From 8ceb71476574c90968e890540e87f9e9f58f10f8 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 12:50:38 +0200
Subject: [PATCH 001/124] bulk upload

---
 bincio/serve/server.py      | 72 ++++++++++++++++++++++---------------
 site/src/layouts/Base.astro | 31 +++++++++-------
 2 files changed, 62 insertions(+), 41 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 3e6e202..983a07d 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -465,43 +465,57 @@ _SUPPORTED_SUFFIXES = {".fit", ".gpx", ".tcx", ".fit.gz", ".gpx.gz", ".tcx.gz"}
 
 @app.post("/api/upload")
 async def upload_activity(
-    file: UploadFile = File(...),
+    files: list[UploadFile] = File(...),
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> JSONResponse:
+    from bincio.extract.ingest import ingest_parsed
+    from bincio.extract.parsers.factory import parse_file
+    from bincio.extract.writer import make_activity_id
+    from bincio.render.merge import merge_all
+
     user = _require_user(bincio_session)
     dd = _get_data_dir() / user.handle
-    name = Path(file.filename or "upload.fit").name
-    p = Path(name.lower())
-    suffix = (p.stem.rsplit(".", 1)[-1].join([".", ".gz"]) if "." in p.stem else ".gz") if p.suffix == ".gz" else p.suffix
-    if suffix not in _SUPPORTED_SUFFIXES:
-        raise HTTPException(400, f"Unsupported file type '{suffix}'")
-    contents = await file.read()
-    if len(contents) > 50 * 1024 * 1024:
-        raise HTTPException(413, "File too large (max 50 MB)")
     staging = dd / "_uploads"
     staging.mkdir(exist_ok=True)
-    staged = staging / name
-    staged.write_bytes(contents)
-    try:
-        from bincio.extract.ingest import ingest_parsed
-        from bincio.extract.parsers.factory import parse_file
-        activity = parse_file(staged)
-        activity_id_check = dd / "activities" / f"{activity.source_file}.json"
-        from bincio.extract.writer import make_activity_id
-        activity_id = make_activity_id(activity)
-        if (dd / "activities" / f"{activity_id}.json").exists():
-            raise HTTPException(409, f"Activity already exists: {activity_id}")
-        ingest_parsed(activity, dd, privacy="public")
-        from bincio.render.merge import merge_all
+
+    results = []
+    any_added = False
+
+    for file in files:
+        name = Path(file.filename or "upload.fit").name
+        p = Path(name.lower())
+        suffix = (p.stem.rsplit(".", 1)[-1].join([".", ".gz"]) if "." in p.stem else ".gz") if p.suffix == ".gz" else p.suffix
+        if suffix not in _SUPPORTED_SUFFIXES:
+            results.append({"name": name, "ok": False, "error": f"Unsupported file type '{suffix}'"})
+            continue
+
+        contents = await file.read()
+        if len(contents) > 50 * 1024 * 1024:
+            results.append({"name": name, "ok": False, "error": "File too large (max 50 MB)"})
+            continue
+
+        staged = staging / name
+        staged.write_bytes(contents)
+        try:
+            activity = parse_file(staged)
+            activity_id = make_activity_id(activity)
+            if (dd / "activities" / f"{activity_id}.json").exists():
+                results.append({"name": name, "ok": False, "error": "duplicate"})
+                continue
+            ingest_parsed(activity, dd, privacy="public")
+            results.append({"name": name, "ok": True, "id": activity_id})
+            any_added = True
+        except Exception as exc:
+            results.append({"name": name, "ok": False, "error": f"{type(exc).__name__}: {exc}"})
+        finally:
+            staged.unlink(missing_ok=True)
+
+    if any_added:
         merge_all(dd)
         _trigger_rebuild(user.handle)
-    except HTTPException:
-        raise
-    except Exception as exc:
-        raise HTTPException(422, f"Failed to process activity: {type(exc).__name__}: {exc}")
-    finally:
-        staged.unlink(missing_ok=True)
-    return JSONResponse({"ok": True, "id": activity_id})
+
+    added = [r for r in results if r["ok"]]
+    return JSONResponse({"ok": True, "added": len(added), "results": results})
 
 
 @app.post("/api/strava/sync")
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 5411cff..679daf8 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -256,8 +256,8 @@ try {
             id="upload-drop"
             class="border-2 border-dashed border-zinc-700 rounded-lg p-8 text-center text-zinc-500 text-sm cursor-pointer hover:border-zinc-500 hover:text-zinc-300 transition-colors"
           >
-            <div id="upload-label">Drop a FIT, GPX, or TCX file<br/>or click to browse</div>
-            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz" class="hidden" />
+            <div id="upload-label">Drop FIT, GPX, or TCX files<br/>or click to browse</div>
+            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz" class="hidden" multiple />
           </div>
           <p id="upload-status" class="mt-3 text-xs text-center" style="color: var(--text-5); min-height: 1.25rem"></p>
         </div>
@@ -437,24 +437,31 @@ try {
         e.preventDefault();
         drop.style.borderColor = '';
         drop.style.color = '';
-        if (e.dataTransfer?.files[0]) doUpload(e.dataTransfer.files[0]);
+        if (e.dataTransfer?.files.length) doUpload(e.dataTransfer.files);
       });
-      input.addEventListener('change', () => { if (input.files?.[0]) doUpload(input.files[0]); });
+      input.addEventListener('change', () => { if (input.files?.length) doUpload(input.files); });
 
-      async function doUpload(file) {
-        label.textContent = file.name;
-        fileStatus.textContent = 'Uploading…';
+      async function doUpload(files) {
+        const n = files.length;
+        label.textContent = n === 1 ? files[0].name : `${n} files selected`;
+        fileStatus.textContent = `Uploading ${n} file${n > 1 ? 's' : ''}…`;
         fileStatus.style.color = 'var(--text-4)';
         drop.style.pointerEvents = 'none';
         const fd = new FormData();
-        fd.append('file', file);
+        for (const f of files) fd.append('files', f);
         try {
-          const r = await fetch(`${editUrl}/api/upload`, { method: 'POST', body: fd });
+          const r = await fetch(`${editUrl}/api/upload`, { method: 'POST', credentials: 'include', body: fd });
           if (!r.ok) throw new Error(await r.text());
           const d = await r.json();
-          fileStatus.textContent = 'Done! Opening activity…';
-          fileStatus.style.color = '#4ade80';
-          setTimeout(() => { window.location.href = `${baseUrl}activity/${d.id}/`; }, 600);
+          const dupes = d.results.filter(r => r.error === 'duplicate').length;
+          const errors = d.results.filter(r => !r.ok && r.error !== 'duplicate').length;
+          let msg = `${d.added} added`;
+          if (dupes) msg += `, ${dupes} duplicate${dupes > 1 ? 's' : ''}`;
+          if (errors) msg += `, ${errors} failed`;
+          fileStatus.textContent = msg;
+          fileStatus.style.color = d.added > 0 ? '#4ade80' : '#a1a1aa';
+          if (d.added > 0) setTimeout(() => { window.location.reload(); }, 1200);
+          else drop.style.pointerEvents = '';
         } catch (e) {
           fileStatus.textContent = 'Error: ' + e.message;
           fileStatus.style.color = '#f87171';

From 5170afa9e8874c30b8aff4939ab3cbaf031690ed Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 12:53:35 +0200
Subject: [PATCH 002/124] vps instructions

---
 docs/deployment/vps.md | 298 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 298 insertions(+)
 create mode 100644 docs/deployment/vps.md

diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
new file mode 100644
index 0000000..71719e2
--- /dev/null
+++ b/docs/deployment/vps.md
@@ -0,0 +1,298 @@
+# VPS deployment guide
+
+Concrete setup for a Debian VPS running a private multi-user bincio instance.
+Code is deployed directly from your laptop via `git push` — no GitHub required.
+
+## Assumptions
+
+- Bare Debian 12 VPS with root SSH access
+- You own a domain pointed at the VPS
+- You have Strava API credentials
+- Up to ~30 users
+
+---
+
+## 1. Install system dependencies
+
+```bash
+apt update && apt upgrade -y
+apt install -y git curl nginx certbot python3-certbot-nginx sqlite3
+```
+
+**Node.js 20 LTS** (the Debian package is too old):
+```bash
+curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
+apt install -y nodejs
+```
+
+**uv** (manages Python and all Python deps):
+```bash
+curl -LsSf https://astral.sh/uv/install.sh | sh
+# add to PATH:
+echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc
+source ~/.bashrc
+```
+
+---
+
+## 2. Set up the code directory
+
+```bash
+mkdir -p /opt/bincio
+git init --bare /opt/bincio-repo.git
+```
+
+Create the post-receive hook at `/opt/bincio-repo.git/hooks/post-receive`:
+
+```bash
+#!/bin/bash
+set -e
+
+REPO=/opt/bincio-repo.git
+DEPLOY=/opt/bincio
+DATA=/var/bincio/data
+
+echo "--- Checking out code ---"
+git --work-tree=$DEPLOY --git-dir=$REPO checkout -f
+
+echo "--- Syncing Python deps ---"
+cd $DEPLOY
+~/.local/bin/uv sync
+
+echo "--- Syncing JS deps ---"
+cd $DEPLOY/site
+npm install --silent
+
+echo "--- Building site ---"
+cd $DEPLOY
+~/.local/bin/uv run bincio render --data-dir $DATA --site-dir $DEPLOY/site
+
+echo "--- Copying dist to webroot ---"
+rsync -a --delete $DEPLOY/site/dist/ /var/www/bincio/
+
+echo "--- Restarting API ---"
+systemctl restart bincio
+
+echo "--- Done ---"
+```
+
+```bash
+chmod +x /opt/bincio-repo.git/hooks/post-receive
+mkdir -p /var/www/bincio
+```
+
+---
+
+## 3. First deploy from your laptop
+
+Add the VPS as a git remote (run this locally, once):
+
+```bash
+git remote add vps root@<your-vps-ip>:/opt/bincio-repo.git
+```
+
+Push your code:
+
+```bash
+git push vps main
+```
+
+The hook checks out the code, installs deps, and builds the site.
+Subsequent pushes (including unpublished branches) work the same way:
+
+```bash
+git push vps mobile_app   # deploy any branch directly
+```
+
+---
+
+## 4. Initialise the instance
+
+```bash
+cd /opt/bincio
+
+uv run bincio init \
+  --data-dir /var/bincio/data \
+  --handle dave \
+  --display-name "Dave" \
+  --name "My Bincio"
+# prompted for password; prints a first invite code
+```
+
+Set the user cap:
+
+```bash
+sqlite3 /var/bincio/data/instance.db \
+  "INSERT INTO settings VALUES ('max_users', '30');"
+```
+
+---
+
+## 5. Prepare your own activities
+
+Source files (raw GPX/FIT) live separately from the BAS output:
+
+```
+/var/bincio/sources/dave/    ← raw activity files, rsync'd from laptop
+/var/bincio/data/dave/       ← BAS JSON output (bincio extract writes here)
+```
+
+Configure `/opt/bincio/extract_config.yaml` on the server to point to your
+source dir:
+
+```yaml
+sources:
+  - path: /var/bincio/sources/dave/activities
+    type: strava_export
+  - path: /var/bincio/sources/dave/activities.csv
+    type: strava_csv
+
+output:
+  dir: /var/bincio/data
+```
+
+Sync and extract (run from your laptop or SSH in):
+
+```bash
+# push raw files from laptop
+rsync -avz ~/your-activity-data/ root@<vps>:/var/bincio/sources/dave/
+
+# extract on server
+ssh root@<vps> "cd /opt/bincio && uv run bincio extract"
+
+# rebuild site
+ssh root@<vps> "cd /opt/bincio && \
+  uv run bincio render --data-dir /var/bincio/data --site-dir site && \
+  rsync -a --delete site/dist/ /var/www/bincio/"
+```
+
+---
+
+## 6. systemd service
+
+Create `/etc/systemd/system/bincio.service`:
+
+```ini
+[Unit]
+Description=BincioActivity API
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/bincio
+ExecStart=/root/.local/bin/uv run bincio serve \
+    --data-dir /var/bincio/data \
+    --site-dir /opt/bincio/site \
+    --host 127.0.0.1 \
+    --port 4041
+EnvironmentFile=/etc/bincio/secrets.env
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+```
+
+Create `/etc/bincio/secrets.env`:
+
+```bash
+mkdir -p /etc/bincio
+chmod 700 /etc/bincio
+cat > /etc/bincio/secrets.env <<EOF
+STRAVA_CLIENT_ID=your_client_id
+STRAVA_CLIENT_SECRET=your_client_secret
+EOF
+chmod 600 /etc/bincio/secrets.env
+```
+
+Enable and start:
+
+```bash
+systemctl daemon-reload
+systemctl enable --now bincio
+systemctl status bincio
+```
+
+---
+
+## 7. nginx
+
+Create `/etc/nginx/sites-available/bincio`:
+
+```nginx
+server {
+    listen 80;
+    server_name yourdomain.com;
+
+    root /var/www/bincio;
+    index index.html;
+
+    # API → bincio serve
+    location /api/ {
+        proxy_pass http://127.0.0.1:4041;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_read_timeout 120s;   # Strava sync can be slow
+    }
+
+    # Static files
+    location / {
+        try_files $uri $uri/ $uri.html =404;
+    }
+}
+```
+
+```bash
+ln -s /etc/nginx/sites-available/bincio /etc/nginx/sites-enabled/
+nginx -t && systemctl reload nginx
+```
+
+---
+
+## 8. SSL
+
+```bash
+certbot --nginx -d yourdomain.com
+# certbot edits the nginx config and sets up automatic renewal
+```
+
+---
+
+## 9. Invite users
+
+After `bincio init` prints the first invite code, you can generate more from
+the browser at `/u/{handle}/athlete/` → **Invites** button (visible only to
+the page owner), or directly via the CLI:
+
+```bash
+sqlite3 /var/bincio/data/instance.db \
+  "INSERT INTO invites (code, created_by, created_at) \
+   VALUES (upper(hex(randomblob(4))), 'dave', unixepoch());"
+```
+
+Share the link: `https://yourdomain.com/register/?code=XXXXXXXX`
+
+Each new user uploads their activities via the **+** button in the top nav
+(supports bulk GPX/FIT/TCX drop). They can later connect Strava for
+incremental sync from the same modal.
+
+---
+
+## Day-to-day operations
+
+| Task | Command |
+|------|---------|
+| Deploy code update | `git push vps main` (from laptop) |
+| Sync your raw files | `rsync -avz ~/your-activity-data/ root@<vps>:/var/bincio/sources/dave/` |
+| Re-extract after sync | `ssh root@<vps> "cd /opt/bincio && uv run bincio extract"` then push again to rebuild |
+| View API logs | `journalctl -u bincio -f` |
+| Restart API | `systemctl restart bincio` |
+| Check nginx logs | `tail -f /var/log/nginx/error.log` |
+| Renew SSL (auto) | `certbot renew --dry-run` |
+
+---
+
+## See also
+
+- [Multi-user architecture](multi-user.md)
+- [CLI reference](../reference/cli.md)
+- [API reference](../reference/api.md)

From 469a5954ccc0293df836e5d0d58228ea0cd2be66 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:01:21 +0200
Subject: [PATCH 003/124] "keep data on the server" opt-in/out

---
 bincio/edit/ops.py          | 13 ++++++++++---
 bincio/edit/server.py       | 17 ++++++++++++++---
 bincio/extract/ingest.py    |  8 +++++++-
 bincio/serve/init_cmd.py    |  7 ++++++-
 bincio/serve/server.py      | 21 ++++++++++++++++++---
 site/src/layouts/Base.astro | 26 ++++++++++++++++++++++----
 6 files changed, 77 insertions(+), 15 deletions(-)

diff --git a/bincio/edit/ops.py b/bincio/edit/ops.py
index fddddb5..50a1f16 100644
--- a/bincio/edit/ops.py
+++ b/bincio/edit/ops.py
@@ -9,7 +9,7 @@ from __future__ import annotations
 import json
 import re
 from pathlib import Path
-from typing import Any
+from typing import Any, Optional
 
 # ── Shared constants (imported by edit/server.py and serve/server.py) ─────────
 
@@ -58,13 +58,20 @@ def apply_sidecar_edit(activity_id: str, payload: dict[str, Any], data_dir: Path
     merge_one(data_dir, activity_id)
 
 
-def run_strava_sync(data_dir: Path, client_id: str, client_secret: str) -> dict[str, Any]:
+def run_strava_sync(
+    data_dir: Path,
+    client_id: str,
+    client_secret: str,
+    originals_dir: Optional[Path] = None,
+) -> dict[str, Any]:
     """Fetch new Strava activities and write them into data_dir.
 
     Args:
         data_dir:      Per-user data directory.
         client_id:     Strava OAuth client ID.
         client_secret: Strava OAuth client secret.
+        originals_dir: If set, raw Strava API data (meta + streams) is saved here
+                       as JSON files for potential future reprocessing.
 
     Returns:
         Dict with keys: ok, imported, skipped, error_count, errors.
@@ -75,7 +82,7 @@ def run_strava_sync(data_dir: Path, client_id: str, client_secret: str) -> dict[
     from bincio.extract.ingest import strava_sync as _strava_sync
     from bincio.render.merge import merge_all
 
-    result = _strava_sync(data_dir, client_id, client_secret)
+    result = _strava_sync(data_dir, client_id, client_secret, originals_dir=originals_dir)
     if result["imported"]:
         merge_all(data_dir)
 
diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 7e7b516..7cb99ed 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -7,7 +7,7 @@ import shutil
 from pathlib import Path
 from typing import Any
 
-from fastapi import FastAPI, File, HTTPException, Request, UploadFile
+from fastapi import FastAPI, File, Form, HTTPException, Request, UploadFile
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.middleware.gzip import GZipMiddleware
 from fastapi.responses import HTMLResponse, JSONResponse, RedirectResponse
@@ -517,7 +517,10 @@ def _file_suffix(name: str) -> str:
 
 
 @app.post("/api/upload")
-async def upload_activity(file: UploadFile = File(...)) -> JSONResponse:
+async def upload_activity(
+    file: UploadFile = File(...),
+    store_original: bool = Form(False),
+) -> JSONResponse:
     """Accept a FIT/GPX/TCX file, extract it, update index.json, and re-merge."""
     dd = _get_data_dir()
 
@@ -536,6 +539,7 @@ async def upload_activity(file: UploadFile = File(...)) -> JSONResponse:
     staged = staging / name
     staged.write_bytes(contents)
 
+    kept = False
     try:
         from bincio.extract.metrics import compute
         from bincio.extract.parsers.factory import parse_file
@@ -563,6 +567,12 @@ async def upload_activity(file: UploadFile = File(...)) -> JSONResponse:
         existing[activity_id] = summary
         write_index(list(existing.values()), dd, owner)
 
+        if store_original:
+            originals_dir = dd / "originals"
+            originals_dir.mkdir(exist_ok=True)
+            staged.rename(originals_dir / name)
+            kept = True
+
         from bincio.render.merge import merge_all
         merge_all(dd)
 
@@ -571,7 +581,8 @@ async def upload_activity(file: UploadFile = File(...)) -> JSONResponse:
     except Exception as exc:
         raise HTTPException(422, f"Failed to process activity file: {type(exc).__name__}")
     finally:
-        staged.unlink(missing_ok=True)
+        if not kept:
+            staged.unlink(missing_ok=True)
 
     return JSONResponse({"ok": True, "id": activity_id})
 
diff --git a/bincio/extract/ingest.py b/bincio/extract/ingest.py
index 84406eb..7515251 100644
--- a/bincio/extract/ingest.py
+++ b/bincio/extract/ingest.py
@@ -10,7 +10,6 @@ from __future__ import annotations
 import json
 from pathlib import Path
 from typing import Any, Optional
-
 from bincio.extract.models import ParsedActivity
 
 
@@ -67,6 +66,7 @@ def strava_sync(
     data_dir: Path,
     client_id: str,
     client_secret: str,
+    originals_dir: Optional[Path] = None,
 ) -> dict[str, Any]:
     """Fetch new Strava activities and ingest them into data_dir.
 
@@ -119,6 +119,12 @@ def strava_sync(
                 skipped += 1
                 continue
             streams = fetch_streams(token["access_token"], meta["id"])
+            if originals_dir is not None:
+                orig_path = originals_dir / f"{activity_id}.json"
+                orig_path.write_text(
+                    json.dumps({"meta": meta, "streams": streams}, indent=2),
+                    encoding="utf-8",
+                )
             parsed = strava_to_parsed(meta, streams)
             ingest_parsed(parsed, data_dir, privacy="public", rdp_epsilon=0.0001)
             imported += 1
diff --git a/bincio/serve/init_cmd.py b/bincio/serve/init_cmd.py
index 5122857..5dfbb84 100644
--- a/bincio/serve/init_cmd.py
+++ b/bincio/serve/init_cmd.py
@@ -24,7 +24,7 @@ def init(data_dir: str, handle: str, password: str, display_name: str, name: str
     Creates the SQLite database, the admin user, the per-user data directory,
     and prints a first invite code. Safe to re-run — skips steps already done.
     """
-    from bincio.serve.db import create_invite, create_user, get_user, open_db, set_setting
+    from bincio.serve.db import create_invite, create_user, get_user, open_db, set_setting, get_setting
 
     dd = Path(data_dir).expanduser().resolve()
     dd.mkdir(parents=True, exist_ok=True)
@@ -75,6 +75,11 @@ def init(data_dir: str, handle: str, password: str, display_name: str, name: str
     else:
         console.print("  [dim]·[/dim] no user limit (unlimited)")
 
+    # ── Original file storage default ─────────────────────────────────────────
+    if get_setting(db, "store_originals") is None:
+        set_setting(db, "store_originals", "true")
+        console.print("  [green]✓[/green] store_originals = true (users can override per upload)")
+
     # ── First invite code ─────────────────────────────────────────────────────
     code = create_invite(db, handle)
 
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 983a07d..d6f3f95 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -15,7 +15,7 @@ import time
 from pathlib import Path
 from typing import Any, Optional
 
-from fastapi import Cookie, FastAPI, File, HTTPException, Request, Response, UploadFile
+from fastapi import Cookie, FastAPI, File, Form, HTTPException, Request, Response, UploadFile
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.middleware.gzip import GZipMiddleware
 from fastapi.responses import JSONResponse
@@ -164,10 +164,12 @@ async def me(bincio_session: Optional[str] = Cookie(default=None)) -> JSONRespon
     user = _current_user(bincio_session)
     if not user:
         raise HTTPException(404, "Not authenticated")
+    store_orig = get_setting(_get_db(), "store_originals")
     return JSONResponse({
         "handle": user.handle,
         "display_name": user.display_name,
         "is_admin": user.is_admin,
+        "store_originals_default": store_orig != "false",
     })
 
 
@@ -466,6 +468,7 @@ _SUPPORTED_SUFFIXES = {".fit", ".gpx", ".tcx", ".fit.gz", ".gpx.gz", ".tcx.gz"}
 @app.post("/api/upload")
 async def upload_activity(
     files: list[UploadFile] = File(...),
+    store_original: bool = Form(False),
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> JSONResponse:
     from bincio.extract.ingest import ingest_parsed
@@ -496,6 +499,7 @@ async def upload_activity(
 
         staged = staging / name
         staged.write_bytes(contents)
+        kept = False
         try:
             activity = parse_file(staged)
             activity_id = make_activity_id(activity)
@@ -503,12 +507,18 @@ async def upload_activity(
                 results.append({"name": name, "ok": False, "error": "duplicate"})
                 continue
             ingest_parsed(activity, dd, privacy="public")
+            if store_original:
+                originals_dir = dd / "originals"
+                originals_dir.mkdir(exist_ok=True)
+                staged.rename(originals_dir / name)
+                kept = True
             results.append({"name": name, "ok": True, "id": activity_id})
             any_added = True
         except Exception as exc:
             results.append({"name": name, "ok": False, "error": f"{type(exc).__name__}: {exc}"})
         finally:
-            staged.unlink(missing_ok=True)
+            if not kept:
+                staged.unlink(missing_ok=True)
 
     if any_added:
         merge_all(dd)
@@ -524,9 +534,14 @@ async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)
     if not strava_client_id or not strava_client_secret:
         raise HTTPException(400, "Strava not configured on this server")
     dd = _get_data_dir() / user.handle
+    store_orig_setting = get_setting(_get_db(), "store_originals")
+    store_orig = store_orig_setting == "true"
+    originals_dir = (dd / "originals" / "strava") if store_orig else None
+    if originals_dir:
+        originals_dir.mkdir(parents=True, exist_ok=True)
     from bincio.edit.ops import run_strava_sync
     try:
-        result = run_strava_sync(dd, strava_client_id, strava_client_secret)
+        result = run_strava_sync(dd, strava_client_id, strava_client_secret, originals_dir=originals_dir)
     except RuntimeError as e:
         raise HTTPException(502, str(e))
     _trigger_rebuild(user.handle)
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 679daf8..7cc36f7 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -175,6 +175,7 @@ try {
           {mobileApp && (
             <a href={`${baseUrl}convert/`} class="text-sm text-zinc-400 hover:text-white transition-colors">Convert</a>
           )}
+          <a href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors">About</a>
         </>
       )}
 
@@ -259,6 +260,17 @@ try {
             <div id="upload-label">Drop FIT, GPX, or TCX files<br/>or click to browse</div>
             <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz" class="hidden" multiple />
           </div>
+          <label class="flex items-start gap-2 mt-3 cursor-pointer group">
+            <input
+              id="upload-keep-original"
+              type="checkbox"
+              class="mt-0.5 accent-blue-500 shrink-0"
+            />
+            <span class="text-xs text-zinc-500 group-hover:text-zinc-300 transition-colors leading-snug">
+              Keep original file on server
+              <span class="text-zinc-600 block mt-0.5">Lets you reprocess if the format changes. See the <a href={`${baseUrl}about/`} class="underline hover:text-zinc-400">About page</a> for details.</span>
+            </span>
+          </label>
           <p id="upload-status" class="mt-3 text-xs text-center" style="color: var(--text-5); min-height: 1.25rem"></p>
         </div>
 
@@ -366,6 +378,10 @@ try {
           // Show logout button
           const logoutEl = document.getElementById('nav-logout');
           if (logoutEl) logoutEl.style.display = '';
+
+          // Pre-populate the "keep original" checkbox from the instance default
+          const chk = document.getElementById('upload-keep-original');
+          if (chk && user.store_originals_default) chk.checked = true;
         } catch (_) {}
       })();
 
@@ -388,10 +404,11 @@ try {
       const chooseStrava  = document.getElementById('upload-choose-strava');
       const backFile      = document.getElementById('upload-back-file');
       const backStrava    = document.getElementById('upload-back-strava');
-      const drop          = document.getElementById('upload-drop');
-      const input         = document.getElementById('upload-input');
-      const label         = document.getElementById('upload-label');
-      const fileStatus    = document.getElementById('upload-status');
+      const drop              = document.getElementById('upload-drop');
+      const input             = document.getElementById('upload-input');
+      const label             = document.getElementById('upload-label');
+      const keepOriginalChk   = document.getElementById('upload-keep-original');
+      const fileStatus        = document.getElementById('upload-status');
       const stravaStatus  = document.getElementById('strava-status');
       const stravaConnect = document.getElementById('strava-connect-area');
       const stravaSync    = document.getElementById('strava-sync-area');
@@ -449,6 +466,7 @@ try {
         drop.style.pointerEvents = 'none';
         const fd = new FormData();
         for (const f of files) fd.append('files', f);
+        fd.append('store_original', keepOriginalChk?.checked ? 'true' : 'false');
         try {
           const r = await fetch(`${editUrl}/api/upload`, { method: 'POST', credentials: 'include', body: fd });
           if (!r.ok) throw new Error(await r.text());

From f37e898eb59803a2c383885aaf13fd10dccc953d Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:05:51 +0200
Subject: [PATCH 004/124] about page

---
 site/src/pages/about/ca/index.astro | 114 ++++++++++++++++++++++++++++
 site/src/pages/about/es/index.astro | 113 +++++++++++++++++++++++++++
 site/src/pages/about/index.astro    | 109 ++++++++++++++++++++++++++
 site/src/pages/about/it/index.astro | 113 +++++++++++++++++++++++++++
 4 files changed, 449 insertions(+)
 create mode 100644 site/src/pages/about/ca/index.astro
 create mode 100644 site/src/pages/about/es/index.astro
 create mode 100644 site/src/pages/about/index.astro
 create mode 100644 site/src/pages/about/it/index.astro

diff --git a/site/src/pages/about/ca/index.astro b/site/src/pages/about/ca/index.astro
new file mode 100644
index 0000000..5452a76
--- /dev/null
+++ b/site/src/pages/about/ca/index.astro
@@ -0,0 +1,114 @@
+---
+import Base from '../../../layouts/Base.astro';
+const baseUrl = import.meta.env.BASE_URL ?? '/';
+---
+<Base title="Sobre el projecte — BincioActivity" public={true}>
+  <div class="max-w-2xl mx-auto">
+    <div class="flex items-baseline justify-between mb-1">
+      <h1 class="text-2xl font-bold text-white">Sobre BincioActivity</h1>
+      <div class="flex gap-3 text-xs text-zinc-500">
+        <a href={`${baseUrl}about/`} class="hover:text-white transition-colors">EN</a>
+        <a href={`${baseUrl}about/it/`} class="hover:text-white transition-colors">IT</a>
+        <a href={`${baseUrl}about/es/`} class="hover:text-white transition-colors">ES</a>
+        <span class="text-zinc-300 font-medium">CA</span>
+      </div>
+    </div>
+    <p class="text-sm text-zinc-500 mb-4">Seguiment d'activitats de codi obert i allotjament propi</p>
+    <a
+      href="https://ko-fi.com/brutsalvadi"
+      target="_blank"
+      rel="noopener noreferrer"
+      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+      style="background:#FF5E5B; color:#fff;"
+    >
+      ☕ Dona suport a Ko-fi
+    </a>
+
+    <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Què és això?</h2>
+        <p>
+          BincioActivity és una plataforma gratuïta i de codi obert per registrar les teves
+          activitats a l'aire lliure: ciclisme, córrer, senderisme i més. Està dissenyada per
+          ser allotjada pel propi usuari: tu (o algú de confiança) gestioneu el servidor, i
+          les teves dades resten sota el teu control.
+        </p>
+        <p class="mt-2">
+          Les activitats s'emmagatzemen en un format JSON obert anomenat BAS (BincioActivity Schema),
+          dissenyat per ser llegible i portable. La plataforma no té analítiques ocultes,
+          no inclou publicitat i no comparteix dades amb tercers.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Les teves dades en aquest servidor</h2>
+        <p>
+          Quan puges un fitxer FIT, GPX o TCX, el servidor el converteix al format BAS.
+          Per defecte, el fitxer font original també es desa a la carpeta
+          <code class="text-zinc-300 bg-zinc-800 px-1 rounded">originals/</code> del teu compte.
+          Pots desactivar aquesta opció en el moment de la pujada desmarcant
+          <em>"Conserva el fitxer original al servidor"</em>.
+        </p>
+        <p class="mt-2">
+          Es recomana conservar els originals durant aquestes primeres etapes del projecte:
+          si la cadena de processament millora (millor suavitzat d'elevació, càlcul de velocitat,
+          detecció de voltes, etc.) podràs tornar a importar els fitxers per aprofitar els canvis.
+          Si has triat no conservar els originals, hauràs de tornar a pujar els fitxers manualment.
+        </p>
+        <p class="mt-2">
+          En sincronitzar amb Strava, les dades brutes obtingudes de l'API de Strava també
+          es poden emmagatzemar localment. Això ho controla una configuració global del servidor
+          establerta per l'operador.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Programari en fase inicial</h2>
+        <p>
+          BincioActivity està en desenvolupament actiu. El format de dades, la cadena de
+          processament i l'API del servidor poden canviar entre versions. Els canvis
+          incompatibles són possibles, especialment en aquesta etapa. Quan es produeixin,
+          tornar a importar els fitxers originals és la manera més segura d'actualitzar
+          les teves dades.
+        </p>
+        <p class="mt-2">
+          No hi ha cap garantia de disponibilitat, integritat de les dades ni compatibilitat
+          futura per a cap versió en particular. Fes servir aquest programari sota la teva
+          pròpia responsabilitat i conserva les teves pròpies còpies de seguretat de les
+          dades importants.
+        </p>
+      </section>
+
+      <section class="border border-zinc-800 rounded-xl p-4 bg-zinc-900/50">
+        <h2 class="text-base font-semibold text-white mb-2">Limitació de responsabilitat</h2>
+        <p>
+          BincioActivity es proporciona <strong class="text-zinc-300">"tal com és"</strong>, sense
+          cap garantia de cap mena. Els autors i operadors del servidor no accepten cap
+          responsabilitat per:
+        </p>
+        <ul class="list-disc list-inside mt-2 space-y-1">
+          <li>Pèrdua, corrupció o accés no autoritzat a les teves dades d'activitat</li>
+          <li>Dades exposades per una configuració incorrecta del servidor o la infraestructura</li>
+          <li>Inexactituds en les estadístiques calculades (distància, desnivell, freqüència cardíaca, etc.)</li>
+          <li>Qualsevol conseqüència derivada d'actuar sobre la informació mostrada per aquesta aplicació</li>
+        </ul>
+        <p class="mt-3">
+          Ets responsable de protegir el teu compte amb una contrasenya segura, de revisar
+          quines dades comparteixes i de fer les teves pròpies còpies de seguretat. Les dades
+          de GPS i salut poden ser sensibles — reflexiona sobre el que puges i qui ho pot veure.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Codi obert</h2>
+        <p>
+          BincioActivity és programari de codi obert. Ets lliure d'inspeccionar el codi,
+          allotjar la teva pròpia instància i contribuir amb millores.
+        </p>
+      </section>
+
+
+    </div>
+  </div>
+</Base>
diff --git a/site/src/pages/about/es/index.astro b/site/src/pages/about/es/index.astro
new file mode 100644
index 0000000..8633e72
--- /dev/null
+++ b/site/src/pages/about/es/index.astro
@@ -0,0 +1,113 @@
+---
+import Base from '../../../layouts/Base.astro';
+const baseUrl = import.meta.env.BASE_URL ?? '/';
+---
+<Base title="Acerca de — BincioActivity" public={true}>
+  <div class="max-w-2xl mx-auto">
+    <div class="flex items-baseline justify-between mb-1">
+      <h1 class="text-2xl font-bold text-white">Acerca de BincioActivity</h1>
+      <div class="flex gap-3 text-xs text-zinc-500">
+        <a href={`${baseUrl}about/`} class="hover:text-white transition-colors">EN</a>
+        <a href={`${baseUrl}about/it/`} class="hover:text-white transition-colors">IT</a>
+        <span class="text-zinc-300 font-medium">ES</span>
+        <a href={`${baseUrl}about/ca/`} class="hover:text-white transition-colors">CA</a>
+      </div>
+    </div>
+    <p class="text-sm text-zinc-500 mb-4">Seguimiento de actividades open-source y autoalojado</p>
+    <a
+      href="https://ko-fi.com/brutsalvadi"
+      target="_blank"
+      rel="noopener noreferrer"
+      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+      style="background:#FF5E5B; color:#fff;"
+    >
+      ☕ Apoya en Ko-fi
+    </a>
+
+    <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">¿Qué es esto?</h2>
+        <p>
+          BincioActivity es una plataforma gratuita y de código abierto para registrar tus
+          actividades al aire libre: ciclismo, running, senderismo y más. Está diseñada para
+          ser autoalojada: tú (o alguien de confianza) gestionas el servidor, y tus datos
+          permanecen bajo tu control.
+        </p>
+        <p class="mt-2">
+          Las actividades se almacenan en un formato JSON abierto llamado BAS (BincioActivity Schema),
+          diseñado para ser legible y portable. La plataforma no tiene analíticas ocultas,
+          no incluye publicidad y no comparte datos con terceros.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Tus datos en este servidor</h2>
+        <p>
+          Cuando subes un archivo FIT, GPX o TCX, el servidor lo convierte al formato BAS.
+          Por defecto, el archivo fuente original también se guarda en la carpeta
+          <code class="text-zinc-300 bg-zinc-800 px-1 rounded">originals/</code> de tu cuenta.
+          Puedes desactivar esta opción en el momento de la subida desmarcando
+          <em>"Conservar el archivo original en el servidor"</em>.
+        </p>
+        <p class="mt-2">
+          Se recomienda conservar los originales durante estas primeras etapas del proyecto:
+          si la cadena de procesamiento mejora (mejor suavizado de elevación, cálculo de velocidad,
+          detección de vueltas, etc.) podrás volver a importar tus archivos para aprovechar los
+          cambios. Si elegiste no conservar los originales, tendrías que subir los archivos
+          de nuevo manualmente.
+        </p>
+        <p class="mt-2">
+          Al sincronizar con Strava, los datos brutos obtenidos de la API de Strava también
+          pueden almacenarse localmente. Esto lo controla una configuración global del servidor
+          establecida por el operador.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Software en fase temprana</h2>
+        <p>
+          BincioActivity está en desarrollo activo. El formato de datos, la cadena de procesamiento
+          y la API del servidor pueden cambiar entre versiones. Los cambios incompatibles son
+          posibles, especialmente en esta etapa. Cuando ocurran, volver a importar los archivos
+          originales es la forma más segura de actualizar tus datos.
+        </p>
+        <p class="mt-2">
+          No existe ninguna garantía de disponibilidad, integridad de datos ni compatibilidad
+          futura para ninguna versión en particular. Usa este software bajo tu propia
+          responsabilidad y mantén tus propias copias de seguridad de los datos importantes.
+        </p>
+      </section>
+
+      <section class="border border-zinc-800 rounded-xl p-4 bg-zinc-900/50">
+        <h2 class="text-base font-semibold text-white mb-2">Descargo de responsabilidad</h2>
+        <p>
+          BincioActivity se proporciona <strong class="text-zinc-300">"tal cual"</strong>, sin
+          garantía de ningún tipo. Los autores y operadores del servidor no aceptan ninguna
+          responsabilidad por:
+        </p>
+        <ul class="list-disc list-inside mt-2 space-y-1">
+          <li>Pérdida, corrupción o acceso no autorizado a tus datos de actividad</li>
+          <li>Datos expuestos por una mala configuración del servidor o la infraestructura</li>
+          <li>Inexactitudes en las estadísticas calculadas (distancia, elevación, frecuencia cardíaca, etc.)</li>
+          <li>Cualquier consecuencia derivada de actuar sobre la información mostrada por esta aplicación</li>
+        </ul>
+        <p class="mt-3">
+          Eres responsable de proteger tu cuenta con una contraseña segura, de revisar qué
+          datos compartes y de realizar tus propias copias de seguridad. Los datos de GPS y
+          salud pueden ser sensibles — reflexiona sobre qué subes y quién puede verlo.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Código abierto</h2>
+        <p>
+          BincioActivity es software de código abierto. Eres libre de inspeccionar el código,
+          alojar tu propia instancia y contribuir con mejoras.
+        </p>
+      </section>
+
+
+    </div>
+  </div>
+</Base>
diff --git a/site/src/pages/about/index.astro b/site/src/pages/about/index.astro
new file mode 100644
index 0000000..883e64b
--- /dev/null
+++ b/site/src/pages/about/index.astro
@@ -0,0 +1,109 @@
+---
+import Base from '../../layouts/Base.astro';
+const baseUrl = import.meta.env.BASE_URL ?? '/';
+---
+<Base title="About — BincioActivity" public={true}>
+  <div class="max-w-2xl mx-auto">
+    <div class="flex items-baseline justify-between mb-1">
+      <h1 class="text-2xl font-bold text-white">About BincioActivity</h1>
+      <div class="flex gap-3 text-xs text-zinc-500">
+        <span class="text-zinc-300 font-medium">EN</span>
+        <a href={`${baseUrl}about/it/`} class="hover:text-white transition-colors">IT</a>
+        <a href={`${baseUrl}about/es/`} class="hover:text-white transition-colors">ES</a>
+        <a href={`${baseUrl}about/ca/`} class="hover:text-white transition-colors">CA</a>
+      </div>
+    </div>
+    <p class="text-sm text-zinc-500 mb-4">Open-source, self-hosted activity tracking</p>
+    <a
+      href="https://ko-fi.com/brutsalvadi"
+      target="_blank"
+      rel="noopener noreferrer"
+      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+      style="background:#FF5E5B; color:#fff;"
+    >
+      ☕ Support on Ko-fi
+    </a>
+
+    <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">What is this?</h2>
+        <p>
+          BincioActivity is a free, open-source platform for tracking your outdoor activities —
+          cycling, running, hiking, and more. It is designed to be self-hosted: you (or someone
+          you trust) run the server, and your data stays under your control.
+        </p>
+        <p class="mt-2">
+          Activities are stored in an open JSON format called BAS (BincioActivity Schema),
+          which is designed to be readable and portable. The platform has no hidden analytics,
+          no advertising, and no third-party data sharing.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Your data on this server</h2>
+        <p>
+          When you upload a FIT, GPX, or TCX file, the server converts it to BAS format.
+          By default the original source file is also kept in your account's
+          <code class="text-zinc-300 bg-zinc-800 px-1 rounded">originals/</code> folder.
+          You can opt out of this at upload time by unchecking <em>"Keep original file on server"</em>.
+        </p>
+        <p class="mt-2">
+          Keeping originals is recommended during these early stages of the project: if the
+          processing pipeline improves (better elevation smoothing, speed calculation, lap
+          detection, etc.) you can re-import your files to take advantage of the changes.
+          If you chose not to keep originals, you would need to upload the files again manually.
+        </p>
+        <p class="mt-2">
+          When syncing from Strava, the raw activity data fetched from the Strava API can
+          similarly be stored locally. This is controlled by an instance-wide setting
+          configured by the server operator.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Early-stage software</h2>
+        <p>
+          BincioActivity is under active development. The data format, processing pipeline,
+          and server API may change between versions. Breaking changes are possible, especially
+          at this stage. When they occur, re-importing your original files is the safest way
+          to bring your data up to date.
+        </p>
+        <p class="mt-2">
+          There is no guarantee of uptime, data integrity, or forward compatibility for
+          any particular version. Use this software at your own risk, and keep your own
+          backups of important data.
+        </p>
+      </section>
+
+      <section class="border border-zinc-800 rounded-xl p-4 bg-zinc-900/50">
+        <h2 class="text-base font-semibold text-white mb-2">Disclaimer</h2>
+        <p>
+          BincioActivity is provided <strong class="text-zinc-300">"as is"</strong>, without
+          warranty of any kind. The authors and server operators accept no responsibility for:
+        </p>
+        <ul class="list-disc list-inside mt-2 space-y-1">
+          <li>Loss, corruption, or unauthorised access to your activity data</li>
+          <li>Data exposed through misconfiguration of the server or infrastructure</li>
+          <li>Inaccuracies in computed statistics (distance, elevation, heart rate, etc.)</li>
+          <li>Any consequences of acting on information displayed by this application</li>
+        </ul>
+        <p class="mt-3">
+          You are responsible for securing your account with a strong password, reviewing
+          what data you share, and making your own backups. GPS and health data can be
+          sensitive — think carefully about what you upload and who can see it.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Open source</h2>
+        <p>
+          BincioActivity is open-source software. You are free to inspect the code,
+          self-host your own instance, and contribute improvements.
+        </p>
+      </section>
+
+
+    </div>
+  </div>
+</Base>
diff --git a/site/src/pages/about/it/index.astro b/site/src/pages/about/it/index.astro
new file mode 100644
index 0000000..3488fef
--- /dev/null
+++ b/site/src/pages/about/it/index.astro
@@ -0,0 +1,113 @@
+---
+import Base from '../../../layouts/Base.astro';
+const baseUrl = import.meta.env.BASE_URL ?? '/';
+---
+<Base title="Informazioni — BincioActivity" public={true}>
+  <div class="max-w-2xl mx-auto">
+    <div class="flex items-baseline justify-between mb-1">
+      <h1 class="text-2xl font-bold text-white">Informazioni su BincioActivity</h1>
+      <div class="flex gap-3 text-xs text-zinc-500">
+        <a href={`${baseUrl}about/`} class="hover:text-white transition-colors">EN</a>
+        <span class="text-zinc-300 font-medium">IT</span>
+        <a href={`${baseUrl}about/es/`} class="hover:text-white transition-colors">ES</a>
+        <a href={`${baseUrl}about/ca/`} class="hover:text-white transition-colors">CA</a>
+      </div>
+    </div>
+    <p class="text-sm text-zinc-500 mb-4">Tracciamento attività open-source e self-hosted</p>
+    <a
+      href="https://ko-fi.com/brutsalvadi"
+      target="_blank"
+      rel="noopener noreferrer"
+      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+      style="background:#FF5E5B; color:#fff;"
+    >
+      ☕ Supporta su Ko-fi
+    </a>
+
+    <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Cos'è?</h2>
+        <p>
+          BincioActivity è una piattaforma gratuita e open-source per tracciare le tue attività
+          all'aperto — ciclismo, corsa, escursionismo e altro. È progettata per essere
+          self-hosted: tu (o qualcuno di cui ti fidi) gestisci il server, e i tuoi dati
+          rimangono sotto il tuo controllo.
+        </p>
+        <p class="mt-2">
+          Le attività vengono salvate in un formato JSON aperto chiamato BAS (BincioActivity Schema),
+          progettato per essere leggibile e portabile. La piattaforma non ha analytics nascosti,
+          nessuna pubblicità e nessuna condivisione di dati con terze parti.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">I tuoi dati su questo server</h2>
+        <p>
+          Quando carichi un file FIT, GPX o TCX, il server lo converte nel formato BAS.
+          Di default, il file sorgente originale viene conservato nella cartella
+          <code class="text-zinc-300 bg-zinc-800 px-1 rounded">originals/</code> del tuo account.
+          Puoi disattivare questa opzione al momento del caricamento deselezionando
+          <em>"Mantieni il file originale sul server"</em>.
+        </p>
+        <p class="mt-2">
+          Conservare i file originali è consigliato in questa fase iniziale del progetto: se la
+          pipeline di elaborazione migliorasse (migliore smoothing del dislivello, calcolo della
+          velocità, rilevamento dei giri, ecc.) potrai reimportare i file per beneficiare delle
+          modifiche. Se hai scelto di non conservare gli originali, dovrai ricaricare i file
+          manualmente.
+        </p>
+        <p class="mt-2">
+          Durante la sincronizzazione con Strava, i dati grezzi dell'attività ottenuti dall'API
+          Strava possono essere conservati localmente. Questo è controllato da un'impostazione
+          a livello di istanza configurata dall'operatore del server.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Software in fase iniziale</h2>
+        <p>
+          BincioActivity è in sviluppo attivo. Il formato dei dati, la pipeline di elaborazione
+          e le API del server potrebbero cambiare tra una versione e l'altra. Modifiche
+          incompatibili sono possibili, soprattutto in questa fase. Quando si verificano,
+          reimportare i file originali è il modo più sicuro per aggiornare i propri dati.
+        </p>
+        <p class="mt-2">
+          Non vi è alcuna garanzia di uptime, integrità dei dati o compatibilità futura per
+          nessuna versione specifica. Usa questo software a tuo rischio e pericolo, e conserva
+          sempre i tuoi backup dei dati importanti.
+        </p>
+      </section>
+
+      <section class="border border-zinc-800 rounded-xl p-4 bg-zinc-900/50">
+        <h2 class="text-base font-semibold text-white mb-2">Limitazione di responsabilità</h2>
+        <p>
+          BincioActivity è fornito <strong class="text-zinc-300">"così com'è"</strong>, senza
+          garanzie di alcun tipo. Gli autori e gli operatori del server non si assumono alcuna
+          responsabilità per:
+        </p>
+        <ul class="list-disc list-inside mt-2 space-y-1">
+          <li>Perdita, corruzione o accesso non autorizzato ai tuoi dati di attività</li>
+          <li>Dati esposti a causa di una configurazione errata del server o dell'infrastruttura</li>
+          <li>Imprecisioni nelle statistiche calcolate (distanza, dislivello, frequenza cardiaca, ecc.)</li>
+          <li>Qualsiasi conseguenza derivante dall'utilizzo delle informazioni visualizzate dall'applicazione</li>
+        </ul>
+        <p class="mt-3">
+          Sei responsabile di proteggere il tuo account con una password robusta, di verificare
+          quali dati condividi e di eseguire i tuoi backup. I dati GPS e sanitari possono essere
+          sensibili — rifletti attentamente su cosa carichi e su chi può vederlo.
+        </p>
+      </section>
+
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Open source</h2>
+        <p>
+          BincioActivity è software open-source. Sei libero di esaminare il codice,
+          ospitare la tua istanza e contribuire con miglioramenti.
+        </p>
+      </section>
+
+
+    </div>
+  </div>
+</Base>

From 6b2d31a44af071e9784a7e1526675cb33bb6ca1f Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:06:00 +0200
Subject: [PATCH 005/124] test server imports

---
 tests/test_server_imports.py | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 tests/test_server_imports.py

diff --git a/tests/test_server_imports.py b/tests/test_server_imports.py
new file mode 100644
index 0000000..524e52b
--- /dev/null
+++ b/tests/test_server_imports.py
@@ -0,0 +1,26 @@
+"""Smoke tests: import both FastAPI apps so missing names and bad syntax fail fast."""
+
+
+def test_serve_server_importable():
+    import bincio.serve.server  # noqa: F401
+
+
+def test_edit_server_importable():
+    import bincio.edit.server  # noqa: F401
+
+
+def test_serve_app_has_routes():
+    from bincio.serve.server import app
+    paths = {r.path for r in app.routes}
+    assert "/api/me" in paths
+    assert "/api/upload" in paths
+    assert "/api/strava/sync" in paths
+    assert "/api/register" in paths
+
+
+def test_edit_app_has_routes():
+    from bincio.edit.server import app
+    paths = {r.path for r in app.routes}
+    assert "/api/upload" in paths
+    assert "/api/activity/{activity_id}" in paths
+    assert "/api/strava/sync" in paths

From 053da10ab9a02be7ce4a475d0cd3265b0cc64077 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:21:31 +0200
Subject: [PATCH 006/124] some basic statistics and invite tree, plus watch new
 data

---
 CHANGELOG.md                        | 135 ++++++++++++++++++++++++++++
 CLAUDE.md                           |  28 +++++-
 bincio/dev.py                       |  60 +++++++++++++
 bincio/serve/db.py                  |  27 ++++++
 bincio/serve/server.py              |  22 +++++
 site/src/pages/about/ca/index.astro |  94 ++++++++++++++++++-
 site/src/pages/about/es/index.astro |  94 ++++++++++++++++++-
 site/src/pages/about/index.astro    | 106 +++++++++++++++++++++-
 site/src/pages/about/it/index.astro |  94 ++++++++++++++++++-
 9 files changed, 655 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b6ffc0..16ce436 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,140 @@
 # Changelog
 
+## [Unreleased] — 2026-04-10
+
+### New feature — Per-instance user limit
+
+Operators can now cap the maximum number of registered users on an instance.
+
+- **`bincio/serve/db.py`**
+  - New `settings` table (key/value, upsert-safe via `ON CONFLICT DO UPDATE`).
+  - `count_users(db)` — returns total number of rows in `users`.
+  - `get_setting(db, key)` / `set_setting(db, key, value)` — generic persistent settings store.
+
+- **`bincio/serve/server.py`** — `POST /api/register` now reads the `max_users` setting; if
+  set to N > 0 and the current user count is already ≥ N, registration is rejected with
+  HTTP 403 and a clear message. Imports `count_users` and `get_setting`.
+
+- **`bincio/serve/init_cmd.py`** — new `--max-users N` flag (default 0 = unlimited). Saves
+  the value to the `settings` table via `set_setting`. Printed in the init summary.
+
+- **`bincio/serve/cli.py`** — new `--max-users N` flag on `bincio serve`. Writes to the DB
+  on startup (lets operators change the limit without re-running `bincio init`). Startup
+  banner now shows `Users: max N` or `Users: unlimited`.
+
+---
+
+### New feature — Original file storage option (upload & Strava sync)
+
+Users can now choose whether to keep their source files on the server after processing.
+Keeping originals allows reprocessing if the pipeline improves; discarding them is the
+privacy-conscious choice. Previously, uploaded files were always deleted after processing.
+
+- **`bincio/serve/db.py`** — `store_originals` is stored as a settings key. `bincio init`
+  writes `store_originals=true` on first run.
+
+- **`bincio/serve/server.py`** — `POST /api/upload` accepts a new `store_original: bool`
+  form field. On success, if true, the staged file is moved to `{user_dir}/originals/`
+  instead of being deleted. `GET /api/me` now includes `store_originals_default: bool`
+  (read from the instance setting) so the frontend can pre-populate the checkbox.
+  `POST /api/strava/sync` checks the `store_originals` instance setting; if true, creates
+  `{user_dir}/originals/strava/` and passes it as `originals_dir` to `run_strava_sync`.
+
+- **`bincio/edit/server.py`** — `POST /api/upload` gains the same `store_original` form
+  field with identical behaviour (originals stored in `{data_dir}/originals/`).
+
+- **`bincio/edit/ops.py`** — `run_strava_sync` gains an `originals_dir: Optional[Path]`
+  parameter, passed through to `ingest.strava_sync`.
+
+- **`bincio/extract/ingest.py`** — `strava_sync` gains `originals_dir: Optional[Path]`.
+  When set, saves `{"meta": …, "streams": …}` as JSON to
+  `originals_dir/{activity_id}.json` before processing each activity. This preserves the
+  raw Strava API response for future reprocessing without needing another API call.
+
+- **`bincio/serve/init_cmd.py`** — sets `store_originals=true` in the settings table on
+  first init (skipped if the key already exists, so re-running init doesn't override
+  an operator's choice).
+
+- **`site/src/layouts/Base.astro`** — upload modal file view gains a "Keep original file on
+  server" checkbox. Defaults to unchecked; pre-checked after login if the instance setting
+  is `true` (read from `store_originals_default` in the `/api/me` response). The checkbox
+  value is sent as the `store_original` form field.
+
+- **`bincio/serve/server.py`** and **`bincio/edit/server.py`** — `Form` added to the
+  FastAPI imports (was missing, causing a startup `NameError`).
+
+---
+
+### New feature — About page (multilingual)
+
+New static `/about/` page explaining the project, with a Ko-fi donation button, data
+storage disclaimer, and early-software caveats. Available in four languages.
+
+- **`site/src/pages/about/index.astro`** — English
+- **`site/src/pages/about/it/index.astro`** — Italian
+- **`site/src/pages/about/es/index.astro`** — Spanish
+- **`site/src/pages/about/ca/index.astro`** — Catalan
+
+All four pages share the same structure:
+- Language switcher (EN / IT / ES / CA) in the top-right corner.
+- Ko-fi donation button (`https://ko-fi.com/brutsalvadi`) at the top.
+- **Community stats section** — fetches `GET /api/stats` on load; shown only in
+  multi-user mode (silently hidden in single-user mode where the endpoint doesn't exist).
+  Displays total member count and an indented invitation tree: each row shows display name,
+  `@handle`, membership duration (days / months), and either "founder" or "invited by @X".
+  UI labels are fully translated per language.
+- Sections: What is this · Your data on this server · Early-stage software · Disclaimer ·
+  Open source.
+- All pages use `public={true}` so they bypass the instance auth wall.
+
+"About" link added to the main nav bar (visible when not on a public page).
+The upload modal's "Keep original file" checkbox links to `/about/` for context.
+
+---
+
+### New feature — Community stats API
+
+- **`bincio/serve/db.py`** — `get_member_tree(db)` joins `users` with `invites` (on
+  `used_by`) to reconstruct the invitation graph. Returns a list ordered oldest-first with
+  `handle`, `display_name`, `created_at`, and `invited_by` (inviter handle or `None` for
+  the founder/admin).
+
+- **`bincio/serve/server.py`** — new public `GET /api/stats` endpoint (no auth required).
+  Returns `user_count` and a `members` array where each entry includes `handle`,
+  `display_name`, `member_since` (Unix timestamp), `member_for_days`, and `invited_by`.
+
+---
+
+### Fix — `bincio dev` now watches data directory for live re-merge
+
+Previously, editing a sidecar or running `bincio extract` while `bincio dev` was running
+required a manual restart to pick up changes. Now a background watcher thread re-merges
+automatically.
+
+- **`bincio/dev.py`** — new `_watch_data(data)` function, started as a daemon thread
+  alongside `bincio serve`. Uses `watchfiles` (already bundled with `uvicorn[standard]`,
+  no new dependency) for OS-level file event watching — no polling.
+  - Watches every `{user_dir}/edits/` and `{user_dir}/activities/` directory.
+  - On any change, identifies which users were affected and calls `merge_all(user_dir)`
+    for each.
+  - Skips churn files written by merge itself (`.timeseries.json`, `.geojson`,
+    `index.json`) to avoid re-triggering.
+  - Prints `↺ {handle}: merged` on each successful re-merge; warns on failure.
+  - Astro dev picks up the result automatically since `public/data` is a symlink into
+    the live data directory.
+
+---
+
+### Tests
+
+- **`tests/test_server_imports.py`** (new) — smoke tests that import `bincio.serve.server`
+  and `bincio.edit.server` at module level, catching `NameError`, missing imports, and
+  syntax errors before they reach the runtime. Also asserts that key routes (`/api/me`,
+  `/api/upload`, `/api/strava/sync`, `/api/register`, `/api/activity/{activity_id}`) are
+  registered on each app.
+
+---
+
 ## [Unreleased] — 2026-04-06
 
 ### New feature — Strava sync from UI
diff --git a/CLAUDE.md b/CLAUDE.md
index feb1c2b..f8249e0 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -233,9 +233,31 @@ Key facts:
 - Write API in `bincio serve` delegates to `bincio.edit.server._apply_sidecar_edit`; the
   Strava sync delegates to `bincio.edit.server.strava_sync` with a temporary data_dir swap
 
+## Instance settings (stored in `instance.db` `settings` table)
+
+| Key | Default | Set by | Description |
+|-----|---------|--------|-------------|
+| `max_users` | — (unlimited) | `bincio init --max-users N` or `bincio serve --max-users N` | Cap on registered users; 0 or absent = unlimited |
+| `store_originals` | `true` | `bincio init` (first run only) | Whether uploaded source files and raw Strava API data are kept in `{user_dir}/originals/` |
+
+`get_setting` / `set_setting` in `db.py` are the read/write accessors. Any new instance-wide flag should use this table rather than a new column.
+
+## Original file storage
+
+When a user uploads a FIT/GPX/TCX file the server may keep the source in `{user_dir}/originals/{filename}` rather than always deleting it after extraction. The per-upload `store_original` form field controls the behaviour for a single upload (sent by the UI checkbox). The instance-level `store_originals` setting provides the default that pre-populates the checkbox (read from `GET /api/me` → `store_originals_default`).
+
+For Strava sync, `store_originals=true` causes `POST /api/strava/sync` to save `{"meta":…,"streams":…}` JSON per activity to `{user_dir}/originals/strava/{activity_id}.json`.
+
+## About pages
+
+Static public pages at `/about/` (EN), `/about/it/` (IT), `/about/es/` (ES), `/about/ca/` (CA). All use `public={true}` to bypass the auth wall. Each page:
+- Shows a Ko-fi donation button at the top.
+- Fetches `GET /api/stats` on load and renders a **community/invitation tree** (member count, each user's display name, membership duration, and who invited them). Hidden silently in single-user mode.
+- Contains project description, data storage explanation, early-software caveat, and liability disclaimer.
+
 ## Known issues / next steps
 
-- `bincio render --watch` mode not yet implemented
+- `bincio render --watch` mode not yet implemented as a standalone command, but `bincio dev` now watches the data directory via `watchfiles` (bundled with uvicorn) and re-runs `merge_all` automatically when sidecars or activity files change
 - Activity IDs in older test data may use `+0000` format (pre-fix); re-run extract to get `Z` format
 - Some activities appear with both untitled and titled IDs (near-dedup timing race)
 - Remote federation (remote shard URLs in root manifest) is parsed but not yet displayed with attribution in the UI
@@ -250,6 +272,10 @@ Key facts:
 - [ ] Karoo/Garmin Connect importers beyond Strava
 - [ ] `bincio render --watch` incremental rebuild on sidecar/data changes
 - [ ] Highlight badge in activity feed cards
+- [x] Per-instance user limit (`max_users` setting, enforced at registration)
+- [x] Original file storage option (per-upload checkbox + `store_originals` instance setting)
+- [x] About page — multilingual (EN/IT/ES/CA), Ko-fi button, community invitation tree
+- [x] `GET /api/stats` — public endpoint with member count and invitation tree
 - [x] `bincio.render.merge` — sidecar parser, `_merged/` output, private filter, highlight sort
 - [x] `bincio edit` FastAPI write API (GET/POST activity, image upload/delete, triggers merge)
 - [x] `EditDrawer.svelte` — slide-in edit UI in the Astro site
diff --git a/bincio/dev.py b/bincio/dev.py
index 24b5292..b40d441 100644
--- a/bincio/dev.py
+++ b/bincio/dev.py
@@ -86,6 +86,62 @@ def _start_serve(data: Path, api_port: int, site: Path) -> None:
     server.run()
 
 
+def _watch_data(data: Path) -> None:
+    """Watch the data directory for sidecar/activity changes and re-merge.
+
+    Monitors every user's edits/ and activities/ subdirectories. When any file
+    changes (new activity extracted, sidecar saved), re-runs merge_all for that
+    user so the _merged/ symlink tree stays current. Astro dev picks up the
+    result automatically because public/data is a symlink into the live data dir.
+
+    Uses watchfiles (bundled with uvicorn[standard]) for efficient OS-level
+    file watching — no polling.
+    """
+    from watchfiles import watch, Change
+
+    watch_paths = []
+    for user_dir in _user_dirs(data):
+        for sub in ("edits", "activities"):
+            p = user_dir / sub
+            p.mkdir(exist_ok=True)
+            watch_paths.append(p)
+
+    if not watch_paths:
+        return
+
+    console.print(f"  [dim]Watching {len(watch_paths)} director{'y' if len(watch_paths) == 1 else 'ies'} for changes…[/dim]")
+
+    # Build a map from path prefix → user dir for targeted merge
+    prefix_to_user: dict[str, Path] = {}
+    for user_dir in _user_dirs(data):
+        for sub in ("edits", "activities"):
+            prefix_to_user[str(user_dir / sub)] = user_dir
+
+    for changes in watch(*watch_paths, yield_on_timeout=False):
+        # Find which users were affected
+        affected: set[Path] = set()
+        for change_type, path in changes:
+            # Skip timeseries / geojson / index churn written by merge itself
+            if any(path.endswith(s) for s in (".timeseries.json", ".geojson", "index.json")):
+                continue
+            for prefix, user_dir in prefix_to_user.items():
+                if path.startswith(prefix):
+                    affected.add(user_dir)
+                    break
+
+        if not affected:
+            continue
+
+        for user_dir in affected:
+            handle = user_dir.name
+            try:
+                from bincio.render.merge import merge_all
+                merge_all(user_dir)
+                console.print(f"  [dim]↺  {handle}: merged[/dim]")
+            except Exception as exc:
+                console.print(f"  [yellow]⚠  {handle}: merge failed — {exc}[/yellow]")
+
+
 @click.command("dev")
 @click.option("--data-dir", default=None, help="BAS data directory (must contain instance.db)")
 @click.option("--site-dir", default=None, help="Astro project directory (default: ./site)")
@@ -144,6 +200,10 @@ def dev(
         t = threading.Thread(target=_start_serve, args=(data, api_port, site), daemon=True)
         t.start()
 
+    # Watch data dir for sidecar/activity changes → auto-merge
+    watcher = threading.Thread(target=_watch_data, args=(data,), daemon=True)
+    watcher.start()
+
     # Build env for astro dev
     env = {
         **os.environ,
diff --git a/bincio/serve/db.py b/bincio/serve/db.py
index d939ad4..4485a01 100644
--- a/bincio/serve/db.py
+++ b/bincio/serve/db.py
@@ -154,6 +154,33 @@ def delete_user(db: sqlite3.Connection, handle: str) -> None:
     db.commit()
 
 
+def get_member_tree(db: sqlite3.Connection) -> list[dict]:
+    """Return users with their inviter handle and join timestamp.
+
+    Each entry: {handle, display_name, created_at, invited_by (handle or None)}.
+    Ordered oldest-first so callers can build the tree top-down.
+    """
+    users = {r["handle"]: r for r in db.execute(
+        "SELECT handle, display_name, created_at FROM users ORDER BY created_at"
+    ).fetchall()}
+    # Map invitee → inviter from the used invites
+    invited_by: dict[str, str] = {}
+    for row in db.execute(
+        "SELECT created_by, used_by FROM invites WHERE used_by IS NOT NULL"
+    ).fetchall():
+        invited_by[row["used_by"]] = row["created_by"]
+
+    return [
+        {
+            "handle": r["handle"],
+            "display_name": r["display_name"],
+            "created_at": r["created_at"],
+            "invited_by": invited_by.get(r["handle"]),
+        }
+        for r in users.values()
+    ]
+
+
 def count_users(db: sqlite3.Connection) -> int:
     """Return the total number of registered users."""
     row = db.execute("SELECT COUNT(*) FROM users").fetchone()
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index d6f3f95..0b07c71 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -29,6 +29,7 @@ from bincio.serve.db import (
     create_user,
     delete_session,
     get_invite,
+    get_member_tree,
     get_session,
     get_setting,
     get_user,
@@ -173,6 +174,27 @@ async def me(bincio_session: Optional[str] = Cookie(default=None)) -> JSONRespon
     })
 
 
+@app.get("/api/stats")
+async def stats() -> JSONResponse:
+    """Public endpoint: member count, join dates, and invitation tree."""
+    import time as _time
+    now = int(_time.time())
+    members = get_member_tree(_get_db())
+    return JSONResponse({
+        "user_count": len(members),
+        "members": [
+            {
+                "handle": m["handle"],
+                "display_name": m["display_name"],
+                "member_since": m["created_at"],
+                "member_for_days": (now - m["created_at"]) // 86400,
+                "invited_by": m["invited_by"],
+            }
+            for m in members
+        ],
+    })
+
+
 @app.post("/api/auth/login")
 async def login(request: Request) -> JSONResponse:
     ip = request.client.host if request.client else "unknown"
diff --git a/site/src/pages/about/ca/index.astro b/site/src/pages/about/ca/index.astro
index 5452a76..3d29722 100644
--- a/site/src/pages/about/ca/index.astro
+++ b/site/src/pages/about/ca/index.astro
@@ -1,6 +1,15 @@
 ---
 import Base from '../../../layouts/Base.astro';
 const baseUrl = import.meta.env.BASE_URL ?? '/';
+const labels = {
+  community:   'Comunitat',
+  members:     'membre',
+  members_pl:  'membres',
+  day:         'dia',
+  days:        'dies',
+  invited_by:  'convidat per',
+  founder:     'fundador',
+};
 ---
 <Base title="Sobre el projecte — BincioActivity" public={true}>
   <div class="max-w-2xl mx-auto">
@@ -26,6 +35,12 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
+      <section id="stats-section" style="display:none">
+        <h2 class="text-base font-semibold text-white mb-3">Comunitat</h2>
+        <p id="stats-summary" class="text-zinc-500 text-xs mb-4"></p>
+        <div id="stats-tree" class="text-sm"></div>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">Què és això?</h2>
         <p>
@@ -108,7 +123,84 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
         </p>
       </section>
 
-
     </div>
   </div>
 </Base>
+
+<script define:vars={{ labels }}>
+(async () => {
+  let data;
+  try {
+    const r = await fetch('/api/stats');
+    if (!r.ok) return;
+    data = await r.json();
+  } catch { return; }
+
+  if (!data.user_count) return;
+
+  const section  = document.getElementById('stats-section');
+  const summary  = document.getElementById('stats-summary');
+  const treeEl   = document.getElementById('stats-tree');
+
+  const n = data.user_count;
+  summary.textContent = `${n} ${n === 1 ? labels.members : labels.members_pl}`;
+  section.style.display = '';
+
+  const byHandle = {};
+  for (const m of data.members) byHandle[m.handle] = m;
+  const children = {};
+  const roots = [];
+  for (const m of data.members) {
+    if (m.invited_by && byHandle[m.invited_by]) {
+      (children[m.invited_by] ??= []).push(m.handle);
+    } else {
+      roots.push(m.handle);
+    }
+  }
+
+  function formatDuration(days) {
+    if (days < 1)   return `< 1 ${labels.day}`;
+    if (days === 1) return `1 ${labels.day}`;
+    if (days < 30)  return `${days} ${labels.days}`;
+    const months = Math.floor(days / 30);
+    return months === 1 ? `1 mo` : `${months} mo`;
+  }
+
+  function renderNode(handle, depth) {
+    const m = byHandle[handle];
+    const indent = depth * 20;
+    const isRoot = !m.invited_by;
+    const sub = isRoot ? labels.founder : `${labels.invited_by} @${m.invited_by}`;
+
+    const row = document.createElement('div');
+    row.className = 'flex items-baseline gap-2 py-1.5 border-b border-zinc-800/50';
+    row.style.paddingLeft = `${indent}px`;
+    if (depth > 0) {
+      const connector = document.createElement('span');
+      connector.className = 'text-zinc-700 shrink-0';
+      connector.textContent = '└';
+      row.appendChild(connector);
+    }
+    const name = document.createElement('span');
+    name.className = 'text-white font-medium';
+    name.textContent = m.display_name || `@${handle}`;
+    row.appendChild(name);
+    const handle_el = document.createElement('span');
+    handle_el.className = 'text-zinc-600 text-xs';
+    handle_el.textContent = `@${handle}`;
+    row.appendChild(handle_el);
+    const spacer = document.createElement('span');
+    spacer.className = 'flex-1';
+    row.appendChild(spacer);
+    const meta = document.createElement('span');
+    meta.className = 'text-zinc-600 text-xs text-right shrink-0';
+    meta.innerHTML = `${formatDuration(m.member_for_days)}<br><span class="text-zinc-700">${sub}</span>`;
+    row.appendChild(meta);
+    treeEl.appendChild(row);
+
+    for (const child of (children[handle] ?? [])) renderNode(child, depth + 1);
+  }
+
+  for (const root of roots) renderNode(root, 0);
+})();
+</script>
diff --git a/site/src/pages/about/es/index.astro b/site/src/pages/about/es/index.astro
index 8633e72..ea950b6 100644
--- a/site/src/pages/about/es/index.astro
+++ b/site/src/pages/about/es/index.astro
@@ -1,6 +1,15 @@
 ---
 import Base from '../../../layouts/Base.astro';
 const baseUrl = import.meta.env.BASE_URL ?? '/';
+const labels = {
+  community:   'Comunidad',
+  members:     'miembro',
+  members_pl:  'miembros',
+  day:         'día',
+  days:        'días',
+  invited_by:  'invitado por',
+  founder:     'fundador',
+};
 ---
 <Base title="Acerca de — BincioActivity" public={true}>
   <div class="max-w-2xl mx-auto">
@@ -26,6 +35,12 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
+      <section id="stats-section" style="display:none">
+        <h2 class="text-base font-semibold text-white mb-3">Comunidad</h2>
+        <p id="stats-summary" class="text-zinc-500 text-xs mb-4"></p>
+        <div id="stats-tree" class="text-sm"></div>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">¿Qué es esto?</h2>
         <p>
@@ -107,7 +122,84 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
         </p>
       </section>
 
-
     </div>
   </div>
 </Base>
+
+<script define:vars={{ labels }}>
+(async () => {
+  let data;
+  try {
+    const r = await fetch('/api/stats');
+    if (!r.ok) return;
+    data = await r.json();
+  } catch { return; }
+
+  if (!data.user_count) return;
+
+  const section  = document.getElementById('stats-section');
+  const summary  = document.getElementById('stats-summary');
+  const treeEl   = document.getElementById('stats-tree');
+
+  const n = data.user_count;
+  summary.textContent = `${n} ${n === 1 ? labels.members : labels.members_pl}`;
+  section.style.display = '';
+
+  const byHandle = {};
+  for (const m of data.members) byHandle[m.handle] = m;
+  const children = {};
+  const roots = [];
+  for (const m of data.members) {
+    if (m.invited_by && byHandle[m.invited_by]) {
+      (children[m.invited_by] ??= []).push(m.handle);
+    } else {
+      roots.push(m.handle);
+    }
+  }
+
+  function formatDuration(days) {
+    if (days < 1)   return `< 1 ${labels.day}`;
+    if (days === 1) return `1 ${labels.day}`;
+    if (days < 30)  return `${days} ${labels.days}`;
+    const months = Math.floor(days / 30);
+    return months === 1 ? `1 mo` : `${months} mo`;
+  }
+
+  function renderNode(handle, depth) {
+    const m = byHandle[handle];
+    const indent = depth * 20;
+    const isRoot = !m.invited_by;
+    const sub = isRoot ? labels.founder : `${labels.invited_by} @${m.invited_by}`;
+
+    const row = document.createElement('div');
+    row.className = 'flex items-baseline gap-2 py-1.5 border-b border-zinc-800/50';
+    row.style.paddingLeft = `${indent}px`;
+    if (depth > 0) {
+      const connector = document.createElement('span');
+      connector.className = 'text-zinc-700 shrink-0';
+      connector.textContent = '└';
+      row.appendChild(connector);
+    }
+    const name = document.createElement('span');
+    name.className = 'text-white font-medium';
+    name.textContent = m.display_name || `@${handle}`;
+    row.appendChild(name);
+    const handle_el = document.createElement('span');
+    handle_el.className = 'text-zinc-600 text-xs';
+    handle_el.textContent = `@${handle}`;
+    row.appendChild(handle_el);
+    const spacer = document.createElement('span');
+    spacer.className = 'flex-1';
+    row.appendChild(spacer);
+    const meta = document.createElement('span');
+    meta.className = 'text-zinc-600 text-xs text-right shrink-0';
+    meta.innerHTML = `${formatDuration(m.member_for_days)}<br><span class="text-zinc-700">${sub}</span>`;
+    row.appendChild(meta);
+    treeEl.appendChild(row);
+
+    for (const child of (children[handle] ?? [])) renderNode(child, depth + 1);
+  }
+
+  for (const root of roots) renderNode(root, 0);
+})();
+</script>
diff --git a/site/src/pages/about/index.astro b/site/src/pages/about/index.astro
index 883e64b..c3aa740 100644
--- a/site/src/pages/about/index.astro
+++ b/site/src/pages/about/index.astro
@@ -1,6 +1,16 @@
 ---
 import Base from '../../layouts/Base.astro';
 const baseUrl = import.meta.env.BASE_URL ?? '/';
+const labels = {
+  community:   'Community',
+  members:     'member',
+  members_pl:  'members',
+  day:         'day',
+  days:        'days',
+  invited_by:  'invited by',
+  founder:     'founder',
+  loading:     'Loading…',
+};
 ---
 <Base title="About — BincioActivity" public={true}>
   <div class="max-w-2xl mx-auto">
@@ -26,6 +36,13 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
+      <!-- Community stats (shown only in multi-user mode) -->
+      <section id="stats-section" style="display:none">
+        <h2 class="text-base font-semibold text-white mb-3">Community</h2>
+        <p id="stats-summary" class="text-zinc-500 text-xs mb-4"></p>
+        <div id="stats-tree" class="text-sm"></div>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">What is this?</h2>
         <p>
@@ -103,7 +120,94 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
         </p>
       </section>
 
-
     </div>
   </div>
 </Base>
+
+<script define:vars={{ labels }}>
+(async () => {
+  let data;
+  try {
+    const r = await fetch('/api/stats');
+    if (!r.ok) return;          // single-user mode — no stats endpoint
+    data = await r.json();
+  } catch { return; }
+
+  if (!data.user_count) return;
+
+  const section  = document.getElementById('stats-section');
+  const summary  = document.getElementById('stats-summary');
+  const treeEl   = document.getElementById('stats-tree');
+
+  const n = data.user_count;
+  summary.textContent = `${n} ${n === 1 ? labels.members : labels.members_pl}`;
+  section.style.display = '';
+
+  // Build adjacency map: handle → [children]
+  const byHandle = {};
+  for (const m of data.members) byHandle[m.handle] = m;
+  const children = {};
+  const roots = [];
+  for (const m of data.members) {
+    if (m.invited_by && byHandle[m.invited_by]) {
+      (children[m.invited_by] ??= []).push(m.handle);
+    } else {
+      roots.push(m.handle);
+    }
+  }
+
+  function formatDuration(days) {
+    if (days < 1)   return `< 1 ${labels.day}`;
+    if (days === 1) return `1 ${labels.day}`;
+    if (days < 30)  return `${days} ${labels.days}`;
+    const months = Math.floor(days / 30);
+    return months === 1 ? `1 mo` : `${months} mo`;
+  }
+
+  function renderNode(handle, depth) {
+    const m = byHandle[handle];
+    const indent = depth * 20;
+    const isRoot = !m.invited_by;
+    const sub = isRoot
+      ? labels.founder
+      : `${labels.invited_by} @${m.invited_by}`;
+
+    const row = document.createElement('div');
+    row.className = 'flex items-baseline gap-2 py-1.5 border-b border-zinc-800/50';
+    row.style.paddingLeft = `${indent}px`;
+    if (depth > 0) {
+      const connector = document.createElement('span');
+      connector.className = 'text-zinc-700 shrink-0';
+      connector.textContent = '└';
+      row.appendChild(connector);
+    }
+
+    const name = document.createElement('span');
+    name.className = 'text-white font-medium';
+    name.textContent = m.display_name || `@${handle}`;
+    row.appendChild(name);
+
+    const handle_el = document.createElement('span');
+    handle_el.className = 'text-zinc-600 text-xs';
+    handle_el.textContent = `@${handle}`;
+    row.appendChild(handle_el);
+
+    const spacer = document.createElement('span');
+    spacer.className = 'flex-1';
+    row.appendChild(spacer);
+
+    const meta = document.createElement('span');
+    meta.className = 'text-zinc-600 text-xs text-right shrink-0';
+    meta.innerHTML = `${formatDuration(m.member_for_days)}<br><span class="text-zinc-700">${sub}</span>`;
+    row.appendChild(meta);
+
+    treeEl.appendChild(row);
+
+    for (const child of (children[handle] ?? [])) {
+      renderNode(child, depth + 1);
+    }
+  }
+
+  for (const root of roots) renderNode(root, 0);
+})();
+</script>
diff --git a/site/src/pages/about/it/index.astro b/site/src/pages/about/it/index.astro
index 3488fef..783318b 100644
--- a/site/src/pages/about/it/index.astro
+++ b/site/src/pages/about/it/index.astro
@@ -1,6 +1,15 @@
 ---
 import Base from '../../../layouts/Base.astro';
 const baseUrl = import.meta.env.BASE_URL ?? '/';
+const labels = {
+  community:   'Comunità',
+  members:     'membro',
+  members_pl:  'membri',
+  day:         'giorno',
+  days:        'giorni',
+  invited_by:  'invitato da',
+  founder:     'fondatore',
+};
 ---
 <Base title="Informazioni — BincioActivity" public={true}>
   <div class="max-w-2xl mx-auto">
@@ -26,6 +35,12 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
+      <section id="stats-section" style="display:none">
+        <h2 class="text-base font-semibold text-white mb-3">Comunità</h2>
+        <p id="stats-summary" class="text-zinc-500 text-xs mb-4"></p>
+        <div id="stats-tree" class="text-sm"></div>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">Cos'è?</h2>
         <p>
@@ -107,7 +122,84 @@ const baseUrl = import.meta.env.BASE_URL ?? '/';
         </p>
       </section>
 
-
     </div>
   </div>
 </Base>
+
+<script define:vars={{ labels }}>
+(async () => {
+  let data;
+  try {
+    const r = await fetch('/api/stats');
+    if (!r.ok) return;
+    data = await r.json();
+  } catch { return; }
+
+  if (!data.user_count) return;
+
+  const section  = document.getElementById('stats-section');
+  const summary  = document.getElementById('stats-summary');
+  const treeEl   = document.getElementById('stats-tree');
+
+  const n = data.user_count;
+  summary.textContent = `${n} ${n === 1 ? labels.members : labels.members_pl}`;
+  section.style.display = '';
+
+  const byHandle = {};
+  for (const m of data.members) byHandle[m.handle] = m;
+  const children = {};
+  const roots = [];
+  for (const m of data.members) {
+    if (m.invited_by && byHandle[m.invited_by]) {
+      (children[m.invited_by] ??= []).push(m.handle);
+    } else {
+      roots.push(m.handle);
+    }
+  }
+
+  function formatDuration(days) {
+    if (days < 1)   return `< 1 ${labels.day}`;
+    if (days === 1) return `1 ${labels.day}`;
+    if (days < 30)  return `${days} ${labels.days}`;
+    const months = Math.floor(days / 30);
+    return months === 1 ? `1 mo` : `${months} mo`;
+  }
+
+  function renderNode(handle, depth) {
+    const m = byHandle[handle];
+    const indent = depth * 20;
+    const isRoot = !m.invited_by;
+    const sub = isRoot ? labels.founder : `${labels.invited_by} @${m.invited_by}`;
+
+    const row = document.createElement('div');
+    row.className = 'flex items-baseline gap-2 py-1.5 border-b border-zinc-800/50';
+    row.style.paddingLeft = `${indent}px`;
+    if (depth > 0) {
+      const connector = document.createElement('span');
+      connector.className = 'text-zinc-700 shrink-0';
+      connector.textContent = '└';
+      row.appendChild(connector);
+    }
+    const name = document.createElement('span');
+    name.className = 'text-white font-medium';
+    name.textContent = m.display_name || `@${handle}`;
+    row.appendChild(name);
+    const handle_el = document.createElement('span');
+    handle_el.className = 'text-zinc-600 text-xs';
+    handle_el.textContent = `@${handle}`;
+    row.appendChild(handle_el);
+    const spacer = document.createElement('span');
+    spacer.className = 'flex-1';
+    row.appendChild(spacer);
+    const meta = document.createElement('span');
+    meta.className = 'text-zinc-600 text-xs text-right shrink-0';
+    meta.innerHTML = `${formatDuration(m.member_for_days)}<br><span class="text-zinc-700">${sub}</span>`;
+    row.appendChild(meta);
+    treeEl.appendChild(row);
+
+    for (const child of (children[handle] ?? [])) renderNode(child, depth + 1);
+  }
+
+  for (const root of roots) renderNode(root, 0);
+})();
+</script>

From 8b7cdd9ed18153f0663466c8c03f25db666f88cb Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:42:00 +0200
Subject: [PATCH 007/124] explain invitation system

---
 site/src/pages/about/ca/index.astro | 17 +++++++++++++++++
 site/src/pages/about/es/index.astro | 17 +++++++++++++++++
 site/src/pages/about/index.astro    | 17 +++++++++++++++++
 site/src/pages/about/it/index.astro | 17 +++++++++++++++++
 4 files changed, 68 insertions(+)

diff --git a/site/src/pages/about/ca/index.astro b/site/src/pages/about/ca/index.astro
index 3d29722..57d8e83 100644
--- a/site/src/pages/about/ca/index.astro
+++ b/site/src/pages/about/ca/index.astro
@@ -56,6 +56,20 @@ const labels = {
         </p>
       </section>
 
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Registre i invitacions</h2>
+        <p>
+          Aquesta instància és només per invitació. Per registrar-te necessites un enllaç
+          d'invitació d'un membre existent — cada enllaç és d'un sol ús i està vinculat a
+          un codi únic.
+        </p>
+        <p class="mt-2">
+          Un cop tinguis un compte, pots generar fins a <strong class="text-zinc-300">3 enllaços d'invitació</strong> per
+          compartir amb persones de confiança. Gestiona les teves invitacions des de la <a id="invites-link" href="invites/" class="text-blue-400 hover:text-blue-300 transition-colors">pàgina d'invitacions</a>
+          (cal iniciar sessió).
+        </p>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">Les teves dades en aquest servidor</h2>
         <p>
@@ -136,6 +150,9 @@ const labels = {
     data = await r.json();
   } catch { return; }
 
+  const invLink = document.getElementById('invites-link');
+  if (invLink) invLink.href = '/invites/';
+
   if (!data.user_count) return;
 
   const section  = document.getElementById('stats-section');
diff --git a/site/src/pages/about/es/index.astro b/site/src/pages/about/es/index.astro
index ea950b6..0bf6edb 100644
--- a/site/src/pages/about/es/index.astro
+++ b/site/src/pages/about/es/index.astro
@@ -56,6 +56,20 @@ const labels = {
         </p>
       </section>
 
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Registro e invitaciones</h2>
+        <p>
+          Esta instancia es solo por invitación. Para registrarte necesitas un enlace de
+          invitación de un miembro existente — cada enlace es de un solo uso y está vinculado
+          a un código único.
+        </p>
+        <p class="mt-2">
+          Una vez que tengas una cuenta, puedes generar hasta <strong class="text-zinc-300">3 enlaces de invitación</strong> para
+          compartir con personas de confianza. Gestiona tus invitaciones desde la <a id="invites-link" href="invites/" class="text-blue-400 hover:text-blue-300 transition-colors">página de invitaciones</a>
+          (requiere inicio de sesión).
+        </p>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">Tus datos en este servidor</h2>
         <p>
@@ -135,6 +149,9 @@ const labels = {
     data = await r.json();
   } catch { return; }
 
+  const invLink = document.getElementById('invites-link');
+  if (invLink) invLink.href = '/invites/';
+
   if (!data.user_count) return;
 
   const section  = document.getElementById('stats-section');
diff --git a/site/src/pages/about/index.astro b/site/src/pages/about/index.astro
index c3aa740..da7520b 100644
--- a/site/src/pages/about/index.astro
+++ b/site/src/pages/about/index.astro
@@ -57,6 +57,19 @@ const labels = {
         </p>
       </section>
 
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Joining &amp; invitations</h2>
+        <p>
+          This instance is invite-only. To join, you need an invite link from an existing
+          member — each link is single-use and tied to a unique code.
+        </p>
+        <p class="mt-2">
+          Once you have an account, you can generate up to <strong class="text-zinc-300">3 invite links</strong> to
+          share with people you trust. You can manage your invites from the <a id="invites-link" href="invites/" class="text-blue-400 hover:text-blue-300 transition-colors">invites page</a>
+          (requires login).
+        </p>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">Your data on this server</h2>
         <p>
@@ -133,6 +146,10 @@ const labels = {
     data = await r.json();
   } catch { return; }
 
+  // Fix invites link to use absolute base URL
+  const invLink = document.getElementById('invites-link');
+  if (invLink) invLink.href = '/invites/';
+
   if (!data.user_count) return;
 
   const section  = document.getElementById('stats-section');
diff --git a/site/src/pages/about/it/index.astro b/site/src/pages/about/it/index.astro
index 783318b..e2a649d 100644
--- a/site/src/pages/about/it/index.astro
+++ b/site/src/pages/about/it/index.astro
@@ -56,6 +56,20 @@ const labels = {
         </p>
       </section>
 
+      <section>
+        <h2 class="text-base font-semibold text-white mb-2">Iscrizione e inviti</h2>
+        <p>
+          Questa istanza è accessibile solo su invito. Per registrarti hai bisogno di un link
+          di invito da parte di un membro già registrato — ogni link è monouso e associato a
+          un codice univoco.
+        </p>
+        <p class="mt-2">
+          Una volta registrato, puoi generare fino a <strong class="text-zinc-300">3 link di invito</strong> da
+          condividere con persone di fiducia. Gestisci i tuoi inviti dalla <a id="invites-link" href="invites/" class="text-blue-400 hover:text-blue-300 transition-colors">pagina inviti</a>
+          (richiede il login).
+        </p>
+      </section>
+
       <section>
         <h2 class="text-base font-semibold text-white mb-2">I tuoi dati su questo server</h2>
         <p>
@@ -135,6 +149,9 @@ const labels = {
     data = await r.json();
   } catch { return; }
 
+  const invLink = document.getElementById('invites-link');
+  if (invLink) invLink.href = '/invites/';
+
   if (!data.user_count) return;
 
   const section  = document.getElementById('stats-section');

From 6d3673b2f7f09e0f39a0c1b870710c5960286246 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:54:50 +0200
Subject: [PATCH 008/124] =?UTF-8?q?=201.=20Image=20upload=20size=20limit?=
 =?UTF-8?q?=20=E2=80=94=20=5FMAX=5FIMAGE=5FBYTES=20=3D=2010=20MB=20in=20bo?=
 =?UTF-8?q?th=20serve/server.py=20and=20edit/server.py=20=20=202.=20Image?=
 =?UTF-8?q?=20MIME=20type=20whitelist=20=E2=80=94=20=5FALLOWED=5FIMAGE=5FT?=
 =?UTF-8?q?YPES=20blocks=20SVG=20XSS=20in=20both=20servers=20=20=203.=20Fi?=
 =?UTF-8?q?lename=20collision=20safety=20=E2=80=94=20=5Funique=5Fimage=5Fn?=
 =?UTF-8?q?ame()=20helper=20in=20both=20servers=20=20=204.=20OAuth=20CSRF?=
 =?UTF-8?q?=20=E2=80=94=20state=20token=20generated=20in=20edit/server.py?=
 =?UTF-8?q?=20auth-url,=20stored=20in=20=5Foauth=5Fstates,=20validated=20a?=
 =?UTF-8?q?nd=20discarded=20in=20callback;=20strava=5Fapi.auth=5Furl()=20a?=
 =?UTF-8?q?ccepts=20optional=20state=20param=20=20=205.=20Error=20message?=
 =?UTF-8?q?=20leak=20=E2=80=94=20upload=20processing=20errors=20now=20retu?=
 =?UTF-8?q?rn=20generic=20"Processing=20failed"=20instead=20of=20exception?=
 =?UTF-8?q?=20type/message=20=20=206.=20Handle=20injection=20in=20subproce?=
 =?UTF-8?q?ss=20=E2=80=94=20=5Ftrigger=5Frebuild=20now=20asserts=20handle?=
 =?UTF-8?q?=20matches=20=5FVALID=5FHANDLE=20before=20passing=20to=20subpro?=
 =?UTF-8?q?cess?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bincio/edit/server.py        | 43 ++++++++++++----
 bincio/extract/strava_api.py | 10 ++--
 bincio/serve/server.py       | 98 ++++++++++++++++++++++++++++++++++--
 3 files changed, 133 insertions(+), 18 deletions(-)

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 7cb99ed..940eed5 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import secrets
 import shutil
 from pathlib import Path
 from typing import Any
@@ -20,6 +21,9 @@ site_url: str = "http://localhost:4321"
 strava_client_id: str = ""
 strava_client_secret: str = ""
 
+# In-memory CSRF state tokens for OAuth flows (token → True); cleared after use
+_oauth_states: set[str] = set()
+
 app = FastAPI(title="BincioActivity Edit Server", docs_url=None, redoc_url=None)
 
 app.add_middleware(GZipMiddleware, minimum_size=1024)
@@ -38,6 +42,21 @@ def _check_id(activity_id: str) -> str:
     return activity_id
 
 
+_ALLOWED_IMAGE_TYPES = {"image/jpeg", "image/png", "image/webp", "image/gif"}
+_MAX_IMAGE_BYTES = 10 * 1024 * 1024  # 10 MB
+
+
+def _unique_image_name(directory: Path, filename: str) -> str:
+    """Return a filename that does not collide with existing files in directory."""
+    stem, suffix = Path(filename).stem, Path(filename).suffix
+    candidate = filename
+    counter = 1
+    while (directory / candidate).exists():
+        candidate = f"{stem}_{counter}{suffix}"
+        counter += 1
+    return candidate
+
+
 # ── HTML UI ───────────────────────────────────────────────────────────────────
 
 _HTML = """\
@@ -419,14 +438,15 @@ async def upload_image(activity_id: str, file: UploadFile = File(...)) -> JSONRe
 
     images_dir = dd / "edits" / "images" / activity_id
     images_dir.mkdir(parents=True, exist_ok=True)
-    safe_name = Path(file.filename).name
-    # Only allow image content types
     ct = file.content_type or ""
-    if not ct.startswith("image/"):
-        raise HTTPException(400, f"Only image files are accepted (got {ct})")
-    dest = images_dir / safe_name
-    dest.write_bytes(await file.read())
-    return JSONResponse({"ok": True, "filename": dest.name})
+    if ct not in _ALLOWED_IMAGE_TYPES:
+        raise HTTPException(400, "Only JPEG, PNG, WebP, or GIF images are accepted")
+    contents = await file.read()
+    if len(contents) > _MAX_IMAGE_BYTES:
+        raise HTTPException(413, f"Image too large (max {_MAX_IMAGE_BYTES // (1024 * 1024)} MB)")
+    safe_name = _unique_image_name(images_dir, Path(file.filename).name)
+    (images_dir / safe_name).write_bytes(contents)
+    return JSONResponse({"ok": True, "filename": safe_name})
 
 
 @app.get("/api/athlete")
@@ -678,16 +698,21 @@ async def strava_auth_url(request: Request) -> JSONResponse:
     """Return the Strava OAuth URL the browser should open."""
     if not strava_client_id:
         raise HTTPException(400, "Strava client ID not configured. Pass --strava-client-id to bincio edit.")
+    state = secrets.token_urlsafe(16)
+    _oauth_states.add(state)
     redirect_uri = str(request.url_for("strava_callback"))
     from bincio.extract.strava_api import auth_url
-    return JSONResponse({"url": auth_url(strava_client_id, redirect_uri)})
+    return JSONResponse({"url": auth_url(strava_client_id, redirect_uri, state=state)})
 
 
 @app.get("/api/strava/callback", name="strava_callback")
-async def strava_callback(code: str = "", error: str = "") -> RedirectResponse:
+async def strava_callback(code: str = "", error: str = "", state: str = "") -> RedirectResponse:
     """Strava OAuth callback — exchange code for token then redirect to the site."""
     if error or not code:
         return RedirectResponse(f"{site_url}?strava=error")
+    if state not in _oauth_states:
+        return RedirectResponse(f"{site_url}?strava=error")
+    _oauth_states.discard(state)
     if not strava_client_id or not strava_client_secret:
         return RedirectResponse(f"{site_url}?strava=error")
     dd = _get_data_dir()
diff --git a/bincio/extract/strava_api.py b/bincio/extract/strava_api.py
index 1367c2d..348fbd7 100644
--- a/bincio/extract/strava_api.py
+++ b/bincio/extract/strava_api.py
@@ -37,16 +37,18 @@ class StravaError(Exception):
 
 # ── OAuth helpers ──────────────────────────────────────────────────────────────
 
-def auth_url(client_id: str, redirect_uri: str) -> str:
+def auth_url(client_id: str, redirect_uri: str, state: str = "") -> str:
     """Return the Strava OAuth authorization URL."""
-    params = urllib.parse.urlencode({
+    params: dict[str, str] = {
         "client_id": client_id,
         "redirect_uri": redirect_uri,
         "response_type": "code",
         "scope": "activity:read_all",
         "approval_prompt": "auto",
-    })
-    return f"{_AUTH_URL}?{params}"
+    }
+    if state:
+        params["state"] = state
+    return f"{_AUTH_URL}?{urllib.parse.urlencode(params)}"
 
 
 def exchange_code(client_id: str, client_secret: str, code: str) -> dict:
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 0b07c71..4857ad3 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -10,6 +10,7 @@ from __future__ import annotations
 
 import json
 import re
+import secrets
 import subprocess
 import time
 from pathlib import Path
@@ -142,12 +143,31 @@ def _set_session_cookie(response: Response, token: str) -> None:
     )
 
 
+# ── Image upload constants ────────────────────────────────────────────────────
+
+_ALLOWED_IMAGE_TYPES = {"image/jpeg", "image/png", "image/webp", "image/gif"}
+_MAX_IMAGE_BYTES = 10 * 1024 * 1024  # 10 MB
+
+
+def _unique_image_name(directory: Path, filename: str) -> str:
+    """Return a filename that does not collide with existing files in directory."""
+    stem, suffix = Path(filename).stem, Path(filename).suffix
+    candidate = filename
+    counter = 1
+    while (directory / candidate).exists():
+        candidate = f"{stem}_{counter}{suffix}"
+        counter += 1
+    return candidate
+
+
 # ── Post-write rebuild ────────────────────────────────────────────────────────
 
 def _trigger_rebuild(handle: str) -> None:
     """Asynchronously re-merge one user's shard and rewrite the root manifest."""
     if site_dir is None:
         return
+    if not _VALID_HANDLE.match(handle):
+        return  # safety: never pass untrusted strings to subprocess
     subprocess.Popen(
         ["uv", "run", "bincio", "render",
          "--data-dir", str(data_dir),
@@ -386,12 +406,15 @@ async def upload_image(
     if not file.filename:
         raise HTTPException(400, "No filename")
     ct = file.content_type or ""
-    if not ct.startswith("image/"):
-        raise HTTPException(400, f"Only image files accepted (got {ct})")
+    if ct not in _ALLOWED_IMAGE_TYPES:
+        raise HTTPException(400, "Only JPEG, PNG, WebP, or GIF images are accepted")
+    contents = await file.read()
+    if len(contents) > _MAX_IMAGE_BYTES:
+        raise HTTPException(413, f"Image too large (max {_MAX_IMAGE_BYTES // (1024*1024)} MB)")
     images_dir = dd / "edits" / "images" / activity_id
     images_dir.mkdir(parents=True, exist_ok=True)
-    safe_name = Path(file.filename).name
-    (images_dir / safe_name).write_bytes(await file.read())
+    safe_name = _unique_image_name(images_dir, Path(file.filename).name)
+    (images_dir / safe_name).write_bytes(contents)
     _trigger_rebuild(user.handle)
     return JSONResponse({"ok": True, "filename": safe_name})
 
@@ -537,7 +560,7 @@ async def upload_activity(
             results.append({"name": name, "ok": True, "id": activity_id})
             any_added = True
         except Exception as exc:
-            results.append({"name": name, "ok": False, "error": f"{type(exc).__name__}: {exc}"})
+            results.append({"name": name, "ok": False, "error": "Processing failed"})
         finally:
             if not kept:
                 staged.unlink(missing_ok=True)
@@ -550,6 +573,71 @@ async def upload_activity(
     return JSONResponse({"ok": True, "added": len(added), "results": results})
 
 
+# ── Feedback ──────────────────────────────────────────────────────────────────
+
+_FEEDBACK_IMAGE_SUFFIXES = {".jpg", ".jpeg", ".png", ".gif", ".webp", ".heic"}
+_FEEDBACK_MAX_IMAGES = 3
+_FEEDBACK_MAX_IMAGE_BYTES = 2 * 1024 * 1024  # 2 MB
+
+
+@app.post("/api/feedback")
+async def submit_feedback(
+    text: str = Form(""),
+    images: list[UploadFile] = File(default=[]),
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    user = _require_user(bincio_session)
+
+    text = text.strip()
+    if not text and not any(f.filename for f in images):
+        raise HTTPException(400, "Feedback must include text or at least one image")
+    if len(images) > _FEEDBACK_MAX_IMAGES:
+        raise HTTPException(400, f"Maximum {_FEEDBACK_MAX_IMAGES} images per submission")
+
+    feedback_dir = _get_data_dir() / "_feedback"
+    feedback_dir.mkdir(exist_ok=True)
+    images_dir = feedback_dir / user.handle
+    images_dir.mkdir(exist_ok=True)
+
+    now = int(time.time())
+    submission_id = f"{now}_{secrets.token_hex(4)}"
+    saved_images: list[str] = []
+
+    for img in images:
+        if not img.filename:
+            continue
+        suffix = Path(img.filename).suffix.lower()
+        if suffix not in _FEEDBACK_IMAGE_SUFFIXES:
+            raise HTTPException(400, f"Unsupported image type '{suffix}'")
+        contents = await img.read()
+        if len(contents) > _FEEDBACK_MAX_IMAGE_BYTES:
+            raise HTTPException(413, f"Image '{img.filename}' exceeds 2 MB limit")
+        safe_name = f"{submission_id}_{Path(img.filename).name}"
+        (images_dir / safe_name).write_bytes(contents)
+        saved_images.append(safe_name)
+
+    from datetime import datetime, timezone
+    entry = {
+        "id": submission_id,
+        "handle": user.handle,
+        "submitted_at": datetime.now(timezone.utc).isoformat(),
+        "text": text,
+        "images": saved_images,
+    }
+
+    log_file = feedback_dir / f"{user.handle}.json"
+    existing: list[dict] = []
+    if log_file.exists():
+        try:
+            existing = json.loads(log_file.read_text())
+        except Exception:
+            existing = []
+    existing.append(entry)
+    log_file.write_text(json.dumps(existing, indent=2))
+
+    return JSONResponse({"ok": True, "id": submission_id})
+
+
 @app.post("/api/strava/sync")
 async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     user = _require_user(bincio_session)

From 4593478863f8cf4d5eb8541df26196d5814e2d75 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 13:58:12 +0200
Subject: [PATCH 009/124] feedback page

---
 docs/deployment/vps.md              |  25 +++++
 site/src/layouts/Base.astro         |   5 +-
 site/src/pages/feedback/index.astro | 162 ++++++++++++++++++++++++++++
 3 files changed, 191 insertions(+), 1 deletion(-)
 create mode 100644 site/src/pages/feedback/index.astro

diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 71719e2..570e214 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -277,6 +277,31 @@ incremental sync from the same modal.
 
 ---
 
+## Reading user feedback
+
+Users can submit feedback from the **Feedback** link in the nav (visible when logged in).
+Submissions are stored as JSON on the server:
+
+```
+/var/bincio/data/_feedback/
+  {handle}.json       ← one file per user, array of submissions
+  {handle}/           ← attached images
+```
+
+To read all feedback:
+
+```bash
+cat /var/bincio/data/_feedback/*.json | python3 -m json.tool
+```
+
+Per-user only:
+
+```bash
+cat /var/bincio/data/_feedback/pres.json | python3 -m json.tool
+```
+
+---
+
 ## Day-to-day operations
 
 | Task | Command |
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 7cc36f7..83c6dd3 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -176,6 +176,7 @@ try {
             <a href={`${baseUrl}convert/`} class="text-sm text-zinc-400 hover:text-white transition-colors">Convert</a>
           )}
           <a href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors">About</a>
+          <a id="nav-feedback" href={`${baseUrl}feedback/`} style="display:none" class="text-sm text-zinc-400 hover:text-white transition-colors">Feedback</a>
         </>
       )}
 
@@ -375,9 +376,11 @@ try {
             el.href = baseUrl + 'u/' + user.handle + '/' + el.getAttribute('data-user-path');
           });
 
-          // Show logout button
+          // Show logout button and feedback link
           const logoutEl = document.getElementById('nav-logout');
           if (logoutEl) logoutEl.style.display = '';
+          const feedbackEl = document.getElementById('nav-feedback');
+          if (feedbackEl) feedbackEl.style.display = '';
 
           // Pre-populate the "keep original" checkbox from the instance default
           const chk = document.getElementById('upload-keep-original');
diff --git a/site/src/pages/feedback/index.astro b/site/src/pages/feedback/index.astro
new file mode 100644
index 0000000..df401b0
--- /dev/null
+++ b/site/src/pages/feedback/index.astro
@@ -0,0 +1,162 @@
+---
+import Base from '../../layouts/Base.astro';
+---
+<Base title="Feedback — BincioActivity">
+  <div class="max-w-lg mx-auto mt-12 px-4">
+    <h1 class="text-2xl font-bold text-white mb-2">Send feedback</h1>
+    <p class="text-sm text-zinc-500 mb-6">Report a bug, suggest a feature, or share anything useful. Plain text only — no account details needed.</p>
+
+    <form id="feedback-form" class="space-y-4">
+
+      <div>
+        <textarea
+          id="fb-text"
+          rows="6"
+          placeholder="What's on your mind?"
+          class="w-full px-3 py-2 rounded-lg bg-zinc-900 border border-zinc-700 text-white placeholder-zinc-500 text-sm focus:outline-none focus:border-[--accent] resize-none"
+        ></textarea>
+      </div>
+
+      <!-- Image upload -->
+      <div>
+        <p class="text-xs text-zinc-500 mb-2">Attach up to 3 screenshots (max 2 MB each)</p>
+        <div
+          id="fb-drop"
+          class="border-2 border-dashed border-zinc-700 rounded-lg p-5 text-center text-zinc-500 text-sm cursor-pointer hover:border-zinc-500 hover:text-zinc-300 transition-colors"
+        >
+          <span id="fb-drop-label">Drop images or click to browse</span>
+          <input id="fb-input" type="file" accept="image/*" multiple class="hidden" />
+        </div>
+        <div id="fb-previews" class="flex gap-2 flex-wrap mt-2"></div>
+      </div>
+
+      <p id="fb-error" class="text-red-400 text-sm hidden"></p>
+
+      <button
+        type="submit"
+        class="w-full py-2 rounded-lg bg-[--accent] hover:opacity-90 text-white font-medium text-sm transition-opacity"
+      >Send feedback</button>
+
+    </form>
+
+    <div id="fb-success" class="hidden text-center mt-12">
+      <p class="text-2xl mb-2">Thanks!</p>
+      <p class="text-zinc-400 text-sm">Your feedback has been received.</p>
+    </div>
+  </div>
+</Base>
+
+<script>
+  const MAX_IMAGES = 3;
+  const MAX_BYTES  = 2 * 1024 * 1024;
+
+  const form     = document.getElementById('feedback-form') as HTMLFormElement;
+  const drop     = document.getElementById('fb-drop')!;
+  const input    = document.getElementById('fb-input') as HTMLInputElement;
+  const previews = document.getElementById('fb-previews')!;
+  const errEl    = document.getElementById('fb-error')!;
+  const success  = document.getElementById('fb-success')!;
+
+  let selectedFiles: File[] = [];
+
+  function showError(msg: string) {
+    errEl.textContent = msg;
+    errEl.classList.remove('hidden');
+  }
+  function clearError() {
+    errEl.classList.add('hidden');
+  }
+
+  function renderPreviews() {
+    previews.innerHTML = '';
+    for (let i = 0; i < selectedFiles.length; i++) {
+      const f = selectedFiles[i];
+      const url = URL.createObjectURL(f);
+      const wrap = document.createElement('div');
+      wrap.className = 'relative';
+      wrap.innerHTML = `
+        <img src="${url}" class="w-20 h-20 object-cover rounded-lg border border-zinc-700" />
+        <button type="button" data-i="${i}"
+          class="remove-btn absolute -top-1.5 -right-1.5 w-5 h-5 rounded-full bg-zinc-800 border border-zinc-600 text-zinc-300 hover:text-white text-xs flex items-center justify-center leading-none">
+          ×
+        </button>`;
+      previews.appendChild(wrap);
+    }
+    previews.querySelectorAll('.remove-btn').forEach(btn => {
+      btn.addEventListener('click', () => {
+        const i = parseInt((btn as HTMLElement).dataset.i ?? '0');
+        selectedFiles.splice(i, 1);
+        renderPreviews();
+        clearError();
+      });
+    });
+  }
+
+  function addFiles(newFiles: FileList | File[]) {
+    clearError();
+    for (const f of Array.from(newFiles)) {
+      if (selectedFiles.length >= MAX_IMAGES) {
+        showError(`Maximum ${MAX_IMAGES} images.`);
+        break;
+      }
+      if (f.size > MAX_BYTES) {
+        showError(`"${f.name}" exceeds 2 MB.`);
+        continue;
+      }
+      selectedFiles.push(f);
+    }
+    renderPreviews();
+    input.value = '';
+  }
+
+  drop.addEventListener('click', () => input.click());
+  drop.addEventListener('dragover', e => { e.preventDefault(); drop.style.borderColor = 'var(--accent)'; });
+  drop.addEventListener('dragleave', () => { drop.style.borderColor = ''; });
+  drop.addEventListener('drop', e => {
+    e.preventDefault();
+    drop.style.borderColor = '';
+    if (e.dataTransfer?.files.length) addFiles(e.dataTransfer.files);
+  });
+  input.addEventListener('change', () => { if (input.files?.length) addFiles(input.files); });
+
+  form.addEventListener('submit', async e => {
+    e.preventDefault();
+    clearError();
+
+    const text = (document.getElementById('fb-text') as HTMLTextAreaElement).value.trim();
+    if (!text && selectedFiles.length === 0) {
+      showError('Please write something or attach an image.');
+      return;
+    }
+
+    const fd = new FormData();
+    fd.append('text', text);
+    for (const f of selectedFiles) fd.append('images', f);
+
+    const btn = form.querySelector('button[type=submit]') as HTMLButtonElement;
+    btn.disabled = true;
+    btn.textContent = 'Sending…';
+
+    try {
+      const r = await fetch('/api/feedback', { method: 'POST', credentials: 'include', body: fd });
+      if (!r.ok) {
+        const d = await r.json().catch(() => ({}));
+        throw new Error(d.detail ?? `Server error ${r.status}`);
+      }
+      form.classList.add('hidden');
+      success.classList.remove('hidden');
+    } catch (err: any) {
+      showError(err.message);
+      btn.disabled = false;
+      btn.textContent = 'Send feedback';
+    }
+  });
+
+  // Redirect to login if not authenticated
+  (async () => {
+    try {
+      const r = await fetch('/api/me', { credentials: 'include' });
+      if (r.status === 401) window.location.href = `/login/?next=${encodeURIComponent(window.location.pathname)}`;
+    } catch (_) {}
+  })();
+</script>

From ceb8e28b7419e88f5b05867a9eb9488278717315 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:06:31 +0200
Subject: [PATCH 010/124] update deployment instructions

---
 docs/deployment/vps.md | 162 ++++++++++++++++++++++++-----------------
 1 file changed, 94 insertions(+), 68 deletions(-)

diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 570e214..326f39a 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -16,7 +16,7 @@ Code is deployed directly from your laptop via `git push` — no GitHub required
 
 ```bash
 apt update && apt upgrade -y
-apt install -y git curl nginx certbot python3-certbot-nginx sqlite3
+apt install -y git curl nginx certbot python3-certbot-nginx sqlite3 rsync
 ```
 
 **Node.js 20 LTS** (the Debian package is too old):
@@ -52,38 +52,88 @@ REPO=/opt/bincio-repo.git
 DEPLOY=/opt/bincio
 DATA=/var/bincio/data
 
-echo "--- Checking out code ---"
-git --work-tree=$DEPLOY --git-dir=$REPO checkout -f
+while read oldrev newrev refname; do
+  echo "--- Checking out $refname ---"
+  git --work-tree=$DEPLOY --git-dir=$REPO checkout -f $newrev
 
-echo "--- Syncing Python deps ---"
-cd $DEPLOY
-~/.local/bin/uv sync
+  echo "--- Syncing Python deps ---"
+  cd $DEPLOY
+  ~/.local/bin/uv sync --extra serve --extra strava
 
-echo "--- Syncing JS deps ---"
-cd $DEPLOY/site
-npm install --silent
+  echo "--- Syncing JS deps ---"
+  cd $DEPLOY/site
+  npm install --silent
 
-echo "--- Building site ---"
-cd $DEPLOY
-~/.local/bin/uv run bincio render --data-dir $DATA --site-dir $DEPLOY/site
+  echo "--- Building site ---"
+  cd $DEPLOY
+  ~/.local/bin/uv run bincio render --data-dir $DATA --site-dir $DEPLOY/site
 
-echo "--- Copying dist to webroot ---"
-rsync -a --delete $DEPLOY/site/dist/ /var/www/bincio/
+  echo "--- Copying dist to webroot ---"
+  rsync -a --delete $DEPLOY/site/dist/ /var/www/bincio/
 
-echo "--- Restarting API ---"
-systemctl restart bincio
+  echo "--- Restarting API ---"
+  systemctl restart bincio
 
-echo "--- Done ---"
+  echo "--- Done ---"
+done
 ```
 
 ```bash
 chmod +x /opt/bincio-repo.git/hooks/post-receive
-mkdir -p /var/www/bincio
+mkdir -p /var/www/bincio /var/bincio/data /var/bincio/sources
 ```
 
 ---
 
-## 3. First deploy from your laptop
+## 3. systemd service
+
+The hook restarts the `bincio` service on every deploy, so it must exist before the first push.
+
+Create `/etc/bincio/secrets.env`:
+
+```bash
+mkdir -p /etc/bincio
+chmod 700 /etc/bincio
+cat > /etc/bincio/secrets.env <<EOF
+STRAVA_CLIENT_ID=your_client_id
+STRAVA_CLIENT_SECRET=your_client_secret
+EOF
+chmod 600 /etc/bincio/secrets.env
+```
+
+Create `/etc/systemd/system/bincio.service`:
+
+```ini
+[Unit]
+Description=BincioActivity API
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/bincio
+ExecStart=/root/.local/bin/uv run bincio serve \
+    --data-dir /var/bincio/data \
+    --site-dir /opt/bincio/site \
+    --host 127.0.0.1 \
+    --port 4041
+EnvironmentFile=/etc/bincio/secrets.env
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+```
+
+Enable and start:
+
+```bash
+systemctl daemon-reload
+systemctl enable --now bincio
+systemctl status bincio
+```
+
+---
+
+## 4. First deploy from your laptop
 
 Add the VPS as a git remote (run this locally, once):
 
@@ -106,7 +156,7 @@ git push vps mobile_app   # deploy any branch directly
 
 ---
 
-## 4. Initialise the instance
+## 5. Initialise the instance
 
 ```bash
 cd /opt/bincio
@@ -128,7 +178,7 @@ sqlite3 /var/bincio/data/instance.db \
 
 ---
 
-## 5. Prepare your own activities
+## 6. Prepare your own activities
 
 Source files (raw GPX/FIT) live separately from the BAS output:
 
@@ -168,52 +218,6 @@ ssh root@<vps> "cd /opt/bincio && \
 
 ---
 
-## 6. systemd service
-
-Create `/etc/systemd/system/bincio.service`:
-
-```ini
-[Unit]
-Description=BincioActivity API
-After=network.target
-
-[Service]
-WorkingDirectory=/opt/bincio
-ExecStart=/root/.local/bin/uv run bincio serve \
-    --data-dir /var/bincio/data \
-    --site-dir /opt/bincio/site \
-    --host 127.0.0.1 \
-    --port 4041
-EnvironmentFile=/etc/bincio/secrets.env
-Restart=always
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-```
-
-Create `/etc/bincio/secrets.env`:
-
-```bash
-mkdir -p /etc/bincio
-chmod 700 /etc/bincio
-cat > /etc/bincio/secrets.env <<EOF
-STRAVA_CLIENT_ID=your_client_id
-STRAVA_CLIENT_SECRET=your_client_secret
-EOF
-chmod 600 /etc/bincio/secrets.env
-```
-
-Enable and start:
-
-```bash
-systemctl daemon-reload
-systemctl enable --now bincio
-systemctl status bincio
-```
-
----
-
 ## 7. nginx
 
 Create `/etc/nginx/sites-available/bincio`:
@@ -242,14 +246,36 @@ server {
 ```
 
 ```bash
+# disable the default nginx welcome page
+rm /etc/nginx/sites-enabled/default
 ln -s /etc/nginx/sites-available/bincio /etc/nginx/sites-enabled/
 nginx -t && systemctl reload nginx
 ```
 
+You can verify the site is served correctly by hitting the IP directly:
+`http://<your-vps-ip>/` — you should see the bincio activity feed, not the nginx welcome page.
+
 ---
 
 ## 8. SSL
 
+SSL requires the domain to be pointing at the VPS first. In your DNS provider, add:
+
+```
+Type:  A
+Name:  @
+Value: <your-vps-ip>
+TTL:   300
+```
+
+Verify propagation before running certbot:
+
+```bash
+dig yourdomain.com A +short   # must return your VPS IP
+```
+
+Then:
+
 ```bash
 certbot --nginx -d yourdomain.com
 # certbot edits the nginx config and sets up automatic renewal
@@ -320,4 +346,4 @@ cat /var/bincio/data/_feedback/pres.json | python3 -m json.tool
 
 - [Multi-user architecture](multi-user.md)
 - [CLI reference](../reference/cli.md)
-- [API reference](../reference/api.md)
+- [API reference](../reference/api.md)
\ No newline at end of file

From e006175285bc3cfefdb4d2aef64a2a8ed98cb0c9 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:06:45 +0200
Subject: [PATCH 011/124] fix: don't redirect to /u/{handle}/ on private
 (multi-user) instances

---
 site/src/lib/manifest.ts   | 11 +++++++++++
 site/src/pages/index.astro |  4 ++--
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/site/src/lib/manifest.ts b/site/src/lib/manifest.ts
index 3071bc3..2dc52f2 100644
--- a/site/src/lib/manifest.ts
+++ b/site/src/lib/manifest.ts
@@ -22,6 +22,17 @@ export interface ShardHandle {
   url: string;
 }
 
+export function isInstancePrivate(): boolean {
+  try {
+    const dataDir = findDataDir();
+    if (!dataDir) return false;
+    const root = JSON.parse(readFileSync(join(dataDir, 'index.json'), 'utf-8'));
+    return root?.instance?.private === true;
+  } catch {
+    return false;
+  }
+}
+
 export function readShardHandles(): ShardHandle[] {
   try {
     const dataDir = findDataDir();
diff --git a/site/src/pages/index.astro b/site/src/pages/index.astro
index eac5563..2adc560 100644
--- a/site/src/pages/index.astro
+++ b/site/src/pages/index.astro
@@ -1,11 +1,11 @@
 ---
 import Base from '../layouts/Base.astro';
 import ActivityFeed from '../components/ActivityFeed.svelte';
-import { readShardHandles } from '../lib/manifest';
+import { readShardHandles, isInstancePrivate } from '../lib/manifest';
 
 const base = import.meta.env.BASE_URL;
 const shards = readShardHandles();
-const isSingleUser = shards.length === 1;
+const isSingleUser = shards.length === 1 && !isInstancePrivate();
 const singleHandle = isSingleUser ? shards[0].handle : null;
 ---
 {isSingleUser ? (

From 5371c77c8fab3c64502500cce16afd64507c0094 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:14:44 +0200
Subject: [PATCH 012/124] update vps instructions

---
 docs/deployment/vps.md | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 326f39a..31d308e 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -72,7 +72,7 @@ while read oldrev newrev refname; do
   rsync -a --delete $DEPLOY/site/dist/ /var/www/bincio/
 
   echo "--- Restarting API ---"
-  systemctl restart bincio
+  systemctl restart bincio || echo "WARNING: bincio service restart failed — check journalctl -u bincio"
 
   echo "--- Done ---"
 done
@@ -169,6 +169,12 @@ uv run bincio init \
 # prompted for password; prints a first invite code
 ```
 
+Enable the edit/upload UI (this env var is read at build time and is gitignored, so it must be set on the server):
+
+```bash
+echo "PUBLIC_EDIT_ENABLED=true" > /opt/bincio/site/.env
+```
+
 Set the user cap:
 
 ```bash

From 27f94cf5812956d32046beac2b7565e59fa41718 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:19:41 +0200
Subject: [PATCH 014/124] fix: respect instancePrivate when determining
 single-user mode in Base.astro

---
 site/src/layouts/Base.astro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 83c6dd3..5f33ad2 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -31,7 +31,7 @@ try {
     instancePrivate = root?.instance?.private === true;
     const shards: Array<{ handle?: string }> = root?.shards ?? [];
     const handles = shards.map(s => s.handle).filter(Boolean);
-    if (handles.length === 1) singleHandle = handles[0] as string;
+    if (handles.length === 1 && !instancePrivate) singleHandle = handles[0] as string;
   }
 } catch { /* non-fatal */ }
 ---

From 7088b94a87a07a317d872aaf7d7703206a5c4e57 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:26:11 +0200
Subject: [PATCH 015/124] fix: bincio init always sets private:true even if
 index.json already exists

---
 bincio/serve/init_cmd.py | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/bincio/serve/init_cmd.py b/bincio/serve/init_cmd.py
index 5dfbb84..7c6fc8e 100644
--- a/bincio/serve/init_cmd.py
+++ b/bincio/serve/init_cmd.py
@@ -55,7 +55,19 @@ def init(data_dir: str, handle: str, password: str, display_name: str, name: str
     from datetime import datetime, timezone
 
     root_index = dd / "index.json"
-    if not root_index.exists():
+    if root_index.exists():
+        # Preserve existing manifest but always enforce private: True for a multi-user instance.
+        manifest = json.loads(root_index.read_text())
+        instance = manifest.setdefault("instance", {})
+        if not instance.get("private"):
+            instance["private"] = True
+            if name:
+                instance["name"] = name
+            root_index.write_text(json.dumps(manifest, indent=2))
+            console.print("  [green]✓[/green] root index.json updated (private: true)")
+        else:
+            console.print("  [yellow]·[/yellow] root index.json already private — skipping")
+    else:
         manifest = {
             "bas_version": "1.0",
             "instance": {"name": name or "BincioActivity", "private": True},
@@ -65,8 +77,6 @@ def init(data_dir: str, handle: str, password: str, display_name: str, name: str
         }
         root_index.write_text(json.dumps(manifest, indent=2))
         console.print("  [green]✓[/green] root index.json manifest written")
-    else:
-        console.print("  [yellow]·[/yellow] root index.json already exists — skipping")
 
     # ── User limit ────────────────────────────────────────────────────────────
     if max_users > 0:

From 8d8b009a78b0d1e105a753a87ae6950048c07c35 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:33:06 +0200
Subject: [PATCH 016/124] fix: use shutil.which to find uv in _trigger_rebuild;
 never 500 on rebuild failure

---
 bincio/serve/server.py | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 4857ad3..3b544c7 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -11,6 +11,7 @@ from __future__ import annotations
 import json
 import re
 import secrets
+import shutil
 import subprocess
 import time
 from pathlib import Path
@@ -168,14 +169,18 @@ def _trigger_rebuild(handle: str) -> None:
         return
     if not _VALID_HANDLE.match(handle):
         return  # safety: never pass untrusted strings to subprocess
-    subprocess.Popen(
-        ["uv", "run", "bincio", "render",
-         "--data-dir", str(data_dir),
-         "--site-dir", str(site_dir),
-         "--handle", handle],
-        stdout=subprocess.DEVNULL,
-        stderr=subprocess.DEVNULL,
-    )
+    uv = shutil.which("uv") or str(Path.home() / ".local" / "bin" / "uv")
+    try:
+        subprocess.Popen(
+            [uv, "run", "bincio", "render",
+             "--data-dir", str(data_dir),
+             "--site-dir", str(site_dir),
+             "--handle", handle],
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+        )
+    except Exception:
+        pass  # rebuild failure must never 500 the calling endpoint
 
 
 # ── Auth endpoints ────────────────────────────────────────────────────────────

From f790deb54fd434ff4d09e514d574078197d5940d Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:35:41 +0200
Subject: [PATCH 017/124] fix: athlete page shows empty state instead of error
 when athlete.json missing

---
 site/src/components/AthleteView.svelte | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/site/src/components/AthleteView.svelte b/site/src/components/AthleteView.svelte
index b0be67a..95b95e1 100644
--- a/site/src/components/AthleteView.svelte
+++ b/site/src/components/AthleteView.svelte
@@ -42,8 +42,7 @@
         loadAthlete(import.meta.env.BASE_URL, athleteUrl || undefined),
         loadIndex(import.meta.env.BASE_URL, indexUrl || undefined),
       ]);
-      if (!athleteData) throw new Error('athlete.json not found — run bincio extract first');
-      athlete = athleteData;
+      athlete = athleteData as AthleteJson | null;
       activities = index.activities.filter(a => a.mmp && a.privacy !== 'private');
     } catch (e: any) {
       error = e.message;
@@ -78,7 +77,17 @@
   <p class="text-zinc-400 text-sm">Loading…</p>
 {:else if error}
   <p class="text-red-400 text-sm">{error}</p>
-{:else if athlete}
+{:else if !athlete}
+  <div class="text-zinc-400 text-sm space-y-3">
+    <p>No athlete profile yet.</p>
+    {#if editEnabled}
+      <button
+        on:click={() => drawerOpen = true}
+        class="px-3 py-1.5 text-xs border border-zinc-700 hover:border-zinc-500 text-zinc-400 hover:text-white rounded-md transition-colors"
+      >Create profile</button>
+    {/if}
+  </div>
+{:else}
 
   <!-- Header row: tabs + edit button -->
   <div class="flex items-center justify-between mb-6 border-b border-zinc-800 pb-0">

From 6a8ef984cb492b8e09076a25b3cdde5bca67c41e Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:37:05 +0200
Subject: [PATCH 018/124] fix: GET/POST /api/athlete work without a
 pre-existing athlete.json

---
 bincio/serve/server.py | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 3b544c7..30bf920 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -449,9 +449,9 @@ async def get_athlete(bincio_session: Optional[str] = Cookie(default=None)) -> J
     user = _require_user(bincio_session)
     dd = _get_data_dir() / user.handle
     athlete_path = dd / "athlete.json"
-    if not athlete_path.exists():
-        raise HTTPException(404, "athlete.json not found — run bincio extract first")
-    data = json.loads(athlete_path.read_text(encoding="utf-8"))
+    data: dict = {}
+    if athlete_path.exists():
+        data = json.loads(athlete_path.read_text(encoding="utf-8"))
     # Layer edits/athlete.yaml on top
     edits_path = dd / "edits" / "athlete.yaml"
     if edits_path.exists():
@@ -480,8 +480,14 @@ async def save_athlete(
 ) -> JSONResponse:
     user = _require_user(bincio_session)
     dd = _get_data_dir() / user.handle
-    if not (dd / "athlete.json").exists():
-        raise HTTPException(404, "athlete.json not found — run bincio extract first")
+    athlete_path = dd / "athlete.json"
+    if not athlete_path.exists():
+        from datetime import datetime, timezone
+        athlete_path.write_text(json.dumps({
+            "bas_version": "1.0",
+            "generated_at": datetime.now(timezone.utc).isoformat(),
+            "power_curve": {},
+        }), encoding="utf-8")
     payload = await request.json()
     edits_dir = dd / "edits"
     edits_dir.mkdir(exist_ok=True)

From f8e02f3da2fedbbc8253d2f944e3080563134add Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:43:01 +0200
Subject: [PATCH 019/124] fix: athlete page falls back to /api/athlete when
 static file not yet rebuilt

---
 site/src/components/AthleteView.svelte | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/site/src/components/AthleteView.svelte b/site/src/components/AthleteView.svelte
index 95b95e1..3de95cd 100644
--- a/site/src/components/AthleteView.svelte
+++ b/site/src/components/AthleteView.svelte
@@ -42,7 +42,15 @@
         loadAthlete(import.meta.env.BASE_URL, athleteUrl || undefined),
         loadIndex(import.meta.env.BASE_URL, indexUrl || undefined),
       ]);
-      athlete = athleteData as AthleteJson | null;
+      // Static file may not exist yet if the background rebuild hasn't finished — fall back to API
+      let resolvedAthlete = athleteData as AthleteJson | null;
+      if (!resolvedAthlete && editEnabled) {
+        try {
+          const r = await fetch('/api/athlete', { credentials: 'include' });
+          if (r.ok) resolvedAthlete = await r.json() as AthleteJson;
+        } catch { /* ignore */ }
+      }
+      athlete = resolvedAthlete;
       activities = index.activities.filter(a => a.mmp && a.privacy !== 'private');
     } catch (e: any) {
       error = e.message;
@@ -52,8 +60,11 @@
   });
 
   async function onSaved() {
-    const res = await fetch(`${import.meta.env.BASE_URL}data/athlete.json?t=${Date.now()}`);
-    if (res.ok) athlete = await res.json();
+    // Try static file first; fall back to API (works before the background rebuild finishes)
+    const staticUrl = athleteUrl || `${import.meta.env.BASE_URL}data/athlete.json`;
+    let res = await fetch(`${staticUrl}?t=${Date.now()}`);
+    if (!res.ok) res = await fetch('/api/athlete', { credentials: 'include' });
+    if (res.ok) athlete = await res.json() as AthleteJson;
     drawerOpen = false;
   }
 

From ae883a7dbaaef1968f33253b12189a42e4599bba Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:47:50 +0200
Subject: [PATCH 020/124] fix: rebuild athlete.json on every ingest; remove
 bincio-extract references from UI

---
 bincio/extract/ingest.py               | 14 ++++++++++++++
 site/src/components/AthleteView.svelte |  2 +-
 site/src/pages/athlete/index.astro     |  2 +-
 site/src/pages/stats/index.astro       |  2 +-
 4 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/bincio/extract/ingest.py b/bincio/extract/ingest.py
index 7515251..dedb4fc 100644
--- a/bincio/extract/ingest.py
+++ b/bincio/extract/ingest.py
@@ -59,6 +59,20 @@ def ingest_parsed(
     summaries[activity_id] = summary
     write_index(list(summaries.values()), data_dir, owner)
 
+    # Rebuild athlete.json with updated MMP curves and records.
+    # Preserve any manually-set fields (max_hr, ftp_w, zones, etc.) from the existing file.
+    from bincio.extract.writer import write_athlete_json
+    _COMPUTED = {"bas_version", "generated_at", "power_curve", "records", "best_climbs"}
+    athlete_config: dict[str, Any] = {}
+    athlete_path = data_dir / "athlete.json"
+    if athlete_path.exists():
+        try:
+            existing = json.loads(athlete_path.read_text(encoding="utf-8"))
+            athlete_config = {k: v for k, v in existing.items() if k not in _COMPUTED}
+        except Exception:
+            pass
+    write_athlete_json(list(summaries.values()), data_dir, athlete_config)
+
     return activity_id
 
 
diff --git a/site/src/components/AthleteView.svelte b/site/src/components/AthleteView.svelte
index 3de95cd..ed990f1 100644
--- a/site/src/components/AthleteView.svelte
+++ b/site/src/components/AthleteView.svelte
@@ -130,7 +130,7 @@
         <MmpChart {athlete} {activities} />
       </div>
     {:else}
-      <p class="text-zinc-500 text-sm">No power data found. Make sure your activities include power meter data and re-run <code class="text-zinc-300">bincio extract</code>.</p>
+      <p class="text-zinc-500 text-sm">No power data found. Make sure your activities include power meter data.</p>
     {/if}
 
   <!-- Records tab -->
diff --git a/site/src/pages/athlete/index.astro b/site/src/pages/athlete/index.astro
index 58865d5..3f56408 100644
--- a/site/src/pages/athlete/index.astro
+++ b/site/src/pages/athlete/index.astro
@@ -13,5 +13,5 @@ const handle = shards[0]?.handle ?? null;
     window.location.replace(base + 'u/' + handle + '/athlete/');
   </script>
 ) : (
-  <p>No data found. Run <code>bincio extract</code> first.</p>
+  <p>No data found. Upload activities to get started.</p>
 )}
diff --git a/site/src/pages/stats/index.astro b/site/src/pages/stats/index.astro
index b2ceda2..65bcf96 100644
--- a/site/src/pages/stats/index.astro
+++ b/site/src/pages/stats/index.astro
@@ -14,5 +14,5 @@ const handle = shards[0]?.handle ?? null;
     window.location.replace(base + 'u/' + handle + '/stats/');
   </script>
 ) : (
-  <p>No data found. Run <code>bincio extract</code> first.</p>
+  <p>No data found. Upload activities to get started.</p>
 )}

From 96a3deee5decfc8f37f50f7bd3a42de611fe3c5d Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 15:57:23 +0200
Subject: [PATCH 021/124] fix: serve data/ from disk via nginx alias; return
 full athlete data from API

---
 bincio/serve/server.py | 9 +--------
 docs/deployment/vps.md | 9 +++++++++
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 30bf920..ba620fb 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -463,14 +463,7 @@ async def get_athlete(bincio_session: Optional[str] = Cookie(default=None)) -> J
                     data[k] = edits[k]
         except Exception:
             pass
-    return JSONResponse({
-        "max_hr": data.get("max_hr"),
-        "ftp_w": data.get("ftp_w"),
-        "hr_zones": data.get("hr_zones"),
-        "power_zones": data.get("power_zones"),
-        "seasons": data.get("seasons", []),
-        "gear": data.get("gear", {}),
-    })
+    return JSONResponse(data)
 
 
 @app.post("/api/athlete")
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 31d308e..921be5e 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -236,6 +236,8 @@ server {
     root /var/www/bincio;
     index index.html;
 
+    client_max_body_size 512M;  # bulk activity uploads
+
     # API → bincio serve
     location /api/ {
         proxy_pass http://127.0.0.1:4041;
@@ -244,6 +246,13 @@ server {
         proxy_read_timeout 120s;   # Strava sync can be slow
     }
 
+    # Data files served live from disk — bypasses the build/rsync cycle
+    # so uploads and merges are visible immediately without a site rebuild.
+    location /data/ {
+        alias /var/bincio/data/;
+        add_header Cache-Control "no-cache, must-revalidate";
+    }
+
     # Static files
     location / {
         try_files $uri $uri/ $uri.html =404;

From a20df6bd574f54582c2b18b61a1c887d1d5ba0af Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 17:40:16 +0200
Subject: [PATCH 022/124] fix: hide community stats/tree on about page for
 non-logged-in users

---
 site/src/pages/about/ca/index.astro | 4 ++++
 site/src/pages/about/es/index.astro | 4 ++++
 site/src/pages/about/index.astro    | 4 ++++
 site/src/pages/about/it/index.astro | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/site/src/pages/about/ca/index.astro b/site/src/pages/about/ca/index.astro
index 57d8e83..a4f928e 100644
--- a/site/src/pages/about/ca/index.astro
+++ b/site/src/pages/about/ca/index.astro
@@ -143,6 +143,10 @@ const labels = {
 
 <script define:vars={{ labels }}>
 (async () => {
+  try {
+    const me = await fetch('/api/me', { credentials: 'include' });
+    if (!me.ok) return;
+  } catch { return; }
   let data;
   try {
     const r = await fetch('/api/stats');
diff --git a/site/src/pages/about/es/index.astro b/site/src/pages/about/es/index.astro
index 0bf6edb..610b38a 100644
--- a/site/src/pages/about/es/index.astro
+++ b/site/src/pages/about/es/index.astro
@@ -142,6 +142,10 @@ const labels = {
 
 <script define:vars={{ labels }}>
 (async () => {
+  try {
+    const me = await fetch('/api/me', { credentials: 'include' });
+    if (!me.ok) return;
+  } catch { return; }
   let data;
   try {
     const r = await fetch('/api/stats');
diff --git a/site/src/pages/about/index.astro b/site/src/pages/about/index.astro
index da7520b..5340971 100644
--- a/site/src/pages/about/index.astro
+++ b/site/src/pages/about/index.astro
@@ -139,6 +139,10 @@ const labels = {
 
 <script define:vars={{ labels }}>
 (async () => {
+  try {
+    const me = await fetch('/api/me', { credentials: 'include' });
+    if (!me.ok) return;          // not logged in — hide community section
+  } catch { return; }
   let data;
   try {
     const r = await fetch('/api/stats');
diff --git a/site/src/pages/about/it/index.astro b/site/src/pages/about/it/index.astro
index e2a649d..eae5ce4 100644
--- a/site/src/pages/about/it/index.astro
+++ b/site/src/pages/about/it/index.astro
@@ -142,6 +142,10 @@ const labels = {
 
 <script define:vars={{ labels }}>
 (async () => {
+  try {
+    const me = await fetch('/api/me', { credentials: 'include' });
+    if (!me.ok) return;
+  } catch { return; }
   let data;
   try {
     const r = await fetch('/api/stats');

From 61349e6292bfe9fabbdd3f5a5037be0b5338ca31 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 17:44:52 +0200
Subject: [PATCH 023/124] fix: resize map before fitBounds and defer with rAF
 to avoid layout-timing glitch

---
 site/src/components/ActivityMap.svelte | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/site/src/components/ActivityMap.svelte b/site/src/components/ActivityMap.svelte
index 1131959..d094210 100644
--- a/site/src/components/ActivityMap.svelte
+++ b/site/src/components/ActivityMap.svelte
@@ -72,12 +72,17 @@
     });
   });
 
-  // Fit to bbox when detail JSON loads (bbox is null at map init)
+  // Fit to bbox when detail JSON loads (bbox is null at map init).
+  // Always resize first so MapLibre knows the real container dimensions,
+  // and defer with rAF so the browser has finished laying out the container.
   $: if (map && bbox) {
-    const fit = () => map.fitBounds(
-      [[bbox![0], bbox![1]], [bbox![2], bbox![3]]],
-      { padding: 40, animate: true },
-    );
+    const fit = () => requestAnimationFrame(() => {
+      map.resize();
+      map.fitBounds(
+        [[bbox![0], bbox![1]], [bbox![2], bbox![3]]],
+        { padding: 40, animate: false },
+      );
+    });
     map.loaded() ? fit() : map.once('load', fit);
   }
 

From eeed3fe3b2b2f39e3292374239316dc29d0f0674 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 17:48:23 +0200
Subject: [PATCH 024/124] =?UTF-8?q?=20=20Root=20cause=20of=20the=20404:=20?=
 =?UTF-8?q?=5Ftrigger=5Frebuild=20was=20firing=20bincio=20render=20(=3D=20?=
 =?UTF-8?q?full=20astro=20build),=20but:=20=20=201.=20The=20build=20took?=
 =?UTF-8?q?=20minutes=20=E2=86=92=20404=20during=20that=20window=20=20=202?=
 =?UTF-8?q?.=20Even=20after=20the=20build,=20the=20output=20lands=20in=20s?=
 =?UTF-8?q?ite/dist/=20=E2=80=94=20nginx=20serves=20from=20/var/www/bincio?=
 =?UTF-8?q?/=20which=20is=20only=20updated=20by=20the=20rsync=20in=20the?=
 =?UTF-8?q?=20post-receive=20hook,=20not=20by=20the=20server=20process?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

  Fixes applied:

  1. bincio/render/cli.py: Added --no-build flag — merges sidecars and updates manifests but skips astro build. This is fast (~1 second).
  2. bincio/serve/server.py _trigger_rebuild: Now passes --no-build. After an upload, _merged/ and root index.json are updated immediately, so the feed reflects the new activity. The static Astro pages are
  only rebuilt on git push.
  3. site/src/components/ActivityDetailLoader.svelte (new): Svelte component that reads the activity ID from the URL, calls loadIndex to resolve the shard tree, then renders ActivityDetail dynamically — no
  pre-built page needed.
  4. site/src/pages/activity/index.astro (new): Generic Astro shell page that renders ActivityDetailLoader. Gets compiled to dist/activity/index.html.
  5. docs/deployment/vps.md: Added location /activity/ { try_files $uri $uri/ /activity/index.html; } to the nginx config. When a request arrives for /activity/2026-04-06T153345Z/ and no pre-built file
  exists, nginx serves the shell, which loads the data dynamically from /data/ (which nginx already serves live from disk).
---
 bincio/render/cli.py                          | 10 ++++-
 bincio/serve/server.py                        |  3 +-
 docs/deployment/vps.md                        | 11 +++++
 .../components/ActivityDetailLoader.svelte    | 40 +++++++++++++++++++
 site/src/pages/activity/index.astro           |  7 ++++
 5 files changed, 69 insertions(+), 2 deletions(-)
 create mode 100644 site/src/components/ActivityDetailLoader.svelte
 create mode 100644 site/src/pages/activity/index.astro

diff --git a/bincio/render/cli.py b/bincio/render/cli.py
index e045f7e..de28527 100644
--- a/bincio/render/cli.py
+++ b/bincio/render/cli.py
@@ -168,6 +168,8 @@ def _link_data(site: Path, data: Path) -> None:
               help="Deploy after build. Currently supports: github.")
 @click.option("--handle", default=None,
               help="(Multi-user) Incrementally re-merge one user's shard only.")
+@click.option("--no-build", "no_build", is_flag=True,
+              help="Skip the Astro build step (just merge sidecars and update manifests).")
 def render(
     config_path: Optional[str],
     data_dir: Optional[str],
@@ -176,6 +178,7 @@ def render(
     serve: bool,
     deploy: Optional[str],
     handle: Optional[str],
+    no_build: bool,
 ) -> None:
     """Build (or serve) the BincioActivity static site from a BAS data store."""
 
@@ -185,9 +188,14 @@ def render(
     console.print(f"Site:  [cyan]{site}[/cyan]")
     console.print(f"Data:  [cyan]{data}[/cyan]")
 
-    _ensure_npm(site)
     _merge_edits(data, handle=handle)
     _write_root_manifest(data)
+
+    if no_build:
+        console.print("[green]Data updated.[/green] Skipping Astro build (--no-build).")
+        return
+
+    _ensure_npm(site)
     _link_data(site, data)
 
     env = {**os.environ, "BINCIO_DATA_DIR": str(data)}
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index ba620fb..c861b1a 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -175,7 +175,8 @@ def _trigger_rebuild(handle: str) -> None:
             [uv, "run", "bincio", "render",
              "--data-dir", str(data_dir),
              "--site-dir", str(site_dir),
-             "--handle", handle],
+             "--handle", handle,
+             "--no-build"],
             stdout=subprocess.DEVNULL,
             stderr=subprocess.DEVNULL,
         )
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 921be5e..5b79f92 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -253,6 +253,17 @@ server {
         add_header Cache-Control "no-cache, must-revalidate";
     }
 
+    # Activity detail pages: fall back to the dynamic shell for activities uploaded
+    # after the last site build (avoids 404 while waiting for a rebuild).
+    location /activity/ {
+        try_files $uri $uri/ /activity/index.html;
+    }
+
+    # Per-user profile pages: same fallback for new users.
+    location /u/ {
+        try_files $uri $uri/ =404;
+    }
+
     # Static files
     location / {
         try_files $uri $uri/ $uri.html =404;
diff --git a/site/src/components/ActivityDetailLoader.svelte b/site/src/components/ActivityDetailLoader.svelte
new file mode 100644
index 0000000..a0482c7
--- /dev/null
+++ b/site/src/components/ActivityDetailLoader.svelte
@@ -0,0 +1,40 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import { loadIndex } from '../lib/dataloader';
+  import ActivityDetail from './ActivityDetail.svelte';
+  import type { ActivitySummary } from '../lib/types';
+
+  export let base: string = '/';
+
+  let activity: ActivitySummary | null = null;
+  let notFound = false;
+  let loading = true;
+
+  onMount(async () => {
+    // Extract activity ID from the URL path: /activity/{id}/
+    const match = window.location.pathname.match(/\/activity\/([^/]+)/);
+    const id = match?.[1];
+    if (!id) { notFound = true; loading = false; return; }
+
+    try {
+      const index = await loadIndex(base);
+      activity = index.activities.find(a => a.id === id) ?? null;
+      if (!activity) notFound = true;
+    } catch {
+      notFound = true;
+    }
+    loading = false;
+  });
+</script>
+
+{#if loading}
+  <p class="text-zinc-500 text-sm mt-8 text-center">Loading activity…</p>
+{:else if notFound}
+  <div class="text-center mt-16">
+    <p class="text-zinc-400 text-sm mb-2">Activity not found.</p>
+    <p class="text-zinc-600 text-xs">It may still be processing — try refreshing in a moment.</p>
+    <a href={base} class="mt-4 inline-block text-blue-400 hover:text-blue-300 text-sm">← Back to feed</a>
+  </div>
+{:else if activity}
+  <ActivityDetail {activity} {base} />
+{/if}
diff --git a/site/src/pages/activity/index.astro b/site/src/pages/activity/index.astro
new file mode 100644
index 0000000..453a95d
--- /dev/null
+++ b/site/src/pages/activity/index.astro
@@ -0,0 +1,7 @@
+---
+import Base from '../../layouts/Base.astro';
+import ActivityDetailLoader from '../../components/ActivityDetailLoader.svelte';
+---
+<Base title="Activity — BincioActivity">
+  <ActivityDetailLoader base={import.meta.env.BASE_URL} client:only="svelte" />
+</Base>

From f67e7552fd544c6b779dcaf122227f0788284db5 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 17:55:24 +0200
Subject: [PATCH 025/124] fix to strava sync

---
 bincio/serve/server.py       | 65 ++++++++++++++++++++++++++++++++++++
 tests/test_server_imports.py |  3 ++
 2 files changed, 68 insertions(+)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index c861b1a..0b23d83 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -18,6 +18,7 @@ from pathlib import Path
 from typing import Any, Optional
 
 from fastapi import Cookie, FastAPI, File, Form, HTTPException, Request, Response, UploadFile
+from fastapi.responses import RedirectResponse
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.middleware.gzip import GZipMiddleware
 from fastapi.responses import JSONResponse
@@ -643,6 +644,70 @@ async def submit_feedback(
     return JSONResponse({"ok": True, "id": submission_id})
 
 
+# ── Strava ────────────────────────────────────────────────────────────────────
+
+_strava_oauth_states: set[str] = set()
+
+
+@app.get("/api/strava/status")
+async def strava_status(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    user = _require_user(bincio_session)
+    if not strava_client_id:
+        return JSONResponse({"configured": False, "connected": False, "last_sync": None})
+    dd = _get_data_dir() / user.handle
+    token_path = dd / "strava_token.json"
+    connected = token_path.exists()
+    last_sync = None
+    if connected:
+        try:
+            token = json.loads(token_path.read_text())
+            last_sync = token.get("last_sync_at")
+        except Exception:
+            pass
+    return JSONResponse({"configured": True, "connected": connected, "last_sync": last_sync})
+
+
+@app.get("/api/strava/auth-url")
+async def strava_auth_url(request: Request, bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    _require_user(bincio_session)
+    if not strava_client_id:
+        raise HTTPException(400, "Strava client ID not configured on this server")
+    state = secrets.token_urlsafe(16)
+    _strava_oauth_states.add(state)
+    redirect_uri = str(request.url_for("strava_callback"))
+    from bincio.extract.strava_api import auth_url
+    return JSONResponse({"url": auth_url(strava_client_id, redirect_uri, state=state)})
+
+
+@app.get("/api/strava/callback", name="strava_callback")
+async def strava_callback(
+    request: Request,
+    code: str = "",
+    error: str = "",
+    state: str = "",
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> RedirectResponse:
+    site_origin = str(request.base_url).rstrip("/")
+    if error or not code:
+        return RedirectResponse(f"{site_origin}/?strava=error")
+    if state not in _strava_oauth_states:
+        return RedirectResponse(f"{site_origin}/?strava=error")
+    _strava_oauth_states.discard(state)
+    user = _current_user(bincio_session)
+    if not user:
+        return RedirectResponse(f"{site_origin}/?strava=error")
+    if not strava_client_id or not strava_client_secret:
+        return RedirectResponse(f"{site_origin}/?strava=error")
+    dd = _get_data_dir() / user.handle
+    from bincio.extract.strava_api import StravaError, exchange_code, save_token
+    try:
+        token = exchange_code(strava_client_id, strava_client_secret, code)
+    except StravaError:
+        return RedirectResponse(f"{site_origin}/?strava=error")
+    save_token(dd, token)
+    return RedirectResponse(f"{site_origin}/?strava=connected")
+
+
 @app.post("/api/strava/sync")
 async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     user = _require_user(bincio_session)
diff --git a/tests/test_server_imports.py b/tests/test_server_imports.py
index 524e52b..76c55ac 100644
--- a/tests/test_server_imports.py
+++ b/tests/test_server_imports.py
@@ -14,6 +14,9 @@ def test_serve_app_has_routes():
     paths = {r.path for r in app.routes}
     assert "/api/me" in paths
     assert "/api/upload" in paths
+    assert "/api/strava/status" in paths
+    assert "/api/strava/auth-url" in paths
+    assert "/api/strava/callback" in paths
     assert "/api/strava/sync" in paths
     assert "/api/register" in paths
 

From e2765ea0123110c845ca7c473b77f587055db2dc Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 18:01:32 +0200
Subject: [PATCH 026/124] fix for strava auth

---
 bincio/serve/cli.py    | 5 ++++-
 bincio/serve/server.py | 8 ++++++--
 docs/deployment/vps.md | 3 ++-
 3 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/bincio/serve/cli.py b/bincio/serve/cli.py
index 085ce0b..ae07a44 100644
--- a/bincio/serve/cli.py
+++ b/bincio/serve/cli.py
@@ -19,9 +19,10 @@ console = Console()
 @click.option("--strava-client-id", default=None, envvar="STRAVA_CLIENT_ID", help="Strava OAuth client ID (enables per-user Strava sync)")
 @click.option("--strava-client-secret", default=None, envvar="STRAVA_CLIENT_SECRET", help="Strava OAuth client secret")
 @click.option("--max-users", default=None, type=int, help="Override max users for this instance (0 = unlimited; updates the DB setting)")
+@click.option("--public-url", default=None, envvar="PUBLIC_URL", help="Public base URL (e.g. https://yourdomain.com). Required for Strava OAuth to work behind a reverse proxy.")
 def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
           strava_client_id: Optional[str], strava_client_secret: Optional[str],
-          max_users: Optional[int]) -> None:
+          max_users: Optional[int], public_url: Optional[str]) -> None:
     """Start the bincio multi-user application server.
 
     Handles auth, user management, and write operations.
@@ -51,6 +52,8 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
         srv.strava_client_id = strava_client_id
     if strava_client_secret:
         srv.strava_client_secret = strava_client_secret
+    if public_url:
+        srv.public_url = public_url
 
     db = open_db(dd)
     current_limit = get_setting(db, "max_users")
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 0b23d83..9b8ab9f 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -48,6 +48,7 @@ data_dir: Path | None = None
 site_dir: Path | None = None   # for post-write rebuild trigger
 strava_client_id: str = ""
 strava_client_secret: str = ""
+public_url: str = ""   # e.g. "https://yourdomain.com" — used for OAuth redirect URIs
 _db = None  # sqlite3.Connection, opened lazily
 
 
@@ -674,7 +675,10 @@ async def strava_auth_url(request: Request, bincio_session: Optional[str] = Cook
         raise HTTPException(400, "Strava client ID not configured on this server")
     state = secrets.token_urlsafe(16)
     _strava_oauth_states.add(state)
-    redirect_uri = str(request.url_for("strava_callback"))
+    if public_url:
+        redirect_uri = public_url.rstrip("/") + "/api/strava/callback"
+    else:
+        redirect_uri = str(request.url_for("strava_callback"))
     from bincio.extract.strava_api import auth_url
     return JSONResponse({"url": auth_url(strava_client_id, redirect_uri, state=state)})
 
@@ -687,7 +691,7 @@ async def strava_callback(
     state: str = "",
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> RedirectResponse:
-    site_origin = str(request.base_url).rstrip("/")
+    site_origin = public_url.rstrip("/") if public_url else str(request.base_url).rstrip("/")
     if error or not code:
         return RedirectResponse(f"{site_origin}/?strava=error")
     if state not in _strava_oauth_states:
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 5b79f92..4c1e905 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -114,7 +114,8 @@ ExecStart=/root/.local/bin/uv run bincio serve \
     --data-dir /var/bincio/data \
     --site-dir /opt/bincio/site \
     --host 127.0.0.1 \
-    --port 4041
+    --port 4041 \
+    --public-url https://yourdomain.com
 EnvironmentFile=/etc/bincio/secrets.env
 Restart=always
 RestartSec=5

From cf414a08ad144755282aa4c22c6241763a4ffed1 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 18:13:32 +0200
Subject: [PATCH 027/124] fix strava import?

---
 bincio/extract/ingest.py     | 66 +++++++++++++++++++++++++-----------
 bincio/serve/server.py       | 33 +++++++++++++++++-
 site/src/layouts/Base.astro  | 59 ++++++++++++++++++++++----------
 tests/test_server_imports.py |  1 +
 4 files changed, 122 insertions(+), 37 deletions(-)

diff --git a/bincio/extract/ingest.py b/bincio/extract/ingest.py
index dedb4fc..24daf4e 100644
--- a/bincio/extract/ingest.py
+++ b/bincio/extract/ingest.py
@@ -76,24 +76,19 @@ def ingest_parsed(
     return activity_id
 
 
-def strava_sync(
+def strava_sync_iter(
     data_dir: Path,
     client_id: str,
     client_secret: str,
     originals_dir: Optional[Path] = None,
-) -> dict[str, Any]:
-    """Fetch new Strava activities and ingest them into data_dir.
+):
+    """Generator version of strava_sync — yields progress dicts, then a final summary.
 
