end of file
+}
diff --git a/src/components/Altifier/AltifierImageCard.js b/src/components/Altifier/AltifierImageCard.js
index e52dbba..053ea43 100644
--- a/src/components/Altifier/AltifierImageCard.js
+++ b/src/components/Altifier/AltifierImageCard.js
@@ -6,6 +6,7 @@ export default function AltifierImageCard({
   onApprove,
   onReject,
   isApplying,
+  geminiEnabled,
 }) {
   const [altText, setAltText] = useState(image.currentAlt || '');
   const [generatedAlt, setGeneratedAlt] = useState(null);
@@ -43,6 +44,9 @@ export default function AltifierImageCard({
           loading="lazy"
         />
       )}
+      {image.kind === 'video' && !image.cdnUrl && (
+        <div className="altifier-video-placeholder">Video</div>
+      )}
 
       <div className="altifier-image-card-body">
         <div className="altifier-image-card-status">
@@ -52,7 +56,7 @@ export default function AltifierImageCard({
         </div>
 
         <div className="altifier-image-card-actions">
-          {!image.hasAlt && (
+          {!image.hasAlt && image.kind !== 'video' && geminiEnabled && (
             <button
               onClick={handleGenerate}
               disabled={isGenerating}
@@ -71,7 +75,7 @@ export default function AltifierImageCard({
           className="altifier-alt-textarea"
           value={altText}
           onChange={(e) => setAltText(e.target.value)}
-          placeholder="Enter alt text for this image..."
+          placeholder={`Enter alt text for this ${image.kind === 'video' ? 'video' : 'image'}...`}
           rows={3}
           maxLength={1000}
         />
diff --git a/src/components/Altifier/AltifierPostCard.js b/src/components/Altifier/AltifierPostCard.js
index dc5c90d..45c422f 100644
--- a/src/components/Altifier/AltifierPostCard.js
+++ b/src/components/Altifier/AltifierPostCard.js
@@ -1,7 +1,8 @@
 import React, { useState, useCallback } from 'react';
 import AltifierImageCard from './AltifierImageCard';
+import BlueskyPostEmbed from './BlueskyPostEmbed';
 
-export default function AltifierPostCard({ post, sessionDid, onApply }) {
+export default function AltifierPostCard({ post, sessionDid, onApply, geminiEnabled }) {
   const [approved, setApproved] = useState({});
   const [rejected, setRejected] = useState(new Set());
   const [isApplying, setIsApplying] = useState(false);
@@ -33,6 +34,19 @@ export default function AltifierPostCard({ post, sessionDid, onApply }) {
     missingImages.length === 0 ||
     (approvedCount + rejected.size >= missingImages.length);
 
+  // P7 — Build the old → new diff shown before applying.
+  const diffEntries = Object.entries(approved).map(([idx, newText]) => {
+    const i = parseInt(idx, 10);
+    const img = post.images.find((m) => m.index === i) || {
+      index: i,
+      kind: 'image',
+      currentAlt: '',
+    };
+    const oldAlt = img.currentAlt ? `"${img.currentAlt}"` : '(empty)';
+    const label = img.kind === 'video' ? 'Video' : `Image ${img.index + 1}`;
+    return { label, oldAlt, newText };
+  });
+
   const handleApplyClick = () => {
     setShowConfirm(true);
     setApplyError(null);
@@ -64,14 +78,11 @@ export default function AltifierPostCard({ post, sessionDid, onApply }) {
           {post.isReply && (
             <span className="altifier-post-reply-badge">Reply</span>
           )}
-          <a
-            href={`https://bsky.app/profile/${sessionDid}/post/${post.rkey}`}
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            View on Bluesky
-          </a>
         </div>
+        <div className="altifier-post-aturi" title="Post AT-URI">
+          <code>{post.uri}</code>
+        </div>
+        <BlueskyPostEmbed did={sessionDid} rkey={post.rkey} />
       </div>
 