-    Args:
-        data_dir:      Per-user data directory.
-        client_id:     Strava OAuth client ID.
-        client_secret: Strava OAuth client secret.
-
-    Returns:
-        Dict with keys: ok, imported, skipped, error_count, errors.
-
-    Raises:
-        RuntimeError: If Strava credentials are missing or API calls fail.
+    Each yielded dict has a ``type`` key:
+      - ``"fetching"``  — about to fetch the activity list from Strava
+      - ``"progress"``  — one activity processed; keys: n, total, name, status ("imported"|"skipped"|"error")
+      - ``"done"``      — final summary; keys: imported, skipped, error_count, errors
+      - ``"error"``     — fatal error before processing started; key: message
     """
     import time
 
@@ -109,28 +104,36 @@ def strava_sync(
     from bincio.extract.writer import make_activity_id
 
     if not client_id or not client_secret:
-        raise RuntimeError("Strava not configured (missing client_id or client_secret)")
+        yield {"type": "error", "message": "Strava not configured"}
+        return
 
     try:
         token = ensure_fresh(data_dir, client_id, client_secret)
     except StravaError as e:
-        raise RuntimeError(str(e)) from e
+        yield {"type": "error", "message": str(e)}
+        return
+
+    yield {"type": "fetching"}
 
     after: Optional[int] = token.get("last_sync_at")
     try:
         activities = fetch_activities(token["access_token"], after=after)
     except StravaError as e:
-        raise RuntimeError(str(e)) from e
+        yield {"type": "error", "message": str(e)}
+        return
 
+    total = len(activities)
     imported = 0
     skipped = 0
     errors: list[str] = []
 
-    for meta in activities:
+    for n, meta in enumerate(activities, 1):
+        name = meta.get("name", "Untitled")
         try:
             activity_id = make_activity_id(strava_meta_to_partial(meta))
             if (data_dir / "activities" / f"{activity_id}.json").exists():
                 skipped += 1
+                yield {"type": "progress", "n": n, "total": total, "name": name, "status": "skipped"}
                 continue
             streams = fetch_streams(token["access_token"], meta["id"])
             if originals_dir is not None:
@@ -142,16 +145,41 @@ def strava_sync(
             parsed = strava_to_parsed(meta, streams)
             ingest_parsed(parsed, data_dir, privacy="public", rdp_epsilon=0.0001)
             imported += 1
+            yield {"type": "progress", "n": n, "total": total, "name": name, "status": "imported"}
         except Exception as exc:
             errors.append(f"{meta.get('id')}: {type(exc).__name__}")
+            yield {"type": "progress", "n": n, "total": total, "name": name, "status": "error"}
 
     token["last_sync_at"] = int(time.time())
     save_token(data_dir, token)
 
-    return {
-        "ok": True,
+    yield {
+        "type": "done",
         "imported": imported,
         "skipped": skipped,
         "error_count": len(errors),
         "errors": errors[:5],
     }
+
+
+def strava_sync(
+    data_dir: Path,
+    client_id: str,
+    client_secret: str,
+    originals_dir: Optional[Path] = None,
+) -> dict[str, Any]:
+    """Fetch new Strava activities and ingest them into data_dir.
+
+    Returns:
+        Dict with keys: ok, imported, skipped, error_count, errors.
+
+    Raises:
+        RuntimeError: If Strava credentials are missing or API calls fail.
+    """
+    result: dict[str, Any] = {}
+    for event in strava_sync_iter(data_dir, client_id, client_secret, originals_dir):
+        if event["type"] == "error":
+            raise RuntimeError(event["message"])
+        if event["type"] == "done":
+            result = event
+    return {"ok": True, **{k: v for k, v in result.items() if k != "type"}}
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 9b8ab9f..3646648 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -18,7 +18,7 @@ from pathlib import Path
 from typing import Any, Optional
 
 from fastapi import Cookie, FastAPI, File, Form, HTTPException, Request, Response, UploadFile
-from fastapi.responses import RedirectResponse
+from fastapi.responses import RedirectResponse, StreamingResponse
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.middleware.gzip import GZipMiddleware
 from fastapi.responses import JSONResponse
@@ -712,6 +712,37 @@ async def strava_callback(
     return RedirectResponse(f"{site_origin}/?strava=connected")
 
 
+@app.get("/api/strava/sync/stream")
+async def serve_strava_sync_stream(bincio_session: Optional[str] = Cookie(default=None)) -> StreamingResponse:
+    """SSE endpoint — streams per-activity progress then a final summary event."""
+    user = _require_user(bincio_session)
+    if not strava_client_id or not strava_client_secret:
+        raise HTTPException(400, "Strava not configured on this server")
+    dd = _get_data_dir() / user.handle
+    store_orig_setting = get_setting(_get_db(), "store_originals")
+    store_orig = store_orig_setting == "true"
+    originals_dir = (dd / "originals" / "strava") if store_orig else None
+    if originals_dir:
+        originals_dir.mkdir(parents=True, exist_ok=True)
+
+    from bincio.extract.ingest import strava_sync_iter
+
+    def event_stream():
+        try:
+            for event in strava_sync_iter(dd, strava_client_id, strava_client_secret, originals_dir):
+                yield f"data: {json.dumps(event)}\n\n"
+                if event["type"] == "done":
+                    _trigger_rebuild(user.handle)
+        except Exception as exc:
+            yield f"data: {json.dumps({'type': 'error', 'message': str(exc)})}\n\n"
+
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
+
+
 @app.post("/api/strava/sync")
 async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     user = _require_user(bincio_session)
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 5f33ad2..da29b81 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -561,26 +561,51 @@ try {
         }
       });
 
-      stravaSyncBtn.addEventListener('click', async () => {
+      stravaSyncBtn.addEventListener('click', () => {
         stravaSyncBtn.disabled = true;
         stravaSyncBtn.textContent = 'Syncing…';
         stravaStatus.textContent = '';
-        try {
-          const r = await fetch(`${editUrl}/api/strava/sync`, { method: 'POST' });
-          if (!r.ok) throw new Error(await r.text());
-          const d = await r.json();
-          stravaLastSync.textContent = new Date().toLocaleString();
-          const errNote = d.error_count ? `, ${d.error_count} errors` : '';
-          stravaStatus.textContent = `Done — ${d.imported} imported, ${d.skipped} already up to date${errNote}.`;
-          stravaStatus.style.color = '#4ade80';
-          if (d.imported > 0) setTimeout(() => window.location.reload(), 1500);
-        } catch (e) {
-          stravaStatus.textContent = 'Error: ' + e.message;
-          stravaStatus.style.color = '#f87171';
-        } finally {
-          stravaSyncBtn.disabled = false;
-          stravaSyncBtn.textContent = 'Sync now';
-        }
+        stravaStatus.style.color = '';
+
+        const es = new EventSource(`${editUrl}/api/strava/sync/stream`, { withCredentials: true });
+        let imported = 0;
+
+        es.onmessage = (e) => {
+          const d = JSON.parse(e.data);
+          if (d.type === 'fetching') {
+            stravaStatus.textContent = 'Fetching activity list from Strava…';
+          } else if (d.type === 'progress') {
+            const pct = Math.round((d.n / d.total) * 100);
+            const icon = d.status === 'imported' ? '↓' : d.status === 'error' ? '✗' : '·';
+            stravaStatus.textContent = `${icon} ${d.n}/${d.total} (${pct}%) — ${d.name}`;
+            if (d.status === 'imported') imported++;
+          } else if (d.type === 'done') {
+            es.close();
+            stravaLastSync.textContent = new Date().toLocaleString();
+            const errNote = d.error_count ? `, ${d.error_count} errors` : '';
+            stravaStatus.textContent = `Done — ${d.imported} imported, ${d.skipped} already up to date${errNote}.`;
+            stravaStatus.style.color = '#4ade80';
+            stravaSyncBtn.disabled = false;
+            stravaSyncBtn.textContent = 'Sync now';
+            if (d.imported > 0) setTimeout(() => window.location.reload(), 1500);
+          } else if (d.type === 'error') {
+            es.close();
+            stravaStatus.textContent = 'Error: ' + d.message;
+            stravaStatus.style.color = '#f87171';
+            stravaSyncBtn.disabled = false;
+            stravaSyncBtn.textContent = 'Sync now';
+          }
+        };
+
+        es.onerror = () => {
+          es.close();
+          if (stravaSyncBtn.disabled) {
+            stravaStatus.textContent = 'Connection lost. Check logs.';
+            stravaStatus.style.color = '#f87171';
+            stravaSyncBtn.disabled = false;
+            stravaSyncBtn.textContent = 'Sync now';
+          }
+        };
       });
 
       async function stravaReset(mode) {
diff --git a/tests/test_server_imports.py b/tests/test_server_imports.py
index 76c55ac..8ac4c7d 100644
--- a/tests/test_server_imports.py
+++ b/tests/test_server_imports.py
@@ -18,6 +18,7 @@ def test_serve_app_has_routes():
     assert "/api/strava/auth-url" in paths
     assert "/api/strava/callback" in paths
     assert "/api/strava/sync" in paths
+    assert "/api/strava/sync/stream" in paths
     assert "/api/register" in paths
 
 

From 3e4ff4019bd864ec4bd305db34c76f83f63d2588 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 18:13:49 +0200
Subject: [PATCH 028/124] limit number of workers

---
 bincio/extract/cli.py    | 2 +-
 bincio/extract/config.py | 2 ++
 docs/deployment/vps.md   | 2 ++
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/bincio/extract/cli.py b/bincio/extract/cli.py
index b95ec37..6ddf179 100644
--- a/bincio/extract/cli.py
+++ b/bincio/extract/cli.py
@@ -171,7 +171,7 @@ def extract(
     dedup = DedupIndex(output_dir=cfg.output_dir)
     known_hashes: frozenset = frozenset(dedup._by_hash.keys())
 
-    n_workers = workers or os.cpu_count() or 4
+    n_workers = workers or cfg.workers or os.cpu_count() or 4
     console.print(f"Using [bold]{n_workers}[/bold] worker processes.")
 
     owner = {"handle": cfg.owner_handle, "display_name": cfg.owner_display_name}
diff --git a/bincio/extract/config.py b/bincio/extract/config.py
index 1c8c6a1..baa72d6 100644
--- a/bincio/extract/config.py
+++ b/bincio/extract/config.py
@@ -51,6 +51,7 @@ class ExtractConfig:
     track: TrackConfig = field(default_factory=TrackConfig)
     classifier: ClassifierConfig = field(default_factory=ClassifierConfig)
     incremental: bool = True
+    workers: Optional[int] = None   # None → use CPU count
     owner_handle: str = "me"
     owner_display_name: str = "Me"
     athlete: AthleteConfig | None = None
@@ -109,6 +110,7 @@ def load_config(path: Path) -> ExtractConfig:
         track=track,
         classifier=classifier,
         incremental=raw.get("incremental", True),
+        workers=raw.get("workers"),
         owner_handle=owner.get("handle", "me"),
         owner_display_name=owner.get("display_name", "Me"),
         athlete=athlete,
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 4c1e905..1a5f9b5 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -206,6 +206,8 @@ sources:
 
 output:
   dir: /var/bincio/data
+
+workers: 2   # cap extract parallelism on the VPS (default: all CPUs)
 ```
 
 Sync and extract (run from your laptop or SSH in):

From 816f103b4cc8681a075de30a7d1040170b1e0a41 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 18:20:35 +0200
Subject: [PATCH 029/124] fix: write empty index.json for new users at
 registration so shard resolves immediately

---
 bincio/serve/server.py | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 3646648..1b07965 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -286,11 +286,18 @@ async def register(request: Request) -> JSONResponse:
 
     # Create per-user directories
     dd = _get_data_dir()
-    (dd / handle / "activities").mkdir(parents=True, exist_ok=True)
-    (dd / handle / "edits").mkdir(parents=True, exist_ok=True)
+    user_dir = dd / handle
+    (user_dir / "activities").mkdir(parents=True, exist_ok=True)
+    (user_dir / "edits").mkdir(parents=True, exist_ok=True)
+
+    # Write an empty index.json so the shard URL resolves immediately,
+    # even before the user uploads any activities.
+    from bincio.extract.writer import write_index
+    index_path = user_dir / "index.json"
+    if not index_path.exists():
+        write_index([], user_dir, {"handle": handle, "display_name": display or handle})
 
     # Update root manifest so the new user's shard is discoverable immediately
-    # (Astro dev re-evaluates getStaticPaths() on each request from this file)
     from bincio.render.cli import _write_root_manifest
     _write_root_manifest(dd)
 

From 9fd088c693fcea67a7f110bffecca264c564678f Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 18:34:53 +0200
Subject: [PATCH 030/124] =?UTF-8?q?=20=20-=20"Last=20sync:=20never":=20The?=
 =?UTF-8?q?=20old=20blocking=20sync=20was=20killed=20by=20nginx=20at=20120?=
 =?UTF-8?q?s=20before=20save=5Ftoken=20was=20reached.=20The=20activities?=
 =?UTF-8?q?=20made=20it=20to=20disk=20(ingestion=20happens=20per-activity?=
 =?UTF-8?q?=20as=20it=20goes),=20but=20the=20token's=20=20=20last=5Fsync?=
 =?UTF-8?q?=5Fat=20timestamp=20was=20never=20written.=20After=20deploying,?=
 =?UTF-8?q?=20do=20a=20soft=20reset=20=E2=80=94=20it'll=20set=20last=5Fsyn?=
 =?UTF-8?q?c=5Fat=20to=20your=20most=20recent=20activity's=20timestamp=20s?=
 =?UTF-8?q?o=20the=20next=20sync=20only=20fetches=20newer=20ones.=20=20=20?=
 =?UTF-8?q?-=20Reset=20404:=20Added=20POST=20/api/strava/reset=20to=20serv?=
 =?UTF-8?q?e/server.py.=20The=20soft=20reset=20now=20looks=20in=20=5Fmerge?=
 =?UTF-8?q?d/index.json=20first=20(multi-user=20path),=20falling=20back=20?=
 =?UTF-8?q?to=20index.json.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bincio/serve/server.py | 65 ++++++++++++++++++++++++++++++++++++------
 1 file changed, 57 insertions(+), 8 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 1b07965..83051fa 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -663,16 +663,65 @@ async def strava_status(bincio_session: Optional[str] = Cookie(default=None)) ->
     if not strava_client_id:
         return JSONResponse({"configured": False, "connected": False, "last_sync": None})
     dd = _get_data_dir() / user.handle
-    token_path = dd / "strava_token.json"
-    connected = token_path.exists()
-    last_sync = None
-    if connected:
+    from bincio.extract.strava_api import load_token
+    token = load_token(dd)
+    return JSONResponse({
+        "configured": True,
+        "connected": token is not None,
+        "last_sync": token.get("last_sync_at") if token else None,
+    })
+
+
+@app.post("/api/strava/reset")
+async def strava_reset(request: Request, bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Reset last_sync_at so the next sync re-fetches from a chosen point.
+
+    mode=soft  — set to the started_at of the most recent activity on disk
+                 (next sync only fetches activities newer than the last known one)
+    mode=hard  — clear last_sync_at entirely
+                 (next sync re-downloads full Strava history, skipping existing files)
+    """
+    user = _require_user(bincio_session)
+    dd = _get_data_dir() / user.handle
+    from bincio.extract.strava_api import load_token, save_token
+    token = load_token(dd)
+    if token is None:
+        raise HTTPException(400, "Not connected to Strava")
+
+    body = await request.json()
+    mode = body.get("mode", "soft")
+
+    if mode == "hard":
+        token.pop("last_sync_at", None)
+        save_token(dd, token)
+        return JSONResponse({"ok": True, "mode": "hard", "last_sync_at": None})
+
+    # soft: find the most recent started_at across the user's merged index
+    from datetime import datetime, timezone
+    last_ts: int | None = None
+    for index_path in [dd / "_merged" / "index.json", dd / "index.json"]:
+        if not index_path.exists():
+            continue
         try:
-            token = json.loads(token_path.read_text())
-            last_sync = token.get("last_sync_at")
+            index_data = json.loads(index_path.read_text(encoding="utf-8"))
+            started_ats = [
+                a.get("started_at") for a in index_data.get("activities", [])
+                if a.get("started_at")
+            ]
+            if started_ats:
+                latest = max(started_ats)
+                dt = datetime.fromisoformat(latest.replace("Z", "+00:00"))
+                last_ts = int(dt.astimezone(timezone.utc).timestamp())
+                break
         except Exception:
-            pass
-    return JSONResponse({"configured": True, "connected": connected, "last_sync": last_sync})
+            continue
+
+    if last_ts is None:
+        token.pop("last_sync_at", None)
+    else:
+        token["last_sync_at"] = last_ts
+    save_token(dd, token)
+    return JSONResponse({"ok": True, "mode": "soft", "last_sync_at": last_ts})
 
 
 @app.get("/api/strava/auth-url")

From e5eadc69f2dbd5491328755644705379af90a478 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 19:20:00 +0200
Subject: [PATCH 031/124] fix: remove double px-4 on user profile page headers

---
 site/src/pages/u/[handle]/athlete/index.astro | 2 +-
 site/src/pages/u/[handle]/index.astro         | 2 +-
 site/src/pages/u/[handle]/stats/index.astro   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/site/src/pages/u/[handle]/athlete/index.astro b/site/src/pages/u/[handle]/athlete/index.astro
index 137186d..705f7bf 100644
--- a/site/src/pages/u/[handle]/athlete/index.astro
+++ b/site/src/pages/u/[handle]/athlete/index.astro
@@ -20,7 +20,7 @@ const indexUrl = `${mergedBase}index.json`;
 const athleteUrl = `${mergedBase}athlete.json`;
 ---
 <Base title={`@${handle} Athlete — BincioActivity`}>
-  <div class="max-w-5xl mx-auto px-4 pt-6 pb-2">
+  <div class="pb-2">
     <div class="flex items-start justify-between">
       <div>
         <h1 class="text-2xl font-bold text-white mb-0.5">@{handle}</h1>
diff --git a/site/src/pages/u/[handle]/index.astro b/site/src/pages/u/[handle]/index.astro
index 2193f97..a5ea76e 100644
--- a/site/src/pages/u/[handle]/index.astro
+++ b/site/src/pages/u/[handle]/index.astro
@@ -20,7 +20,7 @@ const { handle, shardUrl } = Astro.props as { handle: string; shardUrl: string }
 const base = import.meta.env.BASE_URL;
 ---
 <Base title={`@${handle} — BincioActivity`}>
-  <div class="max-w-5xl mx-auto px-4 pt-6 pb-2 flex items-center gap-4">
+  <div class="flex items-center gap-4 mb-2">
     <div>
       <h1 class="text-2xl font-bold text-white mb-0.5">@{handle}</h1>
       <nav id="profile-subnav" class="flex gap-4 mt-1">
diff --git a/site/src/pages/u/[handle]/stats/index.astro b/site/src/pages/u/[handle]/stats/index.astro
index b655e94..745b6e2 100644
--- a/site/src/pages/u/[handle]/stats/index.astro
+++ b/site/src/pages/u/[handle]/stats/index.astro
@@ -18,7 +18,7 @@ const base = import.meta.env.BASE_URL;
 const indexUrl = `${base}data/${handle}/_merged/index.json`;
 ---
 <Base title={`@${handle} Stats — BincioActivity`}>
-  <div class="max-w-5xl mx-auto px-4 pt-6 pb-2">
+  <div class="pb-2">
     <h1 class="text-2xl font-bold text-white mb-0.5">@{handle}</h1>
     <nav id="profile-subnav" class="flex gap-4 mt-1 mb-6">
       <a href={`${base}u/${handle}/`} class="text-sm text-zinc-400 hover:text-white transition-colors">Feed</a>

From 3b8bc159c55d58703c294d37ebe11dcb55c2fbfc Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 22:01:44 +0200
Subject: [PATCH 032/124] upload strava zip

---
 bincio/extract/ingest.py     |   5 +-
 bincio/extract/models.py     |   1 +
 bincio/extract/strava_api.py |   5 ++
 bincio/extract/strava_zip.py | 147 +++++++++++++++++++++++++++++++++++
 bincio/serve/server.py       |  49 ++++++++++++
 docs/deployment/vps.md       |   3 +-
 site/src/layouts/Base.astro  | 105 +++++++++++++++++++++++++
 tests/test_server_imports.py |   1 +
 8 files changed, 313 insertions(+), 3 deletions(-)
 create mode 100644 bincio/extract/strava_zip.py

diff --git a/bincio/extract/ingest.py b/bincio/extract/ingest.py
index 24daf4e..de44618 100644
--- a/bincio/extract/ingest.py
+++ b/bincio/extract/ingest.py
@@ -46,8 +46,9 @@ def ingest_parsed(
         raise FileExistsError(f"Activity already exists: {activity_id}")
 
     metrics = compute(parsed)
-    write_activity(parsed, metrics, data_dir, privacy=privacy, rdp_epsilon=rdp_epsilon)
-    summary = build_summary(parsed, metrics, activity_id, privacy)
+    effective_privacy = parsed.privacy if parsed.privacy is not None else privacy
+    write_activity(parsed, metrics, data_dir, privacy=effective_privacy, rdp_epsilon=rdp_epsilon)
+    summary = build_summary(parsed, metrics, activity_id, effective_privacy)
 
     index_path = data_dir / "index.json"
     if index_path.exists():
diff --git a/bincio/extract/models.py b/bincio/extract/models.py
index 253bb38..b5821b0 100644
--- a/bincio/extract/models.py
+++ b/bincio/extract/models.py
@@ -55,4 +55,5 @@ class ParsedActivity:
     description: Optional[str] = None
     gear: Optional[str] = None
     strava_id: Optional[str] = None
+    privacy: Optional[str] = None   # "public", "private", or None (caller decides)
     laps: list[LapData] = field(default_factory=list)
diff --git a/bincio/extract/strava_api.py b/bincio/extract/strava_api.py
index 348fbd7..c60ecd4 100644
--- a/bincio/extract/strava_api.py
+++ b/bincio/extract/strava_api.py
@@ -201,6 +201,10 @@ def strava_to_parsed(meta: dict, streams: dict) -> ParsedActivity:
     source = f"strava:{meta['id']}"
     source_hash = "sha256:" + hashlib.sha256(source.encode()).hexdigest()
 
+    # Map Strava visibility to BAS privacy: only_me → private, everything else → public
+    visibility = meta.get("visibility") or ""
+    is_private = meta.get("private", False) or visibility == "only_me"
+
     return ParsedActivity(
         points=points,
         sport=normalise_sport(meta.get("sport_type") or meta.get("type") or ""),
@@ -210,4 +214,5 @@ def strava_to_parsed(meta: dict, streams: dict) -> ParsedActivity:
         title=meta.get("name") or None,
         description=meta.get("description") or None,
         strava_id=str(meta["id"]),
+        privacy="private" if is_private else "public",
     )
diff --git a/bincio/extract/strava_zip.py b/bincio/extract/strava_zip.py
new file mode 100644
index 0000000..65777e7
--- /dev/null
+++ b/bincio/extract/strava_zip.py
@@ -0,0 +1,147 @@
+"""Process a Strava bulk export ZIP file into a BAS data store.
+
+The ZIP (downloaded from strava.com/athlete/delete_your_account or the data export
+page) contains:
+  activities/          ← GPX, FIT, TCX files (plain or .gz variants)
+  activities.csv       ← metadata (title, description, gear, strava ID)
+  bikes.csv / shoes.csv / … (ignored here)
+
+Processing strategy: stream one activity at a time to keep disk usage low.
+The ZIP is never fully extracted; each activity file is extracted to a temp path,
+parsed, ingested, then immediately deleted. The ZIP itself is deleted once done.
+"""
+
+from __future__ import annotations
+
+import io
+import json
+import tempfile
+import zipfile
+from pathlib import Path
+from typing import Generator, Optional
+
+
+# File extensions recognised as activity files inside the ZIP.
+_ACTIVITY_SUFFIXES = {".gpx", ".fit", ".tcx", ".gpx.gz", ".fit.gz", ".tcx.gz"}
+
+
+def _is_activity_file(name: str) -> bool:
+    n = name.lower()
+    return any(n.endswith(s) for s in _ACTIVITY_SUFFIXES)
+
+
+def strava_zip_iter(
+    zip_path: Path,
+    data_dir: Path,
+    originals_dir: Optional[Path] = None,
+) -> Generator[dict, None, None]:
+    """Process a Strava export ZIP, yielding SSE-style progress dicts.
+
+    Event types:
+      {"type": "validating"}
+      {"type": "error", "message": str}
+      {"type": "extracting_csv"}
+      {"type": "progress", "n": int, "total": int, "name": str, "status": "imported"|"skipped"|"error"}
+      {"type": "done", "imported": int, "skipped": int, "error_count": int, "errors": list[str]}
+
+    The zip_path file is deleted after processing regardless of success/failure.
+    """
+    from bincio.extract.ingest import ingest_parsed
+    from bincio.extract.parsers.factory import parse_file
+    from bincio.extract.strava_csv import StravaMetadata
+
+    yield {"type": "validating"}
+
+    try:
+        zf = zipfile.ZipFile(zip_path, "r")
+    except zipfile.BadZipFile as e:
+        zip_path.unlink(missing_ok=True)
+        yield {"type": "error", "message": f"Not a valid ZIP file: {e}"}
+        return
+
+    try:
+        names = zf.namelist()
+
+        # Validate structure
+        has_csv = "activities.csv" in names
+        activity_files = [n for n in names if n.startswith("activities/") and _is_activity_file(n)]
+
+        if not has_csv:
+            yield {"type": "error", "message": "This doesn't look like a Strava export: activities.csv not found"}
+            return
+        if not activity_files:
+            yield {"type": "error", "message": "No activity files found in activities/ folder"}
+            return
+
+        # Load activities.csv into memory (it's small — ~700 KB)
+        yield {"type": "extracting_csv"}
+        csv_bytes = zf.read("activities.csv")
+        with tempfile.NamedTemporaryFile(suffix=".csv", delete=False) as tmp_csv:
+            tmp_csv.write(csv_bytes)
+            tmp_csv_path = Path(tmp_csv.name)
+        try:
+            metadata = StravaMetadata(tmp_csv_path)
+        finally:
+            tmp_csv_path.unlink(missing_ok=True)
+
+        total = len(activity_files)
+        imported = 0
+        skipped = 0
+        errors: list[str] = []
+
+        for n, zip_entry in enumerate(activity_files, 1):
+            entry_name = Path(zip_entry).name  # e.g. "12345678.fit.gz"
+            # Title from metadata if available; fall back to filename stem
+            meta_row = metadata.lookup(entry_name)
+            display_name = (meta_row or {}).get("Activity Name", "").strip() or entry_name
+
+            # Determine activity ID from entry to check for duplicates before extracting
+            # (can't do this without parsing, so we extract to a small temp file)
+            suffix = "".join(Path(entry_name).suffixes)  # ".fit.gz" or ".gpx" etc.
+            tmp_path: Optional[Path] = None
+            try:
+                with tempfile.NamedTemporaryFile(suffix=suffix, delete=False, dir=data_dir) as tmp:
+                    tmp.write(zf.read(zip_entry))
+                    tmp_path = Path(tmp.name)
+
+                parsed = parse_file(tmp_path)
+
+                # Enrich with CSV metadata
+                if meta_row:
+                    if not parsed.title and meta_row.get("Activity Name"):
+                        parsed.title = meta_row["Activity Name"].strip()
+                    if not parsed.description and meta_row.get("Activity Description"):
+                        parsed.description = meta_row["Activity Description"].strip()
+                    if not parsed.strava_id and meta_row.get("Activity ID"):
+                        parsed.strava_id = meta_row["Activity ID"].strip()
+
+                if originals_dir is not None:
+                    import shutil
+                    orig_dest = originals_dir / entry_name
+                    shutil.copy2(tmp_path, orig_dest)
+
+                ingest_parsed(parsed, data_dir, privacy="public")
+                imported += 1
+                yield {"type": "progress", "n": n, "total": total, "name": display_name, "status": "imported"}
+
+            except FileExistsError:
+                skipped += 1
+                yield {"type": "progress", "n": n, "total": total, "name": display_name, "status": "skipped"}
+            except Exception as exc:
+                errors.append(f"{entry_name}: {type(exc).__name__}")
+                yield {"type": "progress", "n": n, "total": total, "name": display_name, "status": "error"}
+            finally:
+                if tmp_path is not None:
+                    tmp_path.unlink(missing_ok=True)
+
+    finally:
+        zf.close()
+        zip_path.unlink(missing_ok=True)
+
+    yield {
+        "type": "done",
+        "imported": imported,
+        "skipped": skipped,
+        "error_count": len(errors),
+        "errors": errors[:5],
+    }
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 83051fa..7c1f297 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -587,6 +587,55 @@ async def upload_activity(
     return JSONResponse({"ok": True, "added": len(added), "results": results})
 
 
+@app.post("/api/upload/strava-zip")
+async def upload_strava_zip(
+    file: UploadFile = File(...),
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> StreamingResponse:
+    """Accept a Strava bulk export ZIP and stream SSE progress while processing.
+
+    The ZIP is written to a temp file, processed activity-by-activity, then deleted.
+    Originals are never kept — the UI informs the user of this upfront.
+    """
+    user = _require_user(bincio_session)
+    if not file.filename or not file.filename.lower().endswith(".zip"):
+        raise HTTPException(400, "Please upload a .zip file")
+
+    dd = _get_data_dir() / user.handle
+    import tempfile
+    tmp = tempfile.NamedTemporaryFile(suffix=".zip", delete=False, dir=dd)
+    zip_path = Path(tmp.name)
+    try:
+        while chunk := await file.read(1024 * 1024):  # 1 MB chunks
+            tmp.write(chunk)
+    finally:
+        tmp.close()
+
+    from bincio.extract.strava_zip import strava_zip_iter
+    from bincio.render.merge import merge_all
+
+    def event_stream():
+        any_imported = False
+        try:
+            for event in strava_zip_iter(zip_path, dd):
+                yield f"data: {json.dumps(event)}\n\n"
+                if event.get("type") == "progress" and event.get("status") == "imported":
+                    any_imported = True
+                if event.get("type") == "done":
+                    if any_imported:
+                        merge_all(dd)
+                        _trigger_rebuild(user.handle)
+        except Exception as exc:
+            zip_path.unlink(missing_ok=True)
+            yield f"data: {json.dumps({'type': 'error', 'message': str(exc)})}\n\n"
+
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
+
+
 # ── Feedback ──────────────────────────────────────────────────────────────────
 
 _FEEDBACK_IMAGE_SUFFIXES = {".jpg", ".jpeg", ".png", ".gif", ".webp", ".heic"}
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 1a5f9b5..8842d08 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -239,7 +239,8 @@ server {
     root /var/www/bincio;
     index index.html;
 
-    client_max_body_size 512M;  # bulk activity uploads
+    client_max_body_size 2G;      # Strava export ZIPs can exceed 1 GB
+    client_body_timeout  300s;   # allow slow uploads without nginx dropping the connection
 
     # API → bincio serve
     location /api/ {
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index da29b81..85494f7 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -248,6 +248,16 @@ try {
                 <p id="strava-choose-sub" class="text-xs text-zinc-500">Checking…</p>
               </div>
             </button>
+            <button
+              id="upload-choose-zip"
+              class="flex items-center gap-3 p-4 rounded-lg border border-zinc-700 hover:border-zinc-500 hover:bg-zinc-800 transition-colors text-left"
+            >
+              <span class="text-2xl">📦</span>
+              <div>
+                <p class="text-sm font-medium text-white">Strava export ZIP</p>
+                <p class="text-xs text-zinc-500">Import your full Strava archive</p>
+              </div>
+            </button>
           </div>
         </div>
 
@@ -307,6 +317,22 @@ try {
           </div>
           <p id="strava-status" class="mt-3 text-xs text-center" style="min-height: 1.25rem"></p>
         </div>
+
+        <!-- View: Strava ZIP upload -->
+        <div id="upload-view-zip" style="display:none">
+          <button id="upload-back-zip" class="text-xs text-zinc-500 hover:text-white mb-3 transition-colors">← Back</button>
+          <div class="rounded-lg border border-amber-800/50 bg-amber-950/30 p-3 mb-4 text-xs text-amber-300 leading-relaxed">
+            ⚠ The ZIP will be processed and <strong>immediately deleted</strong> from the server — originals are not kept. Make sure you keep your own copy.
+          </div>
+          <div
+            id="zip-drop"
+            class="border-2 border-dashed border-zinc-700 rounded-lg p-6 text-center text-zinc-500 text-sm cursor-pointer hover:border-zinc-500 hover:text-zinc-300 transition-colors"
+          >
+            <div id="zip-label">Drop your Strava export .zip<br/>or click to browse</div>
+            <input id="zip-input" type="file" accept=".zip" class="hidden" />
+          </div>
+          <p id="zip-status" class="mt-3 text-xs text-center leading-relaxed" style="min-height: 1.25rem"></p>
+        </div>
       </div>
     </div>
   )}
@@ -403,10 +429,17 @@ try {
       const viewChoose    = document.getElementById('upload-view-choose');
       const viewFile      = document.getElementById('upload-view-file');
       const viewStrava    = document.getElementById('upload-view-strava');
+      const viewZip       = document.getElementById('upload-view-zip');
       const chooseFile    = document.getElementById('upload-choose-file');
       const chooseStrava  = document.getElementById('upload-choose-strava');
+      const chooseZip     = document.getElementById('upload-choose-zip');
       const backFile      = document.getElementById('upload-back-file');
       const backStrava    = document.getElementById('upload-back-strava');
+      const backZip       = document.getElementById('upload-back-zip');
+      const zipDrop       = document.getElementById('zip-drop');
+      const zipInput      = document.getElementById('zip-input');
+      const zipLabel      = document.getElementById('zip-label');
+      const zipStatus     = document.getElementById('zip-status');
       const drop              = document.getElementById('upload-drop');
       const input             = document.getElementById('upload-input');
       const label             = document.getElementById('upload-label');
@@ -427,6 +460,7 @@ try {
         viewChoose.style.display = name === 'choose' ? '' : 'none';
         viewFile.style.display   = name === 'file'   ? '' : 'none';
         viewStrava.style.display = name === 'strava' ? '' : 'none';
+        viewZip.style.display    = name === 'zip'    ? '' : 'none';
       }
 
       function openModal() {
@@ -446,8 +480,10 @@ try {
       document.addEventListener('keydown', e => { if (e.key === 'Escape' && modal.style.display !== 'none') closeModal(); });
 
       chooseFile.addEventListener('click', () => showView('file'));
+      chooseZip.addEventListener('click',  () => showView('zip'));
       backFile.addEventListener('click',   () => showView('choose'));
       backStrava.addEventListener('click', () => showView('choose'));
+      backZip.addEventListener('click',    () => showView('choose'));
 
       // ── file upload ───────────────────────────────────────────────────────
       drop.addEventListener('click', () => input.click());
@@ -638,6 +674,75 @@ try {
       stravaResetSoftBtn.addEventListener('click', () => stravaReset('soft'));
       stravaResetHardBtn.addEventListener('click', () => stravaReset('hard'));
 
+      // ── Strava ZIP upload ─────────────────────────────────────────────────
+      function doZipUpload(file) {
+        if (!file) return;
+        zipLabel.textContent = file.name;
+        zipStatus.textContent = 'Uploading…';
+        zipStatus.style.color = '';
+
+        const fd = new FormData();
+        fd.append('file', file);
+
+        // POST the file; server responds with SSE stream immediately after receiving body
+        const xhr = new XMLHttpRequest();
+        xhr.open('POST', `${editUrl}/api/upload/strava-zip`);
+        xhr.withCredentials = true;
+        xhr.setRequestHeader('Accept', 'text/event-stream');
+
+        let buf = '';
+        let imported = 0;
+
+        xhr.onprogress = () => {
+          // Parse SSE lines from the incrementally received response text
+          const newText = xhr.responseText.slice(buf.length);
+          buf = xhr.responseText;
+          for (const line of newText.split('\n')) {
+            if (!line.startsWith('data: ')) continue;
+            try {
+              const ev = JSON.parse(line.slice(6));
+              if (ev.type === 'validating') {
+                zipStatus.textContent = 'Validating ZIP structure…';
+              } else if (ev.type === 'extracting_csv') {
+                zipStatus.textContent = 'Reading activities.csv…';
+              } else if (ev.type === 'progress') {
+                const pct = Math.round((ev.n / ev.total) * 100);
+                const icon = ev.status === 'imported' ? '↓' : ev.status === 'error' ? '✗' : '·';
+                zipStatus.textContent = `${icon} ${ev.n}/${ev.total} (${pct}%) — ${ev.name}`;
+                if (ev.status === 'imported') imported++;
+              } else if (ev.type === 'done') {
+                const errNote = ev.error_count ? `, ${ev.error_count} errors` : '';
+                zipStatus.textContent = `Done — ${ev.imported} imported, ${ev.skipped} already up to date${errNote}.`;
+                zipStatus.style.color = '#4ade80';
+                zipInput.value = '';
+                if (ev.imported > 0) setTimeout(() => window.location.reload(), 1500);
+              } else if (ev.type === 'error') {
+                zipStatus.textContent = 'Error: ' + ev.message;
+                zipStatus.style.color = '#f87171';
+                zipInput.value = '';
+              }
+            } catch (_) {}
+          }
+        };
+
+        xhr.onerror = () => {
+          zipStatus.textContent = 'Upload failed — check your connection.';
+          zipStatus.style.color = '#f87171';
+        };
+
+        xhr.send(fd);
+      }
+
+      zipDrop.addEventListener('click', () => zipInput.click());
+      zipInput.addEventListener('change', () => doZipUpload(zipInput.files?.[0]));
+      zipDrop.addEventListener('dragover', e => { e.preventDefault(); zipDrop.classList.add('border-zinc-400'); });
+      zipDrop.addEventListener('dragleave', () => zipDrop.classList.remove('border-zinc-400'));
+      zipDrop.addEventListener('drop', e => {
+        e.preventDefault();
+        zipDrop.classList.remove('border-zinc-400');
+        doZipUpload(e.dataTransfer?.files?.[0]);
+      });
+
       // Handle ?strava= param set by the callback redirect (popup scenario)
       const sp = new URLSearchParams(window.location.search);
       if (sp.has('strava')) {
diff --git a/tests/test_server_imports.py b/tests/test_server_imports.py
index 8ac4c7d..63f11c4 100644
--- a/tests/test_server_imports.py
+++ b/tests/test_server_imports.py
@@ -14,6 +14,7 @@ def test_serve_app_has_routes():
     paths = {r.path for r in app.routes}
     assert "/api/me" in paths
     assert "/api/upload" in paths
+    assert "/api/upload/strava-zip" in paths
     assert "/api/strava/status" in paths
     assert "/api/strava/auth-url" in paths
     assert "/api/strava/callback" in paths

From fc6c00c6eb4453d6dcf756accdc3febb7ede8c3f Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 22:05:42 +0200
Subject: [PATCH 033/124] fix: mobile nav scrolls horizontally without spilling
 to page width

Logo and action buttons are shrink-0 anchors; nav links occupy the
remaining space with overflow-x:auto and a hidden scrollbar so they
scroll independently. body gets overflow-x:hidden to prevent the
whole page from drifting sideways on narrow screens.
---
 site/src/layouts/Base.astro | 37 ++++++++++++++++++++++---------------
 1 file changed, 22 insertions(+), 15 deletions(-)

diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 85494f7..9c1f76a 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -138,8 +138,12 @@ try {
     /* ── Base reset ─────────────────────────────────────────────────────── */
     * { box-sizing: border-box; }
     html { scroll-behavior: smooth; }
-    body { margin: 0; }
+    body { margin: 0; overflow-x: hidden; }
     .maplibregl-canvas { outline: none; }
+
+    /* Nav links scroll horizontally on narrow screens without a scrollbar */
+    .nav-links { scrollbar-width: none; -ms-overflow-style: none; }
+    .nav-links::-webkit-scrollbar { display: none; }
   </style>
 </head>
 <body
@@ -151,36 +155,39 @@ try {
     class="border-b border-zinc-800 sticky top-0 z-50 bg-zinc-950/90 backdrop-blur"
     style="border-color: var(--border)"
   >
-    <div class="max-w-7xl mx-auto px-4 h-12 flex items-center gap-6">
-      <a href={baseUrl} class="font-bold text-white tracking-tight hover:text-[--accent] transition-colors">
+    <div class="max-w-7xl mx-auto px-4 h-12 flex items-center gap-3">
+      <!-- Logo: always visible, never shrinks -->
+      <a href={baseUrl} class="font-bold text-white tracking-tight hover:text-[--accent] transition-colors shrink-0">
         Bincio<span class="text-[--accent]">Activity</span>
       </a>
       {!isPublicPage && (
-        <>
+        <!-- Links: scroll horizontally on mobile, no visible scrollbar -->
+        <div class="nav-links flex items-center gap-5 overflow-x-auto flex-1 min-w-0">
           <!-- Feed tab: only shown for multi-user (more than one shard) -->
           {!singleHandle && (
-            <a href={baseUrl} class="text-sm text-zinc-400 hover:text-white transition-colors">Feed</a>
+            <a href={baseUrl} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Feed</a>
           )}
           <!-- Single-user: static handle link. Multi-user: populated by user-widget script. -->
           {singleHandle
-            ? <a href={`${baseUrl}u/${singleHandle}/`} class="text-sm text-zinc-400 hover:text-white transition-colors">@{singleHandle}</a>
-            : <a id="nav-me" href="#" style="display:none" class="text-sm text-[--accent] hover:text-white transition-colors"></a>
+            ? <a href={`${baseUrl}u/${singleHandle}/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">@{singleHandle}</a>
+            : <a id="nav-me" href="#" style="display:none" class="text-sm text-[--accent] hover:text-white transition-colors shrink-0"></a>
           }
           <!-- Per-user nav links — updated by user-widget script in multi-user mode -->
-          <a id="nav-stats"   href={singleHandle ? `${baseUrl}u/${singleHandle}/stats/`   : `${baseUrl}stats/`}   data-user-path="stats/"   class="text-sm text-zinc-400 hover:text-white transition-colors">Stats</a>
-          <a id="nav-athlete" href={singleHandle ? `${baseUrl}u/${singleHandle}/athlete/` : `${baseUrl}athlete/`} data-user-path="athlete/" class="text-sm text-zinc-400 hover:text-white transition-colors">Athlete</a>
+          <a id="nav-stats"   href={singleHandle ? `${baseUrl}u/${singleHandle}/stats/`   : `${baseUrl}stats/`}   data-user-path="stats/"   class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Stats</a>
+          <a id="nav-athlete" href={singleHandle ? `${baseUrl}u/${singleHandle}/athlete/` : `${baseUrl}athlete/`} data-user-path="athlete/" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Athlete</a>
           {mobileApp && (
-            <a id="nav-record" href={singleHandle ? `${baseUrl}u/${singleHandle}/record/` : `${baseUrl}record/`} data-user-path="record/" class="text-sm text-zinc-400 hover:text-white transition-colors">Record</a>
+            <a id="nav-record" href={singleHandle ? `${baseUrl}u/${singleHandle}/record/` : `${baseUrl}record/`} data-user-path="record/" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Record</a>
           )}
           {mobileApp && (
-            <a href={`${baseUrl}convert/`} class="text-sm text-zinc-400 hover:text-white transition-colors">Convert</a>
+            <a href={`${baseUrl}convert/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Convert</a>
           )}
-          <a href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors">About</a>
-          <a id="nav-feedback" href={`${baseUrl}feedback/`} style="display:none" class="text-sm text-zinc-400 hover:text-white transition-colors">Feedback</a>
-        </>
+          <a href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">About</a>
+          <a id="nav-feedback" href={`${baseUrl}feedback/`} style="display:none" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Feedback</a>
+        </div>
       )}
 
-      <div class="ml-auto flex items-center gap-1">
+      <!-- Actions: always visible, never shrinks -->
+      <div class="ml-auto shrink-0 flex items-center gap-1">
         {!isPublicPage && (
           <>
             <!-- Logout button — hidden until logged in -->

From da622131fd0843f41fb6e439da7f88e383ce0a9d Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 22:26:11 +0200
Subject: [PATCH 034/124] upload zip archive from strava

---
 bincio/edit/server.py        | 45 +++++++++++++++++++++++++++++++++++-
 site/astro.config.mjs        | 21 +++++++++++++++++
 site/src/layouts/Base.astro  | 11 +++++++++
 tests/test_server_imports.py |  1 +
 4 files changed, 77 insertions(+), 1 deletion(-)

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 940eed5..207e6f2 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -11,7 +11,7 @@ from typing import Any
 from fastapi import FastAPI, File, Form, HTTPException, Request, UploadFile
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.middleware.gzip import GZipMiddleware
-from fastapi.responses import HTMLResponse, JSONResponse, RedirectResponse
+from fastapi.responses import HTMLResponse, JSONResponse, RedirectResponse, StreamingResponse
 
 from bincio.edit.ops import SPORTS, STAT_PANELS, VALID_ACTIVITY_ID
 
@@ -783,3 +783,46 @@ async def strava_reset(request: Request) -> JSONResponse:
         token["last_sync_at"] = last_ts
     save_token(dd, token)
     return JSONResponse({"ok": True, "mode": "soft", "last_sync_at": last_ts})
+
+
+@app.post("/api/upload/strava-zip")
+async def upload_strava_zip(file: UploadFile = File(...)) -> StreamingResponse:
+    """Accept a Strava bulk export ZIP and stream SSE progress while processing.
+
+    The ZIP is written to a temp file, processed activity-by-activity, then deleted.
+    Originals are never kept — the UI informs the user of this upfront.
+    """
+    if not file.filename or not file.filename.lower().endswith(".zip"):
+        raise HTTPException(400, "Please upload a .zip file")
+
+    dd = _get_data_dir()
+    import tempfile
+    tmp = tempfile.NamedTemporaryFile(suffix=".zip", delete=False, dir=dd)
+    zip_path = Path(tmp.name)
+    try:
+        while chunk := await file.read(1024 * 1024):  # 1 MB chunks
+            tmp.write(chunk)
+    finally:
+        tmp.close()
+
+    from bincio.extract.strava_zip import strava_zip_iter
+    from bincio.render.merge import merge_all
+
+    def event_stream():
+        any_imported = False
+        try:
+            for event in strava_zip_iter(zip_path, dd):
+                yield f"data: {json.dumps(event)}\n\n"
+                if event.get("type") == "progress" and event.get("status") == "imported":
+                    any_imported = True
+                if event.get("type") == "done" and any_imported:
+                    merge_all(dd)
+        except Exception as exc:
+            zip_path.unlink(missing_ok=True)
+            yield f"data: {json.dumps({'type': 'error', 'message': str(exc)})}\n\n"
+
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
diff --git a/site/astro.config.mjs b/site/astro.config.mjs
index d2c0249..5622396 100644
--- a/site/astro.config.mjs
+++ b/site/astro.config.mjs
@@ -25,6 +25,27 @@ export default defineConfig({
     // In production nginx handles this — same pattern, no code change needed.
     server: {
       proxy: {
+        // SSE response to a POST — Vite's default proxy buffers the full body before
+        // forwarding, which breaks streaming and can cause EPIPE on long uploads.
+        // selfHandleResponse + manual pipe sends chunks as they arrive.
+        '/api/upload/strava-zip': {
+          target: serveTarget,
+          changeOrigin: true,
+          selfHandleResponse: true,
+          configure: (proxy) => {
+            proxy.on('proxyRes', (proxyRes, req, res) => {
+              res.writeHead(proxyRes.statusCode ?? 200, proxyRes.headers);
+              proxyRes.pipe(res, { end: true });
+            });
+            proxy.on('error', (err, _req, res) => {
+              if (err.code === 'EPIPE' || err.code === 'ECONNRESET') return;
+              if (!res.headersSent) {
+                res.writeHead(502);
+                res.end('proxy error');
+              }
+            });
+          },
+        },
         '/api': {
           target: serveTarget,
           changeOrigin: true,
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 9c1f76a..9a36962 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -732,6 +732,17 @@ try {
           }
         };
 
+        xhr.onload = () => {
+          // Fires when the request completes. If we already got a 'done' or 'error'
+          // SSE event via onprogress the status is already set. If not (e.g. a non-SSE
+          // error response), surface the failure.
+          if (xhr.status !== 200) {
+            zipStatus.textContent = `Upload failed (${xhr.status}).`;
+            zipStatus.style.color = '#f87171';
+            zipInput.value = '';
+          }
+        };
+
         xhr.onerror = () => {
           zipStatus.textContent = 'Upload failed — check your connection.';
           zipStatus.style.color = '#f87171';
diff --git a/tests/test_server_imports.py b/tests/test_server_imports.py
index 63f11c4..8124e16 100644
--- a/tests/test_server_imports.py
+++ b/tests/test_server_imports.py
@@ -27,5 +27,6 @@ def test_edit_app_has_routes():
     from bincio.edit.server import app
     paths = {r.path for r in app.routes}
     assert "/api/upload" in paths
+    assert "/api/upload/strava-zip" in paths
     assert "/api/activity/{activity_id}" in paths
     assert "/api/strava/sync" in paths

From bc30e0a2fc364a05fcc55c95e891308700c57865 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 22:51:29 +0200
Subject: [PATCH 035/124] option to keep all activities private from strava
 zip, fix copy of register link

---
 bincio/edit/server.py              |  9 +++++++--
 bincio/extract/strava_zip.py       |  3 ++-
 bincio/serve/server.py             |  5 ++++-
 site/src/layouts/Base.astro        |  7 +++++++
 site/src/pages/invites/index.astro | 24 +++++++++++++++++++++---
 5 files changed, 41 insertions(+), 7 deletions(-)

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 207e6f2..eda65cc 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -786,7 +786,10 @@ async def strava_reset(request: Request) -> JSONResponse:
 
 
 @app.post("/api/upload/strava-zip")
-async def upload_strava_zip(file: UploadFile = File(...)) -> StreamingResponse:
+async def upload_strava_zip(
+    file: UploadFile = File(...),
+    private: str = Form(default="false"),
+) -> StreamingResponse:
     """Accept a Strava bulk export ZIP and stream SSE progress while processing.
 
     The ZIP is written to a temp file, processed activity-by-activity, then deleted.
@@ -795,6 +798,8 @@ async def upload_strava_zip(file: UploadFile = File(...)) -> StreamingResponse:
     if not file.filename or not file.filename.lower().endswith(".zip"):
         raise HTTPException(400, "Please upload a .zip file")
 
+    privacy = "private" if private.lower() in ("true", "1", "yes") else "public"
+
     dd = _get_data_dir()
     import tempfile
     tmp = tempfile.NamedTemporaryFile(suffix=".zip", delete=False, dir=dd)
@@ -811,7 +816,7 @@ async def upload_strava_zip(file: UploadFile = File(...)) -> StreamingResponse:
     def event_stream():
         any_imported = False
         try:
-            for event in strava_zip_iter(zip_path, dd):
+            for event in strava_zip_iter(zip_path, dd, privacy=privacy):
                 yield f"data: {json.dumps(event)}\n\n"
                 if event.get("type") == "progress" and event.get("status") == "imported":
                     any_imported = True
diff --git a/bincio/extract/strava_zip.py b/bincio/extract/strava_zip.py
index 65777e7..8eda4d2 100644
--- a/bincio/extract/strava_zip.py
+++ b/bincio/extract/strava_zip.py
@@ -34,6 +34,7 @@ def strava_zip_iter(
     zip_path: Path,
     data_dir: Path,
     originals_dir: Optional[Path] = None,
+    privacy: str = "public",
 ) -> Generator[dict, None, None]:
     """Process a Strava export ZIP, yielding SSE-style progress dicts.
 
@@ -120,7 +121,7 @@ def strava_zip_iter(
                     orig_dest = originals_dir / entry_name
                     shutil.copy2(tmp_path, orig_dest)
 
-                ingest_parsed(parsed, data_dir, privacy="public")
+                ingest_parsed(parsed, data_dir, privacy=privacy)
                 imported += 1
                 yield {"type": "progress", "n": n, "total": total, "name": display_name, "status": "imported"}
 
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 7c1f297..c26292d 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -590,6 +590,7 @@ async def upload_activity(
 @app.post("/api/upload/strava-zip")
 async def upload_strava_zip(
     file: UploadFile = File(...),
+    private: str = Form(default="false"),
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> StreamingResponse:
     """Accept a Strava bulk export ZIP and stream SSE progress while processing.
@@ -601,6 +602,8 @@ async def upload_strava_zip(
     if not file.filename or not file.filename.lower().endswith(".zip"):
         raise HTTPException(400, "Please upload a .zip file")
 
+    privacy = "private" if private.lower() in ("true", "1", "yes") else "public"
+
     dd = _get_data_dir() / user.handle
     import tempfile
     tmp = tempfile.NamedTemporaryFile(suffix=".zip", delete=False, dir=dd)
@@ -617,7 +620,7 @@ async def upload_strava_zip(
     def event_stream():
         any_imported = False
         try:
-            for event in strava_zip_iter(zip_path, dd):
+            for event in strava_zip_iter(zip_path, dd, privacy=privacy):
                 yield f"data: {json.dumps(event)}\n\n"
                 if event.get("type") == "progress" and event.get("status") == "imported":
                     any_imported = True
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 9a36962..b531a45 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -338,6 +338,11 @@ try {
             <div id="zip-label">Drop your Strava export .zip<br/>or click to browse</div>
             <input id="zip-input" type="file" accept=".zip" class="hidden" />
           </div>
+          <label class="flex items-center gap-2 mt-3 text-xs text-zinc-400 cursor-pointer select-none">
+            <input id="zip-private" type="checkbox" class="accent-blue-500" />
+            Mark all imported activities as private
+            <span class="text-zinc-600">(Strava export doesn't include privacy settings)</span>
+          </label>
           <p id="zip-status" class="mt-3 text-xs text-center leading-relaxed" style="min-height: 1.25rem"></p>
         </div>
       </div>
@@ -447,6 +452,7 @@ try {
       const zipInput      = document.getElementById('zip-input');
       const zipLabel      = document.getElementById('zip-label');
       const zipStatus     = document.getElementById('zip-status');
+      const zipPrivate    = document.getElementById('zip-private');
       const drop              = document.getElementById('upload-drop');
       const input             = document.getElementById('upload-input');
       const label             = document.getElementById('upload-label');
@@ -690,6 +696,7 @@ try {
 
         const fd = new FormData();
         fd.append('file', file);
+        fd.append('private', zipPrivate?.checked ? 'true' : 'false');
 
         // POST the file; server responds with SSE stream immediately after receiving body
         const xhr = new XMLHttpRequest();
diff --git a/site/src/pages/invites/index.astro b/site/src/pages/invites/index.astro
index 0262565..f8e76c2 100644
--- a/site/src/pages/invites/index.astro
+++ b/site/src/pages/invites/index.astro
@@ -47,6 +47,17 @@ import Base from '../../layouts/Base.astro';
     return li;
   }
 
+  function fallbackCopy(text: string, done: () => void) {
+    const ta = document.createElement('textarea');
+    ta.value = text;
+    ta.style.cssText = 'position:fixed;opacity:0;top:0;left:0';
+    document.body.appendChild(ta);
+    ta.focus();
+    ta.select();
+    try { document.execCommand('copy'); done(); } catch (_) {}
+    document.body.removeChild(ta);
+  }
+
   async function loadInvites() {
     try {
       const r = await fetch('/api/invites', { credentials: 'include' });
@@ -66,9 +77,16 @@ import Base from '../../layouts/Base.astro';
       // Copy link buttons
       listEl.querySelectorAll('.copy-btn').forEach(btn => {
         btn.addEventListener('click', () => {
-          navigator.clipboard.writeText((btn as HTMLElement).dataset.link ?? '');
-          btn.textContent = 'Copied!';
-          setTimeout(() => { btn.textContent = 'Copy link'; }, 2000);
+          const text = (btn as HTMLElement).dataset.link ?? '';
+          const done = () => {
+            btn.textContent = 'Copied!';
+            setTimeout(() => { btn.textContent = 'Copy link'; }, 2000);
+          };
+          if (navigator.clipboard) {
+            navigator.clipboard.writeText(text).then(done).catch(() => fallbackCopy(text, done));
+          } else {
+            fallbackCopy(text, done);
+          }
         });
       });
     } catch (e: any) {

From c99b755382df2fb97913729494a4aa753e719873 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 22:58:34 +0200
Subject: [PATCH 036/124] The culprit is in renderChart(): it calls
 chart?.remove() which empties the   container div, causing the layout to
 collapse to zero height for a moment.   The browser then scrolls to keep the
 viewport anchored, but since the page   got shorter it jumps to the top. When
 the new SVG is appended, the page is   taller again but the scroll position
 was already reset.

  Fix: give the chart container a min-height matching the chart height (220px)
  so it never collapses.
---
 site/src/components/ActivityCharts.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/src/components/ActivityCharts.svelte b/site/src/components/ActivityCharts.svelte
index 6f07c5d..b80deec 100644
--- a/site/src/components/ActivityCharts.svelte
+++ b/site/src/components/ActivityCharts.svelte
@@ -347,7 +347,7 @@
   </div>
 </div>
 
-<div bind:this={chartEl} class="w-full overflow-hidden"></div>
+<div bind:this={chartEl} class="w-full overflow-hidden" style="min-height:220px"></div>
 
 <!-- Histogram controls (range + bins) -->
 {#if chartType === 'histogram'}

From cbd5a98cd3d1eea438739758316a48817a6a8ed5 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Fri, 10 Apr 2026 23:16:38 +0200
Subject: [PATCH 037/124]      - merge.py: keep private activities in
 _merged/index.json instead of         stripping them; privacy filtering is
 now done client-side       - ActivityFeed: detect logged-in user via
 bincio:me event; show private         activities only when viewing your own
 profile; private cards get a lock         badge

---
 bincio/render/merge.py                  |  5 ++--
 site/src/components/ActivityFeed.svelte | 33 +++++++++++++++++++++----
 2 files changed, 30 insertions(+), 8 deletions(-)

diff --git a/bincio/render/merge.py b/bincio/render/merge.py
index 8064776..c90cb35 100644
--- a/bincio/render/merge.py
+++ b/bincio/render/merge.py
@@ -152,7 +152,6 @@ def merge_one(data_dir: Path, activity_id: str) -> None:
             s = _apply_sidecar_summary(s, fm)
         activities.append(s)
 
-    activities = [a for a in activities if a.get("privacy") != "private"]
     activities.sort(key=lambda a: a.get("started_at", ""), reverse=True)
     activities.sort(key=lambda a: 0 if a.get("custom", {}).get("highlight") else 1)
 
@@ -262,9 +261,9 @@ def merge_all(data_dir: Path) -> int:
             activities.append(s)
 
         # Drop private activities from the published feed
-        activities = [a for a in activities if a.get("privacy") != "private"]
-
         # Sort: newest first, then bring highlighted activities to the top
+        # Private activities are kept in the index so the owner can see them;
+        # the feed UI filters them out for non-owners client-side.
         activities.sort(key=lambda a: a.get("started_at", ""), reverse=True)
         activities.sort(key=lambda a: 0 if a.get("custom", {}).get("highlight") else 1)
 
diff --git a/site/src/components/ActivityFeed.svelte b/site/src/components/ActivityFeed.svelte
index ffc330e..4d6291d 100644
--- a/site/src/components/ActivityFeed.svelte
+++ b/site/src/components/ActivityFeed.svelte
@@ -43,8 +43,20 @@
   let loading = true;
   let error = '';
   let mounted = false;
+  /** Logged-in handle — resolved async via bincio:me event. */
+  let me: string = '';
 
-  $: filtered = sport === 'all' ? all : all.filter(a => a.sport === sport);
+  // Show private activities only to their owner.
+  // On a profile page (filterHandle set): show private if me === filterHandle.
+  // On the global feed: show private only for the logged-in user's own activities.
+  $: isOwner = filterHandle !== '' && me === filterHandle;
+  $: withPrivacy = all.filter(a => {
+    if (a.privacy === 'private') {
+      return filterHandle ? isOwner : (me !== '' && (a as any).handle === me);
+    }
+    return true;
+  });
+  $: filtered = sport === 'all' ? withPrivacy : withPrivacy.filter(a => a.sport === sport);
   $: visible = filtered.slice(0, shown);
   $: hasMore = shown < filtered.length;
 
@@ -60,18 +72,26 @@
   onMount(async () => {
     sport = (new URLSearchParams(window.location.search).get('sport') as Sport | 'all') ?? 'all';
     mounted = true;
+
+    // Resolve the logged-in handle so we can show the owner their private activities.
+    if ((window as any).__bincioMe !== undefined) {
+      me = (window as any).__bincioMe;
+    } else {
+      window.addEventListener('bincio:me', (e: Event) => { me = (e as CustomEvent).detail; }, { once: true });
+    }
+
     try {
       const indexUrl = profileIndexUrl
         ? `${base}data/${profileIndexUrl}`
         : `${base}data/index.json`;
       const index = await loadIndex(base, indexUrl);
-      let activities = index.activities.filter(a => a.privacy !== 'private');
+      let activities = index.activities;
       // filterHandle only applies when loading the root manifest (multi-user feed).
       // When profileIndexUrl is set we already loaded the right user's shard directly —
       // activities from a direct shard fetch have no handle tag, so the filter would
       // remove everything.
       if (filterHandle && !profileIndexUrl) {
-        activities = activities.filter(a => a.handle === filterHandle);
+        activities = activities.filter(a => (a as any).handle === filterHandle);
       }
       all = activities;
     } catch (e: any) {
@@ -140,10 +160,13 @@
               >@{a.handle}</a>{/if}
             </p>
             <!-- stretched link covers the whole card; sits below the handle link -->
-            <h3 class="font-semibold text-white truncate group-hover:text-[--accent] transition-colors">
+            <h3 class="font-semibold text-white truncate group-hover:text-[--accent] transition-colors flex items-center gap-1.5">
+              {#if a.privacy === 'private'}
+                <span class="text-zinc-500 shrink-0" title="Private">🔒</span>
+              {/if}
               <a
                 href={a.detail_url ? `${import.meta.env.BASE_URL}activity/${a.id}/` : `${import.meta.env.BASE_URL}activity/local/?id=${a.id}`}
-                class="before:absolute before:inset-0 before:content-['']"
+                class="before:absolute before:inset-0 before:content-[''] truncate"
               >{a.title}</a>
             </h3>
           </div>

From 01db4eb9ae4f5323d4dd9eaefd83ca77730845fc Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 08:13:27 +0200
Subject: [PATCH 038/124] ingest activities.csv

---
 bincio/edit/server.py        | 145 ++++++++++++++++++++++-------------
 bincio/extract/strava_csv.py | 118 +++++++++++++++++++++++++---
 bincio/serve/server.py       |  55 +++++++++++--
 scripts/bulk_private.py      | 108 ++++++++++++++++++++++++++
 site/src/layouts/Base.astro  |  20 +++--
 5 files changed, 367 insertions(+), 79 deletions(-)
 create mode 100644 scripts/bulk_private.py

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index eda65cc..f70faee 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -538,73 +538,108 @@ def _file_suffix(name: str) -> str:
 
 @app.post("/api/upload")
 async def upload_activity(
-    file: UploadFile = File(...),
+    files: list[UploadFile] = File(...),
     store_original: bool = Form(False),
 ) -> JSONResponse:
-    """Accept a FIT/GPX/TCX file, extract it, update index.json, and re-merge."""
+    """Accept FIT/GPX/TCX files and/or activities.csv, extract, update index, re-merge.
+
+    activities.csv (Strava export format) can be included in the batch to:
+      - Enrich activity files being uploaded in the same batch (matched by filename)
+      - Retroactively update sidecars for existing activities (matched by strava_id)
+    """
+    from bincio.extract.ingest import ingest_parsed
+    from bincio.extract.parsers.factory import parse_file
+    from bincio.extract.writer import make_activity_id
+    from bincio.render.merge import merge_all
+
     dd = _get_data_dir()
-
-    name = Path(file.filename or "upload.fit").name  # strip any path components
-    suffix = _file_suffix(name)
-    if suffix not in _SUPPORTED_SUFFIXES:
-        raise HTTPException(400, f"Unsupported file type '{Path(name).suffix}'. Expected FIT, GPX, or TCX.")
-
-    _MAX_UPLOAD_BYTES = 50 * 1024 * 1024  # 50 MB
-    contents = await file.read()
-    if len(contents) > _MAX_UPLOAD_BYTES:
-        raise HTTPException(413, f"File too large ({len(contents)} bytes). Maximum is 50 MB.")
-
     staging = dd / "_uploads"
     staging.mkdir(exist_ok=True)
-    staged = staging / name
-    staged.write_bytes(contents)
 
-    kept = False
-    try:
-        from bincio.extract.metrics import compute
-        from bincio.extract.parsers.factory import parse_file
-        from bincio.extract.writer import build_summary, make_activity_id, write_activity, write_index
+    _MAX_UPLOAD_BYTES = 50 * 1024 * 1024  # 50 MB
 
-        activity = parse_file(staged)
-        metrics = compute(activity)
-        activity_id = make_activity_id(activity)
-
-        existing_json = dd / "activities" / f"{activity_id}.json"
-        if existing_json.exists():
-            raise HTTPException(409, f"Activity already exists: {activity_id}")
-
-        write_activity(activity, metrics, dd, privacy="public", rdp_epsilon=0.0001)
-        summary = build_summary(activity, metrics, activity_id, "public")
-
-        # Read current index to preserve owner + existing summaries
-        index_path = dd / "index.json"
-        if index_path.exists():
-            index_data = json.loads(index_path.read_text(encoding="utf-8"))
+    # Separate CSV files from activity files
+    csv_files: list[UploadFile] = []
+    activity_files: list[UploadFile] = []
+    for f in files:
+        name = Path(f.filename or "").name.lower()
+        if name.endswith(".csv"):
+            csv_files.append(f)
         else:
-            index_data = {"owner": {"handle": "unknown"}, "activities": []}
-        owner = index_data.get("owner", {})
-        existing = {s["id"]: s for s in index_data.get("activities", [])}
-        existing[activity_id] = summary
-        write_index(list(existing.values()), dd, owner)
+            activity_files.append(f)
 
-        if store_original:
-            originals_dir = dd / "originals"
-            originals_dir.mkdir(exist_ok=True)
-            staged.rename(originals_dir / name)
-            kept = True
+    # Build metadata from the first CSV found (activities.csv from Strava export)
+    metadata = None
+    if csv_files:
+        from bincio.extract.strava_csv import StravaMetadata
+        import tempfile
+        csv_upload = csv_files[0]
+        csv_bytes = await csv_upload.read()
+        with tempfile.NamedTemporaryFile(suffix=".csv", delete=False) as tmp:
+            tmp.write(csv_bytes)
+            tmp_path = Path(tmp.name)
+        try:
+            metadata = StravaMetadata(tmp_path)
+        finally:
+            tmp_path.unlink(missing_ok=True)
 
-        from bincio.render.merge import merge_all
+    results = []
+    any_added = False
+
+    for file in activity_files:
+        name = Path(file.filename or "upload.fit").name
+        suffix = _file_suffix(name)
+        if suffix not in _SUPPORTED_SUFFIXES:
+            results.append({"name": name, "ok": False, "error": f"Unsupported file type '{Path(name).suffix}'"})
+            continue
+
+        contents = await file.read()
+        if len(contents) > _MAX_UPLOAD_BYTES:
+            results.append({"name": name, "ok": False, "error": "File too large (max 50 MB)"})
+            continue
+
+        staged = staging / name
+        staged.write_bytes(contents)
+        kept = False
+        try:
+            activity = parse_file(staged)
+
+            # Enrich with CSV metadata when available (matched by filename)
+            if metadata is not None:
+                metadata.enrich(name, activity)
+
+            activity_id = make_activity_id(activity)
+            if (dd / "activities" / f"{activity_id}.json").exists():
+                results.append({"name": name, "ok": False, "error": "duplicate"})
+                continue
+
+            ingest_parsed(activity, dd, privacy="public")
+
+            if store_original:
+                originals_dir = dd / "originals"
+                originals_dir.mkdir(exist_ok=True)
+                staged.rename(originals_dir / name)
+                kept = True
+
+            results.append({"name": name, "ok": True, "id": activity_id})
+            any_added = True
+        except Exception:
+            results.append({"name": name, "ok": False, "error": "Processing failed"})
+        finally:
+            if not kept:
+                staged.unlink(missing_ok=True)
+
+    # Retroactively update sidecars for existing activities matched by strava_id
+    csv_updates = 0
+    if metadata is not None:
+        from bincio.extract.strava_csv import apply_csv_to_data_dir
+        csv_updates = apply_csv_to_data_dir(dd, metadata)
+
+    if any_added or csv_updates:
         merge_all(dd)
 
-    except HTTPException:
-        raise
-    except Exception as exc:
-        raise HTTPException(422, f"Failed to process activity file: {type(exc).__name__}")
-    finally:
-        if not kept:
-            staged.unlink(missing_ok=True)
-
-    return JSONResponse({"ok": True, "id": activity_id})
+    added = [r for r in results if r["ok"]]
+    return JSONResponse({"ok": True, "added": len(added), "csv_updates": csv_updates, "results": results})
 
 
 @app.post("/api/import-bas")
diff --git a/bincio/extract/strava_csv.py b/bincio/extract/strava_csv.py
index 472d847..a77f0b0 100644
--- a/bincio/extract/strava_csv.py
+++ b/bincio/extract/strava_csv.py
@@ -1,14 +1,14 @@
 """Import metadata from Strava's activities.csv bulk export.
 
 Strava export columns we care about:
-  Activity ID, Activity Date, Activity Name, Activity Type,
-  Activity Description, Filename
+  Activity ID, Activity Date, Activity Name, Activity Description, Filename
 """
 
 import csv
+import json
 import re
 from pathlib import Path
-from typing import Optional
+from typing import Iterator, Optional
 
 
 _STRAVA_DATE_FMTS = (
@@ -18,10 +18,11 @@ _STRAVA_DATE_FMTS = (
 
 
 class StravaMetadata:
-    """Maps original filename → Strava metadata."""
+    """Maps original filename → Strava metadata, with secondary strava_id index."""
 
     def __init__(self, csv_path: Path) -> None:
         self._by_filename: dict[str, dict] = {}
+        self._by_strava_id: dict[str, dict] = {}
         self._load(csv_path)
 
     def _load(self, path: Path) -> None:
@@ -29,16 +30,21 @@ class StravaMetadata:
             reader = csv.DictReader(f)
             for row in reader:
                 filename = row.get("Filename", "").strip()
-                if not filename:
-                    continue
-                # Strava stores paths like "activities/12345.fit.gz"
-                basename = Path(filename).name
-                self._by_filename[basename] = row
+                if filename:
+                    basename = Path(filename).name
+                    self._by_filename[basename] = row
+                strava_id = row.get("Activity ID", "").strip()
+                if strava_id:
+                    self._by_strava_id[strava_id] = row
 
     def lookup(self, source_file: str) -> Optional[dict]:
         """Return the Strava CSV row for a given source filename, or None."""
         return self._by_filename.get(source_file)
 
+    def lookup_by_strava_id(self, strava_id: str) -> Optional[dict]:
+        """Return the Strava CSV row for a given Strava activity ID, or None."""
+        return self._by_strava_id.get(str(strava_id))
+
     def enrich(self, source_file: str, activity: object) -> None:
         """Mutate a ParsedActivity with Strava metadata if found."""
         row = self.lookup(source_file)
@@ -53,3 +59,97 @@ class StravaMetadata:
 
         if not activity.strava_id and row.get("Activity ID"):  # type: ignore[attr-defined]
             activity.strava_id = row["Activity ID"].strip()  # type: ignore[attr-defined]
+
+
+# ── Retroactive sidecar update ────────────────────────────────────────────────
+
+def _parse_sidecar(path: Path) -> tuple[dict, str]:
+    """Return (frontmatter_dict, body) from a sidecar .md file."""
+    import re as _re
+    import yaml
+    text = path.read_text(encoding="utf-8")
+    if text.startswith("---"):
+        parts = _re.split(r"^---[ \t]*$", text, maxsplit=2, flags=_re.MULTILINE)
+        if len(parts) >= 3:
+            fm = yaml.safe_load(parts[1]) or {}
+            return fm, parts[2].strip()
+    return {}, text.strip()
+
+
+def _write_sidecar(path: Path, fm: dict, body: str) -> None:
+    import yaml
+    path.parent.mkdir(parents=True, exist_ok=True)
+    fm_text = yaml.safe_dump(fm, default_flow_style=False, allow_unicode=True).strip()
+    content = f"---\n{fm_text}\n---\n"
+    if body:
+        content += f"\n{body}\n"
+    path.write_text(content, encoding="utf-8")
+
+
+def _update_sidecar_from_row(sidecar_path: Path, row: dict) -> bool:
+    """Create or update a sidecar with CSV title/description.
+
+    Only fills fields that are not already set in the sidecar.
+    Returns True if anything changed.
+    """
+    title = row.get("Activity Name", "").strip()
+    description = row.get("Activity Description", "").strip()
+    if not title and not description:
+        return False
+
+    fm, body = _parse_sidecar(sidecar_path) if sidecar_path.exists() else ({}, "")
+
+    changed = False
+    if title and "title" not in fm:
+        fm["title"] = title
+        changed = True
+    if description and not body:
+        body = description
+        changed = True
+
+    if not changed:
+        return False
+
+    _write_sidecar(sidecar_path, fm, body)
+    return True
+
+
+def apply_csv_to_data_dir(data_dir: Path, metadata: StravaMetadata) -> int:
+    """Retroactively apply CSV metadata to existing activities via sidecars.
+
+    Scans all activity JSONs in data_dir/activities/.  For each activity that
+    has a strava_id, looks up the corresponding CSV row and creates/updates
+    the sidecar in data_dir/edits/ with any missing title or description.
+
+    Only writes fields not already present in the sidecar — manual edits are
+    never overwritten.
+
+    Returns the count of activities whose sidecars were created or updated.
+    """
+    activities_dir = data_dir / "activities"
+    edits_dir = data_dir / "edits"
+
+    if not activities_dir.exists():
+        return 0
+
+    updated = 0
+    for json_path in sorted(activities_dir.glob("*.json")):
+        try:
+            detail = json.loads(json_path.read_text(encoding="utf-8"))
+        except Exception:
+            continue
+
+        strava_id = detail.get("strava_id")
+        if not strava_id:
+            continue
+
+        row = metadata.lookup_by_strava_id(str(strava_id))
+        if row is None:
+            continue
+
+        activity_id = json_path.stem
+        sidecar_path = edits_dir / f"{activity_id}.md"
+        if _update_sidecar_from_row(sidecar_path, row):
+            updated += 1
+
+    return updated
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index c26292d..ef69c02 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -530,6 +530,12 @@ async def upload_activity(
     store_original: bool = Form(False),
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> JSONResponse:
+    """Accept FIT/GPX/TCX files and/or activities.csv, extract, update index, re-merge.
+
+    activities.csv (Strava export format) can be included in the batch to:
+      - Enrich activity files being uploaded in the same batch (matched by filename)
+      - Retroactively update sidecars for existing activities (matched by strava_id)
+    """
     from bincio.extract.ingest import ingest_parsed
     from bincio.extract.parsers.factory import parse_file
     from bincio.extract.writer import make_activity_id
@@ -540,13 +546,36 @@ async def upload_activity(
     staging = dd / "_uploads"
     staging.mkdir(exist_ok=True)
 
+    # Separate CSV files from activity files
+    csv_files: list[UploadFile] = []
+    activity_files: list[UploadFile] = []
+    for f in files:
+        fname = Path(f.filename or "").name.lower()
+        if fname.endswith(".csv"):
+            csv_files.append(f)
+        else:
+            activity_files.append(f)
+
+    # Build metadata from the first CSV found (activities.csv from Strava export)
+    metadata = None
+    if csv_files:
+        from bincio.extract.strava_csv import StravaMetadata
+        import tempfile
+        csv_bytes = await csv_files[0].read()
+        with tempfile.NamedTemporaryFile(suffix=".csv", delete=False) as tmp:
+            tmp.write(csv_bytes)
+            tmp_path = Path(tmp.name)
+        try:
+            metadata = StravaMetadata(tmp_path)
+        finally:
+            tmp_path.unlink(missing_ok=True)
+
     results = []
     any_added = False
 
-    for file in files:
+    for file in activity_files:
         name = Path(file.filename or "upload.fit").name
-        p = Path(name.lower())
-        suffix = (p.stem.rsplit(".", 1)[-1].join([".", ".gz"]) if "." in p.stem else ".gz") if p.suffix == ".gz" else p.suffix
+        suffix = _file_suffix(name)
         if suffix not in _SUPPORTED_SUFFIXES:
             results.append({"name": name, "ok": False, "error": f"Unsupported file type '{suffix}'"})
             continue
@@ -561,6 +590,11 @@ async def upload_activity(
         kept = False
         try:
             activity = parse_file(staged)
+
+            # Enrich with CSV metadata when available (matched by filename)
+            if metadata is not None:
+                metadata.enrich(name, activity)
+
             activity_id = make_activity_id(activity)
             if (dd / "activities" / f"{activity_id}.json").exists():
                 results.append({"name": name, "ok": False, "error": "duplicate"})
@@ -573,18 +607,25 @@ async def upload_activity(
                 kept = True
             results.append({"name": name, "ok": True, "id": activity_id})
             any_added = True
-        except Exception as exc:
+        except Exception:
             results.append({"name": name, "ok": False, "error": "Processing failed"})
         finally:
             if not kept:
                 staged.unlink(missing_ok=True)
 
-    if any_added:
+    # Retroactively update sidecars for existing activities matched by strava_id
+    csv_updates = 0
+    if metadata is not None:
+        from bincio.extract.strava_csv import apply_csv_to_data_dir
+        csv_updates = apply_csv_to_data_dir(dd, metadata)
+
+    if any_added or csv_updates:
         merge_all(dd)
-        _trigger_rebuild(user.handle)
+        if any_added:
+            _trigger_rebuild(user.handle)
 
     added = [r for r in results if r["ok"]]
-    return JSONResponse({"ok": True, "added": len(added), "results": results})
+    return JSONResponse({"ok": True, "added": len(added), "csv_updates": csv_updates, "results": results})
 
 
 @app.post("/api/upload/strava-zip")
diff --git a/scripts/bulk_private.py b/scripts/bulk_private.py
new file mode 100644
index 0000000..7a33941
--- /dev/null
+++ b/scripts/bulk_private.py
@@ -0,0 +1,108 @@
+#!/usr/bin/env python3
+"""
+Bulk-set activities matching a title pattern to private by writing sidecar files.
+
+Usage:
+    uv run python scripts/bulk_private.py --data-dir /var/bincio/data/brut --match "morning walk" "afternoon walk"
+
+    --dry-run   Print what would be changed without writing anything.
+    --handle    Subdirectory name (if data-dir is the root, not the user dir).
+"""
+from __future__ import annotations
+
+import argparse
+import json
+import re
+import sys
+from pathlib import Path
+
+import yaml
+
+
+def parse_sidecar(path: Path) -> tuple[dict, str]:
+    text = path.read_text(encoding="utf-8")
+    if text.startswith("---"):
+        parts = re.split(r"^---[ \t]*$", text, maxsplit=2, flags=re.MULTILINE)
+        if len(parts) >= 3:
+            fm = yaml.safe_load(parts[1]) or {}
+            return fm, parts[2].strip()
+    return {}, text.strip()
+
+
+def write_sidecar(path: Path, fm: dict, body: str) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    content = "---\n" + yaml.dump(fm, allow_unicode=True, default_flow_style=False) + "---\n"
+    if body:
+        content += "\n" + body + "\n"
+    path.write_text(content, encoding="utf-8")
+
+
+def main() -> None:
+    ap = argparse.ArgumentParser()
+    ap.add_argument("--data-dir", required=True, help="User data directory (e.g. /var/bincio/data/brut)")
+    ap.add_argument("--handle", default=None, help="Handle subdir if data-dir is the instance root")
+    ap.add_argument("--match", nargs="+", required=True, help="Title patterns to match (case-insensitive substring)")
+    ap.add_argument("--dry-run", action="store_true", help="Print changes without writing")
+    args = ap.parse_args()
+
+    data_dir = Path(args.data_dir)
+    if args.handle:
+        data_dir = data_dir / args.handle
+
+    index_path = data_dir / "index.json"
+    if not index_path.exists():
+        sys.exit(f"ERROR: index.json not found at {index_path}")
+
+    index = json.loads(index_path.read_text(encoding="utf-8"))
+    activities = index.get("activities", [])
+
+    patterns = [p.lower() for p in args.match]
+
+    matched = [
+        a for a in activities
+        if any(pat in (a.get("title") or "").lower() for pat in patterns)
+    ]
+
+    if not matched:
+        print("No activities matched.")
+        return
+
+    print(f"Found {len(matched)} matching activities:")
+    edits_dir = data_dir / "edits"
+    changed = 0
+
+    for act in matched:
+        aid = act["id"]
+        title = act.get("title", "(no title)")
+        date = act.get("started_at", "")[:10]
+        sidecar_path = edits_dir / f"{aid}.md"
+
+        # Load existing sidecar if present
+        if sidecar_path.exists():
+            fm, body = parse_sidecar(sidecar_path)
+        else:
+            fm, body = {}, ""
+
+        if fm.get("private") is True:
+            print(f"  [already private] {date}  {title}")
+            continue
+
+        print(f"  {'[DRY RUN] ' if args.dry_run else ''}→ private  {date}  {title}")
+        if not args.dry_run:
+            fm["private"] = True
+            write_sidecar(sidecar_path, fm, body)
+            changed += 1
+
+    if args.dry_run:
+        print("\nDry run — nothing written. Re-run without --dry-run to apply.")
+    else:
+        print(f"\n{changed} sidecar(s) written.")
+        if changed:
+            print("Running merge_all …")
+            from bincio.render.merge import merge_all
+            n = merge_all(data_dir)
+            print(f"merge_all done ({n} sidecar(s) applied).")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index b531a45..a44c785 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -275,8 +275,8 @@ try {
             id="upload-drop"
             class="border-2 border-dashed border-zinc-700 rounded-lg p-8 text-center text-zinc-500 text-sm cursor-pointer hover:border-zinc-500 hover:text-zinc-300 transition-colors"
           >
-            <div id="upload-label">Drop FIT, GPX, or TCX files<br/>or click to browse</div>
-            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz" class="hidden" multiple />
+            <div id="upload-label">Drop FIT, GPX, TCX, or activities.csv<br/>or click to browse</div>
+            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz,.csv" class="hidden" multiple />
           </div>
           <label class="flex items-start gap-2 mt-3 cursor-pointer group">
             <input
@@ -525,12 +525,16 @@ try {
           const d = await r.json();
           const dupes = d.results.filter(r => r.error === 'duplicate').length;
           const errors = d.results.filter(r => !r.ok && r.error !== 'duplicate').length;
-          let msg = `${d.added} added`;
-          if (dupes) msg += `, ${dupes} duplicate${dupes > 1 ? 's' : ''}`;
-          if (errors) msg += `, ${errors} failed`;
-          fileStatus.textContent = msg;
-          fileStatus.style.color = d.added > 0 ? '#4ade80' : '#a1a1aa';
-          if (d.added > 0) setTimeout(() => { window.location.reload(); }, 1200);
+          const parts = [];
+          if (d.added > 0) parts.push(`${d.added} added`);
+          if (d.csv_updates > 0) parts.push(`${d.csv_updates} updated from CSV`);
+          if (dupes) parts.push(`${dupes} duplicate${dupes > 1 ? 's' : ''}`);
+          if (errors) parts.push(`${errors} failed`);
+          if (parts.length === 0) parts.push('nothing to add');
+          fileStatus.textContent = parts.join(', ');
+          const anyGood = d.added > 0 || d.csv_updates > 0;
+          fileStatus.style.color = anyGood ? '#4ade80' : '#a1a1aa';
+          if (anyGood) setTimeout(() => { window.location.reload(); }, 1200);
           else drop.style.pointerEvents = '';
         } catch (e) {
           fileStatus.textContent = 'Error: ' + e.message;

From 82830222ba8ead3f199596979d28f581398349ff Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 08:33:21 +0200
Subject: [PATCH 039/124] =?UTF-8?q?=20=20For=20users=20uploading:=20=20=20?=
 =?UTF-8?q?-=20POST=20/api/upload=20now=20returns=20text/event-stream=20in?=
 =?UTF-8?q?stead=20of=20JSON=20=20=20-=20Per-file=20progress=20events=20st?=
 =?UTF-8?q?ream=20back=20as=20each=20file=20is=20processed:=20=E2=86=93=20?=
 =?UTF-8?q?3/47=20(6%)=20=E2=80=94=20morning=5Fride.fit=20=20=20-=20Final?=
 =?UTF-8?q?=20done=20event=20shows=20the=20summary:=20"12=20added,=2035=20?=
 =?UTF-8?q?duplicates"=20=20=20-=20The=20Vite=20proxy=20is=20configured=20?=
 =?UTF-8?q?to=20stream=20this=20properly=20(no=20buffering)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

  For the admin:
  - New GET /api/admin/jobs endpoint (admin-only) returns the list of active upload jobs, each with
  user, started_at, total, done, current (filename being processed)
  - A pulsing amber badge appears in the nav bar for admins when any user has an active upload running
   — it shows e.g. "2 uploads running" with a tooltip listing each user's progress (@alice: 12/50
  files)
  - Polls every 5 seconds, disappears automatically when all jobs finish
---
 bincio/edit/server.py       | 132 ++++++++++++------------
 bincio/serve/server.py      | 200 ++++++++++++++++++++++++------------
 site/astro.config.mjs       |   7 +-
 site/src/layouts/Base.astro | 116 +++++++++++++++++----
 4 files changed, 302 insertions(+), 153 deletions(-)

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index f70faee..cc3acd6 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -540,11 +540,11 @@ def _file_suffix(name: str) -> str:
 async def upload_activity(
     files: list[UploadFile] = File(...),
     store_original: bool = Form(False),
-) -> JSONResponse:
-    """Accept FIT/GPX/TCX files and/or activities.csv, extract, update index, re-merge.
+) -> StreamingResponse:
+    """Accept FIT/GPX/TCX files and/or activities.csv; stream SSE progress while processing.
 
     activities.csv (Strava export format) can be included in the batch to:
-      - Enrich activity files being uploaded in the same batch (matched by filename)
+      - Enrich activity files in the same batch (matched by filename)
       - Retroactively update sidecars for existing activities (matched by strava_id)
     """
     from bincio.extract.ingest import ingest_parsed
@@ -556,90 +556,96 @@ async def upload_activity(
     staging = dd / "_uploads"
     staging.mkdir(exist_ok=True)
 
-    _MAX_UPLOAD_BYTES = 50 * 1024 * 1024  # 50 MB
+    # Read all files into memory now (async), then process synchronously in the generator
+    csv_bytes_list: list[bytes] = []
+    activity_items: list[tuple[str, bytes]] = []
 
-    # Separate CSV files from activity files
-    csv_files: list[UploadFile] = []
-    activity_files: list[UploadFile] = []
     for f in files:
-        name = Path(f.filename or "").name.lower()
-        if name.endswith(".csv"):
-            csv_files.append(f)
+        fname = Path(f.filename or "").name
+        raw = await f.read()
+        if fname.lower().endswith(".csv"):
+            csv_bytes_list.append(raw)
         else:
-            activity_files.append(f)
+            activity_items.append((fname, raw))
 
     # Build metadata from the first CSV found (activities.csv from Strava export)
     metadata = None
-    if csv_files:
+    if csv_bytes_list:
         from bincio.extract.strava_csv import StravaMetadata
         import tempfile
-        csv_upload = csv_files[0]
-        csv_bytes = await csv_upload.read()
         with tempfile.NamedTemporaryFile(suffix=".csv", delete=False) as tmp:
-            tmp.write(csv_bytes)
+            tmp.write(csv_bytes_list[0])
             tmp_path = Path(tmp.name)
         try:
             metadata = StravaMetadata(tmp_path)
         finally:
             tmp_path.unlink(missing_ok=True)
 
-    results = []
-    any_added = False
+    total_files = len(activity_items)
 
-    for file in activity_files:
-        name = Path(file.filename or "upload.fit").name
-        suffix = _file_suffix(name)
-        if suffix not in _SUPPORTED_SUFFIXES:
-            results.append({"name": name, "ok": False, "error": f"Unsupported file type '{Path(name).suffix}'"})
-            continue
+    def event_stream():
+        added = 0
+        duplicates = 0
+        errors = 0
+        any_added = False
 
-        contents = await file.read()
-        if len(contents) > _MAX_UPLOAD_BYTES:
-            results.append({"name": name, "ok": False, "error": "File too large (max 50 MB)"})
-            continue
-
-        staged = staging / name
-        staged.write_bytes(contents)
-        kept = False
-        try:
-            activity = parse_file(staged)
-
-            # Enrich with CSV metadata when available (matched by filename)
-            if metadata is not None:
-                metadata.enrich(name, activity)
-
-            activity_id = make_activity_id(activity)
-            if (dd / "activities" / f"{activity_id}.json").exists():
-                results.append({"name": name, "ok": False, "error": "duplicate"})
+        for n, (name, contents) in enumerate(activity_items, 1):
+            suffix = _file_suffix(name)
+            if suffix not in _SUPPORTED_SUFFIXES:
+                errors += 1
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error', 'detail': 'unsupported type'})}\n\n"
                 continue
 
-            ingest_parsed(activity, dd, privacy="public")
+            if len(contents) > _MAX_UPLOAD_BYTES:
+                errors += 1
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error', 'detail': 'file too large'})}\n\n"
+                continue
 
-            if store_original:
-                originals_dir = dd / "originals"
-                originals_dir.mkdir(exist_ok=True)
-                staged.rename(originals_dir / name)
-                kept = True
+            staged = staging / name
+            staged.write_bytes(contents)
+            kept = False
+            try:
+                activity = parse_file(staged)
+                if metadata is not None:
+                    metadata.enrich(name, activity)
+                activity_id = make_activity_id(activity)
+                if (dd / "activities" / f"{activity_id}.json").exists():
+                    duplicates += 1
+                    yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'duplicate'})}\n\n"
+                    continue
+                ingest_parsed(activity, dd, privacy="public")
+                if store_original:
+                    originals_dir = dd / "originals"
+                    originals_dir.mkdir(exist_ok=True)
+                    staged.rename(originals_dir / name)
+                    kept = True
+                added += 1
+                any_added = True
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'imported'})}\n\n"
+            except Exception:
+                errors += 1
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error'})}\n\n"
+            finally:
+                if not kept:
+                    staged.unlink(missing_ok=True)
 
-            results.append({"name": name, "ok": True, "id": activity_id})
-            any_added = True
-        except Exception:
-            results.append({"name": name, "ok": False, "error": "Processing failed"})
-        finally:
-            if not kept:
-                staged.unlink(missing_ok=True)
+        csv_updates = 0
+        if metadata is not None:
+            from bincio.extract.strava_csv import apply_csv_to_data_dir
+            csv_updates = apply_csv_to_data_dir(dd, metadata)
+            if csv_updates:
+                yield f"data: {json.dumps({'type': 'csv', 'updates': csv_updates})}\n\n"
 
-    # Retroactively update sidecars for existing activities matched by strava_id
-    csv_updates = 0
-    if metadata is not None:
-        from bincio.extract.strava_csv import apply_csv_to_data_dir
-        csv_updates = apply_csv_to_data_dir(dd, metadata)
+        if any_added or csv_updates:
+            merge_all(dd)
 
-    if any_added or csv_updates:
-        merge_all(dd)
+        yield f"data: {json.dumps({'type': 'done', 'added': added, 'csv_updates': csv_updates, 'duplicates': duplicates, 'errors': errors})}\n\n"
 
-    added = [r for r in results if r["ok"]]
-    return JSONResponse({"ok": True, "added": len(added), "csv_updates": csv_updates, "results": results})
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
 
 
 @app.post("/api/import-bas")
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index ef69c02..52057cf 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -13,7 +13,9 @@ import re
 import secrets
 import shutil
 import subprocess
+import threading
 import time
+import uuid
 from pathlib import Path
 from typing import Any, Optional
 
@@ -42,6 +44,40 @@ from bincio.serve.db import (
     use_invite,
 )
 
+# ── Active job tracker ───────────────────────────────────────────────────────
+# Tracks in-progress upload/processing jobs so admins can see what's running.
+# Jobs are added when a streaming upload starts and removed when it finishes.
+
+_jobs_lock = threading.Lock()
+_active_jobs: dict[str, dict] = {}
+
+
+def _job_start(user_handle: str, total_files: int) -> str:
+    job_id = uuid.uuid4().hex[:8]
+    with _jobs_lock:
+        _active_jobs[job_id] = {
+            "id": job_id,
+            "user": user_handle,
+            "started_at": int(time.time()),
+            "total": total_files,
+            "done": 0,
+            "current": "",
+        }
+    return job_id
+
+
+def _job_update(job_id: str, done: int, current: str) -> None:
+    with _jobs_lock:
+        if job_id in _active_jobs:
+            _active_jobs[job_id]["done"] = done
+            _active_jobs[job_id]["current"] = current
+
+
+def _job_finish(job_id: str) -> None:
+    with _jobs_lock:
+        _active_jobs.pop(job_id, None)
+
+
 # ── Globals (set by CLI before uvicorn starts) ────────────────────────────────
 
 data_dir: Path | None = None
@@ -346,6 +382,15 @@ async def admin_users(bincio_session: Optional[str] = Cookie(default=None)) -> J
     } for u in users])
 
 
+@app.get("/api/admin/jobs")
+async def admin_jobs(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Return currently active upload/processing jobs. Admin only."""
+    _require_admin(bincio_session)
+    with _jobs_lock:
+        jobs = list(_active_jobs.values())
+    return JSONResponse(jobs)
+
+
 # ── Write API (ported from bincio edit, auth-gated) ───────────────────────────
 
 def _user_data_dir(handle: str) -> Path:
@@ -529,12 +574,17 @@ async def upload_activity(
     files: list[UploadFile] = File(...),
     store_original: bool = Form(False),
     bincio_session: Optional[str] = Cookie(default=None),
-) -> JSONResponse:
-    """Accept FIT/GPX/TCX files and/or activities.csv, extract, update index, re-merge.
+) -> StreamingResponse:
+    """Accept FIT/GPX/TCX files and/or activities.csv; stream SSE progress while processing.
 
     activities.csv (Strava export format) can be included in the batch to:
-      - Enrich activity files being uploaded in the same batch (matched by filename)
+      - Enrich activity files in the same batch (matched by filename)
       - Retroactively update sidecars for existing activities (matched by strava_id)
+
+    SSE events:
+      {"type": "progress", "n": N, "total": T, "name": "...", "status": "imported"|"duplicate"|"error"}
+      {"type": "csv", "updates": N}   -- only when CSV was included
+      {"type": "done", "added": N, "csv_updates": N, "duplicates": N, "errors": N}
     """
     from bincio.extract.ingest import ingest_parsed
     from bincio.extract.parsers.factory import parse_file
@@ -546,86 +596,106 @@ async def upload_activity(
     staging = dd / "_uploads"
     staging.mkdir(exist_ok=True)
 
-    # Separate CSV files from activity files
-    csv_files: list[UploadFile] = []
-    activity_files: list[UploadFile] = []
-    for f in files:
-        fname = Path(f.filename or "").name.lower()
-        if fname.endswith(".csv"):
-            csv_files.append(f)
-        else:
-            activity_files.append(f)
+    # Read all files into memory now (async), then process synchronously in the generator
+    csv_bytes_list: list[bytes] = []
+    activity_items: list[tuple[str, bytes]] = []   # (original_filename, bytes)
 
-    # Build metadata from the first CSV found (activities.csv from Strava export)
+    for f in files:
+        fname = Path(f.filename or "").name
+        raw = await f.read()
+        if fname.lower().endswith(".csv"):
+            csv_bytes_list.append(raw)
+        else:
+            activity_items.append((fname, raw))
+
+    # Build metadata from the first CSV
     metadata = None
-    if csv_files:
+    if csv_bytes_list:
         from bincio.extract.strava_csv import StravaMetadata
         import tempfile
-        csv_bytes = await csv_files[0].read()
         with tempfile.NamedTemporaryFile(suffix=".csv", delete=False) as tmp:
-            tmp.write(csv_bytes)
+            tmp.write(csv_bytes_list[0])
             tmp_path = Path(tmp.name)
         try:
             metadata = StravaMetadata(tmp_path)
         finally:
             tmp_path.unlink(missing_ok=True)
 
-    results = []
-    any_added = False
+    total_files = len(activity_items)
+    job_id = _job_start(user.handle, total_files) if total_files > 0 else None
 
-    for file in activity_files:
-        name = Path(file.filename or "upload.fit").name
-        suffix = _file_suffix(name)
-        if suffix not in _SUPPORTED_SUFFIXES:
-            results.append({"name": name, "ok": False, "error": f"Unsupported file type '{suffix}'"})
-            continue
+    def event_stream():
+        added = 0
+        duplicates = 0
+        errors = 0
+        any_added = False
 
-        contents = await file.read()
-        if len(contents) > 50 * 1024 * 1024:
-            results.append({"name": name, "ok": False, "error": "File too large (max 50 MB)"})
-            continue
+        for n, (name, contents) in enumerate(activity_items, 1):
+            if job_id:
+                _job_update(job_id, n - 1, name)
 
-        staged = staging / name
-        staged.write_bytes(contents)
-        kept = False
-        try:
-            activity = parse_file(staged)
-
-            # Enrich with CSV metadata when available (matched by filename)
-            if metadata is not None:
-                metadata.enrich(name, activity)
-
-            activity_id = make_activity_id(activity)
-            if (dd / "activities" / f"{activity_id}.json").exists():
-                results.append({"name": name, "ok": False, "error": "duplicate"})
+            suffix = _file_suffix(name)
+            if suffix not in _SUPPORTED_SUFFIXES:
+                errors += 1
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error', 'detail': 'unsupported type'})}\n\n"
                 continue
-            ingest_parsed(activity, dd, privacy="public")
-            if store_original:
-                originals_dir = dd / "originals"
-                originals_dir.mkdir(exist_ok=True)
-                staged.rename(originals_dir / name)
-                kept = True
-            results.append({"name": name, "ok": True, "id": activity_id})
-            any_added = True
-        except Exception:
-            results.append({"name": name, "ok": False, "error": "Processing failed"})
-        finally:
-            if not kept:
-                staged.unlink(missing_ok=True)
 
-    # Retroactively update sidecars for existing activities matched by strava_id
-    csv_updates = 0
-    if metadata is not None:
-        from bincio.extract.strava_csv import apply_csv_to_data_dir
-        csv_updates = apply_csv_to_data_dir(dd, metadata)
+            if len(contents) > 50 * 1024 * 1024:
+                errors += 1
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error', 'detail': 'file too large'})}\n\n"
+                continue
 
-    if any_added or csv_updates:
-        merge_all(dd)
-        if any_added:
-            _trigger_rebuild(user.handle)
+            staged = staging / name
+            staged.write_bytes(contents)
+            kept = False
+            try:
+                activity = parse_file(staged)
+                if metadata is not None:
+                    metadata.enrich(name, activity)
+                activity_id = make_activity_id(activity)
+                if (dd / "activities" / f"{activity_id}.json").exists():
+                    duplicates += 1
+                    yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'duplicate'})}\n\n"
+                    continue
+                ingest_parsed(activity, dd, privacy="public")
+                if store_original:
+                    originals_dir = dd / "originals"
+                    originals_dir.mkdir(exist_ok=True)
+                    staged.rename(originals_dir / name)
+                    kept = True
+                added += 1
+                any_added = True
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'imported'})}\n\n"
+            except Exception:
+                errors += 1
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error'})}\n\n"
+            finally:
+                if not kept:
+                    staged.unlink(missing_ok=True)
 
-    added = [r for r in results if r["ok"]]
-    return JSONResponse({"ok": True, "added": len(added), "csv_updates": csv_updates, "results": results})
+        # Retroactively apply CSV metadata to existing activities
+        csv_updates = 0
+        if metadata is not None:
+            from bincio.extract.strava_csv import apply_csv_to_data_dir
+            csv_updates = apply_csv_to_data_dir(dd, metadata)
+            if csv_updates:
+                yield f"data: {json.dumps({'type': 'csv', 'updates': csv_updates})}\n\n"
+
+        if any_added or csv_updates:
+            merge_all(dd)
+            if any_added:
+                _trigger_rebuild(user.handle)
+
+        yield f"data: {json.dumps({'type': 'done', 'added': added, 'csv_updates': csv_updates, 'duplicates': duplicates, 'errors': errors})}\n\n"
+
+        if job_id:
+            _job_finish(job_id)
+
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
 
 
 @app.post("/api/upload/strava-zip")
diff --git a/site/astro.config.mjs b/site/astro.config.mjs
index 5622396..6bd511f 100644
--- a/site/astro.config.mjs
+++ b/site/astro.config.mjs
@@ -25,10 +25,11 @@ export default defineConfig({
     // In production nginx handles this — same pattern, no code change needed.
     server: {
       proxy: {
-        // SSE response to a POST — Vite's default proxy buffers the full body before
-        // forwarding, which breaks streaming and can cause EPIPE on long uploads.
+        // Both /api/upload and /api/upload/strava-zip return SSE streams in response
+        // to POST requests. Vite's default proxy buffers the full body before forwarding,
+        // which breaks streaming and causes EPIPE on long uploads.
         // selfHandleResponse + manual pipe sends chunks as they arrive.
-        '/api/upload/strava-zip': {
+        '/api/upload': {
           target: serveTarget,
           changeOrigin: true,
           selfHandleResponse: true,
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index a44c785..cccea1b 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -190,6 +190,14 @@ try {
       <div class="ml-auto shrink-0 flex items-center gap-1">
         {!isPublicPage && (
           <>
+            <!-- Admin: active upload jobs badge (hidden until jobs exist) -->
+            <span
+              id="admin-jobs-badge"
+              style="display:none"
+              title=""
+              class="text-xs px-2 py-0.5 rounded-full bg-amber-900/60 text-amber-300 border border-amber-700/50 animate-pulse cursor-default"
+            ></span>
+
             <!-- Logout button — hidden until logged in -->
             <button
               id="nav-logout"
@@ -423,6 +431,31 @@ try {
           // Pre-populate the "keep original" checkbox from the instance default
           const chk = document.getElementById('upload-keep-original');
           if (chk && user.store_originals_default) chk.checked = true;
+
+          // Admin: poll for active jobs and show a badge in the nav
+          if (user.is_admin) {
+            const badge = document.getElementById('admin-jobs-badge');
+            async function pollJobs() {
+              try {
+                const jr = await fetch('/api/admin/jobs', { credentials: 'include' });
+                if (!jr.ok) return;
+                const jobs = await jr.json();
+                if (!badge) return;
+                if (jobs.length === 0) {
+                  badge.style.display = 'none';
+                } else {
+                  const summary = jobs.map(j =>
+                    `@${j.user}: ${j.done}/${j.total} files`
+                  ).join(' · ');
+                  badge.title = summary;
+                  badge.textContent = `${jobs.length} upload${jobs.length > 1 ? 's' : ''} running`;
+                  badge.style.display = '';
+                }
+              } catch (_) {}
+            }
+            pollJobs();
+            setInterval(pollJobs, 5000);
+          }
         } catch (_) {}
       })();
 
@@ -510,38 +543,77 @@ try {
       });
       input.addEventListener('change', () => { if (input.files?.length) doUpload(input.files); });
 
-      async function doUpload(files) {
+      function doUpload(files) {
         const n = files.length;
         label.textContent = n === 1 ? files[0].name : `${n} files selected`;
-        fileStatus.textContent = `Uploading ${n} file${n > 1 ? 's' : ''}…`;
+        fileStatus.textContent = `Uploading…`;
         fileStatus.style.color = 'var(--text-4)';
         drop.style.pointerEvents = 'none';
+
         const fd = new FormData();
         for (const f of files) fd.append('files', f);
         fd.append('store_original', keepOriginalChk?.checked ? 'true' : 'false');
-        try {
-          const r = await fetch(`${editUrl}/api/upload`, { method: 'POST', credentials: 'include', body: fd });
-          if (!r.ok) throw new Error(await r.text());
-          const d = await r.json();
-          const dupes = d.results.filter(r => r.error === 'duplicate').length;
-          const errors = d.results.filter(r => !r.ok && r.error !== 'duplicate').length;
-          const parts = [];
-          if (d.added > 0) parts.push(`${d.added} added`);
-          if (d.csv_updates > 0) parts.push(`${d.csv_updates} updated from CSV`);
-          if (dupes) parts.push(`${dupes} duplicate${dupes > 1 ? 's' : ''}`);
-          if (errors) parts.push(`${errors} failed`);
-          if (parts.length === 0) parts.push('nothing to add');
-          fileStatus.textContent = parts.join(', ');
-          const anyGood = d.added > 0 || d.csv_updates > 0;
-          fileStatus.style.color = anyGood ? '#4ade80' : '#a1a1aa';
-          if (anyGood) setTimeout(() => { window.location.reload(); }, 1200);
-          else drop.style.pointerEvents = '';
-        } catch (e) {
-          fileStatus.textContent = 'Error: ' + e.message;
+
+        const xhr = new XMLHttpRequest();
+        xhr.open('POST', `${editUrl}/api/upload`);
+        xhr.withCredentials = true;
+        xhr.setRequestHeader('Accept', 'text/event-stream');
+
+        let buf = '';
+        let added = 0, dupes = 0, errors = 0, csvUpdates = 0;
+
+        xhr.onprogress = () => {
+          const newText = xhr.responseText.slice(buf.length);
+          buf = xhr.responseText;
+          for (const line of newText.split('\n')) {
+            if (!line.startsWith('data: ')) continue;
+            try {
+              const ev = JSON.parse(line.slice(6));
+              if (ev.type === 'progress') {
+                const pct = Math.round((ev.n / ev.total) * 100);
+                const icon = ev.status === 'imported' ? '↓' : ev.status === 'duplicate' ? '·' : '✗';
+                fileStatus.textContent = `${icon} ${ev.n}/${ev.total} (${pct}%) — ${ev.name}`;
+                if (ev.status === 'imported') added++;
+                else if (ev.status === 'duplicate') dupes++;
+                else errors++;
+              } else if (ev.type === 'csv') {
+                csvUpdates = ev.updates;
+              } else if (ev.type === 'done') {
+                added = ev.added; dupes = ev.duplicates; errors = ev.errors; csvUpdates = ev.csv_updates;
+                const parts = [];
+                if (added > 0) parts.push(`${added} added`);
+                if (csvUpdates > 0) parts.push(`${csvUpdates} updated from CSV`);
+                if (dupes) parts.push(`${dupes} duplicate${dupes > 1 ? 's' : ''}`);
+                if (errors) parts.push(`${errors} failed`);
+                if (parts.length === 0) parts.push('nothing to add');
+                fileStatus.textContent = parts.join(', ');
+                const anyGood = added > 0 || csvUpdates > 0;
+                fileStatus.style.color = anyGood ? '#4ade80' : '#a1a1aa';
+                if (anyGood) setTimeout(() => window.location.reload(), 1200);
+                else drop.style.pointerEvents = '';
+                input.value = '';
+              }
+            } catch (_) {}
+          }
+        };
+
+        xhr.onload = () => {
+          if (xhr.status !== 200) {
+            fileStatus.textContent = `Upload failed (${xhr.status}).`;
+            fileStatus.style.color = '#f87171';
+            drop.style.pointerEvents = '';
+            input.value = '';
+          }
+        };
+
+        xhr.onerror = () => {
+          fileStatus.textContent = 'Upload failed — check your connection.';
           fileStatus.style.color = '#f87171';
           drop.style.pointerEvents = '';
           input.value = '';
-        }
+        };
+
+        xhr.send(fd);
       }
 
       // ── Strava ────────────────────────────────────────────────────────────

From ef5b06c5b3ef79b1038e34eac386b5503a266ee2 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 08:47:27 +0200
Subject: [PATCH 040/124] trigger rebuild after activities upload

---
 bincio/serve/cli.py    |  8 ++++-
 bincio/serve/server.py | 69 ++++++++++++++++++++++++++++++++++--------
 docs/deployment/vps.md |  1 +
 3 files changed, 64 insertions(+), 14 deletions(-)

diff --git a/bincio/serve/cli.py b/bincio/serve/cli.py
index ae07a44..9825cc0 100644
--- a/bincio/serve/cli.py
+++ b/bincio/serve/cli.py
@@ -20,9 +20,11 @@ console = Console()
 @click.option("--strava-client-secret", default=None, envvar="STRAVA_CLIENT_SECRET", help="Strava OAuth client secret")
 @click.option("--max-users", default=None, type=int, help="Override max users for this instance (0 = unlimited; updates the DB setting)")
 @click.option("--public-url", default=None, envvar="PUBLIC_URL", help="Public base URL (e.g. https://yourdomain.com). Required for Strava OAuth to work behind a reverse proxy.")
+@click.option("--webroot", default=None, type=click.Path(), help="Nginx webroot (e.g. /var/www/bincio). When set, uploads trigger a full Astro build + rsync so new activity pages are immediately accessible without a git push.")
 def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
           strava_client_id: Optional[str], strava_client_secret: Optional[str],
-          max_users: Optional[int], public_url: Optional[str]) -> None:
+          max_users: Optional[int], public_url: Optional[str],
+          webroot: Optional[str]) -> None:
     """Start the bincio multi-user application server.
 
     Handles auth, user management, and write operations.
@@ -54,6 +56,8 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
         srv.strava_client_secret = strava_client_secret
     if public_url:
         srv.public_url = public_url
+    if webroot and site_dir:
+        srv.webroot = Path(webroot).expanduser().resolve()
 
     db = open_db(dd)
     current_limit = get_setting(db, "max_users")
@@ -63,6 +67,8 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
     console.print(f"  Data:  [cyan]{dd}[/cyan]")
     if srv.site_dir:
         console.print(f"  Site:  [cyan]{srv.site_dir}[/cyan]")
+    if srv.webroot:
+        console.print(f"  Web:   [cyan]{srv.webroot}[/cyan] (auto-rebuild on upload)")
     console.print(f"  URL:   [cyan]http://{host}:{port}[/cyan]")
     if current_limit and int(current_limit) > 0:
         console.print(f"  Users: [yellow]max {current_limit}[/yellow]")
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 52057cf..7126b9c 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -82,6 +82,7 @@ def _job_finish(job_id: str) -> None:
 
 data_dir: Path | None = None
 site_dir: Path | None = None   # for post-write rebuild trigger
+webroot: Path | None = None    # nginx webroot — when set, trigger full rebuild + rsync
 strava_client_id: str = ""
 strava_client_secret: str = ""
 public_url: str = ""   # e.g. "https://yourdomain.com" — used for OAuth redirect URIs
@@ -201,25 +202,67 @@ def _unique_image_name(directory: Path, filename: str) -> str:
 
 # ── Post-write rebuild ────────────────────────────────────────────────────────
 
+# Serialises concurrent rebuilds — only one full build runs at a time.
+# A second upload that arrives while a build is in progress will queue and
+# run after the first finishes, picking up all data written in between.
+_rebuild_lock = threading.Lock()
+
+
 def _trigger_rebuild(handle: str) -> None:
-    """Asynchronously re-merge one user's shard and rewrite the root manifest."""
+    """Asynchronously re-merge and optionally rebuild + rsync the site.
+
+    - Without --webroot: fast path — merges sidecars + rewrites root manifest
+      (~1 s).  New activity pages require the nginx try_files fallback to work.
+    - With --webroot: full Astro build + rsync to the nginx webroot (~30–60 s,
+      serialised).  New activity pages are immediately accessible.
+    """
     if site_dir is None:
         return
     if not _VALID_HANDLE.match(handle):
         return  # safety: never pass untrusted strings to subprocess
+
     uv = shutil.which("uv") or str(Path.home() / ".local" / "bin" / "uv")
-    try:
-        subprocess.Popen(
-            [uv, "run", "bincio", "render",
-             "--data-dir", str(data_dir),
-             "--site-dir", str(site_dir),
-             "--handle", handle,
-             "--no-build"],
-            stdout=subprocess.DEVNULL,
-            stderr=subprocess.DEVNULL,
-        )
-    except Exception:
-        pass  # rebuild failure must never 500 the calling endpoint
+    _data_dir = str(data_dir)
+    _site_dir = str(site_dir)
+    _webroot  = str(webroot) if webroot else None
+    _handle   = handle
+
+    def _run() -> None:
+        try:
+            if _webroot is None:
+                # Fast: only update data, skip Astro build
+                subprocess.run(
+                    [uv, "run", "bincio", "render",
+                     "--data-dir", _data_dir,
+                     "--site-dir", _site_dir,
+                     "--handle", _handle,
+                     "--no-build"],
+                    stdout=subprocess.DEVNULL,
+                    stderr=subprocess.DEVNULL,
+                )
+            else:
+                # Full build + rsync — serialised so concurrent uploads don't race
+                with _rebuild_lock:
+                    result = subprocess.run(
+                        [uv, "run", "bincio", "render",
+                         "--data-dir", _data_dir,
+                         "--site-dir", _site_dir,
+                         "--handle", _handle],
+                        stdout=subprocess.DEVNULL,
+                        stderr=subprocess.DEVNULL,
+                    )
+                    if result.returncode == 0:
+                        # Rsync built site to nginx webroot
+                        subprocess.run(
+                            ["rsync", "-a", "--delete",
+                             f"{_site_dir}/dist/", _webroot + "/"],
+                            stdout=subprocess.DEVNULL,
+                            stderr=subprocess.DEVNULL,
+                        )
+        except Exception:
+            pass  # rebuild failure must never affect the calling request
+
+    threading.Thread(target=_run, daemon=True).start()
 
 
 # ── Auth endpoints ────────────────────────────────────────────────────────────
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 8842d08..21a9538 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -113,6 +113,7 @@ WorkingDirectory=/opt/bincio
 ExecStart=/root/.local/bin/uv run bincio serve \
     --data-dir /var/bincio/data \
     --site-dir /opt/bincio/site \
+    --webroot /var/www/bincio \
     --host 127.0.0.1 \
     --port 4041 \
     --public-url https://yourdomain.com

From 18551f9f360f2aa4972898afceb2ca75bdab61fc Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 09:01:34 +0200
Subject: [PATCH 041/124] document where feedback is saved

---
 CLAUDE.md | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/CLAUDE.md b/CLAUDE.md
index f8249e0..f721bea 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -248,6 +248,31 @@ When a user uploads a FIT/GPX/TCX file the server may keep the source in `{user_
 
 For Strava sync, `store_originals=true` causes `POST /api/strava/sync` to save `{"meta":…,"streams":…}` JSON per activity to `{user_dir}/originals/strava/{activity_id}.json`.
 
+## Feedback storage
+
+User feedback submitted via `/feedback/` is stored as flat files under the instance data root (NOT inside a user's own data dir):
+
+```
+{data_root}/
+  _feedback/
+    {handle}.json          ← append-only list of submissions for that user
+    {handle}/
+      {timestamp}_{token}_{filename}   ← attached images
+```
+
+Each entry in `{handle}.json`:
+```json
+{ "id": "1712345678_ab12cd34", "handle": "brut", "submitted_at": "...", "text": "...", "images": ["..."] }
+```
+
+To read feedback on the VPS:
+```bash
+cat /var/bincio/data/_feedback/brut.json | python3 -m json.tool
+ls  /var/bincio/data/_feedback/brut/   # attached images
+```
+
+There is no admin UI for feedback — it is intentionally read via SSH/shell only.
+
 ## About pages
 
 Static public pages at `/about/` (EN), `/about/it/` (IT), `/about/es/` (ES), `/about/ca/` (CA). All use `public={true}` to bypass the auth wall. Each page:

From 8219db7bfa502837d4283b77b6260273eb569691 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 09:01:47 +0200
Subject: [PATCH 042/124] shorten bincioactivity to ba on mobile

---
 site/src/layouts/Base.astro | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index cccea1b..7300983 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -156,9 +156,10 @@ try {
     style="border-color: var(--border)"
   >
     <div class="max-w-7xl mx-auto px-4 h-12 flex items-center gap-3">
-      <!-- Logo: always visible, never shrinks -->
+      <!-- Logo: always visible, never shrinks. Full name on sm+, abbreviated on mobile. -->
       <a href={baseUrl} class="font-bold text-white tracking-tight hover:text-[--accent] transition-colors shrink-0">
-        Bincio<span class="text-[--accent]">Activity</span>
+        <span class="hidden sm:inline">Bincio<span class="text-[--accent]">Activity</span></span>
+        <span class="sm:hidden">B<span class="text-[--accent]">A</span></span>
       </a>
       {!isPublicPage && (
         <!-- Links: scroll horizontally on mobile, no visible scrollbar -->

From 087ef1b7769e67ccec1ec1022db4e0f1df98da47 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 09:02:58 +0200
Subject: [PATCH 043/124] fix power chart ranges

---
 site/src/components/MmpChart.svelte | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/site/src/components/MmpChart.svelte b/site/src/components/MmpChart.svelte
index 4a9efcb..cf7b3b4 100644
--- a/site/src/components/MmpChart.svelte
+++ b/site/src/components/MmpChart.svelte
@@ -101,10 +101,12 @@
         label: 'Duration',
         tickFormat: (d: number) => formatDuration(d),
         grid: true,
+        domain: [data[0]?.d ?? 1, Math.max(7200, ...data.map(d => d.d))],
       },
       y: {
         label: 'Avg power (W)',
         grid: true,
+        domain: [0, null],
       },
       color: {
         domain: selectedKeys,

From ff8981b3a109838e19c84bd3796dd12006f676ca Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 10:54:13 +0200
Subject: [PATCH 044/124] fix power curve y-axis: use zero:true instead of
 domain:[0,null]

---
 site/src/components/MmpChart.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/src/components/MmpChart.svelte b/site/src/components/MmpChart.svelte
index cf7b3b4..40e3744 100644
--- a/site/src/components/MmpChart.svelte
+++ b/site/src/components/MmpChart.svelte
@@ -106,7 +106,7 @@
       y: {
         label: 'Avg power (W)',
         grid: true,
-        domain: [0, null],
+        zero: true,
       },
       color: {
         domain: selectedKeys,

From f4008c0f514e2068e157ade7528a88b090b16c8a Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 10:56:16 +0200
Subject: [PATCH 045/124] pin @observablehq/plot to 0.6.17

---
 site/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/package.json b/site/package.json
index 264bc1a..8853b0c 100644
--- a/site/package.json
+++ b/site/package.json
@@ -22,7 +22,7 @@
     "@capacitor/filesystem": "^8.1.2",
     "@capacitor/geolocation": "^8.2.0",
     "@capacitor/ios": "^8.3.0",
-    "@observablehq/plot": "^0.6.0",
+    "@observablehq/plot": "0.6.17",
     "@types/dompurify": "^3.0.5",
     "astro": "^5.0.0",
     "dompurify": "^3.3.3",

From 5de99671271290c63d065c9777e5e9ac22dfc9ed Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 14:12:54 +0200
Subject: [PATCH 046/124] fix upload 500: add missing _file_suffix to serve
 server; fix iOS file picker accept types

---
 bincio/serve/server.py      | 8 ++++++++
 site/src/layouts/Base.astro | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 7126b9c..e4d190e 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -612,6 +612,14 @@ async def save_athlete(
 _SUPPORTED_SUFFIXES = {".fit", ".gpx", ".tcx", ".fit.gz", ".gpx.gz", ".tcx.gz"}
 
 
+def _file_suffix(name: str) -> str:
+    """Return the effective suffix, including .gz double-extension."""
+    p = Path(name.lower())
+    if p.suffix == ".gz":
+        return p.stem.rsplit(".", 1)[-1].join([".", ".gz"]) if "." in p.stem else ".gz"
+    return p.suffix
+
+
 @app.post("/api/upload")
 async def upload_activity(
     files: list[UploadFile] = File(...),
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 7300983..b20cd7f 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -285,7 +285,7 @@ try {
             class="border-2 border-dashed border-zinc-700 rounded-lg p-8 text-center text-zinc-500 text-sm cursor-pointer hover:border-zinc-500 hover:text-zinc-300 transition-colors"
           >
             <div id="upload-label">Drop FIT, GPX, TCX, or activities.csv<br/>or click to browse</div>
-            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz,.csv" class="hidden" multiple />
+            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz,.csv,application/gpx+xml,application/vnd.garmin.tcx+xml,application/octet-stream" class="hidden" multiple />
           </div>
           <label class="flex items-start gap-2 mt-3 cursor-pointer group">
             <input

From 9015d97b18090365417f6146633ee66c34ee4576 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 14:17:42 +0200
Subject: [PATCH 047/124] trigger site rebuild after new user registration so
 profile pages exist immediately

---
 bincio/serve/server.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index e4d190e..94e7525 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -380,6 +380,9 @@ async def register(request: Request) -> JSONResponse:
     from bincio.render.cli import _write_root_manifest
     _write_root_manifest(dd)
 
+    # Rebuild site so the new user's profile pages exist immediately
+    _trigger_rebuild(handle)
+
     token = create_session(_get_db(), handle)
     resp = JSONResponse({"ok": True, "handle": handle})
     _set_session_cookie(resp, token)

From 0b569b727cdc8ccee57834677c30993370054233 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 14:17:42 +0200
Subject: [PATCH 048/124] trigger site rebuild after new user registration so
 profile pages exist immediately

---
 bincio/serve/server.py | 3 +++
 docs/deployment/vps.md | 5 +++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index e4d190e..94e7525 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -380,6 +380,9 @@ async def register(request: Request) -> JSONResponse:
     from bincio.render.cli import _write_root_manifest
     _write_root_manifest(dd)
 
+    # Rebuild site so the new user's profile pages exist immediately
+    _trigger_rebuild(handle)
+
     token = create_session(_get_db(), handle)
     resp = JSONResponse({"ok": True, "handle": handle})
     _set_session_cookie(resp, token)
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 21a9538..a973dfe 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -264,9 +264,10 @@ server {
         try_files $uri $uri/ /activity/index.html;
     }
 
-    # Per-user profile pages: same fallback for new users.
+    # Per-user profile pages: fall back to the home page while the background
+    # rebuild (triggered automatically on registration) completes.
     location /u/ {
-        try_files $uri $uri/ =404;
+        try_files $uri $uri/ /index.html;
     }
 
     # Static files

From 705e00f8527e8a800030699eec457edc447c5006 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 14:39:19 +0200
Subject: [PATCH 049/124] adding community tab

---
 site/src/components/CommunityView.svelte | 348 +++++++++++++++++++++++
 site/src/layouts/Base.astro              |   8 +-
 site/src/pages/about/ca/index.astro      |  30 +-
 site/src/pages/about/es/index.astro      |  30 +-
 site/src/pages/about/index.astro         |  30 +-
 site/src/pages/about/it/index.astro      |  30 +-
 site/src/pages/community/index.astro     |   7 +
 7 files changed, 443 insertions(+), 40 deletions(-)
 create mode 100644 site/src/components/CommunityView.svelte
 create mode 100644 site/src/pages/community/index.astro

diff --git a/site/src/components/CommunityView.svelte b/site/src/components/CommunityView.svelte
new file mode 100644
index 0000000..1fffc4d
--- /dev/null
+++ b/site/src/components/CommunityView.svelte
@@ -0,0 +1,348 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import type { BASIndex, ActivitySummary } from '../lib/types';
+  import { formatDistance, formatDuration, sportIcon } from '../lib/format';
+
+  export let base: string = '/';
+
+  type Period = 'week' | 'month' | 'year' | 'all';
+
+  interface UserRaw {
+    handle: string;
+    display_name: string;
+    activities: ActivitySummary[];
+  }
+
+  interface UserStat {
+    handle: string;
+    display_name: string;
+    count: number;
+    distance_m: number;
+    elevation_m: number;
+    duration_s: number;
+    sports: string[];
+    streak: number;
+  }
+
+  interface Totals {
+    count: number;
+    distance_m: number;
+    elevation_m: number;
+    duration_s: number;
+    users: number;
+  }
+
+  let period: Period = 'month';
+  let users: UserRaw[] = [];
+  let stats: UserStat[] = [];
+  let totals: Totals = { count: 0, distance_m: 0, elevation_m: 0, duration_s: 0, users: 0 };
+  let loading = true;
+  let error: string | null = null;
+
+  // ── Helpers ───────────────────────────────────────────────────────────────
+
+  function periodStart(p: Period): Date {
+    const now = new Date();
+    if (p === 'all') return new Date(0);
+    if (p === 'year') return new Date(now.getFullYear(), 0, 1);
+    if (p === 'month') return new Date(now.getFullYear(), now.getMonth(), 1);
+    // week: Monday
+    const d = new Date(now);
+    const day = d.getDay();
+    d.setDate(d.getDate() - (day === 0 ? 6 : day - 1));
+    d.setHours(0, 0, 0, 0);
+    return d;
+  }
+
+  /** Max consecutive active days across all public activities (all-time). */
+  function maxStreak(activities: ActivitySummary[]): number {
+    if (!activities.length) return 0;
+    const days = [...new Set(activities.map(a => a.started_at.slice(0, 10)))].sort();
+    let max = 1, cur = 1;
+    for (let i = 1; i < days.length; i++) {
+      const diff = (new Date(days[i]).getTime() - new Date(days[i - 1]).getTime()) / 86_400_000;
+      cur = diff === 1 ? cur + 1 : 1;
+      if (cur > max) max = cur;
+    }
+    return max;
+  }
+
+  function computeStats(rawUsers: UserRaw[], p: Period): { stats: UserStat[]; totals: Totals } {
+    const start = periodStart(p);
+    const result: UserStat[] = [];
+    const tot: Totals = { count: 0, distance_m: 0, elevation_m: 0, duration_s: 0, users: 0 };
+
+    for (const u of rawUsers) {
+      const pub = u.activities.filter(a => a.privacy !== 'private');
+      const filtered = pub.filter(a => new Date(a.started_at) >= start);
+      if (filtered.length === 0) continue;
+
+      const stat: UserStat = {
+        handle: u.handle,
+        display_name: u.display_name,
+        count: filtered.length,
+        distance_m: filtered.reduce((s, a) => s + (a.distance_m ?? 0), 0),
+        elevation_m: filtered.reduce((s, a) => s + (a.elevation_gain_m ?? 0), 0),
+        duration_s: filtered.reduce((s, a) => s + (a.duration_s ?? 0), 0),
+        sports: [...new Set(filtered.map(a => a.sport))],
+        streak: maxStreak(pub),
+      };
+
+      tot.count += stat.count;
+      tot.distance_m += stat.distance_m;
+      tot.elevation_m += stat.elevation_m;
+      tot.duration_s += stat.duration_s;
+      tot.users++;
+
+      result.push(stat);
+    }
+
+    return { stats: result, totals: tot };
+  }
+
+  // ── Data loading ──────────────────────────────────────────────────────────
+
+  async function fetchShard(url: string): Promise<ActivitySummary[]> {
+    const data: BASIndex = await fetch(url).then(r => { if (!r.ok) throw new Error(String(r.status)); return r.json(); });
+    const own = data.activities ?? [];
+    if (!data.shards?.length) return own;
+    const shardBase = url.substring(0, url.lastIndexOf('/') + 1);
+    const nested = await Promise.allSettled(
+      data.shards.map(s => fetchShard(s.url.startsWith('http') ? s.url : `${shardBase}${s.url}`))
+    );
+    return [...own, ...nested.flatMap(r => r.status === 'fulfilled' ? r.value : [])];
+  }
+
+  async function loadData() {
+    try {
+      const rootUrl = `${base}data/index.json`;
+      const root: BASIndex = await fetch(rootUrl).then(r => r.json());
+
+      const userShards = (root.shards ?? []).filter(s => s.handle);
+      if (userShards.length === 0) {
+        error = 'No community members found.';
+        return;
+      }
+
+      const results = await Promise.allSettled(
+        userShards.map(async shard => {
+          const shardBase = `${base}data/`;
+          const url = shard.url.startsWith('http') ? shard.url : `${shardBase}${shard.url}`;
+          const shardIndex: BASIndex = await fetch(url).then(r => r.json());
+          const activities = await fetchShard(url);
+          return {
+            handle: shard.handle!,
+            display_name: shardIndex.owner?.display_name ?? shard.handle!,
+            activities,
+          } as UserRaw;
+        })
+      );
+
+      users = results.flatMap(r => r.status === 'fulfilled' ? [r.value] : []);
+      ({ stats, totals } = computeStats(users, period));
+    } catch (e: any) {
+      error = e.message;
+    } finally {
+      loading = false;
+    }
+  }
+
+  $: if (users.length) {
+    ({ stats, totals } = computeStats(users, period));
+  }
+
+  onMount(loadData);
+
+  // ── Ranking helpers ───────────────────────────────────────────────────────
+
+  function top3<K extends keyof UserStat>(key: K, min = 0): UserStat[] {
+    return [...stats]
+      .filter(u => (u[key] as number) > min)
+      .sort((a, b) => (b[key] as number) - (a[key] as number))
+      .slice(0, 3);
+  }
+
+  function top3Sports(): UserStat[] {
+    return [...stats]
+      .filter(u => u.sports.length > 1)
+      .sort((a, b) => b.sports.length - a.sports.length)
+      .slice(0, 3);
+  }
+
+  const MEDAL = ['🥇', '🥈', '🥉'];
+
+  $: rowsCount     = top3('count', 0);
+  $: rowsDistance  = top3('distance_m', 0);
+  $: rowsElevation = top3('elevation_m', 0);
+  $: rowsDuration  = top3('duration_s', 0);
+  $: rowsSports    = top3Sports();
+  $: rowsStreak    = [...stats].filter(u => u.streak > 1).sort((a, b) => b.streak - a.streak).slice(0, 3);
+
+  const PERIODS: { key: Period; label: string }[] = [
+    { key: 'week',  label: 'This week'  },
+    { key: 'month', label: 'This month' },
+    { key: 'year',  label: 'This year'  },
+    { key: 'all',   label: 'All time'   },
+  ];
+</script>
+
+<div class="space-y-8">
+  <!-- Header -->
+  <div>
+    <h1 class="text-2xl font-bold text-white mb-1">Community</h1>
+    <p class="text-zinc-400 text-sm">What everyone's been up to — together.</p>
+  </div>
+
+  {#if loading}
+    <p class="text-zinc-400 text-sm">Loading…</p>
+  {:else if error}
+    <p class="text-red-400 text-sm">{error}</p>
+  {:else}
+
+    <!-- Period selector -->
+    <div class="flex gap-2 flex-wrap">
+      {#each PERIODS as p}
+        <button
+          on:click={() => period = p.key}
+          class="px-3 py-1.5 rounded-full text-sm font-medium border transition-colors"
+          class:bg-blue-500={period === p.key}
+          class:border-blue-500={period === p.key}
+          class:text-white={period === p.key}
+          class:border-zinc-700={period !== p.key}
+          class:text-zinc-400={period !== p.key}
+          class:hover:text-white={period !== p.key}
+        >{p.label}</button>
+      {/each}
+    </div>
+
+    <!-- Community totals banner -->
+    {#if totals.users > 0}
+      <div class="grid grid-cols-2 sm:grid-cols-4 gap-3">
+        {#each [
+          { label: 'Activities', value: totals.count.toLocaleString() },
+          { label: 'Distance',   value: formatDistance(totals.distance_m) },
+          { label: 'Elevation',  value: `${Math.round(totals.elevation_m / 1000).toLocaleString()} km↑` },
+          { label: 'Time',       value: formatDuration(totals.duration_s) },
+        ] as item}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 text-center">
+            <div class="text-xl font-bold text-white">{item.value}</div>
+            <div class="text-xs text-zinc-500 mt-0.5">{item.label}</div>
+          </div>
+        {/each}
+      </div>
+    {/if}
+
+    <!-- Leaderboard sections -->
+    {#if totals.users === 0}
+      <p class="text-zinc-500 text-sm">No public activities in this period yet.</p>
+    {:else}
+      <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
+
+        <!-- Out there -->
+        {#if rowsCount.length}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
+            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Out there</h2>
+            <p class="text-xs text-zinc-500 -mt-1">Who kept showing up</p>
+            {#each rowsCount as u, i}
+              <div class="flex items-center justify-between">
+                <div class="flex items-center gap-2 min-w-0">
+                  <span class="text-base leading-none">{MEDAL[i]}</span>
+                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
+                </div>
+                <span class="text-sm font-medium text-white ml-2 shrink-0">{u.count} {u.count === 1 ? 'activity' : 'activities'}</span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+
+        <!-- Going far -->
+        {#if rowsDistance.length}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
+            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Going far</h2>
+            <p class="text-xs text-zinc-500 -mt-1">Who covered the most ground</p>
+            {#each rowsDistance as u, i}
+              <div class="flex items-center justify-between">
+                <div class="flex items-center gap-2 min-w-0">
+                  <span class="text-base leading-none">{MEDAL[i]}</span>
+                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
+                </div>
+                <span class="text-sm font-medium text-white ml-2 shrink-0">{formatDistance(u.distance_m)}</span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+
+        <!-- Reaching new heights -->
+        {#if rowsElevation.length}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
+            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Reaching new heights</h2>
+            <p class="text-xs text-zinc-500 -mt-1">Who climbed the most</p>
+            {#each rowsElevation as u, i}
+              <div class="flex items-center justify-between">
+                <div class="flex items-center gap-2 min-w-0">
+                  <span class="text-base leading-none">{MEDAL[i]}</span>
+                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
+                </div>
+                <span class="text-sm font-medium text-white ml-2 shrink-0">{Math.round(u.elevation_m).toLocaleString()} m</span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+
+        <!-- Hours on the move -->
+        {#if rowsDuration.length}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
+            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Hours on the move</h2>
+            <p class="text-xs text-zinc-500 -mt-1">Who invested the most time</p>
+            {#each rowsDuration as u, i}
+              <div class="flex items-center justify-between">
+                <div class="flex items-center gap-2 min-w-0">
+                  <span class="text-base leading-none">{MEDAL[i]}</span>
+                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
+                </div>
+                <span class="text-sm font-medium text-white ml-2 shrink-0">{formatDuration(u.duration_s)}</span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+
+        <!-- Explorer -->
+        {#if rowsSports.length}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
+            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Explorer</h2>
+            <p class="text-xs text-zinc-500 -mt-1">Who tried the most sports</p>
+            {#each rowsSports as u, i}
+              <div class="flex items-center justify-between">
+                <div class="flex items-center gap-2 min-w-0">
+                  <span class="text-base leading-none">{MEDAL[i]}</span>
+                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
+                </div>
+                <span class="text-sm font-medium text-white ml-2 shrink-0 flex gap-1">
+                  {#each u.sports as s}{sportIcon(s)}{/each}
+                </span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+
+        <!-- Longest streak (all-time, shown in all periods as context) -->
+        {#if rowsStreak.length}
+          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
+            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Never stopped</h2>
+            <p class="text-xs text-zinc-500 -mt-1">Longest streak of consecutive days (all time)</p>
+            {#each rowsStreak as u, i}
+              <div class="flex items-center justify-between">
+                <div class="flex items-center gap-2 min-w-0">
+                  <span class="text-base leading-none">{MEDAL[i]}</span>
+                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
+                </div>
+                <span class="text-sm font-medium text-white ml-2 shrink-0">{u.streak} days</span>
+              </div>
+            {/each}
+          </div>
+        {/if}
+
+      </div>
+    {/if}
+  {/if}
+</div>
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index b20cd7f..d224300 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -176,6 +176,9 @@ try {
           <!-- Per-user nav links — updated by user-widget script in multi-user mode -->
           <a id="nav-stats"   href={singleHandle ? `${baseUrl}u/${singleHandle}/stats/`   : `${baseUrl}stats/`}   data-user-path="stats/"   class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Stats</a>
           <a id="nav-athlete" href={singleHandle ? `${baseUrl}u/${singleHandle}/athlete/` : `${baseUrl}athlete/`} data-user-path="athlete/" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Athlete</a>
+          {!singleHandle && (
+            <a href={`${baseUrl}community/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Community</a>
+          )}
           {mobileApp && (
             <a id="nav-record" href={singleHandle ? `${baseUrl}u/${singleHandle}/record/` : `${baseUrl}record/`} data-user-path="record/" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Record</a>
           )}
@@ -183,7 +186,6 @@ try {
             <a href={`${baseUrl}convert/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Convert</a>
           )}
           <a href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">About</a>
-          <a id="nav-feedback" href={`${baseUrl}feedback/`} style="display:none" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Feedback</a>
         </div>
       )}
 
@@ -423,11 +425,9 @@ try {
             el.href = baseUrl + 'u/' + user.handle + '/' + el.getAttribute('data-user-path');
           });
 
-          // Show logout button and feedback link
+          // Show logout button
           const logoutEl = document.getElementById('nav-logout');
           if (logoutEl) logoutEl.style.display = '';
-          const feedbackEl = document.getElementById('nav-feedback');
-          if (feedbackEl) feedbackEl.style.display = '';
 
           // Pre-populate the "keep original" checkbox from the instance default
           const chk = document.getElementById('upload-keep-original');
diff --git a/site/src/pages/about/ca/index.astro b/site/src/pages/about/ca/index.astro
index a4f928e..742644f 100644
--- a/site/src/pages/about/ca/index.astro
+++ b/site/src/pages/about/ca/index.astro
@@ -23,15 +23,25 @@ const labels = {
       </div>
     </div>
     <p class="text-sm text-zinc-500 mb-4">Seguiment d'activitats de codi obert i allotjament propi</p>
-    <a
-      href="https://ko-fi.com/brutsalvadi"
-      target="_blank"
-      rel="noopener noreferrer"
-      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
-      style="background:#FF5E5B; color:#fff;"
-    >
-      ☕ Dona suport a Ko-fi
-    </a>
+    <div class="flex flex-wrap gap-2 mb-8">
+      <a
+        href="https://ko-fi.com/brutsalvadi"
+        target="_blank"
+        rel="noopener noreferrer"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+        style="background:#FF5E5B; color:#fff;"
+      >
+        ☕ Dona suport a Ko-fi
+      </a>
+      <a
+        id="feedback-btn"
+        href="/feedback/"
+        style="display:none"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium border border-zinc-700 text-zinc-300 hover:text-white hover:border-zinc-500 transition-colors"
+      >
+        💬 Envia comentaris
+      </a>
+    </div>
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
@@ -146,6 +156,8 @@ const labels = {
   try {
     const me = await fetch('/api/me', { credentials: 'include' });
     if (!me.ok) return;
+    const feedbackBtn = document.getElementById('feedback-btn');
+    if (feedbackBtn) feedbackBtn.style.display = '';
   } catch { return; }
   let data;
   try {
diff --git a/site/src/pages/about/es/index.astro b/site/src/pages/about/es/index.astro
index 610b38a..01bb4b7 100644
--- a/site/src/pages/about/es/index.astro
+++ b/site/src/pages/about/es/index.astro
@@ -23,15 +23,25 @@ const labels = {
       </div>
     </div>
     <p class="text-sm text-zinc-500 mb-4">Seguimiento de actividades open-source y autoalojado</p>
-    <a
-      href="https://ko-fi.com/brutsalvadi"
-      target="_blank"
-      rel="noopener noreferrer"
-      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
-      style="background:#FF5E5B; color:#fff;"
-    >
-      ☕ Apoya en Ko-fi
-    </a>
+    <div class="flex flex-wrap gap-2 mb-8">
+      <a
+        href="https://ko-fi.com/brutsalvadi"
+        target="_blank"
+        rel="noopener noreferrer"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+        style="background:#FF5E5B; color:#fff;"
+      >
+        ☕ Apoya en Ko-fi
+      </a>
+      <a
+        id="feedback-btn"
+        href="/feedback/"
+        style="display:none"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium border border-zinc-700 text-zinc-300 hover:text-white hover:border-zinc-500 transition-colors"
+      >
+        💬 Enviar comentarios
+      </a>
+    </div>
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
@@ -145,6 +155,8 @@ const labels = {
   try {
     const me = await fetch('/api/me', { credentials: 'include' });
     if (!me.ok) return;
+    const feedbackBtn = document.getElementById('feedback-btn');
+    if (feedbackBtn) feedbackBtn.style.display = '';
   } catch { return; }
   let data;
   try {
diff --git a/site/src/pages/about/index.astro b/site/src/pages/about/index.astro
index 5340971..2b43f9d 100644
--- a/site/src/pages/about/index.astro
+++ b/site/src/pages/about/index.astro
@@ -24,15 +24,25 @@ const labels = {
       </div>
     </div>
     <p class="text-sm text-zinc-500 mb-4">Open-source, self-hosted activity tracking</p>
-    <a
-      href="https://ko-fi.com/brutsalvadi"
-      target="_blank"
-      rel="noopener noreferrer"
-      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
-      style="background:#FF5E5B; color:#fff;"
-    >
-      ☕ Support on Ko-fi
-    </a>
+    <div class="flex flex-wrap gap-2 mb-8">
+      <a
+        href="https://ko-fi.com/brutsalvadi"
+        target="_blank"
+        rel="noopener noreferrer"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+        style="background:#FF5E5B; color:#fff;"
+      >
+        ☕ Support on Ko-fi
+      </a>
+      <a
+        id="feedback-btn"
+        href="/feedback/"
+        style="display:none"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium border border-zinc-700 text-zinc-300 hover:text-white hover:border-zinc-500 transition-colors"
+      >
+        💬 Send feedback
+      </a>
+    </div>
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
@@ -142,6 +152,8 @@ const labels = {
   try {
     const me = await fetch('/api/me', { credentials: 'include' });
     if (!me.ok) return;          // not logged in — hide community section
+    const feedbackBtn = document.getElementById('feedback-btn');
+    if (feedbackBtn) feedbackBtn.style.display = '';
   } catch { return; }
   let data;
   try {
diff --git a/site/src/pages/about/it/index.astro b/site/src/pages/about/it/index.astro
index eae5ce4..1dce80f 100644
--- a/site/src/pages/about/it/index.astro
+++ b/site/src/pages/about/it/index.astro
@@ -23,15 +23,25 @@ const labels = {
       </div>
     </div>
     <p class="text-sm text-zinc-500 mb-4">Tracciamento attività open-source e self-hosted</p>
-    <a
-      href="https://ko-fi.com/brutsalvadi"
-      target="_blank"
-      rel="noopener noreferrer"
-      class="inline-flex items-center gap-2 mb-8 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
-      style="background:#FF5E5B; color:#fff;"
-    >
-      ☕ Supporta su Ko-fi
-    </a>
+    <div class="flex flex-wrap gap-2 mb-8">
+      <a
+        href="https://ko-fi.com/brutsalvadi"
+        target="_blank"
+        rel="noopener noreferrer"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium transition-opacity hover:opacity-90"
+        style="background:#FF5E5B; color:#fff;"
+      >
+        ☕ Supporta su Ko-fi
+      </a>
+      <a
+        id="feedback-btn"
+        href="/feedback/"
+        style="display:none"
+        class="inline-flex items-center gap-2 px-4 py-2 rounded-lg text-sm font-medium border border-zinc-700 text-zinc-300 hover:text-white hover:border-zinc-500 transition-colors"
+      >
+        💬 Invia feedback
+      </a>
+    </div>
 
     <div class="space-y-8 text-sm text-zinc-400 leading-relaxed">
 
@@ -145,6 +155,8 @@ const labels = {
   try {
     const me = await fetch('/api/me', { credentials: 'include' });
     if (!me.ok) return;
+    const feedbackBtn = document.getElementById('feedback-btn');
+    if (feedbackBtn) feedbackBtn.style.display = '';
   } catch { return; }
   let data;
   try {
diff --git a/site/src/pages/community/index.astro b/site/src/pages/community/index.astro
new file mode 100644
index 0000000..c7a2d72
--- /dev/null
+++ b/site/src/pages/community/index.astro
@@ -0,0 +1,7 @@
+---
+import Base from '../../layouts/Base.astro';
+import CommunityView from '../../components/CommunityView.svelte';
+---
+<Base title="Community — BincioActivity">
+  <CommunityView base={import.meta.env.BASE_URL} client:only="svelte" />
+</Base>

From 78581d5487c6a8f66913376fa74340fb496a07f0 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sat, 11 Apr 2026 14:50:54 +0200
Subject: [PATCH 050/124] redesign community page as sortable table

---
 site/src/components/CommunityView.svelte | 244 +++++++++--------------
 1 file changed, 94 insertions(+), 150 deletions(-)

diff --git a/site/src/components/CommunityView.svelte b/site/src/components/CommunityView.svelte
index 1fffc4d..4351c81 100644
--- a/site/src/components/CommunityView.svelte
+++ b/site/src/components/CommunityView.svelte
@@ -6,6 +6,7 @@
   export let base: string = '/';
 
   type Period = 'week' | 'month' | 'year' | 'all';
+  type SortKey = 'display_name' | 'count' | 'distance_m' | 'elevation_m' | 'duration_s' | 'sports' | 'streak';
 
   interface UserRaw {
     handle: string;
@@ -33,6 +34,8 @@
   }
 
   let period: Period = 'month';
+  let sortKey: SortKey = 'distance_m';
+  let sortAsc = false;
   let users: UserRaw[] = [];
   let stats: UserStat[] = [];
   let totals: Totals = { count: 0, distance_m: 0, elevation_m: 0, duration_s: 0, users: 0 };
@@ -46,7 +49,6 @@
     if (p === 'all') return new Date(0);
     if (p === 'year') return new Date(now.getFullYear(), 0, 1);
     if (p === 'month') return new Date(now.getFullYear(), now.getMonth(), 1);
-    // week: Monday
     const d = new Date(now);
     const day = d.getDay();
     d.setDate(d.getDate() - (day === 0 ? 6 : day - 1));
@@ -54,7 +56,6 @@
     return d;
   }
 
-  /** Max consecutive active days across all public activities (all-time). */
   function maxStreak(activities: ActivitySummary[]): number {
     if (!activities.length) return 0;
     const days = [...new Set(activities.map(a => a.started_at.slice(0, 10)))].sort();
@@ -75,7 +76,6 @@
     for (const u of rawUsers) {
       const pub = u.activities.filter(a => a.privacy !== 'private');
       const filtered = pub.filter(a => new Date(a.started_at) >= start);
-      if (filtered.length === 0) continue;
 
       const stat: UserStat = {
         handle: u.handle,
@@ -117,24 +117,15 @@
     try {
       const rootUrl = `${base}data/index.json`;
       const root: BASIndex = await fetch(rootUrl).then(r => r.json());
-
       const userShards = (root.shards ?? []).filter(s => s.handle);
-      if (userShards.length === 0) {
-        error = 'No community members found.';
-        return;
-      }
+      if (userShards.length === 0) { error = 'No community members found.'; return; }
 
       const results = await Promise.allSettled(
         userShards.map(async shard => {
-          const shardBase = `${base}data/`;
-          const url = shard.url.startsWith('http') ? shard.url : `${shardBase}${shard.url}`;
+          const url = shard.url.startsWith('http') ? shard.url : `${base}data/${shard.url}`;
           const shardIndex: BASIndex = await fetch(url).then(r => r.json());
           const activities = await fetchShard(url);
-          return {
-            handle: shard.handle!,
-            display_name: shardIndex.owner?.display_name ?? shard.handle!,
-            activities,
-          } as UserRaw;
+          return { handle: shard.handle!, display_name: shardIndex.owner?.display_name ?? shard.handle!, activities } as UserRaw;
         })
       );
 
@@ -147,37 +138,30 @@
     }
   }
 
-  $: if (users.length) {
-    ({ stats, totals } = computeStats(users, period));
+  $: if (users.length) ({ stats, totals } = computeStats(users, period));
+
+  $: sorted = [...stats].sort((a, b) => {
+    let av: number | string, bv: number | string;
+    if (sortKey === 'display_name') { av = a.display_name.toLowerCase(); bv = b.display_name.toLowerCase(); }
+    else if (sortKey === 'sports')  { av = a.sports.length; bv = b.sports.length; }
+    else                            { av = a[sortKey] as number; bv = b[sortKey] as number; }
+    if (av < bv) return sortAsc ? -1 : 1;
+    if (av > bv) return sortAsc ? 1 : -1;
+    return 0;
+  });
+
+  function setSort(key: SortKey) {
+    if (sortKey === key) sortAsc = !sortAsc;
+    else { sortKey = key; sortAsc = false; }
+  }
+
+  function chevron(key: SortKey) {
+    if (sortKey !== key) return '';
+    return sortAsc ? ' ↑' : ' ↓';
   }
 
   onMount(loadData);
 
-  // ── Ranking helpers ───────────────────────────────────────────────────────
-
-  function top3<K extends keyof UserStat>(key: K, min = 0): UserStat[] {
-    return [...stats]
-      .filter(u => (u[key] as number) > min)
-      .sort((a, b) => (b[key] as number) - (a[key] as number))
-      .slice(0, 3);
-  }
-
-  function top3Sports(): UserStat[] {
-    return [...stats]
-      .filter(u => u.sports.length > 1)
-      .sort((a, b) => b.sports.length - a.sports.length)
-      .slice(0, 3);
-  }
-
-  const MEDAL = ['🥇', '🥈', '🥉'];
-
-  $: rowsCount     = top3('count', 0);
-  $: rowsDistance  = top3('distance_m', 0);
-  $: rowsElevation = top3('elevation_m', 0);
-  $: rowsDuration  = top3('duration_s', 0);
-  $: rowsSports    = top3Sports();
-  $: rowsStreak    = [...stats].filter(u => u.streak > 1).sort((a, b) => b.streak - a.streak).slice(0, 3);
-
   const PERIODS: { key: Period; label: string }[] = [
     { key: 'week',  label: 'This week'  },
     { key: 'month', label: 'This month' },
@@ -186,8 +170,7 @@
   ];
 </script>
 
-<div class="space-y-8">
-  <!-- Header -->
+<div class="space-y-6">
   <div>
     <h1 class="text-2xl font-bold text-white mb-1">Community</h1>
     <p class="text-zinc-400 text-sm">What everyone's been up to — together.</p>
@@ -215,7 +198,7 @@
       {/each}
     </div>
 
-    <!-- Community totals banner -->
+    <!-- Community totals -->
     {#if totals.users > 0}
       <div class="grid grid-cols-2 sm:grid-cols-4 gap-3">
         {#each [
@@ -232,117 +215,78 @@
       </div>
     {/if}
 
-    <!-- Leaderboard sections -->
+    <!-- Table -->
     {#if totals.users === 0}
       <p class="text-zinc-500 text-sm">No public activities in this period yet.</p>
     {:else}
-      <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
-
-        <!-- Out there -->
-        {#if rowsCount.length}
-          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
-            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Out there</h2>
-            <p class="text-xs text-zinc-500 -mt-1">Who kept showing up</p>
-            {#each rowsCount as u, i}
-              <div class="flex items-center justify-between">
-                <div class="flex items-center gap-2 min-w-0">
-                  <span class="text-base leading-none">{MEDAL[i]}</span>
-                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
-                </div>
-                <span class="text-sm font-medium text-white ml-2 shrink-0">{u.count} {u.count === 1 ? 'activity' : 'activities'}</span>
-              </div>
-            {/each}
-          </div>
-        {/if}
-
-        <!-- Going far -->
-        {#if rowsDistance.length}
-          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
-            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Going far</h2>
-            <p class="text-xs text-zinc-500 -mt-1">Who covered the most ground</p>
-            {#each rowsDistance as u, i}
-              <div class="flex items-center justify-between">
-                <div class="flex items-center gap-2 min-w-0">
-                  <span class="text-base leading-none">{MEDAL[i]}</span>
-                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
-                </div>
-                <span class="text-sm font-medium text-white ml-2 shrink-0">{formatDistance(u.distance_m)}</span>
-              </div>
-            {/each}
-          </div>
-        {/if}
-
-        <!-- Reaching new heights -->
-        {#if rowsElevation.length}
-          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
-            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Reaching new heights</h2>
-            <p class="text-xs text-zinc-500 -mt-1">Who climbed the most</p>
-            {#each rowsElevation as u, i}
-              <div class="flex items-center justify-between">
-                <div class="flex items-center gap-2 min-w-0">
-                  <span class="text-base leading-none">{MEDAL[i]}</span>
-                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
-                </div>
-                <span class="text-sm font-medium text-white ml-2 shrink-0">{Math.round(u.elevation_m).toLocaleString()} m</span>
-              </div>
-            {/each}
-          </div>
-        {/if}
-
-        <!-- Hours on the move -->
-        {#if rowsDuration.length}
-          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
-            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Hours on the move</h2>
-            <p class="text-xs text-zinc-500 -mt-1">Who invested the most time</p>
-            {#each rowsDuration as u, i}
-              <div class="flex items-center justify-between">
-                <div class="flex items-center gap-2 min-w-0">
-                  <span class="text-base leading-none">{MEDAL[i]}</span>
-                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
-                </div>
-                <span class="text-sm font-medium text-white ml-2 shrink-0">{formatDuration(u.duration_s)}</span>
-              </div>
-            {/each}
-          </div>
-        {/if}
-
-        <!-- Explorer -->
-        {#if rowsSports.length}
-          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
-            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Explorer</h2>
-            <p class="text-xs text-zinc-500 -mt-1">Who tried the most sports</p>
-            {#each rowsSports as u, i}
-              <div class="flex items-center justify-between">
-                <div class="flex items-center gap-2 min-w-0">
-                  <span class="text-base leading-none">{MEDAL[i]}</span>
-                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
-                </div>
-                <span class="text-sm font-medium text-white ml-2 shrink-0 flex gap-1">
+      <div class="overflow-x-auto rounded-xl border border-zinc-800">
+        <table class="w-full text-sm">
+          <thead>
+            <tr class="border-b border-zinc-800 text-zinc-400 text-xs uppercase tracking-wide">
+              <th class="text-left px-4 py-3 font-medium w-6">#</th>
+              <th class="text-left px-4 py-3 font-medium">
+                <button on:click={() => setSort('display_name')} class="hover:text-white transition-colors">
+                  Athlete{chevron('display_name')}
+                </button>
+              </th>
+              <th class="text-right px-4 py-3 font-medium">
+                <button on:click={() => setSort('count')} class="hover:text-white transition-colors">
+                  Activities{chevron('count')}
+                </button>
+              </th>
+              <th class="text-right px-4 py-3 font-medium">
+                <button on:click={() => setSort('distance_m')} class="hover:text-white transition-colors">
+                  Distance{chevron('distance_m')}
+                </button>
+              </th>
+              <th class="text-right px-4 py-3 font-medium">
+                <button on:click={() => setSort('elevation_m')} class="hover:text-white transition-colors">
+                  Elevation{chevron('elevation_m')}
+                </button>
+              </th>
+              <th class="text-right px-4 py-3 font-medium">
+                <button on:click={() => setSort('duration_s')} class="hover:text-white transition-colors">
+                  Time{chevron('duration_s')}
+                </button>
+              </th>
+              <th class="text-right px-4 py-3 font-medium hidden sm:table-cell">
+                <button on:click={() => setSort('sports')} class="hover:text-white transition-colors">
+                  Sports{chevron('sports')}
+                </button>
+              </th>
+              <th class="text-right px-4 py-3 font-medium hidden md:table-cell">
+                <button on:click={() => setSort('streak')} class="hover:text-white transition-colors">
+                  Streak{chevron('streak')}
+                </button>
+              </th>
+            </tr>
+          </thead>
+          <tbody>
+            {#each sorted as u, i}
+              <tr class="border-b border-zinc-800/50 last:border-0 hover:bg-zinc-800/30 transition-colors">
+                <td class="px-4 py-3 text-zinc-600 tabular-nums">{i + 1}</td>
+                <td class="px-4 py-3">
+                  <a href="{base}u/{u.handle}/" class="text-white font-medium hover:text-[--accent] transition-colors">
+                    {u.display_name}
+                  </a>
+                  <span class="text-zinc-600 text-xs ml-1">@{u.handle}</span>
+                </td>
+                <td class="px-4 py-3 text-right tabular-nums text-zinc-300">{u.count}</td>
+                <td class="px-4 py-3 text-right tabular-nums text-zinc-300">{u.distance_m > 0 ? formatDistance(u.distance_m) : '—'}</td>
+                <td class="px-4 py-3 text-right tabular-nums text-zinc-300">{u.elevation_m > 0 ? `${Math.round(u.elevation_m).toLocaleString()} m` : '—'}</td>
+                <td class="px-4 py-3 text-right tabular-nums text-zinc-300">{u.duration_s > 0 ? formatDuration(u.duration_s) : '—'}</td>
+                <td class="px-4 py-3 text-right hidden sm:table-cell">
                   {#each u.sports as s}{sportIcon(s)}{/each}
-                </span>
-              </div>
+                </td>
+                <td class="px-4 py-3 text-right tabular-nums text-zinc-300 hidden md:table-cell">
+                  {u.streak > 0 ? `${u.streak}d` : '—'}
+                </td>
+              </tr>
             {/each}
-          </div>
-        {/if}
-
-        <!-- Longest streak (all-time, shown in all periods as context) -->
-        {#if rowsStreak.length}
-          <div class="bg-zinc-900 border border-zinc-800 rounded-xl p-4 space-y-3">
-            <h2 class="text-sm font-semibold text-zinc-300 uppercase tracking-wide">Never stopped</h2>
-            <p class="text-xs text-zinc-500 -mt-1">Longest streak of consecutive days (all time)</p>
-            {#each rowsStreak as u, i}
-              <div class="flex items-center justify-between">
-                <div class="flex items-center gap-2 min-w-0">
-                  <span class="text-base leading-none">{MEDAL[i]}</span>
-                  <a href="{base}u/{u.handle}/" class="text-sm text-zinc-200 hover:text-white truncate">{u.display_name}</a>
-                </div>
-                <span class="text-sm font-medium text-white ml-2 shrink-0">{u.streak} days</span>
-              </div>
-            {/each}
-          </div>
-        {/if}
-
+          </tbody>
+        </table>
       </div>
     {/if}
+
   {/if}
 </div>

From e80231b44256f9e59129ffd966a277734394348b Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 14:55:33 +0200
Subject: [PATCH 051/124] fix strava sync rebuild: trigger before yielding done
 event, not after

---
 bincio/serve/server.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 94e7525..e8031ca 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -1003,9 +1003,9 @@ async def serve_strava_sync_stream(bincio_session: Optional[str] = Cookie(defaul
     def event_stream():
         try:
             for event in strava_sync_iter(dd, strava_client_id, strava_client_secret, originals_dir):
-                yield f"data: {json.dumps(event)}\n\n"
                 if event["type"] == "done":
-                    _trigger_rebuild(user.handle)
+                    _trigger_rebuild(user.handle)  # start before client closes connection
+                yield f"data: {json.dumps(event)}\n\n"
         except Exception as exc:
             yield f"data: {json.dumps({'type': 'error', 'message': str(exc)})}\n\n"
 

From 6c431e8821d23906620e40fdcaaf3a230d2572fc Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 15:12:20 +0200
Subject: [PATCH 052/124]  Here's what was built and why each decision was
 made:
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

  Key at data_dir.parent/.garmin_key — nginx serves location /data/ { alias /var/bincio/data/; } so
  anything inside that dir is reachable. The key lives one level up at /var/bincio/.garmin_key,
  outside nginx's reach.

  Two-layer storage — garmin_creds.json holds the encrypted email+password (needed for re-login when
  tokens expire); garmin_session/ holds the garth OAuth tokens in plain JSON (short-lived, not the
  user's actual password).

  test_login() — called by the connect endpoint before saving anything, so credentials are only
  persisted if they actually work.

  get_client() — tries the session first (fast, no network), falls back to full re-login
  transparently. The caller never needs to think about whether the session is fresh.
---
 .gitignore                        |   1 +
 bincio/extract/garmin_api.py      | 225 ++++++++++++++++++++++++++++++
 docs/garmin_connect_disclaimer.md |  75 ++++++++++
 pyproject.toml                    |   4 +
 4 files changed, 305 insertions(+)
 create mode 100644 bincio/extract/garmin_api.py
 create mode 100644 docs/garmin_connect_disclaimer.md

diff --git a/.gitignore b/.gitignore
index d98680e..b80d778 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,6 +11,7 @@ build/
 htmlcov/
 .coverage
 .idea*
+feedback*
 
 # uv
 uv.lock
diff --git a/bincio/extract/garmin_api.py b/bincio/extract/garmin_api.py
new file mode 100644
index 0000000..0087389
--- /dev/null
+++ b/bincio/extract/garmin_api.py
@@ -0,0 +1,225 @@
+"""Garmin Connect credential storage and client factory.
+
+Credential storage layout
+─────────────────────────
+  {data_dir.parent}/.garmin_key        ← Fernet key (outside nginx webroot, chmod 600)
+  {user_dir}/garmin_creds.json         ← encrypted email + password
+  {user_dir}/garmin_session/           ← garth OAuth token directory (plain JSON, short-lived)
+
+Security model
+──────────────
+- The Fernet key lives one directory above the data root, which nginx does NOT serve.
+  For a standard VPS install: data_dir = /var/bincio/data/ → key at /var/bincio/.garmin_key.
+- Credentials are encrypted with that key before being written to disk.
+- The garth session directory holds OAuth tokens (not the user's password).
+  These expire independently and are refreshed automatically by the library.
+- If the session expires and re-login is needed, the stored credentials are decrypted
+  and used automatically — the user does not need to re-enter them.
+
+DISCLAIMER
+──────────
+This module uses the unofficial `garminconnect` library.
+See docs/garmin_connect_disclaimer.md before shipping this feature to users.
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import stat
+from pathlib import Path
+from typing import Optional
+
+# ── Constants ─────────────────────────────────────────────────────────────────
+
+_CREDS_FILE    = "garmin_creds.json"
+_SESSION_DIR   = "garmin_session"
+_KEY_FILENAME  = ".garmin_key"
+
+
+class GarminError(Exception):
+    pass
+
+
+# ── Encryption key management ─────────────────────────────────────────────────
+
+def _key_path(data_dir: Path) -> Path:
+    """Return the path to the Fernet key file (one level above data_dir)."""
+    return data_dir.parent / _KEY_FILENAME
+
+
+def _get_or_create_key(data_dir: Path) -> bytes:
+    """Load the Fernet key, creating and locking it down on first use."""
+    from cryptography.fernet import Fernet
+
+    kp = _key_path(data_dir)
+    if kp.exists():
+        return kp.read_bytes().strip()
+
+    key = Fernet.generate_key()
+    kp.parent.mkdir(parents=True, exist_ok=True)
+    kp.write_bytes(key)
+    kp.chmod(stat.S_IRUSR | stat.S_IWUSR)   # 0o600 — owner read/write only
+    return key
+
+
+def _fernet(data_dir: Path):
+    from cryptography.fernet import Fernet
+    return Fernet(_get_or_create_key(data_dir))
+
+
+# ── Credential encryption helpers ─────────────────────────────────────────────
+
+def _encrypt(data_dir: Path, value: str) -> str:
+    return _fernet(data_dir).encrypt(value.encode()).decode()
+
+
+def _decrypt(data_dir: Path, token: str) -> str:
+    try:
+        return _fernet(data_dir).decrypt(token.encode()).decode()
+    except Exception as exc:
+        raise GarminError("Failed to decrypt Garmin credentials — key may have changed") from exc
+
+
+# ── Credential CRUD ───────────────────────────────────────────────────────────
+
+def has_credentials(user_dir: Path) -> bool:
+    return (user_dir / _CREDS_FILE).exists()
+
+
+def save_credentials(data_dir: Path, user_dir: Path, email: str, password: str) -> None:
+    """Encrypt and persist the user's Garmin email + password."""
+    payload = {
+        "email":    _encrypt(data_dir, email),
+        "password": _encrypt(data_dir, password),
+    }
+    creds_path = user_dir / _CREDS_FILE
+    creds_path.write_text(json.dumps(payload, indent=2))
+    creds_path.chmod(stat.S_IRUSR | stat.S_IWUSR)   # 0o600
+
+
+def load_credentials(data_dir: Path, user_dir: Path) -> tuple[str, str]:
+    """Return (email, password) decrypted from disk."""
+    creds_path = user_dir / _CREDS_FILE
+    if not creds_path.exists():
+        raise GarminError("No Garmin credentials stored for this user")
+    try:
+        raw = json.loads(creds_path.read_text())
+    except Exception as exc:
+        raise GarminError("Garmin credentials file is corrupt") from exc
+    return _decrypt(data_dir, raw["email"]), _decrypt(data_dir, raw["password"])
+
+
+def delete_credentials(user_dir: Path) -> None:
+    """Remove stored credentials and session (disconnect)."""
+    creds_path = user_dir / _CREDS_FILE
+    if creds_path.exists():
+        creds_path.unlink()
+
+    session_dir = user_dir / _SESSION_DIR
+    if session_dir.exists():
+        import shutil
+        shutil.rmtree(session_dir)
+
+
+# ── Session management (garth OAuth tokens) ───────────────────────────────────
+
+def _session_dir(user_dir: Path) -> Path:
+    d = user_dir / _SESSION_DIR
+    d.mkdir(exist_ok=True)
+    return d
+
+
+def _save_session(user_dir: Path, client) -> None:
+    """Persist garth OAuth tokens so the next sync skips re-login."""
+    try:
+        client.garth.dump(str(_session_dir(user_dir)))
+    except Exception:
+        pass   # session save is best-effort
+
+
+def _load_session(user_dir: Path, client) -> bool:
+    """Try to restore a saved garth session. Returns True on success."""
+    sd = user_dir / _SESSION_DIR
+    if not sd.exists():
+        return False
+    try:
+        client.garth.load(str(sd))
+        return True
+    except Exception:
+        return False
+
+
+# ── Client factory ────────────────────────────────────────────────────────────
+
+def get_client(data_dir: Path, user_dir: Path):
+    """Return a logged-in Garmin client.
+
+    Strategy:
+    1. Try to resume a saved garth session (fast, no network round-trip).
+    2. If that fails or the session has expired, re-login using the stored
+       (encrypted) credentials.
+    3. Persist the refreshed session for next time.
+
+    Raises GarminError if credentials are missing or login fails.
+    """
+    try:
+        import garminconnect
+    except ImportError as exc:
+        raise GarminError(
+            "garminconnect is not installed. "
+            "Run: uv sync --extra garmin"
+        ) from exc
+
+    client = garminconnect.Garmin()
+
+    # Try cached session first
+    if _load_session(user_dir, client):
+        try:
+            client.garth.refresh_oauth2()   # renew access token if needed
+            _save_session(user_dir, client)  # persist refreshed token
+            return client
+        except Exception:
+            pass   # session is dead — fall through to full re-login
+
+    # Full login with stored credentials
+    email, password = load_credentials(data_dir, user_dir)
+    try:
+        client = garminconnect.Garmin(email=email, password=password)
+        client.login()
+    except Exception as exc:
+        raise GarminError(f"Garmin login failed: {exc}") from exc
+
+    _save_session(user_dir, client)
+    return client
+
+
+def test_login(data_dir: Path, user_dir: Path, email: str, password: str) -> dict:
+    """Attempt a login with the supplied credentials (does not save them).
+
+    Returns a dict with display_name and full_name on success.
+    Raises GarminError on failure.
+    """
+    try:
+        import garminconnect
+    except ImportError as exc:
+        raise GarminError("garminconnect is not installed") from exc
+
+    try:
+        client = garminconnect.Garmin(email=email, password=password)
+        client.login()
+    except Exception as exc:
+        raise GarminError(f"Login failed: {exc}") from exc
+
+    try:
+        profile = client.get_profile_user_summary()
+        display = profile.get("displayName", email)
+        full    = f"{profile.get('firstName', '')} {profile.get('lastName', '')}".strip()
+    except Exception:
+        display, full = email, ""
+
+    # Credentials are valid — save them and the session
+    save_credentials(data_dir, user_dir, email, password)
+    _save_session(user_dir, client)
+
+    return {"display_name": display, "full_name": full}
diff --git a/docs/garmin_connect_disclaimer.md b/docs/garmin_connect_disclaimer.md
new file mode 100644
index 0000000..8d88475
--- /dev/null
+++ b/docs/garmin_connect_disclaimer.md
@@ -0,0 +1,75 @@
+# Garmin Connect Sync — Disclaimer
+
+**This feature uses an unofficial, community-maintained library to access Garmin Connect.
+It is not affiliated with, endorsed by, or supported by Garmin Ltd. or its subsidiaries.**
+
+---
+
+## What this feature does
+
+When you enable Garmin Connect sync, BincioActivity will:
+
+1. Ask for your Garmin Connect **email address and password**
+2. Store those credentials on the server, encrypted at rest
+3. Use them to log in to Garmin Connect on your behalf and download your activity files (FIT format)
+4. Import those activities into your BincioActivity account
+
+---
+
+## What you need to know before enabling this
+
+### Your credentials are stored on the server
+
+Unlike Strava (which uses OAuth — you authorize without sharing your password),
+Garmin Connect has no official third-party API. This feature works by logging in
+as you, using your actual email and password.
+
+This means:
+
+- The server operator has technical access to your stored credentials
+- You are trusting both the software and the person running the server
+- Only enable this on a server you control or run by someone you fully trust
+
+### This uses an unofficial API
+
+Garmin does not provide a public developer API for activity data.
+This feature relies on a reverse-engineered interface that:
+
+- May break without notice when Garmin changes their systems
+- Is not covered by any Garmin service agreement or SLA
+- May violate Garmin Connect's Terms of Service
+
+BincioActivity takes no responsibility for account restrictions or bans
+that may result from using this feature.
+
+### Two-factor authentication (2FA)
+
+If your Garmin account has 2FA enabled, this feature may not work or may
+require additional steps. Garmin has changed their authentication flow
+several times; compatibility depends on the current state of the underlying library.
+
+### Rate limits
+
+Garmin does not publish API rate limits. Syncing too frequently or importing
+large volumes of activities may result in temporary or permanent IP blocks.
+BincioActivity applies conservative limits, but cannot guarantee uninterrupted access.
+
+---
+
+## How to revoke access
+
+BincioActivity does not hold an OAuth token that can be revoked from Garmin's settings.
+To stop BincioActivity from accessing your Garmin account:
+
+1. Delete your stored credentials from BincioActivity (Settings → Garmin Connect → Disconnect)
+2. **Change your Garmin Connect password** — this is the only way to guarantee that
+   no previously stored credentials can be used
+
+---
+
+## Recommendation
+
+If you have concerns about credential storage, consider the alternative:
+export your activities from Garmin Connect or Garmin Express as FIT files
+and upload them directly to BincioActivity. This requires no credentials
+and is always available.
diff --git a/pyproject.toml b/pyproject.toml
index 34004a5..2e1bb5b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -44,6 +44,10 @@ serve = [
 strava = [
     "requests>=2.32",
 ]
+garmin = [
+    "garminconnect>=0.2",
+    "cryptography>=42.0",
+]
 dev = [
     "pytest>=9.0",
     "pytest-cov>=5.0",

From f003fdd89f89339f451c7c4a13fbf35c9ea4acba Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 15:36:21 +0200
Subject: [PATCH 053/124] garmin sync first attempt

---
 bincio/extract/garmin_sync.py     | 196 +++++++++++++++++++++++++++++
 bincio/serve/server.py            | 108 ++++++++++++++++
 docs/garmin_connect_disclaimer.md |  34 ++++++
 site/src/layouts/Base.astro       | 197 ++++++++++++++++++++++++++++++
 4 files changed, 535 insertions(+)
 create mode 100644 bincio/extract/garmin_sync.py

diff --git a/bincio/extract/garmin_sync.py b/bincio/extract/garmin_sync.py
new file mode 100644
index 0000000..395c886
--- /dev/null
+++ b/bincio/extract/garmin_sync.py
@@ -0,0 +1,196 @@
+"""Garmin Connect incremental sync — generator-based, mirrors strava_sync_iter.
+
+Sync state is stored in {user_dir}/garmin_sync.json:
+  {
+    "last_sync_at": "2026-04-12"   ← date of last successful sync (YYYY-MM-DD)
+  }
+
+We query Garmin for all activities from (last_sync_at - 1 day) to today,
+then skip any that already exist (FileExistsError from ingest_parsed).
+The -1 day buffer catches activities that were saved to Garmin slightly
+after their recorded end time crosses midnight.
+
+Each yielded dict has a ``type`` key:
+  - ``"fetching"``  — about to contact Garmin
+  - ``"progress"``  — one activity processed; keys: n, total, name, status, garmin_id
+  - ``"done"``      — final summary; keys: imported, skipped, error_count, errors
+  - ``"error"``     — fatal error; key: message
+"""
+
+from __future__ import annotations
+
+import io
+import json
+import zipfile
+from datetime import datetime, timedelta, timezone
+from pathlib import Path
+from typing import Generator
+
+_SYNC_FILE = "garmin_sync.json"
+
+
+# ── Sync state helpers ────────────────────────────────────────────────────────
+
+def _load_sync_state(user_dir: Path) -> dict:
+    p = user_dir / _SYNC_FILE
+    if not p.exists():
+        return {}
+    try:
+        return json.loads(p.read_text())
+    except Exception:
+        return {}
+
+
+def _save_sync_state(user_dir: Path, state: dict) -> None:
+    (user_dir / _SYNC_FILE).write_text(json.dumps(state, indent=2))
+
+
+# ── FIT extraction from ZIP ───────────────────────────────────────────────────
+
+def _extract_fit(zip_bytes: bytes) -> tuple[bytes, str]:
+    """Return (fit_bytes, filename) from a Garmin activity ZIP.
+
+    Garmin always packages the original FIT as the first .fit entry.
+    Raises ValueError if no FIT file is found.
+    """
+    with zipfile.ZipFile(io.BytesIO(zip_bytes)) as zf:
+        fit_names = [n for n in zf.namelist() if n.lower().endswith(".fit")]
+        if not fit_names:
+            raise ValueError(f"No FIT file in archive. Contents: {zf.namelist()}")
+        name = fit_names[0]
+        return zf.read(name), name
+
+
+# ── Main generator ────────────────────────────────────────────────────────────
+
+def garmin_sync_iter(
+    data_dir: Path,
+    user_dir: Path,
+) -> Generator[dict, None, None]:
+    """Fetch new activities from Garmin Connect and ingest them.
+
+    Args:
+        data_dir:  Root data directory (used for encryption key lookup).
+        user_dir:  Per-user directory (contains activities/, garmin_creds.json, etc.).
+    """
+    from bincio.extract.garmin_api import GarminError, get_client
+    from bincio.extract.ingest import ingest_parsed
+    from bincio.extract.parsers.fit import FitParser
+
+    # ── Login ──────────────────────────────────────────────────────────────────
+    try:
+        client = get_client(data_dir, user_dir)
+    except GarminError as exc:
+        yield {"type": "error", "message": str(exc)}
+        return
+
+    yield {"type": "fetching"}
+
+    # ── Determine date range ───────────────────────────────────────────────────
+    state = _load_sync_state(user_dir)
+    last = state.get("last_sync_at")
+
+    if last:
+        # Start one day before last sync to catch edge cases around midnight
+        start_dt = datetime.fromisoformat(last) - timedelta(days=1)
+    else:
+        # First sync: import everything Garmin has
+        start_dt = datetime(2000, 1, 1)
+
+    start_date = start_dt.strftime("%Y-%m-%d")
+    end_date   = datetime.now().strftime("%Y-%m-%d")
+
+    # ── Fetch activity list ────────────────────────────────────────────────────
+    try:
+        activities = client.get_activities_by_date(
+            startdate=start_date,
+            enddate=end_date,
+        )
+    except Exception as exc:
+        yield {"type": "error", "message": f"Failed to fetch activity list: {exc}"}
+        return
+
+    total      = len(activities)
+    imported   = 0
+    skipped    = 0
+    errors: list[str] = []
+    parser     = FitParser()
+
+    # ── Process each activity ──────────────────────────────────────────────────
+    for n, meta in enumerate(activities, 1):
+        garmin_id = meta.get("activityId")
+        name      = meta.get("activityName") or "Untitled"
+
+        try:
+            # Download original FIT (wrapped in a ZIP by Garmin)
+            try:
+                zip_bytes = client.download_activity(
+                    garmin_id,
+                    dl_fmt=client.ActivityDownloadFormat.ORIGINAL,
+                )
+            except Exception as exc:
+                raise RuntimeError(f"Download failed: {exc}") from exc
+
+            try:
+                fit_bytes, fit_name = _extract_fit(zip_bytes)
+            except Exception as exc:
+                raise RuntimeError(f"ZIP extraction failed: {exc}") from exc
+
+            # Parse FIT — pass a dummy Path so the parser has a filename for
+            # any format-detection logic; raw bytes are the actual data.
+            fake_path = Path(fit_name)
+            try:
+                parsed = parser.parse(fake_path, fit_bytes)
+            except Exception as exc:
+                raise RuntimeError(f"FIT parse error: {exc}") from exc
+
+            # Ingest — raises FileExistsError if already present (dedup)
+            ingest_parsed(parsed, user_dir)
+            imported += 1
+            yield {
+                "type": "progress",
+                "n": n, "total": total, "name": name,
+                "status": "imported",
+                "garmin_id": garmin_id,
+            }
+
+        except FileExistsError:
+            skipped += 1
+            yield {
+                "type": "progress",
+                "n": n, "total": total, "name": name,
+                "status": "skipped",
+                "garmin_id": garmin_id,
+            }
+
+        except Exception as exc:
+            errors.append(f"{garmin_id} ({name}): {type(exc).__name__}: {exc}")
+            yield {
+                "type": "progress",
+                "n": n, "total": total, "name": name,
+                "status": "error",
+                "garmin_id": garmin_id,
+            }
+
+    # ── Persist sync state ─────────────────────────────────────────────────────
+    state["last_sync_at"] = datetime.now(timezone.utc).strftime("%Y-%m-%d")
+    _save_sync_state(user_dir, state)
+
+    yield {
+        "type": "done",
+        "imported":    imported,
+        "skipped":     skipped,
+        "error_count": len(errors),
+        "errors":      errors[:5],
+    }
+
+
+def run_garmin_sync(data_dir: Path, user_dir: Path) -> dict:
+    """Blocking wrapper around garmin_sync_iter for non-SSE callers."""
+    result: dict = {}
+    for event in garmin_sync_iter(data_dir, user_dir):
+        if event["type"] == "done":
+            result = event
+        elif event["type"] == "error":
+            raise RuntimeError(event["message"])
+    return result
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index e8031ca..db95d01 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -1034,3 +1034,111 @@ async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)
         raise HTTPException(502, str(e))
     _trigger_rebuild(user.handle)
     return JSONResponse(result)
+
+
+# ── Garmin Connect endpoints ──────────────────────────────────────────────────
+
+def _garmin_user_message(exc: Exception) -> str:
+    """Return a human-friendly error message for common Garmin login failures."""
+    msg = str(exc)
+    fallback = (
+        " In the meantime, you can export your activities from Garmin Connect "
+        "(garmin.com → Activities → Export) or Garmin Express as FIT files "
+        "and upload them directly."
+    )
+    if "429" in msg or "rate limit" in msg.lower():
+        return (
+            "Garmin is rate-limiting this server's IP address (HTTP 429). "
+            "Wait a few hours and try again." + fallback
+        )
+    if "403" in msg:
+        return (
+            "Cloudflare is blocking the login request (HTTP 403). "
+            "This is a known upstream issue — try again later or update garminconnect "
+            "(uv sync --extra garmin)." + fallback
+        )
+    if "GARMIN Authentication Application" in msg or "unexpected title" in msg.lower():
+        return (
+            "Garmin's login page returned a CAPTCHA or MFA challenge that "
+            "cannot be completed automatically. Try again later, or disable "
+            "two-factor authentication on your Garmin account." + fallback
+        )
+    return f"Login failed: {exc}" + fallback
+
+@app.get("/api/garmin/status")
+async def garmin_status(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Return whether Garmin credentials are stored for the current user."""
+    user = _require_user(bincio_session)
+    dd = _get_data_dir() / user.handle
+    from bincio.extract.garmin_api import has_credentials
+    from bincio.extract.garmin_sync import _load_sync_state
+    connected = has_credentials(dd)
+    last_sync = None
+    if connected:
+        state = _load_sync_state(dd)
+        last_sync = state.get("last_sync_at")
+    return JSONResponse({"connected": connected, "last_sync": last_sync})
+
+
+@app.post("/api/garmin/connect")
+async def garmin_connect(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Test Garmin login with the supplied credentials and save them on success."""
+    user = _require_user(bincio_session)
+    body = await request.json()
+    email    = (body.get("email") or "").strip()
+    password = body.get("password") or ""
+    if not email or not password:
+        raise HTTPException(400, "email and password are required")
+
+    data_dir = _get_data_dir()
+    user_dir = data_dir / user.handle
+    from bincio.extract.garmin_api import GarminError, test_login
+    try:
+        info = test_login(data_dir, user_dir, email, password)
+    except GarminError as exc:
+        raise HTTPException(400, _garmin_user_message(exc))
+    return JSONResponse({"ok": True, **info})
+
+
+@app.post("/api/garmin/disconnect")
+async def garmin_disconnect(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Remove stored Garmin credentials and session for the current user."""
+    user = _require_user(bincio_session)
+    dd = _get_data_dir() / user.handle
+    from bincio.extract.garmin_api import delete_credentials
+    delete_credentials(dd)
+    return JSONResponse({"ok": True})
+
+
+@app.get("/api/garmin/sync/stream")
+async def garmin_sync_stream(bincio_session: Optional[str] = Cookie(default=None)) -> StreamingResponse:
+    """SSE endpoint — streams per-activity Garmin sync progress."""
+    user = _require_user(bincio_session)
+    data_dir = _get_data_dir()
+    user_dir = data_dir / user.handle
+
+    from bincio.extract.garmin_api import GarminError, has_credentials
+    if not has_credentials(user_dir):
+        raise HTTPException(400, "No Garmin credentials stored — connect first")
+
+    from bincio.extract.garmin_sync import garmin_sync_iter
+
+    def event_stream():
+        try:
+            for event in garmin_sync_iter(data_dir, user_dir):
+                if event["type"] == "done":
+                    _trigger_rebuild(user.handle)
+                yield f"data: {json.dumps(event)}\n\n"
+        except GarminError as exc:
+            yield f"data: {json.dumps({'type': 'error', 'message': _garmin_user_message(exc)})}\n\n"
+        except Exception as exc:
+            yield f"data: {json.dumps({'type': 'error', 'message': _garmin_user_message(exc)})}\n\n"
+
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
diff --git a/docs/garmin_connect_disclaimer.md b/docs/garmin_connect_disclaimer.md
index 8d88475..5a00a0c 100644
--- a/docs/garmin_connect_disclaimer.md
+++ b/docs/garmin_connect_disclaimer.md
@@ -42,6 +42,40 @@ This feature relies on a reverse-engineered interface that:
 BincioActivity takes no responsibility for account restrictions or bans
 that may result from using this feature.
 
+### Cloudflare bot protection and rate limiting
+
+Garmin's login page (`sso.garmin.com`) is protected by Cloudflare, which
+periodically blocks automated login attempts. When this happens, the sync
+feature will fail at the login step with a "Login failed" error — even if
+your credentials are correct.
+
+The underlying `garth` library tries three login strategies in sequence.
+A blocked session typically looks like this in the server logs:
+
+```
+mobile+cffi returned 429: Mobile login returned 429 — IP rate limited by Garmin
+mobile+requests failed: Mobile login failed (non-JSON): HTTP 403
+widget+cffi failed: Widget login: unexpected title 'GARMIN Authentication Application'
+```
+
+What each error means:
+- **429** — Garmin is rate-limiting the server's IP address
+- **403** — Cloudflare is blocking the request outright
+- **unexpected title 'GARMIN Authentication Application'** — the login flow hit a
+  CAPTCHA or MFA challenge page that the library cannot handle automatically
+
+This is an upstream issue outside BincioActivity's control. The underlying
+`garminconnect`/`garth` library usually releases a fix within days to weeks.
+The workaround is to update those packages on the server:
+
+```bash
+uv sync --extra garmin
+```
+
+If login consistently fails despite updating, check the
+[garminconnect issue tracker](https://github.com/cyberjunky/python-garminconnect/issues)
+for the current status.
+
 ### Two-factor authentication (2FA)
 
 If your Garmin account has 2FA enabled, this feature may not work or may
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index d224300..befcaae 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -276,6 +276,16 @@ try {
                 <p class="text-xs text-zinc-500">Import your full Strava archive</p>
               </div>
             </button>
+            <button
+              id="upload-choose-garmin"
+              class="flex items-center gap-3 p-4 rounded-lg border border-zinc-700 hover:border-zinc-500 hover:bg-zinc-800 transition-colors text-left"
+            >
+              <span class="text-2xl">⌚</span>
+              <div>
+                <p class="text-sm font-medium text-white">Sync from Garmin Connect</p>
+                <p id="garmin-choose-sub" class="text-xs text-zinc-500">Checking…</p>
+              </div>
+            </button>
           </div>
         </div>
 
@@ -356,6 +366,47 @@ try {
           </label>
           <p id="zip-status" class="mt-3 text-xs text-center leading-relaxed" style="min-height: 1.25rem"></p>
         </div>
+
+        <!-- View: Garmin Connect sync -->
+        <div id="upload-view-garmin" style="display:none">
+          <button id="upload-back-garmin" class="text-xs text-zinc-500 hover:text-white mb-3 transition-colors">← Back</button>
+          <div class="rounded-lg border border-amber-800/50 bg-amber-950/30 p-3 mb-4 text-xs text-amber-300 leading-relaxed">
+            ⚠ Garmin Connect has no official API. Your credentials are encrypted at rest and used to log in on your behalf. <a href={`${baseUrl}about/`} class="underline hover:text-amber-100">Learn more</a>.
+          </div>
+          <!-- Not connected -->
+          <div id="garmin-connect-area" style="display:none">
+            <p class="text-sm text-zinc-400 mb-3">Enter your Garmin Connect credentials to sync activities.</p>
+            <input
+              id="garmin-email"
+              type="email"
+              placeholder="Email"
+              class="w-full mb-2 px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-sm text-white placeholder-zinc-500 focus:outline-none focus:border-zinc-500"
+            />
+            <input
+              id="garmin-password"
+              type="password"
+              placeholder="Password"
+              class="w-full mb-3 px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-sm text-white placeholder-zinc-500 focus:outline-none focus:border-zinc-500"
+            />
+            <button
+              id="garmin-connect-btn"
+              class="w-full py-2 px-4 rounded-lg font-medium text-sm bg-blue-600 hover:bg-blue-500 text-white transition-colors"
+            >Connect</button>
+          </div>
+          <!-- Connected -->
+          <div id="garmin-sync-area" style="display:none">
+            <p class="text-xs text-zinc-500 mb-1">Last sync: <span id="garmin-last-sync">never</span></p>
+            <button
+              id="garmin-sync-btn"
+              class="w-full py-2 px-4 rounded-lg font-medium text-sm bg-zinc-700 hover:bg-zinc-600 text-white transition-colors mt-2"
+            >Sync now</button>
+            <button
+              id="garmin-disconnect-btn"
+              class="w-full mt-2 py-1.5 px-3 rounded-lg text-xs bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
+            >Disconnect</button>
+          </div>
+          <p id="garmin-status" class="mt-3 text-xs text-center" style="min-height: 1.25rem"></p>
+        </div>
       </div>
     </div>
   )}
@@ -476,12 +527,15 @@ try {
       const viewFile      = document.getElementById('upload-view-file');
       const viewStrava    = document.getElementById('upload-view-strava');
       const viewZip       = document.getElementById('upload-view-zip');
+      const viewGarmin    = document.getElementById('upload-view-garmin');
       const chooseFile    = document.getElementById('upload-choose-file');
       const chooseStrava  = document.getElementById('upload-choose-strava');
       const chooseZip     = document.getElementById('upload-choose-zip');
+      const chooseGarmin  = document.getElementById('upload-choose-garmin');
       const backFile      = document.getElementById('upload-back-file');
       const backStrava    = document.getElementById('upload-back-strava');
       const backZip       = document.getElementById('upload-back-zip');
+      const backGarmin    = document.getElementById('upload-back-garmin');
       const zipDrop       = document.getElementById('zip-drop');
       const zipInput      = document.getElementById('zip-input');
       const zipLabel      = document.getElementById('zip-label');
@@ -501,6 +555,16 @@ try {
       const stravaResetHardBtn  = document.getElementById('strava-reset-hard-btn');
       const stravaLastSync = document.getElementById('strava-last-sync');
       const stravaChooseSub = document.getElementById('strava-choose-sub');
+      const garminStatus      = document.getElementById('garmin-status');
+      const garminConnect     = document.getElementById('garmin-connect-area');
+      const garminSync        = document.getElementById('garmin-sync-area');
+      const garminEmail       = document.getElementById('garmin-email');
+      const garminPassword    = document.getElementById('garmin-password');
+      const garminConnBtn     = document.getElementById('garmin-connect-btn');
+      const garminSyncBtn     = document.getElementById('garmin-sync-btn');
+      const garminDisconnBtn  = document.getElementById('garmin-disconnect-btn');
+      const garminLastSync    = document.getElementById('garmin-last-sync');
+      const garminChooseSub   = document.getElementById('garmin-choose-sub');
 
       // ── view helpers ──────────────────────────────────────────────────────
       function showView(name) {
@@ -508,6 +572,7 @@ try {
         viewFile.style.display   = name === 'file'   ? '' : 'none';
         viewStrava.style.display = name === 'strava' ? '' : 'none';
         viewZip.style.display    = name === 'zip'    ? '' : 'none';
+        viewGarmin.style.display = name === 'garmin' ? '' : 'none';
       }
 
       function openModal() {
@@ -531,6 +596,7 @@ try {
       backFile.addEventListener('click',   () => showView('choose'));
       backStrava.addEventListener('click', () => showView('choose'));
       backZip.addEventListener('click',    () => showView('choose'));
+      backGarmin.addEventListener('click', () => showView('choose'));
 
       // ── file upload ───────────────────────────────────────────────────────
       drop.addEventListener('click', () => input.click());
@@ -845,6 +911,137 @@ try {
         doZipUpload(e.dataTransfer?.files?.[0]);
       });
 
+      // ── Garmin Connect ────────────────────────────────────────────────────
+      async function loadGarminStatus() {
+        try {
+          const r = await fetch(`${editUrl}/api/garmin/status`, { credentials: 'include' });
+          if (!r.ok) throw new Error();
+          const d = await r.json();
+          garminChooseSub.textContent = d.connected ? 'Connected' : 'Not connected';
+          garminConnect.style.display = d.connected ? 'none' : '';
+          garminSync.style.display    = d.connected ? ''     : 'none';
+          if (d.last_sync) garminLastSync.textContent = new Date(d.last_sync).toLocaleString();
+        } catch (_) {
+          garminChooseSub.textContent = 'Unavailable';
+        }
+      }
+      loadGarminStatus();
+
+      chooseGarmin.addEventListener('click', () => {
+        garminStatus.textContent = '';
+        showView('garmin');
+      });
+
+      garminConnBtn.addEventListener('click', async () => {
+        const email = garminEmail.value.trim();
+        const password = garminPassword.value;
+        if (!email || !password) {
+          garminStatus.textContent = 'Enter email and password.';
+          garminStatus.style.color = '#f87171';
+          return;
+        }
+        garminConnBtn.disabled = true;
+        garminConnBtn.textContent = 'Connecting…';
+        garminStatus.textContent = 'Contacting Garmin — this may take up to a minute…';
+        garminStatus.style.color = '#a1a1aa';
+        try {
+          const controller = new AbortController();
+          const timeout = setTimeout(() => controller.abort(), 90_000);
+          const r = await fetch(`${editUrl}/api/garmin/connect`, {
+            method: 'POST',
+            credentials: 'include',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ email, password }),
+            signal: controller.signal,
+          });
+          clearTimeout(timeout);
+          const d = await r.json();
+          if (!r.ok) {
+            garminStatus.textContent = 'Error: ' + (d.detail || 'Login failed');
+            garminStatus.style.color = '#f87171';
+          } else {
+            garminPassword.value = '';
+            garminStatus.textContent = `Connected as ${d.display_name || email}!`;
+            garminStatus.style.color = '#4ade80';
+            garminConnect.style.display = 'none';
+            garminSync.style.display = '';
+            garminLastSync.textContent = 'never';
+            garminChooseSub.textContent = 'Connected';
+          }
+        } catch (e) {
+          const msg = e.name === 'AbortError'
+            ? 'Timed out — Garmin login is taking too long. Try again later.'
+            : 'Error: ' + e.message;
+          garminStatus.textContent = msg;
+          garminStatus.style.color = '#f87171';
+        } finally {
+          garminConnBtn.disabled = false;
+          garminConnBtn.textContent = 'Connect';
+        }
+      });
+
+      garminSyncBtn.addEventListener('click', () => {
+        garminSyncBtn.disabled = true;
+        garminSyncBtn.textContent = 'Syncing…';
+        garminStatus.textContent = '';
+        garminStatus.style.color = '';
+
+        const es = new EventSource(`${editUrl}/api/garmin/sync/stream`, { withCredentials: true });
+        es.onmessage = e => {
+          try {
+            const d = JSON.parse(e.data);
+            if (d.type === 'fetching') {
+              garminStatus.textContent = 'Fetching activity list from Garmin…';
+            } else if (d.type === 'progress') {
+              const pct = Math.round((d.n / d.total) * 100);
+              const icon = d.status === 'imported' ? '↓' : d.status === 'error' ? '✗' : '·';
+              garminStatus.textContent = `${icon} ${d.n}/${d.total} (${pct}%) — ${d.name}`;
+            } else if (d.type === 'done') {
+              es.close();
+              garminLastSync.textContent = new Date().toLocaleString();
+              const errNote = d.error_count ? `, ${d.error_count} errors` : '';
+              garminStatus.textContent = `Done — ${d.imported} imported, ${d.skipped} already up to date${errNote}.`;
+              garminStatus.style.color = '#4ade80';
+              garminSyncBtn.disabled = false;
+              garminSyncBtn.textContent = 'Sync now';
+            } else if (d.type === 'error') {
+              es.close();
+              garminStatus.textContent = 'Error: ' + d.message;
+              garminStatus.style.color = '#f87171';
+              garminSyncBtn.disabled = false;
+              garminSyncBtn.textContent = 'Sync now';
+            }
+          } catch (_) {}
+        };
+        es.onerror = () => {
+          if (garminSyncBtn.disabled) {
+            garminStatus.textContent = 'Connection lost. Check logs.';
+            garminStatus.style.color = '#f87171';
+            garminSyncBtn.disabled = false;
+            garminSyncBtn.textContent = 'Sync now';
+          }
+          es.close();
+        };
+      });
+
+      garminDisconnBtn.addEventListener('click', async () => {
+        garminDisconnBtn.disabled = true;
+        garminStatus.textContent = '';
+        try {
+          await fetch(`${editUrl}/api/garmin/disconnect`, { method: 'POST', credentials: 'include' });
+          garminSync.style.display    = 'none';
+          garminConnect.style.display = '';
+          garminStatus.textContent = 'Disconnected.';
+          garminStatus.style.color = '#a1a1aa';
+          garminChooseSub.textContent = 'Not connected';
+        } catch (e) {
+          garminStatus.textContent = 'Error: ' + e.message;
+          garminStatus.style.color = '#f87171';
+        } finally {
+          garminDisconnBtn.disabled = false;
+        }
+      });
+
       // Handle ?strava= param set by the callback redirect (popup scenario)
       const sp = new URLSearchParams(window.location.search);
       if (sp.has('strava')) {

From 6d702ed45472055cad873bd7415a421835531653 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 15:47:09 +0200
Subject: [PATCH 054/124] modify post hook to install garmin packages

---
 docs/deployment/vps.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index a973dfe..87b6d5b 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -58,7 +58,7 @@ while read oldrev newrev refname; do
 
   echo "--- Syncing Python deps ---"
   cd $DEPLOY
-  ~/.local/bin/uv sync --extra serve --extra strava
+  ~/.local/bin/uv sync --extra serve --extra strava --extra garmin
 
   echo "--- Syncing JS deps ---"
   cd $DEPLOY/site

From 2774f436d8effea7cad6a9108499f7ae440cf498 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 15:47:27 +0200
Subject: [PATCH 055/124] login payoff

---
 site/src/pages/login/index.astro | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/site/src/pages/login/index.astro b/site/src/pages/login/index.astro
index 9db2e98..599e1d1 100644
--- a/site/src/pages/login/index.astro
+++ b/site/src/pages/login/index.astro
@@ -4,6 +4,9 @@ const editUrl = import.meta.env.PUBLIC_EDIT_URL ?? '';
 ---
 <Base title="Login — BincioActivity" public={true}>
   <div class="max-w-sm mx-auto mt-16 px-4">
+    <p class="text-center text-zinc-600 text-sm italic mb-8 leading-relaxed">
+      mangia<br/>bevi<br/>stai calmo<br/>non strappare
+    </p>
     <h1 class="text-2xl font-bold text-white mb-6 text-center">Sign in</h1>
 
     <form id="login-form" class="space-y-4">

From d659b90cd9aef95968b6d46ed40b573f6c60af79 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 17:46:28 +0200
Subject: [PATCH 056/124] =?UTF-8?q?=20=20-=20DELETE=20/api/admin/users/{ha?=
 =?UTF-8?q?ndle}/activities=20=E2=80=94=20deletes=20all=20activities/*.jso?=
 =?UTF-8?q?n,=20wipes=20=5Fmerged/=20and=20=20=20index.json,=20then=20trig?=
 =?UTF-8?q?gers=20a=20rebuild.=20Admin-only.=20=20=20-=20/admin/=20page=20?=
 =?UTF-8?q?=E2=80=94=20lists=20all=20users,=20each=20with=20a=20"Delete=20?=
 =?UTF-8?q?activities"=20button.=20Clicking=20asks=20for=20=20=20confirmat?=
 =?UTF-8?q?ion=20in=20a=20<dialog>=20before=20firing=20the=20request.=20Bu?=
 =?UTF-8?q?tton=20shows=20"Deleted=20(N)"=20or=20an=20error=20inline.=20?=
 =?UTF-8?q?=20=20-=20"Admin"=20nav=20link=20=E2=80=94=20appears=20in=20the?=
 =?UTF-8?q?=20top-right=20for=20admins=20only,=20hidden=20for=20everyone?=
 =?UTF-8?q?=20else.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bincio/serve/server.py           | 31 +++++++++++
 site/src/layouts/Base.astro      | 11 +++-
 site/src/pages/admin/index.astro | 93 ++++++++++++++++++++++++++++++++
 3 files changed, 134 insertions(+), 1 deletion(-)
 create mode 100644 site/src/pages/admin/index.astro

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index db95d01..e0887e5 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -437,6 +437,37 @@ async def admin_jobs(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     return JSONResponse(jobs)
 
 
+@app.delete("/api/admin/users/{handle}/activities")
+async def admin_delete_activities(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Delete all activity JSON files for a user and wipe the merged cache."""
+    _require_admin(bincio_session)
+    user_dir = _get_data_dir() / handle
+    if not user_dir.is_dir():
+        raise HTTPException(404, f"No data directory for user '{handle}'")
+
+    deleted = 0
+    activities_dir = user_dir / "activities"
+    if activities_dir.is_dir():
+        for f in activities_dir.glob("*.json"):
+            f.unlink()
+            deleted += 1
+
+    # Wipe merged cache and top-level index so they don't show stale data
+    import shutil
+    merged_dir = user_dir / "_merged"
+    if merged_dir.exists():
+        shutil.rmtree(merged_dir)
+    index_file = user_dir / "index.json"
+    if index_file.exists():
+        index_file.unlink()
+
+    _trigger_rebuild(handle)
+    return JSONResponse({"ok": True, "deleted": deleted})
+
+
 # ── Write API (ported from bincio edit, auth-gated) ───────────────────────────
 
 def _user_data_dir(handle: str) -> Path:
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index befcaae..4989589 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -200,6 +200,13 @@ try {
               title=""
               class="text-xs px-2 py-0.5 rounded-full bg-amber-900/60 text-amber-300 border border-amber-700/50 animate-pulse cursor-default"
             ></span>
+            <!-- Admin link — hidden until confirmed admin -->
+            <a
+              id="nav-admin"
+              href={`${baseUrl}admin/`}
+              style="display:none"
+              class="text-xs text-zinc-500 hover:text-white transition-colors px-1"
+            >Admin</a>
 
             <!-- Logout button — hidden until logged in -->
             <button
@@ -484,8 +491,10 @@ try {
           const chk = document.getElementById('upload-keep-original');
           if (chk && user.store_originals_default) chk.checked = true;
 
-          // Admin: poll for active jobs and show a badge in the nav
+          // Admin: show admin link and poll for active jobs
           if (user.is_admin) {
+            const adminLink = document.getElementById('nav-admin');
+            if (adminLink) adminLink.style.display = '';
             const badge = document.getElementById('admin-jobs-badge');
             async function pollJobs() {
               try {
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
new file mode 100644
index 0000000..89ab8bf
--- /dev/null
+++ b/site/src/pages/admin/index.astro
@@ -0,0 +1,93 @@
+---
+import Base from '../../layouts/Base.astro';
+---
+<Base title="Admin — BincioActivity">
+  <div class="max-w-2xl mx-auto px-4 py-10">
+    <h1 class="text-2xl font-bold text-white mb-8">Admin</h1>
+
+    <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-3">Users</h2>
+    <div id="user-list" class="space-y-2">
+      <p class="text-zinc-500 text-sm">Loading…</p>
+    </div>
+
+    <!-- Confirmation dialog -->
+    <dialog id="confirm-dialog" class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-sm w-full backdrop:bg-black/60">
+      <p class="text-sm text-zinc-300 mb-5">Delete all activities for <strong id="confirm-handle" class="text-white"></strong>? This cannot be undone.</p>
+      <div class="flex gap-3 justify-end">
+        <button id="confirm-cancel" class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-zinc-700 text-zinc-300 transition-colors">Cancel</button>
+        <button id="confirm-ok" class="px-4 py-2 rounded-lg text-sm bg-red-700 hover:bg-red-600 text-white font-medium transition-colors">Delete</button>
+      </div>
+    </dialog>
+  </div>
+</Base>
+
+<script>
+  const listEl   = document.getElementById('user-list')!;
+  const dialog   = document.getElementById('confirm-dialog') as HTMLDialogElement;
+  const confirmH = document.getElementById('confirm-handle')!;
+  const confirmOk     = document.getElementById('confirm-ok')!;
+  const confirmCancel = document.getElementById('confirm-cancel')!;
+
+  let pendingHandle = '';
+
+  async function load() {
+    const r = await fetch('/api/admin/users', { credentials: 'include' });
+    if (!r.ok) {
+      listEl.innerHTML = '<p class="text-red-400 text-sm">Not authorised or server unavailable.</p>';
+      return;
+    }
+    const users = await r.json();
+    if (!users.length) {
+      listEl.innerHTML = '<p class="text-zinc-500 text-sm">No users.</p>';
+      return;
+    }
+    listEl.innerHTML = users.map((u: { handle: string; display_name: string; is_admin: boolean }) => `
+      <div class="flex items-center justify-between px-4 py-3 rounded-lg bg-zinc-900 border border-zinc-800" data-handle="${u.handle}">
+        <div>
+          <span class="text-sm font-medium text-white">@${u.handle}</span>
+          ${u.display_name ? `<span class="text-zinc-500 text-sm ml-2">${u.display_name}</span>` : ''}
+          ${u.is_admin ? '<span class="ml-2 text-xs text-amber-400">admin</span>' : ''}
+        </div>
+        <button
+          class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
+          data-handle="${u.handle}"
+        >Delete activities</button>
+      </div>
+    `).join('');
+
+    listEl.querySelectorAll<HTMLButtonElement>('.delete-btn').forEach(btn => {
+      btn.addEventListener('click', () => {
+        pendingHandle = btn.dataset.handle!;
+        confirmH.textContent = pendingHandle;
+        dialog.showModal();
+      });
+    });
+  }
+
+  confirmCancel.addEventListener('click', () => dialog.close());
+  dialog.addEventListener('click', e => { if (e.target === dialog) dialog.close(); });
+
+  confirmOk.addEventListener('click', async () => {
+    dialog.close();
+    const row = listEl.querySelector(`[data-handle="${pendingHandle}"]`);
+    const btn = row?.querySelector<HTMLButtonElement>('.delete-btn');
+    if (btn) { btn.disabled = true; btn.textContent = 'Deleting…'; }
+
+    try {
+      const r = await fetch(`/api/admin/users/${pendingHandle}/activities`, {
+        method: 'DELETE',
+        credentials: 'include',
+      });
+      const d = await r.json();
+      if (r.ok) {
+        if (btn) { btn.textContent = `Deleted (${d.deleted})`; btn.classList.add('text-green-500'); }
+      } else {
+        if (btn) { btn.disabled = false; btn.textContent = 'Error: ' + (d.detail ?? 'failed'); btn.classList.add('text-red-400'); }
+      }
+    } catch (e: any) {
+      if (btn) { btn.disabled = false; btn.textContent = 'Error'; btn.classList.add('text-red-400'); }
+    }
+  });
+
+  load();
+</script>

From 79e428ff0f7478f4d821ecd0e069e6a264850179 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 19:48:13 +0200
Subject: [PATCH 057/124] script to rebuild pages

---
 scripts/rebuild.sh | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100755 scripts/rebuild.sh

diff --git a/scripts/rebuild.sh b/scripts/rebuild.sh
new file mode 100755
index 0000000..c52a34e
--- /dev/null
+++ b/scripts/rebuild.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+set -e
+
+REPO=/opt/bincio-repo.git
+DEPLOY=/opt/bincio
+DATA=/var/bincio/data
+
+echo "--- Syncing Python deps ---"
+cd $DEPLOY
+~/.local/bin/uv sync --extra serve --extra strava --extra garmin
+
+echo "--- Syncing JS deps ---"
+cd $DEPLOY/site
+npm install --silent
+
+echo "--- Building site ---"
+cd $DEPLOY
+~/.local/bin/uv run bincio render --data-dir $DATA --site-dir $DEPLOY/site
+
+echo "--- Copying dist to webroot ---"
+rsync -a --delete $DEPLOY/site/dist/ /var/www/bincio/
+
+echo "--- Restarting API ---"
+systemctl restart bincio || echo "WARNING: bincio service restart failed — check journalctl -u bincio"
+
+echo "--- Done ---"
\ No newline at end of file

From 7e526c14e11f3300c66224f2bd082c4cff1c14cf Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 12 Apr 2026 19:55:13 +0200
Subject: [PATCH 058/124] fix commit d659b90cd9aef95968b6d46ed40b573f6c60af79

---
 bincio/serve/server.py | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index e0887e5..6518728 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -455,14 +455,15 @@ async def admin_delete_activities(
             f.unlink()
             deleted += 1
 
-    # Wipe merged cache and top-level index so they don't show stale data
+    # Wipe merged cache, top-level index, and dedup cache so re-uploads aren't blocked
     import shutil
     merged_dir = user_dir / "_merged"
     if merged_dir.exists():
         shutil.rmtree(merged_dir)
-    index_file = user_dir / "index.json"
-    if index_file.exists():
-        index_file.unlink()
+    for name in ("index.json", ".bincio_cache.json"):
+        f = user_dir / name
+        if f.exists():
+            f.unlink()
 
     _trigger_rebuild(handle)
     return JSONResponse({"ok": True, "deleted": deleted})

From 7b37f451803b841acaf9a99362aaaf137889689f Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 12:24:59 +0200
Subject: [PATCH 059/124] =?UTF-8?q?=20=20Bug=20fixed=20=E2=80=94=20temp=20?=
 =?UTF-8?q?ZIPs=20now=20go=20to=20/tmp/=20(system=20temp)=20and=20are=20al?=
 =?UTF-8?q?ways=20deleted=20in=20a=20finally=20block,=20so=20they=20can't?=
 =?UTF-8?q?=20leak.=20A=20startup=20hook=20also=20auto-cleans=20any=20left?=
 =?UTF-8?q?overs=20on=20=20=20next=20server=20restart.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

  Admin page now shows:
  - Overall disk bar (used/free/%)
  - Per-user table: total, activities (with file count), originals (with Strava breakdown), merged, images
  - A mini bar per user showing relative size
  - Red ⚠ warning if orphaned temp ZIPs are still present for a user
  - Delete activities button (reloads sizes after)
---
 bincio/serve/server.py           |  68 ++++++++++++++-
 scripts/disk_report.sh           |  72 ++++++++++++++++
 site/src/pages/admin/index.astro | 137 +++++++++++++++++++++++--------
 3 files changed, 242 insertions(+), 35 deletions(-)
 create mode 100644 scripts/disk_report.sh

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 6518728..4c74fbf 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -106,6 +106,19 @@ def _get_data_dir() -> Path:
 
 app = FastAPI(title="BincioActivity Serve", docs_url=None, redoc_url=None)
 
+
+@app.on_event("startup")
+async def _cleanup_orphaned_tmp_zips() -> None:
+    """Remove tmp*.zip files left in user data dirs by the pre-fix upload handler."""
+    import glob as _glob
+    data_dir = _get_data_dir()
+    for p in _glob.glob(str(data_dir / "*" / "tmp*.zip")):
+        try:
+            Path(p).unlink()
+        except Exception:
+            pass
+
+
 app.add_middleware(GZipMiddleware, minimum_size=1024)
 app.add_middleware(
     CORSMiddleware,
@@ -437,6 +450,56 @@ async def admin_jobs(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     return JSONResponse(jobs)
 
 
+@app.get("/api/admin/disk")
+async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Per-user disk usage breakdown. Admin only."""
+    _require_admin(bincio_session)
+    import shutil
+
+    data_dir = _get_data_dir()
+
+    def _mb(path: Path) -> float:
+        if not path.exists():
+            return 0.0
+        total = sum(f.stat().st_size for f in path.rglob("*") if f.is_file())
+        return round(total / 1_048_576, 1)
+
+    def _count(path: Path, pattern: str = "*") -> int:
+        if not path.exists():
+            return 0
+        return sum(1 for f in path.glob(pattern) if f.is_file())
+
+    users = []
+    for user_dir in sorted(data_dir.iterdir()):
+        if not user_dir.is_dir() or user_dir.name.startswith("_"):
+            continue
+        # leaked tmp zips
+        leaked = [f for f in user_dir.glob("tmp*.zip") if f.is_file()]
+        users.append({
+            "handle": user_dir.name,
+            "total_mb": _mb(user_dir),
+            "activities_mb": _mb(user_dir / "activities"),
+            "activities_count": _count(user_dir / "activities", "*.json"),
+            "merged_mb": _mb(user_dir / "_merged"),
+            "originals_mb": _mb(user_dir / "originals"),
+            "originals_strava_mb": _mb(user_dir / "originals" / "strava"),
+            "images_mb": _mb(user_dir / "edits" / "images"),
+            "leaked_zips_mb": round(sum(f.stat().st_size for f in leaked) / 1_048_576, 1),
+            "leaked_zips_count": len(leaked),
+        })
+
+    disk = shutil.disk_usage("/")
+    return JSONResponse({
+        "disk": {
+            "total_gb": round(disk.total / 1_073_741_824, 1),
+            "used_gb": round(disk.used / 1_073_741_824, 1),
+            "free_gb": round(disk.free / 1_073_741_824, 1),
+            "percent": round(disk.used / disk.total * 100, 1),
+        },
+        "users": users,
+    })
+
+
 @app.delete("/api/admin/users/{handle}/activities")
 async def admin_delete_activities(
     handle: str,
@@ -803,7 +866,7 @@ async def upload_strava_zip(
 
     dd = _get_data_dir() / user.handle
     import tempfile
-    tmp = tempfile.NamedTemporaryFile(suffix=".zip", delete=False, dir=dd)
+    tmp = tempfile.NamedTemporaryFile(suffix=".zip", delete=False)
     zip_path = Path(tmp.name)
     try:
         while chunk := await file.read(1024 * 1024):  # 1 MB chunks
@@ -826,8 +889,9 @@ async def upload_strava_zip(
                         merge_all(dd)
                         _trigger_rebuild(user.handle)
         except Exception as exc:
-            zip_path.unlink(missing_ok=True)
             yield f"data: {json.dumps({'type': 'error', 'message': str(exc)})}\n\n"
+        finally:
+            zip_path.unlink(missing_ok=True)
 
     return StreamingResponse(
         event_stream(),
diff --git a/scripts/disk_report.sh b/scripts/disk_report.sh
new file mode 100644
index 0000000..a7ce70a
--- /dev/null
+++ b/scripts/disk_report.sh
@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+# Bincio VPS disk usage report
+# Run on the VPS: bash scripts/disk_report.sh
+# Or remotely:   ssh root@<vps> 'bash -s' < scripts/disk_report.sh
+
+DATA=/var/bincio/data
+SITE=/var/bincio/site   # adjust if your site build lives elsewhere
+
+hr() { echo; echo "── $* ──────────────────────────────────────"; }
+
+hr "DISK OVERVIEW"
+df -h / | tail -1 | awk '{printf "Used: %s / %s  (%s full)\n", $3, $2, $5}'
+
+hr "BINCIO ROOT"
+du -sh /var/bincio/ 2>/dev/null
+
+hr "DATA ROOT: $DATA"
+du -sh "$DATA" 2>/dev/null
+
+hr "PER-USER BREAKDOWN"
+for user_dir in "$DATA"/*/; do
+    handle=$(basename "$user_dir")
+    [[ "$handle" == _* ]] && continue   # skip _feedback etc.
+
+    total=$(du -sh "$user_dir" 2>/dev/null | cut -f1)
+
+    act=$(du -sh "$user_dir/activities"      2>/dev/null | cut -f1 || echo "—")
+    merged=$(du -sh "$user_dir/_merged"      2>/dev/null | cut -f1 || echo "—")
+    edits=$(du -sh "$user_dir/edits"         2>/dev/null | cut -f1 || echo "—")
+    images=$(du -sh "$user_dir/edits/images" 2>/dev/null | cut -f1 || echo "—")
+    orig=$(du -sh "$user_dir/originals"      2>/dev/null | cut -f1 || echo "—")
+    orig_strava=$(du -sh "$user_dir/originals/strava" 2>/dev/null | cut -f1 || echo "—")
+    orig_fit=$(du -sh "$user_dir/originals"  2>/dev/null)  # will count below by extension
+
+    n_act=$(find "$user_dir/activities" -name "*.json" 2>/dev/null | wc -l | tr -d ' ')
+    n_orig=$(find "$user_dir/originals" -type f        2>/dev/null | wc -l | tr -d ' ')
+    n_strava=$(find "$user_dir/originals/strava" -name "*.json" 2>/dev/null | wc -l | tr -d ' ')
+
+    echo ""
+    echo "  @$handle  (total: $total)"
+    echo "    activities/       $act   ($n_act JSON files)"
+    echo "    _merged/          $merged"
+    echo "    edits/            $edits   (images: $images)"
+    echo "    originals/        $orig   ($n_orig files)"
+    echo "      strava/         $orig_strava   ($n_strava JSON)"
+done
+
+hr "FEEDBACK"
+du -sh "$DATA/_feedback" 2>/dev/null || echo "  (none)"
+
+hr "SITE BUILD"
+du -sh "$SITE" 2>/dev/null || echo "  (not found at $SITE)"
+
+hr "LOGS"
+journalctl --disk-usage 2>/dev/null || echo "  (journalctl unavailable)"
+
+hr "LARGEST FILES IN DATA (top 20)"
+find "$DATA" -type f -printf '%s\t%p\n' 2>/dev/null \
+    | sort -rn | head -20 \
+    | awk '{
+        size=$1; path=$2;
+        if (size >= 1048576) printf "%6.1f MB  %s\n", size/1048576, path;
+        else if (size >= 1024) printf "%6.1f KB  %s\n", size/1024, path;
+        else printf "%6d  B  %s\n", size, path;
+      }'
+
+hr "EXTENSION BREAKDOWN IN originals/"
+find "$DATA" -path "*/originals/*" -type f 2>/dev/null \
+    | sed 's/.*\.//' | sort | uniq -c | sort -rn \
+    | awk '{printf "  %6d  .%s\n", $1, $2}'
+
+echo
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index 89ab8bf..9070c77 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -2,12 +2,33 @@
 import Base from '../../layouts/Base.astro';
 ---
 <Base title="Admin — BincioActivity">
-  <div class="max-w-2xl mx-auto px-4 py-10">
+  <div class="max-w-3xl mx-auto px-4 py-10">
     <h1 class="text-2xl font-bold text-white mb-8">Admin</h1>
 
+    <!-- Disk overview -->
+    <div id="disk-overview" class="mb-8 p-4 rounded-lg bg-zinc-900 border border-zinc-800 text-sm">
+      <p class="text-zinc-500">Loading disk info…</p>
+    </div>
+
+    <!-- User table -->
     <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-3">Users</h2>
-    <div id="user-list" class="space-y-2">
-      <p class="text-zinc-500 text-sm">Loading…</p>
+    <div class="overflow-x-auto rounded-lg border border-zinc-800">
+      <table class="w-full text-sm">
+        <thead>
+          <tr class="text-left text-zinc-500 text-xs border-b border-zinc-800">
+            <th class="px-4 py-2 font-medium">Handle</th>
+            <th class="px-4 py-2 font-medium text-right">Total</th>
+            <th class="px-4 py-2 font-medium text-right">Activities</th>
+            <th class="px-4 py-2 font-medium text-right">Originals</th>
+            <th class="px-4 py-2 font-medium text-right">Merged</th>
+            <th class="px-4 py-2 font-medium text-right">Images</th>
+            <th class="px-4 py-2 font-medium"></th>
+          </tr>
+        </thead>
+        <tbody id="user-list">
+          <tr><td colspan="7" class="px-4 py-6 text-zinc-500 text-center">Loading…</td></tr>
+        </tbody>
+      </table>
     </div>
 
     <!-- Confirmation dialog -->
@@ -22,40 +43,88 @@ import Base from '../../layouts/Base.astro';
 </Base>
 
 <script>
-  const listEl   = document.getElementById('user-list')!;
-  const dialog   = document.getElementById('confirm-dialog') as HTMLDialogElement;
-  const confirmH = document.getElementById('confirm-handle')!;
+  const overviewEl = document.getElementById('disk-overview')!;
+  const tbodyEl    = document.getElementById('user-list')!;
+  const dialog     = document.getElementById('confirm-dialog') as HTMLDialogElement;
+  const confirmH   = document.getElementById('confirm-handle')!;
   const confirmOk     = document.getElementById('confirm-ok')!;
   const confirmCancel = document.getElementById('confirm-cancel')!;
 
   let pendingHandle = '';
 
-  async function load() {
-    const r = await fetch('/api/admin/users', { credentials: 'include' });
-    if (!r.ok) {
-      listEl.innerHTML = '<p class="text-red-400 text-sm">Not authorised or server unavailable.</p>';
-      return;
-    }
-    const users = await r.json();
-    if (!users.length) {
-      listEl.innerHTML = '<p class="text-zinc-500 text-sm">No users.</p>';
-      return;
-    }
-    listEl.innerHTML = users.map((u: { handle: string; display_name: string; is_admin: boolean }) => `
-      <div class="flex items-center justify-between px-4 py-3 rounded-lg bg-zinc-900 border border-zinc-800" data-handle="${u.handle}">
-        <div>
-          <span class="text-sm font-medium text-white">@${u.handle}</span>
-          ${u.display_name ? `<span class="text-zinc-500 text-sm ml-2">${u.display_name}</span>` : ''}
-          ${u.is_admin ? '<span class="ml-2 text-xs text-amber-400">admin</span>' : ''}
-        </div>
-        <button
-          class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
-          data-handle="${u.handle}"
-        >Delete activities</button>
-      </div>
-    `).join('');
+  function fmt(mb: number): string {
+    if (mb >= 1024) return (mb / 1024).toFixed(1) + ' GB';
+    if (mb >= 1)    return mb.toFixed(0) + ' MB';
+    return (mb * 1024).toFixed(0) + ' KB';
+  }
 
-    listEl.querySelectorAll<HTMLButtonElement>('.delete-btn').forEach(btn => {
+  function bar(pct: number): string {
+    const color = pct >= 90 ? 'bg-red-500' : pct >= 70 ? 'bg-amber-500' : 'bg-blue-500';
+    return `<div class="w-full bg-zinc-800 rounded-full h-1.5 mt-1"><div class="${color} h-1.5 rounded-full" style="width:${Math.min(pct,100)}%"></div></div>`;
+  }
+
+  async function load() {
+    const r = await fetch('/api/admin/disk', { credentials: 'include' });
+    if (!r.ok) {
+      overviewEl.innerHTML = '<p class="text-red-400">Not authorised or server unavailable.</p>';
+      return;
+    }
+    const { disk, users } = await r.json();
+
+    // Disk overview
+    const pct = disk.percent;
+    const color = pct >= 90 ? 'text-red-400' : pct >= 70 ? 'text-amber-400' : 'text-green-400';
+    overviewEl.innerHTML = `
+      <div class="flex items-center justify-between mb-2">
+        <span class="text-zinc-300 font-medium">Disk usage</span>
+        <span class="${color} font-semibold">${pct}%</span>
+      </div>
+      ${bar(pct)}
+      <p class="text-zinc-500 mt-2">${disk.used_gb} GB used of ${disk.total_gb} GB — ${disk.free_gb} GB free</p>
+    `;
+
+    // User rows
+    const maxMb = Math.max(...users.map((u: any) => u.total_mb), 1);
+
+    tbodyEl.innerHTML = users.map((u: any) => {
+      const rowPct = Math.round(u.total_mb / maxMb * 100);
+      const leaked = u.leaked_zips_count > 0
+        ? `<span class="text-red-400 font-medium ml-2" title="${u.leaked_zips_count} orphaned temp ZIP(s)">⚠ ${fmt(u.leaked_zips_mb)} leaked</span>`
+        : '';
+      const stravaNote = u.originals_strava_mb > 0
+        ? `<span class="text-zinc-600 text-xs ml-1">(${fmt(u.originals_strava_mb)} Strava)</span>`
+        : '';
+      return `
+        <tr class="border-b border-zinc-800/50 hover:bg-zinc-900/40" data-handle="${u.handle}">
+          <td class="px-4 py-3">
+            <div class="flex items-center gap-1">
+              <a href="/u/${u.handle}/" class="text-white hover:text-zinc-300">@${u.handle}</a>
+              ${leaked}
+            </div>
+            ${bar(rowPct)}
+          </td>
+          <td class="px-4 py-3 text-right text-zinc-300 font-medium tabular-nums">${fmt(u.total_mb)}</td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">
+            ${fmt(u.activities_mb)}
+            <span class="text-zinc-600 text-xs block">${u.activities_count} files</span>
+          </td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">
+            ${u.originals_mb > 0 ? fmt(u.originals_mb) : '—'}
+            ${stravaNote}
+          </td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.merged_mb > 0 ? fmt(u.merged_mb) : '—'}</td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.images_mb > 0 ? fmt(u.images_mb) : '—'}</td>
+          <td class="px-4 py-3 text-right">
+            <button
+              class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
+              data-handle="${u.handle}"
+            >Delete activities</button>
+          </td>
+        </tr>
+      `;
+    }).join('');
+
+    tbodyEl.querySelectorAll<HTMLButtonElement>('.delete-btn').forEach(btn => {
       btn.addEventListener('click', () => {
         pendingHandle = btn.dataset.handle!;
         confirmH.textContent = pendingHandle;
@@ -69,7 +138,7 @@ import Base from '../../layouts/Base.astro';
 
   confirmOk.addEventListener('click', async () => {
     dialog.close();
-    const row = listEl.querySelector(`[data-handle="${pendingHandle}"]`);
+    const row = tbodyEl.querySelector(`[data-handle="${pendingHandle}"]`);
     const btn = row?.querySelector<HTMLButtonElement>('.delete-btn');
     if (btn) { btn.disabled = true; btn.textContent = 'Deleting…'; }
 
@@ -81,10 +150,12 @@ import Base from '../../layouts/Base.astro';
       const d = await r.json();
       if (r.ok) {
         if (btn) { btn.textContent = `Deleted (${d.deleted})`; btn.classList.add('text-green-500'); }
+        // Reload to refresh sizes
+        setTimeout(() => load(), 1500);
       } else {
         if (btn) { btn.disabled = false; btn.textContent = 'Error: ' + (d.detail ?? 'failed'); btn.classList.add('text-red-400'); }
       }
-    } catch (e: any) {
+    } catch {
       if (btn) { btn.disabled = false; btn.textContent = 'Error'; btn.classList.add('text-red-400'); }
     }
   });

From 1587d1cdf38c3eee42bfaf39ae7a89681290ab7a Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 12:35:05 +0200
Subject: [PATCH 060/124] =?UTF-8?q?=20=20-=20brut:=20=5Fmerged/index.json?=
 =?UTF-8?q?=20has=20586=20activities=20=E2=80=94=20the=20count=20when=20me?=
 =?UTF-8?q?rge=5Fall=20last=20ran.=20The=20SSE=20rebuild=20bug=20(already?=
 =?UTF-8?q?=20fixed)=20meant=20it=20never=20re-ran=20after=20the=20full=20?=
 =?UTF-8?q?Strava=20sync=20=20=20=20added=203256=20more.=20=20=20-=20danil?=
 =?UTF-8?q?o:=20=5Fmerged/=20is=208=20KB=20=E2=80=94=20basically=20empty.?=
 =?UTF-8?q?=20merge=5Fall=20likely=20ran=20concurrently=20(multiple=20file?=
 =?UTF-8?q?=20uploads=20trigger=20multiple=20rebuilds=20without=20a=20lock?=
 =?UTF-8?q?=20in=20--no-build=20mode),=20=20=20causing=20a=20race=20where?=
 =?UTF-8?q?=20shutil.rmtree(merged=5Facts)=20from=20one=20run=20wiped=20wh?=
 =?UTF-8?q?at=20another=20run=20was=20writing.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

  Two fixes: serialize --no-build rebuilds with the same lock, and add a "Rebuild" button to the admin page.

 Root causes fixed:
  1. merge_all race condition — --no-build rebuilds now hold _rebuild_lock, same as full builds
  2. The SSE rebuild-trigger bug (already fixed earlier) was brut's original cause
---
 bincio/serve/server.py           | 37 +++++++++++++++++++--------
 site/src/pages/admin/index.astro | 43 +++++++++++++++++++++++++++++---
 2 files changed, 66 insertions(+), 14 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 4c74fbf..9a94e70 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -243,16 +243,19 @@ def _trigger_rebuild(handle: str) -> None:
     def _run() -> None:
         try:
             if _webroot is None:
-                # Fast: only update data, skip Astro build
-                subprocess.run(
-                    [uv, "run", "bincio", "render",
-                     "--data-dir", _data_dir,
-                     "--site-dir", _site_dir,
-                     "--handle", _handle,
-                     "--no-build"],
-                    stdout=subprocess.DEVNULL,
-                    stderr=subprocess.DEVNULL,
-                )
+                # Fast: only update data, skip Astro build.
+                # Serialised with the same lock: merge_all wipes and recreates
+                # _merged/activities/ — concurrent runs would corrupt each other.
+                with _rebuild_lock:
+                    subprocess.run(
+                        [uv, "run", "bincio", "render",
+                         "--data-dir", _data_dir,
+                         "--site-dir", _site_dir,
+                         "--handle", _handle,
+                         "--no-build"],
+                        stdout=subprocess.DEVNULL,
+                        stderr=subprocess.DEVNULL,
+                    )
             else:
                 # Full build + rsync — serialised so concurrent uploads don't race
                 with _rebuild_lock:
@@ -500,6 +503,20 @@ async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     })
 
 
+@app.post("/api/admin/users/{handle}/rebuild")
+async def admin_rebuild(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Trigger a merge_all + site rebuild for a user. Admin only."""
+    _require_admin(bincio_session)
+    user_dir = _get_data_dir() / handle
+    if not user_dir.is_dir():
+        raise HTTPException(404, f"No data directory for user '{handle}'")
+    _trigger_rebuild(handle)
+    return JSONResponse({"ok": True})
+
+
 @app.delete("/api/admin/users/{handle}/activities")
 async def admin_delete_activities(
     handle: str,
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index 9070c77..c67ac33 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -115,15 +115,50 @@ import Base from '../../layouts/Base.astro';
           <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.merged_mb > 0 ? fmt(u.merged_mb) : '—'}</td>
           <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.images_mb > 0 ? fmt(u.images_mb) : '—'}</td>
           <td class="px-4 py-3 text-right">
-            <button
-              class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
-              data-handle="${u.handle}"
-            >Delete activities</button>
+            <div class="flex gap-2 justify-end">
+              <button
+                class="rebuild-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
+                data-handle="${u.handle}"
+                title="Re-run merge_all and trigger a site rebuild"
+              >Rebuild</button>
+              <button
+                class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
+                data-handle="${u.handle}"
+              >Delete activities</button>
+            </div>
           </td>
         </tr>
       `;
     }).join('');
 
+    tbodyEl.querySelectorAll<HTMLButtonElement>('.rebuild-btn').forEach(btn => {
+      btn.addEventListener('click', async () => {
+        const h = btn.dataset.handle!;
+        btn.disabled = true;
+        btn.textContent = 'Queued…';
+        try {
+          const r = await fetch(`/api/admin/users/${h}/rebuild`, {
+            method: 'POST',
+            credentials: 'include',
+          });
+          if (r.ok) {
+            btn.textContent = 'Rebuilding…';
+            btn.classList.add('text-blue-400');
+            // Rebuild is async — reload sizes after a delay
+            setTimeout(() => load(), 8000);
+          } else {
+            btn.disabled = false;
+            btn.textContent = 'Error';
+            btn.classList.add('text-red-400');
+          }
+        } catch {
+          btn.disabled = false;
+          btn.textContent = 'Error';
+          btn.classList.add('text-red-400');
+        }
+      });
+    });
+
     tbodyEl.querySelectorAll<HTMLButtonElement>('.delete-btn').forEach(btn => {
       btn.addEventListener('click', () => {
         pendingHandle = btn.dataset.handle!;

From 2ebfc7046da7539bbf692e167620156893ab4d5c Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 13:04:46 +0200
Subject: [PATCH 061/124] fix: fallback to direct file fetch in
 ActivityDetailLoader

If the index-based lookup fails (shard fetch silently failed, stale
index state, etc.), try fetching the activity detail file directly from
each user shard's _merged/activities/ directory. This makes private
activities and newly-synced activities accessible even when the index
resolution fails.

Also add console.error logging when shards fail in resolveShards to
help diagnose root causes.
---
 .../components/ActivityDetailLoader.svelte    | 59 ++++++++++++++++++-
 site/src/lib/dataloader.ts                    |  7 +++
 2 files changed, 65 insertions(+), 1 deletion(-)

diff --git a/site/src/components/ActivityDetailLoader.svelte b/site/src/components/ActivityDetailLoader.svelte
index a0482c7..600113b 100644
--- a/site/src/components/ActivityDetailLoader.svelte
+++ b/site/src/components/ActivityDetailLoader.svelte
@@ -2,7 +2,7 @@
   import { onMount } from 'svelte';
   import { loadIndex } from '../lib/dataloader';
   import ActivityDetail from './ActivityDetail.svelte';
-  import type { ActivitySummary } from '../lib/types';
+  import type { ActivitySummary, BASIndex } from '../lib/types';
 
   export let base: string = '/';
 
@@ -10,6 +10,56 @@
   let notFound = false;
   let loading = true;
 
+  /**
+   * Fallback: if the activity isn't found in the loaded index (e.g. the user's
+   * shard fetch failed silently), try to fetch the detail file directly from
+   * each known user shard's _merged/activities/ directory.
+   */
+  async function fetchActivityDirect(id: string): Promise<ActivitySummary | null> {
+    try {
+      const r = await fetch(`${base}data/index.json`);
+      if (!r.ok) return null;
+      const root: BASIndex = await r.json();
+      for (const shard of (root.shards ?? [])) {
+        if (!shard.handle) continue;
+        const url = `${base}data/${shard.handle}/_merged/activities/${id}.json`;
+        try {
+          const dr = await fetch(url);
+          if (!dr.ok) continue;
+          const d = await dr.json();
+          if (d.id !== id) continue;
+          return {
+            id: d.id,
+            title: d.title ?? id,
+            sport: d.sport ?? 'other',
+            sub_sport: d.sub_sport ?? null,
+            started_at: d.started_at ?? '',
+            distance_m: d.distance_m ?? null,
+            duration_s: d.duration_s ?? null,
+            moving_time_s: d.moving_time_s ?? null,
+            elevation_gain_m: d.elevation_gain_m ?? null,
+            avg_speed_kmh: d.avg_speed_kmh ?? null,
+            max_speed_kmh: d.max_speed_kmh ?? null,
+            avg_hr_bpm: d.avg_hr_bpm ?? null,
+            max_hr_bpm: d.max_hr_bpm ?? null,
+            avg_cadence_rpm: d.avg_cadence_rpm ?? null,
+            avg_power_w: d.avg_power_w ?? null,
+            mmp: d.mmp ?? null,
+            source: d.source ?? null,
+            privacy: d.privacy ?? 'public',
+            detail_url: `${shard.handle}/_merged/activities/${id}.json`,
+            track_url: d.bbox && d.privacy !== 'private' && d.privacy !== 'no_gps'
+              ? `${shard.handle}/_merged/activities/${id}.geojson`
+              : null,
+            preview_coords: null,
+            handle: shard.handle,
+          };
+        } catch { /* try next shard */ }
+      }
+    } catch { /* ignore */ }
+    return null;
+  }
+
   onMount(async () => {
     // Extract activity ID from the URL path: /activity/{id}/
     const match = window.location.pathname.match(/\/activity\/([^/]+)/);
@@ -19,6 +69,13 @@
     try {
       const index = await loadIndex(base);
       activity = index.activities.find(a => a.id === id) ?? null;
+
+      if (!activity) {
+        // Shard lookup failed — try fetching the detail file directly.
+        // This handles transient shard fetch errors, stale index state, etc.
+        activity = await fetchActivityDirect(id);
+      }
+
       if (!activity) notFound = true;
     } catch {
       notFound = true;
diff --git a/site/src/lib/dataloader.ts b/site/src/lib/dataloader.ts
index 46b9f40..f427981 100644
--- a/site/src/lib/dataloader.ts
+++ b/site/src/lib/dataloader.ts
@@ -99,6 +99,13 @@ async function resolveShards(
     }),
   );
 
+  // Log shard fetch failures to help diagnose missing-activity issues
+  shardResults.forEach((r, i) => {
+    if (r.status === 'rejected') {
+      console.error('[bincio] shard fetch failed:', index.shards[i]?.url, r.reason);
+    }
+  });
+
   const own = index.activities ?? [];
   const fromShards = shardResults.flatMap(r => r.status === 'fulfilled' ? r.value : []);
   return [...own, ...fromShards];

From 5ad3aee8f65e628242fa36bd9b08fb521a6708fb Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 18:49:20 +0200
Subject: [PATCH 062/124] =?UTF-8?q?rename=20privacy=20"private"=20?=
 =?UTF-8?q?=E2=86=92=20"unlisted";=20enable=20GPS=20for=20unlisted?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- "unlisted" = not shown in the public feed, but GPS track, timeseries
  and detail JSON are all accessible by direct URL (security by obscurity)
- "private" accepted as legacy alias everywhere (backward compat with
  existing data on disk)
- New writes from Strava sync / ZIP upload / sidecar use "unlisted"
- Only "no_gps" now suppresses the GPS track
- isUnlisted() helper in format.ts used by all Svelte/Astro components
- SCHEMA.md and CLAUDE.md document the privacy model and the distinction
  between "unlisted" and "no_gps"
---
 .claude/settings.local.json                   |  31 +++
 CLAUDE.md                                     |   5 +
 SCHEMA.md                                     |  21 +-
 advice.md                                     |  79 +++++++
 bincio/edit/server.py                         |   2 +-
 bincio/extract/strava_api.py                  |   4 +-
 bincio/extract/timeseries.py                  |   5 +-
 bincio/extract/writer.py                      |   7 +-
 bincio/render/merge.py                        |  12 +-
 bincio/serve/server.py                        |   2 +-
 issues.md                                     |  99 ++++++++
 site/public/bincio-0.1.0-py3-none-any.whl     | Bin 0 -> 60977 bytes
 site/public/data                              |   1 +
 .../components/ActivityDetailLoader.svelte    |   3 +-
 site/src/components/ActivityFeed.svelte       |  12 +-
 site/src/components/AthleteView.svelte        |   3 +-
 site/src/components/CommunityView.svelte      |   4 +-
 site/src/components/StatsView.svelte          |   4 +-
 site/src/layouts/Base.astro                   |   4 +-
 site/src/lib/format.ts                        |   8 +-
 site/src/lib/types.ts                         |   4 +-
 site/src/pages/activity/[id].astro            |   4 +-
 todo.md                                       | 213 ++++++++++++++++++
 23 files changed, 489 insertions(+), 38 deletions(-)
 create mode 100644 .claude/settings.local.json
 create mode 100644 advice.md
 create mode 100644 issues.md
 create mode 100644 site/public/bincio-0.1.0-py3-none-any.whl
 create mode 120000 site/public/data
 create mode 100644 todo.md

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
new file mode 100644
index 0000000..58f3bd8
--- /dev/null
+++ b/.claude/settings.local.json
@@ -0,0 +1,31 @@
+{
+  "permissions": {
+    "allow": [
+      "Read(//Users/brutsalvadi/src/bincio_data/_merged/**)",
+      "Read(//Users/brutsalvadi/src/bincio_data/**)",
+      "Bash(python3 -c \"import json,sys; d=json.load\\(sys.stdin\\); print\\(list\\(d.get\\(''''dependencies'''',{}\\).keys\\(\\)\\)\\)\")",
+      "Bash(uv run:*)",
+      "Bash(python3 -c \"import pyodide\")",
+      "Bash(uv build:*)",
+      "Bash(npm install:*)",
+      "Bash(npm run:*)",
+      "Bash(mkdir -p /tmp/bincio_ci/activities)",
+      "Bash(BINCIO_DATA_DIR=/tmp/bincio_ci npm run build)",
+      "Bash(ls /Users/brutsalvadi/src/bincio_activity/*.md)",
+      "Bash(python3:*)",
+      "Bash(wc -l /Users/brutsalvadi/src/bincio_activity/bincio/extract/*.py)",
+      "Bash(grep -E \"\\\\.py$\")",
+      "Bash([ -f ~/src/cycling_data_davide/activities.csv ])",
+      "Read(//Users/brutsalvadi/src/cycling_data_davide/**)",
+      "Bash(ls -la /tmp/bincio_dev_test/dave/_merged/activities/*.json)",
+      "Bash(ls -la /tmp/bincio_dev_test/dave/_merged/activities/*.geojson)",
+      "Bash(unzip -l ~/src/cycling_data_davide/export_18885842.zip)",
+      "Bash(unzip -p export_18885842.zip profile.csv)",
+      "Bash(unzip -p export_18885842.zip bikes.csv)",
+      "Bash(unzip -p export_18885842.zip routes.csv)",
+      "Bash(unzip -p export_18885842.zip privacy_zones.csv)",
+      "Bash(unzip -p export_18885842.zip activities.csv)",
+      "Bash(xargs -I{} python3 -c \"import json,sys; d=json.load\\(open\\('{}'\\)\\);print\\({k:d.get\\(k\\) for k in ['title','strava_id','started_at','privacy']}\\)\")"
+    ]
+  }
+}
diff --git a/CLAUDE.md b/CLAUDE.md
index f721bea..414a8f9 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -205,6 +205,11 @@ gear: "Trek Domane"
 Rode with friends. Legs felt great after the rest week...
 ```
 
+The sidecar `private: true` flag maps to `privacy: "unlisted"` in the merged JSON.
+**`unlisted`** means: not shown in the public feed, but the activity detail, GPS track,
+and timeseries are all accessible by direct URL (security by obscurity, same model
+as the detail JSON itself). Use `no_gps` if the GPS track must not be published.
+
 ### Editing UX: drawer in Astro + `bincio edit` write API
 
 - `bincio edit --data-dir ~/bincio_data` starts a FastAPI server on port 4041
diff --git a/SCHEMA.md b/SCHEMA.md
index 0960341..3802199 100644
--- a/SCHEMA.md
+++ b/SCHEMA.md
@@ -124,7 +124,7 @@ needed to render an activity card in a feed — no timeseries, no full track.
 | `avg_cadence_rpm` | integer\|null | no | Average cadence (rpm for cycling, spm for running). |
 | `avg_power_w` | integer\|null | no | Average power in watts. |
 | `source` | string\|null | no | Origin of data. See **Source values**. |
-| `privacy` | string | yes | One of: `public`, `blur_start`, `no_gps`, `private`. |
+| `privacy` | string | yes | One of: `public`, `blur_start`, `no_gps`, `unlisted`. (`private` is a deprecated alias for `unlisted`.) |
 | `mmp` | array\|null | no | Mean Maximal Power curve — `[[duration_s, avg_watts], ...]`. |
 | `best_efforts` | array\|null | no | Best efforts by distance — `[[distance_km, time_s], ...]`. |
 | `best_climb_m` | number\|null | no | Best single climb in metres (Kadane's algorithm). |
@@ -165,12 +165,21 @@ timestamp alone is sufficient: `2024-06-01T073012Z`.
 
 ### Privacy levels
 
-| Level | GPS track published | Timeseries lat/lon | Stats in index |
+| Level | GPS track published | Timeseries lat/lon | Shown in feed |
 |---|---|---|---|
-| `public` | Full track | Included | Yes |
-| `blur_start` | First/last 200 m removed | Trimmed | Yes |
-| `no_gps` | Not published | Not included | Yes |
-| `private` | Not published | Not included | No (not in index at all) |
+| `public` | Full track | Included | Yes — everyone |
+| `blur_start` | First/last 200 m removed | Trimmed | Yes — everyone |
+| `no_gps` | Not published | Not included | Yes — everyone |
+| `unlisted` | Full track | Included | No — owner only (via direct URL) |
+| `private` | *(deprecated alias for `unlisted`)* | Included | No — owner only |
+
+**`unlisted`** activities are not shown in the public feed but are fully accessible
+by direct URL — the GPS track, timeseries, and detail JSON are all served as normal
+static files. This is "security by obscurity": knowing the URL is sufficient to
+access the activity. If you need true data exclusion, use `no_gps` for GPS removal
+while keeping stats public, or delete the activity entirely.
+
+The legacy `private` value is accepted everywhere `unlisted` is valid.
 
 ---
 
diff --git a/advice.md b/advice.md
new file mode 100644
index 0000000..6454668
--- /dev/null
+++ b/advice.md
@@ -0,0 +1,79 @@
+# Advice on ARCHITECTURE.md
+
+Review of the mobile / offline plan in `ARCHITECTURE.md`. The two-stage extract/render pipeline, edit flow, and federation sections are accurate and clear — this document focuses on where the architectural risk lives: the mobile app and the path to fully-offline operation.
+
+## What's strong
+
+- **Workflow framing (1–4) is the right way to think about it.** Each workflow is a concrete user story, not an abstract capability list. Workflow 1 (record → convert → cloud) is achievable with what's already there; that's a good wedge to ship first.
+- **Honest status table** at the bottom of "Fully offline — missing pieces". An architecture doc that admits what isn't done is more useful than one that hand-waves.
+- **Incremental validation plan (§5).** Testing the service worker approach in the browser before touching native builds is the right call — cheap to run, and the failure mode is informative rather than expensive.
+
+## Decision: drop `capacitor-nodejs`
+
+The doc previously listed `capacitor-nodejs` as a fallback if service workers fail on iOS. We are dropping this option entirely. Reasons:
+
+- It embeds a full Node runtime, meaningfully increasing app size.
+- iOS support relies on a fork of Node-mobile and has historically been spotty.
+- It introduces a long-term maintenance burden (tracking upstream Node, plugin updates, two runtimes to debug).
+- The "Hard" effort label in the original status table understated both the integration risk and the ongoing cost.
+
+If service workers turn out to be blocked on iOS, the fallback should be one of:
+
+1. **A data access abstraction** (see next section) that lets the app read from IndexedDB directly via a JS loader, with no `fetch('/data/*')` in the hot path at all. This sidesteps the WKWebView question entirely.
+2. **A native Swift/Kotlin micro-server** if a local HTTP origin is genuinely required.
+3. **Bundling data as static assets** and re-running `cap sync` on import — crude but boring and reliable.
+
+`capacitor-nodejs` should not appear in the doc, the test plan, or the status table.
+
+## Things to fix or add
+
+### 1. Add a data access abstraction step *before* the service worker work
+
+The doc frames the offline problem as "serve local data to the WebView at `/data/*`". That skips a prior question: does the Astro site actually need to fetch `/data/*` at runtime, or can the data layer be abstracted behind a thin loader (`loadIndex()`, `loadActivity(id)`) with two implementations?
+
+- **Cloud build:** loader uses `fetch('/data/...')` as today.
+- **App build:** loader reads from IndexedDB directly.
+
+This is a much smaller change than service worker interception, avoids the iOS WKWebView question entirely, and is useful even if you stay cloud-only (testability, mocking, future federation transports). It should land *before* any service worker work — at which point the SW work may turn out to be unnecessary.
+
+### 2. Commit to JS for sidecar merge — do not use Pyodide
+
+The "missing pieces" section lists two options for re-running `merge_all` on save: reimplement in JS (~150 lines) or call into Pyodide. Pick JS. Reasons:
+
+- Pyodide is lazy-loaded by `/convert/`. It is **not** warm just because the app is open.
+- A user tapping Edit → change title → Save would trigger a multi-second Pyodide cold start (~10MB) for a one-line edit. Terrible UX, and it repeats on every cold app launch.
+- Porting `merge_all` to JS keeps the edit drawer decoupled from the convert page's machinery. The two subsystems stay independent.
+
+Pyodide should remain convert-page-only.
+
+### 3. The Workflow 4 diagram contradicts the test plan
+
+The "Fully offline on phone" workflow shows a "Local Node server" arrow as if it were the chosen path. The §5 test plan picks service workers first. The diagram should reflect that — show the SW path as primary, and drop the Node server box entirely (per the decision above).
+
+### 4. Missing: data lifecycle on device
+
+Nothing in the doc covers:
+
+- How much storage the app is allowed to use on iOS before the OS evicts it.
+- What happens on uninstall / reinstall.
+- Sync / conflict resolution if the same activity exists locally and on a cloud instance.
+
+These don't need solutions today, but they should be acknowledged as open questions. Otherwise Workflow 4 will hit all of them at once during implementation.
+
+### 5. Reconcile Pyodide payload size
+
+Line 162 says "~8MB", line 335 says "~10MB". Pick one and use it consistently.
+
+## Small stuff
+
+- The federation diagram uses a `Note1` node that won't render as a Mermaid note — it'll appear as a regular box. Use `%%` comments or restructure.
+- The "iOS: App Store / TestFlight" cell in the PWA-vs-Capacitor table sits in the Capacitor column but reads like a downside. Clarify it's the distribution path, not a limitation relative to PWA.
+
+## Bottom line
+
+The plan is sound and the incremental validation approach is right. The two highest-leverage changes:
+
+1. **Add a data access abstraction layer** before the service worker work. It's small, useful regardless, and may make the SW work moot.
+2. **Port `merge_all` to JS** so the edit drawer doesn't depend on Pyodide warm-up.
+
+With `capacitor-nodejs` removed, the offline path is: data access abstraction → IndexedDB-backed loader → JS merge → (optionally) service worker for any remaining `fetch('/data/*')` callsites that can't be migrated to the loader.
diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index cc3acd6..64ea731 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -183,7 +183,7 @@ textarea { resize: vertical; min-height: 140px; }
             <input type="checkbox" id="highlight" name="highlight"> Highlight in feed
           </label>
           <label class="toggle" id="toggle-private">
-            <input type="checkbox" id="private" name="private"> Private (hide from feed)
+            <input type="checkbox" id="private" name="private"> Unlisted (hide from feed)
           </label>
         </div>
       </div>
diff --git a/bincio/extract/strava_api.py b/bincio/extract/strava_api.py
index c60ecd4..4675ae9 100644
--- a/bincio/extract/strava_api.py
+++ b/bincio/extract/strava_api.py
@@ -201,7 +201,7 @@ def strava_to_parsed(meta: dict, streams: dict) -> ParsedActivity:
     source = f"strava:{meta['id']}"
     source_hash = "sha256:" + hashlib.sha256(source.encode()).hexdigest()
 
-    # Map Strava visibility to BAS privacy: only_me → private, everything else → public
+    # Map Strava visibility to BAS privacy: only_me → unlisted, everything else → public
     visibility = meta.get("visibility") or ""
     is_private = meta.get("private", False) or visibility == "only_me"
 
@@ -214,5 +214,5 @@ def strava_to_parsed(meta: dict, streams: dict) -> ParsedActivity:
         title=meta.get("name") or None,
         description=meta.get("description") or None,
         strava_id=str(meta["id"]),
-        privacy="private" if is_private else "public",
+        privacy="unlisted" if is_private else "public",
     )
diff --git a/bincio/extract/timeseries.py b/bincio/extract/timeseries.py
index 6b6a0b7..dc164b8 100644
--- a/bincio/extract/timeseries.py
+++ b/bincio/extract/timeseries.py
@@ -14,13 +14,14 @@ def build_timeseries(
 ) -> dict:
     """Return the BAS `timeseries` object.
 
-    privacy='no_gps' or 'private' → lat/lon set to null.
+    privacy='no_gps' → lat/lon set to null. All other privacy levels
+    (including 'unlisted') retain GPS in the timeseries.
     Downsamples so at most one point per second is emitted.
     """
     if not points:
         return {"t": []}
 
-    include_gps = privacy not in ("no_gps", "private")
+    include_gps = privacy not in ("no_gps", "private")  # "private" = legacy alias for "unlisted"
 
     # Downsample: keep at most one point per second
     sampled: list[DataPoint] = []
diff --git a/bincio/extract/writer.py b/bincio/extract/writer.py
index 8648bc6..089c83b 100644
--- a/bincio/extract/writer.py
+++ b/bincio/extract/writer.py
@@ -48,7 +48,10 @@ def write_activity(
     acts_dir.mkdir(parents=True, exist_ok=True)
 
     source = _infer_source(activity)
-    has_gps = metrics.bbox is not None and privacy not in ("no_gps", "private")
+    # "unlisted" activities keep their GPS track (not in the public feed, but the
+    # URL is not secret — same model as the detail JSON). Only "no_gps" suppresses
+    # the track. "private" is the legacy alias for "unlisted".
+    has_gps = metrics.bbox is not None and privacy not in ("no_gps",)
 
     # Build timeseries once — written to a separate file to keep detail JSON small.
     # Treat an empty timeseries (no points) as None so no file is created.
@@ -220,7 +223,7 @@ def build_summary(
     privacy: str = "public",
 ) -> dict:
     """Build the Activity Summary object for index.json."""
-    has_gps = metrics.bbox is not None and privacy not in ("no_gps", "private")
+    has_gps = metrics.bbox is not None and privacy not in ("no_gps",)
     return {
         "id": activity_id,
         "title": activity.title or _auto_title(activity),
diff --git a/bincio/render/merge.py b/bincio/render/merge.py
index c90cb35..7c82308 100644
--- a/bincio/render/merge.py
+++ b/bincio/render/merge.py
@@ -49,7 +49,7 @@ def apply_sidecar(detail: dict, fm: dict, body: str) -> dict:
     if "highlight" in fm:
         d["custom"]["highlight"] = bool(fm["highlight"])
     if "private" in fm:
-        d["privacy"] = "private" if fm["private"] else detail.get("privacy", "public")
+        d["privacy"] = "unlisted" if fm["private"] else detail.get("privacy", "public")
     if "hide_stats" in fm:
         d["custom"]["hide_stats"] = [str(s) for s in (fm["hide_stats"] or [])]
 
@@ -69,7 +69,7 @@ def _apply_sidecar_summary(summary: dict, fm: dict) -> dict:
     if "highlight" in fm:
         s["custom"]["highlight"] = bool(fm["highlight"])
     if "private" in fm:
-        s["privacy"] = "private" if fm["private"] else summary.get("privacy", "public")
+        s["privacy"] = "unlisted" if fm["private"] else summary.get("privacy", "public")
 
     return s
 
@@ -260,10 +260,10 @@ def merge_all(data_dir: Path) -> int:
                 s = _apply_sidecar_summary(s, fm)
             activities.append(s)
 
-        # Drop private activities from the published feed
-        # Sort: newest first, then bring highlighted activities to the top
-        # Private activities are kept in the index so the owner can see them;
-        # the feed UI filters them out for non-owners client-side.
+        # "unlisted" (and legacy "private") activities are kept in the index so
+        # the owner can reach them by direct URL; the feed UI filters them out
+        # for non-owners client-side.
+        # Sort: newest first, then bring highlighted activities to the top.
         activities.sort(key=lambda a: a.get("started_at", ""), reverse=True)
         activities.sort(key=lambda a: 0 if a.get("custom", {}).get("highlight") else 1)
 
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 9a94e70..c8bb828 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -879,7 +879,7 @@ async def upload_strava_zip(
     if not file.filename or not file.filename.lower().endswith(".zip"):
         raise HTTPException(400, "Please upload a .zip file")
 
-    privacy = "private" if private.lower() in ("true", "1", "yes") else "public"
+    privacy = "unlisted" if private.lower() in ("true", "1", "yes") else "public"
 
     dd = _get_data_dir() / user.handle
     import tempfile
diff --git a/issues.md b/issues.md
new file mode 100644
index 0000000..1a7bb6b
--- /dev/null
+++ b/issues.md
@@ -0,0 +1,99 @@
+# Repository Audit — 2026-03-30
+
+## CRITICAL
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 1 | Security | `edit/server.py:351,386,431,588` | **Path traversal** — `activity_id` from URL is interpolated into filesystem paths without sanitization. Attacker can read/write/delete arbitrary files via `../../` | ✅ Fixed — `_check_id()` validates against `[a-zA-Z0-9\-]+` |
+| 2 | Security | `edit/server.py:588` | **Path traversal in `delete_image`** — `filename` param is not `.name`-stripped (unlike `upload_image`), enabling deletion of arbitrary files | ✅ Fixed — `Path(filename).name` strip added |
+| 3 | Security | `edit/server.py:542` | **Path traversal in `upload_activity`** — uploaded `file.filename` used directly for staged path | ✅ Fixed — `Path(file.filename).name` strip added |
+| 4 | XSS | `ActivityDetail.svelte:67,189` | `marked()` output rendered with `{@html}` without sanitization. Sidecar markdown can inject `<script>` tags | ✅ Fixed — DOMPurify.sanitize() wraps marked() output |
+
+## HIGH
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 5 | Data | `metrics.py:116-148` | **MMP sliding window on non-contiguous data** — gaps in recording are collapsed, inflating power values | ✅ Fixed — dense 1Hz array with gap zero-fill (standard GoldenCheetah/WKO approach) |
+| 6 | Data | `metrics.py:170-178` | **Best-effort times on non-contiguous data** — pauses removed from speed array produce artificially fast times | ✅ Fixed — same zero-fill approach, gaps count as 0 km/h |
+| 7 | Data | `writer.py:85-86` | **Activity ID collision** — two activities with same start second + title silently overwrite each other | ✅ Fixed — collision detected by source_hash comparison; disambiguated with 6-char hash suffix |
+| 8 | Frontend | `ActivityMap.svelte:88-94` | **Misaligned lat/lon arrays** — independently filtered for nulls, so `lats[0]` may not correspond to `lons[0]`. Start/end markers placed at wrong coordinates | ✅ Fixed — lat/lon filtered as pairs |
+| 9 | Frontend | `EditDrawer.svelte:121` | **Backdrop dismiss fires `saved` event** with unsaved data, overwriting displayed title/description | ✅ Fixed — backdrop/close now dispatch `close` event |
+| 10 | Schema | `writer.py` vs `bas-v1.schema.json` | **Writer output fails own schema** — `mmp`, `best_efforts`, `best_climb_m`, `preview_coords`, `custom` written but not declared; schema has `additionalProperties: false` | ✅ Fixed — all missing fields declared in schema |
+
+## MEDIUM
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 11 | Data | `metrics.py:89-90` | **Falsy check drops `0.0` speed** — `if avg_speed_kmh` treats `0.0` as falsy; should be `is not None` | ✅ Fixed — `is not None` check |
+| 12 | Data | `parsers/fit.py:89` | Same falsy `0.0` bug for FIT lap `speed_raw` | ✅ Fixed — `is not None` check |
+| 13 | Data | `metrics.py:222-239` | `_best_climb` filters out `None` elevations, joining non-contiguous segments | ✅ Fixed — `None` samples reset Kadane's window instead of being skipped |
+| 14 | Parser | `parsers/tcx.py:89-97` | **TCX timestamps with numeric timezone offsets** (`+02:00`) crash — only `Z` suffix handled | ✅ Fixed — numeric offsets parsed with `%z`, converted to UTC |
+| 15 | Security | `edit/server.py:22` | **CORS `allow_origins=["*"]`** — any website can make requests to the edit server | ✅ Fixed — restricted to `localhost` origins only |
+| 16 | Security | `edit/server.py:406` | **YAML injection** — `hide_stats` values written into YAML frontmatter without quoting | ✅ Fixed — values filtered against STAT_PANELS allowlist |
+| 17 | Data | `edit/server.py:497-499` | `save_athlete` mutates immutable `athlete.json` in-place, violating extract immutability | ✅ Fixed — `merge_all()` now applies `edits/athlete.yaml` overlay; server only writes the sidecar |
+| 18 | Schema | `sport.py` vs schema | **`skiing` sport** produced by code but missing from JSON schema and SCHEMA.md | ✅ Fixed — `skiing` added to schema sport enum |
+| 19 | Schema | `sport.py` vs schema | **Sub-sport values** `nordic`, `alpine`, `open_water`, `pool` not in schema enum | ✅ Fixed — added to schema sub_sport enum |
+| 20 | Schema | `SCHEMA.md:140` | **Activity ID format wrong** — docs say `+0200` offset, code uses `Z` UTC | ✅ Fixed — all examples updated to `Z` suffix |
+| 21 | Frontend | `EditDrawer.svelte:106` | **Regex injection** — filename with metacharacters (e.g. `photo(1).jpg`) breaks `deleteImage` regex | ✅ Fixed — filename escaped before RegExp construction |
+| 22 | Frontend | `EditDrawer.svelte:85-99` | No try/catch in `uploadImages` — network error leaves UI stuck in uploading state | ✅ Fixed — try/catch with `finally { uploading = false }` |
+| 23 | Frontend | `RecordsView.svelte:99`, `Base.astro:220` | Hardcoded `/activity/` URLs ignore `BASE_URL`, breaking subdirectory deployments | ✅ Fixed — `base` prop threaded through `AthleteView` → `RecordsView`; `Base.astro` uses `baseUrl` from `import.meta.env.BASE_URL` |
+
+## LOW
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 24 | Data | `cli.py:341-350` | `_patch_duplicate_of` silently swallows all exceptions | ✅ Fixed — logs warning via `logging.warning` instead of bare `pass` |
+| 25 | Data | `timeseries.py:26-35` | Non-monotonic `t` array if input points aren't sorted | ✅ Fixed — `t <= last_t` guard rejects both duplicate and backwards timestamps |
+| 26 | Data | `simplify.py:49-50` | `preview_coords` returns `max_points + 1` elements (off-by-one) | ✅ Fixed — subsample to `max_points - 1` then append last point |
+| 27 | Config | `render/cli.py:42`, `edit/cli.py:66` | `yaml.safe_load` returns `None` for empty config → `AttributeError` | ✅ Fixed — `or {}` fallback on both load sites |
+| 28 | Frontend | `format.ts:18` | `formatDuration` doesn't floor seconds — fractional values display messily | ✅ Fixed — `Math.floor(s)` before any arithmetic |
+| 29 | Frontend | `StatsView.svelte:31` | No error handling on `index.json` fetch | ✅ Fixed — try/catch with error display |
+| 30 | Frontend | `ActivityMap.svelte` | No `map.resize()` on container size change | ✅ Fixed — `ResizeObserver` calls `map.resize()` |
+| 31 | Test | `test_writer.py:21-30` | Weak assertions — only check substrings, would pass with malformed IDs | ✅ Fixed — exact equality assertions on full ID strings |
+| 32 | Test | `test_sport.py` | Zero test coverage for `normalise_sub_sport` | ✅ Fixed — 3 new tests covering Strava CamelCase, ski variants, and unknown→None |
+| 33 | Test | `test_merge.py:70` | Test uses `sport: "gravel"` which isn't a valid BAS sport | ✅ Fixed — changed to `"running"` |
+
+---
+
+## Second-pass audit — 2026-04-01
+
+### CRITICAL / HIGH (new)
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 34 | Data | `writer.py:88-93` | **Disambiguated ID not written into JSON body** — collision adds hash suffix to filename but `detail["id"]` still holds original ID | ✅ Fixed — `detail["id"] = activity_id` after disambiguation |
+| 35 | Data | `cli.py:79-85` | **`write_activity` return value ignored** — caller uses pre-collision ID for `build_summary`, so index links are broken for disambiguated activities | ✅ Fixed — `activity_id = write_activity(...)` captures the canonical ID |
+| 36 | Data | `writer.py:88-92` | **TOCTOU race in collision guard** — two workers processing same-timestamp activities can both see no existing file and overwrite each other | ✅ Fixed — hybrid pending-file approach: workers write to unique `.pending.json` files, main process arbitrates by quality score and does atomic rename via `finalize_pending()` |
+| 37 | Schema | `bas-v1.schema.json:90-128` | **`activity_summary` missing `custom` property** — `merge.py` always adds `custom` but schema has `additionalProperties: false` | ✅ Fixed — `custom` added to `activity_summary` |
+| 38 | Frontend | `EditDrawer.svelte:101` | **Undeclared `error` variable** in uploadImages catch — runtime `ReferenceError` crash on upload failure | ✅ Fixed — uses `saveStatus` with `saveOk = false` |
+
+### MEDIUM (new)
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 39 | Security | `edit/server.py:409` | **Sport value not validated/quoted** before YAML write — YAML injection possible | ✅ Fixed — validated against `SPORTS` allowlist |
+| 40 | Security | `edit/server.py:446` | **No image content-type validation** — arbitrary files accepted and served as images; HTML upload executes JS in site origin | ✅ Fixed — rejects non-`image/*` content types |
+| 41 | Security | `edit/server.py:270-274` | **XSS via unescaped filename in `innerHTML`** — `renderImageList` interpolates filenames into HTML without escaping | ✅ Fixed — `escapeHtml()` applied to filenames |
+| 42 | Frontend | `MmpChart.svelte:154` | **ResizeObserver captures stale closure** — after toggling range selections, resize renders old data | ✅ Fixed — reactive variables keep closure current |
+| 43 | Schema | `SCHEMA.md:113` | **Sport enum missing "skiing"** — JSON schema has it, SCHEMA.md doesn't | ✅ Fixed — `skiing` added, sub_sport examples updated |
+| 44 | Schema | `SCHEMA.md:109-129` | **Summary fields table incomplete** — missing `sub_sport`, `mmp`, `best_efforts`, `best_climb_m`, `preview_coords` | ✅ Fixed — all fields added to summary table |
+| 45 | Config | `config.py:61` | **Empty config file still crashes** — `yaml.safe_load` returns `None`, no `or {}` fallback (round 1 fix applied to render/edit CLIs but not here) | ✅ Fixed — `or {}` fallback added |
+| 46 | Frontend | `Base.astro:101-106` | **Nav links ignore `BASE_URL`** — hardcoded `/`, `/stats/`, `/athlete/` break subpath deployments | ✅ Fixed — nav uses `baseUrl` variable |
+| 47 | Data | `render/merge.py:161` | **`athlete.yaml` merge has no field allowlist** — server restricts editable fields, but merge applies all keys | ✅ Fixed — merge uses `_ATHLETE_EDITABLE` allowlist matching server |
+| 48 | Frontend | `types.ts:102` | **`ActivityDetail extends ActivitySummary`** inherits `detail_url`, `track_url`, `preview_coords` which detail objects never have | ✅ Fixed — `Omit<>` excludes summary-only fields |
+
+### LOW (new)
+
+| # | Area | File | Issue | Status |
+|---|------|------|-------|--------|
+| 49 | Parser | `parsers/tcx.py:101` | **Timezone offsets without colon** (`+0200`) not handled — only `+02:00` form matched | ✅ Fixed — regex accepts optional colon (`[+-]\d{2}:?\d{2}`) |
+| 50 | Parser | `parsers/gpx.py:59-78` | **Power data in GPX extensions not parsed** — MMP always None for GPX files with power meters | ✅ Fixed — parses `pwr`, `power`, `watts` extension tags |
+| 51 | Data | `simplify.py:63-71` | **`speeds` array not filtered same as `coordinates`** — could misalign if `simplify_track` changes | ✅ Fixed — speeds array uses same lat/lon null filter |
+| 52 | Frontend | `ActivityCharts.svelte` | **No `onDestroy` cleanup** — chart SVG not removed on unmount, minor memory leak | ✅ Fixed — `onDestroy` removes chart SVG |
+| 53 | Frontend | `ActivityCharts.svelte:83-86` | **`resetTrim` guard always true** — trim doesn't reset on tab change if min/max happen to match | ✅ Fixed — tracks `lastResetTab` to force reset on tab switch |
+| 54 | Frontend | `AthleteView.svelte:30` | **No validation of URL `tab` parameter** — invalid value shows blank content | ✅ Fixed — validates against `TABS` array, falls back to `'power'` |
+| 55 | Test | `test_writer.py` | **No tests for `write_activity`, `build_summary`, `write_index`, `write_athlete_json`** | ✅ Partial — added `test_build_summary_required_fields` and `test_id_utc_conversion` |
+| 56 | Test | `test_sport.py` | **No test for `normalise_sport("skiing")` or swimming variants** | ✅ Fixed — added `test_skiing_variants` and `test_swimming_variants` |
+| 57 | Test | `test_merge.py:58,122` | **Non-canonical IDs in test fixtures** — use colons and underscores, don't match real ID format | ✅ Fixed — IDs use canonical `2024-01-01T080000Z-morning-ride` format |
+| 58 | Data | `edit/server.py:549-551` | **No upload size limit** — file written to disk before validation | ✅ Fixed — 50 MB limit enforced before writing to disk |
+| 59 | Data | `edit/server.py:586` | **Exception message leaks internal paths** — `str(exc)` returned to client in 422 response | ✅ Fixed — returns `type(exc).__name__` only, no internal details |
diff --git a/site/public/bincio-0.1.0-py3-none-any.whl b/site/public/bincio-0.1.0-py3-none-any.whl
new file mode 100644
index 0000000000000000000000000000000000000000..18bdd2e159cf8b914ea611b2aa98f28e166e6f05
GIT binary patch
literal 60977
zcmaI7V~j39vn~9LZQHhO?6Gazwr$(?%pTjeZEKIYN8i5pJIOuoxykLMI{l~8m9;um
zN%blPX%J9U0002_&x92iY|;#s|DDwT8S+0fva~a{v}e%Qx3sf#(buPU@Kjb(a+;i$
zo}G4=p`W0gqODZ%SY{L>qGKa#q5MtCCiaV{kC08ijkB+rl1r5csjRG>^mmDdyrg7g
zG!1_*ZA%3wivR<^-hi6Wgy5XQoM0pjK;b_^xMx;t1p)#9cz^)_xc?J^v5n=w+hY@C
zr9hbwLtkB^h?_0~b|TudLf?jHK^;%{hfB1Ab}BPwS!ZWOJcQ+q%KS^lum(0mx~t+}
zt3nXvaVNvPtnO|O@F&XKhx%vBr67U!H~X0iEpt4<DoEPiuDcy$lz&y`8J(@ufC1Kq
z44#oaaiF>U&!FI`1V(@p4Jt>~c=RP`>+cfzYJr?hU$+L%M@iSZnuqG+<!dICmLspR
zoCx*Zx?{r>=2&zWD{+z;hSZ+&jPR?R^0?ke59Dj-AG7t2P9HuG0ddDoS4nti!~Xpy
zJB7C2NA-VE@UdEsDJ<LXm|#DY)i$+E+ihFgMw-ibZ(^i#EUroN64Gapdx8EFtAFqS
z{=xLW7skK+zvwbGv2^+GoPqogh*80fM=QYq0851bVEKQ${TI&a7j|3Xh~IPNm^R-D
z6{2L7fxyD3%Z@tzf(h9Cn*>n<HRGwxkg|<k(i1_31qcfi*U2ts2vV!68v(Mjvn|d(
zEG99sCaF`{qC{|?AFl!mt6U5_)#z44s4~`Iyc|wMGtkYnqO*yV(uK;S8mO|WUyz#Y
zwzActX@NdAR;B^!s<!QkuBCkPLo?ke$^8zo^*8-B*qSrIU$0>y9#~@k;9&ka;7px9
zvy7v@QUd*kdBqkB<cBWdj4V1=r->7ekME{VIEHFrLuvBs+Yft%snkG#W;(I86xY9!
zdLs6CX2CFJG0LB{4+Is=)`AjbN<3PEKI~+ZwJyjLj<`rx#B3)u^^Qrp!U3P#&Fi@e
z%v+nHO}J6<?hm)_WG@|=9x<zW!CqX9@T;DLGq$mlVZnv9sXJ?7A8N|q>oca<>g#(K
zUL(Ca+pNGwV-Ri`9;lb+{Q)Yi@w@I5Ah)JAw@B_NkEuE;fmPTExERdldUqKikd8>*
z4+T$;LQMu~wK)zXEqL@9_>e$Py_hoE;*YTUy>B&acWXEM!#PLatE21JGgZgm^i{W`
z<?G<*3noXQ;~S=-;uEw3{H;=7g==CO?BbtV;-GhlopZG1HV!0+Aa|!1tpnwJ2xrH@
zU`Kx|*BiRzJFHx8zoh*%m}X`pt1xDg5ofrzWBl|zuu-mtX(SrsT^cmgU=Y4;G?~aQ
zWl|505jpLdJ#h$1?p}&F3i_8IkeH*H8PcIG3?<9cKqm@{e1@H1C(hssz%H&fkPmHN
z+*SPa+hI(lp8)vI2RDJ9FW?0Co~}O}Sv3%D#bB{zWrZEG3hb_IfW~4UoV=D6hVens
z!<oYtth=Tf3u}9;KxFLAcCqxkg^QNv(D|3Wja|Sz5aK?n3Y-z+rl9XcD=>_xwtx^&
zk#<D+m;JKU`h+*GJqB~Vs_Dcb6$YGJJYR=Om72BNNGZA<WeLX9>mswVayPa4DO%97
zM@OHQ=%o>Zm0$I`^+2^0j-F8?*@||T1KrlG_VDi_>p;>=Xj};SGEn%u&~f2`v4g@k
z&0)QBxKD92@{kk=K<wx9SH!cH!HJY!r&EG*KUA0UhoI$V;fK@h_H236v}3}W=?siL
z`>qR1E))t&I)P}~8HT)LQru$Ywxdb&8b`^9^_86dSU<9n;dO$Vdo12eo{vr!#Q3bR
zAo?ciqBzm_u<}dhgGHcKPQAzToy@y87Q%J3yS4UdlGVkx6{Mb-c_+W}r=CqR0zYVb
zzvJV5`>u8fe81+_J95H(g}^nowZf2xQu@eHsN#t{#!;YeA@)#hX<^Xo+H36@Hzyf{
zvcMQuP?{F!zDhJ}3R74fK983}q|zb5nt3@|NO*{D<c}=7ZGJC`8+m`{Vq0-%-XP|B
zCUTLN14<_*!ZyvY-wmIAwXdYlv{>Z`5so&wS`qEli3m{(#~~CV2QErWSEvSU13np%
zJpQE8@NNchC`$o^iZ;p1%@@Ok_Gjr=Y!X+I03WV;Qw=JNV%&OCH8cd;MWgY%LYF<9
z2oE$&X0{!wpHN2+r5FMHA=H>sT&`f1!#Gu}9^tZD0)wMPOWCMm`6G6;b!r&b{#AU+
zx_c0hjlNdAgA8_|QQJri$9A(wLR!DN!iqC#>lj}eFDcHF*=1;X6DgX!5)Pg{?iLiu
zopM>DUTKzmD4a%jS`i#2iv^V&Z5D5zD2~zF=}|WetZ+>0S{w;X+zfCgewfm2im3Lt
z7Q_(MPVIn1%laHshmCHeFCSGeZ`el~M7qVXkX(3?UHNVf@Y6&JX#Jf>pNNOUHb!54
z5#6EuZ>>X6@clj++dGYhL(kXand~RngS0Ez1HH%0hU{T4X#)(`=noXxsmkG^#(cVi
zkGhXWX+yq0SaceD`u=;q2qST+`#jvVZk5S0ML+)|vCrcbhd2-e0CZje0NVek2hOHW
zZl+HEYUm%nEvN0#)Z0fiTgq&pLo8S-={V*^#%dTeXZ2PU;#5~*XG4eiA)yE$L;y*Y
znMP{4?{2utAA;jwFY=#c-t;?y9N^A{r6z4k))eIP=}YDE`QGlvxMQAJX)8+{zl6md
z$)q&9(?j3x=ll=GlvJFl1})M0;;XIg9&aQ<EJ^F4+JpWw#~riMhV(@Y)5@7#@Wd@$
z%|zJ{1sSx~q=mu)BQZSGR1_FzsT!i0TW(xcHVUL@R^`J~=1;yiMxlJEjlfJWJ~m`g
z+;@P#f$Mb?b<Q3=38xFl)}tY_Wawv%bqdS66Y2psg50l6Ok@usC})z$f!wQoJ5o(q
z5$>KyqKmJO1|2dSQc4}GYDoBJp_PXH{e0d!s=uP{k|vtMJ*BxC)z9_$x~!$fjqvC4
z`;vWpL6^`Ow=9+R>hV65O=C!INJ`}FD|`0%zLdzB(o~c9?Lz>9Ul~vsRdp?9hz1TY
zlnFudN8U53L`C_#L}NG*WSSUL=n51%+g<f=Z;@iM#F%Mr%I0@B^5t6&(Q@#?m_hzq
zrkXJB^5svJk{paC)=CfK+=1l6dhH=~BFdR&j@;38rCE`PNs+M;t2tqjjTW&Iil`$1
z76A6#6~5%3MY@q%k%+2^q(5v))yUdGE?0Z%SjmNvrxb|*gH_hgfrTh_JoQMLN9^Q>
zDJIkuW+&e-@Nx)OK|3r2f=^9(9Qw&f6`^-hFB{cybXzpnqt9bj9$Is%sUjzryN8?C
z51Y$TAAfNhJ)|B^5k8x_;XywnfxiCcnWiSVd@$ik{~K<a@9oc$`Y(o{@;Ui9KW~?Z
zuKjZ`#B@&kL=f{%v7bHpp#uc@@V-5q@5>s`Pdg8{CXV(Whuar(U%*oIu?*-^M~>d0
zRi{?g^Q4!NM}YrW2)e|r_B+IWzxZXmUI8{F4HFpZ5GNTH>Nr$@X9nOx$YQY)*%uUf
z4s^UjV`NW1WW~j<X#c+9O&)2qw3%$tx1kLpg-2>HToN~vk_-PC<Xao~0|(&UbHq`<
zmxl{dDVKY})?nooxXh4dS%rUgU+UEfjq;_THxeD{*Bi5<4E~_TY2I^`Tuw2NUA~9g
zYt+x2cq<vN_^2}(0gz4@EC6VZv{BL0C4dn;UPtv43jDmK3k>~8z!cD*toaB00QD{A
zD4=leJ?Htn96moL@AYt@K3XN>KIQEbB!*m!3@26wgY|#hK^&8zE_rICG-h$$%IU!q
zaCLIRVH61Njy*uLm5bm)3Nt&_9adz?6GL6f!(W&Z9<tUQGGe6><~TLp-V$Lh3PF@O
zH-mdI9}ey&H+GKp^<hTn$Bfk|UNGgT76{u7d%hTIj0yl4Vh%b0l6b-k#=jw9=3$I~
zzhasYMOEPE*?S)mgY@<Rt>VJZ72fUc*6;5<j@@a|M{9DXDzyGUewQ+bL5aQkL;Zxs
zSL%}q1jzMpz})NGv}gp~geU3W4E3oX%asd)QT{#rT=?2Z-;Rd~SM2U*Dq_I*>4>)_
zDd3DHGDp}au+t7v?4}(v@@M!7h&96s!U+nKId15tr|H0qFel_r*AHJZ_VS044M>hZ
z5hD+@53HVIqzf-_KiW9jwY}wyu1hpIczP%rPopyU<fqjs34X;yr=Nh<4Ppsl#&zL@
z!Ekh{wQd*}L9K+BKzQ2p58wo*cj8RHAHhZ3c_qM3>63>Obj$wR)AQ=A6OYK)7-mL1
zupcpmsFPkp$b=s}C`IOqHP`go{Fg@7K&eqsv|-1GAS=V-?<)biQ(>8FDdYPI{=FD-
z-W2HOFUL#@BAHiQneh|j>L1^n&`?^s?(z+|_R=b54V|nTTL!sDvKk4fDhp_TByC20
zB1ZyA(1nA1SYf_NfeJ%4b;;ipF=d%f1X}4>Rk|&4Dst7uCPK~&=`<PHG&XgIWn^<{
zXp3s~pzG<Vyy(Q;*zsYA-`_*XSaGKUd8SLIm6Zj1taNX=pdCOBgV1d~VQvNrnED2R
z)Zk)^Ml}%LGCuz3Q=~yJwJjSzN-G%qO_*1{io*-We;MY@5{r4l*J&}Rqz-EOe?)vU
za0thZ5F9g|P?l*EB_!W&@2dLY-}F~r74@vk4O36p>M1q$0rYA@ftEcImGBNiSrW0(
z4A+g6iB_KI%4oEzGm84ezmOzb9c3}*03~GS@r7F5y6Aoe4fM`Id|g@|U1~a0$+8HC
z#mbNb$01TeL-{}eGU0>9$pFzB?X~-OpjiraQM;oKRUn&Xj^LWcXc&c2I{rhnruPu-
zT~l3xKh1To0!F(2gTxQ4Zn}bYUy+qF-41Ib@lmt{-vNQEva<9Axe<d-^lb~#*6%Y-
zs{u3ESVUSAW^g=~i@$TSRV~W%D$WM47!hTmctbIU;Hs6EN~TZ&*B(fE<A%uTEAndQ
zA6j3`H5a@$3bEQxnzH*4TAqbsACST8dW#>>r%{e=_x$=n6B63=DAj^|#C@)G90B$W
zZ|wOKPpTtYK34Bd;-(Zy=}2Pq(o?Qlk%aE_fgK6)%Wr3BO8pNCH#jfDZcLp!P=BoW
zK-H_GY1x@%Gshnsq83bQg8<n~GSs~Cq?>N40_fkt;=P0!@adAJTL_Q978)*Hy|$6<
z9N9CQc$xdg5$QW#HgnjY3qzfAV5WlCg%;vm?F^PJAoX>LGuUt3F0B<ujnFg?&C_gu
zh3S~p|8AHLslDP0I(%Bp)ufGxw;st%pj!$c45Sl6>@X(MVf^V`b(I*Vk6D{ZBwoz!
zdcST(K}T1l$oGkPw8cRj^0~g>7JyA<`Zy`>3B#@cS?@dmmO#EB3LUA%x>*yCc!L!-
zAv|E7Gi3tP3XV%u4W-9*qJh7<<qIN&JaGt@2rJbn)JdntD1vWS-EzhC-STEu3j9n?
zoTM^fg!V6b>nW&;TtW=GC>ZZoaez1Awc?W<Y|P=Dwo!paE2JMybsp|cXo^Gu9s5NQ
zKG4-xAJotFb}#U)%q!wo#T@9lN>Qxf8pg>KM=lrVl?Hj;+=TS#i|q$`v?L;jm#~G)
z$Jn>5%oG{HdxOi1bpp||N}90qgzB&ZNz2d4YB^0jcnQ>R!>;_t!ewRW5c+JN5*SS6
z?bKD<nDI{88q*C<OiCPY*@+XjLIxM?3-pH<OEGjMg^zhSN4qK|!HcMVN9e@`lrpq3
z#~g}wd)Sjq!~te5nX#0tBZV1bz6x*zR;3HKSx{~1uYN5pC5?xBluv)n)kyTzQ7Nqd
z%#sBS1REMTwf~%*T)ei23lRuqF`TekVAE&QzdQUT9M*r(7x+_WV5g9)MOE|eNjFpK
ze-NE4tQUo`K@95t_O_BP2QxyavufnHoL4cH6O7TAgU)mkvc|YyRw*uPf3|<s&>quR
zt&&nOYJg?Z%>Bbn6hO-8O(UfthK}?N*ES;Rkq7i;VJuu;=KuMquPDQIEH8$^9_C&&
zF`({9>Nr*byplaxqLbTKDV9YWB66G|a!d3=uUa`V+CQ8@<^R2M@aXUR@^?!lIret2
z5f4S&xQjbIUDD&XC$KEx4%w(0NnXJvBSags&{`u|xfG`ctjnlivbejVk5NCO{)Kr2
z^N7skc+#!v&Tlw@JA%C<xuMzh3wY?Z&OVPJ`N5G=v~EwRH_vRuYpv=0$>Cp^At~-h
z2N;MkQTZ@2a$sOgr2+kJS;IELbA}yLs=-FUbs*Yha*tNl4v2|mdHsRQSjDrZM74$K
z&91Q6I9_fU%z9Yc)Mt+OmJ+J)rq~ZwhluA347k4oBuKz%Y9-5k_m)SUgTJhT?C@tj
z1lF6wz#-A@GLI_PQ_qy>=P(>qKd3PmvF_mzw1c?tg{ju1JiM5V0N|oUO=dXIkSf3Y
z_!}-P4Zcl6=wlCrE+Tmi(R}B#fgdcUheO;F9hv#<42v+|1n1hFK1g^s885xdKg{D*
zA$VCCk-m^V@hr*sFQeyx7LV{b<*W)#hp(fzg67*eup`qOvu2qLhBIXL^L*^dE%#XB
z`TDY^mg$C%1yT9)d>!~y!{B~nqP!`x>(Upr`4d$Si5?y`T@{c2;qWsd=nQ01{1}a(
z{+ntXNQq3F|Mf2L1;to4Zb+x#!l2%d1j(&VSWH+GvEGMX*^SH~sM%g?b)MTZXzS>y
zgSJ1@l?PDyixa-G<Uv3#UHPjfad$COr^3ygx@5N5u?q{hlf@RG(K@sr_GK@^ScNTk
zFGDA3i^!`uc^Sgmu~jeq0RnlJzS#7aQq1;Q!PLx~PmmO(ahCJ%Mdn$s2X0uuPw6RL
z%uK>S`B_9$-XTGHV>>@N0}IXeEf-B3;l!$ZPX10x+w8_GD=G;G-`H^fQ%=(!@(E0$
zr;M1S+9WdQlte5@sYJhi;KM*Lrd@thn=kZXNITg&jgr`s(qvj$NUdOF|4tD*<ZNhN
z8z4^(18`-VOuR~6jr_!`O^%eSD@dC42p%$o?zc>68MhZ;Clo-<Kn!y%mP2?6p(k4C
zw6?4VXhSRoHD&hNnR;NAq>XaB(S6D$8$&ab>Q4fUAnbuil%&g;9=w!0PuBww*icb;
z==4h46>9hT4S=<VwB=>pT4g3YFl(Z<+yP8JhfGFzHS5H5FZ(g&6IKAjCMQD%s1_oi
z^$>oeVC^XDKsMk@+oIy_Ne|mSCl<|8guiHln8RX?bsX?gG(Om*I2P`|kT!BklqZ@R
zE6+v0^5RQs*J?MBKza%~3*%ixcbCHaVo5^ryuB*ul?tlWntb85%bgg<;yGMLbrEF}
zS5rWdk3)yW893QsCoA$Sw2xN2DNCMO<5LXqi^W?&tcWlGv%uYOR%zKf^MQO1qjDr{
zf3fAI(rzkmKNf$PdJ0bnYreUVKgl?XiCorBR=~AhR1qFxho87|qqQV4eJIeVF%`fK
zXspDLHfAzfwLoVTDhb`5lC>xAAB5B~yEcs@JmOx%HDMY=_^Xh;jvU1wsA7Vk{y7WW
zyog`75{kzeC<h)O8(a!d2*R3Vg7>o4SRS0CXH&y=QyE&lIW$&{=i_ghDJ3XhGJ&Fx
zz(LBDc=V*pzC4?9vSXhI@WfE77ciEWg05K=CR4Dooda3Ngl~&#K%K`nv*8k26Q6J2
zoGbFRat{((NcDZte_f-lcm{Lbk&@|eFSzf$m;c=4`+heq0CeaPD*aD4V}DOyS<f5H
zwQQ9U_&Vrdgg4Bt<AI-)9cKpETG(J2V4przTP3zfg)dVLHx8Vg6-NvGoE;GR!(KMg
z`wEvznxf$=9E9qgD;yA{XX<X3AA0M5UOMK(ss%4kZep#bw(4-q_eMfxKD~kFfErc8
zKefD>Bc0OILXGL~X%}iY<)7nzUXK<mPj{{S&PL;Xhz9vau-uCrvI-M-`mjaxokO}*
zx!1Nj!~J~q-&iPtM(qp7nEMeyFSpZQs4AtK4zyAvtg6K@jrs}LYm(^o_Wt+oj|)ha
zsxIs!xe4C>)H~Z~tAJsmQ4V5lklt^Y5YqzvdGMH+HWKXFCF|dBUn1DAz+**9HjU;p
z5FecP10lE|?6Y@Kgug4(n{+JW%cp+6g3~~g6a2kNWW#mE=m^RBzpBZHcsBekPL;I_
zBQJN^Ipm-#BMr{ywHl}kyBfaS9uJ8)36lW=4z98dgdDxCnb&B5r-y9euxO?0;qHAL
z6O$$B+7ZYR>XzNPCD`ybSn&oN-!xzyds1N(r_&vD06k@MVh1qf6q4Dyt;v;-(}{gk
zx$zq+U~I<9c!jQ3DpdP9TlTe}wV$rIR%#{liz&iukGEwnJj^4A{S<czvX%|9?`9O8
zpxzshY!F47r`r|9hdLsozt7?ZUd5FM5a~N^pd@5ms{>2|cT^2yUmc5x=SQ|VY0xU)
ze{ty!DR>=wPphCm_+U{a?zI)TjMQ(CwRE7N8p2>4YW^vAiI*LBqKDr63!|A<(B2w1
z<j4%q8ok6Q`J~nIG)OBW1?(nmM^@pJdI_T3&(lZ3?;_`(cuDeV-$bUT`Bz_n>PHe`
z=kX6bVw|A<x8sF4gdPCf+HO(RLjas%)uz|wK7n2r7aL=ckp%dGIhr92tR`S9>}+F=
z$%W0}b<X1oyumpaso79F81qQTQ@q*t#L`CCO1;yAO+w$~!R9Sxu!pHGXq(%kFoFmC
zx*)^7UdE-tKA>ZTZp~O?0$fuLeE6N-b$z5_g6m3Pg7fv)Ux!13)$4umc05#RH1d0d
z#b>+xnDzys{GeoH_mH<$XrKoxCaAKrD~Lw+h%A{{=LR!`afwqTwZk$;ja)!|CFGbj
z$s`Wtm)SP<-l=#@Agk^}Mg+KgCyG)Z)=}md1$dF>;%wQ=C}(T^nxSm`3q9$JBIq-$
z4_Y?SCOeC!rhj&&Os`PKQtD2P@$RiLew0FJ3uziP_pOB^+GbL~jjn9Nj|69xB&{@r
zo_Sm-iCEOCZVh$-gFpa+MyED|9$$dqTBZG;%zXhGJE&9GIYuC^lsSb^N8lIkJhgJh
zcc9$?UJw^Y6M|Ts3w8-q0}+r$!(-Vo4;l;2nXq_V`GGEoMg%_;!)OeiXEEgr`HahG
zf8;xO7|AwbJYMOWhV9g%9OaZOB{c2<+^M5oavb4&IHHU)U|>yGHkL7Mi9qbA(u925
z&EnQ`(hp*zqB(RKNS6=Jo5Cw57fB_$D5!R0S+nTC8)KrAtS>7iJS*yp4B=b3qIRt@
zL=TTDQm|fTGWdh@g>Ka~mtcA_yle;O{6i~Tl3z+32EK@AL9$3PY_CVm{RZH;=sp~q
z7m+Yf=(;(1&oY&)Vq-m(l1IadEbNImtg16%DJ*KV6Tr4A0Y%Qd#R#`@@qx$NDSHrV
z?z-T7Gj%?3<rkB;ZtA*aH^^FF7oxIDxq5$gRgMq9n_`<ifla4#fNfa`o6@+m3Dv3b
z#sJ&6nih9flQzd?Q;n183Lef^wXHspdRc6`zQ+ZDHPSZiD%?Hb*M!h@TOR0Xn^SG`
zH85>QmaKeyO${o*jA}kry3V!)PTj9vO@aLx9zCI$=Wh+Q90G+G3gG=a8#W&PG$=yc
zWg=JWso#glXJVY78z;x09GqP)jv#f~NXi7faIl5gWz7kl=FPJ87ex{FQSD6TmsQSv
zEWgBVI85e>PKX&?pWLd7URZ8d@3{?|;P1|dpgNPOd98E$ZZ7A@wOnh&WJ|&Atb8~z
z99rS=)Tpfo95)M`i&B_11m?s)*M!_-Y5-;KtAHv~KfDZX0Ruqck#s|^=}~DX-IG-%
z#Rx=@d|CU+-0ElGpEack8P=TLCy1gsdhRsuHuG5h<s68N=DUmeVSF+OC-vvNRiYLa
zTzDebfPl_Oa7dE)==M(dw-{JCJ|MVj=Qv769y`LZ0B@S4)1`F&bxmbNaHA1x>zr01
zZxvJVx;5ntIq;+I`o8%Fjez~ZMInd!UZ%!rlE2+xxhX=7TidK&P=lm}tIs$Uoc6&W
z2PWwS%Zj=CxxRUYB3A2eRW}8fs#@!dZ`VO!DocfT3kcXadl&<^rUll=AHA>fWzTS;
z4x7(v)AV~jZ{*dFds$ulleTO!F#2g!6w}bUVdOazgeS|Wr;0i--tpUdBe(VUG^9^-
z2rXn~p|HibNv4=1>4X)XfGdq{S!7unetA{B5yld3(DUnuz?e)C3r67PHc3S!0*Yau
z88E+81FfA)Ubt~SVpBwyWtmR9Leihl&ZJT)-bGeM4-j>~Uy{}8j?;qo@2gi4t<_w5
zzck?LJGOhO9V+~4D>7l!kBpn1bx8+;))@sx$}`+lHPu~T0q5!|s<znY{rOmg+8Wo$
zBz@5JLgh)Q7Qlbk4v3N3h4cf|ij&1u)098T5GBO-p94SxpC~T$_h+O%Wx-MHXF;7|
zrE@e>A=IC8lZpF5uuZ=#lTTYx3?swEAdE()08%ssZ1}RJWn)yVLKL-j!eBh1q0kGz
z`6tv@+Ov20<Ogkr$<$m5DNNX_VQM2rGkP}GY1@Fs#qgVKMVRk?sRa*}6+$BrMQorZ
zyF?&C5J|=HD-PfL>v!Kk^~Nj^;Z+!d`6@@?B5)h)`6XeN8va?4$&dnT@ztFvdAg_0
zD9kOe2NmKFRdCc=k@M8u{Ub&5vJ0KNRSQrbvHtwZ8fy!x&sKtTi!vt7<R}<8{p~I;
zMKJ-s?*j98GzGiwVhyiVGpQ8~rs)|E>365wQ4yIZ4}K@vfdSP3&Mz$K2Wk0txTm0h
ztfPHOvF#IcoV+=y<+twpUwTwT(z5}(cHK}_elE4XD>Si4sZ{~Bi}KhVw-%o-bXkYp
z#8GALhhZOx^C7D#QeLha!!Khjr&-2~F{QAS+nGbK)Er8q<b+v0S#4#&FS`ly1PGxm
zg`gvL9j(%5%+ec6lcOUDWL{q0B2R9w5_nuSo~@n%B!`NX4$+pQwCztccbi+t%ZT;M
z`>~`;52_9~89!=AII@-+llCHckL;ek=FQbaBpOkQ*fDe~p1cO`yErnmxO{-*8T9de
zy(9ANyBzz|%TsFn6a5SNR#JY1JN)m1>lWh`qT}1Lmd_W#Pn_7J1?De~UH2A9L>Zye
znlg`<cDG?#;P97+QuqYX6<c}bj}gu2mXL4D&lxUGxPc3g?4YU$|9C1J<qjxjp)%<d
z0yp=^FQWR)jNBV?f9zg3{KTL@ma7Qsa-jj=mXKHAP@Gh@nh%vI^5h`I`F0H+aD)9t
zIn*Z{RfaYdrPRaEjq!Ut-CCG<w5P(vT5c7n1E)>~utXd~Bn<$aEJKqmv1#)3U{`74
zJS%pOCKKHpP$IH{li64(M~PZh$%p<HDO9&ewZ1e}kyYppc){cCQign^uVrX{;8Krb
z{@`Hy@UYsk``{m!rN5wNop&Y-C;-VJKwMedRla*(vJZB**X!~7OYHH|g@T+D?tO@1
z<bV4O@&#drV5%>`;;d@wTvP^y{;U$1#vQ5Rb!gz4LZ`g*16(fUqimWfad+L}U{Bl7
z7DTKzhoK)%a5&-=xEeiQLjlqH2y80<;Q_=@<MgQVCrp%;wIG-hdsbpOkY!D?&^cDq
zUX>^7MaYra&!Q-z{Q1==u`n%ldp-08GI}vT)Wh%3=I-3E>-u_j0-Xy5H!5gMXaAKq
z$Ztr7Y&_U)+avj(Rk6RhA$98U%6qw)m>TUexn^^E@~%bZn&yq&Xc9oW2iC>LE*3J~
zoA7XyR_#}D9Y(4!65$it3~_yp$R>tC#11oecgq^q^%dY2$t$+!)e)e(aESVUVr6l^
ztLX3@BOe4$O>;~xOy>5swzljo%GHo83~H?~9IPYRTtN6*i0bRv7M+f$8oLux#?UrY
zp=F*rew)e%k5I#jn~cc0jjx|uMgNtZVk<cVucksRJ{kp;nxT=T;t&K^hbaf!U5#ad
z&=%$ynPu*gDctVB)39L+gY0$e&csIn!S7mzO*ni*iyJ{2$c-Bag(xq&-`Zk~5u&nn
z=mNf2){u9ZUYTrbkKONV=Q+KM^GQNE|HCwd)Co?oJyUE-q<?Rf`e7z1C;jZ+=}Aoc
z+a@}--9NuZ6!XYY$Y{Zadg>H0L~3xaAT-2No=>1)+8psbmd^FF0qa-gvuPB8m@9^(
zW|37z?O<HT{L4h>EG+zzqX+)x2eb~Z;60u)XW0knAUCLUh<+RBBCoes&C5h(w!^#h
z<$gn)N^xSph-0^7q$cTIBRh|x$^aonQOibXX;d!;vvOw#nypzk)&h%h9Hs@_lYIH2
zDIrJ}XDEn<z1=fNsQcfNr?u`NNMbep^c$8O{_<c}_}1qGa@vAxa##C-^Ex-`i3F``
zp|)~EvrB6Q?Km&RFyFP$P5B1p(N+MJnsK}a16)-~bJq5l>>zUAH$mDGr<$QhQ-f6{
z4(<+|bIp4Z3s1lgW<<rPHe;nXPNKku#A-{=D6$Q!`j*T}IiqrG<X_ZNOZBCvdo#&}
z7c52g;rNSDm`}6r2WhL&q3vQ~@+uhm6IaX9F^A7Ui&>);it5P|&-rc*ik_kjwqFg5
z2wY;)-(}8%IB3zZ3`wAGBq%xx{yTi_kVmLpz<7K5pihOb`%X+8hK3{Ekh71SnSbxR
z6<Eb`cuQtbeA_3ur$dv+9_v{J?j{(XVf02LPgEIa8i}djubyX+Xfh!8I1+@|l@aG;
zhz|#KFOwb0({r}FhfA9(VzgN_#{byWw&<Tp)ReS!7DKUc_Tvjo+`jSPLTcD&kw|`!
z^W=bF?ws2M`a;GK+3+G8lqd4fU<J(DUYkL5k+>`VR0Lc4Su?u7SArYg;`7{*-Rrjf
zQFki_LUEnx=4Xt;kEE`aPyZ*~z&@#Co5XM7)%!qkN>t~x{1%ng$@mRnt5LdE2Rs;?
zMN(TU7~)?!%7Cs)RJvncPUmFQ{5Nir>1!~GaP?ikPxrx*Ls{$N<8zCN<XMQo+B?Z#
zHOzYT&m#xaN_EHZkwcb>qotl~VLrJMobcTjgJ~4qBz5rSpE~Pwe&us40b)@s*`S$e
z*<zWPLoW*7sWjJMPQ1ez<hHLPp3^YKW;rTrh}f&l3tOyWUF0B~$mNwk9%z?Ftg$J7
zObJs?Yz19%XB4b4=&Rom;grWN4e_w)+V=Mpu&)S|H#_qzzE`w*{h$?w|Fxeh5(Exa
z_ci@KX{FPqn!iw3X!=x}gQJv;9SIztid?%UAatRAA3BUTgm2qnDw9^eW|PDOKOsM&
zk!ASEPz?wt_d_^=8aUiPaTP<cNA?n3?u2f!nsQL0=p;MtID|%mqbKc#q17?ro-?Sn
zGU@Aj>Yg3)>pWU3fOOA<rvqFE!nX7ps?Z@U5}KhPfVh2egb96m7X*Ex31+G&!lHwD
zgE1my$cb=W3M3#~+a%QLGKB65>q&OLv(7k)7+)e=*%O}$bNdpX7lQptMvX2PYo~=|
z=K&W?`%6S&>?})5S}mHo+;7#^iy%d9@T8PLh6VTcq#Y3ZgJSeDJ>+lZRZ54DcW2K`
zD%_ZZYN>u4G4vmkN%X7iLej-EUrK6L3>~GM?*)LtmwSPIcnfoB<pr_Z)I3_8hNVwz
zw7pcUMRHVC?{uKhSGdz;0qJlSwZ>H$++lEm!$1^M;zBIAz_S217&<LfrzE1CvQT%_
zP+M#-^`4mV)@aWLHfry$mp!}1<q~|Gjzij^nuHUdep+-^)>SfqTv&AD?=`ryWhWI=
zAlod_zYc?51FWN@qg%4<Ym#Iq>TNslz4DAZ+}R=m>1^U17JiNnwR^w0(SqS9XjGh`
z<|~8EHK&p$j&tBVrlG!GlV?xjJ{<jzcA9rIl~VW9anWA)?F)C9Jk+e7Rn7Fek7M&-
zpN4+Uh9z{K>(Vm)#>$)Gr<3lT=6fIT<6W@MI_~90?Vp)Z7@WfTJfR-rl|>3*eGR2>
z86KTajh_M{#VWir3O+k6$?tv{E+9OfXTPLpknh9ZCqQnnXVY2gwP|n7l+*X(WIIJg
z^WVG(*XpBT3FJq7rAlpQ$1jy$w?sU4z95Gvt&1MQWYQm@-qyKzz&{664GpipU8!Kr
z=5~yd1GE9~RJ6r{%h>0J*K*Z3m)m1@E1Onot*6H9S(dw6%$rmq-nX8n&1^h#=qwf+
z4d{+nH-v1&m6kWQJA}^?h#!v2uXbxUAgi4+u{!~}6NalS`pLsKYUX4tl^KJ~Nq-UR
zE==tlnB8X_syyds)clV3xWz8|AB#Uj-tCF8Q16E>-VU%R`+oi(l11$QCQ<QlaWXXi
zf2tM{uWFnEkN^M{p8piL{FmqdFI-&Vv5ntuUD$h7Z-9=Gs+BW`_-d{QB0no}NaVEp
z^8~gPT9DlCeSJ||)O<E`5a4%-K=~KuQJQ;*h)SutrwQoQb3XVWb^O4AGY4xH1`Twe
z#R7VP`P=XO(a1pH>uB%#a!b9&;)>gTk`yv%MQT}h3*p+n(RSLIW+s_;a;47R8gmiV
zc<<3n!tIFhMTZ&gq0IhYk;rbX?e&|BcC`4&IAIQ!?2JO_CI!{y-&Q%?j0;k~#Ei?e
zcq#k(utT&>R!^%dLLQ+LdMRp`3_#pa+wRw2s0NvT{)0c>^yHiRs&31+Dm&e4?OtEc
zs#*3Y7Ce4~#~|6#m%{4XHPt;SeYv>^E21#cj1svCCGDlY@>z;)wC1?WrzWgs{#G?R
z{jVvK=ET%*miAs+a7V<UdxUO_4`wrl-;b)w53kY2UES&3=@amJo8J}<keL&|hkmVx
zr5fs5wWEtyuUxXcEd68jM`P?Gx~sMCgfCfy-vM0;zHuHk2TycXlmt9c{qPt3$JQN4
z!1HHO@J^)%mL;kDw{~sgR#}gAW46w&Lx)*I7J+9lOX(5|Vw$AJ2GLwqYY$!*8;w{X
z;VVLQ4PLk%ZlltZHQBHE7y-isP{z8e5h8{-YYkBZJ|PahU`Vj)8iuYIcO?~DkflL8
z!rrrq$Fn(o0FFVMhWON+L*+r#z#f*C@k)mvk?S;6iCQ|N6;~;xp4jyv%uA>3n^xd;
z^$T}>##nR4`*h%|rMSle%0Mzp;NWRt;7V6L=spoR<ZZ5CSx14tSD_pq$J055l^bLr
zeLC&Tdt8k~D+*zn1x<u=6wbKDAvk7@Knz@k8;RJ2=4^BK<pR`4Z)F@|8W;wIhJoB6
z5_}OCbJ8-UVnlBZwcF6+P~t>(_Zb<@Ba!(5ip{A=qG*8%ZM|1sdNcb%!$Fv}lpnq3
zjP<f$qwV~`c`S4P-4?Yjj+5t<);tMeiHsWbM!pvl-~dFJm26YYB*MgS3H}Z;Oc6^7
zi)n-U+7<rs>ZFOd+;;ZE8Ym?g8pBo<3JM*~!cJ-ggzY+ODsW(VJr#4cYLDzn=@Ce#
zx~0NmV=OQqOu#rsrD=1&iR9Mdy$8#IFRBU@1Uy_7VNvI-jd!X=cN!E^49qS&B3Q(q
zR8ui#UY9b?&5cYiG3ekHX1DNQl)wNiM|+)}=$tFZ6|M_mo;Z$KqbcCkcMF0E6I~F6
z(w02t_eC*#KMEhBZ2kbO;3Qav1EZLgz8&YaX!{kHy6}A)(hG^X1-RsT1pn_QX$cda
z7clk4NanNbg)zw1CU6ukIQ-ORF#FV)rs_6-6Qb|%Lq2#8x;yspO0KOI2f_sXc}xr0
z)cqvLKU+Nezv~$$@L}I`e6|5y?3iqd@VAu5ZvBK|QSv)CZb}5$NiT9U$QegTJ+szv
z*(jn=h$NkiMuPmCOHC-LI_QAN4}UXm2qVYEbmgC4v$a^{lPoM--y@#-Jw8UA!uZU0
z^=X>V@Z6vG^qFQA^6N>9Nj4U_wwt}+#t>CyS#vc~fo0D7^V3*#6^*}zDwzb-nu}0e
zDg547iF8QG*gd{jmV;LyG_B@T>({uZlwLEk4+yREdar)*Kg*<8lR&6=i!<mHEHwp$
zmHikyzkDFI!ih>m@!?7;Wkw_~LBca_Q*-LAFc92vf~e#87&)<%zA4$}qj7jH-9fjZ
zr{VP~tixLzu|Mv}KMe7AT{K<Q#r3q-^?>yKnYE{VND6+<dIr=o+A206SR5!oDJnOY
zVD+xQ<AS%e30*fYjS?z9b+A51B4_RV$?Tk$;mNIIitmwJP@enuzt&P4neYeR6&%;Z
zT!RV#ilH^cI22I1kSi$5gCvhG)YeIP)#>aokiE3lQZ!IuW|J@-#gUw-uDdA4x@DZR
zX-~8c!GSn{_zW@>`P1QFy<)E-nthIm8&hXzkvbVRFakCbQIY(VLbVdZq;yIJRP7Po
z7tWV9StiQ9Eu&cDdo<L)QrpR@FnedP1jLOl8|SI}TLD48>DZ}IU~v92L}4LdK$Lq0
zL~B-F@PuX<j9<Xxe$pFuLF{H=Cp`vIt1PsJ1DR#x9?XhABIFh=EWR8l7pFupsI+=~
z?HzTi><?9YICMQU)OhZ#(9ZhpuHO%Kn<_jRt#2YDrUoI^u1Ur2zRr{79mZSN+f7$=
zIzuoE>_Efhx@(lgWh*KVP@;0LNV;!3P&Kp=s(wy>5Q(R7pb=cnK~DFJr|P{G`iUW@
zN$K<D41!E%(Fq>aI}it`A9JSh;TbO!3Xfj?!JxEXzo~PBAvA_}t>*v&E>;SLZ}b^H
zZb%mru*{tefG(26ZvI5UJ^h&1RB(YzDQ2L4mE%DHH&uVjW*uB^-?nB*Hd{;M+?53Z
z=AZsL?}{PK`w5=gx1VK)!|}DmJ8dR_@DXm*@Vd?Z+vk0z+CBZY?z_e_;-Q9@{beQH
zUb0M8hF%DW%anTM!F`wbntuZn_&H2!33uG$q2;`R!ezuR-Vw%w%+_^(^DuN4e;8%R
zIJ_&d)J&`UN?j&o05&q6sZeD_20dsT2k?il-jhYJJHOGsf5gehYjTH7>U~JJf$O2l
z>b6yln<Kq5bQra#?jv#%V&*pg`<<bcD$cX1=T*{YU8m}lu#wiuEBP<_H^M@-bu&_Q
zW}}6sw={cf*aB_8wv12!mTDKFNI!aV#s+1A5>6`4$Y1MbX&*T8*%Fp#P@efO=HJrr
zX>IQyFP0XO8|QPB%P8bssMrWL{nJns4eJBAxjQ9oRedJeSFO}-uS=x;wksxS!S^dY
zMJIt0Qcp?!s)uKo%`m+}?7Trc<iaZ6MlUZcFKA&n+*9Ss2q_P6WVfNvvr>~bMMq`R
z8SG$>B@Qn16jGYnJ#dt=78Z(aED^6MyK^`w+{8l`T6aeKlFmfvc)m(*hdi-XQFUgL
zvIMj_@&sfX&x#Y)$!lk5w_E6k(TgUcu)syj3$*rz5%ZK8J77|u<#KTXIjHo{&kSC)
zbbm_c(bQUyL!|BAkua;wZJ3)PD|h4|JGC-VcO>fgOi}z=w6xw4EHq-9HFeb1Psdtx
zDG_HDKzBuWms8NdiLG4Ma}<?p1~cm><FOtlgB^Hy0|yt832>haiUO8Qy-~|#3$lah
zl#cLT+N>iGnSgs@sUV-b?inf`UlBu%V%WDypO{}U0ahF?8@b?0b1;mEQ{Rwg5>||l
zod8LsI+*L`w>tzV++w!t7s+<(fe2qzFz6JbCsp=}+VRAhG#U7?pE7&Qfq+60#A0q+
zJVsBN&N$=IlMZ%jb(04y4}13bT9BWNKOb(QcUQ&f^+IV|HZ3y-FuLvY8VXrrl4hY6
zndiGnxkUD20f3Cj-IVuCY9EKP4DQ10ovmGCrCnQ3han?vDVL$!rJ|xOZzTyAo)*2*
zzv<k>)0>!wIge1)V3mI)9vY_`=veQ88Ym=@V>s^CCCWtvY4WGiJqK3h;|fKsbLDE?
zK8R1(zm{vWa)nR6^vVkL)iYC7ePDjwmU&oNYpzF_{jfVG*}yYI+BTGF4k}?(3$Zt_
zBp$iah0RxUjM!iVqNx(Mi=?Xic;DR{<PU}d>^ymvl|`>mN?qBn0y;7fIcT|oNLB=o
zY8lC%@VP(CusWCeagqywE9G}kf2fe&%vGM!sk|M5`>UNTT)*v+$gsjmZxz^v=3~?=
zqik*Nk)mu}I<58!@7GVMy@Aa$(ZP8lDIKF`*qN7<!(FXh@GqvEO&L`sKsIvGHuz<O
zeo0Oxx711=)gXQHkf{nS)8ug&r(0ecN#8CPId8c{nR>VnHA6iSG?OjlaYodov(g7Z
z02{l~mdv)-%Ewt6^BdcD7Zu{gfPdbSBj^YwuxGMG3nXT&LadSS>6*@^V$>Rgv%JW$
z9+SvOu+O#8gy+y4!-IrZTBYJJ1ATAr%}uz2f&&<t`yB6kHSB$Xa+vsYaLD7Mp^w6t
zyR`MY`COeP{AV7&OCU3DofizA<E<t!CRMn>*!RH1Cm}eMV{kLw$JW?3j0}n{WF4+k
zc*)7_w|$zLg1{?EprJbw2z^b<u<0%iSeebhvy;Pixm#gKcn3L+-FBPd463h1HF9Td
zoGX51LVfDA%sD)P&~@eqo=gVpchPD$=xRiR39qD*KoRr7cGBC&2B8aa%3XUIr~H6R
z-;Thc3_&TerFpQgt&D|^-`Pn<-7zRD%f-xX?m!8%c-p-AM4c*rAnZak7$56FKws^|
zh&1~&gKjq<`bfnqerLY#?N5d~3`@lo_Wvp*Db~}iO~Qfek=4lwGdpiEmY1)QZxtSs
z_?)M@vZ4-}G*zY&;}e?D>oGCRB^by;ThVYTs{<W(Y(u$Cr;bwFa=oy+sw&e3vWOKa
z?3;$d@Y*c&i%l~)chEb`gHRDxpsljGrU8a0_jdQR5925GXaIATeYH}bBvbJ~|776V
z0exP#@!nkwK}V95ntLU@=|=dH_Uv7vom{3a>N~AmPXD{bAKXOF=2}zD(7rlYCN1u6
zx$83F!L9eGV-P?#TG_ZIGf<%To??1QUTisj-S0r9s`%(vA2j4G+4$Q`g+XmLT<F1o
z4{e1PtSpUpuxUZU0q4Rb1k<?)@aP`ENV<QVpiZK$i4fxQSv-&9iXB)%8>rXr*hop`
zLtgrfgat`JVB|%7a_7={P^mH$UW&!fI^w|JbGLuD@hqEf)Ha9AL6bKA*)L0aTwX}t
zNBL&m6v!FPv6U_;+SpNofzC<Deg3T6kXDi`T1mWwXD_F~r`5M<SopF#&w!_O;x5Jy
z9F@MkQ8^-)3%Y5!W>nh5aOQN_aGICCRS#w59LXT}f-@3%iP5r6BdZ*c{d_ieCU;BQ
zF}B`Atym#Vn9`ur<lX;(=z$TEL)O5sem0jsm_-^1-Mih=1cUk3Z>4&8Pfubz0@sxE
za|`w%um1LW({ahXa$R<%lJvIM5mwpYvs^3v`SEt8^XQ2IuJD|W!C@O=27%kznS3y|
zT@lr=tNvgnArQ}hC$}QWH(OP@D&>Z7SNAYpJPbXC*c&nZe5MJsn9=nkN2U>(_4<2o
zGtYE3X9-$0arxaRu&Nrq<^atssiL>TA)GV<{gT_<fg#@AEE8Qo<iy|g;KKsC1uyd0
z#UN39{vVRoM7fQ08cT$~pErHRgPn`ht6Y8QN!J$NgQs70BE#iz@)RJtm+fwThGp~{
zA{}44HM?7j8S<~>oy%}&BpFH0X{V64VkX-?W5l$BClcupRxES3?!oy~tTK9CAxL7e
zbC#pl9^<Xj>?kQc)j|O|&R3Z8znaLPRoUC!v6ne8&$Ty=pmsPYb7okFwx6IC77j!z
zxDWRIU(%z^pGTUIhe5Xne$~%>X(`LDuAuN%NT+5zyc{0uxpWlpZc5SWLA)vNayX1~
zwgH87Xo#V?*I*6}=yj$^k~}Q|jiw3`PnC=@C=KpoJbJ*4ix!BU+jA1Tu6Gd-E<ib8
zmtKHr^<G}w?H(Z>?i|;sdB2Hq+in=`W>{@;du7Jq(3z#6EC;#K2W9$qutcU+F)eiG
zzV5(u4S(1ps&Fn;=_$1}m}g=4eC&2qb}cW2f=(hD%M-c)R>CR6g4!oU;8fs!?o+g~
z<QaS~kcT!E^E242*DnnftM5Q?g)6YC>V;Eb+zUu|mIP5rPYUSLQvyv`dGxT@_Hr%a
zlcdzH*Qj`Ohf-G9xJ8xQU)c!dZo9Q{8~9>rz;RY$){=z>{0jGrYm4Ly0$x3v&J0mB
z-RMfP<@j$Om?<tF>!|Q7v&_DCDq*=kpzFK#cZL4mF*UkUYh3CHd+9as_RH?mtC7iU
zk7%sNZHo>bv};EgKNJ~_;&8p}cT5OJsOXw{O*c7R<7Zx1?c56evTgGFrTd1Cf514g
z92!6yoy61VY1q(UZIcd@qP%@!PIxz`;M<*p8?W|1n>}hRA2gbv0KojeL0-)NyV+xG
zZ)av{{=de0)n?+3*kOA=s6d~QK{VY@F9*e<#k{v#1z*uY!;Gd-3L8zwC#OxefPEwQ
z4f9Ku<H`O~h&emhBoT-y5=bga`Fn6=v4zQm^*Ah66rwP2%)}^wyr0$gMXJ=C&|NfN
zLcO-Ov{B#Gq=S{RPUW<khOs5dqU1-M|0<P5#*?IIx9K?;pH_{UvU!5>@e1vTH}c3l
z5r}7pByXaHy!O&e^Tp^fyOHD<QRwq^VM@gc+yezrb$UZ}EtU|gw2`=CdsM!2LRE$(
zxioNqT$UeRTwH8i#Gbzox9ltXekma{X?#8I7WF+CDtQe~>2WQUg>By_>7*n9zH02Z
zFR;fC=dUSYZ-2pOWbZ1*UB+IOdQhaqzfchlVE-C|a7*ltJtxS_;Uv;WT5&ygqM*B7
zm(8+|z@C9%y1qe*`$#n`k45!iY_Tx5qDqtRUf3qwiCeloxa&Arx1QU*s(!in4*o0w
zhqw4RYtF^GYWp==UDwzDp@K|B?(Brnz?+}mI&Ampl5{Cicj!YZrkJA~_LCmn(-U$y
z;Egoo!Qx8ubUnAYRbOgHel8{N)#h%O;i}ECWR1mjtLRaD(0-{Ht-eZX72g((8Y>Vw
z;oPW`gi@n(k7tH~7gF=oqor|@7u%X5rK5<jFiwtun_;P8NBKTKwaJJe35x&RPf6Y;
zR=5k!*+_$<HDQeHC70NUwnVwngRhY<!w-gX3Z+4x**;V|vCyZJG7yH+K(t08qRhK~
zdK%9`LD0Kn9ARb;aG!BD!mFp-9Dtq~h!3Rq9(OKcegB%XIYlJ|sCPR!7sMGoL0aY0
zNwd%M%;Ii#@86P;o`L&bCnUpvHt!E`-#b{tpD%H}HiI6nxOqAt*)q~t=FL2Tp|nZB
zjwo-AA@>YX(DnBA6G5wLGqCD|r<N8EemDg+Fif9qn$vEAF-;041S|wCL6qyXo<egy
z-z35FYNefwMZnm4!$3#T0Y5*|K~uF!tVOkAQs`-gKeZd_Qj9?<T5Y${<ZIMX(LEN_
z6jdi25VlcRno~p}%g(bwR|3w<sb^vHYOSw@q0Y}v)Nncsg{(L%+9V;%u6CUuNq$4`
zcIOj<QrHQf8j2OXdyUL<&N~SKi%07vAzxEyqveEdIx*)ca~!0J%Z1pU3bnCjm%7Xp
z^BI?9{Bb7kY*)2ofb6X;eZfddklNKBwXjeqyzKcyE9#(~RN-4TJ)A8H78c&T8YvFP
z*L9a<$N#38|B*n&SGV&wdYoiU?_=*Kc*ZIc%_x^yaQmsj=C9?{g_Xj_FKBLESZWVh
zr|nRhHIFmB9;*jLmFq*Ml4EmM_liS3b!hFI1OC7_RPM#?Oa-AW<d@JG1Oxg`>K=SW
z_(PNWdBNyGTkYYaUMGUUzj8(*VH<tF$2b5ngHF+3&HZ6sb%O$vfjkeBKO?ipVLv%T
zj6X+2AJYAf&R5<Zbn8d(MblKh`SCQPA#1!J82>pgPv?zEi2x1&EFuB`|9xEkzdFb!
zrY5cq|FTi3x^CPSJEGqj6*zR1RH*ufO*VhK>wG~MSgQnwEjy4FEo@NQIh(cQ|Hs!m
zMTrt@!Gdkuwr$(CZQHhWPTMw5+qP}nwtM=nnV<XKUGrb7>LW92?~K?Hp&~KP4-52I
z4o=|}ua_@ACdozeB&_+&Ch$cdJ&?XP$<B`xX6T`*&M9ARCZIgUu5&|ZoUzwIkx1at
zg<5-TS|UJ0XzjVg0+B=F&?KCm1BLJR1C2t9L7_O26pyM}31YX>38ZF4r`atZ6b)jB
zk!&tLNHTNVr$oq{(q{yZ<vz0-Rw~nHY|tSk5lbyi3DtlGAdsxwg;K8osiW1AZBoR-
z+8JW?dSdSZ1xj!1;pYsgIP6$0lV0qPL@qXQfg0@4*J#FMQx#52zoee$D7q`$&%03J
zo<e{ZWeJSvl-D%{)DIScz5%E%u=lZ%%3gcO85|`U%3bK$>7r$=y99y1pI}A!(rTZl
zZb474JO(8ab4+l7#EyDYiWSIdjGeK<rq*V{vXLuUBGN6Gje4X+Du@v#*b5zu{8=G_
zsZqvMVVR*^j4*6gM=U$bm12%dynsVI=e%|UnPxuhB#Ub-`b2dSopK}o=>qMge|O(q
z+*1XE#{v)J<m>GD#Qb*sK7=|+AcJ;Ff=*I=7DYO&)cAq8$#uB1%)%Z?VcEvEUVz%e
zj+iD$x|Sdr31_cf^=L?ca}coE?elQHL4CiFc|u>K|HC9|qwHJSm_<<H6?cClQ%k6$
zOew+<T8jMAb(oPxKzJ4%<|0p80wXD^Y2?ufsv^#w)M_H~eo`&aWbLZMLXz!PL=I~y
zt?qWBW<?7{*hsECi_|6F|3>1057Ni3TLknGaw41FUGK`|s$}>IOz&xkG@Kx4DE3rt
z=ICUZzKX&q#FI&s*?6PZ=QUUpQld+?8rmEr!FVO)(=rLV<Sd`r5{9)ErOyX`fsu`^
zSZ_?HkM-~`_GwyIofCxG{9I`UA@V`zO%dP7w7GT+&(ucp0>@a+_Gl_b#HNYoK0g57
z|1*-oFcKni3p~B6CK<Y}hPvg+Xh&eheyjCy)(;M`8AOOGpQR7NN{DFa-W0}sh6ZQa
z5Sl6hIf%eKp56+QT!f0HH|i<C5c^50?%+_GA~cN3kUOS2YF{t%O|ryV(~SffU&VHu
zjq#(hOiG5IDC5cnWdygdFV<QujfX`D@_ClR1`calg(I-ztxr$yAjj1*HSM@RnISvp
zeDt&v+I!jo5B^GY&hWCZuU+~lU3s9vfe(|`+j92SGpP_Lo3-KFb#i$nPW1xeEYi?t
z9OcgzVqD$()6vDtXt<H^p-u{Gu?sn}U8NY_o~09>CyxOQGt?7g#c9~r&!-L3^;Rz&
ze|(7pJJ7*agi$fWwzBmh24BbZ$Qpy!PASQ|NF&ge`F!bRyn&`B{i9g(kIyXEOs%rl
z*I(@^JVTlXKM}?zYS}$FB_c*-hygIh-CS^EUe)^Kw7?qjRkipf(PARx@kriiDc+8V
zF1=yYI@uJLlJ&v#7&-Dxso;Ua8A_gQy)`?~=H&Fdd~BP4^s<Ew*;_E?c41aCqu(wz
zs%<swGVa>)IlMV<(u)F8IJUeW;9DKyU#ny5|M(m_xk~;#;CBsSCJS+9H6sGj2!+RC
zy?)>$;x}8WFi%nfmvah-k#2uG#Pw?|PUh4e3(d;af+kzzsJvGW?a{g97mU(VaXj2c
zBhxy_kwL`{X+z=h-NKZ9&FoG*EQsOQ%>mnGF~9``5@9azE0N2UuU12~M|XPRQN)NF
z6pXIil6dyo1aAS|5YZL%Fj5lqXCVvmxhWf8)+m8(Unc}VxVH0!m7i>`&9YqfO=mnD
zex9vnmC)E^^5?YyP9w+&O1Rn6@zj?arOGb^2frN_Eo2Km_wYtsjsTjwBXLd-9F!&B
zz*c&+4_As)O3Ac!GXAqgFG`Olhj>WA!8NU(dUdKgm!Wn{ZqaoF@eh7UaU;`@<Qmza
z1S{V1R`Ayy$iNlYO=rV*Ol%qTcX+7NtuVC!V5G#|?{(cS&2hX<a=H0L>=XA0-D$Qn
zv?M^|m^=1%P`BV_ci*P@Tiu&k+7;1g%9qAdjXA^fCr&mO0m+DCtW41R7UT!$ziUW(
zY<>{oFAGV-2>^ikf48)@rY=sF#?HT0WJ&wW?qIm-M_-=t7Kk>zxUqSmDAwL&)7C8!
zc7BR(nGQ-v5Mg*<!bmorCcOR<rR!Aq5%PoN#b=USbWJV*x+q#VGmF#N?AYgf+Tr=|
z@G#SB<C2T?&}*xr=~9KRxxzZS7_G8-8;X)|T&?o+sh;{e>e`SAtBX#$F6qcgeY~cO
zn%1N;MD57x*GfYU4fXc*h5v`NLaXdUt|^%&^g5uaENNVo5A#ctn)a9UQL2k~uUL9r
z9JedfnzJ<_U9PahBfDi*Z`X*bL2Hp>odpLzmtzs2Qd4qIoEsY(vrw_gY`+>r%Mfq8
z)Nymtl#)euEVXt*si1DAIxTU(zQW5W(AwyRhqY5lA-?XUtT0uSH*l`jaZ9A7sdriE
z47B817F{ys9g7vCA5<l;)M;+>`1vjzb+1M=C_s&%TR9W?EZ6(vN}Ng{th?Zs+VLzG
zSzlw{q_N^kcMjF41hm!l_a!tZCSYxUDwn^j`&S+NM?IRF5w)Q~Cd+(3S|%&Ipa0bt
zu7^L|Uw@ywJL@Y@t1NP(6;V6i6p!{r?98r8jT%V>aJ(voVD-=~GYU+l#PK9?4u3~a
zmwwyt<0@Q!C7OLlU$^J`F0(})oxxyj%4Nl@ASAy*Rdd3QFI@H8mt=QFvZIm;;dd@7
zEnChHJUVSxicCMp50pFaMETPb?n?iQ54ndsH_P{Fi07bhBHYvxEWGjYAzIlkP(MZI
zCi-ew7EFmNJL}*N{bb`wj*IdpQ-0bMvxP?>SoH)^`0`zM*}WIN)~t5s#n1iqfL@{d
zMzsy}Uq#(y_(^+u=>dmhHD~Qt%GPo*{9ZJxcW}#mz!pH%B!)ddWg2!Pcr`#b<-<d|
z-OjBN6^54U^AbQUg~>`;E-f8h|JT>MtIVON4te{3+rF<0nM3e5JAu1~m4!naE4ej0
zw0wORsnIk3{>>bsoO^6@KgoEpVr^QHp${`dY=GhX9SB7N3TC>X^!42E-j~u;!>OMx
zeIMMMZ#Am**!0nEnpEa82(Xi#$ag*Fr7wq@1APWTcz-%GWF5gO#Y=M=ndnW5Eknz%
zc=1npPquN|^HU>+2O~43+jucRIsmaY>HZ|A02L)56wb^BDc!A^@9T6PcAHisn?P49
z4zyY4&2i{6WW2UiY&4-}5V>%&rYj<a-@W!U=>j!pNz`w#$O@YNTovMcp^$Z-+;EmP
zpj9oRZ$P7O#OOQqM9M(pJ_<|xipqV#)jE0&IA!vrTt^O8{=&w|?w5~iT^Os}+jY&J
z0z_|InWdRf-{cYr(q+0iF4%yxgTTbS?5`G2qK;Sc%FQo&FVQ`Zyz<ZcIxFvhUv1S;
zE={)1_tHaT9~Of`)r`LadOKp-^?|P;IxDzr>}hLO<7b=LH7XtP2YYqc0x?0|JOaOj
zUHA~1G26>vLR!&x$O(&N%aA$uL-H^G{ftHpQ%^uLwK9?)sIK0&WA0-!2e%&O!obA$
z!GL^IR0HzKk8dah@T^iT)x7_^jFz?hxXU-GcanouKlN<ZtD#ALkH;W)BCDMTY+y4$
zO2|dE+~HLkDv2LCrk6yjgzT7lSr^IDx>pcROi={a?z&(JA?vnTB#6?FO?u`g(VHZg
zrdejY!22s4y?pDnG~7YLNP8v{M;i&Gd0wP>mNIF!djvAfd)`#wN~2?$IxaefT(xID
z$d>@|TQ@fPMCQJ$tEjY6PZ_I92hpPz7%32x?QQkM^1A93IH(d1j-fvw@bTFucyz!C
z?D^`CwNAn0)|F%`b5hGB2gVP^Ge(8>7^s=7OkWL1BV5D7a7Dwk?Ik1O8mG4r(Pv^a
zf+;l*ie#p-Ctm2)@o8bMvqZqsaW_$2SRKYu<R6gP@KQg5+(16msdazmk#&<t1Y~G0
zC?#ae3WCA*4A#`YSiC2K_6<@u`A$*1L^>IyvGR$sJ`@eJUNmbPzJ88ra_Y~-f{!L+
z(f!2u1EphSwQUS^0IK|e!`z&GyyjkDEOQrb4~4w4*cPRpJ)x}poMTX8%N*(t_|m&t
z8t*+wGAvuN2c2kO<45@Y_0PXwzqdR<(hzzG4N7}jWAowS2ip__Tbizw&N-C2NF5)T
zPRCHj^TeXY{dOCVqEno*i(TnmLTO)0%}u4@G!F%?as?7Ro&P$DX(ga(X0RhSCaI|)
zfocwE+-)=$m4_vXpK#;=DcxY6C*Y(XCwW!y%bwvQyh!Tf2s_CVr6xI~U>vM45+RqO
zfA6wYSn*%P2qFnFmS$ru)!$$(;c^gXU}>i=-kLxt7G!Z)tUa5nTDZwqKmY*;f;@Hz
zTbZ|DnD%yHMlLpweI=C%C-D(Vv3oG4_(OxU-Ll=+z*m!vaqs}VEwCWt!Xf#J>XFI<
z8rnbT`~Eh_xPGS^iuIQ3Sfrs(BTm2>uQharDfVnqu1>^ykv*Tcgk20(MU-*z$THw!
zEy0ap8C<CTeGRb7foRg2hE?;T<rQ#6dDyGY#M$Qos>uU(>ZB<v9u7|A6S!sRi59`T
zqc}{n<<RTIcyyn^@A(ktXt<q!+WMgz8b*X901gt0(*NSR8fYjyfR?)oVQHiVXOPHl
zX+U&mzhb$8W(CeH%ABPi;P?A2$+d~K)X<q6DvBWV8OwF<VP4I}|DhQN#w3%8@6VWq
zpT)a3-nRn`1y-vM#WvhH;#F;ZQRJR+X?`0EfhIo2To7>GCMEb>NFv$H5BWXnszMJY
zVOP=;WzISHC&Noz-Q|GjUh3^>hrlp$regab76@OXj)+oB=&1!!r0xq;p3=`ITV*F^
z1kM*hDiXVnQ4*c%^PJ>MIAD-<o_dZ7b$Q)-kgo8`dBV_93Q&8rJPlU{03!dgIM8?;
z0_QBE7{?||+~Q}tiVgLEpyaRB1DPm0XJ?rH-e4Sy1db>{ka=@HX=S4dWDcY?aN<RP
zOs%3g0-S-#&{=BU;mFf0pLzfRf;zb~O)&S3h7ETjd2;>9FTo68-VhJB>YtQ3khMea
z*;5}s=otpVJ=ur&yJ2<B!2HplpPDTT-~R|57+y_0zM|8{ue4_NCA4hrG#y05si%Np
zE<O_f{SmO#{jUnYdVg*KqEt=yLttb~r=Wvtzqb*DOzn1vqT!mbA&Ip$zv6t$D>xTs
z@&v-g-Wn}2P%0-6N8?`LNN>k*y9y7ld`lTx!)mnhZzG2}kx>5Pg#i@aDYIXEmO8Hi
z;zx4;0}8p5vm78Di$|3lVCrJFpaILZQKJ9f_i{1@@ctx;FF52`d_$lsfxr=v+6F;|
z-cJaAlG30xw(54}w9SDT5Vo!dPmV(uo&$CqUZ!0hd1zpV_?wiF<MkR1)Cr*!1mQb^
zG*eVEpBmTxM*BEJoqcwf+O5A8_Lo2L0)!}mpg@9GEm8U(#k*&RjWduTCU36^9v1?j
zeGLki!evC>DB8EZ#t_7pN6Fq<dyibumblw#JkX8=#;cmWZoLR*dRUX+YZ}LEClL(L
zl4BXccaALnJvV+iCa1>OkY532j;dxpHiEdhTXWzjEVwYu3>Jn1miuPo5sFx`!>Y88
zj<1+i6DRg@=g?aNRB9x(StHD?*ba{_tSQ*JmqFlfGycKJJlSn+FM}EaF|={!>>r?)
zm<cg9tju13<stfg1;PHQCOhb;<hfhVU{0_B;?T&Hfm>}Z5mY;tP=5+GR*bpG1`9ZZ
za>+2ehL~a(;6#&}TLJ&(hr&buJEf)vafmlC*_CW#OT}F%#&Pi9OfL2djTBsX@gW#^
zG@U0fi}PB6OkbcX2!53c3ZaZRsj!U3s@KW?0IjSB&Z1chlWOYE8_6FJkT8j}B@2kJ
zdB@MIDsIKtM!S&R?N<c|7j6y+-GVY>F|#uPX$Up&UqD-;HD^Tuu6FJT+(+#hKd<SX
zK&)zx{aW26H)%ImpRml+g8?4AxuB%?#%P0Hh{h+4#{yE^3Dsmd9YT2#gt5C_QL_t<
z$ZpkM&tJ1#I#AGP4HHn?!_eDCS$5xby#Bb)_s5HztwVM!bT8Bo+w=R|R<&q<$IQEG
zu_kG|hch;%X0P$;`nrad2cO4IMS^(c;$2L2oBfos3%|}|mEE>331thdt%1$)MCpZ@
z%|W<3&kC|`g;O;}k3SPefkeI8uW#L{IWTPuUv^nqlf2%+<Tis-2wV0c<j&g@jPfU!
zPG-z=7~JrbLJW3PJv5Tw$)gv>_cH`g-cu5I+cdSK8B`IJHUjrgnD@!xUV8zPz9#mc
zskhKqIFsmigSw4}ZmevUf0a9Kd4ojy%v#`?Y_-t;&O&_PR;+(^+Xt!+#UAgl`x%RP
zGZepYAR<o3qinq>kwTX^V&viH8%f(;g7{p{1VF<!<I`ZvT4&wxG5X~x<0eQkZVdKf
zJ<C-N!0d5+Uhbl5ywCKF=eGX!>9@w1_LwVG3!Ze~956vmK)kj-_Gtic!uE@5Z}xRe
zfM`4b@>3X$kP+<`SCcWTnM3)KY^~Gxll&_H@*s4U`Kt5+S0xw`{b_rQUkJ#@+6nqg
zL5rutH&gcEzt^&zM0c7dbz@wq<}qG<9aW6wyag_#eckNheM{F0nB?>E)fB*ld|=x)
zQi1XhZ|*GU?O8^K2C57o`qe&8;m_OA`#LPN@~4}ezH%EA)M)=|il;i;>#U6?H;NI~
zUqC@=Y^2s*ZVR&fvZl9BTWxkFdWstPp%x^aF{pD`+v!yde1~WdtAi}I;Ny`%kzifX
z{a(wk>#j!vW|H1R4NZ)cc0isea)vv~L&P}mqDvWHoYa6?$6oo+w<uVCGjsF@2Q?Kt
zC*<Un`5xTGmAQO+!O{g{R96W~as$73gxQJwrW!acdoWA;_r@+`uUVcY{Jk&E4Auin
zrsGV;!bby!XdXkpe+Jebj+YN(sfdOKvMaWKT~s8!aa2b3xI8NYd>qIlNqs{ndY2Bj
zn9&PAC~pKv<KYR>MkIwp*T(3Dd!pKg;mmWyf@K8ggWZX}VQfJ>#=`kLQ{kRo)N%1L
zHPUf<i+=xceQ%N;QTIT^B9wNA_h^oVJrq~;vNbUHdqfxI0aEm%?3^xR2?<UvIp<+c
zJXhN8tL~UyDhPa~giEIi3y74&(F#*&x*`?s5QQ^bQUVy!Rdxuut0x$_yS1<Npcsx-
z4eEAPcfZ)l6H*4`3Y!q{LrQn*c2ZOyM})6UAP_JxRfDVYCe;-^N+|WEsO~@Vm3jWz
z2Tg`Y0B`caH(7uBJH}CZnP)->n<X>>BB8QaD#Ml^NPyehU>TRQD*z{4?lHz(JxDX0
z>Zl-hKH;!KcD_vUa<~n-lRt;t-m(ncbnKn8rGE`WK5_WD9Ae~xz?pnku{92PlEO|r
zbSMC?nL?x5;4A=@@!32|G;0s}A}G|TcO8RQ34tJ1{no@GSQta>FMUa@=lX@18esjS
z=eE+}=_vW6nRz4R^gBK8Wvv(cQtQE347tLR1Tf2ZJ0I4NeGC#kPymRPB4Ww}ePqUt
z&gQP^JL$$WlHENgxoc;$wiecJ9IwE3`k`*%SGKgLvUQ=8dO7y#Dg-P!_e3Xu{vG8(
zT*uM&ZeREi>G1eAWUi=>PgCFqp5zaEJ0z`Wa*c@Ua4}GbRmR8ehRBD}y!U`{NK3g-
z-|;J37-Ki1;@2&WP`GD5nWNPSvrjjS&=+Cv32wz0NnnYsG~PX065f-KiWh@q<(^3j
zKnn5{?jY=Dv%Ho(&3$a}9~jZjVCxhgg}vTi)=ktLPt(A2wgP{wHmNa7yHGxzE-A_5
zu!$t?xhj#t-~9CgQ;a?kXc0@NXs5MeJGPH_zFxG$7Dm#Afz7xSRp6(?{lfomT;--;
zeIw!5%l7LRpZ_0Jp{>1%sm*_2l~~ms>rDn2zZrePYdtLrbqpJLcBl(33~X&}w?D-o
zx>Y14jy5JIH6yD(e4Jxn5RG;Z4h9#AG-n@0nNw!$DUc{&AjYVycv2GxRzO~GF`@wY
zwFROnTg2W<E26X5xNdpAf97oo?CJo?Mh?qiF&b_A>Qr?Fp_aKF<`Tb%J`nQ?2;@h*
zIJ6j0G|=&&taaGEj4Izp_5Z2gI=i|<YcJmq6a9WjQ>~uWw_P-NI}zMA>&T(AJwQph
z5KaJUeHOBUAAY&kxxM<inHxQKglwXoKHNg{2YTnw$DZ`a6zpD-%$-*9`IMWCSTtDt
z04s=(uK(p@sra#9nmQe7LTX#{@lE_CEzo7D^@uUwW5+-PZ{C9fJ9-bXW_P){aI0C8
zo3-)GJ1vu>=Gf;-j!<b8L?N%BIWH@*jI#;{GEunHvJg6`f!tX$mwuQ1+CVnoqAX&j
zwm9C%kO&5Do@kcTqvJIA4TH*`$(703yk+o>EnbD-Ac7Hs-ZMUiH9T|LW!||f9&lDD
zB8i8VY&`MvO;pBZH-7Q&HD2!NBQ(={C>@n0LcAR+FZ}@y3@pT`pcVovgJS5p2f-5g
zxSu$ma;Qq#P6DJ|#iwth$YEwdR33{zy^Bq|3*5pBcuT;C>>@q=V`6gf!F(G6YKr3k
zZ051c9L~wy&{)bf+x%eoKpB5rd(u`diW`RB$MLKd8^!j0Gfh)#s~3A-Gqa^r*Oi6_
zwX5(yUZ!x?ag=-;M(rR|-LqEv!U@X=EZ;A$i1dGV10(ViJ*>Px*b~oNT=)~*vxMKu
zx=)FJ0YGpwl62$gHC~oMDu@n4G^bnpbSgnger0A3I1LupKhV=C$*Zh{^rFlu?&^rH
zIbY!ay^m=apM5TVy_NBPIi~-iZ*aD>b+EBC^Zeb(P3lws@mTJ@paeS)l_3#j`Wvly
zGz$i)fD&oYLLNx4yf3w#v1ytzp<$C*@c%h1yS-5lOp%5WDsun$@6en)ynSrZa!|v;
zE0h;ZE-B)MD2oZ}Qu+e9)9;C)%+u{;yeCClwIx37{Vu`Vn8wj{^pX!>?o`||%5FwN
zh(dfF9A8S2#9^RE>7!tJGEX9B3zZDnL&cFVb=E3o@s<tS#37<mX0jz=Mfj;f%v6Q-
zsOr)4r{iR-gJeB`rWzIdJJu^n*b(-OtGP^$&J4iMY>Te#k<&`6H_Z9*72NmN2Y&7R
zlA1a}fJgD{ErDqpNw7g2j%%o*Fx}JGR&ZHwM_*ln9;`MI*o_gNvN+E-UQMUz`-7Rm
zPjs~@5WT=m+Mro;tv~raRaVQ$hiedupO)QeyhxYIQJEA4S~a?b1!N|NVgEtbcrp1)
z$z7>y8c}vW#DZEeWnrtafPG}^W0rBx*^NP?GFEI0_{kJd2CUTs<BcZW*_gUS_xV^^
zC%M@Ps0l36jJicU>zr`I*;jHY3UY>8?q6zdW2M^zQpi1J=8IP-M>%F1CMR0<%BNGE
z{86^S2PCg8abv;2d4o{Cu`=V`$H9ZznY2x_t?>K=M9c=ZM;GXeIu7vYc|{jJ=OV^V
z4?uMbTB~K8I{w|6r}HNXj1xh<3TI?jK1N{Iv|J25*iSDdP%;Xwe+=zHXBNWnbaC_?
z(ljb#q3d~wBg?Iqd*Tl|jYpnHwrf1dv?WZz?7D*V!1zgA-U+7{)n)@Z*CE?B+&*cs
zppMN!F6;)vVEi-%G<BQ>6qAYwX(l$4SROv=L)(=B046L1+5u~1ri-y@l_ZDOj5Wdi
zCVhj9<M|^RLr-1}X-@$w(Jp1~2e8p_%cfwezUq?V04K0uG2#k3Q(+|nsw}kWJeri$
z5#Q@JPy!40%CtDsNK=XKM0$0b)0N(Xt_D`%jmjQANoa7W5Y&VXU<*mrT0gHJDr%OI
zK_FJ7Y}-`maXm3{Yf_SaAm(+glLFh82fM*@NFYKO5AgDdXmODF!LhHFCUjltphd6p
z!$98q$oql;pBsg-pm}d0q)L9n@bx@@t+-)COQ@?h)HiN%XXtn%gQ)L<*pbe@b(3uo
zpqFu#EktC6q?6VB)b1Id+`0>j%apajK1Iy`Ef4r%)o8vZI=_n;qY}-e=W<!?ln@6h
zQD{4|fEzOFl(;&UhK@6;WJ^ZVqOV`AL}dUc(%6KuLupMHmoZ3f_GEOZ8r%^5VP5nL
z6;$rJ=uWolCp)oI=xndsXvJ)WXNLJIIP)3sEwuA)Ux-)`|HAzo1$6FIq`QPPwkNlT
z7JrNA=|aDIkmWe*{ddWiu_?RZt?BzWWY;@sME6A9bmzAUdAtk|#+AgL5VzS{4@S>X
z+CZ4Yyyszen@4^svVf3<cTV4Ok=6#`XoaKR`}}1h#yF?uma%YPgv%syx!TPLj<Xxd
z`bTiC`If^%A%^bYu}Q34<j@pf!jZm>N*0w+UV`>X>FZ&LUHI*1FB>aTvtW&LcAFUW
z%GF(EIJ*}2q+5MY!z=lqZThG#!@6CuWPXIDBea4M_m%r3DAL)Ni%{eo5~tO1aXl`l
znSUgqiyc6y489WB3x9|eckONI*Z%bixGfooC><9;Kl3%e$GWnW2_ACgg8IIj6ENln
z)i2a{?;5)LAOM#VK6zyB7b+P&_~&ldgk{=g2W#Tx>FPG`#lvH&RUi-zdpM$xXshuu
zM07NXQ-$=Ir$&?-i_N8;NExYg-@r*2U~FK(o<KaA+iRmD4Dz;|g!Dk?^_xmvMhZXb
z19Yovb?f?+2{^lOhwPdG#^1&2_%(y#WQ74<ms$Uj<nmdFYlEN-9Ru>Ks<G2GsVES~
z83rjNCRm?$CpEAf$)04MYiJYMm};P*k4Ki~ZIL+IKTS!Te*Tcz=x$Ln=wx<x6fuX4
zhX=urWx-7;-jk<MfFS4=oo$$z>OHC;;reK)l%jidE_KcSze_~Wo-TDNFaUrX-2WUy
zaCWeFa`{iEqb_Z?!GN&!fdcGl2<fWgf}IDN1pr$wVKr!}$RY`<Rbae~WT~JOlXuk&
zev0Uw07ojd81AwkDm&$!1wZ0N?3vTD4y_45jtNR<BBqp*7zByumBXH1TNOl_EmKfA
z<mBn;>j(uI9o^CS*SYr}xCcBxc|b1Z;Edz=D=`n^7zDl3Ex+D2(2;4%%%0I3YSanu
z&{4(T!^mDE&$nlvr{ZR?WO(_GTe&GGJ!0!-XP`x+6q>pWP)VZFe^9O`e<KsnLmXRz
z>4L@LaPaDUGVme`A>*#jl?Ig#+dxft5QXsWsv+Ta<YmxE9m7hl$IB~TSJ_S+XN`AL
zZbj0o#^zN_jHYaMQB1}-^)7~&(W6#qPH2tl_W6_cC^_7lT2Tv0#x%TqdX6<}o59s?
z3TV#3wB|}WY6|wVaWngyt*ZDQo5#FZ?XO&HY?<l{lsWz`di=g+ndStnE)Dy{%>(K!
zu4($B$>>bgd7#XjG-|1uGM5+~`UpPx3iTF4dN9ylbwD>$vfVtZ8wk(%Ee_>6+xqfU
zIuw?J7zl4a&@`P>%vTjL^J&w7tz%U=j+d$|CeBuVY&-O47_s5q2dz3K*UnC#-^R;m
z=SRiLZpD{;;It%^G3BS`=@kN_UW_@<xam(ISs`C3I}A?NoXn}lm2v*v!U;@Ra4hrR
zt^Amvy7i<*6o$MQP}ekVb%j`L@7OMl8mx{YMVi9GuB3x()l{7K1&b)@0IeB1tsi{;
zJXn_j(FUl|XqJU9K3kfQ3^nR3X}CSo^}KmJTMB(Q%5y+CPA0%-p`s?TY+AJ@lIo=A
zwD6c|09NFG%sK7rW{+rz6wMg;xbjHtfn}b@C3A6n9|<^ef>r*rtq{A1!3muURLUTX
zJbF}82>U@-UjnKAaqu^1oMV)q9}nnGatdxnu8`gC#il1PO{Zd8&8Q<Kih|^SiwyN@
ze9zw8qZ94n0m<mPPQP)#i3lN-9rNZ#cDNAf&##7W6y|-UjLyCDqQo{e<Qj|D2`v?+
z?121w<hLnw#OFs$<S5l|h_9WEumxZ=;8ubb)|Vj*<$JK((pmP1X+IsggPKiKbjF*w
z@n4rD0e6b&-om6TT6)EzU?h@lZ58YVtqQ#Y?=4?3`fWCgHJ7^4(m?l$pd6G@mDORx
zX^+y($T4!jyT^)S$kth#gB;UT=}um?)oNTS{&7m0Ug92DxOBj=q<#J$?cOROPoWPa
z06+ph007SaO$R&ws#@I)^$i{V6JBzqY5Qk`4e9$@U$CrK^}OPq?CdC5k#to@$z@K*
zE#9U(%Md~*QtzRlC1TNwoe%g6@hkL;l%1L6$>^f_Y;PM#C%#73iG#!(kB?c{JLg4?
z{WGN@x<So;74o1wrA29{p<%+g<a&Z7W2&YCzQ9C@vA9yqL?-3(BgQ(%q~4QFy@+6r
z0_96p^~h*=HLkQ=Vf-<y3h_d$EY>=zLraKzkIRHpovSZ2@5zThvrGL`EH6qN(R*&3
z$GFo3hyCUI%K9}YkV!+mDB~>Fpc)Bw0X2~;i1QEe^Eutt?Y-En1+mLUQteUWIEc17
z>_N<PuaDso5)PEZePV=el1$Tzl#h*Q`PnO#3FVA4nbZ;+QNHmjAQk<Z)~QRPMzmyp
z-p`<0kRk|u9yqE$dL6&&QMCmNGS60TjY_8V<`b!X(&%*7R0~qv+8T4YC5o#@4tr*G
zW`%)dy&dZ{iD7*iwZhm${k+aZg-S#E)rLdU*in;pf%>L9E%aV@i!7W{yhTO@=V@UR
z{5w`-^t>4{06<{-CYug-5h|Z*F@qE9N-HY48>B3A-i@{9cI$UEmVB?X_oTIENqy8H
zE(Y<EA|T&*a-uKfYDbj`<f-SBwM{5^N|s82Mg5YZnrxqQxroqKgQk<~-9jb%82rgU
z{kk+y@v>*Lv9*s%d}I;A82iSWB_qBayO#L)*!hYy^@v5z?{chPq($!PWU`>iA${WE
zaA>VV9bRU)DQkxhP-ar8l|L$7`V;EwbO02=WD>w05g42TVEB^y`GTH*fZuz8o#>xv
zq0LF^t3BJqU`84tpwGJ{-QF}AllCqw6n9F1prkI~$1|oMR%LIjm-L|k4<nJ_32(dd
zC>Nq0zwtO29qX&9ha{0j1d`_9PCQEaP4fY*#tZM|NcaYDyrDA*=qU|gk%J~kglB6E
zJA#6xDHx7DeSmvC2!=Jq&_#Q>oo7z3xT1A}y{oC{GoUX<jfu7W3ZU<gk9l0Dcv*g%
zc$KG#^M)D`sA&y6i1&v%(^57tS4A_-4t7_mH59QxC0h{2vs$(|1I(B7C*!&oz45v*
zr%P`T8^>vvB?kmIdF*roj7~E=Q3td6{hzO6+72=MsnQ*0afy)_W}<eXfP0!}I{Iy0
zPqA3LYxFHWiZGnA5VGE)$9!Cd8U}!+ub9Ax_|t;U{q%c9G9iYyKuuAEe=$a4j|WRj
zq;+sss9ob>zzuO4mRIRC{eThGZIhq?=Hx_;qj)`OM+Gt%*tF<><mJ`9If?=GjRbEs
zTd|9AlmR~f2%9$&w?7ONo#F>t@?89I)N?rb+;ST(iV7BjB5O&o_q<X>l(0eE=^AzC
zsYEl}I8~Ac`I|NX0mLAiI<t-XS!mP{3eQ)C9ZFKcdS3RD4-eTh3~&og)&0aiAj4{|
z0s^&*m}<3frth~H-J1|Luw%oEjtpvwCG-2%6Rfi-K{ueU8!e+X-P@`XO~72+esVbY
zFps~%tN+--alv`~>my3CUlp>_!Ofp5XX<a%P(_U~hyr_VF@;|PgTh7slp#fy_vClb
zTdZ-rsAl%9>tx@(X{3@K6|%5)Tf9&e)WhGy|0S+4hvs5uyH`@3^+x6PRxi)aW=mbT
zW-;X%UIX{4)KkG5TcEgH&9<6{y#{VvUJj50>ZHUi;htb10WWl`9=i{dUehp;%21G8
zkY=kv&uf|R50buO1w~Ev-VI~|uMwmmasc@bvfbHaJP0hRyU>H!71I9X06uSjOGhy`
zlL_dw?$*D?kQ|*V?v8Hn1~s7xkl@k_Q+5CuAE1(&=b?w0z@mSHt4!RI7I^0?+A7|H
zr2ymv5P+$d*F!ycH-H>m`cmGU9#c(4w->@afaIeE7aIUiB-1(*kPKfUvNmHw)LvFt
zf*&)92IlJ_Y<l)8Lrw$j1hWbquYvhpc3Acj9v>2`W0^|-3FFxW^Sv<P<5O@*Z~Hpx
zIkqTn4d+#5ZqC`BxuX=aV7%#i@OeRu%DgLv2*Vzxph%|a^D(9J(IOzJ1cfmO8CYcJ
zTVM@190&j$TYW_!9G^VJpamMK>$>!2*%cli<s_fxe#Tox6+>{5S5SU!Kqxo`-Q|u`
z0kez9v`-d@VXU0yD+m;|13;5g46lUW$J;uZlUA5^)!Po?Sy5_Hpa(Q$aVT$uP&R;L
zFmFB5s=QS@RE^qD6jeQ&LdX}^cO&C)usWH1vva8Z+Pr?{yr$gV+xf!ZwRiHBA9Jk&
zTnMJ}d^D2m>Z^;K(+1{9o1Q%;AOc5Py9!r4nt62yHGD!N=2U6^d1}3#8AANP0TT`O
zPG3wo;cEuRTzy5X0Z#NCHVvgQ?Rywdm-ni?(12BC>Z!un1$w@i>G_=+YGT*;3Z{*2
zUpn@D`7{ORagYG^ggzu7t1E69g;14Nt-h<1U$9HXlO&_quMU{J$O<Oz>H&cCAa{6@
zlkYM(e7&>tMp=FZD&Ie<2uI*09R`<=Zmg0_Dzl~HHu~dNbo0<@kXOsCy6KM#qi&lh
z6a)o>`|m38$VhzTQ_D<WScNNLD0OcY`*C0^WbI2%N^dpWfWryhFeK>Pvi-&X^f&**
z!NGoSleYs`q|w`Lz7AG2tuXxFzjP%wPYms%Nn95sG-~6JVK#o19Hc|@LJ|X@n!9YS
zJeFxzZyjaXVgFEu`LS1rV16tz&Hz8{*WJV1E#|XVW%qonEoA^dP1C+qopjmX0B<mO
z%ro54NGsTLvu_h!+-cODQb*X=+-OU&36e;<jmRwgHoA^OJ#I>tbY0&)lfkt|0H&S{
zCI(3=wn*z=^6V>hI>m-ip63@FUGNcMYV;MEw?Z%5$09)~{wP(|-6xNJPEB4iJ$^Ni
z6qZwiXzq2nBwk0l0afXyrgPC+7TLaQET*J;R?ZgAFy!OisnwHveg`%AR$U)JuF(s$
z!s5A0ui3MNBi|vzdDS?^H@<t6&SnPsB2h^&$LoRMa6!QJ#k!Pc5k9nLCs}NwOD`W<
zbtNrHqc-uef)7oJ72xG<{_3EG$uq1s5-;hB0ko8z4BQ+oZ_@i)An3XJC8<dfY?xTF
zsg-4hUvKar62~9a!dwcj8XkYk)A7*}n~WcDCXuhlh2=2*?}LR<aJ_~eWU-P7_Moi|
zBLv$)T{8RH{f3RN&NK_YZ}$CyH$Gf&@Ew1Bfx#c9{CP2@A=bZmk8-m0h$?2aH^X6M
z>7JFnpzA%r|9t~9BfyD)`n`c2fdBt>ZN|=Szg=6g%2m{_O6M!Lv~?0mh9LHXR4PxX
zE(*1sZlk_738`eP2$ww@k~wji>iY@MM<jP}jKp$&v7#zah`jA()A^d$8BwUvbvQJL
zRgq&DN|@*si%e=4){hKOJj$-DK;%7svzJI7KhTGc$!CJ9u!32HXKF>JKSdw}6tHu*
z4T>f}FtRRqZq^!3xJu%}BY5TNz$F#&Up6-h6B3JZ5;OevToOaJ0bvMDbP5zp&-*`u
zl=yhVCaE)^ij|gk4L^mBn0nK%@4~>La#PJc6EF5w{E&gZN849Bo@@bpoGD;{HRxJn
z_)G9FY|v+pT5<#PQD6?>M?!Oly}qNjqb6|r;L3;HeIzhrm14ffOV^pWK0kdjq8TUG
zCW;{?wJAJxV2E*)kYSF*UQk^nS=a<Arq9ps!tvFaNp@R`d7}gY3?(sD46cNtNcBci
zns)?@H@Zi?0a)`Q8f6~QG<-TYLtUbPG%+i(<lD)fw(GtX`|Q`GgVpl7Ej8DNe44M3
zdhH4|vi=iHLpb7%B&K=s_WTf0p5=$LLLJgBbzaHTQBWE}%lT+=1RUgF3K#ENfw_yB
zK5LK{Lb?^8uSGyJ*)hUM==}OQTEbs4DcCB}QV620+YWpR=Y=AfthaTY7{?f0elWd&
zhFlzf=3G;12sFNg5b1aH27uN5=56R`=?R)Ye_Y>BP@Djo#`;;bAv+`bB2#)EmLKc2
z3M?)4J=3xzi~m@YRc_1~5it?fqPriashgYmAW5vN`4CsJ%^**$2<^?x$(~G624o<?
z4x&=w<?EsGC{{V9JW~?8jQH40iB^x67>UfHkxOu^5`BXXp!-#X=m|R<&7DErOV+Zc
zMMDDVrX`-y{saw8PQqh)U-($du7^aAy+O9+h{#xRZErTBWxX!+zzVdxfNBXxbJOF+
zpqhxCBBsPW2TeXz2HQ3)8Hsm`%=c*jO|S{BigB<CnB$-QfWCvgQe393Uyz6O4u8CV
zhnTu3_E*o4#6j@iVe+DwFnN_(0QWcRQUBsE=>I-L*VJ1xufK#1|8H{S|G4?MSlXKY
zMow9p{)e=wR_(J}WI*UTp%&Yl)wRr2qLZMG0y)P-z^SBqB5SBFH`abGDz5N40)7?g
z4vD-X(Q6j17Aab?yJTm!-^TWysOMpAS&yEk0s)lr0%{0V7Tk}H&*1sxYiBXHIl>@#
z?pHCkf_7(0QY&arq4o~K?FH(E|Hu`9H@wBc_Vq)NCkcV}b2^@+s%oZ)*147ht0BN4
z5^!7N$lf@nURN!q9&DRS&s*dxor;}{WkC7=MTS+)wp4sW<gTNSDj2do)R@^s1HCmC
z_P>~YSVM8@hRVzdA-1s=yoglWtdrZ0IJTQY04G;i_bW6}u8AVW=?+(8YlP#ld!Saj
zVTsw-nS`NB;8Be~;o+Pu>2CZ6hzSm^mGA)Q@&5)QJ(a+O#j|t}d67~jbZMRm&aGy`
zG7dJF6TFx9>Xk!!QH@0zXxR*6V}U|S2^$f8e<4k_=HT{^(9!f*YT>v&d`5mipl78S
zUlnZorEq?nFc0)hRaP8gEq)}~+7V{2a>R9BFL?-(ZdDq@4?MDpujI3s0h(!wam&88
za2cc2(V(?K^&_nN49!04iG+og;{WK=q$<-ui`~NM&8&rm8<M#G;iS38PQpjQ(g;-^
zm?I~C5qF01db76dd&wLy(cjR{VM$pG$5}ren0C-AG)-L3bRs>XGNe6sGc>=BoP$(&
z4E6CPe!c7^IEMyJUy^+iQ>HjNOqzZK4va!qzjfn`K+<z#*&B$yThSXPB*<-p#FEDR
zlAtVXQ1Y?*mZnr`)sI5=9QAxWw*wt1H)(#|oOj%`?a=SjHhKEjQHk0q`BqwtZrbCN
zKG(dz5_^@?%SL2uMC~WKWpI@PQ`<rZUwe$E>-zzc#?`SyZa7k^f14ca%52@%@OkMM
z?cx8X2m8XlGp2Lq#|5+}G?D89rp6ou?gGvn=K{y*g`ObB7;F-ZkaqxK`gd$1$vP_#
z1}Qtknv|GX<XAo+_Sy9B;b@X63r+B)#8mHG352IaM%YgXh3(z{ffY13S7Iprj*fTo
z|4)k3-O1AB{|#u<{<YU-OZf5U162=nRGMGFGmp2~9K~?Bl-=K0y<0QBESw{+C3RzW
zCsC{%;bCI${cgfHsLN%@J*<c-5;-@VIdp14HvoT*$*7{@tI&9=EZ~9&+EK4ZjA^J>
ziY&8^XUbu@7h+qfQoO7zwO{M$`T9oP7?W9?Ab^OAGtsN4F!ZlcHO!?p%v~2Eqe7*$
zf1RsQ;-vO;9z9G+|6aMhlX$T)jhARbQI`c3rgNTCVJfHHV@^)BC7w@h_ssZJ?Q_N5
zc)a0+>GoovRvnaU4wIO}@}zI-YH!<8H?V9&hgNF!nngfU(jADDQ)T0I#J81+l8RnU
zoNoMyi&LsI=Hy4O+gi{l$@kTRCBv#aAg{8kSV9cOUp==MA*7O97vy#E^1REMi#ZQd
zuN7vrUnQ4Gj#UAj(IC#0spYbMnIKMhWa&6uVYRkSJMU;Pzf@uae<oLJ>B#OhY69|P
zJxDgV+4gbQdB`>}%oi|n3OEy$=Ei=PJ_vFGrCXrG$@NzVC5S39E8S8_{X$9YY<9`_
z)o7MQ!mMcpkutEgGN^EqKmvpR_V^^=_xqc}`}*8B0dD_;BH|_Kv;r@9vE&`b-|B#X
ze4wx3aJnFht4o^EOtnha%4ocUw?i;v8!#^kwVG1P%<bf1lem0CikBzXM~FCG?jhJU
zJg+W{z0y@-o5v_;+ElPmpgkd_cMAg2f82W?RKI1$1nFYF9>hqVm#lHcGUQ*UUfUxO
z;m@L&oKi<&onCG<<d(kQx<NjXn3yPT2BBC~zxr=gtsLgP`?&UdXl|6IX{0s&><UR9
z`apDCXtlv!FF01uA^nclrjd+++-hulc6q6a6QY*gIK78Iq94xNORdQ$-@QR>WneD#
zvlw;l$+6G*Ryypj4q{z6%ivVtO8C=x^wib7!fYcES#&!hkExY-;WbGPoQt@$o7-Q5
zdvvM(y^^lINP|cqJ020%j={(y+vQQD>G|S{X;D>ebjzk_@!V-7segu1jSML6V6dF2
zq9cHXss(g{jUioz+^UA^HCQ@-I_R`K`IUJ)pvPP@KLrQFxNvY}M*0HI&3xrdBCS~%
z@-C}mc})a+>U)WGj!$m6K`PNjm9bSLsWsW_xJv&V8!T5;BQ<ttpm8e>y+0UuC}?!j
z&&j7H)^6G@q1q|sW7)P^C=VZ&BR(_1K!w`$0af95U>R=piC>QRf1-ZZsjwLMa~YkL
z=#TUJ##z2or;LNZpU9q61<~59fvys0nAaNh6&^)$zAsWMTevJ<xx}wHdo^L37z8ld
zW1}vN=<&muQ=Jzjps4Ejm97!iFe0>?EbbyTZg|L;VC(kN8F?i6;>0%vJtRJmJ(@u`
zk4B3Oa@J}#oMY>bqZv_6^3~{$*UaTlE`esTM4jT*tz6GW%jj58dUJek%Y^AB>ZDg(
zVA5?JIow6_+GGdNa?ZfRMXy}fgzC%AdtU*+g;Q;(ya}}0;Yi>qKF0#5L&}3%6=6ZT
zd4cg1w}YrVaptjC2dBqaW~+s}(R&<WVfa1A{0Nctw|Lt)O3a!A3WBkrwfoTseeQCy
z^&|QcTu<>#dnBTM<fF9ABp$oTNQJI45I5Z1kvvZ&-rsk+xHHjjJwe}o8-bhGIl_l;
z@D#~0rQ7pDyJzB_$D~p?;}R!?wW>p>nPT?;L<EuZ7)YEZ1wUfXTxcS|DTTFmhKCd<
zAWWkv+nE^-{JAi3VF8YRH(W$EhIrXj+u<P-+hh`qnaasm0jMyV8KUnHoB8)dfMBup
z2QFC?6(Nnhl-}|}EZ@z}&h^4JyqT8mGJ@X-3ye!(3Yh6~q~{x$h&`YJW)Yk&CV96X
z;md^xtNTSM)bH)$fL;w7{*XI+T_L!cgMQHz(PbauaR?%#adzDR3*c4G1f&&W;9Wv7
zTA;l01L|V!H`<T<8LJLu#En^DbbKw$ccL;WhGS1NthSyL07YK)&K~yIB93J+Sq;WW
z0pKc?24&(a0aBm>W)hPD5LlEtXP9r8$?Iadj-*j7T(L(?i?zAnQ<+G&por_TjS67a
z5t!2+qFWPD4u0Lt{ZkY{G=~6VVjM_+JtQYy{8D`(>X|&4pDzyg^5t%-vB{@<eG`mW
zkzX?WSzNe|Rj4x7xVSfeMx;lS>!*;nfL3Osvr2fX2Y?<_v6}M>W!Fiu1vT%UEB-#o
zsnP;MzXvfYk6I05+Mf|%`5glI!aF<T5Waba`rqV-zKg}=VOgnM_j&r`C@QD$*2gDy
zx86@Tc5CiwJVUDMuv~k>f-cO^B0i6C5thixeJWaksWYxnGvr$3Gzmpuc<eQjhq4>M
zi0!Cmc9~RZaVPprBZBV39vL)S`bUeCKfnqw<%SvyEK7sC2G^!u;=;X?e#CF`j`J`a
z%**5<BZ)cNoSe1<@e_zuhDNFhw`pzU`eL3`DpW*pvmEMg1>4Fr?}`06*jl*J%leu#
zscL*wb~B3G*Us)^TPZ$mCjWdN!u0O%_WS~W^?kmCj~{p&J5!*0<L7l<K@CC=F$MYC
zog;E-{Crx3jffJrx7!;nWP(7oUT_C~8-nO+Q+A=375|JilZ4jaj{|Bzi#9_*X~poQ
zgSM@5CNexIn}B}VfczS{IuO1U6N{PvW9(meK3EoUghiWNhBg@syvjty(p7>4iCU^_
z0tiMrN6}6Ni7LS%fS%raSgT=D^$403BgAS^p1pJnW4z9)EIFT|(LaYuiB{s&f~>LQ
zKyEghiydhRXYl%0=iY~!FbCLZF_d5$BJXs(B0X69bza#`SSRhlnj=$kxupL#7Mk0=
za>;^&HMC$GIOliB)F$gm9zb4A=;rR`Ch!S!7<ayI=gG-;rO0E#G`NiuY6cGI6OIdh
z*8Wd#Oof;4M!XHdg?NU5>_WttVH>i^JA=-z3DY!M?Cu=6!rWKOt#0IypSPHa;)IGn
zQ5H}o07g`e1-+90i-BLyy-S(2S6s2|Wi{oFC-+6&rlmdj?9_DW#S6(d&goV8g_l}(
z;p?5f|4J}?LRs4qyjoO0PDj)xFq8YV7p<4ZAm#?z;mE+B<gGo$h>_y5vfV9;Bdoia
zdT|IVtx~t&r<ei^aUUBX*&eiV9Hbu*E`u|25>Ly=Sl$h)Gt=UdB*{GHQhpu;B9k-d
zl)4ey+7W^?L4urVlv&wa@90IIj3RL-&c_4+a|}AeOi&WkASo>yKYJp1OePtGona+G
z{rKx?G#H|gt{vNiliKFyaoIKKHi#03Jkuty*oWJC2)<5bitQe<)cFTYw<XfKbf$HW
z<INBo+%vwQPK3qh;U>1v#~7Qw8YHmRMH;uM*PG<L`A<lrji;xx2Y<$^2YTp`{O(2j
zdul+)YCygvL4ReGJkIc5BT-eugpS&#vt7<OHv^GaDc;|;0gr}k7pmFkQ;VzsMP-~b
zOv))tH^XU2W}(yNQ!SvA4b7rET1i=YI%|<+oV7qUl10~1TP@ZWdv*i0d?;P!UM=6!
z7*mAEx2Y8}>)`_hPqL#}TjyqseqBMDH6p0oZSGcNdJ(?uJL*P%qJeH5H$xXv>Gd0m
zs_6)}tpc={9?|4Tk#wM!b(3)W+-DR2&9BZxe-~pBg{48}Y(CTN9qf`~74&CEAUo7{
z=)!E%%Dk~w;g#%`E;ke&I8)V!xtk1MgmZj5?#L&|->IXt`KibcOzy7a`iId2aXbX3
zj23(N^n;=Nkq={4+%&Lz#%pNt_iB5PBc0R3Z7X|5U`McUGl%ELti1FO%wWrewX~XD
zwTA7AWmC8mTwEu3?P|Mvf+|J&HE1^W;^0RFsc`9|i-++VG4<eZEFS_<X#@_Feh$f5
zIWwCyFbB_O$e+jutX|>R9L8={!-y0<)apN*BE*hl^E&C>n5`0AY}ZRfU+H9JTu+om
zP(GQF0NNali5Y&q9*{XfKgHdwHI$dbwRRh{p7_EX;^$j~f%$owP5%7h1T`x#GqM)a
z%X9@#n09880=E7<@Ae*$qPSg#xBxy|HzW{b>y%?ee%V;r>EZN_hJvhUrT|bT^pmX#
zRODYyWty3K5X{LemCjikdDqDxr$PtA4)(MRJRVe}6O(^@&hp!yg|Y5rzKRu?5&u`E
zpNbvsP=l@IUMTf^DuT~Mv=Et@{;8Nt?zw!_c_WeYvACWQHoV34K8ebviXIC?nCG77
z1TlHcRp2H4M9G?VbIP*1LIP*zVK=$w@$1_FfNo)sd{T{I7Q|(&Wnf|AwHgC;axt}g
z?zBO60;F!&C=$a331Ir_3S4SYx)y;Up3^lnC=*#v(&-&A=DYS(1q^&hzL}TOEq8^P
z_LwM`3c*5m`67|UoVS2Z-*+$3B{JfZM%d(u`Gvc%=|%f}cilX_bf=!ZR6qM0t0d}%
zi-<IsKy6mGJ0;kcJXz;rf0=!QrC29ZUXNUQ<YIONX!p;l0&*<Z>VW?W{-aln3sYLp
zh?emG;p-iPWQ*D@-Lh@lwr$(B%eKACwr$&X)h^q%ZTr@_r~5{KC*pQSWd2(#|IA!-
z=6J_=296cUsUR<Jbn8*fcv~USc4?6I4T!gNP6V&<uwpd~(2Pp`NOUV)Y73FNdyloN
zxh_KM^}j9NZnLC|Se?Dys6B{ov8=_kn8R@2Vg1V-*Q9@P_6TbEJeK{_Lr(!Z0!@M8
z)dPJrh_7h6QayQ;q6^2o-~OwWv+>S}gdT<MwC4A7mmb&IQJgTu9Twn)=;+a9g3xU$
zo(`VlJNhSy{h)wN%>mbk1(=V;I<a_8+i$zEh%Nv8k6Z8Y_`*hSu0z8<fqNi)ZN;l^
zo+RCqEp^c^gxQT<(1Bodd+*>(#n|T&CJfA6%7&2KVpl%cr_G~QA)uZF<Xl%%&mISz
zJzzjWPY^F@!uh~6$snq2{^k7%)RIwi&qeosImRY5O(dkwEH^xpf*>t<<x6di1uU?F
z5u80ZAqR6&{<kG~8y)~4ImVGiBQRu+U4sJM`{WgZ7TNn7@kw;%Ko4vnUX~Ob<t02?
z)@+_zG9M}$Tk5j)u8a_qt8hxkT7@MXh_Y+TuEJY-eAiEXI~DsC%Q0tKDb3WWU7N29
z=1l?b=ZJ!8lxx*v<+9Xq`M+1`^;R1ozTv=4yh@=EMXpUG$fw#-85i-}FbStessAa^
zzF#k)yFilhsyol!U_39`^o2ILR3W5d0J=2<n9nAwIGb&r=$E=ydL>zXywf_j;F)qu
z%%M#~-Za-ST#y0xt!<qkEJWmIe^29IW5}^DiFDn+`db0(b=G!rp)*y^k#&s_y+?o5
z@giL5ROd?@!V?W7tkM@+I)ygC1&7Ho>Z)GVJn`5_qtG5-c=#yF!gD(~-GA32Onalo
za=}+rKdxNeo{hFO%&exCc3en5pDyrqDGnF7I*ixe{W~wNpqMD}i3dC=l-HTwnRMh6
z-P9}luGT*MiXQklE7aWH(S>kRc@gafJfd#rXBj3>`&{i+&?4(fg6(cZ@qE#K_3qPM
zrUh{(>4mLABAa+~vSiR3&|cfZ?d|0SLU{JJa}W*hqWj*rvO7RGze{mTH^^g`ehvGI
zQI|@$^X&1u`)sqVAygLsUZ2hvb^!!qL5k*JK^B#;lUp(&1GJ?Jr1*EgSUbYZGa}f5
z4jl%`REecm3D}cu&9a<(s&VaW&kRG2;Q5&O;KcNDwA3VXnidbqdy~3G!pxL!Bu4hg
z!6bV@T`^~MP`AS=O3rmBh0PX-mt89{&>zYyr-sq>{_ZvdxI?UXm~fCw+Kmn<a%jUC
z8t<i#y4#|>_Z-Ek1I&1p+y}i-2ete&7VFEw>C^QFB8ul#xN*}_03$MC0s-R3$2TH$
zGzUPHNpDtl=~f30;IV&=Q3&ZH9-JzTtC@vya*QZ(yT`5lLWagkW@pfysZ)^Av6S8B
zCA#jl*-7-anO*4?`pc`Z6aB!JlRn<E-NyT3|4-%e*QNpRD_s7+FQVU1Lkn9Y3p;v~
z|Am3EH*owFE}iK0^ek*Gob~j6^-ExY|GWcg!I0Y~;O||2*;aV}|93Dna5DM5+FQ9l
zCi7SQd_X0Z%WJ@)Y7UhsXWPIpd)88ouLrL)wmxL+9P{xWafPs^N(SD&d+1`f<1x|9
z;eyf~1;{1<u>e7QoDO6F<EYwkZu>{WlV93GGf^<RaQWA7Pk83yhr*ntgWB_k3?Vy6
z`}6U>anHpxjUh_TWRgaRr*7Zpu3?lryG5xJjs8rAn=?3s4d+6kG_$IJqG207C8y=@
zP}EaCfKLv-yOE4Ru2ngN><$TL=-{>=`pwBTRvcU$A1lw7JHcf5!GKs%^;7{#j*~zw
z>@kdu!$@y|$X5tR;|O`I(C_g%kb&qiYxs>?!a%UYLKmpS{Sh@QdD3W!cWo5<SOFs+
zFTAO-uUKn;eHP3q7_L1OW)26+anaTMWxcV^42sD7ZFeSJ?CxpfMJk-&S*<Qz`wMSi
zpEe28i(+rW6MTK^t^@b3;L#7I;=MO(F2TvUW?d^mV}J?!Gh2m4b23+6$9+nu!s{g?
zo4(AkYTIQW4n%g$=;SG{nxWlceytBpsQLDc1)`qrxpo`oGnL@j6JJyV9Ms%7Qt{4}
zhDV|m@O?8Nn}DMvbCnETNvOqYYsGuJsQBgyG)A0aW3O=Y&+1d46RQQohOALjiI4Rk
zp!>?#|DlPOOk7eI{4Oon-w*@g|Npu${UzPoIsTUiJX)pym%H&_OGEht2yqXgoR`3+
zSVh*$O1;y9UNNXkA5C4Kc%!H@oal-8J@_jj#s<bZNo^0v{dlU&gV{)EG=pjiWwD7x
z33qR%b|+7BLaMNz1qNk@9nABlsW3y80Ccg-qz^6xa;kU~f>2R~dM&@uLaPUO`$-8?
z<KV`8%|X#IolwG{qAC&9>gh7{uCj9e*2^}A9*74tTN4iO8L*f4=SRrW7HA)ty%yl|
zLm1%iHGC~Vnj_F=5+Fi$zw7B0VFX)vG2t-Am4ZWksPzxPi;4qPlw848>(l$i@$oxx
z)o#4TIti%ZS{pl=gB_3fABJH0ruCUp3aVxG%&RBUOyMDEr^;xlejG1X?g<w+Gi4FK
z*qOwc@uGuz+02=zP@@T=+)5eZNetDhkbkZveOyM|Anh04K<GDskcW6Oqao>nknEbc
zg+Q!jp{{7;&C^{sfoxqNx{Omn4$P*3tHe=RXZba6fNIpzPyVkk&x(A(viM%|105u<
z1DJKzxzQ$pR#b{zhJwrHh(__|Gzk|%p*eiDPUI#R79h474$s1li1a{=-d+yrJET8U
zAojGYlE<L=bE(j2rY0oEWc77kZ&}M{wzApwBLbkabNeY=!66Y9u<r*+(9!wzfL9Kd
zfGyBg+*fY<G(PwdNbK0S!<>`PlY^(JlV6!#Z6WkZb)qj6;#xZv+;vvPMG;o_vN8!D
zkt1+UaItd4g51wyyzwOWTywcY*XC(*`AI;f<F9%}%<{f!zgZv6DpEJ+th1qQCQ1}*
zpBvm~O+0vxKx!lNwY;<rK+R4M{#5r=N5KuJ+oXLZSJ#fK?1+lIZOBC>!J&$Le#tBg
z&awnlx=jnxUj&2Q&XDrfSfl{?1{B#)3Nz~8!ruRU@J-8UfZ6;mZdWt_0Nnq}0=M`t
z18cL!e{-~6C?Spr9nU!|fKh@0K_z|_@_8~r<VR8n5Um1hLsBIIO1rEnAYKvrdFn?B
zUP&{F^Ob@XKqbJ=ma%j@pSO4w6ww*IE@Du6%<}SinfO=q3M#tM6zGbWqPU6z)ApDG
z^LmP;DhWAQ<}Sk^^=6fj-4}T!26k=bM*6pw?7zVLTS1)5e=gVW%=X(fUT;9zIVX&#
zy8!F59NJCsqYKhC)ftq})$YhGPqD{>HRJUxqI=c!L3n0zO+xV7IHv>5D=!&AhE*J=
zl(@SzXc`hMWpkX2@)u17cgHmM5|FIa(5SK3hsBzRB6LeP3JpAkFGmu1{&L+7`0pM}
zIkumMSi%4%^+P}OM4kalj()&rD@b0b4UTXj)?M3$u|W+JTRh8%ei=8)f&=A_QBxp|
z?unBpH3HA9W{HqHPEGaH&S51yau;$cGZwvwM|}-lv`LRRN|uS8@p=Bui<HQxV2kF+
zZsw%QqlqJ)3T9I=rfIpatT&nLx0A8zFq%+?`O8EJgFe;w;|~hmj&>>z1lhP2e(dmP
zfMh{8d;yoa+6qs<JxkpD0iNOvpaeHZpm_koEns9E^M(-qPlVsk%cyik5sAv-A#IgE
zuy>nL0HsD3r^QNFNQd;$-?~{|8oyvs{{m#qI1DLB(ISs&*fer6p|Nn&IwgS2%~p*U
z$)k!UIDj6sqj(l9nNEr>=oV-$m=(sAS%nNn!I;U(0sj<v=T@lW!~pn~Usy!CAsA}E
zRP98wjrt!-1LfDC_p(4J?56V{C*=00Tt~%Gf$0h%S!PwmIh4MN=m43S4?XI1`6c_R
zF`0<rLQ;P|EZLjOo<z@b06GyrI0N-UeU2A82K)RlTY-a=&Ad+=mP&nQCqg_1lc)l8
zG7Uhta-KNt!cxwEQz);s6$5vHNX|QN(-#^He)XjpSP+BeO>bi<z7~y^kLzDO8(~j)
zhp3g(P(fFZ3C}!rwlZvqB!8tWKQtR7%>I}Nh?K`$OuHVq))cqkBnJEqGm+knp$|wf
zL^r<7sOJez_K<>Q0E7hEufRKdOS{Kv>d5ASGpnw)2O5Ky5*&p5%tnkO^6#w!pkDJ|
zkE=9BfuV(EmxYsNsOnNbYsopi!c-*_P2ew0@1Fy3y-|@}`WocaN&Ts`%zaFD7s#pV
zb%WV~gKa}E2;v3l4OX=Bm{Re~mU-X9YNxI;(NO*EtHVh(HQMT5<P6H{44h>7xpJ3a
z7btt~Yb$Y?62Uup3Vs9@AB}7W-wXgU^4%8YbF=f-i!|brzu8ZZV;T@<;a-c3Vri23
zI&4q7gS-dgy;PckHB)okO1`pA`wsKfg}|qCd}gFf4@3Nr0eAg2G9U!nO>)Xw;PWWN
zaX1A@pCq>kXSHec=x?}~1)Atn-K`m7`0FXQq39!I1s8iB1?dE-rQTU9#~}>uBw{&2
zPqaWdPZRBe?3N$&;Uqxv4R?G~LJTXqw<`IaXENZUCRNcErYpG*$9|=Wf9>7ie+1ha
zh}}i4jn)wj28IGWkCNzh-?o>1H|QN@)Ih#5_?;`$G_qav!G?H>?g#Ai^E%M65jN6r
zotN4cdxyg28}LJR+MqbQ<DM_o(Pk#<hx8(e^5hhk3EE?N8rcD<>wZTyIlj5Qr2gs{
zz(%@xl^b5z+pyt=aJ!&7UDl5ck?Y>d=~w;emmEc#X9fGrXw*zdzc#o0BC@n$^_9(O
zrzvp}>rzBPnsv_y|BAalF`m`X(>m9kj`0S!>K-M|VP*tr#q#|eI&v{`i1>EhA4tCQ
zyyYF+RSc97VeFNnW0Qw27<^LnvhtR<M`g7umoB+VVPbS!J;d(|e9AtsB+$wQ_8@(q
z)VF9XD)Sfb$dY~1;`3UgQ?(JRD(~p;D_^gZdbec2hdP^HhVE4@BVFbN5+sSP>xY#H
zQC`a8jRoqZ&g(uMAv><Vu^#Cy%{mN{p=3QZaF5|FukiQR1N}V2?n0FC$Pw?PKlK8E
zl^2yj7eos?<&u89h}8UF;|gpX2-QAbu;<`>eSQvvO-fIFlMLKOq<zPIAA5?B2PS2u
z3p@w0Ne^y8ZrFYR|CB_G&s`0w&W!kg{(Q4jl?(&(^R#p7YZ&oaX3j-pf-^DC`2Jl5
z8NGf!mXr+SjR1V*N~3!1kDb;`JDj3Sj2OT5?N=N4@BcAsrHh$lMEgCQ`$GR;_bD@b
z_uqXgTWv04g9F9;MIGYFAS*$!MTbJVFPM&dl5PS{xHT!*fFXjG+|XE3V%&Ise#NKH
zXWvJ%mP9)S*-T0uzTP<3>pJ<mTf84bZ|6G@iw<LcQNt8sm}3H~P)kL51ji0@zglgW
zkpHKMBvOyn1-oDUYeZYaRI^p%g1j4_7UI*jiJFeO2ExlRL@lPN!t~!WORu819crpA
zToi)*SB>LmeCJn@4a`~sYBS}yo&lcBR8cr=9vpSDMfq+@^4`<u?T{;~p6MF&W2p*v
z_@^WwY+?#^IEhXAQj;MYwcR&e?N0a4MJ%=oL6?IZJ$mGpt@!d{)1L&X=EzdDRm%Y_
zOLTmKxX`+>${d@!S1A11Bz(Oe-;$NM-YTR;E$8aoeZ|9p^2rp;0L4Z!Q=V2CmWQ}$
zlhJ(~%noXGuaQfn;1L*|9$qPNk~?4|==xz2@qfm0mTH2oPF*fjNA&J7X^i8mK-eXq
zSvWaU4TFVWY<<L8J)P1f_VAl-FOZ8Afq(Jv5mL9wA)&cN76NIsTV=T5p%Lc0IRc*T
zapQ19ob$5?zIN@cV+LF5PQlg<uujB_iw+zo$N;DREpt^k<z$gwBd12c_tXl2zh0X^
zn5#eXO1IQ-aa;~4TGh#b=j6Tss4UN^p-)fG6o9yZUP9q*+E_iqD2xH9IDX-hAYUS$
zCediy#iuNwHIB8CE@@p(EcURi%w9L=h>ZXd=noiYd#MBnsuek!SBSuX?g`+RuQpKY
zoq7b?snGO7geq-}udA<{?br@VkD~t-xaKB@Qt`jf@4E5nAh)eecjM~{b^>(kp)!S#
z!chN^vTq*_r)7Fm#G%&7;eiE@L$QOo*^$fOu*9j9KDXJ&6Rz?u#<`4YuZ|ZdVybC2
z*Bcz+XzjN_WcB>akFAktBo>IM!zd9)Xl6yF{=(HLYLXFRTeO9O;R@09Q{zAoU+l{+
znB>bROixc;F89=iQz!KAG)Az~3!BIX4cvs=f<wPo?dqDnxj88-U`<5LBp%V4f(dpq
zq1bd@*^3cCP8Dif>^y(MO)B78N=_@Qd;ABXpjS&=2uRa?nzW2rBfUx_5LS4xR;CF6
zq`oGi@T$^W35%Z3?{}th?&o<(mp20UaVG&Pzzq<W4M4yY>!GGLGv2ChiXYiq0Gq>B
z!@8E{Sgaj3FkwlI;==iwl`S?g2uOVR!ef&9IseH)|McXT^Olz}4%G&}ePU5<dYSGw
zaB`o&6-6;8{mATbuu-O?@wl_%J15+^n&k$98gJCiJnN}Zi3^>G>oUE+rnv&BaZNT|
zZZ-Ey(J_RSG7viGXMWlmI(ekOiBv#E_3=Oi>cLnp@8pUH=2~str5nk+c1x|j_8#iv
z`Na0W0@(|Ze1`qcgYQLBq{Po}tXKEfzwv)L_&OW?*8`<l-Nx=0Ap0Bia4<3z&_x-N
ztv6)Yg|*S50bQpl+p4x&#%vN<6CqI~I9rue(9eAa4*B}`oq#LZtu6Usz>2Vuf0N_o
z{(|E{6f`Nn<IkR&WX7Z2PdUMoczgX+i8#n(5T{(81_MDDC`cm;g}5a1kOV02MCkI=
z3xE8jW<0req*9CALo-Epy8}eHRxH^**<@U$p?6PnNTknAYf%=cB0{5ByysML7QCDO
zj0i<3Dla@$+un2bq`F*cKNTcn@efsd)ugw*PP1dEU*CaGJ8S9$9YDDa8=xl)&dnIe
zxY~t}lW*I$wLfA!$xM)9-e@xjYK5lwylpZ^I>(@+C<0e67hwmGu$mr->gCa}RI{XQ
z6lZuOVzVkW>wRaHH_Dm5yPrU&Oo;*Bt%bwUFrFBV`^!CowBC-Cv0my{aQ@2BqcA<g
z?+c@UE;f6d3*mvwFI`}$KARFX5z2AQF-5da$LVp(VpM<3kP!2fmHB*VRYFoJng%${
zV$5lms|=wS0n5qa2pt2Il4VRySCm>}QtCQdED$U@*G5->5WCP76g$|?<k-(liW$p4
zEWeDEPE!g~7COgnr>n|BUngEvM+a}<K1T=vSalBA8di;S8KryzS3I(O%NXH-ra*E(
ze)koFm6@_p`tJc>1rMWh2xmFq`Qt{A;wAcPG8y)>kQ8BeS{5`#e;k~&q8^lCeSZhR
z61VbI-{l9f#nElGqiRIEifUKpF<hLd?1AHF{`*wRd4MHtwq%{*Ix%x&#0KHaE9!Dw
z)cW)DMw1tmJFD724-ee>^O5C5spI%mc@UGBwznp(GCsn7gK5k<NOooy#`;!<eq@L`
zT4|XS_lp*-Mu0n4YYtvLUs<m$Y$O+#SIsVtyiwn1Nu4X>?CPbB{R5O}iARe;c9~d4
zi!ZvCN3*Zd&2h2<j}mfxeslQA#!HGQ-LC~ESYh+=n3tOYZ*=FD&HN*Zv1|fTi%nn8
zVBkV_FsBift>s*}b(`qo32p5>a<d#!A`7B|SA6hjh=D$gbrg6g#5}Eic}rTUzY?qk
z2fHuk0ngrM8Nim%$nN>{#A09RDI*=Z*{;%R&4GH+bGU5L?snZbrPQ@Q2g)0QFxrzS
zcRtL-pjJ4Dck$p3CzZ0Jsl9~<KCdGgMZb^<?X7M|P4x=mIrYmsy(KL@_g&-2aKh8k
z;I9ueq9>#%XNLNSf2+Ecm#=xov2yh%U%0HS(UYWcgzpExesb-VORGewoM6p$a{v^s
zGwLEkC2CV_tfj{B+2Z9;zqSX5GxW{jyl8DT9uRys30ebc|5zzv!K^a7*uZr@fnt6E
zm0<AtIZX2X1(-P&A4-4t1(gmupj167Vo%^mKQeMDk^#HI#9qFHT*8J}gH$}*yy{sC
zc8Q6XUYad@nl@ctdwORVg<V;98cu}QEp!Q(j*eSyE;`8qcDf6haBb-NqW5dI?Fh8j
z`SABM{82Vvb&m@S3!b9}^rbL(l#_(Qll6$2HOcrm54~)q&SOSZxt2U+x$i(W++^CH
zokkAH-9w9!z5BWGqelSUX&-<5oGASMl#Ax}m8sHI^ROvl_!d4{0miOL;v??Nm*?l5
zBAI)H(s>O=*zLVnV<x=Ld$d>y4i05d=&=Y1Tm50KyFnh*o=|z;pFlLI_}!~dXN4pk
zPzo>;B9B8}3mMwu9`)43Lh&m|3b|&=X7P|-eAtCT0~Y)o*^pZD0ZoReDUjAyxsJlP
zt~GoxsOY3KC<fp5w|xUFhC_<J(qIrXJNcb^8nlIbLDtpNx@yN3Xw4ezfUn6aXMmHd
zL$c2Zf9X1S@q-)k*gIsm80iDXzwZ}%F9L@Z%w4R3_ND~2m}-KNRPE*I-6YUT6$8!W
zW4XHa9QSnav3#G1TiJiJK8^Xsb`0kupy4Lsm#tHYI__X82PFfOQ8G8ZSnext$X%31
z2aS6eS$&73L{072YZDEiLqlq4F?>h|v>W){lY^H5RZS4P)mVFV%e`V6lrz=>XVjXw
zu*vL8d*Y7~KH&dz=Q!9>j}ZTrO2mHO{|6A_mjm$|^VR!5Rc2)+CCBke>FG%~8M-l=
z37T@1(Mj50Zm%RQm74n^gJ^yp3%NKUX+4P|VKoK6I$<*qMPh1Np+a1uMnZ~Sl6F;T
zQPCji|B$M~l0mr2er@i=sQ=NL`M<yZzgshtH7;y7hLOH!N>>Mn0K%nI_Q`xv%F3*$
zs~wcM!?u8eu@R^pNv{~kOx#i<k_r0XmcS|AVNUwrNz6>?Nko<Xr7@08%ue`rCaGWs
zP-~g!An2_KS>HZ-ed8Nf&`FR@BrCJ5i_9$>&=Tsrri?|QmC%3tUFK~Jlt>LQ!1}c!
z5{k|`=Aw-)&N=5RkTNXksE*7nD_TMIJObEnEzuu)j+cggdn+7}X#@JaN1<}IG^NHG
zZ4v;b6&d7xP4xo%eDz-C6>&iN-Aug<VIqV&$)f_Zs&NAs>4uEoY1>gyGr>XV7_R<d
zCRp?wWH5_H!NKDcNH|xMZp}fy`Hv^4Bio<+7+z%WcJ?F<zOh3kuK`AId<E5WL6s`I
zn<eMm^JL`_fv^<I=A)Nw1l3u#7CIv8?sV~f9kB$b(bC(^M?TmaE?(ErQd<%*8;+i3
zLL0s%L_P#{6^Q1KMwq&Ze4t2FiG`C&d&s#5w@B6TgRa!Pk*zH>Nc7}28m1d#J^DmV
zuS_(yPGpK-*m&?uxk<mvKcYw1V5{&n$y-bx%|<Em_VRa=aV{lM(2@|>MVs6<k;iXv
zw@MnJ5-7;$nzh_3ZKB0`Eg%%KJyQ;idn9pbD4(Vvc6wovHpV|WsG^*X<AF38XJmwZ
zL#;fP=9Zj{+}~7CJ<}372aBvI2#eUY3*FS`*b>M$AQeD>n)0YCfcEdGueAjv%nfsd
zRyym<PVI}aRV|=5h~nNYQ4=zYkz^796TX21s|8(Yh`wfAngg=t4dGUzye3lfQt_K{
z!=P*`iB5F5pVA1hx9lcgw_n|dwN9_aBoUc8-7xuIFKCO=?Qy>XHb7hDKO6?F1`XxS
zIBT|!4Y@WB_Gi(?uuwmYO4v~Ujj_YCwe!E+Dw5ZqFy|ASQyu$+h@^8kDFh*_Ki>XC
z1j5#kuSY7V+u@eS4+8@q7#0s~8%iZ%Fg8m#(q{<$L#SdXC-Ab$80beP9z2<z)fvYt
zEdgIN76r2#tB*w`{x>0xP-!5Bkw7HrP)Q~2Bkpg)f@(icrd>iI1ut=|Ag|SF^pt6n
zq9O}I!|?-6y)&JQsoXzb6cpeXpoHpvLhZZ|zc8c<5@3jJ?wzj|rdIqRFXI+KP#Dt}
z9xMw_aND21LV2ugSWYcSLCei33PweS0vRK`H{S$t$?Pgg%tK8ffPz!zQ{25miwIoi
z!CiS&Hg966v}>2V+LUmSm{m1#rtl6`Z1kNK+`JU;%ypwpNlpxL>P|`!435yG=x&G{
z$j!9F%sZ0NzMC7(Za*BK)9{-nbl7tq_>fg|55o4ROBaoab~(KmI!{9#=+VyfXDO1d
z1g;)-P~skdq0D)xaxuDk@nVdu89I9UC!P?T9-jAx?~j<D&6hA8u++$BJ(Dv;17V(4
zfv05JW2j&lQi@$K68hI#*W5Q;!wFy848^DoWrH`)a=N^}?~@AkA5lvP7Q$^wN~5-|
zMSmE%v&hU|eJ#T3>2X9TtlxkWc9|z3+A*scQ#bPt%+3#6sdzTM6)8`HK|N*=VKcLT
zkENi<U?)ko($)tyJQiE2ZEp*Nq3rA9&F$QT?CL+dy1J#cbh`B9Y5=M|cDt2F@2DQM
z=GSJJ>epXNKkIJ9<}j<mdmsXAIM`Ins~6B4Sj*TLa|=Kk?KlyhTSU(V+gb?M54oAd
zQ2(gk(DslF5=5H(f<|A;QY@wHuPp5fk${sITz>0;^@VJc&v%ijF<2d6j5Yjmj|y71
z2lT>-*|HF?;o|Tq`xRp)9i(;V+X(C41)kj-zN=0{(v9&*Dkg?50k*qPOX$}Rz0-<H
zJ!01W;AQe=LjATeLucj<v#M6?$eIP}X7G$!*L7wB)D_I0)*KvwazfY+Dsn)9Gb>`a
z*|wSu7Nr2J&2e>YH3H4<>u?8dO>d%?vg0Z8yEgDY#b4a;f0MMX<*4281w6{PGCy1v
zF=7aYt{2-5OW5>_YzeUTgM<Y#qSmhOXT(ZB;5kBs?_H?68kT6F4rMcaEtOEYyP)Gf
zD7>a51DS#GbEYW*`LYB2ZP>;nvfEd6#BAme$S#}O`fYxe>pE;}<rIuW0MDDr4CJLt
zpH4U)ZPyEQZLz*$&<`7dnVNW32mXP3;QajAbvtmGB?dG6WRuy)!Y68kAonBhmCH?9
zAosu^Pgnw-(kSA;wWLMU6_`J*dZ@9Y?VT+!2%Ki3S-r9N4v|W;$`cg8qPel+FcyO8
zSXc?N&V%8@()lLk@5d|}hNXnz^_;^y=vv|W<HpEP8YXFFhV2JQ=|1*UFyZ+r3Oa)_
zvg>896}G{-=^Vpo?&t2$*45|mLTX%NYiv?*Mrcb5z>Bog_mMqS@AOa^Yc0>5$*%y0
zb5KIy(|Yqa;W7DIsi#<0zsy(_4-@0;rIh0p$biGp;Iu`5q}GAw=J{DHp0!;3e8D)t
zMRI4)1?N%CTDi^uvk$6sWGs!JV-Pc{zi~cu`R{CAF&tP!w2cod7_SurV2B{5K?8O;
z9Q$m2x9$ozIh+R`U1wo7Cp-78Tno@RbqKKB>c<cXj;I*?c4`5?KSddG&oPZJWFj?C
z60j_}8Nh-ZeJjT2|3Icyv@*LZq5uGli2g^O;D2xJ|IHrw{X4qFvyrkP=6LfN0e9T*
zHwb7p9KSpfHjX*Au2HWxA1}7X0Rz7%%n~}fD+EkHNtf#N*@Pc=X_WI|@SdQes^_pL
zL4M&x6S|Cvw57AOq`KsC5yCs;rJeeBVD0GQgl0@lR5LPxHX?yn^4>$~&-8_H;$o*g
zgS*xtw&F6XGQuBM(gMR5P1V!@GgRsO4t;sLod#c@k8@IObxEIr^J0C}84zTA07qST
zwK1t8NxHP3jMU_?Cz8tpz3;@SNbBaBVEoyI78y&#@^V)n1P0yurnHA7+5{C9ftAV$
zmu_Ph2kQHXJEY@^NTopmsE-GVEc7>`c1)cGOEJ`Vyl-*U!>AKR>Y)OZC8a^&o|?$0
z6-a$KH$pGXI;o^O-4tj<;FehauVgeLvq%p<^g135ZZlCjxk?j7=?<{4y^I+<R-oMF
zo_$t(Hu3wN9U4q=8ViTS!<#_+U5{=3I*Q0B(K$n%T4_X4DJ%g~-9-V7c=bSk%Sex@
z6UthBpRK0DB_`RLC*m4~pPIoglx9p#^7Pr>*8TSmnihfbEIb70OEXs@Pdp?Qn)!^0
zT;Cv3={OUeTA^kY(5E2v{m#nD6}!P$E5)T9z*1#JILwyr;&>z!_W%~Fx|LfB?(;1u
zRPkoLWA3#sI%N#J8U+hya$XUBHQ`Itx2`bIuOio>MW%FmMZ^jsR(tuQLS}tcH1<50
zWF67BCW#eIKI2|`H2T~C-I4;dj;m%YK4bN~m5wJU_XnCI>RHRRB8j+n^a@-AQvp*;
z(|5GNw+_E*U=3{S0`wLl4A2a8li>vr4S^})Rs(NZZ1BKVbvwGBBc_hOZcjRo*Hh4J
z26z$GSg~RoS8OVsK(5<m0z)`^xdk%c6g;q=Pv;+I^!(5%Yz6+njY$5S?!(u92bIQ6
zZ&<DXviEH7TMy_Ac!UbX|4icZSuq&pZA{^PrAubz&6Eea_`CjEGR#)RU&dDG@TCUk
zeFYVdiRE=04t0P9A`eM&x_iFu4<$~N?uggwb+-%c+WCBBhPEY{rS``5_&yJ42Pd?M
zj9;+yV%|5&owJ&6DcvHORt(us8_kL^ZvM-u4Z#L<1q{Me)l^)R);QS>^8UP#zm2WB
z=8+ZAtxVCo>FxKUNw|lTw@^F)WTHWXuCtQNSyVh!C(?mg$|xkkD?DMCnO8bvYZo5z
ztOUD!WL!P^BT@A#Xq?|)3}Tz(6*@+F$?&#`gJq$e&q$>`heN_Uoi;Rvb9V(_{rv#0
znIOJPY$)Wod>-SGaJ^}J&YmF%w~vl~K2wCL1#Pd`=WO4wyBiP7%LJ<TTCmF~0)wp|
z?Re4SxOj+)Hck!>^DoIUyY<U4>{_KTa4tp@kT^rd<p|uBF9BkTm9Q4Ggu&~mQvhLo
zP!aZdg&Z7MM5fE7o8xO3IsgnWElMGnz2KR*Fif|PEHR~l4bt2S^%wUS0~3IVL5v{%
zxjRZw+`PNe*Z8`P(v>`FhX3=?TSEMnsKd1%wnnxGTN0{^&TO6RlHSUae(57p1#Wnm
zVyECCvfjtYQbPC*Nc_{*4>~4xXOIjK5w@}&mkkK_d|O4z7obQrPaxQeo2kP!r!-8N
zY(ek;)4})$RrRWMYd6lYZmdTzl=!Zmbdm+m3tSo)1VD#+38;;d(^=4(gv3+6TF!C8
zD%#dH20JRd#nTM!nc#riJ|eMprV1#@V2rWMZxY~>vUVl8&<!@dS{;MsowQwx{}i9q
zMT6Dos(TJduvo<&cCW+JZ8NP)D?F>5AQcI_0R>%VgabtjUU1V15D{=;&TAnIXAb!=
z=pLyFBBD{4h&2GCX&-tom%oXo@03Lg&4NbijJ@RWY<EV+6M;M7uSJoNSucNqttO+f
z)E|+b$IEjJ?#B~x76vZIXO|`!1wybRL5PK<&g<{ctM|h7lqT2Jc;zfZG?^Jw<HNdU
zZUd`30v~sRF)QcA**>rWN0C{DaH&JaOPerTCxVat%gZp>K?8)8{-`BJ=Jp{LrXrSw
z8`6(;ucoTT$GgG{qV4{7*YdQ#%@p_V&i%~xdj}CGOOzDq4X>f7v2)x}^iuKOPi@j&
z!)|x4O5&?`JN5VxtYtcIO!Ne`<*AZGmOi+ASp99{#93%PVIg$G`m>6Fqf~`3NXS0K
zDorl*SVl-Lp+Z#x8(`Bdh1RzFB-TAQ*?OO3Jb^#cf-=zpoETW5E~9|S{{s33k4?UJ
zem$Fo;Pec&2706%K7wl?B*;n5^!;M7FR&GG#NElADT-7vY{gP98G#iZ`Bzoev#eo^
zqQHI~z=GKSgk~F!G^&As#Qo@@?RLf|;C|Xt|8Tq0BCkFkK{HumK)1Wfrkecee7-CF
zxm!nTi@x9-RE|p};L>n}gS;XuM+*B_`hYuQ=9Tx%fIDXgo?49)1Q9GoVs53-Mp7M?
zv<31L19;6UaoJ*M1;L|Km2KWwA#1-mOw>!Xj@QEs84+FJWTcLxY)C0<?#)tF{(3mK
zicJEN@Z3NnwbSX`K7xi&Sh+5*JNm{FAEo3p<`k9GbGz#AZs?M@d|!TBkT0pYL-yvu
zb`&2cJO=xC@to+W?XG_6oc_uHp52M4<@k-a82S&j;0GZJvq_)A_w*7P+2dmN=p^P(
zhIcM{4mJK>yF+Z`Q&^!}BRT`6z@N0OfU3W53bHlh%@|DMAqD#>c!9d+ntsKHp$&!Z
z+0}<l8N|XVhl~W-fBc9~NhGS9(0IpxI-A&p8i{pi#pEk|9By)0j+bBlz07R_Ll4|`
z7L$l0@uDv1Pp&p;)Ip+eBLfQ2t@Y%$=-s{H1OUCgE?w?&_8+@KW(McOHL+!|m>8?#
z+7(NAhVs%q@4_Zm=8o3pm)I8cWOjBk_Cv}<Bs*4R)U%8sk+%%bU<G2V$3vyE-2QmJ
zg8}I7zAm_NfSBKQ$x+G8de_6@8Oj*DX;jaHD8P9o=m-GDN6H^i2KJu9TXP@fK;i{T
za6lM$hSA1pgE;0-o6*Vv(!xrI9DaTc*~O|Nt`D1#&o`}3Z)5NU{(1XLxlg!pUnI8k
za~q|KKqn(^X$>z-p<Js(sP;XO6NgO(Dq}TQ)Wz;(9YqjOVDe|1*5ZAG-Xbu6B331G
zBkBz%zBD(<!}D7JlBWB&ssYLJV#Ej%g5tWq@ir4&@CWDh4EbcP|5X#i;Kx4|gE%Hy
zq*=5s2}jH;Z(lzeAzmDF^es>sW2i-cBhqFycYL>$R9cgufv(Bot9%m{P~geR1#tN|
z&{OOgL`BoLr;M=?oUoohUK|X!pPnHep|55ZN0Gd2X$`YI2nFXBg&MF?Y;NDJAcua<
zFuO#*#x@}f%9#t8FfXpVbZxs4WQJhpXbgNkw{ECGwb0$59EW=W5OyIwu_`{B_oqmD
zmTn4-zOP*I?%#qm2!4_8Khq`JTNiUXZ7qQLScmQUL6nnBPnIMgy7wgvw<&+k>Sjq<
za%`r5%3_L<@g_lL-A*GZ1hhy-p=nkO8LiQ3kw~#8B6uGl>#Pd;D#q|$#x8rzWCZ=2
zZlr~-Y1!@NiRT2m)I~~|To!;+#MzAv!YQn%H_?MVspb^eej@e*%60Gt7}IcsUMbZA
z;Ae}0a&vAd*1~D?vmG6q%@xXV4`~BP)H!hQXgS1XbK9Ez21RHqQo^@R)UHc|oMjid
zh&ngsqR6#iL$(Hx@0Y9Ju9Ixa@D|`l12i9K^F}<ZgCz(;M*1#(NFhm_q1~a)qf>Dy
zn6t3JkdX-3l|OMMVX9L(bLc@f2ixuN*OGf#wt6aQ$=~~Gw{~m=OwsWp4K9d^PmIrk
zzXqw0cdoIv>dK<tDQ3qpZiR003ldP`weu7YE;}79#doh<!NGEJ=5uI6n*MDu99GpG
zKL|v5B~)l0z1sNYa&cf{oV}@kN>xg5^Dp19MoAxLW(SSTJorROq&wq{?kxHbTB-{5
zf@GV{NhVy@i6vnIcgz;KuODE|D*8_6J2(~ETYD@yf5DX7SjkCHX9H2!H1$;<Kq5Cq
z@qibQx&Vc72zc&Uy3YHFy|mKgR-K`636_a+VKFn%gbL*sD&eqx+hv{qF#!e|FYCkY
zR<c!{Irz)3K2Z@1xajJ+Sg7;L?#pYG1DyHwrg|(c9Bt!6$ZSDKbOg2BKv96yO~yAo
zP<N3R@V2*e?6*0wC_x_nF?ST{nFguZAZO%uFpWT!AZ@f@B8CR52@lX)!(xb63)pOc
zMK-^Wt5rKapS+YMwk<%ILTk*t-q055nJ<J4SP`6U8WITbPOB5u>PwMUhG`hfEJ<lW
zBS;(J>wAy~j8L&Q&Zchk6T|cu26XZ;_5^Z;IcSIy=!KzdldH@_%8#6T1|4CbGKm^j
zEn&2rQhmk3aMA0FnQx<NL5Q^0!IE@<?I067hh`b@WK^RDZ0MOvsR5|!LEiVeytvJe
zTzP(}(ZN<cVo1<9Q>CnCK-*8cqFyGw1+V?LN1JUqMvupX<CW)j?)rx!^E0@EnPnS0
z3!Gl16h#n#^E8yBJwKtjVP~F{T_<v99X%uZer(>Znte|8rOCRqer2&dHw)19hs8CK
zS%?lBzTs3uuzE~K+pKOs{=qoZ&$9GcWx>5T%WRyQb!Y)G@^1pLpYLz0D#Ls9Y<K|k
zIFs)6UzV-0Kg%N&D!7$xW3<TzOi6t`#nw_nb)rP`ZAz`u8!<WtW>luh_g?Cd5+$Q-
zTq|m=lHD}R&Fx+1W;}XMb%>lY#Ks1VecWV{Rbt2uI5#0eLb?GRwy6au)7h%!6sVCP
zVq-oC=b{n^(J~0#XNfRy2FesQK@LO%V-o8KqX}W47|K}jr;Is9YfCuFGemx~OItBb
zRxoAj+|!eq^?<`-=9Pu#qm$EV+hf=q_C6Lm=9cI!++JOD#e_96wc4ZDDI=w=5|isw
zkFdMfpUcRbw;)@B^q?+^4=k23SH(rqF^(GIaNS`YDtA+|hwe$b85|@KadcvA>u1EH
zhUX0>k@@1>uc7ivLPpm`{|wKR=7O$If)CoS4}+ryV(tVD;z=HF1%+OecRdfdC1)8A
z8HsR2ig0kLSOR>waALj4F<GuD5WylhD`NuK_L@Ijy9=DKw~PfNgfz|aJ$?f>y~U~O
zMw>M3z*lDOiZAN9hZ#KR>cqsL9#R~(n{mmy^SXj~3)yCCQk2W9+hae82kslGMkdrt
zZ6D{cfy<crl#IuQ8xMToR0z1AYwDbj8)y(;JYY9!i%l3g``%$&<(_UN%d0uQ(BCNZ
zRXgMAj9jgC#Y_tySgnvGC=R3B3lTewKq_+Yf4bJf?M$<V3(%ZI;Ln+Riy<n{w7l%r
zq(K+NZN{bXapkDl=o$YQaSD!53C~Vyf8arduve=qKQiY8`(QK`y>o`vPDy!4sp~rs
zk8+##wlVpp{7YO0n!~s<aJS&>6Pw(eY#sPD;On3`+wNeIxNUbA51=wD>0Koci-N02
z(Fz)(>L%uuNuz~X?aUL%7ISNqY}?f5VWnX9bQD$Iux)%Xt;!pVY7m}k0ABGH>C~S9
zLkYFxox@HwJi^MwTbgpi02k^l#JGNqLvr&6*LD1QRO-<xp(S+YRt1h{+?GXldBME4
zBimwDHZCWX&D2gNtDB*6XS2CL!AZ(9vV>h%G&dm2CpB_fXG<Q?CBxYhmOZqA(Tv%!
z#Tk3M4sW*OC}t^+R)n^>l#4sNQCM`AVc~KVVcNa_#=hOEM8MFX$pg=1tq{aoKtwUX
zKrd=qe%NAiruWdmzO}efaIa=s^2p9rs2$@**SReJau8V<ksv<PK>i6~q=w^l;0D5^
zhN1$i(&riBow~JtTF*9u73$Ze8N&KFc<L10S;x9S^IF)a#grv)mLG`og0H&)u&TPJ
zcjL!9R)+Kl;Pz)ADCF#Oo0%OpVUMmFp(0>V!K9KMpE%1HT`KBp2fcH=Y1bRPu4g#q
z@Qer%^w9M^2OaL_gnERi6e-BF^D)Kt{5V5GHIpU!M_`_JDoiVOdxGYV=p+E=v5U-t
z`|fonm|s36;<=Qstf4?(o#wD>7?X?b$&#M~c;CaKG5yZQUv%rIM9-r4QoClu-Aq+E
zT5Ix77+6+}?(AJ)a+E#wfJh>%?j(B&5#jnJFNC3^8WK!RMDUNUsoTx^y%%~)QlHl`
zu+2Jm+u&(I6$N#)Q1tu?zxgSn`XXaGZhwjP<#qJ%97n#$p_%IAb+#tkYR%7+J<U*=
z^1UBeLbJT|$XrQTS5~@P9kk#x<qMfBM&70M9|ct#8y=j?S1Ql?Om4_no?F_;W>3hF
z145N086$aHv&UXD7H@ewr}80D71W6#s?Ky(WsU^r$}4<(BkB6W;+-6l4|%I<{9e-Y
zA^Xn`Z2`p{MhgpP$e+Y%VRRM3%pjM%Vyxh0Ittmyb3+!I%}MrdaNUJ}rIR=47+B5|
z?73aIxC|~#d^xR0Cq<TJ-~?I5LT22M?V5Y!5<O;g=!{fK63{kDqKj&{{c*xt)nW);
z4nS47cSe6+SC7A7KbvNL6eselD+wJJE`Zs&F(FsM<MI*<M!R%6`abkbp*ZXQk#Tu9
zS@guKQ%JucWV4IP=?dq9a=r-=+Z1lb;CZ+5o(gbkf)KN^ri<%Zdw>0KK&(9RK-l2z
z?-Gu99(p#VpFGfs>m`p(!McyjB(V#L?boM0B!pwoQ;bSKi?$~c$`uy^^<uKm>eHWw
zBWzlVLuQbSE69>=5%KPF(}MkL;&1}V4U7HZRTtcB9p!L}-hvIty`aqxFrX#Ee!=4B
zvj!NC-UZuf7!sMhdevy3Fxn%V)rxR`mWj!Tx$R%OMlsuEo2bC%k|=dpxEorlYM0!Y
zV_HauBVoS-6e1I_H}8qsM}S9sA6hF#2p}(9-PU0}ghe+44;#5#R%LkA`_BRA?_Bf$
zi_`ocjhK!mzmlut|2g0MpDCK&eodwR-_fMNZx{2gjQPKFIRERy|DH@vX>9$rXrlJ4
zC}%m^mGu>P(h7*;a!a7CUW2s+>Xw1IiNF<yQ^IjGH>oqg99F<1JYv4<e~|E+eM?9t
z9h9&m>Zf5%zkM8Y^B0mxE*DS+fed9PP`|!U^crl1cYu@&I6aN_TXX)gEF>`>h@udH
z9%v+yBtx#ZDrO>Zai8DnP;J=l&|ABZEIx$OGHq$r2-N#Q?Cn4|-H9+oUgmEW8x2`f
z^iYi4@4r$hSTzl{ZmRNF^*!p5BQx;EOqoA3W}@@}^&rh)BCmZ=DogUUP%LJMG`9+#
z+mbhUM!#4x1bXd%<r@u1H~7R@pXp-o)4I)7@rnexLPHg4cJ=3@eHVf%9I^<JucG7z
zVaqm+D9nsKG>a2pjb@2!VF)cU83Nw8y)>iE3=#=u<H~-1KPya|-84x0DsuR6lafqU
z8xwbS%LAZVV<im(Gi4Ss3}NhZ`bc;jMrF^o%*$R)cC(*Ir)rsPmX}G^htG4TLXVr0
z><2Zz2Aqc~zi&E%?FP&5XQZM}H*hM=aYeysqkvR!HWY0$ZsX5ZDk~yy_w!-2!bF-M
zbbE;;6tk$knBr*PEy#nuhw)ToYEQr|0m_DSFi(R*@t6UY@J!FFaWJ2|7QiG`1TUCn
zss<O2<7^i$L9(x9d;*HQNM1cmQtBPs#~xw2m}*UJ6<FUH*N<J_kic1l$pYRyDFTl)
z5<mR?6}!6FW$_vS%_)^=4n1f!F!8FEa8Nr9^rks;kp|`J6@aZ_F8X;kz_MEe=xt0B
z%;e~m*n%2Jz%{_PM%@o*45ikB|G?346PuB;LtFzztrM4s)&D!3K8h+J{3af&1{wJJ
z&ZbB6R*DK6F2oxB;x~s|`pmcQI!3*)6dp2Fkj)c(=^KU6J8Q`nV2=xrd+R2)_t^Oi
z+0nxkYq)5m`}@4LoO@-4qPG4Ah6<PxqY|cTE_>f&;aZ6b4;s6E>N&Py&$}fNaWjZy
zz*c7^S4W=GqbJcs-ANYIlf0=UMVc0m{muZf?rTJieb9k|LrcqhVM>b>>kv@OPU5a&
zwei?zci7Taz32Nr7f}A)fKXW{u?7i6K#f$FEMMqFg-)lHvZc#iW4k;?T*CE_jr+8;
zKOdrXt%1-<q39TNN#D4^VOMwF`yW@(H|ve$1<h$<qL#Q$;fc+#Bu<B1qiOKR<!jrx
zaEGCHmgu$|;A*LFQyb6OoJ@3hwZ~K<nJ1Kbk#lf(-k7fC&r65DNrIuzU%A7bd4LuI
zS<C)Wr$8QAq=>s(EbwgMU`d^RD|tOzHxi>QBOV*ojK0Tgq&?pkE5bp9%~y(+%uaqC
z6-?2io!$^-$>L0&k}t~)f7t-96A)bG<BQO+sI5V>m}{bF2oW}`$sSkHBm33(LybGZ
z&quB!TWGoftSD0blfJV;{|TL}13D^X!?O>qgHII0SL$KY7HHsW${u;fg4dKSJ`$e@
zIIM6?<dBP-`ckLD!>Es0&Rl5mZT)0Zj^7ShUZdNGT{ib{C^TJtXqcC!G2CKk+>?TP
zA`iJCnIZd!4`#q6n#$i^nt;p0jPUEx#y`JiC@!a0t=RK)<lyA6XJMyv>1Pi*e0%rt
z=6puR1>5?{h!)iPGQ+I&wqQP}uh2lX3+vUx2ZLISG_s^m{V6PlV#m<Gt+eBj9xsXn
z{tM93Wt$2~ik;8ECR;QJa<xESSiikYgSD7|NG{~-k+`)w$Ku-9-vwRH4Bikh5W{B6
z64hzP<at~JYOw|nT4cYO)RYK0Me&wd==`FCK9|O;Jtal*oPK(m5tYKQRheP)#{;9;
zIkHIz`EyRE`fi=%R=+ik^cQVtx<QIpI+Wb?PX(J_bbHy+7Y8>*U;r;&i_9&ReaF`=
zHOkAuCfHvUjJM8|sqGwPiEWa9t9fzl5s2;dPb=BSBJ7_RX<@MJc3+OjJuv2Xrayz?
zdhbry=p>V9btw(crq%@HUh*3W+<PpaMT{;78Kl=H27`qRAA7Obbb%N+^E+RMh(vv4
zj*p!}?rCBW`#J7~(D2~u9Q;pssm0nGPQq)1SAm|)WcD`D8VDS83M39ZqFlV>fk}FN
z);~3OUZPzdgS$DsZ(`>#xxoprWLvE_{JPygNqTzQI>#$Fc1V*r2ZlL4gBSVSLr%nz
zQ*k~)#w}?2|32k`Nqq8sDO@>(3reLwxzDh_=M6OX<F@8@9jazZq#W^qAXTE*xAzo^
zY)E^CsXi&veyVrR2fXtB&5qzK`4V=sjcx<*tundVOrR5D*vh8peAzQ};}cKMAzULg
zWymv#$X-7?gOI$tp|L4?)KB`W@1g>JHwE$M^3EskA9YXkMTBFCH!WqQgn+lNu*9W3
ziZq{Kqwd^Vty3ZdF4!yUVcba2U`{3bvQ$RzciqJptk_z0wG>*}V)CuIBAfuuJ7>v0
zD_KZW%GrijrbxmIU+W%Ui;fbW6B+dIZ6TOhZ@StJf7dT)cN)kM1FAMmxi0TJ7a3G*
zC|e&ucsnE1TqCn8{3hMI8Tg&8Sc2xsAKk&(KXY-Pg>eqo>AO*B3Qw8hhY8d;9L}yP
zog>0ThQU=+E{e_CgO7XcG~@lgi9S15-8gJRD4*q;0wI@o*gpVl)bX|p3|hkN_~F54
z|7Ux4LdMk=_Af5|zdW?R5wicW<=dDzn*CQ`wpw$;_OJ!BC%05T87P^}s9n+y2pCzv
z)nS&FZ6oi32t6@eK)Tmd;{qh1fp-h*R24t(6!}^5{f9>)N$kL79!ujA<}FwLb2Pl*
z)MZ6gyhH?$GnJ+q8Z3A=;w+`x<IDf+ZXkENQAs6le(Bt64b2-a0`<>B6~aAJrQmgb
zoAJ-vNH3;Yb6i7m6)iZ_vpoQ$dL{HTEu;aw5dONZS8#*_qzvwb6pNceoSHYlvQ#}f
zY%NOU1Mscw6c;4aA+MC5IITxbe3~-}@|bcxyplOA>_LPkv*xxd5K2Q>iQmX$ZG}ym
zf=mE8s}L9Ebvu}&b|A`Bj`uX2p>NqOzSg!>x7HR;+znhFbb!BF_%GUc;E0+Uo0O6k
zOTRt{dW{_x(h05(>{_s)%hJwHutGKVdu_EA(+-NI!uBRS2YzjD379{jeKd@c>H|tS
z)RMv&Hev|(QJU<GDxzSiBFSc|q3Y6wo^T?qjJpXpn7#T~t0`KmdJ{|Yf?xVJcQJpZ
zpuv%=h7q7ucl71eWtZ>1L#tX1G)aOC)p&Y0Ev*K|<{w>;X~zxKDjLy>RY}vPPBq4N
zezh+cOT7W3rKR%}BPvs)F>9)u=*O&atBr$98e_2hcya_Ysjp;8359i3eL0A(aT9`Y
zVk>BfBl1&6*DIA2Of?0pM+M7>xzh2$>Ha>ERF&rA${gHyVq8TH5?9KcyhMWu|M^y>
zp12jUU({cgjZFHLs;XCAo4CEs-mXrMkL#<C3uA;(ENXK@Vpan^yVV;p)kpQ^vdDmR
zDqSJ9=B~QI4SH8dHqeh(mi$yUYm@Gl6x-g-e0C-0`lYjH{{N@3vjB=C+Zr$qAvnPa
z!2$%A;O;g^Ai*U#6Wl$x`w-kcxFxu|ySqbzyTd=(ec8MvyRZIR)x}H|_v>@JXS(O!
zIrAO9qJ~`ip`0MaEz~?}0h>3POa$lU=c!ct%Ae?>1l0)2*`7bA!_ICWGPJcc+?cr%
z)Ob}Psq~tHks!PD&XLesIqgK`8=#E-SsqmA<Z<Ju)u#)oD%Q@swWztp>#qyVy!0<a
z+&Y6QuR;y&O7gPr-m6|A27DRD65&AW-Xf``YB!HivE`%R(J}a(BJt*o;b=BAVyY;l
z-euW3aH7yZ$)1EH=ZMBz3KGr;6&I`GwFKLfr!RG-toylH>(K!)hA*g@$>+67jRyAy
z5(>l3k!`FcV}|<Jh%2zaMx*1?hLbLEXki#v9%rIs49`eh9q_5-<eRqhEaBH&&q=Mn
z*%tJKMk)|>>-F^v8@G7HI6d*QGLKYjOJ2Z-drq@l-M2xt+OVHuAug}6v&SK1;o+q6
z)~R87dM%7o2MM39t5UJiYQ8em$GP!f9JmB4-IF^jeTTZ2tu?N-wIhGm1m5boY<2jw
z19Y6Il!@S)^y~9=!`Zy_-o4g)UjI$>9qlp;v}uHUy2$5aOWa(gveZ#H#Zy)xOfMVg
zV(K}fvL`E1o&&&2GT+1C7PmxnD6R7DLUjxuKIvy<j^+B3hp<9hqdr0Uq^iv<QN{uM
zdQBDuh{q6a=gFRgl{pI;W=!9=&YtL|!_*1mR&YBewvs{dV!;o4ZVG7X`-psgkH9K~
z9!}`e?q+q0hz|Hfu86ygJj3;orz(9BPX*J9rYf;N8IyGhx}cl*X`esGG_^o1n#%Gw
z69lX_A^l1+g(|Phax0-H<j<G8QErKL(x3NsK@^cqcjHy|8zXs(Kb><L5Ag$3(ye?c
z(_qxLr%^*G+)KVNgXX(TC(rL%zKORDaJH}w{f6KK<0U&Ex;4X?kEBN(B6Aed9Kfy|
z5gO}KF6XW}dx#(M^7#y-#90tdjl7$9kR-I9Cy(gmzK=|)34XE^hh}=ZNN375W8eDZ
zoOlqGx8DGEqPZCksEec1wS{8$VAF-z;Pc=M5%_(rC^BYo+D#)xOS9t|<XLBu*mE^d
zubQ+6N1Dtg3rW!dRrxf#<7VDK=&laqHn)p1@|Q$&D~C6e>_pkc1ELr?4iZsf?7~l{
z=!~mhm>W^c_wamf^t_B8&D0>9Qi05M>a+3)%<=DmL$T+T6=8Y75K7#;=`#wu9QOoj
zSwv{f(A;13pihCP967~m)0tq#hIm<g$rYG1`^_ANz-9&jgv*O-=d+Phr(KF~)iGtj
ze!UQia0oK_SO^DY9}Mu$mR8O>BR+XK>6>|kr}=a$4x+f0*8x@|1=EI8onKB;cY1Qj
zS<WCT!MX~MDUbTPR?+*y=Ouy7gs<308<cVlTA~Ff%C>5&u_40*<abN6m~WF49v=!^
zXb+rR5~7wzYrT-KhurBxk(-KkcOo;)2hh(GaLCm1-DlEQYP*tyPRx%XwJ01iyATFu
zx!GO(%9Du1gSUnmIQ*!-e0Jxb{chT%zw%l;UmgE-iW|u@X|+~z=cC*}+i<^+uA?j%
z#-#^(uPrS&iFP+NyZA#!REjvx!#!y#p?DIVK9IJUlVnD634=WSjD@(L2O0I`1w)6S
zdk<Too4+U3Kxmbhk+|+OAA(gJNfnzpP`lMDUBd`N8OZSnd5LR`Ymg*KsRbo>LQuaw
zQU_#f=f16AXeX#6sDDTI`J;I?L%nf}9!j#|)F%H3TP~dQ0_57aI91|at)<(Qg|h)W
z`@4a;#3_qK%`yA8CtbV5->%<%r*}z1g^#~O*2!UZC_jhvDnaDH4!km6)JSQqCP-Ff
z@snysk{xO&MbdJ;_gx)rY<nQScXa632hRxA*Wi<0cA_MZvPRS5+lv=a?(-){y4^z{
zOf+5MatsWJC^8D>ki^SHz7Rsdu3zjL>v9${8OwF1(l|gLQjiX9_1k{|#8K;N%m$R>
z4L4E6w}hIuRo3<7y<ZF~l-b-xH7_%9=1YJb^J0^xM$GS@q4S_<&Go>5OfdC|h$;2_
zcF8jI7AD9LmUTLr6!o>}?g12A`cii#!AIZ|C|y}7u8skh0Iv77(jKdT-ReL*$_p>#
zW2fszP^mU7154d-1gZ+Ta-k<Y7oijhme$!D_crqZIeuYQLG*k}{<q&M)k|r!TZ0dl
ztMeS))Ga$p>IFAj#c+k@G>Z00I1vpYR-AO2kTsB&Hg|h3oi~aHv|%FIv%ezu1wpJ{
z+7XB3cIgjONOBNUNTTNWra!dD;W|bg@m_O&%^kQTJhMFYL;Y}i(`Tuvd581&r59eB
zb1?u0*g--E0Rb*R^Pi7Xbd2;&^o;cSKpR^+pt+$1gN*1~K@q{Xg4t?2)^if}_u;wQ
z)VY%&fJcV8o{h9r4~RkPDkI?7&`6UW113SgL;yk%`qMWmMfI!5CCT2e(f-|JyJP)P
z>)g2n%A<O@t;fdQV%kF++)JFHRm>N{{1*%S-GBmeq9EvlZl^7V4SB#j!q4q_DZ4Jv
z7E5?oec7o+{;SzY2Af;VyMg4<Wd%{BPxa-D@doBaGmb<q1&fuawVx*6)L;YGw<^fh
zxwb?bCCbyQPnD@ZtvV_7-$`&<yd~BP&0f-4;9@^ceHtyfr&Th7x09Mo<m~NTd#CWt
zmC8#3*1;%Ou0imk2e6Tj1d>ll*4-fp-}<&?>t@e&C|fIcUl^qV|Fq_GNH)CQyKVnu
z`-GW`o7az#3sr$1#m&v$dD+aAMYF^W->#gKTCoM{hNC@dhnB?C_@ZNr=j5AZ<K%}N
z{mJK9&~~}j?4Xa>V<chj4CJBcxw)%Wyt_x8pVBq#w$zG4iQ&9A$+s^ZPoC9`*AS4?
z@I8dv@pHSK-xaGeB}S&CxRvNN${sZ+jf9`EuP$xRVTB>RYt#|r3t@lP8KAb6wm3J4
zWMUU9`l(=i$Qpl&b8^zELkd<B+r3?vF@yG21RAw6WM^M>?Vxulg7Tx#xoL<${D3Op
zp=&UETrg*puyId|+=_l}zQMPYnAvu}t>>V1ozFf=e3g@|rN+*%ixbnug}-e9R?wgF
zvLI$g%J5uVNkqZL#bx`7-V=*bbbEwd6Hp+^S|uWBxs^X{lXOlh1YBV+%c3-Vx$OE>
z$<Zp3f_l)m*Eif<H%0{aB`Ds}?yl>;uVC(euj2(I^0an1SGFn!w&!{WV?1JeL(+$6
zX}NiN{VQnrpplnaOAPuH9VPBpLHF#9vboHCldEcH?KII%^f{}usbl?(myFI~c%Cw@
z0F3eRsZj|}QBi3<9Wpq61Q68RU<kHwx1L2fTLk^vPut|00;FXUx`88E1p+7+=j{nT
znv&kwBsFgeI5o4BY+qxe`<;|A1>)gQyZI+~rg!7uMpH_XACtBT>a?iME}~IXQs#^@
zShLcQwj4LZka~>h<9gq{?;F8)vDd^oKbEMM-3MOXkk^fcvBU!iCA3dr*Tb8l;e75w
zrpY_5&Y~6B?yk?4+S&OW-#XmvEH%#TmADJDW44D}!8={`SLPce=+~SP;~yV9kQ4_~
zVN}qn&T5j>8e~Xhwxf1P38JZ5qrzq!xZkI;-<<7~Xg?f7KiqG@U*A?$xbgDYot#K7
zCD{WuM;Pi>vWAAlJN0c-^h^6qDkI%-8{8>V0+gB4Ewmi4T8S5yPGWTQWB}(WZnKmp
z0>fu4V{dlXsg0DMntW*~v5j00TwI8AQ#4%SOnRqJp?7@T`EjuqDNJQwEOW1^-BB`B
zX9<&ieQ;~og*3-EsP*ANtefWg@N@mru3xBzp`;p#KRjm-E+1C!&?2d}SW2~zoXalh
z;L|jy4F905^_{57Rf_eQ&d?{Rq43vCVf)YolC!)_XWrb?)QP5Q0J3ZxuZD}&<Kz|=
zdo4a@8F+`V$+#Aev;?tHm5*%?1hRMGu)`tp%zZPto<>h${5>h@Nuel&FtFA*35~m;
z;<5c2JnNt6TFmFE>~YyN3pcl6JEeTrX$p@KWjgcHpGh?oExt3}@bB$yrV|_#W~W3D
z&7FCrBvi8YzMzsQdX7{-DtjOc4Z9h?QkDS4K#I+WQbDnsyEzZ!n6oKLkxWbnsZVH`
zNy&fH_Zmc07PQau!RCG+to`4+Ni-YUP5C17DQJuo9t~52Qq<i26p63v{mOJtC0-hL
zx8Q&thk5sk#0^VNEs8LDTBN{CmuJuSZ65!CF$P+M@-TGAm7+pD3?e8Ecp9hiXV{6+
z95VtPQj5hValQs5;q6XF&`#xNFtFT(@zZ12!1QFtZCB_dg6~<b!pag!^6&d>WsTBg
zUO26Csyk}oyPAa_fPGAKM7swdtfR4|JK6Sc<;<G5?U+MkMHR{}%v#ZiCF;g61c4;0
zR}*!?1s7|5Cvzu98xu0(8D@^mMk@Fo%#2s<7$NwPmMC7dTtH~`56g@JM;KwUOerc2
zAt2i)dBH9mAc$sN)gZODUgawDUc2}(Q}cZP_%-eUk_@By#(9zrG(-3G`a?}NidA4+
zW}7$UtMm}~<?%APW})8Cafo!pd>SkB`W|fc=F`tEW;eT5U!Fr&dK|^D1wR)EOf1Nr
z-&3<O!m#JH!TqS;gBxOeLVF_)O=tik-f(|-J224^m*jlAvN`Z=ve9QY+D!$rA&oUh
zG(``xm2VjCsHHTpoK+^WePp^<OV8clR9)zxL&$5JK8w7h{QxIBI3|BV)~3>(C{QR0
zRF$S=gg?a!aVE{583NrzC-GHiY?Dff8u=(f-@zdK5IcSuiYUTU>q8q@)ysui*1YM8
ziz#ur+fr7?-`s?a-HxE+C)0UMl+ce85Hub8nv@Xh)e6FUkOGW^l|;Ni_-Etrc&aF;
z>1TB^3Zrp>><`SI-VBP(a1;DIUFG9I^aUM@*WZRI2%@s-!254VkY8mg%Ly}HwIYy>
z#i$@>wa6CHC$zzZf-0V%pMA1@ac+4H0Ga4%D-OGIo<wST-5&t(!y~E;e3OO|#j@*`
zIY)hI+S{pAWZ5<t%SmI<1XOH5$X(7>i4mWOO;T$h8C$=qrR|AfRMrSegF=K=U1(SY
znvxtl)x`D3eDI=c)VA#q9D0<GN)@)1By{MQM)Bmy+zs}njEDj3@FNo;ers`f$PGG9
z35M4F_-_lC<j<r8=_$A{sn}GWAHb9Pkb3*Vpp#nc4VnUqN!8j1kUSEmIajXY;$hv$
z_~b$+rJ>X?PXeP@p67mJQPp#J_EdRjHjJ`%EPg|BJ;v?~7VG_&F=WUb#uIh4mhW4#
zwZt-C;g1X5uDMh4=B1}v@9GDdtUi4S8)DHG70I22*sFbtm#xljb+jop+_t3eP=s#a
zu}zkP2KU8DlR(kz@LbYO>_Ze?T=%sP0kzptd^pZ)_(Wp3t`#Ds(@#$FGwGU>he-wV
z9Cias%iS_?M&nBxmLlRLhI(R6f?_>emH@Gnb-tJxv_M2xvXJ!%nGn_NwDlJ~?aqWY
zd9lH4Z_n%q#coM1x=$l22yqM@v{qDK#5ES-`FU(oV4#e&3|E!4^nE12LjD*VAkAEg
zW`b6}1S8SKl-{*(I{id247P)bw6_;^QaI`Xrt@K73ZBXLDwOkbO*|=NE3XrW2ny3d
z;<LjS0qh*T_zzg|<rnvj$eiJ5Tw-2zf=v-M33<(N&4Ucyo+=op-XE^zSLioM_@Ibe
zth$03gqc3?jaM@iAgd;mBlt24XSzyda!`QSxGon%vK*+tMjoVKR>JZm-M5FIU`z)F
zO-w|`yo;=#NeT(#ID(4UVzgYiP!!cj={x-%%()6n7|hb&r!NWIF87d=dztB;f+XrY
z9hSaNF3D2Glu4|h;!-FivATS?T|E=9X2i^n&1L>Iv=1rA@YBb}WqFv>BA$b%*`OzJ
zgdqvi8YLFjKp|HM5X6klF7a&d=mU>dvk#mc>Y+(Y?%GW{hhwc=3Mdpv5#d8$?s|*+
zlDAAg)wvtFUM?%+)he9i(e%ay1L$f#yvW3L{$S<7yX7di9CFD;*YZ+v!SWIlKa7Ak
zEU&AlqIP9nRgTA{6WKM6E^)55!i9e*)X)9;d{H)q4cmDZ6CPgt9du*n%6gVL2j{oI
zwmWA8@Utu;uLE8y+fr@TW$pu_Iiuw}%stIZh^iaF2IrKZhXZERxV&g;o}%PUw^JOJ
z>gSBw67&3NC%3kt64im`ZJv0edxhAywZ*|uQEz>G+);3OQ#VGBi84fKhl$Xi_YzU6
zv*;LF#3%K|?F<z?R}Zo=doM2X$se+isGZ;%&NdHy4KhVy<2$_7;HOmfUd2H8El8cb
zvllsWxXTIe+och^P*;ue`kGGbJ6ZOH1uI{WutL3CgvW*CBrdkJNdl{lPEdduMbFH3
zjMJ^uha3X$);Km+(5LkKZ<%(fF{~~6m4Fm6pIqJu5{w!X2=!x8k9qc}OjC)Xw|$6Z
zKtHRMGWm3l&ZO^QZW7czpvF;yFw?uJwRNr29xJU2U$9FmaDp$a*lUjYUd5&1z%0ur
z$YWL`Vf1^u?03chq?pXtn{hAW@;{Cmu?r2_tna_5^In^~%WZ4BTe-ha?Tt3p%>ia}
z_;2#T1lFalT0D1a<eku<Fl1ZIMh41jn|<YGkDaRP^i)SAHJCb+0<8dai8=AUPzaOF
zO@D_*wUKxm3^hWzy81GfEh7J2G%wQ?4%U4^atb|88ijBz5?)alnSDf1AqSPGZVrgv
zUu)@9WEpcL^9u+al7a)Rq-odMmGMpUqJ1|8M$E_Wfm=^7_`R}4%TD!TCAgJoKQlxl
zT*4dqf2?QgQ2roG^^QQYxn+CxEVycGkvZutd4xkq5iFLlu}Vn;r_ro{GPw^l<0Pj+
zLS2|J)@vzTG?=!o+7(;6EB9(A;nH?h=q)U|QLaK&;tD1k&LP*q4VpIu#WTzb?Va@L
z`8Vi6>mcqJo>6$}_!v@Q9(tPUd5y9+^y|kVcg{<l5rZ~~0Zg4y^#CSBDVjZ)P->cZ
zf;!H;Hrp}VDt*L&sK&@BwqQj*19LKxh?Ha>@hGNpl+dnqr<@$v9p7esO-;iEhWBio
zUsY-z8ttY!!t+|-vMDHf-V37O&NJPTy*Ch$_z)UJ6<?A_9FAhZbe;~t{miq-Qo?fj
z-2umWlh>E1$+kJo^ji{LINw|L2Ho6@(b0J%xk?-$WgX8@u-Ms-j)~}=%UC4NbPq>I
zD#^7J+cvyQjWxObZc)C@LC%Rk4SgZ;aVH^)c)%yzkEY>OVF+)Cxg5870pc1VV!C$S
zatt8^`~eq=vs`tXc0R)*s7u%VTSrao9}wL?o{1HPS&`P-IK@i_!k1Qe!?DxYyC4fd
zTk$zJv#yG<M8gw(;MF$jNks=hl$%g1m5HizFE!tv;~(M@BwfF}$R4jbn+ed3K!<{#
ziZ84%<ft((nxHqHA(~gWacgKms5;t%TIN)5wffTI`Hkeb3IJQns=rdQ{hYYg#Sp4O
z5A>e>>`BRI@z8-YfmSU+3pC3FZ*)Upiq68sr^KzMGWm`IRBfbtNgf!_V~fXxjoIO%
ztw$&`-h}Kje-@iN#q2TU^|ecrrI#vYU?CDYeQUVK8ff;VM9hpmQxdwN2z}0+_p>dm
z!<=VWrWbX7(Ni=~HW2rMpw2?h#Ni>ux&nF^&W$`$D<2r0cw21ubziBL%~0U{hT_Au
z46fSMsz>qYcY+W;y<k>qo;@|4wUlc8Gu_-((+y3!9-rD<k1jO)crFrcGuHeYvA9jx
z=*dHjGnMEhl7lb%RNHhx*)`;*8gF;GHYdntF$;$^k$J}CtpqAjrAY!YB6I;)GkM)Y
zH_uk>5?w7xN_$=q(w_$ogbRXQ`WV^ss>4+hObkH%o;RV+Tx)&MnC=w~(j=$+`G<-o
z<K5#;Ts6_pI}eAKD#wQ`M~&&W@%1FB?qKF$UXYnJ<RZasnD_BEw8!w6wR+!aT&hxS
z#v{65cc<Z2>x73Dtm3nOm!x+JE&@_v@RS*!XRZ6m^_x7=MF~RDor{MR=Hdpz;wR;^
zH2dUF#+eV7XFs7)ogH}bss4Z-dX7<d=S?<M+BLGKNNZ<$aOJbzx6fu7SYD7j>J`6%
zX|j1Y-xw_2-z^~{jeKZgqgC9|=}#NAh)G~&Hfa0BJ0#G8;0%;1Zx;Bp_F0Nr$F#dz
z;VWe-?Wk*)u9`2}tlB^_u$TZZOlA|KXXuN=u|2gU)~5s7iTTrX*TqHWw>U%%hI@Sl
zp^dIaLFOx~!yD=tZLjZ!eQSy*i*WP+lg5svPG*P%i7iK@@~?YI(0G-D7!ZxM5#&Wb
zIBt<kTovns(ESrmFE>J8twtvd06HvWODu<H0qLL_r0eL=DYnZ{jvGGptMe|L=mZ`E
zNeZn%Yb68R2>mOfF&ch#-S}YgFoXB8Le1~c<*QwN2gi**A3q_{9EeMds(*Dd5)74)
z9iX*Dh>iuX8jA~DQu|!Z^)M<40c_U3vnAOKMEC7&kX0oF$~G93!9cD#5Jo&?pRy4y
zIFHD37}Uoq7Gok(vnISVmNwLM-aw6iGn6A&>$+yyn|+ov&CQ>K+`8Bu&%8Ut?kjsT
zn;xVr*?#8t0Q>iaDD8U-B_;3zlrnhxRSfL6g(zhSQBlCtAqkm*5oBpP>cRe@3I)b-
zmSt<X0ckoZ+8%~-g>DI2$-(ZPerb3qTvezIuj3PGTi#$hXsKWY8|J9OXHr2@iZwzQ
zV@1ypsYC5fj!zWqFi)s!9$63K*)>F|z_HMPH%jpKr{edwcnr*Kt(~+jEr8~>HuScR
zw!yN4Lo|a!lA#Q;^u4rHufjH@{tz-Km%j60JO$Y>7g=MnoK!#BS#Oj#xy=tZ5aNHk
zfqvVWf~c^Zf=JP14=7U%4Q{zE6}EG?uLT}0SU`waDg9}SLK=oHdZI^e6=8~bfqKeZ
z5(2$8dGwVssF}-mAoUH535Uo?xV_-DG+?-2J640G{zR!`v{VAFsyZ2R5O>RPtIEx-
zTV3v%{XC<?X@dZGEqPs=s-XoZvth01>zr6bNeCwfQfo9Nf55!>N~DhiDf5_oW!+??
z2z0vYEi@z^;e82tQ1rT<%SL4eW@co;J4mS=0!AWFO{LQo<Fn;L5RTDX9+(?1H#(DQ
z`y|=CF*pLv?3(iECb5`m#Yrfla~&;U4!@oLCsQ><5~rYhp|i9^fr|`DqEyd0YqhFt
zAhp_cLicBTZ7<!eLUn`j?`y`j8ra<Vei0lkA5*a6{OM)g*JAHa8$a&a13K-Jr3Ck4
zN~?w$j~mhoJPMW)wZtwgZJI%w8KpG7%dcg}EHo6iN*&S1YM#SNtU#>wD`8yUu^|Cc
z_mZqj(h>sXR9{C{h~ZCRkN`nfD2BuYb2xIr$!S7vhWbLmK%Zr{FsS8J-j!=+<IlI-
zD6!+TViS_+LG6q6;KHGRn<+%Iv<iAB_u<7hv2dKU$c#4`5yxWtTBfxIzNR7ju4Kz-
zNxF;Dg$YK|+M+B6M5VdrA4F>s{HJKTNq3p17Dodc%(g^^L*ix)Rop}@W7e9yc?)L=
z`eUbvEa)}ebD3(xbnO-3I)Qg>A65_dF<PbQ`BLWLsA)Cw1*no73(71K%^i;t7-1t>
z@Q-oJc67XZZocA{-{N1)3MxNw58k;*H%l1qLIZUKupeB-tx}mciF8nu(XOi=^v|@9
zG_B;aX^Xm*NV$nrDz!Vne?Z+!rhbj!Z`C9;_R(3;LbB<iBR#N3;r-T0>;9Dgs8qs>
zFzPbsB97-c@7^a^8lyqAEuq+WU^#Z8c}<}_hkK(tNT$-^BXk6@al~t4Qvov%rFb=$
z6upWxd&8!x@6&8`%YD7QeE4#Tk)DE(1~9SS>$K;J1C`?-n=F551UXQh!J`gbAUd2E
zw)AUX!XNKksOY_~+PZ0zStY8EBZybvQe7y-CcG)4;I``Et3^-TRsY5ga%GiH<d%v-
zB!KB!-1_D{kjfx)!Ifv|s=G-ppV;O~{Pl`<(J>u%PK>#1XVPpm*d}OC_dCY{9%X{_
z&Qvav_SU<Sg@z=`QK_CJrB{fq0e~W8V>=WX&GZ_N4N8WfSdPh*KF|9Nre}M%8APuv
z6oeJHxrYW%>TOVZWM1sUO(JiVGVITI)*MUai-lv5I0oHDb7hs}SA6AoOCfjZcKGT2
zN@`UfR>~Tnr#MLl1$tt_1ksCT28bZ~Ce`Q$aL1B0@(|h#O2kK~?JhKqjGEP3VDH<g
z-PyxzJDzM#?EK1heDl`nRjck&ONm3hH3KwpD^NQaWNbIhdTb$1MYZjyF&6cP;*~1=
z&1ga#RC?Zn;e+rEdv-~1T?qpyYavJ6rWtR~82wPb*3z39GC84Nv`0+(sdXC{?|sdF
z+>qX`K(gn4Rp_nU{+!qxZDrU(bAtHbcs2C%*G~<r{Kw*leELni*R+hRc*8l6(w!16
z{obX~XxU`$Om@z>NbZB?yoCwL$5hv3AP!*9AT&FsufJlkbuIAYz)Pc#%b|39T;?x*
zfwv3)Y|`l@m!!^%yt>uD&H)2Zm0u8QEw&h0_k{xaQvv1K3d1#?j9tHE?kGLrxQ02!
z1?L8f(A2=`fpZC%Kfu&N-hmt&KcZqx5B&k+4K19SYNuV9%od2s`}SzbVus+!_jL7)
zO3$<52i(mS;e+JGimzxaFX&yWj@Dl4O?<ch${y&uMHU!4+P{$AC=&>O9G}d-5W}8B
zN7DVm9bEer66zWBj|@|AsY(bTc?Q!M9Yye?A2%!TmnVO<EYBYg|6_yyFZ=uB{zuG8
zm5^ZjJNFOM_g}psAhJBYfA#+}ef4qIAO8*R^+y9|z5dm*JWIg9pCWpFpzVL>%|3=a
zgVXEG1K)3esE^~{d<6ODAcmi3`dE@eK+rk=sRa5NMV4n1I2-rBg8+N*?f)oA_&9_g
zU4D+^ht%k2%ktEv{)PCDQ2&1%O0=CqYY(tekA?ejC`rF_{&_S?UvFqs!K%+;@TtK4
z83*`pmZu!gZ=vW}m>U9(z$r$L2Sn$BON9y+TaThaK>Yp0EDHQa(Kpbyv-}50d}z8C
z33xQLoDdK{GNFIAEKgGL-ymiNw$?zsAJtJG$8ylBJO=_F-8*nRe;<*v%I_EpeFM{f
zqR=v(yY7HrB}Cv6{rwaPssBc?0ZSuHfrdYn^pB(QTG6D51=mWpM|pf?40L|y{E%Ax
z17w<nC({+2_XPrfOZnsT;m?-k$z<?5#MWBJUPoKU68I0K$EBNpk+#hLjr3<B=f?wk
zT)_4hiN^Xj(%;J2J|;ab?D>nNY4;oHuQH#HDL;Dsd{2Sjoqx3~&keudDF0BT;xX@W
zk&2(dEKf@Rf93tBWW{6F<H82NSp0$i%KBC2;4$v8M*bI$ION}Pe@NvYqaK@nf1$cT
z|BCw4`}-L6*zx%bg%|s;s6UOLk5P}MZ@*BA$$z1Kidz21_3^R2?H6bCcg{awA0Jy{
zej$poe+%U=XUyXP{pj`c#rgM3+w0oDD8K*Y<1yy(Pd<JHWA+>7pNI1}gY*~See2^u
ze&&-tj^c6J#9s`^lD?me-==RrlPDg;9#4IL!8jKG752wO_%Z46r1cjGoM!z0ox(nb
lKAxQZg0e3CEA-E)s=PET_zv`=k_ia}2l(Q>w*KSU{{a$+_t5|V