       <div className="altifier-post-images">
@@ -83,6 +94,7 @@ export default function AltifierPostCard({ post, sessionDid, onApply }) {
             onApprove={handleApproveImage}
             onReject={handleRejectImage}
             isApplying={isApplying}
+            geminiEnabled={geminiEnabled}
           />
         ))}
       </div>
@@ -116,21 +128,26 @@ export default function AltifierPostCard({ post, sessionDid, onApply }) {
       {showConfirm && (
         <div className="altifier-modal-overlay" onClick={() => setShowConfirm(false)}>
           <div className="altifier-modal" onClick={(e) => e.stopPropagation()}>
-            <h3>Confirm Post Recreation</h3>
+            <h3>Confirm Alt Text Update</h3>
             <p>
-              This will delete the original post and create a new one with alt text
-              added to {approvedCount} image{approvedCount !== 1 ? 's' : ''}.
-            </p>
-            <p className="altifier-modal-warning">
-              All likes, reposts, quotes, and replies on the original post will be lost.
-              This cannot be undone.
+              Alt text will be applied in place. The post&apos;s URI, likes, and
+              replies are preserved.
             </p>
+            <ul className="altifier-modal-diff">
+              {diffEntries.map((d) => (
+                <li key={d.label}>
+                  <strong>{d.label}:</strong> <span className="altifier-diff-old">{d.oldAlt}</span>
+                  {' → '}
+                  <span className="altifier-diff-new">"{d.newText}"</span>
+                </li>
+              ))}
+            </ul>
             <div className="altifier-modal-buttons">
               <button
                 onClick={handleConfirmApply}
                 className="altifier-modal-confirm"
               >
-                Yes, Recreate Post
+                Apply Changes
               </button>
               <button
                 onClick={() => setShowConfirm(false)}
@@ -144,4 +161,4 @@ export default function AltifierPostCard({ post, sessionDid, onApply }) {
       )}
     </div>
   );
-}
\ No newline at end of file
+}
diff --git a/src/components/Altifier/BlueskyPostEmbed.js b/src/components/Altifier/BlueskyPostEmbed.js
new file mode 100644
index 0000000..b846907
--- /dev/null
+++ b/src/components/Altifier/BlueskyPostEmbed.js
@@ -0,0 +1,109 @@
+import React, { useEffect, useRef, useState } from 'react';
+
+/**
+ * Bluesky oEmbed post embed.
+ *
+ * Fetches the official oEmbed snippet for a post from embed.bsky.app and
+ * renders it inline. The snippet is a <blockquote data-bluesky-uri> plus a
+ * <script> that loads embed.bsky.app/static/embed.js. Because script tags
+ * injected via dangerouslySetInnerHTML do not execute, we load embed.js
+ * ourselves and call window.bluesky.scan() on our container to convert the
+ * blockquote into the live embed iframe.
+ */
+
+let embedScriptPromise = null;
+
+function loadEmbedScript() {
+  if (typeof window === 'undefined' || window.bluesky?.scan) return Promise.resolve();
+  if (embedScriptPromise) return embedScriptPromise;
+  embedScriptPromise = new Promise((resolve) => {
+    const script = document.createElement('script');
+    script.src = 'https://embed.bsky.app/static/embed.js';
+    script.async = true;
+    script.charset = 'utf-8';
+    // Resolve on both load and error so scan() still runs (it just finds no
+    // embeds if the script failed, leaving the static blockquote fallback).
+    script.onload = () => resolve();
+    script.onerror = () => resolve();
+    document.head.appendChild(script);
+  });
+  return embedScriptPromise;
+}
+
+export default function BlueskyPostEmbed({ did, rkey, className = '' }) {
+  const containerRef = useRef(null);
+  const [html, setHtml] = useState(null);
+  const [error, setError] = useState(null);
+
+  const postUrl = `https://bsky.app/profile/${did}/post/${rkey}`;
+
+  // Fetch the oEmbed snippet for this post.
+  useEffect(() => {
+    let cancelled = false;
+    setHtml(null);
+    setError(null);
+
+    const params = new URLSearchParams({ url: postUrl, format: 'json' });
+    fetch(`https://embed.bsky.app/oembed?${params.toString()}`)
+      .then((res) => {
+        if (!res.ok) throw new Error(`Embed failed (HTTP ${res.status})`);
+        return res.json();
+      })
+      .then((data) => {
+        if (cancelled) return;
+        if (!data.html) throw new Error('No embed HTML returned');
+        setHtml(data.html);
+      })
+      .catch((err) => {
+        if (!cancelled) setError(err.message || 'Could not load embed');
+      });
+
+    return () => {
+      cancelled = true;
+    };
+  }, [postUrl]);
+
+  // Once the blockquote is in the DOM, run embed.js scan() on our container
+  // so the static fallback is replaced with the live embed iframe.
+  useEffect(() => {
+    if (!html || !containerRef.current) return;
+    const el = containerRef.current;
+    const render = () => {
+      try {
+        window.bluesky?.scan?.(el);
+      } catch {
+        // ignore — the static blockquote fallback remains
+      }
+    };
+    if (window.bluesky?.scan) {
+      render();
+    } else {
+      loadEmbedScript().then(render);
+    }
+  }, [html]);
+
+  if (error) {
+    return (
+      <a
+        href={postUrl}
+        target="_blank"
+        rel="noopener noreferrer"
+        className="altifier-post-embed-link"
+      >
+        View on Bluesky
+      </a>
+    );
+  }
+
+  if (!html) {
+    return <div className="altifier-post-embed-loading">Loading post embed...</div>;
+  }
+
+  return (
+    <div
+      ref={containerRef}
+      className={`altifier-post-embed ${className}`}
+      dangerouslySetInnerHTML={{ __html: html }}
+    />
+  );
+}
diff --git a/src/components/Home/Home.js b/src/components/Home/Home.js
deleted file mode 100644
index f396685..0000000
--- a/src/components/Home/Home.js
+++ /dev/null
@@ -1,16 +0,0 @@
-import React from 'react';
-import { Link } from 'react-router-dom';
-
-const Home = () => (
-  <div className="home-page">
-    <div className="home-content">
-      <h1>Altifier</h1>
-      <p>Scan your Bluesky posts for missing alt text and fix them with AI-generated descriptions.</p>
-      <Link to="/altifier" className="home-button">
-        Scan My Posts
-      </Link>
-    </div>
-  </div>
-);
-
-export default Home;
\ No newline at end of file
diff --git a/src/components/Login/Login.js b/src/components/Login/Login.js
index 57db7c8..97b5ac0 100644
--- a/src/components/Login/Login.js
+++ b/src/components/Login/Login.js
@@ -8,7 +8,7 @@ const Login = () => {
   const location = useLocation();
 