literal 0
HcmV?d00001

diff --git a/site/public/data b/site/public/data
new file mode 120000
index 0000000..0c9e531
--- /dev/null
+++ b/site/public/data
@@ -0,0 +1 @@
+/private/tmp/bincio_dev_test
\ No newline at end of file
diff --git a/site/src/components/ActivityDetailLoader.svelte b/site/src/components/ActivityDetailLoader.svelte
index 600113b..1831c1f 100644
--- a/site/src/components/ActivityDetailLoader.svelte
+++ b/site/src/components/ActivityDetailLoader.svelte
@@ -2,6 +2,7 @@
   import { onMount } from 'svelte';
   import { loadIndex } from '../lib/dataloader';
   import ActivityDetail from './ActivityDetail.svelte';
+  import { isUnlisted } from '../lib/format';
   import type { ActivitySummary, BASIndex } from '../lib/types';
 
   export let base: string = '/';
@@ -48,7 +49,7 @@
             source: d.source ?? null,
             privacy: d.privacy ?? 'public',
             detail_url: `${shard.handle}/_merged/activities/${id}.json`,
-            track_url: d.bbox && d.privacy !== 'private' && d.privacy !== 'no_gps'
+            track_url: d.bbox && d.privacy !== 'no_gps'
               ? `${shard.handle}/_merged/activities/${id}.geojson`
               : null,
             preview_coords: null,
diff --git a/site/src/components/ActivityFeed.svelte b/site/src/components/ActivityFeed.svelte
index 4d6291d..e486e33 100644
--- a/site/src/components/ActivityFeed.svelte
+++ b/site/src/components/ActivityFeed.svelte
@@ -1,7 +1,7 @@
 <script lang="ts">
   import { onMount } from 'svelte';
   import type { ActivitySummary, BASIndex, Sport } from '../lib/types';
-  import { formatDistance, formatDuration, formatElevation, formatDate, sportIcon, sportColor, sportLabel } from '../lib/format';
+  import { formatDistance, formatDuration, formatElevation, formatDate, isUnlisted, sportIcon, sportColor, sportLabel } from '../lib/format';
   import { loadIndex } from '../lib/dataloader';
 
   /** Render preview_coords as an SVG polyline path string. */
@@ -47,11 +47,11 @@
   let me: string = '';
 
   // Show private activities only to their owner.
-  // On a profile page (filterHandle set): show private if me === filterHandle.
-  // On the global feed: show private only for the logged-in user's own activities.
+  // On a profile page (filterHandle set): show unlisted if me === filterHandle.
+  // On the global feed: show unlisted only for the logged-in user's own activities.
   $: isOwner = filterHandle !== '' && me === filterHandle;
   $: withPrivacy = all.filter(a => {
-    if (a.privacy === 'private') {
+    if (isUnlisted(a.privacy)) {
       return filterHandle ? isOwner : (me !== '' && (a as any).handle === me);
     }
     return true;
@@ -161,8 +161,8 @@
             </p>
             <!-- stretched link covers the whole card; sits below the handle link -->
             <h3 class="font-semibold text-white truncate group-hover:text-[--accent] transition-colors flex items-center gap-1.5">
-              {#if a.privacy === 'private'}
-                <span class="text-zinc-500 shrink-0" title="Private">🔒</span>
+              {#if isUnlisted(a.privacy)}
+                <span class="text-zinc-500 shrink-0" title="Unlisted">🔒</span>
               {/if}
               <a
                 href={a.detail_url ? `${import.meta.env.BASE_URL}activity/${a.id}/` : `${import.meta.env.BASE_URL}activity/local/?id=${a.id}`}
diff --git a/site/src/components/AthleteView.svelte b/site/src/components/AthleteView.svelte
index ed990f1..8fd42c8 100644
--- a/site/src/components/AthleteView.svelte
+++ b/site/src/components/AthleteView.svelte
@@ -4,6 +4,7 @@
   import MmpChart from './MmpChart.svelte';
   import RecordsView from './RecordsView.svelte';
   import AthleteDrawer from './AthleteDrawer.svelte';
+  import { isUnlisted } from '../lib/format';
   import { loadIndex, loadAthlete } from '../lib/dataloader';
 
   export let base: string = '/';
@@ -51,7 +52,7 @@
         } catch { /* ignore */ }
       }
       athlete = resolvedAthlete;
-      activities = index.activities.filter(a => a.mmp && a.privacy !== 'private');
+      activities = index.activities.filter(a => a.mmp && !isUnlisted(a.privacy));
     } catch (e: any) {
       error = e.message;
     } finally {
diff --git a/site/src/components/CommunityView.svelte b/site/src/components/CommunityView.svelte
index 4351c81..b36af74 100644
--- a/site/src/components/CommunityView.svelte
+++ b/site/src/components/CommunityView.svelte
@@ -1,7 +1,7 @@
 <script lang="ts">
   import { onMount } from 'svelte';
   import type { BASIndex, ActivitySummary } from '../lib/types';
-  import { formatDistance, formatDuration, sportIcon } from '../lib/format';
+  import { formatDistance, formatDuration, isUnlisted, sportIcon } from '../lib/format';
 
   export let base: string = '/';
 
@@ -74,7 +74,7 @@
     const tot: Totals = { count: 0, distance_m: 0, elevation_m: 0, duration_s: 0, users: 0 };
 
     for (const u of rawUsers) {
-      const pub = u.activities.filter(a => a.privacy !== 'private');
+      const pub = u.activities.filter(a => !isUnlisted(a.privacy));
       const filtered = pub.filter(a => new Date(a.started_at) >= start);
 
       const stat: UserStat = {
diff --git a/site/src/components/StatsView.svelte b/site/src/components/StatsView.svelte
index 72a9de0..78b052d 100644
--- a/site/src/components/StatsView.svelte
+++ b/site/src/components/StatsView.svelte
@@ -1,7 +1,7 @@
 <script lang="ts">
   import { onMount } from 'svelte';
   import type { ActivitySummary, BASIndex, Sport } from '../lib/types';
-  import { formatDistance, formatDuration, sportIcon, sportColor, sportLabel } from '../lib/format';
+  import { formatDistance, formatDuration, isUnlisted, sportIcon, sportColor, sportLabel } from '../lib/format';
   import { loadIndex } from '../lib/dataloader';
 
   /** Explicit index URL — use for per-user stats pages in multi-user mode. */
@@ -35,7 +35,7 @@
     mounted = true;
     try {
       const index = await loadIndex(import.meta.env.BASE_URL, indexUrl || undefined);
-      all = index.activities.filter(a => a.privacy !== 'private' && a.distance_m);
+      all = index.activities.filter(a => !isUnlisted(a.privacy) && a.distance_m);
     } catch (e: any) {
       error = e.message;
     }
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 4989589..531a22e 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -368,8 +368,8 @@ try {
           </div>
           <label class="flex items-center gap-2 mt-3 text-xs text-zinc-400 cursor-pointer select-none">
             <input id="zip-private" type="checkbox" class="accent-blue-500" />
-            Mark all imported activities as private
-            <span class="text-zinc-600">(Strava export doesn't include privacy settings)</span>
+            Mark all imported activities as unlisted
+            <span class="text-zinc-600">(not shown in feed; GPS track still accessible by URL)</span>
           </label>
           <p id="zip-status" class="mt-3 text-xs text-center leading-relaxed" style="min-height: 1.25rem"></p>
         </div>
diff --git a/site/src/lib/format.ts b/site/src/lib/format.ts
index f2c4258..61531d7 100644
--- a/site/src/lib/format.ts
+++ b/site/src/lib/format.ts
@@ -1,4 +1,10 @@
-import type { Sport } from './types';
+import type { Privacy, Sport } from './types';
+
+/** True for "unlisted" activities (and the legacy "private" alias).
+ *  Use this everywhere instead of comparing against 'private' directly. */
+export function isUnlisted(privacy: Privacy | string | null | undefined): boolean {
+  return privacy === 'unlisted' || privacy === 'private';
+}
 
 export function formatDistance(m: number | null, unit: 'metric' | 'imperial' = 'metric'): string {
   if (m == null) return '—';
diff --git a/site/src/lib/types.ts b/site/src/lib/types.ts
index 774377f..8e05a5a 100644
--- a/site/src/lib/types.ts
+++ b/site/src/lib/types.ts
@@ -2,7 +2,9 @@
 
 export type Sport = "cycling" | "running" | "hiking" | "walking" | "swimming" | "skiing" | "other";
 export type SubSport = "road" | "mountain" | "gravel" | "indoor" | "trail" | "track" | "nordic" | "alpine" | "open_water" | "pool" | null;
-export type Privacy = "public" | "blur_start" | "no_gps" | "private";
+/** "unlisted" = not shown in the public feed; GPS track still published (security by obscurity).
+ *  "private" is the legacy alias for "unlisted" — accepted when reading old data. */
+export type Privacy = "public" | "blur_start" | "no_gps" | "unlisted" | "private";
 
 /** [duration_s, avg_watts] pairs, sorted by duration ascending. */
 export type MmpCurve = [number, number][];
diff --git a/site/src/pages/activity/[id].astro b/site/src/pages/activity/[id].astro
index 273c53d..4539f18 100644
--- a/site/src/pages/activity/[id].astro
+++ b/site/src/pages/activity/[id].astro
@@ -52,7 +52,7 @@ export async function getStaticPaths() {
     // Build the map from the index first
     const byId = new Map(
       activities
-        .filter(a => a.privacy !== 'private' && a.id)
+        .filter(a => a.privacy !== 'private' && a.privacy !== 'unlisted' && a.id)
         .map(a => [a.id, { activity: a, athlete }])
     );
 
@@ -80,7 +80,7 @@ export async function getStaticPaths() {
           if (byId.has(id)) continue;   // already covered by the index
           try {
             const detail = JSON.parse(readFileSync(join(actsDir, file), 'utf-8'));
-            if (detail.privacy === 'private') continue;
+            if (detail.privacy === 'private' || detail.privacy === 'unlisted') continue;
             // Build a minimal ActivitySummary from the detail file
             const a: ActivitySummary = {
               id,
diff --git a/todo.md b/todo.md
new file mode 100644
index 0000000..ee1a1a8
--- /dev/null
+++ b/todo.md
@@ -0,0 +1,213 @@
+# BincioActivity — Ideas & Roadmap
+
+## 1. Strava import from UI ✅
+
+**Goal:** Let users trigger a Strava sync directly from the web UI instead of running CLI commands.
+
+**Current state:** `bincio extract` CLI handles Strava OAuth + sync. The edit server (FastAPI) runs locally.
+
+**Ideas:**
+- Repurpose the upload button popup to offer two paths: "Upload file" (existing) or "Connect Strava"
+- OAuth flow: open a popup window → Strava auth → redirect back → edit server exchanges code for token → triggers extract
+- Edit server would need new endpoints: `GET /strava/auth-url`, `GET /strava/callback`, `POST /strava/sync`
+- Progress feedback: SSE (Server-Sent Events) or polling endpoint to stream sync progress back to the UI
+
+**Open questions:**
+- Where to store the Strava token? Currently it's a CLI argument / env var. For server mode, probably a local file in the data dir.
+- Should sync be incremental (only new activities) or full re-extract?
+- How does this interact with multi-user mode (see #2)?
+
+**Effort:** Medium. OAuth popup + SSE progress are the tricky parts.
+
+---
+
+## 2. Multi-user VPS deployment with invite system
+
+**Goal:** Deploy bincio on a VPS so multiple users can have accounts. Invite-only registration.
+
+**Current state:** Entirely single-user, local files, no auth layer at all.
+
+### Clarified model
+
+- A **bincio instance** is a deployment (personal or group)
+- **Personal instance:** 1 user, fully self-contained — current state
+- **Group instance:** N users, invite-only. All users see each other's public activities by default.
+  The `private` flag (already in the schema) means "only me".
+- **Federation** is between instances via BAS data URLs — no accounts needed to follow someone
+- Data isolation = run your own instance. No per-user isolation within an instance.
+
+### Data layout (multi-user)
+
+```
+/data/
+  {handle}/          ← one dir per user (extract output)
+    activities/
+    index.json
+    athlete.json
+    edits/
+    _merged/
+instance.json        ← user registry + invite codes
+```
+
+The instance's combined feed merges all users' `_merged/index.json` files at render time.
+
+### Auth layer
+
+- Session-based auth added to the edit server (FastAPI handles login/logout)
+- Unauthenticated reads stay fully public (static files, same as today)
+- Write endpoints check: logged in + owns the activity
+- Astro site detects logged-in user to show/hide the Edit button per activity
+
+### Invite system
+
+- Invites: short random codes (8 chars), stored in `instance.json`
+- Invite record: `{code, created_by, used_by, created_at, used_at}`
+- On registration: validate code → create user dir → mark invite used
+- Limits: admin (unlimited), regular users (3 invites, configurable)
+- UI: "Your invites" page — generate codes, see who used them
+
+### Render pipeline (multi-user)
+
+- `bincio render` runs `merge_all()` for each user, then builds one Astro site
+- Combined `index.json` = all users' public summaries merged, sorted by date
+- Per-user profile pages at `/{handle}/` showing only their activities
+- Activity detail pages stay at `/activity/{id}/` (IDs are globally unique already)
+- Activity cards in combined feed show "by {handle}" label
+
+**Decided:**
+- SQLite for user/invite storage (safe under concurrent writes, still no external DB dependency)
+- Mastodon-style follow UX: paste a BAS URL into a "Follow" input → instance fetches and caches that feed → activities appear in combined feed with "from {url}" attribution
+- Feed refresh: pull-on-demand with cache TTL (no background job — fetch on first stale pageload). [open: exact TTL, stale-while-revalidate vs blocking]
+
+**Effort:** Large. Auth + multi-user render pipeline are the main work. Needs a design pass before coding.
+
+---
+
+## 3. Federation explainer for non-technical users
+
+**Goal:** Write a clear, friendly explanation of how bincio federation works for people who don't know what JSON or APIs are.
+
+**Three ways to share your data:**
+
+### a) Upload raw files
+> "Export your GPX/FIT files from Garmin, Wahoo, or wherever, and upload them directly. Bincio converts them automatically."
+
+### b) Upload BAS files
+> "Already running bincio locally? Export your BAS data and host it anywhere — GitHub Pages, Netlify, a USB stick. Anyone with the link can include your activities in their feed."
+
+### c) Link to another bincio instance
+> "Self-hosting bincio? Just share your URL. Friends can follow you by adding your address to their feeds — no accounts needed, no central server."
+
+**Promo angle ideas:**
+- "Your data, your rules. No algorithms, no engagement metrics."
+- "Like RSS for your training log."
+- "Works offline. Export once, keep forever."
+- "Follow friends without either of you needing an account on the same platform."
+
+**Format:** Could be a `FEDERATION.md`, a landing page section, or a one-pager PDF.
+
+**Effort:** Small (writing). Medium if we want a designed landing page.
+
+---
+
+## 4. Mobile data capture & processing
+
+**Goal:** Record activities on a phone, convert to BAS, possibly run the full bincio stack on-device.
+
+**Four sub-questions:**
+
+### 4a. Record on phone
+- Standard GPS recording → GPX export is already solved by apps like OsmAnd, Organic Maps, Strava, Komoot
+- Could build a minimal PWA (Progressive Web App) that records GPS and exports GPX
+- Web Geolocation API + background service worker has limitations (iOS kills background JS)
+- React Native / Capacitor would give better background GPS access
+- **Simplest path:** just recommend OsmAnd/Organic Maps, skip building a recorder
+
+### 4b. Convert GPX/FIT → BAS on phone
+- The extract pipeline is pure Python with no native deps (haversine math, standard library)
+- Could run via **Pyodide** (Python in WebAssembly) in a browser/PWA
+- Or package as a mobile app with BeeWare/Kivy (Python → iOS/Android)
+- Performance: A typical 1-hour FIT file is ~1MB, should parse in <1s even in Pyodide
+- **Interesting path:** PWA with Pyodide — no install needed, works in Safari/Chrome
+
+### 4c. Serve the full bincio app on a phone
+- The site is a static Astro build — it's already a collection of HTML/JS/CSS files
+- A phone could serve these files locally via a small HTTP server
+- iOS: no background servers, but a Capacitor wrapper could embed a local server
+- Android: more permissive, could run a Python/Node micro-server as a service
+- **Alternative:** just open the pre-built site via file:// protocol (may work for static assets)
+
+### 4d. Fully offline mobile app
+- Capacitor + the existing Svelte components + Pyodide for extract = plausible stack
+- Would need to bundle MapLibre tile data locally (big) or use an offline tile server
+- This is a significant project but technically feasible with existing code
+
+**Decided path:**
+1. Recommend OsmAnd / Organic Maps for GPS recording — also built a `/record/` page in the app for in-app GPS recording
+2. Capacitor wraps the existing Astro/Svelte site as a native iOS/Android app
+3. `/convert/` page — Pyodide runs the full extract pipeline in-browser (GPX/FIT/TCX → BAS JSON)
+4. Fully offline on-device: needs more work (see below)
+
+**Done:**
+- Capacitor setup in `site/` (`capacitor.config.ts`, scripts, packages)
+- `/convert/` page with Pyodide (loads bincio wheel, converts files, download or save to cloud)
+- `/record/` page with live GPS recording, exports GPX → hands off to `/convert/`
+- `POST /api/import-bas` edit server endpoint (accepts pre-converted BAS JSON)
+- `site/public/bincio.whl` — bincio Python wheel for Pyodide
+
+**Fully offline — ordered plan:**
+
+| # | Step | Effort | Status |
+|---|---|---|---|
+| 1 | SW + IndexedDB write (`sw.js`, `localstore.ts`, "Save to device") | Medium | ✅ Done |
+| 2 | `dataloader.ts` — runtime-merge server + IDB; update all Svelte components | Medium | 🔄 In progress |
+| 3 | Test convert→save→feed loop in browser (`npm run dev`) | Low | Not started |
+| 4 | Sidecar merge in JS (port `merge_all`, no Pyodide) | Medium | Not started |
+| 5 | Pyodide SW cache (cache CDN assets on first visit) | Medium | Not started |
+| 6 | `npx cap add android` + test in Capacitor WebView | Low | Not started |
+| 7 | Test on iOS device/simulator | Low | Not started |
+| 8 | Native micro-server (only if step 7 reveals SW blocked) | Hard | Contingency |
+
+**`capacitor-nodejs` is not on the roadmap.** If iOS blocks service workers, fallback is a native micro-server or eliminating all remaining `fetch('/data/*')` callsites via step 2.
+
+See `ARCHITECTURE.md` — "Fully offline — missing pieces" for design details and open questions (storage limits, uninstall, sync conflicts).
+
+---
+
+## 5. Gear from Strava export
+
+Import `bikes.csv` and `shoes.csv` from the Strava ZIP export to pre-populate a gear selector
+in the edit drawer. The CSV has: Bike Name, Bike Brand, Bike Model, Bike Default Sport Types.
+Could store as a `gear.json` in the user's data dir and surface it in the EditDrawer sport/gear fields.
+
+---
+
+---
+
+## 6. User feedback backlog (April 2026)
+
+Items reported via the in-app feedback form.
+
+| # | Who | Area | Description | Notes |
+|---|-----|------|-------------|-------|
+| F1 | brut | Mobile / Nav | ~~Shorten "BincioActivity" logo to "BA" on narrow screens~~ | ✅ Done |
+| F2 | brut | Mobile / Stats | Day-click tooltip in `StatsView` falls off-screen on mobile | Needs viewport-clamping on the tooltip position |
+| F3 | brut | Data / Display | Cadence unit "rpm" is wrong for walking and hiking — should be "spm" or hidden | `ActivityCharts.svelte` — sport-aware label or hide tab |
+| F4 | brut | Feature | No way to mark an activity as "virtual"; virtual activities should be excluded from records | `virtual: true` sidecar flag + `EditDrawer` checkbox; filter in `RecordsView` and `write_athlete_json` |
+| F5 | brut | Charts / MMP | ~~Power curve Y axis should start at 0 W; X axis should extend to at least 2 hours~~ | ✅ Done |
+| F6 | brut | Feature | Import gear (bikes, shoes) from Strava export; edit gear; maintenance log with cumulative km | See item 5 above for gear import. Maintenance log is new: date + km + notes per bike |
+| F7 | brut | About page | Make user handles in the community tree clickable; show online user count | Handles link to `/u/{handle}/`; online count needs server-side tracking (non-trivial) |
+| F8 | brut | Strava sync | ~~Syncing from Strava does not trigger a site rebuild~~ | ✅ Done — trigger was firing after `yield "done"`, client had already closed the SSE connection |
+| F9 | diego_p | Data | Check elevation gain on activity `2026-04-11T051441Z` | Likely a GPS artefact or smoothing issue; needs manual inspection |
+
+---
+
+## Prioritization (rough)
+
+| # | Feature | Impact | Effort | Priority |
+|---|---------|--------|--------|----------|
+| 1 | Strava sync from UI | High | Medium | Soon |
+| 3 | Federation explainer | Medium | Small | Soon |
+| 4a/4b | Mobile record + convert | Medium | Medium | Later |
+| 2 | Multi-user + invites | High | Large | Later (needs design) |
+| 4c/4d | Full mobile app | Low | Large | Future |

From 57fb7acd3da3d3a8804d565dfe509a955ef86e90 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 18:50:20 +0200
Subject: [PATCH 063/124] remove accidentally tracked local files; update
 .gitignore

---
 .claude/settings.local.json               |  31 ----
 .gitignore                                |   8 +
 advice.md                                 |  79 --------
 issues.md                                 |  99 ----------
 site/public/bincio-0.1.0-py3-none-any.whl | Bin 60977 -> 0 bytes
 site/public/data                          |   1 -
 todo.md                                   | 213 ----------------------
 7 files changed, 8 insertions(+), 423 deletions(-)
 delete mode 100644 .claude/settings.local.json
 delete mode 100644 advice.md
 delete mode 100644 issues.md
 delete mode 100644 site/public/bincio-0.1.0-py3-none-any.whl
 delete mode 120000 site/public/data
 delete mode 100644 todo.md

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 58f3bd8..0000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Read(//Users/brutsalvadi/src/bincio_data/_merged/**)",
-      "Read(//Users/brutsalvadi/src/bincio_data/**)",
-      "Bash(python3 -c \"import json,sys; d=json.load\\(sys.stdin\\); print\\(list\\(d.get\\(''''dependencies'''',{}\\).keys\\(\\)\\)\\)\")",
-      "Bash(uv run:*)",
-      "Bash(python3 -c \"import pyodide\")",
-      "Bash(uv build:*)",
-      "Bash(npm install:*)",
-      "Bash(npm run:*)",
-      "Bash(mkdir -p /tmp/bincio_ci/activities)",
-      "Bash(BINCIO_DATA_DIR=/tmp/bincio_ci npm run build)",
-      "Bash(ls /Users/brutsalvadi/src/bincio_activity/*.md)",
-      "Bash(python3:*)",
-      "Bash(wc -l /Users/brutsalvadi/src/bincio_activity/bincio/extract/*.py)",
-      "Bash(grep -E \"\\\\.py$\")",
-      "Bash([ -f ~/src/cycling_data_davide/activities.csv ])",
-      "Read(//Users/brutsalvadi/src/cycling_data_davide/**)",
-      "Bash(ls -la /tmp/bincio_dev_test/dave/_merged/activities/*.json)",
-      "Bash(ls -la /tmp/bincio_dev_test/dave/_merged/activities/*.geojson)",
-      "Bash(unzip -l ~/src/cycling_data_davide/export_18885842.zip)",
-      "Bash(unzip -p export_18885842.zip profile.csv)",
-      "Bash(unzip -p export_18885842.zip bikes.csv)",
-      "Bash(unzip -p export_18885842.zip routes.csv)",
-      "Bash(unzip -p export_18885842.zip privacy_zones.csv)",
-      "Bash(unzip -p export_18885842.zip activities.csv)",
-      "Bash(xargs -I{} python3 -c \"import json,sys; d=json.load\\(open\\('{}'\\)\\);print\\({k:d.get\\(k\\) for k in ['title','strava_id','started_at','privacy']}\\)\")"
-    ]
-  }
-}
diff --git a/.gitignore b/.gitignore
index b80d778..f20ab04 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,6 +29,14 @@ bincio_data/
 .env
 extract_config.yaml
 
+# Local working / scratch files
+advice.md
+issues.md
+todo.md
+site/public/data
+site/public/*.whl
+.claude/settings.local.json
+
 # Capacitor native projects
 # Commit these if you want to track native code changes;
 # omit these lines if you regenerate them from `npx cap add`
diff --git a/advice.md b/advice.md
deleted file mode 100644
index 6454668..0000000
--- a/advice.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# Advice on ARCHITECTURE.md
-
-Review of the mobile / offline plan in `ARCHITECTURE.md`. The two-stage extract/render pipeline, edit flow, and federation sections are accurate and clear — this document focuses on where the architectural risk lives: the mobile app and the path to fully-offline operation.
-
-## What's strong
-
-- **Workflow framing (1–4) is the right way to think about it.** Each workflow is a concrete user story, not an abstract capability list. Workflow 1 (record → convert → cloud) is achievable with what's already there; that's a good wedge to ship first.
-- **Honest status table** at the bottom of "Fully offline — missing pieces". An architecture doc that admits what isn't done is more useful than one that hand-waves.
-- **Incremental validation plan (§5).** Testing the service worker approach in the browser before touching native builds is the right call — cheap to run, and the failure mode is informative rather than expensive.
-
-## Decision: drop `capacitor-nodejs`
-
-The doc previously listed `capacitor-nodejs` as a fallback if service workers fail on iOS. We are dropping this option entirely. Reasons:
-
-- It embeds a full Node runtime, meaningfully increasing app size.
-- iOS support relies on a fork of Node-mobile and has historically been spotty.
-- It introduces a long-term maintenance burden (tracking upstream Node, plugin updates, two runtimes to debug).
-- The "Hard" effort label in the original status table understated both the integration risk and the ongoing cost.
-
-If service workers turn out to be blocked on iOS, the fallback should be one of:
-
-1. **A data access abstraction** (see next section) that lets the app read from IndexedDB directly via a JS loader, with no `fetch('/data/*')` in the hot path at all. This sidesteps the WKWebView question entirely.
-2. **A native Swift/Kotlin micro-server** if a local HTTP origin is genuinely required.
-3. **Bundling data as static assets** and re-running `cap sync` on import — crude but boring and reliable.
-
-`capacitor-nodejs` should not appear in the doc, the test plan, or the status table.
-
-## Things to fix or add
-
-### 1. Add a data access abstraction step *before* the service worker work
-
-The doc frames the offline problem as "serve local data to the WebView at `/data/*`". That skips a prior question: does the Astro site actually need to fetch `/data/*` at runtime, or can the data layer be abstracted behind a thin loader (`loadIndex()`, `loadActivity(id)`) with two implementations?
-
-- **Cloud build:** loader uses `fetch('/data/...')` as today.
-- **App build:** loader reads from IndexedDB directly.
-
-This is a much smaller change than service worker interception, avoids the iOS WKWebView question entirely, and is useful even if you stay cloud-only (testability, mocking, future federation transports). It should land *before* any service worker work — at which point the SW work may turn out to be unnecessary.
-
-### 2. Commit to JS for sidecar merge — do not use Pyodide
-
-The "missing pieces" section lists two options for re-running `merge_all` on save: reimplement in JS (~150 lines) or call into Pyodide. Pick JS. Reasons:
-
-- Pyodide is lazy-loaded by `/convert/`. It is **not** warm just because the app is open.
-- A user tapping Edit → change title → Save would trigger a multi-second Pyodide cold start (~10MB) for a one-line edit. Terrible UX, and it repeats on every cold app launch.
-- Porting `merge_all` to JS keeps the edit drawer decoupled from the convert page's machinery. The two subsystems stay independent.
-
-Pyodide should remain convert-page-only.
-
-### 3. The Workflow 4 diagram contradicts the test plan
-
-The "Fully offline on phone" workflow shows a "Local Node server" arrow as if it were the chosen path. The §5 test plan picks service workers first. The diagram should reflect that — show the SW path as primary, and drop the Node server box entirely (per the decision above).
-
-### 4. Missing: data lifecycle on device
-
-Nothing in the doc covers:
-
-- How much storage the app is allowed to use on iOS before the OS evicts it.
-- What happens on uninstall / reinstall.
-- Sync / conflict resolution if the same activity exists locally and on a cloud instance.
-
-These don't need solutions today, but they should be acknowledged as open questions. Otherwise Workflow 4 will hit all of them at once during implementation.
-
-### 5. Reconcile Pyodide payload size
-
-Line 162 says "~8MB", line 335 says "~10MB". Pick one and use it consistently.
-
-## Small stuff
-
-- The federation diagram uses a `Note1` node that won't render as a Mermaid note — it'll appear as a regular box. Use `%%` comments or restructure.
-- The "iOS: App Store / TestFlight" cell in the PWA-vs-Capacitor table sits in the Capacitor column but reads like a downside. Clarify it's the distribution path, not a limitation relative to PWA.
-
-## Bottom line
-
-The plan is sound and the incremental validation approach is right. The two highest-leverage changes:
-
-1. **Add a data access abstraction layer** before the service worker work. It's small, useful regardless, and may make the SW work moot.
-2. **Port `merge_all` to JS** so the edit drawer doesn't depend on Pyodide warm-up.
-
-With `capacitor-nodejs` removed, the offline path is: data access abstraction → IndexedDB-backed loader → JS merge → (optionally) service worker for any remaining `fetch('/data/*')` callsites that can't be migrated to the loader.
diff --git a/issues.md b/issues.md
deleted file mode 100644
index 1a7bb6b..0000000
--- a/issues.md
+++ /dev/null
@@ -1,99 +0,0 @@
-# Repository Audit — 2026-03-30
-
-## CRITICAL
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 1 | Security | `edit/server.py:351,386,431,588` | **Path traversal** — `activity_id` from URL is interpolated into filesystem paths without sanitization. Attacker can read/write/delete arbitrary files via `../../` | ✅ Fixed — `_check_id()` validates against `[a-zA-Z0-9\-]+` |
-| 2 | Security | `edit/server.py:588` | **Path traversal in `delete_image`** — `filename` param is not `.name`-stripped (unlike `upload_image`), enabling deletion of arbitrary files | ✅ Fixed — `Path(filename).name` strip added |
-| 3 | Security | `edit/server.py:542` | **Path traversal in `upload_activity`** — uploaded `file.filename` used directly for staged path | ✅ Fixed — `Path(file.filename).name` strip added |
-| 4 | XSS | `ActivityDetail.svelte:67,189` | `marked()` output rendered with `{@html}` without sanitization. Sidecar markdown can inject `<script>` tags | ✅ Fixed — DOMPurify.sanitize() wraps marked() output |
-
-## HIGH
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 5 | Data | `metrics.py:116-148` | **MMP sliding window on non-contiguous data** — gaps in recording are collapsed, inflating power values | ✅ Fixed — dense 1Hz array with gap zero-fill (standard GoldenCheetah/WKO approach) |
-| 6 | Data | `metrics.py:170-178` | **Best-effort times on non-contiguous data** — pauses removed from speed array produce artificially fast times | ✅ Fixed — same zero-fill approach, gaps count as 0 km/h |
-| 7 | Data | `writer.py:85-86` | **Activity ID collision** — two activities with same start second + title silently overwrite each other | ✅ Fixed — collision detected by source_hash comparison; disambiguated with 6-char hash suffix |
-| 8 | Frontend | `ActivityMap.svelte:88-94` | **Misaligned lat/lon arrays** — independently filtered for nulls, so `lats[0]` may not correspond to `lons[0]`. Start/end markers placed at wrong coordinates | ✅ Fixed — lat/lon filtered as pairs |
-| 9 | Frontend | `EditDrawer.svelte:121` | **Backdrop dismiss fires `saved` event** with unsaved data, overwriting displayed title/description | ✅ Fixed — backdrop/close now dispatch `close` event |
-| 10 | Schema | `writer.py` vs `bas-v1.schema.json` | **Writer output fails own schema** — `mmp`, `best_efforts`, `best_climb_m`, `preview_coords`, `custom` written but not declared; schema has `additionalProperties: false` | ✅ Fixed — all missing fields declared in schema |
-
-## MEDIUM
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 11 | Data | `metrics.py:89-90` | **Falsy check drops `0.0` speed** — `if avg_speed_kmh` treats `0.0` as falsy; should be `is not None` | ✅ Fixed — `is not None` check |
-| 12 | Data | `parsers/fit.py:89` | Same falsy `0.0` bug for FIT lap `speed_raw` | ✅ Fixed — `is not None` check |
-| 13 | Data | `metrics.py:222-239` | `_best_climb` filters out `None` elevations, joining non-contiguous segments | ✅ Fixed — `None` samples reset Kadane's window instead of being skipped |
-| 14 | Parser | `parsers/tcx.py:89-97` | **TCX timestamps with numeric timezone offsets** (`+02:00`) crash — only `Z` suffix handled | ✅ Fixed — numeric offsets parsed with `%z`, converted to UTC |
-| 15 | Security | `edit/server.py:22` | **CORS `allow_origins=["*"]`** — any website can make requests to the edit server | ✅ Fixed — restricted to `localhost` origins only |
-| 16 | Security | `edit/server.py:406` | **YAML injection** — `hide_stats` values written into YAML frontmatter without quoting | ✅ Fixed — values filtered against STAT_PANELS allowlist |
-| 17 | Data | `edit/server.py:497-499` | `save_athlete` mutates immutable `athlete.json` in-place, violating extract immutability | ✅ Fixed — `merge_all()` now applies `edits/athlete.yaml` overlay; server only writes the sidecar |
-| 18 | Schema | `sport.py` vs schema | **`skiing` sport** produced by code but missing from JSON schema and SCHEMA.md | ✅ Fixed — `skiing` added to schema sport enum |
-| 19 | Schema | `sport.py` vs schema | **Sub-sport values** `nordic`, `alpine`, `open_water`, `pool` not in schema enum | ✅ Fixed — added to schema sub_sport enum |
-| 20 | Schema | `SCHEMA.md:140` | **Activity ID format wrong** — docs say `+0200` offset, code uses `Z` UTC | ✅ Fixed — all examples updated to `Z` suffix |
-| 21 | Frontend | `EditDrawer.svelte:106` | **Regex injection** — filename with metacharacters (e.g. `photo(1).jpg`) breaks `deleteImage` regex | ✅ Fixed — filename escaped before RegExp construction |
-| 22 | Frontend | `EditDrawer.svelte:85-99` | No try/catch in `uploadImages` — network error leaves UI stuck in uploading state | ✅ Fixed — try/catch with `finally { uploading = false }` |
-| 23 | Frontend | `RecordsView.svelte:99`, `Base.astro:220` | Hardcoded `/activity/` URLs ignore `BASE_URL`, breaking subdirectory deployments | ✅ Fixed — `base` prop threaded through `AthleteView` → `RecordsView`; `Base.astro` uses `baseUrl` from `import.meta.env.BASE_URL` |
-
-## LOW
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 24 | Data | `cli.py:341-350` | `_patch_duplicate_of` silently swallows all exceptions | ✅ Fixed — logs warning via `logging.warning` instead of bare `pass` |
-| 25 | Data | `timeseries.py:26-35` | Non-monotonic `t` array if input points aren't sorted | ✅ Fixed — `t <= last_t` guard rejects both duplicate and backwards timestamps |
-| 26 | Data | `simplify.py:49-50` | `preview_coords` returns `max_points + 1` elements (off-by-one) | ✅ Fixed — subsample to `max_points - 1` then append last point |
-| 27 | Config | `render/cli.py:42`, `edit/cli.py:66` | `yaml.safe_load` returns `None` for empty config → `AttributeError` | ✅ Fixed — `or {}` fallback on both load sites |
-| 28 | Frontend | `format.ts:18` | `formatDuration` doesn't floor seconds — fractional values display messily | ✅ Fixed — `Math.floor(s)` before any arithmetic |
-| 29 | Frontend | `StatsView.svelte:31` | No error handling on `index.json` fetch | ✅ Fixed — try/catch with error display |
-| 30 | Frontend | `ActivityMap.svelte` | No `map.resize()` on container size change | ✅ Fixed — `ResizeObserver` calls `map.resize()` |
-| 31 | Test | `test_writer.py:21-30` | Weak assertions — only check substrings, would pass with malformed IDs | ✅ Fixed — exact equality assertions on full ID strings |
-| 32 | Test | `test_sport.py` | Zero test coverage for `normalise_sub_sport` | ✅ Fixed — 3 new tests covering Strava CamelCase, ski variants, and unknown→None |
-| 33 | Test | `test_merge.py:70` | Test uses `sport: "gravel"` which isn't a valid BAS sport | ✅ Fixed — changed to `"running"` |
-
----
-
-## Second-pass audit — 2026-04-01
-
-### CRITICAL / HIGH (new)
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 34 | Data | `writer.py:88-93` | **Disambiguated ID not written into JSON body** — collision adds hash suffix to filename but `detail["id"]` still holds original ID | ✅ Fixed — `detail["id"] = activity_id` after disambiguation |
-| 35 | Data | `cli.py:79-85` | **`write_activity` return value ignored** — caller uses pre-collision ID for `build_summary`, so index links are broken for disambiguated activities | ✅ Fixed — `activity_id = write_activity(...)` captures the canonical ID |
-| 36 | Data | `writer.py:88-92` | **TOCTOU race in collision guard** — two workers processing same-timestamp activities can both see no existing file and overwrite each other | ✅ Fixed — hybrid pending-file approach: workers write to unique `.pending.json` files, main process arbitrates by quality score and does atomic rename via `finalize_pending()` |
-| 37 | Schema | `bas-v1.schema.json:90-128` | **`activity_summary` missing `custom` property** — `merge.py` always adds `custom` but schema has `additionalProperties: false` | ✅ Fixed — `custom` added to `activity_summary` |
-| 38 | Frontend | `EditDrawer.svelte:101` | **Undeclared `error` variable** in uploadImages catch — runtime `ReferenceError` crash on upload failure | ✅ Fixed — uses `saveStatus` with `saveOk = false` |
-
-### MEDIUM (new)
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 39 | Security | `edit/server.py:409` | **Sport value not validated/quoted** before YAML write — YAML injection possible | ✅ Fixed — validated against `SPORTS` allowlist |
-| 40 | Security | `edit/server.py:446` | **No image content-type validation** — arbitrary files accepted and served as images; HTML upload executes JS in site origin | ✅ Fixed — rejects non-`image/*` content types |
-| 41 | Security | `edit/server.py:270-274` | **XSS via unescaped filename in `innerHTML`** — `renderImageList` interpolates filenames into HTML without escaping | ✅ Fixed — `escapeHtml()` applied to filenames |
-| 42 | Frontend | `MmpChart.svelte:154` | **ResizeObserver captures stale closure** — after toggling range selections, resize renders old data | ✅ Fixed — reactive variables keep closure current |
-| 43 | Schema | `SCHEMA.md:113` | **Sport enum missing "skiing"** — JSON schema has it, SCHEMA.md doesn't | ✅ Fixed — `skiing` added, sub_sport examples updated |
-| 44 | Schema | `SCHEMA.md:109-129` | **Summary fields table incomplete** — missing `sub_sport`, `mmp`, `best_efforts`, `best_climb_m`, `preview_coords` | ✅ Fixed — all fields added to summary table |
-| 45 | Config | `config.py:61` | **Empty config file still crashes** — `yaml.safe_load` returns `None`, no `or {}` fallback (round 1 fix applied to render/edit CLIs but not here) | ✅ Fixed — `or {}` fallback added |
-| 46 | Frontend | `Base.astro:101-106` | **Nav links ignore `BASE_URL`** — hardcoded `/`, `/stats/`, `/athlete/` break subpath deployments | ✅ Fixed — nav uses `baseUrl` variable |
-| 47 | Data | `render/merge.py:161` | **`athlete.yaml` merge has no field allowlist** — server restricts editable fields, but merge applies all keys | ✅ Fixed — merge uses `_ATHLETE_EDITABLE` allowlist matching server |
-| 48 | Frontend | `types.ts:102` | **`ActivityDetail extends ActivitySummary`** inherits `detail_url`, `track_url`, `preview_coords` which detail objects never have | ✅ Fixed — `Omit<>` excludes summary-only fields |
-
-### LOW (new)
-
-| # | Area | File | Issue | Status |
-|---|------|------|-------|--------|
-| 49 | Parser | `parsers/tcx.py:101` | **Timezone offsets without colon** (`+0200`) not handled — only `+02:00` form matched | ✅ Fixed — regex accepts optional colon (`[+-]\d{2}:?\d{2}`) |
-| 50 | Parser | `parsers/gpx.py:59-78` | **Power data in GPX extensions not parsed** — MMP always None for GPX files with power meters | ✅ Fixed — parses `pwr`, `power`, `watts` extension tags |
-| 51 | Data | `simplify.py:63-71` | **`speeds` array not filtered same as `coordinates`** — could misalign if `simplify_track` changes | ✅ Fixed — speeds array uses same lat/lon null filter |
-| 52 | Frontend | `ActivityCharts.svelte` | **No `onDestroy` cleanup** — chart SVG not removed on unmount, minor memory leak | ✅ Fixed — `onDestroy` removes chart SVG |
-| 53 | Frontend | `ActivityCharts.svelte:83-86` | **`resetTrim` guard always true** — trim doesn't reset on tab change if min/max happen to match | ✅ Fixed — tracks `lastResetTab` to force reset on tab switch |
-| 54 | Frontend | `AthleteView.svelte:30` | **No validation of URL `tab` parameter** — invalid value shows blank content | ✅ Fixed — validates against `TABS` array, falls back to `'power'` |
-| 55 | Test | `test_writer.py` | **No tests for `write_activity`, `build_summary`, `write_index`, `write_athlete_json`** | ✅ Partial — added `test_build_summary_required_fields` and `test_id_utc_conversion` |
-| 56 | Test | `test_sport.py` | **No test for `normalise_sport("skiing")` or swimming variants** | ✅ Fixed — added `test_skiing_variants` and `test_swimming_variants` |
-| 57 | Test | `test_merge.py:58,122` | **Non-canonical IDs in test fixtures** — use colons and underscores, don't match real ID format | ✅ Fixed — IDs use canonical `2024-01-01T080000Z-morning-ride` format |
-| 58 | Data | `edit/server.py:549-551` | **No upload size limit** — file written to disk before validation | ✅ Fixed — 50 MB limit enforced before writing to disk |
-| 59 | Data | `edit/server.py:586` | **Exception message leaks internal paths** — `str(exc)` returned to client in 422 response | ✅ Fixed — returns `type(exc).__name__` only, no internal details |
diff --git a/site/public/bincio-0.1.0-py3-none-any.whl b/site/public/bincio-0.1.0-py3-none-any.whl
deleted file mode 100644
index 18bdd2e159cf8b914ea611b2aa98f28e166e6f05..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 60977
zcmaI7V~j39vn~9LZQHhO?6Gazwr$(?%pTjeZEKIYN8i5pJIOuoxykLMI{l~8m9;um
zN%blPX%J9U0002_&x92iY|;#s|DDwT8S+0fva~a{v}e%Qx3sf#(buPU@Kjb(a+;i$
zo}G4=p`W0gqODZ%SY{L>qGKa#q5MtCCiaV{kC08ijkB+rl1r5csjRG>^mmDdyrg7g
zG!1_*ZA%3wivR<^-hi6Wgy5XQoM0pjK;b_^xMx;t1p)#9cz^)_xc?J^v5n=w+hY@C
zr9hbwLtkB^h?_0~b|TudLf?jHK^;%{hfB1Ab}BPwS!ZWOJcQ+q%KS^lum(0mx~t+}
zt3nXvaVNvPtnO|O@F&XKhx%vBr67U!H~X0iEpt4<DoEPiuDcy$lz&y`8J(@ufC1Kq
z44#oaaiF>U&!FI`1V(@p4Jt>~c=RP`>+cfzYJr?hU$+L%M@iSZnuqG+<!dICmLspR
zoCx*Zx?{r>=2&zWD{+z;hSZ+&jPR?R^0?ke59Dj-AG7t2P9HuG0ddDoS4nti!~Xpy
zJB7C2NA-VE@UdEsDJ<LXm|#DY)i$+E+ihFgMw-ibZ(^i#EUroN64Gapdx8EFtAFqS
z{=xLW7skK+zvwbGv2^+GoPqogh*80fM=QYq0851bVEKQ${TI&a7j|3Xh~IPNm^R-D
z6{2L7fxyD3%Z@tzf(h9Cn*>n<HRGwxkg|<k(i1_31qcfi*U2ts2vV!68v(Mjvn|d(
zEG99sCaF`{qC{|?AFl!mt6U5_)#z44s4~`Iyc|wMGtkYnqO*yV(uK;S8mO|WUyz#Y
zwzActX@NdAR;B^!s<!QkuBCkPLo?ke$^8zo^*8-B*qSrIU$0>y9#~@k;9&ka;7px9
zvy7v@QUd*kdBqkB<cBWdj4V1=r->7ekME{VIEHFrLuvBs+Yft%snkG#W;(I86xY9!
zdLs6CX2CFJG0LB{4+Is=)`AjbN<3PEKI~+ZwJyjLj<`rx#B3)u^^Qrp!U3P#&Fi@e
z%v+nHO}J6<?hm)_WG@|=9x<zW!CqX9@T;DLGq$mlVZnv9sXJ?7A8N|q>oca<>g#(K
zUL(Ca+pNGwV-Ri`9;lb+{Q)Yi@w@I5Ah)JAw@B_NkEuE;fmPTExERdldUqKikd8>*
z4+T$;LQMu~wK)zXEqL@9_>e$Py_hoE;*YTUy>B&acWXEM!#PLatE21JGgZgm^i{W`
z<?G<*3noXQ;~S=-;uEw3{H;=7g==CO?BbtV;-GhlopZG1HV!0+Aa|!1tpnwJ2xrH@
zU`Kx|*BiRzJFHx8zoh*%m}X`pt1xDg5ofrzWBl|zuu-mtX(SrsT^cmgU=Y4;G?~aQ
zWl|505jpLdJ#h$1?p}&F3i_8IkeH*H8PcIG3?<9cKqm@{e1@H1C(hssz%H&fkPmHN
z+*SPa+hI(lp8)vI2RDJ9FW?0Co~}O}Sv3%D#bB{zWrZEG3hb_IfW~4UoV=D6hVens
z!<oYtth=Tf3u}9;KxFLAcCqxkg^QNv(D|3Wja|Sz5aK?n3Y-z+rl9XcD=>_xwtx^&
zk#<D+m;JKU`h+*GJqB~Vs_Dcb6$YGJJYR=Om72BNNGZA<WeLX9>mswVayPa4DO%97
zM@OHQ=%o>Zm0$I`^+2^0j-F8?*@||T1KrlG_VDi_>p;>=Xj};SGEn%u&~f2`v4g@k
z&0)QBxKD92@{kk=K<wx9SH!cH!HJY!r&EG*KUA0UhoI$V;fK@h_H236v}3}W=?siL
z`>qR1E))t&I)P}~8HT)LQru$Ywxdb&8b`^9^_86dSU<9n;dO$Vdo12eo{vr!#Q3bR
zAo?ciqBzm_u<}dhgGHcKPQAzToy@y87Q%J3yS4UdlGVkx6{Mb-c_+W}r=CqR0zYVb
zzvJV5`>u8fe81+_J95H(g}^nowZf2xQu@eHsN#t{#!;YeA@)#hX<^Xo+H36@Hzyf{
zvcMQuP?{F!zDhJ}3R74fK983}q|zb5nt3@|NO*{D<c}=7ZGJC`8+m`{Vq0-%-XP|B
zCUTLN14<_*!ZyvY-wmIAwXdYlv{>Z`5so&wS`qEli3m{(#~~CV2QErWSEvSU13np%
zJpQE8@NNchC`$o^iZ;p1%@@Ok_Gjr=Y!X+I03WV;Qw=JNV%&OCH8cd;MWgY%LYF<9
z2oE$&X0{!wpHN2+r5FMHA=H>sT&`f1!#Gu}9^tZD0)wMPOWCMm`6G6;b!r&b{#AU+
zx_c0hjlNdAgA8_|QQJri$9A(wLR!DN!iqC#>lj}eFDcHF*=1;X6DgX!5)Pg{?iLiu
zopM>DUTKzmD4a%jS`i#2iv^V&Z5D5zD2~zF=}|WetZ+>0S{w;X+zfCgewfm2im3Lt
z7Q_(MPVIn1%laHshmCHeFCSGeZ`el~M7qVXkX(3?UHNVf@Y6&JX#Jf>pNNOUHb!54
z5#6EuZ>>X6@clj++dGYhL(kXand~RngS0Ez1HH%0hU{T4X#)(`=noXxsmkG^#(cVi
zkGhXWX+yq0SaceD`u=;q2qST+`#jvVZk5S0ML+)|vCrcbhd2-e0CZje0NVek2hOHW
zZl+HEYUm%nEvN0#)Z0fiTgq&pLo8S-={V*^#%dTeXZ2PU;#5~*XG4eiA)yE$L;y*Y
znMP{4?{2utAA;jwFY=#c-t;?y9N^A{r6z4k))eIP=}YDE`QGlvxMQAJX)8+{zl6md
z$)q&9(?j3x=ll=GlvJFl1})M0;;XIg9&aQ<EJ^F4+JpWw#~riMhV(@Y)5@7#@Wd@$
z%|zJ{1sSx~q=mu)BQZSGR1_FzsT!i0TW(xcHVUL@R^`J~=1;yiMxlJEjlfJWJ~m`g
z+;@P#f$Mb?b<Q3=38xFl)}tY_Wawv%bqdS66Y2psg50l6Ok@usC})z$f!wQoJ5o(q
z5$>KyqKmJO1|2dSQc4}GYDoBJp_PXH{e0d!s=uP{k|vtMJ*BxC)z9_$x~!$fjqvC4
z`;vWpL6^`Ow=9+R>hV65O=C!INJ`}FD|`0%zLdzB(o~c9?Lz>9Ul~vsRdp?9hz1TY
zlnFudN8U53L`C_#L}NG*WSSUL=n51%+g<f=Z;@iM#F%Mr%I0@B^5t6&(Q@#?m_hzq
zrkXJB^5svJk{paC)=CfK+=1l6dhH=~BFdR&j@;38rCE`PNs+M;t2tqjjTW&Iil`$1
z76A6#6~5%3MY@q%k%+2^q(5v))yUdGE?0Z%SjmNvrxb|*gH_hgfrTh_JoQMLN9^Q>
zDJIkuW+&e-@Nx)OK|3r2f=^9(9Qw&f6`^-hFB{cybXzpnqt9bj9$Is%sUjzryN8?C
z51Y$TAAfNhJ)|B^5k8x_;XywnfxiCcnWiSVd@$ik{~K<a@9oc$`Y(o{@;Ui9KW~?Z
zuKjZ`#B@&kL=f{%v7bHpp#uc@@V-5q@5>s`Pdg8{CXV(Whuar(U%*oIu?*-^M~>d0
zRi{?g^Q4!NM}YrW2)e|r_B+IWzxZXmUI8{F4HFpZ5GNTH>Nr$@X9nOx$YQY)*%uUf
z4s^UjV`NW1WW~j<X#c+9O&)2qw3%$tx1kLpg-2>HToN~vk_-PC<Xao~0|(&UbHq`<
zmxl{dDVKY})?nooxXh4dS%rUgU+UEfjq;_THxeD{*Bi5<4E~_TY2I^`Tuw2NUA~9g
zYt+x2cq<vN_^2}(0gz4@EC6VZv{BL0C4dn;UPtv43jDmK3k>~8z!cD*toaB00QD{A
zD4=leJ?Htn96moL@AYt@K3XN>KIQEbB!*m!3@26wgY|#hK^&8zE_rICG-h$$%IU!q
zaCLIRVH61Njy*uLm5bm)3Nt&_9adz?6GL6f!(W&Z9<tUQGGe6><~TLp-V$Lh3PF@O
zH-mdI9}ey&H+GKp^<hTn$Bfk|UNGgT76{u7d%hTIj0yl4Vh%b0l6b-k#=jw9=3$I~
zzhasYMOEPE*?S)mgY@<Rt>VJZ72fUc*6;5<j@@a|M{9DXDzyGUewQ+bL5aQkL;Zxs
zSL%}q1jzMpz})NGv}gp~geU3W4E3oX%asd)QT{#rT=?2Z-;Rd~SM2U*Dq_I*>4>)_
zDd3DHGDp}au+t7v?4}(v@@M!7h&96s!U+nKId15tr|H0qFel_r*AHJZ_VS044M>hZ
z5hD+@53HVIqzf-_KiW9jwY}wyu1hpIczP%rPopyU<fqjs34X;yr=Nh<4Ppsl#&zL@
z!Ekh{wQd*}L9K+BKzQ2p58wo*cj8RHAHhZ3c_qM3>63>Obj$wR)AQ=A6OYK)7-mL1
zupcpmsFPkp$b=s}C`IOqHP`go{Fg@7K&eqsv|-1GAS=V-?<)biQ(>8FDdYPI{=FD-
z-W2HOFUL#@BAHiQneh|j>L1^n&`?^s?(z+|_R=b54V|nTTL!sDvKk4fDhp_TByC20
zB1ZyA(1nA1SYf_NfeJ%4b;;ipF=d%f1X}4>Rk|&4Dst7uCPK~&=`<PHG&XgIWn^<{
zXp3s~pzG<Vyy(Q;*zsYA-`_*XSaGKUd8SLIm6Zj1taNX=pdCOBgV1d~VQvNrnED2R
z)Zk)^Ml}%LGCuz3Q=~yJwJjSzN-G%qO_*1{io*-We;MY@5{r4l*J&}Rqz-EOe?)vU
za0thZ5F9g|P?l*EB_!W&@2dLY-}F~r74@vk4O36p>M1q$0rYA@ftEcImGBNiSrW0(
z4A+g6iB_KI%4oEzGm84ezmOzb9c3}*03~GS@r7F5y6Aoe4fM`Id|g@|U1~a0$+8HC
z#mbNb$01TeL-{}eGU0>9$pFzB?X~-OpjiraQM;oKRUn&Xj^LWcXc&c2I{rhnruPu-
zT~l3xKh1To0!F(2gTxQ4Zn}bYUy+qF-41Ib@lmt{-vNQEva<9Axe<d-^lb~#*6%Y-
zs{u3ESVUSAW^g=~i@$TSRV~W%D$WM47!hTmctbIU;Hs6EN~TZ&*B(fE<A%uTEAndQ
zA6j3`H5a@$3bEQxnzH*4TAqbsACST8dW#>>r%{e=_x$=n6B63=DAj^|#C@)G90B$W
zZ|wOKPpTtYK34Bd;-(Zy=}2Pq(o?Qlk%aE_fgK6)%Wr3BO8pNCH#jfDZcLp!P=BoW
zK-H_GY1x@%Gshnsq83bQg8<n~GSs~Cq?>N40_fkt;=P0!@adAJTL_Q978)*Hy|$6<
z9N9CQc$xdg5$QW#HgnjY3qzfAV5WlCg%;vm?F^PJAoX>LGuUt3F0B<ujnFg?&C_gu
zh3S~p|8AHLslDP0I(%Bp)ufGxw;st%pj!$c45Sl6>@X(MVf^V`b(I*Vk6D{ZBwoz!
zdcST(K}T1l$oGkPw8cRj^0~g>7JyA<`Zy`>3B#@cS?@dmmO#EB3LUA%x>*yCc!L!-
zAv|E7Gi3tP3XV%u4W-9*qJh7<<qIN&JaGt@2rJbn)JdntD1vWS-EzhC-STEu3j9n?
zoTM^fg!V6b>nW&;TtW=GC>ZZoaez1Awc?W<Y|P=Dwo!paE2JMybsp|cXo^Gu9s5NQ
zKG4-xAJotFb}#U)%q!wo#T@9lN>Qxf8pg>KM=lrVl?Hj;+=TS#i|q$`v?L;jm#~G)
z$Jn>5%oG{HdxOi1bpp||N}90qgzB&ZNz2d4YB^0jcnQ>R!>;_t!ewRW5c+JN5*SS6
z?bKD<nDI{88q*C<OiCPY*@+XjLIxM?3-pH<OEGjMg^zhSN4qK|!HcMVN9e@`lrpq3
z#~g}wd)Sjq!~te5nX#0tBZV1bz6x*zR;3HKSx{~1uYN5pC5?xBluv)n)kyTzQ7Nqd
z%#sBS1REMTwf~%*T)ei23lRuqF`TekVAE&QzdQUT9M*r(7x+_WV5g9)MOE|eNjFpK
ze-NE4tQUo`K@95t_O_BP2QxyavufnHoL4cH6O7TAgU)mkvc|YyRw*uPf3|<s&>quR
zt&&nOYJg?Z%>Bbn6hO-8O(UfthK}?N*ES;Rkq7i;VJuu;=KuMquPDQIEH8$^9_C&&
zF`({9>Nr*byplaxqLbTKDV9YWB66G|a!d3=uUa`V+CQ8@<^R2M@aXUR@^?!lIret2
z5f4S&xQjbIUDD&XC$KEx4%w(0NnXJvBSags&{`u|xfG`ctjnlivbejVk5NCO{)Kr2
z^N7skc+#!v&Tlw@JA%C<xuMzh3wY?Z&OVPJ`N5G=v~EwRH_vRuYpv=0$>Cp^At~-h
z2N;MkQTZ@2a$sOgr2+kJS;IELbA}yLs=-FUbs*Yha*tNl4v2|mdHsRQSjDrZM74$K
z&91Q6I9_fU%z9Yc)Mt+OmJ+J)rq~ZwhluA347k4oBuKz%Y9-5k_m)SUgTJhT?C@tj
z1lF6wz#-A@GLI_PQ_qy>=P(>qKd3PmvF_mzw1c?tg{ju1JiM5V0N|oUO=dXIkSf3Y
z_!}-P4Zcl6=wlCrE+Tmi(R}B#fgdcUheO;F9hv#<42v+|1n1hFK1g^s885xdKg{D*
zA$VCCk-m^V@hr*sFQeyx7LV{b<*W)#hp(fzg67*eup`qOvu2qLhBIXL^L*^dE%#XB
z`TDY^mg$C%1yT9)d>!~y!{B~nqP!`x>(Upr`4d$Si5?y`T@{c2;qWsd=nQ01{1}a(
z{+ntXNQq3F|Mf2L1;to4Zb+x#!l2%d1j(&VSWH+GvEGMX*^SH~sM%g?b)MTZXzS>y
zgSJ1@l?PDyixa-G<Uv3#UHPjfad$COr^3ygx@5N5u?q{hlf@RG(K@sr_GK@^ScNTk
zFGDA3i^!`uc^Sgmu~jeq0RnlJzS#7aQq1;Q!PLx~PmmO(ahCJ%Mdn$s2X0uuPw6RL
z%uK>S`B_9$-XTGHV>>@N0}IXeEf-B3;l!$ZPX10x+w8_GD=G;G-`H^fQ%=(!@(E0$
zr;M1S+9WdQlte5@sYJhi;KM*Lrd@thn=kZXNITg&jgr`s(qvj$NUdOF|4tD*<ZNhN
z8z4^(18`-VOuR~6jr_!`O^%eSD@dC42p%$o?zc>68MhZ;Clo-<Kn!y%mP2?6p(k4C
zw6?4VXhSRoHD&hNnR;NAq>XaB(S6D$8$&ab>Q4fUAnbuil%&g;9=w!0PuBww*icb;
z==4h46>9hT4S=<VwB=>pT4g3YFl(Z<+yP8JhfGFzHS5H5FZ(g&6IKAjCMQD%s1_oi
z^$>oeVC^XDKsMk@+oIy_Ne|mSCl<|8guiHln8RX?bsX?gG(Om*I2P`|kT!BklqZ@R
zE6+v0^5RQs*J?MBKza%~3*%ixcbCHaVo5^ryuB*ul?tlWntb85%bgg<;yGMLbrEF}
zS5rWdk3)yW893QsCoA$Sw2xN2DNCMO<5LXqi^W?&tcWlGv%uYOR%zKf^MQO1qjDr{
zf3fAI(rzkmKNf$PdJ0bnYreUVKgl?XiCorBR=~AhR1qFxho87|qqQV4eJIeVF%`fK
zXspDLHfAzfwLoVTDhb`5lC>xAAB5B~yEcs@JmOx%HDMY=_^Xh;jvU1wsA7Vk{y7WW
zyog`75{kzeC<h)O8(a!d2*R3Vg7>o4SRS0CXH&y=QyE&lIW$&{=i_ghDJ3XhGJ&Fx
zz(LBDc=V*pzC4?9vSXhI@WfE77ciEWg05K=CR4Dooda3Ngl~&#K%K`nv*8k26Q6J2
zoGbFRat{((NcDZte_f-lcm{Lbk&@|eFSzf$m;c=4`+heq0CeaPD*aD4V}DOyS<f5H
zwQQ9U_&Vrdgg4Bt<AI-)9cKpETG(J2V4przTP3zfg)dVLHx8Vg6-NvGoE;GR!(KMg
z`wEvznxf$=9E9qgD;yA{XX<X3AA0M5UOMK(ss%4kZep#bw(4-q_eMfxKD~kFfErc8
zKefD>Bc0OILXGL~X%}iY<)7nzUXK<mPj{{S&PL;Xhz9vau-uCrvI-M-`mjaxokO}*
zx!1Nj!~J~q-&iPtM(qp7nEMeyFSpZQs4AtK4zyAvtg6K@jrs}LYm(^o_Wt+oj|)ha
zsxIs!xe4C>)H~Z~tAJsmQ4V5lklt^Y5YqzvdGMH+HWKXFCF|dBUn1DAz+**9HjU;p
z5FecP10lE|?6Y@Kgug4(n{+JW%cp+6g3~~g6a2kNWW#mE=m^RBzpBZHcsBekPL;I_
zBQJN^Ipm-#BMr{ywHl}kyBfaS9uJ8)36lW=4z98dgdDxCnb&B5r-y9euxO?0;qHAL
z6O$$B+7ZYR>XzNPCD`ybSn&oN-!xzyds1N(r_&vD06k@MVh1qf6q4Dyt;v;-(}{gk
zx$zq+U~I<9c!jQ3DpdP9TlTe}wV$rIR%#{liz&iukGEwnJj^4A{S<czvX%|9?`9O8
zpxzshY!F47r`r|9hdLsozt7?ZUd5FM5a~N^pd@5ms{>2|cT^2yUmc5x=SQ|VY0xU)
ze{ty!DR>=wPphCm_+U{a?zI)TjMQ(CwRE7N8p2>4YW^vAiI*LBqKDr63!|A<(B2w1
z<j4%q8ok6Q`J~nIG)OBW1?(nmM^@pJdI_T3&(lZ3?;_`(cuDeV-$bUT`Bz_n>PHe`
z=kX6bVw|A<x8sF4gdPCf+HO(RLjas%)uz|wK7n2r7aL=ckp%dGIhr92tR`S9>}+F=
z$%W0}b<X1oyumpaso79F81qQTQ@q*t#L`CCO1;yAO+w$~!R9Sxu!pHGXq(%kFoFmC
zx*)^7UdE-tKA>ZTZp~O?0$fuLeE6N-b$z5_g6m3Pg7fv)Ux!13)$4umc05#RH1d0d
z#b>+xnDzys{GeoH_mH<$XrKoxCaAKrD~Lw+h%A{{=LR!`afwqTwZk$;ja)!|CFGbj
z$s`Wtm)SP<-l=#@Agk^}Mg+KgCyG)Z)=}md1$dF>;%wQ=C}(T^nxSm`3q9$JBIq-$
z4_Y?SCOeC!rhj&&Os`PKQtD2P@$RiLew0FJ3uziP_pOB^+GbL~jjn9Nj|69xB&{@r
zo_Sm-iCEOCZVh$-gFpa+MyED|9$$dqTBZG;%zXhGJE&9GIYuC^lsSb^N8lIkJhgJh
zcc9$?UJw^Y6M|Ts3w8-q0}+r$!(-Vo4;l;2nXq_V`GGEoMg%_;!)OeiXEEgr`HahG
zf8;xO7|AwbJYMOWhV9g%9OaZOB{c2<+^M5oavb4&IHHU)U|>yGHkL7Mi9qbA(u925
z&EnQ`(hp*zqB(RKNS6=Jo5Cw57fB_$D5!R0S+nTC8)KrAtS>7iJS*yp4B=b3qIRt@
zL=TTDQm|fTGWdh@g>Ka~mtcA_yle;O{6i~Tl3z+32EK@AL9$3PY_CVm{RZH;=sp~q
z7m+Yf=(;(1&oY&)Vq-m(l1IadEbNImtg16%DJ*KV6Tr4A0Y%Qd#R#`@@qx$NDSHrV
z?z-T7Gj%?3<rkB;ZtA*aH^^FF7oxIDxq5$gRgMq9n_`<ifla4#fNfa`o6@+m3Dv3b
z#sJ&6nih9flQzd?Q;n183Lef^wXHspdRc6`zQ+ZDHPSZiD%?Hb*M!h@TOR0Xn^SG`
zH85>QmaKeyO${o*jA}kry3V!)PTj9vO@aLx9zCI$=Wh+Q90G+G3gG=a8#W&PG$=yc
zWg=JWso#glXJVY78z;x09GqP)jv#f~NXi7faIl5gWz7kl=FPJ87ex{FQSD6TmsQSv
zEWgBVI85e>PKX&?pWLd7URZ8d@3{?|;P1|dpgNPOd98E$ZZ7A@wOnh&WJ|&Atb8~z
z99rS=)Tpfo95)M`i&B_11m?s)*M!_-Y5-;KtAHv~KfDZX0Ruqck#s|^=}~DX-IG-%
z#Rx=@d|CU+-0ElGpEack8P=TLCy1gsdhRsuHuG5h<s68N=DUmeVSF+OC-vvNRiYLa
zTzDebfPl_Oa7dE)==M(dw-{JCJ|MVj=Qv769y`LZ0B@S4)1`F&bxmbNaHA1x>zr01
zZxvJVx;5ntIq;+I`o8%Fjez~ZMInd!UZ%!rlE2+xxhX=7TidK&P=lm}tIs$Uoc6&W
z2PWwS%Zj=CxxRUYB3A2eRW}8fs#@!dZ`VO!DocfT3kcXadl&<^rUll=AHA>fWzTS;
z4x7(v)AV~jZ{*dFds$ulleTO!F#2g!6w}bUVdOazgeS|Wr;0i--tpUdBe(VUG^9^-
z2rXn~p|HibNv4=1>4X)XfGdq{S!7unetA{B5yld3(DUnuz?e)C3r67PHc3S!0*Yau
z88E+81FfA)Ubt~SVpBwyWtmR9Leihl&ZJT)-bGeM4-j>~Uy{}8j?;qo@2gi4t<_w5
zzck?LJGOhO9V+~4D>7l!kBpn1bx8+;))@sx$}`+lHPu~T0q5!|s<znY{rOmg+8Wo$
zBz@5JLgh)Q7Qlbk4v3N3h4cf|ij&1u)098T5GBO-p94SxpC~T$_h+O%Wx-MHXF;7|
zrE@e>A=IC8lZpF5uuZ=#lTTYx3?swEAdE()08%ssZ1}RJWn)yVLKL-j!eBh1q0kGz
z`6tv@+Ov20<Ogkr$<$m5DNNX_VQM2rGkP}GY1@Fs#qgVKMVRk?sRa*}6+$BrMQorZ
zyF?&C5J|=HD-PfL>v!Kk^~Nj^;Z+!d`6@@?B5)h)`6XeN8va?4$&dnT@ztFvdAg_0
zD9kOe2NmKFRdCc=k@M8u{Ub&5vJ0KNRSQrbvHtwZ8fy!x&sKtTi!vt7<R}<8{p~I;
zMKJ-s?*j98GzGiwVhyiVGpQ8~rs)|E>365wQ4yIZ4}K@vfdSP3&Mz$K2Wk0txTm0h
ztfPHOvF#IcoV+=y<+twpUwTwT(z5}(cHK}_elE4XD>Si4sZ{~Bi}KhVw-%o-bXkYp
z#8GALhhZOx^C7D#QeLha!!Khjr&-2~F{QAS+nGbK)Er8q<b+v0S#4#&FS`ly1PGxm
zg`gvL9j(%5%+ec6lcOUDWL{q0B2R9w5_nuSo~@n%B!`NX4$+pQwCztccbi+t%ZT;M
z`>~`;52_9~89!=AII@-+llCHckL;ek=FQbaBpOkQ*fDe~p1cO`yErnmxO{-*8T9de
zy(9ANyBzz|%TsFn6a5SNR#JY1JN)m1>lWh`qT}1Lmd_W#Pn_7J1?De~UH2A9L>Zye
znlg`<cDG?#;P97+QuqYX6<c}bj}gu2mXL4D&lxUGxPc3g?4YU$|9C1J<qjxjp)%<d
z0yp=^FQWR)jNBV?f9zg3{KTL@ma7Qsa-jj=mXKHAP@Gh@nh%vI^5h`I`F0H+aD)9t
zIn*Z{RfaYdrPRaEjq!Ut-CCG<w5P(vT5c7n1E)>~utXd~Bn<$aEJKqmv1#)3U{`74
zJS%pOCKKHpP$IH{li64(M~PZh$%p<HDO9&ewZ1e}kyYppc){cCQign^uVrX{;8Krb
z{@`Hy@UYsk``{m!rN5wNop&Y-C;-VJKwMedRla*(vJZB**X!~7OYHH|g@T+D?tO@1
z<bV4O@&#drV5%>`;;d@wTvP^y{;U$1#vQ5Rb!gz4LZ`g*16(fUqimWfad+L}U{Bl7
z7DTKzhoK)%a5&-=xEeiQLjlqH2y80<;Q_=@<MgQVCrp%;wIG-hdsbpOkY!D?&^cDq
zUX>^7MaYra&!Q-z{Q1==u`n%ldp-08GI}vT)Wh%3=I-3E>-u_j0-Xy5H!5gMXaAKq
z$Ztr7Y&_U)+avj(Rk6RhA$98U%6qw)m>TUexn^^E@~%bZn&yq&Xc9oW2iC>LE*3J~
zoA7XyR_#}D9Y(4!65$it3~_yp$R>tC#11oecgq^q^%dY2$t$+!)e)e(aESVUVr6l^
ztLX3@BOe4$O>;~xOy>5swzljo%GHo83~H?~9IPYRTtN6*i0bRv7M+f$8oLux#?UrY
zp=F*rew)e%k5I#jn~cc0jjx|uMgNtZVk<cVucksRJ{kp;nxT=T;t&K^hbaf!U5#ad
z&=%$ynPu*gDctVB)39L+gY0$e&csIn!S7mzO*ni*iyJ{2$c-Bag(xq&-`Zk~5u&nn
z=mNf2){u9ZUYTrbkKONV=Q+KM^GQNE|HCwd)Co?oJyUE-q<?Rf`e7z1C;jZ+=}Aoc
z+a@}--9NuZ6!XYY$Y{Zadg>H0L~3xaAT-2No=>1)+8psbmd^FF0qa-gvuPB8m@9^(
zW|37z?O<HT{L4h>EG+zzqX+)x2eb~Z;60u)XW0knAUCLUh<+RBBCoes&C5h(w!^#h
z<$gn)N^xSph-0^7q$cTIBRh|x$^aonQOibXX;d!;vvOw#nypzk)&h%h9Hs@_lYIH2
zDIrJ}XDEn<z1=fNsQcfNr?u`NNMbep^c$8O{_<c}_}1qGa@vAxa##C-^Ex-`i3F``
zp|)~EvrB6Q?Km&RFyFP$P5B1p(N+MJnsK}a16)-~bJq5l>>zUAH$mDGr<$QhQ-f6{
z4(<+|bIp4Z3s1lgW<<rPHe;nXPNKku#A-{=D6$Q!`j*T}IiqrG<X_ZNOZBCvdo#&}
z7c52g;rNSDm`}6r2WhL&q3vQ~@+uhm6IaX9F^A7Ui&>);it5P|&-rc*ik_kjwqFg5
z2wY;)-(}8%IB3zZ3`wAGBq%xx{yTi_kVmLpz<7K5pihOb`%X+8hK3{Ekh71SnSbxR
z6<Eb`cuQtbeA_3ur$dv+9_v{J?j{(XVf02LPgEIa8i}djubyX+Xfh!8I1+@|l@aG;
zhz|#KFOwb0({r}FhfA9(VzgN_#{byWw&<Tp)ReS!7DKUc_Tvjo+`jSPLTcD&kw|`!
z^W=bF?ws2M`a;GK+3+G8lqd4fU<J(DUYkL5k+>`VR0Lc4Su?u7SArYg;`7{*-Rrjf
zQFki_LUEnx=4Xt;kEE`aPyZ*~z&@#Co5XM7)%!qkN>t~x{1%ng$@mRnt5LdE2Rs;?
zMN(TU7~)?!%7Cs)RJvncPUmFQ{5Nir>1!~GaP?ikPxrx*Ls{$N<8zCN<XMQo+B?Z#
zHOzYT&m#xaN_EHZkwcb>qotl~VLrJMobcTjgJ~4qBz5rSpE~Pwe&us40b)@s*`S$e
z*<zWPLoW*7sWjJMPQ1ez<hHLPp3^YKW;rTrh}f&l3tOyWUF0B~$mNwk9%z?Ftg$J7
zObJs?Yz19%XB4b4=&Rom;grWN4e_w)+V=Mpu&)S|H#_qzzE`w*{h$?w|Fxeh5(Exa
z_ci@KX{FPqn!iw3X!=x}gQJv;9SIztid?%UAatRAA3BUTgm2qnDw9^eW|PDOKOsM&
zk!ASEPz?wt_d_^=8aUiPaTP<cNA?n3?u2f!nsQL0=p;MtID|%mqbKc#q17?ro-?Sn
zGU@Aj>Yg3)>pWU3fOOA<rvqFE!nX7ps?Z@U5}KhPfVh2egb96m7X*Ex31+G&!lHwD
zgE1my$cb=W3M3#~+a%QLGKB65>q&OLv(7k)7+)e=*%O}$bNdpX7lQptMvX2PYo~=|
z=K&W?`%6S&>?})5S}mHo+;7#^iy%d9@T8PLh6VTcq#Y3ZgJSeDJ>+lZRZ54DcW2K`
zD%_ZZYN>u4G4vmkN%X7iLej-EUrK6L3>~GM?*)LtmwSPIcnfoB<pr_Z)I3_8hNVwz
zw7pcUMRHVC?{uKhSGdz;0qJlSwZ>H$++lEm!$1^M;zBIAz_S217&<LfrzE1CvQT%_
zP+M#-^`4mV)@aWLHfry$mp!}1<q~|Gjzij^nuHUdep+-^)>SfqTv&AD?=`ryWhWI=
zAlod_zYc?51FWN@qg%4<Ym#Iq>TNslz4DAZ+}R=m>1^U17JiNnwR^w0(SqS9XjGh`
z<|~8EHK&p$j&tBVrlG!GlV?xjJ{<jzcA9rIl~VW9anWA)?F)C9Jk+e7Rn7Fek7M&-
zpN4+Uh9z{K>(Vm)#>$)Gr<3lT=6fIT<6W@MI_~90?Vp)Z7@WfTJfR-rl|>3*eGR2>
z86KTajh_M{#VWir3O+k6$?tv{E+9OfXTPLpknh9ZCqQnnXVY2gwP|n7l+*X(WIIJg
z^WVG(*XpBT3FJq7rAlpQ$1jy$w?sU4z95Gvt&1MQWYQm@-qyKzz&{664GpipU8!Kr
z=5~yd1GE9~RJ6r{%h>0J*K*Z3m)m1@E1Onot*6H9S(dw6%$rmq-nX8n&1^h#=qwf+
z4d{+nH-v1&m6kWQJA}^?h#!v2uXbxUAgi4+u{!~}6NalS`pLsKYUX4tl^KJ~Nq-UR
zE==tlnB8X_syyds)clV3xWz8|AB#Uj-tCF8Q16E>-VU%R`+oi(l11$QCQ<QlaWXXi
zf2tM{uWFnEkN^M{p8piL{FmqdFI-&Vv5ntuUD$h7Z-9=Gs+BW`_-d{QB0no}NaVEp
z^8~gPT9DlCeSJ||)O<E`5a4%-K=~KuQJQ;*h)SutrwQoQb3XVWb^O4AGY4xH1`Twe
z#R7VP`P=XO(a1pH>uB%#a!b9&;)>gTk`yv%MQT}h3*p+n(RSLIW+s_;a;47R8gmiV
zc<<3n!tIFhMTZ&gq0IhYk;rbX?e&|BcC`4&IAIQ!?2JO_CI!{y-&Q%?j0;k~#Ei?e
zcq#k(utT&>R!^%dLLQ+LdMRp`3_#pa+wRw2s0NvT{)0c>^yHiRs&31+Dm&e4?OtEc
zs#*3Y7Ce4~#~|6#m%{4XHPt;SeYv>^E21#cj1svCCGDlY@>z;)wC1?WrzWgs{#G?R
z{jVvK=ET%*miAs+a7V<UdxUO_4`wrl-;b)w53kY2UES&3=@amJo8J}<keL&|hkmVx
zr5fs5wWEtyuUxXcEd68jM`P?Gx~sMCgfCfy-vM0;zHuHk2TycXlmt9c{qPt3$JQN4
z!1HHO@J^)%mL;kDw{~sgR#}gAW46w&Lx)*I7J+9lOX(5|Vw$AJ2GLwqYY$!*8;w{X
z;VVLQ4PLk%ZlltZHQBHE7y-isP{z8e5h8{-YYkBZJ|PahU`Vj)8iuYIcO?~DkflL8
z!rrrq$Fn(o0FFVMhWON+L*+r#z#f*C@k)mvk?S;6iCQ|N6;~;xp4jyv%uA>3n^xd;
z^$T}>##nR4`*h%|rMSle%0Mzp;NWRt;7V6L=spoR<ZZ5CSx14tSD_pq$J055l^bLr
zeLC&Tdt8k~D+*zn1x<u=6wbKDAvk7@Knz@k8;RJ2=4^BK<pR`4Z)F@|8W;wIhJoB6
z5_}OCbJ8-UVnlBZwcF6+P~t>(_Zb<@Ba!(5ip{A=qG*8%ZM|1sdNcb%!$Fv}lpnq3
zjP<f$qwV~`c`S4P-4?Yjj+5t<);tMeiHsWbM!pvl-~dFJm26YYB*MgS3H}Z;Oc6^7
zi)n-U+7<rs>ZFOd+;;ZE8Ym?g8pBo<3JM*~!cJ-ggzY+ODsW(VJr#4cYLDzn=@Ce#
zx~0NmV=OQqOu#rsrD=1&iR9Mdy$8#IFRBU@1Uy_7VNvI-jd!X=cN!E^49qS&B3Q(q
zR8ui#UY9b?&5cYiG3ekHX1DNQl)wNiM|+)}=$tFZ6|M_mo;Z$KqbcCkcMF0E6I~F6
z(w02t_eC*#KMEhBZ2kbO;3Qav1EZLgz8&YaX!{kHy6}A)(hG^X1-RsT1pn_QX$cda
z7clk4NanNbg)zw1CU6ukIQ-ORF#FV)rs_6-6Qb|%Lq2#8x;yspO0KOI2f_sXc}xr0
z)cqvLKU+Nezv~$$@L}I`e6|5y?3iqd@VAu5ZvBK|QSv)CZb}5$NiT9U$QegTJ+szv
z*(jn=h$NkiMuPmCOHC-LI_QAN4}UXm2qVYEbmgC4v$a^{lPoM--y@#-Jw8UA!uZU0
z^=X>V@Z6vG^qFQA^6N>9Nj4U_wwt}+#t>CyS#vc~fo0D7^V3*#6^*}zDwzb-nu}0e
zDg547iF8QG*gd{jmV;LyG_B@T>({uZlwLEk4+yREdar)*Kg*<8lR&6=i!<mHEHwp$
zmHikyzkDFI!ih>m@!?7;Wkw_~LBca_Q*-LAFc92vf~e#87&)<%zA4$}qj7jH-9fjZ
zr{VP~tixLzu|Mv}KMe7AT{K<Q#r3q-^?>yKnYE{VND6+<dIr=o+A206SR5!oDJnOY
zVD+xQ<AS%e30*fYjS?z9b+A51B4_RV$?Tk$;mNIIitmwJP@enuzt&P4neYeR6&%;Z
zT!RV#ilH^cI22I1kSi$5gCvhG)YeIP)#>aokiE3lQZ!IuW|J@-#gUw-uDdA4x@DZR
zX-~8c!GSn{_zW@>`P1QFy<)E-nthIm8&hXzkvbVRFakCbQIY(VLbVdZq;yIJRP7Po
z7tWV9StiQ9Eu&cDdo<L)QrpR@FnedP1jLOl8|SI}TLD48>DZ}IU~v92L}4LdK$Lq0
zL~B-F@PuX<j9<Xxe$pFuLF{H=Cp`vIt1PsJ1DR#x9?XhABIFh=EWR8l7pFupsI+=~
z?HzTi><?9YICMQU)OhZ#(9ZhpuHO%Kn<_jRt#2YDrUoI^u1Ur2zRr{79mZSN+f7$=
zIzuoE>_Efhx@(lgWh*KVP@;0LNV;!3P&Kp=s(wy>5Q(R7pb=cnK~DFJr|P{G`iUW@
zN$K<D41!E%(Fq>aI}it`A9JSh;TbO!3Xfj?!JxEXzo~PBAvA_}t>*v&E>;SLZ}b^H
zZb%mru*{tefG(26ZvI5UJ^h&1RB(YzDQ2L4mE%DHH&uVjW*uB^-?nB*Hd{;M+?53Z
z=AZsL?}{PK`w5=gx1VK)!|}DmJ8dR_@DXm*@Vd?Z+vk0z+CBZY?z_e_;-Q9@{beQH
zUb0M8hF%DW%anTM!F`wbntuZn_&H2!33uG$q2;`R!ezuR-Vw%w%+_^(^DuN4e;8%R
zIJ_&d)J&`UN?j&o05&q6sZeD_20dsT2k?il-jhYJJHOGsf5gehYjTH7>U~JJf$O2l
z>b6yln<Kq5bQra#?jv#%V&*pg`<<bcD$cX1=T*{YU8m}lu#wiuEBP<_H^M@-bu&_Q
zW}}6sw={cf*aB_8wv12!mTDKFNI!aV#s+1A5>6`4$Y1MbX&*T8*%Fp#P@efO=HJrr
zX>IQyFP0XO8|QPB%P8bssMrWL{nJns4eJBAxjQ9oRedJeSFO}-uS=x;wksxS!S^dY
zMJIt0Qcp?!s)uKo%`m+}?7Trc<iaZ6MlUZcFKA&n+*9Ss2q_P6WVfNvvr>~bMMq`R
z8SG$>B@Qn16jGYnJ#dt=78Z(aED^6MyK^`w+{8l`T6aeKlFmfvc)m(*hdi-XQFUgL
zvIMj_@&sfX&x#Y)$!lk5w_E6k(TgUcu)syj3$*rz5%ZK8J77|u<#KTXIjHo{&kSC)
zbbm_c(bQUyL!|BAkua;wZJ3)PD|h4|JGC-VcO>fgOi}z=w6xw4EHq-9HFeb1Psdtx
zDG_HDKzBuWms8NdiLG4Ma}<?p1~cm><FOtlgB^Hy0|yt832>haiUO8Qy-~|#3$lah
zl#cLT+N>iGnSgs@sUV-b?inf`UlBu%V%WDypO{}U0ahF?8@b?0b1;mEQ{Rwg5>||l
zod8LsI+*L`w>tzV++w!t7s+<(fe2qzFz6JbCsp=}+VRAhG#U7?pE7&Qfq+60#A0q+
zJVsBN&N$=IlMZ%jb(04y4}13bT9BWNKOb(QcUQ&f^+IV|HZ3y-FuLvY8VXrrl4hY6
zndiGnxkUD20f3Cj-IVuCY9EKP4DQ10ovmGCrCnQ3han?vDVL$!rJ|xOZzTyAo)*2*
zzv<k>)0>!wIge1)V3mI)9vY_`=veQ88Ym=@V>s^CCCWtvY4WGiJqK3h;|fKsbLDE?
zK8R1(zm{vWa)nR6^vVkL)iYC7ePDjwmU&oNYpzF_{jfVG*}yYI+BTGF4k}?(3$Zt_
zBp$iah0RxUjM!iVqNx(Mi=?Xic;DR{<PU}d>^ymvl|`>mN?qBn0y;7fIcT|oNLB=o
zY8lC%@VP(CusWCeagqywE9G}kf2fe&%vGM!sk|M5`>UNTT)*v+$gsjmZxz^v=3~?=
zqik*Nk)mu}I<58!@7GVMy@Aa$(ZP8lDIKF`*qN7<!(FXh@GqvEO&L`sKsIvGHuz<O
zeo0Oxx711=)gXQHkf{nS)8ug&r(0ecN#8CPId8c{nR>VnHA6iSG?OjlaYodov(g7Z
z02{l~mdv)-%Ewt6^BdcD7Zu{gfPdbSBj^YwuxGMG3nXT&LadSS>6*@^V$>Rgv%JW$
z9+SvOu+O#8gy+y4!-IrZTBYJJ1ATAr%}uz2f&&<t`yB6kHSB$Xa+vsYaLD7Mp^w6t
zyR`MY`COeP{AV7&OCU3DofizA<E<t!CRMn>*!RH1Cm}eMV{kLw$JW?3j0}n{WF4+k
zc*)7_w|$zLg1{?EprJbw2z^b<u<0%iSeebhvy;Pixm#gKcn3L+-FBPd463h1HF9Td
zoGX51LVfDA%sD)P&~@eqo=gVpchPD$=xRiR39qD*KoRr7cGBC&2B8aa%3XUIr~H6R
z-;Thc3_&TerFpQgt&D|^-`Pn<-7zRD%f-xX?m!8%c-p-AM4c*rAnZak7$56FKws^|
zh&1~&gKjq<`bfnqerLY#?N5d~3`@lo_Wvp*Db~}iO~Qfek=4lwGdpiEmY1)QZxtSs
z_?)M@vZ4-}G*zY&;}e?D>oGCRB^by;ThVYTs{<W(Y(u$Cr;bwFa=oy+sw&e3vWOKa
z?3;$d@Y*c&i%l~)chEb`gHRDxpsljGrU8a0_jdQR5925GXaIATeYH}bBvbJ~|776V
z0exP#@!nkwK}V95ntLU@=|=dH_Uv7vom{3a>N~AmPXD{bAKXOF=2}zD(7rlYCN1u6
zx$83F!L9eGV-P?#TG_ZIGf<%To??1QUTisj-S0r9s`%(vA2j4G+4$Q`g+XmLT<F1o
z4{e1PtSpUpuxUZU0q4Rb1k<?)@aP`ENV<QVpiZK$i4fxQSv-&9iXB)%8>rXr*hop`
zLtgrfgat`JVB|%7a_7={P^mH$UW&!fI^w|JbGLuD@hqEf)Ha9AL6bKA*)L0aTwX}t
zNBL&m6v!FPv6U_;+SpNofzC<Deg3T6kXDi`T1mWwXD_F~r`5M<SopF#&w!_O;x5Jy
z9F@MkQ8^-)3%Y5!W>nh5aOQN_aGICCRS#w59LXT}f-@3%iP5r6BdZ*c{d_ieCU;BQ
zF}B`Atym#Vn9`ur<lX;(=z$TEL)O5sem0jsm_-^1-Mih=1cUk3Z>4&8Pfubz0@sxE
za|`w%um1LW({ahXa$R<%lJvIM5mwpYvs^3v`SEt8^XQ2IuJD|W!C@O=27%kznS3y|
zT@lr=tNvgnArQ}hC$}QWH(OP@D&>Z7SNAYpJPbXC*c&nZe5MJsn9=nkN2U>(_4<2o
zGtYE3X9-$0arxaRu&Nrq<^atssiL>TA)GV<{gT_<fg#@AEE8Qo<iy|g;KKsC1uyd0
z#UN39{vVRoM7fQ08cT$~pErHRgPn`ht6Y8QN!J$NgQs70BE#iz@)RJtm+fwThGp~{
zA{}44HM?7j8S<~>oy%}&BpFH0X{V64VkX-?W5l$BClcupRxES3?!oy~tTK9CAxL7e
zbC#pl9^<Xj>?kQc)j|O|&R3Z8znaLPRoUC!v6ne8&$Ty=pmsPYb7okFwx6IC77j!z
zxDWRIU(%z^pGTUIhe5Xne$~%>X(`LDuAuN%NT+5zyc{0uxpWlpZc5SWLA)vNayX1~
zwgH87Xo#V?*I*6}=yj$^k~}Q|jiw3`PnC=@C=KpoJbJ*4ix!BU+jA1Tu6Gd-E<ib8
zmtKHr^<G}w?H(Z>?i|;sdB2Hq+in=`W>{@;du7Jq(3z#6EC;#K2W9$qutcU+F)eiG
zzV5(u4S(1ps&Fn;=_$1}m}g=4eC&2qb}cW2f=(hD%M-c)R>CR6g4!oU;8fs!?o+g~
z<QaS~kcT!E^E242*DnnftM5Q?g)6YC>V;Eb+zUu|mIP5rPYUSLQvyv`dGxT@_Hr%a
zlcdzH*Qj`Ohf-G9xJ8xQU)c!dZo9Q{8~9>rz;RY$){=z>{0jGrYm4Ly0$x3v&J0mB
z-RMfP<@j$Om?<tF>!|Q7v&_DCDq*=kpzFK#cZL4mF*UkUYh3CHd+9as_RH?mtC7iU
zk7%sNZHo>bv};EgKNJ~_;&8p}cT5OJsOXw{O*c7R<7Zx1?c56evTgGFrTd1Cf514g
z92!6yoy61VY1q(UZIcd@qP%@!PIxz`;M<*p8?W|1n>}hRA2gbv0KojeL0-)NyV+xG
zZ)av{{=de0)n?+3*kOA=s6d~QK{VY@F9*e<#k{v#1z*uY!;Gd-3L8zwC#OxefPEwQ
z4f9Ku<H`O~h&emhBoT-y5=bga`Fn6=v4zQm^*Ah66rwP2%)}^wyr0$gMXJ=C&|NfN
zLcO-Ov{B#Gq=S{RPUW<khOs5dqU1-M|0<P5#*?IIx9K?;pH_{UvU!5>@e1vTH}c3l
z5r}7pByXaHy!O&e^Tp^fyOHD<QRwq^VM@gc+yezrb$UZ}EtU|gw2`=CdsM!2LRE$(
zxioNqT$UeRTwH8i#Gbzox9ltXekma{X?#8I7WF+CDtQe~>2WQUg>By_>7*n9zH02Z
zFR;fC=dUSYZ-2pOWbZ1*UB+IOdQhaqzfchlVE-C|a7*ltJtxS_;Uv;WT5&ygqM*B7
zm(8+|z@C9%y1qe*`$#n`k45!iY_Tx5qDqtRUf3qwiCeloxa&Arx1QU*s(!in4*o0w
zhqw4RYtF^GYWp==UDwzDp@K|B?(Brnz?+}mI&Ampl5{Cicj!YZrkJA~_LCmn(-U$y
z;Egoo!Qx8ubUnAYRbOgHel8{N)#h%O;i}ECWR1mjtLRaD(0-{Ht-eZX72g((8Y>Vw
z;oPW`gi@n(k7tH~7gF=oqor|@7u%X5rK5<jFiwtun_;P8NBKTKwaJJe35x&RPf6Y;
zR=5k!*+_$<HDQeHC70NUwnVwngRhY<!w-gX3Z+4x**;V|vCyZJG7yH+K(t08qRhK~
zdK%9`LD0Kn9ARb;aG!BD!mFp-9Dtq~h!3Rq9(OKcegB%XIYlJ|sCPR!7sMGoL0aY0
zNwd%M%;Ii#@86P;o`L&bCnUpvHt!E`-#b{tpD%H}HiI6nxOqAt*)q~t=FL2Tp|nZB
zjwo-AA@>YX(DnBA6G5wLGqCD|r<N8EemDg+Fif9qn$vEAF-;041S|wCL6qyXo<egy
z-z35FYNefwMZnm4!$3#T0Y5*|K~uF!tVOkAQs`-gKeZd_Qj9?<T5Y${<ZIMX(LEN_
z6jdi25VlcRno~p}%g(bwR|3w<sb^vHYOSw@q0Y}v)Nncsg{(L%+9V;%u6CUuNq$4`
zcIOj<QrHQf8j2OXdyUL<&N~SKi%07vAzxEyqveEdIx*)ca~!0J%Z1pU3bnCjm%7Xp
z^BI?9{Bb7kY*)2ofb6X;eZfddklNKBwXjeqyzKcyE9#(~RN-4TJ)A8H78c&T8YvFP
z*L9a<$N#38|B*n&SGV&wdYoiU?_=*Kc*ZIc%_x^yaQmsj=C9?{g_Xj_FKBLESZWVh
zr|nRhHIFmB9;*jLmFq*Ml4EmM_liS3b!hFI1OC7_RPM#?Oa-AW<d@JG1Oxg`>K=SW
z_(PNWdBNyGTkYYaUMGUUzj8(*VH<tF$2b5ngHF+3&HZ6sb%O$vfjkeBKO?ipVLv%T
zj6X+2AJYAf&R5<Zbn8d(MblKh`SCQPA#1!J82>pgPv?zEi2x1&EFuB`|9xEkzdFb!
zrY5cq|FTi3x^CPSJEGqj6*zR1RH*ufO*VhK>wG~MSgQnwEjy4FEo@NQIh(cQ|Hs!m
zMTrt@!Gdkuwr$(CZQHhWPTMw5+qP}nwtM=nnV<XKUGrb7>LW92?~K?Hp&~KP4-52I
z4o=|}ua_@ACdozeB&_+&Ch$cdJ&?XP$<B`xX6T`*&M9ARCZIgUu5&|ZoUzwIkx1at
zg<5-TS|UJ0XzjVg0+B=F&?KCm1BLJR1C2t9L7_O26pyM}31YX>38ZF4r`atZ6b)jB
zk!&tLNHTNVr$oq{(q{yZ<vz0-Rw~nHY|tSk5lbyi3DtlGAdsxwg;K8osiW1AZBoR-
z+8JW?dSdSZ1xj!1;pYsgIP6$0lV0qPL@qXQfg0@4*J#FMQx#52zoee$D7q`$&%03J
zo<e{ZWeJSvl-D%{)DIScz5%E%u=lZ%%3gcO85|`U%3bK$>7r$=y99y1pI}A!(rTZl
zZb474JO(8ab4+l7#EyDYiWSIdjGeK<rq*V{vXLuUBGN6Gje4X+Du@v#*b5zu{8=G_
zsZqvMVVR*^j4*6gM=U$bm12%dynsVI=e%|UnPxuhB#Ub-`b2dSopK}o=>qMge|O(q
z+*1XE#{v)J<m>GD#Qb*sK7=|+AcJ;Ff=*I=7DYO&)cAq8$#uB1%)%Z?VcEvEUVz%e
zj+iD$x|Sdr31_cf^=L?ca}coE?elQHL4CiFc|u>K|HC9|qwHJSm_<<H6?cClQ%k6$
zOew+<T8jMAb(oPxKzJ4%<|0p80wXD^Y2?ufsv^#w)M_H~eo`&aWbLZMLXz!PL=I~y
zt?qWBW<?7{*hsECi_|6F|3>1057Ni3TLknGaw41FUGK`|s$}>IOz&xkG@Kx4DE3rt
z=ICUZzKX&q#FI&s*?6PZ=QUUpQld+?8rmEr!FVO)(=rLV<Sd`r5{9)ErOyX`fsu`^
zSZ_?HkM-~`_GwyIofCxG{9I`UA@V`zO%dP7w7GT+&(ucp0>@a+_Gl_b#HNYoK0g57
z|1*-oFcKni3p~B6CK<Y}hPvg+Xh&eheyjCy)(;M`8AOOGpQR7NN{DFa-W0}sh6ZQa
z5Sl6hIf%eKp56+QT!f0HH|i<C5c^50?%+_GA~cN3kUOS2YF{t%O|ryV(~SffU&VHu
zjq#(hOiG5IDC5cnWdygdFV<QujfX`D@_ClR1`calg(I-ztxr$yAjj1*HSM@RnISvp
zeDt&v+I!jo5B^GY&hWCZuU+~lU3s9vfe(|`+j92SGpP_Lo3-KFb#i$nPW1xeEYi?t
z9OcgzVqD$()6vDtXt<H^p-u{Gu?sn}U8NY_o~09>CyxOQGt?7g#c9~r&!-L3^;Rz&
ze|(7pJJ7*agi$fWwzBmh24BbZ$Qpy!PASQ|NF&ge`F!bRyn&`B{i9g(kIyXEOs%rl
z*I(@^JVTlXKM}?zYS}$FB_c*-hygIh-CS^EUe)^Kw7?qjRkipf(PARx@kriiDc+8V
zF1=yYI@uJLlJ&v#7&-Dxso;Ua8A_gQy)`?~=H&Fdd~BP4^s<Ew*;_E?c41aCqu(wz
zs%<swGVa>)IlMV<(u)F8IJUeW;9DKyU#ny5|M(m_xk~;#;CBsSCJS+9H6sGj2!+RC
zy?)>$;x}8WFi%nfmvah-k#2uG#Pw?|PUh4e3(d;af+kzzsJvGW?a{g97mU(VaXj2c
zBhxy_kwL`{X+z=h-NKZ9&FoG*EQsOQ%>mnGF~9``5@9azE0N2UuU12~M|XPRQN)NF
z6pXIil6dyo1aAS|5YZL%Fj5lqXCVvmxhWf8)+m8(Unc}VxVH0!m7i>`&9YqfO=mnD
zex9vnmC)E^^5?YyP9w+&O1Rn6@zj?arOGb^2frN_Eo2Km_wYtsjsTjwBXLd-9F!&B
zz*c&+4_As)O3Ac!GXAqgFG`Olhj>WA!8NU(dUdKgm!Wn{ZqaoF@eh7UaU;`@<Qmza
z1S{V1R`Ayy$iNlYO=rV*Ol%qTcX+7NtuVC!V5G#|?{(cS&2hX<a=H0L>=XA0-D$Qn
zv?M^|m^=1%P`BV_ci*P@Tiu&k+7;1g%9qAdjXA^fCr&mO0m+DCtW41R7UT!$ziUW(
zY<>{oFAGV-2>^ikf48)@rY=sF#?HT0WJ&wW?qIm-M_-=t7Kk>zxUqSmDAwL&)7C8!
zc7BR(nGQ-v5Mg*<!bmorCcOR<rR!Aq5%PoN#b=USbWJV*x+q#VGmF#N?AYgf+Tr=|
z@G#SB<C2T?&}*xr=~9KRxxzZS7_G8-8;X)|T&?o+sh;{e>e`SAtBX#$F6qcgeY~cO
zn%1N;MD57x*GfYU4fXc*h5v`NLaXdUt|^%&^g5uaENNVo5A#ctn)a9UQL2k~uUL9r
z9JedfnzJ<_U9PahBfDi*Z`X*bL2Hp>odpLzmtzs2Qd4qIoEsY(vrw_gY`+>r%Mfq8
z)Nymtl#)euEVXt*si1DAIxTU(zQW5W(AwyRhqY5lA-?XUtT0uSH*l`jaZ9A7sdriE
z47B817F{ys9g7vCA5<l;)M;+>`1vjzb+1M=C_s&%TR9W?EZ6(vN}Ng{th?Zs+VLzG
zSzlw{q_N^kcMjF41hm!l_a!tZCSYxUDwn^j`&S+NM?IRF5w)Q~Cd+(3S|%&Ipa0bt
zu7^L|Uw@ywJL@Y@t1NP(6;V6i6p!{r?98r8jT%V>aJ(voVD-=~GYU+l#PK9?4u3~a
zmwwyt<0@Q!C7OLlU$^J`F0(})oxxyj%4Nl@ASAy*Rdd3QFI@H8mt=QFvZIm;;dd@7
zEnChHJUVSxicCMp50pFaMETPb?n?iQ54ndsH_P{Fi07bhBHYvxEWGjYAzIlkP(MZI
zCi-ew7EFmNJL}*N{bb`wj*IdpQ-0bMvxP?>SoH)^`0`zM*}WIN)~t5s#n1iqfL@{d
zMzsy}Uq#(y_(^+u=>dmhHD~Qt%GPo*{9ZJxcW}#mz!pH%B!)ddWg2!Pcr`#b<-<d|
z-OjBN6^54U^AbQUg~>`;E-f8h|JT>MtIVON4te{3+rF<0nM3e5JAu1~m4!naE4ej0
zw0wORsnIk3{>>bsoO^6@KgoEpVr^QHp${`dY=GhX9SB7N3TC>X^!42E-j~u;!>OMx
zeIMMMZ#Am**!0nEnpEa82(Xi#$ag*Fr7wq@1APWTcz-%GWF5gO#Y=M=ndnW5Eknz%
zc=1npPquN|^HU>+2O~43+jucRIsmaY>HZ|A02L)56wb^BDc!A^@9T6PcAHisn?P49
z4zyY4&2i{6WW2UiY&4-}5V>%&rYj<a-@W!U=>j!pNz`w#$O@YNTovMcp^$Z-+;EmP
zpj9oRZ$P7O#OOQqM9M(pJ_<|xipqV#)jE0&IA!vrTt^O8{=&w|?w5~iT^Os}+jY&J
z0z_|InWdRf-{cYr(q+0iF4%yxgTTbS?5`G2qK;Sc%FQo&FVQ`Zyz<ZcIxFvhUv1S;
zE={)1_tHaT9~Of`)r`LadOKp-^?|P;IxDzr>}hLO<7b=LH7XtP2YYqc0x?0|JOaOj
zUHA~1G26>vLR!&x$O(&N%aA$uL-H^G{ftHpQ%^uLwK9?)sIK0&WA0-!2e%&O!obA$
z!GL^IR0HzKk8dah@T^iT)x7_^jFz?hxXU-GcanouKlN<ZtD#ALkH;W)BCDMTY+y4$
zO2|dE+~HLkDv2LCrk6yjgzT7lSr^IDx>pcROi={a?z&(JA?vnTB#6?FO?u`g(VHZg
zrdejY!22s4y?pDnG~7YLNP8v{M;i&Gd0wP>mNIF!djvAfd)`#wN~2?$IxaefT(xID
z$d>@|TQ@fPMCQJ$tEjY6PZ_I92hpPz7%32x?QQkM^1A93IH(d1j-fvw@bTFucyz!C
z?D^`CwNAn0)|F%`b5hGB2gVP^Ge(8>7^s=7OkWL1BV5D7a7Dwk?Ik1O8mG4r(Pv^a
zf+;l*ie#p-Ctm2)@o8bMvqZqsaW_$2SRKYu<R6gP@KQg5+(16msdazmk#&<t1Y~G0
zC?#ae3WCA*4A#`YSiC2K_6<@u`A$*1L^>IyvGR$sJ`@eJUNmbPzJ88ra_Y~-f{!L+
z(f!2u1EphSwQUS^0IK|e!`z&GyyjkDEOQrb4~4w4*cPRpJ)x}poMTX8%N*(t_|m&t
z8t*+wGAvuN2c2kO<45@Y_0PXwzqdR<(hzzG4N7}jWAowS2ip__Tbizw&N-C2NF5)T
zPRCHj^TeXY{dOCVqEno*i(TnmLTO)0%}u4@G!F%?as?7Ro&P$DX(ga(X0RhSCaI|)
zfocwE+-)=$m4_vXpK#;=DcxY6C*Y(XCwW!y%bwvQyh!Tf2s_CVr6xI~U>vM45+RqO
zfA6wYSn*%P2qFnFmS$ru)!$$(;c^gXU}>i=-kLxt7G!Z)tUa5nTDZwqKmY*;f;@Hz
zTbZ|DnD%yHMlLpweI=C%C-D(Vv3oG4_(OxU-Ll=+z*m!vaqs}VEwCWt!Xf#J>XFI<
z8rnbT`~Eh_xPGS^iuIQ3Sfrs(BTm2>uQharDfVnqu1>^ykv*Tcgk20(MU-*z$THw!
zEy0ap8C<CTeGRb7foRg2hE?;T<rQ#6dDyGY#M$Qos>uU(>ZB<v9u7|A6S!sRi59`T
zqc}{n<<RTIcyyn^@A(ktXt<q!+WMgz8b*X901gt0(*NSR8fYjyfR?)oVQHiVXOPHl
zX+U&mzhb$8W(CeH%ABPi;P?A2$+d~K)X<q6DvBWV8OwF<VP4I}|DhQN#w3%8@6VWq
zpT)a3-nRn`1y-vM#WvhH;#F;ZQRJR+X?`0EfhIo2To7>GCMEb>NFv$H5BWXnszMJY
zVOP=;WzISHC&Noz-Q|GjUh3^>hrlp$regab76@OXj)+oB=&1!!r0xq;p3=`ITV*F^
z1kM*hDiXVnQ4*c%^PJ>MIAD-<o_dZ7b$Q)-kgo8`dBV_93Q&8rJPlU{03!dgIM8?;
z0_QBE7{?||+~Q}tiVgLEpyaRB1DPm0XJ?rH-e4Sy1db>{ka=@HX=S4dWDcY?aN<RP
zOs%3g0-S-#&{=BU;mFf0pLzfRf;zb~O)&S3h7ETjd2;>9FTo68-VhJB>YtQ3khMea
z*;5}s=otpVJ=ur&yJ2<B!2HplpPDTT-~R|57+y_0zM|8{ue4_NCA4hrG#y05si%Np
zE<O_f{SmO#{jUnYdVg*KqEt=yLttb~r=Wvtzqb*DOzn1vqT!mbA&Ip$zv6t$D>xTs
z@&v-g-Wn}2P%0-6N8?`LNN>k*y9y7ld`lTx!)mnhZzG2}kx>5Pg#i@aDYIXEmO8Hi
z;zx4;0}8p5vm78Di$|3lVCrJFpaILZQKJ9f_i{1@@ctx;FF52`d_$lsfxr=v+6F;|
z-cJaAlG30xw(54}w9SDT5Vo!dPmV(uo&$CqUZ!0hd1zpV_?wiF<MkR1)Cr*!1mQb^
zG*eVEpBmTxM*BEJoqcwf+O5A8_Lo2L0)!}mpg@9GEm8U(#k*&RjWduTCU36^9v1?j
zeGLki!evC>DB8EZ#t_7pN6Fq<dyibumblw#JkX8=#;cmWZoLR*dRUX+YZ}LEClL(L
zl4BXccaALnJvV+iCa1>OkY532j;dxpHiEdhTXWzjEVwYu3>Jn1miuPo5sFx`!>Y88
zj<1+i6DRg@=g?aNRB9x(StHD?*ba{_tSQ*JmqFlfGycKJJlSn+FM}EaF|={!>>r?)
zm<cg9tju13<stfg1;PHQCOhb;<hfhVU{0_B;?T&Hfm>}Z5mY;tP=5+GR*bpG1`9ZZ
za>+2ehL~a(;6#&}TLJ&(hr&buJEf)vafmlC*_CW#OT}F%#&Pi9OfL2djTBsX@gW#^
zG@U0fi}PB6OkbcX2!53c3ZaZRsj!U3s@KW?0IjSB&Z1chlWOYE8_6FJkT8j}B@2kJ
zdB@MIDsIKtM!S&R?N<c|7j6y+-GVY>F|#uPX$Up&UqD-;HD^Tuu6FJT+(+#hKd<SX
zK&)zx{aW26H)%ImpRml+g8?4AxuB%?#%P0Hh{h+4#{yE^3Dsmd9YT2#gt5C_QL_t<
z$ZpkM&tJ1#I#AGP4HHn?!_eDCS$5xby#Bb)_s5HztwVM!bT8Bo+w=R|R<&q<$IQEG
zu_kG|hch;%X0P$;`nrad2cO4IMS^(c;$2L2oBfos3%|}|mEE>331thdt%1$)MCpZ@
z%|W<3&kC|`g;O;}k3SPefkeI8uW#L{IWTPuUv^nqlf2%+<Tis-2wV0c<j&g@jPfU!
zPG-z=7~JrbLJW3PJv5Tw$)gv>_cH`g-cu5I+cdSK8B`IJHUjrgnD@!xUV8zPz9#mc
zskhKqIFsmigSw4}ZmevUf0a9Kd4ojy%v#`?Y_-t;&O&_PR;+(^+Xt!+#UAgl`x%RP
zGZepYAR<o3qinq>kwTX^V&viH8%f(;g7{p{1VF<!<I`ZvT4&wxG5X~x<0eQkZVdKf
zJ<C-N!0d5+Uhbl5ywCKF=eGX!>9@w1_LwVG3!Ze~956vmK)kj-_Gtic!uE@5Z}xRe
zfM`4b@>3X$kP+<`SCcWTnM3)KY^~Gxll&_H@*s4U`Kt5+S0xw`{b_rQUkJ#@+6nqg
zL5rutH&gcEzt^&zM0c7dbz@wq<}qG<9aW6wyag_#eckNheM{F0nB?>E)fB*ld|=x)
zQi1XhZ|*GU?O8^K2C57o`qe&8;m_OA`#LPN@~4}ezH%EA)M)=|il;i;>#U6?H;NI~
zUqC@=Y^2s*ZVR&fvZl9BTWxkFdWstPp%x^aF{pD`+v!yde1~WdtAi}I;Ny`%kzifX
z{a(wk>#j!vW|H1R4NZ)cc0isea)vv~L&P}mqDvWHoYa6?$6oo+w<uVCGjsF@2Q?Kt
zC*<Un`5xTGmAQO+!O{g{R96W~as$73gxQJwrW!acdoWA;_r@+`uUVcY{Jk&E4Auin
zrsGV;!bby!XdXkpe+Jebj+YN(sfdOKvMaWKT~s8!aa2b3xI8NYd>qIlNqs{ndY2Bj
zn9&PAC~pKv<KYR>MkIwp*T(3Dd!pKg;mmWyf@K8ggWZX}VQfJ>#=`kLQ{kRo)N%1L
zHPUf<i+=xceQ%N;QTIT^B9wNA_h^oVJrq~;vNbUHdqfxI0aEm%?3^xR2?<UvIp<+c
zJXhN8tL~UyDhPa~giEIi3y74&(F#*&x*`?s5QQ^bQUVy!Rdxuut0x$_yS1<Npcsx-
z4eEAPcfZ)l6H*4`3Y!q{LrQn*c2ZOyM})6UAP_JxRfDVYCe;-^N+|WEsO~@Vm3jWz
z2Tg`Y0B`caH(7uBJH}CZnP)->n<X>>BB8QaD#Ml^NPyehU>TRQD*z{4?lHz(JxDX0
z>Zl-hKH;!KcD_vUa<~n-lRt;t-m(ncbnKn8rGE`WK5_WD9Ae~xz?pnku{92PlEO|r
zbSMC?nL?x5;4A=@@!32|G;0s}A}G|TcO8RQ34tJ1{no@GSQta>FMUa@=lX@18esjS
z=eE+}=_vW6nRz4R^gBK8Wvv(cQtQE347tLR1Tf2ZJ0I4NeGC#kPymRPB4Ww}ePqUt
z&gQP^JL$$WlHENgxoc;$wiecJ9IwE3`k`*%SGKgLvUQ=8dO7y#Dg-P!_e3Xu{vG8(
zT*uM&ZeREi>G1eAWUi=>PgCFqp5zaEJ0z`Wa*c@Ua4}GbRmR8ehRBD}y!U`{NK3g-
z-|;J37-Ki1;@2&WP`GD5nWNPSvrjjS&=+Cv32wz0NnnYsG~PX065f-KiWh@q<(^3j
zKnn5{?jY=Dv%Ho(&3$a}9~jZjVCxhgg}vTi)=ktLPt(A2wgP{wHmNa7yHGxzE-A_5
zu!$t?xhj#t-~9CgQ;a?kXc0@NXs5MeJGPH_zFxG$7Dm#Afz7xSRp6(?{lfomT;--;
zeIw!5%l7LRpZ_0Jp{>1%sm*_2l~~ms>rDn2zZrePYdtLrbqpJLcBl(33~X&}w?D-o
zx>Y14jy5JIH6yD(e4Jxn5RG;Z4h9#AG-n@0nNw!$DUc{&AjYVycv2GxRzO~GF`@wY
zwFROnTg2W<E26X5xNdpAf97oo?CJo?Mh?qiF&b_A>Qr?Fp_aKF<`Tb%J`nQ?2;@h*
zIJ6j0G|=&&taaGEj4Izp_5Z2gI=i|<YcJmq6a9WjQ>~uWw_P-NI}zMA>&T(AJwQph
z5KaJUeHOBUAAY&kxxM<inHxQKglwXoKHNg{2YTnw$DZ`a6zpD-%$-*9`IMWCSTtDt
z04s=(uK(p@sra#9nmQe7LTX#{@lE_CEzo7D^@uUwW5+-PZ{C9fJ9-bXW_P){aI0C8
zo3-)GJ1vu>=Gf;-j!<b8L?N%BIWH@*jI#;{GEunHvJg6`f!tX$mwuQ1+CVnoqAX&j
zwm9C%kO&5Do@kcTqvJIA4TH*`$(703yk+o>EnbD-Ac7Hs-ZMUiH9T|LW!||f9&lDD
zB8i8VY&`MvO;pBZH-7Q&HD2!NBQ(={C>@n0LcAR+FZ}@y3@pT`pcVovgJS5p2f-5g
zxSu$ma;Qq#P6DJ|#iwth$YEwdR33{zy^Bq|3*5pBcuT;C>>@q=V`6gf!F(G6YKr3k
zZ051c9L~wy&{)bf+x%eoKpB5rd(u`diW`RB$MLKd8^!j0Gfh)#s~3A-Gqa^r*Oi6_
zwX5(yUZ!x?ag=-;M(rR|-LqEv!U@X=EZ;A$i1dGV10(ViJ*>Px*b~oNT=)~*vxMKu
zx=)FJ0YGpwl62$gHC~oMDu@n4G^bnpbSgnger0A3I1LupKhV=C$*Zh{^rFlu?&^rH
zIbY!ay^m=apM5TVy_NBPIi~-iZ*aD>b+EBC^Zeb(P3lws@mTJ@paeS)l_3#j`Wvly
zGz$i)fD&oYLLNx4yf3w#v1ytzp<$C*@c%h1yS-5lOp%5WDsun$@6en)ynSrZa!|v;
zE0h;ZE-B)MD2oZ}Qu+e9)9;C)%+u{;yeCClwIx37{Vu`Vn8wj{^pX!>?o`||%5FwN
zh(dfF9A8S2#9^RE>7!tJGEX9B3zZDnL&cFVb=E3o@s<tS#37<mX0jz=Mfj;f%v6Q-
zsOr)4r{iR-gJeB`rWzIdJJu^n*b(-OtGP^$&J4iMY>Te#k<&`6H_Z9*72NmN2Y&7R
zlA1a}fJgD{ErDqpNw7g2j%%o*Fx}JGR&ZHwM_*ln9;`MI*o_gNvN+E-UQMUz`-7Rm
zPjs~@5WT=m+Mro;tv~raRaVQ$hiedupO)QeyhxYIQJEA4S~a?b1!N|NVgEtbcrp1)
z$z7>y8c}vW#DZEeWnrtafPG}^W0rBx*^NP?GFEI0_{kJd2CUTs<BcZW*_gUS_xV^^
zC%M@Ps0l36jJicU>zr`I*;jHY3UY>8?q6zdW2M^zQpi1J=8IP-M>%F1CMR0<%BNGE
z{86^S2PCg8abv;2d4o{Cu`=V`$H9ZznY2x_t?>K=M9c=ZM;GXeIu7vYc|{jJ=OV^V
z4?uMbTB~K8I{w|6r}HNXj1xh<3TI?jK1N{Iv|J25*iSDdP%;Xwe+=zHXBNWnbaC_?
z(ljb#q3d~wBg?Iqd*Tl|jYpnHwrf1dv?WZz?7D*V!1zgA-U+7{)n)@Z*CE?B+&*cs
zppMN!F6;)vVEi-%G<BQ>6qAYwX(l$4SROv=L)(=B046L1+5u~1ri-y@l_ZDOj5Wdi
zCVhj9<M|^RLr-1}X-@$w(Jp1~2e8p_%cfwezUq?V04K0uG2#k3Q(+|nsw}kWJeri$
z5#Q@JPy!40%CtDsNK=XKM0$0b)0N(Xt_D`%jmjQANoa7W5Y&VXU<*mrT0gHJDr%OI
zK_FJ7Y}-`maXm3{Yf_SaAm(+glLFh82fM*@NFYKO5AgDdXmODF!LhHFCUjltphd6p
z!$98q$oql;pBsg-pm}d0q)L9n@bx@@t+-)COQ@?h)HiN%XXtn%gQ)L<*pbe@b(3uo
zpqFu#EktC6q?6VB)b1Id+`0>j%apajK1Iy`Ef4r%)o8vZI=_n;qY}-e=W<!?ln@6h
zQD{4|fEzOFl(;&UhK@6;WJ^ZVqOV`AL}dUc(%6KuLupMHmoZ3f_GEOZ8r%^5VP5nL
z6;$rJ=uWolCp)oI=xndsXvJ)WXNLJIIP)3sEwuA)Ux-)`|HAzo1$6FIq`QPPwkNlT
z7JrNA=|aDIkmWe*{ddWiu_?RZt?BzWWY;@sME6A9bmzAUdAtk|#+AgL5VzS{4@S>X
z+CZ4Yyyszen@4^svVf3<cTV4Ok=6#`XoaKR`}}1h#yF?uma%YPgv%syx!TPLj<Xxd
z`bTiC`If^%A%^bYu}Q34<j@pf!jZm>N*0w+UV`>X>FZ&LUHI*1FB>aTvtW&LcAFUW
z%GF(EIJ*}2q+5MY!z=lqZThG#!@6CuWPXIDBea4M_m%r3DAL)Ni%{eo5~tO1aXl`l
znSUgqiyc6y489WB3x9|eckONI*Z%bixGfooC><9;Kl3%e$GWnW2_ACgg8IIj6ENln
z)i2a{?;5)LAOM#VK6zyB7b+P&_~&ldgk{=g2W#Tx>FPG`#lvH&RUi-zdpM$xXshuu
zM07NXQ-$=Ir$&?-i_N8;NExYg-@r*2U~FK(o<KaA+iRmD4Dz;|g!Dk?^_xmvMhZXb
z19Yovb?f?+2{^lOhwPdG#^1&2_%(y#WQ74<ms$Uj<nmdFYlEN-9Ru>Ks<G2GsVES~
z83rjNCRm?$CpEAf$)04MYiJYMm};P*k4Ki~ZIL+IKTS!Te*Tcz=x$Ln=wx<x6fuX4
zhX=urWx-7;-jk<MfFS4=oo$$z>OHC;;reK)l%jidE_KcSze_~Wo-TDNFaUrX-2WUy
zaCWeFa`{iEqb_Z?!GN&!fdcGl2<fWgf}IDN1pr$wVKr!}$RY`<Rbae~WT~JOlXuk&
zev0Uw07ojd81AwkDm&$!1wZ0N?3vTD4y_45jtNR<BBqp*7zByumBXH1TNOl_EmKfA
z<mBn;>j(uI9o^CS*SYr}xCcBxc|b1Z;Edz=D=`n^7zDl3Ex+D2(2;4%%%0I3YSanu
z&{4(T!^mDE&$nlvr{ZR?WO(_GTe&GGJ!0!-XP`x+6q>pWP)VZFe^9O`e<KsnLmXRz
z>4L@LaPaDUGVme`A>*#jl?Ig#+dxft5QXsWsv+Ta<YmxE9m7hl$IB~TSJ_S+XN`AL
zZbj0o#^zN_jHYaMQB1}-^)7~&(W6#qPH2tl_W6_cC^_7lT2Tv0#x%TqdX6<}o59s?
z3TV#3wB|}WY6|wVaWngyt*ZDQo5#FZ?XO&HY?<l{lsWz`di=g+ndStnE)Dy{%>(K!
zu4($B$>>bgd7#XjG-|1uGM5+~`UpPx3iTF4dN9ylbwD>$vfVtZ8wk(%Ee_>6+xqfU
zIuw?J7zl4a&@`P>%vTjL^J&w7tz%U=j+d$|CeBuVY&-O47_s5q2dz3K*UnC#-^R;m
z=SRiLZpD{;;It%^G3BS`=@kN_UW_@<xam(ISs`C3I}A?NoXn}lm2v*v!U;@Ra4hrR
zt^Amvy7i<*6o$MQP}ekVb%j`L@7OMl8mx{YMVi9GuB3x()l{7K1&b)@0IeB1tsi{;
zJXn_j(FUl|XqJU9K3kfQ3^nR3X}CSo^}KmJTMB(Q%5y+CPA0%-p`s?TY+AJ@lIo=A
zwD6c|09NFG%sK7rW{+rz6wMg;xbjHtfn}b@C3A6n9|<^ef>r*rtq{A1!3muURLUTX
zJbF}82>U@-UjnKAaqu^1oMV)q9}nnGatdxnu8`gC#il1PO{Zd8&8Q<Kih|^SiwyN@
ze9zw8qZ94n0m<mPPQP)#i3lN-9rNZ#cDNAf&##7W6y|-UjLyCDqQo{e<Qj|D2`v?+
z?121w<hLnw#OFs$<S5l|h_9WEumxZ=;8ubb)|Vj*<$JK((pmP1X+IsggPKiKbjF*w
z@n4rD0e6b&-om6TT6)EzU?h@lZ58YVtqQ#Y?=4?3`fWCgHJ7^4(m?l$pd6G@mDORx
zX^+y($T4!jyT^)S$kth#gB;UT=}um?)oNTS{&7m0Ug92DxOBj=q<#J$?cOROPoWPa
z06+ph007SaO$R&ws#@I)^$i{V6JBzqY5Qk`4e9$@U$CrK^}OPq?CdC5k#to@$z@K*
zE#9U(%Md~*QtzRlC1TNwoe%g6@hkL;l%1L6$>^f_Y;PM#C%#73iG#!(kB?c{JLg4?
z{WGN@x<So;74o1wrA29{p<%+g<a&Z7W2&YCzQ9C@vA9yqL?-3(BgQ(%q~4QFy@+6r
z0_96p^~h*=HLkQ=Vf-<y3h_d$EY>=zLraKzkIRHpovSZ2@5zThvrGL`EH6qN(R*&3
z$GFo3hyCUI%K9}YkV!+mDB~>Fpc)Bw0X2~;i1QEe^Eutt?Y-En1+mLUQteUWIEc17
z>_N<PuaDso5)PEZePV=el1$Tzl#h*Q`PnO#3FVA4nbZ;+QNHmjAQk<Z)~QRPMzmyp
z-p`<0kRk|u9yqE$dL6&&QMCmNGS60TjY_8V<`b!X(&%*7R0~qv+8T4YC5o#@4tr*G
zW`%)dy&dZ{iD7*iwZhm${k+aZg-S#E)rLdU*in;pf%>L9E%aV@i!7W{yhTO@=V@UR
z{5w`-^t>4{06<{-CYug-5h|Z*F@qE9N-HY48>B3A-i@{9cI$UEmVB?X_oTIENqy8H
zE(Y<EA|T&*a-uKfYDbj`<f-SBwM{5^N|s82Mg5YZnrxqQxroqKgQk<~-9jb%82rgU
z{kk+y@v>*Lv9*s%d}I;A82iSWB_qBayO#L)*!hYy^@v5z?{chPq($!PWU`>iA${WE
zaA>VV9bRU)DQkxhP-ar8l|L$7`V;EwbO02=WD>w05g42TVEB^y`GTH*fZuz8o#>xv
zq0LF^t3BJqU`84tpwGJ{-QF}AllCqw6n9F1prkI~$1|oMR%LIjm-L|k4<nJ_32(dd
zC>Nq0zwtO29qX&9ha{0j1d`_9PCQEaP4fY*#tZM|NcaYDyrDA*=qU|gk%J~kglB6E
zJA#6xDHx7DeSmvC2!=Jq&_#Q>oo7z3xT1A}y{oC{GoUX<jfu7W3ZU<gk9l0Dcv*g%
zc$KG#^M)D`sA&y6i1&v%(^57tS4A_-4t7_mH59QxC0h{2vs$(|1I(B7C*!&oz45v*
zr%P`T8^>vvB?kmIdF*roj7~E=Q3td6{hzO6+72=MsnQ*0afy)_W}<eXfP0!}I{Iy0
zPqA3LYxFHWiZGnA5VGE)$9!Cd8U}!+ub9Ax_|t;U{q%c9G9iYyKuuAEe=$a4j|WRj
zq;+sss9ob>zzuO4mRIRC{eThGZIhq?=Hx_;qj)`OM+Gt%*tF<><mJ`9If?=GjRbEs
zTd|9AlmR~f2%9$&w?7ONo#F>t@?89I)N?rb+;ST(iV7BjB5O&o_q<X>l(0eE=^AzC
zsYEl}I8~Ac`I|NX0mLAiI<t-XS!mP{3eQ)C9ZFKcdS3RD4-eTh3~&og)&0aiAj4{|
z0s^&*m}<3frth~H-J1|Luw%oEjtpvwCG-2%6Rfi-K{ueU8!e+X-P@`XO~72+esVbY
zFps~%tN+--alv`~>my3CUlp>_!Ofp5XX<a%P(_U~hyr_VF@;|PgTh7slp#fy_vClb
zTdZ-rsAl%9>tx@(X{3@K6|%5)Tf9&e)WhGy|0S+4hvs5uyH`@3^+x6PRxi)aW=mbT
zW-;X%UIX{4)KkG5TcEgH&9<6{y#{VvUJj50>ZHUi;htb10WWl`9=i{dUehp;%21G8
zkY=kv&uf|R50buO1w~Ev-VI~|uMwmmasc@bvfbHaJP0hRyU>H!71I9X06uSjOGhy`
zlL_dw?$*D?kQ|*V?v8Hn1~s7xkl@k_Q+5CuAE1(&=b?w0z@mSHt4!RI7I^0?+A7|H
zr2ymv5P+$d*F!ycH-H>m`cmGU9#c(4w->@afaIeE7aIUiB-1(*kPKfUvNmHw)LvFt
zf*&)92IlJ_Y<l)8Lrw$j1hWbquYvhpc3Acj9v>2`W0^|-3FFxW^Sv<P<5O@*Z~Hpx
zIkqTn4d+#5ZqC`BxuX=aV7%#i@OeRu%DgLv2*Vzxph%|a^D(9J(IOzJ1cfmO8CYcJ
zTVM@190&j$TYW_!9G^VJpamMK>$>!2*%cli<s_fxe#Tox6+>{5S5SU!Kqxo`-Q|u`
z0kez9v`-d@VXU0yD+m;|13;5g46lUW$J;uZlUA5^)!Po?Sy5_Hpa(Q$aVT$uP&R;L
zFmFB5s=QS@RE^qD6jeQ&LdX}^cO&C)usWH1vva8Z+Pr?{yr$gV+xf!ZwRiHBA9Jk&
zTnMJ}d^D2m>Z^;K(+1{9o1Q%;AOc5Py9!r4nt62yHGD!N=2U6^d1}3#8AANP0TT`O
zPG3wo;cEuRTzy5X0Z#NCHVvgQ?Rywdm-ni?(12BC>Z!un1$w@i>G_=+YGT*;3Z{*2
zUpn@D`7{ORagYG^ggzu7t1E69g;14Nt-h<1U$9HXlO&_quMU{J$O<Oz>H&cCAa{6@
zlkYM(e7&>tMp=FZD&Ie<2uI*09R`<=Zmg0_Dzl~HHu~dNbo0<@kXOsCy6KM#qi&lh
z6a)o>`|m38$VhzTQ_D<WScNNLD0OcY`*C0^WbI2%N^dpWfWryhFeK>Pvi-&X^f&**
z!NGoSleYs`q|w`Lz7AG2tuXxFzjP%wPYms%Nn95sG-~6JVK#o19Hc|@LJ|X@n!9YS
zJeFxzZyjaXVgFEu`LS1rV16tz&Hz8{*WJV1E#|XVW%qonEoA^dP1C+qopjmX0B<mO
z%ro54NGsTLvu_h!+-cODQb*X=+-OU&36e;<jmRwgHoA^OJ#I>tbY0&)lfkt|0H&S{
zCI(3=wn*z=^6V>hI>m-ip63@FUGNcMYV;MEw?Z%5$09)~{wP(|-6xNJPEB4iJ$^Ni
z6qZwiXzq2nBwk0l0afXyrgPC+7TLaQET*J;R?ZgAFy!OisnwHveg`%AR$U)JuF(s$
z!s5A0ui3MNBi|vzdDS?^H@<t6&SnPsB2h^&$LoRMa6!QJ#k!Pc5k9nLCs}NwOD`W<
zbtNrHqc-uef)7oJ72xG<{_3EG$uq1s5-;hB0ko8z4BQ+oZ_@i)An3XJC8<dfY?xTF
zsg-4hUvKar62~9a!dwcj8XkYk)A7*}n~WcDCXuhlh2=2*?}LR<aJ_~eWU-P7_Moi|
zBLv$)T{8RH{f3RN&NK_YZ}$CyH$Gf&@Ew1Bfx#c9{CP2@A=bZmk8-m0h$?2aH^X6M
z>7JFnpzA%r|9t~9BfyD)`n`c2fdBt>ZN|=Szg=6g%2m{_O6M!Lv~?0mh9LHXR4PxX
zE(*1sZlk_738`eP2$ww@k~wji>iY@MM<jP}jKp$&v7#zah`jA()A^d$8BwUvbvQJL
zRgq&DN|@*si%e=4){hKOJj$-DK;%7svzJI7KhTGc$!CJ9u!32HXKF>JKSdw}6tHu*
z4T>f}FtRRqZq^!3xJu%}BY5TNz$F#&Up6-h6B3JZ5;OevToOaJ0bvMDbP5zp&-*`u
zl=yhVCaE)^ij|gk4L^mBn0nK%@4~>La#PJc6EF5w{E&gZN849Bo@@bpoGD;{HRxJn
z_)G9FY|v+pT5<#PQD6?>M?!Oly}qNjqb6|r;L3;HeIzhrm14ffOV^pWK0kdjq8TUG
zCW;{?wJAJxV2E*)kYSF*UQk^nS=a<Arq9ps!tvFaNp@R`d7}gY3?(sD46cNtNcBci
zns)?@H@Zi?0a)`Q8f6~QG<-TYLtUbPG%+i(<lD)fw(GtX`|Q`GgVpl7Ej8DNe44M3
zdhH4|vi=iHLpb7%B&K=s_WTf0p5=$LLLJgBbzaHTQBWE}%lT+=1RUgF3K#ENfw_yB
zK5LK{Lb?^8uSGyJ*)hUM==}OQTEbs4DcCB}QV620+YWpR=Y=AfthaTY7{?f0elWd&
zhFlzf=3G;12sFNg5b1aH27uN5=56R`=?R)Ye_Y>BP@Djo#`;;bAv+`bB2#)EmLKc2
z3M?)4J=3xzi~m@YRc_1~5it?fqPriashgYmAW5vN`4CsJ%^**$2<^?x$(~G624o<?
z4x&=w<?EsGC{{V9JW~?8jQH40iB^x67>UfHkxOu^5`BXXp!-#X=m|R<&7DErOV+Zc
zMMDDVrX`-y{saw8PQqh)U-($du7^aAy+O9+h{#xRZErTBWxX!+zzVdxfNBXxbJOF+
zpqhxCBBsPW2TeXz2HQ3)8Hsm`%=c*jO|S{BigB<CnB$-QfWCvgQe393Uyz6O4u8CV
zhnTu3_E*o4#6j@iVe+DwFnN_(0QWcRQUBsE=>I-L*VJ1xufK#1|8H{S|G4?MSlXKY
zMow9p{)e=wR_(J}WI*UTp%&Yl)wRr2qLZMG0y)P-z^SBqB5SBFH`abGDz5N40)7?g
z4vD-X(Q6j17Aab?yJTm!-^TWysOMpAS&yEk0s)lr0%{0V7Tk}H&*1sxYiBXHIl>@#
z?pHCkf_7(0QY&arq4o~K?FH(E|Hu`9H@wBc_Vq)NCkcV}b2^@+s%oZ)*147ht0BN4
z5^!7N$lf@nURN!q9&DRS&s*dxor;}{WkC7=MTS+)wp4sW<gTNSDj2do)R@^s1HCmC
z_P>~YSVM8@hRVzdA-1s=yoglWtdrZ0IJTQY04G;i_bW6}u8AVW=?+(8YlP#ld!Saj
zVTsw-nS`NB;8Be~;o+Pu>2CZ6hzSm^mGA)Q@&5)QJ(a+O#j|t}d67~jbZMRm&aGy`
zG7dJF6TFx9>Xk!!QH@0zXxR*6V}U|S2^$f8e<4k_=HT{^(9!f*YT>v&d`5mipl78S
zUlnZorEq?nFc0)hRaP8gEq)}~+7V{2a>R9BFL?-(ZdDq@4?MDpujI3s0h(!wam&88
za2cc2(V(?K^&_nN49!04iG+og;{WK=q$<-ui`~NM&8&rm8<M#G;iS38PQpjQ(g;-^
zm?I~C5qF01db76dd&wLy(cjR{VM$pG$5}ren0C-AG)-L3bRs>XGNe6sGc>=BoP$(&
z4E6CPe!c7^IEMyJUy^+iQ>HjNOqzZK4va!qzjfn`K+<z#*&B$yThSXPB*<-p#FEDR
zlAtVXQ1Y?*mZnr`)sI5=9QAxWw*wt1H)(#|oOj%`?a=SjHhKEjQHk0q`BqwtZrbCN
zKG(dz5_^@?%SL2uMC~WKWpI@PQ`<rZUwe$E>-zzc#?`SyZa7k^f14ca%52@%@OkMM
z?cx8X2m8XlGp2Lq#|5+}G?D89rp6ou?gGvn=K{y*g`ObB7;F-ZkaqxK`gd$1$vP_#
z1}Qtknv|GX<XAo+_Sy9B;b@X63r+B)#8mHG352IaM%YgXh3(z{ffY13S7Iprj*fTo
z|4)k3-O1AB{|#u<{<YU-OZf5U162=nRGMGFGmp2~9K~?Bl-=K0y<0QBESw{+C3RzW
zCsC{%;bCI${cgfHsLN%@J*<c-5;-@VIdp14HvoT*$*7{@tI&9=EZ~9&+EK4ZjA^J>
ziY&8^XUbu@7h+qfQoO7zwO{M$`T9oP7?W9?Ab^OAGtsN4F!ZlcHO!?p%v~2Eqe7*$
zf1RsQ;-vO;9z9G+|6aMhlX$T)jhARbQI`c3rgNTCVJfHHV@^)BC7w@h_ssZJ?Q_N5
zc)a0+>GoovRvnaU4wIO}@}zI-YH!<8H?V9&hgNF!nngfU(jADDQ)T0I#J81+l8RnU
zoNoMyi&LsI=Hy4O+gi{l$@kTRCBv#aAg{8kSV9cOUp==MA*7O97vy#E^1REMi#ZQd
zuN7vrUnQ4Gj#UAj(IC#0spYbMnIKMhWa&6uVYRkSJMU;Pzf@uae<oLJ>B#OhY69|P
zJxDgV+4gbQdB`>}%oi|n3OEy$=Ei=PJ_vFGrCXrG$@NzVC5S39E8S8_{X$9YY<9`_
z)o7MQ!mMcpkutEgGN^EqKmvpR_V^^=_xqc}`}*8B0dD_;BH|_Kv;r@9vE&`b-|B#X
ze4wx3aJnFht4o^EOtnha%4ocUw?i;v8!#^kwVG1P%<bf1lem0CikBzXM~FCG?jhJU
zJg+W{z0y@-o5v_;+ElPmpgkd_cMAg2f82W?RKI1$1nFYF9>hqVm#lHcGUQ*UUfUxO
z;m@L&oKi<&onCG<<d(kQx<NjXn3yPT2BBC~zxr=gtsLgP`?&UdXl|6IX{0s&><UR9
z`apDCXtlv!FF01uA^nclrjd+++-hulc6q6a6QY*gIK78Iq94xNORdQ$-@QR>WneD#
zvlw;l$+6G*Ryypj4q{z6%ivVtO8C=x^wib7!fYcES#&!hkExY-;WbGPoQt@$o7-Q5
zdvvM(y^^lINP|cqJ020%j={(y+vQQD>G|S{X;D>ebjzk_@!V-7segu1jSML6V6dF2
zq9cHXss(g{jUioz+^UA^HCQ@-I_R`K`IUJ)pvPP@KLrQFxNvY}M*0HI&3xrdBCS~%
z@-C}mc})a+>U)WGj!$m6K`PNjm9bSLsWsW_xJv&V8!T5;BQ<ttpm8e>y+0UuC}?!j
z&&j7H)^6G@q1q|sW7)P^C=VZ&BR(_1K!w`$0af95U>R=piC>QRf1-ZZsjwLMa~YkL
z=#TUJ##z2or;LNZpU9q61<~59fvys0nAaNh6&^)$zAsWMTevJ<xx}wHdo^L37z8ld
zW1}vN=<&muQ=Jzjps4Ejm97!iFe0>?EbbyTZg|L;VC(kN8F?i6;>0%vJtRJmJ(@u`
zk4B3Oa@J}#oMY>bqZv_6^3~{$*UaTlE`esTM4jT*tz6GW%jj58dUJek%Y^AB>ZDg(
zVA5?JIow6_+GGdNa?ZfRMXy}fgzC%AdtU*+g;Q;(ya}}0;Yi>qKF0#5L&}3%6=6ZT
zd4cg1w}YrVaptjC2dBqaW~+s}(R&<WVfa1A{0Nctw|Lt)O3a!A3WBkrwfoTseeQCy
z^&|QcTu<>#dnBTM<fF9ABp$oTNQJI45I5Z1kvvZ&-rsk+xHHjjJwe}o8-bhGIl_l;
z@D#~0rQ7pDyJzB_$D~p?;}R!?wW>p>nPT?;L<EuZ7)YEZ1wUfXTxcS|DTTFmhKCd<
zAWWkv+nE^-{JAi3VF8YRH(W$EhIrXj+u<P-+hh`qnaasm0jMyV8KUnHoB8)dfMBup
z2QFC?6(Nnhl-}|}EZ@z}&h^4JyqT8mGJ@X-3ye!(3Yh6~q~{x$h&`YJW)Yk&CV96X
z;md^xtNTSM)bH)$fL;w7{*XI+T_L!cgMQHz(PbauaR?%#adzDR3*c4G1f&&W;9Wv7
zTA;l01L|V!H`<T<8LJLu#En^DbbKw$ccL;WhGS1NthSyL07YK)&K~yIB93J+Sq;WW
z0pKc?24&(a0aBm>W)hPD5LlEtXP9r8$?Iadj-*j7T(L(?i?zAnQ<+G&por_TjS67a
z5t!2+qFWPD4u0Lt{ZkY{G=~6VVjM_+JtQYy{8D`(>X|&4pDzyg^5t%-vB{@<eG`mW
zkzX?WSzNe|Rj4x7xVSfeMx;lS>!*;nfL3Osvr2fX2Y?<_v6}M>W!Fiu1vT%UEB-#o
zsnP;MzXvfYk6I05+Mf|%`5glI!aF<T5Waba`rqV-zKg}=VOgnM_j&r`C@QD$*2gDy
zx86@Tc5CiwJVUDMuv~k>f-cO^B0i6C5thixeJWaksWYxnGvr$3Gzmpuc<eQjhq4>M
zi0!Cmc9~RZaVPprBZBV39vL)S`bUeCKfnqw<%SvyEK7sC2G^!u;=;X?e#CF`j`J`a
z%**5<BZ)cNoSe1<@e_zuhDNFhw`pzU`eL3`DpW*pvmEMg1>4Fr?}`06*jl*J%leu#
zscL*wb~B3G*Us)^TPZ$mCjWdN!u0O%_WS~W^?kmCj~{p&J5!*0<L7l<K@CC=F$MYC
zog;E-{Crx3jffJrx7!;nWP(7oUT_C~8-nO+Q+A=375|JilZ4jaj{|Bzi#9_*X~poQ
zgSM@5CNexIn}B}VfczS{IuO1U6N{PvW9(meK3EoUghiWNhBg@syvjty(p7>4iCU^_
z0tiMrN6}6Ni7LS%fS%raSgT=D^$403BgAS^p1pJnW4z9)EIFT|(LaYuiB{s&f~>LQ
zKyEghiydhRXYl%0=iY~!FbCLZF_d5$BJXs(B0X69bza#`SSRhlnj=$kxupL#7Mk0=
za>;^&HMC$GIOliB)F$gm9zb4A=;rR`Ch!S!7<ayI=gG-;rO0E#G`NiuY6cGI6OIdh
z*8Wd#Oof;4M!XHdg?NU5>_WttVH>i^JA=-z3DY!M?Cu=6!rWKOt#0IypSPHa;)IGn
zQ5H}o07g`e1-+90i-BLyy-S(2S6s2|Wi{oFC-+6&rlmdj?9_DW#S6(d&goV8g_l}(
z;p?5f|4J}?LRs4qyjoO0PDj)xFq8YV7p<4ZAm#?z;mE+B<gGo$h>_y5vfV9;Bdoia
zdT|IVtx~t&r<ei^aUUBX*&eiV9Hbu*E`u|25>Ly=Sl$h)Gt=UdB*{GHQhpu;B9k-d
zl)4ey+7W^?L4urVlv&wa@90IIj3RL-&c_4+a|}AeOi&WkASo>yKYJp1OePtGona+G
z{rKx?G#H|gt{vNiliKFyaoIKKHi#03Jkuty*oWJC2)<5bitQe<)cFTYw<XfKbf$HW
z<INBo+%vwQPK3qh;U>1v#~7Qw8YHmRMH;uM*PG<L`A<lrji;xx2Y<$^2YTp`{O(2j
zdul+)YCygvL4ReGJkIc5BT-eugpS&#vt7<OHv^GaDc;|;0gr}k7pmFkQ;VzsMP-~b
zOv))tH^XU2W}(yNQ!SvA4b7rET1i=YI%|<+oV7qUl10~1TP@ZWdv*i0d?;P!UM=6!
z7*mAEx2Y8}>)`_hPqL#}TjyqseqBMDH6p0oZSGcNdJ(?uJL*P%qJeH5H$xXv>Gd0m
zs_6)}tpc={9?|4Tk#wM!b(3)W+-DR2&9BZxe-~pBg{48}Y(CTN9qf`~74&CEAUo7{
z=)!E%%Dk~w;g#%`E;ke&I8)V!xtk1MgmZj5?#L&|->IXt`KibcOzy7a`iId2aXbX3
zj23(N^n;=Nkq={4+%&Lz#%pNt_iB5PBc0R3Z7X|5U`McUGl%ELti1FO%wWrewX~XD
zwTA7AWmC8mTwEu3?P|Mvf+|J&HE1^W;^0RFsc`9|i-++VG4<eZEFS_<X#@_Feh$f5
zIWwCyFbB_O$e+jutX|>R9L8={!-y0<)apN*BE*hl^E&C>n5`0AY}ZRfU+H9JTu+om
zP(GQF0NNali5Y&q9*{XfKgHdwHI$dbwRRh{p7_EX;^$j~f%$owP5%7h1T`x#GqM)a
z%X9@#n09880=E7<@Ae*$qPSg#xBxy|HzW{b>y%?ee%V;r>EZN_hJvhUrT|bT^pmX#
zRODYyWty3K5X{LemCjikdDqDxr$PtA4)(MRJRVe}6O(^@&hp!yg|Y5rzKRu?5&u`E
zpNbvsP=l@IUMTf^DuT~Mv=Et@{;8Nt?zw!_c_WeYvACWQHoV34K8ebviXIC?nCG77
z1TlHcRp2H4M9G?VbIP*1LIP*zVK=$w@$1_FfNo)sd{T{I7Q|(&Wnf|AwHgC;axt}g
z?zBO60;F!&C=$a331Ir_3S4SYx)y;Up3^lnC=*#v(&-&A=DYS(1q^&hzL}TOEq8^P
z_LwM`3c*5m`67|UoVS2Z-*+$3B{JfZM%d(u`Gvc%=|%f}cilX_bf=!ZR6qM0t0d}%
zi-<IsKy6mGJ0;kcJXz;rf0=!QrC29ZUXNUQ<YIONX!p;l0&*<Z>VW?W{-aln3sYLp
zh?emG;p-iPWQ*D@-Lh@lwr$(B%eKACwr$&X)h^q%ZTr@_r~5{KC*pQSWd2(#|IA!-
z=6J_=296cUsUR<Jbn8*fcv~USc4?6I4T!gNP6V&<uwpd~(2Pp`NOUV)Y73FNdyloN
zxh_KM^}j9NZnLC|Se?Dys6B{ov8=_kn8R@2Vg1V-*Q9@P_6TbEJeK{_Lr(!Z0!@M8
z)dPJrh_7h6QayQ;q6^2o-~OwWv+>S}gdT<MwC4A7mmb&IQJgTu9Twn)=;+a9g3xU$
zo(`VlJNhSy{h)wN%>mbk1(=V;I<a_8+i$zEh%Nv8k6Z8Y_`*hSu0z8<fqNi)ZN;l^
zo+RCqEp^c^gxQT<(1Bodd+*>(#n|T&CJfA6%7&2KVpl%cr_G~QA)uZF<Xl%%&mISz
zJzzjWPY^F@!uh~6$snq2{^k7%)RIwi&qeosImRY5O(dkwEH^xpf*>t<<x6di1uU?F
z5u80ZAqR6&{<kG~8y)~4ImVGiBQRu+U4sJM`{WgZ7TNn7@kw;%Ko4vnUX~Ob<t02?
z)@+_zG9M}$Tk5j)u8a_qt8hxkT7@MXh_Y+TuEJY-eAiEXI~DsC%Q0tKDb3WWU7N29
z=1l?b=ZJ!8lxx*v<+9Xq`M+1`^;R1ozTv=4yh@=EMXpUG$fw#-85i-}FbStessAa^
zzF#k)yFilhsyol!U_39`^o2ILR3W5d0J=2<n9nAwIGb&r=$E=ydL>zXywf_j;F)qu
z%%M#~-Za-ST#y0xt!<qkEJWmIe^29IW5}^DiFDn+`db0(b=G!rp)*y^k#&s_y+?o5
z@giL5ROd?@!V?W7tkM@+I)ygC1&7Ho>Z)GVJn`5_qtG5-c=#yF!gD(~-GA32Onalo
za=}+rKdxNeo{hFO%&exCc3en5pDyrqDGnF7I*ixe{W~wNpqMD}i3dC=l-HTwnRMh6
z-P9}luGT*MiXQklE7aWH(S>kRc@gafJfd#rXBj3>`&{i+&?4(fg6(cZ@qE#K_3qPM
zrUh{(>4mLABAa+~vSiR3&|cfZ?d|0SLU{JJa}W*hqWj*rvO7RGze{mTH^^g`ehvGI
zQI|@$^X&1u`)sqVAygLsUZ2hvb^!!qL5k*JK^B#;lUp(&1GJ?Jr1*EgSUbYZGa}f5
z4jl%`REecm3D}cu&9a<(s&VaW&kRG2;Q5&O;KcNDwA3VXnidbqdy~3G!pxL!Bu4hg
z!6bV@T`^~MP`AS=O3rmBh0PX-mt89{&>zYyr-sq>{_ZvdxI?UXm~fCw+Kmn<a%jUC
z8t<i#y4#|>_Z-Ek1I&1p+y}i-2ete&7VFEw>C^QFB8ul#xN*}_03$MC0s-R3$2TH$
zGzUPHNpDtl=~f30;IV&=Q3&ZH9-JzTtC@vya*QZ(yT`5lLWagkW@pfysZ)^Av6S8B
zCA#jl*-7-anO*4?`pc`Z6aB!JlRn<E-NyT3|4-%e*QNpRD_s7+FQVU1Lkn9Y3p;v~
z|Am3EH*owFE}iK0^ek*Gob~j6^-ExY|GWcg!I0Y~;O||2*;aV}|93Dna5DM5+FQ9l
zCi7SQd_X0Z%WJ@)Y7UhsXWPIpd)88ouLrL)wmxL+9P{xWafPs^N(SD&d+1`f<1x|9
z;eyf~1;{1<u>e7QoDO6F<EYwkZu>{WlV93GGf^<RaQWA7Pk83yhr*ntgWB_k3?Vy6
z`}6U>anHpxjUh_TWRgaRr*7Zpu3?lryG5xJjs8rAn=?3s4d+6kG_$IJqG207C8y=@
zP}EaCfKLv-yOE4Ru2ngN><$TL=-{>=`pwBTRvcU$A1lw7JHcf5!GKs%^;7{#j*~zw
z>@kdu!$@y|$X5tR;|O`I(C_g%kb&qiYxs>?!a%UYLKmpS{Sh@QdD3W!cWo5<SOFs+
zFTAO-uUKn;eHP3q7_L1OW)26+anaTMWxcV^42sD7ZFeSJ?CxpfMJk-&S*<Qz`wMSi
zpEe28i(+rW6MTK^t^@b3;L#7I;=MO(F2TvUW?d^mV}J?!Gh2m4b23+6$9+nu!s{g?
zo4(AkYTIQW4n%g$=;SG{nxWlceytBpsQLDc1)`qrxpo`oGnL@j6JJyV9Ms%7Qt{4}
zhDV|m@O?8Nn}DMvbCnETNvOqYYsGuJsQBgyG)A0aW3O=Y&+1d46RQQohOALjiI4Rk
zp!>?#|DlPOOk7eI{4Oon-w*@g|Npu${UzPoIsTUiJX)pym%H&_OGEht2yqXgoR`3+
zSVh*$O1;y9UNNXkA5C4Kc%!H@oal-8J@_jj#s<bZNo^0v{dlU&gV{)EG=pjiWwD7x
z33qR%b|+7BLaMNz1qNk@9nABlsW3y80Ccg-qz^6xa;kU~f>2R~dM&@uLaPUO`$-8?
z<KV`8%|X#IolwG{qAC&9>gh7{uCj9e*2^}A9*74tTN4iO8L*f4=SRrW7HA)ty%yl|
zLm1%iHGC~Vnj_F=5+Fi$zw7B0VFX)vG2t-Am4ZWksPzxPi;4qPlw848>(l$i@$oxx
z)o#4TIti%ZS{pl=gB_3fABJH0ruCUp3aVxG%&RBUOyMDEr^;xlejG1X?g<w+Gi4FK
z*qOwc@uGuz+02=zP@@T=+)5eZNetDhkbkZveOyM|Anh04K<GDskcW6Oqao>nknEbc
zg+Q!jp{{7;&C^{sfoxqNx{Omn4$P*3tHe=RXZba6fNIpzPyVkk&x(A(viM%|105u<
z1DJKzxzQ$pR#b{zhJwrHh(__|Gzk|%p*eiDPUI#R79h474$s1li1a{=-d+yrJET8U
zAojGYlE<L=bE(j2rY0oEWc77kZ&}M{wzApwBLbkabNeY=!66Y9u<r*+(9!wzfL9Kd
zfGyBg+*fY<G(PwdNbK0S!<>`PlY^(JlV6!#Z6WkZb)qj6;#xZv+;vvPMG;o_vN8!D
zkt1+UaItd4g51wyyzwOWTywcY*XC(*`AI;f<F9%}%<{f!zgZv6DpEJ+th1qQCQ1}*
zpBvm~O+0vxKx!lNwY;<rK+R4M{#5r=N5KuJ+oXLZSJ#fK?1+lIZOBC>!J&$Le#tBg
z&awnlx=jnxUj&2Q&XDrfSfl{?1{B#)3Nz~8!ruRU@J-8UfZ6;mZdWt_0Nnq}0=M`t
z18cL!e{-~6C?Spr9nU!|fKh@0K_z|_@_8~r<VR8n5Um1hLsBIIO1rEnAYKvrdFn?B
zUP&{F^Ob@XKqbJ=ma%j@pSO4w6ww*IE@Du6%<}SinfO=q3M#tM6zGbWqPU6z)ApDG
z^LmP;DhWAQ<}Sk^^=6fj-4}T!26k=bM*6pw?7zVLTS1)5e=gVW%=X(fUT;9zIVX&#
zy8!F59NJCsqYKhC)ftq})$YhGPqD{>HRJUxqI=c!L3n0zO+xV7IHv>5D=!&AhE*J=
zl(@SzXc`hMWpkX2@)u17cgHmM5|FIa(5SK3hsBzRB6LeP3JpAkFGmu1{&L+7`0pM}
zIkumMSi%4%^+P}OM4kalj()&rD@b0b4UTXj)?M3$u|W+JTRh8%ei=8)f&=A_QBxp|
z?unBpH3HA9W{HqHPEGaH&S51yau;$cGZwvwM|}-lv`LRRN|uS8@p=Bui<HQxV2kF+
zZsw%QqlqJ)3T9I=rfIpatT&nLx0A8zFq%+?`O8EJgFe;w;|~hmj&>>z1lhP2e(dmP
zfMh{8d;yoa+6qs<JxkpD0iNOvpaeHZpm_koEns9E^M(-qPlVsk%cyik5sAv-A#IgE
zuy>nL0HsD3r^QNFNQd;$-?~{|8oyvs{{m#qI1DLB(ISs&*fer6p|Nn&IwgS2%~p*U
z$)k!UIDj6sqj(l9nNEr>=oV-$m=(sAS%nNn!I;U(0sj<v=T@lW!~pn~Usy!CAsA}E
zRP98wjrt!-1LfDC_p(4J?56V{C*=00Tt~%Gf$0h%S!PwmIh4MN=m43S4?XI1`6c_R
zF`0<rLQ;P|EZLjOo<z@b06GyrI0N-UeU2A82K)RlTY-a=&Ad+=mP&nQCqg_1lc)l8
zG7Uhta-KNt!cxwEQz);s6$5vHNX|QN(-#^He)XjpSP+BeO>bi<z7~y^kLzDO8(~j)
zhp3g(P(fFZ3C}!rwlZvqB!8tWKQtR7%>I}Nh?K`$OuHVq))cqkBnJEqGm+knp$|wf
zL^r<7sOJez_K<>Q0E7hEufRKdOS{Kv>d5ASGpnw)2O5Ky5*&p5%tnkO^6#w!pkDJ|
zkE=9BfuV(EmxYsNsOnNbYsopi!c-*_P2ew0@1Fy3y-|@}`WocaN&Ts`%zaFD7s#pV
zb%WV~gKa}E2;v3l4OX=Bm{Re~mU-X9YNxI;(NO*EtHVh(HQMT5<P6H{44h>7xpJ3a
z7btt~Yb$Y?62Uup3Vs9@AB}7W-wXgU^4%8YbF=f-i!|brzu8ZZV;T@<;a-c3Vri23
zI&4q7gS-dgy;PckHB)okO1`pA`wsKfg}|qCd}gFf4@3Nr0eAg2G9U!nO>)Xw;PWWN
zaX1A@pCq>kXSHec=x?}~1)Atn-K`m7`0FXQq39!I1s8iB1?dE-rQTU9#~}>uBw{&2
zPqaWdPZRBe?3N$&;Uqxv4R?G~LJTXqw<`IaXENZUCRNcErYpG*$9|=Wf9>7ie+1ha
zh}}i4jn)wj28IGWkCNzh-?o>1H|QN@)Ih#5_?;`$G_qav!G?H>?g#Ai^E%M65jN6r
zotN4cdxyg28}LJR+MqbQ<DM_o(Pk#<hx8(e^5hhk3EE?N8rcD<>wZTyIlj5Qr2gs{
zz(%@xl^b5z+pyt=aJ!&7UDl5ck?Y>d=~w;emmEc#X9fGrXw*zdzc#o0BC@n$^_9(O
zrzvp}>rzBPnsv_y|BAalF`m`X(>m9kj`0S!>K-M|VP*tr#q#|eI&v{`i1>EhA4tCQ
zyyYF+RSc97VeFNnW0Qw27<^LnvhtR<M`g7umoB+VVPbS!J;d(|e9AtsB+$wQ_8@(q
z)VF9XD)Sfb$dY~1;`3UgQ?(JRD(~p;D_^gZdbec2hdP^HhVE4@BVFbN5+sSP>xY#H
zQC`a8jRoqZ&g(uMAv><Vu^#Cy%{mN{p=3QZaF5|FukiQR1N}V2?n0FC$Pw?PKlK8E
zl^2yj7eos?<&u89h}8UF;|gpX2-QAbu;<`>eSQvvO-fIFlMLKOq<zPIAA5?B2PS2u
z3p@w0Ne^y8ZrFYR|CB_G&s`0w&W!kg{(Q4jl?(&(^R#p7YZ&oaX3j-pf-^DC`2Jl5
z8NGf!mXr+SjR1V*N~3!1kDb;`JDj3Sj2OT5?N=N4@BcAsrHh$lMEgCQ`$GR;_bD@b
z_uqXgTWv04g9F9;MIGYFAS*$!MTbJVFPM&dl5PS{xHT!*fFXjG+|XE3V%&Ise#NKH
zXWvJ%mP9)S*-T0uzTP<3>pJ<mTf84bZ|6G@iw<LcQNt8sm}3H~P)kL51ji0@zglgW
zkpHKMBvOyn1-oDUYeZYaRI^p%g1j4_7UI*jiJFeO2ExlRL@lPN!t~!WORu819crpA
zToi)*SB>LmeCJn@4a`~sYBS}yo&lcBR8cr=9vpSDMfq+@^4`<u?T{;~p6MF&W2p*v
z_@^WwY+?#^IEhXAQj;MYwcR&e?N0a4MJ%=oL6?IZJ$mGpt@!d{)1L&X=EzdDRm%Y_
zOLTmKxX`+>${d@!S1A11Bz(Oe-;$NM-YTR;E$8aoeZ|9p^2rp;0L4Z!Q=V2CmWQ}$
zlhJ(~%noXGuaQfn;1L*|9$qPNk~?4|==xz2@qfm0mTH2oPF*fjNA&J7X^i8mK-eXq
zSvWaU4TFVWY<<L8J)P1f_VAl-FOZ8Afq(Jv5mL9wA)&cN76NIsTV=T5p%Lc0IRc*T
zapQ19ob$5?zIN@cV+LF5PQlg<uujB_iw+zo$N;DREpt^k<z$gwBd12c_tXl2zh0X^
zn5#eXO1IQ-aa;~4TGh#b=j6Tss4UN^p-)fG6o9yZUP9q*+E_iqD2xH9IDX-hAYUS$
zCediy#iuNwHIB8CE@@p(EcURi%w9L=h>ZXd=noiYd#MBnsuek!SBSuX?g`+RuQpKY
zoq7b?snGO7geq-}udA<{?br@VkD~t-xaKB@Qt`jf@4E5nAh)eecjM~{b^>(kp)!S#
z!chN^vTq*_r)7Fm#G%&7;eiE@L$QOo*^$fOu*9j9KDXJ&6Rz?u#<`4YuZ|ZdVybC2
z*Bcz+XzjN_WcB>akFAktBo>IM!zd9)Xl6yF{=(HLYLXFRTeO9O;R@09Q{zAoU+l{+
znB>bROixc;F89=iQz!KAG)Az~3!BIX4cvs=f<wPo?dqDnxj88-U`<5LBp%V4f(dpq
zq1bd@*^3cCP8Dif>^y(MO)B78N=_@Qd;ABXpjS&=2uRa?nzW2rBfUx_5LS4xR;CF6
zq`oGi@T$^W35%Z3?{}th?&o<(mp20UaVG&Pzzq<W4M4yY>!GGLGv2ChiXYiq0Gq>B
z!@8E{Sgaj3FkwlI;==iwl`S?g2uOVR!ef&9IseH)|McXT^Olz}4%G&}ePU5<dYSGw
zaB`o&6-6;8{mATbuu-O?@wl_%J15+^n&k$98gJCiJnN}Zi3^>G>oUE+rnv&BaZNT|
zZZ-Ey(J_RSG7viGXMWlmI(ekOiBv#E_3=Oi>cLnp@8pUH=2~str5nk+c1x|j_8#iv
z`Na0W0@(|Ze1`qcgYQLBq{Po}tXKEfzwv)L_&OW?*8`<l-Nx=0Ap0Bia4<3z&_x-N
ztv6)Yg|*S50bQpl+p4x&#%vN<6CqI~I9rue(9eAa4*B}`oq#LZtu6Usz>2Vuf0N_o
z{(|E{6f`Nn<IkR&WX7Z2PdUMoczgX+i8#n(5T{(81_MDDC`cm;g}5a1kOV02MCkI=
z3xE8jW<0req*9CALo-Epy8}eHRxH^**<@U$p?6PnNTknAYf%=cB0{5ByysML7QCDO
zj0i<3Dla@$+un2bq`F*cKNTcn@efsd)ugw*PP1dEU*CaGJ8S9$9YDDa8=xl)&dnIe
zxY~t}lW*I$wLfA!$xM)9-e@xjYK5lwylpZ^I>(@+C<0e67hwmGu$mr->gCa}RI{XQ
z6lZuOVzVkW>wRaHH_Dm5yPrU&Oo;*Bt%bwUFrFBV`^!CowBC-Cv0my{aQ@2BqcA<g
z?+c@UE;f6d3*mvwFI`}$KARFX5z2AQF-5da$LVp(VpM<3kP!2fmHB*VRYFoJng%${
zV$5lms|=wS0n5qa2pt2Il4VRySCm>}QtCQdED$U@*G5->5WCP76g$|?<k-(liW$p4
zEWeDEPE!g~7COgnr>n|BUngEvM+a}<K1T=vSalBA8di;S8KryzS3I(O%NXH-ra*E(
ze)koFm6@_p`tJc>1rMWh2xmFq`Qt{A;wAcPG8y)>kQ8BeS{5`#e;k~&q8^lCeSZhR
z61VbI-{l9f#nElGqiRIEifUKpF<hLd?1AHF{`*wRd4MHtwq%{*Ix%x&#0KHaE9!Dw
z)cW)DMw1tmJFD724-ee>^O5C5spI%mc@UGBwznp(GCsn7gK5k<NOooy#`;!<eq@L`
zT4|XS_lp*-Mu0n4YYtvLUs<m$Y$O+#SIsVtyiwn1Nu4X>?CPbB{R5O}iARe;c9~d4
zi!ZvCN3*Zd&2h2<j}mfxeslQA#!HGQ-LC~ESYh+=n3tOYZ*=FD&HN*Zv1|fTi%nn8
zVBkV_FsBift>s*}b(`qo32p5>a<d#!A`7B|SA6hjh=D$gbrg6g#5}Eic}rTUzY?qk
z2fHuk0ngrM8Nim%$nN>{#A09RDI*=Z*{;%R&4GH+bGU5L?snZbrPQ@Q2g)0QFxrzS
zcRtL-pjJ4Dck$p3CzZ0Jsl9~<KCdGgMZb^<?X7M|P4x=mIrYmsy(KL@_g&-2aKh8k
z;I9ueq9>#%XNLNSf2+Ecm#=xov2yh%U%0HS(UYWcgzpExesb-VORGewoM6p$a{v^s
zGwLEkC2CV_tfj{B+2Z9;zqSX5GxW{jyl8DT9uRys30ebc|5zzv!K^a7*uZr@fnt6E
zm0<AtIZX2X1(-P&A4-4t1(gmupj167Vo%^mKQeMDk^#HI#9qFHT*8J}gH$}*yy{sC
zc8Q6XUYad@nl@ctdwORVg<V;98cu}QEp!Q(j*eSyE;`8qcDf6haBb-NqW5dI?Fh8j
z`SABM{82Vvb&m@S3!b9}^rbL(l#_(Qll6$2HOcrm54~)q&SOSZxt2U+x$i(W++^CH
zokkAH-9w9!z5BWGqelSUX&-<5oGASMl#Ax}m8sHI^ROvl_!d4{0miOL;v??Nm*?l5
zBAI)H(s>O=*zLVnV<x=Ld$d>y4i05d=&=Y1Tm50KyFnh*o=|z;pFlLI_}!~dXN4pk
zPzo>;B9B8}3mMwu9`)43Lh&m|3b|&=X7P|-eAtCT0~Y)o*^pZD0ZoReDUjAyxsJlP
zt~GoxsOY3KC<fp5w|xUFhC_<J(qIrXJNcb^8nlIbLDtpNx@yN3Xw4ezfUn6aXMmHd
zL$c2Zf9X1S@q-)k*gIsm80iDXzwZ}%F9L@Z%w4R3_ND~2m}-KNRPE*I-6YUT6$8!W
zW4XHa9QSnav3#G1TiJiJK8^Xsb`0kupy4Lsm#tHYI__X82PFfOQ8G8ZSnext$X%31
z2aS6eS$&73L{072YZDEiLqlq4F?>h|v>W){lY^H5RZS4P)mVFV%e`V6lrz=>XVjXw
zu*vL8d*Y7~KH&dz=Q!9>j}ZTrO2mHO{|6A_mjm$|^VR!5Rc2)+CCBke>FG%~8M-l=
z37T@1(Mj50Zm%RQm74n^gJ^yp3%NKUX+4P|VKoK6I$<*qMPh1Np+a1uMnZ~Sl6F;T
zQPCji|B$M~l0mr2er@i=sQ=NL`M<yZzgshtH7;y7hLOH!N>>Mn0K%nI_Q`xv%F3*$
zs~wcM!?u8eu@R^pNv{~kOx#i<k_r0XmcS|AVNUwrNz6>?Nko<Xr7@08%ue`rCaGWs
zP-~g!An2_KS>HZ-ed8Nf&`FR@BrCJ5i_9$>&=Tsrri?|QmC%3tUFK~Jlt>LQ!1}c!
z5{k|`=Aw-)&N=5RkTNXksE*7nD_TMIJObEnEzuu)j+cggdn+7}X#@JaN1<}IG^NHG
zZ4v;b6&d7xP4xo%eDz-C6>&iN-Aug<VIqV&$)f_Zs&NAs>4uEoY1>gyGr>XV7_R<d
zCRp?wWH5_H!NKDcNH|xMZp}fy`Hv^4Bio<+7+z%WcJ?F<zOh3kuK`AId<E5WL6s`I
zn<eMm^JL`_fv^<I=A)Nw1l3u#7CIv8?sV~f9kB$b(bC(^M?TmaE?(ErQd<%*8;+i3
zLL0s%L_P#{6^Q1KMwq&Ze4t2FiG`C&d&s#5w@B6TgRa!Pk*zH>Nc7}28m1d#J^DmV
zuS_(yPGpK-*m&?uxk<mvKcYw1V5{&n$y-bx%|<Em_VRa=aV{lM(2@|>MVs6<k;iXv
zw@MnJ5-7;$nzh_3ZKB0`Eg%%KJyQ;idn9pbD4(Vvc6wovHpV|WsG^*X<AF38XJmwZ
zL#;fP=9Zj{+}~7CJ<}372aBvI2#eUY3*FS`*b>M$AQeD>n)0YCfcEdGueAjv%nfsd
zRyym<PVI}aRV|=5h~nNYQ4=zYkz^796TX21s|8(Yh`wfAngg=t4dGUzye3lfQt_K{
z!=P*`iB5F5pVA1hx9lcgw_n|dwN9_aBoUc8-7xuIFKCO=?Qy>XHb7hDKO6?F1`XxS
zIBT|!4Y@WB_Gi(?uuwmYO4v~Ujj_YCwe!E+Dw5ZqFy|ASQyu$+h@^8kDFh*_Ki>XC
z1j5#kuSY7V+u@eS4+8@q7#0s~8%iZ%Fg8m#(q{<$L#SdXC-Ab$80beP9z2<z)fvYt
zEdgIN76r2#tB*w`{x>0xP-!5Bkw7HrP)Q~2Bkpg)f@(icrd>iI1ut=|Ag|SF^pt6n
zq9O}I!|?-6y)&JQsoXzb6cpeXpoHpvLhZZ|zc8c<5@3jJ?wzj|rdIqRFXI+KP#Dt}
z9xMw_aND21LV2ugSWYcSLCei33PweS0vRK`H{S$t$?Pgg%tK8ffPz!zQ{25miwIoi
z!CiS&Hg966v}>2V+LUmSm{m1#rtl6`Z1kNK+`JU;%ypwpNlpxL>P|`!435yG=x&G{
z$j!9F%sZ0NzMC7(Za*BK)9{-nbl7tq_>fg|55o4ROBaoab~(KmI!{9#=+VyfXDO1d
z1g;)-P~skdq0D)xaxuDk@nVdu89I9UC!P?T9-jAx?~j<D&6hA8u++$BJ(Dv;17V(4
zfv05JW2j&lQi@$K68hI#*W5Q;!wFy848^DoWrH`)a=N^}?~@AkA5lvP7Q$^wN~5-|
zMSmE%v&hU|eJ#T3>2X9TtlxkWc9|z3+A*scQ#bPt%+3#6sdzTM6)8`HK|N*=VKcLT
zkENi<U?)ko($)tyJQiE2ZEp*Nq3rA9&F$QT?CL+dy1J#cbh`B9Y5=M|cDt2F@2DQM
z=GSJJ>epXNKkIJ9<}j<mdmsXAIM`Ins~6B4Sj*TLa|=Kk?KlyhTSU(V+gb?M54oAd
zQ2(gk(DslF5=5H(f<|A;QY@wHuPp5fk${sITz>0;^@VJc&v%ijF<2d6j5Yjmj|y71
z2lT>-*|HF?;o|Tq`xRp)9i(;V+X(C41)kj-zN=0{(v9&*Dkg?50k*qPOX$}Rz0-<H
zJ!01W;AQe=LjATeLucj<v#M6?$eIP}X7G$!*L7wB)D_I0)*KvwazfY+Dsn)9Gb>`a
z*|wSu7Nr2J&2e>YH3H4<>u?8dO>d%?vg0Z8yEgDY#b4a;f0MMX<*4281w6{PGCy1v
zF=7aYt{2-5OW5>_YzeUTgM<Y#qSmhOXT(ZB;5kBs?_H?68kT6F4rMcaEtOEYyP)Gf
zD7>a51DS#GbEYW*`LYB2ZP>;nvfEd6#BAme$S#}O`fYxe>pE;}<rIuW0MDDr4CJLt
zpH4U)ZPyEQZLz*$&<`7dnVNW32mXP3;QajAbvtmGB?dG6WRuy)!Y68kAonBhmCH?9
zAosu^Pgnw-(kSA;wWLMU6_`J*dZ@9Y?VT+!2%Ki3S-r9N4v|W;$`cg8qPel+FcyO8
zSXc?N&V%8@()lLk@5d|}hNXnz^_;^y=vv|W<HpEP8YXFFhV2JQ=|1*UFyZ+r3Oa)_
zvg>896}G{-=^Vpo?&t2$*45|mLTX%NYiv?*Mrcb5z>Bog_mMqS@AOa^Yc0>5$*%y0
zb5KIy(|Yqa;W7DIsi#<0zsy(_4-@0;rIh0p$biGp;Iu`5q}GAw=J{DHp0!;3e8D)t
zMRI4)1?N%CTDi^uvk$6sWGs!JV-Pc{zi~cu`R{CAF&tP!w2cod7_SurV2B{5K?8O;
z9Q$m2x9$ozIh+R`U1wo7Cp-78Tno@RbqKKB>c<cXj;I*?c4`5?KSddG&oPZJWFj?C
z60j_}8Nh-ZeJjT2|3Icyv@*LZq5uGli2g^O;D2xJ|IHrw{X4qFvyrkP=6LfN0e9T*
zHwb7p9KSpfHjX*Au2HWxA1}7X0Rz7%%n~}fD+EkHNtf#N*@Pc=X_WI|@SdQes^_pL
zL4M&x6S|Cvw57AOq`KsC5yCs;rJeeBVD0GQgl0@lR5LPxHX?yn^4>$~&-8_H;$o*g
zgS*xtw&F6XGQuBM(gMR5P1V!@GgRsO4t;sLod#c@k8@IObxEIr^J0C}84zTA07qST
zwK1t8NxHP3jMU_?Cz8tpz3;@SNbBaBVEoyI78y&#@^V)n1P0yurnHA7+5{C9ftAV$
zmu_Ph2kQHXJEY@^NTopmsE-GVEc7>`c1)cGOEJ`Vyl-*U!>AKR>Y)OZC8a^&o|?$0
z6-a$KH$pGXI;o^O-4tj<;FehauVgeLvq%p<^g135ZZlCjxk?j7=?<{4y^I+<R-oMF
zo_$t(Hu3wN9U4q=8ViTS!<#_+U5{=3I*Q0B(K$n%T4_X4DJ%g~-9-V7c=bSk%Sex@
z6UthBpRK0DB_`RLC*m4~pPIoglx9p#^7Pr>*8TSmnihfbEIb70OEXs@Pdp?Qn)!^0
zT;Cv3={OUeTA^kY(5E2v{m#nD6}!P$E5)T9z*1#JILwyr;&>z!_W%~Fx|LfB?(;1u
zRPkoLWA3#sI%N#J8U+hya$XUBHQ`Itx2`bIuOio>MW%FmMZ^jsR(tuQLS}tcH1<50
zWF67BCW#eIKI2|`H2T~C-I4;dj;m%YK4bN~m5wJU_XnCI>RHRRB8j+n^a@-AQvp*;
z(|5GNw+_E*U=3{S0`wLl4A2a8li>vr4S^})Rs(NZZ1BKVbvwGBBc_hOZcjRo*Hh4J
z26z$GSg~RoS8OVsK(5<m0z)`^xdk%c6g;q=Pv;+I^!(5%Yz6+njY$5S?!(u92bIQ6
zZ&<DXviEH7TMy_Ac!UbX|4icZSuq&pZA{^PrAubz&6Eea_`CjEGR#)RU&dDG@TCUk
zeFYVdiRE=04t0P9A`eM&x_iFu4<$~N?uggwb+-%c+WCBBhPEY{rS``5_&yJ42Pd?M
zj9;+yV%|5&owJ&6DcvHORt(us8_kL^ZvM-u4Z#L<1q{Me)l^)R);QS>^8UP#zm2WB
z=8+ZAtxVCo>FxKUNw|lTw@^F)WTHWXuCtQNSyVh!C(?mg$|xkkD?DMCnO8bvYZo5z
ztOUD!WL!P^BT@A#Xq?|)3}Tz(6*@+F$?&#`gJq$e&q$>`heN_Uoi;Rvb9V(_{rv#0
znIOJPY$)Wod>-SGaJ^}J&YmF%w~vl~K2wCL1#Pd`=WO4wyBiP7%LJ<TTCmF~0)wp|
z?Re4SxOj+)Hck!>^DoIUyY<U4>{_KTa4tp@kT^rd<p|uBF9BkTm9Q4Ggu&~mQvhLo
zP!aZdg&Z7MM5fE7o8xO3IsgnWElMGnz2KR*Fif|PEHR~l4bt2S^%wUS0~3IVL5v{%
zxjRZw+`PNe*Z8`P(v>`FhX3=?TSEMnsKd1%wnnxGTN0{^&TO6RlHSUae(57p1#Wnm
zVyECCvfjtYQbPC*Nc_{*4>~4xXOIjK5w@}&mkkK_d|O4z7obQrPaxQeo2kP!r!-8N
zY(ek;)4})$RrRWMYd6lYZmdTzl=!Zmbdm+m3tSo)1VD#+38;;d(^=4(gv3+6TF!C8
zD%#dH20JRd#nTM!nc#riJ|eMprV1#@V2rWMZxY~>vUVl8&<!@dS{;MsowQwx{}i9q
zMT6Dos(TJduvo<&cCW+JZ8NP)D?F>5AQcI_0R>%VgabtjUU1V15D{=;&TAnIXAb!=
z=pLyFBBD{4h&2GCX&-tom%oXo@03Lg&4NbijJ@RWY<EV+6M;M7uSJoNSucNqttO+f
z)E|+b$IEjJ?#B~x76vZIXO|`!1wybRL5PK<&g<{ctM|h7lqT2Jc;zfZG?^Jw<HNdU
zZUd`30v~sRF)QcA**>rWN0C{DaH&JaOPerTCxVat%gZp>K?8)8{-`BJ=Jp{LrXrSw
z8`6(;ucoTT$GgG{qV4{7*YdQ#%@p_V&i%~xdj}CGOOzDq4X>f7v2)x}^iuKOPi@j&
z!)|x4O5&?`JN5VxtYtcIO!Ne`<*AZGmOi+ASp99{#93%PVIg$G`m>6Fqf~`3NXS0K
zDorl*SVl-Lp+Z#x8(`Bdh1RzFB-TAQ*?OO3Jb^#cf-=zpoETW5E~9|S{{s33k4?UJ
zem$Fo;Pec&2706%K7wl?B*;n5^!;M7FR&GG#NElADT-7vY{gP98G#iZ`Bzoev#eo^
zqQHI~z=GKSgk~F!G^&As#Qo@@?RLf|;C|Xt|8Tq0BCkFkK{HumK)1Wfrkecee7-CF
zxm!nTi@x9-RE|p};L>n}gS;XuM+*B_`hYuQ=9Tx%fIDXgo?49)1Q9GoVs53-Mp7M?
zv<31L19;6UaoJ*M1;L|Km2KWwA#1-mOw>!Xj@QEs84+FJWTcLxY)C0<?#)tF{(3mK
zicJEN@Z3NnwbSX`K7xi&Sh+5*JNm{FAEo3p<`k9GbGz#AZs?M@d|!TBkT0pYL-yvu
zb`&2cJO=xC@to+W?XG_6oc_uHp52M4<@k-a82S&j;0GZJvq_)A_w*7P+2dmN=p^P(
zhIcM{4mJK>yF+Z`Q&^!}BRT`6z@N0OfU3W53bHlh%@|DMAqD#>c!9d+ntsKHp$&!Z
z+0}<l8N|XVhl~W-fBc9~NhGS9(0IpxI-A&p8i{pi#pEk|9By)0j+bBlz07R_Ll4|`
z7L$l0@uDv1Pp&p;)Ip+eBLfQ2t@Y%$=-s{H1OUCgE?w?&_8+@KW(McOHL+!|m>8?#
z+7(NAhVs%q@4_Zm=8o3pm)I8cWOjBk_Cv}<Bs*4R)U%8sk+%%bU<G2V$3vyE-2QmJ
zg8}I7zAm_NfSBKQ$x+G8de_6@8Oj*DX;jaHD8P9o=m-GDN6H^i2KJu9TXP@fK;i{T
za6lM$hSA1pgE;0-o6*Vv(!xrI9DaTc*~O|Nt`D1#&o`}3Z)5NU{(1XLxlg!pUnI8k
za~q|KKqn(^X$>z-p<Js(sP;XO6NgO(Dq}TQ)Wz;(9YqjOVDe|1*5ZAG-Xbu6B331G
zBkBz%zBD(<!}D7JlBWB&ssYLJV#Ej%g5tWq@ir4&@CWDh4EbcP|5X#i;Kx4|gE%Hy
zq*=5s2}jH;Z(lzeAzmDF^es>sW2i-cBhqFycYL>$R9cgufv(Bot9%m{P~geR1#tN|
z&{OOgL`BoLr;M=?oUoohUK|X!pPnHep|55ZN0Gd2X$`YI2nFXBg&MF?Y;NDJAcua<
zFuO#*#x@}f%9#t8FfXpVbZxs4WQJhpXbgNkw{ECGwb0$59EW=W5OyIwu_`{B_oqmD
zmTn4-zOP*I?%#qm2!4_8Khq`JTNiUXZ7qQLScmQUL6nnBPnIMgy7wgvw<&+k>Sjq<
za%`r5%3_L<@g_lL-A*GZ1hhy-p=nkO8LiQ3kw~#8B6uGl>#Pd;D#q|$#x8rzWCZ=2
zZlr~-Y1!@NiRT2m)I~~|To!;+#MzAv!YQn%H_?MVspb^eej@e*%60Gt7}IcsUMbZA
z;Ae}0a&vAd*1~D?vmG6q%@xXV4`~BP)H!hQXgS1XbK9Ez21RHqQo^@R)UHc|oMjid
zh&ngsqR6#iL$(Hx@0Y9Ju9Ixa@D|`l12i9K^F}<ZgCz(;M*1#(NFhm_q1~a)qf>Dy
zn6t3JkdX-3l|OMMVX9L(bLc@f2ixuN*OGf#wt6aQ$=~~Gw{~m=OwsWp4K9d^PmIrk
zzXqw0cdoIv>dK<tDQ3qpZiR003ldP`weu7YE;}79#doh<!NGEJ=5uI6n*MDu99GpG
zKL|v5B~)l0z1sNYa&cf{oV}@kN>xg5^Dp19MoAxLW(SSTJorROq&wq{?kxHbTB-{5
zf@GV{NhVy@i6vnIcgz;KuODE|D*8_6J2(~ETYD@yf5DX7SjkCHX9H2!H1$;<Kq5Cq
z@qibQx&Vc72zc&Uy3YHFy|mKgR-K`636_a+VKFn%gbL*sD&eqx+hv{qF#!e|FYCkY
zR<c!{Irz)3K2Z@1xajJ+Sg7;L?#pYG1DyHwrg|(c9Bt!6$ZSDKbOg2BKv96yO~yAo
zP<N3R@V2*e?6*0wC_x_nF?ST{nFguZAZO%uFpWT!AZ@f@B8CR52@lX)!(xb63)pOc
zMK-^Wt5rKapS+YMwk<%ILTk*t-q055nJ<J4SP`6U8WITbPOB5u>PwMUhG`hfEJ<lW
zBS;(J>wAy~j8L&Q&Zchk6T|cu26XZ;_5^Z;IcSIy=!KzdldH@_%8#6T1|4CbGKm^j
zEn&2rQhmk3aMA0FnQx<NL5Q^0!IE@<?I067hh`b@WK^RDZ0MOvsR5|!LEiVeytvJe
zTzP(}(ZN<cVo1<9Q>CnCK-*8cqFyGw1+V?LN1JUqMvupX<CW)j?)rx!^E0@EnPnS0
z3!Gl16h#n#^E8yBJwKtjVP~F{T_<v99X%uZer(>Znte|8rOCRqer2&dHw)19hs8CK
zS%?lBzTs3uuzE~K+pKOs{=qoZ&$9GcWx>5T%WRyQb!Y)G@^1pLpYLz0D#Ls9Y<K|k
zIFs)6UzV-0Kg%N&D!7$xW3<TzOi6t`#nw_nb)rP`ZAz`u8!<WtW>luh_g?Cd5+$Q-
zTq|m=lHD}R&Fx+1W;}XMb%>lY#Ks1VecWV{Rbt2uI5#0eLb?GRwy6au)7h%!6sVCP
zVq-oC=b{n^(J~0#XNfRy2FesQK@LO%V-o8KqX}W47|K}jr;Is9YfCuFGemx~OItBb
zRxoAj+|!eq^?<`-=9Pu#qm$EV+hf=q_C6Lm=9cI!++JOD#e_96wc4ZDDI=w=5|isw
zkFdMfpUcRbw;)@B^q?+^4=k23SH(rqF^(GIaNS`YDtA+|hwe$b85|@KadcvA>u1EH
zhUX0>k@@1>uc7ivLPpm`{|wKR=7O$If)CoS4}+ryV(tVD;z=HF1%+OecRdfdC1)8A
z8HsR2ig0kLSOR>waALj4F<GuD5WylhD`NuK_L@Ijy9=DKw~PfNgfz|aJ$?f>y~U~O
zMw>M3z*lDOiZAN9hZ#KR>cqsL9#R~(n{mmy^SXj~3)yCCQk2W9+hae82kslGMkdrt
zZ6D{cfy<crl#IuQ8xMToR0z1AYwDbj8)y(;JYY9!i%l3g``%$&<(_UN%d0uQ(BCNZ
zRXgMAj9jgC#Y_tySgnvGC=R3B3lTewKq_+Yf4bJf?M$<V3(%ZI;Ln+Riy<n{w7l%r
zq(K+NZN{bXapkDl=o$YQaSD!53C~Vyf8arduve=qKQiY8`(QK`y>o`vPDy!4sp~rs
zk8+##wlVpp{7YO0n!~s<aJS&>6Pw(eY#sPD;On3`+wNeIxNUbA51=wD>0Koci-N02
z(Fz)(>L%uuNuz~X?aUL%7ISNqY}?f5VWnX9bQD$Iux)%Xt;!pVY7m}k0ABGH>C~S9
zLkYFxox@HwJi^MwTbgpi02k^l#JGNqLvr&6*LD1QRO-<xp(S+YRt1h{+?GXldBME4
zBimwDHZCWX&D2gNtDB*6XS2CL!AZ(9vV>h%G&dm2CpB_fXG<Q?CBxYhmOZqA(Tv%!
z#Tk3M4sW*OC}t^+R)n^>l#4sNQCM`AVc~KVVcNa_#=hOEM8MFX$pg=1tq{aoKtwUX
zKrd=qe%NAiruWdmzO}efaIa=s^2p9rs2$@**SReJau8V<ksv<PK>i6~q=w^l;0D5^
zhN1$i(&riBow~JtTF*9u73$Ze8N&KFc<L10S;x9S^IF)a#grv)mLG`og0H&)u&TPJ
zcjL!9R)+Kl;Pz)ADCF#Oo0%OpVUMmFp(0>V!K9KMpE%1HT`KBp2fcH=Y1bRPu4g#q
z@Qer%^w9M^2OaL_gnERi6e-BF^D)Kt{5V5GHIpU!M_`_JDoiVOdxGYV=p+E=v5U-t
z`|fonm|s36;<=Qstf4?(o#wD>7?X?b$&#M~c;CaKG5yZQUv%rIM9-r4QoClu-Aq+E
zT5Ix77+6+}?(AJ)a+E#wfJh>%?j(B&5#jnJFNC3^8WK!RMDUNUsoTx^y%%~)QlHl`
zu+2Jm+u&(I6$N#)Q1tu?zxgSn`XXaGZhwjP<#qJ%97n#$p_%IAb+#tkYR%7+J<U*=
z^1UBeLbJT|$XrQTS5~@P9kk#x<qMfBM&70M9|ct#8y=j?S1Ql?Om4_no?F_;W>3hF
z145N086$aHv&UXD7H@ewr}80D71W6#s?Ky(WsU^r$}4<(BkB6W;+-6l4|%I<{9e-Y
zA^Xn`Z2`p{MhgpP$e+Y%VRRM3%pjM%Vyxh0Ittmyb3+!I%}MrdaNUJ}rIR=47+B5|
z?73aIxC|~#d^xR0Cq<TJ-~?I5LT22M?V5Y!5<O;g=!{fK63{kDqKj&{{c*xt)nW);
z4nS47cSe6+SC7A7KbvNL6eselD+wJJE`Zs&F(FsM<MI*<M!R%6`abkbp*ZXQk#Tu9
zS@guKQ%JucWV4IP=?dq9a=r-=+Z1lb;CZ+5o(gbkf)KN^ri<%Zdw>0KK&(9RK-l2z
z?-Gu99(p#VpFGfs>m`p(!McyjB(V#L?boM0B!pwoQ;bSKi?$~c$`uy^^<uKm>eHWw
zBWzlVLuQbSE69>=5%KPF(}MkL;&1}V4U7HZRTtcB9p!L}-hvIty`aqxFrX#Ee!=4B
zvj!NC-UZuf7!sMhdevy3Fxn%V)rxR`mWj!Tx$R%OMlsuEo2bC%k|=dpxEorlYM0!Y
zV_HauBVoS-6e1I_H}8qsM}S9sA6hF#2p}(9-PU0}ghe+44;#5#R%LkA`_BRA?_Bf$
zi_`ocjhK!mzmlut|2g0MpDCK&eodwR-_fMNZx{2gjQPKFIRERy|DH@vX>9$rXrlJ4
zC}%m^mGu>P(h7*;a!a7CUW2s+>Xw1IiNF<yQ^IjGH>oqg99F<1JYv4<e~|E+eM?9t
z9h9&m>Zf5%zkM8Y^B0mxE*DS+fed9PP`|!U^crl1cYu@&I6aN_TXX)gEF>`>h@udH
z9%v+yBtx#ZDrO>Zai8DnP;J=l&|ABZEIx$OGHq$r2-N#Q?Cn4|-H9+oUgmEW8x2`f
z^iYi4@4r$hSTzl{ZmRNF^*!p5BQx;EOqoA3W}@@}^&rh)BCmZ=DogUUP%LJMG`9+#
z+mbhUM!#4x1bXd%<r@u1H~7R@pXp-o)4I)7@rnexLPHg4cJ=3@eHVf%9I^<JucG7z
zVaqm+D9nsKG>a2pjb@2!VF)cU83Nw8y)>iE3=#=u<H~-1KPya|-84x0DsuR6lafqU
z8xwbS%LAZVV<im(Gi4Ss3}NhZ`bc;jMrF^o%*$R)cC(*Ir)rsPmX}G^htG4TLXVr0
z><2Zz2Aqc~zi&E%?FP&5XQZM}H*hM=aYeysqkvR!HWY0$ZsX5ZDk~yy_w!-2!bF-M
zbbE;;6tk$knBr*PEy#nuhw)ToYEQr|0m_DSFi(R*@t6UY@J!FFaWJ2|7QiG`1TUCn
zss<O2<7^i$L9(x9d;*HQNM1cmQtBPs#~xw2m}*UJ6<FUH*N<J_kic1l$pYRyDFTl)
z5<mR?6}!6FW$_vS%_)^=4n1f!F!8FEa8Nr9^rks;kp|`J6@aZ_F8X;kz_MEe=xt0B
z%;e~m*n%2Jz%{_PM%@o*45ikB|G?346PuB;LtFzztrM4s)&D!3K8h+J{3af&1{wJJ
z&ZbB6R*DK6F2oxB;x~s|`pmcQI!3*)6dp2Fkj)c(=^KU6J8Q`nV2=xrd+R2)_t^Oi
z+0nxkYq)5m`}@4LoO@-4qPG4Ah6<PxqY|cTE_>f&;aZ6b4;s6E>N&Py&$}fNaWjZy
zz*c7^S4W=GqbJcs-ANYIlf0=UMVc0m{muZf?rTJieb9k|LrcqhVM>b>>kv@OPU5a&
zwei?zci7Taz32Nr7f}A)fKXW{u?7i6K#f$FEMMqFg-)lHvZc#iW4k;?T*CE_jr+8;
zKOdrXt%1-<q39TNN#D4^VOMwF`yW@(H|ve$1<h$<qL#Q$;fc+#Bu<B1qiOKR<!jrx
zaEGCHmgu$|;A*LFQyb6OoJ@3hwZ~K<nJ1Kbk#lf(-k7fC&r65DNrIuzU%A7bd4LuI
zS<C)Wr$8QAq=>s(EbwgMU`d^RD|tOzHxi>QBOV*ojK0Tgq&?pkE5bp9%~y(+%uaqC
z6-?2io!$^-$>L0&k}t~)f7t-96A)bG<BQO+sI5V>m}{bF2oW}`$sSkHBm33(LybGZ
z&quB!TWGoftSD0blfJV;{|TL}13D^X!?O>qgHII0SL$KY7HHsW${u;fg4dKSJ`$e@
zIIM6?<dBP-`ckLD!>Es0&Rl5mZT)0Zj^7ShUZdNGT{ib{C^TJtXqcC!G2CKk+>?TP
zA`iJCnIZd!4`#q6n#$i^nt;p0jPUEx#y`JiC@!a0t=RK)<lyA6XJMyv>1Pi*e0%rt
z=6puR1>5?{h!)iPGQ+I&wqQP}uh2lX3+vUx2ZLISG_s^m{V6PlV#m<Gt+eBj9xsXn
z{tM93Wt$2~ik;8ECR;QJa<xESSiikYgSD7|NG{~-k+`)w$Ku-9-vwRH4Bikh5W{B6
z64hzP<at~JYOw|nT4cYO)RYK0Me&wd==`FCK9|O;Jtal*oPK(m5tYKQRheP)#{;9;
zIkHIz`EyRE`fi=%R=+ik^cQVtx<QIpI+Wb?PX(J_bbHy+7Y8>*U;r;&i_9&ReaF`=
zHOkAuCfHvUjJM8|sqGwPiEWa9t9fzl5s2;dPb=BSBJ7_RX<@MJc3+OjJuv2Xrayz?
zdhbry=p>V9btw(crq%@HUh*3W+<PpaMT{;78Kl=H27`qRAA7Obbb%N+^E+RMh(vv4
zj*p!}?rCBW`#J7~(D2~u9Q;pssm0nGPQq)1SAm|)WcD`D8VDS83M39ZqFlV>fk}FN
z);~3OUZPzdgS$DsZ(`>#xxoprWLvE_{JPygNqTzQI>#$Fc1V*r2ZlL4gBSVSLr%nz
zQ*k~)#w}?2|32k`Nqq8sDO@>(3reLwxzDh_=M6OX<F@8@9jazZq#W^qAXTE*xAzo^
zY)E^CsXi&veyVrR2fXtB&5qzK`4V=sjcx<*tundVOrR5D*vh8peAzQ};}cKMAzULg
zWymv#$X-7?gOI$tp|L4?)KB`W@1g>JHwE$M^3EskA9YXkMTBFCH!WqQgn+lNu*9W3
ziZq{Kqwd^Vty3ZdF4!yUVcba2U`{3bvQ$RzciqJptk_z0wG>*}V)CuIBAfuuJ7>v0
zD_KZW%GrijrbxmIU+W%Ui;fbW6B+dIZ6TOhZ@StJf7dT)cN)kM1FAMmxi0TJ7a3G*
zC|e&ucsnE1TqCn8{3hMI8Tg&8Sc2xsAKk&(KXY-Pg>eqo>AO*B3Qw8hhY8d;9L}yP
zog>0ThQU=+E{e_CgO7XcG~@lgi9S15-8gJRD4*q;0wI@o*gpVl)bX|p3|hkN_~F54
z|7Ux4LdMk=_Af5|zdW?R5wicW<=dDzn*CQ`wpw$;_OJ!BC%05T87P^}s9n+y2pCzv
z)nS&FZ6oi32t6@eK)Tmd;{qh1fp-h*R24t(6!}^5{f9>)N$kL79!ujA<}FwLb2Pl*
z)MZ6gyhH?$GnJ+q8Z3A=;w+`x<IDf+ZXkENQAs6le(Bt64b2-a0`<>B6~aAJrQmgb
zoAJ-vNH3;Yb6i7m6)iZ_vpoQ$dL{HTEu;aw5dONZS8#*_qzvwb6pNceoSHYlvQ#}f
zY%NOU1Mscw6c;4aA+MC5IITxbe3~-}@|bcxyplOA>_LPkv*xxd5K2Q>iQmX$ZG}ym
zf=mE8s}L9Ebvu}&b|A`Bj`uX2p>NqOzSg!>x7HR;+znhFbb!BF_%GUc;E0+Uo0O6k
zOTRt{dW{_x(h05(>{_s)%hJwHutGKVdu_EA(+-NI!uBRS2YzjD379{jeKd@c>H|tS
z)RMv&Hev|(QJU<GDxzSiBFSc|q3Y6wo^T?qjJpXpn7#T~t0`KmdJ{|Yf?xVJcQJpZ
zpuv%=h7q7ucl71eWtZ>1L#tX1G)aOC)p&Y0Ev*K|<{w>;X~zxKDjLy>RY}vPPBq4N
zezh+cOT7W3rKR%}BPvs)F>9)u=*O&atBr$98e_2hcya_Ysjp;8359i3eL0A(aT9`Y
zVk>BfBl1&6*DIA2Of?0pM+M7>xzh2$>Ha>ERF&rA${gHyVq8TH5?9KcyhMWu|M^y>
zp12jUU({cgjZFHLs;XCAo4CEs-mXrMkL#<C3uA;(ENXK@Vpan^yVV;p)kpQ^vdDmR
zDqSJ9=B~QI4SH8dHqeh(mi$yUYm@Gl6x-g-e0C-0`lYjH{{N@3vjB=C+Zr$qAvnPa
z!2$%A;O;g^Ai*U#6Wl$x`w-kcxFxu|ySqbzyTd=(ec8MvyRZIR)x}H|_v>@JXS(O!
zIrAO9qJ~`ip`0MaEz~?}0h>3POa$lU=c!ct%Ae?>1l0)2*`7bA!_ICWGPJcc+?cr%
z)Ob}Psq~tHks!PD&XLesIqgK`8=#E-SsqmA<Z<Ju)u#)oD%Q@swWztp>#qyVy!0<a
z+&Y6QuR;y&O7gPr-m6|A27DRD65&AW-Xf``YB!HivE`%R(J}a(BJt*o;b=BAVyY;l
z-euW3aH7yZ$)1EH=ZMBz3KGr;6&I`GwFKLfr!RG-toylH>(K!)hA*g@$>+67jRyAy
z5(>l3k!`FcV}|<Jh%2zaMx*1?hLbLEXki#v9%rIs49`eh9q_5-<eRqhEaBH&&q=Mn
z*%tJKMk)|>>-F^v8@G7HI6d*QGLKYjOJ2Z-drq@l-M2xt+OVHuAug}6v&SK1;o+q6
z)~R87dM%7o2MM39t5UJiYQ8em$GP!f9JmB4-IF^jeTTZ2tu?N-wIhGm1m5boY<2jw
z19Y6Il!@S)^y~9=!`Zy_-o4g)UjI$>9qlp;v}uHUy2$5aOWa(gveZ#H#Zy)xOfMVg
zV(K}fvL`E1o&&&2GT+1C7PmxnD6R7DLUjxuKIvy<j^+B3hp<9hqdr0Uq^iv<QN{uM
zdQBDuh{q6a=gFRgl{pI;W=!9=&YtL|!_*1mR&YBewvs{dV!;o4ZVG7X`-psgkH9K~
z9!}`e?q+q0hz|Hfu86ygJj3;orz(9BPX*J9rYf;N8IyGhx}cl*X`esGG_^o1n#%Gw
z69lX_A^l1+g(|Phax0-H<j<G8QErKL(x3NsK@^cqcjHy|8zXs(Kb><L5Ag$3(ye?c
z(_qxLr%^*G+)KVNgXX(TC(rL%zKORDaJH}w{f6KK<0U&Ex;4X?kEBN(B6Aed9Kfy|
z5gO}KF6XW}dx#(M^7#y-#90tdjl7$9kR-I9Cy(gmzK=|)34XE^hh}=ZNN375W8eDZ
zoOlqGx8DGEqPZCksEec1wS{8$VAF-z;Pc=M5%_(rC^BYo+D#)xOS9t|<XLBu*mE^d
zubQ+6N1Dtg3rW!dRrxf#<7VDK=&laqHn)p1@|Q$&D~C6e>_pkc1ELr?4iZsf?7~l{
z=!~mhm>W^c_wamf^t_B8&D0>9Qi05M>a+3)%<=DmL$T+T6=8Y75K7#;=`#wu9QOoj
zSwv{f(A;13pihCP967~m)0tq#hIm<g$rYG1`^_ANz-9&jgv*O-=d+Phr(KF~)iGtj
ze!UQia0oK_SO^DY9}Mu$mR8O>BR+XK>6>|kr}=a$4x+f0*8x@|1=EI8onKB;cY1Qj
zS<WCT!MX~MDUbTPR?+*y=Ouy7gs<308<cVlTA~Ff%C>5&u_40*<abN6m~WF49v=!^
zXb+rR5~7wzYrT-KhurBxk(-KkcOo;)2hh(GaLCm1-DlEQYP*tyPRx%XwJ01iyATFu
zx!GO(%9Du1gSUnmIQ*!-e0Jxb{chT%zw%l;UmgE-iW|u@X|+~z=cC*}+i<^+uA?j%
z#-#^(uPrS&iFP+NyZA#!REjvx!#!y#p?DIVK9IJUlVnD634=WSjD@(L2O0I`1w)6S
zdk<Too4+U3Kxmbhk+|+OAA(gJNfnzpP`lMDUBd`N8OZSnd5LR`Ymg*KsRbo>LQuaw
zQU_#f=f16AXeX#6sDDTI`J;I?L%nf}9!j#|)F%H3TP~dQ0_57aI91|at)<(Qg|h)W
z`@4a;#3_qK%`yA8CtbV5->%<%r*}z1g^#~O*2!UZC_jhvDnaDH4!km6)JSQqCP-Ff
z@snysk{xO&MbdJ;_gx)rY<nQScXa632hRxA*Wi<0cA_MZvPRS5+lv=a?(-){y4^z{
zOf+5MatsWJC^8D>ki^SHz7Rsdu3zjL>v9${8OwF1(l|gLQjiX9_1k{|#8K;N%m$R>
z4L4E6w}hIuRo3<7y<ZF~l-b-xH7_%9=1YJb^J0^xM$GS@q4S_<&Go>5OfdC|h$;2_
zcF8jI7AD9LmUTLr6!o>}?g12A`cii#!AIZ|C|y}7u8skh0Iv77(jKdT-ReL*$_p>#
zW2fszP^mU7154d-1gZ+Ta-k<Y7oijhme$!D_crqZIeuYQLG*k}{<q&M)k|r!TZ0dl
ztMeS))Ga$p>IFAj#c+k@G>Z00I1vpYR-AO2kTsB&Hg|h3oi~aHv|%FIv%ezu1wpJ{
z+7XB3cIgjONOBNUNTTNWra!dD;W|bg@m_O&%^kQTJhMFYL;Y}i(`Tuvd581&r59eB
zb1?u0*g--E0Rb*R^Pi7Xbd2;&^o;cSKpR^+pt+$1gN*1~K@q{Xg4t?2)^if}_u;wQ
z)VY%&fJcV8o{h9r4~RkPDkI?7&`6UW113SgL;yk%`qMWmMfI!5CCT2e(f-|JyJP)P
z>)g2n%A<O@t;fdQV%kF++)JFHRm>N{{1*%S-GBmeq9EvlZl^7V4SB#j!q4q_DZ4Jv
z7E5?oec7o+{;SzY2Af;VyMg4<Wd%{BPxa-D@doBaGmb<q1&fuawVx*6)L;YGw<^fh
zxwb?bCCbyQPnD@ZtvV_7-$`&<yd~BP&0f-4;9@^ceHtyfr&Th7x09Mo<m~NTd#CWt
zmC8#3*1;%Ou0imk2e6Tj1d>ll*4-fp-}<&?>t@e&C|fIcUl^qV|Fq_GNH)CQyKVnu
z`-GW`o7az#3sr$1#m&v$dD+aAMYF^W->#gKTCoM{hNC@dhnB?C_@ZNr=j5AZ<K%}N
z{mJK9&~~}j?4Xa>V<chj4CJBcxw)%Wyt_x8pVBq#w$zG4iQ&9A$+s^ZPoC9`*AS4?
z@I8dv@pHSK-xaGeB}S&CxRvNN${sZ+jf9`EuP$xRVTB>RYt#|r3t@lP8KAb6wm3J4
zWMUU9`l(=i$Qpl&b8^zELkd<B+r3?vF@yG21RAw6WM^M>?Vxulg7Tx#xoL<${D3Op
zp=&UETrg*puyId|+=_l}zQMPYnAvu}t>>V1ozFf=e3g@|rN+*%ixbnug}-e9R?wgF
zvLI$g%J5uVNkqZL#bx`7-V=*bbbEwd6Hp+^S|uWBxs^X{lXOlh1YBV+%c3-Vx$OE>
z$<Zp3f_l)m*Eif<H%0{aB`Ds}?yl>;uVC(euj2(I^0an1SGFn!w&!{WV?1JeL(+$6
zX}NiN{VQnrpplnaOAPuH9VPBpLHF#9vboHCldEcH?KII%^f{}usbl?(myFI~c%Cw@
z0F3eRsZj|}QBi3<9Wpq61Q68RU<kHwx1L2fTLk^vPut|00;FXUx`88E1p+7+=j{nT
znv&kwBsFgeI5o4BY+qxe`<;|A1>)gQyZI+~rg!7uMpH_XACtBT>a?iME}~IXQs#^@
zShLcQwj4LZka~>h<9gq{?;F8)vDd^oKbEMM-3MOXkk^fcvBU!iCA3dr*Tb8l;e75w
zrpY_5&Y~6B?yk?4+S&OW-#XmvEH%#TmADJDW44D}!8={`SLPce=+~SP;~yV9kQ4_~
zVN}qn&T5j>8e~Xhwxf1P38JZ5qrzq!xZkI;-<<7~Xg?f7KiqG@U*A?$xbgDYot#K7
zCD{WuM;Pi>vWAAlJN0c-^h^6qDkI%-8{8>V0+gB4Ewmi4T8S5yPGWTQWB}(WZnKmp
z0>fu4V{dlXsg0DMntW*~v5j00TwI8AQ#4%SOnRqJp?7@T`EjuqDNJQwEOW1^-BB`B
zX9<&ieQ;~og*3-EsP*ANtefWg@N@mru3xBzp`;p#KRjm-E+1C!&?2d}SW2~zoXalh
z;L|jy4F905^_{57Rf_eQ&d?{Rq43vCVf)YolC!)_XWrb?)QP5Q0J3ZxuZD}&<Kz|=
zdo4a@8F+`V$+#Aev;?tHm5*%?1hRMGu)`tp%zZPto<>h${5>h@Nuel&FtFA*35~m;
z;<5c2JnNt6TFmFE>~YyN3pcl6JEeTrX$p@KWjgcHpGh?oExt3}@bB$yrV|_#W~W3D
z&7FCrBvi8YzMzsQdX7{-DtjOc4Z9h?QkDS4K#I+WQbDnsyEzZ!n6oKLkxWbnsZVH`
zNy&fH_Zmc07PQau!RCG+to`4+Ni-YUP5C17DQJuo9t~52Qq<i26p63v{mOJtC0-hL
zx8Q&thk5sk#0^VNEs8LDTBN{CmuJuSZ65!CF$P+M@-TGAm7+pD3?e8Ecp9hiXV{6+
z95VtPQj5hValQs5;q6XF&`#xNFtFT(@zZ12!1QFtZCB_dg6~<b!pag!^6&d>WsTBg
zUO26Csyk}oyPAa_fPGAKM7swdtfR4|JK6Sc<;<G5?U+MkMHR{}%v#ZiCF;g61c4;0
zR}*!?1s7|5Cvzu98xu0(8D@^mMk@Fo%#2s<7$NwPmMC7dTtH~`56g@JM;KwUOerc2
zAt2i)dBH9mAc$sN)gZODUgawDUc2}(Q}cZP_%-eUk_@By#(9zrG(-3G`a?}NidA4+
zW}7$UtMm}~<?%APW})8Cafo!pd>SkB`W|fc=F`tEW;eT5U!Fr&dK|^D1wR)EOf1Nr
z-&3<O!m#JH!TqS;gBxOeLVF_)O=tik-f(|-J224^m*jlAvN`Z=ve9QY+D!$rA&oUh
zG(``xm2VjCsHHTpoK+^WePp^<OV8clR9)zxL&$5JK8w7h{QxIBI3|BV)~3>(C{QR0
zRF$S=gg?a!aVE{583NrzC-GHiY?Dff8u=(f-@zdK5IcSuiYUTU>q8q@)ysui*1YM8
ziz#ur+fr7?-`s?a-HxE+C)0UMl+ce85Hub8nv@Xh)e6FUkOGW^l|;Ni_-Etrc&aF;
z>1TB^3Zrp>><`SI-VBP(a1;DIUFG9I^aUM@*WZRI2%@s-!254VkY8mg%Ly}HwIYy>
z#i$@>wa6CHC$zzZf-0V%pMA1@ac+4H0Ga4%D-OGIo<wST-5&t(!y~E;e3OO|#j@*`
zIY)hI+S{pAWZ5<t%SmI<1XOH5$X(7>i4mWOO;T$h8C$=qrR|AfRMrSegF=K=U1(SY
znvxtl)x`D3eDI=c)VA#q9D0<GN)@)1By{MQM)Bmy+zs}njEDj3@FNo;ers`f$PGG9
z35M4F_-_lC<j<r8=_$A{sn}GWAHb9Pkb3*Vpp#nc4VnUqN!8j1kUSEmIajXY;$hv$
z_~b$+rJ>X?PXeP@p67mJQPp#J_EdRjHjJ`%EPg|BJ;v?~7VG_&F=WUb#uIh4mhW4#
zwZt-C;g1X5uDMh4=B1}v@9GDdtUi4S8)DHG70I22*sFbtm#xljb+jop+_t3eP=s#a
zu}zkP2KU8DlR(kz@LbYO>_Ze?T=%sP0kzptd^pZ)_(Wp3t`#Ds(@#$FGwGU>he-wV
z9Cias%iS_?M&nBxmLlRLhI(R6f?_>emH@Gnb-tJxv_M2xvXJ!%nGn_NwDlJ~?aqWY
zd9lH4Z_n%q#coM1x=$l22yqM@v{qDK#5ES-`FU(oV4#e&3|E!4^nE12LjD*VAkAEg
zW`b6}1S8SKl-{*(I{id247P)bw6_;^QaI`Xrt@K73ZBXLDwOkbO*|=NE3XrW2ny3d
z;<LjS0qh*T_zzg|<rnvj$eiJ5Tw-2zf=v-M33<(N&4Ucyo+=op-XE^zSLioM_@Ibe
zth$03gqc3?jaM@iAgd;mBlt24XSzyda!`QSxGon%vK*+tMjoVKR>JZm-M5FIU`z)F
zO-w|`yo;=#NeT(#ID(4UVzgYiP!!cj={x-%%()6n7|hb&r!NWIF87d=dztB;f+XrY
z9hSaNF3D2Glu4|h;!-FivATS?T|E=9X2i^n&1L>Iv=1rA@YBb}WqFv>BA$b%*`OzJ
zgdqvi8YLFjKp|HM5X6klF7a&d=mU>dvk#mc>Y+(Y?%GW{hhwc=3Mdpv5#d8$?s|*+
zlDAAg)wvtFUM?%+)he9i(e%ay1L$f#yvW3L{$S<7yX7di9CFD;*YZ+v!SWIlKa7Ak
zEU&AlqIP9nRgTA{6WKM6E^)55!i9e*)X)9;d{H)q4cmDZ6CPgt9du*n%6gVL2j{oI
zwmWA8@Utu;uLE8y+fr@TW$pu_Iiuw}%stIZh^iaF2IrKZhXZERxV&g;o}%PUw^JOJ
z>gSBw67&3NC%3kt64im`ZJv0edxhAywZ*|uQEz>G+);3OQ#VGBi84fKhl$Xi_YzU6
zv*;LF#3%K|?F<z?R}Zo=doM2X$se+isGZ;%&NdHy4KhVy<2$_7;HOmfUd2H8El8cb
zvllsWxXTIe+och^P*;ue`kGGbJ6ZOH1uI{WutL3CgvW*CBrdkJNdl{lPEdduMbFH3
zjMJ^uha3X$);Km+(5LkKZ<%(fF{~~6m4Fm6pIqJu5{w!X2=!x8k9qc}OjC)Xw|$6Z
zKtHRMGWm3l&ZO^QZW7czpvF;yFw?uJwRNr29xJU2U$9FmaDp$a*lUjYUd5&1z%0ur
z$YWL`Vf1^u?03chq?pXtn{hAW@;{Cmu?r2_tna_5^In^~%WZ4BTe-ha?Tt3p%>ia}
z_;2#T1lFalT0D1a<eku<Fl1ZIMh41jn|<YGkDaRP^i)SAHJCb+0<8dai8=AUPzaOF
zO@D_*wUKxm3^hWzy81GfEh7J2G%wQ?4%U4^atb|88ijBz5?)alnSDf1AqSPGZVrgv
zUu)@9WEpcL^9u+al7a)Rq-odMmGMpUqJ1|8M$E_Wfm=^7_`R}4%TD!TCAgJoKQlxl
zT*4dqf2?QgQ2roG^^QQYxn+CxEVycGkvZutd4xkq5iFLlu}Vn;r_ro{GPw^l<0Pj+
zLS2|J)@vzTG?=!o+7(;6EB9(A;nH?h=q)U|QLaK&;tD1k&LP*q4VpIu#WTzb?Va@L
z`8Vi6>mcqJo>6$}_!v@Q9(tPUd5y9+^y|kVcg{<l5rZ~~0Zg4y^#CSBDVjZ)P->cZ
zf;!H;Hrp}VDt*L&sK&@BwqQj*19LKxh?Ha>@hGNpl+dnqr<@$v9p7esO-;iEhWBio
zUsY-z8ttY!!t+|-vMDHf-V37O&NJPTy*Ch$_z)UJ6<?A_9FAhZbe;~t{miq-Qo?fj
z-2umWlh>E1$+kJo^ji{LINw|L2Ho6@(b0J%xk?-$WgX8@u-Ms-j)~}=%UC4NbPq>I
zD#^7J+cvyQjWxObZc)C@LC%Rk4SgZ;aVH^)c)%yzkEY>OVF+)Cxg5870pc1VV!C$S
zatt8^`~eq=vs`tXc0R)*s7u%VTSrao9}wL?o{1HPS&`P-IK@i_!k1Qe!?DxYyC4fd
zTk$zJv#yG<M8gw(;MF$jNks=hl$%g1m5HizFE!tv;~(M@BwfF}$R4jbn+ed3K!<{#
ziZ84%<ft((nxHqHA(~gWacgKms5;t%TIN)5wffTI`Hkeb3IJQns=rdQ{hYYg#Sp4O
z5A>e>>`BRI@z8-YfmSU+3pC3FZ*)Upiq68sr^KzMGWm`IRBfbtNgf!_V~fXxjoIO%
ztw$&`-h}Kje-@iN#q2TU^|ecrrI#vYU?CDYeQUVK8ff;VM9hpmQxdwN2z}0+_p>dm
z!<=VWrWbX7(Ni=~HW2rMpw2?h#Ni>ux&nF^&W$`$D<2r0cw21ubziBL%~0U{hT_Au
z46fSMsz>qYcY+W;y<k>qo;@|4wUlc8Gu_-((+y3!9-rD<k1jO)crFrcGuHeYvA9jx
z=*dHjGnMEhl7lb%RNHhx*)`;*8gF;GHYdntF$;$^k$J}CtpqAjrAY!YB6I;)GkM)Y
zH_uk>5?w7xN_$=q(w_$ogbRXQ`WV^ss>4+hObkH%o;RV+Tx)&MnC=w~(j=$+`G<-o
z<K5#;Ts6_pI}eAKD#wQ`M~&&W@%1FB?qKF$UXYnJ<RZasnD_BEw8!w6wR+!aT&hxS
z#v{65cc<Z2>x73Dtm3nOm!x+JE&@_v@RS*!XRZ6m^_x7=MF~RDor{MR=Hdpz;wR;^
zH2dUF#+eV7XFs7)ogH}bss4Z-dX7<d=S?<M+BLGKNNZ<$aOJbzx6fu7SYD7j>J`6%
zX|j1Y-xw_2-z^~{jeKZgqgC9|=}#NAh)G~&Hfa0BJ0#G8;0%;1Zx;Bp_F0Nr$F#dz
z;VWe-?Wk*)u9`2}tlB^_u$TZZOlA|KXXuN=u|2gU)~5s7iTTrX*TqHWw>U%%hI@Sl
zp^dIaLFOx~!yD=tZLjZ!eQSy*i*WP+lg5svPG*P%i7iK@@~?YI(0G-D7!ZxM5#&Wb
zIBt<kTovns(ESrmFE>J8twtvd06HvWODu<H0qLL_r0eL=DYnZ{jvGGptMe|L=mZ`E
zNeZn%Yb68R2>mOfF&ch#-S}YgFoXB8Le1~c<*QwN2gi**A3q_{9EeMds(*Dd5)74)
z9iX*Dh>iuX8jA~DQu|!Z^)M<40c_U3vnAOKMEC7&kX0oF$~G93!9cD#5Jo&?pRy4y
zIFHD37}Uoq7Gok(vnISVmNwLM-aw6iGn6A&>$+yyn|+ov&CQ>K+`8Bu&%8Ut?kjsT
zn;xVr*?#8t0Q>iaDD8U-B_;3zlrnhxRSfL6g(zhSQBlCtAqkm*5oBpP>cRe@3I)b-
zmSt<X0ckoZ+8%~-g>DI2$-(ZPerb3qTvezIuj3PGTi#$hXsKWY8|J9OXHr2@iZwzQ
zV@1ypsYC5fj!zWqFi)s!9$63K*)>F|z_HMPH%jpKr{edwcnr*Kt(~+jEr8~>HuScR
zw!yN4Lo|a!lA#Q;^u4rHufjH@{tz-Km%j60JO$Y>7g=MnoK!#BS#Oj#xy=tZ5aNHk
zfqvVWf~c^Zf=JP14=7U%4Q{zE6}EG?uLT}0SU`waDg9}SLK=oHdZI^e6=8~bfqKeZ
z5(2$8dGwVssF}-mAoUH535Uo?xV_-DG+?-2J640G{zR!`v{VAFsyZ2R5O>RPtIEx-
zTV3v%{XC<?X@dZGEqPs=s-XoZvth01>zr6bNeCwfQfo9Nf55!>N~DhiDf5_oW!+??
z2z0vYEi@z^;e82tQ1rT<%SL4eW@co;J4mS=0!AWFO{LQo<Fn;L5RTDX9+(?1H#(DQ
z`y|=CF*pLv?3(iECb5`m#Yrfla~&;U4!@oLCsQ><5~rYhp|i9^fr|`DqEyd0YqhFt
zAhp_cLicBTZ7<!eLUn`j?`y`j8ra<Vei0lkA5*a6{OM)g*JAHa8$a&a13K-Jr3Ck4
zN~?w$j~mhoJPMW)wZtwgZJI%w8KpG7%dcg}EHo6iN*&S1YM#SNtU#>wD`8yUu^|Cc
z_mZqj(h>sXR9{C{h~ZCRkN`nfD2BuYb2xIr$!S7vhWbLmK%Zr{FsS8J-j!=+<IlI-
zD6!+TViS_+LG6q6;KHGRn<+%Iv<iAB_u<7hv2dKU$c#4`5yxWtTBfxIzNR7ju4Kz-
zNxF;Dg$YK|+M+B6M5VdrA4F>s{HJKTNq3p17Dodc%(g^^L*ix)Rop}@W7e9yc?)L=
z`eUbvEa)}ebD3(xbnO-3I)Qg>A65_dF<PbQ`BLWLsA)Cw1*no73(71K%^i;t7-1t>
z@Q-oJc67XZZocA{-{N1)3MxNw58k;*H%l1qLIZUKupeB-tx}mciF8nu(XOi=^v|@9
zG_B;aX^Xm*NV$nrDz!Vne?Z+!rhbj!Z`C9;_R(3;LbB<iBR#N3;r-T0>;9Dgs8qs>
zFzPbsB97-c@7^a^8lyqAEuq+WU^#Z8c}<}_hkK(tNT$-^BXk6@al~t4Qvov%rFb=$
z6upWxd&8!x@6&8`%YD7QeE4#Tk)DE(1~9SS>$K;J1C`?-n=F551UXQh!J`gbAUd2E
zw)AUX!XNKksOY_~+PZ0zStY8EBZybvQe7y-CcG)4;I``Et3^-TRsY5ga%GiH<d%v-
zB!KB!-1_D{kjfx)!Ifv|s=G-ppV;O~{Pl`<(J>u%PK>#1XVPpm*d}OC_dCY{9%X{_
z&Qvav_SU<Sg@z=`QK_CJrB{fq0e~W8V>=WX&GZ_N4N8WfSdPh*KF|9Nre}M%8APuv
z6oeJHxrYW%>TOVZWM1sUO(JiVGVITI)*MUai-lv5I0oHDb7hs}SA6AoOCfjZcKGT2
zN@`UfR>~Tnr#MLl1$tt_1ksCT28bZ~Ce`Q$aL1B0@(|h#O2kK~?JhKqjGEP3VDH<g
z-PyxzJDzM#?EK1heDl`nRjck&ONm3hH3KwpD^NQaWNbIhdTb$1MYZjyF&6cP;*~1=
z&1ga#RC?Zn;e+rEdv-~1T?qpyYavJ6rWtR~82wPb*3z39GC84Nv`0+(sdXC{?|sdF
z+>qX`K(gn4Rp_nU{+!qxZDrU(bAtHbcs2C%*G~<r{Kw*leELni*R+hRc*8l6(w!16
z{obX~XxU`$Om@z>NbZB?yoCwL$5hv3AP!*9AT&FsufJlkbuIAYz)Pc#%b|39T;?x*
zfwv3)Y|`l@m!!^%yt>uD&H)2Zm0u8QEw&h0_k{xaQvv1K3d1#?j9tHE?kGLrxQ02!
z1?L8f(A2=`fpZC%Kfu&N-hmt&KcZqx5B&k+4K19SYNuV9%od2s`}SzbVus+!_jL7)
zO3$<52i(mS;e+JGimzxaFX&yWj@Dl4O?<ch${y&uMHU!4+P{$AC=&>O9G}d-5W}8B
zN7DVm9bEer66zWBj|@|AsY(bTc?Q!M9Yye?A2%!TmnVO<EYBYg|6_yyFZ=uB{zuG8
zm5^ZjJNFOM_g}psAhJBYfA#+}ef4qIAO8*R^+y9|z5dm*JWIg9pCWpFpzVL>%|3=a
zgVXEG1K)3esE^~{d<6ODAcmi3`dE@eK+rk=sRa5NMV4n1I2-rBg8+N*?f)oA_&9_g
zU4D+^ht%k2%ktEv{)PCDQ2&1%O0=CqYY(tekA?ejC`rF_{&_S?UvFqs!K%+;@TtK4
z83*`pmZu!gZ=vW}m>U9(z$r$L2Sn$BON9y+TaThaK>Yp0EDHQa(Kpbyv-}50d}z8C
z33xQLoDdK{GNFIAEKgGL-ymiNw$?zsAJtJG$8ylBJO=_F-8*nRe;<*v%I_EpeFM{f
zqR=v(yY7HrB}Cv6{rwaPssBc?0ZSuHfrdYn^pB(QTG6D51=mWpM|pf?40L|y{E%Ax
z17w<nC({+2_XPrfOZnsT;m?-k$z<?5#MWBJUPoKU68I0K$EBNpk+#hLjr3<B=f?wk
zT)_4hiN^Xj(%;J2J|;ab?D>nNY4;oHuQH#HDL;Dsd{2Sjoqx3~&keudDF0BT;xX@W
zk&2(dEKf@Rf93tBWW{6F<H82NSp0$i%KBC2;4$v8M*bI$ION}Pe@NvYqaK@nf1$cT
z|BCw4`}-L6*zx%bg%|s;s6UOLk5P}MZ@*BA$$z1Kidz21_3^R2?H6bCcg{awA0Jy{
zej$poe+%U=XUyXP{pj`c#rgM3+w0oDD8K*Y<1yy(Pd<JHWA+>7pNI1}gY*~See2^u
ze&&-tj^c6J#9s`^lD?me-==RrlPDg;9#4IL!8jKG752wO_%Z46r1cjGoM!z0ox(nb
lKAxQZg0e3CEA-E)s=PET_zv`=k_ia}2l(Q>w*KSU{{a$+_t5|V

diff --git a/site/public/data b/site/public/data
deleted file mode 120000
index 0c9e531..0000000
--- a/site/public/data
+++ /dev/null
@@ -1 +0,0 @@
-/private/tmp/bincio_dev_test
\ No newline at end of file
diff --git a/todo.md b/todo.md
deleted file mode 100644
index ee1a1a8..0000000
--- a/todo.md
+++ /dev/null
@@ -1,213 +0,0 @@
-# BincioActivity — Ideas & Roadmap
-
-## 1. Strava import from UI ✅
-
-**Goal:** Let users trigger a Strava sync directly from the web UI instead of running CLI commands.
-
-**Current state:** `bincio extract` CLI handles Strava OAuth + sync. The edit server (FastAPI) runs locally.
-
-**Ideas:**
-- Repurpose the upload button popup to offer two paths: "Upload file" (existing) or "Connect Strava"
-- OAuth flow: open a popup window → Strava auth → redirect back → edit server exchanges code for token → triggers extract
-- Edit server would need new endpoints: `GET /strava/auth-url`, `GET /strava/callback`, `POST /strava/sync`
-- Progress feedback: SSE (Server-Sent Events) or polling endpoint to stream sync progress back to the UI
-
-**Open questions:**
-- Where to store the Strava token? Currently it's a CLI argument / env var. For server mode, probably a local file in the data dir.
-- Should sync be incremental (only new activities) or full re-extract?
-- How does this interact with multi-user mode (see #2)?
-
-**Effort:** Medium. OAuth popup + SSE progress are the tricky parts.
-
----
-
-## 2. Multi-user VPS deployment with invite system
-
-**Goal:** Deploy bincio on a VPS so multiple users can have accounts. Invite-only registration.
-
-**Current state:** Entirely single-user, local files, no auth layer at all.
-
-### Clarified model
-
-- A **bincio instance** is a deployment (personal or group)
-- **Personal instance:** 1 user, fully self-contained — current state
-- **Group instance:** N users, invite-only. All users see each other's public activities by default.
-  The `private` flag (already in the schema) means "only me".
-- **Federation** is between instances via BAS data URLs — no accounts needed to follow someone
-- Data isolation = run your own instance. No per-user isolation within an instance.
-
-### Data layout (multi-user)
-
-```
-/data/
-  {handle}/          ← one dir per user (extract output)
-    activities/
-    index.json
-    athlete.json
-    edits/
-    _merged/
-instance.json        ← user registry + invite codes
-```
-
-The instance's combined feed merges all users' `_merged/index.json` files at render time.
-
-### Auth layer
-
-- Session-based auth added to the edit server (FastAPI handles login/logout)
-- Unauthenticated reads stay fully public (static files, same as today)
-- Write endpoints check: logged in + owns the activity
-- Astro site detects logged-in user to show/hide the Edit button per activity
-
-### Invite system
-
-- Invites: short random codes (8 chars), stored in `instance.json`
-- Invite record: `{code, created_by, used_by, created_at, used_at}`
-- On registration: validate code → create user dir → mark invite used
-- Limits: admin (unlimited), regular users (3 invites, configurable)
-- UI: "Your invites" page — generate codes, see who used them
-
-### Render pipeline (multi-user)
-
-- `bincio render` runs `merge_all()` for each user, then builds one Astro site
-- Combined `index.json` = all users' public summaries merged, sorted by date
-- Per-user profile pages at `/{handle}/` showing only their activities
-- Activity detail pages stay at `/activity/{id}/` (IDs are globally unique already)
-- Activity cards in combined feed show "by {handle}" label
-
-**Decided:**
-- SQLite for user/invite storage (safe under concurrent writes, still no external DB dependency)
-- Mastodon-style follow UX: paste a BAS URL into a "Follow" input → instance fetches and caches that feed → activities appear in combined feed with "from {url}" attribution
-- Feed refresh: pull-on-demand with cache TTL (no background job — fetch on first stale pageload). [open: exact TTL, stale-while-revalidate vs blocking]
-
-**Effort:** Large. Auth + multi-user render pipeline are the main work. Needs a design pass before coding.
-
----
-
-## 3. Federation explainer for non-technical users
-
-**Goal:** Write a clear, friendly explanation of how bincio federation works for people who don't know what JSON or APIs are.
-
-**Three ways to share your data:**
-
-### a) Upload raw files
-> "Export your GPX/FIT files from Garmin, Wahoo, or wherever, and upload them directly. Bincio converts them automatically."
-
-### b) Upload BAS files
-> "Already running bincio locally? Export your BAS data and host it anywhere — GitHub Pages, Netlify, a USB stick. Anyone with the link can include your activities in their feed."
-
-### c) Link to another bincio instance
-> "Self-hosting bincio? Just share your URL. Friends can follow you by adding your address to their feeds — no accounts needed, no central server."
-
-**Promo angle ideas:**
-- "Your data, your rules. No algorithms, no engagement metrics."
-- "Like RSS for your training log."
-- "Works offline. Export once, keep forever."
-- "Follow friends without either of you needing an account on the same platform."
-
-**Format:** Could be a `FEDERATION.md`, a landing page section, or a one-pager PDF.
-
-**Effort:** Small (writing). Medium if we want a designed landing page.
-
----
-
-## 4. Mobile data capture & processing
-
-**Goal:** Record activities on a phone, convert to BAS, possibly run the full bincio stack on-device.
-
-**Four sub-questions:**
-
-### 4a. Record on phone
-- Standard GPS recording → GPX export is already solved by apps like OsmAnd, Organic Maps, Strava, Komoot
-- Could build a minimal PWA (Progressive Web App) that records GPS and exports GPX
-- Web Geolocation API + background service worker has limitations (iOS kills background JS)
-- React Native / Capacitor would give better background GPS access
-- **Simplest path:** just recommend OsmAnd/Organic Maps, skip building a recorder
-
-### 4b. Convert GPX/FIT → BAS on phone
-- The extract pipeline is pure Python with no native deps (haversine math, standard library)
-- Could run via **Pyodide** (Python in WebAssembly) in a browser/PWA
-- Or package as a mobile app with BeeWare/Kivy (Python → iOS/Android)
-- Performance: A typical 1-hour FIT file is ~1MB, should parse in <1s even in Pyodide
-- **Interesting path:** PWA with Pyodide — no install needed, works in Safari/Chrome
-
-### 4c. Serve the full bincio app on a phone
-- The site is a static Astro build — it's already a collection of HTML/JS/CSS files
-- A phone could serve these files locally via a small HTTP server
-- iOS: no background servers, but a Capacitor wrapper could embed a local server
-- Android: more permissive, could run a Python/Node micro-server as a service
-- **Alternative:** just open the pre-built site via file:// protocol (may work for static assets)
-
-### 4d. Fully offline mobile app
-- Capacitor + the existing Svelte components + Pyodide for extract = plausible stack
-- Would need to bundle MapLibre tile data locally (big) or use an offline tile server
-- This is a significant project but technically feasible with existing code
-
-**Decided path:**
-1. Recommend OsmAnd / Organic Maps for GPS recording — also built a `/record/` page in the app for in-app GPS recording
-2. Capacitor wraps the existing Astro/Svelte site as a native iOS/Android app
-3. `/convert/` page — Pyodide runs the full extract pipeline in-browser (GPX/FIT/TCX → BAS JSON)
-4. Fully offline on-device: needs more work (see below)
-
-**Done:**
-- Capacitor setup in `site/` (`capacitor.config.ts`, scripts, packages)
-- `/convert/` page with Pyodide (loads bincio wheel, converts files, download or save to cloud)
-- `/record/` page with live GPS recording, exports GPX → hands off to `/convert/`
-- `POST /api/import-bas` edit server endpoint (accepts pre-converted BAS JSON)
-- `site/public/bincio.whl` — bincio Python wheel for Pyodide
-
-**Fully offline — ordered plan:**
-
-| # | Step | Effort | Status |
-|---|---|---|---|
-| 1 | SW + IndexedDB write (`sw.js`, `localstore.ts`, "Save to device") | Medium | ✅ Done |
-| 2 | `dataloader.ts` — runtime-merge server + IDB; update all Svelte components | Medium | 🔄 In progress |
-| 3 | Test convert→save→feed loop in browser (`npm run dev`) | Low | Not started |
-| 4 | Sidecar merge in JS (port `merge_all`, no Pyodide) | Medium | Not started |
-| 5 | Pyodide SW cache (cache CDN assets on first visit) | Medium | Not started |
-| 6 | `npx cap add android` + test in Capacitor WebView | Low | Not started |
-| 7 | Test on iOS device/simulator | Low | Not started |
-| 8 | Native micro-server (only if step 7 reveals SW blocked) | Hard | Contingency |
-
-**`capacitor-nodejs` is not on the roadmap.** If iOS blocks service workers, fallback is a native micro-server or eliminating all remaining `fetch('/data/*')` callsites via step 2.
-
-See `ARCHITECTURE.md` — "Fully offline — missing pieces" for design details and open questions (storage limits, uninstall, sync conflicts).
-
----
-
-## 5. Gear from Strava export
-
-Import `bikes.csv` and `shoes.csv` from the Strava ZIP export to pre-populate a gear selector
-in the edit drawer. The CSV has: Bike Name, Bike Brand, Bike Model, Bike Default Sport Types.
-Could store as a `gear.json` in the user's data dir and surface it in the EditDrawer sport/gear fields.
-
----
-
----
-
-## 6. User feedback backlog (April 2026)
-
-Items reported via the in-app feedback form.
-
-| # | Who | Area | Description | Notes |
-|---|-----|------|-------------|-------|
-| F1 | brut | Mobile / Nav | ~~Shorten "BincioActivity" logo to "BA" on narrow screens~~ | ✅ Done |
-| F2 | brut | Mobile / Stats | Day-click tooltip in `StatsView` falls off-screen on mobile | Needs viewport-clamping on the tooltip position |
-| F3 | brut | Data / Display | Cadence unit "rpm" is wrong for walking and hiking — should be "spm" or hidden | `ActivityCharts.svelte` — sport-aware label or hide tab |
-| F4 | brut | Feature | No way to mark an activity as "virtual"; virtual activities should be excluded from records | `virtual: true` sidecar flag + `EditDrawer` checkbox; filter in `RecordsView` and `write_athlete_json` |
-| F5 | brut | Charts / MMP | ~~Power curve Y axis should start at 0 W; X axis should extend to at least 2 hours~~ | ✅ Done |
-| F6 | brut | Feature | Import gear (bikes, shoes) from Strava export; edit gear; maintenance log with cumulative km | See item 5 above for gear import. Maintenance log is new: date + km + notes per bike |
-| F7 | brut | About page | Make user handles in the community tree clickable; show online user count | Handles link to `/u/{handle}/`; online count needs server-side tracking (non-trivial) |
-| F8 | brut | Strava sync | ~~Syncing from Strava does not trigger a site rebuild~~ | ✅ Done — trigger was firing after `yield "done"`, client had already closed the SSE connection |
-| F9 | diego_p | Data | Check elevation gain on activity `2026-04-11T051441Z` | Likely a GPS artefact or smoothing issue; needs manual inspection |
-
----
-
-## Prioritization (rough)
-
-| # | Feature | Impact | Effort | Priority |
-|---|---------|--------|--------|----------|
-| 1 | Strava sync from UI | High | Medium | Soon |
-| 3 | Federation explainer | Medium | Small | Soon |
-| 4a/4b | Mobile record + convert | Medium | Medium | Later |
-| 2 | Multi-user + invites | High | Large | Later (needs design) |
-| 4c/4d | Full mobile app | Low | Large | Future |

From e7eefa345e0f53fa0a42f4e64bed8c9fb3b34b8b Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 19:03:46 +0200
Subject: [PATCH 064/124] F17: replace merge_all with merge_one in upload_image
 and delete_image

Single-activity writes now trigger a fast merge_one instead of a full
user rebuild. post_activity was fixed earlier; this completes the fix
for upload_image and delete_image endpoints.
---
 bincio/serve/server.py | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index c8bb828..1fced65 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -592,8 +592,8 @@ async def post_activity(
 
     from bincio.edit.ops import apply_sidecar_edit
     body = await request.json()
+    # apply_sidecar_edit already calls merge_one internally — no full rebuild needed.
     apply_sidecar_edit(activity_id, body, dd)
-    _trigger_rebuild(user.handle)
     return JSONResponse({"ok": True})
 
 
@@ -633,7 +633,8 @@ async def upload_image(
     images_dir.mkdir(parents=True, exist_ok=True)
     safe_name = _unique_image_name(images_dir, Path(file.filename).name)
     (images_dir / safe_name).write_bytes(contents)
-    _trigger_rebuild(user.handle)
+    from bincio.render.merge import merge_one
+    merge_one(dd, activity_id)
     return JSONResponse({"ok": True, "filename": safe_name})
 
 
@@ -653,7 +654,8 @@ async def delete_image(
         target.unlink()
         if target.parent.exists() and not any(target.parent.iterdir()):
             shutil.rmtree(target.parent)
-    _trigger_rebuild(user.handle)
+    from bincio.render.merge import merge_one
+    merge_one(dd, activity_id)
     return JSONResponse({"ok": True})
 
 

From e6bb6e61a213b70b6b82564e6e63a57df6c2fc5d Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 19:18:37 +0200
Subject: [PATCH 065/124] fix elevation_gain_m null for modern Garmin FIT
 files; fix map flash
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

FIT parser: try enhanced_altitude before altitude. Barometric altimeters
on modern Garmins (Edge 540, 840, etc.) write enhanced_altitude in
record messages and total_ascent in lap messages. The old code read only
altitude, producing null elevation_m per point → null elevation_gain_m
at the activity root while laps had correct values from total_ascent.

ActivityMap: use preview_coords (passed from ActivitySummary) to
initialise the map at the activity's location on mount, eliminating the
flash of world-view before the async detail JSON / bbox arrives.
---
 bincio/extract/parsers/fit.py             |  7 ++++++-
 site/src/components/ActivityDetail.svelte |  1 +
 site/src/components/ActivityMap.svelte    | 22 ++++++++++++++++++++--
 3 files changed, 27 insertions(+), 3 deletions(-)

diff --git a/bincio/extract/parsers/fit.py b/bincio/extract/parsers/fit.py
index 6fa596a..438fa21 100644
--- a/bincio/extract/parsers/fit.py
+++ b/bincio/extract/parsers/fit.py
@@ -57,12 +57,17 @@ class FitParser:
                     lat = _semicircles_to_deg(_get(frame, "position_lat"))
                     lon = _semicircles_to_deg(_get(frame, "position_long"))
                     speed_raw = _get(frame, "speed")  # m/s
+                    # enhanced_altitude is written by barometric altimeters (most
+                    # modern Garmins). Fall back to GPS-derived altitude if absent.
+                    _alt = _get(frame, "enhanced_altitude")
+                    if _alt is None:
+                        _alt = _get(frame, "altitude")
 
                     dp = DataPoint(
                         timestamp=ts,
                         lat=lat,
                         lon=lon,
-                        elevation_m=_get(frame, "altitude"),
+                        elevation_m=_alt,
                         hr_bpm=_get(frame, "heart_rate"),
                         cadence_rpm=_get(frame, "cadence"),
                         speed_kmh=speed_raw * 3.6 if speed_raw is not None else None,
diff --git a/site/src/components/ActivityDetail.svelte b/site/src/components/ActivityDetail.svelte
index 18bae3d..615a90b 100644
--- a/site/src/components/ActivityDetail.svelte
+++ b/site/src/components/ActivityDetail.svelte
@@ -244,6 +244,7 @@
         {trackUrl}
         {timeseries}
         bbox={detail?.bbox ?? null}
+        initialCoords={activity.preview_coords}
         accentColor={color}
         bind:hoveredIdx
       />
diff --git a/site/src/components/ActivityMap.svelte b/site/src/components/ActivityMap.svelte
index d094210..7bcb14b 100644
--- a/site/src/components/ActivityMap.svelte
+++ b/site/src/components/ActivityMap.svelte
@@ -7,6 +7,10 @@
   export let trackUrl: string;
   export let timeseries: Timeseries | null = null;
   export let bbox: [number, number, number, number] | null = null;
+  /** ~20 [lat, lon] preview coords from the activity summary — used to position
+   *  the map immediately on mount so there's no flash of world view before the
+   *  detail JSON loads and bbox arrives. */
+  export let initialCoords: [number, number][] | null = null;
   export let accentColor: string = '#00c8ff';
   export let hoveredIdx: number | null = null;
 
@@ -19,11 +23,25 @@
   const TILE_STYLE = 'https://tiles.openfreemap.org/styles/positron';
 
   onMount(() => {
+    // Derive initial center and zoom from preview_coords so the map starts at
+    // the right location without waiting for the async detail JSON / bbox load.
+    let initCenter: [number, number] = [0, 0];
+    let initZoom = 1;
+    if (initialCoords && initialCoords.length > 0) {
+      const lats = initialCoords.map(c => c[0]);
+      const lons = initialCoords.map(c => c[1]);
+      initCenter = [
+        (Math.min(...lons) + Math.max(...lons)) / 2,
+        (Math.min(...lats) + Math.max(...lats)) / 2,
+      ];
+      initZoom = 10; // rough default; fitBounds will correct this when bbox arrives
+    }
+
     map = new maplibregl.Map({
       container: mapEl,
       style: TILE_STYLE,
-      center: [0, 0],
-      zoom: 1,
+      center: initCenter,
+      zoom: initZoom,
       attributionControl: false,
     });
 

From a75dfa160be57f0aec8d488c6ee2a53ecc1f0a52 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 19:35:40 +0200
Subject: [PATCH 066/124] F14: add per-activity delete (DELETE
 /api/activity/{id} + drawer button)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Server endpoint removes the activity JSON, GeoJSON, timeseries, sidecar
edit, and images directory. Also purges the dedup cache entry so the
file can be re-uploaded if needed. Runs merge_all + rebuild afterwards.

EditDrawer: two-click delete button (click once → "Confirm delete?",
click again → deletes). On success, dispatches 'deleted' event.
ActivityDetail navigates back to the feed on delete.
---
 bincio/serve/server.py                    | 50 +++++++++++++++++++++++
 site/src/components/ActivityDetail.svelte |  2 +-
 site/src/components/EditDrawer.svelte     | 37 ++++++++++++++++-
 3 files changed, 86 insertions(+), 3 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 1fced65..9003d02 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -597,6 +597,56 @@ async def post_activity(
     return JSONResponse({"ok": True})
 
 
+@app.delete("/api/activity/{activity_id}")
+async def delete_activity(
+    activity_id: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Delete a single activity and all associated files for the logged-in user."""
+    user = _require_user(bincio_session)
+    _check_id(activity_id)
+    dd = _get_data_dir() / user.handle
+    acts_dir = dd / "activities"
+
+    json_path = acts_dir / f"{activity_id}.json"
+    if not json_path.exists():
+        raise HTTPException(404, "Activity not found")
+
+    import shutil
+
+    # Remove the source files (activities dir)
+    for suffix in (".json", ".geojson", ".timeseries.json"):
+        p = acts_dir / f"{activity_id}{suffix}"
+        p.unlink(missing_ok=True)
+
+    # Remove sidecar edit and images
+    sidecar = dd / "edits" / f"{activity_id}.md"
+    sidecar.unlink(missing_ok=True)
+    images_dir = dd / "edits" / "images" / activity_id
+    if images_dir.exists():
+        shutil.rmtree(images_dir)
+
+    # Remove from dedup cache so the file can be re-uploaded if needed
+    cache_path = dd / ".bincio_cache.json"
+    if cache_path.exists():
+        try:
+            cache = json.loads(cache_path.read_text(encoding="utf-8"))
+            if isinstance(cache, dict) and "activities" in cache:
+                cache["activities"] = [
+                    a for a in cache["activities"] if a.get("id") != activity_id
+                ]
+                cache_path.write_text(json.dumps(cache, indent=2, ensure_ascii=False))
+        except Exception:
+            pass  # corrupt cache — leave it; next extract will rebuild
+
+    # Full merge needed: activity removed from index
+    from bincio.render.merge import merge_all
+    merge_all(dd)
+    _trigger_rebuild(user.handle)
+
+    return JSONResponse({"ok": True})
+
+
 @app.get("/api/activity/{activity_id}/images")
 async def list_images(
     activity_id: str,
diff --git a/site/src/components/ActivityDetail.svelte b/site/src/components/ActivityDetail.svelte
index 615a90b..81b2280 100644
--- a/site/src/components/ActivityDetail.svelte
+++ b/site/src/components/ActivityDetail.svelte
@@ -112,7 +112,7 @@
 <svelte:window on:keydown={onKeydown} />
 
 {#if editOpen && editEnabled}
-  <EditDrawer activityId={activity.id} {editUrl} on:saved={onSaved} on:close={() => editOpen = false} />
+  <EditDrawer activityId={activity.id} {editUrl} on:saved={onSaved} on:close={() => editOpen = false} on:deleted={() => { window.location.href = base; }} />
 {/if}
 
 <!-- Lightbox -->
diff --git a/site/src/components/EditDrawer.svelte b/site/src/components/EditDrawer.svelte
index 9397030..47b18fc 100644
--- a/site/src/components/EditDrawer.svelte
+++ b/site/src/components/EditDrawer.svelte
@@ -5,7 +5,7 @@
   export let activityId: string;
   export let editUrl: string;
 
-  const dispatch = createEventDispatcher<{ saved: { title: string; description: string }; close: void }>();
+  const dispatch = createEventDispatcher<{ saved: { title: string; description: string }; close: void; deleted: void }>();
 
   const SPORTS: Sport[] = ['cycling', 'running', 'hiking', 'walking', 'swimming', 'skiing', 'other'];
   const STAT_PANELS = [
@@ -21,6 +21,8 @@
   let saving = false;
   let saveStatus = '';
   let saveOk = false;
+  let confirmDelete = false;
+  let deleting = false;
 
   // Form state
   let title = '';
@@ -120,6 +122,22 @@
       : [...hideStats, key];
   }
 
+  async function deleteActivity() {
+    if (!confirmDelete) { confirmDelete = true; return; }
+    deleting = true;
+    try {
+      const res = await fetch(api, { method: 'DELETE' });
+      if (!res.ok) throw new Error(await res.text());
+      dispatch('deleted');
+    } catch (e: any) {
+      saveStatus = `Delete failed: ${e.message}`;
+      saveOk = false;
+      confirmDelete = false;
+    } finally {
+      deleting = false;
+    }
+  }
+
   load();
 </script>
 
@@ -284,11 +302,26 @@
     <div class="px-5 py-4 border-t border-zinc-800 flex items-center gap-3 shrink-0">
       <button
         class="px-4 py-2 bg-blue-600 hover:bg-blue-500 disabled:opacity-40 text-white text-sm font-medium rounded-lg transition-colors"
-        disabled={saving}
+        disabled={saving || deleting}
         on:click={save}
       >
         {saving ? 'Saving…' : 'Save'}
       </button>
+      <button
+        class="px-3 py-2 text-sm font-medium rounded-lg border transition-colors disabled:opacity-40 ml-auto"
+        class:border-zinc-700={!confirmDelete}
+        class:text-zinc-500={!confirmDelete}
+        class:hover:border-red-600={!confirmDelete}
+        class:hover:text-red-400={!confirmDelete}
+        class:border-red-500={confirmDelete}
+        class:text-red-400={confirmDelete}
+        class:bg-red-950={confirmDelete}
+        disabled={deleting}
+        on:click={deleteActivity}
+        on:blur={() => confirmDelete = false}
+      >
+        {deleting ? 'Deleting…' : confirmDelete ? 'Confirm delete?' : 'Delete'}
+      </button>
       {#if saveStatus}
         <span class="text-xs" class:text-green-400={saveOk} class:text-red-400={!saveOk}>
           {saveStatus}

From d2ba96c26ae4463fa4c5fddd6314d9e31d6fb2cc Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 13 Apr 2026 20:10:15 +0200
Subject: [PATCH 067/124] fix admin delete to wipe originals/edits/geojson;
 rename button to Reset data
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The old DELETE /api/admin/users/{handle}/activities only removed *.json
files and _merged/, leaving originals/ (Strava FIT files) and edits/
untouched — causing the 968 MB disk usage after a delete.

_wipe_user_activities() now removes activities/, edits/, originals/,
_merged/, index.json, athlete.json, and .bincio_cache.json. Admin page
button renamed to "Reset data" with updated confirmation text.
---
 bincio/serve/server.py           | 55 +++++++++++++++++++++-----------
 site/src/pages/admin/index.astro |  8 +++--
 2 files changed, 42 insertions(+), 21 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 9003d02..2c86469 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -517,38 +517,57 @@ async def admin_rebuild(
     return JSONResponse({"ok": True})
 
 
+def _wipe_user_activities(user_dir: Path) -> int:
+    """Delete all extracted activity files and caches for a user.
+
+    Removes activities/ (JSON + GeoJSON + timeseries), edits/, originals/,
+    _merged/, index.json, athlete.json, and the dedup cache.
+    Leaves the user directory itself intact (account remains in the DB).
+    Returns the number of files deleted.
+    """
+    import shutil
+    deleted = 0
+
+    for subdir in ("activities", "edits", "originals"):
+        d = user_dir / subdir
+        if d.exists():
+            for f in d.rglob("*"):
+                if f.is_file():
+                    deleted += 1
+            shutil.rmtree(d)
+
+    for name in ("_merged", ):
+        d = user_dir / name
+        if d.exists():
+            shutil.rmtree(d)
+
+    for name in ("index.json", "athlete.json", ".bincio_cache.json"):
+        f = user_dir / name
+        if f.exists():
+            f.unlink()
+            deleted += 1
+
+    return deleted
+
+
 @app.delete("/api/admin/users/{handle}/activities")
 async def admin_delete_activities(
     handle: str,
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> JSONResponse:
-    """Delete all activity JSON files for a user and wipe the merged cache."""
+    """Delete all activity data for a user and wipe the merged cache."""
     _require_admin(bincio_session)
     user_dir = _get_data_dir() / handle
     if not user_dir.is_dir():
         raise HTTPException(404, f"No data directory for user '{handle}'")
 
-    deleted = 0
-    activities_dir = user_dir / "activities"
-    if activities_dir.is_dir():
-        for f in activities_dir.glob("*.json"):
-            f.unlink()
-            deleted += 1
-
-    # Wipe merged cache, top-level index, and dedup cache so re-uploads aren't blocked
-    import shutil
-    merged_dir = user_dir / "_merged"
-    if merged_dir.exists():
-        shutil.rmtree(merged_dir)
-    for name in ("index.json", ".bincio_cache.json"):
-        f = user_dir / name
-        if f.exists():
-            f.unlink()
-
+    deleted = _wipe_user_activities(user_dir)
     _trigger_rebuild(handle)
     return JSONResponse({"ok": True, "deleted": deleted})
 
 
+
+
 # ── Write API (ported from bincio edit, auth-gated) ───────────────────────────
 
 def _user_data_dir(handle: str) -> Path:
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index c67ac33..1789631 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -33,10 +33,11 @@ import Base from '../../layouts/Base.astro';
 
     <!-- Confirmation dialog -->
     <dialog id="confirm-dialog" class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-sm w-full backdrop:bg-black/60">
-      <p class="text-sm text-zinc-300 mb-5">Delete all activities for <strong id="confirm-handle" class="text-white"></strong>? This cannot be undone.</p>
+      <p class="text-sm text-zinc-300 mb-1">Reset all data for <strong id="confirm-handle" class="text-white"></strong>?</p>
+      <p class="text-xs text-zinc-500 mb-5">Removes all activities, originals, edits, and images. The account is kept. This cannot be undone.</p>
       <div class="flex gap-3 justify-end">
         <button id="confirm-cancel" class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-zinc-700 text-zinc-300 transition-colors">Cancel</button>
-        <button id="confirm-ok" class="px-4 py-2 rounded-lg text-sm bg-red-700 hover:bg-red-600 text-white font-medium transition-colors">Delete</button>
+        <button id="confirm-ok" class="px-4 py-2 rounded-lg text-sm bg-red-700 hover:bg-red-600 text-white font-medium transition-colors">Reset</button>
       </div>
     </dialog>
   </div>
@@ -124,7 +125,8 @@ import Base from '../../layouts/Base.astro';
               <button
                 class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
                 data-handle="${u.handle}"
-              >Delete activities</button>
+                title="Wipe all activities, originals, edits and images — account is kept"
+              >Reset data</button>
             </div>
           </td>
         </tr>

From 13643479efc46c11ca31aee28d3b37c12e18918c Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Tue, 14 Apr 2026 21:58:50 +0200
Subject: [PATCH 068/124] add password reset via admin-generated one-time code
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

db.py: reset_codes table (code, handle, created_by, created_at,
expires_at, used_at); create_reset_code() invalidates any prior unused
code for the same handle; use_reset_code() validates handle match,
expiry (24 h), and single-use; change_password() updates the hash.

server.py: POST /api/admin/users/{handle}/reset-password-code (admin)
returns a code; POST /api/auth/reset-password (public) validates the
code + handle and sets the new password.