   const queryParams = new URLSearchParams(location.search);
-  const returnUrl = queryParams.get('returnUrl') || '/verifier';
+  const returnUrl = queryParams.get('returnUrl') || '/altifier';
 
   useEffect(() => {
     if (isAuthenticated) {
@@ -45,7 +45,7 @@ const Login = () => {
   return (
     <div className="login-page">
       <div className="login-content">
-        <h1>Login to Verifier</h1>
+        <h1>Login to Altifier</h1>
         <p>Enter your Bluesky or ATProto handle</p>
         <form onSubmit={handleSubmit}>
           <input
diff --git a/src/components/Login/LoginCallback.js b/src/components/Login/LoginCallback.js
index 3f111f9..a76238d 100644
--- a/src/components/Login/LoginCallback.js
+++ b/src/components/Login/LoginCallback.js
@@ -11,7 +11,7 @@ const LoginCallback = () => {
     if (!loading) {
       if (session) {
         const params = new URLSearchParams(location.search);
-        const returnUrl = params.get('returnUrl') || '/verifier';
+        const returnUrl = params.get('returnUrl') || '/altifier';
         navigate(returnUrl, { replace: true });
       } else {
         navigate('/login', { replace: true });
diff --git a/src/components/Navbar/Navbar.jsx b/src/components/Navbar/Navbar.jsx
index 5b39ffe..6f05e28 100644
--- a/src/components/Navbar/Navbar.jsx
+++ b/src/components/Navbar/Navbar.jsx
@@ -15,7 +15,7 @@ const Navbar = () => {
           <button onClick={logout} className="logout-button">Logout</button>
         ) : (
           <button onClick={() => window.location.href = '/login'} className="login-button">
-            login
+            Login
           </button>
         )}
       </div>
diff --git a/src/contexts/AuthContext.js b/src/contexts/AuthContext.js
index ffb6a9b..b10d544 100644
--- a/src/contexts/AuthContext.js
+++ b/src/contexts/AuthContext.js
@@ -3,23 +3,6 @@ import { BrowserOAuthClient } from '@atproto/oauth-client-browser';
 
 export const AuthContext = createContext(null);
 