Admin page: "Reset pwd" button per user — shows the code inline on
click (monospace, click-to-copy).
/reset-password/ page: handle + code + new password form.
Login page: "Forgot password?" link.
---
 bincio/serve/db.py                        | 69 ++++++++++++++++++
 bincio/serve/server.py                    | 34 +++++++++
 site/src/pages/admin/index.astro          | 34 +++++++++
 site/src/pages/login/index.astro          |  3 +
 site/src/pages/reset-password/index.astro | 86 +++++++++++++++++++++++
 5 files changed, 226 insertions(+)
 create mode 100644 site/src/pages/reset-password/index.astro

diff --git a/bincio/serve/db.py b/bincio/serve/db.py
index 4485a01..9a901cf 100644
--- a/bincio/serve/db.py
+++ b/bincio/serve/db.py
@@ -45,6 +45,15 @@ CREATE TABLE IF NOT EXISTS invites (
     used_at     INTEGER
 );
 
+CREATE TABLE IF NOT EXISTS reset_codes (
+    code        TEXT PRIMARY KEY,
+    handle      TEXT NOT NULL REFERENCES users(handle) ON DELETE CASCADE,
+    created_by  TEXT NOT NULL REFERENCES users(handle) ON DELETE CASCADE,
+    created_at  INTEGER NOT NULL,
+    expires_at  INTEGER NOT NULL,
+    used_at     INTEGER
+);
+
 CREATE TABLE IF NOT EXISTS settings (
     key   TEXT PRIMARY KEY,
     value TEXT NOT NULL
@@ -52,10 +61,12 @@ CREATE TABLE IF NOT EXISTS settings (
 
 CREATE INDEX IF NOT EXISTS sessions_handle ON sessions(handle);
 CREATE INDEX IF NOT EXISTS invites_created_by ON invites(created_by);
+CREATE INDEX IF NOT EXISTS reset_codes_handle ON reset_codes(handle);
 """
 
 _SESSION_DAYS = 30
 _INVITE_LENGTH = 8
+_RESET_CODE_TTL_S = 24 * 3600  # 24 hours
 
 
 # ── Data classes ──────────────────────────────────────────────────────────────
@@ -143,6 +154,13 @@ def authenticate(db: sqlite3.Connection, handle: str, password: str) -> Optional
     )
 
 
+def change_password(db: sqlite3.Connection, handle: str, new_password: str) -> None:
+    """Replace the password hash for a user."""
+    new_hash = bcrypt.hashpw(new_password.encode(), bcrypt.gensalt()).decode()
+    db.execute("UPDATE users SET password_hash = ? WHERE handle = ?", (new_hash, handle))
+    db.commit()
+
+
 def list_users(db: sqlite3.Connection) -> list[User]:
     rows = db.execute("SELECT * FROM users ORDER BY created_at").fetchall()
     return [User(handle=r["handle"], display_name=r["display_name"],
@@ -317,3 +335,54 @@ def get_invite(db: sqlite3.Connection, code: str) -> Optional[Invite]:
         created_at=row["created_at"],
         used_at=row["used_at"],
     )
+
+
+# ── Password reset codes ──────────────────────────────────────────────────────
+
+def create_reset_code(db: sqlite3.Connection, handle: str, created_by: str) -> str:
+    """Generate a password reset code for a user (admin only, out-of-band delivery).
+
+    Any previous unused codes for this handle are invalidated first.
+    Returns the new code.
+    """
+    now = int(time.time())
+    # Invalidate existing unused codes for this handle
+    db.execute(
+        "DELETE FROM reset_codes WHERE handle = ? AND used_at IS NULL",
+        (handle,),
+    )
+    code = secrets.token_urlsafe(_INVITE_LENGTH)[:_INVITE_LENGTH].upper()
+    db.execute(
+        "INSERT INTO reset_codes (code, handle, created_by, created_at, expires_at) "
+        "VALUES (?, ?, ?, ?, ?)",
+        (code, handle, created_by, now, now + _RESET_CODE_TTL_S),
+    )
+    db.commit()
+    return code
+
+
+def use_reset_code(db: sqlite3.Connection, code: str, handle: str) -> bool:
+    """Validate a reset code for the given handle and mark it used.
+
+    Returns False if the code is invalid, already used, expired, or
+    belongs to a different handle.
+    """
+    now = int(time.time())
+    row = db.execute(
+        "SELECT handle, expires_at, used_at FROM reset_codes WHERE code = ?",
+        (code,),
+    ).fetchone()
+    if not row:
+        return False
+    if row["handle"] != handle:
+        return False
+    if row["used_at"] is not None:
+        return False
+    if row["expires_at"] < now:
+        return False
+    db.execute(
+        "UPDATE reset_codes SET used_at = ? WHERE code = ?",
+        (now, code),
+    )
+    db.commit()
+    return True
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 2c86469..c8ffe24 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -346,6 +346,25 @@ async def logout(bincio_session: Optional[str] = Cookie(default=None)) -> JSONRe
     return resp
 
 
+@app.post("/api/auth/reset-password")
+async def reset_password(request: Request) -> JSONResponse:
+    """Validate a reset code and set a new password. Public endpoint."""
+    from bincio.serve.db import use_reset_code, change_password
+    body = await request.json()
+    handle = (body.get("handle") or "").strip().lower()
+    code   = (body.get("code") or "").strip().upper()
+    new_pw = body.get("password") or ""
+    if not handle or not code or not new_pw:
+        raise HTTPException(400, "handle, code, and password are required")
+    if len(new_pw) < 8:
+        raise HTTPException(400, "Password must be at least 8 characters")
+    db = _get_db()
+    if not use_reset_code(db, code, handle):
+        raise HTTPException(400, "Invalid or expired reset code")
+    change_password(db, handle, new_pw)
+    return JSONResponse({"ok": True})
+
+
 # ── Registration ──────────────────────────────────────────────────────────────
 
 @app.post("/api/register")
@@ -503,6 +522,21 @@ async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     })
 
 
+@app.post("/api/admin/users/{handle}/reset-password-code")
+async def admin_reset_password_code(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Generate a one-time password reset code for a user. Admin only."""
+    from bincio.serve.db import create_reset_code
+    admin = _require_admin(bincio_session)
+    db = _get_db()
+    if not get_user(db, handle):
+        raise HTTPException(404, f"User '{handle}' not found")
+    code = create_reset_code(db, handle, admin.handle)
+    return JSONResponse({"ok": True, "code": code, "expires_in_hours": 24})
+
+
 @app.post("/api/admin/users/{handle}/rebuild")
 async def admin_rebuild(
     handle: str,
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index 1789631..3a977ec 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -122,6 +122,11 @@ import Base from '../../layouts/Base.astro';
                 data-handle="${u.handle}"
                 title="Re-run merge_all and trigger a site rebuild"
               >Rebuild</button>
+              <button
+                class="pwreset-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
+                data-handle="${u.handle}"
+                title="Generate a one-time password reset code for this user"
+              >Reset pwd</button>
               <button
                 class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
                 data-handle="${u.handle}"
@@ -161,6 +166,35 @@ import Base from '../../layouts/Base.astro';
       });
     });
 
+    tbodyEl.querySelectorAll<HTMLButtonElement>('.pwreset-btn').forEach(btn => {
+      btn.addEventListener('click', async () => {
+        const h = btn.dataset.handle!;
+        btn.disabled = true;
+        btn.textContent = '…';
+        try {
+          const r = await fetch(`/api/admin/users/${h}/reset-password-code`, {
+            method: 'POST',
+            credentials: 'include',
+          });
+          const d = await r.json();
+          if (r.ok) {
+            btn.textContent = d.code;
+            btn.title = `Code for ${h} — valid 24 h. Click to copy.`;
+            btn.classList.add('text-yellow-300', 'font-mono');
+            btn.addEventListener('click', () => navigator.clipboard.writeText(d.code), { once: true });
+          } else {
+            btn.textContent = 'Error';
+            btn.classList.add('text-red-400');
+            btn.disabled = false;
+          }
+        } catch {
+          btn.textContent = 'Error';
+          btn.classList.add('text-red-400');
+          btn.disabled = false;
+        }
+      });
+    });
+
     tbodyEl.querySelectorAll<HTMLButtonElement>('.delete-btn').forEach(btn => {
       btn.addEventListener('click', () => {
         pendingHandle = btn.dataset.handle!;
diff --git a/site/src/pages/login/index.astro b/site/src/pages/login/index.astro
index 599e1d1..2779abf 100644
--- a/site/src/pages/login/index.astro
+++ b/site/src/pages/login/index.astro
@@ -33,6 +33,9 @@ const editUrl = import.meta.env.PUBLIC_EDIT_URL ?? '';
       <p class="text-center text-zinc-500 text-sm mt-6">
         Have an invite? <a href="/register/" class="text-[--accent] hover:underline">Create account</a>
       </p>
+      <p class="text-center text-zinc-600 text-sm mt-2">
+        <a href="/reset-password/" class="hover:text-zinc-400 transition-colors">Forgot password?</a>
+      </p>
     )}
   </div>
 </Base>
diff --git a/site/src/pages/reset-password/index.astro b/site/src/pages/reset-password/index.astro
new file mode 100644
index 0000000..8051850
--- /dev/null
+++ b/site/src/pages/reset-password/index.astro
@@ -0,0 +1,86 @@
+---
+import Base from '../../layouts/Base.astro';
+---
+<Base title="Reset password — BincioActivity" public={true}>
+  <div class="max-w-sm mx-auto mt-16 px-4">
+    <h1 class="text-2xl font-bold text-white mb-2 text-center">Reset password</h1>
+    <p class="text-zinc-500 text-sm text-center mb-6">Enter the reset code you received from the admin.</p>
+
+    <form id="reset-form" class="space-y-4">
+      <div>
+        <label class="block text-sm text-zinc-400 mb-1" for="code">Reset code</label>
+        <input id="code" name="code" type="text" autocomplete="off"
+          class="w-full px-3 py-2 rounded-lg bg-zinc-900 border border-zinc-700 text-white font-mono uppercase tracking-widest placeholder-zinc-500 focus:outline-none focus:border-[--accent]"
+          placeholder="XXXXXXXX" maxlength="8" required />
+      </div>
+      <div>
+        <label class="block text-sm text-zinc-400 mb-1" for="handle">Handle</label>
+        <input id="handle" name="handle" type="text" autocomplete="username"
+          class="w-full px-3 py-2 rounded-lg bg-zinc-900 border border-zinc-700 text-white placeholder-zinc-500 focus:outline-none focus:border-[--accent]"
+          placeholder="your handle" required />
+      </div>
+      <div>
+        <label class="block text-sm text-zinc-400 mb-1" for="password">New password</label>
+        <input id="password" name="password" type="password" autocomplete="new-password"
+          class="w-full px-3 py-2 rounded-lg bg-zinc-900 border border-zinc-700 text-white focus:outline-none focus:border-[--accent]"
+          minlength="8" required />
+        <p class="text-zinc-600 text-xs mt-1">At least 8 characters</p>
+      </div>
+      <p id="reset-error" class="text-red-400 text-sm hidden"></p>
+      <p id="reset-ok" class="text-green-400 text-sm hidden">Password updated. <a href="/login/" class="underline">Sign in</a></p>
+      <button type="submit"
+        class="w-full py-2 rounded-lg bg-[--accent] hover:opacity-90 text-white font-medium transition-opacity">
+        Set new password
+      </button>
+    </form>
+
+    <p class="text-center text-zinc-500 text-sm mt-6">
+      <a href="/login/" class="text-[--accent] hover:underline">Back to sign in</a>
+    </p>
+  </div>
+</Base>
+
+<script>
+  // Pre-fill code and handle from query params if provided
+  const params = new URLSearchParams(window.location.search);
+  const codeParam   = params.get('code');
+  const handleParam = params.get('handle');
+  if (codeParam)   (document.getElementById('code')   as HTMLInputElement).value = codeParam.toUpperCase();
+  if (handleParam) (document.getElementById('handle') as HTMLInputElement).value = handleParam;
+
+  document.getElementById('reset-form')?.addEventListener('submit', async (e) => {
+    e.preventDefault();
+    const form = e.target as HTMLFormElement;
+    const errEl = document.getElementById('reset-error')!;
+    const okEl  = document.getElementById('reset-ok')!;
+    errEl.classList.add('hidden');
+    okEl.classList.add('hidden');
+
+    const body = {
+      code:     (form.querySelector('#code')     as HTMLInputElement).value.trim().toUpperCase(),
+      handle:   (form.querySelector('#handle')   as HTMLInputElement).value.trim().toLowerCase(),
+      password: (form.querySelector('#password') as HTMLInputElement).value,
+    };
+
+    try {
+      const r = await fetch('/api/auth/reset-password', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+      });
+      if (!r.ok) {
+        const d = await r.json().catch(() => ({}));
+        errEl.textContent = d.detail ?? 'Reset failed';
+        errEl.classList.remove('hidden');
+        return;
+      }
+      okEl.classList.remove('hidden');
+      (e.target as HTMLFormElement).querySelectorAll('input, button').forEach(
+        el => (el as HTMLInputElement).disabled = true
+      );
+    } catch {
+      errEl.textContent = 'Could not reach server';
+      errEl.classList.remove('hidden');
+    }
+  });
+</script>

From 8fbd9a95e8324cd8128e6d75b5fa536f6e631498 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Tue, 14 Apr 2026 22:22:34 +0200
Subject: [PATCH 069/124] stop pre-building activity pages to fix OOM build
 failure
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

getStaticPaths now returns [] — all /activity/{id}/ URLs are served by
the activity/index.html shell via nginx try_files and hydrated by
ActivityDetailLoader. Pre-rendering thousands of pages was exhausting
server RAM and killing the build. The dynamic loader already handles
public, unlisted, and local activities identically.
---
 site/src/pages/activity/[id].astro | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/site/src/pages/activity/[id].astro b/site/src/pages/activity/[id].astro
index 4539f18..cffc987 100644
--- a/site/src/pages/activity/[id].astro
+++ b/site/src/pages/activity/[id].astro
@@ -6,6 +6,15 @@ import ActivityDetail from '../../components/ActivityDetail.svelte';
 import type { BASIndex, ActivitySummary, AthleteZones } from '../../lib/types';
 
 export async function getStaticPaths() {
+  // Activity pages are not pre-built — all /activity/{id}/ URLs are served
+  // by the activity/index.html shell via nginx try_files and loaded dynamically
+  // by ActivityDetailLoader. Pre-building thousands of pages at build time
+  // exhausts server memory. The shell handles public, unlisted, and local
+  // activities identically with no loss of functionality.
+  return [];
+
+  // Dead code below — kept for reference only.
+  /* eslint-disable no-unreachable */
   try {
     const candidates = [
       process.env.BINCIO_DATA_DIR,
@@ -119,6 +128,7 @@ export async function getStaticPaths() {
   } catch {
     return [];
   }
+  /* eslint-enable no-unreachable */
 }
 
 const { activity, athlete } = Astro.props as { activity: ActivitySummary; athlete: AthleteZones | null };

From 9419bd0c20c76e4aa9fbed4ff0961827bd2f2f19 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Tue, 14 Apr 2026 22:34:15 +0200
Subject: [PATCH 070/124] document password reset flow in CLAUDE.md and
 reset-password page

---
 CLAUDE.md                                 | 17 +++++++++++++++++
 site/src/pages/reset-password/index.astro |  3 ++-
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 414a8f9..ff8c7fa 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -235,6 +235,23 @@ Key facts:
   `fetch('/api/me')` auth wall; `/login/` and `/register/` have `public={true}` to skip it
 - Incremental rebuild: `POST /api/activity/{id}` triggers `bincio render --handle {user}`
   as a fire-and-forget subprocess (only if `--site-dir` was passed to `bincio serve`)
+
+### Password reset (no email — out-of-band code)
+
+There is no email infrastructure. Password resets work via admin-generated one-time codes:
+
+1. **Admin** opens `/admin/` → clicks **"Reset pwd"** next to the user → a code appears
+   inline (monospace, click to copy). Valid for **24 hours**, tied to that handle.
+2. **Admin** sends the code out-of-band (Signal, Telegram, etc.).
+3. **User** goes to `/reset-password/`, enters handle + code + new password → done.
+
+API:
+- `POST /api/admin/users/{handle}/reset-password-code` (admin) → `{code, expires_in_hours: 24}`
+- `POST /api/auth/reset-password` (public) → body `{handle, code, password}`
+
+DB: `reset_codes` table `(code, handle, created_by, created_at, expires_at, used_at)`.
+Generating a new code invalidates any prior unused code for the same handle.
+Used codes are kept for audit. `change_password()` in `db.py` updates the bcrypt hash.
 - Write API in `bincio serve` delegates to `bincio.edit.server._apply_sidecar_edit`; the
   Strava sync delegates to `bincio.edit.server.strava_sync` with a temporary data_dir swap
 
diff --git a/site/src/pages/reset-password/index.astro b/site/src/pages/reset-password/index.astro
index 8051850..1379dad 100644
--- a/site/src/pages/reset-password/index.astro
+++ b/site/src/pages/reset-password/index.astro
@@ -4,7 +4,8 @@ import Base from '../../layouts/Base.astro';
 <Base title="Reset password — BincioActivity" public={true}>
   <div class="max-w-sm mx-auto mt-16 px-4">
     <h1 class="text-2xl font-bold text-white mb-2 text-center">Reset password</h1>
-    <p class="text-zinc-500 text-sm text-center mb-6">Enter the reset code you received from the admin.</p>
+    <p class="text-zinc-500 text-sm text-center mb-2">Enter the reset code you received from the admin.</p>
+    <p class="text-zinc-600 text-xs text-center mb-6">Don't have a code? Contact the instance admin — they can generate one for you from the admin panel. Codes expire after 24 hours.</p>
 
     <form id="reset-form" class="space-y-4">
       <div>

From a14cee87106c7da11ebd8d9b69ac28dbd34a5b74 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Tue, 14 Apr 2026 22:45:03 +0200
Subject: [PATCH 071/124] add architecture graph generator and docs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

scripts/gen_graph.py parses FastAPI routes, frontend fetch() calls,
component imports, and Python imports to auto-generate:
- docs/architecture.mmd: Mermaid diagram with API/Pages/Components/Python subgraphs
- docs/graph.html: standalone vis.js interactive graph (dark theme, group filters,
  search highlight, click-to-highlight connected nodes)

docs-proposal.md: proposal for a docs/ folder structure, API documentation strategy,
and tooling recommendations (plain markdown → MkDocs Material).
---
 docs-proposal.md      |  113 ++++
 docs/architecture.mmd |  274 +++++++++
 docs/graph.html       | 1358 +++++++++++++++++++++++++++++++++++++++++
 scripts/gen_graph.py  |  532 ++++++++++++++++
 4 files changed, 2277 insertions(+)
 create mode 100644 docs-proposal.md
 create mode 100644 docs/architecture.mmd
 create mode 100644 docs/graph.html
 create mode 100644 scripts/gen_graph.py

diff --git a/docs-proposal.md b/docs-proposal.md
new file mode 100644
index 0000000..bcfe977
--- /dev/null
+++ b/docs-proposal.md
@@ -0,0 +1,113 @@
+# Documentation proposal
+
+## Problem
+
+The project has no user-facing or developer-facing docs. Knowledge lives in `CLAUDE.md`
+(written for AI context, not humans), scattered inline comments, and the code itself.
+As the feature surface grows and more users join, we need:
+
+- A guide for **users** (how to upload, sync, edit, manage privacy)
+- A guide for **admins** (how to run an instance, manage users, reset passwords)
+- An **API reference** (what endpoints exist, what they expect, what they return)
+- A **developer guide** (how to run locally, architecture, how to contribute)
+
+---
+
+## Proposed structure
+
+```
+docs/
+  index.md              Overview and quick links
+  user-guide.md         End-user: upload, sync, edit, privacy, settings
+  admin-guide.md        Admin: deploy, init, invite users, reset passwords, rebuild
+  api.md                API reference (hand-written, augmented by OpenAPI)
+  architecture.md       BAS schema, data flow, shard model, federation
+  developer-guide.md    Local setup, how to run tests, how to contribute
+```
+
+`CLAUDE.md` stays as-is — it is AI context, not user docs. The two serve different
+audiences and should not be merged.
+
+---
+
+## API documentation strategy
+
+FastAPI auto-generates an OpenAPI 3.1 spec from the route decorators. It is already
+served at `/api/docs` (Swagger UI) and `/api/redoc` (ReDoc) when the server is running.
+Right now the auto-docs are sparse because:
+
+- Most endpoints return bare `JSONResponse` instead of typed Pydantic response models
+- Endpoint docstrings are minimal or absent
+- Request bodies are raw `request.json()` instead of Pydantic models
+
+### Recommended approach: two-layer docs
+
+**Layer 1 — machine-readable (OpenAPI, auto-generated)**
+
+Incrementally add Pydantic request/response models to the endpoints that matter most
+(auth, activity CRUD, admin actions). FastAPI will pick them up automatically and the
+Swagger UI becomes usable. No extra tooling needed.
+
+Priority endpoints to type first:
+- `POST /api/auth/login` / `logout` / `reset-password`
+- `POST /api/register`
+- `GET /api/me`
+- `GET|POST /api/activity/{id}`
+- `DELETE /api/activity/{id}`
+- `POST /api/admin/users/{handle}/reset-password-code`
+- `GET|POST /api/me/preferences` (once built)
+
+**Layer 2 — human-readable (`docs/api.md`)**
+
+A hand-written reference that groups endpoints by domain (auth, activities, admin,
+sync), explains the overall auth model (cookie-based, httpOnly), rate limiting, and
+covers things OpenAPI can't express well (SSE streams, error semantics, side effects
+like rebuild triggers).
+
+The OpenAPI spec and the hand-written doc are complementary, not duplicates:
+OpenAPI is precise and machine-readable; `api.md` gives context and explains *why*.
+
+---
+
+## Tooling options
+
+| Option | Pros | Cons |
+|--------|------|------|
+| Plain markdown in `docs/` | Zero tooling, lives in repo, renders on GitHub | No search, no versioning, no sidebar nav |
+| MkDocs + Material theme | Beautiful, search, auto-nav from folder structure, can embed OpenAPI via plugins | Needs Python dep + build step; another thing to deploy |
+| Docusaurus | Great for open-source projects, versioning, i18n | Node toolchain, heavier |
+| VitePress | Fast, Vite-based (already in the stack), markdown + Vue | Still a separate site to host |
+| Just the Swagger UI at `/api/docs` | Auto-generated, always up-to-date | Only covers the API, not user/admin/architecture |
+
+**Recommendation:** Start with plain markdown in `docs/` — no build step, always
+available, no new infrastructure. If the project goes public or the user base grows,
+migrate to MkDocs Material (one `mkdocs.yml` + `pip install mkdocs-material`).
+
+For the API specifically: enable the Swagger UI on the live server (currently it may
+be disabled in production) so admins can explore it directly at `/api/docs`.
+
+---
+
+## Enabling Swagger UI in production
+
+By default FastAPI serves `/docs` and `/redoc`. In `bincio serve`, the FastAPI app is
+created with:
+
+```python
+app = FastAPI(docs_url=None, redoc_url=None)  # check current value
+```
+
+For a private instance (auth-walled), it is safe to expose `/api/docs` — add a note
+in `admin-guide.md` that it exists. Alternatively, serve it only when an env var is set.
+
+---
+
+## Suggested first milestone
+
+1. Create `docs/` with `index.md`, `admin-guide.md`, `api.md`
+2. `admin-guide.md`: deploy, init, invite, password reset, rebuild, reset data
+3. `api.md`: auth endpoints + activity endpoints, hand-written
+4. Enable Swagger UI on the server (or at least document that it exists at `/api/docs`)
+5. Add Pydantic models to the 8 priority endpoints above
+
+Everything else (user guide, architecture, developer guide, MkDocs) is second milestone.
diff --git a/docs/architecture.mmd b/docs/architecture.mmd
new file mode 100644
index 0000000..83a64be
--- /dev/null
+++ b/docs/architecture.mmd
@@ -0,0 +1,274 @@
+graph LR
+
+  subgraph API
+    subgraph api_activity["activity"]
+      api__api_activity__activity_id_["GET /api/activity/{activity_id}"]
+      api__api_activity__activity_id_["POST /api/activity/{activity_id}"]
+      api__api_activity__activity_id_["DELETE /api/activity/{activity_id}"]
+      api__api_activity__activity_id__images["GET /api/activity/{activity_id}/images"]
+      api__api_activity__activity_id__images["POST /api/activity/{activity_id}/images"]
+      api__api_activity__activity_id__images__filename_["DELETE /api/activity/{activity_id}/images/{filename}"]
+    end
+    subgraph api_admin["admin"]
+      api__api_admin_users["GET /api/admin/users"]
+      api__api_admin_jobs["GET /api/admin/jobs"]
+      api__api_admin_disk["GET /api/admin/disk"]
+      api__api_admin_users__handle__reset_password_code["POST /api/admin/users/{handle}/reset-password-code"]
+      api__api_admin_users__handle__rebuild["POST /api/admin/users/{handle}/rebuild"]
+      api__api_admin_users__handle__activities["DELETE /api/admin/users/{handle}/activities"]
+    end
+    subgraph api_athlete["athlete"]
+      api__api_athlete["GET /api/athlete"]
+      api__api_athlete["POST /api/athlete"]
+    end
+    subgraph api_auth["auth"]
+      api__api_auth_login["POST /api/auth/login"]
+      api__api_auth_logout["POST /api/auth/logout"]
+      api__api_auth_reset_password["POST /api/auth/reset-password"]
+    end
+    subgraph api_feedback["feedback"]
+      api__api_feedback["POST /api/feedback"]
+    end
+    subgraph api_garmin["garmin"]
+      api__api_garmin_status["GET /api/garmin/status"]
+      api__api_garmin_connect["POST /api/garmin/connect"]
+      api__api_garmin_disconnect["POST /api/garmin/disconnect"]
+      api__api_garmin_sync_stream["GET /api/garmin/sync/stream"]
+    end
+    subgraph api_invites["invites"]
+      api__api_invites["GET /api/invites"]
+      api__api_invites["POST /api/invites"]
+    end
+    subgraph api_me["me"]
+      api__api_me["GET /api/me"]
+    end
+    subgraph api_register["register"]
+      api__api_register["POST /api/register"]
+    end
+    subgraph api_stats["stats"]
+      api__api_stats["GET /api/stats"]
+    end
+    subgraph api_strava["strava"]
+      api__api_strava_status["GET /api/strava/status"]
+      api__api_strava_reset["POST /api/strava/reset"]
+      api__api_strava_auth_url["GET /api/strava/auth-url"]
+      api__api_strava_callback["GET /api/strava/callback"]
+      api__api_strava_sync_stream["GET /api/strava/sync/stream"]
+      api__api_strava_sync["POST /api/strava/sync"]
+    end
+    subgraph api_upload["upload"]
+      api__api_upload["POST /api/upload"]
+      api__api_upload_strava_zip["POST /api/upload/strava-zip"]
+    end
+  end
+
+  subgraph Pages
+    site_src_pages_about_ca_index_astro["pages/about/ca/"]
+    site_src_pages_about_es_index_astro["pages/about/es/"]
+    site_src_pages_about_index_astro["pages/about/"]
+    site_src_pages_about_it_index_astro["pages/about/it/"]
+    site_src_pages_activity__id__astro["pages/activity/[id].astro"]
+    site_src_pages_activity_index_astro["pages/activity/"]
+    site_src_pages_activity_local_index_astro["pages/activity/local/"]
+    site_src_pages_admin_index_astro["pages/admin/"]
+    site_src_pages_athlete_index_astro["pages/athlete/"]
+    site_src_pages_community_index_astro["pages/community/"]
+    site_src_pages_convert_index_astro["pages/convert/"]
+    site_src_pages_feedback_index_astro["pages/feedback/"]
+    site_src_pages_index_astro["pages/"]
+    site_src_pages_invites_index_astro["pages/invites/"]
+    site_src_pages_login_index_astro["pages/login/"]
+    site_src_pages_record_index_astro["pages/record/"]
+    site_src_pages_register_index_astro["pages/register/"]
+    site_src_pages_reset_password_index_astro["pages/reset-password/"]
+    site_src_pages_stats_index_astro["pages/stats/"]
+    site_src_pages_u__handle__athlete_index_astro["pages/u/[handle]/athlete/"]
+    site_src_pages_u__handle__index_astro["pages/u/[handle]/"]
+    site_src_pages_u__handle__stats_index_astro["pages/u/[handle]/stats/"]
+  end
+
+  subgraph Components
+    site_src_components_ActivityCharts_svelte["components/ActivityCharts.svelte"]
+    site_src_components_ActivityDetail_svelte["components/ActivityDetail.svelte"]
+    site_src_components_ActivityDetailLoader_svelte["components/ActivityDetailLoader.svelte"]
+    site_src_components_ActivityFeed_svelte["components/ActivityFeed.svelte"]
+    site_src_components_ActivityMap_svelte["components/ActivityMap.svelte"]
+    site_src_components_AthleteDrawer_svelte["components/AthleteDrawer.svelte"]
+    site_src_components_AthleteView_svelte["components/AthleteView.svelte"]
+    site_src_components_CommunityView_svelte["components/CommunityView.svelte"]
+    site_src_components_EditDrawer_svelte["components/EditDrawer.svelte"]
+    site_src_components_LocalActivityDetail_svelte["components/LocalActivityDetail.svelte"]
+    site_src_components_MmpChart_svelte["components/MmpChart.svelte"]
+    site_src_components_RecordsView_svelte["components/RecordsView.svelte"]
+    site_src_components_StatsView_svelte["components/StatsView.svelte"]
+  end
+
+  subgraph Python
+    subgraph py_edit["edit"]
+      bincio_edit_cli_py["cli"]
+      bincio_edit_ops_py["ops"]
+      bincio_edit_server_py["server"]
+    end
+    subgraph py_extract["extract"]
+      bincio_extract_cli_py["cli"]
+      bincio_extract_config_py["config"]
+      bincio_extract_dedup_py["dedup"]
+      bincio_extract_garmin_api_py["garmin_api"]
+      bincio_extract_garmin_sync_py["garmin_sync"]
+      bincio_extract_ingest_py["ingest"]
+      bincio_extract_metrics_py["metrics"]
+      bincio_extract_models_py["models"]
+      bincio_extract_parsers_base_py["base"]
+      bincio_extract_parsers_factory_py["factory"]
+      bincio_extract_parsers_fit_py["fit"]
+      bincio_extract_parsers_gpx_py["gpx"]
+      bincio_extract_parsers_tcx_py["tcx"]
+      bincio_extract_simplify_py["simplify"]
+      bincio_extract_sport_py["sport"]
+      bincio_extract_strava_api_py["strava_api"]
+      bincio_extract_strava_csv_py["strava_csv"]
+      bincio_extract_strava_zip_py["strava_zip"]
+      bincio_extract_timeseries_py["timeseries"]
+      bincio_extract_writer_py["writer"]
+    end
+    subgraph py_import_["import_"]
+      bincio_import__cli_py["cli"]
+      bincio_import__strava_py["strava"]
+    end
+    subgraph py_render["render"]
+      bincio_render_cli_py["cli"]
+      bincio_render_merge_py["merge"]
+    end
+    subgraph py_root["root"]
+      bincio_cli_py["cli"]
+      bincio_dev_py["dev"]
+    end
+    subgraph py_serve["serve"]
+      bincio_serve_cli_py["cli"]
+      bincio_serve_db_py["db"]
+      bincio_serve_init_cmd_py["init_cmd"]
+      bincio_serve_server_py["server"]
+    end
+  end
+
+  site_src_components_EditDrawer_svelte -->|fetch| api__api_activity_
+  site_src_components_AthleteDrawer_svelte -->|fetch| api__api_athlete
+  site_src_components_AthleteView_svelte -->|fetch| api__api_athlete
+  site_src_components_AthleteView_svelte -->|fetch| api__api_athlete__
+  site_src_layouts_Base_astro -->|fetch| api__api_me
+  site_src_layouts_Base_astro -->|fetch| api__api_admin_jobs
+  site_src_layouts_Base_astro -->|fetch| api__api_auth_logout
+  site_src_layouts_Base_astro -->|fetch| api__api_admin_jobs__
+  site_src_layouts_Base_astro -->|fetch| api__api_auth_logout__
+  site_src_layouts_Base_astro -->|fetch| api__api_upload
+  site_src_layouts_Base_astro -->|fetch| api__api_strava_status
+  site_src_layouts_Base_astro -->|fetch| api__api_strava_auth_url
+  site_src_layouts_Base_astro -->|fetch| api__api_strava_sync_stream
+  site_src_layouts_Base_astro -->|fetch| api__api_strava_reset
+  site_src_layouts_Base_astro -->|fetch| api__api_upload_strava_zip
+  site_src_layouts_Base_astro -->|fetch| api__api_garmin_status
+  site_src_layouts_Base_astro -->|fetch| api__api_garmin_connect
+  site_src_layouts_Base_astro -->|fetch| api__api_garmin_sync_stream
+  site_src_layouts_Base_astro -->|fetch| api__api_garmin_disconnect
+  site_src_pages_admin_index_astro -->|fetch| api__api_admin_disk
+  site_src_pages_admin_index_astro -->|fetch| api__api_admin_users___h__rebuild
+  site_src_pages_admin_index_astro -->|fetch| api__api_admin_users___h__reset_password_code
+  site_src_pages_admin_index_astro -->|fetch| api__api_admin_users___pendingHandle__activities
+  site_src_pages_admin_index_astro -->|fetch| api__api_admin_disk__
+  site_src_pages_admin_index_astro -->|fetch| api__api_admin_users_
+  site_src_pages_about_index_astro -->|fetch| api__api_me
+  site_src_pages_about_index_astro -->|fetch| api__api_stats
+  site_src_pages_about_index_astro -->|fetch| api__api_stats___
+  site_src_pages_feedback_index_astro -->|fetch| api__api_feedback
+  site_src_pages_feedback_index_astro -->|fetch| api__api_me
+  site_src_pages_feedback_index_astro -->|fetch| api__api_feedback__
+  site_src_pages_feedback_index_astro -->|fetch| api__api_me__
+  site_src_pages_register_index_astro -->|fetch| api__api_register
+  site_src_pages_reset_password_index_astro -->|fetch| api__api_auth_reset_password
+  site_src_pages_invites_index_astro -->|fetch| api__api_invites
+  site_src_pages_invites_index_astro -->|fetch| api__api_invites__
+  site_src_pages_login_index_astro -->|fetch| api__api_auth_login
+  site_src_pages_convert_index_astro -->|fetch| api__api_import_bas
+  site_src_pages_about_it_index_astro -->|fetch| api__api_me
+  site_src_pages_about_it_index_astro -->|fetch| api__api_stats
+  site_src_pages_about_it_index_astro -->|fetch| api__api_stats___
+  site_src_pages_about_ca_index_astro -->|fetch| api__api_me
+  site_src_pages_about_ca_index_astro -->|fetch| api__api_stats
+  site_src_pages_about_ca_index_astro -->|fetch| api__api_stats___
+  site_src_pages_about_es_index_astro -->|fetch| api__api_me
+  site_src_pages_about_es_index_astro -->|fetch| api__api_stats
+  site_src_pages_about_es_index_astro -->|fetch| api__api_stats___
+  site_src_components_ActivityDetail_svelte --> site_src_components_ActivityMap_svelte
+  site_src_components_ActivityDetail_svelte --> site_src_components_ActivityCharts_svelte
+  site_src_components_ActivityDetail_svelte --> site_src_components_EditDrawer_svelte
+  site_src_components_ActivityDetailLoader_svelte --> site_src_components_ActivityDetail_svelte
+  site_src_components_AthleteView_svelte --> site_src_components_MmpChart_svelte
+  site_src_components_AthleteView_svelte --> site_src_components_RecordsView_svelte
+  site_src_components_AthleteView_svelte --> site_src_components_AthleteDrawer_svelte
+  site_src_components_LocalActivityDetail_svelte --> site_src_components_ActivityDetail_svelte
+  site_src_pages_index_astro --> site_src_components_ActivityFeed_svelte
+  site_src_pages_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_record_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_activity__id__astro --> site_src_components_ActivityDetail_svelte
+  site_src_pages_activity__id__astro --> site_src_layouts_Base_astro
+  site_src_pages_activity_index_astro --> site_src_components_ActivityDetailLoader_svelte
+  site_src_pages_activity_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_admin_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_about_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_feedback_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_register_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_reset_password_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_community_index_astro --> site_src_components_CommunityView_svelte
+  site_src_pages_community_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_invites_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_login_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_convert_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_activity_local_index_astro --> site_src_components_LocalActivityDetail_svelte
+  site_src_pages_activity_local_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_u__handle__index_astro --> site_src_components_ActivityFeed_svelte
+  site_src_pages_u__handle__index_astro --> site_src_layouts_Base_astro
+  site_src_pages_u__handle__athlete_index_astro --> site_src_components_AthleteView_svelte
+  site_src_pages_u__handle__athlete_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_u__handle__stats_index_astro --> site_src_components_StatsView_svelte
+  site_src_pages_u__handle__stats_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_about_it_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_about_ca_index_astro --> site_src_layouts_Base_astro
+  site_src_pages_about_es_index_astro --> site_src_layouts_Base_astro
+  bincio_cli_py --> bincio_import__cli_py
+  bincio_cli_py --> bincio_extract_cli_py
+  bincio_cli_py --> bincio_dev_py
+  bincio_cli_py --> bincio_edit_cli_py
+  bincio_cli_py --> bincio_serve_cli_py
+  bincio_cli_py --> bincio_render_cli_py
+  bincio_cli_py --> bincio_serve_init_cmd_py
+  bincio_import__strava_py --> bincio_extract_models_py
+  bincio_import__strava_py --> bincio_extract_sport_py
+  bincio_edit_server_py --> bincio_edit_ops_py
+  bincio_extract_simplify_py --> bincio_extract_models_py
+  bincio_extract_metrics_py --> bincio_extract_models_py
+  bincio_extract_ingest_py --> bincio_extract_models_py
+  bincio_extract_strava_api_py --> bincio_extract_models_py
+  bincio_extract_strava_api_py --> bincio_extract_sport_py
+  bincio_extract_cli_py --> bincio_extract_parsers_factory_py
+  bincio_extract_cli_py --> bincio_extract_config_py
+  bincio_extract_cli_py --> bincio_extract_dedup_py
+  bincio_extract_writer_py --> bincio_extract_models_py
+  bincio_extract_writer_py --> bincio_extract_metrics_py
+  bincio_extract_writer_py --> bincio_extract_timeseries_py
+  bincio_extract_writer_py --> bincio_extract_simplify_py
+  bincio_extract_timeseries_py --> bincio_extract_models_py
+  bincio_serve_server_py --> bincio_edit_ops_py
+  bincio_serve_server_py --> bincio_serve_db_py
+  bincio_extract_parsers_tcx_py --> bincio_extract_models_py
+  bincio_extract_parsers_tcx_py --> bincio_extract_sport_py
+  bincio_extract_parsers_fit_py --> bincio_extract_models_py
+  bincio_extract_parsers_fit_py --> bincio_extract_sport_py
+  bincio_extract_parsers_gpx_py --> bincio_extract_models_py
+  bincio_extract_parsers_gpx_py --> bincio_extract_parsers_base_py
+  bincio_extract_parsers_gpx_py --> bincio_extract_sport_py
+  bincio_extract_parsers_factory_py --> bincio_extract_models_py
+  bincio_extract_parsers_factory_py --> bincio_extract_parsers_gpx_py
+  bincio_extract_parsers_factory_py --> bincio_extract_parsers_base_py
+  bincio_extract_parsers_factory_py --> bincio_extract_parsers_fit_py
+  bincio_extract_parsers_factory_py --> bincio_extract_parsers_tcx_py
+  bincio_extract_parsers_base_py --> bincio_extract_models_py
\ No newline at end of file
diff --git a/docs/graph.html b/docs/graph.html
new file mode 100644
index 0000000..5962988
--- /dev/null
+++ b/docs/graph.html
@@ -0,0 +1,1358 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8" />
+<title>Bincio — architecture graph</title>
+<script src="https://unpkg.com/vis-network@9.1.9/standalone/umd/vis-network.min.js"></script>
+<style>
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  body { background: #0f172a; color: #e2e8f0; font-family: system-ui, sans-serif; height: 100vh; display: flex; flex-direction: column; }
+  #toolbar { display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; flex-shrink: 0; flex-wrap: wrap; }
+  #toolbar h1 { font-size: 14px; font-weight: 600; color: #94a3b8; margin-right: 8px; }
+  .filter-group { display: flex; gap: 6px; }
+  .filter-group label { display: flex; align-items: center; gap: 4px; font-size: 12px; cursor: pointer; padding: 3px 8px; border-radius: 4px; border: 1px solid #334155; }
+  .filter-group label:hover { background: #334155; }
+  .dot { width: 10px; height: 10px; border-radius: 50%; display: inline-block; }
+  #search { background: #0f172a; border: 1px solid #334155; color: #e2e8f0; padding: 4px 10px; border-radius: 6px; font-size: 12px; width: 180px; }
+  #search::placeholder { color: #475569; }
+  #info { margin-left: auto; font-size: 11px; color: #64748b; }
+  #graph { flex: 1; }
+  #tooltip { position: fixed; background: #1e293b; border: 1px solid #334155; border-radius: 6px; padding: 8px 12px; font-size: 12px; color: #e2e8f0; pointer-events: none; display: none; max-width: 320px; z-index: 100; }
+</style>
+</head>
+<body>
+<div id="toolbar">
+  <h1>Bincio architecture</h1>
+  <div class="filter-group">
+    <label><input type="checkbox" data-group="api" checked> <span class="dot" style="background:#f59e0b"></span> API endpoints</label>
+    <label><input type="checkbox" data-group="page" checked> <span class="dot" style="background:#3b82f6"></span> Pages</label>
+    <label><input type="checkbox" data-group="component" checked> <span class="dot" style="background:#8b5cf6"></span> Components</label>
+    <label><input type="checkbox" data-group="layout" checked> <span class="dot" style="background:#06b6d4"></span> Layouts</label>
+    <label><input type="checkbox" data-group="py_extract" checked> <span class="dot" style="background:#22c55e"></span> extract</label>
+    <label><input type="checkbox" data-group="py_render" checked> <span class="dot" style="background:#84cc16"></span> render</label>
+    <label><input type="checkbox" data-group="py_serve" checked> <span class="dot" style="background:#ef4444"></span> serve</label>
+    <label><input type="checkbox" data-group="py_edit" checked> <span class="dot" style="background:#f97316"></span> edit</label>
+  </div>
+  <input id="search" type="text" placeholder="Search nodes…" />
+  <span id="info"></span>
+</div>
+<div id="graph"></div>
+<div id="tooltip"></div>
+
+<script>
+const allNodes = [
+  {
+    "id": 0,
+    "label": "GET\n/api/me",
+    "group": "api",
+    "title": "GET /api/me  \u2192  me()"
+  },
+  {
+    "id": 1,
+    "label": "GET\n/api/stats",
+    "group": "api",
+    "title": "GET /api/stats  \u2192  stats()"
+  },
+  {
+    "id": 2,
+    "label": "POST\n/api/auth/login",
+    "group": "api",
+    "title": "POST /api/auth/login  \u2192  login()"
+  },
+  {
+    "id": 3,
+    "label": "POST\n/api/auth/logout",
+    "group": "api",
+    "title": "POST /api/auth/logout  \u2192  logout()"
+  },
+  {
+    "id": 4,
+    "label": "POST\n/api/auth/reset-password",
+    "group": "api",
+    "title": "POST /api/auth/reset-password  \u2192  reset_password()"
+  },
+  {
+    "id": 5,
+    "label": "POST\n/api/register",
+    "group": "api",
+    "title": "POST /api/register  \u2192  register()"
+  },
+  {
+    "id": 6,
+    "label": "GET\n/api/invites",
+    "group": "api",
+    "title": "GET /api/invites  \u2192  get_invites()"
+  },
+  {
+    "id": 7,
+    "label": "GET\n/api/admin/users",
+    "group": "api",
+    "title": "GET /api/admin/users  \u2192  admin_users()"
+  },
+  {
+    "id": 8,
+    "label": "GET\n/api/admin/jobs",
+    "group": "api",
+    "title": "GET /api/admin/jobs  \u2192  admin_jobs()"
+  },
+  {
+    "id": 9,
+    "label": "GET\n/api/admin/disk",
+    "group": "api",
+    "title": "GET /api/admin/disk  \u2192  admin_disk()"
+  },
+  {
+    "id": 10,
+    "label": "POST\n/api/admin/users/{handle}/reset-password-code",
+    "group": "api",
+    "title": "POST /api/admin/users/{handle}/reset-password-code  \u2192  admin_reset_password_code()"
+  },
+  {
+    "id": 11,
+    "label": "POST\n/api/admin/users/{handle}/rebuild",
+    "group": "api",
+    "title": "POST /api/admin/users/{handle}/rebuild  \u2192  admin_rebuild()"
+  },
+  {
+    "id": 12,
+    "label": "DELETE\n/api/admin/users/{handle}/activities",
+    "group": "api",
+    "title": "DELETE /api/admin/users/{handle}/activities  \u2192  admin_delete_activities()"
+  },
+  {
+    "id": 13,
+    "label": "GET\n/api/activity/{activity_id}",
+    "group": "api",
+    "title": "GET /api/activity/{activity_id}  \u2192  get_activity()"
+  },
+  {
+    "id": 14,
+    "label": "GET\n/api/activity/{activity_id}/images",
+    "group": "api",
+    "title": "GET /api/activity/{activity_id}/images  \u2192  list_images()"
+  },
+  {
+    "id": 15,
+    "label": "DELETE\n/api/activity/{activity_id}/images/{filename}",
+    "group": "api",
+    "title": "DELETE /api/activity/{activity_id}/images/{filename}  \u2192  delete_image()"
+  },
+  {
+    "id": 16,
+    "label": "GET\n/api/athlete",
+    "group": "api",
+    "title": "GET /api/athlete  \u2192  get_athlete()"
+  },
+  {
+    "id": 17,
+    "label": "POST\n/api/upload",
+    "group": "api",
+    "title": "POST /api/upload  \u2192  upload_activity()"
+  },
+  {
+    "id": 18,
+    "label": "POST\n/api/upload/strava-zip",
+    "group": "api",
+    "title": "POST /api/upload/strava-zip  \u2192  upload_strava_zip()"
+  },
+  {
+    "id": 19,
+    "label": "POST\n/api/feedback",
+    "group": "api",
+    "title": "POST /api/feedback  \u2192  submit_feedback()"
+  },
+  {
+    "id": 20,
+    "label": "GET\n/api/strava/status",
+    "group": "api",
+    "title": "GET /api/strava/status  \u2192  strava_status()"
+  },
+  {
+    "id": 21,
+    "label": "POST\n/api/strava/reset",
+    "group": "api",
+    "title": "POST /api/strava/reset  \u2192  strava_reset()"
+  },
+  {
+    "id": 22,
+    "label": "GET\n/api/strava/auth-url",
+    "group": "api",
+    "title": "GET /api/strava/auth-url  \u2192  strava_auth_url()"
+  },
+  {
+    "id": 23,
+    "label": "GET\n/api/strava/callback",
+    "group": "api",
+    "title": "GET /api/strava/callback  \u2192  strava_callback()"
+  },
+  {
+    "id": 24,
+    "label": "GET\n/api/strava/sync/stream",
+    "group": "api",
+    "title": "GET /api/strava/sync/stream  \u2192  serve_strava_sync_stream()"
+  },
+  {
+    "id": 25,
+    "label": "POST\n/api/strava/sync",
+    "group": "api",
+    "title": "POST /api/strava/sync  \u2192  serve_strava_sync()"
+  },
+  {
+    "id": 26,
+    "label": "GET\n/api/garmin/status",
+    "group": "api",
+    "title": "GET /api/garmin/status  \u2192  garmin_status()"
+  },
+  {
+    "id": 27,
+    "label": "POST\n/api/garmin/connect",
+    "group": "api",
+    "title": "POST /api/garmin/connect  \u2192  garmin_connect()"
+  },
+  {
+    "id": 28,
+    "label": "POST\n/api/garmin/disconnect",
+    "group": "api",
+    "title": "POST /api/garmin/disconnect  \u2192  garmin_disconnect()"
+  },
+  {
+    "id": 29,
+    "label": "GET\n/api/garmin/sync/stream",
+    "group": "api",
+    "title": "GET /api/garmin/sync/stream  \u2192  garmin_sync_stream()"
+  },
+  {
+    "id": 30,
+    "label": "EditDrawer.svelte",
+    "group": "component",
+    "title": "components/EditDrawer.svelte"
+  },
+  {
+    "id": 31,
+    "label": "CommunityView.svelte",
+    "group": "component",
+    "title": "components/CommunityView.svelte"
+  },
+  {
+    "id": 32,
+    "label": "ActivityFeed.svelte",
+    "group": "component",
+    "title": "components/ActivityFeed.svelte"
+  },
+  {
+    "id": 33,
+    "label": "MmpChart.svelte",
+    "group": "component",
+    "title": "components/MmpChart.svelte"
+  },
+  {
+    "id": 34,
+    "label": "ActivityDetail.svelte",
+    "group": "component",
+    "title": "components/ActivityDetail.svelte"
+  },
+  {
+    "id": 35,
+    "label": "ActivityDetailLoader.svelte",
+    "group": "component",
+    "title": "components/ActivityDetailLoader.svelte"
+  },
+  {
+    "id": 36,
+    "label": "StatsView.svelte",
+    "group": "component",
+    "title": "components/StatsView.svelte"
+  },
+  {
+    "id": 37,
+    "label": "RecordsView.svelte",
+    "group": "component",
+    "title": "components/RecordsView.svelte"
+  },
+  {
+    "id": 38,
+    "label": "AthleteDrawer.svelte",
+    "group": "component",
+    "title": "components/AthleteDrawer.svelte"
+  },
+  {
+    "id": 39,
+    "label": "ActivityCharts.svelte",
+    "group": "component",
+    "title": "components/ActivityCharts.svelte"
+  },
+  {
+    "id": 40,
+    "label": "AthleteView.svelte",
+    "group": "component",
+    "title": "components/AthleteView.svelte"
+  },
+  {
+    "id": 41,
+    "label": "ActivityMap.svelte",
+    "group": "component",
+    "title": "components/ActivityMap.svelte"
+  },
+  {
+    "id": 42,
+    "label": "LocalActivityDetail.svelte",
+    "group": "component",
+    "title": "components/LocalActivityDetail.svelte"
+  },
+  {
+    "id": 43,
+    "label": "Base.astro",
+    "group": "layout",
+    "title": "layouts/Base.astro"
+  },
+  {
+    "id": 44,
+    "label": "pages/",
+    "group": "page",
+    "title": "pages/"
+  },
+  {
+    "id": 45,
+    "label": "record/",
+    "group": "page",
+    "title": "pages/record/"
+  },
+  {
+    "id": 46,
+    "label": "[id].astro",
+    "group": "page",
+    "title": "pages/activity/[id].astro"
+  },
+  {
+    "id": 47,
+    "label": "activity/",
+    "group": "page",
+    "title": "pages/activity/"
+  },
+  {
+    "id": 48,
+    "label": "admin/",
+    "group": "page",
+    "title": "pages/admin/"
+  },
+  {
+    "id": 49,
+    "label": "about/",
+    "group": "page",
+    "title": "pages/about/"
+  },
+  {
+    "id": 50,
+    "label": "feedback/",
+    "group": "page",
+    "title": "pages/feedback/"
+  },
+  {
+    "id": 51,
+    "label": "register/",
+    "group": "page",
+    "title": "pages/register/"
+  },
+  {
+    "id": 52,
+    "label": "reset-password/",
+    "group": "page",
+    "title": "pages/reset-password/"
+  },
+  {
+    "id": 53,
+    "label": "community/",
+    "group": "page",
+    "title": "pages/community/"
+  },
+  {
+    "id": 54,
+    "label": "athlete/",
+    "group": "page",
+    "title": "pages/athlete/"
+  },
+  {
+    "id": 55,
+    "label": "invites/",
+    "group": "page",
+    "title": "pages/invites/"
+  },
+  {
+    "id": 56,
+    "label": "login/",
+    "group": "page",
+    "title": "pages/login/"
+  },
+  {
+    "id": 57,
+    "label": "stats/",
+    "group": "page",
+    "title": "pages/stats/"
+  },
+  {
+    "id": 58,
+    "label": "convert/",
+    "group": "page",
+    "title": "pages/convert/"
+  },
+  {
+    "id": 59,
+    "label": "local/",
+    "group": "page",
+    "title": "pages/activity/local/"
+  },
+  {
+    "id": 60,
+    "label": "[handle]/",
+    "group": "page",
+    "title": "pages/u/[handle]/"
+  },
+  {
+    "id": 61,
+    "label": "athlete/",
+    "group": "page",
+    "title": "pages/u/[handle]/athlete/"
+  },
+  {
+    "id": 62,
+    "label": "stats/",
+    "group": "page",
+    "title": "pages/u/[handle]/stats/"
+  },
+  {
+    "id": 63,
+    "label": "it/",
+    "group": "page",
+    "title": "pages/about/it/"
+  },
+  {
+    "id": 64,
+    "label": "ca/",
+    "group": "page",
+    "title": "pages/about/ca/"
+  },
+  {
+    "id": 65,
+    "label": "es/",
+    "group": "page",
+    "title": "pages/about/es/"
+  },
+  {
+    "id": 66,
+    "label": "cli",
+    "group": "py_root",
+    "title": "bincio/cli.py"
+  },
+  {
+    "id": 67,
+    "label": "dev",
+    "group": "py_root",
+    "title": "bincio/dev.py"
+  },
+  {
+    "id": 68,
+    "label": "merge",
+    "group": "py_render",
+    "title": "bincio/render/merge.py"
+  },
+  {
+    "id": 69,
+    "label": "cli",
+    "group": "py_render",
+    "title": "bincio/render/cli.py"
+  },
+  {
+    "id": 70,
+    "label": "strava",
+    "group": "py_import_",
+    "title": "bincio/import_/strava.py"
+  },
+  {
+    "id": 71,
+    "label": "cli",
+    "group": "py_import_",
+    "title": "bincio/import_/cli.py"
+  },
+  {
+    "id": 72,
+    "label": "server",
+    "group": "py_edit",
+    "title": "bincio/edit/server.py"
+  },
+  {
+    "id": 73,
+    "label": "ops",
+    "group": "py_edit",
+    "title": "bincio/edit/ops.py"
+  },
+  {
+    "id": 74,
+    "label": "cli",
+    "group": "py_edit",
+    "title": "bincio/edit/cli.py"
+  },
+  {
+    "id": 75,
+    "label": "strava_csv",
+    "group": "py_extract",
+    "title": "bincio/extract/strava_csv.py"
+  },
+  {
+    "id": 76,
+    "label": "simplify",
+    "group": "py_extract",
+    "title": "bincio/extract/simplify.py"
+  },
+  {
+    "id": 77,
+    "label": "metrics",
+    "group": "py_extract",
+    "title": "bincio/extract/metrics.py"
+  },
+  {
+    "id": 78,
+    "label": "ingest",
+    "group": "py_extract",
+    "title": "bincio/extract/ingest.py"
+  },
+  {
+    "id": 79,
+    "label": "strava_zip",
+    "group": "py_extract",
+    "title": "bincio/extract/strava_zip.py"
+  },
+  {
+    "id": 80,
+    "label": "strava_api",
+    "group": "py_extract",
+    "title": "bincio/extract/strava_api.py"
+  },
+  {
+    "id": 81,
+    "label": "config",
+    "group": "py_extract",
+    "title": "bincio/extract/config.py"
+  },
+  {
+    "id": 82,
+    "label": "models",
+    "group": "py_extract",
+    "title": "bincio/extract/models.py"
+  },
+  {
+    "id": 83,
+    "label": "cli",
+    "group": "py_extract",
+    "title": "bincio/extract/cli.py"
+  },
+  {
+    "id": 84,
+    "label": "dedup",
+    "group": "py_extract",
+    "title": "bincio/extract/dedup.py"
+  },
+  {
+    "id": 85,
+    "label": "sport",
+    "group": "py_extract",
+    "title": "bincio/extract/sport.py"
+  },
+  {
+    "id": 86,
+    "label": "garmin_api",
+    "group": "py_extract",
+    "title": "bincio/extract/garmin_api.py"
+  },
+  {
+    "id": 87,
+    "label": "writer",
+    "group": "py_extract",
+    "title": "bincio/extract/writer.py"
+  },
+  {
+    "id": 88,
+    "label": "garmin_sync",
+    "group": "py_extract",
+    "title": "bincio/extract/garmin_sync.py"
+  },
+  {
+    "id": 89,
+    "label": "timeseries",
+    "group": "py_extract",
+    "title": "bincio/extract/timeseries.py"
+  },
+  {
+    "id": 90,
+    "label": "db",
+    "group": "py_serve",
+    "title": "bincio/serve/db.py"
+  },
+  {
+    "id": 91,
+    "label": "server",
+    "group": "py_serve",
+    "title": "bincio/serve/server.py"
+  },
+  {
+    "id": 92,
+    "label": "init_cmd",
+    "group": "py_serve",
+    "title": "bincio/serve/init_cmd.py"
+  },
+  {
+    "id": 93,
+    "label": "cli",
+    "group": "py_serve",
+    "title": "bincio/serve/cli.py"
+  },
+  {
+    "id": 94,
+    "label": "tcx",
+    "group": "py_extract",
+    "title": "bincio/extract/parsers/tcx.py"
+  },
+  {
+    "id": 95,
+    "label": "fit",
+    "group": "py_extract",
+    "title": "bincio/extract/parsers/fit.py"
+  },
+  {
+    "id": 96,
+    "label": "gpx",
+    "group": "py_extract",
+    "title": "bincio/extract/parsers/gpx.py"
+  },
+  {
+    "id": 97,
+    "label": "factory",
+    "group": "py_extract",
+    "title": "bincio/extract/parsers/factory.py"
+  },
+  {
+    "id": 98,
+    "label": "base",
+    "group": "py_extract",
+    "title": "bincio/extract/parsers/base.py"
+  }
+];
+const allEdges = [
+  {
+    "from": 38,
+    "to": 16,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 40,
+    "to": 16,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 0,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 8,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 3,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 17,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 20,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 22,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 24,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 21,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 18,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 26,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 27,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 29,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 43,
+    "to": 28,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 48,
+    "to": 9,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 49,
+    "to": 0,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 49,
+    "to": 1,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 50,
+    "to": 19,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 50,
+    "to": 0,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 51,
+    "to": 5,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 52,
+    "to": 4,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 55,
+    "to": 6,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 56,
+    "to": 2,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 63,
+    "to": 0,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 63,
+    "to": 1,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 64,
+    "to": 0,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 64,
+    "to": 1,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 65,
+    "to": 0,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 65,
+    "to": 1,
+    "arrows": "to",
+    "label": "fetch"
+  },
+  {
+    "from": 34,
+    "to": 41,
+    "arrows": "to"
+  },
+  {
+    "from": 34,
+    "to": 39,
+    "arrows": "to"
+  },
+  {
+    "from": 34,
+    "to": 30,
+    "arrows": "to"
+  },
+  {
+    "from": 35,
+    "to": 34,
+    "arrows": "to"
+  },
+  {
+    "from": 40,
+    "to": 33,
+    "arrows": "to"
+  },
+  {
+    "from": 40,
+    "to": 37,
+    "arrows": "to"
+  },
+  {
+    "from": 40,
+    "to": 38,
+    "arrows": "to"
+  },
+  {
+    "from": 42,
+    "to": 34,
+    "arrows": "to"
+  },
+  {
+    "from": 44,
+    "to": 32,
+    "arrows": "to"
+  },
+  {
+    "from": 44,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 45,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 46,
+    "to": 34,
+    "arrows": "to"
+  },
+  {
+    "from": 46,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 47,
+    "to": 35,
+    "arrows": "to"
+  },
+  {
+    "from": 47,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 48,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 49,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 50,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 51,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 52,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 53,
+    "to": 31,
+    "arrows": "to"
+  },
+  {
+    "from": 53,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 55,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 56,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 58,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 59,
+    "to": 42,
+    "arrows": "to"
+  },
+  {
+    "from": 59,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 60,
+    "to": 32,
+    "arrows": "to"
+  },
+  {
+    "from": 60,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 61,
+    "to": 40,
+    "arrows": "to"
+  },
+  {
+    "from": 61,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 62,
+    "to": 36,
+    "arrows": "to"
+  },
+  {
+    "from": 62,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 63,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 64,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 65,
+    "to": 43,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 71,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 83,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 67,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 74,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 93,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 69,
+    "arrows": "to"
+  },
+  {
+    "from": 66,
+    "to": 92,
+    "arrows": "to"
+  },
+  {
+    "from": 70,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 70,
+    "to": 85,
+    "arrows": "to"
+  },
+  {
+    "from": 72,
+    "to": 73,
+    "arrows": "to"
+  },
+  {
+    "from": 76,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 77,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 78,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 80,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 80,
+    "to": 85,
+    "arrows": "to"
+  },
+  {
+    "from": 83,
+    "to": 97,
+    "arrows": "to"
+  },
+  {
+    "from": 83,
+    "to": 81,
+    "arrows": "to"
+  },
+  {
+    "from": 83,
+    "to": 84,
+    "arrows": "to"
+  },
+  {
+    "from": 87,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 87,
+    "to": 77,
+    "arrows": "to"
+  },
+  {
+    "from": 87,
+    "to": 89,
+    "arrows": "to"
+  },
+  {
+    "from": 87,
+    "to": 76,
+    "arrows": "to"
+  },
+  {
+    "from": 89,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 91,
+    "to": 73,
+    "arrows": "to"
+  },
+  {
+    "from": 91,
+    "to": 90,
+    "arrows": "to"
+  },
+  {
+    "from": 94,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 94,
+    "to": 85,
+    "arrows": "to"
+  },
+  {
+    "from": 95,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 95,
+    "to": 85,
+    "arrows": "to"
+  },
+  {
+    "from": 96,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 96,
+    "to": 98,
+    "arrows": "to"
+  },
+  {
+    "from": 96,
+    "to": 85,
+    "arrows": "to"
+  },
+  {
+    "from": 97,
+    "to": 82,
+    "arrows": "to"
+  },
+  {
+    "from": 97,
+    "to": 96,
+    "arrows": "to"
+  },
+  {
+    "from": 97,
+    "to": 98,
+    "arrows": "to"
+  },
+  {
+    "from": 97,
+    "to": 95,
+    "arrows": "to"
+  },
+  {
+    "from": 97,
+    "to": 94,
+    "arrows": "to"
+  },
+  {
+    "from": 98,
+    "to": 82,
+    "arrows": "to"
+  }
+];
+const groups   = {
+  "api": {
+    "color": {
+      "background": "#f59e0b",
+      "border": "#d97706"
+    },
+    "font": {
+      "color": "#000"
+    }
+  },
+  "page": {
+    "color": {
+      "background": "#3b82f6",
+      "border": "#2563eb"
+    },
+    "font": {
+      "color": "#fff"
+    }
+  },
+  "component": {
+    "color": {
+      "background": "#8b5cf6",
+      "border": "#7c3aed"
+    },
+    "font": {
+      "color": "#fff"
+    }
+  },
+  "layout": {
+    "color": {
+      "background": "#06b6d4",
+      "border": "#0891b2"
+    },
+    "font": {
+      "color": "#000"
+    }
+  },
+  "py_extract": {
+    "color": {
+      "background": "#22c55e",
+      "border": "#16a34a"
+    },
+    "font": {
+      "color": "#000"
+    }
+  },
+  "py_render": {
+    "color": {
+      "background": "#84cc16",
+      "border": "#65a30d"
+    },
+    "font": {
+      "color": "#000"
+    }
+  },
+  "py_serve": {
+    "color": {
+      "background": "#ef4444",
+      "border": "#dc2626"
+    },
+    "font": {
+      "color": "#fff"
+    }
+  },
+  "py_edit": {
+    "color": {
+      "background": "#f97316",
+      "border": "#ea580c"
+    },
+    "font": {
+      "color": "#fff"
+    }
+  },
+  "py_root": {
+    "color": {
+      "background": "#6b7280",
+      "border": "#4b5563"
+    },
+    "font": {
+      "color": "#fff"
+    }
+  }
+};
+
+const nodesDS = new vis.DataSet(allNodes);
+const edgesDS = new vis.DataSet(allEdges);
+
+const container = document.getElementById('graph');
+const options = {
+  nodes: {
+    shape: 'box',
+    borderWidth: 1,
+    font: { size: 11, face: 'monospace' },
+    margin: 6,
+  },
+  edges: {
+    smooth: { type: 'continuous' },
+    color: { color: '#334155', highlight: '#60a5fa' },
+    font: { size: 10, color: '#64748b', align: 'middle' },
+    width: 1,
+    selectionWidth: 2,
+  },
+  groups,
+  physics: {
+    solver: 'forceAtlas2Based',
+    forceAtlas2Based: { gravitationalConstant: -40, springLength: 120 },
+    stabilization: { iterations: 200 },
+  },
+  interaction: {
+    hover: true,
+    tooltipDelay: 100,
+    navigationButtons: true,
+    keyboard: true,
+  },
+};
+
+const network = new vis.Network(container, { nodes: nodesDS, edges: edgesDS }, options);
+
+// Info count
+document.getElementById('info').textContent =
+  `${allNodes.length} nodes · ${allEdges.length} edges`;
+
+// Tooltip on hover
+const tooltip = document.getElementById('tooltip');
+network.on('hoverNode', params => {
+  const node = nodesDS.get(params.node);
+  tooltip.textContent = node.title || node.label;
+  tooltip.style.display = 'block';
+});
+network.on('blurNode', () => { tooltip.style.display = 'none'; });
+document.addEventListener('mousemove', e => {
+  tooltip.style.left = (e.clientX + 14) + 'px';
+  tooltip.style.top  = (e.clientY + 14) + 'px';
+});
+
+// Highlight connected nodes on click
+network.on('click', params => {
+  if (!params.nodes.length) { network.unselectAll(); return; }
+  const nid = params.nodes[0];
+  const connected = network.getConnectedNodes(nid);
+  network.selectNodes([nid, ...connected]);
+});
+
+// Group visibility toggle
+document.querySelectorAll('[data-group]').forEach(cb => {
+  cb.addEventListener('change', () => {
+    const group = cb.dataset.group;
+    const hidden = !cb.checked;
+    const toUpdate = allNodes
+      .filter(n => n.group === group)
+      .map(n => ({ id: n.id, hidden }));
+    nodesDS.update(toUpdate);
+  });
+});
+
+// Search / highlight
+document.getElementById('search').addEventListener('input', e => {
+  const q = e.target.value.trim().toLowerCase();
+  if (!q) { nodesDS.update(allNodes.map(n => ({ id: n.id, opacity: 1 }))); return; }
+  const updates = allNodes.map(n => {
+    const match = (n.label + n.title).toLowerCase().includes(q);
+    return { id: n.id, opacity: match ? 1 : 0.15 };
+  });
+  nodesDS.update(updates);
+});
+</script>
+</body>
+</html>
diff --git a/scripts/gen_graph.py b/scripts/gen_graph.py
new file mode 100644
index 0000000..c96932c
--- /dev/null
+++ b/scripts/gen_graph.py
@@ -0,0 +1,532 @@
+#!/usr/bin/env python3
+"""Generate architecture graphs for the bincio codebase.
+
+Outputs:
+  docs/architecture.mmd   — Mermaid source (embeddable in markdown / GitHub)
+  docs/graph.html          — interactive vis.js graph (open in a browser)
+
+Usage:
+  uv run python scripts/gen_graph.py
+  # or just:
+  python scripts/gen_graph.py
+"""
+
+import json
+import re
+from pathlib import Path
+
+ROOT = Path(__file__).parent.parent
+SITE_SRC = ROOT / "site" / "src"
+DOCS = ROOT / "docs"
+DOCS.mkdir(exist_ok=True)
+
+# ── helpers ───────────────────────────────────────────────────────────────────
+
+def read(path: Path) -> str:
+    try:
+        return path.read_text(encoding="utf-8")
+    except Exception:
+        return ""
+
+
+def short(path: Path, base: Path) -> str:
+    """Return a short display label for a file path."""
+    try:
+        rel = path.relative_to(base)
+    except ValueError:
+        rel = path
+    parts = rel.parts
+    # Drop leading site/src/ or bincio/
+    if parts[:2] == ("site", "src"):
+        parts = parts[2:]
+    elif parts[:1] == ("bincio",):
+        parts = parts[1:]
+    name = "/".join(parts)
+    # Strip index.astro → parent dir
+    if name.endswith("/index.astro"):
+        name = name[: -len("/index.astro")] + "/"
+    return name
+
+
+# ── 1. API routes from server.py ──────────────────────────────────────────────
+
+def extract_routes(server_path: Path) -> list[dict]:
+    """Parse @app.{method}("/api/...") decorators."""
+    text = read(server_path)
+    routes = []
+    for m in re.finditer(
+        r'@app\.(get|post|put|patch|delete)\("(/api/[^"]+)"',
+        text,
+        re.MULTILINE,
+    ):
+        method, path = m.group(1).upper(), m.group(2)
+        # Find the function name on the next non-blank line
+        tail = text[m.end():]
+        fn_m = re.search(r"async def (\w+)", tail[:200])
+        fn = fn_m.group(1) if fn_m else "?"
+        routes.append({"method": method, "path": path, "fn": fn})
+    return routes
+
+
+# ── 2. Frontend → API edges ───────────────────────────────────────────────────
+
+_FETCH_RE = re.compile(r"""fetch\(\s*[`'"](/api/[^`'"]+)[`'"]""")
+_INTERP_RE = re.compile(r"""`[^`]*/api/([^`$\s{]+)""")  # template literals
+
+
+def extract_api_calls(file_path: Path) -> list[str]:
+    """Return all /api/... paths referenced by a frontend file."""
+    text = read(file_path)
+    found = []
+    for m in _FETCH_RE.finditer(text):
+        found.append(m.group(1).split("?")[0])  # strip query string
+    # Template literals: `/api/admin/users/${h}/rebuild` → /api/admin/users/{h}/rebuild
+    for m in _INTERP_RE.finditer(text):
+        raw = "/api/" + m.group(1)
+        normalised = re.sub(r"\$\{[^}]+\}", "{x}", raw)
+        found.append(normalised)
+    return found
+
+
+def normalise_route(path: str, routes: list[dict]) -> str | None:
+    """Match a raw path like /api/admin/users/brut/rebuild to a known route pattern."""
+    for r in routes:
+        pattern = re.sub(r"\{[^}]+\}", r"[^/]+", re.escape(r["path"])) + "$"
+        if re.match(pattern, path):
+            return r["path"]
+    return path  # keep as-is if not matched
+
+
+# ── 3. Component imports (Svelte / Astro) ─────────────────────────────────────
+
+_IMPORT_SVELTE_RE = re.compile(
+    r"""import\s+\w+\s+from\s+['"]([^'"]+\.svelte)['"]"""
+)
+_IMPORT_ASTRO_RE = re.compile(
+    r"""import\s+\w+\s+from\s+['"]([^'"]+\.astro)['"]"""
+)
+
+
+def extract_component_imports(file_path: Path) -> list[Path]:
+    text = read(file_path)
+    results = []
+    for pattern in (_IMPORT_SVELTE_RE, _IMPORT_ASTRO_RE):
+        for m in pattern.finditer(text):
+            ref = m.group(1)
+            target = (file_path.parent / ref).resolve()
+            if target.exists():
+                results.append(target)
+    return results
+
+
+# ── 4. Python module imports ──────────────────────────────────────────────────
+
+_PY_FROM_RE = re.compile(r"^from (bincio\.\S+) import", re.MULTILINE)
+_PY_IMP_RE  = re.compile(r"^import (bincio\.\S+)", re.MULTILINE)
+
+
+def extract_py_imports(file_path: Path, py_files: list[Path]) -> list[Path]:
+    text = read(file_path)
+    modules = set()
+    for m in _PY_FROM_RE.finditer(text):
+        modules.add(m.group(1))
+    for m in _PY_IMP_RE.finditer(text):
+        modules.add(m.group(1))
+
+    results = []
+    for mod in modules:
+        # bincio.serve.db → bincio/serve/db.py
+        candidate = ROOT / Path(*mod.split(".")).with_suffix(".py")
+        if candidate.exists() and candidate != file_path:
+            results.append(candidate)
+    return results
+
+
+# ── 5. Collect all data ───────────────────────────────────────────────────────
+
+def collect() -> dict:
+    server_path = ROOT / "bincio" / "serve" / "server.py"
+    routes = extract_routes(server_path)
+
+    # Frontend files
+    fe_files = list(SITE_SRC.rglob("*.svelte")) + list(SITE_SRC.rglob("*.astro"))
+
+    # Python files (bincio package only)
+    py_files = [
+        p for p in (ROOT / "bincio").rglob("*.py")
+        if "__pycache__" not in str(p) and p.name != "__init__.py"
+    ]
+
+    # --- edges: page/component → API endpoint
+    api_edges = []  # (source_file, route_path)
+    for f in fe_files:
+        calls = extract_api_calls(f)
+        for call in calls:
+            norm = normalise_route(call, routes)
+            api_edges.append((f, norm))
+
+    # --- edges: component imports
+    comp_edges = []  # (importer_file, imported_file)
+    for f in fe_files:
+        for dep in extract_component_imports(f):
+            comp_edges.append((f, dep))
+
+    # --- edges: python imports
+    py_edges = []  # (importer_file, imported_file)
+    for f in py_files:
+        for dep in extract_py_imports(f, py_files):
+            py_edges.append((f, dep))
+
+    return {
+        "routes": routes,
+        "fe_files": fe_files,
+        "py_files": py_files,
+        "api_edges": api_edges,
+        "comp_edges": comp_edges,
+        "py_edges": py_edges,
+    }
+
+
+# ── 6. Mermaid output ─────────────────────────────────────────────────────────
+
+def to_node_id(path: Path) -> str:
+    return re.sub(r"[^a-zA-Z0-9]", "_", str(path.relative_to(ROOT)))
+
+
+def write_mermaid(data: dict) -> Path:
+    lines = ["graph LR", ""]
+
+    routes = data["routes"]
+
+    # Subgraph: API endpoints grouped by domain
+    domains: dict[str, list[dict]] = {}
+    for r in routes:
+        parts = r["path"].strip("/").split("/")
+        domain = parts[1] if len(parts) > 1 else "other"
+        domains.setdefault(domain, []).append(r)
+
+    lines.append("  subgraph API")
+    for domain, rs in sorted(domains.items()):
+        lines.append(f"    subgraph api_{domain}[\"{domain}\"]")
+        for r in rs:
+            nid = "api_" + re.sub(r"[^a-zA-Z0-9]", "_", r["path"])
+            lines.append(f'      {nid}["{r["method"]} {r["path"]}"]')
+        lines.append("    end")
+    lines.append("  end")
+    lines.append("")
+
+    # Subgraph: pages
+    pages = [f for f in data["fe_files"] if "/pages/" in str(f)]
+    lines.append("  subgraph Pages")
+    for f in sorted(pages):
+        nid = to_node_id(f)
+        label = short(f, ROOT)
+        lines.append(f'    {nid}["{label}"]')
+    lines.append("  end")
+    lines.append("")
+
+    # Subgraph: components
+    comps = [f for f in data["fe_files"] if "/components/" in str(f)]
+    lines.append("  subgraph Components")
+    for f in sorted(comps):
+        nid = to_node_id(f)
+        label = short(f, ROOT)
+        lines.append(f'    {nid}["{label}"]')
+    lines.append("  end")
+    lines.append("")
+
+    # Subgraph: Python modules
+    py_groups: dict[str, list[Path]] = {}
+    for f in data["py_files"]:
+        rel = f.relative_to(ROOT / "bincio")
+        group = rel.parts[0] if len(rel.parts) > 1 else "root"
+        py_groups.setdefault(group, []).append(f)
+
+    lines.append("  subgraph Python")
+    for group, files in sorted(py_groups.items()):
+        lines.append(f'    subgraph py_{group}["{group}"]')
+        for f in sorted(files):
+            nid = to_node_id(f)
+            lines.append(f'      {nid}["{f.stem}"]')
+        lines.append("    end")
+    lines.append("  end")
+    lines.append("")
+
+    # Edges: page/component → API
+    seen = set()
+    for src, route_path in data["api_edges"]:
+        src_nid = to_node_id(src)
+        dst_nid = "api_" + re.sub(r"[^a-zA-Z0-9]", "_", route_path)
+        edge = f"  {src_nid} -->|fetch| {dst_nid}"
+        if edge not in seen:
+            lines.append(edge)
+            seen.add(edge)
+
+    # Edges: component imports
+    seen_comp = set()
+    for src, dst in data["comp_edges"]:
+        src_nid = to_node_id(src)
+        dst_nid = to_node_id(dst)
+        edge = f"  {src_nid} --> {dst_nid}"
+        if edge not in seen_comp:
+            lines.append(edge)
+            seen_comp.add(edge)
+
+    # Edges: python imports
+    seen_py = set()
+    for src, dst in data["py_edges"]:
+        src_nid = to_node_id(src)
+        dst_nid = to_node_id(dst)
+        edge = f"  {src_nid} --> {dst_nid}"
+        if edge not in seen_py:
+            lines.append(edge)
+            seen_py.add(edge)
+
+    out = DOCS / "architecture.mmd"
+    out.write_text("\n".join(lines), encoding="utf-8")
+    return out
+
+
+# ── 7. vis.js HTML output ─────────────────────────────────────────────────────
+
+def write_visjs(data: dict) -> Path:
+    nodes: list[dict] = []
+    edges: list[dict] = []
+    node_ids: dict[str, int] = {}
+
+    def add_node(key: str, label: str, group: str, title: str = "") -> int:
+        if key in node_ids:
+            return node_ids[key]
+        nid = len(nodes)
+        node_ids[key] = nid
+        nodes.append({"id": nid, "label": label, "group": group, "title": title or label})
+        return nid
+
+    def add_edge(src_key: str, dst_key: str, label: str = "") -> None:
+        if src_key not in node_ids or dst_key not in node_ids:
+            return
+        e: dict = {"from": node_ids[src_key], "to": node_ids[dst_key], "arrows": "to"}
+        if label:
+            e["label"] = label
+        edges.append(e)
+
+    # API endpoint nodes
+    for r in data["routes"]:
+        key = f"api:{r['path']}"
+        label = f"{r['method']}\n{r['path']}"
+        add_node(key, label, "api", f"{r['method']} {r['path']}  →  {r['fn']}()")
+
+    # Frontend file nodes
+    for f in data["fe_files"]:
+        key = str(f)
+        label = f.name.replace("/index.astro", "/").replace("index.astro", f.parent.name + "/")
+        is_page = "/pages/" in str(f)
+        is_layout = "/layouts/" in str(f)
+        group = "page" if is_page else ("layout" if is_layout else "component")
+        title = short(f, ROOT)
+        add_node(key, label, group, title)
+
+    # Python module nodes
+    for f in data["py_files"]:
+        key = str(f)
+        rel = f.relative_to(ROOT / "bincio")
+        group = "py_" + rel.parts[0] if len(rel.parts) > 1 else "py_root"
+        add_node(key, f.stem, group, str(f.relative_to(ROOT)))
+
+    # Edges: page/component → API
+    seen = set()
+    for src, route_path in data["api_edges"]:
+        src_key = str(src)
+        dst_key = f"api:{route_path}"
+        k = (src_key, dst_key)
+        if k not in seen:
+            seen.add(k)
+            add_edge(src_key, dst_key, "fetch")
+
+    # Edges: component imports
+    seen_comp = set()
+    for src, dst in data["comp_edges"]:
+        k = (str(src), str(dst))
+        if k not in seen_comp:
+            seen_comp.add(k)
+            add_edge(str(src), str(dst))
+
+    # Edges: python imports
+    seen_py = set()
+    for src, dst in data["py_edges"]:
+        k = (str(src), str(dst))
+        if k not in seen_py:
+            seen_py.add(k)
+            add_edge(str(src), str(dst))
+
+    # Group colours for legend
+    groups = {
+        "api":        {"color": {"background": "#f59e0b", "border": "#d97706"}, "font": {"color": "#000"}},
+        "page":       {"color": {"background": "#3b82f6", "border": "#2563eb"}, "font": {"color": "#fff"}},
+        "component":  {"color": {"background": "#8b5cf6", "border": "#7c3aed"}, "font": {"color": "#fff"}},
+        "layout":     {"color": {"background": "#06b6d4", "border": "#0891b2"}, "font": {"color": "#000"}},
+        "py_extract": {"color": {"background": "#22c55e", "border": "#16a34a"}, "font": {"color": "#000"}},
+        "py_render":  {"color": {"background": "#84cc16", "border": "#65a30d"}, "font": {"color": "#000"}},
+        "py_serve":   {"color": {"background": "#ef4444", "border": "#dc2626"}, "font": {"color": "#fff"}},
+        "py_edit":    {"color": {"background": "#f97316", "border": "#ea580c"}, "font": {"color": "#fff"}},
+        "py_root":    {"color": {"background": "#6b7280", "border": "#4b5563"}, "font": {"color": "#fff"}},
+    }
+
+    html = f"""<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8" />
+<title>Bincio — architecture graph</title>
+<script src="https://unpkg.com/vis-network@9.1.9/standalone/umd/vis-network.min.js"></script>
+<style>
+  * {{ box-sizing: border-box; margin: 0; padding: 0; }}
+  body {{ background: #0f172a; color: #e2e8f0; font-family: system-ui, sans-serif; height: 100vh; display: flex; flex-direction: column; }}
+  #toolbar {{ display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; flex-shrink: 0; flex-wrap: wrap; }}
+  #toolbar h1 {{ font-size: 14px; font-weight: 600; color: #94a3b8; margin-right: 8px; }}
+  .filter-group {{ display: flex; gap: 6px; }}
+  .filter-group label {{ display: flex; align-items: center; gap: 4px; font-size: 12px; cursor: pointer; padding: 3px 8px; border-radius: 4px; border: 1px solid #334155; }}
+  .filter-group label:hover {{ background: #334155; }}
+  .dot {{ width: 10px; height: 10px; border-radius: 50%; display: inline-block; }}
+  #search {{ background: #0f172a; border: 1px solid #334155; color: #e2e8f0; padding: 4px 10px; border-radius: 6px; font-size: 12px; width: 180px; }}
+  #search::placeholder {{ color: #475569; }}
+  #info {{ margin-left: auto; font-size: 11px; color: #64748b; }}
+  #graph {{ flex: 1; }}
+  #tooltip {{ position: fixed; background: #1e293b; border: 1px solid #334155; border-radius: 6px; padding: 8px 12px; font-size: 12px; color: #e2e8f0; pointer-events: none; display: none; max-width: 320px; z-index: 100; }}
+</style>
+</head>
+<body>
+<div id="toolbar">
+  <h1>Bincio architecture</h1>
+  <div class="filter-group">
+    <label><input type="checkbox" data-group="api" checked> <span class="dot" style="background:#f59e0b"></span> API endpoints</label>
+    <label><input type="checkbox" data-group="page" checked> <span class="dot" style="background:#3b82f6"></span> Pages</label>
+    <label><input type="checkbox" data-group="component" checked> <span class="dot" style="background:#8b5cf6"></span> Components</label>
+    <label><input type="checkbox" data-group="layout" checked> <span class="dot" style="background:#06b6d4"></span> Layouts</label>
+    <label><input type="checkbox" data-group="py_extract" checked> <span class="dot" style="background:#22c55e"></span> extract</label>
+    <label><input type="checkbox" data-group="py_render" checked> <span class="dot" style="background:#84cc16"></span> render</label>
+    <label><input type="checkbox" data-group="py_serve" checked> <span class="dot" style="background:#ef4444"></span> serve</label>
+    <label><input type="checkbox" data-group="py_edit" checked> <span class="dot" style="background:#f97316"></span> edit</label>
+  </div>
+  <input id="search" type="text" placeholder="Search nodes…" />
+  <span id="info"></span>
+</div>
+<div id="graph"></div>
+<div id="tooltip"></div>
+
+<script>
+const allNodes = {json.dumps(nodes, indent=2)};
+const allEdges = {json.dumps(edges, indent=2)};
+const groups   = {json.dumps(groups, indent=2)};
+
+const nodesDS = new vis.DataSet(allNodes);
+const edgesDS = new vis.DataSet(allEdges);
+
+const container = document.getElementById('graph');
+const options = {{
+  nodes: {{
+    shape: 'box',
+    borderWidth: 1,
+    font: {{ size: 11, face: 'monospace' }},
+    margin: 6,
+  }},
+  edges: {{
+    smooth: {{ type: 'continuous' }},
+    color: {{ color: '#334155', highlight: '#60a5fa' }},
+    font: {{ size: 10, color: '#64748b', align: 'middle' }},
+    width: 1,
+    selectionWidth: 2,
+  }},
+  groups,
+  physics: {{
+    solver: 'forceAtlas2Based',
+    forceAtlas2Based: {{ gravitationalConstant: -40, springLength: 120 }},
+    stabilization: {{ iterations: 200 }},
+  }},
+  interaction: {{
+    hover: true,
+    tooltipDelay: 100,
+    navigationButtons: true,
+    keyboard: true,
+  }},
+}};
+
+const network = new vis.Network(container, {{ nodes: nodesDS, edges: edgesDS }}, options);
+
+// Info count
+document.getElementById('info').textContent =
+  `${{allNodes.length}} nodes · ${{allEdges.length}} edges`;
+
+// Tooltip on hover
+const tooltip = document.getElementById('tooltip');
+network.on('hoverNode', params => {{
+  const node = nodesDS.get(params.node);
+  tooltip.textContent = node.title || node.label;
+  tooltip.style.display = 'block';
+}});
+network.on('blurNode', () => {{ tooltip.style.display = 'none'; }});
+document.addEventListener('mousemove', e => {{
+  tooltip.style.left = (e.clientX + 14) + 'px';
+  tooltip.style.top  = (e.clientY + 14) + 'px';
+}});
+
+// Highlight connected nodes on click
+network.on('click', params => {{
+  if (!params.nodes.length) {{ network.unselectAll(); return; }}
+  const nid = params.nodes[0];
+  const connected = network.getConnectedNodes(nid);
+  network.selectNodes([nid, ...connected]);
+}});
+
+// Group visibility toggle
+document.querySelectorAll('[data-group]').forEach(cb => {{
+  cb.addEventListener('change', () => {{
+    const group = cb.dataset.group;
+    const hidden = !cb.checked;
+    const toUpdate = allNodes
+      .filter(n => n.group === group)
+      .map(n => ({{ id: n.id, hidden }}));
+    nodesDS.update(toUpdate);
+  }});
+}});
+
+// Search / highlight
+document.getElementById('search').addEventListener('input', e => {{
+  const q = e.target.value.trim().toLowerCase();
+  if (!q) {{ nodesDS.update(allNodes.map(n => ({{ id: n.id, opacity: 1 }}))); return; }}
+  const updates = allNodes.map(n => {{
+    const match = (n.label + n.title).toLowerCase().includes(q);
+    return {{ id: n.id, opacity: match ? 1 : 0.15 }};
+  }});
+  nodesDS.update(updates);
+}});
+</script>
+</body>
+</html>
+"""
+
+    out = DOCS / "graph.html"
+    out.write_text(html, encoding="utf-8")
+    return out
+
+
+# ── main ──────────────────────────────────────────────────────────────────────
+
+if __name__ == "__main__":
+    print("Collecting codebase graph data…")
+    data = collect()
+
+    r = len(data["routes"])
+    f = len(data["fe_files"])
+    p = len(data["py_files"])
+    ae = len(data["api_edges"])
+    ce = len(data["comp_edges"])
+    pe = len(data["py_edges"])
+    print(f"  {r} API routes  |  {f} frontend files  |  {p} Python modules")
+    print(f"  {ae} API call edges  |  {ce} component import edges  |  {pe} Python import edges")
+
+    mmd = write_mermaid(data)
+    print(f"\nMermaid  → {mmd.relative_to(ROOT)}")
+
+    html = write_visjs(data)
+    print(f"vis.js   → {html.relative_to(ROOT)}")
+    print("\nOpen docs/graph.html in a browser to explore interactively.")

From fcc70a8d90eecaaa857ba96d95f87fbe936ccf9f Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Tue, 14 Apr 2026 22:48:37 +0200
Subject: [PATCH 072/124] fix graph.html: set explicit pixel height for vis.js
 container
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

vis.js requires a pixel-sized container — flex:1 is ignored.
Use position:fixed toolbar + JS-measured height for the graph div,
stored as window._network for resize handling.
---
 docs/graph.html      | 66 ++++++++++++++++++++++++++------------------
 scripts/gen_graph.py | 24 ++++++++++++----
 2 files changed, 57 insertions(+), 33 deletions(-)

diff --git a/docs/graph.html b/docs/graph.html
index 5962988..14c6d20 100644
--- a/docs/graph.html
+++ b/docs/graph.html
@@ -6,17 +6,17 @@
 <script src="https://unpkg.com/vis-network@9.1.9/standalone/umd/vis-network.min.js"></script>
 <style>
   * { box-sizing: border-box; margin: 0; padding: 0; }
-  body { background: #0f172a; color: #e2e8f0; font-family: system-ui, sans-serif; height: 100vh; display: flex; flex-direction: column; }
-  #toolbar { display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; flex-shrink: 0; flex-wrap: wrap; }
+  body { background: #0f172a; color: #e2e8f0; font-family: system-ui, sans-serif; overflow: hidden; }
+  #toolbar { position: fixed; top: 0; left: 0; right: 0; z-index: 10; display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; flex-wrap: wrap; }
   #toolbar h1 { font-size: 14px; font-weight: 600; color: #94a3b8; margin-right: 8px; }
-  .filter-group { display: flex; gap: 6px; }
+  .filter-group { display: flex; gap: 6px; flex-wrap: wrap; }
   .filter-group label { display: flex; align-items: center; gap: 4px; font-size: 12px; cursor: pointer; padding: 3px 8px; border-radius: 4px; border: 1px solid #334155; }
   .filter-group label:hover { background: #334155; }
-  .dot { width: 10px; height: 10px; border-radius: 50%; display: inline-block; }
+  .dot { width: 10px; height: 10px; border-radius: 50%; display: inline-block; flex-shrink: 0; }
   #search { background: #0f172a; border: 1px solid #334155; color: #e2e8f0; padding: 4px 10px; border-radius: 6px; font-size: 12px; width: 180px; }
   #search::placeholder { color: #475569; }
-  #info { margin-left: auto; font-size: 11px; color: #64748b; }
-  #graph { flex: 1; }
+  #info { margin-left: auto; font-size: 11px; color: #64748b; white-space: nowrap; }
+  #graph { position: fixed; left: 0; right: 0; bottom: 0; }
   #tooltip { position: fixed; background: #1e293b; border: 1px solid #334155; border-radius: 6px; padding: 8px 12px; font-size: 12px; color: #e2e8f0; pointer-events: none; display: none; max-width: 320px; z-index: 100; }
 </style>
 </head>
@@ -999,7 +999,7 @@ const allEdges = [
   },
   {
     "from": 66,
-    "to": 71,
+    "to": 74,
     "arrows": "to"
   },
   {
@@ -1009,12 +1009,7 @@ const allEdges = [
   },
   {
     "from": 66,
-    "to": 67,
-    "arrows": "to"
-  },
-  {
-    "from": 66,
-    "to": 74,
+    "to": 69,
     "arrows": "to"
   },
   {
@@ -1024,7 +1019,7 @@ const allEdges = [
   },
   {
     "from": 66,
-    "to": 69,
+    "to": 71,
     "arrows": "to"
   },
   {
@@ -1032,6 +1027,11 @@ const allEdges = [
     "to": 92,
     "arrows": "to"
   },
+  {
+    "from": 66,
+    "to": 67,
+    "arrows": "to"
+  },
   {
     "from": 70,
     "to": 82,
@@ -1089,12 +1089,12 @@ const allEdges = [
   },
   {
     "from": 87,
-    "to": 82,
+    "to": 77,
     "arrows": "to"
   },
   {
     "from": 87,
-    "to": 77,
+    "to": 76,
     "arrows": "to"
   },
   {
@@ -1104,7 +1104,7 @@ const allEdges = [
   },
   {
     "from": 87,
-    "to": 76,
+    "to": 82,
     "arrows": "to"
   },
   {
@@ -1114,12 +1114,12 @@ const allEdges = [
   },
   {
     "from": 91,
-    "to": 73,
+    "to": 90,
     "arrows": "to"
   },
   {
     "from": 91,
-    "to": 90,
+    "to": 73,
     "arrows": "to"
   },
   {
@@ -1142,6 +1142,11 @@ const allEdges = [
     "to": 85,
     "arrows": "to"
   },
+  {
+    "from": 96,
+    "to": 85,
+    "arrows": "to"
+  },
   {
     "from": 96,
     "to": 82,
@@ -1153,8 +1158,8 @@ const allEdges = [
     "arrows": "to"
   },
   {
-    "from": 96,
-    "to": 85,
+    "from": 97,
+    "to": 96,
     "arrows": "to"
   },
   {
@@ -1164,7 +1169,7 @@ const allEdges = [
   },
   {
     "from": 97,
-    "to": 96,
+    "to": 94,
     "arrows": "to"
   },
   {
@@ -1177,11 +1182,6 @@ const allEdges = [
     "to": 95,
     "arrows": "to"
   },
-  {
-    "from": 97,
-    "to": 94,
-    "arrows": "to"
-  },
   {
     "from": 98,
     "to": 82,
@@ -1272,6 +1272,17 @@ const groups   = {
   }
 };
 
+// Size the graph container to fill below the toolbar
+function sizeGraph() {
+  const tb = document.getElementById('toolbar');
+  const g  = document.getElementById('graph');
+  const h  = tb.getBoundingClientRect().height;
+  g.style.top    = h + 'px';
+  g.style.height = (window.innerHeight - h) + 'px';
+}
+sizeGraph();
+window.addEventListener('resize', () => { sizeGraph(); if (window._network) window._network.redraw(); });
+
 const nodesDS = new vis.DataSet(allNodes);
 const edgesDS = new vis.DataSet(allEdges);
 
@@ -1305,6 +1316,7 @@ const options = {
 };
 
 const network = new vis.Network(container, { nodes: nodesDS, edges: edgesDS }, options);
+window._network = network;
 
 // Info count
 document.getElementById('info').textContent =
diff --git a/scripts/gen_graph.py b/scripts/gen_graph.py
index c96932c..262d0ca 100644
--- a/scripts/gen_graph.py
+++ b/scripts/gen_graph.py
@@ -380,17 +380,17 @@ def write_visjs(data: dict) -> Path:
 <script src="https://unpkg.com/vis-network@9.1.9/standalone/umd/vis-network.min.js"></script>
 <style>
   * {{ box-sizing: border-box; margin: 0; padding: 0; }}
-  body {{ background: #0f172a; color: #e2e8f0; font-family: system-ui, sans-serif; height: 100vh; display: flex; flex-direction: column; }}
-  #toolbar {{ display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; flex-shrink: 0; flex-wrap: wrap; }}
+  body {{ background: #0f172a; color: #e2e8f0; font-family: system-ui, sans-serif; overflow: hidden; }}
+  #toolbar {{ position: fixed; top: 0; left: 0; right: 0; z-index: 10; display: flex; align-items: center; gap: 12px; padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; flex-wrap: wrap; }}
   #toolbar h1 {{ font-size: 14px; font-weight: 600; color: #94a3b8; margin-right: 8px; }}
-  .filter-group {{ display: flex; gap: 6px; }}
+  .filter-group {{ display: flex; gap: 6px; flex-wrap: wrap; }}
   .filter-group label {{ display: flex; align-items: center; gap: 4px; font-size: 12px; cursor: pointer; padding: 3px 8px; border-radius: 4px; border: 1px solid #334155; }}
   .filter-group label:hover {{ background: #334155; }}
-  .dot {{ width: 10px; height: 10px; border-radius: 50%; display: inline-block; }}
+  .dot {{ width: 10px; height: 10px; border-radius: 50%; display: inline-block; flex-shrink: 0; }}
   #search {{ background: #0f172a; border: 1px solid #334155; color: #e2e8f0; padding: 4px 10px; border-radius: 6px; font-size: 12px; width: 180px; }}
   #search::placeholder {{ color: #475569; }}
-  #info {{ margin-left: auto; font-size: 11px; color: #64748b; }}
-  #graph {{ flex: 1; }}
+  #info {{ margin-left: auto; font-size: 11px; color: #64748b; white-space: nowrap; }}
+  #graph {{ position: fixed; left: 0; right: 0; bottom: 0; }}
   #tooltip {{ position: fixed; background: #1e293b; border: 1px solid #334155; border-radius: 6px; padding: 8px 12px; font-size: 12px; color: #e2e8f0; pointer-events: none; display: none; max-width: 320px; z-index: 100; }}
 </style>
 </head>
@@ -418,6 +418,17 @@ const allNodes = {json.dumps(nodes, indent=2)};
 const allEdges = {json.dumps(edges, indent=2)};
 const groups   = {json.dumps(groups, indent=2)};
 
+// Size the graph container to fill below the toolbar
+function sizeGraph() {{
+  const tb = document.getElementById('toolbar');
+  const g  = document.getElementById('graph');
+  const h  = tb.getBoundingClientRect().height;
+  g.style.top    = h + 'px';
+  g.style.height = (window.innerHeight - h) + 'px';
+}}
+sizeGraph();
+window.addEventListener('resize', () => {{ sizeGraph(); if (window._network) window._network.redraw(); }});
+
 const nodesDS = new vis.DataSet(allNodes);
 const edgesDS = new vis.DataSet(allEdges);
 
@@ -451,6 +462,7 @@ const options = {{
 }};
 
 const network = new vis.Network(container, {{ nodes: nodesDS, edges: edgesDS }}, options);
+window._network = network;
 
 // Info count
 document.getElementById('info').textContent =

From 1e30f85bdc7498857cf1f7013d1d060e6554b953 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Tue, 14 Apr 2026 22:53:31 +0200
Subject: [PATCH 073/124] add structured logging and admin diagnostics to serve
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- bincio.serve logger wired into uvicorn output: rebuild steps, upload
  errors, strava-zip progress all now appear in the server log
- _trigger_rebuild: capture stdout/stderr, log errors instead of silently
  discarding; exceptions logged with traceback instead of swallowed
- upload handler: log per-file errors with traceback; include error detail
  in the SSE event sent back to the browser
- strava-zip handler: log imported/error counts on completion
- GET /api/admin/users/{handle}/diag: snapshot of a user's data dir
  (file counts, sizes, index activity counts, pending uploads)
- POST /api/admin/users/{handle}/rebuild-sync: blocking rebuild that
  returns full stdout/stderr — for debugging without SSH log access
- Admin page: Diag button per user opens a modal showing the diag JSON
---
 bincio/serve/cli.py              |   9 +-
 bincio/serve/server.py           | 184 ++++++++++++++++++++++++++++---
 site/src/pages/admin/index.astro |  43 +++++++-
 3 files changed, 216 insertions(+), 20 deletions(-)

diff --git a/bincio/serve/cli.py b/bincio/serve/cli.py
index 9825cc0..81b3c18 100644
--- a/bincio/serve/cli.py
+++ b/bincio/serve/cli.py
@@ -76,4 +76,11 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
         console.print(f"  Users: [dim]unlimited[/dim]")
     console.print()
 
-    uvicorn.run(srv.app, host=host, port=port, log_level="info")
+    log_config = uvicorn.config.LOGGING_CONFIG.copy()
+    # Make bincio.serve logger emit at INFO through uvicorn's handler
+    log_config["loggers"]["bincio.serve"] = {
+        "handlers": ["default"],
+        "level": "INFO",
+        "propagate": False,
+    }
+    uvicorn.run(srv.app, host=host, port=port, log_level="info", log_config=log_config)
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index c8ffe24..4e862bb 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -9,6 +9,7 @@ Run via `bincio serve` CLI command.
 from __future__ import annotations
 
 import json
+import logging
 import re
 import secrets
 import shutil
@@ -19,6 +20,8 @@ import uuid
 from pathlib import Path
 from typing import Any, Optional
 
+log = logging.getLogger("bincio.serve")
+
 from fastapi import Cookie, FastAPI, File, Form, HTTPException, Request, Response, UploadFile
 from fastapi.responses import RedirectResponse, StreamingResponse
 from fastapi.middleware.cors import CORSMiddleware
@@ -246,37 +249,52 @@ def _trigger_rebuild(handle: str) -> None:
                 # Fast: only update data, skip Astro build.
                 # Serialised with the same lock: merge_all wipes and recreates
                 # _merged/activities/ — concurrent runs would corrupt each other.
+                log.info("rebuild[%s]: merge-only (no webroot)", _handle)
                 with _rebuild_lock:
-                    subprocess.run(
+                    result = subprocess.run(
                         [uv, "run", "bincio", "render",
                          "--data-dir", _data_dir,
                          "--site-dir", _site_dir,
                          "--handle", _handle,
                          "--no-build"],
-                        stdout=subprocess.DEVNULL,
-                        stderr=subprocess.DEVNULL,
+                        capture_output=True,
+                        text=True,
                     )
+                    if result.returncode != 0:
+                        log.error("rebuild[%s]: merge failed (rc=%d):\n%s\n%s",
+                                  _handle, result.returncode, result.stdout, result.stderr)
+                    else:
+                        log.info("rebuild[%s]: merge done", _handle)
             else:
                 # Full build + rsync — serialised so concurrent uploads don't race
+                log.info("rebuild[%s]: full build + rsync to %s", _handle, _webroot)
                 with _rebuild_lock:
                     result = subprocess.run(
                         [uv, "run", "bincio", "render",
                          "--data-dir", _data_dir,
                          "--site-dir", _site_dir,
                          "--handle", _handle],
-                        stdout=subprocess.DEVNULL,
-                        stderr=subprocess.DEVNULL,
+                        capture_output=True,
+                        text=True,
                     )
-                    if result.returncode == 0:
-                        # Rsync built site to nginx webroot
-                        subprocess.run(
+                    if result.returncode != 0:
+                        log.error("rebuild[%s]: build failed (rc=%d):\n%s\n%s",
+                                  _handle, result.returncode, result.stdout, result.stderr)
+                    else:
+                        log.info("rebuild[%s]: build done, rsyncing", _handle)
+                        rsync = subprocess.run(
                             ["rsync", "-a", "--delete",
                              f"{_site_dir}/dist/", _webroot + "/"],
-                            stdout=subprocess.DEVNULL,
-                            stderr=subprocess.DEVNULL,
+                            capture_output=True,
+                            text=True,
                         )
+                        if rsync.returncode != 0:
+                            log.error("rebuild[%s]: rsync failed (rc=%d):\n%s\n%s",
+                                      _handle, rsync.returncode, rsync.stdout, rsync.stderr)
+                        else:
+                            log.info("rebuild[%s]: rsync done", _handle)
         except Exception:
-            pass  # rebuild failure must never affect the calling request
+            log.exception("rebuild[%s]: unexpected error", _handle)
 
     threading.Thread(target=_run, daemon=True).start()
 
@@ -551,6 +569,127 @@ async def admin_rebuild(
     return JSONResponse({"ok": True})
 
 
+@app.post("/api/admin/users/{handle}/rebuild-sync")
+async def admin_rebuild_sync(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Run merge+rebuild synchronously and return full output. Admin only.
+
+    Unlike /rebuild (fire-and-forget), this blocks until done and returns stdout/stderr.
+    Use for debugging when you need to see what went wrong.
+    """
+    _require_admin(bincio_session)
+    user_dir = _get_data_dir() / handle
+    if not user_dir.is_dir():
+        raise HTTPException(404, f"No data directory for user '{handle}'")
+    if site_dir is None:
+        raise HTTPException(503, "Server has no --site-dir configured; rebuild not available")
+
+    uv = shutil.which("uv") or str(Path.home() / ".local" / "bin" / "uv")
+    cmd = [uv, "run", "bincio", "render",
+           "--data-dir", str(data_dir),
+           "--site-dir", str(site_dir),
+           "--handle", handle,
+           "--no-build"]
+    if webroot:
+        cmd = [uv, "run", "bincio", "render",
+               "--data-dir", str(data_dir),
+               "--site-dir", str(site_dir),
+               "--handle", handle]
+
+    result = subprocess.run(cmd, capture_output=True, text=True, timeout=300)
+    resp: dict[str, Any] = {
+        "ok": result.returncode == 0,
+        "returncode": result.returncode,
+        "stdout": result.stdout,
+        "stderr": result.stderr,
+    }
+
+    if result.returncode == 0 and webroot:
+        rsync = subprocess.run(
+            ["rsync", "-a", "--delete", f"{site_dir}/dist/", str(webroot) + "/"],
+            capture_output=True, text=True, timeout=120,
+        )
+        resp["rsync_returncode"] = rsync.returncode
+        resp["rsync_stdout"] = rsync.stdout
+        resp["rsync_stderr"] = rsync.stderr
+        resp["ok"] = rsync.returncode == 0
+
+    return JSONResponse(resp)
+
+
+@app.get("/api/admin/users/{handle}/diag")
+async def admin_diag(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Return a diagnostic snapshot of a user's data directory. Admin only."""
+    _require_admin(bincio_session)
+    user_dir = _get_data_dir() / handle
+    if not user_dir.is_dir():
+        raise HTTPException(404, f"No data directory for user '{handle}'")
+
+    def _count(path: Path, glob: str = "*") -> int:
+        return sum(1 for f in path.glob(glob) if f.is_file()) if path.exists() else 0
+
+    def _size_mb(path: Path) -> float:
+        if not path.exists():
+            return 0.0
+        return sum(f.stat().st_size for f in path.rglob("*") if f.is_file()) / 1_048_576
+
+    activities_dir = user_dir / "activities"
+    merged_dir = user_dir / "_merged"
+    originals_dir = user_dir / "originals"
+    uploads_dir = user_dir / "_uploads"
+
+    merged_index = merged_dir / "index.json"
+    root_index = user_dir / "index.json"
+
+    merged_activity_count: int | None = None
+    if merged_index.exists():
+        try:
+            idx = json.loads(merged_index.read_text())
+            merged_activity_count = len(idx.get("activities", []))
+        except Exception:
+            merged_activity_count = -1
+
+    root_activity_count: int | None = None
+    if root_index.exists():
+        try:
+            idx = json.loads(root_index.read_text())
+            root_activity_count = len(idx.get("activities", []))
+        except Exception:
+            root_activity_count = -1
+
+    return JSONResponse({
+        "handle": handle,
+        "user_dir": str(user_dir),
+        "activities": {
+            "json_files": _count(activities_dir, "*.json"),
+            "geojson_files": _count(activities_dir, "*.geojson"),
+            "size_mb": round(_size_mb(activities_dir), 2),
+        },
+        "originals": {
+            "exists": originals_dir.exists(),
+            "size_mb": round(_size_mb(originals_dir), 2),
+            "strava_originals": _count(originals_dir / "strava", "*.json") if (originals_dir / "strava").exists() else 0,
+        },
+        "merged": {
+            "exists": merged_dir.exists(),
+            "activity_count_in_index": merged_activity_count,
+            "size_mb": round(_size_mb(merged_dir), 2),
+        },
+        "root_index": {
+            "exists": root_index.exists(),
+            "activity_count": root_activity_count,
+        },
+        "pending_uploads": _count(uploads_dir),
+        "dedup_cache_exists": (user_dir / ".bincio_cache.json").exists(),
+        "athlete_json_exists": (user_dir / "athlete.json").exists(),
+    })
+
+
 def _wipe_user_activities(user_dir: Path) -> int:
     """Delete all extracted activity files and caches for a user.
 
@@ -937,9 +1076,10 @@ async def upload_activity(
                 added += 1
                 any_added = True
                 yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'imported'})}\n\n"
-            except Exception:
+            except Exception as exc:
                 errors += 1
-                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error'})}\n\n"
+                log.error("upload[%s]: failed to process %s: %s", user.handle, name, exc, exc_info=True)
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'error', 'detail': str(exc)})}\n\n"
             finally:
                 if not kept:
                     staged.unlink(missing_ok=True)
@@ -999,18 +1139,32 @@ async def upload_strava_zip(
     from bincio.extract.strava_zip import strava_zip_iter
     from bincio.render.merge import merge_all
 
+    log.info("strava-zip[%s]: received %s, privacy=%s", user.handle, file.filename, privacy)
+
     def event_stream():
         any_imported = False
+        imported_count = 0
+        error_count = 0
         try:
             for event in strava_zip_iter(zip_path, dd, privacy=privacy):
                 yield f"data: {json.dumps(event)}\n\n"
-                if event.get("type") == "progress" and event.get("status") == "imported":
-                    any_imported = True
+                if event.get("type") == "progress":
+                    status = event.get("status")
+                    if status == "imported":
+                        any_imported = True
+                        imported_count += 1
+                    elif status == "error":
+                        error_count += 1
+                        log.warning("strava-zip[%s]: error on %s: %s",
+                                    user.handle, event.get("name"), event.get("detail", ""))
                 if event.get("type") == "done":
+                    log.info("strava-zip[%s]: done — imported=%d errors=%d",
+                             user.handle, imported_count, error_count)
                     if any_imported:
                         merge_all(dd)
                         _trigger_rebuild(user.handle)
         except Exception as exc:
+            log.error("strava-zip[%s]: fatal error: %s", user.handle, exc, exc_info=True)
             yield f"data: {json.dumps({'type': 'error', 'message': str(exc)})}\n\n"
         finally:
             zip_path.unlink(missing_ok=True)
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index 3a977ec..8f6502c 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -31,6 +31,15 @@ import Base from '../../layouts/Base.astro';
       </table>
     </div>
 
+    <!-- Diag modal -->
+    <dialog id="diag-dialog" class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-2xl w-full backdrop:bg-black/60">
+      <div class="flex items-center justify-between mb-4">
+        <h3 class="font-semibold text-sm">Data directory snapshot — <span id="diag-handle" class="text-zinc-400 font-mono"></span></h3>
+        <button id="diag-close" class="text-zinc-500 hover:text-zinc-200 text-xs px-2 py-1 rounded bg-zinc-800">Close</button>
+      </div>
+      <pre id="diag-output" class="text-xs font-mono bg-zinc-950 rounded p-4 overflow-auto max-h-96 text-green-300 whitespace-pre-wrap"></pre>
+    </dialog>
+
     <!-- Confirmation dialog -->
     <dialog id="confirm-dialog" class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-sm w-full backdrop:bg-black/60">
       <p class="text-sm text-zinc-300 mb-1">Reset all data for <strong id="confirm-handle" class="text-white"></strong>?</p>
@@ -44,10 +53,15 @@ import Base from '../../layouts/Base.astro';
 </Base>
 
 <script>
-  const overviewEl = document.getElementById('disk-overview')!;
-  const tbodyEl    = document.getElementById('user-list')!;
-  const dialog     = document.getElementById('confirm-dialog') as HTMLDialogElement;
-  const confirmH   = document.getElementById('confirm-handle')!;
+  const overviewEl  = document.getElementById('disk-overview')!;
+  const tbodyEl     = document.getElementById('user-list')!;
+  const dialog      = document.getElementById('confirm-dialog') as HTMLDialogElement;
+  const confirmH    = document.getElementById('confirm-handle')!;
+  const diagDialog  = document.getElementById('diag-dialog') as HTMLDialogElement;
+  const diagHandle  = document.getElementById('diag-handle')!;
+  const diagOutput  = document.getElementById('diag-output')!;
+  document.getElementById('diag-close')!.addEventListener('click', () => diagDialog.close());
+  diagDialog.addEventListener('click', e => { if (e.target === diagDialog) diagDialog.close(); });
   const confirmOk     = document.getElementById('confirm-ok')!;
   const confirmCancel = document.getElementById('confirm-cancel')!;
 
@@ -117,6 +131,11 @@ import Base from '../../layouts/Base.astro';
           <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.images_mb > 0 ? fmt(u.images_mb) : '—'}</td>
           <td class="px-4 py-3 text-right">
             <div class="flex gap-2 justify-end">
+              <button
+                class="diag-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
+                data-handle="${u.handle}"
+                title="Show diagnostic snapshot of this user's data directory"
+              >Diag</button>
               <button
                 class="rebuild-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
                 data-handle="${u.handle}"
@@ -138,6 +157,22 @@ import Base from '../../layouts/Base.astro';
       `;
     }).join('');
 
+    tbodyEl.querySelectorAll<HTMLButtonElement>('.diag-btn').forEach(btn => {
+      btn.addEventListener('click', async () => {
+        const h = btn.dataset.handle!;
+        diagHandle.textContent = h;
+        diagOutput.textContent = 'Loading…';
+        diagDialog.showModal();
+        try {
+          const r = await fetch(`/api/admin/users/${h}/diag`, { credentials: 'include' });
+          const d = await r.json();
+          diagOutput.textContent = JSON.stringify(d, null, 2);
+        } catch (err) {
+          diagOutput.textContent = String(err);
+        }
+      });
+    });
+
     tbodyEl.querySelectorAll<HTMLButtonElement>('.rebuild-btn').forEach(btn => {
       btn.addEventListener('click', async () => {
         const h = btn.dataset.handle!;

From 89b92397cf80c78ab4be0b91fd424c9aaadf30ba Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 08:08:57 +0200
Subject: [PATCH 074/124] add re-extract from Strava originals endpoint and
 improve diag

- POST /api/admin/users/{handle}/reextract-originals: reads stored
  originals/strava/*.json and re-runs strava_to_parsed + ingest_parsed
  without hitting the Strava API; streams SSE progress; calls merge_all
  and rebuild on completion
- GET /api/admin/users/{handle}/diag: now shows _merged/activities/
  file counts, a sample of filenames in activities/ (with symlink flag),
  and lists pending_files by name
- Admin page: Re-extract button per user with live SSE progress modal
---
 bincio/serve/server.py           | 102 ++++++++++++++++++++++++++++++-
 site/src/pages/admin/index.astro |  79 ++++++++++++++++++++++++
 2 files changed, 180 insertions(+), 1 deletion(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 4e862bb..2c19563 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -619,6 +619,82 @@ async def admin_rebuild_sync(
     return JSONResponse(resp)
 
 
+@app.post("/api/admin/users/{handle}/reextract-originals")
+async def admin_reextract_originals(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> StreamingResponse:
+    """Re-extract activities from stored Strava originals without hitting the API.
+
+    Reads each file in originals/strava/{id}.json (containing {"meta", "streams"}),
+    calls strava_to_parsed, and writes the activity JSON + GeoJSON.
+
+    Skips activities that already have a valid JSON file in activities/.
+    Streams SSE progress; call /rebuild after completion if no --webroot.
+
+    SSE events:
+      {"type": "progress", "n": N, "total": T, "name": "...", "status": "imported"|"skipped"|"error", "detail": "..."}
+      {"type": "done", "imported": N, "skipped": N, "errors": N}
+    """
+    _require_admin(bincio_session)
+    user_dir = _get_data_dir() / handle
+    originals_dir = user_dir / "originals" / "strava"
+    if not originals_dir.exists():
+        raise HTTPException(404, f"No Strava originals directory for '{handle}'")
+
+    original_files = sorted(originals_dir.glob("*.json"))
+    total = len(original_files)
+    log.info("reextract[%s]: starting, %d originals found", handle, total)
+
+    def event_stream():
+        from bincio.extract.strava_api import strava_to_parsed
+        from bincio.extract.ingest import ingest_parsed
+        from bincio.render.merge import merge_all
+
+        imported = 0
+        skipped = 0
+        errors = 0
+        any_imported = False
+
+        for n, orig_path in enumerate(original_files, 1):
+            try:
+                raw = json.loads(orig_path.read_text(encoding="utf-8"))
+                meta = raw.get("meta", {})
+                streams = raw.get("streams", {})
+                name = meta.get("name", orig_path.stem)
+
+                parsed = strava_to_parsed(meta, streams)
+
+                from bincio.extract.writer import make_activity_id
+                activity_id = make_activity_id(parsed)
+                if (user_dir / "activities" / f"{activity_id}.json").exists():
+                    skipped += 1
+                    yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': 'skipped'})}\n\n"
+                    continue
+
+                ingest_parsed(parsed, user_dir, privacy="public", rdp_epsilon=0.0001)
+                imported += 1
+                any_imported = True
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': 'imported'})}\n\n"
+            except Exception as exc:
+                errors += 1
+                log.error("reextract[%s]: failed on %s: %s", handle, orig_path.name, exc, exc_info=True)
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': orig_path.stem, 'status': 'error', 'detail': str(exc)})}\n\n"
+
+        log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d", handle, imported, skipped, errors)
+        if any_imported:
+            merge_all(user_dir)
+            _trigger_rebuild(handle)
+
+        yield f"data: {json.dumps({'type': 'done', 'imported': imported, 'skipped': skipped, 'errors': errors})}\n\n"
+
+    return StreamingResponse(
+        event_stream(),
+        media_type="text/event-stream",
+        headers={"Cache-Control": "no-cache", "X-Accel-Buffering": "no"},
+    )
+
+
 @app.get("/api/admin/users/{handle}/diag")
 async def admin_diag(
     handle: str,
@@ -662,6 +738,25 @@ async def admin_diag(
         except Exception:
             root_activity_count = -1
 
+    # Peek at a few filenames in activities/ to understand the actual state
+    acts_sample: list[str] = []
+    acts_symlinks = 0
+    if activities_dir.exists():
+        for f in sorted(activities_dir.iterdir())[:10]:
+            acts_sample.append(f.name + (" → symlink" if f.is_symlink() else ""))
+            if f.is_symlink():
+                acts_symlinks += 1
+
+    # Check _merged/activities/ separately
+    merged_acts_dir = merged_dir / "activities"
+    merged_acts_json = _count(merged_acts_dir, "*.json")
+    merged_acts_geojson = _count(merged_acts_dir, "*.geojson")
+
+    # List pending files
+    pending_files: list[str] = []
+    if uploads_dir.exists():
+        pending_files = [f.name for f in uploads_dir.iterdir() if f.is_file()]
+
     return JSONResponse({
         "handle": handle,
         "user_dir": str(user_dir),
@@ -669,6 +764,8 @@ async def admin_diag(
             "json_files": _count(activities_dir, "*.json"),
             "geojson_files": _count(activities_dir, "*.geojson"),
             "size_mb": round(_size_mb(activities_dir), 2),
+            "sample": acts_sample,
+            "symlink_count": acts_symlinks,
         },
         "originals": {
             "exists": originals_dir.exists(),
@@ -679,12 +776,15 @@ async def admin_diag(
             "exists": merged_dir.exists(),
             "activity_count_in_index": merged_activity_count,
             "size_mb": round(_size_mb(merged_dir), 2),
+            "activities_json": merged_acts_json,
+            "activities_geojson": merged_acts_geojson,
         },
         "root_index": {
             "exists": root_index.exists(),
             "activity_count": root_activity_count,
         },
-        "pending_uploads": _count(uploads_dir),
+        "pending_uploads": len(pending_files),
+        "pending_files": pending_files,
         "dedup_cache_exists": (user_dir / ".bincio_cache.json").exists(),
         "athlete_json_exists": (user_dir / "athlete.json").exists(),
     })
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index 8f6502c..827c6ac 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -31,6 +31,16 @@ import Base from '../../layouts/Base.astro';
       </table>
     </div>
 
+    <!-- Re-extract progress modal -->
+    <dialog id="reextract-dialog" class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-2xl w-full backdrop:bg-black/60">
+      <div class="flex items-center justify-between mb-4">
+        <h3 class="font-semibold text-sm">Re-extract from Strava originals — <span id="reextract-handle" class="text-zinc-400 font-mono"></span></h3>
+        <button id="reextract-close" class="text-zinc-500 hover:text-zinc-200 text-xs px-2 py-1 rounded bg-zinc-800" disabled>Close</button>
+      </div>
+      <div id="reextract-summary" class="text-xs text-zinc-400 mb-2"></div>
+      <div class="bg-zinc-950 rounded p-3 h-64 overflow-y-auto" id="reextract-log"></div>
+    </dialog>
+
     <!-- Diag modal -->
     <dialog id="diag-dialog" class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-2xl w-full backdrop:bg-black/60">
       <div class="flex items-center justify-between mb-4">
@@ -62,6 +72,13 @@ import Base from '../../layouts/Base.astro';
   const diagOutput  = document.getElementById('diag-output')!;
   document.getElementById('diag-close')!.addEventListener('click', () => diagDialog.close());
   diagDialog.addEventListener('click', e => { if (e.target === diagDialog) diagDialog.close(); });
+
+  const reextractDialog  = document.getElementById('reextract-dialog') as HTMLDialogElement;
+  const reextractHandle  = document.getElementById('reextract-handle')!;
+  const reextractSummary = document.getElementById('reextract-summary')!;
+  const reextractLog     = document.getElementById('reextract-log')!;
+  const reextractClose   = document.getElementById('reextract-close') as HTMLButtonElement;
+  reextractClose.addEventListener('click', () => { reextractDialog.close(); load(); });
   const confirmOk     = document.getElementById('confirm-ok')!;
   const confirmCancel = document.getElementById('confirm-cancel')!;
 
@@ -136,6 +153,11 @@ import Base from '../../layouts/Base.astro';
                 data-handle="${u.handle}"
                 title="Show diagnostic snapshot of this user's data directory"
               >Diag</button>
+              <button
+                class="reextract-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-amber-900 hover:text-amber-300 text-zinc-400 transition-colors"
+                data-handle="${u.handle}"
+                title="Re-extract activities from stored Strava originals (no API call)"
+              >Re-extract</button>
               <button
                 class="rebuild-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
                 data-handle="${u.handle}"
@@ -157,6 +179,63 @@ import Base from '../../layouts/Base.astro';
       `;
     }).join('');
 
+    tbodyEl.querySelectorAll<HTMLButtonElement>('.reextract-btn').forEach(btn => {
+      btn.addEventListener('click', async () => {
+        const h = btn.dataset.handle!;
+        reextractHandle.textContent = h;
+        reextractLog.innerHTML = '';
+        reextractSummary.textContent = 'Starting…';
+        reextractClose.disabled = true;
+        reextractDialog.showModal();
+
+        let imported = 0, skipped = 0, errors = 0;
+        try {
+          const es = new EventSource(`/api/admin/users/${h}/reextract-originals`);
+          // EventSource only does GET; use fetch + ReadableStream instead
+          es.close();
+
+          const r = await fetch(`/api/admin/users/${h}/reextract-originals`, {
+            method: 'POST', credentials: 'include',
+          });
+          const reader = r.body!.getReader();
+          const decoder = new TextDecoder();
+          let buf = '';
+          while (true) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            buf += decoder.decode(value, { stream: true });
+            const lines = buf.split('\n\n');
+            buf = lines.pop() ?? '';
+            for (const chunk of lines) {
+              const dataLine = chunk.split('\n').find(l => l.startsWith('data: '));
+              if (!dataLine) continue;
+              const ev = JSON.parse(dataLine.slice(6));
+              if (ev.type === 'progress') {
+                const color = ev.status === 'imported' ? 'text-green-400'
+                            : ev.status === 'error'    ? 'text-red-400'
+                            : 'text-zinc-500';
+                const line = document.createElement('div');
+                line.className = `text-xs font-mono ${color}`;
+                line.textContent = `[${ev.n}/${ev.total}] ${ev.status.padEnd(8)} ${ev.name}${ev.detail ? ' — ' + ev.detail : ''}`;
+                reextractLog.appendChild(line);
+                reextractLog.scrollTop = reextractLog.scrollHeight;
+                if (ev.status === 'imported') imported++;
+                else if (ev.status === 'error') errors++;
+                else skipped++;
+                reextractSummary.textContent = `Processing… ${ev.n}/${ev.total} — imported: ${imported}, skipped: ${skipped}, errors: ${errors}`;
+              } else if (ev.type === 'done') {
+                reextractSummary.textContent = `Done — imported: ${ev.imported}, skipped: ${ev.skipped}, errors: ${ev.errors}`;
+              }
+            }
+          }
+        } catch (err) {
+          reextractSummary.textContent = 'Error: ' + String(err);
+        } finally {
+          reextractClose.disabled = false;
+        }
+      });
+    });
+
     tbodyEl.querySelectorAll<HTMLButtonElement>('.diag-btn').forEach(btn => {
       btn.addEventListener('click', async () => {
         const h = btn.dataset.handle!;

From 378cba85adb1ba4929a97954facbf03eb88b978f Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 08:57:21 +0200
Subject: [PATCH 075/124] fix re-extract: add heartbeat yield, batch index
 writes, handle HTTP errors in UI
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Generator now yields a 'status' event immediately so the client can
  distinguish 'working' from 'failed silently before first event'
- Batch mode: call write_activity per file but write index.json and
  athlete.json only once at the end (was O(n²) — 2015 rewrites)
- JS: check r.ok before reading the body stream; show HTTP error detail
  instead of staying stuck at 'Starting…'
- Handle 'status' event type in the progress log
---
 bincio/serve/server.py           | 54 +++++++++++++++++++++++++++-----
 site/src/pages/admin/index.astro | 14 ++++++---
 2 files changed, 55 insertions(+), 13 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 2c19563..551021d 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -648,13 +648,43 @@ async def admin_reextract_originals(
 
     def event_stream():
         from bincio.extract.strava_api import strava_to_parsed
-        from bincio.extract.ingest import ingest_parsed
+        from bincio.extract.metrics import compute as compute_metrics
+        from bincio.extract.writer import (
+            build_summary, make_activity_id, write_activity,
+            write_index, write_athlete_json,
+        )
         from bincio.render.merge import merge_all
 
+        # Immediate heartbeat so the client knows the connection is alive
+        yield f"data: {json.dumps({'type': 'status', 'message': f'Found {total} originals, starting extraction…'})}\n\n"
+
         imported = 0
         skipped = 0
         errors = 0
-        any_imported = False
+
+        # Load existing index once upfront (to preserve any non-Strava activities)
+        index_path = user_dir / "index.json"
+        if index_path.exists():
+            try:
+                existing_index = json.loads(index_path.read_text(encoding="utf-8"))
+            except Exception:
+                existing_index = {}
+        else:
+            existing_index = {}
+
+        owner = existing_index.get("owner", {"handle": handle})
+        # Seed summaries from whatever already exists in activities/
+        summaries: dict[str, Any] = {s["id"]: s for s in existing_index.get("activities", [])}
+
+        _COMPUTED = {"bas_version", "generated_at", "power_curve", "records", "best_climbs"}
+        athlete_config: dict[str, Any] = {}
+        athlete_path = user_dir / "athlete.json"
+        if athlete_path.exists():
+            try:
+                existing_athlete = json.loads(athlete_path.read_text(encoding="utf-8"))
+                athlete_config = {k: v for k, v in existing_athlete.items() if k not in _COMPUTED}
+            except Exception:
+                pass
 
         for n, orig_path in enumerate(original_files, 1):
             try:
@@ -664,28 +694,36 @@ async def admin_reextract_originals(
                 name = meta.get("name", orig_path.stem)
 
                 parsed = strava_to_parsed(meta, streams)
-
-                from bincio.extract.writer import make_activity_id
                 activity_id = make_activity_id(parsed)
+
                 if (user_dir / "activities" / f"{activity_id}.json").exists():
                     skipped += 1
                     yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': 'skipped'})}\n\n"
                     continue
 
-                ingest_parsed(parsed, user_dir, privacy="public", rdp_epsilon=0.0001)
+                metrics = compute_metrics(parsed)
+                effective_privacy = parsed.privacy if parsed.privacy is not None else "public"
+                write_activity(parsed, metrics, user_dir, privacy=effective_privacy, rdp_epsilon=0.0001)
+                summary = build_summary(parsed, metrics, activity_id, effective_privacy)
+                summaries[activity_id] = summary
+
                 imported += 1
-                any_imported = True
                 yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': 'imported'})}\n\n"
             except Exception as exc:
                 errors += 1
                 log.error("reextract[%s]: failed on %s: %s", handle, orig_path.name, exc, exc_info=True)
                 yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': orig_path.stem, 'status': 'error', 'detail': str(exc)})}\n\n"
 
-        log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d", handle, imported, skipped, errors)
-        if any_imported:
+        # Write index and athlete.json once at the end (not once per activity)
+        if imported > 0:
+            yield f"data: {json.dumps({'type': 'status', 'message': 'Writing index and athlete data…'})}\n\n"
+            write_index(list(summaries.values()), user_dir, owner)
+            write_athlete_json(list(summaries.values()), user_dir, athlete_config)
+            yield f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n"
             merge_all(user_dir)
             _trigger_rebuild(handle)
 
+        log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d", handle, imported, skipped, errors)
         yield f"data: {json.dumps({'type': 'done', 'imported': imported, 'skipped': skipped, 'errors': errors})}\n\n"
 
     return StreamingResponse(
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index 827c6ac..bfa792d 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -190,13 +190,15 @@ import Base from '../../layouts/Base.astro';
 
         let imported = 0, skipped = 0, errors = 0;
         try {
-          const es = new EventSource(`/api/admin/users/${h}/reextract-originals`);
-          // EventSource only does GET; use fetch + ReadableStream instead
-          es.close();
-
           const r = await fetch(`/api/admin/users/${h}/reextract-originals`, {
             method: 'POST', credentials: 'include',
           });
+          if (!r.ok) {
+            const errText = await r.text().catch(() => r.status.toString());
+            reextractSummary.textContent = `Error ${r.status}: ${errText}`;
+            reextractClose.disabled = false;
+            return;
+          }
           const reader = r.body!.getReader();
           const decoder = new TextDecoder();
           let buf = '';
@@ -210,7 +212,9 @@ import Base from '../../layouts/Base.astro';
               const dataLine = chunk.split('\n').find(l => l.startsWith('data: '));
               if (!dataLine) continue;
               const ev = JSON.parse(dataLine.slice(6));
-              if (ev.type === 'progress') {
+              if (ev.type === 'status') {
+                reextractSummary.textContent = ev.message;
+              } else if (ev.type === 'progress') {
                 const color = ev.status === 'imported' ? 'text-green-400'
                             : ev.status === 'error'    ? 'text-red-400'
                             : 'text-zinc-500';

From 10dd1185b9d86945d7880e1fba62b64cf65159ed Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 09:05:29 +0200
Subject: [PATCH 076/124] fix reextract: async generator + run_in_executor,
 imports at endpoint level
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The sync generator was failing with a network error because Starlette's
iterate_in_threadpool doesn't properly propagate exceptions from sync
generators — the connection resets with no body.

Fix: convert event_stream to an async generator (Starlette handles these
natively without thread wrapping), move imports to the endpoint function
scope so failures raise HTTPException before the stream starts, and run
CPU-intensive work (parse + write) via loop.run_in_executor so the
async generator can actually yield between activities.
---
 bincio/serve/server.py | 90 +++++++++++++++++++++---------------------
 1 file changed, 46 insertions(+), 44 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 551021d..3bc665c 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -630,12 +630,9 @@ async def admin_reextract_originals(
     calls strava_to_parsed, and writes the activity JSON + GeoJSON.
 
     Skips activities that already have a valid JSON file in activities/.
-    Streams SSE progress; call /rebuild after completion if no --webroot.
-
-    SSE events:
-      {"type": "progress", "n": N, "total": T, "name": "...", "status": "imported"|"skipped"|"error", "detail": "..."}
-      {"type": "done", "imported": N, "skipped": N, "errors": N}
+    Streams SSE progress. Calls merge_all + rebuild on completion.
     """
+    import asyncio
     _require_admin(bincio_session)
     user_dir = _get_data_dir() / handle
     originals_dir = user_dir / "originals" / "strava"
@@ -646,34 +643,29 @@ async def admin_reextract_originals(
     total = len(original_files)
     log.info("reextract[%s]: starting, %d originals found", handle, total)
 
-    def event_stream():
-        from bincio.extract.strava_api import strava_to_parsed
-        from bincio.extract.metrics import compute as compute_metrics
-        from bincio.extract.writer import (
-            build_summary, make_activity_id, write_activity,
-            write_index, write_athlete_json,
-        )
-        from bincio.render.merge import merge_all
+    # Imports at endpoint level so failures are visible before the stream starts
+    from bincio.extract.strava_api import strava_to_parsed
+    from bincio.extract.metrics import compute as compute_metrics
+    from bincio.extract.writer import (
+        build_summary, make_activity_id, write_activity,
+        write_index, write_athlete_json,
+    )
+    from bincio.render.merge import merge_all
 
-        # Immediate heartbeat so the client knows the connection is alive
+    async def event_stream():
         yield f"data: {json.dumps({'type': 'status', 'message': f'Found {total} originals, starting extraction…'})}\n\n"
 
         imported = 0
         skipped = 0
         errors = 0
 
-        # Load existing index once upfront (to preserve any non-Strava activities)
         index_path = user_dir / "index.json"
-        if index_path.exists():
-            try:
-                existing_index = json.loads(index_path.read_text(encoding="utf-8"))
-            except Exception:
-                existing_index = {}
-        else:
+        try:
+            existing_index = json.loads(index_path.read_text(encoding="utf-8")) if index_path.exists() else {}
+        except Exception:
             existing_index = {}
 
         owner = existing_index.get("owner", {"handle": handle})
-        # Seed summaries from whatever already exists in activities/
         summaries: dict[str, Any] = {s["id"]: s for s in existing_index.get("activities", [])}
 
         _COMPUTED = {"bas_version", "generated_at", "power_curve", "records", "best_climbs"}
@@ -686,42 +678,52 @@ async def admin_reextract_originals(
             except Exception:
                 pass
 
+        loop = asyncio.get_event_loop()
+
         for n, orig_path in enumerate(original_files, 1):
             try:
-                raw = json.loads(orig_path.read_text(encoding="utf-8"))
-                meta = raw.get("meta", {})
-                streams = raw.get("streams", {})
-                name = meta.get("name", orig_path.stem)
+                # Run CPU-intensive parsing + file writing in a thread
+                def _process_one(op=orig_path):
+                    raw = json.loads(op.read_text(encoding="utf-8"))
+                    meta = raw.get("meta", {})
+                    streams = raw.get("streams", {})
+                    name = meta.get("name", op.stem)
+                    parsed = strava_to_parsed(meta, streams)
+                    activity_id = make_activity_id(parsed)
+                    if (user_dir / "activities" / f"{activity_id}.json").exists():
+                        return "skipped", name, activity_id, None
+                    metrics = compute_metrics(parsed)
+                    effective_privacy = parsed.privacy if parsed.privacy is not None else "public"
+                    write_activity(parsed, metrics, user_dir, privacy=effective_privacy, rdp_epsilon=0.0001)
+                    summary = build_summary(parsed, metrics, activity_id, effective_privacy)
+                    return "imported", name, activity_id, summary
 
-                parsed = strava_to_parsed(meta, streams)
-                activity_id = make_activity_id(parsed)
+                status, name, activity_id, summary = await loop.run_in_executor(None, _process_one)
 
-                if (user_dir / "activities" / f"{activity_id}.json").exists():
+                if status == "skipped":
                     skipped += 1
-                    yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': 'skipped'})}\n\n"
-                    continue
+                else:
+                    summaries[activity_id] = summary
+                    imported += 1
 
-                metrics = compute_metrics(parsed)
-                effective_privacy = parsed.privacy if parsed.privacy is not None else "public"
-                write_activity(parsed, metrics, user_dir, privacy=effective_privacy, rdp_epsilon=0.0001)
-                summary = build_summary(parsed, metrics, activity_id, effective_privacy)
-                summaries[activity_id] = summary
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': status})}\n\n"
 
-                imported += 1
-                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': 'imported'})}\n\n"
             except Exception as exc:
                 errors += 1
                 log.error("reextract[%s]: failed on %s: %s", handle, orig_path.name, exc, exc_info=True)
                 yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': orig_path.stem, 'status': 'error', 'detail': str(exc)})}\n\n"
 
-        # Write index and athlete.json once at the end (not once per activity)
         if imported > 0:
             yield f"data: {json.dumps({'type': 'status', 'message': 'Writing index and athlete data…'})}\n\n"
-            write_index(list(summaries.values()), user_dir, owner)
-            write_athlete_json(list(summaries.values()), user_dir, athlete_config)
-            yield f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n"
-            merge_all(user_dir)
-            _trigger_rebuild(handle)
+            try:
+                await loop.run_in_executor(None, lambda: write_index(list(summaries.values()), user_dir, owner))
+                await loop.run_in_executor(None, lambda: write_athlete_json(list(summaries.values()), user_dir, athlete_config))
+                yield f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n"
+                await loop.run_in_executor(None, lambda: merge_all(user_dir))
+                _trigger_rebuild(handle)
+            except Exception as exc:
+                log.exception("reextract[%s]: error in final write/merge", handle)
+                yield f"data: {json.dumps({'type': 'error', 'message': f'Final write failed: {exc}'})}\n\n"
 
         log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d", handle, imported, skipped, errors)
         yield f"data: {json.dumps({'type': 'done', 'imported': imported, 'skipped': skipped, 'errors': errors})}\n\n"

From b01b00698cbad90f47f883b1f7450572eb0b5df7 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 09:14:18 +0200
Subject: [PATCH 077/124] rewrite reextract with queue-based thread/async
 bridge

The per-call run_in_executor pattern caused network errors.
New approach: one thread runs the entire extraction loop and puts
SSE strings into an asyncio.Queue via call_soon_threadsafe; the
async generator drains the queue. This is the correct pattern for
background-thread + SSE streaming in FastAPI.
---
 bincio/serve/server.py | 108 +++++++++++++++++++++++------------------
 1 file changed, 62 insertions(+), 46 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 3bc665c..4310f00 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -643,28 +643,32 @@ async def admin_reextract_originals(
     total = len(original_files)
     log.info("reextract[%s]: starting, %d originals found", handle, total)
 
-    # Imports at endpoint level so failures are visible before the stream starts
-    from bincio.extract.strava_api import strava_to_parsed
-    from bincio.extract.metrics import compute as compute_metrics
-    from bincio.extract.writer import (
-        build_summary, make_activity_id, write_activity,
-        write_index, write_athlete_json,
-    )
-    from bincio.render.merge import merge_all
+    loop = asyncio.get_event_loop()
+    # Queue carries SSE event strings; None is the sentinel for "done"
+    q: asyncio.Queue[str | None] = asyncio.Queue()
 
-    async def event_stream():
-        yield f"data: {json.dumps({'type': 'status', 'message': f'Found {total} originals, starting extraction…'})}\n\n"
-
-        imported = 0
-        skipped = 0
-        errors = 0
+    def _run_extraction() -> None:
+        """Runs entirely in a thread pool worker. Puts SSE strings into q."""
+        try:
+            from bincio.extract.strava_api import strava_to_parsed
+            from bincio.extract.metrics import compute as compute_metrics
+            from bincio.extract.writer import (
+                build_summary, make_activity_id, write_activity,
+                write_index, write_athlete_json,
+            )
+            from bincio.render.merge import merge_all
+        except Exception as exc:
+            log.exception("reextract[%s]: import error", handle)
+            loop.call_soon_threadsafe(q.put_nowait,
+                f"data: {json.dumps({'type': 'error', 'message': f'Import error: {exc}'})}\n\n")
+            loop.call_soon_threadsafe(q.put_nowait, None)
+            return
 
         index_path = user_dir / "index.json"
         try:
             existing_index = json.loads(index_path.read_text(encoding="utf-8")) if index_path.exists() else {}
         except Exception:
             existing_index = {}
-
         owner = existing_index.get("owner", {"handle": handle})
         summaries: dict[str, Any] = {s["id"]: s for s in existing_index.get("activities", [])}
 
@@ -678,55 +682,67 @@ async def admin_reextract_originals(
             except Exception:
                 pass
 
-        loop = asyncio.get_event_loop()
+        imported = skipped = errors = 0
 
         for n, orig_path in enumerate(original_files, 1):
             try:
-                # Run CPU-intensive parsing + file writing in a thread
-                def _process_one(op=orig_path):
-                    raw = json.loads(op.read_text(encoding="utf-8"))
-                    meta = raw.get("meta", {})
-                    streams = raw.get("streams", {})
-                    name = meta.get("name", op.stem)
-                    parsed = strava_to_parsed(meta, streams)
-                    activity_id = make_activity_id(parsed)
-                    if (user_dir / "activities" / f"{activity_id}.json").exists():
-                        return "skipped", name, activity_id, None
-                    metrics = compute_metrics(parsed)
-                    effective_privacy = parsed.privacy if parsed.privacy is not None else "public"
-                    write_activity(parsed, metrics, user_dir, privacy=effective_privacy, rdp_epsilon=0.0001)
-                    summary = build_summary(parsed, metrics, activity_id, effective_privacy)
-                    return "imported", name, activity_id, summary
+                raw = json.loads(orig_path.read_text(encoding="utf-8"))
+                meta = raw.get("meta", {})
+                streams = raw.get("streams", {})
+                name = meta.get("name", orig_path.stem)
+                parsed = strava_to_parsed(meta, streams)
+                activity_id = make_activity_id(parsed)
 
-                status, name, activity_id, summary = await loop.run_in_executor(None, _process_one)
-
-                if status == "skipped":
+                if (user_dir / "activities" / f"{activity_id}.json").exists():
                     skipped += 1
+                    status = "skipped"
                 else:
-                    summaries[activity_id] = summary
+                    metrics = compute_metrics(parsed)
+                    ep = parsed.privacy if parsed.privacy is not None else "public"
+                    write_activity(parsed, metrics, user_dir, privacy=ep, rdp_epsilon=0.0001)
+                    summaries[activity_id] = build_summary(parsed, metrics, activity_id, ep)
                     imported += 1
+                    status = "imported"
 
-                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': status})}\n\n"
-
+                loop.call_soon_threadsafe(q.put_nowait,
+                    f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': status})}\n\n")
             except Exception as exc:
                 errors += 1
                 log.error("reextract[%s]: failed on %s: %s", handle, orig_path.name, exc, exc_info=True)
-                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': orig_path.stem, 'status': 'error', 'detail': str(exc)})}\n\n"
+                loop.call_soon_threadsafe(q.put_nowait,
+                    f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': orig_path.stem, 'status': 'error', 'detail': str(exc)})}\n\n")
 
         if imported > 0:
-            yield f"data: {json.dumps({'type': 'status', 'message': 'Writing index and athlete data…'})}\n\n"
+            loop.call_soon_threadsafe(q.put_nowait,
+                f"data: {json.dumps({'type': 'status', 'message': 'Writing index and athlete data…'})}\n\n")
             try:
-                await loop.run_in_executor(None, lambda: write_index(list(summaries.values()), user_dir, owner))
-                await loop.run_in_executor(None, lambda: write_athlete_json(list(summaries.values()), user_dir, athlete_config))
-                yield f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n"
-                await loop.run_in_executor(None, lambda: merge_all(user_dir))
+                write_index(list(summaries.values()), user_dir, owner)
+                write_athlete_json(list(summaries.values()), user_dir, athlete_config)
+                loop.call_soon_threadsafe(q.put_nowait,
+                    f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n")
+                merge_all(user_dir)
                 _trigger_rebuild(handle)
             except Exception as exc:
                 log.exception("reextract[%s]: error in final write/merge", handle)
-                yield f"data: {json.dumps({'type': 'error', 'message': f'Final write failed: {exc}'})}\n\n"
+                loop.call_soon_threadsafe(q.put_nowait,
+                    f"data: {json.dumps({'type': 'error', 'message': f'Final write failed: {exc}'})}\n\n")
 
-        log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d", handle, imported, skipped, errors)
-        yield f"data: {json.dumps({'type': 'done', 'imported': imported, 'skipped': skipped, 'errors': errors})}\n\n"
+        log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d",
+                 handle, imported, skipped, errors)
+        loop.call_soon_threadsafe(q.put_nowait,
+            f"data: {json.dumps({'type': 'done', 'imported': imported, 'skipped': skipped, 'errors': errors})}\n\n")
+        loop.call_soon_threadsafe(q.put_nowait, None)  # sentinel
+
+    async def event_stream():
+        yield f"data: {json.dumps({'type': 'status', 'message': f'Found {total} originals, starting extraction…'})}\n\n"
+        # Kick off the extraction thread
+        loop.run_in_executor(None, _run_extraction)
+        # Drain the queue until sentinel
+        while True:
+            chunk = await q.get()
+            if chunk is None:
+                break
+            yield chunk
 
     return StreamingResponse(
         event_stream(),

From 6890892654b99fbcee785d219aa92092b9b3a499 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 09:30:22 +0200
Subject: [PATCH 078/124] trying to fix building of activities that fails
 because of OOM

---
 bincio/serve/server.py   |  5 ++---
 docs/architecture.mmd    | 20 ++++++++++----------
 scripts/pull_feedback.sh | 22 ++++++++++++++++++++++
 3 files changed, 34 insertions(+), 13 deletions(-)
 create mode 100755 scripts/pull_feedback.sh

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 4310f00..bd6420f 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -654,7 +654,7 @@ async def admin_reextract_originals(
             from bincio.extract.metrics import compute as compute_metrics
             from bincio.extract.writer import (
                 build_summary, make_activity_id, write_activity,
-                write_index, write_athlete_json,
+                write_index,
             )
             from bincio.render.merge import merge_all
         except Exception as exc:
@@ -714,10 +714,9 @@ async def admin_reextract_originals(
 
         if imported > 0:
             loop.call_soon_threadsafe(q.put_nowait,
-                f"data: {json.dumps({'type': 'status', 'message': 'Writing index and athlete data…'})}\n\n")
+                f"data: {json.dumps({'type': 'status', 'message': 'Writing index…'})}\n\n")
             try:
                 write_index(list(summaries.values()), user_dir, owner)
-                write_athlete_json(list(summaries.values()), user_dir, athlete_config)
                 loop.call_soon_threadsafe(q.put_nowait,
                     f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n")
                 merge_all(user_dir)
diff --git a/docs/architecture.mmd b/docs/architecture.mmd
index 83a64be..4abca73 100644
--- a/docs/architecture.mmd
+++ b/docs/architecture.mmd
@@ -234,13 +234,13 @@ graph LR
   site_src_pages_about_it_index_astro --> site_src_layouts_Base_astro
   site_src_pages_about_ca_index_astro --> site_src_layouts_Base_astro
   site_src_pages_about_es_index_astro --> site_src_layouts_Base_astro
-  bincio_cli_py --> bincio_import__cli_py
-  bincio_cli_py --> bincio_extract_cli_py
-  bincio_cli_py --> bincio_dev_py
   bincio_cli_py --> bincio_edit_cli_py
-  bincio_cli_py --> bincio_serve_cli_py
+  bincio_cli_py --> bincio_extract_cli_py
   bincio_cli_py --> bincio_render_cli_py
+  bincio_cli_py --> bincio_serve_cli_py
+  bincio_cli_py --> bincio_import__cli_py
   bincio_cli_py --> bincio_serve_init_cmd_py
+  bincio_cli_py --> bincio_dev_py
   bincio_import__strava_py --> bincio_extract_models_py
   bincio_import__strava_py --> bincio_extract_sport_py
   bincio_edit_server_py --> bincio_edit_ops_py
@@ -252,23 +252,23 @@ graph LR
   bincio_extract_cli_py --> bincio_extract_parsers_factory_py
   bincio_extract_cli_py --> bincio_extract_config_py
   bincio_extract_cli_py --> bincio_extract_dedup_py
-  bincio_extract_writer_py --> bincio_extract_models_py
   bincio_extract_writer_py --> bincio_extract_metrics_py
-  bincio_extract_writer_py --> bincio_extract_timeseries_py
   bincio_extract_writer_py --> bincio_extract_simplify_py
+  bincio_extract_writer_py --> bincio_extract_timeseries_py
+  bincio_extract_writer_py --> bincio_extract_models_py
   bincio_extract_timeseries_py --> bincio_extract_models_py
-  bincio_serve_server_py --> bincio_edit_ops_py
   bincio_serve_server_py --> bincio_serve_db_py
+  bincio_serve_server_py --> bincio_edit_ops_py
   bincio_extract_parsers_tcx_py --> bincio_extract_models_py
   bincio_extract_parsers_tcx_py --> bincio_extract_sport_py
   bincio_extract_parsers_fit_py --> bincio_extract_models_py
   bincio_extract_parsers_fit_py --> bincio_extract_sport_py
+  bincio_extract_parsers_gpx_py --> bincio_extract_sport_py
   bincio_extract_parsers_gpx_py --> bincio_extract_models_py
   bincio_extract_parsers_gpx_py --> bincio_extract_parsers_base_py
-  bincio_extract_parsers_gpx_py --> bincio_extract_sport_py
-  bincio_extract_parsers_factory_py --> bincio_extract_models_py
   bincio_extract_parsers_factory_py --> bincio_extract_parsers_gpx_py
+  bincio_extract_parsers_factory_py --> bincio_extract_models_py
+  bincio_extract_parsers_factory_py --> bincio_extract_parsers_tcx_py
   bincio_extract_parsers_factory_py --> bincio_extract_parsers_base_py
   bincio_extract_parsers_factory_py --> bincio_extract_parsers_fit_py
-  bincio_extract_parsers_factory_py --> bincio_extract_parsers_tcx_py
   bincio_extract_parsers_base_py --> bincio_extract_models_py
\ No newline at end of file
diff --git a/scripts/pull_feedback.sh b/scripts/pull_feedback.sh
new file mode 100755
index 0000000..c0866fb
--- /dev/null
+++ b/scripts/pull_feedback.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+# Pull user feedback from the VPS into ./feedback/ locally.
+# Usage: bash scripts/pull_feedback.sh [vps-host]   (default: root@95.216.55.151)
+
+set -e
+VPS=${1:-root@95.216.55.151}
+REMOTE=/var/bincio/data/_feedback
+LOCAL=$(dirname "$0")/../feedback
+
+mkdir -p "$LOCAL"
+
+echo "Syncing feedback from $VPS:$REMOTE → $LOCAL"
+rsync -avz --progress "${VPS}:${REMOTE}/" "$LOCAL/"
+
+echo ""
+echo "=== Feedback summary ==="
+for f in "$LOCAL"/*.json; do
+  [[ -f "$f" ]] || continue
+  handle=$(basename "$f" .json)
+  count=$(python3 -c "import json,sys; d=json.load(open('$f')); print(len(d) if isinstance(d, list) else 1)" 2>/dev/null || echo "?")
+  echo "  @$handle: $count submission(s)"
+done

From 1a563012e22f252766e3f52ba5f7c7a6902e3e55 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 09:42:31 +0200
Subject: [PATCH 079/124] reextract-originals: run as subprocess to avoid OOM
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The in-process approach loaded all 2015 Strava originals into the server
process memory, causing OOM kills. Now spawns `bincio reextract-originals`
as a child process; heavy work runs in an isolated Python interpreter that
exits when done, freeing all memory.

Also adds `bincio reextract-originals` as a standalone CLI command that
prints JSON-lines progress to stdout — useful for running directly on the
VPS via SSH for large backlogs.
---
 bincio/cli.py           |   2 +
 bincio/reextract_cmd.py | 108 ++++++++++++++++++++++++++++++
 bincio/serve/server.py  | 142 ++++++++++------------------------------
 3 files changed, 146 insertions(+), 106 deletions(-)
 create mode 100644 bincio/reextract_cmd.py

diff --git a/bincio/cli.py b/bincio/cli.py
index 3d73efc..017833a 100644
--- a/bincio/cli.py
+++ b/bincio/cli.py
@@ -18,6 +18,7 @@ from bincio.import_.cli import import_group     # noqa: E402
 from bincio.serve.init_cmd import init          # noqa: E402
 from bincio.serve.cli import serve              # noqa: E402
 from bincio.dev import dev                      # noqa: E402
+from bincio.reextract_cmd import reextract_originals  # noqa: E402
 
 main.add_command(extract)
 main.add_command(render)
@@ -26,3 +27,4 @@ main.add_command(import_group)
 main.add_command(init)
 main.add_command(serve)
 main.add_command(dev)
+main.add_command(reextract_originals)
diff --git a/bincio/reextract_cmd.py b/bincio/reextract_cmd.py
new file mode 100644
index 0000000..c25c328
--- /dev/null
+++ b/bincio/reextract_cmd.py
@@ -0,0 +1,108 @@
+"""bincio reextract-originals — re-extract activities from stored Strava originals."""
+
+from __future__ import annotations
+
+import json
+import sys
+from pathlib import Path
+from typing import Optional
+
+import click
+
+
+def _emit(obj: dict) -> None:
+    """Write a JSON progress line to stdout (flushed immediately)."""
+    print(json.dumps(obj), flush=True)
+
+
+@click.command("reextract-originals")
+@click.option("--data-dir", required=True, type=click.Path(), help="BAS data directory")
+@click.option("--handle", required=True, help="User handle to re-extract for")
+@click.option("--force", is_flag=True, default=False, help="Re-extract even if activity JSON already exists")
+def reextract_originals(data_dir: str, handle: str, force: bool) -> None:
+    """Re-extract activities from stored Strava originals (originals/strava/*.json).
+
+    Prints one JSON object per line to stdout for streaming progress:
+      {"type": "status", "message": "..."}
+      {"type": "progress", "n": 1, "total": 2015, "name": "...", "status": "imported"|"skipped"|"error", ["detail": "..."]}
+      {"type": "done", "imported": N, "skipped": N, "errors": N}
+      {"type": "error", "message": "..."}
+    """
+    from bincio.extract.strava_api import strava_to_parsed
+    from bincio.extract.metrics import compute as compute_metrics
+    from bincio.extract.writer import (
+        build_summary, make_activity_id, write_activity, write_index,
+    )
+    from bincio.render.merge import merge_all
+
+    dd = Path(data_dir).expanduser().resolve()
+    user_dir = dd / handle
+    originals_dir = user_dir / "originals" / "strava"
+
+    if not originals_dir.exists():
+        _emit({"type": "error", "message": f"No Strava originals directory at {originals_dir}"})
+        sys.exit(1)
+
+    original_files = sorted(originals_dir.glob("*.json"))
+    total = len(original_files)
+    if total == 0:
+        _emit({"type": "error", "message": "No Strava originals found"})
+        sys.exit(1)
+
+    _emit({"type": "status", "message": f"Found {total} originals, starting extraction…"})
+
+    # Load existing index to get owner info and existing summaries
+    index_path = user_dir / "index.json"
+    try:
+        existing_index = json.loads(index_path.read_text(encoding="utf-8")) if index_path.exists() else {}
+    except Exception:
+        existing_index = {}
+    owner = existing_index.get("owner", {"handle": handle})
+    summaries: dict[str, dict] = {s["id"]: s for s in existing_index.get("activities", [])}
+
+    imported = skipped = errors = 0
+
+    for n, orig_path in enumerate(original_files, 1):
+        try:
+            raw = json.loads(orig_path.read_text(encoding="utf-8"))
+            meta = raw.get("meta", {})
+            streams = raw.get("streams", {})
+            name = meta.get("name", orig_path.stem)
+
+            parsed = strava_to_parsed(meta, streams)
+            activity_id = make_activity_id(parsed)
+
+            if not force and (user_dir / "activities" / f"{activity_id}.json").exists():
+                skipped += 1
+                _emit({"type": "progress", "n": n, "total": total, "name": name, "status": "skipped"})
+            else:
+                metrics = compute_metrics(parsed)
+                ep = parsed.privacy if parsed.privacy is not None else "public"
+                write_activity(parsed, metrics, user_dir, privacy=ep, rdp_epsilon=0.0001)
+                summaries[activity_id] = build_summary(parsed, metrics, activity_id, ep)
+                imported += 1
+                _emit({"type": "progress", "n": n, "total": total, "name": name, "status": "imported"})
+
+                # Explicitly free large objects to keep memory low
+                del parsed, metrics
+        except Exception as exc:
+            errors += 1
+            _emit({"type": "progress", "n": n, "total": total, "name": orig_path.stem,
+                   "status": "error", "detail": str(exc)})
+
+    if imported > 0:
+        _emit({"type": "status", "message": "Writing index…"})
+        try:
+            write_index(list(summaries.values()), user_dir, owner)
+        except Exception as exc:
+            _emit({"type": "error", "message": f"write_index failed: {exc}"})
+            sys.exit(1)
+
+        _emit({"type": "status", "message": "Running merge…"})
+        try:
+            merge_all(user_dir)
+        except Exception as exc:
+            _emit({"type": "error", "message": f"merge_all failed: {exc}"})
+            sys.exit(1)
+
+    _emit({"type": "done", "imported": imported, "skipped": skipped, "errors": errors})
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index bd6420f..be5ff36 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -626,122 +626,52 @@ async def admin_reextract_originals(
 ) -> StreamingResponse:
     """Re-extract activities from stored Strava originals without hitting the API.
 
-    Reads each file in originals/strava/{id}.json (containing {"meta", "streams"}),
-    calls strava_to_parsed, and writes the activity JSON + GeoJSON.
-
-    Skips activities that already have a valid JSON file in activities/.
-    Streams SSE progress. Calls merge_all + rebuild on completion.
+    Spawns `bincio reextract-originals` as a subprocess so heavy memory use
+    is isolated from the server process. Streams its JSON-lines output as SSE.
+    Triggers a full rebuild on completion.
     """
     import asyncio
+    import shutil
     _require_admin(bincio_session)
     user_dir = _get_data_dir() / handle
     originals_dir = user_dir / "originals" / "strava"
     if not originals_dir.exists():
         raise HTTPException(404, f"No Strava originals directory for '{handle}'")
 
-    original_files = sorted(originals_dir.glob("*.json"))
-    total = len(original_files)
-    log.info("reextract[%s]: starting, %d originals found", handle, total)
-
-    loop = asyncio.get_event_loop()
-    # Queue carries SSE event strings; None is the sentinel for "done"
-    q: asyncio.Queue[str | None] = asyncio.Queue()
-
-    def _run_extraction() -> None:
-        """Runs entirely in a thread pool worker. Puts SSE strings into q."""
-        try:
-            from bincio.extract.strava_api import strava_to_parsed
-            from bincio.extract.metrics import compute as compute_metrics
-            from bincio.extract.writer import (
-                build_summary, make_activity_id, write_activity,
-                write_index,
-            )
-            from bincio.render.merge import merge_all
-        except Exception as exc:
-            log.exception("reextract[%s]: import error", handle)
-            loop.call_soon_threadsafe(q.put_nowait,
-                f"data: {json.dumps({'type': 'error', 'message': f'Import error: {exc}'})}\n\n")
-            loop.call_soon_threadsafe(q.put_nowait, None)
-            return
-
-        index_path = user_dir / "index.json"
-        try:
-            existing_index = json.loads(index_path.read_text(encoding="utf-8")) if index_path.exists() else {}
-        except Exception:
-            existing_index = {}
-        owner = existing_index.get("owner", {"handle": handle})
-        summaries: dict[str, Any] = {s["id"]: s for s in existing_index.get("activities", [])}
-
-        _COMPUTED = {"bas_version", "generated_at", "power_curve", "records", "best_climbs"}
-        athlete_config: dict[str, Any] = {}
-        athlete_path = user_dir / "athlete.json"
-        if athlete_path.exists():
-            try:
-                existing_athlete = json.loads(athlete_path.read_text(encoding="utf-8"))
-                athlete_config = {k: v for k, v in existing_athlete.items() if k not in _COMPUTED}
-            except Exception:
-                pass
-
-        imported = skipped = errors = 0
-
-        for n, orig_path in enumerate(original_files, 1):
-            try:
-                raw = json.loads(orig_path.read_text(encoding="utf-8"))
-                meta = raw.get("meta", {})
-                streams = raw.get("streams", {})
-                name = meta.get("name", orig_path.stem)
-                parsed = strava_to_parsed(meta, streams)
-                activity_id = make_activity_id(parsed)
-
-                if (user_dir / "activities" / f"{activity_id}.json").exists():
-                    skipped += 1
-                    status = "skipped"
-                else:
-                    metrics = compute_metrics(parsed)
-                    ep = parsed.privacy if parsed.privacy is not None else "public"
-                    write_activity(parsed, metrics, user_dir, privacy=ep, rdp_epsilon=0.0001)
-                    summaries[activity_id] = build_summary(parsed, metrics, activity_id, ep)
-                    imported += 1
-                    status = "imported"
-
-                loop.call_soon_threadsafe(q.put_nowait,
-                    f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': name, 'status': status})}\n\n")
-            except Exception as exc:
-                errors += 1
-                log.error("reextract[%s]: failed on %s: %s", handle, orig_path.name, exc, exc_info=True)
-                loop.call_soon_threadsafe(q.put_nowait,
-                    f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total, 'name': orig_path.stem, 'status': 'error', 'detail': str(exc)})}\n\n")
-
-        if imported > 0:
-            loop.call_soon_threadsafe(q.put_nowait,
-                f"data: {json.dumps({'type': 'status', 'message': 'Writing index…'})}\n\n")
-            try:
-                write_index(list(summaries.values()), user_dir, owner)
-                loop.call_soon_threadsafe(q.put_nowait,
-                    f"data: {json.dumps({'type': 'status', 'message': 'Running merge and rebuild…'})}\n\n")
-                merge_all(user_dir)
-                _trigger_rebuild(handle)
-            except Exception as exc:
-                log.exception("reextract[%s]: error in final write/merge", handle)
-                loop.call_soon_threadsafe(q.put_nowait,
-                    f"data: {json.dumps({'type': 'error', 'message': f'Final write failed: {exc}'})}\n\n")
-
-        log.info("reextract[%s]: done — imported=%d skipped=%d errors=%d",
-                 handle, imported, skipped, errors)
-        loop.call_soon_threadsafe(q.put_nowait,
-            f"data: {json.dumps({'type': 'done', 'imported': imported, 'skipped': skipped, 'errors': errors})}\n\n")
-        loop.call_soon_threadsafe(q.put_nowait, None)  # sentinel
+    # Find the `uv` or `bincio` executable that launched us
+    uv_exe = shutil.which("uv") or "uv"
+    data_dir = str(_get_data_dir())
+    log.info("reextract[%s]: spawning subprocess via %s", handle, uv_exe)
 
     async def event_stream():
-        yield f"data: {json.dumps({'type': 'status', 'message': f'Found {total} originals, starting extraction…'})}\n\n"
-        # Kick off the extraction thread
-        loop.run_in_executor(None, _run_extraction)
-        # Drain the queue until sentinel
-        while True:
-            chunk = await q.get()
-            if chunk is None:
-                break
-            yield chunk
+        proc = await asyncio.create_subprocess_exec(
+            uv_exe, "run", "bincio", "reextract-originals",
+            "--data-dir", data_dir,
+            "--handle", handle,
+            stdout=asyncio.subprocess.PIPE,
+            stderr=asyncio.subprocess.PIPE,
+        )
+        assert proc.stdout is not None
+
+        async for raw_line in proc.stdout:
+            line = raw_line.decode(errors="replace").strip()
+            if not line:
+                continue
+            # Forward the JSON line as an SSE event
+            yield f"data: {line}\n\n"
+
+        await proc.wait()
+        stderr_out = b""
+        if proc.stderr:
+            stderr_out = await proc.stderr.read()
+
+        if proc.returncode != 0:
+            log.error("reextract[%s]: subprocess exited %d — stderr: %s",
+                      handle, proc.returncode, stderr_out.decode(errors="replace")[:500])
+            yield f"data: {json.dumps({'type': 'error', 'message': f'Process exited with code {proc.returncode}'})}\n\n"
+        else:
+            log.info("reextract[%s]: subprocess done, triggering rebuild", handle)
+            _trigger_rebuild(handle)
 
     return StreamingResponse(
         event_stream(),

From 062ade28d369c47e198e6ed4c11e4a03e3956740 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 09:50:50 +0200
Subject: [PATCH 080/124] reextract: use venv bincio script, not uv, to spawn
 subprocess
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

uv is unreliable in systemd environments where PATH omits ~/.local/bin.
Use sys.executable's parent directory to find the venv's bincio script
directly — this always works since the server itself runs from the venv.
---
 bincio/serve/server.py | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index be5ff36..052d008 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -631,21 +631,22 @@ async def admin_reextract_originals(
     Triggers a full rebuild on completion.
     """
     import asyncio
-    import shutil
     _require_admin(bincio_session)
     user_dir = _get_data_dir() / handle
     originals_dir = user_dir / "originals" / "strava"
     if not originals_dir.exists():
         raise HTTPException(404, f"No Strava originals directory for '{handle}'")
 
-    # Find the `uv` or `bincio` executable that launched us
-    uv_exe = shutil.which("uv") or "uv"
+    # Use the bincio script from the same venv bin dir as the running Python.
+    # This is reliable in systemd environments where PATH may not include uv.
+    import sys as _sys
+    bincio_exe = str(Path(_sys.executable).parent / "bincio")
     data_dir = str(_get_data_dir())
-    log.info("reextract[%s]: spawning subprocess via %s", handle, uv_exe)
+    log.info("reextract[%s]: spawning subprocess via %s", handle, bincio_exe)
 
     async def event_stream():
         proc = await asyncio.create_subprocess_exec(
-            uv_exe, "run", "bincio", "reextract-originals",
+            bincio_exe, "reextract-originals",
             "--data-dir", data_dir,
             "--handle", handle,
             stdout=asyncio.subprocess.PIPE,

From a67b2371618eb6810834ae5a8c062ce812fd7b87 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 09:58:16 +0200
Subject: [PATCH 081/124] reextract: reclaim RSS with malloc_trim + gc.collect
 every 50 activities

CPython's allocator holds freed memory in arenas and doesn't return it to
the OS, causing RSS to grow throughout the 2015-activity loop even when
each iteration's objects are freed. Call gc.collect() + malloc_trim(0)
every 50 activities to return freed pages to the kernel and keep RSS flat.
---
 bincio/reextract_cmd.py | 32 ++++++++++++++++++++++++++++++--
 1 file changed, 30 insertions(+), 2 deletions(-)

diff --git a/bincio/reextract_cmd.py b/bincio/reextract_cmd.py
index c25c328..ff73287 100644
--- a/bincio/reextract_cmd.py
+++ b/bincio/reextract_cmd.py
@@ -2,10 +2,11 @@
 
 from __future__ import annotations
 
+import ctypes
+import gc
 import json
 import sys
 from pathlib import Path
-from typing import Optional
 
 import click
 
@@ -15,6 +16,19 @@ def _emit(obj: dict) -> None:
     print(json.dumps(obj), flush=True)
 
 
+# On Linux, malloc_trim(0) returns freed arenas to the OS, keeping RSS low.
+# CPython's allocator otherwise holds onto freed memory indefinitely.
+try:
+    _libc = ctypes.CDLL("libc.so.6")
+    def _trim_heap() -> None:
+        _libc.malloc_trim(0)
+except Exception:
+    def _trim_heap() -> None:  # type: ignore[misc]
+        pass
+
+_GC_EVERY = 50  # call gc.collect() + malloc_trim every N activities
+
+
 @click.command("reextract-originals")
 @click.option("--data-dir", required=True, type=click.Path(), help="BAS data directory")
 @click.option("--handle", required=True, help="User handle to re-extract for")
@@ -83,13 +97,27 @@ def reextract_originals(data_dir: str, handle: str, force: bool) -> None:
                 imported += 1
                 _emit({"type": "progress", "n": n, "total": total, "name": name, "status": "imported"})
 
-                # Explicitly free large objects to keep memory low
+            # Explicitly free large objects; also free the raw JSON dict and streams
+            raw = meta = streams = None  # type: ignore[assignment]
+            try:
                 del parsed, metrics
+            except NameError:
+                pass
+
         except Exception as exc:
             errors += 1
             _emit({"type": "progress", "n": n, "total": total, "name": orig_path.stem,
                    "status": "error", "detail": str(exc)})
 
+        # Periodically reclaim freed memory from CPython's allocator arena
+        if n % _GC_EVERY == 0:
+            gc.collect()
+            _trim_heap()
+
+    # Final cleanup before the index write (which loads all summaries at once)
+    gc.collect()
+    _trim_heap()
+
     if imported > 0:
         _emit({"type": "status", "message": "Writing index…"})
         try:

From 25d80c813243a13b5b5f0b36d489b431b917bff6 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 10:08:55 +0200
Subject: [PATCH 082/124] reextract: process in batches of 100 to bound
 subprocess memory

One Python process for 2015 activities exhausts all RAM + swap on a
cheap VPS. Split into sequential batches of 100: each subprocess handles
100 activities and exits, returning all memory to the OS before the
next batch starts. The server chains batches in the SSE event_stream
and triggers a single rebuild when all batches complete.
---
 bincio/reextract_cmd.py | 21 ++++++++---
 bincio/serve/server.py  | 77 +++++++++++++++++++++++++++--------------
 2 files changed, 67 insertions(+), 31 deletions(-)

diff --git a/bincio/reextract_cmd.py b/bincio/reextract_cmd.py
index ff73287..8c68231 100644
--- a/bincio/reextract_cmd.py
+++ b/bincio/reextract_cmd.py
@@ -33,7 +33,9 @@ _GC_EVERY = 50  # call gc.collect() + malloc_trim every N activities
 @click.option("--data-dir", required=True, type=click.Path(), help="BAS data directory")
 @click.option("--handle", required=True, help="User handle to re-extract for")
 @click.option("--force", is_flag=True, default=False, help="Re-extract even if activity JSON already exists")
-def reextract_originals(data_dir: str, handle: str, force: bool) -> None:
+@click.option("--offset", default=0, type=int, help="Skip first N originals (for batch processing)")
+@click.option("--limit", default=0, type=int, help="Process at most N originals then stop (0 = all)")
+def reextract_originals(data_dir: str, handle: str, force: bool, offset: int, limit: int) -> None:
     """Re-extract activities from stored Strava originals (originals/strava/*.json).
 
     Prints one JSON object per line to stdout for streaming progress:
@@ -57,13 +59,22 @@ def reextract_originals(data_dir: str, handle: str, force: bool) -> None:
         _emit({"type": "error", "message": f"No Strava originals directory at {originals_dir}"})
         sys.exit(1)
 
-    original_files = sorted(originals_dir.glob("*.json"))
-    total = len(original_files)
-    if total == 0:
+    all_files = sorted(originals_dir.glob("*.json"))
+    if not all_files:
         _emit({"type": "error", "message": "No Strava originals found"})
         sys.exit(1)
 
-    _emit({"type": "status", "message": f"Found {total} originals, starting extraction…"})
+    # Apply offset/limit for batch processing
+    batch = all_files[offset:] if not limit else all_files[offset: offset + limit]
+    total_all = len(all_files)
+    total = len(batch)
+    original_files = batch
+
+    _emit({"type": "status", "message": (
+        f"Batch {offset + 1}–{offset + total} of {total_all}, starting extraction…"
+        if offset or limit else
+        f"Found {total_all} originals, starting extraction…"
+    )})
 
     # Load existing index to get owner info and existing summaries
     index_path = user_dir / "index.json"
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 052d008..723f641 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -642,37 +642,62 @@ async def admin_reextract_originals(
     import sys as _sys
     bincio_exe = str(Path(_sys.executable).parent / "bincio")
     data_dir = str(_get_data_dir())
-    log.info("reextract[%s]: spawning subprocess via %s", handle, bincio_exe)
+
+    # Count originals so we can split into memory-safe batches.
+    total_originals = len(list(originals_dir.glob("*.json")))
+    # Each activity can briefly peak at ~10–30 MB; 100 per batch keeps RSS
+    # well under 3 GB even on a cheap VPS.
+    _BATCH = 100
+    log.info("reextract[%s]: %d originals, batch size %d, via %s",
+             handle, total_originals, _BATCH, bincio_exe)
 
     async def event_stream():
-        proc = await asyncio.create_subprocess_exec(
-            bincio_exe, "reextract-originals",
-            "--data-dir", data_dir,
-            "--handle", handle,
-            stdout=asyncio.subprocess.PIPE,
-            stderr=asyncio.subprocess.PIPE,
-        )
-        assert proc.stdout is not None
+        total_imported = total_skipped = total_errors = 0
+        offset = 0
 
-        async for raw_line in proc.stdout:
-            line = raw_line.decode(errors="replace").strip()
-            if not line:
-                continue
-            # Forward the JSON line as an SSE event
-            yield f"data: {line}\n\n"
+        while offset < total_originals:
+            limit = min(_BATCH, total_originals - offset)
+            proc = await asyncio.create_subprocess_exec(
+                bincio_exe, "reextract-originals",
+                "--data-dir", data_dir,
+                "--handle", handle,
+                "--offset", str(offset),
+                "--limit", str(limit),
+                stdout=asyncio.subprocess.PIPE,
+                stderr=asyncio.subprocess.PIPE,
+            )
+            assert proc.stdout is not None
 
-        await proc.wait()
-        stderr_out = b""
-        if proc.stderr:
-            stderr_out = await proc.stderr.read()
+            async for raw_line in proc.stdout:
+                line = raw_line.decode(errors="replace").strip()
+                if not line:
+                    continue
+                yield f"data: {line}\n\n"
+                try:
+                    evt = json.loads(line)
+                    if evt.get("type") == "done":
+                        total_imported += evt.get("imported", 0)
+                        total_skipped += evt.get("skipped", 0)
+                        total_errors += evt.get("errors", 0)
+                except Exception:
+                    pass
 
-        if proc.returncode != 0:
-            log.error("reextract[%s]: subprocess exited %d — stderr: %s",
-                      handle, proc.returncode, stderr_out.decode(errors="replace")[:500])
-            yield f"data: {json.dumps({'type': 'error', 'message': f'Process exited with code {proc.returncode}'})}\n\n"
-        else:
-            log.info("reextract[%s]: subprocess done, triggering rebuild", handle)
-            _trigger_rebuild(handle)
+            await proc.wait()
+            if proc.returncode != 0:
+                stderr_out = await proc.stderr.read() if proc.stderr else b""
+                log.error("reextract[%s]: batch offset=%d exited %d — stderr: %s",
+                          handle, offset, proc.returncode,
+                          stderr_out.decode(errors="replace")[:500])
+                yield f"data: {json.dumps({'type': 'error', 'message': f'Batch {offset}–{offset+limit} exited with code {proc.returncode}'})}\n\n"
+                return  # stop on batch failure
+
+            offset += limit
+
+        # All batches complete
+        log.info("reextract[%s]: all batches done — imported=%d skipped=%d errors=%d; triggering rebuild",
+                 handle, total_imported, total_skipped, total_errors)
+        _trigger_rebuild(handle)
+        yield f"data: {json.dumps({'type': 'done', 'imported': total_imported, 'skipped': total_skipped, 'errors': total_errors})}\n\n"
 
     return StreamingResponse(
         event_stream(),

From 290eef6c728370a39d13689f9beef2e7365d8743 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 14:06:20 +0200
Subject: [PATCH 083/124] metrics: guard against corrupted time streams causing
 OOM

Strava originals with absolute Unix timestamps stored as elapsed-second
offsets produce a t_max of ~1.6 billion. compute_mmp and compute_best_efforts
both create dense 1Hz arrays via range(t_min, t_max+1), which for a 1.6B
span allocates 44+ GB and OOM-kills the process. Add a >1-week sanity
check and return None early for corrupt streams.

Root cause: old Strava activities (seen from 1970-epoch start_date)
where the time stream contains absolute Unix timestamps instead of
elapsed seconds.
---
 bincio/extract/metrics.py | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/bincio/extract/metrics.py b/bincio/extract/metrics.py
index 216db4e..d5bb97a 100644
--- a/bincio/extract/metrics.py
+++ b/bincio/extract/metrics.py
@@ -131,6 +131,10 @@ def compute_mmp(pts: list[DataPoint], started_at: datetime) -> Optional[list[lis
 
     t_min = min(sparse)
     t_max = max(sparse)
+    # Guard against corrupted time data (e.g. absolute Unix timestamps stored as
+    # elapsed offsets, which can make t_max astronomically large and OOM the process).
+    if t_max - t_min > 7 * 24 * 3600:  # > 1 week → corrupted stream
+        return None
     power_1hz: list[int] = [sparse.get(t, 0) for t in range(t_min, t_max + 1)]
 
     n = len(power_1hz)
@@ -190,6 +194,10 @@ def compute_best_efforts(
 
     t_min = min(sparse_speed)
     t_max = max(sparse_speed)
+    # Guard against corrupted time data (e.g. absolute Unix timestamps stored as
+    # elapsed offsets, which can make t_max astronomically large and OOM the process).
+    if t_max - t_min > 7 * 24 * 3600:  # > 1 week → corrupted stream
+        return None, None
     speed_1hz: list[float] = [sparse_speed.get(t, 0.0) for t in range(t_min, t_max + 1)]
     ele_1hz: list[Optional[float]] = [sparse_ele.get(t) for t in range(t_min, t_max + 1)]
 

From f376b24106982753b22bf8b1a714d1bb6d856a10 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 14:44:34 +0200
Subject: [PATCH 084/124] fix: handle absolute detail_url paths in loadActivity
 and loadTimeseries
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

resolveShards rewrites detail_url to absolute paths (e.g. /data/brut/_merged/activities/{id}.json)
when fetching from a user shard. loadActivity and loadTimeseries only checked for http:// prefixes
and treated /data/... paths as relative, producing double /data//data/... in the fetch URL → 404.