-const clientMetadata = {
-  client_id: `https://altifier.psingletary.com/client-metadata.json`,
-  client_name: "Altifier",
-  client_uri: `https://altifier.psingletary.com`,
-  redirect_uris: [
-    `https://altifier.psingletary.com/login/callback`,
-    `https://psingletary.tngl.io/altifier/login/callback`,
-  ],
-  logo_uri: `https://altifier.psingletary.com/favicon.ico`,
-  scope: "atproto transition:generic",
-  grant_types: ["authorization_code", "refresh_token"],
-  response_types: ["code"],
-  token_endpoint_auth_method: "none",
-  application_type: "web",
-  dpop_bound_access_tokens: true
-};
-
 export const AuthProvider = ({ children }) => {
   const [client, setClient] = useState(null);
   const [session, setSession] = useState(null);
@@ -35,6 +18,14 @@ export const AuthProvider = ({ children }) => {
       setError(null);
 
       try {
+        // Single source of truth for OAuth client metadata: fetched from
+        // public/client-metadata.json so there is only one definition to edit.
+        const metadataResp = await fetch('/client-metadata.json');
+        if (!metadataResp.ok) {
+          throw new Error('Failed to load OAuth client metadata.');
+        }
+        const clientMetadata = await metadataResp.json();
+
         const oauthClient = new BrowserOAuthClient({
           clientMetadata,
           handleResolver: 'https://public.api.bsky.app',
diff --git a/src/index.css b/src/index.css
deleted file mode 100644
index a84fbc4..0000000
--- a/src/index.css
+++ /dev/null
@@ -1,17 +0,0 @@
-body {
-  margin: 0;
-  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen',
-    'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans', 'Helvetica Neue',
-    sans-serif;
-  -webkit-font-smoothing: antialiased;
-  -moz-osx-font-smoothing: grayscale;
-}
-
-code {
-  font-family: source-code-pro, Menlo, Monaco, Consolas, 'Courier New',
-    monospace;
-}
-
-body {
-  transition: background-color 0.3s ease, color 0.3s ease;
-}
diff --git a/src/index.js b/src/index.js
index f00a9cb..a76ae39 100644
--- a/src/index.js
+++ b/src/index.js
@@ -1,9 +1,12 @@
 // src/index.js
+// Theme CSS must be imported BEFORE App.css so app-specific rules can
+// override theme rules (CSS order follows import order).
+import "./styles/theme/index.css";
+import "./styles/theme/theme.css";
 import React from 'react';
 import ReactDOM from 'react-dom/client';
 import App from './App';
 import { ThemeProvider } from './contexts/ThemeContext';
-import "./index.css";
 
 const container = document.getElementById('root');
 const root = ReactDOM.createRoot(container);
@@ -14,4 +17,4 @@ root.render(
         <App />
     </ThemeProvider>
   </React.StrictMode>
-);
\ No newline at end of file
+);
diff --git a/src/utils/altApplier.js b/src/utils/altApplier.js
index a387390..7c9c029 100644
--- a/src/utils/altApplier.js
+++ b/src/utils/altApplier.js
@@ -1,52 +1,105 @@
 /**
- * Alt text applicator — delete-and-recreate posts with updated alt text.
- * 
- * AT Protocol posts are immutable (content-addressed). To add alt text
- * to a post that's visible in Bluesky's UI, we must delete the original
- * and create a new one with the updated embed.images[].alt fields.
- * 
- * Warning: This loses all engagement (likes, reposts, quotes, replies).
+ * Alt text applicator — edits posts in place via com.atproto.repo.putRecord.
+ *
+ * Unlike a delete-and-recreate flow, this preserves the post's at:// URI,
+ * rkey, likes, reposts, quotes, and replies. It fetches the current record,
+ * mutates ONLY the alt fields, and writes it back with a swapRecord guard
+ * so a concurrent edit is detected rather than silently clobbered.
  */
 
 /**
- * Applies approved alt text to a post by recreating it.
- * 
- * 1. Deep-clones the original record
- * 2. Updates embed.images[N].alt with approved values
- * 3. Deletes the original post
- * 4. Creates a new post with updated alt text
- * 
+ * Applies the alt-only edits for a given embed shape.
+ * Mutates the passed record in place and returns it.
+ *
+ * @param {Object} record - Full post record value (mutated in place)
+ * @param {string} embedType - app.bsky.embed.images | recordWithMedia | video
+ * @param {Object} approvedAlts - Map of image index -> new alt text
+ */
+function applyAltEdits(record, embedType, approvedAlts) {
+  const embed = record.embed;
+  if (!embed) return record;
+
+  if (embedType === 'app.bsky.embed.images') {
+    for (const [idx, altText] of Object.entries(approvedAlts)) {
+      const i = parseInt(idx, 10);
+      if (embed.images?.[i]) embed.images[i].alt = altText;
+    }
+  } else if (embedType === 'app.bsky.embed.recordWithMedia') {
+    const media = embed.media;
+    if (media?.$type !== 'app.bsky.embed.images') return record;
+    for (const [idx, altText] of Object.entries(approvedAlts)) {
+      const i = parseInt(idx, 10);
+      if (media.images?.[i]) media.images[i].alt = altText;
+    }
+  } else if (embedType === 'app.bsky.embed.video') {
+    // Single alt for the whole video embed.
+    const first = Object.keys(approvedAlts)[0];
+    if (first !== undefined) embed.alt = approvedAlts[first];
+  }
+
+  return record;
+}
+
+/**
+ * Applies approved alt text to a post by editing it in place.
+ *
+ * 1. Fetches the current record (keeps its cid as the swap guard)
+ * 2. Mutates only the alt fields
+ * 3. Writes back with putRecord + swapRecord: cid
+ * 4. On swap failure (concurrent change), re-fetches once, re-applies,
+ *    and retries once; a second failure surfaces as an error.
+ *
  * @param {import('@atproto/api').Agent} agent - Authenticated ATProto agent
  * @param {string} did - The user's DID
- * @param {Object} post - Post object from postScanner (must include originalValue and rkey)
- * @param {Object} approvedAlts - Map of imageIndex -> new alt text
- * @returns {Promise<Object>} - Result from createRecord
+ * @param {Object} post - Post object from postScanner (rkey, embedType, originalValue)
+ * @param {Object} approvedAlts - Map of image index -> new alt text
+ * @returns {Promise<Object>} - Result from putRecord ({ uri, cid })
  */
 export async function applyAltText(agent, did, post, approvedAlts) {
-  // 1. Deep clone the original record value
-  const newRecord = JSON.parse(JSON.stringify(post.originalValue));
-
-  // 2. Update alt text for approved images
-  for (const [idx, altText] of Object.entries(approvedAlts)) {
-    const imageIdx = parseInt(idx, 10);
-    if (newRecord.embed?.images?.[imageIdx]) {
-      newRecord.embed.images[imageIdx].alt = altText;
-    }
-  }
+  const collection = 'app.bsky.feed.post';
+  const rkey = post.rkey;
 
-  // 3. Delete the old post
-  await agent.api.com.atproto.repo.deleteRecord({
-    repo: did,
-    collection: 'app.bsky.feed.post',
-    rkey: post.rkey,
-  });
+  if (!rkey) throw new Error('Post is missing a record key (rkey).');
 
-  // 4. Create new post with alt text
-  const result = await agent.api.com.atproto.repo.createRecord({
+  // 1. Fetch the current record and keep its cid as the swap guard.
+  let current = await agent.api.com.atproto.repo.getRecord({
     repo: did,
-    collection: 'app.bsky.feed.post',
-    record: newRecord,
+    collection,
+    rkey,
   });
 