Fix: treat URLs starting with / as already absolute, same as http:// URLs.
---
 site/src/lib/dataloader.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/site/src/lib/dataloader.ts b/site/src/lib/dataloader.ts
index f427981..a19dc87 100644
--- a/site/src/lib/dataloader.ts
+++ b/site/src/lib/dataloader.ts
@@ -168,7 +168,7 @@ export async function loadActivity(
   if (cached) return cached;
 
   try {
-    const url = detailUrl.startsWith('http')
+    const url = detailUrl.startsWith('http') || detailUrl.startsWith('/')
       ? detailUrl
       : `${baseUrl}data/${detailUrl}`;
     return await fetchJSON<ActivityDetail>(url);
@@ -199,7 +199,7 @@ export async function loadTimeseries(
 
     if (timeseriesUrl.startsWith('http')) {
       url = timeseriesUrl;
-    } else if (detailUrl.startsWith('http')) {
+    } else if (detailUrl.startsWith('http') || detailUrl.startsWith('/')) {
       // absolute detailUrl (browser shard resolution) → same directory
       const dir = detailUrl.substring(0, detailUrl.lastIndexOf('/') + 1);
       url = `${dir}${filename}`;

From dfd56e4448acc3350e5db65f257fff6d2041d9ed Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 14:50:10 +0200
Subject: [PATCH 085/124] fix: handle absolute track_url paths in
 ActivityDetail
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

resolveShards also rewrites track_url to absolute paths (/data/…).
The trackUrl reactive statement only handled http:// prefixes,
producing double /data//data/… for the GeoJSON fetch → map had no track.
---
 site/src/components/ActivityDetail.svelte | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/src/components/ActivityDetail.svelte b/site/src/components/ActivityDetail.svelte
index 81b2280..c9bf3ed 100644
--- a/site/src/components/ActivityDetail.svelte
+++ b/site/src/components/ActivityDetail.svelte
@@ -54,7 +54,7 @@
   }
 
   $: trackUrl = activity.track_url
-    ? (activity.track_url.startsWith('http') ? activity.track_url : `${base}data/${activity.track_url}`)
+    ? (activity.track_url.startsWith('http') || activity.track_url.startsWith('/') ? activity.track_url : `${base}data/${activity.track_url}`)
     : null;
   $: color = sportColor(activity.sport);
 

From a33fea91cfa7ab8ce4b3fb0c48909dcce817ab74 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 14:58:54 +0200
Subject: [PATCH 086/124] admin: mark ghost users (no DB account) and add
 Delete dir button

- /api/admin/disk now includes in_db flag per user (true if account exists in DB)
- Ghost users (directory exists, no DB account) show amber 'ghost' badge and only
  Diag + Delete dir buttons (no Re-extract, Rebuild, Reset pwd, Reset data)
- DELETE /api/admin/users/{handle}/directory wipes the entire directory and updates
  the root manifest; refuses if the account still exists in the DB
- Wires up rmdir-btn with a window.confirm before calling the new endpoint
---
 bincio/serve/server.py           | 35 ++++++++++++
 site/src/pages/admin/index.astro | 92 +++++++++++++++++++++++---------
 2 files changed, 103 insertions(+), 24 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 723f641..fba81ce 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -509,6 +509,8 @@ async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JS
             return 0
         return sum(1 for f in path.glob(pattern) if f.is_file())
 
+    db = _get_db()
+    from bincio.serve.db import get_user as _get_user
     users = []
     for user_dir in sorted(data_dir.iterdir()):
         if not user_dir.is_dir() or user_dir.name.startswith("_"):
@@ -517,6 +519,7 @@ async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JS
         leaked = [f for f in user_dir.glob("tmp*.zip") if f.is_file()]
         users.append({
             "handle": user_dir.name,
+            "in_db": _get_user(db, user_dir.name) is not None,
             "total_mb": _mb(user_dir),
             "activities_mb": _mb(user_dir / "activities"),
             "activities_count": _count(user_dir / "activities", "*.json"),
@@ -850,6 +853,38 @@ async def admin_delete_activities(
     return JSONResponse({"ok": True, "deleted": deleted})
 
 
+@app.delete("/api/admin/users/{handle}/directory")
+async def admin_delete_user_directory(
+    handle: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Delete the entire user directory from disk (for ghost users not in the DB).
+
+    Refuses if the handle exists as an account in the database — use
+    DELETE /api/admin/users/{handle}/activities for registered users.
+    """
+    import shutil
+    _require_admin(bincio_session)
+    db = _get_db()
+    from bincio.serve.db import get_user as _get_user
+    if _get_user(db, handle) is not None:
+        raise HTTPException(
+            400,
+            f"User '{handle}' is still in the database. Remove the account first, "
+            "or use 'Reset data' to wipe only activity files.",
+        )
+    user_dir = _get_data_dir() / handle
+    if not user_dir.is_dir():
+        raise HTTPException(404, f"No directory for '{handle}'")
+    shutil.rmtree(user_dir)
+    # Rebuild root manifest so the ghost shard disappears from the site
+    from bincio.render.cli import _write_root_manifest
+    try:
+        _write_root_manifest(_get_data_dir())
+    except Exception:
+        pass
+    return JSONResponse({"ok": True})
+
 
 
 # ── Write API (ported from bincio edit, auth-gated) ───────────────────────────
diff --git a/site/src/pages/admin/index.astro b/site/src/pages/admin/index.astro
index bfa792d..25124ff 100644
--- a/site/src/pages/admin/index.astro
+++ b/site/src/pages/admin/index.astro
@@ -123,32 +123,14 @@ import Base from '../../layouts/Base.astro';
       const leaked = u.leaked_zips_count > 0
         ? `<span class="text-red-400 font-medium ml-2" title="${u.leaked_zips_count} orphaned temp ZIP(s)">⚠ ${fmt(u.leaked_zips_mb)} leaked</span>`
         : '';
+      const ghostBadge = !u.in_db
+        ? `<span class="text-amber-500 text-xs ml-1" title="No account in database">ghost</span>`
+        : '';
       const stravaNote = u.originals_strava_mb > 0
         ? `<span class="text-zinc-600 text-xs ml-1">(${fmt(u.originals_strava_mb)} Strava)</span>`
         : '';
-      return `
-        <tr class="border-b border-zinc-800/50 hover:bg-zinc-900/40" data-handle="${u.handle}">
-          <td class="px-4 py-3">
-            <div class="flex items-center gap-1">
-              <a href="/u/${u.handle}/" class="text-white hover:text-zinc-300">@${u.handle}</a>
-              ${leaked}
-            </div>
-            ${bar(rowPct)}
-          </td>
-          <td class="px-4 py-3 text-right text-zinc-300 font-medium tabular-nums">${fmt(u.total_mb)}</td>
-          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">
-            ${fmt(u.activities_mb)}
-            <span class="text-zinc-600 text-xs block">${u.activities_count} files</span>
-          </td>
-          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">
-            ${u.originals_mb > 0 ? fmt(u.originals_mb) : '—'}
-            ${stravaNote}
-          </td>
-          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.merged_mb > 0 ? fmt(u.merged_mb) : '—'}</td>
-          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.images_mb > 0 ? fmt(u.images_mb) : '—'}</td>
-          <td class="px-4 py-3 text-right">
-            <div class="flex gap-2 justify-end">
-              <button
+      const actionButtons = u.in_db
+        ? `<button
                 class="diag-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
                 data-handle="${u.handle}"
                 title="Show diagnostic snapshot of this user's data directory"
@@ -172,7 +154,40 @@ import Base from '../../layouts/Base.astro';
                 class="delete-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
                 data-handle="${u.handle}"
                 title="Wipe all activities, originals, edits and images — account is kept"
-              >Reset data</button>
+              >Reset data</button>`
+        : `<button
+                class="diag-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-zinc-700 text-zinc-400 hover:text-zinc-200 transition-colors"
+                data-handle="${u.handle}"
+                title="Show diagnostic snapshot of this user's data directory"
+              >Diag</button>
+              <button
+                class="rmdir-btn text-xs px-3 py-1.5 rounded-lg bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors"
+                data-handle="${u.handle}"
+                title="Delete the entire directory for this ghost user (no DB account)"
+              >Delete dir</button>`;
+      return `
+        <tr class="border-b border-zinc-800/50 hover:bg-zinc-900/40" data-handle="${u.handle}">
+          <td class="px-4 py-3">
+            <div class="flex items-center gap-1">
+              <a href="/u/${u.handle}/" class="text-white hover:text-zinc-300">@${u.handle}</a>
+              ${ghostBadge}${leaked}
+            </div>
+            ${bar(rowPct)}
+          </td>
+          <td class="px-4 py-3 text-right text-zinc-300 font-medium tabular-nums">${fmt(u.total_mb)}</td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">
+            ${fmt(u.activities_mb)}
+            <span class="text-zinc-600 text-xs block">${u.activities_count} files</span>
+          </td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">
+            ${u.originals_mb > 0 ? fmt(u.originals_mb) : '—'}
+            ${stravaNote}
+          </td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.merged_mb > 0 ? fmt(u.merged_mb) : '—'}</td>
+          <td class="px-4 py-3 text-right text-zinc-400 tabular-nums">${u.images_mb > 0 ? fmt(u.images_mb) : '—'}</td>
+          <td class="px-4 py-3 text-right">
+            <div class="flex gap-2 justify-end">
+              ${actionButtons}
             </div>
           </td>
         </tr>
@@ -320,6 +335,35 @@ import Base from '../../layouts/Base.astro';
         dialog.showModal();
       });
     });
+
+    tbodyEl.querySelectorAll<HTMLButtonElement>('.rmdir-btn').forEach(btn => {
+      btn.addEventListener('click', async () => {
+        const h = btn.dataset.handle!;
+        if (!confirm(`Delete entire directory for ghost user "${h}"? This cannot be undone.`)) return;
+        btn.disabled = true;
+        btn.textContent = 'Deleting…';
+        try {
+          const r = await fetch(`/api/admin/users/${h}/directory`, {
+            method: 'DELETE',
+            credentials: 'include',
+          });
+          const d = await r.json();
+          if (r.ok) {
+            btn.textContent = 'Deleted';
+            btn.classList.add('text-green-500');
+            setTimeout(() => load(), 1500);
+          } else {
+            btn.disabled = false;
+            btn.textContent = 'Error: ' + (d.detail ?? 'failed');
+            btn.classList.add('text-red-400');
+          }
+        } catch {
+          btn.disabled = false;
+          btn.textContent = 'Error';
+          btn.classList.add('text-red-400');
+        }
+      });
+    });
   }
 
   confirmCancel.addEventListener('click', () => dialog.close());

From 764da091306f88caaa0b5ee4a0160f653444ab5e Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 20:17:32 +0200
Subject: [PATCH 087/124] upload: add overwrite option to replace existing
 activities
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

When 'Overwrite existing activities' is checked, duplicate activities are
re-extracted and replaced instead of silently skipped:
- Deletes {id}.json, .geojson, .timeseries.json from activities/ and _merged/
- Removes the stale index summary and dedup cache entry
- Ingests the new file fresh via ingest_parsed
- Reports 'overwritten' (↺) status in the SSE stream vs 'imported' (↓)
- done event includes 'overwritten' count; UI shows it alongside 'added'
---
 bincio/serve/server.py      | 50 +++++++++++++++++++++++++++++++------
 site/src/layouts/Base.astro | 23 ++++++++++++++---
 2 files changed, 61 insertions(+), 12 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index fba81ce..260cf85 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -1129,6 +1129,7 @@ def _file_suffix(name: str) -> str:
 async def upload_activity(
     files: list[UploadFile] = File(...),
     store_original: bool = Form(False),
+    overwrite: bool = Form(False),
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> StreamingResponse:
     """Accept FIT/GPX/TCX files and/or activities.csv; stream SSE progress while processing.
@@ -1138,9 +1139,9 @@ async def upload_activity(
       - Retroactively update sidecars for existing activities (matched by strava_id)
 
     SSE events:
-      {"type": "progress", "n": N, "total": T, "name": "...", "status": "imported"|"duplicate"|"error"}
+      {"type": "progress", "n": N, "total": T, "name": "...", "status": "imported"|"overwritten"|"duplicate"|"error"}
       {"type": "csv", "updates": N}   -- only when CSV was included
-      {"type": "done", "added": N, "csv_updates": N, "duplicates": N, "errors": N}
+      {"type": "done", "added": N, "csv_updates": N, "duplicates": N, "overwritten": N, "errors": N}
     """
     from bincio.extract.ingest import ingest_parsed
     from bincio.extract.parsers.factory import parse_file
@@ -1182,6 +1183,7 @@ async def upload_activity(
 
     def event_stream():
         added = 0
+        overwritten = 0
         duplicates = 0
         errors = 0
         any_added = False
@@ -1209,19 +1211,51 @@ async def upload_activity(
                 if metadata is not None:
                     metadata.enrich(name, activity)
                 activity_id = make_activity_id(activity)
+                was_overwrite = False
                 if (dd / "activities" / f"{activity_id}.json").exists():
-                    duplicates += 1
-                    yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'duplicate'})}\n\n"
-                    continue
+                    if not overwrite:
+                        duplicates += 1
+                        yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'duplicate'})}\n\n"
+                        continue
+                    # Overwrite: delete existing files before re-ingesting.
+                    for ext in (".json", ".geojson", ".timeseries.json"):
+                        (dd / "activities" / f"{activity_id}{ext}").unlink(missing_ok=True)
+                    # Remove stale summary from index so ingest_parsed writes a clean one
+                    index_path = dd / "index.json"
+                    if index_path.exists():
+                        idx = json.loads(index_path.read_text(encoding="utf-8"))
+                        idx["activities"] = [a for a in idx.get("activities", []) if a.get("id") != activity_id]
+                        index_path.write_text(json.dumps(idx, indent=2, ensure_ascii=False))
+                    # Remove from dedup hash cache so the new file isn't blocked
+                    cache_path = dd / ".bincio_cache.json"
+                    if cache_path.exists():
+                        try:
+                            cache = json.loads(cache_path.read_text(encoding="utf-8"))
+                            cache.pop(activity_id, None)
+                            cache_path.write_text(json.dumps(cache, ensure_ascii=False))
+                        except Exception:
+                            pass
+                    # Remove merged copies (merge_all will regenerate them after ingest)
+                    merged_acts = dd / "_merged" / "activities"
+                    if merged_acts.exists():
+                        for ext in (".json", ".geojson", ".timeseries.json"):
+                            p = merged_acts / f"{activity_id}{ext}"
+                            if p.exists() or p.is_symlink():
+                                p.unlink(missing_ok=True)
+                    was_overwrite = True
                 ingest_parsed(activity, dd, privacy="public")
                 if store_original:
                     originals_dir = dd / "originals"
                     originals_dir.mkdir(exist_ok=True)
                     staged.rename(originals_dir / name)
                     kept = True
-                added += 1
+                if was_overwrite:
+                    overwritten += 1
+                else:
+                    added += 1
                 any_added = True
-                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': 'imported'})}\n\n"
+                status = 'overwritten' if was_overwrite else 'imported'
+                yield f"data: {json.dumps({'type': 'progress', 'n': n, 'total': total_files, 'name': name, 'status': status})}\n\n"
             except Exception as exc:
                 errors += 1
                 log.error("upload[%s]: failed to process %s: %s", user.handle, name, exc, exc_info=True)
@@ -1243,7 +1277,7 @@ async def upload_activity(
             if any_added:
                 _trigger_rebuild(user.handle)
 
-        yield f"data: {json.dumps({'type': 'done', 'added': added, 'csv_updates': csv_updates, 'duplicates': duplicates, 'errors': errors})}\n\n"
+        yield f"data: {json.dumps({'type': 'done', 'added': added, 'overwritten': overwritten, 'csv_updates': csv_updates, 'duplicates': duplicates, 'errors': errors})}\n\n"
 
         if job_id:
             _job_finish(job_id)
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 531a22e..8b92e23 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -317,6 +317,17 @@ try {
               <span class="text-zinc-600 block mt-0.5">Lets you reprocess if the format changes. See the <a href={`${baseUrl}about/`} class="underline hover:text-zinc-400">About page</a> for details.</span>
             </span>
           </label>
+          <label class="flex items-start gap-2 mt-2 cursor-pointer group">
+            <input
+              id="upload-overwrite"
+              type="checkbox"
+              class="mt-0.5 accent-amber-500 shrink-0"
+            />
+            <span class="text-xs text-zinc-500 group-hover:text-zinc-300 transition-colors leading-snug">
+              Overwrite existing activities
+              <span class="text-zinc-600 block mt-0.5">Re-extract and replace any duplicate found on the server. Use to fix a corrupted or mis-parsed activity.</span>
+            </span>
+          </label>
           <p id="upload-status" class="mt-3 text-xs text-center" style="color: var(--text-5); min-height: 1.25rem"></p>
         </div>
 
@@ -554,6 +565,7 @@ try {
       const input             = document.getElementById('upload-input');
       const label             = document.getElementById('upload-label');
       const keepOriginalChk   = document.getElementById('upload-keep-original');
+      const overwriteChk      = document.getElementById('upload-overwrite');
       const fileStatus        = document.getElementById('upload-status');
       const stravaStatus  = document.getElementById('strava-status');
       const stravaConnect = document.getElementById('strava-connect-area');
@@ -629,6 +641,7 @@ try {
         const fd = new FormData();
         for (const f of files) fd.append('files', f);
         fd.append('store_original', keepOriginalChk?.checked ? 'true' : 'false');
+        fd.append('overwrite', overwriteChk?.checked ? 'true' : 'false');
 
         const xhr = new XMLHttpRequest();
         xhr.open('POST', `${editUrl}/api/upload`);
@@ -636,7 +649,7 @@ try {
         xhr.setRequestHeader('Accept', 'text/event-stream');
 
         let buf = '';
-        let added = 0, dupes = 0, errors = 0, csvUpdates = 0;
+        let added = 0, overwrittenCount = 0, dupes = 0, errors = 0, csvUpdates = 0;
 
         xhr.onprogress = () => {
           const newText = xhr.responseText.slice(buf.length);
@@ -647,23 +660,25 @@ try {
               const ev = JSON.parse(line.slice(6));
               if (ev.type === 'progress') {
                 const pct = Math.round((ev.n / ev.total) * 100);
-                const icon = ev.status === 'imported' ? '↓' : ev.status === 'duplicate' ? '·' : '✗';
+                const icon = ev.status === 'imported' ? '↓' : ev.status === 'overwritten' ? '↺' : ev.status === 'duplicate' ? '·' : '✗';
                 fileStatus.textContent = `${icon} ${ev.n}/${ev.total} (${pct}%) — ${ev.name}`;
                 if (ev.status === 'imported') added++;
+                else if (ev.status === 'overwritten') overwrittenCount++;
                 else if (ev.status === 'duplicate') dupes++;
                 else errors++;
               } else if (ev.type === 'csv') {
                 csvUpdates = ev.updates;
               } else if (ev.type === 'done') {
-                added = ev.added; dupes = ev.duplicates; errors = ev.errors; csvUpdates = ev.csv_updates;
+                added = ev.added; overwrittenCount = ev.overwritten ?? 0; dupes = ev.duplicates; errors = ev.errors; csvUpdates = ev.csv_updates;
                 const parts = [];
                 if (added > 0) parts.push(`${added} added`);
+                if (overwrittenCount > 0) parts.push(`${overwrittenCount} overwritten`);
                 if (csvUpdates > 0) parts.push(`${csvUpdates} updated from CSV`);
                 if (dupes) parts.push(`${dupes} duplicate${dupes > 1 ? 's' : ''}`);
                 if (errors) parts.push(`${errors} failed`);
                 if (parts.length === 0) parts.push('nothing to add');
                 fileStatus.textContent = parts.join(', ');
-                const anyGood = added > 0 || csvUpdates > 0;
+                const anyGood = added > 0 || overwrittenCount > 0 || csvUpdates > 0;
                 fileStatus.style.color = anyGood ? '#4ade80' : '#a1a1aa';
                 if (anyGood) setTimeout(() => window.location.reload(), 1200);
                 else drop.style.pointerEvents = '';

From 4fd5ba428e01ac36d5dc7405106d9d2de3cdb26b Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 20:24:04 +0200
Subject: [PATCH 088/124] settings: add self-service user settings page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

API endpoints (all auth-gated to the logged-in user):
- GET  /api/me/storage        — per-category disk breakdown
- DELETE /api/me/originals    — free originals/ dir (post-extraction cleanup)
- DELETE /api/me/activities   — wipe all activity data (password confirm)
- DELETE /api/me              — delete account + all data (password confirm)
- PUT  /api/me/display-name   — update display name
- PUT  /api/me/password       — change password (requires current password)

Page at /settings/:
- Storage card: activities / originals / Strava originals / photos / total
  with one-click 'Delete original files' when originals exist
- Profile card: display name field with inline save
- Password card: change password form
- Danger zone: delete all activities or delete account (both require
  password confirmation in a modal before proceeding)

Nav: 'Settings' link appears in the top bar after login (same as Admin).
---
 bincio/serve/server.py              | 145 ++++++++++++
 site/src/layouts/Base.astro         |  11 +-
 site/src/pages/settings/index.astro | 349 ++++++++++++++++++++++++++++
 3 files changed, 504 insertions(+), 1 deletion(-)
 create mode 100644 site/src/pages/settings/index.astro

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 260cf85..acac2dc 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -887,6 +887,151 @@ async def admin_delete_user_directory(
 
 
 
+# ── Self-service user settings ────────────────────────────────────────────────
+
+@app.get("/api/me/storage")
+async def me_storage(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Return per-category disk usage for the logged-in user."""
+    user = _require_user(bincio_session)
+    dd = _get_data_dir() / user.handle
+
+    def _mb(path: Path) -> float:
+        if not path.exists():
+            return 0.0
+        total = sum(f.stat().st_size for f in path.rglob("*") if f.is_file())
+        return round(total / 1_048_576, 2)
+
+    def _count(path: Path, pattern: str = "*") -> int:
+        if not path.exists():
+            return 0
+        return sum(1 for f in path.glob(pattern) if f.is_file())
+
+    activities_mb   = _mb(dd / "activities")
+    originals_mb    = _mb(dd / "originals")
+    strava_mb       = _mb(dd / "originals" / "strava")
+    images_mb       = _mb(dd / "edits" / "images")
+    total_mb        = _mb(dd)
+
+    return JSONResponse({
+        "total_mb":          total_mb,
+        "activities_mb":     activities_mb,
+        "activities_count":  _count(dd / "activities", "*.json"),
+        "originals_mb":      originals_mb,
+        "strava_originals_mb": strava_mb,
+        "strava_originals_count": _count(dd / "originals" / "strava", "*.json"),
+        "images_mb":         images_mb,
+    })
+
+
+@app.delete("/api/me/originals")
+async def me_delete_originals(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Delete the user's originals/ directory (frees space after re-extraction)."""
+    user = _require_user(bincio_session)
+    originals = _get_data_dir() / user.handle / "originals"
+    if not originals.exists():
+        return JSONResponse({"ok": True, "freed_mb": 0.0})
+
+    freed = round(
+        sum(f.stat().st_size for f in originals.rglob("*") if f.is_file()) / 1_048_576, 2
+    )
+    shutil.rmtree(originals)
+    return JSONResponse({"ok": True, "freed_mb": freed})
+
+
+@app.delete("/api/me/activities")
+async def me_delete_activities(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Wipe all extracted activity data (activities/, edits/, _merged/, index/athlete JSON).
+
+    Requires the user's current password in the request body for confirmation.
+    """
+    user = _require_user(bincio_session)
+    body = await request.json()
+    password = body.get("password", "")
+    if not authenticate(_get_db(), user.handle, password):
+        raise HTTPException(401, "Wrong password")
+
+    user_dir = _get_data_dir() / user.handle
+    deleted = _wipe_user_activities(user_dir)
+    _trigger_rebuild(user.handle)
+    return JSONResponse({"ok": True, "deleted": deleted})
+
+
+@app.delete("/api/me")
+async def me_delete_account(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Delete the account and all data permanently.
+
+    Requires the user's current password. Deletes the DB row, all sessions,
+    and the entire user data directory. The root shard manifest is updated.
+    """
+    user = _require_user(bincio_session)
+    body = await request.json()
+    password = body.get("password", "")
+    if not authenticate(_get_db(), user.handle, password):
+        raise HTTPException(401, "Wrong password")
+
+    # Wipe data directory
+    user_dir = _get_data_dir() / user.handle
+    if user_dir.is_dir():
+        shutil.rmtree(user_dir)
+
+    # Remove from DB (cascades to sessions, invites, reset_codes)
+    from bincio.serve.db import delete_user as _delete_user
+    _delete_user(_get_db(), user.handle)
+
+    # Update root manifest so the shard disappears
+    from bincio.render.cli import _write_root_manifest
+    try:
+        _write_root_manifest(_get_data_dir())
+    except Exception:
+        pass
+
+    resp = JSONResponse({"ok": True})
+    resp.delete_cookie(_SESSION_COOKIE)
+    return resp
+
+
+@app.put("/api/me/display-name")
+async def me_update_display_name(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Update the logged-in user's display name."""
+    user = _require_user(bincio_session)
+    body = await request.json()
+    display_name = str(body.get("display_name", "")).strip()
+    if len(display_name) > 60:
+        raise HTTPException(400, "Display name too long (max 60 characters)")
+    db = _get_db()
+    db.execute("UPDATE users SET display_name = ? WHERE handle = ?", (display_name, user.handle))
+    db.commit()
+    return JSONResponse({"ok": True, "display_name": display_name})
+
+
+@app.put("/api/me/password")
+async def me_change_password(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Change the logged-in user's password. Requires current password."""
+    from bincio.serve.db import change_password as _change_password
+    user = _require_user(bincio_session)
+    body = await request.json()
+    current  = body.get("current_password", "")
+    new_pw   = body.get("new_password", "")
+    if not authenticate(_get_db(), user.handle, current):
+        raise HTTPException(401, "Current password is wrong")
+    if len(new_pw) < 8:
+        raise HTTPException(400, "New password must be at least 8 characters")
+    _change_password(_get_db(), user.handle, new_pw)
+    return JSONResponse({"ok": True})
+
+
 # ── Write API (ported from bincio edit, auth-gated) ───────────────────────────
 
 def _user_data_dir(handle: str) -> Path:
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 8b92e23..85ab878 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -200,6 +200,13 @@ try {
               title=""
               class="text-xs px-2 py-0.5 rounded-full bg-amber-900/60 text-amber-300 border border-amber-700/50 animate-pulse cursor-default"
             ></span>
+            <!-- Settings link — hidden until logged in -->
+            <a
+              id="nav-settings"
+              href={`${baseUrl}settings/`}
+              style="display:none"
+              class="text-xs text-zinc-500 hover:text-white transition-colors px-1"
+            >Settings</a>
             <!-- Admin link — hidden until confirmed admin -->
             <a
               id="nav-admin"
@@ -494,7 +501,9 @@ try {
             el.href = baseUrl + 'u/' + user.handle + '/' + el.getAttribute('data-user-path');
           });
 
-          // Show logout button
+          // Show settings + logout links
+          const settingsEl = document.getElementById('nav-settings');
+          if (settingsEl) settingsEl.style.display = '';
           const logoutEl = document.getElementById('nav-logout');
           if (logoutEl) logoutEl.style.display = '';
 
diff --git a/site/src/pages/settings/index.astro b/site/src/pages/settings/index.astro
new file mode 100644
index 0000000..b0d95b9
--- /dev/null
+++ b/site/src/pages/settings/index.astro
@@ -0,0 +1,349 @@
+---
+import Base from '../../layouts/Base.astro';
+---
+<Base title="Settings — BincioActivity">
+  <div class="max-w-lg mx-auto px-4 py-10">
+    <h1 class="text-2xl font-bold text-white mb-8">Settings</h1>
+
+    <!-- Storage card -->
+    <section class="mb-6 rounded-xl bg-zinc-900 border border-zinc-800 p-5">
+      <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-4">Storage</h2>
+      <div id="storage-loading" class="text-zinc-500 text-sm">Loading…</div>
+      <div id="storage-content" class="hidden space-y-2">
+        <div class="flex justify-between text-sm">
+          <span class="text-zinc-400">Activities</span>
+          <span id="st-activities" class="text-white tabular-nums"></span>
+        </div>
+        <div class="flex justify-between text-sm">
+          <span class="text-zinc-400">Original files</span>
+          <span id="st-originals" class="text-white tabular-nums"></span>
+        </div>
+        <div id="st-strava-row" class="flex justify-between text-sm pl-4 hidden">
+          <span class="text-zinc-500">↳ Strava originals</span>
+          <span id="st-strava" class="text-zinc-400 tabular-nums"></span>
+        </div>
+        <div class="flex justify-between text-sm">
+          <span class="text-zinc-400">Photos</span>
+          <span id="st-images" class="text-white tabular-nums"></span>
+        </div>
+        <div class="border-t border-zinc-800 mt-2 pt-2 flex justify-between text-sm font-medium">
+          <span class="text-zinc-300">Total</span>
+          <span id="st-total" class="text-white tabular-nums"></span>
+        </div>
+      </div>
+      <!-- Delete originals -->
+      <div id="del-originals-area" class="mt-4 hidden">
+        <p class="text-xs text-zinc-500 mb-3">
+          Original files are kept for reprocessing. Once your activities look correct you can free this space — the extracted data is not affected.
+        </p>
+        <button id="del-originals-btn"
+          class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-amber-900 hover:text-amber-300 text-zinc-300 transition-colors">
+          Delete original files
+        </button>
+        <p id="del-originals-status" class="text-xs mt-2 hidden"></p>
+      </div>
+    </section>
+
+    <!-- Profile card -->
+    <section class="mb-6 rounded-xl bg-zinc-900 border border-zinc-800 p-5">
+      <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-4">Profile</h2>
+      <form id="display-name-form" class="flex gap-2 items-end">
+        <div class="flex-1">
+          <label class="block text-xs text-zinc-500 mb-1" for="display-name-input">Display name</label>
+          <input id="display-name-input" type="text" maxlength="60" autocomplete="name"
+            class="w-full px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-white placeholder-zinc-500 focus:outline-none focus:border-[--accent] text-sm"
+            placeholder="Your name" />
+        </div>
+        <button type="submit"
+          class="px-4 py-2 rounded-lg text-sm bg-zinc-700 hover:bg-zinc-600 text-white transition-colors shrink-0">
+          Save
+        </button>
+      </form>
+      <p id="display-name-status" class="text-xs mt-2 hidden"></p>
+    </section>
+
+    <!-- Password card -->
+    <section class="mb-6 rounded-xl bg-zinc-900 border border-zinc-800 p-5">
+      <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-4">Password</h2>
+      <form id="password-form" class="space-y-3">
+        <div>
+          <label class="block text-xs text-zinc-500 mb-1" for="pw-current">Current password</label>
+          <input id="pw-current" type="password" autocomplete="current-password" required
+            class="w-full px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-white focus:outline-none focus:border-[--accent] text-sm" />
+        </div>
+        <div>
+          <label class="block text-xs text-zinc-500 mb-1" for="pw-new">New password</label>
+          <input id="pw-new" type="password" autocomplete="new-password" minlength="8" required
+            class="w-full px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-white focus:outline-none focus:border-[--accent] text-sm" />
+          <p class="text-zinc-600 text-xs mt-1">At least 8 characters</p>
+        </div>
+        <p id="pw-status" class="text-xs hidden"></p>
+        <button type="submit"
+          class="px-4 py-2 rounded-lg text-sm bg-zinc-700 hover:bg-zinc-600 text-white transition-colors">
+          Change password
+        </button>
+      </form>
+    </section>
+
+    <!-- Danger zone -->
+    <section class="rounded-xl bg-zinc-900 border border-red-900/40 p-5">
+      <h2 class="text-sm font-semibold text-red-400/70 uppercase tracking-wider mb-4">Danger zone</h2>
+
+      <!-- Delete activities -->
+      <div class="mb-5">
+        <p class="text-sm text-zinc-300 font-medium mb-1">Reset activity data</p>
+        <p class="text-xs text-zinc-500 mb-3">Wipes all extracted activities, edits, and photos. Your account is kept. Cannot be undone.</p>
+        <button id="del-activities-btn"
+          class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors">
+          Delete all activities
+        </button>
+      </div>
+
+      <div class="border-t border-zinc-800 pt-5">
+        <p class="text-sm text-zinc-300 font-medium mb-1">Delete account</p>
+        <p class="text-xs text-zinc-500 mb-3">Permanently deletes your account and all data. Cannot be undone.</p>
+        <button id="del-account-btn"
+          class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors">
+          Delete account
+        </button>
+      </div>
+    </section>
+  </div>
+
+  <!-- Confirmation modal (shared for activities + account deletion) -->
+  <dialog id="confirm-dialog"
+    class="rounded-xl bg-zinc-900 border border-zinc-700 p-6 text-white max-w-sm w-full backdrop:bg-black/60">
+    <p id="confirm-title" class="text-sm text-zinc-300 mb-1 font-medium"></p>
+    <p id="confirm-desc" class="text-xs text-zinc-500 mb-4"></p>
+    <div class="mb-4">
+      <label class="block text-xs text-zinc-500 mb-1" for="confirm-password">Confirm with your password</label>
+      <input id="confirm-password" type="password" autocomplete="current-password"
+        class="w-full px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-white focus:outline-none focus:border-red-500 text-sm" />
+    </div>
+    <p id="confirm-error" class="text-red-400 text-xs mb-3 hidden"></p>
+    <div class="flex gap-3 justify-end">
+      <button id="confirm-cancel"
+        class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-zinc-700 text-zinc-300 transition-colors">Cancel</button>
+      <button id="confirm-ok"
+        class="px-4 py-2 rounded-lg text-sm bg-red-700 hover:bg-red-600 text-white font-medium transition-colors">Confirm</button>
+    </div>
+  </dialog>
+</Base>
+
+<script>
+  function fmtMb(mb: number): string {
+    if (mb >= 1024) return (mb / 1024).toFixed(2) + ' GB';
+    if (mb >= 1)    return mb.toFixed(0) + ' MB';
+    return (mb * 1024).toFixed(0) + ' KB';
+  }
+
+  function setStatus(el: HTMLElement, msg: string, ok: boolean) {
+    el.textContent = msg;
+    el.style.color = ok ? '#4ade80' : '#f87171';
+    el.classList.remove('hidden');
+  }
+
+  // ── Storage ─────────────────────────────────────────────────────────────────
+
+  async function loadStorage() {
+    const loading = document.getElementById('storage-loading')!;
+    const content = document.getElementById('storage-content')!;
+    try {
+      const r = await fetch('/api/me/storage', { credentials: 'include' });
+      if (r.status === 401) { window.location.href = `/login/?next=/settings/`; return; }
+      if (!r.ok) throw new Error(`HTTP ${r.status}`);
+      const d = await r.json();
+
+      document.getElementById('st-activities')!.textContent =
+        `${fmtMb(d.activities_mb)} (${d.activities_count} activities)`;
+      document.getElementById('st-originals')!.textContent = fmtMb(d.originals_mb);
+      document.getElementById('st-images')!.textContent    = fmtMb(d.images_mb);
+      document.getElementById('st-total')!.textContent     = fmtMb(d.total_mb);
+
+      if (d.strava_originals_mb > 0) {
+        document.getElementById('st-strava')!.textContent =
+          `${fmtMb(d.strava_originals_mb)} (${d.strava_originals_count} files)`;
+        document.getElementById('st-strava-row')!.classList.remove('hidden');
+      }
+
+      if (d.originals_mb > 0) {
+        document.getElementById('del-originals-area')!.classList.remove('hidden');
+      }
+
+      loading.classList.add('hidden');
+      content.classList.remove('hidden');
+    } catch (e: any) {
+      loading.textContent = 'Could not load storage info.';
+    }
+  }
+
+  document.getElementById('del-originals-btn')?.addEventListener('click', async () => {
+    const btn = document.getElementById('del-originals-btn') as HTMLButtonElement;
+    const statusEl = document.getElementById('del-originals-status')!;
+    if (!confirm('Delete all original files? The extracted activities are not affected.')) return;
+    btn.disabled = true;
+    btn.textContent = 'Deleting…';
+    try {
+      const r = await fetch('/api/me/originals', { method: 'DELETE', credentials: 'include' });
+      const d = await r.json();
+      if (r.ok) {
+        setStatus(statusEl, `Freed ${fmtMb(d.freed_mb)}.`, true);
+        btn.closest('div')!.querySelector('button')!.remove();
+        loadStorage();
+      } else {
+        btn.disabled = false;
+        btn.textContent = 'Delete original files';
+        setStatus(statusEl, d.detail ?? 'Failed', false);
+      }
+    } catch {
+      btn.disabled = false;
+      btn.textContent = 'Delete original files';
+      setStatus(statusEl, 'Could not reach server', false);
+    }
+  });
+
+  // ── Display name ─────────────────────────────────────────────────────────────
+
+  async function loadMe() {
+    try {
+      const r = await fetch('/api/me', { credentials: 'include' });
+      if (!r.ok) return;
+      const d = await r.json();
+      (document.getElementById('display-name-input') as HTMLInputElement).value = d.display_name ?? '';
+    } catch {}
+  }
+
+  document.getElementById('display-name-form')?.addEventListener('submit', async (e) => {
+    e.preventDefault();
+    const statusEl = document.getElementById('display-name-status')!;
+    const val = (document.getElementById('display-name-input') as HTMLInputElement).value.trim();
+    try {
+      const r = await fetch('/api/me/display-name', {
+        method: 'PUT',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ display_name: val }),
+      });
+      const d = await r.json();
+      if (r.ok) {
+        setStatus(statusEl, 'Saved.', true);
+        setTimeout(() => statusEl.classList.add('hidden'), 3000);
+      } else {
+        setStatus(statusEl, d.detail ?? 'Failed', false);
+      }
+    } catch {
+      setStatus(statusEl, 'Could not reach server', false);
+    }
+  });
+
+  // ── Password ─────────────────────────────────────────────────────────────────
+
+  document.getElementById('password-form')?.addEventListener('submit', async (e) => {
+    e.preventDefault();
+    const statusEl  = document.getElementById('pw-status')!;
+    const btn       = (e.target as HTMLFormElement).querySelector('button[type=submit]') as HTMLButtonElement;
+    const current   = (document.getElementById('pw-current') as HTMLInputElement).value;
+    const newPw     = (document.getElementById('pw-new')     as HTMLInputElement).value;
+    statusEl.classList.add('hidden');
+    btn.disabled = true;
+    try {
+      const r = await fetch('/api/me/password', {
+        method: 'PUT',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ current_password: current, new_password: newPw }),
+      });
+      const d = await r.json();
+      if (r.ok) {
+        setStatus(statusEl, 'Password changed.', true);
+        (document.getElementById('pw-current') as HTMLInputElement).value = '';
+        (document.getElementById('pw-new')     as HTMLInputElement).value = '';
+      } else {
+        setStatus(statusEl, d.detail ?? 'Failed', false);
+      }
+    } catch {
+      setStatus(statusEl, 'Could not reach server', false);
+    }
+    btn.disabled = false;
+  });
+
+  // ── Confirmation modal ────────────────────────────────────────────────────────
+
+  const dialog      = document.getElementById('confirm-dialog') as HTMLDialogElement;
+  const confirmTitle  = document.getElementById('confirm-title')!;
+  const confirmDesc   = document.getElementById('confirm-desc')!;
+  const confirmPw     = document.getElementById('confirm-password') as HTMLInputElement;
+  const confirmErr    = document.getElementById('confirm-error')!;
+  const confirmOk     = document.getElementById('confirm-ok') as HTMLButtonElement;
+  const confirmCancel = document.getElementById('confirm-cancel')!;
+
+  let pendingAction: 'activities' | 'account' | null = null;
+
+  function openConfirm(action: 'activities' | 'account') {
+    pendingAction = action;
+    confirmErr.classList.add('hidden');
+    confirmPw.value = '';
+    if (action === 'activities') {
+      confirmTitle.textContent = 'Delete all activity data?';
+      confirmDesc.textContent  = 'Removes all extracted activities, edits, and photos. Your account is kept.';
+    } else {
+      confirmTitle.textContent = 'Delete your account?';
+      confirmDesc.textContent  = 'Permanently deletes your account and all associated data. This cannot be undone.';
+    }
+    dialog.showModal();
+    setTimeout(() => confirmPw.focus(), 50);
+  }
+
+  confirmCancel.addEventListener('click', () => dialog.close());
+  dialog.addEventListener('click', e => { if (e.target === dialog) dialog.close(); });
+  dialog.addEventListener('keydown', e => { if (e.key === 'Escape') dialog.close(); });
+
+  confirmOk.addEventListener('click', async () => {
+    confirmErr.classList.add('hidden');
+    const password = confirmPw.value;
+    if (!password) {
+      confirmErr.textContent = 'Enter your password to confirm.';
+      confirmErr.classList.remove('hidden');
+      return;
+    }
+    confirmOk.disabled = true;
+    confirmOk.textContent = 'Working…';
+
+    const url   = pendingAction === 'account' ? '/api/me' : '/api/me/activities';
+    try {
+      const r = await fetch(url, {
+        method: 'DELETE',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ password }),
+      });
+      const d = await r.json();
+      if (r.ok) {
+        dialog.close();
+        if (pendingAction === 'account') {
+          window.location.href = '/';
+        } else {
+          window.location.reload();
+        }
+      } else {
+        confirmErr.textContent = d.detail ?? 'Failed';
+        confirmErr.classList.remove('hidden');
+        confirmOk.disabled = false;
+        confirmOk.textContent = 'Confirm';
+      }
+    } catch {
+      confirmErr.textContent = 'Could not reach server';
+      confirmErr.classList.remove('hidden');
+      confirmOk.disabled = false;
+      confirmOk.textContent = 'Confirm';
+    }
+  });
+
+  document.getElementById('del-activities-btn')?.addEventListener('click', () => openConfirm('activities'));
+  document.getElementById('del-account-btn')?.addEventListener('click',    () => openConfirm('account'));
+
+  // ── Init ─────────────────────────────────────────────────────────────────────
+
+  loadMe();
+  loadStorage();
+</script>

From 87a69bcc8bdf8c7839edd3eeebdf5b973da48fe0 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 20:37:42 +0200
Subject: [PATCH 089/124] settings: add nav visibility prefs and per-user
 Strava credentials
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- user_prefs table in db.py with get/set helpers
- GET/PUT /api/me/prefs endpoints for bulk pref management
- GET/PUT/DELETE /api/me/strava-credentials; PUT preserves existing
  secret when client_secret field is left blank
- _strava_creds() helper resolves per-user → instance fallback across
  all five Strava endpoints
- Settings page: Navigation card (hide Feed/Community/About toggles)
  and Strava credentials card
- Base.astro: ids on feed/community/about nav links; applies
  nav_hide_* prefs after login
---
 bincio/serve/db.py                  |  38 ++++++
 bincio/serve/server.py              | 136 ++++++++++++++++++++--
 site/src/layouts/Base.astro         |  25 +++-
 site/src/pages/settings/index.astro | 172 ++++++++++++++++++++++++++++
 4 files changed, 358 insertions(+), 13 deletions(-)

diff --git a/bincio/serve/db.py b/bincio/serve/db.py
index 9a901cf..96f450e 100644
--- a/bincio/serve/db.py
+++ b/bincio/serve/db.py
@@ -59,9 +59,17 @@ CREATE TABLE IF NOT EXISTS settings (
     value TEXT NOT NULL
 );
 
+CREATE TABLE IF NOT EXISTS user_prefs (
+    handle  TEXT NOT NULL REFERENCES users(handle) ON DELETE CASCADE,
+    key     TEXT NOT NULL,
+    value   TEXT NOT NULL,
+    PRIMARY KEY (handle, key)
+);
+
 CREATE INDEX IF NOT EXISTS sessions_handle ON sessions(handle);
 CREATE INDEX IF NOT EXISTS invites_created_by ON invites(created_by);
 CREATE INDEX IF NOT EXISTS reset_codes_handle ON reset_codes(handle);
+CREATE INDEX IF NOT EXISTS user_prefs_handle ON user_prefs(handle);
 """
 
 _SESSION_DAYS = 30
@@ -361,6 +369,36 @@ def create_reset_code(db: sqlite3.Connection, handle: str, created_by: str) -> s
     return code
 
 
+# ── User preferences ─────────────────────────────────────────────────────────
+
+def get_user_prefs(db: sqlite3.Connection, handle: str) -> dict[str, str]:
+    """Return all preferences for a user as a plain dict."""
+    rows = db.execute(
+        "SELECT key, value FROM user_prefs WHERE handle = ?", (handle,)
+    ).fetchall()
+    return {r["key"]: r["value"] for r in rows}
+
+
+def set_user_pref(db: sqlite3.Connection, handle: str, key: str, value: str) -> None:
+    db.execute(
+        "INSERT INTO user_prefs (handle, key, value) VALUES (?, ?, ?) "
+        "ON CONFLICT(handle, key) DO UPDATE SET value = excluded.value",
+        (handle, key, value),
+    )
+    db.commit()
+
+
+def set_user_prefs(db: sqlite3.Connection, handle: str, prefs: dict[str, str]) -> None:
+    """Bulk-upsert multiple preferences for a user."""
+    for key, value in prefs.items():
+        db.execute(
+            "INSERT INTO user_prefs (handle, key, value) VALUES (?, ?, ?) "
+            "ON CONFLICT(handle, key) DO UPDATE SET value = excluded.value",
+            (handle, key, value),
+        )
+    db.commit()
+
+
 def use_reset_code(db: sqlite3.Connection, code: str, handle: str) -> bool:
     """Validate a reset code for the given handle and mark it used.
 
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index acac2dc..7d24c8e 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -41,6 +41,8 @@ from bincio.serve.db import (
     get_session,
     get_setting,
     get_user,
+    get_user_prefs,
+    set_user_prefs,
     list_invites,
     list_users,
     open_db,
@@ -99,6 +101,29 @@ def _get_db():
     return _db
 
 
+_STRAVA_CREDS_FILE = "strava_credentials.json"
+
+
+def _strava_creds(handle: str) -> tuple[str, str]:
+    """Return (client_id, client_secret) for a user.
+
+    Per-user credentials stored in {user_dir}/strava_credentials.json take
+    precedence over the global instance-level strava_client_id/secret.
+    Returns ("", "") when neither is configured.
+    """
+    creds_path = _get_data_dir() / handle / _STRAVA_CREDS_FILE
+    if creds_path.exists():
+        try:
+            d = json.loads(creds_path.read_text(encoding="utf-8"))
+            cid = str(d.get("client_id", "")).strip()
+            csec = str(d.get("client_secret", "")).strip()
+            if cid and csec:
+                return cid, csec
+        except Exception:
+            pass
+    return strava_client_id, strava_client_secret
+
+
 def _get_data_dir() -> Path:
     if data_dir is None:
         raise HTTPException(500, "Server not configured")
@@ -1013,6 +1038,92 @@ async def me_update_display_name(
     return JSONResponse({"ok": True, "display_name": display_name})
 
 
+@app.get("/api/me/prefs")
+async def me_get_prefs(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Return all user preferences as a key→value dict."""
+    user = _require_user(bincio_session)
+    return JSONResponse(get_user_prefs(_get_db(), user.handle))
+
+
+@app.put("/api/me/prefs")
+async def me_set_prefs(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Upsert one or more user preferences. Body: {key: value, ...} (all strings)."""
+    user = _require_user(bincio_session)
+    body = await request.json()
+    if not isinstance(body, dict):
+        raise HTTPException(400, "Body must be a JSON object")
+    # Coerce all values to strings; ignore unknown keys silently
+    prefs = {str(k): str(v) for k, v in body.items()}
+    set_user_prefs(_get_db(), user.handle, prefs)
+    return JSONResponse({"ok": True})
+
+
+@app.get("/api/me/strava-credentials")
+async def me_get_strava_credentials(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Return whether per-user Strava credentials are configured (never returns the secret)."""
+    user = _require_user(bincio_session)
+    creds_path = _get_data_dir() / user.handle / _STRAVA_CREDS_FILE
+    has_user_creds = False
+    client_id_hint = ""
+    if creds_path.exists():
+        try:
+            d = json.loads(creds_path.read_text(encoding="utf-8"))
+            cid = str(d.get("client_id", "")).strip()
+            csec = str(d.get("client_secret", "")).strip()
+            if cid and csec:
+                has_user_creds = True
+                client_id_hint = cid
+        except Exception:
+            pass
+    return JSONResponse({
+        "has_user_creds": has_user_creds,
+        "client_id": client_id_hint,
+        "instance_configured": bool(strava_client_id),
+    })
+
+
+@app.put("/api/me/strava-credentials")
+async def me_set_strava_credentials(
+    request: Request,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Save per-user Strava credentials. Body: {client_id, client_secret}."""
+    user = _require_user(bincio_session)
+    body = await request.json()
+    cid  = str(body.get("client_id",     "")).strip()
+    csec = str(body.get("client_secret", "")).strip()
+    if not cid:
+        raise HTTPException(400, "client_id is required")
+    creds_path = _get_data_dir() / user.handle / _STRAVA_CREDS_FILE
+    # If client_secret is omitted, preserve existing secret (if any)
+    if not csec:
+        if creds_path.exists():
+            try:
+                existing = json.loads(creds_path.read_text(encoding="utf-8"))
+                csec = str(existing.get("client_secret", "")).strip()
+            except Exception:
+                pass
+    if not csec:
+        raise HTTPException(400, "client_secret is required (no existing secret to preserve)")
+    creds_path.write_text(
+        json.dumps({"client_id": cid, "client_secret": csec}, indent=2),
+        encoding="utf-8",
+    )
+    return JSONResponse({"ok": True})
+
+
+@app.delete("/api/me/strava-credentials")
+async def me_delete_strava_credentials(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
+    """Remove per-user Strava credentials (falls back to instance credentials)."""
+    user = _require_user(bincio_session)
+    creds_path = _get_data_dir() / user.handle / _STRAVA_CREDS_FILE
+    creds_path.unlink(missing_ok=True)
+    return JSONResponse({"ok": True})
+
+
 @app.put("/api/me/password")
 async def me_change_password(
     request: Request,
@@ -1574,7 +1685,8 @@ _strava_oauth_states: set[str] = set()
 @app.get("/api/strava/status")
 async def strava_status(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     user = _require_user(bincio_session)
-    if not strava_client_id:
+    cid, _ = _strava_creds(user.handle)
+    if not cid:
         return JSONResponse({"configured": False, "connected": False, "last_sync": None})
     dd = _get_data_dir() / user.handle
     from bincio.extract.strava_api import load_token
@@ -1640,8 +1752,9 @@ async def strava_reset(request: Request, bincio_session: Optional[str] = Cookie(
 
 @app.get("/api/strava/auth-url")
 async def strava_auth_url(request: Request, bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
-    _require_user(bincio_session)
-    if not strava_client_id:
+    user = _require_user(bincio_session)
+    cid, _ = _strava_creds(user.handle)
+    if not cid:
         raise HTTPException(400, "Strava client ID not configured on this server")
     state = secrets.token_urlsafe(16)
     _strava_oauth_states.add(state)
@@ -1650,7 +1763,7 @@ async def strava_auth_url(request: Request, bincio_session: Optional[str] = Cook
     else:
         redirect_uri = str(request.url_for("strava_callback"))
     from bincio.extract.strava_api import auth_url
-    return JSONResponse({"url": auth_url(strava_client_id, redirect_uri, state=state)})
+    return JSONResponse({"url": auth_url(cid, redirect_uri, state=state)})
 
 
 @app.get("/api/strava/callback", name="strava_callback")
@@ -1670,12 +1783,13 @@ async def strava_callback(
     user = _current_user(bincio_session)
     if not user:
         return RedirectResponse(f"{site_origin}/?strava=error")
-    if not strava_client_id or not strava_client_secret:
+    cid, csec = _strava_creds(user.handle)
+    if not cid or not csec:
         return RedirectResponse(f"{site_origin}/?strava=error")
     dd = _get_data_dir() / user.handle
     from bincio.extract.strava_api import StravaError, exchange_code, save_token
     try:
-        token = exchange_code(strava_client_id, strava_client_secret, code)
+        token = exchange_code(cid, csec, code)
     except StravaError:
         return RedirectResponse(f"{site_origin}/?strava=error")
     save_token(dd, token)
@@ -1686,7 +1800,8 @@ async def strava_callback(
 async def serve_strava_sync_stream(bincio_session: Optional[str] = Cookie(default=None)) -> StreamingResponse:
     """SSE endpoint — streams per-activity progress then a final summary event."""
     user = _require_user(bincio_session)
-    if not strava_client_id or not strava_client_secret:
+    cid, csec = _strava_creds(user.handle)
+    if not cid or not csec:
         raise HTTPException(400, "Strava not configured on this server")
     dd = _get_data_dir() / user.handle
     store_orig_setting = get_setting(_get_db(), "store_originals")
@@ -1699,7 +1814,7 @@ async def serve_strava_sync_stream(bincio_session: Optional[str] = Cookie(defaul
 
     def event_stream():
         try:
-            for event in strava_sync_iter(dd, strava_client_id, strava_client_secret, originals_dir):
+            for event in strava_sync_iter(dd, cid, csec, originals_dir):
                 if event["type"] == "done":
                     _trigger_rebuild(user.handle)  # start before client closes connection
                 yield f"data: {json.dumps(event)}\n\n"
@@ -1716,7 +1831,8 @@ async def serve_strava_sync_stream(bincio_session: Optional[str] = Cookie(defaul
 @app.post("/api/strava/sync")
 async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     user = _require_user(bincio_session)
-    if not strava_client_id or not strava_client_secret:
+    cid, csec = _strava_creds(user.handle)
+    if not cid or not csec:
         raise HTTPException(400, "Strava not configured on this server")
     dd = _get_data_dir() / user.handle
     store_orig_setting = get_setting(_get_db(), "store_originals")
@@ -1726,7 +1842,7 @@ async def serve_strava_sync(bincio_session: Optional[str] = Cookie(default=None)
         originals_dir.mkdir(parents=True, exist_ok=True)
     from bincio.edit.ops import run_strava_sync
     try:
-        result = run_strava_sync(dd, strava_client_id, strava_client_secret, originals_dir=originals_dir)
+        result = run_strava_sync(dd, cid, csec, originals_dir=originals_dir)
     except RuntimeError as e:
         raise HTTPException(502, str(e))
     _trigger_rebuild(user.handle)
diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 85ab878..4ac1b65 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -166,7 +166,7 @@ try {
         <div class="nav-links flex items-center gap-5 overflow-x-auto flex-1 min-w-0">
           <!-- Feed tab: only shown for multi-user (more than one shard) -->
           {!singleHandle && (
-            <a href={baseUrl} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Feed</a>
+            <a id="nav-feed" href={baseUrl} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Feed</a>
           )}
           <!-- Single-user: static handle link. Multi-user: populated by user-widget script. -->
           {singleHandle
@@ -177,7 +177,7 @@ try {
           <a id="nav-stats"   href={singleHandle ? `${baseUrl}u/${singleHandle}/stats/`   : `${baseUrl}stats/`}   data-user-path="stats/"   class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Stats</a>
           <a id="nav-athlete" href={singleHandle ? `${baseUrl}u/${singleHandle}/athlete/` : `${baseUrl}athlete/`} data-user-path="athlete/" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Athlete</a>
           {!singleHandle && (
-            <a href={`${baseUrl}community/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Community</a>
+            <a id="nav-community" href={`${baseUrl}community/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Community</a>
           )}
           {mobileApp && (
             <a id="nav-record" href={singleHandle ? `${baseUrl}u/${singleHandle}/record/` : `${baseUrl}record/`} data-user-path="record/" class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Record</a>
@@ -185,7 +185,7 @@ try {
           {mobileApp && (
             <a href={`${baseUrl}convert/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">Convert</a>
           )}
-          <a href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">About</a>
+          <a id="nav-about" href={`${baseUrl}about/`} class="text-sm text-zinc-400 hover:text-white transition-colors shrink-0">About</a>
         </div>
       )}
 
@@ -511,6 +511,25 @@ try {
           const chk = document.getElementById('upload-keep-original');
           if (chk && user.store_originals_default) chk.checked = true;
 
+          // Apply nav visibility prefs
+          try {
+            const pr = await fetch('/api/me/prefs', { credentials: 'include' });
+            if (pr.ok) {
+              const prefs = await pr.json();
+              const navHideMap: Record<string, string> = {
+                'nav_hide_feed':      'nav-feed',
+                'nav_hide_community': 'nav-community',
+                'nav_hide_about':     'nav-about',
+              };
+              for (const [key, elId] of Object.entries(navHideMap)) {
+                if (prefs[key] === 'true') {
+                  const el = document.getElementById(elId);
+                  if (el) el.style.display = 'none';
+                }
+              }
+            }
+          } catch (_) {}
+
           // Admin: show admin link and poll for active jobs
           if (user.is_admin) {
             const adminLink = document.getElementById('nav-admin');
diff --git a/site/src/pages/settings/index.astro b/site/src/pages/settings/index.astro
index b0d95b9..9443846 100644
--- a/site/src/pages/settings/index.astro
+++ b/site/src/pages/settings/index.astro
@@ -85,6 +85,58 @@ import Base from '../../layouts/Base.astro';
       </form>
     </section>
 
+    <!-- Navigation visibility card -->
+    <section class="mb-6 rounded-xl bg-zinc-900 border border-zinc-800 p-5">
+      <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-1">Navigation</h2>
+      <p class="text-xs text-zinc-600 mb-4">Hide items from the top nav bar. Affects only your view.</p>
+      <div class="space-y-3">
+        <label class="flex items-center gap-3 cursor-pointer group">
+          <input id="nav-hide-feed" type="checkbox" class="accent-[--accent]" />
+          <span class="text-sm text-zinc-300 group-hover:text-white transition-colors">Hide Feed</span>
+        </label>
+        <label class="flex items-center gap-3 cursor-pointer group">
+          <input id="nav-hide-community" type="checkbox" class="accent-[--accent]" />
+          <span class="text-sm text-zinc-300 group-hover:text-white transition-colors">Hide Community</span>
+        </label>
+        <label class="flex items-center gap-3 cursor-pointer group">
+          <input id="nav-hide-about" type="checkbox" class="accent-[--accent]" />
+          <span class="text-sm text-zinc-300 group-hover:text-white transition-colors">Hide About</span>
+        </label>
+      </div>
+      <p id="nav-prefs-status" class="text-xs mt-3 hidden"></p>
+    </section>
+
+    <!-- Strava credentials card -->
+    <section class="mb-6 rounded-xl bg-zinc-900 border border-zinc-800 p-5">
+      <h2 class="text-sm font-semibold text-zinc-400 uppercase tracking-wider mb-1">Strava API credentials</h2>
+      <p id="strava-creds-desc" class="text-xs text-zinc-600 mb-4">Loading…</p>
+      <form id="strava-creds-form" class="space-y-3">
+        <div>
+          <label class="block text-xs text-zinc-500 mb-1" for="strava-client-id">Client ID</label>
+          <input id="strava-client-id" type="text" autocomplete="off"
+            class="w-full px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-white placeholder-zinc-500 focus:outline-none focus:border-[--accent] text-sm"
+            placeholder="123456" />
+        </div>
+        <div>
+          <label class="block text-xs text-zinc-500 mb-1" for="strava-client-secret">Client secret</label>
+          <input id="strava-client-secret" type="password" autocomplete="off"
+            class="w-full px-3 py-2 rounded-lg bg-zinc-800 border border-zinc-700 text-white placeholder-zinc-500 focus:outline-none focus:border-[--accent] text-sm"
+            placeholder="Leave blank to keep existing" />
+        </div>
+        <p id="strava-creds-status" class="text-xs hidden"></p>
+        <div class="flex gap-2">
+          <button type="submit"
+            class="px-4 py-2 rounded-lg text-sm bg-zinc-700 hover:bg-zinc-600 text-white transition-colors">
+            Save
+          </button>
+          <button type="button" id="strava-creds-clear"
+            class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors">
+            Use instance credentials
+          </button>
+        </div>
+      </form>
+    </section>
+
     <!-- Danger zone -->
     <section class="rounded-xl bg-zinc-900 border border-red-900/40 p-5">
       <h2 class="text-sm font-semibold text-red-400/70 uppercase tracking-wider mb-4">Danger zone</h2>
@@ -342,8 +394,128 @@ import Base from '../../layouts/Base.astro';
   document.getElementById('del-activities-btn')?.addEventListener('click', () => openConfirm('activities'));
   document.getElementById('del-account-btn')?.addEventListener('click',    () => openConfirm('account'));
 
+  // ── Navigation prefs ─────────────────────────────────────────────────────────
+
+  const NAV_PREF_KEYS: Record<string, string> = {
+    'nav-hide-feed':      'nav_hide_feed',
+    'nav-hide-community': 'nav_hide_community',
+    'nav-hide-about':     'nav_hide_about',
+  };
+
+  async function loadNavPrefs() {
+    try {
+      const r = await fetch('/api/me/prefs', { credentials: 'include' });
+      if (!r.ok) return;
+      const prefs = await r.json();
+      for (const [elId, key] of Object.entries(NAV_PREF_KEYS)) {
+        const el = document.getElementById(elId) as HTMLInputElement | null;
+        if (el) el.checked = prefs[key] === 'true';
+      }
+    } catch {}
+  }
+
+  async function saveNavPref(key: string, value: boolean) {
+    const statusEl = document.getElementById('nav-prefs-status')!;
+    try {
+      const r = await fetch('/api/me/prefs', {
+        method: 'PUT',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ [key]: String(value) }),
+      });
+      if (r.ok) {
+        setStatus(statusEl, 'Saved.', true);
+        setTimeout(() => statusEl.classList.add('hidden'), 2000);
+      } else {
+        const d = await r.json();
+        setStatus(statusEl, d.detail ?? 'Failed', false);
+      }
+    } catch {
+      setStatus(statusEl, 'Could not reach server', false);
+    }
+  }
+
+  for (const [elId, key] of Object.entries(NAV_PREF_KEYS)) {
+    document.getElementById(elId)?.addEventListener('change', (e) => {
+      saveNavPref(key, (e.target as HTMLInputElement).checked);
+    });
+  }
+
+  // ── Strava credentials ────────────────────────────────────────────────────────
+
+  async function loadStravaCreds() {
+    const desc = document.getElementById('strava-creds-desc')!;
+    try {
+      const r = await fetch('/api/me/strava-credentials', { credentials: 'include' });
+      if (!r.ok) { desc.textContent = 'Not available.'; return; }
+      const d = await r.json();
+      if (d.has_user_creds) {
+        desc.textContent = `Using your own credentials (Client ID: ${d.client_id}).`;
+        (document.getElementById('strava-client-id') as HTMLInputElement).value = d.client_id ?? '';
+      } else if (d.instance_configured) {
+        desc.textContent = 'Using instance-level credentials. Enter your own below to override.';
+      } else {
+        desc.textContent = 'Strava is not configured on this instance. You can set your own API credentials below.';
+      }
+    } catch {
+      desc.textContent = 'Could not load Strava settings.';
+    }
+  }
+
+  document.getElementById('strava-creds-form')?.addEventListener('submit', async (e) => {
+    e.preventDefault();
+    const statusEl = document.getElementById('strava-creds-status')!;
+    const clientId     = (document.getElementById('strava-client-id')     as HTMLInputElement).value.trim();
+    const clientSecret = (document.getElementById('strava-client-secret') as HTMLInputElement).value.trim();
+    if (!clientId) {
+      setStatus(statusEl, 'Client ID is required.', false);
+      return;
+    }
+    try {
+      const body: Record<string, string> = { client_id: clientId };
+      if (clientSecret) body.client_secret = clientSecret;
+      const r = await fetch('/api/me/strava-credentials', {
+        method: 'PUT',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+      });
+      const d = await r.json();
+      if (r.ok) {
+        setStatus(statusEl, 'Saved.', true);
+        (document.getElementById('strava-client-secret') as HTMLInputElement).value = '';
+        loadStravaCreds();
+      } else {
+        setStatus(statusEl, d.detail ?? 'Failed', false);
+      }
+    } catch {
+      setStatus(statusEl, 'Could not reach server', false);
+    }
+  });
+
+  document.getElementById('strava-creds-clear')?.addEventListener('click', async () => {
+    const statusEl = document.getElementById('strava-creds-status')!;
+    if (!confirm('Remove your custom Strava credentials and fall back to instance credentials?')) return;
+    try {
+      const r = await fetch('/api/me/strava-credentials', { method: 'DELETE', credentials: 'include' });
+      if (r.ok) {
+        setStatus(statusEl, 'Cleared — using instance credentials.', true);
+        (document.getElementById('strava-client-id')     as HTMLInputElement).value = '';
+        (document.getElementById('strava-client-secret') as HTMLInputElement).value = '';
+        loadStravaCreds();
+      } else {
+        const d = await r.json();
+        setStatus(statusEl, d.detail ?? 'Failed', false);
+      }
+    } catch {
+      setStatus(statusEl, 'Could not reach server', false);
+    }
+  });
+
   // ── Init ─────────────────────────────────────────────────────────────────────
 
   loadMe();
   loadStorage();
+  loadNavPrefs();
+  loadStravaCreds();
 </script>

From 7142ac8f2e98bc3b3d6fc42f0619ba3ab251abaf Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 20:42:31 +0200
Subject: [PATCH 090/124] settings: split danger zone into delete originals /
 delete all activities

Move "Delete original files" out of the Storage card and into the
Danger zone as a first, less-destructive step (simple confirm, no
password needed). "Delete all activity data" and "Delete account"
follow below it, both still password-gated. Descriptions clarify
exactly what each action does and does not remove.
---
 site/src/pages/settings/index.astro | 35 +++++++++++++----------------
 1 file changed, 16 insertions(+), 19 deletions(-)

diff --git a/site/src/pages/settings/index.astro b/site/src/pages/settings/index.astro
index 9443846..7f039b9 100644
--- a/site/src/pages/settings/index.astro
+++ b/site/src/pages/settings/index.astro
@@ -31,17 +31,6 @@ import Base from '../../layouts/Base.astro';
           <span id="st-total" class="text-white tabular-nums"></span>
         </div>
       </div>
-      <!-- Delete originals -->
-      <div id="del-originals-area" class="mt-4 hidden">
-        <p class="text-xs text-zinc-500 mb-3">
-          Original files are kept for reprocessing. Once your activities look correct you can free this space — the extracted data is not affected.
-        </p>
-        <button id="del-originals-btn"
-          class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-amber-900 hover:text-amber-300 text-zinc-300 transition-colors">
-          Delete original files
-        </button>
-        <p id="del-originals-status" class="text-xs mt-2 hidden"></p>
-      </div>
     </section>
 
     <!-- Profile card -->
@@ -141,10 +130,21 @@ import Base from '../../layouts/Base.astro';
     <section class="rounded-xl bg-zinc-900 border border-red-900/40 p-5">
       <h2 class="text-sm font-semibold text-red-400/70 uppercase tracking-wider mb-4">Danger zone</h2>
 
-      <!-- Delete activities -->
+      <!-- Delete original files -->
       <div class="mb-5">
-        <p class="text-sm text-zinc-300 font-medium mb-1">Reset activity data</p>
-        <p class="text-xs text-zinc-500 mb-3">Wipes all extracted activities, edits, and photos. Your account is kept. Cannot be undone.</p>
+        <p class="text-sm text-zinc-300 font-medium mb-1">Delete original files</p>
+        <p class="text-xs text-zinc-500 mb-3">Removes the raw source files kept for reprocessing (originals/). Your extracted activities, edits, and photos are not affected.</p>
+        <button id="del-originals-btn"
+          class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-amber-900 hover:text-amber-300 text-zinc-400 transition-colors">
+          Delete original files
+        </button>
+        <p id="del-originals-status" class="text-xs mt-2 hidden"></p>
+      </div>
+
+      <!-- Delete all activity data -->
+      <div class="border-t border-zinc-800 pt-5 mb-5">
+        <p class="text-sm text-zinc-300 font-medium mb-1">Delete all activity data</p>
+        <p class="text-xs text-zinc-500 mb-3">Wipes all extracted activities, edits, and photos. Your account and original files are kept. Cannot be undone.</p>
         <button id="del-activities-btn"
           class="px-4 py-2 rounded-lg text-sm bg-zinc-800 hover:bg-red-900 hover:text-red-300 text-zinc-400 transition-colors">
           Delete all activities
@@ -218,10 +218,6 @@ import Base from '../../layouts/Base.astro';
         document.getElementById('st-strava-row')!.classList.remove('hidden');
       }
 
-      if (d.originals_mb > 0) {
-        document.getElementById('del-originals-area')!.classList.remove('hidden');
-      }
-
       loading.classList.add('hidden');
       content.classList.remove('hidden');
     } catch (e: any) {
@@ -240,7 +236,8 @@ import Base from '../../layouts/Base.astro';
       const d = await r.json();
       if (r.ok) {
         setStatus(statusEl, `Freed ${fmtMb(d.freed_mb)}.`, true);
-        btn.closest('div')!.querySelector('button')!.remove();
+        btn.disabled = true;
+        btn.textContent = 'Already deleted';
         loadStorage();
       } else {
         btn.disabled = false;

From a95dd07e224d5f146af4502fc5ed6afa2f6d668b Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 20:48:11 +0200
Subject: [PATCH 091/124] fix: remove TS type annotation from define:vars
 script (plain JS only)

---
 site/src/layouts/Base.astro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index 4ac1b65..ee18dae 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -516,7 +516,7 @@ try {
             const pr = await fetch('/api/me/prefs', { credentials: 'include' });
             if (pr.ok) {
               const prefs = await pr.json();
-              const navHideMap: Record<string, string> = {
+              const navHideMap = {
                 'nav_hide_feed':      'nav-feed',
                 'nav_hide_community': 'nav-community',
                 'nav_hide_about':     'nav-about',

From 5205a412249041f06505f6dab594b7a42e04feb0 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 22:18:06 +0200
Subject: [PATCH 092/124] =?UTF-8?q?fix:=20theme-aware=20chart=20colors=20?=
 =?UTF-8?q?=E2=80=94=20readable=20axes=20and=20tooltips=20in=20light=20mod?=
 =?UTF-8?q?e?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 site/src/components/ActivityCharts.svelte | 42 +++++++++++++++++------
 site/src/components/MmpChart.svelte       | 10 ++++--
 2 files changed, 40 insertions(+), 12 deletions(-)

diff --git a/site/src/components/ActivityCharts.svelte b/site/src/components/ActivityCharts.svelte
index b80deec..c23eef4 100644
--- a/site/src/components/ActivityCharts.svelte
+++ b/site/src/components/ActivityCharts.svelte
@@ -121,9 +121,27 @@
   // Reset when switching away from a zone-capable metric or leaving histogram
   $: if (!canAlignZones) alignZones = false;
 
+  // ── Theme-aware colours ──────────────────────────────────────────────────
+  function getThemeColors() {
+    const isDark = document.documentElement.getAttribute('data-theme') !== 'light';
+    return {
+      axis:       isDark ? '#71717a' : '#52525b',          // zinc-500 / zinc-600
+      rule:       isDark ? 'rgba(255,255,255,0.25)' : 'rgba(0,0,0,0.2)',
+      tooltipFg:  isDark ? '#ffffff' : '#18181b',
+      tooltipBg:  isDark ? '#09090b' : '#ffffff',          // text outline backing
+      ruleY:      isDark ? '#3f3f46' : '#d4d4d8',          // baseline rule
+    };
+  }
+
   // ── Rendering ────────────────────────────────────────────────────────────
-  onMount(() => { renderChart(); });
-  onDestroy(() => { chart?.remove(); chart = null; });
+  let themeObserver: MutationObserver | null = null;
+
+  onMount(() => {
+    renderChart();
+    themeObserver = new MutationObserver(() => renderChart());
+    themeObserver.observe(document.documentElement, { attributes: true, attributeFilter: ['data-theme'] });
+  });
+  onDestroy(() => { chart?.remove(); chart = null; themeObserver?.disconnect(); });
 
   $: if (chartEl) {
     activeTab; xMode; chartType; histData; histThresholds; alignZones;
@@ -162,6 +180,7 @@
 
   function renderLine(w: number, h: number, yKey: string, yLabel: string, color: string) {
     const x = xMode === 'distance' ? 'dist_km' : 't';
+    const tc = getThemeColors();
     const marks: any[] = [];
 
     if (activeTab === 'cadence') {
@@ -174,12 +193,14 @@
     }
 
     marks.push(
-      Plot.ruleX(data, Plot.pointerX({ x, stroke: 'rgba(255,255,255,0.3)', strokeWidth: 1, strokeDasharray: '4,4' })),
-      Plot.dot(data,  Plot.pointerX({ x, y: yKey, r: 4, fill: color, stroke: 'white', strokeWidth: 1.5 })),
+      Plot.ruleX(data, Plot.pointerX({ x, stroke: tc.rule, strokeWidth: 1, strokeDasharray: '4,4' })),
+      Plot.dot(data,  Plot.pointerX({ x, y: yKey, r: 4, fill: color, stroke: tc.tooltipBg, strokeWidth: 1.5 })),
       Plot.text(data, Plot.pointerX({
         x, y: yKey,
         text: (d: any) => d[yKey] != null ? `${Math.round(d[yKey])}` : '',
-        dy: -12, fill: 'white', fontSize: 11, fontWeight: '600',
+        dy: -12,
+        fill: tc.tooltipFg, stroke: tc.tooltipBg, strokeWidth: 3,
+        fontSize: 11, fontWeight: '600',
       })),
     );
 
@@ -193,7 +214,7 @@
 
     return Plot.plot({
       width: w, height: h, marginLeft: 48, marginBottom: 32,
-      style: { background: 'transparent', color: 'var(--text-4, #a1a1aa)', fontSize: '11px' },
+      style: { background: 'transparent', color: tc.axis, fontSize: '11px' },
       x: { label: null, tickFormat: xTickFormat, grid: false, ticks: 6 },
       y: { label: yLabel, grid: true, tickCount: 4 },
       marks,
@@ -204,6 +225,7 @@
     const yTickFormat = (v: number) => v >= 60 ? `${Math.round(v / 60)}m` : `${v}s`;
     const rawZones = activeTab === 'hr' ? athlete?.hr_zones : activeTab === 'power' ? athlete?.power_zones : null;
     const zoneColors = activeTab === 'hr' ? HR_ZONE_COLORS : PWR_ZONE_COLORS;
+    const tc = getThemeColors();
 
     // ── Zone-aligned: one colored bar per zone ──────────────────────────────
     if (alignZones && rawZones?.length) {
@@ -224,7 +246,7 @@
 
       return Plot.plot({
         width: w, height: h, marginLeft: 48, marginBottom: 32,
-        style: { background: 'transparent', color: 'var(--text-4, #a1a1aa)', fontSize: '11px' },
+        style: { background: 'transparent', color: tc.axis, fontSize: '11px' },
         x: { label: yLabel, grid: false, domain: [clampedZones[0][0], clampedZones[clampedZones.length - 1][1]] },
         y: { label: 'Time', grid: true, tickCount: 4, tickFormat: yTickFormat },
         marks: [
@@ -240,7 +262,7 @@
             fontSize: 10, fontWeight: '600',
             dy: -8,
           }),
-          Plot.ruleY([0], { stroke: '#52525b' }),
+          Plot.ruleY([0], { stroke: tc.ruleY }),
         ],
       });
     }
@@ -251,7 +273,7 @@
         { y: 'count' },
         { x: yKey, fill: color, fillOpacity: 0.7, thresholds: histThresholds },
       )),
-      Plot.ruleY([0], { stroke: '#52525b' }),
+      Plot.ruleY([0], { stroke: tc.ruleY }),
     ];
 
     if (rawZones?.length) {
@@ -282,7 +304,7 @@
 
     return Plot.plot({
       width: w, height: h, marginLeft: 48, marginBottom: 32,
-      style: { background: 'transparent', color: 'var(--text-4, #a1a1aa)', fontSize: '11px' },
+      style: { background: 'transparent', color: tc.axis, fontSize: '11px' },
       x: { label: yLabel, grid: false, ticks: 6, domain: [trimMin, trimMax] },
       y: { label: 'Time', grid: true, tickCount: 4, tickFormat: yTickFormat },
       marks,
diff --git a/site/src/components/MmpChart.svelte b/site/src/components/MmpChart.svelte
index 40e3744..7432f1a 100644
--- a/site/src/components/MmpChart.svelte
+++ b/site/src/components/MmpChart.svelte
@@ -82,6 +82,10 @@
 
   $: colorMap = Object.fromEntries(selectedKeys.map((k, i) => [k, curveColor(k, i)]));
 
+  function getAxisColor() {
+    return document.documentElement.getAttribute('data-theme') === 'light' ? '#52525b' : '#a1a1aa';
+  }
+
   function renderChart(data: typeof plotData, cmap: typeof colorMap) {
     if (!chartEl) return;
     chartEl.innerHTML = '';
@@ -95,7 +99,7 @@
       height: 320,
       marginLeft: 52,
       marginBottom: 40,
-      style: { background: 'transparent', color: '#e4e4e7' },
+      style: { background: 'transparent', color: getAxisColor() },
       x: {
         type: 'log',
         label: 'Duration',
@@ -160,7 +164,9 @@
   onMount(() => {
     const ro = new ResizeObserver(() => renderChart(currentPlotData, currentColorMap));
     ro.observe(chartEl);
-    return () => ro.disconnect();
+    const mo = new MutationObserver(() => renderChart(currentPlotData, currentColorMap));
+    mo.observe(document.documentElement, { attributes: true, attributeFilter: ['data-theme'] });
+    return () => { ro.disconnect(); mo.disconnect(); };
   });
 
   // ── Toggle helpers ─────────────────────────────────────────────────────────

From bfb6432666bb455c069a687e928e1e7e2c3efddf Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 22:53:48 +0200
Subject: [PATCH 093/124] fix: force black text in Plot tooltips (white bg,
 grey text was unreadable)

---
 site/src/components/MmpChart.svelte | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/site/src/components/MmpChart.svelte b/site/src/components/MmpChart.svelte
index 7432f1a..cbdb4bf 100644
--- a/site/src/components/MmpChart.svelte
+++ b/site/src/components/MmpChart.svelte
@@ -187,6 +187,11 @@
   ];
 </script>
 
+<style>
+  /* Plot tooltips always have a white background — force black text for contrast */
+  :global(.plot-tip text) { fill: #18181b !important; }
+</style>
+
 <!-- Range selector pills -->
 <div class="flex flex-wrap gap-2 mb-4">
   {#each allRangeKeys as key, i}

From 395182649b136831f3323dbd3122c4d7d028a640 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 15 Apr 2026 23:07:52 +0200
Subject: [PATCH 094/124] improve docs

---
 .gitignore                    |   3 +
 README.md                     |   3 +-
 bincio/serve/server.py        | 124 ++++++++++----
 docs/admin-guide.md           | 306 +++++++++++++++++++++++++++++++++
 docs/architecture.md          |   2 +-
 docs/deployment/multi-user.md |   2 +-
 docs/developer-guide.md       | 307 ++++++++++++++++++++++++++++++++++
 docs/getting-started.md       |   2 +-
 docs/index.md                 |  38 +++++
 SCHEMA.md => docs/schema.md   |   0
 docs/user-guide.md            | 180 ++++++++++++++++++++
 mkdocs.yml                    |  66 ++++++++
 pyproject.toml                |   4 +
 13 files changed, 1004 insertions(+), 33 deletions(-)
 create mode 100644 docs/admin-guide.md
 create mode 100644 docs/developer-guide.md
 create mode 100644 docs/index.md
 rename SCHEMA.md => docs/schema.md (100%)
 create mode 100644 docs/user-guide.md
 create mode 100644 mkdocs.yml

diff --git a/.gitignore b/.gitignore
index f20ab04..fa7a52d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,6 +21,9 @@ site/node_modules/
 site/dist/
 site/.astro/
 
+# MkDocs
+mkdocs-site/
+
 # BAS data stores (user data, not committed to the tool repo)
 bincio_data/
 *.bincio_cache.json
diff --git a/README.md b/README.md
index 6160ab4..a2cb2f5 100644
--- a/README.md
+++ b/README.md
@@ -203,7 +203,7 @@ Privacy is enforced at extract time. A `private` activity never enters `index.js
 
 `index.json` is everything the feed page needs — no extra fetches until you open an activity. `{id}.json` contains the full timeseries (elevation, speed, HR, cadence, power at 1 Hz) for charts and the detail map. Both are human-readable and editable with any text editor.
 
-See [SCHEMA.md](SCHEMA.md) for the full specification.
+See [SCHEMA.md](docs/schema.md) for the full specification.
 
 ---
 
@@ -293,7 +293,6 @@ bincio/                 Python package
     server.py           FastAPI write API (activity edits, image + file upload)
 schema/
   bas-v1.schema.json    JSON Schema for BAS format
-SCHEMA.md               Human-readable BAS specification
 site/                   Astro project
   src/
     pages/
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 7d24c8e..e486139 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -49,6 +49,73 @@ from bincio.serve.db import (
     use_invite,
 )
 
+from pydantic import BaseModel, Field
+
+# ── Pydantic request/response models ─────────────────────────────────────────
+
+
+class LoginRequest(BaseModel):
+    handle: str = Field(..., description="User handle (username)")
+    password: str = Field(..., description="User password")
+
+
+class LoginResponse(BaseModel):
+    ok: bool = Field(True, description="Success flag")
+    handle: str = Field(..., description="User handle")
+    display_name: str = Field(..., description="User's display name")
+
+
+class ResetPasswordRequest(BaseModel):
+    handle: str = Field(..., description="User handle")
+    code: str = Field(..., description="Reset code (24 hours valid)")
+    password: str = Field(..., description="New password (min 8 chars)")
+
+
+class RegisterRequest(BaseModel):
+    code: str = Field(..., description="Invite code")
+    handle: str = Field(..., description="Desired username (lowercase, 1-30 chars)")
+    password: str = Field(..., description="Password (min 8 characters)")
+    display_name: str = Field(default="", description="Full name (optional, defaults to handle)")
+
+
+class RegisterResponse(BaseModel):
+    ok: bool = Field(True, description="Success flag")
+    handle: str = Field(..., description="New user's handle")
+
+
+class CurrentUserResponse(BaseModel):
+    handle: str = Field(..., description="User handle")
+    display_name: str = Field(..., description="User's display name")
+    is_admin: bool = Field(..., description="Whether user is an admin")
+    store_originals_default: bool = Field(
+        default=True,
+        description="Instance-wide default for storing original files"
+    )
+
+
+class ActivityEditRequest(BaseModel):
+    title: str | None = Field(default=None, description="Activity title")
+    description: str | None = Field(default=None, description="Activity description (markdown)")
+    sport: str | None = Field(default=None, description="Sport type")
+    private: bool | None = Field(default=None, description="Hide from public feed")
+    highlight: bool | None = Field(default=None, description="Mark as favorite")
+    gear: str | None = Field(default=None, description="Gear used (e.g., 'Trek Domane')")
+
+
+class ActivityEditResponse(BaseModel):
+    ok: bool = Field(True, description="Success flag")
+
+
+class ResetPasswordCodeResponse(BaseModel):
+    ok: bool = Field(True, description="Success flag")
+    code: str = Field(..., description="One-time reset code")
+    expires_in_hours: int = Field(24, description="Code validity period in hours")
+
+
+class GenericResponse(BaseModel):
+    ok: bool = Field(True, description="Success flag")
+
+
 # ── Active job tracker ───────────────────────────────────────────────────────
 # Tracks in-progress upload/processing jobs so admins can see what's running.
 # Jobs are added when a streaming upload starts and removed when it finishes.
@@ -132,7 +199,7 @@ def _get_data_dir() -> Path:
 
 # ── App ───────────────────────────────────────────────────────────────────────
 
-app = FastAPI(title="BincioActivity Serve", docs_url=None, redoc_url=None)
+app = FastAPI(title="BincioActivity Serve")
 
 
 @app.on_event("startup")
@@ -326,7 +393,7 @@ def _trigger_rebuild(handle: str) -> None:
 
 # ── Auth endpoints ────────────────────────────────────────────────────────────
 
-@app.get("/api/me")
+@app.get("/api/me", response_model=CurrentUserResponse)
 async def me(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     user = _current_user(bincio_session)
     if not user:
@@ -361,14 +428,16 @@ async def stats() -> JSONResponse:
     })
 
 
-@app.post("/api/auth/login")
-async def login(request: Request) -> JSONResponse:
+@app.post("/api/auth/login", response_model=LoginResponse)
+async def login(
+    login_req: LoginRequest,
+    request: Request,
+) -> JSONResponse:
     ip = request.client.host if request.client else "unknown"
     _check_rate_limit(ip, _login_attempts, _LOGIN_RATE_LIMIT, "Too many login attempts. Try again later.")
 
-    body = await request.json()
-    handle = body.get("handle", "").strip().lower()
-    password = body.get("password", "")
+    handle = login_req.handle.strip().lower()
+    password = login_req.password
 
     user = authenticate(_get_db(), handle, password)
     if not user:
@@ -380,7 +449,7 @@ async def login(request: Request) -> JSONResponse:
     return resp
 
 
-@app.post("/api/auth/logout")
+@app.post("/api/auth/logout", response_model=GenericResponse)
 async def logout(bincio_session: Optional[str] = Cookie(default=None)) -> JSONResponse:
     if bincio_session:
         delete_session(_get_db(), bincio_session)
@@ -389,16 +458,13 @@ async def logout(bincio_session: Optional[str] = Cookie(default=None)) -> JSONRe
     return resp
 
 
-@app.post("/api/auth/reset-password")
-async def reset_password(request: Request) -> JSONResponse:
+@app.post("/api/auth/reset-password", response_model=GenericResponse)
+async def reset_password(reset_req: ResetPasswordRequest) -> JSONResponse:
     """Validate a reset code and set a new password. Public endpoint."""
     from bincio.serve.db import use_reset_code, change_password
-    body = await request.json()
-    handle = (body.get("handle") or "").strip().lower()
-    code   = (body.get("code") or "").strip().upper()
-    new_pw = body.get("password") or ""
-    if not handle or not code or not new_pw:
-        raise HTTPException(400, "handle, code, and password are required")
+    handle = reset_req.handle.strip().lower()
+    code   = reset_req.code.strip().upper()
+    new_pw = reset_req.password
     if len(new_pw) < 8:
         raise HTTPException(400, "Password must be at least 8 characters")
     db = _get_db()
@@ -410,16 +476,18 @@ async def reset_password(request: Request) -> JSONResponse:
 
 # ── Registration ──────────────────────────────────────────────────────────────
 
-@app.post("/api/register")
-async def register(request: Request) -> JSONResponse:
+@app.post("/api/register", response_model=RegisterResponse)
+async def register(
+    register_req: RegisterRequest,
+    request: Request,
+) -> JSONResponse:
     ip = request.client.host if request.client else "unknown"
     _check_rate_limit(ip, _register_attempts, _REGISTER_RATE_LIMIT, "Too many registration attempts. Try again later.")
 
-    body = await request.json()
-    code     = body.get("code", "").strip().upper()
-    handle   = body.get("handle", "").strip().lower()
-    password = body.get("password", "")
-    display  = body.get("display_name", "").strip() or handle
+    code     = register_req.code.strip().upper()
+    handle   = register_req.handle.strip().lower()
+    password = register_req.password
+    display  = register_req.display_name.strip() or handle
 
     if not _VALID_HANDLE.match(handle):
         raise HTTPException(400, "Invalid handle (lowercase letters, numbers, _ - only; max 30 chars)")
@@ -568,7 +636,7 @@ async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     })
 
 
-@app.post("/api/admin/users/{handle}/reset-password-code")
+@app.post("/api/admin/users/{handle}/reset-password-code", response_model=ResetPasswordCodeResponse)
 async def admin_reset_password_code(
     handle: str,
     bincio_session: Optional[str] = Cookie(default=None),
@@ -1171,10 +1239,10 @@ async def get_activity(
     return JSONResponse(json.loads(path.read_text()))
 
 
-@app.post("/api/activity/{activity_id}")
+@app.post("/api/activity/{activity_id}", response_model=ActivityEditResponse)
 async def post_activity(
     activity_id: str,
-    request: Request,
+    edit_req: ActivityEditRequest,
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> JSONResponse:
     user = _require_user(bincio_session)
@@ -1185,13 +1253,13 @@ async def post_activity(
         raise HTTPException(404, "Activity not found")
 
     from bincio.edit.ops import apply_sidecar_edit
-    body = await request.json()
+    body = edit_req.model_dump(exclude_none=True)
     # apply_sidecar_edit already calls merge_one internally — no full rebuild needed.
     apply_sidecar_edit(activity_id, body, dd)
     return JSONResponse({"ok": True})
 
 
-@app.delete("/api/activity/{activity_id}")
+@app.delete("/api/activity/{activity_id}", response_model=GenericResponse)
 async def delete_activity(
     activity_id: str,
     bincio_session: Optional[str] = Cookie(default=None),
diff --git a/docs/admin-guide.md b/docs/admin-guide.md
new file mode 100644
index 0000000..f72588d
--- /dev/null
+++ b/docs/admin-guide.md
@@ -0,0 +1,306 @@
+# Administrator Guide
+
+This guide covers everything needed to deploy and maintain a multi-user BincioActivity instance.
+
+## Before You Start
+
+**[Multi-user Deployment](deployment/multi-user.md)** has the complete step-by-step instructions. This guide focuses on day-to-day admin tasks once the instance is running.
+
+## Initializing an Instance
+
+```bash
+uv sync --extra serve
+
+uv run bincio init \
+  --data-dir /var/bincio \
+  --handle your_admin_handle \
+  --display-name "Your Name" \
+  --name "Instance Name"
+```
+
+You'll be prompted for a password. This creates:
+
+- `/var/bincio/instance.db` — SQLite database (users, sessions, invites, reset codes)
+- `/var/bincio/index.json` — root shard manifest (`"private": true` by default)
+- Your admin user account
+- A first invite code
+
+`bincio init` is idempotent — safe to re-run.
+
+Optional flags:
+
+- `--max-users N` — limit total registered users (0 or omitted = unlimited)
+- `--store-originals false` — don't keep uploaded source files (defaults to true)
+
+## Inviting Users
+
+### Generate an invite code (as admin)
+
+From the web UI at `/invites/` (requires login as admin), or via CLI:
+
+```bash
+uv run python -c "
+from pathlib import Path
+from bincio.serve.db import open_db, create_invite
+db = open_db(Path('/var/bincio'))
+code = create_invite(db, 'your_handle')
+print(f'https://yourdomain.com/register/?code={code}')
+"
+```
+
+### Invite limits
+
+- **Admins:** unlimited invites
+- **Regular users:** 3 invites each (configurable in `bincio/serve/db.py` as `_MAX_USER_INVITES`)
+
+### Share the invite link
+
+Send the registration link to the user:
+
+```
+https://yourdomain.com/register/?code=ABCD1234
+```
+
+They create their own handle and password. After registration, they can:
+- Upload activity files (GPX, FIT, TCX)
+- Sync from Strava
+- Edit activity titles, descriptions, photos
+- Control privacy per activity
+
+## Password Reset
+
+BincioActivity has no email system. Password resets work via **admin-generated one-time codes**.
+
+### Reset a user's password (as admin)
+
+1. Open `/admin/` in the web UI (must be logged in as admin)
+2. Find the user and click **Reset password**
+3. A code appears (monospace, click to copy)
+4. Send the code out-of-band (Signal, Telegram, WhatsApp, etc.)
+
+The code is valid for **24 hours**. Users reset their password at `/reset-password/` by entering:
+
+- Their **handle**
+- The **code**
+- Their **new password**
+
+### Reset code API (CLI)
+
+To generate a reset code programmatically:
+
+```bash
+uv run python -c "
+from pathlib import Path
+from bincio.serve.db import open_db, create_reset_code
+db = open_db(Path('/var/bincio'))
+code, expires_in_hours = create_reset_code(db, 'user_handle', 'your_handle')
+print(f'Code: {code} (expires in {expires_in_hours} hours)')
+"
+```
+
+## Monitoring Active Jobs
+
+The `/api/admin/jobs` endpoint (admin-only) shows which uploads/syncs are in progress:
+
+```bash
+curl -b "bincio_session=$(cat /tmp/session.txt)" http://localhost:4041/api/admin/jobs
+```
+
+Returns:
+
+```json
+[
+  {
+    "id": "a1b2c3d4",
+    "user": "alice",
+    "started_at": 1712345678,
+    "total": 50,
+    "done": 23,
+    "current": "activity_2026-03-15_120000Z.fit"
+  }
+]
+```
+
+## Triggering Rebuilds
+
+`bincio serve` can trigger incremental rebuilds when you pass `--site-dir`:
+
+```bash
+uv run bincio serve \
+  --data-dir /var/bincio \
+  --site-dir /var/www/bincio/src/site
+```
+
+After any write operation (edit, upload, Strava sync), the affected user's shard is rebuilt automatically and the static site is updated.
+
+To manually rebuild a single user's shard:
+
+```bash
+uv run bincio render \
+  --data-dir /var/bincio \
+  --handle alice
+```
+
+To rebuild everything (slow):
+
+```bash
+uv run bincio render --data-dir /var/bincio
+```
+
+## Instance Settings
+
+Settings are stored in `instance.db` and control instance-wide behavior:
+
+| Setting | Default | Controls |
+|---------|---------|----------|
+| `max_users` | unlimited | Maximum registered users allowed |
+| `store_originals` | `true` | Keep uploaded source files and Strava sync data |
+
+Read/set settings via CLI:
+
+```bash
+uv run python -c "
+from pathlib import Path
+from bincio.serve.db import open_db, get_setting, set_setting
+db = open_db(Path('/var/bincio'))
+print(get_setting(db, 'max_users'))
+set_setting(db, 'max_users', 100)
+db.commit()
+"
+```
+
+Or check the database directly:
+
+```bash
+sqlite3 /var/bincio/instance.db
+> SELECT key, value FROM settings;
+```
+
+## Instance Privacy
+
+By default, new instances are **private** — only authenticated users can view anything. Edit the root `index.json` to toggle:
+
+```json
+{
+  "private": false,
+  "shards": [...]
+}
+```
+
+- **`"private": true`** — all pages (except login/register) require authentication
+- **`"private": false`** — public access to all activities; individual activities can still be marked private via the `private` flag in sidecars
+
+After any change, run `bincio render` to apply it:
+
+```bash
+uv run bincio render --data-dir /var/bincio
+```
+
+## Data Directory Layout
+
+```
+/var/bincio/
+  instance.db               ← SQLite: users, sessions, invites, reset codes
+  index.json                ← root shard manifest
+  {handle}/
+    index.json              ← user's BAS feed (activities list)
+    _merged/                ← sidecar-merged output (served to browser)
+    activities/             ← extracted activity JSON files
+      {id}.json
+      ...
+    edits/                  ← user-made sidecar edits
+      {id}.md
+      images/{id}/
+    athlete.json            ← profile (from Strava or manual)
+    strava_token.json       ← OAuth token (if synced from Strava)
+    originals/              ← source files (if store_originals=true)
+  _feedback/                ← user feedback submissions
+    {handle}.json
+    {handle}/
+      {timestamp}_{id}_{filename}
+```
+
+## Database Schema
+
+`instance.db` contains:
+
+- **`users`** — handle, password hash, display_name, is_admin, created_at
+- **`sessions`** — session_id, handle, created_at, expires_at
+- **`invites`** — code, created_by, created_at, used_by, used_at
+- **`reset_codes`** — code, handle, created_by, created_at, expires_at, used_at
+- **`settings`** — key, value (instance config)
+- **`user_preferences`** — handle, key, value (per-user settings)
+
+Query the database directly:
+
+```bash
+sqlite3 /var/bincio/instance.db ".tables"
+sqlite3 /var/bincio/instance.db "SELECT handle, is_admin FROM users;"
+```
+
+## API Endpoints for Admins
+
+The `/api/admin/*` endpoints require authentication and admin privileges:
+
+- `GET /api/admin/users` — List all users
+- `POST /api/admin/users/{handle}/reset-password-code` — Generate a reset code
+- `GET /api/admin/jobs` — Show active uploads/syncs
+- `GET /api/stats` — Community stats (public)
+
+See [API Reference](reference/api.md) for full details.
+
+### Explore the API with Swagger UI
+
+When `bincio serve` is running, visit `/api/docs` to see an interactive Swagger UI. You can:
+- Browse all endpoints with their parameters and response types
+- Try out requests directly (if you're logged in as admin)
+- See live examples of request/response bodies
+
+ReDoc (another API documentation format) is also available at `/api/redoc` with a different UI.
+
+## Running as a systemd service
+
+See [Multi-user Deployment](deployment/multi-user.md#step-5--start-bincio-serve) for the systemd unit file. Key points:
+
+- Set `User=bincio` (unprivileged user)
+- Set `WorkingDirectory` to the repo root
+- Use `--site-dir` to enable incremental rebuilds
+- Restart policy: `Restart=on-failure`
+
+Monitor with:
+
+```bash
+systemctl status bincio
+journalctl -u bincio -f
+```
+
+## Troubleshooting
+
+### Activities not appearing after upload
+
+1. Check if the job is still running: `GET /api/admin/jobs`
+2. Check logs: `journalctl -u bincio -f`
+3. If `store_originals=true`, verify the source file is readable in `{handle}/originals/`
+4. Re-trigger the merge: `uv run bincio render --data-dir /var/bincio --handle alice`
+
+### Database locked
+
+If you see "database is locked":
+
+1. Verify no other `bincio` processes are running: `ps aux | grep bincio`
+2. Kill any stuck processes: `pkill -f 'uv run bincio'`
+3. Restart the service: `systemctl restart bincio`
+
+### High memory usage
+
+The first rebuild on a large instance can be memory-intensive. Consider:
+
+- Running `bincio render` during off-hours
+- Rebuilding one user at a time: `uv run bincio render --data-dir /var/bincio --handle alice`
+- Increasing swap or upgrading the machine
+
+## See also
+
+- [Multi-user Deployment](deployment/multi-user.md) — complete step-by-step setup
+- [Single-user Deployment](deployment/single-user.md) — if you're hosting a read-only site
+- [API Reference](reference/api.md) — all HTTP endpoints
diff --git a/docs/architecture.md b/docs/architecture.md
index d90a3e3..d8974ea 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -21,7 +21,7 @@ GPX / FIT / TCX files
   Any static host         (GitHub Pages, Netlify, VPS, USB stick, …)
 ```
 
-The BAS data store is the contract between the two stages. Any tool in any language can produce BAS-compliant JSON. See [SCHEMA.md](../SCHEMA.md) for the format.
+The BAS data store is the contract between the two stages. Any tool in any language can produce BAS-compliant JSON. See [SCHEMA.md](schema.md) for the format.
 
 ---
 
diff --git a/docs/deployment/multi-user.md b/docs/deployment/multi-user.md
index 3ddae04..373d139 100644
--- a/docs/deployment/multi-user.md
+++ b/docs/deployment/multi-user.md
@@ -204,4 +204,4 @@ The browser fetches and merges remote shards concurrently. Remote activities app
 - [CLI reference — bincio serve](../reference/cli.md#bincio-serve)
 - [CLI reference — bincio dev](../reference/cli.md#bincio-dev)
 - [API reference](../reference/api.md)
-- [BAS schema — instance manifest](../../SCHEMA.md#instance-manifest)
+- [BAS schema — instance manifest](../schema.md#instance-manifest)
diff --git a/docs/developer-guide.md b/docs/developer-guide.md
new file mode 100644
index 0000000..8273931
--- /dev/null
+++ b/docs/developer-guide.md
@@ -0,0 +1,307 @@
+# Developer Guide
+
+This guide is for developers contributing to BincioActivity.
+
+## Prerequisites
+
+- **Python 3.12+** with [uv](https://docs.astral.sh/uv/)
+- **Node 20+** with npm
+- **Git**
+
+## Local Setup
+
+```bash
+git clone https://github.com/brutsalvadi/bincio-activity.git
+cd bincio-activity
+
+# Install Python dependencies
+uv sync
+
+# Install optional extras for multi-user development
+uv sync --extra serve --extra edit
+
+# Install Node dependencies (for the site)
+cd site && npm install && cd ..
+```
+
+## Running Locally
+
+### Single-user (fastest for testing extract logic)
+
+```bash
+# Configure where to find your test activities
+cp extract_config.example.yaml extract_config.yaml
+$EDITOR extract_config.yaml  # set input.dirs and output.dir
+
+# Extract activities
+uv run bincio extract
+
+# Start the dev server (no login, no API server)
+uv run bincio dev --data-dir ~/bincio_data
+# → http://localhost:4321/u/{handle}/
+```
+
+### Multi-user (for testing auth, write API, admin features)
+
+```bash
+# Create a test instance with an admin user
+uv run bincio init --data-dir /tmp/bincio_test --handle testadmin
+
+# Extract activities
+uv run bincio extract --output /tmp/bincio_test
+
+# Start everything (bincio serve + astro dev)
+uv run bincio dev --data-dir /tmp/bincio_test
+# → http://localhost:4321 (login with testadmin/{password})
+```
+
+Ctrl+C stops both servers.
+
+## Running Tests
+
+```bash
+# All tests
+uv run pytest
+
+# Specific test file
+uv run pytest tests/extract/test_parsers.py
+
+# Specific test function
+uv run pytest tests/extract/test_parsers.py::test_gpx_parser
+
+# With verbose output
+uv run pytest -vv
+
+# With coverage report
+uv run pytest --cov=bincio
+```
+
+Tests are in `tests/` and use pytest + fixtures for DRY test data.
+
+## Project Structure
+
+```
+bincio/
+  extract/           Python package for GPX/FIT/TCX parsing
+    models.py        DataPoint, ParsedActivity, LapData
+    parsers/         GPX, FIT, TCX parsers + factory
+    sport.py         Sport name normalization
+    metrics.py       Haversine-based stats (distance, elevation)
+    timeseries.py    1Hz downsampling → BAS timeseries object
+    simplify.py      RDP track simplification (no external deps)
+    dedup.py         Exact + fuzzy duplicate detection
+    strava_csv.py    Strava activities.csv importer
+    writer.py        BAS JSON + GeoJSON output
+    config.py        extract_config.yaml loader
+    cli.py           `bincio extract` command
+  render/
+    cli.py           `bincio render` command
+    merge.py         Sidecar edit overlay (produces _merged/)
+  edit/
+    cli.py           `bincio edit` FastAPI server
+    server.py        Edit API endpoints
+  serve/
+    cli.py           `bincio serve` command
+    server.py        Multi-user FastAPI server (auth, invites, admin)
+    db.py            SQLite data layer
+    init_cmd.py      `bincio init` bootstrap
+  shared/            (if needed)
+
+site/                Astro + Svelte + Tailwind frontend
+  src/
+    layouts/         Base.astro (auth wall, nav)
+    pages/           Routes (activity feed, detail, login, etc.)
+    components/      Svelte components (maps, charts, edit drawer)
+    lib/             TypeScript utilities (types, format, dataloader)
+
+tests/               pytest test suite
+  extract/
+  render/
+  serve/
+  fixtures/          Shared test data
+```
+
+## Key Concepts
+
+### BAS (BincioActivity Schema)
+
+Activity data flows as **BAS JSON** files in `{user}/activities/`. The format is specified in [SCHEMA.md](schema.md).
+
+Key files:
+
+- `{id}.json` — activity metadata + timeseries
+- `_merged/` symlink — sidecar edits overlaid on activities
+- `edits/{id}.md` — user-created sidecar (optional)
+
+### Shard model
+
+Multi-user instances use a **shard manifest** (root `index.json`) that lists per-user shards. The browser fetches all shards concurrently and merges them. This allows:
+
+- Federation (remote shard URLs)
+- Yearly pagination
+- No data duplication
+
+### Extract pipeline
+
+```
+GPX/FIT/TCX files
+    ↓ (parse)
+ParsedActivity
+    ↓ (calculate metrics)
+BAS Activity JSON
+    ↓ (downsample to 1Hz)
+Timeseries
+    ↓ (simplify with RDP)
+GeoJSON
+    ↓ (write)
+activities/{id}.json + activities/{id}.geojson
+```
+
+### Render pipeline
+
+```
+{user}/
+  activities/*.json (extracted)
+  edits/*.md (user sidecars)
+    ↓ (merge_all)
+_merged/
+  index.json (sidecar edits applied)
+  activities/{id}.json
+  {id}.geojson
+    ↓ (astro build)
+site/dist/
+```
+
+Editing does not require re-extraction.
+
+## Making Changes
+
+### Adding a new endpoint
+
+1. Add a route in `bincio/serve/server.py` (or `bincio/edit/server.py` for single-user)
+2. Add Pydantic models for request/response if needed
+3. Add tests in `tests/serve/`
+4. Update `docs/reference/api.md` with the new endpoint
+5. If admin-only, protect it with `await _require_admin(bincio_session)`
+
+### Adding a parser for a new format
+
+1. Create `bincio/extract/parsers/myformat.py`
+2. Implement a parser class with `parse(file_path: Path) -> ParsedActivity`
+3. Register it in `bincio/extract/parsers/__init__.py`
+4. Add tests in `tests/extract/test_parsers.py`
+
+### Modifying BAS schema
+
+1. Edit `schema/bas-v1.schema.json` (JSON Schema)
+2. Update `SCHEMA.md` (human-readable spec)
+3. Update TypeScript types in `site/src/lib/types.ts`
+4. Add a migration if the change is breaking
+
+### Frontend changes
+
+**Svelte components** are in `site/src/components/`. Key ones:
+
+- `ActivityFeed.svelte` — activity grid + filters
+- `ActivityDetail.svelte` — activity page (maps, charts, photos)
+- `EditDrawer.svelte` — sidecar editor
+
+Use `uv run bincio dev` to test changes live. The site hot-reloads on file changes.
+
+## Code Style
+
+- **Python:** PEP 8, type hints where possible
+- **JavaScript/TypeScript:** ESLint + Prettier (configured in `site/`)
+- **Svelte:** No self-closing non-void tags; interactive divs need `role` + keyboard handler
+
+## Git Workflow
+
+1. Create a branch: `git checkout -b feature/my-feature`
+2. Make changes and test locally
+3. Commit: `git commit -m "Clear, specific commit message"`
+4. Push: `git push origin feature/my-feature`
+5. Open a pull request
+
+**Commit message style:**
+
+- Imperative mood ("add feature", not "added feature")
+- Reference issues if relevant: "fix #123"
+- First line ≤ 50 characters
+- Blank line, then detailed explanation if needed
+
+## Performance Considerations
+
+### Extract speed
+
+- **ProcessPoolExecutor with initializer** — large data (Strava lookups, hash sets) is sent once per worker, not per task
+- **Haversine** — 10x faster than geopy for distance calculations
+- **Lazy parsing** — FIT files decoded only once per task
+
+### Render speed
+
+- **RDP simplification** — custom implementation (no external wheels for Pyodide)
+- **Gzip compression** — activity JSON and geojson are served gzipped
+- **Concurrent shard fetch** — browser loads all shards in parallel
+
+### Frontend
+
+- **MapLibre GL v5** — requires explicit center/zoom and workarounds
+- **Observable Plot** — use hyphenated curve names (e.g. `"monotone-x"`)
+- **Client-only for complex components** — use `client:only="svelte"` for activity detail to avoid hydration mismatches
+
+## Debugging
+
+### Python
+
+```bash
+# Interactive debugger
+uv run python -m pdb -m bincio.extract.cli
+
+# Or use breakpoint() in code
+breakpoint()
+uv run bincio extract
+```
+
+### TypeScript
+
+Check your editor's TypeScript integration. The site has strict `tsconfig.json`.
+
+### Frontend
+
+- Open DevTools (F12)
+- Check the Network tab for API calls
+- Check Console for client-side errors
+
+### Database
+
+```bash
+# Inspect the SQLite database directly
+sqlite3 /tmp/bincio_test/instance.db
+> SELECT * FROM users;
+```
+
+## Documentation
+
+- User-facing docs go in `docs/`
+- API docs are auto-generated from FastAPI routes (and should be typed with Pydantic models)
+- Code comments should explain *why*, not *what*
+
+## Known Issues & Limitations
+
+See the [GitHub repository](https://github.com/brutsalvadi/bincio-activity) for known issues and planned features.
+
+## Contributing
+
+Contributions are welcome! Please:
+
+1. Check existing issues/PRs so you're not duplicating work
+2. Open an issue first for large changes
+3. Include tests for new features
+4. Update docs (user guide, API ref, or developer guide)
+5. Follow the code style guidelines
+
+## See also
+
+- [Architecture](architecture.md) — system design and data flow
+- [BAS Schema](schema.md) — activity data format
+- [API Reference](reference/api.md) — all HTTP endpoints
diff --git a/docs/getting-started.md b/docs/getting-started.md
index 6f2d7b2..28062a3 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -117,4 +117,4 @@ In multi-user mode the edit UI is always available via `bincio serve` — no ext
 - [Single-user deployment](deployment/single-user.md) — GitHub Pages, Netlify, VPS
 - [Multi-user deployment](deployment/multi-user.md) — VPS with nginx, inviting users
 - [CLI reference](reference/cli.md) — all commands and options
-- [BAS schema](../SCHEMA.md) — the data format and federation protocol
+- [BAS schema](schema.md) — the data format and federation protocol
diff --git a/docs/index.md b/docs/index.md
new file mode 100644
index 0000000..6a2736b
--- /dev/null
+++ b/docs/index.md
@@ -0,0 +1,38 @@
+# BincioActivity Documentation
+
+Welcome to BincioActivity — a federated, self-hosted activity stats platform. This documentation is organized by audience:
+
+## For Users
+
+**[Getting Started](getting-started.md)** — Extract your activities from Strava/Garmin, set up a local site, and deploy it.
+
+**[User Guide](user-guide.md)** — Upload activities, sync from Strava, edit titles/descriptions, manage photos, control privacy, configure your profile.
+
+## For Administrators
+
+**[Admin Guide](admin-guide.md)** — Deploy a multi-user instance, manage users, reset passwords, monitor rebuild status.
+
+**[Multi-user Deployment](deployment/multi-user.md)** — Step-by-step setup with nginx, systemd, and multi-user architecture.
+
+**[Single-user Deployment](deployment/single-user.md)** — Deploy as a read-only static site or with a local edit server.
+
+## For Developers
+
+**[Developer Guide](developer-guide.md)** — Local setup, how to run tests, architecture overview, how to contribute.
+
+**[Architecture](architecture.md)** — BAS data format, shard model, federation protocol, federation design.
+
+**[API Reference](reference/api.md)** — HTTP endpoints, request/response formats, authentication, rate limits.
+
+**[CLI Reference](reference/cli.md)** — All bincio commands and options.
+
+## Quick Links
+
+- [GitHub repo](https://github.com/brutsalvadi/bincio-activity)
+- [BAS Schema](schema.md) — The data format specification
+- [Architecture diagram](architecture.mmd) (Mermaid diagram)
+- Live Swagger UI at `/api/docs` (when server is running)
+
+---
+
+**Status:** This is early-stage, self-hosted software. See the [GitHub repo](https://github.com/brutsalvadi/bincio-activity) for known issues and planned features.
diff --git a/SCHEMA.md b/docs/schema.md
similarity index 100%
rename from SCHEMA.md
rename to docs/schema.md
diff --git a/docs/user-guide.md b/docs/user-guide.md
new file mode 100644
index 0000000..ec2de54
--- /dev/null
+++ b/docs/user-guide.md
@@ -0,0 +1,180 @@
+# User Guide
+
+This guide covers everything you can do as a BincioActivity user.
+
+## Getting Your Account
+
+Your instance administrator sends you a registration link:
+
+```
+https://yourdomain.com/register/?code=ABCD1234
+```
+
+Click it and create:
+
+- **Handle** — your username in URLs (lowercase letters, numbers, `_`, `-`; 1–30 chars)
+- **Password** — at least 8 characters
+- **Display name** — your full name (shown on your profile page)
+
+You're now logged in and ready to upload activities!
+
+## Uploading Activities
+
+Click **Upload** to add activities from files.
+
+### Supported formats
+
+- **GPX** — GPS Exchange format (most common)
+- **FIT** — Garmin's native format
+- **TCX** — Training Center XML
+- **Compressed files** — `.gz` variants of any format above
+
+### Using Strava export
+
+If you exported activities from Strava, you likely have a folder like:
+
+```
+activities/
+  ├── 2026-03-15_morning_run.gpx
+  ├── 2026-03-14_evening_ride.fit
+  └── ...
+```
+
+Just drag the whole `activities/` folder into the upload box, or select multiple files at once.
+
+### Upload options
+
+- **Store original files** — keep the source GPX/FIT/TCX file on the server (checked by default; you can uncheck per upload)
+- **Skip duplicates** — the system detects exact duplicates automatically
+
+After upload, the server extracts GPS tracks, calculates distance/elevation/time, and generates your activity feed. You can keep uploading — the system deduplicates by file hash.
+
+## Syncing from Strava
+
+If your instance supports Strava sync, click **Sync from Strava** in the upload modal.
+
+1. Authorize BincioActivity to read your Strava data
+2. Select which activities to import
+3. The server fetches GPS and metrics from Strava and stores them
+
+Your OAuth token is stored securely on the server. You can revoke access at any time in [Strava Settings](https://www.strava.com/settings/apps).
+
+## Editing Activities
+
+Click **Edit** on any activity to:
+
+- **Change the title** — rename the activity
+- **Add a description** — write notes or a story (supports markdown and embedded images)
+- **Upload photos** — add photos taken during the activity
+- **Choose sport type** — cycling, running, hiking, etc.
+- **Assign gear** — tag the bike/shoes/watch used
+- **Set privacy** — hide the activity from the public feed
+- **Highlight** — mark your favorite activities
+
+Changes save instantly. The site rebuilds in the background.
+
+### Photo gallery
+
+Upload photos for an activity. They appear in a lightbox on the activity detail page. The server stores them in your data directory.
+
+### Markdown in descriptions
+
+Descriptions support basic markdown:
+
+```markdown
+# Title
+**bold** _italic_ `code`
+
+- bullet list
+- another item
+
+[link](https://example.com)
+
+![image name](image.jpg)
+```
+
+Images are stored in `edits/images/{id}/` and paths are rewritten automatically.
+
+## Privacy Control
+
+Each activity has a privacy setting:
+
+- **Public** (`public: true`) — visible to all logged-in users in the feed
+- **Unlisted** (`private: true`) — not shown in the feed, but accessible by direct URL (for sharing)
+- **No GPS** (remove GPS track) — hides the map but keeps distance/time stats
+
+Your instance admin can also make the whole instance public or private.
+
+### Deleting an activity
+
+You can't delete an activity directly, but you can:
+
+- Mark it **private** to hide it from the feed
+- Edit the sidecar manually in `{data-root}/edits/{id}.md` and delete the file
+
+## Your Profile
+
+Click your name in the top-right to view your profile at `/u/{handle}/`. It shows:
+
+- Your display name
+- All your public activities (organized by year)
+- Summary stats (total distance, time, elevation)
+
+## Account Settings
+
+Click your name → **Settings** to:
+
+- **Change password** — update your account password
+- **View your handle** — the username used in URLs
+- **See your data** — information about what's stored on the server
+
+If you forget your password, ask your instance administrator to generate a reset code.
+
+## Feedback
+
+Found a bug or want to suggest a feature? Click **Feedback** at the bottom of any page to submit a message and optional screenshots. The admin team can see all feedback submissions.
+
+## Local Activity Conversion
+
+If your instance has the `/convert/` page enabled, you can:
+
+1. Upload a GPX/FIT/TCX file **locally in your browser** (no server upload)
+2. The file is processed in JavaScript (powered by Pyodide, Python in the browser)
+3. You see the activity preview immediately
+4. You can then save it to your local browser storage (IndexedDB) or upload it to the server
+
+This is useful for testing or converting files without uploading them first.
+
+## Offline Activity Storage (experimental)
+
+Activities converted locally are stored in your browser's **IndexedDB** (local storage). They:
+
+- Don't upload to the server
+- Persist across browser sessions
+- Can be deleted from settings
+
+This is useful for activities you don't want to publish yet, or for testing before uploading.
+
+## Frequently Asked Questions
+
+**Can I download my data?**  
+Your instance's complete activity feed is at `/u/{handle}/index.json` (the BAS format). You can also ask the admin to copy your data directory directly.
+
+**Can I transfer activities between instances?**  
+Yes! Copy the `{handle}/activities/` and `{handle}/edits/` directories to another instance. The system uses content hashing, so you can merge multiple instances.
+
+**What formats does my activity support?**  
+BincioActivity extracts GPS tracks, distance, elevation, moving time, average speed, heart rate, power, cadence, and temperature (if available in the source file).
+
+**Can I share my activities with someone outside my instance?**  
+Mark activities as **unlisted** (`private: true`). Anyone with the direct URL can view them, even if they're not logged in.
+
+**How do I delete my account?**  
+Ask your instance administrator. They can delete your user record from `instance.db`, which removes you from the login system. Your activity data remains for audit, but can be deleted from disk if you request it.
+
+## See also
+
+- [Getting Started](getting-started.md) — initial setup
+- [API Reference](reference/api.md) — technical details about how data flows
+- [BAS Schema](schema.md) — the activity JSON format
+- [Admin Guide](admin-guide.md) — for instance admins
diff --git a/mkdocs.yml b/mkdocs.yml
new file mode 100644
index 0000000..b443f55
--- /dev/null
+++ b/mkdocs.yml
@@ -0,0 +1,66 @@
+site_name: BincioActivity
+site_description: Federated, open-source, self-hosted activity stats platform
+site_author: Davide Brugali
+repo_url: https://github.com/brutsalvadi/bincio-activity
+repo_name: brutsalvadi/bincio-activity
+edit_uri: edit/main/docs/
+
+docs_dir: docs
+site_dir: mkdocs-site
+
+theme:
+  name: material
+  palette:
+    - scheme: light
+      primary: blue
+      accent: blue
+      toggle:
+        icon: material/lightbulb-outline
+        name: Switch to dark mode
+    - scheme: slate
+      primary: blue
+      accent: blue
+      toggle:
+        icon: material/lightbulb
+        name: Switch to light mode
+  features:
+    - navigation.tabs
+    - navigation.tabs.sticky
+    - navigation.top
+    - search.suggest
+    - search.highlight
+    - content.code.copy
+    - content.code.annotate
+
+plugins:
+  - search
+
+markdown_extensions:
+  - admonition
+  - pymdownx.details
+  - pymdownx.superfences
+  - pymdownx.highlight:
+      use_pygments: true
+  - pymdownx.inlinehilite
+  - pymdownx.tabbed:
+      alternate_style: true
+  - toc:
+      permalink: true
+
+nav:
+  - Home: index.md
+  - Getting Started: getting-started.md
+  - User Guide: user-guide.md
+  - Admin Guide: admin-guide.md
+  - Deployment:
+      - Single-user: deployment/single-user.md
+      - Multi-user: deployment/multi-user.md
+      - VPS: deployment/vps.md
+  - Developer:
+      - Developer Guide: developer-guide.md
+      - Architecture: architecture.md
+  - Reference:
+      - API: reference/api.md
+      - CLI: reference/cli.md
+      - Schema: schema.md
+  - Garmin Disclaimer: garmin_connect_disclaimer.md
diff --git a/pyproject.toml b/pyproject.toml
index 2e1bb5b..e251829 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -56,6 +56,9 @@ dev = [
     "types-pyyaml",
     "types-jsonschema",
 ]
+docs = [
+    "mkdocs-material>=9.5",
+]
 
 [project.scripts]
 bincio = "bincio.cli:main"
@@ -68,6 +71,7 @@ dev = [
     "mypy>=1.11",
     "types-pyyaml",
     "types-jsonschema",
+    "mkdocs-material>=9.5",
 ]
 
 [tool.ruff]

From cfdd8d27443f467c7b0dd1606911e95247f666cb Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 10:19:32 +0200
Subject: [PATCH 095/124] fix: image refs in description and broken gallery
 URLs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- EditDrawer: stop auto-inserting ![filename](...) into description on
  upload — images are tracked via custom.images; the refs only cluttered
  the textarea. Strip any pre-existing refs on load so old sidecars are
  also cleaned up when the drawer is opened.
- ActivityDetail: imageBase now treats detail_url that starts with '/'
  as already-absolute (same fix pattern as track_url / detail_url);
  was prepending ${base}data/ on top of /data/... → double path.
---
 site/src/components/ActivityDetail.svelte | 5 +++--
 site/src/components/EditDrawer.svelte     | 9 ++-------
 2 files changed, 5 insertions(+), 9 deletions(-)

diff --git a/site/src/components/ActivityDetail.svelte b/site/src/components/ActivityDetail.svelte
index c9bf3ed..a0bb7a6 100644
--- a/site/src/components/ActivityDetail.svelte
+++ b/site/src/components/ActivityDetail.svelte
@@ -82,10 +82,11 @@
   })();
 
   // Derive image dir from detail_url so multi-user paths resolve correctly.
-  // "dave/_merged/activities/foo.json" → "/data/dave/_merged/activities/images/{id}/"
+  // Relative: "dave/_merged/activities/foo.json" → "/data/dave/_merged/activities/images/{id}/"
+  // Absolute: "/data/dave/_merged/activities/foo.json" → "/data/dave/_merged/activities/images/{id}/"
   $: imageBase = (() => {
     const du = activity.detail_url ?? '';
-    const dir = du.startsWith('http')
+    const dir = du.startsWith('http') || du.startsWith('/')
       ? du.substring(0, du.lastIndexOf('/') + 1)
       : du.includes('/')
         ? `${base}data/${du.substring(0, du.lastIndexOf('/') + 1)}`
diff --git a/site/src/components/EditDrawer.svelte b/site/src/components/EditDrawer.svelte
index 47b18fc..5246953 100644
--- a/site/src/components/EditDrawer.svelte
+++ b/site/src/components/EditDrawer.svelte
@@ -51,7 +51,8 @@
       title       = d.title       ?? '';
       sport       = d.sport       ?? 'cycling';
       gear        = d.gear        ?? '';
-      description = d.description ?? '';
+      // Strip any auto-inserted image markdown refs — images are tracked via custom.images
+      description = (d.description ?? '').replace(/!\[[^\]]*\]\([^)]+\)\n?/g, '').trim();
       highlight   = d.highlight   ?? false;
       isPrivate   = d.private     ?? false;
       hideStats   = d.hide_stats  ?? [];
@@ -95,9 +96,6 @@
         if (res.ok) {
           const d = await res.json();
           if (!images.includes(d.filename)) images = [...images, d.filename];
-          // Insert markdown reference at cursor or end
-          const ref = `\n![${d.filename.replace(/\.[^.]+$/, '')}](${d.filename})`;
-          description = description.trimEnd() + ref;
         }
       }
     } catch (e: any) {
@@ -111,9 +109,6 @@
   async function deleteImage(filename: string) {
     await fetch(`${api}/images/${encodeURIComponent(filename)}`, { method: 'DELETE' });
     images = images.filter(f => f !== filename);
-    // Remove the markdown reference — escape filename before using in regex
-    const escaped = filename.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-    description = description.replace(new RegExp(`!\\[[^\\]]*\\]\\(${escaped}\\)`, 'g'), '').trim();
   }
 
   function toggleStat(key: string) {

From a78f6ee3bddeb6b4ae56fe1d57cddb01920101be Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 10:29:13 +0200
Subject: [PATCH 096/124] fix: strip local image refs with spaces/parens in
 filenames before markdown render

---
 site/src/components/ActivityDetail.svelte | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/site/src/components/ActivityDetail.svelte b/site/src/components/ActivityDetail.svelte
index a0bb7a6..38c98b8 100644
--- a/site/src/components/ActivityDetail.svelte
+++ b/site/src/components/ActivityDetail.svelte
@@ -70,15 +70,23 @@
   $: rawDescription = localDescription || detail?.description || '';
   $: descriptionHtml = (() => {
     if (!rawDescription) return '';
+    // Strip local image refs before marked sees them. marked only parses ![alt](url) as an
+    // image when the URL has no spaces — filenames like "WhatsApp Image 2026.jpg" are left
+    // as literal text instead. The lazy .*? anchored to the image extension handles filenames
+    // with spaces and nested parens (e.g. "file(2).jpg") correctly.
+    const stripped = rawDescription
+      .replace(/!\[[^\]]*\]\((?!https?:\/\/|\/|data:).*?\.(?:jpe?g|png|gif|webp|bmp|avif|heic)\)/gi, '')
+      .trim();
+    if (!stripped) return '';
     const renderer = new marked.Renderer();
-    // Local relative images are always shown in the gallery — suppress inline rendering
+    // Any remaining remote images render inline; local ones (shouldn't exist after strip) are suppressed
     renderer.image = ({ href, title, text }) => {
       const isLocal = href && !href.startsWith('http') && !href.startsWith('/') && !href.startsWith('data:');
       if (isLocal) return '';
       const titleAttr = title ? ` title="${title}"` : '';
       return `<img src="${href ?? ''}" alt="${text}"${titleAttr} class="rounded-lg max-w-full my-2">`;
     };
-    return DOMPurify.sanitize(marked(rawDescription, { renderer }) as string);
+    return DOMPurify.sanitize(marked(stripped, { renderer }) as string);
   })();
 
   // Derive image dir from detail_url so multi-user paths resolve correctly.

From c68dfa90573ea7b3b3d15ae1f120f87abf0c38bb Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 18:09:32 +0200
Subject: [PATCH 097/124] chore: update changelog, remove stale files, scrub
 VPS IP

- CHANGELOG.md: add [Unreleased] 2026-04-16 section covering settings
  page, admin tools, password reset, re-extract, community page, SSE
  upload progress, and all bug fixes since 2026-04-10
- Remove docs-proposal.md (internal planning doc, not user-facing)
- Remove publish/ directory (leftover artefacts from publish.sh, not
  meant to be tracked)
- scripts/pull_feedback.sh: replace hardcoded default VPS IP with a
  required positional argument to avoid leaking server address
- docs/squash-for-github.md: document the squash-for-github commit
  strategy for future reference
---
 CHANGELOG.md                        |  95 ++++++++++++
 docs-proposal.md                    | 113 --------------
 docs/squash-for-github.md           |  78 ++++++++++
 publish/CLAUDE.md                   | 223 ----------------------------
 publish/extract_config.example.yaml |  31 ----
 publish/manifest                    |  72 ---------
 scripts/pull_feedback.sh            |   4 +-
 7 files changed, 175 insertions(+), 441 deletions(-)
 delete mode 100644 docs-proposal.md
 create mode 100644 docs/squash-for-github.md
 delete mode 100644 publish/CLAUDE.md
 delete mode 100644 publish/extract_config.example.yaml
 delete mode 100644 publish/manifest

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 16ce436..d608c04 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,100 @@
 # Changelog
 
+## [Unreleased] — 2026-04-16
+
+### New feature — Self-service user settings page
+
+- **`site/src/pages/settings/index.astro`** — new `/settings/` page with three sections:
+  - **Account** — display name editor, storage quota view (uploaded activities + originals size)
+  - **Integrations** — per-user Strava client ID/secret (replaces instance-level credentials for
+    multi-user deployments); saved to `settings` table via `PATCH /api/me`
+  - **Danger zone** — two separate destructive actions:
+    - **Delete originals** — removes `{user_dir}/originals/` without touching activities
+    - **Delete all activities** — wipes all activities, edits, GeoJSON, and `_merged/`; triggers rebuild
+  - Nav visibility toggles — user can hide any combination of Feed / Stats / Athlete tabs from
+    their navigation; preference saved to `settings` table and applied in `Base.astro`
+
+### New feature — Upload overwrite option
+
+- **`POST /api/upload`** — new `overwrite: bool` form field; when true, an existing activity
+  with the same ID is replaced rather than returning 409. UI checkbox added to the upload modal.
+
+### New feature — Admin tools
+
+- **Ghost user detection** — `/admin/` now marks users whose handle has a data directory but
+  no entry in the `users` table (e.g. manually created dirs, or users deleted from DB); shown
+  with a "ghost" badge
+- **Delete directory button** — admin can delete a user's entire data directory without
+  touching the DB entry; useful for cleaning up ghost dirs or corrupted accounts
+- **Delete all activities** (`DELETE /api/admin/users/{handle}/activities`) — wipes
+  `activities/`, `edits/`, `_merged/`, and `index.json` for a handle, then triggers a rebuild;
+  admin page shows a confirmation `<dialog>` before firing
+- **"Admin" nav link** — visible in the top-right for admins only
+
+### New feature — Password reset (admin-generated one-time code)
+
+No email infrastructure required. Flow:
+
+1. Admin visits `/admin/` → clicks "Reset pwd" → a 24-hour code appears inline (click to copy)
+2. Admin sends it out-of-band (Signal, Telegram, etc.)
+3. User goes to `/reset-password/`, enters handle + code + new password
+
+- `POST /api/admin/users/{handle}/reset-password-code` (admin) → `{code, expires_in_hours: 24}`
+- `POST /api/auth/reset-password` (public) → body `{handle, code, password}`
+- `reset_codes` table in `instance.db`; generating a new code invalidates prior unused codes;
+  used codes kept for audit
+
+### New feature — Re-extract from Strava originals
+
+- **`POST /api/admin/reextract`** — re-runs the extract pipeline over all
+  `{user_dir}/originals/strava/*.json` files without hitting the Strava API again;
+  streams progress via SSE; useful after pipeline improvements
+- Runs as a subprocess to avoid OOM (`malloc_trim` + `gc.collect` every 50 activities);
+  processes in batches of 100 to bound peak RSS
+
+### New feature — Community page
+
+- **`/community/` tab** — sortable table of all registered users: display name, handle,
+  member since, invited by; replaces the earlier inline community section on the about page
+
+### New feature — Streaming upload progress
+
+- **`POST /api/upload`** now returns `text/event-stream` instead of JSON
+- Per-file progress events: `↓ 3/47 (6%) — morning_ride.fit`
+- Final `done` event: `"12 added, 35 duplicates"`
+- Vite proxy configured to not buffer the stream
+
+### Bug fixes
+
+- **`elevation_gain_m` null for modern Garmin FIT files** — session message `total_ascent`
+  field now read as fallback when per-point elevation gain is zero
+- **Map flash on activity detail** — map container height set before `fitBounds` to prevent
+  a zero-height frame during load
+- **Absolute `track_url` / `detail_url` paths** — `ActivityDetail` and `loadActivity` now
+  handle both relative and absolute paths in BAS JSON
+- **Corrupted time streams causing OOM** — `metrics.py` guards against non-monotonic or
+  pathologically large time arrays before allocating the 1 Hz dense array
+- **Merge race condition** — `merge_all` wipe + rewrite is now guarded; concurrent upload
+  triggers can no longer interleave a `shutil.rmtree` with a write from another request
+- **Temp ZIP leak** — upload temp files now written to `/tmp/` and always deleted in a
+  `finally` block; a startup hook auto-cleans any leftovers
+- **`bincio init` always overwrites `private`** — fixed to preserve existing value when
+  `index.json` already exists
+- **Auth wall flash** — `Base.astro` now sets the auth state synchronously from a cookie
+  hint before the `fetch('/api/me')` resolves, eliminating the visible flash
+- **Single-user redirect loop** — `index.astro` no longer redirects to `/u/{handle}/` on
+  private (multi-user) instances
+- **Theme-aware Plot tooltips** — forced black text on white background; was rendering
+  grey-on-white (unreadable in light mode) and white-on-dark (unreadable in dark mode)
+- **Theme-aware chart axis colors** — axis labels and tick marks now use the correct
+  foreground color in both light and dark themes
+- **TS type annotation in `define:vars` script** — removed; Astro injects `define:vars`
+  blocks as plain JS, not TypeScript
+- **Image refs with spaces/parens in filenames** — local image references in markdown
+  descriptions are now stripped before rendering to avoid broken inline `<img>` tags
+
+---
+
 ## [Unreleased] — 2026-04-10
 
 ### New feature — Per-instance user limit
diff --git a/docs-proposal.md b/docs-proposal.md
deleted file mode 100644
index bcfe977..0000000
--- a/docs-proposal.md
+++ /dev/null
@@ -1,113 +0,0 @@
-# Documentation proposal
-
-## Problem
-
-The project has no user-facing or developer-facing docs. Knowledge lives in `CLAUDE.md`
-(written for AI context, not humans), scattered inline comments, and the code itself.
-As the feature surface grows and more users join, we need:
-
-- A guide for **users** (how to upload, sync, edit, manage privacy)
-- A guide for **admins** (how to run an instance, manage users, reset passwords)
-- An **API reference** (what endpoints exist, what they expect, what they return)
-- A **developer guide** (how to run locally, architecture, how to contribute)
-
----
-
-## Proposed structure
-
-```
-docs/
-  index.md              Overview and quick links
-  user-guide.md         End-user: upload, sync, edit, privacy, settings
-  admin-guide.md        Admin: deploy, init, invite users, reset passwords, rebuild
-  api.md                API reference (hand-written, augmented by OpenAPI)
-  architecture.md       BAS schema, data flow, shard model, federation
-  developer-guide.md    Local setup, how to run tests, how to contribute
-```
-
-`CLAUDE.md` stays as-is — it is AI context, not user docs. The two serve different
-audiences and should not be merged.
-
----
-
-## API documentation strategy
-
-FastAPI auto-generates an OpenAPI 3.1 spec from the route decorators. It is already
-served at `/api/docs` (Swagger UI) and `/api/redoc` (ReDoc) when the server is running.
-Right now the auto-docs are sparse because:
-
-- Most endpoints return bare `JSONResponse` instead of typed Pydantic response models
-- Endpoint docstrings are minimal or absent
-- Request bodies are raw `request.json()` instead of Pydantic models
-
-### Recommended approach: two-layer docs
-
-**Layer 1 — machine-readable (OpenAPI, auto-generated)**
-
-Incrementally add Pydantic request/response models to the endpoints that matter most
-(auth, activity CRUD, admin actions). FastAPI will pick them up automatically and the
-Swagger UI becomes usable. No extra tooling needed.
-
-Priority endpoints to type first:
-- `POST /api/auth/login` / `logout` / `reset-password`
-- `POST /api/register`
-- `GET /api/me`
-- `GET|POST /api/activity/{id}`
-- `DELETE /api/activity/{id}`
-- `POST /api/admin/users/{handle}/reset-password-code`
-- `GET|POST /api/me/preferences` (once built)
-
-**Layer 2 — human-readable (`docs/api.md`)**
-
-A hand-written reference that groups endpoints by domain (auth, activities, admin,
-sync), explains the overall auth model (cookie-based, httpOnly), rate limiting, and
-covers things OpenAPI can't express well (SSE streams, error semantics, side effects
-like rebuild triggers).
-
-The OpenAPI spec and the hand-written doc are complementary, not duplicates:
-OpenAPI is precise and machine-readable; `api.md` gives context and explains *why*.
-
----
-
-## Tooling options
-
-| Option | Pros | Cons |
-|--------|------|------|
-| Plain markdown in `docs/` | Zero tooling, lives in repo, renders on GitHub | No search, no versioning, no sidebar nav |
-| MkDocs + Material theme | Beautiful, search, auto-nav from folder structure, can embed OpenAPI via plugins | Needs Python dep + build step; another thing to deploy |
-| Docusaurus | Great for open-source projects, versioning, i18n | Node toolchain, heavier |
-| VitePress | Fast, Vite-based (already in the stack), markdown + Vue | Still a separate site to host |
-| Just the Swagger UI at `/api/docs` | Auto-generated, always up-to-date | Only covers the API, not user/admin/architecture |
-
-**Recommendation:** Start with plain markdown in `docs/` — no build step, always
-available, no new infrastructure. If the project goes public or the user base grows,
-migrate to MkDocs Material (one `mkdocs.yml` + `pip install mkdocs-material`).
-
-For the API specifically: enable the Swagger UI on the live server (currently it may
-be disabled in production) so admins can explore it directly at `/api/docs`.
-
----
-
-## Enabling Swagger UI in production
-
-By default FastAPI serves `/docs` and `/redoc`. In `bincio serve`, the FastAPI app is
-created with:
-
-```python
-app = FastAPI(docs_url=None, redoc_url=None)  # check current value
-```
-
-For a private instance (auth-walled), it is safe to expose `/api/docs` — add a note
-in `admin-guide.md` that it exists. Alternatively, serve it only when an env var is set.
-
----
-
-## Suggested first milestone
-
-1. Create `docs/` with `index.md`, `admin-guide.md`, `api.md`
-2. `admin-guide.md`: deploy, init, invite, password reset, rebuild, reset data
-3. `api.md`: auth endpoints + activity endpoints, hand-written
-4. Enable Swagger UI on the server (or at least document that it exists at `/api/docs`)
-5. Add Pydantic models to the 8 priority endpoints above
-
-Everything else (user guide, architecture, developer guide, MkDocs) is second milestone.
diff --git a/docs/squash-for-github.md b/docs/squash-for-github.md
new file mode 100644
index 0000000..53a6460
--- /dev/null
+++ b/docs/squash-for-github.md
@@ -0,0 +1,78 @@
+# squash-for-github branch strategy
+
+`squash-for-github` is a curated public-facing branch. It has its own orphan
+history (unrelated to `main`) and grows by appending one large squash commit
+each time you want to publish a batch of work.
+
+## When to use
+
+Whenever `main` has accumulated enough work worth publishing — typically after a
+meaningful feature set or before tagging a release.
+
+## How it works
+
+`squash-for-github` and `main` have completely unrelated histories (different
+root commits). Because of this, `git merge --squash` won't work. Instead, use
+`git commit-tree` to create a new commit that carries **main's file tree** but
+is **parented to the current squash-for-github tip**.
+
+## Steps
+
+1. **Collect commit messages** to write the summary:
+
+   ```bash
+   git log --oneline main ^squash-for-github
+   ```
+
+2. **Switch to the branch:**
+
+   ```bash
+   git checkout squash-for-github
+   ```
+
+3. **Create the squash commit** (replace the message with your summary):
+
+   ```bash
+   NEW=$(git commit-tree main^{tree} -p HEAD -m "feat: your summary here")
+   git reset --hard $NEW
+   ```
+
+   Or as a one-liner with a heredoc for a multi-line message:
+
+   ```bash
+   git reset --hard $(git commit-tree main^{tree} -p HEAD -m "$(cat <<'EOF'
+   feat: short title
+
+   - bullet one
+   - bullet two
+   EOF
+   )")
+   ```
+
+4. **Verify:**
+
+   ```bash
+   git log --oneline squash-for-github | head -5
+   ```
+
+5. **Push** when ready:
+
+   ```bash
+   git push origin squash-for-github
+   # or force-push if you've rewritten history on the remote:
+   git push --force origin squash-for-github
+   ```
+
+6. **Return to main:**
+
+   ```bash
+   git checkout main
+   ```
+
+## Why not `git merge --squash`?
+
+The two branches share no common ancestor, so git refuses with
+`fatal: refusing to merge unrelated histories`. `git commit-tree` bypasses this
+by directly constructing the commit object: it takes the tree (file snapshot)
+from `main`, sets the parent to the current `squash-for-github` tip, and
+attaches your custom message — no merge machinery needed.
diff --git a/publish/CLAUDE.md b/publish/CLAUDE.md
deleted file mode 100644
index 683fec3..0000000
--- a/publish/CLAUDE.md
+++ /dev/null
@@ -1,223 +0,0 @@
-# BincioActivity — Context for Claude
-
-## What this project is
-
-BincioActivity is a federated, open-source, self-hosted activity stats platform
-(think personal Strava). Two-stage pipeline:
-
-1. **`bincio extract`** (Python): GPX/FIT/TCX → BAS JSON data store
-2. **`bincio render`** (Astro/Node): BAS data store → static website
-
-The BAS (BincioActivity Schema) JSON files are the federation protocol.
-Anyone can publish their data as BAS JSON and others can include it.
-
-## Key design decisions
-
-- **No database, no server** — everything is static files
-- **Python with uv** for the extract stage
-- **Astro + Svelte + Tailwind + MapLibre GL + Observable Plot** for the site
-- **Haversine** (not geopy) for distance calculations (10x faster)
-- **Worker initializer pattern** for ProcessPoolExecutor — large shared data
-  (strava_lookup dict, known_hashes frozenset) is sent once per worker via
-  `initializer=`, not once per task
-- **BAS activity IDs** always use UTC with Z suffix for URL safety
-- **TCX files** from Garmin use both `http://` and `https://` namespace URIs —
-  parser handles both
-
-## Your data
-
-- Source: `~/your-activity-data/`
-  - `activities/` — Strava export (GPX, FIT, TCX, all with .gz variants)
-  - Any subdirectories with FIT files from Garmin/Karoo devices
-  - `activities.csv` — Strava metadata (names, descriptions, gear)
-- Extracted output: `~/bincio_data/` (or `/tmp/bincio_test/` for testing)
-
-Configure input paths in `extract_config.yaml`.
-
-## Project structure
-
-```
-bincio/                    Python package
-  extract/
-    models.py              DataPoint, ParsedActivity, LapData
-    parsers/               GPX, FIT, TCX parsers + factory
-    sport.py               sport name normalisation
-    metrics.py             haversine-based stats computation (single pass)
-    timeseries.py          downsample to 1Hz, build BAS timeseries object
-    simplify.py            RDP track simplification → GeoJSON
-    dedup.py               exact (hash) + near-duplicate detection
-    strava_csv.py          Strava activities.csv importer
-    writer.py              BAS JSON + GeoJSON writer
-    config.py              extract_config.yaml loader
-    cli.py                 `bincio extract` CLI
-  render/
-    cli.py                 `bincio render` CLI (symlinks data, runs astro build/dev)
-    merge.py               sidecar edit overlay (produces _merged/)
-  edit/
-    cli.py                 `bincio edit` CLI
-    server.py              FastAPI write API for the edit drawer
-schema/
-  bas-v1.schema.json       JSON Schema for BAS
-SCHEMA.md                  Human-readable BAS spec
-site/                      Astro project
-  src/
-    layouts/Base.astro
-    pages/
-      index.astro           Activity feed (loads index.json client-side)
-      activity/[id].astro   Single activity (SSG, loads detail JSON client-side)
-      stats/index.astro     Heatmap + year totals
-    components/
-      ActivityFeed.svelte   Card grid, sport filter, pagination
-      ActivityDetail.svelte Map + stats + charts + photo gallery
-      ActivityMap.svelte    MapLibre GL (gradient track, linked hover dot)
-      ActivityCharts.svelte Observable Plot (elevation/speed/HR/cadence tabs)
-      StatsView.svelte      Yearly heatmap + totals
-      EditDrawer.svelte     Slide-in edit panel (visible when PUBLIC_EDIT_URL set)
-    lib/
-      types.ts              BAS TypeScript types
-      format.ts             formatDistance, formatDuration, sportIcon, etc.
-```
-
-## How to run
-
-```bash
-# Extract
-cd ~/src/bincio_activity
-uv run bincio extract --input ~/your-activity-data/activities --output /tmp/bincio_test
-
-# Site dev server
-cd site
-ln -sf /tmp/bincio_test/_merged public/data   # point at merged output
-cp .env.example .env && $EDITOR .env           # set BINCIO_DATA_DIR
-npm run dev
-
-# Edit server (optional — enables edit drawer in the site)
-uv run bincio edit --data-dir /tmp/bincio_test
-# set PUBLIC_EDIT_URL=http://localhost:4041 in site/.env
-
-# Tests
-uv run pytest
-```
-
-## MapLibre GL + Vite/Astro — known gotchas
-
-Learnt the hard way during debugging (March 2026):
-
-- **`maplibregl.workerUrl = ...` is the v3 API and silently no-ops in v4+.**
-  The v5 API is `maplibregl.setWorkerUrl(url)`, but you don't need it at all in a
-  normal Vite environment — MapLibre handles the blob worker automatically.
-
-- **`optimizeDeps: { exclude: ['maplibre-gl'] }` breaks tile loading.**
-  It prevents Vite from converting MapLibre's UMD bundle to ESM. The UMD bundle
-  uses AMD `define()` internally; served raw, the tile worker blob fails silently →
-  black map, no tiles. The correct setting is `include: ['maplibre-gl']`.
-
-- **`build.target: 'es2022'` (and `optimizeDeps.esbuildOptions.target`) is required.**
-  MapLibre's dependencies use ES2022 class field syntax. If esbuild downgrades it,
-  helpers like `__publicField` aren't available inside the serialised worker blob
-  scope → tile loading fails. This is a known upstream issue (maplibre-gl-js #6680).
-
-- **Use static imports, not dynamic `await import('maplibre-gl')`, when possible.**
-  With `client:only="svelte"` in Astro, SSR never runs for the component so there is
-  no `window is not defined` risk. Static import lets Vite pre-bundle correctly.
-
-- **Use `client:only="svelte"` (not `client:load`) for the activity detail page.**
-  `client:load` does SSR + hydration; complex interactive components with MapLibre
-  can hit hydration mismatch issues. `client:only` mounts fresh on the client only.
-
-- **MapLibre v5 requires explicit `center` and `zoom` in the Map constructor.**
-  v4 silently defaulted to `center: [0,0], zoom: 0`. v5 leaves internal projection
-  state undefined → `Cannot read properties of undefined (reading 'lng')` crashes
-  on any operation that touches coordinates (markers, resize, render). Always pass
-  `center` and `zoom` even if you plan to `fitBounds` later.
-
-- **MapLibre v5 requires `setLngLat()` on markers before `.addTo(map)`.**
-  v4 tolerated markers without coordinates. v5 calls `Marker._update()` inside
-  `addTo()`, which needs valid lngLat → same `'lng'` crash. Set a dummy `[0, 0]`
-  if the real position arrives later (e.g. hover markers).
-
-## Observable Plot — known gotchas
-
-- **Curve names are hyphenated, not camelCase.**
-  Use `"monotone-x"`, not `"monotoneX"`. Plot uses its own curve name registry
-  (not raw d3 identifiers). Wrong names throw `unknown curve` at runtime.
-
-The working `astro.config.mjs` Vite section:
-```js
-vite: {
-  optimizeDeps: {
-    include: ['maplibre-gl'],
-    esbuildOptions: { target: 'es2022' },
-  },
-  build: { target: 'es2022' },
-},
-```
-
-## Activity sidecar edits — design spec
-
-Users edit activities via **sidecar markdown files** in the data dir.
-No database, no server — consistent with the project's static-files-only philosophy.
-
-### File naming
-
-```
-~/bincio_data/
-  activities/{id}.json    ← immutable extract output
-  edits/{id}.md           ← user edits (sidecar)
-  edits/images/{id}/      ← uploaded photos
-  _merged/                ← render-time merge output (gitignored-style)
-```
-
-### Sidecar format
-
-```markdown
----
-title: "Epic climb up Monte Grappa"
-sport: cycling
-hide_stats: [cadence]
-highlight: true
-private: false
-gear: "Trek Domane"
----
-
-Rode with friends. Legs felt great after the rest week...
-```
-
-### Editing UX: drawer in Astro + `bincio edit` write API
-
-- `bincio edit --data-dir ~/bincio_data` starts a FastAPI server on port 4041
-- Set `PUBLIC_EDIT_URL=http://localhost:4041` in `site/.env` to enable the edit button
-- Clicking Edit on any activity detail page opens a slide-in drawer
-- Saving writes the sidecar and triggers `merge_all()` automatically
-- `bincio render` always runs `merge_all()` before build/serve and symlinks `public/data` → `_merged/`
-
-### `PUBLIC_EDIT_URL` as feature flag
-
-- **Unset** → no Edit button, normal static site
-- **Set** → edit drawer enabled; lives in `site/.env` (gitignored)
-
-## Known issues / next steps
-
-- `bincio render` Python CLI is functional but `--watch` mode not yet implemented
-- Activity IDs in older test data may use `+0000` format (pre-fix); re-run extract to get `Z` format
-- Some activities appear with both untitled and titled IDs (near-dedup timing race)
-- Federation (remote data sources) not yet implemented in site
-- Friends pages (`/friends/{handle}/`) not yet implemented
-- The `site/.env` file is gitignored — copy from `site/.env.example`
-
-## What "good" looks like (not yet done)
-
-- [ ] `bincio render` Python CLI wraps `astro build` properly
-- [ ] Friends/federation pages in site
-- [ ] Personal records page
-- [ ] Activity search / full-text filter in feed
-- [ ] GitHub Actions template for auto-publish
-- [ ] Karoo/Garmin Connect importers beyond Strava
-- [x] `bincio.render.merge` — sidecar parser, `_merged/` output, private filter, highlight sort
-- [x] `bincio edit` FastAPI write API (GET/POST activity, image upload/delete, triggers merge)
-- [x] `EditDrawer.svelte` — slide-in edit UI in the Astro site
-- [x] `PUBLIC_EDIT_URL` feature flag
-- [x] Markdown rendering in activity description with image path rewriting
-- [x] Photo gallery with lightbox on activity detail page
-- [ ] `bincio render --watch` incremental rebuild on sidecar/data changes
-- [ ] Highlight badge in activity feed cards
diff --git a/publish/extract_config.example.yaml b/publish/extract_config.example.yaml
deleted file mode 100644
index a02d6f2..0000000
--- a/publish/extract_config.example.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-owner:
-  handle: yourname
-  display_name: Your Name
-
-input:
-  dirs:
-    - ~/Activities/gpx
-    - ~/Activities/fit
-  # Strava bulk export metadata — provides names, descriptions, gear
-  # metadata_csv: ~/strava_export/activities.csv
-
-output:
-  dir: ~/bincio_data
-
-default_privacy: public
-
-sensors:
-  heart_rate: true
-  cadence: true
-  temperature: true
-  power: true
-
-track:
-  simplify: rdp
-  rdp_epsilon: 0.0001   # ~11m at equator
-  timeseries_hz: 1       # 1 sample/second max
-
-classifier:
-  enabled: false          # ML activity type classifier (requires scikit-learn extra)
-
-incremental: true         # skip files whose hash hasn't changed since last run
diff --git a/publish/manifest b/publish/manifest
deleted file mode 100644
index 9e127b4..0000000
--- a/publish/manifest
+++ /dev/null
@@ -1,72 +0,0 @@
-# BincioActivity — public release manifest
-# One relative path per line.
-# If publish/<path> exists, that sanitized version is used instead of the original.
-
-.gitignore
-.python-version
-CHANGELOG.md
-CHEATSHEET.md
-CLAUDE.md
-README.md
-SCHEMA.md
-pyproject.toml
-extract_config.example.yaml
-schema/bas-v1.schema.json
-bincio/__init__.py
-bincio/cli.py
-bincio/edit/__init__.py
-bincio/edit/cli.py
-bincio/edit/server.py
-bincio/extract/__init__.py
-bincio/extract/cli.py
-bincio/extract/config.py
-bincio/extract/dedup.py
-bincio/extract/metrics.py
-bincio/extract/models.py
-bincio/extract/parsers/__init__.py
-bincio/extract/parsers/base.py
-bincio/extract/parsers/factory.py
-bincio/extract/parsers/fit.py
-bincio/extract/parsers/gpx.py
-bincio/extract/parsers/tcx.py
-bincio/extract/simplify.py
-bincio/extract/sport.py
-bincio/extract/strava_csv.py
-bincio/extract/timeseries.py
-bincio/extract/writer.py
-bincio/import_/__init__.py
-bincio/import_/cli.py
-bincio/import_/strava.py
-bincio/render/__init__.py
-bincio/render/cli.py
-bincio/render/merge.py
-publish.sh
-publish/CLAUDE.md
-publish/extract_config.example.yaml
-publish/manifest
-site/.env.example
-site/astro.config.mjs
-site/package.json
-site/tailwind.config.mjs
-site/tsconfig.json
-site/src/components/ActivityCharts.svelte
-site/src/components/ActivityDetail.svelte
-site/src/components/ActivityFeed.svelte
-site/src/components/ActivityMap.svelte
-site/src/components/AthleteDrawer.svelte
-site/src/components/AthleteView.svelte
-site/src/components/EditDrawer.svelte
-site/src/components/MmpChart.svelte
-site/src/components/RecordsView.svelte
-site/src/components/StatsView.svelte
-site/src/layouts/Base.astro
-site/src/lib/format.ts
-site/src/lib/types.ts
-site/src/pages/activity/[id].astro
-site/src/pages/athlete/index.astro
-site/src/pages/index.astro
-site/src/pages/stats/index.astro
-tests/__init__.py
-tests/test_merge.py
-tests/test_sport.py
-tests/test_writer.py
diff --git a/scripts/pull_feedback.sh b/scripts/pull_feedback.sh
index c0866fb..346ec8e 100755
--- a/scripts/pull_feedback.sh
+++ b/scripts/pull_feedback.sh
@@ -1,9 +1,9 @@
 #!/usr/bin/env bash
 # Pull user feedback from the VPS into ./feedback/ locally.
-# Usage: bash scripts/pull_feedback.sh [vps-host]   (default: root@95.216.55.151)
+# Usage: bash scripts/pull_feedback.sh <user@host>
 
 set -e
-VPS=${1:-root@95.216.55.151}
+VPS=${1:?Usage: $0 user@host}
 REMOTE=/var/bincio/data/_feedback
 LOCAL=$(dirname "$0")/../feedback
 

From 219308bdb5b2f1fd4929bf379fa9a57eba8c0d26 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 18:14:00 +0200
Subject: [PATCH 098/124] ci: install serve/edit/strava extras so bcrypt and
 fastapi are available for tests

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ff36fca..8bb4095 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - uses: astral-sh/setup-uv@v8.0.0
-      - run: uv sync
+      - run: uv sync --extra serve --extra edit --extra strava
       - run: uv run pytest
 
   frontend:

From b22b5deb9e819e043ab47a364908ceb78e72da0a Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 18:16:46 +0200
Subject: [PATCH 099/124] =?UTF-8?q?fix=20tests:=20update=20merge=20tests?=
 =?UTF-8?q?=20for=20private=E2=86=92unlisted=20rename=20and=20client-side?=
 =?UTF-8?q?=20filtering?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 tests/test_merge.py | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/tests/test_merge.py b/tests/test_merge.py
index e53e2cf..e3dbd4c 100644
--- a/tests/test_merge.py
+++ b/tests/test_merge.py
@@ -88,7 +88,7 @@ def test_apply_sidecar_body_takes_precedence_over_fm_description():
 
 def test_apply_sidecar_private_flag():
     result = apply_sidecar(BASE_DETAIL, {"private": True}, "")
-    assert result["privacy"] == "private"
+    assert result["privacy"] == "unlisted"
 
 
 def test_apply_sidecar_highlight():
@@ -177,9 +177,11 @@ def test_merge_all_private_filtered_from_index(data_dir):
     merge_all(data_dir)
 
     index = json.loads((data_dir / "_merged" / "index.json").read_text())
-    ids = [a["id"] for a in index["activities"]]
-    assert "2024-01-01T080000Z-morning-ride" not in ids
-    assert "2024-01-02T090000Z-easy-run" in ids
+    activities = {a["id"]: a for a in index["activities"]}
+    # unlisted activities are kept in the index; filtering is client-side
+    assert "2024-01-01T080000Z-morning-ride" in activities
+    assert activities["2024-01-01T080000Z-morning-ride"]["privacy"] == "unlisted"
+    assert "2024-01-02T090000Z-easy-run" in activities
 
 
 def test_merge_all_highlight_sorts_first(data_dir):

From cd1cdca33b036146c7399d4e480a9dca15ff9bf9 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 18:49:01 +0200
Subject: [PATCH 100/124] extract: auto-detect gzip by magic bytes, not just
 .gz extension

Files compressed with gzip but named without .gz (e.g. activity.gpx
containing gzip data) now decompress transparently.
---
 bincio/extract/parsers/base.py | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/bincio/extract/parsers/base.py b/bincio/extract/parsers/base.py
index c68f424..543b95e 100644
--- a/bincio/extract/parsers/base.py
+++ b/bincio/extract/parsers/base.py
@@ -27,8 +27,14 @@ class BaseParser(ABC):
 
         raw_bytes is the original file content (used for hashing).
         decompressed_bytes is what parsers should actually parse.
+
+        Gzip is handled both by extension (.gz) and by magic bytes (0x1f 0x8b),
+        so files that are gzip-compressed but named without .gz still parse correctly.
         """
         raw = path.read_bytes()
-        if path.suffix == ".gz":
-            return raw, gzip.decompress(raw)
+        if path.suffix == ".gz" or raw[:2] == b'\x1f\x8b':
+            try:
+                return raw, gzip.decompress(raw)
+            except Exception:
+                pass  # not actually gzip despite the magic bytes — fall through
         return raw, raw

From bb253cc2c12dbe966d47f9fd4278711e443089ee Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Thu, 16 Apr 2026 18:54:18 +0200
Subject: [PATCH 101/124] site: accept gzip MIME types in upload file picker

Add application/gzip, application/x-gzip, and .gz to the accept
attribute so browsers show .gpx.gz / .fit.gz / .tcx.gz in the picker.
Browsers often ignore double-extension filters (.gpx.gz) without the
matching MIME type.
---
 site/src/layouts/Base.astro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index ee18dae..d3e81b9 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -311,7 +311,7 @@ try {
             class="border-2 border-dashed border-zinc-700 rounded-lg p-8 text-center text-zinc-500 text-sm cursor-pointer hover:border-zinc-500 hover:text-zinc-300 transition-colors"
           >
             <div id="upload-label">Drop FIT, GPX, TCX, or activities.csv<br/>or click to browse</div>
-            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz,.csv,application/gpx+xml,application/vnd.garmin.tcx+xml,application/octet-stream" class="hidden" multiple />
+            <input id="upload-input" type="file" accept=".fit,.gpx,.tcx,.fit.gz,.gpx.gz,.tcx.gz,.gz,.csv,application/gpx+xml,application/vnd.garmin.tcx+xml,application/gzip,application/x-gzip,application/octet-stream" class="hidden" multiple />
           </div>
           <label class="flex items-start gap-2 mt-3 cursor-pointer group">
             <input

From cada2bcb03bb3de80d8c8ddfe133f6f4a7649891 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 19 Apr 2026 22:21:10 +0200
Subject: [PATCH 102/124] perf: year-shard index.json to cut initial load from
 MBs to ~1 year
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

merge_all/_merged/index.json is now a shard manifest; activities are
split into index-{year}.json files. The feed loads only the most-recent
year on first paint (~200 activities instead of all of them). Older
years are fetched lazily when the user clicks "Load older activities".

Also strips best_efforts / best_climb_m / source from shard files —
these fields are aggregation inputs only, never read by the feed UI.
---
 bincio/render/merge.py                  |  61 +++++++++++--
 site/src/components/ActivityFeed.svelte |  52 ++++++++---
 site/src/lib/dataloader.ts              | 115 ++++++++++++++++++++++--
 tests/test_merge.py                     |  22 ++++-
 tests/test_pipeline.py                  |  13 ++-
 5 files changed, 230 insertions(+), 33 deletions(-)

diff --git a/bincio/render/merge.py b/bincio/render/merge.py
index 7c82308..bdc8fc6 100644
--- a/bincio/render/merge.py
+++ b/bincio/render/merge.py
@@ -155,8 +155,7 @@ def merge_one(data_dir: Path, activity_id: str) -> None:
     activities.sort(key=lambda a: a.get("started_at", ""), reverse=True)
     activities.sort(key=lambda a: 0 if a.get("custom", {}).get("highlight") else 1)
 
-    index["activities"] = activities
-    (merged_dir / "index.json").write_text(json.dumps(index, indent=2, ensure_ascii=False))
+    _write_year_shards(merged_dir, activities, index)
 
 
 def merge_all(data_dir: Path) -> int:
@@ -267,11 +266,57 @@ def merge_all(data_dir: Path) -> int:
         activities.sort(key=lambda a: a.get("started_at", ""), reverse=True)
         activities.sort(key=lambda a: 0 if a.get("custom", {}).get("highlight") else 1)
 
-        index["activities"] = activities
-        (merged_dir / "index.json").write_text(
-            json.dumps(index, indent=2, ensure_ascii=False)
-        )
-    elif (merged_dir / "index.json").exists():
-        (merged_dir / "index.json").unlink()
+        _write_year_shards(merged_dir, activities, index)
+    else:
+        # Remove any stale year shard files if the source index disappeared
+        for f in merged_dir.glob("index-*.json"):
+            f.unlink()
+        if (merged_dir / "index.json").exists():
+            (merged_dir / "index.json").unlink()
 
     return len(sidecars)
+
+
+# Fields only needed for athlete.json aggregation at extract time — they add
+# bulk to every summary entry but are never read by the feed UI.
+_FEED_STRIP = {"best_efforts", "best_climb_m", "source"}
+
+
+def _write_year_shards(merged_dir: Path, activities: list[dict], index_meta: dict) -> None:
+    """Split activities by year and write index-{year}.json shards.
+
+    Replaces merged_dir/index.json with a shard manifest so the feed can
+    load only the most-recent year on first paint and fetch older years lazily.
+    """
+    from collections import defaultdict
+
+    # Remove stale year shard files from previous runs
+    for f in merged_dir.glob("index-*.json"):
+        f.unlink()
+
+    by_year: dict[str, list[dict]] = defaultdict(list)
+    for a in activities:
+        year = (a.get("started_at") or "")[:4] or "unknown"
+        # Strip aggregation-only fields to keep shard files small
+        slim = {k: v for k, v in a.items() if k not in _FEED_STRIP}
+        by_year[year].append(slim)
+
+    years = sorted(by_year.keys(), reverse=True)  # newest first
+    shards = []
+    for year in years:
+        shard_doc = {
+            **{k: v for k, v in index_meta.items() if k not in ("activities", "shards")},
+            "shards": [],
+            "activities": by_year[year],
+        }
+        fname = f"index-{year}.json"
+        (merged_dir / fname).write_text(json.dumps(shard_doc, indent=2, ensure_ascii=False))
+        shards.append({"url": fname, "year": int(year) if year.isdigit() else 0,
+                        "count": len(by_year[year])})
+
+    root_doc = {
+        **{k: v for k, v in index_meta.items() if k not in ("activities", "shards")},
+        "shards": shards,
+        "activities": [],
+    }
+    (merged_dir / "index.json").write_text(json.dumps(root_doc, indent=2, ensure_ascii=False))
diff --git a/site/src/components/ActivityFeed.svelte b/site/src/components/ActivityFeed.svelte
index e486e33..f292dbf 100644
--- a/site/src/components/ActivityFeed.svelte
+++ b/site/src/components/ActivityFeed.svelte
@@ -2,7 +2,7 @@
   import { onMount } from 'svelte';
   import type { ActivitySummary, BASIndex, Sport } from '../lib/types';
   import { formatDistance, formatDuration, formatElevation, formatDate, isUnlisted, sportIcon, sportColor, sportLabel } from '../lib/format';
-  import { loadIndex } from '../lib/dataloader';
+  import { loadIndexPaged, loadShardActivities } from '../lib/dataloader';
 
   /** Render preview_coords as an SVG polyline path string. */
   function trackPath(coords: [number, number][] | null, w: number, h: number): string {
@@ -41,8 +41,10 @@
   let sport: Sport | 'all' = 'all';
   let shown = PAGE_SIZE;
   let loading = true;
+  let loadingMore = false;
   let error = '';
   let mounted = false;
+  let pendingShards: string[] = [];
   /** Logged-in handle — resolved async via bincio:me event. */
   let me: string = '';
 
@@ -58,7 +60,33 @@
   });
   $: filtered = sport === 'all' ? withPrivacy : withPrivacy.filter(a => a.sport === sport);
   $: visible = filtered.slice(0, shown);
-  $: hasMore = shown < filtered.length;
+  $: canShowMore = shown < filtered.length;
+  $: hasMore = canShowMore || pendingShards.length > 0;
+
+  async function loadMore() {
+    if (canShowMore) {
+      shown += PAGE_SIZE;
+      return;
+    }
+    if (!pendingShards.length) return;
+    loadingMore = true;
+    const url = pendingShards[0];
+    pendingShards = pendingShards.slice(1);
+    try {
+      const fresh = await loadShardActivities(url);
+      // Merge avoiding duplicates (IDB activities may already be present)
+      const existing = new Map(all.map(a => [a.id, a]));
+      for (const a of fresh) if (!existing.has(a.id)) existing.set(a.id, a);
+      all = [...existing.values()].sort((a, b) =>
+        (b.started_at ?? '').localeCompare(a.started_at ?? ''),
+      );
+      shown += PAGE_SIZE;
+    } catch {
+      // shard load failed — don't block the user
+    } finally {
+      loadingMore = false;
+    }
+  }
 
   $: if (sport) shown = PAGE_SIZE; // reset pagination on filter change
 
@@ -84,12 +112,9 @@
       const indexUrl = profileIndexUrl
         ? `${base}data/${profileIndexUrl}`
         : `${base}data/index.json`;
-      const index = await loadIndex(base, indexUrl);
+      const { index, pendingShards: pending } = await loadIndexPaged(base, indexUrl);
+      pendingShards = pending;
       let activities = index.activities;
-      // filterHandle only applies when loading the root manifest (multi-user feed).
-      // When profileIndexUrl is set we already loaded the right user's shard directly —
-      // activities from a direct shard fetch have no handle tag, so the filter would
-      // remove everything.
       if (filterHandle && !profileIndexUrl) {
         activities = activities.filter(a => (a as any).handle === filterHandle);
       }
@@ -230,10 +255,17 @@
   {#if hasMore}
     <div class="text-center mt-8">
       <button
-        class="px-6 py-2 rounded-full border border-zinc-700 text-zinc-300 hover:border-zinc-500 hover:text-white transition-colors text-sm"
-        on:click={() => shown += PAGE_SIZE}
+        class="px-6 py-2 rounded-full border border-zinc-700 text-zinc-300 hover:border-zinc-500 hover:text-white disabled:opacity-40 transition-colors text-sm"
+        disabled={loadingMore}
+        on:click={loadMore}
       >
-        Load more ({filtered.length - shown} remaining)
+        {#if loadingMore}
+          Loading…
+        {:else if canShowMore}
+          Load more ({filtered.length - shown} remaining)
+        {:else}
+          Load older activities ({pendingShards.length} more {pendingShards.length === 1 ? 'year' : 'years'})
+        {/if}
       </button>
     </div>
   {/if}
diff --git a/site/src/lib/dataloader.ts b/site/src/lib/dataloader.ts
index a19dc87..032c8b8 100644
--- a/site/src/lib/dataloader.ts
+++ b/site/src/lib/dataloader.ts
@@ -55,6 +55,22 @@ function emptyIndex(): BASIndex {
   };
 }
 
+// ── Helpers ───────────────────────────────────────────────────────────────────
+
+function isYearShardUrl(url: string): boolean {
+  return /(?:^|\/)index-\d{4}\.json$/.test(url);
+}
+
+function rewriteActivityUrls(a: ActivitySummary, shardBase: string): ActivitySummary {
+  return {
+    ...a,
+    detail_url: a.detail_url && !a.detail_url.startsWith('http')
+      ? `${shardBase}${a.detail_url}` : a.detail_url,
+    track_url: a.track_url && !a.track_url.startsWith('http')
+      ? `${shardBase}${a.track_url}` : a.track_url,
+  };
+}
+
 // ── Public API ────────────────────────────────────────────────────────────────
 
 /**
@@ -87,14 +103,8 @@ async function resolveShards(
       // Rewrite relative detail_url / track_url to be absolute so they can be
       // fetched correctly regardless of where the root index lives.
       return activities.map(a => ({
-        ...a,
+        ...rewriteActivityUrls(a, shardBase),
         ...(shard.handle ? { handle: shard.handle } : {}),
-        detail_url: a.detail_url && !a.detail_url.startsWith('http')
-          ? `${shardBase}${a.detail_url}`
-          : a.detail_url,
-        track_url: a.track_url && !a.track_url.startsWith('http')
-          ? `${shardBase}${a.track_url}`
-          : a.track_url,
       }));
     }),
   );
@@ -150,6 +160,97 @@ export async function loadIndex(baseUrl: string, indexUrl?: string): Promise<BAS
   };
 }
 
+/**
+ * Like loadIndex but only fetches the most-recent year shard immediately.
+ * Returns the first-page activities plus a list of remaining shard URLs that
+ * can be fetched on demand (e.g. when the user clicks "Load more").
+ *
+ * Falls back to full eager loading for non-year shard manifests (multi-user
+ * combined feed) so the behaviour is identical to loadIndex in those cases.
+ */
+export async function loadIndexPaged(
+  baseUrl: string,
+  indexUrl?: string,
+): Promise<{ index: BASIndex; pendingShards: string[] }> {
+  indexUrl = indexUrl ?? `${baseUrl}data/index.json`;
+
+  const [serverResult, localResult] = await Promise.allSettled([
+    fetchJSON<BASIndex>(indexUrl),
+    listLocalActivities(),
+  ]);
+
+  const server = serverResult.status === 'fulfilled' ? serverResult.value : null;
+  const local  = localResult.status  === 'fulfilled' ? localResult.value  : [];
+
+  if (!server && local.length === 0) return { index: emptyIndex(), pendingShards: [] };
+
+  const base = indexUrl.substring(0, indexUrl.lastIndexOf('/') + 1);
+  const allShards = server?.shards ?? [];
+
+  const yearShards  = allShards.filter(s => isYearShardUrl(s.url));
+  const otherShards = allShards.filter(s => !isYearShardUrl(s.url));
+
+  // ── Year-sharded index (single-user or profile page) ───────────────────────
+  // Load only the first (most-recent) year shard; return the rest as pending.
+  let yearFirstActivities: ActivitySummary[] = [];
+  let pendingShards: string[] = [];
+
+  if (yearShards.length > 0) {
+    const sorted = [...yearShards].sort((a, b) => b.url.localeCompare(a.url));
+    const firstUrl = sorted[0].url.startsWith('http') ? sorted[0].url : `${base}${sorted[0].url}`;
+    const shardBase = firstUrl.substring(0, firstUrl.lastIndexOf('/') + 1);
+    try {
+      const first = await fetchJSON<BASIndex>(firstUrl);
+      yearFirstActivities = (first.activities ?? []).map(a => rewriteActivityUrls(a, shardBase));
+    } catch (e) {
+      console.error('[bincio] first year shard failed:', sorted[0].url, e);
+    }
+    pendingShards = sorted.slice(1).map(s =>
+      s.url.startsWith('http') ? s.url : `${base}${s.url}`,
+    );
+  }
+
+  // ── Non-year shards (multi-user manifest) — loaded eagerly as before ───────
+  let otherActivities: ActivitySummary[] = [];
+  if (otherShards.length > 0) {
+    const otherIndex: BASIndex = { ...(server ?? emptyIndex()), shards: otherShards };
+    otherActivities = await resolveShards(otherIndex, indexUrl);
+  }
+
+  // ── Own activities (legacy flat index with no shards) ──────────────────────
+  const ownActivities = allShards.length === 0 ? (server?.activities ?? []) : [];
+
+  // Merge: server + local (local overrides server for same id)
+  const serverActivities = [...ownActivities, ...otherActivities, ...yearFirstActivities];
+  const merged = new Map<string, ActivitySummary>();
+  for (const a of serverActivities)           merged.set(a.id, a);
+  for (const a of local as ActivitySummary[]) merged.set(a.id, a);
+
+  return {
+    index: {
+      ...(server ?? emptyIndex()),
+      activities: [...merged.values()].sort(
+        (a, b) => (b.started_at ?? '').localeCompare(a.started_at ?? ''),
+      ),
+    },
+    pendingShards,
+  };
+}
+
+/**
+ * Fetch activities from a single year shard URL (absolute).
+ * Used by ActivityFeed to lazily load older years when "Load more" is clicked.
+ */
+export async function loadShardActivities(shardUrl: string): Promise<ActivitySummary[]> {
+  try {
+    const data = await fetchJSON<BASIndex>(shardUrl);
+    const base = shardUrl.substring(0, shardUrl.lastIndexOf('/') + 1);
+    return (data.activities ?? []).map(a => rewriteActivityUrls(a, base));
+  } catch {
+    return [];
+  }
+}
+
 /**
  * Load a single activity detail, checking IndexedDB first so locally-converted
  * activities are available offline.
diff --git a/tests/test_merge.py b/tests/test_merge.py
index e3dbd4c..ff286dc 100644
--- a/tests/test_merge.py
+++ b/tests/test_merge.py
@@ -9,6 +9,18 @@ import pytest
 from bincio.render.merge import apply_sidecar, merge_all, merge_one, parse_sidecar
 
 
+def _load_merged_activities(merged_dir: Path) -> dict:
+    """Load all activities from year-sharded merged index. Returns id→dict map."""
+    root = json.loads((merged_dir / "index.json").read_text())
+    all_acts = list(root.get("activities", []))
+    for shard in root.get("shards", []):
+        shard_path = merged_dir / shard["url"]
+        if shard_path.exists():
+            sub = json.loads(shard_path.read_text())
+            all_acts.extend(sub.get("activities", []))
+    return {a["id"]: a for a in all_acts}
+
+
 # ── parse_sidecar ─────────────────────────────────────────────────────────────
 
 
@@ -176,8 +188,7 @@ def test_merge_all_private_filtered_from_index(data_dir):
     (edits / "2024-01-01T080000Z-morning-ride.md").write_text("---\nprivate: true\n---\n")
     merge_all(data_dir)
 
-    index = json.loads((data_dir / "_merged" / "index.json").read_text())
-    activities = {a["id"]: a for a in index["activities"]}
+    activities = _load_merged_activities(data_dir / "_merged")
     # unlisted activities are kept in the index; filtering is client-side
     assert "2024-01-01T080000Z-morning-ride" in activities
     assert activities["2024-01-01T080000Z-morning-ride"]["privacy"] == "unlisted"
@@ -191,8 +202,11 @@ def test_merge_all_highlight_sorts_first(data_dir):
     (edits / "2024-01-01T080000Z-morning-ride.md").write_text("---\nhighlight: true\n---\n")
     merge_all(data_dir)
 
-    index = json.loads((data_dir / "_merged" / "index.json").read_text())
-    ids = [a["id"] for a in index["activities"]]
+    # Highlighted activity must be first within its year shard
+    merged_dir = data_dir / "_merged"
+    root = json.loads((merged_dir / "index.json").read_text())
+    shard_path = merged_dir / root["shards"][0]["url"]
+    ids = [a["id"] for a in json.loads(shard_path.read_text())["activities"]]
     assert ids[0] == "2024-01-01T080000Z-morning-ride"
 
 
diff --git a/tests/test_pipeline.py b/tests/test_pipeline.py
index 3e0e87d..1c52036 100644
--- a/tests/test_pipeline.py
+++ b/tests/test_pipeline.py
@@ -83,10 +83,15 @@ class TestPipeline:
         merge_all(data_root / "brut")
 
         for handle in ("dave", "brut"):
-            merged = json.loads((data_root / handle / "_merged" / "index.json").read_text())
-            assert len(merged["activities"]) >= 8, (
-                f"Expected ≥8 merged activities for {handle}"
-            )
+            merged_dir = data_root / handle / "_merged"
+            root = json.loads((merged_dir / "index.json").read_text())
+            # Root index now has year shards; collect all activities across them
+            all_acts: list = list(root.get("activities", []))
+            for shard in root.get("shards", []):
+                sp = merged_dir / shard["url"]
+                if sp.exists():
+                    all_acts.extend(json.loads(sp.read_text()).get("activities", []))
+            assert len(all_acts) >= 8, f"Expected ≥8 merged activities for {handle}"
 
     def test_root_manifest(self, data_root):
         from bincio.render.cli import _user_dirs, _write_root_manifest

From 8575a7015bc017825c9aabd16145f44ed8c14a2b Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 19 Apr 2026 22:31:20 +0200
Subject: [PATCH 103/124] fix: delete activity removes it from index.json;
 detail page uses lazy load

delete_activity now updates data_dir/index.json so merge_all no longer
re-adds the summary for a deleted activity, preventing the broken
"Activity not found" state after deletion.

ActivityDetailLoader switches from loadIndex (all year shards) to
loadIndexPaged (first year shard only) + direct file fallback, so
opening an activity detail page no longer downloads the entire history.
---
 bincio/serve/server.py                        | 11 +++
 .../components/ActivityDetailLoader.svelte    | 95 ++++++++++++-------
 2 files changed, 71 insertions(+), 35 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index e486139..adf5a01 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -1288,6 +1288,17 @@ async def delete_activity(
     if images_dir.exists():
         shutil.rmtree(images_dir)
 
+    # Remove from the extract-level flat index so merge_all doesn't re-add
+    # the summary even though the detail file is gone.
+    index_path = dd / "index.json"
+    if index_path.exists():
+        try:
+            idx = json.loads(index_path.read_text(encoding="utf-8"))
+            idx["activities"] = [a for a in idx.get("activities", []) if a.get("id") != activity_id]
+            index_path.write_text(json.dumps(idx, indent=2, ensure_ascii=False))
+        except Exception:
+            pass  # corrupt index — merge_all will clean up on next run
+
     # Remove from dedup cache so the file can be re-uploaded if needed
     cache_path = dd / ".bincio_cache.json"
     if cache_path.exists():
diff --git a/site/src/components/ActivityDetailLoader.svelte b/site/src/components/ActivityDetailLoader.svelte
index 1831c1f..91cd3f9 100644
--- a/site/src/components/ActivityDetailLoader.svelte
+++ b/site/src/components/ActivityDetailLoader.svelte
@@ -1,6 +1,6 @@
 <script lang="ts">
   import { onMount } from 'svelte';
-  import { loadIndex } from '../lib/dataloader';
+  import { loadIndexPaged } from '../lib/dataloader';
   import ActivityDetail from './ActivityDetail.svelte';
   import { isUnlisted } from '../lib/format';
   import type { ActivitySummary, BASIndex } from '../lib/types';
@@ -12,11 +12,54 @@
   let loading = true;
 
   /**
-   * Fallback: if the activity isn't found in the loaded index (e.g. the user's
-   * shard fetch failed silently), try to fetch the detail file directly from
-   * each known user shard's _merged/activities/ directory.
+   * Build an ActivitySummary stub from a detail JSON object.
+   * Used when we fetch the detail file directly without going through the index.
+   */
+  function summaryFromDetail(d: any, detailUrl: string, handle?: string): ActivitySummary {
+    return {
+      id: d.id,
+      title: d.title ?? d.id,
+      sport: d.sport ?? 'other',
+      sub_sport: d.sub_sport ?? null,
+      started_at: d.started_at ?? '',
+      distance_m: d.distance_m ?? null,
+      duration_s: d.duration_s ?? null,
+      moving_time_s: d.moving_time_s ?? null,
+      elevation_gain_m: d.elevation_gain_m ?? null,
+      avg_speed_kmh: d.avg_speed_kmh ?? null,
+      max_speed_kmh: d.max_speed_kmh ?? null,
+      avg_hr_bpm: d.avg_hr_bpm ?? null,
+      max_hr_bpm: d.max_hr_bpm ?? null,
+      avg_cadence_rpm: d.avg_cadence_rpm ?? null,
+      avg_power_w: d.avg_power_w ?? null,
+      mmp: d.mmp ?? null,
+      source: d.source ?? null,
+      privacy: d.privacy ?? 'public',
+      detail_url: detailUrl,
+      track_url: d.bbox && d.privacy !== 'no_gps'
+        ? detailUrl.replace(/\.json$/, '.geojson')
+        : null,
+      preview_coords: null,
+      ...(handle ? { handle } : {}),
+    };
+  }
+
+  /**
+   * Fallback: fetch the activity detail file directly without loading the index.
+   * Tries single-user path first, then each multi-user handle shard.
    */
   async function fetchActivityDirect(id: string): Promise<ActivitySummary | null> {
+    // Single-user: public/data → _merged/, so activities/ resolves directly
+    try {
+      const url = `${base}data/activities/${id}.json`;
+      const r = await fetch(url);
+      if (r.ok) {
+        const d = await r.json();
+        if (d.id === id) return summaryFromDetail(d, `activities/${id}.json`);
+      }
+    } catch { /* fall through */ }
+
+    // Multi-user: try each handle shard
     try {
       const r = await fetch(`${base}data/index.json`);
       if (!r.ok) return null;
@@ -28,34 +71,14 @@
           const dr = await fetch(url);
           if (!dr.ok) continue;
           const d = await dr.json();
-          if (d.id !== id) continue;
-          return {
-            id: d.id,
-            title: d.title ?? id,
-            sport: d.sport ?? 'other',
-            sub_sport: d.sub_sport ?? null,
-            started_at: d.started_at ?? '',
-            distance_m: d.distance_m ?? null,
-            duration_s: d.duration_s ?? null,
-            moving_time_s: d.moving_time_s ?? null,
-            elevation_gain_m: d.elevation_gain_m ?? null,
-            avg_speed_kmh: d.avg_speed_kmh ?? null,
-            max_speed_kmh: d.max_speed_kmh ?? null,
-            avg_hr_bpm: d.avg_hr_bpm ?? null,
-            max_hr_bpm: d.max_hr_bpm ?? null,
-            avg_cadence_rpm: d.avg_cadence_rpm ?? null,
-            avg_power_w: d.avg_power_w ?? null,
-            mmp: d.mmp ?? null,
-            source: d.source ?? null,
-            privacy: d.privacy ?? 'public',
-            detail_url: `${shard.handle}/_merged/activities/${id}.json`,
-            track_url: d.bbox && d.privacy !== 'no_gps'
-              ? `${shard.handle}/_merged/activities/${id}.geojson`
-              : null,
-            preview_coords: null,
-            handle: shard.handle,
-          };
-        } catch { /* try next shard */ }
+          if (d.id === id) {
+            return summaryFromDetail(
+              d,
+              `${shard.handle}/_merged/activities/${id}.json`,
+              shard.handle,
+            );
+          }
+        } catch { /* try next */ }
       }
     } catch { /* ignore */ }
     return null;
@@ -68,12 +91,14 @@
     if (!id) { notFound = true; loading = false; return; }
 
     try {
-      const index = await loadIndex(base);
+      // Load only the most-recent year shard — avoids downloading all years just
+      // to look up one activity. Falls back to a direct file fetch if not found.
+      const { index } = await loadIndexPaged(base);
       activity = index.activities.find(a => a.id === id) ?? null;
 
       if (!activity) {
-        // Shard lookup failed — try fetching the detail file directly.
-        // This handles transient shard fetch errors, stale index state, etc.
+        // Not in first year shard (old activity) or shard fetch failed —
+        // fetch the detail file directly to avoid loading all remaining shards.
         activity = await fetchActivityDirect(id);
       }
 

From 8a3e7831d35b88d1df295aa9a75d7b1bca0049ec Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 19 Apr 2026 22:46:36 +0200
Subject: [PATCH 104/124] fix: prevent double URL-rewrite in nested shard
 resolution
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

rewriteActivityUrls now skips URLs that are already absolute (start with
/ or http). Before this fix, the new user→year two-level nesting caused
year-shard URLs (/data/brut/_merged/activities/X.json) to be prepended
again at the user-shard level, producing broken doubled paths and making
every activity show "Activity not found".
---
 site/src/lib/dataloader.ts | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/site/src/lib/dataloader.ts b/site/src/lib/dataloader.ts
index 032c8b8..b37b8fb 100644
--- a/site/src/lib/dataloader.ts
+++ b/site/src/lib/dataloader.ts
@@ -62,12 +62,14 @@ function isYearShardUrl(url: string): boolean {
 }
 
 function rewriteActivityUrls(a: ActivitySummary, shardBase: string): ActivitySummary {
+  // Skip if URL is already absolute (http:// or root-relative /) — avoids
+  // double-rewriting when shards are nested (e.g. user shard → year shard).
+  const needsRewrite = (url: string | null | undefined): boolean =>
+    !!url && !url.startsWith('http') && !url.startsWith('/');
   return {
     ...a,
-    detail_url: a.detail_url && !a.detail_url.startsWith('http')
-      ? `${shardBase}${a.detail_url}` : a.detail_url,
-    track_url: a.track_url && !a.track_url.startsWith('http')
-      ? `${shardBase}${a.track_url}` : a.track_url,
+    detail_url: needsRewrite(a.detail_url) ? `${shardBase}${a.detail_url}` : a.detail_url,
+    track_url:  needsRewrite(a.track_url)  ? `${shardBase}${a.track_url}`  : a.track_url,
   };
 }
 

From 5227b30456909e8d6418596c744481e0eb7b07e9 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 19 Apr 2026 22:58:09 +0200
Subject: [PATCH 105/124] fix: EditDrawer correctly reads and labels unlisted
 privacy

- serve/server.py GET adds private:bool to the response (true when
  privacy is "unlisted" or legacy "private") so EditDrawer can read it
- edit/server.py GET: same fix for the single-user edit server
- EditDrawer: fall back to d.privacy if d.private is absent; rename
  "Private" toggle label to "Unlisted"
---
 bincio/edit/server.py                 | 2 +-
 bincio/serve/server.py                | 6 +++++-
 site/src/components/EditDrawer.svelte | 6 ++++--
 3 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 64ea731..167fbf3 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -407,7 +407,7 @@ async def get_activity(activity_id: str) -> JSONResponse:
         "gear": fm.get("gear", detail.get("gear") or ""),
         "description": body or fm.get("description") or detail.get("description") or "",
         "highlight": fm.get("highlight", detail.get("custom", {}).get("highlight", False)),
-        "private": fm.get("private", detail.get("privacy") == "private"),
+        "private": fm.get("private", detail.get("privacy") in ("private", "unlisted")),
         "hide_stats": fm.get("hide_stats", detail.get("custom", {}).get("hide_stats", [])),
         "images": images,
     })
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index adf5a01..78cffdc 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -1236,7 +1236,11 @@ async def get_activity(
     user = _require_user(bincio_session)
     _check_id(activity_id)
     path = _require_owns(activity_id, user)
-    return JSONResponse(json.loads(path.read_text()))
+    detail = json.loads(path.read_text())
+    # Normalise for EditDrawer: add `private` bool so the drawer works regardless
+    # of whether the raw JSON uses the old "private" or the new "unlisted" value.
+    detail["private"] = detail.get("privacy") in ("private", "unlisted")
+    return JSONResponse(detail)
 
 
 @app.post("/api/activity/{activity_id}", response_model=ActivityEditResponse)
diff --git a/site/src/components/EditDrawer.svelte b/site/src/components/EditDrawer.svelte
index 5246953..7d8a215 100644
--- a/site/src/components/EditDrawer.svelte
+++ b/site/src/components/EditDrawer.svelte
@@ -54,7 +54,9 @@
       // Strip any auto-inserted image markdown refs — images are tracked via custom.images
       description = (d.description ?? '').replace(/!\[[^\]]*\]\([^)]+\)\n?/g, '').trim();
       highlight   = d.highlight   ?? false;
-      isPrivate   = d.private     ?? false;
+      // d.private is a bool (from the API); d.privacy is the raw field on older
+      // endpoints. Accept either so the drawer works with both serve and edit servers.
+      isPrivate   = d.private     ?? (d.privacy === 'unlisted' || d.privacy === 'private') ?? false;
       hideStats   = d.hide_stats  ?? [];
       images      = d.images      ?? [];
     } catch (e: any) {
@@ -286,7 +288,7 @@
           style={isPrivate ? 'background:rgba(239,68,68,.1)' : ''}
           on:click={() => isPrivate = !isPrivate}
         >
-          ⊘ Private
+          ⊘ Unlisted
         </button>
       </div>
     {/if}

From cea1dbc2fb783c0f9000c153a17edc1c95b76ba2 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Sun, 19 Apr 2026 23:34:55 +0200
Subject: [PATCH 106/124] ops: fix data/ triple-duplication costing ~24 GB on
 VPS
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

astro build resolves the public/data symlink and copies all activity JSON
into dist/; rsync then copied that to the webroot — but nginx already serves
/data/ directly from /var/bincio/data/ via alias, so both copies were dead
weight. Freed 36 GB → 14 GB on the live server.

- post-receive hook: prune dist/data/ before rsync, add --exclude=data/
- docs: update manual rebuild command and nginx comment to match
- serve/server.py: _mb() now uses lstat() to count symlinks at face value
  rather than following them to targets, so admin storage panel no longer
  double-counts _merged/ (which is mostly symlinks into activities/)
---
 bincio/serve/server.py |  6 ++++--
 docs/deployment/vps.md | 13 +++++++++++--
 2 files changed, 15 insertions(+), 4 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 78cffdc..51e5104 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -594,7 +594,9 @@ async def admin_disk(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     def _mb(path: Path) -> float:
         if not path.exists():
             return 0.0
-        total = sum(f.stat().st_size for f in path.rglob("*") if f.is_file())
+        # Use lstat to count symlink entries (few bytes each) rather than following
+        # the link to the target — prevents _merged/ from double-counting activities/.
+        total = sum(f.lstat().st_size for f in path.rglob("*") if f.is_file() or f.is_symlink())
         return round(total / 1_048_576, 1)
 
     def _count(path: Path, pattern: str = "*") -> int:
@@ -991,7 +993,7 @@ async def me_storage(bincio_session: Optional[str] = Cookie(default=None)) -> JS
     def _mb(path: Path) -> float:
         if not path.exists():
             return 0.0
-        total = sum(f.stat().st_size for f in path.rglob("*") if f.is_file())
+        total = sum(f.lstat().st_size for f in path.rglob("*") if f.is_file() or f.is_symlink())
         return round(total / 1_048_576, 2)
 
     def _count(path: Path, pattern: str = "*") -> int:
diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 87b6d5b..02655f2 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -68,8 +68,11 @@ while read oldrev newrev refname; do
   cd $DEPLOY
   ~/.local/bin/uv run bincio render --data-dir $DATA --site-dir $DEPLOY/site
 
+  echo "--- Pruning dist/data (nginx serves /data/ directly from $DATA) ---"
+  rm -rf $DEPLOY/site/dist/data
+
   echo "--- Copying dist to webroot ---"
-  rsync -a --delete $DEPLOY/site/dist/ /var/www/bincio/
+  rsync -a --delete --exclude=data/ $DEPLOY/site/dist/ /var/www/bincio/
 
   echo "--- Restarting API ---"
   systemctl restart bincio || echo "WARNING: bincio service restart failed — check journalctl -u bincio"
@@ -223,7 +226,8 @@ ssh root@<vps> "cd /opt/bincio && uv run bincio extract"
 # rebuild site
 ssh root@<vps> "cd /opt/bincio && \
   uv run bincio render --data-dir /var/bincio/data --site-dir site && \
-  rsync -a --delete site/dist/ /var/www/bincio/"
+  rm -rf site/dist/data && \
+  rsync -a --delete --exclude=data/ site/dist/ /var/www/bincio/"
 ```
 