-  return result;
-}
\ No newline at end of file
+  for (let attempt = 0; attempt < 2; attempt++) {
+    const cid = current.data.cid;
+
+    // 2. Clone and mutate ONLY the alt fields.
+    const record = JSON.parse(JSON.stringify(current.data.value));
+    applyAltEdits(record, post.embedType || 'app.bsky.embed.images', approvedAlts);
+
+    // 3. Write back with a swap guard.
+    try {
+      const result = await agent.api.com.atproto.repo.putRecord({
+        repo: did,
+        collection,
+        rkey,
+        record,
+        swapRecord: cid,
+      });
+      return result.data;
+    } catch (err) {
+      const isSwapFail =
+        err?.error === 'InvalidSwap' || err?.status === 409 || /swap/i.test(err?.message || '');
+      if (attempt === 0 && isSwapFail) {
+        // Record changed concurrently — re-fetch once and retry once.
+        current = await agent.api.com.atproto.repo.getRecord({
+          repo: did,
+          collection,
+          rkey,
+        });
+        continue;
+      }
+      throw err;
+    }
+  }
+
+  throw new Error('Failed to apply alt text: the record changed concurrently. Please try again.');
+}
diff --git a/src/utils/altGenerator.js b/src/utils/altGenerator.js
index dd1cce1..8c91902 100644
--- a/src/utils/altGenerator.js
+++ b/src/utils/altGenerator.js
@@ -1,30 +1,123 @@
 /**
- * Alt text generation utility — stubbed pending AI service choice.
- * 
- * Currently returns a placeholder. Plug in Gemini, Ollama, or
- * another service by replacing the body of generateAltText().
+ * Alt text generation via Google Gemini — strictly BYO-key.
+ *
+ * The API key is never bundled or baked in at build time. It is stored
+ * only in localStorage under `altifier.geminiKey` and is used solely in
+ * direct calls to Google's API. If no key is set, generation is disabled
+ * (callers should hide Generate buttons); manual alt-text entry remains
+ * fully functional.
  */
 
+const GEMINI_KEY_STORAGE = 'altifier.geminiKey';
+const GEMINI_ENDPOINT =
+  'https://generativelanguage.googleapis.com/v1beta/models/gemini-1.5-flash:generateContent';
+
+/** @returns {string} The user's Gemini API key, or '' if not set. */
+export function getGeminiKey() {
+  try {
+    return (typeof localStorage !== 'undefined' && localStorage.getItem(GEMINI_KEY_STORAGE)) || '';
+  } catch {
+    return '';
+  }
+}
+
+/** @returns {boolean} Whether a Gemini API key is configured. */
+export function isGeminiConfigured() {
+  return getGeminiKey().trim().length > 0;
+}
+
+function blobToBase64(blob) {
+  return new Promise((resolve, reject) => {
+    const reader = new FileReader();
+    reader.onloadend = () => {
+      const result = reader.result;
+      if (typeof result === 'string') {
+        // Strip the data URL prefix, e.g. "data:image/jpeg;base64,"
+        resolve(result.slice(result.indexOf(',') + 1));
+      } else {
+        reject(new Error('Failed to read image data.'));
+      }
+    };
+    reader.onerror = () => reject(new Error('Failed to read image data.'));
+    reader.readAsDataURL(blob);
+  });
+}
+
 /**
  * Generates alt text for an image following Section 508 guidelines.
- * 
- * @param {string} imageUrl - CDN URL of the image
+ *
+ * @param {string} imageUrl - URL of the image to describe
  * @param {string} postText - Text of the surrounding post (for context)
  * @returns {Promise<string>} - Generated alt text
  */
 export async function generateAltText(imageUrl, postText = '') {
-  // TODO: Integrate AI service (Gemini Flash, Ollama, etc.)
-  // See .hermes/plans/ for implementation reference
-  
-  // Stub: return a placeholder so the UI flow works
-  const context = postText ? `Context: "${postText.substring(0, 60)}"` : '';
-  return `Alt text pending AI integration. ${context}`.trim();
+  const key = getGeminiKey().trim();
+  if (!key) {
+    throw new Error('No Gemini API key set. Add one in Settings to enable generation.');
+  }
+  if (!imageUrl) {
+    throw new Error('This media has no viewable image to describe.');
+  }
+
+  // Fetch the image and send it inline to Gemini (no upload step needed).
+  const imageResp = await fetch(imageUrl);
+  if (!imageResp.ok) {
+    throw new Error(`Could not fetch the image (HTTP ${imageResp.status}).`);
+  }
+  const blob = await imageResp.blob();
+  const base64 = await blobToBase64(blob);
+  const mimeType = blob.type || 'image/jpeg';
+
+  const prompt =
+    'Write concise, accurate alternative text for this image following Section 508 ' +
+    'guidelines. Describe the essential visual content in plain language. ' +
+    (postText
+      ? `Here is the surrounding post text for context: "${postText.slice(0, 500)}". ` +
+        'Avoid repeating text already present. '
+      : '') +
+    'Respond with only the alt text, no preamble or quotes.';
+
+  const resp = await fetch(`${GEMINI_ENDPOINT}?key=${encodeURIComponent(key)}`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      contents: [
+        {
+          parts: [
+            { text: prompt },
+            { inlineData: { mimeType, data: base64 } },
+          ],
+        },
+      ],
+      generationConfig: { maxOutputTokens: 500 },
+    }),
+  });
+
+  if (!resp.ok) {
+    let message = `Gemini request failed (HTTP ${resp.status}).`;
+    try {
+      const errData = await resp.json();
+      if (errData?.error?.message) message = errData.error.message;
+    } catch {
+      // ignore parse failure, keep the generic message
+    }
+    throw new Error(message);
+  }
+
+  const data = await resp.json();
+  const text = (data?.candidates?.[0]?.content?.parts || [])
+    .map((p) => p?.text || '')
+    .join('')
+    .trim();
+
+  if (!text) throw new Error('Gemini returned no alt text.');
+  return text;
 }
 
 /**
  * Batch-generate alt text for multiple images.
  * Returns a map of image index -> alt text.
- * 
+ *
  * @param {Array} images - Array of image objects with cdnUrl
  * @param {string} postText - Surrounding post text
  * @returns {Promise<Object>}
@@ -39,4 +132,4 @@ export async function batchGenerateAltText(images, postText = '') {
     }
   }
   return results;
-}
\ No newline at end of file
+}
diff --git a/src/utils/postScanner.js b/src/utils/postScanner.js
index daf726e..4d9f5f6 100644
--- a/src/utils/postScanner.js
+++ b/src/utils/postScanner.js
@@ -1,53 +1,118 @@
 /**
- * Post scanner utility — enumerates app.bsky.feed.post records
- * for the authenticated user, extracting image embed metadata
- * and flagging images that lack alt text.
+ * Post scanner utility — enumerates app.bsky.feed.post records directly
+ * from the user's PDS (com.atproto.repo.listRecords), extracting embed
+ * metadata and flagging any media that lacks alt text.
+ *
+ * Detection covers three embed shapes:
+ *   - app.bsky.embed.images        (any images[i].alt empty/missing)
+ *   - app.bsky.embed.recordWithMedia (its media is an images embed w/ empty alt)
+ *   - app.bsky.embed.video         (embed.alt empty/missing)
+ *
+ * The scan is resumable: each page is surfaced via onPage() with the
+ * current cursor and hit count so the caller can persist progress and
+ * resume later.
  */
 