 ---
@@ -253,6 +257,11 @@ server {
 
     # Data files served live from disk — bypasses the build/rsync cycle
     # so uploads and merges are visible immediately without a site rebuild.
+    #
+    # IMPORTANT: because nginx owns /data/ here, the post-receive hook must
+    # delete dist/data/ before rsyncing to the webroot. Otherwise astro build
+    # copies all activity JSON (GBs) into dist/ and rsync duplicates it again.
+    # The hook already does this; manual rebuilds must do the same.
     location /data/ {
         alias /var/bincio/data/;
         add_header Cache-Control "no-cache, must-revalidate";

From d06971606876c2a2446de3b87629720cf8a47fca Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 15:07:52 +0200
Subject: [PATCH 107/124] fix: clamp stats tooltip within viewport on mobile

---
 site/src/components/StatsView.svelte | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/site/src/components/StatsView.svelte b/site/src/components/StatsView.svelte
index 78b052d..5c9386a 100644
--- a/site/src/components/StatsView.svelte
+++ b/site/src/components/StatsView.svelte
@@ -74,10 +74,14 @@
   function updatePos(e: MouseEvent) {
     const vw = window.innerWidth;
     const vh = window.innerHeight;
-    tooltipPos = {
-      x: e.clientX > vw - 310 ? e.clientX - 305 : e.clientX + 14,
-      y: Math.min(e.clientY - 8, vh - 260),
-    };
+    const tw = 280; // matches w-[280px]
+    const th = 260; // approximate tooltip height
+    const gap = 14;
+    let x = e.clientX + gap;
+    if (x + tw > vw) x = e.clientX - gap - tw;
+    x = Math.max(4, Math.min(x, vw - tw - 4));
+    const y = Math.max(4, Math.min(e.clientY - 8, vh - th - 4));
+    tooltipPos = { x, y };
   }
 
   function onCellEnter(date: string, e: MouseEvent) {

From e8a5fbbabac288c2daacc6e727e9aa36debef98c Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 15:24:16 +0200
Subject: [PATCH 108/124] docs: add nginx gzip configuration for JSON
 compression
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Activity index shards compress ~90% with gzip (130 KB → 14 KB).
The default nginx.conf has gzip on but gzip_types commented out,
so JSON was served uncompressed.
---
 docs/deployment/vps.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/docs/deployment/vps.md b/docs/deployment/vps.md
index 02655f2..f4fbff8 100644
--- a/docs/deployment/vps.md
+++ b/docs/deployment/vps.md
@@ -293,6 +293,26 @@ ln -s /etc/nginx/sites-available/bincio /etc/nginx/sites-enabled/
 nginx -t && systemctl reload nginx
 ```
 
+### Enable gzip compression
+
+The default `nginx.conf` has gzip on but `gzip_types` commented out, so only
+HTML is compressed. Activity index shards are JSON and compress ~90% — enable
+the full list:
+
+```bash
+# In /etc/nginx/nginx.conf, uncomment the gzip block:
+gzip_vary on;
+gzip_proxied any;
+gzip_comp_level 6;
+gzip_buffers 16 8k;
+gzip_http_version 1.1;
+gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+```
+
+```bash
+nginx -t && systemctl reload nginx
+```
+
 You can verify the site is served correctly by hitting the IP directly:
 `http://<your-vps-ip>/` — you should see the bincio activity feed, not the nginx welcome page.
 

From db7047f210add742ec8ad0f156f48e9c807d0350 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 15:31:35 +0200
Subject: [PATCH 109/124] perf: combined feed index for multi-user global feed

Instead of the browser resolving 20+ user shards recursively (~27 MB),
generate a pre-sorted feed.json at merge time with 50 activities per
page. The global feed loads one ~30 KB file on first paint; "Load more"
fetches subsequent pages (feed-2.json, feed-3.json, etc.).

Per-user profile pages still use year-sharded loadIndexPaged as before.
---
 bincio/render/cli.py                    |  5 ++
 bincio/render/merge.py                  | 82 +++++++++++++++++++++++++
 site/src/components/ActivityFeed.svelte | 38 +++++++++---
 site/src/lib/dataloader.ts              | 43 +++++++++++++
 4 files changed, 160 insertions(+), 8 deletions(-)

diff --git a/bincio/render/cli.py b/bincio/render/cli.py
index de28527..b77917b 100644
--- a/bincio/render/cli.py
+++ b/bincio/render/cli.py
@@ -133,6 +133,11 @@ def _write_root_manifest(data: Path) -> None:
     root.write_text(json.dumps(manifest, indent=2))
     console.print(f"Root manifest updated: [cyan]{len(users)}[/cyan] user shard(s)")
 
+    if len(users) > 1:
+        from bincio.render.merge import write_combined_feed
+        n = write_combined_feed(data)
+        console.print(f"Combined feed: [cyan]{n}[/cyan] activities across all users")
+
 
 def _link_data(site: Path, data: Path) -> None:
     """Symlink site/public/data → data root (each user has their own _merged/)."""
diff --git a/bincio/render/merge.py b/bincio/render/merge.py
index bdc8fc6..86e57ec 100644
--- a/bincio/render/merge.py
+++ b/bincio/render/merge.py
@@ -320,3 +320,85 @@ def _write_year_shards(merged_dir: Path, activities: list[dict], index_meta: dic
         "activities": [],
     }
     (merged_dir / "index.json").write_text(json.dumps(root_doc, indent=2, ensure_ascii=False))
+
+
+FEED_PAGE_SIZE = 50
+
+# Extra fields stripped from the combined feed — preview_coords is the biggest
+# contributor (~24% of shard size) but the feed cards need it for thumbnails,
+# so we keep it.  mmp is never displayed in feed cards.
+_COMBINED_FEED_STRIP = _FEED_STRIP | {"mmp"}
+
+
+def write_combined_feed(data_dir: Path) -> int:
+    """Build data_dir/feed.json — the N most recent activities across all users.
+
+    The global feed page loads this single file instead of resolving 20+ user
+    shards recursively.  Returns the number of activities written.
+    """
+    user_dirs = sorted(
+        p for p in data_dir.iterdir()
+        if p.is_dir() and (p / "activities").exists()
+    )
+
+    all_activities: list[dict] = []
+    for user_dir in user_dirs:
+        handle = user_dir.name
+        merged = user_dir / "_merged"
+        index_path = merged / "index.json" if merged.exists() else user_dir / "index.json"
+        if not index_path.exists():
+            continue
+
+        index = json.loads(index_path.read_text(encoding="utf-8"))
+        shards = index.get("shards", [])
+        activities = index.get("activities", [])
+
+        if shards:
+            year_shards = sorted(
+                [s for s in shards if re.match(r"index-\d{4}\.json$", s.get("url", ""))],
+                key=lambda s: s["url"],
+                reverse=True,
+            )
+            base = index_path.parent
+            for shard in year_shards[:2]:
+                shard_path = base / shard["url"]
+                if shard_path.exists():
+                    shard_data = json.loads(shard_path.read_text(encoding="utf-8"))
+                    for a in shard_data.get("activities", []):
+                        a_tagged = {**a, "handle": handle}
+                        detail_url = a_tagged.get("detail_url", "")
+                        if detail_url and not detail_url.startswith("http") and not detail_url.startswith("/"):
+                            merged_rel = f"{handle}/_merged/" if merged.exists() else f"{handle}/"
+                            a_tagged["detail_url"] = merged_rel + detail_url
+                        track_url = a_tagged.get("track_url", "")
+                        if track_url and not track_url.startswith("http") and not track_url.startswith("/"):
+                            merged_rel = f"{handle}/_merged/" if merged.exists() else f"{handle}/"
+                            a_tagged["track_url"] = merged_rel + track_url
+                        all_activities.append(a_tagged)
+        else:
+            for a in activities:
+                all_activities.append({**a, "handle": handle})
+
+    all_activities.sort(key=lambda a: a.get("started_at", ""), reverse=True)
+
+    # Remove stale feed pages
+    for f in data_dir.glob("feed*.json"):
+        f.unlink()
+
+    if not all_activities:
+        return 0
+
+    pages = [all_activities[i:i + FEED_PAGE_SIZE] for i in range(0, len(all_activities), FEED_PAGE_SIZE)]
+    for page_num, page in enumerate(pages):
+        slim = [{k: v for k, v in a.items() if k not in _COMBINED_FEED_STRIP} for a in page]
+        fname = "feed.json" if page_num == 0 else f"feed-{page_num + 1}.json"
+        doc = {
+            "bas_version": "1.0",
+            "page": page_num + 1,
+            "total_pages": len(pages),
+            "total_activities": len(all_activities),
+            "activities": slim,
+        }
+        (data_dir / fname).write_text(json.dumps(doc, indent=2, ensure_ascii=False))
+
+    return len(all_activities)
diff --git a/site/src/components/ActivityFeed.svelte b/site/src/components/ActivityFeed.svelte
index f292dbf..ff6af52 100644
--- a/site/src/components/ActivityFeed.svelte
+++ b/site/src/components/ActivityFeed.svelte
@@ -2,7 +2,7 @@
   import { onMount } from 'svelte';
   import type { ActivitySummary, BASIndex, Sport } from '../lib/types';
   import { formatDistance, formatDuration, formatElevation, formatDate, isUnlisted, sportIcon, sportColor, sportLabel } from '../lib/format';
-  import { loadIndexPaged, loadShardActivities } from '../lib/dataloader';
+  import { loadIndexPaged, loadShardActivities, loadCombinedFeed, loadCombinedFeedPage } from '../lib/dataloader';
 
   /** Render preview_coords as an SVG polyline path string. */
   function trackPath(coords: [number, number][] | null, w: number, h: number): string {
@@ -45,6 +45,9 @@
   let error = '';
   let mounted = false;
   let pendingShards: string[] = [];
+  /** Remaining combined-feed pages (multi-user global feed). */
+  let feedNextPage = 0;
+  let feedTotalPages = 0;
   /** Logged-in handle — resolved async via bincio:me event. */
   let me: string = '';
 
@@ -61,20 +64,26 @@
   $: filtered = sport === 'all' ? withPrivacy : withPrivacy.filter(a => a.sport === sport);
   $: visible = filtered.slice(0, shown);
   $: canShowMore = shown < filtered.length;
-  $: hasMore = canShowMore || pendingShards.length > 0;
+  $: hasMore = canShowMore || pendingShards.length > 0 || feedNextPage > 0;
 
   async function loadMore() {
     if (canShowMore) {
       shown += PAGE_SIZE;
       return;
     }
-    if (!pendingShards.length) return;
     loadingMore = true;
-    const url = pendingShards[0];
-    pendingShards = pendingShards.slice(1);
     try {
-      const fresh = await loadShardActivities(url);
-      // Merge avoiding duplicates (IDB activities may already be present)
+      let fresh: ActivitySummary[] = [];
+      if (feedNextPage > 0) {
+        fresh = await loadCombinedFeedPage(base, feedNextPage);
+        feedNextPage = feedNextPage < feedTotalPages ? feedNextPage + 1 : 0;
+      } else if (pendingShards.length) {
+        const url = pendingShards[0];
+        pendingShards = pendingShards.slice(1);
+        fresh = await loadShardActivities(url);
+      } else {
+        return;
+      }
       const existing = new Map(all.map(a => [a.id, a]));
       for (const a of fresh) if (!existing.has(a.id)) existing.set(a.id, a);
       all = [...existing.values()].sort((a, b) =>
@@ -82,7 +91,7 @@
       );
       shown += PAGE_SIZE;
     } catch {
-      // shard load failed — don't block the user
+      // load failed — don't block the user
     } finally {
       loadingMore = false;
     }
@@ -109,6 +118,17 @@
     }
 
     try {
+      const isGlobalFeed = !profileIndexUrl && !filterHandle;
+      if (isGlobalFeed) {
+        const combined = await loadCombinedFeed(base);
+        if (combined) {
+          all = combined.activities;
+          feedTotalPages = combined.remainingPages + 1;
+          feedNextPage = combined.remainingPages > 0 ? 2 : 0;
+          loading = false;
+          return;
+        }
+      }
       const indexUrl = profileIndexUrl
         ? `${base}data/${profileIndexUrl}`
         : `${base}data/index.json`;
@@ -263,6 +283,8 @@
           Loading…
         {:else if canShowMore}
           Load more ({filtered.length - shown} remaining)
+        {:else if feedNextPage > 0}
+          Load more activities
         {:else}
           Load older activities ({pendingShards.length} more {pendingShards.length === 1 ? 'year' : 'years'})
         {/if}
diff --git a/site/src/lib/dataloader.ts b/site/src/lib/dataloader.ts
index b37b8fb..e2d7bdd 100644
--- a/site/src/lib/dataloader.ts
+++ b/site/src/lib/dataloader.ts
@@ -253,6 +253,49 @@ export async function loadShardActivities(shardUrl: string): Promise<ActivitySum
   }
 }
 
+interface FeedPage {
+  page: number;
+  total_pages: number;
+  total_activities: number;
+  activities: ActivitySummary[];
+}
+
+/**
+ * Load the combined feed (multi-user global feed). Returns the first page of
+ * activities pre-sorted across all users, plus remaining page count.
+ *
+ * Falls back to the full shard-resolution path if feed.json doesn't exist
+ * (single-user installs, older data).
+ */
+export async function loadCombinedFeed(
+  baseUrl: string,
+): Promise<{ activities: ActivitySummary[]; remainingPages: number } | null> {
+  try {
+    const feed = await fetchJSON<FeedPage>(`${baseUrl}data/feed.json`);
+    return {
+      activities: feed.activities ?? [],
+      remainingPages: (feed.total_pages ?? 1) - 1,
+    };
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Load a subsequent page of the combined feed (feed-2.json, feed-3.json, etc.).
+ */
+export async function loadCombinedFeedPage(
+  baseUrl: string,
+  page: number,
+): Promise<ActivitySummary[]> {
+  try {
+    const feed = await fetchJSON<FeedPage>(`${baseUrl}data/feed-${page}.json`);
+    return feed.activities ?? [];
+  } catch {
+    return [];
+  }
+}
+
 /**
  * Load a single activity detail, checking IndexedDB first so locally-converted
  * activities are available offline.

From 631e814d648ed49b3c60e7d6bb46b7523cbdd3db Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 16:14:40 +0200
Subject: [PATCH 110/124] fix: load all year shards into combined feed, not
 just top 2

---
 bincio/render/merge.py | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/bincio/render/merge.py b/bincio/render/merge.py
index 86e57ec..2386791 100644
--- a/bincio/render/merge.py
+++ b/bincio/render/merge.py
@@ -354,13 +354,9 @@ def write_combined_feed(data_dir: Path) -> int:
         activities = index.get("activities", [])
 
         if shards:
-            year_shards = sorted(
-                [s for s in shards if re.match(r"index-\d{4}\.json$", s.get("url", ""))],
-                key=lambda s: s["url"],
-                reverse=True,
-            )
+            year_shards = [s for s in shards if re.match(r"index-\d{4}\.json$", s.get("url", ""))]
             base = index_path.parent
-            for shard in year_shards[:2]:
+            for shard in year_shards:
                 shard_path = base / shard["url"]
                 if shard_path.exists():
                     shard_data = json.loads(shard_path.read_text(encoding="utf-8"))

From 104328bc50f449c82fbbc91a723164a2bc9f8459 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 17:06:56 +0200
Subject: [PATCH 111/124] fix: stable y-axis range and sane dist_km in activity
 charts
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Three bugs in the time↔distance x-axis toggle:

1. GPS speed glitches (e.g. a 1-second spike at 222 km/h) were accumulated
   into dist_km, pushing all subsequent points ~60 m too far right on the
   distance axis and compressing the rest of the chart.  Cap speed at 150 km/h
   during dist_km integration; values above that are treated as 0 movement.

2. Observable Plot auto-infers the y domain from plottable points only.
   When x-mode changes, which points are "plottable" changes too, so the
   y axis range silently shifted between time and distance views.  Fix by
   computing lineDomainMin/Max once from the full dataset and passing an
   explicit domain to Plot.

3. monotone-x curve requires strictly increasing x.  In distance mode,
   stopped segments produce consecutive points with identical dist_km,
   causing NaN Bézier control points and visual artifacts.  Use linear
   curve for distance mode (data is dense enough that it looks smooth).
---
 site/src/components/ActivityCharts.svelte | 34 ++++++++++++++++++-----
 1 file changed, 27 insertions(+), 7 deletions(-)

diff --git a/site/src/components/ActivityCharts.svelte b/site/src/components/ActivityCharts.svelte
index c23eef4..d7541ac 100644
--- a/site/src/components/ActivityCharts.svelte
+++ b/site/src/components/ActivityCharts.svelte
@@ -21,15 +21,20 @@
   let chartEl: HTMLDivElement;
   let chart: SVGElement | null = null;
 
-  // Cumulative distance in km, integrated from speed_kmh
+  // Cumulative distance in km, integrated from speed_kmh.
+  // Speeds > 150 km/h are treated as 0 (GPS glitch guard) — otherwise a single
+  // 1-second spike at 220 km/h pushes all subsequent points ~60 m too far right
+  // on the distance axis and stretches the chart out of proportion.
   $: dist_km = (() => {
     if (!timeseries.speed_kmh.some(v => v != null)) return null;
-    const d: (number | null)[] = [0];
+    const d: number[] = [0];
     for (let i = 1; i < timeseries.t.length; i++) {
       const v = timeseries.speed_kmh[i];
       const dt = timeseries.t[i] - timeseries.t[i - 1];
       const prev = d[i - 1];
-      d.push(v != null && prev != null ? prev + v * dt / 3600 : prev);
+      // Clamp to 150 km/h; treat null or out-of-range as 0 movement
+      const vSafe = (v != null && v > 0 && v <= 150) ? v : 0;
+      d.push(prev + vSafe * dt / 3600);
     }
     return d;
   })();
@@ -79,6 +84,15 @@
   $: dataMin = metricValues.length ? Math.min(...metricValues) : 0;
   $: dataMax = metricValues.length ? Math.max(...metricValues) : 100;
 
+  // Explicit y domain for the line chart.
+  // We compute this once from all data and pass it explicitly to Plot so that
+  // switching x-axis mode (time ↔ distance) never changes the y range — Observable
+  // Plot auto-infers different domains when the x-channel changes because it only
+  // considers plottable points, but we want the scale to stay anchored to the
+  // full dataset.  areaY extends down to 0, so include 0 in the minimum.
+  $: lineDomainMin = Math.min(0, dataMin);
+  $: lineDomainMax = dataMax;
+
   // Range handles — reset whenever the metric or chart type changes
   let trimMin = 0;
   let trimMax = 100;
@@ -183,12 +197,18 @@
     const tc = getThemeColors();
     const marks: any[] = [];
 
+    // monotone-x requires strictly increasing x. In time mode t is always
+    // strictly increasing. In distance mode, stopped segments produce many
+    // consecutive points with identical dist_km, which causes NaN Bézier
+    // control points and visual artifacts — use linear instead.
+    const curve = xMode === 'distance' ? 'linear' : 'monotone-x';
+
     if (activeTab === 'cadence') {
-      marks.push(Plot.lineY(data, { x, y: yKey, stroke: color, strokeWidth: 1.5, curve: 'monotone-x' }));
+      marks.push(Plot.lineY(data, { x, y: yKey, stroke: color, strokeWidth: 1.5, curve }));
     } else {
       marks.push(
-        Plot.areaY(data, { x, y: yKey, fill: color, fillOpacity: 0.15, curve: 'monotone-x' }),
-        Plot.lineY(data, { x, y: yKey, stroke: color, strokeWidth: 1.5, curve: 'monotone-x' }),
+        Plot.areaY(data, { x, y: yKey, fill: color, fillOpacity: 0.15, curve }),
+        Plot.lineY(data, { x, y: yKey, stroke: color, strokeWidth: 1.5, curve }),
       );
     }
 
@@ -216,7 +236,7 @@
       width: w, height: h, marginLeft: 48, marginBottom: 32,
       style: { background: 'transparent', color: tc.axis, fontSize: '11px' },
       x: { label: null, tickFormat: xTickFormat, grid: false, ticks: 6 },
-      y: { label: yLabel, grid: true, tickCount: 4 },
+      y: { label: yLabel, grid: true, tickCount: 4, domain: [lineDomainMin, lineDomainMax] },
       marks,
     });
   }

From 6491e4fd8cf0081fdacccf560db3644ca981657c Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 17:12:50 +0200
Subject: [PATCH 112/124] fix: show total activity count in global feed counter

The counter now shows "50 of 16398 activities" using the total from
feed.json, matching the previous behaviour where all activities were
loaded upfront.
---
 site/src/components/ActivityFeed.svelte | 9 ++++++++-
 site/src/lib/dataloader.ts              | 3 ++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/site/src/components/ActivityFeed.svelte b/site/src/components/ActivityFeed.svelte
index ff6af52..77f4e56 100644
--- a/site/src/components/ActivityFeed.svelte
+++ b/site/src/components/ActivityFeed.svelte
@@ -48,6 +48,8 @@
   /** Remaining combined-feed pages (multi-user global feed). */
   let feedNextPage = 0;
   let feedTotalPages = 0;
+  /** Grand total from feed.json — shows instance-wide count even before all pages are loaded. */
+  let totalActivities = 0;
   /** Logged-in handle — resolved async via bincio:me event. */
   let me: string = '';
 
@@ -123,6 +125,7 @@
         const combined = await loadCombinedFeed(base);
         if (combined) {
           all = combined.activities;
+          totalActivities = combined.totalActivities;
           feedTotalPages = combined.remainingPages + 1;
           feedNextPage = combined.remainingPages > 0 ? 2 : 0;
           loading = false;
@@ -175,7 +178,11 @@
   {/each}
   {#if all.length > 0}
     <span class="ml-auto text-sm text-zinc-500 self-center">
-      {filtered.length} {filtered.length === 1 ? 'activity' : 'activities'}
+      {#if totalActivities > filtered.length}
+        {filtered.length} of {totalActivities} activities
+      {:else}
+        {filtered.length} {filtered.length === 1 ? 'activity' : 'activities'}
+      {/if}
     </span>
   {/if}
 </div>
diff --git a/site/src/lib/dataloader.ts b/site/src/lib/dataloader.ts
index e2d7bdd..c1da75e 100644
--- a/site/src/lib/dataloader.ts
+++ b/site/src/lib/dataloader.ts
@@ -269,12 +269,13 @@ interface FeedPage {
  */
 export async function loadCombinedFeed(
   baseUrl: string,
-): Promise<{ activities: ActivitySummary[]; remainingPages: number } | null> {
+): Promise<{ activities: ActivitySummary[]; remainingPages: number; totalActivities: number } | null> {
   try {
     const feed = await fetchJSON<FeedPage>(`${baseUrl}data/feed.json`);
     return {
       activities: feed.activities ?? [],
       remainingPages: (feed.total_pages ?? 1) - 1,
+      totalActivities: feed.total_activities ?? 0,
     };
   } catch {
     return null;

From 696f538f565012186370bdd0cc07f74e722fb475 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 20:23:06 +0200
Subject: [PATCH 113/124] ci: add fastapi/bcrypt to dev dependency group so all
 tests pass

test_db.py and test_server_imports.py import bincio.serve.server and
bincio.serve.db which require fastapi and bcrypt. These were only in the
optional 'serve' extra so the default dev env was missing them, causing
4 test failures and 1 collection error in CI.
---
 pyproject.toml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index e251829..1cc7e61 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -72,6 +72,11 @@ dev = [
     "types-pyyaml",
     "types-jsonschema",
     "mkdocs-material>=9.5",
+    # serve/edit extras pulled in so test_db.py and test_server_imports.py pass in CI
+    "fastapi>=0.110",
+    "uvicorn[standard]>=0.29",
+    "python-multipart>=0.0.9",
+    "bcrypt>=4.1",
 ]
 
 [tool.ruff]

From 872651f4714b4754992beb75c8d528cc7b0da263 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 20:29:20 +0200
Subject: [PATCH 114/124] metrics: replace naive elevation accumulation with
 hysteresis dead-band
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GPS jitter and barometric quantization noise caused systematic overestimation
of elevation gain — in extreme cases 100% of reported gain was sub-1m noise.

Implements source-aware hysteresis: elevation is only committed when it
deviates from the last committed value by ≥5m (barometric) or ≥10m (GPS/GPX/TCX).

- ParsedActivity gains `altitude_source` field ("barometric"/"gps"/"unknown")
- FIT parser sets "barometric" when enhanced_altitude is present, else "gps"
- GPX and TCX parsers always set "gps"
- metrics._elevation() uses the threshold matching the source
- 5 new parametric tests covering flat GPS noise, threshold differences, and real climbs
---
 bincio/extract/metrics.py     | 39 +++++++++++++++----
 bincio/extract/models.py      |  4 ++
 bincio/extract/parsers/fit.py |  9 ++++-
 bincio/extract/parsers/gpx.py |  1 +
 bincio/extract/parsers/tcx.py |  1 +
 tests/test_metrics.py         | 72 +++++++++++++++++++++++++++++++++++
 6 files changed, 117 insertions(+), 9 deletions(-)

diff --git a/bincio/extract/metrics.py b/bincio/extract/metrics.py
index d5bb97a..cc0072a 100644
--- a/bincio/extract/metrics.py
+++ b/bincio/extract/metrics.py
@@ -70,7 +70,7 @@ def compute(activity: ParsedActivity) -> ComputedMetrics:
 
     duration_s = _duration(pts)
     distance_m, moving_time_s, avg_speed_kmh, max_speed_kmh = _gps_stats(pts)
-    gain, loss = _elevation(pts)
+    gain, loss = _elevation(pts, activity.altitude_source)
     avg_hr, max_hr = _hr_stats(pts)
     avg_cad = _avg_nonnull([p.cadence_rpm for p in pts])
     avg_pow = _avg_nonnull([p.power_w for p in pts])
@@ -347,17 +347,40 @@ def _duration(pts: list[DataPoint]) -> Optional[int]:
     return int((pts[-1].timestamp - pts[0].timestamp).total_seconds())
 
 
-def _elevation(pts: list[DataPoint]) -> tuple[Optional[float], Optional[float]]:
+# Hysteresis thresholds per altitude source.
+# Only commit a new elevation when it differs from the last committed value by
+# at least this amount, filtering out GPS noise and barometric quantization steps.
+_ELEVATION_THRESHOLD: dict[str, float] = {
+    "barometric": 5.0,   # barometric altimeter: smaller steps are real
+    "gps":        10.0,  # GPS altitude: noisier, needs wider dead-band
+    "unknown":    10.0,  # treat unknown as GPS to be conservative
+}
+
+
+def _elevation(
+    pts: list[DataPoint],
+    altitude_source: str = "unknown",
+) -> tuple[Optional[float], Optional[float]]:
+    """Hysteresis-based elevation accumulation.
+
+    Only commits a new elevation when it differs from the last committed value
+    by at least the source-specific threshold, filtering GPS jitter and
+    barometric quantization noise that would otherwise inflate the gain figure.
+    """
     elevations = [p.elevation_m for p in pts if p.elevation_m is not None]
     if len(elevations) < 2:
         return None, None
+    threshold = _ELEVATION_THRESHOLD.get(altitude_source, 10.0)
     gain = loss = 0.0
-    for a, b in zip(elevations, elevations[1:]):
-        diff = b - a
-        if diff > 0:
-            gain += diff
-        else:
-            loss += diff
+    committed = elevations[0]
+    for e in elevations[1:]:
+        diff = e - committed
+        if abs(diff) >= threshold:
+            if diff > 0:
+                gain += diff
+            else:
+                loss += diff
+            committed = e
     return gain, loss
 
 
diff --git a/bincio/extract/models.py b/bincio/extract/models.py
index b5821b0..8ea3004 100644
--- a/bincio/extract/models.py
+++ b/bincio/extract/models.py
@@ -57,3 +57,7 @@ class ParsedActivity:
     strava_id: Optional[str] = None
     privacy: Optional[str] = None   # "public", "private", or None (caller decides)
     laps: list[LapData] = field(default_factory=list)
+    # "barometric" = device has a barometric altimeter (FIT enhanced_altitude present)
+    # "gps"        = altitude derived from GPS triangulation (GPX, TCX, FIT altitude-only)
+    # "unknown"    = source not detected (treated as gps for threshold purposes)
+    altitude_source: str = "unknown"
diff --git a/bincio/extract/parsers/fit.py b/bincio/extract/parsers/fit.py
index 438fa21..c723d4a 100644
--- a/bincio/extract/parsers/fit.py
+++ b/bincio/extract/parsers/fit.py
@@ -20,6 +20,8 @@ class FitParser:
         sub_sport: str | None = None
         device: str | None = None
 
+        has_baro_alt = False  # True if any record used enhanced_altitude
+
         with fitdecode.FitReader(io.BytesIO(raw_bytes)) as fit:
             for frame in fit:
                 if not isinstance(frame, fitdecode.FitDataMessage):
@@ -60,7 +62,9 @@ class FitParser:
                     # enhanced_altitude is written by barometric altimeters (most
                     # modern Garmins). Fall back to GPS-derived altitude if absent.
                     _alt = _get(frame, "enhanced_altitude")
-                    if _alt is None:
+                    if _alt is not None:
+                        has_baro_alt = True
+                    else:
                         _alt = _get(frame, "altitude")
 
                     dp = DataPoint(
@@ -100,6 +104,8 @@ class FitParser:
         if not points:
             raise ValueError(f"No record messages found in {path.name}")
 
+        altitude_source = "barometric" if has_baro_alt else "gps"
+
         return ParsedActivity(
             points=points,
             sport=sport,
@@ -109,6 +115,7 @@ class FitParser:
             laps=laps,
             source_file=path.name,
             source_hash="",
+            altitude_source=altitude_source,
         )
 
 
diff --git a/bincio/extract/parsers/gpx.py b/bincio/extract/parsers/gpx.py
index 9208e87..e17449c 100644
--- a/bincio/extract/parsers/gpx.py
+++ b/bincio/extract/parsers/gpx.py
@@ -53,6 +53,7 @@ class GpxParser(BaseParser):
             started_at=started_at,
             source_file=path.name,
             source_hash="",  # set by factory
+            altitude_source="gps",
         )
 
 
diff --git a/bincio/extract/parsers/tcx.py b/bincio/extract/parsers/tcx.py
index 5d52c2e..1c60f2b 100644
--- a/bincio/extract/parsers/tcx.py
+++ b/bincio/extract/parsers/tcx.py
@@ -83,6 +83,7 @@ class TcxParser:
             started_at=points[0].timestamp,
             source_file=path.name,
             source_hash="",
+            altitude_source="gps",
         )
 
 
diff --git a/tests/test_metrics.py b/tests/test_metrics.py
index 7393679..0a184bd 100644
--- a/tests/test_metrics.py
+++ b/tests/test_metrics.py
@@ -8,6 +8,7 @@ import pytest
 from bincio.extract.metrics import (
     MMP_DURATIONS_S,
     _best_climb,
+    _elevation,
     _fastest_time_for_distance,
     _haversine_m,
     compute,
@@ -126,6 +127,77 @@ def test_compute_no_elevation():
     assert m.elevation_loss_m is None
 
 
+# ── elevation hysteresis ──────────────────────────────────────────────────────
+
+def _ele_pts(elevations: list[float]) -> list[DataPoint]:
+    return [_pt(i, elevation_m=e) for i, e in enumerate(elevations)]
+
+
+def test_elevation_hysteresis_large_step_always_counted():
+    # A single 50m step is way above any threshold — both sources should count it.
+    pts = _ele_pts([100.0, 150.0])
+    gain_baro, _ = _elevation(pts, "barometric")
+    gain_gps,  _ = _elevation(pts, "gps")
+    assert gain_baro == 50.0
+    assert gain_gps  == 50.0
+
+
+def test_elevation_hysteresis_flat_gps_noise_suppressed():
+    # Flat coastal route: 16m of GPS noise oscillating within ±8m.
+    # All steps are sub-1m — hysteresis should return ~0 gain.
+    import math
+    n = 1000
+    elevations = [100.0 + 3.0 * math.sin(i * 0.1) for i in range(n)]
+    pts = _ele_pts(elevations)
+    gain, loss = _elevation(pts, "gps")
+    # With threshold=10m no oscillation within ±3m should ever commit.
+    assert gain == 0.0
+    assert loss == 0.0
+
+
+def test_elevation_hysteresis_barometric_threshold_lower():
+    # Steps of exactly 7m — above barometric (5m) but below GPS (10m) threshold.
+    elevations = [0.0, 7.0, 0.0, 7.0]
+    pts = _ele_pts(elevations)
+    gain_baro, _ = _elevation(pts, "barometric")
+    gain_gps,  _ = _elevation(pts, "gps")
+    assert gain_baro == 14.0   # both 7m steps committed
+    assert gain_gps  == 0.0    # 7m < 10m threshold → suppressed
+
+
+def test_elevation_hysteresis_real_climb_approximated():
+    # Simulate a 200m climb with 0.2m barometric quantization noise.
+    # Build a staircase: 1000 steps, mostly 0.2m up/down noise, with a 200m net climb.
+    import random
+    random.seed(42)
+    elevations = [0.0]
+    for i in range(999):
+        # Mostly quantization noise, but drift upward at 0.2 m/step net
+        step = random.choice([-0.2, 0.0, 0.0, 0.2, 0.2, 0.4])
+        elevations.append(elevations[-1] + step)
+
+    # Force net gain ~200m by scaling
+    scale = 200.0 / (elevations[-1] - elevations[0]) if elevations[-1] != elevations[0] else 1
+    elevations = [e * scale for e in elevations]
+
+    pts = _ele_pts(elevations)
+    gain, _ = _elevation(pts, "barometric")
+    # Hysteresis should produce substantially less than naive accumulation
+    # and land reasonably close to the 200m net climb.
+    assert gain is not None
+    assert gain < 500.0   # not inflated like naive sum
+    assert gain > 100.0   # not zero either — real climbing exists
+
+
+def test_elevation_hysteresis_unknown_treated_as_gps():
+    # "unknown" should apply the same 10m threshold as "gps"
+    elevations = [0.0, 7.0, 0.0, 7.0]  # 7m steps
+    pts = _ele_pts(elevations)
+    gain_unknown, _ = _elevation(pts, "unknown")
+    gain_gps,     _ = _elevation(pts, "gps")
+    assert gain_unknown == gain_gps
+
+
 def test_compute_hr_stats():
     pts = [
         _pt(0,  lat=48.0, lon=11.0, hr_bpm=120),

From 1940e2409b8501e4b2aaa6958efb8e50ab003dcb Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 20:45:06 +0200
Subject: [PATCH 115/124] feat: DEM-based elevation recalculation via edit
 drawer button
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adds a "Recalculate from terrain map (DEM)" button to the activity edit
drawer. On click it queries an Open-Elevation-compatible API to replace
GPS altitude with SRTM terrain data, applies 5m hysteresis, and updates
the activity's elevation stats and timeseries chart in place.

- bincio/extract/dem.py: lookup_elevations() (batched HTTP POST) +
  recalculate_elevation() (subsample → DEM → interpolate → hysteresis →
  patch activity JSON, timeseries JSON, index.json)
- POST /api/activity/{id}/recalculate-elevation on both serve and edit
  servers; serve endpoint is auth-gated and triggers merge + rebuild
- --dem-url flag (also DEM_URL env var) on bincio serve and bincio edit;
  logged at startup; missing URL returns a clear 503 with setup instructions
- /api/me response gains dem_configured bool
- EditDrawer: button with loading state, shows new ↑/↓ values on success
---
 bincio/edit/cli.py                    |   8 +
 bincio/edit/server.py                 |  27 ++++
 bincio/extract/dem.py                 | 221 ++++++++++++++++++++++++++
 bincio/serve/cli.py                   |   7 +-
 bincio/serve/server.py                |  35 ++++
 site/src/components/EditDrawer.svelte |  43 +++++
 6 files changed, 340 insertions(+), 1 deletion(-)
 create mode 100644 bincio/extract/dem.py

diff --git a/bincio/edit/cli.py b/bincio/edit/cli.py
index afe0d62..8aec131 100644
--- a/bincio/edit/cli.py
+++ b/bincio/edit/cli.py
@@ -24,6 +24,8 @@ console = Console()
               help="Strava API client ID (enables Strava sync in the UI). Also reads STRAVA_CLIENT_ID env var.")
 @click.option("--strava-client-secret", default=None, envvar="STRAVA_CLIENT_SECRET",
               help="Strava API client secret. Also reads STRAVA_CLIENT_SECRET env var.")
+@click.option("--dem-url", default=None, envvar="DEM_URL",
+              help="Base URL of an Open-Elevation-compatible API (enables 'Recalculate elevation' button).")
 def edit(
     data_dir: Optional[str],
     port: int,
@@ -31,6 +33,7 @@ def edit(
     config_path: Optional[str],
     strava_client_id: Optional[str],
     strava_client_secret: Optional[str],
+    dem_url: Optional[str],
 ) -> None:
     """Start a local web UI for editing activity sidecar files.
 
@@ -69,11 +72,16 @@ def edit(
     srv.site_url = site_url
     srv.strava_client_id = strava_client_id or ""
     srv.strava_client_secret = strava_client_secret or ""
+    srv.dem_url = dem_url or ""
 
     if strava_client_id:
         console.print(f"Strava sync: [green]enabled[/green] (client {strava_client_id})")
     else:
         console.print("Strava sync: [yellow]disabled[/yellow] (pass --strava-client-id to enable)")
+    if dem_url:
+        console.print(f"DEM:         [green]enabled[/green] ({dem_url})")
+    else:
+        console.print("DEM:         [yellow]disabled[/yellow] (pass --dem-url to enable elevation recalculation)")
 
     uvicorn.run(srv.app, host="127.0.0.1", port=port, log_level="warning")
 
diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 167fbf3..648a4a3 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -20,6 +20,7 @@ data_dir: Path | None = None
 site_url: str = "http://localhost:4321"
 strava_client_id: str = ""
 strava_client_secret: str = ""
+dem_url: str = ""   # Open-Elevation-compatible API base URL; empty = feature disabled
 
 # In-memory CSRF state tokens for OAuth flows (token → True); cleared after use
 _oauth_states: set[str] = set()
@@ -427,6 +428,32 @@ async def save_activity(activity_id: str, payload: dict[str, Any]) -> JSONRespon
     return JSONResponse({"ok": True, "sidecar": str(sidecar_path)})
 
 
+@app.post("/api/activity/{activity_id}/recalculate-elevation")
+async def recalculate_elevation_endpoint(activity_id: str) -> JSONResponse:
+    """Replace GPS altitude with DEM terrain elevation and recompute gain/loss.
+
+    Requires --dem-url to be set when starting bincio edit.
+    """
+    if not dem_url:
+        raise HTTPException(
+            503,
+            "DEM URL not configured. "
+            "Pass --dem-url <api-url> to bincio edit (e.g. https://api.open-elevation.com).",
+        )
+    dd = _get_data_dir()
+    _check_id(activity_id)
+    try:
+        from bincio.extract.dem import recalculate_elevation
+        from bincio.render.merge import merge_one
+        result = recalculate_elevation(dd, activity_id, dem_url)
+        merge_one(dd, activity_id)
+        return JSONResponse(result)
+    except FileNotFoundError as e:
+        raise HTTPException(404, str(e))
+    except ValueError as e:
+        raise HTTPException(422, str(e))
+
+
 @app.post("/api/activity/{activity_id}/images")
 async def upload_image(activity_id: str, file: UploadFile = File(...)) -> JSONResponse:
     dd = _get_data_dir()
diff --git a/bincio/extract/dem.py b/bincio/extract/dem.py
new file mode 100644
index 0000000..8a1c846
--- /dev/null
+++ b/bincio/extract/dem.py
@@ -0,0 +1,221 @@
+"""DEM (Digital Elevation Model) lookup and elevation recalculation.
+
+Queries any Open-Elevation-compatible HTTP API to replace noisy GPS altitude
+with terrain altitude, then re-applies hysteresis-based accumulation.
+
+Compatible APIs:
+  - https://api.open-elevation.com          (free, SRTM, accepts large batches)
+  - https://api.opentopodata.org/v1/srtm30m  (more reliable, max 100 pts/req)
+
+Pass the base URL (without path) to bincio serve/edit via --dem-url.
+"""
+
+from __future__ import annotations
+
+import json
+import urllib.error
+import urllib.request
+from pathlib import Path
+from typing import Optional
+
+# Sample one GPS point per N seconds when building the DEM query.
+# SRTM30 resolution is ~30 m; at 30 km/h cycling that's ~3 s per tile —
+# sampling every 10 s is more than enough.
+_DEFAULT_SAMPLE_INTERVAL_S = 10
+
+# Maximum locations per API request.  Open-Elevation supports ~512 per POST.
+_DEFAULT_BATCH_SIZE = 512
+
+# Hysteresis threshold after DEM correction.  DEM data is already smooth
+# (30 m horizontal resolution) so 5 m is a generous dead-band.
+_DEM_HYSTERESIS_M = 5.0
+
+
+def lookup_elevations(
+    latlons: list[tuple[float, float]],
+    api_url: str,
+    batch_size: int = _DEFAULT_BATCH_SIZE,
+    timeout_s: int = 30,
+) -> list[Optional[float]]:
+    """Query a DEM API for terrain elevation at the given (lat, lon) pairs.
+
+    Uses the Open-Elevation API format::
+
+        POST {api_url}/api/v1/lookup
+        {"locations": [{"latitude": lat, "longitude": lon}, ...]}
+
+    Returns a list the same length as *latlons*.  Elements are ``None``
+    wherever the API returned no data (network error, ocean, etc.).
+    """
+    if not latlons:
+        return []
+
+    results: list[Optional[float]] = [None] * len(latlons)
+    url = f"{api_url.rstrip('/')}/api/v1/lookup"
+
+    for start in range(0, len(latlons), batch_size):
+        batch = latlons[start : start + batch_size]
+        payload = json.dumps(
+            {"locations": [{"latitude": lat, "longitude": lon} for lat, lon in batch]}
+        ).encode("utf-8")
+        req = urllib.request.Request(
+            url,
+            data=payload,
+            headers={"Content-Type": "application/json", "Accept": "application/json"},
+            method="POST",
+        )
+        try:
+            with urllib.request.urlopen(req, timeout=timeout_s) as resp:
+                data = json.loads(resp.read().decode("utf-8"))
+            for i, item in enumerate(data.get("results", [])):
+                elev = item.get("elevation")
+                if elev is not None:
+                    results[start + i] = float(elev)
+        except (urllib.error.URLError, json.JSONDecodeError, KeyError, ValueError):
+            pass  # leave this batch as None; caller checks overall coverage
+
+    return results
+
+
+def recalculate_elevation(
+    user_dir: Path,
+    activity_id: str,
+    dem_url: str,
+    sample_interval_s: int = _DEFAULT_SAMPLE_INTERVAL_S,
+) -> dict:
+    """Replace GPS elevation with DEM terrain elevation and recompute gain/loss.
+
+    Algorithm
+    ---------
+    1. Read the activity's 1 Hz timeseries for lat / lon / t arrays.
+    2. Subsample GPS points every *sample_interval_s* seconds.
+    3. Query the DEM API for those points (batched).
+    4. Linearly interpolate DEM elevation back to every GPS-valid second.
+    5. Apply :data:`_DEM_HYSTERESIS_M` hysteresis to compute gain / loss.
+    6. Write the updated ``elevation_m`` array to the timeseries JSON.
+    7. Patch ``elevation_gain_m`` / ``elevation_loss_m`` in the detail JSON.
+    8. Patch ``elevation_gain_m`` in ``index.json`` (summary entry for the feed).
+
+    Returns
+    -------
+    dict with keys ``elevation_gain_m``, ``elevation_loss_m``,
+    ``points_queried`` (DEM responses received).
+
+    Raises
+    ------
+    FileNotFoundError
+        Activity detail or timeseries file not found.
+    ValueError
+        Activity has no GPS coordinates, or the DEM API returned too few results.
+    """
+    acts_dir = user_dir / "activities"
+    json_path = acts_dir / f"{activity_id}.json"
+    ts_path   = acts_dir / f"{activity_id}.timeseries.json"
+
+    if not json_path.exists():
+        raise FileNotFoundError(f"Activity not found: {activity_id}")
+    if not ts_path.exists():
+        raise ValueError("Activity has no timeseries data")
+
+    ts      = json.loads(ts_path.read_text(encoding="utf-8"))
+    lat_arr: list[Optional[float]] = ts.get("lat") or []
+    lon_arr: list[Optional[float]] = ts.get("lon") or []
+    t_arr:   list[int]             = ts.get("t") or []
+
+    if not lat_arr or not lon_arr:
+        raise ValueError(
+            "Activity has no GPS coordinates "
+            "(privacy=no_gps or data recorded without GPS)"
+        )
+
+    n = len(t_arr)
+
+    # ── 1. Subsample GPS-valid indices ────────────────────────────────────────
+    gps_idx = [
+        i for i in range(n)
+        if lat_arr[i] is not None and lon_arr[i] is not None
+    ]
+    if len(gps_idx) < 2:
+        raise ValueError("Too few GPS points for DEM lookup")
+
+    sampled_idx = gps_idx[::sample_interval_s]
+    if gps_idx[-1] not in sampled_idx:
+        sampled_idx.append(gps_idx[-1])  # always include the last point
+
+    # ── 2. Query DEM ──────────────────────────────────────────────────────────
+    latlons = [(float(lat_arr[i]), float(lon_arr[i])) for i in sampled_idx]  # type: ignore[arg-type]
+    dem_elev = lookup_elevations(latlons, dem_url)
+
+    # Build (t, elevation) pairs for valid DEM responses only
+    valid_pairs: list[tuple[int, float]] = [
+        (t_arr[sampled_idx[k]], dem_elev[k])
+        for k in range(len(sampled_idx))
+        if dem_elev[k] is not None
+    ]
+    n_queried = len(valid_pairs)
+    if n_queried < 2:
+        raise ValueError(
+            f"DEM API returned too few results "
+            f"({n_queried} of {len(sampled_idx)} points). "
+            f"Check the DEM URL: {dem_url}"
+        )
+
+    # ── 3. Linear interpolation → full 1 Hz series ───────────────────────────
+    new_ele: list[Optional[float]] = [None] * n
+    j = 0
+    for i in gps_idx:
+        t = t_arr[i]
+        # Advance j so valid_pairs[j] is the left anchor for t
+        while j + 1 < len(valid_pairs) - 1 and valid_pairs[j + 1][0] <= t:
+            j += 1
+        t0, e0 = valid_pairs[j]
+        if j + 1 < len(valid_pairs):
+            t1, e1 = valid_pairs[j + 1]
+            frac = max(0.0, min(1.0, (t - t0) / (t1 - t0))) if t1 > t0 else 0.0
+            new_ele[i] = round(e0 + frac * (e1 - e0), 1)
+        else:
+            new_ele[i] = round(e0, 1)
+
+    # ── 4. Hysteresis accumulation ────────────────────────────────────────────
+    valid_eles = [e for e in new_ele if e is not None]
+    gain = loss = 0.0
+    committed = valid_eles[0]
+    for e in valid_eles[1:]:
+        diff = e - committed
+        if abs(diff) >= _DEM_HYSTERESIS_M:
+            if diff > 0:
+                gain += diff
+            else:
+                loss += diff
+            committed = e
+
+    gain_r = round(gain, 1)
+    loss_r = round(abs(loss), 1)
+
+    # ── 5. Write timeseries ───────────────────────────────────────────────────
+    ts["elevation_m"] = new_ele
+    ts_path.write_text(json.dumps(ts, indent=2, ensure_ascii=False), encoding="utf-8")
+
+    # ── 6. Patch activity detail JSON ─────────────────────────────────────────
+    detail = json.loads(json_path.read_text(encoding="utf-8"))
+    detail["elevation_gain_m"] = gain_r
+    detail["elevation_loss_m"] = loss_r
+    json_path.write_text(json.dumps(detail, indent=2, ensure_ascii=False), encoding="utf-8")
+
+    # ── 7. Patch index.json summary (so merge_all picks up the new value) ─────
+    index_path = user_dir / "index.json"
+    if index_path.exists():
+        index = json.loads(index_path.read_text(encoding="utf-8"))
+        for s in index.get("activities", []):
+            if s.get("id") == activity_id:
+                s["elevation_gain_m"] = gain_r
+                break
+        index_path.write_text(
+            json.dumps(index, indent=2, ensure_ascii=False), encoding="utf-8"
+        )
+
+    return {
+        "elevation_gain_m": gain_r,
+        "elevation_loss_m": loss_r,
+        "points_queried": n_queried,
+    }
diff --git a/bincio/serve/cli.py b/bincio/serve/cli.py
index 81b3c18..2cbf9f6 100644
--- a/bincio/serve/cli.py
+++ b/bincio/serve/cli.py
@@ -21,10 +21,11 @@ console = Console()
 @click.option("--max-users", default=None, type=int, help="Override max users for this instance (0 = unlimited; updates the DB setting)")
 @click.option("--public-url", default=None, envvar="PUBLIC_URL", help="Public base URL (e.g. https://yourdomain.com). Required for Strava OAuth to work behind a reverse proxy.")
 @click.option("--webroot", default=None, type=click.Path(), help="Nginx webroot (e.g. /var/www/bincio). When set, uploads trigger a full Astro build + rsync so new activity pages are immediately accessible without a git push.")
+@click.option("--dem-url", default=None, envvar="DEM_URL", help="Base URL of an Open-Elevation-compatible API (enables 'Recalculate elevation' button in the edit drawer).")
 def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
           strava_client_id: Optional[str], strava_client_secret: Optional[str],
           max_users: Optional[int], public_url: Optional[str],
-          webroot: Optional[str]) -> None:
+          webroot: Optional[str], dem_url: Optional[str]) -> None:
     """Start the bincio multi-user application server.
 
     Handles auth, user management, and write operations.
@@ -58,6 +59,8 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
         srv.public_url = public_url
     if webroot and site_dir:
         srv.webroot = Path(webroot).expanduser().resolve()
+    if dem_url:
+        srv.dem_url = dem_url
 
     db = open_db(dd)
     current_limit = get_setting(db, "max_users")
@@ -74,6 +77,8 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
         console.print(f"  Users: [yellow]max {current_limit}[/yellow]")
     else:
         console.print(f"  Users: [dim]unlimited[/dim]")
+    if dem_url:
+        console.print(f"  DEM:   [cyan]{dem_url}[/cyan]")
     console.print()
 
     log_config = uvicorn.config.LOGGING_CONFIG.copy()
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 51e5104..5b57f4d 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -158,6 +158,7 @@ webroot: Path | None = None    # nginx webroot — when set, trigger full rebuil
 strava_client_id: str = ""
 strava_client_secret: str = ""
 public_url: str = ""   # e.g. "https://yourdomain.com" — used for OAuth redirect URIs
+dem_url: str = ""      # Open-Elevation-compatible API base URL; empty = feature disabled
 _db = None  # sqlite3.Connection, opened lazily
 
 
@@ -404,6 +405,7 @@ async def me(bincio_session: Optional[str] = Cookie(default=None)) -> JSONRespon
         "display_name": user.display_name,
         "is_admin": user.is_admin,
         "store_originals_default": store_orig != "false",
+        "dem_configured": bool(dem_url),
     })
 
 
@@ -1265,6 +1267,39 @@ async def post_activity(
     return JSONResponse({"ok": True})
 
 
+@app.post("/api/activity/{activity_id}/recalculate-elevation")
+async def recalculate_elevation_endpoint(
+    activity_id: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Replace GPS altitude with DEM terrain elevation and recompute gain/loss.
+
+    Requires --dem-url to be set when starting bincio serve.
+    """
+    user = _require_user(bincio_session)
+    _check_id(activity_id)
+    if not dem_url:
+        raise HTTPException(
+            503,
+            "DEM URL not configured. "
+            "Pass --dem-url <api-url> to bincio serve (e.g. https://api.open-elevation.com).",
+        )
+    dd = _get_data_dir() / user.handle
+    if not (dd / "activities" / f"{activity_id}.json").exists():
+        raise HTTPException(404, "Activity not found")
+    try:
+        from bincio.extract.dem import recalculate_elevation
+        from bincio.render.merge import merge_one
+        result = recalculate_elevation(dd, activity_id, dem_url)
+        merge_one(dd, activity_id)
+        _trigger_rebuild(user.handle)
+        return JSONResponse(result)
+    except FileNotFoundError as e:
+        raise HTTPException(404, str(e))
+    except ValueError as e:
+        raise HTTPException(422, str(e))
+
+
 @app.delete("/api/activity/{activity_id}", response_model=GenericResponse)
 async def delete_activity(
     activity_id: str,
diff --git a/site/src/components/EditDrawer.svelte b/site/src/components/EditDrawer.svelte
index 7d8a215..ab4520e 100644
--- a/site/src/components/EditDrawer.svelte
+++ b/site/src/components/EditDrawer.svelte
@@ -24,6 +24,11 @@
   let confirmDelete = false;
   let deleting = false;
 
+  // Elevation recalculation from DEM
+  let recalculating = false;
+  let recalcStatus = '';
+  let recalcOk = false;
+
   // Form state
   let title = '';
   let sport: Sport = 'cycling';
@@ -119,6 +124,26 @@
       : [...hideStats, key];
   }
 
+  async function recalculateElevation() {
+    recalculating = true;
+    recalcStatus = '';
+    recalcOk = false;
+    try {
+      const res = await fetch(`${api}/recalculate-elevation`, { method: 'POST' });
+      const d = await res.json();
+      if (!res.ok) throw new Error(d.detail ?? await res.text());
+      recalcOk = true;
+      const gain = d.elevation_gain_m != null ? `↑ ${Math.round(d.elevation_gain_m)} m` : '';
+      const loss = d.elevation_loss_m != null ? `↓ ${Math.round(d.elevation_loss_m)} m` : '';
+      recalcStatus = [gain, loss].filter(Boolean).join('  ');
+    } catch (e: any) {
+      recalcStatus = e.message;
+      recalcOk = false;
+    } finally {
+      recalculating = false;
+    }
+  }
+
   async function deleteActivity() {
     if (!confirmDelete) { confirmDelete = true; return; }
     deleting = true;
@@ -264,6 +289,24 @@
         </div>
       </div>
 
+      <!-- Elevation recalculation -->
+      <div class="mb-4">
+        <p class="text-xs text-zinc-500 mb-2">Elevation</p>
+        <button
+          type="button"
+          class="w-full flex items-center justify-center gap-2 px-3 py-2 rounded-lg border border-zinc-700 text-xs text-zinc-400 hover:border-zinc-500 hover:text-zinc-200 transition-colors disabled:opacity-40"
+          disabled={recalculating}
+          on:click={recalculateElevation}
+        >
+          {recalculating ? 'Querying terrain data…' : '⛰ Recalculate from terrain map (DEM)'}
+        </button>
+        {#if recalcStatus}
+          <p class="text-xs mt-1.5 text-center" class:text-green-400={recalcOk} class:text-red-400={!recalcOk}>
+            {recalcStatus}
+          </p>
+        {/if}
+      </div>
+
       <!-- Flags -->
       <div class="flex gap-3 mb-2">
         <button

From 0c659db6cbcb3fdfd1115f71e40ba0e8a19beb75 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 21:17:03 +0200
Subject: [PATCH 116/124] fix: default DEM URL to api.open-elevation.com

No configuration needed out of the box; --dem-url only required to
override the default with a self-hosted or alternative endpoint.
---
 bincio/edit/cli.py     | 7 ++-----
 bincio/edit/server.py  | 8 ++------
 bincio/serve/cli.py    | 5 ++---
 bincio/serve/server.py | 8 ++------
 4 files changed, 8 insertions(+), 20 deletions(-)

diff --git a/bincio/edit/cli.py b/bincio/edit/cli.py
index 8aec131..f28e615 100644
--- a/bincio/edit/cli.py
+++ b/bincio/edit/cli.py
@@ -25,7 +25,7 @@ console = Console()
 @click.option("--strava-client-secret", default=None, envvar="STRAVA_CLIENT_SECRET",
               help="Strava API client secret. Also reads STRAVA_CLIENT_SECRET env var.")
 @click.option("--dem-url", default=None, envvar="DEM_URL",
-              help="Base URL of an Open-Elevation-compatible API (enables 'Recalculate elevation' button).")
+              help="Base URL of an Open-Elevation-compatible API (default: https://api.open-elevation.com).")
 def edit(
     data_dir: Optional[str],
     port: int,
@@ -78,10 +78,7 @@ def edit(
         console.print(f"Strava sync: [green]enabled[/green] (client {strava_client_id})")
     else:
         console.print("Strava sync: [yellow]disabled[/yellow] (pass --strava-client-id to enable)")
-    if dem_url:
-        console.print(f"DEM:         [green]enabled[/green] ({dem_url})")
-    else:
-        console.print("DEM:         [yellow]disabled[/yellow] (pass --dem-url to enable elevation recalculation)")
+    console.print(f"DEM:         [cyan]{srv.dem_url}[/cyan]")
 
     uvicorn.run(srv.app, host="127.0.0.1", port=port, log_level="warning")
 
diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index 648a4a3..f06a8b4 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -20,7 +20,7 @@ data_dir: Path | None = None
 site_url: str = "http://localhost:4321"
 strava_client_id: str = ""
 strava_client_secret: str = ""
-dem_url: str = ""   # Open-Elevation-compatible API base URL; empty = feature disabled
+dem_url: str = "https://api.open-elevation.com"  # Open-Elevation-compatible API base URL
 
 # In-memory CSRF state tokens for OAuth flows (token → True); cleared after use
 _oauth_states: set[str] = set()
@@ -435,11 +435,7 @@ async def recalculate_elevation_endpoint(activity_id: str) -> JSONResponse:
     Requires --dem-url to be set when starting bincio edit.
     """
     if not dem_url:
-        raise HTTPException(
-            503,
-            "DEM URL not configured. "
-            "Pass --dem-url <api-url> to bincio edit (e.g. https://api.open-elevation.com).",
-        )
+        raise HTTPException(503, "DEM URL not configured.")
     dd = _get_data_dir()
     _check_id(activity_id)
     try:
diff --git a/bincio/serve/cli.py b/bincio/serve/cli.py
index 2cbf9f6..478cc1b 100644
--- a/bincio/serve/cli.py
+++ b/bincio/serve/cli.py
@@ -21,7 +21,7 @@ console = Console()
 @click.option("--max-users", default=None, type=int, help="Override max users for this instance (0 = unlimited; updates the DB setting)")
 @click.option("--public-url", default=None, envvar="PUBLIC_URL", help="Public base URL (e.g. https://yourdomain.com). Required for Strava OAuth to work behind a reverse proxy.")
 @click.option("--webroot", default=None, type=click.Path(), help="Nginx webroot (e.g. /var/www/bincio). When set, uploads trigger a full Astro build + rsync so new activity pages are immediately accessible without a git push.")
-@click.option("--dem-url", default=None, envvar="DEM_URL", help="Base URL of an Open-Elevation-compatible API (enables 'Recalculate elevation' button in the edit drawer).")
+@click.option("--dem-url", default=None, envvar="DEM_URL", help="Base URL of an Open-Elevation-compatible API (default: https://api.open-elevation.com).")
 def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
           strava_client_id: Optional[str], strava_client_secret: Optional[str],
           max_users: Optional[int], public_url: Optional[str],
@@ -77,8 +77,7 @@ def serve(data_dir: str, site_dir: Optional[str], host: str, port: int,
         console.print(f"  Users: [yellow]max {current_limit}[/yellow]")
     else:
         console.print(f"  Users: [dim]unlimited[/dim]")
-    if dem_url:
-        console.print(f"  DEM:   [cyan]{dem_url}[/cyan]")
+    console.print(f"  DEM:   [cyan]{srv.dem_url}[/cyan]")
     console.print()
 
     log_config = uvicorn.config.LOGGING_CONFIG.copy()
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 5b57f4d..8e558fe 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -158,7 +158,7 @@ webroot: Path | None = None    # nginx webroot — when set, trigger full rebuil
 strava_client_id: str = ""
 strava_client_secret: str = ""
 public_url: str = ""   # e.g. "https://yourdomain.com" — used for OAuth redirect URIs
-dem_url: str = ""      # Open-Elevation-compatible API base URL; empty = feature disabled
+dem_url: str = "https://api.open-elevation.com"  # Open-Elevation-compatible API base URL
 _db = None  # sqlite3.Connection, opened lazily
 
 
@@ -1279,11 +1279,7 @@ async def recalculate_elevation_endpoint(
     user = _require_user(bincio_session)
     _check_id(activity_id)
     if not dem_url:
-        raise HTTPException(
-            503,
-            "DEM URL not configured. "
-            "Pass --dem-url <api-url> to bincio serve (e.g. https://api.open-elevation.com).",
-        )
+        raise HTTPException(503, "DEM URL not configured.")
     dd = _get_data_dir() / user.handle
     if not (dd / "activities" / f"{activity_id}.json").exists():
         raise HTTPException(404, "Activity not found")

From 2b7a37ed41524ffd35c0eda01b0153e7172ff3a7 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 21:18:50 +0200
Subject: [PATCH 117/124] docs: update changelog, CLI reference, user guide,
 and elevation notes

- CHANGELOG: document hysteresis elevation fix and DEM recalculation feature
- docs/reference/cli.md: add --dem-url to bincio edit and bincio serve tables
- docs/user-guide.md: document "Recalculate from terrain map" button in edit drawer
- docs/elevation.md: mark both short-term and medium-term fixes as implemented
---
 CHANGELOG.md          |  60 ++++++++
 docs/elevation.md     | 312 ++++++++++++++++++++++++++++++++++++++++++
 docs/reference/cli.md |   2 +
 docs/user-guide.md    |  15 ++
 4 files changed, 389 insertions(+)
 create mode 100644 docs/elevation.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d608c04..81b5d7c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,65 @@
 # Changelog
 
+## [Unreleased] — 2026-04-20
+
+### Improvement — Elevation gain accuracy (hysteresis accumulation)
+
+The previous algorithm accumulated every positive elevation delta between
+consecutive track points, counting GPS jitter and barometric quantization
+noise as real climbing. This consistently overestimated gain — in extreme
+cases by 100% on flat coastal routes.
+
+The new algorithm uses **hysteresis dead-band accumulation**: elevation is
+only committed when it changes by more than a source-specific threshold from
+the last committed value. GPS noise is suppressed without losing real climbs.
+
+- **`bincio/extract/models.py`** — `ParsedActivity` gains an `altitude_source`
+  field (`"barometric"` / `"gps"` / `"unknown"`)
+- **`bincio/extract/parsers/fit.py`** — detects whether any record frame used
+  `enhanced_altitude` (barometric altimeter) vs `altitude` (GPS-derived) and
+  sets `altitude_source` accordingly
+- **`bincio/extract/parsers/gpx.py`**, **`tcx.py`** — both set
+  `altitude_source = "gps"`
+- **`bincio/extract/metrics.py`** — `_elevation()` replaced with hysteresis
+  accumulator; thresholds: **5 m** for barometric, **10 m** for GPS/unknown
+- **`tests/test_metrics.py`** — 5 new parametric tests: flat GPS noise
+  suppression, barometric vs GPS threshold difference, real climb approximation,
+  unknown-treated-as-gps invariant
+
+### New feature — DEM-based elevation recalculation from the edit drawer
+
+A new **"Recalculate from terrain map (DEM)"** button in the activity edit
+drawer replaces noisy GPS altitude with SRTM terrain data, then re-applies
+hysteresis accumulation to compute corrected gain/loss.
+
+This is the recommended fix for activities that still show inaccurate
+elevation after the hysteresis improvement (e.g. activities recorded before
+re-extracting from sources, or uploads where the source file had severe GPS
+altitude noise).
+
+How it works:
+1. The server subsamples the activity's 1 Hz GPS track (one point every 10 s)
+2. Queries an Open-Elevation-compatible API for terrain elevation
+3. Linearly interpolates DEM elevation back to every GPS-valid second
+4. Applies 5 m hysteresis to compute the corrected gain and loss
+5. Writes the updated `elevation_m` array to the timeseries (chart updates)
+6. Patches `elevation_gain_m` / `elevation_loss_m` in the activity JSON and
+   `index.json` summary
+
+- **`bincio/extract/dem.py`** (new) — `lookup_elevations()` (batched HTTP POST,
+  Open-Elevation wire format) + `recalculate_elevation()` (full pipeline above)
+- **`POST /api/activity/{id}/recalculate-elevation`** — on both `bincio serve`
+  (auth-gated, triggers `merge_one` + rebuild) and `bincio edit` (no auth)
+- **`bincio serve --dem-url URL`** / **`bincio edit --dem-url URL`** — override
+  the default DEM endpoint (also read from `DEM_URL` env var)
+- Default DEM endpoint: **`https://api.open-elevation.com`** — works out of the
+  box with no configuration
+- **`GET /api/me`** response gains `dem_configured: bool`
+- **`EditDrawer.svelte`** — button with spinner, shows `↑ Xm ↓ Ym` on success
+  or an inline error (e.g. if the DEM API is unreachable)
+
+---
+
 ## [Unreleased] — 2026-04-16
 
 ### New feature — Self-service user settings page
diff --git a/docs/elevation.md b/docs/elevation.md
new file mode 100644
index 0000000..8dfb2d2
--- /dev/null
+++ b/docs/elevation.md
@@ -0,0 +1,312 @@
+# Elevation gain calculation — problem analysis and roadmap
+
+## The problem
+
+Bincio's current algorithm naively accumulates every positive elevation delta between
+consecutive track points. This **always overestimates** real climbing because it treats
+sensor noise as genuine ascent. The overestimation ranges from insignificant on long
+mountain rides to catastrophic on flat routes where 100% of the reported gain is noise.
+
+---
+
+## Current algorithm (`metrics.py:_elevation`)
+
+```python
+def _elevation(pts):
+    elevations = [p.elevation_m for p in pts if p.elevation_m is not None]
+    gain = loss = 0.0
+    for a, b in zip(elevations, elevations[1:]):
+        diff = b - a
+        if diff > 0:
+            gain += diff
+        else:
+            loss += diff
+    return gain, loss
+```
+
+Every positive step — including 0.1m GPS jitter, barometric quantization steps of
+0.2m, and random-walk noise — is counted as climbing. There is no filtering,
+smoothing, or minimum-step threshold of any kind.
+
+---
+
+## Root causes of overestimation
+
+### 1. GPS-derived altitude noise
+
+GPS units measure altitude from satellite triangulation. This is inherently less
+accurate than horizontal positioning: typical GPS altitude error is ±5–15m, and the
+error follows a correlated random walk. On a flat route, the track oscillates above
+and below the true elevation, and the positive half of those oscillations accumulates
+as phantom climbing.
+
+**Characteristic signature:** elevation range far smaller than reported gain; nearly
+100% of deltas are sub-1m; median step size is 0.0m.
+
+### 2. Barometric altimeter quantization
+
+Devices with a barometric sensor report higher-quality data, but they still apply
+internal smoothing and quantise the output to fixed increments (commonly 0.2m or
+0.4m). The device holds the reading steady for several seconds, then steps to the
+next quantised value. Small-but-real oscillations at the quantisation boundary
+(e.g. hovering between 128.2m and 128.4m while essentially flat) produce repeated
+tiny up/down steps that accumulate.
+
+**Characteristic signature:** many repeated identical elevations (device holding);
+most transitions are 0.0m, 0.2m or 0.4m; significant fraction of gain from sub-1m
+steps even on a real climb.
+
+### 3. High sampling rate amplifying both effects
+
+At 1 Hz, both GPS and barometric sensors produce more noise steps per meter of
+real climbing than at lower rates. Downsampling to 1 Hz (as the timeseries writer
+does) does not eliminate noise already present in the source data.
+
+---
+
+## Case studies
+
+### Activity 1 — diego_p, 2026-04-11T051441Z (Wahoo ELEMNT, GPX)
+
+- **URL:** https://bincio.org/activity/2026-04-11T051441Z/
+- **Bincio reports:** 353.6m gain
+- **Correct estimate:** ~150–160m (Wahoo device's own reading, which applies internal
+  thresholding)
+- **Excess:** ~200m (56% overestimate)
+
+| Metric | Value |
+|--------|-------|
+| Points | 15,721 |
+| Elevation range | −10.6m to +5.4m (16m total span) |
+| Median \|delta\| | 0.000m |
+| Zero-change steps | 12,358 (79%) |
+| Sub-0.5m steps | 3,339 (21%) |
+| Steps ≥ 1m | 0 (0%) |
+| Gain from sub-1m steps | 353.6m (100% of total) |
+
+**Diagnosis:** This is a flat coastal route. The GPS altitude range is only 16m.
+Every single metre of reported gain is sub-1m GPS jitter — no real climbing is
+recorded at all. Even a 1m threshold would produce exactly 0m gain, which is wrong
+in the other direction (the route may have minor real undulation). The Wahoo device's
+own algorithm uses internal hysteresis to report ~153m.
+
+### Activity 2 — m4xw3ll__, 2026-04-14T161945Z (Bryton Rider, FIT)
+
+- **URL:** http://95.216.55.151/activity/2026-04-14T161945Z/
+- **Bincio reports:** 1285.2m gain
+- **Correct estimate:** ~885m (Strava / device reading)
+- **Excess:** ~400m (45% overestimate)
+
+| Metric | Value |
+|--------|-------|
+| Points | 6,583 |
+| Elevation range | 0.0m to 454.0m (454m total span) |
+| Median \|delta\| | 0.000m |
+| Zero-change steps | 4,077 (62%) |
+| Sub-0.5m steps | 769 (12%) |
+| 0.5–1m steps | 647 (10%) |
+| 1–2m steps | 921 (14%) |
+| 2m+ steps | 168 (3%) |
+| Gain from sub-1m steps | 484.0m (38% of total) |
+
+**Diagnosis:** Real climbing exists (0–454m) but 38% of the reported gain comes from
+sub-1m barometric quantization noise. The Bryton records elevation at ≈0.2m
+increments. At quantization boundaries the device oscillates producing repeated
+tiny up/down steps. A simple 1m threshold gives 801m (10% below truth); 2m gives
+only 221m (too aggressive). Pure threshold-based filtering doesn't work well here.
+
+---
+
+## Alternative algorithms
+
+### A. Simple threshold
+
+Only count a step if it exceeds `min_step_m`:
+
+```python
+gain += diff if diff >= min_step_m else 0
+```
+
+**Pros:** trivial to implement, zero overhead.  
+**Cons:** flat/hiking routes with gradual slopes produce many steps < threshold
+that together represent real climbing. A 2m threshold already loses 30% of real
+gain on the Bryton activity. Requires per-device tuning that is impractical.
+
+---
+
+### B. Hysteresis / dead-band accumulation
+
+Track a "committed" elevation. Only commit a new elevation when it differs from
+the last committed value by more than `threshold_m`. Accumulate from committed to
+committed only.
+
+```python
+def _elevation_hysteresis(elevations, threshold_m=10.0):
+    gain = loss = 0.0
+    committed = elevations[0]
+    for e in elevations[1:]:
+        diff = e - committed
+        if abs(diff) >= threshold_m:
+            if diff > 0:
+                gain += diff
+            else:
+                loss += abs(diff)
+            committed = e
+    return gain, loss
+```
+
+**Pros:** naturally handles both GPS drift and barometric quantization; used by
+Strava (proprietary variant), RideWithGPS (10m default), and GPSies (5m).  
+**Cons:** threshold choice is critical and device-dependent. On a genuine 8m climb
+followed by descent, a 10m threshold records zero. Needs to be lower for cycling
+than hiking (slopes are smoother, sensors better).
+
+**Results on our case studies with threshold=10m:**
+- Wahoo flat (correct ~153m): would likely produce 0–30m. Fixes the gross overcount
+  but may undercount real minor undulation.
+- Bryton climb (correct ~885m): would need evaluation on the raw data.
+
+---
+
+### C. Moving-average pre-smoothing
+
+Apply a sliding-window mean or Gaussian blur to the elevation series, then
+accumulate naively.
+
+```python
+import statistics
+
+def smooth(elevations, window=30):
+    half = window // 2
+    out = []
+    for i, e in enumerate(elevations):
+        lo, hi = max(0, i - half), min(len(elevations), i + half + 1)
+        out.append(statistics.mean(elevations[lo:hi]))
+    return out
+
+gain, loss = _elevation(smooth(elevations, window=30))
+```
+
+**Pros:** easy to implement; smoothing removes high-frequency noise while preserving
+long-wavelength terrain.  
+**Cons:** loses real short climbs (e.g. a 20m ramp over 20 seconds is averaged to
+near-flat). Window size needs tuning per sample rate. Edge effects at start/end.
+
+---
+
+### D. Savitzky-Golay filter
+
+A polynomial least-squares smoothing filter that better preserves peaks and
+troughs than a simple moving average. Available in `scipy.signal.savgol_filter`
+(scipy is already an indirect dependency via numpy, which is used nowhere critical —
+but adding scipy is a dependency choice).
+
+**Pros:** better terrain shape preservation than moving average; standard in
+scientific signal processing.  
+**Cons:** requires scipy; harder to implement without it; window/order tuning still
+required.
+
+---
+
+### E. Kalman filter (device-class-aware)
+
+A Kalman filter can be tuned with separate process noise and measurement noise
+parameters for GPS vs barometric data. This is what high-end cycling computers do
+internally.
+
+**Pros:** theoretically optimal; can be parameterised per device class.  
+**Cons:** significantly more complex; requires knowing the device class (GPS-only vs
+barometric); still requires parameter tuning.
+
+---
+
+### F. Source-aware strategy
+
+Use different algorithms depending on the file type and whether the device reported
+enhanced (barometric) altitude:
+
+- **FIT file with `enhanced_altitude` field**: barometric data, use hysteresis 5m
+- **FIT file with GPS altitude only**: treat as GPS, use hysteresis 10–15m or
+  discard altitude entirely and use a DEM lookup
+- **GPX with `<ele>` tag**: assume GPS unless `<extensions>` contains barometric
+  fields; use hysteresis 10–15m
+- **Strava-enriched data**: Strava's API provides corrected `altitude` arrays; use
+  as-is with hysteresis 2m to catch quantization
+
+---
+
+## What Strava/Garmin/others do
+
+| Platform | Method |
+|---|---|
+| Strava | Proprietary; replaces raw altitude with DEM-corrected data for GPS-only devices; applies internal smoothing before accumulation |
+| Garmin Connect | Uses enhanced\_altitude (barometric), applies Kalman filter on-device; Connect re-applies server-side smoothing |
+| Wahoo | On-device hysteresis (≈3m threshold); the GPX file contains already-smoothed altitude |
+| RideWithGPS | 10m hysteresis by default, configurable |
+| Komoot | DEM correction + smoothing |
+| TrainingPeaks | Configurable threshold (5m default) |
+
+Strava's approach of DEM (Digital Elevation Model) correction is the gold standard
+for GPS-only tracks: replace the noisy GPS altitude entirely with the ground truth
+from a 30m-resolution DEM such as SRTM. This requires an additional data source
+(e.g. the Open-Elevation API or a locally hosted SRTM tile set) but completely
+eliminates GPS altitude noise.
+
+---
+
+## Recommended fix
+
+Given the two failure modes observed:
+
+### Short term — ✅ Implemented (2026-04-20)
+
+**Hysteresis accumulation** with source-aware thresholds, applied at extract time:
+
+| Source | Threshold |
+|---|---|
+| FIT with `enhanced_altitude` (barometric) | 5 m |
+| FIT with GPS altitude | 10 m |
+| GPX | 10 m |
+| TCX | 10 m |
+
+`ParsedActivity.altitude_source` is set by each parser (`"barometric"` / `"gps"` /
+`"unknown"`). `_elevation()` in `metrics.py` selects the threshold from this value.
+
+New activities extracted after this change benefit automatically. Existing activities
+require re-extraction from source files.
+
+### Medium term — ✅ Implemented (2026-04-20)
+
+**On-demand DEM correction** via the edit drawer, using the Open-Elevation API
+(SRTM30 data):
+
+1. GPS track subsampled to one point per 10 s to minimise API calls.
+2. Terrain elevation fetched via `POST https://api.open-elevation.com/api/v1/lookup`
+   in batches of 512.
+3. DEM elevation linearly interpolated back to the full 1 Hz series.
+4. 5 m hysteresis applied to the interpolated series.
+5. Timeseries and activity JSON patched in place; chart and stats update immediately.
+
+Implementation: `bincio/extract/dem.py` + `POST /api/activity/{id}/recalculate-elevation`
+on both servers. Default endpoint: `https://api.open-elevation.com`; override with
+`--dem-url` or `DEM_URL` env var.
+
+This is the recommended fix for activities uploaded before the hysteresis improvement,
+or any activity where GPS noise is severe.
+
+---
+
+## Implementation status
+
+| File | Status |
+|---|---|
+| `bincio/extract/models.py` | ✅ `altitude_source` field added |
+| `bincio/extract/parsers/fit.py` | ✅ detects `enhanced_altitude` vs GPS |
+| `bincio/extract/parsers/gpx.py` | ✅ sets `altitude_source = "gps"` |
+| `bincio/extract/parsers/tcx.py` | ✅ sets `altitude_source = "gps"` |
+| `bincio/extract/metrics.py` | ✅ hysteresis `_elevation()` with source-aware threshold |
+| `bincio/extract/dem.py` | ✅ `lookup_elevations()` + `recalculate_elevation()` |
+| `bincio/serve/server.py` | ✅ `POST /api/activity/{id}/recalculate-elevation` |
+| `bincio/edit/server.py` | ✅ same endpoint (single-user) |
+| `site/src/components/EditDrawer.svelte` | ✅ "Recalculate from terrain map" button |
+| `tests/test_metrics.py` | ✅ 5 parametric tests |
diff --git a/docs/reference/cli.md b/docs/reference/cli.md
index f737a1d..3219f36 100644
--- a/docs/reference/cli.md
+++ b/docs/reference/cli.md
@@ -116,6 +116,7 @@ uv run bincio edit [OPTIONS]
 | `--port PORT` | `4041` | Bind port |
 | `--strava-client-id ID` | from config | Strava OAuth client ID |
 | `--strava-client-secret SECRET` | from config | Strava OAuth client secret |
+| `--dem-url URL` | `https://api.open-elevation.com` | Open-Elevation-compatible API for the "Recalculate elevation" button (also `DEM_URL` env var) |
 
 Set `PUBLIC_EDIT_URL=http://localhost:4041` in `site/.env` to enable the Edit button and Upload ↑ button in the site.
 
@@ -164,6 +165,7 @@ uv run bincio serve [OPTIONS]
 | `--site-dir DIR` | — | Astro site dir — enables post-write incremental rebuilds |
 | `--host HOST` | `127.0.0.1` | Bind address (keep on localhost; nginx proxies from outside) |
 | `--port PORT` | `4041` | Bind port |
+| `--dem-url URL` | `https://api.open-elevation.com` | Open-Elevation-compatible API for the "Recalculate elevation" button (also `DEM_URL` env var) |
 
 Requires `bincio init` to have been run first. Handles auth, user management, and write operations. nginx is responsible for serving static files and proxying `/api/*` to this server.
 
diff --git a/docs/user-guide.md b/docs/user-guide.md
index ec2de54..66b3faf 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -73,6 +73,21 @@ Click **Edit** on any activity to:
 
 Changes save instantly. The site rebuilds in the background.
 
+### Recalculating elevation from terrain data
+
+If an activity shows an unrealistic elevation gain (common with GPS-only devices on flat
+routes, or with older Garmin/Wahoo files), the edit drawer has a
+**"Recalculate from terrain map (DEM)"** button.
+
+Clicking it replaces the recorded GPS altitude with SRTM terrain data from the
+[Open-Elevation API](https://open-elevation.com) and recomputes the gain and loss. The
+elevation chart and the summary stats both update. This usually brings the numbers in
+line with what Strava or your device's app reports.
+
+> **Note:** The correction requires a GPS track (activities marked *No GPS* cannot be
+> corrected). The DEM has ~30 m horizontal resolution, so very short or indoor activities
+> are not meaningfully improved.
+
 ### Photo gallery
 
 Upload photos for an activity. They appear in a lightbox on the activity detail page. The server stores them in your data directory.

From ebac3f50f488224a76675b68dfe4a4a01bc1ad9c Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 21:41:23 +0200
Subject: [PATCH 118/124] fix: DEM elevation overcounting and add
 hysteresis-only recalculation button
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- dem.py: apply 45s median filter before hysteresis to suppress SRTM
  tile-boundary steps that were accumulating through the 5m threshold;
  raise DEM hysteresis threshold from 5m to 10m
- dem.py: back up elevation_m as elevation_m_original in timeseries
  before the first DEM overwrite, so original sensor data is preserved
- dem.py: add recalculate_elevation_hysteresis() — recomputes gain/loss
  from original recorded elevation (reads elevation_m_original if a DEM
  run already replaced elevation_m) using source-aware thresholds
  (5m barometric, 10m GPS/unknown); does not touch the elevation array
- edit/server.py, serve/server.py: split /recalculate-elevation into
  two endpoints: /recalculate-elevation/dem and
  /recalculate-elevation/hysteresis
- EditDrawer.svelte: replace single DEM button with two side-by-side
  buttons — "Recalculate (hysteresis)" (fast, offline) and
  "Recalculate (DEM)" (SRTM lookup)
---
 bincio/edit/server.py                 |  21 +++-
 bincio/extract/dem.py                 | 168 ++++++++++++++++++++++----
 bincio/serve/server.py                |  28 ++++-
 site/src/components/EditDrawer.svelte |  40 +++---
 4 files changed, 215 insertions(+), 42 deletions(-)

diff --git a/bincio/edit/server.py b/bincio/edit/server.py
index f06a8b4..2f25567 100644
--- a/bincio/edit/server.py
+++ b/bincio/edit/server.py
@@ -428,8 +428,8 @@ async def save_activity(activity_id: str, payload: dict[str, Any]) -> JSONRespon
     return JSONResponse({"ok": True, "sidecar": str(sidecar_path)})
 
 
-@app.post("/api/activity/{activity_id}/recalculate-elevation")
-async def recalculate_elevation_endpoint(activity_id: str) -> JSONResponse:
+@app.post("/api/activity/{activity_id}/recalculate-elevation/dem")
+async def recalculate_elevation_dem_endpoint(activity_id: str) -> JSONResponse:
     """Replace GPS altitude with DEM terrain elevation and recompute gain/loss.
 
     Requires --dem-url to be set when starting bincio edit.
@@ -450,6 +450,23 @@ async def recalculate_elevation_endpoint(activity_id: str) -> JSONResponse:
         raise HTTPException(422, str(e))
 
 
+@app.post("/api/activity/{activity_id}/recalculate-elevation/hysteresis")
+async def recalculate_elevation_hysteresis_endpoint(activity_id: str) -> JSONResponse:
+    """Recompute gain/loss from original recorded elevation using source-aware hysteresis."""
+    dd = _get_data_dir()
+    _check_id(activity_id)
+    try:
+        from bincio.extract.dem import recalculate_elevation_hysteresis
+        from bincio.render.merge import merge_one
+        result = recalculate_elevation_hysteresis(dd, activity_id)
+        merge_one(dd, activity_id)
+        return JSONResponse(result)
+    except FileNotFoundError as e:
+        raise HTTPException(404, str(e))
+    except ValueError as e:
+        raise HTTPException(422, str(e))
+
+
 @app.post("/api/activity/{activity_id}/images")
 async def upload_image(activity_id: str, file: UploadFile = File(...)) -> JSONResponse:
     dd = _get_data_dir()
diff --git a/bincio/extract/dem.py b/bincio/extract/dem.py
index 8a1c846..ad6a4aa 100644
--- a/bincio/extract/dem.py
+++ b/bincio/extract/dem.py
@@ -13,6 +13,7 @@ Pass the base URL (without path) to bincio serve/edit via --dem-url.
 from __future__ import annotations
 
 import json
+import statistics
 import urllib.error
 import urllib.request
 from pathlib import Path
@@ -26,9 +27,31 @@ _DEFAULT_SAMPLE_INTERVAL_S = 10
 # Maximum locations per API request.  Open-Elevation supports ~512 per POST.
 _DEFAULT_BATCH_SIZE = 512
 
-# Hysteresis threshold after DEM correction.  DEM data is already smooth
-# (30 m horizontal resolution) so 5 m is a generous dead-band.
-_DEM_HYSTERESIS_M = 5.0
+# Hysteresis threshold after DEM correction.
+# SRTM30 at 1 Hz produces tile-boundary steps of ~1–3 m every few seconds.
+# A 5 m threshold barely filters them; 10 m suppresses them reliably.
+_DEM_HYSTERESIS_M = 10.0
+
+# Median filter window (seconds / samples at 1 Hz) applied to DEM-interpolated
+# series before hysteresis.  45 s smooths SRTM tile steps while keeping real
+# climbs (typical cycling ramp > 100 m over > 2 min).
+_MEDIAN_WINDOW_S = 45
+
+
+def _median_filter(values: list[float], window: int) -> list[float]:
+    """Apply a sliding-window median filter to *values*.
+
+    The window is centred on each sample; edges are handled by shrinking the
+    window symmetrically (same as scipy's 'reflect' / 'nearest' default).
+    """
+    half = window // 2
+    n = len(values)
+    out: list[float] = []
+    for i in range(n):
+        lo = max(0, i - half)
+        hi = min(n, i + half + 1)
+        out.append(statistics.median(values[lo:hi]))
+    return out
 
 
 def lookup_elevations(
@@ -77,6 +100,28 @@ def lookup_elevations(
     return results
 
 
+def _hysteresis_gain_loss(
+    elevations: list[float], threshold_m: float
+) -> tuple[float, float]:
+    """Compute elevation gain and loss using a hysteresis dead-band.
+
+    Only commits a new elevation level when it differs from the last committed
+    value by at least *threshold_m*.  Returns (gain, loss) in metres, both
+    as positive numbers.
+    """
+    gain = loss = 0.0
+    committed = elevations[0]
+    for e in elevations[1:]:
+        diff = e - committed
+        if abs(diff) >= threshold_m:
+            if diff > 0:
+                gain += diff
+            else:
+                loss += abs(diff)
+            committed = e
+    return gain, loss
+
+
 def recalculate_elevation(
     user_dir: Path,
     activity_id: str,
@@ -91,10 +136,13 @@ def recalculate_elevation(
     2. Subsample GPS points every *sample_interval_s* seconds.
     3. Query the DEM API for those points (batched).
     4. Linearly interpolate DEM elevation back to every GPS-valid second.
-    5. Apply :data:`_DEM_HYSTERESIS_M` hysteresis to compute gain / loss.
-    6. Write the updated ``elevation_m`` array to the timeseries JSON.
-    7. Patch ``elevation_gain_m`` / ``elevation_loss_m`` in the detail JSON.
-    8. Patch ``elevation_gain_m`` in ``index.json`` (summary entry for the feed).
+    5. Apply a 45 s median filter to smooth SRTM tile-boundary noise.
+    6. Apply :data:`_DEM_HYSTERESIS_M` (10 m) hysteresis to compute gain/loss.
+    7. Preserve the original elevation as ``elevation_m_original`` in the
+       timeseries (only on the first DEM run — never overwrites a prior backup).
+    8. Write the smoothed DEM elevation array as ``elevation_m``.
+    9. Patch ``elevation_gain_m`` / ``elevation_loss_m`` in the detail JSON.
+    10. Patch ``elevation_gain_m`` in ``index.json`` (summary entry for feed).
 
     Returns
     -------
@@ -165,7 +213,6 @@ def recalculate_elevation(
     j = 0
     for i in gps_idx:
         t = t_arr[i]
-        # Advance j so valid_pairs[j] is the left anchor for t
         while j + 1 < len(valid_pairs) - 1 and valid_pairs[j + 1][0] <= t:
             j += 1
         t0, e0 = valid_pairs[j]
@@ -176,33 +223,37 @@ def recalculate_elevation(
         else:
             new_ele[i] = round(e0, 1)
 
-    # ── 4. Hysteresis accumulation ────────────────────────────────────────────
-    valid_eles = [e for e in new_ele if e is not None]
-    gain = loss = 0.0
-    committed = valid_eles[0]
-    for e in valid_eles[1:]:
-        diff = e - committed
-        if abs(diff) >= _DEM_HYSTERESIS_M:
-            if diff > 0:
-                gain += diff
-            else:
-                loss += diff
-            committed = e
+    # ── 4. Median filter to suppress SRTM tile-boundary steps ────────────────
+    valid_indices = [i for i, e in enumerate(new_ele) if e is not None]
+    valid_eles_raw = [new_ele[i] for i in valid_indices]  # type: ignore[misc]
+    smoothed = _median_filter(valid_eles_raw, _MEDIAN_WINDOW_S)  # type: ignore[arg-type]
+
+    # Write smoothed values back into new_ele
+    for idx, e in zip(valid_indices, smoothed):
+        new_ele[idx] = round(e, 1)
+
+    # ── 5. Hysteresis accumulation on smoothed series ─────────────────────────
+    smoothed_valid = [e for e in new_ele if e is not None]
+    gain, loss = _hysteresis_gain_loss(smoothed_valid, _DEM_HYSTERESIS_M)  # type: ignore[arg-type]
 
     gain_r = round(gain, 1)
-    loss_r = round(abs(loss), 1)
+    loss_r = round(loss, 1)
 
-    # ── 5. Write timeseries ───────────────────────────────────────────────────
+    # ── 6. Preserve original elevation (only if not already backed up) ────────
+    if "elevation_m_original" not in ts:
+        ts["elevation_m_original"] = ts.get("elevation_m")
+
+    # ── 7. Write timeseries ───────────────────────────────────────────────────
     ts["elevation_m"] = new_ele
     ts_path.write_text(json.dumps(ts, indent=2, ensure_ascii=False), encoding="utf-8")
 
-    # ── 6. Patch activity detail JSON ─────────────────────────────────────────
+    # ── 8. Patch activity detail JSON ─────────────────────────────────────────
     detail = json.loads(json_path.read_text(encoding="utf-8"))
     detail["elevation_gain_m"] = gain_r
     detail["elevation_loss_m"] = loss_r
     json_path.write_text(json.dumps(detail, indent=2, ensure_ascii=False), encoding="utf-8")
 
-    # ── 7. Patch index.json summary (so merge_all picks up the new value) ─────
+    # ── 9. Patch index.json summary ───────────────────────────────────────────
     index_path = user_dir / "index.json"
     if index_path.exists():
         index = json.loads(index_path.read_text(encoding="utf-8"))
@@ -219,3 +270,72 @@ def recalculate_elevation(
         "elevation_loss_m": loss_r,
         "points_queried": n_queried,
     }
+
+
+def recalculate_elevation_hysteresis(user_dir: Path, activity_id: str) -> dict:
+    """Recompute elevation gain/loss from the original recorded elevation data.
+
+    Uses the same source-aware hysteresis thresholds as the extract pipeline:
+
+    - 5 m for barometric altimeters (FIT files with ``enhanced_altitude``)
+    - 10 m for GPS-derived altitude (GPX, TCX, FIT without barometric)
+
+    The elevation array in the timeseries is **not** modified.  If a DEM
+    correction was previously applied, the backup in ``elevation_m_original``
+    is used as the source so the original sensor data is recovered.
+
+    Returns
+    -------
+    dict with keys ``elevation_gain_m``, ``elevation_loss_m``.
+    """
+    acts_dir = user_dir / "activities"
+    json_path = acts_dir / f"{activity_id}.json"
+    ts_path   = acts_dir / f"{activity_id}.timeseries.json"
+
+    if not json_path.exists():
+        raise FileNotFoundError(f"Activity not found: {activity_id}")
+    if not ts_path.exists():
+        raise ValueError("Activity has no timeseries data")
+
+    ts = json.loads(ts_path.read_text(encoding="utf-8"))
+
+    # Use original elevation if a DEM backup exists, otherwise use current
+    ele_arr: list[Optional[float]] = (
+        ts.get("elevation_m_original") or ts.get("elevation_m") or []
+    )
+    elevations = [e for e in ele_arr if e is not None]
+    if len(elevations) < 2:
+        raise ValueError("Not enough elevation data to compute gain/loss")
+
+    # Determine threshold from altitude_source stored in detail JSON
+    detail = json.loads(json_path.read_text(encoding="utf-8"))
+    altitude_source = detail.get("altitude_source", "unknown")
+    threshold = 5.0 if altitude_source == "barometric" else 10.0
+
+    gain, loss = _hysteresis_gain_loss(elevations, threshold)
+    gain_r = round(gain, 1)
+    loss_r = round(loss, 1)
+
+    # Patch detail JSON
+    detail["elevation_gain_m"] = gain_r
+    detail["elevation_loss_m"] = loss_r
+    json_path.write_text(json.dumps(detail, indent=2, ensure_ascii=False), encoding="utf-8")
+
+    # Patch index.json summary
+    index_path = user_dir / "index.json"
+    if index_path.exists():
+        index = json.loads(index_path.read_text(encoding="utf-8"))
+        for s in index.get("activities", []):
+            if s.get("id") == activity_id:
+                s["elevation_gain_m"] = gain_r
+                break
+        index_path.write_text(
+            json.dumps(index, indent=2, ensure_ascii=False), encoding="utf-8"
+        )
+
+    return {
+        "elevation_gain_m": gain_r,
+        "elevation_loss_m": loss_r,
+        "threshold_m": threshold,
+        "source": altitude_source,
+    }
diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index 8e558fe..b241a23 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -1267,8 +1267,8 @@ async def post_activity(
     return JSONResponse({"ok": True})
 
 
-@app.post("/api/activity/{activity_id}/recalculate-elevation")
-async def recalculate_elevation_endpoint(
+@app.post("/api/activity/{activity_id}/recalculate-elevation/dem")
+async def recalculate_elevation_dem_endpoint(
     activity_id: str,
     bincio_session: Optional[str] = Cookie(default=None),
 ) -> JSONResponse:
@@ -1296,6 +1296,30 @@ async def recalculate_elevation_endpoint(
         raise HTTPException(422, str(e))
 
 
+@app.post("/api/activity/{activity_id}/recalculate-elevation/hysteresis")
+async def recalculate_elevation_hysteresis_endpoint(
+    activity_id: str,
+    bincio_session: Optional[str] = Cookie(default=None),
+) -> JSONResponse:
+    """Recompute gain/loss from original recorded elevation using source-aware hysteresis."""
+    user = _require_user(bincio_session)
+    _check_id(activity_id)
+    dd = _get_data_dir() / user.handle
+    if not (dd / "activities" / f"{activity_id}.json").exists():
+        raise HTTPException(404, "Activity not found")
+    try:
+        from bincio.extract.dem import recalculate_elevation_hysteresis
+        from bincio.render.merge import merge_one
+        result = recalculate_elevation_hysteresis(dd, activity_id)
+        merge_one(dd, activity_id)
+        _trigger_rebuild(user.handle)
+        return JSONResponse(result)
+    except FileNotFoundError as e:
+        raise HTTPException(404, str(e))
+    except ValueError as e:
+        raise HTTPException(422, str(e))
+
+
 @app.delete("/api/activity/{activity_id}", response_model=GenericResponse)
 async def delete_activity(
     activity_id: str,
diff --git a/site/src/components/EditDrawer.svelte b/site/src/components/EditDrawer.svelte
index ab4520e..985cef0 100644
--- a/site/src/components/EditDrawer.svelte
+++ b/site/src/components/EditDrawer.svelte
@@ -24,8 +24,8 @@
   let confirmDelete = false;
   let deleting = false;
 
-  // Elevation recalculation from DEM
-  let recalculating = false;
+  // Elevation recalculation
+  let recalculating: '' | 'dem' | 'hysteresis' = '';
   let recalcStatus = '';
   let recalcOk = false;
 
@@ -124,12 +124,12 @@
       : [...hideStats, key];
   }
 
-  async function recalculateElevation() {
-    recalculating = true;
+  async function recalculateElevation(method: 'dem' | 'hysteresis') {
+    recalculating = method;
     recalcStatus = '';
     recalcOk = false;
     try {
-      const res = await fetch(`${api}/recalculate-elevation`, { method: 'POST' });
+      const res = await fetch(`${api}/recalculate-elevation/${method}`, { method: 'POST' });
       const d = await res.json();
       if (!res.ok) throw new Error(d.detail ?? await res.text());
       recalcOk = true;
@@ -140,7 +140,7 @@
       recalcStatus = e.message;
       recalcOk = false;
     } finally {
-      recalculating = false;
+      recalculating = '';
     }
   }
 
@@ -292,14 +292,26 @@
       <!-- Elevation recalculation -->
       <div class="mb-4">
         <p class="text-xs text-zinc-500 mb-2">Elevation</p>
-        <button
-          type="button"
-          class="w-full flex items-center justify-center gap-2 px-3 py-2 rounded-lg border border-zinc-700 text-xs text-zinc-400 hover:border-zinc-500 hover:text-zinc-200 transition-colors disabled:opacity-40"
-          disabled={recalculating}
-          on:click={recalculateElevation}
-        >
-          {recalculating ? 'Querying terrain data…' : '⛰ Recalculate from terrain map (DEM)'}
-        </button>
+        <div class="flex gap-2">
+          <button
+            type="button"
+            class="flex-1 flex items-center justify-center gap-1 px-3 py-2 rounded-lg border border-zinc-700 text-xs text-zinc-400 hover:border-zinc-500 hover:text-zinc-200 transition-colors disabled:opacity-40"
+            disabled={recalculating !== ''}
+            on:click={() => recalculateElevation('hysteresis')}
+            title="Recompute from the original recorded elevation using noise-filtering (fast, no network)"
+          >
+            {recalculating === 'hysteresis' ? 'Computing…' : '📐 Recalculate (hysteresis)'}
+          </button>
+          <button
+            type="button"
+            class="flex-1 flex items-center justify-center gap-1 px-3 py-2 rounded-lg border border-zinc-700 text-xs text-zinc-400 hover:border-zinc-500 hover:text-zinc-200 transition-colors disabled:opacity-40"
+            disabled={recalculating !== ''}
+            on:click={() => recalculateElevation('dem')}
+            title="Replace elevation with SRTM terrain data from the internet (slower, most accurate for GPS-only devices)"
+          >
+            {recalculating === 'dem' ? 'Querying terrain…' : '⛰ Recalculate (DEM)'}
+          </button>
+        </div>
         {#if recalcStatus}
           <p class="text-xs mt-1.5 text-center" class:text-green-400={recalcOk} class:text-red-400={!recalcOk}>
             {recalcStatus}

From 88b24a6274ed4c580560dd0d9ce7ebe2aa12baf4 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Mon, 20 Apr 2026 21:43:28 +0200
Subject: [PATCH 119/124] docs: update elevation docs and changelog for
 two-button recalculation and DEM fix

---
 CHANGELOG.md       | 59 +++++++++++++++++++++++++++-------------------
 docs/elevation.md  | 58 +++++++++++++++++++++++++++++++++++----------
 docs/user-guide.md | 25 +++++++++++---------
 3 files changed, 94 insertions(+), 48 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 81b5d7c..a6ec2da 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,37 +26,48 @@ the last committed value. GPS noise is suppressed without losing real climbs.
   suppression, barometric vs GPS threshold difference, real climb approximation,
   unknown-treated-as-gps invariant
 
-### New feature — DEM-based elevation recalculation from the edit drawer
+### New feature — On-demand elevation recalculation from the edit drawer
 
-A new **"Recalculate from terrain map (DEM)"** button in the activity edit
-drawer replaces noisy GPS altitude with SRTM terrain data, then re-applies
-hysteresis accumulation to compute corrected gain/loss.
+Two new buttons in the activity edit drawer fix inaccurate elevation stats
+without re-uploading the file:
 
-This is the recommended fix for activities that still show inaccurate
-elevation after the hysteresis improvement (e.g. activities recorded before
-re-extracting from sources, or uploads where the source file had severe GPS
-altitude noise).
+**📐 Recalculate (hysteresis)** — re-applies source-aware hysteresis
+accumulation to the original recorded elevation. Fast, offline, no network
+required. Best for barometric altimeters (Karoo 2, Garmin with
+`enhanced_altitude`, Wahoo) that were extracted before the noise-filtering
+improvement.
 
-How it works:
-1. The server subsamples the activity's 1 Hz GPS track (one point every 10 s)
-2. Queries an Open-Elevation-compatible API for terrain elevation
-3. Linearly interpolates DEM elevation back to every GPS-valid second
-4. Applies 5 m hysteresis to compute the corrected gain and loss
-5. Writes the updated `elevation_m` array to the timeseries (chart updates)
-6. Patches `elevation_gain_m` / `elevation_loss_m` in the activity JSON and
-   `index.json` summary
+**⛰ Recalculate (DEM)** — replaces GPS altitude with SRTM terrain data, then
+re-applies hysteresis. Best for GPS-only devices where the recorded altitude
+is noisy.
 
-- **`bincio/extract/dem.py`** (new) — `lookup_elevations()` (batched HTTP POST,
-  Open-Elevation wire format) + `recalculate_elevation()` (full pipeline above)
-- **`POST /api/activity/{id}/recalculate-elevation`** — on both `bincio serve`
-  (auth-gated, triggers `merge_one` + rebuild) and `bincio edit` (no auth)
+DEM pipeline (revised after discovering that a naive 5 m threshold produced
+results worse than no correction on some activities):
+1. Subsample GPS track to one point per 10 s
+2. Query Open-Elevation API in batches of 512
+3. Linearly interpolate back to the full 1 Hz series
+4. Apply a **45 s sliding median filter** to suppress SRTM tile-boundary
+   steps (occur every ~7 s at cycling speed; were accumulating through 5 m
+   threshold and inflating gain by 50 %+)
+5. Apply **10 m hysteresis** to the smoothed series
+6. Back up original `elevation_m` as `elevation_m_original` in the timeseries
+   on the first DEM run (never overwrites an existing backup)
+
+- **`bincio/extract/dem.py`** (new) — `lookup_elevations()`,
+  `recalculate_elevation()` (DEM + median + 10 m hysteresis),
+  `recalculate_elevation_hysteresis()` (offline, reads `elevation_m_original`
+  if available, uses 5 m/10 m source-aware threshold)
+- **`POST /api/activity/{id}/recalculate-elevation/dem`** and
+  **`POST /api/activity/{id}/recalculate-elevation/hysteresis`** — on both
+  `bincio serve` (auth-gated, triggers `merge_one` + rebuild) and
+  `bincio edit` (no auth)
 - **`bincio serve --dem-url URL`** / **`bincio edit --dem-url URL`** — override
   the default DEM endpoint (also read from `DEM_URL` env var)
-- Default DEM endpoint: **`https://api.open-elevation.com`** — works out of the
-  box with no configuration
+- Default DEM endpoint: **`https://api.open-elevation.com`** — works out of
+  the box with no configuration
 - **`GET /api/me`** response gains `dem_configured: bool`
-- **`EditDrawer.svelte`** — button with spinner, shows `↑ Xm ↓ Ym` on success
-  or an inline error (e.g. if the DEM API is unreachable)
+- **`EditDrawer.svelte`** — two side-by-side buttons with individual spinners,
+  shows `↑ Xm ↓ Ym` on success or inline error
 
 ---
 
diff --git a/docs/elevation.md b/docs/elevation.md
index 8dfb2d2..c53fa61 100644
--- a/docs/elevation.md
+++ b/docs/elevation.md
@@ -277,23 +277,55 @@ require re-extraction from source files.
 
 ### Medium term — ✅ Implemented (2026-04-20)
 
-**On-demand DEM correction** via the edit drawer, using the Open-Elevation API
-(SRTM30 data):
+**Two on-demand recalculation options** in the activity edit drawer:
+
+#### Option 1 — Hysteresis (fast, offline)
+
+Re-applies the same source-aware hysteresis accumulation as the extract
+pipeline directly to the recorded elevation, with no network calls.
+
+- Uses `elevation_m_original` from the timeseries (the backup saved on the
+  first DEM run) if present; otherwise uses the current `elevation_m`.
+- Threshold: **5 m** for barometric sources, **10 m** for GPS.
+- Does not modify the elevation array in the timeseries — only patches
+  `elevation_gain_m` / `elevation_loss_m`.
+- Best for: devices with a barometric altimeter (e.g. Karoo 2, Garmin with
+  `enhanced_altitude`) where the recorded elevation is already accurate but
+  was extracted before the hysteresis fix was deployed.
+
+#### Option 2 — DEM terrain correction (SRTM30, requires network)
+
+Replaces the recorded GPS altitude with terrain data from an
+Open-Elevation-compatible API (SRTM30, ~30 m resolution):
 
 1. GPS track subsampled to one point per 10 s to minimise API calls.
 2. Terrain elevation fetched via `POST https://api.open-elevation.com/api/v1/lookup`
    in batches of 512.
 3. DEM elevation linearly interpolated back to the full 1 Hz series.
-4. 5 m hysteresis applied to the interpolated series.
-5. Timeseries and activity JSON patched in place; chart and stats update immediately.
+4. **45 s sliding median filter** applied to suppress SRTM tile-boundary
+   steps (these occur every ~7 s at cycling speed and accumulate as phantom
+   gain through a naive threshold).
+5. **10 m hysteresis** applied to the smoothed series.
+6. Original elevation backed up as `elevation_m_original` in the timeseries
+   (only on the first DEM run — never overwrites an existing backup).
+7. Timeseries and activity JSON patched in place; chart and stats update.
 
-Implementation: `bincio/extract/dem.py` + `POST /api/activity/{id}/recalculate-elevation`
-on both servers. Default endpoint: `https://api.open-elevation.com`; override with
+Best for: GPS-only devices (no barometric sensor) where the recorded
+altitude is noisy and the DEM terrain is a better ground truth.
+
+> **Why median + 10 m, not 5 m?**  SRTM30 at 1 Hz produces step changes at
+> tile boundaries of 1–3 m every few seconds.  A 5 m threshold lets most of
+> these through; they accumulate and can inflate the result by 50 %+.  The
+> 45 s median smooths the steps before the dead-band sees them; 10 m catches
+> any residual outliers.
+
+Implementation: `bincio/extract/dem.py` — `lookup_elevations()`,
+`recalculate_elevation()`, `recalculate_elevation_hysteresis()`.
+API endpoints: `POST /api/activity/{id}/recalculate-elevation/dem` and
+`POST /api/activity/{id}/recalculate-elevation/hysteresis` on both servers.
+Default DEM endpoint: `https://api.open-elevation.com`; override with
 `--dem-url` or `DEM_URL` env var.
 
-This is the recommended fix for activities uploaded before the hysteresis improvement,
-or any activity where GPS noise is severe.
-
 ---
 
 ## Implementation status
@@ -305,8 +337,8 @@ or any activity where GPS noise is severe.
 | `bincio/extract/parsers/gpx.py` | ✅ sets `altitude_source = "gps"` |
 | `bincio/extract/parsers/tcx.py` | ✅ sets `altitude_source = "gps"` |
 | `bincio/extract/metrics.py` | ✅ hysteresis `_elevation()` with source-aware threshold |
-| `bincio/extract/dem.py` | ✅ `lookup_elevations()` + `recalculate_elevation()` |
-| `bincio/serve/server.py` | ✅ `POST /api/activity/{id}/recalculate-elevation` |
-| `bincio/edit/server.py` | ✅ same endpoint (single-user) |
-| `site/src/components/EditDrawer.svelte` | ✅ "Recalculate from terrain map" button |
+| `bincio/extract/dem.py` | ✅ `lookup_elevations()` + `recalculate_elevation()` (median+10m) + `recalculate_elevation_hysteresis()` |
+| `bincio/serve/server.py` | ✅ `POST /api/activity/{id}/recalculate-elevation/{dem\|hysteresis}` |
+| `bincio/edit/server.py` | ✅ same endpoints (single-user) |
+| `site/src/components/EditDrawer.svelte` | ✅ two buttons: "Recalculate (hysteresis)" + "Recalculate (DEM)" |
 | `tests/test_metrics.py` | ✅ 5 parametric tests |
diff --git a/docs/user-guide.md b/docs/user-guide.md
index 66b3faf..5c59210 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -73,20 +73,23 @@ Click **Edit** on any activity to:
 
 Changes save instantly. The site rebuilds in the background.
 
-### Recalculating elevation from terrain data
+### Recalculating elevation
 
-If an activity shows an unrealistic elevation gain (common with GPS-only devices on flat
-routes, or with older Garmin/Wahoo files), the edit drawer has a
-**"Recalculate from terrain map (DEM)"** button.
+If an activity shows an unrealistic elevation gain, the edit drawer has two buttons:
 
-Clicking it replaces the recorded GPS altitude with SRTM terrain data from the
-[Open-Elevation API](https://open-elevation.com) and recomputes the gain and loss. The
-elevation chart and the summary stats both update. This usually brings the numbers in
-line with what Strava or your device's app reports.
+**📐 Recalculate (hysteresis)** — recomputes gain and loss from the original recorded
+elevation using a noise-filtering dead-band algorithm. Fast and offline — no network
+call. Best for devices with a barometric altimeter (Garmin, Karoo, Wahoo) whose
+elevation data is accurate but was extracted before the noise-filtering was improved.
 
-> **Note:** The correction requires a GPS track (activities marked *No GPS* cannot be
-> corrected). The DEM has ~30 m horizontal resolution, so very short or indoor activities
-> are not meaningfully improved.
+**⛰ Recalculate (DEM)** — replaces the recorded GPS altitude with SRTM terrain data
+from the [Open-Elevation API](https://open-elevation.com) and recomputes gain and
+loss. The elevation chart and summary stats both update. Best for GPS-only devices
+(no barometric sensor) where the recorded altitude is noisy.
+
+> **Note:** Both corrections require a GPS track (activities marked *No GPS* cannot be
+> corrected). The DEM option uses ~30 m resolution terrain data; very short or indoor
+> activities see little improvement from DEM correction.
 
 ### Photo gallery
 

From df496a017ffde98f33be9c77ade7e99ee93925f8 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 22 Apr 2026 10:57:28 +0200
Subject: [PATCH 120/124] fix: refine hysteresis recalculation with MA
 pre-smoothing and lower thresholds
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- dem.py: pre-smooth elevation with 30s moving average before hysteresis
  in recalculate_elevation_hysteresis(); thresholds drop from 5m/10m to
  1m (barometric) / 3m (GPS) — accurate after noise is smoothed out
- dem.py: widen DEM median-filter window 45s → 60s
- dem.py: rename response key source → altitude_source for consistency
- writer.py: write altitude_source into detail JSON at extract time
- tests/test_dem.py: 21 unit tests for pure functions and file-level hysteresis
- tests/test_edit_server.py: 11 TestClient API tests for both recalculate endpoints
- add httpx as dev dependency (required by FastAPI TestClient)
---
 CHANGELOG.md              |  35 ++++++
 bincio/extract/dem.py     |  67 ++++++++---
 bincio/extract/writer.py  |   1 +
 pyproject.toml            |   1 +
 tests/test_dem.py         | 232 ++++++++++++++++++++++++++++++++++++++
 tests/test_edit_server.py | 158 ++++++++++++++++++++++++++
 6 files changed, 481 insertions(+), 13 deletions(-)
 create mode 100644 tests/test_dem.py
 create mode 100644 tests/test_edit_server.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a6ec2da..7d1e83e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,40 @@
 # Changelog
 
+## [Unreleased] — 2026-04-22
+
+### Improvement — DEM & hysteresis algorithm refinements
+
+**Hysteresis-only recalculation** (`recalculate_elevation_hysteresis`) reworked:
+
+- Pre-smooths the elevation series with a **30 s centred moving average** (O(n)
+  cumsum implementation) before accumulation. Pre-smoothing suppresses barometric
+  quantization steps and GPS jitter without discarding real terrain.
+- Hysteresis thresholds reduced to **1 m (barometric)** / **3 m (GPS/unknown)**
+  — safe after pre-smoothing, and accurate enough to capture genuine small climbs
+  that the previous 5 m / 10 m thresholds were swallowing.
+- Response key renamed `source` → `altitude_source` for consistency with the
+  detail JSON field.
+
+**DEM recalculation** median-filter window widened from 45 s → **60 s** to more
+reliably absorb the occasional larger SRTM tile-boundary step.
+
+`altitude_source` is now written into the activity detail JSON at extract time
+(`writer.py`), making the hysteresis endpoint source-aware for all newly uploaded
+activities.
+
+### Tests
+
+- **`tests/test_dem.py`** (new) — 21 tests covering `_moving_average`,
+  `_median_filter`, `_hysteresis_gain_loss`, and `recalculate_elevation_hysteresis`
+  at the file level (no network, no extract pipeline)
+- **`tests/test_edit_server.py`** (new) — 11 `TestClient` API tests for both
+  `/recalculate-elevation/hysteresis` and `/recalculate-elevation/dem` endpoints,
+  covering happy path, error codes (404/422/503), path-traversal rejection, and
+  on-disk JSON patching
+- `httpx` added as a dev dependency (required by FastAPI `TestClient`)
+
+---
+
 ## [Unreleased] — 2026-04-20
 
 ### Improvement — Elevation gain accuracy (hysteresis accumulation)
diff --git a/bincio/extract/dem.py b/bincio/extract/dem.py
index ad6a4aa..3f89e61 100644
--- a/bincio/extract/dem.py
+++ b/bincio/extract/dem.py
@@ -35,7 +35,32 @@ _DEM_HYSTERESIS_M = 10.0
 # Median filter window (seconds / samples at 1 Hz) applied to DEM-interpolated
 # series before hysteresis.  45 s smooths SRTM tile steps while keeping real
 # climbs (typical cycling ramp > 100 m over > 2 min).
-_MEDIAN_WINDOW_S = 45
+_MEDIAN_WINDOW_S = 60
+
+# Moving-average window (seconds) applied to the 1 Hz elevation series before
+# hysteresis in the on-demand recalculation.  Pre-smoothing lets us use a
+# much lower dead-band (capturing real small climbs) while still suppressing
+# GPS jitter and barometric quantization noise.
+_MA_WINDOW_S = 30
+
+
+def _moving_average(values: list[float], window: int) -> list[float]:
+    """Apply a centred sliding-window moving average to *values*.
+
+    Edge handling: window shrinks symmetrically at both ends (same effective
+    behaviour as scipy's 'nearest' / numpy's 'reflect' mode).
+    """
+    half = window // 2
+    n = len(values)
+    out: list[float] = []
+    cumsum = [0.0] * (n + 1)
+    for i, v in enumerate(values):
+        cumsum[i + 1] = cumsum[i] + v
+    for i in range(n):
+        lo = max(0, i - half)
+        hi = min(n, i + half + 1)
+        out.append((cumsum[hi] - cumsum[lo]) / (hi - lo))
+    return out
 
 
 def _median_filter(values: list[float], window: int) -> list[float]:
@@ -275,18 +300,32 @@ def recalculate_elevation(
 def recalculate_elevation_hysteresis(user_dir: Path, activity_id: str) -> dict:
     """Recompute elevation gain/loss from the original recorded elevation data.
 
-    Uses the same source-aware hysteresis thresholds as the extract pipeline:
+    Algorithm
+    ---------
+    1. Read ``elevation_m_original`` (backup from a prior DEM run) if present,
+       otherwise read ``elevation_m`` from the timeseries.
+    2. Apply a :data:`_MA_WINDOW_S` (30 s) moving average to smooth out
+       barometric quantization steps and GPS jitter.
+    3. Apply a low dead-band threshold to the smoothed series:
+       - **1 m** for barometric altimeters (FIT files with ``enhanced_altitude``)
+       - **3 m** for GPS-derived altitude (GPX, TCX, FIT without enhanced_altitude)
 
-    - 5 m for barometric altimeters (FIT files with ``enhanced_altitude``)
-    - 10 m for GPS-derived altitude (GPX, TCX, FIT without barometric)
+    The 30 s pre-smoothing makes the low thresholds safe: after averaging,
+    0.2 m barometric quantization noise and short-period GPS jitter are
+    suppressed below the threshold, while real terrain changes (which persist
+    across the window) are preserved.
 
-    The elevation array in the timeseries is **not** modified.  If a DEM
-    correction was previously applied, the backup in ``elevation_m_original``
-    is used as the source so the original sensor data is recovered.
+    The elevation array in the timeseries is **not** modified — only the
+    summary stats in the detail JSON and ``index.json`` are patched.
+
+    ``altitude_source`` is read from the detail JSON (written by the extractor
+    for activities recorded after this field was added).  For older activities
+    it falls back to ``"unknown"`` → 3 m GPS threshold.
 
     Returns
     -------
-    dict with keys ``elevation_gain_m``, ``elevation_loss_m``.
+    dict with keys ``elevation_gain_m``, ``elevation_loss_m``,
+    ``threshold_m``, ``altitude_source``.
     """
     acts_dir = user_dir / "activities"
     json_path = acts_dir / f"{activity_id}.json"
@@ -299,7 +338,7 @@ def recalculate_elevation_hysteresis(user_dir: Path, activity_id: str) -> dict:
 
     ts = json.loads(ts_path.read_text(encoding="utf-8"))
 
-    # Use original elevation if a DEM backup exists, otherwise use current
+    # Prefer the pre-DEM backup; fall back to the current elevation array
     ele_arr: list[Optional[float]] = (
         ts.get("elevation_m_original") or ts.get("elevation_m") or []
     )
@@ -307,12 +346,14 @@ def recalculate_elevation_hysteresis(user_dir: Path, activity_id: str) -> dict:
     if len(elevations) < 2:
         raise ValueError("Not enough elevation data to compute gain/loss")
 
-    # Determine threshold from altitude_source stored in detail JSON
+    # Determine source-aware threshold
     detail = json.loads(json_path.read_text(encoding="utf-8"))
     altitude_source = detail.get("altitude_source", "unknown")
-    threshold = 5.0 if altitude_source == "barometric" else 10.0
+    threshold = 1.0 if altitude_source == "barometric" else 3.0
 
-    gain, loss = _hysteresis_gain_loss(elevations, threshold)
+    # Pre-smooth to suppress noise, then accumulate with low dead-band
+    smoothed = _moving_average(elevations, _MA_WINDOW_S)
+    gain, loss = _hysteresis_gain_loss(smoothed, threshold)
     gain_r = round(gain, 1)
     loss_r = round(loss, 1)
 
@@ -337,5 +378,5 @@ def recalculate_elevation_hysteresis(user_dir: Path, activity_id: str) -> dict:
         "elevation_gain_m": gain_r,
         "elevation_loss_m": loss_r,
         "threshold_m": threshold,
-        "source": altitude_source,
+        "altitude_source": altitude_source,
     }
diff --git a/bincio/extract/writer.py b/bincio/extract/writer.py
index 089c83b..c862a97 100644
--- a/bincio/extract/writer.py
+++ b/bincio/extract/writer.py
@@ -93,6 +93,7 @@ def write_activity(
         "source": source,
         "source_file": activity.source_file,
         "source_hash": activity.source_hash,
+        "altitude_source": activity.altitude_source,
         "strava_id": activity.strava_id,
         "duplicate_of": duplicate_of,
         "privacy": privacy,
diff --git a/pyproject.toml b/pyproject.toml
index 1cc7e61..f9ee2d1 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -77,6 +77,7 @@ dev = [
     "uvicorn[standard]>=0.29",
     "python-multipart>=0.0.9",
     "bcrypt>=4.1",
+    "httpx>=0.28.1",
 ]
 
 [tool.ruff]
diff --git a/tests/test_dem.py b/tests/test_dem.py
new file mode 100644
index 0000000..4c3136a
--- /dev/null
+++ b/tests/test_dem.py
@@ -0,0 +1,232 @@
+"""Tests for bincio.extract.dem — pure functions and file-level hysteresis.
+
+No API calls, no extract pipeline, no large data.
+"""
+from __future__ import annotations
+
+import json
+import math
+from pathlib import Path
+
+import pytest
+
+from bincio.extract.dem import (
+    _hysteresis_gain_loss,
+    _median_filter,
+    _moving_average,
+    recalculate_elevation_hysteresis,
+)
+
+
+# ── _moving_average ───────────────────────────────────────────────────────────
+
+def test_moving_average_flat():
+    data = [5.0] * 20
+    result = _moving_average(data, 5)
+    assert result == pytest.approx(data)
+
+
+def test_moving_average_ramp():
+    # A perfect ramp should be preserved (MA of linear is linear).
+    data = [float(i) for i in range(20)]
+    result = _moving_average(data, 5)
+    # Interior points should be exact; edges shrink the window so they may
+    # differ slightly — just check the middle is right.
+    for i in range(2, 18):
+        assert result[i] == pytest.approx(data[i], abs=1e-9)
+
+
+def test_moving_average_spike():
+    # A single spike should be strongly attenuated.
+    data = [100.0] * 60
+    data[30] = 200.0  # +100 m spike
+    result = _moving_average(data, 30)
+    # At the spike position the average over 30 samples pulls it down a lot
+    assert result[30] < 110.0
+
+
+def test_moving_average_length_preserved():
+    data = [1.0, 2.0, 3.0, 4.0, 5.0]
+    assert len(_moving_average(data, 3)) == 5
+
+
+def test_moving_average_single():
+    assert _moving_average([42.0], 5) == [42.0]
+
+
+# ── _median_filter ────────────────────────────────────────────────────────────
+
+def test_median_filter_flat():
+    data = [10.0] * 30
+    assert _median_filter(data, 5) == pytest.approx(data)
+
+
+def test_median_filter_spike_removed():
+    data = [100.0] * 61
+    data[30] = 300.0  # outlier spike
+    result = _median_filter(data, 45)
+    # The spike should be completely removed by the median
+    assert result[30] == pytest.approx(100.0)
+
+
+def test_median_filter_length_preserved():
+    data = list(range(10, 20, 1))
+    assert len(_median_filter([float(x) for x in data], 5)) == 10
+
+
+# ── _hysteresis_gain_loss ─────────────────────────────────────────────────────
+
+def test_hysteresis_flat():
+    data = [100.0] * 100
+    gain, loss = _hysteresis_gain_loss(data, 5.0)
+    assert gain == 0.0
+    assert loss == 0.0
+
+
+def test_hysteresis_single_climb():
+    # 50 m climb, well above any threshold.
+    data = [0.0] * 50 + [50.0] * 50
+    gain, loss = _hysteresis_gain_loss(data, 5.0)
+    assert gain == pytest.approx(50.0)
+    assert loss == pytest.approx(0.0)
+
+
+def test_hysteresis_up_and_down():
+    data = [0.0, 20.0, 0.0]
+    gain, loss = _hysteresis_gain_loss(data, 5.0)
+    assert gain == pytest.approx(20.0)
+    assert loss == pytest.approx(20.0)
+
+
+def test_hysteresis_noise_suppressed():
+    # Oscillation below threshold → nothing accumulates.
+    data = [100.0 + (3.0 if i % 2 == 0 else 0.0) for i in range(100)]
+    gain, loss = _hysteresis_gain_loss(data, 5.0)
+    assert gain == 0.0
+    assert loss == 0.0
+
+
+def test_hysteresis_noise_passes_low_threshold():
+    # Same oscillation does accumulate with a threshold below it.
+    data = [100.0 + (3.0 if i % 2 == 0 else 0.0) for i in range(100)]
+    gain, loss = _hysteresis_gain_loss(data, 1.0)
+    assert gain > 0.0
+
+
+def test_hysteresis_both_positive():
+    data = [0.0, 30.0, 10.0, 40.0]
+    gain, loss = _hysteresis_gain_loss(data, 5.0)
+    assert gain > 0.0
+    assert loss > 0.0
+
+
+# ── recalculate_elevation_hysteresis (file-level) ─────────────────────────────
+
+def _write_activity(tmp_path: Path, activity_id: str, elevations: list[float],
+                    altitude_source: str = "barometric",
+                    with_original_backup: bool = False) -> Path:
+    """Write minimal activity + timeseries JSON files for testing."""
+    acts = tmp_path / "activities"
+    acts.mkdir()
+
+    detail = {
+        "id": activity_id,
+        "elevation_gain_m": 0.0,
+        "elevation_loss_m": 0.0,
+        "altitude_source": altitude_source,
+    }
+    (acts / f"{activity_id}.json").write_text(json.dumps(detail))
+
+    ts: dict = {"t": list(range(len(elevations))), "elevation_m": elevations}
+    if with_original_backup:
+        ts["elevation_m_original"] = elevations
+    (acts / f"{activity_id}.timeseries.json").write_text(json.dumps(ts))
+
+    return tmp_path
+
+
+def test_hysteresis_recalc_barometric(tmp_path):
+    # Long ramp (1800 s = 30 min, +1 m/s) so the 30s MA edge effect is small.
+    # Edge effect ≈ window/2 metres on each side = ~15 m total on 1800 m climb.
+    elevations = [float(i) for i in range(1801)]  # 0→1800 m
+    _write_activity(tmp_path, "test-act", elevations, altitude_source="barometric")
+
+    result = recalculate_elevation_hysteresis(tmp_path, "test-act")
+
+    assert result["altitude_source"] == "barometric"
+    assert result["threshold_m"] == pytest.approx(1.0)
+    # Edge effect is ≤1% on a 30-min ramp
+    assert result["elevation_gain_m"] == pytest.approx(1800.0, rel=0.02)
+    assert result["elevation_loss_m"] == pytest.approx(0.0, abs=1.0)
+
+
+def test_hysteresis_recalc_gps(tmp_path):
+    elevations = [float(i) for i in range(1801)]
+    _write_activity(tmp_path, "test-act", elevations, altitude_source="gps")
+
+    result = recalculate_elevation_hysteresis(tmp_path, "test-act")
+
+    assert result["threshold_m"] == pytest.approx(3.0)
+    assert result["elevation_gain_m"] == pytest.approx(1800.0, rel=0.02)
+
+
+def test_hysteresis_recalc_uses_original_backup(tmp_path):
+    # Simulate: DEM already replaced elevation_m with flat terrain,
+    # but elevation_m_original holds the real barometric climb.
+    acts = tmp_path / "activities"
+    acts.mkdir()
+    aid = "test-act"
+
+    original = [float(i) for i in range(1801)]  # real 1800 m climb
+    dem_flat  = [900.0] * 1801                   # DEM said flat
+
+    detail = {"id": aid, "elevation_gain_m": 0.0, "elevation_loss_m": 0.0,
+              "altitude_source": "barometric"}
+    (acts / f"{aid}.json").write_text(json.dumps(detail))
+
+    ts = {"t": list(range(1801)), "elevation_m": dem_flat,
+          "elevation_m_original": original}
+    (acts / f"{aid}.timeseries.json").write_text(json.dumps(ts))
+
+    result = recalculate_elevation_hysteresis(tmp_path, aid)
+
+    # Should use the original backup (1800 m climb), not the flat DEM array (0 m)
+    assert result["elevation_gain_m"] == pytest.approx(1800.0, rel=0.02)
+
+
+def test_hysteresis_recalc_patches_detail_json(tmp_path):
+    elevations = [float(i) for i in range(101)]
+    _write_activity(tmp_path, "test-act", elevations)
+
+    recalculate_elevation_hysteresis(tmp_path, "test-act")
+
+    detail = json.loads((tmp_path / "activities" / "test-act.json").read_text())
+    assert "elevation_gain_m" in detail
+    assert detail["elevation_gain_m"] > 0
+
+
+def test_hysteresis_recalc_patches_index(tmp_path):
+    elevations = [float(i) for i in range(101)]
+    _write_activity(tmp_path, "test-act", elevations)
+
+    index = {"activities": [{"id": "test-act", "elevation_gain_m": 0.0}]}
+    (tmp_path / "index.json").write_text(json.dumps(index))
+
+    recalculate_elevation_hysteresis(tmp_path, "test-act")
+
+    updated = json.loads((tmp_path / "index.json").read_text())
+    assert updated["activities"][0]["elevation_gain_m"] > 0
+
+
+def test_hysteresis_recalc_missing_activity(tmp_path):
+    (tmp_path / "activities").mkdir()
+    with pytest.raises(FileNotFoundError):
+        recalculate_elevation_hysteresis(tmp_path, "nonexistent")
+
+
+def test_hysteresis_recalc_no_timeseries(tmp_path):
+    acts = tmp_path / "activities"
+    acts.mkdir()
+    (acts / "test-act.json").write_text(json.dumps({"id": "test-act"}))
+    with pytest.raises(ValueError, match="timeseries"):
+        recalculate_elevation_hysteresis(tmp_path, "test-act")
diff --git a/tests/test_edit_server.py b/tests/test_edit_server.py
new file mode 100644
index 0000000..3b15837
--- /dev/null
+++ b/tests/test_edit_server.py
@@ -0,0 +1,158 @@
+"""API tests for the /recalculate-elevation/* endpoints in bincio.edit.server.
+
+Uses httpx TestClient — no real network, no uvicorn process.
+The module-level `data_dir` variable is patched to a tmp_path fixture.
+"""
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+import pytest
+from fastapi.testclient import TestClient
+
+import bincio.edit.server as edit_server
+from bincio.edit.server import app
+
+CLIENT = TestClient(app, raise_server_exceptions=False)
+
+
+# ── Helpers ───────────────────────────────────────────────────────────────────
+
+def _make_activity(
+    data_dir: Path,
+    activity_id: str,
+    elevations: list[float],
+    altitude_source: str = "barometric",
+    elevation_m_original: list[float] | None = None,
+) -> None:
+    acts = data_dir / "activities"
+    acts.mkdir(exist_ok=True)
+
+    detail = {
+        "id": activity_id,
+        "elevation_gain_m": 0.0,
+        "elevation_loss_m": 0.0,
+        "altitude_source": altitude_source,
+    }
+    (acts / f"{activity_id}.json").write_text(json.dumps(detail))
+
+    ts: dict = {"t": list(range(len(elevations))), "elevation_m": elevations}
+    if elevation_m_original is not None:
+        ts["elevation_m_original"] = elevation_m_original
+    (acts / f"{activity_id}.timeseries.json").write_text(json.dumps(ts))
+
+    # Minimal index.json so merge_one doesn't crash
+    index_path = data_dir / "index.json"
+    if not index_path.exists():
+        index_path.write_text(json.dumps({"activities": [
+            {"id": activity_id, "elevation_gain_m": 0.0}
+        ]}))
+
+
+@pytest.fixture(autouse=True)
+def patch_data_dir(tmp_path, monkeypatch):
+    monkeypatch.setattr(edit_server, "data_dir", tmp_path)
+    return tmp_path
+
+
+# ── /recalculate-elevation/hysteresis ─────────────────────────────────────────
+
+class TestHysteresisEndpoint:
+    AID = "2024-01-01T080000Z-test-climb"
+
+    def test_returns_200_with_gain_loss(self, tmp_path):
+        elevations = [float(i) for i in range(1801)]
+        _make_activity(tmp_path, self.AID, elevations, altitude_source="barometric")
+
+        r = CLIENT.post(f"/api/activity/{self.AID}/recalculate-elevation/hysteresis")
+
+        assert r.status_code == 200
+        body = r.json()
+        assert "elevation_gain_m" in body
+        assert "elevation_loss_m" in body
+        assert body["elevation_gain_m"] > 0
+        assert body["altitude_source"] == "barometric"
+        assert body["threshold_m"] == pytest.approx(1.0)
+
+    def test_gps_source_uses_3m_threshold(self, tmp_path):
+        elevations = [float(i) for i in range(1801)]
+        _make_activity(tmp_path, self.AID, elevations, altitude_source="gps")
+
+        r = CLIENT.post(f"/api/activity/{self.AID}/recalculate-elevation/hysteresis")
+
+        assert r.status_code == 200
+        assert r.json()["threshold_m"] == pytest.approx(3.0)
+
+    def test_unknown_source_falls_back_to_gps_threshold(self, tmp_path):
+        elevations = [float(i) for i in range(1801)]
+        _make_activity(tmp_path, self.AID, elevations, altitude_source="unknown")
+
+        r = CLIENT.post(f"/api/activity/{self.AID}/recalculate-elevation/hysteresis")
+
+        assert r.status_code == 200
+        assert r.json()["threshold_m"] == pytest.approx(3.0)
+
+    def test_uses_original_elevation_when_dem_backup_present(self, tmp_path):
+        original = [float(i) for i in range(1801)]   # real 1800 m climb
+        dem_flat  = [900.0] * 1801                    # DEM flattened it
+        _make_activity(tmp_path, self.AID, dem_flat,
+                       altitude_source="barometric",
+                       elevation_m_original=original)
+
+        r = CLIENT.post(f"/api/activity/{self.AID}/recalculate-elevation/hysteresis")
+
+        assert r.status_code == 200
+        assert r.json()["elevation_gain_m"] == pytest.approx(1800.0, rel=0.02)
+
+    def test_patches_detail_json_on_disk(self, tmp_path):
+        elevations = [float(i) for i in range(1801)]
+        _make_activity(tmp_path, self.AID, elevations)
+
+        CLIENT.post(f"/api/activity/{self.AID}/recalculate-elevation/hysteresis")
+
+        detail = json.loads(
+            (tmp_path / "activities" / f"{self.AID}.json").read_text()
+        )
+        assert detail["elevation_gain_m"] > 0
+
+    def test_404_for_missing_activity(self, tmp_path):
+        (tmp_path / "activities").mkdir()
+        r = CLIENT.post("/api/activity/2024-01-01T080000Z-no-such/recalculate-elevation/hysteresis")
+        assert r.status_code == 404
+
+    def test_422_for_missing_timeseries(self, tmp_path):
+        acts = tmp_path / "activities"
+        acts.mkdir()
+        aid = self.AID
+        (acts / f"{aid}.json").write_text(json.dumps({"id": aid, "altitude_source": "gps"}))
+        # No timeseries file
+
+        r = CLIENT.post(f"/api/activity/{aid}/recalculate-elevation/hysteresis")
+        assert r.status_code == 422
+
+    def test_400_for_invalid_id(self):
+        r = CLIENT.post("/api/activity/../etc/passwd/recalculate-elevation/hysteresis")
+        assert r.status_code in (400, 404, 422)
+
+
+# ── /recalculate-elevation/dem ────────────────────────────────────────────────
+
+class TestDemEndpoint:
+    AID = "2024-01-01T080000Z-test-climb"
+
+    def test_503_when_dem_url_not_configured(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(edit_server, "dem_url", "")
+        r = CLIENT.post(f"/api/activity/{self.AID}/recalculate-elevation/dem")
+        assert r.status_code == 503
+
+    def test_404_for_missing_activity(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(edit_server, "dem_url", "https://api.open-elevation.com")
+        (tmp_path / "activities").mkdir()
+        r = CLIENT.post("/api/activity/2024-01-01T080000Z-no-such/recalculate-elevation/dem")
+        assert r.status_code == 404
+
+    def test_400_for_invalid_id(self, monkeypatch):
+        monkeypatch.setattr(edit_server, "dem_url", "https://api.open-elevation.com")
+        r = CLIENT.post("/api/activity/../../evil/recalculate-elevation/dem")
+        assert r.status_code in (400, 404, 422)

From 6dc1fb6f2043bf1649728fa1ebdea0c110234c62 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 22 Apr 2026 11:01:01 +0200
Subject: [PATCH 121/124] fix: prune dist/data before rsync in _trigger_rebuild
 and manual rebuild endpoint

Same fix as cea1dbc (post-receive hook) but missed in server.py: Astro resolves
the public/data symlink and copies all activity JSON into dist/; without pruning,
every Strava sync / upload / edit that triggers a full build + rsync duplicates
GBs of data into the nginx webroot.

Both rsync callsites now rm -rf dist/data + pass --exclude=data/ to rsync.
---
 bincio/serve/server.py | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/bincio/serve/server.py b/bincio/serve/server.py
index b241a23..d69ec15 100644
--- a/bincio/serve/server.py
+++ b/bincio/serve/server.py
@@ -375,8 +375,15 @@ def _trigger_rebuild(handle: str) -> None:
                                   _handle, result.returncode, result.stdout, result.stderr)
                     else:
                         log.info("rebuild[%s]: build done, rsyncing", _handle)
+                        # Prune dist/data/ before rsync: Astro resolves the
+                        # public/data symlink and copies all activity JSON into
+                        # dist/, but nginx already serves /data/ directly from
+                        # the live data dir — rsyncing it would duplicate GBs.
+                        dist_data = Path(_site_dir) / "dist" / "data"
+                        if dist_data.exists():
+                            shutil.rmtree(dist_data)
                         rsync = subprocess.run(
-                            ["rsync", "-a", "--delete",
+                            ["rsync", "-a", "--delete", "--exclude=data/",
                              f"{_site_dir}/dist/", _webroot + "/"],
                             capture_output=True,
                             text=True,
@@ -707,8 +714,12 @@ async def admin_rebuild_sync(
     }
 
     if result.returncode == 0 and webroot:
+        dist_data = site_dir / "dist" / "data"
+        if dist_data.exists():
+            shutil.rmtree(dist_data)
         rsync = subprocess.run(
-            ["rsync", "-a", "--delete", f"{site_dir}/dist/", str(webroot) + "/"],
+            ["rsync", "-a", "--delete", "--exclude=data/",
+             f"{site_dir}/dist/", str(webroot) + "/"],
             capture_output=True, text=True, timeout=120,
         )
         resp["rsync_returncode"] = rsync.returncode

From a69a2f240ad8d9073af75f5aa36b008a1f3ef1b3 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 22 Apr 2026 17:09:44 +0200
Subject: [PATCH 122/124] docs: mark changelog 0.1.0 public release
 (2026-04-22)

---
 CHANGELOG.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d1e83e..6e2b646 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## [Unreleased] — 2026-04-22
+## [0.1.0] — 2026-04-22
 
 ### Improvement — DEM & hysteresis algorithm refinements
 
@@ -35,7 +35,7 @@ activities.
 
 ---
 
-## [Unreleased] — 2026-04-20
+## [0.1.0-dev] — 2026-04-20
 
 ### Improvement — Elevation gain accuracy (hysteresis accumulation)
 
@@ -106,7 +106,7 @@ results worse than no correction on some activities):
 
 ---
 
-## [Unreleased] — 2026-04-16
+## [0.1.0-dev] — 2026-04-16
 
 ### New feature — Self-service user settings page
 
@@ -201,7 +201,7 @@ No email infrastructure required. Flow:
 
 ---
 
-## [Unreleased] — 2026-04-10
+## [0.1.0-dev] — 2026-04-10
 
 ### New feature — Per-instance user limit
 
@@ -336,7 +336,7 @@ automatically.
 
 ---
 
-## [Unreleased] — 2026-04-06
+## [0.1.0-dev] — 2026-04-06
 
 ### New feature — Strava sync from UI
 
@@ -373,7 +373,7 @@ bincio edit --strava-client-id YOUR_ID --strava-client-secret YOUR_SECRET
 `site/.env`, regardless of whether the edit server is running. This is intentional — the env
 var is the "edit mode enabled" flag. Remove it from `.env` to hide the button.
 
-## [Unreleased] — 2026-04-01
+## [0.1.0-dev] — 2026-04-01
 
 ### Security fixes (second-pass audit)
 

From 7c171c9e9d57b9b99a9c228bf953cbffbc135df5 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 22 Apr 2026 17:14:10 +0200
Subject: [PATCH 123/124] docs: replace VPS IP with placeholder in elevation.md

---
 docs/elevation.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/elevation.md b/docs/elevation.md
index c53fa61..706e02e 100644
--- a/docs/elevation.md
+++ b/docs/elevation.md
@@ -92,7 +92,7 @@ own algorithm uses internal hysteresis to report ~153m.
 
 ### Activity 2 — m4xw3ll__, 2026-04-14T161945Z (Bryton Rider, FIT)
 
-- **URL:** http://95.216.55.151/activity/2026-04-14T161945Z/
+- **URL:** http://your-instance/activity/2026-04-14T161945Z/
 - **Bincio reports:** 1285.2m gain
 - **Correct estimate:** ~885m (Strava / device reading)
 - **Excess:** ~400m (45% overestimate)

From 0f1876a33c84894f540215de519d89f22b50a120 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 22 Apr 2026 17:22:31 +0200
Subject: [PATCH 124/124] chore: untrack CLAUDE.md, publish.sh,
 docs/squash-for-github.md; gitignore dns/nginx scratch files

---
 .gitignore                |   5 +
 CLAUDE.md                 | 338 --------------------------------------
 docs/squash-for-github.md |  78 ---------
 publish.sh                |  82 ---------
 4 files changed, 5 insertions(+), 498 deletions(-)
 delete mode 100644 CLAUDE.md
 delete mode 100644 docs/squash-for-github.md
 delete mode 100755 publish.sh

diff --git a/.gitignore b/.gitignore
index fa7a52d..f157861 100644
--- a/.gitignore
+++ b/.gitignore
@@ -39,6 +39,11 @@ todo.md
 site/public/data
 site/public/*.whl
 .claude/settings.local.json
+dns.md
+ngix_bincio.md
+publish.sh
+docs/squash-for-github.md
+CLAUDE.md
 
 # Capacitor native projects
 # Commit these if you want to track native code changes;
diff --git a/CLAUDE.md b/CLAUDE.md
deleted file mode 100644
index ff8c7fa..0000000
--- a/CLAUDE.md
+++ /dev/null
@@ -1,338 +0,0 @@
-# BincioActivity — Context for Claude
-
-## What this project is
-
-BincioActivity is a federated, open-source, self-hosted activity stats platform
-(think personal Strava). Two-stage pipeline:
-
-1. **`bincio extract`** (Python): GPX/FIT/TCX → BAS JSON data store
-2. **`bincio render`** (Astro/Node): BAS data store → static website
-
-The BAS (BincioActivity Schema) JSON files are the federation protocol.
-Anyone can publish their data as BAS JSON and others can include it.
-
-## Key design decisions
-
-- **Unified data layout** — single-user and multi-user share the same structure: activities always live in `{data-root}/{handle}/`. The only difference is the presence of `instance.db` (auth). No mode switching, no migration.
-- **No database, no server** — everything is static files; multi-user VPS mode adds SQLite auth only
-- **Python with uv** for the extract stage
-- **Astro + Svelte + Tailwind + MapLibre GL + Observable Plot** for the site
-- **Haversine** (not geopy) for distance calculations (10x faster)
-- **Worker initializer pattern** for ProcessPoolExecutor — large shared data
-  (strava_lookup dict, known_hashes frozenset) is sent once per worker via
-  `initializer=`, not once per task
-- **BAS activity IDs** always use UTC with Z suffix for URL safety
-- **TCX files** from Garmin use both `http://` and `https://` namespace URIs —
-  parser handles both
-- **Shard manifest for multi-user** — no activity data duplication; root `index.json`
-  lists user shard URLs; browser resolves all shards concurrently; same mechanism
-  handles yearly pagination and remote federation
-- **Iterative RDP** implemented inline in `simplify.py` — no `rdp` PyPI package
-  (not available as a pure-Python wheel for Pyodide)
-
-## Your data
-
-- Source: `~/your-activity-data/`
-  - `activities/` — Strava export (GPX, FIT, TCX, all with .gz variants)
-  - Any subdirectories with FIT files from Garmin/Karoo devices
-  - `activities.csv` — Strava metadata (names, descriptions, gear)
-- Extracted output: `~/bincio_data/` (or `/tmp/bincio_test/` for testing)
-
-Configure input paths in `extract_config.yaml`.
-
-## Project structure
-
-```
-bincio/                    Python package
-  extract/
-    models.py              DataPoint, ParsedActivity, LapData
-    parsers/               GPX, FIT, TCX parsers + factory
-    sport.py               sport name normalisation
-    metrics.py             haversine-based stats computation (single pass)
-    timeseries.py          downsample to 1Hz, build BAS timeseries object
-    simplify.py            RDP track simplification → GeoJSON (iterative, no rdp dep)
-    dedup.py               exact (hash) + near-duplicate detection
-    strava_csv.py          Strava activities.csv importer
-    writer.py              BAS JSON + GeoJSON writer
-    config.py              extract_config.yaml loader
-    cli.py                 `bincio extract` CLI
-  render/
-    cli.py                 `bincio render` CLI (symlinks data, runs astro build/dev)
-    merge.py               sidecar edit overlay (produces _merged/)
-  edit/
-    cli.py                 `bincio edit` CLI (single-user local only)
-    server.py              FastAPI write API for the edit drawer
-  serve/
-    cli.py                 `bincio serve` CLI (multi-user VPS)
-    server.py              FastAPI: auth, user mgmt, write API (auth-gated)
-    db.py                  SQLite data layer (users, sessions, invites)
-    init_cmd.py            `bincio init` CLI: bootstrap instance.db + admin user
-schema/
-  bas-v1.schema.json       JSON Schema for BAS
-SCHEMA.md                  Human-readable BAS spec
-site/                      Astro project
-  src/
-    layouts/Base.astro     Reads instancePrivate from index.json; injects auth wall
-    pages/
-      index.astro           Activity feed (loads index.json client-side)
-      activity/[id].astro   Single activity (SSG, loads detail JSON client-side)
-      activity/local/       IDB-only activities (converted locally via Pyodide)
-      stats/index.astro     Heatmap + year totals
-      u/[handle].astro      Per-user profile pages (multi-user)
-      login/index.astro     Login form (public page)
-      register/index.astro  Registration with invite code (public page)
-      invites/index.astro   Invite management
-      convert/index.astro   Local file conversion via Pyodide (browser-only)
-    components/
-      ActivityFeed.svelte   Card grid, sport filter, pagination
-      ActivityDetail.svelte Map + stats + charts + photo gallery
-      ActivityMap.svelte    MapLibre GL (gradient track, linked hover dot)
-      ActivityCharts.svelte Observable Plot (elevation/speed/HR/cadence tabs)
-      StatsView.svelte      Yearly heatmap + totals
-      EditDrawer.svelte     Slide-in edit panel (visible when PUBLIC_EDIT_URL set)
-      LocalActivityDetail.svelte  Detail view for IDB-only (locally converted) activities
-    lib/
-      types.ts              BAS TypeScript types
-      format.ts             formatDistance, formatDuration, sportIcon, etc.
-      localstore.ts         IndexedDB store for locally converted activities
-      dataloader.ts         Fetches index.json, resolves shards recursively
-```
-
-## How to run
-
-```bash
-# Single-user (no login)
-cd ~/src/bincio_activity
-uv run bincio extract --output /tmp/bincio_test  # → /tmp/bincio_test/{handle}/
-uv run bincio dev --data-dir /tmp/bincio_test
-# → http://localhost:4321/u/{handle}/
-
-# Multi-user (with login)
-uv run bincio init --data-dir /tmp/bincio_test --handle dave
-uv run bincio extract --output /tmp/bincio_test  # → /tmp/bincio_test/dave/
-uv run bincio dev --data-dir /tmp/bincio_test
-# → http://localhost:4321  (login required)
-
-# bincio dev does everything: merges sidecars, writes manifest,
-# symlinks public/data, starts bincio serve (if instance.db exists),
-# starts astro dev. Ctrl+C stops all.
-
-# Tests
-uv run pytest
-```
-
-## MapLibre GL + Vite/Astro — known gotchas
-
-Learnt the hard way during debugging (March 2026):
-
-- **`maplibregl.workerUrl = ...` is the v3 API and silently no-ops in v4+.**
-  The v5 API is `maplibregl.setWorkerUrl(url)`, but you don't need it at all in a
-  normal Vite environment — MapLibre handles the blob worker automatically.
-
-- **`optimizeDeps: { exclude: ['maplibre-gl'] }` breaks tile loading.**
-  It prevents Vite from converting MapLibre's UMD bundle to ESM. The UMD bundle
-  uses AMD `define()` internally; served raw, the tile worker blob fails silently →
-  black map, no tiles. The correct setting is `include: ['maplibre-gl']`.
-
-- **`build.target: 'es2022'` (and `optimizeDeps.esbuildOptions.target`) is required.**
-  MapLibre's dependencies use ES2022 class field syntax. If esbuild downgrades it,
-  helpers like `__publicField` aren't available inside the serialised worker blob
-  scope → tile loading fails. This is a known upstream issue (maplibre-gl-js #6680).
-
-- **Use static imports, not dynamic `await import('maplibre-gl')`, when possible.**
-  With `client:only="svelte"` in Astro, SSR never runs for the component so there is
-  no `window is not defined` risk. Static import lets Vite pre-bundle correctly.
-
-- **Use `client:only="svelte"` (not `client:load`) for the activity detail page.**
-  `client:load` does SSR + hydration; complex interactive components with MapLibre
-  can hit hydration mismatch issues. `client:only` mounts fresh on the client only.
-
-- **MapLibre v5 requires explicit `center` and `zoom` in the Map constructor.**
-  v4 silently defaulted to `center: [0,0], zoom: 0`. v5 leaves internal projection
-  state undefined → `Cannot read properties of undefined (reading 'lng')` crashes
-  on any operation that touches coordinates (markers, resize, render). Always pass
-  `center` and `zoom` even if you plan to `fitBounds` later.
-
-- **MapLibre v5 requires `setLngLat()` on markers before `.addTo(map)`.**
-  v4 tolerated markers without coordinates. v5 calls `Marker._update()` inside
-  `addTo()`, which needs valid lngLat → same `'lng'` crash. Set a dummy `[0, 0]`
-  if the real position arrives later (e.g. hover markers).
-
-## Observable Plot — known gotchas
-
-- **Curve names are hyphenated, not camelCase.**
-  Use `"monotone-x"`, not `"monotoneX"`. Plot uses its own curve name registry
-  (not raw d3 identifiers). Wrong names throw `unknown curve` at runtime.
-
-The working `astro.config.mjs` Vite section:
-```js
-vite: {
-  optimizeDeps: {
-    include: ['maplibre-gl'],
-    esbuildOptions: { target: 'es2022' },
-  },
-  build: { target: 'es2022' },
-},
-```
-
-## Activity sidecar edits — design spec
-
-Users edit activities via **sidecar markdown files** in the data dir.
-No database, no server — consistent with the project's static-files-only philosophy.
-
-### File naming
-
-```
-~/bincio_data/
-  activities/{id}.json    ← immutable extract output
-  edits/{id}.md           ← user edits (sidecar)
-  edits/images/{id}/      ← uploaded photos
-  _merged/                ← render-time merge output (gitignored-style)
-```
-
-### Sidecar format
-
-```markdown
----
-title: "Epic climb up Monte Grappa"
-sport: cycling
-hide_stats: [cadence]
-highlight: true
-private: false
-gear: "Trek Domane"
----
-
-Rode with friends. Legs felt great after the rest week...
-```
-
-The sidecar `private: true` flag maps to `privacy: "unlisted"` in the merged JSON.
-**`unlisted`** means: not shown in the public feed, but the activity detail, GPS track,
-and timeseries are all accessible by direct URL (security by obscurity, same model
-as the detail JSON itself). Use `no_gps` if the GPS track must not be published.
-
-### Editing UX: drawer in Astro + `bincio edit` write API
-
-- `bincio edit --data-dir ~/bincio_data` starts a FastAPI server on port 4041
-- Set `PUBLIC_EDIT_URL=http://localhost:4041` in `site/.env` to enable the edit button
-- Clicking Edit on any activity detail page opens a slide-in drawer
-- Saving writes the sidecar and triggers `merge_all()` automatically
-- `bincio render` always runs `merge_all()` before build/serve and symlinks `public/data` → `_merged/`
-
-### `PUBLIC_EDIT_URL` as feature flag
-
-- **Unset** → no Edit button, normal static site
-- **Set** → edit drawer enabled; lives in `site/.env` (gitignored)
-
-## Multi-user VPS architecture
-
-`bincio serve` is a FastAPI app that owns auth and write ops. nginx proxies `/api/*` to it; static files are served by nginx directly. The Vite dev server replicates this proxy for local testing.
-
-Key facts:
-- Session cookie: `bincio_session`, httpOnly, SameSite=Lax, 30-day max-age
-- Rate limiting: 10 login attempts / 15 min / IP (in-memory, resets on restart)
-- Invite limits: admins unlimited, regular users 3 each (`_MAX_USER_INVITES` in `db.py`)
-- Instance privacy: `instance.private=true` in root `index.json` → `Base.astro` injects a
-  `fetch('/api/me')` auth wall; `/login/` and `/register/` have `public={true}` to skip it
-- Incremental rebuild: `POST /api/activity/{id}` triggers `bincio render --handle {user}`
-  as a fire-and-forget subprocess (only if `--site-dir` was passed to `bincio serve`)
-
-### Password reset (no email — out-of-band code)
-
-There is no email infrastructure. Password resets work via admin-generated one-time codes:
-
-1. **Admin** opens `/admin/` → clicks **"Reset pwd"** next to the user → a code appears
-   inline (monospace, click to copy). Valid for **24 hours**, tied to that handle.
-2. **Admin** sends the code out-of-band (Signal, Telegram, etc.).
-3. **User** goes to `/reset-password/`, enters handle + code + new password → done.
-
-API:
-- `POST /api/admin/users/{handle}/reset-password-code` (admin) → `{code, expires_in_hours: 24}`
-- `POST /api/auth/reset-password` (public) → body `{handle, code, password}`
-
-DB: `reset_codes` table `(code, handle, created_by, created_at, expires_at, used_at)`.
-Generating a new code invalidates any prior unused code for the same handle.
-Used codes are kept for audit. `change_password()` in `db.py` updates the bcrypt hash.
-- Write API in `bincio serve` delegates to `bincio.edit.server._apply_sidecar_edit`; the
-  Strava sync delegates to `bincio.edit.server.strava_sync` with a temporary data_dir swap
-
-## Instance settings (stored in `instance.db` `settings` table)
-
-| Key | Default | Set by | Description |
-|-----|---------|--------|-------------|
-| `max_users` | — (unlimited) | `bincio init --max-users N` or `bincio serve --max-users N` | Cap on registered users; 0 or absent = unlimited |
-| `store_originals` | `true` | `bincio init` (first run only) | Whether uploaded source files and raw Strava API data are kept in `{user_dir}/originals/` |
-
-`get_setting` / `set_setting` in `db.py` are the read/write accessors. Any new instance-wide flag should use this table rather than a new column.
-
-## Original file storage
-
-When a user uploads a FIT/GPX/TCX file the server may keep the source in `{user_dir}/originals/{filename}` rather than always deleting it after extraction. The per-upload `store_original` form field controls the behaviour for a single upload (sent by the UI checkbox). The instance-level `store_originals` setting provides the default that pre-populates the checkbox (read from `GET /api/me` → `store_originals_default`).
-
-For Strava sync, `store_originals=true` causes `POST /api/strava/sync` to save `{"meta":…,"streams":…}` JSON per activity to `{user_dir}/originals/strava/{activity_id}.json`.
-
-## Feedback storage
-
-User feedback submitted via `/feedback/` is stored as flat files under the instance data root (NOT inside a user's own data dir):
-
-```
-{data_root}/
-  _feedback/
-    {handle}.json          ← append-only list of submissions for that user
-    {handle}/
-      {timestamp}_{token}_{filename}   ← attached images
-```
-
-Each entry in `{handle}.json`:
-```json
-{ "id": "1712345678_ab12cd34", "handle": "brut", "submitted_at": "...", "text": "...", "images": ["..."] }
-```
-
-To read feedback on the VPS:
-```bash
-cat /var/bincio/data/_feedback/brut.json | python3 -m json.tool
-ls  /var/bincio/data/_feedback/brut/   # attached images
-```
-
-There is no admin UI for feedback — it is intentionally read via SSH/shell only.
-
-## About pages
-
-Static public pages at `/about/` (EN), `/about/it/` (IT), `/about/es/` (ES), `/about/ca/` (CA). All use `public={true}` to bypass the auth wall. Each page:
-- Shows a Ko-fi donation button at the top.
-- Fetches `GET /api/stats` on load and renders a **community/invitation tree** (member count, each user's display name, membership duration, and who invited them). Hidden silently in single-user mode.
-- Contains project description, data storage explanation, early-software caveat, and liability disclaimer.
-
-## Known issues / next steps
-
-- `bincio render --watch` mode not yet implemented as a standalone command, but `bincio dev` now watches the data directory via `watchfiles` (bundled with uvicorn) and re-runs `merge_all` automatically when sidecars or activity files change
-- Activity IDs in older test data may use `+0000` format (pre-fix); re-run extract to get `Z` format
-- Some activities appear with both untitled and titled IDs (near-dedup timing race)
-- Remote federation (remote shard URLs in root manifest) is parsed but not yet displayed with attribution in the UI
-- The `site/.env` file is gitignored — copy from `site/.env.example`
-
-## What "good" looks like (not yet done)
-
-- [ ] Friends/federation pages in site (remote shard attribution)
-- [ ] Personal records page
-- [ ] Activity search / full-text filter in feed
-- [ ] GitHub Actions template for auto-publish
-- [ ] Karoo/Garmin Connect importers beyond Strava
-- [ ] `bincio render --watch` incremental rebuild on sidecar/data changes
-- [ ] Highlight badge in activity feed cards
-- [x] Per-instance user limit (`max_users` setting, enforced at registration)
-- [x] Original file storage option (per-upload checkbox + `store_originals` instance setting)
-- [x] About page — multilingual (EN/IT/ES/CA), Ko-fi button, community invitation tree
-- [x] `GET /api/stats` — public endpoint with member count and invitation tree
-- [x] `bincio.render.merge` — sidecar parser, `_merged/` output, private filter, highlight sort
-- [x] `bincio edit` FastAPI write API (GET/POST activity, image upload/delete, triggers merge)
-- [x] `EditDrawer.svelte` — slide-in edit UI in the Astro site
-- [x] `PUBLIC_EDIT_URL` feature flag
-- [x] Markdown rendering in activity description with image path rewriting
-- [x] Photo gallery with lightbox on activity detail page
-- [x] `bincio serve` — multi-user VPS server (auth, invites, write API)
-- [x] `bincio init` — instance bootstrap (SQLite, admin user, root manifest)
-- [x] Login, register, invites pages
-- [x] Per-user profile pages (`/u/{handle}/`)
-- [x] Instance privacy (auth wall, private-by-default)
-- [x] Shard-based combined feed (no duplication, concurrent resolution)
-- [x] Local file conversion via Pyodide (`/convert/` page, IDB storage)
diff --git a/docs/squash-for-github.md b/docs/squash-for-github.md
deleted file mode 100644
index 53a6460..0000000
--- a/docs/squash-for-github.md
+++ /dev/null
@@ -1,78 +0,0 @@
-# squash-for-github branch strategy
-
-`squash-for-github` is a curated public-facing branch. It has its own orphan
-history (unrelated to `main`) and grows by appending one large squash commit
-each time you want to publish a batch of work.
-
-## When to use
-
-Whenever `main` has accumulated enough work worth publishing — typically after a
-meaningful feature set or before tagging a release.
-
-## How it works
-
-`squash-for-github` and `main` have completely unrelated histories (different
-root commits). Because of this, `git merge --squash` won't work. Instead, use
-`git commit-tree` to create a new commit that carries **main's file tree** but
-is **parented to the current squash-for-github tip**.
-
-## Steps
-
-1. **Collect commit messages** to write the summary:
-
-   ```bash
-   git log --oneline main ^squash-for-github
-   ```
-
-2. **Switch to the branch:**
-
-   ```bash
-   git checkout squash-for-github
-   ```
-
-3. **Create the squash commit** (replace the message with your summary):
-
-   ```bash
-   NEW=$(git commit-tree main^{tree} -p HEAD -m "feat: your summary here")
-   git reset --hard $NEW
-   ```
-
-   Or as a one-liner with a heredoc for a multi-line message:
-
-   ```bash
-   git reset --hard $(git commit-tree main^{tree} -p HEAD -m "$(cat <<'EOF'
-   feat: short title
-
-   - bullet one
-   - bullet two
-   EOF
-   )")
-   ```
-
-4. **Verify:**
-
-   ```bash
-   git log --oneline squash-for-github | head -5
-   ```
-
-5. **Push** when ready:
-
-   ```bash
-   git push origin squash-for-github
-   # or force-push if you've rewritten history on the remote:
-   git push --force origin squash-for-github
-   ```
-
-6. **Return to main:**
-
-   ```bash
-   git checkout main
-   ```
-
-## Why not `git merge --squash`?
-
-The two branches share no common ancestor, so git refuses with
-`fatal: refusing to merge unrelated histories`. `git commit-tree` bypasses this
-by directly constructing the commit object: it takes the tree (file snapshot)
-from `main`, sets the parent to the current `squash-for-github` tip, and
-attaches your custom message — no merge machinery needed.
diff --git a/publish.sh b/publish.sh
deleted file mode 100755
index 814b3d9..0000000
--- a/publish.sh
+++ /dev/null
@@ -1,82 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-REMOTE="github-public"
-BRANCH="main"
-LOCAL_DIR="$(cd "$(dirname "$0")" && pwd)"
-PUBLISH_DIR="${LOCAL_DIR}/publish"
-MANIFEST="${PUBLISH_DIR}/manifest"
-DRY_RUN=false
-
-for arg in "$@"; do
-    case "$arg" in
-        --dry-run) DRY_RUN=true ;;
-        *) echo "Unknown argument: $arg"; exit 1 ;;
-    esac
-done
-
-if ! git -C "$LOCAL_DIR" remote get-url "$REMOTE" &>/dev/null; then
-    echo "ERROR: remote '${REMOTE}' not found."
-    echo "  git remote add ${REMOTE} https://github.com/brutsalvadi/bincio-activity.git"
-    exit 1
-fi
-if [[ -n "$(git -C "$LOCAL_DIR" status --porcelain --untracked-files=no)" ]]; then
-    echo "ERROR: uncommitted changes. Commit or stash first."
-    exit 1
-fi
-if [[ ! -f "$MANIFEST" ]]; then
-    echo "ERROR: manifest not found at ${MANIFEST}"
-    exit 1
-fi
-
-# Collect file list AND stage into temp dir before touching git state.
-# Both must happen here — `git rm -rf .` removes the manifest itself,
-# so it can't be re-read during the orphan branch step.
-STAGING="$(mktemp -d)"
-trap 'rm -rf "$STAGING"' EXIT
-FILES=()
-
-while IFS= read -r relpath || [[ -n "$relpath" ]]; do
-    [[ -z "$relpath" || "$relpath" == \#* ]] && continue
-    override="${PUBLISH_DIR}/${relpath}"
-    original="${LOCAL_DIR}/${relpath}"
-    dest="${STAGING}/${relpath}"
-    mkdir -p "$(dirname "$dest")"
-    if [[ -f "$override" ]]; then
-        cp "$override" "$dest"
-    elif [[ -f "$original" ]]; then
-        cp "$original" "$dest"
-    else
-        echo "ERROR: '${relpath}' in manifest but not found (no override, no original)"
-        exit 1
-    fi
-    FILES+=("$relpath")
-done < "$MANIFEST"
-
-echo "Files to be published:"
-printf '  %s\n' "${FILES[@]}"
-
-if $DRY_RUN; then
-    echo ""
-    echo "Dry run complete. No changes made."
-    exit 0
-fi
-
-# Create orphan branch, wipe working tree, restore only manifest files
-git -C "$LOCAL_DIR" checkout --orphan _public_tmp
-git -C "$LOCAL_DIR" rm -rf . --quiet
-cp -r "${STAGING}/." "${LOCAL_DIR}/"
-
-TIMESTAMP="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-# Add only manifest files — never picks up untracked files outside the manifest
-for relpath in "${FILES[@]}"; do
-    git -C "$LOCAL_DIR" add -- "$relpath"
-done
-git -C "$LOCAL_DIR" commit -m "Published ${TIMESTAMP}"
-git -C "$LOCAL_DIR" push --force "$REMOTE" "HEAD:${BRANCH}"
-
-git -C "$LOCAL_DIR" checkout main
-git -C "$LOCAL_DIR" branch -D _public_tmp
-
-echo ""
-echo "Done: $(git -C "$LOCAL_DIR" remote get-url "$REMOTE")"