+const COLLECTION = 'app.bsky.feed.post';
+
+function cdnUrl(did, cid) {
+  return cid ? `https://cdn.bsky.app/img/feed_fullsize/plain/${did}/${cid}@jpeg` : null;
+}
+
+function hasAlt(value) {
+  return !!(value && String(value).trim().length > 0);
+}
+
 /**
- * Scans all posts (and replies) for the given DID.
- * Returns only posts that contain image embeds,
- * with per-image alt text status.
+ * Parses an embed into a normalized list of alt-able media entries.
+ * Returns null when the embed carries no editable alt (not images /
+ * recordWithMedia / video).
+ *
+ * @param {Object} embed - Raw embed value from a post record
+ * @param {string} did - The user's DID (for CDN URLs)
+ * @returns {{embedType:string, images:Array, missing:number}|null}
+ */
+function parseEmbed(embed, did) {
+  if (!embed) return null;
+  const type = embed.$type;
+
+  const toImageEntry = (img, idx) => {
+    const blobRef = img?.image?.ref?.$link || null;
+    return {
+      index: idx,
+      kind: 'image',
+      blobRef,
+      mimeType: img?.image?.mimeType || 'image/jpeg',
+      currentAlt: img?.alt || '',
+      hasAlt: hasAlt(img?.alt),
+      cdnUrl: cdnUrl(did, blobRef),
+      aspectRatio: img?.aspectRatio || null,
+    };
+  };
+
+  if (type === 'app.bsky.embed.images') {
+    const images = (embed.images || []).map(toImageEntry);
+    const missing = images.filter((i) => !i.hasAlt);
+    return { embedType: type, images, missing: missing.length };
+  }
+
+  if (type === 'app.bsky.embed.recordWithMedia') {
+    const media = embed.media;
+    if (media?.$type !== 'app.bsky.embed.images') return null;
+    const images = (media.images || []).map(toImageEntry);
+    const missing = images.filter((i) => !i.hasAlt);
+    return { embedType: type, images, missing: missing.length };
+  }
+
+  if (type === 'app.bsky.embed.video') {
+    const alt = embed.alt || '';
+    // Single textarea for the video alt; no thumbnail (may be omitted).
+    const images = [
+      {
+        index: 0,
+        kind: 'video',
+        blobRef: null,
+        mimeType: null,
+        currentAlt: alt,
+        hasAlt: hasAlt(alt),
+        cdnUrl: null,
+        aspectRatio: null,
+      },
+    ];
+    const missing = images[0].hasAlt ? 0 : 1;
+    return { embedType: type, images, missing };
+  }
+
+  return null;
+}
+
+/**
+ * Scans the user's posts (and replies) on their own PDS for media lacking
+ * alt text. Loops over listRecords pages until the cursor is absent.
  *
  * @param {import('@atproto/api').Agent} agent - Authenticated ATProto agent
  * @param {string} did - The user's DID
- * @returns {Promise<Array>} Array of image-post objects
+ * @param {Object} [opts]
+ * @param {string} [opts.startCursor] - Resume scanning from this cursor
+ * @param {(state:{cursor:string|null,hits:number})=>void} [opts.onPage] - Called after each page
+ * @returns {Promise<{posts:Array, cursor:string|null}>} - Posts and final cursor (null when complete)
  */
-export async function scanImagePosts(agent, did) {
+export async function scanImagePosts(agent, did, { startCursor, onPage } = {}) {
   const posts = [];
-  let cursor;
+  let cursor = startCursor;
 
   do {
     const res = await agent.api.com.atproto.repo.listRecords({
       repo: did,
-      collection: 'app.bsky.feed.post',
+      collection: COLLECTION,
       limit: 100,
       ...(cursor ? { cursor } : {}),
     });
 
     for (const record of res.data.records || []) {
       const value = record.value;
-      const embed = value?.embed;
-
-      // Only image embeds
-      if (!embed || embed.$type !== 'app.bsky.embed.images') continue;
-
-      const images = (embed.images || []).map((img, idx) => {
-        const blobRef = img.image?.ref?.$link || null;
-        return {
-          index: idx,
-          blobRef,
-          mimeType: img.image?.mimeType || 'image/jpeg',
-          currentAlt: img.alt || '',
-          hasAlt: !!(img.alt && img.alt.trim().length > 0),
-          cdnUrl: blobRef
-            ? `https://cdn.bsky.app/img/feed_fullsize/plain/${did}/${blobRef}@jpeg`
-            : null,
-          aspectRatio: img.aspectRatio || null,
-        };
-      });
-
-      const missingAlt = images.filter((i) => !i.hasAlt);
+      const parsed = parseEmbed(value?.embed, did);
+      if (!parsed) continue;
 
       posts.push({
         uri: record.uri,
@@ -55,19 +120,21 @@ export async function scanImagePosts(agent, did) {
         rkey: record.uri.split('/').pop(),
         text: value.text || '',
         createdAt: value.createdAt,
-        isReply: !!(value.reply),
-        // Store full original value for later recreation
+        isReply: !!value.reply,
+        // Full original value — exactly the object P1 writes back (minus alt edits).
         originalValue: value,
-        images,
-        missingAltCount: missingAlt.length,
-        allHaveAlt: missingAlt.length === 0,
+        embedType: parsed.embedType,
+        images: parsed.images,
+        missingAltCount: parsed.missing,
+        allHaveAlt: parsed.missing === 0,
       });
     }
 
     cursor = res.data.cursor;
+    if (onPage) onPage({ cursor, hits: posts.length });
   } while (cursor);
 
-  return posts;
+  return { posts, cursor: null };
 }
 
 /**
@@ -77,5 +144,5 @@ export async function scanImagePosts(agent, did) {
  * @returns {string}
  */
 export function blobCdnUrl(did, cid) {
-  return `https://cdn.bsky.app/img/feed_fullsize/plain/${did}/${cid}@jpeg`;
+  return cdnUrl(did, cid);
 }